Re: No IPv6 traffic
On Sat, 29 Aug 2009 21:16:52 -0400 Jim mickey...@sbcglobal.net wrote: On 08/29/2009 08:15 PM, Michael Fleming wrote: On Sat, 29 Aug 2009 11:26:06 -0400 Jimmickey...@sbcglobal.net wrote: On 08/29/2009 06:23 AM, Clodoaldo Pinto Neto wrote: When capturing the traffic with Wireshark there is no IPv6 traffic at all. When I set network.dns.disableIPv6 to true I can see all IPv4 in Wireshark. This is Fedora 10 64. While it is easy to solve it for Firefox there are many services that can't connect even if I disable IPv6 in the system. One symptom is Yum has to try repetitively until it finds a suitable host: http://mirrors.ucr.ac.cr/fedora/releases/10/Everything/x86_64/os/repodata/repomd.xml: [Errno 4] IOError:urlopen error (-2, 'Name or service not known') Trying other mirror. Another is that the weather applet and fold...@home can't connect. When I disable IPv6 in the system the applet connects but Yum behaves the same (multiple tries) and still fold...@home can't connect. My name servers are set to opendns: # cat /etc/resolv.conf # Generated by NetworkManager nameserver 208.67.220.220 nameserver 208.67.222.222 nameserver 10.1.1.1 # cat /etc/sysconfig/network NETWORKING=yes HOSTNAME=d2.localdomain NETWORKING_IPV6=yes # cat /etc/sysconfig/network-scripts/ifcfg-eth0 # Realtek Semiconductor Co., Ltd. RTL8111/8168B PCI Express Gigabit Ethernet controller DEVICE=eth0 BOOTPROTO=none DNS1=208.67.220.220 DNS2=208.67.222.222 DNS3=10.1.1.1 GATEWAY=10.1.1.1 HWADDR=00:21:97:00:79:21 IPADDR=10.1.1.110 NETMASK=255.0.0.0 ONBOOT=yes TYPE=Ethernet USERCTL=no IPV6INIT=yes NM_CONTROLLED=yes PEERDNS=yes snip Michael. Well Mr Fleming it takes care of the problem until someone figures out the real problem. Except that it doesn't and you haven't read a single word I've written. Turning off IPv6 lookups for one application doesn't solve the issue at all, just acts as a placebo at the absolute best. Your turn off lookups for /IPv6 records so-called solution is in the long term worse than useless - and I'm being quite charitable here. The OP has loaded the IPv6 modules - this will ready the kernel for IPv6 traffic and allocate link-local IPv6, but does not connect the host to the public IPv6 network out of the box. This is normal behaviour for most if not all Linux distributions released in the last few years and even Windows XP and later for that matter. The workstation I'm sitting at for instance (F11/x86_64) has that precise configuration (my servers are fully IPv6 capable) You will get a globally routable address via a 6to4 tunnel (see the documentation reference I wrote earlier) or a tunnel broker like Sixxs or Hurricane Electric (he.net) - some network providers/ISPs even offer native connectivity; it never hurts to ask. As for the OP's issue I am very sure that it is a more general DNS resolution problem, given that (for example) mirrors.ucr.ac.cr has no record, and the single A record pointing to 163.178.174.25 from where I sit. If the OP is seeing differently then it confirms my theory. Michael. -- Michael Fleming mflem...@thatfleminggent.com - (EMail/XMPP/Jabber) WWW: http://www.thatfleminggent.com Fedora / Red Hat Packages: http://www.thatfleminggent.com/rpm-packages Twitter: http://twitter.com/thatfleminggent -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: No IPv6 traffic
On Sat, 29 Aug 2009 11:26:06 -0400 Jim mickey...@sbcglobal.net wrote: On 08/29/2009 06:23 AM, Clodoaldo Pinto Neto wrote: When capturing the traffic with Wireshark there is no IPv6 traffic at all. When I set network.dns.disableIPv6 to true I can see all IPv4 in Wireshark. This is Fedora 10 64. While it is easy to solve it for Firefox there are many services that can't connect even if I disable IPv6 in the system. One symptom is Yum has to try repetitively until it finds a suitable host: http://mirrors.ucr.ac.cr/fedora/releases/10/Everything/x86_64/os/repodata/repomd.xml: [Errno 4] IOError:urlopen error (-2, 'Name or service not known') Trying other mirror. Another is that the weather applet and fold...@home can't connect. When I disable IPv6 in the system the applet connects but Yum behaves the same (multiple tries) and still fold...