Subject: Linux-Admin Digest #28
From: Digestifier <[email-masked]>
To: [email-masked]
Date: Tue, 6 Sep 94 08:16:27 EDT

Linux-Admin Digest #28, Volume #2                 Tue, 6 Sep 94 08:16:27 EDT

Contents:
  Re: Using an Exabyte with Linux (root)
  Re: FTP via TERM (Patrick Reijnen)
  Re: WARNING about shadow-mk package (Joe Zbiciak)
  2 ethernet cards? (Anto Daryanto)
  Re: limits (Tracy R. Reed)
  Re: linux & ISDN (Dave Gardner)
  Re: .bashrc does not exec... (David Kastrup)
  UID 0 Passwd blues (Anton de Wet)
  Re: [ALERT] Password problem with Linux
  Re: gated.conf, Does anyone have this puppy working on a linux box. ([email-masked])
  Re: [Q] lynx with term support ? (Jay Schlieske)
  Re: [Q] routed problems ([email-masked])
  Re: Remote Shell from linux to Solaris? (Jens Krauss)
  Re: Monitoring TTY's .. (Tracy R. Reed)
  Re: QUOTA available for v1.1.49 yet? (Wayne Hodgen)
  Re: UID 0 Passwd blues (David Kastrup)
  Re: What is my root password???????? (Anton de Wet)
  525MB streamer that wouldn't backup 300MB: SOLVED! (Eelco H. Essenberg)

----------------------------------------------------------------------------

From: [email-masked] (root)
Subject: Re: Using an Exabyte with Linux
Date: 5 Sep 1994 20:48:18 +0200

Thanks, all together
here is summary of what cured the problem.

There are two things which helped me

1) The external cable wasn't connected properly :-(
2) I had to boot up with a tape inserted.

After I straightened the cable  out a bit and reconnected it, it works
sometimes but when I have a tape inserted yt boot up it works like a charme.
But I really don't know why it needs the tape

By the way, when it is driven by the sun you can boot up without a tape!

Thanks again, Achim

------------------------------

From: [email-masked] (Patrick Reijnen)
Subject: Re: FTP via TERM
Date: Tue, 6 Sep 1994 06:38:45 GMT

In <[email-masked]> [email-masked] writes:

>>There is also ncftp170 for term. Works fine for me and KNOWS macro's. You can find it on sunsite.unc.edu:/pub/Linux/apps/comm/termstuff.
>>
>>
>>
>>Patrick REijnen

>That's an ftp client application.  We are talking about the ftp daemon.

Oops yes, I see, but some deamons are also available in that directory.

>Dave

>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
>```````````````````````````````````````````````````````````````````````````````
>     _/_/_/_/     _/_/        _/_/   _/_/_/_/       David M. Del Signore
>      _/    _/     _/_/    _/_/       _/    _/      University of Toledo
>     _/     _/    _/ _/  _/ _/       _/     _/          Toledo, Ohio
>    _/     _/    _/  _/_/  _/       _/     _/ 
>   _/    _/     _/   _/   _/       _/    _/      [email-masked]
>_/_/_/_/     _/_/        _/_/   _/_/_/_/      [email-masked]
>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
>```````````````````````````````````````````````````````````````````````````````

Patrick Reijnen

--
************************* Patrick Reijnen *************************
* Department of Computer Science, Catholic University of Nijmegen * 
* Email:  patrickr@{sci,cs}.kun.nl                                *
* WWW:    http://{atlas,zeus}.cs.kun.nl:4080/homepage.html        *

------------------------------

From: [email-masked] (Joe Zbiciak)
Crossposted-To: comp.os.linux.development,comp.os.linux.help,comp.os.linux.misc
Subject: Re: WARNING about shadow-mk package
Date: 6 Sep 1994 02:10:30 -0500

=====BEGIN PGP SIGNED MESSAGE=====

This post is in regards to the login.secure program included in
the shadow-mk package authored by Mohan Kokal.  I, Joseph R.M. Zbiciak,
am the sole author of this program, and would like to dispell any
rumors labeling it as the tool of a "cracker." 

