Search Results: "reg"

22 July 2006

Brett Parker: Yay!

That was a fantastic evening out, went to the beach around 7ish, met people around 7.30ish (Matt, Sarah and Charly), watched the world go by whilst waiting for chris, then had a fantastic picnic courtest of Sarah - that was really nice... Back to Matt and Sarah's when it started to get "a bit chilly" on the beach, then poker! What more could you want from an evening out? Was absolutely fantastic - many thanks to Mattand Sarah who both went to bed before the Poker had finished (incidently, I won, so... err... Matt, you owe me a tenner ;) Now there's talk of setting up a semi-regular poker night - should be fantastic fun :) *bounce* (now I think it's time to collapse in a heap, maybe after a cool shower though - it's just too damned hot!)

20 July 2006

Evan Prodromou: 2 Thermidor CCXIV

I talked with Raymond King and Mark Dilley at RecentChangesCamp in February (uh... I mean Pluvi se) about their plans to develop Mark's excellent SwitchWiki wiki directory into something... more. I'm glad to see that WikiIndex is really picking up steam. It's becoming my first-stop for getting information on what's wiki, what's not, and who's doing what. The site uses MediaWiki, but the principles and community are very much rooted in the traditions of Ward's Wiki, MeatballWiki and CommunityWiki. I really hope this site keeps up it's momentum and growth. tags:

CC Salon in Montreal Tonight is the first Creative Commons Salon in Montreal. The get-together is at Caf l tranger, 680 Sainte-Catherine Ouest (at Alymer) at 19h30. More details on the Creative Commons Canada blog: http://creativecommons.ca/blog/?p=185 . Maj and I are trying to get a sitter for the event -- Amita June is starting to get grumpier and grumpier about going to sleep after 8PM. But I'll be there regardless. tags:

Great camping Website So, maybe I just haven't been camping a lot in other places outside Quebec in a while, but I'm extremely impressed with the quality of the S paq Web site. You can search the entire network for available campsites based on various criteria (size of tent vs. RV, for example), and then use a map-based interface to browse possible sites. The maps go down to the individual site level, and have popup descriptions of each and every site -- how much sun, how close to water, how private, etc. It's really nice. I have my quibbles -- we tend to do road-trip camping, where we'll stay in a different campground each night for a few days. It'd be nice to do all those reservations at once, but the site doesn't support that. And there are some search criteria I'd like to be able to specify (number of neighbors, access by car) that aren't possible. But as far as it goes, this is a real good site. tags:

Wikispam lockdown I've been having a real problem with Wikispam on my site lately -- several of my pages have nothing-to-sniff-at wp:PageRank values of 6 or 7, and I think that attracts a certain spammity crowd. I think that dealing with Wikispam is something most wiki sites do very well-- an active community is the best counter-measure against spam. And there are lots of good tools, like regexp filters, per-page locking, email and IM notification, and ip blocking that make it easier to maintain a site. But I don't have an active community working on this site -- it's pretty much just me. And WiLiKi, as beautiful and Scheme-y as it is, doesn't have many of the anti-spam tools that users of other wiki engines take for granted. I plan on building more anti-spam tools into the site, but for now I've just been locking the site up when I'm not writing something. It's not as wiki-ish, but it does keep my writing up more often. I'd feel pretty bad about it, but it looks like Alex locks up CommunityWiki for days at a time. tags:

Amazon man at the door Just got an order from Amazon in... full of CDs and books. When I used to live in my car (long story, there), I had my 100 favorite CDs in a box in the back. It was safe there in tons of cities -- wt:Chicago, wt:Saint Louis, wt:New York City, even wt:Monterrey and wt:Guanajuato. But I parked it about a block from It's Tops in San Francisco one night while visiting home, and one of my windows was smashed and the discs were taken. Devastating. Slowly but surely I've been re-stocking my music collection, but it's painful to buy the same album twice (and, yes, I know... I shoulda made backups! I do that now). Today's shipment contained a lot of stuff I re-bought: ''wp:The Last Waltz'', a bunch of wp:Neil Young (including the DVD of wp:Greendale), and one of my favorite albums ever, the eponymous first album from Lamb. Also in the box were a bunch of Lost paperbacks ("inspired by the hit series") and the hardback copy of Bad Twin, the mystery novel supposedly written by one of the people who died in the crash of Flight 815. Yeah, I know -- but I like the show, dangit. tags:

Best thing ever Vaguely reminiscent of the very fine Good or Bad? feature from Brunching Shuttlecocks, bestthing.info, by the enigmatic but talented xkcd, is a good way to waste a few minutes. tags:

John Goerzen: Am I being scammed?

So today my auction for the tc1100 tablet PC ended. The winning bidder:



I replied to the buyer's e-mail giving shipping prices to Nigeria and Malaysia, and restating my policy of shipping to only PayPal Verified Addresses.

