Re: pulseaudio MUST DIE!

[Doug]

On 11/23/2017 07:04 PM, Fernando Cassia wrote:

On 11/23/17, Samuel Sieb  wrote:

On 11/23/2017 01:59 PM, Fernando Cassia wrote:

I ended up removing pulseaudio but couldn't get alsa to work either,
so I now have a sound-less system just like in my AMD 386 running OS/2
back in 1993 before the SoundBlaster 16 arrived.

If ALSA isn't working, then PulseAudio won't either since it requires a
functioning audio device.

Sound originally worked on the system's default analog audio output.
It was trying to get the audio-over-HDMI part working which messed up
the config.

And as far as I know, there isn't a "rebuild this system's audio
config" bash script.

Something like HP's HPLIP that scans the hardware at the lowest level
and begins configuring everything.

Not to mention the apparent lack of a set-default-audio-device.sh
script that allows you to effortlessly change the audio device when
there's more than one (eg the built-in-one + an external USB audio
device).

If there's something like that, I'd like to know about it. Perhaps
this could be a job for the LSB project?

Just thinking aloud...
FC
___


Perhaps I should elaborate: On my system, I have a MB with a sound
output. I also have an NVidia video card that also contains a sound
decoder with an HDMI output jack. With this combination, AND
PulseAudio, I can get simultaneous sound (near the computer with
the MOBO sound output) and video on both the local monitor and the
TV from the NVidio card, AND sound on the TV from the NVidia card
also, via the hdmi connection. It may take some serious fiddling
around with the possibilities in PA, but it CAN be done.
I cuss out PA, but I don't think any other app can do this.
--doug
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: What is the technical name for "mtp://" urls in Mate Desktop folder explorer (Caja, ex-Nautilus)

[Dave Stevens]

On Thu, 23 Nov 2017 23:19:47 -0300
Fernando Cassia  wrote:

> I'm curious as to what is the technical name given to these
> pseudo-URLs used by Caja (formerly Nautilus) on Mate Desktop...
> 
> When I plug USB flash drives / Thumb Drives / Pen Drives (use your
> naming choice) I get those automagically mounted (automount).
> 
> But when I plug my Samsung Android smartphone I get this folder
> displayed... mtp://[usb:001,009]/
> 
> Containing two pseudo-devices "Phone" and "SD Card".
> 
> All looks very nice, except that the devices are NOT mounted as
> regular filesystem folders. I can only see them on the GUI through
> Caja.
> 
> I want to assign the devices some name like /media/myuser/something.
> 
> How do I achieve this and what is the logic of mounting these devices
> "GUI only" and unaccessible (afaik) from the command line?
> 
> I tried "mounting" these pseudo-devices like
> mtp://[usb:001,009]/Phone
> but BASH knows nothing about "mtp://" devices. This seems to be some
> shitty Mate Desktop invention.
> 
> On my previous usage of Gnome 2 many moons ago (Sun JDS) this wasn't
> the case, I remember USB mass storage devices magically appeared on
> the desktop, and that's what I expect here too... but somewhere along
> the long fork road, Mate Desktop developers came up with this mtp://
> monstrosity.

what about this:
https://www.howtogeek.com/192732/android-usb-connections-explained-mtp-ptp-and-usb-mass-storage/

dave

> 
> Any clues? I tried complaining but I don't even know the name of these
> damn mtp:// pseudo devices annoyance.
> 
> When was this introduced and who thought it was a great idea? I'd like
> to know some real (person) names if possible to complain in person
> about the hideous nature of this idea...
> 
> TIA...
> FC
> 



-- 
In modern fantasy (literary or governmental), killing people is the
usual solution to the so-called war between good and evil. My books are
not conceived in terms of such a war, and offer no simple answers to
simplistic questions.

- Ursula Le Guin
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

What is the technical name for "mtp://" urls in Mate Desktop folder explorer (Caja, ex-Nautilus)

[Fernando Cassia]

I'm curious as to what is the technical name given to these
pseudo-URLs used by Caja (formerly Nautilus) on Mate Desktop...

When I plug USB flash drives / Thumb Drives / Pen Drives (use your
naming choice) I get those automagically mounted (automount).

But when I plug my Samsung Android smartphone I get this folder displayed...
mtp://[usb:001,009]/

Containing two pseudo-devices "Phone" and "SD Card".

All looks very nice, except that the devices are NOT mounted as
regular filesystem folders. I can only see them on the GUI through
Caja.

I want to assign the devices some name like /media/myuser/something.

How do I achieve this and what is the logic of mounting these devices
"GUI only" and unaccessible (afaik) from the command line?

I tried "mounting" these pseudo-devices like
mtp://[usb:001,009]/Phone
but BASH knows nothing about "mtp://" devices. This seems to be some
shitty Mate Desktop invention.

