December 2009 - openSUSE Users - openSUSE Mailing Lists

[opensuse] What means this?
by Robin Klitscher 02 Dec '09

02 Dec '09

While updating openSuSE 11.2, YAST2 logs these lines repeated several times: Installing hal-0.5.13-4.2.1.x86_64.rpm (installed size 1.61 MB) Additional rpm output: insserv: Script jexec is broken: incomplete LSB comment. insserv: missing `Required-Stop:' entry: please add even if empty. What do they mean? Does it matter? (There's no obvious effect on the system.) Robin K -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] Re: mounting ext4 from ext3
by jdd-gmane 02 Dec '09

02 Dec '09

Le 02/12/2009 14:09, Constant Brouerius van Nidek a écrit : > On Wednesday December 2 2009 19:06:14 Cristian Rodríguez wrote: >> mount -t ext4dev >> > Interesting. The mount -t ext4dev/sdb3 does not give a error message but > the sdb3 is still not mounted. If I would name the place where to mount, > e.g. /mnt I get the whole help file and no result. Should I change > something in the fstab or some place else? shouldn't this be mount -t ext4dev /dev/sdb3 /mnt ? jdd -- http://www.dodin.net http://valerie.dodin.org http://news.opensuse.org/2009/04/13/people-of-opensuse-jean-daniel-dodin/ -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] Re: openSUSE windows Active Directory and OU=
by Joachim Schrod 02 Dec '09

02 Dec '09

Roger Oberholtzer wrote: > On Tue, 2009-12-01 at 20:18 +0100, Joachim Schrod wrote: >> Roger Oberholtzer wrote: >> > On Fri, 2009-11-20 at 22:28 +0100, Lars Müller wrote: >> >> On Wed, Nov 18, 2009 at 05:09:21PM +0100, Roger Oberholtzer wrote: >> >> >> >> > We have thousands of users in the Active Directory. I really do not want >> >> > all of them to have access. In the LDAP entry, there is a OU= field for >> >> > those I want to be able to log in. Is it possible to limit login to >> >> > those in some specified OU= ? >> >> >> >> See the ldap setting examples from the samba-doc package in >> >> /usr/share/doc/packages/samba/examples/smb.conf.SUSE >> >> >> >> Plus the explanations in the smb.conf man page. >> > >> > I have now looked here. I am none the wiser. >> >> I didn't notice the original thread. If you want to limit LDAP >> authentication to an OU, you need to change ldap.conf and adapt >> nss_base_* there. (That's the conf file used by pam_ldap.) >> >> If all persons are below the OU, that's easy, you need to specify >> the respective new base DN. If not, you need to specify that as an >> filter, then it gets a bit more complex, but the commented config >> clauses in this file should give you an hint. >> >> If you want the other uids to be invisible, you also need to change >> nss-ldap.conf and change "base *" there. >> >> I don't know enough about your setup to be more specific. I also >> don't know if that can be done via yast. > > All the users share OU=RST. I want to limit valid users to those who > have this. OU=RST is usually something in the mid of the whole tree. You need to know the stuff after OU=RST as well. If you know it, do as follows: -- check that pam_ldap is used: grep for it in /etc/pam.d/*. If it appears there, everything's ok. -- Edit /etc/ldap.conf: There is base specified, at the start. This is called the base DN. Check further if nss_base_passwd is commented out or not. You need to use that clause, and supply your complete DN there, include OU=RST. (Maybe only prepend OU=RST, maybe there is some ou=people to prepend before OU=RST or insert inbetween it and the base dn.) Do the same for nss_base_shadow. If that does not work, or if you don't know the complete full DN of your people LDAP tree, you'll have to use ldapsearch to find out if you can access your account. If you don't know ldapsearch, ask here. Basically an ldapsearch call looks like ldapsearch -x -h puma -b ou=people,dc=npc,dc=de -s one \ uid=schrod and should give some output. (puma is the name of my LDAP server, schrod my login name.) If not, try it with sAMAccountName=schrod; AFAIR for some versions of AD sAMAccountName is used as the uid attribute name. That should actually be configured in ldap.conf as well, as nss_map_attribute or pam_login_attribute. If ldap.conf has a clause "ssl start_tls", you'll probably also need to add -ZZ to ldapsearch. Maybe leave "-s one" off, then it will search the whole tree from the base DN, that should give a result with information where the account records are stored in the LDAP tree. Furthermore: -- If rcnslcd is running (new since 11.1 w/ updates), you might want to configure nss-ldap.conf as well. This is used for name and uid lookup, so if you leave it as is, the other uids will still be visible, even though they can't log in. Or maybe that's what you want, YMMV. Good luck, Joachim PS: Tomorrow I'm the whole day at a client, so I'm not going to answer further emails before Thursday. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Joachim Schrod Email: jschrod(a)acm.org Roedermark, Germany -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 7

[opensuse] Can't connect to WPA-PSK network
by Allan Dreyer Andersen 02 Dec '09

02 Dec '09

Hi all I'm trying to switch from Ubuntu to openSUSE 11.2 and really like the feeling of the system and setup. My biggest problem is with my wireless network. It doesn't connect to my wireless router using WPA-PSK security. There isn't shown any errors to me on the desktop. The netcard is: # WLan: Intel Corporation PRO/Wireless 4965 AGN # Lan: Realtek RTL8111/8168 Gigabit Ethernet lspci shows: 06:00.0 Network controller: Intel Corporation PRO/Wireless 4965 AG or AGN [Kedron] Network Connection (rev 61) 07:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168B PCI Express Gigabit Ethernet controller (rev 01) There isn't any problem to use regular ethernet or none encrypted wireless network. Do I need to activate support for WPA-PSK in a special way? On Ubunutu I used GNOME so I'm not so familar with KDE yet. Thanks a lot in advance. -- Venlig hilsen / Best regards Allan Dreyer Andersen -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] mounting ext4 from ext3
by Constant Brouerius van Nidek 02 Dec '09

02 Dec '09

Have a freshly installed 11.2 on my system which runs daily 11.1 with ext3. As I updated yesterday I had difficulty rebooting. Do not know why but today I had 11.2 running. The new emails from today are in the ext4 partition and as I tried to mount that partition from my in the mean time running 11.1, I got the info that that was not possible. What is the trick in order to have access to the ext4 partition? -- Powered by openSUSE 11.1 (i586) Kernel: 2.6.27.39-0.2-default KDE: 4.3.3 (KDE 4.3.3) "release 182" 6:14pm up 1:32, 4 users, load average: 1.04, 0.97, 0.83 -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 3

[opensuse] Thunderbird doesn't open a link in browser.
by Erik Jakobsen 01 Dec '09

01 Dec '09

Hi. I run opensuse 11.2. The mailer is Thunderbird 3.0b4 and Firefox is 3.5.5 I cannot open links when I try in Thunderbird. How can I solve this ?. /Erik -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

13 44

[opensuse] openSuSE 10.2 repositories
by Boris Epstein 01 Dec '09

01 Dec '09

Hi all, I know this sounds really dumb... but I have been asked to help administer a machine that I can only administer remotely which is running openSuSE 10.2 Is there a set of repositories for it still in existence anywhere? Thanks. Boris. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 4

Re: [opensuse] SuSEfirewall2: unable to connect to DMZ from behind NAT
by Rowan R. 01 Dec '09

01 Dec '09

> Running bind on the firewall it would resolve DNS requests for > http://www.rowansweb.com/ coming from an internal zone to > the DMZ machine. > > Whereas someone outside your network would simply > get pointed to your external IP, and the firewall would route > it to the DMZ. > I don't think it's a DNS issue, our DNS server is running on the internal network (windows). If I try to connect using the IP it's a no go. For some reason however I can connect to my ext:zone. I tried changing my dmz interface to an ext:zone but no luck. see config below. 192.168.1.0/24(masq)zone:int (eth0)-------[f/w ]----108.***.***.60 (eth2) zone:ext [box]-----68.***.***.234(eth1) zone:dmz for some reason my masq net cannot connect to eth1 doesn't matter if it's zone:ext or zone:dmz -- The general who advances without coveting fame and retreats without fearing disgrace, whose only thought is to protect his country and do good service for his sovereign, is the jewel of the kingdom. - Sun Tzu -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 2

[opensuse] SuSEfirewall2: unable to connect to DMZ from behind NAT
by Rowan R. 01 Dec '09

01 Dec '09

I'm running a firewall server with three zones, internal, dmz, and external, on eth0, eth1, & eth2 respectively. Everything works fine however I am unable to connect to my dmz from behind NAT. any ideas ? Thanks, -- The general who advances without coveting fame and retreats without fearing disgrace, whose only thought is to protect his country and do good service for his sovereign, is the jewel of the kingdom. - Sun Tzu -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 2

[opensuse] ATI Inc SBx00 Azalia
by Bob Rea 01 Dec '09

01 Dec '09

I have all sound except in youtube, everything else is fine youtube is set for highest volume Suse11.0 on Acer Extensa 4420 Any suggestions? What else do you need to know to help me? -- Bob Rea mailto:gapetard@stsams.org http://www.petard.us http://www.petard.us/blog http://www.petard.us/gallery Where is Bill Stringfellow now that we really need him? -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 7