The Fedora Mystery

2004-02-10 Thread Omer Zak
I bought a new laptop, paid the MS-Tax (for Windows XP), and I want to 
install Linux on it.
When looking for ISO images of Fedora, I found no Israeli mirror of 
Fedora ISO's.
The most recent mirrored version in that lineage is RedHat 9.
So I am downloading Fedora ISOs (slowly) from abroad.

Meanwhile, the above observation leads me to asking, in a nervous way, 
whether there is any brown bag type problem with Fedora or with its 
level of Hebrew support.
--- Omer
My opinions, as expressed in this E-mail message, are mine alone.
They do not represent the official policy of any organization with which
I may be affiliated in any way.
WARNING TO SPAMMERS:  at http://www.zak.co.il/spamwarning.html



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: The Fedora Mystery

2004-02-10 Thread Yedidyah Bar-David
On Tue, Feb 10, 2004 at 10:03:23PM +0200, Omer Zak wrote:
 I bought a new laptop, paid the MS-Tax (for Windows XP), and I want to 
 install Linux on it.
 When looking for ISO images of Fedora, I found no Israeli mirror of 
 Fedora ISO's.

ftp.tau.ac.il:/pub/OS/RedHat/Fedora-core-iso

 The most recent mirrored version in that lineage is RedHat 9.
 So I am downloading Fedora ISOs (slowly) from abroad.
 
 Meanwhile, the above observation leads me to asking, in a nervous way, 
 whether there is any brown bag type problem with Fedora or with its 
 level of Hebrew support.

I used it very little up to now, but haven't heard bad things about it.
I know of few people that installed it and are happy.
-- 
Didi


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: The Fedora Mystery

2004-02-10 Thread Jason Friedman
Actcom host a mirror of Fedora:

ftp://mirror.israel.net/pub/fedora/linux/core/1/i386/os/
or
http://mirror.israel.net/pub/fedora/linux/core/1/i386/os/
You can see their list of mirrors at

http://mirror.israel.net/

Jason

I bought a new laptop, paid the MS-Tax (for Windows XP), and I want to 
install Linux on it.
When looking for ISO images of Fedora, I found no Israeli mirror of 
Fedora ISO's.
The most recent mirrored version in that lineage is RedHat 9.
So I am downloading Fedora ISOs (slowly) from abroad.

Meanwhile, the above observation leads me to asking, in a nervous way, 
whether there is any brown bag type problem with Fedora or with its 
level of Hebrew support.
--- Omer
My opinions, as expressed in this E-mail message, are mine alone.
They do not represent the official policy of any organization with which
I may be affiliated in any way.
WARNING TO SPAMMERS:  at http://www.zak.co.il/spamwarning.html



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]





=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: The Fedora Mystery

2004-02-10 Thread Aaron
Hi Omer,

I had Fedora running for months with nary a problem and hebrew was also 
an easy fix.

Why are there no mirrors?
I have no idea but I do think that bittorrent (sp) is the preferred way 
to download it.

I also downloaded the iso's.

Aaron
Omer Zak wrote:
I bought a new laptop, paid the MS-Tax (for Windows XP), and I want to 
install Linux on it.
When looking for ISO images of Fedora, I found no Israeli mirror of 
Fedora ISO's.
The most recent mirrored version in that lineage is RedHat 9.
So I am downloading Fedora ISOs (slowly) from abroad.

Meanwhile, the above observation leads me to asking, in a nervous way, 
whether there is any brown bag type problem with Fedora or with its 
level of Hebrew support.
--- Omer
My opinions, as expressed in this E-mail message, are mine alone.
They do not represent the official policy of any organization with which
I may be affiliated in any way.
WARNING TO SPAMMERS:  at http://www.zak.co.il/spamwarning.html



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: The Fedora Mystery

2004-02-10 Thread Omer Zak
Thanks to all who replied!
--- Omer
My opinions, as expressed in this E-mail message, are mine alone.
They do not represent the official policy of any organization with which
I may be affiliated in any way.
WARNING TO SPAMMERS:  at http://www.zak.co.il/spamwarning.html
Yedidyah Bar-David wrote:

On Tue, Feb 10, 2004 at 10:03:23PM +0200, Omer Zak wrote:
 

I bought a new laptop, paid the MS-Tax (for Windows XP), and I want to 
install Linux on it.
When looking for ISO images of Fedora, I found no Israeli mirror of 
Fedora ISO's.
   

ftp.tau.ac.il:/pub/OS/RedHat/Fedora-core-iso

 

The most recent mirrored version in that lineage is RedHat 9.
So I am downloading Fedora ISOs (slowly) from abroad.
Meanwhile, the above observation leads me to asking, in a nervous way, 
whether there is any brown bag type problem with Fedora or with its 
level of Hebrew support.
   

I used it very little up to now, but haven't heard bad things about it.
I know of few people that installed it and are happy.
 



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: The Fedora Mystery

2004-02-10 Thread Ariel Biener
On Tuesday 10 February 2004 22:03, Omer Zak wrote:
 I bought a new laptop, paid the MS-Tax (for Windows XP), and I want to
 install Linux on it.
 When looking for ISO images of Fedora, I found no Israeli mirror of
 Fedora ISO's.
 The most recent mirrored version in that lineage is RedHat 9.
 So I am downloading Fedora ISOs (slowly) from abroad.

ftp://ftp.tau.ac.il/pub/OS/RedHat/Fedora-core-iso/

yarrow-i386-disc1.iso
yarrow-i386-disc2.iso
yarrow-i386-disc3.iso


--Ariel

 Meanwhile, the above observation leads me to asking, in a nervous way,
 whether there is any brown bag type problem with Fedora or with its
 level of Hebrew support.
  --- Omer
 My opinions, as expressed in this E-mail message, are mine alone.
 They do not represent the official policy of any organization with which
 I may be affiliated in any way.
 WARNING TO SPAMMERS:  at http://www.zak.co.il/spamwarning.html



 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]


  +++
  This Mail Was Scanned By Mail-seCure System
  at the Tel-Aviv University CC.

-- 
--
Ariel Biener
e-mail: [EMAIL PROTECTED]
PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Configuring GDM to limit user actions

2004-02-10 Thread Oded Arbel
On Sunday 08 February 2004 15:34, David Sapir wrote:
 Hi,

 I would like to know how to configure Gnome on RH9 for a specific user:
 * control the menus from the start menu (which item will appear in the
 menues)
 * control which application a user can activate (run)
 * require a root password (or a previledged user password) for certain
 applications

 I did not find a suitable answer for that on the web.
 Maybe anyone has a lead for me to follow?
 If you think  I cannot accomplish that in Gnome environment, please tell me
 which env and how to do it (or where to look for the answer), because I
 don't know any other GUI environments.

Check out KDE's kiosk mode. If you're inclined to digging in, it will 
provide important clues. otherwise you might just like to switch to KDE. 
AFAIK, GNOME has no kiosk mode support nor any interest in providing such.

-- 
Oded
::..
The first time I encountered setjmp() was in an Amiga program ported from 
Unix. Hmm, what's setjmp()? I said, pulling up the man page. I read the man 
page. *GASP* GLARGGGPPPHHTT!!! [EMAIL PROTECTED]^U! I exclaimed, and rolled 
my chair over backwards as I fainted. 
-- From: [EMAIL PROTECTED] 

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Apache virtual server redirection

2004-02-10 Thread Tal Achituv
Hi!

I would like to redirect every foo.mydomain.com to
www.mydomain.com/sites/foo

My guess is that it could be done using the virtualserver directive in
httpd.conf
But i was unable to find any reference to such an example.

Anyone knows how to do that?!

Thanks!
Tal.


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Apache virtual server redirection

2004-02-10 Thread Yonah Russ
Try mod_virtual_host
VirtualDocumentRoot /www/host/sites/%1
yonah
Tal Achituv wrote:

Hi!

I would like to redirect every foo.mydomain.com to
www.mydomain.com/sites/foo
My guess is that it could be done using the virtualserver directive in
httpd.conf
But i was unable to find any reference to such an example.
Anyone knows how to do that?!

Thanks!
Tal.
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
 

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: Windows Security Model (Configuring GDM to limit user actions)

2004-02-10 Thread Ez-Aton
Well then, I'm just not the type. I'll elaborate.
On Tuesday 10 February 2004 10:32, Oron Peled wrote:
 On Tuesday 10 February 2004 05:28, Ez-Aton wrote:
  ... starting from Windows 2000 (i don't count WinNT as a real OS anyhow),

 First an unrelated observation. Through the years I used to hear:
   Windows for Worgroups isn't real OS -- Win95 is true 32bit OS
   Win9X is just a graphical shell -- WinNT is modern design done
by the same people who did VMS
   WinNT is obsolete -- W2K is the future

 and I'm waiting for:
   W2K is the old world OS -- W2K server and .Net are true revolution

 This isn't against you specifically Ez, every Win* user I know thinks
 the *previous* Windows sucks big time... isn't it weird?

