LINUX GAZETTE

November 2000, Issue 59       Published by Linux Journal

Front Page  |  Back Issues  |  FAQ  |  Mirrors  |  Search

Visit Our Sponsors:

Linux NetworX
Penguin Computing
Red Hat
Tuxtops
eLinux.com
LinuxCare
LinuxMall
VMware

Table of Contents:

-------------------------------------------------------------

Linux Gazette Staff and The Answer Gang

Editor: Michael Orr
Technical Editor: Heather Stern
Senior Contributing Editor: Jim Dennis
Contributing Editors: Michael "Alex" Williams, Don Marti, Ben Okopnik

TWDT 1 (gzipped text file)
TWDT 2 (HTML file)
are files containing the entire issue: one in text format, one in HTML. They are provided strictly as a way to save the contents as one file for later printing in the format of your choice; there is no guarantee of working links in the HTML version.
Linux Gazette[tm], http://www.linuxgazette.com/
This page maintained by the Editor of Linux Gazette, gazette@ssc.com

Copyright © 1996-2000 Specialized Systems Consultants, Inc.

"Linux Gazette...making Linux just a little more fun!"


 The Mailbag!

Write the Gazette at gazette@ssc.com

Contents:


Help Wanted -- Article Ideas

New submission address!

Send tech-support questions, answers and article ideas to The Answer Gang <linux-questions-only@ssc.com>. Other mail (including questions or comments about the Gazette itself) should go to <gazette@ssc.com>. All material sent to either of these addresses will be considered for publication in the next issue. Please send answers to the original querent too, so that s/he can get the answer without waiting for the next issue.

Unanswered questions appear here. Questions with answers--or answers only--appear in The Answer Gang, 2-Cent Tips, or here, depending on their content.

Before asking a question, please check the Linux Gazette FAQ to see if it has been answered there.


 Wed, 11 Oct 2000 12:50:21 +0200
From: Jean-Paul Duyx <jp@duyx.nl>
Subject: Vines Client for linux

On my notebook I run linux, but at my work the network is Banyan Vines. Searching the internet, I could not find any linux client for Vines. Perhaps I didn't look good enough or mayby there is no such thing.I think it would be nice to read something about that. The only thing that i found was a private project to write a client for linux, but that site hasn't been updated for more than a year. it is http://freespace.virgin.net/paul.grayson/.


 Sun, 29 Oct 2000 14:33:05 +35824
From: Jon Claerbout <jon@kana.stanford.edu>
Subject: Income tax software

Every year I need to struggle with Windoze again in order to work out my income taxes. I heard that there were some web-based systems, but when I dug into it, it turned out that it needed to work with an adobe plugin that didn't work for me.

Hope you can dig up some better solutions for us Linux folk?

--
   o   ~
 _-'\_  ~
(*)<(*)  ~


 Wed, 18 Oct 2000 15:06:53 -0500
From: Matt <matt@1lsn.com>
Subject: Slackware RAID1 problem

HEELP! hehe I have been trying to find a chatroom (or ICQ or something..just aas long as its live and they are available alot.) with some people (or better yet, one kind guru with lots of free time) in it that can help me with a slackware problem I am having..(specifically installing and configuring a RAID1 system). I am VERY new to linux ..have only compiled one kernel in my lifetime and don't truly understand what it did or why..hehe

All I need is someone to kinda walk me through step-by-step commands starting with CFDISK and going all the way to the end..a bootable raid1 system. (I can learn how and why later..but am on a bit of a time schedule at the moment.)

If you know of any places I can go or people to contact, please let me know as soon as you can.

I already have about 90 pages of printed material and have tried most of it, but its not working. dunno, maybe the the instructions I have (have about 10 different sets form different websites) are missing something..

Anyway, I really appreciate any help you might be able to offer..


 Fri, 20 Oct 2000 18:06:30 -0200
From: César A. K. Grossmann <ckant@fazenda.gov.br>
Subject: Windows NT Event Log on a Linux Box

I need to consolidate the event log from several machines and produce some reports and even alerts from the data collected. I was thinking that using the Linux tools (cron jobs, scripting languages, and DBMS) could be a good idea, but cannot find how to do this (read the event log of a Windows box from a Linux box).

The best support I can find was the article http://www.securityfocus.com/frames/?focus=microsoft&content=/focus/microsoft/nt/log1.html. In it I can find:

"... The Event Log is accessible to remote machines via Remote Procedure Calls (RPC) via applications that utilize the Event Log API, such as the Event Viewer."

So I think it's possible to have some application that uses RPC (as SAMBA does) to connect to the remote Windows box and get a copy of the event log.

Can you help me? The Windows NT boxes are in an NT Domain, and the Linux box does have the SAMBA installed and running.

TIA

P.S.: sorry the bad english, I'm a brazilian penguinista.


Gazette Matters


 Fri, 6 Oct 2000 03:24:56 +0300
From: Peter Georgiev <pesho@geocities.com>
Subject: Linux Gazette by e-mail

Here is my 0.02USD tip for all those readers who'd like to receive the Gazette by e-mail.

Actually it can be done quite easy. All you need to do is send an e-mail message to bitftp@pucc.princeton.edu with message body:

open ftp.ssc.com
chdir /pub/lg
binary
get lg-issueXX.tar.gz
quit

and you will receive back an e-mail containing a uuencoded copy of the requested file. There is plenty of uudecoding software so I will not elaborate further.

If you need more detailed HOWTO on the matter and a list of other ftp-mail servers send an e-mail message to mail-server@rtfm.mit.edu with message body:

send usenet/news.answers/internet-services/access-via-email

or mailto mailbase@mailbase.ac.uk with message body:

send lis-iis e-access-inet.txt

or visit http://www.activesol.com/www/drbobfram.htm

There you will also find info on various internet services available via e-mail.

Your Editor comments:

This is certainly easy since it uses standard FTP commands. Remember to get lg_base.tar.gz too the first time, and lg-base-new.tar.gz each month. However, note that the file sizes are large: recent issues have been 750KB - 2.1 MB, and lg-base is currently 837 KB. Some mail gateways reject messages which are over a certain size, frequently one megabyte. If the files are too large for your gateway, the following suggestion may be more suitable for you.

Ralbright <ralbright5@juno.com> recommends:

Send an email as noted here to any of the numerous www4 servers.

From: Your  Mail Address Here   
To:  www4mail@ftp.uni-stuttgart.de
Subject: leave blank nothing here

GETSIZE 50000
XUUENCODE 
ftp://ftp.ssc.com/pub/lg/lg-issue58_tar_gz.

this results in 24 msg that are numbered part 01 of 24 and uuencode. I use uudeview to decode the 24 parts. I then rename each part to aa----ax. 24 parts; then I combine the parts exactly like this. must be this way!!

copy /b aa+ab+ac+ad and finally ax
then press return on the line containing the copy instruction It will ask if you want aa to be overwrote. answer yes and all will now be in aa now re name aa to issue58.tgz and proceed with untgz

I have acquired all 58 issues this way through email only. Hope you can make sense out of this.

Your Editor comments:

That copy command is for DOS/Windows sysems. (No, it's not a crime to read LG on a Windows machine.) On Linux/UNIX, you'd do this instead:
cat aa ab ac ad ... ax >issue58.tgz
This creates issue58.tgz, containing all the other files joined together one after the other. I don't see why you need to rename the files to aa, ab, etc., since you're just going to use them once and then delete them. Why not just use whatever names uudecode gives you?

Ralbright <ralbright5@juno.com> continues:

E-mail, like everything else, sometimes goes off into never-never land. If, after getting the parts of LG, you discover that some parts are missing, send the following to the www4 server:
GETPART put missing part number here
GETSIZE 50000
XUUENCODE 
ftp://ftp.ssc.com/pub/lg/lg-issue58_tar_gz.


 Wed, 11 Oct 2000 09:09:50 -0700
From: Linux Gazette <gazette@ssc.com>
Subject: Translations

Thanks to everybody who responded to last month's request for translators from other languages to English. Currently we have volunteers for:

ROMANCE
Spanish (3), Portuguese (2), French.
GERMANIC
German, Dutch, Norwegian, Danish, Swedish
SLAVIC
Russian (from Russian only)

We don't get a lot of mail in non-English languages, but we have gotten an article in French and one in Spanish, and TAG/Mailbag items in Italian, Spanish and Danish. I just want to have translators ready in case we need them someday.

Those who wish to translate from English into their own language should contact the foreign-language version of interest, or start your own if there isn't one. As always, see the mirrors page.

Note to those who work on LG's foreign-language editions:

There is a new mailing list, lg-translators, where I send advance copies of articles after they have been formatted. This will give you a chance to get your hands on the articles a few days early to lessen the delay between when the English version appears and when your translation is ready.

To subscribe to this list, send a message to majordomo@ssc.com with "subscribe lg-translators" in the body. This is a moderated list: only articles, article revisions, and announcements from LG to the foreign editions will be sent.

Musings on the Spanish LG:

The Spanish LG (La Gazeta de Linux) could become a significant force in the next several months. I have been getting inquiries about it every month, moreso than I've received for the other languages. The Spanish-speaking world in particular seems to have a lot of unmet demand for a Gazette-like publication. I suspect that's because of the economic situation in Latin America (an affordable OS is more of a necessity than in Europe), because people are less likely to grow up knowing English, and because there are a whole *lot* of Spanish speakers.

