Re: [389-users] Logfile buffering

2010-05-19 Thread Nathan Kinder

On 05/19/2010 01:39 PM, Roland Schwingel wrote:


Hi

One last question before switching of my machine...
Is it possible that the dirsrv logfiles (access, error etc.) are 
written to disk with activated buffering?


When I do a tail -f on these logfiles I see a big delay in output. 
When I do eg. an ldapsearch from
a client the result appears immediately at the client, but it takes 
about 10 to 15 seconds until the tail -f
shows the search (or whatever I do). This is a bit inconvenient when 
debugging things.


Does this happen only to me or is this generally the case? Can this be 
switched off/changed?
The access log output is buffered by default.  You can turn this off by 
setting the nsslapd-accesslog-logbuffering attribute to off in the 
cn=config entry.


The errors log is not buffered.

-NGK


Thanks for your help,

Roland


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Re: [389-users] storing x509 certificates in the directory

2010-05-19 Thread Luke Schierer
On Tue, May 18, 2010 at 07:44:23PM -0600, Rich Megginson wrote:
 Luke Schierer wrote:
  Hi all,
 
  I have been using fedora directory server/389 directory server for a
  couple years now with out any real issues, so I want to start off by
  thanking all of the developers for the hours they put into making it
  available to us.
 
  Lately I have had the need to look at storeing x509 certificates in my
  LDAP directory, to make them available to an application we use.
  Looking at the documentation available on the website, it appears that
  the usercertificate attribute either used to be a binary attribute, or
  that there is a way to make it a binary attribute that I am not
  seeing.

 It is and always has been a binary attribute.  What documentation on the 
 website leads you to think otherwise?  We need to fix it.
  If the former, that it was but is no longer a binary attribute, it
  appears to me that the 389-console cannot handle the PEM formatted
  certificates, once one is added, I can no longer select that attribute
  to manipulate either it, or the certificate it contains.

 Sounds like a bug.
  If the latter, that it can be changed to be binary, I would greatly
  appreciate a pointer on how to do so.
 
  Hopefully someone who has worked with certificates in 389-ds can give
  me some pointers either way, so that I can either submit a bug report,
  or find the right docs to be reading. Any help would be greatly
  appreciated.

The docs do say that it is a binary attribute, but they say that in
the 389-console that it should have a button to select the file to
upload.  Instead, it has a text box.  That is what confuses me.
Should I put the filename in that text box?

Thanks!!

Luke


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


Re: [389-users] storing x509 certificates in the directory

2010-05-19 Thread Rich Megginson
Luke Schierer wrote:
 On Tue, May 18, 2010 at 07:44:23PM -0600, Rich Megginson wrote:
   
 Luke Schierer wrote:
 
 Hi all,

 I have been using fedora directory server/389 directory server for a
 couple years now with out any real issues, so I want to start off by
 thanking all of the developers for the hours they put into making it
 available to us.

 Lately I have had the need to look at storeing x509 certificates in my
 LDAP directory, to make them available to an application we use.
 Looking at the documentation available on the website, it appears that
 the usercertificate attribute either used to be a binary attribute, or
 that there is a way to make it a binary attribute that I am not
 seeing.
   
   
 It is and always has been a binary attribute.  What documentation on the 
 website leads you to think otherwise?  We need to fix it.
 
 If the former, that it was but is no longer a binary attribute, it
 appears to me that the 389-console cannot handle the PEM formatted
 certificates, once one is added, I can no longer select that attribute
 to manipulate either it, or the certificate it contains.
   
   
 Sounds like a bug.
 
 If the latter, that it can be changed to be binary, I would greatly
 appreciate a pointer on how to do so.

 Hopefully someone who has worked with certificates in 389-ds can give
 me some pointers either way, so that I can either submit a bug report,
 or find the right docs to be reading. Any help would be greatly
 appreciated.
   

 The docs do say that it is a binary attribute, but they say that in
 the 389-console that it should have a button to select the file to
 upload.  Instead, it has a text box.  That is what confuses me.
 Should I put the filename in that text box?
   
No, I think the text box is for the base64 encoded (i.e. PEM) cert data.
 Thanks!!

 Luke


 --
 389 users mailing list
 389-users@lists.fedoraproject.org
 https://admin.fedoraproject.org/mailman/listinfo/389-users
   

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


Re: resolv.conf, NetworkManager, no ping response on one nameserver

2010-05-19 Thread Tim
On Tue, 2010-05-18 at 15:24 -0700, jackson byers wrote:
 I still left  ifcfg-etho with DOMAIN=pacbell.net; (possibly also set
 in my router config? It has been years since I had to fuss with that).
 I might want to get into the router and change pacbell.net to
 sbcglobal.net, but it seems there is no serious conflict using
 pacbell.net

The domain= or search= parameters are to do with what domain names to
automatically prepend to hostnames.  Say, for example, you try

  ping testbox

it'll automatically try to

  ping testbox.pacbell.net

The same goes for other things you address by just a hostname (NFS
mounts, mail servers, web servers, etc.), and for constructing local
domain names from DHCP assigned hostnames (though it might be the source
of providing the domain name, rather than the client adding a domain
name).

If you do that sort of thing (make use of short hostnames), having an
inappropriate domain name parameter will cause you problems.  If you
don't do that sort of thing, you'll probably never notice it.

An inappropriate domain name is one that isn't yours to control, and
that includes your ISP's domain name.

The domain parameter virtually says this is your domain.  The search
parameter can list a series of domain names to try appending.  Though
you really shouldn't have both options set, according to the docs I read
some time ago.


-- 
[...@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.



-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Best backup option

2010-05-19 Thread Christof Damian
On Wed, May 19, 2010 at 03:06, Genes MailLists li...@sapience.com wrote:
 On 05/18/2010 06:06 PM, Steven Stern wrote:


 Here's my script to backup to an external USB drive


  I'd suggest rdiff-backup (steven you may want to look into this).

  It uses rsync library but adds ability to roll back as far back as
 you'd like. The backup tree is browsable (just as an rsync backup would be).

rdiff-backup is brilliant. It gives you the browseable backup, so you
can copy from the last backup directly. But it also keeps a history of
the increments for as long back as you have space.

It is also pretty efficient if you use it over the network and I use
it to make backups of remote servers.

Christof
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Can Windows and Linux co-exist?

