Multiple dhcp servers.

Hi all, At the moment I have one dhcp server running ISC dhcpd, and its working fine. However I wish to add another in case the main one goes down. Is it as simple as setting it up on another machine with similar config? My worry is that a client will request an address and both server's will

Re: Multiple dhcp servers.

Hi all, Thanks for your suggestions. > Or you can have two DHCP servers, each of which allocates half the address > space. I will split the address space in half and use it accress 2 servers, this seems the best solution for the moment. > > The other option is have the second machine as a co

Scripting telnet client logins.

Hi all, I wish to script a telnet command and would like to know if it is possible to automate the giving of credentials. The service I am trying to connect to does not support the TELNET ENVIRON option so I cannot do as the manual page suggests. Perhaps I misunderstood but if anyone has any s

LDAP authentication and ncpfs home directories.

Hi All, We have a Novell server that provides authentication for windows clients via nds. However it also runs an ldap server. Currently I am using NIS and NFS for authentication and home directories respectively on the Linux/Unix machines. I would like to configure the Linux based machines to

pam_ncp_auth and autofs advice.

Hi all, I have a few questions that you could perhaps help me out with. What I am aiming for is to authenticate from a Netware server using pam_ncp_auth pam modules and then using autofs to mount the user's home directory. What I have done so far is to get autofs to mount the Netware share but

Resource limit problems.

Hi all, I have a newly installed Debian system that is giving me error I cannot find the cause of, here is an example : bash: fork: Resource temporarily unavailable The machine is not under much load and ulimit has not been set to limit anything. Nothing is appearing in the system logs either

Re: Resource limit problems.

appreciated. Kind regards, Fred. On Thursday 25 April 2002 10:56, Fred Clausen wrote: > Hi all, > > I have a newly installed Debian system that is giving me error I cannot > find the cause of, here is an example : > > bash: fork: Resource temporarily unavailable > > Th

Discrepencies between du and df.

Hi All, I am having a strange problem where the output of du and df do not correlate. Here are the symptoms : $df /var Filesystem 1k-blocks Used Available Use% Mounted on /dev/hda10 606405596139 0 100% /var $du -s /var 54157 /var Here we can see that d

Re: Discrepencies between du and df.

On Friday 03 May 2002 12:58, you wrote: > My first guess is you have deleted some files that are stil open. DU will > not show the deleted files, but since they are still in use DF will count > them. Thank you all. You were correct. I am the proud owner of some new knowledge as well. Regards, F

Updated Apache packages for Woody (testing).

Hi all, There was recently an Apache vulnerability and I notice there is an update on debian.org with packages for stable. A search also reveals Apache 1.3.26 for unstable. However I was unable to find any for testing. Are there any packages for Woody or should I make my own? Kind Regards, F

Re: transfer rate

Hi All, Further to what Jeff said I can also recommend a utility called "mii-diag". Simply running this utility will enable you to see the currently selected media type. Use "mii-diag -h" to see full options. It also allows you to set the media type. Cheers, Fred. -- To UNSUBSCRIBE, email to

Using mod_auth or auth_ldap via https.

Hi All, I wish to use auth_ldap or mod_auth on virtual hosts being served out with https. Note that I am talking about https with regards to Apache serving out web documents, not ssl with regards to auth_ldap accessing a ldap server. I have activated mod_auth and auth_ldap modules. I would prefe

Regarding Openssl package and Apache version string.

Hi all, I have installed openssl 0.9.6e and have verified this with : $dpkg -l | grep openssl ii openssl0.9.6e-1 Secure Socket Layer (SSL) binary (Trimmed description to fit on one line). After I had done the upgrade to openssl I restart Apache but the server string reported read

Adjusting php flags on a site by site basis.

Hi all, I am trying to adjust the following variables on a site by site basis : magic_quotes_gpc magic_quotes_runtime This is through httpd.conf not php.ini. I am doing the following to attempt to accomplish this : php_flag magic_quotes_gpc true php_flag magic_quotes_runtime true I am also

Re: Adjusting php flags on a site by site basis.

Hi Vinai, Thanks! Your advice worked. It turns out that "on" is what I was looking for. I post this to the list as well so that others may benefit. Cheers, Fred. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Using testing (sarge) in production.

d any problems but I would like to know others' experience. Most of our production systems are web/database systems. Also, do packages in testing get updated as security vulnerabilies occur? or only when the maintainers wish to upload a newer version? Regards, Fred. -- Fred Clausen

Re: Moving from BSDi

Hi, > First, does anyone know of a way to export the user accounts on BSDi and > import them into > a Debian box? I have close to 5,000 accounts I need to bring over. >From the password database conversion scripts I gather you are storing the user account information locally. Perhaps with this m

Making packages apt-get able.

