Re: [Server-devel] iptables generation

2009-09-09 Thread Joshua N Pritikin
On Wed, Sep 09, 2009 at 07:23:38PM +0200, Martin Langhoff wrote: On Wed, Sep 9, 2009 at 6:00 PM, Martin Langhoffmartin.langh...@gmail.com wrote: I've integrated your script, with some changes to make it atomic, as you can see at   http://dev.laptop.org/git/projects/xs-config/commit/

Re: [Server-devel] iptables generation

2009-08-23 Thread Joshua N Pritikin
On Tue, Aug 11, 2009 at 10:15:39PM +0530, Joshua N Pritikin wrote: On Tue, Aug 11, 2009 at 11:45:15AM +0530, Joshua N Pritikin wrote: + if re.match('@@MASQ@@', line): + print '-A POSTROUTING -o %s -j MASQUERADE' % wan This is dumb. I'll try to fix the patch tomorrow

Re: [Server-devel] iptables generation (was Re: pppd restarting mysteriously)

2009-08-11 Thread Joshua N Pritikin
On Mon, Aug 10, 2009 at 08:55:55PM +0200, Martin Langhoff wrote: On Fri, Aug 7, 2009 at 2:15 PM, Joshua N Pritikinjpriti...@pobox.com wrote: Here is the script I promised Martin. Right - thanks for that! I assume it works well and it's been tested for normal and ppp0 connectivity over

Re: [Server-devel] how to copy activation leases to XS?

2009-08-09 Thread Joshua N Pritikin
On Mon, Aug 10, 2009 at 11:02:13AM +0545, Daniel Drake wrote: Activation leases are unrelated to the security features around signed images. Currently the only option for creating your own signed images which can be installed at the OFW level is to insert your own S security key into the

[Server-devel] iptables generation (was Re: pppd restarting mysteriously)

2009-08-07 Thread Joshua N Pritikin
Here is the script I promised Martin. From f7333e727d7c3d89c3f6bc727dba7061d7ae584d Mon Sep 17 00:00:00 2001 From: Joshua Pritikin jpriti...@pobox.com Date: Fri, 7 Aug 2009 10:26:23 +0530 Subject: [PATCH] Automate iptable rules generation --- sysconfig/iptables-config |7 +

[Server-devel] errortoomanylogins

2009-08-04 Thread Joshua N Pritikin
I'm not sure how, but one of our students triggered errortoomanylogins. Restarting the browser did not seem to help. Therefore, I removed the check. Is this is sane thing to do? What is the point of this check anyway? If I was going to try to guess a password then I would create a fresh

Re: [Server-devel] web filtering

2009-08-01 Thread Joshua N Pritikin
On Fri, Jul 31, 2009 at 10:46:33PM -0600, Martin Langhoff wrote: - wiki material? Added, http://wiki.laptop.org/go/XS_Installing_Software#Internet_Filtering Is it worth mentioning DansGuardian? DansGuardian is free and does content filtering, not just URL or IP address filtering. On Fri,

Re: [Server-devel] how to turn off OLPC autologin authentication?

2009-08-01 Thread Joshua N Pritikin
On Sat, Aug 01, 2009 at 07:20:18AM -0600, Martin Langhoff wrote: You do buy into a much harder usage model Yah, I know. The thing is, our teachers have never seen anything like moodle before. I figured if they realize what they're missing, they will better understand the need for laptops.

Re: [Server-devel] web filtering

2009-07-31 Thread Joshua N Pritikin
On Fri, Jul 31, 2009 at 08:50:45PM -0430, Faaez Ul Haq wrote: Could you refer me to the article? It might be another olpcorps team that does. This freaks me out. We are giving unfiltered internet access to elementary school children? Is this wise?

Re: [Server-devel] the first user is admin moodle policy

2009-07-30 Thread Joshua N Pritikin
On Wed, Jul 29, 2009 at 07:29:30AM -0400, Reuben K. Caron wrote: Pass this first and then try to login (you may need to reboot after:) sudo -u apache php /var/www/moodle/web/local/scripts/adminuser-enable.php Finally! OK, we'll start playing with moodle. If you guys need any help testing the

Re: [Server-devel] the first user is admin moodle policy

2009-07-28 Thread Joshua N Pritikin
On Tue, Jul 28, 2009 at 03:25:35PM +0200, Martin Langhoff wrote: On Tue, Jul 28, 2009 at 2:16 PM, Joshua N Pritikinjpriti...@pobox.com wrote: Can I create regular logins just to get started on exploring moodle? - If you want to get 'admin' on the patched Moodle on XS, see

Re: [Server-devel] the first user is admin moodle policy

2009-07-26 Thread Joshua N Pritikin
On Sat, Jul 25, 2009 at 09:41:43PM -0700, Sameer Verma wrote: Make sure you update your Browse version to 102. This version has all the bits needed to do seamless login. Do this via the Control Panel | Software Update I updated to Browse-102 from activities.sugarlabs.org using a customization

Re: [Server-devel] the first user is admin moodle policy

2009-07-26 Thread Joshua N Pritikin
On Sun, Jul 26, 2009 at 03:49:56PM +0200, Martin Langhoff wrote: On Sun, Jul 26, 2009 at 1:37 PM, Joshua N Pritikinjpriti...@pobox.com wrote: How do I further debug this? On the client side: - find the cookies.sqlite file (which will be in one of the 'isolation' dirs rainbow makes).

Re: [Server-devel] the first user is admin moodle policy

2009-07-26 Thread Joshua N Pritikin
On Sun, Jul 26, 2009 at 08:42:10AM -0700, Sameer Verma wrote: Hmm. I vaguely remember that there was some confusion as to which copy of Browse was going to be 102. I hope that was resolved. I use the 102 that comes via the Control Panel's update process and my control panel update points to

Re: [Server-devel] the first user is admin moodle policy

2009-07-25 Thread Joshua N Pritikin
On Fri, Jul 24, 2009 at 08:50:22PM +0200, Martin Langhoff wrote: On Wed, Jun 17, 2009 at 6:00 PM, Martin Langhoffmartin.langh...@gmail.com wrote:  - add the /etc/moodle/coursecreators support so that   - if it exists, even if empty, magic first come is CC is disabled   - it reads

Re: [Server-devel] pppd restarting mysteriously

2009-07-24 Thread Joshua N Pritikin
On Fri, Jul 24, 2009 at 03:56:21PM +1000, James Cameron wrote: On Fri, Jul 24, 2009 at 10:47:14AM +0530, Joshua N Pritikin wrote: I feel really dumb: Could you please send me by e-mail the output of the following commands, which must be run as root: Then I'll suggest some commands

Re: [Server-devel] pppd restarting mysteriously

2009-07-24 Thread Joshua N Pritikin
On Fri, Jul 24, 2009 at 05:11:32PM +1000, James Cameron wrote: On Fri, Jul 24, 2009 at 12:00:49PM +0530, Joshua N Pritikin wrote: The question is, what to change in /etc to make the change permanent? For Fedora, I don't yet know. For Debian and Ubuntu, the usual method is a tiny script

Re: [Server-devel] ejabberd and DNS hurdles

2009-07-23 Thread Joshua N Pritikin
On Thu, Jul 23, 2009 at 08:18:14AM +0200, Martin Langhoff wrote: Sameer's suggestion to set forwarders is very good, recommended. Yes, this worked for me. It would be more ideal to include /var/run/ppp/resolv.conf into named-xs.conf dynamically, but I am happy enough.

Re: [Server-devel] ejabberd and DNS hurdles (was Re: moodle howto?)

2009-07-23 Thread Joshua N Pritikin
On Thu, Jul 23, 2009 at 08:18:14AM +0200, Martin Langhoff wrote: For xs0.6 you should _not_ configure ejabberd. I've posted the (much simpler!) instructions for 0.6on this list about 2 months ago. Google has excellent coverage of the archive ... ;-) For future reference, it appears Martin was

Re: [Server-devel] ejabberd and DNS hurdles

2009-07-23 Thread Joshua N Pritikin
On Wed, Jul 22, 2009 at 04:09:22PM -0700, Sameer Verma wrote: This might get fixed by doing a forwarders for DNS. I have to do this when I use the XS on campus. http://www.mail-archive.com/server-devel@lists.laptop.org/msg02381.html Added to the end of Network Configuration: If you can only

Re: [Server-devel] ejabberd and DNS hurdles (was Re: moodle howto?)

2009-07-23 Thread Joshua N Pritikin
On Thu, Jul 23, 2009 at 05:37:11PM +0800, Deds Castillo wrote: On Thursday 23 July 2009, Joshua N Pritikin wrote: On Thu, Jul 23, 2009 at 08:18:14AM +0200, Martin Langhoff wrote: For xs0.6 you should _not_ configure ejabberd. I've posted the (much simpler!) instructions for 0.6on

[Server-devel] Access Point configuration

2009-07-23 Thread Joshua N Pritikin
I had my first experience of bricking a wireless router today. Fortunately, I had a backup router on hand. The steps listed in AP Configuration seem incomplete. Today I flashed my secondary WRT54GL with DD-WRT and loaded factory defaults. Make sure that the access point is NOT running as a

[Server-devel] pppd restarting mysteriously

2009-07-23 Thread Joshua N Pritikin
As I mentioned, I have a CDMA EVDO modem for Internet access. This works fine Ubuntu and Debian laptops. On the schoolserver, pppd restarts within a minute for no reason. I looked at the options for wvdial and turned off anything suspicious. I don't think wvdial is implicated. It looks like

Re: [Server-devel] Access Point configuration

2009-07-23 Thread Joshua N Pritikin
On Thu, Jul 23, 2009 at 12:38:27PM +0200, Marten Vijn wrote: You can de-brick with soldering a tll to serial converter on the board on of the linksys. Then you can have a serial line to bios/dd-wrt. In the bios you can enable tftp to reflash the linksys over network. The are clear recovery

Re: [Server-devel] pppd restarting mysteriously

2009-07-23 Thread Joshua N Pritikin
On Fri, Jul 24, 2009 at 11:32:37AM +1000, James Cameron wrote: The symptom is that your pppd receives an LCP Configuration Request from the modem that attempts to begin authentication all over again. pppd handles this (correctly) by shutting down the link. My analysis of this when I was

[Server-devel] ejabberd and DNS hurdles (was Re: moodle howto?)

2009-07-22 Thread Joshua N Pritikin
On Wed, Jul 22, 2009 at 02:24:05PM +0200, Martin Langhoff wrote: Then I think around the time you looked at the instructions the DNS configuration steps were all messed up. Daniel Drake just did a major cleanup of that. Maybe it'd be a good idea to retry from the start with the better

[Server-devel] taming a fresh 0.5.2 install

2009-07-21 Thread Joshua N Pritikin
There is some DNS dysfunction. I can ping external sites (e.g. laptop.org) from the schoolserver. I can ssh to the schoolserver from my laptop. However, I cannot ping external sites from my laptop. I am using a USB EV-DO CDMA adapter to connect to the Internet. When it connects, it creates a

Re: [Server-devel] moodle howto?

2009-07-21 Thread Joshua N Pritikin
On Tue, Jul 21, 2009 at 09:51:24PM +0200, Martin Langhoff wrote: Did you edit the XS install pages recently, perhaps? Yes, I got stuck on the installation because a step was missing. The Install using kickstart option is not present until you get past the first boot prompt. I mentioned that in

Re: [Server-devel] anaconda deletes /fsckoptions on F9 based XS

2008-09-17 Thread Joshua N Pritikin
On Thu, Sep 18, 2008 at 12:49:22PM +1200, Martin Langhoff wrote: good question. In the field, the XS machines never get switched off - they are headless, and set in the bios to auto-switch-on. Most of them will be in locations with unreliable power - so they will switch off when power gets

Re: [Server-devel] anaconda deletes /fsckoptions on F9 based XS

2008-09-17 Thread Joshua N Pritikin
On Thu, Sep 18, 2008 at 12:49:22PM +1200, Martin Langhoff wrote: good question. In the field, the XS machines never get switched off - they are headless, and set in the bios to auto-switch-on. Most of them will be in locations with unreliable power - so they will switch off when power gets

Re: [Server-devel] Network transparent XS services - limitations and alternatives

2008-08-26 Thread Joshua N Pritikin
On Tue, Aug 26, 2008 at 07:53:19PM -0400, C. Scott Ananian wrote: On Tue, Aug 26, 2008 at 7:40 PM, Martin Langhoff [EMAIL PROTECTED] wrote: http://wiki.laptop.org/go/Network_principles#Disconnected_operation is a principled means to substitute unavailable resources in the offline case.

Re: [Server-devel] Help test OLPC_XS_169 - RC1 for xs-0.4

2008-08-23 Thread Joshua N Pritikin
On Sat, Aug 23, 2008 at 05:33:21PM +1200, Martin Langhoff wrote: YES. I nowrealise that I forgot this bit of instructions (I think I included in an earlier set). It goes like this: - if you are upgrading, you *must* re-run domain_config yourbasedomain OK, fair enough. [EMAIL PROTECTED]

Re: [Server-devel] Help test OLPC_XS_169 - RC1 for xs-0.4

2008-08-22 Thread Joshua N Pritikin
After upgrading, I got this: Error in named configuration: /etc/named-xs.conf:53: open: /var/named/named.root.hints: file not found It's a broken link: [EMAIL PROTECTED] ~]# ls -l /var/named/named.root.hints lrwxrwxrwx 1 root root 40 2008-07-30 06:44 /var/named/named.root.hints -

Re: [Server-devel] Help test OLPC_XS_169 - RC1 for xs-0.4

2008-08-22 Thread Joshua N Pritikin
On Fri, Aug 22, 2008 at 05:15:19PM -0500, Jerry Vonau wrote: Did you run config_domain after the upgrade? No. Should I have? ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel

Re: [Server-devel] Help test OLPC_XS_169 - RC1 for xs-0.4

2008-08-22 Thread Joshua N Pritikin
On Fri, Aug 22, 2008 at 04:16:38PM -0500, Jerry Vonau wrote: Might know what the issue is, could you post the contents of /etc/sysconfig/named, OPTIONS='-c /etc/named-xs.conf' /etc/named-xs.conf Attached. just to confirm my suspicions. Also, does /var/named-xs exist? Yes. [EMAIL

Re: [Server-devel] Help test OLPC_XS_169 - RC1 for xs-0.4

2008-08-22 Thread Joshua N Pritikin
On Sat, Aug 23, 2008 at 01:33:48PM +1200, Martin Langhoff wrote: Odder even. What's your version of xs-config? [EMAIL PROTECTED] ~]# rpm -q --provides xs-config config(xs-config) = 0.3.5-1 xs-config = 0.3.5-1 ___ Server-devel mailing list

Re: [Server-devel] wvdial woes

2008-08-20 Thread Joshua N Pritikin
On Wed, Aug 20, 2008 at 11:23:30AM +1200, Martin Langhoff wrote: Our networking setup is somewhat rigged (something that Jerry is looking at curing for F9 :-) ) and according to Wad running netplugd makes it trip up so we've disabled it. Maybe the usb connection scripts start netplugd? Thanks

[Server-devel] config file mess

2008-08-20 Thread Joshua N Pritikin
I accidentally upgraded from XS_165 to a new xs-config (maybe 0.3.1?). The upgrade got stuck halfway through, and I cancelled it. What is the proper way to fix config files? Copy foo.conf to foo-xs.conf? I already fixed named and squid. What other services do I need to check?

[Server-devel] ext2resize?

2008-08-20 Thread Joshua N Pritikin
What is the proper way to install ext2resize? It doesn't appear to be in yum? ___ Server-devel mailing list Server-devel@lists.laptop.org http://lists.laptop.org/listinfo/server-devel

Re: [Server-devel] config file mess

2008-08-20 Thread Joshua N Pritikin
On Thu, Aug 21, 2008 at 09:07:02AM +1200, Martin Langhoff wrote: On Thu, Aug 21, 2008 at 3:39 AM, Joshua N Pritikin [EMAIL PROTECTED] wrote: I accidentally upgraded from XS_165 to a new xs-config (maybe 0.3.1?). Ouch. That will be a big disaster, I am just fixing the bugs around

Re: [Server-devel] wvdial woes

2008-08-19 Thread Joshua N Pritikin
On Tue, Aug 19, 2008 at 03:36:38PM +0530, Joshua N Pritikin wrote: The USB modem works fine at long as my wired network is disconnected. As soon as I connect the WRT54GL, the something is running ifdown/ifup on ppp about every 5 seconds. When I disconnect the wired network, things return

Re: [Server-devel] installing a school server

2008-08-18 Thread Joshua N Pritikin
On Mon, Aug 18, 2008 at 06:06:17AM -0500, Jerry Vonau wrote: What version of squashfs-tools are you using? If it 3.3.x try adding -no-sparse -b 64k to the mksqushfs call Yup, that worked. However, my kickstart modifications were not successful. My hard drive got repartitioned. Eventually grub

[Server-devel] installing a school server

2008-08-08 Thread Joshua N Pritikin
I finally got a reasonably fast internet connection at our school in India (BSNL EV-DO). I would like to try to install the school server. We have 15 XO laptops. Just to get something working, I installed Ubuntu with Squid/Dansguardian. I have about 200Gb of hard drive and 2G RAM. Can I get