- luv-main - luv.asn.au

macros in Apache
by Russell Coker 18 Feb '16

18 Feb '16

http://www.debian- administration.org/article/725/Simplifying_repetitive_Apache_configuration_… Inspired by the above blog post I used Apache macros to simplify the configuration of the LUV server. Please let me know if you notice any problems although I only expect improvements as some of the SSL stuff I have recently done was only implemented on one domain. The usual case when implementing macros/functions/etc is that you discover that you missed things when doing copy/paste work. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

Parted and a removable HDD (USB)
by Andrew Greig 16 Feb '16

16 Feb '16

Hi , I am trying to return a WD Elements HDD to a contiguous state, it had a Fat32 and an EXT2 partition, having deleted the 2 partitions to start again Here is what I have in parted: Model: WD 1600BEV External (scsi) Disk /dev/sdb: 160GB Sector size (logical/physical): 512B/512B Partition Table: msdos Disk Flags: This disk should be around 850Gb How do I overcome this difficulty, please? Andrew Greig

2 1

removing all odd characters from a file
by zlinw＠mcmedia.com.au 14 Feb '16

14 Feb '16

I have some files with this structure, below is in hex. 00 6D 00 61 00 64 00 61 00 6D 00 65 00 3F 00 27 00 20 00 0A It is ascii characters each preceded by a blank, I would like some way to remove all the odd characters, ie all the 00. so in the above case it will end up.............. 6D 61 64 61 6D 65 3F 27 20 0A (madame?"sp""lf") Lindsay

1 0

OpenSUSE upgrade screwed my computer
by Andrew Greig 14 Feb '16

14 Feb '16

Hi All, I believed the stuff on the OpenSUSE website, so I decided to run the Tumbleweed upgrade of my OpenSuse 13.1 distro. Followed the recommendations that it be fully updated prior to the upgrade, and then started. The process was incredibly long, but eventually I was presented with a highly coloured KDE screen. After I loaded the panel with necessary apps I tried to do some work, but something was wrong. Dolphin was a dog (or a hog) Create New>Folder took 45 seconds to present the dialogue box. Trying to close an app would take the same amount of time. I had read a good review of an RPMbased distro called ROSA, so I created a USB image to install it. The installation crashed at the "load software " stage with an error message quoting an rsync failure. My dreams of a fast KDE desktop evaporated. More work needed, so I dropped the OpenSUSE 13.2 DVD in the slot - where things were going well until the partitioning stage, where, because a GPT partition table had been built by the Russians(ROSA) I could\d do nothing with it. Dirty shut down, and then select the Rescue section of the install disk, and using parted I was able to remove the partitions by number. Parted picked up the problem with the GPT setup. I obviously answered the question correctly because on the next boot up with the Install disk everything was clean. 13.2 is installing now, so far so good. (Interval of 30 minutes) I now have a functioning system again. Maybe I will wait a little while before attempting Rosa again. Qusestion: Why would Rosa create a partition of One Kilobyte? Andrew Greig

2 1

Frozen Debian testing upgrade
by stripes theotoky 13 Feb '16

13 Feb '16

Running aptitude full-upgrade or apt-get dist-upgrade gets me to this point and freezes for about 12 hours by which time I assume nothing is happening and kill the process. Before killing it I check with top and the load is virtually nothing. I get an ncurses windown saying Configuring libc6 Kernel version not supported need to be restarted.... This version of the GNU libc requires kernel version 3.2 or later. Older versions might work but are not officially supported. Please consider upgrading your kernel. Ok Click on OK as part of the upgrade is to bring in a newer kernel anyway and I get. Checking for services that may need to be restarted.. Checking init scripts... there it hangs presumably forever at least for 12 hours.. Just now it threw the following error [6477417.633822] systemd-logind[8642]: Failed to enable subscription: Launch helper exited with unknown return code 1 [6477417.633822] systemd-logind[8642]: Failed to fully start up daemon: Input/output error Partway through this upgrade I lost the ability to click anything with the mouse, can still run it around the screen and it wakes up the screen saver but can't click anything. I can connect to the box just fine with ssh. All suggestions welcome.

3 2

RE: pxe server
by James Harper 10 Feb '16

10 Feb '16

> Hi James, > > On 6 Feb 2016, at 11:36 AM, James Harper <mailto:james@ejbdigital.com.au> wrote: > > The ‘pxe’ package under debian appears only able to run on the proxy dhcp port 4011, which I don’t want or need because my PXE server is not running on the > same server as the DHCP server. I think that’s just a permissions issue but I was hoping for something that “just worked” out of the box. > > Any suggestions? > > Your router had to support the option 60. It cannot be done separately. > > The option 60 tells the client the ip and path to you tftp server. > That is incorrect. You can have a regular DHCP server, and then have the boot options supplied by the PXE server (Microsoft's WDS does this). The communication goes (very approximately) like: Client: Give me the info I need to boot DHCP Server: Here is an IP address, subnet mask, DNS Server, gateway, etc PXE Server: Here is your tftp server and path It is possible to run PXE on the same server as the DHCP server, but it's a bit hacky. In this case the DHCP server sets option 60 that tells the client to do another DHCP request on port 4011, so it doesn't try to use the standard DHCP port. (http://www.experts-exchange.com/articles/2978/PXEClient-dhcp-option-60-what…) You can still do it the old fashioned way and just set next-server and path on the DHCP server, which would work but my DHCP server is in the router and doesn't support this. Thanks James

3 3

pxe server
by James Harper 10 Feb '16

10 Feb '16

I'm trying to set up a PXE server under Debian, but can't see any packages that support the DHCP part of the PXE protocol. I already have tftp running, and my router is running DHCP, so I just need the server that can send out the additional boot-related DHCP options alongside what the router is offering. The 'pxe' package under debian appears only able to run on the proxy dhcp port 4011, which I don't want or need because my PXE server is not running on the same server as the DHCP server. I think that's just a permissions issue but I was hoping for something that "just worked" out of the box. Any suggestions? Thanks James

8 7

LCA videos up
by rdbrown＠pacific.net.au 08 Feb '16

08 Feb '16

Under the Youtube channel https://www.youtube.com/channel/UChQOJ44-9PPA7mZ16m3RcPA "Linux.conf.au 2016 -- Geelong, Australia" As webm for download under http://mirror.linux.org.au/linux.conf.au/2016/

1 0

Gnome / Debian testing / Login slow
by Brian May 07 Feb '16

07 Feb '16

Hello All, For some reason ever since I upgraded my box to Debian testing, when I try to log into Gnome with gdm, the system "freezes" with a grey background until I push escape, then the system boots normally. Or If I wait long enough it will eventually finish whatever it was doing and continue normally. Had the same problem with awesome window manager, so I think the problem is before it starts the user session. top shows gnome-shell is the only process using CPU, 8%. In fact this process goes up to about 10% after the login completes. Run by the debian-gdm user. Any ideas on how to debug? Thanks -- Brian May <brian(a)linuxpenguins.xyz> https://linuxpenguins.xyz/brian/

1 0

SSL configuration
by Russell Coker 05 Feb '16

05 Feb '16

https://www.decadent.org.uk/ben/blog/securing-wwwdecadentorguk.html I read the above blog post. https://www.ssllabs.com/ssltest/ I tested the LUV web site with the above URL and got A-. https://blog.qualys.com/ssllabs/2013/08/05/configuring-apache-nginx-and- openssl-for-forward-secrecy I followed the advice at the above URL and got B! https://blog.qualys.com/ssllabs/2013/03/19/rc4-in-tls-is-broken-now-what From the comments on the above blog post it seems that the only way to have PFS and not be vulnerable to other issues is to require TLS 1.2. The browser that is built in to Android (which is going to be a long-term issue as some people will use it until their phone breaks) only supports TLS 1.2 in Android 5.0 and above. The Samsung Galaxy Note 2 is currently not supported for Android 5.0 while the Galaxy Note 3 is. The Note 2 is still quite a decent phone. https://en.wikipedia.org/wiki/Template:TLS/SSL_support_history_of_web_brows… The above page has TLS/SSL support of various browsers. If we require TLS 1.2 we exclude: The default Android browser before Android 5.0. Admittedly that browser always sucked badly and probably has lots of other security issues. Chrome versions before 30 didn't support it. But version 30 was released in 2013 and Google does a good job of forcing upgrades. A Debian/Wheezy system I run is now displaying warnings from the google-chrome package saying that Wheezy is too old and won't be supported for long! Firefox before version 27 didn't support it (the Wikipedia page is unclear about versions 27-31). 27 was released in 2014. Debian/Wheezy has version 38, Debian/Squeeze has Iceweasel 3.5.16 which doesn't support it. Would it be reasonable to assume that anyone who's still using Squeeze is using it for a server? IE version 11 supports it and runs on Windows 7+ (all supported versions of Windows). IE 10 doesn't support it and runs on Windows 7 and Windows 8. Are the free upgrades from Windows 7 to Windows 10 going to solve this problem? Windows mobile doesn't have enough users to care about. Opera supports it from version 17. This is noteworthy because Opera used to be good for devices running older versions of Android that aren't supported by Chrome. Safari supported it from iOS version 5, I think that's a solved problem there. Is breaking support for Debian/Squeeze, the built in Android browser on Android <5.0, and Windows 7 and 8 systems that haven't upgraded IE as a web browsing platform a reasonable trade-off for implementing the best SSL security features? For the LUV server as a stand-alone issue the answer would be no as the only really secret data there is accessed via ssh. For a general web infrastructure issue it seems that the answer might be yes. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

11 22