October 2011 - openSUSE Users - openSUSE Mailing Lists

[opensuse] openSUSE Weekly News Issue 199 is out!
by Sascha Manns 29 Oct '11

29 Oct '11

We are pleased to announce: Issue 199 of openSUSE Weekly News is out! [0] In this Issue: Board Election 2011 Loop mount iso files without being root The Qt-Project is alive and many more … For a list of available translations see the Translations Section in the actual Weekly News. [0] http://bit.ly/v8hjHE (in PDF) [0] http://bit.ly/rXewOH (in HTML with Bento Theme) [0] http://bit.ly/tYm4gW (in HTML with Susebooks Theme)) -- Sincerely yours Sascha Manns Community & Support Agent open-slx GmbH Web: http://community.open-slx.de -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] Is ldap TLS working?
by lynn 29 Oct '11

29 Oct '11

Hi I'm trying to tighten up my ldap server using TLS. My (certainly wrong) method was this: Server: I made a CA certificate and rootca giving the FQDN of the server as the common name for both certs.using yast. I copied YaST-CA.pem from /etc/ssl/certs to /etc/srv/htdocs. Back in Yast->LDAP Server I added TLS and restarted. Client: Yast->LDAP Client, and changed' Addresses of LDAP Servers' from 127.0.0.1 to my FQDN and downloaded YaST-CA.pem, checking the 'LDAP TLS/SSL' box in the 'Secure Connection' section. 1. What is the correct way of doing this? 2. Does this confirm that TLS is working? (all this just for one login?) Thanks. L x Oct 29 15:14:02 hh1 slapd[1798]: conn=1083 op=0 EXT oid=1.3.6.1.4.1.1466.20037 Oct 29 15:14:02 hh1 slapd[1798]: conn=1083 op=0 STARTTLS Oct 29 15:14:02 hh1 slapd[1798]: conn=1083 op=0 RESULT oid= err=0 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1083 fd=33 ACCEPT from IP=192.168.1.3:47402 (IP=0.0.0.0:389) Oct 29 15:14:02 hh1 slapd[1798]: conn=1083 fd=33 TLS established tls_ssf=256 ssf=256 Oct 29 15:14:02 hh1 slapd[1798]: conn=1083 op=1 BIND dn="" method=128 Oct 29 15:14:02 hh1 slapd[1798]: conn=1083 op=1 RESULT tag=97 err=0 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1083 op=2 SRCH base="dc=com" scope=2 deref=0 filter="(&(objectClass=shadowAccount)(uid=lynn2))" Oct 29 15:14:02 hh1 slapd[1798]: conn=1083 op=2 SRCH attr=uid userPassword shadowLastChange shadowMax shadowMin shadowWarning shadowInactive shadowExpire shadowFlag Oct 29 15:14:02 hh1 slapd[1798]: conn=1083 op=2 SEARCH RESULT tag=101 err=0 nentries=0 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 fd=34 ACCEPT from IP=192.168.1.3:47403 (IP=0.0.0.0:389) Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=0 EXT oid=1.3.6.1.4.1.1466.20037 Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=0 STARTTLS Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=0 RESULT oid= err=0 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 fd=34 TLS established tls_ssf=256 ssf=256 Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=1 BIND dn="" method=128 Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=1 RESULT tag=97 err=0 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=2 SRCH base="dc=com" scope=2 deref=0 filter="(&(objectClass=posixAccount)(objectClass=posixAccount) (uid=lynn2))" Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=2 SRCH attr=host authorizedService shadowExpire shadowFlag shadowInactive shadowLastChange shadowMax shadowMin shadowWarning uidNumber Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=3 BIND dn="uid=lynn2,ou=people,dc=com" method=128 Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=3 BIND dn="uid=lynn2,ou=people,dc=com" mech=SIMPLE ssf=0 Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=3 RESULT tag=97 err=0 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=4 BIND anonymous mech=implicit ssf=0 Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=4 BIND dn="" method=128 Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=4 RESULT tag=97 err=0 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1083 op=3 SRCH base="dc=com" scope=2 deref=0 filter="(&(objectClass=shadowAccount)(uid=lynn2))" Oct 29 15:14:02 hh1 slapd[1798]: conn=1083 op=3 SRCH attr=uid userPassword shadowLastChange shadowMax shadowMin shadowWarning shadowInactive shadowExpire shadowFlag Oct 29 15:14:02 hh1 slapd[1798]: conn=1083 op=3 SEARCH RESULT tag=101 err=0 nentries=0 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 op=0 EXT oid=1.3.6.1.4.1.1466.20037 Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 op=0 STARTTLS Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 op=0 RESULT oid= err=0 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 fd=35 ACCEPT from IP=192.168.1.3:47404 (IP=0.0.0.0:389) Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 fd=35 TLS established tls_ssf=256 ssf=256 Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 op=1 BIND dn="" method=128 Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 op=1 RESULT tag=97 err=0 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 op=2 SRCH base="dc=com" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=lynn2))" Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 op=2 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 op=3 SRCH base="dc=com" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=lynn2))" Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 op=3 SEARCH RESULT tag=101 err=0 nentries=1 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 op=4 SRCH base="dc=com" scope=2 deref=0 filter="(&(objectClass=posixGroup)(|(memberUid=lynn2) (member=uid=lynn2,ou=people,dc=com)))" Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 op=4 SRCH attr=gidNumber Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 op=4 SEARCH RESULT tag=101 err=0 nentries=0 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 op=5 UNBIND Oct 29 15:14:02 hh1 slapd[1798]: conn=1084 fd=34 closed Oct 29 15:14:02 hh1 slapd[1798]: conn=1085 fd=35 closed (connection lost) Oct 29 15:14:02 hh1 slapd[1798]: conn=1086 op=0 EXT oid=1.3.6.1.4.1.1466.20037 Oct 29 15:14:02 hh1 slapd[1798]: conn=1086 op=0 STARTTLS Oct 29 15:14:02 hh1 slapd[1798]: conn=1086 op=0 RESULT oid= err=0 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1086 fd=34 ACCEPT from IP=192.168.1.3:47405 (IP=0.0.0.0:389) Oct 29 15:14:02 hh1 slapd[1798]: conn=1086 fd=34 TLS established tls_ssf=256 ssf=256 Oct 29 15:14:02 hh1 slapd[1798]: conn=1086 op=1 BIND dn="" method=128 Oct 29 15:14:02 hh1 slapd[1798]: conn=1086 op=1 RESULT tag=97 err=0 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1086 op=2 SRCH base="dc=com" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uidNumber=1002))" Oct 29 15:14:02 hh1 slapd[1798]: conn=1086 op=2 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass Oct 29 15:14:02 hh1 slapd[1798]: conn=1086 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Oct 29 15:14:02 hh1 slapd[1798]: conn=1086 fd=34 closed (connection lost) -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 1

[opensuse] Java update?
by Carlos E. R. 29 Oct '11

29 Oct '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I just saw an update to java 1.6.0_29 in YOU - and I understood this was forbidden by the cancelled distribution license. What happened? :-? :-O - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) iEYEARECAAYFAk6qps8ACgkQtTMYHG2NR9XOvgCcD8XHtDYgk4CPke4bb6kTPGbt kx0AnilOb9ofS3XnSu5kKsHZ6uiOZIHt =jC5g -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 3

[opensuse] apt-cacher-ng, rpm and opensuse - caching of downloaded rpm's
by Scott Newton 29 Oct '11

29 Oct '11

I wanted someway of caching both debs and rpms but couldn't really find anything that was easy to use and setup. The user manual for apt-cacher-ng had a limited amount of info on using it with openSUSE but I initially couldn't get it to work. After some configuration tweaking I got it working and thought other people might be interested in using this as a solution. I'm also hoping other people with come forward with the solutions they have found that have worked for them (or improvements to what I've done). In my particular case apt-cacher-ng is running on a Debian server but that shouldn't make any difference. The changes I've made to the apt-cacher-ng configuration file acng.conf are as follows: VfilePattern = (^|.*?/)(Index|Packages\.bz2|Packages\.gz|Packages|Release| Release\.gpg|Sources\.bz2|Sources\.gz|Sources|release|index\.db-.*\.gz| Contents-[^/]*\.gz|pkglist[^/]*\.bz2|rclist[^/]*\.bz2|/meta-release[^/]*| Translation[^/]*\.bz2)|repomd.xml|xml.gz|content|media$ PfilePattern = .*(\.deb|\.rpm|\.dsc|\.tar\.gz\.gpg|\.tar\.gz|\.diff\.gz| \.diff\.bz2|\.jigdo|\.template|changelog|copyright|\.udeb|\.diff/.*\.gz| vmlinuz|initrd\.gz|(Devel)?ReleaseAnnouncement(\\?.*)?)$ The openSUSE changes I've made are to the repo files in /etc/zypp/repos.d. I've added the line: proxy=<ip of apt-cacher-server>:<port-of-apt-cacher-server-3142-by-default> at the bottom of each of the repo definition files. That was all that was needed. The only real issue I have is apt-cacher-ng doesn't seem all that fast to updating is a fair bit slower than normal. -- Regards Scott Newton -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] "noarch" listed in updater applet
by Jon Cosby 28 Oct '11

28 Oct '11

I just upgraded to openSUSE 11.4 x86_64, haven't taken the time to add any repositories as yet. All updates in the Gnome updater applet are listed as "noarch." This was happening in 11.3, and was part of the reason I got around to upgrading. I couldn't figure out where these were coming from. rpm and zypper indicate I have the 64-bit apps installed. I can't find this in the bug tracker, is anyone else having the same problem? Can it be ignored, just using Yast or zypper to update? Jon -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 4

Re: [opensuse] Remote files using SSHFS without mounting
by Brian K. White 28 Oct '11

28 Oct '11

On 10/27/2011 6:04 PM, Hans Witvliet wrote: > On Thu, 2011-10-27 at 13:21 -0400, Brian K. White wrote: > >> >> Except, http://foo.foo.com/blah is a perfectly valid local filesystem >> path. You can have a directory named "http:", you can have two "/" next >> to each other and it means the same as just one, for a reason (think >> building paths out of variables and one variable may be empty sometimes >> and sometimes not), even the ?'s and @'s and %'s in a query string are >> all valid filesystem characters. >> > > That is really sick ;[)) > Actually, i think you ought to make a "http://" directory, not "http:" > as you run into problems with making "//" dirs. > > Anyway, contraptions like these are fun to humor novice sysadmins (and > break sloppy scripts), just like dirs/files beginnibg with a space.... > > hw > Yep. Basically it's just not the low level building block tools place to tell the user and the high level tools what use to make of a low level facility like the filesystem. The filesystems job is just to make as many things possible, as possible. What the user does with filenames is not the kernel or libc developers business. There are a very few unavoidable technical limits, and even those are really not limits just, things that would be silly and inconvenient to do very much, like embedding an escape code or a form feed in a file name. It's not convenient to type, and breaks a lot of common expectations and will break all but the most well coded programs, but there are also any number of unpredictable reasons why you might actually want to do it. There is nothing wrong, at that level, with naming a file or a directory with characters that just happen to be similar to what url's look like, any more than there is anything wrong with making file/directory names that happen to look like any other kinds of strings that are found in other contexts. In fact practically every file or directory name looks like something else that is not a file or directory. Your home directory is your name, the directory it lives in is the english word home, etc.. most names have some sort of meaning. A path that looks like a url is exactly like that, and support for that is specifically provided on purpose not by accident. What I'm trying, poorly, to get across is it's wrong to think in terms of what is commonly done, today, in ones own limited experience. Things like the shell and the filesystem and the libc and kernel functions that use them, these are all low level building blocks that everything else is built on and made out of. Low level pieces like that have no idea what high level uses will be made of them, and if they are to be useful, they need to have as few built in assumptions and limitations as possible. So that's why if an app wants to specially recognize urls and treat them differently, and give up the ability to handle a real local file that had the same characters, the app is free to do that because it's only the app that will be hurt by the short sightedness. The kernel, libc, other core libs, shell, and other core utils, all have to be a lot better than that and make no such assumptions. I think I just said the same thing 3 times with hardly enough variation to be helpful, sorry. -- bkw -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] Interesting KDE 4.7 X server problems
by Lew Wolfgang 28 Oct '11

28 Oct '11

Hi Folks, A few days ago I did a zypper dup against the KDE:/Release:/47/openSUSE_11.4/ repository and boy howdy, the pasta really it the fan! I initially had an ATI adapter and after the upgrade kdm would crash, as would xstart after Xorg was made suid root. After flailing around and making negative progress I decided to retire the whole desktop and made a new installation on a second system with an NVIDIA adapter. After the same update to 4.7 kdm was crashing again, as was X started manually. The Xorg.0.log log didn't have any "EE" errors, X just blinked out of existence. After more flailing about I discovered that X failed ONLY for users who listed tcsh as their default login shell! Bash users worked fine after issuing "startx". Kdm is still borked. So X has an issue when being started from the tcsh shell. Think this is worth filing a bug report? Anyone else seen it? Regards, Lew -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 2

[opensuse] Problems installing Phyton on OpenSuSE 11.4
by Claudio Prono 28 Oct '11

28 Oct '11

Hello all, I have this problem, when i try to install Phyton on a production OpenSuSE 11.4: zypper in python Loading repository data... Reading installed packages... Resolving package dependencies... Problem: python-2.7-9.10.2.x86_64 requires python(abi) = 2.7, but this requirement cannot be provided uninstallable providers: python-base-2.7-8.10.2.i586[Updates-for-openSUSE-11.4-11.4-0] python-base-2.7-8.10.2.x86_64[Updates-for-openSUSE-11.4-11.4-0] python-base-2.7-8.4.x86_64[openSUSE-11.4-11.4-0] python-base-2.7-8.4.i586[repo-oss] python-base-2.7-8.4.x86_64[repo-oss] Solution 1: deinstallation of patterns-openSUSE-minimal_base-11.4-6.9.1.x86_64 Solution 2: do not install python-2.7-9.10.2.x86_64 Solution 3: do not install python-2.7-9.10.2.x86_64 Solution 4: break python by ignoring some of its dependencies Choose from above solutions by number or cancel [1/2/3/4/c] (c): c Already tryied to break python ignoring dependencies, but no good result. Any hint or someone have this problem? Cordially, Claudio Prono. -- -------------------------------------------------------------------------------- Claudio Prono OPST System Developer Gsm: +39-349-54.33.258 @PSS Srl Tel: +39-011-32.72.100 Via Santorelli, 15 Fax: +39-011-32.46.497 10095 Grugliasco (TO) ITALY http://atpss.net/disclaimer -------------------------------------------------------------------------------- PGP Key - http://keys.atpss.net/c_prono.asc -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

Re: [opensuse] My Kmail2 does not get email
by constant＠indo.net.id 28 Oct '11

28 Oct '11

>> On Thursday 27 Oct 2011 20:13:40 Constant Brouerius van >> Nidek wrote:enthusiastic >>> This morning as i left my computer for work, kmail2 was >>> busy synchronizing email folder inbox. Yesterday I suddenly received messages from my POP3 accounts. No idea why this suddenly worked. The big but is that I can only read the subject and the text of only one of the mails.After reading that mail going to a next mail brings up the "Retrieving Folder Contents, please wait"Not really useful. Looked at the contents of all folders but there is no one with 1/0 byte content.Up to now no method how to start kmail again. > ___________________________________________________________ > indomail - Your everyday mail - http://indomail.indo.net.id ___________________________________________________________ indomail - Your everyday mail - http://indomail.indo.net.id -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] ldap samba3.schema
by lynn 27 Oct '11

27 Oct '11

Hi I have opensuse 11.4 and have ldap and samba installed but I can't find the samba3.schema file anywhere. It's not been installed with openldap nor samba. Any ideas where it is? Thanks. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 2