I have set up my box to use ldap and I enter a users details in YaST and for the sake of simplicity I make the password 123456 The user gets created on the ldap server and everything seems Ok However I can't log in as that user and if I go to the ldap browser the password is in plain text Instead of saying {ssha}i345y9345yr34 or whatever is says {exop}123456
View 2 RepliesContinuing with my assigned task of migrating the company's PCs to GNU/Linux (openSUSE as server for GNU/Linux clients) I managed to set up a DC with roaming profiles for the few remaining Windows users, user validation and login for the openSUSE boxes and a few network shares with different rights. I know there are no roaming profiles for GNU/Linux and I can live with that but I would like to specify wich users/groups would have their home directories saved locally (notebook users) and which will save them on the Samba server.
By default home directories are saved locally but somehow Samba creates a minimal home directory for each user under /home in the Samba server. How can I tell the client box to use that directory? and how can I set up the few notebook users to save it on their disks? Maybe using the options under Yast > Security... > Users and groups management > Users (LDAP Users filter) > and then select the user and use the "Manage Samba account parameters" plug-in for specifying the different paths cant achieve this.
I have a headless server running Centos and I often login in remotely to administer it. I have passwordless login and sometimes run commands remotely via ssh from a client machine. I've tried to shut the server remotely but have come across a small problem. Here is the output of the command I use to shutdown :Code:unclec@linux-desktop $ ssh centos 'sudo /sbin/shutdown -h now 'PASSWORD : 123ABCAs passwordless login is set up I do not need to enter a password to ssh BUT as I am running sudo on the server I am asked to enter my centos unclec password and this is shown in clear text on my local machine terminal. Is there a way to prevent this or should I edit the sudoers file on centos so it does not ask me to enter the password when "sudoing" ?
View 1 Replies View RelatedRunning SunGard Banner software on RHEL 4.2 x86-32 bit Linux server Oracle Application 10.1.2.3 samba enabled. Users run processes/reports that are logged in a daily log file. In our daily job submission log files the user password shows up as clear text.The password shows up as $PSWD (sample from the logfile):
$JOB
$BANUID
$PSWD
[code]...
I setup the hostname for my linux machine to Linux. If I try ping Linux from the same computer it works. If I try from another computer inside my network the host can not be resolved. If I ping the IP from another computer it works.
I take a look in my router at DHCP client list and my linux machine doesn't have the Hostname set up.
How to broadcast the hostname to the entire network?
I've tried Ubuntu, Arch, and most recently Fedora but the SUSE GNOME environment blows everything else away!
The only problem (so far) is that Network Manager requires you to enter your password every time you login to unlock the password keyring. I want to disable this.
I think some distros disable the prompt by using the login password to unlock the keyring, but I use auto-login (if that makes a difference).
I have a lenovo desktop pc (WIN7) that I connect to the interrnet with. I have a custom built box (SuSE11.3). I have clear internet service and use a USB modem to connect to the internet. Clear does not make a Linux driver yet... I can connect to the Internet through VMware desktop with SuSE as the guest OS. However, I want to connect my other system to a router and my other PC. Would I be able to access the web with the linux box? I have a free NIC card on both pc's, I'm just not savvy enough to network them so if anyone could explain or tell me if it is even posssible to network the 2, My goal is to run SuSE on one, WIN7 on the other and access the internet from both.
View 3 Replies View RelatedI've been meaning to ask about this since Ubuntu 10.10 launched. How come clicking the "Post message..." text box in the Me Menu doesn't auto-clear the text? You have to highlight the text, press Backspace and then post your message. Not very nice or intuitive. No biggie, just surprised it wasn't patched by someone within a day or two of launch as these things often are!
View 1 Replies View RelatedI have been using Nautilus file browser in my fedora 11 desktop to browse Samba shares of our servers. Let me explain my problem.
We have two users test1 and test2 who can access Samba shares for downloading and uploading files.
test1 has read only access.
test2 has read/write access.
When I initially connected to the samba share through test1 user through Nautilus file browser I clicked on remember password.
But now when I try to access the share again, its not prompting for password. It is directly taking test1 user's password who doesn't have write access to share.
How to get the password window back to fill test2 username and password.?
I have setup a nis server and client. At first I didn't have a local user defined on the client. The client then used the user and passwords from NIS, so that was ok.
The problem then is, that when the server is down, I couldn't login to my client anymore. So I created a local user with the same name on the client but with a different password (after I shut the nis server down, if nis server was on, I couldn't create a local user with the same name). I then edited etc/nssswitch.conf as follows:
Code:
# (like no NIS server responding) then the search continues with the
# next entry.
#
# Legal entries are:
#
# compat Use compatibility setup
[Code].....
