LINUX LIGHTS

firefox tweaks

2009-02-24T22:37:00.000-08:00

In previous versions Firefox stored this information in the worst possible format - Mork. Format extremely complicated, barely machine readable that gave the users no possibility to parse the data (for a lot of laugh check out the specification on the Wikipedia page). This was finally replaced in the new Firefox by SQLite - self contained, small footprint database.

Having database store your browsing data has one drawback, you have to optimize the database from time to time to get rid of old, deleted data, re-index the columns etc. Otherwise you keep all the junk data mixed in with your real data.

In SQLite is the statement to do this called VACUUM;.

$ for f in ~/.mozilla/firefox/*/*.sqlite; do sqlite3 $f 'VACUUM;'; done

In my case the above command in terminal effectively cut the size of urlclassifier3.sqlite and places.sqlite to half. Thus saving 20 MB in my memory and Firefox's speed improvement was very noticeable. So have fun with the vacuum cleaner

2) - open firefox
- In the adress bar type in "about:config"
- In the filter bar type in "ipv6"
- Double click "network.dns.disableIPv6" so that the value turns to TRUE
- Restart firefox
This will speed up firefox

or you can try a memory optimisation technique

http://www.thinktechno.com/2008/03/04/4-memory-reduction-tweaks-for-firefox/

Security

2009-02-24T02:05:00.000-08:00

LINUX Firewalls:

LINUX Security Scanners:

LINUX Security:

PGP:

PGP 6.5.8 for Unix

LINUX and Virus:

LINUX scripts and files

2009-02-24T02:04:00.000-08:00

Create NFS Kickstart Installation RedHat ES 3
Create HTTP Kickstart Installation RedHat ES 3
Create bootable Rescue and Kickstart CDROM
LVM
RAID + LVM
rc.firewall
smb.conf
ks.cfg
sysctl.conf
Set Server Key
Set date and time
Kernel Compiling
Install APT to Suse
Useful GRUB commands
Rebuild RPM
Now Date
Install Minimum Fedora
Minimum Fedora RPMS
Outlook - Crossover - /opt/cxoffice/bin/wine rundll32 shell32.dll,Control_RunDLL MLCFG32.CPL
netstat -tupalen
apt-get install kaffeine-mozilla w32codec-all libdvdcss mplayerplug-in
ifconfig eth0:0 192.168.0.99 netmask 255.255.255.0 broadcast 192.168.0.255 up
Name Server
- /etc/named.conf
- /var/named/127.0.0.zone
- /var/named/192.168.0.zone
- /var/named/localhost.zone
- /var/named/local.zone
- /var/named/root.hint

Here are some scripts from the courses. Study carefully scripts before run them.

Bash Shell:

Korn Shell:

SED:

Linux ISO Images

2009-02-24T02:03:00.000-08:00

While there are too many Linux distributions for us to include them all, here are some of the most popular Linux distros, along with their download pages.

CentOS - The Community Enterprise Operating System

CentOS is a distribution based on source RPMs from Red Hat Enterprise Linux (RHEL), and strives to be 100% binary compatible with RHEL.

Our writeup

CentOS download mirrors

Damn Small Linux

Damn Small Linux is a live CD distribution that fits on a business card CD and is light enough to run on a 486 computer with as little as 16MB of RAM.

Our writeup

Damn Small Linux mirrors, BitTorrent

Debian

The Debian distribution and Debian Project are governed by a social contract that requires that OSes produced by Debian will be 100% "free," as determined by the Debian Free Software Guidelines (DFSG).

Our writeup

Debian download page

Fedora

Fedora, formerly known as Fedora Core, is a Linux distribution sponsored primarily by Red Hat, with significant community participation. The Fedora Linux distro produced by the Fedora Project was based on the original Red Hat Linux distribution and is made up entirely of free and open source software.

Our writeup

Fedora mirrors, BitTorrent
Note that the Fedora Project produces several "spins," including live CDs, DVDs containing the full set of Fedora packages, and boot ISOs for Internet installations of Fedora. See the installation guide to figure out which version of Fedora is right for you.

Freespire

Freespire is the community-oriented version of Linspire.

Our writeup

Freespire download, BitTorrent

Gentoo

Gentoo is a source-based distribution, meaning all of its programs can be compiled from source code rather than installed as binary packages. That makes it highly configurable. Because the operating system and all of its applications can be compiled for the specific machine architecture it's installed on, Gentoo can perform extremely well. Gentoo is available for at least eight 32- and 64-bit hardware platforms. The distribution is more complicated to install than many others, but an active user community can help those who wish to tackle it.

Gentoo uses a package system called Portage that resembles FreeBSD's Ports. It lets you quickly install more than 10,000 pre-built applications.

Our writeup

Gentoo download page

Knoppix

Knoppix is one of the most popular live CD Linux distros.

Our writeup

Knoppix mirror network, BitTorrent, eMule

Linspire

Linspire is an Ubuntu-based distribution whose chief distiguishing feature is the ease of installing new software with its Click-N-Run (CNR) installation utility. While Linspire costs $50, its sibling Freespire is free.

Our writeup

Linspire purchase page

Linux Mint

Linux Mint is an Ubuntu-based distribution that comes in two main CD versions. The Light Edition avoids non-free patented software. The Full Edition includes proprietary plugins and codecs. Both use the GNOME desktop environment by default. You can also download a KDE Community Edition DVD or miniKDE Community Edition CD, or an XFCE Community Edition CD.

Download page

Mandriva Linux

Mandriva Linux, formerly known as MandrakeLinux, is an RPM-based distro that was originally designed to be binary compatible with Red Hat Linux. Mandriva produces versions of its Linux distribution for consumer desktops, corporate servers, and for high performance clusters. Some, but not all, versions of Mandriva are free to download.

Our writeup

Mandriva download page

openSUSE

The openSUSE project is sponsored by Novell to create a base for the SUSE Linux distribution it sells and supports. The openSUSE distribution is worked on by Novell employees and community members, and is suitable for desktop and server use.

You can find openSUSE downloads at download.opensuse.org, but it may be a little confusing. The project offers multiple ISOs for CD installation, DVD installation, and network installation. You can also find BitTorrents for the various downloads, and a live DVD. If you're not quite sure what you need, visit the download guide, which explains the release table, and what development versions may be available and how stable they're likely to be.

PCLinuxOS

PCLinuxOS is a popular Linux distribution distributed as a live CD that can be installed to your hard drive. Originally based on Mandriva, PCLinuxOS is now a solid distro in its own right that uses APT and Synaptic to manage packages, and some of the original Mandriva administration tools.

Our writeup

PCLinuxOS download mirrors, BitTorrent

Puppy Linux

Puppy Linux was written from scratch with two goals in mind: speed and ease of use. At boot time the entire system loads into RAM and runs from there, which significantly boosts the system's overall speed, and lets you run Puppy on a diskless workstation or thin client. It downloads in only 90MB, and can run as a live CD. It also comes with a remastering script for creating derivative distros, which other developers have used to build Puppy-based distros (called puplets), including NOP, GrafPup, and EduPup.

Our writeup

Puppy Linux download page

Sabayon Linux

Sabayon Linux is based on Gentoo and supports both i386 and AMD64/EMT64 architectures. It comes in a 4.7GB live DVD release, a Professional version based on the stable branch of Portage, and a 700MB CD Mini version. While Sabayon contains proprietary drivers, free software fans can disable them at boot time.

Our writeup

Sabayon download page

Slackware

Slackware Linux is the world's oldest surviving Linux distribution.