On my previous usage of Gnome 2 many moons ago (Sun JDS) this wasn't
the case, I remember USB mass storage devices magically appeared on
the desktop, and that's what I expect here too... but somewhere along
the long fork road, Mate Desktop developers came up with this mtp://
monstrosity.

Any clues? I tried complaining but I don't even know the name of these
damn mtp:// pseudo devices annoyance.

When was this introduced and who thought it was a great idea? I'd like
to know some real (person) names if possible to complain in person
about the hideous nature of this idea...

TIA...
FC

-- 
During times of Universal Deceit, telling the truth becomes a revolutionary
act
- George Orwell
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: CqrLog mariadb/mysql

[Richard Shaw]

On Thu, Nov 23, 2017 at 6:43 PM, Colin J Thomson 
wrote:

> Looks like the pending update of mariadb in bodhi fixes this issue (and
> many
> others)
>
> Cqrlog starts fine for me now.
>
> https://bodhi.fedoraproject.org/updates/FEDORA-2017-7b83201239


Well that's good, but I still can't build the new version until fpc is
fixed...

Thanks,
Richard
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: pulseaudio MUST DIE!

[stan]

On Thu, 23 Nov 2017 18:59:15 -0300
Fernando Cassia  wrote:

> Where do I sign?. Unfortunately I have a LinuxMINT system w AMD APU
> and where audio over HDMI never actually worked.
> 
> I purchased three cheap USB Sound adapters in the hope of getting
> audio out that way, but I don't get sound from those either.

Alsa always makes device 0 the default device in the absence of
instructions otherwise.  If there is hdmi audio on the video card, it
usually takes that position, because video loads before sound, and the
digital seems to load before analog.

So, you could have used pavucontrol to set a different default.  But
you can also do that in an .asoundrc file in your home directory.  I've
lost the skill of creating those through lack of use, but you should be
able to find examples on the web.  If you use the plugin dmix, you will
even have primitive mixing with alsa.

No need to be without sound anymore.

You can test if any of your devices work, by making sure they are
connected to speakers of some sort, and running the command

aplay -D plughw:2,0 [a wav file]

You can find the number to put where the 2 is by running the command 

aplay -lv

to see what order alsa put your devices in; it's the card number at the
start of the line.

Check that everything is turned on in alsa with 

alsamixer -c [card number]
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: CqrLog mariadb/mysql

[Colin J Thomson]

On Friday, 17 November 2017 14:03:42 GMT jarmo wrote:
> Fri, 17 Nov 2017 07:15:00 -0600
> Richard Shaw  kirjoitti:
>
> > You can try mariadb-connector-c [1]
> 
> Yes, I tried that, but no luck
> I solved problem by making symlink from /usr/lib64/mysql/libmariadb.so.3
> to /usr/lib64/libmysqlclient.so.18.
> That way I got cqrlog running.
> 
> Even there is in /etc/ld.so.conf.d file mariadb-x86_64,conf which has
> right path, cqrlog can't find client.
> Sould there be libmysqlclient.conf also?
> 
> Jarmo

Looks like the pending update of mariadb in bodhi fixes this issue (and many 
others)

Cqrlog starts fine for me now.

https://bodhi.fedoraproject.org/updates/FEDORA-2017-7b83201239

73 Colin
-- 
Fedora 27 (Twenty Seven)
Registered Linux user number #342953
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: pulseaudio MUST DIE!

[stan]

On Thu, 23 Nov 2017 11:14:37 -0500
"David A. De Graaf"  wrote:


> By fine, I mean, for example, that scripts that generate sound can be 
> invoked by any user, in any environment:  In /etc/rc.d/rc.local
> during boot by root, in a plain text terminal, in an X window by any
> user, including root, in a crontab job run by any user.  Here's a
> simple example :
> 
> ***   /usr/local/bin/beep   ***
> 
> NBEEPS=${1:-1}
> REP=`expr $NBEEPS - 1`
> /bin/play /usr/share/sounds/freedesktop/stereo/message-new-instant.oga
> \ gain -0 pad 0 .4 reverb repeat $REP  2> /dev/null
> 
> Try it.  It ought to work in any of the above situations.
> But it won't if pulseaudio is in the picture.

Pulseaudio will never work in that situation; that was a design
decision.  They felt that that was insecure, since a user's soundstreams
could be listened to by other users.  I've never tried this, but if
you have more than one sound device, you might be able to use
pavucontrol to turn off one of them for pulse, leaving it available to
alsa only.  Then, in an .asoundrc, make that turned off sound device the
default device for alsa users who aren't you, so that all sounds go
through it. If you set up the other sound device as your default in
pulse, it might then allow you to have private audio through pulse, and
general audio through alsa.  Long shot, but that, or some
variation, might work.

Without pulseaudio, I think what you want is the alsa plugin dmix.  It
provides a simple mix of sounds if more than one source of sound is
playing at the same time in alsa.

It's been so long since I wrote any .asoundrc that I can't advise you.
But you should be able to find historical .asoundrc samples on the web
that do what you want using dmix.
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: pulseaudio MUST DIE!