2010-05-19 Thread Timothy Murphy
arag...@dcsnow.com wrote:

 I'm thinking specifically (at the moment)
 of MySQL, openVPN and openLDAP.
 Is there anywhere an account of how to set up
 a Windows client with a Linux server
 for these applications?
 
 I've setup FreeS/WAN (http://www.freeswan.org/) for my VPN.  It seemed to
 work quite well from Windows and Linux clients alike.  I haven't used the
 LDAP so I can not comment on that but MySQL works fine from my Windows and
 Linux clients also.

Thanks for the info, and the suggestions.
I now have MySQL working perfectly from Windows.
And LDAP works in the sense that I can access my OpenLDAP data
from http:server/phpLDAPadmin ;
I haven't yet worked out how to access my LDAP address book
from inside Outlook 2003.

I'll turn to VPN next.
I want to stick to OpenVPN on my Linux server and machines,
since this works perfectly.
It wasn't clear to me if Freeswan works with OpenVPN,
and I'm not really clear about the relation between IPsec and VPN,
or indeed what the purpose of IPsec is,
since all my inter-machine communication already seems to be encrypted.
But I shall continue my study ...


-- 
Timothy Murphy  
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Screensaver weirdness with nvidia/nouveau

2010-05-19 Thread Andrew Haley
I wonder if anyone else has seen this.

This is F12, gnome, nouveau video driver.  I have my screensaver setup as

Regard computer as idle after 1 minute

Power management:

Put display to sleep when inactive for 5 minutes

Sometimes the screen blanks, sometimes it doesn't.  I can't find any real
pattern to this: recently the screensaver/power down seemed to stop
working for days, and then it started working yesterday.

I was wondering if this was maybe related to running a vnc server, but
it's very hard to tell.  Any ideas?

Thanks,
Andrew.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Disc failure on a software RAID system has killed everything

2010-05-19 Thread Gary Stainburn
Hi folks,

I've got a PC with 5x500GB HDD's running software raid.  On drive 0 and 1 I 
had RAID0 for the boot partition and then on all 5 drives I had RAID 5 for 
everything else.

One of the first two drives has died causing the PC to hang, and then when I 
rebooted it couldn't get past GRUB.  I have found out which drive it is and 
disconnected it. It then got past GRUB, loaded the kernel which then paniced 
and hung.

I have tried booting using a FC11 install DVD (I believe the dead PC is either 
FC9 or FC10) and going into rescue mode but it says that there are no Linux 
partitions and doesn't go any further.

Going into fdisk for each drive (with the dead one still disconnected) shows 
the partition tables.

in theory, this system should still be bootable, can anyone suggest things to 
try to get it working again.

Thanks
-- 
Gary Stainburn
 
This email does not contain private or confidential material as it
may be snooped on by interested government parties for unknown
and undisclosed purposes - Regulation of Investigatory Powers Act, 2000 
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Screensaver weirdness with nvidia/nouveau

2010-05-19 Thread Sam Varshavchik

Andrew Haley writes:


I wonder if anyone else has seen this.

This is F12, gnome, nouveau video driver.  I have my screensaver setup as

Regard computer as idle after 1 minute

Power management:

Put display to sleep when inactive for 5 minutes

Sometimes the screen blanks, sometimes it doesn't.  I can't find any real
pattern to this: recently the screensaver/power down seemed to stop
working for days, and then it started working yesterday.

I was wondering if this was maybe related to running a vnc server, but
it's very hard to tell.  Any ideas?


I had observed on an F12 machine that uses the mach64 driver that the 
monitor won't get powered off if no keyboard or mouse activity occurs after 
a reboot. gdm is configured to autologin, so a reboot automatically logs me 
into my desktop. If I do not touch the keyboard or mouse, the screensaver 
will kick in, but the monitor won't get turned off.


I have to punch something to the keyboard. Only then, after a suitable 
delay, would the monitor get powered off.




pgpkOsusqhy6Z.pgp
Description: PGP signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Disc failure on a software RAID system has killed everything

2010-05-19 Thread Bryn M. Reeves
On 05/19/2010 12:04 PM, Gary Stainburn wrote:
 Hi folks,
 
 I've got a PC with 5x500GB HDD's running software raid.  On drive 0 and 1 I 
 had RAID0 for the boot partition and then on all 5 drives I had RAID 5 for 
 everything else.

Why use RAID0 for the boot partition? That means that a failure of
either drive will make the system unbootable (since half the file system
needed for booting is on the dead device).

I tend to use RAID1 for boot devices, RAID5 for general storage (where I
either don't care too much about write performance or expect a low level
of write I/O). I would only use RAID0 for transient data that can be
easily regenerated after a hardware failure (or combine it with RAID1 if
you need to combine redundancy with better write performance but make
sure you understand the way that different stackings behave[1]).

 One of the first two drives has died causing the PC to hang, and then when I 
 rebooted it couldn't get past GRUB.  I have found out which drive it is and 
 disconnected it. It then got past GRUB, loaded the kernel which then paniced 
 and hung.

If the boot file system was really stored on a RAID0 device one side of
which is now absent then it is possible that we are loading a broken
vmlinuz or initrd (initramfs) image from the surviving disk.

 I have tried booting using a FC11 install DVD (I believe the dead PC is 
 either 
 FC9 or FC10) and going into rescue mode but it says that there are no Linux 
 partitions and doesn't go any further.

You might need to activate the arrays manually depending on how they
were configured.

 Going into fdisk for each drive (with the dead one still disconnected) shows 
 the partition tables.
 
 in theory, this system should still be bootable, can anyone suggest things to 
 try to get it working again.

I'm not sure I agree if you had /boot on a RAID0.

Regards,
Bryn.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Disc failure on a software RAID system has killed everything

2010-05-19 Thread Bryn M. Reeves
On 05/19/2010 12:13 PM, Bryn M. Reeves wrote:
 On 05/19/2010 12:04 PM, Gary Stainburn wrote:
 Hi folks,

 I've got a PC with 5x500GB HDD's running software raid.  On drive 0 and 1 I 
 had RAID0 for the boot partition and then on all 5 drives I had RAID 5 for 
 everything else.
 
 Why use RAID0 for the boot partition? That means that a failure of
 either drive will make the system unbootable (since half the file system
 needed for booting is on the dead device).
 
 I tend to use RAID1 for boot devices, RAID5 for general storage (where I
 either don't care too much about write performance or expect a low level
 of write I/O). I would only use RAID0 for transient data that can be
 easily regenerated after a hardware failure (or combine it with RAID1 if
 you need to combine redundancy with better write performance but make
 sure you understand the way that different stackings behave[1]).

Oops, forgot to include the link:

[1] http://www.aput.net/~jheiss/raid10/

 One of the first two drives has died causing the PC to hang, and then when I 
 rebooted it couldn't get past GRUB.  I have found out which drive it is and 
 disconnected it. It then got past GRUB, loaded the kernel which then paniced 
 and hung.

It might help to post the panic text (or at least a description) but to
be honest I think you'll likely need to rebuild your /boot file system
from scratch and re-install grub to get this working again.

Regards,
Bryn.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Disc failure on a software RAID system has killed everything

2010-05-19 Thread Gary Stainburn
On Wednesday 19 May 2010 12:13:12 Bryn M. Reeves wrote:
 On 05/19/2010 12:04 PM, Gary Stainburn wrote:
  Hi folks,
 
  I've got a PC with 5x500GB HDD's running software raid.  On drive 0 and 1
  I had RAID0 for the boot partition and then on all 5 drives I had RAID 5
  for everything else.

 Why use RAID0 for the boot partition? That means that a failure of
 either drive will make the system unbootable (since half the file system
 needed for booting is on the dead device).

 I tend to use RAID1 for boot devices, RAID5 for general storage (where I
 either don't care too much about write performance or expect a low level
 of write I/O). I would only use RAID0 for transient data that can be
 easily regenerated after a hardware failure (or combine it with RAID1 if
 you need to combine redundancy with better write performance but make
 sure you understand the way that different stackings behave[1]).

Sorry Bryn, I mean RAID1.

I thought that with RAID1, if I disconnected the dead one it should either 
just work, or i should be able to access both that and the RAID5 setup from 
the bood DVD.

However, as I said, it won't boot and the rescue DVD doesn't see the Linux 
partitions, presumably because it can't/won't use the RAID devices


-- 
Gary Stainburn
 
This email does not contain private or confidential material as it
may be snooped on by interested government parties for unknown
and undisclosed purposes - Regulation of Investigatory Powers Act, 2000 
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Disc failure on a software RAID system has killed everything

2010-05-19 Thread birger
Remember that if you use old ATA disks, the slave often gets completely
braindead if the master on the same chain dies. Because of this, your
boot device should be striped over two master disks (on 2 different
chains of course).

If this is your case (striping over slave and master on the same chain)
I would try with a physically sound disk to replace the failed drive so
the slave should work again, and check that only the slave has an
active, bootable partition.

-- 
birger


-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Disc failure on a software RAID system has killed everything

2010-05-19 Thread Bruno Wolff III
On Wed, May 19, 2010 at 14:32:40 +0200,
  birger bir...@birger.sh wrote:
 
 If this is your case (striping over slave and master on the same chain)
 I would try with a physically sound disk to replace the failed drive so
 the slave should work again, and check that only the slave has an
 active, bootable partition.

If this is the problem, changing the jumper will also work.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: [389-users] SASL auth problem on bind with Mac OS X 10.4

2010-05-19 Thread Roland Schwingel
Hi

 Is the ldap server configured for sasl? it would seem that the osx
 client tries with sasl and only sasl when that does not work it unbinds
 and does not try simple bind, it may see that the ldap server is showing
 sasl as a available authentication method but it is not really
 available, can you exec login into it? 
As I found no other way to test it I moved away my libcrammd5.so on my
389ds box and restarted dirsrv. CRAM-MD5 was no longer in the list of
supported methods. 

I rebooted also my mac. My mac no longer issues a CRAM-MD5 SASL bind
that is the good news, but it does not switch over to a simple bind using
a binddn. It just does no bind anymore. What a mess. 

Anyway:
Maybe I haven't found it but an option to enable/disable certain SASL
methods within 389ds would IMHO be good to have for other situations
where you can come into these needs.

Roland
--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Re: Disc failure on a software RAID system has killed everything

2010-05-19 Thread Bryn M. Reeves
On 05/19/2010 12:28 PM, Gary Stainburn wrote:
 Sorry Bryn, I mean RAID1.
 
 I thought that with RAID1, if I disconnected the dead one it should either 
 just work, or i should be able to access both that and the RAID5 setup from 
 the bood DVD.

Ah, that makes a lot more sense then!

It's true that MD RAID1 setups in many cases can be made to boot
reliably with a failed drive (there can be problems with getting the
BIOS on some systems to reliably boot the surviving disk or to correctly
ignore the dead one but this tends to work better on most machines now
than it did a few years ago).

By the sound of it you're not hitting this kind of problem here though
since you are getting the bootloader and kernel to load.

 However, as I said, it won't boot and the rescue DVD doesn't see the Linux 
 partitions, presumably because it can't/won't use the RAID devices

You can check to see that the arrays are seen in the rescue environment
by running:

# mdadm --detail --scan

This will scan storage devices for MD labels and list out all the arrays
found and their UUIDs, e.g.:

# mdadm --detail --scan
ARRAY /dev/md0 metadata=0.90 UUID=eb08491d:20a2b1a6:4d0f9285:bfb3869d
ARRAY /dev/md1 metadata=0.90 UUID=3bfd52c0:323e8987:28551b16:3c510952
ARRAY /dev/md2 metadata=0.90 UUID=c4217b57:2102c749:15b01350:1139f0fa

You can then assemble and start the arrays with the -A/--assemble option
to mdadm and piece together the system from there.

It would be useful to know more about the kernel panic that you're
seeing when booting the system with the degraded array - that might
provide some hints as to what's up. If you don't have a serial console
or other means to capture the text verbatim then copying off the last
few lines by hand and posting them here might give some hints.

Regards,
Bryn.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: May 17-19 update borked my system

2010-05-19 Thread Patrick O'Callaghan
On Wed, 2010-05-19 at 01:52 -0400, Dennis Mattingly wrote:
 1) How can I list the packages that were updated in my last update?

Look at /var/log/yum.log and check the dates.

poc

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: May 17-19 update borked my system

2010-05-19 Thread Chris Tyler
On Wed, 2010-05-19 at 01:52 -0400, Dennis Mattingly wrote:
 1) How can I list the packages that were updated in my last update?