So what do you all think? Is this a scam?

I was shocked at the amount of scams that sellers on eBay are exposed to these days. I've never seen this before, even just a few months ago when I sold my last item on eBay. But with this one, spammers and scammers are using the "ask seller a question" interface. One person tried to get me to use an eBay phishing clone site. Quite a few tried to get me to sell to them off eBay, to people in China, using a non-reputable billpay service. And there was just some generic spam.

So all that, plus the fact that they want me to ship to Nigeria, plus the fact that the person just registered on eBay today, is making me nervous.

So it seems odd, but I can't quite work out how somebody would actually defraud me here. Also, I'm interested in what I should do if it is a scam.

19 July 2006

Matthew Garrett

Mark:

You've been somewhat disingenuous in your quoting. The full phrase is "Since Debian has no authority to hold money or property, any donations for the Debian Project must be made to SPI, which manages such affairs". That is, the "Any donations for the Debian Project must be made to SPI" isn't saying "Money must be given to SPI because we don't trust anyone else", it's saying "Money must be given to SPI because we can't accept money ourselves". It's a historical bug, much like "Debian's Developers are currently members of SPI by virtue of their status as Developers" (untrue and the sort of thing that you'd normally complain about".

it looks to me like the DPL endorsing someone not approved by SPI maybe isn't a properly-made decision

"SPI has no authority regarding Debian's technical or nontechnical decisions" could be used to argue against that, since it clearly indicates that the approval (or not) of SPI can't be used to block decisions made by the rest of the project. Perhaps this section of the constitution was badly written? Good Lord, etc.

Advocating expulsion! For wanting to avoid involvement with an unethical, buggy business venture of some UK DDs!

Or, alternatively, for going on and on and on and on and on and on and on about an argument that you've already lost and wasting absolutely no opportunity to bring it up in any possible new vaguely related forum. Sort of like your "religious hate campaign" and "violation of the UN human rights declaration" routines. Entirely coincidentally, I've been facing the latter from a co-worker who keeps accusing me of having stolen her Windows XP CD. I mention this merely as an amusing aside.

I would have commented rather than making a post of my own, except that you don't seem to have any mechanism for providing publically viewable comments. Coincidentally, this is the same reason that I didn't comment to say that I didn't like the way you fold your posts.

(Edited to fix spelling)

Steve Kemp: So hot, so cold, so far so out of control

The cron patch I posted previously attempted to discard any crontab file which contained non-ASCII characters was a flawed approach. Lots of people told me that this would break scripts with foreign character sets, and that was something I’d not considered. A real solution would be to read each line and test for : Looking at the code for cron is hard because it is written in a “strange” style, so I’m not even going to attempt it this level of validation. However I have produced an updated patch which should work on ASCII + foreign character sets equally well. Instead of testing for the presense of non-ASCII characts it looks for NULL characters (’\0′). Binary files should contain at least one NULL character - as a string terminator, for example - and text-files should never contain them. So I think this simple test will work for 99% of cases.
Regardless of whether this patch, or another like it, is accepted and applied I do believe strongly that whilst being liberal in what you accept is a good thing being too liberal is asking for trouble.

Simon Richter: Fighting collateral damage from spam

One of the biggest problems in fighting spam is that of false positives. I regularly have to scan my Junk folder for legitimate mail, which takes a great amount of my time, but otherwise I'd miss important stuff, like my provider telling me about a network outage, or a message from eBay. Now what I'd like to see is a mechanism to hand those people legitimately sending bulk emails a token which allows them to go through my spam filters. Obviously, everyone would get a different token. The interesting bit about this is less of a technical thing though: having a token could be interpreted as a prior business relationship, which is a requirement for sending business email in most jurisdictions.

18 July 2006

Jordi Mallach: Seventy years of the Spanish Civil War and the Spanish Revolution

A few months ago I wrote about the 75th anniversary of the proclamation of the Second Spanish Republic which was celebrated throughout the state. That weekend I visited a fantastic exposition of Republican and Revolutionary war propaganda posters, in Segorbe.

Today, Spain remembers the beginning of the end. During the evening of the 17th of July and morning of the 18th, a group of generals of the Spanish regular army raised against the democratically elected left-wing government of the Republic. History says that the murdering of Calvo-Sotelo, a right-wing leader, was what finally provoked the conflict. It was no secret that the same right-wing and some elements in the army had been conspiring for weeks about an uprise. The only question was when, but the government was fooled by general Mola and didn't take really effective measures to prevent it.


