I've heard a lot about biometrics, but the durned things cost over
$100 (consumer grade) and only seem to work for legacy software. The
cost isn't such a big deal, but the software sure is.
But in the bigger picture, biometrics isn't enough. I know there'll
be a couple of cocky jerks who'll tell you (and me) at great lengths how
stupid the idea is, mostly because they've not looked down the road as
far as I have. Remember the GPG keys on repos and how that wasn't
Keyfobs. These little USB droplets of cyberspace. How about we, as
one of the largest collections of Linux people out there, standardize
some software to fit into PAM to do this:
1. Upon insertion, ask for the passphrase a'la local-agent.
2. When validated, use these credentials for everything.
Sounds like a simple idea, but for some reason the powers that be
can't seem to 'get off the pot' and placate hundreds of vendors to
define a standard. Standards are what we're about. Let's make our
own. When the money stops flying and things get tight, we'll allow'em
to use our own.
1. Web browsing with the key: It needs to unlock the password
storage there. I don't think this is a big deal, but I doubt anyone's
written anything like it yet. I suppose this'll require help from the
Mozilla team, mostly.
If a Linux guy with a key is browsing, how about the Linux server on
the other side accepting this as authentication? (For existing accounts,
2. GDM and logins: this might have to be modified, aye? It would
have to be authenticated before the login. And the name given the login
(username) would have to come from somewhere, no?)
Think of how messed up this whole thing is: every site you have
another password to be lost, every machine on which you work you do
too. People don't remember passwords- they get written down and never
changed. That's why an internal test of the NYT staff was able to crack
70-80% of their passwords just by studying the office area.
It's getting to the point that passwords are meaningless, and we're
only asking for more new ones. Let's change that direction.
What's it take? Do we start a group on Sourceforge? Is Redhat/et al
interested in pushing this? I don't care if Debian, Suse or SCO
doesn't support it; this is something _we_ can do, it's not hard- let's
do it. Let the rest of the world catch up to us.
Gentlemen: Start your flamethrowers! :>
Brian Fahrländer Christian, Conservative, and Technomad
Evansville, IN http://www.fahrlander.net
I could use a small simple command line tool to encrypt/decrypt the
files on my USB pendrive, and it could be cool if it was small enough to
be on my pendrive also. And it has to work in both Linux and Windows
(probably to versions of same tool, or two tools that can
encrypt/decrypt the same files).
Does any of you guys know of such a tool, or have any ideas oh how to do
I know that this is off topic, but I have spent hours trying to RTFM and
this is stopping me from killing my windows PC for good.
I am trying to use evolution, but I have POP mail only from several sources.
I need to read mail from many machines, so I leave mail on server with
set "delete when removed from deleted items". I can leave mail on server
with evolution 1.4 or 2.x. But how can I ever delete messages after I trash
them. I have seen a few references to this issue as being "discussed and
dead". But, I can't find any more info.
I can't suck the mail to my Linux Box using fetchmail or such because I need
to get it from everywhere and I don't want to setup an IMAP server, static
DNS, a domain, etc etc. I CAN do all these things, as I have done it all,
but I have better things to do with my time.
What is the best solution to this? How does everyone else do it with
Fedora/redhat? Why is evolution not supporting this? I get the impression
that it is a religious issue, but I don't know why.
Any help would be greatly appreciated.
Just upgraded from fc2 to fc3. Now I can't mount my internal zip drive
anymore. What fs type should I use? I allways thought it was vfat but now:
# mount /dev/hdb /media/zip/ -t vfat
mount: wrong fs type, bad option, bad superblock on /dev/hdb,
or too many mounted file systems
I asked about connecting to public wireless networks before but did not
get much input. I am using RH 9 on a laptop. I have no problem
connecting to my home wireless network. I used the gui network program
to do the configuration. It uses wep in managed mode and dhcp. It was
simple to do.
But connecting the same laptop to other wireless networks has never
worked. No matter how I try to configue using the gui interface, I never
get a connection, regardless of whether the network has an essid and wep
or not. The green led on the wireless card (D-Link 650 - prism 2
chipset) always flashes (it is solid when it connects). (I have no
trouble connecting the laptop to wired networks in hotels.)
So I have recently tried using iwconfig. I open a shell as root and
enter commands like:
/sbin/iwconfig eth1 key off
/sbin/iwconfig eth1 mode Managed
/sbin/iwconfig eth1 essid any
/sbin/ifconfig eth1 up
if I the network doesn't use wep. If the network requires an essid
and/or wep, I include the information and modify the above commands
When I use these commands, the card connects to the network (the green
light stays on without blinking) and the icon on the panel shows a
connection. If I do a "netstat -r" I can see the gateway's IP address. I
can ping this IP address and my computer at home. But I can't do much
else. DNS doesn't work and I can't find any web pages. The web browser
is supposed to go to a login web page but I can never get to it. My
understanding was all I needed was an empty "dhclient.conf" file and I
would get a lease and the domain name server address. I do get a lease
but I don't think DNS is working. I can't ssh or telnet anywhere. (Yet I
can ping as described above.)
I have tried this on two different wireless networks (Barnes & Noble and
a university library). I connect but can't do anything other than ping
some IP addresses. I cannot get to the login web pages or any other web
pages. What else do I need to do? Something else must need to be
configured. Any insights would be greatly appreciated.
I setup cups to be a raw print queue and configured samba for a print
share. I can see the printer share from my winxp boxes and setup could
setup printing in the control panel. The printer when viewed in the
control panel says 'access denied, unable to connect'. I can't print to
it. I think I don't have proper permissions on the samba server.
This is what I have in smb.conf for printers. What is wrong?
printcap name = cups
load printers = yes
printing = cups
cups options = raw
security = share
comment = All Printers
path = /var/spool/samba
browseable = no
public = yes
guest ok = yes
writable = no
printable = yes
I've a network problem on my Fedora Core 1.
on my switch the 100 led is ok.
But if I make an mii-tool command I've this result :
eth0: 10 Mbit, full duplex, link ok
And it's bad. Why the led on my switch ok in 100 Mbit but mii-tool see
it with 10 Mbit ?
I've try this : mii-tool -v -A 100baseTx-FD
But no changes..
Thanks for help ;D
When it was more difficult, it worked: months ago, i compiled and
installed Cyrus-IMAPd on FC1 and had no issues with it.
Now, when it's simple, it does not work. On FC2, i can't convince Cyrus
to work. I can create the accounts, but Evo does not read the email
Anyone using Cyrus on FC2? What were the steps you took to make it work,
after installing the RPM?
My users like to keep 500 to 1000 messages in their mailboxes and
average about 500K per message (we are a talent management company, so
there is lots of multimedia being exchanged).
So far I have been running whatever came stock with FC1, so I have
Postfix with WU IMAP running in that standard UNIX mailbox mode.
Can I keep Postifix and just change it to Cyrus IMAP style mailboxes and
install Cyrus IMAP? Or do I have to start from scratch?
Fortunately I have only 10 users, so I will have to deal with about 10K
in messages and about 150 sub folders.