July 2003 - openSUSE Security - openSUSE Mailing Lists

A small problem....
by Chris Bek 07 Jul '03

07 Jul '03

Well I don't know if this is the correct list to send this question to so please forgive me if it isn't.... I have Hylafax running on a Linux-Box (SuSE 7.2). Currently all the faxes received are stored on the hard drive as .tiff format. Can someone assist me and tell me how I can alter the configuration of Hylafax so that all faxes received in the /receivq be saved as .pdf ??? Thank you so very much in advance for your help!!! Chris

2 1

Fw: [carstengrohmann@gmx.de: Re: [suse-security] Linux Security Modules]
by Thomas Bleher 07 Jul '03

07 Jul '03

Forwarded on behalf of Carsten, because he is not on this list.

1 0

AW: [suse-security] [Apache - SuSE 8.2 Pro] 2 different WWW virtu al hosts, 2 different certs
by Junge, Stefan 07 Jul '03

07 Jul '03

> -----Ursprüngliche Nachricht----- > Von: Dominik Sk?adanowski [mailto:dominik.skladanowski@ch.pw.edu.pl] > Gesendet: Montag, 7. Juli 2003 12:24 > An: SuSE-Security > Betreff: [suse-security] [Apache - SuSE 8.2 Pro] 2 different > WWW virtual > hosts, 2 different certs > > > Hello > > I tried to startup 2 SSL virtual hosts (every virtual host > has it's own > cert) on the same machne with 1 IP. Apparently it looks fine... > > The problem is: > when I connect to https://virtual1.domain.com/ cert is for domain > virtual1.domain.com, but when I connect to > https://virtual2.domain.com/ > cert is for domain virtual1.domain.com too. > > Isn't it strange? Or maybe I made a mistake. >> Hi, each Virtual Host needs it´s own IP Adress. >> CU Stefan > > Here is fragment on my /etc/httpd/httpd.conf: > -------------------------------------------------------------- > --------- > NameVirtualHost xxx.xxx.xxx.xxx:443 > > <VirtualHost virtual1.domain.com:443> > > DocumentRoot "/srv/www/virtual1/htdocs" > ServerName virtual1.domain.com > ServerAdmin root(a)domain.com > ErrorLog /var/log/httpd/error_log > TransferLog /var/log/httpd/access_log > > SSLEngine on > > SSLCipherSuite > ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL > > SSLCertificateFile /etc/httpd/virtual1cert.pem > > SSLCertificateKeyFile /etc/httpd/virtual1req.pem > > SSLCACertificatePath /usr/share/ssl/misc/demoCA > SSLCACertificateFile /usr/share/ssl/misc/demoCA/cacert.pem > > <Files ~ "\.(cgi|shtml|phtml|php3?)$"> > SSLOptions +StdEnvVars > </Files> > <Directory "/srv/www/cgi-bin"> > SSLOptions +StdEnvVars > </Directory> > > SetEnvIf User-Agent ".*MSIE.*" \ > nokeepalive ssl-unclean-shutdown \ > downgrade-1.0 force-response-1.0 > > CustomLog /var/log/httpd/ssl_request_log \ > "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" > > </VirtualHost> > > <VirtualHost virtual2.domain.com:443> > > DocumentRoot "/srv/www/virtual2" > ServerName virtual2.domain.com > ServerAdmin root(a)domain.com > ErrorLog /var/log/httpd/error_log > TransferLog /var/log/httpd/access_log > > SSLEngine on > > SSLCipherSuite > ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL > > SSLCertificateFile /etc/httpd/virtual2cert.pem > SSLCertificateKeyFile /etc/httpd/virtual2req.pem > > SSLCACertificatePath /usr/share/ssl/misc/demoCA > SSLCACertificateFile /usr/share/ssl/misc/demoCA/cacert.pem > > <Files ~ "\.(cgi|shtml|phtml|php3?)$"> > SSLOptions +StdEnvVars > </Files> > <Directory "/srv/www/cgi-bin"> > SSLOptions +StdEnvVars > </Directory> > > SetEnvIf User-Agent ".*MSIE.*" \ > nokeepalive ssl-unclean-shutdown \ > downgrade-1.0 force-response-1.0 > > CustomLog /var/log/httpd/ssl_request_log \ > "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" > > </VirtualHost> > -------------------------------------------------------------- > --------- > > -- > ++++++++++++++++++++++++++++++++++++++++++ > > Dominik Skladanowski > > ++++++++++++++++++++++++++++++++++++++++++ > > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here >

1 0

Smart Card
by r.manduzio＠mail.confartigianato.it 07 Jul '03

07 Jul '03

I've installed SuSE 8.2 Professional. I've a smart card gemplus gpr400 installed. There is someone tha can tell me which software to use for manage the smart card? Thank You Riccardo

3 2

reestablishing ipsec connection
by Ralf Ronneburger 05 Jul '03

05 Jul '03

Hi everyone, I have an ipsec-gateway in a NAT-ed network (one network interface with a private IP) and a second ipsec-gateway with a public IP and a private IP (in another network). The ipsec-connection is started from the first box. Now between the 2 boxes there are 2 firewalls and a lot of other routers - what happens, if the connection is interrupted somewhere inbetween? How can I make sure, that the first box reconnects by itself in case somethings happens? Thanks a lot, Ralf ------------------------------------------------------------ Ralf Ronneburger ralf(a)ronneburger.de Prefers to receive encrypted Mail, download public-key from http://www.ronneburger.de/gpg/ralf_ronneburger.asc ------------------------------------------------------------ " The trouble with computers is that they do what you tell them, not what you want. " -- D. Cohen ------------------------------------------------------------

1 0

Firewall an Squid [repost]
by suse_ground 05 Jul '03

05 Jul '03

What is with the message: Starting Firewall Initialization (phase 3 of 3) Warning: FW_SERVICE_SQUID defined, but no Squid server found running! (with a squid runinng on the internal interface) I got both: FW_SERVICE_AUTODETECT="yes" FW_SERVICE_SQUID="yes" I tried to change the starting order of services in init.d I put the @S18SuSEfirewall2_final to the latest position and @S17squid to the smallest possible, first after @S05network to @S06squid. It is something wrong in the autodetect services module of SuSEfirewall2 or what ? I deactivated FW_SERVICE_AUTODETECT in order to make the boot sequence clean and free of errors. This pb. is starting from SLP 8.0 migrated in SLP8.1 and now I found it also in SLP8.2.

2 1

Strange entry in message-log?
by Albl, Thomas 04 Jul '03

04 Jul '03

Hi, sorry I'm not very used with the entries in the message-log, though I can't identify, if the following lines are harmless (because the system has done something for which it uses root rights) or dangerous (because someone has hacked the box an got root rights for the user nobody) Jul 3 00:15:12 www PAM-unix2[4780]: session started for user nobody, service su Jul 3 00:16:54 www PAM-unix2[4780]: session finished for user nobody, service su The Linux-Box runs SuSE-Linux 7.2 Kernel 2.4.7 - it denies connections other from our router (i hope so) and runs apache 1.3.26, tomcat 4.0.2, php 4.0.1. Can anyone help with a hint? -- Mit freundlichem Gruß Thomas Albl Deutscher Städtetag Tel. : 0221/3771-210 FAX : 0221/3771-128 eMail: mailto:thomas.albl@staedtetag.de Web : http://www.staedtetag.de

4 3

imaps (uw) + squirrelmail 1.4.0
by Dominik Składanowski 03 Jul '03

03 Jul '03

Hello all. I have installed new mail server - SuSE 8.2 Pro. Server works as a POP3, SMTP and IMAPS (uw). I need to have some webmail on server - I choose Squirrelmail 1.4.0 (downloaded from www.squirrelmail.org). IMAPS works, I can connect to IMAPS by mail client, but Squirrelmail after login answer "Unknown user or password incorrect.". Can anybody help? -- ++++++++++++++++++++++++++++++++++++++++++ Dominik Skladanowski ++++++++++++++++++++++++++++++++++++++++++

6 5

New SuSEfirewall2 feature, what do u think?
by Mario Ohnewald 03 Jul '03

03 Jul '03

Hallo! I am using the SuSEfirewall2 since a while now. Even on Debian systems. But i was missing a feature that would only let a dynamic host access port 22. E.g. you have a ISDN, DSL, Cable dial up account from your ISP, and your ip changes every 24h. here is a little workaround, what do you think? ## Insert into the first line of /sbin/SuSEfirewall2 # resolve ip newip=`fping -A host.dyndns.org | awk '{print $1}'` # check if ip changed if [ "`cat /var/log/newip.log`" = "$newip" ]; then exit fi # write new ip to cache, then load firewall rules echo $newip > /var/log/newip.log # apply new rules echo " fw_custom_before_antispoofing() { iptables -A INPUT -p tcp -s $newip --dport 22 -j ACCEPT true } fw_custom_before_port_handling() { true } fw_custom_before_masq() { true } fw_custom_before_denyall() { true }" > /etc/rc.config.d/firewall2-custom.rc.config Another Ring of Security ;) Is the SuSEfirewall2 from MarcŽs homepage still uptodate? Cheers, Mario

1 0

YOU on 7.3 Pro kills my server (how do I get updates, if the updatetool needs as much cpu as M$ products?)
by Philippe Vogel 03 Jul '03

03 Jul '03

Hi! Yesterday I tried several updates with yast2 Online Update on my SuSE 7.3 Pro Gameserver. Unfortunately the box died everytime because of a Load of 1.63 and later did not react anymore. I switched to fou4s and didn't have any problems with that. Why is Yast2 so CPU-intensive? Why do I have to wait for ages compared to fou4s? On other distributions (debian: apt-get / RedHat: up2date) there are fine console utilities for that purpose, that can be run via cron and don't kick my server, because of too much cpu use. Here is my /var/log/y2log file from yesterday: 2003-07-01 20:28:02 <1> 44-6(2616) [liby2] genericfrontend.cc(main):96 Launched YaST2 component 'y2bignfat' 2003-07-01 20:28:02 <1> 44-6(2616) [Interpreter] clients/menu.ycp:47 Including YCP file /usr/lib/YaST2/include/ui/common_messages.ycp 2003-07-01 20:28:02 <1> 44-6(2616) [ncurses] NCurses.cc(init):167 +++ 2003-07-01 20:28:02 <1> 44-6(2616) [ncurses] NCurses.cc(init):172 isatty: stdout-yes stderr-yes 2003-07-01 20:28:02 <1> 44-6(2616) [ncurses] NCurses.cc(init):179 mytty: /dev/tty1 2003-07-01 20:28:02 <1> 44-6(2616) [ncurses] NCurses.cc(init):225 NCurses ready: NC - 24 x 80 - colors 8 - pairs 64 2003-07-01 20:28:02 <1> 44-6(2616) [ncurses] NCurses.cc(init):225 NC - rootw 0x806d010 - ( 0, 0)23x79 - {(nil) - (-1,-1)} 2003-07-01 20:28:02 <1> 44-6(2616) [ncurses] NCurses.cc(init):225 NC - title 0x806ce58 - ( 0, 0) 0x79 - {(nil) - (-1,-1)} 2003-07-01 20:28:02 <1> 44-6(2616) [ncurses] Y2NCursesUI.cc(Y2NCursesUI):110 Y2NCursesUI ready 2003-07-01 20:28:08 <1> 44-6(2616) [Interpreter] clients/menu.ycp:286 Calling YCP module tv ([]) 2003-07-01 20:28:08 <1> 44-6(2616) [Interpreter] clients/tv.ycp:27 Including YCP file /usr/lib/YaST2/include/ui/wizard_dialog.ycp 2003-07-01 20:28:08 <1> 44-6(2616) [Interpreter] ui/wizard_dialog.ycp:18 Including YCP file /usr/lib/YaST2/include/ui/common_messages.ycp 2003-07-01 20:28:08 <1> 44-6(2616) [Interpreter] clients/tv.ycp:28 Including YCP file /usr/lib/YaST2/include/require.ycp 2003-07-01 20:28:08 <1> 44-6(2616) [Interpreter] include/require.ycp:18 Including YCP file /usr/lib/YaST2/include/ui/common_messages.ycp 2003-07-01 20:28:08 <1> 44-6(2616) [Interpreter] clients/tv.ycp:30 Including YCP file /usr/lib/YaST2/include/tv/io.ycp 2003-07-01 20:28:08 <1> 44-6(2616) [Interpreter] clients/tv.ycp:31 Including YCP file /usr/lib/YaST2/include/tv/ui.ycp 2003-07-01 20:28:08 <1> 44-6(2616) [Interpreter] tv/ui.ycp:25 Including YCP file /usr/lib/YaST2/include/wizard/sequencer.ycp 2003-07-01 20:28:08 <1> 44-6(2616) [Interpreter] tv/ui.ycp:26 Including YCP file /usr/lib/YaST2/include/ui/wizard_hw.ycp 2003-07-01 20:28:08 <1> 44-6(2616) [Interpreter] tv/ui.ycp:27 Including YCP file /usr/lib/YaST2/include/ui/common_popups.ycp 2003-07-01 20:28:08 <1> 44-6(2616) [Interpreter] ui/common_popups.ycp:18 Including YCP file /usr/lib/YaST2/include/ui/common_messages.ycp 2003-07-01 20:28:09 <1> 44-6(2616) [Interpreter] tv/ui.ycp:28 Including YCP file /usr/lib/YaST2/include/ui/common_messages.ycp 2003-07-01 20:28:09 <1> 44-6(2616) [Interpreter] tv/ui.ycp:29 Including YCP file /usr/lib/YaST2/include/ui/summary.ycp 2003-07-01 20:28:09 <1> 44-6(2616) [Interpreter] tv/ui.ycp:32 Including YCP file /usr/lib/YaST2/include/tv/helps.ycp 2003-07-01 20:28:09 <1> 44-6(2616) [Interpreter] tv/ui.ycp:33 Including YCP file /usr/lib/YaST2/include/tv/structures.ycp 2003-07-01 20:28:14 <1> 44-6(2616) [Interpreter] :0 shellcommand '/bin/rpm -q kwintv' 2003-07-01 20:28:15 <1> 44-6(2616) [Interpreter] :0 shellcommand '/opt/kde2/bin/kv4lsetup' 2003-07-01 20:28:17 <1> 44-6(2616) [ncurses] Y2NCursesUI.cc(Y2NCursesUI):130 Y2NCursesUI shutdown... 2003-07-01 20:28:17 <1> 44-6(2616) [ncurses] NCurses.cc(NCurses):138 NCurses shutdown... 2003-07-01 20:28:17 <1> 44-6(2616) [ncurses] NCurses.cc(NCurses):146 NCurses down 2003-07-01 20:28:17 <1> 44-6(2616) [liby2] genericfrontend.cc(main):348 Finished YaST2 component 'y2bignfat' 2003-07-01 20:28:22 <1> 44-6(2663) [liby2] genericfrontend.cc(main):96 Launched YaST2 component 'y2bignfat' 2003-07-01 20:28:22 <1> 44-6(2663) [Interpreter] clients/menu.ycp:47 Including YCP file /usr/lib/YaST2/include/ui/common_messages.ycp 2003-07-01 20:28:22 <1> 44-6(2663) [ncurses] NCurses.cc(init):167 +++ 2003-07-01 20:28:22 <1> 44-6(2663) [ncurses] NCurses.cc(init):172 isatty: stdout-yes stderr-yes 2003-07-01 20:28:22 <1> 44-6(2663) [ncurses] NCurses.cc(init):179 mytty: /dev/tty1 2003-07-01 20:28:22 <1> 44-6(2663) [ncurses] NCurses.cc(init):225 NCurses ready: NC - 24 x 80 - colors 8 - pairs 64 2003-07-01 20:28:22 <1> 44-6(2663) [ncurses] NCurses.cc(init):225 NC - rootw 0x806d010 - ( 0, 0)23x79 - {(nil) - (-1,-1)} 2003-07-01 20:28:22 <1> 44-6(2663) [ncurses] NCurses.cc(init):225 NC - title 0x806ce58 - ( 0, 0) 0x79 - {(nil) - (-1,-1)} 2003-07-01 20:28:22 <1> 44-6(2663) [ncurses] Y2NCursesUI.cc(Y2NCursesUI):110 Y2NCursesUI ready 2003-07-01 20:28:31 <1> 44-6(2663) [Interpreter] clients/menu.ycp:286 Calling YCP module online_update ([]) 2003-07-01 20:28:32 <1> 44-6(2663) [Interpreter] clients/online_update.ycp:24 Loading YCP module /usr/lib/YaST2/modules/Installation.ycp 2003-07-01 20:28:32 <1> 44-6(2663) [Interpreter] clients/online_update.ycp:28 Including YCP file /usr/lib/YaST2/include/ui/wizard_dialog.ycp 2003-07-01 20:28:32 <1> 44-6(2663) [Interpreter] ui/wizard_dialog.ycp:18 Including YCP file /usr/lib/YaST2/include/ui/common_messages.ycp 2003-07-01 20:28:32 <1> 44-6(2663) [Interpreter] clients/online_update.ycp:29 Including YCP file /usr/lib/YaST2/include/ui/common_popups.ycp 2003-07-01 20:28:32 <1> 44-6(2663) [Interpreter] ui/common_popups.ycp:18 Including YCP file /usr/lib/YaST2/include/ui/common_messages.ycp 2003-07-01 20:28:32 <1> 44-6(2663) [Interpreter] clients/online_update.ycp:30 Including YCP file /usr/lib/YaST2/include/ui/common_functions.ycp 2003-07-01 20:28:32 <1> 44-6(2663) [Interpreter] clients/online_update.ycp:31 Including YCP file /usr/lib/YaST2/include/ui/common_messages.ycp 2003-07-01 20:28:32 <1> 44-6(2663) [Interpreter] clients/online_update.ycp:331 Calling YCP function module /usr/lib/YaST2/clients/online_update_start.ycp 2003-07-01 20:28:32 <1> 44-6(2663) [Interpreter] clients/online_update_start.ycp:32 Including YCP file /usr/lib/YaST2/include/suseservers.ycp 2003-07-01 20:28:32 <1> 44-6(2663) [YCP] clients/online_update_start.ycp:60 YAST2_LOADFTPSERVER = yes 2003-07-01 20:28:32 <1> 44-6(2663) [Interpreter] :0 shellcommand '/bin/cp /etc/suseservers /etc/suseservers.bak' 2003-07-01 20:28:32 <1> 44-6(2663) [Interpreter] :0 shellcommand '/usr/bin/wget -q --output-document=/etc/suseservers --tries=2 --timeout=5 http://www.suse.de/de/support/download/suseservers.txt' 2003-07-01 20:28:33 <1> 44-6(2663) [YCP] clients/online_update_start.ycp:77 command /usr/bin/wget -q --output-document=/etc/suseservers --tries=2 --timeout=5 http://www.suse.de/de/support/download/suseservers.txt ok 2003-07-01 20:28:33 <1> 44-6(2663) [Interpreter] :0 shellcommand '/bin/rm /etc/suseservers.bak' 2003-07-01 20:28:33 <1> 44-6(2663) [YCP] clients/online_update_start.ycp:101 FTP server: ftp.leo.org, directory: /pub/comp/os/unix/linux/suse/suse 2003-07-01 20:28:54 <1> 44-6(2663) [Interpreter] clients/online_update.ycp:331 Calling YCP function module /usr/lib/YaST2/clients/online_update_load.ycp 2003-07-01 20:28:54 <2> 44-6(2665) [ui-layout] YSplit.cc(calcSecondaryGeometry):521 Resizing child widget #1 (YSplit) below its nice size of 122 to 78 - check the layout! 2003-07-01 20:28:54 <2> 44-6(2665) [ui-layout] YSplit.cc(calcPrimaryGeometry):350 Resizing child widget #2 (YSplit) below its nice size of 84 to 53 - check the layout! 2003-07-01 20:28:54 <2> 44-6(2665) [ui-layout] YSplit.cc(calcSecondaryGeometry):521 Resizing child widget #2 (YAlignment) below its nice size of 84 to 53 - check the layout! 2003-07-01 20:28:54 <2> 44-6(2665) [ui-layout] YSplit.cc(calcSecondaryGeometry):521 Resizing child widget #1 (YSplit) below its nice size of 84 to 53 - check the layout! 2003-07-01 20:28:54 <2> 44-6(2665) [ui-layout] YSplit.cc(calcPrimaryGeometry):350 Resizing child widget #0 (YSplit) below its nice size of 42 to 26 - check the layout! 2003-07-01 20:28:54 <2> 44-6(2665) [ui-layout] YSplit.cc(calcPrimaryGeometry):350 Resizing child widget #1 (YSplit) below its nice size of 42 to 26 - check the layout! 2003-07-01 20:28:54 <2> 44-6(2665) [ui-layout] YSplit.cc(calcSecondaryGeometry):521 Resizing child widget #1 (YAlignment) below its nice size of 42 to 26 - check the layout! 2003-07-01 20:28:54 <2> 44-6(2665) [ui-layout] YSplit.cc(calcSecondaryGeometry):521 Resizing child widget #1 (YAlignment) below its nice size of 42 to 26 - check the layout! 2003-07-01 20:28:56 <2> 44-6(2663) [yast2-core-pkginfo] ConfigFile.cc(readFile):114 opening : /info 2003-07-01 20:28:56 <2> 44-6(2663) [Interpreter] :0 Execute (.bash, ...) without full path ! 2003-07-01 20:28:56 <1> 44-6(2663) [Interpreter] :0 shellcommand 'rm -rf /var/lib/YaST/patches/i386/update/7.3/patches/*.new' 2003-07-01 20:28:56 <2> 44-6(2663) [Interpreter] :0 Execute (.bash, ...) without full path ! 2003-07-01 20:28:56 <1> 44-6(2663) [Interpreter] :0 shellcommand 'rm -rf /var/lib/YaST/patches/i386/update/7.3/patches/*.error' Philippe

4 4