- Roundtable - muug.ca

MUUG Meeting, May 13, 7:30PM -- Samba 3
by gedetil＠cs.umanitoba.ca 06 May '03

06 May '03

[Posted to man.unix.general and other news groups] ------ Forwarded Article <b98k7d$qha$1(a)canopus.cc.umanitoba.ca> ------ From gedetil(a)cs.umanitoba.ca (Gilbert E. Detillieux) The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting on Tuesday, May 13. The meeting topic for this month is as follows: Samba 3 Samba is a suite of programs that seamlessly provide SMB/CIFS file-and-print services to Windows clients. A robust and reliable implementation, it is now at version 2.2.8. What's in store for the future? In development now, and available for download for testing is version 3.0alpha. This version has many enhancements to the 2.x versions, including Active Directory support (this release is able to join a ADS realm as a member server and authenticate users using LDAP/Kerberos), Unicode support, better Windows 2000 printing support including publishing printer attributes in Active Directory, support for migrating from a Windows NT 4.0 domain, support for establishing trust relationships with Windows NT 4.0 domain controllers, and lots of other changes! Kevin McGregor will show you how to get started in testing this leading-edge technology. The group holds its general meetings at 7:30 PM on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. ********************************************************************** Please note our new meeting location: The IBM offices, at 400 Ellice Ave. (between Edmonton and Kennedy). When you arrive, you will have to sign in at the reception desk, and then wait for someone to take you (in groups) to the meeting room. Please try to arrive by about 7:15 PM, so the meeting can start promptly at 7:30 PM. Don't be late, or you may not get in. Limited parking is available for free on the street, or in a lot across Ellice from IBM, for $1.00 for the evening. Indoor parking is also available nearby, at Portage Place, for $2.00 for the evening. ********************************************************************** For more information about MUUG, and its monthly meetings, check out their Web server: http://www.muug.mb.ca/ Also note that MUUG maintains two mailing lists, called "muug-announce" and "roundtable". If you're not already on these lists, we encourage you to subscribe now: http://www.muug.mb.ca/mailman/listinfo/ The "muug-announce" list is used for monthly meeting announcements (such as this one) as well as other important announcements of interest to MUUG members. The "rountable" list is meant to be a forum for follow-ups to topics discussed at the meetings, or for round-table-style discussion on other topics that come up between meetings. Of course, for this to be effective, we need to reach a certain critical mass. So, please subscribe, and stay involved! -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.mb.ca> Manitoba UNIX User Group Web: http://www.muug.mb.ca/ P.O. Box 130, St-Boniface Phone: (204)474-8161 Winnipeg, MB, CANADA R2H 3B4 Fax: (204)474-7609 ------ End of Forwarded Article

1 0

Sendmail .mc file for forwarding server?
by Scott Balneaves 05 May '03

05 May '03

Does anyone have a .mc file kicking around for sendmail that creates a forwarding only server? I'd basically like to set up an OpenBSD 3.3 firewall box running the new spamd, and a sendmail daemon that basically forwards all mail received onto our internal mail server. I know I could write a pf rule that would forward port 25 to our internal mail server, but I like the chroot sendmail on OpenBSD, and would prefer to have it exposed to the big, bad innurnet. Scott -- Scott L. Balneaves | "Nearly all men can stand adversity, Unix Administrator | but if you want to test a man's character, Legal Aid Manitoba | give him power." sbalneav(a)legalaid.mb.ca | -- Abraham Lincoln

1 0

Sendmail stalls with BCC
by Raymond J. Henry 30 Apr '03

30 Apr '03

OK, running RH 7.1 with sendmail 8.11.6. I've done all the applicable updates using up2date. Just today, I notice that I am no longer able to send mail via POP or IMAP when the BCC field is used. From the Windows workstation, it appears to start sending, then stalls. No errors are reported, it just sits there forever. This happens with Outlook Express 6 and Outlook 2000. Not sure exactly when this problem originated, but it's been in the last week or so. A search for this problem on the Internet reveals no clues, nor can I find anything applicable on the sendmail docs. It was working, then stopped. I want to sound like a typical end user, and say that "nothing's changed", but I think something must have. Can anyone point me in the right direction?

1 0

Re: [RndTbl] keyring drive
by gedetil＠cs.umanitoba.ca 28 Apr '03

28 Apr '03

According to millward: > Has anyone successfully used a > keyring drive ( those little things with > flash memory and USB connectors ) > with Linux? > I'm told you can use them on any system, > but 'any system' usually means any > MS Windows system. I've used one successfully under Linux. With the 2.4 kernel's USB support, it really is plug-n-play. The device shows up as a SCSI disk, with a single partition containing a FAT32 file system. I just used the mtools to access the files, but you could probably set it up to auto-mount the file system without too much difficulty. The danger there would be that you could accidentally unplug the thing without properly unmounting it first. We've had students wanting to use these on our lab systems, so we recommended they use mtools (to avoid the mounting issues). -- Gilbert E. Detillieux E-mail: <gedetil(a)cs.umanitoba.ca> Dept. of Computer Science Web: http://www.cs.umanitoba.ca/~gedetil/ University of Manitoba Phone: (204)474-8161 Winnipeg, MB, CANADA R3T 2N2 Fax: (204)474-7609

1 0

keyring drive
by millward 28 Apr '03

28 Apr '03

Has anyone successfully used a keyring drive ( those little things with flash memory and USB connectors ) with Linux? I'm told you can use them on any system, but 'any system' usually means any MS Windows system.

1 0

SOHO Switches
by Brock Wolfe 21 Apr '03

21 Apr '03

I need to do some network upgrading and started looking at 16 port ethernet switches for a small business network. The D-link, LinkSys, 3COM, Netgear, SMC, Ovislink, brands seem to be mostly available for this market niche. Any recommends on make/models or features to use or avoid. Thanks in advance for the advice. Brock

4 3

Re: Roundtable digest, Vol 1 #185 - 1 msg
by wellman1＠mb.sympatico.ca 21 Apr '03

21 Apr '03

At the low end (Price wise)... I have had good results with the Linksys and D-link brands. At the High end (Price Wise) Cisco Good luck in you search Scott Wellman Systems Administrator University of Manitoba

1 0

Re: [RndTbl] Apache/SSL
by gedetil＠cs.umanitoba.ca 17 Apr '03

17 Apr '03

According to Raymond J. Henry: > Thanks to those that gave me input. I did manage to find the problem. I > decided to stop trying to deal with the .htaccess file, and start at the > beginnning. Sure enough, there it was. In the httpd.conf file, AllowOverride > None for the .htaccess control. Changed it to AllowOverride All, and it now > prompts for login when going to https://hermes.manitobamall.net. That would have been my next guess... :) > Next step is to see how to prevent it from accessing the page when going to > http://hermes.manitobamall.net. I think all you'd have to do is add the following to the .htaccess file... <IfDefine HAVE_SSL> SSLRequireSSL SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)-/ ) </IfDefine> In addition, if you would like to have people redirected to the secure port, rather than just getting an error when they come in via http, you can add the following within the IfDefine tags... <IfModule mod_rewrite.c> RewriteEngine on # For testing (logs a lot!): #RewriteLog /var/log/httpd/rewrite_log #RewriteLogLevel 9 # Rather than just deny non-SSL access, we'll redirect to https: # See http://www.apache.org/docs/misc/rewriteguide.html RewriteCond %{SERVER_PORT} ^80$ RewriteRule ^/(.*) https://hermes.manitobamall.net/$1 [L,R] </IfModule> We use a similar trick for our web-based mail software, to force the browsers to use SSL, to encrypt not only the passwords, but also the e-mail content itself. The rewrite/redirect is much "friendlier" than just giving the users an error, IMHO. > Aren't computers fun? <G> I think so! :) -- Gilbert E. Detillieux E-mail: <gedetil(a)cs.umanitoba.ca> Dept. of Computer Science Web: http://www.cs.umanitoba.ca/~gedetil/ University of Manitoba Phone: (204)474-8161 Winnipeg, MB, CANADA R3T 2N2 Fax: (204)474-7609

1 0

Re: [RndTbl] Apache/SSL
by gedetil＠cs.umanitoba.ca 16 Apr '03

16 Apr '03

According to Raymond J. Henry: > Anyone with Apache/SSL experience care to lend a helping hand? > > I've got Apache compiled with mod_ssl, and it seems to be working fine. In > fact, I know that part is working fine. Where my trouble lies is with > forcing it to look look for the userID/password to access the directory. Which, by the way, has nothing to do with the SSL support. > It allows any conenction to view the page, without prompting for userID/PW. > httpd.conf points traffic for hermes.manitobamall.net to > /www/htdocs/manitobamall/. > > Looked around for everything I could find on the 'Net, and tried all > variations of examples, still the same. > ____________________ > > /www/htdocs/test/.htaccess: > > AuthUserFile /www/pw/.file-password > AuthGroupFile /dev/null I think you can just leave out the AuthGroupFile directive if you're not actually specifying a group file. > AuthName "TestPage" Set the AuthName directive to a name or string that will make sense in the userid/password prompt in the pop-up dialog box. > AuthType Basic > > <Limit GET POST PUT> > require user test > </Limit> We usually just specify the following... require valid-user ... without using the Limit tags. This will allow any valid userid that's found in the specified password file. > /www/pw/.filepassword: > > test: 38sqpB6MNb7BA If that's white space after the colon, you'll need to remove that. In fact, this may be your only real problem. Hope this helps. -- Gilbert E. Detillieux E-mail: <gedetil(a)cs.umanitoba.ca> Dept. of Computer Science Web: http://www.cs.umanitoba.ca/~gedetil/ University of Manitoba Phone: (204)474-8161 Winnipeg, MB, CANADA R3T 2N2 Fax: (204)474-7609

2 2

Apache/SSL
by Raymond J. Henry 16 Apr '03

16 Apr '03

Anyone with Apache/SSL experience care to lend a helping hand? I've got Apache compiled with mod_ssl, and it seems to be working fine. In fact, I know that part is working fine. Where my trouble lies is with forcing it to look look for the userID/password to access the directory. It allows any conenction to view the page, without prompting for userID/PW. httpd.conf points traffic for hermes.manitobamall.net to /www/htdocs/manitobamall/. Looked around for everything I could find on the 'Net, and tried all variations of examples, still the same. ____________________ /www/htdocs/test/.htaccess: AuthUserFile /www/pw/.file-password AuthGroupFile /dev/null AuthName "TestPage" AuthType Basic <Limit GET POST PUT> require user test </Limit> ___________________ /www/pw/.filepassword: test: 38sqpB6MNb7BA

1 0