Not exactly. For some time now, Windows 2003 Server is at hand, and I still 
claim Windows 2000 to be a good product (generally speaking). Windows 2000 
Server implements the AD mechanism (unlike Win2000 Pro), but it's not a 
kernel based part, but a module, you can run the system without (AD 
Maintenance mode). 

 Personally I'll take any day my first old slackware (kernel 0.99pl14)
 with its FVWM (with GoodStuff config) -- it was functional, fast and
 stable.

 And now to the important subject...

  Although we're a Linux list, knowing our competitors is an advantage, to
  my knowledge,

 Agreed (at least by me).

  in AD, ... [description of ActiveDirectory relevant part]

 Organization of various settings in a global hierarchy is an important
 feature that generally eases administration. I'd like to put it in some
 perspective:
   1. Sometimes a valid idea is designed badly -- The famous example
  is the Windwos Registry which had the same hierarchical organization
  but was designed as monolithic binary file which everyone need
  to access... not a pretty sight.

Nowdays, Registry resides in three files, each one is a special branch or 
hive - System, Software, Users, and each user has his/her own registry part 
inside his homedir (a user.dat file in ~/)

 Note: the utmp/wtmp in Unix/linux present exactly the same design mistake
   which explains the low validity of data you find there...

   2. As a counter-example you may look at Linux GConf -- basically it's
  the registry idea done the right way: decouple storage from interface
  (curret plugins are XML, but that may be change), not a single
  repositoty but several configurable ones (system-wide, per-user,
 etc.), fits nicely with the regular permission model (each user has its own
 gconfd, no suid access).

Never did try. Can't say anything about it.


   3. For site-wide hierarchical management many use LDAP. It is already
  integrated in the important infrastructural applications -- login,
  (via pam) Mail (sendmail, postfix, imap4, etc.) and more.

Agree. But it's not the native way of doing things, yet. Implementing an LDAP 
schema is based on picking up the correct schema, while, although it reduces 
the choise, AD (which is based on LDAP and Kerberos) has already built-in 
schema.


 But one of your points is that this isn't integrated into every application
 or the kernel (god forbid :-) like AD is in Windows. I'll try to
 refer to this point later.

It is not integrated into the kernel in Windows either.


  ... setup access rights to most parts of Windows settings,
  and applications, enforce settings ...

 This is a very important issue. The Linux kernel has implemented
 internally capability based security for quite some time. However,
 almost no one uses it.

True. Ever asked why?


 I think one of the problems we have in attaching security information
 to the user login, is that there are many cases of non-login usage:
   - Someone is running a process via rsh/ssh (this isn't login).
   - Someone is using my DISPLAY (consuming resources).
   - Someone is using my disk via NFS (again,... resources).
   - Packets are being routed via my computer (there are no user
 credentials in the packets at all..)

Agree.


 Let's combine the above points into a real-life scenario:
   I seat at computer A running via SSH a program on computer B
   (with its DISPLAY apears on A of course). The program was
   loaded from my NFS server C and establish a connection
   to a server D, and the packets are routed through router E.

 Now since the user activity is distributed, it's non-trivial
 to apply some central policy to his actions.


Not exactly. You could, through a central LDAP/other directory, which 
Computers A, B  C are to AAA agains, the rules which apply to a specific 
user/computer. If you're permitted to use DISPLAY on other computer, but 
allowed to run only X,Y Z, that's what you'll run (Computer B now). Computer 
A asks if it's allowed to show DISPLAY, for who and from where, Computer B 
checks if you're allowed to run the software you're running, your server, D, 
checks what are your permissions regarding NFS, quota, etc, and computer E 
checks the source, target, and may be given 

KDE 3.2 RPMS

2004-02-10 Thread Hetz Ben Hamo
Hi,

I'm rebuilding at this moment the KDE 3.2 RPMS for Redhat 9 (direct port 
from Fedora)..

Anyone wants those RPMS?

Thanks,
Hetz


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



OT: Robert M. Sauer - FLOSS/Windows TCO - Reloaded

2004-02-10 Thread Uri Sharf
Rob (JIMS) seems to bring FLOSS's TCO and Microsoft's Get The Facts 
campaign to Yediout Acharonot. See more information here: 
http://whatsup.org.il/modules.php?op=modloadname=Newsfile=articlesid=2688

p.s. We are not sure if we are allowd to upload the original article to 
whatsup, if anyone has any idea?

Uri

Whatsup
www.whatsup.org.il
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Regexps

2004-02-10 Thread Tal Achituv



Hi Guys,

can anyone give me a regular _expression_ that 
turns
bla foo bar "kuku 2" test test

into:
bla
foo
bar
kuku 2
test
test

(replaces spaces with \n only if its not 
encapsulated in ")

Thanks,
Tal.


Re: Apache virtual server redirection

2004-02-10 Thread Shachar Shemesh
You will also need to set your DNS up so that everything.mydomain.com 
will be directed to your IP. This requires DNS wildcards, which are 
recommended against unless you know exactly what you are doing.

Shachar

Yonah Russ wrote:

Try mod_virtual_host
VirtualDocumentRoot /www/host/sites/%1
yonah
Tal Achituv wrote:

Hi!

I would like to redirect every foo.mydomain.com to
www.mydomain.com/sites/foo
My guess is that it could be done using the virtualserver directive in
httpd.conf
But i was unable to find any reference to such an example.
Anyone knows how to do that?!

Thanks!
Tal.


--
Shachar Shemesh
Lingnu Open Systems Consulting
http://www.lingnu.com/
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


RE: Regexps

2004-02-10 Thread Hagay Unterman



tr " " 
"\n"


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Tal 
AchituvSent: Tuesday, February 10, 2004 15:04 PMTo: 
[EMAIL PROTECTED]Subject: Regexps

Hi Guys,

can anyone give me a regular _expression_ that 
turns
bla foo bar "kuku 2" test test

into:
bla
foo
bar
kuku 2
test
test

(replaces spaces with \n only if its not 
encapsulated in ")

Thanks,
Tal.


(no subject)

2004-02-10 Thread Orna Agmon
Hi printing people,

This mail is on behalf of a friend of mine, he is not subscribed to
Linux-il, so please CC him.

8X-

I want to buy a printer for my home pc. My system is mandrake 9.2, and
the most common printer sold today is the lexmark z602.
In the harddrake page it is not even mentioned.

I cannot find a printer which is available in Israel as well as supported
well in Linux (according to info available on the web). Of course, money
is of significance...

Could you please recommend a well supported printer, available in Israel?

Thanks,

Ranny.


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Article on YNet

2004-02-10 Thread Amichai Rotman
Hi All,

I think someone should flame this guy...

http://www.ynet.co.il/articles/1,7340,L-2872838,00.html
-- 
::.

Amichai Rotman

Short text-only e-mails: [EMAIL PROTECTED]
UIN#: 6401746
Registered Linux User#: 201192


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Problem with kernel 2.6

2004-02-10 Thread Assaf Flatto
Hello list

I upgraded my kernel to 2.6 (2.6.0.0-test5 ) on my MDK9.1(with updates)
.
The compilation and install passed fine , but now i seem to have a
problem with my CD-ROM .
When i try and  mount the cdrom 
root # mount -t iso9660 /dev/hdc /mnt/cdrom 

i get the error message 
mount : fs type iso9660 not supported by kernel .

Checking the kernel config file for the comilation it is marked by
default as module and not incorparated , when i tried to insert it my
self 

root # modprobe iso9660 
I get the following error 

FATAL: Error inserting isofs
(/lib/modules/2.6.0-0.test5.1mdk/kernel/fs/isofs/isofs.ko): Unknown
symbol in module, or unknown parameter (see dmesg)
FATAL: Error running install command for iso9660

And checking the dmesg i get the follwing output :

[EMAIL PROTECTED] linux-2.6.0-0.test5.1mdk]# dmesg |grep 9660
UDF-fs DEBUG fs/udf/super.c:500:udf_vrs: ISO9660 Volume Descriptor Set
Terminator found 
UDF-fs DEBUG fs/udf/super.c:491:udf_vrs: ISO9660 Primary Volume
Descriptor found

UDF-fs DEBUG fs/udf/lowlevel.c:65:udf_get_last_session:
CDROMMULTISESSION not supported: rc=-22
UDF-fs DEBUG fs/udf/super.c:1476:udf_fill_super: Multi-session=0 UDF-fs
DEBUG fs/udf/super.c:464:udf_vrs: Starting at sector 16 (2048 byte
sectors)


Has anyone encountered this prolem before ?
and besides recompiling my kernel - is there another way for me to make
my CD work ? 

ps - the eject command works with no problem .

Assaf

---
This e-mail message may contain confidential, commercial and privileged information or 
data that constitute proprietary information of Cellcom Israel Ltd. Any review or 
distribution by others is strictly prohibited. If you are not the intended recipient 
you are hereby notified that any use of this information or data by any other person 
is absolutely prohibited. If you are not the intended recipient, please delete all 
copies.

Thank You.
http://www.cellcom.co.il




To unsubscribe, send 
mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Things my Debian can't do

2004-02-10 Thread Aviram Jenik
Hi,

I'm ashamed to admit there's one thing Redhat machines can do out of the box 
and my Debian can't, despite my many attempts to teach it.

On Redhat, konsole performs copy on select - i.e. when selecting the text it 
is automatically copies it to the clipboard. Moreover, the konsole on Redhat 
doesn't even have copy in the edit menu, which means this is not an X 
hack but some configuration option in konsole.

I tried to compare the redhat config files (of konsole and almost everything 
else I could think of), I googled, and I even went as far as threatening my 
Debian that it will be punished harshly if it will not cooperate - all this 
didn't help.

Any ideas what the Redhat trick can be?

-- 
- Aviram

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Buying a new printer to work under Mandrake 9.2 (was: (no subject))

2004-02-10 Thread Omer Zak
Few weeks ago I bought Epson CX3200 scanner-printer, to replace my dead HP
660C printer.
Printing worked out of the box, after re-running print configuration
utility in Gnome.
The scanner needs a more recent kernel version (2.4.21 vs. the 2.4.18
which I have under RedHat 8.0, which I didn't bother to update more than
absolutely necessary).  But it works well in photocopier mode, which is OK
by me because I have also a separate scanner.

The cost was 700NIS including VAT at Office Depot (may be available now
for 673NIS in a sale).
DISCLAIMER:  I didn't care that much about ink cartridge prices, because I
don't print much but you may want to check this before making a final
decision.

In general, you may want to consult the hardware Howto distributed
knowledge base available in the Internet, and which can be found by means
of Google keywords.  This is excellent!  For each model mentioned, you get
information about people's experience, what workaround they used, what
tricks and tips they have.
 --- Omer
My opinions, as expressed in this E-mail message, are mine alone.
They do not represent the official policy of any organization with which
I may be affiliated in any way.
WARNING TO SPAMMERS:  at http://www.zak.co.il/spamwarning.html

On Tue, 10 Feb 2004, Orna Agmon wrote:

 Hi printing people,

 This mail is on behalf of a friend of mine, he is not subscribed to
 Linux-il, so please CC him.

 8X-

 I want to buy a printer for my home pc. My system is mandrake 9.2, and
 the most common printer sold today is the lexmark z602.
 In the harddrake page it is not even mentioned.

 I cannot find a printer which is available in Israel as well as supported
 well in Linux (according to info available on the web). Of course, money
 is of significance...

 Could you please recommend a well supported printer, available in Israel?

 Thanks,

 Ranny.


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Apache virtual server redirection

2004-02-10 Thread Boris Ratner

Hello Tal, List

IMHO VirtualServers have nothing to do with what you are trying to do
check-out mod_rewrite :
http://httpd.apache.org/docs/misc/rewriteguide.html
and 
http://httpd.apache.org/docs/mod/mod_rewrite.html

Regards, 
Boris Ratner.
PS:
`The great thing about mod_rewrite is it gives you all the configurability 
and flexibility of Sendmail. The downside to mod_rewrite is that it gives 
you all the configurability and flexibility of Sendmail.'' 
-- Brian Behlendorf
Apache Group 


Shachar Shemesh wrote:

You will also need to set your DNS up so that everything.mydomain.com 
will be directed to your IP. This requires DNS wildcards, which are 
recommended against unless you know exactly what you are doing.

 Shachar

Yonah Russ wrote:

 Try mod_virtual_host
 VirtualDocumentRoot /www/host/sites/%1
 yonah

 Tal Achituv wrote:

 Hi!

 I would like to redirect every foo.mydomain.com to
 www.mydomain.com/sites/foo

 My guess is that it could be done using the virtualserver directive 
in
 httpd.conf
 But i was unable to find any reference to such an example.

 Anyone knows how to do that?!

 Thanks!
 Tal.



-- 
Shachar Shemesh
Lingnu Open Systems Consulting
http://www.lingnu.com/


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]





=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Buying a new printer to work under Mandrake 9.2

2004-02-10 Thread Uri Sharf
Omer Zak wrote:

In general, you may want to consult the hardware Howto distributed
knowledge base available in the Internet, and which can be found by means
of Google keywords.  This is excellent!  For each model mentioned, you get
information about people's experience, what workaround they used, what
tricks and tips they have.
 

linuxprinting.org could be usefull as well, and maybe this article about 
multifunctional printers.

*Six multifunction printers for Linux 
http://docs.linux.com/article.pl?sid=03/12/05/0015249*
http://www.linux.com/documentation/03/12/05/0015249.shtml

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: Things my Debian can't do

2004-02-10 Thread Ira Abramov
Quoting Aviram Jenik, from the post of Tue, 10 Feb:
 Any ideas what the Redhat trick can be?

Funny, I never noti... oh wait a minute, I hate Konsole, I use Eterm :-)

compared version numbers?

-- 
Model turned actress
Ira Abramov
http://ira.abramov.org/email/

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Article on YNet

2004-02-10 Thread Ely Levy
what for? he is capitalist economics lecture
isn't that punishment enough?
what do you expect from those guys who spend their life making redicules
theories which opensource totally ignore?
would you think he would admit being wrong?

Ely Levy
System group
Hebrew University
Jerusalem Israel



On Tue, 10 Feb 2004, Amichai Rotman wrote:

 Hi All,

 I think someone should flame this guy...

 http://www.ynet.co.il/articles/1,7340,L-2872838,00.html
 --
 ::.

 Amichai Rotman

 Short text-only e-mails: [EMAIL PROTECTED]
 UIN#: 6401746
 Registered Linux User#: 201192


 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Regexps

2004-02-10 Thread Oleg Goldshmidt
Hagay Unterman [EMAIL PROTECTED] writes:

 tr   \n

This would be excusable if it were prepended with UNTESTED. It does
not do what the OP wants.

In general, handling string literals with regexps is not trivial,
because you need to take into account escaped , as in

foo \sna fu\ bar

and more complicated variants. Also, what if there are newlines inside
the string?

Assuming there are only simple cases in your input (and some
other things like there is no

foo sna fubar

i.e. quoted strings are always whitespace-separated fields) here is a
simple gawk parser that works on your example:

#!/bin/gawk -f

function tail(str,head) { return substr(str,head+1,length(str)-head+1); }

function trprint(str) { gsub(/[ \t]+/,\n,str); printf(%s,str); }

{
if (!NF) next;
str = $0;
while (len = index(str,\)) {
trprint(substr(str,1,len-1));
str = tail(str,len);
end = index(str,\);
if (!end) {
printf(%s:%d: unmatched quote at position %d\n,
   FILENAME,NR,len)  /dev/stderr;
exit(1);
}
printf(%s\n,substr(str,1,end-1));
str = tail(str,end+1);
}
trprint(str);
printf(\n);
}


 
 --
 
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
 Behalf Of Tal Achituv
 Sent: Tuesday, February 10, 2004 15:04 PM
 To: [EMAIL PROTECTED]
 Subject: Regexps
 
 Hi Guys,
 
  
 
 can anyone give me a regular expression that turns
 
 bla foo bar kuku 2 test test
 
  
 
 into:
 
 bla
 
 foo
 
 bar
 
 kuku 2
 
 test
 
 test
 
  
 
 (replaces spaces with \n only if its not encapsulated in )
 
  
 
 Thanks,
 
 Tal.

Hope it helps,

-- 
Oleg Goldshmidt | [EMAIL PROTECTED]

To unsubscribe, send 
mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



video conference server

2004-02-10 Thread redbaron
Hi List,

Any idea? suggestions?

10X,
Gili


From: gili gili [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, February 05, 2004 2:06 PM
Subject: video conference server


 Hi list,

 I need to setup a video conference server.
 The main goal of this server is to connect many to many and not point to
 point

 The server must be Linux (dh :-) ), because, I found many embedded
 devises for this purpose, and I dont like embedded.

 Dose anybody tried something like this?

 TIA,
 Gili


 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Article on YNet

2004-02-10 Thread Aaron
Just for the curious could someone parphrase in english what this is all 
about?

Thanks
Aaron
http://www.ynet.co.il/articles/1,7340,L-2872838,00.html
 



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: Things my Debian can't do

2004-02-10 Thread Oleg Goldshmidt
Aviram Jenik [EMAIL PROTECTED] writes:

 I'm ashamed to admit there's one thing Redhat machines can do out of
 the box and my Debian can't, despite my many attempts to teach it.
 
 On Redhat, konsole performs copy on select - i.e. when selecting
 the text it is automatically copies it to the clipboard. Moreover,
 the konsole on Redhat doesn't even have copy in the edit menu,
 which means this is not an X hack but some configuration option in
 konsole.

What exactly do you mean? That when you select (highlight) some text
with the mouse it is automagically pasteable, i.e. it is enough to
middle-click somewhere else to paste it? If this is what you want then
this feature has been available on UNIX/X since time immemorial, and I
use it about two zillion times a day to copy and paste between all
sorts of applications. I also often double-click to select a word at
point and triple-click to select the current line. It worked the same
way on every UNIX/Linux/X system I used during the last 15 years or so...

I don't even use konsole normally (I do use Red Hat, but I would be
really surprised if it were any different on Debian), but just for you
I have had a look at a konsole (on RH9) and Copy is the topmost item
in its Edit menu...

So you must have something else in mind, but this is the only thing
that comes to my mind reading your description, and *now* I am
intrigued...

-- 
Oleg Goldshmidt | [EMAIL PROTECTED]

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Problem with kernel 2.6

2004-02-10 Thread Shaul Karl
On Tue, Feb 10, 2004 at 05:25:03PM +0200, Assaf Flatto wrote:
 
 UDF-fs DEBUG fs/udf/lowlevel.c:65:udf_get_last_session:
 CDROMMULTISESSION not supported: rc=-22
 UDF-fs DEBUG fs/udf/super.c:1476:udf_fill_super: Multi-session=0 UDF-fs
 DEBUG fs/udf/super.c:464:udf_vrs: Starting at sector 16 (2048 byte
 sectors)
 


  Try searching google for `sector 16 (2048 byte sectors)' or some other
strings from that message. For some reason I think I have seen it
before.
-- 
If you have an apple and I have  an apple and we  exchange apples then
you and I will still each have  one apple. But  if you have an idea and I
have an idea and we exchange these ideas, then each of us will have two
ideas. -- George Bernard Shaw (sent by  shaulk @ actcom . net . il)

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Regexps

2004-02-10 Thread Nadav Har'El
On Tue, Feb 10, 2004, Oleg Goldshmidt wrote about Re: Regexps:
 In general, handling string literals with regexps is not trivial,
 because you need to take into account escaped , as in
 
 foo \sna fu\ bar

This may not be relevant for his situation. One situation in which I once
used a similar trick to the one I posted earlier was in breaking up a
CSV - comma separated values. In a CSV, the comma is the field
separator (rather than the space in the poster's question), so a record might
look like

one,two,three,four,five

Now, the convention is that if field 'two' is to be replaced by something
containing a comma, say '1,2,3', the field is quoted with double-quotes:

one,1,2,3,three,four,five

And you're supposed to split this record up on commas that are not inside
quotes.

What happens if there are quotes in one of the field? Each double-quote is
replaced by two of them, keeping the evenness of the number of quotes
(quote parity) and allowing exactly the same method of splitting on commas,
and allowing for an easy reverse transformation.

For example,

one,1,2,3,three,he said hello!,five
or
one,1,2,3,three,he said hi, man!,five

In the last line you know you shouldn't seperate on the comma before 'man'
because it has an odd number of quotes before (or after) it. Nice and simple :)

At least, that is what I remember. Sadly, the Wikipedia entry on CSV is
non-existant, so I'm using my memory as the source ;)

Anyway, CSV is a simple record/field representation methods, but it is very
rarely used in Unix (it is more common in the Windows world). Tab-seperated
fields are, justifiably much more common - they are easier to use and usually
enough (and if you need tabs, seperate the fields with some other character).


-- 
Nadav Har'El| Tuesday, Feb 10 2004, 19 Shevat 5764
[EMAIL PROTECTED] |-
Phone: +972-53-790466, ICQ 13349191 |A messy desk is a sign of a messy mind.
http://nadav.harel.org.il   |An empty desk is a sign of an empty mind.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Things my Debian can't do

2004-02-10 Thread Shachar Shemesh
Oleg Goldshmidt wrote:

What exactly do you mean? That when you select (highlight) some text
with the mouse it is automagically pasteable, i.e. it is enough to
middle-click somewhere else to paste it?
But it is not in the clipboard. X carries two distinct concepts. One is 
the clipboard, working much like its Windows counterpart. The other is 
the X selection.

When you highlight text, it goes into the X selection buffer. When you 
middle click, the X selection is pasted into wherever you clicked. Under 
Debian, konsole has copy and paste options that do what they say 
they do from the clipboard.

I don't even use konsole normally (I do use Red Hat, but I would be
really surprised if it were any different on Debian), but just for you
I have had a look at a konsole (on RH9) and Copy is the topmost item
in its Edit menu...
So you must have something else in mind, but this is the only thing
that comes to my mind reading your description, and *now* I am
intrigued...
 

I don't know what Aviram wants exactly. I believe he had better clarify 
this. Also, I personally like it very much that the two buffers are 
distinct. For some things the X selection is better, for others the 
clipboard is better. The best advantage the clipboard has over the X 
selection is that it is not volatile under random mouse clicks. If 
konsole would have automatically transferred everything into the 
clipboard, that would have been a major beature for me.

   Shachar

--
Shachar Shemesh
Lingnu Open Systems Consulting
http://www.lingnu.com/
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: Article on YNet

2004-02-10 Thread Tzafrir Cohen
On Tue, Feb 10, 2004 at 06:58:58PM +0200, Ely Levy wrote:
 what for? he is capitalist economics lecture
 isn't that punishment enough?
 what do you expect from those guys who spend their life making redicules
 theories which opensource totally ignore?
 would you think he would admit being wrong?
 
Judging by his partial and selective choice of sources and the past we
can know that he is not an ignorant. No point in educating him. It is
possible to demostrate his errors to his readers and editors, if that is
what you  want.

-- 
Tzafrir Cohen   +---+
http://www.technion.ac.il/~tzafrir/ |vim is a mutt's best friend|
mailto:[EMAIL PROTECTED]   +---+

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Things my Debian can't do

2004-02-10 Thread Aviram Jenik
On Tuesday 10 February 2004 19:17, Oleg Goldshmidt wrote:
 Aviram Jenik [EMAIL PROTECTED] writes:
  I'm ashamed to admit there's one thing Redhat machines can do out of
  the box and my Debian can't, despite my many attempts to teach it.
 
  On Redhat, konsole performs copy on select - i.e. when selecting
  the text it is automatically copies it to the clipboard. Moreover,
  the konsole on Redhat doesn't even have copy in the edit menu,
  which means this is not an X hack but some configuration option in
  konsole.

 What exactly do you mean? That when you select (highlight) some text
 with the mouse it is automagically pasteable, i.e. it is enough to
 middle-click somewhere else to paste it? 

Ok, I obviously didn't explain myself right.

X and KDE have two different clipboards and thus different copypaste 
schemes. My problem is not with the X copypaste, it is with the KDE one.
On my Debian, when I select some text in the konsole KDE application (not the 
X console), I have to click Edit-Copy to copy the text into the clipboard.

On Redhat, selecting the text puts it in the clipboard immediately (on the KDE 
clipboard, not the X one). Moreover, there's no Edit-Copy option in the 
konsole application in Redhat, so I know it's not an X trick but rather a KDE 
trick.
Check it for yourselves: go to your nearest Redhat station, start KDE, run 
konsole and note there's no Edit-Copy. Do the same on Debian, and there *is* 
Edit-Copy.

How come?

-- 
- Aviram

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Article on YNet

2004-02-10 Thread Orna Agmon
On Tue, 10 Feb 2004, Aaron wrote:

 Just for the curious could someone parphrase in english what this is all
 about?

 Thanks
 Aaron

 http://www.ynet.co.il/articles/1,7340,L-2872838,00.html

This is a full translation, full of mother tongure interferance, though.


Illusions that are sold to you about Linux
-

By Dr. Robert m. Saur
The appearance of Linux and other open source programs as serious
candidates in the market of computation is an important phenomena. The
challenge they pose to MS and other software manufacturers will lead to
greater competition, which will yield utilities and improvements to any
consumer, business or private.

Still, the process of the entrance of Linux and other open source programs
to the market is accompanied by strong dissonances, which only harm. Linux
vendors have recently been trying to present an utopian picture, as if
their merchandise is technologically perfect, and a sort of turn point in
the human history in general and in the software market in private.

It is an illusion. Open source programs are commercial programs in every
aspect. They are characterized by a different commercial model, but like
any software they have technical faults and merits. For competition to
evolve,  things must be presented as they are, and consumers must be
allowed to choose based on real data and information.

The year of Linux
--

Thus, for example, Mr Horev, manager of Oracle Israel, calls the year 2003
(in an article recently published in Yedioth Aharonot): For the first
time since the entrance of Linux to the market over a decade ago, the system
can be viewed as a cheaper and better alternative for Windows, he says.
Mr Horev relates Linux's recent success to the commercial maturity this
system has achieved, and to the fact that governmental systems all around
the world have adopted it.

The enthusiasm of Mr Horev from Linux is
certainly understandable.
Oracle, which made a large bet on the future of Linux (along
with other software companies), has a clear interest in the matter as the
vendor. But enthusiasm from Linux is one thing, and statistical proofs
about the success of Linux is a totally different thing.

As a matter of fact, after examining the data, the pink picture looks
totally different. for example, let us examine the part of Linux in the
global servers market. According to the research company IDC, on 1995
Linux's share was about 0%. By 2000 it jumped to 28%. But what has
happened since then? Linux's share stayed more or less the same, and even
dropped a bit.

On the other hand, Windows's share in the global market of servers grew
steadily in the said period: from 18% on 1995 to 49% on 2001. From the
data it appears that Windows system does not lose height significantly. It
seems that Linux entered the market at the expense of UNIX, much more than
at the expense of Windows.

Is Linux a lot Cheaper?
-
And what about the cost of Linux when compared to Windows? Is it not true
that Linux is cheaper by far? Surprisingly enough, it is not necessarily
so. the most reliable comparative cost review done so far (IDC's 2002
review) found out that the total cost of ownership of Windows is 11%-22%
lower than Linux systems, according to the type of task, and only in one
type Linux is 6% cheaper.

Is the adoption of Linux by governments indeed so frequent, and does this
signify technological superiority in any way? attempts to prefer open
source as a rule by means of legislation have faced strong resistance and
failed all over the world.In Israel, a law initiative on the subject  by
Kneset Member Nehama Ronen was overruled on this background. The state of
Massachusetts has gone back on its intention to switch all the information
systems to open source several days ago.

It must be kept in mind, that governmental authorities are not always good
at choosing the best companies in a competitional market, and they
sometimes drag after passing fashions. The clerks of the ministry of
finance, who have recently lead a public war against MS and for open
source, have decided in the end to buy MS programs for full prince and
continue to use them in the next years in all government ministries.

Leave Philosophy to Philosophers


It appears that a militant rhetoric speaking is not a substitute to a thorough
examination of technological efficiency, which brought to the decision in
this case as well. And finally, one cannot stand being amused by the
philosophic spirit which accompanies the marketing efforts of Linux and
other open source programs today, which are described as the incarnation
of the freedom and democracy.

The vendors, such as IBM, Oracle and Sun, have not reached cycles of tens
of billions of dollars from selling licenses of freedom and democracy, but
from selling software licenses. Even when they supposedly sell cheap
Linux, they sell for a very high price completing 

Re: Things my Debian can't do

2004-02-10 Thread Oleg Goldshmidt
Aviram Jenik [EMAIL PROTECTED] writes:


 Check it for yourselves: go to your nearest Redhat station, start
 KDE, run konsole and note there's no Edit-Copy.

Hmm... Depends on which RH station I am nearest to... On fully updated
RH7.3 there is no copy indeed. On RH9 there is, as I mentioned
before.

Sorry, I have no idea what a clipboard is. What is it good for?


-- 
Oleg Goldshmidt | [EMAIL PROTECTED]

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Problem with kernel 2.6

2004-02-10 Thread linux-il
Why are you stuck on such an ancient kernel?
I used -test9, -test11 (where I found a tiny bug, fixed
in 2.6.1) 2.6.0 and now 2.6.2 with no problems at all.
This is on debian unstable.
Can you try the newer ones?

Good luck,

--Amos

Assaf Flatto wrote:
Hello list

I upgraded my kernel to 2.6 (2.6.0.0-test5 ) on my MDK9.1(with updates)
.
The compilation and install passed fine , but now i seem to have a
problem with my CD-ROM .
When i try and  mount the cdrom 
root # mount -t iso9660 /dev/hdc /mnt/cdrom 

i get the error message 
mount : fs type iso9660 not supported by kernel .

Checking the kernel config file for the comilation it is marked by
default as module and not incorparated , when i tried to insert it my
self 

root # modprobe iso9660 
I get the following error 

FATAL: Error inserting isofs
(/lib/modules/2.6.0-0.test5.1mdk/kernel/fs/isofs/isofs.ko): Unknown
symbol in module, or unknown parameter (see dmesg)
FATAL: Error running install command for iso9660
And checking the dmesg i get the follwing output :

[EMAIL PROTECTED] linux-2.6.0-0.test5.1mdk]# dmesg |grep 9660
UDF-fs DEBUG fs/udf/super.c:500:udf_vrs: ISO9660 Volume Descriptor Set
Terminator found 
UDF-fs DEBUG fs/udf/super.c:491:udf_vrs: ISO9660 Primary Volume
Descriptor found

UDF-fs DEBUG fs/udf/lowlevel.c:65:udf_get_last_session:
CDROMMULTISESSION not supported: rc=-22
UDF-fs DEBUG fs/udf/super.c:1476:udf_fill_super: Multi-session=0 UDF-fs
DEBUG fs/udf/super.c:464:udf_vrs: Starting at sector 16 (2048 byte
sectors)
Has anyone encountered this prolem before ?
and besides recompiling my kernel - is there another way for me to make
my CD work ? 

ps - the eject command works with no problem .

Assaf

---
This e-mail message may contain confidential, commercial and privileged information or 
data that constitute proprietary information of Cellcom Israel Ltd. Any review or 
distribution by others is strictly prohibited. If you are not the intended recipient 
you are hereby notified that any use of this information or data by any other person 
is absolutely prohibited. If you are not the intended recipient, please delete all 
copies.
Thank You.
http://www.cellcom.co.il


To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


-- Your email is protected by Mailshell -- 
To block spam or change delivery options: http://www.mailshell.com/control.html?a=blshp8b9gc0rxhgk_srox_llfpptvypmvy7j

FreshAddress.com http://rd.mailshell.com/ad482
Earn up to $3 for each of your friends who signs up with Mailshell! 
http://rd.mailshell.com/sp5


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: Article on YNet

2004-02-10 Thread Aaron
Thanks for the translation,

A few notes.

1. I infact agree with Dr Saur on a few points. Linux software is infact 
the same as commercial software and competes against it. Good software 
is good software and bad software is bad software. Part of what makes 
Linux good is a Unix way of doing things which Windows software will 
never have by definition.

2. Even if Windoze is indeed cheaper (He definitely didn't prove it) I 
would still choose the Unix way of doing things.

3. Windows is not a good OS for Servers and I am sure his numbers are 
wrong. But still 49% (2001 is a bit old new) means that the more servers 
run a non-windows os. Man that 49% has to be wrong, who in their right 
mind would run a Windows server for mission critical applications?

4. Plain math says that a linux distro cost less than windows.

5. I wonder if this guy work for a certain Washington State company?

Aaron




Illusions that are sold to you about Linux
-
By Dr. Robert m. Saur
The appearance of Linux and other open source programs as serious
candidates in the market of computation is an important phenomena. The
challenge they pose to MS and other software manufacturers will lead to
greater competition, which will yield utilities and improvements to any
consumer, business or private.
Still, the process of the entrance of Linux and other open source programs
to the market is accompanied by strong dissonances, which only harm. Linux
vendors have recently been trying to present an utopian picture, as if
their merchandise is technologically perfect, and a sort of turn point in
the human history in general and in the software market in private.
It is an illusion. Open source programs are commercial programs in every
aspect. They are characterized by a different commercial model, but like
any software they have technical faults and merits. For competition to
evolve,  things must be presented as they are, and consumers must be
allowed to choose based on real data and information.
The year of Linux
--
Thus, for example, Mr Horev, manager of Oracle Israel, calls the year 2003
(in an article recently published in Yedioth Aharonot): For the first
time since the entrance of Linux to the market over a decade ago, the system
can be viewed as a cheaper and better alternative for Windows, he says.
Mr Horev relates Linux's recent success to the commercial maturity this
system has achieved, and to the fact that governmental systems all around
the world have adopted it.
The enthusiasm of Mr Horev from Linux is
certainly understandable.
Oracle, which made a large bet on the future of Linux (along
with other software companies), has a clear interest in the matter as the
vendor. But enthusiasm from Linux is one thing, and statistical proofs
about the success of Linux is a totally different thing.
As a matter of fact, after examining the data, the pink picture looks
totally different. for example, let us examine the part of Linux in the
global servers market. According to the research company IDC, on 1995
Linux's share was about 0%. By 2000 it jumped to 28%. But what has
happened since then? Linux's share stayed more or less the same, and even
dropped a bit.
On the other hand, Windows's share in the global market of servers grew
steadily in the said period: from 18% on 1995 to 49% on 2001. From the
data it appears that Windows system does not lose height significantly. It
seems that Linux entered the market at the expense of UNIX, much more than
at the expense of Windows.
Is Linux a lot Cheaper?
-
And what about the cost of Linux when compared to Windows? Is it not true
that Linux is cheaper by far? Surprisingly enough, it is not necessarily
so. the most reliable comparative cost review done so far (IDC's 2002
review) found out that the total cost of ownership of Windows is 11%-22%
lower than Linux systems, according to the type of task, and only in one
type Linux is 6% cheaper.
Is the adoption of Linux by governments indeed so frequent, and does this
signify technological superiority in any way? attempts to prefer open
source as a rule by means of legislation have faced strong resistance and
failed all over the world.In Israel, a law initiative on the subject  by
Kneset Member Nehama Ronen was overruled on this background. The state of
Massachusetts has gone back on its intention to switch all the information
systems to open source several days ago.
It must be kept in mind, that governmental authorities are not always good
at choosing the best companies in a competitional market, and they
sometimes drag after passing fashions. The clerks of the ministry of
finance, who have recently lead a public war against MS and for open
source, have decided in the end to buy MS programs for full prince and
continue to use them in the next years in all government ministries.
Leave Philosophy to Philosophers

It appears that a militant rhetoric speaking 

Re: Windows Security Model (Configuring GDM to limit user actions)

2004-02-10 Thread Gil Freund
Ez-Aton wrote:

Well then, I'm just not the type. I'll elaborate.
On Tuesday 10 February 2004 10:32, Oron Peled wrote:
On Tuesday 10 February 2004 05:28, Ez-Aton wrote:

... starting from Windows 2000 (i don't count WinNT as a real OS anyhow),
First an unrelated observation. Through the years I used to hear:
 Windows for Worgroups isn't real OS -- Win95 is true 32bit OS
 Win9X is just a graphical shell -- WinNT is modern design done
  by the same people who did VMS
 WinNT is obsolete -- W2K is the future
and I'm waiting for:
 W2K is the old world OS -- W2K server and .Net are true revolution
This isn't against you specifically Ez, every Win* user I know thinks
the *previous* Windows sucks big time... isn't it weird?


Not exactly. For some time now, Windows 2003 Server is at hand, and I still 
claim Windows 2000 to be a good product (generally speaking). Windows 2000 
Server implements the AD mechanism (unlike Win2000 Pro), but it's not a 
kernel based part, but a module, you can run the system without (AD 
Maintenance mode). 
Wel, it would stand to reason Microsoft will include *some* 
enhancement in their newer products...
I, for one, still see NT4 is the their best corporate desktop 
environment. It's not surprising that when faced with the prospect of 
migrating to w2k, the Linux/Samba combo suddenly appeared so appropriate.


Personally I'll take any day my first old slackware (kernel 0.99pl14)
with its FVWM (with GoodStuff config) -- it was functional, fast and
stable.
[snip]


 3. For site-wide hierarchical management many use LDAP. It is already
integrated in the important infrastructural applications -- login,
(via pam) Mail (sendmail, postfix, imap4, etc.) and more.


Agree. But it's not the native way of doing things, yet. Implementing an LDAP 
schema is based on picking up the correct schema, while, although it reduces 
the choise, AD (which is based on LDAP and Kerberos) has already built-in 
schema.
So does any LDAP compliant directory (including OpenLDAP). You do not 
want to make up schema as you go along. Other ldap servers also offer 
much better documentation.


[snip]

I'm not sure I understand what you mean by enforced. Does it change the
settings in the Explorer preferences? Than this is not enforcement because
it depends on the cooperation of the Explorer program -- What would prevent
a user modifing the behaviour of Explorer? security by obscurity.


It changes the settings per computer in my Domain. Yes. You had proxy settings 
ten minutes ago, now you don't. You can't change them back (if I decide you 
can't), and even if you could, give the computer then minutes on the net, and 
they'll be back to what I've predefined. That's the power of the GPO.
This is also the weakness of it. OGO does not modify the security of 
settings of the registry keys (as I assumed first time I used it), but 
overrides them with the server stored keys. This gives a reasonably 
intelligent user a window (hahaha) of opportunity.


The correct place to enforce proxy settings is the firewall regardless
of the OS.
*One* of the places. I consider OGO to be a convenient method to deploy 
proxy settings, not to enforce them.



How do you force Proxy (actually, in my case - no-proxy) settings for your 
clients on the firewall? Had I used a proxy, I could implement a transparent 
proxy, however, I didn't want them to use a proxy anyhow...


A Linux note:
 The old way to set proxy was via environment variables -- this had the
 excelent effect that you can do it at whatever level you want:
  - For every user -- in system login scripts.
  - For a single user -- in his own login script.
  - For a single session -- on the command line.
 The only downside was you have to start the application for it to take
 effect. I wonder why modern browsers haven't left it as a *default*.
 Of course if they use GConf, we can still have these properties.


True. I agree. The environment variable is a good tool, although limited. You 
can hardly prevent a user from overaiding your settings. I don't know GConf 
yet, so I can't commetn about it. 

and do most of whatever comes to your mind.
Can you run scripts? If not, than it's good only for the simple cases of
variable=value settings and not places where you need to run some logic.
(It's true that most settings are these simple var=value cases).


You can run scripts. CMD scripts, VBS scripts, and if clients can run 
perl/python/BASh, these too. You can run executebles on client computers, 
because inside an organization, there (must be) is a trust relationship. 

I'm not saying LDAP on a Linux machine is a bad thing, however I'm saying that 
on Win2k, and using their reemplementation of the LDAP into the AD mechanism, 
they did a good job. Not perfect, but a good one, towards central point of 
control in an organization. We should learn from their successes, and from 
their mistakes, towards doing what we do better.

Ez.


Re: Article on YNet

2004-02-10 Thread Ely Levy
good now we can have it slashdotted and then we'll see them:P

Ely Levy
System group
Hebrew University
Jerusalem Israel



On Tue, 10 Feb 2004, Orna Agmon wrote:

 On Tue, 10 Feb 2004, Aaron wrote:

  Just for the curious could someone parphrase in english what this is all
  about?
 
  Thanks
  Aaron
 
  http://www.ynet.co.il/articles/1,7340,L-2872838,00.html

 This is a full translation, full of mother tongure interferance, though.


 Illusions that are sold to you about Linux
 -

 By Dr. Robert m. Saur
 The appearance of Linux and other open source programs as serious
 candidates in the market of computation is an important phenomena. The
 challenge they pose to MS and other software manufacturers will lead to
 greater competition, which will yield utilities and improvements to any
 consumer, business or private.

 Still, the process of the entrance of Linux and other open source programs
 to the market is accompanied by strong dissonances, which only harm. Linux
 vendors have recently been trying to present an utopian picture, as if
 their merchandise is technologically perfect, and a sort of turn point in
 the human history in general and in the software market in private.

 It is an illusion. Open source programs are commercial programs in every
 aspect. They are characterized by a different commercial model, but like
 any software they have technical faults and merits. For competition to
 evolve,  things must be presented as they are, and consumers must be
 allowed to choose based on real data and information.

 The year of Linux
 --

 Thus, for example, Mr Horev, manager of Oracle Israel, calls the year 2003
 (in an article recently published in Yedioth Aharonot): For the first
 time since the entrance of Linux to the market over a decade ago, the system
 can be viewed as a cheaper and better alternative for Windows, he says.
 Mr Horev relates Linux's recent success to the commercial maturity this
 system has achieved, and to the fact that governmental systems all around
 the world have adopted it.

 The enthusiasm of Mr Horev from Linux is
 certainly understandable.
 Oracle, which made a large bet on the future of Linux (along
 with other software companies), has a clear interest in the matter as the
 vendor. But enthusiasm from Linux is one thing, and statistical proofs
 about the success of Linux is a totally different thing.

 As a matter of fact, after examining the data, the pink picture looks
 totally different. for example, let us examine the part of Linux in the
 global servers market. According to the research company IDC, on 1995
 Linux's share was about 0%. By 2000 it jumped to 28%. But what has
 happened since then? Linux's share stayed more or less the same, and even
 dropped a bit.

 On the other hand, Windows's share in the global market of servers grew
 steadily in the said period: from 18% on 1995 to 49% on 2001. From the
 data it appears that Windows system does not lose height significantly. It
 seems that Linux entered the market at the expense of UNIX, much more than
 at the expense of Windows.

 Is Linux a lot Cheaper?
 -
 And what about the cost of Linux when compared to Windows? Is it not true
 that Linux is cheaper by far? Surprisingly enough, it is not necessarily
 so. the most reliable comparative cost review done so far (IDC's 2002
 review) found out that the total cost of ownership of Windows is 11%-22%
 lower than Linux systems, according to the type of task, and only in one
 type Linux is 6% cheaper.

 Is the adoption of Linux by governments indeed so frequent, and does this
 signify technological superiority in any way? attempts to prefer open
 source as a rule by means of legislation have faced strong resistance and
 failed all over the world.In Israel, a law initiative on the subject  by
 Kneset Member Nehama Ronen was overruled on this background. The state of
 Massachusetts has gone back on its intention to switch all the information
 systems to open source several days ago.

 It must be kept in mind, that governmental authorities are not always good
 at choosing the best companies in a competitional market, and they
 sometimes drag after passing fashions. The clerks of the ministry of
 finance, who have recently lead a public war against MS and for open
 source, have decided in the end to buy MS programs for full prince and
 continue to use them in the next years in all government ministries.

 Leave Philosophy to Philosophers
 

 It appears that a militant rhetoric speaking is not a substitute to a thorough
 examination of technological efficiency, which brought to the decision in
 this case as well. And finally, one cannot stand being amused by the
 philosophic spirit which accompanies the marketing efforts of Linux and
 other open source programs today, which are described as the incarnation
 of the freedom and democracy.

 The vendors, such as IBM, 

RE: Article on YNet

2004-02-10 Thread Etay Nir
Hmmm...

It is the same person who wrote this article a while ago and a few members
of this group including me responded directly to him.
http://www.globes.co.il/serveen/globes/DocView.asp?did=747399fid=980

His article is definitely not technical and is not taken from a technical
perspective. All I saw was number crunching and personal statements that
sounds so biased and one sided. What exactly is his knowledge about those
things?

And to draw from what he said Leave Philosophy to Philosophers if the
technology world is driven by economists alone and not by people who said
that there is another way! we would have not progress.

Last time an economist tried to run things by crunching the numbers was
Robert S. McNamara and his policy lead to a disaster during and after the
Vietnam War.
Leave Philosophy to Philosophers and leave technology evolution to those
who envision it and work to make it happen. I don't think we need to get
excited each time a biased scholar with no real world experience wants to
make a name for himself. 

Etay
--- 
Man cannot discover new oceans unless he has the courage to lose sight of
the shore...

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Aaron
Sent: Tuesday, February 10, 2004 11:47 AM
To: Orna Agmon
Cc: Linux-IL
Subject: Re: Article on YNet

Thanks for the translation,

A few notes.

1. I infact agree with Dr Saur on a few points. Linux software is infact 
the same as commercial software and competes against it. Good software 
is good software and bad software is bad software. Part of what makes 
Linux good is a Unix way of doing things which Windows software will 
never have by definition.

2. Even if Windoze is indeed cheaper (He definitely didn't prove it) I 
would still choose the Unix way of doing things.

3. Windows is not a good OS for Servers and I am sure his numbers are 
wrong. But still 49% (2001 is a bit old new) means that the more servers 
run a non-windows os. Man that 49% has to be wrong, who in their right 
mind would run a Windows server for mission critical applications?

4. Plain math says that a linux distro cost less than windows.

5. I wonder if this guy work for a certain Washington State company?

Aaron




Illusions that are sold to you about Linux
-

By Dr. Robert m. Saur
The appearance of Linux and other open source programs as serious
candidates in the market of computation is an important phenomena. The
challenge they pose to MS and other software manufacturers will lead to
greater competition, which will yield utilities and improvements to any
consumer, business or private.

Still, the process of the entrance of Linux and other open source programs
to the market is accompanied by strong dissonances, which only harm. Linux
vendors have recently been trying to present an utopian picture, as if
their merchandise is technologically perfect, and a sort of turn point in
the human history in general and in the software market in private.

It is an illusion. Open source programs are commercial programs in every
aspect. They are characterized by a different commercial model, but like
any software they have technical faults and merits. For competition to
evolve,  things must be presented as they are, and consumers must be
allowed to choose based on real data and information.

The year of Linux
--

Thus, for example, Mr Horev, manager of Oracle Israel, calls the year 2003
(in an article recently published in Yedioth Aharonot): For the first
time since the entrance of Linux to the market over a decade ago, the
system
can be viewed as a cheaper and better alternative for Windows, he says.
Mr Horev relates Linux's recent success to the commercial maturity this
system has achieved, and to the fact that governmental systems all around
the world have adopted it.

The enthusiasm of Mr Horev from Linux is
certainly understandable.
Oracle, which made a large bet on the future of Linux (along
with other software companies), has a clear interest in the matter as the
vendor. But enthusiasm from Linux is one thing, and statistical proofs
about the success of Linux is a totally different thing.

As a matter of fact, after examining the data, the pink picture looks
totally different. for example, let us examine the part of Linux in the
global servers market. According to the research company IDC, on 1995
Linux's share was about 0%. By 2000 it jumped to 28%. But what has
happened since then? Linux's share stayed more or less the same, and even
dropped a bit.

On the other hand, Windows's share in the global market of servers grew
steadily in the said period: from 18% on 1995 to 49% on 2001. From the
data it appears that Windows system does not lose height significantly. It
seems that Linux entered the market at the expense of UNIX, much more than
at the expense of Windows.

Is Linux a lot Cheaper?
-
And what 

Re: Windows Security Model (Configuring GDM to limit user actions)

2004-02-10 Thread Guy Teverovsky
In the spirit of Know your enemy (well, actually I admit to be more MS
oriented), I will drop my couple of cents...

On Tue, 2004-02-10 at 13:41, Ez-Aton wrote:
 Well then, I'm just not the type. I'll elaborate.

 [snip]
  This isn't against you specifically Ez, every Win* user I know thinks
  the *previous* Windows sucks big time... isn't it weird?
[skipping so not to start a flame bate]

 Not exactly. For some time now, Windows 2003 Server is at hand, and I still 
 claim Windows 2000 to be a good product (generally speaking). Windows 2000 
 Server implements the AD mechanism (unlike Win2000 Pro), but it's not a 
 kernel based part, but a module, you can run the system without (AD 
 Maintenance mode).
AD in general is a bunch of bundled services. You can remove AD from
your server and can get it up and running back again. 

[snip]
 
 
3. For site-wide hierarchical management many use LDAP. It is already
   integrated in the important infrastructural applications -- login,
   (via pam) Mail (sendmail, postfix, imap4, etc.) and more.
 
 Agree. But it's not the native way of doing things, yet. Implementing an LDAP 
 schema is based on picking up the correct schema, while, although it reduces 
 the choise, AD (which is based on LDAP and Kerberos) has already built-in 
 schema.
Another important point is the lack of granular ACLs you can apply to
OpenLDAP objects/attributes. AD here does IMHO much better job. It is
not trivial, but very powerful. The ACL lets you easily delegate tasks
to other people, while, when properly maintained, protecting you data.

[snip]
 
  I think one of the problems we have in attaching security information
  to the user login, is that there are many cases of non-login usage:
- Someone is running a process via rsh/ssh (this isn't login).
- Someone is using my DISPLAY (consuming resources).
- Someone is using my disk via NFS (again,... resources).
- Packets are being routed via my computer (there are no user
  credentials in the packets at all..)
 
 Agree.
In your spare time google for QoS Admission Control and IP Security
Policy. In Microsoft world all the points you raised can be easily
managed (although it is VERY rare to stumble on an sysadmin using those.
Well... More points in my CV :) )

 
 
  Let's combine the above points into a real-life scenario:
I seat at computer A running via SSH a program on computer B
(with its DISPLAY apears on A of course). The program was
loaded from my NFS server C and establish a connection
to a server D, and the packets are routed through router E.
 
  Now since the user activity is distributed, it's non-trivial
  to apply some central policy to his actions.
See above. I can choke any Winbox in my network :)

 
 
 Not exactly. You could, through a central LDAP/other directory, which 
 Computers A, B  C are to AAA agains, the rules which apply to a specific 
 user/computer. If you're permitted to use DISPLAY on other computer, but 
 allowed to run only X,Y Z, that's what you'll run (Computer B now). Computer 
 A asks if it's allowed to show DISPLAY, for who and from where, Computer B 
 checks if you're allowed to run the software you're running, your server, D, 
 checks what are your permissions regarding NFS, quota, etc, and computer E 
 checks the source, target, and may be given details about your UID. If all 
 computers are checking agains a directory located on computer F (with live 
 replica to computer G), you could and should be able to maintain one security 
 and permission directory service and tables, and no more. That's good for an 
 organization.
Sounds painful... 
I would prefer to see the services Kerberized. Much easier to manage.

 
  You are correct that having a central policy helps. But the hard
  question is if we can do it *without* sacrification of our
  distributed world (The network is the computer [McNeily]).
 
 No. See above.
Kerberos based AAA anyone ? 

 
 
   (I enforced Proxy settings for IE on every client computer just
   yesterday),
 
  I'm not sure I understand what you mean by enforced. Does it change the
  settings in the Explorer preferences? Than this is not enforcement because
  it depends on the cooperation of the Explorer program -- What would prevent
  a user modifing the behaviour of Explorer? security by obscurity.
 
 It changes the settings per computer in my Domain. Yes. You had proxy settings 
 ten minutes ago, now you don't. You can't change them back (if I decide you 
 can't), and even if you could, give the computer then minutes on the net, and 
 they'll be back to what I've predefined. That's the power of the GPO.
 
  The correct place to enforce proxy settings is the firewall regardless
  of the OS.
You think so ?
Suppose you have a bunch of proxies and you want certain groups of users
or computers to point to different proxies. Using GPO I can do it in a
snap.

 
 How do you force Proxy (actually, in my case - no-proxy) settings for your 
 

Fwd: [ISRAEMPLOY] JOBOPPS + UNIX SYS-ADMIN-freelancer (fwd)

2004-02-10 Thread Uri Bruck

do not reply to me. REply to the address below

-- 
Thanks,
Uri



- Forwarded message from mickael4973 [EMAIL PROTECTED] -
Date: Sun, 08 Feb 2004 16:19:23 -
From: mickael4973 [EMAIL PROTECTED]
Reply-To: mickael4973 [EMAIL PROTECTED]
 Subject: [ISRAEMPLOY] JOBOPPS + UNIX SYS-ADMIN-freelancer
  To: [EMAIL PROTECTED]

Hi, the company I m working for is looking for a UNIX system 
administrator for few projects as freelance (with receipts-
cheshboniot).

only UNIX sysadmin with at least two years experience may send 
resume, good knowledge in security will be a plus.

[EMAIL PROTECTED]


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



[fwd] [ISRAEMPLOY] JOBOPPS + CENTER + UNIX INFRASTUCTURE TEAM LEADER

2004-02-10 Thread Uri Bruck
[don't reply to me]

Please send CV in Hebrew to [EMAIL PROTECTED]  

Position available for UNIX INFRASTRUCTURE TEAM LEADER.

Must have  experience in managing at least 5 people for at least 2 years.
Must have 3 years practical experience with SUN SOLARIS.
Must have 2 years experience in managing infrastructure projects.
Must have work experience with large DB.
Must have knowledge of additional UNIX  and LINUX
Must have academic computer background or be a  MAMRAM graduate.
Must be ready to work long and unconventional hours.
Must have good interpersonal skills and be service-oriented.
Must have security clearance.



-- 
Thanks,
Uri
http://translation.israel.net


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



[SOLVED] Things my Debian can't do

2004-02-10 Thread Aviram Jenik
I always knew there was nothing my Debian couldn't do :-)

It was Jenya (me at oblom.com) who solved the mystery:

quote
Hey, 

It's not option of konsole, but option of Klipper: Synchronize contents of 
the clipboard and the selection. By default selection and clipboard are 
separated.
/quote

Right on the money! Copy on select with the KDE [c,k]lipboard. Apparently some 
Redhats come with this option configured, and some don't, but who cares 
anymore...

Thanks to all those that replied!

-- 
- Aviram

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Regexps

2004-02-10 Thread Oleg Goldshmidt

Nadav Har'El [EMAIL PROTECTED] writes:

 On Tue, Feb 10, 2004, Oleg Goldshmidt wrote about Re: Regexps:
  In general, handling string literals with regexps is not trivial,
  because you need to take into account escaped , as in
  
  foo \sna fu\ bar
 
 This may not be relevant for his situation. 

True, which is why I suggested a simple solution. 

To tell you the truth, I knew of perl's lookahead, but I am not much
of a perl-monger and I didn't remember the syntax, and I don't know of
any regexp engine other than perl that supports this very useful
feature.[1]

So I thought of the most straightforward (not necessarily the best)
way to pair the quotes and process portions of the input accordingly.

 What happens if there are quotes in one of the field? Each
 double-quote is replaced by two of them, keeping the evenness of the
 number of quotes (quote parity) and allowing exactly the same method
 of splitting on commas, and allowing for an easy reverse
 transformation.

Well, you are specifying an input convention that may or may not be
applicable. I am sure I don't need to give examples of usage of
backslash-escaped quotes in string literals.

The escape convention should be specified. From Tal's description, for
instance, it is not quite clear what the output from

Nadav said, Hi, Oleg, and turned back to his code.

should be - maybe the right output is reproducing the input verbatim
(there is no unquoted whitespace)? So I put a disclaimer about all
sorts of assumptions made, and only went through paired quotes, not
checking for more general odd/even cases. Of course, with an escape
sequence that is not based on merely doubling the escaped character
the odd/even rule breaks down, and I didn't think of it at all.

Another potential regexp pitfall is that - for better and for worse -
different regexp engines behave differently, to the point of matching
different things given the same regexp. Therefore, it may be unsafe to
ask for a regexp without specifying the type of engine (or a specific
tool, such as perl or awk). Find some issues with the regexp in the code
below[2].

[1] A really useful feature would be lookbehind, i.e. match
anything but a double quote unless *preceded* by an odd number of
consecutive backslashes. Not even perl supports that.

[2] Basing a parser on matching quoted strings as a whole will make it
a bit difficult reporting unmatched quotes. The code below does a
pretty good job on backslash-escaped quotes, but no warranty is
implied ;-)

#!/bin/gawk -f

function tail(str,len) { return substr(str,len+1,length(str)-len+1); }

function trprint(str) { gsub(/[ \t]+/,\n,str); printf(%s,str); }

{
str = $0;
pos = 0;
while (q = match(str,/([^\\]|\\.)*/,quoted)) {
# process as appropriate
trprint(substr(str,1,q-1));
printf(%s\n,quoted[0]);
# track progress for error reporting below
len = q+length(quoted[0]);
pos += len;
# move on
str = tail(str,len);
}
# at this point we have no quoted strings left
if (q = match(str,/.*$/)) {
printf(%s:%d: unmatched quote at position %d\n,
   FILENAME,NR,pos+q)  /dev/stderr;
exit(1);
}
# process what remains
trprint(str);
printf(\n);
}

-- 
Oleg Goldshmidt | [EMAIL PROTECTED]

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Windows Security Model (Configuring GDM to limit user actions)

2004-02-10 Thread Guy Teverovsky
On Wed, 2004-02-11 at 02:17, Oron Peled wrote:
 On Tuesday 10 February 2004 23:49, Guy Teverovsky wrote:
  AD in general is a bunch of bundled services. You can remove AD from
  your server and can get it up and running back again. 
 
 Does it mean it only affect other applications? or does the kernel
 somehow calls back AD to ask policy questions?
 
 This question is important because it ultimately determines the level
 of *enforcement* AD has over applications. This is because user space
 applications or libraries may be subverted in various ways and thus not
 respect the settings AD ordered them. Only kernel level enforcement
 will achieve the required effect in these cases.

Let me re-phrase that:

From the server(s) side: you can demote Domain Controller hosting an AD
to stand-alone server. You can also boot the box without AD services
loaded (used for AD restore/maintenance)

Clients: you can disjoin the client from AD domain (need Addd/Remove
computer to domain right - by default Local Admin). As long as the
client computer is in the AD domain, the AD will enforce the security
model of the client (you can control computer specific or user specific
settings). I would not call it kernel level, but rather Local System
Authority (LSA) level, which is not userland. I am having a hard time to
define kernel level in NT based OSes (is it just me ?)
Having local admin on the client might give you some leverage in default
configuration and let you block the security model enforcements, but the
local admin rights can be revoked using the same old buddy named GPO. So
you might find yourself having local admin, but not being able to
disjoin the machine from AD or block the enforcements. You can even
restrict local logons without authenticating against AD. 
Heck... I once managed to lock myself out of a workstation by using to
strict GPO and could not do anything even though I had local admin
account :) 

 
 Even if  AD is user space only, it may still be very usefull as a central
 facility for controlling (cooperating) applications, but not as enforcement
 mechanism.
 
  Another important point is the lack of granular ACLs you can apply to
  OpenLDAP objects/attributes. AD here does IMHO much better job. It is
  not trivial, but very powerful. The ACL lets you easily delegate tasks
  to other people, while, when properly maintained, protecting you data.
 
 I'm not sure I follow you -- doesn't the 'access' directive in slapd.conf
 does exactly this? (man slapd.conf)
You mean that you must restart the service ? AD does that on the wire
(Ilya, thanks for pointing that out :) ).
I am repeating myself, but... No inheritance, no inheritance blocking.
OpenLDAP ACL is flat.

 
 Of course most (but not all) Linux filesystems don't support ACL's so your
 claim is valid when directed to the granularity of Linux file permissions.
  In your spare time google for QoS Admission Control and IP Security
  Policy. In Microsoft world all the points you raised can be easily
  managed (although it is VERY rare to stumble on an sysadmin using those.
  Well... More points in my CV :) )
 
 That was interesting reading (BTW, net/sched/cls_rsvp.* implement this
 on standard Linux kernels at least since 2.2.19). However, to really control
 lan resources, the switches/routers should have some *authentication*
 mechanism to identify the DSBM -- otherwise people can easily highjack
 the network.
 
 Example: http://www.mail-archive.com/[EMAIL PROTECTED]/msg12432.html

No I have to do some reading... Thanks for the pointer.

 
  I would prefer to see the services Kerberized.
 
 Now you hit the point. Kerberos solves the distributed services problem:
   - Because it is authenticated.
   - Because the client and the server don't have to trust each other.
 
 However, it seems that per user IP-policies (outside of the specific box) are
 still an illusion as IP packets don't carry the user information. We can 
 dictate them only on cooperating hosts.
Agreed. You can do you best to optimize the network, but meanwhile there
are ways out.


Guy
-- 


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]