-!- ovrclokd [~lisa@moya.trilug.org] has joined #trilug-rhce
-!- Topic for #trilug-rhce: TriLUG RHCE Study Group - Next Meeting Wednesday March 26, 8pm IRC meeting, right here
-!- Topic set by jeremyp [] [Fri Mar 21 09:48:31 2003]
[Users #trilug-rhce]
[ ^retseJ] [ ant1gen] [ jeremyp] [ jimstigator] [ Nat_RH] [ ovrclokd]
-!- Irssi: #trilug-rhce: Total of 6 nicks [0 ops, 0 halfops, 0 voices, 6 normal]
-!- Channel #trilug-rhce created Wed Feb 5 19:49:24 2003
-!- Irssi: Join to #trilug-rhce was synced in 1 secs
< ovrclokd> <voice type=dracula> good EEEvening... </voice>
< jeremyp> Hehe
< jeremyp> Good evening
-!- jtate [~chatzilla@rdu74-181-041.nc.rr.com] has joined #trilug-rhce
-!- sweeper [~mbroome@moya.trilug.org] has joined #trilug-rhce
< jeremyp> Evening jtate, sweeper .
< sweeper> evening, all
< jtate> Hi.
< ovrclokd> jeremyp: so, whatcha think about red hat's new release structure?
< ovrclokd> hi guys...
* ovrclokd thinks it's going to be a short irc session if nobody's talking
< jeremyp> Well, I"m not sure.  It's too bad there's such a cost different between RHL + RHN and RHEL
-!- daleth [~chrisk@moya.trilug.org] has joined #trilug-rhce
< jeremyp> See, RHEL is $349/year minimum, PLUS RHEN (enterprise network) subscription, vs $60/year for the basic RHN
< ovrclokd> jeremyp: ouch.  i wonder how that compares to windows xp server.  or solaris 9.
< daleth> Confused... do we still get the 1 free entitlement?
< jtate> Supposedly Windows server 2003 has a 180 dollar web server only version.
< daleth> But then you have to pay for the one guy to babysit/patch it.
< jtate> They're feeling heat over not having a cheap HTTP server offering.
< jeremyp> Yes, there's still a free entitlement if you fill out the survey every 60 days
< ovrclokd> jtate: yeah, but i wonder how much you have to pay in the annual software subscription fees under the new license structure.
< jeremyp> Plus for Windows you have to consider virus protection subscriptions
< jtate> You have to pay the linux guy too.
< jeremyp> Red Hat Linux has really lost a LOT of it's cost appeal
< ovrclokd> jeremyp: good point....
< daleth> jtate: Yeah, but the linux guy can manage many boxes from his desk, much easier than the windows guy.
< jtate> Well with RDP it's much easier to manage multiple Windows servers.
< daleth> (But the linux guy gets paid a smidge more... perhaps it all balances out.)
< jtate> Easier than logging into each machine individually.
< jeremyp> And the Widnows multiple-manage thing is basically free
< jtate> Remote desktop is pretty cool.
< jeremyp> Versus either multiple RHN entitlements (not free at all) or the proxy server thing (not free either, something like $2000 base plus $110 for each client that's
conencted)
< daleth> Ah... is this for XP?  or have I been missing something all these years?
< jtate> IIS is free if you have a valid Windows 2000 or XP license.
< jtate> It comes on the install cd even.
< daleth> But you need a client license for each concurrent hit.
< ovrclokd> jtate: yeah, but then you have to pay somebody fulltime just to keep up with security alerts and patches!
< daleth> Anyway, aren't we supposed to be talking about pink-hat or somesuch?
< jtate> I'm just as much a hater of M$ as the next bigot, but RH will have to drop their prices in response.
< ovrclokd> daleth: started out as a discussion of colorful-hat's new separate releases.
< jeremyp> Yeah, if you want to think about this more, see the excellent thread entitled "RHL 9 - Concerns" on the phoebe-list archives
< jtate> Or change their policies.
< jeremyp> https://listman.redhat.com/mailman/listinfo/phoebe-list/ and click on the archives link
< ovrclokd> jeremyp: thanks!
< daleth> jeremyp always there with the killer link.
