Re: /var/log/cups

[jarmo]

Fri, 07 Mar 2014 02:38:52 +0100
"Patrick Dupre"  kirjoitti:

> hello,
> 
> I have a /var/log/cups/error_log file of size: 129005456!!
> why?

You probably don't have logrotate running... Install it.

Jarmo
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: F19: Is this an httpd attack attempt?

[Wolfgang S. Rupprecht]

Tim  writes:
> I've always configured all domains separately, and left the default
> service showing that pre-configuration Apache page that tells you that
> the service is alive, or just a basic page.  That way, non-matching
> connections don't connect to /some/ virtual host, as if by accident.

While I don't use apache (I use lighttpd) I configure it the same way.
Non-matching vhosts get a bland "you lose, now move along" page.

-wolfgang
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: /var/log/messages

[Tom Horsley]

On Fri, 07 Mar 2014 02:34:20 +0100
Patrick Dupre wrote:

> I have a /var/log/messages file of size: 74197292
> Is it resonable?

Probably not. Is logrotate turned off or not installed?

Here's my logs:

zooty> ls -l /var/log/messages*
-rw--- 1 root root 289231 Mar  6 19:59 /var/log/messages
-rw--- 1 root root 909108 Feb  9 21:54 /var/log/messages-20140210
-rw--- 1 root root 676609 Feb 16 04:03 /var/log/messages-20140216
-rw--- 1 root root 450818 Feb 24 04:03 /var/log/messages-20140224
-rw--- 1 root root 232045 Mar  2 04:04 /var/log/messages-20140302
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

/var/log/cups

[Patrick Dupre]

hello,

I have a /var/log/cups/error_log file of size: 129005456!!
why?

D [07/Mar/2014:02:12:59 +0100] cupsdIsAuthorized: requesting-user-name="pdupre"
D [07/Mar/2014:02:12:59 +0100] cupsdMarkDirty(-S)
D [07/Mar/2014:02:12:59 +0100] cupsdSetBusyState: newbusy="Active clients and 
dirty files", busy="Active clients"
D [07/Mar/2014:02:12:59 +0100] Returning IPP successful-ok for 
Renew-Subscription (/) from localhost
D [07/Mar/2014:02:12:59 +0100] cupsdSetBusyState: newbusy="Dirty files", 
busy="Active clients and dirty files"
D [07/Mar/2014:02:12:59 +0100] cupsdReadClient: 16 WAITING Closing on EOF
D [07/Mar/2014:02:12:59 +0100] cupsdCloseClient: 16
D [07/Mar/2014:02:12:59 +0100] cupsdSetBusyState: newbusy="Dirty files", 
busy="Dirty files"
I [07/Mar/2014:02:13:30 +0100] Saving subscriptions.conf...
D [07/Mar/2014:02:13:30 +0100] cupsdSetBusyState: newbusy="Not busy", 
busy="Dirty files"
D [07/Mar/2014:02:15:11 +0100] Report: clients=0
D [07/Mar/2014:02:15:11 +0100] Report: jobs=499
D [07/Mar/2014:02:15:11 +0100] Report: jobs-active=0
D [07/Mar/2014:02:15:11 +0100] Report: printers=2
D [07/Mar/2014:02:15:11 +0100] Report: printers-implicit=0
D [07/Mar/2014:02:15:11 +0100] Report: stringpool-string-count=4476
D [07/Mar/2014:02:15:11 +0100] Report: stringpool-alloc-bytes=12120
D [07/Mar/2014:02:15:11 +0100] Report: stringpool-total-bytes=81760
D [07/Mar/2014:02:20:16 +0100] Report: clients=0
D [07/Mar/2014:02:20:16 +0100] Report: jobs=499
D [07/Mar/2014:02:20:16 +0100] Report: jobs-active=0
D [07/Mar/2014:02:20:16 +0100] Report: printers=2
D [07/Mar/2014:02:20:16 +0100] Report: printers-implicit=0
D [07/Mar/2014:02:20:16 +0100] Report: stringpool-string-count=4476
D [07/Mar/2014:02:20:16 +0100] Report: stringpool-alloc-bytes=12120
D [07/Mar/2014:02:20:16 +0100] Report: stringpool-total-bytes=81760
D [07/Mar/2014:02:29:03 +0100] Report: clients=0
D [07/Mar/2014:02:29:03 +0100] Report: jobs=499
D [07/Mar/2014:02:29:03 +0100] Report: jobs-active=0
D [07/Mar/2014:02:29:03 +0100] Report: printers=2
D [07/Mar/2014:02:29:03 +0100] Report: printers-implicit=0
D [07/Mar/2014:02:29:03 +0100] Report: stringpool-string-count=4476
D [07/Mar/2014:02:29:03 +0100] Report: stringpool-alloc-bytes=12120
D [07/Mar/2014:02:29:03 +0100] Report: stringpool-total-bytes=81760
D [07/Mar/2014:02:30:47 +0100] Report: clients=0
D [07/Mar/2014:02:30:47 +0100] Report: jobs=499
D [07/Mar/2014:02:30:47 +0100] Report: jobs-active=0
D [07/Mar/2014:02:30:47 +0100] Report: printers=2
D [07/Mar/2014:02:30:47 +0100] Report: printers-implicit=0
D [07/Mar/2014:02:30:47 +0100] Report: stringpool-string-count=4476
D [07/Mar/2014:02:30:47 +0100] Report: stringpool-alloc-bytes=12120
D [07/Mar/2014:02:30:47 +0100] Report: stringpool-total-bytes=81760
D [07/Mar/2014:02:36:57 +0100] Report: clients=0
D [07/Mar/2014:02:36:57 +0100] Report: jobs=499
D [07/Mar/2014:02:36:57 +0100] Report: jobs-active=0
D [07/Mar/2014:02:36:57 +0100] Report: printers=2
D [07/Mar/2014:02:36:57 +0100] Report: printers-implicit=0
D [07/Mar/2014:02:36:57 +0100] Report: stringpool-string-count=4476
D [07/Mar/2014:02:36:57 +0100] Report: stringpool-alloc-bytes=12120
D [07/Mar/2014:02:36:57 +0100] Report: stringpool-total-bytes=81760

===
 Patrick DUPRÉ                                 | | email: pdu...@gmx.com
 Laboratoire de Physico-Chimie de l'Atmosphère | |
 Université du Littoral-Côte d'Opale           | |
 Tel.  (33)-(0)3 28 23 76 12                   | | Fax: 03 28 65 82 44
 189A, avenue Maurice Schumann                 | | 59140 Dunkerque, France
===
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

/var/log/messages

[Patrick Dupre]

Hello,

I have a /var/log/messages file of size: 74197292
Is it resonable?

Thank.

===
 Patrick DUPRÉ                                 | | email: pdu...@gmx.com
 Laboratoire de Physico-Chimie de l'Atmosphère | |
 Université du Littoral-Côte d'Opale           | |
 Tel.  (33)-(0)3 28 23 76 12                   | | Fax: 03 28 65 82 44
 189A, avenue Maurice Schumann                 | | 59140 Dunkerque, France
===
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: freeradius and NIS

[David Beveridge]

On Fri, Mark wrote:
>> On Thu, Mark wrote:
>>> boss wants this working yesterday.
>>
8<--
> Should I just do my best to get him to understand that RADIUS and NIS
> just won't work?

You don't need to lie, or make stuff up, just explain that it IS possible,
BUT just not within the timeframe and budget requested.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Camera on a Toshiba L850 Satellite laptop, Fedora 17.

