renew expired certificate

2003-01-22 Thread Alexander Steinert
Hi all, on a machine a self-signed certificate expired recently. It was created via mod-ssl-makecert (according to /usr/doc/libapache-mod-ssl-doc/README.Debian.gz). After googl'ing and reading HOWTOs I still don't know how to to renew it (it shall have a new expiration date). For example, I tried

Re: restricting command line arguments in sudo

2003-01-21 Thread Alexander Steinert
> > I allow read-access to all of /var/log. However, I also allow read > > access to /etc/shadow: > > > > /usr/bin/tail /var/log/../../etc/shadow > > > > does work. How can I best restrict that? I've tried > > > /usr/bin/tail/[^.]* /usr/bin/tail /var/log/[^.]* will prevent sudo tail /var/log

Re: 1:3.0.2p1-9 > 1:3.4p1-0.0potato1 ?

2002-06-27 Thread Alexander Steinert
> > Is 1:3.0.2p1-9 considered greater than 1:3.4p1-0.0potato1 because it > > comes from testing, is it a matter of order in sources.list or are there > > rules I don't know yet? > > > last night that confused me too. eventually i tracked it down to the > Packages file not being updated. I would s

1:3.0.2p1-9 > 1:3.4p1-0.0potato1 ?

2002-06-27 Thread Alexander Steinert
On a potato machine I'm trying to apt-get the sources of the latest security update of openssh. With deb-src http://security.debian.org stable/updates main contrib non-free I get 1:3.4p1-0.0potato1 as expected. With deb-src http://security.debian.org stable/updates main contrib non-free deb-src f

"Semi-Hot-Swap" of IDE discs

2002-06-18 Thread Alexander Steinert
Dear list, for backup purposes (on i386 architecture) I'm planning the purchase of two 60GB-IDE discs, an exchange frame [right word?] and a PCI-IDE-Controller Card. SCSI is no option due to the huge difference in the price, at least here in Germany. Since my knowledge about IDE/ATA is near zero

Re: Identical installations on several machines

2002-05-18 Thread Alexander Steinert
> A# dpkg --get-selections > selections If you want removed/purged packages on A to be removed/purged on B: A# dpkg --get-selections \* > selections Stony -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Logging transactions

2002-04-02 Thread Alexander Steinert
>Is there some way for me to write this info to a log file for >troubleshooting, and still be able to see it on the screen? man tee HTH Stony -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Openssh protocol 2 for potato < - rather urgent help needed

2002-03-28 Thread Alexander Steinert
> Has anyone any idea where I can find debs for potato for Recent versions > of OpenSSH? I need non-broken protocol 2 but still be able to support > protocol 1. > > Building OpenSSH3.1p1 from source requires an upgrade of OpenSSL. If I > replace the OpenSSL in Potato with version 0.9.6c (from

Re: security vs. potato?

2002-03-01 Thread Alexander Steinert
> according to packages.debian.org/ssh2 there is no ssh2 package > available for potato/stable. > > i suppose this is a conundrum for the developers -- normally > security fixes are beamed back to potato in a hurry, but ssh > (version 1) has security troubles, and to fix them would > introduce a n

Re: UrlView strangeness

2002-02-05 Thread Alexander Steinert
> I use mutt which uses urlview to present a list of url's in a message. > Lately, sometimes some of the lines in that list are blank (sometimes > they're *all* blank). If I count the url's in the message and arrow down > to the appropriate blank line it fires up lynx and takes me where I want > to

Re: Need Help to Program Text Draw Utility

2002-01-06 Thread Alexander Steinert
> But it seems that there is no Linux-utility to draw simple > ascii-figures (lines, text, rectangles, circles) with > cut/copy/paste-capacity in textmode. IIRC this topic has been on this list before. There's even an emacs mode for this. I'm not sure if you'll find cut/copy/paste-capacity for sin

Format/Tool-Chain for scanner->images->document->printer

2001-12-31 Thread Alexander Steinert
What would you consider the appropriate image and document format in this situation: Most documents will be created by scanning paper and combine the images (=pages) to one doc. Most of the time the documents will be printed on a PS Kyocera, sometimes 2- or 4-up, always with small dynamic text nea

Re: backup vs package manager

2001-12-07 Thread Alexander Steinert
> >dpkg --get-selections > file # save package settings. > >dpkg --set-selections < file # set package settings. > > Once you've done that, is there a way to simply tell the system to > install, uninstall, upgrade, whatever, to exactly what the current > package selection settings are?

Re: rsync's authentication?