-!- slundgren [~scottl@user-10lf60t.cable.mindspring.com] has joined #trilug-rhce
< daleth> (Still owe you something for that spamassassin link.)
< jtate> Ok.  I've got a printer hanging off a windows machine that I want to print to from my RH 7.3 box.
< jeremyp> What's neat about phoebe-list  is that is has replies from lots of Red Hat people, like Brent Fox and Matthew Wilson
< ovrclokd> jtate: sweeper set up our printers - he's wears the printer clue in the family. :)
< sweeper> I've setup printers on linux and accessed them from windows.  haven't done it the other way 'round, but it should work (via Samba)
< daleth> jtate.  I assume you aren't using a gomain.
< jeremyp> jtate: parallel printer, with no network interface ?
< daleth> s/gomain/domain/
< jeremyp> First make sure samba is up and running, and talking between the machines
< jeremyp> slundgren: welcome, by the way
< jtate> It is.
< jtate> Not a domain.  Samba is working.
< jeremyp> Then run redhat-config-printer and choose a samba pritner.  Done that yet ?
< slundgren> thanks, I was out of town for the last couple IRC meetings. I've appreciated the notes being up.
< jtate> LPRng is my printer controller.
< jeremyp> slundgren: IRC works out of town, that's the beauty of it  :)
< daleth> then you should just be able to go into the printer conf thingy and tell it is a samba printer, the IP the unc, (using / instead of \) and viola.
< jeremyp> yeah use //192.168.42.42/sharename
< daleth> (I had it setup and for some reason I'm hopeless with printers.)
< jeremyp> where ip and sharename are replaced as necessary
< daleth> or //host/share and in the IP field fill that out.
< slundgren> true, but I was unable to attend even that way.
< jtate> Can you use conquerer to browse to samba shares?
< jeremyp> you can use nautilus
< jeremyp> it doesn't work all that well though
< jtate> It looks like konquerer works too.
< jtate> Doesn't show the printers though.
< jtate> smb://
< jeremyp> Yeah it probably skips over printer shares
< daleth> and you can't write to smb shares on konq.  (at least, you couldn't.)
< jtate> Ok.  Got it.
< jtate> Thanks.
< jeremyp> Okay, I guess RedWolfe and ccw aren't coming, or porthos, or cybertooth, or SinnerP, or ...
< jeremyp> Basically I wanted to:
< jeremyp> 1) post my updated notes which fixes typos
< jeremyp> and 2)  discuss a few thigns we didn't quite get to last wed.
< ovrclokd> jeremyp: such as?
< jeremyp> well we kinda ran real quick over the update agent I think
< jeremyp> THough maybe everyone is familiar with it?
< jtate> sheepishly: I've never used it
< ovrclokd> jeremyp: i'm not.  i've been using a utility called rhup, but i'd like to switch off it.
< jeremyp> For example, you can run "up2date blah" to install the "blah" package from RHN.  It will get dependencies for you automatically.
< sweeper> jeremyp: I only know it in passing from other people's discussions
< jeremyp> ovrclokd: never heard of that, and I thought I knew the Red Hat updater scene pretty well ...wow.  URL ?
< jeremyp> Well, you run up2date --rhn-register (Or just "rhn_register" in older versions, ie RHL 7.x), to register yourself with Red Hat Network
< jeremyp> Then you just run up2date to start up the GUI to update your system.  It is really blindingly simple.
< ovrclokd> jeremyp: hangon, digging in my bookmarks:
< daleth> jeremyp http://yasd.cc/en/rhup.php3
< daleth> ( I assume)
< jeremyp> It will skip over kernel updates by default, but you can check them off if you want
-!- cybertooth [~cybertoot@rdu163-124-248.nc.rr.com] has joined #trilug-rhce
< ovrclokd> daleth: beat me to it!
< jtate> Ok: What's the proper procedure when dealing with a GLIBC update like we had a week or so ago?  Reboot?  Reinit?
< daleth> I was intrigued.  I like current cause I know who to kill if it doesn't work.
< ovrclokd> jeremyp: what, if any, are the implications of registering with rhn?
< jeremyp> Does rhup not handle dependencies ?
