Re: [PLUG] Allow user to shutdown host

[Smith, Cathy]

I forgot to mention that the script does whatever you want it to do.  This 
could as easily be the actual shutdown command.  It doesn't have to be a 
wrapper for anything.   Our script is a menu of options.  I'd recommend (from 
experience) including a prompt that asks is this really what you want to do 
before it shuts anything down.  



Cathy
-- 
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the 
U.S. Department of Energy

Phone: 509.375.2687
Fax:       509.375.4399
Email: cathy.sm...@pnnl.gov

-Original Message-
From: plug-boun...@pdxlinux.org  On Behalf Of Rich 
Shepard
Sent: Wednesday, February 27, 2019 3:27 PM
To: Portland Linux/Unix Group 
Subject: Re: [PLUG] Allow user to shutdown host

On Wed, 27 Feb 2019, Smith, Cathy wrote:

> You can just set up an alias in .bashrc or whatever file is used for aliases. 
>  That's what I do for folks here.  I have a group set up for people needing 
> to use a command.  I edit the sudoers file once to set things up.  It looks 
> like
> %hradmin  ALL=/usr/local/bin/hradmin.sh
>
> I make the hradmin group a secondary group for the user.  For example, for 
> the user account greg
>   usermod -a -G hradmin  greg
>
> Then Gregg has in his .bashrc
>   alias hradmin='sudo /usr/local/bin/hradmin.sh'

Cathy,

Thanks very much. I always learn so much from you professional system/network 
admins.

> Names have been changed to protect the innocent.

Heh!

Best regards,

Rich
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Allow user to shutdown host

[Rich Shepard]

On Wed, 27 Feb 2019, Smith, Cathy wrote:


You can just set up an alias in .bashrc or whatever file is used for aliases.  
That's what I do for folks here.  I have a group set up for people needing to 
use a command.  I edit the sudoers file once to set things up.  It looks like
  %hradmin  ALL=/usr/local/bin/hradmin.sh

I make the hradmin group a secondary group for the user.  For example, for the 
user account greg
usermod -a -G hradmin  greg

Then Gregg has in his .bashrc
alias hradmin='sudo /usr/local/bin/hradmin.sh'


Cathy,

Thanks very much. I always learn so much from you professional
system/network admins.


Names have been changed to protect the innocent.


Heh!

Best regards,

Rich
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Allow user to shutdown host

[Smith, Cathy]

You can just set up an alias in .bashrc or whatever file is used for aliases.  
That's what I do for folks here.  I have a group set up for people needing to 
use a command.  I edit the sudoers file once to set things up.  It looks like
  %hradmin  ALL=/usr/local/bin/hradmin.sh

I make the hradmin group a secondary group for the user.  For example, for the 
user account greg
usermod -a -G hradmin  greg

Then Gregg has in his .bashrc
alias hradmin='sudo /usr/local/bin/hradmin.sh'

Names have been changed to protect the innocent.


Cathy
-- 
Cathy L. Smith
IT Engineer

Pacific Northwest National Laboratory
Operated by Battelle for the 
U.S. Department of Energy

Phone: 509.375.2687
Fax:       509.375.4399
Email: cathy.sm...@pnnl.gov

-Original Message-
From: plug-boun...@pdxlinux.org  On Behalf Of Rich 
Shepard
Sent: Wednesday, February 27, 2019 2:51 PM
To: Portland Linux/Unix Group 
Subject: Re: [PLUG] Allow user to shutdown host

On Wed, 27 Feb 2019, Paul Heinlein wrote:

> My experience is that sudo expects the command line invocation to look 
> like the sudo configuration. So what I'd do is add a function, not an 
> alias, to .bashrc:
>
> function halt {
>  /sbin/shutdown -h now
> }
>
> But since "halt" is the name of an actual executable, maybe train her 
> to use something like "haltnow" and tweak the name of the function:
>
> function haltnow {
>  /sbin/shutdown -h now
> }

Paul,

Your experiences easily top my web search. :-) I read that if the sudo alias 
has a space before the closing quote bash will pass the following command to 
sudo.

The issue today seems to be that she typed sudo /bin/halt rather than sudo 
/sbin/halt

I'll try both your haltnow function and the doit alias and report the results 
... probably over the weekend.

Many thanks,

Rich
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Allow user to shutdown host

[Rich Shepard]

On Wed, 27 Feb 2019, Paul Heinlein wrote:


My experience is that sudo expects the command line invocation to look
like the sudo configuration. So what I'd do is add a function, not an
alias, to .bashrc:

function halt {
 /sbin/shutdown -h now
}

But since "halt" is the name of an actual executable, maybe train her to use 
something like "haltnow" and tweak the name of the function:


function haltnow {
 /sbin/shutdown -h now
}


Paul,

Your experiences easily top my web search. :-) I read that if the sudo alias
has a space before the closing quote bash will pass the following command to
sudo.

The issue today seems to be that she typed
sudo /bin/halt
rather than
sudo /sbin/halt

I'll try both your haltnow function and the doit alias and report the
results ... probably over the weekend.

Many thanks,

Rich
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Allow user to shutdown host

[Paul Heinlein]

On Wed, 27 Feb 2019, Rich Shepard wrote:


On Wed, 27 Feb 2019, Rich Shepard wrote:


 Can I set an alias so when she exits X11 to a console all she needs to
 type
 is
 sudo halt
 and this will invoke /sbin/shutdown -h now? Gotta' keep in simple here.


Saw a web blog post that suggests I if add to her ~/.bash_rc the following
alias

alias halt='alias=`sudo ` halt'

all she'd need to type is halt. Does this look workable?


My experience is that sudo expects the command line invocation to look 
like the sudo configuration. So what I'd do is add a function, not an 
alias, to .bashrc:


function halt {
  /sbin/shutdown -h now
}

But since "halt" is the name of an actual executable, maybe train her 
to use something like "haltnow" and tweak the name of the function:


function haltnow {
  /sbin/shutdown -h now
}

--
Paul Heinlein
heinl...@madboa.com
45°38' N, 122°6' W___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Allow user to shutdown host

[Rich Shepard]

On Wed, 27 Feb 2019, Rich Shepard wrote:


Saw a web blog post that suggests I if add to her ~/.bash_rc the following
alias

alias halt='alias=`sudo ` halt'

all she'd need to type is halt. Does this look workable?


Nah. But this:

alias "sd=sudo "

would allow her to type

sd halt

according to superuser.com.

Rich
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Allow user to shutdown host

[Rich Shepard]

On Wed, 27 Feb 2019, Rich Shepard wrote:


Can I set an alias so when she exits X11 to a console all she needs to type
is
sudo halt
and this will invoke /sbin/shutdown -h now? Gotta' keep in simple here.


Saw a web blog post that suggests I if add to her ~/.bash_rc the following
alias

alias halt='alias=`sudo ` halt'

all she'd need to type is halt. Does this look workable?

Rich
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Allow user to shutdown host

[Rich Shepard]

On Wed, 27 Feb 2019, Paul Heinlein wrote:


The sudoers(5) man page states,
Also, the host name “localhost” will only match if that is the actual host 
name, which is usually only the case for non-networked systems.


Paul,

Ah, I forgot to look at that man page.

You'll want to replace "localhost" with either "ALL" or the exact hostname of 
the machine in question, e.g.,

%users ALL=/sbin/shutdown -h now


As this will be on only one machine ALL will do.

Can I set an alias so when she exits X11 to a console all she needs to type
is
sudo halt
and this will invoke /sbin/shutdown -h now? Gotta' keep in simple here.

Thanks,

Rich
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Allow user to shutdown host

[Paul Heinlein]

On Wed, 27 Feb 2019, Rich Shepard wrote:


Looking at /etc/sudoers I see the example:
%users  localhost=/sbin/shutdown -h now

Will this permit the Sony Vaio user to halt the laptop? I thought I 
had her set up to do this but it did not work today. If the above 
line allows everyone in the users group to shutdown the machine I'll 
modify the config file to use it.


Rich,

The sudoers(5) man page states,

Also, the host name “localhost” will only match if that is the actual 
host name, which is usually only the case for non-networked systems.


You'll want to replace "localhost" with either "ALL" or the exact 
hostname of the machine in question, e.g.,


%users ALL=/sbin/shutdown -h now

--
Paul Heinlein
heinl...@madboa.com
45°38' N, 122°6' W___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Android upgrade notices (was: Wireless access point issues)

[Rich Shepard]

On Wed, 27 Feb 2019, Tomas Kuchta wrote:


I meant, regardless how it is configured externally, the AP can restrict
access to it's web interface from either of the two interfaces - lan and
wlan. If it sees wlan as external, you could only see web interface
response from wlan or the other way around.


Tomas,

It's been several years since I set up the AP, but I had no problems doing
so via firefox using the IP address without the port number. Strange, but an
issue for another day/month/whatever.

Many thanks,

Rich
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Android upgrade notices (was: Wireless access point issues)

[Tomas Kuchta]

I meant, regardless how it is configured externally, the AP can restrict
access to it's web interface from either of the two interfaces - lan and
wlan. If it sees wlan as external, you could only see web interface
response from wlan or the other way around.

No problem if you think it is not worth trying. I t was just a suggestion,
another thing to try.

-Tomas

On Wed, Feb 27, 2019, 11:17 AM Rich Shepard 
wrote:

> On Wed, 27 Feb 2019, Tomas K wrote:
>
> > Some times these access points have a rule configured whether you can
> > connect to their web interface via WLAN or LAN only?
> >
> > Did you try to access the web interface from both LAN and WLAN sides?
>
> Tomas,
>
> Yep. Via the desktop to the IP address in /etc/hosts. The WAP is not set up
> as a router, only an access point. The router is a different box.
>
> Thanks,
>
> Rich
> ___
> PLUG mailing list
> PLUG@pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
>
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Android upgrade notices (was: Wireless access point issues)

[Tomas K]

Some times these access points have a rule configured whether you can
connect to their web interface via WLAN or LAN only?

Did you try to access the web interface from both LAN and WLAN sides?

Tomas

On Wed, 2019-02-27 at 07:45 -0800, Rich Shepard wrote:
> On Wed, 27 Feb 2019, Rich Shepard wrote:
> 
> > No. When I selected the WiFi icon Android found all the access
> > points in
> > the neighborhood with mine at the top of the list. I selected mine
> > and
> > entered my user password for network hosts as I never set up a user
> > password for me on the WAP.
> 
> I've moved this to PLUG-talk as the focus has shifted to Android, not
> linux.
> 
> Backing up and puting this WAP issue in context will help us all.
> 
> Here in the office I've no need for the WAP; it serves only to allow
> the
> Sony Vaio to access the router and FiOS connection to the 'Net. Every
> host
> in the office has an ethernet connection to the router; when I'm not
> in the
> office I've no need for a computer and 'Net access. So, why did I
> start the
> thread?
> 
> I read that when Android updates the OS and installed applications on
> the
> Nokia they can take a long time so it's better to use the phone's
> WiFi
> capabilities rather than the mobile carrier's.
> 
> The Nokia has Android 9 installed so I imagine that a long running OS
> upgrade is not in the immediate future and I do not need to connect
> it to
> the WAP here.
> 
> But I do have a relevant question because I've not had an Android-
> powered
> mobile phone before. How do I know when there are upgrades available
> that
> should be applied?
> 
> If I'm notified somehow, perhaps by a text message sent by Google, I
> can
> walk to the nearby library branch, connect to their WiFi for the
> upgrade,
> and read while the upgrade(s) are processed.
> 
> I'll use the phone as a phone here in the office, but not to access
> the Web
> or other 'Net functions. I hope this clarifies the situation. I'll
> re-work
> the WAP some time in the future as it's not immediately needed.
> 
> Thanks all,
> 
> Rich
> 
> ___
> PLUG mailing list
> PLUG@pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Determining if a newer version of a Slackpkg is available

[Rich Shepard]

On Wed, 27 Feb 2019, Ben Koenig wrote:


But they have links to facebook and twitter at the top of that article :-(


Huh! I use adblocker so I don't see ads on any web site. Some chastise me
for that but they're not ones I frequently visit.

Regards,

Rich
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Android upgrade notices (was: Wireless access point issues)

[Rich Shepard]

On Wed, 27 Feb 2019, Rich Shepard wrote:


I've moved this to PLUG-talk as the focus has shifted to Android, not linux.


Apologies. I didn't. Will do so now.

Rich
___
PLUG mailing list
PLUG@pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug

Re: [PLUG] Determining if a newer version of a Slackpkg is available

[Ben Koenig]

On 2/27/19 7:48 AM, Rich Shepard wrote:

On Wed, 27 Feb 2019, Ben Koenig wrote:

Have a direct link? I'm not interested in sifting through the 
political opinions of lesser creatures.


Well, you won't find 'lesser creatures' writing for The Economist and you
might learn a lot about what's happening in the world. It's not twitter,
facebook, or Fox.


But they have links to facebook and twitter at the top of that article :-(

if  ( hasBigAnnoyingJSAds == True ) {

  lesserCreatures = true;

}

Sweet jesus, wtf is this script on their website? And this is what I saw 
in the source AFTER disabling noscript.


< --- > window.FE_BACKEND_STATS = [ { "query": "query 
Footer($ids_0:[String]!) {menus(ids:$ids_0) {...F1}} fragment F0 on Menu 
{links {title,href,meta,internal},id} fragment F1 on Menu {id,...F0}", 
"variables": "{\"ids_0\":[\"menu-unicorn-secondary-user\"]}", "time": 
"12ms", "requestId": "4f80d58a35e1ee247dc66d92245e8a5d", "requestCount": 
1, "requests": [ "HTTP 200 GET 
http://mt-content.p.aws.economist.com/menus/menu-unicorn-secondary-user 
3ms" ] }, { "query": "query Content($path_0:String!) 
{content(path:$path_0) {...F3}} fragment F0 on XRef 
{id,originalID,webURL,title,flyTitle,teaser,rubric,mainImageObj 
{path},promoImage 
{path},dateCreated,dateCreatedString,printEdition,internal,type,parent 
{title,webURL,type,topic,slug,id}} fragment F1 on XRef 
{id,dateModifiedString,title,children {entries 
{id,originalID,flyTitle,mainImageObj {path},title,webURL,parent 
{title,webURL,type,id},internal,dateCreatedTimeAgo,...F0}}} fragment F2 
on XRef {id,...F1} fragment F3 on XRef {id,...F2}", "variables": 
"{\"path_0\":\"/node/21699879\"}", "time": "11ms", "requestId": 
"83ca1e9c6c64e6d5cb306439ddf4dfba", "requestCount": 6, "requests": [ 
"HTTP 200 GET http://mt-content.p.aws.economist.com/xref/node/21699879 
6ms", "HTTP 200 GET 
http://mt-content.p.aws.economist.com/mapper/id/21760122 5ms", "HTTP 200 
GET http://mt-content.p.aws.economist.com/mapper/id/21760156 4ms", "HTTP 
200 GET http://mt-content.p.aws.economist.com/mapper/id/21759767 6ms", 
"HTTP 200 GET http://mt-content.p.aws.economist.com/mapper/id/21760110 
6ms", "HTTP 200 GET http://mt-content.p.aws.economist.com/blogs/21003976 
4ms" ] }, { "query": "query Footer($ids_0:[String]!) {menus(ids:$ids_0) 
{...F1}} fragment F0 on Menu {links {title,href,meta,internal},id} 
fragment F1 on Menu {id,...F0}", "variables": 
"{\"ids_0\":[\"menu-unicorn-keep-updated\"]}", "time": "19ms", 
"requestId": "5ca65b792e0eecdab0b13cbf672de26f", "requestCount": 1, 
"requests": [ "HTTP 200 GET 
http://mt-content.p.aws.economist.com/menus/menu-unicorn-keep-updated 
4ms" ] }, { "query": "query Content($path_0:String!) 
{content(path:$path_0) {...F2}} fragment F0 on XRef 
{id,dateCreatedTimeAgo,title,webURL,parent {title,webURL,type,id}} 
fragment F1 on XRef {children {entries {id,...F0}},id} fragment F2 on 
XRef {id,...F1}", "variables": "{\"path_0\":\"/latest-updates\"}", 
"time": "15ms", "requestId": "9b40cb1fa0d1ead3b83e9c8a4de7a33e", 
"requestCount": 33, "requests": [ "HTTP 200 GET 
http://mt-content.p.aws.economist.com/xref/latest-updates 445ms", "HTTP 
200 GET http://mt-content.p.aws.economist.com/lists/latest?from=&to= 
7ms", "HTTP 200 GET 
http://mt-content.p.aws.economist.com/mapper/id/21760122 5ms", "HTTP 200 
GET http://mt-content.p.aws.economist.com/mapper/id/21760156 6ms", "HTTP 
200 GET