Linux-Misc Digest #671, Volume #24                Thu, 1 Jun 00 04:13:02 EDT

Contents:
  I think I am making this too hard...  Obtain/create and install client certificates? 
("Thomas Cameron")
  Re: recursive mv? ("Andrew N. McGuire ")
  Re: mounting ide-scsi device (Duane)
  correction (was Re: forgot root password) (Minko Markov)
  Question about Virtual Hosts ("Marcus Ouimet")
  Re: I think I am making this too hard...  Obtain/create and install client 
certificates? (Todd Knarr)
  Re: How to make X program remember position & size? (Janet)
  Re: Color adjustments for Epson Stylus Color 600 w/ uniprint driver (ray)
  showing softlinks in PATH (Peter Bismuti)
  ASUS K7V KX133 motherboard problems (Ryan Sackenheim)
  Re: showing softlinks in PATH ("Peter T. Breuer")
  Re: Sun Sparc faster then intel pentium: (What about the compiler?) (Dave Schanen)
  Re: Unzip problem??? (fred smith)
  Help: Logging into Linux from Windows 98 PC ("Temp")
  Re: Sun Sparc faster then intel pentium: is this true???? (Dave Schanen)
  Re: Help: Logging into Linux from Windows 98 PC ("Peter T. Breuer")

----------------------------------------------------------------------------

From: "Thomas Cameron" <[EMAIL PROTECTED]>
Subject: I think I am making this too hard...  Obtain/create and install client 
certificates?
Date: Thu, 01 Jun 2000 05:15:52 GMT

Howdy from Austin, Texas -

I have a customer with a Cobalt Qube running Cobalt's bastardized Red Hat
5.2/MIPS and the Red Hat Secure Web Server v3.0, also bastarized by Cobalt.
I believe it is based on Apache-SSL.

The customer wants to make sure that in order to access the docs on his SSL
server, client machines must have a client certificate installed which his
server recognizes.  No cert on the client, no access to the documents.  This
is in addition to password protection for the site.  This customer is very
security conscious, to say the least.

Anyway, what I am trying to figure out is, how do I tell the server what
client certificates are valid?  How do I tell the server to block all other
browsers?  Do I need the clients to get certs from Thawte/Verisign, or can
we create them ourselves?  I tried the steps to creating a client cert, but
all it does is tell the client to trust server certs from our web server.
That's not what I want.

Any pointers greatly appreciated.  E-mail response welcomed, but strip the
.au off the end of my return adress.

Regards,
Thomas Cameron





------------------------------

From: "Andrew N. McGuire " <[EMAIL PROTECTED]>
Subject: Re: recursive mv?
Date: Thu, 1 Jun 2000 00:02:16 -0500

On Thu, 1 Jun 2000, Prasanth A. Kumar wrote:

+ LTho <[EMAIL PROTECTED]> writes:
+ 
+ > Is there such a thing as a recursive mv, that is mv -r <from> <to> or
+ > some such.
+ > 
+ > I recognize that the mv is basically a rename, and to 'move' a whole
+ > directory tree, normally just the top 'directory' is 'mv'ed.  
+ > 
+ > In this case, I want to transer a whole bunch of stuff via NFS from a
+ > remote machine to my local machine.  Possible?  Or do I have to do a 
+ > 
+ > cp -r <from> <to>
+ > rm -rf <from> <to>
+ > 
+ > thx
+ > LTho
+ <snip>
+ 
+ Yes, a move is basically a rename and if done across a partition, it
+ will be converted to a cp and rm operation.

Yup, however I would like to point out that instead of using an
NFS partition as a buffer, you could also consider 'rcp -r', or
if your sysadmin is security smart 'scp -r'.

Best Wishes,

anm
-- 
/*-------------------------------------------------------.
| Andrew N. McGuire                                      |
| [EMAIL PROTECTED]                              |
`-------------------------------------------------------*/


------------------------------

From: Duane <[EMAIL PROTECTED]>
Subject: Re: mounting ide-scsi device
Date: Wed, 31 May 2000 21:30:31 -0700

