Re: [SLUG] CAN-2004-1137

2004-12-29 Thread O Plameras
hilton de meillon wrote:
Secondly would 'iptables -A INPUT -p IGMP -j REJECT' protect my machine from
remote attacks ?.
 

This is not the suggested solution.
The suggested  workaround is to recompile your kernel
with 'MULTICASTING' set to OFF.
Then check if you have:
/proc/net/igmp
/proc/net/mcfilter
if both exist and are non-empty you are vulnerable!



--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


RE: [SLUG] CAN-2004-1137

2004-12-29 Thread hilton de meillon
Ok no problem. 

Apologies to all.



-Original Message-
From: Ken Foskey [mailto:[EMAIL PROTECTED] 
Sent: Thursday, 30 December 2004 1:27 PM
To: hilton de meillon
Subject: Re: [SLUG] CAN-2004-1137

On Thu, 2004-12-30 at 12:07 +1000, hilton de meillon wrote:
> Hi All,
> 
> Can anyone tell me why not many distros have an update for the 
> CAN-2004-1137 (among other kernel vulnerabilities) yet ?.

Please do not use Reply to create a new thread.  It really stuffs up
threading and people may ignore your message due as they are not interested
in the specific thread.

Regarding your question,  I would help but I have no idea.

--
Ken Foskey
OpenOffice.org developer



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] PC's available

2004-12-29 Thread Simon Bryan
Hi all,
I have around 15 PC's and monitors available free to anyone who wants /
needs them. They are a mixture of P90 and P11 processors most with 32MB
Ram some slightly more. They have been used as thin clients on an LTSP
network and ar being replaced by some more up to date donated systems.

These are free to whoever wants them, but the pickup point is in Hornsby.
Any takers please reply offlist.

Cheers and a Happy New Year to all



-- 
Simon Bryan
IT Manager
OLMC Parramatta
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] horizontal scrollbar terminal

2004-12-29 Thread Angus Lees
At Thu, 30 Dec 2004 09:08:42 +1100, James A Coffey wrote:
> I have been using Linux for a number of years and the only gripe
> I have is that I can not find a terminal emulator that has horizontal 
> scroll bars or I can't find away to configure my environment so that 
> lines scroll horizontally and I can scroll through them using arrow 
> keys for example. Why would I want them I hear you ask ?
> Simply because when you are tailing a log file ( eg syslog from cisco
> routers or worse snmp traps) having a line wrap makes viewing the logs
> very difficult.  All I am after is something like xnmevent viewer from
> HP that doesn't wrap lines but alllows you to scroll horizontally
> without stopping the real time logs.

Try xconsole for a simple light-weight solution.  I'd use (x)emacs
with `truncate-lines' set to true, but thats a bit of a sledgehammer
if you aren't already using it for some other reason..

-- 
 - Gus

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] PDF generated from a server is missing fonts

2004-12-29 Thread Angus Lees
At Thu, 30 Dec 2004 00:49:49 +1100, Michael Lake wrote:
> I have a server and I'm using pdflib to generate a PDF file and sending 
> back to a user. At home it all works fine. But on the server when I 
> create the PDF and view it ALL the text is missing. Even if I download 
> the PDF file there are no fonts.
> 
> I think I need some debian font package but what one. There are so many.
> Its a Debian system and it is not running XFree or any X.
> 
> Any idea what font package to install so the libary can find a plain 
> times-roman and a helvetica to embed?

Ok.  PDF (like Postscript) has 14 "base" fonts that are assumed to
exist in any reader and there is no need to embed them.  Courier,
Helvetica and Times Roman are in those base 14.

A very simple tool for finding out what fonts are referenced and/or
embedded in a PDF is "pdffonts" that comes with xpdf (its in the
xpdf-utils Debian package).  For example, a simple pdftex-generated
PDF I happened to have handy gives:

 /tmp% pdffonts intermezzo.pdf 
 name type emb sub uni object ID
   --- --- --- -
 XSSGUM+CMR12 Type 1   yes yes no   6  0
 LDZDIG+CMR10 Type 1   yes yes no   9  0

Note the "emb" column showing that both these type1 fonts are embedded
in the PDF.  (The random name prefix is a PDFTeX workaround for a bug
on MSWindows Acroread)

So what you should do is run pdffonts on your PDF file.  Either you
have forgotten to embed some fonts that need to be (ie: any fonts
outside the base 14) and only some of your viewers have access to the
font through other means (its installed elsewhere on your filesystem);
or you are using the base fonts and your xpdf is unable to find its
installed version of them (from the gsfonts package on Debian) and
your PDF file should work fine elsewhere.

