Re: [PLUG] Ubuntu and NFS during boot

[Smith, Cathy]

No criticism intended, but cross mounting is not a good practice.  You've 
experienced one of the issues.  Ideally you'd want to get rid of all cross 
mounts.  Practically, in a legacy environment, that may not be possible.  You 
can consider making the mounts soft mounts or using automount.


Cathy
-- 
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the 
U.S. Department of Energy

Phone: 509.375.2687
Fax:       509.375.4399
Email: cathy.sm...@pnnl.gov



-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of John Meissen
Sent: Friday, March 17, 2017 5:08 PM
To: Portland Linux/Unix Group 
Subject: [PLUG] Ubuntu and NFS during boot


Do we still have any Ubuntu experts in the group?

I have a number of systems that have cross-mounted filesystems. Generally 
things work OK, but after a power outage today I noticed an issue during boot.

One of the systems didn't have the nfs server running (other issues), and my 
main server stopped during the boot process and waited for manual intervention. 
Something like "remote system not responding, press "S" to skip".

WTF.

I have the "bg" option specified in fstab. If I run the mount command manually 
after the system is up, the mount immediately backgrounds.

This is exactly the OPPOSITE of the way I would want a server to act. There may 
be no one here to intervene after a power failure, and the LAST thing I want to 
happen is for the system to hang during the boot if a remote system is 
temporarily unavailable. That's exactly the time I would want it to background 
itself.

Can someone tell me wtf is going on, and how I can change this behavior?

john-



___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Re-doing ssh key phrase and key type

[Smith, Cathy]

I think 600 will also work on the .ssh directory.  

-- 
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the 
U.S. Department of Energy

Phone: 509.375.2687
Fax:       509.375.4399
Email: cathy.sm...@pnnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Rich Shepard
Sent: Wednesday, November 02, 2016 10:10 AM
To: Portland Linux/Unix Group <plug@lists.pdxlinux.org>
Subject: Re: [PLUG] Re-doing ssh key phrase and key type

On Wed, 2 Nov 2016, Smith, Cathy wrote:

> Also the permissions on the .ssh directory must be 700.

Cathy,

   Ah, I thought 600 was appropriate. Will make changes later today.

> I apologize if this has already been mentioned, but have you tried to 
> telnet to port 22 on the target box? That would answer any questions 
> about connectivity.

   Port 22 is closed on all hosts; I use a much higher port number for ssh, and 
will test it with telnet, too.

Thanks,

Rich
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Re-doing ssh key phrase and key type

[Smith, Cathy]

Also the permissions on the .ssh directory must be 700.

I apologize if this has already been mentioned, but have you tried to telnet to 
port 22 on the target box?  That would answer any questions about connectivity.


Cathy
-- 
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the 
U.S. Department of Energy

Phone: 509.375.2687
Fax:       509.375.4399
Email: cathy.sm...@pnnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Damon Bull
Sent: Wednesday, November 02, 2016 9:00 AM
To: Portland Linux/Unix Group 
Subject: Re: [PLUG] Re-doing ssh key phrase and key type

Rich,
Maybe check your target users home directory permissions.  It's a poorly 
documented that in addition to the restrictive permission on the ~/.ssh 
directory and the authorized_keys file, your home directory on the target 
system must also be restricted.  It must not have more than read and execute 
permissions for group and everyone for ssh to work without password prompt.  In 
other words, your target user home directory permissions must be no more 
permissive than rwxr-xr-x.
Hope this helps.
db.


On Wednesday, November 2, 2016 8:35 AM, Louis Kowolowski 
 wrote:
 

 
> On Oct 26, 2016, at 5:51 PM, Rich Shepard  wrote:
> 
>> On Tue, 25 Oct 2016, Rich Shepard wrote:
>> 
>> Having new installations of Slackware-14.2 on three hosts now (two 
>> more to go after I get these three fully functional), I want to 
>> change my ssh private and public keys using a new passphrase and type.
> 
>  Keeping the same thread going, I've read the ssh, sshd, ssh_config,  
>sshd_config, ssh-keygen, and ssh-agen man pages and searched the web 
>for  usage examples and still have a few unanswered questions.
> 
>  On the desktop I generated a new ed25519 key pair. Wanting to set up  
>communications between this host and the ThinkPad I tried
> 
>    scp ~/.ssh/id_ed25519.pub typha:.ssh
> 
> (and a couple of different references to the remote host) but the 
> connection was refused.
> 
>  I copied the public key to a USB thumb drive and manually installed 
>it in
> typha: ~/.ssh.
> 
>  Then, logged into typha, I tried to scp ~/ from the desktop. Openssh 
>told  me it didn't recognize the remote machine and asked it I wanted to 
>continue.
> I responded, "yes," and the public key was added to the ThinkPad's  
>authorized_hosts file, but the connection was refused. Is the next step 
>to  specify verbotisty levels, e.g., 'ssh -vv '?
> 
Yes. If this doesn't show you the problem, you may have to start sshd with 
debugging. Of note, when you do this, sshd will terminate after the first 
connection. Be careful.


