- openSUSE Support

[opensuse-support] HONEYWELL : COTS : [urgent] : Information required on security-related patches under opensuse
by Kumar, Dhanalakshmi 19 May '20

19 May '20

Hi Team, We recognize your time is valuable so tell us the best way to learn about and obtain the latest security patches or software revisions/upgrades of your product : Option #1: On a monthly basis, Honeywell can send an email inquiring if new security patches are available. Option #2: Provide Honeywell with an annual release schedule and we will contact you upon each release date. Option #3: Notify Honeywell with the information related to the patch/version when such becomes available. Option #4: Suggest alternate methods that your company uses to inform customers about software patches or revisions. Option # 5: Provide us the website URL from where we can get the new version release information as well as release notes as a monthly basis. Your action :: * Please revert us with an option# * Please fill up the table with the latest information available Product Name Honeywell installed version Latest Market version in website Release Date of Latest Market version Website URL End Of Support of the Honeywell installed version GNU COMPILER COLLECTION GCC-9-1.6 ? ? ? ? We want to stay in touch to obtain new security patches or software revisions that Honeywell can implement accordingly. Keeping Honeywell systems secure and up to date are a major priority for the Honeywell Information Technology organization. If there is someone else in your company that we should contact, please inform us. We look forward to your response to the above options and if you have any questions, contact us by replying to this email or DL-INTVULMGMT(a)Honeywell.com<mailto:DL-INTVULMGMT@Honeywell.com> Thanks and Stay Secure, Dhanalakshmi Kumar Vulnerability Management Tata Consultancy Services | Contracted to Honeywell Desk: +91-6746778032 Email: Dhanalakshmi.Kumar(a)Honeywell.com<mailto:Dhanalakshmi.Kumar@Honeywell.com> Disclaimer Notice Please do not email any confidential or privileged information that may violate export control rules as I'm NOT authorized to view Export Controlled Data.

3 2

[opensuse-support] Problem with .desktop file after zypper dup
by Freek de Kruijf 18 May '20

18 May '20

Since yesterday after a zypper dup om my Tumbleweed system, I can't use/start a .desktop file which contains Terminal=true. The error message is: Cannot find application 'konsole' "whereis konsole" gives: konsole: /usr/bin/konsole /usr/share/konsole PATH contains ...:/usr/bin:... Should I report a bug? -- fr.gr. member openSUSE Freek de Kruijf -- To unsubscribe, e-mail: opensuse-support+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-support+owner(a)opensuse.org

1 1

[opensuse-support] authentication via fingerprint-reader
by Axel Braun 15 May '20

15 May '20

Hi, I'm playing with the fingerprint-reader for login authentication (Tumbleweed/ KDE). The fingerprint-reader is working properly and I have enrolled and verified some fingerprints. Question now how to incorporate this into the pam properly? As https://en.opensuse.org/SDB:Using_fingerprint_authentication is quite outdated I followed https://wiki.archlinux.org/index.php/SDDM#Using_a_fingerprint_reader and added auth sufficient pam_fprintd.so to /etc/pam.d/sddm, which afterwards looks like: #%PAM-1.0 auth sufficient pam_fprintd.so auth include common-auth account include common-account password include common-password session required pam_loginuid.so session include common-session session optional pam_keyinit.so revoke force Result: At the login-screen I enter the password, and afterwards the login freezes. Putting the finter on the reader does not help. Hitting 'Enter' on an empty password field neither. I have never worked with pam, so thats completely a blackbox for me. Any thint is appreciated! Thanks Axel -- To unsubscribe, e-mail: opensuse-support+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-support+owner(a)opensuse.org

3 2

[opensuse-support] Clang update file "conflict"
by Mykola Krachkovsky 15 May '20

15 May '20

Hi, I'm trying to update openSUSE Tumbleweed from 20200509 to current and got a lot of clang file conflicts like: ``` File /usr/bin/clang from install of clang9-9.0.1-10.3.x86_64 (openSUSE-20170510-0) conflicts with file from package clang10-10.0.0-1.2.x86_64 (@System) File /usr/bin/clang from install of clang9-9.0.1-10.3.x86_64 (openSUSE-20170510-0) conflicts with file from package clang8-8.0.1-8.3.x86_64 (@System) ``` But they are alternatives: ``` $ rpm -qf /usr/bin/clang clang8-8.0.1-8.3.x86_64 clang9-9.0.1-10.1.x86_64 clang10-10.0.0-1.2.x86_64 $ ll /usr/bin/clang lrwxrwxrwx 1 root root 23 кві 10 02:31 /usr/bin/clang -> /etc/alternatives/ clang ``` They shouldn't be in conflict. What is wrong? -- Kind regards, Mykola Krachkovsky -- Найкращі побажання, Микола Крачковський

3 2

[opensuse-support] mariadb not starting in TW
by Jogchum Reitsma 10 May '20

10 May '20

Hi all, Running Tumbleweed, my mariadb database refuses to start. Running journalctl -xe gives mei 07 20:21:03 linux-mkay systemd[1]: Starting MariaDB database server... -- Subject: A start job for unit mariadb.service has begun execution -- Defined-By: systemd -- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- A start job for unit mariadb.service has begun execution. -- -- The job identifier is 2184. mei 07 20:21:04 linux-mkay mysql-systemd-helper[4411]: 2020-05-07 20:21:04 0 [Note] /usr/sbin/mysqld (mysqld 10.4.12-MariaDB) starting as process 4411 ... mei 07 20:21:04 linux-mkay mysql-systemd-helper[4411]: 2020-05-07 20:21:04 0 [Warning] Can't create test file /home/jogchum/mysql/linux-mkay.lower-test mei 07 20:21:04 linux-mkay mysql-systemd-helper[4411]: [95B blob data] mei 07 20:21:04 linux-mkay mysql-systemd-helper[4411]: 2020-05-07 20:21:04 0 [ERROR] Aborting mei 07 20:21:04 linux-mkay systemd[1]: mariadb.service: Main process exited, code=exited, status=1/FAILURE -- Subject: Unit process exited -- Defined-By: systemd -- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- An ExecStart= process belonging to unit mariadb.service has exited. -- -- The process' exit code is 'exited' and its exit status is 1. mei 07 20:21:04 linux-mkay systemd[1]: mariadb.service: Failed with result 'exit-code'. -- Subject: Unit failed -- Defined-By: systemd -- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- The unit mariadb.service has entered the 'failed' state with result 'exit-code'. mei 07 20:21:04 linux-mkay systemd[1]: Failed to start MariaDB database server. -- Subject: A start job for unit mariadb.service has failed -- Defined-By: systemd -- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- A start job for unit mariadb.service has finished with a failure. -- -- The job identifier is 2184 and the job result is failed. The version installed is mariadb --version mariadb Ver 15.1 Distrib 10.4.12-MariaDB, for Linux (x86_64) using EditLine wrapper I don't use the database often, so I don't know when it started failing. But, according to my .mysql_history, it worked on December 27 last year. I've looked at bugs https://bugzilla.opensuse.org/show_bug.cgi?id=1166786 and https://bugzilla.opensuse.org/show_bug.cgi?id=1166781 but it seems to me they are unrelated to this error. Anyone who knows what can be going on here, or what I can do to get things going again, or getting more info? regards, Jogchum

5 6

[opensuse-support] Strongswan error with Networkmanager-L2TP for Client-LAN LT2P/IPSEC VPN connection
by Firas Riyazuddin 05 May '20

05 May '20

Hello, I've configured L2TP/IPSEC on my TP-Link ER6080 router but am having an error when using the Networkmanager-lt2p package. I have confirmed that the router settings are ok since I am able to connect using Mac OS X. My OS is Opensuse Leap 15.1 . uname -a 4.12.14-lp151.28.48-default #1 SMP Fri Apr 17 05:38:36 UTC 2020 (18849d1) x86_64 x86_64 x86_64 GNU/Linux Network topology is 192.168.43.xxx (client LAN IP)/107.77.xxx.x (client WAN IP) ----- INTERNET ----- 70.xx.xx.xx (Router WAN IP)/192.168.0.xxx(Router LAN IP/Subnet is 192.168.0.0/24) If successfully connected I've configured the Router so that the client machine gets IP similar to 10.10.xx.xx and on the router end of the tunnel the client machine has an IP that appears on the same subnet as the Router's LAN (192.168.0.xxx). Here's the output of the debug sudo CHARONDEBUG="knl 4, ike 4, esp 4, lib 4, cfg 4" /usr/lib/nm-l2tp-service --debug nm-l2tp[1258] <debug> nm-l2tp-service (version 1.2.8-lp151.3.58) starting... nm-l2tp[1258] <debug> uses default --bus-name "org.freedesktop.NetworkManager.l2tp" nm-l2tp[1258] <info> ipsec enable flag: yes ** Message: Check port 1701 connection id : "XYZ VPN" (s) uuid : "386d037b-e241-4570-a513-b4d6d01ca16b" (s) interface-name : NULL (sd) type : "vpn" (s) permissions : ["user:XYZ:"] (s) autoconnect : TRUE (sd) autoconnect-priority : 0 (sd) autoconnect-retries : -1 (sd) timestamp : 0 (sd) read-only : FALSE (sd) zone : "work" (s) master : NULL (sd) slave-type : NULL (sd) autoconnect-slaves : ((NMSettingConnectionAutoconnectSlaves) NM_SETTING_CONNECTION_AUTOCONNECT_SLAVES_DEFAULT) (sd) secondaries : NULL (sd) gateway-ping-timeout : 0 (sd) metered : ((NMMetered) NM_METERED_UNKNOWN) (sd) lldp : -1 (sd) stable-id : NULL (sd) auth-retries : -1 (sd) ipv6 method : "auto" (s) dns : [] (s) dns-search : [] (s) dns-options : NULL (sd) dns-priority : 0 (sd) addresses : ((GPtrArray*) 0x564bcf6b9ae0) (s) gateway : NULL (sd) routes : ((GPtrArray*) 0x564bcf6b9b00) (s) route-metric : -1 (sd) route-table : 0 (sd) ignore-auto-routes : FALSE (sd) ignore-auto-dns : FALSE (sd) dhcp-hostname : NULL (sd) dhcp-send-hostname : TRUE (sd) never-default : FALSE (sd) may-fail : TRUE (sd) dad-timeout : -1 (sd) dhcp-timeout : 0 (sd) ip6-privacy : ((NMSettingIP6ConfigPrivacy) NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN) (sd) addr-gen-mode : 1 (sd) token : NULL (sd) proxy method : 0 (sd) browser-only : FALSE (sd) pac-url : NULL (sd) pac-script : NULL (sd) vpn service-type : "org.freedesktop.NetworkManager.l2tp" (s) user-name : "XYZ" (s) persistent : FALSE (sd) data : ((GHashTable*) 0x7fb7f4006d80) (s) secrets : ((GHashTable*) 0x7fb7f4006d80) (s) timeout : 0 (sd) ipv4 method : "auto" (s) dns : [] (s) dns-search : [] (s) dns-options : NULL (sd) dns-priority : 0 (sd) addresses : ((GPtrArray*) 0x564bcf6b9e00) (s) gateway : NULL (sd) routes : ((GPtrArray*) 0x564bcf6b9e20) (s) route-metric : -1 (sd) route-table : 0 (sd) ignore-auto-routes : FALSE (sd) ignore-auto-dns : FALSE (sd) dhcp-hostname : NULL (sd) dhcp-send-hostname : TRUE (sd) never-default : FALSE (sd) may-fail : TRUE (sd) dad-timeout : -1 (sd) dhcp-timeout : 0 (sd) dhcp-client-id : NULL (sd) dhcp-fqdn : NULL (sd) nm-l2tp[1258] <info> starting ipsec Stopping strongSwan IPsec failed: starter is not running Starting strongSwan 5.8.2 IPsec [starter]... Loading config setup Loading conn '386d037b-e241-4570-a513-b4d6d01ca16b' nm-l2tp[1258] <info> Spawned ipsec up script with PID 1309. initiating Main Mode IKE_SA 386d037b-e241-4570-a513-b4d6d01ca16b[1] to 70.xx.xx.xx generating ID_PROT request 0 [ SA V V V V V ] sending packet: from 192.168.xx.xxx[500] to 70.xx.xx.xx[500] (236 bytes) received packet: from 70.xx.xx.xx[500] to 192.168.xx.xxx[500] (132 bytes) parsed ID_PROT response 0 [ SA V V V ] received XAuth vendor ID received DPD vendor ID received NAT-T (RFC 3947) vendor ID selected proposal: IKE:3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024 generating ID_PROT request 0 [ KE No NAT-D NAT-D ] sending packet: from 192.168.xx.xxx[500] to 70.xx.xx.xx[500] (244 bytes) received packet: from 70.xx.xx.xx[500] to 192.168.xx.xxx[500] (244 bytes) parsed ID_PROT response 0 [ KE No NAT-D NAT-D ] local host is behind NAT, sending keep alives generating ID_PROT request 0 [ ID HASH ] sending packet: from 192.168.xx.xxx[4500] to 70.xx.xx.xx[4500] (68 bytes) received packet: from 70.xx.xx.xx[500] to 192.168.xx.xxx[500] (68 bytes) invalid HASH_V1 payload length, decryption failed? could not decrypt payloads message parsing failed ignore malformed INFORMATIONAL request INFORMATIONAL_V1 request with message ID 661973262 processing failed sending retransmit 1 of request message ID 0, seq 3 sending packet: from 192.168.xx.xxx[4500] to 70.xx.xx.xx[4500] (68 bytes) received packet: from 70.xx.xx.xx[500] to 192.168.xx.xxx[500] (68 bytes) invalid HASH_V1 payload length, decryption failed? could not decrypt payloads message parsing failed ignore malformed INFORMATIONAL request INFORMATIONAL_V1 request with message ID 688629832 processing failed nm-l2tp[1258] <warn> Timeout trying to establish IPsec connection nm-l2tp[1258] <info> Terminating ipsec script with PID 1309. Stopping strongSwan IPsec... destroying IKE_SA in state CONNECTING without notification establishing connection '386d037b-e241-4570-a513-b4d6d01ca16b' failed nm-l2tp[1258] <warn> Could not establish IPsec tunnel. (nm-l2tp-service:1258): GLib-GIO-CRITICAL **: g_dbus_method_invocation_take_error: assertion 'error != NULL' failed I know it is not an incorrect PSK since the connection works fine with the Mac ( https://wiki.strongswan.org/projects/strongswan/wiki/FAQ#invalid-HASH_V1-pa… ) I tried checking if the encryption/hash algorithms settings were faulty but I don't think this is the cause. When probed ( per https://github.com/nm-l2tp/NetworkManager-l2tp/wiki/Known-Issues#querying-v… ), the router lists the following allowed algorithms: SA=(Enc=3DES Hash=MD5 Group=2:modp1024 Auth=PSK LifeType=Seconds LifeDuration=28800) SA=(Enc=3DES Hash=MD5 Group=2:modp1024 Auth=RSA_Sig LifeType=Seconds LifeDuration=28800) SA=(Enc=3DES Hash=SHA1 Group=2:modp1024 Auth=PSK LifeType=Seconds LifeDuration=28800) SA=(Enc=3DES Hash=SHA1 Group=2:modp1024 Auth=RSA_Sig LifeType=Seconds LifeDuration=28800) The IPSEC Phase 1 and Phase 2 settings I've tried are 3des-sha1-modp1024 or 3des-md5-modp1024 and 3des-sha1 and 3des-md5 . It doesn't make a difference. I get the same output on the error log. I have tried checking and unchecking the "Force UDP Encapsulation" box on the IPSEC settings and it's the same error. Any idea how to resolve this issue? I've tried changing the usernames, passwords and PSKs to simpler ones and it's the same error. Much appreciated. Thanks.

2 2

[opensuse-support] [Leap 15] Launcher stopped working
by Bob Williams 04 May '20

04 May '20

For the past week, after my machine has been running for a few hours, the launcher stops appearing. I mean the icon at the left hand end of the panel which pops a menu of programs to launch, when left clicked. The right click menu (Edit Applications, Configure Application Menu, Unlock Widgets) still works. I have tried reverting to opensuse themes and desktops (from Breeze) but it made no difference, apart from changing the appearance of the icon. I'm using Leap 15.1 and KDE5/Frameworks. -- Bob Williams System: Linux 4.12.14-lp151.28.48-default Desktop: KDE Frameworks: 5.55.0, Qt: 5.9.7 and Plasma: 5.12.8 -- To unsubscribe, e-mail: opensuse-support+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-support+owner(a)opensuse.org

2 2

[opensuse-support] Finding quadmath.h
by Jogchum Reitsma 27 Apr '20

27 Apr '20

Hi, I need the header file quadmath.h, which is AFAICS path of the Frotran package. But neither Yast nor zypper, or googling "quadmath.h opensuse Tumbleweed" or "libquadmath0 devel opensuse tumbleweed" leads to a opensuse repository for that package. I assume it is the -devel version of the libquadmath0 package (which I had already installed), but where do I find it? cheers, Jogchum -- To unsubscribe, e-mail: opensuse-support+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-support+owner(a)opensuse.org

5 10

[opensuse-support] chrony, timedeatectl, networkmanager, dhcp
by mh＠mike.franken.de 26 Apr '20

26 Apr '20

Hi *, I tried to understand the relation between chrony, timedatectl, dhcp and NetworkManager on my Tumbleweed notebook. I regularily use a LAN connection, WiFi connections and LTE connections. In every case the network information is fetched via dhcp. Do I need chrony in this environment? Or is the systemd timedatectl service sufficient? If I need chrony, how does chrony get the ntp server address from dhcp? I don't want to change it manually in chrony.conf. I tried different constellations, but the results didn't seem to be consistent in a way I could understand. TIA. Bye. Michael. -- Michael Hirmke -- To unsubscribe, e-mail: opensuse-support+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-support+owner(a)opensuse.org

5 22

[opensuse-support] apache2 exits with PHP Fatal error: Unable to start pcre module in Unknown on line 0
by Jogchum Reitsma 22 Apr '20

22 Apr '20

Hi, After errors in upgrading apache2 or it's components (see my post here on Jan. 11 2020, 12:21) which was solved with help from Christian Boltz, apache2 refuses to start. That is, systemctl start apache2 return without error messages on the terminal, but systemctl status apache2 gives systemctl status apache2 ● apache2.service - The Apache Webserver Loaded: loaded (/usr/lib/systemd/system/apache2.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Tue 2020-04-14 11:31:42 CEST; 8min ago Process: 102150 ExecStart=/usr/sbin/start_apache2 -DSYSTEMD -DFOREGROUND -k start (code=exited, status=254) Main PID: 102150 (code=exited, status=254) Status: "Reading configuration..." apr 14 11:30:11 linux-mkay systemd[1]: Starting The Apache Webserver... apr 14 11:30:12 linux-mkay systemd[1]: Started The Apache Webserver. apr 14 11:30:12 linux-mkay systemd[1]: apache2.service: Main process exited, code=exited, status=254/n/a apr 14 11:31:42 linux-mkay systemd[1]: apache2.service: Reload operation timed out. Killing reload process. apr 14 11:31:42 linux-mkay systemd[1]: apache2.service: Failed with result 'exit-code' Conform advice of Cristian in before mentioned thread, I ran grep '^[^#]' /etc/sysconfig/apache2 APACHE_CONF_INCLUDE_FILES="" APACHE_CONF_INCLUDE_DIRS="" APACHE_MODULES="php7 authz_host actions alias auth_basic authn_file authz_user authz_groupfile autoindex cgi dir include log_config mime negotiation env setenvif status userdir asis imagemap perl wsgi-python3 authn_core version authz_core reqtimeout socache_shmcb wsgi rewrite ssl" APACHE_SERVER_FLAGS="SSL " APACHE_HTTPD_CONF="" APACHE_MPM="" APACHE_SERVERADMIN="" APACHE_SERVERNAME="" APACHE_START_TIMEOUT="2" APACHE_SERVERSIGNATURE="off" APACHE_LOGLEVEL="error" APACHE_ACCESS_LOG="/var/log/apache2/access_log combined" APACHE_USE_CANONICAL_NAME="off" APACHE_SERVERTOKENS="ProductOnly" APACHE_EXTENDED_STATUS="off" APACHE_EXTENDED_STATUS="off" so no irregularities here I think. /var/log/apache2/error_log gives one error message for each time I try to start apache2: PHP Fatal error: Unable to start pcre module in Unknown on line 0 Googling this message doesn't give results that I can do something with. Anyone any idea? regards, Jogchum -- To unsubscribe, e-mail: opensuse-support+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-support+owner(a)opensuse.org

4 10