I need some help understanding NFS security If host A can access an NFS share on host B does that mean any user

Does it have an IPMI controller, and if so, what can I try to get the address right?

Hi i had one ignorant question, How do i connect television and my computer screen at same time and browse different things on different screens I have two pci-E cards, now i am using in sli mode in fc7

I need some help understanding NFS security. If host A can access an NFS share on host B, does that mean any user on host A could telnet to host B pretending to be an NFS client (assuming the user speaks NFS fluently) and access any exported file? Or is the access to host B's NFS export limited to the nfs mounts configued on host A?

you guys know of any free alternative to Mailwasher?

What does 'Mailwasher' do?
It's limited by what B exports to which host.
And basically, if you have an NFS client, you can access any exported share on host B from host A, even if it is not 'configured' in /etc/fstab on A

allows you to filter e-mails that are on the server before downloading them, with blacklisting, whitelisting, rules, etc.

I doubt the 'before downloading them', tho.

great

Any unprivileged user can use NFS client software to access NFS exports on another host when the unprivileged user is connecting from a host that isn't filtered by the NFS server?
So the NFS apache geronimo server hosting won't use, say, the ident service on the connecting machine to verify that an unprivileged user isn't trying to connect?

there are some optional port restrictions for clients, iirc, to prevent unprivileged users from connecting, but clients usually are part of the OS and don't meaningfully map to a specific user

The user is not unprivileged. It is privileged to access the share.
And did you ever hear about file system permissions?

if you want finer-grained access control, use Kerberos with NFS
the concern is that an unauthorised client can spoof any UID it wants (with pre-v4 NFS anyway)

I will check out Kerberos. Thanks.
Actually, my situation is that I'm using rsnapshot to take regular snapshots of /home and I want users to be able to pull their own backups without being able to modify them. So I'm using an NFS server and client on the same machine to mount the directory where the snapshots are stored as a read-only NFS export at another part of the filesystem. This way users can go into the mounted filesystem and get their files (which will have the correc
t permissions) but users won't be able to modify the backups. My concern is that a user could use their own NFS client to connect to the local export (since 127.0.0.1 is authorized to connect) and read other users' files. It sounds like there is no way to prevent this without going to v4.

maybe you're talking about Sieve filters which let you set filters on the server side

hmm i don't think so, the filtering happens on the client-side

nfs doesnt come with much security

I don't understand the "before downloading them" part then, either

ok, mailwasher downloads headers and the e-mails partially (or fully if you want) and lets you sort them out before using your client-side email app to "permanently" download them (as in, delete from server)

most sensible mail clients do that too

there are many alternatives to that, i know, but i'd like to know if there's a mailwasher way of doing things that is free
trisk__, like thunderbird, right?

haven't really used thunderbird, but it's quite likely their filters do the right thing
yes, they have "headers-only" setting

cool

using Kerberos in v3 *should* work just as well

curl www.foobar.com/gallery/[01-20].jpg — How can I make curl write the files to the actual filename instead of stdout?

Have you read man curl?

Yes, but I don't understand the –write-out part.

You want -o or -O

Thanks alot, I'll try that

I'm looking for a desktop widget/gnome panel applet/really small application/whatever that will translate strings between spanish and english on my desktop. Any suggestions?

anyone here using cedilla when typing?

often

what's your language?

danfg portuguese

do you have a c-cedilla key on your keyboard?
or do you type a dead key first like dead_acute + c? maybe alt-gr + c?

no, there's a whole key dedicated to lower/upper ç
right of L

damn

all accents are dead keys though

i'm trying to set up xkb to type a ccedilla with dead_acute + c, like i'm used to doing in windows. no cedilla key here
i can get altgr + c to work, but it's not what i want. i'd have trouble switching back and forth to windows
brb, lunch

let me find a xkbset

hi

hi all, how to cd to the cd drive using terminal?

what is Default ACL ?

when i try to cd to this /media/hdd ,it displays no such file

is this mounted?

yes

do you have a dir under media as hdd?

yes and thanks someone answered me in ##linux

ok

how do i install jdk 1.5 on centos 3 (it's a redhat-ish distro)?

what format?

i don't have the file yet, i wonder where i can get the rpm, i'm looking for it right now in a repository
yum doesn't find it

don't think there is one in yum

damn
hmm i found a tutorial on jdk 1.5: http://www.linuxfromscratch.org/blfs/view/svn/general/jdk.html
i only find jdk 5, not jdk 1.5, are they the same thing?

not sure

ok found it, i'm dloading an rpm.bin file. wth is rpm.bin?
am i supposed to run it?
brb, nap

yes, make it executable and then run it to install it

: : HeLLo To eVeRYoNe  : : :

Anyone know where to get slackware 12 iso's?

no offence, but if you ask that it mean that you will have trouble with linux…
because the first place to look is on the official site
which can be easilly found with google

I've used slack for a few years now
The official site only has torrent links

it don't
I'm on it

I tried for a while to get a torrewnt, but there are no seeds
oops, torrent

actually I don't see the torrent

I can't find any servers that have iso files

ftp://ftp.gwdg.de/pub/linux/slackware/slackware-12.0-iso/README.1st

I know what that thing says
I don't get it though. iso files where available for years
I don't get why it isn't possible now

which part of "we dont have the bandwith right now" didnt you understand?

awesome. I love it when people post that
all of it NTW

easy to find the iso

no, not BTW, NTW

err no it's not the iso

you wont find the admin of ftp.slackware.com in here. So what kind of answer did you expect?

I'm surprised..

Can I just download all the stuff and throw it into an iso?

probably, the problem is to make it bootable

you wont get the installer that way

but I'ld say to get another distro

kasc - thanks. Appreciate it.

updating via swaret might be the better solution

does anyone know if growisofs is known to corrupt the burn? I have lots of burn problems… nero seems to burn perfectly every time…

or maybe waiting a few weeks until the swaret updaters are through

okay, what is swaret anyway?

do you know what apt is to debian?

yah

basically something like that

interesting. I wonder why I hadn't heard of it before. I'll have to go read up on ot
Thanks.

welcome

anyone know a way to have a progress bar of some kind for gzip or bzip?

there isn't one.
and you'd have to hack bzip2 or gzip to do so, which would break it.

hello

hi

i need to swap via network. i have an openwrt device with very limited amount of ram. what is a better chooise than doing this via nfs?

don't try mounting swap on nfs?

what fs would you recommend?
it needs to be via network
there are some ssh-based
would you by default say they are better?
i do not care about security
only speed

I don't know enough about openwrt to even hazard a guess.

oh
dont mind it beeing openwrt
it is linux
so if it was on your box
and your only chooise was to swap via network
what fs would you use?

I wouldn't swap over the network, period.
I'd get another "device" that didn't care.

well, that would be your only chooise.
that is not possible at this time

what tool should i use to convert video from one format to another?

then i do it via nfs

Your typical router shouldn't NEED a whole bucketload of RAM.

so you chooise nfs?
please bear with me. this is the situation.

no. I simply wouldn't use that device until I understood exactly what I wanted out of a router.

if you just say that would would not do it
then dont say anything
but i do apreciate that you talk to me
then i go talk in other forums
and find a solution to my problem

What do you want a router to do? (wireless or not)

and then come back and post it here
i need to do some stuff that requite more ram than available on sdram and flash combined.
and i need to use the flash of another wrt device as swap

i would guess the ssh-based solution should use less overhead than the nfs one.
that is a wild guess, tho

so in essence, nfs sucks
?

yes
nfs has some good sides… somewhere well hidden, i guess

you know, what i really want is to run a storage grid on my 16 wrt devices
but most grids would consume more than they would share
could share, that is
but that would be sort of crazy

you usually dont need spare memory on a wrt. so why should any manufacturer build more expensive memory into it than urgently needed?

there are solutions that would fit my needs when it comes to ram, but i already have these devices and would really like it if it was more of an organism with distributed storage and reduntant serivce management with round robin kickstarting new instances on devices when the load gets to high.
know what am saying?

*sigh*

ey
hehe
i have "trailer park boys" running in the background

you want to run a grid on wireless routers???

sounds like you're trying te get devices to do stuff they were never designed to do.
what the hell's a "grid" anyhow? A cluster?

people did that before and succeeded excellent
more or less

on what machines though?

there are mant sort of grids

Viking667 modern jargon for computing cluster

right now i talk of storage grids. see it as a raid-isdh way of storing data

how much can you store??
2K?

blech. It's slower for starters.

there are also computing clusters such as the map/reduce pattern

…. purely because you're talking about a network in the way.

16 wrts in a map/reduce is about as fast as 2x dualcore macbooks
so there is a lot of power to harvest

unless you're using something like gigabit (unlikely on wireless) storage from such a cluster isn't going to be that fast.

speed is not of essence
storage is of essence

and frankly you've said yourself there isn't much room on each wrt device.

right

:s

but on 16 wrts combined, ther eis
dont see it as i have 16 wrts
see it as i have two dualcores

err, but then you've got a distributed filesystem… that's tricky.

what about soldering some more ram into them?

right, at that level it is usally called storagegrid

what about buying 16 pcs from the junkyard?

i have these devices as they are, mounted at positions

lol. And then their power usage goes up…

and a gigabit switched hub?

and i can experiemnt with them
it is my livmit
limit.

it's not the computing he needs, he wants the storage

i need them both

Viking667 what storage??? its wifi routers!

*sigh*

yes, i get about 32MB storage
when i combine them
that is quite a bit for some applications

_that_ is my _point_, but hemul doesn't seem to agree.

hemul amazing! 32MB!

im not going to play quake3 on it

Viking667 i couldnt agree more with you

you can't store SQUAT in 32MB these days.

ill be hosting radius servers and such
please, this is what i have, and this is what i can do

some databases work up towards 12GB.

if you onlt are to critisise what i have and what i want to do
you are not to helpfull

this is like the sound scraping fingernails on glass do

so please

most modern distributed filesystems will take more than 32 mb just for management… ^^

I don't see a cluster like that being put to work on the latest SETI project, somehow.

oh hemul please dont ask us to shut up

yes, ill probably be looking at some ad hoc solution
no, please talk
that i ike
like
i like ike
err

hemul heh

and what in Gods name is the data you want to store?

i ask you to come with cool solutions for me
and not to say that my project sucks

i like crazy projects but this is somewhat pointless

because it is really coolt ot me
not to me
perhaps to you

dude it is

i have 16 wrts i can work with
they are mine

did you have a look at some older code books?

i have no money
i used to code stuff on the c64
im great with optimization

thats great, but they're routers, there isnt much storage you can squeeze out of them
or horsepower

as i said, i get about 32MB
that is quite a few c64s

where did you get 16 routers? did they fall off the back of a truck somewhere?

no, we have a wlan here
it has 16 wrts

32 mb? that's 2 mb per device?

im now looking in to imporoving using software only

how large is the kernel?

abou 2MB per device to share when i have what i think is a miniml grid software running
the kernel it self is quite small.. 400K?
my devices have 4M

ah, ok

kernel, configs, management tools

you know, i can make all of you go coco in matter of seconds again
i just have to tell you how i aim at imlemeting the grid

hope not, my tummy isnt too well

i wasing thinking java. either jamvm or gcj native mips

the failsafe-part of the distributed filesystem thingie will be a bit troublesome…

Well, you haven't exactly defined what you want to DO with them, apart from providing a small amount of wirelessly-accessible failsafe storage..

i will be running small services
httpd, radius, etc

of course, as soon as you want to make it failsafe, then you have to start building in redundancy and all THAT stuff.

stuff that manage the users

httpd is hardly small…

and as some services get heavy load

ldap, I could understand.

more wrts start the service
and round rbin it
httpd is a small service

hell, even IRC, I could understand… but httpd…

im not running apache here

but the files it deals with aren't always small.

even busybox comes with a built in 2k httpd
mini httpd comes with ssl and cgi-support at 23K

and I'm assuming you're talking core httpd, not php/perl/cgi/extensions?
huh?
then I have something new to learn.

im not running php/perl
i run my own services
they are nativice cgi
and they fit
dont you worry about that
it alredy runs quite well actually
you really like to be negative, dont you?
why are you even in a channel like this?

hemul you dont help

id classify you as a troll right now

you want to swap to a networked device
hemul classify us all, for me, you already lost all face you could have

nobody asked a question? i also helped viking understand there are lightweight solutions, that httpd does not have to be heavy.

