Re: [Server-devel] Access Point configuration

2009-07-23 Thread Marten Vijn
On Thu, 2009-07-23 at 15:44 +0530, Joshua N Pritikin wrote:
 I had my first experience of bricking a wireless router today. 
 Fortunately, I had a backup router on hand.
 
 The steps listed in AP Configuration seem incomplete.
 
 Today I flashed my secondary WRT54GL with DD-WRT and loaded factory 
 defaults.
 
 Make sure that the access point is NOT running as a DHCP server and 
 it's not running NAT
 
 1. DD-WRT does not have NAT enabled. That's easy.
 
 2. To not run a DHCP Server means that I should turn off DHCP 
 completely? I only see options for DHCP Server and DHCP Forwarding. I 
 assume I want DHCP Forwarding? Should I turn off DNSMasq?
 
 Also, would be wrong to turn off DHCP for the WAN link? (I think that's 
 how I bricked my router.)
 
 The XS wants to issue DHCP assignments through the router, right? Do I 
 need to change the router operating mode from Gateway to Router (DD-WRT 
 Advanced Routing / Operating Mode)?
 
 Currently, my router gets assigned WAN IP 172.18.96.24, which looks 
 correct. However, the schoolserver log shows:
 
 DHCPDISCOVER from 00:1e:c9:04:9a:b0 via 192.168.1.1: unknown network 
 segment
 
 00:1e:c9:04:9a:b0 is my laptop's Ethernet MAC address. I get an 
 analogous result if I try to connect via wireless. I presume the 
 schoolserver is expecting DHCPDISCOVER via the router's WAN IP? How can 
 I accomplish this? The Linksys routing table is:
 
 192.168.1.0   255.255.255.0   0.0.0.0 LAN  WLAN
 172.18.96.0   255.255.224.0   0.0.0.0 WAN
 169.254.0.0   255.255.0.0 0.0.0.0 LAN  WLAN
 0.0.0.0   0.0.0.0 172.18.96.1 WAN
 
 Do I want to statically assign the router to 172.18.96.24? (Probably 
 not.)
 
 Suggestions welcome. Thanks for your help.

You can de-brick with soldering a tll to serial converter on the board
on of the linksys. Then you can have a serial line to bios/dd-wrt.
In the bios you can enable tftp to reflash the linksys over network.
The are clear recovery howto's on wrt's website.

I think you the ap to do bridge-mode. If so the only reason for an ip
config on the box would be administration and monitoring. Then I would
add an ip address to the ap. 

Since the schoolserver does dhcpd+nat you don't want to do it in the ap.
 
tcpdump may give you usefull information about what is happening on your
network. 

2ct 
Marten
 

 
-- 
http://martenvijn.nl Marten Vijn 
http://martenvijn.nl/trac/wiki/soas  Sugar on a Stick
http://bsd.wifisoft.org/nek/ The Network Event Kit
http://har2009.org   13th-16th August 
http://opencommunitycamp.org 26th Jul - 2nd August

___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] Access Point configuration

2009-07-23 Thread Marten Vijn
On Thu, 2009-07-23 at 18:59 +0530, Joshua N Pritikin wrote:
 On Thu, Jul 23, 2009 at 12:38:27PM +0200, Marten Vijn wrote:
  You can de-brick with soldering a tll to serial converter on the board
  on of the linksys. Then you can have a serial line to bios/dd-wrt.
  In the bios you can enable tftp to reflash the linksys over network.
  The are clear recovery howto's on wrt's website.
 
 Yah, I'll figure it out. Thanks.

actually before you start soldering, you could check
if tftp is enabled 3 seconds while booting
This may give you enough time to open a tftp session
to the box and reflash the the linksys without soldering.

If you have many linksys you want a ttl2serial anyway.


kind regard,
Marten

  

-- 
http://martenvijn.nl Marten Vijn 
http://martenvijn.nl/trac/wiki/soas  Sugar on a Stick
http://bsd.wifisoft.org/nek/ The Network Event Kit
http://har2009.org   13th-16th August 
http://opencommunitycamp.org 26th Jul - 2nd August

___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] Wireless Cards in the School Server

2009-03-09 Thread Marten Vijn
On Mon, 2009-03-09 at 17:51 +, Dev Mohanty wrote:
 
  
 You could also use the APs in repeater mode with the same SSID, if you're 
 planning to use more then one AP.
 
no that is no very handy if want some performance, a repeater eats
bandwidth from the AP.  

