Re: [EXTERNAL] Re: systemd tftp xinetd

[O'Neal, Miles]

I have only used tftp via xinetd. I'd try that.

On 09/11/2018 09:48 AM, Ken Teh wrote:

What you described works manually.

Basically, the service is not started on reboot even though I've 
enabled it. So I don't know what 'enabling' a service means.


Since tftp-server installs /etc/xinetd.d/tftp, is it hinting that it 
should be started via xinetd?  Do I need to install xinetd or is 
systemd so do-it-all, know-it-all that it's taken over xinetd's 
functions?


I've tried the obvious steps. I'm working my way through all the 
permutations (however illogical) to see what works.  Obviously, 
enabling a systemd service does not necessarily start the service on 
reboot. When does enabling a service not enable it?


I wanted to test an application I wrote and I've spent 3 hours trying 
to configure the system so it will let me.


Systemd is really too much.




On 9/11/18 9:35 AM, Hinz, David (GE Healthcare) wrote:

If you're asking what I think you're asking:

systemctl enable tftp # This adds a symlink for tftp into the 
(target? Milestone? One of those), equivalent to saying "/etc/rc2.d 
is done, now let's go to rc3.d".

systemctl start tftp # This tries to start it
systemctl status tftp # This gives you success, or debug information 
if it didn't work.


If I missed your question entirely, then can you word it differently?

Dave Hinz


On 9/11/18, 9:32 AM, "owner-scientific-linux-us...@listserv.fnal.gov 
on behalf of Ken Teh" on behalf of t...@anl.gov> wrote:


 I need help with how to enable tftp service. I am trying to get 
something done

 and I have no patience for systemd's convoluted logic.
  The tftp-server installs
  (1) /etc/xinetd.d/tftp
  (2) tftp.socket  (what's this?)
  (3) tftp.service
  Manually, I can start the service and everything works. But 
enabling the service
 stays disabled or indirect. Enabling the socket does not start 
the service on

 reboot. Do I need xinetd or does systemd deprecate xinetd?
  Geez!  I miss the old days when Unix was simple.



--
Miles O'Neal
CAD Systems Engineer
Cirrus Logic | cirrus.com | 1.512.851.4659

Re: [EXTERNAL] Loading SL 7.5 from Flash Drive

[O'Neal, Miles]

You probably have it formatted FAT32, which has a 4GB file limit.
Try formatting it NTFS.

On 05/15/2018 03:19 PM, Larry Linder wrote:

I have a usb 3 - 16 G flash drive.
When I try to drag and drop "SL 7.5 everything" it gets to 4.2 G and
quits.  After about 1 minute it come back and says that it cannot splice
file.

The crual joke is that when you move the partial file to trash - no
delte option is available. It creates a .Trash folder.  Two tries and
you dont have enough space.
Nice idea but DUMB.  Oper a terminal mode and us "rm -rf *" and you are
back in business.

I there any way around the 4 G limit and where does it come from ?

Thank You
Larry Linder



--
Miles O'Neal
CAD Systems Engineer
Cirrus Logic | cirrus.com | 1.512.851.4659

Re: Rage against the EL Machine

[O'Neal, Miles]

I'm not real sure what this discussion has to do with Scientific Linux, 
but I'll give this a shot.


On 11/08/2017 05:25 PM, ToddAndMargo wrote:


I can't afford to have my Contacts and Tasks wiped out
by the OS being too out of date to accept fixes and
an OS vendor that won't fix it.  So it works both ways.
RedHat is quite up front about the point of RHEL, which is long term 
stability and support. EL is NOT about being anywhere even close to 
leading edge, much less bleeding edge. If you buy a heavy duty pickup 
truck, you do not get (and should not expect) sports car performance.


We use EL for both servers and workstations in hardware design[1] (and 
we are not alone in this). That's because that's what the third party 
tools support. There is no way those vendors can validate complex tool 
chains against a new build every six months. Yes, we are frustrated that 
we can't use the latest email client, web browser, or aardvarkial 
sanitization discomboobulator, but it comes with the turf. Conversely, 
many software groups prefer something that is very up to date, such as 
Fedora, Ubuntu, etc. They need a sports car, and recognize they can't 
haul a half ton microscope in it.