Dances With Crows wrote:
> 
> On Wed, 31 May 2000 10:28:30 -0700, Duane
> <<[EMAIL PROTECTED]>> shouted forth into the ether:
> [much snippage]
> >insmod ide-scsi
> >insmod sg
> >
> >Also, rather than issue those commands, have you tried putting this into
> >your /etc/conf.modules:
> >
> >options ide-cd ignore=hdc  <- assuming your CD is hdc
> >alias scd0 sg
> 
> No.
> 
> A CD-ROM is a block device.  The generic SCSI driver is a character
> device.  Take a look at the results of "ls -l /dev/scd0 /dev/sg0" for
> confirmation.  Attempting to use /dev/sg0 as a read-only CD-ROM interface
> will not work-- mount reports "/dev/sg0 is not a block device" which is
> what it should be saying.
> 
> The correct module for accessing an IDE-SCSI emulated CD-ROM is sr_mod,
> and the device name is /dev/scd[0-15] depending on how many CD-ROMs you
> have.  /dev/sg[0-15] is used by the sg module, and scanners and CD-R(W)s
> also use it.
> 
> # insmod ide-scsi       (IDE-SCSI emulation)
> # insmod scsi_mod       (if you have SCSI support as a module)
> # insmod sr_mod         (SCSI CD-ROM support)
> # insmod sg             (SCSI Generic support)
> 
> It shouldn't be this difficult-- just put
> alias scsi_hostadapter ide-scsi
> in /etc/conf.modules, and the right stuff should get probed automatically
> when you try to access /dev/scd0 or /dev/sg0, assuming you've passed
> "hdX=ide-scsi" to the kernel at boot time.

Unfortunately, judging by all the posts on this subject, it IS this
difficult. Those of us using Redhat are working with a system that is
apparently just enough different from others that instructions such as
the HOW-TO cause a lot of confusion. I am a newcomer to this, but after
much struggle I think I have absorbed just enough info to be dangerous!

So to to address your points:
The line
 alias scd0 sg
does not mean use the sg device for mounting the cd. It simply means (I
think) load the sg module when an attempt is made to access scd0 (or
something like that). I was in fact mounting the CDROM using the device
/dev/scd0. On a stock Redhat 6.1 system, the line "alias scd0 sg" does
in fact work. I know, because I have tried it.

So why did I use the line "alias scd0 sg"? Well, the latest CD-Writing
HOWTO (dated 05 May 2000) says to use "alias scd0 sr_mod". There is that
sr_mod again, as you mention above. Unfortunately, a stock Redhat system
doesn't have sr_mod as a module. So us Redhat folks are already
confused. So I tried "alias scd0 ide-scsi". Again, no dice. I tried
several other combinations until stumbling on one that worked:

options ide-cd ignore=hdc
alias scd0 sg
pre-install sg modprobe ide-scsi

And again I will emphasize that on my system it really does work. And
again, judging by other postings I have seen since, it has worked for
other people, too.

But I figured I would try your advice, so I tried the "alias
scsi_hostadapter ide-scsi" method. Interesting, that works fine too. So
I go back and look at the CD-Writing HOWTO.

http://www.guug.de/~winni/linux/cdr/html/CD-Writing-2.html

I can't find any mention of this command. I do a text search on the file
for "hostadapter". Nope, doesn't appear to be there. Oddly enough, I
find (elsewhere) an old version dated 7 August 1999, and it IS there.
Well, that is just a tad odd.

In any case, for me it works absolutely no different from the method I
posted, so aside from a slightly smaller conf.module, I am not sure I
see what the difference is. 

I realize that some non Redhat people would like for those of with
Redhat to stay off this list. But I think that is not a going to happen,
so the confusion will likely continue.

--
My real email is akamail.com@dclark (or something like that).

------------------------------

Crossposted-To: linux.redhat.misc
Subject: correction (was Re: forgot root password)
From: Minko Markov <[EMAIL PROTECTED]>
Date: Thu, 01 Jun 2000 05:25:20 GMT

Minko Markov <[EMAIL PROTECTED]> writes:

> Then you can type "passwd" and change the
> root's password. Have in mind that in runlevel 1
> you are in a basic shell (I think "sh"), your
> log-in scripts are not executed, so there
> are no paths. So, the commands (I think) must
> be in full names, e.g. "/bin/ls", rather than
> "ls". "passwd" is "/usr/bin/passwd".

That was a stupid thing to say, sorry. Of course,
passwd will ask for the old password. So, you have
to delete the forgotten scrambled password from
/etc/shadow 

--
MM

------------------------------

From: "Marcus Ouimet" <[EMAIL PROTECTED]>
Subject: Question about Virtual Hosts
Date: Wed, 31 May 2000 22:26:45 -0700

I just read the documentation at apache.org about setting up a virtual host.
It seems pretty easy I just have a quick question, when I went in to edit
the httpd.conf and found this at the botton.... what excactly is this for?
Just out of curiousity... I am new to linux and am wondering if it could be
anything important.

<VirtualHost test.com>
        ServerAdmin [EMAIL PROTECTED]
        NameVirtualHost xxx.xxx.xxx.xx
        ServerName something
        DocumentRoot /home/test
        Options ExecCgi Includes IncludesNOEXEC MultiViews Indexes
FollowSymlin$
</VirtualHost>

Would it be correct to after this just add and point the domain the the IP?:

    <VirtualHost xxx.xxx.xxx.xx>
    ServerName http://www.somethingcom
    DocumentRoot /home/whatever
    </VirtualHost>





------------------------------

From: Todd Knarr <[EMAIL PROTECTED]>
Subject: Re: I think I am making this too hard...  Obtain/create and install client 
certificates?
Date: 1 Jun 2000 05:39:20 GMT

In comp.os.linux.misc <ckmZ4.2425$[EMAIL PROTECTED]> Thomas Cameron 
<[EMAIL PROTECTED]> wrote:
> Anyway, what I am trying to figure out is, how do I tell the server what
> client certificates are valid?  How do I tell the server to block all other
> browsers?  Do I need the clients to get certs from Thawte/Verisign, or can

My understanding is that a 'valid' certificate is one that is signed by
a certifier whose certificate is installed in the server's certificate
database and marked as trusted to sign certificates. Setting up a
certifier and issuing certificates is easy enough, but I'm not sure
how much trouble it is to get them in a format the server can import
into it's database. And some browsers might require you to use the
browser to request a certificate from the certifier, since they lack
the ability to import pre-made certificates. Note that the certificate
the browser needs installed isn't the usual certificate for the server,
but a user identity certificate of the sort an individual might normally
request from Verisign.

That's assuming, of course, that the server can be required to authenticate
client certificates as part of the SSL connection.

-- 
Oops.
        -- Shannon Foraker, Ashes of Victory

------------------------------

From: Janet <[EMAIL PROTECTED]>
Subject: Re: How to make X program remember position & size?
Date: 31 May 2000 22:57:49 -0700

Silviu Minut <[EMAIL PROTECTED]> writes:

> I don't think you can make X programs remember their position and size,
> but you can make them start where you want and have the size you want.
> You must use -geometry. Do a man X. For instance,
> 
> xdvi -geometry 702x790-25+3
> 
> Once you figure out the right size and position, stick the command in
> some rc file (in ~/.bashrc if you want the change only for yourself, or
> in /etc/bashrc if you want it for any user). For instance, in my
> /etc/bashrc I have
> 
> alias xdvi='xdvi -geometry 702x790-25+3'

You can also put this in your .Xdefaults file (some distributions may use
.Xresources, I'm not sure).  It will look just like

xdvi.geometry: 702x790-25+3

and then X will remember =).

Janet

------------------------------

From: ray <[EMAIL PROTECTED]>
Subject: Re: Color adjustments for Epson Stylus Color 600 w/ uniprint driver
Date: Thu, 01 Jun 2000 06:00:17 GMT

Robert Heller wrote:

> I recently set up an Epson Stylus Color 600, using the GS uniprint
> (ghostscript-5.10-10 under RedHat linux 6.1).  I set it up to use the
> stc600p (Epson Stylus Color 600, 720x720DpI, Plain Paper) parameter set.
>
> The colors are a *little* off.  Blue comes out a little bit purplish.
>
> Is this the printer or is there some parameter setting I could 'tweak'
> to improve the colors?
>
>
> --
>                                      \/
> Robert Heller                        ||InterNet:   [EMAIL PROTECTED]
> http://vis-www.cs.umass.edu/~heller  ||            [EMAIL PROTECTED]
> http://www.deepsoft.com              /\FidoNet:    1:321/153

    Uhhh, yes, I had that experience too, using Redhat distro stuff, with
Epson 740. Couple of things worked for me, in several different regards,
involving this combination. Try these: http://eunuchs.org/epson/. This
gentleman has an excellent lash-up for the printer. and then:
http://dutera.et.tudelft.nl/~haver/linux/epson.html. Now, this last link is
a specific 740 fresh set of drivers, I cannot be sure they will serve a
600. However, the colors are a LOT closer with them. He has 360, 730, and
1440 drivers there. Now, one more point. Careful reading of the docs, will
reveal that "extra commands" can be used in your CL to GS that will
influence the colors. I messed around with that all one afternoon, (I got
interested in it) :))  but I never implemented anything as the drivers from
the site in The Netherlands solved the issue for me. Good Luck, Ray


--
Ray R. Jones
The Computer Shop
[EMAIL PROTECTED]
HTTP://gordo.penguinpowered.com




------------------------------

From: [EMAIL PROTECTED] (Peter Bismuti)
Subject: showing softlinks in PATH
Date: 1 Jun 2000 05:50:35 GMT

Whey I install new software, I would like to make a soft link
to the executable in /usr/local/bin, this way I don'`t have to
keep adding onto my path.  However, softlinks aren't visible, i.e.

which vs

will not find /usr/local/bin/vs

which is a softlink to

 /usr/local/vslick/bin/vs

I would prefer to not copy it directly either.

