March 2023 - openSUSE Users - openSUSE Mailing Lists

ssh and named/bind
by Marc Chamberlin 09 Mar '23

09 Mar '23

Hello - I am running an OpenSuSE 15.3 x64 system where I am also running a NAMED server for my network. > quasar:/etc/named.d # named -v > BIND 9.16.6 (Stable Release) <id:25846cf> > quasar:/etc/named.d # ssh -V > OpenSSH_8.4p1, OpenSSL 1.1.1d 10 Sep 2019 Apparently recently something has changed which is now breaking SSH's ability to connect to a URL with upper case letters in the host name. (I connect and use SSH within a port knocking script which has worked for many years, so I know it is not caused by something I am doing, but by a change that has occurred within either SSH or NAMED.) Internet and Googling searches seem to imply that Bind (NAMED) is now resolving URL's in a case sensitive fashion. https://kb.isc.org/docs/aa-01113 and I suspect this change has just now caught up with me. But, I don't know if the fault lies entirely with Bind/NAMED. SSH appears to be mangling URLs, changing upper case letters within a URL, to lower case before asking a name server to resolve them. (IMHO this is extremely bad behavior on SSH's part because it is destroying user supplied data, something a program should never do!) Here is an example of what I am seeing that leads me to this conclusion - > ssh marc(a)darkstarINT.mydomain.com > ssh: connect to host darkstarint.mydomain.com port 22: No route to host Notice SSH changed the upper case "INT" in the host name "darkstarINT" to a lower case "int" in the query. I checked the log file at /var/log/named/named and indeed saw the query for the URL, from SSH, was all lower case. The message "No route to host" is misleading (probably because of bad error handling) and just means SSH was unable to get an IP address from the DNS server for the URL host name, that it mangled. Doing some further Googling, I found some references to using an ACL declaration in the NAMED configuration files, but I am unable to find any easy/clear guidance or examples on how to do this. Does anyone here know either how to keep SSH from converting a URL, that it is querying, to stop this horrid conversion of a URL to all lower case, or how to get NAMED to handle queries in a case insensitive manner? (perhaps using the ACL declaration that I found some references to.) If not, does anyone know of a better forum I could ask? Links to documentation, with examples, would also be appreciated, after hours of searching I was not able to find anything helpful. I know I could go through all my NAMED configuration files and and either add duplicate zones or use CNAME perhaps to add in all lower case equivalent host names but that seems like a huge burden and a bunch of extra maintenance overhead. Thanks and as always appreciate thoughts, ideas, and the time it takes to write a reply... Marc... -- *"The Truth is out there" - Spooky* *_ _ . . . . . . _ _ . _ _ _ _ . . . . _ . . . . _ _ . _ _ _ . . . . _ _ . _ . . _ . _ _ _ _ . _ . _ . _ . _ . * Computers: the final frontier. These are the voyages of the user Marc. His mission: to explore strange new hardware. To seek out new software and new applications. To boldly go where no Marc has gone before! (/This email is digitally signed and the OpenPGP electronic signature is added as an attachment. If you know how, you can use my public key to prove this email indeed came from me and has not been modified in transit. My public key, which can be used for sending encrypted email to me also, can be found at - https://keys.openpgp.org/search?q=marc@marcchamberlin.com or just ask me for it and I will send it to you as an attachment. If you don't understand all this geek speak, no worries, just ignore this explanation and ignore the OpenPGP signature key attached to this email (it will look like gibberish if you open it) and/or ask me to explain it further if you like./)