>  On a related issue, as authorized_hosts holds public keys from remote  
>hosts, and I'm essentially starting from a clean slate with the 
>portables  and the desktop, can I remove that old file from the 
>desktop's ~/.ssh/ and  start over again when I use ssh/scp from a portable to 
>the desktop?
> 
Are you mixing up authorized_keys and known_hosts?

Authorized_keys contains your ssh pub keys Known_hosts is a list of previously 
connected-to hosts and their fingerprints 

The latter is only meaningful in the sense that you don't get prompted if you 
save the information into known hosts.


>  On another related OpenSSH issue: ssh-agent. I've not before used it 
>but  it looks useful. If I understand the man page, I run it on hosts 
>that will  remotely connect to the desktop (the portables) so when they 
>boot they'll  have the public key available to all shells and I'll not 
>need to enter my  pass phrase each time I want to establish a secure 
>connection. Is this  correct? Should I also run it on the desktop?
> 
Not exactly. Typically, when you login, you run ssh-add  (either manually 
or automagically) and it will prompt for passphrase of key and add it to your 
ssh agent. If you use the ssh agent, when you connect to a host via ssh 
(assuming you aren't passing options to disable the agent) it will look for 
keys in the agent and auth with them. You don't need to provide a password in 
this case because you've already done so when you added the key to the agent. 
You can forward the agent information to the remote host and continue this 
daisy-chain process. This will work for any keys in the agent. This allows you 
to use ssh keys but not copy the private key to a remote system.

I run it on my desktop and laptop, because I use both to connect to remote 
hosts. I don't run it on remote hosts that I don't physically login to. I also 
don't copy the ssh private key to any host I don't trust.

Sent from my iPhone


___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug


   
___
PLUG mailing list
PLUG@lists.pdxlinux.org

Re: [PLUG] Joy++

[Smith, Cathy]

Emacs got an update this month as well.

-- 
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the 
U.S. Department of Energy

Phone: 509.375.2687
Fax:       509.375.4399
Email: cathy.sm...@pnnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Frank Filz
Sent: Wednesday, September 14, 2016 10:21 PM
To: 'Portland Linux/Unix Group' 
Subject: Re: [PLUG] Joy++

> > On Wed, 14 Sep 2016, chris (fool) mccraw wrote:
> >
> > >  When I log into my Xenix system with my 110 baud teletype, both 
> > > vi
> > >  *and* Emacs are just too damn slow.  They print useless messages 
> > > like,  'C-h for help' and '"foo" File is read only'.  So I use the 
> > > editor  that doesn't waste my VALUABLE time.
> >
> > >  Ed, man!  !man ed
> >
> >Yeah, and in the early 1960s I fed paper tape into a Burroughs 
> > mainframe, in the early 1970s I fed 80-column Hollerith cards into 
> > the IBM S/360, and in the late 1970s I used a Teletype terminal and 
> > Diablo typewriter/printer. Using ed is like flipping logic switches 
> > on the front of the computer to program it.
> >
> >Now is much better. Both emacs and vi do the job; pick the one 
> > you
like.
> >
> 
> Just so it was clear - that was a joke posting I was reposting from
1991not
> intended to start a flame war about who has the most history :)

I don't think folks see it as a flame war or competition. I just think it's fun 
to hear about what sorts of early computing experiences folks have had...

I sometimes wonder how people who start programming these days think about 
things. What is it like to never have coded in an environment where you counted 
every byte of your program? To have never coded in a system where you didn't 
have huge libraries of ready to use functions?

