Re: [Server-devel] Access Point configuration
On Thu, 2009-07-23 at 15:44 +0530, Joshua N Pritikin wrote: I had my first experience of bricking a wireless router today. Fortunately, I had a backup router on hand. The steps listed in AP Configuration seem incomplete. Today I flashed my secondary WRT54GL with DD-WRT and loaded factory defaults. Make sure that the access point is NOT running as a DHCP server and it's not running NAT 1. DD-WRT does not have NAT enabled. That's easy. 2. To not run a DHCP Server means that I should turn off DHCP completely? I only see options for DHCP Server and DHCP Forwarding. I assume I want DHCP Forwarding? Should I turn off DNSMasq? Also, would be wrong to turn off DHCP for the WAN link? (I think that's how I bricked my router.) The XS wants to issue DHCP assignments through the router, right? Do I need to change the router operating mode from Gateway to Router (DD-WRT Advanced Routing / Operating Mode)? Currently, my router gets assigned WAN IP 172.18.96.24, which looks correct. However, the schoolserver log shows: DHCPDISCOVER from 00:1e:c9:04:9a:b0 via 192.168.1.1: unknown network segment 00:1e:c9:04:9a:b0 is my laptop's Ethernet MAC address. I get an analogous result if I try to connect via wireless. I presume the schoolserver is expecting DHCPDISCOVER via the router's WAN IP? How can I accomplish this? The Linksys routing table is: 192.168.1.0 255.255.255.0 0.0.0.0 LAN WLAN 172.18.96.0 255.255.224.0 0.0.0.0 WAN 169.254.0.0 255.255.0.0 0.0.0.0 LAN WLAN 0.0.0.0 0.0.0.0 172.18.96.1 WAN Do I want to statically assign the router to 172.18.96.24? (Probably not.) Suggestions welcome. Thanks for your help. You can de-brick with soldering a tll to serial converter on the board on of the linksys. Then you can have a serial line to bios/dd-wrt. In the bios you can enable tftp to reflash the linksys over network. The are clear recovery howto's on wrt's website. I think you the ap to do bridge-mode. If so the only reason for an ip config on the box would be administration and monitoring. Then I would add an ip address to the ap. Since the schoolserver does dhcpd+nat you don't want to do it in the ap. tcpdump may give you usefull information about what is happening on your network. 2ct Marten -- http://martenvijn.nl Marten Vijn http://martenvijn.nl/trac/wiki/soas Sugar on a Stick http://bsd.wifisoft.org/nek/ The Network Event Kit http://har2009.org 13th-16th August http://opencommunitycamp.org 26th Jul - 2nd August ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel
Re: [Server-devel] Access Point configuration
On Thu, 2009-07-23 at 18:59 +0530, Joshua N Pritikin wrote: On Thu, Jul 23, 2009 at 12:38:27PM +0200, Marten Vijn wrote: You can de-brick with soldering a tll to serial converter on the board on of the linksys. Then you can have a serial line to bios/dd-wrt. In the bios you can enable tftp to reflash the linksys over network. The are clear recovery howto's on wrt's website. Yah, I'll figure it out. Thanks. actually before you start soldering, you could check if tftp is enabled 3 seconds while booting This may give you enough time to open a tftp session to the box and reflash the the linksys without soldering. If you have many linksys you want a ttl2serial anyway. kind regard, Marten -- http://martenvijn.nl Marten Vijn http://martenvijn.nl/trac/wiki/soas Sugar on a Stick http://bsd.wifisoft.org/nek/ The Network Event Kit http://har2009.org 13th-16th August http://opencommunitycamp.org 26th Jul - 2nd August ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel
Re: [Server-devel] Wireless Cards in the School Server
On Mon, 2009-03-09 at 17:51 +, Dev Mohanty wrote: You could also use the APs in repeater mode with the same SSID, if you're planning to use more then one AP. no that is no very handy if want some performance, a repeater eats bandwidth from the AP. Best for performance - big antenna's antenna's (reduces noise from clients) - channel planning - ap's in bridging mode (no routing or NAT) In a classic E.U (U.S.?) - a server is in a server room - ap is in the class room - maybe use PoE (803.af) over your wired network best, Marten Cheers, Dev On 3/9/09, John Watlington w...@laptop.org wrote: Unless your school is very small, using dedicated wireless interface in the server is probably not a good idea. We suggest dedicated access points as schools with more than 40 - 50 students will need more than one access point, and they are best spread out (i.e. not all the antennas are within three feet of the school server.) There is currently no effort in the XS configuration scripts to recognize and properly configure such an interface. That doesn't mean it won't just work, and I'm sure it could be made to work with minimal effort. As Sameer said, let us know what you decide, and what works for you! -- http://martenvijn.nl Marten Vijn http://www.deupsidevandown.nl *** http://har2009.org August 13-16th http://opencommunitycamp.org 26th Jul 2nd August ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel
Re: [Server-devel] VPN server for our project