-!- [ECL]rock [~n@cpe-024-211-148-035.nc.rr.com] has joined #trilug-rhce
< cybertooth> I thought libraries (that were in constant use) were not updated till a reset
< jeremyp> jtate: rebooting isn't really encessary, but if it's a security thing you might want to restart all your daemons
< jeremyp> No, the libraries are loaded when the application starts
< jeremyp> So certain things like "init" etc might not use the new libraries until a reboot, but that's probably not a big concern
< jeremyp> ovrclokd: well it costs $60/year unless you get a "demo" account
< cybertooth> So your running apps can start to look fairly jittery if the libraries are not backwards compatible
< ovrclokd> jeremyp: rhup doesn't handle dependencies.  it just checks existing updates against current versions.
< jeremyp> ovrclokd: then that sounds pretty useless. I would choose from 1) apt-get 2) yum 3) up2date w/ current server 4) up2date with nrh-current server before I'd use
something that doesn't do dependencies
< jeremyp> (assuming there's reasons you can't use the real RHN)
< jeremyp> s/nrh-current/nrh-up2date/
< jeremyp> ovrclokd: sorry, didn't mean to sound critical. Just that apt-get is realyl so easy :)
< slundgren> I've not heard of nrh-up2date, a link por favor?
< jeremyp> slundgren: nrh-up2date.org
< jtate> s/nrh/rhn/
< jeremyp> jtate: no
< ovrclokd> jeremyp: it is. *grin*  i'm just used to it.
< jeremyp> nhr = "not red hat"
< jeremyp> err, nrh
< ovrclokd> jeremyp: altho realistically i don't run into dependency problems as often as you might think.
< jeremyp> But there are some *issues* with the way nrh-up2date does things.  It was my fourth choice among those above
< jeremyp> The big issue being that it probably violates the RHN terms of service the way it works
< ovrclokd> jeremyp: how so?
< jeremyp> Seriously, if you want to use the up2date client with a custom server, I suggest the current server (current.tigris.org)
< jeremyp> But apt-get and yum are the easiest
< jtate> I like yum a lot.
< jeremyp> ovrclokd: because it uses up2date with official RHN on the server box, to get the 'upstream' updates.
< jeremyp> Sure, the stuff is GPL so restributing them is allowed to some extent.  But it's really against what RHN is supposed to do
< jeremyp> Current does it the "proper" way by relying on the normal FTP mirror
< jeremyp> This is somehwat off-topic.
< ovrclokd> jeremyp: makes sense.
< jeremyp> ovrclokd: in response to, "realistically i don't run into dependency
< jeremyp>                      problems as often as you might think"
< jeremyp> I very often run into them
< jeremyp> Mainly because I use these tools to both install new packages and update existing ones
< jeremyp> And it has happened a number of times that updated packages will require new packages that didn't previously exist (Apache did that a while back for example)
< ovrclokd> jeremyp: *nods*  update-requires-new-package is what i run into.
< cybertooth> Well that is one of the inherent problems of package management systems
< ovrclokd> jeremyp: i usually install new stuff manually - since i'm only running 2 systems, i haven't had a need for volume management yet.
< jeremyp> cybertooth: not a problem, it's a feature!
< cybertooth> You have to have the same level of libraries etc as the man who made the package
< jeremyp> ovrclokd: yeah, that gets tiresome on your third system for sure :)
< jeremyp> cybertooth: oh, well that's true
< jtate> In the system logging portion of last week's meeting: where's a good place to look if you run into something strange in the logs?
< jtate> Besides google groups I mean.
< jeremyp> Well, you should be able to tell what program or module generated the log entry
< cybertooth> I really like the package management system as a starting ground (and an easy way of applying initial updates) , but I'm not married to it.
< jeremyp> Well the features like "rpm -ql" and "rpm -qf" are invaluable to me.  If I had a bunch of stuff installed via source, I'd have a much harder life when figuring
things out
< jeremyp> I can't keep track of thousands of files manually
< jeremyp> (note to others, this is sort of an ongoing debate between cybertooth and me, we should probably skip that for now...)
< cybertooth> I normally don't muck with my servers much after they are up and running - pretty much do security updates is all.
< jtate> Yeah, that's not usually a problem, but for example: last week I was getting some strange stuff in my sendmail log.  I posted to trilug.  I got a response
quickly, but I'd rather be more self sufficient.
< cybertooth> jtate: experience is the only answer to that
< jeremyp> Well, the sendmail documentation should have explanations of the common error messages and stuff
< cybertooth> I had some very weird goings on with NFS a few years back and *no one* could help out
< jeremyp> But there's nothing wrong with Google, Google Groups, etc
< cybertooth> An intern and I went through the source code and used ethereal to watch everything
< cybertooth> We finally figured it out and submitted a patch...
< cybertooth> The moral of the story is that now I know NFS inside out.
< slundgren> how long did that take?
< jeremyp> Cool.  Then maybe you can tell me why I sometimes get "Stale NFS filehandle" errors on locally mounted CD-ROMs :)
< cybertooth> One very long night.  We had our fix by about 6am the next morning
< jeremyp> Was your patch accepted
< jeremyp> ?
< cybertooth> The maintainers sent us a better fix by noon that day
< cybertooth> The patch was just a hack for our use, they did a more general one that worked a lot better
< jeremyp> Cool.
< cybertooth> Are the cdroms mounted via NFS?
-!- jtower [~jason@moya.trilug.org] has joined #trilug-rhce
< jtate> Is there a filesystem out there that allows access control lists like AFS, but without being, well, AFS?
< jeremyp> cybertooth: no, NFS isn't even installed on the machine :)
< cybertooth> I think you might want to examine the automount stuff
< jtate> I think I've outgrown the file permission schemes of ext.
< jeremyp> jtate: yes, ext3 with the HTree stuff does that
* jtower is a total doofus. forgot about this two weeks in a row
< jeremyp> it was supposed to be included in RHL 9, but it might have been taken out... we'll see next week when it's released
< jeremyp> it's in the 2.5 kernel but Red Hat was going to backport it
< cybertooth> I haven't seen the HTree stuff...?
< jeremyp> referred to more generically as "ACLs" (access control lists)
< jtate> Right.  I loved them when I was at Duke.
< jtate> Such fine grained control.  Muuaaahhahaha
< jeremyp> rlidkwa ?  :)
< jtate> Yep.
< cybertooth> Is it an addon like quota's or is an extention of ext filesystem
< cybertooth> *got to go take out the trash (a commandment from she who must be obeyed)*
< jeremyp> cybertooth: extension of the filesystem IIRC
< sweeper> speaking on RHL 9.0, somebody on the linux list at work posted a link to a review
< sweeper> http://www.osnews.com/story.php?news_id=3119
< jeremyp> With add-ons to both kernel and userland tools, which makes sense of course for this type of thing
< cybertooth> Cool then we get ACL's for free
< jeremyp> sweeper: it's RHL 9, not 9.0
< jtate> Link please.  Google doesn't seem to be turning up anything but the code for the patch.
-!- slundgren is now known as scottl
< ovrclokd> jtower: we love you anyway...
< sweeper> jeremyp: really??  I musta missed that in all the chatter (on the various lists)
< sweeper> so they've done away with ALL plans for future .x releases?
< jeremyp> jtate: I wish I knew more, this is all what I remember from the phoebe-list (link posted previously)
< jeremyp> sweeper: well, not necessarily.  RHL 7 was just that, and there was a 7.1, 7.2, 7.3
< jeremyp> But I think that's the scuttlebut.  Red Hat makes no promises on this stuff
< jtate> Hmm.  In the mean time what kinds of permission schemes are available in Reiser or XFS?
< sweeper> jeremyp: oh, so it's just a semantic game to claim that they don't have .0 releases ;)
< jeremyp> Nothing different from standard POSIX that I know of
< jeremyp> jtate: you are familiar with setgid stuff, right?  I talked about that setup briefly last week
< jeremyp> sweeper: I guess.  People are probably making a bigger deal of it than they ought to.
< jeremyp> Oh, that OSNews review -- It's "tiresome" to me that the review (and others) criticize Red Hat for not including MP3 support, DVD player apps, etc.
* ovrclokd is hungry, going to grab some food, brb
< jeremyp> Why can't people get it through their head that those things CANNOT be legally redistributed in the United States !?!
