Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Johan Meiring

On 2011/05/27 03:22 AM, Arran Cudbard-Bell wrote:


http://power.freeradius.org:4567 is problematic from here (slow, and


Some ISP's prioritize 4567 different to 80.

Is their any good reason it runs on 4567?


--


Johan Meiring
Cape PC Services CC
Tel: (021) 883-8271
Fax: (021) 886-7782


Before acting on this email or opening any attachments
you should read Cape PC Service's email disclaimer at:

http://www.pcservices.co.za/disclaimer.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Arran Cudbard-Bell

On May 26, 2011, at 11:41 PM, Johan Meiring wrote:

 On 2011/05/27 03:22 AM, Arran Cudbard-Bell wrote:
 
 http://power.freeradius.org:4567 is problematic from here (slow, and
 
 Some ISP's prioritize 4567 different to 80.
 
 Is their any good reason it runs on 4567?

Yes. It's the default for webrick, and were still working out permissions 
issues.

When it goes live @ wiki.freeradius.org it will run on port 80.

It's up currently more for testing and fixing markup issues than to run as a 
production service.

-Arran

Arran Cudbard-Bell
RM-RF Limited - Security consultation and contracting
VoIP: +1 916-436-1352 Cell: +44 7854041841





-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Alan DeKok
Arran Cudbard-Bell wrote:
 Unfortunately the new wiki isn't ready from primetime. The mediawiki
 page format renderer in gollum isn't perfect, so we need to convert
 those pages to RST as a priority.

  In order to encourage people to contribute, we've made the new wiki
live on http://wiki.freeradius.org.  Please bear with us for a day or
two while we get some of the kinks worked out.

  The github  Facebook logins will work, so it should be *much* easier
for people to contribute to the Wiki.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Stefan Winter
Hi,

   The github  Facebook logins will work, so it should be *much* easier
 for people to contribute to the Wiki.


Ah! Federated login! Any plans to add OpenID? I have this nice OpenID
provider hanging around here...

Stefan

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la 
Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473




signature.asc
Description: OpenPGP digital signature
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Alan DeKok
Stefan Winter wrote:
   The github  Facebook logins will work, so it should be *much* easier
 for people to contribute to the Wiki.

 
 Ah! Federated login! Any plans to add OpenID? I have this nice OpenID
 provider hanging around here...

  Sure... but we have hard-code the URL, and register the app.

  That takes ~10 min, but it needs to be done.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Stefan Winter
Hi,

   Sure... but we have hard-code the URL, and register the app.

   That takes ~10 min, but it needs to be done.

OpenID is different from OAuth (or SAML): it is completely
self-asserted. If you enable OpenID on your resource, the user is asked
Which URL can authenticate you - user enters it, gets redirected
there, and comes back with some token when done.

So, my identity on OpenID is for example
https://clueless.restena.lu/swinter - and that's the input I provide.

The concept is kind of cute, but some people are scared by the
self-assertedness of identity.

Stefan


   Alan DeKok.
 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la 
Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473




signature.asc
Description: OpenPGP digital signature
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Alan DeKok
Stefan Winter wrote:
 The concept is kind of cute, but some people are scared by the
 self-assertedness of identity.

  Ah, yes.  I'd rather avoid that, quite frankly.

  While I dislike the facebook everywhere integration, there are
multiple alternatives.  github, twitter, etc.  And using those guys to
filter out spammers is wonderful.

  Using self-assertions of identity means that anyone can edit the
pages.  Here anyone means spammer. :(

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Phil Mayers

On 27/05/11 12:30, Alan DeKok wrote:


   The github  Facebook logins will work, so it should be *much* easier
for people to contribute to the Wiki.


Are there any plans to let google accounts login - I happen to have a 
github account now, but since Google have tentacles everywhere... ;o)

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Alan DeKok
Phil Mayers wrote:
 Are there any plans to let google accounts login - I happen to have a
 github account now, but since Google have tentacles everywhere... ;o)

  Arran's on it.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Fajar A. Nugraha
On Fri, May 27, 2011 at 6:30 PM, Alan DeKok al...@deployingradius.com wrote:
 Arran Cudbard-Bell wrote:
 Unfortunately the new wiki isn't ready from primetime. The mediawiki
 page format renderer in gollum isn't perfect, so we need to convert
 those pages to RST as a priority.

  In order to encourage people to contribute, we've made the new wiki
 live on http://wiki.freeradius.org.  Please bear with us for a day or
 two while we get some of the kinks worked out.

... like http://wiki.freeradius.org/FAQ , which worked fine just a few
minutes ago but now showing

Grit::GitRuby::Internal::LooseObjectError at /FAQ
size mismatch
file: loose.rb location: get_raw_object line: 59

Where would the correct place to report these types of error be? This
list, or directly to you or Arran?

-- 
Fajar

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Alan DeKok
Fajar A. Nugraha wrote:
 ... like http://wiki.freeradius.org/FAQ , which worked fine just a few
 minutes ago but now showing

  Argh.  Fixed.

  This means that some of the changes have been reverted.  Arran is
working adding them back.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Arran Cudbard-Bell

On May 27, 2011, at 8:57 AM, Fajar A. Nugraha wrote:

 On Fri, May 27, 2011 at 6:30 PM, Alan DeKok al...@deployingradius.com wrote:
 Arran Cudbard-Bell wrote:
 Unfortunately the new wiki isn't ready from primetime. The mediawiki
 page format renderer in gollum isn't perfect, so we need to convert
 those pages to RST as a priority.
 
  In order to encourage people to contribute, we've made the new wiki
 live on http://wiki.freeradius.org.  Please bear with us for a day or
 two while we get some of the kinks worked out.
 
 ... like http://wiki.freeradius.org/FAQ , which worked fine just a few
 minutes ago but now showing
 
 Grit::GitRuby::Internal::LooseObjectError at /FAQ
 size mismatch
 file: loose.rb location: get_raw_object line: 59
 
 Where would the correct place to report these types of error be? This
 list, or directly to you or Arran?
 

Me or Alan, then if we don't respond the list. I've had to restore the original 
FAQ page, the git version was completely hosed, no idea why.

If you still have a copy of the changes locally, please re-submit them.

Apologies,
Arran

Arran Cudbard-Bell
RM-RF Limited - Security consultation and contracting
VoIP: +1 916-436-1352 Cell: +44 7854041841





-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Arran Cudbard-Bell

On May 27, 2011, at 9:30 AM, Alan DeKok wrote:

 Fajar A. Nugraha wrote:
 ... like http://wiki.freeradius.org/FAQ , which worked fine just a few
 minutes ago but now showing
 
  Argh.  Fixed.
 
  This means that some of the changes have been reverted.  Arran is
 working adding them back.

Alan is also going to add a cron job to push the repository up to another 
remote server to make sure we don't loose too much information if this happens 
again.

-Arran

Arran Cudbard-Bell
RM-RF Limited - Security consultation and contracting
VoIP: +1 916-436-1352 Cell: +44 7854041841





-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


New FreeRADIUS wiki - Help appreciated!

2011-05-26 Thread Arran Cudbard-Bell
Dear Users,

One of the largest complains with FreeRADIUS is the lack of comprehensive 
documentation.

The current wiki @ wiki.freeradius.org has served its purpose, but has 
ultimately failed to provide an update to date, well organised source of 
documentation.

The current major problems with the wiki are:
* spam users - which meant we had to lock registration, and discouraged new 
users from contributing
* exporting information - all pages are stored in an sql lite instance, which 
makes it hard to automatically roll pages into releases
* formatting information - Information stored in the wiki is in the Media wiki 
format, whereas the documentation bundled with FreeRADIUS is either unformatted 
or in rst format.

To try and solve these issues and glue everything together a bit more, i've 
been working with Alan DeKok to set up a new instance of Gollum. Gollum is a 
ruby on rails application which exposes a git repository as wiki site. Gollum 
can render files in many markup languages including plaintext, RST and 
Mediawiki format, which means we can import all current server documentation, 
all current wiki documentation and have them neatly presented in a single wiki 
site. Neat huh?

But what about spam and registration? Well by default gollum doesn't 
authenticate anyone. But because it's a rails application we can drop in a 
library called 'OmniAuth' which uses Oauth to authenticate a bunch of providers.

This allows us to leverage authentication and spam account prevention services 
of providers like GitHub, Facebook and Twitter.

Unfortunately the new wiki isn't ready from primetime. The mediawiki page 
format renderer in gollum isn't perfect, so we need to convert those pages to 
RST as a priority.

