openSUSE Users November 2016

users@lists.opensuse.org

82 participants
122 discussions

oS 13.1 : "gnome keyring socket is not owned with the same credentials as the user"

by ellanios82

Hello List am using Xfce : - in /var/log/warn : i see warning " The gnome keyring socket is not owned with the same credentials as the user login: /run/user/1000/keyring-4i77r7/control 2013-11-27T13:27:17.434100+02:00 su: gkr-pam: couldn't unlock the login keyring " ............... - any ideas how to fix ? thanks -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 year, 3 months

IPv6 Rogue Router Security Issue

by Lew Wolfgang

Hi Folks, There seems to be a flurry of IPv6 talk going on, maybe this is time for me to bring up the rogue router problem again? I asked about this a couple of times over the years but could never find anyone to comment on it. First, here's the RFC that describes the problem: https://tools.ietf.org/html/rfc6104 Rogue routers have affected me personally at a customer's site. This is a large, professionally managed, dual-stacked network with a number of v4 class B addresses and thousands of hosts. Subnets seem to be /20 CIDR in size, so there are plenty of "neighbors" on any given subnet. I've encountered the situation where misconfigured Windows systems will advertise themselves as an IPv6 router. They then happily accept traffic and drop it all silently on the floor. This problem doesn't seem to bother other Windows boxes too much, but it absolutely kills SSH connections. SSH preferentially tries IPv6 port 22, which when sent to a dumb Windows box results in very long hangups and connection failures. My workaround for my cohort of Linux desktops and servers was to disable IPv6 for both ssh and sshd. This will work for as long as the host network supports dual stacks, but eventually? Then there's the issue of intentional MITM attacks using this vector. If a bad actor has physical access to a subnet, or has compromised a host on that subnet, your goose is cooked. This link mentions some mitigations, but they're quite technical and may require hardware support. https://community.infoblox.com/t5/IPv6-Center-of-Excellence/Holding-IPv6-Ne… So, what is the threat to a home IPv6 user who has WiFi and an Internet of Things with minimal/non-existent security? I personally feel safer behind a nice natted IPv4 firewall with ACL rules between my copper and WiFi subnets. I just feel that I have more control of the situation with a simpler network. Has SUSE addressed this issue? Tell me I don't have to worry about it! Regards, Lew -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 years, 11 months

Again, trying to find a suitable video editor.

by Carlos E. R.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I simply can't find a suitable video editor that works. My goal is to extract the interesting parts of a TV recording. Ie, mark the start of the movie, the end, the commercials inside, and dump all that into a single file, perhaps recoding. One limitation is that movies here have two sound tracks, one in Spanish, and the other one in the original language, typically English. I want to keep both, obviously. I don't need any transition or effect, just a simple editor that allows me to remove unwanted sections. I have tried: pitivi - crashes on start LiVES - works for an hour at 100% CPU and can't load the file. dvbcut - says my mpeg file is not a video (and it certainly is!) tragtor - can convert, but not edit. openshot - almost. My video has two sound tracks, and this tool ignores the second track. cinelerra-cv - I can't make head or tails of it. I tell it to load a video file, it does, but then I don't see how to do anything. It doesn't even display the video. I may have to read the manual, but I dislike having to read a manual for a GUI. Still... kdenlive - Well... crashes too often. I can mark the cuts, but it does not display what I'm cutting. And only one sound track. HandBrake - no edit. Avidemux - one sound track only. Kino - abandonware. Lightworks ?? Shotcut - Segmentation fault on start. cer@Telcontar:~/Videos/Fusion/trabajo> shotcut QSqlDatabase: QSQLITE driver not loaded QSqlDatabase: available drivers: QMYSQL QMYSQL3 QSqlQuery::exec: database not open QSqlQuery::exec: database not open Database::Database(QObject*) Failed to get version. QSqlQuery::exec: database not open bool Database::upgradeVersion1() Failed to create thumbnails table. Database version is 0 Segmentation fault cer@Telcontar:~/Videos/Fusion/trabajo> Flowblade ?? I don't understand the tool. May need some reading. At least it runs. I would like something that would produce a command line to ffmpeg in a GUI. Then I could modify further the options. This would be ideal. tragtor works this way, but has no editor. - -- Cheers Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlbbJ80ACgkQtTMYHG2NR9UmagCeK8UbAAz5/lAjBvscdhzBuxtb WUQAn2jmzoy7810hldN4WwVWQktgVp2g =muqW -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 years, 11 months

leap42.1 - how do I get the hostname displayed on the GUI login/lock screen?

by Per Jessen

$SUBJ says it all - I'm missing the hostname. When several PC are connected via a kvm switch it's handy being able to tell where you are logging in. -- Per Jessen, Zürich (4.6°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 years, 8 months

Question about 42.1 to 42.2 update

by stakanov＠freenet.de

The machine has several repos aktivated (that are as it seems available in their 42.2 version). It has Nivida proprietary driver and is 64 bit. Is it sufficient to run zypper dup with all corresponding repos changed to have a soft migration experience? Where do I run it? In a window or in tty1? Before restarting, should I run manually mkinitrd or should this be automatic after install? Thank you in advance. --- Die Bundesliga hat begonnen! Alle Tore, alle Ergebnisse, alle News: Pocket Liga jetzt im https://app.adjust.com/dpynzd oder https://app.adjust.com/dpynzd herunterladen - kostenlos! -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 years, 10 months

problems typing text (curious!)

by jdd

Hello, I try to copy/paste text from a "cat /etc/apache2/vhosts.d" on my leap server (through ssh). the goal is to write a document page on Pmwiki, but I get the same problem pasting in Thunderbird I'm in kde, also Leap 42.1 example below. I can't have the <Directory and /> on the same line, when I can have it there: <Directory /> (same for the other lines) the two of them are UTF8. I suspect some invisible character. How can I get rid of this annoying thing? Note: I don't know how to send you an example, Thunderbird fix the problem :-). See on right what I have when typing and on left the draft record. http://dodin.org/owncloud/index.php/s/2xcwaGr6hTjg75T so a solution is to type in in Thunderbird, record only as draft and copy paste the draft... thanks jdd cat /etc/apache2/vhosts.d/10.vhost.conf # forbid access to the entire filesystem by default <Directory /> Options None AllowOverride None # Order deny,allow # Deny from all Require all denied # RewriteEngine On # RewriteOptions Inherit #DirectoryIndex index.html index.php </Directory> -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 years, 10 months

Re: [opensuse-factory] broken shasums for 42.2 isos?

by James Knott

On 11/20/2016 09:24 PM, Felix Miata wrote: > wget > http://download.opensuse.org/distribution/leap/42.2/iso/openSUSE-Leap-42.2-… > wget > http://download.opensuse.org/distribution/leap/42.2/iso/openSUSE-Leap-42.2-… > shasum -c openSUSE-Leap-42.2-NET-x86_64.iso.sha256 > openSUSE-Leap-42.2-NET-x86_64.iso: OK > shasum: WARNING: 14 lines are improperly formatted > > Is this expected? It's not what I expected. I ran into the same thing, but was able to find the correct shasum on the mirror page. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 years, 11 months

Leap 42.2 Feedback

by Aaron Digulla

Hi, I've upgraded to Leap 42.2 a week ago and I'd like to share my experiences. It was 90% successful but I have two big pain points: 3D and hibernate. Both features have degraded slowly over the past months (it started with Leap 41.1, 13.2 was very stable for years). Newer kernels tend to be less stable. 4.1 worked pretty good, 4.7 didn't work at all. I used "zypper dup" to upgrade my distribution from Leap 41.1 and that worked well, despite the fact that the wiki wasn't updated for Leap 42.2. But the instructions for 13.x -> 42.1 were easy enough to understand, so I could translate them myself. First boot worked, display manager failed. I had some trouble downloading the correct NVIDIA driver. I have a ASUS GTX 1050 Ti, so I needed 375.20. When I had that, the display manager (sddm?) started working. There were a couple of updates, so I installed those. I'm using KDE. Clicking on "Logout" did nothing. journalctl reported that sddm-greeter was crashing. I tried again, same result. Yesterday, I installed updates again and sddm-greeter refused to work afterwards. I had to reboot manually from the console. This sucks. From my point of view, sddm seems to be more of a problem than anything else. Not being able to do anything from the UI leaves me helpless and frustrated. I understand that Mesa updates replace important 3D libraries and sddm needs them but this piece of software is so important that it should fall back to something useful when it can't use 3D. That said, after updates, a lot of KDE software, chrome and chromium started to act up until I reinstalled the NVIDIA drivers. The error messages were mostly useless (that's what the KDE error reporter told me) or I didn't get any message at all. I'm not sure what less educated users would do in my situation. Not being able to reboot after installing security patches shouldn't happen. It makes me wonder whether I really need those patches. I also have a lot of graphics garbage on the screen after resume from hibernate to disk. That started with Leap 42.1 some time in September, I think. Window frames, Flash web content and desktop icon texts are most vulnerable. My guess is that the KDE 3D code is broken somehow but I don't know how to find out what is happening. Frustrating again. Also, when this happens, I can't disable 3D effects in systemsettings5 since that crashes immediately when I try to open the effects. During hibernate, I get messages on the (text) console that "BUG: sleeping function called from invalid context at ../kernel/locking/rwsem.c:21" Out of 20 attempts to hibernate, 4 fail to resume with the message: "ACPI: Hardware changed while hibernated, success doubtful" Something in the kernel must be broken since my hardware didn't change. And there is another "BUG: scheduling while atomic: systemd-sleep/.../..." Please let me know if I can provide more information to track down these bugs. Regards, -- Aaron "Optimizer" Digulla a.k.a. Philmann Dark "It's not the universe that's limited, it's our imagination. Follow me and I'll show you something beyond the limits." http://blog.pdark.de/ -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 years, 11 months

LVM / software raid / dynamic raid? For a backup server of stable data.

by Greg Freemyer

This email might be offtopic, not sure. I have a minimum of 10 TB of data I want to consolidate off of multiple USB drives to free them up. The data is almost exclusively static and rarely accessed, but I need to maintain it. I have 2 copies of this data in most cases currently, but it is spread around multiple USB3 drives. (I have dozens of them). The plan for now is just to consolidate one copy of the data. I bought a 10 TB SATA drive to hold a first big chunk. I expect it will get filled quickly as I start to consolidate my backup copies, so I want to be able to grow the volume holding the data by adding disks to the pool and extending the volume. I suspect I will also want to have more resiliency at some point. (ie. raid 0 => raid 5 => raid 6) If I truly had confidence in this storage pool I might eliminate both copies of the data that is on USB drives currently. But even with raid 6, I think I would worry about a total LVM or Volume crash Or even a user error! Even though I know LVM and MDraid somewhat, I don't know if is "dynamic" and "reliable" enough for what I want. And advice out there? Goals: - Create a fileserver that I can add drives to from time to time and grow it's capacity. Probably 10TB drives so I don't have too many spindles in the mix. When bigger drives become available, I'd prefer to use them, so being stuck will all the same size drives is a negative. - Performance is non-critical. I've used LTO-4 tapes to do this in the past, but I hope online is a better choice now. With LTO-4, once I had a new data set (typically 100GB - 2TB) I would make a backup with tape and put it away for the time I needed to ensure I still had it. (Often years). - Share the exported volumes with Windows PCs. (Not critical, but preferred) - have the ability to start the drive pool with a single drive and add to it over time - Allow the added drive to be either as SATA USB3.1 - Allow the Raid "protection level" to be adjusted for a given volume from time to time. === I was actually planning to do this with Windows and its "Storage Spaces" solution. I just this afternoon put a new 10TB drive in a windows PC and added it to the "Storage Space" (like LVM). But my reading says the "resilience level" of a volume has to be set at the time the volume is created. I can grow it later, but I can't change it from a raid 0, to a raid 1, to a raid 5, etc. Thanks Greg -- Greg Freemyer -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 years, 11 months

How to set VGA mode after boot, like bootloader does? (for 'kexec' consistency)

by L A Walsh

I found that it's the boot loader that sets the initial screen mode before the kernel is loaded. It is often set again during boot by programs that set the console keyboard and font -- and seems to be separate from the mode one is in during a graphical boot. I'm trying to figure out how to set that VGA mode from "userland" (running as root) just before jumping to a new kernel with kexec. If I don't, kexec starts the new kernel in a non-deterministic mode that displays mostly garbage on the screen up until the screen's mode is reset by console kbd+font progs. Alternatively -- I've also seen the screen go blank for the entire boot process until the system displays the login prompt. Does anyone know how to do set the VGA mode from userland so kexec will start in a known state? I don't think the method used in boot loaders would work, as I think they are making BIOS calls to detect and set modes... :-( Thanks MUCH!... linda -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 years, 11 months

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

1996

1995

1994

1993

1992

openSUSE Users November 2016