How can this be fixed?

Thanks!


------------------------------

From: Ryan Sackenheim <[EMAIL PROTECTED]>
Subject: ASUS K7V KX133 motherboard problems
Date: Thu, 01 Jun 2000 06:30:03 GMT

I just recently bought an ASUS K7V motherboard, and I've had problems with 
hard drive accessing in Linux.  First of all I moved my hard drive over 
from my old system, and had some major filesystem errors, in which I ended 
up having to completely wipe the drive clean.  And I have not yet been able
to get any Linux OS installed on the machine.  I have tried both Mandrake 
7.0 and Red hat 6.2, and they both either lockup or reset after attempting 
to format or install.  The strange thing is that it appears to work for a 
period of time, but then drops out with a kernel panic.  I have attempted 
to change some of the settings in the BIOS to disable the Ultra/66 mode for
the hard drive, and I even moved it to the slower controller, but I still 
keep having the same errors.  I don't think it is a hard drive problem, 
because the hard drive is about 6 months old, and was previously working 
just fine.  Also I was able to install Win98 without any problems, so I 
don't believe it is a hardware problem.  I was able to use a floppy 
distribution (Tomsrtbt), and mount the drives without any problem, as well 
as copying files.  But like I said, the problem appears to happen at random 
(except during installation). 

   Has anyone had a similar experience using ASUS's K7V board?  I can't 
seem to find much about it's compatibility with Linux.  Is there a way to 
get Linux to work with this board?  Here's some general info about my 
system. 


ASUS K7V KX133 Athlon motherboard 
AMD Athlon 650 
128MB 133x RAM 
13GB IBM HDD 


[EMAIL PROTECTED]

--
Posted via CNET Help.com
http://www.help.com/

------------------------------

From: "Peter T. Breuer" <[EMAIL PROTECTED]>
Subject: Re: showing softlinks in PATH
Date: 1 Jun 2000 06:44:46 GMT

Peter Bismuti <[EMAIL PROTECTED]> wrote:
: Whey I install new software, I would like to make a soft link
: to the executable in /usr/local/bin, this way I don'`t have to
: keep adding onto my path.  However, softlinks aren't visible, i.e.

: which vs

: will not find /usr/local/bin/vs

Yes it will. You are fundamentally mistaken here.

  oboe:/usr/oboe/ptb% which kvt
  /usr/local/bin/kvt
  oboe:/usr/oboe/ptb% ls -l `!!`
  ls -l `which kvt`
  lrwxrwxrwx   1 root     prof           20 Dec 10  1998 /usr/local/bin/kvt -> 
../share/kde/bin/kvt*

: How can this be fixed?

It's not wrong. And even if the behaviour were as you say it were, it
would not be wrong, just the way things are, and you'd have to change
which to act the way you wanted, which would be wrong.

Peter

------------------------------

From: Dave Schanen <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.questions,comp.sys.sun.hardware,comp.sys.sun.misc
Subject: Re: Sun Sparc faster then intel pentium: (What about the compiler?)
Date: Thu, 01 Jun 2000 02:16:54 -0500

[EMAIL PROTECTED] wrote:

> Hmmm, did you ever consider Alpha?  Here's a URL for some benchmarks:
> http://www.aceshardware.com/Spades/read.php?article_id=145
> 
> It was pointed out in a slashdot posting around 6 or 7th of May.  What was
> really interesting was how much the compiler made a difference.  It seems
> that the gnu compiler is really optimized for the x386 architecture, which
> doesn't have a lot of registers, and the conventional wisdom for fast RISC
> designs is to have lots of registers.  When they used a Compaq compiler
> that really knew how to take advantage of the RISC design, it worked a lot
> better.  I don't know much about the SPARC architecture, but it's RISC
> isn't it?  Perhaps the same rules apply.
The Sun Studio 5 kit has an extremely efficent C/C++ compiler for SPARC,
but the media kit alone (No license) will cost you 100 dollars U.S.  For
an old sun machine a I suspect that gnu C would already have lots of
optimizations and I dont think you'd see much of an improvement. 
Alpha's are a nice chip, but they're bulky, hot (requiring special fans
etc.) and don't have much in the way of applications.  They also don't
have a multimedia instruction set at all, like MMX, 3Dnow!, or SPARC's
VIS instruction set, so doing any kind of graphics requires more machine
instructions than x86's etc,  Linux really lacks any decent graphics
capability at this point, though we all hope Xfree86 v4.0 will change
this ;-)  Everywhere I look alphas are kinda pricey too, even the older
ones, much more than an old sparc machine, though you're much more
flexible hardware-wise.

Dave-o

------------------------------

From: fred smith <[EMAIL PROTECTED]>
Subject: Re: Unzip problem???
Date: Thu, 1 Jun 2000 01:49:18 GMT

[EMAIL PROTECTED] wrote:
: Does anyone know how I could unzip a self-extracting .exe file on linux?


If it really is a ZIP file, just use unzip to unzip it. Doesn't matter
that it's a self-extracting file, unzip will work anyway.
-- 
===============================================================================
 .----    Fred Smith    /                                                      
( /__  ,__.   __   __ /  __   : /                                              
 /    /  /   /__) /  /  /__) .+'           Home: [EMAIL PROTECTED] 
/    /  (__ (___ (__(_ (___ / :__                                 781-438-5471 
================================ Jude 1:24,25 =================================

------------------------------

From: "Temp" <[EMAIL PROTECTED]>
Crossposted-To: 
alt.linux,alt.os.linux,alt.os.linux.corel,alt.os.linux.dial-up,comp.os.linux.networking,comp.os.linux.setup
Subject: Help: Logging into Linux from Windows 98 PC
Date: Thu, 1 Jun 2000 08:45:04 +0100

Help! I am a thick newbie.

I have installed Suse 6.4 with X-Windows and KDE on an old PC and it works
fine. It is on a LAN and happily FTPs to other machines on the network. I
want to be able to log in to applications (such as StarOffice and
ApplixWare) from a Windows 98 PC, running as a Windows PC (ie not running
Linux). We currently use NetTerm as a terminal emulator to get from PCs into
our main SCO UNIX server and this works fine, however it is character based.

Assuming I am utterly stupid and need everything explaining in words of one
sylable (or less), what do I need to do on Linux to enable log ins from
Windows PCs (ie, what config files do I have to change on the server, what
do I have to have running on the PCs?).

Help please!

Regards

Tom Millington
[EMAIL PROTECTED]






------------------------------

From: Dave Schanen <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.questions,comp.sys.sun.hardware,comp.sys.sun.misc
Subject: Re: Sun Sparc faster then intel pentium: is this true????
Date: Thu, 01 Jun 2000 02:53:14 -0500

Bill Vermillion wrote:
> 
>
> >A friend of mine used a P66 with 96 megs of edo ram and only scsi-2
> >drives, it outperformed a Cyrix 233  w/  a 64 meg dimm  for compiling
> >nearly the same size Linux kernel.
> 
> Well it should.  The Cyrix chips are really enhance '386 or '486
> architectures.  At identical clock speeds the Pentium (P5
> architeture) typically ran twice as fast as an indentically clocked
> '486.  P5 (or even better P6) stuff really will outperform many
> 'clone' chips designed to work well with MS 'stuff'.

Well the P66 was still quite outclassed when running Windows 98 and
Office and other such ms 'stuff'. The Cyrix line may be of the 486
design generation but they still are running at a higher frequency than
old pentiums, and run faster despite pipelining etc. Unless an OS does
decent pre-emptive multitasking, memory management, disk buffering, etc.
lots of ram, scsi and a newer generation of chip will lose out to a
faster clocked chip with less and faster ram when running a single app
such  as ms office, or for games.  Beyond the compiling speed I never
saw the Pentium 66 beat the Cyrix for single application speed, this
isn't an opinion, it's more a matter of the Cyrix moving at acceptable
speeds while the P 66 choked, it was obvious which was faster in *most*
cases.

Dave-o

------------------------------

From: "Peter T. Breuer" <[EMAIL PROTECTED]>
Crossposted-To: 
alt.linux,alt.os.linux,alt.os.linux.corel,alt.os.linux.dial-up,comp.os.linux.networking,comp.os.linux.setup
Subject: Re: Help: Logging into Linux from Windows 98 PC
Date: 1 Jun 2000 07:58:13 GMT

In comp.os.linux.misc Temp <[EMAIL PROTECTED]> wrote:
[snip wants to run soffice from linux on windows]
: Assuming I am utterly stupid and need everything explaining in words of one
: sylable (or less), what do I need to do on Linux to enable log ins from
: Windows PCs (ie, what config files do I have to change on the server, what
: do I have to have running on the PCs?).

You need an X server runing on the windows PCs. Have fun finding one
(there are some free ones).

Peter

------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.misc) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Misc Digest
******************************

Reply via email to