Bristol and Bath Linux: Januari 2015

Sabtu, 24 Januari 2015

Bristol Digest, Vol 586, Issue 6

Jumat, 23 Januari 2015

Bristol Digest, Vol 586, Issue 5

Send Bristol mailing list submissions to
bristol@mailman.lug.org.uk

To subscribe or unsubscribe via the World Wide Web, visit
https://mailman.lug.org.uk/mailman/listinfo/bristol
or, via email, send a message with subject or body 'help' to
bristol-request@mailman.lug.org.uk

You can reach the person managing the list at
bristol-owner@mailman.lug.org.uk

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Bristol digest..."

Today's Topics:

1. Re: NRPE/Nagios (Martin Moore)
2. Re: NRPE/Nagios (Martin Moore)
3. Re: NRPE/Nagios (Keith Edmunds)
4. Re: NRPE/Nagios (Martin Moore)
5. Off Topic: Google API's (Fernando Orus)

----------------------------------------------------------------------

Message: 1
Date: Thu, 22 Jan 2015 14:07:39 -0000
From: "Martin Moore" <martinm@it-helps.co.uk>
To: "'Bristol and Bath Linux User Group'" <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] NRPE/Nagios
Message-ID: <112501d0364c$caaaccf0$600066d0$@co.uk>
Content-Type: text/plain; charset="us-ascii"

Nagios server is Ubuntu 10.04.4 LTS

Not sure where it came from, sources.list

deb http://mirrors.webfusion.com/ubuntu lucid main restricted universe
multiverse
deb http://mirrors.webfusion.com/ubuntu lucid-updates main restricted
universe multiverse
deb http://mirrors.webfusion.com/ubuntu lucid-security main restricted
universe multiverse
deb http://archive.ubuntu.com/ubuntu lucid-backports main restricted
universe multiverse
deb http://archive.canonical.com/ lucid partner

Remotes are both CentOS release 6.5
not use Centos before, I'm guessing the repos are epel and dag from

yum --enablerepo=dag -y install nagios-nrpe nagios-plugins-nrpe
yum --enablerepo=epel -y install nrpe nagios-plugins-all.x86_64

-----Original Message-----
From: bristol-bounces@mailman.lug.org.uk
[mailto:bristol-bounces@mailman.lug.org.uk] On Behalf Of David Corking
Sent: 22 January 2015 11:03
To: Bristol and Bath Linux User Group
Subject: Re: [bristol] NRPE/Nagios

Martin, CentOS and Ubuntu version numbers may help too, as well as which
package repo you got Nagios/NPRE from (IME init scripts vary according to
the tastes of the package maintainer.) David

_______________________________________________
Bristol mailing list
Bristol@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/bristol

------------------------------

Message: 2
Date: Thu, 22 Jan 2015 14:19:21 -0000
From: "Martin Moore" <martinm@it-helps.co.uk>
To: "'Bristol and Bath Linux User Group'" <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] NRPE/Nagios
Message-ID: <112c01d0364e$6cbe1550$463a3ff0$@co.uk>
Content-Type: text/plain; charset="utf-8"

telnet remote1 5666
Trying xx.xx.xx.xx...
Connected to remote1.
Escape character is '^]'.
Connection closed by foreign host.

So doesn't look too good!

Check_nrpe returns the infamous 'CHECK_NRPE: Error - Could not complete SSL handshake.'

Not sure if/what firewall is running. Not shorewall. How can I tell?

Still doesn't explain why the server appears to be connecting to the localhost for all servers though.

I've installed Zabbix on one server but that is having problems connecting to itself...... And looks a bit complex - I like to simple grid in Nagios, but not the config files :(

Martin.

-----Original Message-----
From: bristol-bounces@mailman.lug.org.uk [mailto:bristol-bounces@mailman.lug.org.uk] On Behalf Of Shane McEwan
Sent: 22 January 2015 11:54
To: bristol@mailman.lug.org.uk
Subject: Re: [bristol] NRPE/Nagios

On 22/01/15 09:25, Martin Moore wrote:
> I?ve installed Nagios/NRPE on 3 boxes.
>
>
>
> The Nagios server is on an Ubuntu box, the slaves are Centos.

NRPE might be running via xinetd so there might not be a process running all the time. The best way to check is from the Nagios server run:

telnet nrpe_client_host 5666

If you get a connection then NRPE is probably OK. If you don't get a connection then either NRPE isn't running, xinetd isn't configured correctly (if it's using xinetd), the CentOS firewall is blocking it, or something else. :-)

Also, on the Nagios host there should be a check_nrpe Nagios check command (in the Nagios libexec directory, usually) that you can run:

/usr/local/nagios/libexec/check_nrpe -H nrpe_client_host

You can also use check_nrpe to check specific items:

/usr/local/nagios/libexec/check_nrpe -H nrpe_client_host -c check_load

When all that is working for you then you need to make sure your Nagios config uses the check_nrpe command for each remote service, otherwise you'll end up just checking the local machine:

define service{
use generic-service
host_name tecmint
service_description CPU Load
check_command check_nrpe!check_load
}

Or . . . do yourself a favour and install Zabbix. :-P

Shane.