Our writeup

Slackware download page, BitTorrent trackers

Ubuntu

Ubuntu is a popular community-developed Linux distribution for laptops and desktop machines, and is also gaining popularity on servers. Ubuntu is based on Debian GNU/Linux, and also serves as the foundation for several other Linux distributions in its own right.

Our writeup

Ubuntu download form, Kubuntu, Xubuntu, and Edubuntu.

Fedora10-Features

2009-02-21T06:03:00.001-08:00

1. AMQP (Advanced Message Queueing Protocol) Infrastructure

This is perhaps one of the biggest package that has been implemented to Fedora 10. You must be wondering about AMQP right? AMQP is a technology that makes it easy to build scalable,high-performance enterprise application. Its primary aim is to create an open standard for messaging in order to create open and interoperable messaging. Though the application is not visible to you and as an user you can always question why is it so important, I have some use cases for you who will benefit from AMQP enormously!

Reliably deliver value bearing messages (fire and forget; you can absolutely trust AMQP to get the message to its destination once receipt is acknowledged by the transport)
Rapidly deliver status events to a large community (publish sub-event notification)
File transfer (secure, can be resumed, firewall friendly, and dependable)

I hope now you know about the efficiency of AMQP.

2. Better Printing

Printing and configuring the print set up has always been a problem with open desktops. And Fedora 10 has improved upon just that.

The configuration tool window is simpler. Double-clicking on a printer opens a properties dialog.
The list of printers are updated dynamically while the configuration tool is working.
You can see an individual printer's job by right clicking and then selecting View Print Queue. Again, you can see all the queued up jobs from all the printers by right clicking on any free space in the folder where you have printers' icons.
A diagnose button is there as a troubleshooter if at all your printer gets into trouble.
Job monitoring tool is also there to display an authentication dialog so that the job can proceed.

So you see there are a lot of subtle facilities that Fedora 10 offers to make your printing experience better.

3. Better and Faster Startup

Fedora 10 developers have intended to make this operating system look shiny and glittery right from when it starts so to do this they are getting rid of RHGB and writing a new program, Plymouth, that starts earlier (even before / is mounted!) and gets pretty graphics. But Systems without driver supports also have a text mode fallback as an alternative.

That might make you a little suspicious about the speed of shutting down and starting up. But don't worry, Fedora 10 has improved and fast start up now. And they say 30 seconds is all it will take. So happy?

4. Better Remote Support

Fedora becomes easier to use in media-center scenarios where a remote control may come handy. With better LIRC support that helps it easy to connect to remote controls, infra red remote controls will be just fine to work with media applications.

5. Improved PulseAudio

The PulseAudio sound server has been rewritten to use timer-based audio scheduling. With this one Fedora 10 comes at par with Apple and Windows Vista. The main benefits that you are gonna get from this is,

Less wakeups, reduced power consumption
Dynamic latency adaption with flexible options.
Less dependent on audio hardware
Minimized chance of drop outs

6. First Aid Kit

Well the name may seem funny but it is an automated recovery tool that brings together common recovery processes and applies them to a system. It is more of a plug-in that focuses on focusing on maintaining user data integrity and lets you revert the faulty changes. So that makes it easier for users to rescue their systems in case of problems. You can either choose Fix whatever is wrong with my system which works as a comprehensive chkdsk or you can select specific process.

7. Kernel Modes Sharing for Graphics

The title itself may disinterest you. But believe me it is not. In words of Fedora

Currently, most graphics modes are initialized during the X server startup. Kernel Modesetting moves this process from the X server's DDX drivers to the kernel, and it enables several new features including:

Improved Graphical Boot
Faster fast user switching
Seamless X server switching
Graphical panic messages

So basically fast user switching will be faster and smoother, making Fedora more pleasant for non-technical and casual users. Memory management will be better over all.

8. Remote Virtual Settings

It is another very important feature of Fedora 10. Its more than what meets the eye. This feature enables creating virtual machines on properly configured remote hosts. In other words, users will no longer need to log into individual machines to provision VMs. The system of adding remote connections to virtual manager will be fully automated through polling for connections on the local network.

9. Security Audit

A new security audit system and intrusion detection system will be there. sectool is a security tool that can be used both as a security audit as well as a part of an intrusion detection system. Advanced users can also see the documentation and logs of those test and can use as scripts to repair holes. This is something we will need from Fedora 10 and we hope that it is efficient.

10. Virtual Storage

If you remember, libvirt was introduced by Fedora 8 and became a hit. Here you will no longer eed to directly login to a server providing virtualization capabilities. All common management tasks can be completed remotely using virt-manager. The test plan includes creating a new guest OS and associate it with some storage. It is fabulous, no?

Goodies for Developers

I had promised at the start that there will be goodies too for developers in this article. Here are three most important features of Fedora 10 which are bound to attract you .

1. Appliance Tools

Tools for building virtual appliances have also been a focus for Fedora 10. This consists of an ACT (Appliance Creation Tool) and and the AOS (The Appliance Operating System). Let me quote Fedora here once again

ACT (Appliance Creation Tool)

Enables you to build a fedora based appliance.
Enables you to build a pre-installed multi partitioned disk! that is great!

AOS (The Appliance Operating System)

Provides a template for developers who want to build a fedora based appliance.
Provides a customized OS. I mean, you can start from the least resources (the minimum of what an OS needs, remember Just Enough from ubuntu?) and add whatever you want. This is really flexible from Fedora.
It also allows developers to kick the tires of the AOS without having to build it from scratch.

2. NetBeans IDE

Are you a developer? Then I don't really need to give a formal introduction to the topic here. Fedora 10 users Netbeans for two ways basically.

Easy and rapid way to organize environment for development of systems that can be based on modern technologies and popular programming languages.
a way for development of applications based on the NetBeans Platform. All the tools required for development of the Rich Client Swing Applications are included in the IDE.

3. Eclipse 3.4

Eclipse is said to be one of the most influential work-areas in Linux distributions. So this time developers have kept that in mind and tried to make Eclipse is fast as possible for compiling Java code in the future. As well, a new feature called Plug-in Spy has been added which is a useful tool for plug-in developers to determine what plug-in supplies a selection class. I hope Eclipse 3.4 is as advanced as it is proposed.

ubuntu jaunty-features

2009-02-21T06:01:00.001-08:00

New Features in Jaunty

These features are showcased for your attention. Please test them and report any bugs you find on Launchpad:

http://bugs.launchpad.net/ubuntu

Updated Packages

As with every new release, packages--applications and software of all kinds--are being updated at a rapid pace. For a list of all packages being accepted for 9.04 Jaunty Jackalope, please subscribe to Jaunty-changes:

https://lists.ubuntu.com/mailman/listinfo/jaunty-changes

X.Org server 1.6

The latest X.Org server, version 1.6, is available in Jaunty. In the short term, this will again cause increased instability for some users while the video drivers catch up.

Linux kernel 2.6.28

Alpha 2 includes the 2.6.28-3.4 kernel based on 2.6.28-rc8.