Best for performance 
- big antenna's antenna's  (reduces noise from clients)
- channel planning
- ap's in bridging mode (no routing or NAT)

In a classic E.U (U.S.?)
- a server is in a server room
- ap is in the class room
- maybe use PoE (803.af) over your wired network

best,
Marten





 Cheers,
 Dev
 
 On 3/9/09, John Watlington w...@laptop.org wrote:
 
 Unless your school is very small, using dedicated wireless
 interface
 in the server is probably not
 a good idea.
 
 We suggest dedicated access points as schools with more than
 40 - 50
 students will need more
 than one access point, and they are best spread out (i.e. not
 all the
 antennas are within three feet
 of the school server.)
 
 There is currently no effort in the XS configuration scripts
 to
 recognize and properly configure such
 an interface.  That doesn't mean it won't just work, and I'm
 sure
 it could be made to work with minimal
 effort.
 
 As Sameer said, let us know what you decide, and what works
 for you!
 

 
-- 
http://martenvijn.nl  Marten Vijn 
http://www.deupsidevandown.nl ***
http://har2009.org August 13-16th 
http://opencommunitycamp.org 26th Jul 2nd August


___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] VPN server for our project

2008-07-02 Thread Marten Vijn

On Wed, 2008-07-02 at 15:40 +0200, [EMAIL PROTECTED] wrote:

   My question: has anyone experimented the fonction of a VPN network
  involving
   remote XS servers ?
 
I use openvpn, works well over nat! (pptp does not)
- need admin skills to configure
- give acces to no (very) public wiki/moodle
- allows reverse ssh access to update/moi machines
- ssl key controlled
- allows to to follow where XO's are (more or less a anti-theft
mechanism)

yum install openvpn .


pptp:
- only 1 per outgoing NAT 
- gre must enable din Natting router

ipsec:
- harder to config 
- roaming user setup diffult to setup

cheers

Marten



 
 ___
 Server-devel mailing list
 Server-devel@lists.laptop.org
 http://lists.laptop.org/listinfo/server-devel
-- 
Marten Vijn
linux 2.0.18 OpenBSD 3.6 FreeBSD 4.6
http://martenvijn.nl
http://opencommunitycamp.org
http://wifisoft.org


___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] VPN server for our project

2008-07-02 Thread Marten Vijn

On Wed, 2008-07-02 at 16:16 +0200, Marten Vijn wrote:
 On Wed, 2008-07-02 at 15:40 +0200, [EMAIL PROTECTED] wrote:
 
My question: has anyone experimented the fonction of a VPN network
   involving
remote XS servers ?
  
 I use openvpn, works well over nat! (pptp does not)

and ssh can do also wonderfull tricks!!

check 'man ssh' for -R and -L 

Marten


-- 
Marten Vijn
linux 2.0.18 OpenBSD 3.6 FreeBSD 4.6
http://martenvijn.nl
http://opencommunitycamp.org
http://wifisoft.org


___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] EDuBlog XS Beta/Development Server

2008-06-14 Thread Marten Vijn
On Fri, 2008-06-13 at 22:40 -0700, Tony Pearson wrote:
 
 Tarun, 
 I have no idea what git is.  Is it something I can install using
 yum?  If not, please provide me location for Red Hat rpm file for
 it, or other instructions. 

http://www.google.nl/search?hl=nlq=gitbtnG=Zoekenmeta=

cheers,
Marten




Marten Vijn
Buy my house: http://martenvijn.nl/trac/wiki/huis
http://martenvijn.nl
http://wifisoft.org
http://opencommunitycamp.org

___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] Help on the School_server

2008-06-05 Thread Marten Vijn

On Thu, 2008-06-05 at 01:50 -0700, eskender andualem wrote:
 Hello All,
 
 We are  trying to configure the school server in Ethiopia but we found
 some documents which says we can only support 120 computers with one
 school server and three active antennas.Is it the only capacity which
 we can support with one school server.We have like 2500 students in
 one school  so what can we do?
 