2001-11-29 Thread Alexander Steinert
> does anyone know what password authentication rsync uses, and how the > passwords on the wire are encrypted? > > i know i could read andrew's paper, but i just don't have the time. > thanks! >From the man page: -e, --rsh=COMMAND This option allows you to choose an alte

Re: Non-interactive password check

2001-11-29 Thread Alexander Steinert
> Alexander> Since I have no administrative access to the university > Alexander> servers LDAP doesn't seem to be an alternative. Given > Why do you need administrative access to the LDAP server? I have no administrative access to the university server. Read: I can't install LDAP there.

Re: Non-interactive password check

2001-11-28 Thread Alexander Steinert
> > On session start the user sends his login name and the password for the > > remote account. I want to check the authenticity by something like > > trying to ssh into the remote account and immediately logout again. The > > unix user doing this is the owner of the apache process. > > > If thi

Non-interactive password check

2001-11-28 Thread Alexander Steinert
Currently I'm building a web application using python. The database only stores a login name and an account name (e.g. 'john' and '[EMAIL PROTECTED]') but no password. (This is invariant.) On session start the user sends his login name and the password for the remote account. I want to check the a

Re: how to put package on hold using command line tools?

2001-11-22 Thread Alexander Steinert
> > > is there any way to put package on hold using command line tools? > > > > echo packagename hold | dpkg --set-selections > > thank you, > > isn't this a bug in man dpkg though? all it says about > --set-selections is: > >dpkg --set-selections > Set package selec

Own DNS server inside an existing network

2001-11-20 Thread Alexander Steinert
Dear list, I have a host inside a university network (IP a.b.c.d). There's a DNS server (out of my control) authoritative for the university's domain uni.tld and another one (which I can influence) authoritative for sub.uni.tld. The latter maps my host myhost.sub.uni.tld to the IP a.b.c.d. I am t

Re: How do I know whether I've got the "potato" or "woody" versions of debian?

2001-10-25 Thread Alexander Steinert
> I've installed Debian using a couple of CDs which I downloaded. I'm still > very new to Debian. Thus the question IIRC the debian version number is part of the name of the isos. But you can also just try cat /etc/debian_version 2.2 ==> potato woody _will_ be 3.0 when it's stable. Dunno

Re: apt logfile?

2001-10-24 Thread Alexander Steinert
> Is there an apt (or dpkg) logfile? Something that would keep a record of > what was done when? Just a simple text file with a format of: > > > > Does anyone else think this could be very useful? Me2! It's not what you meant, but sometimes I use ls -ot /var/lib/dpkg/info/*.md5sums | head -2

Re: short reference for Unix commands

2001-10-03 Thread Alexander Steinert
Sorry for not being precisely enough: Rather than introductory docs I'm looking for a _short_ reference of Unix / Linux commands. The best would be _one_ table with all command names and descriptions and maybe links to the man pages. Stony

short reference for Unix commands

2001-10-02 Thread Alexander Steinert
Any URLs for that? TIA Stony

mod_python on potato

2001-09-27 Thread Alexander Steinert
Has anyone out there tried to get mod_python to work on a potato server? (Which versions, dependancies?) Stony

session management / authentication

2001-09-27 Thread Alexander Steinert
Could you give me hints (URLs, book titles) to inform me about session management / user authentication on a web server? I'm planning a DBMS-backed web app. (using apache, postgresql, python). My current aproach is to use https, let the user auth. himself via password and generate a session id so

Re: How to disable X temporarily?

2001-09-17 Thread Alexander Steinert
> On Mon, Sep 17, 2001 at 01:43:48PM +0200, Alexander Steinert wrote: > > What would you regard as the most elegant way to keep all users of a > > system from starting a X session. > > Don't know how elegant but how about - > # chmod /usr/X11R6/bin/X Nice trick, Kent. Thanx! Stony

How to disable X temporarily?

2001-09-17 Thread Alexander Steinert
What would you regard as the most elegant way to keep all users of a system from starting a X session. It should be a) temporarily and b) nothing like apt-get remove ... ;-) TIA Stony

Re: Sys Admin guide specific to Debian?

2001-08-29 Thread Alexander Steinert
> I'm a Linux beginner with Debian installed. I'm looking for a beginner's > guide to System Administration and I'm wondering if there might not be one > particular to Debian. If not, can someone point me in the direction of a > good generic SysAdmin guide? You might want to take a look at http:

Re: Reading .doc files from within Mutt

2001-07-23 Thread Alexander Steinert
> What is the best (simplest) way to read .doc files from within Mutt? /etc/mailcap: application/msword; /usr/bin/antiword '%s'; copiousoutput; description="Microsoft Word Text"; nametemplate=%s.doc and (if you want) ~/.vimrc: auto_view application/msword Stony

Re: MUA with html support

2001-07-21 Thread Alexander Steinert
> I do it with a combination of a line in my muttrc and a couple > of lines in my /etc/mailcap > > first put this line in /etc/mailcap: > > text/html; /usr/bin/links -dump '%s'; copiousoutput; description=HTML Text; > nametemplate=%s.html Which version of links supports -dump? > I've also got

Re: PDAs

2001-06-15 Thread Alexander Steinert
> on Thu, Jun 07, 2001 at 12:31:57PM -0400, Carl Fink ([EMAIL PROTECTED]) wrote: > > I'm going to buy a PDA within the next week or so. After fairly > > extensive research it looks like I have to get a PalmOS device. EPOC > > is seemingly dead in the water, Compaq isn't selling their devices > >

ntpdate and diald

2001-05-16 Thread Alexander Steinert
Hi, I want to use ntpdate to set the system time and date during the boot sequence of a system with a ADSL connection which takes almost 10 seconds to be brought up. [EMAIL PROTECTED] # ls -1 /etc/rc2.d/ [...] S19bind@ S20diald@ S20inetd@ S20ipchains@ S20logoutd@ S20makedev@ S20masqmail@ S20net-a

Re: init.d shell script can't stop daemon (python script)

2001-05-15 Thread Alexander Steinert
> > I wrote a (python) script that is acting like a daemon (doing something, > > sleeping for 10 seconds, doing ..., sleeping ...) and would like to > > launch and kill it from a shell script in /etc/init.d. > > > > Using start-stop-daemon seemed appropriate, but the problems is that > > no /var/r

Re: debian newbie questions -- security

2001-05-13 Thread Alexander Steinert
> 3) I want to have a system that is as secure as possible without > sacrificing usability. Where can I get good guidance on securing Debian? I Not only for that you might want to take a look at http://www.infodrom.ffis.de/Debian/doc/index.html Stony

envelope and virtual domain with postfix

2001-05-10 Thread Alexander Steinert
Hi, my /etc/postfix/virtual on host.bar.tld contains [EMAIL PROTECTED] @localhost'. My ISP provides webspace for foo.tld and is "configured" to forward all mail addressed to [EMAIL PROTECTED] to [EMAIL PROTECTED] Incoming mail to say [EMAIL PROTECTED] arrives at [EMAIL PROTECTED] and contains [

init.d shell script can't stop daemon (python script)

2001-05-09 Thread Alexander Steinert
Hi, this might be a little OT, but: I wrote a (python) script that is acting like a daemon (doing something, sleeping for 10 seconds, doing ..., sleeping ...) and would like to launch and kill it from a shell script in /etc/init.d. Using start-stop-daemon seemed appropriate, but the problems is

Re: wait till end of write, how?

2001-05-07 Thread Alexander Steinert
> > One alternative is to use a "semaphore" file. Have the NT app create a file > > named, say "busy", just prior to starting the transfer of the big file. > > Once the big file is transferred the NT box erases "busy". The shell script > > would be written so that if the "busy" file exists, it do

wait till end of write, how?

2001-05-05 Thread Alexander Steinert
Given that a W2k client copies a large file into a samba share on a Linux server, how can a process (e.g. shell script) that will read this file wait until the file is totally transfered? The problem is that the file is (on the server) accessible for reading from the moment the client starts to co

get number of pages of a PostScript file

2001-04-28 Thread Alexander Steinert
What's the fastest way to do this on the command line? TIA Stony

logout freezes system

2001-04-19 Thread Alexander Steinert
Dear list, when I log myself out from X the screen shows starnge vertikal lines. The system doesn't react anymore (no keyboard, no mouse, no ping from another host; just hard-reset) This happens only sometimes / is not reproducable. It's not WM specific. I'm running potato with a custom 2.2.18 k

kernel 2.2.19 compile error (toshiba support)

2001-04-17 Thread Alexander Steinert
Dear list, today I tried to create a kernel-package with make-kpkg --revision=mork.1 kernel_image using kernel-source-2.2.19 but I got cc -D__KERNEL__ -I/usr/src/linux/include -Wall -Wstrict-prototypes -O2 -fomit-frame-pointer -fno-strict-aliasing -pipe -fno-strength-reduce -mpreferred-stack-b

Backup techniques

2001-01-13 Thread Alexander Steinert
Hi folks, I'd like to know which programs and strategies you (would) use to backup *one* debian box. In one case I have available a CD-Burner as backup device and in the other case a 640MB MO drive. Constraint: I don't want a complete backup of all partitions but in case of bad luck to install a