openSUSE Users September 2016

users@lists.opensuse.org

83 participants
89 discussions

[opensuse] oS 13.1 : "gnome keyring socket is not owned with the same credentials as the user"

by ellanios82

Hello List am using Xfce : - in /var/log/warn : i see warning " The gnome keyring socket is not owned with the same credentials as the user login: /run/user/1000/keyring-4i77r7/control 2013-11-27T13:27:17.434100+02:00 su: gkr-pam: couldn't unlock the login keyring " ............... - any ideas how to fix ? thanks -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 year, 9 months

[opensuse] IPv6 Rogue Router Security Issue

by Lew Wolfgang

Hi Folks, There seems to be a flurry of IPv6 talk going on, maybe this is time for me to bring up the rogue router problem again? I asked about this a couple of times over the years but could never find anyone to comment on it. First, here's the RFC that describes the problem: https://tools.ietf.org/html/rfc6104 Rogue routers have affected me personally at a customer's site. This is a large, professionally managed, dual-stacked network with a number of v4 class B addresses and thousands of hosts. Subnets seem to be /20 CIDR in size, so there are plenty of "neighbors" on any given subnet. I've encountered the situation where misconfigured Windows systems will advertise themselves as an IPv6 router. They then happily accept traffic and drop it all silently on the floor. This problem doesn't seem to bother other Windows boxes too much, but it absolutely kills SSH connections. SSH preferentially tries IPv6 port 22, which when sent to a dumb Windows box results in very long hangups and connection failures. My workaround for my cohort of Linux desktops and servers was to disable IPv6 for both ssh and sshd. This will work for as long as the host network supports dual stacks, but eventually? Then there's the issue of intentional MITM attacks using this vector. If a bad actor has physical access to a subnet, or has compromised a host on that subnet, your goose is cooked. This link mentions some mitigations, but they're quite technical and may require hardware support. https://community.infoblox.com/t5/IPv6-Center-of-Excellence/Holding-IPv6-Ne… So, what is the threat to a home IPv6 user who has WiFi and an Internet of Things with minimal/non-existent security? I personally feel safer behind a nice natted IPv4 firewall with ACL rules between my copper and WiFi subnets. I just feel that I have more control of the situation with a simpler network. Has SUSE addressed this issue? Tell me I don't have to worry about it! Regards, Lew -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 years, 4 months

[opensuse] Again, trying to find a suitable video editor.

by Carlos E. R.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I simply can't find a suitable video editor that works. My goal is to extract the interesting parts of a TV recording. Ie, mark the start of the movie, the end, the commercials inside, and dump all that into a single file, perhaps recoding. One limitation is that movies here have two sound tracks, one in Spanish, and the other one in the original language, typically English. I want to keep both, obviously. I don't need any transition or effect, just a simple editor that allows me to remove unwanted sections. I have tried: pitivi - crashes on start LiVES - works for an hour at 100% CPU and can't load the file. dvbcut - says my mpeg file is not a video (and it certainly is!) tragtor - can convert, but not edit. openshot - almost. My video has two sound tracks, and this tool ignores the second track. cinelerra-cv - I can't make head or tails of it. I tell it to load a video file, it does, but then I don't see how to do anything. It doesn't even display the video. I may have to read the manual, but I dislike having to read a manual for a GUI. Still... kdenlive - Well... crashes too often. I can mark the cuts, but it does not display what I'm cutting. And only one sound track. HandBrake - no edit. Avidemux - one sound track only. Kino - abandonware. Lightworks ?? Shotcut - Segmentation fault on start. cer@Telcontar:~/Videos/Fusion/trabajo> shotcut QSqlDatabase: QSQLITE driver not loaded QSqlDatabase: available drivers: QMYSQL QMYSQL3 QSqlQuery::exec: database not open QSqlQuery::exec: database not open Database::Database(QObject*) Failed to get version. QSqlQuery::exec: database not open bool Database::upgradeVersion1() Failed to create thumbnails table. Database version is 0 Segmentation fault cer@Telcontar:~/Videos/Fusion/trabajo> Flowblade ?? I don't understand the tool. May need some reading. At least it runs. I would like something that would produce a command line to ffmpeg in a GUI. Then I could modify further the options. This would be ideal. tragtor works this way, but has no editor. - -- Cheers Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlbbJ80ACgkQtTMYHG2NR9UmagCeK8UbAAz5/lAjBvscdhzBuxtb WUQAn2jmzoy7810hldN4WwVWQktgVp2g =muqW -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 years, 5 months

[opensuse] leap42.1 - how do I get the hostname displayed on the GUI login/lock screen?

by Per Jessen

$SUBJ says it all - I'm missing the hostname. When several PC are connected via a kvm switch it's handy being able to tell where you are logging in. -- Per Jessen, Zürich (4.6°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 years, 2 months

[opensuse] problems typing text (curious!)

by jdd

Hello, I try to copy/paste text from a "cat /etc/apache2/vhosts.d" on my leap server (through ssh). the goal is to write a document page on Pmwiki, but I get the same problem pasting in Thunderbird I'm in kde, also Leap 42.1 example below. I can't have the <Directory and /> on the same line, when I can have it there: <Directory /> (same for the other lines) the two of them are UTF8. I suspect some invisible character. How can I get rid of this annoying thing? Note: I don't know how to send you an example, Thunderbird fix the problem :-). See on right what I have when typing and on left the draft record. http://dodin.org/owncloud/index.php/s/2xcwaGr6hTjg75T so a solution is to type in in Thunderbird, record only as draft and copy paste the draft... thanks jdd cat /etc/apache2/vhosts.d/10.vhost.conf # forbid access to the entire filesystem by default <Directory /> Options None AllowOverride None # Order deny,allow # Deny from all Require all denied # RewriteEngine On # RewriteOptions Inherit #DirectoryIndex index.html index.php </Directory> -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 years, 4 months

[opensuse] Email Server

by Paul Groves

Hi All, I am looking to set up an email server (on my existing home server). Any recommendations? I want the basic abilities (smtp imap and pop / mail groups / address books etc.) It will mainly be used with my wordpress / osticket installs as well as forwarding emails to lists. I have not set up a linux mail server before so would not know where to start. The server is opensuse 42.1 64-bit Thanks -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 years, 5 months

[opensuse] hdparm on boot and YaST

by Juan R. de Silva

About a month ago I run a cross a post in forums showing the way to run something like 'hdparm -B 254 /dev/sda' upon boot by simply setting some parameter in YaST. Foolishly enough I managed to loose the post and I do not remember it in details. I googled for over an hour now and I cannot come across it any more. Anybody can make a suggestion here, please? -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 years, 6 months

[opensuse] Missing h.264 support in Firefox 44.0

by Krisztián Angyal

Hi I got a problem with playing videos in firefox 44.0 under opensuse leap 42.1. I installed codecs like written on the http://opensuse-guide.org/codecs.php website, but the problem still exists. When I open youtube's html5 support site, I can see, that the codecs are correctly installed and working, excepted H.264. Firefox can play html5 videos, but other sites like vimeo or tumblr can't. All values under about:config -> mediasource.*.enabled are true. Youtube can play html5 videos, but many other sites like facebook, tumblr etc. can't. How could I let firefox play mp4 videos? Thank you for your help :) -- Med venlig hilsen / Kind regards Krisztián Angyal -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 years, 6 months

[opensuse] IPv6 Router Configuration

by Lew Wolfgang

Hi Folks, I finally started to fiddle with my router's IPv6 configuration. My ISP (Cox cable modem) advertises v6 compatibility, so things should work if all my stars line up, right? The router is a ZyXEL USG 20W, but I'm not using the Wifi radio portion. I click the /system/IPv6 "Enable IPv6" check box and it then enables v6 configuration options. Under /Network/Interface/Ethernet I now get options to configure the logical interfaces. (the USG 20W allows individual RJ45 Ethernet ports to be assigned to logical interfaces. I've got switches connected to the various ports to segment the lan appropriately.) IPv6 is disabled for all interfaces at this point. So I click on wan1 to edit it's config and am presented with these interesting options, among others: Yes/No: Enable SLACC V6 Address/Prefix Length (optional) Gateway (optional) Metric: 0-15 Address from DHCPv6 Delegation (add entries) DHCPv6: Server/Client/Relay Yes/No: Enable Router Advertisement Yes/No: Advertised Hosts get Network Config from DHCP6 Yes/No: Advertised Hosts get Other Config from DHCP6 MTU: 1480 default Router Preference: Low/Medium/High Advertised Prefix Table: Add IPv6 address/prefix length Advertised Prefix from DHCPv6 Prefix Delegation (add entries) Egress bandwidth: for load balancing Ingress bandwidth: for load balancing LAN1, LAN2, and DMZ have similar configuration screens. Certainly not plug-and-play! I'm sure that many of the config choices have reasonable defaults, but above that I haven't the foggiest notion how to configure this, and also how to test the configs for proper security. I'm sure I could figure it all out, but at this point in time, why bother? Maybe sometime if I've got a long weekend when no one else is using the network I'll fiddle with it again. Regards, Lew -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 years, 7 months

[opensuse] IPv6 in openSUSE

by Per Jessen

jdd wrote: > Le 10/09/2016 à 11:50, Per Jessen a écrit : >> jdd wrote: > >>> I too often notice that allowing IPV6 brake the home connectivity... >> >> Where do you notice this? That is almost certainly due to a lack of >> skills and/or poor equipment. Either at home or at the providers. >> > nearly in any openSUSE install I have, I has to disable IPV6 to have a > working system. Last time it was due to a very long lag time at > connect. Initially I simply used default install. > > I don't think this is the place to discuss this in depth :-( In this thread ("ssh questions") perhaps not, but in general, IPv6 issues in openSUSE do belong here, I would say. I have never disabled IPv6 when installing or later. In my opinion, any problems are due to misunderstandings or a poorly configured network. I think Carlos had an example of the latter. (his providers problem, not his). I think James and Koenraad have both highlighted the issue in getting a Linux box to propagate an ipv6 prefix handed out by the provider. These are corner-cases though, they're not typical issues. > I simply don't promote IPV6 to anybody That is of course your choice, but I would say it is wrong to suggest IPv6 doesn't work or isn't available. I promote it every chance I get. I've been on IPv6 for almost ten years, since October 2006 when I opened my first tunnel account. Back then I also imagined a steep learning curve, and I didn't really get started until 2009 when I got a static prefix from my provider. The learning curve is just not that steep - especially not from an end-users point-of-view. If you want to play, there are a few concepts you need to understand, I think James mentioned some of them, but that's it. The learning curve is not that steep. Just do it. -- Per Jessen, Zürich (22.4°C) http://www.hostsuisse.com/ - virtual servers, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 years, 7 months

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

1996

1995

1994

1993

1992

openSUSE Users September 2016