@home can't connect. My name servers are set to opendns: # cat /etc/resolv.conf # Generated by NetworkManager nameserver 208.67.220.220 nameserver 208.67.222.222 nameserver 10.1.1.1 # cat /etc/sysconfig/network NETWORKING=yes HOSTNAME=d2.localdomain NETWORKING_IPV6=yes # cat /etc/sysconfig/network-scripts/ifcfg-eth0 # Realtek Semiconductor Co., Ltd. RTL8111/8168B PCI Express Gigabit Ethernet controller DEVICE=eth0 BOOTPROTO=none DNS1=208.67.220.220 DNS2=208.67.222.222 DNS3=10.1.1.1 GATEWAY=10.1.1.1 HWADDR=00:21:97:00:79:21 IPADDR=10.1.1.110 NETMASK=255.0.0.0 ONBOOT=yes TYPE=Ethernet USERCTL=no IPV6INIT=yes NM_CONTROLLED=yes PEERDNS=yes I have another machine, F11, behind the same ADSL router, Dlink DSL 500B, without problems. Any ideas? Regards, Clodoaldo This IPV6 thing is a problem in FC11 , FC10, everyone of the of the 12 boxes I have setup in FC11 I have had to do the below setup to even connect to rpmfusion.org. Turning IPv6 related DNS lookups off (even in firefox) is NOT fixing the issue - will people please stop posting this utter trash as helpful information please? There's enough myths around IPv6 as it is and this isn't helping. (plus such people might want to look at how the getaddrinfo() call works..) The problem is the OP has *enabled* IPv6 - loaded the module etc. but hasn't *configured* it. It won't magically set up a tunnel / 6to4 / native connection, you have to do a little more tweaking See ipv6-6to4.howto in the initscripts documentation (/usr/share/doc/initscripts-version/) for a brief primer on 6to4, which will get you up and going without having to sign up for a tunnel broker etc. I have two IPv6 tunnels running - one on a Fedora 10 server (qbert, served by my ISP here in Australia) and a CentOS VM (gyruss) through Hurricane Electric - both work OK [r...@qbert ~]# traceroute6 fedoraproject.org traceroute to fedoraproject.org (2610:28:200:1::fed0:1), 30 hops max, 80 byte packets 1 2001:44b8:61::62 (2001:44b8:61::62) 61.238 ms 63.470 ms 65.738 ms 2 vl67.cor1.adl6.internode.on.net (2001:44b8:8060:8000::1) 67.064 ms 69.794 ms 70.104 ms 3 gi0-0.bdr1.adl6.internode.on.net (2001:44b8:8060:14::1) 72.050 ms * * 4 pos4-2.bdr1.syd7.internode.on.net (2001:44b8:b070:2::1) 98.805 ms * * 5 pos1-3-0.bdr2.nrt1.internode.on.net (2001:44b8:f0a0:2::1) 217.948 ms 219.611 ms 221.365 ms 6 equinix-tyo.he.net (2001:de8:5::6939:1) 223.472 ms 197.651 ms 198.828 ms 7 2001:470:0:119::1 (2001:470:0:119::1) 310.388 ms 310.695 ms 309.959 ms 8 10gigabitethernet3-2.core1.pao1.he.net (2001:470:0:32::2) 286.479 ms 286.684 ms 283.265 ms 9 snvang.abilene.ucaid.edu (2001:504:d::bd) 318.081 ms 318.509 ms 318.226 ms 10 * * * 11 * * * 12 2001:468::155::2 (2001:468::155::2) 358.482 ms 358.215 ms 357.666 ms 13 2610:28:10e:2::1 (2610:28:10e:2::1) 393.498 ms 393.133 ms 392.833 ms 14 2610:28:105:13::2 (2610:28:105:13::2) 360.110 ms 360.089 ms 360.863 ms 15 2610:28:200:1::fed0:1 (2610:28:200:1::fed0:1) 361.113 ms !X 360.678 ms !X 361.396 ms !X [mflem...@gyruss ~]$ traceroute6 fedoraproject.org traceroute to fedoraproject.org (2610:28:200:1::fed0:1), 30 hops max, 40 byte packets 1 dotprofile-1.tunnel.tserv8.dal1.ipv6.he.net (2001:470:1f0e:16f::1) 8.000 ms 8.000 ms 8.000 ms 2 gige-g2-14.core1.dal1.he.net (2001:470:0:78::1) 8.000 ms 8.000 ms 8.000 ms 3 10gigabitethernet1-4.core1.chi1.he.net (2001:470:0:c4::1) 36.002 ms 36.002 ms 36.002 ms 4 ge-2-2-0.11.rtr.chic.net.internet2.edu (2001:504:0:4:0:1:1537:1) 56.003 ms 56.003 ms 56.003 ms 5 * * * 6 2001:468::155::2 (2001:468::155::2) 68.004 ms 60.003 ms 60.004 ms 7 (2610:28:10e:2::1) 64.004 ms 64.004 ms 64.004 ms 8 (2610:28:105:13::2) 64.004 ms 64.004 ms 64.004 ms 9 (2610:28:200:1::fed0:1) 68.004 ms !X 68.004 ms !X 68.004 ms !X Michael. -- Michael Fleming mflem...@thatfleminggent.com - (EMail/XMPP/Jabber) WWW: http://www.thatfleminggent.com Fedora / Red Hat Packages: http://www.thatfleminggent.com/rpm-packages Twitter: http
Re: What I HATE about F11
On Mon, 15 Jun 2009 18:35:00 -0300 Martín Marqués martin.marq...@gmail.com wrote: 2009/6/15 Casey Dahlin cdah...@redhat.com: Maybe we should just make the command line more friendly so users don't mind reaching for it. I vote we add clippy. You're joking, right? It's *clippy* - of course it's a joke. :-) I'm sure the appropriate people within MS would admit to all sorts of perverse indiscretions well before admitting that Clippy was their idea. A command line clippy would result in sysadmins and power users rioting in the street. I see you're trying to write a shell scri^C; rm -f /usr/bin/clippy... (A true BOFH would have it run in his least-favourite luser's .profile, set immutable and located in luser's $HOME/bin. :-P) Serious note: hotwire / hotssh may not suit the experienced - personally it's not my thing - but it would be an excellent compromise for the newer user that needs a bit of help with the CLI. Michael. -- Michael Fleming mflem...@thatfleminggent.com - (EMail/XMPP/Jabber) WWW: http://www.thatfleminggent.com Fedora / Red Hat Packages: http://www.thatfleminggent.com/rpm-packages Twitter: http://twitter.com/thatfleminggent -- fedora-devel-list mailing list fedora-devel-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-devel-list