 
mmm, this bigger than coping a couple of schoolserver


I would split (more or less in this order):
- network (using accesspoints/switches/routers)
- centralized maintaince for XO's (root shell over ssh)
- authentication/authorisation (concidering 802.1x or openvpn) 
- acces servers (mail/http)
- storage disk / database servers
- backup (servers/service)
- monitoring (network/access/udate

All (most) can be done with opensource. I would recommend debian/freebsd
as base os. (maybe opensolaris for NFS-storage)


just 2 cts

Marten


 ___
 Server-devel mailing list
 Server-devel@lists.laptop.org
 http://lists.laptop.org/listinfo/server-devel
-- 

Marten Vijn
Koop mijn huis: http://martenvijn.nl/trac/wiki/huis
http://martenvijn.nl
http://wifisoft.org
http://opencommunitycamp.org

___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] BOF on apachecon Amsterdam

2008-04-08 Thread Marten Vijn
Hi

I am preparing the bof, thanks for your input! 

see http://wiki.apache.org/apachecon/

when it's online again,

I ll be on #schoolserver and might some help for anwering some question.

time are not sure since i can't access their wiki. 

expected time: next wednessday 20:30 CET

kind regards,
Marten


On Tue, 2008-04-01 at 12:34 -0400, Martin Langhoff wrote:
 On Tue, Apr 1, 2008 at 12:03 PM, Aaron Huslage [EMAIL PROTECTED] wrote:
- We are running memory-hog-webapps based on mod_php and mod_python
   in prefork mode... but we have very strict memory constraints. Any
   hints on how to compile apache (on Fedora and Debian) so that the
   memory is released to the OS pool rather than to the child process'
   private 'free' pool?
 
  I don't think this is currently possible.
 
 With alternative mem handling libs it has *always* been possible, but
 often unstable/unreliable on linux. Current apache programmers can -
 hopefully - shed some light into the current situation as now we have
 more alternatives. It may be that php and python are even ready for
 threaded worker model. Or that dietlibc has a different malloc. Or
 that someone has a special custom malloc we can use.
 
 Or perhaps FastCGI is the way -- hopefully not ;-)
 
 Note - I hate to speculate ahead. Hopefully the apache crowd will tell
 us what the state of things is.
 
  Another web server can probably do
  this (Lighttpd?), but that comes with its own issues.
 
 Exactly. And we lose what apache brings to the party.
  One way to be to run the CoDeeN code. I'm sure they would be willing to work
  with us, since I know they want to open source the code.
 
 ISTR jg telling me they are using a licensed proprietary proxy but I
 could be wrong. Are you in contact with them? I would love to see them
 around here :-)
 
  Otherwise, running
  mod_proxy on the XS with no caching
 
 The majority of XSs will have a horrible connection - we _need_ very
 smart caching working together with the upstream proxy as smartly as
 humanely possible.
 
  What needs to be configurable from mod_perl? What custom behaviours are we
  talking about, or is this just a general ask for future needs?
 
 We want
 
  - The caching and handling of 1.1 cache-headers to be solid.
 
  - The upstream proxy to be able to pass hints to the xs proxy of
 files to prefetch. These hints would initially be of popular resouces
 across schools and content we intend to push out, for example, for
 sw or content updates.
 
  - For some content, we may even add a SHA1 as a local etag to stuff
 that looks unchanging but doesn't carry etags, the upstream proxy can
 then buffer the response and save retransmission if the SHA1s match.
 This would allow us to workaround web apps that aren't cache-smart. As
 long as we can do this quickly - before http times out - we can save a
 ton of traffic. HTTP timeouts and other issues limit how much we can
 do here, but even within those constraints, I think we can do a lot.
 
 mod_proxy circa 1.3.x was completely closed to mod_perl and didn't
 even play well with other modules. It was excellent as a standalone
 module but it did not respect the request phases, so you could not
 combine it with authen/authz handlers from other modules.
 
 cheers,
 
 
 
 m
-- 

Marten Vijn
http://martenvijn.nl
http://wifisoft.org
http://opencommunitycamp.org

___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] New architect and roadmap - and phone conference

2008-03-22 Thread Marten Vijn

On Fri, 2008-03-21 at 19:23 -0400, Martin Langhoff wrote:
 Hi all!
 
snip
 
  Or Skype itself to place a call to the US. ]
 
that worked techically fine last repaircenter meeting 

For me no us_navite speaker:
- following the meeting is oke, 
- participating is harder than irc
- irc backchannel is really helpfull.


