[opensuse] Re: Mix NewtorkManager and traditional ethernet configuration
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 2015-05-22 22:23, Roger Oberholtzer wrote:
On Friday, May 22, 2015, Carlos E. R. wrote:
In NetworkManager you can have connections that start on system start, "shared" for all users, that require the root password to change. But the user can add/remove/configure his own connections.
is that the case in 13.1? if so, I will have to check this out. I don't recall the root password thing. I recall that you could change everything.
Yes, absolutely. The user can connect and disconnect, but for configuration it requires the root password. And it starts automatically on boot. 13.2 I haven't tested. - -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iF4EAREIAAYFAlVfrYIACgkQja8UbcUWM1yRCwD+L+et7gwUSRW99Bf4i7CPAbvu wTYQ4mrJf/+S2i5lWlsA/0RvaqtM6VK2XxKEgwWw44vcZJWbk03YSCuk+oeIs1Qt =FMK7 -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
I am trying this on a 12.3 system (I know...) and when I switch from traditional to Network Manager, none of the existing interface settings are used. All devices are set to DHCP. And, as the user I am, I need to configure the wired connections to have a fixed address. And it lets me. And I am not root. This is what I wanted to not allow. Since Network Manager did not start with the device configurations in /etc/sysconfig/network, how would it have the system settings and not allow the user to set things? What settings are used? So I should assume that this is different for newer systems, and this is just a problem with the old 12.3 NetworkManager? On Sat, May 23, 2015 at 12:28 AM, Carlos E. R. <robin.listas@telefonica.net> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
On 2015-05-22 22:23, Roger Oberholtzer wrote:
On Friday, May 22, 2015, Carlos E. R. wrote:
In NetworkManager you can have connections that start on system start, "shared" for all users, that require the root password to change. But the user can add/remove/configure his own connections.
is that the case in 13.1? if so, I will have to check this out. I don't recall the root password thing. I recall that you could change everything.
Yes, absolutely. The user can connect and disconnect, but for configuration it requires the root password. And it starts automatically on boot.
13.2 I haven't tested.
- -- Cheers / Saludos,
Carlos E. R.
(from 13.1 x86_64 "Bottle" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux)
iF4EAREIAAYFAlVfrYIACgkQja8UbcUWM1yRCwD+L+et7gwUSRW99Bf4i7CPAbvu wTYQ4mrJf/+S2i5lWlsA/0RvaqtM6VK2XxKEgwWw44vcZJWbk03YSCuk+oeIs1Qt =FMK7 -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-- Roger Oberholtzer -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Mon, May 25, 2015 at 8:30 AM, Roger Oberholtzer <roger.oberholtzer@gmail.com> wrote:
I am trying this on a 12.3 system (I know...) and when I switch from traditional to Network Manager, none of the existing interface settings are used. All devices are set to DHCP. And, as the user I am, I need to configure the wired connections to have a fixed address. And it lets me. And I am not root. This is what I wanted to not allow.
Since Network Manager did not start with the device configurations in /etc/sysconfig/network, how would it have the system settings and not allow the user to set things? What settings are used?
NM used to have read-only plugin to support traditional SUSE interface configuration. Plugin is very old and should be present in your version as well, but probably is not enabled by default. See plugins setting in http://linux.die.net/man/5/networkmanager.conf -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
My configuration is: [main] plugins=ifcfg-suse,keyfile According to the man page in the previous post: ifcfg-suse - plugin is only provided for simple backward compatibility with SUSE and OpenSUSE configuration. Most setups should be using the keyfile plugin instead. The ifcfg-suse plugin supports reading wired and WiFi connections, but does not support saving any connection types. That is rather cryptic... Reading from where? One would assume /etc/sysconfig/network. If that is the case, then it does not work. I think that before I continue this, I need to decide which openSUSE versions we want to try to do this with, and then see how the NetworkManager on those releases work. Otherwise I suspect I will be fighting with old bugs in NetworkManager. I know that people would be happy if I sorted this out for 12.1 and 13.1. Maybe I will focus on 13.1 and use that as another reason users should upgrade to 13.1... On Mon, May 25, 2015 at 7:55 AM, Andrei Borzenkov <arvidjaar@gmail.com> wrote:
On Mon, May 25, 2015 at 8:30 AM, Roger Oberholtzer <roger.oberholtzer@gmail.com> wrote:
I am trying this on a 12.3 system (I know...) and when I switch from traditional to Network Manager, none of the existing interface settings are used. All devices are set to DHCP. And, as the user I am, I need to configure the wired connections to have a fixed address. And it lets me. And I am not root. This is what I wanted to not allow.
Since Network Manager did not start with the device configurations in /etc/sysconfig/network, how would it have the system settings and not allow the user to set things? What settings are used?
NM used to have read-only plugin to support traditional SUSE interface configuration. Plugin is very old and should be present in your version as well, but probably is not enabled by default. See plugins setting in http://linux.die.net/man/5/networkmanager.conf
-- Roger Oberholtzer -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Mon, May 25, 2015 at 9:06 AM, Roger Oberholtzer <roger.oberholtzer@gmail.com> wrote:
My configuration is:
[main] plugins=ifcfg-suse,keyfile
According to the man page in the previous post:
ifcfg-suse - plugin is only provided for simple backward compatibility with SUSE and OpenSUSE configuration. Most setups should be using the keyfile plugin instead. The ifcfg-suse plugin supports reading wired and WiFi connections, but does not support saving any connection types.
That is rather cryptic... Reading from where? One would assume /etc/sysconfig/network. If that is the case, then it does not work.
You are right. Looking in sources, the only settings this plugin apparently supports are hostname and whether hostname is changed with DHCP. No per-interface configuration. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 2015-05-25 08:06, Roger Oberholtzer wrote:
fighting with old bugs in NetworkManager. I know that people would be happy if I sorted this out for 12.1 and 13.1. Maybe I will focus on 13.1 and use that as another reason users should upgrade to 13.1...
Well, 13.1 is LTS (Evergreen), so you should use it. - -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iF4EAREIAAYFAlVjQtgACgkQja8UbcUWM1zA4wD+JT+XDXTYCX6qvRei8QRGWGWD It1r157TnElR85TjhtgA/2Onis2YD1rl2eqb7nZ2dWM4vYUkgaju2NBTtIbkt/Bx =msfK -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 2015-05-25 07:30, Roger Oberholtzer wrote:
I am trying this on a 12.3 system (I know...) and when I switch from traditional to Network Manager, none of the existing interface settings are used. All devices are set to DHCP. And, as the user I am, I need to configure the wired connections to have a fixed address. And it lets me. And I am not root. This is what I wanted to not allow.
You have to set that connection to be "shared for all users" or words to that effect. It will request the root password, and from that point that connection can not be altered by a plain user without the root password. Users can set new connections, though. And possibly stop any connection. Maybe this is not what you understood :-?
Since Network Manager did not start with the device configurations in /etc/sysconfig/network, how would it have the system settings and not allow the user to set things? What settings are used?
New settings. - -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iF4EAREIAAYFAlVklQQACgkQja8UbcUWM1wSmgD+N9555x5OhsLGGlKQI+W0JLHG hNhbeLS6NEl0jvW7ngwA+QGDOeHaBYID3Cz2OuQLDCIqauV/hQvZknqd9QqBm8Ep =er8n -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
If the user unclicks 'shared for all users', I would imagine they could then make personal changes without the need for the root password? I would imagine that the root password is not really to keep them from making changes in general for an interface, but to keep those changes from being for all users. This is not really what I am after. I do not want the user to be able to make changes on a class of interfaces even for their own use unless they use the password. All this is just so that as they do whatever is needed to get the wireless set up, they do not accidentally change other interfaces. On Tue, May 26, 2015 at 5:45 PM, Carlos E. R. <robin.listas@telefonica.net> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
On 2015-05-25 07:30, Roger Oberholtzer wrote:
I am trying this on a 12.3 system (I know...) and when I switch from traditional to Network Manager, none of the existing interface settings are used. All devices are set to DHCP. And, as the user I am, I need to configure the wired connections to have a fixed address. And it lets me. And I am not root. This is what I wanted to not allow.
You have to set that connection to be "shared for all users" or words to that effect. It will request the root password, and from that point that connection can not be altered by a plain user without the root password.
Users can set new connections, though. And possibly stop any connection.
Maybe this is not what you understood :-?
Since Network Manager did not start with the device configurations in /etc/sysconfig/network, how would it have the system settings and not allow the user to set things? What settings are used?
New settings.
- -- Cheers / Saludos,
Carlos E. R.
(from 13.1 x86_64 "Bottle" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux)
iF4EAREIAAYFAlVklQQACgkQja8UbcUWM1wSmgD+N9555x5OhsLGGlKQI+W0JLHG hNhbeLS6NEl0jvW7ngwA+QGDOeHaBYID3Cz2OuQLDCIqauV/hQvZknqd9QqBm8Ep =er8n -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-- Roger Oberholtzer -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 2015-05-27 07:17, Roger Oberholtzer wrote:
If the user unclicks 'shared for all users', I would imagine they could then make personal changes without the need for the root password?
I just looked. At least in 13.1 you can not unclick that property, or any property, till you enter the root password.
I would imagine that the root password is not really to keep them from making changes in general for an interface, but to keep those changes from being for all users. This is not really what I am after. I do not want the user to be able to make changes on a class of interfaces even for their own use unless they use the password.
He can not change anything in a password protected connection. However, he can do a new one, I suppose, although they might collide if both are active or try to. - -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iF4EAREIAAYFAlVuGRQACgkQja8UbcUWM1ys7gD8CoJDeVBP4E/Hg2wK6v/saF1s pCBcuAZ3i0NdTrcTEkEA/1U9t5q5/G6dEomxKPlCOrKnLIzQOeEQroFl+EcHN/Wr =BjXI -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
I am mainly trying to stop inadvertent changes to existing devices. Something that would be done accidentally when accessing the wireless connections. On Tue, Jun 2, 2015 at 10:59 PM, Carlos E. R. <robin.listas@telefonica.net> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
On 2015-05-27 07:17, Roger Oberholtzer wrote:
If the user unclicks 'shared for all users', I would imagine they could then make personal changes without the need for the root password?
I just looked. At least in 13.1 you can not unclick that property, or any property, till you enter the root password.
I would imagine that the root password is not really to keep them from making changes in general for an interface, but to keep those changes from being for all users. This is not really what I am after. I do not want the user to be able to make changes on a class of interfaces even for their own use unless they use the password.
He can not change anything in a password protected connection. However, he can do a new one, I suppose, although they might collide if both are active or try to.
- -- Cheers / Saludos,
Carlos E. R.
(from 13.1 x86_64 "Bottle" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux)
iF4EAREIAAYFAlVuGRQACgkQja8UbcUWM1ys7gD8CoJDeVBP4E/Hg2wK6v/saF1s pCBcuAZ3i0NdTrcTEkEA/1U9t5q5/G6dEomxKPlCOrKnLIzQOeEQroFl+EcHN/Wr =BjXI -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-- Roger Oberholtzer -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (3)
-
Andrei Borzenkov -
Carlos E. R. -
Roger Oberholtzer