Re: What I HATE about F11
not. Where did it break? The SELinux guys are usually pretty keen to see any serious AVC / denials. Regards -- Charlie Butterfield Michael Fleming. -- Michael Fleming mflem...@thatfleminggent.com - (EMail/XMPP/Jabber) WWW: http://www.thatfleminggent.com Fedora / Red Hat Packages: http://www.thatfleminggent.com/rpm-packages Twitter: http://twitter.com/thatfleminggent -- fedora-devel-list mailing list fedora-devel-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-devel-list
Re: Root Access
On Sun, 14 Jun 2009 01:42:53 -0400 Todd Zullinger t...@pobox.com wrote: There's some truly awful advice in this thread, aside from Robert Cochran's :-( Mike Dwiggins wrote: snip Some of us are causal users who wander in from the Windows world! I wish I could live in Linux but, that ain't gonna happen! I need to be able to log in as root to do my job! I wish it were not so but, it is! Life always fair! Easy fix: * Log in as your normal user * su - (interactive root shell with full environment) * su - -c some command - run some command as root with appropriate environment * sudo some command (like above, simpler but needs sudo installed) - Fat-fingering a command like rm or fdisk / mkfs etc. as a user may result in limited damage. Doing so as root will be a disaster. Don't shoot yourself in the foot. - NEVER ssh as root. PermitRootLogin defaults to no in OpenSSH for good reason. If your root password is weak and an attacker guesses it, it's game over, your machine is compromised and you're another zombie in someone's botnet. Log in as a regular user and su - Many X programs are not designed to run with root privileges (xscreensaver refuses to - jwz has BOFH nature, bless him) or pose security risks when run as root (GTK apps spring to mind) Again, log in as a regular user, run your app and if it needs root privileges you'll be prompted for them. If a regular user app NEEDS root privileges and doesn't have a hook into ConsoleKit/consolehelper then frankly it's utter garbage and you would be wise to look at a packaged alternative. I'd be astonished if Opera couldn't save it's downloaded extensions to somewhere under $HOME like the Mozilla-based browsers do. I think some of that need might be based on the experiences you've learned from in the Windows world. Permit me, as someone who has seen both sides (6 years systems admin on both sides of the fence, about 15 as a user - ex-Windows desktop user to Fedora desktop user and packager) to make some comments. I think it's very unfortunate that Microsoft has done such a poor job of encouraging and allowing users to run with the least privilege needed. This isn't strictly Microsoft's fault alone. Their engineers have been aiming to get users to run with the least available rights (and good users / administrators have tried to do so, with mixed success) but a combination of laziness on the parts of application developers, Enterprise admins of MS domains and users (who are subject to and learn bad habits from lazy admins and developers) often results in users being added to Administrator groups (or just logging in to the Administrator account) with disasterous results. In trying to help my friends and family who cling to Windows, I am regularly appalled at needing to login to an account with admin privilege to perform some task. A lot of the time this is installs / updates, for general day-to-day work most applications will run with regular user privileges. Perhaps not as gracefully as UNIX apps, but they can (will ask to run as an Administrator or other profile). Alas as most lazy installs have everyone running as Administrator most don't see it. :-( In linux, I would only need to use su or sudo (or, in many cases, I'd automatically be prompted for credentials when more privilege was required). For the most part, I think Fedora gets this right much more often than Microsoft does. *nods* - the ConsoleKit / console-helper apps are much more elegant - just prompt for the root password, no fuss, no complexity. Michael. -- Michael Fleming mflem...@thatfleminggent.com - (EMail/XMPP/Jabber) WWW: http://www.thatfleminggent.com Fedora / Red Hat Packages: http://www.thatfleminggent.com/rpm-packages Twitter: http://twitter.com/thatfleminggent -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Howto setup of a directory server
