August 2017 - openSUSE Users - openSUSE Mailing Lists

[opensuse] authnz_external limit login attempts
by Paul Groves 30 Aug '17

30 Aug '17

Is it possible to limit the number of login attempts allowed with authnz_external in apache2 i.e. after 3rd failed attempt to deny currently it just pops up forever, which of course leaves it easily accessible by brute force attacks. Current .htaccess file: <IfModule !authnz_external_module> Require all denied </IfModule> <IfModule authnz_external_module> <IfModule !authz_unixgroup_module> Require all denied </IfModule> </IfModule> <IfModule authnz_external_module> <IfModule authz_unixgroup_module> AuthType Basic AuthName "Login" AuthBasicProvider external AuthExternal pwauth GroupExternal unixgroup <RequireAll> Require valid-user Require unix-group users </RequireAll> </IfModule> </IfModule> -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 4

[opensuse] coredump size
by Carlos E. R. 30 Aug '17

30 Aug '17

Hi, After running an update on my server, a private application crashed when told to exist. This was expected, but it dumped a huge core, then compressed it, which took several minutes, during which time I had to wait before rebooting, or it would probably stall: > Isengard:~ # ls -lh /var/lib/systemd/coredump > total 2,1G > -rw-r----- 1 root root 32M Aug 17 20:28 .#core.Kodi_MovistarTV.1000.50e69b420ce4463dab76ed6532adb941.21327.1502994490000000.xz17cedf1c2919f899 > -rw-r----- 1 root root 153M Aug 17 20:28 .#core.Kodi_MovistarTV.1000.50e69b420ce4463dab76ed6532adb941.21327.1502994490000000c1fb45b2282ac57c > -rw-r-----+ 1 root root 1,8G Aug 17 20:26 core.Kodi_MovistarTV.1000.50e69b420ce4463dab76ed6532adb941.22507.1502992827000000.xz > -rw-r-----+ 1 root root 13M Aug 17 20:01 core.kodi\x2ebin.1000.50e69b420ce4463dab76ed6532adb941.1999.1502992785000000.xz > -rw-r-----+ 1 root root 11M Aug 17 05:53 core.kodi\x2ebin.1000.50e69b420ce4463dab76ed6532adb941.21167.1502941816000000.xz > Isengard:~ # Notice the huge size, 1.8 GB. The questions are: can I choose compress options, so that it compresses faster and less? Can I configure not to try dump core of certain named processes? I see the configuration is done in "coredump.conf" (/etc/systemd/coredump.conf, but I don't see there I can configure any of it. -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" at Telcontar)

4 18

[opensuse] supportconfig for Leap ?
by Per Jessen 30 Aug '17

30 Aug '17

I was asked to provide 'supportconfig' for a bugreport - I googled it, and it looks like an SLE tool - is it available for Leap42x ? (I don't see in the default repos). -- Per Jessen, Zürich (22.6°C) http://www.hostsuisse.com/ - virtual servers, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 3

[opensuse] Stop Apache https access from non specified domain names
by Paul Groves 30 Aug '17

30 Aug '17

Hi, I have an apache2 server with ssl setup with a domain name e.g. https://mysite.com Set up using <VirtualHost mysite.com:443> when I browse to https://mysite.com I can add an exception for my self signed certificate and all works well. I have also redirected http://mysite.com to https://mysite.com set up using<VirtualHost mysite.com:80> which also works However: When I browse to https://hostname or https://IP address or any other https domain name that is pointing to the same server, it shows the mysite.com virtualhost (which subsequently breaks because it is being accessed via a domain name it is not supposed to). I do not want this to happen. It should not go anywhere at all as I have not configured any other domain name to point to this virtualhost. If anything by default the sites should go to the It Works! page because in my default ssl settings I have <VirtualHost _default_:443> and default HTTP <VirtualHost *:80> and they both have the same DocumentRoot /srv/www/htdocs/default I don't understand why the sites are not going where I have told them. I must be doing something wrong here. Does anyone know how I can make all non-configure https connections point to /srv/www/htdocs/default ? (Exactly the same as http is working currently) -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 11