[Tom Horsley]

On Thu, 23 Nov 2017 21:04:51 -0300
Fernando Cassia wrote:

> If there's something like that, I'd like to know about it.

There is pacmd which has the world's most obscure interface
but does allow you to do things like change the output device
(once you spend 2 hours decrypting how to use it).

It is in the pulseaudio-utils rpm along with some other
command line utilities for doing other things.

About 5 years after pulse was released, it did mostly
start to work for me, but it still seems to be solving
a problem no one has :-).
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: pulseaudio MUST DIE!

[Fernando Cassia]

On 11/23/17, Samuel Sieb  wrote:
> On 11/23/2017 01:59 PM, Fernando Cassia wrote:
>> I ended up removing pulseaudio but couldn't get alsa to work either,
>> so I now have a sound-less system just like in my AMD 386 running OS/2
>> back in 1993 before the SoundBlaster 16 arrived.
>
> If ALSA isn't working, then PulseAudio won't either since it requires a
> functioning audio device.

Sound originally worked on the system's default analog audio output.
It was trying to get the audio-over-HDMI part working which messed up
the config.

And as far as I know, there isn't a "rebuild this system's audio
config" bash script.

Something like HP's HPLIP that scans the hardware at the lowest level
and begins configuring everything.

Not to mention the apparent lack of a set-default-audio-device.sh
script that allows you to effortlessly change the audio device when
there's more than one (eg the built-in-one + an external USB audio
device).

If there's something like that, I'd like to know about it. Perhaps
this could be a job for the LSB project?

Just thinking aloud...
FC
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: pulseaudio MUST DIE!

[Philip Rhoades]

Wolfgang,



Date: Thu, 23 Nov 2017 21:07:08 +0100
From: Wolfgang Pfeiffer 
Subject: Re: pulseaudio MUST DIE!
To: users@lists.fedoraproject.org
Message-ID: <20171123210708.26f09cb4@aw17>
Content-Type: text/plain; charset=US-ASCII

On Thu, 23 Nov 2017 20:02:47 +0100
Wolfgang Pfeiffer  wrote:


On Wed, 22 Nov 2017 20:10:19 -0500
Doug  wrote:

> On 11/22/2017 05:36 PM, David A. De Graaf wrote:
> >  [ ... ]
> >
> > Today I held an exorcism and have slain the damned thing:
> > dnf remove pulseaudio
> > which, amazingly, took out 34 packages.
> >
> > Sound now works perfectly - just the way it should.
> > I cannot discern any important loss of function from the deleted
> > 34 packages so far.  aplay, vlc, xmms, mythfrontend and even
> > skypeforlinux all work fine with alsa.
> >
> > pulseaudio should just go away!
> >
> >
> Can you now play a video thru your computer and monitor and local
> sound speakers and at the same time send an htmi signal to your TV
> set that includes cideo and sound?


... tho I must admit I didn't succeed to have the same audio signal
being playbacked on both the internal computer speakers and on
external hardware (TV, home stereo etc. ) at the same time ...

I still have to choose: sound either from internal speakers or an
external sound system ..



That should be fixable with a properly configured .asoundrc file? - 
might need an ALSA guru to do it though . .


Phil.
--
Philip Rhoades

PO Box 896
Cowra  NSW  2794
Australia
E-mail:  p...@pricom.com.au
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

IPV6 and dhclient.conf supersede domain-name-servers does not work

[Patrick Mansfield]

Running current Fedora 25.

How should I supersede the nameserver when using IPV6 and dhclient?

If I enable IPV6, my dhclient.conf doesn't work as I'd expect, it works as 
expected
if only IPV4 is enabled.

I have this:

# cat /etc/dhclient-enp6s0.conf
supersede domain-name-servers 127.0.0.1;

# grep V6 /etc/sysconfig/network-scripts/ifcfg-enp6s0
# IPV6INIT=no
DHCPV6C=yes

And then if I restart the interface:

# ifdown enp6s0 > ~/ifdown.out 2>&1 ; ifup enp6s0 > ~/ifup.out 2>&1

I get:

# cat /etc/resolv.conf
; generated by /usr/sbin/dhclient-script
nameserver 2001:558:feed::1
nameserver 2001:558:feed::2

If I disable IPV6, it works as I'd expect:

# grep V6 /etc/sysconfig/network-scripts/ifcfg-enp6s0
IPV6INIT=no
# DHCPV6C=yes

# ifdown enp6s0 > ~/ifdown.out 2>&1 ; ifup enp6s0 > ~/ifup.out 2>&1

# cat /etc/resolv.conf
; generated by /usr/sbin/dhclient-script
search hsd1.or.comcast.net.
nameserver 127.0.0.1

Thanks ...

-- Patrick
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: pulseaudio MUST DIE!

