Re: Run SCO OpenServer in a VM?

2011-10-24 Thread Michael Cronenworth
On 10/23/2011 03:34 PM, Bill Davidsen wrote:
 Any hope that I could get KVM
 to provide usable serial ports to the VM using a modern card?

I don't think KVM will run SCO. It wouldn't last time I tried.

I have SCO running under VirtualBox and I have passed it serial ports 
from a PCI-Express card without a problem. SCO sees it as a dummy serial 
card.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread suvayu ali
On Mon, Oct 24, 2011 at 03:48, Abu Attar Musharih
abuattar.musha...@gmail.com wrote:
 4. if this last step shows you that connection is not happening, you
   can try looking at your router settings. there should be a way to
   port forward your ssh connections to port 22 of the machine you want
   to use as a server.

 The problem is, ssh does not work from another online laptop to to this 
 machine.
 Neither does ping.

Can you see entries corresponding to each login attempt in /var/log/secure?

-- 
Suvayu

Open source is the future. It sets us free.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: More printer strangeness

2011-10-24 Thread Tim Waugh
On Sun, 2011-10-23 at 18:47 -0700, Paolo Galtieri wrote:
 Folks,
   I'm seeing more printer strangeness.  I ran s-c-p and 3 printers
 show which I did not explicitly add.  All three have a Device URI of
 file:///dev/null.
 
 If I delete them they go away momentarily and then all re-appear
 again.  There is no way to actually print to them so why are they
 present?

Sounds like there might be a CUPS system on the network which is
advertising bad queues, or else the printer cache is upset.

Try:

cupsctl --no-remote-printers
service cups stop
rm -f /var/cache/cups/printers.cache
service cups start

Wait for a minute or two.  Do the queues show now?

How about after 'cupsctl --remote-printers'?

Tim.
*/



signature.asc
Description: This is a digitally signed message part
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread Abu Attar Musharih
On Mon, Oct 24, 2011 at 4:35 PM, suvayu ali fatkasuvayu+li...@gmail.com wrote:

 Can you see entries corresponding to each login attempt in /var/log/secure?

I tried INCOMING ssh several times  and check file /var/log/secure
No entries related to login attempt found.
Now, it becomes even worse. Yesterday I could do OUTGOING ssh, but not anymore.
The following site is inaccessible

http://www.yougetsignal.com/tools/open-ports/

While using different provider, there is no problem.

Regards,
AA
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread Marko Vojinovic
On Monday 24 October 2011 12:15:03 Abu Attar Musharih wrote:
 I tried INCOMING ssh several times  and check file /var/log/secure
 No entries related to login attempt found.
 Now, it becomes even worse. Yesterday I could do OUTGOING ssh, but not
 anymore. The following site is inaccessible
 
 http://www.yougetsignal.com/tools/open-ports/
 
 While using different provider, there is no problem.

I think that by now it is obvious that the problem is not with your machine, 
and that your ISP has closed down the ports. Your choices are probably the 
following:

(1) Talk to your provider and ask them to open all ports to your IP. This is a 
reasonable request, since you have a public IP number, and should be able to 
use it however you like (provided that nobody complains about spam or attacks 
coming from your IP). Note, though, that the ISP may choose to charge you 
extra money for this.

(2) Change the ISP for another that is more forthcoming.

(3) Scan your IP from outside for any open ports, pick one and use it for 
ssh/openvpn/whatever, without discussing it with your ISP. This will work, but 
may not be considered legal by the ISP. Also, you might have a hard time 
choosing a port, if only a few of them are open, since you may need them all 
for their regular job (like ports 80/443 for the web, 25 for e-mail, etc.).

YMMV.

Best, :-)
Marko

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: NFS issues

2011-10-24 Thread Kernel Guardian
On 23 October 2011 23:11, Gerhard Magnus mag...@agora.rdrop.com wrote:
 I can ping (and ssh) the server from the client.
 When I restart nfs and nfslock on the server I get this in the
 server /var/log/messages:
 PuteF kernel: [25572.902466] NFSD: Using /var/lib/nfs/v4recovery as the
 NFSv4 state recovery directory
 PuteF kernel: [25572.902504] NFSD: starting 90-second grace period
 PuteF rpc.mountd[8699]: Version 1.2.4 starting
 But on the client, mount /home/magnusg/Music returns:
 mount.nfs: access denied by server while mounting
 192.168.1.14:/home/magnusg/Music

 ---

 Restating the problem from yesterday:

 On the server, running FC15 (192.168.1.14):
 (1) My /etc/exports file looks like this:
 /home/magnusg/Music  192.168.1.12,192.168.1.13(rw,insecure,sync,nohide)
 (2) Using the system-config-nfs General Options tab I have Allow
 connections from port 1024 and higher checked.
 (3) I have services nfs and nfslock running on levels 3,4,5.
 (4) In /etc/sysconfig/nfs I've set these ports:
 RQUOTAD_PORT=4000
 LOCKD_TCPPORT=4001
 LOCKD_UDPPORT=4001
 MOUNTD_PORT=4002
 STATD_PORT=4003
 (5) In the firewall I have these ports open:
 NFSV4 2049 (tcp)
 4000-4003 (tcp and udp)
 111 (tcp and udp)

 on the client, running FC13 (192.168.1.13):
 (1) I added this to /etc/fstab:
 192.168.1.14:/home/magnusg/Music /home/magnusg/Music nfs
 rw,auto,hard,intr,bg 0 0
 (2) Services netfs, nfslock and rpcbind are running on levels 3,4,5.

netfs or nfs?
netfs is client rc script to mount fstabs network fs mounts (nfs, smb, )
nfs is rc script for nfs server.

I'm not sure if F13 have nfsv4.
try to set mountd_nfs_v3=yes in /etc/sysconfig/nfs file.

what is return rpcinfo -p (nfs_server) from client comp?
what is the status of selinux on server and client?
try with:
# setenforce 0
# service iptables stop
on client and server and try to mount nfs share.

