Re: [expert] Strange ppp error
On Thursday 01 August 2002 10:20 pm, you wrote: > Greetings: > I've never seen this. All my problems have always been with dialup and > connection. In this case I dailed, connected, got through my terminal login > sequence and then died. I am using kppp and these are the messages printed > to the terminial from whose command line I started: > > /home/matthew(2248) [242] $ Xlib: extension "RENDER" missing on display > "192.168.1.6:0.0". Opener: received OpenLock > > Opener: received OpenDevice > Opener: received ExecPPPDaemon > In parent: pppd pid 4855 > Couldn't find interface ppp0: No such device > Couldn't find interface ppp0: No such device > Couldn't find interface ppp0: No such device > Kernel supports ppp alright. > It was pppd that died > pppd exited with return value 16 > Sending 2309 a SIGUSR1 > Opener: received RemoveSecret > Opener: received RemoveSecret > Opener: received OpenResolv > Opener: received OpenResolv > Opener: received RemoveLock > Opener: received PPPDExitStatus > kppp: WARNING: KDE detected X Error: BadMatch (invalid parameter > attributes) 8 Major opcode: 42 > Opener: received OpenSysLog > kppp: WARNING: KDE detected X Error: BadMatch (invalid parameter > attributes) 8 Major opcode: 42 > kppp: WARNING: KDE detected X Error: BadMatch (invalid parameter > attributes) 8 Major opcode: 42 > /home/matthew(2248) [242] $ > > Now if the kernel supports ppp, why isn't there a ppp0 interface to find? > Doesn't the act of setting up an account in kppp build a ppp0? > > Thanks no, ppp0 will only be found if you successfully login. try a different type of login (ie script based) and let us know which versionof Mandrake, and which dialer program you are using, some of the older ones had different defaults. Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Strange ppp error
On Thursday 01 August 2002 10:20 pm, you wrote: > Greetings: > I've never seen this. All my problems have always been with dialup and > connection. In this case I dailed, connected, got through my terminal login > sequence and then died. I am using kppp and these are the messages printed > to the terminial from whose command line I started: > > /home/matthew(2248) [242] $ Xlib: extension "RENDER" missing on display > "192.168.1.6:0.0". Opener: received OpenLock > > Opener: received OpenDevice > Opener: received ExecPPPDaemon > In parent: pppd pid 4855 > Couldn't find interface ppp0: No such device > Couldn't find interface ppp0: No such device > Couldn't find interface ppp0: No such device > Kernel supports ppp alright. > It was pppd that died > pppd exited with return value 16 > Sending 2309 a SIGUSR1 > Opener: received RemoveSecret > Opener: received RemoveSecret > Opener: received OpenResolv > Opener: received OpenResolv > Opener: received RemoveLock > Opener: received PPPDExitStatus > kppp: WARNING: KDE detected X Error: BadMatch (invalid parameter > attributes) 8 Major opcode: 42 > Opener: received OpenSysLog > kppp: WARNING: KDE detected X Error: BadMatch (invalid parameter > attributes) 8 Major opcode: 42 > kppp: WARNING: KDE detected X Error: BadMatch (invalid parameter > attributes) 8 Major opcode: 42 > /home/matthew(2248) [242] $ > > Now if the kernel supports ppp, why isn't there a ppp0 interface to find? > Doesn't the act of setting up an account in kppp build a ppp0? > > Thanks also your ip number for the box you are on should be set to dhcp, and not end in a 0 (your IP; 192.168,0.0 in for the whole network, try 192.168.0.1 this is for eth0. localhost should still be the LO interface at 127.0.0.1this is not for the dialup interface, but your local network, for your dialup you will get an IP from your ISP when you connect (dhcp). Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
