Archive for the 'Linux' Category

Debian. NVidia. Kernel 2.6.21-2

Whoops! Looks like there is a problem with the new Debian 2.6.21-2 kernel being updated recently, especially with the NVidia drivers.

Most of you who compile your NVidia drivers will know that everytime you run apt-get update && apt-get upgrade, you are also going to have to run through the NVidia installer to compile against the new kernel headers. Of course this is optional and if you use the nv driver everything is OK (that is assuming you don’t want to take advantage of your super duper hardware).

Well the bad news is that the NVidia installer wont compile against the newer kernel headers because this happens:

FATAL: modpost: GPL-incompatible module nvidia.ko uses GPL-only symbol ‘paravirt_ops’

It seems the only way around this is to compile the kernel yourself, and not include the virtualization options, which is bad news if you are trying to use QEMU, and especially more bad news if you are not interested in compiling your own kernel from scratch.

I ask a simple question though about this: Who looses in this battle between GPL and proprietary? Of course the open source camp are going to say that NVidia should release open source drivers for their hardware or at least allow someone else access to the specifications of the hardware so they can write the drivers for them. I understand this argument and perhaps subscribe to it on occasion, but not this time.

I remember the days when using Linux was a royal pain in the proverbial, most hardware out there wouldn’t work out of the box, and for the standard user, running Linux meant that they had to learn everything again and to such a deeper degree than they did when they used Windows. The users had to understand how to edit config files, follow installation procedures (that are completely alien to someone who is used to double clicking on a file called setup.exe and simply crossing their fingers), read man pages and prey to the gods of *NIX that something might work first time (which invariably it didn’t).

I cut my teeth on this Linux, and I remember it was a struggle all of the way, it was painful but undoubtedly worth it in the end, which brings me to today. If I install a distribution of my choice, I can pretty much garuntee that 95% of any hardware or peripheral I purchase and plug into my box will work without me having to do anything special, and the ones that need a bit of tinkering with will install fine in the end after a few searches with OFSE (our favourite search engine) to guide us in the right direction.

Think back again to the time when the hardware manufacturers thought the Linux community was a fad, and we were either going to have to use Windows or Macs or get used to the fact that we couldn’t use their technologies. The community was bashing people like NVidia because they wouldn’t write drivers, our attack was simple, we voted with our wallets and we used our geek powers to persuade others to try other vendors.

One day, NVidia released drivers for Linux, and they worked for most of us, and this made me very happy, of course, the drivers were not GPL compatible, but I didn’t care. All I cared about was that I was able to use my favourite OS with my (very expensive) video card, and nowadays, when I can be bothered, I switch on Beryl and play with my spinning desktop.

So what is wrong with our community? and with debian in particular? why will you not allow me to run with NVidia drivers with your stock kernel? The way I see it is that we battled long and hard for recognition by the very vendors that today we are throwing obstacles at and, as I asked earlier, who looses? I tell you who looses, I do, and so do you!

Well done

*clap*

*clap*

*clap*

I wanna play larry!

All I want to do, right now especially is play a good ‘ol game of Leisure Suit Larry! I am not a gamer by any stretch of the imagination, but I have always been addicted to Larry, Larry Laffer.

My desktop machine is a very nice (read sexy) Sun Microsystems Ultra 20 Workstation. 2.5Gb RAM and twin 19″ Monitors running on top of a Quadro NVS 285 Graphics Card. All of this horsepower - of which there is plenty, is running Debian Testing (because I am hardcore ;) ). I run Debian Testing on my Laptop too, an IBM R51e with currently 1Gb RAM.

I’m set, I hear you say. Well to all intents and purposes I am, except to Play Leisure Suit Larry (Magna Cum Laude). For this extravagance, I need Windows (2000/XP/ I assume Vista?). So I purchased Windows XP Professional, and installed in under VMWare Server on my desktop only to find out that the graphics drivers presented in VMWare don’t support the correct Lighting API.

My only option is to install the game on a Windows XP partition and be done with it. Don’t get me wrong, VMWare is bloody brilliant, and it works like the clappers (for you non British folk, read “its quick”) but it doesn’t fix my problem directly.

So, out comes Leisure Suit Larry 7, Love for Sail. That shall be enjoyed whilst I think about my future actions regarding Magna Cum Laude.

As a foot note, I would like to point out that I am aware of the new Larry character “Larry Lovage” and his role in Magna Cum Laude, and I don’t care! If you follow the game and end up in Loftys Bar, there is for the world to see, a fully 3D rendered model of Larry Laffer!.

As another footnote, I am also aware of the circumstances regarding the game and Al Lowe - well at least what he has written on his site.

Postfix TLS Quick and dirty

I wrote an internal document how to a while ago about how to set up POP3 Secure and SMTP Auth with postfix using CentOS 4. I thought I’d post it here so that others may find it useful.

Before you begin
Make sure CentOS 4 has been installed as a server (with no graphical interface). Set up RPM to allow installation from the CentOS yum repositories.


Install the required programs

# yum install cyrus-sasl
# yum install cyrus-sasl-devel
# yum install cyrus-sasl-gssapi
# yum install cyrus-sasl-plain
# yum install cyrus-sasl-crammd5
# yum install cyrus-sasl-digestmd5
# yum install cyrus-sasl-otp
# yum install cyrus-sasl-saslauthd


Make the directory structure and start services

# chkconfig -add saslauthd
# /etc/init.d/saslauthd start
# mkdir /etc/postfix/ssl
# cd /etc/postfix/ssl


Generate the security keys
Type these commands exactly as shown

# openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024
# chmod 600 smtpd.key# openssl req -new -key smtpd.key -out smtpd.csr
# openssl x509 -req -days -3650 -in smtpd.csr -signkey smtpd.key -out smtpd.crt
# openssl rsa -in smtpd.key -out smtpd.key.unencrypted
# mv smptd.key.unencrypted smtpd.key
# openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650


Editing /etc/postfix/main.cf
Add these lines at the bottom of your main.cf

smtpd_sasl_localdomain
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_reciepient_restrictions = permit_sasl_authenticated,
				permit_mynetworks,
				check_relay_domains
smtpd_tls_auth_only = no
smtpd_use_tls = yes
smtpd_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem

smtpd_tls_loglevel = 1
smtpd_tls_receive_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom


Dovecot and POP3Secure
If you want Dovecot to run your POP3/IMAP POP3s/IMAPs services, then it might be worthwile adding the following configuration options to /etc/dovecot.conf

ssl_cert_file = /etc/postfix/ssl/smtpd.crt
ssl_key_file = /etc/postfix/ssl/smtpd.key

You will find that any users of Windows will receive messages about the certificate not being signed by a valid certificate authority. This is easily solved by adding the certificate manually to their cache of acceptible CAs.

In Internet Explorer visit the following address:

https://servername:995/

When the dialog box appears asking you to accept the certificate file, click on View Certificate - then select the Install Certificate button. Outlook and Outlook express will no longer ask you to accept the certificate when checking your email.


Potential Problems
If the key still has a passphrase associated with it, then postfix won’t know what to do with it. Unprotect the key as follows

# openssl rsa -in cakey.pem -text
# openssl rsa -in cackey.pem -out key_unprotected.pem
# mv cakey.pem key_protected.pem# mv key_unprotected.pem cakey.pem


Finally
All that is now required, is to restart postfix

# /etc/init.d/postfix restart




Calendar

November 2008
M T W T F S S
« Aug    
 12
3456789
10111213141516
17181920212223
24252627282930

Categories