The demand for Spanish LG reminds me of the demand for an affordable Macintosh that was built up during the late 80s. When Apple finally released the MacClassic in 1990, I for one immediately went down and bought one, as did a lot of other people. Apple was forced to switch to a 3-shift, 24-hour production line to churn them out, just to meet the demand.

Note: all non-English versions of Linux Gazette are done as independent projects without LG sponsorship. LG does not endorse specific translations as being official. However, we gratefully acknowledge all translations we know about on our mirrors page.


Thanks

Thu, 26 Oct 2000 13:29:57 -0400
From: Bill Cox <billcox@nc.rr.com>

I was doing a search of your achives and found exactly what I needed. Thanks for being there.


 Mon, 16 Oct 2000 19:41:46 -0500 (CDT)
From: Jason Englander <jason@interl.net>
Subject: "@" sign confuses LG mirrors

I have no idea when this started because I auto-mirror /pub/lg/www_root and only usually look at it when a new issue comes out... but here's what I get with ftp and with lftp:

-rw-rw-r--   1 698    @ 105    @    30147 Sep 26 11:39 faq/index.html
-rw-rw-r--   1 698    @ 105    @    11763 Sep 30 15:38 index.html
-rw-rw-r--   1 698    @ 105    @   162592 Sep 30 15:45 lg_index.html
-rw-rw-r--   1 698    @ 105    @   134353 Nov 17  1999 tag/kb.html
-rw-r--r--   1 698    @ 218    @     1475 Jul 28  2000 tag/kb0.html
-rw-rw-r--   1 698    @ 105    @     2379 Mar  1  1999 lg_statement.html
-rw-rw-r--   1 698    @ 105    @    86857 Sep 30 15:37 mirrors.html
-rw-rw-r--   1 698    @ 105    @      102 Nov  3  1999 robots.txt
-rw-rw-r--   1 698    @ 105    @     8866 Aug 31 17:44 copying.html
drwxrwxr-x   2 698    @ 105    @     1024 Feb 28  2000 test
-rw-rw-r--   1 698    @ 105    @     3021 Mar 30  2000 search.html

The two @ that are in there seem to be botching up "mget *.html" type requests and mirroring (I use lftp's mirror), making the "search.html" file become "30 2000 search.html" (the 30 and the 2000 coming from the date).

Anyone else report this? I'm going to grab the .tar.gz files now and shut off the nightly updates.

[Nobody else has reported this. We get the "@" symbols on the FTP listings too. However, LG has an rsync server. Rsync is reliable and uses less bandwidth than FTP mirroring. Jason switched to rsync and said it's working fine. Hints for setting up an rsync client for LG are here. -Mike.]


This page written and maintained by the Editors of the Linux Gazette. Copyright © 2000, gazette@ssc.com. Copying license http://www.linuxgazette.com/copying.html
Published in Issue 59 of Linux Gazette, November 2000

"Linux Gazette...making Linux just a little more fun!"


News Bytes

Contents:

Selected and formatted by Michael Conry
Late additions added by the Editor

Submitters, send your News Bytes items in PLAIN TEXT format. Other formats may be rejected without reading. You have been warned! A one- or two-paragraph summary plus URL gets you a better announcement than an entire press release.


November 2000 Linux Journal

The November issue of Linux Journal is on newsstands now. This issue focuses on Hardware. Click here to view the table of contents, or here to subscribe.

All articles through December 1999 are available for public reading at http://www.linuxjournal.com/lj-issues/mags.html. Recent articles are available on-line for subscribers only at http://interactive.linuxjournal.com/


Distro News


Caldera

Oct. 3, 2000: Caldera Systems has announced that its Linux management solution, formerly known as Cosmos, is entering open beta. This solution will enable administrators to manage the networked systems of any Linux distribution. Caldera aims to allow network administrators to use policies and profiles to manage a half dozen or thousands of Linux systems, without having to individually manage each.

The Beta is available for download from http://www.calderasystems.com/beta/.


Conectiva

Duke of URL review.


Lute

Oct. 6th, 2000: LuteLinux.com. has announced the addition of ShowMeLinux. to their family of services. LuteLinux will host future issues and will take over as publisher of ShowMeLinux, an on-line magazine 'Bringing news to Business Professionals and Enthusiasts alike.' Contributions to ShowMeLinux are welcome, and should be directed to: info@showmelinux.com

In a further initiative LinuxFreeSupport will be authoring ShowMeLinux's 'Support Line'. The Support Line is a column offering answers to questions posed by readers regarding such topics as installations, networking, administration, applications, and the desktop.


Mandrake

Linux-Mandrake 7.2 is now available for download. It includes KDE 2.0, GNOME 1.2, PowerPak's ViaVoice voice-recognition software, the CUPS printing system, laptop profile and synchronization utilities, KOffice, ReiserFS (a journalling filesystem), Supermount (transparent access to removable media) and MandrakeUpdate (free automatic online upgrades of system software). Linux-Mandrake 7.2 speaks several dozen languages and will soon be offered in three commercial versions for home and business users.


Red Flag

Oct. 18, 2000: Red Flag Linux is officially launched by Sun Wah Linux Ltd. Included in this launch are Red Flag Linux Server 2.0 and Red Flag E-business Start Kit 1.0. The former, run on 32-bit, 64-bit or higher-end machines, optimizes server hardware performance. This product can improve the efficiency of office work. It provides a complete business Internet/Intranet connection solution, an ISP/ICP solution which can control website traffic and InterScan VirusWall network anti-virus software. All of these functions combine for the best platform for network business. Targeting the growing m-commerce market, Sun Wah Linux and EdgeMatrix have also embarked on a bundling program with WAPgate, residing on Red Flag Linux platform.

Red Flag Linux Server 2.0 was developed strictly in accordance with international L118NUX standards and General Public License regulations.

Red Flag E-business Start Kit 1.0 is an integrated solution for businesses. It consists of six components: Red Flag Linux Server 2.0; e-Office, for users to easily transfer internal data via the Internet; e-Shop, where users can easily create their own e-shops through the Internet; Web Mail, providing an inter-platform e-mail system manager designed for businesses; Web BBS, for customers to offer feedback and suggestions on the message board; and Ez2min, a remote monitoring software for the Linux system operated through the browser.

Mr. Alex Banh, Deputy Chief Executive Officer of SW Linux has expressed a commitment to developing international markets for homegrown Chinese software and to promoting Linux training in local Chinese institutes.


Rock

ROCK Linux 1.3.11 has been released.


SuSE

SuSE Linux 7.0 Personal Edition equips small office and home users with all the resources needed to install, configure and operate a Linux system and comes on 3 CDs. This package includes over 600 programs including StarOffice 5.2, Netscape and VMWare plus three easy-read manuals. The Personal Edition is retailing at R410.00.

The Professional Edition of SuSE 7.0 contains a collection of power tools including VMWare Workstation for Linux, Emhydra by Lutris Technologies, PostGreSQL. Suse Linux 7.0 Professional is supplied on 6 CDs and four manuals. 90 days of installation and basic configuration support by phone, fax or email are also included in the Professional version, which is available from OS/2 Express for R615. Contact OS/2 Express. We are advised that a limited number of evaluation packages are available. 


News in General


Upcoming conferences & events

Courtesy Linux Journal's Events page.

Linux Business Expo
(co-located with COMDEX event)
November 13-17, 2000
Las Vegas, NV
www.key3media.com/linuxbizexpo
USENIX Winter - LISA 2000
December 3-8, 2000
New Orleans, LA
www.usenix.org
Pluto Meeting 2000
December 9-11, 2000
Terni, Italy
meeting.pluto.linux.it
LinuxWorld Conference & Expo
January 30 - February 2, 2001
New York, NY
www.linuxworldexpo.com
ISPCON
February 5-8, 2001
Toronto, Canada
events.internet.com
Internet World Spring
March 12-16, 2001
Los Angeles, CA
events.internet.com
Game Developers Conference
March 20-24, 2001
San Jose, CA
www.cgdc.com
CeBit
March 22-28, 2001
Hannover, Germany
www.cebit.de
Linux Business Expo
April 2-5, 2001
Chicago, IL
www.linuxbusinessexpo.com
Strictly e-Business Solutions Expo
May 23-24, 2001
Location unknown at present
www.stricltyebusinessexpo.com
USENIX Annual Technical Conference
June 25-30, 2001
Boston, MA
www.usenix.org
PC Expo
June 26-29, 2001
New York, NY
www.pcexpo.com
Internet World
July 10-12, 2001
Chicago, IL
events.internet.com
O'Reilly Open Source Convention
July 23-26, 2001
San Diego, CA
conferences.oreilly.com
LinuxWorld Conference & Expo
August 10-14, 2001
New York, NY
www.linuxworldexpo.com
Linux Lunacy
Co-Produced by Linux Journal and Geek Cruises

October 21-28, 2001
Eastern Carribean
www.geekcruises.com


Jabber.com Announces Palm Integration and Three-Way Partnership for New Jabber Wireless Initiative

Sept. 25, 2000: Jabber.com Inc. has announced Palm and Jabber integration along with a three-way partnership between Jabber.com, WorkSpot Inc., a premier open source Application Service Provider, and IQ3G, Inc., a leader in enterprise wireless solutions. The three-way partnership has been established as the foundation for a new Jabber wireless initiative and marks the beginning of Jabber's efforts in the wireless market. Under the new initiative, WorkSpot, IQ3G and Jabber.com are working together, along with the open source community, to develop Jabber compatibility with Palm devices.

Jabber has also announced a strategic relationship with Red Hat to deliver real-time messaging infrastructure to Red Hat embedded Linux. Elements of this were showcased at the Embedded Systems 2000 show, September, in San Jose, Calif. Jabber is the only open source, XML-based platform for extensible instant messaging applications. For the latest developments on the Jabber landscape, consult their news site.


Dell First To Market with Red Hat Linux 7

Sept. 25, 2000: DELL has announced availability of Version 7 of the Red Hat Linux operating system on Dell PowerEdge(tm) servers and Dell Precision(tm) Workstations worldwide. The new operating system is also available on select configurations of Dell desktop and notebook PC products. Dell and Red Hat, as part of their One Source Alliance, worked closely during the development of Red Hat Linux 7 to ensure smooth installation and interoperability of the operating system on Dell server and client products. Details of a benchmark test of Dell PowerEdge 8450 and Dell PowerEdge 6400 servers running Red Hat Linux and TUX 1.0 have been posted on SPEC's Web site, http://www.spec.org, since August, 1999, where the Dell machines led the field.


Neoware

KING OF PRUSSIA, PA: Neoware Systems , a leading supplier of award-winning software and solutions for the emerging information appliance market, announces that Security Applications, Inc. has selected Neoware's Eon information appliance platform and NeoLinux software to power its new, fully networkable building security panel, e-Panel. Security Applications has ported its proprietary UNIX software to Neoware's Eon platform running the NeoLinux operating system which is based upon Official Red Hat Linux. NeoLinux is the first embedded version of Official Red Hat Linux. Neoware has also announced that the opening of four new US sales offices to continue its growth efforts. This coincides with an recruitment of several key personnel.


VMware Announces New User Group Program

Palo Alto, Calif., Sept. 28, 2000 - VMware, Inc. today announced the launch of a new and improved user group program. This program will provide support to relevant user groups around the world in the form of software, giveaways, product collateral and technical guides, presentation materials, consideration for VMware speaker participation at events, and more. Further information is available at VMware's site. http://www.vmware.com/news/user_groups/index.jsp.


Sensiva partners with Wacom Asia Pacific

Mountain View, California, Oct. 2, 2000- Sensiva, Inc., a leading manufacturer of computer graphic tablets and electronic pens, announces a partnership with Wacom Co., Ltd., to offer Sensiva clients interactive symbol recognition functionality in all their tablet products. Through this, people will not only be allowed to copy and paste images directly into the computer but to also navigate much faster through Internet and software applications using simple symbols.


China Internet laws

CNN has a scary article about China's Internet laws. "Internet content and service providers must keep records of all the content that appears on their Web sites and all the users who dial on to their servers for 60 days, and hand the records to police on demand, the rules state."

Definitions of illegal content are vague, such as "spreading rumors", "disrupting social stability", gambling and pornography. The rules also forbid "harming ethnic unity" and "advocating cults and feudal superstition" -- terms often invoked to prosecute suspected Tibetan independence activists and members of Falun Gong and other spiritual movements.


Opera, PalmPalm and Trolltech form Strategic Alliance for Asian Embedded Linux Market

Sept. 25, 2000: Opera Software, PalmPalm Technology Inc., and Trolltech announce the formation of a strategic alliance for the Asian wireless Linux market. The companies will jointly develop "Linux Total Solution for Wireless Internet Appliance" for hardware manufacturers in the wireless Internet space.

Linux Total Solution for Wireless Internet Appliance consists of Opera's "Opera for Linux" Web browser, Trolltech's "Qt/Embedded," an embedded GUI environment and windowing system, integrated with PalmPalm's "Tynux," a Linux Operating System optimized for the wireless Internet. This is to provide a complete embedded Linux solution for wireless Internet devices.


Linux Links

Linux.com Talk to Eazel about Linux UI and working in the OSS model

The Duke of URL Links

Why the world needs reverse engineers -- or -- What Digital Convergence (the maker of CueCat) wasn't telling its customers

Did Al Gore invent the Internet?

Anchordesk UK links:

Kernel Wiki invites contributions of documentation/illumination on aspects of the Linux kernel.

Word processing in Linux : a business perspective.

The Ninth International Python Conference.

Gimp-Savvy.com contains a guide called "Grokking the GIMP", which covers the use of the GIMP's core tools and shows how nine major projects were done.

The HP-HOWTO shows how to use Linux with various Hewlett-Packard products, and what level of Linux support there is for each product.

European lawmakers propose to make hacking illegal. (MSNBC)

An interesting proposal to force abandoned copyrighted products into the public domain. (OS Opinion)

A review of four Windows emulators and PC emulators. (Linux World)

Linux in the financial industry. (Tech Web)

Embedded OS licencing fees: how the lack of licencing fees for embedded Linux products will enable many times more embedded devices to appear on the market and allow smaller companies to get in on the act. (ZDnet)

Interview with Vincent Rijmen of the Rindael AES algorithm, a DES replacement which is much harder to crack. Rindael is unencumbered by intellectual-property and patent claims. (Linux Security)


Software Announcements


NetworX Linux Cluster Helps Researchers Fight Disease

SANDY, UTAH, Oct. 3, 2000 - Linux NetworX, Inc., a provider of large-scale clustered computer solutions, announced today that the National Center for Macromolecular Imaging (NCMI) at Baylor College of Medicine will use the company's clustered computers in its world-renowned molecular imaging research center.

Using a 32-processor cluster system from Linux NetworX, Baylor College of Medicine reconstructs the molecular configurations of disease and illness-causing viruses and other molecules and develops three-dimensional models of their structures. A cutting-edge technique then allows researchers to view the viruses as if they were locks. By properly studying these "locks," they hope to find the "keys" to opening and destroying them. In the past, much of this research was done on large supercomputers costing millions of dollars. But today, because of price-performance issues, clustered-computer alternatives are being selected to handle the large amounts of computation, data handling and storage required.

In the past, scientists used trial and error methods to create vaccines and drugs to fight viruses. But now, using clustered computers and other technologies, they are able to define the structure of these viruses and attempt to design drugs that will solve the specific problems each one presents.

In further good news for the company, the Linux NetworX Evolocity (TM) cluster server receives Best of Show Award for Network Servers & Peripherals from InernetWeek and Network Computing at NetWorld+Interop 2000 Atlanta. The Evolocity cluster server, introduced at the show, is designed for managing and optimizing Web traffic in the Internet market.


Tridia

ATLANTA Sept. 25, 2000--- Tridia Corporation, a provider of eSupport tools that facilitate interactive support and remote system administration, has launched Release 2.0 of the company's newest product offering, TridiaVNC (virtual network computing) the first commercially supported release of open-source, virtual network computing software that views and controls Linux consoles. TridiaVNC Release 2.0's Linux viewer and control features make Linux servers remotely manageable from anywhere on the network and from a variety of systems (Linux, Windows, Unix, Mac). A prerelease binary (e.g., beta) will be available by Sept 26 on www.tridiavnc.com. The source code will also be available to the public via CVS at www.developvnc.org. Those wishing to contribute to this open-source endeavour may also like to try their hand at naming the TridiaVNC Alien mascot. Further incentive is the US$5000 prize for the winning entry! Entries can be made on the TridiaVNC website before November 30 2000.


Teamware Office 5.3 for Linux

Teamware Group has a Groupware application for Linux called Teamware Office 5.3 for Linux. The product is available in RPM format for a 90-day evaluation period with a 50-user license at www.teamware.com/linux/. It is a ready-to-run groupware product for corporate collaboration and communication with a customizable user interface and state-of-the-art communications features. It will be sold for $1000 USD for a 100 user server license.


Proven CHOICE Accounting releases Internet Toolkit

Oct. 2, 2000 --- Proven Software, Inc. is pleased to announce the release of the Proven CHOICE Internet Toolkit designed to help developers integrate internet applications to Proven CHOICE accounting. For details, consult this website. A sample application using the Proven CHOICE inventory file is available for inspection. Proven CHOICE is a powerful multi-user accounting system for linux with the attributes needed by organizations of medium size. Proven Software has been developing multi-user business applications for 18 years and exclusively in Linux for over 5 years.


Workstation Solutions Announces Quick Restore 2.7

AMHERST, N.H., Oct. 17, 2000 - Workstation Solutions, Inc., a leader in innovative data protection software, announces major enhancements to Quick Restore 2.7 that provide increased performance and scalability in data protection of network attached storage (NAS) and other platforms. Quick Restore's new performance, scalability, and ease-of-use features allow customers to backup and restore critical business information rapidly and cost-effectively. Quick Restore 2.7 can be used with a host of new devices from Compaq, Exabyte, HP, Breece Hill, Spectra Logic, ADIC, Qualstar, and StorageTek. Quick Restore 2.7 is available immediately from Workstation Solutions. List pricing begins at $2500. As part of their partnership building strategy, Workstation Solutions have formed partnerships with Network Appliance, VA Linux, and Mirapoint to Support Leading NAS Servers. Their aim is for Quick Restore to provide flexible, fail-safe, high-volume data protection for these companies' platforms.


Internet C++ (ICVM) Alpha Release

Bob A. Dayley, inventor of Internet C++ (an open alternative to Java and C-Sharp) recently announced the product's alpha release. This release is a demonstration and test of the virtual machine (ICVM), the compiler (igcc), and libraries. Complete source to Internet C++ and ICVM are available for download, as well as binary releases of ICVM for Unix/Unix-like platforms, including Linux, FreeBSD, and NetBSD. Internet C++ feature a high-speed virtual machine (ICVM) that is fast enough to run Doom with no JIT compilation. Bob invites anyone interested to download their Doom port and check it out for yourself! Further information is available.


 Other software

The Opera web browser 4.0 for Linux is now in beta.

Magic Software is building an e-tailing solution called TISTrade for Toyo Information Systems, based on Magic eMerchant. TISTrade will make it easier for manufacturers and retailers outside Japan to sell to consumers in Japan.


Copyright © 2000, Michael Conry and the Editors of Linux Gazette. Copying license http://www.Linuxgazette.com/copying.html
Published in Issue 59 of Linux Gazette, November 2000


(?) The Answer Gang (!)


By Jim Dennis, Ben Okopnik, Dan Wilder, Dustin Puryear, Anthony Greene, Brian Finn, Richard Turner, the Editors of Linux Gazette... and You!
Send questions (or interesting answers) to linux-questions-only@ssc.com


Contents:

¶: Greetings From Heather Stern
(?)Linux Gazette
(?)table overflow
(?)Sed / Awk Script
(?)Porting to Access
(?)Issues with a modem
(?)LinuxRedHat Errno 404
(?)IP Masq and X
(?)extra keyboard keys under X
(?)cloning with dd
(!)`HELP: Crontab not running
(?)Replacing an MS Exchange Mail Server with Linux
(?)background processes in Linux
(?)serial consoles, install, boot, etc --or--
Serial Consoles
(?)Confused About Internet Access to My Home Computer --or--
Does Internet access require an ISP?

(¶) Greetings from Heather Stern

Well, it's autumn at last, and sunny but cold and windy days (with the leaves fluttering around ... heh, that would make a great backdrop on my wallpaper...) are in competition with fluffy grey cloudy days (which I also like). I'm pretty pleased; the Gang is growing!

The flip side of that is, I didn't get quite everything in. Some of the items might well become seperate articles. Others will be seen next month.

Anyways, I wanted to babble just a little bit about themes. Nowadays your computer does not have to be drab and boring. Or, it can be plain - but your idea of comfortably plain. With the fancier window managers you hardly have to be sure that windows under X are still square.

So, what did your computer dress like for All Hallow's Eve? Mine wants to go as a Tektronix vector terminal, and the best I could find it was a copy of Spacewars...

See you next month, everyone!


(?) Linux Gazette

From Ben Okopnik to Jon Lapham on Thu, 5 Oct 2000

If I read your article correctly, you used sendmail to change your "From" header and add some aliases. Why did you use sendmail to do this? Why not set all this up in your email client? As a fellow mutt enthusiast, you do know that this can be configured in your .muttrc and that you can set up a global ".muttrc" for the system? It seems to me that you should try to make it easy for your brother to do things like add a new alias to his email list. The sendmail alias solution seems a bit overkill IMO.

(!) I see that I've failed to explain my requirements sufficiently... <grin> I swear, LG readers are the best literary critics in the world!
Changing the /etc/Muttrc or the ~/.muttrc only changes the "From:" (note the colon), and not the "From " header (which does not exist at the time that the e-mail is created; it is added by the MTA). A number of mail readers, including Netscape (at this point, having done some serious fiddling with Muttrc, I'm uncertain about Mutt), use the "From " header in forming their 'Received from' and 'On dd/dd/dd, <user> wrote:' lines; since I get quite a lot of mail from other Linux users, I see a lot of "On dd/dd/dd, root wrote:"... Often (and this is much worse) the sender addy looks normal, but the "Reply to:" is set to "localusername@isp_host.com" - if you don't pay attention when you hit "Reply", you'll get an unpleasant surprise in 3-5 days (e.g., "Mail could not be delivered to 'root@geocities.com'...") In order to fix those headers completely, I change both the .muttrc and the sendmail setup. By the way, I found that in RedHat, the 'send-hook * my_hdr From:' line in Muttrc caused Mutt to give an error message. It works fine on my Debian boxes...
Also, rather than adding aliases, I've caused sendmail to do address conversions, a completely different issue. An alias is a short name used as a substitute for a recipient's mail address; the conversions are a way for sendmail to know that the local username "ben" should be converted to "fuzzybear@pocketmail.com" on all outgoing mail.

(?) I install RH linux on peoples machines all the time, and I have to say I almost never have to change the default sendmail setup, even for single user systems connected via ISP.

(!) Try this: once you've set up one of those accounts, send mail to yourself (not the local username, but the mail account at your ISP) and read the headers. You'll most likely find that the "From " header has your local username instead of your e-mail address. Of course, if you've found a way to fix this via Muttrc, I would be more than happy to learn it!
Ben Okopnik

(?) table overflow

From Heather Stern and Jim Dennis to james zhuang on Fri, 6 Oct 2000

Hi,

I am runing Redhat Linux 6.x. Recently I am getting an error message 'neighbour table overflow' pop up in the console screen.

Any ideas,
James

(!)[Heather] Yes, it means your localhost interface is not set up correctly. I don't know the actual mechanics (perhaps one of the rest of the Gang will chime in) but basically, the message is about your ARP cache going crazy trying to deal with what is really local traffic.
Until you fix it, session based protocols like samba, nfs, ftp and telnet, and ssh will have iffy connections. Samba and NFS will probably be so annoying you can't really use them; a good ftp client will just feel like it's slow as molasses.
Whereas, if you go into /etc/sysconfig/network-scripts and you make sure that you have a valid ifcfg-lo file, things will be properly speedy.
(!)[JimD] I noticed that 'pump' and some other DHCP clients would corrupt your localhost/loopback configuration and remove the routes thereto unless you explicity tell them which interface you want them to work on. You'd think that 'pump' et al would default to leaving your lo interface alone --- but that seemed to be where I was getting it for awhile.

(?) Sed / Awk Script

From Dan Wilder to Kopf on Sat, 14 Oct 2000

Could someone tell me how to write a sed script which'll put text at the beginning of each line of a file, and change all the backslashes in the file to forwardslashes?

I need it so that I can change all my .m3u files from windows format to UNIX, IE from:

Deftones\White Pony\Pink Maggit.mp3

to

/mnt/win_c/mp3s/Deftones/White Pony/Pink Maggit.mp3

Anyone have any ideas?

(!) Haven't tried it, but
#!/bin/sh
#
# call with filename as first argument. Puts
# out revised file to standard out
sed 's%\%/%g;s%^%/mnt/win_c/mp3s/%' $1
Uses "%" as delimiter, to avoid having to escape the more conventional forward slash. The
s%\%/%g
says to put a forward slash in place of a backslash, and the "g" modifier says to do it for every such.
;
is a command delimiter
s%^%/mnt/win_c/mp3s/%
says to substitute /mnt... at the beginning of each line (that's what "^" matches).
For more info, see "man sed". This manpage contains one of the several fine introductions to regular expressions, which have the ability to match things like the beginning or ending of a line, strings containing not just particular characters put particular sets of characters, and so on. See also "man grep".

... but, when Kopf tried it ...

(?) Hi Dan,

I entered that in, but it gives me an error of:

sed: -e expression #1, char 11: Unknown option to 's'

I don't know what char 11 is, is it the 11th character inside the quotes of what's being sent to sed? I've been messing around with the script, but to no avail...

Any Ideas?

Thanks,

Aengus

(!)Try
sed 's%\\%/%g;s%^%/mnt/win_c/mp3s/%'
The "\" has special significance as an escape character, means "ignore me but take next character literally".
My bad.

(?) Porting to Access

From Ben Okopnik to John Humphre Halliday on Tue, 17 Oct 2000

Hello Answer Guy!

(?) Hello, John -
The Answer Guy/Gang is a column in the Linux Gazette; we answer Linux-based questions for our readers. It just so happens, though, that I was the EDP manager for an insurance company in the Virgin Islands - and this company used Clipper (all the in-house apps were written in it). Due to the major Y2K issues inherent in their operations, I convinced them to switch to a different suite of apps - which involved converting the old databases to Access.
First, for the Linux community: for those of you who want to read/use Clipper DBFs under Linux, I've written a front end for Martin Schulze's "dbview" called "clipview"; it's a viewer/converter that patches the differences between the two formats. It's available on my site - http://www.geocities.com/~ben-fuzzybear/clipview.tgz - and Martin may also be including the functionality in future releases of "dbview".

(?) I was hoping you'd be able to recommend the quickest way to port from a Clipper/DB2 database to Access 2000. A client has asked that I do this for them and I know almost nothing about Clipper - just that it's a compiler for DB2 type databases (.dbf). Is it possible to access the tables through an ODBC connection in Access and simply copy/import the tables/data to Access?

(!) You actually have several ways to do it; Access can link the files via ODBC or read them via its "import" facility (DB3, DB4, or FoxPro types work fine; I seem to remember DB2 as not working correctly...) Note that linking works fine unless you specify "shared" mode; then, it becomes dead slow. If you decide to import the files, make absolutely sure that you index them beforehand; Access can make a really horrible mess of a file that is out of index, and will do so without any notification... By the same token, double-check any files you import (# of records, totals, etc.)
Good luck!
Ben Okopnik

(?) Issues with a modem

From Ben Okopnik to J. Miguel Iglesias S. on Wed, 18 Oct 2000

I have a PC running RedHat 6.2, I also have an internal Motorola ModemSurfr 56k.

Some guy told me he found the way to make it work with linux, so he told me to define the parameters using the setserial function.

(!) Just for the sake of clarity: "setserial" is used to configure the serial port, which is necessary for access to the modem; it does not configure the modem itself. In the case of internal modems such as yours, the port is part of the card itself - but you should still realize that there is a difference.

(?) Checking the boot log I saw the system runs setserial at boot and detects the port for the modem.

(!) That's pretty standard, at least in the distributions with which I'm familiar; the problem is that the values to which the ports are set are usually 'auto' or default values. It pays to manually configure "setserial" to get the best performance (and in some cases, _any_ performance) from your serial ports: after a bit of tweaking, I saw the data transfer rate across my serial link go from just over 9kB/s to just under 12kB/s.

(?) However I used the setserial function and somehow my modem gave me some response using minicom.

(!) A good sign! This says that your modem is _not_ a Winmodem, and you're talking to the right port.

(?) If I use minicom, I'm able to dial to my ISP, but the speed is way too slow (it takes about 30 seconds just to display the greeting from my ISP) so my connection times out before I'm able to login to the ISP.

(!) This sounds like a conflict - and in this term, I include hardware as well as software that sets up hardware, such as "setserial". Let's go over the possibilities.
1) Serial port. As a guess, I would say that this is most likely the culprit, given that tweaking "setserial" is what allowed you to see your modem in the first place. Read the "setserial" man page carefully, particularly paying attention to the speed flags such as "hi" and "vhi". Check the other settings for the port you're using, port and IRQ both, and _specify_ them rather than auto-configuring. "setserial" can be used right from the command line, so you do not have to reboot to change the settings; experiment with different values and see if they produce any changes.
2) "Usage" conflict. In theory, once some piece of software uses a given serial port, it will write a "lock" file that will prevent other software from trying to use it. Unfortunately, this scheme is not perfect: a particularly stupid piece of software (one that does not honor or check for the lock), or one that uses the 'cua' port addressing scheme (as in '/dev/cua0', etc.) may try to use a port that is already in use, causing a problem. Immediately after rebooting and _before_ trying to do anything with the modem, try running the "fuser" utility on the appropriate "/dev/ttySx" port - if another process is using it, "fuser" should let you know.
3) IRQ conflict. I've noticed that under Linux, as contrasted against DOS/Win, IRQ conflicts seem to slow down the associated process instead of just crashing the machine; a "friendlier" response, as I see it, and certainly easier to diagnose. Try removing the modem from the system and checking "/proc/interrupts" for other hardware using the IRQ that it requires (e.g., IRQ4 for ttyS0/ttyS2, or IRQ3 for ttyS1/ttyS3.) Also, check "/proc/ioports" for 03F8, 02F8, 03E8, and 02E8 - the port addresses for ttyS[0123] - though I wouldn't expect too much trouble there.

(?) If I use the pppdial in Gnome it simply don't detect my modem.

(!) I would first make sure that the serial port and the modem were working OK before trying to set up a dial-up account - i.e., eliminate the conflicts and make a good connection via "minicom" (make sure you're using the correct setup values in "minicom", as well!), _then_ worry about automating the dial-up.
Good luck,
Ben Okopnik

... Miguel replies...

(?) I will try all your hints and let you know how it worked, maybe my experience will bring some hope with this modem to other users.

I'm considering to buy an external modem anyway (but still want to make my current modem as well), do you think I should buy a CNet ($70) or I should go safer and buy an US Robotics ($110)?

Thanks a lot for all your help and regards

Miguel

(!) My experience with modems is that "you get what you pay for". I've had excellent luck with USR and Hayes modems, variable with other brands; given the above choices, I would certainly plunk down the extra money for the USR.
Along with LinuxMafia's Rick Moen, I believe that internal modems, when ground fine and lightly roasted, make a decent coffee but have little use otherwise; making your existing modem work is good troubleshooting practice, but your idea of replacing it with an external is a good one.
Ben Okopnik, modem curmudgeon :)

(?) LinuxRedHat Errno 404

From Heather Stern to Ken on Wed, 18 Oct 2000

I want to change the default of Errno 404, so that the user is redirected to another URL when they request a URL that is not on my server. What directory and file do I need to edit?

(!) In most web servers it's possible to configure it so 404 errors (or other numbered errors, another popular one to force this way is 501 as it sometimes happens from broken scripts) go to a special page of your choice. A lot of big ISPs have 404 errors lead to a front page for their search engine, explaining that whatever you were trying to find has moved.
On Apache under SuSE, the file to adjust is /etc/httpd/httpd.conf but it could as easily be under a home directory for Apache under /usr somewhere. I've no experience with the other servers, but the powerful ones like Roxen Challenger and aolserver should definitely also have the feature available.

(?) IP Masq and X

From Heather Stern to M.K. Laha on Thu, 19 Oct 2000

My Linux PC is on a private LAN that connects to the internet through a (Linux based) router using IP masquerading.

My problem is that I can't seem to point the DISPLAY environment variable on a remote machine on the internet to that of my Linux PC. So, if I run, say, gnuplot, on the remote server, I cannot see its output on my PC.

I've tried setting the DISPLAY variable on the remote machine to point to the router but that doesn't work. Seeting the DISPLAY variable to point to my PC obviously doesn't work because it is not "visible" to the remote machine on the internet.

I shall greatly appreciate any help/pointers. Thanks in advance.

- Manas Laha

(!) So assuming that you are at one Linux box (Home) and your other Linux box (Work) is behind all this firewall stuff. (Yours might really have some other relationship to you, but this will help everyone understand what I mean, and usually it's corporate boxes that have better defenses.)
If you have been provided a way to reach Work from Home via ssh, then all you need to do is turn on X11 forwarding. Then ssh will create a "virtual" display (usually Work:10.0) which will acept X GUI commands, but really send them up the ssh pipe back to Home.
So, ot's okay not to be running X on the Work system at all, as long as the libraries are there so programs that you want to run can be good X clients. You do need to be running X on your Home system though. Launch ssh out of an xterm (eterm, etc.) and both your ssh client plus Work's ssh daemon must be given the options that X11 forwarding is okay. Why? Because these days it usually defaults to off, as it's a security risk; X usally has an annoyingly strong root privilege. You can reduce the risk by using .Xauthority files so only your account at Work can use the pipe.
What most people don't think of, is that this trick, where Work's CPU is supposed to display on Home's monitor, used to be the normal way that the X windowing system was used... and that's why the part of X that paints on the monitor is called the server.

... Manas answers...

(?) Thanks for your prompt reply. I haven't tried using ssh so far, but I shall certainly try it out now.

- Manas Laha


(?) extra keyboard keys under X

From Ben Okopnik to Gavin W. Burris on Sun, 22 Oct 2000

(?) I have a Gateway keyboard with multimedia keys along the top. Is there any way to use these under X? Could I press one and have a program or shell script run? Thank you for your time.

(!) The answer depends on exactly what those keys do. If they are "programmable" keys such as Gateway used to have, then their definition is up to you: if you can invoke a shell script by typing something in, then you can invoke it with a "programmable" key. As an example, "icewm" can use those "Windows" keys to pull up the program menu; a combination of arrow keys and the 'Enter' key will invoke any of the listed apps. "icewm" can also (I believe this violates the "window manager mandate", but works very well for me personally) intercept Ctrl- key combinations, which can then be tied to specific commands.
If, on the other hand, they generate some sort of previously unmapped key codes, then you would have to dig a little deeper into your WM man page and other reference material. The "key codes must be passed to the application" directive seems to be one that is ignored by most WMs, and one or more may be capable of being 'told' to intercept these new codes - but this would obviously be a per-WM-specific feature.
I recommend taking a closer look at what's happening via 'showkey' in a VT and 'xev' in an xterm. Once you have an idea of what keycodes you're generating, you'll know in what direction to search.
Ben Okopnik

(?) cloning with dd

From Ben Okopnik to Chris Smart on Mon, 23 Oct 2000

(?) Hi, do you know how I can speed up the dd command under Linux when cloning disks. I use dd if=/dev/hd? of=/dev/hd? at the moment, are there any flags that I can use to speed it up. Or maybe you know a quicker way to clone disks that preferably doesn't use Norton ghost or powerquest disk image!

Any help will be much appreciated

(!) There is a "hard limit" associated with the type of process that you're talking about: the 'speed', or the maximum data transfer rate of the slowest HD. One tool that could be useful, especially if you're cloning to a number of identical drives, is "hdparm" - the man page gives a good "tuning" guide (I got a significant improvement from my laptop HD performance after playing with it for a bit) which can help you maximize the DTR of a given drive. This applies to both of the drives involved.
The other issue is, of course, "dd" itself, particularly the 'bs' option which sets the size of the block that is read from 'if' and written to 'of'. Here is a test worth trying:
time dd if=/dev/hd? of=testfile bs=[N]k count=M
where NxM=10Mbytes, and the source and the target are on different drives. Vary N (and consequently M) and see what blocksize gives you the best performance. Given this type of custom-tweaking, I believe you should be able to improve on the performance of any other software...
Ben Okopnik

(!) `HELP: Crontab not running

From Richard N. Turner on Sat, 09 Sep 2000

Dear Editor,
I saw the article mentioned in the subject and some of the followups and had to reply.
I've seen more than my share of people cursing cron and saying: "But the script runs fine from the command line!". Pierre Abbat's reply in the September issue was right on. Most people will modify the PATH variable to include some directories beyond the major ones that get defined in places like /etc/profile and scripts will fail when they attempt to run some commands that rely on this modified PATH.
The thing to remember is that cron doesn't run your .profile when it runs a script. If you don't explicitly define the full path to a program run from within the script it'll fail. So you either have to make sure your script contains something like "/home/mydir/devel/bin/prog1" (or whatever) or amend the PATH at the top of the script.
Another alternative is to just source, depending on your shell, either .profile or .bash_profile from within your script (assuming that it defines PATH and whatever other environment variables were helping the script run from the command line). If you include a line near the top of your script like:
. /home/mydir/.profile
or
. /home/mydir/.bash_profile
all things you usually rely on in your interactive environment are defined for your scripts run under cron as well.
If you do decide to source your .profile, you might want to watch for things that depend on there being a display and/or keyboard "attached" to the process running the script. If there isn't, you might see strange error messages like "not a typewriter" or "cannot open display :0.0". I have a toolbox of variables and shell functions that I like to use in a file called "std_functions" which I source near the beginning of my interactive environment setup as well as my scripts. One of the things I put in `std_functions' is:
     TRUE="0 -eq 0"      #Lets you define Boolean environment
variables and
     FALSE="1 -eq 0"     #makes scripts easier to read six
months from now.
     if [ -t 0 ]
     then
          INTERACTIVE=${TRUE}
     else
          INTERACTIVE=${FALSE}
     fi
The "-t" test returns `true' if stdin (file handle 0) is associated with a terminal. Then in your profile, you can do things like run xrdb using:
     if [ ${INTERACTIVE} ]
     then
          xrdb -l ~.Xresources
     fi
and not get weird messages from your cron jobs (The above `if' block would, of course, evaluate as false under cron). I tend to keep my profile arranged so that any setup that I need for my interactive sessions is wrapped by an if-then-fi block. After all, you don't really need to define aliases and use them in your shell scripts (Ugh!).
Hope this'll help someone...
PS: I've somehow missed reading the Gazette for the last couple of months. It keeps getting better. Keep up the good work.
-- RNT

On behalf of the crew, thanks! We couldn't do it without you! -- Heather


(?) Replacing an MS Exchange Mail Server with Linux

From Dustin Puryear, Anthony E. Greene, and Brian Finn to hutchins on 11 Sep 00

On this subject, we hear both from the author of a good book all about it, a serious cross-platform power user, and someone who simply found something better than Exchange to use in this fashion.

This is a sort of follow on to your discussion in Issue 56 of reasons not to migrate a Linux mailserver to MS Exchange.

One feature that the MS Exchange Server/Outlook Client (as well as the Lotus Notes Server/Client) offers is a centralized address book.

(!)[Dustin] Dear Jonathan,
I read with some dismay your message to Linux Gazette regarding a lack of "centralized" directory services on Linux. Nothing could be further from the truth. There are several LDAP servers ready to run on Linux. Better yet, OpenLDAP, an open-source LDAP server, compiles easily on Linux and can be integrated with MTA's such as Sendmail and Postfix. In addition, you can access the directories on OpenLDAP from Netscape or Outlook 98+ easily. In fact, I have implemented OpenLDAP at my company and it works great!
FYI, I cover both Postfix and OpenLDAP in my book, "Integrate Linux Solutions into Your Windows Network," which is aimed specifically at NT managers wishing to use Linux to their advantage in NT-dominated networks. (Of course, it works the other way around as well--if you wish to bring NT/Windows into your UNIX organization the book just as well.)
Feel free to ask me any specific questions that you may have.
Best regards, Dustin
--- Dustin Puryear dpuryear@usa.net

Hey Dustin, thanks for joining the Gang! If anyone sends you good questions and you copy your answers to LG at linux-questions-only@ssc.com -- we will publish them so more people can understand how it all ticks. -- Heather

(!)[Anthony] There is no reason this would not work for external addresses. I run an LDAP server on my home network for members of my household. Most of the addresses are for external users. I update it using an LDAP client <http://www.biot.com/gq/>; and the changes are immediately available to everyone.
Netscape has no problem using the LDAP server automatically to resolve partial addresses. I did the same thing in my former organization where Outlook 2000 and Outlook Express were the clients. The Outlook 2000 client needed to be tweaked to use a more flexible LDAP query, but then they both worked fine. Even the StarOffice mail client can use LDAP, but the procedure for selecting addresses in StarMail is tedious and non-intuitive.
The Outlook 2000 installer makes you choose either Internet-Only or Exchange Server mode. If you choose Exchange Server mode (the default, I think), then you will have to edit the registry to get a more flexible LDAP query. The default search looks only at the beginning of the email address. It does not search the 'cn' (commonName), 'sn' (surname), 'givenName', or any other attributes. I changed the search so that it looked anywhwere in the 'cn' attribute. You can figure this out by looking at the man pages for the utilities that ship with OpenLDAP and the registry entry associated with the LDAP server on the Windows client machine.
If you're limited to performing updates from a Winbox, you might look into ldap-abook <http://sourceforge.net/projects/ldap-abook/>. It's a set of perl scripts and a module that makes it easy to maintain an LDAP address book. You will probably have to edit the scripts to fit your situation, but it can work. I found it easier to do batch updates by updating an LDIF file and re-importing the whole thing during off-peak periods. If you have a large directory, you'll probably want to get a good LDAP client instead. The utility programs that come with OpenLDAP are pretty good if you only have command-line access to the server.
(!)[Brian] In issue 58, an Answer Guy reader was looking for a Linux replacement for Microsoft Exchange. I believe OpenMail by HP (http://www.hp.com/go/openmail) could be what he is looking for. Here is a blurb from Info World about it:
"Summary: HP OpenMail is an impressive, highly scalable mail server. One OpenMail server will handle Microsoft Outlook (with scheduling and calendar), Lotus cc:Mail, Lotus Notes, Microsoft Mail, Web, and standard e-mail clients.
Cost: Free for Red hat Linux servers with up to 50 mailboxes. $41 per mailbox on Linux Servers, $77 per mailbox on other platforms.
Platforms: Red Hat Linux 6.x;
HP-UX 10.20 or 11.0;
AIX 4.21 or 4.3;
Solaris 2.5.1 to 2.6
Hope this helps,
Brian Finn

(?) background processes in Linux

From Peter Samuelson to Andy Larkum on Sat, 30 Sep 2000

Regarding a recent LG Two-Cent Tip-- [Andy Larkum asks LG]

(?) I have a small query. I want to log into a Linux machine, set a process running, and log out again, leaving the process running. It has been suggested that I can do this by simply using 'nohup command &' but this didn't work, because the process was killed as soon as I logged out again.

(!)[Heather responds] screen with autodetach mode turned on would work nicely. We use it here all the time. -- Heather
(!)[Peter] What you want is the 'disown' command, a bash builtin. It causes the shell to detach a background job from the tty and basically forget it ever existed.
This is really useful in loops. Often I want to start 100 jobs in the background but don't care about stopping them later. So:
i=0; while [ $i -lt 100 ]; do some_long_job_involving_$i & disown; ((i=i+1)); done
Note that I use '&' to put each job in the background, then immediately disown it. That way the job numbers don't accumulate and get in the way.
If you are forced to use a non-bash shell that doesn't support disown, you can get the same effect by running the background job in a subshell:
sh -c 'some_long_job &'
The 'sh' you spawn to run the job exits immediately -- it's not an interactive shell so it doesn't bother with th job control crap -- and your login shell is none the wiser about some_long_job still going.
Peter

(?) Serial Consoles

From Jim Dennis to Joseph Annino on Sun, 08 Oct 2000

One thing that is really great about Sun hardware is that you can get rid of the monitor, mouse, and keyboard all together and do everything from install the operating system to change EEPROM settings via a serial console. While Intel hardware was never designed this way, I cannot find much information about setting up Linux on Intel to approximate this. Is it possible to install and boot Linux over a serial console? Log-in in this way is easy, but to be able to completely administer a system the install and boot functions are critical, especially the Lilo prompt would be nice.

