Re: Reverse ftp over ssh does send files

2003-07-17 Thread Alon Altman
On Thu, 17 Jul 2003, Micha Feigin wrote:

 I try to connect to a remote computer using ssh and then tunnel the ftp
 connection back to by computer using

 ssh -R 1234:local machine:21 ...

 I manage to open an ftp connection back to my computer and log in, but I
 can't seem to be able to do anything with it:

Use scp to copy files over a SSH connection, not tunneling FTP.

  Alon

-- 
This message was sent by Alon Altman ([EMAIL PROTECTED]) ICQ:1366540
GPG public key at http://alon.wox.org/pubkey.txt
Key fingerprint = A670 6C81 19D3 3773 3627  DE14 B44A 50A3 FE06 7F24
--
 -=[ Random Fortune ]=-
QOTD:
Do you smell something burning or is it me?
-- Joan of Arc

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Hebrew Input For Remote Display

2003-07-17 Thread Shachar Shemesh
Aharon Schkolnik wrote:

Under RH8 I had Hebrew working just fine on my machine.
I was using KDE's keyboard layout.
I just upgraded to RH9 (with KDE 3.1.2), and now it doesn't work.
I discovered from http://groups.yahoo.com/group/kde-il/message/206
that the keyboard configuration under RH9 seems completely broken.
So, I tried using the suggested Xkb workaround -

/usr/X11R6/bin/setxkbmap -compat group_led -symbols \
us(pc101)+il+group(alt_shift_toggle)+group(switch) 

That worked fine (I can switch back and forth between Hebrew and
English), except for the thing I need it for most:
I need to run an application on a remote (VMS) machine, displaying on my
machine, which needs Hebrew input. I am unable to get Hebrew input in
the window from the remote machine. To be completely clear: 
If I telnet to the remote machine, and then create another window
displayed on my machine, and then switch to Hebrew, I get Hebrew in
the telnet session, but no Hebrew in the remotely displayed window.
This was working fine under RH8, and in fact if I use KDE's broken
keyboard utility under RH9 I do get Hebrew in the remotely displayed
window (just can't get back to English, since it's broken).

Is there some setxkbmap option I need to know about ?
Is there some logical explanation for what is going on ?
Can anyone help me ?
TIA.

 

It sounds like your remote VMS utility is having problem with XKB's 
backwards compatibility. There is a fundemental difference between KDE's 
keyboard switch utility and the configuration you did. The configuration 
you did (which is the recommended way to go) loads two layouts one 
besides the other, and switches between them. This is the case for pre 
4.3.0 XFree too (the only diffrerence is that there, you had to couple 
the English and Hebrew keyboards, and had no other choice). The option 
to do this is defined by an X extension called XKB, which dates back 
to 1996 (IIRC).

The KDE utility actually changes keymaps each and every time you change 
language. This requires no X extension at all. XKB is supposed to 
provide backwards compatibility to utilities that are not XKB aware, 
which is supposed to make them think that what is happening is what the 
KDE keyboard switch utility is doing. It sounds as if this does not work 
properly in your case.

I think the only useful piece of information this email does not hold is 
what you can do about it :-)

--
Shachar Shemesh
Open Source integration consultant
Home page  resume - http://www.shemesh.biz/


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: [August Penguin] Updates and a poster

2003-07-17 Thread Shlomi Fish
On Sun, 13 Jul 2003, Muli Ben-Yehuda wrote:

 On Sun, Jul 13, 2003 at 10:06:38AM +0200, Dan Armak wrote:
  On Saturday 12 July 2003 23:54, Gilad Ben-Yossef wrote:
   Howdie,
  
   Some updates on August Penguin on the web site:
   http://www.hamakor.org.il/august.html
 
  WRT the keysigning: is some kind of preparation/registration needed?

 Yes, and I'm sorry for not having published it earlier. In order to
 participate, all you need to do is email me

 a) your key (public, not private ...)
 b) your key id
 c) your key fingerprint

 And show up to the key signing party.


One question: what keyserver should I use to upload the key to? Is:

http://www.keyserver.net/en/

good?

Regards,

Shlomi Fish

 Full instructions (in hebrew, translated by the lovely ladypine!) will
 go up in an hour or so on Hamakor's website. We'll post here when they
 do.

  I'm asking because here at linuxtag I've discovered I couldn't attend the big
  keysigning party. Turns out that registration was required and it closed a
  week before the expo (!). So I'd not want to miss it again :-)

 If it makes you feel better, registration for the OLS key signing
 party closed up almost a month before the event. I still got in on
 time, though :-)

 Cheers,
 Muli.
 --
 Muli Ben-Yehuda
 http://www.mulix.org
 http://www.livejournal.com/~mulix/





--
Shlomi Fish[EMAIL PROTECTED]
Home Page: http://t2.technion.ac.il/~shlomif/

There's no point in keeping an idea to yourself since there's a 10 to 1
chance that somebody already has it and will share it before you.


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Reverse ftp over ssh does send files

2003-07-17 Thread Shachar Shemesh
Alon Altman wrote:

On Thu, 17 Jul 2003, Micha Feigin wrote:

 

I try to connect to a remote computer using ssh and then tunnel the ftp
connection back to by computer using
ssh -R 1234:local machine:21 ...

I manage to open an ftp connection back to my computer and log in, but I
can't seem to be able to do anything with it:
   

Use scp to copy files over a SSH connection, not tunneling FTP.

 Alon

 

If you want an interface consistant with FTP, use SFTP.

Read Alon's reply to see why this is necessary.

