November 2002 - openSUSE Security - openSUSE Mailing Lists

CA-2002-07.html
by Soeren Mindorf 22 Nov '02

22 Nov '02

Hi, I have read this announcment http://www.cert.org/advisories/CA-2002-07.html and I ask myself are SuSE affected? If not, which patchlevel I need? Regards Soeren

6 6

script-help
by Piet Roorda 21 Nov '02

21 Nov '02

I know it is not within the goal of this group but, who is willing to help me with a small script. regards, piet

1 0

Re: [suse-security] SuseFirewall2 DMZ
by Frédéric Poulet 21 Nov '02

21 Nov '02

Thanks --- Jörn_Ott <suse-security(a)ott-service.de> a écrit : > Hi Frédéric, > > > I read that FW_FORWARD_MASQ don't be used for security reason. > > How i can create a DMZ without using FW_FORWARD_MASQ but visible from > > internet ? > > Usually you should have a block of real IP adresses for your DMZ. Then your > firewall should be configured as router to pass any request to one of those > adresses on to the machines in the DMZ. > > If you don't have that option, you must fwd/masq to reach the DMZ or use > programs like rinetd to forward connections to the firewall automagically > to a machine in the DMZ (or internal network). Both are possible security > risks. > > cya > Jörn > > ___________________________________________________________ Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français ! Yahoo! Mail : http://fr.mail.yahoo.com

1 0

AW: [suse-security] Problems creating usernames with dots
by Peer Stefan 21 Nov '02

21 Nov '02

Hi Mario, > From: Mario Viana [mailto:marioj@secrel.com.br] > Hello, > > Well, maybe it´s a little off-topic , but does anybody know > why SuSE 8.0 > don´t accept creating a username with dots, e.g. , while I > try creating the > user suse.br : > > # useradd suse.br > useradd: invalid user name 'suse.br' Because . is not a valid character for users. What about "chown user.group file" ? Does the . belong to the username or is it the username-group delimiter? > > I have seen all the configuration files in /etc/sysconfig, Suse DB and > Google and I haven´t found anything related to this topic. =(( Dotted usernames were a bug until SuSE 8.0. regards, Stefan

9 9

Re: [suse-security] SuseFirewall2 DMZ
by Frédéric Poulet 21 Nov '02

21 Nov '02

How modify my firewall configuration to have a ftp service wich runs correctly from intern network ? --- Christian Andersson <chrisand(a)cs.lth.se> a écrit : > > On Tuesday 19 November 2002 20:20, Frédéric Poulet wrote: > > What i don't understand that is why i see my ftp server from internet and > > it's run correctly but from intern network i have errors ! > > It's because of your firewall configuration. > > -- > Ch > ___________________________________________________________ Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français ! Yahoo! Mail : http://fr.mail.yahoo.com

2 4

AW: AW: [suse-security] Problems creating usernames with dots
by Ulrich Roth 21 Nov '02

21 Nov '02

> If you want/need to have system users with dots in > their names, then this doesn't work. E. g., you have a system > with two users Peter Meier and Peter Huber. Why not have > system user names peter.meier and peter.huber? Why does it always have to be a dot? Ten years ago in Fido we used underscores, if I remember well, so the user names would be Peter_Meier and Peter_Huber. Or what about dashes? Or even no character (PeterMeier and PeterHuber)? But such long user names aren't shown completely when doing an "ls -la". Bye Uli -- Ulrich Roth IMPACT Business & Technology Consulting GmbH Im Mediapark 8 / KölnTurm D-50670 Koeln Phone +49-221-93 70 80-29 Fax +49-221-93 70 80-15 E-Mail: roth(a)impact.de

4 4

Build Key expired
by Albert Brandl 21 Nov '02

21 Nov '02

Hi! The key build(a)suse.de ID 9C800ACA 1024 bit DSA key, expires 2002-10-19 has expired two days ago. Unfortunately, the security updates are still signed with this key, which prevents the verification of their validity. Furthermore, I haven't found a reference to the new key @www.suse.com. Please publish a new key and use it to sign all packages. Best regards, Albert Brandl

3 2

Problems with NIS SuSE 8.0
by Harald Steden 21 Nov '02

21 Nov '02

Hello list! I set up a network of 4 Clients with NIS + NFS connected to one server. So far everything works fine since ~ 3/4 year. But sometimes it happens that if you login, every password is accepted or none. Which means that you can login with any account and no password verification. The NIS Server is running with SuSE 8.0 and all patches installed. Clients are running SuSE 7.3 and 8.1, both versions show the same behaviour. Has anybody seen this behaviour and a solution for it. Thanks for hints and tips, Harald Steden

1 0

Re: [suse-security-announce] SuSE Security Announcement: samba (SuSE-SA:2002:045)
by Mathias Homann 21 Nov '02

21 Nov '02

Roman Drahtmueller sagte: [ announcement of fixes for samba deleted ] what about http://www.heise.de/newsticker/data/ps-20.11.02-001/ ?? why update with patched ooold versions when there's a official 2.2.7 for security fixes? bye, [MH]

2 1

Re: [suse-security] Problems creating usernames with dots
by Mario Viana 21 Nov '02

21 Nov '02

Hi people, 1) As you see below, quotes and others tricks didn´t work in 8.0 : XXX:~ # useradd suse\.br useradd: invalid user name 'suse.br' XXX:~ # useradd suse"."br useradd: invalid user name 'suse.br' XXX:~ # useradd "suse.br" useradd: invalid user name 'suse.br' 2) I´ve already tried to set an alias, like .qmail-suse.br . It didn´t work. 3) I know that is possible creating the users by myself in /etc/passwd , but this is not a good solution for me. I have thousands of users. I wondering what really have changed in 8.0 ? Only the useradd source code? -- ========================= José Mário Viana Network Admin SecrelNet ISP - Brazil ========================= ----- Original Message ----- From: "Bob Sutter" <bob.sutter(a)kobie.com> To: "Mario Viana" <marioj(a)secrel.com.br>; <suse-security(a)suse.com> Sent: Wednesday, November 20, 2002 12:57 PM Subject: RE: [suse-security] Problems creating usernames with dots I just put the name in quotes and it added it just fine. -----Original Message----- From: Mario Viana [mailto:marioj@secrel.com.br] Sent: Wednesday, November 20, 2002 8:44 AM To: suse-security(a)suse.com Subject: [suse-security] Problems creating usernames with dots Hello, Well, maybe it´s a little off-topic , but does anybody know why SuSE 8.0 don´t accept creating a username with dots, e.g. , while I try creating the user suse.br : # useradd suse.br useradd: invalid user name 'suse.br' I have seen all the configuration files in /etc/sysconfig, Suse DB and Google and I haven´t found anything related to this topic. =(( -- ========================= José Mário Viana Analista de Sistemas SecrelNet Infomática Ltda ========================= -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

2 1