Subject: Linux-Admin Digest #11
From: Digestifier <[email-masked]>
To: [email-masked]
Date: Thu, 1 Sep 94 17:14:08 EDT

Linux-Admin Digest #11, Volume #2                 Thu, 1 Sep 94 17:14:08 EDT

Contents:
  Re: Newbie Inetd.conf & telnetd question (Steve DuChene)
  Re: Newbie Inetd.conf & telnetd question (Steve DuChene)
  Multiple xterms in Seyon? (Ti Co Nuong)
  Re: Crond annoyance (Matthew Dillon)
  Re: SLIP monitor script! (Matthew Dillon)
  Termina Hanging Problem ("Jae W. Chang")
  Re: Crond annoyance (Andreas Wacknitz)
  Re: Host routing patches for DIP... anyone interested? (Viktor T. Toth)
  Linux blew up my HD-->Re: Floppy disk errors (Greg Cisko)
  Security problem (Andreas Wacknitz)
  Looking for sys adim tools (Terry Robison)
  Re: NFS/pormapper security bug and fix (Linux) (H. Peter Anvin)
  Re: Pascal and ADA on Linux ? (H. Peter Anvin)
  Re: Admin utils for linux ? ([email-masked])
  Re: Hostname on Slackware 2.0 (John Michael Floyd)
  Re: Security hole in ntalkd (Rene COUGNENC)
  Re: Linux hangs up and no trace why (Mark Krischer)

----------------------------------------------------------------------------

From: [email-masked] (Steve DuChene)
Crossposted-To: comp.unix.admin
Subject: Re: Newbie Inetd.conf & telnetd question
Date: 1 Sep 1994 08:21:50 GMT

Rashid Karimov ([email-masked]) wrote:
:               Hi !

: : S. Kharbanda TM ([email-masked]) wrote:
: : : I am trying to setup our internet server to accept telnet connections at
: : : a specific port and directly login to an account (so that the user does
: : : not see a login prompt). Any ideas on how i go about doing this ?
: : : I have seen it done, just don't see how to do it, have looked at the 
: : : inetd.conf file trying to figure it out...
  Stuff deleted...
:       I'd just say this is _real security hole. You( i mean Mr.Kharbanda)
:       should be absolutely sure you want to do it. The only bar for
:       possible intruders would be "secret" post number .
:       Anyway , account w/o logname & passwd is not good for any Unix box.
:       At least , try to restrict it ( chroot() ).

        I would have to agree with the above opinions! If someone tried to
        do this sort of thing on our campus I couldn't imagine the uproar
        in the computer center! If you don't realize it puting this sort of 
        account on the Internet is a security hole that affects everone with a 
        computer on the net not just your installation. I would imagine your
        network provider could easily yank your connection if a problem arose
        because of this practice.
-- 
| Steven A. DuChene   [email-masked]  or  [email-masked]      
| Youngstown State University  | Computer Science / Math / Mech. Eng.
|They all laughed at Albert Einstein. They all laughed at Columbus. 
|Unfortunately, they also all laughed at Bozo the Clown. 

------------------------------

From: [email-masked] (Steve DuChene)
Crossposted-To: comp.unix.admin
Subject: Re: Newbie Inetd.conf & telnetd question
Date: 1 Sep 1994 08:28:37 GMT

        Just one more thing, the above situation is a perfect example of 
        amateur systems/network administration at it's worst! No idea
        what the concequences of such an action could be on the rest of
        the Internet. There are whole organizations working to prevent
        security breaches and here is someone who wants to set up one on 
        purpose! 
-- 
| Steven A. DuChene   [email-masked]  or  [email-masked]      
| Youngstown State University  | Computer Science / Math / Mech. Eng.
|They all laughed at Albert Einstein. They all laughed at Columbus. 
|Unfortunately, they also all laughed at Bozo the Clown. 

------------------------------

From: [email-masked] (Ti Co Nuong)
Subject: Multiple xterms in Seyon?
Date: 1 Sep 1994 08:35:38 GMT

HI,

Could you please tell me how to open multiple
xterms on seyon?
I dialed into school from my home, and all I get is
just one xterm!  A guy told me I had to purchase
something called PCXremote (for Windows)but is it is
so expensive and I don't want to leave Linux!
If SEYON can support multiple xterms over the phone line,
could you please email me and show me how to do it?
Thank you very much in advance.

