Re: AD Authentication?

2008-03-04 Thread Matt Brodeur
On Tue, Mar 04, 2008 at 08:38:25AM -0500, Kenny Lussier wrote:
>
> Does anyone know of any recent, good docs on using a Windows Active
> Directory server to authenticate Linux desktops? I am currently
> working in a place that has a Windows infrastructure (AD, Exchange,
> etc.), but we need to be able to use the existing central
> authentication for a new fleet of Linux desktops. Most of the docs
> that I found were circa 2002, and they all required patching the AD
> server, and installing software on the Windows side to allow different
> schemas.

If you absolutely can't touch the AD servers you'll have to look at
Samba's Winbind.  IIRC, you'll want a separate LDAP server to store
the SID-UID mappings, instead of letting each client make up their
own.

I don't know if the default AD schema has enough information to
authenticate Linux clients directly.  I think, at a minimum, you'll
need Services For Unix installed.  That'll add attributes which are
almost, but not entirely, unlike the normal posixAccount ones.  From
there you could use OpenLDAP meta mapping to translate MS LDAP to
something more sane.

Disclaimer:  I've probably done this exactly once, in a lab exercise
during a class.  FWIW, it's still what RH teaches as of 2006.

-- 
Matt Brodeur RHCA
[EMAIL PROTECTED] http://www.nexttime.com
PGP ID: 2CFE18A3 / 9EBA 7F1E 42D1 7A43 5884  560C 73CF D615 2CFE 18A3
Apathy Club meeting this Friday.  If you want to come, you're not invited.


pgpHl2mkR0p1U.pgp
Description: PGP signature
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: MySQL backups

2007-10-15 Thread Matt Brodeur
On Mon, Oct 15, 2007 at 05:09:02PM -0400, Ben Scott wrote:
>
> One is to have the database server do a dump/export/whatever to disk
> file(s) before the backup runs, and then just backup those files.
> Essentially a two-stage backup.  Not sophisticated, but often
> reliable.

This is what I do.  It's slow and painful, but almost 100% reliable.
My backup files are compressed raw SQL, so they can be greped, seded,
perled, and restored anywhere.

There's another option, if you have the right filesystem.  You lock
the database, take a filesystem level snapshot, unlock the DB, then
back up the snapshot.  That's supposed to work for Linux LVM2 and
several of the commercial NAS/SAN offerings.  On some systems you only
need to lock the DB for a few seconds.

-- 
Matt Brodeur RHCE
[EMAIL PROTECTED] http://www.nexttime.com
PGP ID: 2CFE18A3 / 9EBA 7F1E 42D1 7A43 5884  560C 73CF D615 2CFE 18A3
One difference between a man and a machine is that a machine is quiet
when well oiled. 


pgpWf6R0xdEmK.pgp
Description: PGP signature
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: Linux Stickers

2007-10-09 Thread Matt Brodeur
On Sun, Oct 07, 2007 at 12:19:58AM -0400, Brian Chabot wrote:
> Does anyone know of a good source for various Linux stickers/decals?
> 
> I'm looking for anything small, like those "Made for Windows" or "Works 
> with Vista" stickers in quantity.  I know Ubuntu stickers are around, 
> but I am looking for something not specific to any distribution.

Looks like CheapBytes now sells the "original" Penguin Power
stickers.  One of the sizes on that sheet is perfect for covering up
Windows stickers.

http://shop.cheapbytes.com/cgi-bin/cart/110051.html?id=qYPDuBvc

-- 
Matt Brodeur RHCE
[EMAIL PROTECTED] http://www.nexttime.com
PGP ID: 2CFE18A3 / 9EBA 7F1E 42D1 7A43 5884  560C 73CF D615 2CFE 18A3
A fool must now and then be right by chance. 


pgpFVtQsXYr1N.pgp
Description: PGP signature
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: [semi-OT] Review: Comcast Workplace cable Internet

2007-09-11 Thread Matt Brodeur
On Mon, Sep 10, 2007 at 03:56:25PM -0400, Ben Scott wrote:
>
>   We're paying $64/month.  $59/month base, plus $5/month for a static
> IP address.  (I was told a block of 5 addresses would cost $10/month.)
>  This is an introductory offer.  After a year, the price is supposed
> to go up.  Supposedly to $105/month if it happened today.  We'll see.

FWIW, I've had Comcast Workplace Standard w/ 5 Static IPs for just
over two years.  The cost is now $112.35/month after fees and taxes.
I have no complaints about that, since my 144k IDSL was $170/month and
Workplace was closer to $250/month for the first nine months.


>   There were some one-time costs related to getting a line run on the
> poles to our facility.  These will not generalize to anyone else's
> experiences, so I'm not going to post them.

Since it's already being discussed...
If you're getting a residential install (which really confuses their
sales and support folks) to a house with existing cable it'll often be
free.  At the last house we had a relatively new drop from a recent
(free) video service install.  At this house we only have the
Workplace service, and they still replaced the ancient drop line for
free.
Well, there is that 6-12 month contract thing...


>   In short, if you need or want an SLA, Comcast is not the right choice.

Comcast changes thier ToS about every three months as they constantly
reinvent the service.  My $105 6.0/768 includes the "refund if it
stops working" SLA.  The catch is that I have to report the outage,
and I have to actually request the credit.  I keep forgetting the
second part, so I've missed out on something like $30 in credits.  Oh
well.


> RELIABILITY
> 
>   Insufficient data.  We just put the Comcast feed into production for
> web surfing a few days ago.

As I hinted at above, I've had approximately two full days of total
outage in two years.  Unfortunately, at least 24 hours of that was in
one shot.

At least thier business tech support is better than the residential
clowns.  When I call to report an outage it's:
"Did you power cycle the router?"
"Yes"
"Hmm... There are currently zero subscribers on your head end.  This
is our problem.  Here's a ticket number if you need to call back..."