4 6

Enlarging BTFS filesystem on Tumbleweed.
by Frank McCormick 08 Mar '23

08 Mar '23

I want to enlarge the file system on my Tumbleweed partition and even after Googling the situation, I feel the whole procedure is definitely above my pay grade :) I have a 500 gig main drive split into various partitions. Disk /dev/sda: 447.13 GiB, 480103981056 bytes, 937703088 sectors Disk model: KINGSTON SA400S3 Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disklabel type: dos Disk identifier: 0xf73048ad Device Boot Start End Sectors Size Id Type /dev/sda1 * 2048 489330687 489328640 233.3G 83 Linux /dev/sda3 489334782 937699691 448364910 213.8G 5 Extended /dev/sda5 489334784 712566783 223232000 106.4G 83 Linux /dev/sda6 712568832 933502975 220934144 105.3G 83 Linux /dev/sda7 933505024 937699691 4194668 2G 82 Linux swap / Solaris Tumbleweed is on sda6, Debian Sid on sda1 using ext4, Fedora is on sda5 also with ext4 with swap space on sda7. I would like to delete Fedora from sda5 and enlarge sda6 to include that space . I'm planning KVM in Tumbleweed with a version of Fedora. What is the best way to go about this? I know partition work can only be done with the disk not mounted so it appears I'd have to boot from an external utility. If possible I'd like suggestions on the best way to proceed. From what I've read a BTRFS file system can only be enlarged from the front and not from the rear? All help appreciated. Thanks

6 20

sudo env for a special group
by mh＠mike.franken.de 08 Mar '23

08 Mar '23

Hi, I'd like to have a few extras variables in a sudo session for a special user or group. I created a new file "mygroup" in /etc/sudoers.d/ with these contents: Defaults exempt_group = mygroup Defaults:%mygroup env_keep="PERL5LIB DISPLAY XAUTHORITY" Is this the correct way to do this? Thx! Bye. Michael.

2 2

[oS-en] How to see nfsserver exports actually being used?
by Carlos E. R. 07 Mar '23

07 Mar '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, "showmount -e" lists exports from an nfs server. How can I see what clients are actually mounting, this moment, something and what? I tried: Telcontar:~ # showmount -a All mount points on Telcontar: *.valinor:/Grande/nfs 127.0.0.1:/data/storage_c/repositorios_zypp 192.168.1.129:/data/storage_c/repositorios_zypp 192.168.1.129:/data/storage_c/repositorios_zypp/11_3/packages 192.168.1.12:/ 192.168.1.12:/Grande/nfs 192.168.1.14:/ Telcontar:~ # But that information is false. - -- Cheers Carlos E. R. (from 15.4 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCZAS9Exwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVJqsAnjkRYvO9+NZwVkErdoVx W1dhH+mrAJ47YmbT0yt4rCwJ0YTC+KxJVmHBXA== =rnnm -----END PGP SIGNATURE-----

2 4

JOB | Linux: on-premises, automation, vm (Edinburgh)
by James Tobin 07 Mar '23

07 Mar '23

Hello, I'm working with a global platform that is looking to hire someone to fulfill a position in Edinburgh that is similar to that of a systems administrator or devops engineer where you will run and mentor a small on-premises data center infrastructure team. VM and automated deployment of servers is critical. Consequently, I had hoped that some members of this list may like to discuss further. I can be contact using "JamesBTobin (at) Gmail (dot) Com". Kind regards, James

1 0

How to configure Postfix when relayhost only offers GSSAPI and NTLM
by Freek de Kruijf 06 Mar '23

06 Mar '23

My new provider offers on port 587 "250-AUTH GSSAPI NTLM" I am trying to configure my postfix using as relayhost this smtp server. Using kmail I am able to simply provide the username, an email address, and a password. However I have a script that has to send an email. I use mailx to do that, which sends the message to postfix and postfix should send it to the server of my provider. My previous provider offered LOGIN an PLAIN, for which it apparently was easy to configure Postfix. I configured both NTLM and GSSAPI as mechanisms in Postfix. In /etc/postfix/ sasl_passwd the username and password are configured. Error messages in /var/log/mail: postfix/smtp[14307]: warning: SASL authentication failure: GSSAPI Error: No credentials were supplied, or the credentials were unavailable or inaccessible (No Kerberos credentials available (default cache: KEYRING:persistent:51)) postfix/smtp[14307]: 92C8D101152: to=<xxxxx(a)yyyyy.nl>, relay=smtp.yyyyy.nl[212.113.64.zz]:587, delay=16453, delays=16453/0.02/0.14/0, dsn=4.7.0, status=deferred (SASL authentication failed; cannot authenticate to server smtp.delta.nl[212.113.64.82]: generic failure) -- fr.gr. member openSUSE Freek de Kruijf

