- Roundtable - muug.ca

weird samba ACLs from MS Office
by Trevor Cordes 10 Jan '23

10 Jan '23

Have samba (4.16) sharing some linux drives to Windows. Want things pretty simple where files on the share are all forced into certain user, gorup, mode: force create mode = 0660 force directory mode = 02770 force user = samba Everything works great. The files get created like this: -rw-rw---- 1 samba samba 0 Jan 4 01:01 test-file.txt ... With every app except MS Office. MS Office insists on making some fubar ACL: -rw-rwx---+ 1 samba samba 50510 Jan 4 01:13 test-excel.csv* #getfacl test-excel.csv # file: test-excel.csv # owner: samba # group: samba user::rw- user:samba:rw- group::rw- group:samba:rw- mask::rwx other::--- Looks like the same thing, eh? But that ACL screws up linus backups as it is stopping a user who is in group samba from reading the file!!?!?? But I don't even want to solve that riddle (because they should be able to read it), I just want to force samba to not let (or just ignore) Office make an ACL in the first place. I don't want any files where ls says "+" in the mode! I swear this didn't use to happen. Might have been years ago, though. All the samba ACL options seem to be to get "more" ACLs. I want less! None! But I don't want to mount the linux fs itself with ACLs off. I just want to force samba to force Office to not be insane. Anyone know the magic for this?

2 4

MUUG Online Meeting, Tuesday, Jan 10, 7:30pm -- Taming journald, RTFM: nmap(1)
by Gilbert Detillieux 03 Jan '23

03 Jan '23

The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting online, on Tuesday, January 10th, at 7:30pm: The Taming of journald Continues In his last presentation, Trevor Cordes showed us how to use syslog with journald, and filter out unwanted log lines. However, those bazillion unwanted lines being filtered out are still being written to disk, causing major wear and tear on your precious, limited-life SSD! In this follow-up presentation, Trevor will discuss minimizing SSD writes and wasted space by using the journald RAMdisk and size-limiting options. RTFM: nmap(1) Wyatt Zacharias will give a quick overview of some of the basic features of nmap. This will once again be an online meeting. Stay tuned to our muug.ca home page for the official URL, which will be made available about a half hour before the meeting starts. (Reload the page if you don't see the link, or if there are issues with connecting.) The group normally holds its meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. For more information about MUUG, and its monthly meetings, check out their web server: https://muug.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board, or linking to it on social media: https://muug.ca/meetings/MUUGmeeting.pdf -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.ca> Manitoba UNIX User Group Web: http://muug.ca/

1 0

Reminder: MUUG Meeting, Tonight, Dec 13, 7:30pm -- Round-Table, Lightning Talk, and Pot Luck (In Person)
by Gilbert Detillieux 13 Dec '22

13 Dec '22

A reminder that the MUUG meeting will be this evening, both in person and simulcast online over BBB... The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting ***in person***, on Tuesday, December 13th, at 7:30pm: Round-Table, Lightning Talk, and Pot Luck MUUG is happy to announce we are having an in-person pot-luck event! We will continue the tradition of making the December meeting more of an informal, social gathering. *But please, stay home if you are sick!* We will also attempt to simulcast the live round-table and lightning talk over Big Blue Button for those that can't attend in person for any reason: https://muug.ca/meet Bring your favourite gadget! Bring your latest gadget to talk about -- while everyone mingles, eats, and drinks. This will be a pot-luck snack event. Members are encouraged to bring their own food to sample and share with others. Feel free to bring your own special drink as well -- just remember that we don't have a liquor license! Lightning Talk: MUUG Online Lore & History This month, our server committee will show off some quick LibreNMS stats and history of our latest MUUG Online 8.0 server, which is western Canada's largest and fastest open source software mirror. Where to Find the Meeting: This month we have moved to Skullspace, at 374 Donald St. We will be in room 200. Please note that this location is not mobility accessible. There are 3 flights of stairs and it is 1.5 stories up. Also note that the Winnipeg Jets have a home game on December 13th so downtown street parking will be scarce. One of the best blocks for street parking is Notre Dame after Hargrave. There is also lots of commercial parking in the area including right behind the Skullspace building. The 66 bus route has a southbound stop on the same block of Donald (useful for departure) in front of the Yellow Dog Tavern. For arrival by bus, it's quite reasonable to walk from stops on Graham and Portage or if taking the 66 get off at northbound Smith at Portage or northbound King at Notre Dame. Doors will be open starting at 7:15 pm with the meeting starting at 7:30 pm. After 7:45 pm the doors may be locked so you will need to call the Skullspace number (204-480-4092) and we'll answer and come down to let you in. The group normally holds its meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. For more information about MUUG, and its monthly meetings, check out their web server: https://muug.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board, or linking to it on social media: https://muug.ca/meetings/MUUGmeeting.pdf -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.ca> Manitoba UNIX User Group Web: http://muug.ca/

1 0

MUUG Meeting, Tuesday, Dec 13, 7:30pm -- Round-Table, Lightning Talk, and Pot Luck (In Person)
by Gilbert Detillieux 06 Dec '22

06 Dec '22

The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting ***in person***, on Tuesday, December 13th, at 7:30pm: Round-Table, Lightning Talk, and Pot Luck MUUG is happy to announce we are having an in-person pot-luck event! We will continue the tradition of making the December meeting more of an informal, social gathering. But please, stay home if you are sick. We will also attempt to simulcast the live round-table and lightning talk over Big Blue Button for those that can't attend in person for any reason: https://muug.ca/meet Bring your favourite gadget! Bring your latest gadget to talk about -- while everyone mingles, eats, and drinks. This will be a pot-luck snack event. Members are encouraged to bring their own food to sample and share with others. Feel free to bring your own special drink as well -- just remember that we don't have a liquor license! Lightning Talk: MUUG Online Lore & History This month, our server committee will show off some quick LibreNMS stats and history of our latest MUUG Online 8.0 server, which is western Canada's largest and fastest open source software mirror. Where to Find the Meeting: This month we have moved to Skullspace, at 374 Donald St. We will be in room 200. Please note that this location is not mobility accessible. There are 3 flights of stairs and it is 1.5 stories up. Also note that the Winnipeg Jets have a home game on December 13th so downtown street parking will be scarce. One of the best blocks for street parking is Notre Dame after Hargrave. There is also lots of commercial parking in the area including right behind the Skullspace building. The 66 bus route has a southbound stop on the same block of Donald (useful for departure) in front of the Yellow Dog Tavern. For arrival by bus, it's quite reasonable to walk from stops on Graham and Portage or if taking the 66 get off at northbound Smith at Portage or northbound King at Notre Dame. Doors will be open starting at 7:15 pm with the meeting starting at 7:30 pm. After 7:45 pm the doors may be locked so you will need to call the Skullspace number (204-480-4092) and we'll answer and come down to let you in. The group normally holds its meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. For more information about MUUG, and its monthly meetings, check out their web server: https://muug.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board, or linking to it on social media: https://muug.ca/meetings/MUUGmeeting.pdf -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.ca> Manitoba UNIX User Group Web: http://muug.ca/

1 0

How to turn a chatbot to the dark side
by Glen Ditchfield 06 Dec '22

06 Dec '22

ChatGPT has filters that should block evil output, but they don't apply to code completion: https://twitter.com/zswitten/status/1598197802676682752

1 0

Ever wonder about those purple street lights?
by Gilbert Detillieux 06 Dec '22

06 Dec '22

What do swollen caps and purple street lights have in common?... Volume! (Or volume discounts, and convoluted supply chains.) https://www.businessinsider.com/led-city-streetlights-turning-purple-broken… -- Gilbert Detillieux E-mail: Gilbert.Detillieux(a)umanitoba.ca Computer Science Web: http://www.cs.umanitoba.ca/~gedetil/ University of Manitoba Phone: 204-474-8161 Winnipeg MB CANADA R3T 2N2

2 1

Remi repo bug?
by Trevor Cordes 04 Dec '22

04 Dec '22

I switched to using Remi repo for php8 as suggested at the last meeting. It's all great (pretty easy to change from IUS to Remi, too!) except now cron.hourly gives me this every hour: /etc/cron.hourly/0yum-hourly.cron: Not using downloaded remi-php80/repomd.xml because it is older than what we have: Current : Mon Nov 28 01:24:53 2022 Downloaded: Wed Nov 23 03:16:18 2022 Not using downloaded remi-safe/repomd.xml because it is older than what we have: Current : Mon Nov 28 01:20:57 2022 Downloaded: Wed Nov 23 03:18:00 2022 Never seen that before. Something wrong with Remi? Or something on my side? Net hasn't been much help. This is a RHEL7 box.

3 5

Free books
by Kevin McGregor 29 Nov '22

29 Nov '22

Is anyone interested in any of these books? If not, they’ll be recycled tomorrow night. Kevin

2 1

Free books
by Kevin McGregor 28 Nov '22

28 Nov '22

Is anyone interested in any of these books? If not, they’ll be recycled tomorrow night. Kevin

3 2

Issues encountered with the Shaw BlueCurve modem and app
by Brian Lowe 24 Nov '22

24 Nov '22

Hi all, Following is an information dump detailing all the issues I've encountered with the Shaw BlueCurve gateway and app since I got it installed back in September. The intent is to add this as a detailed attachment to a short (paper) letter I intend to send to Paul McAleese, president of Shaw Communications, outlining my disappointment with the BlueCurve service and asking him to follow up with his residential internet division to implement improvements. Also, after much discussion with various Shaw technical support departments, it looks like I finally have a way forward: 1. Switch out the current WiFi-only TV player device for an older coax unit 2. Put the BlueCurve gateway into bridged mode and use the D-Link router Alberto gave me to act as my home router. For those willing to wade through its 1,250 words, I'd appreciate any comments you have. Remember, it's intended to be an attachment to the main letter. I'm not expecting Paul McAleese to read through it, although he may glance at it. I am hoping he'll pass it along to the residential internet services division. Brian Issues Encountered with the Shaw BlueCurve Gateway and App * I was supplied with a CGM4141SHW gateway with custom Shaw firmware; the device's Hardware page reports it's a CGM4140COM and the Software page says it's running CGM4140COM_5.3p16s3_PROD_sey. * The gateway's built-in DHCP server cannot be disabled. This is a big problem for me because I want to run my own DHCP server that tracks devices to which it has assigned IP addresses, and supplies the IP address of my ad-blocking DNS server instead of Shaw's servers. I've managed a partial work-around by running my own DHCP server along side Shaw's, but giving the Shaw DHCP server a range of only two IP addresses and ensuring both of them are assigned. However, often times my devices end up getting no IP address, Shaw's DNS servers, and a bad default route. (The inability to disable the DHCP server is probably needed for the Shaw BlueCurve Home app to work—much more on that later.) * Some very important configuration items on the gateway--SSID and password, port forwarding, DMZ, parental control--are not available through its web interface and must be managed using the Shaw BlueCurve Home app. The app is available only for Apple iOS and Android devices, and specifically not available for Windows, MacOS, or Linux. * Using an Apple/Android app is suboptimal because the standard way to configure a modern gateway/router device is to use its built-in web interface. This works for pretty much any modern small computer operating system such as Windows, MacOS, Linux, BSD, legacy UNIX (HP-UX and AIX), VMS, Android, and iOS, because they all have access to capable web browsers. But this is not an option with the CGM4141 because its web interface has been eviscerated. * The app is available only on Apple's App Store or (officially) Google Play. However, the only way to get the app from Google Play is to set up a Google account and link it with an Android device. This is a problem for me because I see Google as a huge user-hostile American advertising company that's not subject to Canadian privacy laws, and I desire to do as little business with them as possible. To me it is unacceptable that Shaw, a Canadian company, is compelling its customers to business with American companies in order to use basic functionality for its services. * There is an unstated assumption that all users have access to a device that will run the app. While it's likely a safe assumption for today's parents and computer-savvy users, as usual it fails to take into account various edge cases: - People who are uncomfortable with smartphones and use a feature phone instead - People who have a supposedly compatible device but its operating system has fallen behind and can't run the app - People who value their privacy and don't want to download an app that can't be audited so see if it's sending information to servers outside of Shaw, or even sending information to Shaw that's not related to the application's use * Shaw support can set the SSID and password for the customer, but by policy cannot assist with port forwarding and DMZ issues. For this they always tell the customer to use the app. * Additionally, the app has issues: - It's enormous! It weighs in at 204 megabytes, making it one of the largest non-game apps I've ever seen. By comparison: - WhatsApp: 41 MB - Facebook: 56 MB - Instagram: 63 MB - Facebook Messenger: 72 MB - SnapChat: 126 MB - TikTok: 183 MB - As a seasoned programmer, the app's size in relation to its capabilities raises red flags: - It looks like the development team has pulled in a huge number of libraries from all over the Android development ecosystem. I wonder why they used so many libraries instead of developing at least some of the functionality in-house. It makes me wonder about the overall capability of the development team. - The large number of libraries runs the risk of becoming a maintenance nightmare down the road because inevitably some of these libraries will become outdated, deprecated, and possibly disappear altogether. The development team could end up spending as much time or more trying to keep on top of the library dependencies as they will making improvements to the app. - Bug: Setting port forwarding in the app appeared to work, but packets were not getting through to the forwarded device (more on this 3 points down the list.) - Bug: Attempts to set up a DMZ were consistently met with "We're Having Some Trouble. Please try again. If the problem persists, check back later." (more on this 3 points down the list) * On Google Play, complaints about the app are legion: - Overall, the app is buggy, difficult to use, and does not work as advertised - Users are often unable to sign in - App often shows the BlueCurve gateway as being offline when in fact it is not - App forgets configuration options that were previously set - Parental controls are unreliable - A video showing how the app works has not been updated for newer versions * Google Play gives the app a score of 3.5/5. Independently, I computed an overall approve/ disapprove score based on 1,318 reviews. Reviews with 1, 2, or 3 stars were "disapprove" (even three star reviews had a tendency to point out problems) while 4 and 5 star reviews were "approve." The result was 287 approve and 1,031 disapprove, for an overall disapproval rate of 78%. The average rating from those 1,318 reviews was only 2.1, well below Google's 3.5. * Attempts to engage various Shaw support departments on the port forwarding and DMZ portions of the app were consistently met with "Port forwarding/DMZ is something we don't support because we haven't been trained on it," even though the problem I was attempting to report was with the failure of the app to work as advertised.

5 12