RE: [gentoo-user] Protecting my server against an individual
> Don't spend too much time, as it's a waste. You will NOT see > my MAC address. Not because I try to disguise it, but because > it won't be available to you. That's simply how TCP/IP works. There is one caveat to this, I if you are running a 802.11 wifi, the MAC is sent in the packets and then MAC filtering could be a rudimentary deterrent for basic attacks. As mentioned however, it is absolutely possible and trivial to 'spoof' a MAC. -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] OT: A/V muxing application ?
On Sat, 8 Jul 2006 18:57:33 +0200, Hans-Werner Hilse wrote: > > Do you know of a decent graphical program for editing DVB files. All I > > really need is to be able to cut out commercials etc. A command line > > program would do, but graphical would be easier. > > That would be the ProjectX mentioned by Meino Christian. Works well for > me. lve (Linux Video Editor) can do this, too, but I found the > interface quite non-intuitive and dropped it after all in favor of > ProjectX. OK. I looked at some info on ProjectX and got the impression it was a command line program. It seems like just what I want. Thanks. -- Neil Bothwick Always remember you're unique, just like everyone else. signature.asc Description: PGP signature
Re: [gentoo-user] OT: A/V muxing application ?
On Sat, 08 Jul 2006 20:36:01 +0200, Daniel Pielmeier wrote: > If you just want to cut out commercials i recommend you ttcut, it is > only designed for this purpose. Ttcut is able to cut the video > frame-accurate and not only on I-Frames. It doesn't appear to do that here, the Cut-In button is ghosted for most frames, so I end up cutting slightly off fro where I wanted anyway. -- Neil Bothwick C:\DOS\SYSTEM\BATCH\UTILS\API\DOCS\READ\STORED\WHERE\THE\HELL\AM\I\? signature.asc Description: PGP signature
[gentoo-user] Cleaner USE variable in /etc/make.conf
I have a long USE variable (starts with "-*", so I enter stuff
manually. At one point it got to be something like...
USE="-* 3dnow X a52 aac alsa bitmap-fonts bzip2 cdr dga dio divx4linux dri dvd
dvdr dvdread encode exif ffmpeg flac fortran gb gif gtk2 imlib jpeg maildir
mikmod mime mmap mmx mng mp3 mpeg ncurses nptl nptlonly nsplugin offensive ogg
opengl plotutils png posix quicktime readline sdl sharedmem slang sockets sse
sse2 theora threads tiff truetype truetype-fonts type1-fonts vcd vorbis
win32codecs wmf xpm xv zlib"
BLEAGH! I've now broken it up into logical groupings...
USE_cpu="3dnow mmx sse sse2"
USE_font="bitmap-fonts truetype-fonts type1-fonts"
USE_gui="X dga dri gtk2 opengl sdl xv"
USE_multimedia="a52 aac alsa divx4linux encode exif ffmpeg flac gif jpeg mikmod
mng mp3 mpeg ogg png quicktime theora tiff vcd vorbis win32codecs wmf xpm"
USE_misc="bzip2 cdr dio dvd dvdr dvdread fortran gb imlib maildir mime mmap
ncurses nptl nptlonly nsplugin offensive plotutils posix readline sharedmem
slang sockets threads zlib"
which is followed by...
USE="-* ${USE_cpu} ${USE_font} ${USE_gui} ${USE_multimedia} ${USE_misc}"
My USE variable still ends up with the same information, but I have an
easier time editing it. The only question I have is whether there are
any groups of reserved variable names /etc/make.conf, so that I don't
screw up system variables.
This won't be the final config. I'm trying to figure out a logical
way to break up "USE_multimedia", but I run into programs like mplayer
that work with audio, video, and still images. "USE_misc" will always
be a candidate for taking stuff out.
--
Walter Dnes <[EMAIL PROTECTED]> In linux /sbin/init is Job #1
My musings on technology and security at http://tech_sec.blog.ca
--
gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
On Sun, Jul 09, 2006 at 05:29:06PM +0200, Alexander Skwar wrote > Gerhard Hoogterp schrieb: > >> When I say "yes" I mean "yes". When I say "no" I mean "no". And I > >>don't mean "just until the next update" either. I have reasons for my > >>settings; please don't act like Windows and assume that you know better > >>than me. And there is no excuse whatsoever for wiping out the custom > >>settings in /etc/conf.d/local.start > > > >As I wrote in an other mail: Stop interfering with the actual configfile > >and add the changes to a config.conf.dist file. > > Yep, you wrote that, and I answered that *I* would *NOT* like this. > I like it, that I can use a program right away - at least in a > "default" way. If you had your way, *NO* program which relied on > configuration files would be usable after installation, as no > configuration file could be found. Because of that, I would not want > to happen what you proposed. I think there's a mis-understanding here. Gerhard and I are complaining about config files being possibly *OVERWRITTEN* with default settings. If there's no config file, sure write the default config file. But if someone has customized a config file, assume that they know what they're doing, and leave settings alone. -- Walter Dnes <[EMAIL PROTECTED]> In linux /sbin/init is Job #1 My musings on technology and security at http://tech_sec.blog.ca -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
Walter Dnes wrote: > I think there's a mis-understanding here. Gerhard and I are > complaining about config files being possibly *OVERWRITTEN* with default > settings. If there's no config file, sure write the default config > file. But if someone has customized a config file, assume that they > know what they're doing, and leave settings alone. And that's what's currently happening - the settings are left alone, *UNLESS* you make etc-update overwrite your original file. But generally, the files are *NOT* touched. Alexander Skwar -- My father taught me three things: (1) Never mix whiskey with anything but water. (2) Never try to draw to an inside straight. (3) Never discuss business with anyone who refuses to give his name. -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Keyboard Layout
I added setxkbmap us_intl do ~/.xprofile, but still haven't had time to verify if it did the job. I've found something about internationatization somewhere in the gentoo wikipedia. On 7/10/06, Benno Schulenberg <[EMAIL PROTECTED]> wrote: Cláudio Henrique wrote: > I've beem having problems setting my kbd layout. I added a line > in xorg.conf telling it to use "us_intl" as my kbd layout, but it > seems to be ignoring it. > as a consequence, I have to execute "setxkbmap us_intl" every > time I enter Gnome. I also tried adding it to ~/.xinitrc . Maybe Gnome is overriding the keyboard setting, doing a setxkbmap of its own? Putting it .xinitrc then comes too early. Try putting it in .bashrc and make a Terminal open on every startup? On make Gnome stop setting the keyboard. Benno -- gentoo-user@gentoo.org mailing list -- gentoo-user@gentoo.org mailing list
[solved?] Re: [gentoo-user] modular X, nvidia, and unresolved symbols
It appears that the nvidia driver wants something that isn't available when the "minimal" use flag is present during the xorg-server compile. Eliminating this use flag got rid of the unresolved symbols. -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
Alexander Skwar wrote: > Walter Dnes wrote: > > >> I think there's a mis-understanding here. Gerhard and I are >> complaining about config files being possibly *OVERWRITTEN* with default >> settings. If there's no config file, sure write the default config >> file. But if someone has customized a config file, assume that they >> know what they're doing, and leave settings alone. >> > > And that's what's currently happening - the settings are left > alone, *UNLESS* you make etc-update overwrite your original > file. But generally, the files are *NOT* touched. > > Alexander Skwar > Correct. I can remember when it used to try to overwrite fstab every time, well, it seemed like it anyway. It doesn't do that anymore though. It puts the new file there but the one we, the person in the chair, changed does not get touched until you run etc-update and tell it to change it. Careful with that -5 option. Sounds like some are not using etc-update correctly. Dale :-) :-) -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
Dale wrote: Careful with that -5 option. delta ~ # ( while true ; do echo -5\n ; done ) | etc-update *shifty eyes* -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
On 7/11/06, Walter Dnes <[EMAIL PROTECTED]> wrote: On Sun, Jul 09, 2006 at 05:29:06PM +0200, Alexander Skwar wrote > Gerhard Hoogterp schrieb: > >> When I say "yes" I mean "yes". When I say "no" I mean "no". And I > >>don't mean "just until the next update" either. I have reasons for my > >>settings; please don't act like Windows and assume that you know better > >>than me. And there is no excuse whatsoever for wiping out the custom > >>settings in /etc/conf.d/local.start > > > >As I wrote in an other mail: Stop interfering with the actual configfile > >and add the changes to a config.conf.dist file. > > Yep, you wrote that, and I answered that *I* would *NOT* like this. > I like it, that I can use a program right away - at least in a > "default" way. If you had your way, *NO* program which relied on > configuration files would be usable after installation, as no > configuration file could be found. Because of that, I would not want > to happen what you proposed. I think there's a mis-understanding here. Gerhard and I are complaining about config files being possibly *OVERWRITTEN* with default settings. If there's no config file, sure write the default config file. But if someone has customized a config file, assume that they know what they're doing, and leave settings alone. That only happens if YOU do it. No config file is EVER changed without your permission by portage, if it does not exist, a default is copied, but if there's already one, no. Another thing, some programs will NOT WORK AT ALL if you do not update your config files, been there, done that. If your program, in its evolution process, increases security, changes some variable names, change its behavior in any way while dealing with config files, and you keep your old config, you're in trouble. Gentoo gives you the new format config file, so you can merge changes interactively, avoiding problems and keeping your config up-to-date. What other config file protection does that?! -- Walter Dnes <[EMAIL PROTECTED]> In linux /sbin/init is Job #1 My musings on technology and security at http://tech_sec.blog.ca -- gentoo-user@gentoo.org mailing list -- Daniel da Veiga Computer Operator - RS - Brazil -BEGIN GEEK CODE BLOCK- Version: 3.1 GCM/IT/P/O d-? s:- a? C++$ UBLA++ P+ L++ E--- W+++$ N o+ K- w O M- V- PS PE Y PGP- t+ 5 X+++ R+* tv b+ DI+++ D+ G+ e h+ r+ y++ --END GEEK CODE BLOCK-- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
On 7/9/06, Alexander Skwar <[EMAIL PROTECTED]> wrote: WouldPORTAGE_ELOG_MAILURI="[EMAIL PROTECTED] user:[EMAIL PROTECTED]:pass_with_:[EMAIL PROTECTED]@mailserver:port" work? For clarification:user= user:[EMAIL PROTECTED]pass=pass_with_:[EMAIL PROTECTED]mailserver=mailserverport=port Well, ymmv, but assuming the mailer parses the uri the same way HTTP does, You would have to percent encode the character with special meanings: So, it would be more like this: user=user%3Aname%40bsp.invalidpass=pass_with_%3A_colon%40domainmailserver=mailserverport=portYeilding: PORTAGE_ELOG_MAILURI=\ " [EMAIL PROTECTED] user%3Aname%40bsp.invalid:[EMAIL PROTECTED]:port" (Line break added to discourage wrapping)dcm
Re: [gentoo-user] OT: A/V muxing application ?
