January 2013 - openSUSE Users - openSUSE Mailing Lists

[opensuse] Paying with the "future": Btrfs Grub2, systemd
by Anton Aylward 02 Feb '13

02 Feb '13

Out of curiosity I pulled a scratch machine from 'the closet of anxiety' (it was labelled as having a dab disk) found another disk and some memory and the openSuse 12.2 installation DVD, oh and a DVD drive that worked, and .... Set up an install that used BtrFS, grub2 and systemd I left it to run overnight and came in just now and found a big red/orange error message saying that it hadn't be able to install the user - that's me, 'anton'. I rebooted and it was all there. It booted (using grub2) and systemd. I logged in as root and hand created the 'anton' account and all was merry, merry. I had partitioned the 10G drive as swap plus a single BtrFS partition. No separate /boot. The partitioner complained that I should have a separate /boot that was ext3 or ext4. I've had problems with that before so even if I were to do that I know there would be problems later. So I have one big partition. I've played with BtrFS before in a LVM partition, but it struck me that the design and advantages of BtrFS come into play when you have the big mix of files. I do have some reservations. Classically there have been good reasons for partitioning. I recall one vulnerability that arise if /tmp was on the same fs as the root. Good reason to have a /tmp that is nosetuid, possibly even noexec. In fact the principle of least privileged means you should apply those two to trees that have no reason to have executables or privilege. Certainly /usr/share -- documentation, manuals, fonts, icons, come into that category. There's a good case that /srv/httpd/ should be restricted too, after all the scripts there are to be interpreted (by perl or php or python or ruby or whatever) rather than executed. I'll look into these security concerns when I get to play about with this scratch machine over the coming weeks. Right now all I can say is 'it works'. So far. Next to bring it to the desk and tie it to the LAN... If you have questions about running Suse purely on BtrFS I'll try to answer them. Please don't ask performance questions, this is a crappy old machine. slow disk, slow cpu, slow memory. I'm concerned with functions and hurdles. -- "What you have to do and the way you have to do it is incredibly simple. Whether you are willing to do it, that's another matter." -- Peter Drucker -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

9 21

[opensuse] Audio codecs
by Thomas Taylor 02 Feb '13

02 Feb '13

Does anyone know where to obtain codecs for mpeg-4 AAC and H.264? I've tried yast (packman & libdvdcss enabled) and opensuse search but neither had anything. Online Google search found some mpeg-4's but mostly for windblows and no H.264. I want these to be able to use all the features of the mplabx PIC microcontroller IDE. Thanks, Tom -- A positive attitude may not solve all your problems, but it will annoy enough people to make it worth the effort. Herm Albright (1876 - 1944) -- Tom Taylor - retired penguin AMD Phenom II x4 955 -- 4GB RAM -- 2x1.5TB sata2 openSUSE 12.2x86_64 openSUSE 12.3-ß1_x86_64 KDE 4.7.2, FF 9.0 KDE 4.9.1, FF 17.0 claws-mail 3.9.0 registered linux user 263467 linxt-At-comcast-DoT-net -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

5 4

[opensuse] LDAP Client Authentication for OpenSUSE 12.2
by CHONG Yu Meng 01 Feb '13

01 Feb '13

Hi all! I just upgraded to OpenSUSE 12.2 and I am facing a strange problem that I hope someone here can help me with. I want my OpenSUSE 12.2 PC to authenticate against an eDirectory server over LDAP. After some difficulties with the self-signed certificate, I managed to get it to the point where Yast's User and Group Management can "see" and list the users in eDirectory. Here comes the strange part: When I try to login via GDM on the OpenSUSE 12.2 PC using any of the LDAP users, I get an Authentication Failed error. Turning on DSTRACE on my eDirectory server, I can see that there is no incoming LDAP request. When I use Yast's User and Group Management applet to view LDAP users, I can see the incoming LDAP request. So, what do I have to configure further so I can login to OpenSUSE with LDAP user credentials? I checked through /etc/sssd/sssd.conf and the LDAP settings look correct. What else do I need to check? Thanks very much in advance!! pascal chong -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 2

[opensuse] Re: [opensuse-factory] YaST text interface colors (ncurses)
by James Knott 31 Jan '13

31 Jan '13

Karl Eichwalder wrote: > Are there still YST text interface users out there? > Yes. My firewall does not have a desktop installed. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 3

Re: [opensuse] Giving up - network printing with opensuse
by Christopher Myers 30 Jan '13