[Rick Stevens]

On 03/06/2014 03:56 PM, Rolf Turner issued this missive:

On 07/03/14 11:58, Rick Stevens wrote:

On 03/06/2014 01:54 PM, Rolf Turner issued this missive:


I have a Toshiba Satellite L850 laptop.  Recently I attempted to make
use of "Google Hangouts" for communicating with some colleagues.  When I
attempted to start a "video hangout" I was informed that the "device"
was not working and that I appeared *not* to have a camera.  (After some
appropriate clicking I got a message to the effect "Looks like your
camera isn't working properly.")

I had never tried to do anything involving camera facilities before (I'm
not usually that sort of bear) but I had just assumed that there was a
camera in the machine.  There *is* a lens in the lid, just above the
screen. Furthermore, according to Toshiba's website, this laptop has a 1
megapixel webcam built in.

So:  How can I get the damned thing to "work properly"?  Is there
something I need to do to switch it on?  Does it need "drivers"
installed?  If so, do there exist drivers that will work under Linux,
specifically under Fedora 17?

Please try not to be *too* cryptic in your responses!  There are many
lacunae in my knowledge and many acronyms and pieces of jargon
bewilder me!

Thanks for any help and advice.


Most laptop cameras are internally attached to one of the USB buses
in your machine, so as the root user you could try an "lsusb" and see
if your camera appears in that list. On my Dell:

[root@golem4 ~]# lsusb
Bus 002 Device 004: ID 8087:07d9 Intel Corp.
Bus 002 Device 003: ID 8086:0189 Intel Corp.
Bus 002 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 003: ID 1bcf:2980 Sunplus Innovation Technology Inc.
Bus 001 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

The "Sunplus" item is my webcam.

See if you have an application called "Cheese" on your desktop. On
XFCE, it's "Applications Menu->Multimedia->Cheese". That's a fairly
lightweight camera application and will tell you if the camera is
working or not. If it is working, then there may be an issue with
Hangouts working with your machine (although it _should_ just use the
/dev/video0 device by default).


When I do "sudo lsusb" I get:


Bus 001 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 002 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 003 Device 002: ID 046d:c52b Logitech, Inc. Unifying Receiver
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 003: ID 0bda:8189 Realtek Semiconductor Corp. RTL8187B
Wireless 802.11g 54Mbps Network Adapter


No sign of anything camera-like as far as I can see.

There is no "Multimedia" item under my "Applications" tab and no sign of
"Cheese" anywhere that I can find in the menus.  However there are some
signs of "Cheese" on the system (as revealed by "locate Cheese". So I
tried just starting from the command line by simply typing "cheese", and
up popped a window, all black, with "No device found" in white lettering
in the centre.  So it's not a Hangouts (or Skype, which I have also
tried) issue.

I seem to up against a brick wall here, unless someone can come up with
some other idea(s).


Looking around on the web, it's possible that the camera was disabled
in the BIOS of your machine. You might try booting up in the BIOS first
and digging around in there to see if it's disabled.

If it was disabled and you enabled it, retry the "lsusb" command and
cheese (you found the right app). You didn't say which desktop you're
using, but I'd imagine the cheese app is buried somewhere in your menus
(I use XFCE since Gnome3 became such a right pain).

If it wasn't disabled, it may be buried under one of the USB hubs. Try
"lsusb -v" and see if it's hidden in there somewhere. It may not show
up as a name you are familiar with if it's not listed with the USB
manufacturers (I'd never heard of Sunplus).

You can also try "lspci" to see if it's on the native PCI bus rather
than USB (remote possibility). You could also try "lshw | grep -i cam"
and see if it shows up there. My guess is that it's disabled in the
BIOS.
--
- Rick Stevens, Systems Engineer, AllDigitalri...@alldigital.com -
- AIM/Skype: therps2ICQ: 22643734Yahoo: origrps2 -
--
-   The Theory of Rapitivity: E=MC Hammer-
-  -- Glenn Marcus (via TopFive.com)

Re: Camera on a Toshiba L850 Satellite laptop, Fedora 17.

[Rolf Turner]

On 07/03/14 11:58, Rick Stevens wrote:

On 03/06/2014 01:54 PM, Rolf Turner issued this missive:


I have a Toshiba Satellite L850 laptop.  Recently I attempted to make
use of "Google Hangouts" for communicating with some colleagues.  When I
attempted to start a "video hangout" I was informed that the "device"
was not working and that I appeared *not* to have a camera.  (After some
appropriate clicking I got a message to the effect "Looks like your
camera isn't working properly.")

I had never tried to do anything involving camera facilities before (I'm
not usually that sort of bear) but I had just assumed that there was a
camera in the machine.  There *is* a lens in the lid, just above the
screen. Furthermore, according to Toshiba's website, this laptop has a 1
megapixel webcam built in.

So:  How can I get the damned thing to "work properly"?  Is there
something I need to do to switch it on?  Does it need "drivers"
installed?  If so, do there exist drivers that will work under Linux,
specifically under Fedora 17?

Please try not to be *too* cryptic in your responses!  There are many
lacunae in my knowledge and many acronyms and pieces of jargon
bewilder me!

Thanks for any help and advice.


Most laptop cameras are internally attached to one of the USB buses
in your machine, so as the root user you could try an "lsusb" and see
if your camera appears in that list. On my Dell:

[root@golem4 ~]# lsusb
Bus 002 Device 004: ID 8087:07d9 Intel Corp.
Bus 002 Device 003: ID 8086:0189 Intel Corp.
Bus 002 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 003: ID 1bcf:2980 Sunplus Innovation Technology Inc.
Bus 001 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

The "Sunplus" item is my webcam.

See if you have an application called "Cheese" on your desktop. On
XFCE, it's "Applications Menu->Multimedia->Cheese". That's a fairly
lightweight camera application and will tell you if the camera is
working or not. If it is working, then there may be an issue with
Hangouts working with your machine (although it _should_ just use the
/dev/video0 device by default).


When I do "sudo lsusb" I get:


Bus 001 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 002 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 003 Device 002: ID 046d:c52b Logitech, Inc. Unifying Receiver
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 003: ID 0bda:8189 Realtek Semiconductor Corp. RTL8187B Wireless 
802.11g 54Mbps Network Adapter


No sign of anything camera-like as far as I can see.

There is no "Multimedia" item under my "Applications" tab and no sign of 
"Cheese" anywhere that I can find in the menus.  However there are some 
signs of "Cheese" on the system (as revealed by "locate Cheese". So I 
tried just starting from the command line by simply typing "cheese", and 
up popped a window, all black, with "No device found" in white lettering 
in the centre.  So it's not a Hangouts (or Skype, which I have also 
tried) issue.


I seem to up against a brick wall here, unless someone can come up with 
some other idea(s).


cheers,

Rolf Turner

<>-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Camera on a Toshiba L850 Satellite laptop, Fedora 17.

[Rick Stevens]

On 03/06/2014 01:54 PM, Rolf Turner issued this missive:


I have a Toshiba Satellite L850 laptop.  Recently I attempted to make
use of "Google Hangouts" for communicating with some colleagues.  When I
attempted to start a "video hangout" I was informed that the "device"
was not working and that I appeared *not* to have a camera.  (After some
appropriate clicking I got a message to the effect "Looks like your
camera isn't working properly.")

I had never tried to do anything involving camera facilities before (I'm
not usually that sort of bear) but I had just assumed that there was a
camera in the machine.  There *is* a lens in the lid, just above the
screen. Furthermore, according to Toshiba's website, this laptop has a 1
megapixel webcam built in.

So:  How can I get the damned thing to "work properly"?  Is there
something I need to do to switch it on?  Does it need "drivers"
installed?  If so, do there exist drivers that will work under Linux,
specifically under Fedora 17?

Please try not to be *too* cryptic in your responses!  There are many
lacunae in my knowledge and many acronyms and pieces of jargon bewilder me!

Thanks for any help and advice.


Most laptop cameras are internally attached to one of the USB buses
in your machine, so as the root user you could try an "lsusb" and see
if your camera appears in that list. On my Dell:

[root@golem4 ~]# lsusb
Bus 002 Device 004: ID 8087:07d9 Intel Corp.
Bus 002 Device 003: ID 8086:0189 Intel Corp.
Bus 002 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 003: ID 1bcf:2980 Sunplus Innovation Technology Inc.
Bus 001 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

The "Sunplus" item is my webcam.

See if you have an application called "Cheese" on your desktop. On
XFCE, it's "Applications Menu->Multimedia->Cheese". That's a fairly
lightweight camera application and will tell you if the camera is
working or not. If it is working, then there may be an issue with
Hangouts working with your machine (although it _should_ just use the
/dev/video0 device by default).

--
- Rick Stevens, Systems Engineer, AllDigitalri...@alldigital.com -
- AIM/Skype: therps2ICQ: 22643734Yahoo: origrps2 -
--
- All generalizations are false. -
--
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Camera on a Toshiba L850 Satellite laptop, Fedora 17.

[Rolf Turner]

I have a Toshiba Satellite L850 laptop.  Recently I attempted to make 
use of "Google Hangouts" for communicating with some colleagues.  When I 
attempted to start a "video hangout" I was informed that the "device" 
was not working and that I appeared *not* to have a camera.  (After some 
appropriate clicking I got a message to the effect "Looks like your 
camera isn't working properly.")


I had never tried to do anything involving camera facilities before (I'm 
not usually that sort of bear) but I had just assumed that there was a 
camera in the machine.  There *is* a lens in the lid, just above the 
screen. Furthermore, according to Toshiba's website, this laptop has a 1 
megapixel webcam built in.


So:  How can I get the damned thing to "work properly"?  Is there 
something I need to do to switch it on?  Does it need "drivers" 
installed?  If so, do there exist drivers that will work under Linux,

specifically under Fedora 17?

Please try not to be *too* cryptic in your responses!  There are many 
lacunae in my knowledge and many acronyms and pieces of jargon bewilder me!


Thanks for any help and advice.

cheers,

Rolf Turner
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: man command question

[Cameron Simpson]

On 06Mar2014 16:19, lee  wrote:
> Joachim Backes  writes:
> > I'm running F20 on gnome3 desktop,
> > and I see some weird effect in the man command (entered in a gnome
> > terminal) if using the "-P" command option:
> >
> > man -P cat man >/dev/null
> >
> > should use the cat command as pager. I get the expected effect, but one
> > or more additional messages to stderr:
> >
> > :981: warning [p 7, 5.8i, div `3tbd1,0', 0.0i]: cannot
> > adjust line
> > :990: warning [p 7, 5.8i, div `3tbd4,0', 0.0i]: cannot
> > adjust line
> >
> >
> > Anybody knows what this means? No such message if the gnome terminal is
> > wide enough.
> 
> It probably means what it says.  You can format man pages with a
> variable number of characters per line, hence you might have "(setq
> Man-width 75)" in your ~/.emacs to get a reasonably formatted display
> rather than one with the lines being too long for comfortable reading.
> 
> Now say, you specify zero characters per line, and the software may
> suddenly have a hard time adjusting the lines.

In case lee's unclear: the output of "man" isn't going to your terminal any
more, so it doesn't know how wide the output should be.

Personally I would expect it to default to assuming an 80-column output and
format for that. But it appears not.

Cheers,
-- 
Cameron Simpson 

Consistency is the last refuge of the unimaginative.- Oscar Wilde
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: freeradius and NIS

[Mark Haney]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1



On 03/06/14 13:40, Joe Zeff wrote:
> On 03/06/2014 09:19 AM, Mark Haney wrote:
>> I'm moving all our systems to LDAP as soon as I can, but the
>> boss wants this working yesterday.
> 
> Tell him that you don't have enough in the budget for a TARDIS.

Very little need.  I HAVE no budget.  ButI do have a TARDIS.  My
daughter and I built one last summer.  Unfortunately, it's not bigger
on the inside.  And it doesn't do the wibbly-wobbly, timey-wimey stuff
either.

And every time we leave the house my daughters both say 'Allons-y'.

Should I just do my best to get him to understand that RADIUS and NIS
just won't work? We're moving to OpenLDAP as soon as I throw out our
Exchange server.  Would it make more sense to just get him to wait if
I can?

- -- 
Mark Haney
Network/Systems Administrator
Practichem
W: (919) 714-8428
Fedora release 20 (Heisenbug) 3.13.4-200.fc20.x86_64
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTGMQrAAoJEM/YzwEAv6e7JlEH/iq1fta1yGDrteaQl6ISPzpJ
5WlmukCuxjfrXsHGkghddrsX9ZjTCtt4M3BKLYP3o1f16i8XtAZ+9RhJbidibKTl
i9n/UlV+ZaWE8cOMi51sd5UVBzHfRrmbeS69ssaHD2QO+z60mCY+6YoP2gi0WRFw
EicMbm8Tv4bKveh+rmyqHq1piS6bdd2Q8yTvaA/lOnSOsz2VczMI7ZYq1HZpfDbX
NiYSAkpA+GIm+CBs1oSisVOJ5HaFs6BlaDfZ32Vs8lVBt+KlUYNnLDjKL11s5ObD
xf4CNqREwpo27o6GYHjeoFDYd1qBwqsyrFNUPnTSjLdEOBpW6eOkek00mZ0MQUQ=
=lUMw
-END PGP SIGNATURE-

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

vmplayer breaks after update of Fedora 19

[Chris Kottaridis]

I downloaded vmplayer 6.0 and have been using it for a couple of weeks 
now just fine.


Today I got a message that Fedora 19 had some updates so I did the updates.

When I try to execute vmplayer it wants to compile new modules, but 
fails on the vmnet module.


vmware-modconfig-3650.log:
2014-03-06T12:14:59.763-06:00| vthread-3| I120: Extracting the vmnet 
source from "/usr/lib/vmware/modules/source/vmnet.tar".
2014-03-06T12:14:59.768-06:00| vthread-3| I120: Successfully extracted 
the vmnet source.
2014-03-06T12:14:59.768-06:00| vthread-3| I120: Building module with 
command "/usr/bin/make -j8 -C /tmp/modconfig-3n6816/vmnet-only 
auto-build HEADER_DIR=/lib/modules/3.13.5-101.fc19.x86_64/build/include 
CC=/usr/lib64/ccache/gcc IS_GCC_3=no"
2014-03-06T12:15:01.438-06:00| vthread-3| W110: Failed to build vmnet.  
Failed to execute the build command.


I found this on the web:

http://guide.ecsmy.com/2013/08/fedora-19-with-kernel-310-fail-to.html

When I tried to apply that patch a lot of patches failed to apply. The 
date on that page is Aug 14.


I just installed vmplayer from vmware a couple of weeks ago from this site:

https://my.vmware.com/web/vmware/free#desktop_end_user_computing/vmware_player/6_0

Which shows a date of:
===
# Binary DetailsVMware Player and Player Plus for Linux 64-bit operating 
systems. Enter a license key into the VMware Player user interface to 
enable the VMware Player Plus features.


# File NameVMware-Player-6.0.1-1379776.x86_64.bundle

# Build Number1379776

# Release Date2013-10-24

# CHECKSUMSMD5SUM: fe1354b05c7d0ce1839320ab21222df5
# SHA1SUM: 8a734c7c5d02e7e94a920337ad6ab58c3301b0be
==

So, I am thinking that vmware has applied the previous fixes, since they 
seemed to work just a couple of weeks ago without those patches.


Like I said this was working fine after I installed this vmplayer a 
couple of weeks ago and only after doing a Fedora update am I now seeing 
a problem.

My current kernel is:

# uname -a
Linux unknownF46D04B04638 3.13.5-101.fc19.x86_64 #1 SMP Tue Feb 25 
21:25:32 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux


Has anyone run into this problem with vmplayer ?

Thanks
Chris Kottaridis
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: freeradius and NIS

[Joe Zeff]

On 03/06/2014 09:19 AM, Mark Haney wrote:

I'm moving all our systems to LDAP as soon as I can, but the boss
wants this working yesterday.


Tell him that you don't have enough in the budget for a TARDIS.
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

[389-users] How to add "dc=myExample,dc=com": Basic doubt

[Vimal Thomas]

Hi,

I am new to 389 and LDAP in general.
I have 389 installed on my CentOS (389-ds-base-1.2.11.15-31.el6_5.x86_64)
I have the basic dc=example,dc=com created when I did server setup.

[*root@localhost vim]# ldapsearch -x -b "dc=example,dc=com" -s base*
*# extended LDIF*
*#*
*# LDAPv3*
*# base  with scope baseObject*
*# filter: (objectclass=*)*
*# requesting: ALL*
*#*

*# example.com *
*dn: dc=example,dc=com*
*objectClass: top*
*objectClass: domain*
*dc: example*

*# search result*
*search: 2*
*result: 0 Success*

*# numResponses: 2*
*# numEntries: 1*

Now I am trying to create a new object on that line. I want to create
*dc=myExample,dc=com*

*[root@localhost vim]# ldapadd -f myExample.ldif -x -W*
*Enter LDAP Password: *
*adding new entry "dc=myExample,dc=com"*
*ldap_add: No such object (32)*

How can I create the entry *dc=myExample,dc=com?*

The content of myExample.ldif is as follows (similar to see what I saw in
search output of dc=example,dc=com ).

*dn: dc=myExample,dc=comobjectClass: topobjectClass: domaindc: myExample*
*Thanks,*
*Vimal*
--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Re: freeradius and NIS

[David Beveridge]

Allegedly, On Fri, Mar 7, 2014 at 3:19 AM, Mark Haney
 wrote:
>
> I know it sounds like I'm working back in the late 90s, but I'm
> looking for help with configuring freeradius to use NIS for
> authentication.  I've googled it and there's not much out there (for
> rather obvious reasons).  Does anyone have a good link or HowTo on how
> to get freeradius to use NIS?
>
Freeradius supports perl module and perl can do NIS Auth.

check out example.pl and then do a google search for "perl NIS"
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Thunderbird problem -

[Bob Goodwin - Zuni, Virginia, USA]

On 03/06/14 11:20, g wrote:


hello again,

On 03/06/14 21:36, Bob Goodwin wrote:
<<<>>>
<<>>


So the problem cleared while testing. :-(


which is why i would opt for reinstall.


Thanks all,


you are welcome. it was fun looking at things even tho
it did not help. ;-)

However I save the information provided in Notecase Pro. It makes a 
handy reference and I go back to it often when I have a question. I've 
been saving notes for several years now, began with Notecase from yum 
when it was available, eventually bought my own subscription.


Thank you for the help,

Bob

PS: I have two Saitek EclipsII illuminated keyboards that I disassmbled 
a week ago and reconnected so that they come on at brightest color, I 
need that. In the process I must have gotten debris, best guess a cat 
hair, under the contact for the left Shift key. If you notice some lower 
case letters that should be upper that is the reason, that key needs 
more pressure than it gets sometimes ... They provide a switch that 
steps through colors but actuating it after log-in has always upset Fedora.


--
http://www.qrz.com/db/W2BOD
box10  Fedora-20/64bit Linux/XFCE

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: [389-users] Some bind DNs sporadically can't search users

[Ludwig Krispenz]

On 03/06/2014 05:42 PM, Morgan Jones wrote:

On Mar 6, 2014, at 11:32 AM, Ludwig Krispenz  wrote:


On 03/04/2014 11:10 PM, Morgan Jones wrote:


On Mar 4, 2014, at 3:20 AM, Ludwig Krispenz  wrote:


Are groups involved in the acis and do these groups during these runs ?

Yes, most of our ACIs use groups to determine access.  I'm not sure I 
understand the second part of your question though.

you can't, it was incomplete. I wanted to know if these groups are modified 
during the runs when you see the failure.

  I do suspect this has something to do with access control though as it's 
behaving exactly like the user is denied by the ACIs.

No, groups were not modified.  They are relatively small as we're still 
migrating to this environment--maybe 10-15 DNs per group and they're only 
modified when we add/remove privileged accounts which isn't very often.


Could you post your acis ?

Probably.  I'm working on permission to do so.

The compromise I came to with my management and security team is to obfuscate 
the ACIs such that the attribute counts and structure are intact but the names 
are changed.  Is the below useful?

yes, but II can't see anything wrong with the acis.

Thanks for your input on the ACIs.


One more question. Do the searches always match only one entry or one they 
should see and some they shouldn't ?

In every case where we've seen this problem it's a search for one entry 
(uid=username) that the bind dn is able to see.
what i was thinking of is a scenario where there is a cn=user1 in two 
subtrees, the bound user should only see one. I remember a case where 
the deny for the one entry was cached and the other entry was not returned


Thanks for your input, we're working on repeating it reliably in 389.

That would be great



# Employee LDAP Access Control
#
dn: dc=domain,dc=org
changetype: modify
replace: aci
#
aci: (target = "ldap:///ou=employees,dc=domain,dc=org";)
  (targetattr = "userpassword")
  (version 3.0; acl "limited user self write";
  allow (write) userdn = "ldap:///self";;)
#
aci: (target = "ldap:///dc=domain,dc=org"; )
  (targetfilter = 
"(|(objectclass=orgAssociate)(objectclass=orgEmployee)(objectclass=domain)
  
(objectclass=organizationalunit)(objectclass=groupofnames)(objectclass=groupofuniquenames))")
  (targetattr = "attr1 || attr2 || ... || attr40")
  (version 3.0; acl "general access, replaces anonymous access";
  allow (read, search, compare)
  (userdn = "ldap:///self";) or
  (groupdn = "ldap:///cn=orgGroup1,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup2,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup3,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup4,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup5,ou=groups,dc=domain,dc=org";)
  ;)
#
aci: (target = "ldap:///dc=domain,dc=org"; )
  (targetfilter = "(|(objectclass=orgExternalEmployee)(objectclass=domain)
  
(objectclass=organizationalunit)(objectclass=groupofnames)(objectclass=groupofuniquenames))")
  (targetattr = "attr1 || attr2 || ... || attr40 ")
  (version 3.0; acl "general access, replaces anonymous access";
  allow (read, search, compare)
  (userdn = "ldap:///self";) or
  (groupdn = "ldap:///cn=orgGroup2,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=OrgGroup3,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup4,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup5,ou=groups,dc=domain,dc=org";)
  ;)
#
aci: (target = "ldap:///dc=domain,dc=org";)
  (targetfilter = "(|(objectclass=orgExternalEmployee)(objectclass=domain)
  
(objectclass=organizationalunit)(objectclass=groupofnames)(objectclass=orgServiceAccount)(objectclass=orgOrgAccount))")
  (targetattr = "attr1 || attr2 || ... || attr40")
  (version 3.0; acl "general access plus service and organizational accounts";
  allow (read, search, compare)
  (userdn = "ldap:///self";) or
  (groupdn = "ldap:///cn=OrgGroup3,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup4,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup5,ou=groups,dc=domain,dc=org";)
  ;)
#
aci: (target = "ldap:///dc=domain,dc=org";)(targetattr = "attr1 ||
  attr2 || ... || attr30")
  (version 3.0; acl "limited read access to non-public attributes for delegated 
admins";
  allow (read, search, compare)
  (groupdn = "ldap:///cn=orgGroup4,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup5,ou=groups,dc=domain,dc=org";)
  ;)
#
aci: (target = "ldap:///dc=domain,dc=org";)
  (targetattr = "attr1 || attr2 || ... || attr28")
  (version 3.0; acl "limited write access for delegated admins";
  allow (write) groupdn = "ldap:///cn=orgGroup5,ou=groups,dc=domain,dc=org";;)
#
aci: (target = "ldap:///dc=domain,dc=org";)
  (targetattr = "*")(version 3.0; acl "full access for delegated admins";
  allow (all) groupdn = "ldap:///cn=orgGroup6,ou=groups,dc=domain,dc=org";;)
#
aci: (target = "ldap:///dc=domain,dc=org";)
  (targetfilter="(memberof=cn=org

[389-users] Multi-Master Replication Issue

[Chaudhari, Rohit K.]

Hi All,

I am trying to create multi-master replication in 389.  But I am having
trouble using ldapmodify to create a replication manager DN account

I get the following error:

Additional info: TLS error -8157: Certificate extension not found

I went on the web and some people suggested I have a TLS_REQCERT=none line
in /etc/openldap/ldap.conf, but this did not fix it either.

My certificate in /etc/openldap/cacerts is called cacert.asc.

Does anyone know how I can fix my problem?

Thanks,

R

--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

freeradius and NIS

[Mark Haney]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I know it sounds like I'm working back in the late 90s, but I'm
looking for help with configuring freeradius to use NIS for
authentication.  I've googled it and there's not much out there (for
rather obvious reasons).  Does anyone have a good link or HowTo on how
to get freeradius to use NIS?

I'm moving all our systems to LDAP as soon as I can, but the boss
wants this working yesterday.

- -- 
Mark Haney
Network/Systems Administrator
Practichem
W: (919) 714-8428
Fedora release 20 (Heisenbug) 3.13.4-200.fc20.x86_64
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTGK3OAAoJEM/YzwEAv6e7Zj0IAIvfmIy2mIZclKPEZgITEvyG
KReS+eQ4INoCSQnyxCNRAuS9zEJHx7sia6rg0ACRpCG9NrcD6fHDJ0x1kZ45VCJV
JFsMlA12l/7BnuZiwgQRBuqT2s28mGlbiZJjv0GoERFb1v6pqXb38nZf4hcMLIIu
oP43ZFsWKfBsuDBXaCFZq395a1Y/vYt/4HF7MxqKQlm0Y3onCmhQYXBEpEpldF9s
vXDl2LFt95KiwmSk+eYHu7i1QphGwqmJLKArlsYnibP8pYLgoaFd/LRrKyepMN7o
cFJYd0OtjEkApLL+YQk55p6X84D5ia6CoLNUWi9BGj6pnhB1enCjjz/NkvhE0tg=
=JQ7u
-END PGP SIGNATURE-

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Anti-brute force to those using firewalld?

[Matthew Miller]

On Thu, Mar 06, 2014 at 11:20:16AM -0500, David Mehler wrote:
> To those running firewalld as opposed to the older iptables static
> firewall setup, FC20, what do you use for stopping anti brute force or
> port knockings on your systems? I use to use fail2ban but it appears
> it does not work with firewalld.

For reference, here's the bug for making it so it *does* work with
firewalld:

https://bugzilla.redhat.com/show_bug.cgi?id=1046816

-- 
Matthew Miller--   Fedora Project--
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Anti-brute force to those using firewalld?

[Bruno Wolff III]

On Thu, Mar 06, 2014 at 11:31:50 -0500,
  David Mehler  wrote:

Hello,

Thank you. I'm referring to ssh and or smtp bot probes of a system.
I'd like to block these out.


Why? (Network performance, security, something else?)

The suggestions I gave should be fine to mitigate the security issues 
with people guessing passwords to try to gain ssh access. (Assuming 
you can enforce them. That might not work so well if there are other 
people than you using the system.)

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: [389-users] Some bind DNs sporadically can't search users

[Ludwig Krispenz]

On 03/04/2014 11:10 PM, Morgan Jones wrote:



On Mar 4, 2014, at 3:20 AM, Ludwig Krispenz  wrote:


Are groups involved in the acis and do these groups during these runs ?

Yes, most of our ACIs use groups to determine access.  I'm not sure I 
understand the second part of your question though.

you can't, it was incomplete. I wanted to know if these groups are modified 
during the runs when you see the failure.

  I do suspect this has something to do with access control though as it's 
behaving exactly like the user is denied by the ACIs.

No, groups were not modified.  They are relatively small as we're still 
migrating to this environment--maybe 10-15 DNs per group and they're only 
modified when we add/remove privileged accounts which isn't very often.


Could you post your acis ?

Probably.  I'm working on permission to do so.

The compromise I came to with my management and security team is to obfuscate 
the ACIs such that the attribute counts and structure are intact but the names 
are changed.  Is the below useful?

yes, but II can't see anything wrong with the acis.

One more question. Do the searches always match only one entry or one 
they should see and some they shouldn't ?


# Employee LDAP Access Control
#
dn: dc=domain,dc=org
changetype: modify
replace: aci
#
aci: (target = "ldap:///ou=employees,dc=domain,dc=org";)
  (targetattr = "userpassword")
  (version 3.0; acl "limited user self write";
  allow (write) userdn = "ldap:///self";;)
#
aci: (target = "ldap:///dc=domain,dc=org"; )
  (targetfilter = 
"(|(objectclass=orgAssociate)(objectclass=orgEmployee)(objectclass=domain)
  
(objectclass=organizationalunit)(objectclass=groupofnames)(objectclass=groupofuniquenames))")
  (targetattr = "attr1 || attr2 || ... || attr40")
  (version 3.0; acl "general access, replaces anonymous access";
  allow (read, search, compare)
  (userdn = "ldap:///self";) or
  (groupdn = "ldap:///cn=orgGroup1,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup2,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup3,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup4,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup5,ou=groups,dc=domain,dc=org";)
  ;)
#
aci: (target = "ldap:///dc=domain,dc=org"; )
  (targetfilter = "(|(objectclass=orgExternalEmployee)(objectclass=domain)
  
(objectclass=organizationalunit)(objectclass=groupofnames)(objectclass=groupofuniquenames))")
  (targetattr = "attr1 || attr2 || ... || attr40 ")
  (version 3.0; acl "general access, replaces anonymous access";
  allow (read, search, compare)
  (userdn = "ldap:///self";) or
  (groupdn = "ldap:///cn=orgGroup2,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=OrgGroup3,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup4,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup5,ou=groups,dc=domain,dc=org";)
  ;)
#
aci: (target = "ldap:///dc=domain,dc=org";)
  (targetfilter = "(|(objectclass=orgExternalEmployee)(objectclass=domain)
  
(objectclass=organizationalunit)(objectclass=groupofnames)(objectclass=orgServiceAccount)(objectclass=orgOrgAccount))")
  (targetattr = "attr1 || attr2 || ... || attr40")
  (version 3.0; acl "general access plus service and organizational accounts";
  allow (read, search, compare)
  (userdn = "ldap:///self";) or
  (groupdn = "ldap:///cn=OrgGroup3,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup4,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup5,ou=groups,dc=domain,dc=org";)
  ;)
#
aci: (target = "ldap:///dc=domain,dc=org";)(targetattr = "attr1 ||
  attr2 || ... || attr30")
  (version 3.0; acl "limited read access to non-public attributes for delegated 
admins";
  allow (read, search, compare)
  (groupdn = "ldap:///cn=orgGroup4,ou=groups,dc=domain,dc=org";) or
  (groupdn = "ldap:///cn=orgGroup5,ou=groups,dc=domain,dc=org";)
  ;)
#
aci: (target = "ldap:///dc=domain,dc=org";)
  (targetattr = "attr1 || attr2 || ... || attr28")
  (version 3.0; acl "limited write access for delegated admins";
  allow (write) groupdn = "ldap:///cn=orgGroup5,ou=groups,dc=domain,dc=org";;)
#
aci: (target = "ldap:///dc=domain,dc=org";)
  (targetattr = "*")(version 3.0; acl "full access for delegated admins";
  allow (all) groupdn = "ldap:///cn=orgGroup6,ou=groups,dc=domain,dc=org";;)
#
aci: (target = "ldap:///dc=domain,dc=org";)
  (targetfilter="(memberof=cn=orgGroup6,ou=Groups,dc=domain,dc=org)")
  (targetattr="userpassword")
  (version 3.0; acl "deny non-admin user write access to admin users' 
passwords";
  deny (all) groupdn != "ldap:///cn=orgGroup6,ou=groups,dc=domain,dc=org";
  ;)
#
aci: (target = "ldap:///dc=domain,dc=org";)
  (targetattr = "attr1 || attr2 || ... || attr19")
  (version 3.0; acl "access to posixaccount attributes for proxyagent";
  allow (read,search,compare) userdn = 
"ldap:///uid=binddn1,ou=svc_accts,dc=domain,dc=org";;)

thanks,

-morgan

--
389 users mailing list
389-us...@lists.fedoraproject.

Re: Anti-brute force to those using firewalld?

[David Mehler]

Hello,

Thank you. I'm referring to ssh and or smtp bot probes of a system.
I'd like to block these out.

Thanks.
Dave.


On 3/6/14, Bruno Wolff III  wrote:
> On Thu, Mar 06, 2014 at 11:20:16 -0500,
>David Mehler  wrote:
>>Hello,
>>
>>To those running firewalld as opposed to the older iptables static
>>firewall setup, FC20, what do you use for stopping anti brute force or
>>port knockings on your systems? I use to use fail2ban but it appears
>>it does not work with firewalld.
>
> Strong passwords.
> Limited source IP addresses.
> Requiring a key and password.
>
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Anti-brute force to those using firewalld?

[Bruno Wolff III]

On Thu, Mar 06, 2014 at 11:20:16 -0500,
  David Mehler  wrote:

Hello,

To those running firewalld as opposed to the older iptables static
firewall setup, FC20, what do you use for stopping anti brute force or
port knockings on your systems? I use to use fail2ban but it appears
it does not work with firewalld.


Strong passwords.
Limited source IP addresses.
Requiring a key and password.
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Anti-brute force to those using firewalld?

[David Mehler]

Hello,

To those running firewalld as opposed to the older iptables static
firewall setup, FC20, what do you use for stopping anti brute force or
port knockings on your systems? I use to use fail2ban but it appears
it does not work with firewalld.

Recommendations appreciated.
Thanks.
Dave.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Thunderbird problem -

[g]

hello again,

On 03/06/14 21:36, Bob Goodwin wrote:
<<<>>>
<<>>


So the problem cleared while testing. :-(


which is why i would opt for reinstall.


Thanks all,


you are welcome. it was fun looking at things even tho
it did not help. ;-)

--

peace out.

in a world with out fences, who needs gates.

tc.hago.

g
.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Gnome is sometimes blurred

[antonio]

antonio montagnani ha scritto / said the followingil giorno/on 
06/03/2014 16:16:

Steve Searle ha scritto / said the followingil giorno/on 06/03/2014
12:46:

Around 04:16pm on Wednesday, March 05, 2014 (UK time), antonio wrote:


Sometimes when I start my laptop (with Intel card) Gnome doesn't start
as it should, icons are in the wrong position (I mean that the top panel
is sitting on the right and I get the wheel on the bottom left angle of
the screen).
Any idea?? should I file a bug against Gnome??


I can't help that much, but this does happen to me on both my Fedora
20/GNOME desktops quite frequently. So I presume it isn't Intel related.

I currently get round it by logging into a virtual console as root, and
running telinit 3 then telinit 5, which is quicker than rebooting.

Steve





Sometimes before getting into Gnome no user name appears on the login
screen, afterwards when I get into Gnome panel icons are in the wrong
position. It happened only recently, no idea what is the update that
caused this problem


FYI I filed a bug:

https://bugzilla.redhat.com/show_bug.cgi?id=1073536



--
Antonio M
Skype: amontag52

Linux Fedora F20 (Heisenbug) on Acer 5720

http://lugsaronno.altervista.org
http://www.campingmonterosa.com




--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Thunderbird problem -

[g]

On 03/06/14 18:01, Bob Goodwin wrote:

On 03/06/14 06:52, Frode Petersen wrote:

Den 06. mars 2014 09:41, skrev Bob Goodwin:

All I did was delete a bunch of extraneous stuff from "Mail" that
I kept rsyncing between Thunderbird/computers, specifically;

/pop.juno.com
/smart mailboxes

I see no connection there, but obviously something has happened.
I couldn't see anything in "Config" that looked as though it
might help.


Have you tried creating a new tbird profile, to see if you get the
same error?


I will try that, it should help define the problem even if it does
not correct it. i really want to use the cleaned up "Mail" files and
if that is where the problem is  it might continue ... Still a good
thing to try!


a new user will show if problem is with your user configs, or with
thunderbird's files.

if you try new user and still have problem, which i believe you may,
because of type of error you are getting, try following...


press  to open error console. there you see all past
error messages.

across top, you will see a selection of buttons for each type of
error. select [All], move cursor to each error, click them 1 by 1.
when error highlights, press  to copy,   to paste a
copy to an open text editor. repeat until you have them all copied,
save to a file. press [Clear] button to start a new collection.

[and no, i do not know why authors did not put in a feature to save
errors to a file. one day i will look to find a page at mozilla.org
that gives a good explanation of error console and how to trouble-
shoot errors.]

restart thunderbird. if you have any add-ons, select from main menu;

   Help > Restart with Add-ons Disabled

restart thunderbird, send yourself some messages, then download them.
if problem disappeared, it is an add-on.

if not, it is with thunderbird files. press  again,
copy new errors as above, save to a new file.

now you have 3 choices;

#1a - store errors to a file storage site, post back location
  so this list's subscribers can see if can help.

#1b - store errors to a file storage site, post location to
  thunderbird list subscribers can see if they can help.

#2  - forget all of above, uninstall, then reinstall thunderbird
  to see if problem corrects.

if you chose #2 and still have problem, it is with user, or a bad install.

another thing, i did go thru 'about:config' to see if there where
any configs associated with displaying message activity. if there
is, i have no idea of how it is named, as i checked all names of
'status bar', 'activity', 'download', and about 5 more. after
making changes, i restarted thunderbird and found no change in
what i see at status location.

this does not mean that i had right one, as there is no telling
what it is called. mozilla authors are like that. :-)

much luck.

btw. i would opt for #2. easiest in long run. ((gbwg))

--

peace out.

in a world with out fences, who needs gates.

tc.hago.

g
.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

python-PyXML-examples is there a version for Fedora?

