January 2001 - openSUSE Edu - openSUSE Mailing Lists

Routing
by Dave Williams 02 Feb '01

02 Feb '01

Another chance for me to display my ignorance :-) All that follows is based on SuSE 7.0. I am changing our ip address range from 172.19.50.x (255.255.255.0) to 172.16.y.x (255.255.252.0) - reason - more numbers. However, while moving over I need to let machines on both ranges communicate eg. clients printing to print servers etc. Is this possible? If I set up 2 interfaces on the server (derby) with ifconfig eth0:0 172.19.50.2 netmask 255.255.255.0 ifconfig eth0:1 172.16.0.2 netmask 255.255.252.0 and turn ip forwarding on with yast, should machines on the 2 ip ranges be able to communicate. eg. ping each other I've tried it and they don't. Am I trying something silly and if not what other steps do I need? Dave Williams

3 5

Re: [Wylug-discuss] Ain't phones wonderfull
by Frank Shute 31 Jan '01

31 Jan '01

On Wed, Jan 31, 2001 at 11:58:40AM +0000, Gary Stainburn wrote: > > Ain't phones wonderfull? > Sure are. My conversation about a year ago: M$: `Hello, Microsoft how can we help you?' Me: `I ordered a student distribution of NT 2 months ago and it was advertised as being with me within a month. What's happened to it?' M$: `Your name & address sir' Me: ...gives them name & address... M$: <clickety click> M$: <pause> M$: `I'm sorry sir, I can't tell you what's happened to your order as our computer system has crashed....' True story. -- Frank *-------*-----*-----*-----*-----*-----*-----*-----*-----*-------* | Boroughbridge | Tel: 01423 323019 | PGP keyID: 0xC0B341A3 | *-------*-----*-----*-----*-----*-----*-----*-----*-----*-------* http://www.esperance-linux.co.uk/

1 1

Re: [suse-linux-uk-schools] Routing
by kevin.taylor＠powerconv.alstom.com 31 Jan '01

31 Jan '01

> I am changing our ip address range from 172.19.50.x (255.255.255.0) to > 172.16.y.x (255.255.252.0) - reason - more numbers. Well, 172.19.x.x is a 'class B' IP address, so if you use it with no subnet mask at all (ie the default which would be 255.255.0.0 for a class B) you have 65535 potential addresses available to you, in the range 172.16.0.1 -> 172.16.255.254 (172.16.0.0 being considered as the 'network' and 172.16.255.255 the broadcast address). So one option is just to remove the subnet mask completly - but be warned, you would have to do this on all machines in one go - you can't run with subnet masks on some and not on others ... Is this an option ? > However, while moving > over I need to let machines on both ranges communicate eg. clients > printing to print servers etc. It should be, as long as all of your networking uses the IP protocol (ie Samba/Windows networking on IP - not netbeui) > If I set up 2 interfaces on the server (derby) with > ifconfig eth0:0 172.19.50.2 netmask 255.255.255.0 > ifconfig eth0:1 172.16.0.2 netmask 255.255.252.0 what is the output of $netstat -nr on this box ? > and turn ip forwarding on with yast, should machines on the > 2 ip ranges be able to communicate. eg. ping each other You need to ensure that all machines are using either 172.19.50.2 (on the 172.19.50.0 network) or 172.16.0.2 (on the 172.16.0.0 network) as the default router. Then all should be ok (assuming that the router is configured ok - so netstat -nr would tell us that). Kevin.