>> If you just want to cut out commercials i recommend you ttcut, it is >> only designed for this purpose. Ttcut is able to cut the video >> frame-accurate and not only on I-Frames. > > It doesn't appear to do that here, the Cut-In button is ghosted for most > frames, so I end up cutting slightly off fro where I wanted anyway. > If you want to use frame-accurate encoding you have to enable it under: Action->Settings->Encoding->Use Encoding Mode -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] OT: A/V muxing application ?
On Tue, 11 Jul 2006 19:29:41 +0200, Daniel Pielmeier wrote: > If you want to use frame-accurate encoding you have to enable it under: > Action->Settings->Encoding->Use Encoding Mode OK, I'll try that. Thanks. -- Neil Bothwick Unable to open TROUSER.ZIP - replace floppy and retry. signature.asc Description: PGP signature
[gentoo-user] Re: d
On Tuesday 11 July 2006 08:29, Roy Wright wrote: > James wrote: > > Ah, that brings up a follow up question. If many of the ebuild > > packages have built in documentation, then is there a > > tool/package/web_interface that allow the document perusal without > > individual(admin) interaction? For example, man pages are auto > > loaded and ready with 'man ' so I'd be interested in any > > similiar doc system for xml, html, doc* > > > > It seems like quite often I have to go on a search expedition for > > docs > > > > Is there a gentoo standard or a wiki related to this subject? > > This is an interesting question. To my knowledge we have man pages, > info pages, application > and upstream documentation, but no unified access tool. The closest > would be > beagle (I haven't looked a beagle since 0.0.10). Using 0.2.7, it's quite good. I'm also testing kat (an indexing framework for KDE) http://sourceforge.net/projects/kat, but still unsure if it's a viable alternative to beagle. http://bugs.gentoo.org/show_bug.cgi?id=92113 comments welcome :-) ciao Francesco -- Linux Version 2.6.17-gentoo-r2, Compiled #1 PREEMPT Sat Jul 8 07:47:35 CEST 2006 One 2.2GHz AMD Athlon 64 Processor, 2GB RAM, 4410.67 Bogomips Total aemaeth -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Keyboard Layout
Cláudio Henrique wrote: > hi, there, > I've beem having problems setting my kbd layout. I added a line in > xorg.conf telling it to use "us_intl" as my kbd layout, but it seems > to be ignoring it. > as a consequence, I have to execute "setxkbmap us_intl" every time I > enter Gnome. I also tried adding it to ~/.xinitrc . If you're on stable (7.0 or above), us_intl no longer exists. You probably want this in xorg.conf: Option "XkbLayout" "latin" Option "XkbOptions" "lv3:ralt_switch" Thanks, Donnie signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] lost deadkeys layout
Alle 22:58, lunedì 10 luglio 2006, Benno Schulenberg ha scritto: > Luigi Pinna wrote: > > /usr/share/X11/xkb/symbols/de > > So you had a "de" map, and in the right place. So that wasn't the > problem. > > > # ln -snf ../../share/X11/xkb/ X11/xkb > > > > ? > > It's a command, to be executed as root (that's what the "#" means), > it links the old place of keyboard maps to the new one. But it > seems you have bigger problems now than just an unwilling keyboard. I didn't understand from where it should be: a local path means that I am in a directory and not in / I tried it now... It's works! Thanks! > > When I restarted X, X crashed! > > Crashed? Like how? > > Benno All the old trials were without restarting the boot service xdm, after restarting I couldn't start it again. I had simple no keyboard or mouse, the screen stays black and the only action possible is to restart all. The Xorg.0.log says no error. If you want I can send it. Luigi -- Public key GPG(0x633F86B7) on hkp://keyserver.linux.it/ -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
> > I think there's a mis-understanding here. Gerhard and I are > > complaining about config files being possibly *OVERWRITTEN* with default > > settings. If there's no config file, sure write the default config > > file. But if someone has customized a config file, assume that they > > know what they're doing, and leave settings alone. > > That only happens if YOU do it. No config file is EVER changed without > your permission by portage, if it does not exist, a default is copied, > but if there's already one, no. Sure and if Ihad lots of time I would do an emerge world every day just to check a few files. Regretfully, with 5 servers, some 28 websites and some other work too I don't have that daily time. So when I update my system I have to go through pages full of diffs, checking every diff to see if, besides all the settings returning to default, there are also changes that I should be aware off. A wrong key is easily pressed and there you go.. And why? Yes I changed my settings and yes etc-update or dispatch-conf show me carefully every moved point or comma. Thanks, but I know I changed those and I did that on purpose. Untouched files are already on auto-pilot. Show me what is added or removed. And since it can only do that by comparing the new file to a clean, untouched, original file I innocently suggested to have such a file, make changes there and leave it up to the admin to check if settings are added or removed and deal with these changes in the active config file.. And in that case don't bother showing the diff.. just tell me which files have changed and *offer* to show the changes. But don't touch my active configes.. not automatically, not ever.. Guess I'm just paranoid.. but then again, sometimes a healty amount of paranoia keeps you out of a lot of troubles.. Gerhard -- Ithaka photography, http://ithaka.mine.nu/ -- gentoo-user@gentoo.org mailing list
[gentoo-user] No more xorg upgrade?
Hello, I've recently synced. emerge -up world do not want to upgrade xorg-x11 to 7.0. Only upgrade from 6.8.2-r7 to 6.8.2-r8 is printed. Before this sync, the xorg-x11 wants to be upgraded from 6.8.2-r7 to 7.0-r1. Previous sync I did shortly after modular xorg becomes stable. I did not update xorg yet nor did emerge -u world. It seems to be portage bug, isn't it? Normal "world" update: $ emerge -up world | grep xorg [ebuild U ] x11-base/xorg-x11-6.8.2-r8 [6.8.2-r7] USE="dlloader*" When merging directly xorg-x11 it want to upgrade to 7.0-r1: $ emerge -up xorg-x11 | grep xorg-x11-7.0 [blocks B ] <=x11-base/xorg-x11-6.9 (is blocking x11-base/xorg-x11-7.0-r1) [ebuild U ] x11-base/xorg-x11-7.0-r1 [6.8.2-r7] INPUT_DEVICES="evdev% keyboard% mouse% -acecad% -aiptek% -calcomp% -citron% -digitaledge% -dmc% -dynapro% -elo2300% -elographics% -fpit% -hyperpen% -jamstudio% -joystick% -magellan% -magictouch% -microtouch% -mutouch% -palmax% -penmount% -spaceorb% -summa% -synaptics% -tek4957% -ur98% -vmmouse% -void% -wacom%" VIDEO_CARDS="-apm% -ark% -chips% -cirrus% -cyrix% -dummy% -fbdev% -fglrx% -glint% -i128% -i810% -mach64% -mga% -neomagic% -nv% -nvidia% -r128% -radeon% -rendition% -s3% -s3virge% -savage% -siliconmotion% -sis% -sisusb% -tdfx% -tga% -trident% -tseng% -v4l% -vesa% -vga% -via% -vmware% -voodoo%" Also when merging some package (which depend on X) with --update switch, it also wants correctly to upgrade xorg to 7.0. $ emerge -up xscreensaver | grep xorg-x11-7.0 [blocks B ] <=x11-base/xorg-x11-6.9 (is blocking x11-base/xorg-x11-7.0-r1) [ebuild U ] x11-base/xorg-x11-7.0-r1 [6.8.2-r7] INPUT_DEVICES="evdev%... Robert -- Robert Cernansky E-mail: [EMAIL PROTECTED] Jabber: [EMAIL PROTECTED] -- gentoo-user@gentoo.org mailing list
[gentoo-user] Re: Cleaner USE variable in /etc/make.conf
Walter Dnes waltdnes.org> writes:
> BLEAGH! I've now broken it up into logical groupings...
USE_cpu="3dnow mmx sse sse2"
USE_font="bitmap-fonts truetype-fonts type1-fonts"
USE_gui="X dga dri gtk2 opengl sdl xv"
USE_multimedia="a52 aac alsa divx4linux encode exif ffmpeg flac
gif jpeg mikmod mng mp3 mpeg ogg png quicktime theora tiff vcd
vorbis win32codecs wmf xpm"
USE_misc="bzip2 cdr dio dvd dvdr dvdread fortran gb imlib maildir
mime mmap ncurses nptl nptlonly nsplugin offensive plotutils
posix readline sharedmem slang sockets threads zlib"
>
I too, have many, many flags set. I broke mine up sime time ago, but
I did not 'characterize' them as you have done. I find this a most
excellent idea.
Some time ago Cirian M. posted this little nugget to help one quickly
determine the meaning/purpose of flags. I put it in my bashrc file:
# USE flag settings by Ciaran McCreesh:
explainuseflag(){ sed -ne "s,^\([^ ]*:\)\?$1 - ,,p" $(portageq
portdir)/profiles/use.{,local.}desc; }
alias ef="explainuseflag"
> which is followed by...
> USE="-* ${USE_cpu} ${USE_font} ${USE_gui} ${USE_multimedia} ${USE_misc}"
What exactly are you hoping to be able to do with these constructs?
(sorry, I'm missing the point of these constructs).
> My USE variable still ends up with the same information, but I have an
> easier time editing it. The only question I have is whether there are
> any groups of reserved variable names /etc/make.conf, so that I don't
> screw up system variables.
I ran across some reserved words some time ago. But I did not save the
URl... It might be prudent to discover the most recent system (default)
flags as they have most recently changed.
> This won't be the final config. I'm trying to figure out a logical
> way to break up "USE_multimedia", but I run into programs like mplayer
> that work with audio, video, and still images.
Aren't all of these 'multimedia'? I sense you are looking for
a cleaner breakdown of flag groups to avoid the largess of a
'multimedia' category. But that is subjective and difficult.
Think about it, I can have jpeg images and then motion jpeg
video. But, the flags may effect the performance of both
technolgies in yet differenent software packages. That's why
the term multimedia is so prevalent. My only real suggestion
is look at the collection of flags you have and derive a breakdown
that works for the (current) flags you have. It will be subjective
and highly dependent on your selected flags to come up with small
categories. Maybe you can break it up like this:
# Multimedia
"USE_mplayer"
"USE_ffmpeg"
"USE_audio"
"USE_video-players"
Where your selected categories are not so rigid as audio, stills,
video, etc?
> "USE_misc" will always be a candidate for taking stuff out.
"USE_Apache"
or
"USE_db" might be appropriate on some systems?
Indeed, even the other groups will expand/contract as time
progresses. All in all, you have take steps that I have often
thought about, but, have deferred expenditures of time on. I'm
interested to follow progression of your ideas.
On as similar note, I have extensive settings in the /etc/portage
files, particularly on those servers and workstations with
multimeida. What I have done to keep some form of sanity, in those
files, is to have a core group of entries that are common to many
of the gentoo systems I manage. Then each system in each of the
files {package.keywords, package.use, etc} have a section that
is unique, i.e. different from the other system but are semi-permanent
settings. At the top of these files, there is a section where the
entries are tenuous or experimental..
Do post your progress and thoughts as I find it interesting
to the point of motivational for my ever-expanding world
of gentoo system support. Logical organization of all things
multimedia, is a challenge, methinks.
James
--
gentoo-user@gentoo.org mailing list
Re: [gentoo-user] No more xorg upgrade?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alle 21:13, martedì 11 luglio 2006, Robert Cernansky ha scritto: > Hello, > > I've recently synced. emerge -up world do not want to upgrade > xorg-x11 to 7.0. Only upgrade from 6.8.2-r7 to 6.8.2-r8 is printed. > Before this sync, the xorg-x11 wants to be upgraded from 6.8.2-r7 to > 7.0-r1. > > Previous sync I did shortly after modular xorg becomes stable. I did > not update xorg yet nor did emerge -u world. It seems to be portage > bug, isn't it? No, xorg-x11-7.0 is modular X. You must remove manually xorg and reemerge it. Follow the guide: http://www.gentoo.org/proj/en/desktop/x/x11/modular-x-howto.xml - -- Public key GPG(0x633F86B7) on hkp://keyserver.linux.it/ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFEs/wUHmkkjmM/hrcRAqKhAJ45eOd805ouvTiJd26jsgYA4ysVvACfdWz1 LBL0xnj8hWrYDeHcBw5Z4/g= =hWp3 -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
[gentoo-user] Postix+SASL with LDAP
Hi, I configured my PAM (using nsswitch.conf) to auth against a LDAP server. Everything works fine and now I want to setup postifix to permit only authenticated users to send e-mail through my smtp server. But when I try to auth via smtp client, I got the following message on /var/log/message: Jul 11 16:28:04 embedded postfix/smtpd[24105]: < unknown[192.168.1.100]: TlRMTVNTUAABB4IIogAFASgKDw== Jul 11 16:28:04 embedded postfix/smtpd[24105]: smtpd_sasl_authenticate: decoded response: NTLMSSP Jul 11 16:28:04 embedded postfix/smtpd[24105]: NTLM server step 1 Jul 11 16:28:04 embedded postfix/smtpd[24105]: client flags: 8207 Jul 11 16:28:04 embedded postfix/smtpd[24105]: smtpd_sasl_authenticate: uncoded challenge: NTLMSSP Jul 11 16:28:04 embedded postfix/smtpd[24105]: > unknown[192.168.1.100]: 334 TlRMTVNTUAACOgA6ADAFggIA6WWAtbNxa0MARQBNAEIARQBEAEQARQBEAC4ARQBNAEIARQBEAEQARQBEAC4AVQBGAEMARwAuAEUARABVAC4AQgBSAA== Jul 11 16:28:04 embedded postfix/smtpd[24105]: < unknown[192.168.1.100]: TlRMTVNTUAADGAAYAGYYABgAfgBIDgAOAEgQABAAVgCWBYIAAgUBKAoPbABlAGEAbgBkAHIAbwBDAE8ATQBQAE8AUgAwADYARHEN7mzgGaygXDkCXVzTuqazkUkib2OfybAb9R10AJ/mF/gI2dSKNw0NIFxhMmhx Jul 11 16:28:04 embedded postfix/smtpd[24105]: smtpd_sasl_authenticate: decoded response: NTLMSSP Jul 11 16:28:04 embedded postfix/smtpd[24105]: NTLM server step 2 Jul 11 16:28:04 embedded postfix/smtpd[24105]: client user: leandro Jul 11 16:28:04 embedded postfix/smtpd[24105]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasl2/sasldb2: Permission denied Jul 11 16:28:04 embedded postfix/smtpd[24105]: warning: SASL authentication failure: no secret in database Jul 11 16:28:04 embedded postfix/smtpd[24105]: warning: unknown[192.168.1.100]: SASL NTLM authentication failed Jul 11 16:28:04 embedded postfix/smtpd[24105]: > unknown[192.168.1.100]: 535 Error: authentication failed Jul 11 16:28:04 embedded postfix/smtpd[24105]: < unknown[192.168.1.100]: AUTH NTLM Jul 11 16:28:04 embedded postfix/smtpd[24105]: smtpd_sasl_authenticate: sasl_method NTLM Jul 11 16:28:04 embedded postfix/smtpd[24105]: smtpd_sasl_authenticate: uncoded challenge: Jul 11 16:28:04 embedded postfix/smtpd[24105]: > unknown[192.168.1.100]: 334 Any clue? -- Leandro Melo de Sales. Computer Science MSc Candidate Laboratório de Sistemas Distribuídos - lsd.ufcg.edu.br Laboratório de Computação Pervasiva - embedded.ufcg.edu.br Universidade Federal de Campina Grande - UFCG -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Re: Cleaner USE variable in /etc/make.conf
On 7/11/06, James <[EMAIL PROTECTED]> wrote: Maybe you can break it up like this: # Multimedia "USE_mplayer" "USE_ffmpeg" "USE_audio" "USE_video-players" Where your selected categories are not so rigid as audio, stills, video, etc? But doesn't this idea kind of circumvent the package.use file? -Mike -- Michael E. Crute http://mike.crute.org I may not have gone where I intended to go, but I think I have ended up where I intended to be. --Douglas Adams -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
Gerhard Hoogterp schrieb: > I think there's a mis-understanding here. Gerhard and I are > complaining about config files being possibly *OVERWRITTEN* with default > settings. If there's no config file, sure write the default config > file. But if someone has customized a config file, assume that they > know what they're doing, and leave settings alone. That only happens if YOU do it. No config file is EVER changed without your permission by portage, if it does not exist, a default is copied, but if there's already one, no. Sure and if Ihad lots of time I would do an emerge world every day just to check a few files. Regretfully, with 5 servers, some 28 websites and some other work too I don't have that daily time. So when I update my system I have to go through pages full of diffs, checking every diff to see if, besides all the settings returning to default, there are also changes that I should be aware off. Maybe you should also be aware of changed defaults. A wrong key is easily pressed and there you go.. ...to get your backup. What's the problem? You *DO* have backups, don't you? It would be quite irresponsible to NOT have backups. But who am I telling that. And why? Yes I changed my settings and yes etc-update or dispatch-conf show me carefully every moved point or comma. Thanks, but I know I changed those and I did that on purpose. Untouched files are already on auto-pilot. The "auto-pilot" *MIGHT* be bad as well. Maybe a default was changed and the user wants to keep the old default. With an auto-pilot, that's quite hard. But you know that, don't you? Show me what is added or removed. And please also, what's *CHANGED*. And since it can only do that by comparing the new file to a clean, untouched, original file I innocently suggested to have such a file, make changes there and leave it up to the admin to check if settings are added or removed and deal with these changes in the active config file.. And in that case don't bother showing the diff.. just tell me which files have changed and *offer* to show the changes. You *ARE* offered to see the changes. NOTHING's forcing you to see the changes. When you run etc-update, you've got the option to enter "1", "2", "42" to see those changed configuration files. But don't touch my active configes.. not automatically, not ever.. Okay, so you're fine with etc-update, you say? Alexander Skwar -- Yow! Now we can become alcoholics! -- gentoo-user@gentoo.org mailing list
[gentoo-user] Java Installation: failed on MD5 verification
embedded distfiles # emerge -v =sun-jdk-1.5* Calculating dependencies... done! Emerging (1 of 1) dev-java/sun-jdk-1.5.0.07 to / checking ebuild checksums ;-) checking auxfile checksums ;-) checking miscfile checksums ;-) checking jdk-1_5_0_07-linux-amd64.bin !!! Digest verification failed: !!! /usr/portage/distfiles/jdk-1_5_0_07-linux-amd64.bin !!! Reason: Failed on MD5 verification !!! Got: 9dfbc464d20145a5f4e91534c01c5624 !!! Expected: 41c9d6bc3b2c0865d8c32ecb915d0091 How to solve this? Thanks, Leandro. -- Leandro Melo de Sales. Computer Science MSc Candidate Laboratório de Sistemas Distribuídos - lsd.ufcg.edu.br Laboratório de Computação Pervasiva - embedded.ufcg.edu.br Universidade Federal de Campina Grande - UFCG -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Postix+SASL with LDAP
Show us your /etc/sasl2/smtp.conf. Mine is: pwcheck_method: authdaemond log_level: 3 mech_list: PLAIN LOGIN authdaemond_path: /var/lib/courier/authdaemon/socket In my case, postfix authenticate on the Courier-imap authdaemond while authdaemond authenticate users in a MS AD server. There should be some way to auth postfix using pam... but I think smtpd.conf should be something like: pwcheck_method:pam Good Luck On 7/11/06, Leandro Melo de Sales <[EMAIL PROTECTED]> wrote: Hi, I configured my PAM (using nsswitch.conf) to auth against a LDAP server. Everything works fine and now I want to setup postifix to permit only authenticated users to send e-mail through my smtp server. But when I try to auth via smtp client, I got the following message on /var/log/message: Jul 11 16:28:04 embedded postfix/smtpd[24105]: < unknown[192.168.1.100]: TlRMTVNTUAABB4IIogAFASgKDw== Jul 11 16:28:04 embedded postfix/smtpd[24105]: smtpd_sasl_authenticate: decoded response: NTLMSSP Jul 11 16:28:04 embedded postfix/smtpd[24105]: NTLM server step 1 Jul 11 16:28:04 embedded postfix/smtpd[24105]: client flags: 8207 Jul 11 16:28:04 embedded postfix/smtpd[24105]: smtpd_sasl_authenticate: uncoded challenge: NTLMSSP Jul 11 16:28:04 embedded postfix/smtpd[24105]: > unknown[192.168.1.100]: 334 TlRMTVNTUAACOgA6ADAFggIA6WWAtbNxa0MARQBNAEIARQBEAEQARQBEAC4ARQBNAEIARQBEAEQARQBEAC4AVQBGAEMARwAuAEUARABVAC4AQgBSAA== Jul 11 16:28:04 embedded postfix/smtpd[24105]: < unknown[192.168.1.100]: TlRMTVNTUAADGAAYAGYYABgAfgBIDgAOAEgQABAAVgCWBYIAAgUBKAoPbABlAGEAbgBkAHIAbwBDAE8ATQBQAE8AUgAwADYARHEN7mzgGaygXDkCXVzTuqazkUkib2OfybAb9R10AJ/mF/gI2dSKNw0NIFxhMmhx Jul 11 16:28:04 embedded postfix/smtpd[24105]: smtpd_sasl_authenticate: decoded response: NTLMSSP Jul 11 16:28:04 embedded postfix/smtpd[24105]: NTLM server step 2 Jul 11 16:28:04 embedded postfix/smtpd[24105]: client user: leandro Jul 11 16:28:04 embedded postfix/smtpd[24105]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasl2/sasldb2: Permission denied Jul 11 16:28:04 embedded postfix/smtpd[24105]: warning: SASL authentication failure: no secret in database Jul 11 16:28:04 embedded postfix/smtpd[24105]: warning: unknown[192.168.1.100]: SASL NTLM authentication failed Jul 11 16:28:04 embedded postfix/smtpd[24105]: > unknown[192.168.1.100]: 535 Error: authentication failed Jul 11 16:28:04 embedded postfix/smtpd[24105]: < unknown[192.168.1.100]: AUTH NTLM Jul 11 16:28:04 embedded postfix/smtpd[24105]: smtpd_sasl_authenticate: sasl_method NTLM Jul 11 16:28:04 embedded postfix/smtpd[24105]: smtpd_sasl_authenticate: uncoded challenge: Jul 11 16:28:04 embedded postfix/smtpd[24105]: > unknown[192.168.1.100]: 334 Any clue? -- Leandro Melo de Sales. Computer Science MSc Candidate Laboratório de Sistemas Distribuídos - lsd.ufcg.edu.br Laboratório de Computação Pervasiva - embedded.ufcg.edu.br Universidade Federal de Campina Grande - UFCG -- gentoo-user@gentoo.org mailing list -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Postix+SASL with LDAP
2006/7/11, Paulo Roberto Candido dos Santos <[EMAIL PROTECTED]>: Show us your /etc/sasl2/smtp.conf. Mine is: pwcheck_method: authdaemond log_level: 3 mech_list: PLAIN LOGIN authdaemond_path: /var/lib/courier/authdaemon/socket In my case, postfix authenticate on the Courier-imap authdaemond while authdaemond authenticate users in a MS AD server. There should be some way to auth postfix using pam... but I think smtpd.conf should be something like: pwcheck_method:pam Good Luck On 7/11/06, Leandro Melo de Sales <[EMAIL PROTECTED]> wrote: > Hi, > > I configured my PAM (using nsswitch.conf) to auth against a LDAP > server. Everything works fine and now I want to setup postifix to > permit only authenticated users to send e-mail through my smtp server. > But when I try to auth via smtp client, I got the following message on > /var/log/message: > > Jul 11 16:28:04 embedded postfix/smtpd[24105]: < > unknown[192.168.1.100]: > TlRMTVNTUAABB4IIogAFASgKDw== > Jul 11 16:28:04 embedded postfix/smtpd[24105]: > smtpd_sasl_authenticate: decoded response: NTLMSSP > Jul 11 16:28:04 embedded postfix/smtpd[24105]: NTLM server step 1 > Jul 11 16:28:04 embedded postfix/smtpd[24105]: client flags: 8207 > Jul 11 16:28:04 embedded postfix/smtpd[24105]: > smtpd_sasl_authenticate: uncoded challenge: NTLMSSP > Jul 11 16:28:04 embedded postfix/smtpd[24105]: > > unknown[192.168.1.100]: 334 > TlRMTVNTUAACOgA6ADAFggIA6WWAtbNxa0MARQBNAEIARQBEAEQARQBEAC4ARQBNAEIARQBEAEQARQBEAC4AVQBGAEMARwAuAEUARABVAC4AQgBSAA== > Jul 11 16:28:04 embedded postfix/smtpd[24105]: < > unknown[192.168.1.100]: > TlRMTVNTUAADGAAYAGYYABgAfgBIDgAOAEgQABAAVgCWBYIAAgUBKAoPbABlAGEAbgBkAHIAbwBDAE8ATQBQAE8AUgAwADYARHEN7mzgGaygXDkCXVzTuqazkUkib2OfybAb9R10AJ/mF/gI2dSKNw0NIFxhMmhx > Jul 11 16:28:04 embedded postfix/smtpd[24105]: > smtpd_sasl_authenticate: decoded response: NTLMSSP > Jul 11 16:28:04 embedded postfix/smtpd[24105]: NTLM server step 2 > Jul 11 16:28:04 embedded postfix/smtpd[24105]: client user: leandro > Jul 11 16:28:04 embedded postfix/smtpd[24105]: warning: SASL > authentication problem: unable to open Berkeley db /etc/sasl2/sasldb2: > Permission denied > Jul 11 16:28:04 embedded postfix/smtpd[24105]: warning: SASL > authentication failure: no secret in database > Jul 11 16:28:04 embedded postfix/smtpd[24105]: warning: > unknown[192.168.1.100]: SASL NTLM authentication failed > Jul 11 16:28:04 embedded postfix/smtpd[24105]: > > unknown[192.168.1.100]: 535 Error: authentication failed > Jul 11 16:28:04 embedded postfix/smtpd[24105]: < > unknown[192.168.1.100]: AUTH NTLM > Jul 11 16:28:04 embedded postfix/smtpd[24105]: > smtpd_sasl_authenticate: sasl_method NTLM > Jul 11 16:28:04 embedded postfix/smtpd[24105]: > smtpd_sasl_authenticate: uncoded challenge: > Jul 11 16:28:04 embedded postfix/smtpd[24105]: > unknown[192.168.1.100]: 334 > > > Any clue? > > -- > Leandro Melo de Sales. > Computer Science MSc Candidate > Laboratório de Sistemas Distribuídos - lsd.ufcg.edu.br > Laboratório de Computação Pervasiva - embedded.ufcg.edu.br > Universidade Federal de Campina Grande - UFCG > > -- > gentoo-user@gentoo.org mailing list > > -- gentoo-user@gentoo.org mailing list Hi... my /etc/sasl2/smtpd.conf has the following: pwcheck_method:pam Since my system in already configured to authenticate against a LDAP server via nsswitch.conf. Any other clue? Leandro -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
Hi, On Tue, 11 Jul 2006 21:07:42 +0200 Gerhard Hoogterp <[EMAIL PROTECTED]> wrote: > Show me what is added or removed. And since it can only do that by comparing > the new file to a clean, untouched, original file I innocently suggested to > have such a file, make changes there and leave it up to the admin to check if > settings are added or removed and deal with these changes in the active > config file.. And in that case don't bother showing the diff.. just tell me > which files have changed and *offer* to show the changes. > But don't touch my active configes.. not automatically, not ever.. Hm, OK, *now* I understand your point. You want to track your own, hand made changes that don't have anything to do with new versions of default config files except from that you want to show those changes when making your decisions, correct? So basically, you want a three-pane (even better, though I can't image it visually: a tri-angular) view: Old default config, your modified version and new default config, i.e. kind of a diff3 approach. I agree, that would be interesting. Maybe this could easily be archieved with unionfs, having changed files in an overlayed file system. Another option would be to use a full fledged concurrent version system in /etc. Probably RCS might even be sufficient. In fact, if there are still binary packages for the old version of the package that brought in the new config file version, it would even be possible to extract the old default config and use that. -hwh -- gentoo-user@gentoo.org mailing list
[gentoo-user] Re: d
Francesco Talamona email.it> writes: > > > It seems like quite often I have to go on a search expedition for > > > docs > > beagle (I haven't looked a beagle since 0.0.10). > Using 0.2.7, it's quite good. Yes this is the sort of tool I've been wanting. If one considers the collective time that we individually sink into finding current documentation, across the gentoo user community, it's a huge problem (waisted time) opportunity. > I'm also testing kat (an indexing framework for KDE) > http://sourceforge.net/projects/kat, but still unsure if it's a viable > alternative to beagle. hmmm, did not see the ebuild for this? > http://bugs.gentoo.org/show_bug.cgi?id=92113 ah yes, my favorite line is: " --- Comment #3 From Carsten Lohrke 2005-06-13 09:41 PST [reply] --- Jan, see the relationship developers/packages, grep the tree for unmaintened packages and you see the problem. Before someone comes and says "it's just about putting this ebuild in cvs" - it's not. I did not add a single new package (despite new dependencies) for months and I don't intend to do so in the future. Get active¹² yourself." Maybe a convient mechanism for non-sanctioned packages is what's needed portage overlay is a pain and once you bet many packages, beocmes a microcosm in disfuctionality. It's just like the docs delima where individually we waste a huge amount of time manually duplicating what should be automated.? I.E. Since gentoo is a source-code system, we should have more packages than debian, not less.(ymmv). You know, I should keep my mouth shut, but, what the hell. I'm the only person to have gottenn 86'd from this gentoo user list..(hi Neil)(it's difficult to insult my integrity, cause I do not believe any human has integrity). I suggested a while back that the 'gentoo genius' provide templates and concrete steps to promote consumers of gentoo into developers. It's an elitist club, dominated by the latest fads of Object Oriented Confusion Here he insults one's requests for action, yet, the path to being a 'developer' is quite merky and fickle from the musings I have read. I have even been so bold as to suggest that Gentoo allow 'donations' with specific requests for software and issue resolution. Money is not evil, it's a tool. The intentions of mens hearts are suspect, in my experiences. I've even solicited for persons with skills to perform 'package assimilation' for compensation and had no takers. This would help finance the developers (we all have bills and desires) and help focus Gentoo so it can leave the R&D lab and become the distro it is destine to be, both commercially and socially. My offers fell on the deaf(dumb) ears. Go figure.I'll just shut up now, cause, like an old-geezer, I too enjoy poking at a 'young and excitable tiger', now and again thanks for the insight on beagle and kat. cheers! James -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
[Discussion about etc-update (and friends) changing something that was set by the user] I believe there is a misunderstanding. Perhaps what the OP is noting is that etc-update gives you diffs between * The file as on your system (which may have user changes) * The file as in the current emerge of this package I believe he would prefer to know the difference * The file as in the previous emerge of this package * The file as in the current emerge of this package Then he would decide what to do with these changes. I use etc-update but I believe that dispatch-conf can keep an RCS revision history. This should help determine the desired difference. I apologize if it is I who have misunderstood the conversation and am increasing the confusion. allan -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Any guess to why amarok visualizations fail to function?
Richard Fish wrote: > Well it looks like I get the same problems running the same versions > of amarok, libvisual, and libvisual-plugins. Cool! Well, not cool that you are having problems, but cool that I am not alone. I was beginning to wonder what was up. I just did an emerge -e world, and rebuilt my entire system thinking it may have been something else causing the problem. Still the same problem. > Have you tried backing off to a previous version of amarok, like > 1.4.0a? It looks like the libvisual-0.4 updates in 1.4.1 are pretty > significant (previous amarok versions used libvisual-0.2). Previous versions work fine for me. Since I never heard of anybody else having this problem, and I looked through bugs.gentoo.org for others posting this problem, I figured it was something special about my system. I hate posting a bug report until I have exhausted all attempts to fix it myself (especially if I am the only one having the problem). I looked for residual stuff left over from previous amarok and libvisual builds, and didn't find anything. I also found that libvisual-0.2 and libvisual-0.4 coexist. Thinking that libvisual-0.2 was conflicting, I removed libvisual-0.2 then rebuilt both libvisual-0.4 and amarok. All to no avail. I will keep you posted of anything I determine. Let me know if you file a bug report as I can post my info as well to hopefully find what it is about our systems causing this problem, or I can post a bug report. Thanks, Ken -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Java Installation: failed on MD5 verification
# ebuild path_to_the_ebuild/sun-jdk-1.5.0.07.ebuild digestAfter that emerge sun-jdkOn 7/11/06, Leandro Melo de Sales < [EMAIL PROTECTED]> wrote:embedded distfiles # emerge -v =sun-jdk-1.5*Calculating dependencies... done! >>> Emerging (1 of 1) dev-java/sun-jdk-1.5.0.07 to />>> checking ebuild checksums ;-)>>> checking auxfile checksums ;-)>>> checking miscfile checksums ;-)>>> checking jdk-1_5_0_07- linux-amd64.bin!!! Digest verification failed:!!! /usr/portage/distfiles/jdk-1_5_0_07-linux-amd64.bin!!! Reason: Failed on MD5 verification!!! Got: 9dfbc464d20145a5f4e91534c01c5624!!! Expected: 41c9d6bc3b2c0865d8c32ecb915d0091 How to solve this?Thanks,Leandro.--Leandro Melo de Sales.Computer Science MSc CandidateLaboratório de Sistemas Distribuídos - lsd.ufcg.edu.br Laboratório de Computação Pervasiva - embedded.ufcg.edu.brUniversidade Federal de Campina Grande - UFCG--gentoo-user@gentoo.org mailing list-- Julien Cabillot
Re: [gentoo-user] Re: Cleaner USE variable in /etc/make.conf
Michael Crute wrote: > On 7/11/06, James <[EMAIL PROTECTED]> wrote: >> Maybe you can break it up like this: >> >> # Multimedia >> "USE_mplayer" >> "USE_ffmpeg" >> "USE_audio" >> "USE_video-players" >> >> Where your selected categories are not so rigid as audio, stills, >> video, etc? >> > > But doesn't this idea kind of circumvent the package.use file? > > -Mike > I'm pretty sure the package.use file overrides the make.conf file so it shouldn't matter. Dale :-) :-) -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] lost deadkeys layout
Luigi Pinna wrote: > Alle 22:58, lunedì 10 luglio 2006, Benno Schulenberg ha scritto: > > > > # ln -snf ../../share/X11/xkb/ X11/xkb That's not what i wrote, but this: # ln -snf ../../share/X11/xkb /usr/lib/X11/xkb > I didn't understand from where it should be: a local path means > that I am in a directory and not in / The target is a relative path, but the placement of the link is given as an absolute path. No need to be anywhere special. > I tried it now... It's works! Thanks! It worked? What did it solve? What symlink do you now have where? Benno -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
Allan Gottlieb wrote: > [Discussion about etc-update (and friends) changing something that was > set by the user] > > I believe there is a misunderstanding. Perhaps what the OP is noting > is that etc-update gives you diffs between > > * The file as on your system (which may have user changes) > > * The file as in the current emerge of this package > > I believe he would prefer to know the difference > > * The file as in the previous emerge of this package > > * The file as in the current emerge of this package > > Then he would decide what to do with these changes. > > I use etc-update but I believe that dispatch-conf can keep an RCS > revision history. This should help determine the desired difference. > > I apologize if it is I who have misunderstood the conversation and am > increasing the confusion. > > allan > Maybe I have something set different but mine does tell what is going to be changed between the two files and you can select what you want to change or not change. Dale :-) :-) -- gentoo-user@gentoo.org mailing list
[gentoo-user] weird behaviour - unable to connect to wireless router
Hi,I been trying to connect my laptop to a wireless router but without success.The router is a common Linksys WRT54G. My pcmcia card is also a Linksys WPC54G.I am now using a new driver (bcm43xx), instead of ndiswrapper, but I think the problem is not from that. I did use my card with this new driver successfully before. The problem arises at the authentication stage. Somehow, I can't associate or authenticate with the damn router. Although stupid, I've tried with encryption enable/disable, DHCP server enable/disable and many other things that I can change in the router setup. Nothing seems to work. I could almost say I've tried everything.With a ether cable, works fine!And there is other laptop (running windows) connected via wireless to the router without any problem.The following is what shows up in dmesg: SoftMAC: Open Authentication completed with 00:12:17:xx:xx:xxSoftMAC: Authentication response received from 00:12:17:xx:xx:xx but did not request authentication.SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but did not request authentication. SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but did not request authentication.SoftMAC: Authentication timed out with 00:12:17:xx:xx:xxprintk: 4 messages suppressed.SoftMAC: Open Authentication completed with 00:12:17:xx:xx:xx SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists.printk: 5 messages suppressed.SoftMAC: Open Authentication completed with 00:12:17:xx:xx:xxSoftMAC: Open Authentication completed with 00:12:17:xx:xx:xx SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists.SoftMAC: Open Authentication completed with 00:12:17:xx:xx:xxSoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists. SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists.ieee80211: eth1: IEEE80211_REASSOC_REQ receivedSoftMAC: Open Authentication completed with 00:12:17:xx:xx:xxSoftMAC: Open Authentication completed with 00:12:17:xx:xx:xx SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists.SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists.SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists. SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists.note: I changed the real MAC address with the "xx" one.Does anyone know what can be wrong? Or what can I try to do?Thanks,Fernando
Re: [gentoo-user] Things that can be improved
Allan Gottlieb wrote: > I believe he would prefer to know the difference > > * The file as in the previous emerge of this package > > * The file as in the current emerge of this package > > Then he would decide what to do with these changes. Precisely. When Portage makes a ._cfg_* file, it should record this file also in /var/db/pkg/..., and upon the next emerge of that same package, etc-update should show the diff between that file and the new one. Benno -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] lost deadkeys layout
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > That's not what i wrote, but this: > # ln -snf ../../share/X11/xkb /usr/lib/X11/xkb Sorry, I delete some characters... I used your link! >> I tried it now... It's works! Thanks! > > It worked? What did it solve? What symlink do you now have where? It solved the keyboard layout, but I have the boot service start problem yet. In this moment I used a xorg-x11-7.0 but the xdm is started with xorg-x11-6.8.2. I do a revdep-rebuild, and I want to try to restart the xdm service after it. If it doesn't work, I must come back to xorg-x11-6.8.2 again! Luigi - -- Public key GPG(0x633F86B7) on hkp://keyserver.linux.it/ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFEtBggHmkkjmM/hrcRAmbWAJ9Y9Koumv+La60MCNLeyjsqIcO03QCdGj8w GD/5f8zzzSTiR+SEz7WFfMI= =gmpL -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] No more xorg upgrade?
Luigi Pinna wrote: > Alle 21:13, martedì 11 luglio 2006, Robert Cernansky ha scritto: >>> Hello, >>> >>> I've recently synced. emerge -up world do not want to upgrade >>> xorg-x11 to 7.0. Only upgrade from 6.8.2-r7 to 6.8.2-r8 is printed. >>> Before this sync, the xorg-x11 wants to be upgraded from 6.8.2-r7 to >>> 7.0-r1. >>> >>> Previous sync I did shortly after modular xorg becomes stable. I did >>> not update xorg yet nor did emerge -u world. It seems to be portage >>> bug, isn't it? > > No, xorg-x11-7.0 is modular X. You must remove manually xorg and > reemerge it. I think you missed the OP original question. To me it seems that the first emerge -up wanted to upgrade its X to modular X 7.0; he synced again *without* emerging anything, and now portage doesn't ask him to upgrade anymore. m. -- gentoo-user@gentoo.org mailing list
RE: [gentoo-user] SOMEWHAT OFF TOPIC -- Palm Tungsten E, and Google Calendar
> On 7/10/06, Timothy A. Holmes <[EMAIL PROTECTED]> wrote: > > I am looking to be able to sync my palm tungsten E to my google > > calendar, and I am wondering if it would be possible to use evolution or > > other linux program to accomplish this -- I know it's a bit off topic > > for the list, so feel free to contact me off list if you want. Could > > sure use some help on this > > > > TIM > > Have not tried it but suggest you look at: > http://gentoo- > wiki.com/HOWTO_USB_sync_for_Palm_PDAs_with_Evolution_2.0_and_udev > > may also google for 'palm evolution' ;-) > > -Mike > > -- > > Michael E. Crute > http://mike.crute.org > > I may not have gone where I intended to go, but I think I have ended > up where I intended to be. --Douglas Adams > -- > gentoo-user@gentoo.org mailing list [Timothy A. Holmes] I have followed the above Wiki article, and have hit a snag. In the article it says Start off by attempting to get the basic information about the PDA. Run pilot-xfer --port /dev/tts/USB1 --list and hit the hotsync button on the PDA when prompted. It should spit out a list of information. We're not terribly interested in the information, just the fact that communication is possible. Note: If it reports something like... The device /dev/tts/USB1 does not exist.. Possible solution: mknod /dev/tts/USB1 c Unable to bind to port: /dev/tts/USB1 Please use --help for more information ...it means that your udev daemon is not creating the right /dev/tts/USB* files. But if you run pilot-xfer AFTER pressing HotSync button, the pilot-xfer does not report the problem, and USB* show up in the /dev/tts dir. Try changing from USB1 to USB0, or try using /dev/pilot after pressing the HotSync button. I am getting that error message, and have tried resetting the path repeatedly, and nothing seems to make a difference, Im not sure where to go from here? can someone please point me to a solution? TIM Timothy A. Holmes IT Manager / Network Admin / Web Master / Computer Teacher Medina Christian Academy A Higher Standard... Jeremiah 33:3 Jeremiah 29:11 Esther 4:14 -- gentoo-user@gentoo.org mailing list
[gentoo-user] weird behaviour - unable to connect to wireless router
Hi,I been trying to connect my laptop to a wireless router but without success.The router is a common Linksys WRT54G. My pcmcia card is also a Linksys WPC54G.I am now using a new driver (bcm43xx), instead of ndiswrapper, but I think the problem is not from that. I did use my card with this new driver successfully before. The problem arises at the authentication stage. Somehow, I can't associate or authenticate with the damn router. Although stupid, I've tried with encryption enable/disable, DHCP server enable/disable and many other things that I can change in the router setup. Nothing seems to work. I could almost say I've tried everything.With a ether cable, works fine!And there is other laptop (running windows) connected via wireless to the router without any problem.The following is what shows up in dmesg: SoftMAC: Open Authentication completed with 00:12:17:xx:xx:xxSoftMAC: Authentication response received from 00:12:17:xx:xx:xx but did not request authentication.SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but did not request authentication. SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but did not request authentication.SoftMAC: Authentication timed out with 00:12:17:xx:xx:xxprintk: 4 messages suppressed.SoftMAC: Open Authentication completed with 00:12:17:xx:xx:xx SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists.printk: 5 messages suppressed.SoftMAC: Open Authentication completed with 00:12:17:xx:xx:xxSoftMAC: Open Authentication completed with 00:12:17:xx:xx:xx SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists.SoftMAC: Open Authentication completed with 00:12:17:xx:xx:xxSoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists. SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists.ieee80211: eth1: IEEE80211_REASSOC_REQ receivedSoftMAC: Open Authentication completed with 00:12:17:xx:xx:xxSoftMAC: Open Authentication completed with 00:12:17:xx:xx:xx SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists.SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists.SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists. SoftMAC: Authentication response received from 00:12:17:xx:xx:xx but no queue item exists.note: I changed the real MAC address with the "xx" one.Does anyone know what can be wrong? Or what can I try to do?Thanks,Fernando
Re: [gentoo-user] SOMEWHAT OFF TOPIC -- Palm Tungsten E, and Google Calendar
On 11/07/06, Timothy A. Holmes <[EMAIL PROTECTED]> wrote: I have followed the above Wiki article, and have hit a snag. Further down the same webpage it also gives instructions on creating a udev rule . . . Also, check the links at the bottom of the page and the forum. HTH -- Regards, Mick -- gentoo-user@gentoo.org mailing list
[gentoo-user] nvidia-kernel p.masked by hardened profile
A emerge update after a recent sync turns up the following message: !!! All ebuilds that could satisfy "nvidia-kernel" have been masked. !!! One of the following masked packages is required to complete your request: - media-video/nvidia-kernel-1.0.7676-r1 (masked by: package.mask) # These two package do more harm than good w/ hardened. # users must now the opensource xorg nv driver with nvidia cards. # By placing Driver "nv" in xorg.conf # 2006-06-29 solar Ditto with the new nvidia-drivers package. A few questions: 1. nv still doesn't do 3D acceleration, right? 2. Is there more information about what "more harm than good" means? I tried googling but the only thing I found was a commit log on solar's website with a one-liner about p.masking nvidia-kernel. I want to know what kind of problems that nvidia drivers incur so I can decided whether to give up 3D acceleration, the hardened profile, or ignore solar's advice and unmask the packages. 3. Is this (the fact that I am running a hardened profile) the reason that if I 'emerge --pretend --update xorg-x11 --verbose', among the list of VIDEO_CARDS options displayed, I do not see nvidia? Thanks, W -- A boy mathematician and a girl mathematician face each other from opposite sides of a room, and at the same time a boy engineer and a girl engineer face each other from opposite sides of the room. At the end of each minute, each boy-girl pair is allowed to halve their distance from each other. The boy and girl mathematicians never meet, but after a few minutes the engineers get close enough "for all practical purposes." Sortir en Pantoufles: up 5:21 -- gentoo-user@gentoo.org mailing list
[gentoo-user] OT - Need help configuring apache for SSL
I'm trying to make use of SSL on my server box. I followed the wiki at http://gentoo-wiki.com/Apache_Modules_mod_ssl on my client PC and everything worked right. However, when I try it on my server PC and I go to start Apache with the new configs for SSL, Apache won't start and I get the following output to /var/log/apache2/error_log: bullet ssl # cat /var/log/apache2/error_log [Tue Jul 11 17:55:11 2006] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec2) [Tue Jul 11 17:55:11 2006] [error] Init: Unable to read server certificate from file /usr/lib/apache2/conf/ssl/server.pem [Tue Jul 11 17:55:11 2006] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag [Tue Jul 11 17:55:11 2006] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error The permissions on the files in /usr/lib/apache2/conf/ssl are the same on both my client and server box. Here they are: bullet conf # pwd /usr/lib/apache2/conf bullet conf # ls -l total 96 -rw-r--r-- 1 root root 2068 Jul 6 22:30 apache2-builtin-mods drwxr-xr-x 5 root root 4096 Dec 12 2005 conf -rw-r--r-- 1 root root 37188 Jul 6 22:30 httpd.conf -rw-r--r-- 1 root root 1131 Mar 30 15:21 jk-workers.properties -rw-r--r-- 1 root root 12958 Jul 6 22:30 magic -rw-r--r-- 1 root root 15020 Nov 27 2005 mime.types drwxr-xr-x 2 root root 4096 Jul 10 22:14 modules.d drwx-- 2 root root 4096 Jul 11 17:53 ssl drwxr-xr-x 2 root root 4096 Jul 11 17:54 vhosts.d bullet conf # ls -l ssl total 16 -r 1 root root 794 Sep 25 2005 server.crt -rw-r--r-- 1 root root 582 Jul 11 17:53 server.csr -r 1 root root 891 Sep 25 2005 server.key -rw-r--r-- 1 root root 493 Jul 10 22:21 server.pem What's going wrong here? Why can't I start Apache with SSL? -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] OT - Need help configuring apache for SSL [SOLVED]
On Tue, 2006-07-11 at 17:59 -0500, Michael Sullivan wrote: > I'm trying to make use of SSL on my server box. I followed the wiki at > http://gentoo-wiki.com/Apache_Modules_mod_ssl on my client PC and > everything worked right. However, when I try it on my server PC and I > go to start Apache with the new configs for SSL, Apache won't start and > I get the following output to /var/log/apache2/error_log: > > bullet ssl # cat /var/log/apache2/error_log > [Tue Jul 11 17:55:11 2006] [notice] suEXEC mechanism enabled > (wrapper: /usr/sbin/suexec2) > [Tue Jul 11 17:55:11 2006] [error] Init: Unable to read server > certificate from file /usr/lib/apache2/conf/ssl/server.pem > [Tue Jul 11 17:55:11 2006] [error] SSL Library Error: 218529960 > error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag > [Tue Jul 11 17:55:11 2006] [error] SSL Library Error: 218595386 > error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error > > The permissions on the files in /usr/lib/apache2/conf/ssl are the same > on both my client and server box. Here they are: > > bullet conf # pwd > /usr/lib/apache2/conf > bullet conf # ls -l > total 96 > -rw-r--r-- 1 root root 2068 Jul 6 22:30 apache2-builtin-mods > drwxr-xr-x 5 root root 4096 Dec 12 2005 conf > -rw-r--r-- 1 root root 37188 Jul 6 22:30 httpd.conf > -rw-r--r-- 1 root root 1131 Mar 30 15:21 jk-workers.properties > -rw-r--r-- 1 root root 12958 Jul 6 22:30 magic > -rw-r--r-- 1 root root 15020 Nov 27 2005 mime.types > drwxr-xr-x 2 root root 4096 Jul 10 22:14 modules.d > drwx-- 2 root root 4096 Jul 11 17:53 ssl > drwxr-xr-x 2 root root 4096 Jul 11 17:54 vhosts.d > bullet conf # ls -l ssl > total 16 > -r 1 root root 794 Sep 25 2005 server.crt > -rw-r--r-- 1 root root 582 Jul 11 17:53 server.csr > -r 1 root root 891 Sep 25 2005 server.key > -rw-r--r-- 1 root root 493 Jul 10 22:21 server.pem > > What's going wrong here? Why can't I start Apache with SSL? > Nevermind. I got SSLCertificateFile and SSLCertificateKeyFile confused in /etc/apache2/modules.d/41_mod_ssl.default-vhost.conf . It's fixed now... -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Per-process CPU % usage limit
On 7/8/06, Etaoin Shrdlu <[EMAIL PROTECTED]> wrote: As the subject says, is there any way to force a particular process to use at most a given CPU percentage? Although I haven't used it myself, I am fairly confident that this is what the cpu option does in /etc/security/limits.conf. You will need to have PAM enabled. -- Evan Klitzke -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
At Tue, 11 Jul 2006 16:01:00 -0500 Dale <[EMAIL PROTECTED]> wrote: > Allan Gottlieb wrote: >> [Discussion about etc-update (and friends) changing something that was >> set by the user] >> >> I believe there is a misunderstanding. Perhaps what the OP is noting >> is that etc-update gives you diffs between >> >> * The file as on your system (which may have user changes) >> >> * The file as in the current emerge of this package >> >> I believe he would prefer to know the difference >> >> * The file as in the previous emerge of this package >> >> * The file as in the current emerge of this package >> >> Then he would decide what to do with these changes. >> >> I use etc-update but I believe that dispatch-conf can keep an RCS >> revision history. This should help determine the desired difference. >> >> I apologize if it is I who have misunderstood the conversation and am >> increasing the confusion. >> >> allan >> > > Maybe I have something set different but mine does tell what is going to > be changed between the two files and you can select what you want to > change or not change. I don't think it is a settings difference. I believe it is giving you the differences between the first two files I listed above and the OP wanted the difference between the last two allan -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
On Friday 07 July 2006 15:22, Rafael Fernández López wrote: > Hi, > > This is not flame war. I love Gentoo, and it is the distribution that > fits me perfectly, but I've been wondering this last year what things > can be improved in this wonderful distro. > > If I have more ideas I'll tell ya. I've got one. MOST packages you can emerge an update, 'merge' your config files using etc-update or something, and everything is happy. But there are many packages that require more to be done. Some of these are more involved (like the X11 7.0 upgrade). Other just require (or strongly suggest) another special tool be run (gcc-config, fix_libtool_files.sh, and I seem to recall others) too. Most of these that require more tend to be 'key' to safe/proper maintenance of the system. I'd like to see an option where certain packages are not upgrade just because they're out of date, but require an additional command line argument. Additionally, a tool that I could run that tells me "the following packages are being 'held back' because a more involved upgrade" - ideally, it would also provide information on what the required steps are. I'm I crazy? David -- gentoo-user@gentoo.org mailing list
[gentoo-user] OT - Apache, userdir, and CGI with suexec
I use userdir on Apache on my server box. In /etc/apache2/httpd.conf I have UserDir set to webspace/html instead of public_html. I want to create a webspace/cgi-bin directory for each of my users to store (and access) their CGI scripts in (cgi-bin should be outside the DocumentRoot for security purposes), and I want the CGI scripts to execute as the users they belong to. However, I read somewhere that Apache with CGI under UserDirs will trip if not configured properly at compile time. I think I need to alter something in the ebuild for Apache, and I think it's value of the USERDIR variable, but what do I need to change it to to get this to work? The document root of all users is ~/webspace/html, but the user's CGI directory is ~/webspace/cgi-bin. What do I need to change the USERDIR variable in the ebuild to to get this to work? -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] nvidia-kernel p.masked by hardened profile
On 7/11/06, Willie Wong <[EMAIL PROTECTED]> wrote: 1. nv still doesn't do 3D acceleration, right? Yes. 2. Is there more information about what "more harm than good" means? I tried googling but the only thing I found was a commit log on solar's website with a one-liner about p.masking nvidia-kernel. I want to know what kind of problems that nvidia drivers incur so I can decided whether to give up 3D acceleration, the hardened profile, or ignore solar's advice and unmask the packages. Well, see what the hardened handbook has to say about binary drivers and x.org: http://www.gentoo.org/proj/en/hardened/hardenedxorg.xml#doc_chap4 I also found this bug: http://bugs.gentoo.org/show_bug.cgi?id=139047 There may also be a valid security concern with binary-only kernel modules: since they cannot be audited for security, one should assume that they are horribly insecure. Any exploit here could comprimise the entire system, so one could argue they are totally inappropriate for a 'hardened' system. 3. Is this (the fact that I am running a hardened profile) the reason that if I 'emerge --pretend --update xorg-x11 --verbose', among the list of VIDEO_CARDS options displayed, I do not see nvidia? That is correct. video_cards_nvidia is in the hardened profile's use.mask. -Richard -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] nvidia-kernel p.masked by hardened profile
On 7/11/06, Richard Fish <[EMAIL PROTECTED]> wrote: On 7/11/06, Willie Wong <[EMAIL PROTECTED]> wrote: > 1. nv still doesn't do 3D acceleration, right? Yes. *Sigh*. Yes, I know I replying to myself 15 seconds after posting, and that is a faux-pas. Sorry. But my response here wasn't clear. Better answers would have been: "Right", "Correct", or even "Nope, nv does not support hardware 3D acceleration". -Richard -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Things that can be improved
On 7/11/06, David Corbin <[EMAIL PROTECTED]> wrote: I'd like to see an option where certain packages are not upgrade just because they're out of date, but require an additional command line argument. Additionally, a tool that I could run that tells me "the following packages are being 'held back' because a more involved upgrade" - ideally, it would also provide information on what the required steps are. I'm I crazy? I don't think so. Your comments are very much in line with mine...trying to make the more involved upgrades less error prone. The one concern I have with taking this out of the standard update process is that we really need to keep up with the currently 'stable' software as a minimum. Updating some things that are "simple", but letting other packages fall behind, is just asking for breakage at some point. Some recent postings to -dev regarding current software not building with old gcc versions really point out this fact... So I don't think we need yet another tool here. I would prefer to see our existing tools enhanced with this goal in mind. -Richard -- gentoo-user@gentoo.org mailing list
[gentoo-user] Re: d
Francesco Talamona email.it> writes: > > The closest > > would be > > beagle (I haven't looked a beagle since 0.0.10). > Using 0.2.7, it's quite good. Boy this is interesting. beagle: /etc/beagle /usr/lib/beagle /usr/share/beagle /usr/lib/beagle show a mulitude of *.exe *.dll files these are microsuck files (yuck) no man beagle I can't seem to find the executable to lauch beagle nor any documentation (this is ironic, a package to make various types of documentation availabe via one system, has no docs.?) I did find the beagle docs online, but, I'm not too interested in installing a package that contains lots of binaries. What's up with all of those binaries? dll and .exe files After reading a while I figure out its a bunch of mostly binary files that when the beagled is ran it takes hours to index your personal (~user) files. I was looking for a tool to search and combine the various types of documentation, from a variety of locations realted to software I emerge. I do not think I need a (clandestine) binary only demon running for hours to parse and index my personal stuff. Sounds very suspect to me If anyone has so much stuff they cannot organize, it's time to hit the delete key. James -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Java Installation: failed on MD5 verification
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Julien Cabillot wrote: > # ebuild path_to_the_ebuild/sun-jdk-1.5.0.07.ebuild digest > After that emerge sun-jdk Beware that this bypasses any security measure that portage provides and is not the preferred way to "fix" this issue. If you are positive that the package is legit I would run that command suggested but otherwise that is the only way that portage will know if the files are legit. It could be that the mirror corrupted the file (which happens when disks become full) or someone *could* have put a malicious file there. Normally this can be fixed by waiting a day and syncing again or by using a different mirror to sync. HTH.. - -- Jeremy Olexa ([EMAIL PROTECTED]) Office: EE/CS 1-201 CS/IT Systems Staff University of Minnesota -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEtG86FN7pD9kMi/URAu6oAKCIPRACuaxmUvBKlLHkK5BJWNC5swCfQ+KF gFhHd8kjKY+QZYnMNpvu3+w= =iIvJ -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
[gentoo-user] SVN stopped working after update of neon?
I had SVN working fine, but then sometime recently neon was updated (due to gnome I believe?). I'm only trying to connect to a remote SVN server (not local). [EMAIL PROTECTED] $ svn update svn: error while loading shared libraries: libneon.so.25: cannot open shared object file: No such file or directory So I recompiled subversion and neon (both in ~x86 because gnome needed the ~ version, and the stable svn doesn't work with the non ~ neon and it's all just a big-ol-happy-linux-mess as usual) This get's me closer, but still no love. [EMAIL PROTECTED] $ svn update svn: Unrecognized URL scheme for 'https://trac.myserver.com/svn/projects/foo/trunk' The FAQ didn't help (and apparently I have the modules loaded anyways, so I doubt that's the issue): http://subversion.tigris.org/faq.html#unrecognized-url-error [EMAIL PROTECTED] $ svn --version svn, version 1.3.2 (r19776) compiled Jul 11 2006, 18:39:46 The following repository access (RA) modules are available: * ra_svn : Module for accessing a repository using the svn network protocol. - handles 'svn' scheme * ra_local : Module for accessing a repository on local disk. - handles 'file' scheme Here are the versions I have installed [ebuild R ] dev-util/subversion-1.3.2-r1 USE="apache2 bash-completion berkdb minimal nls perl python ruby* zlib -emacs -java -nowebdav" [ebuild R ] net-misc/neon-0.26.1 USE="nls ssl zlib -expat -gnutls -socks5 -static" I tried this: locutus env.d # revdep-rebuild --library=libneon.so.25 Configuring search environment for revdep-rebuild Checking reverse dependencies... Packages containing binaries and libraries using libneon.so.25 will be emerged. Collecting system binaries and libraries... done. (/root/.revdep-rebuild.1_files) Checking dynamic linking... done. (/root/.revdep-rebuild_8de088a8.3_rebuild) Assigning files to ebuilds... Nothing to rebuild Evaluating package order... done. (/root/.revdep-rebuild_8de088a8.5_order) There are no dynamic links to libneon.so.25... All done. Any ideas? ÐÆ5ÏÐ -- gentoo-user@gentoo.org mailing list
[gentoo-user] How to get source of emerge to patch?
Hi. I want to patch cyrus-imapd. I have the diff file, but no source because I emerged from the repository. How do I get the source and ebuild it? Thanks. __Do You Yahoo!?Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Re: [gentoo-user] nvidia-kernel p.masked by hardened profile
First, thanks for the pointers. See below On Tue, Jul 11, 2006 at 07:08:52PM -0700, Penguin Lover Richard Fish squawked: > On 7/11/06, Willie Wong <[EMAIL PROTECTED]> wrote: > > 2. Is there more information about what "more harm than good" means? > > I tried googling but the only thing I found was a commit log on > > solar's website with a one-liner about p.masking nvidia-kernel. I > > want to know what kind of problems that nvidia drivers incur so I > > can decided whether to give up 3D acceleration, the hardened > > profile, or ignore solar's advice and unmask the packages. > > Well, see what the hardened handbook has to say about binary drivers and > x.org: > http://www.gentoo.org/proj/en/hardened/hardenedxorg.xml#doc_chap4 Well, that page is rather outdated. I am pretty sure nvidia-glx supports dlloader since several versions back (at least since summer of last year): after all, I've been running it. There were some hiccups early on when I first started using it (several programs I often use, such as ut2004 and mplayer requires chpax/paxctl to turn off MPROTECT and RANDEXEC), but it has been running well on my system. > > I also found this bug: > http://bugs.gentoo.org/show_bug.cgi?id=139047 The attitude expressed in that bug is also the point made on the gentoo-hardened mailing list (I did a search on gmane after sending out my original e-mail). Basically it seems that the devs attitude is that "the driver is binary, we can't fix it if it is broken, so we won't support it." And I am completely fine with that. But I remember one year ago them telling us to use dlloader and to use binary drivers at our own risk, I am wondering if anyone here knows why the sudden change in attitude into "I am telling you not to use nvidia binary drivers", namely, if there is any new found incompatibility of nvidia-drivers with the hardened profile. > There may also be a valid security concern with binary-only kernel > modules: since they cannot be audited for security, one should assume > that they are horribly insecure. Any exploit here could comprimise > the entire system, so one could argue they are totally inappropriate > for a 'hardened' system. Yes, I took on that risk when I started running a hardened desktop with nvidia binary drivers. What I am most interested is what new significant flaws (if any) were found in the binary drivers that makes its use such taboo. Furthermore, I thought one of the things that the hardened team were less happy about is not so much the binary kernel driver, but the libGL.so nvidia provides... basically any program that uses opengl that links against the nvidia-glx would need to have certain PAX flags turned off to run without being killed by the kernel. I am beginning to sense the situation is more along the line of the devs formalizing the policy of not supporting binary drivers and telling users to stop bothering them with bugs they cannot do anything about. If that is indeed the case, I'd simply unmask the offending packages and deal with them myself. > > > 3. Is this (the fact that I am running a hardened profile) the reason > > that if I 'emerge --pretend --update xorg-x11 --verbose', among the > > list of VIDEO_CARDS options displayed, I do not see nvidia? > > That is correct. video_cards_nvidia is in the hardened profile's use.mask. > I looked at man portage, and I am not quite sure about this: Is it possible to unmask the useflag by, for example, writing to /etc/portage/use.mask the line "-video_cards_nvidia"? Or must I modify /etc/make.profile/use.mask? thx W -- Sortir en Pantoufles: up 11:25 -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] nvidia-kernel p.masked by hardened profile
Skipping a bunch of stuff that I don't know the answers to... On 7/11/06, Willie Wong <[EMAIL PROTECTED]> wrote: I looked at man portage, and I am not quite sure about this: Is it possible to unmask the useflag by, for example, writing to /etc/portage/use.mask the line "-video_cards_nvidia"? Or must I modify /etc/make.profile/use.mask? I believe adding "-video_cards_nvidia" to /etc/portage/profile/use.mask (notice the directory!) should do it. But really this doesn't matter...this use flag is only used to add a dependancy on the nvidia drivers for xorg-x11. Having the nvidia flag masked doesn't in any way prevent you from unmasking x11-drivers/nvidia-drivers, merging them, and using nvidia in xorg.conf. -Richard -- gentoo-user@gentoo.org mailing list
[gentoo-user] Emerge dev-java/ant-core-1.6.5-r13 failed / What to do?
Hi,
I try to install tomcat, but failed... Could somebody help me, please?
--- SNIP ---
# emerge tomcat
[...]
>>> Emerging (5 of 107) dev-java/ant-core-1.6.5-r13 to /
>>> Downloading
http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/distfiles/apache-ant-1.6.5-src.tar.bz2
--18:39:43--
http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/distfiles/apache-ant-1.6.5-src.tar.bz2
=> `/usr/portage/distfiles/apache-ant-1.6.5-src.tar.bz2'
Connecting to 193.29.43.39:80... connected.
Proxy request sent, awaiting response... 200 OK
Length: 6,283,500 (6.0M) [application/x-tar]
100%[>]
6,283,500122.74K/sETA 00:00
18:40:33 (121.36 KB/s) -
`/usr/portage/distfiles/apache-ant-1.6.5-src.tar.bz2' saved
[6283500/6283500]
>>> checking ebuild checksums ;-)
>>> checking auxfile checksums ;-)
>>> checking miscfile checksums ;-)
>>> checking apache-ant-1.6.5-src.tar.bz2 ;-)
* Using: sun-jdk-1.5
>>> Unpacking source...
>>> Unpacking apache-ant-1.6.5-src.tar.bz2 to
/var/tmp/portage/ant-core-1.6.5-r13/work
* Applying build.sh-exit-fix.patch ...
[ ok ]
Rewriting ./build.xml
Rewriting
./src/etc/testcases/core/include/including_file_parse_error/build.xml
Rewriting
./src/etc/testcases/core/include/including_file_task_error/build.xml
Rewriting
./src/etc/testcases/core/include/included_file_task_error/build.xml
Rewriting
./src/etc/testcases/core/include/included_file_parse_error/build.xml
Rewriting ./src/etc/testcases/filters/build.xml
Rewriting ./src/etc/testcases/taskdefs/fixcrlf/build.xml
Rewriting ./src/etc/testcases/taskdefs/style/build.xml
>>> Source unpacked.
>>> Compiling source in
/var/tmp/portage/ant-core-1.6.5-r13/work/apache-ant-1.6.5 ...
... Bootstrapping Ant Distribution
... Compiling Ant Classes
./bootstrap.sh: line 135: 2869 Killed "${JAVAC}"
$BOOTJAVAC_OPTS -d ${CLASSDIR} ${TOOLS}/bzip2/*.java ${TOOLS}/tar/*.java
${TOOLS}/zip/*.java ${TOOLS}/ant/util/regexp/RegexpMatcher.java
${TOOLS}/ant/util/regexp/RegexpMatcherFactory.java
${TOOLS}/ant/types/*.java ${TOOLS}/ant/*.java
${TOOLS}/ant/taskdefs/*.java ${TOOLS}/ant/taskdefs/compilers/*.java
${TOOLS}/ant/taskdefs/condition/*.java
... Failed compiling Ant classes !
Bootstrap FAILED
!!! ERROR: dev-java/ant-core-1.6.5-r13 failed.
Call stack:
ebuild.sh, line 1545: Called dyn_compile
ebuild.sh, line 940: Called src_compile
ant-core-1.6.5-r13.ebuild, line 41: Called die
!!! failed to build
!!! If you need support, post the topmost build error, and the call
stack if relevant.
!!! When you file a bug report, please include the following information:
GENTOO_VM=sun-jdk-1.5 CLASSPATH="" JAVA_HOME="/opt/sun-jdk-1.5.0.07"
JAVACFLAGS="-source 1.4 -target 1.4" COMPILER=""
--- SNAP ---
--- SNIP ---
# emerge --info
Portage 2.1.1_pre2-r4 (hardened/x86/2.6, gcc-3.4.4, glibc-2.3.5-r2,
2.6.14-rsbac-r1-rsbac i686)
=
System uname: 2.6.14-rsbac-r1-rsbac i686 Intel(R) Pentium(R) 4 CPU 1.70GHz
Gentoo Base System version 1.6.13
dev-lang/python: 2.4.2
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache: [Not Present]
dev-util/confcache: [Not Present]
sys-apps/sandbox:1.2.12
sys-devel/autoconf: 2.13, 2.59-r6
sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils: 2.16.1
sys-devel/gcc-config: 1.3.12-r4
sys-devel/libtool: 1.5.20
virtual/os-headers: 2.6.11-r2
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i386-pc-linux-gnu"
CFLAGS="-O2 -march=pentium4"
CHOST="i386-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/terminfo"
CXXFLAGS="-O2 -march=pentium4"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/
http://ftp.uni-erlangen.de/pub/mirrors/gentoo
http://mirrors.sec.informatik.tu-darmstadt.de/gentoo/
http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/
http://pandemonium.tiscali.de/pub/gentoo/ http://gentoo.intergenia.de
http://files.gentoo.org http://ftp.ntua.gr/pub/linux/gentoo/ "
MAKEOPTS="-j2"
PKGDIR="/usr/portage//packages/x86/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times
--compress --force --whole-file --delete --delete-after --stats
--timeout=180 --exclude='/distfiles' --exclude='/local'
--exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage/"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="apache2 berkdb bzip2 crypt dlloader doc hardened java ldap mysql
nls pam pic readline ssl tcpd threads userlocales x86 xml xorg zlib
elibc_glibc input_devices_mouse input_devices_keyboard kernel_linux
userland_GNU"
Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL,
LDFLAGS, LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY
--- SNAP ---
Best rega