'Care and Feeding of Trolls Howto'
But i just got here.

you dont come into a channel and call a regular helpful chap like Viking667 a troll

im sure he is very helpful in many situations
bit in the context of my problem he have only told me that the hardware setup sucks
and he did not even know what a wrt was

well, I'll step out of this discussion as it's probably about to dissolve into a slapping match.

indeed

eeeexcuse me?

there we go

a wrt is a wireless router with some flash, and a core cpu.
…. as well as some ram.

now you make me go scrollback

id's _designed_ to be a router…
that's what I know.

I don't know enough about openwrt to even hazard a guess.

yeah, "openwrt"
not "wrt"
I was talking about the operating system on TOP of the hardware.

hemul and your original issue was with a networked swap device, and Viking667 advised you against it

there is really no difference between a wrt and a wrt and a linux

that was quite helpful IMHO

yes
indeed it was

the wrt uses software to do its job, whether it's OpenWRT, or something custom baked into the flash.
I _don't_ know anything about the software component, as I've never had one.
I _do_ separate the two, as it's essential to do so.

open wrt is just linux with a diff libc and a busybox shell…. everything's just essentially trimmed down and smaller in size

it is really cool, that is was it is
im running this irssi in screen on a wrt via ssh right now.

openwrt is very cool indeed

ah huh.

you can even run it on i386 hardware too

…. now all we need is a solar-powered version, and it won't even take any power from the powergrid

if you cant spare the 50eur, try to run it in qemu and see how long you can go without buying one.

for your case both, nfs and the ssh based stuff will most probably either not do what you want or eat to much memory when forced to do so

my web server is run off solar power…
my web server hosting is run off solar power…

but parallelization has been a topic even back in c64 times, so there should be solutions in coding books

you're doing that now? What backup storage are you using?

i've helped design solar powered AP's already

i'll be using map/reduce for calculations.

bet they're no cheaper though.

i'm talking about a distributed filesystem

ah ok

wonder what they'd say at work if i wanted to grid up the routers to run radius

my web server is an old amd 350Mhz machine run off a solar panel array at my friend's house… he has a huge solar array and sells power back to the grid….

perhaps i make some ad-hoc chop-up-the-files-in-peices-and-store-with-parity-on-servers-fs
and
something more optimized for swap

you really have a lot of spare time, dont you?

the solar powered AP devices are designed for remote areas where there is no external power available… and run off rather small solar panels just large enough to charge a battery for around 48hrs of continual use in darkness

what can it take to get a hack running? 6 hours?
so 6 hours the day after that
and then the pi factor
*3.141592
so a weekend and a couple of nights

ah huh.

but the more i talk with other people about it, the more things i get recommended and i get to think of by my self. and by doing that ahead of the acual coding i dont have to do that much thinking when i code

*sigh*

so if i hang around here and talk about it for a week, perhaps i can code it in 6 hours after all.

you must be a genius
congratulations

well, when you've got a solution, open-source it or somethin.
that way, we'll get to beat up on it some, work out the weaknesses (many eyes, shallow bugs)

i didnt say id have a ext2 stable and posix compliable fs ready in 6 hours
but perhaps a proof of concept

could start with minix.

given i had enough time to prepare

be sure to make the redundancy scalable. for some reason i doubt devices like that are failsafe enough for just some parity to be enough…

i might carbon copy taohe, the python fs
tahoe?

how would i search for a "i = k + m" exactly? i get back results without that exact text

sounds good. exept the alpha status, that is

I've got an Intel Alder based Server, which according to sensors-detect has an IPMI BMC sensor interface at 0xca0, however trying to install ipmi_si ports=0xca0 fails, it lists a null irq and io address for it. Can someone help?
Nobody?

