[KLUG Members] KLUG Meeting Notes for 07/08/2003

magoo members@kalamazoolinux.org
08 Jul 2003 23:49:47 -0400


KLUG Meeting Notes:  Tuesday - July 08, 2003  7:00PM       

I.    PRESENTATION RECAP    
II.   NEXT WEEK'S MEETING INFO   <===  GNUCash Revisited!!! 
III.  KLUG MAILING LISTS                
IV.   KLUG & LINUX NEWS FLASHES 
V.    KLUG CONTACT & MEETING INFO 

Tonight's Meeting Moderator:  KLUG Chairperson Todd Pillars


I.  PRESENTATION RECAP           
THIS WEEK'S KLUG PRESENTATION:   (20 active KLUG participants) 
***************************************************************** 
Kerberos V, The New Security Standard
by Adam Williams
  
Kerberos V is a highly secure single sign-on technology, and 
rapidly becoming the standard for corporate computers systems. 
Tonight we'll see a walk through of creating a KDC (Kerberos 
Domain Controller) on a standard RedHat install, as well as 
setting up a workstation. Also receiving honorable mention 
will be LDAP, GSSAPI, and the infamous Microsoft PAC (a 
"proprietary" extension to the Kerberos protocol).

SEE ADAM'S KERBEROS PRESENTATION ON THE KLUG WEB SITE:
http://kalamazoolinux.org/presentations/

PRESENTATION SUMMARY:
*************************
Adam used the new KLUG XGA projector connected to his Toshiba
laptop running Red Hat v9 with OpenOffice.org v1.0.3 (Impress)
to display 75 slides expounding upon Kerberos 5.  We had plenty
of humor (Who let the dogs out?) and he fielded questions with
candor and depth as he progressed through these slides.

The Kerberos logo is from Greek mythology.  A three headed dog
in a keyhole.  The image is symbolic of the fierce beast that 
guarded the entrance to the underworld.  To pass over the River 
Styx one needed a token or a coin for the death ferry's fare!  
Kerberos is an authentication scheme from Massachusetts Institute
of Technology (MIT) using a single sign-on protocol employing a
secret key (time limited authentication ticket) system.

Adam's presentation covered network requirements, defined the 
terms that comprise the environment, described the functionality,
identified the components, listed the supported services, and
showed us how to test the configuration.  We saw how to configure
both the server and the clients via a 12 step listing that then
prepared you for eventually starting the Kerberos authentication
service.  Adam explained how Carnegie Mellon's Cyrus - SASL GSSAPI
project relates to Kerberos.
 
Adam addressed Kerberos administration issues and included the
common mistakes that one should avoid.  We saw the client side
configuration which involved only three steps.  Directory enabled
Linux with OpenLDAP can incorporate Kerberos.  He described the
user's considerations and we heard about the Win32 aspects of this
authentication technology.  While the protocol does provide tight
and painless security it also has a weakness which was described.
A cracker gaining the Kerberos "stash" file could have full access
to your domain and all that it contains.  Clear cautions were 
voiced and emphasized.  Guard this file with dogged vigilance.

The content of tonight's presentation was extremely complex and
is not well documented elsewhere.  Adam did a professional and
concise job of putting down all the particulars that one would
need to fully grasp and implement this network security tool.

Kerberos is Open Source but the MIT incarnation is not GPL'd.
There is a project that is!  You'll find lots of detail and
many references within his presentation slides to empower you 
in your quest to implement this security protocol.  Newbies
to Linux would have been bewildered and undoubtedly displaying
glazed over eyes about 15 minutes into this presentation.  He
hopefully didn't overwhelm any unsuspecting attendees tonight.
KLUG has had casualties in the past when people have attended 
such highly technical and elite presentations.  KLUG is for
people at ALL levels of Linux  involvement and we do not want to 
limit KLUG expert users from sharing their high level technical
knowledge.  


