permission to restart a service
by Daniel Chénard
I want to give to some users the permission to start, restart and stop
some services like apache and or mysql.
I dont want to use webmin for that.
Someone know if I can do that??
If yes, how can I do that??
tx
19 years, 10 months
iptables and stale DNS entries
by Rob Cartier
I have a client that has a (cable ISP) dynamic Ip address assignment
and while it doesn't change often it does change.
I have added the machine to my iptables for pop3 and ssh by using
the host name that is registered with dyndns.org but if it changes
I need to restart iptables so that the updated address is in effect.
Is there anything else I can set in the iptables rules to have it work
more dynamically besides restarting my iptables scripts.
Thanks
Rob Cartier
19 years, 10 months
problem with grub
by EcK3kO
hi recently i installed on windows 98 norton 2004 it
detected that the master boot had changed and asked me to
erased the changes or leave it, i decided to erase the
change now i realice that i erased the grub so i cant start
linux, the disket doesnt work any idea :?
19 years, 10 months
video ATI 9200 non loading radeon module
by François Patte
Bonjour,
I have an ATI radeon 9200 video card which was perfectly détected by
redhat-config-xfree86 during the install process. The XF86Config is:
[snip]
Section "Module"
Load "dbe"
Load "extmod"
Load "glx"
Load "record"
Load "freetype"
Load "type1"
Load "dri"
EndSection
[snip]
Section "Device"
Identifier "Videocard0"
Driver "radeon"
VendorName "Videocard vendor"
BoardName "ATI Radeon 9200"
EndSection
But, at boot time the radeon module is not loaded and I cannot see anywhere in
/var/log/messages some message like:
"Can't locate module char-major-226" or something of the like that can be usualy
found when the kernel tries to load video cards modules....
How can I force the kernel to load the radeon module?
Thank you
--
François Patte
Ecole française d'Extrême-Orient - Pune - Inde
Université René Descartes - Paris 5
UFR de mathématiques et informatique
http://www.math-info.univ-paris5.fr/~patte
19 years, 10 months
Re: FC2 Display problem
by K.M.Zammi Kahan
K.M.Zammi Kahan wrote:
> Hi, I'm using FC2 in my PC which has S3 ProSavage DDR type inbuilt
graphics card with 32MB shared memory and Viewsonic monitor as well. My
--------
>AFAIK 32 MB of shared mem is not enough for a 32bit display,
>I think that in your BIOS is a setting to adjust the shared mem.
-----
Hi, More specificly I'm using Gigabyte GA-8VM533P motherboard, which has VIA P4M266A with S3 Graphics ProSavage8 inbuilt VGA (It's using 32 Mb shared memory by default). What are the color depths I can use with "savage" driver. Can I at least use 24 bit color? Is there a way to get full use of my VGA card.
Thanks & Rgds,
Zammi.
---------------------------------
ALL-NEW Yahoo! Messenger - all new features - even more fun!
19 years, 10 months
[OT] Smartd: Worth the effort?
by Brian Fahrlander
About five years ago I was well-funded and a little spoiled. I never
worked so hard in my life, and even though I was miserably underpaid for
the industry, my expenses were very low, too.
I bought a massive 80G drive back in the days when 10's and 15's
were just showing up on the seen for mere mortals to buy. I wanted
something I'd never outgrow, something to store all my music on, and
never have to think twice about it. And that's exactly what I got.
All these years later, it's entry has been commented-out in
/etc/fstab, since having it mounted causes serious problems. It appears
to be completely locking up the system to the point where a 20-30s
power-off is needed (unless I'm getting two problems at once; we'll
see.)
The media is degrading now, problems abound, and a pair of 40G'ers
(only $40 each, while I paid over $300 for the 80) to replace it,
since...and this is sad...I never got the drive more than 50% full.
Isn't that sad?
And for the last 2-3 years or so, I've been running smartd on it.
Nothing but the lockups and the need for fsck ever gave me any warning.
Nothing in the syslog, other than the nightly notifiction that some
obscure byte in smartd had changed. Shouldn't I have had _some_
notification? Isn't this what smartd was designed to identify?
Just thinking out loud...as I run "chkconfig smartd off"...
--
------------------------------------------------------------------------
Brian Fahrländer Christian, Conservative, and Technomad
Evansville, IN http://www.fahrlander.net
ICQ 5119262
AIM: WheelDweller
------------------------------------------------------------------------
19 years, 10 months
Re: [initscripts-ipv6] Bug (or enhancement) in 6to4 scripts (NAT)...
by Michael H. Warfield
On Sat, Aug 28, 2004 at 09:21:09AM +0300, Pekka Savola wrote:
> IPV6TO4_IPV4ADDR has two purposes: it can be used when there are
> multiple IPv4 addresses and you want to pick which one to use to build
> the prefix. It was also imagined to be used to pass through the NAT
> when the NAT has been configured to pass the protocol-41 packets to
> specific internal host.
> Note that this only supports one 6to4 router behind a NAT. Multiple
> ones won't work. And you need to configure the NAT to forward all
> proto-41 packets to that node.
Actually, this is incorrect on both counts. Again, according
to draft-palet-v6ops-proto41-nat-03.txt they found that 80% - 85% of NAT
devices on the market at that time support a true NAT of protocol 41.
That means it does not require protocol 41 pass through. It
translates the address on the way out and detranslates it on the way
back based on the remote IPv4 address. It actually works. I've now
done it.
That also means it does not require a special configuration
on that NAT device for the 6to4 gateway. As long as it does a blind
IPv4 -> IPv4 NAT and reverses the NAT on the way back, it works.
It also means that multiple systems behind the gateway CAN
use 6to4 (but, due to another design mistake, the 6to4 address is
not unique because the EUI address is ::1 for the same prefix). If
each node behind the NAT gateway had a unique EUI address, they would
not collide on the local net and, as long as they were NOT going to the
same site on the global net, they could share the same NAT gateway. With
the addition of table caching in the NAT gateway that included the EUI
address (which none that I know of do now) even the limitation that two
nodes could not access the same external site could be handled by keying
off of internal EUI (similar to indexing on port number).
> The reason for that is that while the tunneling to 6to4 relay would
> work as long as the mapping is kept in the NAT (because that's
> bidirectional), it wouldn't work for traffic between 6to4 nodes
> (especially when the other 6to4 sends the initial packet to you)
> because that would require NAT mappings being established beforehand.
> I.e., 6to4 has limited support behind a NAT and always requires
> configuring.
Not true. I've already demonstrated this. No special configuration
on the NAT device. No protocol 41 pass through. The 6to4 prefix is build
using the external IP address of the NAT device plus the EUI of the local
system, but the tunnel is build with the local interface address. It then
works. The NAT device is NOT passing protocol 41 through. It's actually
performing a NAT and deNATing the return packets. It does work. I just
don't know how wide spread that support is.
> For more generic use, I'd suggest looking at Teredo
> (draft-huitema-v6ops-teredo-02.txt), which is pretty close to being
> standardized. There are also a couple of implementations, at least
> one of which works for Linux. That might be something to include in
> Fedora soon.
Teredo is an abomination. I sat in some of the working groups
at the IETF and even they detest Teredo. But... Teredo is proof positive
that the IETF truely has a sense of humor. The previous draft for Teredo
is "Shipworm". Ok... Pop quiz. How many spot the connection? Teredo
is a species of shipworm. That's not a worm, it's a molusk. It bores
holes in the hulls of wooden boats and pier's and docks and rots them from
the inside out (anyone getting a hint here?). That's what Teredo does
to security systems and firewalls. Even the characters at the IETF
recognized exactly what they were creating with Teredo. My "evil twin" at
Microsoft was involved in one particular point with Teredo on XP. He
refers to Teredo as "The Evil Firewall Destroying Deamon from Hell". If
you enable IPv6 on XP, Teredo is enabled. IPv6 over UDP is a security
hole just waiting for someone to plague. Recognizing the risk there,
they disable Teredo when an XP box is joined to a domain, since no-one
should be running Teredo from a corporate network. While IPv6 over UDP
is interesting, the infrastructure and prefixes (Teredo currently uses a
prefix assigned to Microsoft - where do you want to go today) and really
a nightmare. I've looked at the "Meledo" project and it's got promise,
but scary at the same time.
The draft I'm referring to is draft-palet-v6ops-proto41-nat-03.txt.
Turns out 04 is expired but 03 is still up. Looking at the expiration
dates, 04 JUST expired earlier this month.
> There are also other "tunnel broker" like solutions which go through a
> NAT like a charm, and one will likely be standardized pretty soon..
Well... Seems to be that the scheme in Palet's drafts seems
pretty workable without all this other cruft (the passthrough). The only
gotcha is figuring out the external address of the NAT device. I'm
interesting in finding out just how many NAT devices actually support
this scheme. They claimed over 80% to 85% back then. Even if you
DON'T take into account the local EUI, you can still support NAT with
multiple 6to4 gateways, just based on IPv4 ordered pairs when no two local
nodes access the same external site. But a single gateway advertising
a route seems to work like a champ and makes the most sense and doesn't
run into any of those problems. But you have to specify the external
address in the 6to4 prefix and the true local address in the tunnel
command for the tunnel endpoint. Then it seems to work. In fact, I
have it working... I just need to test it in more environments. Looks
like it's going to work like a charm over Linksys products. I'm looking
to test over some other vendors now.
> --
> Pekka Savola "You each name yourselves king, yet the
> Netcore Oy kingdom bleeds."
> Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
Mike
--
Michael H. Warfield | (770) 985-6132 | mhw(a)WittsEnd.com
/\/\|=mhw=|\/\/ | (678) 463-0932 | http://www.wittsend.com/mhw/
NIC whois: MHW9 | An optimist believes we live in the best of all
PGP Key: 0xDF1DD471 | possible worlds. A pessimist is sure of it!
19 years, 10 months
Problems with Nvidia nvsound module
by Nick Pierpoint
Morning.
I've upgraded from RH9 to Fedora Core 2. All went very smoothly. Only
problem is getting sound working.
I'm using the Nvidia nforce drivers - downloaded the current set:
NFORCE-Linux-x86-1.0-0283-pkg1.run
Seems like a really nice installation script. No problems at first.
Followed through their documentation and got the eth0 driver working,
but I've some issues getting sound working using nvsound.
My modprobe.conf file is:
alias usb-controller ohci-hcd
alias ieee1394-controller ohci1394
options ne irq=10
alias eth0 nvnet
alias usb-interface usb-ohci
#alias snd-card-0 snd-intel8x0
alias snd-card-0 nvsound
install sound-slot-0 /sbin/modprobe --first-time --ignore-install
sound-slot-0 && { /bin/aumix-minimal -f /etc/.aumixrc -L >/dev/null 2>&1
|| :; }
remove sound-slot-0 { /bin/aumix-minimal -f /etc/.aumixrc -S >/dev/null
2>&1 || :; } ; /sbin/modprobe -r --first-time --ignore-remove
sound-slot-0
I don't know where the install and remove lines came from or what they
do. Should they be there? What should be in this file?
You'll see 2 snd-card-0 entries. When using the snd-intel8x0 module I
could get sound to work, but each time I reboot xmms is silenced and I
have to go through sound card detection using system-config-soundcard. I
can then run xmms with no problems
Following the nvidia release notes and replacing the snd-intel8x0 line
to the nvsound line leaves me problems. When running xmms I get the
"Cannot Open Audio" message box. However, when using
system-config-soundcard *both* snd-intel8x0 and nvsound entries appear
in the tabbed dialog and both work fine when clicking "Play Test Sound".
Should the snd-intel8x0 entry be there even when commented out of
modproble.conf?
Finally, I'm also getting a few nvsound error messages in dmesg:
nvsound: module license 'unspecified' taints kernel.
Nvsound: Nvidia Audio Init Module, 20:51:11 Jul 27 2004 version 1.0-0
PCI: Setting latency timer of device 0000:00:05.0 to 64
Nvsound: NVIDIA nForce1 Controller found at Mem 0xed800000 and IRQ 5
PCI: Enabling device 0000:00:06.0 (0005 -> 0007)
PCI: Setting latency timer of device 0000:00:06.0 to 64
Nvsound: NVIDIA nForce1 Audio found at IO 0xe000 and 0xe100, IRQ b
Nvsound: Aci_device 038c3000 Apu_device 038c3400
Nvsound: DEV MIXER 0 DEV AUDIO 3
Get REC SRC as 0 return as 80
Nvsound: Set format as 10
Badness in interruptible_sleep_on at kernel/sched.c:1927
Call Trace:
[<0227ee1e>] interruptible_sleep_on+0x5a/0xa7
[<02115e97>] default_wake_function+0x0/0xc
[<47036c24>] Nvaudio_write+0x10d/0x19f [nvsound]
[<02141534>] vfs_write+0xb8/0xe4
[<021415ce>] sys_write+0x2c/0x42
...10 times...
Nvsound: Nvaudio_release
Nvsound: Set format as 10
Nvsound: Nvaudio_release
Nvsound: Set format as 10
Nvsound: Nvaudio_release
Too much information? Not enough?
Many thanks for any help.
--
nick
19 years, 10 months
PCMCIA 3CCCFE575BT No driver
by N.M. v. Rossum
Hi *,
I just have installed FC2 on my laptop Toshiba Tecra 8000
But there are no drivers for my PCMCIA 3CCFE575-BT card
In RedHat version 9 it worked fine on this machine.
Can someone help me out here.
TIA
19 years, 10 months
FC1 works fine but unable to install FC2
by Bill Kirchner
Sent this yesterday but it didn't seem to go through:
I am trying to install FC2 on a computer that previously was running FC1. I downloaded the 4 iso images, burned them to CD's, verified that both the iso files and ther CD's were good.
When I run the install, I tell it to skip the mediacheck. The install hangs for about 30 secs and then gives me the followiing error:
[<c028007b>] copy_to_user_tmp/+0xe0/0x10f
Code: 0f b6 10 40 89 03 89 51 04 83 e2 0f 83 fa 08 8b 53 1c 74 12
install exited abnormally
<7>serio: kseriod exiting
So....it did that about 4 times. The system would still boot into FC1 but wouldn't run the FC2 install. I then decided to force the issue and deleted all the partitions on the HD. Tried the install again and this time it ran past the part where I told it which packages to include (in a custoom install) and got to the "checking dependencies" part when, you guessed it, install exited abnormally.
I have now tried to run the install 11 more times and it is always right back at the first error message. It never even starts to run anaconda. I have deleted partitions, reformatted the drive and then deleted partitions. Nothing helps. It quites right after I tell it to skip the media check.
I am learning to hate FC2 with a passion. I've never had so much trouble on a basic OSD install. I am seriouslu considering just using Sun's Java Desktop (which I own and had running on this before switching to fedora.).
Any suggestions?
Bill Kirchner
19 years, 10 months