November 2004 - openSUSE Security - openSUSE Mailing Lists

RE: [suse-security] vsftpd and "426 Failure writing network strea m"
by Matt Bohall 09 Nov '04

09 Nov '04

Well I did some googling and found this, haven't tried it yet as I'm still busy offsite, but hopefully this will solve it, either way i'll let ya know. From: http://ftp.isu.edu.tw/pub/Unix/FTP/vsftpd/untar/vsftpd-1.2.2/FAQ Q) Help! I'm getting the error "426 Failure writing network stream." on downloads. A) You shouldn't see this with v1.2.1 or newer versions of vsftpd. Older versions of vsftpd can give this error if the user tries to download something from an unusual filesystem (e.g. FAT), which don't support performance features used by vsftpd. With vsftpd-1.1.3 and newer there is a confif workaround, use_sendfile=NO. Matt -----Original Message----- From: Philippe Vogel [mailto:filiaap@freenet.de] Sent: Tuesday, November 09, 2004 10:51 AM To: suse-security(a)suse.com Subject: Re: [suse-security] vsftpd and "426 Failure writing network stream" MB schrieb: >I've done some research and it seems that vsftpd devolpers claim that this error, which i get a lot being I have mostly large downloads, is because of performance issues between vsftpd and crappy file systems like FAT. They have corrected this issue with versions 1.3.1 and above ((which still isn't the latest) and we still have 1.2.1)) I was wondering when suse would put this update in YaST so myself and i'm sure countless others could correct this issue without having to update manually. > > >Matt >Devry University > > >--------------------------------- >Do you Yahoo!? > Check out the new Yahoo! Front Page. www.yahoo.com > > Are you using windows or linux? Any responsible linux-user would prefer unix-style file systems which afaik are faster than any other proprietary redmond [tm] file-system. The usage of fat is an error. I never ever had any problems with vsftpd at all. I have big up- and downloads for fem data (engineering calculations for my diploma works ...) which are sometimes some gb big. I use ext3. The usage of filesystem xy is a question I will not answer, because this wil start several discussions and is offtopic to this. From a discussion with msc-software I got their benchmarks, that fem-calculations under linux and ext3 work 3x faster than on redmond-os (on reiserfs maybe more faster). Normally I use the source from the developers page and compile the daemon for my own. Philippe -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0

Re: [suse-security] chrooted apache
by John 09 Nov '04

09 Nov '04

I think that every time YOU updates Apache 2, you have to cop all the apache related files to the chroot area except configuation ones. Am i right? ----- Original Message ----- From: "Keith Wilkinson" <nzkiwi(a)mte.biglobe.ne.jp> To: "John" <isofroni(a)cc.uoi.gr> Sent: Tuesday, November 09, 2004 11:02 AM Subject: Re: [suse-security] chrooted apache > > I posted this URL on this list back in June. > > I also asked about updating with YOU. > You can find some answers in the list archives. > >

2 1

vsftpd and "426 Failure writing network stream"
by MB 09 Nov '04

09 Nov '04

I've done some research and it seems that vsftpd devolpers claim that this error, which i get a lot being I have mostly large downloads, is because of performance issues between vsftpd and crappy file systems like FAT. They have corrected this issue with versions 1.3.1 and above ((which still isn't the latest) and we still have 1.2.1)) I was wondering when suse would put this update in YaST so myself and i'm sure countless others could correct this issue without having to update manually. Matt Devry University --------------------------------- Do you Yahoo!? Check out the new Yahoo! Front Page. www.yahoo.com

2 1

re: [suse-security] chrooted apache
by Kai Pfeiffer 08 Nov '04

08 Nov '04

Hello John, I built my Apache in a chroot environment on my Suse 9.1 box. I used a german howto, that is located under the following address: "http://members.fortunecity.de/anonymousde/strato_rooty.html" It's shows a step by step setup to build a chrooted environment on a root-server . It's not easy to understand even in german. But if you have some experience in Linux, you could follow the Command-Line instructions and ignore the german comments. Good luck! Kai Pfeiffer

2 1

ClamAV update
by Søren Kent Jensen 08 Nov '04

08 Nov '04

Hi I have noticed, that my ClamAv is complaining about being outdated. gateway:~ # freshclam ClamAV update process started at Mon Nov 8 16:25:15 2004 Reading CVD header (main.cvd): OK main.cvd is up to date (version: 27, sigs: 23982, f-level: 2, builder: tomek) Reading CVD header (daily.cvd): OK Downloading daily.cvd [*] daily.cvd updated (version: 578, sigs: 2385, f-level: 3, builder: trog) WARNING: Your ClamAV installation is OUTDATED - please update immediately ! WARNING: Current functionality level = 2, required = 3 Database updated (26367 signatures) from database.clamav.net (80.69.67.3). gateway:~ # My server is a SuSE 9.1, running YOU on a daily basis. It's currently using clamav-0.70-1.1 The current version on clamav.net is 8.0 I checked on SuSE's FTP server, and there is no updates for ClamAV. Can I install the tar.gz version from clamav.net, (Without getting problems with YOU), or will SuSE provide updates for ClamAV in near future.? Regards Søren Kent Jensen

6 5

chrooted apache
by John 08 Nov '04

08 Nov '04

how can apache get chrooted? What should i copy to the chrooted area? Any good howto in this issue?

2 1

Re: [suse-security] ClamAV update
by Ludwig Balke 08 Nov '04

08 Nov '04

In order to update the virus database of clamav use freshclam. Bye, Ludwig -- Dr.Ludwig Balke Johann-Jürgen-Str. 15 91052 Erlangen Tel. 09131/407 368 Fax. 09131/129 297

1 0

Winbind PAM Double Password Prompts
by Cameron Thorne 08 Nov '04

08 Nov '04

I know this has been beat to death, but I've exhausted all the resources Google affords me to no avail. I am running Winbind to authenticate against active directory in SLES9. ADS users can login normally. Locally defined users get double-prompted for password. This prevents anyone other than root from running YaST in KDE. /etc/pam.d/login: #%PAM-1.0 auth required pam_securetty.so auth required pam_nologin.so #auth required pam_homecheck.so auth required pam_env.so auth required pam_mail.so auth sufficient pam_unix2.so nullok auth required pam_winbind.so use_first_pass account sufficient pam_unix2.so account required pam_winbind.so password required pam_pwcheck.so nullok password required pam_unix2.so nullok use_first_pass use_authtok session required pam_mkhomedir.so skel=/etc/skel umask=0022 session required pam_unix2.so none # debug or trace session required pam_limits.so /etc/pam.d/xdm: #%PAM-1.0 auth sufficient pam_unix2.so nullok auth required pam_winbind.so use_first_pass account sufficient pam_unix2.so account required pam_winbind.so password required pam_pwcheck.so nullok password required pam_unix2.so nullok use_first_pass use_authtok session required pam_unix2.so debug # trace or none session required pam_devperm.so session required pam_resmgr.so Any ideas? -- Cameron Thorne

1 0

Re: [suse-security] chrooted apache
by John 08 Nov '04

08 Nov '04

Well, does this apply on Suse where everything is compiled automatically? What about httpd 2.x ?Suse 9.1 or 9.2 ? Thanks in advance. ----- Original Message ----- From: "Gottschalch Christian" <Christian.Gottschalch(a)is-energy.de> To: "'John'" <isofroni(a)cc.uoi.gr> Sent: Monday, November 08, 2004 11:37 AM Subject: AW: [suse-security] chrooted apache > http://www.securityfocus.com/printable/infocus/1694 > > > > > -----Ursprüngliche Nachricht----- > > Von: John [mailto:isofroni@cc.uoi.gr] > > Gesendet: Montag, 8. November 2004 08:47 > > An: suse-security(a)suse.com > > Betreff: [suse-security] chrooted apache > > > > > > how can apache get chrooted? > > What should i copy to the chrooted area? > > > > Any good howto in this issue? > > > >

1 0

quota (and kernel) problem on SuSE 9.1
by Osman Demirhan 08 Nov '04

08 Nov '04

Hi, I have a problem with suse 9.1 kernel and I am testing it for a weeks. The problem occurs when a filesystem mounted with quota support (no problem without quota) and all IO requests hang. I always produce this error by following the steps below: - I have a filesystem (reiserfs or ext3) mounted with usrquota option - I am starting download a big file on that filesystem - And I am running "quotaoff /mountpoint" while file is downloading - This command and all other filesystem requests (delete, read, write,..) hang and status of processes are seeing as "D" at ps output. The other way to produce error is using quota module of webmin (turning on/off quota of filesystem) while there is some IO on filesystem. I've tested this problem on three server (one of them Proliant 530 G2, the others are Proliant 380 G3) with fully updated SuSE 9.1 system. There is no problem with 2.6.9 kernel (from kernel.org) and kernel-smp-2.6.8-24.3 which is latest SuSE 9.2 kernel (I installed it on 9.1). I think 2.6.5 kernel on SuSE 9.1 has a bug. I've already reported this problem by using suse feedback page. Regards. -- +-----------------------+ | Osman Demirhan | +-----------------------+

1 0