June 2005 - openSUSE Users - openSUSE Mailing Lists

What's Up with John the Ripper?
by Randall R Schulz 22 Jun '05

22 Jun '05

Hi, A week or so ago I installed the "secchk" package. When the first weekly report came out, it included the statement "Password security checking not possible, package john not installed." So I installed this "john" package. I decided to run a manual check. That was nearly 48 hours ago and it's still running! I have a 3.0 GHz HT CPU and there are 46 lines in my /etc/shadow file. Is this normal? If so, what the hell good is this program? I can't possibly have multi-day processes running on a weekly basis. Can anybody tell me if this is to be expected? Is there a way to invoke it to make it run in a more reasonable amount of time? Thanks. Randall Schulz

2 1

Was My Brand Spanking New SUSE 9.2 Installation Hacked First 12 Hours Online?
by Paul Grope 22 Jun '05

22 Jun '05

The only services running were Apache2 and SSH, configured out of the box. Firewall configured out of the box. Left the office at 7:30 pm. >From home, I logged in via ssh. That was about 9:30 pm. This morning tried to log in from home (about 8 am) but ssh connection refused. When I arrived in the office (about 9 am) I inspected the box and found very little to suggest an intrusion. A couple of clues/curiosities. There was one entry in the httpd log in the middle of the night. A whole bunch of entries in message and warning log written by postfix indicating that postfix not running. Most curious of all is that when I tried to create files as root, I learned that the system was read-only. I tried to create a file in the "/root" and "/" file systems. Does any of this mean anything to anybody?

2 1

Interesting
by Andre Venter 22 Jun '05

22 Jun '05

http://redmondmag.com/features/article.asp?EditorialsID=485

2 3

Run Jobs as Different User
by Scott Leighton 22 Jun '05

22 Jun '05

Tried googling, but I must not be asking the right question cause I'm coming up with nada. I'm setting up a SuSE box to run a ton of production jobs. Most are handled via cron, so on those it's simple to specify the user they should run under. There are a couple of jobs that must be initiated by normal users, but these jobs must run from a special user that has permissions far greater than the normal user. The jobs are all bash shell scripts, how can I set it up so user A can submit a background shell job under User B? Note: One further complication, I envision user A firing off the job via a web page, probably a perl cgi script that would actually be running as wwwrun on that same box, so user A isn't really logged onto the box. Scott -- POPFile, the OpenSource EMail Classifier http://popfile.sourceforge.net/ Linux 2.6.11.4-21.7-default x86_64

3 2

Backing up a Motorola Mobile
by Sean Rima 22 Jun '05

22 Jun '05

I tried googling for this but cold not find anything. I used to back my Motorola V550 using the MPT that come with it but I don't know if it will work under wine and would prefer a native app. Does anyone know of anything that will do Sean -- Mr and Mrs PED, can I borrow 26.7% of the RAYON TEXTILE production of the INDONESIAN archipelago?

7 14

root partition not umounting?
by Tathagata Banerjee 22 Jun '05

22 Jun '05

hi. i recently installed 9.3 pro (from the 5-cd set, not the dvd). all's well except the root partition, which is probably not umounting at shutdown time. the shutdown sequence says "umounting hdb6", but at the next boot it still does an XFS recovery on that partition. this was not the case in 9.2, where XFS recovery ran only when there was an unclean shutdown. just to check what was happening, i used the magic-sysrq combos to sync the disks, remount the partitions r/o, kill all tasks, and instant-reboot. upon the subsequent boot, there was no XFS recovery. i don't thnk it's an XFS driver issue, because the other XFS partitions don't have this problem. here's my partition structure: hdb1 /boot ext3 50 mb hdb5 swap 500 mb hdb6 / xfs 10 gb hdb7 /home xfs 105 gb only hdb6 has the problem, the others are fine. i applied almost all relevant patches through YOU, but the problem persists. ok - i didn't install the kernel patch because that broke the system once on 9.2, and i'm slightly phobic about it. if the kernel patch is a sure cure for this, i'll try it. but if it isn't, i'd rather try other options first. thanks in advance. - t. -- cogito, ergo es.

6 19

SLES8 and adaptec 2230S
by Dmitry Melekhov 22 Jun '05

22 Jun '05

Hello! Is it possible to install SLES8/x86 on this raid controller? I see that it is not supported by latest SLES8 kernel, but there are driver disks on adpactec.com. Only problem is "The presence of a build product does not imply that the product has been tested, merely that it passed the compilation test." So, I'd like to know is it possible to install SLES8 using these driver disks. btw, I wanted to ask Adaptec, but I can't contact support- they wnat product serial number, but I want to know before I'll buy ;-) Thank you!

2 2

Re: Fwd: Re: Fwd: RE: [SLE] Using Samba
by Jerome Lyles 22 Jun '05

22 Jun '05

On Monday 20 June 2005 10:09 pm, Jerome Lyles wrote: > ---------- Forwarded Message ---------- > > Subject: Re: Fwd: RE: [SLE] Using Samba > Date: Sunday 19 June 2005 00:56 > From: Ken Schneider <suse-list(a)bout-tyme.net> > To: suse-linux-e(a)suse.com > > On Sat, 2005-06-18 at 21:16 -1000, Jerome Lyles wrote: > > On Saturday 18 June 2005 05:27 pm, Susemail wrote: > > > > If you want to use user security then you need to add smb users with > smbpasswd, at least that has always solved it for me. > man smbpasswd for more info. You can also set samba to automatically > add/remove user access when linux users are added/removed. > Hello Ken, Adding myself as a user (as root) using smbpasswd didn't produce access. Trying to change my password as user using smbpasswd produced this: :~> smbpasswd Old SMB password: New SMB password: Retype new SMB password: machine 127.0.0.1 rejected the (anonymous) password change: Error was : No such user. Failed to change password for user But the user is in the smbpasswd file: # cat /etc/samba/smbpasswd ... user:1000:FCF29D3EC14322D993E28745B8BF4BA6:... The comments in the smbpasswd file state: # This file is the authentication source for Samba if 'passdb backend' is set # to 'smbpasswd' and 'encrypt passwords' is 'Yes' in the [global] section of # /etc/samba/smb.conf # # See section 'passdb backend' and 'encrypt passwords' in the manual page of # smb.conf for more information. I put 'encrypt passwords' is 'Yes' in the [global] section but nothing changed. I think because 'passdb backend' is not set to 'smbpasswd'. Man smb.conf says smbpasswd is the default backend, but there are others: smbpasswd - The default smbpasswd backend. Takes a path to the smbpasswd file as an optional argument. tdbsam - The TDB based password storage backend. Takes a path to the TDB as an optional argument (defaults to passdb.tdb in the private dir directory. ldapsam - The LDAP based passdb backend. Takes an LDAP URL as an optional argument (defaults to ldap://localhost) LDAP connections should be secured where possible. This may be done using either Start-TLS (see ldap ssl) or by specifying ldaps:// in the URL argument. Multiple servers may also be specified in double-quotes, if your LDAP libraries supports the LDAP URL notation. (OpenLDAP does). nisplussam - The NIS+ based passdb backend. Takes name NIS domain as an optional argument. Only works with sun NIS+ servers. mysql - The MySQL based passdb backend. Takes an identifier as argument. Read the Samba HOWTO Collection for configuration details. There is a file called 'secrets.tdb' ,it's a binary file. Which backend does it belong to? I think it's ldapsam. man:smb.conf states: There are a number of ways in which a user can connect to a service. The server uses the following steps in determining if it will allow a connection to a specified service. If all the steps fail, the connection request is rejected. However, if one of the steps succeeds, the following steps are not checked. If the service is marked ``guest only = yes'' and the server is running with share-level security ``security = share'', steps 1 to 5 are skipped. 1. If the client has passed a username/password pair and that username/password pair is validated by the UNIX system's password programs, the connection is made as that username. This includes the serverrvice%username method of passing a username. I am passing a username/password pair that is validated by the UNIX system's password programs, yet the connection is not made.?? > -- > Ken Schneider > UNIX since 1989, linux since 1994, SuSE since 1998 > > "The day Microsoft makes something that doesn't suck is probably > the day they start making vacuum cleaners." -Ernst Jan Plugge > > > -- > Check the headers for your unsubscription address > For additional commands send e-mail to suse-linux-e-help(a)suse.com > Also check the archives at http://lists.suse.com > Please read the FAQs: suse-linux-e-faq(a)suse.com > > -------------------------------------------------------

2 1

Re: [SLE] Terminal emulation between SCO-Unix, Hotkey, Telnet and Suse
by Mark Gray 22 Jun '05

22 Jun '05

Chadley Wilson <chadley(a)pinteq.co.za> writes: > Greetings, > > I am having a real tough time with Terminal emulation, more specifically on > the SCO-Unix boxes, > > any one heard of or seen an error like " got tint " when hitting the backspace > key? > > The second issue I have is simply strange, and only happens on the Suse9.3 > PCs, > > The enduser uses hotkey to telnet to our central dailing server,a SCO-Unix > box. From there they dial-out to our sites, via a selection of 32 modems. > The question is how come the terminal emulation is so frustratingly slow when > connecting to the Suse 9.3 boxes. > > But theres a catch. If I telnet into the SCO box from a 9.3 on tty or konsole > in X, and connect to one of the "extremely slow in HOTKEY" boxes it work s > perfectly. After thinking for awhile -- this sounds like a termcap problem. The termcap entries for one are so simplistic that considerable data traffic is necessary in order to accomplish anything, whereas the other has a complete termcap which allows a lot of high level cursor manipulation. > I can't seem to find any relevant docs, that cover this topic in detail, could > some please point me in some direction here. See man 5 termcap, and take a look at /etc/termcap on the respective machines for the termcap entry which is being used for the given setting of the TERM variable. For my favorite terminal (rxvt): markgray@soyo:~> set|grep -i term COLORTERM=rxvt TERM=xterm For konsole: markgray@soyo:~> set|grep -i term COLORTERM= TERM=xterm markgray@soyo:~> For linux console: COLORTERM=1 TERM=linux > I need a better understanding of the underlying factors at work here. When coupled with the utf8 situation I mentioned in my previous post, incomplete or inaccurate termcap entries sound like important factors to look into (but I am merely guessing here.)

2 1

usb webcam
by Paul Harrowsmith 22 Jun '05

22 Jun '05

Hi all I have a Trust 320 spacecam (usb webcam) and this is the result when i try xawtv. ~> xawtv -c /dev/video0 This is xawtv-3.94, running on Linux/i686 (2.6.11.4-21.7-default) can't open /dev/video0: Function not implemented v4l-conf had some trouble, trying to continue anyway v4l2: open /dev/video0: Function not implemented v4l2: open /dev/video0: Function not implemented v4l: open /dev/video0: Function not implemented no video grabber device available I've spent 2 days trying to find a solution to the function not implemented but can't find anything in either the suse knowledge base or Google. Any pointers would be much appricated thanks Paul

4 8