[SLUG] pam ldap question

2006-05-08 Thread Alexander Samad
Hi

Just going through the process of setting up ldap authentication.

Things seem to be working fine except when I go to do some fine controll
over who can log into each machine

my nsswitch looks like this 
passwd: files ldap 
group:  files ldap 
shadow: files


my common-auth looks like
auth [success=1 default=ignore] pam_unix.so nullok_secure
auth required pam_ldap.so ignore_unknown_user use_first_pass
auth required pam_permit.so

i got this from the readme in the libpam-ldap package.


I am using debian AMD64 testing/unstable

I have added a variable hosts=* to my test uid entry, I have placed
pam_filter in /etc/pam_ldap.conf
pam_filter host=this.is.a.test

when I test it with the above configuration I see no requests with
search variables host=

when I modfy my common-auth to look like this

#auth [success=1 default=ignore] pam_unix.so nullok_secure
auth required pam_ldap.so ignore_unknown_user use_first_pass
auth required pam_permit.so

and re run my test (which is to login via ssh), I do see a search with
the host in it and looking for this.is.a.test, but I do not get denied.

Q1) if pam_ldap.so fails because of the host command why does it still
allow me in even though there is a pam_permit afterwards, shouldn't the
required part fail the whole lookup 

Q2) why when I uncomment the first line does it not use the pam_filter
defined in pam_ldap.conf, my presumption is that pam_unix uses glibc and
thus nsswitch - is this the catch it it access the ldap via glibc
because of my nsswith setup above ?

Thanks
Alex


signature.asc
Description: Digital signature
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] Re: Install probs with Logitech Quickcam Pro 4000 on FC4 with SMP kernel

2006-05-08 Thread charles
On Mon, 2006-05-08 at 05:44 +1000, Terry Dawson wrote:
 elliott-brennan wrote:
 
  In the struggle to get the webcam working on my FC4 I'm wondering about 
  what problems may be created if I were to boot using an earlier, non-smp 
  kernel (as it's likely that the driver install may then work)?
 
   Are there any issues in doing this?
 
 The only problems you might encounter are one of general annoyance on 
 your part after a few goes of rebooting your machine just to use your 
 webcam :)
 
 .. and that while you're running with a non-SMP kernel you'll only be 
 using one of your presumed more-than-one CPUs. Which probably won't 
 really be a problem at all.
 
 I actually have a QuickCam Pro 4000 too. I haven't tried very hard to 
 get it working yet. Perhaps I should take a look at it.
 
 regards
 Terry
 

I use a Quickcam IM (well try to).. What I needed was easycam2, I am not
sure if this is available on yum repositories, I know that its on a
french apt repository for us inclined that way ;)

Mind you since the last update I have nothing but problems using the
camera, it locks up the whole system. So I havent been too motivated in
playing with it anymore... ;) Might hunt around for a Linux friendly
cam 

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] timing out a process with timeout

2006-05-08 Thread Malcolm V
On Monday 08 May 2006 15:48, Jeff Waugh allegedly wrote:
 Hey,

 I just asked a question on #slug and found my answer in an apt-cache search
 mere moments later. Figured it would be handy for others (you lot and
 anyone who finds this in the archives later)...

In zsh,

docommand blah blah1 blah2 ;sleep some_num;kill $\!
(or something close to that)

I'm sure most shells support something like the above. Note, sleep is 
inaccurate.

I'm sure timeout is much nicer then the above, but it did make me wonder about 
package management and how the various distributions deal with merging small 
useful utilities into general utility packages rather then bloating their 
package trees with mountains of tiny packages. (And the problems of grouping 
unrelated utilities and the confusion the could cause between distros).

Not sure why I wrote this now.
Cheers,
Malcolm V.

 -- 
BOFH Excuse #115:

your keyboard's space bar is generating spurious keycodes.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


RE: [SLUG] timing out a process with timeout

2006-05-08 Thread Visser, Martin
 
Malcolm, I was thinking along the same lines. The equivalent in bash is
something like:-

$ timeout=10; docommand blah1 blah2 blah3   sleep $timeout; kill %%

But there is a problem in that if docommand finishes before the timeout
expires then you still hang around sleeping. So you need to timeout the
sleep process - catch 22. (I think your zsh exhibits the same issue). If
docommand finishes early you need to figure out a way to kill the sleep
proces,



Martin Visser

Technology Consultant 
Consulting  Integration
Technology Solutions Group - HP Services

410 Concord Road
Rhodes NSW  2138
Australia 

Mobile: +61-411-254-513
Fax: +61-2-9022-1800 
E-mail: martin.visserAThp.com

This email (including any attachments) is intended only for the use of
the individual or entity named above and may contain information that is
confidential, proprietary or privileged. If you are not the intended
recipient, please notify HP immediately by return email and then delete
the email, destroy any printed copy and do not disclose or use the
information in it.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Malcolm V
Sent: Monday, 8 May 2006 5:48 PM
To: SLUG
Subject: Re: [SLUG] timing out a process with timeout

On Monday 08 May 2006 15:48, Jeff Waugh allegedly wrote:
 Hey,

 I just asked a question on #slug and found my answer in an apt-cache 
 search mere moments later. Figured it would be handy for others (you 
 lot and anyone who finds this in the archives later)...