Download Alpha 2

Get it while it's hot. ISOs and torrents are available at:

http://cdimage.ubuntu.com/releases/jaunty/alpha-2/ (Ubuntu)
http://cdimage.ubuntu.com/kubuntu/releases/jaunty/alpha-2/ (Kubuntu)
http://cdimage.ubuntu.com/xubuntu/releases/jaunty/alpha-2/ (Xubuntu)

Install GIMP

2009-02-21T05:58:00.001-08:00

OK. Version 2.6 of GIMP has been released. So here is how to install it on Linux.

openSUSE 11.0

If you want to install GIMP 2.6 on openSUSE 11.0, click the link below:

GIMP 2.6 for openSUSE 11.0

Ubuntu

If you want to install GIMP 2.6 on Ubuntu 8.10 Intrepid, you can add this line to sources.list:

deb http://ppa.launchpad.net/c-korn/ubuntu intrepid main

Then run:
sudo apt-get update sudo apt-get install gimp

If you want to install GIMP 2.6 on Ubuntu 8.04 Hardy, you can download all .deb packages of GIMP from getdeb website. Then install in the following order:


sudo dpkg -i libbabl*.deb
sudo dpkg -i libgegl*.deb
sudo dpkg -i libgimp*.deb
sudo dpkg -i gimp*.deb
sudo dpkg -i gimp-python*.deb
sudo dpkg -i gimp-data*.deb

gimpsvn.sh — Install or update to GIMP 2.5 from SVN on Ubuntu 8.04

2009-02-21T05:57:00.001-08:00

I’ve been wanting to try out GIMP 2.5 for quite some time now, and plenty of other folks are certainly looking forward to the new interface, among other things. In my somewhat limited observations of the GIMP development team, I’ve found that the volunteers who manage the project are what some would call “anal retentive.”

Put the shoe on the other food, and I might be totally off the mark here, but this is the common thread I see:
There are not enough people working on the GIMP. It must not be very sexy to toil away at code forging for the GIMP project, meanwhile Compiz-Fusion, WINE, Ubuntu developers are in the limelight every day with new features and lots of community interaction.

GIMP on the other hand, with limited resources hears the crowd of folks basically asking for a free $600 Photoshop clone. That’s not what the GIMP wants or needs. If you want Photoshop, go buy the damn thing!

One guy even went so far as to fork GIMP by creating GIMPshop which added the main window workspace design that Photoshop uses. People liked it, I used it for awhile myself. Having such a huge carrot hanging in front of their heads is no easy task. And if one of these developers went postal one of these end users asked the same fsckin question the last guy did, I wouldn’t be very surprised.

That said, it looks like fantastic progress is being made on GIMP 2.5, and the interface is fantastic to be putting it mildly. OHHHH it’s so good. Adobe was right, this is the way to do things, much more intuitive as well. Too bad it’s taken over a decade of development to realize this fact.

So what I did was write a bash script to update or install GIMP from SVN, and compile it so that your original 2.4 installed will NOT be touched and can be launched normally using the command “gimp” or “gimp-2.4″

That said, I’ve tested this on two machines. My nearly new install of 8.04 with few extra programs installed. I started the project manually, but then found quite a bit more to just get it all working at once. Trust me folks… if you install 2.5 and you aren’t satisfied, I’ll give you double your money back. That’s a promise.

The only thing I’ve noticed so far is some “weirdness” occurring when trying to run both versions at the same time.

Updates, patches, suggestions to this script are more than welcome. I’ll say that my code not formally licensed, but don’t claim you wrote this or strip the authors section out of the header. I inevitably find you and DMCA you to hell and back if you do, just like those silly CoreAVC guys. PR Stunt for the win!

#!/bin/bash
# gimpsvn.sh — Installs or updates The GIMP from SVN
# Usage: gimpsvn.sh [install | update]
#
# Original instructions by http://www.myscienceisbetter.info/
# Updated instructions by Thai at http://dt.in.th/
# Script by Wayne Richardson at http://fsckin.com/
#
# Takes about 20 minutes on an Intel Core2Quad Q6600 on a fresh install.
# Be patient!
# This uses Wajig, which can easily install reccomended/suggested packages.
# http://en.wikipedia.org/wiki/Wajig
#
# Most recent version is at:
# http://www.fsckin.com/2008/05/07/gimpsvnsh-installs-or-updates-gimp-25-from-svn
#
# Variable(s):
#   makeops -- the number of cores your system has, generally -j(cores+1)
makeops='-j5'

if [ $# -ne 1 ]
then
echo “Specify an command line option: install or update.”
exit 1
fi

if [ "$1" = "install" ]
then
echo Installing Gimp from SVN in 5 seconds, CTRL+C to abort.
sleep 5
sudo mkdir /opt/gimpsvn
sudo mkdir /opt/gimpsvn/lib
sudo mkdir /opt/gimpsvn/lib/pkgconfig
#sudo apt-get update
sudo apt-get install wajig -y
sudo apt-get build-dep gimp -y
sudo wajig installrs gimp -y
sudo apt-get install libavcodec-dev libavcodec1d libavformat1d -y
sudo apt-get install libavformat-dev graphviz graphviz-cairo graphviz-dev -y
sudo apt-get install libfaad-dev libfaac-dev ruby-gnome2 gtk-doc-tools -y
sudo apt-get install subversion automake1.9 asciidoc flex checkinstall -y
export LD_LIBRARY_PATH=/opt/gimpsvn/lib
export PKG_CONFIG_PATH=/opt/gimpsvn/lib/pkgconfig
for i in babl gegl gimp; do svn co http://svn.gnome.org/svn/$i/trunk/ \
$i; cd $i; ./autogen.sh --prefix=/opt/gimpsvn && make $makeops && sudo \
checkinstall; cd ..; done
echo “”
echo “Completed install from SVN into the following location:”
echo “/opt/gimpsvn/bin/gimp-2.5″
exit 1
fi

if [ "$1" = "update" ]
then
echo Updating Gimp from SVN in 5 seconds, CTRL+C to abort.
sleep 5
export LD_LIBRARY_PATH=/opt/gimpsvn/lib
export PKG_CONFIG_PATH=/opt/gimpsvn/lib/pkgconfig
svn co http://svn.gnome.org/svn/gimp/trunk/ gimp
for i in babl gegl gimp; do svn co http://svn.gnome.org/svn/$i/trunk/ \
$i; cd $i; make $makeops && sudo checkinstall; cd ..; done
echo “”
echo “Completed update from SVN into the following location:”
echo “/opt/gimpsvn/bin/gimp-2.5″
exit 1
fi

echo “Specify an command line option: install or update.”
exit 1

VMware server console keyboard problem in Ubuntu Intrepid Ibex

2009-02-21T05:55:00.000-08:00

Few days ago I have upgraded my Ubuntu to latest 8.10 (Intrepid Ibex) and found that keyboard just doesn’t work in VMware Server Console. The problem was that I couldn’t use keyboard under guest operating system including Windows, Linux etc. After few hours of research I found simple solution which works for me:

$ setxkbmap $ echo "xkeymap.nokeycodeMap = true" >> ~/.vmware/config

After this restart vmware-server-console and see if it helps. If not you can see other solutions of the same problem at this site:
http://nthrbldyblg.blogspot.com/2008/06/vmware-and-fubar-keyboard-effect.html

I hope it helps!

P.S. Here are vmware-server-console’s libs I use:

artemn@artemn-laptop:~$ ls -la /usr/lib/vmware-server-console/lib
total 172
drwxr-xr-x 40 root root  4096 2008-12-24 12:56 .
drwxr-xr-x 11 root root  4096 2008-12-24 12:56 ..
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libart_lgpl_2.so.2
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libatk-1.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libatkmm-1.6.so.1
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libcrypto.so.0.9.7
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libexpat.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libfontconfig.so.1
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libfreetype.so.6
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libgcc_s.so.1
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libgdkmm-2.4.so.1
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libgdk_pixbuf-2.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libgdk-x11-2.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libglade-2.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libglib-2.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libglibmm-2.4.so.1
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libglibmm_generate_extra_defs-2.4.so.1
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libgmodule-2.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libgnomecanvas-2.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libgnomecanvasmm-2.6.so.1
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libgobject-2.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libgthread-2.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libgtkmm-2.4.so.1
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libgtk-x11-2.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libpango-1.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libpangoft2-1.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libpangomm-1.4.so.1
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libpangox-1.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libpangoxft-1.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libpng12.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 librsvg-2.so.2
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libsexymm.so.1
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libsexy.so.1
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libsigc-2.0.so.0
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libssl.so.0.9.7
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libstdc++.so.5
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libview.so.2
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libXft.so.2
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libxml2.so.2
drwxr-xr-x  2 root root  4096 2008-12-24 12:56 libXrender.so.1
-r-xr-xr-x  1 root root 10173 2008-12-24 12:56 wrapper-gtk24.sh

Happy hacking

2009-02-21T05:53:00.000-08:00

HHowto: Install the Latest wine in Ubuntu Intrepid!

2009-02-21T05:50:00.001-08:00

Previously I made this howto for Ubuntu Hardy, here is an updated post for Intrepid
Here is a quick way to add the winehq repository so you dont need to wait for the ubuntu community to add the latest wine.
Open up a terminal Applications->Accessories->Terminal
Now copy/paste these commands:
Adding the gpg apt key:
wget -q http://wine.budgetdedicated.com/apt/387EE263.gpg -O- | sudo apt-key add -
Lets add the Repository via wget:
sudo wget http://wine.budgetdedicated.com/apt/sources.list.d/intrepid.list -O /etc/apt/sources.list.d/winehq.list
Now lets update our apt sources and install the latest wine!
sudo apt-get update ; sudo apt-get install wine
Ok now you will always have the latest development wine package installed!

Howto: Upgrade to Jaunty Jackalope

2009-02-21T05:49:00.000-08:00

aunty Jackalope is currently in the Alpha 2 phase as of this post, you can follow the development release schedule here

To upgrade simply Press ALT-F2, and type in update-manager -d

A message will appear informing you of the availability of the new release.

Click upgrade.

Just a note, since this is alpha it isn't suggested to run on Production machines. Run it only if you care about bleeding edge software and don't care about system crashes and your confident your data is backed up safely.

I personally use a separate /home partition so I don't loose my valuable data, you can use the site search on this site to find information on that as well :)

ubuntu 8.10

2009-02-21T05:47:00.000-08:00

Installation & Upgrade

I have Ubuntu installed on two computers. On the first, there is a fresh installation and the second has an upgrade of previous version.

Upgrading has always been connected with a certain risk of failure. I have often encountered the situation where a system did not start after attempting an upgrade. It was exactly the opposite this time. The newest Ubuntu loaded even few seconds faster the previous one.
The minor flaw is that one needs to download almost 1Gb of packages which takes a lot of time.

The installation routine of Ubuntu 8.10 looks almost the same as of the previous version. The only innovation is a refreshed and colourful partition manager. The new appearance of it should make this highly liked by newbies, as it makes partitioning far more pleasant.

New apps

There are no new applications in Ubuntu 8.10. As indicated earlier, improving the already available applications and services was the main goal. So, as far as improvements in the apps are concerned, there are dozens of them.

One of interesting changes is new versin of NetworkManager which includes the long awaited support of 3G networks. Nautilius is now equipped with tabs support, just like internet browsers such as Firefox. Furthermore the newer versions of popular apps such as GIMP or OpenOffice.org can be found in the system (although OpenOffice.org 3.0 didn’t make it into Ubuntu 8.10).

Guest account

Introduction of a guest account in Ubuntu is in my opinion a perfect decision. It highly influences the safety level or the system. Almost everyone has at least once made his computer available to his family or friends. Any user who is logged in at the moment has the access to all the users personal data, including browser history. Very often, in the case when the browser remembers the passwords and cookies, logging on the internet services’ accounts is possible, including mail accounts.

The guest account helps to prevent the risk, and limit the functionality of the system to the minimum for temporary users. The restrictions are really strong as the guest has almost no rights. What is interesting, the guest account is not able to save any files on the hard drive permanently, as the guest account is tempory, and is fully erased after logging out.

Encryption of home directory

Another interesting function which positively influences the safety of the system is the encryption of the home directory. Only the specific user gains access to this folder. It is a long awaited function. One does not need to install TrueCrypt any more, however the inbuilt ciphering functions will not satisfy all the privacy freaks

New theme

Although many users will not see any difference in the default appearance of the system, huge progress was done on this field. A darker theme has been simultaneously developed with the default one. It is installed with the system and can be set in the appearance menu. The darker theme should positively influence not only the aesthetic qualities, but should also reduce eye strain by not having to look at bright surfaces.

Convenient details

The Ubuntu (or GNOME?) teams are still touching up the interface of the system. A new function will be available after installation of Ubuntu 8.10 called: “change system status”. This sounds weird but all it does is changing the status in several messengers at once, thanks to the redesigned switch off menu.

Summary

In my opinion, the decision to focus on the evolution and bug fixes instead of stuffing too many (often unstable) packages into this release of Ubuntu, is a correct one. After over two weeks of using Ubuntu Intrepid Ibex I can state it is a carefully prepared and stable system. It is difficult to find any bugs in it, which is a novelty, as far as previous versions are concerned. Thanks to a new kernel, Intrepid is able to manage majority of hardware, which demolishes another argument (myth) of Linux opponents and makes Ubuntu a perfect system for computer novices.

Ubuntu 9.04 Jaunty Jackalope

2009-02-21T05:44:00.000-08:00

With the April 23 release date getting ever closer, I decided to test Alpha 4 of Ubuntu 9.04 — code-named Jaunty Jackalope – to get a feel for the forthcoming operating system.

Canonical’s promise to deliver “the absolute latest and greatest software the Open Source Community has to offer” with just a six month development cycle has seen them take some bold risks with previous releases.

One controversial example involves Ubuntu 8.04, a supposed ‘Long Term Support’ release that shipped with a beta version of Firefox 3.

Still Aggressive

A look at Jaunty’s feature list shows the Ubuntu developers are not going conservative on us just yet.

The latest 1.6 version of the X.Org server, Ubuntu’s fundamental graphics subsystem will be included. When this was added to Jaunty during the development phase, hardware vendors were yet to release compatible graphics card drivers. A driver from NVIDIA was added only a fortnight ago and a driver for ATI graphics cards is still not available, leaving ATI users unable to use desktop effects. On my test installation with the new NVIDIA graphics drivers enabled, the system hung after login so there is still a way to go before they are ready for release.

Jaunty will include Linux kernel 2.6.28, the latest stable kernel allowing Ubuntu to run on more recent hardware than before. This is the first kernel with full support for the new EXT4 filesystem, a faster and more reliable version of the EXT3 filesystem that Ubuntu uses as its default. EXT3 will still be used as the default filesystem until version 9.10 is released in October but Jaunty’s installer will now allow you to select EXT4, or if you are going to upgrade to Jaunty from a previous Ubuntu version you can easily convert your existing EXT3 filesystem to EXT4 with just a few simple commands to benefit from the increased performance.

Built for Speed

The first thing that struck me after booting into Jaunty was its speed. This fresh installation of Jaunty Alpha 4 booted in just 23 seconds, that is more than twice as fast as Intrepid and remember - this is still an alpha version, so expect the final release to be quicker still.

The only other thing that indicated something had changed was that all the font sizes were too big. A search through the Ubuntu site showed this was in fact due to a new “feature” called Font Size Optimization. This feature is supposed to read the capabilities of your monitor and then set the font dot-per-inch setting to what your monitor reports. Of course, if your monitor reports the wrong dpi like mine did, you end up with huge fonts and a claustrophobic desktop.

What was wrong with leaving this setting at the default 96 dpi? The average user is not going to be able to successfully find the setting that changes this back and therefore will just assume that Ubuntu looks ugly because the fonts are too large.

