msgbartop
All that documentation I couldn’t find is now findable
msgbarbottom

02 Oct 08 Bands to see in London

Pink Fraud
Sat Oct 11
Standard, 1 Blackhorse Lane, E17 6DS, UK
020 8527 1966
Times: 8pm
Price: £9
Tube: Blackhorse Rd

AndyC & Dillinja
Fri 17th Oct 08
10:00pm - 6:00am
£13 (£10 students & fabricfirst)
£6 after 3am
@Fabric

Underworld
Fri Oct 31st
Carling Academy Brixton London
Times: 8PM
Price: £ 69.42

18 Aug 08 hrmmmm, solution to follow

Exception java.lang.UnsatisfiedLinkError: /tmp/OraInstall2008-08-18_11-30-06PM/jre/1.4.2/lib/i386/libawt.so: libXp.so.6: cannot open shared object file: No such file or directory occurred..
java.lang.UnsatisfiedLinkError: /tmp/OraInstall2008-08-18_11-30-06PM/jre/1.4.2/lib/i386/libawt.so: libXp.so.6: cannot open shared object file: No such file or directory

21 Jul 08 Disable ’su’ for one user (cont.)

There is another way to do this, its a little sexier in my opinion :)
It involves using Linux ACL’s, can you feel the sexy?
Here is all you have todo:

Enable ACL’s on the partition:

# vi /etc/fstab
/dev/sda3 / ext3 defaults,acl 1 1

Remount the partition:
# mount -o remount /

Disable ’su’ for the selected user:
# setfacl -m u:user1:000 /bin/su

Check your work:
# getfacl /bin/su
# file: bin/su
# owner: root
# group: root
user::rwx
user:user1:---
group::r-x
mask::r-x
other::r-x

21 Jul 08 Disable ’su’ for one user

Ever need to disable ’su’ for a single user? Ever want to do this and skip the “wheel” group? Here is a good how-to:

We need to first add the group we will be using, since we will not use ‘wheel’

# groupadd rootmembers

We will now need to add users to the group, note that this will make ‘rootmembers’ the secondary group for the user

# usermod -G rootmembers user1
# usermod -G rootmembers user2 

Pam Config

Since /etc/pam.d/su is configured to only allow access for all or only ‘wheel’ we need to tell it to look at a different file:

<.../etc/pam.d/su...>
auth sufficient /lib/security/$ISA/pam_stack.so service=su-root-members
auth required /lib/security/$ISA/pam_deny.so 
<...end of file...>

The first line tells PAM to look for the additional file, the second line tells PAM to deny the request if the requirements of the additional file are not met.

Create a file in /etc/pam.d called “su-root-members” and add these lines:

<.../etc/pam.d/su-root-members...>
auth required /lib/security/pam_wheel.so use_uid group=rootmembers
auth required /lib/security/pam_listfile.so item=user /
sense=allow onerr=fail file=/etc/security/su-rootmembers-access
<…end of file…>

 

The ’su-root-members’ puts in place two road blocks, 1) the user must be in the ‘rootmembers’ group, and 2) the user must be in the
/etc/security/su-rootmembers-access file. 
Create the /etc/security/su-rootmembers-access and add your users:

 

root
user1
user2


 

*IMPORTANT*
On a RHEL3 server I missed the “root” user in the /etc/security/su-rootmembers-access and “su” failed for ALL users. However on a CentOS5 server I just had my username listed and everything worked just fine. The only major difference between the two were the OS version and the version of pam installed.

 

30 May 08 RHEL3 + SNMPd + Localhost

this past week I was asked to make SNMPd listen to the loopback IP. I never had to do this and it turned out to be a pain in the ass. When I figured out the answer I kicked myself in the face. To help save other peoples time here is how to do it:

Change /etc/init.d/snmpd from:

OPTIONS=”-s -l /dev/null -P /var/run/snmpd -a”

TO:

OPTIONS=”-s -l /dev/null -P /var/run/snmpd -a 127.0.0.1″

Hope this helps :)

Tags:

25 Apr 08 Ubuntu 8.04 (64bit) + Skype

sudo apt-get install ia32-libs lib32asound2; wget -O skype-install.deb http://www.skype.com/go/getskype-linux-ubuntu; sudo dpkg -i –force-all skype-install.deb;

Vidio should work with it, however haven’t tested yet.

25 Apr 08 Ubuntu 8.04 + HP Pavilion DV9000

I’m not much of Ubuntu user, I tend to lean toward Fedora. Just for shits and grins I installed 8.04 this morning on my HP Pavilion DV 9000 laptop. I’m SOLD! I’m staying on Ubuntu. Right out of the box a number of items just work.

Working:
Headphone jack - Don’t have to recompile ALSA any more (thank god!!!)
Dual monitor - On Ubuntu 7.10 dual monitor was a pain in the ASS! on 8.04 I just uploaded my Fedora xort.conf and it worked right the first time.

Not working:
Wireless: Haven’t had time to mess with it

Not avail:
I can’t find my display settings, I would really like to make changes with out having to manually edit my xorg.conf. Oh well, its good enough for me.

NOTE: I’m running Ubuntu 8.04 amd_64

——
Update 10:50 CST - Firefox 3 Beta sucks, the “manage bookmarks” is a real pain in the ass to work with and the incorrect certificate window is stupid. I removed Firefox3 and put Firefox2 on.

<rant>
I don’t understand how you release an OS with a beta browser? Who ever made that decision is a tool and should not have that authority.
Bad decission
</rant>

13 Nov 07 RHEL# + USB

When connecting a USB drive to a RHAS3 server I saw this in the ‘dmesg’ output:

hub.c: new USB device 00:1d.7-6, assigned address 3
usb.c: USB device 3 (vend/prod 0x1058/0x900) is not claimed by any active driver.

To fix do:

root@vm:~$ modprobe usb-storage
root@vm:~$ dmesg
[...]
Initializing USB Mass Storage driver…
usb.c: registered new driver usb-storage
scsi3 : SCSI emulation for USB Mass Storage devices
Vendor: WD Model: 5000KS External Rev: 101a
Type: Direct-Access ANSI SCSI revision: 02
Attached scsi disk sdal at scsi3, channel 0, id 0, lun 0
SCSI device sdal: 976773168 512-byte hdwr sectors (500108 MB)
sdal: sdal1
WARNING: USB Mass Storage data integrity not assured
USB Mass Storage device found at 3
USB Mass Storage support registered.

01 Nov 07 Debian + VNC

My workstation at the office is windows (don’t ask), and I have a mac at the house. I haven’t configured rdesktop for the office and truthfully don’t really want to waste time learning it. So in order to work on my VMs I configured VNC on my Debian server. Its very simple!


mezcal:~# apt-get install vncserver -y
mezcal:~# vncserver -geometry 800x600 -depth 24

The first time I ran VNC I received this error:

could not open default font 'fixed'

I was able fix this by installing xfonts-base

mezcal:~# apt-get install xfonts-base

Now I’m able to VNC in and use X to add/modify VM’s.

To kill use: vncserver -kill :1

If anyone knows of a better way to use VMware on a Mac (ppc) please let me know.

23 Oct 07 Fun with Google Translate

Enter “sarkozy sarkozy sarkozy” into Google Translate, select French to English, click translate.

Result: Blair defends Bush

Interesting.