If NIS server is on: client has to login with the nis password If NIS server is down: client has to login with the local password (as fallback)
However the actual behaviour is that I can only login with the local password now. The NIS pasword doesn't seem to be used anymore.
we're using Network Manager with vpnc plugin (cisco vpn).According to our IT policy, we'd like to prevent the users from saving the password.I've been trying to set the value via gconf as mandatory, but the setting is blatantly ignored:system/networking/connections/1/vpn/ipsec-secret-type...I set it on "ask" and mandatory.I'm quite sure that's the wrong key.
View 2 Replies View RelatedI am using an internal toy svn server, and svn client seems to be configured to store passwords in gnome-keyring by default. How can I disable it or at least switch to kwallet?I am using Debian Testing.
View 2 Replies View RelatedThe ubuntu installation came with my ubuntu (it does not matter which version etc.) Contains sshd_config file with this interesting lines:
# Change to no to disable tunneled clear text passwords
#PasswordAuthentication yes
The same lines are seen in many Ubuntu-related internet pages. This is quite surprising to see.
This seem to contradict to the fact that ssh was created specially to provide authentication (with passwords, of couse) but without sending them by internet as clear text like previous programs did. But I could not find any clear confirmations of that neither in Kubuntu-related documents no anywhere else. I put below fragment of a document from RedHat. This seem to imply that if one will use two "yes", the passwords will be passed in encripted form (and this is what is recommended by RedHat). Is that true? Is this true for Ubuntu too? Is the quoted line from sshd_config wrong? Or incomplete?
[URL] RSAAuthentication yes
The option RSAAuthentication specifies whether to try RSA authentication. This option must be set to yes for better security in your sessions. RSA use public and private key pairs created with the ssh-keygen1utility for authentication purposes.
PasswordAuthentication yes
The option PasswordAuthentication specifies whether we should use password-based authentication. For strong security, this option must always be set to yes.
When I'm logged in, physically on the server as root and logout the lines doesn't get cleared like when you logout as a normal user. This could be a bug and if it is, it could be a security problem. The last actions done shows.
Additional information:
Ubuntu Server 10.10 (32 bit)
RAM: 1GB
Server used as: webserver, database, gaming server.
I have saved a wireless password on my ubuntu 10.10 and I connect to it everyday. The other day I wanted to pass it to my friend to use the connection but I couldn't find the saved password. So I checked some forums and I realized it should be possible to find the saved passwords under Systerm > Preferences > Passwords and encryption keys. Although I can only see one of my saved passwords, the other one is missing.
View 1 Replies View RelatedWhen I go to user settings and try to add a new user, I get this error message: "This configuration could not be saved" You are not allowed to modify.. Even though i'm logged in as the admin. I'm running Ubuntu, the latest version.As of now, my account is labeled as "custom". I try to make it admin, yet it reverts back to custom.
View 9 Replies View RelatedI recently installed a base system from a 10.10 alternate cd and then selected a few packages to build myself a light install. I'm using lxdm as my login manager (desktop manager) and openbox as my window manager, with lxpanel and nm-applet autostarting after loading openbox. that's it so far.
My problem is that almost any changes I make as a user are not saved. ie I tried to make a wireless network available to all users with network manager but it immediately reverts. I tried to make changes to permissions through the gui 'users and groups' tool, (with i installed visa gnome-system-tools package in synaptic) but all changes are immediately forgotten. I also cannot mount another partition using pcmanfm. I get the response 'authentication is required.' These sound to me like permissions issues. what groups do I need to be a part of? update: I checked my groups and I wasnt a member of any so I googled around for whats normal and added myself. Im now a member of the groups:
Code:adm disk dialout cdrom sudo audio www-data video plugdev games users fuse lpadmin admin netdev But still nothing. changes are not remembered.
I've been using empathy to chat on MSN. The problem is I can't erase my password when I want to log off. Theres just one user on this machine, I know it would be easier to create diffrent profiles. But I just want to be able to tell empathy that it should ask my pw to log on to my account.
Is this possible?
Prelude: OpenSUSE 11.2 (2.6.31.8-0.1-desktop), installed Novell client 2.0 SP2 (novell-client-2.0-sp2-sle11-i586.iso).
I found that if any usual user is logged into a NDS-tree, then _local_ root has full access to user's network shares, including the user's home directory located on remote Netware-server. Is it by design or
have I missed something? Nevertheless in windows local admin has no access to network resources mounted of any other user. If you runas shell (as admin) then admin in principle can't "see" network shares which were mounted (connected) by other users - they are accessible ("visible") per session.