Use the command: yum history info

-Chris
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Fedora-12 boot fails at Starting udev:

2010-05-19 Thread William Perkins

I am having a boot problem on my work station with any of the
Fedora-12 update kernels.  The hardware appears to lock up with
no response possible from the keyboard.  They all fail by hanging
at the Starting udev: line during the boot process.  The original
installed kernel (2.6.31.5-127.fc12.x86_64 #1 SMP) boots and works
just fine.  I am not new at using Linux, but this is the first time
that I have encountered this type of problem and I am unsure where
I need to start and what tools I need to use to resolve the problem.
Any pointers would be helpful.

This is a home build system using a Tyan Thunder K8WE (S2895)
motherboard with one processor and four gig of memory, and has an
array of disks using SCSI (primary partitions), SATA and IDE
interfaces.  Software RAID and LVM are used to organize the disk
partitions and file systems.  This system is about five years old
and has never had any hardware problems except for disk and fan
failures.

73,

Bill


William M. Perkins, KJ4ASH UNIX/Linux Systems Administrator
The Greenwood   ARES / Skywarn / ARCA
Galax, VirginiaE-mail - w...@grnwood.net
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: May 17-19 update borked my system

2010-05-19 Thread Suvayu Ali
On Wednesday 19 May 2010 08:33 AM, Chris Tyler wrote:
 On Wed, 2010-05-19 at 01:52 -0400, Dennis Mattingly wrote:
 1) How can I list the packages that were updated in my last update?

 Use the command: yum history info


I can't find that on F11, is this a new feature?

 -Chris


-- 
Suvayu

Open source is the future. It sets us free.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: [389-users] storing x509 certificates in the directory

2010-05-19 Thread Ulf Weltman

On 5/18/2010 6:44 PM, Rich Megginson wrote:

Luke Schierer wrote:
   

Hi all,

I have been using fedora directory server/389 directory server for a
couple years now with out any real issues, so I want to start off by
thanking all of the developers for the hours they put into making it
available to us.

Lately I have had the need to look at storeing x509 certificates in my
LDAP directory, to make them available to an application we use.
Looking at the documentation available on the website, it appears that
the usercertificate attribute either used to be a binary attribute, or
that there is a way to make it a binary attribute that I am not
seeing.

 

It is and always has been a binary attribute.  What documentation on the
website leads you to think otherwise?  We need to fix it.
   

If the former, that it was but is no longer a binary attribute, it
appears to me that the 389-console cannot handle the PEM formatted
certificates, once one is added, I can no longer select that attribute
to manipulate either it, or the certificate it contains.

 

Sounds like a bug.
   

If the latter, that it can be changed to be binary, I would greatly
appreciate a pointer on how to do so.

Hopefully someone who has worked with certificates in 389-ds can give
me some pointers either way, so that I can either submit a bug report,
or find the right docs to be reading. Any help would be greatly
appreciated.

 

You can always use ldapmodify e.g.
dn: uid=username,
changetype: modify
replace: userCertificate
userCertificate::PEM data
or
userCertificate:file:///path/to/binary/encoded/file
   


If using the Mozilla LDAP tools with the latter method, make sure to 
specify LDIF version 1 because otherwise the literal string 
file:///path/to/binary/encoded/file is stored.


version 1
dn: uid=username,
changetype: modify
replace: userCertificate
userCertificate:file:///path/to/binary/encoded/file

Thanks!!

Luke

--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

 

--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

   




smime.p7s
Description: S/MIME Cryptographic Signature
--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Re: Fedora-12 boot fails at Starting udev:

2010-05-19 Thread Tom Horsley
On Wed, 19 May 2010 12:08:56 -0400 (EDT)
William Perkins wrote:

 They all fail by hanging
 at the Starting udev: line during the boot process.

The udev step tends to be where lots of drivers get loaded,
so it is probably some specific driver that is killing it.
If you could find it and blacklist it, you might be able
to boot (depending on how critical the device involved
happens to be).

No idea how to find which one though :-(.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: May 17-19 update borked my system

2010-05-19 Thread Rahul Sundaram
On 05/19/2010 09:52 PM, Suvayu Ali wrote:
 On Wednesday 19 May 2010 08:33 AM, Chris Tyler wrote:
   

 Use the command: yum history info

 
 I can't find that on F11, is this a new feature?
   

Yes. 

Rahul
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


unsubscribe

2010-05-19 Thread Milena Abreu
 

 

 

 

Saludos,

 

Milena 

 

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: [389-users] SASL auth problem on bind with Mac OS X 10.4

2010-05-19 Thread Rich Megginson
Roland Schwingel wrote:

 Hi

  Is the ldap server configured for sasl? it would seem that the osx
  client tries with sasl and only sasl when that does not work it unbinds
  and does not try simple bind, it may see that the ldap server is showing
  sasl as a available authentication method but it is not really
  available, can you exec login into it?
 As I found no other way to test it I moved away my libcrammd5.so on my
 389ds box and restarted dirsrv. CRAM-MD5 was no longer in the list of
 supported methods.

 I rebooted also my mac. My mac no longer issues a CRAM-MD5 SASL bind
 that is the good news, but it does not switch over to a simple bind using
 a binddn. It just does no bind anymore. What a mess. 
So the mac finds that CRAM-MD5 is not available, and does nothing at all?

Note that Digest-MD5 requires that the directory server store the 
password in clear text.  This is because the directory server must use 
the clear text password to generate the challenge for the client.  This 
prevents any clear text passwords from being sent across the wire, as is 
done with a regular simple DN and password BIND operation.


 Anyway:
 Maybe I haven't found it but an option to enable/disable certain SASL
 methods within 389ds would IMHO be good to have for other situations
 where you can come into these needs.
It's on the Roadmap - http://directory.fedoraproject.org/wiki/Roadmap

 Roland
 

 --
 389 users mailing list
 389-us...@lists.fedoraproject.org
 https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


Re: May 17-19 update borked my system

2010-05-19 Thread Tom Horsley
On Wed, 19 May 2010 22:10:30 +0530
Rahul Sundaram wrote:

  Use the command: yum history info
 

  I can't find that on F11, is this a new feature?
  
 
 Yes. 

You could look at /var/log/yum.log instead and find
all the updates that happened at about the same time
(there is a timestamp at the start of the line).
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: May 17-19 update borked my system

2010-05-19 Thread Richard Hughes
On 19 May 2010 06:52, Dennis Mattingly dennismattinglyzz...@gmail.com wrote:
 - NVIDIA binary driver

You lost developer interest right there.