From the error message you mention in another post, I'm suspecting the
latter.  Try fixing/removing your ~/.xpdfrc and see what happens.

-- 
 - Gus

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Font & Antialiasing problems

2004-12-29 Thread Angus Lees
At Tue, 28 Dec 2004 22:55:13 +1100, Indelible  wrote:
> I don't have have gnome installed either, just WindowMaker.
> So I guess gnome-font-properties is not really an option.

Ah. So edit /etc/fonts/fonts.conf (or ~/.fonts.conf) directly.

This is assuming your fonts are rendered through fontconfig+Xft.  If
fonts.conf doesn't seem to change the fonts in question, you might
have to describe which particular fonts/programs are affected.

-- 
 - Gus

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] sshd config: tighten access ?

2004-12-29 Thread David Kempe
Voytek wrote:
is a public web/mail server, so, I need to allow full access to web/mail/dns
well instead of the ALL bit in hosts.allow/deny just use sshd
if you use this tcpwrapper features, you can allow whole subnets easily.
like so:
(hosts.allow)
#Australia
sshd:   203.0.0.0/255.0.0.0
(hosts.deny)
#Block ssh from everywhere (except those in hosts.allow)
sshd: ALL
of course you could just add the fixed ip and the subnet of your dialup 
IPs. that way at least you massively slash the amount of hosts that can 
connect to you. and mostly avoid the crackers from Romainia and Russia

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] sshd config: tighten access ?

2004-12-29 Thread Tony Green
On 30/12/2004, at 2:42 PM, Brett Fenton wrote:
if you're really interested you can add a line like to hosts.deny
ALL: ALL: spawn (/bin/echo -e "%d %a %c %s from %h at `date`" 
|/usr/bin/mail
-s 'LOGIN ATTEMPT %h %a' [EMAIL PROTECTED])&

which basically emails you a log each time someone tries to connect. 
the
connections will always fail unless they are coming from an IP from 
within an
IP or IP range specified in hosts.allow
Swatch makes life a lot easier when you're trying to do this kind of 
thing.

--
Tony Green <[EMAIL PROTECTED]>
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] sshd config: tighten access ?

2004-12-29 Thread Voytek


> what do you use the machines for? if there are no services that require
> general access eg a web or mail server, you can use hosts.allow and
> hosts.deny to basically deny everything other than what is in the
> hosts.allow
> file. you could add some general C class block (or B class) to hosts.allow
>
> if you're really interested you can add a line like to hosts.deny

Brett,

is a public web/mail server, so, I need to allow full access to web/mail/dns



-- 
Voytek
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] sshd config: tighten access ?

2004-12-29 Thread Brett Fenton
what do you use the machines for? if there are no services that require 
general access eg a web or mail server, you can use hosts.allow and 
hosts.deny to basically deny everything other than what is in the hosts.allow 
file. you could add some general C class block (or B class) to hosts.allow

if you're really interested you can add a line like to hosts.deny

ALL: ALL: spawn (/bin/echo -e "%d %a %c %s from %h at `date`" |/usr/bin/mail 
-s 'LOGIN ATTEMPT %h %a' [EMAIL PROTECTED])&

which basically emails you a log each time someone tries to connect. the 
connections will always fail unless they are coming from an IP from within an 
IP or IP range specified in hosts.allow