In zsh,

docommand blah blah1 blah2 ;sleep some_num;kill $\!
(or something close to that)

I'm sure most shells support something like the above. Note, sleep is
inaccurate.

I'm sure timeout is much nicer then the above, but it did make me wonder
about package management and how the various distributions deal with
merging small useful utilities into general utility packages rather then
bloating their package trees with mountains of tiny packages. (And the
problems of grouping unrelated utilities and the confusion the could
cause between distros).

Not sure why I wrote this now.
Cheers,
Malcolm V.

 --
BOFH Excuse #115:

your keyboard's space bar is generating spurious keycodes.
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Re: the VkALtUM

2006-05-08 Thread Aubert Timmons


gifC0Ahd0m5fM.gif
Description: GIF image
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

[SLUG] Firefox, speed and Fedora-Linux

2006-05-08 Thread telford
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I've been using various versions of Fedora on my laptop
for some time now and recently I upgraded to fc5.

I always used to have a firefox installed in /usr/local/firefox
and it was the non-RPM package downloaded from the Firefox
people (bypassing RedHat). After the upgrade, fc5 put their
version of firefox onto my system and I started using it but
recently have been noticing high CPU usage. I'm not sure if it
just started happening recently or if it was always happening
and I just recently noticed. At any rate, I'm sure things moved
a lot snappier before the upgrade.

Then I tried deleting my local version and the RedHat package
version and using yum to fetch the latest firefox RPM which is
firefox-1.5.0.2-1.2.fc5 and I believe that I might have a
relatively clean start after removing the old packages and reinstalling.

Still it uses heaps of CPU, even for simple operations like loading
a page or scrolling up and down on the screen, or flipping between
menus!  It still happens when I turn off both Java and Javascript,
even bringing up the edit/preferences pop-up takes a good 6
seconds on a 2.5G Celeron machine (I'm sure it never used to be
so bad).

Have I visited a nasty web page that hax0red some junkware into my
system or is this version of firefox getting bloated like mozilla
did ?  Has anyone else seen this sort of thing happening ?

Also, gedit takes about 5 to 6 seconds of 100% CPU activity,
check the results of vmstat 1 :

procs ---memory-- ---swap-- -io --system-- cpu
 r  b   swpd   free   buff  cache   si   sobibo   incs us sy id wa
 1  0  0  10288  10992 10078800 0 0  32658  1  0 99  0
 0  0  0  10288  10992 10078800 0 0  32268  1  0 99  0
 1  0  0  10292  10992 10078800 0 0  32660  0  0 100  0
 1  0  0  10304  10992 10078800 0 0  31952  1  0 99  0
 2  0  0   9824  10992 10078800 0 0  32782 49  7 45  0  
 == started gedit here
 2  0  0   9288  10992 10079200 0 0  319   572 82 18  0  0
 1  0  0   8988  10992 10079200 0 0  32773 92  8  0  0
 2  0  0   7728  10992 10079200 0 0  32158 88 12  0  0
 3  1  0   4916  11040 10079200 0 8  32254 91  9  0  0
 1  0  0   4796  11048 10079200 0   596  33671 96  4  0  0
 2  0  0   4412  11048 10078400 0 0  32069 92  8  0  0
 1  0  0   3836  11048 10078800 0 0  325   247 90 10  0  0
 0  0  0   3568  11048 10098000 0 0  342   101 88  7  5  0
 0  0  0   3568  11048 10098000 0 0  586   228 12  5 83  0  
 == gedit finished loading
 1  0  0   3504  11108 10098000 0   112  392   128  6  0 94  0
 0  0  0   3468  6 10098000 0   200  364   127  4  5 90  1
 0  0  0   3468  6 10098000 0 0  332   100  1  1 98  0
 1  0  0   3416  6 10098000 0 0  349   152 43  2 55  0  
 == quit gedit
 1  0  0   3400  6 10098000 0 0  440   165 19  3 78  0
 1  0  0   3480  6 10098000 0 0  331   130 95  5  0  0
 0  0  0  10040  6 10078800 0 0  669   190  7  5 88  0
 0  0  0  10040  6 10078800 0 0  52481  1  1 98  0
 1  0  0  10068  6 10078800 0 0  42870  0  1 99  0
 1  0  0  10072  6 10078800 0 0  38680  1  1 98  0
 1  0  0  10084  11188 10078800 0   176  365   220  1  1 54 44
 1  0  0  10084  11188 1008040016 0  353   225  2  2 94  2


I'll point out that gedit never has come up all that quickly but
it's slower now than it used be (by a noticable amount) and it is
a fairly basic text editor so what can it be doing with all that CPU?

