November 2007 - openSUSE Users - openSUSE Mailing Lists

RE: [opensuse] limiting users who can use su
by James D. Parra 15 Nov '07

15 Nov '07

On Wednesday 14 November 2007 20:50:40 James D. Parra wrote: > Hello, > > Is there a way to control which user accounts can use 'su' when using ssh? > I want only a couple of users to be able to change to root when using ssh. Unfortunately, Richard Stallman wants everyone who can log in to a machine to have root access (see the end comment in "info:su"), so there is no built-in way in su of doing this What you can do is to change the ownership of /bin/su to the group "wheel", change the permissions on it to 4750, and add the users you want to have access to the wheel group Or, alternatively, you can remove access to su completely, and use sudo instead, which does allow more fine grained control, through /etc/sudoers ~~~~ Thank you. This is very helpful. ~James -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 2

[opensuse] How to Fix Wodim or roll back to cdrecord
by Matthew Stringer 15 Nov '07

15 Nov '07

Since upgrading to 10.3 I've not been able to burn CD's (DVD's are fine), I've tried this on several machines all with the same problem, didn't have problems on earlier versions of SUSE.. I tried installing cdrecord which enabled me to write CD's via the command line but K3B is still broken. From the command line wodim gives me: wodim -v -eject speed=16 driveropts=burnproof dev=/dev/scd1 ~/cd.iso wodim: No write mode specified. wodim: Asuming -tao mode. wodim: Future versions of wodim may have different drive dependent defaults. TOC Type: 1 = CD-ROM scsidev: '/dev/scd1' devname: '/dev/scd1' scsibus: -2 target: -2 lun: -2 Linux sg driver version: 3.5.27 Wodim version: 1.1.6 Driveropts: 'burnproof' SCSI buffer size: 64512 Device type : Removable CD-ROM Version : 5 Response Format: 2 Capabilities : Vendor_info : 'ATAPI ' Identification : 'CD-R/RW 24X10 ' Revision : 'P.MJ' Device seems to be: Generic mmc CD-RW. Using generic SCSI-3/mmc CD-R/CD-RW driver (mmc_cdr). Driver flags : MMC SWABAUDIO BURNFREE Supported modes: TAO PACKET SAO RAW/R16 RAW/R96R Drive buf size : 1630208 = 1592 KB Beginning DMA speed test. Set CDR_NODMATEST environment variable if device communication breaks or freezes immediately after that. FIFO size : 4194304 = 4096 KB Track 01: data 188 MB Total size: 217 MB (21:30.24) = 96768 sectors Lout start: 217 MB (21:32/18) = 96768 sectors Current Secsize: 2048 ATIP info from disk: Indicated writing power: 4 Is not unrestricted Is not erasable Disk sub type: Medium Type C, low Beta category (C-) (6) ATIP start of lead in: -11559 (97:27/66) ATIP start of lead out: 359846 (79:59/71) Disk type: Short strategy type (Phthalocyanine or similar) Manuf. index: 21 Manufacturer: Ricoh Company Limited Blocks total: 359846 Blocks current: 359846 Blocks remaining: 263078 Speed set to 2816 KB/s Starting to write CD/DVD at speed 16.0 in real TAO mode for single session. Last chance to quit, starting real write i 0 seconds. Operation starts. Waiting for reader process to fill input buffer ... input buffer ready. Performing OPC... Starting new track at sector: 0 Track 01: 1 of 188 MB written (fifo 100%) [buf 66%] 0.9x.Errno: 5 (Input/ output error), write_g1 scsi sendcmd: no error CDB: 2A 00 00 00 03 07 00 00 1F 00 status: 0x2 (CHECK CONDITION) Sense Bytes: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF Sense Key: 0xF Reserved, Segment 255 Sense Code: 0xFF Qual 0xFF (vendor unique sense code 0xFF) [No matching qualifie r] Fru 0xFF Sense flags: Blk -1 (valid) file mark detected end of medium illegal block lengt h cmd finished after 1.602s timeout 40s write track data: error after 1587200 bytes wodim: A write error occured. wodim: Please properly read the error message above. Writing time: 19.116s Average write speed 67.6x. Fixating... Fixating time: 44.059s wodim: fifo had 89 puts and 26 gets. wodim: fifo was 0 times empty and 14 times full, min fill was 92%. Thought about uninstalling all the CD/DVD packages and then installing the ones from 10.2 but if there's a simpler solution then it would be helpful. Regards Matthew -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] some mount problem ----for suse 10.0
by Kalvin Weng 15 Nov '07

15 Nov '07

Dear All , here is some log file ,if you can give me some help aoubt the problem ....thanks a lot ... Nov 14 19:12:29 genesis11 automount[6912]: >> Please refer to the WARNINGS section of the nfs(5) manual page. Nov 14 19:18:15 genesis11 kernel: RPC: error 5 connecting to server 10.90.32.1 Nov 14 19:19:10 genesis11 automount[6943]: aquire_lock: can't lock lock file timed out: /var/lock/autofs Nov 14 19:19:10 genesis11 automount[6943]: mount(nfs): warning: /auto/prepare_job is already mounted Nov 14 19:19:15 genesis11 kernel: RPC: error 5 connecting to server 10.90.32.1 Nov 14 19:19:15 genesis11 automount[6939]: >> mount: 10.90.32.1:/Part: can't read superblock Nov 14 19:19:15 genesis11 automount[6939]: mount(nfs): nfs: mount failure 10.90.32.1:/Part on /auto/part Nov 14 19:19:15 genesis11 automount[6939]: failed to mount /auto/part Nov 14 19:20:24 genesis11 kernel: RPC: error 5 connecting to server 10.90.32.1 Nov 14 19:21:24 genesis11 kernel: RPC: error 5 connecting to server 10.90.32.1 Nov 14 19:21:24 genesis11 automount[6946]: >> mount: 10.90.32.1:/Part: can't read superblock Nov 14 19:21:24 genesis11 automount[6946]: mount(nfs): nfs: mount failure 10.90.32.1:/Part on /auto/part Nov 14 19:21:24 genesis11 automount[6946]: failed to mount /auto/part Nov 14 19:27:10 genesis11 automount[6960]: >> nfs server reported tcp not available, falling back to udp Nov 14 19:27:10 genesis11 automount[6960]: >> Using NFS over UDP can cause data corruption. Nov 14 19:27:10 genesis11 automount[6960]: >> Please refer to the WARNINGS section of the nfs(5) manual page. Nov 14 19:38:23 genesis11 syslog-ng[4629]: STATS: dropped 0 Nov 14 19:44:53 genesis11 automount[7003]: >> nfs server reported tcp not available, falling back to udp Nov 14 19:44:53 genesis11 automount[7003]: >> Using NFS over UDP can cause data corruption. Nov 14 19:44:53 genesis11 automount[7003]: >> Please refer to the WARNINGS section of the nfs(5) manual page. Nov 14 20:30:31 genesis11 automount[7125]: >> nfs server reported tcp not available, falling back to udp Nov 14 20:30:31 genesis11 automount[7125]: >> Using NFS over UDP can cause data corruption. Nov 14 20:30:31 genesis11 automount[7125]: >> Please refer to the WARNINGS section of the nfs(5) manual page. Nov 14 20:38:23 genesis11 syslog-ng[4629]: STATS: dropped 0 Nov 14 21:16:18 genesis11 automount[7228]: failed to mount /auto/rout_job Nov 14 21:32:04 genesis11 automount[7261]: >> nfs server reported tcp not available, falling back to udp Nov 14 21:32:04 genesis11 automount[7261]: >> Using NFS over UDP can cause data corruption. Nov 14 21:32:04 genesis11 automount[7261]: >> Please refer to the WARNINGS section of the nfs(5) manual page. Nov 14 21:32:13 genesis11 automount[7266]: >> nfs server reported tcp not available, falling back to udp Nov 14 21:32:13 genesis11 automount[7266]: >> Using NFS over UDP can cause data corruption. Nov 14 21:32:13 genesis11 automount[7266]: >> Please refer to the WARNINGS section of the nfs(5) manual page. Nov 14 21:32:35 genesis11 automount[7268]: >> nfs server reported tcp not available, falling back to udp Nov 14 21:32:35 genesis11 automount[7268]: >> Using NFS over UDP can cause data corruption. Nov 14 21:32:35 genesis11 automount[7268]: >> Please refer to the WARNINGS section of the nfs(5) manual page. This e-mail and any attachment may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorised copying, disclosure or distribution of the material in this e-mail is strictly forbidden. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] WiFi Card Problem
by Dennis J. Tuchler 15 Nov '07

15 Nov '07

Last year, I plugged in a Ubiquiti PCI card under SuSE 10.2. It recognized the card as one using an Atheros driver. 10.3 does not recognize the card -- just that there is one. I plugged the card into my Dell Inspiron 8600 PCMCI slot, went to Yast2->Network Devices -> Network settings. The card was listed as unconfigured "because the kernel device is not present." How do I fix this? -- Best regards, Dennis J. Tuchler 7330 Kingsbury Boulevard University City, Missouri 63130 -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

6 11

[opensuse] limiting users who can use su
by James D. Parra 15 Nov '07

15 Nov '07

Hello, Is there a way to control which user accounts can use 'su' when using ssh? I want only a couple of users to be able to change to root when using ssh. Thank you, James -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

6 7

RE: [opensuse] limiting users who can use su
by James D. Parra 15 Nov '07

15 Nov '07

-----Original Message----- From: Druid [mailto:marcio.ferreira@gmail.com] Sent: Wednesday, November 14, 2007 11:57 AM To: opensuse(a)opensuse.org Subject: Re: [opensuse] limiting users who can use su chown /bin/su binary so it can be only executed by people in a certain group (by tradition, its usually called wheel group) Somewhere in this url it sasy how: http://www.cromwell-intl.com/security/linux-hardening.html On Nov 14, 2007 5:50 PM, James D. Parra <Jamesp(a)musicreports.com> wrote: > Hello, > > Is there a way to control which user accounts can use 'su' when using ssh? I > want only a couple of users to be able to change to root when using ssh. ~~~~~~~ Perfect. Thank you. This is the kind of response I needed. For internal reasons, that I don't wish to go into here, there are uses who get the root passwd from other users 'just becuase they needed to'. Again, I don't want to go into details, however the above response will help be me get around this problem. Many thanks and much obliged. ~James -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 2

[opensuse] A New-Old KDE question
by Daniel Feiglin 15 Nov '07

15 Nov '07

Hello folks! Does anyone know where KDE stores the current position & size of objects on the desktop, particularly icons? I have a large number of icons on my desktop organized into functional groups. After an X crash and recovery, the desktop icon layout is messed up. ( A typical scenario is X or KDE or the keyboard and mouse freezing up. The the only way out of it, is to telnet in from another system on the network, su and init 3. If that fails, you can force a reboot.) It would be nice to force KDE to write back this stuff on demand or every n minutes. Daniel

3 3

[opensuse] nagios host validation problem
by Georg 15 Nov '07

15 Nov '07

Hello, i use nagios-plugins 1.4.5 on opensuse 10.2 and have the problem to check a host via snmp which has a singe character in its hostname. # /usr/lib/nagios/plugins/check_ifoperstatus -H blabla.x.mydom.loc -C mycomm -v 1 -k 1 -t 30 -D w returns error / syntax. same command on blabla.xy.mydom.loc works fine. patching as follows soved the problem: --- /usr/lib/nagios/plugins/utils.pm.old 2006-11-28 00:26:07.000000000 +0100 +++ /usr/lib/nagios/plugins/utils.pm 2007-11-14 20:41:00.000000000 +0100 @@ -60,7 +60,7 @@ } else { return 0; } - } elsif ($host1 =~ m/^[a-zA-Z0-9][-a-zA-Z0-9]+(\.[a-zA-Z0-9][-a-zA-Z0-9]+)*\.?$/) { + } elsif ($host1 =~ m/^[a-zA-Z][-a-zA-Z0-9]*(\.[a-zA-Z][-a-zA-Z0-9]*)*\.?$/) { return 1; } else { return 0; http://tools.ietf.org/html/rfc1035 says: "...There are also some restrictions on the length. Labels must be 63 characters or less. For example, the following strings identify hosts in the Internet: A.ISI.EDU XX.LCS.MIT.EDU SRI-NIC.ARPA" is this a bug in nagios? regards, georg -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] NetworkManager-OpenVPN
by Terje J. Hanssen 15 Nov '07

15 Nov '07

My question is how to apply NetworkManager as an easier GUI connection for OpenVPN? I already has a working OpenVPN setup to connect from a local openSUSE 10.3 OpenVPN client to an external OpenVPN server. As root in a Gnome terminal the procedure to do this is as follows: # cd /etc/openvpn # openvpn --config myconfigfile.ovpn ...enter the password I have installed the following OpenVPN and NetworkManager packages on my local openSUSE 10.3/Gnome desktop (merged with KDE): openvpn-2.0.9-44 NetworkManager-gnome-0.6.5-37.2 NetworkManager-glib-0.6.5-37.2 NetworkManager-openvpn-kde-0.2r674918-55 NetworkManager-openvpn-gnome-0.3.2cvs20060202-173 NetworkManager-kde-0.2r674918-55 NetworkManager-0.6.5-37.2 NetworkManager-openvpn-0.3.2cvs20060202-173 The only related tools I can see on the Computer>More Applications>System menu are: KNetworkManager VPN Connection Manager (-add, remove and edit VPN connections) Network Manager Editor If I try to start i.e KNetworkManager, the applet added to the gnome panel tells that Network Manager is not running....... Suggestion what and how to setup NetworkManager as a "click and run gui tool" to connect with the OpenVPN client? --Terje J. Hanssen -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

4 6

[opensuse] feature rich website design software for Linux?
by Zhang Weiwu 15 Nov '07

15 Nov '07

Dear all My friend have finished courses of HTML and CSS (I'd like to say, she got it pretty well) and now is able to work out websites with gedit. She is starting her web design career. Now I am helping her to find out a webside design software for her Linux-based working environment. Screem and nvu are not good enough for her, she can work with them but commercial products like GoLive, Macromedia Dreamweaver should be more productive. I also read advertisements from CoffeeCup which also look productive. However non of them have Linux version. nvu is very good for document authors (I use it to work out most of our office documents) and simple web page creation, but not complex ones, e.g. it's not so easy to create an absolutely positioned <div> in nvu and drag it to the place you want. It's more content oriented than presentation oriented. In general content oriented websites are better, but in practise requirements are usually presentation related. screem is very good for me, because it fits my way of working. But for web artist who spend most time considering the look of the website, it is not so convenient. Put it simple, most web designers simply do not work in the way I work (with screem) but more in the way dreamweaver works. I remember long time ago I had tried IBM Homepage Builder, which I cannot recall but should have a Linux version. This software also allow easy web design like simple drag & drop. However this software seems to be replaced by IBM's Rational Web Developer for WebSphere. I am going to try this, meanwhile post this information to the mailing list: what do you think is the best web design software available for professional web designer (but not application designer) on Linux? non-free commercial software is welcomed! Best regards -- Real Softservice Huateng Tower, Unit 1788 Jia 302 3rd area of Jinsong, Chao Yang Tel: +86 (10) 8773 0650 ext 603 Mobile: 135 9950 2413 http://www.realss.com -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

11 20