 Overall, I think we are going to get this done one release at a time,
 keeping our eyes firmly on the ball, until we get to 1.0-ness.
 
   Who wants to be part of it?  ;-)
 
Me, however I am not a skilled programmer (sh,perl are fine) I could
test, find bugs, give 2cts where needed. I have experience in
administration (FreeBSD/linux,networking) or and building embedded
systems (FreeBSD). I Would love to run the XS on a 64Mb cf-image. But is
out a of the picture i guess.

Marten
  



 
 martin
-- 

Marten Vijn
http://martenvijn.nl
http://wifisoft.org
http://opencommunitycamp.org

___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] via epia not supported in iso?

2008-03-21 Thread Marten Vijn


http://xs-dev.laptop.org/xs/OLPC_XS_161.iso


is not there jet..

Marten


On Fri, 2008-03-21 at 03:30 -0400, John Watlington wrote:
 OK, so it is something to do with the kernel we are using,
 which is from upgrades, not the released one.
 
 I just noticed that we have both i586 and i686 kernels
 in the repo --- known to cause problems.   I'll clean it out
 and spin a test build.
 
 Try using build 161:
 http://wiki.laptop.org/go/XS_Installing_Software#OLPC_XS_161
 http://xs-dev.laptop.org/xs/OLPC_XS_161.iso
 
 wad
 
 On Mar 20, 2008, at 4:23 PM, Marten Vijn wrote:
 
 
  On Wed, 2008-03-19 at 23:59 -0400, John Watlington wrote:
  Can you install Fedora 7 on that machine ?
  We can't support every old machine (although we don't
  mind if others help us do so...)   Our current litmus test is
  support by Fedora 7.
 
  it boots, and installs (nearly finished)
 
  Marten
 
 
 
-- 

Marten Vijn
http://martenvijn.nl
http://wifisoft.org
http://opencommunitycamp.org

___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] automation in build system

2008-03-21 Thread Marten Vijn

On Fri, 2008-03-21 at 21:52 +0545, Bryan Berry wrote:
 It is now.  Sorry, we need more automation in our build system...
 
 wad
 
 If you get the chance later, it would be great to send out a
 Build-Announcer email for each new build like there is for the XO
 images.

and somethink like a thinderbox to test builds, nightly and mails on
errors.

mvn


 
-- 

Marten Vijn
http://martenvijn.nl
http://wifisoft.org
http://opencommunitycamp.org

___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] via epia not supported in iso?

2008-03-21 Thread Marten Vijn

On Fri, 2008-03-21 at 10:23 -0400, John Watlington wrote:
 It is now.  Sorry, we need more automation in our build system...
 
ack testing..

C3:
uncompressing linux OK, booting kernel

- and halts there

i686:
is booting...

kind regards,

Marten



 wad
 
 On Mar 21, 2008, at 4:28 AM, Marten Vijn wrote:
 
  http://xs-dev.laptop.org/xs/OLPC_XS_161.iso
  is not there jet..
 
  Marten
 
  On Fri, 2008-03-21 at 03:30 -0400, John Watlington wrote:
  OK, so it is something to do with the kernel we are using,
  which is from upgrades, not the released one.
 
  I just noticed that we have both i586 and i686 kernels
  in the repo --- known to cause problems.   I'll clean it out
  and spin a test build.
 
  Try using build 161:
  http://wiki.laptop.org/go/XS_Installing_Software#OLPC_XS_161
  http://xs-dev.laptop.org/xs/OLPC_XS_161.iso
 
  wad
 
  On Mar 20, 2008, at 4:23 PM, Marten Vijn wrote:
 
 
  On Wed, 2008-03-19 at 23:59 -0400, John Watlington wrote:
  Can you install Fedora 7 on that machine ?
  We can't support every old machine (although we don't
  mind if others help us do so...)   Our current litmus test is
  support by Fedora 7.
 
  it boots, and installs (nearly finished)
 
  Marten
 
 
 
  -- 
 
  Marten Vijn
  http://martenvijn.nl
  http://wifisoft.org
  http://opencommunitycamp.org
 
 
-- 

Marten Vijn
http://martenvijn.nl
http://wifisoft.org
http://opencommunitycamp.org

___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel