March 2003 - openSUSE Security - openSUSE Mailing Lists

unsuscribe please
by Pierre Cote 16 Mar '03

16 Mar '03

-----BEGIN PGP SIGNED MESSAGE----- trafalgar(a)videotron.ca -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 iQEVAwUBPnSlhvC3B73kIGolAQEZaAf/RbGFYa4Uo+amjNyVIhnm+qheKX3mwbJ6 /sDU2cni2A8WK2Ho7Y9EmlSJI1W0SrINXMNFOCeEkJFYaY+jD8n3CSSvDElOVLYU xmIHXBCy11Eb0YAlEiV5Ph0PY2xXPM983d7kBD8mgieGch1GmFU/hP368A5fS/fF 3nRE8ulX0N8unYFQCwYfMoqjjJmhKFuiOaeWxIt901r8IzbS53dDhvzARJan6j4S h6PauEz12+x+y157mts8jtrFNGjuY+jwYkQYIYyxEF0zZmM1gFmm/9Iy6TY1osSj Bs3uiE4ZWdZdrIRNDULG0+ui1ZJ8XVFMOTzIPk282fmigiZJ+gG+fA== =r2wH -----END PGP SIGNATURE-----

1 0

Permissions in /etc/ssl/certs
by Pierre Bernhardt 14 Mar '03

14 Mar '03

Moin, is it correct, that others can read all pem-files in /etc/ssl/certs incl. the Private Key Sections? Is that a security hole becaus an local user can read the sections? All Files have 644 at standard in this folder. Any problems if i will make an chmod 640 /etc/ssl/certs/* ? MfG... Pierre Bernhardt

1 0

AW: [suse-security] SuSEfirewall2 and Samba
by Ulrich Roth 14 Mar '03

14 Mar '03

Hi Dirk, > one question concerning samba and firewall. The firewall is on an > computer with three networks cards. One to the internet, two for the > intranet. I want to connect the two intranets that windows > machines can > share files. Which parameters do I have to set? I tried several > configurations, but all of them failed :-( What do you mean by "failed"? Think of the fact that machines in one subnet can't see the machines on the other subnet by means of Windows' network browsing. If you want that, you need a WINS server in each subnet, and the WINS servers have to replicate each other. Did you already try Start - Run - \\machine or Start - Run - \\IP-address? Bye Uli -- Ulrich Roth IMPACT Business & Technology Consulting GmbH Im Mediapark 8 / KölnTurm D-50670 Koeln Phone +49-221-93 70 80-29 Fax +49-221-93 70 80-15 E-Mail: roth(a)impact.de

1 0

SuSEfirewall2 and Samba
by Dirk Borchers 14 Mar '03

14 Mar '03

Hi to all, one question concerning samba and firewall. The firewall is on an computer with three networks cards. One to the internet, two for the intranet. I want to connect the two intranets that windows machines can share files. Which parameters do I have to set? I tried several configurations, but all of them failed :-( Dirk

2 1

squid timout webserver
by Edvinas Eidukaitis 14 Mar '03

14 Mar '03

Hi, I'm newbie, but if don't mind i want to ask. I have suse 8, and squid 2.4 Stable. Proxy works pretty good, but i can't open servers with my webmails (e.g. www.one.lt) I see notices like this: ERROR While trying to retrieve the URL: http://www.one.lt/index.html jsessionid=caagRB_2bBHgio? (110) Connection timed out Proxy configuration: http_port 8080 icp_port 3130 cache_peer proxy.mit.lt parent 8080 3130 no-query default acl QUERY urlpath_regex bad_url no_cache allow QUERY if anyone knows about this problem, please help me. Thanks Edvinas P.S. I would like to sorry about my bad English. I hope that it gets better.

1 0

SuSE Security Announcement: tcpdump (SuSE-SA:2003:0015)
by Thomas Biege 14 Mar '03

14 Mar '03

-----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ SuSE Security Announcement Package: tcpdump Announcement-ID: SuSE-SA:2003:0015 Date: Thursday, Mar 13th 2003 16:10 MET Affected products: 7.3, 8.0, 8.1 SuSE Linux Database Server SuSE eMail Server 3.1 SuSE eMail Server III SuSE Firewall Adminhost VPN SuSE Linux Admin-CD for Firewall SuSE Firewall on CD 2 - VPN SuSE Firewall on CD 2 SuSE Linux Live-CD for Firewall SuSE Linux Connectivity Server SuSE Linux Enterprise Server 7 for S/390 and zSeries SuSE Linux Enterprise Server 8 SuSE Linux Office Server Vulnerability Type: remote system compromise Severity (1-10): 4 SuSE default package: yes Cross References: CAN-2003-0108 Content of this advisory: 1) security vulnerability resolved: - denial-of-service condition while parsing ISAKMP or BGP packets - possible remote code execution while handling NFS packets problem description, discussion, solution and upgrade information 2) pending vulnerabilities, solutions, workarounds: - ethereal - qpopper - XFree4 - sendmail - apcupsd - snort - file - zlib - vnc 3) standard appendix (further information) ______________________________________________________________________________ 1) problem description, brief discussion, solution, upgrade information The network traffic analyzer tool tcpdump is vulnerable to a denial-of- service condition while parsing ISAKMP or BGP packets. This bug can be exploited remotely by an attacker to stop the use of tcpdump for analyzing network traffic for signs of security breaches or alike. Another bug may lead to system compromise due to the handling of malformed NFS packets send by an attacker. Please note, that tcpdump drops root privileges right after allocating the needed raw sockets. There is no temporary fix known. Please download the update package for your distribution and verify its integrity by the methods listed in section 3) of this announcement. Then, install the package using the command "rpm -Fhv file.rpm" to apply the update. Our maintenance customers are being notified individually. The packages are being offered to install from the maintenance web. Intel i386 Platform: SuSE-8.1: ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/tcpdump-3.7.1-198.i586… 524015d3f9517311ee46eb63bc3ed42f patch rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/tcpdump-3.7.1-198.i586… 2e1d2db971cf2693e5acca0da7e3bb39 source rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/src/tcpdump-3.7.1-198.src.r… 12da6755830e7614e8f81a204c546cbf SuSE-8.0: ftp://ftp.suse.com/pub/suse/i386/update/8.0/n1/tcpdump-3.6.2-322.i386.rpm 069db7de9a137b050f38c6f6a3398266 patch rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/8.0/n1/tcpdump-3.6.2-322.i386.patch… 3dcb00b25d35d275e2e70eba2c96fa26 source rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/8.0/zq1/tcpdump-3.6.2-322.src.rpm 0ed4e0db7d71f5a518173193f8a9b057 SuSE-7.3: ftp://ftp.suse.com/pub/suse/i386/update/7.3/n1/tcpdump-3.6.2-321.i386.rpm 22b2a243e3a2fbbb0288d76da5a2bccc source rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/7.3/zq1/tcpdump-3.6.2-321.src.rpm d50729c39c29566371c7d708be782d43 SuSE-7.2: ftp://ftp.suse.com/pub/suse/i386/update/7.2/n1/tcpdump-3.4a6-376.i386.rpm 601bc08d351e8100767bbfd502efd44b source rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/7.2/zq1/tcpdump-3.4a6-376.src.rpm af87a4ad56fc853800c6af5982899f18 SuSE-7.1: ftp://ftp.suse.com/pub/suse/i386/update/7.1/n1/tcpdump-3.4a6-375.i386.rpm a3251d65bfa05948ce3796ac9e5fdf5b source rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/7.1/zq1/tcpdump-3.4a6-375.src.rpm 84ba69db15e1ff569cf674f7d61428f1 Sparc Platform: SuSE-7.3: ftp://ftp.suse.com/pub/suse/sparc/update/7.3/n1/tcpdump-3.6.2-65.sparc.rpm 7f75bdd0c9456fe437647030bb52d92d source rpm(s): ftp://ftp.suse.com/pub/suse/sparc/update/7.3/zq1/tcpdump-3.6.2-65.src.rpm 4b3049a5048e5904a69d16b028220f42 AXP Alpha Platform: SuSE-7.1: ftp://ftp.suse.com/pub/suse/axp/update/7.1/n1/tcpdump-3.4a6-329.alpha.rpm 614dfa16b71456692bc1d92b9db0998b source rpm(s): ftp://ftp.suse.com/pub/suse/axp/update/7.1/zq1/tcpdump-3.4a6-329.src.rpm e5a05bdbe3d5a29f0840c488e703268b PPC Power PC Platform: SuSE-7.3: ftp://ftp.suse.com/pub/suse/ppc/update/7.3/n1/tcpdump-3.6.2-207.ppc.rpm fef9a77ba86c06d661c34646a8101b8a source rpm(s): ftp://ftp.suse.com/pub/suse/ppc/update/7.3/zq1/tcpdump-3.6.2-207.src.rpm 9c800d4fc891a30a4a880b55979ffe3a SuSE-7.1: ftp://ftp.suse.com/pub/suse/ppc/update/7.1/n1/tcpdump-3.4a6-317.ppc.rpm 4dd468ba517be7c7f52a8b2ac7c2beb0 source rpm(s): ftp://ftp.suse.com/pub/suse/ppc/update/7.1/zq1/tcpdump-3.4a6-317.src.rpm 69be109e360246794c66ed55e199ee95 ______________________________________________________________________________ 2) Pending vulnerabilities in SuSE Distributions and Workarounds: - ethereal A format string bug in ethereal's SOCKS handling code and a buffer overflow in the NTLMSSP was found in ethereal. Both bugs may lead to remote system compromise. New packages are currently being build and will be available soon. - qpopper In version 4.0.x of qpopper a buffer overflow *after* user authen- tication can be exploited to gain a shell on a POP-server machine. New packages are currently being build and will be available soon. - XFree4 A buffer overflow in the Xlib code can be triggered while handling the environment variable XLOCALEDIR. The X version affected is 4.2.0 (SuSE Linux 8.0 and 8.1). We still investigate this issue. - sendmail A correction is necessary to the last SuSE Security Announcement (SuSE-SA:2003:013) about sendmail: The Vulnerability Type must read remote buffer overflow. - apcupsd The control and management daemon for APC UPS systems is vulnerable to remote code execution due to buffer overflow and format string bugs. A dedicated advisory for this issue will be released as soon as all packages are build. - snort snort, a sensor-based Network Intrusion Detection System, was vulnerable to a buffer overflow in it's RPC preprocessor. As a workaround the following line in snort.conf should be commented out and snort should be restarted to disable the RPC-preprocessor: preprocessor rpc_decode: 111 32771 Future version of SuSE Linux will be shipped with a fixed snort package. - file A locally exploitable buffer overflow was found in the file command. New packages are currently being build and will be available soon. - zlib zlib's function gzprintf() is prone to a buffer overflow if its arguments expand to more then Z_PRINTF_BUFSIZE bytes. A fixed version of zlib will be shipped with future SuSE Linux versions. - vnc VNC (Virtual Network Computing) uses a weak cookie generation process which can be exploited by an attacker to bypass authentication. New packages are currently being tested and will be available on our FTP servers soon. ______________________________________________________________________________ 3) standard appendix: authenticity verification, additional information - Package authenticity verification: SuSE update packages are available on many mirror ftp servers all over the world. While this service is being considered valuable and important to the free and open source software community, many users wish to be sure about the origin of the package and its content before installing the package. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or rpm package: 1) md5sums as provided in the (cryptographically signed) announcement. 2) using the internal gpg signatures of the rpm package. 1) execute the command md5sum <name-of-the-file.rpm> after you downloaded the file from a SuSE ftp server or its mirrors. Then, compare the resulting md5sum with the one that is listed in the announcement. Since the announcement containing the checksums is cryptographically signed (usually using the key security(a)suse.de) the checksums show proof of the authenticity of the package. We disrecommend to subscribe to security lists which cause the email message containing the announcement to be modified so that the signature does not match after transport through the mailing list software. Downsides: You must be able to verify the authenticity of the announcement in the first place. If RPM packages are being rebuilt and a new version of a package is published on the ftp server, all md5 sums for the files are useless. 2) rpm package signatures provide an easy way to verify the authenticity of an rpm package. Use the command rpm -v --checksig <file.rpm> to verify the signature of the package, where <file.rpm> is the filename of the rpm package that you have downloaded. Of course, package authenticity verification can only target an un-installed rpm package file. Prerequisites: a) gpg is installed b) The package is signed using a certain key. The public part of this key must be installed by the gpg program in the directory ~/.gnupg/ under the user's home directory who performs the signature verification (usually root). You can import the key that is used by SuSE in rpm packages for SuSE Linux by saving this announcement to a file ("announcement.txt") and running the command (do "su -" to be root): gpg --batch; gpg < announcement.txt | gpg --import SuSE Linux distributions version 7.1 and thereafter install the key "build(a)suse.de" upon installation or upgrade, provided that the package gpg is installed. The file containing the public key is placed at the top-level directory of the first CD (pubring.gpg) and at ftp://ftp.suse.com/pub/suse/pubring.gpg-build.suse.de . - SuSE runs two security mailing lists to which any interested party may subscribe: suse-security(a)suse.com - general/linux/SuSE security discussion. All SuSE security announcements are sent to this list. To subscribe, send an email to <suse-security-subscribe(a)suse.com>. suse-security-announce(a)suse.com - SuSE's announce-only mailing list. Only SuSE's security announcements are sent to this list. To subscribe, send an email to <suse-security-announce-subscribe(a)suse.com>. For general information or the frequently asked questions (faq) send mail to: <suse-security-info(a)suse.com> or <suse-security-faq(a)suse.com> respectively. ===================================================================== SuSE's security contact is <security(a)suse.com> or <security(a)suse.de>. The <security(a)suse.de> public key is listed below. ===================================================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, it is desired that the clear-text signature shows proof of the authenticity of the text. SuSE Linux AG makes no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team <security(a)suse.de> pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org mQGiBDnu9IERBACT8Y35+2vv4MGVKiLEMOl9GdST6MCkYS3yEKeueNWc+z/0Kvff 4JctBsgs47tjmiI9sl0eHjm3gTR8rItXMN6sJEUHWzDP+Y0PFPboMvKx0FXl/A0d M+HFrruCgBlWt6FA+okRySQiliuI5phwqkXefl9AhkwR8xocQSVCFxcwvwCglVcO QliHu8jwRQHxlRE0tkwQQI0D+wfQwKdvhDplxHJ5nf7U8c/yE/vdvpN6lF0tmFrK XBUX+K7u4ifrZlQvj/81M4INjtXreqDiJtr99Rs6xa0ScZqITuZC4CWxJa9GynBE D3+D2t1V/f8l0smsuYoFOF7Ib49IkTdbtwAThlZp8bEhELBeGaPdNCcmfZ66rKUd G5sRA/9ovnc1krSQF2+sqB9/o7w5/q2qiyzwOSTnkjtBUVKn4zLUOf6aeBAoV6NM CC3Kj9aZHfA+ND0ehPaVGJgjaVNFhPi4x0e7BULdvgOoAqajLfvkURHAeSsxXIoE myW/xC1sBbDkDUIBSx5oej73XCZgnj/inphRqGpsb+1nKFvF+rQoU3VTRSBQYWNr YWdlIFNpZ25pbmcgS2V5IDxidWlsZEBzdXNlLmRlPohcBBMRAgAcBQI57vSBBQkD wmcABAsKAwQDFQMCAxYCAQIXgAAKCRCoTtronIAKyl8sAJ98BgD40zw0GHJHIf6d NfnwI2PAsgCgjH1+PnYEl7TFjtZsqhezX7vZvYCIRgQQEQIABgUCOnBeUgAKCRCe QOMQAAqrpNzOAKCL512FZvv4VZx94TpbA9lxyoAejACeOO1HIbActAevk5MUBhNe LZa/qM2JARUDBRA6cGBvd7LmAD0l09kBATWnB/9An5vfiUUE1VQnt+T/EYklES3t XXaJJp9pHMa4fzFa8jPVtv5UBHGee3XoUNDVwM2OgSEISZxbzdXGnqIlcT08TzBU D9i579uifklLsnr35SJDZ6ram51/CWOnnaVhUzneOA9gTPSr+/fT3WeVnwJiQCQ3 0kNLWVXWATMnsnT486eAOlT6UNBPYQLpUprF5Yryk23pQUPAgJENDEqeU6iIO9Ot 1ZPtB0lniw+/xCi13D360o1tZDYOp0hHHJN3D3EN8C1yPqZd5CvvznYvB6bWBIpW cRgdn2DUVMmpU661jwqGlRz1F84JG/xe4jGuzgpJt9IXSzyohEJB6XG5+D0BiF0E ExECAB0FAjxqqTQFCQoAgrMFCwcKAwQDFQMCAxYCAQIXgAAKCRCoTtronIAKyp1f AJ9dR7saz2KPNwD3U+fy/0BDKXrYGACfbJ8fQcJqCBQxeHvt9yMPDVq0B0W5Ag0E Oe70khAIAISR0E3ozF/la+oNaRwxHLrCet30NgnxRROYhPaJB/Tu1FQokn2/Qld/ HZnh3TwhBIw1FqrhWBJ7491iAjLR9uPbdWJrn+A7t8kSkPaF3Z/6kyc5a8fas44h t5h+6HMBzoFCMAq2aBHQRFRNp9Mz1ZvoXXcI1lk1l8OqcUM/ovXbDfPcXsUVeTPT tGzcAi2jVl9hl3iwJKkyv/RLmcusdsi8YunbvWGFAF5GaagYQo7YlF6UaBQnYJTM 523AMgpPQtsKm9o/w9WdgXkgWhgkhZEeqUS3m5xNey1nLu9iMvq9M/iXnGz4sg6Q 2Y+GqZ+yAvNWjRRou3zSE7Bzg28MI4sAAwYH/2D71Xc5HPDgu87WnBFgmp8MpSr8 QnSs0wwPg3xEullGEocolSb2c0ctuSyeVnCttJMzkukL9TqyF4s/6XRstWirSWaw JxRLKH6Zjo/FaKsshYKf8gBkAaddvpl3pO0gmUYbqmpQ3xDEYlhCeieXS5MkockQ 1sj2xYdB1xO0ExzfiCiscUKjUFy+mdzUsUutafuZ+gbHog1CN/ccZCkxcBa5IFCH ORrNjq9pYWlrxsEn6ApsG7JJbM2besW1PkdEoxak74z1senh36m5jQvVjA3U4xq1 wwylxadmmJaJHzeiLfb7G1ZRjZTsB7fyYxqDzMVul6o9BSwO/1XsIAnV1uuITAQY EQIADAUCOe70kgUJA8JnAAAKCRCoTtronIAKyksiAJsFB3/77SkH3JlYOGrEe1Ol 0JdGwACeKTttgeVPFB+iGJdiwQlxasOfuXyITAQYEQIADAUCPGqpWQUJCgCCxwAK CRCoTtronIAKyofBAKCSZM2UFyta/fe9WgITK9I5hbxxtQCfX+0ar2CZmSknn3co SPihn1+OBNyZAQ0DNuEtBAAAAQgAoCRcd7SVZEFcumffyEwfLTcXQjhKzOahzxpo omuF+HIyU4AGq+SU8sTZ/1SsjhdzzrSAfv1lETACA+3SmLr5KV40Us1w0UC64cwt A46xowVq1vMlH2Lib+V/qr3b1hE67nMHjysECVx9Ob4gFuKNoR2eqnAaJvjnAT8J /LoUC20EdCHUqn6v+M9t/WZgC+WNR8cq69uDy3YQhDP/nIan6fm2uf2kSV9A7ZxE GrwsWl/WX5Q/sQqMWaU6r4az98X3z90/cN+eJJ3vwtA+rm+nxEvyev+jaLuOQBDf ebh/XA4FZ35xmi+spdiVeJH4F/ubaGlmj7+wDOF3suYAPSXT2QAFEbQlU3VTRSBT ZWN1cml0eSBUZWFtIDxzZWN1cml0eUBzdXNlLmRlPokBFQMFEDbhLUfkWLKHsco8 RQEBVw4H/1vIdiOLX/7hdzYaG9crQVIk3QwaB5eBbjvLEMvuCZHiY2COUg5QdmPQ 8SlWNZ6k4nu1BLcv2g/pymPUWP9fG4tuSnlUJDrWGm3nhyhAC9iudP2u1YQY37Gb B6NPVaZiYMnEb4QYFcqv5c/r2ghSXUTYk7etd6SW6WCOpEqizhx1cqDKNZnsI/1X 11pFcO2N7rc6byDBJ1T+cK+F1Ehan9XBt/shryJmv04nli5CXQMEbiqYYMOu8iaA 8AWRgXPCWqhyGhcVD3LRhUJXjUOdH4ZiHCXaoF3zVPxpeGKEQY8iBrDeDyB3wHmj qY9WCX6cmogGQRgYG6yJqDalLqrDOdmJARUDBRA24S0Ed7LmAD0l09kBAW04B/4p WH3f1vQn3i6/+SmDjGzUu2GWGq6Fsdwo2hVM2ym6CILeow/K9JfhdwGvY8LRxWRL hn09j2IJ9P7H1Yz3qDf10AX6V7YILHtchKT1dcngCkTLmDgC4rs1iAAl3f089sRG BafGPGKv2DQjHfR1LfRtbf0P7c09Tkej1MP8HtQMW9hPkBYeXcwbCjdrVGFOzqx+ AvvJDdT6a+oyRMTFlvmZ83UV5pgoyimgjhWnM1V4bFBYjPrtWMkdXJSUXbR6Q7Pi RZWCzGRzwbaxqpl3rK/YTCphOLwEMB27B4/fcqtBzgoMOiaZA0M5fFoo54KgRIh0 zinsSx2OrWgvSiLEXXYKiEYEEBECAAYFAjseYcMACgkQnkDjEAAKq6ROVACgjhDM /3KM+iFjs5QXsnd4oFPOnbkAnjYGa1J3em+bmV2aiCdYXdOuGn4ZiQCVAwUQN7c7 whaQN/7O/JIVAQEB+QP/cYblSAmPXxSFiaHWB+MiUNw8B6ozBLK0QcMQ2YcL6+Vl D+nSZP20+Ja2nfiKjnibCv5ss83yXoHkYk2Rsa8foz6Y7tHwuPiccvqnIC/c9Cvz dbIsdxpfsi0qWPfvX/jLMpXqqnPjdIZErgxpwujas1n9016PuXA8K3MJwVjCqSKI RgQQEQIABgUCOhpCpAAKCRDHUqoysN/3gCt7AJ9adNQMbmA1iSYcbhtgvx9ByLPI DgCfZ5Wj+f7cnYpFZI6GkAyyczG09sE= =LRKC - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBPnCkm3ey5gA9JdPZAQF9ogf8Cw2EVx//bqMv/15Y3/emzDDEMuSoUQVV 3R703w1aMvdFY9rF8MQa3RHmn0kCuLSymhC8zscZI/olOlEPX14yw8N4jyGQHnDE VQmNeNBqt0zP6SmhB+52qb95Uw7fGWwSCh27mB/PnjLmPw47WgP4W1XWm+s0gUEp U8MyRFX9O0BSg6qEymEtYKXe8NGGBmorirGg7FWg9AfNe2jnStC5hQZUWuNIs9HR DXBZuwvhRDPdoUxIhHwsh6TL1wixCyLhuuUVcqTO69csF/D+OCE3cnAtS4RdW1BE QwVnUibEUpXFS6B7PpgPqztdTvSIJOC3ElO/bMpDcWMXT0CnzLmExw== =ch3g -----END PGP SIGNATURE----- Bye, Thomas -- Thomas Biege <thomas(a)suse.de> SuSE Linux AG,Deutschherrnstr. 15-19,90429 Nuernberg Function: Security Support & Auditing "lynx -source http://www.suse.de/~thomas/contact/thomas.asc | gpg --import" Key fingerprint = 7254 B15D B3C4 943F 485E 0BBD 8ECC D7CB C200 A213

5 5

SASL/GSSAPI and Windows 2000 KDC
by michse 14 Mar '03

14 Mar '03

Hi, did anybody get SASL/GSSAPI-auth. working between an Windows 2000 Server and a SuSE 8.1 client. I'm able to get a ticket from the Windows KDC but SASL/GSSAPI fails like this: # ldapsearch -b "dc=domain,dc=tld" -U user -Y GSSAPI -LLL "uid=userid" SASL/GSSAPI authentication startet ldap_sasl_interactive_bind_s: Local error (82) # Mirko .: .: there`s no rock like snowrock :: http://www.plasticivy.de <http://www.plasticivy.de/> :. .:

1 0

harden_suse and dante socks
by Andreas Micklich 14 Mar '03

14 Mar '03

Hi, I have the following problem: On my firewall server (Linux 7.3, SuSEfirewall2), which was harded with harden_suse I want install the dante socks server. But the configure procedure brings the exit code 1 ("Cannot link ..."). Have I to do harden_suse_undo to install the new proxy on the server? Many thanks in advance. Andreas Micklich Federal Research Centre for Virus Diseases of Animals Institute of Epidemiology Seestrasse 55 D-16869 Wusterhausen Tel: + 49 33979/80-180 Fax: + 49 33979/80-200 E-Mail: Andreas.Micklich(a)wus.bfav.de WWW: http://www.bfav.de

1 0

passwd & shadow
by Carlos Toribio 14 Mar '03

14 Mar '03

Hi list I am migrating (updgrading my server) from RH6.1 to SuSE7.3 with Postfix/IMAP, my main problem are usernames and passwords, I put my /etc/passwd and /etc/shadow to my SuSE, aan I can do shell login ok but I am having problem for my imap/pop3 users I am getting "password incorrect" for them, I am thinking that my problem is PAM or encryption method (MD5 or CRYPT) I would like to know more about SuSE with it, what is used by default?, any advice. Thanks in advance Carlos T. _________________________________________________________ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com

2 2

UN-Suscribe !
by Peter H. Pfeiffer 13 Mar '03

13 Mar '03

1 0