Re: [expert] WebMin login
On Thu, 30 Oct 2003 20:45:01 -0800 Eric Huff <[EMAIL PROTECTED]> scribed on electronic parchment: > > Firebird is 0.7. I do have a ton of extensions loaded, but could > > not fine the one to stop www. and .com being added. I found that > > the backslash after the localhost ip solved it, i.e. > > https://127.0.0.1:1/ > > Here are the ones i modified: > > browser.fixup.alternate.enabled false > > keyword.enabled false Thanks Eric, Those were the ones to do for me as well. I have never had any programming, but I am a damn good trouble shooter. I just need to learn enough of the language to know what it is saying. ;-) Tim -- _ ( ) ASCII ribbon campaign against HTML e-mail x registered Linux user # 329428 / \ GnuPG KeyID 6B5A70DF www.keyserver.net pgp0.pgp Description: PGP signature
Re: [expert] WebMin login
> Firebird is 0.7. I do have a ton of extensions loaded, but could > not fine the one to stop www. and .com being added. I found that > the backslash after the localhost ip solved it, i.e. > https://127.0.0.1:1/ Here are the ones i modified: browser.fixup.alternate.enabled false keyword.enabled false eric -- Mandrake HowTo's & More: http://twiki.mdklinuxfaq.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] WebMin login
> Webmin set itself up to run at boot. I will leave it, but I wish > it would load on demand or when requested I guess it is. Yeah, that's the key for me. I swear it used to load on demand, but maybe i am smokin it... eric -- Mandrake HowTo's & More: http://twiki.mdklinuxfaq.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] WebMin login
On Thu, 30 Oct 2003 20:03:29 -0800 James Sparenberg <[EMAIL PROTECTED]> scribed on electronic parchment: > On Thu, 2003-10-30 at 02:38, Tim Sawchuck wrote: > > On Thu, 30 Oct 2003 12:22:31 -0500 > > Anyway, now I have to admit that I viewed WebMin as a security problem > > and never used it. Now I feel like an idiot, seeing how powerful it is > > - at least I learned something new today..' old dawg, new trick! ;-) > > > > Tim > > I like it because like sudo it logs everything. Configuring a user so > that he/she can use/configure something that would normally require root > access is a lot easier than with sudo. Seriously though if you like > Webmin you'll love Usermin. James, Well, I'm the only "user" on this computer. I did log in to Webmin as root, but will setup myself as a user soon. I was astonished at all the options. I know enough to monitor essential logs and so on, but Webmin is very nice. Tim -- I often read this forum on my PDA, please use plain text! _ ( ) ASCII ribbon campaign against HTML e-mail x registered Linux user # 329428 / \ GnuPG KeyID 6B5A70DF www.keyserver.net pgp0.pgp Description: PGP signature
Re: [expert] WebMin login
On Thu, 30 Oct 2003 19:21:50 -0800 Eric Huff <[EMAIL PROTECTED]> scribed on electronic parchment: > > 127.0.0.1 worked fine. I'm using Mozilla-Firebird and could not > > find how to disable. I do have the extension that lets me modify > > all prefs, just could not find it. > > Hmm... I just now read closely enough to see you use firebird. Which > version? > > Do you have Webmin set to run at startup? (it probably was by > default) Firebird is 0.7. I do have a ton of extensions loaded, but could not fine the one to stop www. and .com being added. I found that the backslash after the localhost ip solved it, i.e. https://127.0.0.1:1/ Webmin set itself up to run at boot. I will leave it, but I wish it would load on demand or when requested I guess it is. My head is swimming; I'm trying to learn to much at once! ;-) Tim -- I often read this forum on my PDA, please use plain text! _ ( ) ASCII ribbon campaign against HTML e-mail x registered Linux user # 329428 / \ GnuPG KeyID 6B5A70DF www.keyserver.net pgp0.pgp Description: PGP signature
Re: [expert] WebMin login
On Thu, 2003-10-30 at 02:38, Tim Sawchuck wrote: > On Thu, 30 Oct 2003 12:22:31 -0500 > HaywireMac <[EMAIL PROTECTED]> scribed on electronic parchment: > > > On Thu, 30 Oct 2003 09:15:59 + > > Tim Sawchuck <[EMAIL PROTECTED]> uttered: > > > > > > > > Anyone seen this? How to stop it? > > > > This came up before. Verisign actually sold the domain "localhost.com", > > bloody arses that they are. > > > > Two sol'ns came up, tell your browser not to autmatically append ".com" > > to addresses, or use 127.0.0.1 instead. > > > > How you tell your browser not to append .com would vary according to the > > browser, check the archives for more info on that. > > Thanks Haywire! > > 127.0.0.1 worked fine. I'm using Mozilla-Firebird and could not find how to > disable. I do have the extension that lets me modify all prefs, just could > not find it. > > And I found your reply stumbling through the archives; search in acrchives > is not working, so it is the scroll and hope you find the keywork that > works. Find in page in the browser works ok, *if* you get the correct > keyword. > > Anyway, now I have to admit that I viewed WebMin as a security problem and > never used it. Now I feel like an idiot, seeing how powerful it is - at > least I learned something new today..' old dawg, new trick! ;-) > > Tim I like it because like sudo it logs everything. Configuring a user so that he/she can use/configure something that would normally require root access is a lot easier than with sudo. Seriously though if you like Webmin you'll love Usermin. James Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] WebMin login
> 127.0.0.1 worked fine. I'm using Mozilla-Firebird and could not > find how to disable. I do have the extension that lets me modify > all prefs, just could not find it. Hmm... I just now read closely enough to see you use firebird. Which version? Do you have Webmin set to run at startup? (it probably was by default) eric -- Mandrake HowTo's & More: http://twiki.mdklinuxfaq.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] WebMin login
> This came up before. Verisign actually sold the domain > "localhost.com", bloody arses that they are. > > Two sol'ns came up, tell your browser not to autmatically append > ".com" to addresses, or use 127.0.0.1 instead. > > How you tell your browser not to append .com would vary according > to the browser, check the archives for more info on that. I see you got your solution, but if anyone else can't get it to stop that way: The issue with firebird is even worse: there's some sort of google search that i couldn't seem to turn off. And when i did 127.0.0.1, i got the same, which i couldn't figure out. Or does the /etc/hosts file work both ways: 127.0.0.1 turns into localhost? Anyway, my solution was to run webmin on bootup. This way, when you try to go to webmin, since that port is already running, firebird didn't try to search any further... eric -- Mandrake HowTo's & More: http://twiki.mdklinuxfaq.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] WebMin login
On Thu, 30 Oct 2003 13:54:23 -0500 HaywireMac <[EMAIL PROTECTED]> scribed on electronic parchment: > On Thu, 30 Oct 2003 10:38:41 + > Tim Sawchuck <[EMAIL PROTECTED]> uttered: > > > And I found your reply stumbling through the archives; search in > > acrchives is not working, so it is the scroll and hope you find the > > keywork that works. Find in page in the browser works ok, *if* you > > get the correct keyword. > > I should have mentioned, it was Eric Huff IIRC that ran into the same > thing, would have helped you track it down easier, sorry. No big deal. Your answer still got me going, even if it did show in the archives before it got delivered to my pop account. Tim -- _ ( ) ASCII ribbon campaign against HTML e-mail x registered Linux user # 329428 / \ GnuPG KeyID 6B5A70DF www.keyserver.net pgp0.pgp Description: PGP signature
Re: [expert] WebMin login
On Thu, 30 Oct 2003 10:38:41 + Tim Sawchuck <[EMAIL PROTECTED]> uttered: > And I found your reply stumbling through the archives; search in > acrchives is not working, so it is the scroll and hope you find the > keywork that works. Find in page in the browser works ok, *if* you > get the correct keyword. I should have mentioned, it was Eric Huff IIRC that ran into the same thing, would have helped you track it down easier, sorry. -- HaywireMac ++ ICQ # 279518458 Registered Linux user #282046 Homepage: www.orderinchaos.org ++ Mandrake HowTo's & More: http://twiki.mdklinuxfaq.org ++ The best you get is an even break. -- Franklin Adams Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] WebMin login
On Thu, 30 Oct 2003 12:22:31 -0500 HaywireMac <[EMAIL PROTECTED]> scribed on electronic parchment: > On Thu, 30 Oct 2003 09:15:59 + > Tim Sawchuck <[EMAIL PROTECTED]> uttered: > > > > > Anyone seen this? How to stop it? > > This came up before. Verisign actually sold the domain "localhost.com", > bloody arses that they are. > > Two sol'ns came up, tell your browser not to autmatically append ".com" > to addresses, or use 127.0.0.1 instead. > > How you tell your browser not to append .com would vary according to the > browser, check the archives for more info on that. Thanks Haywire! 127.0.0.1 worked fine. I'm using Mozilla-Firebird and could not find how to disable. I do have the extension that lets me modify all prefs, just could not find it. And I found your reply stumbling through the archives; search in acrchives is not working, so it is the scroll and hope you find the keywork that works. Find in page in the browser works ok, *if* you get the correct keyword. Anyway, now I have to admit that I viewed WebMin as a security problem and never used it. Now I feel like an idiot, seeing how powerful it is - at least I learned something new today..' old dawg, new trick! ;-) Tim -- _ ( ) ASCII ribbon campaign against HTML e-mail x registered Linux user # 329428 / \ GnuPG KeyID 6B5A70DF www.keyserver.net pgp0.pgp Description: PGP signature
Re: [expert] WebMin login
On Thu, 30 Oct 2003 09:15:59 + Tim Sawchuck <[EMAIL PROTECTED]> uttered: > > Anyone seen this? How to stop it? This came up before. Verisign actually sold the domain "localhost.com", bloody arses that they are. Two sol'ns came up, tell your browser not to autmatically append ".com" to addresses, or use 127.0.0.1 instead. How you tell your browser not to append .com would vary according to the browser, check the archives for more info on that. -- HaywireMac ++ ICQ # 279518458 Registered Linux user #282046 Homepage: www.orderinchaos.org ++ Mandrake HowTo's & More: http://twiki.mdklinuxfaq.org ++ "I gained nothing at all from Supreme Enlightenment, and for that very reason it is called Supreme Enlightenment." -- Gotama Buddha Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Webmin
Good point!!! Thanks. > > dgssoftware> and currently all ports except ssh, are bolted down. How safe would it > dgssoftware> be for me to allow the port 1 for webmin. Is this good or is there > dgssoftware> some real threats associated with this. Webmin is already installed > > The MOST secure way : make a ssh tunel to webmin. To webmin it will look like > you are coming from 127.0.0.1 so you can block acces to port 1 to the > outside world and you can set access in webmin only to 127.0.0.1. > So the only way someone can acces webmin is to have a ssh account. If someone > has ssh account he doesn't need webmin ;))) > > > - This message was sent via the web interface to Sniff Out's POP3 Email - http://www.sniffout.net/ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Webmin
Linux uses MD5 now for passwords so the new limit is 256 chars. On Monday 19 November 2001 01:40, you wrote: > Are the password still 8 character significant for the crypt() > function, or has Linux changed this? > > Thanks for your response. > Dave > > > When webmin is running, it is bound to port 1 since webmin uses > > its own > > > 128bit > > certificate for encryption, its very safe, no passwords get passed > > in clear > > > txt and > > its rather difficult to run a brute force password script on a web > > based > > > admin program. > > if your passwords are up to the task, you will be fine.. (all my > > passwords > > > are at least > > 11 characters long and contains small chars, CAPS chars, numbers4321 > > and > > > symboles!@@#@!! > > > > Since I started using no non non encrypted services, started using > > long > > > passwords for stuff.. > > (in fact, usernames that need to be there and have a log in, but > > don't log > > > in as a person (ie having to type in a password), have passwords up > > to 50 > > > characters long, I type them in a txt editor, usually they are > > complete > > > giberish > > and cut and paste them into the passwd screen) I have never been > > compromised. > > > > so Webmin will fine if used hand in hand with a decent password > > policy.. > > > rgds > > > > Frank > > > > > > > > > > > > > > > > > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]]On Behalf Of > > [EMAIL PROTECTED] > > Sent: Monday, 19 November 2001 5:08 PM > > To: [EMAIL PROTECTED] > > Subject: [expert] Webmin > > > > > > Hi All, > > > > How secure is webmin, I know that is uses a https server, but I need > > to administer a machine remotely. The MDK 8 box has bastille loaded > > and currently all ports except ssh, are bolted down. How safe would > > it > > > be for me to allow the port 1 for webmin. Is this good or is > > there > > > some real threats associated with this. Webmin is already installed > > and is used accross the SOHO network...it's just an issue of opening > > the WEB side access. > > > > TIA > > Dave. > > > > - > > This message was sent via the web interface to > > Sniff Out's POP3 Email - http://www.sniffout.net/ > > - > This message was sent via the web interface to > Sniff Out's POP3 Email - http://www.sniffout.net/ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Webmin
dgssoftware> and currently all ports except ssh, are bolted down. How safe would it dgssoftware> be for me to allow the port 1 for webmin. Is this good or is there dgssoftware> some real threats associated with this. Webmin is already installed The MOST secure way : make a ssh tunel to webmin. To webmin it will look like you are coming from 127.0.0.1 so you can block acces to port 1 to the outside world and you can set access in webmin only to 127.0.0.1. So the only way someone can acces webmin is to have a ssh account. If someone has ssh account he doesn't need webmin ;))) Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [expert] Webmin
tcp rgds Frank -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Monday, 19 November 2001 6:13 PM To: [EMAIL PROTECTED]; Linux Mandrake Expert Mailing List Subject: RE: [expert] Webmin Thanks again, i'll have to dig out the iptables howto to make sure that I don't open anything other than port 1, btw, is webmin tcp or udp? > actually, I think they are still 8 chars, but I make long ones anyway,, > > also, most people don't add gibberish till the end of the password, which > sort of ruins the > purpose, I use gibberish all the way though.. > > you can download a password cracker and test your passwords if you are > unsure of their security.. > > rgds > > Frank > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] > Sent: Monday, 19 November 2001 5:40 PM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: RE: [expert] Webmin > > > Are the password still 8 character significant for the crypt() > function, or has Linux changed this? > > Thanks for your response. > Dave > > > > When webmin is running, it is bound to port 1 since webmin uses > its own > > 128bit > > certificate for encryption, its very safe, no passwords get passed > in clear > > txt and > > its rather difficult to run a brute force password script on a web > based > > admin program. > > if your passwords are up to the task, you will be fine.. (all my > passwords > > are at least > > 11 characters long and contains small chars, CAPS chars, numbers4321 > and > > symboles!@@#@!! > > > > Since I started using no non non encrypted services, started using > long > > passwords for stuff.. > > (in fact, usernames that need to be there and have a log in, but > don't log > > in as a person (ie having to type in a password), have passwords up > to 50 > > characters long, I type them in a txt editor, usually they are > complete > > giberish > > and cut and paste them into the passwd screen) I have never been > > compromised. > > > > so Webmin will fine if used hand in hand with a decent password > policy.. > > > > > > rgds > > > > Frank > > > > > > > > > > > > > > > > > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]]On Behalf Of > > [EMAIL PROTECTED] > > Sent: Monday, 19 November 2001 5:08 PM > > To: [EMAIL PROTECTED] > > Subject: [expert] Webmin > > > > > > Hi All, > > > > How secure is webmin, I know that is uses a https server, but I need > > to administer a machine remotely. The MDK 8 box has bastille loaded > > and currently all ports except ssh, are bolted down. How safe would > it > > be for me to allow the port 1 for webmin. Is this good or is > there > > some real threats associated with this. Webmin is already installed > > and is used accross the SOHO network...it's just an issue of opening > > the WEB side access. > > > > TIA > > Dave. > > > > - > > This message was sent via the web interface to > > Sniff Out's POP3 Email - http://www.sniffout.net/ > > > > > > > > > > > > > > > - > This message was sent via the web interface to > Sniff Out's POP3 Email - http://www.sniffout.net/ > > > > - This message was sent via the web interface to Sniff Out's POP3 Email - http://www.sniffout.net/ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [expert] Webmin
Thanks again, i'll have to dig out the iptables howto to make sure that I don't open anything other than port 1, btw, is webmin tcp or udp? > actually, I think they are still 8 chars, but I make long ones anyway,, > > also, most people don't add gibberish till the end of the password, which > sort of ruins the > purpose, I use gibberish all the way though.. > > you can download a password cracker and test your passwords if you are > unsure of their security.. > > rgds > > Frank > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] > Sent: Monday, 19 November 2001 5:40 PM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: RE: [expert] Webmin > > > Are the password still 8 character significant for the crypt() > function, or has Linux changed this? > > Thanks for your response. > Dave > > > > When webmin is running, it is bound to port 1 since webmin uses > its own > > 128bit > > certificate for encryption, its very safe, no passwords get passed > in clear > > txt and > > its rather difficult to run a brute force password script on a web > based > > admin program. > > if your passwords are up to the task, you will be fine.. (all my > passwords > > are at least > > 11 characters long and contains small chars, CAPS chars, numbers4321 > and > > symboles!@@#@!! > > > > Since I started using no non non encrypted services, started using > long > > passwords for stuff.. > > (in fact, usernames that need to be there and have a log in, but > don't log > > in as a person (ie having to type in a password), have passwords up > to 50 > > characters long, I type them in a txt editor, usually they are > complete > > giberish > > and cut and paste them into the passwd screen) I have never been > > compromised. > > > > so Webmin will fine if used hand in hand with a decent password > policy.. > > > > > > rgds > > > > Frank > > > > > > > > > > > > > > > > > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]]On Behalf Of > > [EMAIL PROTECTED] > > Sent: Monday, 19 November 2001 5:08 PM > > To: [EMAIL PROTECTED] > > Subject: [expert] Webmin > > > > > > Hi All, > > > > How secure is webmin, I know that is uses a https server, but I need > > to administer a machine remotely. The MDK 8 box has bastille loaded > > and currently all ports except ssh, are bolted down. How safe would > it > > be for me to allow the port 1 for webmin. Is this good or is > there > > some real threats associated with this. Webmin is already installed > > and is used accross the SOHO network...it's just an issue of opening > > the WEB side access. > > > > TIA > > Dave. > > > > - > > This message was sent via the web interface to > > Sniff Out's POP3 Email - http://www.sniffout.net/ > > > > > > > > > > > > > > > - > This message was sent via the web interface to > Sniff Out's POP3 Email - http://www.sniffout.net/ > > > > - This message was sent via the web interface to Sniff Out's POP3 Email - http://www.sniffout.net/ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [expert] Webmin
actually, I think they are still 8 chars, but I make long ones anyway,, also, most people don't add gibberish till the end of the password, which sort of ruins the purpose, I use gibberish all the way though.. you can download a password cracker and test your passwords if you are unsure of their security.. rgds Frank -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, 19 November 2001 5:40 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: [expert] Webmin Are the password still 8 character significant for the crypt() function, or has Linux changed this? Thanks for your response. Dave > > When webmin is running, it is bound to port 1 since webmin uses its own > 128bit > certificate for encryption, its very safe, no passwords get passed in clear > txt and > its rather difficult to run a brute force password script on a web based > admin program. > if your passwords are up to the task, you will be fine.. (all my passwords > are at least > 11 characters long and contains small chars, CAPS chars, numbers4321 and > symboles!@@#@!! > > Since I started using no non non encrypted services, started using long > passwords for stuff.. > (in fact, usernames that need to be there and have a log in, but don't log > in as a person (ie having to type in a password), have passwords up to 50 > characters long, I type them in a txt editor, usually they are complete > giberish > and cut and paste them into the passwd screen) I have never been > compromised. > > so Webmin will fine if used hand in hand with a decent password policy.. > > > rgds > > Frank > > > > > > > > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of > [EMAIL PROTECTED] > Sent: Monday, 19 November 2001 5:08 PM > To: [EMAIL PROTECTED] > Subject: [expert] Webmin > > > Hi All, > > How secure is webmin, I know that is uses a https server, but I need > to administer a machine remotely. The MDK 8 box has bastille loaded > and currently all ports except ssh, are bolted down. How safe would it > be for me to allow the port 1 for webmin. Is this good or is there > some real threats associated with this. Webmin is already installed > and is used accross the SOHO network...it's just an issue of opening > the WEB side access. > > TIA > Dave. > > - > This message was sent via the web interface to > Sniff Out's POP3 Email - http://www.sniffout.net/ > > > > > > - This message was sent via the web interface to Sniff Out's POP3 Email - http://www.sniffout.net/ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [expert] Webmin
Are the password still 8 character significant for the crypt() function, or has Linux changed this? Thanks for your response. Dave > > When webmin is running, it is bound to port 1 since webmin uses its own > 128bit > certificate for encryption, its very safe, no passwords get passed in clear > txt and > its rather difficult to run a brute force password script on a web based > admin program. > if your passwords are up to the task, you will be fine.. (all my passwords > are at least > 11 characters long and contains small chars, CAPS chars, numbers4321 and > symboles!@@#@!! > > Since I started using no non non encrypted services, started using long > passwords for stuff.. > (in fact, usernames that need to be there and have a log in, but don't log > in as a person (ie having to type in a password), have passwords up to 50 > characters long, I type them in a txt editor, usually they are complete > giberish > and cut and paste them into the passwd screen) I have never been > compromised. > > so Webmin will fine if used hand in hand with a decent password policy.. > > > rgds > > Frank > > > > > > > > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of > [EMAIL PROTECTED] > Sent: Monday, 19 November 2001 5:08 PM > To: [EMAIL PROTECTED] > Subject: [expert] Webmin > > > Hi All, > > How secure is webmin, I know that is uses a https server, but I need > to administer a machine remotely. The MDK 8 box has bastille loaded > and currently all ports except ssh, are bolted down. How safe would it > be for me to allow the port 1 for webmin. Is this good or is there > some real threats associated with this. Webmin is already installed > and is used accross the SOHO network...it's just an issue of opening > the WEB side access. > > TIA > Dave. > > - > This message was sent via the web interface to > Sniff Out's POP3 Email - http://www.sniffout.net/ > > > > > > - This message was sent via the web interface to Sniff Out's POP3 Email - http://www.sniffout.net/ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [expert] Webmin
When webmin is running, it is bound to port 1 since webmin uses its own 128bit certificate for encryption, its very safe, no passwords get passed in clear txt and its rather difficult to run a brute force password script on a web based admin program. if your passwords are up to the task, you will be fine.. (all my passwords are at least 11 characters long and contains small chars, CAPS chars, numbers4321 and symboles!@@#@!! Since I started using no non non encrypted services, started using long passwords for stuff.. (in fact, usernames that need to be there and have a log in, but don't log in as a person (ie having to type in a password), have passwords up to 50 characters long, I type them in a txt editor, usually they are complete giberish and cut and paste them into the passwd screen) I have never been compromised. so Webmin will fine if used hand in hand with a decent password policy.. rgds Frank -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Monday, 19 November 2001 5:08 PM To: [EMAIL PROTECTED] Subject: [expert] Webmin Hi All, How secure is webmin, I know that is uses a https server, but I need to administer a machine remotely. The MDK 8 box has bastille loaded and currently all ports except ssh, are bolted down. How safe would it be for me to allow the port 1 for webmin. Is this good or is there some real threats associated with this. Webmin is already installed and is used accross the SOHO network...it's just an issue of opening the WEB side access. TIA Dave. - This message was sent via the web interface to Sniff Out's POP3 Email - http://www.sniffout.net/ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] WEBMIN wont work
Try https://localhost:1 **NOTE** the S in https. I had the same problem about a month ago. Dave>>> D McIntosh <[EMAIL PROTECTED]> 08/07/01 12:42PM >>>Can somebody help me out and let me know why when I do a http://localhost:1 I get a message back saying that my localhost is broken? Whats going on
Re: [expert] WEBMIN wont work
D McIntosh wrote: > Can somebody help me out and let me know why when I do a > http://localhost:1 I get a message back saying that my > localhost is broken? Whats going on D McIntoshbecause recent versions of webmin require, for security reasons, https:// rather than http:// to access them. Try: https://localhost:1 and you'll connect. :) -- Alan
RE: [expert] webmin
Ouch,, unless there is a config file you can add it to,, I would remove and reinstall it.. since there is a newer version on mandrake update anyway, it might be a good time to try it... Frank Hauptle / / _ ---/ / (_)__ __ __ --/ /__/ / _ \/ // /\ \/ / -//_/_//_/\_,_/ /_/\_\ Gshop & Network Payment Solutions. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of goldengull.net administrator Sent: Friday, 23 February 2001 2:50 AM To: mandrake user Subject: RE: [expert] webmin no. root doesn't work. i don't have any users in webmin, including root, so i can't log in. i guess i'm going to have to uninstall the rpm and reinstall it. unless you have another idea... mg > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Franki > Sent: Thursday, February 22, 2001 10:46 AM > To: [EMAIL PROTECTED] > Subject: RE: [expert] webmin > > > does root work? > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of goldengull.net > administrator > Sent: Thursday, 22 February 2001 4:23 AM > To: mandrake user > Subject: [expert] webmin > > > i erased my only user in webmin. *takes a bow* > > how can i fix? i tried running the setup script again, but no such luck. > > > mg > >
RE: [expert] webmin
no. root doesn't work. i don't have any users in webmin, including root, so i can't log in. i guess i'm going to have to uninstall the rpm and reinstall it. unless you have another idea... mg > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Franki > Sent: Thursday, February 22, 2001 10:46 AM > To: [EMAIL PROTECTED] > Subject: RE: [expert] webmin > > > does root work? > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of goldengull.net > administrator > Sent: Thursday, 22 February 2001 4:23 AM > To: mandrake user > Subject: [expert] webmin > > > i erased my only user in webmin. *takes a bow* > > how can i fix? i tried running the setup script again, but no such luck. > > > mg > >
RE: [expert] webmin
does root work? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of goldengull.net administrator Sent: Thursday, 22 February 2001 4:23 AM To: mandrake user Subject: [expert] webmin i erased my only user in webmin. *takes a bow* how can i fix? i tried running the setup script again, but no such luck. mg
Re: [expert] webmin
Praedor Tempus wrote: > > I assumed that since webmin is dealing with system wide operations like > daemons, policies, accounts, etc, that one would have to be root to be able > to change anything. > > Are you implying that any user can login to webmin and mess with ftp, telnet, > and other services? Or are you indicating that one should setup a special > "group", add a particular user, and give that group admin rights via webmin? yeah - it a funny concept that threw me for a little bit when i set my bsd machines up.
Re: [expert] webmin
Praedor Tempus wrote: > > Has anyone else run into this problem with webmin? Is this a new installation, or a working installation gone wrong. someone else suggested remove and reinstall i think but maybe u have done that ?
Re: [expert] webmin
Praedor Tempus wrote: > > I assumed that since webmin is dealing with system wide operations like > daemons, policies, accounts, etc, that one would have to be root to be able > to change anything. > > Are you implying that any user can login to webmin and mess with ftp, telnet, > and other services? Or are you indicating that one should setup a special > "group", add a particular user, and give that group admin rights via webmin? > > On Wednesday 21 February 2001 19:39, Steve Elliott wrote: > > Praedor Tempus wrote: > > > Has anyone else run into this problem with webmin? > > > I find that when I connect to the web interface and login as root, it > > > accepts the username and password but...with every single "page" that I > > > go to, I get webmin sets up its own user data base that is not related to the system users at all - thats how it appears on my freebsd boxes anyway. there is a perl script called newuser.pl or similar in webmin dir that will create a new webmin user. i think u run it as root to start with, setup the webmin user and away u go ? Someone correct me if i am wrong ? -- Regards, Steve
Re: [expert] webmin
I assumed that since webmin is dealing with system wide operations like daemons, policies, accounts, etc, that one would have to be root to be able to change anything. Are you implying that any user can login to webmin and mess with ftp, telnet, and other services? Or are you indicating that one should setup a special "group", add a particular user, and give that group admin rights via webmin? On Wednesday 21 February 2001 19:39, Steve Elliott wrote: > Praedor Tempus wrote: > > Has anyone else run into this problem with webmin? > > I find that when I connect to the web interface and login as root, it > > accepts the username and password but...with every single "page" that I > > go to, I get > > Y u wanna connect to webmin as root ? -- Against stupidity, the gods themselves contend in vain.
Re: [expert] webmin
On Sat, Jan 13, 2001 at 06:59:44PM +0800, xylonite wrote: > hi all > > I try to enter my webmin page but error > > http://127.0.0.1:1/ > > try port 138 also can't > > error msg are same > -- > A network error occurred while netscape > was receving data > (network error: connection reset by > peer) > --- > > http was running > webmin was running > and i think everything was fine.. i have > using mandrake for a long time some > example for 7.1 i\'ve no problem. > # Linuxconf network access > was enable also try https: instead of http: and see if it works. -- Chris Spackman [EMAIL PROTECTED]
Re: [expert] webmin wont work
On Sunday 24 December 2000 05:06, you wrote: > Hmm, I've been using Webmin all this time without SSL, > and I can't seem to make it work WITH ssl... I have to > use http://localhost:1 to connect. How do I enable > SSL for Webmin? > > Bob Use it without, or download the 7.2 rpm and install it and practice your symbolic linking skills to make it work. The change to SSL came in 7.2 Civileme
Re: [expert] webmin wont work
On Saturday 23 December 2000 00:18, you wrote: > What am I missing/doing wrong here? > > I have webmin installed and it is running. Whenever I try to connect to > "http://localhost:1/" or "http://localhost.localdomain:1/" it > fails. In konqueror I get an error message that the "connection is broken". > If I try to connect from mozilla, nothing happens at all. I can't see any > messages in /var/log/messages about it...or anywhere else for that matter. > > What is needed to run webmin? https://127.0.0.1:1 Civileme
RE: [expert] webmin wont work
https://localhost:1 you need a secure connection ;) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Praedor Tempus Sent: Saturday, December 23, 2000 1:19 AM To: [EMAIL PROTECTED] Subject: [expert] webmin wont work What am I missing/doing wrong here? I have webmin installed and it is running. Whenever I try to connect to "http://localhost:1/" or "http://localhost.localdomain:1/" it fails. In konqueror I get an error message that the "connection is broken". If I try to connect from mozilla, nothing happens at all. I can't see any messages in /var/log/messages about it...or anywhere else for that matter. What is needed to run webmin? -- Against stupidity, the gods themselves contend in vain --- praedor
Re: [expert] webmin wont work
On Sunday 24 December 2000 06:06, you wrote: > Hmm, I've been using Webmin all this time without SSL, > and I can't seem to make it work WITH ssl... I have to > use http://localhost:1 to connect. How do I enable > SSL for Webmin? > > Bob Hi Try https://localhost:1 jarmo
Re: [expert] webmin wont work
> Hmm, I've been using Webmin all this time without SSL, > and I can't seem to make it work WITH ssl... I have to > use http://localhost:1 to connect. How do I enable > SSL for Webmin? Bob, You'll find the howto at http://www.webmin.com/webmin/ssl.html Happy holidays, -- Simon Cousins [EMAIL PROTECTED] Computers in the future may weigh no more than 1.5 tons. - Popular Mechanics, 1949.
Re: [expert] webmin wont work
Hmm, I've been using Webmin all this time without SSL, and I can't seem to make it work WITH ssl... I have to use http://localhost:1 to connect. How do I enable SSL for Webmin? Bob
RE: [expert] webmin wont work
Oh man...;-) peace, Rog http://www.slammingrooves.com Registered Linux user #190719 On Fri, 22 Dec 2000, Mark Weaver wrote: > Alan, > > You'll have to excuse my friend...he hasn't been himself this week. :) > *grinning a sadistic grinch-type grin* I'm not too sure "who" he has been > but it hasn't been himself. > > Please! no flames Rog...I was only kidding! :P > > Mark > > Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > Alan Shoemaker > Sent: Friday, December 22, 2000 8:23 PM > To: [EMAIL PROTECTED] > Subject: Re: [expert] webmin wont work > > > Roger Sherman wrote: > > Type shttp instead of http. > > > > > > peace, > > > > Rog > > > > http://www.slammingrooves.com > > Registered Linux user #190719 > > > > On Fri, 22 Dec 2000, Praedor Tempus wrote: > > > What am I missing/doing wrong here? > > > > > > I have webmin installed and it is running. Whenever I > > > try to connect to "http://localhost:1/" or > > > "http://localhost.localdomain:1/" it fails. In > > > konqueror I get an error message that the "connection is > > > broken". If I try to connect from mozilla, nothing > > > happens at all. I can't see any messages in > > > /var/log/messages about it...or anywhere else for that > > > matter. > > > > > > What is needed to run webmin? > > > -- > > > Against stupidity, the gods themselves contend in vain > > > --- > > > praedor > > Rogclose, but no cigar!! It's https not shttp, as in: > > https://localhost:1/ > -- > Alan > > > > >
Re: [expert] webmin wont work
LOL...yeah...I just realized that...my dyslexic name is Bob, by the way ;-) peace, Rog http://www.slammingrooves.com Registered Linux user #190719 On Fri, 22 Dec 2000, Alan Shoemaker wrote: > Roger Sherman wrote: > > Type shttp instead of http. > > > > > > peace, > > > > Rog > > > > http://www.slammingrooves.com > > Registered Linux user #190719 > > > > On Fri, 22 Dec 2000, Praedor Tempus wrote: > > > What am I missing/doing wrong here? > > > > > > I have webmin installed and it is running. Whenever I > > > try to connect to "http://localhost:1/" or > > > "http://localhost.localdomain:1/" it fails. In > > > konqueror I get an error message that the "connection is > > > broken". If I try to connect from mozilla, nothing > > > happens at all. I can't see any messages in > > > /var/log/messages about it...or anywhere else for that > > > matter. > > > > > > What is needed to run webmin? > > > -- > > > Against stupidity, the gods themselves contend in vain > > > --- > > > praedor > > Rogclose, but no cigar!! It's https not shttp, as in: > > https://localhost:1/ > -- > Alan > > >
Re: [expert] webmin wont work
Erk! Thats what I meant to say...not shttp... peace, Rog http://www.slammingrooves.com Registered Linux user #190719 On Fri, 22 Dec 2000, Nitin Raja Bhatia wrote: > Hello Praedor, > > Webmin uses ssl to ensure a safe connection and to avoid simple packet > sniffing techniques that someone may attempt when you login to webmin, > therfore you must use > HTTPS instead of HTTP. > > > so, from the local box: https://localhost:1 > > Happy Holidays to Mandrake Users around the world, > > Nitin Raja Bhatia > [EMAIL PROTECTED] > > > > > > > Praedor Tempus wrote: > > > > What am I missing/doing wrong here? > > > > I have webmin installed and it is running. Whenever I try to connect to > > "http://localhost:1/" or "http://localhost.localdomain:1/" it fails. > > In konqueror I get an error message that the "connection is broken". If I > > try to connect from mozilla, nothing happens at all. I can't see any > > messages in /var/log/messages about it...or anywhere else for that matter. > > > > What is needed to run webmin? > > -- > > Against stupidity, the gods themselves contend in vain > > --- > > praedor > > >
Re: [expert] webmin wont work
Hello Praedor, Webmin uses ssl to ensure a safe connection and to avoid simple packet sniffing techniques that someone may attempt when you login to webmin, therfore you must use HTTPS instead of HTTP. so, from the local box: https://localhost:1 Happy Holidays to Mandrake Users around the world, Nitin Raja Bhatia [EMAIL PROTECTED] Praedor Tempus wrote: > > What am I missing/doing wrong here? > > I have webmin installed and it is running. Whenever I try to connect to > "http://localhost:1/" or "http://localhost.localdomain:1/" it fails. > In konqueror I get an error message that the "connection is broken". If I > try to connect from mozilla, nothing happens at all. I can't see any > messages in /var/log/messages about it...or anywhere else for that matter. > > What is needed to run webmin? > -- > Against stupidity, the gods themselves contend in vain > --- > praedor
Re: [expert] webmin wont work
Spaciba. That was it. If you do the "webmin" from an xterm, it neglects to tell you to use the https://, opting for http:// On Friday 22 December 2000 06:52 pm, you wrote: > > Type shttp instead of http. > > Or even https > > https://localhost:1/ -- Against stupidity, the gods themselves contend in vain --- praedor
Re: [expert] webmin wont work
> Type shttp instead of http. Or even https https://localhost:1/ -- Simon Cousins [EMAIL PROTECTED] What's a Debian and where can I buy one?
RE: [expert] webmin wont work
Alan, You'll have to excuse my friend...he hasn't been himself this week. :) *grinning a sadistic grinch-type grin* I'm not too sure "who" he has been but it hasn't been himself. Please! no flames Rog...I was only kidding! :P Mark Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Alan Shoemaker Sent: Friday, December 22, 2000 8:23 PM To: [EMAIL PROTECTED] Subject: Re: [expert] webmin wont work Roger Sherman wrote: > Type shttp instead of http. > > > peace, > > Rog > > http://www.slammingrooves.com > Registered Linux user #190719 > > On Fri, 22 Dec 2000, Praedor Tempus wrote: > > What am I missing/doing wrong here? > > > > I have webmin installed and it is running. Whenever I > > try to connect to "http://localhost:1/" or > > "http://localhost.localdomain:1/" it fails. In > > konqueror I get an error message that the "connection is > > broken". If I try to connect from mozilla, nothing > > happens at all. I can't see any messages in > > /var/log/messages about it...or anywhere else for that > > matter. > > > > What is needed to run webmin? > > -- > > Against stupidity, the gods themselves contend in vain > > --- > > praedor Rogclose, but no cigar!! It's https not shttp, as in: https://localhost:1/ -- Alan
Re: [expert] webmin wont work
Roger Sherman wrote: > Type shttp instead of http. > > > peace, > > Rog > > http://www.slammingrooves.com > Registered Linux user #190719 > > On Fri, 22 Dec 2000, Praedor Tempus wrote: > > What am I missing/doing wrong here? > > > > I have webmin installed and it is running. Whenever I > > try to connect to "http://localhost:1/" or > > "http://localhost.localdomain:1/" it fails. In > > konqueror I get an error message that the "connection is > > broken". If I try to connect from mozilla, nothing > > happens at all. I can't see any messages in > > /var/log/messages about it...or anywhere else for that > > matter. > > > > What is needed to run webmin? > > -- > > Against stupidity, the gods themselves contend in vain > > --- > > praedor Rogclose, but no cigar!! It's https not shttp, as in: https://localhost:1/ -- Alan
Re: [expert] webmin wont work
Type shttp instead of http. peace, Rog http://www.slammingrooves.com Registered Linux user #190719 On Fri, 22 Dec 2000, Praedor Tempus wrote: > What am I missing/doing wrong here? > > I have webmin installed and it is running. Whenever I try to connect to > "http://localhost:1/" or "http://localhost.localdomain:1/" it fails. > In konqueror I get an error message that the "connection is broken". If I > try to connect from mozilla, nothing happens at all. I can't see any > messages in /var/log/messages about it...or anywhere else for that matter. > > What is needed to run webmin? > -- > Against stupidity, the gods themselves contend in vain > --- > praedor > > >
Re: [expert] webmin: local host connection broken
On Mon, Nov 20, 2000 at 01:57:11AM -0500, Jeff Malka wrote: > Since I changed my localhost name, webmin will no longer start when I enter > http://localhost:1/ I get an error message saying "connection to > host localhost is broken". Entering the "http://newhostname:1" does not > work. > > Where and how do I could correct this? Well, I'd got to /etc/webmin and grep with recursion for the old hostname. > > Thanks. > > > -- > Jeff Malka <[EMAIL PROTECTED]> > Registered Linux User 348854 > > Keep in touch with http://mandrakeforum.com: > Subscribe the "[EMAIL PROTECTED]" mailing list. -- -- C^2 No windows were crashed in the making of this email. Looking for fine software and/or web pages? http://w3.trib.com/~ccurley Keep in touch with http://mandrakeforum.com: Subscribe the "[EMAIL PROTECTED]" mailing list.
Re: [expert] webmin: local host connection broken
Hello Try https://localhost:1 or https://newlocalhost:1 Here it works Jarmo [EMAIL PROTECTED] Keep in touch with http://mandrakeforum.com: Subscribe the "[EMAIL PROTECTED]" mailing list.
Re: [expert] webmin on mandrake 7.2 beta
Steve Young wrote: > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of stevey81 > Sent: Friday, July 10, 2893 6:44 PM > To: [EMAIL PROTECTED] > Subject: [expert] > > Starting Webmin execvp: No such file or directory > > does anyone know what file or directory it's looking for, or why it fails to > start. > i'm running mandrake 7.2 beta, i've had the same problem on two different > boxes. > > > Keep in touch with http://mandrakeforum.com: > Subscribe the "[EMAIL PROTECTED]" mailing list. >From a term window do a 'locate execvp'. You should get a return under /usr/lib/perl5/etc. Also, do a 'man execvp' to make sure everything is actually installed. Which ver of Perl comes with 7.2beta? begin:vcard n:Piety;Bill x-mozilla-html:FALSE adr:;; version:2.1 email;internet:[EMAIL PROTECTED] x-mozilla-cpt:;0 fn:Bill Piety end:vcard Keep in touch with http://mandrakeforum.com: Subscribe the "[EMAIL PROTECTED]" mailing list.
Re: [expert] webmin on mandrake 7.2 beta
I got the same thing...so I removed teh RPM and downloaded and installed the tarball. You can find instructions here:http://plainmail.com/linux/secure.html Steve Young wrote: > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of stevey81 > Sent: Friday, July 10, 2893 6:44 PM > To: [EMAIL PROTECTED] > Subject: [expert] > > Starting Webmin execvp: No such file or directory > > does anyone know what file or directory it's looking for, or why it fails to > start. > i'm running mandrake 7.2 beta, i've had the same problem on two different > boxes. > > > Keep in touch with http://mandrakeforum.com: > Subscribe the "[EMAIL PROTECTED]" mailing list. Keep in touch with http://mandrakeforum.com: Subscribe the "[EMAIL PROTECTED]" mailing list.
Re: [expert] Webmin and SSL
Someone found a Net_SSLEay rpm and mentioned it a few days ago. Does anyone know where I could find it (I have a machine I would like to put webmin on, but don't feel like compiling Net_SSLeay on a Pentium 60 by ssh. Buchan Buchan Milne wrote: > > There is an article on this on http://www.mandrakeuser.org. > > Buchan > > Jim Holthaus wrote: > > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > I just downloaded and installed the webmin rpm (webmin-0.80-16mdk.noarch.rpm) > > and it seems to work fine on a testing basis. How do I switch it to use SSL > > for communications? I have the perl SSL rpm (perl-Net_SSLeay-1.05-4mdk.i586.rpm) > > installed, too. > > - -- > > Jim Holthaus (pronunciation: HOLT house) > > [EMAIL PROTECTED] > > PGP Public Key at http://www.holthaus.com/jim/pgpkey.html > > Learn about PGP at http://www.holthaus.com/jim/pgp.html > > > > -BEGIN PGP SIGNATURE- > > Version: PGP 6.5.1 > > > > iQA/AwUBOdUVk33IcJJ+eC/CEQL5MwCgmLWErVK3rLydU5hbTYpplxhHqxsAnRRS > > jjrqAd8/Bli5EFRSB2uDcL8q > > =moRS > > -END PGP SIGNATURE- > > > > > > Keep in touch with http://mandrakeforum.com: > > Subscribe the "[EMAIL PROTECTED]" mailing list. > > -- > |--| > Buchan MilneMechanical Engineer, Network Manager > Cellphone +27824722231 > email mailto:[EMAIL PROTECTED] > Centre for Automotive Engineering http://www.sun.ac.za/cae > South Africas first satellite:http://sunsat.ee.sun.ac.za > Control Models http://www.control.co.za > |Registered Linux User #182071-| > > > Keep in touch with http://mandrakeforum.com: > Subscribe the "[EMAIL PROTECTED]" mailing list. -- |--| Buchan MilneMechanical Engineer, Network Manager Cellphone +27824722231 email mailto:[EMAIL PROTECTED] Centre for Automotive Engineering http://www.sun.ac.za/cae South Africas first satellite:http://sunsat.ee.sun.ac.za Control Models http://www.control.co.za |Registered Linux User #182071-| Keep in touch with http://mandrakeforum.com: Subscribe the "[EMAIL PROTECTED]" mailing list.
Re: [expert] Webmin and SSL
http://www.mandrakeuser.org/secure/shttps.html Buchan Milne wrote: > There is an article on this on http://www.mandrakeuser.org. > > Buchan > > Jim Holthaus wrote: > > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > I just downloaded and installed the webmin rpm (webmin-0.80-16mdk.noarch.rpm) > > and it seems to work fine on a testing basis. How do I switch it to use SSL > > for communications? I have the perl SSL rpm (perl-Net_SSLeay-1.05-4mdk.i586.rpm) > > installed, too. > > - -- > > Jim Holthaus (pronunciation: HOLT house) > > [EMAIL PROTECTED] > > PGP Public Key at http://www.holthaus.com/jim/pgpkey.html > > Learn about PGP at http://www.holthaus.com/jim/pgp.html > > > > -BEGIN PGP SIGNATURE- > > Version: PGP 6.5.1 > > > > iQA/AwUBOdUVk33IcJJ+eC/CEQL5MwCgmLWErVK3rLydU5hbTYpplxhHqxsAnRRS > > jjrqAd8/Bli5EFRSB2uDcL8q > > =moRS > > -END PGP SIGNATURE- > > > > > > Keep in touch with http://mandrakeforum.com: > > Subscribe the "[EMAIL PROTECTED]" mailing list. > > -- > |--| > Buchan MilneMechanical Engineer, Network Manager > Cellphone +27824722231 > email mailto:[EMAIL PROTECTED] > Centre for Automotive Engineering http://www.sun.ac.za/cae > South Africas first satellite:http://sunsat.ee.sun.ac.za > Control Models http://www.control.co.za > |Registered Linux User #182071-| > > > Keep in touch with http://mandrakeforum.com: > Subscribe the "[EMAIL PROTECTED]" mailing list. Keep in touch with http://mandrakeforum.com: Subscribe the "[EMAIL PROTECTED]" mailing list.
Re: [expert] Webmin and SSL
I've never installed from the RPM, but if SSL is available you should be able to enable it from the Webmin Configuration menu. Here is a link to installing Webmin with SSL http://plainmail.com/linux/secure.html. Jim Holthaus wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I just downloaded and installed the webmin rpm (webmin-0.80-16mdk.noarch.rpm) > and it seems to work fine on a testing basis. How do I switch it to use SSL > for communications? I have the perl SSL rpm (perl-Net_SSLeay-1.05-4mdk.i586.rpm) > installed, too. > - -- > Jim Holthaus (pronunciation: HOLT house) > [EMAIL PROTECTED] > PGP Public Key at http://www.holthaus.com/jim/pgpkey.html > Learn about PGP at http://www.holthaus.com/jim/pgp.html > > -BEGIN PGP SIGNATURE- > Version: PGP 6.5.1 > > iQA/AwUBOdUVk33IcJJ+eC/CEQL5MwCgmLWErVK3rLydU5hbTYpplxhHqxsAnRRS > jjrqAd8/Bli5EFRSB2uDcL8q > =moRS > -END PGP SIGNATURE- > > > Keep in touch with http://mandrakeforum.com: > Subscribe the "[EMAIL PROTECTED]" mailing list. Keep in touch with http://mandrakeforum.com: Subscribe the "[EMAIL PROTECTED]" mailing list.
Re: [expert] Webmin and SSL
There is an article on this on http://www.mandrakeuser.org. Buchan Jim Holthaus wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I just downloaded and installed the webmin rpm (webmin-0.80-16mdk.noarch.rpm) > and it seems to work fine on a testing basis. How do I switch it to use SSL > for communications? I have the perl SSL rpm (perl-Net_SSLeay-1.05-4mdk.i586.rpm) > installed, too. > - -- > Jim Holthaus (pronunciation: HOLT house) > [EMAIL PROTECTED] > PGP Public Key at http://www.holthaus.com/jim/pgpkey.html > Learn about PGP at http://www.holthaus.com/jim/pgp.html > > -BEGIN PGP SIGNATURE- > Version: PGP 6.5.1 > > iQA/AwUBOdUVk33IcJJ+eC/CEQL5MwCgmLWErVK3rLydU5hbTYpplxhHqxsAnRRS > jjrqAd8/Bli5EFRSB2uDcL8q > =moRS > -END PGP SIGNATURE- > > > Keep in touch with http://mandrakeforum.com: > Subscribe the "[EMAIL PROTECTED]" mailing list. -- |--| Buchan MilneMechanical Engineer, Network Manager Cellphone +27824722231 email mailto:[EMAIL PROTECTED] Centre for Automotive Engineering http://www.sun.ac.za/cae South Africas first satellite:http://sunsat.ee.sun.ac.za Control Models http://www.control.co.za |Registered Linux User #182071-| Keep in touch with http://mandrakeforum.com: Subscribe the "[EMAIL PROTECTED]" mailing list.
Re: [expert] webmin won't work. :(
I believe that the superuser for webmin is not neccesarily root. I would look through the conf file(which I think is in /etc)for webmin for the superuser name and password. you can just set it there in plain text. for security you also might want to set webmin to a different port number. Hope this helps. Sam.
Re: [expert] webmin safe ?
Follow the link... http://plainmail.com/linux/secure.html - Original Message - From: "faisal" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Friday, August 18, 2000 6:42 AM Subject: [expert] webmin safe ? > Is web considered to be safe under a secure environment ? > Like we have doubts about using linuxconf . > >
Re: [expert] webmin safe ?
On Fri, 18 Aug 2000, faisal wrote: > Is web considered to be safe under a secure environment ? > Like we have doubts about using linuxconf . > Apply the SSL patches to be sure, from www.webmin.com. > -- Regards, Ellick Chan [EMAIL PROTECTED] Aug 18
RE: [expert] webmin (was how to make php functional on mdk71?)
On Wed, 19 Jul 2000, Civileme wrote: > On Wed, 19 Jul 2000, you wrote: > > How can I get Webadmin running? When I tried to use it would not respond. > By default, webmin is not running in most types of installations. > > You might try > > DrakConf->Startup Services->and make sure webmin is a)listed and b)checked. In my case it was working in 7.0 and not working after upgrading to 7.1 I had to: [dave@dalrun dave]$ su Password: [root@dalrun dave]# cd /usr/share/webmin [root@dalrun webmin]# ./setup.sh
Re: [expert] Webmin
G'day, Try this, put "localhost" in "Do not use proxy server for addresses beginning with" in your browser "Advanced Proxy Settings", and see if that helps. - Original Message - From: "Jarmo" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, 8 July 2000 23:00 Subject: Re: [expert] Webmin > > > http://127.0.0.1:1 > > > > should ask you for a login. > > > > So also, (if lookup is hosts, DNS) should > > http://localhost.localdomain:1, but the use of nicknames may or may > > not be supported for this purpose. > > > > And no, you should not have to add anything--if inetd is running, and > > perl is running, then the webmin server should be communicating. > > > > Civileme > > This I have undestood from help...but it does not work...as in my message > wrote have tried 'http://localhost:1,http://127.0.0.1:1 etc. > but can't get contact...getting message as described in my message. > > Did I find now something that does not work here?And just posted that > everything's working suberb! > > But this is minor problem...using linux as enduser,only having my sons win > machine connected ,so he can do networking via me and I don't have > to admin any huge network. > Learning more all the time...maybe some day > > Jarmo
Re: [expert] Webmin
On Sat, 08 Jul 2000, you wrote: > > http://127.0.0.1:1 > > > > should ask you for a login. > > > > So also, (if lookup is hosts, DNS) should > > http://localhost.localdomain:1, but the use of nicknames may or may > > not be supported for this purpose. > > > > And no, you should not have to add anything--if inetd is running, and > > perl is running, then the webmin server should be communicating. > > > > Civileme > > This I have undestood from help...but it does not work...as in my message > wrote have tried http://localhost:1 http://127.0.0.1:1 etc. > but can't get contact...getting message as described in my message. > > Did I find now something that does not work here?And just posted that > everything's working suberb! > > But this is minor problem...using linux as enduser,only having my sons win > machine connected ,so he can do networking via me and I don't have > to admin any huge network. > Learning more all the time...maybe some day > > Jarmo Is the server running? Try "ps -ax | grep [miniserv.pl]". I get 747 ?SW 0:00 [miniserv.pl] Try "/usr/share/webmin/miniserv.pl" to start it. KFM will not work, you will have success with netscape. Muzza.
Re: [expert] Webmin
I didn't see anything indicating the message you got. If you cannot connect that way, it is likely that Webmin is not running--use DrakConf -> Traffic signal to make sure it starts. In fact rpm -qa | grep webmin to make sure it is installed. I t does not install by default in all types of installation. Civileme -Original Message- From: Jarmo <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] <[EMAIL PROTECTED]> Date: Sunday, July 09, 2000 1:28 AM Subject: Re: [expert] Webmin > >> http://127.0.0.1:1 >> >> should ask you for a login. >> >> So also, (if lookup is hosts, DNS) should >> http://localhost.localdomain:1, but the use of nicknames may or may >> not be supported for this purpose. >> >> And no, you should not have to add anything--if inetd is running, and >> perl is running, then the webmin server should be communicating. >> >> Civileme > >This I have undestood from help...but it does not work...as in my message >wrote have tried 'http://localhost:1,http://127.0.0.1:1 etc. >but can't get contact...getting message as described in my message. > >Did I find now something that does not work here?And just posted that >everything's working suberb! > >But this is minor problem...using linux as enduser,only having my sons win >machine connected ,so he can do networking via me and I don't have >to admin any huge network. >Learning more all the time...maybe some day > >Jarmo > >
Re: [expert] Webmin
The default install do not install webmin, you've to get it done before you can use it. Dennis/sg > Try this... > > http://127.0.0.1:1 > > that's the correct localhost URL. > > -- > Mark > > I love my Linux Box... > REASON # 2 ...X-windows is just a suedonym. > Registered Linux user # 182496 > > On Fri, 7 Jul 2000, Jarmo wrote: > > > Hi > > > > Just curious trying webmin,when saw couple of messages > > of it. > > Tried to connect http://localhost:1,but got answer file > > does not exist or acces denied. > > I can see webmin running,so twisted model please.. > > What I have to do to get connected...i.e do I need add something > > to inetd.conf and services? > > running mdk7.1 kernel 2.2.17mdk ,amd 450MHz 128M ram 10.1 + 1.2G HDs > > 32x cd SB 128 pci ,realtek pci ether,ati rage pro agp,us robotix > > sportster flash 56k external modem in ttyS1. > > Also radioamateur stuff compiled and in use. > > > > Boy...everythig's working suberb > > > > Jarmo > > > > > >
Re: [expert] Webmin
> http://127.0.0.1:1 > > should ask you for a login. > > So also, (if lookup is hosts, DNS) should > http://localhost.localdomain:1, but the use of nicknames may or may > not be supported for this purpose. > > And no, you should not have to add anything--if inetd is running, and > perl is running, then the webmin server should be communicating. > > Civileme This I have undestood from help...but it does not work...as in my message wrote have tried 'http://localhost:1,http://127.0.0.1:1 etc. but can't get contact...getting message as described in my message. Did I find now something that does not work here?And just posted that everything's working suberb! But this is minor problem...using linux as enduser,only having my sons win machine connected ,so he can do networking via me and I don't have to admin any huge network. Learning more all the time...maybe some day Jarmo
Re: [expert] Webmin
Try this... http://127.0.0.1:1 that's the correct localhost URL. -- Mark I love my Linux Box... REASON # 2 ...X-windows is just a suedonym. Registered Linux user # 182496 On Fri, 7 Jul 2000, Jarmo wrote: > Hi > > Just curious trying webmin,when saw couple of messages > of it. > Tried to connect http://localhost:1,but got answer file > does not exist or acces denied. > I can see webmin running,so twisted model please.. > What I have to do to get connected...i.e do I need add something > to inetd.conf and services? > running mdk7.1 kernel 2.2.17mdk ,amd 450MHz 128M ram 10.1 + 1.2G HDs > 32x cd SB 128 pci ,realtek pci ether,ati rage pro agp,us robotix > sportster flash 56k external modem in ttyS1. > Also radioamateur stuff compiled and in use. > > Boy...everythig's working suberb > > Jarmo > >
Re: [expert] Webmin
Jarmo wrote: > Hi > > Just curious trying webmin,when saw couple of messages > of it. > Tried to connect http://localhost:1,but got answer file > does not exist or acces denied. > I can see webmin running,so twisted model please.. > What I have to do to get connected...i.e do I need add something > to inetd.conf and services? http://127.0.0.1:1 should ask you for a login. So also, (if lookup is hosts, DNS) should http://localhost.localdomain:1, but the use of nicknames may or may not be supported for this purpose. And no, you should not have to add anything--if inetd is running, and perl is running, then the webmin server should be communicating. Civileme > > running mdk7.1 kernel 2.2.17mdk ,amd 450MHz 128M ram 10.1 + 1.2G HDs > 32x cd SB 128 pci ,realtek pci ether,ati rage pro agp,us robotix > sportster flash 56k external modem in ttyS1. > Also radioamateur stuff compiled and in use. > > Boy...everythig's working suberb > > Jarmo