 When I boot the client and get to the Mounting NFS filesystems section
 I don't get error messages -- but I do see this:
 mount.nfs: backgrounding 192.168.1.14:/home/magnusg/Music
 : mount options
 hard,intr,bg,vers=4,addr=192.168.1.14,clientaddr=192.168.1.13
 /home/magnusg/Music remains unmounted


 --
 users mailing list
 users@lists.fedoraproject.org
 To unsubscribe or change subscription options:
 https://admin.fedoraproject.org/mailman/listinfo/users
 Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread Reindl Harald


Am 23.10.2011 11:09, schrieb Abu Attar Musharih:
 The customer service said that  ssh is not allowed. So, what to do
 then? I badly need a server with global IP for experimenting grid
 computing

[root@srv-rhsoft:~]$ cat /etc/ssh/sshd_config
Port 22
Port 10022
Protocol 2
..

if we are spaeking OUTGOING ssh from your home-network is not allowed by
your ISP then search a new one because this is unacceptable








signature.asc
Description: OpenPGP digital signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread Reindl Harald


Am 23.10.2011 12:09, schrieb suvayu ali:
 Hi Abu Attar,
 
 On Sun, Oct 23, 2011 at 11:09, Abu Attar Musharih
 abuattar.musha...@gmail.com wrote:
 The customer service said that  ssh is not allowed. So, what to do
 then? I badly need a server with global IP for experimenting grid
 computing.
 
 To be absolutely sure you can try the following.
 
 1. confirm your global ip (e.g. here: http://checkip.dyndns.com)
 2. check sshd is running at your end and is using port 22. you can try
ssh-ing to another local user to check easily.
 3. nc -z global.ip 22 (from a machine outside your local network)
 4. if this last step shows you that connection is not happening, you
can try looking at your router settings. there should be a way to
port forward your ssh connections to port 22 of the machine you want
to use as a server

mh and hwo do you start nc if you can not connect to the machine and
if you drive to the machine doing this manually what after internet
is shortly down - driving all the time around?

put sshd on port 10022 and all is well

this has the additional benefit to get rid of the most
idiots trying password-attacks all day long




signature.asc
Description: OpenPGP digital signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread Reindl Harald


Am 23.10.2011 12:20, schrieb suvayu ali:

On Sun, Oct 23, 2011 at 12:12, Reindl Harald h.rei...@thelounge.net wrote:

 mh and hwo do you start nc if you can not connect to the machine and
 if you drive to the machine doing this manually what after internet
 is shortly down - driving all the time around?

I didn't say that machine, I said a machine, as in any other machine
not on the same local network. I am assuming if the OP wants to work
with grid computing he has access to some other
server/desktop/whatever which is connected to the internet. And he
doesn't have to drive there, he can always use ssh. The OP never said
ssh to some machine outside is not working, so its a fair assumption
that he can.

well, you can use 20 different machines to achieve a result
or simply change a port so it is not blocked by the isp 

what do you think is smarter?




signature.asc
Description: OpenPGP digital signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread Reindl Harald


Am 23.10.2011 12:58, schrieb suvayu ali:

 I am no expert, I just said what worked for me in the past. I ssh into
 many systems everyday so changing to non-standard ports is
 inconvenient

where is there any single problem if you can read manuals?
you have to specify the port only once per client and after
that rsync, ssh, scp and sftp even in konqueror is using this
port

cat /etc/ssh/ssh_config 
Host*
GSSAPIAuthentication   no
Compression   yes
CompressionLevel9
Protocol2
StrictHostKeyChecking ask

Host  yourhost.domain.tld
Port10022




signature.asc
Description: OpenPGP digital signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread Reindl Harald


Am 23.10.2011 13:09, schrieb suvayu ali:

On Sun, Oct 23, 2011 at 13:04, Reindl Harald h.rei...@thelounge.net wrote:

 Am 23.10.2011 12:58, schrieb suvayu ali:

 I am no expert, I just said what worked for me in the past. I ssh into
 many systems everyday so changing to non-standard ports is
 inconvenient
 where is there any single problem if you can read manuals?
 you have to specify the port only once per client and after
 that rsync, ssh, scp and sftp even in konqueror is using this
 port
 Please read carefully. I ssh to *multiple* machines. The list of
 clients is hundreds, also I don't have the complete list.

well i maintain 40 machines, all with non-standard-port and connecting
multiple hundret times to omst of them each day

/home/username/.ssh/id_rsa is needed on all clients or do you really
allow password-login on standard-port and type the password all day long?
so there is supported a file called config in the same folder

 I mostly have to login to a distributed computing resource where the
 physical node you is selected dynamically based on availability and
 load. So I don't have the complete list of IPs.

ip-addresses are not interesting here

failovers are working dns-based, so your hostname is the same
the ssh-client config is hostname-based






signature.asc
Description: OpenPGP digital signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread Steven Stern
On 10/23/2011 06:04 AM, Reindl Harald wrote:
 
 
 Am 23.10.2011 12:58, schrieb suvayu ali:
 
 I am no expert, I just said what worked for me in the past. I ssh into
 many systems everyday so changing to non-standard ports is
 inconvenient
 
 where is there any single problem if you can read manuals?
 you have to specify the port only once per client and after
 that rsync, ssh, scp and sftp even in konqueror is using this
 port
 
 cat /etc/ssh/ssh_config 
 Host*
 GSSAPIAuthentication   no
 Compression   yes
 CompressionLevel9
 Protocol2
 StrictHostKeyChecking ask
 
 Host  yourhost.domain.tld
 Port10022
 

If the issue is with the ISP blocking 22, then leave SSHD on port 22 and
simply map some external port on the WAN router (e.g., 10022) to 22
internally. It makes life a lot easier, because no matter how many
machines you have on the internal network, you control it from a single
point.