Alon does have one bit of information wrong, however. Even if you could 
set the port number in advance, it would still not work. In order for it 
to work you would also need to change the actual data passed inside the 
control connection. About six years ago, I was able to encrypt the 
control connection, while passing the data in the clear. I suspect, in 
retrospect, that the only reason I could do that was that the FTP 
servers of those days did not try to protect themselves against bounce 
attacks. It should be pretty much impossible with modern FTP servers.

Shachar

--
Shachar Shemesh
Open Source integration consultant
Home page  resume - http://www.shemesh.biz/


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


postfix on Mandrake 9.0

2003-07-17 Thread Ron Gidron
I am trying to cnfigure postfix on an mdk 9.0 box. nothing fancy just a 
basic setup.
Needing to add an alias I edited /etc/postfix/aliases and made a trivial 
update.
next I issue the newaliases.postfix command to rebuild the db but the 
program does not seam to return?!
It simply sits there and seams to be stuck on something and I don't get 
the next promt. Where do I start debugging this?
I tried top and did not even see the process on the list (How much that 
is relevant I know not..)

Thanks,
Ron
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: Hebrew Input For Remote Display

2003-07-17 Thread Aharon Schkolnik
 Shachar == Shachar Shemesh [EMAIL PROTECTED] writes:

Shachar Aharon Schkolnik wrote:
 Under RH8 I had Hebrew working just fine on my machine.  I was
 using KDE's keyboard layout.  I just upgraded to RH9 (with KDE
 3.1.2), and now it doesn't work.
 
 I discovered from
 http://groups.yahoo.com/group/kde-il/message/206 that the
 keyboard configuration under RH9 seems completely broken.
 
 So, I tried using the suggested Xkb workaround -
 
 /usr/X11R6/bin/setxkbmap -compat group_led -symbols \
 us(pc101)+il+group(alt_shift_toggle)+group(switch) That
 worked fine (I can switch back and forth between Hebrew and

 English), except for the thing I need it for most:
 
 I need to run an application on a remote (VMS) machine,
 displaying on my machine, which needs Hebrew input. I am unable
 to get Hebrew input in the window from the remote machine. To
 be completely clear: If I telnet to the remote machine, and
 then create another window

 displayed on my machine, and then switch to Hebrew, I get
 Hebrew in the telnet session, but no Hebrew in the remotely
 displayed window.  This was working fine under RH8, and in fact
 if I use KDE's broken keyboard utility under RH9 I do get
 Hebrew in the remotely displayed window (just can't get back to
 English, since it's broken).
 
 Is there some setxkbmap option I need to know about ?  Is there
 some logical explanation for what is going on ?  Can anyone
 help me ?
 
 TIA.
 
 
 

Shachar It sounds like your remote VMS utility is having problem
Shachar with XKB's backwards compatibility. There is a
Shachar fundemental difference between KDE's keyboard switch
Shachar utility and the configuration you did. The configuration
Shachar you did (which is the recommended way to go) loads two
Shachar layouts one besides the other, and switches between
Shachar them. This is the case for pre 4.3.0 XFree too (the only
Shachar diffrerence is that there, you had to couple the English
Shachar and Hebrew keyboards, and had no other choice). The
Shachar option to do this is defined by an X extension called
Shachar XKB, which dates back to 1996 (IIRC).


Shachar The KDE utility actually changes keymaps each and every
Shachar time you change language. This requires no X extension at
Shachar all. XKB is supposed to provide backwards compatibility
Shachar to utilities that are not XKB aware, which is supposed to
Shachar make them think that what is happening is what the KDE
Shachar keyboard switch utility is doing. It sounds as if this
Shachar does not work properly in your case.


Thanks for all the information !

Shachar I think the only useful piece of information this email
Shachar does not hold is what you can do about it :-)


Could it be that I have to tell XKB to use the backward compatibility
mode ?

Could I use setxkbmap or something else to change keymaps back and
forth, like the KDE utility does ?




-- 
  The day is short, and the work is great,  |  Aharon Schkolnik
  and the laborers are lazy, and the reward |  Israel Health Ministry 
  is great, and the Master of the house is  |  [EMAIL PROTECTED]
  impatient. - Ethics Of The Fathers Ch. 2  |  +972 2 670 6954/5

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: postfix on Mandrake 9.0

2003-07-17 Thread Tzafrir Cohen
On Thu, Jul 17, 2003 at 10:09:14AM +, Ron Gidron wrote:
 I am trying to cnfigure postfix on an mdk 9.0 box. nothing fancy just a 
 basic setup.
 Needing to add an alias I edited /etc/postfix/aliases and made a trivial 
 update.
 next I issue the newaliases.postfix command to rebuild the db but the 
 program does not seam to return?!

If you don't like the name, 'update-alternatives' may give you the name
'newaliases'

 It simply sits there and seams to be stuck on something and I don't get 
 the next promt. Where do I start debugging this?

strace -p PID

Also check the mail logs: under /var/log/mail/ . Especially the error log.

 I tried top and did not even see the process on the list (How much that 
 is relevant I know not..)

ps fax (or pstree), to see what are the children of your shell.
newaliases is actually performed by 'postalias' in postfix.