If you want to help out, please do the following:
1) Sign up for Facebook, Twitter or GitHub
2) Go to http://power.freeradius.org:4567
3) Pick a page where the MediaWiki format doesn't render correctly
4) Edit it
5) Change edit mode from MediaWiki to reStructuredText
6) Convert markup to RST (see here: 
http://docutils.sourceforge.net/docs/ref/rst/restructuredtext.html)
7) Save the page
8) Get warm fuzzy glow from contributing to open source

Also please report any bugs here:
https://github.com/github/gollum/issues?_pjax=truestate=open

Many Thanks,
Arran


Arran Cudbard-Bell
RM-RF Limited - Security consultation and contracting
VoIP: +1 916-436-1352 Cell: +44 7854041841




-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: New FreeRADIUS wiki - Help appreciated!

2011-05-26 Thread Fajar A. Nugraha
On Fri, May 27, 2011 at 7:29 AM, Arran Cudbard-Bell
a.cudba...@gmail.com wrote:
 If you want to help out, please do the following:
 1) Sign up for Facebook, Twitter or GitHub
 2) Go to http://power.freeradius.org:4567

http://power.freeradius.org:4567 is problematic from here (slow, and
sometimes it gives connect errors) while the old wiki loads just fine.
Is this a location problem (e.g. hosted on not-so-good datacenter),
server problem (e.g. not enough RAM), or application problem (e.g.
non-optimum sql queries)?

-- 
Fajar

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-26 Thread Arran Cudbard-Bell

On May 26, 2011, at 6:09 PM, Fajar A. Nugraha wrote:

 On Fri, May 27, 2011 at 7:29 AM, Arran Cudbard-Bell
 a.cudba...@gmail.com wrote:
 If you want to help out, please do the following:
 1) Sign up for Facebook, Twitter or GitHub
 2) Go to http://power.freeradius.org:4567
 
 http://power.freeradius.org:4567 is problematic from here (slow, and
 sometimes it gives connect errors) while the old wiki loads just fine.
 Is this a location problem (e.g. hosted on not-so-good datacenter),
 server problem (e.g. not enough RAM), or application problem (e.g.
 non-optimum sql queries)?

I'm not sure why it appears slow from where you are, it's pretty speedy from 
Sacramento, California, and the Server is in France.

Also the new wiki doesn't use SQL, as I mentioned in the previous post all data 
storage is GIT.

I did just have to restart it to fix some issues with the login status bar at 
the top which was broken by an update to the Mustache markup library, which may 
explain the connection errors.

Please let me know if you continue to experience slowness and connection errors.

Thanks,
Arran

Arran Cudbard-Bell
RM-RF Limited - Security consultation and contracting
VoIP: +1 916-436-1352 Cell: +44 7854041841





-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-26 Thread Fajar A. Nugraha
On Fri, May 27, 2011 at 8:22 AM, Arran Cudbard-Bell
a.cudba...@gmail.com wrote:

 On May 26, 2011, at 6:09 PM, Fajar A. Nugraha wrote:

 On Fri, May 27, 2011 at 7:29 AM, Arran Cudbard-Bell
 2) Go to http://power.freeradius.org:4567

 http://power.freeradius.org:4567 is problematic from here (slow, and
 sometimes it gives connect errors) while the old wiki loads just fine.


 I'm not sure why it appears slow from where you are, it's pretty speedy from 
 Sacramento, California, and the Server is in France.

 Also the new wiki doesn't use SQL, as I mentioned in the previous post all 
 data storage is GIT.

 I did just have to restart it to fix some issues with the login status bar at 
 the top which was broken by an update to the Mustache markup library, which 
 may explain the connection errors.

 Please let me know if you continue to experience slowness and connection 
 errors.

It's still slow. Using wget reveals something interesting though:
- it's connected almost immediately
- HTTP request sent, awaiting response... took over 10 seconds
- once I got 200 OK, the content is transferred very quickly, so
it's not connection speed problem.

Does ruby (or apache, or whatever web frontend you use) perform
reverse address lookup by default? If yes, it might explain the long
response time somewhat.

-- 
Fajar
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-26 Thread Arran Cudbard-Bell
 
 It's still slow. Using wget reveals something interesting though:
 - it's connected almost immediately
 - HTTP request sent, awaiting response... took over 10 seconds
 - once I got 200 OK, the content is transferred very quickly, so
 it's not connection speed problem.
 