-- 
-- Steve
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread Reindl Harald

Am 23.10.2011 14:10, schrieb suvayu ali:

 I know about ~/.ssh/config and I use it. Logging in to the remote nodes
 is not the issue in my case. I use kerberos to authenticate anyway. The
 issue is when I want to access my machine from those remote nodes, I
 have to copy the section relevant to my machine to the remote nodes.

if you have to maintain many hosts you should invest an hour
for a infrastructure and after that it does not matter if you
have 10, 100 or thousands of hosts where you need the same
file distributed

sorry, but you can tell me what you want - there is no single problem
maintaining thousands of machines with ssh on non-stadnard-port

and if the ISP of the OP is blocking incoming port 22 he has
no other solution - so what baout are we speaking here?

your nc will not work for him and your problem maintaining
multiple machines does not affect the whole world because
most does not have so many hosts and the others are knowing
about shell-scripts
___


[root@buildserver:~]$ cat /Volumes/dune/buildserver/server-list.txt
#!/bin/bash
RH_TARGET_SERVERS=()
RH_TARGET_SERVERS[1]=host1
RH_TARGET_SERVERS[2]=host2
RH_TARGET_SERVERS[3]=host3
RH_TARGET_SERVERS[4]=host4
RH_TARGET_SERVERS[5]=host5
RH_TARGET_SERVERS[6]=host6

[root@buildserver:~]$ cat /Volumes/dune/buildserver/distribute-file.sh
#!/bin/bash
source /Volumes/dune/buildserver/server-list.txt
function rh_push_file
{
 echo $1
 RSYNC_PARAMS='--ipv4 --compress --times --progress --force --links --perms 
--owner --group'
 /bin/nice /usr/bin/rsync $RSYNC_PARAMS --rsync-path='nice -n 19 rsync' $2 
root@$1:$2
 echo 
}
if [ $2 ==  ]
then
 echo   /dev/null
else
 echo Bitte Parameter in Quotes setzen
 exit
fi
for item in ${RH_TARGET_SERVERS[*]}
do
  rh_push_file $item $1
done

[root@buildserver:~]$ cat /Volumes/dune/buildserver/distribute-command.sh
#!/bin/bash
source /Volumes/dune/buildserver/server-list.txt
function rh_run_command
{
 echo $1
 ssh root@$1 $2
 echo 
}
if [ $2 ==  ]
then
 echo   /dev/null
else
 echo Bitte Parameter in Quotes setzen
 exit
fi
echo 
for item in ${RH_TARGET_SERVERS[*]}
do
  rh_run_command $item $1
done



signature.asc
Description: OpenPGP digital signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Apache2 problem - Ubuntu 11.10

2011-10-24 Thread Reindl Harald


Am 23.10.2011 14:19, schrieb Craig White:
 considering that this is Fedora Users List, your question seems quite
 out of place.

that is true

 You might actually want to attach an strace to the PID of your running
 apache to see what is happening (ie, the error) but I would guess that
 you should probably remove/re-install apache2 on your Ubuntu server

it would be the frist time taht reinstall a package on a system with
a package-managment would change anything - this is not windows

reinstall does never touch configurations and most mistakes leading
to crahses are wrong configurations with third-party modules and these
are also not touched be reinstall the main-package





signature.asc
Description: OpenPGP digital signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Creating partitions

2011-10-24 Thread Reindl Harald


Am 23.10.2011 16:57, schrieb Miguel Cardenas:
 For years I used to create 2 primary partitions, SWAP and EXT3, but now I 
 found that Fedora 
 requires a different layout with more partitions like other *nix operating 
 systems that distribute 
 the space in more areas for home, root, usr, etc.

fedora REQUIRES nothing but a partition

you can even use a single partition without seperate boot
you can manually define a partition layout in anaconda

/usr is SURELY not required and not recommended for several reasons
and not part of teh default partition scheme - per default fedora
would install LVM (a not so smart default)

but it is not wise to have /home on the same partition as the system
if you ever want to reinstall it and a small /boot is also wise because
look back at times where / as ext4 was possible but not for /boot

[root@ns2:~]$ df -hT
Dateisystem   Typ Size  Used Avail Use% Eingehängt auf
/dev/sdb1 ext46,0G  1,2G  4,8G  20% /
/dev/sda1 ext4494M   20M  475M   4% /boot
[root@ns2:~]$ cat /etc/redhat-release
Fedora release 14 (Laughlin)

[root@buildserver64:~]$ df -hT | grep -v tmpf
Dateisystem   TypGröße Benut  Verf Ben%% Eingehängt auf
rootfs  rootfs 15G  4,8G   10G  33% /
/dev/sdb1 ext4 15G  4,8G   10G  33% /
/dev/sda1 ext4190M   43M  148M  23% /boot
[root@buildserver64:~]$ cat /etc/redhat-release
Fedora release 15 (Lovelock)

 I still don't like the idea of an independent boot
 partition but let's do it in the Fedora way... 

/boot on a own partition doe snot hurt and offers more flexibility
but it is not required

so, I want to know if this layout may work for me... I want to ask
 before doing it to save hours of installation just to try and see the 
 results...
 
 #1 PRIMARY type 0c (Win95 Fat32 LBA)
 #2 EXTENDED
  A - SWAP type 82
  B - BOOT /boot type 83 (linux ext3)
  C - ROOT / type 83 (linux ext3)

why will anybody use ext3 these days instead ext4?

 And one additional doubt... Fedora worked fine on this laptop but just bought 
 a new one, it comes with Windows7
 preinstalled and want to keep the original system backed up... Do you think 
 it is safe to use Clonezilla for any
 modern hard disk? My doubt is because I have a relatively old IDE disk (80Gb) 
 that after restoring a Clonezilla
 backup it does not boot anymore, I guess it is due a possible different 
 geometry interpretation by my installed
 linux and the Clonezilla bootable linux, since the disk is ok and works 
 always perfect...

you can even boot with a live-cd and make dd if=dev/sda of=/dev/sdb bs=16M 
and make
a bytewise clone on an additional disk or even use dd over a pipe and ssh to 
clone
a whole machine including a raid10 - linux is not as stoopid as windows if 
hardware
changes

 And, after the backup, during the Fedora installation, it asks how to use the 
 hard disk, there is an option to
 shrink a used partition, but would it work with Win7? As far as I know a NTFS 
 partition can not be shrinked... is
 it possible? can you comment something about this?

be advised to make a full backup!

NTFS can be shrinked all the last years and current gparted is supporting it
but maybe winodws is too dumb to recognize the change and will not boot

can not say anything about this because i never use windows outside vmware



signature.asc
Description: OpenPGP digital signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Creating partitions

2011-10-24 Thread Reindl Harald


Am 23.10.2011 20:22, schrieb Joe Zeff:

On 10/23/2011 07:57 AM, Miguel Cardenas wrote:

 I would like to keep simple my disk, and reading the Fedora installation
 guide found that there are only 3 partitions required, SWAP, BOOT (ext3)
 and ROOT / (ext3)... I still don't like the idea of an independent boot
 partition but let's do it in the Fedora way... so, I want to know if
 this layout may work for me... I want to ask before doing it to save
 hours of installation just to try and see the results...
You only need a /boot partition if root is ext4, because legacy grub 
doesn't grok it.  If you only use ext3, you can get away with two 
partitions: / and swap.  (I have a separate /home, but no /boot.)

