RAID I LVM2 I KIOSLAVES I FISH I KONQUEROR I SSHFS I TRIPWIRE I GAMBAS DUAL BOOTING WITH FINESSE TRIP UP INTRUDERS WITH TRIPWIRE Since 1994: The Original Magazine of the Linux Community And Not So Easy Ways To fecover RAID jSp r USA $5.00 CAN $6.50 0 RAID AND LVM2 DATA RECOVERY SSH IS NOT JUST A SECURE SHELL FISH FOR DATA WITH KIO BOOT LINUX WITH AN IPOD Let’s go ^ treme Introducing Appro Xtreme Servers & Workstation with 8 DIMM Sockets per CPU 2-way or 4-way, Single or Dual-Core AMD Opteron™ processors Largest memory capacity - 8 DIMM Sockets per CPU, up to 128GB PCI-Express technology to increase I/O bandwidth and reduce system latency Outstanding Remote Management - IPMI 2.0 compliant Cable-free design, ready to run, simple to install, service and maintain Support for Windows® or Linux OS Ideal for memory-intensive and l/O-intensive applications 1U / 2U / 3U Servers and Workstation AMD Opteron™ Processors - AMD64 dual-core technology reduces memory latency and increases data throughput - Dual-core processors with Direct Connect Architecture deliver the best performance per watt with little or no increase in power consumption or heat dissipation. HPC Cluster Solutions Appro delivers high-performance computing solutions to help you maximize productivity for a solid ROI. On-site maintenance and installation services are also available. For more information, please visit www.appro.com or call Appro Sales at 800.927.5464, 408.941.8100. AMD3 Avocenb The Power of Being There ; Discover how the combined power of Avocent and Cyclades IT infrastructure management solutions can take you and your data center to the next level. KVM, cyclades An Avocent. Company serial and power - all over IP. Plus, Intelligent Platform Management Interface (IPMI) and embedded KVM. The Power of Being There®. Times two . Avocent, the Avocent logo, The Power of Being There and Cyclades are registered trademarks of Avocent Corporation or its affiliates. All other trademarks or company names are trademarks or registered trademarks of their respective companies. Copyright © 2006 Avocent Corporation. Visit www.avocent.com/powerx2 CONTENTS 52 RECOVERY OF RAID AND LVM2 VOLUMES When there's something strange in your LVM, who you gonna call? Richard Bullington-McGuire 58 NETWORK TRANSPARENCY WITH KIO Konqueror is a slave to fishing. Or at least it has one. Jes Hall 62 YELLOW DOG LINUX INSTALLS NEATLY ON AN IPOD Take one Mac, insert iPod, boot Linux. Dave Taylor 64 SSHFS: SUPER EASY FILE ACCESS OVER SSH SSH does more than just provide safe communications. Matthew E. Hoskins ON THE COVER • Dual Booting with Finesse, p. 89 • RAID and LVM2 Data Recovery, p. 52 • SSH Is Not Just a Secure Shell, p. 64 • Fish for Data with KIO, p. 58 • Boot Linux with an iPod, p. 62 COVER PHOTO: JOHN LAMB/STONE+/GETTY IMAGES 2 | june 2006 www.linuxjournal.com storage The competition doesn’t stand a chance. If you base deployment decisions on performance and price. Coyote Point's for you. We’ve cornered that market. To prove it we asked The Tolly Group to evaluate our E350si application traffic manager against the competition. The results speak for themselves. Throughput? Almost 40% more than others in our space. Cost of transactions per second? Up to four times less. Connection rate? In some cases, one-sixth the cost. One-sixth! And we're told Coyote Point is the #1 choice for today’s open source networks. But don’t just take our word for it. Get the facts. Call 1.877.367.2696 or write info@coyotepoint.com for your free copy of the full Tolly Report. CONTENTS SSS COLUMNS 24 REUVEN M. LERNER'S AT THE FORGE Google Maps 28 MARCEL GAGNE'S COOKING WITH LINUX If Only You Could Restore Wine 34 DAVE TAYLOR'S WORK THE SHELL Coping with Aces 38 MICK BAUER'S PARANOID PENGUIN Security Features in Red Hat Enterprise 4 44 JON 'MADDOG'' HALL'S BEACHHEAD Shoring Up the Seawall 46 DOC SEARLS' LINUX FOR SUITS Use and Usefulness 96 NICHOLAS PETRELEY'S ETC/RANT SUSE Rocks, Fedora Locks IN EVERY ISSUE 10 LETTERS 14 UPFRONT 50 NEW PRODUCTS 81 ADVERTISER INDEX INDEPTH 68 AN INTRODUCTION TO GAMBAS Will VB refugees gamble on Gambas? Mark Alexander Bain 76 HOW TO SET UP AND USE TRIPWIRE Don't let intruders go unnoticed. Marco Fioretti 80 THE WORLD IS A LIBFERRIS FILESYSTEM libferris can make your toaster look like a filesystem. Ben Martin 86PENDRIVES AND THE DISTRIBUTIONS FOR THEM A look at the distros you can use for booting Linux from a pendrive. Juan Marcelo Rodriguez 89 THE ULTIMATE LINUX/WINDOWS SYSTEM Some of your Windows and Linux applications can share configuration data. Kevin Farnham 93 CONVERTING VIDEO FORMATS WITH FFMPEG FFmpeg is a mini Swiss Army knife of format conversion tools. Suramya Tomar Next Month RUBY Next month we get you started pro¬ gramming in a finely cut and polished language called Ruby. We also have some valuable content for those who are already Ruby programmers, like how to manage your Ruby libraries. And, did you know that you can use Ruby to glue together a vast variety of resources in your enterprise? We also explore Ruby on Rails and the changes in version 1.1. Marcel takes a whole 'nother slant on Ruby and introduces you to a variety of games with rubies in them. There's more. Jon "maddog" Hall charts the depths of the sea, littered with the abandoned sunken hulls of proprietary design. Doc Searls addresses a related issue, runaway patents and absurd copyrights. All in the next issue of Linux Journal. 4 | june 2006 www.linuxjournal.com Tyan Computer USA 32S8 Laurelview Court Fremont, CA 9453EJ USA Tel: +1-51Q-6S1-QQ60 Fas: +1 51D 651 7658 Pre-Safea Teh *1-510-651-6660x5120 Email: marketing@tyan.ccm For more information about this and other Tyan products, please contact Tyan Pre-Sales at (510) 651-5565 x5120, or contact your local Tyan system Integra to r/rese I lor. wvuw, tyan. ram l«H8:i;SS :»SS8i!§§0§ mum ■ * t-c *** II W Hk 1>| mmm *mm mm* rnmm bvi h» ■II- mum Hi «ir ]' = ■ ■■ flip lift API ■ ■ k • *.» INI ipp a#r *r- ■■■ net iff (r p "• »■■ All BVP ||j ■ «■ ■»» lit ZZZ Ml rnmc mum Ha r Mi IIP I—■ it” wrnmm®m u oo TYAN Matchless 8-Processor Server M4881 Processor Expansion board for 54881 - Up to four AMO Qptcron 1 ^ processor MP ■ up to &4GBOT Registered (ECC) DDR40a/333 ICG DIMM sockets - 12"x13” dimension with special aTchilecturc ■ Two Hyper TrsnsportTM v L0 Connectors Thunder S4881 S-Processor aud Optnon™ Motherboard - Up to eight or four AMD Opteron " processor - Up lu 04GB of Registered (EGG) DDR.400i , '333 - (4)5A FA support HAfD U 1,0+1 ■ Broadcom'" BCM5704C Dual-Channel GbE controller - IEEE 1394a (FireWire) ports - ATt K KAGt^ XL with 3MB Transport VX50 B4881 fl-Proce&sor AMD Optaron^ 5U Server - 4/8 Processor HPC Computing Platform ■ Support up to eight (8) AMD Opterton'" fixx series ■ 4-P model (B46SMP) Sixteen f i fci j UlM Me .supporting max ft4GR i tfljistHr mi FOO nHlR4fifi/33;3 inwrnricy ■ 8-P model (B48B1-&P): Ttilrty-two (32) DlMMs, supporting mas 12GGB registered. EGG DDR400i f 333 memory ■ fwo { 2 ) gigabit Ethernet lams. Broadconni® BCM57G4 corrtrdler - Three (3 )64biL 133M DO/85 MHz PGE X slots , Two (2) PCI-E slots (<*3C 16 * 1*3(4 signal) Total 5 L&ablc PCt expansion slots TYAN COMPUTER CORP. Zervex Hosting Control Panel LINUX JOURNAL g* ServerCP ServerCP is the best solution for hosting companies and organizations who need a Webserver, mailserver, dns server, or a fully featured web hosting environment. Features 1. RPM based update deployment 2 . Automated Software Installer 3. Apache, PHR MySQL 4. Multi-platform Integration Zervex Announces Site Licensing $69 / month Check it out at www.zervex.com Editor in Chief Nick Petreley, ljeditor@ssc.com Executive Editor Senior Editor Web Editor Art Director Products Editor Editor Emeritus Technical Editor Senior Columnist Chef Fran^ais Security Editor Jill Franklin jill@ssc.com Doc Searls doc@ssc.com Heather Mead heather@ssc.com Garrick Antikajian garrick@ssc.com James Gray n ewp rod u cts@ssc. co m Don Marti dmarti@ssc.com Michael Baxter mab@cruzio.com Reuven Lerner reuven@lerner.co.il Marcel Gagne mggagne@salmar.com Mick Bauer mick@visi.com Contributing Editors David A. Bandel • Greg Kroah-Hartman • Ibrahim Haddad • Robert Love • Zack Brown • Dave Phillips • Marco Fioretti • Ludovic Marcotte • Paul Barry • Paul McKenney Proofreader Geri Gale VP of Sales and Marketing Marketing Manager International Market Analyst Sales Coordinator Carlie Fairchild carlie@ssc.com Rebecca Cassity rebecca@ssc.com James Gray jgray@ssc.com Lana Newlander ads@ssc.com Regional Advertising Sales NORTHERN USA: Joseph Krack, +1 866-423-7722 (toll-free) EASTERN USA: Martin Seto, +1 416-907-6562 SOUTHERN USA: Laura Whiteman, +1 206-782-7733 xl 19 INTERNATIONAL: Annie Tiemann, +1 866-965-6646 (toll-free) Advertising Inquiries ads@ssc.com Publisher Phil Hughes phil@ssc.com Accountant Candy Beauchamp acct@ssc.com Linux Journal is published by, and is a registered trade name of, SSC Media Corp. PO Box 980985, Houston, TX 77253-3587 USA Editorial Advisory Board Daniel Frye, Director, IBM Linux Technology Center Jon "maddog" Hall, President, Linux International Lawrence Lessig, Professor of Law, Stanford University Ransom Love, Director of Strategic Relationships, Family and Church History Department, Church of Jesus Christ of Latter-day Saints Sam Ockman, CEO, Penguin Computing Bruce Perens Bdale Garbee, Linux CTO, HP Danese Cooper, Open Source Diva, Intel Corporation Subscriptions E-MAIL: subs@ssc.com URL: www.linuxjournal.com PHONE: +1 713-589-3503 FAX: +1 713-589-2677 TOLL-FREE: 1-888-66-LINUX MAIL: PO Box 980985, Houston, TX 77253-3587 USA Please allow 4-6 weeks for processing address changes and orders PRINTED IN USA USPS LINUX JOURNAL (ISSN 1075-3583) is published monthly by SSC Media Corp., 3262 Westheimer Rd, Suite 502, Houston, TX 77098. Periodicals postage paid at Seattle, Washington and at additional mailing offices. Cover price is $5 US. Subscription rate is $25/year in the United States, $32 in Canada and Mexico, $62 elsewhere. POSTMASTER: Please send address changes to Linux Journal, PO Box 980985, Houston, TX 77253-3587. Subscriptions start with the next issue. LINUX is a registered trademark of Linus Torvalds. R ogter QS User Management - support more than 3000 PPPoE or HotSpot clients - full RADIUS support for user parameters - tx/rx speed, address, filter rules - supports RADIUS real time modification of parameters, while users are online - Peer to Peer (P2P) protocol control - per client P2P tx/ix rules with burst support - P2P pool - complete blocking of P2P Wireless AP and Backbone - Wireless monitoring - Frequency scanning with detailed report - Raw wireless packet sniffer - streaming option to Ethereal analyzer - option to save to a file fennel supported by Ethereal - Snooper packet inspection - analyzes all raw frames received for wireless parameters - monitors a single channel or all channels - Nstreme wireless polling protocol - no decrease in speed over long distances (as seen with the 8GZ11 ACK packet bottleneck) - polling improves speed and eliminates contention for access to the wireless bandwidth - access point control over Nstreme clients tx data to optimize use of the wireless medium - RADIUS support for the access control list including bandwidth settings for wireless clients - Full 802,1 la/b/g support The above is a brief description of a few features, for more information and a fully featured 24 hour demo go to; "The Dude* Network Monitor - Auto network discovery end layout - Discovers any type or brand of device * Device, Link monitoring, and notifications - Includes SVG icons for devices, and supports custom icons and backgrounds - Easy installation and usage - Allows you lo draw your own maps and add custom devices - Supports SNMP, ICMP, DNS and TCP monitoring for devices that support if - Link usage monitoring and graphs - Direct access to remote control tools for device management - Supports remote Dude server and local client - Runs in Linux Wine enviroment, MacOS Darwine, and Windows - Best price/value ratio compared to other products (free of charge) RouterBOARD 112 MDIX - 4 separate 10/100 ports - POE - 10-fiflV in] in I ■ 9* 1GH0O 6k mPCl Super-small embedded board 140mm x 85mm (5.51 in x 3 35in) Ideal for wireless CPE solutions RouterOS Wireless AP/Firewall/Routing software already included Best price/performance/feature ratio compared to simitar products 175MHz MIPS CPU 2 mini PC I (one on each side) 1 10/100 Ethernet MDI-X 64MB NAND storage 1RMB SDRAM Speaker Serial port Passive PoE (also 12V PuE) Power input 11-48V RouterBOARD 44 RouterBOARD 500 & RoiifareoARD 564 For the Router Builder The Wireless Switchboard AP - up to 24 Ethernet ports in a PC - no more straight/cross cable problems - server quality VIA VT6105 chips The bigger and more powerful RB532 accompanied with a RB664 daughterboard can he a complete multi-radio tower system, with 9 Ethernets and 6 miniPCI sluts www.mikrotik.cQm contact salos@routerboard.com or go to wwwTeuterboard.com ei OTR-njna srl dihti is U*f rrspraw -vwncrj ©aamm? m wo Intel® Xeon® Processors powering Clara VXPRO™ servers provide the quality and dependability to keep up with your growing business. 3 Good Reasons to Buy from Ciara Technology Customized Servers, Blade & Storage; Get the technology thats right tor your busi¬ ness and net right for your supplier. With the capability to manufacture over 2500 systems a day, Clara is suited to accomodate any cus¬ tomer requirement. Our record growth enabled us in February 2003 to inaugurate an all-new, ultra-modem manufacturing plant of 576,000 sq ft. Our systems arc built under tho ISO 9001 -2000 certification, Incorporated in 1984, Ciara Technology is a world-class provider of computer systems including desktop r laptop, servers, storage and supercomputer clusters as well as utlie* software and Integra Lien ser¬ vices All our systems are serviced by Clara's highly trained and certified techni¬ cians and system engineers. We are an ac¬ countable supplier - One single point of con¬ tact for all your technology needs. Ciara has a strong working relationship with Intel, so we have access to information and support that give us - and you - significant advantages in deploying and managing your systems and applications, Tt*u result is a more flexible solution that meets your current needs, while enabling easy expansion to ac¬ commodate emerging technologies and new business growth. Visit us For all your computer needs Give us a call CIARA-TECH.COM VXPRO-R7230NH Affordable Starter Server Ultra Affordable l-aay to Service Intel® Pentium® D Processor 920 (2.8GHz Dual Core Processor} 800MHz Front Side Bus 2x2MB L2 Cache 1GB (2x512MB) ECC DDR2 533 Memory (Expandable to 8GB) One 80GB [7.2Q0RPM) SATA 150 HDD (Up to 4 Hot Swap Hard Drives) Floppy and CD-ROM included 1 u Rackmout 3 Years Warranty Return to Depot mimMiyjBiPS - mterai Hwmumfro u Hrooeeaor yjr.i p.uGHz) Add SnteW refiTium© □ Processor 940 (3. 2GI Iz) Add $140 AddiUu al 00GB (f.ZOORPM) SATA1 50 Add $72 Additional 1GB [2 X hi 2MBq UJL’ UUH2 bits Arid $1 r» VXPRO-R7520BB2 Low Voltage - 4 Cores Server Extremely Powerful Ultra Low Power Consumption Dual Intel® Xeon® LV Processor (2.0GHz Dual Core Processor) 667MHz Front Side Bug 2MB of Shared L2 Cache 2GB (2x1GB) ECG/Req DDR2 400 Memory (Expandable to 18GB) One 80GB (7 r 200RPM) SATA150 HDD (Up to 4 Hot Swap I lard Drives) I loppy and CU-HOM included 1U Rackmout 3 Years WarieriLy Return to Depot Ackditimal S^AIAl&U Add5^2 Additional 2GD [2 * 100 DXMfefl DORS J00 Add 5209 Cnlixon, I rink* b, C^rinnn, Cianhinci Ck**3 biiidha, Ir^rV, VtIeJ Lnqp, k*nl Cnrnij *i*iJ knew in, krlrJ friqifcji LufFi hint SpoodEfop, ItHtJ Viv, (timi-m,, Hnr*.iri h^irVi, Ftanti-m, PontLvn Inebo*, Xoon and Xoon ir&do are tridorporke or 'ogttorod tractonW-ot of htol Corporation or fle Dubc-daricc hi Iho United gadteo and other ooLmtifoe. (11 hvpcrtont hfomution. Al pocswi, HpscJicaJinrw m«.I pnx™*innjd pH*™ wre* *n±iprt lo chnnfp WthraJl nolit^, CkwH (?ma( rnsqTonHhfci *x typOQf^ltiy «TTr:ra. |*c*ofF5*ph.^st: nmxH, pxang ^nr w, AJI prirsrtp In US dots'. Shlppiig and appfcrf*> tsoos ano not Inducted. XeoiV inside"' letters lOUtti KLannl V* UJAg >Ui!y PODCAST AMD REEL IN THE LOGS AND WIKIS Worth the Wait Starting with your first /etc/rant column, I have loved them. You are saying aloud what many in the com¬ munity think, with a very loud voice. I wanted to ask you, why is this available only to subscribers? I'd love to make some comments on my blog and then link to your columns, or translate them to Spanish and let my friends read them in my blog. Tell me if this is feasible, please. I already commented on the /etc/rant of February 2006 issue and plan to do it on the April one I've just received, because I have lots of friends using GNOME just because they think it embodies the spirit of Free Software. Keep up the rant...er, the work. Enrique Verdes We do not publish in print and on the Web simultane¬ ously, but we do publish our print content on the Web after a period of time expires. You can find archives of the magazine at the URL www.linuxjournal.com/ xstatic/magazine/archives.— Ed. On the Spirit of Open Source Great rant [April 2006]. But, as I see it, the real problem is not about advocacy, it's about (never-ending) fragmen¬ tation. Big players (such as Oracle and Dell) are com¬ plaining about it, and no one seems to listen. The real problem is that a genius like Miguel is wasting his time with GTK or Mono (the C# equivalent of the GNU Java compiler), when he could do really useful stuff. It's a pity. Dani GCJ Deserves an Apology I just got the latest LJ in the mail today. I wonder about the genesis of the "practically useless GCJ" remark in the etc/rant column [April 2006]. The version of Eclipse on my Debian Sid installation was built with GCJ, and it seems to run fine with no Sun JRE in sight. I thought Eclipse was a fairly large and complex project (although I have never tried to build it from scratch myself), so what does GCJ need to be able to do to get out of the "practically useless" category? Rant about Rant Teams work very hard to release and offer their pro¬ gramming works of art. I doubt any of them wishes to bash each other's software. How about some con¬ structive rants? The developers just might be inclined to offer a feature/fix that your "opinion" had a prob¬ lem with. Or, heck, maybe you might even spawn a reader to contribute constructively instead of com¬ plain. Thanks for listening to my rant. Ryan Ferguson I also thought the limits of GCJ were due to limits of the GNU classpath, and that work on that was pro¬ gressing nicely. Maybe I'm not following develop¬ ments closely enough, though. Jon I'm the one not following the developments closely enough. Granted, it's not supported for Swing, but if you can compile the SWT-based Eclipse with GCJ, I owe it an apology. — Ed. Content Must Be Free of Unwanted Influence The position of editor in chief traditionally allows ultimate control of all aspects of a publication—from which letters will be included, to whether GNOME or KDE screenshots are used, to what articles are pub¬ lished and who is allowed to contribute. Perhaps LJ has a system of checks and balances in place that the casual reader doesn't know about, but from the cheap seats, I'm concerned. Not to sound alarmist, but a strong bias from the editor in chief is a con¬ tamination that can't possibly be quarantined only to the last page of a publication! Matt McElheny It is the job of an editor in chief to serve the maga¬ zine's readers, period. That means keeping the con¬ tent separate from the influence of advertising and unaffected by the editor's own personal opinions. If at any point you believe the content reflects other¬ wise, I will take your complaints very seriously. — Ed. Even Einstein Agrees So far, I just want to say that I like the rants closing the new Linux Journal issues, although a blog of some kind might be a more appropriate place. Still, you are echoing sentiments that I have expressed many times in the past. From the moment Miguel said, "UNIX sucks", and started making Linux look like Windows, I've felt like I've been lost in some kind of terrible nightmare, unable to awaken. I love UNIX, and although it certainly needs help on the desktop from a development API standpoint, I'm not about to throw away everything about UNIX that makes it great. Please reference the late Mr Einstein's genius (I use the following quotation in my e-mail signature) for why UNIX is great, IMHO: "Any intelligent fool can make things bigger and more complex....It takes a touch of genius— and a lot of courage—to move in the opposite direction."—Albert Einstein Michael P. Soulier 10 I june 2006 www.linuxjournal.com Ab Remember when the sky was the limit? With Intel® Software Development Products, the Swinburne Center for Astrophysics is showing today's kids a universe filled with unlimited possibilities. • y LINUX* APPLICATIONS HELP UNRAVEL THE ORIGINS OF THE UNIVERSE. Swinburne University's Center for Astrophysics and Supercomputing in Melbourne, Australia, is helping develop the next generation radio telescope in order to collect enough data to perform modeling and simulations of our entire galaxy. Their goal is to make realistic, 3D, virtual-reality animations available to the general public, particularly school children. To do this, they used the Intel® compilers to deliver application performance improvements — saving them valuable development time and money 1 . Whether you build applications for physics or financial analysis, Intel® Software Development Products help your Linux* applications reach for the stars. Download a trial version today. www.intel.com/software/products/nolimits Copyright © Intel Corporation, 2006. All rights reserved. Intel, the Intel logo, are trademarks of Intel Corporation or its subsidiaries in the United States and other countries. *0ther names and brands may be claimed as the property of others. 1 Performance and benchmark information were provided by Swinburne University. Buyers should consult other sources of information to evaluate the performance of systems or components they are considering purchasing. [LETTERS] Do you take "the computer doesn't do that" as a personal challenge? So do we. UNUX JOURNAL. Since 1994:The Original Monthly Magazine of the Linux Community LJ Is Way Too Practical Please cancel my subscription, because the Linux Journal disappoints me thoroughly. It's too practical for this budding theoretical computer scientist. William J. McEnaney Jr. Size Does Matter You now have a very inconvenient size and it ruins the display I have of Linux Journal. It doesn't fit on my lap in the men's reading room; it doesn't fit in most places while reading, except in your hands, and it is awkward there as well. I love Linux Journal] I hate the new size of the pages. Pete Gandy SSH Quibbles In "Demons Seeking Daemons—A Practical Approach to Hardening Your OpenSSH Configuration" [March 2006], Phil Moses mentions the UsersAllow directive, but it is really the AllowUsers directive (as Listing 2 shows). And UsersDeny is really DenyUsers. The meaning of an entry such as user@hostname.domain is misleading. He seems to indicate that it allows access to user from hostname.domain, but it really means that people from hostname.domain can access user's account (according to O'Reilly's SSH book). Byron Rendar Ow, No OWFS? In your recent article on temperature monitoring [see "Remote Temperature Monitoring with Linux" by Steven M. Lapinskas, U, April 2006], you didn't mention Paul Alfille's OWFS Project (owfs.sourceforge.net). OWFS already has been ported to the Linksys WRT54G wireless router, providing a cheap and readily available hardware platform for monitoring projects like the one described in the article (owfs.sourceforge.net/ WRT54G.html). Steve Xoops! A Security Hole Juan Marcelo Rodriguez's XOOPS article [April 2006] tells us to set three directories so that any local user, including the Web server, can create and execute programs in them: chmod 777 uploads cache templates_c That's poor security practice. If XOOPS needs it, XOOPS needs a redesign. These wide open directories are just the place to install a 'bot for spamming or DoS attacks. It's begging for an Internet worm, if one doesn't exist already. Mambo has similar issues. It seems the easier they make these complex Web apps to install, the less care they pay to securing those installations. Cameron Spitzer LINUX JOURNAL Fit Your Service MAGAZINE PRINT SUBSCRIPTIONS: Renewing your subscription, changing your address, paying your invoice, viewing your account details or other subscription inquiries can instantly be done on-line, www.linuxjournal.com/subs. Alternatively, within the U.S. and Canada, you may call us toll-free 1-888-66-LINUX (54689), or internationally +1-713-589-2677. E-mail us at subs@linuxjournal.com or reach us via postal mail, Linux Journal, PO Box 980985, Houston, TX 77253-3587 USA. Please remember to include your complete name and address when contacting us. LETTERS TO THE EDITOR: We welcome your letters and encourage you to submit them to ljeditor@ssc.com or mail them to SSC Editorial, 1752 NW Market Street, #200, Seattle, WA 98107 USA. Letters may be edited for space and clarity. WRITING FOR US: We always are looking for contributed articles, tutorials and real- world stories for the magazine. An author's guide, a list of topics and due dates can be found on-line, www.linuxjournal.com/author. ADVERTISING: Linux Journal is a great resource for readers and advertisers alike. Request a media kit, view our current editorial calendar and advertising due dates, or learn more about other advertising and marketing opportunities by visiting us on-line, www.linuxjournal.com/advertising. Contact us directly for further information, ads@linuxjournal.com or +1 206-782-7733 ext. 2. ON-LINE WEB SITE: Read exclusive on-line-only content on Linux Journal's Web site, www.linuxjournal.com. Also, select articles from the print magazine are available on-line. Magazine subscribers, digital or print, receive full access to issue archives; please contact Customer Service for further information, subs@linuxjournal.com. FREE e-NEWSLETTERS: Each week, Linux Journal editors will tell you what's hot in the world of Linux. Receive late-breaking news, technical tips and tricks, and links to in-depth stories featured on www.linuxjournal.com. Subscribe for free today, www.linuxjournal.com/enewsletters. www.LinuxJoumal.com Source Storage ® 1 lata Center OPEI Solutions Bui 1 STANDARDS ilt on 0SS-1000 1U OPEN Series Available with 1,2, 4, or 8 CPU’s per system Up to 2 terabytes storage and 64GB of RAM • Tool-less 1U case design with rail kits ■ 4 Hot-swap drive bays, SCSI/SATA-2 Supports RAID levels 0,1, 5, 6, and 10 3 year next day warranty within the USA 0SS-2000 2U OPEN Series Available with 1,2, 4, or 8 CPU’s per system Up to 6 terabytes storage and 64GB of RAM c Tool-less 2U case design with rail kits 12 Hot-swap drive bays, SCSI/SATA-2 Supports RAID levels 0, 1, 5, 6, and 10 3 year next day warranty within the USA 0SS-3000 3U OPEN Series Available with 1,2, 4, or 8 CPU’s per system Up to 8 terabytes storage and 64GB of RAM ■ Tool-less 3U case design with rail kits 16 Hot-swap drive bays, SCSI/SATA-2 Supports RAID levels 0, 1, 5, 6, and 10 3 year next day warranty within the USA 866-664-ST0R Sales@0SShpc.com OpenSourceStorage.com All Categories Online for OSS on whaBAM.com AMD Opteron The AMD64 Platform :s 1195 Borregas Avenue,Sunnyvale, CA 94089 ;; ©2002-2006 Open Source Storage, Inc. All Rights Reserved. AMD, AMD Opteron, combinations thereof, are trademarks of Advanced Micro Devices, Inc. Open Source Storage reserves the right to change specifications without notice. This document may contain some technical inaccuracies or typographical errors. FRONT NEWS + FUN With the imminent advent of version 3 of the GNU General Public License, the question naturally comes up whether Linux will continue to be licensed under version 2, or migrate to version 3. The answer seems to be that no migration will occur. Even if Linus Torvalds wanted to, he does not control the copy¬ right of all the thousands upon thousands of code contributions that have gone into the kernel over the years, and only those copyright holders could authorize a license change for their own contributions. Although attempts to track down all the contributors and obtain permission have been made by optimistic souls, it is virtually impossible to do this. The GPL version 2 will be the Linux kernel license for the foreseeable future. Meanwhile, more and more kernel vari¬ ables and functions are being set to operate only with GPLed third-party drivers. The ker¬ nel can do this by testing any driver to see if it sets a variable indicating the license under which its code is released. If the license is the GPL, the kernel allows access to those restricted symbols. Otherwise, it's denied. This recently bit AVM, when Greg Kroah- Hartman restricted the USB subsystem to operate only with GPLed drivers. AVM always had released its own binary-only driver for its hardware, but this new change stopped it in its tracks. The change itself was reverted out of the kernel, although it did turn out that one reason Greg had implemented that change was because it has been possible for some time now to write USB drivers in user space with no loss of speed. Regardless, one result of this particular con¬ frontation was for Greg to implement some logging infrastructure, so that symbols soon to be GPL-restricted would be clearly identified in the logs at runtime, and sysadmins on those systems could begin to make reasonable preparations for that change. Willy Tarreau has begun gathering together useful 2.4 patches and making them available at a central location. In gen¬ eral, there has been an outcry among some users that without the even/odd develop¬ ment dichotomy, and with 2.4 virtually sta¬ tionary, there is now no stable series that is still reasonably up to date with current fea¬ tures. Arguments by the kernel developers that distributions take care of kernel stabili¬ ty, and that the w.x.y.z tree was created specifically to address the issue of stability, are unconvincing for one key reason. Although it's true that those kernels may get good uptime, their behaviors are still poten¬ tially inconsistent from version to version— that is, the code base itself is unstable, making it difficult for user-space developers to create systems that behave reliably for the services they require. Although it seems clear to me that eventually kernel development will have to give stability first- class consideration, so far there is no real movement in that direction among the top developers. This may be one reason why Willy's foray back toward 2.4 maintenance has come about. The IDE driver may be going away at some point in the medium future, as libata becomes more and more robust, and a more viable replacement for it. Alan Cox is confident that, although now is still not the time for a straightforward replacement, it is still the goal and the intention of ongoing libata development. It's important to bear in mind, when considering this, that the IDE nightmare cannot be ended simply by replacing one set of code with another. The IDE standards are still (and will continue to be) a horrible mess, and vendor interpreta¬ tion and compliance with those standards is still (and will continue to be) extremely nuanced and difficult to support. So what¬ ever the future of IDE may be, it will have to accommodate all the twists, turns, bumps and punctures endured in the past. Even if all future IDE hardware magically conformed to a single sane standard, it would be quite some time before we could abandon sup¬ port for all the older hardware. The Reiser 4 filesystem has not unex¬ pectedly run into problems being accepted into the Linux kernel. After the most recent flame war, which had some developers throwing up their hands and saying they refused to give feedback on ReiserFS patches until Hans Reiser stopped attacking them, responses to ReiserFS posts on the mailing list have thinned out. Without the support of the kernel developers, the possibility of Reiser 4 going into the kernel becomes more problematic. Only the kernel developers fully grasp the requirements that any given patch must meet in order to be accepted into the tree. Without their guidance, Reiser 4 may have a hard time moving in the right direc¬ tion. And as Reiser 4 development continues to diverge from the kernel proper, the patch that must ultimately be accepted into the kernel grows as well, adding much to the work required for final integration. Almost certainly Reiser 4 will make it into the kernel eventually, but probably not before its developers solve the technical and social issues that confront them. — Zack Brown On the Web DEBUT OF NEW RUBY COLUMN Given Ruby's recent surge in popu¬ larity, linuxjournal.com is excited to bring readers The Gemcutters Shop (TGS), a new column that will focus on the Ruby community and a vari¬ ety of Ruby programming topics. Regular linuxjournal.com author and active Ruby contributor Pat Eyler will show us how to develop skills related to Ruby programming, use libraries from Ruby's standard library, work with additional libraries and use applications written in or for Ruby. Don't miss Pat's kick-off column, "Welcome to the Gemcutters Shop", available at www.linuxjournal.com/ article/8921. Upcoming columns will use code and case studies to demonstrate rcov, Rake, RubyGems, Mr. GUID and much more. 2006 EVENT CALENDAR We're in the middle of tradeshow mania right now—pick a topic and a city, and we're pretty sure some sort of tech event is on its way. Use our Linux Industry Events calendar (www.linuxjournal.com/xstatic/ community/events) to stay on top of all this year's tradeshows and conferences, from ISPCON Spring 2006 to the USENIX LISA Conference. BE A LINUXJOURNAL.COM CONTRIBUTOR Do you have a great tutorial or how-to article you want to share with an eager audience? Are you looking to unveil your coding mas¬ terpiece or helpful tricks? Did you test drive the latest version of a top-three distro and want to tell us what you really think? We're always looking for interesting and unique article proposals. Send your ideas to webeditor@ssc.com. diff -u WHAT'S NEW IN KERNEL DEVELOPMENT 1 4 | june 2006 www.linuxjournal.com Linux laptops. Supported. Supported: Biometric fingerprint (GDM login with PAM) Supported: Internal optical drive: ^ CDRW, DVD+RW , Supported: Technical support by phone and email, manufacturer's warranty, v system-specific user s manual ^ Supported: ^ Laptops from top lier manufacturers you know and trust: Dell, Lenovo, Sharp, Panasonic, Sony Supported: One touch to control: suspend, hibernate, brightness, volume, external VGA, wireless Supported: X Windows at full LCD resolution, NVidia and ATI 3D acceleration, ^ OpenGL ^ Supported: True multiprocessing with Intel Core Duo CPU, ^ up Lu 4 GB RAM J Supported; Power management: suspend, hibernate, v processor control J Supported; Pre-configured I imix installation. You choose your laptop. You choose your distribution, You customize your configuration. Let EmperorUnuxdothere5t. , 'Supported: Media cards: CompactFlash, ^ Secure Digital y Supported: Connectivity: Internal gigabit elliernel, wireless a/b/g. Bluetooth, ' v EVDO mobile broadband , Supported: Port connectivity: USB. PCMCIA, VGA. Express Card, SVideo, ^parallel, serial, FireWire^ ""since 1999, EmperorLinux has provided pre-installed Linux laptop solutions to universities, corporations, and'’ individual Linux enthusiasts. We specialize in the installation of the Linux operating system on a wide range of the finest laptops and notebooks made by IBM, Lenovo, Dell, Sharp, Sony, and Panasonic. We offer a range of the latest Linux distributions, as welt as Windows dual boot options. We customize each Linux distribution to the particular machine It will run upon and provide support for: ethernet, wireless, EVDO mobile broadband, PCMCIA, USB, FireWire, X-server, CD/DVD/CDRW, sound, power management, and more. All our systems come with one year of Linux technical support by both phone and email, and full manufacturers' warranties apply. Visitwww.EmperorLinux.com or call 1-888-651-6686 for details. . EmperorLinux ...where Linux & laptops converge www. Em perorLi n ux.com / 1-888-651-6686 Model specifications and availability may vary. With the Dual-Core Intel® Xeon® Processor in your YXRACK™, your servers have advanced reliability features built in. 3 Good Reasons to Buy a VXRACK™ Cluster Technology Customizes Setters, Bfade & Storage: Get the technofogy that's right tor your busi¬ ness and not right for your supplier, With a ca¬ pability to manufacture over 2bUO systems a day, Cfaia is suited io accomodate any cus¬ tomer requirement. Our record growth enabled us In February 2003 to inaugurate an alt-new h uftra-modem manufacturing plant of 578.000 sqf. Our systems arc build under tho ISO 9001 -2000 certification. Incorporated rn 1984, GiaraTeohnology Is a world class provider of computer systems Including desktop, laptop r servers, storage and supercomputer clusters as well as other software and integration ser¬ vices. All our systems are serviced by Giaras highly trained and certified techni¬ cians and system engineers. We are an ac¬ countable supplier - One single point of con¬ tact for all your technology needs. Ciara has a strong working relationship with Intel, so wo have access to information and support that give us - and you - significant advantages in deploying and managing your systems and applications. The result is a more flexible solution that meets your cur- rent needs, white enabling easy expansion to accommodate emerging technologies and new business growth. Visit us CIARA-TECH.COM For all your computer needs Give us a call VXBLADE-7520JR2 A Standard in the Datacenter Powerful and Reliable Mid to High End Server Dual Intel® Xeon© Processor (2.8GHz Dual Core Processor) 800MHz Front Side Bus 2x2MB L2 Cache 2GH (2x1GR) FGG/Ileg DDR? 533 (Expandable to 12GB) One 80GB (7,2QGRPM) SATA150 HDD 3 Years Warranty Return to Ciara UfxyodB to 1 SOCB (7,200RPM( &VTA160 Add E36 AddiliurEjl ?GB (2* 1GB) FCOTliiu DDH2 400 Add S299 Upy. to aSB (4 k 2 GB) ECOFtag 0DR2 400 Add S899 VXBLAD E -7520BB2 2 Low Voltage - Quad Cores Server Extremely Powerful Ultra Low Power Consumption Dual Intel® Xeon® LV Processor (2.0GHz Dual Core Processor) 667MHz Front Side Bud 2MB of Shared L2 Cache 2GB (2x1GB) ECC/Reg DDR2 400 (Expandable to 16GB) One 80GB (7.200RPM) SATA150 HDD 3 Yoaro Warranty Return to Ciara to 12000 [7.200RTM SATA1EQ Add *36 Adkliliurttl 2GB (2 x. IGfiJ EOC7Rny DDR? 400 AddS299 Up&. to (-1 x 2GB) ECC/Fteg DDR2 4QO Add 5399 VXR-72 or VXR-96 Special Rack Enclosure VXR 96 accomodates the following: Up to 8 enclosure chassis Up to 96 VXBLADE 1,1TB or memory 48 TB of local storage VXR-72 accomodates the following: Up to 0 enclosure chassis Up to 79 VXRI AHE 0.8 JR of memory 36 TB of local storage Optional Vertical Gable Management Optional Infiniband Gable Management Optional Color customization Oiinmn, GnJuron Innkln, Otnlrino, Cnnlrra Lotjcf, Or™ knkfn, |r*rri, i-rinl Logo, W«l Otv InW Irvurtn, WnJ frvn>t Logo, Wnl TipflntlCItnq, bnlnl Viiv, Ihumm, HnmfTi kwwfto, F >mln irr>, BonduTi Irodo. Xoon and Xeon bnokJe oro iradcTTWirte or nogtatcwM- Srxktiraika of (htol Coiporatlon or to aiakiarlora h tho Lfrifiad Sttitco and othorooLnirioa. [1J tnportont Wcrmcddon. M pVarsn, nfnnri pmrnnhnrrt nro ni ihjnnt In iphnnigo wtlhpij nrtinn, Croi OTYnt bn mcjnrriii**! fcy typogn^nhy fflmm, photorjT^Thinn nrmrn, pnrwifl nmrmj. All pmariff US defer. SNppirpg and appfcatfe trae are not Inctudod. (2) VXD 752QQQ2 vM bo awaJlahto In M^20Q6 Xeorf inside [UPFRONT LJ Index, June 2006 They Said It 1. Number of minutes per day Britons spend watching TV: 148 Don't build your own kernel. It's a great 2. Number of minutes per day Britons spend using the Net: 164 way to waste a month of your time. The main reason for using BSD is that 3. Millions of Weblogs as of March 9, 2006: 3( you work at Yahoo. Otherwise, use Linux. Premature optimization is the root of all evil. _ C '”3 Nonnorcnn on ninlHinn Fhrvr r\n Imiiv 4. Millions of RSS feeds, worldwide: 70 5. Number of generations back that all humans have the same ancestors: 120 —Ldl ncNUcIbUII, UN UUIlUllly rLILKl UN LINUX. Flickris now owned by Yahoo, most of which runs 6. Trillions of dollars in the latest US federal budget: 2.8 on Yahoo's BSD (conferences.oreiLLynet.com/ cs/et2006/view/e_sess/8068) 7. US federal credit limit, in trillions of dollars: 9 REST is the Unix pipe of the net. 8. Total billions of searches by Americans in January 2006: 5.48 —Kevin Marks, on IRC at a conference 9. Millions of households promised fiber broadband by 2006: 86 Daddy, you have a picture of the Internet 10. Promised symmetrical fiber performance in Mbps by 2006: 45 on your snirc. —Six-year-oLd daughter of PhiL WindLey, on his 11. Average monthly dollar price promised for home fiber service by 2006: 50 Lap whiLe he wore a Firefox shirt 12. Dollar prices for 100Mbps service found in Japan and Korea today: 40 Open source development violates almost all known management theories. 13. Worldwide position of US in broadband deployment in 1996: 1 —MarLetta Baba, Dean of the CoLLege of SociaL Sciences, Michigan State University (source: Greg Kroah-Flartman in www.kroah.com/Linux/ f d be /ocron OfinF nf fno vorno i 14. Worldwide position of US in broadband deployment in 2005: 16 15. Estimated billions of dollars lost to customers of failed US fiber deployments: 200 LdlKb/ UbLUII_£UUD_bLdlc_UI_lllc_Kcl IIcl ) Keep Your Exits Open: How Startups & 16. Estimated trillions of dollars lost to the US economy by failed fiber deployments: 5 Their Investors Can Minimize the Risk of Using Open Source Code —TitLe of a Dow Jones VirtuaL Seminar on 17. Percentage of local authorities using Linux in the UK: 33 March 20, 2006 18. Percentage of local authorities using Linux in France: 71 Make Business Fast, Easy and Risk-Free: What Free and Open Source Software Does to Liberate Free Markets _Ti-H o nf 3 \nr fiol comin^r n rnnncorl h\/ Hnr 19. Percentage of local authorities using Linux in Holland: 55 20. Percentage of local authorities using Linux in Germany: 68 — 1 1 Lie U1 d VII LUdl bcl 111 lid 1 pi UpUbcU Uy UUL SearLsto Dow Jones (Source: Andrew Leyden and Doc SearLs) Sources: 1, 2: Guardian Untimited, from a Google survey | 3: Technorati | 4: SocialText | 5: Slate and Nature | 6,7: Washington Post | 8: Center for Media Research | 9-16: CAZITech, TeLeTruth.org | 17-20: John Dwyer in Industry (UK) — Doc Searls _ A 1 8 | june 2006 www.linuxjournal.com . f / / / / / ^ N; / / / / / ■. V, v V y y y y y W/ V>' Ttilnhmate iu saner, n serial-ATA or SCSI drives with inter® xeon® Processors Dozens of customizable systems online, unlimited possibilities by phone. ► Rackmount Servers ► High-Performance Servers ► Storage Servers ► Pedestal Servers ► Silent Workstations ► Blade Servers ► Clustering ► Notebooks Oneradng System Ondons: Thinkmate systems are available with either No OS, or pre-loaded with Linux or Microsoft Windows operating systems. Thinkmate also offers dual-boot and virtualization options. 100% True Hardware Custentizatien: Thinkmate is an innovative provider of an exten¬ sive variety of computer solutions. We completely customize all of our machines to match your indi¬ vidual needs. Our online quoting and ordering system has more customizable options than any other system builder on the web. If you cant find exactly what you need on our site, then give us a call and we would be more than happy to help you find it) Service: Thinkmate takes customer service to a new level. All of our systems have a minimum of a 3-year advanced replacement warranty and offer up to a 3-year next business day onsite warranty through IBM Global Services. We understand mission critical situations and provide superior services to keep all of our customers satisfied. GSA Schedule Cui 1 L 1 ijlL G5-35F-Q311M GSA Scheduling: We offer rapid GSA scheduling for custom configurations, tf you have a specific hardware requirement, we can have your configu¬ ration posted on the GSA schedule within 2-4 weeks. : y y y- y y 7 ULTRA EDITION with an upgrade % s* f tsg* 10 AMD Athlon ' 64' 4 6=» 1 IS PayPal Get Nero 7 Ultra , a Monarch shirt or hat, a Livestrong™ Wristband, and a FREE GIFT when you ifpgthde to Athlon 64/FX/X2 or the new Opteron 100 Series (939)! 'JpSSsfr * rrT i$trGng Purchase any AMD Athlon™ 64/FX/X2/Opteron 100 (039) bundle from Monarch and get Nero 7 Ultra, a Monarch shirt or hat; choice of FREE GIFT and a LIVESTRONG™ wristband for helping Monarch support the battle against cancer, Monarch Computer and you can make a difference. Monarch nratfe* It quick and easy to upgrade with FREE setup and testing Eteri, O kJrrifK i 1 un Motherboard Combos and SflS-OD build tee on Da rebones, tlg;SS> AMD Motherboard Combos Gigabyli Audio Tya n S2362G3 N R>D Tpn S2495U A2N RF KfinAHE w f 2 x AMD OpEorcn 1 " wf2 sc AMD Opt Bran™ processor 24fi processor2G5 {tMOpfn) (94a duel-cons) OFF MF4 Infinity nF4 wi AMD Opteron 01 processor 146 {m pin) Ab li AN MX nF4 w, f AMD Opteron 1tf processor 115 1919 dual ■core) Main,board - Prerceasora - Heatsinfc and Fan with Memory Options ■ FREE INSTALLATION AND TESTING LASTEST BIOS loaded far easy upgrades - AMO SErrfMwi " 11 AHilon 111 EM „ Aiteg-n™ 64 FX. and 0 (Kemn’ u Combos AvailaslE Go la www.manarchcGmpij!BrCQrn, select Sarebones from ihe me Choose AMD Serripron 111 , AMD Athlon, 111 G4 or AMD Opteron™ 1 configure your barebones online or call 1 -BOD-S11-0375. tack Case Cooler Master Piaetohan 730 • - t ■ w«HSW SLIPS L idR AM ANA-32X n Forced Motherboard pDr AMD Opteron^ processor 1651939 Dual-Cora) Starting § $755 1020A-T Cooler Master RC-810 CM Stacker 61 0 &_ lOOW PS w/dfiQW PS icessor246 Tyan S26&2G3NR-D Motherboard (940 pin) ¥2 GB Corsair REG ECC DDR 2 x AMD Qp(eron 1w processor 250 (940) Startfrig ® $1449 Starting <5 $1309 AMD Barebone Systems BBB AM 0 union 64 And Athlon -h fx are tun lent Windortsifr-cumpatible 64 -bit Pc processors , \ MB RiBse AMD Athlfin 1 ™ 64 XZ Retail CPUi AMD Athlofl’’ 64 KJ J8M-* I2W.H AMD AUiIm" - H X2 JZOO* t J 57.-5D AMD Athifl*.-- 84 X?44«* $4M.Q0 AMD AHon" 4i tUm* IM7.&B AMD Athlfr#i‘ B 64 JC2 4BM* 1512.01] AMD AlhleH’" 64 RirlAll Ban CPU* AMD Athipii'- 84 JSflU* (9») $154.00 AMD ASUwi ,B H 3500* |331| 1263.83 AMD AthlM.™ 84 3TCb- (936) U15.H AMD Atmwi'“ 6* 3W(r* [9341- S2«M.H AMD AthlMi‘ B 84 4MIH 19391 5-310 C 3 AMD Athlon'* 84 FXOil lT 188 1.8 GHz 8311.DO AMD Opdrop™ 1 JO IQGHz H02-0G AMD faiaron 11 ITS ZJGHz 15M.M AMD (freargn 1 ' 180 J.4GHz tlVT.W AMD Ojteron''' 188 2.60Hz 111M.M AMO OptftFfln ri OEM CPUi [9351 AMD OpMran 7 * 144 I.SGHl (9-.J-9J jUI OH AMD OrUergd 1 ' 146 J.GGHz <815) 3213-00 AMD ■OflEsron 1 " 145 2.20Hz |UI| $i6t 3S AMD Dfir.^rt 1 * 150 2AQMZ (WS) WII-W AMD Op la ran 7 *1S2 2.6GHz (MS) $710. ?0 AMD Opnrart 1 * 154 2.1GHz (938) f?1D id www.mon a|)c hco|j|uter.com Components and Upgrades 1000 s of In-Stock Components AMD Op linn 1 ' OEM CPUifSADji AMO Opltrg*!'- 24$ 2,DGKr S1 M,0O AMD Qwitm * 248 Z.2QKt S2 33.6D AUD Opif-ign"" |,4GHf iUJ.fiD AMD OpItriHl'* 2 52 MtiH l UtlM AMD DpItrOti"" 254 2 BGHr $689.68 AMO Opiawn “ 848 7.2GHr 4-L.tj.0D AMD OpIirtMi'" 8 58 2.4GHr £3 4J.6D AMO Opl»r W '“ |K SiOD.N AMD QuniC-r, ’ 884 Z.BfiHt tUGt.DQ AMO Optaran'-Dual CqhOEN CPU* AMD Opltroo'* 26$ 1 JGHi $13700 AMD Optworv 1 * 276 2.DGMZ I441.M AMO Opltrw'* 27S 2,!eHf K69 00 AMD OpIfHMl'* 260 2.4GHI 1525.00 AMD Opitrwi- 3*5 2.8GMi $1318.08 AMD Opltrwi’ 1 ' 86$ I.BOHz H7J.6D AMD DpianWi'" 870 J.DGHt IH' -3D AMO Opltrpfl-* 87$ J 2GKr 11130.00 AMD Op4tfM kB 080 ?.4GHt $1^05.00 AMO Qp\*w' a 8 tS J, 8 GMf IHBS.W AMD D|t«ran 1IB Coni tore HE (Low-wa-tfags) OEM CPUa AMO 0p1trofi- u 260 HE UGHi $441,60 AMD DpiMMr- 265 HE I.BGHt $663.00 AMO Oplfrwf - 275 HE J.OGHi S1S19J0 AMD Opltren' - 060 HE l.OGKl $84t.e0 AMD Optf-rmi"" 845 HE IJGHi SHig.OD AMO Opltrao" 11 87*0 HE 2.0GHI $u6i.08 Hit AMD AttlCfi™ 84 A? Atf Ji'.T-f JMftf feitunfS HwJ tfew 1 1 -irwwth m* AiNert™ &fpraftjcfte?s4y. n - &Via-T«d ^Vwwtign Ah' >. spj . Oxf r 0 cm-< jochxmtaav 161081 ChIwt Ma»tBF ftt-Blfl SSttl CM SiacAcr Alumliuiin Cll* w' N9 P5 S279QQ k 155531 VhiatMlvDigHtr’RaptBrX 15D Gfl 16 MB Ciihfl SATA 16K 1‘HDISMAhFO.i -Clair C^Vrr S3M.QQ iwia ATI Mt) ft j dr on 41GTG 28fiMfl DDR • PCI-E 4ViVS D^al-bVI-DL | FI*cj.I 6 «k) S235.59 146S1C 1 QB 12 bct. 512) DD» |40O|- PMtW MCI C«W*r eQC£4MI624PFD£4t) S 1 I 5 . 6 -# $ 9 B ,77 15D939 Waitarn Clflitai Caviar SE 2 SO Gl SATA1G 18Mfl ClCfil I2S8 RPM (IMD25QQHS) jsi.ro 150269 Addplot 2T699QDR 2S20SA B’ChanncI SATA3G PCI X RAID ContnJlIfrr (RelAiLfiox) S465.85 aamatag 140803 1 GBtfKi S12f DOR I4»] PC-3IM Comalr XM 8 |TwirrX J IOJ4,lMMC2PT) 554,55 NEWl Section 508 Documentation Available for our PCs! Educational and Government PQg Welcome he Continental U S., fail, APQs, ■ * , and Canada !fi| ™ AMD tl AMD tSecS NEW NEW NEW; | Monarch Systems now Available with Section 508 Documentation (VPATs)I Take the Monarch Challeng e: Give us 5 minutes and Save $100s if not $1000s! Come see our jaw-dropping prices! In most cases, we're cheaper than the competition BY AS MUCH AS 20%[ HP ProLiant DL145 G2 Opteron 53,881,87 2 GB 36 GB 15k SCSI $4,766*00 3884,13 IBM eServer Opteron 326m 252 x 1 1 GB $1,989.00 51,780*90 3208,10 80 GB SATA S4.93Q.8gJ $525.11 Alienware MJ-12 7750a teron GB 250 GB SATA $5,456.00 ypi 252 $638 64 ! jgr r PitCHNj Ipr CcmpnrdOn WMtHfnpilrt it BSch mfllujTpClufT-r'a iwn-twsi'g pn QHWMjB, AH WQ ' 1 of Etieir imperEtvc owners WortnnjT CMIfVttrSjftMKi, Enc is- unafli iiatetf with ai^d docs not rutka BBkJGitBG«y products ntipidjina ntaniirndirtam thfit appear«:hi* Empro 4-Waw/// Server H L ask for Part 30675: If \ Case/Motherboard - SuperMicro (Barebone) AS104OC-8 1U 4*Way Dual*Core Opteron W/Hotswap SCSI & fODOW PS From 1 to 4 AMD Opteron™ CPUs - single or dual-core, depending on configuration Extensive memory options Z Select hard drives not only by size or interface, but by the top name brands as wellHO surprises - YOU choose what hardware powers your company Multiple RAID Setups available Industry Standard Upgradable 1 or 3 year warranties available 24/7 on-site service available Net Terms available Dedicated Sales and Support available AMD Features 4-way Dual-Core % AMD Opteron™ processors rts @ Only $16 [5on!t, JUST^tAKE'OURtWORBlEORTml LCdmpare^burpricesloJhesrbtherimanufacturersir HP ProLiant DL145G2 Opteron Op 1 246 x 2 Sun Fire V20* Server Opteron 248 x2 2 GB 2 GB 80 GB SATA $2,556.00 $777.11 73 GB 10k SCSI $3,295.00 $798.73 Our senior technical staff review every configura¬ tion to eliminate hardware and software incompatibil¬ ities. We allocate all parts for your system, and chart your system's assembly path through our production fad I- * ♦ SBjQdOsC We assemble your motherboard, processor and memory and test these core components extensively. We also load the latest BIOS. ♦ QEEffiOEferp All components for your system are assembled into your chassis. All cables are tied off and tucked away to increase airflow and cooling. 00™BD(*Baga3e£B3 We combine hands-on diagnostics with a battery of automated bum-in testing to ensure ail your compo¬ nents are operating properly together. 00Gfifc!En9O5E)3 We load your OS onto your hard drive along with all factory tested updates and the most recent hardware drivers. ■ JBL Our GC experts put your system through a rigorous 62 point inspection to verify the system is in working order before shipping. We expertly pack your system for secure and safe shipping using customized packaging and double boxing. [UPFRONT Saving Dollars with CentOS At the Austin BarCamp in March 2006, I found myself sitting next to a guy with a large new laptop that seemed to be running some kind of Linux. Turned out his name was Matt Lawrence, his laptop was a new Dell Inspiron 9300, his job was systems administration and his Linux of choice was CentOS. I asked him about it. Here are my notes, all quotes: CentOS's goal is to be as close to Red Hat as possible without violating trade¬ marks and copyrights. They lag behind Red Hat Enterprise 4 by two or three weeks. All the security and other updates are constantly coming out. If you want support from a person, buy Red Hat Enterprise Linux. If you want support from a community with the same code base, get CentOS. small companies. Getting it up and run¬ ning on this new Dell was easy. It came right up, ready to go. The only glitch was X. I had to edit the X config file for screen, which is 1920 x 1200. That's 16 x 9 rather than 4x3. running CentOS. We'd appreciate hearing about your experi¬ ences with CentOS as well. — Doc Searls They fit nicely together. You can run Red Hat Enterprise for production and run CentOS for development and testing. It's my preferred desktop. And I'd say it's an excellent desktop system choice for So I got the minimum up off one CD, then added the packages I wanted. It took about an hour to pull those down over DSL using yum. It's a good deal. I get paid for doing Red Hat. And I save my own money A New J for the LAMP Stack From Tom Limoncelli (an engineer with Google and co-author of Time Management for System Administrators) comes an enthu¬ siastic welcome for Jifty, a Web application development framework. Tom says Jifty is "like a Ruby on Rails for Perl". It comes from from Jesse Vincent, David Glasser and Alex Vandiver. Jesse will be familiar to fans of Request Tracker—an open-source CRM. Find it at Jifty.org and CPAN.org. — Doc Searls USER FRIENDLY by J.P, "t\\iadT r Frmer tech support greg sre* I HAVE SEVERAL petabytes of FREE SPACE ON Mrs ystew THE SKY JS WHAT? HOW DO YOU FISURC? ALL THAT FREE 5PA6E/' NOTHING MORE TO FILL IT WITH/ I HAVE SEEN THE END OF PORN. l MUSIC AND VIDEO content// WALT A SECOND DIP YOU EAT 'FCTAEryreS*? ARE YOU ONE OF THE GDRtVE ST5ADMINS? ^ DEAR GODS. IT S UKE STARING INTO A VAST SOULLESS VOID/ 22 | june 2006 www.linuxjournal.com iSCSI that makes your IP SAN a whole lot richer... SBE's feature-rich iSCSI software solutions deliver enterprise-level reliability at affordable price points... Highly scalable & fully standards compliant iSCSI Target and Initiator protocol stacks. Early iSCSI deployments did not offer the high-quality transport and fault tolerance needed by enterprise storage managers However, SBE's PyX iSCSI solutions were among the industry's first to provide the full error recovery features required by enterprise storage managers, namely Error Recovery Level 2 (ERL2). Providing broad Linux OS support, SBE's iSCSI protocol stack enables robust, cost-effective IP-based storage transport solutions delivering fault- tolerant, high availability networks with a rich mix ot advanced feature sets, including: » Proven performance from Wi-Fi to 1QG with unlimited port count » Aggregation of all available bandwidth across subnets and ports B MuJti-pathirig 1/0 functionality fur maximum redundancy and reliability B Performance as fast as your underlying hardware can go B Storage media and transport independent architecture » Full interoperability with all compliant ISCSI initiators flexibility on demand |! 925-355-2000 | lnfo@sbei.com | www.sbei.com im COLUMNS AT THE FORGE Google Maps Google maps out excellent Web services for keen developers. REUVEN M. LERNER During the past few months, we have looked at a number of Web services. Web services is a catch-all phrase for the ways in which Internet companies are making their data available to the general public, for use in people's own applications. Thus, Amazon makes its product catalog available for us to create on-line stores and pricing programs, eBay allows us to search through (and bid on) products available for sale, and Google makes its search results available for viewing and manipulation. Each company restricts the ways in which we are allowed to use the provided data, but the trend appears to be toward additional openness and availability. Sometimes, that openness comes in a package that is slightly different from the standard form of Web services. That is, some companies make their data available using specialized libraries that call the services for you, hiding the specifics of the calls from your application. One of the most famous examples, and the one that we look at this month, is Google Maps. I have found Google Maps to be one of the most compelling and powerful Web applications out there. Not coincidentally, Google Maps was one of the first applications to make use of Ajax, a term that describes how we can use a combination of JavaScript and XML to grab data from remote servers and then use the results to update a Web page dynamically. This month, I explain how easy it is to create maps using the Google Maps API. We create some basic maps and even put up small markers indicating locations of interest to us. This will serve as a building block to creating our own mashups, the increasingly popular term for the use of Google Maps to dis¬ play information culled from a separate database. Basics Google Maps, like most Web applications, divides the work between the client (a Web browser) and a server. However, the traditional division of labor has been fairly unequal, putting almost all of the computational onus on the server, giving the browser responsibility for display alone. Ajax changes this, using one or more JavaScript libraries that know how to manipulate the data being displayed in new and interesting ways. Although Google may someday release an API that will allow us to create our own Ajax applications with its map information, the current release requires that we install and use everything in a single package. That is, Google provides a JavaScript library—or more precisely, a link to a JavaScript library located on Google's servers—that we incorporate into our pages and then use to create a map. In order to display maps, we need to use that JavaScript library. However, both to keep track of who is using the API and also to ensure that it is being used according to the rules, the library is available only to holders of a key. Now, we have seen this sort of restriction before, both in Amazon's Web services and also Google's main Web services (that is, for search results). However, the key used in Google Maps is somewhat different; it is keyed both to a particular person (with a Google account) and to a particular URL. This means a map key that works at http://www.example.com will not also work at http://www.example.net. The first step in using the Google Maps API is to decide under which URL you want to put the maps. I decided to create a new Apache virtual host on my system, which I named maps.lerner.co.il. I then registered with the Google Maps API page (www.google.com/apis/maps), indicating that my applications would be under the URL maps.lerner.co.il. Several seconds later, I was greeted with a page containing my API key, as well as a simple starter page that can display a map. The key is a very long string of ASCII characters, separated by spaces. Because we will base our applications on HTML, we should take a close look at it:
<;/div> The HTML document begins by declaring its DOCTYPE, which turns out to be strict XHTML. XHTML is a wonderful idea and ensures that HTML is structured according to all of the strict XML rules. That said, many HTML pages do not adhere to this standard and thus are considered either tran¬ sitional (meaning, XHTML with a liberal eye) or nothing at all. Because Google Maps tries to be compatible with as many browsers as possible, it benefits greatly from strict adherence to XHTML. In the tag, we see that there is a