Re: [vox-tech] running service as a different user

2002-07-09 Thread Jan Wynholds


>   Anyway if I understand the purpose of jabberd it doesn't make sense
> to operate from inetd.  It is a text message passing daemon for people,
> so in order to be useful you need multiple clients connected to it to
> be able to pass text messages between them.
>   If the process is started by inetd, you would get one server process
> per client connection, and while you might have 50 people connected
> they each would have no one else to talk to.
> 
> TTFN,
>   Mike


Ooops.  Sorry to lead Pat astray.  I had no idea what the server did.

I should cover my mouth 'cause my foot shot right up in there ;)

jan


__
Do You Yahoo!?
Sign up for SBC Yahoo! Dial - First Month Free
http://sbc.yahoo.com
___
vox-tech mailing list
[EMAIL PROTECTED]
http://lists.lugod.org/mailman/listinfo/vox-tech



Re: [vox-tech] running service as a different user

2002-07-09 Thread Jan Wynholds

Hi Patrick:

Can't you use xinetd?  I think it might be what you're looking for.

I think that xinetd just listens on the port and handles the starting of the
server.

Here is a sample of how telnet works through xinetd

service telnet
{
flags   = REUSE
socket_type = stream
wait= no
user= nonprivuser
server  = /usr/sbin/in.telnetd
log_on_failure  += USERID
disable = no 
}

HTH,

jan

--- Patrick Stockton <[EMAIL PROTECTED]> wrote:
> I'm testing around with a jabber server and don't want to run the 
> service as root when I have the jabberd service start from an init script.
> 
> named and mysql support user flags that tell it to run the process as a 
> different user but jabberd doesn't seem to have a similar flag.
> 
> Now I've created a user and group named jabber and plan on assigning 
> permissions to the jabber directories to the jabber user.  The jabber 
> user does not have log on rights to the system.  How can I have the 
> system run the jabber service as a different user?  Is there some sort 
> of wrapper I can use?
> 
> I'm using Mandrake 8.2 and have compiled the jabber server from source.
> 
> Patrick
> 
> ___
> vox-tech mailing list
> [EMAIL PROTECTED]
> http://lists.lugod.org/mailman/listinfo/vox-tech


__
Do You Yahoo!?
Sign up for SBC Yahoo! Dial - First Month Free
http://sbc.yahoo.com
___
vox-tech mailing list
[EMAIL PROTECTED]
http://lists.lugod.org/mailman/listinfo/vox-tech



Re: [vox-tech] mail / DNS question

2002-07-05 Thread Jan Wynholds

Hey Pete:

Maybe point your MX record at belial.ucdavis.edu?  I know very little about
this, but from looking at RECEIVED stamps on email:

Received: from web9102.mail.yahoo.com (web9102.mail.yahoo.com
[216.136.128.239])

It looks like the exchanger knows about the DN and the IP, so if there is a DN
that points to the correct IP, the DN is all it needs?  I don't know why it's
true, I only know what is :)

I don't know why you would need a DN instead of an IP, but that is the 
way that our records come up:

# nslookup
> set type=MX
> dminfo.com
Server: xx.xx.xx.xx
Address:xx.xx.xx.xx#53

Non-authoritative answer:
dminfo.com  mail exchanger = 5 mail.dminfo.com.

Authoritative answers can be found from:
dminfo.com  nameserver = the.big.nameserver
dminfo.com  nameserver = another.big.nameserver.
mail.dminfo.com internet address = xx.xx.xx.xx
the.big.nameserver  internet address = xx.xx.xx.xx
another.big.nameserver  internet address = xx.xx.xx.xx

Seems a bit weird to me.