LEARN MORE ABOUT KERBEROS V   (See Adam's resource listing too)
http://web.mit.edu/kerberos/www/
  
Adam is a network administrator based in Grand Rapids, but the 
network he deals with is all over Michigan, with a couple of 
hundred workstations, running Linux and other Operating Systems. 
Not only does he deal with domain issues at work, but he is 
also the owner of the domain "whitemice.org". Adam has been a 
regular contributor to technical discussions on our main mailing 
list, both presenting and solving some of the most challenging 
networking and configuration problems.


II.  NEXT KLUG MEETING - TUESDAY  07/15/2003   
****************************************************************** 
GNUCash Revisited 
by Brian Ritz

GNUCash is a financial program for the household. It is similar 
to Quicken, but at the same time it is a little more powerful. 
And of course the best part is that it is free and comes with 
gnome. In tonights presentation we will be taking a look at home 
use for GNUCash. From using it to keep track of your checkbook 
to savings accounts. It also some neat features like reports 
and graphs for tracking you money trail. In late summer/fall 
I will be doing another presentation on GNUCash, on whether 
it is ready to use for a business or not so stay tuned.
  
Brian Ritz is currently working in commercial logistics
and has been working with Linux almost exclusively as 
a user of the Whitemice.Org network. He holds a degree in 
Finance from Grand Valley State University.


III.   K L U G    M A I L I N G    L I S T S  - 
************************************************************* 
Diversified mailing lists can be found on the KLUG web site. 
http://kalamazoolinux.org/listserv/
Facilitated by - John Bridleman listmaster@kalamazoolinux.org   
Sign up and participate to serve the Open Source community!!! 
(240 plus registrations on the "KLUG members" mailing list)


