Re: which to use: ext3, JFS, XFS, ReiserFS? [Was: new user question:

2008-01-18 Thread Alvin Oga

hi ya

 Hugo Vanwoerkom wrote:
 
 Jimmy Wu wrote:
  (1) ext3 mounts and unmounts slowly, resulting in increased boot times.

any journally fs will be slower than non-journaling fs ( ext2, dos, etc )

  (2) Neither JFS nor XFS can be made smaller, although they can be
  extended if needed.

i would tar up the current data and backup to dvd etc before blowing it up
to extend the current fs into something bigger or smaller
- thus the growing/shrinking feature is not an issue for my needs

  (3) JFS performance degrades on larger filesystems, but is least CPU
  intensive for smaller file systems.

any journalling fs degrades as the fs gets larger

some degrades faster than others

---

formatting issues ...

- journaling FS can format 1Terabyte in a flash

- ext2 will take forever ( over a day or more )

- it will/might take forever ( over a day or more ) to format 500MB or 1 
terabyte fs or larger

- it will take forever ( even longer ) to restore the 1 terabyte of data

- times are based on past experience for say P4-2Ghz w/ 1GB of memory or 
equivalent

  (4) ReiserFS can be flaky on a system crash.

all journaling fs is flaky for system crash...
- some can recover .. some cannot

- you probably can't easily recreate the failure mode ( defective fs 
internals )
on different fs

  (5) ReiserFS is the best choice for /var.

maybe .. maybe not

  (6) On a continuum, XFS offers the best performance, 

for performance and comparisons

http://linux-sec.net/FS/#FS

 ext3 offers the most data integrity / chances of recovering from a crash,
 and JFS is in the middle.

depends on the defect of the crash

  (7) Mixing too many file systems in one system will degrade performance

duh ... :-) .. sorry couldn't resist

and it will also confuse the admins when working on different servers, pcs

  (8) Is there any advantage to using ext2 for /boot rather than ext3?

no to either
/boot should not be a single partition by itself.. 
it is part of /bin, /lib, /sbin /etc ... which is the rootfs

even if /boot is fine, if your rootfs is corrupt, you can't boot 
so there is no point to separating /boot ... we'll leave network boot,
boooting off cd, and booting off usb stick for another ballgame

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Why ext3 doesn't need defragmentation ?

2007-11-30 Thread Alvin Oga

hi ya

 David Brodbeck wrote:
 
 On Nov 30, 2007, at 9:45 AM, Stefan Monnier wrote:
  No.  The NTFS file system does not need defragmentation.

all file systems can use a defragmentor

lets assume a disk format of:

1 2 3 4 5 6 7 8 9 10 .. 63( aka sectors )

if you try to read/write a file starting sector 1 into your disk buffer, 
you may or may not have disk buffer space left to read another 512Byte
from sector 2...

if you wait a bit, few milliseconds for the system to services its
disk interrupts, you now have disk buffer space to read sector 2 ..

but since you waited too long, sector 2 came and went, so now you have
to wait for a whole revolution before you can read sector 2



if you format using, than you may or may not have time to read sector 2

1 11 21 31 41 51 61 2 12 22 32 42 52 62 3 13 23 33 43 53 63 4 14...
 
the defragmentor can be used to move sectors around to optimize
reading the whole file w/o waiting for the next revolution

- how the defragmentor displays used and unused sectors
can make a big difference in the pretty pic you see vs the
actual performance

what you see the defragmentor showing would be a continuously
allocated file instead of scattered across various sectors
within a track or having to move the heads to a different tract
to get to the next 512byte

there's only 512bytes per sector
63 sectors per track
and any number of cylinders depending on your disk size

the number of heads and disk buffer size would depend on your 
disk drive manufacturer and model#

one traack is 512MB * 62 == 31.744KBytes
with 16 physical heads  you can read 509.904KBytes per revolution

all un-used disk sectors belonging to a different file is read and 
discarded ... what a waste

with 8MB or 16MB disk buffer .. you can read lots of tracks before
the disk buffer is full ...  there should NOT be a slow system

lba ... 
maps all the cylinder/heads/sector into other whacky numbers ( lba blocks )

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: rebuilding a system remotely? - idea

2006-09-03 Thread Alvin Oga

hi ya roberto

 Roberto C. Sanchez wrote:
 
 I did this with a couple of Red Hat servers a few years ago.  They were
 located in a server room at the university and I did not have a key, but
 wanted to do the rebuild over the weekend to minimize disruption.
 Anyhow, what I did was to transfer all necessary data (e.g., home
 directories, mail spools, etc, which I don't think are an issue in your
 case) to another server.  I then disabled the swap partition and
 bootstrapped a base Debian install (*with* ssh, which is not part of the

good idea to use swap .. assuming the system doesn't need it at the time
you nuked it .. and lots of other assumptions .. but it should work
and you'd only need about 2-5MB of swap ( any free unused space ) 
to do rebuild a new box remotely ..

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Doubts regarding /initrd and /linuxrc

2006-08-30 Thread Alvin Oga

hi vivek

 Vivek Varghese Cherian  wrote:
 
 Can some one provide me with pointers to the funtion of the /initrd
 directory in Debian ?

/initrd as with all other distro is used by the initrd.img file during
its bootup ( loading of modules ) during the kernel boot process
- in lilo/grub, if initrd=blah.img is not specified, than /initrd is 
not needed

 Can some one provide me with an explanation of the exact funtion of the
 /linuxrc executable in Debian ?

/linuxrc is required inside any blah.img ramdisk file to tell the boot kernel 
what to do ...
usually:  modprobe  e1000
or more complicated things to load besides one module

 Can some one explain why the /usr/share/initrd-tools/linuxrc file does not
 have the executable flag set on my system ?

/usr/share/initrd-tools is like the man pages and reference only
and is never used 

as you note /linuxrc should be root owned and executable

 Are /initrd and /linuxrc mutually exclusive ? (The presence of one causes
 the other not to be present)

no ... they are concurrcently required... if one initrd.img is used,
than both /initrd and /linuxrc is required
note, that /linuxrc is inside initrd.img
and that /linuxrc is NOT part of the normal system

more boot craziness
Linux-Boot.net

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



OT - linuxpicnic.org

2006-08-08 Thread Alvin Oga

hi ya debianites

OT
as you know, LinuxWorld is in SF and on the following Sat,
Aug 19, 11am - 5pm is Linux Picnic 15 ( 15 years of linux )

to rsvp ( recommended  for food prep and t-shirt counts )

http://www.linuxpicnic.org/guests/rsvp.pl

if you're in the neighborhood, do stop on by for
free food, free soft drinks and other social and 
geeky activities

free t-shirts for attendee while supply lasts

other freebies ?? ... donno ...
/ot

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Autofs help

2006-06-14 Thread Alvin Oga

hi ya tony

 Tony Heal wrote:
 
 14-series:~# cat /etc/auto.master
 #
 /opt/epace-storage  /etc/auto.epace-storage --timeout=300

of you change * to epsace-storage below.. you need to change
/opt/epace-storage 

it is best to use /.autofs instead of /opt/something
and use symlinks
cd /opt ; ln -s /.autofs/espace-storage .

 14-series:~# cat /etc/auto.epace-storage
 *   -fstype=nsf,rw,hard,intr,tcp   192.168.2.131:/opt/epace

do you really mean nsf or nfs ??

you should NOT use *

it's best to use:

espace-storage -fstype=nfs,rw,hard,intr,tcp   192.168.2.131:/opt/epace

i would not use hard mounts, but to each their own ... if you know 
why you're insisting on simultaneously using hard and intr

 14-series:~# ls /opt/epace-storage/vault
 ls: /opt/epace-storage/vault: No such file or directory
 
says you have an autofs config problem, that you already know about

i'd say remove --timeout=300 in the above automaster file
( it depends on where you got the autofs start/stop scripts and files )

- or it can be --timeout 300   no = sign

- what kind of error messages do you see when you start autofs
- what error messages are in the syslog files

 14-series:~# mount -v -t nfs 192.168.2.131:/opt/epace /opt/epace-storage/
 192.168.2.131:/opt/epace on /opt/epace-storage type nfs
 (rw,addr=192.168.2.131)

says that permissions, nfs, firewall etc is working, everything else
except autofs is working

 14-series:~# ls /opt/epace-storage/vault
 test-file.txt

  
  
 Tony Heal
 Pace Systems Group, Inc.
 800-624-5999
 [EMAIL PROTECTED]
  
  
 
 --=_NextPart_000_01DB_01C69018.63212810
 Content-Type: text/html;
   charset=us-ascii
 Content-Transfer-Encoding: quoted-printable
 
 !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.0 Transitional//EN
 HTMLHEAD
 META http-equiv=3DContent-Type content=3Dtext/html; =
 charset=3Dus-ascii
 META content=3DMSHTML 6.00.2900.2873 name=3DGENERATOR/HEAD
 BODY
 DIVSPAN class=3D179370305-15062006FONT face=3DArial size=3D2I have =
 read the docs=20
 and done some googling and I think I have everything set up right. My =
 problem is=20
 that although everything looks right I can not access the mount point. =
 Here are=20
 my docs as I have them. Can anyone offer some insight as to what I am =
 doing=20
 wrong. Note that I can manually mount the nfs share and access it, but =
 autofs is=20
 not working./FONT/SPAN/DIV
 DIVSPAN class=3D179370305-15062006FONT face=3DArial =
 size=3D2/FONT/SPANSPAN=20
 class=3D179370305-15062006FONT face=3DArial =
 size=3D2/FONT/SPANnbsp;/DIV
 DIVSPAN class=3D179370305-15062006FONT face=3DArial =
 size=3D214-series:~# cat=20
 /etc/auto.masterBR#BR# $Id: auto.master,v 1.4 2005/01/04 14:36:54 =
 raven Exp=20
 $BR#BR# Sample auto.master fileBR# This is an automounter map and =
 it has=20
 the following formatBR# key [ -mount-options-separated-by-comma ]=20
 locationBR# For details of the format look at =
 autofs(5).BR#/miscnbsp;=20
 /etc/auto.misc --timeout=3D60BR#/smbnbsp;nbsp; =
 /etc/auto.smbBR#/miscnbsp;=20
 /etc/auto.miscBR#/netnbsp;nbsp;=20
 /etc/auto.netBR/opt/epace-storagenbsp;nbsp;nbsp;nbsp;nbsp;=20
 /etc/auto.epace-storage --timeout=3D300BR/FONT/SPAN/DIV
 DIVSPAN class=3D179370305-15062006FONT face=3DArial =
 size=3D214-series:~# cat=20
 /etc/auto.epace-storageBR#/opt/epace=20
 192.168.1.67(rw,no_root_squash,sync)/FONT/SPAN/DIV
 DIVnbsp;/DIV
 DIVSPAN class=3D179370305-15062006FONT face=3DArial=20
 size=3D2#/opt/epace-storagenbsp;nbsp;nbsp;nbsp;=20
 -fstype=3Dnsf,rw,no_root_squash,syncBR#192.168.1.66:/opt/epace=20
 /opt/epace-storage nfs rw,hard,intr 0=20
 0BR#/opt/epace-storagenbsp;nbsp;nbsp;nbsp;nbsp;=20
 -fstype=3Dnsf,rw,hard,intrnbsp;nbsp;=20
 192.168.2.131:/opt/epaceBR*nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;=20
 -fstype=3Dnsf,rw,hard,intr,tcpnbsp;nbsp;=20
 192.168.2.131:/opt/epace/FONT/SPAN/DIV
 DIVnbsp;/DIV
 DIVSPAN class=3D179370305-15062006FONT face=3DArial =
 size=3D214-series:~#=20
 mountBR/dev/sda2 on / type ext3 (rw,errors=3Dremount-ro)BRproc on =
 /proc type=20
 proc (rw)BRdevpts on /dev/pts type devpts =
 (rw,gid=3D5,mode=3D620)BRtmpfs on=20
 /dev/shm type tmpfs (rw)BR/dev/sda1 on /boot type ext3 =
 (rw)BR/dev/sda5 on=20
 /home type ext3 (rw)BR/dev/sda9 on /opt type ext3 (rw)BR/dev/sda6 on =
 /tmp=20
 type ext3 (rw)BR/dev/sda7 on /usr type ext3 (rw)BR/dev/sda8 on /var =
 type=20
 ext3 (rw)BRusbfs on /proc/bus/usb type usbfs =
 (rw)BRautomount(pid2141) on=20
 /opt/epace-storage type autofs=20
 (rw,fd=3D4,pgrp=3D2141,minproto=3D2,maxproto=3D4)BR/FONT/SPAN/DIV=
 
 DIVSPAN class=3D179370305-15062006FONT face=3DArial =
 size=3D214-series:~# ls=20
 /opt/epace-storage/vaultBRls: /opt/epace-storage/vault: No such file =
 or=20
 directory/FONT/SPAN/DIVSPAN class=3D179370305-15062006FONT =
 face=3DArial=20
 size=3D2
 DIVBR14-series:~# mount -v -t nfs 192.168.2.131:/opt/epace=20
 /opt/epace-storage/BR192.168.2.131:/opt/epace on /opt/epace-storage =
 type nfs=20
 (rw,addr=3D192.168.2.131)/DIV
 DIVBR14-series:~# ls=20
 

Re: ext3 or xfs for desktop laptop

2006-06-08 Thread Alvin Oga

hi ya ron

 Ron Johnson wrote:
 
  /boot should NEVER be a sepearate partition in todays machines
  unless you are booting directly into memory or lvm or crypto or 
  other distro that does not run on real disks
 
 Please justify the strong word NEVER.
 
 NEVER ... unless is a contradiction.

it can be a contradiction if one does not recognize the except
and want to use it against never ... 

 [snip]
  ext3 has better recovery tools than the above beause you can use
  (15-20 yr old ) ext2 repair tools to recover ext3 fs
 
 Please also justify this.  ext2 was released in 1993.
 
released and and it had zero time in development ??

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: ext3 or xfs for desktop laptop

2006-06-08 Thread Alvin Oga

hi ya david

On Thu, 8 Jun 2006, David R. Litwin wrote:

 It seems to me, still, that though XFS is faster 

ext2 is the fastest fs out of ext2, ext3, reiserfs, xfs, jfs
- read, write speed
- xfs, jfs, reiserfs is faster for formatting

 (en general! Don't lop off my head for making a blanket statement!)

always fun

 and may become the standard at some point, 

xfs lifespan is limited unless sgi does some major technology upgrades
that people will buy sgi instead of its competitor ...
( pixar, ilm, etc )

 ext3 is currently the most stable and reliable

and fixable

 I'm still not clear over the controvesy of having an ext2 /boot
partition 

/boot is needed because soem old bios cannot read past 512MB disk boundry

/boot is NOT needed in general ... 

/boot is neeeded if you are doing crypto-fs or lvm 
or more like /anything/vmlinuz and /anything/initrd is needed
and it doesn't matter what its named ( /boot or /anything )

 and an XFS / partition: Why shouldn't I do this (if I choose to use XFS)
given that I do use GrUB? 

grub is dumb, or smart, a point ov view, in that grub needs to know
the filesystem of /something/vmlinuz in order to read the kernel
and boot ( it needs its stage-1.5 info ) that is on a filesystem

lilo doesn't need the stage-1.5 info, which makes lilo dumb compared
to some nice grub features ... or lilo is smart cause it doesn;t need
stage-1.5 info

--- if it boots .. you don't care whether it is xfs, jfs, reiserfs,
crypto-fs or even ext3, ext2

 I love the Bleeding edge)

than use lvm  and cryptofs :-)  ... 