__

this is simply not true
since F14 for sure ext4 is default, F13 i neve installed from scratch

/dev/md1  ext4 29G  8,0G   21G  28% /
/dev/md0  ext4485M   51M  430M  11% /boot
/dev/md2  ext43,6T  1,2T  2,4T  34% /mnt/data




signature.asc
Description: OpenPGP digital signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread Reindl Harald


Am 24.10.2011 05:07, schrieb Marko Vojinovic:
 On Monday 24 October 2011 03:35:12 Ed Greshko wrote:
 On 10/24/2011 10:18 AM, Marko Vojinovic wrote:
 P.S. Sorry folks, just couldn't resist... :-D No hard feelings, Ed! :-)

 No hard feelings But.

 ISP ≠ Employer
 
 Oh, so if they are paying you, it's unethical to break the firewall, but if 
 you 
 are paying them, then it's perfectly ok to do so?

if you really still not understand why someone MUST NOT break in through
his companies fierwalls you should be fired now and never get a job
again whereever this could be a topic



signature.asc
Description: OpenPGP digital signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Reading an OpenServer hard drive with Fedora

2011-10-24 Thread Kernel Guardian
SCO OpenServer version?
If i remember well, i was read and successfully recovering data from
OpenServer 3 and 5.0.4 disks with SuSe 8 or 9 ( have on some CD's in
the basement).[my first Open Server 3 installation media was have 78
floppies.]
Reading disk content would depend on file system in use on those disks.
Any Linux with 2.4 kernel can read SCO disk, maybe on some must
recompile kernel to include support for different type of disk
partitioning schemes and file systems.
I forgot a lot of things, last time when administering SCO's is almost
12 years ago.

SCO Unixware is different story.

Anyhow, SCO use regular partitions, and slices are under them.


On 24 October 2011 04:48, fred smith fre...@fcshome.stoneham.ma.us wrote:
 On Sun, Oct 23, 2011 at 09:12:05PM -0400, Bill Davidsen wrote:
 Is there a way to get at the odd SysV volume manager slices if I have access 
 to
 an OS drive? The disk or partition is split into slices, sort of like a crude
 LVM. I need to recover the files from the disk, based on a full raw backup of
 the drive or the drive itself.

 I was hoping for a fuser implementation or so, since the extra cost 
 networking
 stuff wasn't bought when the system was built. A local business depends on 
 this,
 and I'm trying to help them recover.


 Bill:

 I'm having a somewhat vague recollection that much much older versions
 of Linux (from circa '95 when I was using Slackware 2.1 with the very up
 to date 1.5.9 kernel) had some flavor of support for SCO partitions. I
 have some memory of having read some docs or notes online somewhere
 about it. I don't think I've ever tried mounting a HD partition from
 one of them on linux, though.

 If it would be any help, I probably still have the CD with that ancient
 Slackware, and also a (now) really ancient Red Hat 4.1 CD.  ISO images
 could be created in need.

 Fred

 --
  Fred Smith -- fre...@fcshome.stoneham.ma.us -
                        The Lord is like a strong tower.
             Those who do what is right can run to him for safety.
 --- Proverbs 18:10 (niv) -
 --
 users mailing list
 users@lists.fedoraproject.org
 To unsubscribe or change subscription options:
 https://admin.fedoraproject.org/mailman/listinfo/users
 Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


They can't hear me gtalk, skype

2011-10-24 Thread Joe Feely
I suspect this is an old cookie, and I fear I'm not seeing something
really simple or even obvious.
I can hear them, put they can't hear me.
Except once on a skype test call, I hear my voice, and on one gtalk
(Google) they could hear me after I set the left hand slider to zero and
the right hand slider to max in Alsa mixer.
I'm using XFCE in F15, been searching and reading alsamixer and other
stuff on web and man pages to no avail.
Any pointers, direction etc. Any info I could post to help?

Thanks.

-- 
Joe Feely


-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Best FOSS alternative for skype?

2011-10-24 Thread Joe Wulf
Seconding the move in this direction.
Anything is better then a Micro$loth tainted product.



- Original Message -
 From: Richard Shaw hobbes1...@gmail.com
 To: Community support for Fedora users users@lists.fedoraproject.org
 Cc: 
 Sent: Sunday, October 23, 2011 5:08 PM
 Subject: Re: Best FOSS alternative for skype?
 
 Well, reviving this old thread since I actually got a build of JItsi
 that appears to work just in case anyone's interested. It still needs
 a lot of work to remove some 3rd party files before it could possible
 be included in Fedora though.
 
 http://hobbes1069.fedorapeople.org/jitsi/
 -- 
 users mailing list
 users@lists.fedoraproject.org
 To unsubscribe or change subscription options:
 https://admin.fedoraproject.org/mailman/listinfo/users
 Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: They can't hear me gtalk, skype

2011-10-24 Thread Gilboa Davara
On Mon, Oct 24, 2011 at 4:02 PM, Joe Feely joe.fe...@googlemail.com wrote:
 I suspect this is an old cookie, and I fear I'm not seeing something
 really simple or even obvious.
 I can hear them, put they can't hear me.
 Except once on a skype test call, I hear my voice, and on one gtalk
 (Google) they could hear me after I set the left hand slider to zero and
 the right hand slider to max in Alsa mixer.
 I'm using XFCE in F15, been searching and reading alsamixer and other
 stuff on web and man pages to no avail.
 Any pointers, direction etc. Any info I could post to help?

 Thanks.

I'm more-or-less seeing the same thing on a number of Asus 1201N
netbooks we have at our company.
Unless you lower the volume of one side and increase the volume of the
other, the built in microphone simply doesn't work.

- Gilboa
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: NFS issues

2011-10-24 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 10/22/2011 11:20 PM, Genes MailLists wrote:
 On 10/22/2011 08:43 PM, Gerhard Magnus wrote:
 
 I didn't get anything running sealert -b. The widget SELinux
 Alert Browser showed no alerts. In /var/log/messages I get this
 message repeated at intervals: Oct 22 17:37:49 PuteB mount[1460]:
 mount to NFS server '192.168.1.14' failed: Connection refused,
 retrying
 
 
 This sounds like its on the client machine - was hoping for logs
 from the NFS server ..