IV.   K L U G    &    L I N U X     N E W S    F L A S H E S ! ! ! 
=====================================================================
RED HAT SETS EYE ON JAPANESE MARKET
Red Hat Linux distributor Red Hat is positioning for a share of the 
Japanese market, and has turned to Japanese open source technology 
integrator Ten Art-ni to give it a foothold.
http://www.linux.org/news/2003/07/04/0002.html
=====================================================================
LINUS TORVALDS ABOUT SCO, IP, MS, AND TRANSMETA
" San Jose Mercury News has an interview with Linus. He talks about 
about SCO vs IBM and gives his opinion on Microsoft. He also shed 
light on his decision to leave chip maker Transmeta for a Linux 
corporate software consortium, the Open Source Development Lab."  
http://slashdot.org/article.pl?sid=03/07/05/1728201&mode=thread
&tid=106&tid=185
=====================================================================
CAN OPEN SOURCE SAVE HARDWARE?
"Tom's Hardware has a interesting story about Open Source saving 
the hardware industry. Pretty good read all in all. Hopefully 
chip makers and vendors won't have to bend to the iron might 
of Microsoft any longer." Some good comments on how early-adopters 
and enthusiasts are being marginalized by the industry, too.
http://slashdot.org/article.pl?sid=03/07/05/1441256&mode=
thread&tid=137
=====================================================================
GNUMERIC TURNS 5
"Five years ago, Miguel committed the first code for Gnumeric 
to CVS. In a testament to the quality of the code several lines 
are still in use. Since that time the project has grown to more 
than 300,000 lines and now supports all 325 worksheet functions 
in MS Excel, plus almost 100 more. This seemed like a good time 
to thank all the people who have contributed to Gnumeric over 
the years. We're about to start the run up to the the next 
stable release which will be out in a few weeks and we look 
forward to continuing work with GNOME, and the community at 
large to produce the most powerful spreadsheet in the world."  
http://slashdot.org/article.pl?sid=03/07/04/1844203&mode=
thread&tid=131&tid=189
=====================================================================
LINUS SAYS PRE-V2.6 IS COMING
Linus has announced that the pre-2.6 series will be starting 
in early July. Despite not having been able to meet the 
release goal for 2.6 in June 2003, the next stable version 
is not as far away as you may think. You can take your guess 
based on the fact there was a 9 month period between first 
est version of 2.4 and the official release of 2.4.0 on 
January 2001."  
http://slashdot.org/article.pl?sid=03/07/04/138231&mode=
thread&tid=106&tid=185
=====================================================================
XBOX LINUX MADE POSSIBLE WITHOUT A MODCHIP
"Free-X have released an  exploit for the Xbox that will let you 
get Linux on the machine without any hardware mods at all... 
Microsoft is already threatening them with legal action. Here's 
the Free-X statement. Free-X say they had been trying to contact
MS for a month but were ignored, which is why they've released 
the exploit. Should be interesting to watch this one."  
http://slashdot.org/article.pl?sid=03/07/04/0521245&mode=
thread&tid=106&tid=127&tid=185&tid=186&tid=211
=====================================================================
WHICH ORGANIZATIONS HAVE STANDARDIZED ON MOZILLA?
" We are investigating email clients to deploy as our "standard" 
at the college where I work. I'm trying to find out who is using 
Mozilla for their email. When I say "who" I mean organizationally, 
as I realize 99% of us geeks already use it. What organizations 
out there are rolling out Mozilla as their standard web and/or 
email client, and why? Yes, we are considering using Thunderbird, 
once it is final. Thanks!" Hopefully this will make companies 
realize that the Internet isn't comprised of just IE users.  
READ THE COMMENTS!!!  WOW!
http://ask.slashdot.org/article.pl?sid=03/07/03/0039200&mode=
thread&tid=126&tid=154&tid=187&tid=95
=====================================================================
HEWLETT PACKARD/COMPAQ TO SELL PC'S WITH MANDRAKE V9.1
"HP just announced a new PC model (HP Compaq d220) that's available 
preloaded with Windows or Mandrake 9.1. The machine appears to be 
targeted to business users, although it's on the lower-end of the 
scale.  Mandrake also has a press release announcing the deal, 
which will grow to include four other HP models. Is this a sign 
that top tier manufacturers are taking Linux more seriously, or 
at least seeing a profitable niche?" 
http://slashdot.org/article.pl?sid=03/07/02/227248&mode=
thread&tid=147&tid=187
=====================================================================
CORE MAC OS X AND UNIX PROGRAMMING
"Finally, a new OS X programming book that isn't just another 
introduction to Cocoa. This book adds a lot to the available 
references by covering the system as a flavor of Unix, 
presenting information on important topics like sockets, 
multithreading and pipes, which other OS X books leave out. 
It also includes coverage and sample code for some of the 
unfamiliar new technologies that have been introduced recently, 
such as the Keychain, Rendezvous (aka Zeroconf), and using 
the Security framework to authorize users."
http://books.slashdot.org/article.pl?sid=03/07/01/1636204&mode=
thread&tid=107&tid=126&tid=156&tid=187
=====================================================================
HORMEL SUES OVER SPAMARREST NAME
"Hormel has filed a lawsuit against Spam Arrest LLC. for 
endangering "substantial goodwill and good reputation" of 
their meat product, Spam. If Hormel wins, it could be bad 
news for umpteen companies that make use of the word spam 
in their name."  
http://yro.slashdot.org/article.pl?sid=03/07/02/1453254&
mode=thread&tid=111&tid=126
====================================================================
GPL MAY NOT WORK IN GERMAN LEGAL SYSTEM
"It may be that the (L)GPL can not be (fully) enforced 
under German jurisdiction. This is at least the conclusion 
professor Gerald Spindler of the jurisprudential faculty 
of the University of Goettingen came to when he examines 
the Legal questions of the open source software (It's 
long, it's complex and it's in German and it's written 
by a professor, so don't expect to understand anything, 
if you are not a German lawyer).
http://yro.slashdot.org/article.pl?sid=03/07/02/0245228&
mode=thread&tid=117&tid=99
=====================================================================
NETSCAPE FOUNDER SAYS WEB BROWSING INNOVATION DEAD
"Marc Andreessen told Reuters today that browser innovation 
ended five years ago (which would put us at about Navigator 
4.5 beta -- what was so innovative about that? The "What's 
Related" button? Beatnik integration?) "Navigation is an 
embarrassment. Using bookmarks and back and forth buttons 
-- we had about eighteen different things we had in mind 
for the browser." Well, pass me the NDA and tell me what 
they were!"  
http://slashdot.org/article.pl?sid=03/07/01/2354205&mode=