[email-masked]
Newsgroups: comp.os.linux.admin
Subject: 
Summary: 
Followup-To: 
Distribution: world
Organization: University of California, at Berkeley
Keywords: 

Newsgroups: comp.os.linux.admin
Subject: multiple xterm...?
Summary: 
Followup-To: 
Distribution: world
Organization: University of California, at Berkeley
Keywords: 

Newsgroups: comp.os.linux.admin
Subject: Multiple xterms in SEYON?
Summary: 
Followup-To: 
Distribution: world
Organization: University of California, at Berkeley
Keywords: 

Could you please tell me how to open multiple
xterms on seyon?
I dialed into school from my home, and all I get is
just one xterm!  A guy told me I had to purchase
something called PCXremote (for Windows)but is it is
so expensive and I don't want to leave Linux!
If SEYON can support multiple xterms over the phone line,
could you please email me and show me how to do it?
Thank you very much in advance.

[email-masked]

------------------------------

From: [email-masked] (Matthew Dillon)
Subject: Re: Crond annoyance
Date: 1 Sep 1994 10:20:47 -0700

:In article <[email-masked]> [email-masked] (Matt Warnock) writes:
:>In article <[email-masked]>,
:>Christopher Cason <[email-masked]> wrote:
:>>I just installed some of the new Slackware 2.0 disks, and they have apparently
:>>replaced my crond with a new one. I can't find a specfic man page for this
:>>program. It's a nuisance since it insists on writing to my console every few
:>>minutes. Does anyone have the *specific* man page for this (not the one already
:>>in the base system as it's different.) or know a command-line switch to shut
:>>it up ??? I've just got it killed for now.
:>
:>I had the same problem till I replaced the file from an older distribution.
:>The one you *have* that barfs all over is Dillon crond.  The one you used to
:>have is probably Vixie crond.  The man page says you can turn debug off with 
:>-d0 and logging off (which is probably the ticket) with -l0. I wish it would
:>use the system log, not the console.
:>
:>Good luck.
:>-- 
:>W. Matthew Warnock, Attorney ([email-masked])          Tel:408.778.7273 
:>60 West Main Avenue, Suite 12A, Morgan Hill CA  95037-4553  Fax:408.778.7989

    Damn It!  Doesn't anybody read instructions?

    I very CLEARLY state in the README file that the proper way to start
    crond from your rc file is:

    /usr/bin/crond -l8 >>/var/log/cron 2>&1

    If you don't do that, then you deserve the log messages you get on your
    VC1 !

                                                -Matt

-- 

    Matthew Dillon              [email-masked]
    1005 Apollo Way             ham: KC6LVW (no mail drop)
    Incline Village, NV. 89451  Obvious Implementations Corporation
    USA                         Sandel-Avery Engineering
    [always include a portion of the original email in any response!]

------------------------------

From: [email-masked] (Matthew Dillon)
Subject: Re: SLIP monitor script!
Date: 1 Sep 1994 10:27:38 -0700

:In article <[email-masked]> [email-masked] writes:
:>There should be a lot of people happy to see this.
:>
:>#!/bin/csh
:>set sleep_time=5
:>loop:
:>set flag=`ps | grep -f/etc/dip.pid`
:>if ( $status == 1 ) then
:>  echo DIP process not running.  Establishing connection...
:>  /sbin/dip /etc/giant.dip
:>  sleep 10
:># else
:>#  echo SLIP process is running. 
:>endif
:>sleep $sleep_time
:>goto loop
:>
:>
:>Overhead is less than 1% (usually .2 %, unless establishing connection)
:>Anyway...  Have fun.  Leave me a message if this works for you.
:>
:>
:>Now to the next challenge... UNIVEL...
:>--
:>Suman Sahu    [email-masked]

    Or you can pop dslip201.tgz from sunsite.unc.edu in 
    pub/Linux/system/Network/serial.  dslip is a complete SLIP management
    suite that does not use dip.  It is specifically designed to deal with
    reconnecting when a connection is dropped and can manage multiple lines
    simultaniously.

                                        -Matt

-- 

    Matthew Dillon              [email-masked]
    1005 Apollo Way             ham: KC6LVW (no mail drop)
    Incline Village, NV. 89451  Obvious Implementations Corporation
    USA                         Sandel-Avery Engineering
    [always include a portion of the original email in any response!]

------------------------------

From: "Jae W. Chang" <[email-masked]>
Subject: Termina Hanging Problem
Date: Thu,  1 Sep 1994 01:14:53 -0400

I need help. I have running Linux 1.1.28 w/ slip.

My terminal - xterm - hangs at seemingly almost random times. It
generally only happens when I'm inputting characters into the terminal
window. It looks as though no more input is being accepted and output
stops being displayed.

Doing a netstat I got Recv-Q to be some 700 and Send-Q to be 0.

It seems as though bytes are being buffered by the socket, but the
data isn't being read from the socket. It also looked like data was
still being sent because Send-Q was 0. I then typed ls then did
another netstat.

I got Recv-Q to be some 900 and Send-Q to be 0.

It seems as though ls was executed by the remote machine and the
result was received by my local machine and being queued in the
buffer. However, the display on my terminal window did not change - no
"ls" nor any result of ls.

Any help to solve this problem will be greatly appreciated.

Jae

==========================
[email-masked] 

------------------------------

From: [email-masked] (Andreas Wacknitz)
Subject: Re: Crond annoyance
Date: 1 Sep 1994 16:47:59 +0200

In <[email-masked]> [email-masked] (Greg Jesus Wolodkin) writes:

>Matt Warnock <[email-masked]> wrote:
>>Christopher Cason <[email-masked]> wrote:
>>>I just installed some of the new Slackware 2.0 disks, and they have [..]
>>>replaced my crond with a new one. I can't find a specfic man page for this
>>>program. It's a nuisance since it insists on writing to my console [..]

>>I had the same problem till I replaced the file from an older distribution.
>>The one you *have* that barfs all over is Dillon crond.  The one you used to
>>have is probably Vixie crond.

>The fact that it's Dillon's crond isn't the problem at all -- as far as I
>can tell it's just Slackware 2.0's install.  Try "ps -aux | grep cron" and
>you'll find you have two of them running.  One is started in rc.M, I think,
>and the other is in rc.inet2.  Kill the latter, and comment it out from
>rc.inet2 -- it's the one that is writing to the console.
The crond in rc.M should only be started if you haven't installed TCP/IP.
So it's strange that you have two cronds running.
BTW my workaround is to change the entry in rc.inet2 to this:
        ${net}/crond -l0 -d0 >/dev/null 2>/dev/null &
I know that is bad but I got rid of the annoying messages.

>Cheers,
>Greg

Andreas

-- 
Andreas Wacknitz
[email-masked]

------------------------------

From: [email-masked] (Viktor T. Toth)
Subject: Re: Host routing patches for DIP... anyone interested?
Date: Thu, 1 Sep 1994 01:09:00

In article <[email-masked]> Carlos Dominguez <[email-masked]> writes:

>I think this is interesting.. After I run dip I run route and see no routes,
>check ifconfig and its only set to localhost, not my IP address.
>
>So if i run ifconfig and route after dip, all works fine.

This typical problem seems to be caused by one of two things:

1: dip needs to be setuid to root,

2: make sure dip is compiled with the right path for route and ifconfig.

Viktor

------------------------------

From: [email-masked] (Greg Cisko)
Subject: Linux blew up my HD-->Re: Floppy disk errors
Date: 1 Sep 1994 14:40:31 GMT
Reply-To: [email-masked]

In article [email-masked], [email-masked] (Steven Whitlatch) writes:
> I'm going to do a little more testing of the floppies with 
> Kernel_1.1.49 because I had an incident occur with Kernel_1.1.48 
> where, at one point when I was copying to the floppy, there 
> was a write to the floppy that just never stopped.  I did 
> kill -9  PID and that didn't stop it,.  Nothing would stop it and 
> a reset was the only thing that would.  ctrl-alt-del would not

Well, be careful when hitting the RESET button. I had linux on a UMSDOS
partition on a 100MB drive. I started X, and the disk kept accessing & 
just wouldn't stop. In a panic, I hit RESET. What I heard was the worst sound
you would ever want to hear from a computer disk. As the disk was a couple
of years old, I took it apart. The mechanism that moved the heads back & forth
across the disk was physicaly broken. I think a better solution would have
been to turn the power off. Then back on after the disk stops spinning. 

BTW, I learned from my experience. Linux is now very happy on a 340MB 
drive with Linux swap & Linux native partitions. The speed difference 
of Linux on Linux native partition vs on UMSDOS partitions is very big.
With the UMSDOS partitioned version of Linux it would take 60 minutes
to compile the kernel. With Linux partitions, the same Kernel compiles
in 15-20 minutes. 

Hardware config:

Salckware 2.0
Kernel 1.1.18
486/DX2 66
8MB ram
16MB swap 

> even work.  That was with 1.1.48.  So, I'd like to know how 
> 1.1.49 does with the floppies.  I didn't expect to see that 
> message about "group 0 not in group" with 1.1.49
> 
> 
> 
> Steve Whitlatch
> [email-masked]

------------------------------

From: [email-masked] (Andreas Wacknitz)
Subject: Security problem
Date: 1 Sep 1994 16:52:47 +0200

Hello Linuxers!

I have a  security problem with the popd coming with slackware 2.0:
You don't need a password when sending mails. Passwords are only requested
when reading mails. I can't believe that this the normal behaviour of a popd!
Am I wrong?

Any help will be appreciated...

Andreas
-- 
Andreas Wacknitz
[email-masked]

------------------------------

From: [email-masked] (Terry Robison)
Subject: Looking for sys adim tools
Date: Wed, 31 Aug 1994 23:06:44 GMT

Hello,
   I'm looking for some system admin tools under linix.  Do
they exist?  If so, where.  Tools like keeping track of logged
on time, cpu use, disk use, ftp use.  That sort of stuff

      Terry
      [email-masked]

-- 
Computer Vision and Pattern Recognition Laboratory (CVPRL)
Computer Science Department            Tel:   +613 344 9150
The University of Melbourne            Fax:   +613 348 1184
Parkville 3052,   Australia

------------------------------

Crossposted-To: comp.os.linux.misc
From: [email-masked] (H. Peter Anvin)
Subject: Re: NFS/pormapper security bug and fix (Linux)
Reply-To: [email-masked] (H. Peter Anvin)
Date: Thu, 1 Sep 1994 17:51:06 GMT

Followup to:  <[email-masked]>
By author:    [email-masked]
In newsgroup: comp.os.linux.announce
>
> There is a security bug in Linux NFS implementations.
> 
> Also note that there's a bug in all libc versions up to 4.5.26 (at
> least) which throws the portmapper into a forking loop under some
> conditions.  To avoid this, you'll need to use one of the newer kernels
> with the CONFIG_I_AM_A_BROKEN_BSD_WEENIE option, or apply the (binary)
> patch to libc 4.5.  26 contained in portmap_3_rpcfix.shar.gz (to be
> found in sunsite's Incoming).
> 

Dumb question: is the idea that we should ENABLE or DISABLE the
CONFIG_I_AM_A_BROKEN_BSD_WEENIE option?

(I would hate to be a broken BSD weenie... :-)

        /hpa

-- 
INTERNET: [email-masked]             --- Allah'u'abha ---
IBM MAIL: I0050052 at IBMMAIL     HAM RADIO:   N9ITP or SM4TKN
FIDONET:  1:115/511 or 1:115/512  STORMNET:    181:294/1 or 181:294/101
Heja Sverige, friskt humör!  EU väntar utanför!

------------------------------

From: [email-masked] (H. Peter Anvin)
Subject: Re: Pascal and ADA on Linux ?
Reply-To: [email-masked] (H. Peter Anvin)
Date: Thu, 1 Sep 1994 17:53:33 GMT

Followup to:  <[email-masked]>
By author:    [email-masked] (Darren Davenport)
In newsgroup: comp.os.linux.admin
>
> In article <[email-masked]>,
> [email-masked] (K.K. Tung) writes: 
> |> Anyone know where to get a copy of the PASCAL or ADA
> |> to run on the Linux ?
> 
> Ada (note it's a proper name not an acronym) is available
> via ftp at: sunsite.unc.edu in /pub/Linux/devel/ada

So is Pascal, actually.  There is a Pascal-to-C translator called p2c
somewhere on sunsite, and I think there is an alpha version of gpc
(GNU Pascal).

        /hpa

-- 
INTERNET: [email-masked]             --- Allah'u'abha ---
IBM MAIL: I0050052 at IBMMAIL     HAM RADIO:   N9ITP or SM4TKN
FIDONET:  1:115/511 or 1:115/512  STORMNET:    181:294/1 or 181:294/101
ld error:  wallet.c:  _money not found

------------------------------

From: [email-masked]
Subject: Re: Admin utils for linux ?
Date: Thu, 1 Sep 1994 17:08:40 GMT

In article <[email-masked]> [email-masked] (Harald Milz) writes:

>Three people/teams are currently working on such a tool, independently
>of each other: 

>Pat Spinler ([email-masked])
>Riccardo Facchetti ([email-masked])
>Thomas Woerner ([email-masked])

>according to the Projects Map. I wish those would join their efforts.

I have an early ALPHA version of The System Manager on sunsite.unc.edu, in
/pub/Linux/ALPHA/sysman.  Development is continuing, although a new release 
is unlikely for a while.

Stuart

------------------------------

From: [email-masked] (John Michael Floyd)
Subject: Re: Hostname on Slackware 2.0
Date: 31 Aug 1994 21:27:50 GMT

You don't need to recompile anything.  The easiest way is to delete the 
binaries for hostname and domainname and reinstall those from the Slackware v2
distribution.  It is just a case where if installing over the top of an old 
installation where hostname and domainname share the same executable, you are 
actually only effectively installing one of the new executables (due to over-
writing).

There have been anumber of fixes that suggest re-compiling from source!! You 
could get the same problems if you don't remove the original linked binaries!

Regards John

------------------------------

From: [email-masked] (Rene COUGNENC)
Subject: Re: Security hole in ntalkd
Date: 31 Aug 1994 15:39:26 GMT
Reply-To: [email-masked] (Rene COUGNENC)

Ce brave [email-masked] ecrit:

> Last night, someone rebooted my machine using the ntalkd program. 
> Here's a copy of my system logs prior to the reboot:

> Aug 29 19:35:10 MindWay in.ntalkd[2013]: connect from starbase.NeoSoft.COM
         ^^^^^
> Aug 29 23:00:25 MindWay syslogd: restart
         ^^^^^

Are you sure it is related.. ?
Sometimes, my machine reboots at night, this is often due to power failures...

--
 linux linux linux linux -[ [email-masked] ]- linux linux linux 

------------------------------

From: [email-masked] (Mark Krischer)
Subject: Re: Linux hangs up and no trace why
Date: 31 Aug 1994 22:58:43 GMT

In article <[email-masked]>, [email-masked] (John Sundberg) writes:
|> Jozsef Kadlecsik ([email-masked]) wrote:
|> 
|> > But sometimes the system hangs up, especially when NOBODY uses the system.
|> > Then we can type in commands and hit Enter, but nothing executed. We can 
|> > switch between the virtual consoles, that's all.
|> 
|> > We changed the motherboard, the Adaptec card, the disk, the SCSI cable but
|> > nothing helped.
|> 
|> > There is only one "clue", but it doesn't help us: we get this "failed"
|> > message at every boot:
|> 
|> > Aug 30 12:23:51 cern kernel: Calibrating delay loop.. ok - 33.22 BogoMips
|> > Aug 30 12:23:51 cern kernel: failed
|> 
|> > Has anybody ever encountered such a problem?
|> 

i think i know what the "failed" is from.
i had it as well until i fixed the setting for my Adaptec SCSI.  check the SCSI FAQ.  it's
not the simplest thing to read--but hey, it's a document for running UNIX :)  anyway, there
are some notes about adding command line parameters to LILO.  when i fixed that, the CD-ROM
worked and "failed" went away, to be replaced by information concerning the CD-ROM hookup.

hope that helps.

mark

------------------------------

** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [email-masked]

You can send mail to the entire list (and comp.os.linux.admin) via:

    Internet: [email-masked]

Linux may be obtained via one of these FTP sites:
    nic.funet.fi				pub/OS/Linux
    tsx-11.mit.edu				pub/linux
    sunsite.unc.edu				pub/Linux

End of Linux-Admin Digest
******************************