December 1998 - openSUSE Users - openSUSE Mailing Lists

[SuSE Linux] security breaches... Help!
by wes＠sophia.colorado.edu 01 Dec '98

01 Dec '98

On a several occasions, somebody has managed to break into my networked SuSE Linux box and do some damage. On two occasions, the damage has made it impossible for me to log in to my own site. Yesterday, for example, I found the following entries in /etc/passwd. lage::0:0::/root:/bin/bash Slage::999:999::/tmp:/bin/bash I certainly didn't put these lines in my /etc/passwd file. In /var/log/warn and in /var/log/messages I find a lot of stuff like this. Nov 29 04:48:20 sophia login[2221]: invalid password for `UNKNOWN' on `ttyp0' from `192.116.194.173' Nov 29 04:48:37 sophia login[2221]: invalid password for `UNKNOWN' on `ttyp0' from `192.116.194.173' Nov 29 04:48:43 sophia login[2221]: invalid password for `root' on `ttyp0' from `192.116.194.173' Nov 29 04:50:16 sophia login[2228]: invalid password for `root' on `ttyp0' from `192.116.194.173' Nov 29 04:51:03 sophia login[2231]: invalid password for `root' on `ttyp0' from `192.116.194.173' Nov 29 04:51:08 sophia login[2232]: invalid password for `root' on `ttyp1' from `192.117.189.128' Nov 29 04:53:55 sophia login[2245]: no shadow password for `Slage' on `ttyp0' from `192.117.189.128' I don't know how this person managed to add lines to my /etc/passwd file. By the time s/he was done, I couldn't log into my own system under *any* legitimate name and passwd, and had to boot from a floppy and reinstall a bunch of stuff. Is that some sort of security device kicking in? If so, what is the best way of undoing the damage? Can anyone advise me about the best method of preventing this sort of thing? Thanks. Wes - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

1 0

[SuSE Linux] KDE question
by pepe＠hp715.ceam.es 01 Dec '98

01 Dec '98

Hi all, I've just installed suse 5.3 and I have some problems with KDE. Every time I start KDE there are 4 Kscd opened. How can I avoid this? Another is that, in KDE, a normal user can't access the CD drive, only root can. And this only happens in KDE, in any other wm all users can access the CD. Can a nyone help me? Thanks ---------------------------------- E-Mail: Jose Bea <pepe(a)hp715.ceam.es> Date: 11/30/98 Time: 14:17:00 This message was sent by XF-Mail ----------------------------------suse-linux-es(a)suse.con - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

4 3

[SuSE Linux] SO 5 versus applix and soon wp8
by mperry＠basin.com 01 Dec '98

01 Dec '98

I am interested in losing my NT partition and reclaiming that 6 gigs for something else. Dont quite know what yet... It seems that SO 5 has some issues regarding installation and I did order it on cd. I also have ordered corel wp 8 and after using sdcorps wp before, I must say that wp may be the one I end up with. It just seems polished and well done. I like applix at a functional level. applix seems to say, "give me work to do and I can do it". Can someone using StarOffice 5 post some basic comments about its function with regard to importing office 97 blech files especially excel blech and word blech? I dont care so much about powerpoint blech but it would be nice to know that it does that. I have a word97 documents which is 3mb in size that applix 4.4.1 chokes on. Want to do a little experiment? If you have SO 5 and want to try importing this file, I will shove it to my anon ftp server at work and you can have at it. If you have the adabas D documentation in word format, try reading the apeng.doc for import. Subjective comments welcome. Objective reviews accepted also. Bitches and complaints carefully recorded. :) Michael Perry mperry(a)basin.com ------------------ - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

3 3

[SuSE Linux] Lists
by tsm＠wwnet.net 01 Dec '98

01 Dec '98

Hi there, Could someone please forward me some other SUSE list-servers? TIA, -ted - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

1 0

[SuSE Linux] Bounced mail.
by fmiller＠lightlink.com 01 Dec '98

01 Dec '98

Sorry to post this, but I've had 3 bounces from my system to the list....ALL were replies. Fred _________________________________ Subject: Returned mail: Local configuration error Date: Mon, 30 Nov 1998 01:39:12 +0100 (MET) From: Mail Delivery Subsystem <Mailer-Daemon(a)dexter.zrh.swissair.ch> To: postmaster(a)dexter.zrh.swissair.ch, <fmiller(a)lightlink.com> The original message was received at Mon, 30 Nov 1998 01:38:56 +0100 (MET) from mail2.sairgroup.com [10.192.3.33] ----- The following addresses had permanent fatal errors ----- <mnessens(a)N0676100.zrh.sairgroup.com> ----- Transcript of session follows ----- 553 n0676100.zrh.sairgroup.com. config error: mail loops back to me (MX problem?) 554 <mnessens(a)N0676100.zrh.sairgroup.com>... Local configuration error ----- Original message follows ----- Return-Path: <fmiller(a)lightlink.com> Received: from mail2.sairgroup.com (mail2.sairgroup.com [10.192.3.33]) by dexter.zrh.swissair.ch (8.9.1/8.9.1) with SMTP id BAA01608 for <mnessens(a)N0676100.zrh.sairgroup.com>; Mon, 30 Nov 1998 01:38:56 +0100 (MET) Received: (qmail 2003 invoked from network); 30 Nov 1998 00:39:15 -0000 Received: from n0704078-t0.zrh.sairgroup.com (HELO GWCHSM02.zrh.sairgroup.com) (10.192.40.18) by mail2.sairgroup.com with SMTP; 30 Nov 1998 00:39:15 -0000 Received: by GWCHSM02.zrh.sairgroup.com(Lotus SMTP MTA v4.6.1 (569.2 2-6-1998)) id C12566CC.000398EF ; Mon, 30 Nov 1998 01:39:17 +0100 X-Lotus-FromDomain: AGW From: "Fred A. Miller" <fmiller(a)lightlink.com> Reply-To: suse-linux-e(a)suse.com To: suse-linux-e(a)suse.com Message-ID: <C12566CC.0003960F.00(a)GWCHSM02.zrh.sairgroup.com> Date: Sun, 29 Nov 1998 22:42:18 +0000 Subject: Re: [SuSE Linux] xirc Mime-Version: 1.0 Content-type: text/plain; charset=us-ascii Content-Disposition: inline Michael Perry wrote: > > On 29 Nov, Fred A. Miller wrote: > > > > Is there a list of servers fro xirc? If so....here is the critter?! I > > need a list of servers. > > > > Thanks, > > > > Fred > > > > -- > > I love defenseless animals, especially in a good gravy! > > - > > To get out of this list, please send email to majordomo(a)suse.com with > > this text in its body: unsubscribe suse-linux-e > Fred- > > I dont know how xirc is setup but have you tried a few of the undernet > ones in xirc? Here are perhaps a few that may help: > > undernet > > phoenix.az.us.undernet.org > sandiego.ca.us.undernet.org Thanks! Xirc is supposed to install with a default list of servers, but it didn't install with a list....installed it twice. Anyway, I'm adding a few at a time as I can find them. Fred -- "Slicker 'n Willie Lube".......and that's doin some! - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

1 0

[SuSE Linux] UMAX UDS-IS11 scsi card
by assalonej＠kpe.com 01 Dec '98

01 Dec '98

Is there a way to get the Umax UDS-IS11 scsi card working under linux? It's a piece of crap, but it's all i got right now. I had some trouble finding the driver for Win (i had to get it from Umax's german web site), so I doubt a linux driver actually exists. If anyone's using this card, let me know if there's a driver for it, or if I can use one of the other scsi drivers. - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

1 0

Re: [SuSE Linux] Deskjet 400L Help
by k01164＠ko.hhs.dk 01 Dec '98

01 Dec '98

the apsfilter won't help you if you by-bass it. try lpr file instead of cat file > /dev/... when you use the lpr command, you can send both postscript, ascii and dvi files to the printer. Try man lpr for more info. Sincerely Ole On Sun, 29 Nov 1998, Harry wrote: > > On Sun, 29 Nov 1998, you wrote: > >Harry <mezger(a)usa.net.nospam> wrote: > >> > >> I'm trying to get a HP Deskjet 400L to work with SuSE 5.3 and have a few > >> questions. > >> I wasn't sure which printer configuration (in Yast) to use because > >> DJ 400L was not listed... I ended up using the 'DeskJet' configuration. Is the > >> the right one to use? > >> Linux recognizes the printer now, but when i do a ' lptest 35 6 > /dev/lp1' I > >> get laddered text. How can I tell my printer to make a carriage return after > >> each line? > >> This is the first time that I have ever setup a printer with Linux and I must > >> say that this is an area that could use a little improvement. This is probally > >> the hardest thing that i've ever dealt with in Linux. > >> Thanks, > >> Harry > > > > > >Have you installed the apsfilter rpm yet ? > > Yes... > > >-Dee > > > > > >W.D.McKinney (Dee) deem(a)wdm.com > >Faith is acting on your passions & beliefs. > >- > >To get out of this list, please send email to majordomo(a)suse.com with > >this text in its body: unsubscribe suse-linux-e > - > To get out of this list, please send email to majordomo(a)suse.com with > this text in its body: unsubscribe suse-linux-e > > - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

2 1