November 2007 - openSUSE Users - openSUSE Mailing Lists

[opensuse] Hacking Display Manager - Replacing GDM with ACDM
by Chee How Chua 29 Nov '07

29 Nov '07

Hi, I'm trying to replace GDM with a smart card reader login screen ACDM. The software that came with the smart card reader doesn't work well on Linux. I'm thinking of hacking the configuration files manually to get things to work. In my workplace, I'm tasked with setting up a trial deployment with SLED and SLES at a rather big organization. They want to test whether their applications can run well on Linux; they are deliberating between Vista and Linux (notably SLED) as workstation replacements. One of their requirements is to use a smart card as the third authentication factor for users to login. Therefore, the normal GDM login screen that we see with default SLED/SLES/openSUSE need to be replaced with the display manager for the smart card reader. The software for the smart card reader in this case is ActivIdentity. Now ActivIdentity does provide the files for replacing the GDM. However, the installation script provided by them seems to be ill-tested. I say this because the installation is SUPPOSED to replace the GDM display manager with its display manager ACDM. Needless to say, it didn't work. I looked through the source code of their script and realised that one portion of the script that was supposed to patch the XDM file at /etc/init.d/xdm didn't run correctly. I then patched that part up manually. Lo and behold, it works! At least I thought it did. The display manager upon bootup shows ACDM instead of GDM. However, after entering my username and password, ACDM died and brought me to the console login screen (CTL+ALT+F1). The reason I'm enthusiastic about making this work is because this organization is quite big in my country, Singapore, and the deployment of Linux in their workplace will make the news, or encourage other organizations here to adopt Linux. What I can think of now is to hack the display manager configurations to find out what went wrong. I was wondering if any of you guys have any pointers for me or are able to direct me to any resource that describes the architecture of the display manager. I already tried to search online for anything related to ActivIdentity but there is nothing useful at all. The documentation that comes with the software is not helpful in solving this problem. Thanks in advance! -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

5 7

[opensuse] Redesign of YaST Control Center
by Thomas Goettlicher 29 Nov '07

29 Nov '07

Hi everyone, we want to redesign the YaST Control Center. Therefore we are looking for a radical new design. This is your chance to share your ideas regarding YaST Control Center. Please feel free to contribute with mockups and (unconventional) ideas here: http://en.opensuse.org/YaST/Development/New_Control_Center Thanks, Thomas --- SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

51 210

[opensuse] xsane/kprinter question
by Istvan Gabor 29 Nov '07

29 Nov '07

Hello list user: I frequently use xsane's copy function to save the scanned document directly to pdf files. The printer command in xsane is set to 'kprinter'. This results in launching kprinter when the scan process is finished and I can set in the kprinter window where to print to. If I select here pdf document I can't change the paper size. It is set to A4 and can't be changed. I would like to print to letter paper, how can I set that? Thanks, IG VÁSÁROLJON ONLINE! Ezzel a kártyával nem húzzák le! _______________________________________________________ http://www.klikkbank.hu/lakossagi/termekek/virtualis_kartya/index.html -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 3

[opensuse] Squid and Edirectory
by CETIN OVALI 29 Nov '07

29 Nov '07

Hello, In our company we use squid with ip access control. Because our company is enough big, we have difficulty in controlling the ip addresses. Because of this reason we think that we can do this with edirectory authentication. We used squid_ldap_auth module . it seems good but because our clients use novell client , they authenticate edirectory and when they wants to connect to internet they have to write their username and password again again if they close internet explorer. This seems very unnecessary. I think we need a helper script controlling whether user authenticated to edirectory or not. ( for example we can understand it from networkaddress field in edirectory). Is there anybody here work such thing. With Best Regards Cetin Ovali -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

[opensuse] Umlaute and accents stopped working
by Frank Hrebabetzky 29 Nov '07

29 Nov '07

I have english as primary keyboard layout and german and english as additional ones. Everything worked just fine until 2 days ago. I don't know what I did, but since then switching to german layout turns my umlaut keys into dead keys and in portuguese I don't have accents any more. The other keyboard specifics work (y-z exchange and position of non-alphanumeric characters). Any idea what I could try? Thanks in advance. -- Frank Hrebabetzky +55 / 48 / 3235 1106 Florianopolis, Brazil -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] keyboard lost
by Lorenzo Cerini 29 Nov '07

29 Nov '07

Hi everybody, i lost the keyboard map, and i'm not able to have it back. In my Xorg.0.log i see (i don't get any error, just warning): (WW) The directory "/usr/share/fonts/local" does not exist. (WW) The directory "/usr/share/fonts/PEX" does not exist. (WW) The directory "/usr/share/fonts/latin2/misc" does not exist. (WW) The directory "/usr/share/fonts/latin2/75dpi" does not exist. (WW) The directory "/usr/share/fonts/latin2/100dpi" does not exist. (WW) The directory "/usr/share/fonts/latin2/Type1" does not exist. (WW) The directory "/usr/share/fonts/latin7/75dpi" does not exist. (WW) The directory "/usr/share/fonts/baekmuk" does not exist. (WW) The directory "/usr/share/fonts/japanese" does not exist. (WW) The directory "/usr/share/fonts/kwintv" does not exist. (WW) The directory "/usr/share/fonts/CID" does not exist. (WW) The directory "/usr/share/fonts/ucs/misc" does not exist. (WW) The directory "/usr/share/fonts/ucs/75dpi" does not exist. (WW) The directory "/usr/share/fonts/ucs/100dpi" does not exist. (WW) The directory "/usr/share/fonts/hellas/misc" does not exist. (WW) The directory "/usr/share/fonts/hellas/75dpi" does not exist. (WW) The directory "/usr/share/fonts/hellas/100dpi" does not exist. (WW) The directory "/usr/share/fonts/hellas/Type1" does not exist. (WW) The directory "/usr/share/fonts/misc/sgi" does not exist. (WW) The directory "/usr/share/fonts/xtest" does not exist. (WW) module ABI major version (1) doesn't match the server's version (2) (WW) fglrx: No matching Device section for instance (BusID PCI:1:0:1) found (WW) fglrx(0): board is an unknown third party board, chipset is supported (WW) LoadModule: given non-canonical module name "glesx.so" (WW) fglrx(0): could not detect X server version (query_status=-3) (WW) fglrx(0): Option "CalcAlgorithm" is not used (WW) Couldn't load XKB keymap, falling back to pre-XKB keymap (WW) Couldn't load XKB keymap, falling back to pre-XKB keymap Any help? i have an opensuse 10.2 box, and italian keyboard, thanks in advance. -- Lorenzo Cerini Info.era srl Trieste tel. +39040.67027360 fax. +39040.67027363 ---------------------------------------------- Le informazioni trasmesse sono da intendere solo per la persona e/o societa' a cui sono indirizzate, possono contenere documenti confidenziali e/o materiale riservato. Qualsiasi modifica, inoltro, diffusione o altro utilizzo, relativo alle informazioni trasmesse, da parte di persone e/o societa', diversi dai destinatari indicati, e' proibito ai sensi della legge 196/2003. Se Lei ha ricevuto questa mail per errore, per favore contatti il mittente e cancelli queste informazioni da ogni computer. ---------------------------------------------- Please consider the environment before printing this mail note -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

[opensuse] segmentaion fault in cups / ghostscript laut cups-error.log (gelöst)
by Ralf Prengel 29 Nov '07

29 Nov '07

Hallo, für das Archiv: Der Hinweis auf aktuelle Ghostscript-Pakate im repo war die Lösung. Pakete gezogen, eingespielt und schon hatte der Kunde ein Lächeln im Gesicht. -- i.A. Ralf Prengel Customer Care Manager Comline AG Hauert 8 D-44227 Dortmund/Germany Fon +49231 97575- 904 Fax +49231 97575- 905 EMail ralf.prengel(a)comline.de www.comline.de Vorstand Stephan Schilling,Erwin Leonhardi Aufsichtsrat Dr. Franz Schoser (Vorsitzender) HR Dortmund B 14570 USt.-ID-Nr. DE 124727422 -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

Re: [opensuse] Why doesn't this work?
by Glen 28 Nov '07

28 Nov '07

Richard Creighton wrote: > Out of curiosity Glen, (showing my total ignorance here) how does this > set a UID assuming this is the problem? .... and why would it work from > /etc/crontab but not from the crontab in /root which you edit by crontab > -e -u root? That last one, executes everything except iptables from > what I can tell as I can have it create, delete, move files, etc., but > from within the root crontab, iptables is just ignored, logged, but > ignored. The one in /etc/crontab that is normally used to launch the > hourly, daily, weekly...etc. scripts does work I find out through > experimentation...same cron, same script, same 'user' (root), just have > to use the system crontab for this one program. Other programs execute > fine from the roots private crontab....go figure... > Hi Richard - I don't know if this is true in the current kernel, or if this is even done anymore, but in the past processes could run with a "real UID" and an "effective UID", which could be different. And processes started from cron as root were actually started with *NO* effective UID, meaning that they ran with a real UID of root, but an effective UID of "NOLUID". So this would let them do *some* things as root, but kernel-related things would be denied because an effective UID hadn't been set. Hmm... looks like they do at least still use multiple UIDs - see man setreuid (section 2) for a synopsis. Ahh! Check out "man capabilities" (section 7) - which explains this in more detail! I don't pretend to understand all the details of why this was done, or how it worked, or if it's even still done - you're not the only one who feels ignorant! - it was just something that came to mind when I read over your problem, so I thought I'd mention it as a possibility. :-) Glen -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

[opensuse] Why doesn't this work?
by Richard Creighton 28 Nov '07

28 Nov '07

asus:~ # crontab -e -u root 15 11 * * * /root/OFF.sh 11 22 * * * /root/ON.sh :wq asus:~ # cat OFF.sh #!/bin/bash iptables -I OUTPUT -s 0/0 -p tcp --dport 80 -j DROP done manually asus:~ # ./OFF.sh asus:~ # iptables -L -n | less ... Chain OUTPUT (policy ACCEPT) target prot opt source destination DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state NEW,RELAT done automatically by cron /var/log/messages asus:~ # tailf /var/log/messages Nov 28 11:10:16 asus crontab[27601]: (root) REPLACE (root) Nov 28 11:10:16 asus crontab[27601]: (root) END EDIT (root) Nov 28 11:11:01 asus /usr/sbin/cron[10805]: (root) RELOAD (tabs/root) Nov 28 11:15:01 asus /usr/sbin/cron[27624]: (root) CMD (/root/OFF.sh ) asus:~ # iptables -L -n | less ... Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state NEW,RELAT When I execute OFF.sh manually, IPTABLES turns off port 80 outbound as I desire to prevent outbound access on the browser. The listing verifies that the OUTPUT chain is updated and in fact the browser cannot access anything. So far, so good. At 11:15, the messages log shows that cron executed the OFF.sh shell as the crontab entries for root commanded but the iptables dump for the OUTPUT section are unchanged and there is no interruption in outbounf access. Why would this not work from cron but work manually. BTW, it makes no difference if the command is run from a script or directly from the cron line after the time. It gets logged as if it is executing but does not affect iptables but the exact same command cut-and-paste as a command works as expected. What dumb am I overlooking? As a test, I had it ECHO to a file in my user account and it did create the files so the root crontab file actually does something, it just doesn't affect iptables. Thanks in advance -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

4 3

[opensuse] VNC grey screen problem
by John O'Gorman 28 Nov '07

28 Nov '07

I am trying to set up VNC on a new opensuse 10.2 installation. When I run vncviewer it connects to the vncserver but all I get is the Xll grey screen with the large X shaped cursor - No xdm login screen! After a timeout period the connection closes and the vncviewer exits. Symptoms are the same when I run vncviewer on a remote or on the local machine. What have I not done? Things I have done: 1. Enabled xinet, and through yast enabled vnc1 - vnc3 2. Through yast enabled xdmcp 3. Turned off firewalling Things I have noticed: 1. There is a duplicate entry in /etc/services for port 5900/tcp. 2. netstat -a shows that xinetd is listening on 5900 3. When I run vncviewer, ps ax on the server shows Xvnc is running I have VNC running OK on a laptop using SuSE 9.3 A difference on the 9.3 version is that the argument :42 appears in the xinetd entries for vnc1,2, and 3 Any ideas? John O'Gorman -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 2