[opensuse] cannot delete file
by Istvan Gabor 30 Aug '17

30 Aug '17

Hello: This occurs in openSUSE Leap 42.2. user@linux:~> cd tempdir user@linux:~/tempdir> ls -l total 3080 -rwxr-xr-x 1 user users 3147776 Dec 16 2016 image1.jpg user@linux:~/tempdir> rm image1.jpg rm: cannot remove 'image1.jpg': No such file or directory user@linux:~/tempdir> su Password: linux:/home/user/tempdir # rm image1.jpg rm: cannot remove 'image1.jpg': No such file or directory linux:/home/user/tempdir # I can open and copy the file but I cannot delete it. I can not delete the copied file either. linux:/home/user/tempdir # cp -a image1.jpg ../tempdir2 linux:/home/user/tempdir # ls -l ../tempdir2 total 3080 -rwxr-xr-x 1 user users 3147776 Dec 16 2016 image1.jpg linux:/home/user/tempdir # rm ../tempdir2/image1.jpg rm: cannot remove '../tempdir2/image1.jpg': No such file or directory The file system is ext3 on a raid1 array partition. I did a fsck -f on the partition which did not fix the problem (fsck did not report any error). How can I solve this? Thanks, Istvan -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

12 20

[opensuse] using TAR with verify and multi volume
by Paul Groves 29 Aug '17

29 Aug '17

I have always wondered how to do this because it appears it is not possible to use tar with -W (Verify) and -M (multi volume) at the same time. Anyone know a workaround? -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] Firefox with virus
by Paul Groves 29 Aug '17

29 Aug '17

Hi, I have a customer's computer who's firefox profile is riddled with pop up creating viruses and other nasty stuff. Clearing the cache and cookies etc has not resolved the problem. The customer wants to keep their (almost literally) thousands of open tabs and tab groups and also the browsing history. So the question is, is there any known good way to export all open tabs and tab groups and also the browsing history then import it all back into a clean firefox profile? Thanks -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 5

[opensuse] postfix logs
by Mikhail Ramendik 29 Aug '17

29 Aug '17

Hello, I am running Leap 42.2. Where can I find the postfix logs? I see that postfix is listening to port 25, and I know a local application is supposed to send something to port 25. I'd like to know what it sends (if anything), but there is no /var/log/maillog or anything like that. -- Yours, Mikhail Ramendik Unless explicitly stated, all opinions in my mail are my own and do not reflect the views of any organization -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

6 15

[opensuse] 'rpm -Va'
by ellanios82 29 Aug '17

29 Aug '17

- using rpm -Va to verify : size, digest, permissions, type, owner and group of each file, & package signatures, and executes verification scripts if a package has one. .... i get this this output which is too cryptic for me : < rpm -Va S.5....T. c /etc/sane.d/dll.conf missing /usr/bin/lua missing /usr/bin/luac missing d /usr/share/man/man1/lua.1.gz missing d /usr/share/man/man1/luac.1.gz ....L.... d /usr/share/man/man1/ftp.1.gz ....L.... /usr/lib64/browser-plugins/javaplugin.so .....U... /var/lib/mlocate S.5....T. c /etc/mime.types S.5....T. c /etc/fonts/conf.d/10-rendering-options.conf S.5....T. c /etc/fonts/conf.d/58-family-prefer-local.conf .......T. /usr/lib64/gconv/gconv-modules.cache .......T. c /etc/cups/cupsd.conf SM5....T. c /etc/fonts/conf.d/30-metric-aliases.conf ......G.. /usr/lib/qemu-bridge-helper /usr/lib/qemu-bridge-helper: unknown group kvm .......T. c /etc/cups/client.conf .M...U... /var/cache/cups S.5....T. c /etc/zypp/zypp.conf S.5....T. c /etc/ntp.conf S.5....T. c /etc/systemd/journald.conf missing /usr/lib/systemd/system/tmp.mount S.5....T. c /etc/postfix/main.cf S.5....T. c /etc/postfix/master.cf S.5....T. c /etc/sysconfig/SuSEfirewall2 ......G.. /var/cache/man S.5....T. c /etc/rkhunter.d/00-opensuse.conf S.5....T. /var/lib/rkhunter/db/i18n/tr S.5....T. /var/lib/rkhunter/db/i18n/tr.utf8 S.5....T. c /etc/sddm.conf ....L.... /usr/lib64/browser-plugins/javaplugin.so missing /usr/bin/.hmac256.hmac ........P /usr/bin/ping S.5....T. c /etc/clamd.conf S.5....T. c /etc/environment ....L.... c /etc/pam.d/common-account ....L.... c /etc/pam.d/common-auth ....L.... c /etc/pam.d/common-password ....L.... c /etc/pam.d/common-session S.5....T. c /etc/ssh/sshd_config S.5....T. c /etc/default/grub ....L.... /usr/share/java/xml-commons-apis.jar > Does any of this look threatening ?? thanks ....... -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 2