(!) Note: Linux on Sun and other SPARC hardware supports the serial console just as you'd expect. Let's try to remember that Linux is just a "PC UNIX" anymore. I've also used Linux serial console on PReP (PowerPC Reference Platform) systems.
I've heard that some new Intel motherboards include BIOS support for serial console. However, I haven't seen one of those yet.
As to your question. Yes, Linux can support a serial console, and it can concurrently support the normal PC console (with virtual consoles) and a serial console.
Your first step is to compile your kernel with serial console support. That's a standard configuration option in the 2.2.x kernels and it was available as an unofficial patch for years (since the pre-1.0 days). There is a small text file to explain this support in /usr/src/linux/Documentation/serial-console.txt (Obviously depends on your kernel version, but it's been there for awhile so any recent kernel should include it).
Next you have to configure LILO by editing the /etc/lilo.conf. There are two parts to this configuration --- you want to configure the LILO bootloader itself to include support for prompting and handling input on the serial port, and you want to add a command line parameter to the kernel to enable and configure the serial console support that you had compile into it.
So you need a lilo.conf that looks something like:
boot=/dev/hda2
root=/dev/hda3
install=/boot/boot.b
map=/boot/map
delay=20
prompt

#      vvvvvvvvv
serial=0,19200n8
#      ^^^^^^^^^

image=/boot/vmlinuz
	label=new
	read-only

#                vvvvvvvvvvvvvvvvv
	append="console=ttyS0,19200"
#                ^^^^^^^^^^^^^^^^^

Note that these different parameters don't have matching syntax. On the serial= directive (which configures the LILO boot loader support) we have the port number (without the ttyS device name prefix) followed by the speed, parity and data bits. On the append= drive we are passing a kernel option. The kernel console= option takes the base name of a device (with the /dev/ directory name, but with the ttyS* prefix/device name), and then the port speed.
Actually the speed, parity, and bits settings for both of these use the same format and syntax. So the important difference is that one (the serial=) takes just a serial port number while the other takes a device name (ttyS*). The first time I tried to get LILO working with a serial console I didn't read it carefully enough and I thought I knew more than the documentation. It took me a few hours to figure out that I needed to remove the "ttyS" from my serial= line!
Finally, some newer PC motherboards/chipsets have support for full serial operation. These tend to be the more expensive keyboards that are designed for rackmount cases and are particularly handy for co-location servers.

(?) Does Internet access require an ISP?

From Mike Orr to Jeffrey Stephens on Tue, 17 Oct 2000

(?) I'm a bit confused. I was re-reading back issues of Linux Gazette and came across this answer which you provided in the Sept. 98 column, issue 32. I am running Redhat 6.2 which I configured using the KDE workstation option. I understand you to say in the enclosed answer that no one can access their computer over the internet without making arrangements with their ISP. Then what's the big deal about securing my cable connection? Since I haven't made any arrangements with my ISP your answer would seem to suggest that I am secure. On the other hand, if someone can break into my machine then I ought to be able to connect with it myself over the internet without going through my ISP. Am I missing something here?

Regards,

Jeff Stephens

(!)[a past reply] Permission to Set up a Linux Server
Alright, I finally figured out what you were asking. It took a little work, though.
First note: when you set up a Linux system it defaults to providing many services. It is already a "server."
What you seem to be asking is: "How do I make my server accessible via the Internet?"
As you surmised you would have to make arrangements with some ISP to have some dedicated (or at least "dial on demand") connection to the net, or to "co-locate" your hardware with them.
(!)[Mike] There are several issues here. One is, what the terms "server", "ISP" and "being connected to the Internet" all mean. Another is, how do the different types of Internet connections affect how easy it is for a cracker to break into your computer.
If you have Internet access, you are connected to the Internet through an ISP (Internet Service Provider) of some sort. For cable modems, the cable company normally runs its own ISP that all customers must use. My DSL provider allows me to use any of several local ISPs instead of their own. The cableco or telco connects you to your ISP through some non-Internet means (cable or DSL to the cableco/telco central office, then ATM or Frame Relay or whatever to the ISP), and then the ISP takes it from there. Your ISP is your gateway to the Internet: no gateway, no Internet.
 
Being a "server" means your computer runs services which other people can use. Of course, at the most basic level, all Internet-aware computers are servers, because Internet is a two-way street, and if you can ping up other computers, other computers can ping you. But normally "server" means you're running application-level services: web, e-mail, ssh, telnet, ftp, etc. that other people can use. And yes, most Linux distributions come with all these services enabled by default, and yes, this is a security risk. (See"Linux Security, or Rather, the Lack Thereof" in last month's News Bytes (http://www.linuxgazette.com/issue58/lg_bytes58.html#general).) You should know which services your computer is running and turn off those you don't specifically want to offer.

The answer you quoted was from 1998, and things were different back then. Cable modems and DSL were not common, at least not in the US. (Although my Canadian friend likes to point out that he had a cable modem in eastern BC a year before we even heard the term "cable modem".) Almost everybody used analog modems with dial-up connections. Dial-up connections are by nature less vulnerable to attack than cable modems are, because the would-be cracker will find that your server:

  1. may be disconnected right now.
  2. may have a dynamic IP, and of course the cracker must know the machine's current IP (or domain name) in order to sabotage it.
To solve problem (1), dial-up users need a 24-hour connection or a "dial on demand" service. Dial on demand means the ISP will telephone your computer whenever a packet comes through for it and the link is down. This requires a special arrangement with the ISP, and your computer must be configured to answer the phone, and you have to make sure that nothing else (answering machine, fax machine or person) picks up the phone first. Most ISPs would not do this, and the few that did charged big bucks for it.
(Note: Linux distributions have the "diald" daemon which does dial-on-demand in the opposite direction: whenever your computer or internal network wants to connect outside, it will dial the ISP for you if the connection is down. But this does not help the problem above, which is incoming traffic.)
For any kind of 24-hour connection (dedicated modem with separate phone line, ISDN, Frame Relay, T-1), you would be paying $140-$1000 per month-- out of reach for most individuals. Those of us who have long desired this are ecstatic that we can now get this service at an affordable rate.
To solve problem (2), you need a static IP (one that never changes) or "dynamic DNS" service. Of course, this affects cable modems as well. With a cable modem, you may have a dynamic IP (which changes every time you plug in the modem, and perhaps every few days as well). This will at least ensure that even if a cracker breaks in, he (or she) won't be back over the long term, because when he tries to come back, he'll find himself on a different computer and he'll have to start from square one determining its configuration. Of course the tradeoff is, if you wish to run a web server or e-mail server and you have a dynamic IP, it'll be mighty inconvenient for the public to know your current IP or domain name.
("Dynamic DNS" means the nameserver is set up to allow its configuration (which IP your domain name points to) to be changed frequently and conveniently, either by you typing a new number on a web page or by a script on your computer which sends in the new information.)
So yes, people from the outside can crack your computer even if you haven't made special arrangements with your ISP. Linux Gazette has published several articles this year on securing your home network, and these are all recommended reading.

More 2¢ Tips!


Send Linux Tips and Tricks to gazette@ssc.com


Identify services

follow up to issue58/tag/7.html

Mon, 2 Oct 2000 13:38:30 -0400 (EDT)
From: Mathew A Johnston (johnston@megaepic.com)
I'm not sure that I'm sending this to the right address, but...
I find the most useful tool in the attempt to identify services and their parents to be netstat -ple (process, listening, extended info). This provides a table of listening sockets, the processes that own them, and the uid of the process.
If you're making an emergency read only anti-hack disk, put this on it - you cant trust your installed version always.
Mathew Johnston


Checking Passwords in Custom Apps

Sun, 08 Oct 2000 14:14:04 -0700

Hi,

I need to authenticate a user entering a linux os.

I get from the user a username and a password and need to cross it with the /etc/passwd file.

How do I cross the password with the existing one ? (How can I enctypr the password the user entered ?)

Thanks you,
Gil.

I presume what you're trying to ask is something like: "how can my custom script or application determine if a user has given me the password as would be checked by the system?"
The short answer is that your program should use the getpwent(3) and the crypt(3) library calls.
That is a bit of an oversimplification but here's a bit more detail:
Technically you don't "encrypt" the password, you "hash" it and compare your result with the one that's stored in the /etc/passwd, or the /etc/shadow file, or the one that's returned by NIS, etc.
Here is a link to a simple example I found using Google:
http://oloon.student.utwente.nl/~remco/linux-c-programming/9902/msg00017.html
Glyn Clements is one of the most active and knowlegeable contributors to the linux-admin mailing list.
-- JimD


Printing under Linux

Tue, 10 Oct 2000 09:52:20 -0600
From: Jim (JBRANDV@pnm.com)
In your answer to Gaurav you didn't mention TurboPrint. I found the current version has full support for my Epson Photo 700 and most other Epson printers as well. I now have full photo quality printing under Linux. Support for other printers is growing daily so keep checking back if you don't see it the first time. The URL: http://www.turboprint.de
It is beta (0.61) but seems to work great!
Jim


subnet needed

Tue, 10 Oct 2000 19:45:00 -0700 (PDT)
From: Buddy Newton (blu3plat3@yahoo.com)

--- "Arne C. Johnson" wrote: what does this subnet does this network give you

192.168.160.0 /20

Thanks

192.168.160.1-192.168.175.254 4094 hosts
that's a 255.255.240.0 mask
The trick is that each "255" octet is 8 bits. The number on the end of the slash is a number of bits set on. So, 8 + 8 = 16, still not enough, need 4 bits 4 more! See it's really just that many 1's counted from the left... which is to say from the top of the values, so within the third octet, that's 16 + 32 + 64 + 128 = 240. The netmask 1's allow bits to "leak through" and establish the network address... the 0's block or "mask" all the local addresses off. For a lot more detail what this is all about, see Jim Dennis' fairly verbose "routing and subnetting 101" in issue 36. -- Heather


companies

Sun, 15 Oct 2000 11:46:11 EDT

what are some of the companies that makes "LINUX" operating systems?

There are so many, it is hard to count them... and groups which are not companies also produce their own setups of Linux, so we call them "distributions".
Linux Weekly News (http://www.lwn.net) has a section dedicated to following this question, and a sidebar that has links to a long list of distro's - so you should check it out.
-- Heather


Keyboard keys/buttons...

Tue, 17 Oct 2000 09:04:19 -0700
anthony buckland wrote:

I live in Japan and would like to replace the Japanese keyboard (buttons) of my NEC laptop with the English keyboard (buttons)--if you know what I mean? Now, do you happen to know of a supplier(s) in the US or elsewhere that I could possibly contact for those English buttons? I thank you, again.

I would contact NEC support via one of the links at http://www.nec.com/support/index.html and see if they can help. Perhaps they can send you the keytops or at least tell you who manufactures them.
-- Mike


How to read Cisco Documentation CDROM on Linux platform

Tue, 17 Oct 2000 08:41:39 -0700
From: Andrea Montefusco <andrew@montefusco.com>
Are you interested to such micro-howto ?
Regards
Andrea Montefusco

How to read Cisco Documentation CDROM on Linux platform

  1. mount the cisco cdrom ( mount /dev/cdrom /mnt/cdrom )
  2. start httpd apache daemon.
  3. define a virtual server by mean of a listen on a port of your choice id:
    Listen 127.0.0.1:8080

    You must include a Listen for your virtual servers in your virtual host configuration (specialized file or httpd.conf file); add the following instructions:

    <Virtualhost localhost:8080>
    Options Indexes FollowSymlinks
    DocumentRoot /mnt/cdrom
    AddHandler gunzip .htm
    Action gunzip /cgi-bin/CiscoDoc
    </Virtualhost>
    
  4. put in your CGI directory /home/httpd/cgi-bin the following file: (text version)
    #!/bin/sh
    #
    #
    echo Content-type:text/html
    echo
    
    
    FULL_PATH="$DOCUMENT_ROOT""$PATH_INFO"
    
    ROOT_FILE="$DOCUMENT_ROOT""/home/home.htm"
    
    if [ -f "$ROOT_FILE" ]; then
    
       bunzip2 -t "$FULL_PATH"  1> /dev/null 2>&1
    
       rc2=$?
    
       if [ "$rc2" = "0" ]; then
          bunzip2 --stdout "$FULL_PATH"
       else
          gunzip -l "$FULL_PATH"   1> /dev/null 2>&1
          rc=$?
    
          if [ "$rc" = "0" ]; then
          	gunzip --stdout "$FULL_PATH"
          else
          	cat "$FULL_PATH"
          fi
       fi
    
    else
       echo "<HTML><BODY>"
       echo "<H1>Root file (" $ROOT_FILE ") not present</H1>"
       echo "<H2>Did you forget to insert the CD-ROM ? </H2>"
       echo "</BODY></HTML>"
    fi
    
    #echo "<HTML><BODY>"
    echo "<HR>"
    echo "<H4>"
    echo "Cisco Documentation CDROM Reader ver. 0.3 -- A.Montefusco A.Passariello"
    echo "</H4>"
    #echo "</BODY></HTML>"  
    
    
  5. Make it executable with the command
       chmod -c 755 CiscoDoc 
    
  6. Now you can access Cisco Manuals using URL: "http://localhost:8080/home/home.htm"


A note conserning the article "Making a Simple Linux Network Including

Mon, 11 Sep 2000 12:05:12 +0000
From: Samuli Seppänen (samuli.seppanen@kolumbus.fi)
Instead of doing an "echo 7 > /proc/parport/0/irq" you can put following line to modules.conf:
options parport_pc io=0x378, irq=7
where io / irq should be replaced if necessary. With this you should be able to insmod plip without any problems.


Wanted: articles about non-LILO boot loaders. -- Heather

Wed, 27 Sep 2000 22:50:54 -0400
From: "Hoyt" (hduff2@att.net)
Neil Koozer of Roseburg, Oregon has created nuni, a boot loader for a Linux system that uses the ext2 file system and IDE drives.
nuni handles various ext2 block sizes and handles both small and large kernels.
www.linuxforum.org/plug/articles/nuni.html
Hoyt Duff


Grep

Sat, 30 Sep 2000 17:36:39 +0530
From: Rakesh Tiwari (rakesh_tiwari@jasubhai.com)
From what i understand, u only want to know users begining with "potatoe" in the "Login" coloumn.
$finger | cut -f1 -d" " | grep potatoe
Regards
Rakesh Tiwari
If you obey all the rules, you miss all the fun.


2 cent tips - re: Reflections Replacement

Mon, 16 Oct 2000 23:53:00 -0500
From: Rick Cook (rcook@hex.net)
Toshiro,

Hi! I would like to access my graphics Linux desktop from my Windows box; I was able to do it using a software called Reflection (I guess you know it), is there any (free) software with the same capabilities of Reflection?

You could also try VNC. If you run a VNC Server on your Linux Machine and a VNC client on your Windows box, you can get a graphical Login (xdm, gdm, kdm) on your Windows Box. See:
http://www.uk.research.att.com/vnc
The Linux version comes included with several distributions, including Debian.
Good Luck,
Rick Cook


Modems

Tue, 3 Oct 2000 21:12:17 -0400
From: "Barry" (BarryJJ@ATTGlobal.Net)
I bought the ActionTec Internal Call Waiting PCI - not to be confused with the "56K PCI Pro" which is labelled as a WinModem - 'coz it was the only one that mentioned Linux support on the box and was PCI. From this I assumed it to be a "real" modem.
I haven't actually tried it under Linux yet, but I was impressed to find the instruction book had more pages (10) devoted to getting it to work under Linux than for the Windows variants. And there is no mention of having to install special software ... at least none that I can find.
There are separate headings for PPP, GNOME Dialer Applet, KPPP, linuxconf Dialer, and even a paragraph on minicom. It cites the instructions as having been verified under Red Hat 5.2 and 6.0, although I found references to my current distribution of choice - SuSE - on their web pages.
I was impressed! Their web site is www.actiontec.com
HTH ... BJ


authentication pam and kde

Mon, 23 Oct 2000 08:25:49 -0700
From: Breen Mullins <bmullins@asante.com>
At 11:42 AM +0200 10/23/00, Dean Buhrmann wrote:

Hello,

Kapil Sharma gave in the Oktober issue a few security tips. One is blocking users from doing su and only allowing the users from group wheel to do so. [snip]

It works well in virtual terminals. In KDE however it is now impossible to su. Authentication rejects now always the root password.

Hi Dean -
This also fails in Gnome if I use the default terminal. Try opening a vanilla xterm - I can su if I do it there.
Breen


Printing in Netscape

Wed, 25 Oct 2000 12:15:56 -0700
In issue 57 (http://www.linuxgazette.com/issue57/lg_tips57.html), Matthew Willis suggested using psnup to print two pages per sheet in Netscape.
psnup -c -n 2 | lpr -pprinter
I had to change this slightly to get it to work for me. I use:
psnup -c -n 2 -pletter | lpr
The "-pletter" option says you're using letter-sized paper (the normal page size in the US). Otherwise it will default to the European A4 size. If you print A4-formatted pages on letter paper, the rightmost part of the content runs off the edge of the page.
The "-pprinter" option didn't work for me. I assume Matthew was trying to select the printer device. According to my lpr manpage, the option would be "-P printer". "-p" filters the input through pr, which isn't what we want. (The pr command formats text files.)
-- Mike Orr

"Linux Gazette...making Linux just a little more fun!"


HAL 91 - a minimalistic Linux distribution

By Matthias Arndt


Table of Contents

Introduction

Recently, I started studiying computer sciences in conjuction with economics at the Technical University of Clausthal.

I met another Linux enthusiast, Christian Perle. He told me about one of his ongoing projects. And that one was maintaining the HAL91 Linux distribution..

This article should be a short description of what is HAL91 and where could it be used for.
Please contact the maintainer of HAL91, Christian Perle, for further information.

I just want to tell you about its existence...

What is HAL91?

In short, a quote of the HAL91 boot message:

_/  _/ _____/ _/        _____/  __/ http://home.sol.no/~okolaas/linux/hal91/
_/  _/ _/  _/ _/        _/  _/  __/            -=[ Floppy Linux ]=-
_____/ _____/ _/   ___/ _____/   _/                 ver 0.2.0
_/  _/ _/  _/ _/            _/   _/             okolaas@online.no
_/  _/ _/  _/ _____/        _/   _/          (c) 1998 0yvind Kolaas

HAL91 is a minimalistic Linux distribution that fits on one floppy disk (1.44MB).

Special about HAL91 is that it comes along with a whole set of useful utilities for maintaining and troubleshoot