And you know what? For the job they really need to do (all sorts of 
things around hardware design and basic business and communication 
functions), the EL-based workstations work great.



And you know the Cxxx series of chipsets have been around
for a while now.  Just not long enough to be out of
production at which point it will appear on Red Hat
compatibility list.


Nonsense. Our friends over at Red Hat are continuously supporting
leading edge *server* hardware. 


Niko!  The C236 chipset *IS* a server grade chipset!
And it has been around for a long time.  No doubt Red Hat
will eventually support it in about five years, which is
typical of them and useless to me.

Actually, it was meant to be a consumer and workstation chipset. While 
it is based on a server chipset, it's been somewhat gutted. But either 
way, unless the hardware vendor partners with RedHat, the latter is 
unlikely to support it. Should vendor be yelling at you if your employer 
got caught in a Congressional budget crunch and couldn't pay for massive 
magnets? No, because that's not how it works.

...


My problem is that I have been trying to pound a square peg
into a round hole.  RHEL is a really poor choice for a system
that has a lot of innovation going on on it.


It does sound like you're trying to pound a square peg into a round 
hole, but it's not the peg's fault. One must pick the right peg for the 
hole that needs to be filled.


-Miles


[1] And there is a *lot* of innovation happening on these systems.

Re: [EXTERNAL] Re: scanner

[O'Neal, Miles]

On 10/12/2017 04:42 PM, Paul Robert Marino wrote:
Interestingly my father threw me for a loop on this now a days a low 
grade digital camera actually has higher resolution than most scanners 
so he uses one in a photo copy stand and then just copies the one file 
to his computer via a bluetooth enabled SD card which is faster than 
any scanner on the market. Then he uses gimp or photos of depending on 
which computer he is using to crop it and convert the format if need.
He told me this actually works faster and easier than any scanner he 
has ever used and gets higher resolution as well and requires no 
drivers. All you need is a photo copy stand which is a rig you attach 
your camera to the holds it level to a surface.
Its a fascinating idea and I'm sure he is right about it, and it's 
probably the way I'm going to do it in the future.
That seems like it would introduce distortion, as the document edges 
would be farther from the camera lens than the document center. Kind of 
like most selfies make your nose look bigger.

Re: [EXTERNAL] scanner

[O'Neal, Miles]

I have an ancient HP SCSI scanner (from 1996 or so). If 300DPI hardware 
scan is sufficient, it's excellent. A bit slow, but great scans. The 
foam under the lid recently disintegrated; I need to decide whether to 
refurb or get something that does 600DPI (which I occasionally need).


Nothing fancy, but rock solid. Has worked with SANE forever.

On 10/12/2017 10:31 AM, ToddAndMargo wrote:

Dear List,

   Anyone have a favorite flat bed scanner that is SL friendly?

Many thanks,
-T



--
Miles O'Neal
CAD Systems Engineer
Cirrus Logic | cirrus.com | 1.512.851.4659

Re: Linux Widows Guide

[O'Neal, Miles]

Depending on schedule (for one thing), I'm interested.

On 08/28/2017 02:16 PM, Keith Lofstrom wrote:

Over 25 years, my wife has grown dependent on me to
maintain the computers and fix problems.  I worry
that if something happens to me, she will be unable
to stay connected, do upgrades, keep the printers
working, get stuff repaired and replaced, and resist
charlatans and crooks exploiting her current lack of
knowledge.

We are considering a project over the next year:
writing a "Linux Widow's Guide".  Perhaps that title
is sexist;  I have met many competent women Linux
adepts, but none with a non-techy husband depending
on Linux systems that she exclusively maintains.
"Linux Widow(er)s Guide" seems clunky and harder for
a librarian to catalog, but might actually sell better.

I imagine there are many "Linux Spouses" on this list
with similar dependents;  would anyone else like to
contribute writing to this project?

Keith



--
Miles O'Neal
CAD Systems Engineer
Cirrus Logic | cirrus.com | 1.512.851.4659

Re: Help connecting to VNC server

[O'Neal, Miles]

I assume you started the VNC server, and connected to the same display 
with the viewer?

Is the SL system running a firewall?
Can you ssh to the SL system?

