- luv-main - luv.asn.au

Central Auth Anyone?
by Craig T 20 Dec '11

20 Dec '11

Hi, Has anyone successfully deployed OpenLDAP/IPA or even 389 DS for central auth in a very mixed unix environment? With Host based access control? Redhats new IPA 2.0 product on paper looks brilliant, I just keep finding bugs and it's feeling just too new to deploy commerically at the moment (happy to be proven wrong). My needs; - Central Auth - Host based access control (e.g. user "John" from group "accounts" can't log into "development servers". - Caching for Client logins on laptops. I figure SSSD will be useful here? - Encryption (This looks pretty straight forward in the OpenLDAP 2.4 doco) Client OS's involved; - Solaris 9/10 - Fedora 15/16 - Centos 5/6 cya Craig

3 2

ir & linux 3.1
by Brian May 17 Dec '11

17 Dec '11

Hello, Trying to get inputlirc going with Linux 3.0 in Ubuntu 11.10 It works fine if I boot 2.6.28 left over from Ubuntu 11.04, everything works perfectly Problem seems to be that the kernel isn't decoding the scan codes into key presses: root@oncilla:~# ir-keytable -t Testing events. Please, press CTRL-C to abort. 1324089674.313994: event MSC: scancode = 1f21 1324089674.313995: event sync 1324089674.689301: event MSC: scancode = 1f21 1324089674.689303: event sync 1324089674.948084: event MSC: scancode = 1f21 1324089674.948085: event sync 1324089675.230977: event MSC: scancode = 1f21 1324089675.230978: event sync 1324089675.489673: event MSC: scancode = 1f21 1324089675.489674: event sync 1324089675.806055: event MSC: scancode = 1f21 1324089675.806057: event sync If I look at the table, I think I can see why: root@oncilla:~# ir-keytable -r scancode 0x0000 = KEY_0 (0x0b) scancode 0x0001 = KEY_1 (0x02) scancode 0x0002 = KEY_2 (0x03) scancode 0x0003 = KEY_3 (0x04) scancode 0x0004 = KEY_4 (0x05) scancode 0x0005 = KEY_5 (0x06) scancode 0x0006 = KEY_6 (0x07) scancode 0x0007 = KEY_7 (0x08) scancode 0x0008 = KEY_8 (0x09) scancode 0x0009 = KEY_9 (0x0a) scancode 0x000a = KEY_TEXT (0x184) scancode 0x000b = KEY_RED (0x18e) scancode 0x000c = KEY_RADIO (0x181) scancode 0x000d = KEY_MUTE (0x71) scancode 0x000e = KEY_SUBTITLE (0x172) scancode 0x000f = KEY_MUTE (0x71) scancode 0x0010 = KEY_VOLUMEUP (0x73) scancode 0x0011 = KEY_VOLUMEDOWN (0x72) scancode 0x0012 = KEY_PREVIOUS (0x19c) scancode 0x0014 = KEY_UP (0x67) scancode 0x0015 = KEY_DOWN (0x6c) scancode 0x0016 = KEY_LEFT (0x69) scancode 0x0017 = KEY_RIGHT (0x6a) scancode 0x0018 = KEY_VIDEO (0x189) scancode 0x0019 = KEY_AUDIO (0x188) scancode 0x001a = KEY_CAMERA (0xd4) scancode 0x001b = KEY_EPG (0x16d) scancode 0x001c = KEY_TV (0x179) scancode 0x001e = KEY_RED (0x18e) scancode 0x001f = KEY_TV (0x179) scancode 0x0020 = KEY_CHANNELUP (0x192) scancode 0x0021 = KEY_CHANNELDOWN (0x193) scancode 0x0022 = KEY_VIDEO (0x189) scancode 0x0024 = KEY_LAST (0x195) scancode 0x0025 = KEY_OK (0x160) scancode 0x0026 = KEY_SLEEP (0x8e) scancode 0x0029 = KEY_BLUE (0x191) scancode 0x002e = KEY_ZOOM (0x174) scancode 0x0030 = KEY_PAUSE (0x77) scancode 0x0032 = KEY_REWIND (0xa8) scancode 0x0034 = KEY_FASTFORWARD (0xd0) scancode 0x0035 = KEY_PLAY (0xcf) scancode 0x0036 = KEY_STOP (0x80) scancode 0x0037 = KEY_RECORD (0xa7) scancode 0x0038 = KEY_YELLOW (0x190) scancode 0x003b = KEY_GOTO (0x162) scancode 0x003c = KEY_ZOOM (0x174) scancode 0x003d = KEY_POWER (0x74) scancode 0x003f = KEY_HOME (0x66) Enabled protocols: Notice all the prefixes are 0x00, but the scan code the kernel produces has a prefix of 0x1f. So problem solved, right? Unfortunately, not quite that easy. If I look up the kernel table used: Found /sys/class/rc/rc0/ (/dev/input/event5) with: Driver budget_ci, table rc-hauppauge Supported protocols: Enabled protocols: Repeat delay = 500 ms, repeat period = 125 ms Then, look up rc-hauppauge in the kernel source, I find the linux-source-3.0.0/drivers/media/rc/keymaps/rc-hauppauge.c file. However, this has more entries then what is shown by "keytable -r". In particular, the kernel source has codes prefixed with 0x1e, and ox1f that don't show. I have traced the code, but can't see why the list is being filtered. So this is one aspect I don't understand. I can't set values with keytable, however. The upper bits of the scan value are set to 0. This corresponds with my reading of the code in the kernel - I can see that masks individual scan codes with 0xff when writing individual values. This code doesn't seem to apply to loading kernel the modules containing the tables however. From the kernel source: /* * Unfortunately, some hardware-based IR decoders don't provide * all bits for the complete IR code. In general, they provide only * the command part of the IR code. Yet, as it is possible to replace * the provided IR with another one, it is needed to allow loading * IR tables from other remotes. So, we support specifying a mask to * indicate the valid bits of the scancodes. */ if (dev->scanmask) scancode &= dev->scanmask; The budget-ci driver appears to set dev->scanmask to 0xff (linux-source-3.0.0/drivers/media/dvb/ttpci/budget-ci.c) file. So maybe the problem is that it is receiving the full scan code, but the table entry doesn't have the full scan code. For reasons I don't quite understand. Under the 2.6.38, the scancode always has a 0x00 prefix, everywhere, and everything works fine. -- Brian May <brian(a)microcomaustralia.com.au>

1 2

Drupal Training at DDU2012
by Donna Benjamin 11 Dec '11

11 Dec '11

As the year rapidly draws to a close some of you might still have access to funds for professional learning. If you do, and are doing Drupal, or thinking about doing Drupal in 2012 then here is an opportunity to level up over summer. Pre- and Post-conference training is on offer in association with Drupal Downunder Pre-Conference Training - Friday 13 January 1. Drupal in a Day $395 http://drupaldownunder.org/ticket/drupal-7-day 2. Object Oriented Programming with PHP $395 http://drupaldownunder.org/ticket/object-oriented-programming-php 3. MySQL training pack $395 http://drupaldownunder.org/mysql-training-pack Comprised of 2 modules that can also be taken individually - Query Design $220 http://drupaldownunder.org/ticket/mysql-query-design - Server Tuning $220 http://drupaldownunder.org/ticket/mysql-server-tuning 4. Hello Drupal - Free to DDU2012 attendees A 1.5 hr introduction to Drupal 3.30 - 5pm http://drupaldownunder.org/ticket/hello-drupal DDU2012 Saturday 14 - Sunday 15 January Drupal Downunder $275 for both days! http://drupaldownunder.org/program 3 Keynotes, 36 concurrent sessions in 4 tracks Post conference training - Monday 16 - Friday 20 January Drupal 7 Site Building Mon 16 & Tues 17 - $790 http://drupaldownunder.org/ticket/drupal-7-site-building Drupal Development Package $1,595.00 http://drupaldownunder.org/ticket/drupal-development-package comprised of 3 modules which can also be taken individually PHP Skills for Drupal - Mon 16 $395 http://drupaldownunder.org/ticket/php-skills-drupal Front End Development in Drupal Theming Tue 17 - Wed 18 $790 http://drupaldownunder.org/ticket/front-end-development-drupal-theming Drupal Module Development Thu 19 - Fri 20 $790 http://drupaldownunder.org/ticket/drupal-module-development -- Donna Benjamin ph: 0418 310 414 Core team member - http://drupaldownunder.org Bringing web professionals and enthusiasts together to connect, learn and create. 13-15 January 2012 at the Jasper Hotel, Melbourne.

1 0

pptp
by Russell Coker 09 Dec '11

09 Dec '11

I've just been setting up some pptp servers for mobile phone VPN use. Rumor had it that CyanogenMod would allow me to choose whether to route all traffic via the VPN, but I've installed the latest stable release and it appears to lack such functionality. Anyway one thing that's annoying is that I have to enter a password every time. That leads to a choice between a poor password that's easy to remember or a good password that needs to be written down, and both of those cases involve annoying typing. The VPN client will store the user-name though. So I was wondering whether the user-name is encrypted, if so I could use "1" for the password and have the random 8 character string as the user-name. I believe that the loss of email from a stolen phone is a much greater concern than the loss of a VPN password, among other things the VPN password can be trivially changed but the IMAP mail that is cached in the phone is lost to the attacker. http://en.wikipedia.org/wiki/Pptp#Security_of_the_PPTP_protocol Wikipedia says that the security of PPTP is weak. This isn't even including the case that any system which only has a user-name and password supplied by the client and no stored authentication token stored by either side (EG like the ~/.ssh/known_hosts) is going to lose in some way if the hostile party can proxy the protocol. In terms of setting up the server on Linux I just had to add something like the following to /etc/ppp/chap-secrets: USER pptpd PASS * Then I set suitable IP addresses in /etc/pptpd.conf . It wasn't difficult although mistakes with the chap-secrets file and attempts to get PAP working wasted a bit of time. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