Doubtful an SELinux error would be a time out, almost always
permission denied.  I would expect you have a problem in Firewall or
/etc/exports.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk6lhxQACgkQrlYvE4MpobNaCgCdFa0TgM3/8cZZJzMMO27XN1El
vhAAn0LHLcstwxfp3bqSngnAdFAlOhKM
=eUOT
-END PGP SIGNATURE-
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Best FOSS alternative for skype?

2011-10-24 Thread Zoltan Hoppar
Let it be the default added software. Also I suggest to check out
Chandler (www.chandlerproject.org) - maybe it improves our
communication through this. Chandler is barely written in python, so
please check it out.

Thx,

Zoltan

2011/10/24 Joe Wulf joe_w...@yahoo.com:
 Seconding the move in this direction.
 Anything is better then a Micro$loth tainted product.



 - Original Message -
 From: Richard Shaw hobbes1...@gmail.com
 To: Community support for Fedora users users@lists.fedoraproject.org
 Cc:
 Sent: Sunday, October 23, 2011 5:08 PM
 Subject: Re: Best FOSS alternative for skype?

 Well, reviving this old thread since I actually got a build of JItsi
 that appears to work just in case anyone's interested. It still needs
 a lot of work to remove some 3rd party files before it could possible
 be included in Fedora though.

 http://hobbes1069.fedorapeople.org/jitsi/
 --
 users mailing list
 users@lists.fedoraproject.org
 To unsubscribe or change subscription options:
 https://admin.fedoraproject.org/mailman/listinfo/users
 Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

 --
 users mailing list
 users@lists.fedoraproject.org
 To unsubscribe or change subscription options:
 https://admin.fedoraproject.org/mailman/listinfo/users
 Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines




-- 
PGP:  06853DF7
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


help me

2011-10-24 Thread shailesh

mmx 352 modem (micromax) not connecting 
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread Tim
On Sun, 2011-10-23 at 12:12 +0200, Reindl Harald wrote:
 put sshd on port 10022 and all is well
  
 this has the additional benefit to get rid of the most
 idiots trying password-attacks all day long

Though it won't stop the more determined ones.  Like those who scan for
all open ports, and then look at what responses they get to determine
what sort of server is listening.

If you have a (potentially) vulnerable server exposed, using something
like fail2ban (if I remembered the name correctly) can be a good idea.
It allows a limited number of attempts from an IP, then temporarily
blacklists that IP.  A hacker would have to have tremendous luck to
guess a password in only two attempts, for instance.


-- 
[tim@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.



-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: help me

2011-10-24 Thread agraham
On 10/24/2011 05:10 PM, shailesh wrote:

 mmx 352 modem (micromax) not connecting


You could be waiting a long time while we all absorb this data
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: help me

2011-10-24 Thread Larry Brower
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 10/24/2011 11:10 AM, shailesh wrote:
 
 mmx 352 modem (micromax) not connecting
 
 http://sigads.rediff.com/RealMedia/ads/click_nx.ads/www.rediffmail.com/signatureline.htm@Middle?
 Follow *_Rediff Deal ho jaye!
 http://track.rediff.com/click?url=___http://dealhojaye.rediff.com?sc_cid=rediffmailsignature___cmp=signaturelnk=rediffmailsignaturenewservice=deals_*
  to
 get exciting offers in your city everyday.
 


If you want help Id suggest you actually provide a better description of
the problem as opposed to not connecting. The phrase not connecting
is not helpful and you wont get any real help.

You may want to reference http://catb.org/~esr/faqs/smart-questions.html




-BEGIN PGP SIGNATURE-
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=YWIw
-END PGP SIGNATURE-
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread suvayu ali
On Mon, Oct 24, 2011 at 18:12, Tim ignored_mail...@yahoo.com.au wrote:
 If you have a (potentially) vulnerable server exposed, using something
 like fail2ban (if I remembered the name correctly) can be a good idea.
 It allows a limited number of attempts from an IP, then temporarily
 blacklists that IP.  A hacker would have to have tremendous luck to
 guess a password in only two attempts, for instance.

An alternative to fail2ban is denyhosts.

-- 
Suvayu

Open source is the future. It sets us free.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


usb serial console and systemd?

2011-10-24 Thread Kevin Martin
I can't seem to get systemd to spawn a getty on a USB tty.  Here's what I've 
done:

# ln -sf /lib/systemd/system/getty@.service 
/etc/systemd/system/getty.target.wants/getty@ttyUSB0.service
# systemctl daemon-reload
# systemctl start getty@ttyUSB0.service

When I look at the gettys that are running, all I see are:

root  1153 1  0 Oct22 tty6 00:00:00 /sbin/agetty tty6 38400
root  1154 1  0 Oct22 tty4 00:00:00 /sbin/agetty tty4 38400
root  1155 1  0 Oct22 tty5 00:00:00 /sbin/agetty tty5 38400
root  1156 1  0 Oct22 tty3 00:00:00 /sbin/agetty tty3 38400
root  1157 1  0 Oct22 tty2 00:00:00 /sbin/agetty tty2 38400


I *do* have a ttyUSB0:

[27151.541139] usb 1-1.2: pl2303 converter now attached to ttyUSB0


But can't seem to get a getty.  What have I missed (sure was easier under 
inittab)?  Oh, and where do you set the speed, vt, etc. for the getty under 
systemd?



-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


[389-users] NIS: doubled user entries with ypcat group

2011-10-24 Thread account

Hello, we run several 389 DirectoryServer with a master slave replication.

To support our old solaris enviroment we use  
https://fedorahosted.org/slapi-nis/; for NIS:
I use slapi-nis 0.26 from the Fedorarepository (src rpm) and compiled  
it for RH5. Solaris and other types of machines are running well. id  
user and groups user ist working. But I get with command ypcat  
groups doubled user entries for each group.

When I have a group for example: group test1 with user user1 user2  
I get with ypcat group | grep test1:
test1: user1 user2 user1 user2

When I execute the command: id user1 I get test1 only once.