Just as a comparison, bringing up emacs (the most bloated beast in the
world) uses less CPU than gedit...

procs ---memory-- ---swap-- -io --system-- cpu
 r  b   swpd   free   buff  cache   si   sobibo   incs us sy id wa
 2  0  0  10600  11656 1008600039 9  366   106 16  2 79  3
 0  0  0  10600  11656 10086000 0 0  33299  0  1 99  0
 0  0  0  10600  11656 10086000 0 0  325   109  0  2 98  0
 1  0  0  10600  11656 10086000 0 0  32990  1  0 99  0
 1  0  0  10600  11656 10086000 0 0  31958  3  1 96  0
 1  1  0  10600  11660 10086000 028  32561  0  0 97  3
 1  0  0  10600  11664 10086000 0 4  32351  1  0 56 43
 2  0  0   8852  11664 10086000 0 0  330   173 42 18 41  0  
 == started emacs here
 4  0  0   7712  11664 10086000 0 0  320   206 66 34  0  0
 2  0  

[SLUG] Re: Install probs with Logitech Quickcam Pro 4000 on FC4 with SMP kernel

2006-05-08 Thread elliott-brennan

Thanks Charles.

Let me know how you go. I'm not in a position to buy another and this 
bugger works with my damn (ham and spam) laptop. I had trouble getting 
it going (eventually NOT) with FC3 - again I think it's a problem with 
the SMP bit.


I'm curious about the 'hyperthreading'. Does anyone know if this is 
still common in P4 chips or is it being replaced?


Regards,

Patrick

Charles wrote:

I use a Quickcam IM (well try to).. What I needed was easycam2, I am not
sure if this is available on yum repositories, I know that its on a
french apt repository for us inclined that way ;)

Mind you since the last update I have nothing but problems using the
camera, it locks up the whole system. So I havent been too motivated in
playing with it anymore... ;) Might hunt around for a Linux friendly
cam 







--
Registered Linux User 368634

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Re: Install probs with Logitech Quickcam Pro 4000 on FC4 with SMP kernel

2006-05-08 Thread elliott-brennan

Thanks Terry.

As with my message to Charles, let me know how you go. I got it going on 
my laptop (no hyperthreaded CPU) quite easily with the destructions at 
the Saillard site.


FYI. I use Marratech to connect with the rels in Hong Kong and Sydney 
(Mac users). Works well.


Regards,

Patrick




Terry wrote.



elliott-brennan wrote:

In the struggle to get the webcam working on my FC4 I'm wondering 
about what problems may be created if I were to boot using an earlier, 
non-smp kernel (as it's likely that the driver install may then work)?


  Are there any issues in doing this?

The only problems you might encounter are one of general annoyance on 
your part after a few goes of rebooting your machine just to use your 
webcam :)


.. and that while you're running with a non-SMP kernel you'll only be 
using one of your presumed more-than-one CPUs. Which probably won't 
really be a problem at all.


I actually have a QuickCam Pro 4000 too. I haven't tried very hard to 
get it working yet. Perhaps I should take a look at it.


regards
Terry


--
Registered Linux User 368634

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Re: Install probs with Logitech Quickcam Pro 4000 on FC4 with SMP kernel

2006-05-08 Thread elliott-brennan

Hi Terry,

Well, bugger! The *other* problem was that Vmware workstation needed to 
be reconfigured after I'd booted to another kernel and then back to my 
original! :)


Glad that it doesn't take much.

Realised I didn't have the headers etc to 'make' the the driver and 
they're not listed in YUM :(


Oh well, will keep trying with hacking away at the make file to see if I 
can make it make something...


Regards,

Patrick



Terry wrote.


 elliott-brennan wrote:

 In the struggle to get the webcam working on my FC4 I'm wondering 
about what problems may be created if I were to boot using an earlier, 
non-smp kernel (as it's likely that the driver install may then work)?


   Are there any issues in doing this?

 The only problems you might encounter are one of general annoyance on 
your part after a few goes of rebooting your machine just to use your 
webcam :)




--
Registered Linux User 368634


--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] [MailServer Notification]To Sender virus found and action taken.

2006-05-08 Thread Administrator
ScanMail for Microsoft Exchange has detected virus-infected attachment(s).

Sender = slug@slug.org.au
Recipient(s) = Francesca Ribezzo
Subject = Returned mail: see transcript for details
Scanning time = 5/8/2006 12:50:26 PM
Engine/Pattern = 8.000-1001/3.411.00

Action on virus found:
The attachment instruction.zip contains WORM_MYDOOM.M virus. ScanMail has 
Deleted it. 

Warning to sender. ScanMail has detected a virus in an email you sent.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Firefox, speed and Fedora-Linux

2006-05-08 Thread O Plameras

[EMAIL PROTECTED] wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I've been using various versions of Fedora on my laptop
for some time now and recently I upgraded to fc5.