30 Jan '13

I remember when I tried to set up our Brother wireless laser printer, it was a royal pain in 12.2. Autodiscover wouldn't find it (despite 11.4 and earlier versions finding it right away,) and I had to trick it to look at the IP directly. I don't remember how I did that now, but I was able to get it working. If I remember when I get home tonight, I'll try to reproduce how I got it to connect. Chris -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

5 5

[opensuse] Giving up - network printing with opensuse
by "Albert, Oszkó" 30 Jan '13

30 Jan '13

Hi all, Finally it became necessary to have some printing facility from my oS 12.2 KDE 4.9.5 machine. There are two available printers in our workgroup (this time it is a group of people). The first is a HP network printer with fixed IP. The other is also a HP and connected via USB to a Win XP box, also with fix IP. Both printers work fine from Win machines. I read tons of documents in the last days, but none of them could be made even to spin up its toner. I tried to set them up with CUPS and also with YAST. Also installed hp-plugin. The network printer's IP can be pinged, and I see the other as a share with samba. Tried firewalls on and off on both machines, but to no avail. I need some help because I am totally confused by now. Thanks for any hints. Albert -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

7 16

[opensuse] Fwd: Fw: [Dataloss] Backdoor accounts found in networking and security appliances from Barracuda Networks
by Greg Freemyer 30 Jan '13

30 Jan '13

For anyone with a Barracuda Networks device: == forwarded below == Subject: [Dataloss] Backdoor accounts found in networking and security appliances from Barracuda Networks http://www.networkworld.com/news/2013/012413-backdoor-accounts-found-in-net… IDG News Service - A variety of networking and security appliances from Barracuda Networks contain backdoor accounts that could allow attackers to log in remotely over SSH (Secure Shell) and gain administrative, or root, access on the devices. The backdoor accounts were discovered by security researchers from Austria-based security firm SEC Consult. These accounts are not documented, they cannot be removed and can be accessed over SSH, they said in a security advisory published Thursday. Furthermore, the appliances are configured by default to accept SSH connections from certain ranges of public IP addresses. Some servers located in those IP ranges are owned by Barracuda Networks, but others are owned by third-party organizations and individuals. An attacker who compromises any server from the whitelisted IP ranges can gain administrative rights on Barracuda Networks appliances connected to the Internet by using the backdoor accounts, the SEC Consult researchers warned. For example, one particular backdoor account called "product" can be used to log into a Barracuda appliance, access its MySQL database without a password and add new administrative users to the device's configuration, the researchers said. On the Barracuda SSL VPN appliance it was also possible to enable diagnostic or debugging functionality which could be used to gain root access, they said. Barracuda Networks acknowledged the problem on Wednesday and advised customers to update the Security Definitions on their devices to version 2.0.5 immediately. "Our research has confirmed that an attacker with specific internal knowledge of the Barracuda appliances may be able to remotely log into a non-privileged account on the appliance from a small set of IP addresses," the company said in an advisory on its website. According to the company, all appliances with the exception of the Barracuda Backup Server, Barracuda Firewall, and Barracuda NG Firewall are potentially affected. This includes: Barracuda Spam and Virus Firewall, Barracuda Web Filter, Barracuda Message Archiver, Barracuda Web Application Firewall, Barracuda Link Balancer, Barracuda Load Balancer, Barracuda SSL VPN. The company noted that the security definitions update "drastically minimizes potential attack vectors," but advised customers who want to disable the remote support access functionality completely to contact its technical support department. _______________________________________________ Dataloss Mailing List (dataloss(a)datalossdb.org) Archived at http://seclists.org/dataloss/ Unsubscribe at http://datalossdb.org/mailing_list Supporters: Risk Based Security (http://www.riskbasedsecurity.com/) Risk Based Security equips organizations with security intelligence, risk management services and on-demand security solutions to establish customized risk-based programs to address information security and compliance challenges. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] problem in ssh? -- thinks I'm roaming ??
by Linda Walsh 29 Jan '13

29 Jan '13

I have a problem every now and then with ssh not accepting my public key: It is NOT a permissions problem. debug3: load_hostkeys: loading entries for host "ishtar" from file "/home/law/.ssh/known_hosts" debug3: load_hostkeys: found key type RSA in file /home/law/.ssh/known_hosts:1 debug3: load_hostkeys: loaded 1 keys debug3: load_hostkeys: loading entries for host "192.168.4.1" from file "/home/law/.ssh/known_hosts" debug3: load_hostkeys: found key type RSA in file /home/law/.ssh/known_hosts:6 debug3: load_hostkeys: loaded 1 keys debug1: Host 'ishtar' is known and matches the RSA host key. debug1: Found key in /home/law/.ssh/known_hosts:1 debug1: ssh_rsa_verify: signature correct debug2: kex_derive_keys debug2: set_newkeys: mode 1 debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug2: set_newkeys: mode 0 debug1: SSH2_MSG_NEWKEYS received ---- ^^^ see, it got the key, but what is this: Roaming ?!? debug1: Roaming not allowed by server debug1: SSH2_MSG_SERVICE_REQUEST sent debug2: service_accept: ssh-userauth debug1: SSH2_MSG_SERVICE_ACCEPT received debug2: key: /home/law/.ssh/id_rsa (0x80049df0) debug2: key: /home/law/.ssh/id_athena_rsa (0x0) debug1: Authentications that can continue: publickey,password,keyboard-interactive debug3: start over, passed a different list publickey,password,keyboard-interactive --- W/password: I get logged in: Ishtar:/> who am i law pts/9 2013-01-29 14:10 (athenae) Ishtar:/> ping athenae PING Athenae (192.168.4.12) 56(84) bytes of data. 64 bytes from Athenae (192.168.4.12): icmp_seq=1 ttl=32 time=0.099 ms What's this roaming? Why does it think I am roaming, and how do I tell it to allow it? Note -- AT times, this machine has multiple/redundant connetions with different addresses on the same subnet (right now it doesn't but it does have 2 connections in a bond0 configuration). Note -- this was working until I last rebooted my linux machine - now I get this... Haven't seen any good answer for what causes this -- some have referred to permissions, but the debug says that isn't the problem. I have a *fixed* ip, so I'm pretty sure I'm not roaming, though recently I had to fall back to my alternate set of ethernet cards on 192.168._3_.X instead of my current 192.168._4_.X (4 is the bonded connection and it didn't come up last reboot -- the slave ethernet ports got renamed), so I was using the non-bond network...the _3_ network. But if anything, the _3_ network was a temporary outlier -- (that should work, BTW). Ideas? -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 1

[opensuse] mythtv frontend where do I enable logging?
by Per Jessen 29 Jan '13

29 Jan '13

On my TV setup, I use auto-login which takes me straight to the mythfrontend UI. I would like to enable logging (apparently by calling mythfrontend with --service) to diagnose some problems with playing DVDs, but I don't know where mythfrontend is actually called from? -- Per Jessen, Zürich (2.0°C) http://www.dns24.ch/ - free DNS hosting, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 4

[opensuse] XSBoxGo and SuSE, WLAN1?
by Peter Maffter 29 Jan '13

29 Jan '13

1st question: I bought that WLAN/UMTS router XSBoxGo: http://4g-systems.com/www/produkte.php?page=produkte&kat=1&id=1&lang=de Works perfectly together with a Nexus 7 and my N900 phone. The only problem: I cannot get it running when connected via USB to one of my older (SuSE 10.3) Linux boxes (Huawei E220 works without problems but it shares the SIM with XSBoxGo ;-) ). usb_modeswitch -v 1c9e -p f010 -M '55534243123456780000000000000011062000000100000000000000000000'; modprobe option; echo "1c9e f010" | tee /sys/bus/usb-serial/drivers/option1/new_id works, ttyUSB0 is ok afterwards (I do not know if the code '55534243123456780000000000000011062000000100000000000000000000' is correct for the XSBoxGo). Only the dial up script does not get any message from the modem. Perhaps because all the dial up data is already entered in the modem? Did anybody get this XSBoxGo to work with OpenSuSE (10.3 or 12.1) via USB? 2nd question: I then tried to use the XSBoxGo as a normal WLAN device. The problem: my 10.3 laptop has already one router as WLAN0. I did not find any working solution to set up WLAN1 for the XSBoxGo, sites on internet do not give any answers if i can set up multiple WLANx on one hardware. If I enter the configuration in /etc/sysconfig/network/ifcfg-wlan0 the WLAN with XSBoxGo works but I would need WLAN0 with my older router and WLAN1 with the XSBoxGo and swapping /etc/sysconfig/network/ifcfg-wlan0 does not seem to be a real solution. Thanks in advance -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0