Take a physical user FRED. FRED is a linux user ( known by linux on his laptop ) FRED is a Samba user ( Known by samba on the samba pdc server ) When he logs locally (with username/password) on its standalone laptop (with no network), he is known as FRED:user. He access his data in /home/FRED/. When he logs through samba (with username/password) on the domain MY_DOM, he is known as MY_DOMFRED:MY_DOMdomain user. He access his data in /home/MY_DOM/FRED/. ) Is it possible that the human FRED has only one repository and have full access to its repository regardless of how it was connected. If yes, how to do it
2) If not, Is it possible that the human FRED has full access to /home/FRED/.............. and /home/MY_DOM/FRED/.
how do you clear the highlighted results after searching in elvis and other text viewer programs such as less?Also I know it's been mentioned before, but why does pat prefer elvis to vim? Just a personal preference?
View 9 Replies View RelatedI'm new to networks and servers, been using Linux on the desktop for a while now but always relied on the company's IT guy for setting up everyting LAN-based.
Now I want to build up my home LAN, and want to do it with Linux. I've managed to set up LAMP and file share servers.
What I am looking for is information on what I need, and how to set up a server for the following tasks:Centralized Username and Password, that when the user logs into any one of the desktops in the LAN, it uses this for authentication
Something that allows this authentication to be utilized in other servers (file access, web access, router logging, etc.). Something to make it easier for continuing permissions from one service to another. e.g. I have IPCop filtering content, and it has provisions for tracking who is making which request if there is authentication going on. (optionally) to run a script for mounting Samba shares or mapped network drives so from one system to the next. For example, in whatever box somebody logs in, it mounts a server share ("smb://Myserver/users/<username>") to a local folder ("my_user_share").
So;user "fred" ="smb://Myserver/users/fred" and user "wilma" = "smb://Myserver/users/wilma" but both would find their respective one mounted under "~/my_user_share". This would be irrespective of which box they are loggin in with. If the server share location changes (new server/servername), I change it on the server so the next time they log in it points to the right place.
I guess it is similar to Window's Active Directory, though I'm not sure what it's called, how to configure it and what it is and is not capable of doing.
I want to run zypper without being asked for the root password. So I added the commands to the sudoers file:
Code:
# User alias specification
User_Alias ADMIN = XXXX #note: this is not real username.
# User privilege specification
root ALL = (ALL) ALL
ADMIN ALL = NOPASSWD:/usr/sbin/vpnc ,/usr/sbin/vpnc-disconnect ,/usr/bin/zypper ref ,/usr/bin/zypper up
But I'm still being asked for password. I should note the the vpnc commmand is working as expected.
I would like to write a text user interface (TUI) to adjust some text config files etc. Is there a tool or application for creating TUIs like this. I�m talking about those types of config tools which you see executed at first boot.
View 19 Replies View RelatedI have an OpenSuSe 11.0 running openldap (managed by yast) for user authentication on some services.Is there an easy way that I can provide for users to change their own passwords (Preferably a web interface)?
View 1 Replies View RelatedSo I'm attempting to get my system to not require the root password while still requiring some form of authentication. My current issue is getting yast2 and its components to ask for the user's password and not the root's.
Is there a way to have these tools ask for user's password instead of root's?
I'm looking for a user-friendly way to change the password of a user that is *not* currently logged into the machine. We have a machine that is used by a number of users with a low level of tech savvy. The machine gets logged in as a generic user which works for most purposes, but due to a management requirement, we need Firefox to be run under an account set up for the individual user. I've gotten that bit to work fine, but what I can't figure out is a friendly (GUI) way to allow users to change their own password while the machine is logged in as the generic user. I would like to use gnome-passwd, but I've been unable to figure out how to get it to run for a user other than the logged-in generic user.
View 7 Replies View RelatedI need to be able to convert HTML email messages saved as text files (.eml or .msg) to PDF documents, one PDF per email, retaining formatting and images.
Are there any Linux tools that will allow me to do this from the command line (so it can be scripted)?
I'm in the process of configuring a "guest" account for houseguests tose my computer. I've got the file permissions set, but I'd also like to restrict their access to the terminal. It seems to me that most of the damage that can be done to a computer goes through the terminal.I downloaded Pessulus (I use Gnome)but it doesn't require a password. the profiled user can just open Pessulus and alter their profile -- what's the point?Is there a way I can require a user to enter a password, either for any terminal or Pessulus?I like Pessulus -- it's concise and easy to use. But it doesn't seem very secure as I understand it.
View 5 Replies View RelatedI am not sure if anyone here has any experience with Kaspersky Anti-Virus for Linux but my problem relates to that product.
I am running 11.2 openSUSE and after installing the latest version of the Kaspersky product in question, I went ahead and restarted the machine. At the logon screen, when clicking my user name to log in, the password box would not display.
I tried clicking on the other option and trying it that way and after putting my name in the username box, the machine just started thinking and thinking and nothing happens.
I also tried logging in through terminal service but it would not recognize my password to be correct.
I really need to log into my username since I have important files on that Linux partition. I tried mounting this partition in Windows since I have a dual boot setup but I can only view the folders of the partition and not the contents.