 Since I've heard good things about crash
restoration (this laptop does crash) for ext3 and... not so good for XFS, I
think the former is safer.

that'd be a safe bet... if you do NOT save your data elsewhere

if the laptop is properly backed up.. it wont matter if it crashes or is
stolen
- if its stolen, cryptofs will cover your butt ...
and all your silly passwd you saved on the laptop

 The swap business. To partition or to have... files? What are the pros
and
cons (feel free to link to a howto or tell me to do so)? Indeed, should I
even _bother_ with a swap? 

you will NOT need swap .. as long as your application does not run
out of virtual memory

 Will it make that much of a difference? 

yeah... if you run out of virtual memory, your system will crash

if you have swap, it'd keep chugging away, a little slower or way slower
depending on your app and how much swap is used

 Finally, I know that there can be no absolutely correct choice. 

for a specific condition, there is usually 2 or 3 best choices
and the reset of the normal i do it this because that's what the
installer did which is usually wrong for certain requirements
- ease to recoverablity
- faster performance
- ease for admin and backups and restore
- easy for 3:00am fire fighting when you rather not be there

for easy to install ... that's what the installer does/did ... 

 I do _listen_ to a lot of music (an
increasing amount in flac).

xfs is good for lots of small files ( thousands of 2KB sized files )

xfs is NOT good ( better than any other ) for a few large files

 P. S.: Partitioner-wise: My friend reccomended I stick GParted on to a
 CD and use that. Is this the best programme / way? Any comments?

fdisk is the best ... but if one doesn't know fdisk and need gui...
than use what you can point and click with

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: ext3 or xfs for desktop laptop

2006-06-07 Thread Alvin Oga

hi ya david

- this must be a test from tonights svlug.org meeting

On Thu, 8 Jun 2006, David R. Litwin wrote:

 Hallo friendly list:

 I've decided that windows has to go and a swap has to come. So, I'm a
 gonna clear the hard drive of my Toshiba satellite A70 laptop and give
 myself a new start on life. 

for yoour laptop

use ext3 ( according to val hanson )

 Now, I've been looking about some. It seems that ext3 or
 xfs are the best filesystems,

depending  on who is doing the talking ...

redhat likes ext3. why ... just because
suse likes reiserfs... why ... just because  ( same reasoning )
sgi likes xfs  why ... just because
ibm likes jfs  why ... just because

other fs ... we'll skip over for now

just because is that they paid real $$$ for somebody to work on it 
inhouse or outside

 with /boot being on a seperate ext2
 partition using xfs (do I need to do this?). Is this true? 

that is confusing ..

/boot should NEVER be a sepearate partition in todays machines
unless you are booting directly into memory or lvm or crypto or 
other distro that does not run on real disks

use /boot if you have one of them old old thingies ( old bios )
that is stuck in the days of not knowing how to read past the first
512MB of disk

what fs yiou use on which partition would depend on what you are
doing with the system  .. there is no clear generic answer

so if they didn't say why xxx is better than yyy ... than their
comment is /dev/null

why one fs is better than another is at least days worth of tutorials
or 30 years of ongoing fs discussions that has resulted in just a handful
of fs ...

 Is it true of a laptop which I use for every day desktop purposes?

is what true ...

laptop is notorious for behing thrown around and dropped...

you have a choice of using smething that can recover itself
with fs repair tools or not ... that leaves you with just ext3
as a fairly reasonably recoverable fs from disk crashes or power failure

 I hear also that xfs is a pain to deal with if the system crashes. 

ALL fs is a pain to deal with if the system crashes
or if you do not have a mouse/keyboard/monitor on the pc/server

xfs is not any better/worst than jfs, reiserfs

ext3 has better recovery tools than the above beause you can use
(15-20 yr old ) ext2 repair tools to recover ext3 fs

 Is this true? How so?

lots of reading for weeks at a time ...

 Finally, I've heard of zfs. Is this worth looking in to more?

if you like to beat your head more ... do look into zfs ...
but its unlikely you'll find anything useful in the public ...

---

for more fs fun and fs comparisons and beaten bushes
http://Linux-Sec.net/FS

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: dual head with 2 graphic cards issue

2006-05-24 Thread Alvin Oga

hi nico

 Nicoco wrote:
 
 here is my xorg.conf :
 
good...

 Section ServerLayout
 Identifier Default Layout
 OptionXineramatrue

#
# looks like ati config tool is messed up
#
 Screen  0  aticonfig Screen 0
 Screen  1  deuxieme Above aticonfig Screen 0

whacky ... normally it would be something like:

Screen  0  Screen0 0 0
Screen  1  Screen1 LeftOf Screen0


 InputDeviceGeneric Keyboard
 InputDeviceConfigured Mouse
 EndSection
 
 Section Files
 # local font server
 # if the local font server has problems, we can fall back on these
 FontPath unix/:7100

if you have the font server above, you do not need any these font files below

 FontPath /usr/share/fonts/X11/misc
...
 EndSection
 
 Section InputDevice
 Identifier  Configured Mouse
 Driver  mouse

i assume your mouse works .. otherwise you're dead ..

it should work in single monitor mode at least

 
 Section Monitor
 Identifier   aticonfig Monitor 0

whacky ... bad ..

if you use Screen0 ... than it should be used in Layout defined above
if you use aticonfig Monitor 0 ... than it should be used in Layout defined 
above

 EndSection
 
 Section Monitor
 Identifier   petitecran
 HorizSync28-49
 VertRefresh43-72

more whackyness...

if you use Screen1 ... than it should be used in Layout defined above
if you use peitecran ... than it should be used in Layout defined above

 EndSection
 
 Section Device
 Identifier  ATI Graphics Adapter 0
 Driver  fglrx
 BusID   PCI:1:0:0

good
presumably this is pci and NOT agp based svga card

 Screen 0

what's that for .. take it out

 EndSection
 
 Section Device
 Identifier  Mystique
 Driver  mga
 BusID   PCI:2:0:0

presumably this is pci and NOT agp based svga card
 EndSection
 
 Section Screen
 Identifier aticonfig Screen 0
 Device ATI Graphics Adapter 0
 Monitoraticonfig Monitor 0

make sure your naming convention matches the Layout section

 DefaultDepth 24
 SubSection Display
 Depth 24

sometimes you need to specify Modes 1024x768

what is the point of having 24bit resolution if you have 800x600 ??

 EndSubSection
 EndSection
 
 Section Screen
 Identifier deuxieme
 Device Mystique
 Monitorpetitecran
make sure your naming convention matches the Layout section

 DefaultDepth 24
 SubSection Display
 Depth 24
 Modes 800x600

what is the point of having 24bit resolution if you have 800x600 ??

 EndSubSection
 EndSection
 
 Section DRI
 Mode 0666
 EndSection
 

for more ( dozens of ) dual-screen x.org config file examples and options ...

http://www.linux-1u.net/X11/Dual/

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



why bother Re: dual head with 2 graphic cards issue

2006-05-24 Thread Alvin Oga

hi ya nicoco

On Wed, 24 May 2006, Nicoco wrote:

 the 0 0 does not change anything

it wont

 sorry but I don't understand !!! where is the error here ?
 aticonfig Monitor 0 is used by aticonfig Screen 0 used in Layout

the point:
it is not working for one reason or another ...

  BusID   PCI:1:0:0
  
 IT IS an AGP card !

good if 1 corresponds ot agp .. 
 
 thanks for trying to help but have you read my whole mail ?

why bother to reply ...

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: where does grub put the MBR?

2006-05-03 Thread Alvin Oga


On Wed, 3 May 2006, Hugo Vanwoerkom wrote:

 Roberto C. Sanchez wrote:
  Hugo Vanwoerkom wrote:
  Hi,
 
  Is there a way to know *for sure* where grub puts the MBR? (No setup
  command)

yes...

  Well the MBR, is always in the same place.  It is *always* the first 512
  bytes on the physical disk.

the MBR is the first 446 bytes of each partition 
16 bytes for each of the 4 primary partition
 2 bytes for the boot flag

and if you have more than one partition, the boot record is the
first 448 bytes of each primary primary

  Now, what I think you want to ask is,
  where does grub install itself?  As to that, I don't know, other than
  scanning the disk and its partitions to see.  Though, I am not certain
  how one would do that.

grub stage1 or lilo, etc is loaded by the bios into 0x7C00
grub stage1.5 is loaded by the bios into 0x8K

 And what would I look for?

you don't ...  but if you insist... use a diskeditor to read the contents
of any random cylinder/head/sector to look for stuff

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: OT: Comparison of filesystems

2006-04-25 Thread Alvin Oga


On Mon, 24 Apr 2006, Rick Friedman wrote:

 Currently, I run Debian Sid with two different partitions: /  /home. Each 
 partition is an ext3 filesystem. I am thinking of changing filesystems (just 
 to satisfy my curiosity). My system is a typical home user's system. 
 
 I would like to hear from others their opinions about differing filesystems 
 such as: ext3, Reiserfs, XFS, JFS, etc. 
 
 Any insight would be greatly appreciated.

what is the purpose of the FS comparison ... 
depending on what you want, the other fs could be a different
better choice  and vice versa

if you don't want to sit and twiddle your thumb for a day while 
the system formats your 1TB disk space..
- you would use xfs, jfs, reiserfs

if you use athlon-2x00 series ( p3/p4 era ) cpu or earlier,
you would probably find out the hard way, not to use reiserfs-3.6.x
on linux-2.4 kernels ( latest version seems to be fine(better) )

if you use compact flash or usb-stick ( embedded linux ), you probably
want msdos for /boot and boot into ramdisk so that oyu can power off
anytime with no side effects

pull the plug 100 times at any random time
to simulate the end user powering off anytime

at a minimum, you always want embedded systems to boot
and give some kind of useful message like help, call home
for me vs a blank screen

for normal day-to-day use on 20GB/40GB disks .. ext3 might be good enough

for normal day-to-day use with 500GB of disk space.. you might want
xfs, jfs, reiserfs

if you want the fastest FS .. plan your partition tables
correctly and amt of memory needed to do the tasks 
and in all cases, ext2 will be maybe 2x faster than the others
but you shouldn't hit reset or power off either

---

always use the latest fs from the originating authors unless
you like to watch 1TB of data randomly disappear due to old bugs

more fs fun ..
http://Linux-Sec.net/FS

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: How to compare the output of two commands?

2006-04-17 Thread Alvin Oga

hi ya


On Mon, 17 Apr 2006, Sonixxfx wrote:

 To be more specific I want to compare a list like this, but much longer, to
 another list of text that has the same structure:
 
 /usr
 /usr/share
 /usr/share/doc
 /usr/share/doc/unzip
 /usr/share/doc/unzip/copyright
 /usr/share/doc/unzip/BUGS
 /usr/share/doc/unzip/ToDo
 /usr/share/doc/unzip/changelog.Debian.gz

PC-1# find /usr -print | sort  /tmp/list-1.txt

PC-2# find /usr -print | sort  /tmp/list-2.txt

- use -type options to skip stuff
- use grep -iv to skip stuff

copy the list-1.txt into PC2

diff /tmp/list-1.txt /tmp/list-2.txt

if you want to check for time stamps and permissions,
use --l  

find /usr -print | xargs ls -la /usr --l

or solve the probelm one of hundred other ways

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: How to compare the output of two commands?

2006-04-17 Thread Alvin Oga


On Mon, 17 Apr 2006, John O'Hagan wrote:

  comm (command1) (command2)

or kdiff x y

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GRUB error 18

2006-04-16 Thread Alvin Oga

On Sun, 16 Apr 2006 [EMAIL PROTECTED] wrote:

  I just got Debian installed on my extra computer, but whenever I 
  start it, it goes to stage 1.5, then gives me error 18, and stops. I have 
  found out that error 18 has something to do with the boot loader and 8 
  gigs, but I'm not sure. I have a 30 gigabyte Seagate Barracuda, and I 
  installed Debian using a netboot from two floppys. I can only boot from 
  floppies, so I can't use CDs. Can anyone point me in a direction to fix 
  this? Thanks.

http://forums.gentoo.org/viewtopic.php?t=122656

- if your /boot is beyond 1024 cylinders... you're screwed
  since your bios is not able to get around the 512MB or was it 8MB
  ( 1024 cylinder ) problem from your problem you're describing

- boot from cd or usboot if the bios has those boot options
  or just plain give up ... there's no solution other than another
  motherboard  or resize windoze to be 6GB total, so that linux
  can have its /boot under 8GB, assuming it supports up to 8GB 
  before the old bios runs out of bits for mapping large disks

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: / full?

2006-04-10 Thread Alvin Oga


On Mon, 10 Apr 2006, Andrew Sackville-West wrote:

 On Mon, Apr 10, 2006 at 02:16:25PM -0400, Chris Parker wrote:
  I have filled up the / partition.  a copy of fstab is below:
  
  $/ df -h
  FilesystemSize  Used Avail Use% Mounted on
  /dev/hda1 250M  249M 0 100% /

i think you have extra stuff in /srv or /selinux  or /otherdirectories
including stuff in /mnt or /media even if nothing is mounted there

- move all your well tree stuff in /home/srv/web-stuff

/bin /lib /sbin /etc is NOT the problem

you can symlink /bin and other directories to /someplace-else
but you have to know what you're doing ... ie.. you have to change
all of the startup scripts and take out all the hardcoded paths to /bin
and /etc and /lib etc..etc
- it'd probably be too much work for most folks

250M for / is 2x more space than you need and is a good config for /

c ya
alvin

  Is it possible to symlink /bin, /etc/, + others into the /home 
  partition? or just use a partitioner to resize the /home?  Which has the 
  least impact on the filesystem?
 
 Others have already addressed your options well enough.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian vs redhat

2006-04-05 Thread Alvin Oga


On Wed, 5 Apr 2006, Ron Johnson wrote:

  solid. Debian stable may be able to run on an unplugged
 ^
  computer 

any machine can boot and run in the unplugged state, 
otherwise your config is not properly configured

but, obviously, if its unplugged, you will not get any
network-based services ( ntp, updates, etc )

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian vs redhat -fair

2006-04-05 Thread Alvin Oga


On Wed, 5 Apr 2006, Roberto C. Sanchez wrote:

 To be fair, RH9 was released 03/31/2003, while Sarge was released
 06/06/2005.  I would say that a difference of 2+ years would be quite
 significant in terms of hardware support and general application
 stability.

bingo ...  

some folks like to compare oranges to dogs ... vs a fair comparison
of like systems from the same era .. 

2 yrs is way way too long ... it'd be like comparing p4-1G vs p4-3G
w/ hyperthread or something similar and yet vastly different

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: nfs performance

2006-03-20 Thread Alvin Oga


On Mon, 20 Mar 2006, Michael Schurter wrote:

  I use the client for burn my dvd data (with smbmount) but the speed of my 
  dvd 
  is 1,380Kbs :-((( this mean a lot of time per single disc :-(((

put your *.iso image on a local disk on the same system as
your dvd burner
 
 Better.  You would have a hard time getting any network file system to 
 run slower than burning a DVD.  SSH, FTP, HTTP, Samba, NFS -- they 
 should all be quite a bit faster.

you should be able to be run at 75% of the thruput of any network
10Mbps    1MByte/sec
100Mbps ---  10MByte/sec
1000Mbps -- 100MByte/sec  ( 7sec to transfer a 600MB cd image )

if you're running slower ... it'd probably because
your nic is too slow ( aka realtek ? ) or your cpu+memory
is the bottleneck   

or you have a mixture of incompatible 10Mbps devices mixed in with 100Mbps
devices and 1000MBbps devices

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: i want spam

2006-03-19 Thread Alvin Oga

On Sun, 19 Mar 2006, Chance Platt wrote:

 Interestingly, I read a piece once about a gentleman trying to get his
 email address spammed.  He did everything -- signed up on the
 mailinglists, gave the address to porn websites, .. everything.

and go to places that offer free stuff
 
 So if I were attempting to get my email address spammed, methinks I
 would do everything to actually avoid use of the string spam.

and personally, i'd not users to receive spam at gmail/hotmail/yahoo
and that in itself is abuse of free email services

ie.. what can you do about spam ... just play with spam-filters to post
process the MB or GB of spam data.. ( storage costs lots of $$$ 
and worst when multiplied by nnn-times x 4x  for nnn people doing spam
tests

i say serious spam testing/research should be down at one's own
hardware and connectivity and storage 

and you can dig thru the mail archives to find all the spam you want
along with the real emails ... this debian list itself is a good
real life example of mix of spams vs real emails

c ya
alvin 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: hacked server

2006-03-18 Thread Alvin Oga


On Sat, 18 Mar 2006, Jon  Miller wrote:

 I have a hacked server that has a few rootkits installed.  I'm going to 
 rebuild this using the following procedure:
 1) backup data files
 2) copy /etc/*.conf
 3) either make an image of the system and then blow it away or get new drives.
 