[Samuel Sieb]

On 11/23/2017 01:59 PM, Fernando Cassia wrote:

I ended up removing pulseaudio but couldn't get alsa to work either,
so I now have a sound-less system just like in my AMD 386 running OS/2
back in 1993 before the SoundBlaster 16 arrived.


If ALSA isn't working, then PulseAudio won't either since it requires a 
functioning audio device.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: pulseaudio MUST DIE!

[Fernando Cassia]

On 11/22/17, David A. De Graaf  wrote:

> Sound now works perfectly - just the way it should.
> I cannot discern any important loss of function from the deleted 34
> packages so far.  aplay, vlc, xmms, mythfrontend and even
> skypeforlinux all work fine with alsa.
>
> pulseaudio should just go away!

+1

Where do I sign?. Unfortunately I have a LinuxMINT system w AMD APU
and where audio over HDMI never actually worked.

I purchased three cheap USB Sound adapters in the hope of getting
audio out that way, but I don't get sound from those either.

I ended up removing pulseaudio but couldn't get alsa to work either,
so I now have a sound-less system just like in my AMD 386 running OS/2
back in 1993 before the SoundBlaster 16 arrived.

To paraphrase Midnight Oil lyrics... "Some say that's progrsss, I say
that's cruel..."

FC
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: pulseaudio MUST DIE!

[Samuel Sieb]

On 11/23/2017 08:14 AM, David A. De Graaf wrote:
By fine, I mean, for example, that scripts that generate sound can be 
invoked by any user, in any environment:  In /etc/rc.d/rc.local during 
boot by root, in a plain text terminal, in an X window by any user, 
including root, in a crontab job run by any user.  Here's a simple example :


I would consider several of those situations to be a security issue and 
I'm surprised they work even with plain ALSA.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: pulseaudio MUST DIE!

[Wolfgang Pfeiffer]

On Thu, 23 Nov 2017 20:02:47 +0100
Wolfgang Pfeiffer  wrote:

> On Wed, 22 Nov 2017 20:10:19 -0500
> Doug  wrote:
> 
> > On 11/22/2017 05:36 PM, David A. De Graaf wrote:  
> > >  [ ... ]
> > >
> > > Today I held an exorcism and have slain the damned thing:
> > > dnf remove pulseaudio
> > > which, amazingly, took out 34 packages.
> > >
> > > Sound now works perfectly - just the way it should.
> > > I cannot discern any important loss of function from the deleted
> > > 34 packages so far.  aplay, vlc, xmms, mythfrontend and even
> > > skypeforlinux all work fine with alsa.
> > >
> > > pulseaudio should just go away!
> > >
> > >
> > Can you now play a video thru your computer and monitor and local
> > sound speakers and at the same time send an htmi signal to your TV
> > set that includes cideo and sound?  

... tho I must admit I didn't succeed to have the same audio signal
being playbacked on both the internal computer speakers and on 
external hardware (TV, home stereo etc. ) at the same time ... 

I still have to choose: sound either from internal speakers or an 
external sound system ..

> [ ... ]
> 
> ... and I could give even more examples of how easily a working audio
> setup with different audio hardware setups is done here on an F26
> system with pulseaudio. It just works here. I simply hope that the
> makers of the system are careful before applying permanent changes to
> that software. [ ... ]
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: grub2-efi / grub2-tools problem

[Ger van Dijck]

Op Thu, 23 Nov 2017 07:09:22 +0100 schreef Marc Blanc :


Le Wed, 22 Nov 2017 16:53:03 +0100,
Frank Elsner  a écrit :



dnf system-upgrade download --allowerase --refresh --releasever=27
gives
dnf system-upgrade: error: unrecognized arguments: --allowerase


It is : --allowerasing

Sorry my mistake (a type failure ?) I answerd to Frank allowerase indeed  
it must be allowerasing.


I hope that all runs fine now.



Ger van Dijck.

--
Gemaakt met Opera's e-mailprogramma: http://www.opera.com/mail/
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: pulseaudio MUST DIE!

[Wolfgang Pfeiffer]

On Wed, 22 Nov 2017 20:10:19 -0500
Doug  wrote:

