I have a mysterious problem - I am unable to login as any user.
i am also unable to su to root. Forutnately I am currently logged in,
but I can't su or log in on another VC. Apparently my PAM setup is
broken (from looking at strace). I recently upgraded to the latest
version of sarge, I don't kn
>Thank you. This is exactly what I needed to know.
>So if I get you right, eth0 is kinda like ppp?
>Interface, not a device? That just seems odd, the way
>I've seen it referred to in conversation. I knew I
>was missing something.
If you know C, the following can help explain it:
You cannot op
"Bart Szyszka" writes:
>> (comment out the final line in /etc/X11/xdm/Xservers)
>
>A couple people have suggested that, but isn't it just easier to
>do a dpkg --purge xdm?
You may want to connect from another X machine to your local machine,
and login via XDMCP ; in this case, all that is require
The graphical login in run by xdm. Either remove /etc/rc2.d/xdm,
or edit the xdm conf to turn off xdm for the local host
(comment out the final line in /etc/X11/xdm/Xservers)
--Carl
>What's the harm in having an MTA installed even if you don't use it? It
>doesn't interfere. Actually, a few system tasks depend on having an MTA;
>cron will email you the text output (if any) of your cron jobs, for
>example. I think a unix system without an MTA would be broken.
>
This is correct
If it has a little round DIN connector, try '/dev/psaux' as the device.
You will need to 'modprobe psaux' before you do try the mouse.
I recommend installing gpm, which has a nifty mouse-test program that can
usually figure out automatically the type/port/etc of your mouse - but you
may have to r
You probably can't derive the root password from info on your
system (if you could, then it would be easy to break in...)
But you can get around it as long as you have physical access to the machine.
Get 'tom's unix on a floppy' or any other linux boot disk. The debian
rescue disk may work, but
With the alternatives sytstem, there are two links per executable:
/usr/bin/executable -> /etc/alternatives/executable -> /real/executable
Apparently, the develoepr of update-alternatives calls
the link in the middle a 'slave symlink'
Carl
You can try setting the TERM environment variable to match your
terminal; this is definitely needed from the awful windows
telnet program.
If you don't know which ones to try, try 'vt100' or 'vt220'.
Carl
Have you checked that the rhosts fields are:
1) named '.rhosts'
2) owned byt he user
3) mode 600 (not 644 or 664)
4) That the host you are coming FROM is listing in them
Carl
>> AFAIK, the person who owns the copyright on the work is free
>> to change that copyright as the code goes on.
>
>Well, there might actually be an exception here! The 0.9 code contains a
>patch by one Igor Lefterov. Unless Mr. Lefterov also agrees to the change
>in copyright, it might have t
>That's what I was thinking. However, is it copyright infringement to
>take up the last GPL'ed version of the software, modify it and release
>it under GPL? Of course, the original copyrights would remain intact
>and be distributed with it.
If you receiveed (or downloaded etc) a copy of the code
AFAIK, the person who owns the copyright on the work is free
to change that copyright as the code goes on.
Only the owner can sue to enfore the license, so the owner is free to
violate their own copyright or to change it at any time, since
they won't sue themselves.
The KDE people had this
> My name is Jasmine Chan and I was wondering which packages of Linux is C2
>Certified. And if they are not, is there any steps taken to make Linux C2
>certified. Thanks in advance for your help.
As I understnad it, C2 certification must be granted by a certifiacation
authority; there is no
>> Any user can run lastb.
>
>you can fix that with chmod o= /var/log/btmp*
When the file is rotated, the old permissions will be restored, so you
would have to fix the cron entry as well.
I agree that it is possible to prevent others from running lastb, but
it is easy to do it incorrectly, and
>UNKNOWN ttyp1ruf2-6.evoserve. Tue Jul 27 21:13 - 21:13 (00:00)
>chadittyp1ruf2-6.evoserve. Tue Jul 27 21:12 - 21:12 (00:00)
>
> question, is there any way for as to know as to what exactly is the 'guess'
> user name someone tried to enter w/c resulted in the UNKNOWN record
>dpkg error processing blackbox
>subprocess post-removal script returned error
>exit status 1
Go to /var/lib/dpkg/info/
and look at blackbox.postrm.
This is the script that is failing. You can 'force' things by
just moving this script somewhere else and running dpkg --purge
blackbox.
You may
A bus mouse is actually /dev/psaux. You will need to
'modprobe psaux' to install the kernel driver for this
device.
Carl
See if 'convert' in the imagemagick package will do. Note that this
is non-free, so you need to check the license also.
carl
One issue with all this is that the GNU tools are vastly superior
to older ones (in terms of extra functionality) but most people
never have the misfortune to have to use other unix systems that
don't have them.
Imagine tar without the 'z' option, find with only 'name' as a predicate,
and so on.
Buffer overflows also happen when you use a single char with
"%[...]" in scanf; this inputs as many chars as it can match,
and null-terminates the string.
Even when they aren't able to be exploited (i.e. not in a
program with special uid), buffer overflows can make
you program break in strange w
The more I think about it, the following is better.
No more buffer overflow problem.
#include
int main()
{
int test;
int result;
int j;
for(j = 0; j < 10; j++)
{
while ( scanf("%*[^0-9-]") );
result = scanf("%d", &test);
if ( ! result)
printf("Error\n");
el
>under visual C++. Is this something that's (most likely) broken in vc++, or
>perhaps (less likely) broken in glibc 2.1? All I have to test it on is a
>potato box, so I don't know if other versions of gcc have the same problem.
According to the fflush manpage, only _output_ streams are flushed.
>Active UNIX domain sockets (w/o servers)
>Proto RefCnt Flags Type State I-Node Path
>unix 2 [ ] STREAM 824491 /tmp/.X11-unix/X0
>unix 2 [ ] STREAM CONNECTED 824490
>unix 2 [ ] STREAM 824228
There is a program named 'tera term' that has an ssh extension,
surprisingly known as 'tera term ssh'.
The url is http://www.zip.com.au/~roca/ttssh.html
You have to download two files: the tera term regular executable,
and the ssh extention. More info is available through the above link.
I am
>> It still needs an MTA to send mail :-)
>Not necessarily on the same machine.
How does the mail get to the other machine? Via an MTA.
Carl
>> route add -host 24.5.xx.yy eth0
>> route add -net 24.5.xx.yy -netmask 255.255.255.255 eth0
> route add -net 24.5.xx.yy -netmask 255.255.255.0 eth0
>did NOT work ('route' complained about inconsistency)
You used FF00 as the netmask; this implies a 255-host subnet.
You do not want
I am reasonably sure that it will NOT work to change the netmask; if the
netmask is wrong, then some things that need directed to the
gateway/router will not be, and stuff will break.
I would try using 'route' to add a route to just add a route to the
local computers on the local interface; try
>Does anybody knows if there is a way to "append" (just put at last place
>without entering any editor) a schedule to crontab
ON DEBIAN ONLY:
bash$ CRONTAB_NOHEADER=Y (crontab -l ; echo "new crontab line here") | crontab
-
should do the trick.The CRONTAB_NOHEADER is a debian change fro
>> One possibility is that wordperfect is printing the command
>> 'switch to postscript mode' before it begins the postscript
>> output; some of the drivers for HP 4000 printers do this
>> (two lines of pjl, 400+ lines of psotscript, 2 lines of pjl).
>> If this is the case, you can write a small fi
[EMAIL PROTECTED]
^^^
If you are going to do this, PLEASE say so in the body
of the message. My reply bounced!
I do not look over the email addresses wwhen I reply to a message,
I just type 'repl', then edit, then type 'send'. If I were in
a less pati
Wordperfect is attempting to print some PJL commands, and the filter
is killing them.
One possibility is that wordperfect is printing the command
'switch to postscript mode' before it begins the postscript
output; some of the drivers for HP 4000 printers do this
(two lines of pjl, 400+ lines of p
Don't panic.
If the system is letting you log in, then no permanent damage is
done (i.e. you DON'T need to reinstall everything.)
Here's what to do:
See if you have the 'script' command available; it is in a base package,
but onot priority essential, so you may or may not have it. If you don'
>> to the task... cut and paste works irregularly if
>> at all, no facilities for previewing..
Previewing is not such a large issue on a machine that has a functional
http daemon running. Just edit the pages in-place and look at them with
your favorite browser, hitting 'reload' when you need t
>> I'm writing an application, which implements some terminal functionalities.
>> I'd like to receive every keystroke, just after the key is pressed
>> (like with vga_getkey(), but in text mode).
setvbuf, etc. are only for output streams, not input streams.
Input is never buffed, but as you fou
Look at the '-m' option of fetchmail, in the fetchmail man page.
If you install procmail, you can use it with fetchmail, and apparantly
you can also use the /usr/lib/sendmail interface to do it.
I know that several others here do what you are asking, so maybe they
can give you their command line
>> I'm trying to get an FTP client for Linux that is graphical, and
>> supports bookmarks. Something like gFTP or IglooFTP.
Netscape will work; use ftp://[EMAIL PROTECTED]/ and netscape will
prompt you once for the password. Once you are connected, you use the
'Upload' command on the file menu,
>> Oki. I just put a 'defaults' there... What does nosuid,nodev and use do?
>> Where is the man page for this? (Not the normal man fstab)
The options are filesystem-specific. Try mount(8) and nfs(5) to see
what options are available for the filesystem you are mounting.
Skip the nfs page if you do
You can turn off the netstd ftpd by commenting out the apprpriate line
in /etc/inetd.conf and then '/etc/init.d/netbase restart'.
As for proftpd, I am not sure if it wants to ru under inetd or as its own
daemon. Look for an entry (maybe commented out) in /etc/inetd.conf,
look for /etc/init.d/p
>> > I was looking in my mail dir today and noticed my debian-user folder
>> > exceeds 4 Meg for this month. In reviewing the question and answers
>> > for the last few days, it seems like there is a lot of wasted
>> > bandwidth.
>> I like the idea of less time being wasted on repeating the sa
>> from konica_qm100.c:7:
>> /usr/include/glib.h:66: glibconfig.h: No such file or directory
>> make[2]: *** [konica_qm100.o] Error 1
>> make[2]: Leaving directory `/usr/src/gphoto/gphoto-0.3-2-990422/konica'
>> make[1]: *** [../konica/libgphoto_konica_qm100.so] Error 2
>> make[1]:
>How can I install a tar package and replace a debian package. I would
>like to install perl 5.005_03. I tried to remove the old one with
>dselect and all the web packages were gone.
>So, is there any chance either to remove the old perl stuff and keep the
>dependent packages or can I build a deb
>
> I was looking in my mail dir today and noticed my debian-user folder
>exceeds 4 Meg for this month. In reviewing the question and answers
>for the last few days, it seems like there is a lot of wasted
>bandwidth.
How about the once-a-week FAQ that gets posted to high-use newsgroups?
These
About the 'no home' ting: it means that the system couldn't cd to the user's
homedir after assuming the identity of the user. Usually this means
that /home isn't mounted, or wasn't mounted when you added the user, but
you may have other reasons. Just make sure that the entry in /etc/passwd
for
Hopefully this gets back to whoever asked originally..
You could roll a solution using chroot() to move the user into their
home dir - all it costs is the disk space to recreate the bin and lib
trees.
Carl
> How do I catch the return value from the child process??
man waitpid
>I tried this after reading the man page and it did not work, so I read the man
>page again and it seems that --user is intended for use in closing a process,
>not in starting one.
damn. You're right. Rename the script below, edit the vars at the top,
and you are i business. Sorry to have led y
>
>start-stop-daemon --start --exec $NEWT /path/to/executable ?
The sense I get from the manpage is that you should use
start-stop-daemon --start --user newt --exec /path/to/prog -- -program -options
Carl
--cut
#!/usr/bin/perl
foreach (@ARGV)
{
printf "%#o %s \n", (stat($_))[2] & 0x1ff, $_;
}
--cut
CaRL
>Is there a command that will do (so to speak) the inverse of chmod, i.e. if
>given the name of a file return its current permissions in octal?
perl -e 'printf "%#o", ((stat("FILENAME"))[2] & 0x1ff)'
Remove the # (leave everything else) to strip the leading 0
Carl
IF you are using inetd, there is an option for which uid to use;
the sytnax is
port type type user {no}wait user command
IF you don't use inetd, then you should use start-stop-daemon, which
allows you to specify the user and group . man start-stop-daemon
Carl
On Mon, Jul 12, 1999 at 11:15:22PM -0400, Carl Mummert wrote:
> Is this problem on remote machines, or your local machines?
The change from dotted-quad to hostname with attempted domain
name completion occurs on all machines (LAN and Internet users).
It's only a problem outside the LAN
>>
>> But in RedHat 6.0 this doesn't work at all... Now,,, anybody got any ideas?
>
>Security issues aside ... you can add these lines to /etc/securetty:
>0
>1
>2
>3
>4
>5
>6
>7
>8
>9
>Yes, that's 0..9 each on its own line. Why? I got this advice by
On newer kernels ( I bet that Redhat 6.0 ha
>#pragma pack(1)
>struct {};
>#pragma pack()
>
>Which forces the layout to be as you specified.
>
>Using a command line option is a Bad Idea (tm) as it may corrupt glibc's
>structures
To test a resonse to the original message, I made the follwing c file
( I was not familiar with the attribute flag
You can get better versions of passwd(1) that prevent users
from setting bad passwords in teh first place - we use
one called npasswd, which works a little TOO well
(it screens out my attempts to give new users simple passwords).
I can give you the source if you need it, but there is a distro si
Why not just set their shell to /bin/false or some such.
That prevents login access, and should prevent ftp access
(you have to check - try man ftpd ). But it allows pop
access, and imap access.
Carl
>Is there an easy way to get a list of all regular user ( UID > 1000 )
>accounts on the system? I can't find the userls command I used to use
>on SCO.
awk -F ':' '{if ($3 > 999) print $0}' < /etc/passwd
>Isn't that [crypt(3)] in libc6, folks?
WRT the message from yesterday, and this, and others:
crypt lives, for most applications, in /lib/libcrypt.*.
Some programs, like crack, provide their own, faster, version.
You specify crypt to gcc as follows:
Function prototype for C:
char *crypt(const
crack ues its own version of crypt, you have to cd to the correct
source directory of teh crack distribution and make the crypt
library.
They discuss this in the crack documentation.
Carl
>OK, you can say that it's the admin task but it would be more clean to do
>this and the admin can't do everything. For example, if the dpkg
>database would be like an email spool, owned by a group called pkg for
>example, root could give the package management to a specific user.
>For now, ev
>> some reason, how odd.) It is amazing, isn't it? Only problem now is that
>> when I right click and hit "Exit X" all it does is restart X with the debian
>
>> login... I think that oughta be fixed. I'll have to look into that script
>> file, I forget what its called. Oh well.
Ctl-Alt-F1 to sw
>It's a feature of bash, as has been mentioned. According to the bash
>manpage, you can get rid of it by adding a line "set disable-completion
>on" in your /etc/inputrc (for the entire system) or ~/.inputrc (for
>whichever user's home directory it's in). Be advised you have to restart
>bash for th
$ echo 'int main(){ unlink("--exclude_files=\"blah\"");}' > file.c && \
> gcc file.c && ./a.out && rm -f a.out file.c &
Carl
>I would have thought that someone would have figured out by now that
>/usr/include/linux (at the very least) should reflect the status of the
>kernel so that kernel-specific stuff can be done and that NOTHING in the
>library or in the include files associated with that library should depend
>upon
Look in the archives here:
http://www.debian.org/Lists-Archives/debian-user-9702/msg00686.html
for a note from linus about why things are the way they are.
Carl
>Is there a way to configure the email server (sendmail 8.9.3) so that it
>refuses mail coming from a specified address to a specific email. Let me
>clarify:
>
>My user A doesn't wan't to receive mail from [EMAIL PROTECTED] Is it
>possible (with sendmail or something else) to make b's message bouce
> Does anybody how to make an ATX motherboard boot without having to
>press the 'power' button everytime? That is, I want an standard AT
>behaviour: if there's power in the line, then I want the machine running
>without having to press anything.
There was a long discussion of this on slashdo
>> I am uploading here a small, hackish perl script that, along with some
>> apache configuration changes, will allow you to view the compressed
>> files in http://your-machine/doc as if they were not comrpessed.
>
>Very nice, but I urge people to file bug reports against packages
>that have compre
You need to specify to gcc the X library that contains all those functions.
Try something like:
gcc -L/usr/X11R6/lib file.c -lXt -lXaw
The profileration of those -l options isone reason that makefiles
are so popular.
Carl
>partition changes you want, then choose to install packages via Internet, but
>select "dists/unstable main contrib non-free".
I would say dists/potato instead of dists/unstable; here is why:
I once used dists/unstable, and everything worked fine until the next
debian version changeover (such a
yet have someone knowledgable read over it and give
you their opinion.
--begin /usr/lib/cgi-bin/doc
#!/usr/bin/perl
# A small hack by Carl Mummert <[EMAIL PROTECTED]> to
# auto-gunzip compressed html files in /usr/doc
#
# I release this to the public domain;
# do whatever you w
>> I am wondering about way to grep or to view with editor /usr/doc/*/* files.
>zgrep
>zless
>zmore
>all work on gzipped files.
lynx will also open gzipped html pages, but currently is not bright
enough to look for gzipped pages as link destinations.
carl
>> Is there any way to log with syslog all attepts (good & bad) to
>> user 'su' ?
>If you can, it would be in the manual page, right.
>man syslog.conf.
Actually, in this case it's not in any manpage.
There was a behjavior change at the hamm/slink transition- hamm su would log to
syslog,
sl
>> Is there any way to log with syslog all attepts (good & bad) to
>> user 'su' ?
>If you can, it would be in the manual page, right.
>man syslog.conf.
Actually, in this case it's not in any manpage.
There was a behjavior change at the hamm/slink transition- hamm su would log to
syslog,
sl
>> Is there any way to log with syslog all attepts (good & bad) to
>> user 'su' ?
>If you can, it would be in the manual page, right.
>man syslog.conf.
Actually, in this case it's not in any manpage.
There was a behjavior change at the hamm/slink transition- hamm su would log to
syslog,
sl
>Eterm -P none -C --scrollbar-color gray --unfocused-scrollbar-color gray
>-g 80x40 -T 'm u t t' --name mail --icon-name 'm u t t' --term-name rxvt
>-M menu -e mutt > /dev/null 2>&1 &
Try running eterm in a subshell, and redirecting the output of the subshell:
( Eterm -P none -C --scrollbar-color
ELF and a.out are two different ways of arraning data in a
compiled program or library.
a.out is older; ELF has more features.
Most of the linux world switched to ELF several years ago,
and new a.out binaries are uncommon on linux. (Although,
for historical reasons, the compiler will still CALL y
>No idea, and I doubt it. Isn't it a LILO problem?
No, it is because the BIOS has to load the kernel, and because
the kenrel starts in real mode, not protected mode.
There is a thorough description in the archives sometime this
earlier this year.
Carl
>BTW: Can somebody give me a clue why awk is /usr/bin/awk in Debian (also
>e.g., ksh) (and /bin/awk in most other systems I've seen)?
>What's the standard "#! " way to get a script running on both? ln -s
>/usr/bin/ /bin/ in Debian (and vice versa in other systems)?
>(please cc me)
Debian tries to
>FILE PACKAGE
>usr/X11R6/include/X11/Intrinsic.h x11/xlib6g-dev
>usr/i486-linuxlibc1/include/X11/Intrinsic.h oldlibs/xlib6-altdev
This same info is in Contents-i386.gz , which you
can download and grep locally .
C
>Unfortunately, that seems to not be the case...all of the mail is
>deliverd to the account which invokes fetchmail. The To: header points
>to a local user, but is not delivered to that user.
Are you running fetchmail as root, as the procmail manpage suggests?
>From message <[EMAIL PROTECTED]> :
>How can I ad a user into the dip group ???
as root
# adduser user group
Carl
At my former place of employment, we had quite a few 1.6 WDs
die. They would usually have that clicking problem.
My advice: download from WD their disk diagnosis program. You
put it on a DOS floppy, boot the floppy, and run the
program. If the program says the drive is dead, WD will
replace it
>What is the difference between these two lock methods, and which one would be
>considered to be most "stable"? I do also have the option to use both, but why
>would I want that?
Kernel locking relies on a flag to the open() command which tells the
krnel to reserve the file. dot-locking relises o
You canuse the same libraries in C++ that you use in C, just like
you can use the C stdlib functions in C++.
If you look around, you can find classes that wrap the socket
api into OO form. But these will call the C api themselves.
Carl
su HAS to be suid root. Irregardless of shadow passwords.
If I am user x, and I want to become user y, the process that calls
seteuid() HAS to be running as UID 0. Since this process is su,
it needs to be run by root or as root, i.e. setuid root.
If you chown root.shadow su, and then chmod it 2
You are probably looking for 'strstream' which you can include headers for
with '#include '.
The name of this class has been strstream for a couple of years,
but all of the STL stuff is relatively young, so if your book
is more than (about) two years old, many thngs may end up
slightly inaccura
The danger in putting your password in .fetchmailrc:
it is an obvious place to look.
Suppose that I were a cracker, and that I were
eager to find a way to compromise your account.
(Note the subjunctive here).
Say that I find a way to have your computer send me the contents of any
file (this i
>$ external-package --installed perl 5.00502
There is a special package, named 'equivs', that lets you do
this. That is, it allows you to specify to dpkg that a
certain dependency is met.
Carl
>> /dev/clipboard would require kernel modifications, and is probably not
>> what you are lookign for.
>
>I don't see why it would?
Everything in /dev is run by the kernel; when you write or read
a file in /dev, the kernel calls the appropriate driver functions
to deal with it. Thus /dev/ttyS*
Assuming that you can get the output of your program into a
file (via script or some other method), then you could use a native
X editor to open the file, copy all the text, and paste it somewhere.
I am surprised I didn't think of this earlier, but I don't use X much.
Carl
/dev/clipboard would require kernel modifications, and is probably not
what you are lookign for.
What WOULD be useful would be an X11 app that has the following feature:
When you run this app from the command line, and send text to its standard
input, the app places that text in the X clipboard
I think that the 'rinetd' package wil do this.
Alternatively, you can write a daemon yourself to do it;
something like the following, plugged into a normal
inetd.conf, will do the trick. Note that nc is a seperate
package, I think that the 'socket' program is similar
but haven't used it.
--cut
#
There is a package named 'alien' that can take care of some of this, depending
on exactly what you are needing to install.
What you do is to layout the files in some remote directory, like you
would want them installed:
/somewhere--etc/file1
|
--usr/bin/\file2
>> 1 message for linus159 at mail.server.se (4122 octets).
>> reading message 1 of 1 (4122 octets) .fetchmail: SMTP listner
>> doesn't like recipient address '[EMAIL PROTECTED]'
>> fetchmail: can't even send to linus
>> fetchmail: SMTP transaction error while fetching from mail.server.se
>> fetchma
n xterm in the xwindows session you have running,
you need to use xhost or xauth to fix the permissions to allow
other clients to connect.
$ xhost +
wll woprk but is insecure. RTFM about xhost and xauth.
Carl Mummert
--
FForgive my spelling, I'm on a dialup telnet connection...
in summary:
yes,
# tar czvf - * > /dev/sct0
Should work.
The easiest way to do incremental backups is to use a prewritten package.
I used 'tob' for a while, and it worked fine, although you may have to spend
an hour or two configuring it the first time.
If you have relatively little data, wh
One solution:
As root:
# cd /
# find . -xdev | afio -o -Z filename.afio
xdev tells find not to go across a mount boundry, so you may have to
list several root s for find, i.e.
# find . /root /other/dir /somewhere/else -xdev | afio -o -Z filename.afio
Of course, there a many ways to do this, s
>From message <[EMAIL PROTECTED]> :
> ive downloaded the source and unpacked them already, almost ready to
>recompile. may i know how/where do I add this removed compile time flag
>thats needed to enable this logging ?
>chad
from su.c:
/* su for GNU. Run a shell with substitute user and group
I noticed this problem a while back.
There is (was at the time) a bug against su because, somehow, the
compile-time flag needed to enable this logging had been removed.
I noticed this change when I upgraded from hamm to slink.
My solution was to recompile su. It is in the shellutils package;
you
1 - 100 of 141 matches
Mail list logo