thread&tid=114&tid=126&tid=95
=====================================================================
SINBAD HEARS LINUX'S SIREN SONG
A thousand years ago, people were telling the story of Sinbad
 the Sailor and his seven amazing voyages. Now the 
swashbuckling sailor has been given new life with Linux. 
http://www.wired.com/news/culture/0,1284,59452,00.html
=====================================================================
MICROSOFT'S OPEN SOURCE NT: LINUX'S NEMESIS?
As Linux continues to penetrate the desktop space, Microsoft 
could open new revenue streams by providing support for 
subscribers to its open-source NT. Although companies are 
slowly moving their desktops to Linux, an open-source 
version of Windows, with Microsoft providing support, might 
be something they would wait for. In many ways, it could 
derail the Linux express train before it reaches full speed.
http://comment.zdnet.co.uk/story/0,,t479-s2136886,00.html
=====================================================================
OVERVIEW OF LINUX PRINTING SYSTEMS
This article presents a brief overview of the main printing 
systems in use on most Linux systems, with an introduction 
to the concepts and procedures at the core of UNIX printing. 
We will finish by approaching the future of Linux printing, 
and how it is quickly improving. 
http://www.linuxjournal.com/article.php?sid=6729&mode=
thread&order=0
=====================================================================
OPEN SOURCE COMPANY WANTS CASH TO OPEN SOURCE  [$HOCKER?]
"A Russian open source developer says he needs money before 
he can release code written for the OpenOffice suite.  
Vladislav Kharchev, CEO of Stunnix,explains that an unnamed 
investor paid for four months' work before pulling out. 
'We feel the great importance of our modifications, and it 
would be a pain if they would be missing in OpenOffice.org 
1.1,' he says on the Stunnix website."
http://linuxtoday.com/developer/2003070301926NWBZDT
=====================================================================
MORTON JOINS TORVALDS AT OSDL
No sooner had OSDL announced, as they did last month, that the 
father of Linux, Linus Torvalds, was now a full-time fellow at 
the Lab, than they apparently set about wooing his right-hand 
man, Andrew Morton - currently principal engineer for Digeo 
Inc. - into the fold.
http://www.linuxworld.com/story/32987.htm
====================================================================
SCO'S TREATMENT OF LINUX "AKIN TO WATER TORTURE" 
"Will This Feud Choke the Life Out of Linux?" asks a 
BusinessWeek writer in the July 7 issue, in reference to the 
suit filed against IBM in March by SCO Group Inc. 
http://www.linuxworld.com/story/32986.htm
=====================================================================
IN THE OPEN SOURCE SPIRIT WE CALL FOR MEETING SUPPORT VOLUNTEERS
Please don't make us RANT about organization needs for volunteers!
We need additional volunteers to act as the "Meeting Firewall" 
to handle Chamber access control and security issues.  The Chamber
has asked us to safeguard their assets as KLUG members come and 
go from the meeting room each Tuesday night.  Bob surely needs 
help with this function which requires that you get to the meetings
early and see that the everything is locked up as the last person 
leaves.  This means being at the Chamber at 6:30pm and hanging 
around until 10:00pm. We have other volunteer positions available
and many of these duties could be shared if you have an interest.  
G E T      I N V O L V E D      I N      K L U G    N O W ! ! !  
Please contact installmaster@kalamazoolinux.org for more details. 
See http://kalamazoolinux.org/organize for position descriptions.
=====================================================================
THE WMU COMPUTER CLUB - YAKKO IS THEIR MAIN LINUX SERVER!
The Computer Club at Western Michigan University exists to promote 
a better understanding of computers for both members of the club 
and members of the WMU community. This goal is achieved through 
various club projects, member presentations, Linux Install Parties, 
and discussions at our meetings. Do you need help getting your 
computer to function properly? Are you interested in installing 
Linux? Do you just want a place to hang out and have a good time? 
If the answer to any of those questions or any other question is 
'yes' then you should come check us out. We welcome anyone 
(regardless of computer experience) who is willing to share 
whatever talents they have, listen to others, and have a good 
time.   
http://yakko.cs.wmich.edu/
=====================================================================
KLUG SUPPORTING MEMBERS CAN GET THEIR PICTURE ON THE WEB SITE
Want your picture posted with your name as a KLUG Supporting
Member?  Send the tasteful graphic file and your request to 
webmaster@kalamazoolinux.org. 
=====================================================================
KLUG NOW OWNS A NEW XGA VIDEO PROJECTOR
Adam reported that KLUG has upgraded the video projector from SVGA
to XGA!!!  From 800 x 600 to 1024 x 768, it should boost presentation
viewing pleasure.  This projector is well rated: 
INFOCUS LP335 DLP PROJECTOR   
1000 LUMEN - XGA - LP-0335-V + Extended 12 month warranty
Digital Light Processing DLP which provides sharp images under 
variable lighting conditions.  
http://www.consumersearch.com/www/office/portable_pc_projectors/
Anyone know of a buyer for our  2 year old KLUG SVGA projector?
We should ask $800 for this unit and it is in excellent condition.
It has about 150 hours on a 1000 hour bulb.  Works just fine.
It is an InFocus model LP425ZVB with padded carrying case.
Contact Todd chair@kalamazoolinux.org for more info.
=====================================================================
KLUG NEEDS VOLUNTEERS TO FILL SEVERAL VACANT POSITIONS 
Nutrimaster and Education Director volunteer slots are still vacant. 
Please contact chair@kalamazoolinux.org for more details. 
Volunteers are needed for Beginner's Nights and Installfests.  
Please contact installmaster@kalamazoolinux.org for more details. 
See http://kalamazoolinux.org/organize for position descriptions. 
===================================================================== 
********* - ********* - ********* - ********* - ********* - *********  
KLUG NEEDS SPEAKERS FOR THE WEEKLY LINUX RELATED PRESENTATIONS! 
********* - ********* - ********* - ********* - ********* - *********  
Contact Adam if you can give a presentation on any area of Linux 
related subject or application.  He would also like to hear your 
suggestions for topics and possible speaker referrals.  Do you 
know anyone who is using Linux in Southwest Michigan and might 
be willing to share their Linux expertise by making a technical 
presentation?  Professional, individual, or commercial speakers 
on Linux accepted.  Contact programdirector@kalamazoolinux.org 
with your referrals and ideas.  See the meeting schedule for open 
dates.   http://www.kalamazoolinux.org/meetings/schedule.php3
=====================================================================


V.   K L U G    C O N T A C T   &   M E E T I N G    I N F O  
************************************************************* 
KLUG WEB SITE  http://kalamazoolinux.org

MEMBERS AND GUESTS - COME JOIN US FOR A MEETING!!! 
http://kalamazoolinux.org/meetings           
WE MEET WEEKLY, EACH TUESDAY AT 7:00PM.      
                                             
Our meeting site is the Kalamazoo Chamber    
of Commerce office building downtown.          
346 W. Michigan Ave. - Kalamazoo, MI  49007 
http://kazoolug.org/meetings/maps.php3   <=== MAP! 

CONTACT INFORMATION: 
Kalamazoo Linux Users Group, Inc. 
6749 South Westnedge Avenue 
Suite K-288 
Portage  MI 49002 
e-mail address: chair@kalamazoolinux.org

NOTE:
Effective January 1st, 2002, KLUG has been granted 501C3 status by 
the IRS. This is a big step forward. Now all donations (including 
hardware, services, cash, or membership dues) are tax deductible!
                 
                  
  >><< send corrections, additions, flames to the KLUG scribe >><< 
                          Ralph Worick 
                recordingsecretary@kalamazoolinux.org
                               = or = 
                 KLUG Meeting Notes Assistant Editor 
                          Bruce Atherton 
                    Taz <htgage3@chartermi.net> 


Copyright (c)  2003  Kalamazoo Linux Users Group, Inc.
Permission is granted to copy, distribute and/or modify this document
under the terms of the GNU Free Documentation License, Version 1.2
or any later version published by the Free Software Foundation;
A copy of the license is included in the section entitled "GNU
Free Documentation License".  
http://www.gnu.org/licenses/fdl.html#TOC1