One other feature touted for Jaunty (and championed by Canonical chief Mark Shuttleworth on his personal blog) is better management of notifications.

However, far from Shuttleworth’s elegant mockup all I could see was a preference option that lets you specify where notifications appear on screen and an option to hide notifications when I connect to my wireless network, looks like we won’t see any major changes to notifications until a future release.

As long as the issues with the graphics drivers are ironed out, I believe Jaunty Jackalope will become another must-have upgrade and if you are smart and install using EXT4, you will see some very real performance increases for very little effort. Just hope your monitor was designed properly or you will be left with an ugly desktop.

Gnome -Do

2009-02-21T05:30:00.000-08:00

A powerful, speedy, and sexy remote control for your GNOME Desktop.

Oh, and it’s powerful, speedy, and sexy on other GNU/Linux desktop environments, too!

GNOME Do allows you to quickly search for many items present in your GNOME desktop environment (applications, Evolution contacts, Firefox bookmarks, files, artists and albums in Rhythmbox, Pidgin buddies) and perform commonly used actions on those objects (Run, Open, Email, Chat, Play, etc.).

GNOME Do uses the keybinding Super-space to activate. This can be changed in Configuration Editor.

* Main website: http://do.davebsd.com/

* Documentation: https://wiki.ubuntu.com/GnomeDo (please add to this!)

* Mailing list: http://groups.google.com/group/gnome-do/

* IRC: #gnome-do on irc.freenode.net* Video tutorial: http://video.google.com/videoplay?docid=-9110909248380195562&hl=en

* You can find installation instructions at https://wiki.ubuntu.com/GnomeDo/Installation

* Launchpad: https://launchpad.net/do

List of best Linux blogs

2009-02-21T05:24:00.000-08:00

UbuntuHQ Great site where you find a good collection of Ubuntu news, and posts, from other blogs.
ubuntublog Good Ubuntu blog, with lots of good Ubuntu stuff, sadly it stopped in September this year
PolishLinux This is a great Linux site, it has really good stuff, and great content
LinuxHelp Good site with great stuff, frequently updated.
UbuntuEssentials Frequently updated Ubuntu Site
Ubuntu-Unleashed Another good site with great stuff about Ubuntu Linux
HowToGeek Great How to site, not only for Linux but its Linux section is great!.
LinuxScrew good site which is coming real popular these days, with great articles.
Fsckin Frequently updated Linux site, great tutorials, and good posts about games for Linux.
ArsGeek Not only a Linux site, but with a great Linux section.
Ubuntu Geek All about Ubuntu, from a real Geek
BashCuresCancer Site devoted to command Line, unfortunately not too frequently updated
Phorolinux Really good tutorials about Linux.
http://www.linux-gamers.net/ For Linux games, how tos, forums, etc. about Video Cards, and Games.
http://www.madpenguin.org/cms/ Madpenguin, News, forums, about Linux
Ars Technica Open Ended section: http://arstechnica.com/journals/linux.ars
DesktopLinux: http://www.desktoplinux.com/
GNOME Footnotes: http://gnomedesktop.org/
Phoronix: http://www.phoronix.com/ (lots of good Linux stories)
http://www.debuntu.org Debuntu
http://tweako.com/section/ubuntu Tweako ubuntu
http://www.ubuntux.org Ubuntux
http://gaming.gwos.org Ubuntu Gamers Arena
http://freshubuntu.org/ Fresh ubuntu
http://www.markshuttleworth.com mark shuttleworth's blog
http://onlyubuntu.blogspot.com only ubuntu
http://ubuntuos.com ubuntu os
http://ubuntudemon.wordpress.com ubuntu demon
http://ubuntu.philipcasey.com ubuntu learner
http://xubuntu.wordpress.com xubuntu blog
http://www.ubustu.com/ the ubuntu feed
http://simplyubuntu.wordpress.com simply ubuntu
http://ubuntuliving.blogspot.com ubuntu living
http://allaboutubuntu.wordpress.com all about ubuntu
http://ubuntuheaven.blogspot.com ubuntu heaven
http://ubuntufan.wordpress.com ubuntu fan
http://ubuntulinux.or.id/blog/ id ubuntu blogs
http://ubuntology.com ubuntology
http://thedailyubuntu.blogspot.com/ the daily ubuntu
http://ubuntufs.wordpress.com ubuntu fs
http://ralph.n3rds.net ralph's ubuntu linux blog
http://www.ubufied.com ubufied
http://planet.gnome.org planet gnome [same as planet kde]
http://planetkde.org planet kde [links to TONS of other blogs]
http://happypenguin.org happy penguin linux gaming
http://www.nuxified.org nuxified
http://www.linuxreality.com linux reality podcasts
http://www.tuxmagazine.com tux online magazine
http://linux.byexamples.com linux by examples
http://www.fsckin.com fscking with linux
http://www.linux-watch.com linux watch
http://www.linuxtavern.com linux tavern
http://www.linuxwins.com linux wins
http://www.oreillynet.com oreilly network
http://linuxtracker.org linux tracker
http://lwn.net/ lwn
http://www.tuxme.com tuxme
http://pimpyourlinux.com pimp your linux
http://www.geekreviewed.com/ [geeky blog w/ linux category]
http://www.osdir.com os dir
http://blog.mandriva.com mandriva blog
http://kerneltrap.org kernel trap [linux kernel news]
http://www.linuxsecurity.com linux security news
http://fullcirclemagazine.org *buntu blog [3 major buntus]
http://boycottnovell.com boycottnovell
http://radio.linuxquestions.org linux questions
http://talkaboutlinux.com talk about linux
http://linuxondesktop.blogspot.com linux on desktop
http://www.jonobacon.org ubuntu/myth tv linux blog
http://kmandla.wordpress.com K.Mandla’s linux blog
http://joey.ubuntu-rocks.org/blog ubuntu rocks
http://fslog.com free software blog
http://thetuxproject.com the tux project
http://savvygeek.com savvy geek
http://bapoumba.wordpress.com a linux blog
http://linuxpoison.blogspot.com linux poison blog
http://lindesk.com
http://alinuxblog.wordpress.com

HowTo use .htaccess file for Apache authentication

2009-02-21T01:36:00.000-08:00

1. Create the directory you want to password protect (example: nikesh)

2. Create a file /var/www/html/nikesh/.htaccess in that director that looks something like this:

AuthName “Add your login message here.”
AuthType Basic
AuthUserFile /etc/apache/.htpasswd
AuthGroupFile /dev/null
require user name-of-user

In this case the “name-of-user” is the login name you wish to use for accessing the web site.

3. In apache configuration file, change the AllowOverride to AuthConfig for the directory that you wan to protect with password.

