/srv/irclogs.ubuntu.com/2006/01/29/#ubuntu-server.txt

derekSJulienH: np12:19
=== mgalvin [n=mgalvin@ubuntu/member/mgalvin] has joined #ubuntu-server
=== mgalvin [n=mgalvin@ubuntu/member/mgalvin] has joined #ubuntu-server
=== ubuntulog [i=ubuntulo@195.22.207.161] has joined #ubuntu-server
=== Topic for #ubuntu-server: ubuntu-server discussions and support | for general support see #ubuntu | U. S. (stable) at http://tinyurl.com/b3jek | U. S. (Devel) at http://tinyurl.com/cllfu | U. S. dapper specs: http://tinyurl.com/aen9b | U. S. forums at http://tinyurl.com/b77qg | ubuntu-server@lists.u.c is up and running | searchable packages list: http://packages.ubuntu.com
=== Topic (#ubuntu-server): set by spike at Thu Jan 5 05:24:37 2006
=== tepsipakki [n=tjaalton@130.233.200.84] has joined #ubuntu-server
=== Pazzo [n=Pazzo@81.72.250.130] has joined #ubuntu-server
=== ubijtsa2 [n=anders@80.229.160.88] has joined #ubuntu-server
=== lamont [n=lamont@mix.mmjgroup.com] has joined #ubuntu-server
=== #ubuntu-server [freenode-info] please register your nickname...don't forget to auto-identify! http://freenode.net/faq.shtml#nicksetup
=== polvi [n=polvi@osuosl/staff/polvi] has joined #ubuntu-server
=== lamont [n=lamont@mix.mmjgroup.com] has joined #ubuntu-server
=== ealden [n=ealden@58.69.6.105] has joined #ubuntu-server
=== ealden [n=ealden@58.69.6.105] has left #ubuntu-server []
=== ealden [n=ealden@58.69.6.105] has joined #ubuntu-server
=== ealden [n=ealden@58.69.6.105] has left #ubuntu-server []
=== ajmitch_ [i=ajmitch@port169-250.ubs.maxnet.net.nz] has joined #ubuntu-server
=== henriquemaia [n=henrique@87-196-73-229.net.novis.pt] has joined #ubuntu-server
=== ubijtsa swears loudly over fakeraid cards
=== Lasse [n=Lasse@cpe.atm4-0-1301006.0x50a0824e.vgnxx6.customer.tele.dk] has joined #ubuntu-server
=== Lasse [n=Lasse@cpe.atm4-0-1301006.0x50a0824e.vgnxx6.customer.tele.dk] has joined #ubuntu-server
=== chillywilly [n=danielb@CPE-65-26-218-21.wi.res.rr.com] has joined #ubuntu-server
=== ubijtsa [n=ubijtsa@213.208.70.155] has joined #ubuntu-server
=== lionelp [n=lionel@10.21.96-84.rev.gaoland.net] has joined #ubuntu-server
=== spike [n=spike@host198-132.pool82189.interbusiness.it] has joined #ubuntu-server
=== kyrre_ is now known as kyrre
=== beezly [n=beezly@2001:630:63:16:230:1bff:feb7:2528] has joined #ubuntu-server
ubijtsafabbione: who looks after the network base stuff in dapper?12:09
ubijtsafabbione: no worry, I see the guy got an answer in the end..12:11
spikehi there12:13
ubijtsalo spike12:54
=== ubijtsa makes mental note to check the irc window more often
spikeubijtsa: do you know much about wifi networks?01:01
=== ealden [n=ealden@219.90.91.98] has joined #ubuntu-server
ubijtsaspike: some.. only what I have figured out myself when messing with it, why?01:40
spikeubijtsa: trying to figure out a few things to implement a network I've been asked to design01:43
ubijtsago ahead01:43
fabbionespike: explain the problem :)01:43
fabbionethe worst case you will have no solution01:43
spikethe thing is I cant really find something in between WPA+PSK and WPA+EAP(EAP-TLS/PEAP)+Radius01:44
spikefor them it would be enough WPA2+randomized keys01:44
spikebut I'm not sure how to implement that01:44
ubijtsaspike: new enough hardware has WPA2 capabilities01:45
spikeanother solution would be a vpn, with openvpn maybe01:45
ubijtsabest solution would be to not use encryption in the networking infrastructure if possible..01:45
spikeubijtsa: uhm, for what I've read, I cant see how WPA2 helps with random keys01:45
ubijtsafrees/wan should be better01:46
spikeubijtsa: ipsec?01:46
spikeoh, k, I c01:46
ubijtsayes, ipsec. problem is, Windows require 3DES if you run ipsec01:46
spikethat's why I mentioned openswan above01:47
ubijtsaunless very recent versions of windows finally got AES support01:47
spikeeer01:47
spikes/openswan/opnevpn01:47
ubijtsaif you need to use 3DES, you will require a fairly hefty server01:47
ubijtsaAES is less heavy on the old cpu :)01:48
spikeanyway, this was already a known solution, but what about alternatives?01:48
spikeisnt there anything to have random keys with WPA without implementing EAP/radius stuff?01:49
spikeI couldnt find much around01:49
spikeubijtsa: and why would you advise the use of ipsec/vpn? WPA2 appears to be failry secure (I've read about wpa cracking attempts)01:50
ubijtsapersonal preference I guess01:51
ubijtsawith frees/wan, you have security that you know works01:51
ubijtsawith the stuff in the wireless kit, you don't know if there are backdoors01:52
ubijtsadepends what you are trying to do, if you want it bulletproof or not01:53
spikewireless kit? you mean the sw coming with the AP?01:53
spikes/coming with/on01:53
ubijtsaaye01:53
spikeubijtsa: I'm just reading up and analyzing solutions. yet I have no answer for the WPA2+random keys solution... I'm wondering if anything like that actually exists01:54
spikeeverybody seems to go either with vpn or WPA+EAP+RADIUS01:54
spikeinstead of basic WPA+PSK of course01:54
ubijtsa802.1x is probably good enough01:55
spikeyeah, but it sounds a bit overkill for this scenario01:55
ubijtsaif it leaves room to grow... ;)01:55
spikeyeah, but assuming something like WPA + random keys exists it'd be easier to implement.. I'm not gonna do the two for the same price :)01:56
spikeand since it'd be enough for 'em, proposing both solutions sounds like the best thing to do01:56
ubijtsadraft a proposal for an easy, a medium and a large solution...01:59
ubijtsalet them pick what they want. :)02:00
spikeeeer, that's what I said, yes, and the point of my whole question is exactly the intermediate solution I cant find (excluding the vpn one)02:00
ubijtsaI see..02:01
spikecompared to WPA2+PSK and WPA2+EAP+RADIUS the obvious intermediate solution to me seems WPA2+Random keys, but cant really find anything about it02:01
ubijtsaI thought the PSK stuff was the random key solution.02:02
=== spike is a bit confused
spikea "bit" :)02:11
spikeI'm gonna grab some pizza to help the thinking, brb02:11
ubijtsa:)02:16
spikeeheh, I love to read rants like this while eating ;)02:31
spikehttp://www.joelonsoftware.com/articles/ThePerilsofJavaSchools.html02:31
ubijtsagrin02:31
spikesaid is, none of my employer ever spoken like that to me... :/02:33
spikeso it seems there' s a real shortage on both sides02:33
spikes/said/sad/02:34
spikeeeh, wait, employer is the one that gets employed or the one employing someone, ie doing recruiting?02:34
tepsipakkiemployer employs employees ;)02:44
=== hunger [n=tobias@p54A608C1.dip0.t-ipconnect.de] has joined #ubuntu-server
spiketepsipakki: tnx :)02:48
spikebrb, moving to another site02:48
=== spike [n=spike@212.19.104.81] has joined #ubuntu-server
=== segfault_ [i=carlos@prognus.com.br] has joined #ubuntu-server
=== soumyadip [n=soumyadi@59.93.194.199] has joined #ubuntu-server
ealdenMarioMeyer: ping04:44
MarioMeyerealden, pong05:12
=== E0x [n=moya@pri-133-b32.codetel.net.do] has joined #ubuntu-server
E0xthe forum is down ?05:55
E0x( again )05:55
=== mgalvin [n=mgalvin@ubuntu/member/mgalvin] has joined #ubuntu-server
=== lionelp [n=lionel@ip-128.net-82-216-65.rev.numericable.fr] has joined #ubuntu-server
=== paul_ [n=paul@neo.demon.nl] has joined #ubuntu-server
paul_hi all!08:22
paul_i am running ubuntu for quite a while now and am very happy with it's server performance. right now i am looking to replace an M$ streamingserver for an opensource server.08:23
paul_does anyone know about a streamingserver (deamon) for ubuntu?08:24
=== bustacap [n=bustacap@203-206-46-153.dyn.iinet.net.au] has joined #ubuntu-server
=== henriquemaia [n=henrique@87-196-105-28.net.novis.pt] has joined #ubuntu-server
=== Pygi [n=mario@83-131-252-235.adsl.net.t-com.hr] has joined #ubuntu-server
segfaultvai levando com naturalidade11:34
segfaultops11:34

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!