December 2003 - openSUSE Users - openSUSE Mailing Lists

Freeswan 1.99: Errors bringing up connection
by edcoates＠nighthawk.dyndns.org 28 Dec '03

28 Dec '03

Hi All I'm have a little problem with freeswan. I'm trying to establish a connection with a friend's machine using freeswan 2.04. We've compared setups and they match. The problem on my end, is when I start ipsec with /etc/init.d/ipsec start, I get this in /var/log/messages Dec 28 09:59:34 nighthawk ipsec_setup: Starting FreeS/WAN IPsec 1.99... Dec 28 09:59:38 nighthawk kernel: ipsec_3des_init(alg_type=15 alg_id=3 name=3des): ret=0 Dec 28 09:59:39 nighthawk kernel: ipsec_md5_init(alg_type=14 alg_id=2 name=md5): ret=0 Dec 28 09:59:39 nighthawk kernel: ipsec_sha1_init(alg_type=14 alg_id=3 name=sha1): ret=0 Dec 28 09:59:39 nighthawk ipsec_setup: ipsec ipsec_3des ipsec_md5 ipsec_sha1 Dec 28 09:59:40 nighthawk ipsec_setup: KLIPS ipsec0 on eth0 192.168.1.9/255.255.255.0 broadcast 192.168.1.255 mtu 1500 Dec 28 09:59:41 nighthawk ipsec__plutorun: Starting Pluto subsystem... Dec 28 09:59:41 nighthawk ipsec_setup: ...FreeS/WAN IPsec started Dec 28 09:59:41 nighthawk ipsec_setup: ^M^[[111C^[[10D^[[1;32mdone^[[m^O Dec 28 09:59:41 nighthawk pluto[21032]: Starting Pluto (FreeS/WAN Version 1.99) Dec 28 09:59:41 nighthawk pluto[21032]: including X.509 patch with traffic selectors (Version 0.9.23) Dec 28 09:59:41 nighthawk pluto[21032]: including NAT-Traversal patch (Version 0.5a) [disabled] Dec 28 09:59:41 nighthawk pluto[21032]: ike_alg_register_enc: Activating OAKLEY_AES_CBC: Ok (ret=0) Dec 28 09:59:41 nighthawk pluto[21032]: ike_alg_register_enc: Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0) Dec 28 09:59:41 nighthawk pluto[21032]: ike_alg_register_hash: Activating OAKLEY_SHA2_256: Ok (ret=0) Dec 28 09:59:41 nighthawk pluto[21032]: ike_alg_register_hash: Activating OAKLEY_SHA2_512: Ok (ret=0) Dec 28 09:59:41 nighthawk pluto[21032]: ike_alg_register_enc: Activating OAKLEY_TWOFISH_CBC: Ok (ret=0) Dec 28 09:59:41 nighthawk pluto[21032]: ike_alg_register_enc: Activating OAKLEY_SSH_PRIVATE_65289: Ok (ret=0) Dec 28 09:59:41 nighthawk pluto[21032]: Changing to directory '/etc/ipsec.d/cacerts' Dec 28 09:59:41 nighthawk pluto[21032]: Warning: empty directory Dec 28 09:59:41 nighthawk pluto[21032]: Changing to directory '/etc/ipsec.d/crls' Dec 28 09:59:41 nighthawk pluto[21032]: Warning: empty directory Dec 28 09:59:41 nighthawk pluto[21032]: could not open my default X.509 cert file '/etc/x509cert.der' Dec 28 09:59:41 nighthawk pluto[21032]: OpenPGP certificate file '/etc/pgpcert.pgp' not found Dec 28 09:59:42 nighthawk pluto[21032]: listening for IKE messages Dec 28 09:59:42 nighthawk pluto[21032]: adding interface ipsec0/eth0 192.168.1.9 Dec 28 09:59:42 nighthawk pluto[21032]: loading secrets from "/etc/ipsec.secrets" Dec 28 09:59:46 nighthawk /etc/hotplug/net.agent[20933]: No HW description found . exiting Dec 28 09:59:46 nighthawk /etc/hotplug/net.agent[20938]: No HW description found . exiting Dec 28 09:59:46 nighthawk /etc/hotplug/net.agent[20929]: No HW description found . exiting Dec 28 09:59:46 nighthawk /etc/hotplug/net.agent[20934]: No HW description found . exiting Dec 28 09:59:49 nighthawk kernel: ipsec0: no IPv6 routers present When I try and bring up the connection with ipsec auto --up grinolds I get an error about the connection not being found. I'm guessing that it has something to do with the hotplug lines. Any ideas on where to start fixing this? Ed ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

1 0

SuSE 9 Professional Installation Error
by Colburn 28 Dec '03

28 Dec '03

I have a boxed set of SuSE 9 Professional. Just tried to install it on a desktop here and libart_lgpl, cups-drivers, and openh323 all failed to load, despite repeated retries and running repair twice the problem is not corrected -- and when I attempt to run kde from the prompt it fails. Is it reasonable to presume that the cause must be a defective production CD? Thanks! doc -- Wars and rumors of wars, disasters, and social decay, yet undaunted for love and peace we pray.

2 4

Suse 8.2 Pro Creating Backup Copies Of CDs
by R. S. Patil 28 Dec '03

28 Dec '03

Dear Friends, How to create Backup Copies of Distribution CDs Which are having same functionality as that of Original One. My Assistant reported that Copy of first disk he made is not Booting from CD rom for fresh installation. The disk was copied with some S/W which came along with IOMEGA external USB CD writer connected to Win XP machine. Can somebody help us in making backup copies of CDs which will work exactly same as Original Ones. Thanks Best Regards R. S. Patil

3 2

Thunderbird
by Russ 28 Dec '03

28 Dec '03

Hi All, Just wondering if anyone out there is using Mozilla's Thunderbird. I just installed it and I really like it ... so far :-) This email is also a test since I just redid everything and I was just checking to see if it all works. Russ

4 3

grub graphical boot menu
by Arvid Johansson 28 Dec '03

28 Dec '03

For some reason I didn't get the sweet graphical boot menu that I used to see when I booted my computer. Is there any way to get it back after I've installed my suse 9.0 system already? (the menu where I choose between Linux and Windows)

1 0

RE: [SLE] windows 2000 network authentication
by fareed＠iplex.co.zw 28 Dec '03

28 Dec '03

The dynamic IP should not affect the authentication. Authentication methods ====================== The access policy and publishing rules of Microsoft Internet Security and Acceleration (ISA) Server can be configured to allow or deny a set of computers (client address sets) or a group of users from accessing specific servers. If the rule applies specifically to users, then the ISA Server checks the Web request properties for listeners on the array to determine how the user should be authenticated. You can configure incoming and outgoing Web request settings so that users must always be authenticated by ISA Server before processing rules. This ensures that requests are allowed only if the user making the request is authenticated. For more information, see Require authentication for all Web requests. You can also configure which authentication method to use. You can configure different authentication methods for incoming Web requests and for outgoing Web requests. ISA Server supports the following authentication methods: Basic authentication ---->> YOUR BEST BET! Digest authentication Integrated Windows authentication Client certificates and server certificates Basic authentication ==================== The standard Hypertext Transfer Protocol (HTTP) method of authentication is basic authentication. Basic authentication sends and receives user information as text characters that can be easily read. While passwords and user names are encoded, no encryption is used with basic authentication. The following describes the authentication procedure for basic authentication: The client prompts the user for user name and password credentials. The credentials are then encoded by the client and sent to the server. The user name is verified as being an account on the Microsoft Internet Security and Acceleration (ISA) Server computer or in a trusted domain of the ISA Server. To configure authentication methods for Web requests ==================================================== In the console tree of ISA Management, right-click the applicable array and then click Properties. Where? Internet Security and Acceleration Server Servers and Arrays Name On the Incoming Web Requests tab or on the Outgoing Web Requests tab, do one of the following: To add an Internet protocol (IP) address and configure its properties, click Add. To edit the properties of an IP address properties, click the IP address, then click Edit. Under Authentication, do one or more of the following: Click the Basic with this domain check box. Then, to select a domain other than the local domain, click Select domain and type the name of the desired domain. Click the Digest with this domain check box. Then, to select a domain other than the local domain, click Select domain and type the name of the desired domain. Click the Integrated check box. Click the Client certificate (secure channel only) check box. Notes To open ISA Management, click Start, point to Programs, point to Microsoft ISA Server, and then click ISA Management. If more than one authentication method is selected, then the client can authenticate using any of the specified authentication methods. Important Internet Explorer 5 supports all the authentication methods. Other Web browsers may support only the Basic authentication method. Be sure that the clients' Web browsers can use at least one of the authentication methods that you specify in an array's incoming Web request and outgoing Web request properties. Otherwise, the client will not be able to access the requested object. -----Original Message----- From: David Robertson [mailto:David Robertson] Sent: Saturday, December 27, 2003 7:43 AM To: fareed(a)iplex.co.zw Subject: Re: [SLE] windows 2000 network authentication On Saturday 27 December 2003 01:43, you wrote: > You can add clear text authentication in ISA or Proxy 2.0 > Check what other authetication types that may be available. > You could also specify your Suse static IP in your windoz proxy. The ip is dynamically allocated. How do I add clear text authentication in ISA? What files do I need to edit. Many thanks - I appreciate your help! David

1 0

deCSS
by Nick Selby 28 Dec '03

28 Dec '03

Anyone know of a reasonably easy decss program to copy DVDs to my hard drive (and then...perhaps...to a dvd?)

5 6

X problem in 9.0
by steve-ss 28 Dec '03

28 Dec '03

How can I login directly to kde after an update to 9.0 from 8.2? All I get is 320x210 screen that I have to login to and then logout to get the 'ordinary' kdm screen I used to have under 8.2. Please help. Thanks, Steve.

2 4

RE: [SLE] Updating the kernel using apt.
by GarUlbricht7＠netscape.net 28 Dec '03

28 Dec '03

Brian Galbraith <madmedic(a)mail15.com> wrote: > >Hi Folks > >Installed apt last night and am currently upgrading a lot of software. >I note that the kernel is included in this, and am a little nervous >about this. > >Will there be any surprises....do I have to mkinit_rd and adjust my >bootloader, or is this done automatically? > >Best Regards >Brian > Hi Brian, as I recall the scripts that come with the kernel upgrade, will remind you to do both "mkinit_rd" and update your boot loader if you are using "lilo" (grub does not need updating) You asked if there will be any surprizes, and hopefully the answer is "no.' However, it would be prudent to backup your old configurations and have a copy of your "old kernel" handy in case you have to go back to it. Frankly, I myself would not use "apt" to upgrade my kernel, but i know many do. YMMV. Good luck. HTH, Gar -- "The quickest way to get information on the web is not to ask a question, but to post the wrong information." - Aahz' Law (Restated) -- __________________________________________________________________ New! Unlimited Access from the Netscape Internet Service. Beta test the new Netscape Internet Service for only $1.00 per month until 3/1/04. Sign up today at http://isp.netscape.com/register Act now to get a personalized email address! Netscape. Just the Net You Need.

1 0

RE: [SLE] X problem in 9.0
by GarUlbricht7＠netscape.net 28 Dec '03

28 Dec '03

steve-ss <mail(a)steve-ss.com> wrote: > > How can I login directly to kde after an update to 9.0 from 8.2? > All I get is 320x210 screen that I have to login to > and then logout to get the 'ordinary' kdm screen I used to have > under 8.2. Please help. > >Thanks, Steve. > Steve, Unless I am missisng someting, and you are convinced it is not a bad install, it sounds like you are experiencing the common kde "hang-over" problem after an upgrade due to "left over files" in /tmp, etc. Curtis Rey a while back had a long thread on how to get KDE to behave after an upgrade or was it was just acting cranky. See: http://lists.suse.com/archive/suse-linux-e/2003-Jul/2981.html A trunckated version is: > Remove all KDE related directories in /tmp > then go into each home directory and remove .kde and .mcop*. > These directories will be recreated when the user logs back in. > They will be the default SuSE settings > but at least it should fix things that have been messed up. However, see his longer thread for details. HTH Friendly greetings, Gar -- __________________________________________________________________ New! Unlimited Access from the Netscape Internet Service. Beta test the new Netscape Internet Service for only $1.00 per month until 3/1/04. Sign up today at http://isp.netscape.com/register Act now to get a personalized email address! Netscape. Just the Net You Need.

1 0