Frank


---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Web site URL points to localhost

[Smith, Cathy]

Also posted by Krebs  yesterday

Also, it seems clear that whoever built this ddos cannon has been 
testing it (in europe at OVH, in South America on Tuesday, elsewhere)

Bruce Schneier had this to say about large scale DDoS attacks
https://www.schneier.com/blog/archives/2016/09/someone_is_lear.html




-- 
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the 
U.S. Department of Energy

Phone: 509.375.2687
Fax:       509.375.4399
Email: cathy.sm...@pnnl.gov



-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Rich Shepard
Sent: Friday, September 23, 2016 8:24 AM
To: Portland Linux/Unix Group <plug@lists.pdxlinux.org>
Subject: Re: [PLUG] Web site URL points to localhost

On Fri, 23 Sep 2016, Smith, Cathy wrote:

> KrebsOnSecurity is still down this morning.

   So I noticed.

> He posted this on Twitter late last night.
>   It's looking likely that KrebsOnSecurity will be offline for a while. 
> Akamai's kicking me off their network tonight.

   And the bad guys win; that's exactly what they were trying to achieve. How 
unfortunate.

Rich
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Web site URL points to localhost

[Smith, Cathy]

KrebsOnSecurity is still down this morning.  He posted this on Twitter late 
last night.

It's looking likely that KrebsOnSecurity will be offline for a while. 
Akamai's kicking me off their network tonight.



-- 
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the 
U.S. Department of Energy

Phone: 509.375.2687
Fax:       509.375.4399
Email: cathy.sm...@pnnl.gov



-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Russell Senior
Sent: Friday, September 23, 2016 12:59 AM
To: Portland Linux/Unix Group 
Subject: Re: [PLUG] Web site URL points to localhost

> "John" == John Meissen  writes:

John> rshep...@appl-ecosys.com said:
>> I would appreciate someone explaining why I might be seeing these 
>> results and offer ideas how I might once again reach his web site.

John> Because that's what his nameserver is returning as his IP address. 
John> Not much you can do until that changes.

Of course, if you know what his site's actual IP address is, you could 
temporarily plunk it in /etc/hosts and bypass the DNS lookup.  If his site 
really is up, then that should work.

And, no, I don't know his site's ip address.


--
Russell Senior, President
russ...@personaltelco.net
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Web site URL points to localhost

[Smith, Cathy]

I'm not surprised.  I was able to get to his site this morning, but not this 
afternoon.

-- 
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the 
U.S. Department of Energy

Phone: 509.375.2687
Fax:       509.375.4399
Email: cathy.sm...@pnnl.gov



-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Ali Corbin
Sent: Thursday, September 22, 2016 4:57 PM
To: Portland Linux/Unix Group 
Subject: Re: [PLUG] Web site URL points to localhost

His service provider (who was suffering the affects of the attack) unloaded 
him.  Until he can get back up, your only recourse is to find caches of the 
site.
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Universality of USB Cables

[Smith, Cathy]

Is this the article you are referring to?  I finally understood why I seemed to 
go through cables.

http://arstechnica.com/gadgets/2015/11/google-engineer-leaves-scathing-reviews-of-dodgy-usb-type-c-cables-on-amazon/?comments=1


Cathy

-- 
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the 
U.S. Department of Energy

Phone: 509.375.2687
Fax:       509.375.4399
Email: cathy.sm...@pnnl.gov



-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of a...@clueserver.org
Sent: Wednesday, May 18, 2016 3:35 PM
To: Portland Linux/Unix Group 
Subject: Re: [PLUG] Universality of USB Cables

> On 2016-05-18 13:32, Rich Shepard wrote:
>> Am I correct in assuming that if I buy a USB cable with the 
>> appropriately sized plugs on each end it can be used with any device 
>> and a computer?
>
> Yep, that's the idear.  And you can get 'em from at the dollar store.

Actually not always...

Depends on the device and the cable.

There are "charge only" cables that will not transmit data.

If the device is made by Samsung, you need to make sure that it has the correct 
cable. Some micro usb cables have a resistor in the end that the Samsung device 
wants. (Part of the cable spec I believe.)

If it is a usb-c cable you need to verify if it is to spec. (There was a Google 
engineer that reviewed all the cables on Amazon.) Not everything was made 
correctly.

___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Tool to test internet speed

[Smith, Cathy]

If you have "older" equipment, you might consider replacing it.  When I was 
having problems, I took my very old modem to the Charter office.  I didn't 
call.  They replaced the modem with a new model and life improved considerably. 
 Talking with tech support didn't help.

