KCLUG

2 participants
3242 discussions

Server Distributions
by Jonathan Hutchins 20 Nov '04

20 Nov '04

As I said to Dave Hull, I have some clients who are still running RH 7.x servers, and I'm at a loss for what to tell them about upgrading. They can't afford RedHat's Enterprize subscriptions. If they could, they'd probably go with Microsoft because there are more prople who are familiar with it. (They don't have to go looking for linux geeks.) When RedHat changed it's policies they promised that they would document the procedure for upgrading from 7.x and 9.x to Fedora, but I've never been able to find those documents. I have had too many bad experiences with SuSE's package updates (particularly KDE) to recommend the downloadable version for a server. I feel the purchased version is not current enough given the price, and I would not be comfortable recommending it given the quality of the downloadable version. Gentoo is nice, but either you let it get behind or you risk upgrades that will break things. The etc-update system does not adequately discriminate between files that are normally customized for the local installation and files that are not usually changed by end users, leading to a lot of work sorting out configurations every time you update. Gentoo also has wierd, non-standard configuration issues - like the DHCP client over-writing the NTP configuration by default. Mandrake is a good desktop distro, but I've never run it as a server, and there are issues with packages such as not participating in KDE's binary distributions, not making bug-fix updates available, update mirrors being chronicly unavailable, etc. I mean to try Debian, but am reluctant to rely on source code packages without a package manangement system. It's not clear to me that you can do a complete debian install and stay within the apt system. Can you? I'll be interested in the list's comments on this, and other suggestions.

6 8

RE: ipv6
by Brian Densmore 20 Nov '04

20 Nov '04

> -----Original Message----- > From: Frank Wiles > > > On Fri, 19 Nov 2004 13:10:02 -0600 > "Brian Densmore" <DensmoreB(a)ctbsonline.com> wrote: > > > I was wondering, would it be possible to run ipv6 on my > > local LAN? Could I run a mixed environment? That is to > > say have ipv6 on the LAN and have ipv6 and ipv4 on > > the firewall/gateway? Would ipv6 on the LAN provide > > the ability to further enhance security on my LAN PCs? > > There is very little reason, from a security perspective to move > to IPv6 on a local LAN. > Correct me if I'm wrong, but doesn't ipv6 make it very difficult to spoof addresses? Isn't ipv6 more secure than ipv4? I thought there were lots of things you could do with ipv6 that would make it harder to break into a box .The reason I was considering ipv6 is I'd like to add a layer of protection between the LAN and the firewall box. If someone cracks the firewall, it'd be nice to have a fallback measure to prevent the intruder from taking over my other boxes. Plus of course the geek factor in having my own ipv6 network. And it'd be something else to play with. Brian D.

3 2

RE: ipv6
by Brian Densmore 19 Nov '04

19 Nov '04

> -----Original Message----- > From: Frank Wiles > > On Fri, 19 Nov 2004 16:09:28 -0600 > "Brian Densmore" <DensmoreB(a)ctbsonline.com> wrote: > > > I can agree with the geek factor :) > > Yes IPv6 does have some tighter security with regard to spoofing > addresses, but based on how I imagine you're setup it won't help > you. > > For example, say you have a box firewall.domain.com that is your > firewall and two internal boxes secret1.domain.com and > secret2.domain.com. Both secret1 and secret2 are probably > configured to allow certain outside access from the firewall to > them, probably SSH. While IPv6 will keep a cracker from faking > secret2's IP to secret1, there is no need. He already has control > of firewall.domain.com and doesn't need to do any spoofing. > Well actually, I took that into account and disallow ssh from the firewall. So neither box is accessible once I connect to the firewall. So while I can ssh from secret1 to secret2 and then from secret2 to firewall, firewall can't connect to either secret1 or secret2. This makes for the minor inconvenience of not being able to pull files from my LAN from work, it provides a little piece of mind. On that track, I'd also like to deny firewall access to the local intranet. Now I'm not sure that is possible since the firewall is also the gateway and passes traffic out over the same ports I want to prevent the firewall user from accessing on the intranet. If all else is pointless then I'll have to just do it for geek points. ;') Brian

2 1

RE: Redhat Enterprise Edition and Mono
by Brian Densmore 19 Nov '04

19 Nov '04

While it won't be equivalent, I'd recommend installing RH on a PC, up2date the machine to look as close as possible and then install mono on that machine. It should give you some inclination as to any obvious gotchas. It shouldalso allow you to write down a procedure to sort of follow. Modifying live systems is a whole truckload of trouble-in-waiting. > -----Original Message----- > From: Charles, Joshua Micah (UMKC-Student) > > Frank Wiles wrote: > > > First off, don't do it to a live system. Do it on a test platform. > > Get a spare PC somewhere and put the same version of RH on it and > > up2date them to match. Then install mono on the test box. > > > Anything else is asking for trouble... > > Well, that's part of the problem. It's a dedicated server in a local > hosting company (Arsalon). I only have access to the machine > over SSH, > and Redhat Enterprise Linux (I believe) is not a free download. I did > insist that they take a complete back up of the system before > we start, > so that will exist.

