- WLUG - wlug.mailman3.com

Tripwire vs rpm -V
by Eric Martin April 18, 2014

April 18, 2014

I have a weird problem with tripwire on at least two of my servers. A run of tripwire --check shows a few tripwire binaries have changed, which since I didn't do it is very suspicious: ------------------------------------------------------------------------------- Rule Name: Tripwire Binaries (/usr/sbin/tripwire) Severity Level: 100 ------------------------------------------------------------------------------- ---------------------------------------- Modified Objects: 1 ---------------------------------------- Modified object name: /usr/sbin/tripwire Property: Expected Observed ------------- ----------- ----------- Object Type Regular File Regular File Device Number 64768 64768 * Inode Number 9698 10390 Mode -rwxr-xr-x -rwxr-xr-x Num Links 1 1 UID root (0) root (0) GID root (0) root (0) Size 1145520 1145520 Modify Time Mon 05 Jul 2010 08:55:49 PM EDT Mon 05 Jul 2010 08:55:49 PM EDT Blocks 2240 2240 * CRC32 XXXXX YYYYY * MD5 XXXXXXXXXXMJedgAef0 XXXXXXXXXXPFRiVSdGoG/q The inode number is fine, it's the CRC32 and MD5 sums that worry me. As per my usual procedure, I then issue rpm -V ${PACKAGE_NAME} to verify the package: [emartin@mx1 ~]$ sudo rpm -V tripwire S.5....T. c /etc/tripwire/twpol.txt I expect twpol.txt to be changed since you update the policy. What is / isn't missing is the glaring alert that tripwire doesn't match the RPM. Also, the MD5 sum in tripwire on one machine doesn't match it on another, and neither do the SHA1 sums as computed from the command line. While I'm pretty good with CentOS, there are a few things that I'm still learning so I'm thinking that I'm missing something here. Can anybody please shed some light on this, especially the differing sha1sums? If these are binaries, shouldn't they have the same sha1um? Also, do I need to blow away this machine and rebuild? TIA, -- Eric Martin

2 2

"Heartbleed" OpenSSL bug in pictures
by Chuck Anderson April 12, 2014

April 12, 2014

Today's XKCD comic explains in pictures how the "Heartbleed" OpenSSL bug works: http://xkcd.com/1354/

1 0

Mail User Agent: mail (/bin/mail)
by Larry Camilli April 11, 2014

April 11, 2014

This message has two parts. The first is about the basic mail program. The second (which is more important to me) is about how to avoid having to use the mail program. Part I: The Basic mail program (I'm running CentOS.) I asked last night about the basic mail program - specifically about navigating through the headers. Chuck looked up some documentation and said that the "h+" and "h-" commands should do it. And, somebody came up to me with his laptop and showed the "z" command.) Here's what the help file within mail shows about the "z" command: (Yes. -It says nothing about the z command.) Here's what I found with the h+ and h- commands: When I invoke mail, it displays the headers of 38 unread messages (numbers 1 - 38) and a prompt ("&"). (The terminal window is 132 characters wide by 42 lines long.) If I type h+, it displays the same 38 headers again. (h- gets "Referencing before 1") If I type h7865782365, I get "Invalid message number". If I type h 1-a, I get "Non-numeric second argument". If I type h 1-4, I get the first 38 headers. The program seems to be parsing what follows an "h", but royally screws up acting on what it finds. If I type "39", I get message 39. (There doesn't seem to be a "LAST" command to see the last message - and find out its number. So, typing, say, 100, gets an error because there's no such message.) Anyway, after viewing message 39, if I THEN type h, it shows headers for messages 39 - 51. (h+ shows the same headers, 39 - 51.) But, h- now shows the first 38. (That makes sense.) But, after using h- to get back to the 1 - 38 list, h+ shows the first 38 messages again. After displaying the first 38 headers, the "z" command DOES cause the next set of headers to be displayed (39 - 51). I figured that, until I figure out how to set things up to forward the logwatch mail to a gmail account, I could tolerate using a separate, basic mail program to check the logs. But, this is crap. People were asking about the guy who screwed up the OpenSSL heartbeat code. What about the guy who wrote this piece of crap? It's very basic stuff that doesn't work. Not too difficult to test... Part II: Getting EMail Forwarded from the Linux System as a Client I have two interests here. One is just academic. -Understanding how to use the mail program, despite (or because of) its suckiness. The other is so I can see the messages that the log scrapers send via /bin/mail to the root account's email. Ideally, I would set things up to have all of root's email get forwarded to, say, a gmail account. But, my setup seems to place some limits on what I can do. I set up an MTA on my VMS box long ago. I used to be able to send email directly from that system. But, it stopped working at some point, and I found that Verizon reports all of the DHCP addresses that they allocate to residential DSL customers as spam sources, so everything was getting blocked. I have written programs (in PHP) that use a PEAR class/API to send email from the Linux box, via a gmail account, to arbitrary addressees. [It requires such information as host (smtp.gmail.com) port (587), username & password for the gmail account...] So, I'm not sure if an MTA is what I really need. Can at MTA be set up to send email as a client of sorts to a real MTA (e.g., google mail)? Or do I need some other type of utility? Sure, I can write my own, but I would hope that somebody else has already done it. (Well, as long as it's not the person who wrote "mail".)