Hi All, I have so far not been able to find any resources describing how to set up a ftp or http server so that you can add it to sources.list and use apt-get to install new packages. If anyone could direct me to some docs describing this I would be most grateful. Regards, Fred. -- To UNSUBSC

Re: DNS servers

other. Cool headed analysis is required, not name calling. Cheers, Fred. -- Fred Clausen - Systems Administrator Unique Interactive, part of UBC Media Group plc Winners of the 2002 CRCA NTL New Media Award http://www.ubcmedia.com http://www.uniqueinteractive.co.uk T: +44 (0)20 7453 1677 F: +44 (0

Re: Help - just deleted root's crontab - recovery?

Hi Andrew, You could also use /etc/crontab and edit it directly. That way you will avoid the crontab -r problem in the future. Cheers, Fred. -- Fred Clausen - Systems Administrator Unique Interactive, part of UBC Media Group plc Winners of the 2002 CRCA NTL New Media Award http

Re: Apache and SSL

Hi, Make sure you have : Listen 443 NameVirtualHost 192.168.1.1:443 in your httpd.conf. Replace 192.168.1.1 with your IP. Hope this helps. Cheers, Fred. -- Fred Clausen - Systems Administrator Unique Interactive, part of UBC Media Group plc Winners of the 2002 CRCA NTL New Media Award http

Re: Apache and SSL

of config) NameVirtualHost * NameVirtualHost *:443 ServerAdmin [EMAIL PROTECTED] ServerName testing.zz DocumentRoot /www/testing ServerAdmin [EMAIL PROTECTED] ServerName testing.zz DocumentRoot /www/testing Check http://httpd.apache.org/docs/vhosts/name-based.html for more info. Cheers, Fred

Tools for analysing web statistics.

it works fine. But this does not always work and I need a reliable logs analysis tool. I would much appreciate any comments anyone has. Cheers, Fred. -- Fred Clausen - Systems Administrator Unique Interactive, part of UBC Media Group plc Winners of the 2002 CRCA NTL New Media Award http

Re: Tools for analysing web statistics.

instead of a subdirectory of the site doc root is a better way to go about it anyway (which is what clfdomainsplit does). Cheers, Fred. -- Fred Clausen - Systems Administrator Unique Interactive, part of UBC Media Group plc Winners of the 2002 CRCA NTL New Media Award http://www.ubcmedia.com http

Re: SpamAssassin Causing Server Startup Failure

Hi, > server I can try this in. Unfortunately, I don't quite know how to force a > Debian server to stay in runlevel 1 during the boot process. I cannot really help you with your Spamassissin problems but if you do not want to process any startup scripts at all then from lilo use : linux init=/b

Re: Apache / PHP4 config problem (newbee on PHP)

to Woody with minimal disruption. Regards, Fred. -- Fred Clausen - Systems Administrator Unique Interactive, part of UBC Media Group plc Winners of the 2002 CRCA NTL New Media Award http://www.ubcmedia.com http://www.uniqueinteractive.co.uk T: +44 (0)20 7453 1677 F: +44 (0)20 7486 5081 -- To

Re: Limit data traffic on Apache virtual hosts

ks in advance! - Jasper ___ -- Fred Clausen - Systems Administrator Unique Interactive, part of UBC Media Group plc Winners of the 2002 CRCA NTL New Media Award http://www.ubcmedia.com http://www.uniqueinteractive.co.uk T: +44 (0)20 7453 1667 F

Re: Cracking attempt

Hi All, c) i don't know about you, but i wouldn't be inclined to trust the security of a $100 consumer-grade firewall. I agree. Use a PC running SE Linux instead. ;) I would just like to add (to this already long thread but thats what I like about Debian-ISP) that an OpenBSD firewall in a

Scripting telnet client logins.

Hi all, I wish to script a telnet command and would like to know if it is possible to automate the giving of credentials. The service I am trying to connect to does not support the TELNET ENVIRON option so I cannot do as the manual page suggests. Perhaps I misunderstood but if anyone has any su

Updated Apache packages for Woody (testing).

Hi all, There was recently an Apache vulnerability and I notice there is an update on debian.org with packages for stable. A search also reveals Apache 1.3.26 for unstable. However I was unable to find any for testing. Are there any packages for Woody or should I make my own? Kind Regards, Fr

Re: transfer rate

Hi All, Further to what Jeff said I can also recommend a utility called "mii-diag". Simply running this utility will enable you to see the currently selected media type. Use "mii-diag -h" to see full options. It also allows you to set the media type. Cheers, Fred. -- To UNSUBSCRIBE, email to

Using mod_auth or auth_ldap via https.

Hi All, I wish to use auth_ldap or mod_auth on virtual hosts being served out with https. Note that I am talking about https with regards to Apache serving out web documents, not ssl with regards to auth_ldap accessing a ldap server. I have activated mod_auth and auth_ldap modules. I would prefer

Regarding Openssl package and Apache version string.

Hi all, I have installed openssl 0.9.6e and have verified this with : $dpkg -l | grep openssl ii openssl0.9.6e-1 Secure Socket Layer (SSL) binary (Trimmed description to fit on one line). After I had done the upgrade to openssl I restart Apache but the server string reported reads

Adjusting php flags on a site by site basis.

Hi all, I am trying to adjust the following variables on a site by site basis : magic_quotes_gpc magic_quotes_runtime This is through httpd.conf not php.ini. I am doing the following to attempt to accomplish this : php_flag magic_quotes_gpc true php_flag magic_quotes_runtime true I am also n

Re: Adjusting php flags on a site by site basis.

Hi Vinai, Thanks! Your advice worked. It turns out that "on" is what I was looking for. I post this to the list as well so that others may benefit. Cheers, Fred.

Using testing (sarge) in production.

d any problems but I would like to know others' experience. Most of our production systems are web/database systems. Also, do packages in testing get updated as security vulnerabilies occur? or only when the maintainers wish to upload a newer version? Regards, Fred. -- Fred Clausen

Re: Moving from BSDi

Hi, > First, does anyone know of a way to export the user accounts on BSDi and > import them into > a Debian box? I have close to 5,000 accounts I need to bring over. >From the password database conversion scripts I gather you are storing the user account information locally. Perhaps with this m

Making packages apt-get able.

Hi All, I have so far not been able to find any resources describing how to set up a ftp or http server so that you can add it to sources.list and use apt-get to install new packages. If anyone could direct me to some docs describing this I would be most grateful. Regards, Fred.

Re: Cracking attempt

Hi All, c) i don't know about you, but i wouldn't be inclined to trust the security of a $100 consumer-grade firewall. I agree. Use a PC running SE Linux instead. ;) I would just like to add (to this already long thread but thats what I like about Debian-ISP) that an OpenBSD firewall in a bri

Using system locking with mysqld.

and Linux 2.2.14 on other server, old kernel due to legacy proprietary driver needed (raidzone, not related to external storage). Same MySQL version. Kind regards, Fred. -- Fred Clausen - Systems Administrator Unique Interactive, part of UBC Media Group plc Winners of the 2002 CRCA NTL

Using system locking with mysqld.

and Linux 2.2.14 on other server, old kernel due to legacy proprietary driver needed (raidzone, not related to external storage). Same MySQL version. Kind regards, Fred. -- Fred Clausen - Systems Administrator Unique Interactive, part of UBC Media Group plc Winners of the 2002 CRCA NTL

Find out how long a connecting has been open.

(0.00/0/0)" which implies to connection is new but is has been in the "established" state for a long time. Any assistance would be much appreciated. Cheers, Fred. -- Fred Clausen - Systems Administrator Unique Interactive, part of UBC Media Group plc Winners of the 2002 CRCA NTL

PHP 4.2.3 Woody backport?

that I can backport it myself. Tried using "apt-get --compile source php4" but there are dev dependencies that cannot be satisfied in Woody. Any assistance would be much appreciated. Cheers, Fred. -- Fred Clausen - Systems Administrator Unique Interactive, part of UBC Media Group plc

Re: PHP 4.2.3 Woody backport?

Thanks alot! that was exactly what I was looking for. Another one for the bookmarks... Cheers, Fred. Thomas Kirk wrote: Hep On Tue, Jun 17, 2003 at 11:26:27AM +0100, Fred Clausen wrote: I wish to run php4.2.3 on a Debian woody machine without having to upgrade the whole system to unstable

Question about system accounts in LDAP.

Hi All, I am in the process of deploying openldap for authentication. I am just not sure what the best policy is for including system account like root, daemon, lp, etc. in LDAP. Should they be there for consistency across systems? Or will they just cause confusion by having the same system accoun

Re: exim SMTP AUTH

Hi Antony, Are you sure that exim is not expecting encrypted passwords in the /etc/exim/passwd file? I am not an exim expert but I suspect that may be an issue. You might want to paste the relevant snippet from your exim config file. Cheers, Fred. On Tue, 2003-09-23 at 11:25, Antony Gelberg wrot

Re: Gated vs Zebra

As an interesting aside, here is why Quagga is a apt name for a fork of Zebra: http://www.museums.org.za/sam/quagga/quagga.htm Cheers, Fred. On Mon, 2003-09-29 at 10:40, Stephane Bortzmeyer wrote: > On Mon, Sep 29, 2003 at 12:29:58AM +0300, > kgb <[EMAIL PROTECTED]> wrote > a message of 39 li

Re: Configuring mod_ssl

lib/apache/1.3/libssl.so into server: > /usr/lib/apache/1.3/libssl.so: undefined symbol: ap_conn_timeout > > This happened when I tried to load the apache_ssl_module in my http.conf > file. I _think_ I'm not supposed to do that. If I'm correct, that module > isn't necess

Re: Strange problem with NIC

t; > Saludos, > --Roman > > -- > PGP Fingerprint: > 09BB EFCD 21ED 4E79 25FB 29E1 E47F 8A7D EAD5 6742 > [Key ID: 0xEAD56742. Available at KeyServ] -- Fred Clausen - Professional Services Engineer

Package update notification script.

) attached or at : http://homepages.nildram.co.uk/~xinit/sec_update Hope some people find it useful! Regards, Fred. #!/usr/bin/perl -w # sec_update.pl # # sec_update.pl -- Check for available security updates on systems running APT # # BEGIN LICENSE BLOCK # # Copyright (c) 2004 Fred Clausen

Re: Recovery

Hi, > I'm trying to perform a recovery of some files on a remote server running > Woody. Since I can't take the server down to do an exhaustive recovery, I'm > exploring what options I have with regard to do this remotely via ssh. > > The original file system has been replaced by a new one, but

Re: mod_asp

ble? > > Is it a good idea to install this module and tell customers, that they > can use ASP the same way as it is a Misrosoft's implementation on > Windows machine? > > I'm running a self-compiled Apache 2.0 - with MPM Prefork. But I > think, It's

Find out how long a connecting has been open.

.00/0/0)" which implies to connection is new but is has been in the "established" state for a long time. Any assistance would be much appreciated. Cheers, Fred. -- Fred Clausen - Systems Administrator Unique Interactive, part of UBC Media Group plc Winners of the 2002 CRCA NTL

PHP 4.2.3 Woody backport?

that I can backport it myself. Tried using "apt-get --compile source php4" but there are dev dependencies that cannot be satisfied in Woody. Any assistance would be much appreciated. Cheers, Fred. -- Fred Clausen - Systems Administrator Unique Interactive, part of UBC Media Group plc Winn

Re: PHP 4.2.3 Woody backport?

Thanks alot! that was exactly what I was looking for. Another one for the bookmarks... Cheers, Fred. Thomas Kirk wrote: Hep On Tue, Jun 17, 2003 at 11:26:27AM +0100, Fred Clausen wrote: I wish to run php4.2.3 on a Debian woody machine without having to upgrade the whole system to unstable

Re: Configuring mod_ssl

lib/apache/1.3/libssl.so into server: > /usr/lib/apache/1.3/libssl.so: undefined symbol: ap_conn_timeout > > This happened when I tried to load the apache_ssl_module in my http.conf > file. I _think_ I'm not supposed to do that. If I'm correct, that module > isn't necess

Re: Strange problem with NIC

t; > Saludos, > --Roman > > -- > PGP Fingerprint: > 09BB EFCD 21ED 4E79 25FB 29E1 E47F 8A7D EAD5 6742 > [Key ID: 0xEAD56742. Available at KeyServ] -- Fred Clausen - Professional Services Engineer

Package update notification script.

) attached or at : http://homepages.nildram.co.uk/~xinit/sec_update Hope some people find it useful! Regards, Fred. #!/usr/bin/perl -w # sec_update.pl # # sec_update.pl -- Check for available security updates on systems running APT # # BEGIN LICENSE BLOCK # # Copyright (c) 2004 Fred Clausen

Re: Recovery

Hi, > I'm trying to perform a recovery of some files on a remote server running > Woody. Since I can't take the server down to do an exhaustive recovery, I'm > exploring what options I have with regard to do this remotely via ssh. > > The original file system has been replaced by a new one, but

Re: mod_asp

ble? > > Is it a good idea to install this module and tell customers, that they > can use ASP the same way as it is a Misrosoft's implementation on > Windows machine? > > I'm running a self-compiled Apache 2.0 - with MPM Prefork. But I > think, It's