2 1

just for fun
by suse 31 Jan '01

31 Jan '01

Dear all I have been told today that there are only 3 versions of Windows now available. They are Windows CE Windows ME and windows NT. Now CE ME NT spells cememnt to me. I can laugh I do not have to run Windows, just Xwindows Regards mike -- minkl(a)dircon.co.uk mike.clinch(a)ukuug.org SuSE linux 7 very good

1 0

RE: [suse-linux-uk-schools] the case of the missing network
by Grainge, Derek 31 Jan '01

31 Jan '01

Without knowing your samba config it's difficult to say... Samba operates as a domain controller either for an NT style network, or for a 95/98 workgroup style network. If you installed printer shares using the latter style, my guess is that your samba server has now decided to become a member of the workgroup. Maybe. In which case you will need to heck the conf file to force it back to NT mode? Likewise your 98 machine needs to use NT style sharing, and it needs to authenticate username/password to an NT(ie Samba) server. Does this describe your setup? -----Original Message----- From: James & Cybèle [mailto:CJC@stonycobbles.freeserve.co.uk] Sent: 30 January 2001 23:17 To: Schools List Subject: [suse-linux-uk-schools] the case of the missing network Fiddled around with printing on the network today.... AM: Had a normal working SAMBA network. PM attached a printer to a WIN98 machine, installed File and Print Sharing from Networking, followed instructions in various books and had the network printing within 10 mins.....but the network now consists of just the printer, any mention of the shared files from Linux are gone.......Removed printer and print sharing...still no network at Windows level (ie Pinging still fine) ?????? James -- ******************************************************************************** All mail sent and received may be examined to prevent transmission of inappropriate attachments and certain obscenities. Wellington College does not accept responsibility for email contents. Problems to postmaster(a)wellington-college.berks.sch.uk. ********************************************************************************

1 0

Re: [suse-linux-uk-schools] Installing LINUX on SCSI - MORE
by adrian.wells 31 Jan '01

31 Jan '01

Found that I had a dodgy SIM, That's why I got the error as the OS was loading into the RAM disk! I have now changed the ram and doing a full install (everything) of V7 (from the LINUX mag). I've used expert mode so that I could control the mount point & partitions of the four HDDs. A couple of questions, 1) Is there a sensible upper limit to the size of the swap partition? 2) Will LINUX use what's offered or use the space only if required - i.e. does it try to be efficient? 3) When trying to squeeze LINUX into a m/c with several small HDD's I found that a maximum of 4 partitions per drive was allowed. Is there a reason for this? (cant remember every trying to ad more than 3 partitions in the past! DOS or LINUX) So far so good! :-) Adrian ---------- > From: adrian.wells <adrian.wells(a)sidcot.org.uk> > To: SuSE list <suse-linux-uk-schools(a)suse.com> > Subject: [suse-linux-uk-schools] Installing LINUX on SCSI > Date: 26 January 2001 11:45 > > All installations that I have completed so far have been on std IDE boxes, > with few if any probs (apart from Graphics and NIC). > > I have tried to install 6.3 6.4 & 7 of LINUX on a P166 80M ram 2x 8GB SCSI > HDD 2x 4GB SCSI 1x SCSI CD-ROM, all via an Adaptec AHA-2940 (BIOS 1.23) > SCSI card. > > I have loaded the 294x drivers after booting from FDD and then start > installation. The CD is found and all goes well (although slowly!) until it > stops with... > "An error occurred during installation" > > Has anyone else had similar problems? > Is there a log file that I can open with more info re the failure? > > The equipment was in good working order as it was a working NOVELL box. > > As a further measure, I am about to try Mandrake 7.1 > > > > Kind Regards > Adrian Wells > _______________________________________ > Systems Manager > Sidcot School > Oakridge Lane, Winscombe, Somerset BS25 1PD. > > Please reply to > adrian.wells(a)sidcot.org.uk > admin(a)sidcot.org.uk for general enquiries

4 3

the case of the missing network
by James & Cybèle 30 Jan '01

30 Jan '01

Fiddled around with printing on the network today.... AM: Had a normal working SAMBA network. PM attached a printer to a WIN98 machine, installed File and Print Sharing from Networking, followed instructions in various books and had the network printing within 10 mins.....but the network now consists of just the printer, any mention of the shared files from Linux are gone.......Removed printer and print sharing...still no network at Windows level (ie Pinging still fine) ?????? James