< jtower> osnews reviews are totally useless
< jeremyp> Red Hat is not shipping that stuff because it's FREAKIN AGAINST THE LAW
< sweeper> jeremyp: I didn't read it at criticism so mcuh as statement of fact of something desktop users are interested in, but I agree it's tiresome
< jeremyp> Not that it's a good law, and we should all lobby the appropriate parties, but sheesh
< jtower> jeremyp: but mandrake/suse/etc sell it in the US, no?  what's the difference
< jtower> *IANAL*
< jeremyp> Well they don't sell the DVD player stuff, which is against the DMCA
< jtower> ah
< jtower> thanks god for freshrpms and apt
< jtower> well, i can personally report that setting up LVM from scratch is not as hard as it may sound
* jtower is still on his LVM kick
< jeremyp> And Mandrake et all could probably get in trouble for the MP3 support, if the MP3 folks really started flexing their muscle.  Red Hat is taking a much more
"responsible" approach
< jtower> i'm gonna re-rip my CDs into ogg one of these days
-!- [ECL]rock [~n@cpe-024-211-148-035.nc.rr.com] has quit []
< ovrclokd> jtower: d'you know if there are any car cd players that support ogg?
< jtower> no idea at all
< jeremyp> OH, one more thing related to up2date and RHN -- there's a thing called "rhnsd" that can monitor RHN automatically for new updates
< jeremyp> I haven't been able to get a real good handle on how it actually works
-!- [ECL]rock [~n@cpe-024-211-148-035.nc.rr.com] has joined #trilug-rhce
< scottl> stupid question, offtopic. what is the keyboard shortcut for moving between workspaces on RH 8?
< jeremyp> It's installed by default but doesn't appear to really *do* anything by default
< jtate> There's another option too: If you've installed ximian gnome, you can use red-carpet.
< jeremyp> Eegads
< jtate> alt plus F<desktop number>
< jeremyp> Yes, it's another option, but Ximian plays such havoc with your RPMs that you basically have to re-format if you want to go back
< jeremyp> Notice how the Ximian Red Carpet disclaimer is always one of the first things in the RHL release notes :)
< jtate> Unless you have KDE installed: then you use Ctrl F1, etc.
< jeremyp> jtate: cool, thanks.  Didn't know about either of those (I use KDE here and Gnome at work, trying to get the best of both worlds0
-!- scottl [~scottl@user-10lf60t.cable.mindspring.com] has left #trilug-rhce []
< jtate> What I'd like to set up is a roaming KDE or Gnome profile, so no matter where I log in, I have the same shortcuts, etc.
< jtate> Would LDAP be able to handle that?
< jtate> Roaming mozilla profiles too?
< ovrclokd> jtate: i have kde installed - i have to use ctrl-alt-fX
< jtate> (Anyone know how those work?)
< jeremyp> I don't think mozilla has roaming profiles.  There's some consternation among mozilla hackers about that
< jeremyp> Some of the mozilla clones (galeon?) do have them however
< jtate> Fair enough.  They do have profiles though, so I assumed...  I've never look at that to set it up.
-!- scottl [~scottl@user-10lf60t.cable.mindspring.com] has joined #trilug-rhce
< jeremyp> Well ideally you could just do NFS-mounted home directories... or do you mean roaming across the Internet ?
< jtate> Across the internet.
< jtower> that's what vnc is for :)
< jtate> That's why I'm looking at LDAPS or similar.
< jtate> Would LDAP be able to handle that?
< jtate> Roaming mozilla profiles too?
< ovrclokd> jtate: i have kde installed - i have to use ctrl-alt-fX
< jtate> (Anyone know how those work?)
< jeremyp> I don't think mozilla has roaming profiles.  There's some consternation among mozilla hackers about that
< jeremyp> Some of the mozilla clones (galeon?) do have them however
< jtate> Fair enough.  They do have profiles though, so I assumed...  I've never look at that to set it up.
-!- scottl [~scottl@user-10lf60t.cable.mindspring.com] has joined #trilug-rhce
< jeremyp> Well ideally you could just do NFS-mounted home directories... or do you mean roaming across the Internet ?
< jtate> Across the internet.
< jtower> that's what vnc is for :)
< jtate> That's why I'm looking at LDAPS or similar.
< jtate> VNC is just too slow
* sweeper has to go walk the dog ....
< jtate> I
< jeremyp> I've not quite heard of storing whole big files in LDAP
< jeremyp> LDAP is really designed for "directory" data -- many many records of small pieces of stuff
< jtower> if you play with the protocol parameters vnc can be made fairly tolerable
< jtate> So configuration should be ok too:
< jeremyp> Yeah but configuration files are a lot more than "name, UID, password, phone number"
< jeremyp> I'm sure you could hack something into it, and I wouldnt' be surprised if people have done it, but that's not the real point of LDAP
< jtate> Yeah, I'm looking at doing an LDAP setup for an addressbook accessible through mozilla mail.  Thought maybe I could do it all through there.
< cybertooth> Up a few pages you mentioned RHN monitor, I have it running on my desktop.  works good
< jeremyp> Ok, question for those who are following the syllabus /etc -- is there a section for quotas, automounter, NFS home directories, etc ?
< jeremyp> That stuff is covered on RHCT so we need to make sure we cover it somewhere
< cybertooth> We definitely need to know automount, that's a enterprise type application
< jeremyp> cybertooth: actually I was talking about rhnsd, which is the background daemon that can install stuff automatically (I think).  YOu're right, though, rhn-applet
is neat also.
< cybertooth> auto-mount with NFS would be fair game for the test
< ovrclokd> nfs server is in meeting 5 - mike or i will cover that...
< cybertooth> You would need to setup an automount for the users home directory when they logged in (we did this at a former employer)
< jeremyp> yeah but automount is a different beast
< ovrclokd> jeremyp: makes sense to bundle them together, tho.
< jeremyp> though certainly related to nfs client/server setup.  Automount can mount anything though
< ovrclokd> quotas probably fits best in meeting 8 - user and host security
< jtower> maybe we need a session for "common tips, tricks, and setups"
< jeremyp> jtower: yeah that could last all night though :)
< jtate> Is there an NFS type file sharing protocol that works well over the internet?  Besides Samba I mean.
< jtower> i volunteer cybertooth to lead that one
< jeremyp> Though it would probably be really handy to bring in Jason's server (or some server) and setup NIS, & NFS homedires, and then configure someone's laptop or
whatever as a client
< cybertooth> Well you can do NFS over the internet - not recommended!
< jeremyp> jtate: I think webdav (sp?) is supposed to fill that void, I haven't played with it much
< cybertooth> I would love to teach nfs/nis - my schedule is iffy though...
< jtower> or use a VPN
< jtate> I think that's the next step.
< cybertooth> VPN is the way to go if you want remote NFS
< cybertooth> It is 2x faster than samba, but 4x slower than ftp
< jeremyp> Can samba over the Internet be made secure ?
< cybertooth> Yes you can tunnel it these days
< jtower> you can tunnel anything thru ssh
< cybertooth> I wish I could tunnel a pizza some days
< scottl> i don't think webDAV is a replacement for NFS.
< jtower> you can't make samba secure because the other end is usually a windoze box
* jeremyp curses his laptop which just told him battery power is critical at 7% -- yet the freakin thing is plugged into the wall !
< cybertooth> jeremyp, check the plug connection...
< jtower> jeremy's laptop is a steaming pile of goat-infested llama shit
< jtower> gotta sub for tribot
< cybertooth> Hay there's a bzflag contest about to begin... are we going to cover anything else tonight?
< jeremyp> cybertooth: good suggestion, but I'm pretty sure it is
< jeremyp> jtower: uh, thanks
< jeremyp> OKay, well I guess everyone's moving to bzflag
< jeremyp> Join us at bzflag.trilug.org port 5155 (bzflag.sourceforge.org for the client, even works on Windows and Mac!)
< jeremyp> And see #trilug for discussion :)
< ovrclokd> have fun, guys.  see you next week!
-!- scottl [~scottl@user-10lf60t.cable.mindspring.com] has left #trilug-rhce []

Generated by irclog2html.pl 2.1 by Jeff Waugh - find it at freshmeat.net!