 Does ruby (or apache, or whatever web frontend you use) perform
 reverse address lookup by default? If yes, it might explain the long
 response time somewhat.
 

*sigh* webrick does indeed perform reverse lookup by default, what does that?!

Had to update the entire ruby install to 1.9.2 to get the version of the 
library which allows you to disable it, but it is now disabled and I can the 
logs are no longer showing FQDNs.

Could you try one last time and see if this was the issue you were running in 
to.

Many thanks,
Arran


Arran Cudbard-Bell
RM-RF Limited - Security consultation and contracting
VoIP: +1 916-436-1352 Cell: +44 7854041841





-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-26 Thread Fajar A. Nugraha
On Fri, May 27, 2011 at 9:26 AM, Arran Cudbard-Bell
a.cudba...@gmail.com wrote:

 It's still slow. Using wget reveals something interesting though:
 - it's connected almost immediately
 - HTTP request sent, awaiting response... took over 10 seconds
 - once I got 200 OK, the content is transferred very quickly, so
 it's not connection speed problem.

 Does ruby (or apache, or whatever web frontend you use) perform
 reverse address lookup by default? If yes, it might explain the long
 response time somewhat.


 *sigh* webrick does indeed perform reverse lookup by default, what does that?!

 Had to update the entire ruby install to 1.9.2 to get the version of the 
 library which allows you to disable it, but it is now disabled and I can the 
 logs are no longer showing FQDNs.

 Could you try one last time and see if this was the issue you were running in 
 to.

It works great now, thanks.

So the current policy is:
- anyone can register (via github etc)
- any logged-in user can create/edit new page

Is that correct? I'll try updating the FAQ with some new entries later.

-- 
Fajar
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-26 Thread Arran Cudbard-Bell

On May 26, 2011, at 7:41 PM, Fajar A. Nugraha wrote:

 On Fri, May 27, 2011 at 9:26 AM, Arran Cudbard-Bell
 a.cudba...@gmail.com wrote:
 
 It's still slow. Using wget reveals something interesting though:
 - it's connected almost immediately
 - HTTP request sent, awaiting response... took over 10 seconds
 - once I got 200 OK, the content is transferred very quickly, so
 it's not connection speed problem.
 
 Does ruby (or apache, or whatever web frontend you use) perform
 reverse address lookup by default? If yes, it might explain the long
 response time somewhat.
 
 
 *sigh* webrick does indeed perform reverse lookup by default, what does 
 that?!
 
 Had to update the entire ruby install to 1.9.2 to get the version of the 
 library which allows you to disable it, but it is now disabled and I can the 
 logs are no longer showing FQDNs.
 
 Could you try one last time and see if this was the issue you were running 
 in to.
 
 It works great now, thanks.

Glad its fixed.

 So the current policy is:
 - anyone can register (via github etc)
 - any logged-in user can create/edit new page
 
 Is that correct? I'll try updating the FAQ with some new entries later.

That's correct. We may add group restrictions at some point if they're needed, 
but if there's no spam issues or edit wars then it's probably not necessary.


-Arran

Arran Cudbard-Bell
RM-RF Limited - Security consultation and contracting
VoIP: +1 916-436-1352 Cell: +44 7854041841





-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-26 Thread Alan DeKok
Fajar A. Nugraha wrote:
 So the current policy is:
 - anyone can register (via github etc)
 - any logged-in user can create/edit new page
 
 Is that correct? I'll try updating the FAQ with some new entries later.

  Yes.  By using OAuth, we can avoid the problem of managing users
ourselves, and also tie edits to real people.  That should avoid most
of the spam issues.

  The wiki is also available via git, in case you want to do off-line
editing.

  I'll move the DNS entries, and update the web server so that it
becomes the new wiki.freeradius.org.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: New FreeRADIUS wiki - Help appreciated!

2011-05-26 Thread Alan DeKok
Fajar A. Nugraha wrote:
 Is this a location problem (e.g. hosted on not-so-good datacenter),
 server problem (e.g. not enough RAM), or application problem (e.g.
 non-optimum sql queries)?

  It's a quad-core 8G system with 1Tb of disk, and 1Gb connection to the
net.  I think it's fine. :)

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html