[Max Pyziur]

python-PyXML-examples is there a version for Fedora?


Thanks!

Max Pyziur
p...@brama.com

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Thunderbird problem -

[Bob Goodwin]

On 03/06/14 06:52, Frode Petersen wrote:

Den 06. mars 2014 09:41, skrev Bob Goodwin:

All I did was delete a bunch of extraneous stuff from "Mail" that I kept
rsyncing between Thunderbird/computers, specifically;

/pop.juno.com
/smart mailboxes

I see no connection there, but obviously something has happened. I
couldn't see anything in "Config" that looked as though it might help.


Have you tried creating a new tbird profile, to see if you get the 
same error?


Frode Petersen 


Thunderbird/gmail would not allow a second user with the same name and 
that got to be a hassle. So I saved the Mail files to the NFS server. I 
then, removed /home/bobg/.thunderbird, yum removed and then re-installed 
thunderbird. Copied the Mail files back from NFS. Curiously I still had 
the same problem until I rebooted this computer after which the status 
bar display returned to normal and I could once more see the connection 
information as it occurred.


Before that rebooting had no effect ...

I don't know what was wrong but the problem is fixed and I have the 
display I wanted.


Oh, while this computer was displaying the problem a second one set up 
identically, using the same Mail file loaded from NFS worked normally.


So the problem cleared while testing. :-(

Thanks all,

Bob

--
http://www.qrz.com/db/W2BOD
box10  Fedora-20/64bit Linux/XFCE

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: man command question

[lee]

Joachim Backes  writes:

> Hi all,
>
> I'm running F20 on gnome3 desktop,
> and I see some weird effect in the man command (entered in a gnome
> terminal) if using the "-P" command option:
>
> man -P cat man >/dev/null
>
> should use the cat command as pager. I get the expected effect, but one
> or more additional messages to stderr:
>
> :981: warning [p 7, 5.8i, div `3tbd1,0', 0.0i]: cannot
> adjust line
> :990: warning [p 7, 5.8i, div `3tbd4,0', 0.0i]: cannot
> adjust line
>
>
> Anybody knows what this means? No such message if the gnome terminal is
> wide enough.

It probably means what it says.  You can format man pages with a
variable number of characters per line, hence you might have "(setq
Man-width 75)" in your ~/.emacs to get a reasonably formatted display
rather than one with the lines being too long for comfortable reading.

Now say, you specify zero characters per line, and the software may
suddenly have a hard time adjusting the lines.


-- 
Fedora release 20 (Heisenbug)
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Gnome is sometimes blurred

[antonio montagnani]

Steve Searle ha scritto / said the followingil giorno/on 06/03/2014 
12:46:

Around 04:16pm on Wednesday, March 05, 2014 (UK time), antonio wrote:


Sometimes when I start my laptop (with Intel card) Gnome doesn't start
as it should, icons are in the wrong position (I mean that the top panel
is sitting on the right and I get the wheel on the bottom left angle of
the screen).
Any idea?? should I file a bug against Gnome??


I can't help that much, but this does happen to me on both my Fedora
20/GNOME desktops quite frequently. So I presume it isn't Intel related.

I currently get round it by logging into a virtual console as root, and
running telinit 3 then telinit 5, which is quicker than rebooting.

Steve





Sometimes before getting into Gnome no user name appears on the login 
screen, afterwards when I get into Gnome panel icons are in the wrong 
position. It happened only recently, no idea what is the update that 
caused this problem


--
Antonio M
Skype: amontag52

Linux Fedora F20 (Heisenbug) on Acer 5720

http://lugsaronno.altervista.org
http://www.campingmonterosa.com




--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

man command question

[Joachim Backes]

Hi all,

I'm running F20 on gnome3 desktop,
and I see some weird effect in the man command (entered in a gnome
terminal) if using the "-P" command option:

man -P cat man >/dev/null

should use the cat command as pager. I get the expected effect, but one
or more additional messages to stderr:

:981: warning [p 7, 5.8i, div `3tbd1,0', 0.0i]: cannot
adjust line
:990: warning [p 7, 5.8i, div `3tbd4,0', 0.0i]: cannot
adjust line


Anybody knows what this means? No such message if the gnome terminal is
wide enough.

Kind regards

Joachim Backes

-- 

Fedora release 20 (Heisenbug)
Kernel-3.13.5-202.fc20.x86_64


Joachim Backes 
https://www-user.rhrk.uni-kl.de/~backes/de-index.html
https://www-user.rhrk.uni-kl.de/~backes/en-index.html
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: F19: Is this an httpd attack attempt?

[Tim]

Allegedly, on or about 05 March 2014, Wolfgang S. Rupprecht sent:
> 2) apache has (to my mind) a minor bug where it serves pages from the
>first vhost if you ask for an unknown vhost. 

In the absence of a matching virtual host, it returns the default
service.  The same as if you'd requested a connection to just the
numerical IP address, without any hostname.

I've always configured all domains separately, and left the default
service showing that pre-configuration Apache page that tells you that
the service is alive, or just a basic page.  That way, non-matching
connections don't connect to /some/ virtual host, as if by accident.

-- 
[tim@localhost ~]$ uname -rsvp
Linux 3.9.10-100.fc17.x86_64 #1 SMP Sun Jul 14 01:31:27 UTC 2013 x86_64

All mail to my mailbox is automatically deleted, there is no point
trying to privately email me, I will only read messages posted to the
public lists.

George Orwell's '1984' was supposed to be a warning against tyranny, not
a set of instructions for supposedly democratic governments.



-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Thunderbird problem -

[Bob Goodwin]

On 03/06/14 06:52, Frode Petersen wrote:

Den 06. mars 2014 09:41, skrev Bob Goodwin:

All I did was delete a bunch of extraneous stuff from "Mail" that I kept
rsyncing between Thunderbird/computers, specifically;

/pop.juno.com
/smart mailboxes

I see no connection there, but obviously something has happened. I
couldn't see anything in "Config" that looked as though it might help.


Have you tried creating a new tbird profile, to see if you get the 
same error?


Frode Petersen 


I will try that, it should help define the problem even if it does not 
correct it. i really want to use the cleaned up "Mail" files and if that 
is where the problem is  it might continue ... Still a good thing to try!


Thanks,

Bob

--
http://www.qrz.com/db/W2BOD
box10  Fedora-20/64bit Linux/XFCE

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Thunderbird problem -

[Frode Petersen]

Den 06. mars 2014 09:41, skrev Bob Goodwin:

All I did was delete a bunch of extraneous stuff from "Mail" that I kept
rsyncing between Thunderbird/computers, specifically;

/pop.juno.com
/smart mailboxes

I see no connection there, but obviously something has happened. I
couldn't see anything in "Config" that looked as though it might help.


Have you tried creating a new tbird profile, to see if you get the same 
error?


Frode Petersen
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Gnome is sometimes blurred

[Steve Searle]

Around 04:16pm on Wednesday, March 05, 2014 (UK time), antonio wrote:

> Sometimes when I start my laptop (with Intel card) Gnome doesn't start 
> as it should, icons are in the wrong position (I mean that the top panel 
> is sitting on the right and I get the wheel on the bottom left angle of 
> the screen).
> Any idea?? should I file a bug against Gnome??

I can't help that much, but this does happen to me on both my Fedora
20/GNOME desktops quite frequently. So I presume it isn't Intel related.

I currently get round it by logging into a virtual console as root, and
running telinit 3 then telinit 5, which is quicker than rebooting.

Steve

-- 
 
Website:  www.stevesearle.com

 11:40:06 up 32 days, 23:37,  1 user,  load average: 0.07, 0.08, 0.07


pgpytlnbSOVrR.pgp
Description: PGP signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Most Efficient Network File sharing protocol?

[lee]

Ian Malone  writes:

> On 5 March 2014 13:21, lee  wrote:
>> "Patrick O'Callaghan"  writes:
>>
>>> On Wed, Mar 5, 2014 at 2:34 AM, lee  wrote:
 As to NFS, I have had bad experiences with it, like network cards
 freezing up and computers being halted because NFS failed for unknown
 reasons.  I never got it to work reliably and would not recommend using
 NFS for anything.
>>>
>>> I've used NFS reliably for over 20 years. I don't claim it's the best

> [...]
> If mounted with the 'hard' option NFS can do that, because a process
> is waiting to close a file. It shouldn't freeze the whole system
> unless part of the system itself is actually on NFS (home directories
> is a common one). But this can be an intentional trade-off, where you

Yes, and IIRC, I tried the option which was supposed not to let things
freeze, with no better results.

BTW, is there something that handles files transfers securely in a
simple way, like rsync or scp, with the ability to mount the remote file
systems like with NFS or samba?


-- 
Fedora release 20 (Heisenbug)
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Gnome is sometimes blurred

[lee]

antonio  writes:

> Sometimes when I start my laptop (with Intel card) Gnome doesn't start
> as it should, icons are in the wrong position (I mean that the top
> panel is sitting on the right and I get the wheel on the bottom left
> angle of the screen).
> Any idea?? should I file a bug against Gnome??

Did you turn the laptop around?  Some screens can be turned by 90
degrees, and the display is supposed to adjust.  Perhaps your laptop has
this feature, and it´s giving you unexpected results.

Provide a screen shot?


-- 
Fedora release 20 (Heisenbug)
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: F19: Is this an httpd attack attempt?

[lee]

Tom Rivers  writes:

> On 3/5/2014 10:45, Tom Rivers wrote:
>> Now that I had successfully simulated the attack signature in the
>> log file of the proxy web server, I logged into the target web
>> server and looked at its access log.  Thankfully I found no log of
>> any activity from my XXX.XXX.XXX.XXX workstation IP.  Not wanting to
>> leave any stone unturned, I did a "tail -f" on the log file of the
>> target web server and performed the same test again.  I got the same
>> results.
>
> Sorry, it's a busy day at work and I wasn't as clear as I should have
> been in this last paragraph.  What I should've said is that there were
> no entries in the log file of the target web server referencing the
> attempted "attack" for either the IP of my workstation or the IP of
> the proxy web server.

Tom, thank you very much for your effort and time investigating and
sharing this!


-- 
Fedora release 20 (Heisenbug)
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Can't install ƒ20

[lee]

"Frode, maillister"  writes:

> The designers/developers have apparently decided to prioritize ease of
> use at the expense of some of the "advanced" features, thinking that
> those who do things differently know how to do it.

They have managed to create an installer for Fedora that cannot be used
to install Fedora.  That´s still an euphemism, yet it is what it comes
down to.


As for the original question:  With the F19 installer, I had to create
the partitions otherwise and then mess around with the installer for
quite a while to tell it which partition to use for what.  It was pretty
awful, though at least possible.

Perhaps you can use the F19 installer and install F19, then upgrade to
F20.


-- 
Fedora release 20 (Heisenbug)
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: F19: Is this an httpd attack attempt?

[lee]

Tim  writes:

> Allegedly, on or about 05 March 2014, lee sent:
>> Could someone please explain why/how this may be considered as an
>> attack or at least as something bad?
>
> Have a look at the log line that the original poster sent:
>
> 185.4.227.194 - - [03/Mar/2014:07:27:49 -0800] "GET 
> http://24x7-allrequestsallowed.com/?PHPSESSID=1rmsxtj500143TRMUTP_ODZZWA 
> HTTP/1.1" 200 5264 "-" "-"
>
> look above here, where the carats are at the end of these hyphens 
> -^^^
>
> That "200" means a successful result, rather than a failure.  In other
> words, what they tried to do, they did.

Yes --- I was wondering if perhaps some sort of error page might have
been served.

>> Someone requesting an URL from a web server that doesn´t serve this
>> URL --- or doesn´t serve the specified domain at all --- could be
>> caused by incorrect responses from name servers, couldn´t it?
>
> Not, like that.  Say, for example, I try to get this page from a
> website:  www.example.com/pages/test.html  The browser will connect to
> example.com (presuming that DNS is working), and then it will try to
> GET /pages/test.html.  The domain name will not be in the GET request.
>
> e.g. That log line would have looked like:
>
> 185.4.227.194 - - [03/Mar/2014:07:27:49 -0800] "GET 
> /?PHPSESSID=1rmsxtj500143TRMUTP_ODZZWA HTTP/1.1" 200 5264 "-" "-"
>
> As a more normal use of a webserver.

I see what you mean, then entries in my log file look like that.

As Tom Rivers pointed out in his posts, his tests have shown that
someone might have used the web server as a proxy.  Now there is
probably no way to determine whether what caused this log entry was
actually an attack or not, or is there?


-- 
Fedora release 20 (Heisenbug)
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: OT: bash question

[Todor Petkov]

On 05/03/2014 10:13 PM, Mike Wright wrote:

Hi all,

I need to extract the name of a parent directory, not the whole path.

Combinations of dirname and cut didn't get me anywhere.

Given this:  (the ... indicates that I don't know the dir depth)

/.../mydir/my.file

How would I extract this:

/.../mydir/my.file
 ^

TIA to all takers :)



a=$(dirname __file_)
b=${a##*/}


Example:
a=$(dirname /etc/httpd/conf.d/userdir.conf)
b=${a##*/}

echo $b
 conf.d

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Re: Thunderbird problem -

[Bob Goodwin]

On 03/06/14 00:33, g wrote:



On 03/05/14 18:35, Bob Goodwin wrote:


Thunderbird has stopped providing an indication of activity after

> I click on "Get Mail." Normally there is information presented at
> the bottom left of the display in what they apparently call the
> "Status Bar" where I can see that DNS is working and it connects,
> etc., to me essential information. Since late yessterday I find
> my self clicking on Get Mail multiple times and nothing seems to
> happen until a message just happens to come along?


I don't know if it is a new feature


i do not believe so as i am using 24.3.0, also.

> or if I have inadvertently done something wrong while working on
> my Thunderbird mail files.

now that could be. ;-)


Seamonkey mail still displays that activity,


do not know about any monkeys.


I use Seamonkey to print crossword puzzles, path of least resistance, 
Evince will not print them from Firefox? Seamonkey just happens to 
include an e-mail function so I tried it.





This is Fedora 20/64bit, XFCE, Thunderbird 24.3.0, F-20 updated a
few hours ago.


what is v/r of install?

mine is;

   thunderbird-24.3.0-2.el6.centos.x86_64


[root@box10 bobg]# thunderbird --version

(process:2767): GLib-CRITICAL **: g_slice_set_config: assertion 
'sys_page_size == 0' failed

 Thunderbird 24.3.0

Whatever that means?




Any help restoring things will be appreciated.


well, i hope this does help. :-)



Not much, but I never give up hope.

All I did was delete a bunch of extraneous stuff from "Mail" that I kept 
rsyncing between Thunderbird/computers, specifically;


/pop.juno.com
/smart mailboxes

I see no connection there, but obviously something has happened. I 
couldn't see anything in "Config" that looked as though it might help.



--
http://www.qrz.com/db/W2BOD
box10  Fedora-20/64bit Linux/XFCE

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org