- main - earth.li

Which way of using rsync will be faster?
by Chris G 07 Jan '10

07 Jan '10

I'm using rsync to copy some files across my LAN. There are various ways I can do this and I'd like to know which is likely to be fastest. The (most obvious) ways I can see of doing it are:- 1 - Run rxvt in conventional fashion across the network to the remote system, e.g. with syntax like:- rxvt -a /thisDir/ thatSystem:/thatDir/ 2 - Use the (already mounted) NFS mount of the remote system and, from rxvt's point of view copy locally:- rxvt -a /thisDir/ /mnt/thatDir/ 3 - sshfs? Doesn't really seem a very sensible candidate. My *guess* is that probably option 1 is best but I'm not really sure. The object is more to minimise system load (and network load) than to get the absolute best speed. The copies (backups) will likely run when I'm using the system so I want them not to overload things too much. -- Chris Green

4 9

Ipswich ALUG Christmas Meal
by samwise 05 Jan '10

05 Jan '10

Final reminder for Adam R, Steve F, David D, Peter T, Keith J and Sean M - the Ipswich ALUG Christmas Meal is tonight. Meet in McGinty's at 19:30 or at the restaurant at 20:00 this evening. Mr Wing 7 St. Helens Street Ipswich IP4 1HE Tel: 01473 212885 WWW: http://www.misterwing.co.uk/ Map URL: http://maps.google.co.uk/maps?q=mr.+wings+ipswich Cheers, Peter.

1 0

Cannot empty trash
by Mark Rogers 05 Jan '10

05 Jan '10

On my Ubuntu 9.10 desktop, I have the trash applet in my Gnome taskbar and it says I have 2 items in trash if I hover my mouse over it. If I open the trash, there's nothing there. If I select the "empty deleted items folder" option it has no effect. There is nothing in ~/.local/share/Trash/(files|info|expunged) I'm guessing that something has been deleted on an external or other mounted drive that has since been removed without emptying the trash properly, but I can't see how to clear the trash so that it appears to be empty. Googling just sends me to endless pointers to ~/.local/share/Trash and/or the trash-cli package, neither of which have helped. -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0844 251 1450 Registered in England (0456 0902) @ 13 Clarke Rd, Milton Keynes, MK1 1LG

1 0

Online command line info pages?
by Anthony Anson 04 Jan '10

04 Jan '10

I'd be grateful if someone could point me at a page/pages which give the scripts for commands I can type into a 'terminal', so I can make things happen in this awful Kenvironment. Too hurriedly, I bought 'Command Line & Shell Scripting' - at huge expense, only to disover that a) because what the author really meant by the title was 'Shell Scripting in a ommand Line Environment', b) I can't haggle with Borders about exchanging it, -- Tony Anson www.girolle.co.uk/

6 8

Here I Am
by Simon Royal 03 Jan '10

03 Jan '10

Hi. Well I have just joined the ALUG and I thought I would share a little about myself. I've been into computing for over 17 years, firstly on Windows. I have spent the last 10 years as a hardcore Mac fan, until a few weeks ago when I decided to give Linux a proper try. It has always been something I have played with on and off. I have a Samsung A10 laptop, it is a 1.1Ghz Duron with 1GB RAM dual booting Ubuntu 9.10 and Windows XP Home. I use Ubuntu 99% of the time and only use Windows as a backup just incase. Ubuntu runs like a dream on it and this latest version has the best hardware support I have ever found, it was easier to set up some of my hardware under Ubuntu than it was Mac OSX. Well that is me. I'm not too experienced in Linux but I am learning on a daily basis and loving everything I find. Regards Simon Royal --- Catch me on Twitter: http://twitter.com/SimonRoyal or Skype: Simon-Royal _________________________________________________________________ Have more than one Hotmail account? Link them together to easily access both http://clk.atdmt.com/UKM/go/186394591/direct/01/

2 1

How to find what this /dev/sdc is - I don't have a third disk
by Chris G 03 Jan '10