On Wed, 2008-07-02 at 15:40 +0200, [EMAIL PROTECTED] wrote: My question: has anyone experimented the fonction of a VPN network involving remote XS servers ? I use openvpn, works well over nat! (pptp does not) - need admin skills to configure - give acces to no (very) public wiki/moodle - allows reverse ssh access to update/moi machines - ssl key controlled - allows to to follow where XO's are (more or less a anti-theft mechanism) yum install openvpn . pptp: - only 1 per outgoing NAT - gre must enable din Natting router ipsec: - harder to config - roaming user setup diffult to setup cheers Marten ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel -- Marten Vijn linux 2.0.18 OpenBSD 3.6 FreeBSD 4.6 http://martenvijn.nl http://opencommunitycamp.org http://wifisoft.org ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel
Re: [Server-devel] VPN server for our project
On Wed, 2008-07-02 at 16:16 +0200, Marten Vijn wrote: On Wed, 2008-07-02 at 15:40 +0200, [EMAIL PROTECTED] wrote: My question: has anyone experimented the fonction of a VPN network involving remote XS servers ? I use openvpn, works well over nat! (pptp does not) and ssh can do also wonderfull tricks!! check 'man ssh' for -R and -L Marten -- Marten Vijn linux 2.0.18 OpenBSD 3.6 FreeBSD 4.6 http://martenvijn.nl http://opencommunitycamp.org http://wifisoft.org ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel
Re: [Server-devel] EDuBlog XS Beta/Development Server
On Fri, 2008-06-13 at 22:40 -0700, Tony Pearson wrote: Tarun, I have no idea what git is. Is it something I can install using yum? If not, please provide me location for Red Hat rpm file for it, or other instructions. http://www.google.nl/search?hl=nlq=gitbtnG=Zoekenmeta= cheers, Marten Marten Vijn Buy my house: http://martenvijn.nl/trac/wiki/huis http://martenvijn.nl http://wifisoft.org http://opencommunitycamp.org ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel
Re: [Server-devel] Help on the School_server
On Thu, 2008-06-05 at 01:50 -0700, eskender andualem wrote: Hello All, We are trying to configure the school server in Ethiopia but we found some documents which says we can only support 120 computers with one school server and three active antennas.Is it the only capacity which we can support with one school server.We have like 2500 students in one school so what can we do? mmm, this bigger than coping a couple of schoolserver I would split (more or less in this order): - network (using accesspoints/switches/routers) - centralized maintaince for XO's (root shell over ssh) - authentication/authorisation (concidering 802.1x or openvpn) - acces servers (mail/http) - storage disk / database servers - backup (servers/service) - monitoring (network/access/udate All (most) can be done with opensource. I would recommend debian/freebsd as base os. (maybe opensolaris for NFS-storage) just 2 cts Marten ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel -- Marten Vijn Koop mijn huis: http://martenvijn.nl/trac/wiki/huis http://martenvijn.nl http://wifisoft.org http://opencommunitycamp.org ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel
Re: [Server-devel] BOF on apachecon Amsterdam
Hi I am preparing the bof, thanks for your input! see http://wiki.apache.org/apachecon/ when it's online again, I ll be on #schoolserver and might some help for anwering some question. time are not sure since i can't access their wiki. expected time: next wednessday 20:30 CET kind regards, Marten On Tue, 2008-04-01 at 12:34 -0400, Martin Langhoff wrote: On Tue, Apr 1, 2008 at 12:03 PM, Aaron Huslage [EMAIL PROTECTED] wrote: - We are running memory-hog-webapps based on mod_php and mod_python in prefork mode... but we have very strict memory constraints. Any hints on how to compile apache (on Fedora and Debian) so that the memory is released to the OS pool rather than to the child process' private 'free' pool? I don't think this is currently possible. With alternative mem handling libs it has *always* been possible, but often unstable/unreliable on linux. Current apache programmers can - hopefully - shed some light into the current situation as now we have more alternatives. It may be that php and python are even ready for threaded worker model. Or that dietlibc has a different malloc. Or that someone has a special custom malloc we can use. Or perhaps FastCGI is the way -- hopefully not ;-) Note - I hate to speculate ahead. Hopefully the apache crowd will tell us what the state of things is. Another web server can probably do this (Lighttpd?), but that comes with its own issues. Exactly. And we lose what apache brings to the party. One way to be to run the CoDeeN code. I'm sure they would be willing to work with us, since I know they want to open source the code. ISTR jg telling me they are using a licensed proprietary proxy but I could be wrong. Are you in contact with them? I would love to see them around here :-) Otherwise, running mod_proxy on the XS with no caching The majority of XSs will have a horrible connection - we _need_ very smart caching working together with the upstream proxy as smartly as humanely possible. What needs to be configurable from mod_perl? What custom behaviours are we talking about, or is this just a general ask for future needs? We want - The caching and handling of 1.1 cache-headers to be solid. - The upstream proxy to be able to pass hints to the xs proxy of files to prefetch. These hints would initially be of popular resouces across schools and content we intend to push out, for example, for sw or content updates. - For some content, we may even add a SHA1 as a local etag to stuff that looks unchanging but doesn't carry etags, the upstream proxy can then buffer the response and save retransmission if the SHA1s match. This would allow us to workaround web apps that aren't cache-smart. As long as we can do this quickly - before http times out - we can save a ton of traffic. HTTP timeouts and other issues limit how much we can do here, but even within those constraints, I think we can do a lot. mod_proxy circa 1.3.x was completely closed to mod_perl and didn't even play well with other modules. It was excellent as a standalone module but it did not respect the request phases, so you could not combine it with authen/authz handlers from other modules. cheers, m -- Marten Vijn http://martenvijn.nl http://wifisoft.org http://opencommunitycamp.org ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel
Re: [Server-devel] New architect and roadmap - and phone conference
On Fri, 2008-03-21 at 19:23 -0400, Martin Langhoff wrote: Hi all! snip Or Skype itself to place a call to the US. ] that worked techically fine last repaircenter meeting For me no us_navite speaker: - following the meeting is oke, - participating is harder than irc - irc backchannel is really helpfull. Overall, I think we are going to get this done one release at a time, keeping our eyes firmly on the ball, until we get to 1.0-ness. Who wants to be part of it? ;-) Me, however I am not a skilled programmer (sh,perl are fine) I could test, find bugs, give 2cts where needed. I have experience in administration (FreeBSD/linux,networking) or and building embedded systems (FreeBSD). I Would love to run the XS on a 64Mb cf-image. But is out a of the picture i guess. Marten martin -- Marten Vijn http://martenvijn.nl http://wifisoft.org http://opencommunitycamp.org ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel
Re: [Server-devel] via epia not supported in iso?
http://xs-dev.laptop.org/xs/OLPC_XS_161.iso is not there jet.. Marten On Fri, 2008-03-21 at 03:30 -0400, John Watlington wrote: OK, so it is something to do with the kernel we are using, which is from upgrades, not the released one. I just noticed that we have both i586 and i686 kernels in the repo --- known to cause problems. I'll clean it out and spin a test build. Try using build 161: http://wiki.laptop.org/go/XS_Installing_Software#OLPC_XS_161 http://xs-dev.laptop.org/xs/OLPC_XS_161.iso wad On Mar 20, 2008, at 4:23 PM, Marten Vijn wrote: On Wed, 2008-03-19 at 23:59 -0400, John Watlington wrote: Can you install Fedora 7 on that machine ? We can't support every old machine (although we don't mind if others help us do so...) Our current litmus test is support by Fedora 7. it boots, and installs (nearly finished) Marten -- Marten Vijn http://martenvijn.nl http://wifisoft.org http://opencommunitycamp.org ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel
Re: [Server-devel] automation in build system
On Fri, 2008-03-21 at 21:52 +0545, Bryan Berry wrote: It is now. Sorry, we need more automation in our build system... wad If you get the chance later, it would be great to send out a Build-Announcer email for each new build like there is for the XO images. and somethink like a thinderbox to test builds, nightly and mails on errors. mvn -- Marten Vijn http://martenvijn.nl http://wifisoft.org http://opencommunitycamp.org ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel
Re: [Server-devel] via epia not supported in iso?
On Fri, 2008-03-21 at 10:23 -0400, John Watlington wrote: It is now. Sorry, we need more automation in our build system... ack testing.. C3: uncompressing linux OK, booting kernel - and halts there i686: is booting... kind regards, Marten wad On Mar 21, 2008, at 4:28 AM, Marten Vijn wrote: http://xs-dev.laptop.org/xs/OLPC_XS_161.iso is not there jet.. Marten On Fri, 2008-03-21 at 03:30 -0400, John Watlington wrote: OK, so it is something to do with the kernel we are using, which is from upgrades, not the released one. I just noticed that we have both i586 and i686 kernels in the repo --- known to cause problems. I'll clean it out and spin a test build. Try using build 161: http://wiki.laptop.org/go/XS_Installing_Software#OLPC_XS_161 http://xs-dev.laptop.org/xs/OLPC_XS_161.iso wad On Mar 20, 2008, at 4:23 PM, Marten Vijn wrote: On Wed, 2008-03-19 at 23:59 -0400, John Watlington wrote: Can you install Fedora 7 on that machine ? We can't support every old machine (although we don't mind if others help us do so...) Our current litmus test is support by Fedora 7. it boots, and installs (nearly finished) Marten -- Marten Vijn http://martenvijn.nl http://wifisoft.org http://opencommunitycamp.org -- Marten Vijn http://martenvijn.nl http://wifisoft.org http://opencommunitycamp.org ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel