May 2009 - openSUSE Users - openSUSE Mailing Lists

[opensuse] Shockwave Flash v10 plug-in not functioning in Firefox 3.0.10
by Ted Markowitz 30 May '09

30 May '09

Folks, I'm running Suse 11.1 with Firefox 3.0.10 and the Adobe Shockwave Flash browser plug-in 10.0 r22 87 installed. While the standalone v10 Flash player works just fine with .swf files, the browser plug-in has ceased to work within Firefox (not sure exactly which combination of browser and plug-in versions last worked correctly, sorry). The plug-in is surely enabled in Firefox, but when I hit an embedded SWF all I see is a beige box where the Flash animation is supposed to appear (e.g., on YouTube). The object in the browser is not left or right-clickable at all and just sits there, dead. I've de-installed and re-installed the latest versions of both Firefox and Flash, but to no avail. I've also made sure that all the other plug-ins and extensions are not loaded at the moment in case there's a potential hidden conflict somewhere. Any thoughts or pointers to fixes would be most appreciated. Thanks in advance... //ted -- ------------------------------------------------------------------------ *TED MARKOWITZ* WWW: www.unh-ececs.net/tjm <http://www.unh-ececs.net/tjm> email: tmarkowitz(a)newhaven.edu phone: 1-203-984-6565 fax: 1-203-655-2400 *Dept. of Electrical & Computer Engineering and Computer Science Tagliatela School of Engineering University of New Haven West Haven, CT 06516 * -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 4

[opensuse] SECURITYQ: anyone experience w/using sockd (dante-server)?
by Linda Walsh 30 May '09

30 May '09

Have a question on a config option I recently noticed (am trying to debug a coredumping prob, but if I am certain I get all the config options 'right', maybe the coredump will disappear... not that it should coredump over bad config in any case, 'ideally', but error handling is often, *in practice*, considered a 'luxury' often not high on a list of priorities). But in regards to security, found this section, that if it is to be believed, is "important": ( :-) ) --------------------- # # An important section, pay attention. # # when doing something that can require privilege, it will use the # userid "sockd". #user.privileged: sockd # when running as usual, it will use the unprivileged userid of "sockd". # user.notprivileged: sockd # If you compiled with libwrap support, what userid should it use # when executing your libwrap commands? "libwrap". #user.libwrap: libwrap ---------------------- If sockd needs to do something "privileged", (like, I assume(?), connect to a privileged port (<1024), wouldn't it (shouldn't it?) need to be 'root'? So wouldn't/shouldn't a logical choice for a privileged user be 'root' and not 'sockd' as is _indicated_ in the comments? "user.privileged" would be set to 'root', and not 'sockd'? I mean, I have an 'unprivileged user(&group) sockd - which it will user for (I assume) most operations, and only use the privileged setting when it needs something requiring a 'root priv'(?). Also -- what is common practice for use of "libwrap"? I'd never seen using a separate user just to access libwrap files. Is that common practice with anyone? ------- If anyone knows of any common 'gotcha's in moving from suse10.3 sockd (dante-server 1.1.19-72) to 11.1's sockd (dante-serv 1.1.19.127.32) I'd appreciate any heads-up warnings... Thanks for any help and answers... Linda -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 1

[opensuse] Error using smbldap-groupadd -a groupname
by Masim "Vavai" Sugianto 30 May '09

30 May '09

Hi, I got trouble adding group name into samba PDC + OpenLDAP : # smbldap-groupadd -a accounting failed to add entry: attribute 'cn' not allowed at /usr/sbin//smbldap_tools.pm line 776, <DATA> line 466. What the info/configuration should be provided to make the problem clear ? I have default group for default administrative group account, ie : Domain Admins:*:512: Domain Users:*:513: Domain Guests:*:514: Domain Computers:*:515: Administrators:*:544: Account Operators:*:548: Print Operators:*:550: Backup Operators:*:551: Replicators:*:552: But I need another group account for organization, ie : accounting, purchasing. The group will be used for group logon script. -- Best Regards, Masim "Vavai" Sugianto /************************************************************/ Blog (ID) : http://www.vavai.com/blog Blog (EN) : http://www.vavai.net Community : http://www.opensuse.or.id /************************************************************/ -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

[opensuse] ntpd problems under x86_64 SuSE 11.1
by Linda Walsh 29 May '09

29 May '09

I'm having some permission problems coming out ntpd where is expecting to be able to write or create files. My setup uses the default 'chroot' setup to choot into /var/lib/ntp (I ALSO tried it without the chroot setting and got the same permission problems at the same places). After looking at log messages, I decided to run things manually, turn on the -d)ebug switch and have it -n)ot detach from my term: /usr/sbin/ntpd -d -n -p /var/run/ntp/ntpd.pid -g -u ntp:ntp -i /var/lib/ntp That didn't help -- it told me same problems in same places. I then used strace: trace -f \ -e trace=process,file,chroot,setuid,setgid,setfsuid,setresuid,setreuid \ /usr/sbin/ntpd -d -n -p /var/run/ntp/ntpd.pid -g -u ntp:ntp -i /var/lib/ntp Yes, I do have both a user and group 'ntp' (both have value '74'). And while the default is to switch into the primary group of ntp (-u ntp), I've always explicitly set it. The contradictory (and some valid) log and permissions are as follows: Before the chroot the first prob is in opening ntp's log file. First two accesses are: open("/var/lib/ntp/drift/ntp.drift", O_RDONLY) = 6 open("/var/log/ntp/ntp", O_WRONLY|O_CREAT|O_APPEND, 0666) = -1 EACCES (Permission denied) --- as this is before the chroot (about 10 lines down from this open), it's referring to my absolute FS. The ntp.drift file is opened, but not the log. Permissions are: # ll -a /var/lib/ntp/drift drwxrwxr-x 2 ntp ntp 22 2009-05-29 14:40 ./ drwxrwxr-x 7 root ntp 59 2009-05-29 14:33 ../ -rw-r--r-- 1 ntp ntp 6 2009-05-29 14:40 ntp.drift So 'ntp.drift' is openable as expected (even though proc is still root at this point). BUT: # ll -a /var/log/ntp/ drwxrwsr-x 2 ntp ntp 22 2009-05-29 14:32 ./ drwxr-xr-x 3 root root 16 2009-05-29 13:36 ../ -rw-r--r-- 1 ntp ntp 0 2009-05-29 14:22 peerstats Note: /var/log/ntp is a soft-link to the 'chroot' jail's location, as I wasn't sure when it got opened, so the real log file is under /var/lib/ntp/var/log/ntp now. It was originally configured as a real directory, but I remember from my previous config (where it worked), that it was best to use a soft-line in the log-dir so if I wanted to read the ntp log, I'd find it in the expected location, but any chrooted ntp would be writing to the file 'physically' located under the chrooted dir (i.e. I know enough to not use softlinks out of a chrooted jail to 'real files' -- I only use softlinks into the chrooted jail OR using relative pathnames within the chrooted jail). so first noticeable prob -- is ntp can't open it's log file despite what appear to be valid permissions. Later on, I see: [pid 23190] chdir("/var/lib/ntp") = 0 [pid 23190] chroot("/var/lib/ntp") = 0 [pid 23190] setgid(74) = 0 [pid 23190] setuid(74) = 0 [pid 23190] setresuid(-1, 74, -1) = 0 [pid 23190] stat("/var/log/ntp/peerstats", {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 [pid 23190] rename("/var/log/ntp/peerstats", "/var/log/ntp/peerstats.23190C0") = -1 EACCES (Permission denied) [pid 23190] open("/var/log/ntp/peerstats.20090529", O_WRONLY|O_CREAT|O_APPEND, 0666) = -1 EACCES (Permission denied) --- So now I'm seeing probs in the newly chrooted process as well. It's also set it's uid/gid to 'ntp' (74): # grep ntp /etc/{passwd,group} /etc/passwd:ntp:x:74:74:NTP daemon:/var/lib/ntp:/bin/false /etc/group:ntp:!:74:ntp,root Now it can open 'peerstats' in /var/log/ntp' (initially it couldn't open it as it did not exist. As part of my debugging, I manually created it and set its permissions in its dir: /var/lib/ntp# ll -a var/log/ntp drwxrwsr-x 2 ntp ntp 22 2009-05-29 14:32 ./ drwxr-xr-x 3 root root 16 2009-05-29 13:36 ../ -rw-r--r-- 1 ntp ntp 0 2009-05-29 14:22 peerstats NOTE: I'm 'cd'ed into /var/lib/ntp (the chrooted dir -- verified by looking at /proc/root for the ntp process), so my ls -l is equiv to /var/log/ntp. Note current dir and peer stats are owned by ntp.ntp and the directory is writeable. "Su'ing" to user 'ntp', I was able to create and rename files in this directory (even though the running ntp process seems to be unable to do this). So why is my ntp daemon unable to write into directories it is clearly able to write into? Any idea why simple file permissions and such don't work? I'm pulling my hair out -- at a config that *USED* to work on my old server (also SuSE, but x386(PIII), 10.3 based). -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 2

[opensuse] Empty Blank in Acrobat Reader
by Sascha 'saigkill' Manns 29 May '09

29 May '09

Hello Mates, i've downloaded and blank (PDF) from an Site and started this with acroread. Then i've enabled the highlighting, and i filled out the blank. If i go to "Print", the Printer gives me an empty Blank. Is this an feature? Can anyone confirm this or have an solution? -- Sincereley yours Sascha Manns openSUSE Marketing Team openSUSE Build Service openSUSE Features Screening Team Web: http://saschamanns.gulli.to Project-Blog: http://lizards.opensuse.org/author/saigkill Private-Blog: http://saschasbacktrace.blogspot.com

4 5

Re: [opensuse] kdm + resmgr problem in login
by Jones de Andrade 29 May '09

29 May '09

Hi. :) > >I'm having a strange problem in logging into our Suse here. > Which I assume to be sles8. Sorry can't help you there. Sorry, my fault. I should have been more precise here. Actually, the server and most of the machines uses openSuse 10.3, for exception of one machine in the network which uses Suse 11.0 (all machines share the /home from one server with openSuse 10.3). Not so old as Sles8. :) > > Seriously, *always* state the version and possibly the architecture. Sorry: all 64 bit machines with 64 bit OSes. With one exception, the one with suse 11, all are Core2Quads (that specific one is an AMD barcelona). ;) > > >May 28 16:26:04 vader resmgr[2927]: rejected connection from uid 0/gid > >505: group doesn't exist > What is the output of running 'id' when you are logged in via ssh? ************* vader /home/johannes 44% id uid=548(johannes) gid=505 grupos=505,1001(g03) ************* Any clue here? > >The problem only happens when I try to connect with interface. > > What does that mean exactly? Please describe in detail. Sorry, I thought it was clear. I mean that the problem doesn't appear if I connect by ssh. It only happens with KDE. Did not tried other window managers at the time yet. Unfortunatelly, it was decided to save disk space and so there is no gnome on the machines, but others windows managers are available. I'll try them tomorrow. > > >I was traveling, and before that everything used to go smoothly. We > >had an electrical failure in the meanwhile and my user was logged in > >when it happened, but I'm not sure it's of any concern to the problem. > >:( > It may be better to ask on the opensuse-security mailing list. I really disagree here. The fact that I wasn't there to see when exactly the problem started doesn't mean the machines were left unatended, neither that I left the session opened for everyone "try it out". It was locked, for sure, when the electricity had gone down. And all days there is at least one superuser around, taking care of everything. Thanks a lot for any advise, and sorry again for my lack of information in the first message. Sincerally yours, Jones -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 2

[opensuse] Dolphin won't open directories
by Bob S 29 May '09

29 May '09

Hello SuSE people, Recently reinstalled 11.1. Now Dolphin will not open any directory on the hard drive (OS). Get the following message (or close) An error occured while accessing "storage". The system responded Org. Free Desktop Hal denied permission to Policy Org.Free Desktop Hal "storage" mount fixed_auth_admin keep always fixed. Now, that is gobbleydegook if I have ever seen or heard it. What is going on and what is the problem?? Bob S -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] Bug during logon
by Максим Фомин 29 May '09

29 May '09

Hello. I have a bug that really irritates me. It is an incorrect logon screen during entering in my account and it looks like http://f.imagehost.org/view/0282/bug. I use kde 4.2 and libqt 4.5. My monitor is intel gm 965 and resolution is 1280x800. When I turn it to 1024x768 bug disappears but this don't appeal to me. No driver is installed but as I understand it is included in distro (suse 11). I tried to stop service splash but there is no result. Boot screen is OK (I use vga=0x318). Also I tried to set up another logon theme, but the default theme (opensuse) is shown whatever theme is selected as like systemsettings ignores me. But when I run systemsettings and press button "Preview" (I do not know exactly how this button is named in English version, maybe "Preview" or "Check Theme" but it allows to preview selected logon theme and look how it will be shown during login) all is OK. The resolution on my desktop id 1280x800 and all works properly. The description of bug in words: image doesn't touch the right sight of the monitor. Does anybody know how to fix it? ========================= Maxim F. suse(a)winwebwiz.net.ru -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 2

[opensuse] Installing WordPerfect
by Andre den Oudsten 29 May '09

29 May '09

Lectori Salutem, Can anybody tell me how to install WordPerfect 8 for Linux on my Opensuse 11.0 x86_64 machine? Thanks in advance, André den Oudsten -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 2

[opensuse] KDE 4.1 on OpenSuSE 11.1 with OpenOffice 3: setting up default media handling
by Boris Epstein 29 May '09

29 May '09

Hi all, Here's the problem I am trying to tackle. I have a presentation in Open Office (.odp) that uses external handlers to play multimedia. For instance, it plays movies (.mov, .avi, .mpg) directly, or, in some instances, it calls scripts (a Ruby script, for instance) to call them. Now, under KDE3.5 things worked as defined in Konqueror. Under KDE4, no such luck. For instance, that Ruby script would execute fine out of a Konqueror window but it just fails to execute out of the ODP. Instead, an editor opens that shows me the content of the script. The same with the movie files - they fail to open the same way; if you are lucky, a Konqueror plugin will play them - but I want a standalone application of my choosing. How do I fix that? Any ideas? Thanks. Boris. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 4