November 2011 - openSUSE Users - openSUSE Mailing Lists

[opensuse] What happened? - now I have an extra hard drive
by Basil Chupin 09 Nov '11

09 Nov '11

I have my home directory encrypted. A couple of hours ago I did an update of my installation (11.4, 32-bit, KDE) which included an update to the kernel and what-ever and now suddenly my encrypted home directory shows up(in the taskbar) as a separate, mounted, device. Also, it shows up in Dolphin twice: as a 362GB Encrypted Container and again as a 362GB Hard Drive. Is this something which was an intended result of the updates or is it something which has gone awry? Anyone know? BC -- The truth is incontrovertible, malice may attack it, ignorance may deride it, but in the end, there it is. Sir Winston Churchill -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 8

[opensuse] Configure desktop sounds
by James Knott 09 Nov '11

09 Nov '11

I'm running openSUSE 12.1 RC2 & KDE4 desktop on a ThinkPad. Is there any way to configure desktop sounds? I've looked around the Personal Settings, which is where I'd expect it to be, but can't find anything. I'd prefer to not have any sound when the desktop starts and stops, but leave the audio available for other purposes. At the moment, my only option seems to be to turn off sound and then turn it on when I need it. tnx jk -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 5

[opensuse] startproc in rc scripts
by Roger Oberholtzer 09 Nov '11

09 Nov '11

I want to use startproc to start more than one instance of a program in an rc script. Is this possible? It seems that it ignores any subsequent starts of the binary if it has already started it once. None of the option for startproc seemed to matter. If I make a link to the binary with a different name and use that, then I get another proc running. Have I missed something? Yours sincerely, Roger Oberholtzer OPQ Systems / Ramböll RST Office: Int +46 10-615 60 20 Mobile: Int +46 70-815 1696 roger.oberholtzer(a)ramboll.se ________________________________________ Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden www.rambollrst.se -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 15

[opensuse] Fwd: Digest of opensuse-bugs@opensuse.org issue 2747 (137301-137350)
by e-letter 09 Nov '11

09 Nov '11

Unable to unsubscribe. Help please? ---------- Forwarded message ---------- From: opensuse-bugs+help(a)opensuse.org Date: Wed, 9 Nov 2011 00:00:56 +0000 (GMT) Subject: Digest of opensuse-bugs(a)opensuse.org issue 2747 (137301-137350) To: inpost(a)gmail.com Topics (messages 137301 through 137350): -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 2

[opensuse] Can I ask something...?
by Linux Tyro 09 Nov '11

09 Nov '11

Hi, Yes, I am very new here and beginner in Linux too. Can I suggest/ask something regarding openSUSE...? I consider it good to ask first for it since openSUSE says it is an open project, so I am asking. -- Thx. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

20 59

[opensuse] how can i set wwwoffle?
by Linux Tyro 09 Nov '11

09 Nov '11

Hi, How can I set wwwoffle for offline browsing? the document is only the command line, but there is not written the step by step process... -- THX -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 8

[opensuse] Configure smtp_auth/postfix/dovecot for mobile device relay - quick howto - request for comment
by David C. Rankin 09 Nov '11

09 Nov '11

Guys, After recently wading through Postfix/Dovecot/SASL auth & TLS configuration to allow my phone to relay across my server over 3G, I have put together a quick howto that I would like to get comment on. Hopefully, this will also save others from stumbling through the configuration from scratch. Please add your comments and suggestions in-line below to help tighten security and make the howto more useful. This setup allows for normal smtp traffic on port 25 and sasl_authentication on port 587. The configuration is actually simple. The configuration just requires that you configure the postfix allow smtp on port 587 with sasl auth and TLS encryption; configure dovecot to provide authentication via a socket; finally generate a ssl cert and key for TLS to use during authentication (dovecot default cert and key works fine). The only difficulty involved is getting all the pieces in the right places. (which I'm not at all sure I have accomplished, but it works quite well) 1. Postfix Configuration /etc/postfix/master.cf Most distributions provide /etc/postfix/master.cf with the configuration for submission on port 587 present, but commented out. Simply uncommenting the 'submission' line along with its options will enable submission on port 587, however you will need to add additional options to enable SASL authentication and TLS encrypted communication between the client and the server. For example 11.4 provides the master.cf file with the following: #submission inet n - n - - smtpd # -o smtpd_etrn_restrictions=reject # -o smtpd_client_restrictions=permit_sasl_authenticated,reject To enable sasl_auth and TLS, I use the following options in master.cf: submission inet n - n - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject -o milter_macro_daemon_name=ORIGINATING After you have completed configuration for submitting mail on port 587, DO NOT FORGET to OPEN PORT 587 on your router. /etc/postfix/main.cf smtpd_client_restrictions = permit_sasl_authenticated, reject_unknown_client smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $mydomain smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = noanonymous broken_sasl_auth_clients = yes smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/certs/dovecot.pem smtpd_tls_key_file = /etc/ssl/private/dovecot.pem smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, reject_invalid_hostname, reject_non_fqdn_hostname 2. saslauthd configuration saslauthd will require a smtp.conf configuration file defining the authentication behavior. Normally, the default path for the sasl libraries are in /usr/lib/sasl2/. Placing the smtpd.conf file there will allow saslauthd to find it. The needed contents of smtpd.conf are: [nirvana:~/] # cat /usr/lib/sasl2/smtpd.conf pwcheck_method: saslauthd saslauthd_path: /var/run/saslauthd/mux mech_list: plain login log_level: 7 3. Dovecot Configuration This configuration works with dovecot2. In 11.4, the default install is still dovecot 1.2. This will work with simple modification for dovecot 1, but you will need to consult the dovecot wiki for the changes required. All you need to do is tell dovecot the type of authentication to use and the location for the socket. dovecot2 will create the 'auth' socket on restart. /etc/dovecot/dovecot.conf: # 2.0.1: dovecot.conf auth_mechanisms = plain login passdb { driver = pam } userdb { driver = passwd } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem Make sure you have created your dovecot ssl certificates (see below), restart dovecot (/etc/rc.d/dovecot restart) and then check to make sure the /var/spool/postfix/private/auth socket was created. 4. Creating TLS Certificates OpenSuSE provides a script with the dovecot package that will create the certs for you in a slightly different manner. The script is /usr/share/doc/packages/dovecot/mkcert.sh Before running, set your ssl config in /usr/share/doc/packages/dovecot/dovecot-openssl.cnf. (otherwise you will be prompted for it) NOTE: the mkcert.sh script will NOT overwrite existing certificates, so if you have already generated your certificates and need to do it again, then either edit the script and comment out all the 'if' statements or delete your current dovecot.pem files from /etc/ssl/{certs,private} directories. The certificates are automatically placed in /etc/ssl/cert and /etc/ssl/private. These will work fine for sasl authentication. If you want to generate separate certificates, you can do so manually with the following: openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024 chmod 600 smtpd.key openssl req -new -key smtpd.key -out smtpd.csr openssl x509 -req -days 3650 -in smtpd.csr -signkey smtpd.key -out smtpd.crt openssl rsa -in smtpd.key -out smtpd.key.unencrypted mv -f smtpd.key.unencrypted smtpd.key openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650 Don't foget to move the keys to their final location and adjust the cert and key locations in /etc/postfix/main.cf and /etc/dovecot/dovecot.conf above. 5. Restarting the servers Restart postfix with '/etc/rc.d/postfix restart' (or just 'rcpostfix restart') Start/restart saslauthd with '/etc/rc.d/saslauthd restart' (or just 'rcsaslauthd restart') Restart dovecot with '/etc/rc.d/dovecot restart' (or just 'rcdovecot restart') On opensuse to make sure the servers are started automatically don't forget to set the servers to start at boot. As root: chkconfig postfix on chkconfig dovecot on chkconfig saslauthd on For BSD style inits, add the daemons to the DAEMONS line in rc.conf. 6. iPhone Configuration Configuration on the iPhone is straight forward. Use or create a normal mail account (imap recommended) and then navigate to: Settings -> Mail, Contacts, Calendars -> (choose account) -> Account -> Outgoing Mail Server (SMTP) -> Primary Server and set the entries as follows: Server : ON Host Name : your.server.name User Name : your-user-name Password : your-password Use SSL : ON Authenitcation : password Server Port : 587 If your server is setup correctly, then the phone will verify your settings and you are done. If not, then you can troubleshoot by looking at the mail log. Go ahead and display your mail log on your server before sending a test mail. (as root: tailf /var/log/mail) Then to confirm operation, turn off WiFi on your phone and then send a test mail. A successful login will appear in the log as something like: Nov 2 14:50:11 servername dovecot: imap-login: Login: user=<your-usernm>, method=PLAIN, rip=166.205.10.56, lip=192.168.6.17, mpid=11100, TLS Note the TLS connection. If your phone fails to verify the account settings, you will usually get helpful information in the log file about why it didn't. Look for TLS failing to start due to certificate problems or auth mechanisms and then revisit the sections above. All - fill in the suggestions and additions and hopefully this will get turned into a wiki somewhere. Thanks. -- David C. Rankin, J.D.,P.E. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 4

[opensuse] BASH - don't forget mysql access from the CLI - really useful stuff
by David C. Rankin 09 Nov '11

09 Nov '11

Guys, Recently, managing the family's video clips, I began using BASH with mysql much more than I ever had in the past. (primarily because it was a LOT quicker than trying to use some database editing program) It is an amazingly simple and powerful interface that (1) gives you access to all of your data contained in databases from a scripting standpoint, but also (2) shows you just how much you can do with data stored in database format as opposed to flat files. The key to using mysql from the CLI are the -N -B and -e options. 18:18 nirvana:/home/samba/parents> mysql --help | grep -- "-N\|-B\|-e" -B, --batch Don't use history file. Disable interactive behavior. -e, --execute=name Execute command and quit. (Disables --force and history Will automatically be re-executed when reconnecting. -N, --skip-column-names Practically speaking '-B' says don't print the ASCII table art; '-N' says don't return the column headings and '-e' says execute the stuff that follows (i.e.): mysql -NBe "select fname,begin,dld2dvd,dvd,dld_date from mmedia.dvcapt \ where (begin <= '1999-07-24 16:18:33' && dld2dvd = '0')" Filling arrays with mysql information is really handy. Say I needed to do something with each filename in the database, I could: declare -a fnarray fnarray=( $(mysql -NBe "select fname from mmedia.dvcapt") ) Managing the data in your mysql tables is also easy from BASH until you have your final tools developed. For example, in my case, I had roughly 1200 video clips totaling roughly 800G in size that I needed to insure I had backup copies of. So I spread the files between 3-4 boxes with an extra 250G of space on each. After finishing creating the backup copies, I needed to update the database with the location of the backup files so I could keep track of them and rsync them back if needed. So on each remote host, I simply created a directory list of the files with 'ls -1 > list.txt' and then updated the database with the file locations by doing: for i in $(<list.txt); do mysql -e "update mmedia.dvcapt set \ bu_loc='dcrgx2.3111skyline.com:/home/dv/sony' where fname='$i'"; done Beats the heck of copy and past of the location in some database editor, etc.. This all become seamless if you setup a user that can access the needed tables and then create a ~/.my.cnf file that provides mysql access without being prompted for a password. An example ~/.my.cnf file would be: [mysqladmin] password = thepass user = theuser [mysql] password = thepass user = theuser [mysqldump] password = thepass user = theuser [mysqlcheck] password = thepass user = theuser The running as theuser (you) all you need to at the command prompt is type 'mysql' and you are done. No -u -p options needed. The use of BASH and mysql is only limited by your imagination. It is truly a two-way street. In addition to making use of the information contained in the database, you can just as easily manage the database itself -- all from the CLI or in your favorite script. Give it a go. Your tips are welcome as well. Thanks. -- David C. Rankin, J.D.,P.E. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 2

[opensuse] chrome
by C. van Nidek 08 Nov '11

08 Nov '11

I am running Google Chrome 15.0.874.106 but since the first version I have problems after a reboot. Chrome won't start and complaints with following message: The profile appears to be in use by process 27549 on host dhcppc18. If you are sure no other processes are using this profile, delete the file /home/......./.config/google-chrome/SingletonLock and relaunch Google Chrome. I have to manually remove the SingletonLock after which Chrome is working again. Looked on the web and read the help files from Google but did not find a clear answer how to get rid of this lock. Somebody can help me out? -- Linux User 183145 using LXDE and KDE4 on a Pentium IV , powered by openSUSE 11.4 (i586) Kernel: 3.1.0-8-desktop LXDE WM & KDE Development Platform: 4.7.3 (4.7.3) -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 1

[opensuse] Re: [opensuse-factory] Mint developers claim 40% increase in user base due to Gnome 2
by James Knott 08 Nov '11

08 Nov '11

Felix Miata wrote: > It also shows that KDE3 users aren't the only people seriously > unpleased with massively overhauling the DTE they're familiar with and > the devs responsible for those it. Change != improvement. Quite so. I've set up a few KDE4 systems and greatly miss the original KDE3. Even the KDE mode that comes with KDE4 isn't quite there. There's the "Trinity" desktop that's a fork of KDE3. Hopefully openSUSE will add it soon. http://www.osnews.com/story/25283/KDE_3_5_Fork_Trinity_Releases_Third_Major… -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0