AllowOverride AuthConfig

3. Create the password file /etc/apache/.htpasswd using the program htpasswd:

# htpasswd -c .htpasswd name-of-user

Read Man page: htpasswd

Opensource load balancing Software

2009-02-21T01:34:00.001-08:00

Linux Virtual Server
The Linux Virtual Server Project is a project to cluster many real servers together into a highly available, high-performance virtual server. The LVS load balancer handles connections from clients and passes them on the the real servers (so-called Layer 4 switching) and can virtualize almost any TCP or UDP service, like HTTP, HTTPS, NNTP, FTP, DNS, ssh, POP3, IMAP4, SMTP, etc. It is fully transparent to the client accessing the virtual service.
Homepage: http://www.LinuxVirtualServer.org/

BalanceNG
BalanceNG is a modern software IP load balancing solution. It is small, fast, and easy to use and setup. It offers session persistence, different distribution methods (Round Robin, Random, Weighted Random, Least Session, Least Bandwidth, Hash, Agent, and Randomized Agent) and a customizable UDP health check agent in source code. It supports VRRP to set up high availability configurations on multiple nodes. It supports SNMP, integrating the BALANCENG-MIB with Net-SNMPD. It implements a very fast in-memory IP-to-location database, allowing powerful location-based server load-balancing.
Homepage:http://www.inlab.de/balanceng/

HAproxy
HAproxy is a high-performance and highly-robust TCP and HTTP load balancer which provides cookie-based persistence, content-based switching, advanced traffic regulation with surge protection, automatic failover, run-time regex-based header control, Web-based reporting, advanced logging to help trouble-shooting buggy applications and/or networks, and a few other features. Its own event-driven state machine achieves 20,000 hits per second and surpasses GigaEthernet on modern hardware, even with tens of thousands of simultaneous connections.
Homepage:http://haproxy.1wt.eu/

Pen
Pen is a load balancer for "simple" TCP-based protocols such as HTTP or SMTP. It allows several servers to appear as one to the outside. It automatically detects servers that are down and distributes clients among the available servers. This gives high availability and scalable performance.
Homepage:http://siag.nu/pen/

Crossroads Load Balancer
Crossroads is a daemon running in user space, and features extensive configurability, polling of back ends using wake up calls, status reporting, many algorithms to select the 'right' back end for a request (and user-defined algorithms for very special cases), and much more. Crossroads is service-independent: it is usable for any TCP service, such as HTTP(S), SSH, SMTP, and database connections. In the case of HTTP balancing, Crossroads can provide session stickiness for back end processes that need sessions, but aren't session-aware of other back ends. Crossroads can be run as a stand-alone daemon or via inetd.
Homepage:http://crossroads.e-tunity.com/

balance
Balance is a simple but powerful generic TCP proxy with round-robin load balancing and failover mechanisms. Its behavior can be controlled at runtime using a simple command line syntax. Balance supports IPv6 on the listening side, which makes it a very useful tool for IPv6 migration of IPv4 only services and servers.
Homepage:http://www.inlab.de/balance.html

Distributor load balancer
Distributor is a software TCP load balancer. Like other load balancers, it accepts connections and distributes them to an array of back end servers. It is compatible with any standard TCP protocol (HTTP, LDAP, IMAP, etc.) and is also IPv6 compatible. It has many unique and advanced features and a high-performance architecture.
Homepage:http://distributor.sourceforge.net/

Pure Load Balancer
Pure Load Balancer is a high-performance software load balancer for the HTTP and SMTP protocols. It uses an asynchronous non-forking/non-blocking model, and provides fail-over abilities. When a backend server goes down, it automatically removes it from the server pool, and tries to bring it back to life later. Pure Load Balancer has full IPv6 support and works on OpenBSD, NetBSD, FreeBSD and Linux.
Homepage:http://plb.sunsite.dk/

Load Balancer Project
The Load Balancer Project is a tool that allows you to balance requests using clusters of servers. The goal is to achieve high availability load balancing with a simple configuration for the load balancer and the network topology. It leaves the servers untouched so the configuration only resides on the load balancer, and it allows you to manage any type of service via a plugin model design and a transparent proxy feature.
Homepage:http://www.jmcresearch.com/projects/loadbalancer/

mod_athena
mod_athena is an Apache-based application load balancer for large systems. It allows the HTTP server to act as a load balancer either internally to Apache's own mod_proxy (for reverse proxying), or externally to machines querying it. Arbitrary statistics are sent to the engine via a simple GET plus query-string interface, from which it will then make decisions based on chosen algorithms.
Homepage:http://ath.sourceforge.net/

udpbalancer
Udpbalancer is a reverse proxy that sorts UDP requests from your clients to your servers. It may operate in round-robin, volume balance, and load balance modes.
Homepage:http://dev.acts.hu/udpbalancer/

MultiLoad
MultiLoad is a load balancer that redirects HTTP requests to pre-defined servers/locations. It gives the provider a way to balance the traffic and hides the real download location. It allows you to manage different version of each download. It is also a load balancing server extension. You can distribute files on some servers so that a downloaded file can be loaded form different servers. These servers can have different priorities to control the active traffic.
Homepage:http://download.laukien.com

Top OpenSorce Groupware

2009-02-21T01:32:00.000-08:00

eGroupWare (www.egroupware.org)

eGroupWare is many things. It is a very flexible pluggable framework capable of hosting applications like a group calendar, AddressBook, Email, accounting ledger, inventory, and whatever else your can think of. These applications can share a common user store, and a flexible Access Control List (ACL) system to control access and information sharing. At it's core there is the phpgwapi, an API written for php, that provides some very useful functions and tools for developers, including the user store, which has several back ends, database abstraction, and a flexible templating system. Applications are then written using the phpgwapi and phpgw framework to provide web based tools to users.

phpGroupWare (http://www.phpgroupware.org/)

phpGroupWare - formerly known as webdistro - is a multi-user groupware suite written in PHP.

It provides about 50 web-based applications, as there are the Calendar, Addressbook, an advanced Projects manager, Todo List, Notes, Email, Newsgroup- and Headlines Reader, a Filemanager and many more Applications. The calendar supports repeating events and includes alarm functions. The email system supports inline graphics and file attachments.

The system as a whole supports user preferences, themes, user permissions, multi-language support and unser groups. It includes modules to setup and administrate the working environment. The groupware suite is based on an advanced Application Programming Interface (API).

PHProjekt (http://www.phprojekt.com/)

PHProjekt is a modular application for the coordination of group activities and to share informations and document via the web. Components of PHProjekt: Group calendar, project management, time card system, file management, contact manager, mail client and many other modules.

Group-Office (www.sourceforge.net/projects/group-office)

It offers a very wide variety of features that matter. Features you don't need won't be installed. Group-Office stands out when it comes to user friendliness combined with powerfully features. It was developed with the following goals in mind:

Speed
The World Wide Wait bugs us all every day and the critical business applications that Group-Office provides can't be hindered by being slow. Group-Office is specifically designed to perform tasks as quickly as possible.

Simplicity
The Graphical User Interface is designed in a way that everybody intuitively finds the functions they are looking for. Group-Office strives to be as simple as possible without losing functionality.

Modularity
As an ever-changing software product, upgrades should be as painless as possible. This means that good code design is critical. Group-Office is designed in a modular way that makes upgrades easy and painless.

Scalability
Group-Office is designed to be usable for 1 to thousands of users.

WebCollab (http://webcollab.sourceforge.net/)

A collaborative web-based system for projects and project management; WebCollab is easy to use, and encourages users to work together. The software is functionally elegant and secure without being cumbersome for users, or graphically intensive.

The software is ideally suited to tracking multiple projects and innumerable small tasks across an organisation of any size. If you have reminder notes stuck all over your desk, then you need WebCollab!

* Easy to read and intuitive screen layouts. Most users can use WebCollab without training.
* Individual users are assigned rights and permissions. Users can also be put into groups with controlled rights and permissions.
* Projects and tasks progress and approaching deadlines are graphically highlighted.
* Changes are personally highlighted for other users to see.
* Changes and new items can be emailed to affected users.

And the software is based on mature code base:

* WebCollab is fast and stable
* Secure - particular attention has been paid to security. No security scares to date.
* Robust and scalable. Several years of daily production use.

OBM (http://www.obm.org/)

OBM is a groupware, email, LDAP, Windows PDC, CRM, and project management application. It is mainly used as an Exchange or Notes/Domino groupware and mail server replacement, as an LDAP directory, as a Windows PDC, as a contact and customer database, as a project management tool, or as any combination of these functions. It provides groupware (calendars, contacts, and tasks) connectors for Outlook, Thunderbird/Lightning, and PDAs. It supports internationalization and themes. It is highly scalable, and is used by sites from five to many thousands of users.