-- 
Tzafrir Cohen   +---+
http://www.technion.ac.il/~tzafrir/ |vim is a mutt's best friend|
mailto:[EMAIL PROTECTED]   +---+

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Reverse ftp over ssh does send files

2003-07-17 Thread Tzafrir Cohen
On Thu, Jul 17, 2003 at 09:07:18AM +0300, guy keren wrote:
 
 On 17 Jul 2003, Micha Feigin wrote:
 
  I try to connect to a remote computer using ssh and then tunnel the ftp
  connection back to by computer using
  
  ssh -R 1234:local machine:21 ...
 
 why do you expect to be able to tunnet 'ftp' like that? ftp sends only 
 commands via port 21. data is sent via a seperate connection (data is both 
 the output of 'ls', and files you transfer with 'get' or 'put'). 
 
 it looks like you _might_ be able to do what you wanted, _if_ your could 
 force the 'data' port to always be the same port on the remote machine, 
 and then tunnel that port too via ssh. if this is possible, perhaps 
 someone on the list can show us how to do that.

However IIRC there is no inherent limitation in the ssh protocol for 
starting tunnels on the fly. 

I vaugly recall that mindterm had a feature of on-the-fly creation of
ssh tunnels for ftp connections. Though in their page I only see an ftp
proxy mentioned:

  http://www.mindbright.se/mindterm/techspec.php

-- 
Tzafrir Cohen   +---+
http://www.technion.ac.il/~tzafrir/ |vim is a mutt's best friend|
mailto:[EMAIL PROTECTED]   +---+

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: [August Penguin] Updates and a poster

2003-07-17 Thread Muli Ben-Yehuda
On Thu, Jul 17, 2003 at 10:05:47AM +0300, Shlomi Fish wrote:

 One question: what keyserver should I use to upload the key to? Is:
 
 http://www.keyserver.net/en/
 
 good?

I usually use pgp.mit.edu, but the above seems fine as well. 
-- 
Muli Ben-Yehuda
http://www.mulix.org
http://www.livejournal.com/~mulix/



pgp0.pgp
Description: PGP signature


Re: [August Penguin] Updates and a poster

2003-07-17 Thread Nadav Har'El
On Thu, Jul 17, 2003, Shlomi Fish wrote about Re: [August Penguin] Updates and a 
poster:
 One question: what keyserver should I use to upload the key to? Is:
 
 http://www.keyserver.net/en/
 
 good?

Originally, all the PGP key servers cooperated, so that sending a key to
one of them propegated it to all others. Going to wwwkeys.pgp.net will
get you one of a bunch of such key servers. The gpg manual even suggests
that you can run
host -l pgp.net | grep wwwkeys
to get the list of all these servers (if you want to manual choose one
that you are closest too, for example).

I can't find any evidence that the server you told us about actually shares
keys with the other servers; in particular I can't find my keys in there.
So you might prefer to use wwwkeys.pgp.net instead.

In my .gnupg/options I have the following:

keyserver wwwkeys.pgp.net
keyserver-options honor-http-proxy


-- 
Nadav Har'El|Thursday, Jul 17 2003, 17 Tammuz 5763
[EMAIL PROTECTED] |-
Phone: +972-53-245868, ICQ 13349191 |The path of least resistance is what
http://nadav.harel.org.il   |makes rivers and politicians crooked.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Hebrew Input For Remote Display

2003-07-17 Thread Tzafrir Cohen
On Thu, Jul 17, 2003 at 08:01:14AM +0300, Aharon Schkolnik wrote:
 
 Under RH8 I had Hebrew working just fine on my machine.
 I was using KDE's keyboard layout.
 I just upgraded to RH9 (with KDE 3.1.2), and now it doesn't work.
 
 I discovered from http://groups.yahoo.com/group/kde-il/message/206
 that the keyboard configuration under RH9 seems completely broken.
 
 So, I tried using the suggested Xkb workaround -
 
 /usr/X11R6/bin/setxkbmap -compat group_led -symbols \
 us(pc101)+il+group(alt_shift_toggle)+group(switch) 

What X server do you use?

Note: setxkbmap does not compile a keyboard map locally. It sends a
keyboard map description to the server and the server will compile a
keyboard map.

Assuming that te X server is indeed the RH9, the above is broken:

setxkbmap -option grp:alt_shift_toggle,grp_led:scroll,grp:switch \
  -model pc101 us,il

(BW: don't you have a 104-keys keyboard? You should probably use '-model
pc104'.)

 
 That worked fine (I can switch back and forth between Hebrew and
 English), except for the thing I need it for most:
 
 I need to run an application on a remote (VMS) machine, displaying on my
 machine, which needs Hebrew input. I am unable to get Hebrew input in
 the window from the remote machine. To be completely clear: 
 If I telnet to the remote machine, and then create another window
 displayed on my machine, and then switch to Hebrew, I get Hebrew in
 the telnet session, but no Hebrew in the remotely displayed window.

Are you unable to type or is it displayed incorrectly?

 This was working fine under RH8, and in fact if I use KDE's broken
 keyboard utility under RH9 I do get Hebrew in the remotely displayed
 window (just can't get back to English, since it's broken).

Can you type Hebrew in , say, evolution? (1.2, from your distro)

or in any gtk 1.2 program?

Or in xedit?

Maybe this is the ol locale problem

 
 Is there some setxkbmap option I need to know about ?
 Is there some logical explanation for what is going on ?
 Can anyone help me ?

-- 
Tzafrir Cohen   +---+
http://www.technion.ac.il/~tzafrir/ |vim is a mutt's best friend|
mailto:[EMAIL PROTECTED]   +---+

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Reverse ftp over ssh does send files

2003-07-17 Thread Shachar Shemesh
Tzafrir Cohen wrote:

On Thu, Jul 17, 2003 at 09:07:18AM +0300, guy keren wrote:
 

On 17 Jul 2003, Micha Feigin wrote:

   

I try to connect to a remote computer using ssh and then tunnel the ftp
connection back to by computer using
ssh -R 1234:local machine:21 ...
 

why do you expect to be able to tunnet 'ftp' like that? ftp sends only 
commands via port 21. data is sent via a seperate connection (data is both 
the output of 'ls', and files you transfer with 'get' or 'put'). 

it looks like you _might_ be able to do what you wanted, _if_ your could 
force the 'data' port to always be the same port on the remote machine, 
and then tunnel that port too via ssh. if this is possible, perhaps 
someone on the list can show us how to do that.
   

However IIRC there is no inherent limitation in the ssh protocol for 
starting tunnels on the fly. 

I vaugly recall that mindterm had a feature of on-the-fly creation of
ssh tunnels for ftp connections. Though in their page I only see an ftp
proxy mentioned:
 http://www.mindbright.se/mindterm/techspec.php

 

There is no such limitation (from the openssh client, just type ENTER, 
~, and do -L... or -l). However, like I said in a different post, 
that won't allow encrypted FTP. In order for that work, you need to 
translate the port and passive commands inside the control 
connection to have the new IP.

 Shachar

--
Shachar Shemesh
Open Source integration consultant
Home page  resume - http://www.shemesh.biz/


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: Hebrew Input For Remote Display

2003-07-17 Thread Aharon Schkolnik
 Tzafrir == Tzafrir Cohen [EMAIL PROTECTED] writes:

Tzafrir On Thu, Jul 17, 2003 at 08:01:14AM +0300, Aharon
Tzafrir Schkolnik wrote:
 Under RH8 I had Hebrew working just fine on my machine.  I was
 using KDE's keyboard layout.  I just upgraded to RH9 (with KDE
 3.1.2), and now it doesn't work.
 
 I discovered from
 http://groups.yahoo.com/group/kde-il/message/206 that the
 keyboard configuration under RH9 seems completely broken.
 
 So, I tried using the suggested Xkb workaround -
 
 /usr/X11R6/bin/setxkbmap -compat group_led -symbols \
 us(pc101)+il+group(alt_shift_toggle)+group(switch)

Tzafrir What X server do you use?


Do you mean XFree86-4.3.0-2 on my RH9 box ?


Tzafrir Note: setxkbmap does not compile a keyboard map
Tzafrir locally. It sends a keyboard map description to the
Tzafrir server and the server will compile a keyboard map.

Tzafrir Assuming that te X server is indeed the RH9, the above is
Tzafrir broken:

Tzafrir setxkbmap -option
Tzafrir grp:alt_shift_toggle,grp_led:scroll,grp:switch \ -model
Tzafrir pc101 us,il

Yeah, I thinks that's what's not working.

Tzafrir (BW: don't you have a 104-keys keyboard? You should
Tzafrir probably use '-model pc104'.)


Yeah, I changed it (of course, that didn't solve the problem ;-)  )

 That worked fine (I can switch back and forth between Hebrew
 and English), except for the thing I need it for most:
 
 I need to run an application on a remote (VMS) machine,
 displaying on my machine, which needs Hebrew input. I am unable
 to get Hebrew input in the window from the remote machine. To
 be completely clear: If I telnet to the remote machine, and
 then create another window displayed on my machine, and then
 switch to Hebrew, I get Hebrew in the telnet session, but no
 Hebrew in the remotely displayed window.

Tzafrir Are you unable to type or is it displayed incorrectly?


I get English instead of Hebrew - seems to be an input issue - not a
display issue.

 This was working fine under RH8, and in fact if I use KDE's
 broken keyboard utility under RH9 I do get Hebrew in the
 remotely displayed window (just can't get back to English,
 since it's broken).

Tzafrir Can you type Hebrew in , say, evolution? (1.2, from your
Tzafrir distro)

Tzafrir or in any gtk 1.2 program?

Tzafrir Or in xedit?


I can type Hebrew in emacs, konqueror.

Tzafrir Maybe this is the ol locale problem

 Is there some setxkbmap option I need to know about ?  Is there
 some logical explanation for what is going on ?  Can anyone
 help me ?


-- 
  The day is short, and the work is great,  |  Aharon Schkolnik
  and the laborers are lazy, and the reward |  Israel Health Ministry 
  is great, and the Master of the house is  |  [EMAIL PROTECTED]
  impatient. - Ethics Of The Fathers Ch. 2  |  +972 2 670 6954/5

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: XIO: fatal IO error 0 (Success) on X server

2003-07-17 Thread Gilad Ben-Yossef
Nathan Fain wrote:
I have a SuSE8.1 system installed with the XFree86 4.3.0 packages from
SuSE for 8.1 and KDE 3.1 on top of that.  50% of the times that I run an
application we wrote I get the following error:
XIO:  fatal IO error 0 (Success) on X server ebony:0.0
 after 14 requests (13 known processed) with 0 events remaining.
then that is it and it exits.  The other 50% of the time it runs
perfectly.  NOTE: I compiled the application using gcc3.1.  If I compile
it on a SuSE7.1 system with the SuSE X 4.2.0 packages and then run it on
a SuSE8.1 system it works fine.  Also note: this happens on all of the
SuSe8.1 system I have (about 20 or so) so it can't be specific to Video
card (they all have various cards).  Bellow is the last lines of an
strace on the application.  Note: DRI is setup and working and loads
just fine from the looks of the X log.
Any clues??
Sounds very interesting. What does this application do? does it use 
libGl and friends or only does 2D stuff? If you run the X server on the 
systems in vga mode (no acceleration) does it still behave the same?