> On 11/22/2017 05:36 PM, David A. De Graaf wrote:
> > pulseaudio became unusable on F26 with the upgrade to vers 11.1.2 a
> > few weeks ago.  It rapidly filled the log files with trash - and
> > produced no sound.
> > By using   dnf downgrade "*pulseaudio*"I was able to restore
> > sanity.
> >
> > Yesterday I freshly installed Fedora 27 Live Xfce on an Acer laptop.
> > Today, /var/log/messages had grown to
> > -rw-r--r--. 1 root root 14787172 Nov 22 15:47 messages
> > These 15 MB contain recurring lines like this:
> >
> > Nov 22 11:22:18 datacer rtkit-daemon[4896]: Successfully made
> > thread 16113 of pr
> > ocess 16113 (/usr/bin/pulseaudio) owned by 'dad' high priority at
> > nice level -11
> > .
> > Nov 22 11:22:19 datacer rtkit-daemon[4896]: Successfully made
> > thread 16116 of process 16113 (/usr/bin/pulseaudio) owned by 'dad'
> > RT at priority 5.
> > Nov 22 11:22:19 datacer rtkit-daemon[4896]: Successfully made
> > thread 16121 of process 16113 (/usr/bin/pulseaudio) owned by 'dad'
> > RT at priority 5.
> > Nov 22 11:22:19 datacer pulseaudio[16113]: [pulseaudio] 
> > socket-server.c: bind(): Address already in use
> > Nov 22 11:22:19 datacer pulseaudio[16113]: [pulseaudio] module.c: 
> > Failed to load module "module-esound-protocol-unix" (argument: ""): 
> > initialization failed.
> > Nov 22 11:22:19 datacer pulseaudio[16113]: [pulseaudio] main.c:
> > Module load failed.
> > Nov 22 11:22:19 datacer pulseaudio[16113]: [pulseaudio] main.c:
> > Failed to initialize daemon.
> > Nov 22 11:22:19 datacer pulseaudio[16110]: [pulseaudio] main.c:
> > Daemon startup failed.
> >
> > which repeat every 5 seconds, and will rapidly destroy my system.
> >
> > I've fought with this miserable pulseaudio creation for several
> > years, trying to get sound to work *properly*, but this is the
> > last straw.
> >
> > Today I held an exorcism and have slain the damned thing:
> > dnf remove pulseaudio
> > which, amazingly, took out 34 packages.
> >
> > Sound now works perfectly - just the way it should.
> > I cannot discern any important loss of function from the deleted 34
> > packages so far.  aplay, vlc, xmms, mythfrontend and even
> > skypeforlinux all work fine with alsa.
> >
> > pulseaudio should just go away!
> >
> >  
> Can you now play a video thru your computer and monitor and local
> sound speakers and at the same time send an htmi signal to your TV
> set that includes cideo and sound?
[ ... ]

... and I could give even more examples of how easily a working audio
setup with different audio hardware setups is done here on an F26 system
with pulseaudio. It just works here. I simply hope that the makers of
the system are careful before applying permanent changes to that
software.

pulseaudio here:
pulseaudio.x86_6411.1-6.fc26   

$ pulseaudio --version
pulseaudio 11.1-rebootstrapped

uname -a
Linux aw17 4.13.9-200.fc26.x86_64 #1 SMP Mon Oct 23 13:52:45 UTC 2017 x86_64 
x86_64 x86_64 GNU/Linux

fuser -v /dev/snd/*
 USERPID ACCESS COMMAND
/dev/snd/controlC0:  [  ] 6394 F pulseaudio
/dev/snd/controlC1:  [  ] 6394 F pulseaudio
/dev/snd/controlC2:  [  ] 6394 F pulseaudio
/dev/snd/pcmC1D0p:   [  ] 6394 F...m pulseaudio

lspci | grep -i audio
00:03.0 Audio device: Intel Corporation Xeon E3-1200 v3/4th Gen Core Processor 
HD Audio Controller (rev 06)
00:1b.0 Audio device: Intel Corporation 8 Series/C220 Series Chipset High 
Definition Audio Controller (rev 05)
01:00.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Cape 
Verde/Pitcairn HDMI Audio [Radeon HD 7700/7800 Series]

There are a few things here that do not not behave on the F26 
system - pulseaudio doesn't seem to be  part of that team 

Regards
Wolfgang
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: systemctl openvpn won't start

[Ulf Volmer]

On 23.11.2017 13:34, Neal Becker wrote:

> sudo systemctl enable openvpn-client@ibecker2.service
> Failed to enable unit: Unit file openvpn-client@ibecker2.service does not 
> exist.

interesting. Could you post the output of

rpm -ql openvpn|grep service

best regards
Ulf
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: SSH_AUTH_SOCK behavior is completely insane

[Gordon Messmer]

On 11/23/2017 03:20 AM, cen wrote:


According to other replies gnome-keyring is involved so perhaps the 
fault lies in that. I doubt upstream ssh guys would override cli 
options with agent.




Nonsense.  GNOME provides *an* agent, it doesn't modify ssh.  The ssh 
client decides what order to attempt authentication methods.


For now I managed to completely disable it system wide by adding 
export SSH_AUTH_SOCK="" in a /etc/profile.d script.




If you don't want your ssh keys to be used automatically, the 
least-effort fix it simply to not store them in .ssh.  Keys stored 
elsewhere can be specified on the command line, but won't be loaded 
automatically by the GNOME keyring application.


The SSH agent is an important component of secure SSH use.  You *should* 
keep your keys encrypted on disk (even if your filesystem itself is 
encrypted).  The agent makes it viable to use secure passphrases with 
keys that you use frequently, eliminating the barrier to use that typing 
the passphrase frequently presents.  It also allows you to forward your 
agent connection with SSH sessions, so that you can hop from host to 
host without copying private keys to the intermediate hosts.