I always used to have a firefox installed in /usr/local/firefox
and it was the non-RPM package downloaded from the Firefox
people (bypassing RedHat). After the upgrade, fc5 put their
version of firefox onto my system and I started using it but
recently have been noticing high CPU usage. I'm not sure if it
just started happening recently or if it was always happening
and I just recently noticed. At any rate, I'm sure things moved
a lot snappier before the upgrade.

Then I tried deleting my local version and the RedHat package
version and using yum to fetch the latest firefox RPM which is
firefox-1.5.0.2-1.2.fc5 and I believe that I might have a
relatively clean start after removing the old packages and reinstalling.

Still it uses heaps of CPU, even for simple operations like loading
a page or scrolling up and down on the screen, or flipping between
menus!  It still happens when I turn off both Java and Javascript,
even bringing up the edit/preferences pop-up takes a good 6
seconds on a 2.5G Celeron machine (I'm sure it never used to be
so bad).

Have I visited a nasty web page that hax0red some junkware into my
system or is this version of firefox getting bloated like mozilla
did ?  Has anyone else seen this sort of thing happening ?

Also, gedit takes about 5 to 6 seconds of 100% CPU activity,
check the results of vmstat 1 :

procs ---memory-- ---swap-- -io --system-- cpu
 r  b   swpd   free   buff  cache   si   sobibo   incs us sy id wa
 1  0  0  10288  10992 10078800 0 0  32658  1  0 99  0
 0  0  0  10288  10992 10078800 0 0  32268  1  0 99  0
 1  0  0  10292  10992 10078800 0 0  32660  0  0 100  0
 1  0  0  10304  10992 10078800 0 0  31952  1  0 99  0
 2  0  0   9824  10992 10078800 0 0  32782 49  7 45  0   
== started gedit here
 2  0  0   9288  10992 10079200 0 0  319   572 82 18  0  0
 1  0  0   8988  10992 10079200 0 0  32773 92  8  0  0
 2  0  0   7728  10992 10079200 0 0  32158 88 12  0  0
 3  1  0   4916  11040 10079200 0 8  32254 91  9  0  0
 1  0  0   4796  11048 10079200 0   596  33671 96  4  0  0
 2  0  0   4412  11048 10078400 0 0  32069 92  8  0  0
 1  0  0   3836  11048 10078800 0 0  325   247 90 10  0  0
 0  0  0   3568  11048 10098000 0 0  342   101 88  7  5  0
 0  0  0   3568  11048 10098000 0 0  586   228 12  5 83  0   
== gedit finished loading
 1  0  0   3504  11108 10098000 0   112  392   128  6  0 94  0
 0  0  0   3468  6 10098000 0   200  364   127  4  5 90  1
 0  0  0   3468  6 10098000 0 0  332   100  1  1 98  0
 1  0  0   3416  6 10098000 0 0  349   152 43  2 55  0   
== quit gedit
 1  0  0   3400  6 10098000 0 0  440   165 19  3 78  0
 1  0  0   3480  6 10098000 0 0  331   130 95  5  0  0
 0  0  0  10040  6 10078800 0 0  669   190  7  5 88  0
 0  0  0  10040  6 10078800 0 0  52481  1  1 98  0
 1  0  0  10068  6 10078800 0 0  42870  0  1 99  0
 1  0  0  10072  6 10078800 0 0  38680  1  1 98  0
 1  0  0  10084  11188 10078800 0   176  365   220  1  1 54 44
 1  0  0  10084  11188 1008040016 0  353   225  2  2 94  2


I'll point out that gedit never has come up all that quickly but
it's slower now than it used be (by a noticable amount) and it is
a fairly basic text editor so what can it be doing with all that CPU?

Just as a comparison, bringing up emacs (the most bloated beast in the
world) uses less CPU than gedit...

procs ---memory-- ---swap-- -io --system-- cpu
 r  b   swpd   free   buff  cache   si   sobibo   incs us sy id wa
 2  0  0  10600  11656 1008600039 9  366   106 16  2 79  3
 0  0  0  10600  11656 10086000 0 0  33299  0  1 99  0
 0  0  0  10600  11656 10086000 0 0  325   109  0  2 98  0
 1  0  0  10600  11656 10086000 0 0  32990  1  0 99  0
 1  0  0  10600  11656 10086000 0 0  31958  3  1 96  0
 1  1  0  10600  11660 10086000 028  32561  0  0 97  3
 1  0  0  10600  11664 10086000 0 4  32351  1  0 56 43
 2  0  0   8852  11664 10086000 0 0  330   173 42 18 41  0   
== started emacs here
 4  0  0   7712  11664 10086000 0 0  

[SLUG] SmallCap Review

2006-05-08 Thread Odessa Ellis
Members,

Resort C|ubs |nternational_Inc. (R|T(C|I) is now listed and trading on the 
Frankfurt Exchange! 
Act fast on this one! A massive pr campaign is underway for Monday and the rest 
of the weeks trading, get in early the price is going to make a big jump!. 
Currently Trading at only forty five cents we expect to see some nice gains! 

Res0rt C|ubs |ntl has an explosive business model focused on the golfing 
industry (an industry showing substantial growth). Through its various private 
labeled membership programs, Res0rt C|ubs |ntl creates a multi-club membership 
program for its members and provides access to several courses for one low 
membership fee.

  Good Luck to all this upcoming week!  -- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] Paying Money for Quality (and software testing)

2006-05-08 Thread O Plameras

Jacinta Richardson wrote:

Benno wrote:

  

[EMAIL PROTECTED] wrote:
  


  

Make it RUN;
Make it RIGHT;
Make it FAST; and
Make it NICE.
  
I think the idea that the TDD guys are putting forward is that Make it NICE (e.g: 
automated test suite), means that you can make it RIGHT and FAST with less effort

than if you didn't have an automated test suite.



I think it may actually be a slightly different mind-set than just making code
nice.  I think the TDD people have the argument that tests help so much in
ensuring it runs that they're an essential part of that step.  We all do
testing on the code we develop, it's just that *most* of us are testing for the
common case (it works) and some obvious broken cases (it fails) with throw-away
tests.  TDD formalises those tests, then because we don't have to spend so much
time regenerating the same informal tests, we can spend a little extra time
putting in test cases for wierd edge cases, thus helping the code we're writing
to run better.

Making it RIGHT (comparing it to the spec -- black box testing), FAST
(performance testing) and NICE (documentation/interface testing) may or may not
be easier following TDD, but it shouldn't be any harder.
  


A little more detail if it helps.

1. Start of Development
\/
2.   Make/Modify Specs/Tests
\/ ^
3.   Code and Run Test   ^If test fails.   (Make it RUN)
\/   If pass test^
4.   Code and Right Test ^If test fails.(Make it RIGHT)
   \/If pass test.   ^
5.  Code and Fast Test  ^If test fails.(Make it FAST)
   \/If pass test.   ^
6.  Code and Nice Test ^If test fails.(Make it NICE)
   \/If pass test.
7.  End of Development.

Cheerio,

O Plameras

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] pam ldap question

2006-05-08 Thread Simon Wong
On Mon, 2006-05-08 at 16:02 +1000, Alexander Samad wrote:
 my common-auth looks like
 auth [success=1 default=ignore] pam_unix.so nullok_secure
 auth required pam_ldap.so ignore_unknown_user use_first_pass
 auth required pam_permit.so

I doubt you want to use the permit module as it always succeeds.

 when I modfy my common-auth to look like this
 
 #auth [success=1 default=ignore] pam_unix.so nullok_secure
 auth required pam_ldap.so ignore_unknown_user use_first_pass
 auth required pam_permit.so

This link describes the various modules (I know, when you're having
trouble it barely seems to cover much at all!):

http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/pam-6.html

I don't know whether the parameters [success=1 default=ignore] are
valid.  Look at /var/log/auth.log for pam logging.

 Q1) if pam_ldap.so fails because of the host command why does it still
 allow me in even though there is a pam_permit afterwards, shouldn't the
 required part fail the whole lookup 

Check out the documentation at
http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/pam-4.html#ss4.1

What you are thinking of is requisite so that a failure returns to the
app immediately.  Required is used where you require multiple modules to
be successful to allow the authentication to succeed.

 Q2) why when I uncomment the first line does it not use the pam_filter
 defined in pam_ldap.conf, my presumption is that pam_unix uses glibc and
 thus nsswitch - is this the catch it it access the ldap via glibc
 because of my nsswith setup above ?

No idea!

-- 
Simon Wong [EMAIL PROTECTED]

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Re: [Osia-discuss] Panel session at CeBIT - Open Source underpins Aussie innovation

2006-05-08 Thread Brett Hooker

Folks,

I know this has been discussed on the lists, but let me assert that 
there is nothing wanky about innovation.  Innovation is critical to 
sustaining economic growth in any economy, and particularly ours as we 
move more and more towards knowledge and service industries to sustain 
our lifestyle.  When the time comes for our economy to contract, as 
these things are want to do from time to time, innovation will play a 
fundamental role in underpinning the minimisation and recovery from such.


I trust things are going well at CeBIT, and I'm looking forward to 
meeting a few on you down there on Thursday.


Thanks,
Brett

Pia Waugh wrote:

Hi all,

There is going to be two panel sessions about Open Source at CeBIT. The
first has Jon Oxer, Con Zymaris and David Perdue at 1pm on Wednesday the
10th.

The second panel session is being run by Linux Australia about how Open
Source underpins Aussie innovation. This is timed to be part of the
Innovation Festival (http://www.ausinnovation.org/) and the event is
registered as part of that event. We are basically getting some leading
researchers, business people and a journalist to comment about why they
think Open Source is so important to their work and to Australian
organisations focused on innovating.

Yes, the word innovation is wanky, but we are working with a theme here
people! :)

The panelists are:

- Dr Silvia Pfeiffer, leading researcher and software developer CSIRO
- Bruno Mattarollo, CTO Rising Sun Pictures
- Gernot Heiser, leading researcher and software developer NICTA
- Brett Hooker, Director Sauce Software
- Professor James Dalziel, Chief Investigator Australian Open Source
  information service
- Matt Overington, journo at BuilderAU

Each panelist has 10 mins to talk about their thoughts, then we'll have open
discussion till 4:30.

The innovation  OSS panel will be on Thursday the 11th from 3:00pm till
4:30pm at Stand P1 at the front of Hall 4. Feel free to visit us at the
Linux Australia stand beforehand to say hi and join in the fun :)

Both panel sessions are free and we hope that they help educate people about
how important Open Source is in yet another way. By running such a panel at
CeBIT we hope to get to a wide audience. If you have a boss, workmate or
friend who you are trying to convince about Open Source, bring them along to
this panel and they'll hopefully start to see that it isn't just you :)

Links:
http://www.ausinnovation.org/InnovationFestival/Events/Open+Source+underpins+Australian+innovations.htm
http://www.cebit.com.au/main/events/viocorp/

Please pass on the information to any mailing lists or people you think
might be interested :)

Cheers,
Pia

  



--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] pam ldap question

2006-05-08 Thread Alexander Samad
On Tue, May 09, 2006 at 12:16:33AM +1000, Simon Wong wrote:
 On Mon, 2006-05-08 at 16:02 +1000, Alexander Samad wrote:
  my common-auth looks like
  auth [success=1 default=ignore] pam_unix.so nullok_secure
  auth required pam_ldap.so ignore_unknown_user use_first_pass
  auth required pam_permit.so
 
 I doubt you want to use the permit module as it always succeeds.
 
  when I modfy my common-auth to look like this
  
  #auth [success=1 default=ignore] pam_unix.so nullok_secure
  auth required pam_ldap.so ignore_unknown_user use_first_pass
  auth required pam_permit.so
 
 This link describes the various modules (I know, when you're having
 trouble it barely seems to cover much at all!):
 
 http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/pam-6.html
 
 I don't know whether the parameters [success=1 default=ignore] are
 valid.  Look at /var/log/auth.log for pam logging.
 
  Q1) if pam_ldap.so fails because of the host command why does it still
  allow me in even though there is a pam_permit afterwards, shouldn't the
  required part fail the whole lookup 
 
 Check out the documentation at
 http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/pam-4.html#ss4.1
 
 What you are thinking of is requisite so that a failure returns to the
 app immediately.  Required is used where you require multiple modules to
 be successful to allow the authentication to succeed.
 
  Q2) why when I uncomment the first line does it not use the pam_filter
  defined in pam_ldap.conf, my presumption is that pam_unix uses glibc and
  thus nsswitch - is this the catch it it access the ldap via glibc
  because of my nsswith setup above ?
 
 No idea!

Well lots of searching around padl mailing lists brought me up with this

# From padl.com mailing list
auth sufficient pam_unix.so nullok_secure
auth required pam_ldap.so ignore_unknown_user use_first_pass

which seems to work.

the previous worked but with side effects.

the [success=1 default=ignore] is the way of routing the results in long
hand, were as required and sufficient do it in short hand.

all is happy now, and I have my ldap pam nss filtering working as well

 
 -- 
 Simon Wong [EMAIL PROTECTED]
 
 -- 
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
 


signature.asc
Description: Digital signature
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] Re: [Osia-discuss] Panel session at CeBIT - Open Source underpins Aussie innovation

2006-05-08 Thread Erik de Castro Lopo
Brett Hooker wrote:

 Folks,
 
 I know this has been discussed on the lists, but let me assert that 
 there is nothing wanky about innovation.

No, there's nothing wanky about innovation, but there very definitely
something very much more than wanky about the way microsoft in particular,
but also government bureaucrats misuse the word.

Erik
-- 
+---+
  Erik de Castro Lopo
+---+
Everyone seems to assume that the current system in America is capitalism.
I beg to differ. True capitalism does not involve false advertising,
distribution cartels, or political lobbying for special advantages in the
market. How can you call Microsoft or the RIAA capitalist, when their main
business is interfering with a free market? Some of us would like to see a
*return* to capitalism in this country. - Jim Flynn on Linuxtoday.com
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] X borked. How do I fix it?

2006-05-08 Thread Erik de Castro Lopo
Hi all,

For some time I had a working Ubuntu breezy install on a machine with
with an ATI Radeon X300 SE, with the Ubuntu fglrx driver.

I recently tried to get direct rendering running and when that failed
to work with the Ubunutu version of the package I decided to try the 
ATI binary driver as described at the bottom of this page:

https://wiki.ubuntulinux.org/BinaryDriverHowto/ATI

That still didin't get direct rendering going so I decided to revert
to the Ubuntu driver.