1 0

Email server
by acraig 30 Jan '01

30 Jan '01

Dear Suse list Any suggestions for how I might run a "Hotmail" online email type of service from our Linux box. Are there any programs out there already set up to do this sort of thing ? Our school is soon to have a permanent in and out connection so this becomes an attractive option to offer our own pupils and FPs. Best regards Alan Craig PT CDT Aberdeen Grammar School

5 5

Re: [suse-linux-uk-schools] Email server
by Mark Evans 30 Jan '01

30 Jan '01

> > mpe(a)st-peters-high.devon.sch.uk said: > > Unfortunatly there is a lack of Windows or X11 based mail programs > > which can read maildir format. Even though it is ideal for network > > workstations. > > There are a few around - well Unix/X11 ones, no windows ones I know of. Interesting, could you give some pointers? > However if you run both the courier-imap and sqwebmail, you can then > read through the web or using any imap enabled client (including > outlook and netscape). The advantage of a program which simply looks in ~/Maildir is that it dosn't need the user to either enter or store passwords. They just run the program and it looks at the files. Web and IMAP make more sense, IMHO, where the machine dosn't have access to the relevent files directly (as either ~/Maildir or X:\Maildir, maildir was designed to cope with NFS, it manages just as well with SMB/CIFS). e.g. from home... > If you add maildrop to the mix, you can then also do mail filtering on > delivery, and whats more sqwebmail gives you a web GUI for editing your > mail filters. Or rather it would if I had time to get the latest version set up... -- Mark Evans St. Peter's CofE High School Phone: +44 1392 204764 X109 Fax: +44 1392 204763

1 0

Re: [suse-linux-uk-schools] fastest printer sharing?
by kevin.taylor＠powerconv.alstom.com 30 Jan '01

30 Jan '01

>> 1. Attached to an old 486 (or whatever) running as a dedicated Linux box > That'll work, assuming the printer is supported by Ghostscript. I presume > you'd be reasonably familiar with your printer configuration tool of choice. If you are only printing from windows, you could also configure a 'raw' printing device, and install the printer drivers on windows as usual. This way you get all the usual bells and wistles at the Windows end, and Linux does nothing but pass anything it gets over the network on to the printer. Linux does not need to support the printer at all in this case. I think you can get Samba to 'serve up' the printer driver to the Windows boxes too - making management of updates/etc easier - but have not done this myself ... Kevin.

1 0

fastest printer sharing?
by James H. Carter & Cybèle de Jong 29 Jan '01

29 Jan '01

Best way to share a printer on a SAMBA network of Win98 machines????? 1. Attached to an old 486 (or whatever) running as a dedicated Linux box 2. Shared from one of the networked Win98 machines 3. Any other ideas? James Carter

2 1

SUSE 7.1
by Azrael Angel Of Death 29 Jan '01

29 Jan '01

Hey, just spotted http://www.suse.com/us/suse/news/PressReleases/SuSE_Linux_7_1.html all about SUSE 7.1 coming out in Feb. 'SuSE Linux 7.1 Ships with Kernel 2.4 on February 12' Was wondering about the implications of updating current SUSE 7 servers to SUSE 7.1 Richard, with kernel 2.4 this'll have the replacement for ipchains in it, won't it? What's your advice on firewalling? Stick with 7 and ipchains, or wait for 7.1 and kernel 2.4's replacement for ipchains (name of which I can't recall off top of head). --Azrael _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

6 7

Access web pages via ISDN router
by dhamilton 26 Jan '01

26 Jan '01

I'm a newbie at this so apologies for the simple question. I've installed Suse Linux 6.4 on a RM Connect station with LILO on a floppy so I can dual boot the station. I can see the NT server ok from within Linux so the network card is set up fine. What I want to be able to do is access the web via our router. There is no proxy server on site here - we dial in to RM's proxy for web access on the Connect network. Is it Netscape that needs to be set up to do this or are there other settings necessary within Linux or both. If so, what are they? Many thanks Des Hamilton