Re: [opensuse] 'rpm -Va'
by ellanios82 29 Aug '17

29 Aug '17

On 29/08/17 11:03, Thomas Nielsen wrote: > > Most changes are (S) size (T) timestamp and (5) md5 sum that are > modified from the original rpm install, but since they are largely > conf files, it is not surprising. There are many articles on howto > read the output. Here one that covers most : > > > Using RPM Verify to Monitor Changes to System Files > > _/https://www.novell.com/coolsolutions/feature/16238.html/_ > > Thomas > > > >>> On 8/28/2017 at 07:24 PM, ellanios82 <ellanios82(a)gmail.com> wrote: > > - using rpm -Va to verify : > size, digest, permissions, type, owner and group of each file, & > package signatures, and executes verification scripts if a package has > one. > > .... > > i get this this output which is too cryptic for me : > > < > rpm -Va > S.5....T. c /etc/sane.d/dll.conf > missing /usr/bin/lua > missing /usr/bin/luac > missing d /usr/share/man/man1/lua.1.gz > missing d /usr/share/man/man1/luac.1.gz > ....L.... d /usr/share/man/man1/ftp.1.gz > ....L.... /usr/lib64/browser-plugins/javaplugin.so > .....U... /var/lib/mlocate > S.5....T. c /etc/mime.types > S.5....T. c /etc/fonts/conf.d/10-rendering-options.conf > S.5....T. c /etc/fonts/conf.d/58-family-prefer-local.conf > .......T. /usr/lib64/gconv/gconv-modules.cache > .......T. c /etc/cups/cupsd.conf > SM5....T. c /etc/fonts/conf.d/30-metric-aliases.conf > ......G.. /usr/lib/qemu-bridge-helper > /usr/lib/qemu-bridge-helper: unknown group kvm > .......T. c /etc/cups/client.conf > .M...U... /var/cache/cups > S.5....T. c /etc/zypp/zypp.conf > S.5....T. c /etc/ntp.conf > S.5....T. c /etc/systemd/journald.conf > missing /usr/lib/systemd/system/tmp.mount > S.5....T. c /etc/postfix/main.cf > S.5....T. c /etc/postfix/master.cf > S.5....T. c /etc/sysconfig/SuSEfirewall2 > ......G.. /var/cache/man > S.5....T. c /etc/rkhunter.d/00-opensuse.conf > S.5....T. /var/lib/rkhunter/db/i18n/tr > S.5....T. /var/lib/rkhunter/db/i18n/tr.utf8 > S.5....T. c /etc/sddm.conf > ....L.... /usr/lib64/browser-plugins/javaplugin.so > missing /usr/bin/.hmac256.hmac > ........P /usr/bin/ping > S.5....T. c /etc/clamd.conf > S.5....T. c /etc/environment > ....L.... c /etc/pam.d/common-account > ....L.... c /etc/pam.d/common-auth > ....L.... c /etc/pam.d/common-password > ....L.... c /etc/pam.d/common-session > S.5....T. c /etc/ssh/sshd_config > S.5....T. c /etc/default/grub > ....L.... /usr/share/java/xml-commons-apis.jar > > > Does any of this look threatening ?? > ...... - thank you kindly ... -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0