Unfortunately, the ATI deb package (which has the same name as the
Ubuntu package g) is borked and won't remove itself:

 sudo dpkg --purge xorg-driver-fglrx
(Reading database ... 122156 files and directories currently installed.)
Removing xorg-driver-fglrx ...
dpkg-divert: mismatch on divert-to
  when removing `diversion of /usr/lib/libGL.so.1.2 to 
/usr/share/fglrx/diversions/libGL.so.1.2 by xorg-driver-fglrx'
  found `diversion of /usr/lib/libGL.so.1.2 to 
   /usr/lib/fglrx/libGL.so.1.2.xlibmesa by xorg-driver-fglrx'
dpkg: error processing xorg-driver-fglrx (--purge):
 subprocess post-removal script returned error exit status 2
Errors were encountered while processing:
 xorg-driver-fglrx

Anyone know how I can fix this and get the back to the Ubuntu version?

Then, from there, how do I get direct rendering going?

TIA,
Erik
-- 
+---+
  Erik de Castro Lopo
+---+
I ran it on my DeathStation 9000 and demons flew out of my nose. --Kaz
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] X borked. How do I fix it?

2006-05-08 Thread Erik de Castro Lopo
Erik de Castro Lopo wrote:

 Hi all,
 
 For some time I had a working Ubuntu breezy install on a machine with
 with an ATI Radeon X300 SE, with the Ubuntu fglrx driver.

snip

 Unfortunately, the ATI deb package (which has the same name as the
 Ubuntu package g) is borked and won't remove itself:
 
  sudo dpkg --purge xorg-driver-fglrx
 (Reading database ... 122156 files and directories currently installed.)
 Removing xorg-driver-fglrx ...
 dpkg-divert: mismatch on divert-to
   when removing `diversion of /usr/lib/libGL.so.1.2 to 
 /usr/share/fglrx/diversions/libGL.so.1.2 by xorg-driver-fglrx'
   found `diversion of /usr/lib/libGL.so.1.2 to 
/usr/lib/fglrx/libGL.so.1.2.xlibmesa by xorg-driver-fglrx'
 dpkg: error processing xorg-driver-fglrx (--purge):
  subprocess post-removal script returned error exit status 2
 Errors were encountered while processing:
  xorg-driver-fglrx
 
 Anyone know how I can fix this and get the back to the Ubuntu version?

Hmm, managed to fix this by doing a

apt-get remove xserver-xorg

taking note of what was removed, apt-get installing it and then doing a:

dpkg-reconfigure xserver-xorg

Now to try and get direct rendering going. G!

Erik
-- 
+---+
  Erik de Castro Lopo
+---+
Crap can work. Given enough thrust pigs will fly, but it's not necessary a
good idea.  -- Alexander Viro on linux-kernel mailing list
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] X borked. How do I fix it?

2006-05-08 Thread Peter Hardy
On Tue, 2006-05-09 at 13:33 +1000, Erik de Castro Lopo wrote:
 Erik de Castro Lopo wrote:
 
  Hi all,
  
  For some time I had a working Ubuntu breezy install on a machine with
  with an ATI Radeon X300 SE, with the Ubuntu fglrx driver.

*snip dpkg brokenness*

 Now to try and get direct rendering going. G!

My X300 got up and running fairly easily, although I had issues using
the native X.Org driver, and had to switch to fglrx.

Do you have the restricted kernel modules package for your kernel?
Should be linux-restricted-modules-686 or similar.

-- 
Pete

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] X borked. How do I fix it?

2006-05-08 Thread Erik de Castro Lopo
Peter Hardy wrote:

 My X300 got up and running fairly easily, although I had issues using
 the native X.Org driver, and had to switch to fglrx.
 
 Do you have the restricted kernel modules package for your kernel?
 Should be linux-restricted-modules-686 or similar.

Yeah, i have the Ubuntu fglrx driver working, but glxinfo is still
reporting:

direct rendering: No

and I need that to say yes.

Erik
-- 
+---+
  Erik de Castro Lopo
+---+
This is like creating laws against blasphemy and then complaining that
unbelievers can't come up with any logical argument against the existence
of God  -- www.infoanarchy.org on the Digital Millenium Copyright Act
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Send your spare Ubuntu CDs to a good home

2006-05-08 Thread Jeff Waugh
Ni hao,

If anyone from Sydney has a bunch of Ubuntu 5.10 (Breezy Badger) CDs spare,
please consider taking them down to CeBIT at the exhibition centre today or
tomorrow - Pia has just called me to say that they need as many as they can
get, as soon as possible. If you have plenty of CDs but no means or time to
get them down to Darling Harbour, please email me off-list.

If you're not in Sydney, and you have a *box or more* spare, we can arrange
something with you to ship them over - please email me off-list.

Now's the perfect time to get rid of your 5.10 CDs: 6.06 is coming out in a
few weeks, and CeBIT is attracting the unwashed masses who need the love of
a fat'n'happy penguin.