On 06/26/2017 02:04 PM, Stan Orlov wrote:

Greetings - this is my first post :)

I have a brand new SL 6.9 running in a virtual machine on a VMware server. It has Tiger 
VNC 1.1.0-24.el6 to which I want to connect with VNC Viewer 6.0.3 from my Windows 7 
workstation. When I try, the VNC Viewer tells me "The connection was refused by the 
computer".

I read different forums and tried editing '/etc/sysconfig/vncservers', etc., 
but the result is the same.  Being a total newbie to SL, I would really 
appreciate your advice!



--
Miles O'Neal
CAD Systems Engineer
Cirrus Logic | cirrus.com | 1.512.851.4659

Re: Security ERRATA Important: kernel on SL6.x i386/x86_64

[O'Neal, Miles]

The SL email system was also broken for a while. A message came through 
about that within the last couple of days.


On 06/20/2017 06:04 PM, Steven J. Yellin wrote:
Last November I was "automatically removed from the 
SCIENTIFIC-LINUX-USERS list (Mailing list for Scientific Linux users 
worldwide)  as a result of repeated delivery error reports from your 
mail system."  So one possibility is that your mail system is 
occasionally failing to deliver mail to you from this list, but you 
haven't yet been removed.  In my case, the reason was that the 
listserver sometimes sends email with a header longer than 32768 
bytes, which the SLAC mail system couldn't handle. FermiLab said such 
long headers are becoming necessary because "cloud systems that 
everyone has and will be moving to, add additional diagnostic info in 
the headers so if people report any errors, they can more easily be 
diagnosed."  The solution was to convince the managers of SLAC's mail 
system to increase their incoming header size parameter.


Steven Yellin

On Wed, 21 Jun 2017, Bill Maidment wrote:

Hi. Is there something wrong with this mailing list? I received this 
response, but I never received the original message. This is not the 
first time I have noticed this.



Cheers
Bill


-Original message-

From:Stephan Wiesand 
Sent: Wednesday 21st June 2017 2:58
To: scientific-linux-us...@listserv.fnal.gov
Subject: Re: Security ERRATA Important: kernel on SL6.x i386/x86_64

Kudos to the SL team at FNAL for once again getting the updates for 
a really nasty issue out incredibly quickly. Impressive.


--
Stephan Wiesand
DESY -DV-
Platanenenallee 6
15738 Zeuthen, Germany







--
Miles O'Neal
CAD Systems Engineer
Cirrus Logic | cirrus.com | 1.512.851.4659

Re: Second network adapter

[O'Neal, Miles]

The reality is, if you don't involve someone from IT, you have a very 
high likelihood of causing problems for both yourself and others. IT 
can't necessarily do all the work here, but they should definitely be 
involved in the discussion. If nothing else, they should be helping 
decide which route (sic) to go. Using a DHCP address someone else might 
use will piss off the affected user and IT when they have to chase it 
down. Finding a router to unexpected networks will piss off IT, as will 
having rogue wifi spots. It's just all around better to involve IT.

If an IT group is as Konstantin as you describe, there is something wrong.
I spent 20+ years as a software engineer, and the last 15 or so in IT 
roles supporting all sorts of engineers so I know both sides.


On 03/31/2017 12:53 PM, Konstantin Olchanski wrote:

On Fri, Mar 31, 2017 at 07:40:15AM -0400, James M. Pulver wrote:

Shouldn't we all take a step back here and ask why your IT support
isn't providing the resources you need to run the experiment?



Cue-in the usual "expectation vs reality" meme.

The reality of IT support is you open a helpdesk ticket and they close
it with 2 answers "you are not permitted to do this" or "we do not support
what you are trying to do".

The actual reality of IT support is they do not have 100 network engineers
sitting around doing nothing (think firemen at the fire station)
waiting for your request, ready and eager to jump in and help you.
Even if IT department has people who can understand and implement
special non-standard unusual things, such people are usually
super busy and overworked. Good luck getting their attention
and a piece of their time.

As they say, salvation of the drowning is the responsibility of the drowning.

So we all should better learn how to swim. This is why this place is generally
very supportive to people like the guy with the present request/question.


K.O.