-- 
Matt Brodeur RHCE
[EMAIL PROTECTED] http://www.nexttime.com
PGP ID: 2CFE18A3 / 9EBA 7F1E 42D1 7A43 5884  560C 73CF D615 2CFE 18A3
All generalizations are false, including this one. 


pgpAtUwXDxWwf.pgp
Description: PGP signature
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: Maintaining RHEL3 after RHAT support expires

2007-06-14 Thread Matt Brodeur
On Thu, Jun 14, 2007 at 04:19:47PM -0400, John Abreau wrote:
>
> How long until Red Hat EOL's RHEL3? I have a RHEL3 server that
> was due to expire next week, and I renewed it for another 3 years.
> When RHEL3 is EOL'ed, I imagine I'll have to upgrade it to a
> supported version, like RHEL5.

It'll be supported until October 2010 (7 years from its release in
2003).  RHEL2.1 would go until 05/2009, RHEL4 until 02/2012, and RHEL5
is 03/2014.  That's assuming no one decides to extend the support
terms again.

See:
http://www.redhat.com/security/updates/errata/

-- 
Matt Brodeur RHCE
[EMAIL PROTECTED] http://www.nexttime.com
PGP ID: 2CFE18A3 / 9EBA 7F1E 42D1 7A43 5884  560C 73CF D615 2CFE 18A3
Anytime things appear to be going better, you have overlooked something.


pgpEdTrDTnUvj.pgp
Description: PGP signature
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: Maintaining RHEL3 after RHAT support expires

2007-06-14 Thread Matt Brodeur
On Thu, Jun 14, 2007 at 02:47:52PM -0400, Michael ODonnell wrote:
> 
> that subscription has now expired, so I wonder if there
> is some repository of freely available packages that are
> perfectly compatible and %100 sync'd with whatever RHAT
> is supplying as bugfixes and updates for RHEL3.  In other
> words, if I install something from that repository I like
> to still be able to say with a straight face that it's an
> RHEL3 box.

I guess that depends on how much you can bend the truth and keep a
straight face.  If a package didn't come from Red Hat's build system,
it's not a RHEL package.  I don't know of anyone freely redistributing
the RH-built update packages.

You can come REALLY close by switching the system to CentOS:
http://wiki.centos.org/FAQ/CentOS3#q5
At that point it's technically CentOS 3, not RHEL3.  It's the same
source RPMs as RHEL, but rebuilt by an external group (usually with a
delay of up to a few days).  For the purposes of application
compatibility it shouldn't matter.  For support contracts it probably
matters quite a bit.

-- 
Matt Brodeur RHCE
[EMAIL PROTECTED] http://www.nexttime.com
PGP ID: 2CFE18A3 / 9EBA 7F1E 42D1 7A43 5884  560C 73CF D615 2CFE 18A3
Oops. My brain just hit a bad sector. 


pgpKXbGys1hcf.pgp
Description: PGP signature
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: OT: This is a long shot

2007-03-28 Thread Matt Brodeur
On Wed, Mar 28, 2007 at 05:31:04PM +, [EMAIL PROTECTED] wrote:

> And I am hoping I am not infringing on the newly installed rules,
> but I have need to install DOS 6.22 in a VM on one of my systems,
> however, my original DOS6.22 install disk (disk 1) appears to be
> blank. Does anyone have either an ISO /dd image of Disk 1 that I could
> use to recover my original disk.

I believe what you're looking for is commonly known as a "dos boot
image".  I'm sure if you search a bit you'll find that someone will
have one.

-- 
Matt Brodeur RHCE
[EMAIL PROTECTED] http://www.nexttime.com
PGP ID: 2CFE18A3 / 9EBA 7F1E 42D1 7A43 5884  560C 73CF D615 2CFE 18A3
He who laughs last thinks slowest. 


pgpNHON7rrBvv.pgp
Description: PGP signature
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Keysigning at MerriLUG on Thursday

2007-03-13 Thread Matt Brodeur
I've been asked a few questions off-list that are probably worth
sharing with the group.  As a reminder, signup instructions are at
http://nexttime.com/mbrodeur/PGP-Mar-2007/

Q.  What is the schedule for the evening, and how long will the
keysigning take?

A.  I can't be sure until I have an idea of how many participants
there will be.  The order will be demos, presentation, signing.  If
the check sheet is fairly short (10 actual humans or less) we'll start
the signing at ~20:30 and be done by 21:00.  If it looks like a big
group I'll skip all but the most basic parts of the presentation and
start the signing at 20:00.  That should leave time for Q&A for anyone
who wants to stick around.


Q.  I don't have keys yet, or I'm not used to working with them, and I
still want to participate.

A.  See http://www.gnupg.org/gph/en/manual.html#AEN26 for a good guide
to creating a new keypair.  Once you have a key and know its ID
(KeyID), you can use the following commands to satisfy steps 2 and 3
in the instructions at my site:

# Submit key to keyserver
$ gpg --keyserver subkeys.pgp.net --send-key [KeyID]

# Send key details to mbrodeur
$ gpg --fingerprint [KeyID]

Copy and paste the output into an email to me with the subject "PGP Key
for MerriLUG".  You could of course do:
$ gpg --fingerprint [KeyID] | mail -s "PGP Key for MerriLUG" [EMAIL PROTECTED]


If you already have a nice easy GUI tool and know how to use it then
you can ignore these instructions.  If you want a nice easy GUI tool,
or want to know how to use the one you already have, then just show up
at the meeting.  I'll demo a few of the more common GPG tools,
including one or two for Windows.

-- 
Matt Brodeur RHCE
[EMAIL PROTECTED] http://www.nexttime.com
PGP ID: 2CFE18A3 / 9EBA 7F1E 42D1 7A43 5884  560C 73CF D615 2CFE 18A3
Don't let people drive you crazy when you know it's in walking distance. 


pgpKvT46DR0mN.pgp
Description: PGP signature
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: [GNHLUG] MerriLUG Nashua, Thurs 15 Mar, Encryption for Linux, Overview, Tips, Key Signing

2007-03-13 Thread Matt Brodeur
On Thu, Mar 08, 2007 at 09:57:29AM -0500, Jim Kuzdrall wrote:
>
>If you do have PGP set up, there will be a key signing party (see 
> link below) where Matt and others will be available to "sign" your key.

OK, I'm finally ready to accept keys for Thursday's keysigning.
Everything you need to know will (eventually) be at this page:

http://nexttime.com/mbrodeur/PGP-Mar-2007/

What every participant needs to do ASAP is:
1. Upload your key(s) to subkeys.pgp.net if it's not there already.
2. Send your key info (user ID, key ID, fingerprint) to
   [EMAIL PROTECTED] with the subject "PGP Key for MerriLUG"
   BEFORE 5PM on Thursday.

The keyring and check sheet are available at the above page.  If I'm
unable to retrieve your key from subkeys.pgp.net, or the fingerprint
doesn't match the one you submit, I'll notify you by email.

-- 
Matt Brodeur RHCE
[EMAIL PROTECTED] http://www.nexttime.com
PGP ID: 2CFE18A3 / 9EBA 7F1E 42D1 7A43 5884  560C 73CF D615 2CFE 18A3
Nostalgia isn't what it used to be.


pgpYBBTtSJYyT.pgp
Description: PGP signature
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: [GNHLUG] CentraLUG, Feb 5th, NHTI: Matt Brodeur GnuPG and OpenPGP, keysigning.

2007-02-05 Thread Matt Brodeur

On Thu, Jan 18, 2007 at 04:00:57PM -0500, Ted Roche wrote:
>
> Following the presentation, a PGP keysigning event will be
> held. Anyone interested in exchanging key signatures with other
> local PGP users can find details on our website,... as soon as we've
> set it up. Stay tuned.

Since I expect it to be a small group (and since I haven't yet set up
the formal keysigning scripts), I'll be moderating an informal
keysigning[1] after the presentation.  

Anyone who's interested in exchanging key signatures is encouraged to
participate.  You'll need, minimally, your key ID, key fingerprint, and
at least one well recognized photo ID.  The verification process will
go faster if you can bring several copies of your key information to
pass around to other members.  For example I'll have my Red Hat
business cards pre-printed with my RH key, plus stickers on the back
with my personal key information.  I'll also have my passport and NH
driver's license for identification.

If you have no idea what I'm talking about, feel free to show up
anyway.  I'll be doing a (relatively) brief "Why and How"
presentation and some Q&A before starting the keysigning process.

[1] 
http://cryptnet.net/fdp/crypto/keysigning_party/en/keysigning_party.html#traditional

-- 
Matt Brodeur RHCE
[EMAIL PROTECTED] http://www.nexttime.com
PGP ID: 2CFE18A3 / 9EBA 7F1E 42D1 7A43 5884  560C 73CF D615 2CFE 18A3
Life is what happens to you while you are planning to do something else. 


pgpeODetEKXrY.pgp
Description: PGP signature
___
gnhlug-announce mailing list
gnhlug-announce@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-announce/
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: Spam and mailing lists

2006-10-20 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, Oct 19, 2006 at 06:54:34PM -0400, Mark E. Mallett wrote:
>
> PS: you mentioned running sendmail 8.13.1 -- you might want to look into
> updating that.  There have been one or more security updates since then,
> tho I don't recall offhand if any were exploitable.  But there was at
> least one DOS type.

I'd imagine what is actually running is sendmail 8.13.1-3.RHEL4.5, as
shipped with RHEL4U4 and CentOS 4.4.  This contains fixes for
CVE-2006-1173, Sendmail Errata (2004-08-24), and a few small bugs.

- -- 
Matt Brodeur RHCE
[EMAIL PROTECTED] http://www.nexttime.com
PGP ID: 2CFE18A3 / 9EBA 7F1E 42D1 7A43 5884  560C 73CF D615 2CFE 18A3
A little inaccuracy sometimes saves tons of explanation. 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFFOPoAc8/WFSz+GKMRArTEAJ9CsuuL12yow44Gtd0i9FBNqRFWFwCgtPIO
8NSvZA55hGbVRCuLtYz3npA=
=GNdY
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: Problem with autofs on linux.

2006-10-02 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Mon, Oct 02, 2006 at 10:14:24AM -0400, Steven W. Orr wrote:
> Here's the problem. I added the following line to my auto.master
> 
> /usr/local   /etc/auto.viasat
> 
> Then the content of my /etc/auto.viasat contains this line:
> 
> viasat   -ro bos-srv-lnx:/usr/local/viasat
> 
> The viasat doesn't work and I'm ripping my hair out trying to figure this 
> out. The automount works fine but it eclipses the entire content of 
> /usr/local.

Looks like the expected behavior of autofs.  It wants to own the root
of any tree it's managing.  This is also why you can't use the typical
auto.home on a system that has any content already in /home.  


> The goal is that I don't want any of the files in /usr/local to be 
> eclipsed. I just want /usr/local/viasat to have the content of the 
> /usr/local/viasat from bos-srv-lnx.

I usually solve this with symlinks and/or bind mounts.  Have viasat
automounted somewhere else, then link to it from /usr/local.  It's not
pretty, but it works (usually).

- -- 
Matt Brodeur RHCE
[EMAIL PROTECTED] http://www.nexttime.com
PGP ID: 2CFE18A3 / 9EBA 7F1E 42D1 7A43 5884  560C 73CF D615 2CFE 18A3
There's an old proverb that says just about whatever you want it to.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFFIT2mc8/WFSz+GKMRAu6MAJ9CmSLjTzcZkXtbUGqwF4R7/ZuH2ACdHxou
1ghH0QmC9XUpfR93GOMrmHc=
=oIqg
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: UPSes - MinuteMan, others?

2006-08-10 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Aug 09, 2006 at 10:56:37PM -0400, Ben Scott wrote:

>  APC doesn't make anything that fits the above requirements.  Ditto
> PowerWare (formerly Best Power).  Double conversion units may be
> available, but they're larger then desired for this application.

Is the Powerware 9125[1] not what you're looking for?  It claims to be
double-conversion, and it's available in 700-3000VA models.  IIRC,
it's the replacement for the Best Power 610, which was their
lowest-end double-conversion unit.

The 1000VA model looks to be <$600 at places like CDW:
http://www.cdw.com/shop/products/default.aspx?EDC=379746


[1] http://www.powerware.com/UPS/9125_UPS.asp

- -- 
Matt Brodeur RHCE
[EMAIL PROTECTED] http://www.nexttime.com
PGP ID: 2CFE18A3 / 9EBA 7F1E 42D1 7A43 5884  560C 73CF D615 2CFE 18A3
Nothing is fool-proof to a sufficiently talented fool.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFE27K2c8/WFSz+GKMRAk8oAKCVshD06xYyTfhOfgyAzTGcPUvwVgCfSbfL
3VPQPLRVMMxEOCvKdJjuEo8=
=DGht
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: x2x

2005-04-21 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, Apr 21, 2005 at 01:42:49PM -0400, Derek Martin wrote:
> On Thu, Apr 21, 2005 at 01:19:18PM -0400, Matt Brodeur wrote:
> > remote.host$ ssh -Y control.host
> > control.host$ x2x -east -to localhost:10
> 
> This is what I tried first, sans the -Y option.  No love.  Tried with

   WORKSFORME.  I just tried it with no ssh options, and it works
fine.  I already have "ForwardX11 yes" in my ~/.ssh/config, though.  


> the -Y option.  It doesn't exist.  Is it new?  I'm on FC2 running
> openssh-3.6.1p2.  The machines at work are ancient, running RH7.3...

   Upgrade.  Seriously.  FC2 was a steaming heap of...  Well, you get
the point.  More importantly, RH just stopped releasing updates for
FC2.  FC4 is due out in about five weeks.
   And to actually answer your question, the -X option was split into
- -X and -Y around 3.8 or so.  As I mentioned above, it's not actually
necessary, though.


> Actually I tried it in the other direction as well, but that also
> didn't work.

$ ssh remote.host 'x2x -east -to :0'

   This also works for me.  Are you sure the remote hosts have X11
forwarding enabled?  I think the default for OpenSSH is to have
"X11Forwarding no" in /etc/ssh/sshd_config.

   Oh, and to respond to your earlier comment about my work load
(sendmail smarthost thread):  I must have something REALLY important
that I'm avoiding if I'm troubleshooting YOUR minor inconvenience. ;)

- -- 
Matt Brodeur   
[EMAIL PROTECTED]  

Never try to out-stubborn a cat.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFCZ/kmc8/WFSz+GKMRAiR5AJwIbABgwgrj6CMyxFNGHm2h2tiiwQCdHC4r
QS0So6XSbAUFQcnc0PbGyY0=
=BdR0
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: x2x

2005-04-21 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, Apr 21, 2005 at 12:41:59PM -0400, Derek Martin wrote:
> I'm surrounded by systems.  Having multiple displays is cool, but
> having to use multiple keyboards and mouses to access them is not.  I
> want to use x2x to solve the problem, but I have some concerns about
> typing passwords and such over unencrypted X session.  Anyone know how
> to run x2x under ssh and make it work properly?  My attempts so far
> seem to have been futile...

   It's been a few months since I've done this, but something like:

remote.host$ ssh -Y control.host

control.host$ x2x -east -to localhost:10

   ...works, I think.  It's a bit of a mind bender to keep straight
which machine needs to initiate the ssh session.  It's possible to do
it in either direction, but this way is the simplest.
   Now, there's also the issue of newer OpenSSH version restricting
what kinds of X calls can be forwarded.  I'm _pretty_ sure that '-Y'
takes care of that.  If not, try a google for something like, "x2x
XTEST fc3".

- -- 
Matt Brodeur   
[EMAIL PROTECTED]  

Everyone has a photographic memory. Some just don't have film!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFCZ+CVc8/WFSz+GKMRAk3XAJ9ap6s4HIWFsm0huX70mkJW3AB9AACeMFgG
CTrsH12qBslz/NGXlJ7jgLw=
=n9bw
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Switch port lock?

2005-02-08 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, Feb 08, 2005 at 11:26:40AM -0500, Travis Roy wrote:

> Of course the ideal method would be to have all the switches in a 
> lockable space, but that's not always possible.
> 
> I'm just looking for something to stop customers from moving their 
> switch ports and/or unplugging or plugging in cables without us knowing.

   Would it be reasonable to put the switches in small locking
cabinets?  Black Box sells a 2U locker for $235 (RM425A).  I'm sure
others do as well, and probably cheaper.

- -- 
Matt Brodeur   RHCE
[EMAIL PROTECTED]   http://www.NextTime.com

/* remember to insert clever sig here before the product ships */
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFCCQChc8/WFSz+GKMRAh4lAJ9csBQmn/2v7OQd1zvbNQ2SbpOiGACdHzdd
XxrO2I2+BjElwyZyJ50/Wqk=
=uPb2
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Looking for a good portable linux system

2004-12-22 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Dec 22, 2004 at 10:03:01AM -0500, Dan Jenkins wrote:

> The slocate database build is scheduled in my default cron (from 
> Mandrake's default install) at 4:22 am on Sunday.
>
> Since it is a scheduled task, why not just schedule it outside of 
> presentation times?

   If the system wasn't up at 04:22, then anacron will reschedule the
job for some time within 60(?) minutes of startup.  In the case of a
system that was started just to do a demo, it's pretty likely that the
slocate job would kick off right in the middle.
   So, to avoid the situation you'd have to disable or reconfigure
anacron.

- -- 
Matt Brodeur   RHCE
[EMAIL PROTECTED]   http://www.NextTime.com

You can never tell which way the train went by looking at the tracks.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFByajhc8/WFSz+GKMRAqPDAKC7s+Sbnniyfi1kixqmu5vSwGArbgCeK16v
TLHToKcM/kbEZhP/Gymavq8=
=gixp
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: How to stop a cascade of mail delivery failure messages

2004-12-15 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Dec 15, 2004 at 11:35:36AM -0500, Dan Coutu wrote:

> So first let me ask, does sendmail actually work this
> way, with no limit on ping-pong bounces?

   What SHOULD happen is that the second bounce (the double-bounce)
gets sent to postmaster@ instead of the invalid user.  So in your case
it should look like:
   Spammer forges [EMAIL PROTECTED] to [EMAIL PROTECTED]
   random.foo bounces "User Unknown" to [EMAIL PROTECTED]
   client bounces the bounce to [EMAIL PROTECTED]

   Now, if someone's bouncing postmaster mail I'm not sure what will
happen. 


> If it does then there must certainly be a way to stop it, such as
> silently dropping failed mail.

   You can configure a custom delivery address for double-bounces.  In
some places I've used this in the sendmail.mc:

dnl # Drop all double-bounces.
dnl # Either supply an address (postmaster) or null string to drop.
define(`confDOUBLE_BOUNCE_ADDRESS', `')dnl

   I'm not sure what this translates to in .cf syntax.  It's something
frightening, I'm sure.

- -- 
Matt Brodeur   RHCE
[EMAIL PROTECTED]   http://www.NextTime.com

Hard work has a future payoff. Laziness pays off now. 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBwJT+c8/WFSz+GKMRAik2AKCUcP1X9WBfMzBFvHwff3/l2QLh+gCfQIez
kNEsZfXj9zBBJTscUHeSBsQ=
=o7Vq
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Wireless *switch*?

2004-12-07 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, Dec 07, 2004 at 10:10:07AM -0500, Cole Tuininga wrote:

> I don't have a lot of experience with wireless access points, but I'd
> gotten the impression that most (if not all?) of them act as a router. 
> For instance, the one I have right now gets a single IP on the existing
> network (specifically, 192.168.101.100) and then all devices that
> wirelessly connect are NAT'd behind it on their own class C
> (specifically, 192.168.0.0/24).  
> 
> Am I making sense?

   You're making sense, but you're also making this harder than it
needs to be.  Assuming you already have a wireless router
(residential gateway, broadband sharing device, whatever), you can do
the following:
   1. Log in to the admin interface
   2. Disable DHCP service
   3. Set the LAN IP to something in your existing network.
  I like to use the top or bottom of the range for network
  devices, in your case 192.168.101.254 might work.
   4. Disconnect the WAN side of the router and reconnect your
  existing private network to a LAN port instead.

   That should be it.  If you ignore the WAN side of these devices
they're nothing more than a combined access point and 4+ port switch.
You just want to make sure that the router's DHCP is disabled so that
your existing DHCP server will be the only one on that network.

- -- 
Matt Brodeur   RHCE
[EMAIL PROTECTED]   http://www.NextTime.com

Time sure flies when you don't know what you're doing.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBtdhKc8/WFSz+GKMRAlATAJ0We5wCxvGAXBfBGxvCPea7mnIrlgCbB196
iosJU/FCAbGCnJ6sVhWBCBs=
=ZQNI
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Alternatives to rpmfind.net

2004-10-27 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Oct 27, 2004 at 11:50:22AM -0400, Michael ODonnell wrote:

> Any recommendations for RPM repositories?

   That depends on what type of RPM-based system you're using.  For
Red Hat/Fedora I'd try:
Fedora Extras:  http://www.fedora.us/
Fedora Extras (non-us): http://rpm.livna.org
Dag Apt Repository: http://dag.wieers.com/home-made/apt/
ATrpms: http://atrpms.net/
FreshRPMS:  http://freshrpms.net/

   Each of these pages offers direct access to the files and
instructions for configuring your favorite package grabber (apt, yum,
up2date, etc).  If you're truly brave, you can put every repository
you find in one .conf and pretend it's a Debian system.  A
pre-configured yum.conf for Fedora Core 2 can be found here:
http://www.fedorafaq.org/samples/yum.conf
   Similar resources do exist for other distros, but I don't know
where to look.  A web search for "[packagename] rpm" will usually turn
up one or two useful leads.

- -- 
Matt Brodeur   RHCE
[EMAIL PROTECTED]   http://www.NextTime.com

Never hit a man with glasses. Hit him with a baseball bat. 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBf8lTc8/WFSz+GKMRAjPTAJ4jzOotLBa9I7EzgHwkcTWmIx5oBACfX0vd
vcIsplgMN1eGO/ppPGtdtS8=
=Y6kI
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: multi-hop ssh port forwards?

2004-10-18 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Mon, Oct 18, 2004 at 11:34:08AM -0400, Bill McGonigle wrote:

> Yeah, that's what I thought would work, but empirically doesn't.  ssh 
> tells me something like:
> 
>   channel 2: open failed: connect failed: Connection refused


   Hmmm, WORKSFORME.  I just tested this command:
ssh -C -x -t -L 8000:localhost:8000 $LOCALSERVER \
ssh -L 8000:$REMOTESERVER:80 $BASTION

   ...and it works as expected.  Your error indicates that one of the
port redirectors is being blocked.  The most likely one is that your
bastion host can't access port 80 on the internal host.  Firewall
rules on the bastion, maybe?  Is the remote server actually listening
on port 80?

- -- 
Matt Brodeur   RHCE
[EMAIL PROTECTED]   http://www.NextTime.com

It's not hard to meet expenses, they're everywhere. 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBc+hCc8/WFSz+GKMRAhfHAJ9/Im001t54GmAplmCHyB3XRFKGNgCgqD1Q
VnYHxZX1Shj8X7sVJp6pF+4=
=8bVy
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: multi-hop ssh port forwards?

2004-10-18 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Mon, Oct 18, 2004 at 10:15:10AM -0400, Bill McGonigle wrote:

> Has anybody figured out how to do ssh tcp port forwards across multiple 
> hops?
> 
> I'd like to ssh -L from any client, to a known server, then a bastion 
> host, and do port forwards from my client machine to the bastion host 
> to access a port on a machine behind the bastion host.

   I think you're looking for something like this:

$ ssh -L 8000:localhost:8000 myserver ssh -L 8000:insideserver:80 bastion

   It's just one ssh client spawning another, each with the necessary
port forwarded.  This could probably be extended to dynamic port
forwarding (-D), but I've never tried that.

- -- 
Matt Brodeur   RHCE
[EMAIL PROTECTED]   http://www.NextTime.com

A bird in the hand is safer than one overhead.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBc9Ytc8/WFSz+GKMRAowaAKCxWa8uw0rQGyb3dASZm0nCCHGv9gCffdNA
3DQnWxRmGP/dfP0+3uNcJIo=
=iQbC
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Help with cp syntax

2004-07-07 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Jul 07, 2004 at 05:23:43PM -0400, Ted Roche wrote:

> cp -Rv /home/troche/Present/1999/*.* /var/www/html/Present/1999/ 
>
> The files in the 1999 folder are copying fine, but the files in
> subdirectories of the source 1999 folder, subdirectories that don't
> exist in the target, are being ignored. Isn't that what the "-R" as
> in recursive is supposed to do?

   Change that "*.*" to just "*".  Right now you're telling cp to only
copy files/directories that contain at least one dot.  My guess is
that you directory names don't in fact have dots in them.

- -- 
Matt BrodeurRHCE
[EMAIL PROTECTED]http://www.NextTime.com

Go the extra mile -- It makes your boss look like an incompetent slacker.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFA7G6Wc8/WFSz+GKMRAukYAJwIJoiWeEy/crMoLW0lOqfFYAcFiQCggyJO
Dem9IUKrDqeiNKounbxNhcU=
=rKcf
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Gigabit Ethernet cards?

2004-06-10 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, Jun 10, 2004 at 09:26:33AM -0400, Ben Scott wrote:

>   Anyone here have any practical opinions on good Gigabit Ethernet interface
> cards?  Likewise, bad experiences, teaching things to avoid, are also
> valuable.

   I'm going to go against what everyone else is saying and report bad
experiences with e1000 cards.  A few years ago (which might make some
difference) I tried using a handful of Pro1000/XT cards, both copper
and fiber.  While they "worked" just fine, performance was erratic and
generally poor.  I was lucky to see >500Mb/s, and that took a lot of
work.  I actually had better luck with a cheap ($90) Netgear GA622.
   Where I needed serious speed I eventually went with a pair of
Syskonnect SK9821 copper cards.  At $500 each it was slightly painful,
but probably worth it.  In machines with 64bit/33MHz PCI I could push
750-800Mb without needing jumbo frames, which our switches wouldn't do
anyway.

   None of this is likely helpful, as it's ancient history by now.
I'm sure the e1000 driver has improved greatly, and the problems I had
have just gone away.  My only recent experience was with an IBM T41
which "just worked" although I never took it above 100Mbit. 

- -- 
Matt BrodeurRHCE
[EMAIL PROTECTED]http://www.NextTime.com

Always remember you're unique, just like everyone else. 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFAyHS/c8/WFSz+GKMRAlwPAJ0Soe0cuU4QBxG3HDBj/RK6hUCJMwCgllZw
OYP+s0Iv5OK8ZsUZjukoGD8=
=7Z62
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Forcing expiration of DHCP lease

2004-06-03 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, Jun 03, 2004 at 10:32:46AM -0400, Michael ODonnell wrote:
 
>  I did RTFM but can't find anything that tells how to direct the
>  client to inform the server that the lease should expire.

   Not that I've ever done it, but what about spoofing the MAC of your
old NIC long enough to issue a DHCP release?  I'm not sure of the
exact mechanism, but it should be possible.  dhclient has a '-r'
option to release the current lease.

- -- 
Matt BrodeurRHCE
[EMAIL PROTECTED]http://www.NextTime.com

I used to be indecisive, now I'm not sure.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFAvz+Wc8/WFSz+GKMRAi73AKDAQW02XqLmrasqQP5r5JdjFMEDiQCfVTnO
MzHvW6IPzf1RdjsV9m+jf7U=
=oaSC
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Beowulf?

2004-05-20 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, May 20, 2004 at 08:52:07AM -0400, Kenneth E. Lussier wrote:
>  Does anyone know what happened to the Beowulf project? beowulf.org has
>  been down for a long time, beowulf-underground.org has closed up shop,
>  and the community section of www.scyld.com is extremely sparse. 
>  
>  Can anyone suggest any other good sites for information on building
>  beowulf clusters or parallel processing?

   It looks like their site is down as well, but you could try to get
in touch with someone from the Debian Beowulf Users Group (DeBUG).
The Wayback Machine has the site as it appeared a year ago:
http://web.archive.org/web/20030524145821/http://extreme-linux.com/

   I haven't been to a BLU meeting in a while, but Kurt Keville used
to frequent them.  Of course, I'm thinking back a few years, so the
whole project may have disappeared long ago.

- -- 
Matt BrodeurRHCE
[EMAIL PROTECTED]http://www.NextTime.com

You can't fall off the floor. 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFArMTjc8/WFSz+GKMRAvZQAJkBeEW2qfR2cy02GPRTNXl/EH7HeQCgopBx
GWAM5hQ4zjYYPj1dnZylz+Q=
=RZj3
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Hardware Question

2004-04-08 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, Apr 08, 2004 at 10:17:12AM -0400, Tom Buskey wrote:

> I've found PC133 ram and PC100 ram are not interchangeable.  If you have a
> 100Mhz system, you can't put PC133 ram in it.

   Huh?  I do this all the time.  The reverse is definately true, but
I can't remember ever having problems underclocking memory.  I'm
pretty sure I've even run PC133 in a PC66 system.
   It is of course possible for a system to detect the memory type and
refuse to use something it thinks is too fast.  I haven't seen it
(again, only the reverse), but that may be what you've run in to before.

- -- 
Matt BrodeurRHCE
[EMAIL PROTECTED]http://www.NextTime.com

When choosing between two evils, I always like to take the one I've never
tried before.
-- Mae West, "Klondike Annie"
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFAdaVVc8/WFSz+GKMRAhTaAJ4tlhW6Bo+c3BY7CjPGZFPoQsTw8wCeKiyY
BDY6UjQ0CZ0zSdUibVY7jM0=
=DjSp
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Video cards, Xinerama, and IC design tools.

2004-02-13 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Fri, Feb 13, 2004 at 03:12:04PM -0500, Ken D'Ambrosio wrote:

> So: does anyone have any suggestions for video cards that work well,
> and FAST, in dual-head mode? Preferably one video card (akin to the
> Matrox G-450, which didn't work). Price, while something to
> consider, is not a particular obstacle.

   How about something nVidia based with dual outputs on a single
card?  I think (although I HOPE I'm wrong) that this is the only way
to get 3D acceleration on both heads with Linux.  You have to be using
nVidia's binary drivers with the TwinView feature.  Just check the
driver README for (un)supported cards before you buy.

- -- 
Matt BrodeurRHCE
[EMAIL PROTECTED]http://www.NextTime.com

Of _course_ it's the murder weapon.  Who would frame someone with a fake?
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFALVFuc8/WFSz+GKMRAoXqAJ9aMM6A9yNDh+AHLHoDKtghXoLATACguJ5X
P59uBH082+zbZ4HqzeXhnCA=
=sKYs
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: SPAM and procmail

2004-01-14 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Jan 14, 2004 at 06:41:49AM -0500, Brian wrote:

> For anyone interested... It seems that a lot of spam is starting to slip
> through Spam Assassin again.  The majority of the messages seem to
> either have "obvious" subject lines, or have ALT-- in the message
> body to try to hide dummy words to throw off the weighting.

   I have seen probably 10-20 messages in the past week that have a
Habeas Warrant Mark (www.habeas.com), but are obviously spam.  The
default SA configuration will assign -8.0 points for this, usually
outweighing other indicators and letting the message through.  This
line in your user_prefs or local.cf could help:

score HABEAS_SWE 0.00

   I chose to completely disable the Habeas check, since it just seems
too easy to forge.  You might want to instead assign it a more
reasonable score (like -2.0 or so), so that a really spammy message
will still count as a hit.
   As an interesting note, all of the messages that have slipped
through due to the Habeas issue have also scored 90+ on the Bayes
test.  Since my BAYES_99 score is 7.5, the HABEAS_SWE of -8.0 was
completely nullifying that result.  By lowering the effect of the
Warrant Mark these messages will be properly tagged.


- -- 
Matt BrodeurRHCE
[EMAIL PROTECTED]http://www.NextTime.com

Anytime things appear to be going better, you have overlooked something.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFABT2yc8/WFSz+GKMRAh2NAJ9OwdGUm43UGOdHOycMk2v3Q4bCWACfWLnN
Pv9I2CHPoef8EfTMIW7GoJk=
=vTzk
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Fedora ?

2003-10-22 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Oct 22, 2003 at 09:15:52AM -0400, Sharpe, Richard wrote:

> Has anyone tried Red Hat's Fedora ? and where did you download it from
> the Red Hat site seems to always be busy and not accepting connections and I
> don't seem to find it on the mirrors, or it could be my bad eye sight.

   I'm running it on a few workstations right now, and have been since
it was still called Red Hat Linux. ;)  ATM, Fedora Core Test 3 is
tracking Rawhide for updates, and Rawhide is closed until later today
(probably).  IOW, you could install from the FCT3 ISOs, but you can't
get the latest code right now.

   That being said, I was just able to get a connection to one of the
ftp.redhat.com sites (66.187.232.30).  It'd probably take a week or so
to actually get three ISOs from there, so I'd recommend
redhat.newaol.com.  They're not on the official mirror list, but they
have the files and they're fast (~525kB/s).
   Helpful hint: The beta release name is "severn", so that's the
directory to look in.  Try:
ftp://redhat.newaol.com/pub/redhat/linux/beta/severn/en/iso/i386/severn-i386-disc[123].iso

   I'll probably bring a set or two of CDs to the meeting tonight, in
case anyone wants to try it out.

- -- 
Matt BrodeurRHCE
[EMAIL PROTECTED]http://www.NextTime.com

You're out of memory
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/lp62c8/WFSz+GKMRAlBNAKCBPgM8t8ls2KCmhYPT4yD6T6f2XQCfdngp
ULByja42nGlkZYVNwMcRxv8=
=WorU
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: PGP/GPG Key signing party

2003-07-17 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 17 Jul 2003, Derek Martin wrote:

> The trouble is, they're always on the same night (or at least, BLU and
> the Merrimack chapter of GNHLUG, which oddly enough meets in Nashua).

   You, as usual, are on crack.  Officially BLU is the THIRD Wednesday of
every month, and MerriLUG^WMEBDA^WMELBA is the FOURTH.  Occasional issues
with calendar interpretation may have placed the Nashua meeting a week
early a few times in the past year or so, but that's not normal practice.  
If you don't believe me, check the web pages:
http://wiki.gnhlug.org/twiki2/bin/view/Www/OurChapters
http://www.blu.org/cgi-bin/calendar


- -- 
Matt BrodeurRHCE
[EMAIL PROTECTED]http://www.NextTime.com

- 
| Haste does not bring success.|
- 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/Ft4qc8/WFSz+GKMRApNeAJ4mebacCTpJQxD7sHc9CR+ZOfc6lACglR0a
TXOckjw/rZJtYyS+BZkEXuM=
=2+S0
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: DSL firewall/router solutions?

2003-07-14 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Mon, 14 Jul 2003, Ben Boulanger wrote:

> On Mon, 14 Jul 2003, Jerry Feldman wrote:
> > I have a Linksys BEFW11S4 4 port Wireless.
> 
> I have the same thing and 2 of my friends do as well - we all had the same 
> issue... all of a sudden, the thing just started freaking out,

   I've personally seen both sides of this case.  I'm on my second 
BEFW11S4, having left the first with my parents for them to use.  I 
typically use mine as an AP/switch only, and my parents use theirs as a 
gateway to TW RoadRunner service.  I have had no problems with either one.
   Two cow-orkers recently purchased this model on my recommendation and
have each had problems with theirs.  Off the top of my head I can remember
DHCP/PPPoE dropouts, port forwarding mixups, and general flakiness.  
Usable, but frustrating.

   My best theory on the issue is that this particular model has been 
"improved" to its current state.  My two units were both purchased 1-2 
years ago and are the original hardware release.  The other two were new 
in the last 6-9 months, and are probably version 3 or 3.2.  It's quite 
possible that recent versions just aren't as stable as the original and no 
amount of firmware patching can fix it.
   But that's just a theory.


- -- 
Matt BrodeurRHCE
[EMAIL PROTECTED]http://www.NextTime.com

Why be difficult when with a bit of effort you can be impossible? 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/EwQzc8/WFSz+GKMRAqNNAJ9tc0O1j53O7c4XIr/t8j8tDbaDcwCdE4Me
mxCjkf+65AbtU+m6DiMYpXE=
=9QR2
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: OT: Help with computer config

2003-07-08 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 8 Jul 2003 [EMAIL PROTECTED] wrote:

> Actually, I think that is where the problem lies.  I am seeing this at the boot
> screen during POST, around the memory check.  I haven't done anything with the
> Linux kernel as of yet.  I wanted to solve the system level issue before
> optimizin the kernel.
>
> > >  Unknown Processor  ( 1.100 ghz )
> > > I have an MSI K7TTurbo - Socket A motherboard.

   Try upgrading the BIOS itself.  Searching on Google Groups for "MSI K7T 
Turbo unknown processor" indicates that there is a CPU recognition issue 
with older BIOS revs.  The MSI web site should have the new version and an 
update utility.


- -- 
Matt BrodeurRHCE
[EMAIL PROTECTED]http://www.NextTime.com

We cannot command nature except by obeying her.
-- Sir Francis Bacon
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/CxA0c8/WFSz+GKMRAmM5AKCxfgWS0zBcHh6qtbOTsVkMf7ZhlgCfWcKl
J5GH/KjJKthN314OGNkCKHs=
=QmEI
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: How-To for switching from DHCP to static IP

2003-07-01 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 1 Jul 2003, Kenny Donahue wrote:

> I was thinking of trying RH 9 but I heard bad things.  Are they true?

  Yes, it's all true. ;)

  Seriously though, it depends on what "bad things" you've heard.  I 
personally run RHL 9 on something like 15 systems, both workstations and 
servers.  A few of those have been on 9 since release day.  I haven't run 
into any real show stoppers, but there are a few quirks:

  - GCC 3+ is exceptionally picky about C++ code.  Stuff that compiled 
without warnings on 2.xx dies with numerous errors now.  Not a problem for 
me personally, but a cow-orker had to wrestle with it.
  - UTF-8 (Unicode).  Good idea, but right now it can be a PITA for some 
apps.
  - NPTL (Posix Threads).  This was an issue at first for some binary-only 
software, but I haven't heard any complaints recently.
  - Apache 2.0 (since you're coming from RHL 7.3/Apache 1.3).  There are a 
few configuration options that have changed, but there's a good transition 
document at apache.org
  - Sendmail MTA/MSP split in 8.12+.  Another config change that's pretty 
well documented.
  - Various other daemon config issues
  - The Red Hat Desktop.  If you were following the flame^Wdiscussions 
around the release of 8.0 you've already heard about this.  Red Hat 
changed the look of the desktop environment, but it's pretty easy to 
customize.  Almost a non-issue. 
   - Various applications have been removed.  In most cases there are
newer/better(?) replacements, and the old apps are still available 
elsewhere.  PINE and fortune are ones I'd miss if Guru Labs didn't provide 
such nice RPMs for them.


> This is a fairly new install. I was thinking about starting over
> and applying the network setup at install time.  That ALWAYS
> works.

   This might not be a bad idea, especially for a server.  I've done 
plenty of RH upgrades, but it's never quite the same as a fresh install. 

- -- 
Matt Brodeur RHCE
[EMAIL PROTECTED] http://www.NextTime.com

The problem with reality is that it doesn't have any background music. 

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD4DBQE/Abpjc8/WFSz+GKMRAu/QAJdMAS+GqjMNoml5KwcS1Y6pJDm7AJ4/J4In
m9Go6Xke5TXh6R0Gu3Ez/Q==
=sEWI
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: Google changed their logo?

2003-06-17 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 17 Jun 2003 [EMAIL PROTECTED] wrote:

> When did Google change the logo on their website to the Escher-esque 
> style?  While I like the new logo, I think I liked the old one 
> better, at least it added *some* color to the site :)

   Google changes their logo quite often.  Usually it's due to a holiday, 
special event, or promotion.  In this case it happens to be Escher's 
birthday.

"Maurits Cornelis Escher, born in Leeuwarden, 17 June 1898..."
http://www.etropolis.com/escher/artist.htm

- -- 
Matt Brodeur   RHCE, GSEC
[EMAIL PROTECTED] http://www.NextTime.com

You worry too much about your job. Stop it. You are not paid enough to worry.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE+71cic8/WFSz+GKMRAt0uAKCA9hwanZ/EhYENeIBagcUdYnhV6gCbBfdd
hbJypwYEI/TD6dLYF37harY=
=NCNW
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss


Re: PDA Suggestions

2003-06-06 Thread Matt Brodeur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 5 Jun 2003, Bob Bell wrote:

> Although I haven't used one, I think a Palm Zire might fit your
> needs nicely.
>snip<
> If you need more memory, a Palm m105 may also do the job

   I was just about to suggest the same models, with one addition.  For a 
little over $100 ($130 at CompUSA, probably less elsewhere) one can get 
the Palm m125.  It's similar to the m105 with the addition of a MMC/SD 
card slot and the new(er) "Universal Connector".  This is the same 
connector used on the 500, 700(?), and Tungsten series, and will have 
better peripheral support in the near future.
   The SD slot is a nice feature if you want to carry lots of data with 
you.  I keep all of the LDP howtos and a few novels in my m505.


- -- 
Matt Brodeur   RHCE, GSEC
[EMAIL PROTECTED] http://www.NextTime.com

The meek shall inherit the Earth after we're done with it. 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE+32vUc8/WFSz+GKMRAhH/AKCKu64nLwEdeTx/A5LzAX37haMERACgsFYF
EYX7kzqQzBBwC/fBbFDRouU=
=LbEc
-END PGP SIGNATURE-
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss