From: Digestifier To: Linux-Admin@senator-bedfellow.mit.edu Reply-To: Linux-Admin@senator-bedfellow.mit.edu Date: Thu, 1 Sep 94 17:14:08 EDT Subject: Linux-Admin Digest #11 Linux-Admin Digest #11, Volume #2 Thu, 1 Sep 94 17:14:08 EDT Contents: Re: Newbie Inetd.conf & telnetd question (Steve DuChene) Re: Newbie Inetd.conf & telnetd question (Steve DuChene) Multiple xterms in Seyon? (Ti Co Nuong) Re: Crond annoyance (Matthew Dillon) Re: SLIP monitor script! (Matthew Dillon) Termina Hanging Problem ("Jae W. Chang") Re: Crond annoyance (Andreas Wacknitz) Re: Host routing patches for DIP... anyone interested? (Viktor T. Toth) Linux blew up my HD-->Re: Floppy disk errors (Greg Cisko) Security problem (Andreas Wacknitz) Looking for sys adim tools (Terry Robison) Re: NFS/pormapper security bug and fix (Linux) (H. Peter Anvin) Re: Pascal and ADA on Linux ? (H. Peter Anvin) Re: Admin utils for linux ? (S.Herbert@shef.ac.uk) Re: Hostname on Slackware 2.0 (John Michael Floyd) Re: Security hole in ntalkd (Rene COUGNENC) Re: Linux hangs up and no trace why (Mark Krischer) ---------------------------------------------------------------------------- From: s0017210@cc.ysu.edu (Steve DuChene) Crossposted-To: comp.unix.admin Subject: Re: Newbie Inetd.conf & telnetd question Date: 1 Sep 1994 08:21:50 GMT Rashid Karimov (root@sarnode.saratov.su) wrote: : Hi ! : : S. Kharbanda TM (anam@netcom.com) wrote: : : : I am trying to setup our internet server to accept telnet connections at : : : a specific port and directly login to an account (so that the user does : : : not see a login prompt). Any ideas on how i go about doing this ? : : : I have seen it done, just don't see how to do it, have looked at the : : : inetd.conf file trying to figure it out... Stuff deleted... : I'd just say this is _real security hole. You( i mean Mr.Kharbanda) : should be absolutely sure you want to do it. The only bar for : possible intruders would be "secret" post number . : Anyway , account w/o logname & passwd is not good for any Unix box. : At least , try to restrict it ( chroot() ). I would have to agree with the above opinions! If someone tried to do this sort of thing on our campus I couldn't imagine the uproar in the computer center! If you don't realize it puting this sort of account on the Internet is a security hole that affects everone with a computer on the net not just your installation. I would imagine your network provider could easily yank your connection if a problem arose because of this practice. -- | Steven A. DuChene sduchene@cis.ysu.edu or s0017210@cc.ysu.edu | Youngstown State University | Computer Science / Math / Mech. Eng. |They all laughed at Albert Einstein. They all laughed at Columbus. |Unfortunately, they also all laughed at Bozo the Clown. ------------------------------ From: s0017210@cc.ysu.edu (Steve DuChene) Crossposted-To: comp.unix.admin Subject: Re: Newbie Inetd.conf & telnetd question Date: 1 Sep 1994 08:28:37 GMT Just one more thing, the above situation is a perfect example of amateur systems/network administration at it's worst! No idea what the concequences of such an action could be on the rest of the Internet. There are whole organizations working to prevent security breaches and here is someone who wants to set up one on purpose! -- | Steven A. DuChene sduchene@cis.ysu.edu or s0017210@cc.ysu.edu | Youngstown State University | Computer Science / Math / Mech. Eng. |They all laughed at Albert Einstein. They all laughed at Columbus. |Unfortunately, they also all laughed at Bozo the Clown. ------------------------------ From: kimxuyen@po.EECS.Berkeley.EDU (Ti Co Nuong) Subject: Multiple xterms in Seyon? Date: 1 Sep 1994 08:35:38 GMT HI, Could you please tell me how to open multiple xterms on seyon? I dialed into school from my home, and all I get is just one xterm! A guy told me I had to purchase something called PCXremote (for Windows)but is it is so expensive and I don't want to leave Linux! If SEYON can support multiple xterms over the phone line, could you