Gilad.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


RE: [OT] Public wifi access

2003-07-17 Thread Arik Baratz

[lotastuff deleted]
 Internet Explorer needs to be used on public hotspots where 
 authentication is 
 web based (haven't seen those in Israel, but it's the common hotspot 
 authentication mechanism abroad). Many of those 
 authentication gateways 
 simply hijack your browser to the authentication page. 
 Konquerrer and 
 mozilla seem to be less hijackable than IE, and therefore 
 you may need IE 
 for some hotspots.

A. If you're in Ra'anana you can drop by my company for 5 minutes, I'll let you use my 
AP for the test.

B. The 'hijacking' thingie is done using port redirection, and it works with EVERY 
browser. The web server might not serve Mozilla-compatible pages, but I never 
encountered one that did not, and I've been places. My Mozilla works fine.

C. Get an iPASS account, and install their dialer (if it works with WINE). There are 
some access points that work only with iPASS, and I didn't see any charge in my iPASS 
account for them (Narita airport, Japan is one example). Getting an iPass account is 
easy and free (at least in Barak, where I tried).

-- Arik
**
This email and attachments have been scanned for
potential proprietary or sensitive information leakage. 

PortAuthority(TM)  Server 
Keeping Information Inside
Vidius, Inc. 
www.vidius.com
**èº{.nÇ+‰·¬zwfj)m¢X§»¥­ê®zËeŠ{±¢¸—­†Ø^{.nÇ+‰·¢žØ^™ë,j›¡‚»§¶œ¢iš†‹§²æìr¸›zf¢–X§»¥­ê®zËeŠ{±¢¸

Connect to users terminal useing `screen`

2003-07-17 Thread RedBar0n



Hi List,

I'm trying to monitor my user, I'm testing 
"screen".

I can connect to the same user (if I started screen 
for user foo and then I login in a second session as foo I can connect to the 
first foo session), but this thing can't work if I "su - foo" ( I get an error 
"Cannot open your terminal '/dev/pts/0' - please check" , prs/0 is my current 
tty), so I changing the permission to "777" on this device, but I believe that 
there is more elegant way to do this ( connect to user session as root without 
"su, chmod 777 /dev/pst/XXX etc...)

P.S if there is more efficient/secure way to 
monitor users and help them, please advise me:-)
Thanks,
Gili





Good english linux books

2003-07-17 Thread Shachar Shemesh
Hi there,

Is there anyone here who can recommend to me a good Linux begginers 
book, preferably from the administration/security standpoint.

Shachar

--
Shachar Shemesh
Open Source integration consultant
Home page  resume - http://www.shemesh.biz/


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: Hebrew Input For Remote Display

2003-07-17 Thread Aharon Schkolnik
 Shachar == Shachar Shemesh [EMAIL PROTECTED] writes:

Shachar Aharon Schkolnik wrote:
 Under RH8 I had Hebrew working just fine on my machine.  I was
 using KDE's keyboard layout.  I just upgraded to RH9 (with KDE
 3.1.2), and now it doesn't work.
 
 I discovered from
 http://groups.yahoo.com/group/kde-il/message/206 that the
 keyboard configuration under RH9 seems completely broken.
 
 So, I tried using the suggested Xkb workaround -
 
 /usr/X11R6/bin/setxkbmap -compat group_led -symbols \
 us(pc101)+il+group(alt_shift_toggle)+group(switch) That
 worked fine (I can switch back and forth between Hebrew and

 English), except for the thing I need it for most:
 
 I need to run an application on a remote (VMS) machine,
 displaying on my machine, which needs Hebrew input. I am unable
 to get Hebrew input in the window from the remote machine. To
 be completely clear: If I telnet to the remote machine, and
 then create another window

 displayed on my machine, and then switch to Hebrew, I get
 Hebrew in the telnet session, but no Hebrew in the remotely
 displayed window.  This was working fine under RH8, and in fact
 if I use KDE's broken keyboard utility under RH9 I do get
 Hebrew in the remotely displayed window (just can't get back to
 English, since it's broken).
 
 Is there some setxkbmap option I need to know about ?  Is there
 some logical explanation for what is going on ?  Can anyone
 help me ?
 
 TIA.
 
 
 

Shachar It sounds like your remote VMS utility is having problem
Shachar with XKB's backwards compatibility. There is a
Shachar fundemental difference between KDE's keyboard switch
Shachar utility and the configuration you did. The configuration
Shachar you did (which is the recommended way to go) loads two
Shachar layouts one besides the other, and switches between
Shachar them. This is the case for pre 4.3.0 XFree too (the only
Shachar diffrerence is that there, you had to couple the English
Shachar and Hebrew keyboards, and had no other choice). The
Shachar option to do this is defined by an X extension called
Shachar XKB, which dates back to 1996 (IIRC).


Shachar The KDE utility actually changes keymaps each and every
Shachar time you change language. This requires no X extension at
Shachar all. XKB is supposed to provide backwards compatibility
Shachar to utilities that are not XKB aware, which is supposed to
Shachar make them think that what is happening is what the KDE
Shachar keyboard switch utility is doing. It sounds as if this
Shachar does not work properly in your case.


Shachar I think the only useful piece of information this email
Shachar does not hold is what you can do about it :-)


I wonder what would happen if I made the Hebrew lay the primary
layout, and the English the secondary. Is there any way to do that ?
If so, is it possible that the VMS application would then pick up the
Hebrew layout ?




-- 
  The day is short, and the work is great,  |  Aharon Schkolnik
  and the laborers are lazy, and the reward |  Israel Health Ministry 
  is great, and the Master of the house is  |  [EMAIL PROTECTED]
  impatient. - Ethics Of The Fathers Ch. 2  |  +972 2 670 6954/5

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Connect to users terminal useing `screen`

2003-07-17 Thread Beni Cherniavsky
RedBar0n wrote on 2003-07-17:

 Hi List,

 I'm trying to monitor my user, I'm testing screen.

 I can connect to the same user (if I started screen for user foo and
 then I login in a second session as foo I can connect to the first
 foo session), but this thing can't work if I su - foo ( I get an
 error Cannot open your terminal '/dev/pts/0' - please check ,
 prs/0 is my current tty), so I changing the permission to 777 on
 this device, but I believe that there is more elegant way to do this
 ( connect to user session as root without su, chmod 777
 /dev/pst/XXX etc...)

 P.S if there is more efficient/secure way to monitor users and help
 them, please advise me :-)

Perhaps the `dtach` program can help.  It only handles the connection
of programs to terminals, without any VT emulation, so you'll need to
run from a terminal of the same kind as your user (e.g. both xterms).
It does work for multiple simultaneous connections, last time I
checked.

I don't understand pts permissions but it seems from you description
that you try to connect first, then su, try the other way around.

-- 
Beni Cherniavsky [EMAIL PROTECTED]

If I don't hack on it, who will?  And if I don't GPL it, what am I?
And if it itches, why not now?  [With apologies to Hilel ;]

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: [OT] Public wifi access

2003-07-17 Thread Aviram Jenik
On Thursday 17 July 2003 12:51, Arik Baratz wrote:

 A. If you're in Ra'anana you can drop by my company for 5 minutes, I'll let
 you use my AP for the test.

Thanks :-) Next time I come to visit Guy...


 B. The 'hijacking' thingie is done using port redirection, and it works
 with EVERY browser. The web server might not serve Mozilla-compatible
 pages, but I never encountered one that did not, and I've been places. My
 Mozilla works fine.

Can you elaborate on that? (off list, pehaps, as I'm sure there aren't many 
people who are really interested) I'm just curious about it.

Anyway,  it didn't work with my mozilla, but there could be hundreds of 
reasons for that (Narita airport, for example, has a submission form that 
didn't work for me for anything that wasn't IE). Mozilla isn't my primary 
browser, so you're probably right to assume it was a configuration problem on 
my part.
There are many other places (Starbucks on the west coast, many European 
airports) that worked perfectly with konquerrer, so I guess there are 
different versions.


 C. Get an iPASS account, and install their dialer (if it works with WINE).
 There are some access points that work only with iPASS, and I didn't see
 any charge in my iPASS account for them (Narita airport, Japan is one
 example). Getting an iPass account is easy and free (at least in Barak,
 where I tried).


Since you mention Narita: no need to use the dialer there, you can easily 
input the iPass name and password using the web interface. 
I totally agree about the advantage of iPass: but has here got iPass working 
under Linux? (I'd really rather not use their dialer under WINE).

-- 
- Aviram


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: SCSI error

2003-07-17 Thread Ehud Karni
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 16 Jul 2003 22:42:37 +0300, Gil Freund [EMAIL PROTECTED] wrote:
 
 I am running a DLT1 tape off a BusLogic Flashpoint LT.
 When I run a backup (Arkeia 5.1), the backup terminates with an End Of 
 Tape message, after about 4GB.
 
 in /var/log/messages I see:
 Jul 16 09:18:41 thief kernel: st1: Error 2707 (sugg. bt 0x20, driver 
 bt 0x7, host bt 0x7).

Check the SCSI cable that connects the DLT (try a replacement). It
can cause such problems (I know from experience).

Ehud.


- -- 
 Ehud Karni   Tel: +972-3-7966-561  /\
 Mivtach - Simon  Fax: +972-3-7966-667  \ /  ASCII Ribbon Campaign
 Insurance agencies   (USA) voice mail and   X   Against   HTML   Mail
 http://www.mvs.co.il  FAX:  1-815-5509341  / \
 mailto:[EMAIL PROTECTED]  Better  Safe  Than  Sorry
-BEGIN PGP SIGNATURE-
Comment: use http://www.keyserver.net/ to get my key (and others)

iD8DBQE/FqxKLFvTvpjqOY0RAlfAAJ96mk4Us1+Q2vH34fz5IThHTUJ+WwCggSv8
gmytck+eenbFwB1F7o4sXlw=
=7K+N
-END PGP SIGNATURE-

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: SCSI error

2003-07-17 Thread Shaul Karl
On Wed, Jul 16, 2003 at 10:42:37PM +0300, Gil Freund wrote:
 
 in /var/log/messages I see:
 Jul 16 09:18:41 thief kernel: st1: Error 2707 (sugg. bt 0x20, driver 
 bt 0x7, host bt 0x7).
 
 
 Any suggestions?
 


  In case no one comes with something better you might google for that
message.
-- 

Shaul Karl, [EMAIL PROTECTED] e t

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: XIO: fatal IO error 0 (Success) on X server

2003-07-17 Thread Nathan Fain
It does use OpenGL.  The application opens multiple image squence 
windows for comparison.  Just find it a bit strange that it 1: works 
sometime, 2: works perfectly when compiled on a SuSE7.1 system (X4.2, 
mesa 3.4) and then run on this newer system. btw, I have mesa 4.0.3 if 
it matters and I've run the demo's and set the permission and mesa has 
given me it's blessing.