2 2

SUSE 7.1
by Grainge, Derek 26 Jan '01

26 Jan '01

Are the changes from version 7 to 7.1 confined largely to the kernel and RPM - or have most applications been re-compiled due to the change in library? I am wondering how easily one can upgrade from 7 (which I bought two weeks ago...) to 7.1 by patching. -- ******************************************************************************** All mail sent and received may be examined to prevent transmission of inappropriate attachments and certain obscenities. Wellington College does not accept responsibility for email contents. Problems to postmaster(a)wellington-college.berks.sch.uk. ********************************************************************************

1 0

Installing LINUX on SCSI
by adrian.wells 26 Jan '01

26 Jan '01

All installations that I have completed so far have been on std IDE boxes, with few if any probs (apart from Graphics and NIC). I have tried to install 6.3 6.4 & 7 of LINUX on a P166 80M ram 2x 8GB SCSI HDD 2x 4GB SCSI 1x SCSI CD-ROM, all via an Adaptec AHA-2940 (BIOS 1.23) SCSI card. I have loaded the 294x drivers after booting from FDD and then start installation. The CD is found and all goes well (although slowly!) until it stops with... "An error occurred during installation" Has anyone else had similar problems? Is there a log file that I can open with more info re the failure? The equipment was in good working order as it was a working NOVELL box. As a further measure, I am about to try Mandrake 7.1 Kind Regards Adrian Wells _______________________________________ Systems Manager Sidcot School Oakridge Lane, Winscombe, Somerset BS25 1PD. Please reply to adrian.wells(a)sidcot.org.uk admin(a)sidcot.org.uk for general enquiries

1 0

Re: [suse-linux-uk-schools] 6.4 Boot Disk
by adrian.wells 26 Jan '01

26 Jan '01

Right, I've got all sizes in all colours now! How to create Boot Disk from CD on a DOS machine. Run SETUP.EXE ! Not the first place I would have looked, something like "create floppy" would have done it for me. Easy when you know! This will allow one to create Boot, Modules and Rescue disks. Thanks all Adrian Wells ---------- > From: Roger Whittaker <roger(a)suse-linux.co.uk> > To: adrian.wells <adrian.wells(a)sidcot.org.uk> > Cc: SuSE list <suse-linux-uk-schools(a)suse.com> > Subject: Re: [suse-linux-uk-schools] 6.4 Boot Disk > Date: 25 January 2001 16:44 > > I'm not quite sure what you mean: > > did you succeed in creating a boot floppy from the CD? > > > On Thu, 25 Jan 2001, adrian.wells wrote: > > > I looked at the disk but couldn't see anything obvious. > > -- > Roger Whittaker > SuSE Linux Ltd > The Kinetic Centre > Theobald Street > Borehamwood > Herts > WD6 4PJ > ---------------------- > 020 8387 1482 > ---------------------- > roger(a)suse-linux.co.uk > ---------------------- >