Thanks,

- Jeff

-- 
linux.conf.au 2007: Sydney, Australia   http://lca2007.linux.org.au/
 
 So between a jazz musician, a murderer, and a congressperson, all
called 'Dave Camp', I have a lot of pressure to be evil. - GNOME's
 Dave Camp
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] /dev/ttyUSB0 vs USB1

2006-05-08 Thread Peter Rundle

Sluggers,

I recently bit the bullet and purchased a USB telephony modem, a Netcom Roadster v.92 USB. 
I plugged it into my FC4 linux server and volia, lights camera action! I was impressed 
(and a little surprised). The system creates the device driver /dev/ttyUSB0 and using 
Minicom and directing it at this serial port I'm able to communicate with the modem.

:-)

Ok so what you say, I'm just a happy little penguin at the moment because the previous 
USB modem that I purchased (a D-Link) was an abject failure.


Question.

When I purchase a second USB modem and plug it in, I assume that the device ttyUSB1 will 
be created and I will also be able to access this modem. Is there anyway to determine / 
define which modem gets to be which device? If/when the server is re-booted for example.


Each modem will obviously be connected to a particular phone line / number and I wish to 
be able to know that;


  USB0 == phone# -
  USB1 == phone# -


TIA's

Pete




--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] smtp troubles

2006-05-08 Thread Howard Lowndes
I have a Domino server which is now running on FC5 having previously been
running on RH7.1

I can establish an SMTP connection to it (3 part TCP handshake) but it
won't announce itself to the calling host, except I did manage to get it
to announce, and receive, an email immediately after I had booted it and
started the Domino server, but not since.

Any ideas?


-- 
Howard
LANNet Computing Associates http://lannet.com.au
When you want a computer system that works, just choose Linux;
When you want a computer system that works, just, choose Microsoft.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] DIFF utilities that output in HTML?

2006-05-08 Thread DaZZa

Sluggers.

Anyone know of any DIFF-type utilities that output results in HTML?
Basic HTML format pages with, for example, two columns with colour
highlights displaying the differences?

I need to get some comparison of some text config files for idiots who
can;t use a decent text editor.

Thanks.

DaZZa
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] DIFF utilities that output in HTML?

2006-05-08 Thread Jamie Wilkinson
This one time, at band camp, DaZZa wrote:
Sluggers.

Anyone know of any DIFF-type utilities that output results in HTML?
Basic HTML format pages with, for example, two columns with colour
highlights displaying the differences?

I need to get some comparison of some text config files for idiots who
can;t use a decent text editor.

I know you can use vim to generate HTML of the syntax-highlighted file;
perhaps vimdiff can do what you need?  (I've never used vimdiff though.)
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] DIFF utilities that output in HTML?

2006-05-08 Thread DaZZa

On 5/9/06, Jamie Wilkinson [EMAIL PROTECTED] wrote:

This one time, at band camp, DaZZa wrote:
Sluggers.
Anyone know of any DIFF-type utilities that output results in HTML?
Basic HTML format pages with, for example, two columns with colour
highlights displaying the differences?
I need to get some comparison of some text config files for idiots who
can;t use a decent text editor.

I know you can use vim to generate HTML of the syntax-highlighted file;
perhaps vimdiff can do what you need?  (I've never used vimdiff though.)


As far as I can tell, vimdiff doesn't output in HTML - it just
displays the differences on screen.

I'll be happily proven wrong if some waves a flag and says Lookee
here, you git, do , though. :-)

Thanks.

DaZZa
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] DIFF utilities that output in HTML?

2006-05-08 Thread Keith Hopkins

DaZZa wrote:

Sluggers.

Anyone know of any DIFF-type utilities that output results in HTML?
Basic HTML format pages with, for example, two columns with colour
highlights displaying the differences?

I need to get some comparison of some text config files for idiots who
can;t use a decent text editor.


rfcdiff might do the trick for you.  http://tools.ietf.org/tools/rfcdiff/

--Keith

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] smtp troubles - more info

2006-05-08 Thread Howard Lowndes
Looking at netstat -pant on the Domino server, I am seeing a large number
of connections in CLOSE_WAIT state without any associated process number -
kinda like zombie connections.  I wonder what gives here...

On Tue, May 9, 2006 15:03, Howard Lowndes wrote:
 I have a Domino server which is now running on FC5 having previously been
 running on RH7.1

 I can establish an SMTP connection to it (3 part TCP handshake) but it
 won't announce itself to the calling host, except I did manage to get it
 to announce, and receive, an email immediately after I had booted it and
 started the Domino server, but not since.

 Any ideas?


 --
 Howard
 LANNet Computing Associates http://lannet.com.au
 When you want a computer system that works, just choose Linux;
 When you want a computer system that works, just, choose Microsoft.

 --
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


RE: [SLUG] DIFF utilities that output in HTML?

2006-05-08 Thread Roger Barnes
 Sluggers.
 
 Anyone know of any DIFF-type utilities that output results in HTML?
 Basic HTML format pages with, for example, two columns with 
 colour highlights displaying the differences?
 
 I need to get some comparison of some text config files for 
 idiots who can;t use a decent text editor.
 


We use this one at work as a cgi with some success, sounds like it might do 
what you want...

http://www.dma.org/dmahurin/files/software/webdiff.cgi

HTH,
- Roger
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html