HTH,

jan

--- Peter Jay Salzman <[EMAIL PROTECTED]> wrote:
> hi all,
> 
> oddly, i'm a newbie at this sort of thing...
> 
> belial.ucdavis.edu is hosting the virtual domain roselug.org.  i think i
> set up the MX records correctly.  at least, nslookup looks good:
> 
>p@satan% nslookup 
>> set type=MX
>> roselug.org
>Server: 206.13.31.12
>Address:206.13.31.12#53
>
>Non-authoritative answer:
>roselug.org mail exchanger = 60 169.237.43.86.  <-- * correct IP *
>
>Authoritative answers can be found from:
>roselug.org nameserver = A.NS.JOKER.COM.
>roselug.org nameserver = B.NS.JOKER.COM.
>roselug.org nameserver = C.NS.JOKER.COM.
>A.NS.JOKER.COM  internet address = 194.176.0.2
>B.NS.JOKER.COM  internet address = 194.245.101.19
>C.NS.JOKER.COM  internet address = 194.245.50.1
> 
> i reconfigured exim to include roselug.org as a local domain:
> 
>local_domains = localhost:belial.ucdavis.edu:roselug.org
> 
> yet mail to [EMAIL PROTECTED] is giving an error message which i
> don't really understand:
> 
>A message that you sent could not be delivered to one or more of its
>recipients. This is a permanent error. The following address(es) failed:
>
>  [EMAIL PROTECTED]
>  all relevant MX records point to non-existent hosts:
>  it appears that the DNS operator for this domain has installed an
>  invalid MX record with an IP address instead of a domain name on the
>  right hand side
> 
> ok, keep in mind i'm new at this sort of thing.   what's going wrong?
> why isn't an IP address ok to use on the "right hand side"?
> 
> pete
> 
> -- 
> GPG Fingerprint: B9F1 6CF3 47C4 7CD8 D33E  70A9 A3B9 1945 67EA 951D
> ___
> vox-tech mailing list
> [EMAIL PROTECTED]
> http://lists.lugod.org/mailman/listinfo/vox-tech



__
Do You Yahoo!?
Sign up for SBC Yahoo! Dial - First Month Free
http://sbc.yahoo.com
___
vox-tech mailing list
[EMAIL PROTECTED]
http://lists.lugod.org/mailman/listinfo/vox-tech



Re: [vox-tech] GIMP and 8-bit GIFs

2002-07-01 Thread Jan Wynholds

As Henry mentioned, ImageMagick will work, but is _beastly_ slow.

If you had, say image.pnm, I think that mogrify might work in a similar way
convert does:

# mogrify -format gif87 image.pnm

Will make image.gif87 (kinda weird extension).

HTHO,

jan

--- nbs <[EMAIL PROTECTED]> wrote:
> On Mon, Jul 01, 2002 at 11:45:31AM -0700, Henry House wrote:
> > 



> Alernately,
> > save as PNG (or other convenient format) and use the command-line convert
> > program tp convert to GIF. It is beastly slow but effective and supports
> many
> > options to customize the output. It is part of the ImageMagick package.



__
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com
___
vox-tech mailing list
[EMAIL PROTECTED]
http://lists.lugod.org/mailman/listinfo/vox-tech



RE: [vox-tech] gzip bug?

2002-03-14 Thread Jan Wynholds

Hi Kevin:

Have you checked memory?  Whenever I have problems with something that _should_
be rock solid (like bzip and gzip), I check memory...  Not to say that it
couldn't be some other random hardware problem, but memory is what I have seen
most commonly.  Have any other pieces of hardware changed since you have seen
this behavior?  

With a RedHat 7.1 system I think I have used bzip and gzip to handle many
Gigabytes of tape data.  I am doubtful it is your software.

Is there anything else that is giving you problems with this box?  Does gcc
work correctly?  Will a kernel compiled on that box run correctly?  Do any
programs halt with Segmentation Fault (sig11)?

I have had problems with RedHat boxen that have memory problems.  Have you
upgraded memory lately?  I ask only b/c it seems like bzip and gzip should not
croak on such sized files.  Since you are using RH 7.1, 2 GB file size limits
shouldn't be your problem.  Your problem is quite weird, b/c gzip is tested and
retested (to the point of bullet proof), so it is very doubtful that it is your
software.  My guess it is something with your hardware.  I found alot of useful
(hardware) testing information from the Sig11 FAQ found at:

http://www.bitwizard.nl/sig11/

Here is some text from that page on (very nearly) your problem:

QUESTION
Is it always signal 11?
ANSWER
Nope. Other signals like four, six and seven also occur occasionally.
Signal 11 is most common though.
As long as memory is getting corrupted, anything can happen. I'd
expect bad binaries to occur much more often than they really
do. Anyway, it seems that the odds are heavily biased towards gcc
getting a signal 11. Also seen:

free_one_pmd: bad directory entry 0008

EXT2-fs warning (device 08:14): ext_2_free_blocks bit already
 cleared for block 127916

Internal error: bad swap device

Trying to free nonexistent swap-page

kfree of non-kmalloced memory ...

scsi0: REQ before WAIT DISCONNECT IID

Unable to handle kernel NULL pointer dereference at virtual
 address c004 

put_page: page already exists 0046

invalid operand: 

Whee.. inode changed from under us. Tell Linus

<>

crc error  --  System halted  (During the uncompress of the Linux kernel)

Segmentation fault

"unable to resolve symbol" 

make [1]: *** [sub_dirs] Error 139

make: *** [linuxsubdirs] Error 1

The X Window system can terminate with a "caught signal xx"
The first few ones are cases where the kernel "suspects" a
kernel-programming-error that is actually caused by the bad memory.
The last few point to application programs that end up with the
trouble.
-- S.G.de Marinis ([EMAIL PROTECTED])
-- Dirk Nachtmann ([EMAIL PROTECTED])

<>
HTHO,

jan
--- Kevin Dawson <[EMAIL PROTECTED]> wrote:
> Hi Pete,
> 
> The files I'm having the problem with are just 50M and 30M after gzip.
> 
> I followed your suggestion. Everything was going fine up to 1M. Using
> 10M, I had to learn that I didn't have 20G disk space available on
> /home. Using 100k, the created file size is in the range of my problem
> files (50M), can be compressed to only 50k, and uncompressed perfectly.
> It looks like that the problem is dependent on the size of the
> compressed file (30M in my case).
> 
> bunzip2 is also having trouble. It says:
> bunzip2: Data integrity error when decompressing.
>   Input file=bigfile.bz2, output file=bigfile
> 
> It is possible that the compressed file(s) have become corrupted.
> You can use the -tvv option to test integrity of such files.
> 
> When I do the test, it will print
> [N: huff+mtf rt+rld] whereas N goes up to 29.
> Then it prints: data integrity (CRC) error in data.
> 
> When gunzipping the files, I don't hear any unusual disk churning.
> 
> Thanks again,
> 
> Kevin
> 

__
Do You Yahoo!?
Yahoo! Sports - live college hoops coverage
http://sports.yahoo.com/
___
vox-tech mailing list
[EMAIL PROTECTED]
http://lists.lugod.org/mailman/listinfo/vox-tech



Re: [vox-tech] SIG11 Problems and hardware suggestions

2002-02-14 Thread Jan Wynholds


I just took out the bad memory, and no SIG 11 yet today.  I was always pretty
confidant that that is what it was, it was just annoyingly happening "once in a
while".  The past few days it was getting _really_ bad.  I'll check out the
memtest86 site though and see what I can see.

And yea, I forgot to post to the new address... ;)

Thanks for all the advice!

--jan


--- Peter Jay Salzman <[EMAIL PROTECTED]> wrote:
> check out the received header.  i think jan posted to the old list and his
> post got redirected by henry's script.
> 
> 
> pete
> 
> 


__
Do You Yahoo!?
Send FREE Valentine eCards with Yahoo! Greetings!
http://greetings.yahoo.com
___
vox-tech mailing list
[EMAIL PROTECTED]
http://lists.lugod.org/mailman/listinfo/vox-tech



[vox-tech] SIG11 Problems and hardware suggestions

2002-02-13 Thread Jan Wynholds

Hey all:

I am just tearing out my hair over SIG11 (seg fault) problems with a one of my
linux boxes.  After stumbling around in some FAQ's, and some postings in
various newsgroups, I have discovered that these problems have more to do with
the hardware than the os or software (caching, memory, speed settings, etc).  I
have discovered that not only are these problems _extremely_ annoying, but
rather tough (for me) to solve, due to the sheer number of causes.