 Have I missed out on anything?

for the 3 items:
a) if you backup data, do NOT erase previous ( supposedly good and clean ) 
   backups prior to you noticing the rootkits .. but the actual intruder
   could have been there for months ... so do NOT erase the past two of 
   months of good backups 
 
b) *.conf is not the only items of interests

   most everything of value fits onto floppy, so if your system config 
   doesn't fit onto a floppy, you're copying more stuff than you need

c) get a new disk is best ... keep the old disk just in case you forgot
   to copy the all important config file you forgot about

use apt get to get a list of installed packages if you
trust its output to rebuild your new box with similar apps

d) and you missed about 997+ other important things to do after being
   cracked and maybe only a dozen or so would be of general interest
- change your current security to policy to prevent it from
happening again ...

- backup data daily onto backup data from 6months ago  vs
overwritting last weeks data

- apply patches as needed ( daily, weekly or monthly ) as 
time permits

- find out who got in, 
- find out when they got in
- find out how they got in
- find out why they got in ( their perspective = fun or malicious)
- find out why they got in ( your perspective = security hole ))

- find out what OTHER machines they have attacked
- find out what data they have sniffed ( login/pwd )
- find out what where they went after getting into your servers

- report to the local computer crime dept or FBI or equivalent
if you want to prosectue ... but that'd imply you don't
touch your server and the lawyers have it offline etc.. etc..

... blah blah .. blah ..

e) 975+ other things to do :-)

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: ready to use debian or ubuntu laptop reccomendations?

2006-03-01 Thread Alvin Oga


On Wed, 1 Mar 2006, Paul Johnson wrote:

  Dell is not paying $135 for a copy of Windows.
 
 Are you sure?  Look how they cut corners on hardware right up through the 
 midrange.

dell cuts corners by:
a) making a custom motherboard
b) making a custom power supply
c) making custom cables and pcb to hold things together
d) making custom firmware to assure you're stuck into their modus operandi

e) charging you for 3yr warranty for their proprietory hardware
   - do you really want to get a new P3-2Ghz system as a warranty
   replacement today for what is the end of your 3yr-1day warranty
   expiration period

   - 3yr or 5yr warranty of PC parts is a scam

yes ... most all oem vendors that sell microsoft installed with 
their hardwqre have special licenses that allows them to pay an
order of magnitude less tha oem retail pricing

- try to get hold of a microsoft reserller license agreement
  that allows computer integrators to sell their hw bundled w/ ms stuff

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: having problem with locales ?

2006-02-25 Thread Alvin Oga

On Sun, 26 Feb 2006, Mehmet Fatih Akbulut wrote:

 hi all,
which locales should i select to see characters like ý,þ,ç,ö,ð,ü correctly
on konsole ?
en_US UTF-8 doesnt show them right :'(
an example output of a php code: [in english: file successfully opened and
then closed.]
Dosya baþarý ile açýldý ve kapatýldý.  which is what i want to see.
Dosya baÅarı ile açıldı ve kapatıldı.  which is what i see now ...
O.S. and all installed programs are in english [so i dont want to switch
locales to tr_TR], but sometimes i need the above native characters.
what should i do to see such characters correctly ?
many thanks in advance.



en_US is english .. utf-8 by itself doesn't mean anything
its usually gonna be  xx_yy.utf-8 and other case sensitive variables

you have to set the proper LC variables ( a couple of the dozen+
variables ) if you want a mixture of some characters and not others ...
and probably its keyboard dependent too

c ya
alvin




Re: UTF-8, Utf-8, or utf-8?

2006-02-25 Thread Alvin Oga

On Sun, 26 Feb 2006, Dan Jacobson wrote:

 http://home.no.net/david/i18n.php and locale -a says use LC_ALL=zh_TW.utf-8
 but /etc/locale.gen and /usr/share/i18n/SUPPORTED seem to say zh_TW.UTF-8.

different distro seem to use differently named files ..

i think the font files are case sensitive ...
zh_TW.UTF-8 is NOT the same as zh_TW.utf-8

as long as you don't see jibberish, that font is the same in both files

it's seems to be up to the magical font gods :-)

for more font fun and hair pulling
Linux-CJK.net

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: dns?

2006-02-25 Thread Alvin Oga

hi ya

 Rylan Vroom wrote:
 
 Hello, How do you tell debian to use a local dns server before going to =
 the ones maintained by my ISP?

you can't ...

vi /etc/resolv.conf
localhost
dns.isp.net
dns2.isp2.net

if localhost does not reply in time, it's bz ls -laR'ing, it will go to the isp

adding localhost is a bad idea if you do not have
a domain configured on that machine 
your-domain.com

and you should not be using your pc as a dns server either...

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: how to configure hostname and /etc/hosts?

2006-02-24 Thread Alvin Oga


On Fri, 24 Feb 2006, Matus UHLAR - fantomas wrote:

 Hello,
 
 I have a notebook which I often move between sites and ocasionally use
 without network connection.
 I have set up hostname to 'fnote' and set up /etc/hosts this way:
 
 127.0.0.1   localhost   fnote.local fnote
 
 This means, that fnote resolves along with fnote.local and of course
 localhost to 127.0.0.1, while 127.0.0.1 resolves to localhost -

it should be:

127.0.0.1   localhost.localdomain localhost

w.x.y.z fnote.debian.org  fnote  www  oranythingelseyouwant

but real dns men, put w.xy.z and its reverse into a dns file and only
define localhost in /etc/hosts  

 I've logically expected that 127.0.0.1 should always resolve to localhost
 and vice versa. (searching google supports this opinion)

that doesn't mean its correct
 
 However, when programming a script that uses `hostname -s` convention to get

bingo ... along with hostname -f, hostname -d might return values
you might not want if the wrong entries is used in /etc/hosts or dns

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: how to configure hostname and /etc/hosts?

2006-02-24 Thread Alvin Oga


On Fri, 24 Feb 2006, Matus UHLAR - fantomas wrote:

  127.0.0.1   localhost.localdomain localhost
  
  w.x.y.z fnote.debian.org  fnote  www  oranythingelseyouwant
  
  but real dns men, put w.xy.z and its reverse into a dns file and only
  define localhost in /etc/hosts  
 
 I do NOT have any primary nor own IP address, 

than do NOT put in anything else other than the 3 fields of 127.0.0.1

do not put fnote or anythign else not related to localhost (aka 127.*)

when your isp or coffee house let's you connect, they will give you
static iP#  and/or dhcp ... 

 What is correct then?

already posted previously

 use random IP and reconfigure notebook whenever it's
 used in a network? yah...

only if you like to break things and experiment
 
-s, --short
   Display the short host name. This is the host name  cut  at the
   first dot.
 
 people would expext it's the host name (as returneg by gethostname) and
 not fqdn cut, right?

hostname -s  should return www
hostname -f  should return www.debian.org
hostname -d  should return debian.org

this a classic simple minded test to see whether dns and /etc/hosts is
configured right or not

and do the same/similar simple tests for reverse dns of ip#

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: UTF-8, Utf-8, or utf-8?

2006-02-24 Thread Alvin Oga

On Sat, 25 Feb 2006, Dan Jacobson wrote:

 For the locales stuff, should I use
 zh_TW.UTF-8, zh_TW.Utf-8 or zh_TW.utf-8?
 My guess is the latter, from locale -a.

use the utf ( lower and upper case sensitive ) version
supported on your pc ( output of locale -a and xlsfonts )

to change between UTF-8 and utf-8 ... the link implies that
the utf formats is NOT the interchangeable
http://home.no.net/david/i18n.php

 Should I report bugs if I see mentioning of the others?

probably not

 How about for web pages? charset=utf-8 like tidy or UTF-8 like Google?

for more utf sleeping materials
http://linux-cjk.net/Unicode/#UTF

fonts of webpages are controlled by:
- brower settings 
- xterm/kde settings
- installed fonts on the system

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Changing locale

2006-02-22 Thread Alvin Oga

hi ya

On Wed, 22 Feb 2006, Masatran (Deepak), R. wrote:

 I am changing my locale to ta_IN. I have export LANG='ta_IN' in my
 .bashrc, '. $HOME/.bashrc' in my .bash_profile, and
 '. $HOME/.bash_profile' in my .xsession. In GDM, I am using Default
 System Session.

those settings only affects xterm or things that you popup in X11

 1. But for example, in Gnome - Applications-menu - Games - Ataxx, Ataxx
 is displayed in English even though its Launcher-properties shows that the
 Tamil name is also available. What am I doing wrong?

KDE/gnome has its own controls for its menu under Language in its
settings where it controls fonts, language, foreground/background colors
etc

these kde/gnome menu settings have zero affect on applications in
xterm/konsole
 
c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Font, fc-list and xlsfonts

2006-02-19 Thread Alvin Oga

hi ya sed

On Sun, 19 Feb 2006, Sed Nivo wrote:
 
Why some fonts that i can see by fc-list i can't see by xlsfonts and 
 xfontsel? Verdana font for example. I copy they from Windows.

fc-list is an app that reads your font list from XF86Config or equiv
- you probably won't have all 5,000 or 10,000 fonts loaded 

xlsfonts shows your supported fonts by locale and the env variables
in the system or vice versa .. if you select unsupported fonts,
you get nothing showing on the screen

xfontsel .. point-n-clicky of what's available .. ( not useful for
adding/deleting fonts to the system )

if you add fonts, after x11 started.. you will need to manually
regenerate the cache files
xset or mkfontdir ... etc

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: latest on botnets

2006-02-18 Thread Alvin Oga

On Sat, 18 Feb 2006, Hugo Vanwoerkom wrote:

 http://blog.washingtonpost.com/securityfix/
 has some unbelievable numbers: the average botnet (network of 
 compromised PC's) has 36,8000 members!
 
 None of these can be Debian boxes running chkroot regularly, right?

no ...

chkroot will try to find cracked machines .. it does not prevent it

i keep wondering, if one was successful in breaking in, why
change the files so that things like chkroot will find you,
if the cracker left it alone, they can still get in and probably
not be detected

 They are all M$ boxes.

not necessarily

 Is that a believable number?

no ... i'd multiply it by 10x or 100x more or even 1000x because
not everybody will let the world know they've been broken into
and not everybody will know that they've been cracked either

banks ( in usa ) are required to notify customers that the credit card
and id is at risk, but that doesn't mean they will tell the world

last customer didn't know they've been cracked and keep running
for 2 months .. they thought somethng was wrong when it didn't boot 
again, 2 months after the fact ... ie... 2 months of sniffing
time for the cracker

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Sarge and RAID

2006-02-18 Thread Alvin Oga


On Sat, 18 Feb 2006, Sion Dafydd wrote:

 I've come into posesion of a spare 40 GB drive which I want to use to
 hold the boot, swap and root partitions, while the two 250GB disks
 mirror one large partition. Well, for some reason using this
 configuration /dev/md0 does not get initilaized on boot. When I try to
 mount it manually I get a mount: /dev/md0: can't read superblock
 error. If I run /etc/init.d/mdadm-raid start from the command line the
 raid array gets initilaized and everything is fine. Anybody know of a
 reason/fix for this?

your raid drivers is not being insmod'd before it starts booting
 
if /dev/md0 is needed for booting ( / is in /dev/md0 ) than you'd
need to change your initrd.gz to insmod/modprobe the raid drivers

or you can put the modprobe commands in /etc/init.d/rc  or any where
before the systems starts reading /etc/fstab looking for /

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



fud - Re: Is my system compromised

2006-02-06 Thread Alvin Oga

hi ya lamb

On Sun, 5 Feb 2006 [EMAIL PROTECTED] wrote:

- snipping unjustified/unmerited misunderstanding on
  your part ... i wont bother to reply to pointless arguments

- if you look closely, your defense is bascially name calling
  as you know what you're doing and i dont .. so be it ..

- you can solve the compromized machines your way and anybody
  else that wish to reinstall is free to do so, but i bet
  most cannot tell you how they got in or why or that the
  new system is more secure and the original problem is still
  unsolved

- its not my problem if you don't know how to fix a compromized
  system, most corps will NOT let you wipe out their machines
  when you cannot gurarantee their backups is 100% restorable

- most compromized machines are trivial to fix and 
cleanup, but of course you will want to reinstall since
you don't know how to cleanup :-)

- i'll fix it my way and most corps pays their invoices after
  their machine was saved and restored

you're obviously not a real world support for corporations
that doesn't have the inhouse crew to fix the problems
they've encountered

please do continue to provide entertainment from your view,
or keep trolliing yourself and provide additional FUD
more more name calling

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



alternative Re: Is my system compromised

2006-02-06 Thread Alvin Oga

hi ya

for fun ... and i'm sure this is nothing new to the 
those with the security paranoid disease ( or sleepease )

for those that want to try to figure out what files
was compromized on your machines... after the fact ..

but, if you can do BEFORE you go live, ( ie .. just after 
you install ) and if you already are online, you can still 
start a new habit after the fact

one dumb trick to do, regardless of what one does
to secure your boxes...


for f in `find /etc -type f -print `
do
  echo mdsum $f
  eval md5sum $f
done

and for silly ascii file you can read/understand

find /etc -type f -ls 

and put the resulting data onto a cdrom ( not a rw media )
- i'll leave the screen capture of the data to
you to figure out ( 5 second problem to solve )

- i'll leave the burning of the cd to another day

and pick the data that you care about or the entire machine



when you suspect a compromized box...

check the binaries in a few seconds with diff and md5sum
including all the libs and diff and md5sum binary itself

it takes a couple seconds to verify libs and binaries

if you don't have a cdrom of the important files predating the
suspect compromize, you can check the suspect box against
a brand new box that you jsut built and still compare
which is 100x faster than reinstalls 

---

- none of this requires you to wipe out data that may or
  may not be recoverable, that the manager's of the corp
  does not want destroyed or a disk to be reformatted
  because the it folks can't guarantee any working backups

- get a brand $20 or $100 new disk and install onto
it if you have to, but leave the suspect disk alone .. 
for hundreds of reasons including prosecuting the
crackers

- never wipe out previous data ( disks ) if you cannot
100% guarantee that you can recover important data 
esp on somebody else's corp systems

- if you like to apt-get daily, weekly.. you might want
  to do an md5sum periodically too, to keep track of
  the system

- add the md5sum checking to cron if all that is too much work
  to do manually and everything is automated except for sticking
  in a cdrom whenver you expect to save the md5sum

---

checking for which files is compromized or not is fairly
trivial and can be 100% automated 

- the resulting differences is probably stuff
you did and didnt save the new md5sum or it is
what the cracker did

--

the assumption is that the crackers doesn't have the
skills to fake md5sum for arbitrary files
and if they do, you're needing expensive security expert 
help anyway to defend your boxes against them

fun stuff 
c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: alternative Re: Is my system compromised

2006-02-06 Thread Alvin Oga

hi ya johnannes

On Mon, 6 Feb 2006, Johannes Wiedersich wrote:

 Alvin Oga wrote:
  for fun ... and i'm sure this is nothing new to the 
 
 Thanks for the funny post. Unfortunateley, it doesn't relate to the 
 subject line. Maybe you should have started a new thread: how can I in 
 future make sure that my machine is not compromised.

nah... i think it does, but granted i forgot what the orig post wanted
and if it's is my system compromized, than i say the md5sum stuff can
help.. if one really wanted to know ..

1. build a new box on a new disk... run md5sum  with a script ..
2. run the same script on the suspect box ...

3. any differences is the result of the cracker or user
   or different times that apt-get upgrade was run
   and apt-get can tell you what it installed
- there can be lots of differences or almost none
depending on what you're looking for

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Re: Is my system compromised

2006-02-05 Thread Alvin Oga

hi ya

On Sun, 5 Feb 2006 [EMAIL PROTECTED] wrote:

  ... and spend
  another week or month to harden and verify all the all configs
  and user info ( i say, if you're doing it right, it will tke you
  about 3 days to a week to harden the new box and verify it )
 
 Personally I spend about 2-3 minutes doing this.  It's called regular
 backups of /etc and other key locations of configuration data.  Pull a
 copy prior to the compromise.

obviously i can spend the same 2-3 minutes doing exactly that too,
but you're missing the point that one can spend a week to harden the
server and verify that its been hardened ...  the more paranoid you
are, the more time will be required to harden the server...

how much time you spend to protect data and systems is a matter
of choice or do whats normal vs do more than the average bear

 Backup data areas, not areas in the path?  Just a thought.

not always reality ... and there's dozens of problems since
users themself create scripts and that is usually the problem
vs a well defined security policy for the system before users 
fiddle with it
 
  the trick is that you know how to verify the binaries, the libraries
  and the directory tree ... and can find what is NOT supposed to be there
 
 Which is extremely hard to do on a compromised system where the basic
 tools you rely on to detect such things have been modified to hide the
 very things you're looking for.

that depends on if you're silly enuff to use the binaries on the
cracked box or not and/or if you can legitamately verify it 
in the dozen different ways to the forensics
- once you power off, you're dead ... in that you;ll
never find the good pieces of cracker info still in memory

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Backing up Windows using rsync

2006-02-04 Thread Alvin Oga

hi ya tac

 Question: Is there a better way to do what I'm doing? And is there already a 
 piece of software that exists on the NET that does what I'm doing better and 
 I should trying to re-invent the wheel? :-)

to do backup.. it implies you want the backup to be intact if something
goes wrong with  the main disk of the systems you're supposed to be
backing up

if you did rm -rf /, than you probably don't want rsync to
erase your backup

  murphy's law will dictate you will do that rm -rf a minute or
  two before your rsync start and you just stepped off to get
  coffee ( aka pee break )

- rsync is NOT good for backup unless you know why you're using
rsync, which is typically, to keep the 2nd PC as a hot replacement
for the primary or load balanacing where all machines are to
be identical, including identically corrupted ..

- if you turn off --delete than you're gonna have a hard time
figuring out what files to delete on what day ...

- if you did NOT save the previous copy... you lost that original
data forever ...

--

backups of windows imply you will need samba.. and that implies
your scripts or other people's scripts can probably handle silly
things that windoze folks does with file names

C:\My Documents\Joe's birthday party.mpg

C:\My Docudments\special party

gazillion email boxes with virus (still?) attached


using simple tricks may or may not work on joe's files

mount windoze /mnt/win2K
find /mnt/win2k -mtime -8 | tar zcvf /mnt/BACKUP/monday.tgz  -T -
umount /mnt/win2k

but that's when things gets to be fun

and add the addition fun when you try to restore windoze files
on NTFS based systems

-- to do proper backups ... of windoze too ..

- you will need to know what you're doing and what you want
and what the scripts does in detail  

- especially when you have zero control of file Name's used
by the ceo of the company that expects you to backup his 
special filenamed file for the companie's use

- backups is worthless if you cannot restore to a particular
  date and time which is when the problem started to occur

- backups is worthless if you overwrite ysterday/last-weeks good
  backups with todays corrupt files 

- hundreds of fun stuff ...

- fun stuff to see what people do to screw up backups, restores ...
  or that they expect to find a 2 line file they erased that has
  their passwd in it, to find that file in 10TeraByte of user data
  and they dont know what the filename was

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Re: Is my system compromised

2006-02-04 Thread Alvin Oga


On Sat, 4 Feb 2006, Carl Fink wrote:

 Once you're rooted, this is way easier and more effective than trying to fix
 things.

personally, it is 1000x easier to fix and remove the security problems
than it would be to start from step -1 reinstalls ... and spend
another week or month to harden and verify all the all configs
and user info ( i say, if you're doing it right, it will tke you
about 3 days to a week to harden the new box and verify it )

when you reinstall, you still cannot be guaranteed that the trojans
is not going to be restored by your reinstalls and restores from backup

- how can you guarantee that the trojans is not in the backups ?

the trick is that you know how to verify the binaries, the libraries
and the directory tree ... and can find what is NOT supposed to be there



if anybody think reinstalling is easier...  no problem, but, if you
do NOT make a backup copy of the new virgin system onto cdrom/dvd, than
you did NOT learn from that possibly compromized box

- if you have a clean cdrom/dvd, of the original machine,
than you can always verify it in a matter of seconds
that it is hacked or not compared to before it went on the wire

---

and if you know exactly how they got in ... you can close that hole
vs opening up new unknown problems by reinstalling new or old files
- you will need to know how they got in
- you will need to know when they got in
- you will need to know where they came from
- you will need to know what files they changed
- endless fun list...

- you cannot do forensics after the fact, if you have no previously
  verified and clean baseline

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: RAID5 config / boot problem

2006-02-02 Thread Alvin Oga

hi ya james

On Thu, 2 Feb 2006 [EMAIL PROTECTED] wrote:

 with mdadm -As /dev/md0 - this is what

yup...
 mounter was concerned. So I ran mdadm --assemble (with --scan, IIRC), left

yup ... 

 it to cook for ages, 

don't use 1TB sized home dirs  :-) ( which may be 12-36 hrs depending )
and hw raid isn't any faster, for those that wanna play

but there's not much options ..

 then did mount -a. It was up and working. df
 showed /dev/md0 mounted, and a size in line with what I expected. Plus,
 the files that were in the 'home' directory on the root partition suddenly
 disappeared, as did my regular user's  home directory!
 I assume that, having now assembled the array, I can activate it in future

if files/directories disappeared..

a) your raid is corrupt in one or more ways
b) you do have backups before the corruptions started to show 

 The problem that I see is that if I want to turn on the array before the
 fsck, I need to load the SATA drivers as well, and they seem to be loading
 long after the fsck.

yeah.. why some modules is loaded afterward and fsck before assembling of
raids is a silly bug ... trivial to fix...
 
 What would be the disadvantages of removing the fstab entry for /dev/md0,
 and creating a script to activate and mount the array after boot? I assume
 I could do this by messing around in the /etc/init.d files.

no you activate, fsck it than than mount after its all booted

hundred ways ( sorta ) to do the mounting of the raid after its booted

 I guess it's possible to load the SATA drivers earlier and assemble the
 array before fsck, 

yup.. just depends on the configs and the kernels

you can get around all of the above by simply using your own custom
kernel with built in drivers for that sata controller 
- modules is for job security for those that want to
build up hours to help corps debug systems that wont boot :-)

c ya
alvin



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Re: I'm really confused by bash, .bashrc, .bash_profile, .profile, etc, etc, etc

2006-02-02 Thread Alvin Oga

hi ya

 forgot-who started it

  Is there a good system for setting variables, aliases, etc that need to be
  set for user X, whether I log in at a login prompt or using su?  I'm
  confused by all the different .profile options (there are at least 3 for
  bash, why is that?)

why ?? because ... long history ...

general rule ...

- if you're confused .. do NOT change files in anything other
than your own home directory  /home/you

once you get brave ... decide if you want to enforce others to
use bash or csh or tsch or zsh or hudred-other-sh

- each will have a different priority of files it will
read or skip reading because some other files existed
and it will over-ride the defaults, while in other cases,
the defaults is still read, and user-defined changes
overrides the system defaults

the search order is dfferent for user login vs scripts run by 
root or anybody/anything else ( like cron vs your scripts calling
other scripts )

which shell you use is defined in /etc/passed for that user

to add more whackyness, different distro put their defaults
in different directories and different filenames which will
add confusion

for simplicity... let's say you use /bin/bash on debian,
which implies your the search order is:

anything defined in one file can be redefined in the 
subsquent files

- user defined changes override system defined variables

   system files
/etc/profile= read first for user login

/etc/bash.bashrc= interactive shell only


   user can do what you want in these files ..

# after /etc/profile, search in order for the first executable:
~/.bash_profile 
~/.bash_login
~/.profile  - not read if the files exists before it

~/.bashrc   interactive shell read it if it exists

~/.morebashfiles ??

   more user stuff
~/.aliasalways put aliases outside of bash files
for portability 

~/.login
~/.logout

http://developer.novell.com/wiki/index.php/Bash_-_What_happens_when_you_invoke_bash

- the above ignores other different distros and other shells

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: RAID5 config / boot problem

2006-02-01 Thread Alvin Oga


On Wed, 1 Feb 2006 [EMAIL PROTECTED] wrote:

 e2fsck 1.37 (21-Mar-2005)
 fsck.ext3: Invalid argument while trying to open /dev/md0
 /dev/md0:

not good ..

- is the partition type set to FD and the boot flag ( a ) turned on

- i assume you have the raid modules in your initrd for the
  kernel you're booting

 /etc/mdadm/mdadm.conf contains:
 DEVICE partitions
 ARRAY /dev/md0 level=raid5 num-devices=4
 UUID=ebdfaedf:59e64777:d81d8f6e:8d6b0392
  devices=/dev/sda1,/dev/sdb1,/dev/sdc1,/dev/sdd1

sometimes, some distro, bootloaders cannot boot from raid5
- you are guaranteed to be able to boot anything from raid1

- for raid stuff, always use grub from cvs checkout and/or 
lilo from the primary lilo ftp site

( /boot on raid1 which is one of the few times oyu need
  a different explicit /boot partitions in todays PCs )

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: RAID5 config / boot problem

2006-02-01 Thread Alvin Oga

hi ya james

On Thu, 2 Feb 2006 [EMAIL PROTECTED] wrote:

 First of all, I should have clarified that I am booting from hda, 

makes life lot esier for booting a raid5 subsystems

that would than imply that you need to have mdadm assemble
your raid system, before the system boots ( fsck's your
systems )
- you're missing the sniplet that assembles the raid5 system

 The partition type of /dev/md0 is ext3

i think you mean filesystem type ..

 The partition types of the four
 component partitions are 'fd' - cfdisk reports them as Linux raid
 autodetect.

good.. that is what i wanted to see/hear ... for each and all fo
the partitions on all of the disks in the raid5 thing-a-ma-jig

 No - not unless the Debian install put them there. I'm not sure how I
 would know? Anyway, I specified this RAID setup using the Debian sarge
 installer, so I assumed it would either pick an appropriate kernel or the
 right modules for me. uname -a tells me my kernel is 2.6.8-2-386 - I
 haven't compiled a new one since installing sarge.

yup, for simplicity, one can onlyhope they did all that right,
but it sounds like something was forgotten or one of the dependency
was not met
 
  ( /boot on raid1 which is one of the few times oyu need
a different explicit /boot partitions in todays PCs )
 
 I guess this isn't relevant since I'm not trying to boot from the RAID array?

yup.. ignore everything i said about why you need /boot separate from the
raid5 ...

 md: md0 stopped.

not good  your raid thingi is NOT turned on yet ..

 
 I could be reading this wrong, but doesn't it try to fsck the device above
 the snip, but only initialises the sata drivers for the components below
 the snip?

if /dev/md0 /raid blah foo wah-wah  is listed in /etc/fstab, it
will fsck it before it boots up, after it finishes fsck'ing / and will
check all of the entries in /etc/fstab

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



wrong RE: Not a Debian question, but you guys know this stuff...

2006-01-31 Thread Alvin Oga


On Tue, 31 Jan 2006, Tyson Varosyan wrote:

 Again, I apologize for posting a Windows-based problem on this board, but I

still providing entertainment of your sillyness ..

 #1: Edit your httpd.conf file. Find the line that reads listen :80 and
 replace it with the IP of website #1 followed by the port. Ie: listen
 206.110.16.25:80

that is stupidity at work .. and not required

 #2: Copy your httpd.conf file and give it a new name like httpd#2.conf
 #3: Edit httpd#2.conf and edit the Listen command with the IP and Port of
 your second website.

more silly stupidity on your part to have fake.com and real.com

 #4: Also Edit the DocumentRoot statement with a path to the root directory
 of your second website. (Obviously create this new directory)

hey he got one right

 #7 In the command window, browse to the folder containing apache.exe
 #8 run apache -f C:\Progra~1\Apache~2\Apache2\conf\httpd#2.conf

more silly stupidity at work ...
- this is not debian related list
- this is not apache related list
 
 Bingo! You have 2 instances of Apache server running on your box, each with
 it's own config file and it's own root directory.

you have that by default if you know how to configure apache 

 Katipo and Alvin, feel free to read this procedure and pass it off as your
 own in the future.

you can run your own misconfigured files ... 

 Sorry that I made you feel so incompetent. 

you're proving your own incompetence

i doubt anybody would do what you suggest to get virtual domains working

and there may be more than one solution.. but yours is not it ...
and will not pass the mustard test for our customers

- thats all folks for late night entertainment

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



fun Re: wrong RE: Not a Debian question, but you guys know this stuff...

2006-01-31 Thread Alvin Oga

hi ya kent

On Tue, 31 Jan 2006, Kent West wrote:

 Alvin, you and I have both been on this list long enough that it's
 obvious to me that you're a smart guy with lots of valuable knowledge
 and skills. But why be rude?

yeah... i guess it's easy to confuse rude with poking fun at um

i'm a sucker for flamebait andpoking fun ... :-0  always fun if one
doesn't emotional about it and hopefully learn a thing or 2 along the
way..

some folks are defensive... i wonder why, while others just move on and
have beer and figure it out

 And if you know enough about Apache to know that the way he is doing it
 is wrong, then surely you know the right way to do it? 

yup.. but since the thread got worst... no answers will be forthcoming
however, it's all readily available in yahoo/google ... 

we all spent our time hrs,days,weeks to find the answers if
nobody hands it to us on a platinum platter at the 
'palace of pick-your-noun ' .. :-0

and after all of that hard r/d .. write a [atheist]damm howto
so that nobody else needs to do that r/d searching again

 Why not just
 provide the answer rather than poking fun and being rude?

to me... it was 100% in fun .. but i guess i can see how it can
also be rude when one makes fun of somebody else at their expense 

there was say over a dozen things wrong with the thread before
the 3rd post to the list .. :-)  and inaccurate solution will
be so stamped .. :-) or at least leave a cloud of uncertainty
on the next reader to staumbles on this entertaining thread

 At the risk of
 seriously offending the atheists on this list and getting flamed, I'd
 suggest the world would be a better place if we'd listen to Leviticus
 19:14: Do not curse the deaf or put a stumbling block in front of the
 blind.

i saw what happend to that part of the thread .. more fun ..

entertaining..