Teamwork (http://www.twproject.com)

Teamwork is a Web-based groupware for project management. It supplies groupware, issue tracking, cost control, and document and project management features with fine-grained security in a friendly interface. Agile methodologies such SCRUM are supported. Teamwork is easy to integrate with your IT infrastructure. Supports multiple databases (via hibernate), browsers, and languages.

TWiki (http://TWiki.org/)

TWiki is a flexible, powerful, and simple Web based collaboration platform. It is suitable for dynamic intranets and knowledge bases, and for sharing and managing documents and collaborative projects. It resembles a normal Web site, but every page can be changed from a browser. It features automatic link generation, full text search, group authorization, Web forms, reporting, change notification, file attachments, revision control of pages and attachments, a modular templating system with skins, hierarchical navigation based on the topic parenting feature, and more. Plugins can be used to enhance the program and build groupware applications.

Horde Groupware (http://www.horde.org/groupware/)

Horde Groupware is an enterprise ready browser-based collaboration suite. Users can manage and share calendars, contacts, tasks, and notes with the standards compliant components from the Horde Project. Horde Groupware bundles the separately available applications Kronolith, Turba, Nag, and Mnemo. It can be extended with any of the released Horde applications or the Horde modules that are still in development, like a file manager, a bookmark manager, a forum, or a wiki.

LDAP Client Authentication

2009-02-21T01:31:00.000-08:00

This file "/etc/ldap.conf" is the 1st file that has to be modified as this is the file that tells the system which ldap server to authenticate too.

host yourdomain.com
base dc=yourdomain,dc=com
uri ldap://yourdomain.com/
ldap_version 3
rootbinddn cn=Manager,dc=yourdomain,dc=com
scope sub
timelimit 5
bind_timelimit 5
nss_reconnect_tries 2
pam_login_attribute uid
pam_member_attribute gid
pam_password md5
pam_password exop
nss_base_passwd  ou=People,dc=yourdomain,dc=com
nss_base_shadow  ou=People,dc=yourdomain,dc=com

Now we have to add the passwd in this file "/etc/ldap.secret" so that we can authenticate to the ldap server
```
password
```

Now we have to modify this file "/etc/nsswitch.conf"

passwd:         files ldap
group:          files ldap
hosts:          dns ldap
services:   ldap [NOTFOUND=return] files
networks:   ldap [NOTFOUND=return] files
protocols:  ldap [NOTFOUND=return] files
rpc:        ldap [NOTFOUND=return] files
ethers:     ldap [NOTFOUND=return] files
netmasks:   files
bootparams: files
publickey:  files
automount:  files
sendmailvars:   files
netgroup:   ldap [NOTFOUND=return] files

Now it is time to modify the files in /etc/pam.d/ directory.
First file to be modified is "/etc/pam.d/login"

auth	sufficient	pam_ldap.so
account	sufficient	pam_ldap.so
password	sufficient	pam_ldap.so
session	sufficient	pam_ldap.so

auth            requisite       pam_securetty.so
auth            requisite       pam_nologin.so
auth            sufficient      pam_ldap.so
auth            required        pam_unix.so use_first_pass
auth            required        pam_tally.so onerr=succeed file=/var/log/faillog
account         required        pam_access.so
account         required        pam_time.so
account         required        pam_unix.so
account         sufficient      pam_ldap.so
password        sufficient      pam_ldap.so
session         required        pam_mkhomedir.so skel=/etc/skel/ umask=0022
session         required        pam_unix.so
session         required        pam_env.so
session         required        pam_motd.so
session         required        pam_limits.so
session         optional        pam_mail.so dir=/var/spool/mail standard
session         sufficient      pam_ldap.so
session         optional        pam_lastlog.so

Now we modify "/etc/pam.d/shadow"

auth	sufficient	pam_ldap.so
account	sufficient	pam_ldap.so
password	sufficient	pam_ldap.so
session	sufficient	pam_ldap.so

auth            sufficient      pam_rootok.so
auth            required        pam_unix.so
auth            sufficient      pam_ldap.so use_first_pass
account         required        pam_unix.so
account         sufficient      pam_ldap.so
session         required        pam_unix.so
session         sufficient      pam_ldap.so
password        sufficient      pam_ldap.so
password        required        pam_permit.so

Now we modify "/etc/pam.d/passwd"

password

sufficient

pam_ldap.so

password        sufficient      pam_ldap.so
password        required        pam_unix.so shadow nullok

Now we modify "/etc/pam.d/su"

auth	sufficient	pam_ldap.so
account	sufficient	pam_ldap.so
session	sufficient	pam_ldap.so

auth            sufficient      pam_ldap.so
auth            sufficient      pam_rootok.so
auth            required        pam_unix.so use_first_pass
account         sufficient      pam_ldap.so
account         required        pam_unix.so
session         sufficient      pam_ldap.so
session         required        pam_unix.so

Now we modify "/etc/pam.d/sudo"

auth

sufficient

pam_ldap.so

auth            sufficient      pam_ldap.so
auth            required        pam_unix.so use_first_pass
auth            required        pam_nologin.so

In this file "/etc/pam.d/sshd" you have to add 3 entries, one for auth, one for account, and one for session.

auth	sufficient	pam_ldap.so
account	sufficient	pam_ldap.so
password	required	pam_ldap.so

auth            required        pam_nologin.so
auth            sufficient      pam_ldap.so
auth            required        pam_env.so
auth            required        pam_unix.so use_first_pass
account         sufficient      pam_ldap.so
account         required        pam_unix.so
account         required        pam_time.so
password        required        pam_ldap.so
password        required        pam_unix.so
session         required        pam_mkhomedir.so skel=/etc/skel/ umask=0022
session         required        pam_unix_session.so
session         sufficient      pam_ldap.so
session         required        pam_limits.so

Howto open port using iptables

2009-02-21T01:12:00.000-08:00

If you want your machine to respond to requests initiated from elsewhere on the internet, in effect to be a server, you need to open the required ports. To do this properly, you need to know:

1. What service you want to open up?
2. Whether it is a tcp or udp service?
3. What port number(s) it uses?

You may also wish to think about restricting access to certain machines; e.g. if you only want people in the X dept to access the machine.

For example, to enable ssh access to your box from anywhere on campus, you could use something like

iptables -A allowed -p tcp --dport 22 -s 129.2.0.0/16 -j ACCEPT
iptables -A allowed -p udp --dport 22 -s 129.2.0.0/16 -j ACCEPT

iptables -A allowed -p tcp --dport 22 -s 128.8.0.0/16 -j ACCEPT
iptables -A allowed -p udp --dport 22 -s 128.8.0.0/16 -j ACCEPT

This allows both udp and tcp traffic from either of the two class B networks to access port 22 on your machine. Of course, you need to have an sshd daemon running as well for this to work; the code above merely punches the required holes in the firewall.

Block messengers through Iptables

2009-02-21T01:11:00.001-08:00

msn messenger user port 1863
yahoo messenger uses 5000,5010 and 5050

To block AOL IM and ICQ:

# iptables -A FORWARD –dport 5190 -j DROP
# iptables -A FORWARD -d login.oscar.aol.com -j DROP

To block MSN messenger:

# iptables -A FORWARD -p TCP –dport 1863 -j DROP
# iptables -A FORWARD -d 64.4.13.0/24 -j DROP

To block Yahoo messenger:

# iptables -A FORWARD -p TCP –dport 5000:5010 -j REJECT
# iptables -A FORWARD -d cs.yahoo.com -j REJECT
# iptables -A FORWARD -b scsa.yahoo.com -j REJECT

Note that this will only block clients on the computer itself. If you are using the computer as a router with NAT, you will want to use “-t nat -A PREROUTING” instead.

Squid Password Authentication Using NCSA

2009-02-21T01:08:00.000-08:00

You can configure Squid to prompt users for a username and password. Squid comes with a program called ncsa_auth that reads any NCSA-compliant encrypted password file.

1) Create the password file. The name of the password file should be /etc/squid/squid_passwd, and you need to make sure that it’s universally readable.

# touch /etc/squid/squid_passwd
# chmod o+r /etc/squid/squid_passwd

2) Use the htpasswd program to add users to the password file. You can add users at anytime without having to restart Squid. In this case, you add a username called nikesh:

# htpasswd /etc/squid/squid_passwd nikeshNew
password:Re-type new password:
Adding password for user nikesh

3) Find your ncsa_auth file using the locate/find command. (different distro stores this file at different locations)

# locate ncsa_auth/usr/lib/squid/ncsa_auth

4) Edit squid.conf; specifically, you need to define the authentication program in squid.conf, which is in this case ncsa_auth. Next, create an ACL named ncsa_users with the REQUIRED keyword that forces Squid to use the NCSA auth_param method you defined previously. Finally, create an http_access entry that allows traffic that matches the ncsa_users ACL entry. Here’s a simple user authentication example; the order of the statements is important:

## Add this to the auth_param section of squid.conf

auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/squid_passwd

# Add this to the bottom of the ACL section of squid.conf
acl ncsa_users proxy_auth REQUIRED

# Add this at the top of the http_access section of squid.conf
http_access allow ncsa_users

Squid Password Authentication Using PAM

2009-02-21T00:25:00.001-08:00

We’ll be using the pam_auth module. This will allow anyone who has a shell account to also be able to use the Squid server. Search for the auth_param section in the config and add these lines:

auth_param basic program /usr/lib/squid/pam_auth
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server

auth_param basic credentialsttl 2 hours

Next search for this line and uncomment it:

acl password proxy_auth REQUIRED

Now create a pam module called /etc/pam.d/squid that contains:

auth required /lib/security/pam_unix.so
account required /lib/security/pam_unix.so

Restart the squid and you are done.

HowTo do Transparent proxy with Squid

2009-02-21T00:13:00.001-08:00

Modify or add following to squid configuration file (/etc/squid/squid.conf):

httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header onacl lan src 192.168.1.1 192.168.2.0/24 http_access allow localhost http_access allow lan
Added following rules to forward all http requests (coming to port 80) to the Squid server port 3128 :

[eth0 connected to internet and eth1 connected to local lan]

iptables -t nat -A PREROUTING -i eth1 -p tcp –-dport 80 -j DNAT –to 192.168.1.1:3128 iptables -t nat -A PREROUTING -i eth0 -p tcp –-dport 80 -j REDIRECT –-to-port 3128

Block mp3, mpg, mpeg, exe files using Squid proxy server

2009-02-21T00:09:00.000-08:00

First open squid.conf file /etc/squid/squid.conf:

# vi /etc/squid/squid.conf

Now add following lines to your squid ACL section:

acl blockfiles urlpath_regex “/etc/squid/multimedia.files.acl”

Now create the the file

# vi /etc/squid/multimedia.files.acl

\.[Ee][Xx][Ee]$ \.[Aa][Vv][Ii]$ \.[Mm][Pp][Gg]$ \.[Mm][Pp][Ee][Gg]$ \.[Mm][Pp]3$

Save and close the file and Restart Squid:

# /etc/init.d/squid restart

How to configure Linux as Internet Gateway

2009-02-20T23:56:00.000-08:00

This tutorial shows how to set up network-address-translation (NAT) on a Linux system with iptables rules so that the system can act as a gateway and provide internet access to multiple hosts on a local network using a single public IP address. This is achieved by rewriting the source and/or destination addresses of IP packets as they pass through the NAT system.

[Note] The location of the files (ifcfg-ethx, network. etc ..) mentioned below might be different in different distribution, check the manuals of your distribution to edit the correct file.

Step by Step Procedure

Step 1. Add 2 Network cards to the Linux box

Step 2. Verify the Network cards, check if they installed properly or not

Step 3. Configure eth0 for Internet with a Public (External network or Internet)
# cat ifcfg-eth0

DEVICE=eth0
BOOTPROTO=none
BROADCAST=xx.xx.xx.255 # Optional Entry
HWADDR=00:50:BA:88:72:D4 # Optional Entry
IPADDR=xx.xx.xx.xx
NETMASK=255.255.255.0 # Provided by the ISP
NETWORK=xx.xx.xx.0 # Optional
ONBOOT=yes
TYPE=Ethernet
USERCTL=no
IPV6INIT=no
PEERDNS=yes
GATEWAY=xx.xx.xx.1 # Provided by the ISP

Step 4. Configure eth1 for LAN with a Private IP (Internal private network)
# cat ifcfg-eth1

BOOTPROTO=none
PEERDNS=yes
HWADDR=00:50:8B:CF:9C:05 # Optional
TYPE=Ethernet
IPV6INIT=no
DEVICE=eth1
NETMASK=255.255.0.0 # Specify based on your requirement
BROADCAST=""
IPADDR=192.168.1.1 # Gateway of the LAN
NETWORK=192.168.0.0 # Optional
USERCTL=no
ONBOOT=yes

Step 5. Host Configuration (Optional)
# cat /etc/hosts
127.0.0.1 nat localhost.localdomain localhost

Step 6. Gateway Configuration
# cat /etc/sysconfig/network

NETWORKING=yes
HOSTNAME=nat
GATEWAY=xx.xx.xx.1 # Internet Gateway, provided by the ISP

Step 7. DNS Configuration
# cat /etc/resolv.conf

nameserver 208.67.222.222 # Primary DNS Server provided by the ISP
nameserver 208.67.220.220 # Secondary DNS Server provided by the ISP

Step 8. NAT configuration with IP Tables
First of all you have to flush and delete existing firewall rules. So flush rules by typing in terminal:

iptables -F
iptables -t nat -F
iptables -t mangle -F

Now delete these chains:

iptables -X
iptables -t nat -X
iptables -t mangle -X

# Set up IP FORWARDing and Masquerading

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -A FORWARD -i eth1 -j ACCEPT

# Enables packet forwarding by kernel (save this setting in /etc/sysctl.conf file)

echo 1 > /proc/sys/net/ipv4/ip_forward

#Apply the configuration

service iptables save
service iptables restart

# Check if iptables is set to start during boot up

chkconfig –list iptables

Step 9. Testing
Ping the Gateway of the network from client system: ping 192.168.2.1
Try it on your client systems: ping google.com

Configuring PCs on the network (Clients)
All PC's on the private office network should set their "gateway" to be the local private network IP address of the Linux gateway computer.
The DNS should be set to that of the ISP on the internet.

Windows 2000, XP, Configuration:
Select "Start" + Settings" + "Control Panel"
Select the "Network" icon
Select the tab "Configuration" and double click the component "TCP/IP" for the ethernet card. (NOT the TCP/IP -> Dial-Up Adapter)

Select the tabs:
"Gateway": Use the internal network IP address of the Linux box. (192.168.1.1)
"DNS Configuration": Use the IP addresses of the ISP Domain Name Servers.
"IP Address": The IP address (192.168.XXX.XXX - static) and netmask (typically 255.255.0.0 for a small local office network) of the PC can also be set here.