Gilad Ben-Yossef wrote:

Nathan Fain wrote:

I have a SuSE8.1 system installed with the XFree86 4.3.0 packages from
SuSE for 8.1 and KDE 3.1 on top of that.  50% of the times that I run an
application we wrote I get the following error:
XIO:  fatal IO error 0 (Success) on X server ebony:0.0
 after 14 requests (13 known processed) with 0 events remaining.
then that is it and it exits.  The other 50% of the time it runs
perfectly.  NOTE: I compiled the application using gcc3.1.  If I compile
it on a SuSE7.1 system with the SuSE X 4.2.0 packages and then run it on
a SuSE8.1 system it works fine.  Also note: this happens on all of the
SuSe8.1 system I have (about 20 or so) so it can't be specific to Video
card (they all have various cards).  Bellow is the last lines of an
strace on the application.  Note: DRI is setup and working and loads
just fine from the looks of the X log.
Any clues??


Sounds very interesting. What does this application do? does it use 
libGl and friends or only does 2D stuff? If you run the X server on 
the systems in vga mode (no acceleration) does it still behave the same?

Gilad.



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: XIO: fatal IO error 0 (Success) on X server

2003-07-17 Thread Beni Cherniavsky
Nathan Fain wrote on 2003-07-17:

 Gilad Ben-Yossef wrote:

  Nathan Fain wrote:
 
  I have a SuSE8.1 system installed with the XFree86 4.3.0 packages from
  SuSE for 8.1 and KDE 3.1 on top of that.  50% of the times that I run an
  application we wrote I get the following error:
  XIO:  fatal IO error 0 (Success) on X server ebony:0.0
   after 14 requests (13 known processed) with 0 events remaining.
 
  then that is it and it exits.  The other 50% of the time it runs
  perfectly.  NOTE: I compiled the application using gcc3.1.  If I compile
  it on a SuSE7.1 system with the SuSE X 4.2.0 packages and then run it on
  a SuSE8.1 system it works fine.  Also note: this happens on all of the
  SuSe8.1 system I have (about 20 or so) so it can't be specific to Video
  card (they all have various cards).  Bellow is the last lines of an
  strace on the application.  Note: DRI is setup and working and loads
  just fine from the looks of the X log.
 
  Any clues??
 
 
  Sounds very interesting. What does this application do? does it use
  libGl and friends or only does 2D stuff? If you run the X server on
  the systems in vga mode (no acceleration) does it still behave the same?
 
  Gilad.
 
 It does use OpenGL.  The application opens multiple image squence
 windows for comparison.  Just find it a bit strange that it 1: works
 sometime, 2: works perfectly when compiled on a SuSE7.1 system (X4.2,
 mesa 3.4) and then run on this newer system. btw, I have mesa 4.0.3 if
 it matters and I've run the demo's and set the permission and mesa has
 given me it's blessing.

I've just experienced this very error from a fresh wine build.  After
some googling, I gathered that this is known to be related to
incompatibilities of wine with glibc 2.3, which were/are being worked
upon; installing wine for rh9 (I have rh9) from SourceForge fixed
this.  I don't know how is this related to Nathan's error but perhaps
it will turn the light for somebody else...

-- 
Beni Cherniavsky [EMAIL PROTECTED]

If I don't hack on it, who will?  And if I don't GPL it, what am I?
And if it itches, why not now?  [With apologies to Hilel ;]

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



xchat2 translations in iglu

2003-07-17 Thread Diego Iastrubni
Hi list,

Since a few people in this list use xchat, here is a tip:
the hebrew translations of xchat 2 is available at iglu, 
http://iglu.org.il/pub/Hebrew/xchat-he.tar.bz2

and was done by Avi Abeksis nuritavi _at_ 012.net.il and  Eli Marko 
dig__dug _at_ hotmail.co.il. The translation is for the xchat2 version and 
was tested with Mandrake 9.1 Debian (don't know if stable or unstable sorry) 
and  Slackware 9.0, so I can guess 5that they are ok.

We are in the process of submitting the translations to the Translation 
project. Meantime, you can install them, and report to those two great guys 
about problems, or misspells. I hope that no misspells are found since I have 
checked them with hspell ;-). Great tool BTW.


-- 

- diego
 ___ 
/ Let us condemn to hellfire all those \
| who disagree with us. -- militant|
\ religionists everywhere   /
 --- 
\   ^__^
 \  (xx)\___
(__)\   )\/\
 U  ||w |
|| ||

Please avoid sending me Word or PowerPoint attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



RE: [OT] Public wifi access

2003-07-17 Thread Arik Baratz

  A. If you're in Ra'anana you can drop by my company for 5 
 minutes, I'll let
  you use my AP for the test.
 Thanks :-) Next time I come to visit Guy...

Amazing. It seems like everybody knows him. I hope your card supports WEP, because 
that's what we use.

  B. The 'hijacking' thingie is done using port redirection, 
 and it works
  with EVERY browser. The web server might not serve 
 Mozilla-compatible
  pages, but I never encountered one that did not, and I've 
 been places. My
  Mozilla works fine.
 Can you elaborate on that? (off list, pehaps, as I'm sure 
 there aren't many 
 people who are really interested) I'm just curious about it.

Yes, sure. It's the same trick used when using transparent proxy. First you get an IP 
address from a private range, and DNS server using DHCP. Then there are rules that 
rewrite the destination address. They do it for all unknown MAC addresses. The new 
address points to themselves, where there is a web server with the appropriate script. 
What you actually do is go to your homepage (mine's google for example). They allow 
DNS traffic, so resolution is no problem. Then the address is rewritten so you 
actually see the logon screen. The equivalent iptables rule is:

iptables -A PREROUTING -t nat -s 10.0.0.0/8 -p tcp -m tcp --dport 80 -j REDIRECT 
--to-ports 80

Then after you login, the rule is no longer valid for your MAC address, hence you 
undergo routing as usual.

 Anyway,  it didn't work with my mozilla, but there could be 
 hundreds of 
 reasons for that (Narita airport, for example, has a 
 submission form that 
 didn't work for me for anything that wasn't IE). Mozilla 
 isn't my primary 
 browser, so you're probably right to assume it was a 
 configuration problem on 
 my part.

Like I said I used iPass for Narita.

 There are many other places (Starbucks on the west coast, 
 many European 
 airports) that worked perfectly with konquerrer, so I guess there are 
 different versions.

Perhaps.

 Since you mention Narita: no need to use the dialer there, 
 you can easily 
 input the iPass name and password using the web interface. 
 I totally agree about the advantage of iPass: but has here 
 got iPass working 
 under Linux? (I'd really rather not use their dialer under WINE).

Frankly I used Windows XP and iPass, so I don't know. But while I was there I saved 
some dumps of the communication between the iPass client and the server, and they seem 
like regular HTTP. I don't have those logs, but maybe it's worth reverse-engineering.

-- Arik
**
This email and attachments have been scanned for
potential proprietary or sensitive information leakage. 

PortAuthority(TM)  Server 
Keeping Information Inside
Vidius, Inc. 
www.vidius.com
**

To unsubscribe, send 
mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



[OT] Public wifi access (fwd)

2003-07-17 Thread Jason Friedman
I am passing on this message for Tal Achituv:

The Interdisciplinary Center in herzelia (www.idc.ac.il) has public Wi-Fi
Internet for free around the cafeteria,

__ 
 Tal Achituv 
 Integration Assistant 
 tel.   +972-9-961-1500  ext. 277 
 fax.  +972-9-961-1511 
 mbl. +972-55-956-369 
 SCHEMA 
 Optimizing the Wireless World 
 w w w . s c h e m a . c o m 




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



using usb modem in linux

2003-07-17 Thread alex rait
I suppose it was already discussed here, but nevertheless:
I have an adsl connection via the ALE 130 usb modem, it has no drivers yet for linux 
for as much as I know, but somewhere I was told that it is possible to recompile the 
kernel in a way that it would support the mode.
Is it true? If yes, how exactly should I do that?

Thanx to everyone.
Alex.

_
Ïîëó÷èòå áåñïëàòíûé ïî÷òîâûé ýëåêòðîííûé àäðåñ [EMAIL PROTECTED] íà ñàéòå a 
href=http://www.armenia.ru;Àðìåíèÿ Òî÷êà Ðó/a - Ãëàâíûé Àðìÿíñêèé Ïîðòàë â 
ÐóÍåòå. 
http://www.armenia.ru

_
Select your own custom email address for FREE! Get [EMAIL PROTECTED], No Ads, 6MB, 
IMAP, POP, SMTP  more! http://www.everyone.net/selectmail?campaign=tag

To unsubscribe, send 
mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Good english linux books

2003-07-17 Thread Shany Pozin
Running Linux is a good starters 

- Original Message - 
From: Shachar Shemesh [EMAIL PROTECTED]
To: Linux-IL mailing list [EMAIL PROTECTED]
Sent: Thursday, July 17, 2003 1:21 PM
Subject: Good english linux books


 Hi there,
 
 Is there anyone here who can recommend to me a good Linux begginers 
 book, preferably from the administration/security standpoint.
 
  Shachar
 
 -- 
 Shachar Shemesh
 Open Source integration consultant
 Home page  resume - http://www.shemesh.biz/
 
 
 
 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]
 
 



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Good english linux books

2003-07-17 Thread Amichai Rotman
On Thursday, July 17, 2003 14:21, you wrote:
 Hi there,

 Is there anyone here who can recommend to me a good Linux begginers
 book, preferably from the administration/security standpoint.

  Shachar

Linux Administration for Dummies is a good place to start...

Amichai.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Reverse ftp over ssh does send files

2003-07-17 Thread Micha Feigin
On Thu, 2003-07-17 at 10:08, Shachar Shemesh wrote:
 Alon Altman wrote:
 
 On Thu, 17 Jul 2003, Micha Feigin wrote:
 
   
 
 I try to connect to a remote computer using ssh and then tunnel the ftp
 connection back to by computer using
 
 ssh -R 1234:local machine:21 ...
 
 I manage to open an ftp connection back to my computer and log in, but I
 can't seem to be able to do anything with it:
 
 
 
 Use scp to copy files over a SSH connection, not tunneling FTP.
 
   Alon
 
   
 
 If you want an interface consistant with FTP, use SFTP.
 
 Read Alon's reply to see why this is necessary.
 
 Alon does have one bit of information wrong, however. Even if you could 
 set the port number in advance, it would still not work. In order for it 
 to work you would also need to change the actual data passed inside the 
 control connection. About six years ago, I was able to encrypt the 
 control connection, while passing the data in the clear. I suspect, in 
 retrospect, that the only reason I could do that was that the FTP 
 servers of those days did not try to protect themselves against bounce 
 attacks. It should be pretty much impossible with modern FTP servers.
 
  Shachar

I am aware of sftp, only for the specific computer I am trying to
connect to, when I try to connect over sftp the connection locks up.
I can't connect directly back to my computer since I am conection
through the isp NAT and an extra home NAT which resalts with my computer
having to reachable address as far as the remote is concered. The remote
computer only allows conections over ssh, so I am looking for a way to
tunnel some kind of file send protocol (ie ftp, tftp) over ssh in the
reverse direction, where I can run any server I want. I need to transfer
files in both directions, and I guess I can write a program to do this,
but I'd rather not rewrite ftp.
can tftp both send and recieve files and will it run over the reveresed
ssh connection, or any other ideas on how to achive what I am trying to
do?

thanx


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]