_______________________________________________
Bristol mailing list
Bristol@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/bristol

------------------------------

Message: 3
Date: Thu, 22 Jan 2015 18:49:10 +0000
From: Keith Edmunds <kae@midnighthax.com>
To: bristol@mailman.lug.org.uk
Cc: martinm@it-helps.co.uk
Subject: Re: [bristol] NRPE/Nagios
Message-ID: <20150122184910.0688b444@ws.the.cage>
Content-Type: text/plain; charset=US-ASCII

On Thu, 22 Jan 2015 10:54:09 -0000, martinm@it-helps.co.uk said:

> However nagios fails to start with check_remote_procs

Have you defined check_remote_procs?

> Not sure if/what firewall is running. Not shorewall. How can I tell?

iptables -L

> Still doesn't explain why the server appears to be connecting to the
> localhost for all servers though.

Check the command definitions.

> I've installed Zabbix on one server but that is having problems
> connecting to itself...... And looks a bit complex - I like to simple
> grid in Nagios, but not the config files :(

OK, what are you trying to achieve? You've started with Nagios, and now
you're looking at Zabbix. Both work, both can be effective, but neither is
a five minute setup. I suggest you define your requirements (a single
sheet of A4 will do for that), then you need to spend some time reading
the docs to see which of Nagios or Zabbix (or any of the other myriad of
monitoring utilities there are) best meets your neeeds. You then start
building up checks from a few local through a few remote to as many checks
as you need.
--
"A champion is someone who gets up when he can't" - Jack Dempsey

------------------------------

Message: 4
Date: Thu, 22 Jan 2015 19:11:49 -0000
From: "Martin Moore" <martinm@it-helps.co.uk>
To: "'Bristol and Bath Linux User Group'" <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] NRPE/Nagios
Message-ID:
<!&!AAAAAAAAAAAYAAAAAAAAAFLxZtQqo65Oo+1jhlUB9DvCgAAAEAAAADgmnA/3RsNLtrG1L7cJMNIBAAAAAA==@it-helps.co.uk>

Content-Type: text/plain; charset="us-ascii"

>Have you defined check_remote_procs?
Not sure. I assumed it was part of nagios. I'll check.

>> Not sure if/what firewall is running. Not shorewall. How can I tell?
>iptables -L

Ta.

>> Still doesn't explain why the server appears to be connecting to the
>> localhost for all servers though.

>Check the command definitions.
Will do.

Nagios is perfect for the situation - I tried Zabbix as it was recommended.
I'll stick with Nagios!

Cheers,

Martin.

-----Original Message-----
From: bristol-bounces@mailman.lug.org.uk
[mailto:bristol-bounces@mailman.lug.org.uk] On Behalf Of Keith Edmunds
Sent: 22 January 2015 18:49
To: bristol@mailman.lug.org.uk
Cc: martinm@it-helps.co.uk
Subject: Re: [bristol] NRPE/Nagios

On Thu, 22 Jan 2015 10:54:09 -0000, martinm@it-helps.co.uk said:

> However nagios fails to start with check_remote_procs

Have you defined check_remote_procs?

> Not sure if/what firewall is running. Not shorewall. How can I tell?

iptables -L

> Still doesn't explain why the server appears to be connecting to the
> localhost for all servers though.

Check the command definitions.

> I've installed Zabbix on one server but that is having problems
> connecting to itself...... And looks a bit complex - I like to simple
> grid in Nagios, but not the config files :(

OK, what are you trying to achieve? You've started with Nagios, and now
you're looking at Zabbix. Both work, both can be effective, but neither is a
five minute setup. I suggest you define your requirements (a single sheet of
A4 will do for that), then you need to spend some time reading the docs to
see which of Nagios or Zabbix (or any of the other myriad of monitoring
utilities there are) best meets your neeeds. You then start building up
checks from a few local through a few remote to as many checks as you need.
--
"A champion is someone who gets up when he can't" - Jack Dempsey

_______________________________________________
Bristol mailing list
Bristol@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/bristol
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2015.0.5645 / Virus Database: 4260/8952 - Release Date: 01/18/15

------------------------------

Message: 5
Date: Fri, 23 Jan 2015 01:46:27 +0000
From: Fernando Orus <forus@bts-usa.com>
To: 'Bristol and Bath Linux User Group' <bristol@mailman.lug.org.uk>
Subject: [bristol] Off Topic: Google API's
Message-ID: <9177792.HMG9dXm8d3@fernando-lemur-ultra>
Content-Type: text/plain; charset="us-ascii"

Hi guys,

I realise this is rather off topic but after having spent
quite a long time trying to figure out what I am doing wrong
I've decided to try and ask if any of you have done
something similar before.

I've written a small modification of the GMailAPIQuickStart
sample to try to read the emails with a certain label. Now,
I'd say reading the labels (that works) and reading the
messages (that doesn't) would be allowed with a
"https://www.googleapis.com/auth/gmail.modify" scope but
apparently it is not true or I am doing something else
wrong. This is what I get:

{
"code" : 403,
"errors" : [ {
"domain" : "global",
"message" : "Delegation denied for ferorus@gmail.com",
"reason" : "forbidden"
} ],
"message" : "Delegation denied for ferorus@gmail.com"
}

Am I in luck? Has any of you had done something like this
before? I'm using java but I would happily use any other
language.

See you on Saturday, anyway.

Cheers,
Fernando

-------------- next part --------------
A non-text attachment was scrubbed...
Name: GmailApiQuickstart.java
Type: text/x-java
Size: 3779 bytes
Desc: not available
URL: <https://mailman.lug.org.uk/mailman/private/bristol/attachments/20150123/8b9c5553/attachment-0001.java>

------------------------------

_______________________________________________
Bristol mailing list
Bristol@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/bristol

End of Bristol Digest, Vol 586, Issue 5
***************************************

Kamis, 22 Januari 2015

Bristol Digest, Vol 586, Issue 4

Rabu, 21 Januari 2015

Bristol Digest, Vol 586, Issue 3

Selasa, 20 Januari 2015

Bristol Digest, Vol 586, Issue 2

Senin, 19 Januari 2015

Bristol Digest, Vol 586, Issue 1

Minggu, 18 Januari 2015

Bristol Digest, Vol 585, Issue 11

Sabtu, 17 Januari 2015

Bristol Digest, Vol 585, Issue 10

Send Bristol mailing list submissions to
bristol@mailman.lug.org.uk

To subscribe or unsubscribe via the World Wide Web, visit
https://mailman.lug.org.uk/mailman/listinfo/bristol
or, via email, send a message with subject or body 'help' to
bristol-request@mailman.lug.org.uk

You can reach the person managing the list at
bristol-owner@mailman.lug.org.uk

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Bristol digest..."

Today's Topics:

1. Re: LDAP (Martin Moore)
2. Re: LDAP (Gavin Henry)
3. Re: LDAP (Martin Moore)
4. Re: LDAP (Gavin Henry)
5. Re: LDAP (Gavin Henry)

----------------------------------------------------------------------

Message: 1
Date: Sat, 17 Jan 2015 18:51:40 -0000
From: "Martin Moore" <martinm@it-helps.co.uk>
To: "'Bristol and Bath Linux User Group'" <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] LDAP
Message-ID:
<!&!AAAAAAAAAAAYAAAAAAAAAFLxZtQqo65Oo+1jhlUB9DvCgAAAEAAAAJVuUXlGpDRGvkx98r7ve/4BAAAAAA==@it-helps.co.uk>

Content-Type: text/plain; charset="us-ascii"

>Single SignOn across multiple apps isn't the same as the same username and
password to be used on different apps. Does your client understand that?

The client has apparently 'suggested' LDAP (new job for me, been there 2
weeks), I'm making sure it'll do what is needed before I approve it.

The idea is that a new user creates an account once that is used on both
systems, and any pwd etc. change is propagated.

>What do these domains look like?

Client1.myco.com

Client2.myco.com

Client3.myco.com

>You can serve as many suffixes as you like, but each needs it's own config
etc. How many do you see serving? It may be better to design your DIT to
suit this application.

Not sure - not more than 10, maybe just the one on LDAP.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.lug.org.uk/mailman/private/bristol/attachments/20150117/22a35cff/attachment-0001.html>

------------------------------

Message: 2
Date: Sat, 17 Jan 2015 19:22:41 +0000
From: Gavin Henry <ghenry@suretecsystems.com>
To: Bristol and Bath Linux User Group <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] LDAP
Message-ID:
<CAPcb_GLJia2kB8GYgW-MTs=+As=yWsmj2HDWRYRAxgwgo29m8Q@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

On 17 January 2015 at 18:51, Martin Moore <martinm@it-helps.co.uk> wrote:
>>Single SignOn across multiple apps isn't the same as the same username and
>> password to be used on different apps. Does your client understand that?
>
> The client has apparently 'suggested' LDAP (new job for me, been there 2
> weeks), I'm making sure it'll do what is needed before I approve it.
>

Check if they mean Single SignOn then. That's signon once to one app
and be authenticated and/or authorised to access/use the other apps.

If just same user/pass and prompted for them by each app, then fine.
That doesn't mean LDAP can't still to the auth/authz part just that
something like http://shibboleth.net/ could be used to share the "I've
already be authorized by another app" stuff.

>
> The idea is that a new user creates an account once that is used on both
> systems, and any pwd etc. change is propagated.

OK. Well a directory server would hold the password, so any app that
changes it only changes it there. Unless you are meaning that all the
systems have their own local password store?

>>What do these domains look like?
>
> Client1.myco.com
>
> Client2.myco.com
>
> Client3.myco.com

Ok, these could translate to:

ou=users,ou=client1,dc=myco,dc=com
ou=groups,ou=client1,dc=myco,dc=com

etc. with regex ACL's to work on the ou=client1/2 part.

>
>>You can serve as many suffixes as you like, but each needs it's own config
>> etc. How many do you see serving? It may be better to design your DIT to
>> suit this application.
>
> Not sure - not more than 10, maybe just the one on LDAP.

See above. Just one suffix of dc=myco,dc=com

>
> _______________________________________________
> Bristol mailing list
> Bristol@mailman.lug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/bristol

--
Kind Regards,

Gavin Henry.
Managing Director.

T +44 (0) 1224 279484
M +44 (0) 7930 323266
F +44 (0) 1224 824887
E ghenry@suretec.co.uk

Open Source. Open Solutions(tm).

http://www.suretecsystems.com/

Suretec Systems is a limited company registered in Scotland. Registered
number: SC258005. Registered office: 24 Cormack Park, Rothienorman,
Inverurie,
Aberdeenshire, AB51 8GL.

Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html

Do you know we have our own VoIP provider called SureVoIP? See
http://www.surevoip.co.uk

Did you see our API? http://www.surevoip.co.uk/api

------------------------------

Message: 3
Date: Sat, 17 Jan 2015 20:42:16 -0000
From: "Martin Moore" <martinm@it-helps.co.uk>
To: "'Bristol and Bath Linux User Group'" <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] LDAP
Message-ID:
<!&!AAAAAAAAAAAYAAAAAAAAAFLxZtQqo65Oo+1jhlUB9DvCgAAAEAAAAO6prMr3FoxOhkAyt8WaU/YBAAAAAA==@it-helps.co.uk>

Content-Type: text/plain; charset="us-ascii"

Thanks - SingleSignon looks most likely from the very brief comment I've
had, but it's useful to know the difference as it could be either method!

>OK. Well a directory server would hold the password, so any app that
changes it only changes it there. Unless you are meaning that all the
systems have their own local password store?

Whatever works - I've never used LDAP so not quite sure how it works yet. I
was under the impression that it replicated user/access data - are you
saying it is retrieved from a master server (the directory server?) on
demand?

-----Original Message-----
From: bristol-bounces@mailman.lug.org.uk
[mailto:bristol-bounces@mailman.lug.org.uk] On Behalf Of Gavin Henry
Sent: 17 January 2015 19:23
To: Bristol and Bath Linux User Group
Subject: Re: [bristol] LDAP

On 17 January 2015 at 18:51, Martin Moore <martinm@it-helps.co.uk> wrote:
>>Single SignOn across multiple apps isn't the same as the same username
>>and password to be used on different apps. Does your client understand
that?
>
> The client has apparently 'suggested' LDAP (new job for me, been there
> 2 weeks), I'm making sure it'll do what is needed before I approve it.
>

Check if they mean Single SignOn then. That's signon once to one app and be
authenticated and/or authorised to access/use the other apps.

If just same user/pass and prompted for them by each app, then fine.
That doesn't mean LDAP can't still to the auth/authz part just that
something like http://shibboleth.net/ could be used to share the "I've
already be authorized by another app" stuff.

>
> The idea is that a new user creates an account once that is used on
> both systems, and any pwd etc. change is propagated.

OK. Well a directory server would hold the password, so any app that changes
it only changes it there. Unless you are meaning that all the systems have
their own local password store?

>>What do these domains look like?
>
> Client1.myco.com
>
> Client2.myco.com
>
> Client3.myco.com

Ok, these could translate to:

ou=users,ou=client1,dc=myco,dc=com
ou=groups,ou=client1,dc=myco,dc=com

etc. with regex ACL's to work on the ou=client1/2 part.

>
>>You can serve as many suffixes as you like, but each needs it's own
>>config etc. How many do you see serving? It may be better to design
>>your DIT to suit this application.
>
> Not sure - not more than 10, maybe just the one on LDAP.

See above. Just one suffix of dc=myco,dc=com

>
> _______________________________________________
> Bristol mailing list
> Bristol@mailman.lug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/bristol

--
Kind Regards,

Gavin Henry.
Managing Director.

T +44 (0) 1224 279484
M +44 (0) 7930 323266
F +44 (0) 1224 824887
E ghenry@suretec.co.uk

Open Source. Open Solutions(tm).

http://www.suretecsystems.com/

Suretec Systems is a limited company registered in Scotland. Registered
number: SC258005. Registered office: 24 Cormack Park, Rothienorman,
Inverurie, Aberdeenshire, AB51 8GL.

Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html

Do you know we have our own VoIP provider called SureVoIP? See
http://www.surevoip.co.uk

Did you see our API? http://www.surevoip.co.uk/api

_______________________________________________
Bristol mailing list
Bristol@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/bristol
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2015.0.5645 / Virus Database: 4260/8931 - Release Date: 01/14/15

------------------------------

Message: 4
Date: Sat, 17 Jan 2015 21:10:08 +0000
From: Gavin Henry <ghenry@suretecsystems.com>
To: Bristol and Bath Linux User Group <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] LDAP
Message-ID:
<CAPcb_GLfoJoe84p+89GrHtOHE6MvH4c_PyyY6A92n7ADqP9DNQ@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

On 17 January 2015 at 20:42, Martin Moore <martinm@it-helps.co.uk> wrote:
> Thanks - SingleSignon looks most likely from the very brief comment I've
> had, but it's useful to know the difference as it could be either method!
>
>>OK. Well a directory server would hold the password, so any app that
> changes it only changes it there. Unless you are meaning that all the
> systems have their own local password store?
>
> Whatever works - I've never used LDAP so not quite sure how it works yet. I
> was under the impression that it replicated user/access data - are you
> saying it is retrieved from a master server (the directory server?) on
> demand?
>
>
> -----Original Message-----
> From: bristol-bounces@mailman.lug.org.uk
> [mailto:bristol-bounces@mailman.lug.org.uk] On Behalf Of Gavin Henry
> Sent: 17 January 2015 19:23
> To: Bristol and Bath Linux User Group
> Subject: Re: [bristol] LDAP
>
> On 17 January 2015 at 18:51, Martin Moore <martinm@it-helps.co.uk> wrote:
>>>Single SignOn across multiple apps isn't the same as the same username
>>>and password to be used on different apps. Does your client understand
> that?
>>
>> The client has apparently 'suggested' LDAP (new job for me, been there
>> 2 weeks), I'm making sure it'll do what is needed before I approve it.
>>
>
> Check if they mean Single SignOn then. That's signon once to one app and be
> authenticated and/or authorised to access/use the other apps.
>
> If just same user/pass and prompted for them by each app, then fine.
> That doesn't mean LDAP can't still to the auth/authz part just that
> something like http://shibboleth.net/ could be used to share the "I've
> already be authorized by another app" stuff.
>
>>
>> The idea is that a new user creates an account once that is used on
>> both systems, and any pwd etc. change is propagated.
>
> OK. Well a directory server would hold the password, so any app that changes
> it only changes it there. Unless you are meaning that all the systems have
> their own local password store?
>
>>>What do these domains look like?
>>
>> Client1.myco.com
>>
>> Client2.myco.com
>>
>> Client3.myco.com
>
> Ok, these could translate to:
>
> ou=users,ou=client1,dc=myco,dc=com
> ou=groups,ou=client1,dc=myco,dc=com
>
> etc. with regex ACL's to work on the ou=client1/2 part.
>
>>
>>>You can serve as many suffixes as you like, but each needs it's own
>>>config etc. How many do you see serving? It may be better to design
>>>your DIT to suit this application.
>>
>> Not sure - not more than 10, maybe just the one on LDAP.
>
> See above. Just one suffix of dc=myco,dc=com
>
>>
>> _______________________________________________
>> Bristol mailing list
>> Bristol@mailman.lug.org.uk
>> https://mailman.lug.org.uk/mailman/listinfo/bristol
>
>
>
> --
> Kind Regards,
>
> Gavin Henry.
> Managing Director.
>
> T +44 (0) 1224 279484
> M +44 (0) 7930 323266
> F +44 (0) 1224 824887
> E ghenry@suretec.co.uk
>
> Open Source. Open Solutions(tm).
>
> http://www.suretecsystems.com/
>
> Suretec Systems is a limited company registered in Scotland. Registered
> number: SC258005. Registered office: 24 Cormack Park, Rothienorman,
> Inverurie, Aberdeenshire, AB51 8GL.
>
> Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html
>
> Do you know we have our own VoIP provider called SureVoIP? See
> http://www.surevoip.co.uk
>
> Did you see our API? http://www.surevoip.co.uk/api
>
> _______________________________________________
> Bristol mailing list
> Bristol@mailman.lug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/bristol
> -----
> No virus found in this message.
> Checked by AVG - www.avg.com
> Version: 2015.0.5645 / Virus Database: 4260/8931 - Release Date: 01/14/15
>
>
> _______________________________________________
> Bristol mailing list
> Bristol@mailman.lug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/bristol

--
Kind Regards,

Gavin Henry.
Managing Director.

T +44 (0) 1224 279484
M +44 (0) 7930 323266
F +44 (0) 1224 824887
E ghenry@suretec.co.uk

Open Source. Open Solutions(tm).

http://www.suretecsystems.com/

Suretec Systems is a limited company registered in Scotland. Registered
number: SC258005. Registered office: 24 Cormack Park, Rothienorman,
Inverurie,
Aberdeenshire, AB51 8GL.

Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html

Do you know we have our own VoIP provider called SureVoIP? See
http://www.surevoip.co.uk

Did you see our API? http://www.surevoip.co.uk/api

------------------------------

Message: 5
Date: Sat, 17 Jan 2015 21:54:01 +0000
From: Gavin Henry <ghenry@suretecsystems.com>
To: Bristol and Bath Linux User Group <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] LDAP
Message-ID:
<CAPcb_GK2Y+EymBULzBhvPv_HEfYRLaAVRAFd8jH+NC__6bsiHA@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

>>>OK. Well a directory server would hold the password, so any app that
>> changes it only changes it there. Unless you are meaning that all the
>> systems have their own local password store?
>>
>> Whatever works - I've never used LDAP so not quite sure how it works yet. I
>> was under the impression that it replicated user/access data - are you
>> saying it is retrieved from a master server (the directory server?) on
>> demand?

To be correct, LDAP is the protocol. You'd actually be using a
Directory Server. This server is accessed using the LDAP protocol in
the same way a Web Server could accessed over HTTP. Calling it LDAP on
the openldap mailing will get you shouted at :-)

The Directory server holds entries that contain passwords. There isn't
such a thing as a user, merely an entity that you can bind to the
directory with. That entity will have a userPassword attribute in it.

--
Kind Regards,
Gavin Henry.

------------------------------

_______________________________________________
Bristol mailing list
Bristol@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/bristol

End of Bristol Digest, Vol 585, Issue 10
****************************************

Bristol Digest, Vol 585, Issue 9

Send Bristol mailing list submissions to
bristol@mailman.lug.org.uk

To subscribe or unsubscribe via the World Wide Web, visit
https://mailman.lug.org.uk/mailman/listinfo/bristol
or, via email, send a message with subject or body 'help' to
bristol-request@mailman.lug.org.uk

You can reach the person managing the list at
bristol-owner@mailman.lug.org.uk

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Bristol digest..."

Today's Topics:

1. Re: Simple script query (DHT11 Sensor) (Peter Hemmings)
2. Re: LDAP (Martin Moore)
3. Re: Simple script query (DHT11 Sensor) (James Cownie)
4. Re: Simple script query (DHT11 Sensor) (Richard Stearn)
5. Re: LDAP (Keith Edmunds)
6. Re: LDAP (Gavin Henry)

----------------------------------------------------------------------

Message: 1
Date: Sat, 17 Jan 2015 16:57:18 +0000
From: Peter Hemmings <peter@hemmings.eclipse.co.uk>
To: Bristol and Bath Linux User Group <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] Simple script query (DHT11 Sensor)
Message-ID: <54BA946E.4030605@hemmings.eclipse.co.uk>
Content-Type: text/plain; charset=windows-1252; format=flowed

On 17/01/15 16:30, James Cownie wrote:
> Searching for deciC is unlikely to be helpful, and, I think you have
> confusion between C (the language) and C (Centigrade).
>

ooooops!

> The suggestion is to use a fixed point format internally, which you
> can think of as enumerating your temperatures in 10ths of a degree
> (?deciC?) or hundredths (centiC).

OK

>
> (From a language point of view this would all be more easily done in
> C++ than C, since [aside from the fact that there are likely laready
> fixed point C++ libraries available], you can overload the operators
> on this new type, making it much easier to work with at the user
> level).

OK its all a bit over the top for me and as its only a hobby for a
retired person, I will accept the 0.3 degree inaccuracy, at least I
did make a correction!

>
> -- -- Jim -- James Cownie <jcownie@cantab.net>
>
>
>
> On 17 Jan 2015, at 16:24, Peter Hemmings
> <peter@hemmings.eclipse.co.uk> wrote:
>
>> On 17/01/15 12:13, Richard Stearn wrote:
>>> Alex Butcher (LUG) wrote:
>>>> As it is, that C source is using integer arithmetic, so it'll
>>>> need a littlebit of reworking to use float or double types for
>>>> the temperature instead.
>>>
>>> Or convert the value to deciC, centiC or milliC as appropriate,
>>> do the corrections (offset, slope, ...), sort the decimal point
>>> on output.
>>>
>>
>> As I am a beginner with "C" I do not know exactly how to do it!!,
>> I will probably do as Alex says but if you could point me to where
>> deciC etc is explained I will have a go (had a quick google with no
>> luck).
>>
>> Regards
>>
>> -- Peter H
>>
>> _______________________________________________ Bristol mailing
>> list Bristol@mailman.lug.org.uk
>> https://mailman.lug.org.uk/mailman/listinfo/bristol
>
>
> _______________________________________________ Bristol mailing list
> Bristol@mailman.lug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/bristol
>

Regards
--
Peter H

------------------------------

Message: 2
Date: Sat, 17 Jan 2015 17:17:46 -0000
From: "Martin Moore" <martinm@it-helps.co.uk>
To: "'Bristol and Bath Linux User Group'" <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] LDAP
Message-ID:
<!&!AAAAAAAAAAAYAAAAAAAAAFLxZtQqo65Oo+1jhlUB9DvCgAAAEAAAAEgCy9vgvYBHvdKA20g7w3sBAAAAAA==@it-helps.co.uk>

Content-Type: text/plain; charset="us-ascii"

Great, cheers Keith.

Martin.

-----Original Message-----
From: bristol-bounces@mailman.lug.org.uk
[mailto:bristol-bounces@mailman.lug.org.uk] On Behalf Of Keith Edmunds
Sent: 17 January 2015 16:18
To: bristol@mailman.lug.org.uk
Cc: martinm@it-helps.co.uk
Subject: Re: [bristol] LDAP

On Sat, 17 Jan 2015 16:03:05 -0000, martinm@it-helps.co.uk said:

> Before I say OK and with possible similar requests from other clients
> in mind, is it possible to have multiple 'separate' LDAP
> domains/clients on one server

Yes.

> will LDAP be able to restrict access to just the web stuff

You can restrict LDAP.

> or do I need a separate server for each LDAP client?

No.
--
"A champion is someone who gets up when he can't" - Jack Dempsey

_______________________________________________
Bristol mailing list
Bristol@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/bristol
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2015.0.5645 / Virus Database: 4260/8931 - Release Date: 01/14/15

------------------------------

Message: 3
Date: Sat, 17 Jan 2015 18:21:41 +0100
From: James Cownie <jcownie@cantab.net>
To: Bristol and Bath Linux User Group <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] Simple script query (DHT11 Sensor)
Message-ID: <27D01EAC-6B20-48E9-A149-761C583C8C91@cantab.net>
Content-Type: text/plain; charset="windows-1252"

> OK its all a bit over the top for me and as its only a hobby for a retired person

Don?t knock retired people! It?s approaching for me fast :-)

--
-- Jim
--
James Cownie <jcownie@cantab.net>

On 17 Jan 2015, at 17:57, Peter Hemmings <peter@hemmings.eclipse.co.uk> wrote:

>
>
> On 17/01/15 16:30, James Cownie wrote:
>> Searching for deciC is unlikely to be helpful, and, I think you have
>> confusion between C (the language) and C (Centigrade).
>>
>
> ooooops!
>
>> The suggestion is to use a fixed point format internally, which you
>> can think of as enumerating your temperatures in 10ths of a degree
>> (?deciC?) or hundredths (centiC).
>
> OK
>
>>
>> (From a language point of view this would all be more easily done in
>> C++ than C, since [aside from the fact that there are likely laready
>> fixed point C++ libraries available], you can overload the operators
>> on this new type, making it much easier to work with at the user
>> level).
>
> OK its all a bit over the top for me and as its only a hobby for a retired person, I will accept the 0.3 degree inaccuracy, at least I did make a correction!
>
>>
>> -- -- Jim -- James Cownie <jcownie@cantab.net>
>>
>>
>>
>> On 17 Jan 2015, at 16:24, Peter Hemmings
>> <peter@hemmings.eclipse.co.uk> wrote:
>>
>>> On 17/01/15 12:13, Richard Stearn wrote:
>>>> Alex Butcher (LUG) wrote:
>>>>> As it is, that C source is using integer arithmetic, so it'll
>>>>> need a littlebit of reworking to use float or double types for
>>>>> the temperature instead.
>>>>
>>>> Or convert the value to deciC, centiC or milliC as appropriate,
>>>> do the corrections (offset, slope, ...), sort the decimal point
>>>> on output.
>>>>
>>>
>>> As I am a beginner with "C" I do not know exactly how to do it!!,
>>> I will probably do as Alex says but if you could point me to where
>>> deciC etc is explained I will have a go (had a quick google with no
>>> luck).
>>>
>>> Regards
>>>
>>> -- Peter H
>>>
>>> _______________________________________________ Bristol mailing
>>> list Bristol@mailman.lug.org.uk
>>> https://mailman.lug.org.uk/mailman/listinfo/bristol
>>
>>
>> _______________________________________________ Bristol mailing list
>> Bristol@mailman.lug.org.uk
>> https://mailman.lug.org.uk/mailman/listinfo/bristol
>>
>
> Regards
> --
> Peter H
>
> _______________________________________________
> Bristol mailing list
> Bristol@mailman.lug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/bristol

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.lug.org.uk/mailman/private/bristol/attachments/20150117/67089bda/attachment-0001.html>

------------------------------

Message: 4
Date: Sat, 17 Jan 2015 17:36:27 +0000
From: Richard Stearn <richard@rns-stearn.demon.co.uk>
To: Bristol and Bath Linux User Group <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] Simple script query (DHT11 Sensor)
Message-ID: <54BA9D9B.2040703@rns-stearn.demon.co.uk>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

Peter Hemmings wrote:
> As I am a beginner with "C" I do not know exactly how to do it!!, I
> will probably do as Alex says but if you could point me to where deciC
> etc is explained I will have a go (had a quick google with no luck).

It is a matter of how you represent the information.

One of the tricks when programming is representing the information in a
way that allows you to manipulate it simply and retain the required precision.
Hint: converting from integer to floating point involves loss of precision.
This loss of precision may or may not be important.

In your case the loss of precision is not important. Anyway, I am attempting
to explain what I mean by deciC, centiC, ....

It is a matter of how you represent the information in your program.

1.0 C = 10 deciC = 100 centiC = 1000 milliC

I have not studied what you are doing in detail, however you appear to
have two values (humidity and temperature) both represented as a byte
to the left of the decimal point and one byte to the right.

The range of the above representation potentially covers from -128.99 to
+127.99 or 0.00 to 255.99 (given the printf statement, only 0 .. 9 is used
for the decimal part). So, if you multiply the LHS by 10 and add the RHS
you have a value in deciC (10ths of a deg C).

e.g.

#define TEMP_OFFSET -27
#define MULTIPLIER 10

int deciC;

deciC = (dht11_val[2] * MULTIPLIER) + dht11_val[3];
deciC = deciC + (TEMP_OFFSET);
printf( "%d.%d\n", deciC / MULTIPLIER, deciC % MULTIPLIER );

If the RHS represented 0 .. 99 then use 100 as the multiplier and you have
a value in centiC.

Although the sensor is only rated for 0 .. 50 C, you might want to check
what the output is when you stick it in the freezer. It might just curl
up and report 0C, it might attempt to give a sane output. If it gives
something sane then you will need to account for the sign in your
manipulations.

Or. You could do as Alex suggests and use a float or double representation.
You will still need to account for sign of the temperature (if relevant).

--
Regards
Richard

------------------------------

Message: 5
Date: Sat, 17 Jan 2015 17:44:36 +0000
From: Keith Edmunds <kae@midnighthax.com>
To: bristol@mailman.lug.org.uk
Cc: martinm@it-helps.co.uk
Subject: Re: [bristol] LDAP
Message-ID: <20150117174436.7dbb8d03@ws.the.cage>
Content-Type: text/plain; charset=US-ASCII

LDAP isn't overly complex, but it does need some understanding before you
try implementing it. I'd suggest you read up on it and set it up in a test
environment first. Setting up replication and LDAPS access is a bit more
complex.

Useful tools:

- phpLdapAdmin
- ldapvi

--
"Soccer is one of those things that the rest of world cares about more
than [Americans] do - you know, like healthcare, education and gun
control" - David Letterman

------------------------------

Message: 6
Date: Sat, 17 Jan 2015 18:27:42 +0000
From: Gavin Henry <ghenry@suretecsystems.com>
To: Bristol and Bath Linux User Group <bristol@mailman.lug.org.uk>,
martinm@it-helps.co.uk
Subject: Re: [bristol] LDAP
Message-ID:
<CAPcb_GJD0q7o6q+Z_Za0Ex3akFKwHKAEtG1WjSztTZMYRDfDfQ@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

On 17 Jan 2015 16:36, "Martin Moore" <martinm@it-helps.co.uk> wrote:
>
> I've a potential client who wishes to have a single sign on to their
system and our system using LDAP.
>

Sorry, lurker here.

Single SignOn across multiple apps isn't the same as the same username and
password to be used on different apps. Does your client understand that?

>
> We have multiple sub-domains (different clients) on one box and currently
user access is via a mysql db for each sub-domian/client.
>

What do these domains look like?

>
> Before I say OK and with possible similar requests from other clients in
mind, is it possible to have multiple 'separate' LDAP domains/clients on
one server, will LDAP be able to restrict access to just the web stuff or
do I need a separate server for each LDAP client?

You can serve as many suffixes as you like, but each needs it's own config
etc. How many do you see serving? It may be better to design your DIT to
suit this application.

OpenLDAP ACLs rule :)

Only one instance of slapd is needed, yeah.

Gavin (ghenry@OpenLDAP.org)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.lug.org.uk/mailman/private/bristol/attachments/20150117/68296378/attachment.html>

------------------------------

_______________________________________________
Bristol mailing list
Bristol@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/bristol

End of Bristol Digest, Vol 585, Issue 9
***************************************

Bristol Digest, Vol 585, Issue 8