03 Jan '10

I have been looking at reducing my system's boot-up time and noticed that it seemed to spend quite a lot of time detecting a device called /dev/sdc. I only have two real hard disks on the system, they're /dev/sda and /dev/sdb. However in dmesg I see:- [ 7.681894] usb-storage: device scan complete [ 7.690995] scsi 6:0:0:0: Direct-Access Generic Ultra HS-SD/MMC 1.82 PQ: 0 ANSI: 0 [ 7.691402] sd 6:0:0:0: Attached scsi generic sg3 type 0 [ 7.707729] sd 6:0:0:0: [sdc] Attached SCSI removable disk What is this? I don't have any removable disks that I know about and /dev/sdc doesn't seem to be in any way a usable device. The only USB devices (well, external ones anyway) are a mouse and a scanner. I don't think it's the CD drive either as that seems to be a distinct device:- brw-rw---- 1 root disk 8, 32 2010-01-02 17:39 /dev/sdc brw-rw----+ 1 root cdrom 11, 0 2010-01-02 17:39 /dev/sr0 So who/what/where is /dev/sdc coming from and can I get rid of it somehow so it doesn't wast boot time? -- Chris Green

3 4

VMWare 2.0.2 on Ubuntu 9.10
by Paul Grenyer 02 Jan '10

02 Jan '10

Hi All Thanks for the FTP help. Here's question number 2! I'm trying to install VMWare 2.0.2 on Ubuntu 9.10. I've downloaded and unzipped VMware-server-2.0.2-203138.x86_64.tar.gz and followed the instructions: sudo ./wmware-install.pl I accepted the defaults and the licence and it ran through to the vmware-config.pl bit. Then it fails with: ... /tmp/vmware-config0/vmmon-only/linux/driver.c: In function ‘LinuxDriverSyncCallOnEachCPU’: /tmp/vmware-config0/vmmon-only/linux/driver.c:1423: error: too many arguments to function ‘smp_call_function’ /tmp/vmware-config0/vmmon-only/linux/driver.c: In function ‘LinuxDriver_Ioctl’: /tmp/vmware-config0/vmmon-only/linux/driver.c:1987: error: ‘struct task_struct’ has no member named ‘euid’ /tmp/vmware-config0/vmmon-only/linux/driver.c:1987: error: ‘struct task_struct’ has no member named ‘uid’ /tmp/vmware-config0/vmmon-only/linux/driver.c:1988: error: ‘struct task_struct’ has no member named ‘fsuid’ /tmp/vmware-config0/vmmon-only/linux/driver.c:1988: error: ‘struct task_struct’ has no member named ‘uid’ /tmp/vmware-config0/vmmon-only/linux/driver.c:1989: error: ‘struct task_struct’ has no member named ‘egid’ /tmp/vmware-config0/vmmon-only/linux/driver.c:1989: error: ‘struct task_struct’ has no member named ‘gid’ /tmp/vmware-config0/vmmon-only/linux/driver.c:1990: error: ‘struct task_struct’ has no member named ‘fsgid’ /tmp/vmware-config0/vmmon-only/linux/driver.c:1990: error: ‘struct task_struct’ has no member named ‘gid’ /tmp/vmware-config0/vmmon-only/linux/driver.c:2007: error: too many arguments to function ‘smp_call_function’ make[2]: *** [/tmp/vmware-config0/vmmon-only/linux/driver.o] Error 1 make[1]: *** [_module_/tmp/vmware-config0/vmmon-only] Error 2 make[1]: Leaving directory `/usr/src/linux-headers-2.6.31-16-generic' make: *** [vmmon.ko] Error 2 make: Leaving directory `/tmp/vmware-config0/vmmon-only' Unable to build the vmmon module. For more information on how to troubleshoot module-related problems, please visit our Web site at "http://www.vmware.com/go/unsup-linux-products" and "http://www.vmware.com/go/unsup-linux-tools". Execution aborted. I've checked the vmware website and googled, but none of the suggested solutions I've tried have worked. I'm hoping someone else on this list is running VMWare and can help me out, please? -- Thanks Paul Paul Grenyer e: paul.grenyer(a)gmail.com b: paulgrenyer.blogspot.com

2 4

iwl3945 Wi-Fi broken in Kubuntu 9.10 ?
by Srdjan Todorovic 02 Jan '10

02 Jan '10

Happy New Year everyone! I've got a strange problem where my dad's laptop will sometimes associate with the wifi AP (but never ever get a DHCP response from it) when the laptop's running Kubuntu 9.04 or 9.10. A temporary install of Slackware 13 on the same machine showed that the laptop will associate with the AP and get an IP address very fast and with no problems. My laptop with a wifi device that uses the same driver works perfectly in Slackware 13... Has anyone come across this problem? I've been on the #kubuntu channel today with not much useful help coming from there (understandable as it's New Years). There might be an issue with NetworkManager - that's now been uninstalled and replaced with wicd which seems to help a bit. I was getting lots of "disassociating by local choice reason=3" in dmesg output which is output from the ieee80211 support layer in the kernel. The Kubuntu kernel that was tried also included 2.6.29.6 - which is the kernel that Slackware had. I suspect some weird ubuntu-ism or PEBKAC is at fault, but I'm running out of time to fix this. The commands to reproduce: ifconfig wlan0 up iwconfig wlan0 essid myssid iwconfig wlan0 key s:mykey (yes the real key was correct but I'm not printing here) iwconfig wlan0 ap aa:bb:cc:dd:ee:ff dhclient wlan0 Somewhere after iwconfig key or ap, the wiconfig output lost all the ssid and key and ap settings (if they showed any beforehand). dhclient just sat there broadcasting for a response. Wicd actually helped in the sense that once the GUI was told to connect, the iwconfig settings were set for essid/key/ap and the problem was that the interface could not get a DHCP response. The hardware RFKill switch was set to off (RF allowed). Any ideas please? Thanks, Srdjan

6 10

Eee bah gum
by Anthony Anson 01 Jan '10

01 Jan '10

Have an Eee using Xandros, and a Vodafone mobile internet dongle. If I connect to the internet (3G or GPRS) whatever else I plug into a USB port isn't found in the file system. OTOH, if I plug any other devie in, such as memory stick, SD card, external HDD or CD/DVD drive, any of those will be found, however many there are, even filling a (powered hub), but if I then plug in the dongle, this isn't found. Not being able to transfer files etc onto a memory stick is to say the least, inconvenient. Any suggestions welcomed. (Yes, I'd probably load Ubantu, but without the dongle working, I'm not sure that the driver I've downloaded will work - given I can find the command line string to install it. (See other thread!) -- Tony Anson www.girolle.co.uk/

2 1

command line book and a couple other things
by Peter Alcibiades 01 Jan '10

01 Jan '10

Two things, first, Scott Grannenman's book 'Linux Phrasebook' is a really great introduction to command line, a bit less forbidding and shorter than Linux in a Nutshell, and more pedagogically oriented, lots of examples and when and how to use stuff. Second, I would really like to reply in threads, I realize its very irritating when people do not do this, but how do you do it when receiving only the digest? Is there a nabble or similar page for main as there is for one or two other lists? I've not beein able to find it for this one. Or do I simply have to start getting the messages as they come in and segregate them in the client? Which is kmail, by the way. Incidentally, the printer, which people were kind enough to help with earlier, well, it works! Amazing. It prints out the receipts, and then as if by magic, it operates the cutter, and then equally magically, it opens the cash drawer! The last trick I had to overcome was that ghex for some reason didn't seem to want to make a text file with only hex 7 in it, so I used the far superior bless. And there turned out to be a trick to passing an echo string with quotes in it to the shell from my programming language, you have to do some fairly convoluted things to manage to escape the quotes in the string you want to pass. But hey, it works now, and you will all know that nice feeling you get when, bingo, the bell rings and the drawer opens, just as it should. So thanks. Peter

2 1

USB disk drives
by nev young 01 Jan '10

01 Jan '10

Hi all, Hope every one has had a merry xmas. Does any one know if this[1] 1.5Tb USB disk from Maplins will work on an ubuntu 9.10 machine? If not how could I make it work? I bought a similar one last year and it was not recognised by the PC so I ended up removing the HDD and installing it as an internal drive. Now they're about £30 cheaper than last year and I still need a decent size external drive for backup. I've been to the shop to ask - they don't know and they won't let me try it and return if it doesn't work. I've emailed Maplins tech help - no reply. I've emailed Verbaitum's tech help - no reply. So I thought I'd ask here before I lay out my cash on something else that may not work as intended. TIA Nev [1] http://buy.maplin.co.uk/module.aspx?moduleno=323559

10 18

Introducing Myself
by Paul Grenyer 31 Dec '09

31 Dec '09

Hi All I am Head of Software Engineering at validus (http://www.validus-ivc.co.uk) in Norwich. I recently switched from Windows Vista to Ubuntu 9.10 desktop as more and more of the applications I am running on Windows will run anywhere and I wanted something faster and more stable and also wanted to add a new string to my bow. I've tried to switch to Linux on a number of occasions over the years, but this is the only time I've stuck with it. In fact going back to Windows, as I will have to when I return to work in a week, feels horrible and slow now. I am also moving my hosted webserver to my own webserver at home running Ubuntu 9.10 server. I joined the LUG primarily to try and get some help with some issues I'm having, but I will put those into separate emails. For those of you interested, you can read my blog here: http://paulgrenyer.blogspot.com. -- Thanks Paul Paul Grenyer e: paul.grenyer(a)gmail.com b: paulgrenyer.blogspot.com

5 7

vsftpd and permissions
by Paul Grenyer 31 Dec '09

31 Dec '09

Hi All I've setup an ubuntu 9.10 server at home that I am planning to use instead of the pay for web server I have at the moment. It's the 32bit version running on an old AMD 2.0GHz with 1GB of RAM, that I'm hoping to upgrade to 2GB once I can find some. It's seems pretty nippy at the moment, but it's only running Apache2 and Subversion. You can get up my PHP test page here if you're interested: http://82.69.121.44/phpinfo.php I've installed vsftpd, obviously so that I can transfer files to it easily and although I can move .php files into the /var/www folder, it is of course owned by the www-data user, so the files transfered, when logged in as me, will not execute. After some googling I read that I can configure vsftpd to give the files the right permissions automatically on transfer, but I can't find out how? Also, I cannot delete files via ftp that I transfered onto the server using my user. Can that be rectified with vsftpd configuration too? -- Thanks Paul Paul Grenyer e: paul.grenyer(a)gmail.com b: paulgrenyer.blogspot.com

7 16

A curious Debian clash
by Ted.Harding＠manchester.ac.uk 31 Dec '09

31 Dec '09

Hi Folks, First, Seasons Greetings to all. Now: Recently, on a Debian system which (from the time-stamps on the earliest user files) seems to have been Debian Etch (April 2009, though I have been following the updates), I installed the xfmail MUA which I have habitually used on a much older system. It was hnot available in the Etch repository, so I searched the web and found and used the deb package xfmail_1.5.5-3_i386.deb 17-Jan-2006 22:35 951K and it all seemed to go in; and also, it seems to work. So far so good. Today, however, I wanted to install ffmpeg. First, synaptic tells me that there is a broken package (which is not identified, but on later evidence it seems that it is xfmail). Then, when I search for ffmpeg and mark it for installation, I am told it xfmail will be removed (and that there are other problems). So I turned to apt-get, with the following results: [1] # apt-get install ffmpeg Reading package lists... Done Building dependency tree Reading state information... Done You might want to run 'apt-get -f install' to correct these: The following packages have unmet dependencies. ffmpeg: Depends: libavdevice52 (>= 3:20080706) but it is not going to be installed Depends: libimlib2 but it is not going to be installed xfmail: Depends: libglib1.2 (>= 1.2.0) but it is not installable Depends: libldap2 (>= 2.1.17-1) but it is not installable E: Unmet dependencies. Try 'apt-get -f install' with no packages (or specify a solution). Well, despite what it says about xfmail dependencies, xfmail works! Now to see what "Try 'apt-get -f install' with no packages" gives: [2] # apt-get -f install Reading package lists... Done Building dependency tree Reading state information... Done Correcting dependencies...Done The following packages were automatically installed and are no longer required: libswscale0 libmcrypt4 Use 'apt-get autoremove' to remove them. The following packages will be REMOVED xfmail 0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded. 1 not fully installed or removed. After this operation, 2597kB disk space will be freed. Do you want to continue [Y/n]? n Abort. So it still wants to remove xfmail. So what about the library libimlib2, say, that ffmpeg depends on? [3] # apt-get install libimlib2 Reading package lists... Done Building dependency tree Reading state information... Done You might want to run 'apt-get -f install' to correct these: The following packages have unmet dependencies. xfmail: Depends: libglib1.2 (>= 1.2.0) but it is not installable Depends: libldap2 (>= 2.1.17-1) but it is not installable E: Unmet dependencies. Try 'apt-get -f install' with no packages (or specify a solution). So it still stubs its toes on xfmail, but now without any indication that the installation of libimlib2 (and therefore of ffmpeg) is really interfered with by xfmail. It just seems to want to get xfmail out of the way before it does anything else. I do not want to remove xfmail. So is there a way to persuade apt-get (or any other Debian installation program) to ignore xfmail and get on with what it has been asked to do?!! Or am I misunderstanding the workings? With thanks (and if you solve it you will make my Christmas Happy)! Ted. -------------------------------------------------------------------- E-Mail: (Ted Harding) <Ted.Harding(a)manchester.ac.uk> Fax-to-email: +44 (0)870 094 0861 Date: 25-Dec-09 Time: 21:39:40 ------------------------------ XFMail ------------------------------

2 3

What's the difference (if any) between 'span' and 'JBOD'?
by Chris G 30 Dec '09

30 Dec '09

My Western Digital NAS server offers me (among other RAID formats) both 'span' and 'JBOD'. I thought they were synonyms for the same thing, that is using the disks 'as is' with no RAID processing. If they're different can anyone explain the difference please. -- Chris Green

1 1

sshfs versus just using ssh/rsync
by Chris G 30 Dec '09

30 Dec '09

Is there any difference between the two following strategies for backing up files to a remote system:- 1 Mount the remote destination directory using sshfs/fuser Copy the files to the 'local' directory just mounted using rsync, rdiff-backup or whatever. 2 Copy the files directly to the remote system using rsync or rdiff-backup. Strategy 1 has the significant advantage that the remote system doesn't have to have anything other than ssh available. You don't run into any issues with mismatched versions of rdiff-backup or anything like that. Both strategies require that you set up some form of 'passwordless' login to the remote system or you need to enter the password (or passphrase) when the backup is run. I was thinking that I can run either of these from my .xprofile so that by the time they are run the required passphrase has been entered. I was even thinking that I could run the backup to one remote system from my wife's desktop .xprofile and to the other from my desktop .xprofile so they'd be at different times and to different remote systems, most unlikely to get both damaged at the same time. Only someone breaking into my working X environment would get access to the backups, just breaking into my home systems wouldn't do it. They might of course break into the remote systems I use for backup but then I have my home backups that haven't been compromised. -- Chris Green

4 5

i18n
by Steve 30 Dec '09

30 Dec '09

Seasons Eatings all, I've been playing around with getting my laptop all nice and easy to use in a joint English / Turkish environment. I've got a key combination bound to switching the keyboard layout between GB and TR but when I do so, I lose some (but not all) of the custom keys I had set up with xmodmap. I think what I'm really asking is: has anyone had any experience of working with a dual (or multi) language environment and do you have any nuggets of information or things to look out for? Or even just some cunning xmodmap foo I should be aware of? On an unrelated note, this year marks my 10th anniversary of using linux and I've just been reflecting on how much cooler things seem now. We're a long way from the days of waiting half a day to download the latest kernel, another half a day to compile it, two more days working out how to get the new kernel to support your winmodem and then the fun of hacking X.conf :) More stuff seems to just work these days and it feels a lot more comfortable. Or maybe that's because I've been with it for 10 years. Anyhoo, enough rambling. See some of you for the first pubmeet of 2010 soon :D Steve

2 1

Some success with seahorse and gnome-keyring-daemon at last
by Chris G 30 Dec '09

30 Dec '09

Well, after searching and asking and digging around in the code I have finally got things working as I believe they should work. That is I have a default keyring being automatically opened for me when I log in. It took me a while because firstly there isn't much documentation telling you how you're supposed to use it and secondly because (in xubuntu 9.10 at least) it's broken so it doesn't work even if you do things right. There are two problems:- 1 - By default ssh-agent gets started as well as gnome-keyring-daemon, as they're both trying to do the same thing this isn't a good idea. I've stopped ssh-agent being started automatically by deleting the use-ssh-agent line from /etc/X11/Xsession.options. I'm sure there should be a GUI way of changing this but I don't know what it is. 2 - Although gnome-keyring-daemon is started automatically it isn't set up to listen on the ssh socket. To fix this I have added the following to my .xprofile:- eval $(gnome-keyring-daemon --start) export SSH_AUTH_SOCK export GNOME_KEYRING_SOCKET This second is definitely a bodge but at least it gets things working, there are several bugs reported around this area in more than one linux distribution - in fact that's how I eventually found out how to sort it out. So, now my login password is *also* used to unlock the default keyring and ssh can interrogate that keyring to get my private key to log in to other systems. .... and it really is just about passwordless, or at least I don't have to enter any more passwords after login, but my private keys are kept reasonably safe. I suppose having my login password the same as my key passphrase is a bit less than perfect but this is only for connections going outwards from my home system so isn't very critical really. Now I'm off to those external systems to make them a bit more secure as regards logging into the home system. It's a pity there aren't any 'hooks' in ssh-agent and login that would allow you to do the same for direct ssh logins as happens with Gnome/KDE, then you could do the same sort of thing and enter only one password for connecting onwards. -- Chris Green

4 6

Efficient power supplies - especially at very low powers - suppliers?
by Chris G 30 Dec '09

30 Dec '09

While this isn't particularly Linux related it is PC related and I'd guess some people here may be knowledgeable in this area. I'm trying to cut down my PCs' power consumption, one way has been to offload 'server' functions from my desktop machine to a much lower power server machine. That's now done and I'm looking at other ways to reduce power consumption. I've been looking at the power consumption of my desktop machine and noticed that when in standby it consumes about 20 watts. So I checked how much it consumed when powered down completely (but still conencted) and it *still* consumed 20 watts. I.e. the power supply and motherboard even when completely idle take 20 watts. I suspect that this is mostly power supply losses. When powered up, even though it's quite a fast machine (quad core processor, 8Gb of memory, two big disk drives) it only takes 50 watts so the power supply isn't all that inefficient when it's working. So how can I search for power supplies that don't take much power when completely idle? Typical 'efficient' 300 watt and 400 watt power supplies are better than 80% efficient but that means they may well still consume 20 watts when doing nothing. Efficiency *doesn't* necessarily equate to low 'off' power. -- Chris Green

3 4

Re: [ALUG] Windows software for managing remote Linux SVN server?
by Srdjan Todorovic 21 Dec '09

21 Dec '09

On 18/12/2009, mick <mbm(a)rlogin.net> wrote: > On Thu, 17 Dec 2009 11:32:32 +0000 > Srdjan Todorovic <todorovic.s(a)googlemail.com> allegedly wrote: > >> Hi all, >> >> I'm looking for some simple to use Windows software that can >> administer a remote SVN server that runs on Linux. >> > > Best not ask here about windows software, you'll upset the faithful..... > > :-) Well I've mentioned Linux and SVN, so hopefully that will keep the zealots happy. :) Srdjan

2 1

Windows software for managing remote Linux SVN server?
by Srdjan Todorovic 21 Dec '09

21 Dec '09

Hi all, I'm looking for some simple to use Windows software that can administer a remote SVN server that runs on Linux. Specifically, I'm looking for something that can create a repository, and setup users and change passwords. Normal SVN activities (code browsing/checking in/merging/diffing etc) will be run as normal. I'm currently looking into http://www.sublimesvn.com/ but I'm not sure I like the licensing (why would each developer have to be licensed?). Thanks Srdjan

2 2

Wireless Internet Link Security
by Ian 20 Dec '09

20 Dec '09

Hi Folks, The lady of the house wants a wireless internet connection for her laptop for Christmas as she is fed up with "tripping over cables everywhere!". I have purchased a router and laptop dongle and am experimenting with it so it is ready for The Big Day. One thing which is confusing me is the security modes it offers. It gives me the choice of using any of the following 5 modes: No Security WEP WPA-PSK (TKIP) WPA2-PSK (AES) WPA-PSK (TKIP) + WPA2-PSK (AES) or Mixed Mode I do not expect Security to be a big problem but I may as well set it up the best I can right from the start. Assuming the laptop dongle can also be configured for all five security modes mentioned above which is the best mode to use? (Sorry if the above seems a dumb question to all you experienced network admin bods but this is the first time I have touched a wireless Router and am not sure what I am doing) Ian.

3 3

How best to run a 'pull' backup using passwordless login?
by Chris G 20 Dec '09

20 Dec '09

As part of my sort out and tidy up of security, backups, etc. I've decided that it would be better to run my off site backups as 'pull' backups driven from the remote systems. This way an intruder into my home system won't see any evidence of these backups happening and hence won't be tempted to do anything to them. This requires (unless someone else has some bright ideas) that the remote system has a passwordless login to enable it to do the backup (or I put the password in the script, which comes to the same thing). For this to be (reasonably) secure it needs to be set up so that the *only* thing you can do with that login is a backup. So, finally to my question, what's the tidiest/easiest way of doing this? I can see two possible ways:- A dedicated login with the program to be executed when you login set to do the backup. A 'ForceCommand' in ssh that executes the backup when certain criteria are met. I think I prefer the second as it makes handling permissions etc. easier. E.g. I want to backup files belonging to user xxxx, if I can login as user xxxx then I don't need to worry about the files all being readable by the backup. This requires careful setting up of the sshd_config file though so that remote logins to user xxxx run the backup but one can still login to user xxxx locally. Can anyone see any serious flaws in the above and/or easier ways of doing it that are still reasonably secure? -- Chris Green

4 3

Gnome, seahorse, gnome-keyring-daemon - any good howtos or overviews anywhere?
by Chris G 18 Dec '09

18 Dec '09

I'm considering (though I'm rapidly going off the idea at the moment) using seahorse and gnome-keyring to manage passwords/keys etc. None of the manuals gives a clue as to what they all actually *do*. All you get is information about the mechanics of entering data into seahorse etc. which is pretty straightforward and obvious anyway. I want to know how it actually works to make keeping keys etc. easier and to make logging in to other systems easier. At present I do things manually by editing and copying the various files in $HOME/.ssh directly myself. I don't run ssh-agent, I *assume* that gnome-keyring is a sort of replacement for that but can't find anything that tells me anything actually useful. What concerns me slightly is that it's all a total waste of time if it's only protected by my login password which I think, by default, it is. I.e. if I understand things right (and I'm not at all sure about this) when I log in to the X gui and enter my password then gnome-keyring (and/or seahorse) extracts my key[s] from somewhere and then when I ssh to other systems that key is used and I don't have to type it in. Have I got that anything like right? If this *is* the way that it works how is it even remotely more secure than simply using password login on those systems I ssh into? If not can someone clarify a bit for me, or, as I said, point me at some sort of overview document that explains things. -- Chris Green

4 13

email addresses starting with asterisk?
by Peter Alcibiades 18 Dec '09

18 Dec '09

Helping a friend change computers, we found that the email login did not work, and after a series of conversations with the provider were told to log in to get messages using *(a)mydomain.com This did indeed work, and the effect appears to be that mail sent to any name at mydomain.com is picked up by the login, and also that any name used results in mail being accepted. So for instance you can apparently send to alexander(a)mydomain.com bacchus(a)mydomain.com calypso(a)mydomain.com and so on, and it will all arrive when you log in for messages as *(a)mydomain.com. Why would anyone set up an email system like this? Does it not make a lot more sense to have specific email addresses, both to reduce spam, and to allow you to segregate, for instance, home and business email? This is the same case where there was the incomprehensible networking with two cards and class B addresses for a three machine network. When set up in the usual way with a five port router modem, it all worked perfectly fine with a lot fewer cables. Very strange. Peter

5 4