-- 
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the 
U.S. Department of Energy

Phone: 509.375.2687
Fax:       509.375.4399
Email: cathy.sm...@pnnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of David
Sent: Tuesday, February 16, 2016 11:34 PM
To: plug@lists.pdxlinux.org
Subject: Re: [PLUG] Tool to test internet speed

On 02/16/2016 08:18 PM, John Jason Jordan wrote:
> On Tue, 16 Feb 2016 14:53:30 -0800
> Jim Garrison  dijo:
>
>> But you should disable all other bandwidth-consuming processes in 
>> order to get an actual performance figure.  Also remember the speed 
>> of any connection depends not on your speed but the speed of the 
>> slowest segment between you and the remote end.
>
> OK, this evening I have been doing some experimenting. I started by 
> just using Speedtest again, as I did this morning, with everything 
> still running. The results were the same as this morning, e.g.:
>



>
> Through all these tests I sometimes pointed Speedtest at different 
> servers, including even servers in Europe, but there was no 
> appreciable change in the performance.
>
> And to repeat, I am paying Comcast for Performance-75 service, which 
> is supposed to give me 50-75 Mbps down and 25 Mbps up. And until a 
> couple weeks ago I used to see upload speeds of around 25 Mbps.
>
> Any suggestions for what I should do next?

The only thing you can do at this point is to contact Comcast, but they will 
probably tell you what I've heard before: they only guarantee the upload speeds 
to the edge of their network.

If you run the speed test using the Comcast tool pointing to an internal 
Comcast server and still don't get what you are paying for, then you have a 
very valid complaint and they need to fix it.

What you get after exiting the Comcast network will vary, and based on your 
numbers, may indicate a Comcast cap in place for some reason.

dafr
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] I have no experience with installing Linux, can anyone help?

[Smith, Cathy]

You can use this to burn an iso to a USB as well:
http://www.isotousb.com/

Cathy
-- 
Cathy L. Smith
IT Engineer, CISSP

Pacific Northwest National Laboratory
Operated by Battelle for the 
U.S. Department of Energy

Phone: 509.375.2687
Fax:       509.375.4399
Email: cathy.sm...@pnnl.gov

-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Nat Taylor
Sent: Wednesday, September 16, 2015 10:48 AM
To: Portland Linux/Unix Group
Subject: Re: [PLUG] I have no experience with installing Linux, can anyone help?

I'm sure you will have people fighting over who gets to install linux on your 
machine.

On Wed, Sep 16, 2015 at 5:09 AM, Bill Morita  wrote:

> It is easy to produce a thumb drive version of an ISO using the 
> dreaded Windows.
> I suggest the free YUMI multi-loader:
> http://www.pendrivelinux.com/yumi-multiboot-usb-creator/
>
> It is easy to use:
>
>1. You select the linux distribution
>2. Point to the iso on your system.
>3. Wait for process to finish
>
> Note that you are able to load multiple ISOs to boot from if you have 
> the space on the thumb drive.
>
> -- Bill Morita
>
>
> -- Bill Morita
> 512-569-6387 (Cell)
>
> On Wed, Sep 16, 2015 at 6:45 AM, Vedanta Teacher < 
> orevedantateac...@gmail.com> wrote:
>
> > Russell,
> >
> >   I have multiple thumb drives and I remembered that I have an 
> > external
> HD.
> > If I get a chance I'll see if I can get everything set up. I do have 
> > an external dvd/rw I still do recieve cd's from overseas so I keep 
> > that option open.
> >
> > Blessings,
> > Paul W.
> >
> > On Tue, Sep 15, 2015 at 6:53 PM, Russell Senior <
> russ...@personaltelco.net
> > >
> > wrote:
> >
> > > > "Paul" == Paul Heinlein  writes:
> > >
> > > [...]
> > >
> > > Paul> It will be tougher if you don't have the gear necessary to 
> > > Paul> burn your own DVD. The easiest alternative would be to ask a 
> > > Paul> nearby friend or neighbor.
> > >
> > > These days, USB thumbdrives are probably more common, given the 
> > > disappearance of optical media from modern hardware.
> > >
> > >
> > > --
> > > Russell Senior, President
> > > russ...@personaltelco.net
> > > ___
> > > PLUG mailing list
> > > PLUG@lists.pdxlinux.org
> > > http://lists.pdxlinux.org/mailman/listinfo/plug
> > >
> > ___
> > PLUG mailing list
> > PLUG@lists.pdxlinux.org
> > http://lists.pdxlinux.org/mailman/listinfo/plug
> >
> ___
> PLUG mailing list
> PLUG@lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
>
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Using less on a growing file

[Smith, Cathy]

You can also do a tail -f

Cathy
---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:    509.375.2330
Email:  cathy.sm...@pnnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Bill Barry
Sent: Thursday, September 25, 2014 2:22 PM
To: t...@wescottdesign.com; Portland Linux/Unix Group
Subject: Re: [PLUG] Using less on a growing file

On Thu, Sep 25, 2014 at 2:16 PM, Tim Wescott t...@wescottdesign.com wrote:
 Is there a way to use less, or a less-like viewer, to view a growing 
 file such that as the file grows, paging down will get me more and 
 more content?