Richard.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: May 17-19 update borked my system

2010-05-19 Thread Kevin Fenzi
On Wed, 19 May 2010 01:52:05 -0400
Dennis Mattingly dennismattinglyzz...@gmail.com wrote:

 The most recent round of updates did two things:
 : It changed my resolution (fonts are smaller, desktop icons moved,
 toolbar icons moved)
 : I can no longer play Enemy Territory: Quake Wars
 
 
 ERROR: The current video card / driver combination does not support
 the necessary features: GL_ARB_texture_rectangle or
 GL_EXT_texture_rectangle 
 
 So I have two questions:
 1) How can I list the packages that were updated in my last update?
 2) How much blame shall I assign to NVIDIA / Fedora?

Very likely you installed the new kernel from fedora updates, but
rpmfusion had not yet pushed out the new nvidia kmod, leaving you with
a non working binary only non free nvidia driver. ;( 

So, your options are: 

- Boot to the previous kernel, everything will work, just wait a few
  days, then boot back to the new kernel and 'yum install kmod-nvidia'
  to get the new kmod from rpmfusion. 

- yum install akmod-nvidia to switch to the akmod, which builds on boot
  of any new kernel. 

I'm assuming you are using the rpmfusion one. If you are using the
nasty .run file from nvidia, you will need to download and re-run it
each time your kernel updates. 

kevin


signature.asc
Description: PGP signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: unsubscribe

2010-05-19 Thread Robert G. (Doc) Savage

On Wed, 2010-05-19 at 12:49 -0500, Milena Abreu wrote:
 Saludos,
 
  
 
 Milena 

Please unsubscribe yourself. If your e-mail client removes the trailer
instructions, they are:
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

--Doc

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: May 17-19 update borked my system

2010-05-19 Thread Dennis Mattingly
On 19 May 2010 06:52, Dennis Mattingly dennismattinglyzz...@gmail.com
wrote:
 - NVIDIA binary driver

Subject: Re: May 17-19 update borked my system
You lost developer interest right there.
Richard.

You caught me.
I actually meant to say that I use the one from RPM Fusion.

I followed the guide I think at fedorasolved.org/nvidia/somethingsomething

Heh.
Just a minor detail, right ?
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: May 17-19 update borked my system

2010-05-19 Thread Dennis Mattingly
On 19 May 2010 06:52, Dennis Mattingly dennismattinglyzz...@gmail.com
wrote:
 - NVIDIA binary driver

Subject: Re: May 17-19 update borked my system
You lost developer interest right there.
Richard.

You caught me.
I actually meant to say that I use the one from RPM Fusion.

I followed the guide I think at
http://fedorasolved.org/video-solutions/nvidia/yum/kmod/somethingsomething

Heh.
Just a minor detail, right ?

Nah, but I have been C++ programming at my (Windows) job for over 3 years.
C++ expert over 6 years.

One day I'll join the fedora-devel list...
One day...
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: How to find a needle in a haystack?

2010-05-19 Thread aragonx
 On Tue, 2010-05-18 at 16:49 -0400, arag...@dcsnow.com wrote:
 Hello all,

 I need some ideas.

 I have a backup server that contains 10 ext3 file systems each with 12
 million files scattered randomly over 4000 directories.  The files
 average
 size is 1MB.

 So each filesystem is about 12*10^6 * 1MB = 12*10^12 or 12 terabytes?

Each filesystem is 2.5TB so the average file size must be much smaller. 
At last count, one of the filesystems contained 20 million files.

 You don't say what the file contents are like, e.g. text, structured
 data, unstructured binary, etc, nor do you say how you match the file
 you want (e.g. is it equivalent to a text substring, a regular
 expression, or what?). Knowing what the contents look like would help to
 evaluate if it's worth e.g. generating a hash for subsections of the
 file when it's being stored. Alternatively, it could conceivably make
 sense to search for strings in the raw disk and work backwards to
 calculate what files they belong to, who knows?

The data in the files is of the unstructured binary type.  When I do a
search, I have _most_ of the file name.  Enough to uniquely identify it.

I hope that helps.

---
Will Y.


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: resolv.conf, NetworkManager, no ping response on one nameserver

2010-05-19 Thread jackson byers
Tim wrote:

 The domain= or search= parameters are to do with what domain names to
 automatically prepend to hostnames.

 The same goes for other things you address by just a hostname (NFS
 mounts, mail servers, web servers, etc.),
 and for constructing local
 domain names from DHCP assigned hostnames (though it might be the source
 of providing the domain name, rather than the client adding a domain
 name).


 If you do that sort of thing (make use of short hostnames), having an
 inappropriate domain name parameter will cause you problems.  If you
 don't do that sort of thing, you'll probably never notice it.

 An inappropriate domain name is one that isn't yours to control, and
 that includes your ISP's domain name.

 The domain parameter virtually says this is your domain.  The search
 parameter can list a series of domain names to try appending.  Though
 you really shouldn't have both options set, according to the docs I read
 some time ago.

I make very little use of short hostnames.

re whether I should be trying to change my domain from pacbell.net  to
sbcglobal.net:

i get response from shieldsup:

Your Internet connection's IP address is uniquely associated with the
following machine name:

ppp-71-xxx-xx-xxx.dsl.snfc21.pacbell.net

The string of text above is known as your Internet connection's
reverse DNS. The end of the string is probably a domain name related
to your ISP. This will be common to all customers of this ISP. But the
beginning of the string uniquely identifies your Internet connection.
The question is: Is the beginning of the string an account ID that
is uniquely and permanently tied to you, or is it merely related to
your current public IP address and thus subject to change?...
--

for that quad number: first two numbers i think remain the same,
but the last two change periodically. How often I don't have enough data to say.

 For me  pacbell.net  is probably a domain name related to your ISP

It then seems ok, maybe unnecessary?, that I  use DOMAIN=pacbell.net
 in my ifcfg-eth0.
And I will drop the idea of trying to change domain from  pacbell.net
to sbcglobal.net

FWIW,
 NM-created resolv.conf:
[by...@f12 f12]$ cat /etc/resolv.conf
# Generated by NetworkManager
search pacbell.net
nameserver 206.13.31.12
nameserver 68.94.156.1
[by...@f12 f12]$

doesn't use both search and domain, consistent with your advice

thanks
Jack
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Disc failure on a software RAID system has killed everything

2010-05-19 Thread Roberto Ragusa
Gary Stainburn wrote:
 Hi folks,
 
 I've got a PC with 5x500GB HDD's running software raid.  On drive 0 and 1 I 
 had RAID0 for the boot partition and then on all 5 drives I had RAID 5 for 
 everything else.
 
 One of the first two drives has died causing the PC to hang, and then when I 
 rebooted it couldn't get past GRUB.  I have found out which drive it is and 
 disconnected it. It then got past GRUB, loaded the kernel which then paniced 
 and hung.

It boots after removing the first disk because the second one shifts
in first position from the poiint of view of the BIOS and your boot
is RAID1 (as you corrected yourself in another post).
The panic is probably a can't find root filesystem problem.

 I have tried booting using a FC11 install DVD (I believe the dead PC is 
 either 
 FC9 or FC10) and going into rescue mode but it says that there are no Linux 
 partitions and doesn't go any further.

The install DVD is not really smart when coping with (degraded) RAID arrays.
Proceed manually.

 Going into fdisk for each drive (with the dead one still disconnected) shows 
 the partition tables.

That is the important part.
So the data is there.
Are your partition of type fd (RAID autodetection)? In that case the RAID5
should auto assemble itself on boot.
If this is not happening, try to see if the kernel attempted the operation
or not by looking the dmesg output.

 in theory, this system should still be bootable, can anyone suggest things to 
 try to get it working again.

You have to assemble the RAID manually, as it has already been suggested
to you.
To better understand the situation, please post the output of
  fdisk -l /dev/sd{a,b,c,d,e}
and
  mdadm -E /dev/sd{a,b,c,d,e}{1,2,3,4,5,6,7,8,9,10}
or similar commands.


-- 
   Roberto Ragusamail at robertoragusa.it
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: resolv.conf, NetworkManager, no ping response on one nameserver

2010-05-19 Thread Tim
On Wed, 2010-05-19 at 11:53 -0700, jackson byers wrote:
 i get response from shieldsup:
 
 Your Internet connection's IP address is uniquely associated with the
 following machine name:
  
 ppp-71-xxx-xx-xxx.dsl.snfc21.pacbell.net
 
That fully qualified domain name (FQDN, the entire host and domain
names) was resolved by them doing a reverse lookup on your public
numerical IP address.  The whole thing, including the domain name
(pacbell.net) suffix was set by your ISP, that'll happen regardless of
what's set in your files that we've been talking about.

The ppp-71 will be related to the ISP's equipment that you've connected
up to.  Which could be PPP server 71, or the 71st port on it...

The xxx bits would be related to your connection.  Commonly they're
based on your MAC address, or your public IP address.  But since they're
created by the ISP, it could be anything, even randomly made up.

  For me  pacbell.net  is probably a domain name related to your ISP
  
 It then seems ok, maybe unnecessary?, that I  use DOMAIN=pacbell.net
  in my ifcfg-eth0.
 And I will drop the idea of trying to change domain from  pacbell.net
 to sbcglobal.net

If your parameters are set up by DHCP, I'd expect all of that to be set
up when you connect to the ISP, but their server.  You probably don't
need to set any domain= parameter, yourself.  I've never set mine up to
match the ISP's.


-- 
[...@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.



-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: How to find a needle in a haystack?

2010-05-19 Thread Patrick O'Callaghan
On Wed, 2010-05-19 at 14:07 -0400, arag...@dcsnow.com wrote:
 The data in the files is of the unstructured binary type.  When I do a
 search, I have _most_ of the file name.  Enough to uniquely identify
 it.

So you don't need to look into the file to get a match? Sounds like the
best procedure would just be to keep an index of all the filenames and
update it when files are added/removed (assuming you have control over
both of these processes). A simple database should be able to handle
this easily, which is pretty much what you suggested yourself. In fact
it looks so simple that a Berkeley DB file would do it, without needing
all the fancy DB machinery or MySQL or Postgres. See for example man
DB_File.

poc

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: [389-users] SASL auth problem on bind with Mac OS X 10.4

2010-05-19 Thread Roland Schwingel
Hi Rich...

Thanks for your reply!

  I rebooted also my mac. My mac no longer issues a CRAM-MD5 SASL bind
  that is the good news, but it does not switch over to a simple bind 
using
  a binddn. It just does no bind anymore. What a mess. 
 So the mac finds that CRAM-MD5 is not available, and does nothing at 
all?
Mac OS X 10.4 behaves that way. At least as far as I can tell from my 
wireshark sniffing and the 389ds access log file. It just does some 
searches
for user attributes (including userPassword), but no bind for 
authorization
as user just an anonymous bind ahead of all this which does not retrieve
the password due to the anonymous aci entry of 389ds. I removed the 
restriction
to not deliver the userPassword in searches with anonymous bind but it did 
not
help either. 

I consider this to be a bug in 10.4. With Mac OS X 10.5 and 10.6 this
has changed. There it tries the SASL auth first (if available) and if
it fails (or it is not available) it is doing a simple bind which then
succeeds.

  Maybe I haven't found it but an option to enable/disable certain SASL
  methods within 389ds would IMHO be good to have for other situations
  where you can come into these needs.
 It's on the Roadmap - http://directory.fedoraproject.org/wiki/Roadmap
Nice to read... Thanks :-)

But generally speaking - with thinking while typing: 
If the password policy is set to something else than cleartext
SASL MD5 methods do not make sense at all. An auth using these methods 
will not succeed. Right? 
So they could automatically be disabled by dirsrv if the password policy 
is set
to something different than cleartext? Or am I wrong?

Hmm... Or would it work (at least if the password is stored in md5 not 
s(sha))
if the same salt is used in the sasl md5 challenge supplied to the client? 
If the 
client uses this supplied salt for hashing the password, the sent result 
should 
be comparable with the stored md5 hashed password using that same salt. So 
a SASL 
MD5 auth would be possible than. Maybe I am wrong and it is already much 
too late
for me to think about these things today ... ;-)

Roland
--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Re: How to find a needle in a haystack?

2010-05-19 Thread birger
On Wed, 2010-05-19 at 15:40 -0430, Patrick O'Callaghan wrote:
 On Wed, 2010-05-19 at 14:07 -0400, arag...@dcsnow.com wrote:
  The data in the files is of the unstructured binary type.  When I do a
  search, I have _most_ of the file name.  Enough to uniquely identify
  it.
 
 So you don't need to look into the file to get a match? Sounds like the
 best procedure would just be to keep an index of all the filenames and
 update it when files are added/removed (assuming you have control over
 both of these processes). A simple database should be able to handle
 this easily, which is pretty much what you suggested yourself. In fact
 it looks so simple that a Berkeley DB file would do it, without needing
 all the fancy DB machinery or MySQL or Postgres. See for example man
 DB_File.

Is there any reason to not use the already existing updatedb/locate
combo? The fedora updatedb seems to be based on mlocate, which as far as
I know uses the mtime of directories to tell if a directory has changed
since the last scan (mtime of the directory will change if files have
been added or deleted). This should speed up runs unless a lot of
directories change between runs.

You can disable the default updatedb configuration and run it manually
(or in cron jobs) specifying one file system for each job. Let them run
in parallel with output to separate bases. Then globally set the
environment variable to tell locate where to look so it finds all the
bases. Look at the man pages for updatedb, updatedb.conf locate and
mlocate.db. The last one is very optional.

-- 
birger

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Burning DVD Videos

2010-05-19 Thread Jim
I have the Pacific 10 Mini Series Videos 1 hr each, if I burn all 10 on 
a DL_DVD I can play each video on my Computer, but !  If I put the DVD 
in a CD/DVD Player to play videos on a TV will the player allow me to 
play each individual I hr. Video or how would I Burn them on a DVD to 
play on the CD-DVD Player ?

They are *.avi videos
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


k3b users, I need help.

2010-05-19 Thread reg
I have used k3b before to burn iso's, but never to build a CD/DVD of my own
files.  (I used to use xcdroast for this...)

In any case, Im trying to build a CD with about 130k of data files.
They were initially under 3 directory heads, but to simplify things Ive moved
the directories under one directory head.

When I bring up k3b, and drag that directory from the top to the bottom window,
it tells me that there is 5.7Mb there, which is wrong. If I burn the CD, I see
a whole lot of empty directories.

So how do I tell k3b that I want all the data below each directory head?
That would seem to be the obvious default, but its not happening, and I
dont see any option to turn it on/off.

Probably something stupid, but whatever, I need help.

-- 
Reg.Clemens
r...@dwf.com

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: k3b users, I need help.

2010-05-19 Thread john wendel
On 05/19/2010 07:21 PM, r...@dwf.com wrote:
 I have used k3b before to burn iso's, but never to build a CD/DVD of my own
 files.  (I used to use xcdroast for this...)

 In any case, Im trying to build a CD with about 130k of data files.
 They were initially under 3 directory heads, but to simplify things Ive moved
 the directories under one directory head.

 When I bring up k3b, and drag that directory from the top to the bottom 
 window,
 it tells me that there is 5.7Mb there, which is wrong. If I burn the CD, I see
 a whole lot of empty directories.

 So how do I tell k3b that I want all the data below each directory head?
 That would seem to be the obvious default, but its not happening, and I
 dont see any option to turn it on/off.

 Probably something stupid, but whatever, I need help.


I just tried it with 4 nested levels of directories, each with about 40 
data files. I just had it make the .iso file which I then loop mounted 
and verified that it was OK. No options to set, it just worked.

Which version of Fedora / K3B are you running?  Do you have 130,000 data 
files or 130KB of data?

Regards,

John

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: how to 'rip apart' a rpm.

2010-05-19 Thread Bill Davidsen
Gene Heskett wrote:
 On Monday 17 May 2010, Mikkel wrote:
 On 05/17/2010 04:12 PM, Gene Heskett wrote:
 Clarify here: I can do all that as the user.  What I can't do, until
 somebody decides to fix mkinitrd, is to run it as the user.  That is my
 specific bitch.  And I think its perfectly valid.  mkinitrd simply will
 not run for anybody but root.
 Considering that mkinitrd is part of the install procedure, and not
 part of the build procedure, why is that a problem? The initrd is
 system specific, so it does not really make sense to run it before
 the install stage. And you need to be root to do the install anyway.

 Mikkel

 Why?  In terms of the install, there is no reason why the perms can't be 
 changed so the user can do it all, except the mkinitrd, which in my scripts 
 leaves the initrd-version.img sitting it the src tree to be copied as a 
 separate line in my 'makeit' script.
 
 The kernel and the initrd once it built, can be installed by the user if the 
 perms had been set to the users ownership because he built them.
 
Gene, let me say this one more way. mkinitrd is not part of the build, it is 
part of the install. The output of the build can be moved to any similarly 
configured machine and installed, but the mkinitrd needs to know the hardware 
configuration of the machine where it will run.

You building and installing on the same machine is a special case, but in 
general the built kernel is portable and the mkinitrd is part of the install 
and 
must match the final machine on which the kernel boots.

And install must be done as root...

-- 
Bill Davidsen david...@tmr.com
   We have more to fear from the bungling of the incompetent than from
the machinations of the wicked.  - from Slashdot
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Burning DVD Videos

2010-05-19 Thread Patrick O'Callaghan
On Wed, 2010-05-19 at 22:01 -0400, Jim wrote:
 I have the Pacific 10 Mini Series Videos 1 hr each, if I burn all 10 on 
 a DL_DVD I can play each video on my Computer, but !  If I put the DVD 
 in a CD/DVD Player to play videos on a TV will the player allow me to 
 play each individual I hr. Video or how would I Burn them on a DVD to 
 play on the CD-DVD Player ?
 
 They are *.avi videos

Think about it: does your player work with .avi files? Most modern ones
do. If so, just create a Data DVD (e.g. using K3B) with the files on
it. If not, you're out of luck.

poc

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Migrating MySQL 5.0.x to 5.1.x

2010-05-19 Thread Kevin J. Cummings
I just upgraded my F10 server to F11.  [long story, it was via a
preupgrade to F13, and somehow *some* F11 packages got installed instead
of F13, but my rpmfusion stuff got upgraded to rawhide, and my atrpms
got upgraded to F13 and F12!  so I fixed those and finished the package
upgrades from what was left as fc10 packages by hand.]

I've fixed up most of what got broken, except for MySQL.
It won't start.  I've re-installed the RPMs (mysql, mysql-libs,
mysql-server) numerous times to no avail.

 # service mysqld start
 MySQL Daemon failed to start.
 Starting MySQL:[FAILED]

Here is what appears in /var/log/mysqld.log

 100520 00:11:05 mysqld_safe Starting mysqld daemon with databases from 
 /var/lib/mysql
 100520  0:11:05 [Note] Plugin 'ndbcluster' is disabled.
 /usr/libexec/mysqld: Table 'mysql.plugin' doesn't exist
 100520  0:11:05 [ERROR] Can't open the mysql.plugin table. Please run 
 mysql_upgrade to create it.
 100520  0:11:05  InnoDB: Started; log sequence number 0 13634811
 100520  0:11:05 [ERROR] Fatal error: Can't open and lock privilege tables: 
 Incorrect key file for table 'host'; try to repair it
 100520 00:11:05 mysqld_safe mysqld from pid file /var/run/mysqld/mysqld.pid 
 ended

I've tried to run mysql_upgrade as the log suggests, but it won't run if
mysqld isn't running.   B^/

I've Googled the Table 'mysql.plugin' doesn't exist error and the
results say that the bug got fixed in 2007 or 2008, so I am confused as
to how to migrate my data bases from 5.0.x to 5.1.x

Did anyone else run into this?  And if so, how did you get around it?
I didn't see anything in the F11 release notes

AFAICT, my old databases are still intact, I supposed I could
downgrade back to the fc10 MySQL stuff in order to dump the database,
then upgrade and restore from the dump, but there has got to be an
easier way, isn't there?

I know I can install from scratch (I did so on an F13 test system), but
I need to migrate my data base intact.

-- 
Kevin J. Cummings
kjch...@rcn.com
cummi...@kjchome.homeip.net
cummi...@kjc386.framingham.ma.us
Registered Linux User #1232 (http://counter.li.org)
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Burning DVD Videos

2010-05-19 Thread Ed Greshko
On 05/20/2010 12:23 PM, Patrick O'Callaghan wrote:
 On Wed, 2010-05-19 at 22:01 -0400, Jim wrote:
   
 I have the Pacific 10 Mini Series Videos 1 hr each, if I burn all 10 on 
 a DL_DVD I can play each video on my Computer, but !  If I put the DVD 
 in a CD/DVD Player to play videos on a TV will the player allow me to 
 play each individual I hr. Video or how would I Burn them on a DVD to 
 play on the CD-DVD Player ?

 They are *.avi videos
 
 Think about it: does your player work with .avi files? Most modern ones
 do. If so, just create a Data DVD (e.g. using K3B) with the files on
 it. If not, you're out of luck.

   
Well, you are only out of luck if you don't want to do the work to get
the *.avi files into the format, with menus, to play on a standard DVD
player.

I've done that a long time agoforget the steps that I went
through...but I think it involved converting the *.avi files to *.mpg
and then using dvdauthor.  I'm sure a google would lead to solutions




-- 
Nothing is impossible for the man who doesn't have to do it himself. --
A.H. Weiler 葛斯克 愛德華 / 台北市八德路四段



signature.asc
Description: OpenPGP digital signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Burning DVD Videos

2010-05-19 Thread Patrick O'Callaghan
On Thu, 2010-05-20 at 12:58 +0800, Ed Greshko wrote:
 On 05/20/2010 12:23 PM, Patrick O'Callaghan wrote:
  On Wed, 2010-05-19 at 22:01 -0400, Jim wrote:

  I have the Pacific 10 Mini Series Videos 1 hr each, if I burn all 10 on 
  a DL_DVD I can play each video on my Computer, but !  If I put the DVD 
  in a CD/DVD Player to play videos on a TV will the player allow me to 
  play each individual I hr. Video or how would I Burn them on a DVD to 
  play on the CD-DVD Player ?
 
  They are *.avi videos
  
  Think about it: does your player work with .avi files? Most modern ones
  do. If so, just create a Data DVD (e.g. using K3B) with the files on
  it. If not, you're out of luck.
 

 Well, you are only out of luck if you don't want to do the work to get
 the *.avi files into the format, with menus, to play on a standard DVD
 player.
 
 I've done that a long time agoforget the steps that I went
 through...but I think it involved converting the *.avi files to *.mpg
 and then using dvdauthor.  I'm sure a google would lead to solutions

I've done it with devede. Not too difficult and it works pretty well,
but of course the resulting files are much larger than the .avi sources.
That's why he's out of luck if he wants to get a whole series onto one
DVD as he said.

poc

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Burning DVD Videos

2010-05-19 Thread Ed Greshko
On 05/20/2010 01:18 PM, Patrick O'Callaghan wrote:
 On Thu, 2010-05-20 at 12:58 +0800, Ed Greshko wrote:
   
 On 05/20/2010 12:23 PM, Patrick O'Callaghan wrote:
 
 On Wed, 2010-05-19 at 22:01 -0400, Jim wrote:
   
   
 I have the Pacific 10 Mini Series Videos 1 hr each, if I burn all 10 on 
 a DL_DVD I can play each video on my Computer, but !  If I put the DVD 
 in a CD/DVD Player to play videos on a TV will the player allow me to 
 play each individual I hr. Video or how would I Burn them on a DVD to 
 play on the CD-DVD Player ?

 They are *.avi videos
 
 
 Think about it: does your player work with .avi files? Most modern ones
 do. If so, just create a Data DVD (e.g. using K3B) with the files on
 it. If not, you're out of luck.

   
   
 Well, you are only out of luck if you don't want to do the work to get
 the *.avi files into the format, with menus, to play on a standard DVD
 player.

 I've done that a long time agoforget the steps that I went
 through...but I think it involved converting the *.avi files to *.mpg
 and then using dvdauthor.  I'm sure a google would lead to solutions
 
 I've done it with devede. Not too difficult and it works pretty well,
 but of course the resulting files are much larger than the .avi sources.
 That's why he's out of luck if he wants to get a whole series onto one
 DVD as he said.

   
I don't think he is necessarily out of luck.  While the resulting files
may be larger there are different techniques for reducing the overall
size.  I have taken movies, pressed on DL DVD's (9GB) and transferred
them SL DVD(4.5GB).  Yes, the quality slightly degraded and I wouldn't
watch it on a screen larger than 26but without taking the time and
effort I would not rule out success. 

While my DVD writer is DL capable...I've not used it since the cost of
media is more than I'm willing to pay.  The OP seems to be OK with using DL.


-- 
Ain't no right way to do a wrong thing. -- The Mad Dogtender 葛斯克 愛德
華 / 台北市八德路四段



signature.asc
Description: OpenPGP digital signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines