old-www/LDP/LG/issue61/lg_mail61.html

484 lines
18 KiB
HTML

<!--startcut ======================================================= -->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<html>
<head>
<META NAME="generator" CONTENT="lgazmail v1.3E.i">
<TITLE>Linux Gazette Mailbag LG #61</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"
LINK="#3366FF" VLINK="#A000A0">
<!-- ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: -->
<P>
<CENTER>
<!-- *** BEGIN navbar *** -->
<IMG ALT="" SRC="../gx/navbar/left.jpg" WIDTH="14" HEIGHT="45" BORDER="0" ALIGN="bottom"><A HREF="index.html"><IMG ALT="[ Table of Contents ]" SRC="../gx/navbar/toc.jpg" WIDTH="220" HEIGHT="45" BORDER="0" ALIGN="bottom" ></A><A HREF="../index.html"><IMG ALT="[ Front Page ]" SRC="../gx/navbar/frontpage.jpg" WIDTH="137" HEIGHT="45" BORDER="0" ALIGN="bottom"></A><A HREF="../faq/index.html"><IMG ALT="[ FAQ ]" SRC="./../gx/navbar/faq.jpg"WIDTH="62" HEIGHT="45" BORDER="0" ALIGN="bottom"></A><A HREF="lg_bytes61.html"><IMG ALT="[ Next ]" SRC="../gx/navbar/next.jpg" WIDTH="15" HEIGHT="45" BORDER="0" ALIGN="bottom" ></A><IMG ALT="" SRC="../gx/navbar/right.jpg" WIDTH="15" HEIGHT="45" ALIGN="bottom">
<!-- *** END navbar *** -->
</CENTER>
</p>
<!-- endcut ======================================================= -->
<center>
<table width="100%" cellpadding=7><tr><td>
<H2><a NAME="mail"><IMG SRC="../gx/mailbox.gif" ALIGN=MIDDLE ALT=" ">
The Mailbag!</a> </H2>
</td><td>
<H3>Contents:</H3>
<ul>
<li><a HREF="#help">Help Wanted -- Article Ideas</a>
<li><a HREF="#gen">General Mail</a>
<li><a HREF="#gaz">Gazette Matters</a>
</ul>
</td></tr></table>
Write the <i>Linux Gazette</i> at
<A HREF="mailto:gazette@ssc.com">gazette@ssc.com</A>. Send technical
questions to the Answer Gang at
<A HREF="mailto:linux-questions-only@ssc.com">linux-questions-only@ssc.com</A>.
</center>
<a name="help"></a>
<p><hr><p>
<!-- =================================================================== -->
<center><H3><font color="maroon">Help Wanted -- Article Ideas</font></H3></center>
<P>These questions have been selected among the hundreds the <I>Gazette</I>
recieves each month. Article submissions on these topics will be eagerly
accepted at <a href="mailto:gazette@ssc.com">gazette@ssc.com</a>, and posted
in the next issue.
<P>
Answers to these questions should be sent directly to the e-mail address of
the inquirer with or without a copy to gazette@ssc.com. Answers that are
copied to <I>LG</I> will be printed in the next issue -- in the Tips column
if simple, the Answer Gang if more complex and detailed.
<P> <STRONG>Before asking a question, please check the
<A HREF=../faq/index.html><I>Linux Gazette</I> FAQ</A> to see if it has been
answered there. The AnswerGuy
"<a href="../tag/kb.html">past answers index</a>" may also be helpful
(if a bit dusty).
</STRONG>
<P> <HR> <P>
<!--====================================================================-->
<UL>
<!-- index_text begins -->
<li><A HREF="#wanted/1"
><strong>Internet Cafe Management Software</strong></a>
<li><A HREF="#wanted/4"
><strong>geforce card</strong></a>
<li><A HREF="#wanted/5"
><strong>Hiding samba shares across multiple networks</strong></a>
<!-- index_text ends -->
</UL>
<!-- .~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~. -->
<P> <A NAME="wanted/1"><HR WIDTH="75%" ALIGN="center"></A> <P>
<H3><IMG ALIGN=BOTTOM ALT="" SRC="../gx/envelope.gif">
<FONT COLOR="navy">Internet Cafe Management Software</FONT></H3>
Wed, 27 Dec 2000 08:39:31 -0600 (CST)
<BR>From: Alan Pater &lt;<A HREF="mailto:linux-questions-only@ssc.com?cc:alan@celasmaya.edu.gt"
>alan@celasmaya.edu.gt</A>&gt;
<P>
Hi Folks.
</P>
<P>
I've taken a quick look around the web for Linux based Internet
Cafe Software, with no luck. There's a few windows based packages
around, but that will just not do. What I'm looking for is
something which can record when people login and logoff and
calculate how much they should pay. Have you seen anything like
that? Even a set of instructions on how to do it with a set of
scripts would be cool.
</P>
<P>
Alan Pater
</P>
<P>
www.celasmaya.edu.gt
</P>
<p>Can any of our fair readers find some good internet cafe or "walk in ISP"
software? We can only offer the following leads: </p>
<em>
<p>Try looking around including the keyword Coffeenet. That was a Linux
based cafe in the S.F. area; he closed shop when he had his lease end,
but it was successful before that, the building owner just didn't want
to renew. I'm pretty sure he open sourced the distro he created, but
note, it depends on having a serious NFS server in the back.
</P>
<P>
I know the <A HREF="http://www.valinux.com/">VA Linux</A> "mail garden" machines and his, had a similar feature
of cleaning up after anything local, so the machines never have any
interesting leftovers from previous clients. xdm or gdm have control
files for stuff to do before and after a session, so it should be possible
to add accounting functions to logging in and out, and to add cleanup
to logging out, quite easily. Keeping people from accessing text mode
is a little more work, but I don't think Coffeenet was preventing that.
</P>
<P>
Neither of these actually kick someone out when their time is up, so you
still have some work to do if your shop is too big to merely keep an eye
on people and rely on a popup "you've been on for awhile" note.
<br>-- Heather
</P>
</em>
<P>
I don't know of any scripts, but "last" gives you login/logout times
by user. Should be possible to dump the output into a database
via some pretty simple awk, perl, python, or even sh scripts.
</P>
<P>
Last reads wtmp, so watch out for when your wtmp gets rotated.
Most log rotation scripts will move wtmp to a backup, for example
wtmp.1, and "last" will take a filename as a parameter.
</P>
<P>
Sample output from "last":
</P>
<P><BLOCKQuote><PRE>
[ ... ]
dlong ttyp3 passenger.ssc.co Fri Dec 1 09:21 <TT>-</TT> 09:22 (00:00)
carrie ttyp5 catnip.ssc.com Fri Dec 1 08:48 <TT>-</TT> 17:04 (08:15)
fax_inc ttyS0 +39 45 877 Fri Dec 1 08:43 <TT>-</TT> 08:44 (00:01)
annie ttyp4 passenger.ssc.co Fri Dec 1 08:42 <TT>-</TT> 14:48 (06:06)
dlong ttyp3 passenger.ssc.co Fri Dec 1 08:20 <TT>-</TT> 09:03 (00:42)
[ ... ]
</PRE></BLOCKQuote></P>
<P>
See "man last".
<br>-- Dan Wilder
</P>
<!-- end 3 -->
<!-- .~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~. -->
<P> <A NAME="wanted/4"><HR WIDTH="75%" ALIGN="center"></A> <P>
<H3><IMG ALIGN=BOTTOM ALT="" SRC="../gx/envelope.gif">
<FONT COLOR="navy">geforce card</FONT></H3>
Mon, 25 Dec 2000 12:27:50 +1100
<BR>From: "Ron Nicholls" &lt;<A HREF="mailto:linux-questions-only@ssc.com?cc:nykysle@bigpond.com"
>nykysle@bigpond.com</A>&gt;
<P>
I have RH 7.0 which has XFree86 4.0.1 which does not
support Geforce 2 chips yet.
Is there a patch or update or howto to install the necessary
support.
</P>
<P>
Regards
RonN
</P>
<em><p>Any developer types want to help him out here? Xfree86 4.0.2
came out, but it still has no special support for this card, so unless
it works in VESA mode, he's out of luck for now...</p>
<p>And, we'll galdly take articles on adding support for new cards to X
version 4! -- Heather</p>
</em>
<!-- .~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~. -->
<P> <A NAME="wanted/5"><HR WIDTH="75%" ALIGN="center"></A> <P>
<H3><IMG ALIGN=BOTTOM ALT="" SRC="../gx/envelope.gif">
<FONT COLOR="navy">Hiding samba shares across multiple networks</FONT></H3>
Fri, 15 Dec 2000 10:07:36 -0800 (PST)
<BR>From: Faber Fedor &lt;<A HREF="mailto:linux-questions-only@ssc.com?cc:faberfedor@yahoo.com"
>faberfedor@yahoo.com</A>&gt;
<P>
Hi guys (and Heather
<IMG SRC="../gx/dennis/smily.gif" ALT=":-)"
height="24" width="20" align="middle">!
</P>
<P>
I've got an interesting little problem with Samba and hiding shares when
multiple networks are involved. I'm hoping one of you can help out, or maybe
one of the Gentle Readers has already done this.
</P>
<P>
I have one Samba box with two network interfaces (on one NIC using virtual
lans), say 192.168.1.10 and 192.168.2.10. Two companies sit on each network and
can't learn about the other. Let's call them "Acme, Limited" (192.168.1.0/24)
and "Coyotes-R-Us" (192.168.2.0/24). They, of course, use Another Operating
System.
</P>
<P>
What I want to do is to create shares on the Samba box for Acme and Coyote to
store their files. That's easy enough, the problem is in restricting what they
see.
</P>
<P>
If I create Acme and Coyote as users and share the home directories via the
[homes] default share, Acme will not see Coyote's share and vice versa. This
is good. However, if the CEO of "Coyotes-R-Us", Mr. Wiley, logs onto the Acme
network, he will see the Coyote [home] share appear on the Acme network. This
is NOT a Good Thing.
</P>
<P>
(I tested this by placing a Windows box on Acme's network via a port on a Cisco
switch that was set up to handle only Acme's vlan.)
</P>
<P>
If, OTOH, I set them up as separate shares and restrict them via IP addresses a
la "allowed_hosts=", both companies can see the other's share, which is Not A
Good Thing, even though they cannot access the other's share (always a good
thing).
</P>
<P>
I've been hacking at this for several days trying to figure something out, as
well as surfing Google, Deja.com, the samba mailing lists, and any other place
I could think of. You are my Last Great Hope.
<IMG SRC="../gx/dennis/smily.gif" ALT=":-)"
height="24" width="20" align="middle">
</P>
<P>
TIA!
</P>
<P>
=====
Sincerely,
Faber Fedor
</P>
<em><p>It looks like the Answer Gang could stand to be joined by a serious
Samba expert. Anyone care to jump in?</p></em>
<!-- end 5 -->
<P> <hr> <P>
<!-- =================================================================== -->
<a name="gen"></a>
<center><H3><font color="maroon">General Mail</font></H3></center>
<P> <HR> <P>
<!--====================================================================-->
<!-- BEGIN general mail -->
<UL>
<!-- index_text begins -->
<li><A HREF="#mailbag/1"
><strong>Thank you for your telnet logging screen article</strong></a>
<li><A HREF="#mailbag/2"
><strong>LG</strong></a>
<li><A HREF="#mailbag/3"
><strong>install</strong></a>
<li><A HREF="#mailbag/4"
><strong>Security articles</strong></a>
<!-- index_text ends -->
</UL>
<!-- .~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~. -->
<P> <A NAME="mailbag/1"><HR WIDTH="75%" ALIGN="center"></A> <P>
<H3><IMG ALIGN=BOTTOM ALT="" SRC="../gx/envelope.gif">
<FONT COLOR="navy">Thank you for your telnet logging screen article</FONT></H3>
Thu, 21 Dec 2000 17:53:00 -0500
<BR>From: chris dillon &lt;<A HREF="mailto:gazette@ssc.com?cc:thebin@mailandnews.com"
>thebin@mailandnews.com</A>&gt;
<P>
I scoured the net and your article gave me the answer so that might log my
telnet session.
</P>
<P>
Thank you.
</P>
<HR width="10%" align="left"><P><em>
I've been doing a lot of abstract painting lately, extremely abstract. No brush, no
paint, no canvas, I just think about it.
-- Steven Wright
</em></P>
<!-- end 1 -->
<!-- .~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~. -->
<P> <A NAME="mailbag/2"><HR WIDTH="75%" ALIGN="center"></A> <P>
<H3><IMG ALIGN=BOTTOM ALT="" SRC="../gx/envelope.gif">
<FONT COLOR="navy">LG</FONT></H3>
Fri, 1 Dec 2000 18:02:15 +1100
<BR>From: "BanDiDo" &lt;<A HREF="mailto:gazette@ssc.com?cc:bandido@drinkordie.com"
>bandido@drinkordie.com</A>&gt;
<P><STRONG>
LG is awesome, if you charged for it I would subscribe. When I
get some free time one of these I hope to pen a few articles and
such.
</STRONG></P>
<P>
Thanks. Linux Gazette was established as a free zine and we firmly
intend to keep it that way. There are already paid magazines out
there (we publish one of them
<IMG SRC="../gx/dennis/smily.gif" ALT=":)"
height="24" width="20" align="middle">, but LG fills a unique niche. No
other e-zine I know of (Linux or otherwise) is read, not just
through a single point of access, but in large part via mirrors or
off-line (via FTP files, CD-ROMS, etc).
</P>
<P>
Also, because LG's articles are written by our readers, you
(readers) are truly writing your own magazine. I only put things
together and insert a few comments here and there, and occasionally
write an article. If it weren't for our volunteer authors, there
would be no Linux
Gazette. When I first took over editing in June 1999, I used
to wonder every month whether there would be enough articles. But
every month my mailbox magically fills with enough articles not
just for a minimal zine (5-10 technical articles), but for a robust
zine with 15+ articles covering a variety of content (for newbies
and oldbies, technical articles and cartoons). A year ago, we
never predicted there would be cartoons in the Gazette, but the
authors just wrote in and offered them, and it's been a great
addition. It is truly a privilege to work with such a responsive
group of readers, and years from now when I'm retired (hi,
Margie!), I'm sure I will remember fondly what an opportunity it
was.
</P>
<P>
Our biggest thanks go to The Answer Gang, especially Heather and
Jim, who each spend 20+ hours a month <em>unpaid</em> compiling The Answer
Gang, 2-Cent Tips and The Mailbag. This has really made things a
lot easier for me.
</P>
<p><em>Awwww, shux. I do get the occasional consulting lead from this,
though. -- <a href="mailto:star@starshine.org">Heather</a></em></p>
<P>
we look forward to printing some articles with your name on them.
See the Author Info section at
<A HREF="http://www.linuxgazette.com/faq/index.html#author"
>http://www.linuxgazette.com/faq/index.html#author</A>
</P>
<P>
And you other readers who haven't contributed anything yet, get off
your asses and send something in! Write a letter for the Mailbag,
answer a tech-support question, join The Answer Gang, do a
translation for our foreign-language sites, or write an article.
What do <EM>you</EM> wish the Gazette had more of? <em>That's</em> what it needs
from you.
</P>
<P>
--
Mike Orr
</P>
<P><strong>
Would be lovely if you guys established an EFNET irc channel
<IMG SRC="../gx/dennis/smily.gif" ALT=":)"
height="24" width="20" align="middle">
<br> -- BanDiDo
</strong></P>
<!-- end 2 -->
<!-- .~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~. -->
<P> <A NAME="mailbag/3"><HR WIDTH="75%" ALIGN="center"></A> <P>
<H3><IMG ALIGN=BOTTOM ALT="" SRC="../gx/envelope.gif">
<FONT COLOR="navy">install</FONT></H3>
Sun, 10 Dec 2000 11:10:00 -0500
<BR>From: Ben Okopnik &lt;<A HREF="mailto:linux-questions-only@ssc.com"
>The Answer Gang</A>&gt;
<P>
On Sun, Dec 10, 2000 at 07:36:50AM <TT>-0000</TT>, &lt;Name Snipped&gt; wrote:
</P>
<P><BLOCKQuote>
&lt;A querent asked that we not publish his email&gt;
</BLOCKQuote></P>
<P>
If all you meant was not to publish your e-mail <EM>address</EM>, then please
write back with your question and be sure to clarify that. If not, then
consider this:
</P>
<P>
I can't speak for the whole Answer Gang, nor do I set Linux Gazette policy
- but I, for one, have absolutely zero interest in being a free
one-on-one tutor for the general public, although I'm always willing to
help my friends. I enjoy the fact that the effort I expend in answering
these questions goes toward helping everyone in the Linux community: even
those that don't read the LG benefit from the general dispersion of good,
useful Linux knowledge. This is precisely <EM>why</EM> I expend the effort, or is
at least one of my major motivations for doing so.
</P>
<P>
For anyone wanting one-on-one tech support and tutoring, it's "cash on the
barrel" in a "what you get is what you pay for" economy. Cash preferred,
bank checks are OK, major credit cards cheerfully accepted.
</P>
<P>
Ben Okopnik
</P>
<!-- end 3 -->
<!-- .~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~.~~. -->
<P> <A NAME="mailbag/4"><HR WIDTH="75%" ALIGN="center"></A> <P>
<H3><IMG ALIGN=BOTTOM ALT="" SRC="../gx/envelope.gif">
<FONT COLOR="navy">Security articles</FONT></H3>
Thu, 28 Dec 2000 09:54:31 -0800
<BR>linux-questions-only@ssc.com, Kapil Sharma <kapil@linux4biz.net>,<a href="mailto:linux-questions-only@ssc.com?cc:gazette@ssc.com">gazette@ssc.com</a>
<P>
[A guest commentary from our News Bytes editor. I asked him to
summarize the controversy on <A HREF="http://www.slashdot.org/">Slashdot</A> regarding SSH/SSL vulnerabilities,
and to assess whether we need an article on it. -Mike]
</P>
<P>
Date: Thu, 28 Dec 2000 16:55:56 +0000
Subject: Re: Late News Bytes additions
<br>From: Michael Conry <A HREF="mailto:michael.conry@softhome.net"
>michael.conry@softhome.net</A>
</P>
<P>
Hi Mike,
please find attached the
&lt;A HREF="lg_bytes61.html"&gt;news bytes 61 file&lt;/A&gt;.
I did go through the SSH issues, and summarised them briefly. I kind of
skirted around the SSL because it seemed less clear cut, and very much an
issue of implementation and protecting users from themselves. Most
discussion in the links focussed on SSH in any case.
</P>
<P>
I would recommend, not an article on Holes in SSH, but rather an article on
security in general. Lots of contradictory messages on Slashdot indicate
that people still don't really understand what is going on or how exactly to
administer a public key system.
</P>
<P>
The issues are not new, but are inherent in public key systems.
pgp,gnupg is the same (how can i be sure the key i think is yours is really
yours?). The biggest issue is probably users (lusers) ignoring warning
messages.
</P>
<P>
The new dsniff software is probably worth commenting on also. I included a
link in my short discussion, but have not studied it. What could be very
interesting would be for an article to highlight how to use tools like this
to strengthen your system/network by scrutinising it and probing it. Focus
tends to be on how these tools allow malicious people to break other
people's systems.
</P>
<P>
bye for now
<br>michael
</P>
<BLOCKQUOTE><EM>
[There were several other messages this month, but it's 10:45pm on New
Year's Eve, and I want to publish </EM>LG<EM> and get to the club by
12. The letters will be printed next month. -Mike.]
</EM></BLOCKQUOTE>
<!-- end 4 -->
<!--startcut ======================================================= -->
<P> <hr> </p>
<!-- *** BEGIN copyright *** -->
<H5 align="center">This page edited and maintained by the Editors
of <I>Linux Gazette</I>
<a href="http://www.linuxgazette.com/copying.html"
>Copyright &copy;</a> 2001
<BR>Published in issue 61 of <I>Linux Gazette</I> January 2001</H5>
<H6 ALIGN="center">HTML script maintained by
<A HREF="mailto:star@starshine.org">Heather Stern</a> of
Starshine Technical Services,
<A HREF="http://www.starshine.org/">http://www.starshine.org/</A>
</H6>
<!-- *** END copyright *** -->
</BODY></HTML>
<!--endcut ========================================================= -->