Borked Toe

December 22nd, 2008

Long time no update

November 23rd, 2008

Damn, its been some time since I’ve updated the old blog. I’ve been to London and New York in that time and haven’t had one thing to write about. Well I’ve actually had a lot to write about just been kind of lazy.

I’ll update the blog some time soon.

m.

Uncategorized

Bands to see in London

October 2nd, 2008

Pink Fraud
Sat Oct 11
Standard, 1 Blackhorse Lane, E17 6DS, UK
020 8527 1966
Times: 8pm
Price: £9
Tube: Blackhorse Rd

AndyC & Dillinja
Fri 17th Oct 08
10:00pm - 6:00am
£13 (£10 students & fabricfirst)
£6 after 3am
@Fabric

Underworld
Fri Oct 31st
Carling Academy Brixton London
Times: 8PM
Price: £ 69.42

Uncategorized

hrmmmm, solution to follow

August 18th, 2008

Exception java.lang.UnsatisfiedLinkError: /tmp/OraInstall2008-08-18_11-30-06PM/jre/1.4.2/lib/i386/libawt.so: libXp.so.6: cannot open shared object file: No such file or directory occurred..
java.lang.UnsatisfiedLinkError: /tmp/OraInstall2008-08-18_11-30-06PM/jre/1.4.2/lib/i386/libawt.so: libXp.so.6: cannot open shared object file: No such file or directory

Uncategorized

Disable ’su’ for one user (cont.)

July 21st, 2008

There is another way to do this, its a little sexier in my opinion :)
It involves using Linux ACL’s, can you feel the sexy?
Here is all you have todo:

Enable ACL’s on the partition:

# vi /etc/fstab
/dev/sda3 / ext3 defaults,acl 1 1

Remount the partition:
# mount -o remount /

Disable ’su’ for the selected user:
# setfacl -m u:user1:000 /bin/su

Check your work:
# getfacl /bin/su
# file: bin/su
# owner: root
# group: root
user::rwx
user:user1:---
group::r-x
mask::r-x
other::r-x

system::linux::rhel3, system::linux::rhel4

Disable ’su’ for one user

July 21st, 2008

Ever need to disable ’su’ for a single user? Ever want to do this and skip the “wheel” group? Here is a good how-to:

We need to first add the group we will be using, since we will not use ‘wheel’

# groupadd rootmembers

We will now need to add users to the group, note that this will make ‘rootmembers’ the secondary group for the user

# usermod -G rootmembers user1
# usermod -G rootmembers user2 

Pam Config

Since /etc/pam.d/su is configured to only allow access for all or only ‘wheel’ we need to tell it to look at a different file:

<.../etc/pam.d/su...>
auth sufficient /lib/security/$ISA/pam_stack.so service=su-root-members
auth required /lib/security/$ISA/pam_deny.so 
<...end of file...>

The first line tells PAM to look for the additional file, the second line tells PAM to deny the request if the requirements of the additional file are not met.

Create a file in /etc/pam.d called “su-root-members” and add these lines:

<.../etc/pam.d/su-root-members...>
auth required /lib/security/pam_wheel.so use_uid group=rootmembers
auth required /lib/security/pam_listfile.so item=user /
sense=allow onerr=fail file=/etc/security/su-rootmembers-access
<…end of file…>

 

The ’su-root-members’ puts in place two road blocks, 1) the user must be in the ‘rootmembers’ group, and 2) the user must be in the
/etc/security/su-rootmembers-access file. 
Create the /etc/security/su-rootmembers-access and add your users:

 

root
user1
user2


 

*IMPORTANT*
On a RHEL3 server I missed the “root” user in the /etc/security/su-rootmembers-access and “su” failed for ALL users. However on a CentOS5 server I just had my username listed and everything worked just fine. The only major difference between the two were the OS version and the version of pam installed.

 

system::linux::rhel3, system::linux::rhel4

RHEL3 + SNMPd + Localhost

May 30th, 2008

this past week I was asked to make SNMPd listen to the loopback IP. I never had to do this and it turned out to be a pain in the ass. When I figured out the answer I kicked myself in the face. To help save other peoples time here is how to do it:

Change /etc/init.d/snmpd from:

OPTIONS=”-s -l /dev/null -P /var/run/snmpd -a”

TO:

OPTIONS=”-s -l /dev/null -P /var/run/snmpd -a 127.0.0.1″

Hope this helps :)

Uncategorized

Ubuntu 8.04 (64bit) + Skype

April 25th, 2008

sudo apt-get install ia32-libs lib32asound2; wget -O skype-install.deb http://www.skype.com/go/getskype-linux-ubuntu; sudo dpkg -i –force-all skype-install.deb;

Vidio should work with it, however haven’t tested yet.

Uncategorized

Ubuntu 8.04 + HP Pavilion DV9000

April 25th, 2008

I’m not much of Ubuntu user, I tend to lean toward Fedora. Just for shits and grins I installed 8.04 this morning on my HP Pavilion DV 9000 laptop. I’m SOLD! I’m staying on Ubuntu. Right out of the box a number of items just work.

Working:
Headphone jack - Don’t have to recompile ALSA any more (thank god!!!)
Dual monitor - On Ubuntu 7.10 dual monitor was a pain in the ASS! on 8.04 I just uploaded my Fedora xort.conf and it worked right the first time.

Not working:
Wireless: Haven’t had time to mess with it

Not avail:
I can’t find my display settings, I would really like to make changes with out having to manually edit my xorg.conf. Oh well, its good enough for me.

NOTE: I’m running Ubuntu 8.04 amd_64

——
Update 10:50 CST - Firefox 3 Beta sucks, the “manage bookmarks” is a real pain in the ass to work with and the incorrect certificate window is stupid. I removed Firefox3 and put Firefox2 on.

<rant>
I don’t understand how you release an OS with a beta browser? Who ever made that decision is a tool and should not have that authority.
Bad decission
</rant>

Uncategorized

RHEL# + USB

November 13th, 2007

When connecting a USB drive to a RHAS3 server I saw this in the ‘dmesg’ output:

hub.c: new USB device 00:1d.7-6, assigned address 3
usb.c: USB device 3 (vend/prod 0x1058/0x900) is not claimed by any active driver.

To fix do:

root@vm:~$ modprobe usb-storage
root@vm:~$ dmesg
[...]
Initializing USB Mass Storage driver…
usb.c: registered new driver usb-storage
scsi3 : SCSI emulation for USB Mass Storage devices
Vendor: WD Model: 5000KS External Rev: 101a
Type: Direct-Access ANSI SCSI revision: 02
Attached scsi disk sdal at scsi3, channel 0, id 0, lun 0
SCSI device sdal: 976773168 512-byte hdwr sectors (500108 MB)
sdal: sdal1
WARNING: USB Mass Storage data integrity not assured
USB Mass Storage device found at 3
USB Mass Storage support registered.

system::linux::rhel3, system::linux::rhel4