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: HELP!!!mozilla can't display Chinese

2006-01-30 Thread Alvin Oga


On Mon, 30 Jan 2006, Serena Cantor wrote:

 Thanks! I don't have canna. Is canna for input
 Chinese? I'm not sure. i never use canna. Which fonts
 can you use when choosing Chinese font in Preference
 dialog of mozilla? I have only serif and  Sans
 serif.

what is the environment variables ??

you will need at least LC_ALL and LANG defined

what is the list of supported locale fonts on the machine ??
locale -a

if you do nto see chinese references, you will need
to install additional packages

what fonts is installed ?
xlsfonts |grep -i gb2312 
xlsfonts |grep -i big5

for more debugging fun
http://linux-cjk.net/  ( cjk-howto )

c ya
alvin



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Not a Debian question, but you guys know this stuff...

2006-01-29 Thread Alvin Oga

On Sun, 29 Jan 2006, Tyson Varosyan wrote:

 At the risk of having my hand slapped I will ask, since I bet there are
 quite a few Apache users on this board.
...

 I am using Windows 2000 and Apache 2.0.44

...
 
 Technical Manager, Uptime Technical Solutions LLC.

... no wonder :-)


c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: LaCie 2TB - Firewire 800 with Debian Sarge 3.X

2006-01-25 Thread Alvin Oga

On Wed, 25 Jan 2006, TAC Forums wrote:

 We are planning to buy the LaCie 2TB External Drive to backup 1.3 TB
 of data from a Debian Sarge 3.X installed Server. Please see the link
 below.

you'll be 100x happier with 4 (pata) disks at 500GB each

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: linux 2.6.15 and overheating

2006-01-17 Thread Alvin Oga


On Tue, 17 Jan 2006, Paul Johnson wrote:

 On Tuesday 17 January 2006 10:40, John L Fjellstad wrote:
  After I upgraded the linux kernel to a custom compiled 2.6.15, I keep
  getting shutdown because of overheating (one of the last message is
  something about the temperature hitting 93 C or something).  This never
  happened to me when I run 2.6.14 or earlier.
 
  Is it because 2.6.15 has some more functionality, and it gives me
  warning, or is it because there is a bug in 2.6.15? How do I find out?

you probably turned on i2c monitoring and the previous kernel didn't
have it working/supported for the hardware ??

change the settings for when the system should shutdown in the
i2c config files, but leave and still use the bios shutdown settings 

- ditto what paul j posted

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: LILO with root-raid nightmare - please help.

2006-01-16 Thread Alvin Oga

hi ya drbob


On Mon, 16 Jan 2006, drbob wrote:

 I use mdadm to manage my array. The command was
 
 mdadm --set-faulty /dev/md1 /dev/hda1 --remove /dev/md1 /dev/hda1

i'd think there might be a short cut version, but i'm being
lazy to go look it up
- i'd set it faulty first, if the system didn't already
flag it 
- than remove it after the the set-faulty
--- insert new disk
- than (hot-swap-ADD) the new disk


 My system wouldn't boot at all with the new drive in place until I went 
 into the bios and explicitly told it to boot off the drive on the ide 
 card.

lilo takes care of writing the mbr to both disks without the extra-boot 

 The drives attached to the card were listed in the bios setup 
 screen as boot options so I'm pretty sure my bios is compatible with 
 booting off raid.

being visible to the bios boot sequence does not guarantee it is bootable

 Since Windows will only boot off the drive with bios 
 device code 0x80 I believe that the bios may be switching the codes 
 around and this is what is confusing lilo.

lilo has NOTHING to do with windoze and windows cannot change the bios

windoze can boot off of D: or E: or any other disk or partitions, but
its happiest as C:

 It's the version that comes with sarge. I set up the array with the LILO 
 that came with woody, surely upgrading isn't necessary? I'll look for a 
 backport.

for raid ... lilo-22.7.1 is best to fix boot problems
 
 raid-extra-boot=/dev/hda,/dev/hde
 
 AFAIK that line is essential. It tells lilo to write the mbr to both 
 members of the raid array,

see above

 That is correct, however this was my first Linux system and I went a bit 
 overboard on the partitioning: tmp, usr, var, and home each have their 
 own partition.

nope ... personally, i require those partitions on any system that 
i maintain or the customers are billed extra time and $$ for me to
sit and wait for it to fsck the whole 500GB instead of just 256MB 
to get into single user mode to fix things

 /dev/md8/home   ext3defaults0   2

in the prev posts, one disk had /dev/hda8 listed while /dev/hde did NOT
have /dev/hde8
- i don't know if you inadvertantly deleted partition-8 in
the prev examples

 :~# cat /etc/mdadm/mdadm.conf

looks good

 :~# cat /proc/mdstat

looks good ... all shows as aactive with UU

now to fix booting problems ...

- try lilo-22.7.1

- copy all the data on the disk off to another set of disks
and break the normal sarge setup and use a newer lilo
and i'd bet it will boot off either disk 

- other test ...
- move the cd or ?? in /dev/hdc and /dev/hdd onto the
pci-based ide controller 

- boot into single user with a cdrom and change mdadm.conf to show
/dev/hdc instead of /dev/hde and power off

- move the disk on /dev/hde into /dev/hdc 

- reboot and keep your thumbs crossed

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: LILO with root-raid nightmare - please help.

2006-01-15 Thread Alvin Oga


hi ya drbob

On Sun, 15 Jan 2006, drbob wrote:

 I've replaced a failed disk in my raid 1 setup. I replaced the disk (hda 
 on-board ide), 

what exaactly did you type BEFORE you removed the bad disk ??

raidhotadd, raidhotremove, etc, etc.. is required ( aka good idea )

 So I went into the bios and set it to boot off the 
 promise card first.

some bios cannot boot off of additional ide cards ( pci cards )
and mixing with onboard ide might be confusing the system

 LILO version 22.6.1

too old ...

you should be using lilo-22.7.1 for raid stuff if you want a working
bootable raid system

 lba32
 boot=/dev/md1
 raid-extra-boot=/dev/hda,/dev/hde

why do you use extra-boot ?? 
- try commenting that line out

 image=/boot/vmlinuz-2.4.24.raidserver1
 label=RAID
 read-only
 root=/dev/md3

this implies /dev/md1 is your /boot ??
and that your rootfs ( /bin, /etc, /sbin .. ) is in /dev/md3 ??

for more debugging ...
what is the contents of /etc/fstab
what is the contents of /etc/mdadm.conf
what is the output of cat /proc/mdstat

 Is it safe to just put the disk with a valid mbr (hde) onto the on-board 
 controller?

yes and no .. depends on the mb and bios and your lilo config options

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Is RAID1 alive and well?

2006-01-06 Thread Alvin Oga


On Fri, 6 Jan 2006, Chinook wrote:

 Etch with kernel 2.6.12-1-686 (2.6.12-10)  Gnome desktop
 
 
 I recently tested imaging and restoring my complete system with Mondo 
 (before I screw it up again :-)

good that you can backup/restore ... at least that process/proceedure
works :-)

 ==
 debian1:/home/leec# sfdisk -l
 
Device Boot Start End   #cyls#blocks   Id  System
 /dev/hda1   *  0+851 852-   6843658+  83  Linux
 /dev/hda285297288877   71304502+   5  Extended
 /dev/hda3  0   -   0  00  Empty
 /dev/hda4  0   -   0  00  Empty

what is the point of /dev/hda3 and /dev/hda4 ... 
- when you rebuilt the next time .. delete it

 /dev/hda5852+   1182 331-   2658726   82  Linux swap / Solaris
 /dev/hda6   1183+   97288546-  68645713+  83  Linux

it's not clear if you are booting off /dev/hda1 or off of /dev/hda6

Device Boot Start End   #cyls#blocks   Id  System
 /dev/hdb1  0+   97259726-  78124063+   5  Extended

very very bad idea ...

 /dev/hdb2  0   -   0  00  Empty
 /dev/hdb3  0   -   0  00  Empty
 /dev/hdb4  0   -   0  00  Empty

delete unused garbage ... hdb2, hdb3, hdb4

 /dev/hdb5  0+   97259726-  78124032   fd  Linux raid autodetect

nice that its setup as raid autodetect which is correct ..



without seeing your /etc/mdadm.conf files, one can't say what you
have and dont have ..
- as is, you raid setup will not work

- raid1 is mirroring
- /dev/hdaX  and /dev/hdbX  should be defined identically

- raid1 will use the smaller size/partitions of the 2 disks

- raid autodetect MUST be defined for raid1/raid5

- if you like watching jibberish, cat /proc/mdstat
but you'd have to understand it to know that its useful

- at a minimum, if you should see U and not _ for 
each of the raid devices in the /dev/mdX

- you should never use /dev/hda and /dev/hdb in raid1/raid5
as that does not provide any redundancy and more importantly
it will slow you down 2x-4x


c ya
alvin



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Exim using incorrect hostname [SOLVED]

2006-01-05 Thread Alvin Oga


On Fri, 6 Jan 2006, Chris Howie wrote:

 Daniel Webb wrote:
  I had to make my /etc/hosts file like this before exim4 worked right in this
  respect:
  
  127.0.0.1 foobar.com localhost
  
  not 
  
  127.0.0.1 localhost foobar.com

the corrrect way should be:

127.0.0.1   localhost.localdomain   localhost

w.x.y.z exim.foobar.com exim mailhost mail ...


hostname -s should only return mail
hostname -f should return  mail.foobar.com
hostname -d should return foobar.com

if not... your dns is broken or /etc/hosts file

some apps seems to care about the order in /etc/hosts of the fqdn vs
the shortnames, while other apps doesn't care

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: removing autofs from sarge installation

2006-01-01 Thread Alvin Oga

On Sun, 1 Jan 2006, Paul E Condon wrote:

 In all cases, one of the error messages is:
 
 /etc/init.d/autofs: Unknown system, please port and contact 
 autofs@linux.kernel.org

that error message is 5+ yrs old..

you need to use a newer autofs (pkg) and startup script, say
rc.autofs-1.58 or newer, otherwise it's equally trivial to work around the
erroneous unsupported os message

but, at the same time, the error message is correct if the proper
autofs files is not loaded ( /usr/lib/auto* .. etc )

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Sarge-built binaries running on Woody systems?

2005-12-31 Thread Alvin Oga

hi ya 

On Sat, 31 Dec 2005, Matt England wrote:

 Can one run Sarge-built binaries on Woody?

you might be able to .. but it is NOT desired

 Can one run Woody-built binaries on Sarge?

you might be able to .. but it is NOT desired

--

you can usually run old binaries on newer systems
- a dumb/obvious example is to run 2.6 kernels
on a 2.4 kernel based systems ( it just won't work
unles you know exactly what to tweek to make to work )

you can usually run new binaries on older systems
that does NOT have the new features requirements
of the new apps and new libs
- common example would be to run newer kernels
and new apache/mysql/foo apps on the standard distro

-
if you mix and match binaries and libraries .. you are
on the bleeding edge ( alone in teh world ) and are truly
testing all the whacky things one can do to a system

-

i like mixed binaries and libraries that have been
copied from xx into yy because it's job security for me
as the outsider to come in and clean up the corp environments 
for a good chunk of change ...

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: dual monitor support

2005-12-25 Thread Alvin Oga


On Sun, 25 Dec 2005, rasputin666 wrote:

 
 I have several distributions of Linux and have as yet to find one that will 
 support dual monitors with my Gigabyte Radeon 9600XT graphics card.  My 
 question:  Will debian or any other distro do this?

all distros will work ...

- how much fiddling with the x11 config file is a separate issue
  and *you* will need to know what to look for in it

- dual mon config urls
http://www.linux-1u.net/X11/Dual/

c ya
alvin
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Question on backups using rsync

2005-12-21 Thread Alvin Oga


On Wed, 21 Dec 2005, Daniel Webb wrote:

 I read somewhere that this isn't a problem with rsync, that it only copies
 atomically.  So are snapshots even needed if using rsync? 

yes... snapshots is needed if rsync doesn't do what oyu want

 I'm curious as to the relative merits of rdiff-backup vs. rsync snapshots
 (http://www.mikerubel.org/computers/rsync_snapshots/).

==
== things gets messy ( aka fun ) if you want to recover any random file to
== any random time and date  
==  ( which is trivial to do if you perform the proper steps )
==

---
--- get into the habit of save it before you edit(destroy) it 
---
--- one you write it, its is 100x harder to undo that change
--- and is possible to recover under some/certain circumstances
--- otherwise, the previous copy is forever lost or corrupted
---

-- which way is the preferred way would depend on the task at hand
   and NOT the methodology

- to have a live backup of identical data files

- to save the previous known good state prior to the
corruption or [cr|h]acker

- to apply the changes to the backup or rsync or 
snapshot or foo-blah-blah are all the same and have the 
same problems and features if the files are modified or
not modified by the 1000 different ways to do it

rsync ...
- you can do dry-runs to prevent mistakes or see
what it will do before you do it

- lots of useful options
( -v, --bandwidth, --dry-run, logs, .. )
 
- copies everything from  Master into OtherDisk
which is good and bad depending on your paranoia level

- there is no history of what was overwritten unless you save
rsync logs 

rsync -v master:/home/  mirror:/home 21 |  \
tee /var/log/rsync.log

but that history does NOT let oyu recover the
the passwd files or other files prior to rsync

- you cannot undo the changes prior to rync running
unless you saved that copy BEFORE running rsync

- if undo of rsync changes is required, you have to save the
ALL the changes on the master server along with the full backups
and you can gurantee to reoover to any date/time as long
as you can gurantee full and incremental backups are 
not corrupted

- more stuff

snap-shots
- typically a full backup at that time

- sometimes, typically intended to be a difference between
what was previously saved as full backup and the current
set of changes

- some people apply the snap shots to the mirrors, backups
and snapshot servers...

- if you apply the changes, you cannot undo the changes
unless you save before applying changes

- if you leave the snapshots as just a file of changes,
that is a good thing

- more stuff

- find | tar | gpg  meeets all of my requirements for most all possible 
  potential disasters and recovery


- there are common basic requirements and assumptions that applies
  to all methodologies

- how long to recover the data you just lost
- what is the costs of recovering the data
- what is the consequence if your all important web server dies
- how much $$$ do you lose .. vs how much $$$ you spent to
protect against 1 failure mode 

- how good are you at disaster simulations, preparedness and 
recovery

- did you just put your /etc/shadow file into a world readable
file onto a un-maintained backup machine that doesn't ask for
passwds

- backup machines are checked how often for signs of [h|cr]ackers

- assume a malicious rm -rf / cracker is in your network and
machines, ( because they are ) ... now protect your data

- 9/10 [h|cr]ackers will be *-you-* that broke it by fiddling
with something and your alarms should be lighting up like
a xmas tree ... and if you didn't get those emails that
/etc/shadow was changed or other important files, you'll
never find the cancer growing in your servers

- endless list

- name and explicitly list 100 ways your server can die

- gazillion ways to make backups, mirrors and snapshots

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: How to bring HD activity to a minimum

2005-12-21 Thread Alvin Oga

On 21 Dec 2005, David A. wrote:

 Hello,
 
 since spring I run Debian on a EPIA PD-6000E, a complete fanless
 system. Noise is a big issue since it's running in my bedroom.

network boot, booting off compact flash, booting off usb will make that
box quiet, or boot a distro off /boot and no other directories on the hd

disks makes noises because its mechanical and syslogd is not necessarily
the major user of disk read/writes

if you have 256MB or more of memory, everything fits into memory
including minimal x11 + kde + network
- ie .. bootable CF, bootable usb, network boot, etc
( no moving parts.. no fans .. no power supply noise either )

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



apps Re: Question on backups using rsync

2005-12-21 Thread Alvin Oga


On Wed, 21 Dec 2005, Daniel Webb wrote:

 On Wed, Dec 21, 2005 at 02:16:29AM -0800, Alvin Oga wrote:
 
 One nit to pick here:
 
  - find | tar | gpg  meeets all of my requirements for most all possible 
potential disasters and recovery
 
 As I describe on my backup page, that's a terrible idea.  One corrupt bit and
 you lose *huge* amounts of data.

if you don't trust find|tar ... you have major problems with the machine's
reliability and these brand new commands nobody used for 30 yrs :-)

using any other favorite backup programs will suffer the same fate of
losing huge amounts of data, and more importantly, is there a way to
recover the lost data and/or alternative apps that doesn't have the bug
or just simply fix the hardware ..

- there is nothing sw can to fix flaky hardware  and unreliable
  hardware cannot be used as a means to invalidate methodology

- good methdologies would already acocunt for the various hundred
ways that it can fail in the first place

 I'm open to hearing any advantages of tar over afio for backups, because I
 don't know of even one.

:-)

i will bet any amount of $$$ and data .. that find | tar is better than
the average backup specific apps that meets all my backup requirements

my backup specs
- it will NOT corrupt my prev backups, say going back 5 years
- it is fast and is live with the simple change of an ip#
and untar as needed depending on the purpose of that tar files
- confidential data is encrypted and root read only

- i can restore to any random data and random time at any
time somebody says prove that it can be done

- it can support 20Terabytes of data in a 4U chassis ... and
obvisously, that data is also backed up ... i keep at leaast 
3 copies of everything in various state of readiness

- it doesn't costs more than the bare costs of the hw in both
labor to write or test the program and methodology

- it must survive a failure of 2 successive full backups
( ie have a work around backup failures )

- bare metal restore should be done in a matter of few minutes
except that restore of 10TB sized data will take a FEW seconds

- backup system must also be flexible and extensible and
can support 180degree methodology changes
( managers are known to change directions ya know and budgets
  come and go randomly )

- and it obviously has to be searchable

- some people like gui's... but i think gui's is for windoze kids

- more detailed specs... and semi endless list of major points

- find | tar meets all those specs above ...

and trivially scriptable and anybody can maintain it since
it's not wirtten in martian code, even if it might loook like it
after a few dozen people add their $0.01 to it

c ya
alvin 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: apps Re: Question on backups using rsync

2005-12-21 Thread Alvin Oga

hiya daniel

On Wed, 21 Dec 2005, Daniel Webb wrote:

 That's exactly what I'm saying: your tar | gpg methodology has not accounted
 for the chance of a few flipped bits, because if it had, it wouldn't lead to
 massive data loss, which it does.  Compressing/encrypting after archiving is
 inferior to compressing/encrypting before archiving when considering
 robustness.  I just can't comprehend how you could dispute that.

i been doing tar for 25+ years... so i trust it ... and yeah
each bversion of tar or any other apps has the same vulnerability
you are inferring, including your own *pio apps

tar is no better at checking for flipped bits, not better/wrost than any 
other application can figure it out

- it is in fact impossible for an app to know a bit
is flipped or not, unless itknew ahead of time what it is
supposed to have been

- whether its corrected on the disk platter, in the disk buffer
or in memory is a separate issue

applications has zero business changing my 1001  to 1000

- if you use md5 or anything other method to generate a unique
pattern, what guarantees that the md5 itself is not corrupted


- this is an endless argument of correcting what you think is an error
  on the fly without user intervention is impossible

- fixing disk errors on the fly... burst mode ecc, single bit ecc, etc
  is a spearate issue and is designed specifically for that purpose
  and has ZERO capability of the userland sw to change it other than
  to rewrite the original data and the new ecc databits

 
 code changes than tar in the last 5 years.  I'm guessing you don't know
 anything about it based on your comments.

this comment has degraded your possibly intelligent arguments into
useless /dev/null as you implied you do not understand who or what
you're talking about by making false/dumb accusations about your debator 
that happens to differ with your choices and reasons

 I still don't see anything in that list that tar has but afio doesn't.

good ... that's my whole point ...

 I *do*
 know one thing that afio has that tar doesn't: much greater robustness in the
 case of corruption.

robustness against corruption can be accomplished and guaranteed
at least a dozen different ways ... possibly hundred different ways

  Whether you trust your hardware or not,

that is one issue that has nothing to do with anything else

 it doesn't make
 sense to me to choose a less robust solution over a more robust solution.

robustness for you may be a micky mouse solution to others
and vice versa.

let the decision makers and customers decide what is important to you
and they can learn it or trust somebody's opinion over another

- you do it your way .. you are right .. in what you're doing

- i'll do it my way ... for what i need done ... out of what 
  is proposed, budgeted, required, etc, etc...

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Question on backups using rsync

2005-12-20 Thread Alvin Oga

On Mon, 19 Dec 2005, Daniel Webb wrote:

 In the case you're talking about, I suggest rdiff-backup assuming you can ssh
 to the web server.  The downside of just using (automated) rsync is that if
 you get corruption on your main system it may be copied to the remote system
 before you realize it, and the whole point of backup would be lost.

bingo .. exactly ... which is a major downside .. bummer ..

automated backup is worthless for that precise reason about corrupted main
systems and there's hundreds of reasons/problems that causes the
main system or backup system to have bad data rendering either or both
worthless

backups should be saved not mirrored ... and it's NOT the same thing

backups and mirrors are an issue of how much $$$ and time do you
lost if you lost the data forever, and work on an acceptable plan.
but, if one doesn't forsee/forecast the problems in their solutions, 
than, those other issues is non-issue at them time of implementing the
current backup or mirror plans

c ya
alvin
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Help with Linux selection please?

2005-12-20 Thread Alvin Oga


On Tue, 20 Dec 2005, Arafangion wrote:

 Personally, I feel that if one says that they are willing to _pay_, the test 
 should not recommend Debian, but rather the commercial distributions, that 
 bundle nice stuff out of the box.

the folks willing to pay real $$$ will usually dictate what the want and
why .. it doesn't matter whether you/we agree with their choices or not
or the way they run their distros, network, security, backups, etc, etc...

you can't change their mind, more like i can't usually change their minds 
unless they're solicting (professional) opinions of what to do 

- it's a lot easier to change things when the shit hit the fan
and now understand the avoidable problems

- they usually have some newbie or windoze folks runing the shop for them
  and we have to be more professional in appearance/words to make a 
  reasonable choice

- suse and redhat is the 2 worst possible distro, but people still pay 
  real big $$$ for it... and its good for job security

- nice commercial bundles does not always solve the customers
with $$$ because they usually have specific problems they need 
solved

- if they have the time and $$$ and realistic ideas of how to
  accomplish their goals, they get what they want ...

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Silicon Image 3114 and Seagate?

2005-12-19 Thread Alvin Oga

On Mon, 19 Dec 2005, Gene Heskett wrote:

 And I made a post to this list, instantly answered by a 5kb chunk of 
 undecipherable html from [EMAIL PROTECTED].
 
 How the hell do we get rid of this?

- add the bozo to the reject list of your mta
 
- do not buy goods/services from that entity :-)

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: ~/.mplayer/subfont.ttf

2005-12-17 Thread Alvin Oga


On Sat, 17 Dec 2005, Charlie wrote:

 I installed mplayer and when I click on the icon i get 
 ~/.mplayer/subfont.ttf.

cd ~/.mplayer
ln -s /usr/share/fonts/truetype/freefont/FreeSerif.ttf subfont.ttf

use whatever *.ttf file you want ...

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Soft RAID1 and SATA - Hardware failure test - I power off disk and system freezes

2005-12-15 Thread Alvin Oga


On Thu, 15 Dec 2005, Jan Stavel wrote:

 I switched off raid in Bios and installed Software Raid:
 
Personalities : [raid0] [raid1] [raid5]
md0 : active raid1 sdb1[1] sda1[0]
  497856 blocks [2/2] [UU]

good
 
 But if I try to power off a disk (unplug the power cable) the system 
 freezes. I cannot read /proc/mdstat. The only way to get the system 
 running is to do restart.

some motherboards does NOT like ( recognize ) tne 2nd disk on the same
ide cable if the primary disk is offline

 Do I do something wrong when trying hardware fauilure?

unplugging the ide cable or power cable to the drive is a ( real) good
test of software raid testing

you can also dd if=/dev/zero on the disk ( /dev/hdc ) too and try to see
if the sw raid ( running on /dev/hda ) rebuilds it for you

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Slow copy

2005-12-15 Thread Alvin Oga


On Thu, 15 Dec 2005, Ronny Aasen wrote:

 On Thu, 2005-12-15 at 12:42 +, Graham Smith wrote:
  Hi,
  
  This is perhaps one of the stranger questions to be asked but I'm looking 
  for 
  a utility that will copy a file slowly.
  
  Part of my ad hoc backup system is to copy the nightly backup tar file from 
  our production machine onto another machine. The problem is that the 
  production machine is not exactly what you would call high performance and 
  the file copy basically causes everything else to grind to a halt. It 
  doesn't 
  matter to me that the copy is done in 5 minutes or 50 minutes what matters 
  is 
  that it doesn't kill the server for 5 minutes a day.
  
  What I am basically looking for is a version of cp with a max copy rate 
  argument. I would write my own but I can't believe that I'm the only one 
  who 
  has ever wanted this feature so I suspect there is one already in existence.
  

you can use 'nice' on the backup script/programs to give it low
cpu priority

 if you do your copy with rsync, you can use the --bwlimit argument.
 if you do your tar's with --rsyncable you would not have to transfer the
 whole tar file each time either, only the differences. 

a gazillion ways to copy files from xxx to yyy machine :-)

 if you do not use rsync you can throttle your aplication with trickle or
 shaperd

c ya
alvin



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: tools Re: Slightly OT: Comments, ideas, or suggestions for improving websites

2005-12-12 Thread Alvin Oga

hi ya hendrik

On Mon, 12 Dec 2005 [EMAIL PROTECTED] wrote:

 I've never been able fo figure out what webmin does in sufficient
 detail to enable me to use it.

i know webmin is broken in terms of creating the correct
config files ... ( or good enuff for some .. but not 
the silly boat i want )
 
   that link to documentation -- documentation that fills you
   into the bigger picture, rather that just the
   out-of-context microprose most help systems
   provide.

tough to do

   that enable you to learn what's going on under the hood
   without forcing you to.

tough to teach by docs...
- teaching by example is okay i suppose

- teaching what's under the hood will take decades even
if you're a speed reader and a genious with iq over 120

   that tell you which configuration files they are going
   to modify/create/delete and why

that's where most gui tools screw up big time
in modifying/merging/updating old and new changes
along with user modified changes

   that read your configuration files and explain them to you.

bedtime story :-)

the kernel config gui ain't too bad .. ( simple )
- it tells yo a little about the option
- it tells you what to select if you donno
- it talls you it can break things if you donno what
you're doing

- the kernel gui sucks ... if you tell it to
skip isdn or flash mem stuff... it insists on popping up
all the isdn stuff just to make you click away

( it needs to be context sensitve )

 Of course that would all be easier if there were to be
 a uniform file format for configuration files.  And that
 might be possible if there were a uniform semantics.

it looks like rss, css, and html style is taking over
and its not much better than ole fashin man pages

 I don't think anyone has yet formulated a workable semantic
 framework for configuration.  Or have I missed something important?

nope ... its on the horizon

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: *nix cert

2005-12-09 Thread Alvin Oga


On Fri, 9 Dec 2005, Andrew Cady wrote:

 On Thu, Dec 08, 2005 at 07:01:50PM +, Andrew M.A. Cater wrote:
 
  LPI - then, potentially, RHCE if you can find someone to stump up for
  you once you've a proven track record.
 
 Do either of these actually mean anything to anyone?

if you mean lpi/rhce...  than those certs doesn't matter
to you either :-)
- some certs are designed to pass everybody,

while other certs are meant to mean something
and not all will pass no matter how many times
you take the tests

bs/ms/phd sometimes have universal meanings
since not everybody will pass ... some folks
are easier than other folks' to get certs/degrees

if you mean stump and/or proven track record ...
- some folks are ez to stump

and others will always be able to fix things or get around
the stump

- proven track record takes years to get established

- simple test of a dumb track record ?? ...
search for anything ... and see who shows up on the 1st page 
of the search results ( without paying to being listed )

- din-din time.. i'm done babbling :-)

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



tools Re: Slightly OT: Comments, ideas, or suggestions for improving websites

2005-12-08 Thread Alvin Oga

hi ya andy

On Wed, 7 Dec 2005, Andy Streich wrote:

 But I expect you to have something in mind as well -- something of your own 
 that has motivated you to create a new Debian site.

yup.. :-)

 Anyway, I'd love to see not just docs for new users but configuration 
 software 
 that plays an active role in plugging  the holes.  Don't just give me better 
 things to read (although that's great), give me a tool that finds and fixes 
 problems.

you want a tool to find other tools :-)

most of the config tools exists .. some good .. some terrible ..
and depending on the users level of requirements, some of the tools are
worthless if it doesn't do the remaining 5% - 10% of the work correctly

- ie.. faster to add/fix the missing line in the config files
  than to play with tools that is basically broken

  webmin is the purrfect example to me of what's broken,
  but is agoo dstart for beginners that like to point-n-click 
  because if you looked at the files, what to change in the config
  files would be deep void
- it's close but not good enuff for me or for me to tell
my customers to use it instead of paying me to fix it
especially after they already tried webmin and other tools

- tools to find tools ..
most of these tools already exists and does work,
but there is no one wrapper gui to select the various 
help me, please problem and resolutions

whomever writes a usable wrapper gui will do a fair amt of
notoriety and good-famous

- everything needs to be tested ...

- more you know .. the better it will be tested provided
time and resources is available for testing vs the 
oops we lost data.. quick, restore from backups

- tools for testing each major apps

- tools for testing hw compatibility ... just try and cross your fingers
- tools for dns config
- tools for sound config
- tools for kernel config
- tools for modules config
- tools for raid config
- tools for printer config
- tools for secure imaps/pop3 config
- tools for mta config
- tools for antivirus config and testing
- tools for anti-spam that actually work without too much time wasted
- tools for webserver config
- tools for db config
- tools for samba config
- tools for backups
- tools for copying xx to yyy ( anything to anywhere )
- tools for ... blah blah ...

- tools for general how to change from foo-version to woody to sarge or
  sid or foo-bar
- tools for security hardening 
- tools for security audits
- tools for buffer overflows
- tools for out-of-date or obsolete apps
- tools for more security blah-blahs

- tools for disks optimization
- tools for kernel optimization
- tools for nfs optimization
- tools for cpu/memory optimization
- ...

that covers some of the basics of the config problems

... endless list

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: *nix cert

2005-12-08 Thread Alvin Oga

On Thu, 8 Dec 2005, arden wrote:

 Slightly off topic sorry 
 
 but Im trying to brake out of my hardware suppport role and into a more sys 
 admin role 
 
 My company will not support this so im doing this off my own back 
 
 What cert would people recomend to do at home ? (This my own money here so 
 cant afford corporate rates)  
 
 I have a small home network running x86 machines So Aix is out unless can 
 find a p-series box cheap 

take apart your machines ... and put it back together
- buy/get/beg for spare sparts from everybody that is
throwing out their old junk and make it work ..

when you see people post problems in mailing lists, that xxx doesn't work
.. see if you can make it work on your boxes

certs are meaningless in most cases, but experiences in
being to fix problems far outweigh any cert and PhD

if you can't fix the problem, having a cert that says you're
a level-5 sage sys admin expert won't help you

the problem is the one that your boss cares about
that helped him get all the other monkeys off his back too

but some folks won't give you the time of day unless oyu
do have a cert... ( seems odd to me, that it's in their requirements 
for qualifications, and at the same time lists 5-10 yrs exp
and BS or MS preferred )

but if you have a BS/MS/PhD, you're over qualified to 
be doing sys admin but you will do that in either case
whether you want to or not ...

why people treat sys admin so badly, i donno ..
esp when it is the sysamdin who they turn to when the computer
breaks

- get a 4yr college degree ... 
$1200 for certs or a year of college tuition(?)

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: *nix cert

2005-12-08 Thread Alvin Oga


On Thu, 8 Dec 2005, arden wrote:

 I know I can do it been using linux at home for years no windoze boxes here, 
 need to prove it to closed minded Managers 

most hiring and managing managers knows .. what you do at home has
nothing to do with how you do stuff at work

there's a lot more to it .. say 10x more stuff to do at work
for the same task of swapping out say the dead disk drive

- policies, proceedures, prototcol, purchasing, accounting, etc,
etc

- more importantly.. documentation ... cover your butt with
hopefully your boss covering for you .. otherwise you'd be
standing naked and alone in front of the boss's bosses

corp sysadmin is way way different than admining at home ...
- if someone came to me and said they do this stuff at home,
i'd probably start ending the interview ( it's a big red flag )

- maybe, i'd put a broken machine in front of them, and say 
here fix it in 3 minutes and you got a job
( fix the hw or fix the kernel or fix the app or fix whatever 
  it is you say on your resume you can fix )

ie .. don't say you do stuff at home, even if you do .. everybody knows
that, been there, done that .. ( usually had bad experiences with 
folks that only did stuff at home vs doing sys admin for a 24x7 living )

what corp folks want to hear is you know about corp world
policies and proceedures because if you/somebody doesn't
tell somebody else the firewall will go offline at 12:00-1:00
and everybody will be disconnected, they all want to know
ahead of time..preferably days ahead of time 

( scheduled maintenance and preventative and all that stuff )

- most people do not have a 2nd hot spare either so if
you do change things and it breaks... your hot spare will be
helpful to get your ass out of jail 

- lots of planning/what if's ... to do the simplest tasks

either way .. having a cert will not help you with corp world admin'ing
depending on who the hiring manager is 
- 5 yrs or 10yrs or 20 yrs of doing it will help :-)

security clearances is a whole other ball game ... that will be
semi-required to get the job
- go after that ... it doesn't cost as much as certs

fun stuff ... with or without certs

c ya
alvin



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: *nix cert

2005-12-08 Thread Alvin Oga


On Thu, 8 Dec 2005, Tony Godshall wrote:

 What cert would people recomend to do at home ? (This my own money 
 here so cant afford corporate rates)  
 
  LPI - then, potentially, RHCE if you can find someone to stump up for
  you once you've a proven track record.
 
 nice tip, for a Debian list ;-/

maybe there is a DCE ??

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: *nix cert

2005-12-08 Thread Alvin Oga


On Thu, 8 Dec 2005, Justin Gallardo wrote:

 Haha, funny enough. I am currently a student at a four year, and a  
 term of tuition, including my housing costs (3 terms a year) was  
 $4600, for in-state tuition. I would say that a few good certs would  
 be much more cost effective.

costwize, i was just using costs of per-unit class time and
excluding housing/food/transportation/etc/etc/etc/ beer and pizza $$ too
and if you want .. stanford starts at about $25K per quarter
as does all them big-name private schools

cost bene of a 4yr degree is ez to figure out ...

just compare salaries for folks with BS/MS/PhDs
and salaries for those with just certs 

the problem is some folks with bs/ms/phD tend to also have certs
which can skew the results to what you want to see

general
folks with 4yr degree tend to make 50% or 2x or more than those with just
certs or 2 yr degrees ... and gazillion time more if you make it to 
founder shareholders
/generality

---

for me .. just having certs won't cut it, to get that ph interview call
to get to the next step .. 

c ya
alvn


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Using dd to clone smaller drive to larger drive

2005-12-07 Thread Alvin Oga

hi ya brian

On Tue, 6 Dec 2005, Brian C wrote:

 Warning to archive readers. I believe a typo in one of the commands 
 below will destroy your data. Read on...

more serious than typo .. :-)
 
 Alvin Oga wrote:
 [snip]
 
  - if you want to leave bad data behind
  
  mount /dev/hdb1 /mnt/new-disk
 
 HERE IT COMES
 
  tar cvfp old-disk-paritions /mnt/new-disk
 
 DON'T TYPE THE ABOVE.

definitely .. don't type the above psuedo cmd

all that will happen, if typed as is, is a big ole error
message and nothing harmful if that above was typed

but it was a typo as you pointed out .. thanx
- typo is missing | and corresponding extracting tar

it was meant as:

tar cfp - old-disk-partitions | ( cd /mnt/new-disk ; tar xvfp - )

- i mixed syntax for my tarcp alias in the prev 1st posted cmd
called tarcp  ( shorthand is good for some things )

old-disk-partitions  is things like /bin /var /usr /opt

/mnt/new-disk is exactly that, a newly formated and mounted disk

 I interpreted it to mean type:
   tar cvfp /dev/hda3 /mnt/new-disk/var

that can be one interpretation ... BUT, that is what was previously posted

you CANNOT use tar to copy a whole partition ( /dev/hda3 )
 
tar should have been bitching at you  

and at a minimum, your tar cmd will copy whatever is
the list of files  ( /mnt/new-disk/var ) into your device /dev/hda3 
per your tar command

/dev/hda3 might go blank or tar might bitch about no data
to copy or that it's a cowardly command ( no data to write )

have fun 
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Slightly OT: Comments, ideas, or suggestions for improving websites

2005-12-07 Thread Alvin Oga

On Wed, 7 Dec 2005, Mark Crean wrote:

 The OP's post was sincere and his questions worthwhile. His site is also 
 new and so not yet fully worked out, so far as I can tell. I think he 
 deserves more than you appear able to give.

yes .. always give credit to those willing to put in time
and effort into free documentation and other relevant info ...
- and if they are looking for helpers, one could step in
and help fix the problems they're having

what someone doesn't like may be what others do like ..
- choice is good 
- too many choices is bad

those that put in the initial time to setup a quickie ( the ez part ) may 
quickly die out since it's a lot of work  or stay for the duration ..  a
yr, or 5 yr or more depending on their goals/aspirations ..

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Slightly OT: Comments, ideas, or suggestions for improving websites

2005-12-07 Thread Alvin Oga


On Wed, 7 Dec 2005, Andy Streich wrote:

 Sometimes it's about the personal requirement for individual recognition, 
 but other times it has more to do with an individual having a vision and 
 trying it out.  That's not something we should be pushing back on.  Sure it 
 would be nice if all these people found a way to cooperatively produce all 
 the Debian-related material we all wish for -- and that should always be 
 tried.

sometimes people see voids in other well established sites and prefer
to fix the problem ..
- fix their stuff... or start your own to fix it the right way

---

another example of forking/splintering of distro's ..
- too many debian distro's ..
- it'd be lot better, a bigger/better super-distro if all
the efforts/fixes/energy is in the mothership .. but ...

 But figuring out how to become part of the relevant group, learning 
 who needs to be influenced, and, frankly, playing the politics that are 
 always part of a group can sap the creative energy from a person with a good 
 idea.

bingo .. one can't please everybody ...

c ya
alvin
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Slightly OT: Comments, ideas, or suggestions for improving websites

2005-12-07 Thread Alvin Oga

On Wed, 7 Dec 2005, Josh King wrote:

 All I can do is give my assurances that I plan to be in this for the 
 duration. Those who know me know I'm not one to give up easily ;-)

yup...  from what i can see so far ..
 
 As for help to fix the problems, I would welcome anyone willing to roll 
 up their sleeves and dig in. I'm not claiming to have all the answers, 
 and I definitely am not a super-guru.

you will be when your site is complete to your satisfaction
for that instant or forever chasing the end of the rainbow

c ya
alvin
i have my paws full of toys to fix/cleanup too ..



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Using dd to clone smaller drive to larger drive

2005-12-06 Thread Alvin Oga

good email addy 

On Tue, 6 Dec 2005, Brian C wrote:

 /dev/hda is the Debian Sarge system, w/ 3 partitions.
 /dev/hdb is a new slightly larger drive w/ no partitions.
 
 /dev/hda may have a bad block or two, and so the plan is to clone it to 
 the new drive, remove the old drive, move new drive to /dev/hda (primary 
 master) and then run from the new drive.
 
 Can I just type (as root):
 
 dd if=/dev/hda of=/dev/hdb

yes you can.. but...
 
 and will that just work?

no ... it might not work ... because youwill be copying the suspect
bad data/bad block from the suspect bad disk onto the new disk

dd is low level and will ocpy anything .. including bad data
and sectors marked as bad by sw ( badblocks, etc ), but, it should
not copy tracks/sectors marked bad by the disk controller fw 

- if you want to leave bad data behind

mount /dev/hdb1 /mnt/new-disk
tar cvfp old-disk-paritions /mnt/new-disk
sync
umount /mnt/new-disk

boot the new disk with a floppy or bootable cdrom 
and rerun grub/lilo on the new disk


 Should I first set up the new drive with identical partitions to the old 
 drive?

only if you know you won't outgrow the old paritions
 
if you used the dd command you suggest ( dd if=/dev/hda of=/dev/hdb )
you may or many not have extra space

 If so, what can I do with the extra space?

use it as spare .. make another partition with the rest of the
unused space

you will also have to watchout for the number of heads
on /dev/hda vs /dev/hdb when copying 

- cylinder * heads * sectors is remapped into mumble-jumble

you may or many not be able to truncate the partitions on hdb
after you copied the smaller hda onto hdb

it's bad idea to truncate large partitons with say 100MB of free
space at the end of the partition and create a new 100MB partition
out of it .. if you're careful .. it will work for a while
  
 What will happen if dd encounters a bad block?

depends on how the bad block is marked
- marked by sw vs marked by firmware vs marked on the track itself
- all apps will skip around bad blocks marked by fw or hw
unless you make a custom-app.asm to read the badblocks itself

- lots of fun stuff to do

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: 3rd party Madwifi packages for Debian Sarge won't build

2005-12-05 Thread Alvin Oga

On Mon, 5 Dec 2005, Ed Young wrote:

 I'm trying to install madwifi to get my dwl-g510 wifi card working.
 Atheros chipset.
 
 I can't find madwifi packages when searching the stable branch, so I
 downloaded the file madwifi-source_20041023-1_all.deb from 
 http://madwifi.sf.net

that's ( sourceforge ) deprecated/obsolete

you should get the latest drivers ( sources or *.deb ) from 
http://Madwifi.org
http://Madwifi.net/Mirror ( urls w/ precompiled drivers )

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Internet Connection Speed Test

2005-12-05 Thread Alvin Oga

On Mon, 5 Dec 2005, Mike McCarty wrote:

  e.g. www.speakeasy.net/speedtest/ , but I need to test from a terminal as I

download the kernel files from kernel.org

wget http://www.kernel.org/your-favorite-kernel.bz2

or use scp 

both tellls you how fast you are .. if you know the size of the
files and how long it takes .. down the miliseconds

- do it again, and you will probably get a completely 
different answer

- another dumb test is to use 
traceroute your-favorite-site.foreign-country.com

- you speed will vary depending on where you need to go
  and which isp/tier-2/tier-1 routers you went thru

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Internet Connection Speed Test

2005-12-05 Thread Alvin Oga


On Mon, 5 Dec 2005, Mike McCarty wrote:

 Alvin Oga wrote:
  On Mon, 5 Dec 2005, Mike McCarty wrote:
  
  
 e.g. www.speakeasy.net/speedtest/ , but I need to test from a terminal as I
 
 Watch your attributions! I DID NOT WRITE THAT!

never said you did ... watch foretc..

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Linux crashing often

2005-11-20 Thread Alvin Oga


On Sun, 20 Nov 2005, Alex Goldman wrote:

 1. ran memtest86 for 15 minutes, it found no errors (I think the whole
 test  suite may take hours)

that is typically a waste of time, since you cannot do anythign else
whiles is bz pretending to diag your system ( that used to work )
 
 2. ran dd if=/dev/hda of=/dev/null, which finished without errors

reading from a system that shows problems is a bad idea, in that
it may aggrevate the problem

or can can show you can read, like you were able to do, murphy is on your
side this time

 3. tried to run fsck on /home, but it doesn't do anything useful, just
 returns immediately, saying the file system (ext3) is clean

umount /home
e2fsck /dev/homewhatever partition number /home was
- it should take a few seconds and longer if you have it populated

 4. tried to remount / read-only to run fsck on it too, but / is
 busy, and even then it's also ext3, so fsck probably wouldn't be
 useful

use a standalone disk ( cd ) if you don't want to wipe out your disk

 QUESTIONS:
 How long is memtest86 supposed to take per Gig?

waste of time ...

 How to test other hardware, especially the hard drive, motherboard?

one at a time

since the machine can survive the night in idle...
you probably have:
- bad cables
- bad cpu fan or loose heatsink
- bad power supply
- or memory stick that is running hot 
( your case fans is missing or dying or dead )

 How to perform useful checks on ext3?

e2fsck /dev/whatever .. but you have to be running from a standalone cd
or something other OS other tnan the one (disk)  you are trying to test

 How to fsck the root partition? I can't remount it ro, because it's busy.

nothing special about root  vs /var, /home, /usr ...
or whatever you did to the fs

c ya
alvin



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: looking for a transparent hardware RAID controller for debian

2005-11-17 Thread Alvin Oga


On Thu, 17 Nov 2005, Ron Johnson wrote:

 Money really does == speed.

sorta... depends ..

i'd say it's more like:

technology + know-how == speed | price | performance | reliability | capacity
( choose 4 of the 5 criteria )


killers would be :

namebrand + marketing/advertising hipe == cannot be fired for wrong options

have fun
alvin
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: spam howto

2005-11-17 Thread Alvin Oga

On Thu, 17 Nov 2005, kamaraju kusumanchi wrote:

 Matt Price wrote:
 
 Hi folks,
 
 Looking for a simple spam-control howto.  I have tried setting up
 bogofilter  spamassassin in the past  I've always run into trouble;
 the process sometimes seems incredibly complex.  
 

spam howto ... gazillion options ...
http://Linux-Sec.net/Mail/AntiSpam


what is the critiria...
- no false positive allowed ?? in which case, guessing
if it is a filter based on scores probably will not work

- some spam filters work better for say nigerian spam and porno
spam but will bomb on say insurance spam and medical spam

- what is your definition of spam ... which will depend
on if its a single user or corp mail server where catalogues
from dell is spam to you but not spam to [EMAIL PROTECTED]

- who are you sending/receiving emails from will also dictate
which spam filter you will need to be using

- use different accounts for different purposes which will
eliminate more than 1/2 or all of your spams on the other accts
( it's easier to deal with spam on one acct than on all accts )

simple solution ...
- use the mta's built in antispam provisions ...
( a couple minuts to tweek/enable it ..

- look at the examples ... ( from google/yahoo )

- this can get rid of 90% - 99% of your spams
when you configured the built in filters properly
which is non-trivial for your environment

messy solutions
- use any random spam filters from random.xyz.com 
- take your time to figure things out to see how it works
- for the amt of time spent, its NOT worth the extra 
  5% or so of additional antispam filter it added
  vs the generic spam filters that is a matter of minutes
  to configure

let-them-do-it-for-me
- you get what you let them do or not do 
- you're stuck with their filters

- there is no simple answer for the spam solution since it will
  be different for everybody


- for me, one false positive ( a real email flagged as spam ) is
  completely unacceptable on work accounts

c ya
alvin



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: web-based http password/group manager

2005-11-14 Thread Alvin Oga

On Sun, 13 Nov 2005, Steve Lamb wrote:

  vi ... takes about 5 seconds bring up the files to add/delete users :-)
 
 Yes, because as we all know vi is really web based.  No, really.

it should be fun to write a front-end to vi to make it look 
like a point-n-click thingie ma jig for those that insist on web-based
( presumably over http or https if they're smarter )

c ya
alvin 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Debian Raid Crash Repair

2005-11-14 Thread Alvin Oga


On Mon, 14 Nov 2005, Siju George wrote:

 I had a mirror o sarge with 2 disks. One of them failed now. I had
 given an option for 1 spare disk while configuring Raid. Could some
 one please tell me what I should do to Place a new disk and recreate
 the mirror?? Should I manually partition the new disk or is there a
 command that I can run after connecting the disk so that the Raid
 Partitions will be created automatically and the rest of the space in
 the hard disk be freely available? I would like to place an 80 GB disk
 instead of a 40 GB one.

- it would be pointless to use a new 80gb disk instead of a 40gb disk
- the other 40gb is sorta wasted and unused

- if your system crashed:
- why did it crash
- how did it crash
- when did it crash
- did you change software/upgrades
- is it still running in degraded mode
- did you backup the data on a new media ( eg the new 80gb disk )

- buy hardware that doesn't break ... disk doesn't die as much
as dead fans or dead power supplies ...
ie .. if you didn't replace fans and ps before ...
the vendor of your disks is probably throwing it around 
like baseballs

- if your raid is configured properly ..
- you will be able to pull any single disk out and it will
still boot and operate ( but you dont have the redundancy anymore)

- you will be able to install a new disk, partition it the
same as the disk you're replacing, and the raid should 
start syncing the new disk into the raid array

- cat /proc/mdstat to see what is doing or not doing
- if its syncing .. leave it alone .. do not power off,
or add new files, unless you like to be on the bleeding
edge and test that the raid stuff is working right

c ya
alvin



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: changin XTerm colors

2005-11-13 Thread Alvin Oga


On Sun, 13 Nov 2005, Andreas Rippl wrote:

 On Sat, Nov 12, 2005 at 08:58:23AM -0800, John L Fjellstad wrote:
  I tried to change the XTerm colors by putting these lines in my
  ~/.Xresources file:
  XTerm*Background: black
  XTerm*Foreground: white
  
  But it has no effect.  Anyone know what the problem is?

u forgot, didn't know (?) to do: 
xrdb -merge ~/.Xresources
( it's buried in the docs too )

than
xterm

and now for fun ..
- try changing the fonts
- than colorize your prompts
- or add /home/rippl#  to the title bar
- or gazillion billion other silly options

 alias xterm='xterm -bg black -fg white' 
 has always worked fine.

it'd better :-)

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: web-based http password/group manager

2005-11-12 Thread Alvin Oga


On Sun, 13 Nov 2005, Hamish Moffatt wrote:

 Can anyone recommend a good web-based (CGI, PHP etc) manager for HTTP
 password/group files?
 
 Specifically I need to maintain a list of users, and assign the users to
 one or more groups.

vi ... takes about 5 seconds bring up the files to add/delete users :-)

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: web-based http password/group manager

2005-11-12 Thread Alvin Oga


On Sun, 13 Nov 2005, Hamish Moffatt wrote:

  vi ... takes about 5 seconds bring up the files to add/delete users :-)
 
 This is true ;-) Except for encrypted passwords. Anyway, I want
 web-based so that web accounts can be administered more simply.

couple minutes to make a cgi-script that:

func add users()
htpasswd -c .htpasswd newuser

htpasswd administers its passwd automatically
and nothing to do about it .. including
changing from des to rsa to foo-encryption

find and delete users()
if [ grep user .htpasswd ]
  grep -iv user  .htpasswd.old  .htpasswd 

add the cosmetics as needed, or more importantly,
filter out all the whacky things like rm -rf / as
a username and/or passwd and watch for race conditions

or install somebody else's appp and spend min/hrs/days/weeks
trying to figure out what they intended for you to be doing

either way.. you will still need to make a webpage
that calls their cgi or your cleaned up cgi-as-above
to change your all important .htpasswd and .htaccess 
and other equivalent files

c ya
alvin



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: HD in PIO Mode since kernel 2.6.14

2005-11-11 Thread Alvin Oga

On Fri, 11 Nov 2005, Andrey Andreev wrote:

 Ricardo Teixeira wrote:
  Andrey Andreev wrote:
  Ricardo Teixeira wrote:
  Since I updated to 2.6.14-1-686, hda is in PIO mode, and when I do
  hdparm -d1 /dev/hda i get HDIO_SET_DMA failed: Operation not
  permitted.
...

  And my controller is an nForce2.

says to turn on the nforce ide drivers... ( they're taking over the world
and making binary only ide drivers too )

if insmod fails for 2.6.14.*,
you'll probably need to start from a clean kernel from kernel.org 

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: kernel-compile-troubleshooting -- help with a howto

2005-11-11 Thread Alvin Oga


On Fri, 11 Nov 2005, Matt Price wrote:

 I've compiled my own kernel numerous times but am not
 programming-literate; often I wish there was a howto that explained the
 significance of certain common problems that I seem to have over and
 over again.

which problems

  Haven't found one, though, so thought I'd write my own: 

good idea
 
 http://wiki.debian.org/KernelCompileTroubleshooting

 Unfurtunatley, I'm so ignorant, 

nah

 I can't really answer my own questions!

nah .. whether it's the right answer or one of many dozen right 
answers is the question

 Therefore, I'm asking for help.  I'd like to hear what is
 wrong, misleading, or justp lain missing from this document.

there's already (too many) generic kernel howto
- most address their tidbits the author wanted to cover
but not other stuff

 Sometimes the standard howto is not enough.

or too much info ( usually the case )

if the target audience are beginners, and if the idea is to simplify
generic kernel compiling, less info is better ?? ( imho )

#
# make a script make-kernel-for-my-box.sh if compiling
# a kernel is too much headache .. 99% of all this is scriptable
#   - the 1% is the actual reboot and see if it works
#
cd /usr/local/src
get the latest kernel from kernel.org
tar jxvfp linux-latest.tar.bz2
cd linux-latest

( optional ) make dep, make clean if you're paranoid
make bzlilo
- this assumes the defaults is good enuff for some
folks that is not paranoid and don't want to fine
tune this or that

make install
- usually installed as /vmlinuz and /System.map
- mv /vmlinuz /boot/vmlinuz-latest
- mv /System.map /boot/System.map-latest
make modules
make modules_install
- cp .config /boot/config-latest
- update lilo or grub
- reboot

some minor tweeking ..  ( fixing problems )
cd linux-latest
make xconfig

- start turning everything off and/or use the default
from the help

- you will need to make sure your motherboard chipset
is turned on or as a module in the kernel

- check and study the output of lspci and find the
  corresponding kernel option in the kernel config gui

- figure out which file systems you want to support

make 
make install
...

some security tricks .. ( tweeking to minimize buffer overflow risks )

apply kernel patches to harden the puppy ...

by this point, you shouldn't be needing a kernel-howto
other than for the detailed specific security hardening howto



another common problem is  doesn't work, where xxx is
some kind of disk, sound, network problems

- one has to check which chipset is used ( lspci )
and turn on that driver in the kernel

another common problem is the modules doesn't install

- the gcc to use for making and installing the modules have to
be the same gcc that was used to compile the original kernel
that is being used/booted


 1. Compile-time problems
 setting gcc version
 
 GCC is the gnu-c-compiler

playing with gcc is asking for next generation troubles but that's
part of the fun
- you'd also need to have the proper glibc, bash, /lib
and other cousins

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: files became readonly!!

2005-11-10 Thread Alvin Oga


On Thu, 10 Nov 2005, Johan Ask wrote:

 Maybe i was to quick to ask the list... I rebooted and it told me to manally
 run fsck. I did and know it works properly...
 But i still want to know the cause...

i've seen this bug on other distro too ..

- for us, if you remove terabytes of files on reiserfs, ext3
  there's some chance that the systemw ill remount itself ro
but than again, it also went ro mode once for 20GB fs too
on different older boxes ( k6-450 w/ slackware w/ reiserfs )

- no magic formula for debugging

- reboot the box and its all happy again, or sometimes,
  the whole 4TB partition needs to be reformated ( courtesy of dell )

- latest ext3 utils, or latest reiserfs and latest kernels
  at the time ( 2.4.30/31 or 2.6.12/13 series )

- the ro problem is not distro related ...

- since it's not recreatable .. oh well ..
  backup.. backup .. backup .. if the data is important

c ya
alvin 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Problems with kinput2

2005-11-07 Thread Alvin Oga

hi ya

 On Sun, Nov 06, 2005 at 10:09:59PM -0500, Bryan Donlan wrote:
 
  I also have the following in my ~/.xsession:
  [...]
  export LANG=en_US.UTF-8
  export LC_CTYPE=en_US.UTF-8

um... did you want to see english or japanese text ??

export LANG=ja_JP.utf-8
export LC_ALL=ja_JP.utf-8

notice too, that i use LC_ALL instead of lc_ctype

the utf-8 and UTF-8 and utf8 and UTF8 seems to be 
case sensitive depending on which howto you read

  export XMODIFIERS='@im=kinput2'
  kinput2 -xim -kinput -canna 

since you're trying to run kinput2, i presume your want
to input characters and see kanji on the screen

those environment variables need to be export to your xterm
sesesions if it didn't automatically inherit it from X11

env or printenv to see that its value is set to

locale -a output will list the supported languanges
and it doesn't know that you have missing fonts ...
but you will when you see jibberish

 kinput2 -canna -xim -kinput 
 export LANG=ja_JP; export LC_ALL=ja_JP;export XMODIFIERS=@im=kinput2

manually running those options in your xterm/kterm should work
provided you have the proper fonts

- don't forget to tell X11 where your kanji fonts is 

more kanji fun 
http://Linux-CJK.net/Howto

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Wireless card...

2005-11-07 Thread Alvin Oga

On Mon, 7 Nov 2005, Martin Fluch wrote:

 Hi Finnish friends!
 
 A friend of mine who got an wireless access point and would like to
 connect his desktop PC (running under Debian) to it. But I have a bit
 problem to decide which wireless PCI cards offered at Verkokauppa are
 supported by the most current linux kernels. Anyone with experience?

buy a cisco card ( not linksys ) or atheros chipset based or prism54 based

for a list of cards or drivers in the kernel

{/usr/local/src}/linux-2.4.31//drivers/net/wireless/

if you use a usb wifi stick .. it can be used on laptops too

if you want wpa with your ap .. you're on the bleeding edge

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Wireless card...

2005-11-07 Thread Alvin Oga

hi ya

 As well as checking compatibility here in the LHCH
 (http://www.tldp.org/HOWTO/Hardware-HOWTO/) you might also want to
 look up compatibility under ndiswrapper
 (http://ndiswrapper.sourceforge.net/).

if you're using, its NOT a compatible hw, since you're using 
the windoze drivers on the cdrom that came with the card

- if the wifi card using broadcom ... most of the broadcom
  is not supported by any linux drivers
- but there are some broadcom chips like the tigon(?) gigE
stuff that have a native linux driver

- if you use ndiswrapper..
- you can only be a wifi client
- you may or may not be able to run wpa
- you may or may not be able to talk to any random 
  microsoft based commercial AP
- ... semi endless list ...

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: HD in PIO Mode since kernel 2.6.14

2005-11-04 Thread Alvin Oga


On Fri, 4 Nov 2005, Andrey Andreev wrote:

 And my controller is an nForce2. 
 Which makes it even more mistifying.

not mystifying ... nforce sometimes make their own ide controller 
and it's not open source driver ( no source code, binaries only )
- see if you have the nvidia ide modules
and/or d/l and try it ...

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: HD in PIO Mode since kernel 2.6.14

2005-11-04 Thread Alvin Oga


On Fri, 4 Nov 2005, Andrey Andreev wrote:

 I don't have the nvidia modules and really don't want them. I'd much
 rather stay with 2.6.12 than live with the pain of a binary module
 tainting my kernel.

if you have a motherboard that used the nvidia chipset for ide,
than too late  you have no choice if you want [u]dma mode
otherwise, you're stuck in ata-33 mode w/o dma even if your disk
is superfast 15K rpm ata-133 disks

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: HD in PIO Mode since kernel 2.6.14

2005-11-04 Thread Alvin Oga


On Fri, 4 Nov 2005, Wackojacko wrote:

 I don't have the nvidia modules and really don't want them. I'd much
 rather stay with 2.6.12 than live with the pain of a binary module
 tainting my kernel.
  
  
  if you have a motherboard that used the nvidia chipset for ide,
  than too late  you have no choice if you want [u]dma mode
  otherwise, you're stuck in ata-33 mode w/o dma even if your disk
  is superfast 15K rpm ata-133 disks
  
 I have an nforce4 motherboard running dma enabled with the standard 
 nforce2 ide driver from the kernel :).

bingo ..  exactly ... nvidia like to control *your pc* even
if it's not video or (nvidia) network 

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: HD in PIO Mode since kernel 2.6.14

2005-11-04 Thread Alvin Oga


On Fri, 4 Nov 2005, Wackojacko wrote:
 
 I have an nforce4 motherboard running dma enabled with the standard 
 nforce2 ide driver from the kernel :).
  
  
  bingo ..  exactly ... nvidia like to control *your pc* even
  if it's not video or (nvidia) network 
  
 Exactly how is this different from using the piix module for intel 
 chipsets that is built in the kernel.

if you use generic intel drivers .. you may or maynot get
dma mode on nvidia ide chipset or other chipsets
- some folks won't notice the ddifference either :-)

 BTW I also use the forcedeth module for network.  I do admit to using 
 the nvidia driver for video but if you want decent 3D performance you 
 have to use the non-free ATI drivers as well AFAIK.

on the other hand, if you're using $1,000 - $2,000 3D nvidia cards, it 
beats the living [EMAIL PROTECTED] out of ati video cards
- at this point, ati lost the battle

and again, you're forced to use the nvidia drivers for nvidia
graphics chipsets

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: What to do with attackers?

2005-11-04 Thread Alvin Oga

On Fri, 4 Nov 2005, Thomas wrote:

 recently, i can see ofthen brute force attacks in my ssh logfile.
 A friend of mine, who has the same ISP gets the same bruteforce attacks.
 
 What would be an adequate reaction to repeated ssh bruteforce attacks?

you should know if and that your systems are 99% secure as is 

- proving it to yourself or against the attackers is a 
separate problem

you should have all your important data backed up elsewhere
where you can guarantee with 100% accuracy you can restore any
file to any date and time
 
 Should i contact the owner of the attackers ip address?

if you like ..

 Should i do something else?

if you like .. tons of other things ... like do your own real work
and not worry too much about the free audits unless you're not sure
about the security of ALL your systems and data :-)



in my world... the attackers is 100% successful if they take more
than a minute or two of my time including checking log files
and who they are etc..etc.. unless that is the actual tasks
i'm supposed to be doing at the time and being paid for tracking
them down

c ya
alvin



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



  1   2   3   4   5   6   7   8   9   10   >