 As far as I can tell, just running 'less myfile.txt', when myfile.txt 
 is being written to by another app, seems to just take a snapshot of 
 myfile.txt -- I want to be able to look at the full extent of the file 
 AS IT GROWS, to monitor ongoing long computations to see how they're 
 doing.

less itself works that way.   shift-g will reveal anything new added
to myfile.txt after you opened it with less.

Bill
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

[PLUG] FW: [Merit Events] Learn SELinux in two evening sessions

[Smith, Cathy]

Folks

Just passing this out as an fyi.  This is an on-line, but not free, course,  
though the Unix of Michigan.  I had Dr.  Antonelli as an instructor before, and 
highly recommend him.  His courses are well prepared.  His examples and demos 
are useful learning tools and applicable to real-world work.

Regards


Cathy
---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:509.375.2330
Email:  cathy.sm...@pnnl.govmailto:cathy.sm...@pnnl.gov

From: event-announcements-boun...@merit.edu 
[mailto:event-announcements-boun...@merit.edu] On Behalf Of Merit Professional 
Learning
Sent: Wednesday, August 06, 2014 7:59 AM
To: event-announceme...@merit.edu
Subject: [Merit Events] Learn SELinux in two evening sessions

[Hands-on SELinux: A Practical 
Introduction]http://www.merit.edu/learning/selinux2014


Learn to Protect your Platform with SELinux
http://www.merit.edu/learning/selinux2014/[Register to 
Attend]http://www.merit.edu/learning/selinux2014/http://www.merit.edu/learning/selinux2014/Hands-on
 SELinux: A Practical Introductionhttp://www.merit.edu/learning/selinux2014/
September 16 and 18, 2014
6:00 p.m. - 9:00 p.m. ET
Live Online
SELinux is a powerful security layer within the Linux kernel that provides 
control over which users and processes can access resources and execute 
programs on a system.

This short course is an intensive, hands-on introduction to Red Hat SELinux, a 
technology that adds mandatory access controls to the Linux kernel and can stop 
buffer overflow and other malicious attacks.

About the Instructor
[Charles Antonelli]
Charles J. Antonelli, University of Michigan
Charles Antonelli developed a comprehensive security training course for campus 
administrators and has taught graduate-level security courses in the College of 
Engineering and in the School of Information. Dr. Antonelli is a High 
Performance Computing Consultant in the Advocacy and Research Support Group of 
LSA Information Technology at the University of Michigan.


Don't miss Networking 2014: A Summit for Netwrok Pros in Ann Arbor on Tuesday, 
September 23, 2014. Find out more at 
www.merit.edu/networking2014http://www.merit.edu/learning/networking2014/

Who Should Attend?

•  System administrators
•  Beginning Linux users
•  Advanced Linux users



[For more information visit, 
www.merit.edu/learning/]http://www.merit.edu/learning/


Merit Network, Inc.
1000 Oakbrook Drive, Suite 200, Ann Arbor, Michigan 48104-6794
To unsubscribe from future emails, reply to this message with Unsubscribe in 
the subject line.




___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] AK-47?

[Smith, Cathy]

Do you have the link?

 There was a recent news article that someone did this; all but the 
barrel, of course.

Cathy
---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:    509.375.2330
Email:  cathy.sm...@pnnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Rich Shepard
Sent: Friday, August 08, 2014 1:31 PM
To: Portland Linux/Unix Group
Subject: Re: [PLUG] AK-47?

On Fri, 8 Aug 2014, benjamin barber wrote:

 Great, I propose that we borrow a few 3d printers, and start giving 
 demonstrations regarding how to 3d-print guns.

   There was a recent news article that someone did this; all but the barrel, 
of course.

Rich


___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] QA with Linus Torvalds RSVP Link!

[Smith, Cathy]

Is streaming going to work for remote viewers?  The should concerns me a bit.