1 0

Redhat Enterprise Edition and Mono
by Charles, Joshua Micah (UMKC-Student) 19 Nov '04

19 Nov '04

Hello, I'm working with a client that would like to be able to serve ASP.NET pages on the RedHat Box she has. Does anyone out that have any experience installing mono on this platform? Normally I would be happy to jump in and attempt this myself, but it is a "live" web server, so I'm being cautious. Thanks, Josh

2 1

Re: ipv6
by Brian Kelsay 19 Nov '04

19 Nov '04

No, doorstops to server rooms. Check there first. Brian Kelsay >>> David Nicol <davidnicol(a)gmail.com> 11/19/04 03:37PM >>> Hasn't all the leftover ARCnet equipment been made into an artificial reef by now? On Fri, 19 Nov 2004 15:27:58 -0600, Brian Kelsay <brian.kelsay(a)kcc.usda.gov> wrote: > Use ARCNet. You can get the equipment super cheap. ;-) > > Brian Kelsay

1 0

ipv6
by Brian Densmore 19 Nov '04

19 Nov '04

I was wondering, would it be possible to run ipv6 on my local LAN? Could I run a mixed environment? That is to say have ipv6 on the LAN and have ipv6 and ipv4 on the firewall/gateway? Would ipv6 on the LAN provide the ability to further enhance security on my LAN PCs? Thanks, Brian Densmore

3 4

RE: Any recommendations for gui postgresql/mysql frontends?
by Garrett Goebel 19 Nov '04

19 Nov '04

There used to be a gui frontend for postgres called pgAccess. I don't believe it was kept with the mainline source, but it tracked it. Thank google... here it is: http://www.flex.ro/pgaccess/ No idea on MySQL. The only thing I remember about MySQL is its extensive list of gotchas: http://sql-info.de/mysql/gotchas.html Not trying to start a flame war. But people do need to be aware of how MySQL differs from the generally assumed behaviours one expects from an RDBMS... -- Garrett Goebel IS Development Specialist ScriptPro Direct: 913.403.5261 5828 Reeds Road Main: 913.384.1008 Mission, KS 66202 Fax: 913.384.2180 www.scriptpro.com garrett at scriptpro dot com -----Original Message----- From: kclug-bounces(a)kclug.org [mailto:[email protected]] On Behalf Of Brian Densmore Sent: Friday, November 19, 2004 1:18 PM To: KCLUG (E-mail) Subject: Any recommendations for gui postgresql/mysql frontends? I'm installing postgres and mysql on my home server and want to be able to access the db from other places on the LAN and perhaps from the intranet. I was wondering what people recommend for managing and accessing the db. I want to be able to add/manage users,passwords,tables from inside of a gui frontend. Also any notes on setting up for remote access would be appreciated. Thanks, Brian Densmore _______________________________________________ Kclug mailing list Kclug(a)kclug.org http://kclug.org/mailman/listinfo/kclug

1 0

strange mount issue
by Brian Densmore 19 Nov '04

19 Nov '04

Ok, this morning I tried mounting a cd on my laptop. It told me only root can do that. So I logged in as root changed the /mnt/cdrom ownership to root.cdrom and also the /dev/hdb and /dev/cdrom. I am a member of disk and cdrom. I gave /mnt/cdrom 775 permissions. I don't think I changed the /dev permissions. I still can only mount as root. Is there something I'm missing? Do I need to change the /dev permissions to 775? Thanks, Brian Densmore

2 1

funky error from hotplug?
by Brian Densmore 19 Nov '04

19 Nov '04

I have this strange behavior on two of my PCs. I have removed acpi from my systems, but something somewhere is still trying to run it. I get error messages dumped to the console as a result. Something about not being able to load acpi because the path or program doesn't exist. Anyone have any ideas on where I should look to remove this? Thanks, Brian Densmore

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

KCLUG