I want to run a Web service that performs a lengthy calculation for the customer. If I let PHP perform the calculation, the script gets killed by server timeout. So I figured out it should initiate a batch job.However, the HTTP server process cannot initiate a batch job because user wwwrun is denied access to service at. Why is that so, and is it safe to remove this denial?
View 9 Replieswe got our apache server (running opensuse 11.2) hacked yesterday and I see doing a lsof -i that a bash command using account wwwrun connects all the time to a botnet [URL] and even if I kill it, it reconnects again and again. I've clean the /tmp folder, I've check the crontab but I can't find it.
View 5 Replies View RelatedI want to ask a question maybe a stupid one Here what i understand saying linux user : i can create various users for example for me , for my brother and so on to log in to system. But what does it mean that apache runs under user wwwrun and group www by default . What kind of user is that ? It's explicitly not a user kind that one I know about .
View 6 Replies View RelatedPrelude: OpenSUSE 11.2 (2.6.31.8-0.1-desktop), installed Novell client 2.0 SP2 (novell-client-2.0-sp2-sle11-i586.iso).
I found that if any usual user is logged into a NDS-tree, then _local_ root has full access to user's network shares, including the user's home directory located on remote Netware-server. Is it by design or
have I missed something? Nevertheless in windows local admin has no access to network resources mounted of any other user. If you runas shell (as admin) then admin in principle can't "see" network shares which were mounted (connected) by other users - they are accessible ("visible") per session.
Take a physical user FRED. FRED is a linux user ( known by linux on his laptop ) FRED is a Samba user ( Known by samba on the samba pdc server ) When he logs locally (with username/password) on its standalone laptop (with no network), he is known as FRED:user. He access his data in /home/FRED/. When he logs through samba (with username/password) on the domain MY_DOM, he is known as MY_DOMFRED:MY_DOMdomain user. He access his data in /home/MY_DOM/FRED/. ) Is it possible that the human FRED has only one repository and have full access to its repository regardless of how it was connected. If yes, how to do it
2) If not, Is it possible that the human FRED has full access to /home/FRED/.............. and /home/MY_DOM/FRED/.
I recently used the newusers command to generate several user accounts from a text file. That process seemed to go well until I tried to su into one of the new accounts.
This behavior appears for all the accounts that were created from the text file and the newusers command. It seems that several configuration files that should have been autogenerated for these new users were never created. I was able to confirm this was the problem by copying .bashrc and .bash_profile from a user that was created with the "useradd" command into the /home/newaccount directory. After logging off and logging into the newaccount again, the issue is corrected.For the record, I just read this forum post and I'm looking for an alternative to this. If this is the most efficient way to accomplish my goal, then I'll try the route mentioned in the thread. I'm still open to alternatives.
I created a VMware Workstation VM with OpenSUSE 11.2. When I copy the VM to a new location the network configuration disappears. If I go into the networking control panel and save, the interface names are changed. Originally had 2 nics as "eth0" and "eth1", copy the vm, configure network and the interfaces are now "eth2" and "eth3". How do I get back to my original configuration?
View 7 Replies View RelatedI've installed BOINC for first time (from suse repos). I'm worried about running BOINC as root. How can this be avoided? I'd first like to exhaust all options with the official opensuse repo version of BOINC. If I am unsuccessful, then I'll try the version from Berkeley website.
View 13 Replies View RelatedI need to run a script (which requires root privileges) on login per-user only. I want this to runtomatically so I'll add an appropriate line to .profile.A couple of questions:1 The easiest way I can think of to run the script as root is to setuid, but I know there are security concerns. Is there a better way
View 6 Replies View RelatedI have had two instances recently where I was unable to log in to my computer with uid 500, but I could log in as root. In the first case, I could log in as user 500 to virtual terminals (ctrl-alt-F2, etc) but I could not log in to X. I found that, in the file /etc/pam.d/password-auth-acthere was an extra line that read"accountrequiredpam.access.so"I did not put that line there. When I removed the line, I could log in fine.In the other case, I could log in as user 500 to X, but could not log in to virtual terminals as user 500 (but could as root). I found that, in the file/etc/pam.d/system-auth-acThere was the same extra line as above. And again, I did not put it there, but when I removed it the problem was solved and I could log in to virtual terminals as user 500.I would like to find out, step by step, what happens when I enter my username and password in either a virtual terminal or in X. The login info must be passed to something that checks some files and then lets me in or not. How does that work?