I certainly would not want a user to set up an ad-hoc linux router
that they didn't really understand, and hook that to my network. I
also wouldn't want WiFi interference from an ad hoc wifi access
point potentially causing issues with users of the IT wifi service.

All that "big picture" stuff set aside, it's not obvious to me if
you can do this without either IT help or a local router and DHCP
server, because at least for me, most Android tablets assume DHCP -
I don't even know if I can manually set an IP address. I also don't
know - can this unified remote product connect to a bare IP address,
does it use broadcasts to find the server, do they use a cloud
service in the background?

Again, if you're at home and want to play around with this, I think
you can use the instructions here to potentially get it going. At
work? I'd seriously make sure I'm not going to interact with the
production network and cause a lot of unhappy people accidentally
(accidential rogue DHCP server, incorrect routing broadcasts, wifi
to nowhere or wifi interference depending on location, wifi range,
configuration etc).


James Pulver
CLASSE Computer Group
Cornell University

On 03/30/2017 04:50 PM, David Sommerseth wrote:

On 30/03/17 22:22, Brown, Christopher A wrote:

Hi David,


On 03/30/2017 04:03 PM, David Sommerseth wrote:

On 30/03/17 20:53, Brown, Christopher A wrote:

Hi list users,

I am not a network administrator and know only a little bit about the
topic. I need to set up a switch in my lab, so that I can have a wifi
access point and an SL7 desktop computer on the same network, as I need
to be able to connect to the pc using a tablet. My administrator does
not allow switches to be on the network, so I need two network adapters
on my desktop, one for internet, and on on the local switch.

I tried a nominal setup at home first, with my home wifi access point,
router/switch and using only a single adapter. I managed to open the
required ports using firewalld, and my setup works great at home, where
I can connect a tablet over wifi and access my desktop as I need. The
only problem I see there is that the ports I opened are open to the
world, but since that was temporary for testing, it was fine. They are
now closed.

I bought a usb ethernet adapter, which shows up as a network interface
on my lab computer. I now need to configure my lab computer as follows.
I would like the onboard network adapter to be the default (used for web
browsing etc), and use default settings (public zone, etc). And I would
like the new usb network adapter to have the required ports open, so
that I can access that computer over wifi with my local switch.

As I said, I have used firewall-cmd to open and close ports. I know a
little bit, but not enough to accomplish what I describe above.

Can anyone help with this? Just let me know if more information is needed.

As you are not allowed to add a switch on your network, I do not
recommend a bridged setup, where the "internet" interface you already
have is joined together with the USB ethernet adapter.  This would in

Re: Connie Sieh, founder of Scientific Linux, retires from Fermilab

[O'Neal, Miles]

Wow. Connie, you are a national treasure as far as I am concerned. Thank 
you for all the incredible work you put in over the years; SL and the 
support from your team were a lifesaver in a previous job, and still 
very helpful. Blessings on you and all you do!


-Miles

Re: [SCIENTIFIC-LINUX-USERS] Problem with listserv

[O'Neal, Miles]

Since it tells you why it failed, you should discuss this with your 
email admin.
At the same time, those are some stupidly large email headers. Someone 
at FNAL should look into that. Thanks, Microsoft.


On 09/30/2016 11:22 AM, Pat Riehecky wrote:

On 09/30/2016 09:28 AM, FRANCHISSEUR Robert LMD wrote:

Hello,

I just received a mail from lists...@listserv.fnal.gov
saying :

You have been automatically  removed from the SCIENTIFIC-LINUX-USERS 
list
(Mailing  list for  Scientific  Linux  users worldwide)  as  a 
result  of

repeated delivery error reports from  your mail system.


- The failing address is rob...@franchisseur.fr.

- The first error was reported on 2016-08-30.

- Since then, a total of 2 delivery errors have been received.

- The last  reported error was: 5.6.0 552 5.6.0  Headers too large 
(32768

max)


I don't understand what happened but I see that there are tons of lines
like :


X-MS-Office365-Filtering-Correlation-Id: 
c68f046b-a396-4aeb-d01f-08d3e8ecc238

X-Microsoft-Exchange-Diagnostics-untrusted: ...
X-Microsoft-Antispam-Untrusted: UriScan:;...
X-Microsoft-Exchange-Diagnostics-untrusted: ...
X-Microsoft-Antispam-PRVS: 

in the last mails I received from scientific-linux-users list


Am I the only one with this problem ?

