December 2004 - openSUSE Users - openSUSE Mailing Lists

ULB GNOME 2.8.0.2
by James Ogley 05 Apr '05

05 Apr '05

Available today: ULB GNOME 2.8.0.2 This is a minor revision, not a full desktop upgrade. It includes netapplet, the seriously cool network switcher, as well as updated gnome-vfs2 and libgnome packages to use Firefox as the default browser, cos I've just fallen in love with it over the last few months - so it now depends upon SuSE's MozillaFirefox package (from the mozilla apt component) (Note: built for SuSE 9.1) -- James Ogley james(a)usr-local-bin.org GNOME for SuSE: http://usr-local-bin.org/rpms

2 4

Re: [SLE] Time synch problem
by Carlos E. R. 23 Feb '05

23 Feb '05

El 2003-07-09 a las 13:37, C Hamel escribió: (You forgot to post to the list) > I am afraid I don't even know how to ask a question, at this point, but I'll > make an attempt: Exactly where should this ntp thing be called to set the > clock ...or(/and) by what process? It is a very proper question :-) Well, it depends. There are two ways. If your computer is up all the time, and has a permanent network connection, you can use the ntpd daemon, which polls a set of servers about once a minute, and _very_ slowly adjusts the system clock; it can even note the systematic error or drift, and take that in to account to discipline the system clock. There are many options available for the daemon: see full doc in: http://localhost/usr/share/doc/packages/xntp-doc/html/index.htm Or, you may have a temporary network connection, like I do; I will explain this in some detail. We can adjust the clock to "internet" time, once, sometime after we connect to internet. This, apparently, can be done with the daemon, using some option I don't fully understand. Or we can use ntpdate - a program which is to disappear some time in the future, but that I use, and SuSE uses as well in its own script. For this, we can simply call "/etc/init.d/xntpd ntptimeset" - and assume that when "ntpdate" finally disappears SuSE will adjust the script appropriately ;-) Of course, /etc/ntp.conf has to be configured; at least, it must have a list of servers: server IP_address server name_address This is sufficient for "xntpd ntptimeset" to work; just leave the rest of the config at the default values. If you want to use the daemon, then I'm not the person to ask :-) Ok, so when is the appropriate time to make this time adjust? Well, ideally, during system boot-up, after network connection is established. This is done properly by the service xntpd, if enabled. The SuSE script "/etc/init.d/xntpd start" does first a clock set using ntpdate, if the variable XNTPD_INITIAL_NTPDATE is set to "AUTO". Then, it starts the daemon to keep time synchronized. And, if our network connection is not permanent? Then, the script "/etc/ppp/poll.tcpip", which is called from "/etc/ppp/ip-up", will adjust the clock first thing: assuming we have some servers configured, it will be done every time we connect to internet with the modem. I do it differently, only once every five times, and I also update the hwclock. The danger of this method is that the clock might suddenly go forward or backward a bit (seconds or hours, it depends): not very nice on a *nix system, but we can not avoid it. More details to be aware of: what happens to the hardware or CMOS clock? Well, the script "/etc/init.d/boot.clock" (read it, it is documented) does this sequence of things (using the command "hwclock") before starting system services: - Create if it doesn't exist, the file "/etc/adjtime" - Adjust hardware clock (CMOS) for known drift during the time the computer has been off; this depends on the previous file to work. - Copy CMOS clock (hardware) to system time (CPU and OS maintained). After this, the system goes fully up, and maybe, the clock is adjusted from the internet or by hand (danger!). But (and this is very different than windows) the CPU maintained clock has to be copied back to the CMOS, because the kernel doesn't do it. SuSE does it in the script "/etc/init.d/halt" that copies system time to hardware time just before power off. Me, I prefer to do it just after I adjust to network time, inside "ip-up.local", like this: /usr/sbin/rcxntpd ntptimeset /sbin/hwclock --systohc More things to be aware of: a common mistake is manually adjusting the system clock from kde control center (for example), and not updating the hwclock at the same time: the drift adjust algorithm of hwclock thinks that the CMOS clock is fast or slow by the same amount you adjusted the clock, and the next boot it will adjust the time by several hours... The solution is to delete "/etc/adjtime" and call "/sbin/hwclock --systohc" just then (documented on the SuSE sdb). Well, this has been enough chatter on my part; let's hope I didn't make many mistakes :-) -- Saludos Carlos Robinson

3 7

How to control text session?
by Oxiel Contreras 16 Feb '05

16 Feb '05

Hello gurus I don't need VNC. How can i take control of another text session in my server (ssh/telnet), i want to help my users with their work, i want to see and correct what they type in their screen. Tried ttysnoop but with no results. Greetings Oxiel

5 9

rkhunter-1.1.9-1.ps.noarch.rpm available
by Patrick Shanahan 12 Feb '05

12 Feb '05

rkhunter-1.1.9-1.ps.noarch.rpm is available for download: http://wahoo.no-ip.org/~pat/rkhunter-1.1.9-1.ps.noarch.rpm Rootkit Hunter scans files and systems for known and unknown rootkits, backdoors, and sniffers. The package contains one shell script, a few text-based databases, and optional Perl modules. It should run on almost every Unix clone. This release contains support for RH-Sharpe's rootkit and the SHV5 rootkit, a special test for tripwire, metalog (syslog), and support for many new distributions. Many MD5 hashes have been added to the database, and some code/documentation cleanup has been performed. Description Rootkit scanner is scanning tool to ensure you for about 99.9%* you're clean of nasty tools. This tool scans for rootkits, backdoors and local exploits by running tests like: - MD5 hash compare - Look for default files used by rootkits - Wrong file permissions for binaries - Look for suspected strings in LKM and KLD modules - Look for hidden files - Optional scan within plaintext and binary files Rootkit Hunter is released as GPL licensed project and free for everyone to use. * No, not really 99.9%.. It's just another security layer * 1.1.9 (28/12/2004) New: - Added RH-Sharpe's rootkit (rootkit) - Added SHV5 rootkit (rootkit) - Added special test for tripwire - Added support for metalog (syslog daemon) - Added support for ALTLinux 2.2 and 2.4 - Added support for CentOS 3.3 - Added support for Gentoo 1.6 - Added support for FreeBSD 4.10 (alpha platform) - Added support for SuSE SLES8. Thanks to Mario Lenz - Added support for SuSE 9.2 (i586) - Added support for Fedora Core 3 - Added support for Red Hat Enterprise Linux ES/WS release 4 - Added hashes for Fedora Core 3. Thanks to Steph - Official port is now available for ALTLinux - Change text when an old software package has been found. This will happen with backporting operating systems (Red Hat, Fedora etc) Changes: - Improved logging for lsof test - Updated hashes for Fedora Core 1 - Updated hashes for Debian woody - Updated hashes for Red Hat Enterprise Linux ES/WS release 3 - Updated hashes for Slackware 9 - Updated hashes for Slackware 10 - Updated hashes for SuSE 9.1 - Updated wishlist/todo, updated readme and manpage. - Code cleanup (added more remarks, cleanup of old/buggy things).. - Improved logging Bugfixes: - Changed binary search path due typo. Thanks to Bertrand author: Michael Boelen <michael(a)rootkit.nl> http://www.rootkit.nl -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/photos

4 5

Grip fails rip on SCSI CDROM after 2.6.8-24.10 upgrade (9.2)
by Philip Amadeo Saeli 30 Jan '05

30 Jan '05

[SUSE Linux 9.2 Professional] After the kernel upgrade to 2.6.8-24.10, Grip no longer will rip audio CDs. The Rip: progress indicator only blips for an instant than goes to Idle status. The Enc: progress indicator goes through all the tracks, spending approx 2-3 seconds on each track then finishes as if all was OK. However, no files are generated at all! Some clues: - Syslog has messages: "Dec 29 15:32:35 xxxxx kernel: sr0: CDROM not ready. Make sure there is a disc in the drive." - Running strace on Grip shows the following (in one of the threads): "write(20, "Unable to open cdrom drive.\n", 28) = 28" However, the open on /dev/sg0 succeeds earlier in the trace. All of the needed devices have appropriate permissions: - /dev/scd0 - /dev/sg0 I am using Grip's buil-in cdparanoia for ripping. Has anyone else encountered this? Everything was working just fine last week and there have been no hardware changes. I can find no other error messages!?! BTW, this system has all of the 9.2 security patches installed (via YOU). BTW, anyone know of any other audio CD rippers/encoders? Thanks, Phil -- Philip Amadeo Saeli SuSE Linux 9.2 psaeli(a)zorodyne.com

4 3

Apex/Digitrex/Colorado DSC-3500Z Camera?
by doc 18 Jan '05

18 Jan '05

I bought my wife one of the $$59.95 (with $20. rebate) digital cameras on sale at TigerDirect. It is labeled Digitrex DSC-3500Z but appears as an Apex on some Google searches and shows up under Yast as a Colorado Digital Camera. It is not detected by Digikam under Suse 9.1 or 9.2. Anyone talking to one of them under Suse? I am going to set it to use the SD card only for now because I can access that ... will pull the Christmas Eve images off the internal 16m of memory using the Office laptop if necessary. -- Thanks! & 73, doc kd4e A blessed and joy-filled Christ-mas to all! West Central Florida 100% Linux. Suse 9.2 Hallicrafters, Heathkit, Homebrew, TenTec, Yaesu Radio Life: http://www.gospelcom.net/twr/ Linux-Incompatible hardware is defective! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

3 2

Traffic shaping questions (NAT, Bursting etc)
by Richard Curtis 17 Jan '05

17 Jan '05

I am looking into setting up bandwidth limiting using cbq on Suse 9.1. I have a few questions though before I spend hours reading the man pages as they are quite heavy going. 1). Are there any quirks or issues using the 2.6 kernels ? 2). Will this work on a firewall that is using NAT ? Because all the traffic going out originates from the same IP. 3). Is it possible to use traffic shaping to split a connection (ADSL) four ways, so each user is guaranteed a quarter of the bandwidth, and also, to allow the other users to share unused bandwidth while a user is offline ?? 4). Can anyone point me at some documentation on this - howto's or examples ? The examples I have seen are all fairly complex. Thanks for any help people can offer. Richard

6 7

Backup utility: does it exist?
by Paul W. Abrahams 12 Jan '05

12 Jan '05

I'm looking for a utility to be used for a disk-to-disk backup that recurses through a directory and does the following for each file and subdirectory: 1. If the backup file exists but the original doesn't, the backup is deleted. 2. If the backup file exists and is as new as the original, no copying is done. 3. If the backup file does not exist, the original is copied to the backup. I could certainly write a shell script using "find" for doing this, but I wonder if there's some handy-dandy utility around that already does it for me. Paul

17 40

aic7xxx_abort returns 0x2000 on SuSE 9.1 Pro
by Jason Joines 11 Jan '05

11 Jan '05

I've recently upgraded from SuSE 8.1 Pro to SuSE 9.1 Pro via a fresh install and am having big problems. I'm running a Dell PowerEdge 2550 with an integrated Adaptec Ultra3 AIC-7899, IBM Ulstrastar Ultra320 73 GB drive, and kernel is latest via YaST of 2.6.5.7-104-default. This is the same setup I've used for a long, long time with no problems under 8.1 Pro. At what seems to be completely random times I get tons of I/O errors and the machine completely ceases to function. I have syslog turned all the way up but nothing gets logged to syslog. Ocassionally I get to tty10 quickly enough to see: aic7xxx_abort returns 0x2000 SCSI error : <0 0 0 0> return code = 0x6000000 end_request: I/O error, dev sda, sector "varies but most recently 81773499". I've tried mutiple known good drives but the same problem occurs so unless I've had mass hard drive failures across multiple systems all at once, I'm fairly certain it's not a hard drive problem. I'm using the aic7xxx module. I noticed that there's also an aic7xxx_old module available via modprobe -l | grep -i aic7. If I used YaST to look at possible modules, it shows aic79xx and aic7xxx as suggestions. Any ideas? Should I try one of these other two modules? The latest 2.6.x-cvs kernel from SuSE's ftp site? Compile my own from kernel.org? Go back to 2.4 based system?.... Also, any good way to get some logging on this? I have cron sending the output of dmesg and a few other things to a file every ten minutes to try and catch something but it hasn't worked so far with gibberish being appended to and corrupting the file. Thanks, Jason Joines =================================

1 2

Where's kpgp in SuSE 9.1?
by James Knott 11 Jan '05

11 Jan '05

In SuSE 9.0, there's a front end for gpg called kgpg. However, it doesn't seem to be included in the 9.1 DVD or on the SuSE website. Any idea where it might be? tnx jk

5 9