7 22

Debian bugfixes - where are they?
by Andrew Worsley 08 Dec '11

08 Dec '11

This seems a crazyness in debian bugfixing system to me: I am trying to get amanda to recover - and I have hit this bug reported in debian lenny where the client trying to do the recovery insists on using ipv6 to talk to an ipv4 machine which fails. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=482754 which has a fix in amanda-client Version: 1:2.5.2p1-5 as per bug report in **26 Mar 2009** - *BUT* where can I get this - today in Dec 2011???? http://packages.debian.org/search?keywords=amanda-client lists the latest lenny version as 1:2.5.2p1-4 (the version I am running). Can some one explain - Why is this not released ? - Where do all these fixes go - some secret archive for debian insiders .... - How I can fix this with out : - grabbing the source and recompiling it all myself - upgrading the whole client machine to squeeze or some newer release Thanks in advance Andrew

11 18

MySQL multi-master config ?
by Chris Samuel 07 Dec '11

07 Dec '11

Hi folks, Anyone know of anyone using this sort of config in production ? http://onlamp.com/pub/a/onlamp/2006/04/20/advanced-mysql-replication.html It's basically exploiting the auto_increment and auto_increment_offset server settings in news MySQL to avoid ID clashes between servers, and then config them to each replicate the other. It's one of those things that sounds useful, but sounds like it might have a lot of opportunity to do interesting unexpected things to your data.. Thoughts ? cheers, Chris -- Chris Samuel : http://www.csamuel.org/ : Melbourne, VIC

2 3

mysql Data truncated for column 'x' at row y warning
by Brian May 07 Dec '11

07 Dec '11

Hello, When storing a string that is longer then the table definition, is it possible to configure mysql to treat this condition as an error and abort the operation, rather then blindly truncating/corrupting the data and reporting a warning? Or does this require using transactions[1]? I thought I saw a solution somewhere ages ago, but can't find it right now. Thanks Notes: [1] IIRC transaction support requires InnoDB and some applications require MyISAM - e.g. for geospatial stuff. Of course another option would be to switch to a better DB, eg postgresql. -- Brian May <brian(a)microcomaustralia.com.au>

2 3

free hardware
by Russell Coker 05 Dec '11

05 Dec '11

Tomorrow I will pick over a pile of decommissioned computers. Probably the minimum spec will be about a 2GHz P4 desktop. There may be some servers and workstation class systems (tower systems with ECC RAM and space for 4+ disks). For most of the systems I will probably just take RAM and hard drives and leave the rest. If anyone has any need for such systems or parts then let me know. If you want a PSU then let me know if you need SATA connectors. Special requests such as for a system that has 4 DIMM slots on the motherboard are possible. Requests for particular brands are possible. I will probably see some HP, Lenovo, and Dell systems. I can bring stuff to the meeting tomorrow night. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

2 1

hardware library
by Russell Coker 03 Dec '11

03 Dec '11

We have a library which is apparently working well. I think that the next logical step would be to establish a small hardware library. There are lots of items which have mass and volume that is less than or equal to books which can be really handy to have, often available for free, but which are unreasonably difficult or expensive if you need to buy them. I think that if we had a library which had an assortment of RAM, some video cards, a few IDE and SATA hard drives, and a good quantity of each of the sizes of screw that is used in a PC case then it would provide real value for members while not being a huge effort for someone to bring to the meeting (a small bag that could be carried in one hand - even on public transport). For extra value (and a little more transportation effort) we could have a selection of cables (power, Ethernet, USB, IDE->SATA power converters, etc), a couple of PSUs (for SATA and pre-SATA systems), and some motherboards with CPUs (I was recently offered a free motherboard with a quad-core CPU). That would take it to one box that could be carried from a car boot to the meeting without much effort. If it was going to be two boxes then a selection of power-brick PSUs would be a great thing to have (I've got a Wifi AP with a dead PSU, I would love to be able to plug it into a few PSUs and see if I can get it to work). If I was going to be attending regularly I'd run this myself. But as I haven't been attending regularly I think it would be best if it was run by someone else. I can provide a good portion of the hardware described to start this off. Some of that hardware is stuff I keep because I might need it some day, but that I would give away if I could have a reasonable chance of getting something equivalent back if I ever need it. Any volunteers? -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

3 3

iphone as a gsm modem
by James Harper 03 Dec '11

03 Dec '11

Google is giving me conflicting answers... I want to dial a remote gsm device via my iPhone plugged in to a PC but I'm not seeing anything that looks like it might be a modem when I do lsusb. This is obviously different than just having a data connection to the internet as the remove device isn't connected to the internet - I need to dial it directly. Can the iPhone be used as a GSM modem or is that deemed too 'legacy' these days? I'm hoping there is a usb switch app I can run to enable the modem USB interface but I'm not optimistic. Thanks James

4 9