___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: pulseaudio MUST DIE!

[David A. De Graaf]

On 11/22/17 21:59, Tim wrote:

Allegedly, on or about 22 November 2017, David A. De Graaf sent:

I've fought with this miserable pulseaudio creation for several
years, trying to get sound to work *properly*, but this is the
last straw.

I can't say I've had any real problems with it.  I used to have lots of
problems with what was used before pulseaudio, whenever two things
wanted to make a sound at the same time, the first one prevented the
other, then they might jam each other up when the first thing had
finished playing.

I'll ask the obvious question:  Do you do fresh installs, or update
Fedora over the top of prior installations?

I ALWAYS do fresh installs.  Updates seem a bit risky for my taste.  I 
maintain two root partitions, 1 /home and 1 for /boot/efi.  Then I 
format the older root and freshly install the new Fedora there.


One consequence was that the newly installed pulseaudio-11.1-6.f27 could 
not be downgraded.  So I removed it altogether and found that sound 
worked just fine.


By fine, I mean, for example, that scripts that generate sound can be 
invoked by any user, in any environment:  In /etc/rc.d/rc.local during 
boot by root, in a plain text terminal, in an X window by any user, 
including root, in a crontab job run by any user.  Here's a simple example :


***   /usr/local/bin/beep   ***

NBEEPS=${1:-1}
REP=`expr $NBEEPS - 1`
/bin/play /usr/share/sounds/freedesktop/stereo/message-new-instant.oga \
    gain -0 pad 0 .4 reverb repeat $REP  2> /dev/null

Try it.  It ought to work in any of the above situations.
But it won't if pulseaudio is in the picture.

The pulseaudio designers know what you want better than you.

--
David A. De GraafDATIX, Inc.Hendersonville, NC
d...@datix.us www.datix.us

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: pulseaudio MUST DIE!

[David A. De Graaf]

On 11/22/17 19:38, Sam Varshavchik wrote:

David A. De Graaf writes:


Today I held an exorcism and have slain the damned thing:
    dnf remove pulseaudio
which, amazingly, took out 34 packages.

Sound now works perfectly - just the way it should.
I cannot discern any important loss of function from the deleted 34
packages so far.  aplay, vlc, xmms, mythfrontend and even
skypeforlinux all work fine with alsa.

pulseaudio should just go away!


Unfortunately, Firefox requires pulseaudio for sound. Firefox is not 
packaged with a dependency on pulseaudio, but without it installed you 
want hear all the important parts of car crash videos on Youtube.


You're right, Sam.  Firefox IS defective.
However, I'm listening to Patricia Kopatchinskaja on Google Chrome quite 
successfully:


    https://www.youtube.com/watch?v=Y4llgOi6MZI
Somewhat more edifying and enjoyable than car crashes.

I guess this shows that Firefox, like gnome, has better alternatives.

It's really sad that so many programs tie themselves to specific 
environments instead of using generalized functionality.  Linux, and 
Fedora in particular, need more attention to interface specs instead of 
whizbang features.


--

David A. De GraafDATIX, Inc.Hendersonville, NC
d...@datix.us www.datix.us
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: systemctl openvpn won't start

[Neal Becker]

Ulf Volmer wrote:

> On 23.11.2017 12:54, Neal Becker wrote:
> 
>> Oh, thanks!  And what should be in openvpn-client@ibecker2.service?  Is
>> it just a symlink to the template file openvpn-client@.service?
> 
> Yes. You should normally create this symlinks by using
> systemctl enable openvpn-client@ibecker2.service
> 
> best regards
> Ulf

sudo systemctl enable openvpn-client@ibecker2.service
Failed to enable unit: Unit file openvpn-client@ibecker2.service does not 
exist.

I guess there first has to be a file: openvpn-client@ibecker2.service: what 
is in it?  Is it a symlink?
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: systemctl openvpn won't start

[Ulf Volmer]

On 23.11.2017 12:54, Neal Becker wrote:

> Oh, thanks!  And what should be in openvpn-client@ibecker2.service?  Is it 
> just a symlink to the template file openvpn-client@.service?

Yes. You should normally create this symlinks by using
systemctl enable openvpn-client@ibecker2.service

best regards
Ulf
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: systemctl openvpn won't start

[Neal Becker]

Ulf Volmer wrote:

> On 22.11.2017 20:59, Bill Shirley wrote:
> 
>> What we've been talking about is the unit file
>> (openvpn@client-ibecker2.service).
> 
> Since fc26 (if i remembered correctly) there were separate systemd units
> for openvpn server and client configurations.
> 
> /usr/lib/systemd/system/openvpn-client@.service
> /usr/lib/systemd/system/openvpn-server@.service
> 
> Based on that, you should have a config file in /etc/openvpn/client/
> (ibecker2.conf for example) and your systemd unit file should be
> openvpn-client@ibecker2.service
> 
> best regards
> Ulf

Oh, thanks!  And what should be in openvpn-client@ibecker2.service?  Is it 
just a symlink to the template file openvpn-client@.service?
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: SSH_AUTH_SOCK behavior is completely insane

[cen]

According to other replies gnome-keyring is involved so perhaps the 
fault lies in that. I doubt upstream ssh guys would override cli options 
with agent. Cli is usually the highest order of priority. I will try to 
investigate further and try to pinpoint the blame.


For now I managed to completely disable it system wide by adding export 
SSH_AUTH_SOCK="" in a /etc/profile.d script.



On 11/23/2017 04:18 AM, Eric Griffith wrote:
This is not just Fedora specific behavior. I ran into this a few days 
ago on a Mac after adding a bunch of keys to my agent (one per AWS 
region). Even if you specify a key with “-i” it will still go for the 
agent, resulting in an Auth failure. Not sure if specifying a key in 
the config will over ride it though, I didn’t try that.


The fact that SSH prioritizes the agent over a manually specified key 
definitely smells like an upstream bug though. That’s not just counter 
intuitive that’s a blatant disregard of an explicit command specified 
by the user.


Cheers!
Eric

On Nov 22, 2017, at 19:33, Todd Zullinger > wrote:



Tom Horsley wrote:

On Thu, 23 Nov 2017 00:06:11 +0100 cen wrote:

Anyone doing linux admin or dev work has more than 5 keys in their 
.ssh directory, rendering the agent completely USELESS PIECE OF 
SHIT PROGRAM.


Why? I do lots of linux admin work and I only have two keys.


I use a different key for each organization I'm working for/with.  I 
have a personal key, one for Fedora packaging, one for github, 
another for bitbucket, and several for different companies where I 
perform admin work.


You can certainly use one or two keys for all of that, but I don't 
think it's the best practice to do so.  Not everyone feels the same, 
but it's far from unusual to have quite a few keys.


--
Todd
~~
If people are good only because they fear punishment, and hope for
reward, then we are a sorry lot indeed.
  -- Albert Einstein

___
users mailing list -- users@lists.fedoraproject.org 

To unsubscribe send an email to users-le...@lists.fedoraproject.org 




___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org


___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: SSH_AUTH_SOCK behavior is completely insane

[cen]

Not sure why but setting IdentityAgent in config did nothing for me. 
Perhaps this is a problem with gnome-keyring being overzealous and 
always trying to be first.



On 11/23/2017 04:15 AM, Christopher wrote:
On Wed, Nov 22, 2017 at 6:07 PM cen > wrote:


Whose good idea in the history of Linux was to turn ssh agent on by
default when one has more than 5 private keys available? This is
what I
just got:

ssh -i mykey.pem user@myhost
Received disconnect from ... port 22:2: Too many authentication
failures
Authentication failed.


Then I do export SSH_AUTH_SOCK="" and surprise! I am logged in.
And I am
not even sure why this suddenly stopped working, I swear to God
specifying the key used to override the agent.

So apparently the agent even overrides my -i flag which explicitly
specifies which key to use. Instead of taking my key as I specify, ssh
agent will go and try every single key file in my .ssh directory and
fail after 5 times because any sane remote ssh server will block you
after failing so many times.


It does seem like command-line options should be used first.

Anyone doing linux admin or dev work has more than 5 keys in their
.ssh
directory, rendering the agent completely USELESS PIECE OF SHIT
PROGRAM.


I think you're being unnecessarily unfriendly. There's no need for that.

As for the number of keys, I don't know why anybody would need more 
than one "identity key" to identify a single individual on a single 
machine. I do tons of work with SSH, and I've never had more than 2, 
and the second was only a temporary one I created for a specific test 
and deleted 5 minutes later. Not that this matters... if you have need 
for more keys, that's up to you.



Does everyone disable agent first thing after installing Fedora? How
else do you even manage to survive with this crap running?


Do you mean Fedora? I suspect you mean GNOME. Specifically, 
gnome-keyring-daemon, which runs by default in GNOME, but I'm sure it 
can be disabled (never bothered to check; personally, I find it very 
useful, and if I didn't... I wouldn't store identity keys in it).


Why would agent even try with other keys if I SPECIFY the goddamn key!
It doesn't make any sense!


Why are you putting identities in the agent at all if you're not using it?
Or, why not just just set IdentityAgent to "none" in your 
~/.ssh/config file if you don't want to use it? Or, use '-o 
IdentityAgent=none' on the command-line? Or do what you already did, 
and override SSH_AUTH_SOCK in your env.


How do I turn it off in all shells for all users forever? How do I
nuke
this from system? .bash_profile export does not seem to cut it.


Set IdentityAgent to "none" in /etc/ssh/ssh_config
(Try 'man ssh_config' for more details)

It won't work in .bash_profile for terminals inside GNOME because 
GNOME sets it after you log in and your session has already started.


Not to mention the same shit happens when you open gnome files and try
to connect to remote location, except you can't even specify the
key in
the UI. It will just try a bunch of keys until you are blocked by
remote.

And there are numerous other programs who do this, like Filezilla.

I just don't get it apparently..


I don't see why you're getting so upset. It's not hard to avoid using 
the agent if you don't want to use it. The easiest thing is to not put 
identities in it in the first place if you don't want them to be used. 
The next easiest is to change the ssh config to skip the agent. 
Neither are hard.


But, I do agree with you on the unintuitive nature of not trying the 
identity from the command-line first. I'm sure a *friendly* request or 
patch (emphasis on friendly... vs. how you started this thread) to do 
that to the openssh upstream would be happy to consider it as an 
improvement to the user experience. Same with GNOME Files and the 
upstream GNOME devs.




___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org


___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: SSH_AUTH_SOCK behavior is completely insane

[cen]

I tried IdentitiesOnly and it worked but it also disables password login 
which I sometimes need.



On 11/23/2017 02:29 AM, Todd Zullinger wrote:

cen wrote:
Anyone doing linux admin or dev work has more than 5 keys in their 
.ssh directory, rendering the agent completely USELESS PIECE OF SHIT 
PROGRAM.


Not at all.  It just requires some config to handle that well. :)

Does everyone disable agent first thing after installing Fedora? How 
else do you even manage to survive with this crap running?


The agent is great.  It certainly can be annoying with many keys, some 
of which is made worse by the agent being provided not by ssh but by 
gnome-keyring-daemon, I think.


Why would agent even try with other keys if I SPECIFY the goddamn 
key! It doesn't make any sense!


There is a way to avoid this though, using the IdentitiesOnly option 
in the ssh config:


Host *.example.com
   IdentityFile ~/.ssh/id_rsa_example_com

Host *.example.net
   IdentityFile ~/.ssh/id_rsa_example_net

Host *
   IdentitiesOnly yes
   IdentityFile ~/.ssh/id_rsa

Maybe that will be helpful as an alternative to disabling the agent 
entirely.




___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org


___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: SSH_AUTH_SOCK behavior is completely insane

[cen]

I did use -v and it does use other keys first. It probably uses my key 
down the road but you can never see that because remote blocks you 
before it happens.



On 11/23/2017 01:53 AM, Cameron Simpson wrote:

On 23Nov2017 00:06, cen  wrote:
Whose good idea in the history of Linux was to turn ssh agent on by 
default when one has more than 5 private keys available? This is what 
I just got:


ssh -i mykey.pem user@myhost
Received disconnect from ... port 22:2: Too many authentication failures
Authentication failed.

Then I do export SSH_AUTH_SOCK="" and surprise! I am logged in. And I 
am not even sure why this suddenly stopped working, I swear to God 
specifying the key used to override the agent.


No, as far as I recall it merely uses that key in addition to the 
agent. What gets used first might depend on the key types, too.


Have you experimented with specifying the key file in the ssh_config 
for whatever hosts require that key? Don't forget that the .ssh/config 
file accepts shell style globs in the Host clause names, quite handy 
for some things.  Example from mine:


 Host *-direct
   ControlPath   none

Adjust to suit.

I keep a no-ssh-agent wrapper script around to run commands without 
access to my agent. Usage:


 no-ssh-agent some-ssh-stuff ...

So apparently the agent even overrides my -i flag which explicitly 
specifies which key to use. Instead of taking my key as I specify, 
ssh agent will go and try every single key file in my .ssh directory 
and fail after 5 times because any sane remote ssh server will block 
you after failing so many times.


Have you examined the output of "ssh -v" for this connection? Have you 
confirmed that your -i key is being offered after all your agent keys?


Anyone doing linux admin or dev work has more than 5 keys in their 
.ssh directory, rendering the agent completely USELESS PIECE OF SHIT 
PROGRAM.


Actually, no.

I've been doing that kind of work (admin and dev) for decades and I 
don't think I've ever had as many a 5 keys in my agents. I've got 4 
right now, 3 being my personal keys (rsa, dsa, ed25519) to accomodate 
different key type acceptance and 1 special key for a third party 
project I'm working on right now. I could probably get my personal 
keys down to 2 if I spent a little time auditing my target hosts.


Does everyone disable agent first thing after installing Fedora? How 
else do you even manage to survive with this crap running?


Shrug. I live mostly on a Mac right now, which also provides a shared 
agent for your desktop. Quite handy really.


Why would agent even try with other keys if I SPECIFY the goddamn 
key! It doesn't make any sense!


I am surprised that it tries the agent keys before the -i key; have 
you verified this with an "ssh -v"?



How do I turn it off in all shells for all users forever?


Don't. Turn it off for your own shells perhaps, probably in your .bashrc.

How do I nuke this from system? .bash_profile export does not seem to 
cut it.


Surprising. I thought the Fedora bashrc sourced the bash_profile.

Cheers,
Cameron Simpson  (formerly c...@zip.com.au)
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org