View 1 Replies View RelatedI am developing an application which has various modules; some pure fortran, some c++ linking to fortran, using g77 and g++. Does anyone know how to prevent 'fort.6' files being produced and put the output to 'stdout' instead? They are written by write(6,*) or write(*,*) statements. They end up in 'bin' which causes big problems.
View 1 Replies View RelatedQ: How can I allow my users to mount a cifs share without an entry in fstab in OpenSuse 11.4?
I have an answer myself. Until OpenSuse 11.2 I could mount my samba shares by making mount.cifs and umount.cifs setuid root. Today I installed OpenSuse 11.4. Unfortunately mount.cifs isn't anymore allowed to be setuid due to security concerns. Security is not an issue in my case, so I copied the mount.cifs and umount.cifs from 11.2 to make it work again:
1. Download cifs-mount-3.4.2-1.1.3.1.x86_64.rpm from this repository (I use 64 bit):
"http://download.opensuse.org/distribution/11.2/repo/oss/suse/x86_64/"
2. Extract the files mount.cifs and umount.cifs from the rpm and copy them to /sbin
3. Make them setuid root:
Code:
linux-y5qw:~ # chmod u+s /sbin/mount.cifs
linux-y5qw:~ # chmod u+s /sbin/umount.cifs
4. Mount your cifs shares as a normal user:
Code:
martin@linux-y5qw:~> /sbin/mount.cifs //192.168.2.2/data /home/martin/data/ -ousername=martin
Password:
We would like to use Kiwi LTSP to boot some old PCs straight in to a Windows terminal session. We have this working with RDesktop, but we would like to load balance the connections to our Citrix servers, which I don't believe you can do with RDesktop as it points to a single Windows server.
Is there a way to get LTSP to connect to published ICA applications on boot in a similar way to specifying screen07=rdesktop in lts.conf?
I always notice that xdmcp always runs on my system. I don't want it to. These are my settings and I tried to reboot. xdmcp still runs. How do I stop it once for all.
/etc/sysconfig/displaymanager
DISPLAYMANAGER="kdm"
DISPLAYMANAGER_REMOTE_ACCESS="no"
DISPLAYMANAGER_ROOT_LOGIN_REMOTE="no"
[code]....
I have installed Wine on my Fedora 14 and got Security alert.SELinux has prevented wine from performing an unsafe memory operation.SELinux denied an operation requested by wine-preloader, a program used to run Windows applications under Linux. This program is known to use an unsafe operation on system memory but so are a number of malware/exploit programs which masquerade as wine. If you were attempting to run a Windows program your only choices are to allow this operation and reduce your system security against such malware or to refrain from running Windows applications under Linux. If you were not attempting to run a Windows application this indicates you are likely being attacked by some for of malware or program trying to exploit your system for nefarious purposes. My concern is if i hide this attempt, it will not stop wine to from trying to do it, only hide security alerts. This alert is occurred already nearly 5000 times in last 30 min and counting. Wine server is using 10% CPU on this, so only to hide alerts is not a solution, isn't it?
View 5 Replies View Relatedhow can I allow a non-root user to do ping?
View 6 Replies View Relatedhow to add user to my opensuse 11.3 box from a ldap server ? I used useradd but can't log in with the ldap credentials .
View 1 Replies View RelatedI have installed VMWare on my laptop. Host operating system - Opensuse 11
Two virtual machines - Both of them have Opensuse 11 as Guest Operating System.
When I start both virtual machines I get the following message.
"Message from <local host name> : The network bridge on device vmnet0 is not running. The virtual machine will not be able to communicate with the host or with other machines on your network. Virtual device Ethernet0 will start disconnected"
I cannot ping to another Virtual machine from one virtual machine. I get "Host Unreachable" message.
I've been working on getting NoMachine and FreeNX working together ... and they're both working well, listening on different ports (guess I should write a howto). At some point I decided to write an init script to control FreeNX behaviour (start, stop, status, setup), since the Ubuntu version has one (called freenx-server) and openSUSE doesn't, but I noticed that it was not necessary, as FreeNX got started automatically... but how ? I could not find any init.d script or command which would start the FreeNX server. Indeed it wasn't actually running :
Code:
neelix:~ # /usr/bin/nxserver --status
NX> 100 NXSERVER - Version 3.2.0-73 OS (GPL, using backend: 3.2.0)
[code]....
i'm trying to get a bind server up and running on my opensuse installation but I'm having some slight problems, I've been looking for a solution to what is probably a silly problem for quite a while so I decided to come here.
[Code]...
Desktop that has wireless built into motherboard worked in 11.3 (as best as I can remember, don't really use it normaly). Trying to connect to my wireless router (only one I have rights to).Wireless router is WEP with opensystem authentication, works fine for laptop (Windows)Networkmanager scans and displays local networks
Networkmanager shows:
acivating
setting network address
connection failed
[code]...
Is there an easy way to batch convert CGM images into anything modern (preferably SVG, because they're vector graphics)? The furthest I've gotten is ImageMagick, which tries to open them, but dies saying it can't find "ralcgm", mhich I can't find in any repos.
View 9 Replies View RelatedCode:
#suse's /etc/fstab
/dev/sdb1 /windows/FAT vfat users,uid=1000,gid=100,rw,utf8=true
[code]....
block internet on server with multiaccess.
Some users may use only openoffice and thunderbird local on server without access to WAN but others at the same time must have full access.
i try to install bugzilla on suse 11.2. For that i want to add a new user / group to the apache2. I want to add the following commands to the envvars but there is no such file available
export APACHE_RUN_USER=apache2
export APACHE_RUN_GROUP=apache2
I have forgotten how to allow users to use the dialup internet with out logging on as root.
Any have any idea how to accomplish this ?
I want to create a user on my opensuse 11.4 computer, for the sole purpuse of using it to access network shared data (eg samba, nfs, etc). This user must be in the "Users" group, but it must NOT be able to login directly on the computer, i dont want him to show up on the GDM users list at logon, he must not be able to login to a terminal, etc.
How can i add a user like that? must he belong to a specific group?
Just installed OpenSUSE 11.2 and I have to say it feels great.Only gripe I currently have is the NetworkManager that is starting up very slowly. When I have logged into KDE KNetworkManager applet says that NetworkManager is not running and hence I have no network connection. This is fixed if I start NetworkManager (as root) or just wait a couple of minutes. I have one ethernet interface only, no wireless
View 4 Replies View RelatedI have a little bit of a problem, I run openSUSE as a server on a Dell PowerEdge T610. I use it for sharing files in a local network and as a web server accessible through the public IP (configured through router DMZ). Also, I use Teamviewer for remote control in order to avoid some compatibility and network problems. Generally the computer runs flawless but from time to time, as about once in two weeks, all network related services except the Apache server which runs just fine, and is still accesible, crash. The Samba share can't be accessed anymore, the Teamviewer is also dead and the only way to put everything back in order is a restart. The thing is I don't know if an error occurs since the server hasn't got a monitor installed, and more than that I do most of my work remotely (as in miles and miles away from the location) and it takes me quite some time to actually get there and see what's happening.
So, any ideas what might be happening? I belive that there might be some information in some of the logs, but as I am not an expert in Unix like operating systems I don't exactly know where to start from.
Skype works for me, but there is a small thing i like to solve.
For the x64 version i need to start skype with a bash command so that the video and sound works and i thougth that a simple batch in folder bin would solve it.
So that it gets executed automatically once the desktop loads. Seems it doesn't since i still have to do it manually.
How do i execute a batch automatically upon startup under KDE?