Warning from sanitary authorities against venereal diseases Mola and Sanjurjo planned to start taking over official buildings and army quarters and quickly seize control of the major cities. During the first hours of their rebelion, they managed to take over most of the southern regions in Andalusia, Extremadura and parts of the Northwest, plus most of the islands and the Moroccan protectorate area. Meanwhile, the Republic did not manage to react quickly due to the weakness of the government, and in the first days of the crisis, the government changed a few times. Finally, the Republican parties decided that to defend the state they should give arms to the unions, and soon after many militia groups were getting organised in the cities, and columns sent off to liberate other towns.


Solidarity of Catalunya to the Basque front The insurrection was suffocated in Barcelona after some heavy fighting against the military in the Montju c castle; the Anarchists of the CNT grew strong in Catalunya and Arag n, and offered good resistance in those fronts. After the first days of the coupe d'etat, it was clear neither the legitimate government or the rebels calculated how things would go after the first days. The government was confident in being able to end the rebelion as they did four years before; the fascists thought they would have quickly brought down the government with a successful coup. But after the first week, the country was divided in two halves, and both sides of the conflict were keen on fighting, due to the big social fracture during the last months of the government. The Republic asked for help to the League of Nations, but the United Kingdom and France decided not to intervene, scared about the conflict trespassing the Spanish borders and becoming another bloody war in European fields. The only official external aid came from the USSR and the International Brigades, formed by volunteers of more than 50 nations. Some well-known personalities like Ernest Hemingway or George Orwell came to aid as well. Orwell wrote about his life-changing experience in a Barcelona immerse in the social revolution, where he joined the anti-stalinist socialist party POUM. Badly wounded in the neck, he left the front and went back to Barcelona, and witnessed the assault of the Telef nica by the communists against the anarchists, during the fets de maig, after which the POUM was declared illegal. Orwell captured his experiences in the frontline and Barcelona in his book Homage to Catalonia.


To defend Madrid is to defend Catalunya Franco and Mola, aided by the Northafrican troops and soon after by their fascist allies of Italy and Germany, didn't have big problems seizing the Basque Country and Asturies in the North, but not before making the town of Gernika disappear below the nazi Condor Legion bombing, in what would be a test for the massive aereal bombings of Word War II. The battle for Madrid was fierce, and the city wasn't occupied until the very last days of the war. The long defence of the capital made was immortalised in the famous phrase No pasar n.


Madrid's No pasar n During the war, anarchist groups controlling fields and towns in Arag n and Catalunya managed to bring a Social Revolution to the area. The people collectivised the land and industries, administered by local assemblies. This experience is regarded as the time when Libertarian Communism has been successful. The experience ended dramatically when the anarchists were treasoned and blocked by the communists, and eventually defeated by Franco at the front.


Each bullet for a target After the first and a half years, the fronts had stabilised in Madrid and the East of Andalusia, until early in 1939, Barcelona fell in Franco's hands, after the bloody Batalla de l'Ebre, being followed by Girona and the rest of Catalunya. The fate of the democratic state was clear. Two months later, Madrid fell and Val ncia and the small area still under Republican control surrended.


Robert Capa's Muerte de un miliciano Franco declared a totalitarian regime to, according to the fascists, reconcile the two Spains. In the first five years of the regime, up to 100.000 were executed in the franquist repression, including the Catalan president, Llu s Companys and many intellectuals. The dictatorship continued executing people until two months before Franco's death, 36 years later. Hundreds of thousands also had to exile in M xico, France and other destinations, leaving Spain in ashes, road gutters full of scattered bodies and the population facing famine. The cultural elite left the country, making the state's clock go back at least a decade. Their reconciliation really meant humiliation and repression. Many people were also murdered during the war behind republican and rebel lines, but the genocide of the aftermath had was unmatchable.


The Republic promoted education among the troups It is a bit late to restore the dignity of the victims, but not too late. Some associations have been fighting since the end of Franco's regime to get some kind of public recognition for their suffering, for their priceless fight for the legal and democratically elected Republic, for the people who didn't make it.


Excellent anarchist poster rejecting the politisation
of children by any of the three loyal groups Other people reject these efforts banning them of "revisionism". Not too surprisingly, these are the sons or grandsons of the people who won the war. The current government is about to pass a Historic Memory law which aims to give recognition to all these people who gave their lives for an ideal and freedom. Unfortunately, due to pressures from the right, it is probable that the text will be ammended to make it more acceptable by them. I fear it will end up not pleasing the victims at all. I have a passion for Spanish Civil War related matters, and in the last years I tried to use any opportunity to listen to my Catalan grandmother talk about war affairs in Barcelona, and my grandfather, from a town in the middle of the Republican side of the Teruel front, but born in a very catholic family, about how the war went on in Vall and the nearby mountains.


From the defensive No pasar n to the encouraging Pasaremos! I know my grandfather only told me the less compromising stories, like how he was sent to dig refuges until he was 16 and apt to fight in the Front, or how he was put in charge of hiding the church's valuable relics in a few barns. He never told me about how life was after the war in the small town. It is dramatic to see that all the people who were old enough to have a sense of what was going on at the time are so old that these unvaluable memories and stories will be mostly gone in ten years. (Most of the pictures are taken from the Sociedad Ben fica de Historiadores Aficionados y Creadores' website, which has a huge documented catalog)

Mark Brown: Folding

I tend not to mind folding itself overmuch myself: personally, I don’t find it much different to linking to an article published elsewhere. What I do find causes me problems is where the content of feeds doesn’t stand by itself, making the text that appears in the aggregator difficult to parse. It takes me much longer to even scan such posts than to handle most others due to the greater effort involved in understanding the unusual presentation. One common culprit here is software that strips markup from the feeds it generates, another is folds constructed automatically which frequently break the text in unsuitable places.

John Goerzen: Multipath is working

Yesterday, we got multipath working with our HP MSA1500cs SAN. We have a fully redundant setup with redundant controllers, fibre channel switches, and two FC controllers per host.

We had been having a lot of trouble getting things to work right with active/passive controllers. We could get failover to work in some cases, but getting everything to communicate correctly in the event of a failure was difficult, since every machine would have to flip over to the passive controller simultaneously.

With a firmware upgrade, the MSA 1500cs can support active/active controllers. With the dual-active setup, both controllers are active simultaneously and both are valid paths.

Despite HP support's indications to the contrary, HP does have information on using built-in multipathd in Linux instead of their proprietary multipath solution. It's document c00635587, part AA-RW8RA-TE.

We've configured multipathd.conf like this:


path_grouping_policy multibus
path_checker tur
failback immediate
no_path_retry 60
path_selector "round-robin 0"


Just put that in your default block and it should work.

Enrico Zini: Fifth day in Addis

Setting up a mail server
Background Some terminology:
MTA
Mail Transport Agent
MUA
Mail User Agent
MDA
Mail Delivery Agent
SMTP
Simple Mail Transfer Protocol
MX
Mail eXchange
POP
Post Office Protocol
IMAP
Internet Message Access Protocol
With SMTP you connect to a server and send two things: envelope and message. The envelope looks like this:
MAIL FROM: <enrico@enricozini.org>
RCPT TO: <rms@fsf.org>
RCPT TO: <linus@linux.org>
The message looks like this:
From: <enrico@enricozini.org>
To: <rms@fsf.org>
Cc: <linus@linux.org>
Message-ID: <1234567@enricozini.org>
Subject: Test mail
Hi Richard,
this is a test mail.  I'm also writing
Linus to show how to send to more people.
Cheers,
Enrico
There is no authentication. There is no encryption. Two usual types of access control:
  1. Outbound e-mail is normally only accepted from an internal network
  2. Inbound e-mail is normally accepted from anywhere
The DNS is used to find the SMTP server to use to send a message:
$ host -t MX yahoo.com
yahoo.com MX 10 smtp1.yahoo.com
yahoo.com MX 20 smtp2.yahoo.com
yahoo.com MX 20 smtp3.yahoo.com
The process of sending an E-Mail:
  1. Enrico writes an E-Mail:

    From: Enrico Zini <enrico@enricozini.org>
    To: Richard Stallman <rms@fsf.org>
    Subject: Hello from Addis
    Hi Richard,
    Addis is a wonderful city, even if
    it rains a lot.
    Bye,  Enrico
    
  2. Enrico's MUA connects to the SMTP server (for example, port 25 of smtp.aau.edu.et):

    HELO enricozini.org
    200 OK Hello enricozini.org
    MAIL FROM: <enrico@enricozini.org>
    200 OK Mail from enrico@enricozini.org
    RCPT TO: <rms@fsf.org>
    
    Here, the SMTP server performs relay control: "do we relay mail to rms@fsf.org?":
    • Outbound e-mail is normally only accepted from an internal network
    • Inbound e-mail is normally accepted from anywhere
    A target address could be refused:
    413 ERR I don't relay for rms@fsf.org
    
    In this case, the destination is not local but the recipient is accepted because I'm inside the local network:
    200 OK Destination rms@fsf.org
    DATA
    200 OK Please send message body
    From: Enrico Zini <enrico@enricozini.org>
    To: Richard Stallman <rms@fsf.org>
    Subject: Hello from Addis
    Date: Mon, 17 Jul 2006 09:49:45 +0300
    Message-ID: <124372643@enricozini.org>
    Hi Richard,
    Addis is a wonderful city, even if
    it rains a lot.
    Bye,  Enrico
    .
    200 OK Message accepted
    QUIT
    200 OK Bye.
    
  3. The SMTP server needs to find out where to send the message, using the DNS:

    $ host -t MX fsf.org
    fsf.org MX 10 mail.fsf.org
    fsf.org MX 20 mail.gnu.org
    
  4. So the SMTP server tries the first one and connects to port 25 of mail.fsf.org:

    HELO smtp.aau.edu.et
    200 OK Hello smtp.aau.edu.et
    MAIL FROM: <enrico@enricozini.org>
    200 OK Mail from enrico@enricozini.org
    RCPT TO: <rms@fsf.org>
    
    The destination is accepted because it's for a local user:
    200 OK Destination rms@fsf.org
    DATA
    200 OK Please send message body
    From: Enrico Zini <enrico@enricozini.org>
    To: Richard Stallman <rms@fsf.org>
    Subject: Hello from Addis
    Date: Mon, 17 Jul 2006 09:49:45 +0300
    Message-ID: <124372643@enricozini.org>
    Received: by mail.aau.edu.et
      on Mon, 17 Jul 2006 09:55:53 +0300
      from 10.4.15.158
    Hi Richard,
    Addis is a wonderful city, even if
    it rains a lot.
    Bye,  Enrico
    .
    200 OK Message accepted
    QUIT
    200 OK Bye.
    
  5. Now, mail.fsf.org will invoke a MDA to write the mail in Richard Stallman's mailbox.

Example of problems with mail handling:
  • Accepting inbound connections:
    • Malicious input:
      • logic errors
      • buffer overflows
      • DoS (Denial Of Service) attacks
      • Connection floods
  • Performing outbound connections:
    • Programming errors:
      • Flooding of connections
  • Performing routing:
    • Unauthorised relays
    • Mail loops
  • Writing to the local hard drive:
    • Filling up the hard drive
    • Writing to the wrong files
  • Writing to the local hard drive as root:
    • In case of error or attack, any file in the system can potentially be compromised
RFC-822 is the original standard for E-mail. RFCs are standard Internet documents. Have a look at RFC documents released the 1st of April.
postfix Common setup: "Internet site with smarthost". More difficult to maintain: "Internet site". A smarthost is a machine that will relay e-mail for you. Questions asked with "Internet site with smarthost":
  • Mail name: aau.edu.et (name used to publicly identify the mail server)
  • Smarthost name: smtp.telecom.net.et (SMTP server that will relay our e-mail)
To test a mail server:
$ telnet localhost 25
HELO me
MAIL FROM: <a@b.c>
RCPT TO: <mail@of.a.local.user>
DATA
hi
.
QUIT
By default, you find locally delivered mail in /var/mail/username. Postfix configuration files:
/etc/postfix/master.cf
configures how all the postfix components run together (man 5 master)
/etc/postfix/main.cf
Main postfix configuration (man 5 postconf)
To rewrite addresses:
  1. In /etc/postfix/main.cf:

    canonical_maps = hash:/etc/postfix/canonical
    
  2. Then in /etc/postfix/canonical you can add the rewrite rules, like:

    enrico   enrico@enricozini.org
    
  3. When /etc/postfix/canonical is modified you need to regenerate the index:

    sudo postmap canonical
    
    (same is when you change the alias file: sudo postalias /etc/aliases)
(see file:///usr/share/doc/postfix/html/ADDRESS_REWRITING_README.html) Manipulating the message queue:
mailq - List the mail queue.
Example:
mailq
postqueue - Postfix queue control
Examples:
# Like mailq
postqueue -p
# Tries to send every message in the queue
postqueue -f
# Tries to send every message in the queue for that site
postqueue -s site
postsuper - Postfix superintendent
Examples:
# Deletes one message
sudo postsuper -d 7C4D2EC0F5D
# Deletes all messages held in the queue for later delivery
sudo postsuper -d ALL deferred
Different mail queues in postfix:
incoming
mail who just entered the system
active
mail to be delivered
deferred
mail to be delivered later because there were problems
hold
mail that should not be delivered until released from hold
Mail logs are in:
/var/log/mail.log
/var/log/mail.err
/var/log/mail.info
/var/log/mail.warn
Mail delivery Mailbox formats:
  • mbox: single file, mail separated by "From " lines
  • maildir: one directory per folder, one file per mail
  • mh: similar to maildir, but not really used
Alternate MDA: procmail: allows to filter mail automatically into different folders. Mail forwarding with ~/.forward: allows to redirect mail to a different address: just put the address you want to send to in the file ~/.forward.
POP or IMAP server Installation:
apt-get install dovecot
Configuration is in:
/etc/dovecot/dovecot.conf
The main thing that is needed is to enable the mail protocols you want:
protocols = imaps
Server monitoring To make all sorts of graphs:
apt-get install munin munin-node
Example: http://munin.ping.uio.no To compute more statistics:
  • anteater
  • isoqlog
  • mailgraph
Monitor system logs: logcheck:
  • sends you mail with abnormal log lines
  • It's important to customize what is normal and you do it with regular expressions
Filtering viruses and spam clamav - Virus scanner Virus scanning:
  • Postfix gives the mail to clamav that scans it and gives it back if it's clean.
  • Strategies for infected mail:
    • silently delete it
    • refuse the mail and send a notification to the sender
    • refuse the mail and send a notification to the receiver
    • quarantine the e-mail
    • refuse delivery with a SMTP error
    • deliver with an extra header that says that it's a virus
spamassassin - Spam filter Spam scanning:
  • Postfix gives the mail to spamd that scans it and gives it back with some spam information.
  • Strategies for spam mail:
    • silently delete it
    • refuse the mail and send a notification to the sender
    • refuse the mail and send a notification to the receiver
    • quarantine the e-mail
    • refuse delivery with a SMTP error
    • deliver with an extra header that says that it's spam
  • New techniques:
    • greylisting: when you receive a mail from a host you've never seen before, refuse it with a temporary error, and accept it the second time (after some time delay). Spammers normally don't retry, and implementing retry would increase their cost of sending e-mail.
    • crossassassin: if more than some amount of your users receive a mail with the same message ID, throw it away. Sending mails with different headers would increase the cost of sending e-mail.
Man pages and sections Man pages are divided in sections:
  • man man shows all the sections of the manpages
  • man 5 postconf shows the postconf manpage in the "configuration file" section
  • Normally manpages are referred as manpage(section) (e.g. postconf(5) )

Enrico Zini: Fifth day in Addis

Samba To get samba:
apt-get install samba samba-doc smbclient
To get the Samba Web Administration Tool:
apt-get install swat netkit-inetd
The configuration is in /etc/samba:
  • One [global] section with the general settings
  • One section per share
One could use swat at http://localhost:901/ but it does not work easily on Ubuntu. To see what is shared:
smbclient -L localhost
To access a share:
smbclient //localhost/name-of-the-share
To add a new user:
sudo smbpasswd -a username
To change the password of a user:
sudo smbpasswd username
To test accessing a share as a user:
smbclient //localhost/web -U yared
Documentation:
man smb.conf
To force the user or group used to access a share:
force user = enrico
force group = www-data
To set the unix permissions for every created file:
# For files
create mask = 0664
# For directories
directory mask = 0775
Example share configuration for a webspace:
mkdir /var/www/public
chgrp www-data /var/www/public
chmod 0775 /var/www/public
Then, in /etc/samba/smb.conf:
[web]
   comment = Webspace
   path = /var/www
   writable = yes
   public = no
   force group = www-data
   create mask = 0664
   directory mask = 0775
Example share configuration for a read only directory where only a limited group of people can write:
[documents]
   comment = Documents
   path = /home/enrico/Desktop/documents
   force user = enrico
   public = yes
   writable = no
   write list = enrico, yared
Print server (CUPS) Installation:
apt-get install cupsys
Configuration:
  • On the web (not enabled in Ubuntu):

    http://localhost:631/
    
  • On the desktop:

    System/Administration/Printing
    
Example IPP URIs:
ipp://server[:port]/printers/queue
http://server:631/printers/queue
ipp://server[:port]/...
For example:
ipp://server/printers/laserjet
"This printer uri scheme can be used to contact local or remote print services to address a particular queue on the named host in the uri. The "ipp" uri scheme is specified in the Internet Print Protocol specifications and is actually much more free form that listed above. All Solaris and CUPS based print queues will be accessed using the formats listed above. Access to print queues on other IPP based print servers requires use of the server supported ipp uri format. Generally, it will be one of the formats listed above."
GRUB The configuration file is in /boot/grub/menu.lst. The documentation can be accessed as info grub after installing the package grub-doc. Quick list of keys for info:
arrows
move around
enter
enters a section
l
goes back
u
goes up one node
q
quit
/
search
Grub trick to have a memory checker:
  1. apt-get install memtest86+

  2. Add this to /boot/grub/menu.lst:

    title Memory test
        root (hd0,5)
        kernel /boot/memtest86+.bin
    
Firewall With iptables:
man iptables
# Only allow in input the network packets
# that are going to the web server
iptables -P INPUT DROP
iptables -A INPUT --protocol tcp --destination port 80 -j ACCEPT
# To reset the input chain as the default
iptables -F INPUT
iptables -P INPUT ACCEPT
Some links:
Squid Installation:
apt-get install squid
The configuration is in /etc/squid/squid.conf. To allow the local network to use the proxy:
# Add this before "http_access deny all"
acl our_networks src 10.4.15.0/24
http_access allow our_networks
To use a parent proxy:
cache_peer proxy.aau.edu.et     parent    8080  0  proxy-only no-query
Pay attention because /var/spool/squid will grow as the cache is used. The maximum cache size is set in the directive cache_dir. Information about squid access control is at http://www.squid-cache.org/Doc/FAQ/FAQ-10.html To check that the configuration has no syntactic errors: squid -k parse. To match urls:
acl forbiddensites url_regex [-i] regexp
For info about regular expressions:
man regex
Example filtering by regular expression:
acl skype url_regex -i [^A-Za-z]skype[^A-Za-z]
http_access deny skype
Transparent proxy setup: http://www.tldp.org/HOWTO/TransparentProxy.html
Problems found today Hiccups of the day:
  • swat does not run on Ubuntu because Ubuntu does not have inetd
  • swat does not allow root login on Ubuntu because root does not have a password
  • smbpasswd -a does not seem to update the timestamp of /var/lib/samba/passwd.tdb
  • cups web admin does not work on Ubuntu
  • LDAP is still not so intuitive to set up

17 July 2006

David Welton: Oregon - OSCON

After more than three years away from home, we're going on vacation to Oregon this summer. Luckily, that will coincide with OSCON in Portland, so hopefully it will be possible to meet some people there that I ordinarly wouldn't get to see. Write me email if you'd like to get together for a beer or something! The rest of the time, we'll be in Eugene, or travelling around the state.

Julien Danjou: My fingers' pleasure

Today I started hacking the us keymap of xorg to define my own custom keys. That's so funny. For people interested, here is how to do it:
% cd /usr/share/X11/xkb/symbols
% cp us mykeymap
% vi mykeymap
So far it's simple. Delete everything but keep the xkb_symbols "basic" part. The format is quite simple, so I won't explain it. I decided to use the right alt key to map several characters I want to use. For this, you have to add include "level3(ralt_switch)" after just before the last bracket. You can now add other characteres, for example I changed:
key <AB03>          [         c,    C         ]        ;
to
key <AB03>          [         c,    C,    copyright,   registered      ]        ;
So I can type the copyright symbole ( ) by pressing Alt right and c, and the registered symbol ( ) by pressing Alt right, shift and c. The characters name are located in the /usr/include/X11/keysymdef.h file. You can change your keymap with setxkbmap mykeymap and to change it definitely, just edit your /etc/X11/xorg.conf.

14 July 2006

Erich Schubert: Apropos english words in the german language...

Martin F. Krafft mentions the trend of (ab-) using english words in german product names, and even constructions like "downgeloadet" (i.e. using english words with german grammar). What I'm most annoyed by is that many people (especially techs...) think that these words are actually the proper terms. That this is actually "more correct" than "heruntergeladen". Just because that is the only way we've been using the term doesn't make it the proper word. To a native speaker, many of these words might sound rather odd, and they are just being used because there is no better match in the english language. So if there is one in the german language, we should be using them... for example "to indent". I guess for many people here this will solely apply to text formatting in editors. But I assume that for native speakers, this always will bring up "dents", too. Something negative, some slight damage. The german word, "einrücken" however doesn't have such a meaning. I still believe that to regular native speakers, terms such as "bump mapping" have a very funny sound. And that it's just us techs that probably learned the "bump mapping" term first, and "speed bumps" second, that this sounds "good".

13 July 2006

Martin F. Krafft: Pearls and Dents

In Germany's pharmacies (and all around the world), you can buy a tooth paste with "pearls". These are little, soft grains, and the combination of the seemingly suggested concept "sandpaper" (they even have to deny that on the front page of the product's home page) with the clean and beautiful image of "pearl" seem to lead people to believe that these particles will make your teeth twinkle in the dark. I am not in the capacity to judge whether those actually perform better deplaquification. The tooth paste goes by the name of "Pearls and Dents" (for non-German speakers). That's another German product carrying a name made of English words, which appears to be cool these days. I find it a sad development how English replaces German all over the German media and every day language use (second only to the germanification of English words, like "downgeloadet" -- the use of English words according to German grammar rules). But that's not the point, at least not this time. What I find even more disturbing is the stupidity of the masses that go with the flow, or even try to be creative at designing captive slogans, regardless of the widespread lack of command of the English language. "Dents" may be close to "dental", but it does not actually mean teeth. Thus I am left to wonder whether the manufacturer is trying to hint at what those little pearls actually do to your teeth, or whether it's just another instance of a crap marketing team (who'd probably be better off learning proper German first, before venturing into the domain of another language). Along similar lines, is it only me who thinks that Adidas' slogan "impossible is nothing" is just plain stupid. Are they trying to be extra clever by giving the all too common phrase "nothing is impossible" a witty twist (and failing at it)? Or are they instead hinting that "impossible" is for others -- wear Adidas and you'll encounter even less possible situations? PS: This post is dedicated to helix.

Erich Schubert: #debian-devel on freenode is no more

lilo, one of the Freenode admins and a regular on that channel flagged it as "abandoned" by renaming it to ##debian-devel. There were still around 150 users on that channel (as opposed to 315 on OFTC, the new official home); but according to his stats "about 16 lines of discussion per day, versus 103" joins - yeah, I guess you can call that mostly dead. Apparently the "##" prefix of a channel means it's somewhat inofficial or abandoned... well, that is some FreeNodeish thing I wasn't aware of. Note: apparently we can't change the topic of the new channel, and can't put up a message there about the move to OFTC... that sucks. I didn't follow the rename, but parted. I still have some other FreeNode channels left (#debian.de is still more active on Freenode), and there is #selinux; but I guess in a few month I'll actually stop using FreeNode now. (The #selinux channel isn't really interesting for me; nothing Debian-specific happening in there, mostly Fedora or Gentoo users looking for assistance.) P.S.: 'e's not dead. 'e's just restin'.

11 July 2006

Matthew Palmer: It's All So Simple When You Know How

As a followup to my Dapper is teh suck entry, it appears that my egregiously slow system is known bug. Of course, it'd be better if it were a fixed bug, but at least it's trivially work-aroundable (echo 1 >/sys/module/processor/parameters/max_cstate -- down from it's default, on my system at least, of 8). Apparently there's some "issues" with the SMP-compiled kernel on uniprocessor systems, and hitting that tunable down masks the problem, whatever it is. It's funny -- just the other day I was having a chat with the other sysadmin at a place I'm contracting at about the vagaries of SMP kernels on non-SMP machines, and he was amazed that you could have a modern system that didn't play nice with an SMP kernel. Now, it seems, I'm a walking, cursing example of the issue. I don't mind, though -- I'm playing Oolite at full speed again, so I'm happy.

Matthew Palmer: User Interfaces as Slideshows

Backstory: I recently found a new game. It's called Oolite, and is (probably unsurprisingly) a clone of that great old spacefaring game, Elite (for BBC Micro and C64, amongst others). This game (unlike the original!) uses OpenGL and hardware rendering, so it was a good motivation to get accelerated rendering going on my laptop (never bothered before; it's unlikely that DRI is going to make an Xterm run any faster, after all). The problem with DRI under Ubuntu Breezy on my laptop is that it makes the machine unstable. Every couple of hours, my screen would freeze, and I'd get a lovely collection of randomly-coloured 80x25 text-mode characters on my screen, flashing madly at me. That's the signal for "game over", apparently, and I'd have to reboot. Incidentally, this used to happen, but very rarely, before I turned DRI on, so it's not really DRI-specific, but it went from occasional irritation to regular irritation. End backstory.
So it was time to upgrade. "Dapper's Out", thought I. "May as well see what all of the fuss is about". I think the phrase "oops" correctly describes the result. For reasons which I have not fully determined yet, my system is now Dog Slow. (That's the technical term, anyway; I've got a few more colourful phrases for it that I'm using privately). What was, previously, a nice quick Xterm launch is now a slowly progressing set of concentric rectangles culminating in the eventual, lacklustre, appearance of a terminal window. Oolite, my new obsession, is like playing Quake3 (the last OpenGL game I really got into, many years ago) on a P-II 300 with no 3d graphics card -- here a frame, there a frame, oh, by the way, you died a couple of minutes ago. (And yes, before you ask, glxinfo says "direct rendering: Yes".) This isn't an old machine -- it's a Thinkpad T43, with gobs of RAM and a 1.7GHz processor. It ran Breezy like a charm. Now, my machine looks like a powerpoint presentation. I've got to put something onto my wife's "new" (P-III 700) laptop -- lord only knows what it'll think of Dapper. Other strangenesses I've noticed so far include: Ultimately, I think that the cause of my problem may be closely related to that last point. I need to find out what's chewing my machine's CPU and kill it dead. Oh won't that be fun. Well, enough moaning. Time to find the cause(s) of these problems and nail it/them to the floor.

Julien Danjou: sysrqd gets dedicated port number

IANA just accepted my request of dedicated and registered TCP port for sysrqd.
sysrqd 4094/tcp sysrq daemon
sysrqd 4094/udp sysrq daemon
I will release a new version today using these ports.

9 July 2006

Junichi Uekawa: Registered in a DNSBL.

Apparently, viper2.netfort.gr.jp, which has been a fixedaddress for the past 4 years or so, is registered indul.dnsbl.sorbs.net.For those people who are using DNSBL,please fix it.viper2.netfort.gr.jp is 219.75.232.131.And, is it my task or my ISP's task to fix this silly DNSBL?I don't think so.There are so many DNSBL services thatcontacting each and every such service is quiteunreasonable. The users of those services should really beresponsible for the maintenance of the blacklist.

Next.

Previous.