1 0

Sr SW Engineer contract openings - C++, Linux kernel, drivers
by John Spencer April 10, 2014

April 10, 2014

Our client in Chelmsford, MA has 2-3 contract openings for Sr Software Engineers with a strong background with C++ and low level Linux kernel and drivers experience. These are 6 month contracts. Must be able to interview and work on site as well as pass background check and drug test. Consultants will be responsible for Linux driver and kernel development and board bring up. Any experience with VxWorks is a plus Please feel free to forward this email to your friends and associates If interested, please send a copy of your resume to jspencer (at) connectedsp.com Your resume will not be sent anywhere without your prior approval. Regards, John Spencer Connected Systems Partners Connecting Top Talent with Top Companies Office: 978-455-5550 x208 Cell: 978-621-9743 jspencer(a)connectedsp.com www.connectedsp.com GET CONNECTED! Unless otherwise explicitly instructed by sender, all information in this email is considered confidential and intended for the view and use of the recipient(s) only.

1 0

Simpleton Question
by Colin Novick April 9, 2014

April 9, 2014

WLUG folk, You guys crunch heavy issues, and I have a cream puff of an issue I just can't crack, and I am not too ashamed to admit it. There is a site with a series of m4v (Quicktime) files I want to be able to at least stream, if not download, but I have two problems. The first is that the site www.worcestercatholictv.com has set the permissions on the files so that they will only play embedded in their webpage, AND they have the files as invisible unless the embedded web page searches for them, and as a result, standalone items like VLC can't touch it, and I can't download it. The second is that the issue seems to be related to my running Ubuntu 12.0.4 LTS, and a buddy is having no issues reportedly in 13.X It makes no difference if it is Chromium of Firefox that tries to playback. Default User Agent Switcher has been installed to see if that was generating a conflict, but that doesn't seem to be it either. Totem 3.0.1 Gecko-mediaplayer 1.0.4 I have searched for similar issues and don't seem to come up with anything. I have scanned help files and that doesn't seem to address this either. At this point, if I had a guess, it is the result of funny permissions on a file that no one is worried about being Linux compatible. Thoughts are most welcome, Colin

3 3

Meeting on Wednesday?
by Tim Keller April 8, 2014

April 8, 2014

I presume we're having a meeting on Wednesday? Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

4 4

LOPSA-East Keynotes Announced!
by Evan Pettrey April 3, 2014

April 3, 2014

Hello once again folks, LOPSA-East is proud to announce this year's keynote speakers! Friday evening Keynote: Vish Ishaya, CTO of Nebula Inc. Title: OpenStack in the Datacenter For better or worse, cloud is arriving in the datacenter. The massive growth of OpenStack is paving the way for an onslaught of private clouds. Cloud will be the second datacenter revolution this century. Virtualization changed the way that machines are provisioned and managed, and cloud promises an even more radical set of changes. Come hear Vish discuss the history of OpenStack, cloud versus virtualization, and get guidance for dealing with the specific challenges that cloud creates for system administrators! Bio: Vish Ishaya is Chief Technology Officer of Nebula, Inc. He is a highly prolific developer who was one of the founding engineers of OpenStack. He was elected to the first OpenStack Technical Committee, where he has served consistently since. He was also elected to four consecutive terms as the OpenStack Compute Project Technical Lead and is currently on the board of OpenStack Foundation. In addition to his programming and systems skills, Vish has spent over a decade teaching, most recently classes in object oriented analysis and design. Saturday closing Keynote: Elizabeth Krumbach Joseph Title: Universal Design for Tech: Improving Gender Diversity in our Industry Universal Design is a principle in accessibility thataccessible design makes things better for everyone. A key example of which are curb cuts and door openers which help those who are disabled but also folks with luggage and parents with strollers. Elizabeth will discuss ideas on how to improve gender diversity in our industry, but many of the tips will help everyone beyond improvements that come through diversity. From offering formal education for systems administration to offering flexible schedules and work arrangements, there are many things that can be done to attract much-needed talent. Bio: Elizabeth Krumbach Joseph is an Automation and Tools Engineer at HP working on the OpenStack Infrastructure team. She has been involved with open source communities for over a decade and turned that passion into a profession when she began working as a professional systems administrator in 2006. In addition to her work on OpenStack, she is a member of the Ubuntu Community Council and is a co-author of the upcoming 8th edition of The Official Ubuntu Book. At home, she serves on Board of Directors for Partimus.org, a non-profit in the San Francisco Bay Area providing Linux-based computers to schools in need. LOPSA-East is a regional sysadmin conference in New Brunswick NJ, May 2-3, 2014. Two days of world-class training on a diverse range of topics plus community-selected talks: http://lopsa-east.org/2014/schedule Best, Evan & the rest of the LOPSA-East 2014 Committee http://lopsa-east.org/2014 Register today!

1 0

LOPSA-East Early Bird Deadline Extended!
by William Bilancio March 24, 2014

March 24, 2014

Great news everybody! We have recieved a number of requests to extend discounted pricing from people either waiting on approval from their boss, or who just didn't get a chance to register beefore today. We've decided to give everybody one final opportunity to register at this greatly discounted rate - Early Bird pricing will be honored through Monday, March 31st. Don't miss this great value - register today! LOPSA-East is a regional sysadmin conference in New Brunswick NJ, May 2-3, 2014. Two days of world-class training on a diverse range of topics plus community-selected talks: http://lopsa-east.org/2014/schedule Best, William, Evan, & the rest of the LOPSA-East 2014 Committee http://lopsa-east.org/2014 Register today!

2 1

LOPSA-East Exclusive! Sneak peek at Tom Limoncelli's new book!
by Evan Pettrey March 24, 2014

March 24, 2014

Did you hear? Tom Limoncelli has announced a new book and the only conference to get a sneak preview will be LOPSA-East! You may know Tom as the author of "Time Management for System Administrators" and co-author of "The Practice of System and Network Administration". We're very excited that he has selected our conference for this! The announcement is here: http://everythingsysadmin.com/2014/03/sneak-preview.html LOPSA-East is a regional sysadmin conference in New Brunswick NJ, May 2-3, 2014. Two days of world-class training on a diverse range of topics plus community-selected talks: http://lopsa-east.org/2014/schedule Looking forward to seeing you all there! Best, Evan & the rest of the LOPSA-East 2014 Committee http://lopsa-east.org/2014 Register today!

1 0

Early Bird Discount Reminder! LOPSA-East SysAdmin Conference, May 2-3 2014, New Brunswick, NJ
by Evan Pettrey March 18, 2014

March 18, 2014

Greetings! Just a reminder to everybody that the Early Bird Discount to LOPSA-East 2014 registrations ends on Sunday, March 23rd at 11:59pm - Register now before it's too late! http://lopsa-east.org/2014/register-for-lopsa-east-14 LOPSA-East is a regional sysadmin conference in New Brunswick NJ, May 2-3, 2014. Two days of world-class training on a diverse range of topics plus community-selected talks on everything from Active Directory to Code Review for Sys Admins! We have a very exciting lineup of tutorials and talks this year, you can find all of the exciting content at: http://lopsa-east.org/2014/schedule/ Looking forward to seeing you all there! Best, Evan & the rest of the LOPSA-East 2014 Committee

1 0

OPENING - Jr SW Engineer - C, Linux kernel - direct hire in Waltham, MA
by John Spencer March 14, 2014

March 14, 2014

Our client in Waltham, MA has a direct hire opening for a Software Engineer with 0-3 yrs of commercial design and development experience. Must be able to interview and work on-site. Our client cannot sponsor visas at this time. Jr Software Engineer Software Engineer with relevant Linux Driver experience. Responsible for design, develop and test of Linux drivers for high-speed network/communication products. Required: - BSCS/BSEE - Hands-on experience developing and interfacing with Linux drivers - Experience with Linux kernel and strong C background - Experience implementing Linux for TCP/IP Ethernet and related Please send your resume to jspencer@connectedsp (dot) com Your resume will not be sent anywhere without your prior approval Regards, John Spencer Connected Systems Partners Connecting Top Talent with Top Companies Office: 978-455-5550 x208 Cell: 978-621-9743 jspencer(a)connectedsp.com www.connectedsp.com GET CONNECTED! Unless otherwise explicitly instructed by sender, all information in this email is considered confidential and intended for the view and use of the recipient(s) only.

1 0

Re: [Wlug] HOWTO debug Ubuntu boot hang
by Randall Mason March 14, 2014

March 14, 2014

On Fri, Mar 14, 2014 at 5:16 PM, John Stoffel <john(a)stoffel.org> wrote: > > Andy> I've got a version of Ubuntu 13.10 in my Virtualbox OSE virtual > Andy> computer. It hangs very early in the boot. GRUB runs and the > Andy> boot starts. > > I've moved to Linux Mint myself, but it's based on Ubuntu and I've > noticed that my main desktop, which NFS mounts home dirs and other > stuff, takes *forever* to actually boot not. There's something in the > setup which hangs for five minutes or so (not sure, I just walk away > right now cause I rarely reboot the box...) before it continues. > > Have you just let the boot sit there to see if it ever finishes? I've > been meaning to turn on verbose debugging to try and figure out what's > going on too, but it's a low priority. I find that fstab is also often a problem. If it's waiting for /dev/sdb1 to show up, or a specific UUID. Maybe comment out anything not required for boot. Also, if you're at the console, comment out your whole /etc/network/interfaces and see if that helps. Ubuntu often waits on block devices and network, so it could be either of those. Randall Mason clashthebunny(a)gmail.com

1 0

HOWTO debug Ubuntu boot hang
by Andy Stewart March 14, 2014

March 14, 2014

HI guys, I've got a version of Ubuntu 13.10 in my Virtualbox OSE virtual computer. It hangs very early in the boot. GRUB runs and the boot starts. In /var/log/boot.log, I see the same messages as I see on the screen. I have to press ESC to see the text while the computer boots. There are perhaps 3 or 4 "Starting <service>....OK" messages, and that is all. I never get a chance to log in. The problem I have is that I don't know in which order the boot scripts are supposed to run. With the "old" initscripts, one would see Snn<script> or Knn<script> and the "nn" would be the number representing the order in which the scripts are "S"tarted or "K"illed. That isn't the case here. I've found the boot scripts in /etc/init/*.conf so I can match boot messages to scripts. However, I'm unable to determine which script got stuck since I don't know the order of execution. My version of 13.10 is customized, not stock, so I can't compare to a known good. Any ideas would be greatly appreciated. Thanks! Andy -- Andy Stewart (KB1OIQ) Founder: Worcester Linux Users' Group Founder: Chelmsford Linux Meetup Group President: PART of Westford, MA (WB1GOF)

3 5

Registration Reminder! LOPSA-East SysAdmin Conference, May 2-3 2014, New Brunswick, NJ
by Tom Limoncelli March 13, 2014

March 13, 2014

Greetings! I just wanted to remind everybody about the awesome tutorials and talks we have lined up for LOPSA-East this year! Don't forget to register before the Early Bird pricing expires! LOPSA-East is a regional sysadmin conference in New Brunswick NJ, May 2-3, 2014. Two days of world-class training on a diverse range of topics plus community-selected talks on everything from DevOps to Time Management. You can find all the latest details available on our website: http://lopsa-east.org Register now at: http://lopsa-east.org/2014/register-for-lopsa-east-14 We'll see you there! Best, Tom, Evan, & the rest of the LOPSA-East 2014 Committee

1 0

Announce: WLUG Meeting Thu 3/13 7PM
by Chuck Anderson March 12, 2014

March 12, 2014

Hi folks, The next Worcester Linux Users' Group (WLUG) meeting will be held tomorrow, Thursday, March 13 at 7PM. The location will be the WPI Campus Center, Mid-Centry Room 331. Thursday, March 13, 7:00 - 9:00 PM WPI Campus Center, Mid-Centry Room 331 Afterwards, we will go out for pizza. See you there, Chuck President, Worcester Linux Users' Group http://www.wlug.org/

1 0

OPENING - Software Engineer - C, Linux kernel (2+ yrs exp.) in Waltham, MA
by John Spencer March 11, 2014

March 11, 2014

Our client in Waltham, MA has a direct hire opening for a Software Engineer with 2-6 yrs of commercial design and development experience. They will consider more Sr level engineers, up to 12 yrs of experience. Must be able to interview and work on-site. Our client cannot sponsor visas at this time. Software Engineer Software Engineer with 2+ years' relevant Linux Driver experience. Responsible for design, develop and test of Linux drivers for high-speed network/communication products. Required: - BSCS/BSEE - 2+ years' hands-on experience developing and interfacing with Linux drivers - Experience with Linux kernel and strong C background - Experience implementing Linux for TCP/IP Ethernet and related Please send your resume to jspencer@connectedsp (dot) com Your resume will not be sent anywhere without your prior approval

1 0

Rancid and Quagga
by Eric Martin March 8, 2014

March 8, 2014

Hi All, I recently fired up a few FreeBSD routers using Quagga, and today I went to configure RANCID but I'm having some troubles. RANCID is working fine for my Juniper gear, my Cisco gear and even my APC stuff but I can't get it to work for quagga. I run zrancid (for zebra stuff) and it just hangs. When you add -d you can see that it's asking for show version and write term, but it still hangs. When I copy / paste the commands and run them by hand with clogin, I see it login but it just hangs after terminal length 0 When I login via ssh with the same command line that clogin passes, terminal length 0 works fine and so do the rest of the commands. I'm stumped, does anybody have any ideas? This however does work for my CentOS servers running quagga. I'm using Quagga 0.99.22.3, and Rancid 2.3.6, which is the most recent RANCID version on CentOS and the most recent Quagga on FreeBSD. ~rancid/.cloginrc: add method *.example.net ssh add autoenable *.example.net {1} add user *.example.net rancid add password *.example.net {} (I'm using ssh keys and it's called id_rsa so that works fine). router.db: ur01.example.net:zebra:up ns1.example.net:zebra:up Thanks in advance, -- Eric Martin

2 1

Great speaker on UX design next Thursday
by Dick Goodman March 4, 2014

March 4, 2014

3 3

Registration Open! LOPSA-East SysAdmin Conference, May 2-3 2014, New Brunswick, NJ
by Evan Pettrey Feb. 24, 2014

Feb. 24, 2014

Greetings! LOPSA-East registrations are officially open! Taking place May 2-3, 2014 at the Hyatt Regency Hotel in New Brunswick, NJ, LOPSA-East is a community-driven conference BY sys admins, FOR sys admins. Open to DevOps, network admins, Windows, Linux, and everyone! Register now at: http://lopsa-east.org/2014/register-for-lopsa-east-14 You can find all the latest details available on our website http://lopsa-east.org We'll see you there! Best, Evan & the rest of the LOPSA-East 2014 Committee

1 0

Announce: UPDATE: WLUG Meeting Thu 2/20 7PM: Software Defined Radio
by Chuck Anderson Feb. 22, 2014

Feb. 22, 2014

Hi folks, Due to the weather this week, I've rescheduled this month's WLUG meeting for the following week, Thursday, February 20 at 7:00 PM, in the WPI Campus Center, Hagglund Room 301. Our speaker this month will be Andy Stewart, who founded WLUG in 1997 and now runs the Chelmsford Linux Meetup. Andy plans to talk about software defined radio on Linux, and with luck, do a live demonstration of gqrx: http://gqrx.dk/ If there is time, Andy *might* be able to show something related to the GNU Radio Companion, where one can build a software defined radio just by drawing the blocks and connecting them with lines. Thursday, February 20, 7:00 - 9:00 PM WPI Campus Center, Hagglund Room 301 This room is the one across the hall from our usual room, and is where we had the meeting with Jim Getty's on Bufferbloat. After the meeting, we will go out for pizza. See you there, Chuck President, Worcester Linux Users' Group http://www.wlug.org/

1 1

Schedule Announced! LOPSA-East SysAdmin Conference, May 2-3 2014, New Brunswick, NJ
by Evan Pettrey Feb. 19, 2014

Feb. 19, 2014

Greetings! LOPSA-East is pleased to announce that the schedule for the LOPSA-East 2014 conference has been published! Taking place May 2-3, 2014 at the Hyatt Regency Hotel in New Brunswick, NJ, LOPSA-East is a community-driven conference BY sys admins, FOR sys admins. Open to DevOps, network admins, Windows, Linux, and everyone! You can find out more at http://lopsa-east.org/2014/ Tutorials: http://lopsa-east.org/2014/lopsa-east-14-training-schedule/ Talks: http://lopsa-east.org/2014/lopsa-east-14-talks/ This year's lineup promises to be the best yet and registrations open Monday. Be sure to register early and save! We'll see you there! Best, Evan & the rest of the LOPSA-East 2014 Committee

1 0

Video Editing
by dulsi＠identicalsoftware.com Feb. 14, 2014

Feb. 14, 2014

Anyone do any video editing? I've tried using pitivi to edit videos. It usually crashed. Recently I tried putting a series of images in and creating a video. I successfully created a video once. Now everytime I seem to create a file without any video content. The video isn't going to be long or good. I was showing my son how lego stop animation is done. I only did a 8 images and they aren't perfectly aligned. I used a small tripod but press the picture button must have moved the camera a bit. Probably need to use video and screen capture images so I don't touch the camera. The images also have slightly different light levels. If anyone has suggestions on fixing the images to be consistent let me know.

3 2

Announce: NO meeting Thursday Feb 13
by Chuck Anderson Feb. 12, 2014

Feb. 12, 2014

Hi All, Given the weather forecast, we are definately NOT meeting tomorrow, Thursday, Feb 13. I'm still waiting on a room reservation confirmation, but I hope to have the meeting rescheduled for next Thursday, Feb 20. When I get confirmation on the location, I'll send out another announcement. Chuck

1 0

Northeast Linux Fest 2014
by Jonathan Nadeau Feb. 11, 2014

Feb. 11, 2014

Hello list, I just wanted to let you know that the Northeast Linux Fest will be held this year at Harvard University on April 5. We are excepting talks you can email contact(a)northeastlinuxfest.org and here is a link to the site. Looking forward to seeing some of you there. http://www.northeastlinuxfest.org -- Jonathan Nadeau http://www.jnadeau.org Northeast GNU/Linux fest http://www.northeastlinuxfest.org

1 0

Thursday snow storm? Possible reschedule?
by Tim Keller Feb. 11, 2014

Feb. 11, 2014

The weather people (who are using super computers running linux) are currently claiming that we're going to be getting heavy snow on Thursday night. I don't think WLUG has ever had this scenario... What's our game plan? Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

4 3