1 0

Re: [suse-linux-uk-schools] A happy Squid story
by Gary Parr 26 Jan '01

26 Jan '01

Would this then be correct.... acl public_rooms "/usr/local/squid/public_rooms" - list of ip address acl nonedsites "/usr/local/squid/nonedsites" - list of sites to ban # defining break times and games times acl am_break time MTWHF 10:55-11:10 acl lunch time MTWHF 12:10-13:05 acl pm_break time MTWHF 14:05-14:15 acl afterschool time MTWHF 15:50-16:10 # blocking freetime access in public rooms http_access deny public_rooms am_break http_access deny public_rooms lunch http_access deny public_rooms pm_break http_access deny public_rooms afterschool # http_access allow public_rooms # defining lessons times acl P1P2 time MTWHF 08:45-10:55 acl P3 time MTWHF 11:10-12:10 acl P4 time MTWHF 13:05-14:05 acl P5 time MTWHF 14:15-15:15 # block sites during lesson time http_access deny nonedsites P1P2 http_access deny nonedsites P3 http_access deny nonedsites P4 http_access deny nonedsites P5 # http_allow nonedsites So would this ban certain machines at breaks from accessing the net.. Im not to sure about the ban sites part.... im sure theres a url_regex to go in somewhere..... Gary >From: "npauli" <npauli(a)st-johns.org.uk> >To: <suse-linux-uk-schools(a)suse.com> >Subject: [suse-linux-uk-schools] A happy Squid story >Date: Tue, 23 Jan 2001 21:48:03 -0000 > >I don't know if Azrael has resolved his acl problems but I've just done >something vaguely similar and so far, touch wood, it seems to be working >(famous last words...) > >But before I get onto that, I noticed in my notes that on the advice of >squid.conf I uncommented the following two lines: > >acl QUERY urlpath_regex cgi-bin \? >no_cache deny QUERY > >any help? > >First off, I was having problems with people downloading MS Messenger and >getting into chat rooms, etc. So, I found out that to get it you download a >file called mmssetup.exe or, in one case only, msnsetup.exe. I then opened >/usr/local/squid/logs/access.log and used a find utilty to check out these >lines and, sure enough, they were pointing to download sites for messenger. > >So I added the following to squid.conf > ># blocking MS messenger >acl messenger1 url_regex mmssetup.exe >acl messenger2 url_regex msnsetup.exe >http_access deny messenger1 >http_access deny messenger2 > >I then did > >/usr/local/squid/bin/squid -k reconfigure >to tell squid to re-read its now altered config file. > >I then had to purge the offending setup.exe files from my cache. To do that >I had to add the following line to my squid.conf (I bunged it in under >#Defaults along with a bunch of other acls.) > >acl PURGE method purge > >Then I used the client program that comes with squid to do the dirty work. >You have to give the full url of the file you want purged - just using the >regex mmssetup.exe as you can in the acl produces a "sorry, squire" error >message. > >/usr/local/squid/bin/client -m PURGE http://full/url/mmssetup.exe > >did the business, though. [And I don't know about your mail reader but mine >insists on adding blue and underlining to that argument above.] > >Next problem. We now have network stations in the library and one classroom >that I can't keep an eye on at breaktimes. The following lines from >squid.conf deal with it. > >acl public_rooms "/usr/local/squid/public_rooms" > ># defining break times and games times >acl am_break time MTWHF 10:50-11:15 >acl lunch time MTH 12:25-13:25 >acl pm_break time MTWHF 14:30-14:50 >acl games time WF 12:25-15:50 >acl afterschool time MTWHF 15:50-16:10 > ># blocking freetime access in public rooms >http_access deny public_rooms am_break >http_access deny public_rooms lunch >http_access deny public_rooms pm_break >http_access deny public_rooms games >http_access deny public_rooms afterschool ># http_access allow public_rooms > >/usr/local/squid/public_rooms is simply a text file containing the ip >addresses of the network stations that I wanted to go 'off air' as far as >squid and the internet were concerned at the times defined in those acl >lines. Each ip address in the text file should be on its own line. >Originally I included their netmasks as well e.g. >123.14.56.48/255.255.255.192 but I later removed them. > >Okay, so I did this on a Sunday afternoon (don't forget to use linuxconf to >ensure that your squid box and the school bells agree on the time) and >Monday morning I waited to see what would happen at 10:50. Sure enough, at >that moment *every* station in the school was denied access. So I commented >out the lines I'd added, did >/usr/local/squid/bin/squid -k reconfigure >to give it back to everyone, reconsulted the FAQ and guide and decided >1. to remove the netmasks from those ip addresses, and >2. to leave everything commented out except > >acl public_rooms "/usr/local/squid/public_rooms" >acl lunch time MTH 12:25-13:25 >http_access deny public_rooms lunch > >Much better! At lunch only the correct stations went out. Since then I've >added back in the corresponding acl and http_access deny lines as each >break >comes around with no further problems. > >As my users are gratifyingly disrespectful towards authority, I can have >the >pleasurable experience of popping into my office towards the end of a break >and doing >grep -e 123.14.56.48 /usr/local/squid/logs/access.log >and gazing fondly at those lines that read TCP_DENIED/403 > >I hope someone will find this write-up handy. I'm partly doing it to teach >myself to take sufficient notes as I do new things to the network and make >changes. > >Nigel. > >Nigel Pauli - St. John's School, Northwood > _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