please email me and show me how to do it? Thank you very much in advance. kimxuyen@cory.eecs.berkeley.edu Newsgroups: comp.os.linux.admin Subject: Summary: Followup-To: Distribution: world Organization: University of California, at Berkeley Keywords: Newsgroups: comp.os.linux.admin Subject: multiple xterm...? Summary: Followup-To: Distribution: world Organization: University of California, at Berkeley Keywords: Newsgroups: comp.os.linux.admin Subject: Multiple xterms in SEYON? Summary: Followup-To: Distribution: world Organization: University of California, at Berkeley Keywords: Could you please tell me how to open multiple xterms on seyon? I dialed into school from my home, and all I get is just one xterm! A guy told me I had to purchase something called PCXremote (for Windows)but is it is so expensive and I don't want to leave Linux! If SEYON can support multiple xterms over the phone line, could you please email me and show me how to do it? Thank you very much in advance. kimxuyen@cory.eecs.berkeley.edu ------------------------------ From: dillon@apollo.west.oic.com (Matthew Dillon) Subject: Re: Crond annoyance Date: 1 Sep 1994 10:20:47 -0700 :In article <33qm2p$djd@garlic.com> mwarnock@garlic.com (Matt Warnock) writes: :>In article <33q66e$r7b@styx.uwa.edu.au>, :>Christopher Cason wrote: :>>I just installed some of the new Slackware 2.0 disks, and they have apparently :>>replaced my crond with a new one. I can't find a specfic man page for this :>>program. It's a nuisance since it insists on writing to my console every few :>>minutes. Does anyone have the *specific* man page for this (not the one already :>>in the base system as it's different.) or know a command-line switch to shut :>>it up ??? I've just got it killed for now. :> :>I had the same problem till I replaced the file from an older distribution. :>The one you *have* that barfs all over is Dillon crond. The one you used to :>have is probably Vixie crond. The man page says you can turn debug off with :>-d0 and logging off (which is probably the ticket) with -l0. I wish it would :>use the system log, not the console. :> :>Good luck. :>-- :>W. Matthew Warnock, Attorney (mwarnock@garlic.com) Tel:408.778.7273 :>60 West Main Avenue, Suite 12A, Morgan Hill CA 95037-4553 Fax:408.778.7989 Damn It! Doesn't anybody read instructions? I very CLEARLY state in the README file that the proper way to start crond from your rc file is: /usr/bin/crond -l8 >>/var/log/cron 2>&1 If you don't do that, then you deserve the log messages you get on your VC1 ! -Matt -- Matthew Dillon dillon@apollo.west.oic.com 1005 Apollo Way ham: KC6LVW (no mail drop) Incline Village, NV. 89451 Obvious Implementations Corporation USA Sandel-Avery Engineering [always include a portion of the original email in any response!] ------------------------------ From: dillon@apollo.west.oic.com (Matthew Dillon) Subject: Re: SLIP monitor script! Date: 1 Sep 1994 10:27:38 -0700 :In article <342l8q$m0u@insosf1.infonet.net> suman@s150.infonet.net writes: :>There should be a lot of people happy to see this. :> :>#!/bin/csh :>set sleep_time=5 :>loop: :>set flag=`ps | grep -f/etc/dip.pid` :>if ( $status == 1 ) then :> echo DIP process not running. Establishing connection... :> /sbin/dip /etc/giant.dip :> sleep 10 :># else :># echo SLIP process is running. :>endif :>sleep $sleep_time :>goto loop :> :> :>Overhead is less than 1% (usually .2 %, unless establishing connection) :>Anyway... Have fun. Leave me a message if this works for you. :> :> :>Now to the next challenge... UNIVEL... :>-- :>Suman Sahu suman@s150.infonet.net Or you can pop dslip201.tgz from sunsite.unc.edu in pub/Linux/system/Network/serial. dslip is a complete SLIP management suite that does not use dip. It is specifically designed to deal with reconnecting when a connection is dropped and can manage multiple lines simultaniously. -Matt -- Matthew Dillon dillon@apollo.west.oic.com 1005 Apollo Way ham: KC6LVW (no mail drop) Incline Village, NV. 89451 Obvious Implementations Corporation USA Sandel-Avery Engineering [always include a portion of the original email in any response!] ------------------------------ From: "Jae W. Chang" Subject: Termina Hanging Problem Date: Thu, 1 Sep 1994 01:14:53 -0400 I need help. I have running Linux 1.1.28 w/ slip. My terminal - xterm - hangs at seemingly almost random times. It generally only happens when I'm inputting characters into the terminal window. It looks as though no more input is being accepted and output stops being displayed. Doing a netstat I got Recv-Q to be some 700 and Send-Q to be 0. It seems as though bytes are being buffered by the socket, but the data isn't being read from the socket. It also looked like data was still being sent because Send-Q was 0. I then typed ls then did another netstat. I got Recv-Q to be some 900 and Send-Q to be 0. It seems as though ls was executed by the remote machine and the result was received by my local machine and being queued in the buffer. However, the display on my terminal window did not change - no "ls" nor any result of ls. Any help to solve this problem will be greatly appreciated. Jae ========================== jae+@cmu.edu ------------------------------ From: aw@informatik.uni-kiel.d400.de (Andreas Wacknitz) Subject: Re: Crond annoyance Date: 1 Sep 1994 16:47:59 +0200 In <33uq7b$pbd@agate.berkeley.edu> greg@muttley.EECS.Berkeley.EDU (Greg Jesus Wolodkin) writes: >Matt Warnock wrote: >>Christopher Cason wrote: >>>I just installed some of the new Slackware 2.0 disks, and they have [..] >>>replaced my crond with a new one. I can't find a specfic man page for this >>>program. It's a nuisance since it insists on writing to my console [..] >>I had the same problem till I replaced the file from an older distribution. >>The one you *have* that barfs all over is Dillon crond. The one you used to >>have is probably Vixie crond. >The fact that it's Dillon's crond isn't the problem at all -- as far as I >can tell it's just Slackware 2.0's install. Try "ps -aux | grep cron" and >you'll find you have two of them running. One is started in rc.M, I think, >and the other is in rc.inet2. Kill the latter, and comment it out from >rc.inet2 -- it's the one that is writing to the console. The crond in rc.M should only be started if you haven't installed TCP/IP. So it's strange that you have two cronds running. BTW my workaround is to change the entry in rc.inet2 to this: ${net}/crond -l0 -d0 >/dev/null 2>/dev/null & I know that is bad but I got rid of the annoying messages. >Cheers, >Greg Andreas -- Andreas Wacknitz aw@informatik.uni-kiel.d400.de ------------------------------ From: vttoth@vttoth.com (Viktor T. Toth) Subject: Re: Host routing patches for DIP... anyone interested? Date: Thu, 1 Sep 1994 01:09:00 In article Carlos Dominguez writes: >I think this is interesting.. After I run dip I run route and see no routes, >check ifconfig and its only set to localhost, not my IP address. > >So if i run ifconfig and route after dip, all works fine. This typical problem seems to be caused by one of two things: 1: dip needs to be setuid to root, 2: make sure dip is compiled with the right path for route and ifconfig. Viktor ------------------------------ From: cisko@d0tokensun.fnal.gov (Greg Cisko) Subject: Linux blew up my HD-->Re: Floppy disk errors Date: 1 Sep 1994 14:40:31 GMT Reply-To: cisko@d0tokensun.fnal.gov In article 6655@nmt.edu, swhitlat@whitenmt.edu (Steven Whitlatch) writes: > I'm going to do a little more testing of the floppies with > Kernel_1.1.49 because I had an incident occur with Kernel_1.1.48 > where, at one point when I was copying to the floppy, there > was a write to the floppy that just never stopped. I did > kill -9 PID and that didn't stop it,. Nothing would stop it and > a reset was the only thing that would. ctrl-alt-del would not Well, be careful when hitting the RESET button. I had linux on a UMSDOS partition on a 100MB drive. I started X, and the disk kept accessing & just wouldn't stop. In a panic, I hit RESET. What I heard was the worst sound you would ever want to hear from a computer disk. As the disk was a couple of years old, I took it apart. The mechanism that moved the heads back & forth across the disk was physicaly broken. I think a better solution would have been to turn the power off. Then back on after the disk stops spinning. BTW, I learned from my experience. Linux is now very happy on a 340MB drive with Linux swap & Linux native partitions. The speed difference of Linux on Linux native partition vs on UMSDOS partitions is very big. With the UMSDOS partitioned version of Linux it would take 60 minutes to compile the kernel. With Linux partitions, the same Kernel compiles in 15-20 minutes. Hardware config: Salckware 2.0 Kernel 1.1.18 486/DX2 66 8MB ram 16MB swap > even work. That was with 1.1.48. So, I'd like to know how > 1.1.49 does with the floppies. I didn't expect to see that > message about "group 0 not in group" with 1.1.49 > > > > Steve Whitlatch > swhitlat@prism.nmt.edu ------------------------------ From: aw@informatik.uni-kiel.d400.de (Andreas Wacknitz) Subject: Security problem Date: 1 Sep 1994 16:52:47 +0200 Hello Linuxers! I have a security problem with the popd coming with slackware 2.0: You don't need a password when sending mails. Passwords are only requested when reading mails. I can't believe that this the normal behaviour of a popd! Am I wrong? Any help will be appreciated... Andreas -- Andreas Wacknitz aw@informatik.uni-kiel.d400.de ------------------------------ From: terryr@krang.vis.mu.OZ.AU (Terry Robison) Subject: Looking for sys adim tools Date: Wed, 31 Aug 1994 23:06:44 GMT Hello, I'm looking for some system admin tools under linix. Do they exist? If so, where. Tools like keeping track of logged on time, cpu use, disk use, ftp use. That sort of stuff Terry terryr@krang.vis.mu.oz.au -- Computer Vision and Pattern Recognition Laboratory (CVPRL) Computer Science Department Tel: +613 344 9150 The University of Melbourne Fax: +613 348 1184 Parkville 3052, Australia ------------------------------ Crossposted-To: comp.os.linux.misc From: hpa@ahab.eecs.nwu.edu (H. Peter Anvin) Subject: Re: NFS/pormapper security bug and fix (Linux) Reply-To: hpa@nwu.edu (H. Peter Anvin) Date: Thu, 1 Sep 1994 17:51:06 GMT Followup to: By author: Thomas.Koenig@ciw.uni-karlsruhe.de In newsgroup: comp.os.linux.announce > > There is a security bug in Linux NFS implementations. > > Also note that there's a bug in all libc versions up to 4.5.26 (at > least) which throws the portmapper into a forking loop under some > conditions. To avoid this, you'll need to use one of the newer kernels > with the CONFIG_I_AM_A_BROKEN_BSD_WEENIE option, or apply the (binary) > patch to libc 4.5. 26 contained in portmap_3_rpcfix.shar.gz (to be > found in sunsite's Incoming). > Dumb question: is the idea that we should ENABLE or DISABLE the CONFIG_I_AM_A_BROKEN_BSD_WEENIE option? (I would hate to be a broken BSD weenie... :-) /hpa -- INTERNET: hpa@nwu.edu --- Allah'u'abha --- IBM MAIL: I0050052 at IBMMAIL HAM RADIO: N9ITP or SM4TKN FIDONET: 1:115/511 or 1:115/512 STORMNET: 181:294/1 or 181:294/101 Heja Sverige, friskt humör! EU väntar utanför! ------------------------------ From: hpa@ahab.eecs.nwu.edu (H. Peter Anvin) Subject: Re: Pascal and ADA on Linux ? Reply-To: hpa@nwu.edu (H. Peter Anvin) Date: Thu, 1 Sep 1994 17:53:33 GMT Followup to: <33t1q3$14j@killerbee.jsc.nasa.gov> By author: davenpor@pat.mdc.com (Darren Davenport) In newsgroup: comp.os.linux.admin > > In article <1994Aug27.134540.394@schbbs.mot.com>, > RHK973@paccvm.corp.mot.com (K.K. Tung) writes: > |> Anyone know where to get a copy of the PASCAL or ADA > |> to run on the Linux ? > > Ada (note it's a proper name not an acronym) is available > via ftp at: sunsite.unc.edu in /pub/Linux/devel/ada So is Pascal, actually. There is a Pascal-to-C translator called p2c somewhere on sunsite, and I think there is an alpha version of gpc (GNU Pascal). /hpa -- INTERNET: hpa@nwu.edu --- Allah'u'abha --- IBM MAIL: I0050052 at IBMMAIL HAM RADIO: N9ITP or SM4TKN FIDONET: 1:115/511 or 1:115/512 STORMNET: 181:294/1 or 181:294/101 ld error: wallet.c: _money not found ------------------------------ From: S.Herbert@shef.ac.uk Subject: Re: Admin utils for linux ? Date: Thu, 1 Sep 1994 17:08:40 GMT In article hm@ix.de (Harald Milz) writes: >Three people/teams are currently working on such a tool, independently >of each other: >Pat Spinler (pats@einet.com) >Riccardo Facchetti (riccardo@cdc8g5.cdc.polimi.it) >Thomas Woerner (twoerner@gris.informatik.uni-tuebingen.de) >according to the Projects Map. I wish those would join their efforts. I have an early ALPHA version of The System Manager on sunsite.unc.edu, in /pub/Linux/ALPHA/sysman. Development is continuing, although a new release is unlikely for a while. Stuart ------------------------------ From: jmf@estuary.pwd.nsw.gov.au (John Michael Floyd) Subject: Re: Hostname on Slackware 2.0 Date: 31 Aug 1994 21:27:50 GMT You don't need to recompile anything. The easiest way is to delete the binaries for hostname and domainname and reinstall those from the Slackware v2 distribution. It is just a case where if installing over the top of an old installation where hostname and domainname share the same executable, you are actually only effectively installing one of the new executables (due to over- writing). There have been anumber of fixes that suggest re-compiling from source!! You could get the same problems if you don't remove the original linked binaries! Regards John ------------------------------ From: rene@renux.frmug.fr.net (Rene COUGNENC) Subject: Re: Security hole in ntalkd Date: 31 Aug 1994 15:39:26 GMT Reply-To: cougnenc@hsc.fr.net (Rene COUGNENC) Ce brave ptmcinti@indyunix.iupui.edu ecrit: > Last night, someone rebooted my machine using the ntalkd program. > Here's a copy of my system logs prior to the reboot: > Aug 29 19:35:10 MindWay in.ntalkd[2013]: connect from starbase.NeoSoft.COM ^^^^^ > Aug 29 23:00:25 MindWay syslogd: restart ^^^^^ Are you sure it is related.. ? Sometimes, my machine reboots at night, this is often due to power failures... -- linux linux linux linux -[ cougnenc@renux.frmug.fr.net ]- linux linux linux ------------------------------ From: mkrisch@avalanche.mpce.mq.edu.au (Mark Krischer) Subject: Re: Linux hangs up and no trace why Date: 31 Aug 1994 22:58:43 GMT In article <342438$khg@dawn.mmm.com>, uspra016@mmm.com (John Sundberg) writes: |> Jozsef Kadlecsik (kadlec@cern.school.kfki.hu) wrote: |> |> > But sometimes the system hangs up, especially when NOBODY uses the system. |> > Then we can type in commands and hit Enter, but nothing executed. We can |> > switch between the virtual consoles, that's all. |> |> > We changed the motherboard, the Adaptec card, the disk, the SCSI cable but |> > nothing helped. |> |> > There is only one "clue", but it doesn't help us: we get this "failed" |> > message at every boot: |> |> > Aug 30 12:23:51 cern kernel: Calibrating delay loop.. ok - 33.22 BogoMips |> > Aug 30 12:23:51 cern kernel: failed |> |> > Has anybody ever encountered such a problem? |> i think i know what the "failed" is from. i had it as well until i fixed the setting for my Adaptec SCSI. check the SCSI FAQ. it's not the simplest thing to read--but hey, it's a document for running UNIX :) anyway, there are some notes about adding command line parameters to LILO. when i fixed that, the CD-ROM worked and "failed" went away, to be replaced by information concerning the CD-ROM hookup. hope that helps. mark ------------------------------ ** FOR YOUR REFERENCE ** The service address, to which questions about the list itself and requests to be added to or deleted from it should be directed, is: Internet: Linux-Admin-Request@NEWS-DIGESTS.MIT.EDU You can send mail to the entire list (and comp.os.linux.admin) via: Internet: Linux-Admin@NEWS-DIGESTS.MIT.EDU Linux may be obtained via one of these FTP sites: nic.funet.fi pub/OS/Linux tsx-11.mit.edu pub/linux sunsite.unc.edu pub/Linux End of Linux-Admin Digest ******************************