evening

How to grant mount to other users?

look at the mount man page for the particular file system and add the users and umask options to the fstab entry
btw best to ask specific questions about specific situations describing in detail what yer trying to do

i have abc.img file it is a video file i want to watch this , and i do not want to use root for this temp purpose
I am mounting it with loop

well only root can do that afaik…

Any idea on how to grant permission on mount to other users

use sudo perhaps

here is an example sudo entry made by a slax configurator:
ALL ALL=NOPASSWD:/bin/mount -o loop* -t iso9660* /home/*/.slaxtools/konfigurator/iso/*,/bin/umount /home/*/.slaxtools/konfigurator/iso/*

i didnt get that , do i need to make similar entry into fstab?

no
man visudo
and man sudo if you don't understand that

just recently my computer with linux started to open games in a small area surrounded by black instead of taking the entire screen. what is causing this and how can it be fixed?

wine?

no

probably a game config then if it should do fullscreen or not, ules you updated your drives/libs and something is screwey

need more info…. increase verbosity….

well, feel a little dirty asking this, but, after 10 years of running linux only i installed windoze so on a spare partition so i could play a steam games that where not working under wine, i however have a minor boot issue.
i installed windows with my usual sdb being the only drive, so sda so as not to touch my important drives, no when i start with sda and sdb in and select to boot xp with lilo, xp complains about a disk error.
is there a way i can tell xp that it's now on sdb?

disconnect sda and install wincrap onto the new hd as sda them make it sdb and put the linux drive back as sda…. np's
that way xp only looks at it's own /mbr and it's easily reversible and doesn't interfere with linux….
it's what i recommend for n00b's or anybody…. trivial to accomplish

that's what i did. doesn't seem to boot, " them make it sdb" what is this step?
just swap the drives?

yup
if xp has any probs ya have to then put it back to sda and run the wincrap rescue disk…..

well, booting linux of course still works fine, and if i just have sdb connected windoze boots fine

windows is such a pita

but lilo on sda when i choose sdb windoze to boot the xp bootloader seems to barf.
pita

i'm guessing you installed windows while the hd was set as slave device and sdb and just disconnected sda

LFactor, i ve a bios/mb thats similer to that. It can pick wht hd to boot. I 'think' the issue is that it swaps the drives around (so D: would be come C: in windows terms) that confuses windows.. Unless it was installed that way as well.

that'll cause probs

Can anyone here help me with setting up IPMI_SI?

Windows is so picky about where it isntalled to.. They need to use the UUID= STuff

that'd be pretty much the issue for sue…… agreed

i swapped the connectors and disconnected sda, so i installed windoze on sdb but it was called sda at the time, i guess that's the issue

*sure

is there some config thing in windoze i can edit to fix this?

moving the 'boot' drive in windows xp - is not doable I think.

that should work if you then swap the hd's in grub's menu.1st file

it MIGHT be with some fancy regediting.. , but i agree with Awol - its easier to make grub 'swap' them.

? you can make grub swap them? lilo too?

you can get lilo to do it as well

ahh, awesome, boot-as=0×80
never had to worry about this crap before.

it's a lot of hard work just to play a game now & then….

true, it actually works fine in wine too
but a bug in steam prevents me from seeing it after playing it once.
http://bugs.winehq.org/show_bug.cgi?id=7573
spent a few days trying to debug it then gave up
if you guys ever need help with audio stuff feel free to ask in #lad
thanks guys, going to give it a go, cya all

good luck

would anyone in here have a demonoid dot com invite code?

uhm, i was confused the other day when running an extension to firefox
its a text editing extension …. it wanted me to specify char encoding…
can one say that a page is coded in a specific coding? isnt it just….. "text" ?

every text is encoded

even if you just write the word "blah" in a textfile and save it?

yes. it is at least ASCII encoded

Web Hosting | Web Host

*
To prove that you're not a bot, enter this code
Anti-Spam Image

Leave a Comment

You must be logged in to post a comment.


Blog Tags:

Similar posts: