KCLUG

kclug@kclug.org

5 participants
3302 discussions

Samba, PAM, LDAP and SASL
by Jack 30 Jan '06

30 Jan '06

Just doing some playing around. I want to use one of my PCs on my home LAN as a fileserveer. Mainly, the idea is to share the directory of family photos locally. I know all I really need here is samba. But I thought I mught as well use PAM to do authentication. Which led me to consider using LDAP and SASL. Why? I don't know. He's on third. Anyway after having installed Samba, and relevant PAM modules and SASL and LDAP and setting up an LDAP server, I'm left wondering what LDAP is really useful for? I've read the FAQ, quickstart guide, several HOWTOs and the Administrator's manual. I have a working LDAP daemon running, but am left wondering what to do with it. Does anyone use LDAP? How? Why? Now at some point I might like allowing some of my remote family members to access this content from outside. Which was one reason I thought I'd play around with some of these tools. So that I could add users without creating local accounts, and also to maintain a single password database for managing passwords. Thanks. Brian JD

2 1

RE: state of Missouri to archive cell phone location data?
by Jeremy Fowler 30 Jan '06

30 Jan '06

> > Sorry to be a kill-joy, but I call hoax. > Maybe not... http://www.stallman.org/archives/2005-sep-dec.html#13%20December%202005%20(… http://www.theledger.com/apps/pbcs.dll/article?AID=/20051210/ZNYT01/5121004… http://news.bbc.co.uk/2/hi/programmes/click_online/4534674.stm

1 0

RE: getting to www servers from inside where they have an Internal IP
by Kelsay, Brian - Kansas City, MO 30 Jan '06

30 Jan '06

I'm still wondering why the webserver address seems to change all the time? Either it should have a static IP or a name which resolves via DNS. Internal PCs should hit the hosts file first, then local DNS, then external DNS to resolve. How many internal hosts (PCs)? You can update a hosts file with a login script and they can be set to search the local net first, before going to the internal DNS server. So, are you changing the hostname of the server all the time or adding new ones, e.g. webserver1, webserver2, etc., or adding new domains all the time? Considering that any of these involve adding a few lines to a text file for name resolution, I agree with Frank, that this is not hard. Again, it could be even scriptable to add a virtual host to a webserver and update DNS files and restart DNS if this is a frequent occurance. -----Original Message----- From: Behalf Of Frank Wiles On Sat, 28 Jan 2006 18:42:56 -0600 hanasaki <hanasaki(a)hanaden.com> wrote: > harder in the sense... > > wouldn't it be much easier to just add a new virtual host to the > webserver and be able to hit it w/o having to update internal DNS (ie: > only the external world dns). With something link BIND 9 which can do split DNS views of the outside world and inside world having "split DNS" literally means you have to change two lines of zone configs instead of one. So for example, if you're adding new-host.domain.com to both you have have to add it into db.domain.com-external and db.domain.com-internal and rndc reload the config. I'm still wondering why this is "hard". --------------------------------- Frank Wiles <frank(a)wiles.org> http://www.wiles.org ---------------------------------

2 1

state of Missouri to archive cell phone location data?
by David Nicol 30 Jan '06

30 Jan '06

enjoy ---------- Forwarded message ---------- From: Margaret Q <margaretq(a)gmail.com> Date: Jan 28, 2006 1:24 PM Subject: Re: MO's contract begins feb 1 in KC and St. Louis. To: David Nicol <davidnicol(a)gmail.com> REALLY briefly 'cuz I'm swamped. The state of MO has contracted with 2 engineering firms to track divers by cell phone. All cellphones have tracking chips. In modern phones - there is a setting that allows you to disable the tracking device for all but 911 centers (which allows them to track emergency calls in case of instances where you cannot communicate addresses). You cannot disable the 911 tracker. Starting Feb 1, the state of MO will use the SAME tracking channel/whatever its called to track ALL motorists. If you have a cell phone on - it is tracking you and entering your locations, times, speeds into a database. The database allows them to search for specific people's records of movement as well as general area traffic flows. The stated reason is to collect traffic flow information to build better roadways. And the state hopes to begin using it to issue traffic TICKETS by mail (hence all the personal info attached). You speed - they'll know. The deal also lets the state have access to your cell phone records. (Which is actually amazingly easy to do. I could get your cell phone records if I knew JUST your name and social security number and carrier) Missouri is the ONLY state to attempt this thus far. And it is not unlikely that this will end up in court quickly - but until then - the govt is tracking your movement. At this time Kansas has no such plans. The system is being tested in Kansas City and Missouri beginning feb 1. It will eventually be statewide. This was discussed at length on KCUR on Monday. It is also a story we are considering covering for our news show. Citizens of MO are STRONGLY encouraged to write Matt Blunt and the Dept of Transportation and let them know you are opposed to this use of technology and consider it invasive and an infringement on you right to privacy. how this story slipped under everyone's radars (pun half intended) until now is AMAZING. The point is that if your phone is ON - you are being tracked in these areas. Because the signal goes through cell towers - if the phone is turned OFF, the tracking device cannot transmit information. You cannot otherwise disable this. Vehicles with ONSTAR in service will be tracked regardless. You cannot disable that short of cancelling OnStar service. however - turnign off your phone also keeps emergency dispatchers from being able to track you in cases of emergency. On 1/27/06, David Nicol <davidnicol(a)gmail.com> wrote: > why? > > On 1/26/06, Margaret Q <margaretq(a)gmail.com> wrote: > > Turn your cell phone off while driving through KCMO beginning Feb 1. > > Please > > be sure to remind your friends. > > > > > > > -- > David L Nicol > Joining Mensa means embracing the reality > that at least 98 out of every hundred people > are as stupid as you are. > -- David L Nicol "It is pointless to give advice and sometimes dangerous to take it." -- Gore Vidal