On Mon, 8 Jun 2009 16:18:38 +0530 Arun Shrimali arun.r...@gmail.com wrote: Dear All, I am planning to setup a server with following features : 1. Authenticate Unix and Windows users from an LDAP server (Fedora Directory Server) Install the fedora-ds* packages 2. Map dedicated network drive for all the users under their username using SAMBA. 3. Enable roaming profile This job is one for Samba (samba, samba-common) 4. Control hardware of client m/cs No idea what you mean here. 5. Authenticate LDAP for Squid proxy server also. It's been a while since I used Squid but it should have an LDAP authentication helper 6. Local mail server which fetch mails from main server (external) for defined users and make available on LAN. Fetchmail and Sendmail (or Postfix) are well suited to this task Can anybody suggest me which combination packages is best for the required setup and the best howto to setup the same. I've suggested the appropriate packages, the setup is entirely dependent on your local environment. The SAMBA, Squid and Fedora Directory Server documentation should see you most of the way there regards regards Michael -- Michael Fleming mflem...@thatfleminggent.com - (EMail/XMPP/Jabber) WWW: http://www.thatfleminggent.com Fedora / Red Hat Packages: http://www.thatfleminggent.com/rpm-packages Twitter / Identi.ca: @thatfleminggent -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Rhythm Box
On Sun, 31 May 2009 02:18:20 -0400 Andrew Jamison li...@blogmethat.net wrote: I heard several people say that the developer for Rhythm Box has decided it is not worth competing with Amarok and other media players anymore. That'd be the first I've heard of it - rhythmbox is still a fairly decent audio app (even if the album cover plugin has some odd results - it brought up an Elmo cover for The Clash's London Calling here, which had me in stitches) and as far as I'm aware still maintained. If this is true how will this affect Fedora? Will we simply adopt Amarok as the default Gnome media solution or will we try and get someone to pick up the development and take over the project? Amarok is a KDE app last I checked so it shouldn't affect GNOME at all :-) I have noted in the recent past some effort to bring in Banshee as a default media player - I'm not 100% sure this is wise as while it's very good - I use it day to day - it's not quite as solid as Rhythmbox IMHO and being Mono may not be to everyone's tastes. I am not a coder so I can not help and while I am not sure if this is true if it is I would like to see it still maintained. Thanks, Andrew Jamison IRC: ajamison5579 Michael Fleming (not a GNOME developer, just a longtime user) -- Michael Fleming mflem...@thatfleminggent.com - (EMail/XMPP/Jabber) WWW: http://www.thatfleminggent.com Fedora / Red Hat Packages: http://www.thatfleminggent.com/rpm-packages Twitter: http://twitter.com/thatfleminggent -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: ipv6 question
On Sun, 31 May 2009 23:38:52 +0200 Michael Casey michaelcase...@gmail.com wrote: Hi I just want to ask one big question :) If I would have an IPv6 address [home pc, behind a router - supporting ipv6 e.g.: openwrt, ISP gives ipv6], then I can see an IPv6 address with ifconfig, on the PC e.g.: Z So that's my very unique address. - Z Can that be seen on the internet, the Z address? so anyone can ping me from outside, or do an nmap? Yes, if the IPv6 address has a global prefix (2001:: 2002:: etc) - fe80:: etc are link local addresses and are site specific - they won't be available to the wider Internet. Or are there private addresses what the router gives to my pc.: eg.: with ipv4 a router could give 192.168.1.10... and that IP couldn't be pinged/nmapped from outside (More Secure???) Because I heard that there will be no NAT with IPv6? There's no NAT in IPv6, at least in the traditional IPv4 way. If you're only getting fe80:: et. al addresses (the link-local addresses as above) you should be fine however. What will happen to e.g.: a windows xp pc using IPv6? The C$, D$ shares will be visible to anyone if they know the password? sorry for the trivial question... :S :) and thank you for any answer If the host isn't firewalled and has globally routed IPv6 allocations then yes they would be available (they'd need to know Administrator passwords for the admin shares above though) Michael. -- Michael Fleming mflem...@thatfleminggent.com - (EMail/XMPP/Jabber) WWW: http://www.thatfleminggent.com Fedora / Red Hat Packages: http://www.thatfleminggent.com/rpm-packages Twitter: http://twitter.com/thatfleminggent -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Fedora and jabber MSN gateway
On Thu, 28 May 2009 08:52:08 +0200 wwp subscr...@free.fr wrote: Hello there, does anybody here has ever set up a jabber daemon with a full-featured MSN gateway on a Fedora? Are there helpful howto's online for that? Yes, I have one running the MSN Python Transport - It's no different than installing other transports/components, the install docs in the package outline what needs to be done - there may be some variations depending on what XMPP server software you're running. My package is here if you're interested (also F9 / CentOS flavours available for i386 too) http://www.thatfleminggent.com/packages/fedora/10/x86_64/repoview/pymsn-t.html Regards, Cheers, Michael Fleming. -- Michael Fleming mflem...@thatfleminggent.com - (EMail/XMPP/Jabber) WWW: http://www.thatfleminggent.com Fedora / Red Hat Packages: http://www.thatfleminggent.com/rpm-packages Twitter: http://twitter.com/thatfleminggent -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Packaging Survey - May 2009
On Wed, 27 May 2009 17:01:56 +0530 Rahul Sundaram sunda...@fedoraproject.org wrote: Hi I did a quick survey from Fedora on what software Fedora users are using that is not available in the repo. Here are the results. If you find anything interesting, feel free to pick it up. https://fedoraproject.org/wiki/Packaging_Survey_May_2009 Rahul I can put my courier-authlib packages up for review - rpmlint only has fairly minor complaints which are easily fixed - which will in turn allow maildrop (which is already here) to build against it. Courier-imap has it's own peculiar way of self-upgrading (via sysconftool, another one of Sam's tools) which is extremely convenient for the end-user but is definitely not the Fedora way of doing things. The spec file is like a rougelike for RPM - once you go in you may never come back alive The configuration files under /usr/libexec can be moved around with symlinks but getting it in good enough shape to pass review would require some major surgery. However I'm on holidays from work at the moment so I have some spare time, I might give it a shot anyway. :-) Michael. -- Michael Fleming mflem...@thatfleminggent.com - (EMail/XMPP/Jabber) WWW: http://www.thatfleminggent.com Fedora / Red Hat Packages: http://www.thatfleminggent.com/rpm-packages Twitter: http://twitter.com/thatfleminggent -- fedora-devel-list mailing list fedora-devel-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-devel-list
Re: Which html editor you would suggest in the latest Fedora?
On Sat, 23 May 2009 18:08:28 +0800 Jerry wong63...@hotmail.com wrote: (Tip: a little body text and context helps - what desktop environment you're running for a start, as it'll help suggest a good fit. Need I point the OP at http://catb.org/esr/faqs/smart-questions.html ? :-D) I'm switching between Bluefish and Geany - the latter primarily for the revision control integration. Don't discount the classics (vim/emacs) + tidy though. :-) Michael. -- Michael Fleming mflem...@thatfleminggent.com Website/Blog: http://www.thatfleminggent.com Fedora / Red Hat Packages http://www.thatfleminggent.com/rpm-packages -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Installing packages from Fedora repo - is it safe?
Stewart Williams wrote: I think I know the answer to this, but I'm just clarifying. I have updated to the updates-newkey repo for updates, but there are packages that I want to install, and these are still pulled from the fedora (Everything) repo. Is it safe to use the repo yet or are all the packages in the process of being re-signed? The archives, website and magic 8-ball are in agreement: yes. Michael. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: updates?!
On Fri, 29 Aug 2008 03:19:35 + (GMT) yordy [EMAIL PROTECTED] wrote: Hi, there is any problem with updates? I can't get any updates from fedora updates repo, yum update always response No Packages marked for Update. I'm running Fedora 9. This has been answered elsewhere - did you search the archives / other list threads? The build / update systems have been rebuilt after the recent intrusion and thus updates have not been pushed; once all the remaining issues have been ironed out, a new GPG signing key generated and made available I would imagine pending updates (and there are many) will be pushed out. Michael. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
