To fwbuilder or not?

2001-12-11 Thread Riku Meskanen

Howdy,

Thinking of ipchains to iptables etc. transition, has
Red Hat yet considered adding Firewall Builder to
distribution instead of continuing developing
firewall-config ?

The firewall-config AFAIK does not support iptables yet,
so those of us needing stateful inspection are out of luck
with it. Thus I would advise you to check Firewall Builder
first before putting more effort on firewall-config.

http://www.fwbuilder.org/

It's very nice and well implemented suite, with
well thought separate XML represented backend,
object oriented (GTK)GUI and rules compiler.

Because of this well though idea behind and basis
it's possible to get multiple platform support
done easily too, not just ipchains to iptables
transition but for completely different platforms.

http://www.fwbuilder.org/pages/Documents/FAQ/FAQ.html

All this will help a lot in upgrades, centralized
management of rules, upcoming migrations etc.

I'm very supprised that even though I was looking
just this kind of tool some time ago I did not
come across with fwbuilder, it would have saved
me lot of effort just if I had known about it.

HTH,

:-) riku

-- 
[ This .signature intentionally left blank ]



___
Redhat-devel-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-devel-list



Re: To fwbuilder or not?

2001-12-11 Thread Hetz Ben-Hamo

Umm, some (redhat) people may not like it - but there is a KDE application 
which just simply fits - it's VERY easy to use (even for people who barely 
know what is TCP/IP), supports IP chains and IP Tables, creates very good 
scripts, and a very nice GUI. It's called GuardDog, and you can check it here:

http://www.simonzone.com/software/guarddog/

Ofcourse - since Red Hat specifically like GNOME stuff, I doubt if it will be 
ever used by Redhat or installed as default.


 The firewall-config AFAIK does not support iptables yet,
 so those of us needing stateful inspection are out of luck
 with it. Thus I would advise you to check Firewall Builder
 first before putting more effort on firewall-config.

 http://www.fwbuilder.org/

 It's very nice and well implemented suite, with
 well thought separate XML represented backend,
 object oriented (GTK)GUI and rules compiler.

-- 
Hetz Ben Hamo



___
Redhat-devel-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-devel-list



undefined symbol: mknod

2001-12-11 Thread Radu Fiilip


Hi,

Note: this error I got is happens actually on a Mandrake 8.1 system, but
the same error I got on a RH 7.2 system. And since I'm looking
desperatelly for a soution, I hope that posting message here could help.
Thank you.

When I'm running a program that compiled perfectly, I got the following
error: undefined symbol: mknod

My machine is:

radu@D5E03753 cpic_src]$ uname -a
Linux D5E03753 2.4.8-26mdk #1 Sun Sep 23 17:06:39 CEST 2001 i686 unknown
[radu@D5E03753 cpic_src]$ cat /etc/redhat-release
Mandrake Linux release 8.1 (Vitamin) for i586

radu@D5E03753 radu]$ rpm -qa | egrep (glibc|compat|binutils|gcc)
gcc-2.96-0.62mdk
compat-glibc-6.2-2.1.3.2
gcc3.0-cpp-3.0.1-1mdk
glibc-devel-2.2.4-6mdk
binutils-2.11.92.0.7-2mdk
gcc-c++-2.96-0.62mdk
compat-egcs-6.2-1.1.2.16
glibc-2.2.4-6mdk
gcc-cpp-2.96-0.62mdk
libgcc3.0-3.0.1-1mdk
gcc3.0-3.0.1-1mdk
libbinutils2-2.11.92.0.7-2mdk

In GNU site I found this

 ---

 2.7. Looking through the shared libc file I haven't found the
 functions `stat', `lstat', `fstat', and `mknod' and while linking on
 my Linux system I get error messages. How is this supposed to work?
 Believe it or not, stat and lstat (and fstat, and mknod) are supposed
 to be undefined references in libc.so.6! Your problem is probably a
 missing or incorrect /usr/lib/libc.so file; note that this is a small
 text file now, not a symlink to libc.so.6. It should look something
 like this: GROUP ( libc.so.6 libc_nonshared.a )

 --

[radu@D5E03894 radu]$ find /usr/lib -type f -print | egrep 
(libc\.so|libc\.a|libc_nonshared\.a)
/usr/lib/libc.a
/usr/lib/libc.so
/usr/lib/libc_nonshared.a

[radu@D5E03894 radu]$ cat /usr/lib/libc.so
/* GNU ld script
   Use the shared library, but some functions are only in
   the static library, so try that secondarily.  */
GROUP ( /lib/libc.so.6 /usr/lib/libc_nonshared.a )



Searching with google I did not find any usefull result. Program was
compiled as:

gcc -o cpi01 cpi01s.c -lc

(but I got the same error also without compiling with -lc option)

Can somebody point me what is/I'm doing wrong?

Thank you,
  Radu

-- 
Radu Filip
   Network Administrator @ Technical University of Iasi
[EMAIL PROTECTED] Information Technology and Communication Center
http://socrate.tuiasi.ro/  [EMAIL PROTECTED] | http://ccti.tuiasi.ro/




___
Redhat-devel-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-devel-list



Re: To fwbuilder or not?

2001-12-11 Thread Roy-Magne Mo

On Tue, Dec 11, 2001 at 04:07:28PM +0200, Riku Meskanen wrote:
 Howdy,
 
 Thinking of ipchains to iptables etc. transition, has
 Red Hat yet considered adding Firewall Builder to
 distribution instead of continuing developing
 firewall-config ?
 
 The firewall-config AFAIK does not support iptables yet,
 so those of us needing stateful inspection are out of luck
 with it. Thus I would advise you to check Firewall Builder
 first before putting more effort on firewall-config.
 
 http://www.fwbuilder.org/

IMHO would be an overkill in replacing lokkit. As a direct replacement
for lokkit, I would look at http://firestarter.sourceforge.net/. 

Supports both ipchains and iptables, and has a wizard/druid view of
things. And it is a part of the gnome project. 

But fwbuilder would be nice to have in the distribution.

-- 
carpe noctem



___
Redhat-devel-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-devel-list



Re: To fwbuilder or not?

2001-12-11 Thread Riku Meskanen

Howdy,

Thanks for you comment, I prefer KDE too, IMHO it's
more complete than what GNOME currently provides,
but Gnome softare project are getting better all the
time.

Granted the guarddog has bit smaller footprint, but
it appears to me that the little more fwbuilder demands
will pay you back, if you look carefully for example

http://www.fwbuilder.org/screenshots/6.html

check what's in the picture under the Firewals branch,
notice the fw1, guardian-* etc. I think with a little
work  fwbuilder could possibly support (import/export)
guarddog too.

The footprint is big issue on small single-media
firewalls¹ ofcourse, but I don't think it's primary
concern when you run fw on workstation or like.

¹) http://www.bbiagent.net/, http://www.coyotelinux.com/,
   http://www.shorewall.net/ or any of the like

Nothing prevents actually creating a single rpm package
from abovementioned (refer to one of these¹ or similar
tftp loadable) which then could be configured on workstation
and using the loopback driver creating the complete fw-image
for the standalone fw which does not need hard disks at all.

Keeping the xml-configurations in fwbuilder and when
new release is available upgrade the rpm package and
regenerating new ready to boot image in few seconds,
with your own previously defined fw-rules :)

The *BIG* thing in fwbuilder is that with that you
can maintain configurations platform independently
and that makes life *LOT* easier with upgrades etc.

But, hey both could be included or good choices
to be added to powertools first or whatever, I'm
so happy that I found fwbuilder that I don't care
at the moment weheee :

:-) riku

On Tue, 11 Dec 2001, Hetz Ben-Hamo wrote:
 Umm, some (redhat) people may not like it - but there is a KDE application
 which just simply fits - it's VERY easy to use (even for people who barely
 know what is TCP/IP), supports IP chains and IP Tables, creates very good
 scripts, and a very nice GUI. It's called GuardDog, and you can check it here:

 http://www.simonzone.com/software/guarddog/

 Ofcourse - since Red Hat specifically like GNOME stuff, I doubt if it will be
 ever used by Redhat or installed as default.


  The firewall-config AFAIK does not support iptables yet,
  so those of us needing stateful inspection are out of luck
  with it. Thus I would advise you to check Firewall Builder
  first before putting more effort on firewall-config.
 
  http://www.fwbuilder.org/
 
  It's very nice and well implemented suite, with
  well thought separate XML represented backend,
  object oriented (GTK)GUI and rules compiler.

 --
 Hetz Ben Hamo



 ___
 Redhat-devel-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-devel-list


:-) riku

-- 
[ This .signature intentionally left blank ]





___
Redhat-devel-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-devel-list



Re: Mozilla Cookie Problem

2001-12-11 Thread Mike Burger

You enable cookies in Mozilla the same was as in 
Netscape...Edit/Preferences.

On Mon, 10 Dec 2001, John P. Verel wrote:

 Evening.  Running mozilla-0.9.2.1-2 here, via RedHat 7.2 distro.
 
 I'm having all sorts of problems with sites that say I don't have
 cookies enabled, when in fact I do.
 
 I do not have this problem with netscape.  Anyone know of this thing?
 
 Thanks.
 
 John
 
 



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RE: Wireless networking

2001-12-11 Thread Patrick Nelson

Patrick Nelson wrote:
-
Art Ross
Drew Hunt wrote:

 Mandrake 8.1 with a LinkSys WPC11 (~$100) and wlan (www.linux-wlan.org)
 drivers.  No complaints.  You'll need an access point for the lab, either
a
 linux box with wireless set to masq or one from a vendor.  I use LinkSys
 4-port wireless Cable/DSL/Wireless aP with integrated firewall (~$200).
 Works fine and has an easy web-based interface.

 Drew

  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED]]On Behalf Of Art Ross
  Sent: Wednesday, December 05, 2001 7:29 PM
  To: [EMAIL PROTECTED]
  Subject: Wireless networking
 
 
  Our department teaches a Fundamentals of Linux class.  This class has
  grown in popularity to the point where our networked lab stations needs
  to be increased.  In order to get the additional network connections we
  would have to go through an enormous amount of paperwork and delays.
  This won't work for the Winter quarter offering.  We can bring in
  additional network connections from a switch by dropping the lines from
  the ceiling but this gets messy and difficult to manage.  We thought
  that wireless networking for the lab would be neater and we also could
  isolate the lab on a subnet with a gateway behind the access point for
  the wireless.
Does anyone know how well Linux works with wireless and what products
  will work best with RedHat or maybe Mandrake?  If this is a terrible
  idea, let me know.  I want to hear the truth.  Our department can afford
  the equipment as long as individual items are less than $500.
Thanks for the link to the linux-wlan project.  We'll research our position
more and hopefully find an economical solution.
-

OMG, I had tried this with a Melco Buffalo PCMCIA card (WLI-PCM-L11) in the
past and for some reason didn't get connected.  Not sure if I was in a hurry
then but just didn't get it working.  Saw the link above and decided to just
look into it.

So I went to techworks.com (where I purchased our AirStation and PCMCIA
cards) which pointed to buffalotech.com (or something like that) and found
that they don't support Linux (--brilliant, just brilliant), but they had a
URL to the Jean Tourrilhes's HP supported site
(http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/Wavelan.html).
Started reading and he made it sound easy so again I plugged in my wireless
card and fired it up.  

No connection to the AirStation on bootup (expected).  The tool iwconfig
(part of the wireless tool kit, standard on RH72) showed the device
connected to eth0.  So I used iwconfig to set the essid, the mode, the rate,
and the key.  Then pinged the ip of the access point (AirStation) and nearly
died when the pings came through.  It didn't survived a reboot, but I
followed information to /etc/pcmcia/wireless.opts and found the section for
my card (it was actually listed can you believe it?  How often does that
happen?) edited the variables vales for essid, mode, rate, and key.  Then
did a /etc/init.d/pcmcia stop and a /etc/init.d/pcmcia start and checked my
connectivity -- connected.  Rebooted and this time it survived the reboot.


Yeah!  Stoked!

That was it my last reason to keep MS on my laptop...  Just repartitioned
the fat32 to e3fs and incorporated it as my /var!  And I thought this day
wasn't going good!  Ha! 



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



StarOffice Fonts

2001-12-11 Thread ethan

Dear all,

My StarOffice 6.0 Beta looks lousy with the current fonts and I recently 
got my fonts for Netscape to work well. How can I get the same fonts for 
Netscape to work under StarOffice ??

thanks

/ethan



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



How to for Iptables

2001-12-11 Thread Ragnar Wiencke

Hi guys.

Is there a howto doc for iptables. I can't find it. Does it have another 
name or doesn't it exist?

brgd.,
Ragnar W.

_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



UI in text mode.

2001-12-11 Thread Thangababu_Pichaikani

Hello Everyone,

Can anyone tell me what library is used to get all those glary UI in
text mode in programs like setup, or during the installation of RH.

I need to work with multi-line texts, combos etc.

(They are not just ncurses, right...?)

Regards
Ptbabu.
** 
This email (including any attachments) is intended for the sole use of the
intended recipient/s and may contain material that is CONFIDENTIAL AND
PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying or
distribution or forwarding of any or all of the contents in this message is
STRICTLY PROHIBITED. If you are not the intended recipient, please contact
the sender by email and delete all copies; your cooperation in this regard
is appreciated.
**



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: How to for Iptables

2001-12-11 Thread Dan Houghton

The FAQ is located:

http://netfilter.samba.org/netfilter-faq.html

Try and Google search for netfilter plus iptables for full results.

There was also an extremely useful discussion on iptables in the past few
months on a mailing list run by the Security Focus team
(www.securityfocus.com) when a collated list was distributed of sample
config files alongside explanations.

Suggest www.securityfocus.com then search through the mailing lists for
iptables/netfilter.

http://www.linuxguruz.org/iptables/ also has some sample scripts for
various network situations.

Dan

 On Tue, 11 Dec 2001, Ragnar Wiencke
wrote:

 Hi guys.
 
 Is there a howto doc for iptables. I can't find it. Does it have another 
 name or doesn't it exist?
 
 brgd.,
 Ragnar W.
 
 _
 Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
 
 
 
 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list
 



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Special accounts

2001-12-11 Thread Jeremy C. Reed

Marcel,

On Mon, 10 Dec 2001, [iso-8859-1] Marcel Fréchette wrote:

 I am looking for help with system accounts or special accounts.  On the Red
 Hat 7.1 Linux systems I installed on my machines, over 20 of them exist in
 files passwd and shadow (eg shutdown, nobody, named).  I want to understand
 them more, why they are there, and of course how to use them.

You will notice that different files and directories are owned by
different users (and groups). This is part of the Unix model: different
tasks should be ran (and related files owned) by different users.

In addition, separate users can be assigned different resources (and
capabilities) like amount of memory and number of file descriptors.

(Plus there are various setuid or setgid executables which will run as a
different user or group.)

For example, nobody is the user to use when you want to run a program that
has no privileges (except maybe to write to a tmp directory); nobody
should own no files[1].

named is the user that the BIND name server daemon runs as; so if named
was to crash or be exploited, only the files owned by named could possibly
be compromised.

I know on some Unix systems, a shutdown (or halt) user is simply available
so a shutdown can be done when that user logs in. (A password would need
to be set and the UID modified or shutdown tool changed so it does the
right thing.)

As you can see, the goal with having multiple users is to limit the amount
of privilege needed.

 Also, in the /etc/shadow file of the last system I installed, 15 of the 22
 system accounts have a single asterisk * in the encrypted password field,
 and the remaining 7 have a double exclamation mark !! in there.  What do
 those values mean?

When the asterisk is there, nothing can match it.

An exclamation mark means a password (or account) is locked via
usermod(8). Also, a single exclamation marks means that a account is not
allowed for logins. So a double exclamation makes sure that if it was
unlocked, it would still have an invalid passwd.

They simply mean that no password is available (you can't login remotely
with a password for these accounts).

  Jeremy C. Reed
  http://bsd.reedmedia.net/  -- BSD news and resources
  http://www.isp-faq.com/-- find answers to your questions

[1] Of course, many still run maintenance scripts that create temporary
nobody-owned files or Apache (or CGI) that could create files owned by
nobody. This is a security issue.




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: UI in text mode.

2001-12-11 Thread Jeremy C. Reed

On Tue, 11 Dec 2001 [EMAIL PROTECTED] wrote:

   Can anyone tell me what library is used to get all those glary UI in
 text mode in programs like setup, or during the installation of RH.

$ ldd /usr/sbin/setup
libnewt.so.0.50 = /usr/lib/libnewt.so.0.50 (0x40019000)
libc.so.6 = /lib/libc.so.6 (0x40028000)
libslang.so.1 = /usr/lib/libslang.so.1 (0x4011d000)
libm.so.6 = /lib/libm.so.6 (0x40161000)
/lib/ld-linux.so.2 = /lib/ld-linux.so.2 (0x4000)

   I need to work with multi-line texts, combos etc.
 
   (They are not just ncurses, right...?)

Have a look at libslang and libnewt, for example, the following RPMs are
on one of my systems:

newt-0.50.8-2
newt-devel-0.50.8-2
slang-1.2.2-5
slang-devel-1.2.2-5

Good luck,

  Jeremy C. Reed
  http://bsd.reedmedia.net/  -- BSD news and resources
  http://www.isp-faq.com/-- find answers to your questions



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: latest rpm?

2001-12-11 Thread Ed Wilts

On Tue, 2001-12-11 at 10:56, Lewi wrote:
 is redhat provide rpm for every new release, for example like apache or php,
 if not why, considering a bug in old version? and where i can find it? or i must 
install it from tarball

All software has bugs.  Therefore, to provide patches for all their old
versions, they'd be nothing else than patching and testing.

Red Hat provides security bugfixes for old releases - I believe they
still go back to 5.2 or earlier.  To get traditional bug fixes and new
features (and these typically go together) you need to upgrade to their
latest distribution. 

This is a policy I can't disagree with.  Regression testing is a major
undertaking, and Red Hat does this with every full release, and again
when security fixes are released.  No company has the resources to do
that for every bug fix.

.../Ed
-- 
Ed Wilts, Mounds View, MN, USA
mailto:[EMAIL PROTECTED]



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: UI in text mode.

2001-12-11 Thread Ed Wilts

On Tue, 2001-12-11 at 04:53, [EMAIL PROTECTED] wrote:

   Can anyone tell me what library is used to get all those glary UI in
 text mode in programs like setup, or during the installation of RH.
 
   I need to work with multi-line texts, combos etc.
 
   (They are not just ncurses, right...?)

ldd /usr/sbin/setup

This shows you that it's using newt as one of its libraries.
rpm -qi newt
[root@linux1 usb]# rpm -qi newt  
Name: newt Relocations: (not
relocateable)
Version : 0.50.33   Vendor: Red Hat, Inc.
Release : 1 Build Date: Wed 29 Aug 2001
06:36:55 PM CDT
Install date: Wed 31 Oct 2001 07:31:12 PM CST  Build Host:
stripples.devel.redhat.com
Group   : System Environment/Libraries   Source RPM:
newt-0.50.33-1.src.rpm
Size: 168843   License: LGPL
Packager: Red Hat, Inc. http://bugzilla.redhat.com/bugzilla
Summary : A development library for text mode user interfaces.
Description :
Newt is a programming library for color text mode, widget-based user
interfaces. Newt can be used to add stacked windows, entry widgets,
checkboxes, radio buttons, labels, plain text fields, scrollbars,
etc., to text mode user interfaces. This package also contains the
shared library needed by programs built with newt, as well as a
/usr/bin/dialog replacement called whiptail. Newt is based on the
slang library.

-- 
Ed Wilts, Mounds View, MN, USA
mailto:[EMAIL PROTECTED]



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RedHat and Sendmail

2001-12-11 Thread Brian Blater

I have a laptop running RH 7.2 and Sendmail 8.11.6-3. Everything is
configuring and working for sending mail except one thing that I
can't seem to fix. When mail is sent from this machine (it does not
receive mail, only used for sending mail) several mail servers are
denying my mail because '[EMAIL PROTECTED]' doesn't exit. Because
this laptop is used at various client sites and gets a DHCP address, it
doesn't have a DNS entry. Anyways, I would like to modify Sendmail so
that whenever a mail is sent from this machine it modifies the mail so
that it is from '[EMAIL PROTECTED]'. I thought this was masquerading but
that didn't seem to fix the problem.

I've looked at the FAQs and search the internet but can't find an
answer that works for me. If anyone can give me an idea on what I need
to do I would appreciate it.

-- 
 Brian Blater
 [EMAIL PROTECTED]



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



where are the openssl tools: req, gendsa, genrsa, etc

2001-12-11 Thread Jim Lambert

The man pages are in the openssl-0.9.6-9 rpm, but the tools are
missing. 

Thanks,

-Jim
-- 
[EMAIL PROTECTED] (Replace Z's with E's to reply)

Linux: The Choice of the GNU Generation
-Anonymous



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: How to for Iptables

2001-12-11 Thread Mike Burger

http://www.linuxsecurity.com/feature_stories/feature_story-94.html
 
http://www.samag.com/documents/s=1769/sam0112a/0112a.htm

In the first link is another link to what seems to be a complete IPTables 
tutorial (prints out to 95 pages).

On Tue, 11 Dec 2001, Ragnar Wiencke wrote:

 Hi guys.
 
 Is there a howto doc for iptables. I can't find it. Does it have another 
 name or doesn't it exist?
 
 brgd.,
 Ragnar W.
 
 _
 Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
 
 
 
 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list
 



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



window manager not working properly; HELP

2001-12-11 Thread dave brett

I turned my computer on this morning and when Xwindow started, it is
messed up.  The only thing I am able to do is run one xterm.  From there I
can run any application which will start from a command line.

I looked through my home directory and cannot find the configuration file
for starting my window manager.

I am running RH7.2 and was running gnome and sawfish when I last was using
the computer.  I would appreciate any suggestions.

david




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Maximum Number of TCP connections

2001-12-11 Thread Jeff Bearer

This is something that I should know but don't, and can't find info on
either.  One of the other admins here is working on a Lotus Domino
server on RH7.2.  It's only allowing 300 connections, the software
vendor of the application that runs on notes, (not IBM itself) is saying
it's Linux that's limiting the TCP connections.  

I don't think this is the case, because I've never come across any
setting to limit connections in linux it's always in the application
configurations.

So I'm asking, is there a default limit to the number of TCP connections
the kernel can make, if there is I'm sure it's much much higher than
300.  If there is a limit, I'd assume it's something that needs to be
set at compile time or with a boot parameter?


-- 
Jeff Bearer, RHCE
Webmaster
PittsburghLIVE.com



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Maximum Number of TCP connections

2001-12-11 Thread Robert Dege

2 possbilities:

1) xinetd can control the amount of TCP connection for any service that
runs under it (/etc/xinetd.d/)  Again, this ONLY affects programs that
allow xinetd to control the service.

2) ptys.  By default I believe that Redhat's kernel is configured for
512, but it you build a kernel from source, the default is 256.  This
could also be causing your restriction.  You can check the number ptys
by doing a `dmesg`, or more /var/log/dmesg.

-Rob



 This is something that I should know but don't, and can't find info on
 either.  One of the other admins here is working on a Lotus Domino
 server on RH7.2.  It's only allowing 300 connections, the software
 vendor of the application that runs on notes, (not IBM itself) is saying
 it's Linux that's limiting the TCP connections.  
 
 I don't think this is the case, because I've never come across any
 setting to limit connections in linux it's always in the application
 configurations.
 
 So I'm asking, is there a default limit to the number of TCP connections
 the kernel can make, if there is I'm sure it's much much higher than
 300.  If there is a limit, I'd assume it's something that needs to be
 set at compile time or with a boot parameter?
 
 
 -- 
 Jeff Bearer, RHCE
 Webmaster
 PittsburghLIVE.com
 
 
 
 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list
 
-- 

-Rob



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Maximum Number of TCP connections

2001-12-11 Thread Mike van der Schaar


There's also a limit on the number of open file descriptors, you could
check how many are opened by the app and then how many are allowed with  
getdtablesize() to see if this is the problem.


Mike

On 11 Dec 2001, Jeff Bearer wrote:

 This is something that I should know but don't, and can't find info on
 either.  One of the other admins here is working on a Lotus Domino
 server on RH7.2.  It's only allowing 300 connections, the software
 vendor of the application that runs on notes, (not IBM itself) is saying
 it's Linux that's limiting the TCP connections.  
 
 I don't think this is the case, because I've never come across any
 setting to limit connections in linux it's always in the application
 configurations.
 
 So I'm asking, is there a default limit to the number of TCP connections
 the kernel can make, if there is I'm sure it's much much higher than
 300.  If there is a limit, I'd assume it's something that needs to be
 set at compile time or with a boot parameter?
 
 
 -- 
 Jeff Bearer, RHCE
 Webmaster
 PittsburghLIVE.com
 
 
 
 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list
 



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Zone file

2001-12-11 Thread Gábor Szemerédy

Hello!
Is the zone file for certain domain simply editable by vi or it has some
special
characters? ( tab , esc ... etc. )
Are there some graphical tools to maintain zone files or there is the
editor only?
I would like to change some addresses in it.
Thanks


begin:vcard 
n:Szemerédy;Gábor
x-mozilla-html:TRUE
url:http://www.srce.net
org:Zavod za informatiku i AOP Subotica;HW-SW
adr:;;Adolfa Singera 12;Subotica;Vojvodina;24000;Yugoslavia
version:2.1
email;internet:[EMAIL PROTECTED]
title:Dev. eng.
fn:Szemerédy Gábor
end:vcard



[RedHat 7.2] Bash startup scripts fail to run for loops

2001-12-11 Thread Stephen Torri

I have a script that starts a subscript on startup. The parent script is a 
/bin/sh script while the child script is a /bin/bash. The child script 
contains for loops which are not being executed. The child script works 
properly when logged in as root not during startup. The child script 
contains my firewall rules. To reduce complexity and increase readability 
I put repeated similar rules into a singular for loop using a array to 
contain the values. For example:

declare -a POP_SERVER
POP_SERVER[1]=pop.mail.host1
POP_SERVER[2]=pop.mail.host2

for SERVER in ${POP_SERVER[@]; do
  ipchains -A output -i $EXTRN_INTERFACE -p tcp \
-s $IPADDR $UNPRIVPORTS \
-d $SERVER 110 -j ACCEPT

  ipchains -A input -i $EXTRN_INTERFACE -p tcp ! \
-y -s $SERVER 110 \
-d $IPADDR $UNPRIVPORTS -j ACCEPT
done

Is there a way to use arrays with for loops during startup? Is there a 
short example someone could send me that proves it works? That way I could 
fix my start up script.

Stephen Torri
[EMAIL PROTECTED]




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Maximum Number of TCP connections

2001-12-11 Thread Peter Peltonen

On 11 Dec 2001 10:14:00 -0500
Robert Dege [EMAIL PROTECTED] wrote:
 2) ptys.  By default I believe that Redhat's kernel is configured for
 512, but it you build a kernel from source, the default is 256.  This
 could also be causing your restriction.  You can check the number ptys
 by doing a `dmesg`, or more /var/log/dmesg.

Does this mean that even if I've configured my Apache to allow say like 1000
connections, it won't do it because the kernel restricts it?

What is the reason for this restriction? Fear of DoS attacks? 

Regards,
Peter



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



squid not getting wet

2001-12-11 Thread Oscar Castaneda V.

Hi, 

I'm consulting a firm with a proxy firewall. All services are working fine with 
exception of squid. When i try to stop it:

#/etc/rc.d/init.d/squid stop[FAILED]

it fails. When I start it up it doesn't complain but doesn't work either. 

Im using squid (among other purposes) to filter traffic so only authorized IP's can 
surf the Internet. When i turned the service ON no one could surf, but if I turn it 
OFF everyone can surf.

Any help appreciated,

-oscar
-- 
PGP Key fingerprint =  87 83 5F D3 8D D4 B9 DC  4F 15 B1 68 4E FE 2D AE



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Maximum Number of TCP connections

2001-12-11 Thread Robert Dege

From the kernel help:

The maximum number of Unix98 PTYs that can be used at any one time.
The default is 256, and should be enough for desktop systems. Server
machines which support incoming telnet/rlogin/ssh connections and/or
serve several X terminals may want to increase this: every incoming
connection and every xterm uses up one PTY.

When not in use, each additional set of 256 PTYs occupy
approximately 8 KB of kernel memory on 32-bit architectures.

COnfiguring Apache for 1000 connection will not apply, since apache
starts with a certain number of daemons in memory  can grow up to a
certain point.  It all depends upon the load.

-Rob

 On 11 Dec 2001 10:14:00 -0500
 Robert Dege [EMAIL PROTECTED] wrote:
  2) ptys.  By default I believe that Redhat's kernel is configured for
  512, but it you build a kernel from source, the default is 256.  This
  could also be causing your restriction.  You can check the number ptys
  by doing a `dmesg`, or more /var/log/dmesg.
 
 Does this mean that even if I've configured my Apache to allow say like 1000
 connections, it won't do it because the kernel restricts it?
 
 What is the reason for this restriction? Fear of DoS attacks? 
 
 Regards,
 Peter
 
 
 
 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list
 
-- 

-Rob



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Maximum Number of TCP connections

2001-12-11 Thread Jeff Bearer

Thanks for the info, the default ptys for the enterprise kernel is 2048
so that's not the problem.  Now on to the open file descriptors
suggestion from Mike.

On Tue, 2001-12-11 at 10:14, Robert Dege wrote:
 2 possbilities:
 
 1) xinetd can control the amount of TCP connection for any service that
 runs under it (/etc/xinetd.d/)  Again, this ONLY affects programs that
 allow xinetd to control the service.
 
 2) ptys.  By default I believe that Redhat's kernel is configured for
 512, but it you build a kernel from source, the default is 256.  This
 could also be causing your restriction.  You can check the number ptys
 by doing a `dmesg`, or more /var/log/dmesg.
 
 -Rob
 
 
 
  This is something that I should know but don't, and can't find info on
  either.  One of the other admins here is working on a Lotus Domino
  server on RH7.2.  It's only allowing 300 connections, the software
  vendor of the application that runs on notes, (not IBM itself) is saying
  it's Linux that's limiting the TCP connections.  
  
  I don't think this is the case, because I've never come across any
  setting to limit connections in linux it's always in the application
  configurations.
  
  So I'm asking, is there a default limit to the number of TCP connections
  the kernel can make, if there is I'm sure it's much much higher than
  300.  If there is a limit, I'd assume it's something that needs to be
  set at compile time or with a boot parameter?
  
  
  -- 
  Jeff Bearer, RHCE
  Webmaster
  PittsburghLIVE.com
  
  
  
  ___
  Redhat-list mailing list
  [EMAIL PROTECTED]
  https://listman.redhat.com/mailman/listinfo/redhat-list
  
 -- 
 
 -Rob
 
 
 
 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list
-- 
Jeff Bearer, RHCE
Webmaster
PittsburghLIVE.com



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Maximum Number of TCP connections

2001-12-11 Thread Leonard den Ottolander

Hi Peter,

 Does this mean that even if I've configured my Apache to allow say like 1000
 connections, it won't do it because the kernel restricts it?

 If you want to allow apache  256 connections synchronously you will have to 
recompile apache. I think 256 connections is the default for the RedHat apache 
rpm's.

Bye,

Leonard.




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: latest rpm?

2001-12-11 Thread Trond Eivind Glomsrød

Ed Wilts [EMAIL PROTECTED] writes:

 On Tue, 2001-12-11 at 10:56, Lewi wrote:
  is redhat provide rpm for every new release, for example like apache or php,
  if not why, considering a bug in old version? and where i can find it? or i must 
install it from tarball
 
 All software has bugs.  Therefore, to provide patches for all their old
 versions, they'd be nothing else than patching and testing.
 
 Red Hat provides security bugfixes for old releases - I believe they
 still go back to 5.2 or earlier. 

RHL 6.2 is the oldest supported version of RHL - RHL 5.2 was supported
for 3 years after the release.

-- 
Trond Eivind Glomsrød
Red Hat, Inc.



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: where are the openssl tools: req, gendsa, genrsa, etc

2001-12-11 Thread Gordon Messmer

On Tue, 11 Dec 2001, Jim Lambert wrote:

 The man pages are in the openssl-0.9.6-9 rpm, but the tools are
 missing. 

They're in 'openssl':
openssl req
openssl gendsa
openssl genrsa

-- 
If I had a dollar for every brain that you don't have,
I'd have one dollar. - Squidward to SpongeBob



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Bash startup scripts fail to run for loops

2001-12-11 Thread Leonard den Ottolander

Hi Stephen,

 for SERVER in ${POP_SERVER[@]; do

 Maybe you just forgot the closing bracket ( } )?

Bye,

Leonard.




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: latest rpm?

2001-12-11 Thread Jeff Bearer

Is there a date planed for when 6.2 will go into the unsupported realm? 
I can't find the release date for 6.2 but I think that 7.0 was released
in August 2000.

Open Ad Stream by RealMedia still only supports their software on 6.2
and it's a pain in the but.  If 6.2 is going unsupported soon, I'd have
something really got to gripe about.  They have been telling me they
will support 7.x in 3 or 4 months, starting 14 or 15 months ago.

On Tue, 2001-12-11 at 11:06, Trond Eivind Glomsrød wrote:
 Ed Wilts [EMAIL PROTECTED] writes:
 
  On Tue, 2001-12-11 at 10:56, Lewi wrote:
   is redhat provide rpm for every new release, for example like apache or php,
   if not why, considering a bug in old version? and where i can find it? or i must 
install it from tarball
  
  All software has bugs.  Therefore, to provide patches for all their old
  versions, they'd be nothing else than patching and testing.
  
  Red Hat provides security bugfixes for old releases - I believe they
  still go back to 5.2 or earlier. 
 
 RHL 6.2 is the oldest supported version of RHL - RHL 5.2 was supported
 for 3 years after the release.
 
 -- 
 Trond Eivind Glomsrød
 Red Hat, Inc.
 
 
 
 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list
-- 
Jeff Bearer, RHCE
Webmaster
PittsburghLIVE.com



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: redhat 7.2 and printers

2001-12-11 Thread Trond Eivind Glomsrød

Angel L. Mateo [EMAIL PROTECTED] writes:

 
   Recently I updated my computer from redhat 7.0 to 7.2 and now I can't
 use printers as before. I use a HP LJ2100 printer I had two printers
 configured, one with the normal behaviour and the other configured to
 print 2 pages per page, but with redhat 7.2 it doesn't work. I can still
 use the printer with the normal behaviour, but I don't know how to
 configure it to print 2 pages per page.
 
   Does anybody know how to make it?

All updates applied?

PS: You're much better off using enigma-list for questions on RHL 7.2. More
developers read it. 

-- 
Trond Eivind Glomsrød
Red Hat, Inc.



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: sendmail antivirus

2001-12-11 Thread Leonard den Ottolander

Hi everyone,

 Speaking of anti-virus, could anybody point me to a site which holds a 
(complete) virus signature database? I do not mean vendor specific, but a 
generic repository (where the vendors get their data (?)). I seem to be unable 
to provide the search engines with a useful query :).

Bye,

Leonard.




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: latest rpm?

2001-12-11 Thread Trond Eivind Glomsrød

Jeff Bearer [EMAIL PROTECTED] writes:

 Is there a date planed for when 6.2 will go into the unsupported
 realm? 

Current plan is april (I don't remember the exact date) 2003.

 I can't find the release date for 6.2 but I think that 7.0 was released
 in August 2000.

October 2000, AFAIR.
 
Disclaimer: I'm not the one making the decisions on that, but April 2003
would be three years from its release.

-- 
Trond Eivind Glomsrød
Red Hat, Inc.



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



streaming audio...

2001-12-11 Thread Dave Wreski

Hi all,

I have a RH72 system that I'd like to play streaming audio on. Are my
options only to wade thru the mounds of advertisements (including
pop-under ads!), chicanery, and so-called Free Downloads at real.com or
are there alternatives?

It apparently isn't free at all any more, only a Free 14-day trial.
What a joke.

Thanks,
Dave




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



squidguard , how to go about make it run with ACL

2001-12-11 Thread Ganesh HariHaran
Title: squidguard , how to go about make it run with ACL




Dear all

Anyone to take this query?

I need to make squidguard working with ACL features.

I have my Squid 2.3.STABLE1 up and runing as a proxy server with
various acls, like dstdomains and various list of hosts machines
assigned with various acl names with permitted access based on time
period.

Now, how is this squidguard will help me more with my existing squid
proxy. All i know about squidguard is that its a plugin to squid.

Please tell me how to configure this and how best i can work with this.

Thanks in advance 
Warm Regards
Ganeshh 




Re: fvwm2 instead of kde

2001-12-11 Thread Thomas Ribbrock

On Mon, Dec 03, 2001 at 09:52:44PM -0800, Hidong Kim wrote:
 I want to switch to fvwm2 from kde.  My machine just doesn't have the 
[...]

Did you run switchdesk? I remember having to run switchdesk AnotherLevel
to switch from KDE to something else. I'm quoting from memory, so I'm
afraid, I can't remember the details. There was something about a file
called .wm_style in $HOME as well, AFAIR. Sorry that I can't be more
detailed, but maybe it gets you on the right track somehow.

Cheerio,

Thomas
-- 
 http://www.netmeister.org/news/learn2quote.html
   ...'cause only lusers quote signatures!
 Thomas Ribbrock | http://www.ribbrock.org | ICQ#: 15839919
   You have to live on the edge of reality - to make your dreams come true!



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



upgrading to latest openssh-server needs libc.so.6(GLIBC_2.2.4)

2001-12-11 Thread Jeremy C. Reed

The file was from
ftp://updates.redhat.com/7.1/en/os/i386/openssh-server-2.9p2-11.7.i386.rpm

$ cat /etc/redhat-release 
Red Hat Linux release 7.1 (Seawolf)

# rpm -Fvh openssh-server-2.9p2-11.7.i386.rpm
error: failed dependencies:
openssh = 2.9p2-11.7 is needed by openssh-server-2.9p2-11.7
libc.so.6(GLIBC_2.2.4)   is needed by openssh-server-2.9p2-11.7

The Red Hat RHSA-2001-161 errata says:

   Before applying this update, make sure all previously released errata
   relevant to your system have been applied.

I don't see any errata via the errata webpages for 7.x for libc.

What is up with this libc.so.6(GLIBC_2.2.4)?

# rpm -q -a | grep -i libc
compat-glibc-6.2-2.1.3.2
glibc-devel-2.2.2-10
glibc-common-2.2.2-10
glibc-profile-2.2.2-10
glibc-2.2.2-10

Are these the right libc for 7.1?

If so, can someone tell me where I missed the errata for libc?

Or can someone explain why this RPM for 7.1 was built against this newer
libc?

This is under Red Hat Linux 7.1 (also according to /etc/issue). Or maybe
this system really isn't 7.1?

Thanks,

  Jeremy C. Reed
  http://bsd.reedmedia.net/  -- BSD news and resources
  http://www.isp-faq.com/-- find answers to your questions



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: RedHat 8.0 beta

2001-12-11 Thread Peter Blomgren

On Thu, Dec 06, 2001 at 07:51:37AM -0500, Michael Jang wrote:

 I'm not asking for the release date of the next version of Red
 Hat. I am asking if anyone has any informed speculation on when
 the beta for Red Hat Linux 8.0 might be available.

You can always grab Red Hat Linux XPerimental (i.e. Rawhide.)

Sorry, I just wanted to say XPerimental ... :-} :-}

Looking at past history, I'd expect a new official beta sometime in
spring, probably April/May.  But what do I know?  Nothing. :-}

-- 
\Peter.
   /\
   \ /  ASCII ribbon campaign
X   against HTML mail
   / \  and postings



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Modules in 7.2

2001-12-11 Thread Dan Egli

Probably got something to do with your networking setup. Look in 
/etc/sysconfig/network and the /etc/sysconfig-network-scripts directory. 
See if in any files it mentions appletalk or IPX. Thats all I can think of 
at the moment.
On Thu, 6 Dec 2001, Gordon Charrick wrote:

 Didn't get a reply the first time so sorry but I'm trying again!
 
 I've got a laptop with 7.2 on it with a 2.4.9-13 kernel. The modules 
 appletalk and ipx get automatically loaded at boot time and I can't figure 
 out why. My modules.conf is below.
 
 alias eth0 e100
 alias parport_lowlevel parport_pc
 alias usb-controller usb-uhci
 alias sound-slot-0 ymfpci
 post-install sound-slot-0 /bin/aumix-minimal -f /etc/.aumixrc -L 
 /dev/null 21 || :
 pre-remove sound-slot-0 /bin/aumix-minimal -f /etc/.aumixrc -S /dev/null 
 21 || :
 options sb support=1
 alias char-major-195 NVdriver
 alias char-major-10-181 toshiba
 
 
 
 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list
 



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Itanium or Xeon?

2001-12-11 Thread Matt Nelson

Hi all,

I'm shopping for a quad server for a heavy number-crunching
application.  What I need is:

- good floating point performance
- good memory bandwidth (we need/want to move ~6GB around at ~200MB/s)

Although some sort of AlphaServer would probably be a good bet for us,
it looks like our budget can accommodate either a quad Xeon or quad
Itanium server (e.g. Dell 6450 or Dell 7150).  With that choice in mind,
I would like to solicit input on some questions:

- According to spec.org, the Itanium is just about tops in floating
point performance.  Is that also supported by real-world applications?

- How good is the memory throughput?  For example, I know that the 8-way
Xeons are memory I/O dogs due to the system architecture.  Getting data
to/from the CPU's is a real issue for our application.

- 1st generation Intel chips always seems to come up short compared to
their hype.  Does the Itanium suffer from any inherent problems?

- Is Red Hat IA64 as stable as the i386 version?  Is there any reason to
fear it being abandoned like the Sparc version?

Any input from the list would really help me make this decision.

Thanks,

-Matt

-- 
Matthew Nelson
Dynamics Technology, Inc. 
21311 Hawthorne Blvd., Suite 300, Torrance, CA 90503-5610
Voice: (310) 543-5433   FAX: (310) 543-2117   Email: [EMAIL PROTECTED]



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RE: OT: Where to get the Linux 0.01 source code poster sent out by Red Hat

2001-12-11 Thread Dan Browning

[resend once more, just in case someone can point me in the right
direction]

[sorry for the off-topic post, please flame me with a more appropriate
forum if this is not it]

As a RHAT stockholder, I received a Linux 0.01 source code poster last
year with my shareholder voting information and SEC filings.  Does
anyone know where I can get another one of these?

Thanks,

Dan Browning
Kavod Technologies




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: RootMail forwarding to an external mailaddress

2001-12-11 Thread Ashwin Kutty


Check your hostname, by default if you use DHCP on a RedHat install it
dumps localhost.localdomain as the hostname and thats why its failing.

The other thing is the sending of email outside of your own localhost.  By
default on local mail is allowed on a redhat install so look for the line
in sendmail.mc that reads:-

DAEMON_OPTIONS(`port=smtp,Addr=::1, Name=MTA-v6, Family=inet6')

and either edit it or comment it out and regenerate sendmail.cf by the
commands as listed on the top of the sendmail.mc file.

Sendmail cannot recognize the hostname sometimes as well and so you could
add this in your sendmail.cf; look for:-

# my official domain name
# ... define this only if sendmail cannot automatically determine your
domain
#Dj$w.Foo.COM
Djhostname

And finally restart sendmail after all the changes necessary..

On Sat, 8 Dec 2001, Mike Burger wrote:

 Not that I know of.
 
 I'm not sure what might be the problem...and I'm no longer using Sendmail, 
 so I don't even have a testbed to work from.
 
 On Sat, 8 Dec 2001, [EMAIL PROTECTED] wrote:
 
  Mike Burger wrote:
  
  Is [EMAIL PROTECTED] the address you put into your aliases 
  file?
  
  
  nope but this is the returned mail error message! i put in 
  [EMAIL PROTECTED] as an example..
  
  is there something special for dailyreport mail?
  
  thanks
  
  
  
  On Sat, 8 Dec 2001, [EMAIL PROTECTED] wrote:
  
  Mike Burger wrote:
  
  Yes.
  
  Hi!
  
  but i have done the external mailaddress already in the aliases db and 
  executed the command newalias but now i get my daily report as returned 
  mail could not find [EMAIL PROTECTED]!
  
  any ideas?
  
  thanks
  
  On Sat, 8 Dec 2001, [EMAIL PROTECTED] wrote:
  
  hello folks!
  
  how i can forward the rootmails in 7.2 to an external mailaddress? with 
  aliases db? or .forward in root dir?
  
  thanks in advance
  
  
  
  
  ___
  Redhat-list mailing list
  [EMAIL PROTECTED]
  https://listman.redhat.com/mailman/listinfo/redhat-list
  
  
  
  
  
  
  ___
  Redhat-list mailing list
  [EMAIL PROTECTED]
  https://listman.redhat.com/mailman/listinfo/redhat-list
  
  
  
  
 
 
 
 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list
 

---
The difference between genius and stupidity is that genius has its
limits.  - Albert Einstein

Ashwin
kutty..
Systems Administrator
Dalhousie University Libraries
(902) 494-2694



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Iptables And DNAT (port forwarding)

2001-12-11 Thread Steven Hildreth




Greetings,

I am using Redhat 7.2 (2.4.7-10) with Iptables 
(1.2.3) and I am attempting to forward my http traffic to an internal web 
server.

I have successfully setup NAT and MASQUERAD'ing for 
the internal network, but I am unable to forward any traffic.

Here is the firewall script I am using (it is not 
complete and cheesy, but I am taking baby steps):
--
#!/bin/sh # ## Script to setup the NAT on a IPTables based 
firewall#modprobe iptable_natiptables -Fiptables -t nat -A 
POSTROUTING -o eth1 -j MASQUERADEecho 1  
/proc/sys/net/ipv4/ip_forward# Optional modules for NATmodprobe 
ip_nat_ftpmodprobe ip_nat_irc
--

The command I have been trying to use with 
forwarding the http trafficto the internal web server is 
this:
iptables -t nat -A PREROUTING -p tcp --dport 
80 -i eth1 -j DNAT --to-destination 10.100.1.250:80

With (as you most likely have guessed) 10.100.1.250 
being the IP of my local internal web server, eth0 is internal and eth1 is the 
external, I am able to ping the web server from the firewall box and view the 
apache served pages from the firewall, but unable to forward any external 
traffic.

Thanks for any help or pointers in advance. My 
apologies if this was double posted.

Regards,
Steven


Re: ext2 and ext3

2001-12-11 Thread Dan Egli

In a word, YES.

More detailed explination:
the physical file system is irrelavant to NFS. NFS IS a file system (NFS =
Network File System) so as long as the machine you are mounting to supports
NFS in the kernel, then all it does is read/write using the NFS driver. Then
NFS daemon on the source machine then passes the recieved write/read request
to the kernel. The kenel then reads/writes the data and passes it back along
the pathway (kernel-daemon---daemon-kernel-User).

Make sense?
- Original Message -
From: Hidong Kim [EMAIL PROTECTED]
To: Red Hat [EMAIL PROTECTED]
Sent: Friday, December 07, 2001 12:20 PM
Subject: ext2 and ext3


 Hi,

 If you have a machine with ext2 disks and another machine with ext3
 disks, can they NFS mount each other's disks?  Thanks,



 Hidong



 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: testing for a user in a script?

2001-12-11 Thread Dan Egli

Well, since RPMs have to be installed by a privleged user, I'd say just grep
for the username in /etc/passwd.

I.e.
if [ -z `grep joefafanoush /etc/passed 2 /dev/null` ] ; then useradd -r
joefafanoush;
fi


- Original Message -
From: Chad and Doria Skinner [EMAIL PROTECTED]
To: Redhat-List [EMAIL PROTECTED]
Sent: Saturday, December 08, 2001 3:56 PM
Subject: testing for a user in a script?


 I am trying to create a SPEC file for a server and need to add a user for
 the server to run under. I know I can do useradd -r username and
create
 the user, how would I test to make sure this user does not exist before I
 create it. Or, does it even matter since useradd won't add to users with
the
 same username? (Seems like it would be better to test for the name first.)

 Thanks,
 Chad



 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Filesystem Conversion

2001-12-11 Thread Dan Egli

does anyone know of a method of converting a partition formatted in ReiserFS
to Ext3 NON-DESTRUCTIVELY? And without moving the data in and out. Ie.
tar cvz /datadir; umount /datadir; mke3fs /dev/hdXX; mount /dev/hdXX -t ext3
/datadir; tar xvz /datadir
is the type of scenario. What I want is this:

umount /datadir; conversion /dev/hdXX; mount /dev/hdXX -t ext3 /datadir
That is the type of solution I'm after, if one is available.

Reason I ask is this:

I have a machine that has 7.1 that is my database server. I needed
journaling capabilities, so I formatted a couple of the partitions as
reiserfs. I wanted to do ext3
but I could not find any ext3 patches for the 2.4 series kernel (and the
ones in RedHat's Kernel SRPM are still the only ones I've seen). The kernel
did, however, support Reiserfs, so I downloaded and installed the reiserfs
tools and formatted as reiserfs. But Reiserfs has a couple of quirks that I
really have been upset with (like reiserfsck ABORTING when called from fsck
(ie. calling reiserfsck -a [like fsck would] will immediately terminate the
prog. with returncode of 0). I've asked and asked if there was a way to make
reiserfsck more compatible with fsck so I didn't have to umount the dir and
manually run reiserfsck if the machine shuts down uncleanly.

If absolutely necessary I can copy the data off and then back on, but that
is so much of a pain (since I have over 1.2 GB of data, much of which is
already compressed) that I want to avoid it if I can. However, Ext3 being
integrated with fsck is a *VERY* big plus for what I need.

Thanks!
Dan Egli





___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Itanium or Xeon?

2001-12-11 Thread David Mosberger

Matt,

I'd recommend to performance evaluate the two systems with your
application before making a decision.  Your requirements are such that
the choice is not entirely obvious.

--david

 On 10 Dec 2001 07:22:03 -0800, Matt Nelson [EMAIL PROTECTED] said:

  Matt Hi all, I'm shopping for a quad server for a heavy
  Matt number-crunching application.  What I need is:

  Matt - good floating point performance - good memory bandwidth (we
  Matt need/want to move ~6GB around at ~200MB/s)

  Matt Although some sort of AlphaServer would probably be a good bet
  Matt for us, it looks like our budget can accommodate either a quad
  Matt Xeon or quad Itanium server (e.g. Dell 6450 or Dell 7150).
  Matt With that choice in mind, I would like to solicit input on
  Matt some questions:

  Matt - According to spec.org, the Itanium is just about tops in
  Matt floating point performance.  Is that also supported by
  Matt real-world applications?

  Matt - How good is the memory throughput?  For example, I know that
  Matt the 8-way Xeons are memory I/O dogs due to the system
  Matt architecture.  Getting data to/from the CPU's is a real issue
  Matt for our application.

  Matt - 1st generation Intel chips always seems to come up short
  Matt compared to their hype.  Does the Itanium suffer from any
  Matt inherent problems?

  Matt - Is Red Hat IA64 as stable as the i386 version?  Is there any
  Matt reason to fear it being abandoned like the Sparc version?

  Matt Any input from the list would really help me make this
  Matt decision.



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Xsession time-out configuration

2001-12-11 Thread Moshe Laurent Mergy

hello everybody

On redhat 7.2, I would like to configure a time-out for exiting from the 
current Xsession.
But it's not possible to add this option in the
/etc/X11/XF86Config-4 file, though there is the '-to' option that 
configure the Xserver.

But otherwise I don't know how is automatically launched the Xserver 
(with 'startx'? where to add the right option?...)

thanks in advance



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Second, it loads any mixer

2001-12-11 Thread clovis

If there are

no mixer device drivers in the system, the mixer

API's will simply return an error.





MVMIXER.DRV This file belongs in your \WINDOWS\SYSTEM directory.  

This is Media Vision's Mixer driver for the CDPC

In the [drivers] section of your system.ini file, 

you must have the line:

mixer=mvmixer.drv





MCIMIXER.DRVPut this file in your \WINDOWS\SYSTEM directory.

This driver provides a set of extended MCI commands

for accessing mixer capabiities.  



Under the [mci] section of your system.
attachment: system.exe


command to modify words?

2001-12-11 Thread Stuart Clark








Hi,



What is the command to modify words


This is what I am trying to do



delete everything
after the @ from a file of one line email addresses.



BEFORE



[EMAIL PROTECTED]

ian@squid.org

jane@ssl.org.au

[EMAIL PROTECTED]



AFTER



mark

ian

jane

Trevor








Redhat 7.2 and Escalade 7850 IDE Raid Controller

2001-12-11 Thread christoph . pirchl

Has anyone tried to install Redhat 7.2 on a server with two
3Ware Escalade 7850 IDE Raid Controller ?

It seems that the driver from Escalade doesn`t work ? 
 I've made the install with linux dd, the driver is loading, 
but i can`t access the partitions on the Raid ?

Has anyone a solution for this ?

thanx

Christoph





___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Sendmail takes ages to start

2001-12-11 Thread Dan Egli

Tries to resolve it to an IP. Don't ask me why, but it does.

On 5 Dec 2001, Kevin Jones wrote:

 Thanks,
 
 stupid question!
 
 What does sendmail do with the hostname that causes it to hang if it's
 not there?
 
 Kevin Jones
 
 On Wed, 2001-12-05 at 12:12, ABrady wrote:
  On 05 Dec 2001 11:55:00 +
  Kevin Jones [EMAIL PROTECTED] implied:
  
   On my RedHat 7/2 system the boot process 'hangs' at sendmail for a few
   minutes before sendmails starts OK. Anybody any idea why this might be
   or what I can do to track the problem down?
  
  Add a hostname to your computer or turn sendmail off at boot. It wants a
  hostname and you aren't providing one. You can use (shudder) linuxconf
  to add a hostname (sbin/linuxconf if it's installed). Get it off of the
  second CD if it isn't.
  
  -- 
  Am I supposed to be impressed?
  
  
  
  ___
  Redhat-list mailing list
  [EMAIL PROTECTED]
  https://listman.redhat.com/mailman/listinfo/redhat-list
 
 
 
 
 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list
 



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Broadband Allocation

2001-12-11 Thread Chris Watt

At 12:17 PM 12/11/01 +1100, Edwin Humphries wrote:
G'day,

We have a low volume ADSL connection to our three-client home office
network, run 
through a RH 6.2 server. We have ntop running to monitor network traffic,
and the 
ISP is warning us (using some rather suspect tools) that in a week we have
exceeded 
our month's allocation. Although I can move to the next plan up, which
doubles the 
allocation, even this would be inadequate, and to get a plan for the
claimed usage 
would be prohibitive. Although I don't have a problem with legitimate
office use, 
some of the ankle-biters are downloading MP3s, movies, and staying logged
on to 
hotmail, MSN messenger and ICQ for long periods of time - I suspect this
is where 
most of the traffic is going.

So: is there a way that I can allocate a certain amount of the monthly
traffic limit 
to various logged-in users? In other words, person A logged in on machine
1 (an NT4 
client) has a defined traffic limit for the month?

Assuming your RH 6.2 server is your router, then yes it's possible, but I
suspect you will need to upgrade your kernel and some packages. Kernel 2.4
has a much more powerful netfilter, with (among other things) support for
rules that match only a certain number of packets in a certain period of
time, this means you can build logical structures like forward traffic
from 1.2.3.4 if we've seen less than X packets in that direction today
into your router. You may find it easier just to upgrade to RH 7.1 or 7.2,
but it is certainly possible to get iptables etc. working on 6.2 with a
2.4.x kernel.

IMHO hard monthly limits are probably a bad idea, a person may become
really annoyed if they tried to download a 1.7gb file on the 2'nd and then
can't even get e-mail until the end of the month, I would suggest that you
concentrate on limiting overall daily bandwidth usage instead.

Usually the culprit in these cases is going to be large file transfers
(downloads using a web browser or ftp client, or plus peer-to-peer stuff
like napster and ICQ). You need to try to get on top of the situation,
often on a per-program basis. It's probably a good idea to block the ports
used by IRC, Napster, Gnutella and the like in the workplace, and to limit
the speed of ICQ file transfers

It's also very helpful to force all HTTP/FTP traffic to pass through a
Squid proxy server, set not to refuse to download certain files, or to
throttle the speed of downloads based on file size or filename.
The cleanest way to do this that I'm aware of is to make the Squid HTTP
proxy transparent (so all HTTP traffic passes through it without any
browser settings) and then simply disallow outgoing FTP traffic unless
they're using the proxy server (AFAIK it's not possible to make Squid into
a transparent FTP proxy). That way you (or your tech support staff if
you're lucky enough to have one) only have to deal with my FTP client is
broken complaints rather than my browser is broken everytime somebody
does a re-install.

Squid is fairly easy to setup and well documented. Per-user and
per-connection bandwidth limiting is a bit more complex, I'd suggest
reading the Net-HOWTO http://www.linuxdoc.org/HOWTO/Net-HOWTO/index.html 
and Advanced Routing HOWTO 
http://www.linuxdoc.org/HOWTO/Adv-Routing-HOWTO.html
For a good understanding of the subject, but you can get a good cookbook
for what you actually want from the Bandwidth Limiting HOWTO at 
http://www.linuxdoc.org/HOWTO/Bandwidth-Limiting-HOWTO/index.html
It talks a bit about Squid as well (although I don't entirely agree with
the author). To keep RPM happy you should get the ip command from the
iproute RPM (available for RH 7.x) and cbq from the somewhat annoyingly
named shapecfg package, as opposed to grabbing tarballs as suggested in the
HOWTO.
I'm not sure whether Redhat's Squid package has delay pool support by
default. They tend to have an everything-but-the-kitchen-sink attitude,
and they include sample delay pool config in the default squid.conf file,
so I would expect that it does (I don't pay for bandwidth so I've never
wanted to use it). If it doesn't support delay pools then I'd suggest you
download the latest squid source RPM that works with your OS (presumably
from the RH6.2 updates SRPMS section, but it might be in Powertools 6.2),
tweak the make file and/or scripts to enable delay pools, and then build
and install a new Squid RPM.

Hope some of this was helpful.
--

Microsoft is not the answer!
Microsoft? is the question.
NO! is the answer.



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



HPT-370

2001-12-11 Thread Andy Schuler

Hello,

Is RAID 1 (mirroring) supported on the HPT-370 controllers in 7.2? If so how 
do I go about setting it up while installing? With no extra work the 
installer sees the drives separately even though they are RAIDed in the bios. 
Any info out there?

-andy



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Second, it loads any mixer

2001-12-11 Thread Matthew Galgoci


Um, whups, my bad.

Regrads,

Matt

On Tue, Dec 11, 2001 at 08:49:44AM -0500, clovis wrote:
 If there are
 
   no mixer device drivers in the system, the mixer
 
   API's will simply return an error.

[ snip ]

-- 




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: latest rpm?

2001-12-11 Thread Ed Wilts

On Tue, Dec 11, 2001 at 11:06:34AM -0500, Trond Eivind Glomsrød wrote:
 Ed Wilts [EMAIL PROTECTED] writes:
 
  On Tue, 2001-12-11 at 10:56, Lewi wrote:
   is redhat provide rpm for every new release, for example like apache or php,
   if not why, considering a bug in old version? and where i can find it? or i must 
install it from tarball
  
  All software has bugs.  Therefore, to provide patches for all their old
  versions, they'd be nothing else than patching and testing.
  
  Red Hat provides security bugfixes for old releases - I believe they
  still go back to 5.2 or earlier. 
 
 RHL 6.2 is the oldest supported version of RHL - RHL 5.2 was supported
 for 3 years after the release.

Although you work for Red Hat, I'm still going to disagree.  Several packages
have recently been updated for 5.2 and are on your ftp site.  sendmail, for
example, is as recent in 5.2 as it is for 7.2 (8.11.6).  IMHO, Red Hat does
a much better job of supplying security patches for old released compared to
many other vendors.  Perhaps you don't fix all the security holes in the 
ancient releases, but at least you get some for the stragglers.

 Trond Eivind Glomsrød
 Red Hat, Inc.

-- 
Ed Wilts, Mounds View, MN, USA
mailto:[EMAIL PROTECTED]



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Zone file

2001-12-11 Thread Mike Burger

It is both editable via vi, pico, etc, and it does have tabs in it.

On Tue, 11 Dec 2001, Gábor Szemerédy wrote:

 Hello!
 Is the zone file for certain domain simply editable by vi or it has some
 special
 characters? ( tab , esc ... etc. )
 Are there some graphical tools to maintain zone files or there is the
 editor only?
 I would like to change some addresses in it.
 Thanks
 



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



df is lying: where's our free space gone?

2001-12-11 Thread JW

Hello,

We were doing a routine check of one of our redhat 7.0 servers and noticed that it was 
getting low on disk space when it should have had plenty. 

Example 1:

[root@dhp0946 /]# df -h
FilesystemSize  Used Avail Use% Mounted on
/dev/sda6  16G   13G  3.0G  80% /
/dev/sda1  61M  6.3M   51M  11% /boot

Example 2:
[root@dhp0946 /]# df
Filesystem   1k-blocks  Used Available Use% Mounted on
/dev/sda6 16782640  12704088   3232732  80% /
/dev/sda162193  6387 52595  11% /boot


So according to df we have 13 GB of data on this disk, but du  does _not_ agree. Out 
put of du (note du's own  grand total at the bottom)

[root@dhp0946 /]# du -shc *
22M backup
4.8Mbin
6.3Mboot
.264Mdev
.004Mduout
4.3Metc
282Mhome
0   htlog
40M lib
0   log
.004Mlost+found
.012M mnt
235Mmpbackup
.016 mpsnapshot
.036 nsr
.004opt
.001Mproc
15M root
5.7Msbin
.008Mtmp
604Musr
3900Mvar
0   wh
338Mwork

5.5Gtotal

I added it all up by hand and came out with 5458.449 MB.

Can anyone explain this anomaly? Which one is correct, du or df ? Is there any other 
utility I can use to calculate free/taken space? And what is the cause of which ever 
one is wrong being wrong?

TIA!


Jonathan Wilson
System Administrator

Cedar Creek Software http://www.cedarcreeksoftware.com
Central Texas IT http://www.centraltexasit.com



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RE: Second, it loads any mixer - BE CAREFUL I JUST HAD A VIRUS VIRUS WARNING FROM THIS THREAD

2001-12-11 Thread Alexander Shaw

Alex



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Matthew Galgoci
Sent: 11 December 2001 18:24
To: [EMAIL PROTECTED]
Subject: Re: Second, it loads any mixer



Um, whups, my bad.

Regrads,

Matt

On Tue, Dec 11, 2001 at 08:49:44AM -0500, clovis wrote:
 If there are
 
   no mixer device drivers in the system, the mixer
 
   API's will simply return an error.

[ snip ]

-- 




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.306 / Virus Database: 166 - Release Date: 04/12/2001

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.306 / Virus Database: 166 - Release Date: 04/12/2001



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RE: Second, it loads any mixer - BE CAREFUL I JUST HAD A VIRUS VIRUSWARNING FROM THIS THREAD

2001-12-11 Thread Scott

Unless of course you are using Red Hat to read your mail, then you can 
ignore the virus :)






On Tue, 11 Dec 2001, Alexander Shaw wrote:

 Alex
 
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of Matthew Galgoci
 Sent: 11 December 2001 18:24
 To: [EMAIL PROTECTED]
 Subject: Re: Second, it loads any mixer
 
 
 
 Um, whups, my bad.
 
 Regrads,
 
 Matt
 
 On Tue, Dec 11, 2001 at 08:49:44AM -0500, clovis wrote:
  If there are
  
  no mixer device drivers in the system, the mixer
  
  API's will simply return an error.
 
 [ snip ]
 
 



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



windows manager

2001-12-11 Thread dave brett

I gave up and did not hear from anybody.  What I did was delete the
account and put it back in.




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: command to modify words?

2001-12-11 Thread Jeremy C. Reed

On Thu, 6 Dec 2001, Stuart Clark wrote:

I have no clue why I received this old Dec. 6 message. (And I didn't
check the archive to see if it was already answered.)

 delete everything after the @ from a file of one line email addresses.

(And delete the @ sign also.)

cut -d '@' -f 1


  Jeremy C. Reed
  http://bsd.reedmedia.net/  -- BSD news and resources
  http://www.isp-faq.com/-- find answers to your questions




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RE: Special accounts

2001-12-11 Thread Marcel Fréchette

Hi,

This is good, but I am still not confortable with the way those accounts
are actually used.  For instance (and those are only examples):

- I see several (most) system accounts have no command (shell) assigned in
/etc/passwd,
  or have /bin/false.  I have read this means they are not supposed to log
in.
  But then, how are they used?
- Consider the /var/named directory.  On my system it contains 3 files, all
owned
  by system account 'named' with permissions rw-r--r-- (644).  If I want to
edit
  file named.local, say, I can su root and edit the file from there or from
root,
  su named, because then the password is not asked for.  Is there a better
way?
- From what you tell me below about the shutdown account, if I assign it the
  command /sbin/shutdown in /etc/passwd, and then a password, then I could
  su or login to it from a regular user account to shutdown the machine.
  Is this the general procedure?
- How do I go about running a privilege-less program with nobody?
- How do you go about assigning resources to system accounts?  I have seen
  ulimit, but that's a shell built-in.
- I tried usermod -U on a system account I don't use (postgres), and the
second
  exclamation mark in /etc/shadow/ went away.  But usermod -L did not bring
it back.
- I have seen (too) short hints on the net about deleting system accounts
  that I do not use.  For one of them (can't recall which), there was a
  side-effect, that is, some cron script had to be edited after the account
  was removed.

So I have many questions.  I have searched the net only to find courses
descriptions,
hints about deleting unused accounts, and other generalities.  Nothing
comprehensive.

Since a full install of Red Hat Deluxe 7.1 sets up 30 system accounts,
assigned to specific UIDs below 100,
does detailed documentation about them exist, describing the mission of
each account, how it's used, which files/directories it typically owns,
how to safely delete/recreate it, etc?

Thanks,
Marcel Frechette
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jeremy C. Reed
Sent: Tuesday, December 11, 2001 06:26
To: [EMAIL PROTECTED]
Subject: Re: Special accounts


Marcel,

On Mon, 10 Dec 2001, [iso-8859-1] Marcel Fréchette wrote:

 I am looking for help with system accounts or special accounts.  On the
Red
 Hat 7.1 Linux systems I installed on my machines, over 20 of them exist in
 files passwd and shadow (eg shutdown, nobody, named).  I want to
understand
 them more, why they are there, and of course how to use them.

You will notice that different files and directories are owned by
different users (and groups). This is part of the Unix model: different
tasks should be ran (and related files owned) by different users.

In addition, separate users can be assigned different resources (and
capabilities) like amount of memory and number of file descriptors.

(Plus there are various setuid or setgid executables which will run as a
different user or group.)

For example, nobody is the user to use when you want to run a program that
has no privileges (except maybe to write to a tmp directory); nobody
should own no files[1].

named is the user that the BIND name server daemon runs as; so if named
was to crash or be exploited, only the files owned by named could possibly
be compromised.

I know on some Unix systems, a shutdown (or halt) user is simply available
so a shutdown can be done when that user logs in. (A password would need
to be set and the UID modified or shutdown tool changed so it does the
right thing.)

As you can see, the goal with having multiple users is to limit the amount
of privilege needed.

 Also, in the /etc/shadow file of the last system I installed, 15 of the 22
 system accounts have a single asterisk * in the encrypted password
field,
 and the remaining 7 have a double exclamation mark !! in there.  What do
 those values mean?

When the asterisk is there, nothing can match it.

An exclamation mark means a password (or account) is locked via
usermod(8). Also, a single exclamation marks means that a account is not
allowed for logins. So a double exclamation makes sure that if it was
unlocked, it would still have an invalid passwd.

They simply mean that no password is available (you can't login remotely
with a password for these accounts).

  Jeremy C. Reed
  http://bsd.reedmedia.net/  -- BSD news and resources
  http://www.isp-faq.com/-- find answers to your questions

[1] Of course, many still run maintenance scripts that create temporary
nobody-owned files or Apache (or CGI) that could create files owned by
nobody. This is a security issue.




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: streaming audio...

2001-12-11 Thread Michael Sorrentino

As long as you aren't doing anything robust and just want to stream a few 
files here and there, you can stream with http. It's very simple.

Create your RM (media) file and upload it.

Create  a meta file. This is a text file with a .ram extension. Inside the 
text file, put the real http link to the rm file. Upload both files and call 
the .ram file from your web browser. It'll link to the .rm file and it'll 
stream.

This method isn't as efficient as Real Server but if you are just doing a 
few, no worries. No apache mods should be necessary.


On Tuesday 11 December 2001 09:58 am, you wrote:
 Hi all,

 I have a RH72 system that I'd like to play streaming audio on. Are my
 options only to wade thru the mounds of advertisements (including
 pop-under ads!), chicanery, and so-called Free Downloads at real.com or
 are there alternatives?

 It apparently isn't free at all any more, only a Free 14-day trial.
 What a joke.

 Thanks,
 Dave



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: upgrading to latest openssh-server needs libc.so.6(GLIBC_2.2.4)

2001-12-11 Thread Bret Hughes

Jeremy C. Reed wrote:

 The file was from
 ftp://updates.redhat.com/7.1/en/os/i386/openssh-server-2.9p2-11.7.i386.rpm

 $ cat /etc/redhat-release
 Red Hat Linux release 7.1 (Seawolf)

 # rpm -Fvh openssh-server-2.9p2-11.7.i386.rpm
 error: failed dependencies:
 openssh = 2.9p2-11.7 is needed by openssh-server-2.9p2-11.7
 libc.so.6(GLIBC_2.2.4)   is needed by openssh-server-2.9p2-11.7

 The Red Hat RHSA-2001-161 errata says:

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

 I don't see any errata via the errata webpages for 7.x for libc.

 What is up with this libc.so.6(GLIBC_2.2.4)?

 # rpm -q -a | grep -i libc
 compat-glibc-6.2-2.1.3.2
 glibc-devel-2.2.2-10
 glibc-common-2.2.2-10
 glibc-profile-2.2.2-10
 glibc-2.2.2-10

 Are these the right libc for 7.1?

 If so, can someone tell me where I missed the errata for libc?

 Or can someone explain why this RPM for 7.1 was built against this newer
 libc?

 This is under Red Hat Linux 7.1 (also according to /etc/issue). Or maybe
 this system really isn't 7.1?

take a look at

ftp://ftp.redhat.com/pub/redhat/linux/updates/7.1/en/os/i386/

You will see the rpms for glibc that have been placed in the update dir.
  glibc-2.2.4-19.i386.rpm 5071 KbMon Oct 22
01:17:00 2001
  glibc-common-2.2.4-19.i386.rpm  8754 KbMon Oct 22
01:18:00 2001
  glibc-devel-2.2.4-19.i386.rpm   9964 KbMon Oct 22
01:16:00 2001
  glibc-profile-2.2.4-19.i386.rpm 8695 KbMon Oct 22
01:17:00 2001



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: sendmail antivirus

2001-12-11 Thread Rob Saul



Each vendor has their own database of signatures.  No very
efficient, but it's one of the ways they compete with each other.

On Tuesday 11 December 2001 08:35, Leonard wrote:
 Hi everyone,

  Speaking of anti-virus, could anybody point me to a site which holds a
 (complete) virus signature database? I do not mean vendor specific, but a
 generic repository (where the vendors get their data (?)). I seem to be
 unable to provide the search engines with a useful query :).

   Bye,

   Leonard.


-- 
Rob Saul.:|:[EMAIL PROTECTED]:|:.de recta non tolerandum sunt



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



suspend on laptop kills the mouse

2001-12-11 Thread Pierre Kleiber

On upgrading my laptop (Dell Inspiron 7500) from RH 7.0 to RH 7.2 I've
found after a suspend and restart (or after closing and opening the
lid), the system awakens but no longer responds to the mouse
(Logitech, USB, wheel).  I haven't discovered how to re-awaken the
mouse short of rebooting.  Prior to the upgrade the suspend and
restart worked fine.  Does anyone know of a solution?
   Thanks, Pierre Kleiber

-- 
-
Pierre Kleiber Email: [EMAIL PROTECTED]
Fishery Biologist Tel: 808 983-5399/737-7544
NOAA FISHERIES - Honolulu Laboratory Fax: 808 983-2902
2570 Dole St., Honolulu, HI 96822-2396 
-
 God could have told Moses about galaxies and mitochondria and
  all.  But behold... It was good enough for government work.
-



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RE: Special accounts

2001-12-11 Thread Jeremy C. Reed

On Tue, 11 Dec 2001, [iso-8859-1] Marcel Fréchette wrote:

 - I see several (most) system accounts have no command (shell) assigned in
 /etc/passwd,
   or have /bin/false.  I have read this means they are not supposed to log
 in.

No, if it has no shell, it will default to /bin/sh. But, yes, if it is
/bin/false or some/nonexistent-shell then it won't let you log in.

   But then, how are they used?

Programs use the setuid(2) function. For example, a program may start as
root, but quickly change to another user.

Or cron runs the program as the user.

Or su(1) or other tools can run a command as another user.

 su nobody -c 'touch /tmp/nobody-test.$$'
 ls -l /tmp/nobody-test.*

(This is a bad example, because I really believe files shouldn't be owned
by nobody -- that defeats the purpose.)

 - Consider the /var/named directory.  On my system it contains 3 files, all
 owned
   by system account 'named' with permissions rw-r--r-- (644).  If I want to
 edit
   file named.local, say, I can su root and edit the file from there or from
 root,
   su named, because then the password is not asked for.  Is there a better
 way?

named (the program) only need to be able to write to certain files and
directories (using the named user). So some of yoru files can be owned by
different users.

A better way? Maybe create another user account like dns-data and have
it own the files that don't need to be modified by named.

 - From what you tell me below about the shutdown account, if I assign it the
   command /sbin/shutdown in /etc/passwd, and then a password, then I could
   su or login to it from a regular user account to shutdown the machine.

No, /sbin/shutdown needs to be run by root; you would have to change the
UID to zero or make it setuid (not advised) or use some setuid wrapper
script.

   Is this the general procedure?

I don't think so.

 - How do I go about running a privilege-less program with nobody?

See su(1) example above; you could also use nobody's crontab or xinetd (or
inetd). For example, I use the nobody user to stream audio via inetd.

 - How do you go about assigning resources to system accounts?  I have seen
   ulimit, but that's a shell built-in.

Maybe with PAM via pam_limits and /etc/security/limits.conf.

 - I tried usermod -U on a system account I don't use (postgres), and the
 second
   exclamation mark in /etc/shadow/ went away.  But usermod -L did not bring
 it back.

Probably because it thinks it is already locked.

 - I have seen (too) short hints on the net about deleting system accounts
   that I do not use.  For one of them (can't recall which), there was a
   side-effect, that is, some cron script had to be edited after the account
   was removed.

Yes, be sure to double-check cron scripts, etc.

Also, if you delete some user, then maybe it will break some future
software installation or upgrade.

 Since a full install of Red Hat Deluxe 7.1 sets up 30 system accounts,
 assigned to specific UIDs below 100,
 does detailed documentation about them exist, describing the mission of
 each account, how it's used, which files/directories it typically owns,

I am guessing no detailed documentation exists. Mayeb some
vendors/distributions have a document or guidelines for their particular
setups.

 how to safely delete/recreate it, etc?

Safely delete by carefully searching filesystem and software for the use
by the user. Then use userdel, vipw or other tools. Personally, I wouldn't
worry about it too much.

(Please remember to clip out old signatures, mailing list info, and other
unnecessary noise when replying.)

  Jeremy C. Reed
  http://bsd.reedmedia.net/  -- BSD news and resources
  http://www.isp-faq.com/-- find answers to your questions




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: latest rpm?

2001-12-11 Thread Trond Eivind Glomsrød

Ed Wilts [EMAIL PROTECTED] writes:

 On Tue, Dec 11, 2001 at 11:06:34AM -0500, Trond Eivind Glomsrød wrote:
  Ed Wilts [EMAIL PROTECTED] writes:
  
   On Tue, 2001-12-11 at 10:56, Lewi wrote:
is redhat provide rpm for every new release, for example like apache or php,
if not why, considering a bug in old version? and where i can find it? or i 
must install it from tarball
   
   All software has bugs.  Therefore, to provide patches for all their old
   versions, they'd be nothing else than patching and testing.
   
   Red Hat provides security bugfixes for old releases - I believe they
   still go back to 5.2 or earlier. 
  
  RHL 6.2 is the oldest supported version of RHL - RHL 5.2 was supported
  for 3 years after the release.
 
 Although you work for Red Hat, I'm still going to disagree.  Several packages
 have recently been updated for 5.2 and are on your ftp site. 
 sendmail, for example, is as recent in 5.2 as it is for 7.2
 (8.11.6).  

That was one of the last ones. You might notice that e.g. wu-ftpd and
apache were not updated.

-- 
Trond Eivind Glomsrød
Red Hat, Inc.



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: HPT-370

2001-12-11 Thread Andy Schuler

Perhaps I should re-phrase that. Highpoint provides info etc for RH 7.1, has 
anyone had success getting this to work with RH 7.2? Or 7.1? I can't get it 
to work with either.



On Tuesday 11 December 2001 10:30 am, you wrote:
 On Tue, Dec 11, 2001 at 10:12:30AM -0800, Andy Schuler wrote:
  Is RAID 1 (mirroring) supported on the HPT-370 controllers in 7.2? If so
  how do I go about setting it up while installing? With no extra work the
  installer sees the drives separately even though they are RAIDed in the
  bios. Any info out there?

 Go to Google and use linux raid hpt-370 as a search string.  Not too
 hard! You'll see a link to http://www.highpoint-tech.com/hpt370.htm which
 is the official support page from Highpoint.  The answer is that Linux is
 supported.



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: OT: Where to get the Linux 0.01 source code poster sent out by Red Hat

2001-12-11 Thread Bret Hughes

Dan Browning wrote:

 [resend once more, just in case someone can point me in the right
 direction]

 [sorry for the off-topic post, please flame me with a more appropriate
 forum if this is not it]

 As a RHAT stockholder, I received a Linux 0.01 source code poster last
 year with my shareholder voting information and SEC filings.  Does
 anyone know where I can get another one of these?


Dan I would contact Red Hat corporate communications or whatever they use
for stockholder communicatons.  These groups are no usually very large
and chnses are you would be close to someonte that knows where the
posters came from with a phone call.

Bret




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



IMAP Client suggestions?

2001-12-11 Thread Justin Ellison

Hi all,

Today marks the day that I find a new email client.  Mozilla 0.9.6 just ate 
one 
of my Inboxes without a trace.  Evolution has done the same to me before.  I 
think I want to go with a more basic client, pine, mutt, etc.  I have about 4 
mail accounts all setup with an ISP using IMAP access.  What's everyone else 
using for reading IMAP mail?  It seems as though mutt supports it, but it looks 
pretty new.  Pine supports it, but how well?  Is fetchmail a better option?

TIA,

Justin



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Openssl tools reg, gendsa, genrsa, etc

2001-12-11 Thread Emmanuel Seyman

On Tue, Dec 11, 2001 at 02:27:08PM -0500, Jim Lambert wrote:

 These tools aren't in any of these pkgs:

 openssl-devel-0.9.6-9
 openssl-0.9.6-9
 openssl095a-0.9.5a-9
 openssl-perl-0.9.6-9

They're in the updates to your distribution.

Emmanuel



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Installing RPM for Grub

2001-12-11 Thread Chris Montgomery

Newbie alert.

Howdy,

I have RH7.1 installed from the box CDs. Installing grub wasn't an option
with this distro so I want to install it now to dual-boot with Win2k. I
wasn't able to find the grub rpm file using up2date, but I did locate it
under the Rawhide ftp directory at Red Hat's ftp site.

Anyway, I downloaded the grub rpm file to my home directory and have been
trying to install it from there but can't. Typing rpm -i
grub-0.90-11.src.rpm at the command line throws an error that it can't be
installed. Do I need to do this from another directory than home?

Also, I've noticed that there are two types of rpm files. one that
contains .src and one that doesn't (e.g., grub-0.90-11.src.rpm and
grub-0.90-11.rpm). Which one should I be installing?

TIA,

Chris



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: df is lying: where's our free space gone?

2001-12-11 Thread Jeremy C. Reed

On Tue, 11 Dec 2001, JW wrote:

 Can anyone explain this anomaly? Which one is correct, du or df ? Is
 there any other utility I can use to calculate free/taken space? And
 what is the cause of which ever one is wrong being wrong?

Both are correct!

df is showing all use. du only shows what use of files it sees.

In other words, if you have files that are opened and then deleted (and
still opened by another process) then du and df will disagree.

Anyways, I can easily reproduce this.

df:
/dev/wd0g  3069820  28321028422697%/home
du -s /home
2832102 /home

Created a huge file.

/dev/wd0g  3069820  3034898  -118570   104%/home
3034898 /home

Opened it with tail -f and fstat shows it is open.

Then delete it. df still shows that it exists, but du(1) doesn't see it.
/dev/wd0g  3069820  3034898  -118570   104%/home
2832226 /home

So I close the tail processes:
/dev/wd0g  3069820  28322268410297%/home

  Jeremy C. Reed
  http://www.reedmedia.net/
  http://bsd.reedmedia.net/  -- BSD news and resources
  http://www.isp-faq.com/-- find answers to your questions







___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RE: Installing RPM for Grub

2001-12-11 Thread Tong Young

Hmm. I believe that you want the rpm without the .src in it.  I'm a relative
newbie too, but I think you should be fine with just rpm -i, although I tend
to use rpm -ivh because you get a little graph of progress.  I don't
actually know which way is better.  ;)

But yea, download the rpm.  The .src is for building it from source?
Although I don't know how to do that.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Chris Montgomery
Sent: Tuesday, December 11, 2001 12:02 PM
To: [EMAIL PROTECTED]
Subject: Installing RPM for Grub


Newbie alert.

Howdy,

I have RH7.1 installed from the box CDs. Installing grub wasn't an option
with this distro so I want to install it now to dual-boot with Win2k. I
wasn't able to find the grub rpm file using up2date, but I did locate it
under the Rawhide ftp directory at Red Hat's ftp site.

Anyway, I downloaded the grub rpm file to my home directory and have been
trying to install it from there but can't. Typing rpm -i
grub-0.90-11.src.rpm at the command line throws an error that it can't be
installed. Do I need to do this from another directory than home?

Also, I've noticed that there are two types of rpm files. one that
contains .src and one that doesn't (e.g., grub-0.90-11.src.rpm and
grub-0.90-11.rpm). Which one should I be installing?

TIA,

Chris



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



2 quick questions

2001-12-11 Thread Ian Truelsen

First question:
I am thinking of picking up one of the new ATI Radeon all in wonder cards, 
the 8500 AGP card (merry christmas to me) and I was wondering how well 
RedHat deals with it. Has anyone tried one? Any known problems with it? 

Second question:
I have changed the hostname on my web server, so I want to get a new SSL 
certificate that sends the new name. Having the old one seems to cause 
security warnings with a number of browsers, though no IE. Not a surprise 
there I suppose. Anyway, could someone point me to some docs on how to do 
this, as I so far, have had no luck in finding any? 

Thanks. 

Ian. 

Ian Truelsen
Masters program in Philosophy
University of Manitoba, Winnipeg, Canada
BA (Wilfrid Laurier University)
Email: [EMAIL PROTECTED] 

Current favourite quote:
No great civilisation likes forests.
K.F. O'Connor
Lincoln College, Christchurch, New Zealand 



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: sendmail antivirus

2001-12-11 Thread Leonard den Ottolander

Hi Rob,

 Each vendor has their own database of signatures.  No very
 efficient, but it's one of the ways they compete with each other.
 
   Speaking of anti-virus, could anybody point me to a site which holds a
  (complete) virus signature database? I do not mean vendor specific, but a
  generic repository (where the vendors get their data (?)).

 Wrong answer :(. You might be right, but there must be some kind of public 
repository for virus signatures somewhere (fe for scientific purposes). Who 
can tell me where to find such a repository? TIA.

Bye,

Leonard.




___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: streaming audio...

2001-12-11 Thread Jeremy C. Reed

On Tue, 11 Dec 2001, Dave Wreski wrote:

 I have a RH72 system that I'd like to play streaming audio on. Are my
 options only to wade thru the mounds of advertisements (including
 pop-under ads!), chicanery, and so-called Free Downloads at real.com or
 are there alternatives?

You may want to consider using Ogg Vorbis. It is a patent-free,
BSD-licensed implementation for providing compressed audio. Players are
widely available under various operating systems.

Some admins have patched icecast to work with Ogg Vorbis.

  Jeremy C. Reed
  http://www.reedmedia.net/
  http://bsd.reedmedia.net/  -- BSD news and resources
  http://www.isp-faq.com/-- find answers to your questions



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RE: Installing RPM for Grub

2001-12-11 Thread Robert Dege



 But yea, download the rpm.  The .src is for building it from source?
 Although I don't know how to do that.

rpm --rebuild therpm will build the rpm  store it in
/usr/src/redhat/RPMS


 I have RH7.1 installed from the box CDs. Installing grub wasn't an option
 with this distro so I want to install it now to dual-boot with Win2k. I
 wasn't able to find the grub rpm file using up2date, but I did locate it
 under the Rawhide ftp directory at Red Hat's ftp site.

Chris, lilo is also capable of dual booting.  I suggest you read the
HOWTO's at www.linuxdoc.org  Messing around with GRUB, might FUBAR your
MBR, and you won't be able to boot your machine at all  so proceed
with caution, before installing the latest and greatest.


 
-- 

-Rob



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: HPT-370

2001-12-11 Thread Andy Schuler

As a follow-up question, does anyone have an IDE RAID controller that they 
are using under RH 7.2 that they really like? and are you able to do RAID 1 
with it? thanks.


On Tuesday 11 December 2001 11:51 am, you wrote:
 Perhaps I should re-phrase that. Highpoint provides info etc for RH 7.1,
 has anyone had success getting this to work with RH 7.2? Or 7.1? I can't
 get it to work with either.

 On Tuesday 11 December 2001 10:30 am, you wrote:
  On Tue, Dec 11, 2001 at 10:12:30AM -0800, Andy Schuler wrote:
   Is RAID 1 (mirroring) supported on the HPT-370 controllers in 7.2? If
   so how do I go about setting it up while installing? With no extra work
   the installer sees the drives separately even though they are RAIDed in
   the bios. Any info out there?
 
  Go to Google and use linux raid hpt-370 as a search string.  Not too
  hard! You'll see a link to http://www.highpoint-tech.com/hpt370.htm which
  is the official support page from Highpoint.  The answer is that Linux is
  supported.

 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RE: Special accounts

2001-12-11 Thread Leonard den Ottolander

Hi Marcel,

  If I want to edit file named.local, say, I can su root and edit the file
 from there or from root, su named, because then the password is not asked
 for. 

 After the su named you will still be root, because there is no shell for 
named. Only the command /bin/false will have been executed. Do an exit after 
this and root will be logged out, not named.

 - From what you tell me below about the shutdown account, if I assign it the
   command /sbin/shutdown in /etc/passwd, and then a password, then I could su
   or login to it from a regular user account to shutdown the machine. Is this
   the general procedure?

 In the default setup every user that can login on the console can do a 
shutdown, the philosophy being you could pull the plug anyway. If you want 
remote users to be able to shut the machine su-ing to shutdown as you suggest 
probably works (never tried).

 - How do I go about running a privilege-less program with nobody?

 ? If you supply nobody with a shell nobody can run the same executables other 
users can run.

 Since a full install of Red Hat Deluxe 7.1 sets up 30 system accounts,
 assigned to specific UIDs below 100,
 does detailed documentation about them exist, describing the mission of
 each account, how it's used, which files/directories it typically owns,
 how to safely delete/recreate it, etc?

 I would suggest never to do a full install, except for special purposes. This 
way not all these accounts will be created.
 If you want to find out which account has what purpose you could try the 
following (example for named, uid 25):
# find / -uid 25
will give you a listing of all files owned by named. You might want to use the 
switch -xdev as not to descend into other filesystems.
 Take a file from the output of the previous command, and query the rpm 
database which package owns the file, ie:
# rpm -q --whatprovides /var/named
bind-8.2.3-0.6.x
 Now you know user named is used by bind.

Bye,

Leonard.





___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: IMAP Client suggestions?

2001-12-11 Thread Ed Wilts

On Tue, Dec 11, 2001 at 01:51:00PM -0600, Justin Ellison wrote:
 
   Today marks the day that I find a new email client.  Mozilla 0.9.6 just ate 
one 
 of my Inboxes without a trace.  Evolution has done the same to me before.  I 
 think I want to go with a more basic client, pine, mutt, etc.  I have about 4 
 mail accounts all setup with an ISP using IMAP access.  What's everyone else 
 using for reading IMAP mail?  It seems as though mutt supports it, but it looks 
 pretty new.  Pine supports it, but how well?  Is fetchmail a better option?

I use both Evolution and mutt to read IMAP mail on my local IMAP server.  I use
procmail to file the articles into separate folders, and access it all via 
IMAP. Works fairly well.  I happen to be replying to this particular message
via mutt but if I waited until I got home, I'd be reading it via Evolution.

I have not yet made any effort to synchronize address books...  Evolution gets
its addresses via the pilot stuff from my Palm.  One of these days I'll spend
some time to extract it from Evolution and import it into a format that mutt
can read.

-- 
Ed Wilts, Mounds View, MN, USA
mailto:[EMAIL PROTECTED]



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Running a console on the serial port COM1 in 7.1?? Possible?

2001-12-11 Thread Chris Hill

I'm running RedHat 7.1 on a fairly standard PC. What I'm looking for is to 
be able to log on through the COM port ttyS1. I've searched quite 
extensively and found some mention of using agetty or mgetty but neither has 
worked. I plan to connect to the COM port using a windows box running 
HyperTerm through a NULL terminated serial cable with connections something 
like 9600, N, 8, 1.

So far nothing I've tried works... any help would be appreciated.

Thanks,
Chris Hill


_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: HPT-370

2001-12-11 Thread Ed Wilts

On Tue, Dec 11, 2001 at 12:20:32PM -0800, Andy Schuler wrote:
 As a follow-up question, does anyone have an IDE RAID controller that they 
 are using under RH 7.2 that they really like? and are you able to do RAID 1 
 with it? thanks.

I'm quite happy with my Promise TX2.  I've got 2 IBM 40GB UDMA100 drives and
have half of each drive mirrored using Linux mirroring.  This way I've got
my production partitions mirrored, but not my backup or Windows partitions.

I picked up the TX2 at mwave.com for about $25.

Why are you restricting yourself to hardware RAID?

.../Ed
-- 
Ed Wilts, Mounds View, MN, USA
mailto:[EMAIL PROTECTED]



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Redhat 7.2 and Escalade 7850 IDE Raid Controller

2001-12-11 Thread Scott Sharkey

There is an updated image on RedHat's web site in the errata for
corrections to the boot process with Escalade controllers.  Don't
know if it will fix your specific problem, but worth checking out.

-Scott Sharkey
Linux Unlimited, LLC

[EMAIL PROTECTED] wrote:
 
 Has anyone tried to install Redhat 7.2 on a server with two
 3Ware Escalade 7850 IDE Raid Controller ?
 
 It seems that the driver from Escalade doesn`t work ?
  I've made the install with linux dd, the driver is loading,
 but i can`t access the partitions on the Raid ?
 
 Has anyone a solution for this ?
 
 thanx
 
 Christoph
 
 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Openssl tools reg, gendsa, genrsa, etc

2001-12-11 Thread Jim Lambert

Huh?  I've run up2date and I think, I've got the latest versions of these
packages.  Is there some other package I should be installing?

-Jim
On 12/11/01 2:56 PM, Emmanuel Seyman [EMAIL PROTECTED] wrote:

 On Tue, Dec 11, 2001 at 02:27:08PM -0500, Jim Lambert wrote:
 
 These tools aren't in any of these pkgs:
 
 openssl-devel-0.9.6-9
 openssl-0.9.6-9
 openssl095a-0.9.5a-9
 openssl-perl-0.9.6-9
 
 They're in the updates to your distribution.
 
 Emmanuel
 
 
 
 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list
 

-- 
[EMAIL PROTECTED] (Replace Z's with E's to reply)

cat /dev/coffee | /dev/cup | /dev/mouth | /dev/nose  /dev/keyboard
-Anonymous



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RE: Running a console on the serial port COM1 in 7.1?? Possible?

2001-12-11 Thread Burke, Thomas G.

I've never actually done this, but look here:

http://www.linuxdoc.org/HOWTO/Text-Terminal-HOWTO-3.html

 -Original Message-
 From: Chris Hill [SMTP:[EMAIL PROTECTED]]
 Sent: Tuesday, December 11, 2001 3:55 PM
 To:   [EMAIL PROTECTED]
 Subject:  Running a console on the serial port COM1 in 7.1?? Possible?
 
 I'm running RedHat 7.1 on a fairly standard PC. What I'm looking for is to
 
 be able to log on through the COM port ttyS1. I've searched quite 
 extensively and found some mention of using agetty or mgetty but neither
 has 
 worked. I plan to connect to the COM port using a windows box running 
 HyperTerm through a NULL terminated serial cable with connections
 something 
 like 9600, N, 8, 1.
 
 So far nothing I've tried works... any help would be appreciated.
 
 Thanks,
 Chris Hill
 
 
 _
 Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
 
 
 
 ___
 Redhat-list mailing list
 [EMAIL PROTECTED]
 https://listman.redhat.com/mailman/listinfo/redhat-list



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RE: Special accounts

2001-12-11 Thread Marcel Fréchette

Hi Jeremy,

  su nobody -c 'touch /tmp/nobody-test.$$'
  ls -l /tmp/nobody-test.*

I tried running this example from an ordinary account,
and su does ask for nobody's password.
Since none exists (its /etc/shadow entry has a '*'),
I would need to assign one with linuxconf, for instance.
Right?

 I am guessing no detailed documentation exists. Mayeb some
 vendors/distributions have a document or guidelines for their
 particular
 setups.

Actually, I just found a list in chapter 2 of
The Official Red Hat Linux Reference Guide
(see
http://www.redhat.com/docs/manuals/linux/RHL-7.1-Manual/ref-guide/s1-users-g
roups-standard-users.html).
RedHat calls them Standard Users (and Standard Groups).
The manual has 2 simple tables merely listing them though,
I have seen no explanation of purpose, rationale, etc.
In fact, they are subsets of the passwd/group files,
and they are not even complete, lacking 'named' and 'apache',
for example.

So you're right, it looks like no detailed documentation exists.

Regards,
Marcel Frechette



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



RE: Special accounts

2001-12-11 Thread Jeremy C. Reed

On Tue, 11 Dec 2001, [iso-8859-1] Marcel Fréchette wrote:

   su nobody -c 'touch /tmp/nobody-test.$$'
   ls -l /tmp/nobody-test.*
 
 I tried running this example from an ordinary account,
 and su does ask for nobody's password.

Sorry, I did this example as the superuser.

For example, system maintenance scripts already running as root may be
able to run some tasks as nobody (and no password needed).

 Since none exists (its /etc/shadow entry has a '*'),
 I would need to assign one with linuxconf, for instance.
 Right?

No. A password would not be a good idea for that user. If you want some
dummy user that has a password then create another user for this. (A good
idea for building and running unknown source, for example, so it can't
compromise your own data.)

  Jeremy C. Reed
  http://www.isp-faq.com/-- find answers to your questions



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: SSH install problems

2001-12-11 Thread Gordon Messmer

On Tue, 11 Dec 2001, Art Ross wrote:

 When I repeated this process on another RH6.2 box on the home network,
 (Originally was a canned Gnome install for RH6.0 with a RH6.2 upgrade) I
 encountered some problems with the 'make' step.  There were some
 difficults with finding 'socket.h'.  My hunch is this box doesn't have
 all of the appropriate libraries installed.  Does anyone know what might
 be missing from this box's filesystem?

kernel-headers, most likely.

-- 
If I had a dollar for every brain that you don't have,
I'd have one dollar. - Squidward to SpongeBob



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: Openssl tools reg, gendsa, genrsa, etc

2001-12-11 Thread Gordon Messmer

On Tue, 11 Dec 2001, Jim Lambert wrote:

 These tools aren't in any of these pkgs:
 
 openssl-devel-0.9.6-9
 openssl-0.9.6-9
 openssl095a-0.9.5a-9
 openssl-perl-0.9.6-9

Yes, they are.  Like I said earlier: They're in 'openssl':
openssl req
openssl gendsa
openssl genrsa

Those tools are no longer standalone applications.  They're commands given 
to 'openssl' as its first argument.

-- 
If I had a dollar for every brain that you don't have,
I'd have one dollar. - Squidward to SpongeBob



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: window manager not working properly; HELP

2001-12-11 Thread Monte Milanuk



On Tue, 11 Dec 2001, dave brett wrote:

 I turned my computer on this morning and when Xwindow started, it is
 messed up.  The only thing I am able to do is run one xterm.  From there I
 can run any application which will start from a command line.

 I looked through my home directory and cannot find the configuration file
 for starting my window manager.

 I am running RH7.2 and was running gnome and sawfish when I last was using
 the computer.  I would appreciate any suggestions.

 david

Sounds like you somehow nuked your config files for X, so when you log
into X, it starts w/ twm, which, as you have noted, is rather feature-poor
;)

I'm not that familiar w/ the config files that you need to be able to help
you reconstruct them, other than to suggest a couple things.

1)  If you use kdm/gdm to log in to X, you might try something other than
'Default'.  Try specifying GNOME or KDE and see how that works, if it does
at all.

2)  Try creating another user, and copy the dot-files for X created by
default from their /home directory.  Alternately, you could copy from
/etc/skel/ which is where the system stores them, I believe.

HTH,

Monte



_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: IMAP Client suggestions?

2001-12-11 Thread Dan Houghton

Justin:

I've always believed that Linux has been missing a fully functional email
client that supports IMAP - and Windows to some degree as well as I'm sure
someone could make a commercial killing by developing a kick-ass client.
Evolution has impressed me with its progress so far but like yourself it
destroyed some mailboxes but admittedly I was aware that it was only beta
at the time. I still have high hopes for Evolution especially as it becomes
more integrated with Exchange as that's our corporate mail server.

My favorite email client remains Eudora but it's not available for Linux so
rare I use these days. My experience has been:

[1] Netscape - works well with IMAP but not intuitive enough and suffers
from a large number of crashes that made me give up.

[2] Evolution - a great start but not quite ready as the bugs need to be
ironed out still.

[3] Pine - first email client I ever used with great IMAP support once you
track down decent documentation on the Web as configuration is definitely
not intuitive. Is powerful once you figure out how to configure e.g.
changing your reply address from [username]@[boxname] has to be done
through editing .pinerc.

My advice would be to give pine a look as it's never given me any problems
then hope Evolution becomes the Linux email client it's trying to grow up
into.

Dan


At 13:51 11/12/01 -0600, you wrote:
Hi all,

   Today marks the day that I find a new email client.  Mozilla 0.9.6 just
ate one 
of my Inboxes without a trace.  Evolution has done the same to me before.  I 
think I want to go with a more basic client, pine, mutt, etc.  I have
about 4 
mail accounts all setup with an ISP using IMAP access.  What's everyone else 
using for reading IMAP mail?  It seems as though mutt supports it, but it
looks 
pretty new.  Pine supports it, but how well?  Is fetchmail a better option?

TIA,

Justin



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
 



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Re: command to modify words?

2001-12-11 Thread Cameron Simpson

On Tue, Dec 11, 2001 at 11:16:18AM -0800, Jeremy C. Reed [EMAIL PROTECTED] wrote:
| On Thu, 6 Dec 2001, Stuart Clark wrote:
| 
| I have no clue why I received this old Dec. 6 message. (And I didn't
| check the archive to see if it was already answered.)
| 
|  delete everything after the @ from a file of one line email addresses.
| 
| (And delete the @ sign also.)
| 
| cut -d '@' -f 1

Or
sed 's/@.*//'

or a host of other choices ...
-- 
Cameron Simpson, DoD#743[EMAIL PROTECTED]http://www.zip.com.au/~cs/

From the EXUP mailing list  [EMAIL PROTECTED] ...
Wayne Girdlestone [EMAIL PROTECTED]:
WG Let's say there are no Yamaha's or Kawa's in the world.
Stevey Racer [EMAIL PROTECTED]:
SR sriw - so then you are saying that Revelations (from the Bible) has come
SR true and Hell is now on Earth.
WG Your choice for you new bike is either a new '98 fuel injected SRAD, or a
WG new '98 Fireblade.
SR sriw -The devil's minions - full of temptation but never fulfilling their
SR promise.



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



Linux player for 7.2?

2001-12-11 Thread Tong Young

Does anyone know where to find a DVD player for RedHat 7.2?  I tried to get
this Livid thing but their website appears to be down for several days now.
I've tried vlc and ogle and couldn't get it to work.

And my DVD drive shows up as /mnt/cdrom.  Is this normal?



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



USB Zip drive on RH 7.2

2001-12-11 Thread Michael Scottaline

I have a Sony Vaio running RH 7.2.  The laptop has a CD-W/DVD and I
believe during installation this was detected and SCSI support was
included in the kernel.  I've added a USB external Zip drive that is
recognized on a hot plugin.  I edited /etc/fstab by adding the line
/dev/sda4   /mnt/zipautonoauto,user,kudzu 0 0
The disk does mount but when I shutdown, there seems to be a problem with
USB support, where it hangs for a few MINUTES before quickly posting an
error message (something about a new address being rejected) and then
shutting down normally.  Problem with my /fstab entry?  While I'm up and
running the device seems to work OK.  I'm able to copy files to the disk
(though it does appear a bit slow to respond).  It's only on e the
shutdown that I notice a difficulty.  BTW, the device will not work if
connected at boot-up.  It must be connected (or unplugged and
re-connected) following boot up to work.
Any advice or suggestions greatly appreciated.
TIA,
Mike

-- 
We Americans, we're a simple people... but piss us off, and we'll bomb 
your cities.
-- Robin Williams, _Good Morning Vietnam_



___
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



  1   2   >