GNU/Linux

Today I tried to put in production an update of Samba 3 (3.5.4) to allow Windope 7 clients to join the domain.

After having performed what's on the samba wiki page about this topic [here], I could join the machine to the domain but I was not able to login !? :(

In the log :

[2010/08/20 16:55:20.682477,  0] rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3)
  _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client RO-BACKUP machine account RO-BACKUP$
[2010/08/20 16:55:30.993850,  0] lib/util_sock.c:474(read_fd_with_timeout)
[2010/08/20 16:55:30.993958,  0] lib/util_sock.c:1432(get_peer_addr_internal)
  getpeername failed. Error was Transport endpoint is not connected
  read_fd_with_timeout: client 0.0.0.0 read error = Connection reset by peer.

The problem was easy to solve but not easy to find : the two machines had not the same time (30 secs delay !)

Fixing the time sync fixed the problem (and I'm not using kerberos and AD)

After having setup squid and dansguardian (using clamd) on Centos 5, I wasn't able to use it :(

I had always the following error, even if the dansguardian user was the same as clamd (clamav) :

2010.7.9 12:22:41 - 10.0.200.6 http://www.eicar.org/anti_virus_test_file.htm
 *INFECTED* *DENIED* /tmp/tfIlR1j6: lstat() failed: Permission denied. 
ERROR GET 15590 0 Content scanning 1 403 text/html  

I just realize after having searched too long that SELinux (I know life is too short for it) was the culprit.
It was my mistake as I completely forgot that this machine had selinux enabled :-S

So in /var/log/audit/audit.log I had :

type=AVC msg=audit(1278673113.470:3489): avc:  denied  { getattr } for
pid=32164 comm="clamd" path="/tmp/tfCSCirx" dev=dm-3 ino=17 
scontext=user_u:system_r:clamd_t:s0 
tcontext=user_u:object_r:initrc_tmp_t:s0 tclass=file
type=SYSCALL msg=audit(1278673113.470:3489): arch=c000003e 
syscall=6 success=no exit=-13 a0=8cce370 a1=421f2dc0 a2=421f2dc0 
a3=8 items=0 ppid=1 pid=32164 auid=1004 uid=102 gid=114 euid=102 
suid=102 fsuid=102 egid=114 sgid=114 fsgid=114 tty=(none) ses=437 
comm="clamd" exe="/usr/sbin/clamd" subj=user_u:system_r:clamd_t:s0 
key=(null)

Note to myself: Never forget to check in audit.log !

To create the selinux policies, I used the following commands, which are quiet easy:

audit2allow -a -m dansguardian > dansguardian.te
checkmodule -M -m dansguardian.te 
checkmodule -M -m dansguardian.te -o dansguardian.mod
semodule_package -o dansguardian.pp -m dansguardian.mod
semodule -i dansguardian.pp 

Et voilà ! Dansguardian is running and I didn't disable selinux :-)

I have tested 3 Twitter clients to use on my gnome desktop:

- Gwibber (gwibber-1.2.0-3.349bzr.fc12.noarch)
- Pino (pino-0.2.6-1.fc12.x86_64)
- Turpial (turpial-1.0-b1.fc12.noarch)

I've found Gwibber very nice, doing what I need but it's very slow and sometimes freezes (becomes dark). It has also facebook support (nice to see the status updates of your friends).

Pino is my favorite one for the moment, it's fast, doesn't support facebook (yet?).
Something I don't like is that you have to switch between the accounts (twitter and identi.ca) which is annoying.

Turpial is not was I really wanted, it doesn't fit really in the desktop and it's only in Spanish.

I hope that Pino will keep improving and stay fast as now.

http://gwibber.com/
http://code.google.com/p/pino-twitter/
http://code.google.com/p/turpial/

Update !

I've just tested Gwibber 2 (gwibber-2.30.0.1-1.fc12.noarch) and it has very nice features: possibility to see all the messages or only by account, possibility also to see images (updated in facebook for example). I will for sure test it and discover it a bit longer, nice improvements !

banquise (yet another package manager) is now released ! :)

The website is online : www.banquise.be

This is a server/client application both written in python. The server is written with django.

This post is dedicated to sdog

and of course toi (the lord of sushi's) enjoyed it !

The place : zaowang - Antwerpen

I created rpms for CentOS and Fedora of openERP 5.0.7

I didn't test them yet but you can try them and send me your feedback to improve them.

ptxArchiver 0.3 is out.

I added the possibility to not insert the delete statement in the binlog for replication. I also fixed some minor bugs.

give it a try and send me your feedback :)

On my new mac book pro 13inch, I decided to install Fedora 12 for my daily use (I like Mac OSX but not for work) and as GNU/Linux consultant I need my dear lovely Linux laptop :-)

But out of the box 3D support for the video card is not supported nouveau (open source nvidia driver) and the WIFI is also not working.

Using rpmfusion I've installed kmod-nvidia and kmod-wl and it works fine. (YOU STILL NEED TO INSTALL THEM, even with the packages bellow, the current packages are : kmod-nvidia-190.42-1.fc12.9.x86_64.rpm and kmod-wl-5.10.91.9.3-3.fc12.11.x86_64.rpm)

But (there is always a but it seems) the nothing comes out of my speakers or headphones... (Whhhyyyyyyy!!!?).

Due to a lack of time and a reasonable level of frustration, I stayed several weeks with my new brand silent laptop.

00:08.0 Audio device: nVidia Corporation MCP79 High Definition Audio (rev b1)

This is the ouput of the sound preferences :

and in alsamixer :

I finally decided to have a deeper look to my problem (frustration level reached the limit :-P )

I installed the kernel from rawhide (kernel-2.6.32.2-18.fc13.x86_64) but of course no driver for nvidia video card and wifi available for that kernel :'-( (I told you there is always a but)

UPDATE: that kernel is not more available (seems to be updated while writing this post), new packages are now attached at the end of this post for kernel-2.6.32.3-21.fc13.x86_64

So I recreated the rpms to support them.

You just need to install them and add the following line to /etc/modprobe.d/sound :

options snd_hda_intel model=intel-alc889a

Reboot, check sound preferences:

Increase the volume and unmute in alsamixer, save it and enjoy (no more but !) :)

For those looking how to turn on the lights of the keyboard, just try this :

echo X > /sys/devices/platform/applesmc.768/leds/smc::kbd_backlight/brightness

X is a value from 0 to 255

I packaged imspector 0.9 for fedora 12 x86_64

IMSpector is an Instant Messenger proxy and it supports MSN, Jabber/XMPP, AIM, ICQ, Yahoo, IRC and Gadu-Gadu.

The package is available in the inuits rpm repository

Hello,

If you want to test the latest version of openERP (5.0.6) on Fedora 12 or CentOS 5, you can try the package available on inuits repo (some other packages for other projects will be available too) :-)

Those packages are still in development, don't hesitate to send me feedback.

How to setup the repository :

edit /etc/yum.repos.d/inuits.repo with (for Fedora):

 [inuits]
 name=RPM Inuits repository Fedora $releasever
 baseurl=http://repo.inuits.be/fedora/$releasever/os/
 enabled=1
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-inuits

Don't forget to import the GPG key (you can find it here

 rpm --import RPM-GPG-KEY-inuits