In our dse.ldif I have following entries for group.byname:
dn: nis-domain=+nis-map=group.byname,cn=NIS Server,cn=plugins,cn=config
objectClass: extensibleObject
objectClass: top
nis-domain: 
nis-map: group.byname
nis-base: ou=Groups, dc=y, dc=com

and group.gid
dn: nis-domain=+nis-map=group.bygid,cn=NIS Server,cn=plugins,cn=config
objectClass: extensibleObject
objectClass: top
nis-domain: 
nis-map: group.bygid
nis-base: ou=Groups, dc=y, dc=com


With LDAP I get:
[root@NIS2LDAP ~]# ldapsearch -x -h localhost -s base -b  
cn=test1,ou=groups,dc=y,dc=com
# extended LDIF
#
# LDAPv3
# base cn=test1,ou=groups,dc=y,dc=com with scope baseObject
# filter: (objectclass=*)
# requesting: ALL
#

# test1, Groups, y.com
dn: cn=test1,ou=Groups,dc=y,dc=com
objectClass: posixGroup
objectClass: top
objectClass: groupOfUniqueNames
cn: tiger
gidNumber: 484
memberUid: user1
memberUid: user2
uniqueMember: uid=user1,ou=People,dc=y,dc=com
uniqueMember: uid=user2,ou=People,dc=y,dc=com

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1


Is memberUid / uniqueMember a problem ?


thanks, br cnu


--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


fail2ban vs. logrotate

2011-10-24 Thread Mike Wohlgemuth
I've installed fail2ban on Fedora 15 to block repeated failed ssh 
connections.  It works great up until logrotate kicks in.  When it 
rotates /var/log/secure then fail2ban stops noticing failed ssh 
attempts.  Using fail2ban-client to reload the jail fixes the problem, 
but it also causes fail2ban to forget all currently banned IP 
addresses.  I've found scripts online that will allow for extracting the 
current bans before reloading, and then applying them again after, but 
that seems pretty extreme. I can't help but think I must be missing 
something simple that will get fail2ban to notice that the logs have 
been rotated.  Has anyone else seeing this issue?  I see some reports in 
bugzilla about fail2ban, but nothing that is definitely this problem.

Thanks
Mike
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Just installed RHEL 6.1 and i have 0 repositories

2011-10-24 Thread Maxime Alarie
 Hi,

Im just wondering if someone know how to install packages on RHEL 6.1, I
have installed the demo version  but the repositories are empty. I want
to install a GUI on that, along with DB2 and Websphere..

Anybody know how to do that?  

 

Thanks.

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


bluetooth problems F15

2011-10-24 Thread Genes MailLists

  F15 - I notice that on my laptop - sometimes - not always - bluetooth
stops working after a wake from sleep. It works most of the time, and
always works on a fresh reboot - but I usually sleep my laptop unless
I'm rebooting a new kernel.

  Bluetooth works again by restarting:

systemctl restart bluetooth.service

  I have standard F15 bluez.x86_64 version 4.87-7.fc15.

  I note that there are newer versions (4.96) but not for F15 for some
reason.

  The bug looks similar to this one

https://bugzilla.redhat.com/show_bug.cgi?id=716509

  but this has had no activity since the original bz 5 months ago.


 Anyone else aware of issues or resolutions?

 Thanks ..

  gene/
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: fail2ban vs. logrotate

2011-10-24 Thread Marvin Kosmal
On Mon, Oct 24, 2011 at 10:14 AM, Mike Wohlgemuth m...@woogie.net wrote:

 I've installed fail2ban on Fedora 15 to block repeated failed ssh
 connections.  It works great up until logrotate kicks in.  When it
 rotates /var/log/secure then fail2ban stops noticing failed ssh
 attempts.  Using fail2ban-client to reload the jail fixes the problem,
 but it also causes fail2ban to forget all currently banned IP
 addresses.  I've found scripts online that will allow for extracting the
 current bans before reloading, and then applying them again after, but
 that seems pretty extreme. I can't help but think I must be missing
 something simple that will get fail2ban to notice that the logs have
 been rotated.  Has anyone else seeing this issue?  I see some reports in
 bugzilla about fail2ban, but nothing that is definitely this problem.

 Thanks
 Mike
 --



Hi

This does not address your problem directly.

I use a program called  denyhosts for blocking ssh attempts.  It creates a
list in  /etc/hosts.deny.

Great program.

Good luck

Marvin
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Just installed RHEL 6.1 and i have 0 repositories

2011-10-24 Thread Lázaro Morales
En 24/10/2011 13:19:28, Maxime Alarie mala...@processia.com escribió:

 Im just wondering if someone know how to install packages on RHEL 6.1, I  
 have installed the demo version  but the repositories are empty

You should have in /etc/yum.repos.d/ folder a file rhel-base.repo,  
check inside in the property enabled and set it to 1 and then try:

# yum update

To download the package database and the try installing a desktop  
environment like GNOME or XCFE.

Regards,
Lázaro.

Este mensaje de correo electrónico ha sido procesado por el servidor de 
Frioclima


-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: fail2ban vs. logrotate

2011-10-24 Thread suvayu ali
On Mon, Oct 24, 2011 at 20:17, Marvin Kosmal mkos...@gmail.com wrote:
 Hi

 This does not address your problem directly.

 I use a program called  denyhosts for blocking ssh attempts.  It creates a
 list in  /etc/hosts.deny.

 Great program.


+1 to denyhosts.

 Good luck

 Marvin




-- 
Suvayu

Open source is the future. It sets us free.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Best FOSS alternative for skype?

2011-10-24 Thread Stuart McGraw
On 10/24/2011 09:33 AM, Zoltan Hoppar wrote:
 Let it be the default added software. Also I suggest to check out
 Chandler (www.chandlerproject.org) - maybe it improves our
 communication through this. Chandler is barely written in python, so
 please check it out.

The Chandler project appears comatose and no longer developed.

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


RE: Just installed RHEL 6.1 and i have 0 repositories

2011-10-24 Thread Maxime Alarie
Thanks for the quick reply,

The file is empty..

[root@RHELV6 yum.repos.d]# cat redhat.repo
#
# Red Hat Repositories
# Managed by (rhsm) subscription-manager
#[root@RHELV6 yum.repos.d]#

-Original Message-
From: users-boun...@lists.fedoraproject.org 
[mailto:users-boun...@lists.fedoraproject.org] On Behalf Of Lázaro Morales
Sent: Monday, October 24, 2011 2:27 PM
To: Community support for Fedora users
Subject: Re: Just installed RHEL 6.1 and i have 0 repositories

En 24/10/2011 13:19:28, Maxime Alarie mala...@processia.com escribió:

 Im just wondering if someone know how to install packages on RHEL 6.1, I  
 have installed the demo version  but the repositories are empty

You should have in /etc/yum.repos.d/ folder a file rhel-base.repo,  
check inside in the property enabled and set it to 1 and then try:

# yum update

To download the package database and the try installing a desktop  
environment like GNOME or XCFE.

Regards,
Lázaro.

Este mensaje de correo electrónico ha sido procesado por el servidor de 
Frioclima


-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Unable to ssh nodes with global IP

2011-10-24 Thread Reindl Harald


Am 24.10.2011 18:12, schrieb Tim:
 On Sun, 2011-10-23 at 12:12 +0200, Reindl Harald wrote:
 put sshd on port 10022 and all is well
  
 this has the additional benefit to get rid of the most
 idiots trying password-attacks all day long
 
 Though it won't stop the more determined ones.  Like those who scan for
 all open ports, and then look at what responses they get to determine
 what sort of server is listening.
 
 If you have a (potentially) vulnerable server exposed, using something
 like fail2ban (if I remembered the name correctly) can be a good idea.
 It allows a limited number of attempts from an IP, then temporarily
 blacklists that IP.  A hacker would have to have tremendous luck to
 guess a password in only two attempts, for instance.

i know this all but it is not in standard-nmap and so
you have not the whole day the logfiles full and the
overhead for non-standard-port is practically non-existent

NOBODY should allow password-login on sshd, never and we do not

additionally:
iptables -A INPUT -p tcp --sport 1024:65535 -m state --syn --state NEW --dport 
YOURPORT -m limit --limit 60/minute
--limit-burst 20 -j ACCEPT
iptables -A INPUT -p tcp -m state --syn --state NEW --dport YOURPORT -j REJECT
___

for portscans allow only 120 connections from the same ip per second
makes it really hard do a full port-scan because it longs forever and
aditionally webservers are proctected against a single dos-attack

try it with ab -c 20 -n 10 http://yourhost/; and you will see htop
shortly with 100% cpu and falling down to normal values in waves

iptables -I INPUT -p tcp -i eth0 -m state --state NEW -m recent --set
iptables -I INPUT -p tcp -i eth0 -m state --state NEW -m recent --update 
--seconds 1 --hitcount 120 -j DROP
___

as you see security is never one setting and it is done and obscurity as
additional prevention is good and no overhead if someone knows to handle
his machines



signature.asc
Description: OpenPGP digital signature
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Creating partitions

2011-10-24 Thread Miguel Cardenas
On Sun, Oct 23, 2011 at 1:36 PM, Reindl Harald h.rei...@thelounge.netwrote:

  I would like to keep simple my disk, and reading the Fedora installation
  guide found that there are only 3 partitions required, SWAP, BOOT (ext3)
  and ROOT / (ext3)... I still don't like the idea of an independent boot
 this is simply not true
 since F14 for sure ext4 is default, F13 i neve installed from scratch
 /dev/md1  ext4 29G  8,0G   21G  28% /
 /dev/md0  ext4485M   51M  430M  11% /boot
 /dev/md2  ext43,6T  1,2T  2,4T  34% /mnt/data


I forgot to say it was another distro, now am moving to Fedora but always in
the past I've used swap and root only... of course Fedora uses ext4 :P

Take care
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


remeber non broadcasted SSID

2011-10-24 Thread Jeronimo Calvo
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Folks,

I have recently installed F-15, and I cant get the network manager to remember 
my non broadcasted wireless SSID, I can actually select it from the list, but 
It does not connect automatically as with any other broadcasted networks.

any ideas?

Jeronimo Calvo
jeronimocal...@hush.com



-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJOpb5XAAoJEGNDE5xD5Cq480cIAMjW8zbFuTi1AqRu4LAQg750
ZBBdaag8XCrZRh/KSTr0pTORq5n2CzE32ostUghcQFmnbYby1IX2G5knXrYVPzdI
nP/53B7erzKj+RSvnbAfzbCparFVb2iuOCULDhh95Zj5bjrH2ypfzEefK1nM84QS
Tfw6ICp/FLfhRJ5h9lU/fsSMmTcn/7OKz8qu2GOGmMT0RXIxsbJ4usikjnDrmDwM
q2Rq3P59IE/n3IeztxZdnYFL4Vc42/vFYC11TYRCDJM+ezA3OqOYcqxnNsyy6XLT
P68adC3VfRNtp+bM8newzNqewT/KjiXbqvifO7UE25xfIxLQh6dXCYBGDHIkBvg=
=hDoN
-END PGP SIGNATURE-

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: more attempts to resolve NSF issues

2011-10-24 Thread Mark Eackloff
On 10/23/2011 11:03 PM, Bill Davidsen wrote:
 Mark Eackloff wrote:
 I am fishing a bit here, but I have no_root_squash as an option in my
 exports (server) file.  When the client tries to mount the directory
 automatically at boot time through the entry in /etc/fstab I believe the
 request is identified as coming from root.  See the User ID Mapping
 section in man (5) exports about this.

 If you have ever made that userid stuff work properly you are a better (or 
 more 
 patient) person than I. I think the root_id_squash prevents i/o requests from 
 root, not the mount itself. At least that's the behavior I notice, root can 
 read 
 if public read is set, but can't write a 644 file.

Yea.  I tried it and you're right.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Just installed RHEL 6.1 and i have 0 repositories

2011-10-24 Thread Lázaro Morales
En 24/10/2011 14:55:53, Maxime Alarie mala...@processia.com escribió:

 # Managed by (rhsm) subscription-manager

If you have a valid subscription refer to:

  *  
http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/index.html

Part II. Package Management, Chapter 4: Product Subscriptions and  
Entitlements to activate it. If not you can looking for availables  
packages at your DVD:

Mount your DVD at /media/rhel
# mkdir /media/rhel-dvd
# mount /dev/dvd /media/rhel-dvd

create a custom .repo file pointing your DVD if it not exist under  
/etc/yum.repos.d/:

# cat  /etc/yum.repos.d/rhel-media.repo  EOF
[rhel-media]
name=RHEL-$releasever - Media
baseurl=file:///media/rhel-dvd/
gpgcheck=1
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-RHEL-6
EOF

And then try looking for packages in you DVD:
# yum update
# yum search php

Regards,
Lázaro.

Este mensaje de correo electrónico ha sido procesado por el servidor de 
Frioclima


-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: Just installed RHEL 6.1 and i have 0 repositories

2011-10-24 Thread Jeronimo Calvo
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Jeronimo Calvo
jeronimocal...@hush.com



On 24 Oct 2011, at 19:55, Maxime Alarie wrote:

 Thanks for the quick reply,
 
 The file is empty..
 

Create a new repo file.

rhel6.repo

and add the following:

=

# CentOS-Base.repo
#
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client.  You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the 
# remarked out baseurl= line instead.
#
#

[base]
name=CentOS-$releasever - Base
mirrorlist=http://mirrorlist.centos.org/?release=$releaseverarch=$basearchrepo=os
#baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

#released updates 
[updates]
name=CentOS-$releasever - Updates
mirrorlist=http://mirrorlist.centos.org/?release=$releaseverarch=$basearchrepo=updates
#baseurl=http://mirror.centos.org/centos/$releasever/updates/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
mirrorlist=http://mirrorlist.centos.org/?release=$releaseverarch=$basearchrepo=extras
#baseurl=http://mirror.centos.org/centos/$releasever/extras/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever - Plus
mirrorlist=http://mirrorlist.centos.org/?release=$releaseverarch=$basearchrepo=centosplus
#baseurl=http://mirror.centos.org/centos/$releasever/centosplus/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

#contrib - packages by Centos Users
[contrib]
name=CentOS-$releasever - Contrib
mirrorlist=http://mirrorlist.centos.org/?release=$releaseverarch=$basearchrepo=contrib
#baseurl=http://mirror.centos.org/centos/$releasever/contrib/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

=


After that do the following:


yum clean all
yum update
you should accept the gpg keys from the centos repo.
try your new repo with:

yum list


Cheers,

Jero
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJOpcUXAAoJEGNDE5xD5Cq4E1YIAN2tDBSuZt2Jeb37kTwKQ7fB
nNyf271pB+kvMQKl9FzvYuAgvi5fmvZ/TkY54xbyYYaH/Ne/QG9w7XFLpmI1v35b
XDA8e2WO9FJYCIR+IJTPGzol6ZtZVgUhgQ/UZJBhjk6+OkK7r5AAKi42UFVvTUJO
49kQvUjbAY7N1yGVRLkbV5CqTfYHOO1wzn12G/Je/xfzJpx2m0HQIU5ZPfuKwKaz
X2DWCd0/DVCEExft5bW6WDQNBaEvltX5eAXfIC2WueBVbV0W04I8uMghuPmnmvav
OgZF5TuZL+CmvPy9KXu2Ou2lq88XQTqqVNbrYH1xWmDVEkYTBnWYuMKcR4Z0pZw=
=wfui
-END PGP SIGNATURE-

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: UEFI installation is non-functional in F16B - grub/grub2

2011-10-24 Thread Patrick O'Callaghan
On Sun, 2011-10-23 at 19:54 +0200, little.owl wrote:
 The grub2 and all (U)EFI stuff are completely new for me, so any hints
 or links are welcome.

Try posting to the Test list. F16 is not a released system and not all
testers read the Users list (this one).

poc

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: remeber non broadcasted SSID

2011-10-24 Thread Mikkel L. Ellertson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 10/24/2011 02:36 PM, Jeronimo Calvo wrote:
 Hi Folks,
 
 I have recently installed F-15, and I cant get the network
 manager to remember my non broadcasted wireless SSID, I can actually
 select it from the list, but It does not connect automatically as
 with any other broadcasted networks.
 
 any ideas?
 
Turn on the broadcast of the SSID so network manager can see it and
automatically connect to it.

Mikkel
- -- 

  Do not meddle in the affairs of dragons,
for thou art crunchy and taste good with Ketchup!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk6l99AACgkQqbQrVW3JyMS9ZwCeNEu6FgSRMWD+8zRO0R9nPWe+
tQ8AnRSnywrT/3mYb91DPO58h/rM28tZ
=DprU
-END PGP SIGNATURE-
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: fail2ban vs. logrotate

2011-10-24 Thread Mikkel L. Ellertson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 10/24/2011 12:14 PM, Mike Wohlgemuth wrote:
 I've installed fail2ban on Fedora 15 to block repeated failed ssh 
 connections.  It works great up until logrotate kicks in.  When it 
 rotates /var/log/secure then fail2ban stops noticing failed ssh 
 attempts.  Using fail2ban-client to reload the jail fixes the problem, 
 but it also causes fail2ban to forget all currently banned IP 
 addresses.  I've found scripts online that will allow for extracting the 
 current bans before reloading, and then applying them again after, but 
 that seems pretty extreme. I can't help but think I must be missing 
 something simple that will get fail2ban to notice that the logs have 
 been rotated.  Has anyone else seeing this issue?  I see some reports in 
 bugzilla about fail2ban, but nothing that is definitely this problem.
 
 Thanks
 Mike

It sounds like fail2ban still has the old log file open. You need to
have logrotate tell fail2ban that the log file has changed.

Logrotate already does this will other services when it rotates
their log file. I am surprised the .rpm did not include the files
for logrotate to automatically sent the proper signal to fail2ban.

Mikkel
- -- 

  Do not meddle in the affairs of dragons,
for thou art crunchy and taste good with Ketchup!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk6l+nwACgkQqbQrVW3JyMQXbwCfWwWQXNCmsHlIriPqHy1FALI9
asQAn1qsjxbOzlxOT3yn81XHj5bR5aLn
=vGsK
-END PGP SIGNATURE-
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


Re: fail2ban vs. logrotate

2011-10-24 Thread Andre Speelmans
 It sounds like fail2ban still has the old log file open. You need to
 have logrotate tell fail2ban that the log file has changed.

Change the config file for logrotate so that it does not create a new
file, but that it uses copy-and-truncate. The exact syntax is easily
found in the man-page.

 Logrotate already does this will other services when it rotates
 their log file. I am surprised the .rpm did not include the files
 for logrotate to automatically sent the proper signal to fail2ban.

/var/log/secure is not a daemon specific file, but a general log-file
and as such does not have a (daemon-) specific rpm. And a general file
can't send signals to all kinds of daemons that may, or may not run on
a system.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines