Re: [SLUG] problems with perl IO:File binmode

2010-02-11 Thread Gavin Carr
On Thu, Feb 11, 2010 at 03:24:19PM +1100, Voytek Eymont wrote:
 I am a failure in mail processing with amavisd/spamassasin
 --
 AFA05B44845  3085241 Thu Feb 11 10:07:31  s...@hotmail.com
 (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing,
 id=21117-12, mime_decode-1 FAILED: Can't locate object method binmode
 via package IO::File at /usr/lib/perl5/site_perl/5.8.5/MIME/Body.pm line
 437. (in reply to end of DATA command))
 --
 I've reinstalled IO:File
 
 I've googled but haven't found any resolution
 
 any thoughts or suggestions ?
 
 ---
 # perl -MCPAN -e shell
 
 cpan shell -- CPAN exploration and modules installation (v1.9402)
 Enter 'h' for help.
 
   
   cpan[1]
 install
 IO::File
 CPAN: Storable loaded ok (v2.13)
 Going to read '/root/.cpan/Metadata'
   Database was generated on Thu, 11 Feb 2010 01:32:49 GMT
 IO::File is up to date (1.14).

binmode works fine with that version of IO::File. Maybe you have another
version installed as well somewhere? What does:

  perl -MIO::File -le 'print $IO::File::VERSION'

say?

Cheers,
Gavin

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] problems with perl IO:File binmode

2010-02-11 Thread Voytek Eymont

On Thu, February 11, 2010 8:21 pm, Gavin Carr wrote:

 cpan[1] install IO::File
 CPAN: Storable loaded ok (v2.13)
 Going to read '/root/.cpan/Metadata'
 Database was generated on Thu, 11 Feb 2010 01:32:49 GMT
 IO::File is up to date (1.14).


 binmode works fine with that version of IO::File. Maybe you have another
 version installed as well somewhere? What does:

 perl -MIO::File -le 'print $IO::File::VERSION'

Gavin, thanks

# perl -MIO::File -le 'print $IO::File::VERSION'
1.14

meanwhile, as I've decided to disengage mail processing from this fault,
prior to altering config, I've tried telneting to localhost 10024 and
10025; 10024 wasn't responding,  after a long while it did.

then I noticed the deffered mail counter going down


now it's all back to normal

I guess? reinstaling the module(s) did work ?



-- 
Voytek

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Replicate Production to DR file system with rsync

2010-02-11 Thread James Gray
Hi All,

I've googled this one for a while and can't find any examples of people doing 
*system* file sync with rsync.  So I thought I'd throw it out to the collective 
wisdom of SLUG.  Here's the full story.

We have a SuSE-based production application/DB server pair and a corresponding 
pair in a disaster recovery location (offsite, bandwidth consumption needs to 
be minimised).  We need to sync a number of files between these servers and 
some require elevated (root) privileges at *both* ends.  Here lies the problem; 
we don't allow remote root logins (via SSH or any other method either...sudo, 
console or nadda).

I want to use rsync because of it's ability to transfer 
differential/incremental changes and thus bandwidth friendly, however any other 
tool would be fine too.  However, due to the inability for root to login 
directly, how the heck do I synchronise particular files in privileged 
locations (like /etc/shadow)?  I can start whatever services I need at either 
end (like an rsync server) but the main thing is all files maintain the same 
owner/group/mode at each end.

Ideas?

Thanks in advance,

James
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] SLUG FebruaryMonthly Meeting - Python Game Programming *Tutorial*

2010-02-11 Thread Tim Ansell

You can read the full version of this announcement at
 http://slug.org.au/node/123

== Summary ==

Date: Friday 29nd of January (Friday next week). 
Start Time: Arrive at 6:15pm for a 6:30pm *sharp* start
Format: Python Game Programming, BOFs, Pizza Dinner
Where: Google Australia, opposite Star City

 *** You will need a setup laptop to participate in this tutorial. **
 * Instructions for setting up your laptop are listed at
  http://wiki.slug.org.au/pythonprogrammingsetup

== SLUG January Monthly Meeting ==

Instead of running two 45 minute talks will be having two Python game
tutorials. At the end of each tutorial you should have a fully playable
game developed and running!

The first tutorial will be suitable for beginners of all ages, no
programming experience will be required. The tutorial will focus around
a Punch the Monkey game, but there should also be enough meat for
more advanced people to create something cool.

The second tutorial will be suitable for people who want to advanced
further and will concentrate on extending skills learnt in the earlier
tutorial. Some programming experience is recommended for this tutorial.
During this tutorial people will create a clone of either space
invaders or asteroids.

As the tutorials will be interactive you will need to bring a laptop.
You will also need to set-up your laptop with the appropriate software.
The software runs on Linux, Mac and Windows. You will need to install:
  * Python - http://python.org
  * Pyglet - http://pyglet.org
  * Rabbyt - http://matthewmarshall.org/projects/rabbyt/

To test that everything works, I have included a small Python program
which will display It works if everything is working.

To do so on Ubuntu, you would use the following commands;
   # Install python and easy_install
   apt-get install python python-setuptools
   # Install pyglet and rabbyt
   easy_install pyglet
   easy_install rabbyt
   # Test everything is working
   python test.py

If you figure out instructions for other operating systems or Linux
versions please add them at:   
   http://wiki.slug.org.au/pythonprogrammingsetup

*** If you have problems, please turn up **early** so we can fix them!


= Meeting Details =

SLUG is the very mis-named Sydney Linux User Group. We are a general
Open Source interest group which runs our primary event on the last
Friday of every month (except December). Meetings are open to the
general public, and are free of charge.

Our venue is Google, Level 5, 48 Pirrama Road, Pyrmont. It's across the
road from Star City Casino. A map of the area can be found here[1], and
public transit directions are at [2]. Appropriate signage and directions
will be posted around the building.

You will need to sign-in to enter the venue. This can be performed when
you arrive, but to save time we recommend that you do so online
beforehand at Eventbrite ( http://slug.eventbrite.com ). 

If you are unsure, please sign up as a 'maybe'. This allows us to
organise adequate meeting space and facilities. You do not need to
create an account to indicate your attendance.

= Meeting Schedule =

We start at 18.30 but we ask that people arrive at least 15 minutes
early so we an all get into the building and start on time. Please do
not arrive before 18.00, as it may hinder business activities for our
host!

See here[5] for an explanation of the segments.

   * 18.15: Open Doors
   * 18.30: Announcements, News, Introductions
   * 18.45: General Talk
   * 19.30: Intermission
   * 19.45: In-Depth Talk
   * 20.30: Dinner

 BoFs and the Hackerspace run from the time the doors open.

= Bird of a Feather (BoF) Sessions =

The list of BoFs at the moment are:

* SLUGlets - our regular forum for newbies and desktop users

If you would like to run a BoF, please discuss on the SLUG Activities
mailing list[4].

= Hacker Space =

We have heaps of room available to us at Google. If the talks do not
grab you, feel free to come along and hack away on your favourite
project in the designated Hacker Space.

= Dinner =

For dinner, we order in a selection of pizzas. The cost is $10 per
head, and we will be collecting money from the beginning of the
meeting. If you have any particular dietary requirements (e.g.
vegetarian), let us know beforehand. Dinner is a great way to
socialise and learn in a relaxed atmosphere :)

For those who want to continue the conversation after dinner, some of
us will be heading to a pub in the local area.

[1] http://tinyurl.com/ParkingPyrmont
[2] http://wiki.slug.org.au/howtogetthere
[3] http://slug.eventbrite.com/
[4] http://lists.slug.org.au/listinfo/activities
[5] http://www.slug.org.au/meetings/meetingformat

--
SLUG Committee
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Replicate Production to DR file system with rsync

2010-02-11 Thread Ken Foskey
On Fri, 2010-02-12 at 10:24 +1100, James Gray wrote:
 Hi All,
 
 I've googled this one for a while and can't find any examples of people doing 
 *system* file sync with rsync.  So I thought I'd throw it out to the 
 collective wisdom of SLUG.  Here's the full story.
 
 We have a SuSE-based production application/DB server pair and a 
 corresponding pair in a disaster recovery location (offsite, bandwidth 
 consumption needs to be minimised).  We need to sync a number of files 
 between these servers and some require elevated (root) privileges at *both* 
 ends.  Here lies the problem; we don't allow remote root logins (via SSH or 
 any other method either...sudo, console or nadda).
 
 I want to use rsync because of it's ability to transfer 
 differential/incremental changes and thus bandwidth friendly, however any 
 other tool would be fine too.  However, due to the inability for root to 
 login directly, how the heck do I synchronise particular files in privileged 
 locations (like /etc/shadow)?  I can start whatever services I need at either 
 end (like an rsync server) but the main thing is all files maintain the same 
 owner/group/mode at each end.
 
 Ideas?

I have done this using sudo.  I write a script on the called machine,
sign on as my user and run the script using sudo which I authorise (very
specifically) to root without password.

Ken


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] nzb program

2010-02-11 Thread David Gillies

Lee Isaacson wrote:

Hi there,

I am using Ubuntu 9.10 and I am looking for a program to download nzb
files similar to grab it for windows. I have tried to install hellanzb
but the file stays at 0. Do I need to look at another distro or is
there another application that works better?

I hope that someone can help me.


I'm using lottanzb which is a nice gtk frontend to hellanzb. Heaps easy 
to setup and is in the ubuntu repos:


http://www.lottanzb.org/

For when I want to dowload from the command line, I use nzbperl

http://noisybox.net/computers/nzbperl/
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Replicate Production to DR file system with rsync

2010-02-11 Thread Amos Shapira
On 12 February 2010 15:37, Ken Foskey kfos...@tpg.com.au wrote:

 On Fri, 2010-02-12 at 10:24 +1100, James Gray wrote:
need to sync a number of files between these servers and some require
elevated (root) privileges at *both* ends.  Here lies the problem; we
don't allow remote root logins (via SSH or any other method
either...sudo, console or nadda).

 I have done this using sudo.  I write a script on the called machine,
 sign on as my user and run the script using sudo which I authorise (very
 specifically) to root without password.

He says that he can't use sudo.

However Google'ing for offline rsync reminded me of rdiff - here is
a use case which sounds similar to yours:
http://users.softlab.ece.ntua.gr/~ttsiod/Offline-rsync.html

Cheers,

--Amos
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Replicate Production to DR file system with rsync

2010-02-11 Thread Jeremy Visser
On Fri, 2010-02-12 at 15:37 +1100, Ken Foskey wrote:
 I have done this using sudo.  I write a script on the called machine,
 sign on as my user and run the script using sudo which I authorise (very
 specifically) to root without password.

Agreed. Not only that, but you can restrict sudo to only be able to run
certain commands -- rsync being the case in point.

Something like the following oughta do the trick (assuming you have a
group called 'backup' that the backup user is in — remove the % to make
it refer to a user instead):

%backup NOPASSWD: ALL = /usr/bin/rsync -ar server1:/vital_data/ /vital_data/

(The above should enforce that rsync is only called with those
particular parameters, if I read the sudoers man page correctly.)


signature.asc
Description: This is a digitally signed message part
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] Replicate Production to DR file system with rsync

2010-02-11 Thread Daniel Pittman
James Gray ja...@gray.net.au writes:

 I've googled this one for a while and can't find any examples of people
 doing *system* file sync with rsync.  So I thought I'd throw it out to the
 collective wisdom of SLUG.  Here's the full story.

 We have a SuSE-based production application/DB server pair and a
 corresponding pair in a disaster recovery location (offsite, bandwidth
 consumption needs to be minimised).  We need to sync a number of files
 between these servers and some require elevated (root) privileges at *both*
 ends.  Here lies the problem; we don't allow remote root logins (via SSH or
 any other method either...sudo, console or nadda).

 I want to use rsync because of it's ability to transfer
 differential/incremental changes and thus bandwidth friendly, however any
 other tool would be fine too.  However, due to the inability for root to
 login directly, how the heck do I synchronise particular files in privileged
 locations (like /etc/shadow)?

...if you allow this tool to write to /etc/shadow[1], just allow root logins:
you have added *nothing* by forbidding them.  Why?  An attacker with access to
the rsync tool can add an additional root user with a known password anyhow,
so additional security doesn't actually change the problem space at all.

 I can start whatever services I need at either end (like an rsync server)
 but the main thing is all files maintain the same owner/group/mode at each
 end.

 Ideas?

Just use root, if you want to go down this path.

Alternately, I would suggest using something like puppet which is designed to
do system management like this in an automated fashion; it is a completely
different approach, but one that will probably solve your underlying problem
without needing to change your security model so much.

Regards,
Daniel

Footnotes: 
[1]  ...and, by implication, /etc/passwd, since the later isn't much use
 without the former being updated too.

-- 
✣ Daniel Pittman✉ dan...@rimspace.net☎ +61 401 155 707
   ♽ made with 100 percent post-consumer electrons
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Replicate Production to DR file system with rsync

2010-02-11 Thread james
On Friday 12 February 2010 13:23:18 slug-requ...@slug.org.au wrote:
  On Fri, 2010-02-12 at 10:24 +1100, James Gray wrote:
 
 need to sync a number of files between these servers and some require
 elevated (root) privileges at both ends.  Here lies the problem; we
 don't allow remote root logins (via SSH or any other method
 either...sudo, console or nadda).
 
  I have done this using sudo.  I write a script on the called machine,
  sign on as my user and run the script using sudo which I authorise (very
  specifically) to root without password.
 
 He says that he can't use sudo.
 
 However Google'ing for offline rsync reminded me of rdiff - here is
 a use case which sounds similar to yours:
 http://users.softlab.ece.ntua.gr/~ttsiod/Offline-rsync.html

So you want root privilege without using any of the standard root-privilege-
mechanisms
Wow, he said scathingly, that deserves a prize.

Actually you should start at the beginning, take a deep breath, and clearly 
decide what you are trying to achieve then how to do that securely including 
physical access to the remote machine. That is a very very easy way to 
compromise your server (hint knoppix or any live CD)

You were mugged on the train and lost your rdiff mem stick illustrates the 
foolhardy nature of your thinkings

James
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Replicate Production to DR file system with rsync

2010-02-11 Thread Amos Shapira
On 12 February 2010 17:35, james j...@tigger.ws wrote:
 You were mugged on the train and lost your rdiff mem stick illustrates the
 foolhardy nature of your thinkings

USB key can be encrypted.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Replicate Production to DR file system with rsync

2010-02-11 Thread James Polley
On Fri, Feb 12, 2010 at 6:35 PM, Amos Shapira amos.shap...@gmail.com wrote:
 On 12 February 2010 17:35, james j...@tigger.ws wrote:
 You were mugged on the train and lost your rdiff mem stick illustrates the
 foolhardy nature of your thinkings

 USB key can be encrypted.

Which is great, no-one else can read your files.

Unfortunately, neither can you.

 --
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html