6 9

Finding recent work directories
by Robert Webb 04 Mar '23

04 Mar '23

Since I often get side-tracked and forget what I was doing, I wrote a script to find directories with recent (or otherwise selected) files in them. That makes a better list than sorting directories by their own modification times. This script, 'finddirs_by_latest_file', allows to restrict the search with extra find expression terms, but I usually just run the second script below, 'fblf100', which invokes finddirs_by_latest_file to make two lists; for the latest 5 and 100 days (or whatever time periods given). Excuse all the script boilerplate. Carlos, this may help you find your router config info. --<cut>------------------------------------------------------------------ #!/bin/sh # finddirs_by_latest_file.sh 2022-06-30 rw # # Outputs a list of directories of found files, sorted by the time of # their most recently modified file, and prefixed by a file count. #-----<lib/s/template-errx-getopts.sh>----------------------------------- CMD=finddirs_by_latest_file VERSION=0.1 export LC_COLLATE='C' Cmd=`basename "$0"` umsg() { #------<USAGE>--------------------------------------------------------- printf 'usage: %s %s\n' \ "$Cmd" '[--sdir] [find_options] <find_starting_point>... [find_expression]' \ '' '' \ 'The' 'find_expression, if any, is prepended to an implied:' \ ' -type f' '-exec...' } errmsg() { # usage: errmsg [msg_line ...] test 1 -le "$#" || return 0 printf "${Cmd}: %s\\n" "$@" >&2 } usage() { # for output to stderr, and error exit: usage [msg_line ...] # for normal exit: usage help if [ x"$*" = x'help' ] ;then umsg ;exit else errmsg "$@" ;umsg >&2 ;exit 2 fi } errx() { # usage: errx <exitcode> [msg_line ...] if expr x"${1-}" : x'[1-9][0-9]*$' > /dev/null ;then ExCode="$1" ;shift else ExCode=3 ;set -- "$@" "$BUG: errx(): missing exit code" fi errmsg "$@" ;exit "$ExCode" } BUG="error: software bug" errxbug() { errx 3 "$BUG: $@" } exists() { # usage: exists <path> test -e "${1:?'exists(): null or missing arg'}" || test -h "$1" # test -f "${1:?'exists(): null or missing arg'}" || test -d "$1" \ # || test -h "$1" || test -b "$1" || test -c "$1" || test -p "$1" } #------------------------------------------------------------------------ # Option defaults SORT_BY_DIR_f=false #XXX HACK: '--sdir' option is only recognized when it is first if [ x"${1-}" = x'--sdir' ] ;then SORT_BY_DIR_f=true shift fi GOPTSTRING='hV' while getopts ":$GOPTSTRING" OPT ;do case "$OPT" in #----- h) usage help ;; V) printf 'RW %s %s\n' "$CMD" "$VERSION" ;exit ;; :) usage "missing argument for option: ${OPTARG}" ;; \?) usage "invalid option: ${OPTARG}" ;; *) errxbug "getopts optstring: option: ${OPT}" ;; esac done shift `expr $OPTIND - 1` if [ x"$SORT_BY_DIR_f" = x'true' ] ;then sort_by() { sort -k 3 -k 2,2n ;} else # sort by time, then by dir (default) sort_by() { sort -k 2,2n -k 3 ;} fi #------------------------------------------------------------------------ W=' *[^ ][^ ]* ' # find files: stat <seconds_since_Epoch> <path> # sed: truncate last path component (to parent dir), use '.' if empty, # or '/' if at root # sort by dir, then by recent to old # uniq: most recent of each dir. prefix with file count # sort by time, then by dir (unless '--sdir' option: sort by dir) # sed: remove seconds field export TMPDIR=~/tmp TEMPF=`mktemp --tmpdir "$CMD.XXXXXXXXXX.temp"` \ && trap 'rm -f -- "$TEMPF"' EXIT \ || exit find -H "$@" -type f -exec stat -c '%Y %n' {} + > "$TEMPF" || exit sed -e ' s+^$'"$W"'$[^/]*$+\1.+ t s+^$'"$W"'/$[^/]*$+\1+ t s+^$'"$W"'.*$/[^/]*$+\1+ ' "$TEMPF" \ |sort -k 2 -k 1,1nr \ |uniq -c -f 1 \ |sort_by \ |sed -e 's+'"$W"'+ +2' --<cut>------------------------------------------------------------------ --<cut>------------------------------------------------------------------ #!/bin/sh # fblf100 2021-12-07 rw TOP=~ usage() { printf 'usage: fblf100 [#_by_time_days [#_by_path_days]]' >&2 exit 2 } { printf '=== %s days, in order\n' "${1:-5}" finddirs_by_latest_file "$TOP" -mtime -"${1:-5}" \ || usage printf '\n=== %s days, sorted\n' "${2:-100}" finddirs_by_latest_file --sdir "$TOP" -mtime -"${2:-100}" \ || usage } \ |less --<cut>------------------------------------------------------------------ -- Robert Webb

6 9

So much for all the "Secure Boot" hype...
by David C. Rankin 03 Mar '23

03 Mar '23

Interesting thread: https://www.theregister.com/2023/03/01/blacklotus_malware_eset/ While that article regard windows, the same would likely apply to the unified kernel image if the system is hijacked before it loads. -- David C. Rankin, J.D.,P.E.

2 1

Enlarging BTFS filesystem on Tumbleweed.
by Frank McCormick 03 Mar '23

03 Mar '23

I want to enlarge the file system on my Tumbleweed partition and even after Googling the situation, I feel the whole procedure is definitely above my pay grade :) I have a 500 gig main drive split into various partitions. Disk /dev/sda: 447.13 GiB, 480103981056 bytes, 937703088 sectors Disk model: KINGSTON SA400S3 Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disklabel type: dos Disk identifier: 0xf73048ad Device Boot Start End Sectors Size Id Type /dev/sda1 * 2048 489330687 489328640 233.3G 83 Linux /dev/sda3 489334782 937699691 448364910 213.8G 5 Extended /dev/sda5 489334784 712566783 223232000 106.4G 83 Linux /dev/sda6 712568832 933502975 220934144 105.3G 83 Linux /dev/sda7 933505024 937699691 4194668 2G 82 Linux swap / Solaris Tumbleweed is on sda6, Debian Sid on sda1 using ext4, Fedora is on sda5 also with ext4 with swap space on sda7. I would like to delete Fedora from sda5 and enlarge sda6 to include that space . I'm planning KVM in Tumbleweed with a version of Fedora. What is the best way to go about this? I know partition work can only be done with the disk not mounted so it appears I'd have to boot from an external utility. If possible I'd like suggestions on the best way to proceed. From what I've read a BTRFS file system can only be enlarged from the front and not from the rear? All help appreciated. Thanks

3 3

Video Borked Again
by Mark Misulich 03 Mar '23

03 Mar '23

Hi, I am running Tumbleweed with KDE plasma version 5.27.1, KDE Frameworks version 5.103.0, QT version 5.15.8, kernel version 6.2.0-1-default (64 bit), Graphics Platform X11. My graphics controller is: VGA compatible controller [0300]: NVIDIA Corporation GP108 [GeForce GT 1030] [10de:1d01] (rev a1) (pro g-if 00 [VGA controller]) I previously had problems with video and reported in January on the list that I had an old graphics card and ran nouveau as the video driver. Since then I upgraded the graphics card to an Nvidia GT 1030 and now use nvidia G05 as the video driver. I did a zypper dup on two computers I tend, that both run Tumbleweed. In the update kernel 6.2.0-1 was installed, and afterwards neither computer will boot to graphics display. I found that I could still boot to normal graphic display with the previous kernel 6.1.12-1.1. I also found that I can still boot up to graphic display with the 6.2.0-1 kernel in recovery mode. But I don't think the computer is using the Nvidia drivers in recovery mode, the screen doesn't look the same. I've tried to reinstall all the nvidia kernel drivers, but it hasn't changed anything and allowed the 6.2.0-1 kernel to boot normally to graphics display. Here's a link to a paste of the /.local/share/xorg/Xorg.0.log https://paste.opensuse.org/pastes/9ba3a24b019c Hopefully it is a start for the list to figure out what happened in order to advise me how to fix this. Regards, Mark

4 3