VPN options
by Keith Lofstrom
I am planning on running a Virtual Private Network from my Fedora
firewall out to a UML virtual colo (running RH9) at another site.
That site will be the place I present services to the world;
httpd, ssh, sftp, smtp. This is to comply with the "no servers"
and dynamic ip restrictions on my Comcast connection to the net;
if my firewall always drives an outbound connection to the
colocation site, I am not worried about changes of ip address,
and I am not opening any inbound ports.
There are a number of options for the VPN - the most attractive
are cipe ( http://sites.inka.de/sites/bigred/devel/cipe.html )
and FreeSwan ( http://www.freeswan.org/ ), though I am told that
one can do all this through an ssh tunnel. I would rather have
simple and secure than super-duper; I have plenty of bandwidth,
and will send outbound http and smtp from the firewall, so the
main bandwidth user will be incoming spam/b/b/b/b mail.
Anyone have some experiences to share about setting up VPN? Is
there anything about either cipe or FreeSwan that is likely to
break with FC1 or FC2?
Keith
--
Keith Lofstrom keithl(a)ieee.org Voice (503)-520-1993
KLIC --- Keith Lofstrom Integrated Circuits --- "Your Ideas in Silicon"
Design Contracting in Bipolar and CMOS - Analog, Digital, and Scan ICs
4 years, 7 months
copy and paste from mouse when window full of icons?
by Gianluca Cecchi
Hello,
while using "Files", the explorer application (version 3.28.1-stable) in my
Fedora 28 system, I have sometimes this kind of problem:
- I normally use what should be "list view" with list of file names
- if I have to paste a file/dir or group of copied files/dirs into a
location where the page listed is full (no blank space inside it), it seems
that I cannot paste: the right mouse click doesn't offer the paste option.
In these cases I temporarily switch to what should be "icon view" and in
this case I always have some blank space because of how items are displayed.
I select a blank space and then right-mouse --> paste
Then I come back to list view...
Is this a sort of bug or what?
Based on this link
https://help.gnome.org/users/gnome-help/stable/files-copy.html.en
I should have "paste" option in menu, but it doesn't happen, see screenshot:
https://drive.google.com/file/d/1X1ZPYPJ5B8IRDA6T_LL5AfbCD2YFAy6_/view?us...
NOTE: keyboard shortcut ctrl+c and ctrl+v works, though
Thanks in advance.
Gianluca
4 years, 10 months
Mounting internal disk spins up connected external USB disks
by Wolfgang Pfeiffer
Mounting an internally installed disk on a laptop spins up all
disks connected to this machine via USB. And I try to prevent these
externally connected disks to spin up.
The behaviour, IIRC, started a few months ago on the previous F27 and
continues now on F28. Before that I don't remember this behaviour to
have happened.
I thought it was some smartd issue, and stopped this service
("/usr/bin/systemctl stop smartd.service") - to no avail: mounting the
internal disk still spins up the external ones.
The internal disk is identified by "smartctl -d test /dev/sda" like
so:
[ ... ]
/dev/sda: Device of type 'scsi' [SCSI] detected
/dev/sda [SAT]: Device open changed type from 'scsi' to 'sat'
/dev/sda [SAT]: Device of type 'sat' [ATA] opened
(On a side note: I'm astonished that a smartctl simple info flag is
changing some device type like shown above)
External disks are identified by a smartctl test like so:
One:
"[USB Sunplus]: Device of type 'usbsunplus' [ATA] detected"
the other one:
"[SAT]: Device of type 'sat' [ATA] detected"
Anyone an idea about where to start investigating this issue? Where
could such behaviour possibly be set up?
Thanks in anticipation.
Wolfgang
5 years, 2 months
F28 - Thunar crashes regularly
by Robert Moskowitz
F28 with Xfce. Thunar 1.6.16
Thunar crashes regularly. Seems to be 'connected' to accessing external
devices like 4TB USB drives and Android phone via libmtp and gvfs-mtp (I
think :) ).
Rather recent. I have always had challenges with my Android (Galaxy S4)
with very slow time opening up a directory. Just viewing and dropping
files into a high-level folder (like movies) is fast, but opening a
folder like Sound to get voice recordings takes a lot of time.
Here is a message on the thunar crash last:
Feb 25 10:59:27 lx121e abrt-server[32461]: Deleting problem directory
ccpp-2019-02-25-23:59:20.598234-32067 (dup of
ccpp-2019-02-20-08:15:46.436224-30418)
Feb 25 10:59:28 lx121e abrt-notification[32500]: Process 30418 (thunar)
crashed in thunar_tree_model_get_value()
I am current with updates as of Feb 22.
5 years, 3 months
network connection
by Patrick Dupre
Hello,
Do you understand what is going on with this extract of journalctl:
+++++++++++++++++++++++++++++++++++++++++++++
Feb 25 18:26:26 homere NetworkManager[1273]: <info> [1551115586.9960] manager: NetworkManager state is now CONNECTED_LOCAL
Feb 25 18:26:26 homere NetworkManager[1273]: <info> [1551115586.9990] manager: NetworkManager state is now CONNECTED_SITE
Feb 25 18:26:26 homere NetworkManager[1273]: <info> [1551115586.9991] policy: set 'eno1' (eno1) as default for IPv4 routing and DNS
Feb 25 18:26:27 homere NetworkManager[1273]: <info> [1551115587.0027] device (eno1): Activation: successful, device activated.
Feb 25 18:26:27 homere NetworkManager[1273]: <info> [1551115587.0032] manager: startup complete
Feb 25 18:26:27 homere audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Feb 25 18:26:36 homere audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Feb 25 18:26:56 homere NetworkManager[1273]: <info> [1551115616.9518] connectivity: (eno1) timed out
++++++++++++++++++++++++++++++++++++++++
We have:
CONNECTED_LOCAL
CONNECTED_SITE
then with move in timeout because of a SERVICE_STOP !!!!
Why ?
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Feb 25 18:26:56 homere dbus-daemon[1104]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service' requested by ':1.10' (uid=0 pid=1273 comm="/usr/sbin/NetworkManager --no-daemon " label="system_u:system_r:NetworkManager_t:s0")
Feb 25 18:26:56 homere audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Feb 25 18:27:06 homere audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Feb 25 18:31:52 homere NetworkManager[1273]: <info> [1551115912.9518] connectivity: (eno1) timed out
++++++++++++++++++++++++++++
again timeout because SERVICE_STOP?
then suddenly, 5 mn later!
+++++++++++++++++++++++++++++++++++++++++
Feb 25 18:36:23 homere NetworkManager[1273]: <info> [1551116183.3831] manager: NetworkManager state is now CONNECTED_GLOBAL
Feb 25 18:36:23 homere dbus-daemon[1104]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service' requested by ':1.10' (uid=0 pid=1273 comm="/usr/sbin/NetworkManager --no-daemon " label="system_u:system_r:NetworkManager_t:s0")
Feb 25 18:36:23 homere audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
+++++++++++++++++++++++++++++++++++++++++++++
providing
CONNECTED_GLOBAL
We should have:
Feb 26 19:03:34 Teucidide NetworkManager[1362]: <info> [1551204214.4744] manager: NetworkManager state is now CONNECTED_LOCAL
Feb 26 19:03:34 Teucidide NetworkManager[1362]: <info> [1551204214.4768] manager: NetworkManager state is now CONNECTED_SITE
Feb 26 19:03:34 Teucidide NetworkManager[1362]: <info> [1551204214.4769] policy: set 'enp2s0' (enp2s0) as default for IPv4 routing and DNS
Feb 26 19:03:34 Teucidide NetworkManager[1362]: <info> [1551204214.4797] device (enp2s0): Activation: successful, device activated.
Feb 26 19:03:34 Teucidide NetworkManager[1362]: <info> [1551204214.4801] manager: startup complete
Feb 26 19:03:34 Teucidide audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Feb 26 19:03:34 Teucidide NetworkManager[1362]: <info> [1551204214.7522] manager: NetworkManager state is now CONNECTED_GLOBAL
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire interdisciplinaire Carnot de Bourgogne
9 Avenue Alain Savary, BP 47870, 21078 DIJON Cedex FRANCE
Tel: +33 (0)380395988
===========================================================================
5 years, 3 months
Scanning problem with HP4620.
by Ger van Dijck
Hi all,
After an update to Fedora29 I can print but not scan anymore with a HP
officejet 4620 in WLAN.
When running HP-check I get two messages : cups required incompat : cups
may nt be installed or running .
cups is installed and running.
python3-notify2 needs to be
installed : Question where can I "find it"
Has anyone the same experience ?
Regards,
Ger van Dijck.
--
Using Opera's mail client: http://www.opera.com/mail/
5 years, 3 months
dnf didn't exclude and clobbered the package I wanted to keep - what
went wrong...?
by Morgan Read
OMG - GONE! WHAT THE F!!!
READ ON... OR, TO CUT A LONG(ISH) STORY SHORT(ER), JUMP STRAIGHT TO THE
BOTTOM...
I wanted to install master-pdf-editor-5.3.16-1.x86_64
Alongside master-pdf-editor-4.3.89-1.x86_64
Looking at the install of master-pdf-editor-4.3.89-1.x86_64 it all
seemed fairly self contained in /opt/masterpdfeditor4 and what was under
/usr all seemed to be suffixed by a '4'.
But, I knew that master-pdf-editor-5.3.16-1.x86_64 was likely to remove
master-pdf-editor-4.3.89-1.x86_64 (past experience).
So, I investigated the respective RPMs - no, scripts included that
looked like they'd remove earlier versions...
So, I ran:
$ rpm -qp --scripts master-pdf-editor-5.3.16_qt5.x86_64.rpm
postinstall scriptlet (using /bin/sh):
#!/bin/sh
set -e
# Automatically added by dh_installmenu
if [ -x "`which update-menus 2>/dev/null`" ]; then update-menus ; fi
# Automatically added by dh_installmime
if [ -x "`which update-mime-database 2>/dev/null`" ]; then
update-mime-database /usr/share/mime
fi
ln -s /opt/master-pdf-editor-5/masterpdfeditor5 /usr/bin/masterpdfeditor5
postuninstall scriptlet (using /bin/sh):
#!/bin/sh
set -e
# Automatically added by dh_installmenu
if [ "$1" = "configure" ] && [ -x "`which update-menus 2>/dev/null`" ]; then
update-menus
fi
# End automatically added section
rm -f /usr/bin/masterpdfeditor5
$
Which didn't seem to indicate the removal of
master-pdf-editor-4.3.89-1.x86_64.
However, I'm very suspicious... So, I investigated here:
https://www.systutorials.com/1661/making-dnf-yum-not-update-certain-packa...
And here:
https://dnf.readthedocs.io/en/latest/conf_ref.html
https://dnf.readthedocs.io/en/latest/command_ref.html#
Under 'excludepkgs'
And the man page, under 'excludepkgs'.
And so, wrote:
exclude=master-pdf-editor-4.3.89-1*
excludepkgs=master-pdf-editor-4.3.89-1*
To /etc/dnf/dnf.conf
And then ran 'dnf install ./master-pdf-editor-5.3.16_qt5.x86_64.rpm'
AND WHAT THE FRIGGING HELL HAPPENED??!!!
YUP, YOU GUEST IT master-pdf-editor-4.3.89-1.x86_64 GOT CLOBBERED!!!
So, what the f' do I have to do to prevent
master-pdf-editor-4.3.89-1.x86_64 from getting clobbered when installing
master-pdf-editor-5.3.16_qt5.x86_64.rpm
Thanks all
M
5 years, 3 months
OT: F29+ alternatives to evolution for fetching and sending e-mails
with multifactor authentication
by Ranjan Maitra
Dear friends,
Over the past 20 years, I have had e-mail set up in the following way:
Use fetchmail and procmail along with filtering to get things into folders, and then use a mailer (sylpheed for the last 15 years along with sylfilter) to read and send e-mail.
The biggest advantage of my approach was that I did not have to keep my MTA running in the background, I could keep my e-mail locally besides having filtering using procmail that I am able to control. Also, I have a standalone mail monitor which informs me of e-mails that I have and whether I should bother reading them. (I wrote this by modifying xbuffy for sylpheed which was not trivial to do).
I have survived several changes in how mail is handled, including the move to Outlook, with very few (ultimately minor) hiccups.
However, the IT folks at our university have decided to show that they are even more relevant and decided to require multifactor authentication. This brings my entire ability to read e-mail to a thundering stop.
The IT folks in my department have actually been very helpful and have found that evolution is a possible alternative for linux users. They have actually written a pretty detailed set of notes for RHEL which I am told also applies to Fedora 28+. The instructions are: https://www.stat.iastate.edu/evolution-mail-linux-users
My question is: are there other alternatives to evolution in using MFA? Evolution looks to be like Outlook which is not a surprise given that it is meant to, in some sense, mimic that (from what I have gathered). However, it is a beast and slow (96M compared to 7.6M). Ideally, I would like an alternative that allows me to pull e-mail in the same manner as fetchmail, do the filtering and so on. However, from what I have read, evolution can be used in the background without actually running the client (sorry if my terminology is not correct).
I am also interested in continuing to use sylfilter (I am after all, also its maintainer on Fedora) because it would be good to continue to use a package I maintain.
Any alternatives and advice (including new but efficient approaches) would be very appreciated.
Many thanks and best wishes,
Ranjan
--
Important Notice: This mailbox is ignored: e-mails are set to be deleted on receipt. Please respond to the mailing list if appropriate. For those needing to send personal or professional e-mail, please use appropriate addresses.
5 years, 3 months
grub2 efi
by Patrick Dupre
Hello,
After an update of the kernel, the file
/boot/efi/EFI/fedora/grub.cfg
has not been updated.
I had to run
grub2-mkconfig -o /boot/efi/EFI/fedora/grub.cfg
Please not that I have
/dev/sdb1 766480 18068 748412 3% /boot/efi
Is it because the boot is on sdb?
Should I run?
grub2-install /dev/sdb
I also had to run
grubby --set-default-index=0
(it was set at 1).
Thank.
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire interdisciplinaire Carnot de Bourgogne
9 Avenue Alain Savary, BP 47870, 21078 DIJON Cedex FRANCE
Tel: +33 (0)380395988
===========================================================================
5 years, 3 months
F9 RAID1 server sda failure
by Gary Stainburn
Hi folks
I've got an old F9 server which has been running forever without any problems
has just failed to reboot.
I have 2 x RAID1 setup
sda and sdb are the first raid device
sdc and add are the second device.
Also, to make life even more fun I only have 4 SATA ports so I have to remove
one HDD to get the DVD to work, and the m/b doesn't support USB DVD
it looks like sda has failed - it doesn't even appear in the BIOS list.
I am currently cloning sdb before doing anything, but once that's done, I want
to replace sda and rebuild the array. From memory, I do not think that the
boot partitons could be RAID'ed back then so I'm not sure what state the boot
partition is in on sdb.
Does anyone have any instructions on how to do this based on the age of the
system? So far, Google only seems to want to give me more recent solutions.
5 years, 3 months
