I have several local users on a F11 box. I want to keep one of those users from getting to the network. I could upgrade this machine to F12, if it offers a better solution.
View 1 RepliesI just added a 2 port network card to a system that is running Fedora 11, but it is INACTIVE. I open the Network Device Control to activate it but there is no network ports in Network Device Control. It is empty.It looks like the system recognize the card and loaded correct driver.
View 4 Replies View RelatedThe question is related to one single desktop machine, with 3 users.
1) the superuser (me)
2) My elder son
3) My younger son.
As superuser, I can access the network (internet router) via "Wicd" perfectly well.
Both Client users can't.
Do I have to give them special user priviledges? If yes, which ones?
I'm using Sun One LDAP server, (Soon to be moving to openldap). I have one Master server, no slaves, about 60 user accounts.
I'd like to add an attribute to each of the users DN's to restrict there ability to login to specific hostnames. I.e. I have hosts A, B and C. Dev staff can access A and B, but not C, and support staff need to access all of them.
I found a link at [url] which talked about using 'hostsallowedlogin' and 'hostsdeniedlogin' attributes but I'm presuming these are bespoke. If they are, how do you configure the ldap.conf to take note of these attributes when authorizing access?
I am using Debian Lenny on a cluster. If I log in as a regular user and try to adjust the volume on the top right panel (Using Gnome), I get the following message"The volume control did not find any elements and/or devices to control. This means either that you don't have the right GStreamer plugins installed, or that you don't have a sound card configured.You can remove the volume control from the panel by right-clicking the speaker icon on the panel and selecting "Remove From Panel" from the menu."or ifenter "gstreamer-properties" in the terminal and do a test I get the following message"Autodetect: Could not open resource for writing."
if I become the root user and enter "gstreamer-properties" in the terminal and do a test, the test works. Alsamixer works as root, but not as a user.My user error for alsamixer i"alsamixer: function snd_ctl_open failed for default: No such file or directory"I am not sure what setting I need to change to which all users can adjust the volume. Problem 2:When I put in a usb stick I get the following error as a user.Cannot mount volume
After upgrading to F14 from F10, we seem to have access to the internet from our console, and no one is able to connect to server as well. We have static IP from comcast. And all the configurations on the eth0 looks fine. We are able to browse, if we set the server to dynamic ip. Also, we are able to connect another PC (laptop) with the static ip configuration, and browse fine. Read through many messages on this forum, cant get any clues,
View 3 Replies View RelatedI want to control Network manager from the command-line. This worked well enough in Ubuntu 10.04 (with cnetworkmanager, nmcli is another possible choice). Since the upgrade to Ubuntu 10.10 however, a D-Bus exception is raised when I attempt to activate a connection from within a SSH terminal:
org.freedesktop.NetworkManager.PermissionDenied:
Not authorized to control networking.
It may have to do with /etc/dbus-1/system.d/NetworkManager.conf; This issue occurs only when I am ssh'd into the machine; in a gnome session I don't get the same issue -- with the same (admin) user account in both cases.
I want to control Network manager from the command-line. This worked well enough in Ubuntu 10.04 (with cnetworkmanager, nmcli is another possible choice). Since the upgrade to Ubuntu 10.10 however, a DBus exception is raised when I attempt to activate a connection from within a SSH terminal:
Code:
org.freedesktop.NetworkManager.PermissionDenied: Not authorized to control networking.
When I start an upgrade or dist-upgrade from single-user mode, and walk away for a long time, I will have found that some packages insist on prompting for answers to questions midway through. That requires me to physically check the console periodically, and that becomes less practical for long upgrades.Is there a way for me to somehow remote into that console and answer any prompts that would popup? By "way" I mean not involving KVM switches or other hardware other than the LAN setup I have now (i.e., I am able to ssh into the machine being updated from another machine, but not when the machine is in single-user mode).
BTW, the reason I am using single-user mode is that, in the past, I have had problems with upgrading packages like GNOME when I am logged into the GNOME Desktop.
i want to run a stable service for downloading file in fedora 14 in a network with 800 users. i want to whole of users can connect to server and download my files.
View 8 Replies View RelatedI have my own dedicated server box running (using it for game servers). I access it via ssh and I have root control of it. It has FEDORA Operating System. I wanna give FTP control of different directories to different users. Right now there are no other FTP users except root. I have installed vsftpd and dont know what should I do next? How do I add users (who can read/write/delete files) and How do I restrict them to their home directory?
Here is what I want:
username:client1
password:12345
home directory: home/server1
username:client2
password:12345
home directory: home/server2
Im trying to config my intranet to be accessible from inside the network (lan) without need of password and ask for a passwd for those who are viewing from Wan ....
Today my intranet can only be accessed from Lan, external access give me an Unauthorized message, I took look around, try #irc and still can get the appropriated help, I hope that someone here could help me on that...
A piece of my config:
Code:
Using SLES11, squid 2.7, NO TRANSPARENT PROXY, and work fine. Now i need permit a some users only access to a pop from external mail (outgoing mail authenticated)
# Private interface
IF_PRV=eth0
IP_PRV=192.168.1.1
NET_PRV=192.168.1.0/24
# Public interface 1
[Code].....
Are there any basic iptables rules to do this? How to procedure with Yast Firewall for this requeriment?
I have currently have opensuse 11.2 installed. I am trying to setup samba shares which you can only access as certain user. Currently looks like the only way I can access these share is use root username/password!
I want to which GUI I need to use to setup this up properly. And of course what setting to exactly to use.
I have inherited a RedHat 5.4 server that is having an odd issue. Root and all of the user accounts can log in via SSH. Not a single account can log in via the console (sitting in front of the server). If I bring it up in single user made, I can log in with root all day long.
I want to say that this has something to do with PAM, but this is when I play my "Noob" card. Could anyone possibly steer me in the right direction to figure out what is going on?
i hav 2 laptops but there is only one LAN port and i recently splitted them with my own router, the problem is the internet works fine, but i cannot access the schools's network e.g. my friend's shared folder in another room, the school's shared folder, etc. i can only access my own local router network.
View 7 Replies View Relatedwhenever I try and acces my windows network it just says "Failed To Receive Share List From Server"It has previously worked fine in ubuntu and suse. Anyway I can get this to work?
View 2 Replies View RelatedWe have a sipmle office network set up that we also use use to connect to the internet, however of late the number of users has increased thus slowing internet access. Bandwidth upgrade is not an option thus i have to do bandwidth shaping on our linux router. The question is how do set the squid configs to allow certain IP's range a certain percentage bandwidtheg 60% and furthe divide the rest. Alternatively how can allow certain IPs to have higher bandwidth access.
View 1 Replies View RelatedI have my box setup as a router/NAT with two different network cards. One for external connection(connected to the Cable Modem) one for internal connection(used for internal DHCP). It works perfectly when I manually activate the two interfaces after booting(both interfaces always show up as inactive after booting), then the DHCP server and firewall. I am confused, however, by which program has control of these interfaces.
First, there is the Network Configuration (System->Administration->Network), which is where I manually start the interfaces after rebooting. Both interfaces are set to "Activate when computer starts" in here.
Second, Network Device control(System->Administration->Network Device Control), which looks to be almost the same thing as the above.
Third, the NetworkManager applet(on the top bar) - both devices show up as unmanaged when I left click on this, but if I set "Controlled by Network Manager" in the "Network configuration" window(number one above), It still does not work. Can I get rid of two of these programs, or is there some way to edit the startup scripts to start my ethernet cards before the dhcp server/firewall(which is shorewall BTW)?
I have won my fight and my father in law accepted to give gnu/linux a try as his server and to run on the computer of the new company he is starting. One feature he would like is to be able to access his work desktop (graphicaly) from home. On my side, I would like to be able to control his desktop from home if I need to show him things. I already can SSH in terminal to install and maintain stuff but, to move the mouse around and point him where to click or what to use would be invaluable.
View 5 Replies View RelatedSamba up and running on my pc. pc runs FC12 with kde. A laptop has win vista. The pc can access the shares on the laptop but the laptop has authentication issues to access the pc. Note that windows doesnt enforce authentication forincoming network connections.Using the system-config-samba util i tried to map a windows user to the unix user "feduser". The laptop (named LAPPY) has a user (lapuser) which has on windows no password.What should I tell samba config what the windows username should be? lapuser or LAPPYlapuser doesnt work because when accessing the pc via the laptop, the authentication fails. The only auth that is successful is when choosing the same winusername as the unix username.
Secondary, id like to setup the laptop so that the user doesnt have to provide a name and password, or at least not more then once in the lifetime of the laptop. Note that you cant provide an empty password to system-config-samba. How is that possible?
Strange but not really on issue imho:the samba - KDE control module(kcmshall4) (and the smb.conf) shows 2 shares: the homedirs and the data dir the samba server configurator (system-config-samba) shows only the datadir.
I have a troubling networking situation that is compounded by the system being remote without any out-of-band mgmt in place nor a serial connection - but am relying on a coworker entering commands into the terminal for me, or doing stuff in the GUI I have an FC12 i386 install running, that was up and stable for 6 days. Primarily this was only being used for a deployment of nTop. Up through Monday evening, I was connecting to the system (in NY) via VNC (here in SF), and was successfully watching nTop do its thing.
Tuesday morning, I go to connect to SSH and I can't get in. The NAT translation is still in place on the firewall, but there is no connection to the NIC/eth0 from the router. This is what I've had my coworker run:
[code]...
I was going to try and have her run the /sbin/mii-tool eth0 tomorrow a.m. just to verify that the interface isn't physically bad? But this is a brand new desktop, and I can't for the life of me understand why this interface went down. I also have the internal IP on a DHCP reservation, which is the same IP listed in IPADDR in the ifcfg-eth0 file - could this be a problem? should I remove the DHCP reservation? I did this so I could SSH to a public IP which I have NAT'd back to the internal 10.0.x.x address I had my coworker take a look at the GUI, and the eth0 properties are "inactive" and the "Activate|Deactivate" buttons are greyed out.I suppose I can have my coworker grab the /var/log/messages and copy to a USB drive, then email me that from another workstation.
Our F14 server is looses access to the network once we set a static IP.The same IP, if used on any other pc works fine.We had the same exact setup in our F10 server also.
View 9 Replies View RelatedIn GNU/Linux to GNU/Linux? For example there is some Samba-shared dir on Linux machine. And I wanna enter that dir from another Linux machine using Terminal or Virtual Console. In Windows it would start (if I'm not wrong) with "\...". Then a machne name and so on. But if I wanna do it in Linux, I personally only can use Gnome DE with its network..
View 2 Replies View RelatedI have a fedora 10 box with two network card on eth0 I have a pppoe connection to the internet, on second card eth1 I share my internet connection end I set up a samba server but I don't know if the settings are good. How to do this settings right to work fine, the ip are assigned by dhcp I don't use any static ip .When I try to browse the internet from the other computers some site's like {.com ; .org ; .info} are block, other site from {.ro} are working. Someone tell me something about turn off all my filters, but I don't know where to find this filter to turn it off. And when I use samba I can't have and internet access or vice versa. My network look like that:
Code:
eth0
|<--pppoe connection
|
MyComputer
(fedora 10)
|
eth1
|
switch
|
comp.1 comp.2
Win OS MacOS
I have a wired lan at home with 2 XP boxes connecting to a router to a DSL modem. I want to network my laptop, running only fedora os, for file sharing, printing and internet access. I will be using the laptop probably exclusively for creating/maintaining a Drupal-based (LAMP) e-commerce site to replace our old one for our small family business.
View 4 Replies View RelatedI am unable to access wireless network from my notebook. My configuration is Dell i5, 4GB RAM and 1397 W-LAN and I have F13. I can still access Internet through Ethernet using a LAN cable but the network monitor doesn't show list of Wireless networks which my room mate's windows 7 machine easily detects.
If anyone needs more info please provide me the steps to perform to find that out
I want to implement rate control over network interface. So I have configured Linux PC as a router with netem installed and having two interface cards.
device1----> Linux router with netem ---> device2
device1 connects to eth0 and device2 connects to eth1 of the Linux router. eth0 is configured to connect to the internet and eth1 has a static IP address on a local network. I want to limit bandwidth on devices connected to eth0.So I applied the below rules using tc and tbf.
tc qdisc add dev eth0 root handle 1: prio
tc qdisc add dev eth0 parent 1:3 handle 30: netem
tc qdisc add dev eth0 parent 30:1 tbf rate 256kbit buffer 1600 limit 3000
Will the above work or should I use htb instead. I want to simulate the network conditions using different bandwidths.
I find FTP server software confusing in Linux. Using ServU for Windows for an example, all I need to do is to create users via the ServU interface and choose a folder I want that user to have access to and their permissions, and viola, they can connect to that directory, and that directory only.
But in the the land of Linux, it apparently can't be managed this easy. I have a web server with multiple domains, and therefore multiple users need access to their own web root. So with that in mind, what FTP server software should I use (there are plenty out there) and how would I go about to create a user per domain, so that they can log in using FTP to manage their site, and only have access to their own web root, and nothing else?
In researching current ldap issue (not being able to do anything but log in) it seems that there are no concepts of privileges, roles, etc. that could be assigned to a user in LDAP.
I've only seen fields that deal with name, organization, etc., not with application-specific access control.
I have to assign certain access privileges to users authenticated via LDAP server based on the privilege level mentoned in the LDAP server. How to attain this.