[expert] Weird X crashes
I am experiencing very weird X crashes. Here is my .xsessions-error file. Can anyone point me in the right directoion ofr more debugging? 10 DCOPServer up and running. Loading required GL library /usr/X11R6/lib/libGL.so.1.2 20 25 30 36 41 47 52 58 63 69 75 80 85 90 ICE default IO error handler doing an exit(), pid = 2929, errno = 2 ICE default IO error handler doing an exit(), pid = 2931, errno = 0 kdeinit: Communication error with launcher. Exiting! Loading required GL library /usr/X11R6/lib/libGL.so.1.2 QDir::readDirEntries: Cannot read the directory: /root/.kde/lib DCOPServer up and running. ICE default IO error handler doing an exit(), pid = 2938, errno = 32 DCOP Cleaning up dead connections. Loading required GL library /usr/X11R6/lib/libGL.so.1.2 Loading required GL library /usr/X11R6/lib/libGL.so.1.2 Loading required GL library /usr/X11R6/lib/libGL.so.1.2 kdecore (KLibLoader): WARNING: KLibrary: /opt/kde3//lib/libkdecore.so.4: undefined symbol: init_fonts Mutex destroy failure: Device or resource busy Mutex destroy failure: Device or resource busy Loading required GL library /usr/X11R6/lib/libGL.so.1.2 mcop warning: user defined signal handler found for SIG_PIPE, overriding Loading required GL library /usr/X11R6/lib/libGL.so.1.2 Loading required GL library /usr/X11R6/lib/libGL.so.1.2 Loading required GL library /usr/X11R6/lib/libGL.so.1.2 Loading required GL library /usr/X11R6/lib/libGL.so.1.2 Loading required GL library /usr/X11R6/lib/libGL.so.1.2 Fatal communication error with a client Authentication of this client was not successful Connection dropped pure virtual method called KCrash: crashing crashRecursionCounter = 2 KCrash: Application Name = knotify path = pid = 2974 Loading required GL library /usr/X11R6/lib/libGL.so.1.2 Loading required GL library /usr/X11R6/lib/libGL.so.1.2 mcop warning: user defined signal handler found for SIG_PIPE, overriding Loading required GL library /usr/X11R6/lib/libGL.so.1.2 KDirWatch: /etc/security/fileshare.conf is a file. Use addFile! Loading required GL library /usr/X11R6/lib/libGL.so.1.2 Loading required GL library /usr/X11R6/lib/libGL.so.1.2 KDirWatch: /etc/security/fileshare.conf is a file. Use addFile! QWidget::setMinimumSize: The smallest allowed size is (0,0) QWidget::setMaximumSize: (unnamed/DigitalClock) Negative sizes (2,-4) are not possible QWidget::setMinimumSize: The smallest allowed size is (0,0) QWidget::setMaximumSize: (unnamed/DigitalClock) Negative sizes (2,-4) are not possible Loading required GL library /usr/X11R6/lib/libGL.so.1.2 Loading required GL library /usr/X11R6/lib/libGL.so.1.2 kio (KLauncher): ERROR: KLauncher: KDEInit communication error! Commiting suicide! Mutex destroy failure: Device or resource busy undecodable token: \001b(hex)[36l ICE default IO error handler doing an exit(), pid = 2986, errno = 17 ICE default IO error handler doing an exit(), pid = 2983, errno = 2 ICE default IO error handler doing an exit(), pid = 2979, errno = 0 ICE default IO error handler doing an exit(), pid = 2982, errno = 2 ICE default IO error handler doing an exit(), pid = 2978, errno = 0 -- Hoyt http://www.maximumhoyt.com Fix it until it breaks. Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] tripwire on isos???
At 02:29 AM 8/2/02, you wrote: >Call me paranoid, but I have to ask- Did the tripwire RPM not make it >onto the 8.2 isos. I've been lazy, and have finally gotten around to >wanting to start using tripwire. And then I noticed something quite >disturbingly strange- There appears to be no tripwire rpm on my 3 8.2 >isos I downloaded long ago, yet when I go to mandrake's ftp sites >(mirrors), I see a nice tripwire rpm in the 8.2/i586/Mandrake/RPMS/ directory. > >What the hell? > >BTW- I would have searched the archives for this mailinglist, but did not >see how to do it on the mdk website. The (site wide) search for "tripwire >8.2 iso" yielded little. tripwire-2.3.1.2-4mdk is part of Mandrake 8.2. I can't comment on the isos as I used wget to retrieve all the rpms to my server and installed from there, but I have it as part of my install. Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
[expert] re-directed email from your server
as I am not the recipient having problems!!! - Original Message - From: "David Relson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, August 02, 2002 4:10 PM Subject: Re: [expert] tripwire on isos??? > At 02:29 AM 8/2/02, you wrote: > >Call me paranoid, but I have to ask- Did the tripwire RPM not make it > >onto the 8.2 isos. I've been lazy, and have finally gotten around to > >wanting to start using tripwire. And then I noticed something quite > >disturbingly strange- There appears to be no tripwire rpm on my 3 8.2 > >isos I downloaded long ago, yet when I go to mandrake's ftp sites > >(mirrors), I see a nice tripwire rpm in the 8.2/i586/Mandrake/RPMS/ directory. > > > >What the hell? > > > >BTW- I would have searched the archives for this mailinglist, but did not > >see how to do it on the mdk website. The (site wide) search for "tripwire > >8.2 iso" yielded little. > > tripwire-2.3.1.2-4mdk is part of Mandrake 8.2. I can't comment on the isos > as I used wget to retrieve all the rpms to my server and installed from > there, but I have it as part of my install. > > > > > > Want to buy your Pack or Services from MandrakeSoft? > Go to http://www.mandrakestore.com > Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
[expert] Unable to get disk quota to activate.
Hello! I hope someone can help med shed som light on this. I am trying to setup quotas on a filesystem, but it doesn't bite. I have prepared an aquota.user file with quotacheck, edited the fstab and assigned quotas to a couple of test users. When booting, quotaon (called from rc.sysinit) fails with the message: quotaon: using /my/mount/point/aquota.user on /dev/scsi/host0/bus0/target5/lun0/part1: Device or resource busy I get the same message when I run it manually. I have been able to trick the quota into starting in singe-user mode. If I unmount and mount the filesystem, then immediatley run quotaon it will work. If I (as root ofcourse) manipulate files belonging to the test users the diskusage as shown by quota -v is updated accordingly. If I then switch to multi-user by invoking 'init 3' the quota stops working, the kernel doesn't update diskusage (as shown by quota -v) or stop users who overdraw. If I boot straight into multi user and try the same unmount/mount trick it doesn't work either. Quotaon runs without errors but the kernel doesn't update the diskusage or hinder overdraw. I use kernel-enterprise-2.4.18.6mdk-1-1mdk, quota-3.01-0.5mdk and the ext3 filesystem. All suggestions are appreciated. Regards, Fredrik -- "It is easy to be blinded to the essential uselessness of computers by the sense of accomplishment you get from getting them to work at all." - Douglas Adams Fredrik Öhrn Chalmers University of Technology [EMAIL PROTECTED] Sweden Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] PCMCIA: Texas Instruments PCI1420 not working afterkernel-update
I would like to hear about this one as well. I too have a Laptop PCMCIA not functioning. I performed a Software Package Update from 8.1 to 8.2. If I'm told once more that is not the upgrade (especially when the option indicates that this is possible for all LM installs since 7.2) path, I think that I'll find a new distribution to work with. How do I get the PCMCIA Ethernet to work? I've already gone through the LM 8.2 Fresh Install path. t_gecks wrote: > civileme schrieb: > > t_gecks wrote: > > > >> configuration: Mandrake 8.1 > >> > >> lspci: > >> > >> ... > >> 00:04.0 CardBus bridge: Texas Instruments PCI1420 > >> 00:04.1 CardBus bridge: Texas Instruments PCI1420 > >> ... > >> > >> Windows says: PCI1420 at i/o-address 0x3e0 and irq 11 > >> > >> tried that with > >> > >> [root@... root]# modprobe i82365 i365_base=0x3e0 cs_irq=11 > >> > >> resulted in: > >> > >> /lib/modules/2.4.18-8.2mdk/kernel/drivers/pcmcia/i82365.o.gz: > >> init_module: No such device > >> > >> The pcmcia worked before i updated the kernel. > >> > > > You are lucky _ANYTHING_ works after updating the kernel. You do not > > update kernels. > > > > If you have an updated kernel, you INSTALL it. Afterward you have the > > choice in LILO of booting either kernel. If you use update instead you > > have the new kernel with the old kernel modules, a definite mismatch > > when trying to load modules. > > > > Hmmm, you did not say your version but I know we had changed numbering > > schemes in 8.2 so the automated tools would not update kernels and our > > advisories which accompany such updates clearly states not to update. > > > > Civileme > > Ok, I'll tell the whole story. I used the MDK 8.1 with kernel > 2.4.8-26mdk and a week or 2 ago I updated iptables with the Software > Manager to version iptables-1.2.5-1.1mdk. After that iptables said > something like: > > Jul 29 11:09:49 resy54 iptables: iptables-restore v1.2.5: > iptables-restore: unable to initializetable 'filter' > > in /var/log/messages. trying it on the command line it told me that too > and that I perhaps needed to upgrade the kernel. So I got the > 2.4.18-kernel stuff by hand from > > ftp://ftp.uni-kl.de/pub/linux/mandrake/Mandrake/updates/8.1/RPMS/ > > (my local update site). Software Manager did not offer this update, > you're right. But now iptables is working and pcmcia doesn't. The kernel > has the right modules and the pcmcia-cs is for this kernel. I removed > the old one (for the 2.4.8 kernel). Now do I have to change everything > back (if this is possible) or install a fresh 8.2 ? > > ciao > > Thorsten Gecks > > > Want to buy your Pack or Services from MandrakeSoft? > Go to http://www.mandrakestore.com -- Albert E. Whale - CISSP http://www.abs-comptech.com -- ABS Computer Technology, Inc. - ESM, Computer & Networking Specialists Sr. Security, Network, and Systems Consultant Board of Directors - InfraGard - Pittsburgh, PA Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Weird X crashes
On Fri, 2 Aug 2002 10:32:59 -0400 HoytDuff <[EMAIL PROTECTED]> wrote: > I am experiencing very weird X crashes. Here is my .xsessions-error file. Can > anyone point me in the right directoion ofr more debugging? > bGL.so.1.2 > kio (KLauncher): ERROR: KLauncher: KDEInit communication error! Commiting > suicide! > Mutex destroy failure: Device or resource busy > undecodable token: \001b(hex)[36l > ICE default IO error handler doing an exit(), pid = 2986, errno = 17 > ICE default IO error handler doing an exit(), pid = 2983, errno = 2 > ICE default IO error handler doing an exit(), pid = 2979, errno = 0 > ICE default IO error handler doing an exit(), pid = 2982, errno = 2 > ICE default IO error handler doing an exit(), pid = 2978, errno = 0 > uhm.. that looks more like a KDE creash, not X. try logging in with a different WM and see if it keeps happening. Damian -- Who is General Failure, and why is he reading my disk? Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
[expert] Enabling CGI capabilities on LM 8.2
I've been unable to get CGI programs to run on Apache. I've changed the permissions on the test-cgi program from the /var/www/cgi-bin/ to executable, with the owner/group as apache:apache. In the cgi-bin, I've checked to ensure that it can run cgi programs in the apache setup. But I still get a 'forbidden' when I try to run anything. I tried typing http://host/cgi-bin/test-cgi and test-cgi.cgi, but to no avail. The directory permissions are kosher, with owner:group on /var/www/ set to apache:apache, and cgi-bin is set to apache:apache. Thinking this might be related to suexec, I renamed suexec and then restarted apache so that suexec wouldn't be interfering (until I get the permissions figured out). This led to the same 'forbidden' error as before. I have a default install of Apache, with most of the modules installed. What things should I check to help eliminate the permissions error? Or is this something else which I'm missing? Regards, Nathan Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] lyx, libforms, and other frontends
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday 02 Aug 2002 8:44 pm, Praedor Tempus wrote: > Another question regarding lyx. If you check the configure script, you see > that there is an option for selecting a GUI for lyx other than based on > xforms (which is quite ugly and motif-ish). There is an option for qt2 and > gtk-based frontends. Woo-hoo! Or so I thought. I have all the devel libs > for qt2 and gtk installed yet no matter what switches I use, no matter what > I do, it is seemingly impossible to build anyting other than an > xforms-based frontend for lyx. Have any Mandrake developers ever managed > to build one of these alternative frontends? If you haven't even > tried...perhaps it would be a good thing to try? Since the default > environment for Mandrake is KDE, a qt-frontend for lyx and all other apps > that have such an option seems to be the most logical choice. Just curious > if anyone has managed a nicer frontend for lyx than the default xforms > version. Can't answer the first question. But the second ... Looking at the lyx Web site it looks as though the QT and gtk frontends started development ... then died. They are not complete and probably never will be :/ I suppose the authors decided to concentrate on one toolkit which, unfortunately, happened to be the ugliest because it was there first and most development had already been done on it. There are other excellent packages with the same problem, such as xephem (Motif) and scid (Tcl/Tk) ... Alastair - -- Alastair Scott (London, United Kingdom) http://www.unmetered.org.uk/ -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE9SuU5XzGCRjP1DsMRAo9KAKCCrEgw8iBU1QOqhDQtsLfGaR81GgCdGmf+ G2m9gzAQfnd//lAmjPALd+w= =xE6n -END PGP SIGNATURE- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
[expert] wlan, orinoco card, pci pcmcia adaptor
Does anyone have a lucent orinoco card (I have a gold card) in a pcmcia-to-pci adaptor that actually works in linux/Mandrake? The orinoco cards are supposed to be among the best supported of the 802.11b cards available yet I have never managed to get it working. I have Mandrake 8.2 installed on a desktop system and a pcmcia-to-pci adaptor. When I load the wvlan_cs driver, my messages log produces: Aug 2 14:58:32 localhost kernel: Linux Kernel Card Services Kernel Version Aug 2 14:58:32 localhost kernel: options: [pci] [cardbus] [pm] Aug 2 14:58:32 localhost kernel: PCI: No IRQ known for interrupt pin A of device 00:06.0. Please try using pci=biosirq. Aug 2 14:58:32 localhost kernel: Yenta IRQ list , PCI irq0 Aug 2 14:58:32 localhost kernel: Socket status: 3010 Aug 2 14:58:33 localhost cardmgr[8509]: starting, version is 3.1.31 Aug 2 14:58:33 localhost cardmgr[8509]: watching 1 sockets Aug 2 14:58:33 localhost kernel: cs: IO port probe 0x0c00-0x0cff: clean. Aug 2 14:58:33 localhost kernel: cs: IO port probe 0x0100-0x04ff: excluding 0x200-0x207 0x290-0x297 0x400-0x40f 0x4d0-0x4d7 Aug 2 14:58:33 localhost kernel: cs: IO port probe 0x0a00-0x0aff: clean. Aug 2 14:58:33 localhost kernel: cs: memory probe 0xa000-0xa0ff: clean.Aug 2 14:58:33 localhost cardmgr[8509]: socket 0: Lucent Technologies WaveLAN/IEEE Adapter Aug 2 14:58:33 localhost cardmgr[8509]: executing: 'modprobe wvlan_cs' Aug 2 14:58:33 localhost kernel: wvlan_cs: WaveLAN/IEEE PCMCIA driver v1.0.6 Aug 2 14:58:33 localhost kernel: wvlan_cs: (c) Andreas Neuhaus <[EMAIL PROTECTED]> Aug 2 14:58:33 localhost kernel: wvlan_cs: RequestIRQ: Resource in use Aug 2 14:58:34 localhost cardmgr[8509]: get dev info on socket 0 failed: Resource temporarily unavailable Yeah, right...TEMPORARILY unavailable. It is NEVER available. The card in the pcmcia-to-pci adaptor is simply unusable. I have no idea how to proceed here. I rebuilt the kernel with all the appropriate wireless lan support and drivers that even remotely appeared to be useful, yet I am dead in the water here. Anyone have any ideas or a way around this? I have disabled my mobos parallel port because I don't use it - I had hoped to free up an IRQ in so doing (IRQ7) and I even commented out the /etc/pcmcia/config.opts line that excludes IRQ7 because of the parallel port so I would, presumably, have IRQ7 available for use. Nope. Any aid would be greatly appreciated. praedor Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
[expert] Attn: Vincent - sudo article at mandrakesecure.net
Hey Vince, I just read your article at mandrakesecure.net regarding sudo.
Excellent article. (Now, I just need to get going on the msec stuff so I
can figure out how to tone down some of security level 4's more obnoxious
habits :)
I like what you mentioned regarding using sudo to restrict access to the su
command. I've currently got sodo configured to allow anyone in the wheel
group (which currently consists of me only, and isn't likely to change
anytime soon... :) to run anything as root ("%wheel ALL=(ALL)
NOPASSWD: ALL"), and as a result of your suggestion in your article, I've
removed the suid bit from /bin/su. Assuming that msec level 4 doesn't
decide to "repair" that later on, I've got that part covered.
Couple of questions for you: If I've set up things like above, where
someone in the wheel group can run anything, and then set up another entry
which says that anyone in the adm group can run a more restricted subset of
commands, what happens if the person (me, in this case) belongs to both
groups? Does the higher access (wheel group) take priority, or does the
lower, more restricted access (adm group) take priority?
The other question is this: Is it possible to set up sshd so that it will
use that key-based login thing you talked about in an earlier message for
some users, while allowing password logins for others? That would be a
kind-of happy medium for me, so that I can restrict access to my personal
account without making things needlessly complicated for my friends who
access the machine? I've already got sshd configured to deny direct root
logins, so you have to login as someone else first and then su to root.
Since I've just gotten rid of the suid bit off of /bin/su, I've made my
personal login ID the "window to root." :-) As I previously mentioned, I'm
pretty careful about the passwords I pick for myself, but if I can enable
the key-based login for myself (while allowing password logins for others),
I could make it that much harder for someone to compromise my machine.
TIA!
--Dave
--
David Guntner GEnie: Just say NO!
http://www.akaMail.com/pgpkey/davidg or key server
for PGP Public key
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
Re: [expert] lyx, libforms, and other frontends
On Fri, 2 Aug 2002, Praedor Tempus wrote: > Another question regarding lyx. If you check the configure script, > you see that there is an option for selecting a GUI for lyx other > than based on xforms (which is quite ugly and motif-ish). There is > an option for qt2 and gtk-based frontends. Woo-hoo! Or so I thought. > I have all the devel libs for qt2 and gtk installed yet no matter what > switches I use, no matter what I do, it is seemingly impossible to build > anyting other than an xforms-based frontend for lyx. Have any Mandrake > developers ever managed to build one of these alternative frontends? > If you haven't even tried...perhaps it would be a good thing to try? > Since the default environment for Mandrake is KDE, a qt-frontend for > lyx and all other apps that have such an option seems to be the most > logical choice. Just curious if anyone has managed a nicer frontend > for lyx than the default xforms version. Try the package 'klyx'. It has a somewhat nicer interface than lyx. Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Attn: Vincent - sudo article at mandrakesecure.net
On Fri, 02 Aug 2002 13:35:58 -0700
"David Guntner" <[EMAIL PROTECTED]> wrote:
> Hey Vince, I just read your article at mandrakesecure.net
> regarding sudo. Excellent article. (Now, I just need to get
> going on the msec stuff so I can figure out how to tone down
> some of security level 4's more obnoxious habits :)
>
> I like what you mentioned regarding using sudo to restrict
> access to the su command. I've currently got sodo configured to
> allow anyone in the wheel group (which currently consists of me
> only, and isn't likely to change anytime soon... :) to run
> anything as root ("%wheel ALL=(ALL) NOPASSWD: ALL"), and
> as a result of your suggestion in your article, I've removed the
> suid bit from /bin/su. Assuming that msec level 4 doesn't
> decide to "repair" that later on, I've got that part covered.
>
> Couple of questions for you: If I've set up things like above,
> where someone in the wheel group can run anything, and then set
> up another entry which says that anyone in the adm group can run
> a more restricted subset of commands, what happens if the person
> (me, in this case) belongs to both groups? Does the higher
> access (wheel group) take priority, or does the lower, more
> restricted access (adm group) take priority?
>
> The other question is this: Is it possible to set up sshd so
> that it will use that key-based login thing you talked about in
> an earlier message for some users, while allowing password
> logins for others? That would be a kind-of happy medium for me,
> so that I can restrict access to my personal account without
> making things needlessly complicated for my friends who access
> the machine? I've already got sshd configured to deny direct
> root logins, so you have to login as someone else first and then
> su to root. Since I've just gotten rid of the suid bit off of
> /bin/su, I've made my personal login ID the "window to root."
> :-) As I previously mentioned, I'm pretty careful about the
> passwords I pick for myself, but if I can enable the key-based
> login for myself (while allowing password logins for others), I
> could make it that much harder for someone to compromise my
> machine.
>
> TIA!
>
>--Dave
> --
> David Guntner GEnie: Just say NO!
> http://www.akaMail.com/pgpkey/davidg or key server
> for PGP Public key
>
>
The above brings a question to mind that I've never found an
answer to. How is that Linux doesn't use 'groups' in the same
manor as say FreeBSD. If you aren't wheel you don't get access to
su, if you aren't in group newproject you can't see newprojects
files etc etc. Better yet is there somewhere I can find info on
how to implement this under Linux?
James
>
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
Re: [expert] lyx, libforms, and other frontends
On Friday 02 August 2002 03:54 pm, [EMAIL PROTECTED] wrote: > On Fri, 2 Aug 2002, Praedor Tempus wrote: > > Another question regarding lyx. If you check the configure script, > > you see that there is an option for selecting a GUI for lyx other > > than based on xforms (which is quite ugly and motif-ish). There is > > an option for qt2 and gtk-based frontends. Woo-hoo! Or so I thought. [...] > > Try the package 'klyx'. It has a somewhat nicer interface than lyx. Yeah, I tried it over a year or so ago. It was originally going to be the wordprocessor (or at least that was the intention) for KDE/KOffice. Kword supplanted it. Klyx hasn't been updated since who knows when. It is likely still even based on lyx-1.1.4 or some other dinosaurian version. I had hopes for it but the developer(s) are not developing it. It is defunct and stagnant. It's too bad it didn't get taken up as the koffice wordprocessor. Koffice could then boast the ONLY linux word processor that can properly and painlessly handle citations, references, and bibliographies. Windows and Macs have this capability in M$ Word and WordPerfect (via apps like EndNote) but no linux wordprocessor can handle it...except lyx - and lyx is really a royal pain to work with because it is not intuitive. Ah well. Anyway, I FINALLY managed to get lyx-1.2.0 built and installed. It's more work than building a kernel. praedor Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
[expert] su - user -> Segmentation fault
Not sure what has happened, but I seemed to have a new problem after upgrading the the newest kernel put out by Mandrake to fix security holes. --- as a regular user $ sudo su - newuser Segmentation fault $ su - newuser ... works ok after password entered $ su - ... works ok after root password entered --- as root user # su - newuser Segmentation fault the sudo file contains ... User_Alias FULLTIMERS = user,newuser ... FULLTIMERS ALL = NOPASSWD: ALL rootALL = (ALL) ALL and msec settings are # cat /etc/security/msec/security.conf # # cat /etc/security/msec/level.local ... allow_root_login(1) enable_libsafe(1) enable_pam_wheel_for_su(1) enable_password(1) enable_sulogin(1) ... # Any ideas ? Thanks... Dan. Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Enabling CGI capabilities on LM 8.2
On Fri, 2002-08-02 at 12:36, Nathan Hopper wrote: > I've been unable to get CGI programs to run on Apache. I've changed the > permissions on the test-cgi program from the /var/www/cgi-bin/ to > executable, with the owner/group as apache:apache. In the cgi-bin, I've > checked to ensure that it can run cgi programs in the apache setup. But I > still get a 'forbidden' when I try to run anything. I tried typing > http://host/cgi-bin/test-cgi and test-cgi.cgi, but to no avail. > > [SNIP] Make sure that the Apache configuration files have suitable "Allow from" settings. I vaguely recall that I had to enable access for CGI scripts. Look at /etc/httpd/conf/commonhttpd.conf and locate the section that looks like: AllowOverride All Options ExecCGI Deny from all Allow from 127.0.0.1 The above example allows CGI only to localhost. Replacing the "Deny from all" line with "Allow from all" will do the obvious. Don't forget to restart Apache after changing the configuration. This is done (as root) with "service httpd restart" Seth [EMAIL PROTECTED] Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Network Client Billing Solution needed
On Friday 02 August 2002 15:17, you wrote: > On 2 Aug 2002 at 7:45, John Haywood wrote: > > Has anybody come across any decent solutions? I've checked Sourceforge, > > but most projects are either pre-alpha, dead, or contain no files > > You might look at ntop > http://www.ntop.org > It should do most of what you want. > > Ray Warren Ray, this looks promising for the Cisco side of things- now does anybody have any suggestions for the stuff in the DMZ, and the unmanaged HP switch TIA -- john in sydney = Mandrake Linux 8.2 Kernel version: 2.4.18-6mdk Uptime: 11 days 2 hours 45 minutes = Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] lyx, libforms, and other frontends
On Fri, 2 Aug 2002 14:44:12 -0500 Praedor Tempus <[EMAIL PROTECTED]> wrote: > Why doesn't Mandrake supply the full xforms with their Mandrake > releases? Only recently has xforms gone fully GPL. Prior to doing so licensing issues precluded its inclusion in Mandrake. Charles -- Keep emotionally active. Cater to your favorite neurosis. -- Charles A Edwards [EMAIL PROTECTED] -- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] wlan, orinoco card, pci pcmcia adaptor
On Friday 02 August 2002 23:12, Praedor Tempus wrote: > Does anyone have a lucent orinoco card (I have a gold card) in a > pcmcia-to-pci adaptor that actually works in linux/Mandrake? > > The orinoco cards are supposed to be among the best supported of the > 802.11b cards available yet I have never managed to get it working. > > I have Mandrake 8.2 installed on a desktop system and a pcmcia-to-pci > adaptor. When I load the wvlan_cs driver, my messages log produces: > > Anyone have any ideas or a way around this? I have disabled my mobos > parallel port because I don't use it - I had hoped to free up an IRQ in so > doing (IRQ7) and I even commented out the /etc/pcmcia/config.opts line that > excludes IRQ7 because of the parallel port so I would, presumably, have > IRQ7 available for use. Nope. > > Any aid would be greatly appreciated. > > praedor Hi I have Silwer card working...Have to say that wat much harder to get it working in 8.2 than 8.1. Whole 8.2 installation failed into pcmcia state.I had to take adaptor away and install 8.2 first,then afterwards add it.But still had troubles. What I did,was ,I took separate pcmcia-cs-3.1.33.tar.gz package and compiled that + separate orinoco-cs package and added that into system... Ofcourse had to recompile kernel without pcmcia...Info can be found from pcmcia-cs package likewise about orinoco-cs info. Here's what you need.. .http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/ If you have questions I can try answer directly...But I have limited time to be with my linux-mandrake...Tomorrow have to leave it for 1 months time...Not able to answer questions...Have no possibilities to read my mail during this month... Jarmo Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