regards, brett

On Thursday 30 December 2004 13:01, Voytek wrote:
> I just looked through some logs, and, see a lot of attempted access like:
>
> # grep "illegal user" secure
> Dec 29 10:10:11 koala sshd[20080]: input_userauth_request: illegal user
> jane Dec 29 10:10:14 koala sshd[20080]: Failed password for illegal user
> jane from 20
> 3.42.32.89 port 56720 ssh2
> Dec 29 10:10:15 koala sshd[20083]: input_userauth_request: illegal user
> jane Dec 29 10:10:16 koala sshd[20085]: input_userauth_request: illegal
> user pamela
> Dec 29 10:10:18 koala sshd[20083]: Failed password for illegal user jane
> from 20
> 3.42.32.89 port 56825 ssh2
> Dec 29 10:10:18 koala sshd[20085]: Failed password for illegal user pamela
> from
> 203.42.32.89 port 56842 ssh2
> Dec 29 10:10:20 koala sshd[20088]: input_userauth_request: illegal user
> pamela
> Dec 29 10:10:22 koala sshd[20088]: Failed password for illegal user pamela
> from
> 203.42.32.89 port 56898 ssh2
> Dec 29 22:52:18 koala sshd[944]: input_userauth_request: illegal user test
> Dec 29 22:52:21 koala sshd[944]: Failed password for illegal user test
> from 213.
> 149.114.51 port 59211 ssh2
> Dec 30 10:48:10 koala sshd[30110]: input_userauth_request: illegal user
> test Dec 30 10:48:10 koala sshd[30109]: input_userauth_request: illegal
> user test Dec 30 10:48:14 koala sshd[30109]: Failed password for illegal
> user test from 64
> .174.136.250 port 2399 ssh2
> Dec 30 10:48:14 koala sshd[30110]: Failed password for illegal user test
> from 64
> .174.136.250 port 2401 ssh2
> Dec 30 10:48:22 koala sshd[30111]: input_userauth_request: illegal user
> guest Dec 30 10:48:24 koala sshd[30111]: Failed password for illegal user
> guest from 6
> 4.174.136.250 port 2433 ssh2
>
> what should I do to increase security ?
>
> 99% of the time, I'm the sole user accessing via ssh, ocassionally, I
> temporarily allow someone else.
> 80% of the time, I ssh from a fixed IP, rest of the time, I ssh from
> several Aussie ISP dislups/adsl
>
> is it worthwile to scan logs and block these ips temporarily ?
>
> is it easy to add such IPs to my ipchains ?
>
>
>
>
> --
> Voytek

-- 
Brett Fenton
NetRegistry Pty Ltd
___

http://www.netregistry.com.au/

Tel: +61 2 96996099  |  Fax: +61 2 96996088
PO Box 270 Broadway  |  NSW 2007, Australia

Your Total Internet Business Services Provider
Trusted by 10,000s of Oz Businesses Since 1997

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] named illegal attempts ?

2004-12-29 Thread Erik de Castro Lopo
On Thu, 30 Dec 2004 14:07:04 +1100 (EST)
"Voytek" <[EMAIL PROTECTED]> wrote:

> Erik,
> well, really just one, primary name server for the domain,
> it seemed like a good reason..

If you need to allow people outside your LAN to be looking
up names of machines in your domain then that is a good 
reason. Its not uncommon for people to be running named 
without good reason.

Blocking single IPs here and there is usually not worth the
effort.

Erik
-- 
+---+
  Erik de Castro Lopo  [EMAIL PROTECTED] (Yes it's valid)
+---+
"Neither noise nor information is predictable."
  -- Ray Kurzweil
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] named illegal attempts ?

2004-12-29 Thread Voytek


> On Thu, 30 Dec 2004 13:08:42 +1100 (EST)
> "Voytek" <[EMAIL PROTECTED]> wrote:
>
>> should I block that IP ?
>
> Do you have any good reason to be running named at all?

Erik,
well, really just one, primary name server for the domain,
it seemed like a good reason..

-- 
Voytek
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


RE: [SLUG] Re: sshd config: tighten access ?

2004-12-29 Thread hilton de meillon
Hey all,

I just read a nice article at fedora news re: tightening sshd security. 

http://www.fedoranews.org/contributors/richard_flude/ssh/

You can increase sshd security by using the AllowUsers  directive.
This will only allow said users the possibility to login via ssh.

Cheers,

Hilton. 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Matthew Palmer
Sent: Thursday, 30 December 2004 12:20 PM
To: slug@slug.org.au
Subject: [SLUG] Re: sshd config: tighten access ?

On Thu, Dec 30, 2004 at 01:01:04PM +1100, Voytek wrote:
> Dec 30 10:48:24 koala sshd[30111]: Failed password for illegal user 
> guest from 6 4.174.136.250 port 2433 ssh2
> 
> what should I do to increase security ?

Disconnect your machine from the Internet.

> 99% of the time, I'm the sole user accessing via ssh, ocassionally, I 
> temporarily allow someone else.
> 80% of the time, I ssh from a fixed IP, rest of the time, I ssh from 
> several Aussie ISP dislups/adsl
> 
> is it worthwile to scan logs and block these ips temporarily ?

By the time you find 'em and block 'em, they're gone.

> is it easy to add such IPs to my ipchains ?

Sure, if you really, really want to.  ipchains -A input -s  -j DROP or
whatever ipchains wants.