1 0

Re: [suse-linux-uk-schools] 6.4 Boot Disk
by adrian.wells 25 Jan '01

25 Jan '01

Thanks for these, I looked at the disk but couldn't see anything obvious. I experimented last night and managed to make a rescue disk (which appears to be useless without a boot disk!) - I am now trying to use the 6.3 Boot disk with 6.4 installation CDs. This looked like it would work at home. The Adaptec card is working (that took a long time) and the installation starts loading 'data into the ram disk' This is taking forever with no (apparent) CD access, although I have been leaving it to cook. Is this a hardware problem or is it because I am using a 6.3 boot disk & 6.4 install? About to have another go. :-) > As far as I know all Linux distros come with a means of creating a boot disc. > Many have a Dos program called rawrite. You can boot a PC into Dos mode > with CD support and then create the boot disc. Yout manual should tell you > how to do this. I do not have SuSE 6.4 but if you need more help I will look up > a few of my distros, Slackware, RedHat and SuSE and send you some example > syntax, instruction sets. > best wishes, > norman > Yes, the disk you need is on the first CD in the directory called disks. > You can transfer them to floppy using e.g. > > dd if=bootdisk of=/dev/fd0 > > or, on DOS the rawrite tool from the dosutils directory. > > Good luck.

3 2

Hyperterminal substitute
by Giles Nunn 25 Jan '01

25 Jan '01

Does anyone know a reliable linux substitute for hyperterminal. I have tried minicom which is ok as a terminal but has problems uploading via xmodem. One of my tasks is uploading firmare upgrades to routers and at the moment I still have to find a windows machine and run hyperterm. I do have plans to run windows via VMware for support purposes but I don't know if this will sort out my problem. ____________________________________ Giles Nunn - Network Manager Carms Schools ICT Development Centre Tel: +44 01239 710662 Fax: 710985 ____________________________________

1 0

6.4 Boot Disk
by adrian.wells 25 Jan '01

25 Jan '01

Roger, just about to install SuSE 6.4 on a server and found that my Bootdisk is faulty and no LINUX on this site. Is it possible for me to upload an image of the disk from the SuSE site (I've had a look), or create one from one of the CDs? The server is old with a SCSI CD that does not boot. any ideas please? Adrian

2 1

UK Schools Howto Document
by kevin.taylor＠powerconv.alstom.com 25 Jan '01

25 Jan '01

I have mentioned this document in the past, and am still tinkering away at it. It now has some real content, but I would like some opinions on the approach I am taking. >From discussions on this list, and from talking to people at user group meetings, there does not appear to be a single 'starting point' describing exactly where Linux can fit in today. I was hoping to provide a document that does the following: 1. List the areas where Linux can be used (eg web server, email server, etc) 2. Provide some links to information about setting up these systems (howtos, applications, etc). 3. Provide some details of 'solutions' that have been found to work from the experiences of people on this list. What I don't want to do is provide detailed technical information for these 'solutions' as that already exists elsewhere - I just want to make it easier for interested people to find this information more quickly in the first place. I have fleshed out the networking side of the document, (this is the sort of thing I know the most about), and described some of the 'one-stop' solutions to IT in schools (if you believe the hype :-) that exist (openclassroom.org, etc). Before I go any further, I would now like some opinions on whether my approach to this document is suitable or not - ie is it actually of any use ? It may be that this sort of information is best in some sort of UK Schools & Linux portal site - or maybe as a Howto document or FAQ ... not sure at the moment. The document: http://www.northants.lug.org.uk/projects/schools/ Any comments - please send on to me: kevin(a)northants.lug.org.uk I am particularly interested in comments of the form: 1. Good idea/waste of time (and why) 2. A better concept for what is needed in such a document 3. Ideas for content for the document Of course, any actual content submissions based on your experiences are welcome too. Ta, Kevin. Northants LUG kevin(a)northants.lug.org.uk

3 2

Re: [suse-linux-uk-schools] UK Schools Howto Document
by Azrael Angel Of Death 24 Jan '01

24 Jan '01

Well.. regardless of the few problems I am having with Squid, I feel from personal experience that installing a proxy server is a very good starting point. My school already has a filtered ISP service from RM and installing a local proxy on a seperate networked machine obviously couldn't affect that, but could provide us with more control and the benefits from a cache. If the machine ever fails it's a very simple matter to alter which proxy is used via a logon script, back to the RM one. We used an old machine to install SUSE and Squid on, then just plonked it on the network. Using linux for file/mail servers is a little more 'invasive' in that if things go wrong people come knocking on the door with implements of torture. As I have said before, my next step is a firewall.. that is also a very useful thing for schools that are put into the position that RM puts them of having a wide-open network with each station being visible over the internet. It does pose more of a cause for problems if things go wrong.. but still can be easily backed out without affecting the mail/file servers. So my recommendation to anyone wanting to try out Linux servers would be to get a proxy server and firewall. --Azrael _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

1 0

Re: [suse-linux-uk-schools] getting rid of the tilde
by kevin.taylor＠powerconv.alstom.com 24 Jan '01

24 Jan '01

> I wonder if somebody could help get rid of those ~ (tildes) > http://localhost/user/index.html There may be several ways to do this (I guess). I don't know if there are any apache configurations that change the character used to signify 'home' or not, but ... One way that doesn't involve the apache configuration, would be to create directories in your apaches main webspace (usually /home/httpd/html) for each user, and set the permissions so that they are world readable but 'owned' by the appropriate user. That user would be the only person permitted to write to that directory. You could then create a symlink in each users home directory as follows (for example): $ ln -s /home/httpd/html/fred /home/fred/public_html so that the user can 'see' the directory in their home space, but apache 'sees' it under the directory name within its webspace. (you could probably do it the other way round to - ie symlink out of apaches space into the users - but there are more issues doing things this way, relating to security, etc) They won't get a cgi-bin doing it this way - but they will get web space. Just a thought ... Kevin.

1 0

getting rid of the tilde
by Russell Webley 24 Jan '01

24 Jan '01

I wonder if somebody could help get rid of those ~ (tildes) I have set up the per-user webspace feature of Apache. Many of my young students have great difficulty finding and operating this key - is there a way of replacing it with something else or getting rid of it? It would be much nicer to have instead of: http://localhost/~user/index.html http://localhost/user/index.html - although I can see how this would be difficult..... cheers, Russell

1 0

Re: [suse-linux-uk-schools] A happy Squid story
by Azrael Angel Of Death 24 Jan '01

24 Jan '01

It's good to hear someone can crack their problems. If I read correctly, having all the public_rooms rules in caused problems.. a question, did you have http_access allow public_rooms commented or 'alive' at the time? It could be that it needs to be there active to allow correct access at other times. And did you still have a http_access allow ALL (Or whatever it is that normally allows access.. can't recall of top of head) ?? As to my problems, they are still not resolved.. and I intend to get to the bottom of it on a weekend, stripping the squid.conf to bare bones til I see what's specifically causing a problem.. so expect me to come seeking help when I do :) Thanks however for your success story that gives me faith :) --Azrael >From: "npauli" <npauli(a)st-johns.org.uk> >To: <suse-linux-uk-schools(a)suse.com> >Subject: [suse-linux-uk-schools] A happy Squid story >Date: Tue, 23 Jan 2001 21:48:03 -0000 > >I don't know if Azrael has resolved his acl problems but I've just done >something vaguely similar and so far, touch wood, it seems to be working >(famous last words...) > >But before I get onto that, I noticed in my notes that on the advice of >squid.conf I uncommented the following two lines: > >acl QUERY urlpath_regex cgi-bin \? >no_cache deny QUERY > >any help? > >First off, I was having problems with people downloading MS Messenger and >getting into chat rooms, etc. So, I found out that to get it you download a >file called mmssetup.exe or, in one case only, msnsetup.exe. I then opened >/usr/local/squid/logs/access.log and used a find utilty to check out these >lines and, sure enough, they were pointing to download sites for messenger. > >So I added the following to squid.conf > ># blocking MS messenger >acl messenger1 url_regex mmssetup.exe >acl messenger2 url_regex msnsetup.exe >http_access deny messenger1 >http_access deny messenger2 > >I then did > >/usr/local/squid/bin/squid -k reconfigure >to tell squid to re-read its now altered config file. > >I then had to purge the offending setup.exe files from my cache. To do that >I had to add the following line to my squid.conf (I bunged it in under >#Defaults along with a bunch of other acls.) > >acl PURGE method purge > >Then I used the client program that comes with squid to do the dirty work. >You have to give the full url of the file you want purged - just using the >regex mmssetup.exe as you can in the acl produces a "sorry, squire" error >message. > >/usr/local/squid/bin/client -m PURGE http://full/url/mmssetup.exe > >did the business, though. [And I don't know about your mail reader but mine >insists on adding blue and underlining to that argument above.] > >Next problem. We now have network stations in the library and one classroom >that I can't keep an eye on at breaktimes. The following lines from >squid.conf deal with it. > >acl public_rooms "/usr/local/squid/public_rooms" > ># defining break times and games times >acl am_break time MTWHF 10:50-11:15 >acl lunch time MTH 12:25-13:25 >acl pm_break time MTWHF 14:30-14:50 >acl games time WF 12:25-15:50 >acl afterschool time MTWHF 15:50-16:10 > ># blocking freetime access in public rooms >http_access deny public_rooms am_break >http_access deny public_rooms lunch >http_access deny public_rooms pm_break >http_access deny public_rooms games >http_access deny public_rooms afterschool ># http_access allow public_rooms > >/usr/local/squid/public_rooms is simply a text file containing the ip >addresses of the network stations that I wanted to go 'off air' as far as >squid and the internet were concerned at the times defined in those acl >lines. Each ip address in the text file should be on its own line. >Originally I included their netmasks as well e.g. >123.14.56.48/255.255.255.192 but I later removed them. > >Okay, so I did this on a Sunday afternoon (don't forget to use linuxconf to >ensure that your squid box and the school bells agree on the time) and >Monday morning I waited to see what would happen at 10:50. Sure enough, at >that moment *every* station in the school was denied access. So I commented >out the lines I'd added, did >/usr/local/squid/bin/squid -k reconfigure >to give it back to everyone, reconsulted the FAQ and guide and decided >1. to remove the netmasks from those ip addresses, and >2. to leave everything commented out except > >acl public_rooms "/usr/local/squid/public_rooms" >acl lunch time MTH 12:25-13:25 >http_access deny public_rooms lunch > >Much better! At lunch only the correct stations went out. Since then I've >added back in the corresponding acl and http_access deny lines as each >break >comes around with no further problems. > >As my users are gratifyingly disrespectful towards authority, I can have >the >pleasurable experience of popping into my office towards the end of a break >and doing >grep -e 123.14.56.48 /usr/local/squid/logs/access.log >and gazing fondly at those lines that read TCP_DENIED/403 > >I hope someone will find this write-up handy. I'm partly doing it to teach >myself to take sufficient notes as I do new things to the network and make >changes. > >Nigel. > >Nigel Pauli - St. John's School, Northwood > _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

1 0