1 0

Problems with Gentoo stage 1 install
by Rick 30 Jan '06

30 Jan '06

First time using Gentoo. I am trying to get Internet connectivity to download source code and install Gentoo Gentoo 2005.1 minimal install > Hardware: > Athlon 1900XP > 512 megabyte of ram > > SBC DSL > Linksys WRT54G router > > The Linksys is setup with static IP for port forwarding to support an application on a > Windows XP box. > I can boot to a Knoppix CD and access the Internet just fine but cannot access using the Gentoo install CD. > > I use adsl-setup and enter all required information but when I attempt adsl-start it times out. I have the correct DNS information from SBC. Thanks for any help Rick

3 2

Re: Problems with Gentoo stage 1 install
by Jason Clinton 29 Jan '06

29 Jan '06

On Sun, 2006-01-29 at 17:23 -0600, Rick wrote: > You are correct, I gave too much irrelevant information. I know I have > network access to the PC but I am puzzled why I cannot Ping any Internet > sites? Have you set up your Linux system to use DHCP? Do you have an IP address? Can you ping your Windows XP system? Do you have a default route? Do you have nameservers configured? I afraid to go any further because Gentoo is not a distribution that someone new to Linux should be using unless you have your own personal Gentoo expert guiding you along...

1 0

getting to www servers from inside where they have an Internal IP
by hanasaki 29 Jan '06

29 Jan '06

The goal is to have an internal webserver: - DONE - running on a high numbered port - DONE - firewall forwards 80->7777 on webserver - DONE - external hits on www.blah.com served by the httpserver - ???? - internal/intranet also can hit the webserver as www.blah.com The problem is that www.blah.com resolves to the external internet IP and then gets routed out of the firewall which does not come back in and get forwarded to the internal webserver. It would be ideal if internal web browser hits went straight to the internal server. I know this will work if i setup the host/domain www.blah.com on internal dns so it resolves to the internal server IP. It would also probably work with some fancy proxy config pac for the proxy setup in IE/Firefox. The DNS solution is high maintenance (hosts change quite often for business reasons). The proxy pac is, from what i understand fallen in disfavor and a bit of a pain to admin and keep working over both IE and Firefox. Proxy pac's also require an internal website to get them from in the config. We need to minimize user involvement in setup and also minimize overhead. Any tips? anyone doing this now and care to share their solutions? Any alternative approaches or ways to accomplish what is needed? ===============network Internal workstations (10.x.x.x) Internal webserver:7777 (10.x.x.x) Squid Proxy : 8080 ^ | intranet | =========|== firewall w/ NAT == internet | | V The Ugly World web browsers hit firewall on :80 ===============/network == proxies and http I am using a squid proxy on host:proxyhttp:8080 that is not transparent (ie: needs the proxy manually configured in the web browsers). This is because transparent proxies don't work for ports other than 80, unless they are configured for each outgoing http port, which then always goes via squid and cannot be used for any other purpose. Ran into this when trying to hit a CPanel at a web hoster that was on some high numbered port.

6 9

Layer 4 switch from IPtables - setup for transparent proxy
by hanasaki 28 Jan '06

28 Jan '06

Any way to use IP tables and squid for a transparent proxy but only for http. Basically, the setup for squid and a transparent proxy results in ALL traffic for a given port (usually 80) going to squid to be proxied. I am looking for a way to take any http traffic coming in on Any port and send it to squid. Thus http traffic on port 80 or 22 would go to squid while port 22 ssh traffic would be unaffected.

2 1

OT: Where can I get free/cheap eye exam in KC ?
by Arthur Pemberton 26 Jan '06

26 Jan '06

Hi gus, This if offtopic, but the best forum that I know of to ask. Where/how can I get inexpensive/free eye examinations so that I may get a prescription for a pair of glasses? Thanks -- As a boy I jumped through Windows, as a man I play with Penguins.

2 1

RE: Screen Goes Black after running Xserver
by Kelsay, Brian - Kansas City, MO 25 Jan '06

25 Jan '06

>From the Mepis.org site. They have seen ATI problems too. I don't remember seeing from you that you definitely had an ATI or a Intel i810, but here you go. Was a Mepis and a Debian problem with an official ATI driver. <block quote> 5. ATI card may not be allowing users to power off their machines or switch users properly. This seems to only be a problem after installing the official ATI driver. This has not been found to be a problem with the free xorg driver. We have included a new version of te driver in this release and we dont know what is causing the issue. It could be anything from the new driver having a bug or how MEPIS has compiled the kernel module and included everything. *UPDATE* The version of the ATI fglrx driver that we were using had this symptom as a known issue. After finding this we found that Norbert Tretkowski of Debian has patched the ATI driver to fix this problem. We have tested this in house and it appears to have successfully fixed the problem. Thanks to Norbert for getting this to work.

3 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

KCLUG