Help will be highly appreciated.




I have seen some sites that dislike the size of the headers from the 
FNAL listserv.


Pat



--
Miles O'Neal
CAD Systems Engineer
Cirrus Logic | cirrus.com | 1.512.851.4659

Re: ixgbe driver and port names

[O'Neal, Miles]

I long ago quit trusting the OS to bring devices up in any given order. 
No matter what I did, eventually a new kernel found a way around it. I 
forcibly associate MAC addresses with device names. It's the only road 
to sanity.

Re: SNMP scanner?

[O'Neal, Miles]

I'm not going to argue either side here, just note that your email 
client's filters can easily delete any specific subject line, perhaps 
with a user or set of users as to and from entries as well. I would 
remove the filter[s] after a week to avoid missing future, completely 
different conversations.


On 08/05/2016 01:22 PM, P. Larry Nelson wrote:

With all due respect, and not interested at all in flaming or starting
one of those wars, I, and I think most folks on this list, find that the
occasional dip into topics slightly off of SL issues can be very 
educational.

And for me, that's what it's all about.  The sharing of knowledge, tools,
hints, tricks, whatever...  Because I know just enough about most things
to be a little dangerous, and it's wonderful to find out more so I can be
even more dangerous!

- Larry

stroe wrote on 8/5/16 9:38 AM:

Could you please stop this, which is not an SL issue?

On 2016-08-05 17:19, Lamar Owen wrote:

On 07/30/2016 06:35 PM, ToddAndMargo wrote:

I am looking to do network discovery. Basically, everything
on the interface, regardless of what network it belongs to
or if even has an ip assigned.  Like AutoScan Network, only
not abandoned.


I have a dedicated install of NetworkSecurityToolkit (NST) on a box
connected to two ports on one of our core switches.  One port is the
admin port that NST serves its web GUI on; the second port is a
capture-only port and connects to a SPAN port on the core switch
(Cisco terminology, as it's a Cisco 7609).  I set up the SPAN to
redirect traffic for the ports and/or VLANs I'm interested in looking
at, and then capture all the traffic (I capture all traffic then
filter it out).  Not as clean as some other solutions, but it does get
everything.






--
Miles O'Neal
CAD Systems Engineer
Cirrus Logic | cirrus.com | 1.512.851.4659

Re: [SCIENTIFIC-LINUX-USERS] Transparent Screen Lock for Enterprise Linux

[O'Neal, Miles]

There is already an EPEL package named tlock, but it's something 
different- a terminal lock program.


Just a data point.

On 07/15/2016 10:45 AM, Pat Riehecky wrote:

Neat!

Any chance you can get it into EPEL?

Pat


On 07/15/2016 10:41 AM, Devin A. Bougie wrote:
Cornell's Laboratory for Accelerator-based ScienceS and Education 
(CLASSE) is pleased to share our Transparent Screen Lock for 
Enterprise Linux.  Tested on SL6/7 and GPLv2 licensed, this software 
provides a transparent screen lock over one's desktop.  A 
configurable list of groups are able to unlock the screen, and logs 
document who unlocked the screen when.


This software has been used for over two years and proven useful in 
kiosk and operational environments where graphical displays need to 
stay running, updating, and visible, but to comply with various 
security policies the screen must lock after defined periods of 
inactivity.


To download the code or contribute to the project, please visit us on 
github.  Additional issue reports and any code contributions would be 
greatly appreciated.


https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_CLASSE-2DCornellUniversity_EnterpriseLinux-2DTransparentScreenLock=DQIC-g=O3LcjD-V2Iepl5V0N1424A=VCvRwPOrm0njzjSrvx26Ik46vMGFCQNOuW-so6eZTdM=ds_kwMPg3-4ufIcMnVGHieiWLMcW8zYROg0fRtH7R1Y=tGMKLJ7BpXv315BuYo9aaR9pFOeMIPMkKX1obVg8Dd8= 





--
Miles O'Neal
CAD Systems Engineer
Cirrus Logic | cirrus.com | 1.512.851.4659