Can anyone recommend the following hardware combos that DO NOT have sig 11
problems (i am searching for a new box)?  I have heard that the MOBO and memory
are usually the culprits, although there are some accounts of hard disks
screwing the proverbial pooch.

I would love to hear accounts of "this MOBO/CPU running with <>
memory would NEVER SIG11".

I have heard that ASUS boards with Athlon's are pretty good.  How about memory?
 DDR vs PC100/133?  Are any brands more or less reliable than others?

Currently, my problem box is a AMD K6-2 with a 256 MB of memory (PC100, one
stick of Viking, and one stick of kingston), a TYAN MOBO, and a Maxtor HD.  I
suspect it's the memory, but I haven't nailed it down yet.

--TIA

jan

__
Do You Yahoo!?
Send FREE Valentine eCards with Yahoo! Greetings!
http://greetings.yahoo.com



Re: [vox-tech] bypass linux native tcp stack

2001-11-30 Thread Jan Wynholds

Hi,

I am not too sure about what you are asking (and I am no expert on the
subject), but I think you might want to check out the Netfilter test suite as
well.  With that, you can 'bypass' the normal hardware interface (like an
ethernet card), and send frames from another software interface (like ethertap
does).  But it's all for testing the hardiness of iptables (so the rest of the
system is completely unaffected).  You can generate UDP and other protocol
packets with that tool, and not just tcp/ip.  The nice thing about the test
suite is that it has a step by step testing of your firewall (or router,
etc)...

I am not too sure what your point of doing this is, but if it is for security
testing, the netfilter test suite is *really* nice.  If not, tho, you might
want to look at something different.

HTH,

jan


--- Ganesh  Subramaniam <[EMAIL PROTECTED]> wrote:
> I have 'nt got into details of Linux tcp/ip architecture. Can someone tell
> me how coupled is the socket layer in linux with its native tcp/ip stack. Is
> it possible for me to make the linux socket layer bypass the native tcp/ip
> stack and communicate with some other layer (say another tcpip
> implementation) , without affecting the existing applications. Would
> appreciate some pointers,discussions on this subject.
> 
> Thanks a lot !
> Ganesh
> 
> 
> 


__
Do You Yahoo!?
Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
http://geocities.yahoo.com/ps/info1
___
vox-tech mailing list
[EMAIL PROTECTED]
http://lists.lugod.org/mailman/listinfo/vox-tech



Re: [vox-tech] Mail Issues

2001-11-27 Thread Jan Wynholds

Hi Nick:

You might want to check out smail.  It's a simpler MTA than sendmail.  If you
really need alot of filtering functionality, then you might want to go with
sendmail.  But if you aren't running a huge mail server that has to deal with
hundreds of thousands of spam per day then you'll *probably* be alright.

I think you can get it from metalab:

ftp://metalab.unc.edu/pub/Linux/system/mail/mta/smail-linuxbin-something.tar.gz

There might be an RPM out there as well, but I haven't looked that hard for
one.

HTH,

jan

--- Nick Donnelly <[EMAIL PROTECTED]> wrote:
> Sorry if this is silly--I know nothing about mail admin: if the 
> "mail" program doesn't seem to send mail anywhere, should I start 
> reading sendmail howtos? Judging from sendmail.cf that would probably 
> be mighty unpleasant.  If not with sendmail, where should I start 
> debugging?
> Thanks,
> Nick
> ___
> vox-tech mailing list
> [EMAIL PROTECTED]
> http://lists.lugod.org/mailman/listinfo/vox-tech

__
Do You Yahoo!?
Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
http://geocities.yahoo.com/ps/info1
___
vox-tech mailing list
[EMAIL PROTECTED]
http://lists.lugod.org/mailman/listinfo/vox-tech