Regards,


Cathy
---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:    509.375.2330
Email:  cathy.sm...@pnnl.gov

-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Michael Dexter
Sent: Tuesday, March 25, 2014 10:34 AM
To: Portland Linux User Group; Portland Linux User Group Announcements
Subject: [PLUG] QA with Linus Torvalds RSVP Link!


Hello all,

In order to not change PLUG's intimate nature and to increase the likelihood 
that Linus will return sooner rather than later, I have set up an RSVP link for 
the coming first Thursday General meeting:

http://plug.eventbrite.com

While it will be tight, I am optimistic that we will be fine with the mix of 
people who RSVP and those who simply show up not knowing about the RSVP. 
Streaming *should* allow people to participate from the lobby and they can 
submit questions in person or by IRC.

Now the hard part: Think about what you might ask him!

See you there,

Michael Dexter
PLUG Volunteer
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] QA with Linus Torvalds RSVP Link!

[Smith, Cathy]

I'm willing to make the drive in, but since I'm not a regular attendee, I'd be 
at the bottom of the list for seating.  So anything you can do would be much 
appreciated.


Cathy
---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:    509.375.2330
Email:  cathy.sm...@pnnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Michael Dexter
Sent: Tuesday, March 25, 2014 11:36 AM
To: Portland Linux/Unix Group
Subject: Re: [PLUG] QA with Linus Torvalds RSVP Link!

On 3/25/14 11:29 AM, Ronald Bynoe wrote:
 Would it help if someone brought a Hotspot?

Thanks but being in the basement, not really. I will arrange with PSU to make 
sure that I can hard-wire my laptop.

PSU rightfully likes to lock things down. By nature we all want to open things 
up. :)

Michael
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Needs some speakers have some of my own topics

[Smith, Cathy]

Hi

I have some suggestions for speakers from ones I attended at LinuxFest if that 
would be of interest.

I just lurk on the list as I'm out of town.

Cathy

---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:    509.375.2330
Email:  cathy.sm...@pnnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Michael Dexter
Sent: Wednesday, May 29, 2013 12:23 PM
To: Portland Linux User Group
Subject: [PLUG] Needs some speakers have some of my own topics


Hello all,

I have various inquires out for June but no confirmations. I invite YOU to give 
it a go, especially if you have never presented before. I also have two topics 
of my own: The bhyve talk I gave in Tokyo and Ottawa (now boots Linux guests 
but that isn't in the wild yet) and some ZFS testing I have been doing in a 
controlled environment. In short, just what impact is there to:

Adding a ZIL
Enabling and disabling various caching
Turning some knobs like prefetch
Comparing NFS to CIFS to AFP to iSCSI
Making dd output more useful
Making sense of iozone, fio, xdd and friends (at best seeing the tip of the 
iceburg on these long, slippery slopes)

And the like.

Thoughts? Requests?

Michael Dexter
PLUG Volunteer
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

[PLUG] need help with Apache HTTP_REFERER

[Smith, Cathy]

Hi

I need to configure my Apache web server to redirect an incoming request if 
it¹s not from a specific web site.  I¹ve been trying unsuccessfully to use the 
HTTP_REFERER to do this.   Most of the discussion I¹ve found about this 
involves the prevention of hotlinking.  My webserver a RHEL5 box running RHEL5 
Apache 2.2.3.

This is what I want to do:
Request from www.foo.comhttp://www.foo.com goes to the web site.
Request from anyone else gets an html page that essentially says you 
have to be registered to access the web site.

Here is the original VirtualHost definition:

VirtualHost *:80
RewriteEngine on
RewriteRule   ^/$  /training/who/cgi-bin/login [R]

ServerName example.org

DocumentRoot /apps/example/training/www/Root/who

ScriptAlias /training/who/cgi-bin/ 
/apps/example/training/www/Root/who/cgi-bin/
ScriptAlias /training/cgi-bin/ 
/apps/example/training/www/Root/who/cgi-bin/
Alias   /training  /apps/example/training/www/Root
Directory /apps/example/training/www/
   AllowOverride All
   Options +FollowSymlinks +Indexes
   Order allow,deny
   Allow from all
/Directory
/VirtualHost


Here is one example of the syntax I¹ve tried. This displays the Apache default 
web page.  The error message in the log file is Directory index forbidden by 
Options directive.
VirtualHost *:80
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://www.foo.com [NC]
RewriteRule ^(.*)$ http://example.org/training/who/redirect.html [L]

RewriteCond %{HTTP_REFERER} http://www.foo.com [NC]
RewriteRule   ^/$  /training/who/cgi-bin/login [R]



This next syntax results in getting to the application login page instead of 
getting the redirect.html page displayed.

VirtualHost *:80
RewriteEngine on
RewriteCond %{HTTP_REFERER} .
RewriteCond %{HTTP_REFERER} !.*www.foo.com [NC]
RewriteRule ^(.*)$ http://example.org/training/who/redirect.html

RewriteCond %{HTTP_REFERER} .
RewriteCond %{HTTP_REFERER} http://www.foo.com [NC]
RewriteRule   ^/$  /training/who/cgi-bin/login [R]


This also skips the redirect, and goes to the login page, without graphics:



VirtualHost *:80

RewriteEngine on



RewriteCond %{HTTP_REFERER} !^$

RewriteCond %{HTTP_REFERER} !^http://www\.foo\.com/.*$ [NC]

RewriteRule \.*$ http://example.org/training/who/redirect.html [R=301,L]



RewriteRule   ^/$  /training/who/cgi-bin/login [R]



Any help is appreciated.

Thank you.


Cathy

---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:509.375.2330
Email:  cathy.sm...@pnnl.gov



___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Fwd: LinuxFest Northwest 2013 is nearing! Register Now!

[Smith, Cathy]

The lunch is prepared by the students at the culinary school at Bellingham 
Technical College.  The food Is great.

I've been going since 2007.  I have found the talks to be good.  This is a 
low-keyed conference that is much better than many that charge a lot of money.


Cathy

---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:    509.375.2330
Email:  cathy.sm...@pnnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Jason Barnett
Sent: Friday, April 05, 2013 11:29 PM
To: Portland Linux/Unix Group
Subject: Re: [PLUG] Fwd: LinuxFest Northwest 2013 is nearing! Register Now!

The event is free. There is an optional $60 registration that gets you a 
t-shirt and free lunch both days.
I have been attending it for the last 10 years and it has always been great. I 
highly recommend it.


On Fri, Apr 5, 2013 at 8:13 PM, Scott Garman sgar...@zenlinux.com wrote:

 On 04/04/2013 07:34 PM, John Sechrest wrote:
  Anyone planning on going to LinuxFest this year?

 I'll be giving this talk:

 http://linuxfestnorthwest.org/content/building-robots-can-see

 Scott

 ___
 PLUG mailing list
 PLUG@lists.pdxlinux.org
 http://lists.pdxlinux.org/mailman/listinfo/plug

___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] User limits in Linux

[Smith, Cathy]

What is a little?  Can you or they be more specific?  We set the user limits 
fairly high in /etc/security/limits.conf for the Oracle Fusion accounts - keep 
increasing it.  Of course, the Fusion application servers have hefty amounts of 
CPU and memory.


Cathy
---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:    509.375.2330
Email:  cathy.sm...@pnnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Daniel Herrington
Sent: Wednesday, February 27, 2013 10:12 PM
To: General Linux/UNIX discussion and help civil and on-topic
Subject: [PLUG] User limits in Linux

All,

This just came across from our Sys Admin team:
*
They may be able to increase it [user processes] a little, but probably not 
enough to resolve the problem, which was the case last time we saw this issue.  
Linux [user processes] cannot be set to unlimited like other unix
flavors.*

I find this hard to believe. However, the more I think about it maybe it's true 
since you need to put a # in /etc/security/limits.conf?

thanks,

--
Daniel B. Herrington
Nike
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] How to copy files from one machine to another without having them owned by nobody

[Smith, Cathy]

Can you send the syntax you are using?

---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:    509.375.2330
Email:  cathy.sm...@pnnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Richard C. Steffens
Sent: Monday, January 28, 2013 9:33 AM
To: PLUG List
Subject: [PLUG] How to copy files from one machine to another without having 
them owned by nobody

When I copy files from one of my Ubuntu boxes to another the ownership on the 
receiving box ends up being nobody. I have the same login name on each machine. 
Is there a way to have the files maintain the ownership settings during the 
copy process?

--
Regards,

Dick Steffens

___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Tame Windows to permit Linux space - HOW?

[Smith, Cathy]

One option is to boot from an Ubuntu or Knoppix CD and have a running 
environment without installing anything.

---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:    509.375.2330
Email:  cathy.sm...@pnnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Joe Niski
Sent: Thursday, January 26, 2012 9:03 AM
To: General Linux/UNIX discussion and help; civil and on-topic
Subject: Re: [PLUG] Tame Windows to permit Linux space - HOW?

On 1/26/12 8:54 AM, Richard Owlett rowl...@pcnetinc.com wrote:


I wish to give Linux a try on my laptop (IBM/Lenovo T43) with 40GB 
drive and 23GB free.
Should be fine for dual boot ;) LOL The problem is MS defagerrer leaves 
a large clump of files in midst of my so-called free space.

Any way to move it where it belongs?

i seem to remember that if you boot from a GParted live CD, it can resize your 
Windows partition without damaging anything.

Joe Shisei Niski
Portland, Oregon, USA
至誠




___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Solaris Uptime

[Smith, Cathy]

I've worked with Sun boxes for years and never heard of a recommended reboot 
cycle.  Do you know what version of Solaris?

---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:    509.375.2330
Email: cathy.sm...@pnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of chris (fool) mccraw
Sent: Tuesday, October 18, 2011 11:32 AM
To: General Linux/UNIX discussion and help, civil and on-topic
Subject: Re: [PLUG] Solaris Uptime

On Tue, Oct 18, 2011 at 11:26, Daniel Herrington herd...@gmail.com wrote:
 All,

 We're working an issue with extreme latency on one of our application
 servers. The lead tech, who hasn't established much credibility, keeps
 saying he wants to bounce the Sun Solaris servers, as they have been up for
 169 days. He feels that may be the cause of the issue. I highly doubt it as
 the System Administrators are saying that resources are available for the
 application. What's the recommended reboot cycle for Sun Solaris servers?

i don't know, but i have regularly used solaris servers under a fair
amount of constant load (not x86-based) that had uptime in the 2+
years range with no problems.  clearly this was a couple releases ago,
since i haven't worked with solaris in the last couple years.

still, nobody ever considered rebooting them to fix a problem.  that
is heresy =)
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] USENIX coming to Portland; anybody interested in Cfengine?

[Smith, Cathy]

Please let me know when this is confirmed so that I can schedule the time off.  

Thanks very much for doing this.


Cathy

---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:    509.375.2330
Email: cathy.sm...@pnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Paul Heinlein
Sent: Monday, May 16, 2011 3:16 PM
To: General Linux/UNIX discussion and help; civil and on-topic
Subject: Re: [PLUG] USENIX coming to Portland; anybody interested in Cfengine?

Those who are interested in Aleksey's very generous offer of a 
two-hour Cfengine introduction on June 18, 2011:

* Is downtown Portland (6th and Washington) an acceptable location?

* Is 9:30 to 11:30 an acceptable timeframe?

If so, I'll try to rearrange things to make that happen. I should know 
within five or six days.

If not, please let me/us know as soon as possible to save me needless 
work.

-- 
Paul Heinlein  heinl...@madboa.com  http://www.madboa.com/
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] USENIX coming to Portland; anybody interested in Cfengine?

[Smith, Cathy]

Would this be appropriate for folks with no experience with Cfengine?


Cathy
---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:    509.375.2330
Email: cathy.sm...@pnl.gov


-Original Message-
From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] 
On Behalf Of Aleksey Tsalolikhin
Sent: Monday, May 16, 2011 10:47 AM
To: General Linux/UNIX discussion and help, civil and on-topic
Subject: Re: [PLUG] USENIX coming to Portland; anybody interested in Cfengine?

On Mon, May 16, 2011 at 10:21 AM, Paul Heinlein heinl...@madboa.com wrote:

 I'll have to see about rearranging a rehearsal that's been on my
 schedule for many months. If that works out (I'd give it a 50/50
 chance at the moment), would a 9:00 start time be OK?

Fine by me.  I'm flexible on Saturday.  I'm pleased there is interest!

Look forward to meeting you,
Aleksey
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

[PLUG] SANS Security Essentials Portland offering

[Smith, Cathy]

Folks

SANS would be interested in offering the SANS Security Essentials course at the 
Community SANS Portland planned for April.  Please contact Andrea Hogan at SANS 
for further information:

Andrea Hogan
Manager, Business Development
Community SANS
403-929-1821
aho...@sans.org
www.SANS.org/community


Information on the Security Essentials course can be found at:

http://www.sans.org/security-training/security-essentials-bootcamp-style-61-mid


Please pass this on to anyone who might be interested.


Regards,


Cathy

---
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the
U.S. Department of Energy

Phone:  509.375.2687
Fax:    509.375.2330
Email: cathy.sm...@pnl.gov


___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug