On Jul 12, 2008, at 1:52 PM, David T. Lewis wrote:
> On Sat, Jul 12, 2008 at 10:36:50AM +0200, John Chandler wrote: >> >> OK, but if my image is for Mac OS X PPC, and the target machine is >> Debian x86, will the image I copy to it even start up? > > Yes, it will work fine. Amazing but true. Thanks to all who responded. I suppose my confusion had something to do with the different conceptual bases underlying Unices, on the one hand, and Squeak, on the other. Files vs. all-the-way-down objects. And I'm very unused to being able to get away with thinking in terms of the abstraction rather than the implementation and having things "just work." Again, thanks. -jmc _______________________________________________ Beginners mailing list [hidden email] http://lists.squeakfoundation.org/mailman/listinfo/beginners |
Am 12.07.2008 um 19:24 schrieb John Chandler: > On Jul 12, 2008, at 1:52 PM, David T. Lewis wrote: >> On Sat, Jul 12, 2008 at 10:36:50AM +0200, John Chandler wrote: >>> >>> OK, but if my image is for Mac OS X PPC, and the target machine is >>> Debian x86, will the image I copy to it even start up? >> >> Yes, it will work fine. Amazing but true. > > Thanks to all who responded. I suppose my confusion had > something to do with the different conceptual bases underlying > Unices, on the one hand, and Squeak, on the other. Files > vs. all-the-way-down objects. And I'm very unused to being able > to get away with thinking in terms of the abstraction rather than > the implementation and having things "just work." > > Again, thanks. We used to work hard to keep the illusion perfect :) - Bert - _______________________________________________ Beginners mailing list [hidden email] http://lists.squeakfoundation.org/mailman/listinfo/beginners |
In reply to this post by John Chandler-3
On Saturday 12 Jul 2008 2:06:50 pm John Chandler wrote:
> OK, but if my image is for Mac OS X PPC, and the target machine is > Debian x86, will the image I copy to it even start up? Image files can be opened on any platform. Make sure that you get the *virtual machine* for the Debian x86. Install squeakvm package to get the VM binaries. Subbu _______________________________________________ Beginners mailing list [hidden email] http://lists.squeakfoundation.org/mailman/listinfo/beginners |
I now need to see why the RFB package appears not to be working on
Debian. I loaded the package on my laptop, started the server, and verified that I could connect to it with Chicken of the VNC. I did not stop the server, I saved the changes with a slightly altered name, and scp'd the image and changes files that had that altered name over to the Debian machine. I started squeak with the command, nohup squeak -headless ~/squeaks/*image & (in the directory, "squeaks," there are two files, the image and the changes) This process appears to be running. "ps -ef" shows: squeakvm -headless [~]/squeaks/Squeak3.9-final-7067_RFB.image squeak.image When I use Chicken to try to start a session, changing only the hostname (which is a raw IP address), I get a "connection refused" message. I have been told by this ISP that they are not blocking port 5900, and the nohup.out file is still zero length. Is there something that netstat would reveal about whether the RFB app came up properly and is actually listening on 5900? Any other clues? -jmc On Jul 14, 2008, at 3:20 AM, K. K. Subramaniam wrote: > On Saturday 12 Jul 2008 2:06:50 pm John Chandler wrote: >> OK, but if my image is for Mac OS X PPC, and the target machine is >> Debian x86, will the image I copy to it even start up? > Image files can be opened on any platform. > > Make sure that you get the *virtual machine* for the Debian x86. > Install > squeakvm package to get the VM binaries. > > Subbu > _______________________________________________ > Beginners mailing list > [hidden email] > http://lists.squeakfoundation.org/mailman/listinfo/beginners NOTICE: Due to Presidential Executive Orders, the National Security Agency may have read this email without warning, warrant, or notice. They may do this without any judicial or legislative oversight. You have little recourse nor protection except to call for the impeachment of the current President. _______________________________________________ Beginners mailing list [hidden email] http://lists.squeakfoundation.org/mailman/listinfo/beginners |
In reply to this post by K. K. Subramaniam
I installed the RFB (vnc viewer/server) package on my Debian server,
to which I don't have console access. There appears to be a problem with it, because the connection is refused. I loaded the package on my laptop, started the server, and verified that I could connect to it with Chicken of the VNC. I did not stop the server, I saved the changes with a slightly altered name, and scp'd the image and changes files that had that altered name over to the Debian machine. I started squeak with the command, nohup squeak -headless ~/squeaks/*image & (in the directory, "squeaks," there are two files, the image and the changes) This process appears to be running. "ps -ef" shows: squeakvm -headless [~]/squeaks/Squeak3.9-final-7067_RFB.image squeak.image When I use Chicken to try to start a session, changing only the hostname (which is a raw IP address), I get a "connection refused" message. I have been told by this ISP that they are not blocking port 5900, and I ran in.telnetd in debug mode on port 5900 and got a connection, so it appears that this is true. The nohup.out file is still zero length. Are there any other log files that might be informative? Is there something that netstat would reveal about whether the RFB app came up properly and is actually listening on 5900? Any other clues? -jmc _______________________________________________ Beginners mailing list [hidden email] http://lists.squeakfoundation.org/mailman/listinfo/beginners |
There was a problem a year or so ago with RFBs with new images - which
I don't know if it was fixed. You should search the archives. See if this helps: http://article.gmane.org/gmane.comp.lang.smalltalk.squeak.general/112180 On Tue, Jul 15, 2008 at 3:48 PM, John Chandler <[hidden email]> wrote: > I installed the RFB (vnc viewer/server) package on my Debian server, > to which I don't have console access. There appears to be a problem > with it, because the connection is refused. > > I loaded the package on my laptop, started the server, and verified > that I could connect to it with Chicken of the VNC. I did not stop > the server, I saved the changes with a slightly altered name, and > scp'd the image and changes files that had that altered name over to > the Debian machine. > > I started squeak with the command, > > nohup squeak -headless ~/squeaks/*image & > > (in the directory, "squeaks," there are two files, the image and the > changes) > > This process appears to be running. "ps -ef" shows: > > squeakvm -headless [~]/squeaks/Squeak3.9-final-7067_RFB.image > squeak.image > > > When I use Chicken to try to start a session, changing only the > hostname (which is a raw IP address), I get a "connection refused" > message. > > I have been told by this ISP that they are not blocking port 5900, and > I ran in.telnetd in debug mode on port 5900 and got a connection, so > it appears that this is true. The nohup.out file is still zero > length. Are there any other log files that might be informative? Is > there something that netstat would reveal about whether the RFB app > came up properly and is actually listening on 5900? Any other clues? > > -jmc > > _______________________________________________ > Beginners mailing list > [hidden email] > http://lists.squeakfoundation.org/mailman/listinfo/beginners > -- Brad Fuller www.bradfuller.com _______________________________________________ Beginners mailing list [hidden email] http://lists.squeakfoundation.org/mailman/listinfo/beginners |
In reply to this post by John Chandler-3
Hi John,
on Wed, 16 Jul 2008 00:48:42 +0200, you wrote: > I installed the RFB (vnc viewer/server) package on my Debian server, > to which I don't have console access. There appears to be a problem > with it, because the connection is refused. > > I loaded the package on my laptop, started the server, and verified > that I could connect to it with Chicken of the VNC. I did not stop > the server, I saved the changes with a slightly altered name, and > scp'd the image and changes files that had that altered name over to > the Debian machine. > > I started squeak with the command, > > nohup squeak -headless ~/squeaks/*image & > > (in the directory, "squeaks," there are two files, the image and the > changes) > > This process appears to be running. "ps -ef" shows: > > squeakvm -headless [~]/squeaks/Squeak3.9-final-7067_RFB.image > squeak.image > > > When I use Chicken to try to start a session, changing only the > hostname (which is a raw IP address), I get a "connection refused" > message. > > I have been told by this ISP that they are not blocking port 5900, and > I ran in.telnetd in debug mode on port 5900 and got a connection, so > it appears that this is true. The nohup.out file is still zero > length. Are there any other log files that might be informative? Is > there something that netstat would reveal about whether the RFB app > came up properly and is actually listening on 5900? Any other clues? Did you configure RFBServer to allow remote connections? Before you saved the snapshot, did you close all connections (also from RFBServer's connections submenue)? HTH. /Klaus > -jmc _______________________________________________ Beginners mailing list [hidden email] http://lists.squeakfoundation.org/mailman/listinfo/beginners |
On Jul 16, 2008, at 1:06 AM, Klaus D. Witzel wrote:
> Hi John, > > on Wed, 16 Jul 2008 00:48:42 +0200, you wrote: > >> I installed the RFB (vnc viewer/server) package on my Debian server, >> to which I don't have console access. There appears to be a problem >> with it, because the connection is refused. >> >> I loaded the package on my laptop, started the server, and verified >> that I could connect to it with Chicken of the VNC. I did not stop >> the server, I saved the changes with a slightly altered name, and >> scp'd the image and changes files that had that altered name over to >> the Debian machine. >> >> I started squeak with the command, >> >> nohup squeak -headless ~/squeaks/*image & >> >> (in the directory, "squeaks," there are two files, the image and the >> changes) >> >> This process appears to be running. "ps -ef" shows: >> >> squeakvm -headless [~]/squeaks/Squeak3.9-final-7067_RFB.image >> squeak.image >> >> >> When I use Chicken to try to start a session, changing only the >> hostname (which is a raw IP address), I get a "connection refused" >> message. >> >> I have been told by this ISP that they are not blocking port 5900, >> and >> I ran in.telnetd in debug mode on port 5900 and got a connection, so >> it appears that this is true. The nohup.out file is still zero >> length. Are there any other log files that might be informative? Is >> there something that netstat would reveal about whether the RFB app >> came up properly and is actually listening on 5900? Any other clues? > > Did you configure RFBServer to allow remote connections? I just checked, and all the "connections" buttons are active (filled in). I am sure I haven't messed with that since saving. However, it can't hurt to save and copy again. > > Before you saved the snapshot, did you close all connections (also > from RFBServer's connections submenue)? No. I guess you're saying that I should. Right? > > HTH. > > /Klaus > >> -jmc > > > _______________________________________________ > Beginners mailing list > [hidden email] > http://lists.squeakfoundation.org/mailman/listinfo/beginners _______________________________________________ Beginners mailing list [hidden email] http://lists.squeakfoundation.org/mailman/listinfo/beginners |
In reply to this post by Klaus D. Witzel
On Jul 16, 2008, at 1:06 AM, Klaus D. Witzel wrote:
> Hi John, > > on Wed, 16 Jul 2008 00:48:42 +0200, you wrote: > >> I installed the RFB (vnc viewer/server) package on my Debian server, >> to which I don't have console access. There appears to be a problem >> with it, because the connection is refused. >> >> [...] > > Did you configure RFBServer to allow remote connections? > > Before you saved the snapshot, did you close all connections (also > from RFBServer's connections submenue)? Yes. The problem was more basic: root privileges are required. D-OH! I should have known this, but while I avoid running as root as a very ingrained policy, this makes it impossible to open a socket to the outside world. I looked around for a discussion of security issues with Seaside, and didn't come up with much. Are there ways of limiting the damage a malicious person could get a root-enabled Squeak to do? I know it's a bit more obscure than Apache, but still. Thanks for answering. -jmc _______________________________________________ Beginners mailing list [hidden email] http://lists.squeakfoundation.org/mailman/listinfo/beginners |
Am 16.07.2008 um 04:55 schrieb John Chandler: > On Jul 16, 2008, at 1:06 AM, Klaus D. Witzel wrote: >> Hi John, >> >> on Wed, 16 Jul 2008 00:48:42 +0200, you wrote: >> >>> I installed the RFB (vnc viewer/server) package on my Debian server, >>> to which I don't have console access. There appears to be a problem >>> with it, because the connection is refused. >>> >>> [...] >> >> Did you configure RFBServer to allow remote connections? >> >> Before you saved the snapshot, did you close all connections (also >> from RFBServer's connections submenue)? > > Yes. The problem was more basic: root privileges are required. D-OH! > > I should have known this, but while I avoid running as root as a very > ingrained policy, this makes it impossible to open a socket to the > outside > world. > > I looked around for a discussion of security issues with Seaside, > and didn't > come up with much. I am certain there are discussions of this. You should ask on the Seaside list, too. I don't think anyone serious runs their Seaside installation as root. Most common is to proxy via Apache, but you can also use firewall settings to make your Seaside port appear as port 80 to the outside world, even though it actually is running on a non-privileged port. > Are there ways of limiting the damage a malicious > person could get a root-enabled Squeak to do? I know it's a bit more > obscure than Apache, but still. > > Thanks for answering. Again, I'm not saying running as root is a good idea, but you can enable the VM-level file sand-boxing: SecurityManager default disableFileAccess which will restrict all file access to SecurityManager default untrustedUserDirectory Of course this only makes sense if you do not include the FFI plugin which can call any C function in any library directly. And besides, do not run as root. - Bert - _______________________________________________ Beginners mailing list [hidden email] http://lists.squeakfoundation.org/mailman/listinfo/beginners |
Bert Freudenberg wrote:
> I don't think anyone serious runs their Seaside installation as root. > Most common is to proxy via Apache, but you can also use firewall > settings to make your Seaside port appear as port 80 to the outside > world, even though it actually is running on a non-privileged port. This is solid advice, but I think John's issue is with his VNC connection. He's been saying that's on port 5900, which is outside the superuser range (1-1023 for those keeping score at home). I'd recommend trying to telnet to the VNC server while the image is running. If you get a bunch of text with the letters rfb in it, then you know it's working. - Ken _______________________________________________ Beginners mailing list [hidden email] http://lists.squeakfoundation.org/mailman/listinfo/beginners |
Free forum by Nabble | Edit this page |