- WLUG - wlug.mailman3.com

RE: [Wlug] pubkey authentication in openssh

by Minkov, Ross

> You can put a "*" in the password field of the user and then it's a > locked account, but pubkey will still work. Yes, this works, I use it all the time. Just a note that the "*" needs to go in the /etc/shadow file, not in /etc/passwd. > There's no per-user config to specify what authentication methods are > allowed. It's a global setting. You can specify per user ssh config settings in $USER/.ssh/conifg file. The user's configuration file overwrites the system-wide configuration file (/etc/ssh/ssh_config) settings for that user. Make sure that $USER/.ssh/conifg is owned by $USER and perms are set to 600. For example you can add "PasswordAuthentication no" to $USER/.ssh/conifg and disable password auth for $USER, while leaving "PasswordAuthentication yes" (this is the default) in the system-wide configuration file (/etc/ssh/ssh_config). -Ross -----Original Message----- From: wlug-bounces(a)mail.wlug.org [mailto:wlug-bounces@mail.wlug.org] On Behalf Of Theo Van Dinter Sent: Friday, February 17, 2006 5:24 PM To: Worcester Linux Users Group Subject: Re: [Wlug] pubkey authentication in openssh On Fri, Feb 17, 2006 at 05:15:55PM -0500, Eric Stein wrote: > automated account: public key login only (no password authentication > allowed - yeah, I know I can just set the password to something really > big and hope nobody guesses, but the point of pub/priv key auth is > higher security) You can put a "*" in the password field of the user and then it's a locked account, but pubkey will still work. There's no per-user config to specify what authentication methods are allowed. It's a global setting. -- Randomly Generated Tagline: "Abnegation is un-American. We're going to drive the vehicle we want, wear what we want, consume as much as necessary, worship whomever we choose, and show as much cleavage as possible in beer commercials." - http://www.fool.com/News/Foth/2003/foth030203.htm?source=EDNWFH

Feb. 23, 2006

Re: [Wlug] Progress and success

by Tim Keller

Marie, For capture software there's a couple of options out there. I've got a fire wire card in my machine so I've been using "Kino" to capture the raw DV off of my camcorder and it works great. It's a basic but functional NLE that supports encoding to mpeg2. I don't have any recommendations for business plan software, though I'm not quite sure what a business plan would look like, I thought it was just a regular document? As for RealPlayer, I haven't touched it in a couple of years, but POS has never really worked that well for me. They came out with the helixplayer, but it was worse than Realplayer! I do listen to a couple of stations via shoutcast (using xmms, which is Linuxes version of winamp) but those tend to be rather hit or miss. Hope that helps! Tim. On 2/22/06, Marie I MacDonald <mimsresearch(a)gmail.com> wrote: > > Greetings all, > > I thought I'd write and update you on my newbie experience with Linux > et. al. To refresh your memory, my old laptop died just as I had been > given a new Linux box and just before the Spring semester had started. I > really was feeling stressed. But here are some high points of the past > month: > > * Novell distro installed (and reinstalled (twice!) after a > glitch) and updated without a hitch. > * Evolution is now my email client of choice for two reasons: I > couldn't figure out how to install Thunderbird and I wanted to > sync my Palm to something. > * I'm successfully popping all my Gmail and myrealbox accounts (13 > total). I've never seen my filters run so fast (for junk and > legit mail). > * Palm Zire 21 now works beautifully with Evolution. I keep it > simple and don't need more than the personal calendar. > * Open Office installed and updated. I'm using 2.0.1.3 and have > begun using Impress to create a presentation for school. > * I have taken advantage of the desktop functions, using five work > spaces and putting buttons on the tool bars. I love how smoothly > my desktop works and allows me new workspaces. > * Novell client for Linux working beautifully to connect me to the > server upstairs (thanks Bob!) > * I've been playing around with the GIMP image editor and in my > opinion it is as robust as Photoshop (which I know very well). > * I have successfully completed all the Novell Linux Desktop 9 > Learning Center modules. The training was good and I would > recommend it for new users. > * I am successfully running Music Player and copying my CDs to the > network. I can now burn a CD/DVD. > > Here are my observations/complaints: > > * While I've used both YaST and Red Carpet to install programs, > I'd like to see something developed to click and run > installation programs, much like the .exe files most are used > to. Coming from that environment into a Linux environment, this > is critical. If you want to make Linux more attractive for > desktop users, software installation has to be easier. The > average office user *ME* does not know how to work with code and > such to install programs. > * I'm still trying to find video capture and editing software. Any > recommendations? > * Now I also need software to create a business plan. Any > recommendations? > * I would love to listen to radio station web streams. I live in > the boonies and get no radio reception. I do have RealPlayer on > this but so far it hasn't worked for grabbing a radio web > stream. I miss my Boston radio stations. > > Well, that's all I can think of for now. Oh, I did meet a wonderful > teenager from Worcester who is very knowledgeable about Linux. His name > is Stephen and I just wanted to send a shout out to him. I urged him to > joint WLUG--he's a gem. > > Finally, I appreciate everyone here for all the marvelous advice, > encouragement and patience. I consider it an honor to be part of your > group. Thanks for letting me in! > > All my best, > Marie > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > -- I am leary of the allegiances of any politicians who refers to their constituents as "consumers".

Feb. 23, 2006

Progress and success

by Marie I MacDonald

Greetings all, I thought I'd write and update you on my newbie experience with Linux et. al. To refresh your memory, my old laptop died just as I had been given a new Linux box and just before the Spring semester had started. I really was feeling stressed. But here are some high points of the past month: * Novell distro installed (and reinstalled (twice!) after a glitch) and updated without a hitch. * Evolution is now my email client of choice for two reasons: I couldn't figure out how to install Thunderbird and I wanted to sync my Palm to something. * I'm successfully popping all my Gmail and myrealbox accounts (13 total). I've never seen my filters run so fast (for junk and legit mail). * Palm Zire 21 now works beautifully with Evolution. I keep it simple and don't need more than the personal calendar. * Open Office installed and updated. I'm using 2.0.1.3 and have begun using Impress to create a presentation for school. * I have taken advantage of the desktop functions, using five work spaces and putting buttons on the tool bars. I love how smoothly my desktop works and allows me new workspaces. * Novell client for Linux working beautifully to connect me to the server upstairs (thanks Bob!) * I've been playing around with the GIMP image editor and in my opinion it is as robust as Photoshop (which I know very well). * I have successfully completed all the Novell Linux Desktop 9 Learning Center modules. The training was good and I would recommend it for new users. * I am successfully running Music Player and copying my CDs to the network. I can now burn a CD/DVD. Here are my observations/complaints: * While I've used both YaST and Red Carpet to install programs, I'd like to see something developed to click and run installation programs, much like the .exe files most are used to. Coming from that environment into a Linux environment, this is critical. If you want to make Linux more attractive for desktop users, software installation has to be easier. The average office user *ME* does not know how to work with code and such to install programs. * I'm still trying to find video capture and editing software. Any recommendations? * Now I also need software to create a business plan. Any recommendations? * I would love to listen to radio station web streams. I live in the boonies and get no radio reception. I do have RealPlayer on this but so far it hasn't worked for grabbing a radio web stream. I miss my Boston radio stations. Well, that's all I can think of for now. Oh, I did meet a wonderful teenager from Worcester who is very knowledgeable about Linux. His name is Stephen and I just wanted to send a shout out to him. I urged him to joint WLUG--he's a gem. Finally, I appreciate everyone here for all the marvelous advice, encouragement and patience. I consider it an honor to be part of your group. Thanks for letting me in! All my best, Marie

Feb. 22, 2006

Re: [Wlug] Meeting followup

by Andy Stewart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mike wrote: > For the curious, here is a not-so-complete list of links that were > mentioned this evening: > > Ubuntu's upcoming Dapper Drake: > https://wiki.ubuntu.com/DapperDrake > https://launchpad.net/distros/ubuntu/dapper/+specs > > OpenWRT: > http://openwrt.org/ > http://wiki.openwrt.org/OpenWrtDocs/Hardware/Asus/WL500G > > SSH Public Key encryption: > http://www.onlamp.com/pub/a/onlamp/excerpt/ssh_8/ > > Dropbear SSH: > http://matt.ucc.asn.au/dropbear/dropbear.html > > Gentoo Linux - Satire poster > http://funroll-loops.org/gentoo.jpg > > I'll let Andy send out the rest :) > > Cheers, > Mike > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > HI everybody, Mike: thanks for posting these links that were discussed at the WLUG meeting. Everybody: I have just posted the slides from the Routerboard talk. There were about 15 people at the meeting. I received several compliments regarding the presentation, for which I thank you. Later, Andy - -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFD+NiVHl0iXDssISsRAjC9AJ9J96+DO1bmgcKPApLMugvnGlBzsQCeI9ap ZVm9zW5WvO/vIEKdqAW1rN0= =y5qS -----END PGP SIGNATURE-----

Feb. 19, 2006

Re: [Wlug] Specify which nic gets named eth0

by Andy Stewart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Keith Wright wrote: > Is anybody else noticing that wlug messages are repeating? Yes Yes - -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFD9rc2Hl0iXDssISsRAiAfAJ480WmZIoj5yYtm3n5vl1hRoTVqBgCcDvvC s2YsbjuGCEJY/kAgCBM8amM= =Hzc5 -----END PGP SIGNATURE-----

Feb. 18, 2006

Re: [Wlug] Specify which nic gets named eth0

by Keith Wright

Is anybody else noticing that wlug messages are repeating? > From: Mike Leo <mleo963(a)yahoo.com> > > Looks like you're right! > > >From Redhat support: > > If you look in the /etc/sysconfig/network-scripts/ directory you'll > see a number of scripts named ifcfg-eth0, ifcfg-eth1, etc... Inside > each of these files you should see a line > HWADDR=xx:xx:xx:xx:xx:xx. Pluging in the MAC address for the desired > NIC should allow you to specify which card uses which > interface. Restart networking and you should be good to go. > > --- Chuck Anderson <cra(a)WPI.EDU> wrote: > > > On Fri, Feb 17, 2006 at 12:41:21PM -0800, Mike Leo wrote: > > > yes, but that will only assign the right mac to the wrong NIC. > > > eth0 will still be assigned to the "extra" nic port, not the one I want. > > > but thanks for replying. > > > > HWADDR doesn't assign MAC addresses to NICs. It just matches the > > NIC device with that hardware address. > > > > MACADDR actually reprograms the MAC used by a NIC. I think he may be right too, but the quote from Redhat actually says he is wrong. Redhat says HWADDR specifies which card goes in that slot; Chuck says MACADDR does it. I guess it depends on what you mean by "specify". I think the HWADDR just gives you error messages when it is wrong, but doesn't actually change the name. It may depend upon your specific version. I think both the kernel and the start-up scripts have been changing the way they do this. Here's what works for me: in /etc/init.d/network add the lines: # Check that networking is up. [ "${NETWORKING}" = "no" ] && exit 0 # set the ethernet names from the MAC addresses nameif || echo "Can not rename ethernet cards" in /etc/mactab: #The eth on the Intel motherboard is for the lan ethlan 00:13:20:1e:5b:1d #The Realtek in the pci slot is for the internet ethdsl 00:50:FC:A7:56:0F try "man nameif" for explanation, and then change mactab to contain the names you like instead of ethlan and ethdsl, the MAC addresses of your cards, and more interesting comments. /etc/sysconfig/network-scripts/ifcfg-ethlan # Intel Corp.|82562EZ 10/100 Ethernet Controller DEVICE=ethlan BOOTPROTO=static BROADCAST=192.168.1.255 HWADDR=00:13:20:1e:5b:1d IPADDR=192.168.1.111 NETMASK=255.255.255.0 NETWORK=192.168.1.0 ONBOOT=yes TYPE=Ethernet /etc/sysconfig/network-scripts/ifcfg-ethdsl # Realtek|RTL-8139/8139C/8139C+ DEVICE=ethdsl BOOTPROTO=static BROADCAST=66.92.74.255 HWADDR=00:50:FC:A7:56:0F IPADDR=66.92.74.188 NETMASK=255.255.255.0 NETWORK=66.92.74.0 TYPE=Ethernet ONBOOT=no # uname -a Linux fcs12 2.6.9-1.667 #1 Tue Nov 2 14:41:25 EST 2004 i686 i686 i386 GNU/Linux # cat /etc/fedora-release Fedora Core release 3 (Heidelberg) Like I said, it works for me but YMMV, You Might Muck-up your Version. -- -- Keith Wright <kwright(a)free-comp-shop.com> Programmer in Chief, Free Computer Shop <http://www.free-comp-shop.com> --- Food, Shelter, Source code. ---

Feb. 18, 2006

Re: [Wlug] Specify which nic gets named eth0

by Mike Leo

Looks like you're right! >From Redhat support: If you look in the /etc/sysconfig/network-scripts/ directory you'll see a number of scripts named ifcfg-eth0, ifcfg-eth1, etc... Inside each of these files you should see a line HWADDR=xx:xx:xx:xx:xx:xx. Pluging in the MAC address for the desired NIC should allow you to specify which card uses which interface. Restart networking and you should be good to go. --- Chuck Anderson <cra(a)WPI.EDU> wrote: > On Fri, Feb 17, 2006 at 12:41:21PM -0800, Mike Leo wrote: > > yes, but that will only assign the right mac to the wrong NIC. > > eth0 will still be assigned to the "extra" nic port, not the one I want. > > but thanks for replying. > > HWADDR doesn't assign MAC addresses to NICs. It just matches the > NIC device with that hardware address. > > MACADDR actually reprograms the MAC used by a NIC. > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Feb. 18, 2006

Re: [Wlug] pubkey authentication in openssh

by Theo Van Dinter

On Fri, Feb 17, 2006 at 05:15:55PM -0500, Eric Stein wrote: > automated account: public key login only (no password authentication > allowed - yeah, I know I can just set the password to something really > big and hope nobody guesses, but the point of pub/priv key auth is > higher security) You can put a "*" in the password field of the user and then it's a locked account, but pubkey will still work. There's no per-user config to specify what authentication methods are allowed. It's a global setting. -- Randomly Generated Tagline: "Abnegation is un-American. We're going to drive the vehicle we want, wear what we want, consume as much as necessary, worship whomever we choose, and show as much cleavage as possible in beer commercials." - http://www.fool.com/News/Foth/2003/foth030203.htm?source=EDNWFH

Feb. 17, 2006

Re: [Wlug] pubkey authentication in openssh

by Eric Stein

I already know how to do what you guys suggested - example of what I'm looking for: automated account: public key login only (no password authentication allowed - yeah, I know I can just set the password to something really big and hope nobody guesses, but the point of pub/priv key auth is higher security) my personal account: both public key and password auth (for at my computer or not) daemon accounts: shell is /sbin/nologin Eric

Feb. 17, 2006

Re: [Wlug] running scripts as someone else

by Michael Zarozinski

I ran into a similar problem when getting "hooks" in subversion to work... The shell script was run as "user1" and I needed it to run as "user2" so I wrote a shell script (owned by "user1") that kicked off a small C program which ran the script I need run by "user2". Something along the lines of: #include <stddef.h> #include <stdlib.h> #include <unistd.h> int main(void) { execl("/home/user1/script", "script", (const char *) NULL); return(EXIT_FAILURE); } * NOTE: I had no success using "exec", it only worked with "execl" Then make the program and the key is the "chmod +s" gcc test.c -o test chown user2:user2 test chmod +s test Obviously there may be security risks with this method! Hope this helps! Michael Z Mike Leo wrote: >I brought this up last night, but the suggestions did not help. > >Basically i have a "thing" i need to run at boot as someone else. > >init scripts are launched at boot as root, so somewhere in the script, I have to become someone >else to execute this "thing". > >sample thing: > >su -l LNVAPP008SSH -c "/usr/local/bin/ssh2 -p 32497 -R51180:LNVAPP008:80 -l LNVAPP008SSH n2web043" > > >This works just fine when logged in as root or as the LNVAPP008SSH user from the command line. >The ssh has been setup so that this user (LNVAPP008SSH) does not need to pass a password to >initiate the ssh tunnel. > >However, when this is called from a script, it fails trying to look for a password. > >I am surmizing that the script is still acting as root when it makes the ssh connection. When i >put a printenv in the script, it reports me as still being root, not the LNVAPP008SSH user. > >I also have another situation that I need to apply this too. This seems like it should be >something someone else in the world has done before. > >So any thoughts on this would be greatly appreciated. > >Thanks >Mike >_______________________________________________ >Wlug mailing list >Wlug(a)mail.wlug.org >http://mail.wlug.org/mailman/listinfo/wlug > > >

Feb. 17, 2006

Re: [Wlug] pubkey authentication in openssh

by Mike Leo

yes....have only the users you want to use pubkeys generate keys and share the public one by putting it in that users ~/.ssh(2) on each server. ssh-keygen is the command to make the keys. --- Eric Stein <eastein(a)WPI.EDU> wrote: > Does anyone know a way to force pubkey authentication for only certain > users but allow password for others? > Eric > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Feb. 17, 2006

running scripts as someone else

by Mike Leo

I brought this up last night, but the suggestions did not help. Basically i have a "thing" i need to run at boot as someone else. init scripts are launched at boot as root, so somewhere in the script, I have to become someone else to execute this "thing". sample thing: su -l LNVAPP008SSH -c "/usr/local/bin/ssh2 -p 32497 -R51180:LNVAPP008:80 -l LNVAPP008SSH n2web043" This works just fine when logged in as root or as the LNVAPP008SSH user from the command line. The ssh has been setup so that this user (LNVAPP008SSH) does not need to pass a password to initiate the ssh tunnel. However, when this is called from a script, it fails trying to look for a password. I am surmizing that the script is still acting as root when it makes the ssh connection. When i put a printenv in the script, it reports me as still being root, not the LNVAPP008SSH user. I also have another situation that I need to apply this too. This seems like it should be something someone else in the world has done before. So any thoughts on this would be greatly appreciated. Thanks Mike

Feb. 17, 2006

Re: [Wlug] pubkey authentication in openssh

by John Stoffel

Eric> Does anyone know a way to force pubkey authentication for only certain Eric> users but allow password for others? Can you explain what you're trying to do here? I've done some publick key stuff, but mostly for scripts which don't want passwords, and which are restricted to only a subset of commands. If you want to limit the publickey users to only run certain commands that you control, just setup their ~/.ssh2/authorized_keys file properly withthe public key and the locked down command of your choice. The SSH book has some decent examples. John

Feb. 17, 2006

Re: [Wlug] Specify which nic gets named eth0

by John Stoffel

Mike> I have a RHAS4 2.6 kernel install with 6 NIC's. How do i tell Mike> it which nic I want to be labeled eth0? Udev? Mike> specifically, i have 2 nics built into the mobo, and 2 dual port Mike> addon cards. Mike> I want eth0 to be nic1 on the mobo, and eth1 to be nic2 on the Mike> mobo. What happened to nic0? Ok, I'm being a smartass... :] Mike> By default it is assigning those nics to eth4 and eth5. It's probably due to how the PCI bus get ennumerated. Try using the 'nameif' command to fix which MAC address is bound to which eth* name. You'll probably need to do: udevinfo -a -p /sys/class/net/eth0 and see what shows up. It might be best to do this after setting up all six interfaces (not caring what is where) so you can get their MAC addresses and put them into the table. John

Feb. 17, 2006

Re: [Wlug] Specify which nic gets named eth0

by Chuck Anderson

On Fri, Feb 17, 2006 at 12:41:21PM -0800, Mike Leo wrote: > yes, but that will only assign the right mac to the wrong NIC. > eth0 will still be assigned to the "extra" nic port, not the one I want. > but thanks for replying. HWADDR doesn't assign MAC addresses to NICs. It just matches the NIC device with that hardware address. MACADDR actually reprograms the MAC used by a NIC.

Feb. 17, 2006

Re: [Wlug] MySQL replication question

by Jeff Moyer

==> Regarding [Wlug] MySQL replication question; Bill Mills-Curran <bill(a)mills-curran.net> adds: bill> Does anyone have experience with MySQL's replication capabilities? bill> I'm running versions 4.1.8 and 4.1.14 servers on linux and windows, bill> and I have a very remote site where I'd like to support replication. bill> The data changes very slowly, but the link has 300 ms (ping) latency bill> and has a small (but noticeable) amount of down time. bill> Does it work well enough to be considered reliable for critical bill> applications? I think you would get a more accurate answer posting on a MySQL list. http://lists.mysql.com/replication -Jeff

Feb. 17, 2006

Re: [Wlug] Specify which nic gets named eth0

by Jeff Moyer

==> Regarding Re: [Wlug] Specify which nic gets named eth0; Mike Leo <mleo963(a)yahoo.com> adds: mleo963> yes, but that will only assign the right mac to the wrong NIC. mleo963> eth0 will still be assigned to the "extra" nic port, not the one I mleo963> want. mleo963> but thanks for replying. Hmm, will an alias in /etc/modprobe.conf help, then? For example: alias eth0 tulip This will only work if the ethernet cards use different drivers, obviously. -Jeff mleo963> --- Jeff Moyer <jmoyer(a)redhat.com> wrote: >> ==> Regarding [Wlug] Specify which nic gets named eth0; Mike Leo >> <mleo963(a)yahoo.com> adds: >> mleo963> I have a RHAS4 2.6 kernel install with 6 NIC's. How do i tell it mleo963> which nic I want to be labeled eth0? >> mleo963> specifically, i have 2 nics built into the mobo, and 2 dual port mleo963> addon cards. >> mleo963> I want eth0 to be nic1 on the mobo, and eth1 to be nic2 on the mleo963> mobo. >> mleo963> By default it is assigning those nics to eth4 and eth5. >> You can specify a hardware address in the ifcfg-ethX scripts: >> >> HWADDR=00:04:23:B3:B4:C3 >> >> -Jeff >>

Feb. 17, 2006

pubkey authentication in openssh

by Eric Stein

Does anyone know a way to force pubkey authentication for only certain users but allow password for others? Eric

Feb. 17, 2006

Re: [Wlug] Specify which nic gets named eth0

by Mike Leo

yes, but that will only assign the right mac to the wrong NIC. eth0 will still be assigned to the "extra" nic port, not the one I want. but thanks for replying. --- Jeff Moyer <jmoyer(a)redhat.com> wrote: > ==> Regarding [Wlug] Specify which nic gets named eth0; Mike Leo <mleo963(a)yahoo.com> adds: > > mleo963> I have a RHAS4 2.6 kernel install with 6 NIC's. How do i tell it > mleo963> which nic I want to be labeled eth0? > > mleo963> specifically, i have 2 nics built into the mobo, and 2 dual port > mleo963> addon cards. > > mleo963> I want eth0 to be nic1 on the mobo, and eth1 to be nic2 on the > mleo963> mobo. > > mleo963> By default it is assigning those nics to eth4 and eth5. > > You can specify a hardware address in the ifcfg-ethX scripts: > > HWADDR=00:04:23:B3:B4:C3 > > -Jeff >

Feb. 17, 2006

Re: [Wlug] Specify which nic gets named eth0

by Jeff Moyer

==> Regarding [Wlug] Specify which nic gets named eth0; Mike Leo <mleo963(a)yahoo.com> adds: mleo963> I have a RHAS4 2.6 kernel install with 6 NIC's. How do i tell it mleo963> which nic I want to be labeled eth0? mleo963> specifically, i have 2 nics built into the mobo, and 2 dual port mleo963> addon cards. mleo963> I want eth0 to be nic1 on the mobo, and eth1 to be nic2 on the mleo963> mobo. mleo963> By default it is assigning those nics to eth4 and eth5. You can specify a hardware address in the ifcfg-ethX scripts: HWADDR=00:04:23:B3:B4:C3 -Jeff

Feb. 17, 2006

Specify which nic gets named eth0

by Mike Leo

I have a RHAS4 2.6 kernel install with 6 NIC's. How do i tell it which nic I want to be labeled eth0? specifically, i have 2 nics built into the mobo, and 2 dual port addon cards. I want eth0 to be nic1 on the mobo, and eth1 to be nic2 on the mobo. By default it is assigning those nics to eth4 and eth5. thanks in advance... mike

Feb. 17, 2006

MySQL replication question

by Bill Mills-Curran

Does anyone have experience with MySQL's replication capabilities? I'm running versions 4.1.8 and 4.1.14 servers on linux and windows, and I have a very remote site where I'd like to support replication. The data changes very slowly, but the link has 300 ms (ping) latency and has a small (but noticeable) amount of down time. Does it work well enough to be considered reliable for critical applications? TIA, Bill

Feb. 17, 2006

Meeting followup

by Mike

For the curious, here is a not-so-complete list of links that were mentioned this evening: Ubuntu's upcoming Dapper Drake: https://wiki.ubuntu.com/DapperDrake https://launchpad.net/distros/ubuntu/dapper/+specs OpenWRT: http://openwrt.org/ http://wiki.openwrt.org/OpenWrtDocs/Hardware/Asus/WL500G SSH Public Key encryption: http://www.onlamp.com/pub/a/onlamp/excerpt/ssh_8/ Dropbear SSH: http://matt.ucc.asn.au/dropbear/dropbear.html Gentoo Linux - Satire poster http://funroll-loops.org/gentoo.jpg I'll let Andy send out the rest :) Cheers, Mike

Feb. 17, 2006

Reminder: Upcoming WLUG meeting THURSDAY 7:00 PM

by Andy Stewart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HI Everybody, Its that time again! The next WLUG meeting will be on Thursday, February 16th at 7:00 PM in the Access Grid Room at WPI in Worcester, MA USA. Directions can be found on the WLUG website. At this meeting, yours truly will give a presentation about getting Linux running on the MikroTik Routerboard 532. I had decided that I wanted to build a silent firewall, no moving parts, running GPL'd software. I used buildroot and Busybox from the embedded Linux world, the Linux kernel (with patches), and the SuSE Firewall scripts, to make a working firewall. The firewall has been up for 13.5 days straight with no discernable problems. It passed a recent screening by nessus. Linux firewall 2.4.30 #12 Sun Jan 22 20:31:58 EST 2006 mips unknown 21:56:47 up 13 days, 12:46, load average: 0.00, 0.00, 0.00 I'll bring the box to the meeting and use it in a live demo. I'll have some slides on my laptop as well, which I'll post on the WLUG website afterwards. I also have some items for raffle: 1 Linux Journal magazine from March 2006 (they sent me 2...) Cross Platform GUI Programming with wxWidgets Bruce Perens' Open Source Series Prentice Hall ISBN 0-13-147381-6 Linux Patch Management Bruce Perens' Open Source Series Prentice Hall ISBN 0-13-236675-4 Once the meeting concludes, we'll go to the Tech Pizza restaurant nearby. Oh, BTW, Linux world is coming up in Boston during the first week of April. I've received a couple of emails from the Linux world folks. Does anybody have any interest in representing WLUG at this event? I'd like to go, but it depends on whether or not I can get the time off from work. Are people planning to go, because I think we can get a group discount of some kind. I'll print the emails and bring them to the meeting so we can discuss it. I'll post the info to the list afterwards. See ya later, Andy - -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFD8UgRHl0iXDssISsRAgsgAJ9EJLRPyzVvlu+bJAws9R9wlNEUiQCfd/Fc jIhKGn60OhKNLjD2ethRGAE= =KKDx -----END PGP SIGNATURE-----

Feb. 14, 2006

Re: [Wlug] Anyone with Verizon fios?

by Brett Russ

On 2/6/06, Bill Mills-Curran <bill(a)mills-curran.net> wrote: > Anyone using Verizon FiOS? > > The service looks interesting, but they require their own router. I'm > wondering if that prevents all incoming connections, like ssh? > > Also, the rates they quote on the web page refers to a "bundle > discount", but they don't say what a bundle is. I forwarded your question on to a friend who has it; this is his response: "I have had been using FIOS since last September, and so far so good. They give you a cheap Dlink wired router with the install. Once I had everything up and running I replaced their router with my Linksys wireless router and it has been working with no problems. The bundle discount is for FIOS data and POTs service. I pay $35 for FIOS 5/2 connection and $40 for unlimited local and long distance calling. This gets me a $5 bundle discount so my total is $70 a month plus taxes. So far the service has been great, but I have not had any power failures to test the UPS yet." My comments: if/when they (FIOS) ever get out to where I live, I'd like to stick with my VoicePulse VoIP for $15/mo, bringing the total to $50/mo. However, until there is a good solution for 911, I might have to go with the landline to be safe. Right now, in addition to the $15/mo for all my calling, I pay ~$22/mo just for a metered landline I never use just in case I ever have to call 911. What a waste of $ that is, but still cheaper than doing all calling on a landline plan. BR

Feb. 6, 2006