I've heard tell that changing the port that your local SSH listens on to
something non-obvious ( is right out for that reason) can drop your
received scan rate significantly.  I couldn't be arsed, and since my
machines typically run passwordless these days (as in
AllowPasswordAuthentication no) they can guess my private key all day, every
day, and I'm not going to be overly worried.

- Matt


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] named illegal attempts ?

2004-12-29 Thread Erik de Castro Lopo
On Thu, 30 Dec 2004 13:08:42 +1100 (EST)
"Voytek" <[EMAIL PROTECTED]> wrote:

> should I block that IP ?

Do you have any good reason to be running named at all? If not, disable
it. If you only need it so that machines on you LAN can get DNS, then
firewall off external access.

Erik
-- 
+---+
  Erik de Castro Lopo  [EMAIL PROTECTED] (Yes it's valid)
+---+
I'd rather not work with people who aren't careful. It's darwinism in
software development.
Linus Torvalds on the linux-kernel list
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Re: sshd config: tighten access ?

2004-12-29 Thread Matthew Palmer
On Thu, Dec 30, 2004 at 01:01:04PM +1100, Voytek wrote:
> Dec 30 10:48:24 koala sshd[30111]: Failed password for illegal user guest
> from 6
> 4.174.136.250 port 2433 ssh2
> 
> what should I do to increase security ?

Disconnect your machine from the Internet.

> 99% of the time, I'm the sole user accessing via ssh, ocassionally, I
> temporarily allow someone else.
> 80% of the time, I ssh from a fixed IP, rest of the time, I ssh from
> several Aussie ISP dislups/adsl
> 
> is it worthwile to scan logs and block these ips temporarily ?

By the time you find 'em and block 'em, they're gone.

> is it easy to add such IPs to my ipchains ?

Sure, if you really, really want to.  ipchains -A input -s  -j DROP or
whatever ipchains wants.

I've heard tell that changing the port that your local SSH listens on to
something non-obvious ( is right out for that reason) can drop your
received scan rate significantly.  I couldn't be arsed, and since my
machines typically run passwordless these days (as in
AllowPasswordAuthentication no) they can guess my private key all day, every
day, and I'm not going to be overly worried.

- Matt


signature.asc
Description: Digital signature
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

[SLUG] named illegal attempts ?

2004-12-29 Thread Voytek
for quite a while now, I keep seeing such:

Dec  5 02:42:02 koala named[27794]: client 61.90.192.106#17006: update '
.com.au/IN' denied
Dec  5 02:47:31 koala named[27794]: client 61.90.192.106#17026: update '
.com.au/IN' denied
...
Dec  5 04:03:49 koala named[27794]: client 61.90.192.106#17262: update '
.com.au/IN' denied
Dec 29 18:18:05 koala named[27794]: client 61.90.192.106#18260: update 'a
.com.au/IN' denied
Dec 29 18:18:31 koala named[27794]: client 61.90.192.106#18270: update '
.com.au/IN' denied
Dec 29 18:59:04 koala named[27794]: client 61.90.192.106#18409: update '
.com.au/IN' denied

# host 61.90.192.106
106.192.90.61.in-addr.arpa domain name pointer
ppp-61.90.192.106.revip.asianet.co.th.

owner of that domain is actually in Thailand

could that be something misconfigured on their end ?
should I block that IP ?

-- 
Voytek
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] CAN-2004-1137

2004-12-29 Thread hilton de meillon
Hi All,

Can anyone tell me why not many distros have an update for the CAN-2004-1137
(among other kernel vulnerabilities) yet ?. 

Ubuntu, Redhat, SuSe have updated kernels but pretty much all the rest do
not have an updated kernel for this issue. 

Secondly would 'iptables -A INPUT -p IGMP -j REJECT' protect my machine from
remote attacks ?.

I tried this rule and then ran the proof of concept exploit from
http://www.securityfocus.com/bid/11917/solution/ and it still crashed my
(slackware) machine. I am assuming that it connects over a unix socket or
exploits one of the non-networked vulnerabilities as according to secfocus
there are three actual vulnerabilities contained in this vulnerability.

Lastly I would have to say that this is a bit of a shocker for the linux
community, this vulnerability could be used with devastating effect, I am a
bit disappointed with linux in this regard.

Any comments appreciated.



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] sshd config: tighten access ?

2004-12-29 Thread Voytek
I just looked through some logs, and, see a lot of attempted access like:

# grep "illegal user" secure
Dec 29 10:10:11 koala sshd[20080]: input_userauth_request: illegal user jane
Dec 29 10:10:14 koala sshd[20080]: Failed password for illegal user jane
from 20
3.42.32.89 port 56720 ssh2
Dec 29 10:10:15 koala sshd[20083]: input_userauth_request: illegal user jane
Dec 29 10:10:16 koala sshd[20085]: input_userauth_request: illegal user
pamela
Dec 29 10:10:18 koala sshd[20083]: Failed password for illegal user jane
from 20
3.42.32.89 port 56825 ssh2
Dec 29 10:10:18 koala sshd[20085]: Failed password for illegal user pamela
from
203.42.32.89 port 56842 ssh2
Dec 29 10:10:20 koala sshd[20088]: input_userauth_request: illegal user
pamela
Dec 29 10:10:22 koala sshd[20088]: Failed password for illegal user pamela
from
203.42.32.89 port 56898 ssh2
Dec 29 22:52:18 koala sshd[944]: input_userauth_request: illegal user test
Dec 29 22:52:21 koala sshd[944]: Failed password for illegal user test
from 213.
149.114.51 port 59211 ssh2
Dec 30 10:48:10 koala sshd[30110]: input_userauth_request: illegal user test
Dec 30 10:48:10 koala sshd[30109]: input_userauth_request: illegal user test
Dec 30 10:48:14 koala sshd[30109]: Failed password for illegal user test
from 64
.174.136.250 port 2399 ssh2
Dec 30 10:48:14 koala sshd[30110]: Failed password for illegal user test
from 64
.174.136.250 port 2401 ssh2
Dec 30 10:48:22 koala sshd[30111]: input_userauth_request: illegal user guest
Dec 30 10:48:24 koala sshd[30111]: Failed password for illegal user guest
from 6
4.174.136.250 port 2433 ssh2

what should I do to increase security ?

99% of the time, I'm the sole user accessing via ssh, ocassionally, I
temporarily allow someone else.
80% of the time, I ssh from a fixed IP, rest of the time, I ssh from
several Aussie ISP dislups/adsl

is it worthwile to scan logs and block these ips temporarily ?

is it easy to add such IPs to my ipchains ?




-- 
Voytek
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] m-threaded perl - potential problem ?

2004-12-29 Thread Voytek
I've just updated my perl to 5.8.6, and, selected threads:

--
...
Characteristics of this binary (from libperl):
  Compile-time options: MULTIPLICITY USE_ITHREADS USE_LARGE_FILES
PERL_IMPLICIT_
CONTEXT
  Built under linux
  Compiled at Dec 29 2004 23:38:41
  @INC:
/usr/local/lib/perl5/5.8.6/i686-linux-thread-multi
/usr/local/lib/perl5/5.8.6
/usr/local/lib/perl5/site_perl/5.8.6/i686-linux-thread-multi
/usr/local/lib/perl5/site_perl/5.8.6
/usr/local/lib/perl5/site_perl
--

it gives this warning:
-
*** You are using a perl configured with threading enabled.
*** You should be aware that using multiple threads is
*** not recommended for production environments.
-

as this is meant for production env. on my mail/web server, and, I have
amavisd-new/claamav/sa hooked into Postfix:

is it reasonable safe to ignore this ?
or, am I asking for self created probs down the road ??

-- 
Voytek
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] horizontal scrollbar terminal

2004-12-29 Thread James A Coffey
Hi

I have been using Linux for a number of years and the only gripe
I have is that I can not find a terminal emulator that has horizontal 
scroll bars or I can't find away to configure my environment so that 
lines scroll horizontally and I can scroll through them using arrow 
keys for example. Why would I want them I hear you ask ?
Simply because when you are tailing a log file ( eg syslog from cisco
routers or worse snmp traps) having a line wrap makes viewing the logs
very difficult.  All I am after is something like xnmevent viewer from
HP that doesn't wrap lines but alllows you to scroll horizontally
without stopping the real time logs.

I have tried the following
less -F (works but have to stop reading the logfile when scrolling horizontally)
set horizontal-scroll-mode on (only scrolls on command line not log output)
A large xterm that wraps across 2 virtual desktops (ugly)

This has to be a common requirement but I can not find an answer anywhere 

Thanks in advance
--
James
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] PDF generated from a server is missing fonts

2004-12-29 Thread Michael Lake
Michael Lake wrote:
Hi all
I have a server and I'm using pdflib to generate a PDF file and sending 
back to a user. At home it all works fine. But on the server when I 
create the PDF and view it ALL the text is missing. Even if I download 
the PDF file there are no fonts.
Um its not too bad. If I save the file from the server Acrobat reader 
CAN display it but xpdf can't show it at all. Here is the error from xpdf:

mikel$ xpdf ASFCaveSummary.pdf
Error: Unknown config file command 't1libControl' (/home/mikel/.xpdfrc:18)
Error: -- The t1libControl and freetypeControl options have been replaced
Error:by the enableT1lib, enableFreeType, and antialias options
Error: No display font for 'Courier'
Error: No display font for 'Courier-Bold'
Error: No display font for 'Courier-BoldOblique'
Error: No display font for 'Courier-Oblique'
Looks like Windows users wont notice anything wrong from my server with 
the generated PDF files.

Mike
--
Mike Lake
Caver, Linux enthusiast and interested in anything technical.
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] PDF generated from a server is missing fonts

2004-12-29 Thread Michael Lake
Michael Lake wrote:
I have a server and I'm using pdflib to generate a PDF file and sending 
back to a user. At home it all works fine. But on the server when I 
create the PDF and view it ALL the text is missing. Even if I download 
the PDF file there are no fonts.

I think I need some debian font package but what one. There are so many.
Its a Debian system and it is not running XFree or any X.
Any idea what font package to install so the libary can find a plain 
times-roman and a helvetica to embed?
I have installed gsfonts but still no fonts are in the PDF.
Would I need libfontconfig1 or libfontconfig1-dev ?
On my system at home there is also installed a fontconfig package but 
thats not on my Debian stable server.

Im lost on what to install.
--
Mike Lake
Caver, Linux enthusiast and interested in anything technical.
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] blacklisting hotplug modules

2004-12-29 Thread Simon Males
I have just found out how to suppress the shpchp and pciehp FAIL 
messages during bootup (by simply jaming them in /etc/hotplug/blacklist).

I would like to know which actual hardware is shpchp and pciehp trying 
to load... so I can make mental note if I ever come across such hardware.

--
Simon Males <[EMAIL PROTECTED]>
No More AOL CDs Australia - www.anticd.org
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Perl upgrade probs: Net::SSLeay XML::Dumper install fails

2004-12-29 Thread Voytek

> On Wed, 2004-12-29 at 23:19 +1100, Voytek wrote:
>> I guess I need to rebuild Perl with gcc ?
>>

after rebuilding Perl with gcc, I managed to install 1 extra module
other 2 still no go... 1 out of 3 aint good


>>
>> 
>> > Voytek wrote:
>>
>> > I have had problems before with MCPAN and I install manually with the
>> > old trusty:
>> > perl Makefile.pl

[EMAIL PROTECTED] XML-Parser-2.34]#  perl Makefile.PL
Checking if your kit is complete...
Looks good
Writing Makefile for XML::Parser::Expat
Writing Makefile for XML::Parser



>> > make

Expat.xs:2154: `XML_StartElementHandler' undeclared (first use in this
function)
Expat.xs:2154: parse error before `0'
Expat.xs:2158: `XML_UnknownEncodingHandler' undeclared (first use in this
functi
on)
Expat.xs:2158: parse error before `0'
Expat.c: In function `XS_XML__Parser__Expat_ElementIndex':
Expat.c:2600: `XML_Parser' undeclared (first use in this function)
Expat.c:2600: parse error before `parser'
Expat.xs:2167: `cbv' undeclared (first use in this function)
Expat.xs:2167: parse error before `)'
Expat.c: In function `XS_XML__Parser__Expat_SkipUntil':
Expat.c:2621: `XML_Parser' undeclared (first use in this function)
Expat.c:2621: parse error before `parser'
Expat.xs:2179: `cbv' undeclared (first use in this function)
Expat.xs:2179: parse error before `)'
Expat.c: In function `XS_XML__Parser__Expat_Do_External_Parse':
Expat.c:2643: `XML_Parser' undeclared (first use in this function)
Expat.c:2643: parse error before `parser'
Expat.xs:2194: `cbv' undeclared (first use in this function)
Expat.xs:2194: parse error before `)'
Expat.xs:2197: `parser' undeclared (first use in this function)
make[1]: *** [Expat.o] Error 1
make[1]: Leaving directory `/root/down/perl/XML-Parser-2.34/Expat'
make: *** [subdirs] Error 2
[EMAIL PROTECTED] XML-Parser-2.34]#

>> > make test

Expat.xs:2154: `XML_StartElementHandler' undeclared (first use in this
function)
Expat.xs:2154: parse error before `0'
Expat.xs:2158: `XML_UnknownEncodingHandler' undeclared (first use in this
functi
on)
Expat.xs:2158: parse error before `0'
Expat.c: In function `XS_XML__Parser__Expat_ElementIndex':
Expat.c:2600: `XML_Parser' undeclared (first use in this function)
Expat.c:2600: parse error before `parser'
Expat.xs:2167: `cbv' undeclared (first use in this function)
Expat.xs:2167: parse error before `)'
Expat.c: In function `XS_XML__Parser__Expat_SkipUntil':
Expat.c:2621: `XML_Parser' undeclared (first use in this function)
Expat.c:2621: parse error before `parser'
Expat.xs:2179: `cbv' undeclared (first use in this function)
Expat.xs:2179: parse error before `)'
Expat.c: In function `XS_XML__Parser__Expat_Do_External_Parse':
Expat.c:2643: `XML_Parser' undeclared (first use in this function)
Expat.c:2643: parse error before `parser'
Expat.xs:2194: `cbv' undeclared (first use in this function)
Expat.xs:2194: parse error before `)'
Expat.xs:2197: `parser' undeclared (first use in this function)
make[1]: *** [Expat.o] Error 1
make[1]: Leaving directory `/root/down/perl/XML-Parser-2.34/Expat'
make: *** [subdirs] Error 2
[EMAIL PROTECTED] XML-Parser-2.34]#

>> > make install
>
-- 
Voytek
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] PDF generated from a server is missing fonts

2004-12-29 Thread Michael Lake
Hi all
I have a server and I'm using pdflib to generate a PDF file and sending 
back to a user. At home it all works fine. But on the server when I 
create the PDF and view it ALL the text is missing. Even if I download 
the PDF file there are no fonts.

I think I need some debian font package but what one. There are so many.
Its a Debian system and it is not running XFree or any X.
Any idea what font package to install so the libary can find a plain 
times-roman and a helvetica to embed?

Mike
--
Mike Lake
Caver, Linux enthusiast and interested in anything technical.
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Perl upgrade probs: Net::SSLeay XML::Dumper install fails

2004-12-29 Thread Voytek
I guess I need to rebuild Perl with gcc ?



> Voytek wrote:

> I have had problems before with MCPAN and I install manually with the
> old trusty:
> perl Makefile.pl
> make
> make test
> make install

getting similar errors from make:

*** /usr/bin/openssl appears to be compiled with gcc (gcc -fPIC -DTHREADS
-D_REE
NTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DNO_IDEA -DNO_MDC2 -DNO_RC5 -DL_ENDIAN
-DTERM
IO -O2 -march=i686 -Wall -DSHA1_ASM -DMD5_ASM -DRMD160_ASM
) while perl is compiled with cc. Both must be compiled with the same
compiler a
nd flags. Mixing and matching compilers is not supported. at Makefile.PL
line 13
7.
Checking if your kit is complete...
Looks good
Checking if your kit is complete...
Looks good
Writing Makefile for Net::SSLeay::Handle
Writing Makefile for Net::SSLeay
[EMAIL PROTECTED] Net_SSLeay.pm-1.25]#


Expat.xs:2154: `XML_StartElementHandler' undeclared (first use in this
function)
Expat.xs:2154: parse error before `0'
Expat.xs:2158: `XML_UnknownEncodingHandler' undeclared (first use in this
functi
on)
Expat.xs:2158: parse error before `0'
Expat.c: In function `XS_XML__Parser__Expat_ElementIndex':
Expat.c:2600: `XML_Parser' undeclared (first use in this function)
Expat.c:2600: parse error before `parser'
Expat.xs:2167: `cbv' undeclared (first use in this function)
Expat.xs:2167: parse error before `)'
Expat.c: In function `XS_XML__Parser__Expat_SkipUntil':
Expat.c:2621: `XML_Parser' undeclared (first use in this function)
Expat.c:2621: parse error before `parser'
Expat.xs:2179: `cbv' undeclared (first use in this function)
Expat.xs:2179: parse error before `)'
Expat.c: In function `XS_XML__Parser__Expat_Do_External_Parse':
Expat.c:2643: `XML_Parser' undeclared (first use in this function)
Expat.c:2643: parse error before `parser'
Expat.xs:2194: `cbv' undeclared (first use in this function)
Expat.xs:2194: parse error before `)'
Expat.xs:2197: `parser' undeclared (first use in this function)
make[1]: *** [Expat.o] Error 1
make[1]: Leaving directory `/root/down/perl/XML-Parser-2.34/Expat'
make: *** [subdirs] Error 2
[EMAIL PROTECTED] XML-Parser-2.34]#



-- 
Voytek
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Perl upgrade probs: Net::SSLeay XML::Dumper install fails

2004-12-29 Thread Voytek


> Voytek wrote:
>> somehow, it failed to pick up modules previously installed, so, I've
>> tried
>> to install them again from 'perl -MCPAN -e shell'
> I have had problems before with MCPAN and I install manually with the
> old trusty:
> perl Makefile.pl
> make
> make test
> make install

I'll try that next

> Install XML::Parser 2.16 first then go back and try XML::Dumper.

still no go:

Expat.c:2600: `XML_Parser' undeclared (first use in this function)
Expat.c:2600: parse error before `parser'
Expat.xs:2167: `cbv' undeclared (first use in this function)
Expat.xs:2167: parse error before `)'
Expat.c: In function `XS_XML__Parser__Expat_SkipUntil':
Expat.c:2621: `XML_Parser' undeclared (first use in this function)
Expat.c:2621: parse error before `parser'
Expat.xs:2179: `cbv' undeclared (first use in this function)
Expat.xs:2179: parse error before `)'
Expat.c: In function `XS_XML__Parser__Expat_Do_External_Parse':
Expat.c:2643: `XML_Parser' undeclared (first use in this function)
Expat.c:2643: parse error before `parser'
Expat.xs:2194: `cbv' undeclared (first use in this function)
Expat.xs:2194: parse error before `)'
Expat.xs:2197: `parser' undeclared (first use in this function)
make[1]: *** [Expat.o] Error 1
make[1]: Leaving directory `/root/.cpan/build/XML-Parser-2.34/Expat'
make: *** [subdirs] Error 2
  /usr/bin/make  -- NOT OK
Running make test
  Can't test without successful make
Running make install
  make had returned bad status, install seems impossible

cpan>

-- 
Voytek
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: ssh login from ssh login

2004-12-29 Thread Indelible
The only problem with the solution as described appears to be that when 
the ssh session terminates, the netcat ones don't. They need to be 
killed separately. Would there be a workaround for this?
Regards,
Matt.

Robert Collins wrote:
On Tue, 2004-12-28 at 22:50 +1100, Indelible wrote:
Are you referring to the method involving netcat?
(Description here:
http://www.peerfear.org/rss/permalink/2004/09/09/OpenSSHGatewaysWithProxyCommand/
)
 
Yup.

Rob
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] updating 'file' utility, removing old version

2004-12-29 Thread Erik de Castro Lopo
On Wed, 29 Dec 2004 07:32:53 +1100 (EST)
"Voytek" <[EMAIL PROTECTED]> wrote:

> I haven't deleted the old (rpm) version yet, but, the old one has some
> vulnerability, that's why I want to delete it
> 
> they're:
> # /usr/bin/file --version
> file-3.39
> magic file from /usr/share/magic
> # /usr/local/bin/file --version
> file-4.12
> 
> where do I edit PATH ?

Either /etc/profile or ~/.bashrc.

Erik
-- 
+---+
  Erik de Castro Lopo  [EMAIL PROTECTED] (Yes it's valid)
+---+
Seen on comp.lang.python:
Q : If someone has the code in python for a buffer overflow,
please post it.
A : Python does not support buffer overflows, sorry.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] (Slightly OT) Neuros

2004-12-29 Thread Ben de Luca

On 29/12/2004, at 2:57 PM, Matthew Davidson wrote:

Hi,

Does anybody know if it's possible to get the Neuros "digital audio computer" (http://neurosaudio.com/) in Australia?  It's miles ahead of anything else in terms of free-software-friendliness (http://open.neurosaudio.com/), but not only can't I find an Australian retailer, I can't even find a retailer in the US that will ship it overseas.


you might be able to use a service like this to buy from the US. I have never used, or any thing like them so caveat emptor

http://www.shopthestates.com/



Matthew.

-- 
Alma Technology
http://www.almatech.net.au
(02) 6658 1607 ... 0419 242 316
--
Make the switch to a safer, better web browsing experience:
http://www.mozilla.org/products/firefox/
http://www.switch2firefox.com/
http://www.spreadfirefox.com/
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] If you didn't get one for Christmas...

2004-12-29 Thread Ken Foskey

All I got was 4 really old AIX machines for $50 :-)

Seriously can you boot Debian on one  B20 and B50?

-- 
Ken Foskey
OpenOffice.org developer


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html