Included in this post is the source code for my /bin/login replacement.

The binary included in the shadow-mk package distributed by Mohan Kokal
was apparently compiled under GCC 2.4.5, using libc 4.4.4.  I base this
statement on the fact that the binary was indeed compiled by me on my
personal Linux box, "asylum," prior to June 9th.  On June 9th, I upgraded
to GCC 2.5.8, and libc 4.5.26.

Inspection of the login.secure binary will reveal that it was indeed
linked with libc 4.4.4.  

Therefore, I seek corroboration of the following, since I cannot
do this myself (my system has no room to dl libc 4.4.4 and gcc 2.4.5 to
try this):

The login.secure binary was most probably compiled as follows:

gcc -o login.secure -s -N -O6 -fomit-frame-pointer -m386 login1.c

(as I said, under GCC 2.4.5, and libc 4.4.4)

Using GCC 2.5.8 and libc 4.5.26 yeilds an executable of 1328 bytes
with these options.  

Let me remind you that the /bin/login on my system has been and continues 
to be the login.secure binary that was included in shadow-mk.  (Size:
1124 bytes.  CRC: a4abbb26)

I have PGP-signed this post to ensure its authenticity.  My public key
is available via finger.  Please finger [email-masked].
Pipe the output to a file and run pgp -ka on the file to add the key
to your keyring.  This key is primarily for private messages.  I do not
yet have a well established key for business use.  One will be forthcoming.

Please:  I urge *ANYONE* that has any questions, problems, etc. relating
this program to CONTACT ME IMMEDIATELY.  My email address is, once again,
[email-masked].  Should that address fail, there's also
[email-masked].  Should both of those addresses fail for one
reason or another, email Mohan Kokal at [email-masked], with
instructions to forward the mail to me.

And again:  I do apologize for any inconvenience this may have caused
anyone.  The shadow-mk package is not insecure.  The login.secure is
indeed what it was titled.  I do hope that this post lays to rest any
suspicion about the shadow-mk package, its contents, and its author.
I also apologize to Mohan Kokal for not realizing that such a small piece
of code would cause such a large number of people to label him as a
cheap-and-dirty cracker.  

Here's the source code:

==FILE: login1.c==
/* Preprocessor for /bin/login                    */
/* Corrects /bin/login security hole regarding -f */
/* Also disables -h for non-root users.           */
/* (c) 1994, Joseph R. M. Zbiciak                 */

#include <strings.h>
#include <unistd.h>
#include <stdio.h>

main (int argc, char * argv[], char * envp[])
{
        char **av=argv;
        int ac=argc;

        if (argc>1) {
                while(--ac>0) {
                        if (**(++av)=='-' && strlen(*av)>1) {
                                 *((*av)+2)=0;
                                 if (*((*av)+1)=='h' && getuid()>100) {
                                        fprintf(stderr,"You cannot specify a new host.\n");
                                        exit (1);
                                 }
                        }
                }
        }

        execve("/bin/_login",argv,envp);
        return 0;
}
==END OF FILE==

- --Joseph R.M. Zbiciak
  Systems Administrator & Programmer
  Texas Networking Systems, Inc.

DISCLAIMER:  Neither this post, nor any other post made by me, reflects
             the opinions of my various employers, unless EXPLICITLY
             stated.  All opinions stated herein are mine unless otherwise
             noted.

                                                := Joe Zbiciak == im14u2c@ =:
                                                :- - cegt201.bradley.edu - -:
           If it works, Don't fix it.           : -  camelot.bradley.edu  - :
                                                :-Finger for PGP Public Key-:
                                                :===========================:

=====BEGIN PGP SIGNATURE=====
Version: 2.3a

iQCVAgUBLmwUH/1glWhKqKRRAQHCAgP6AqTd3G9kzRm12GqiE29aL1VHjkYxb/hU
FW4F0+TEIM7RbUcbfFPilwtnb2n08btgcLW+92YZRGf4FmzteVLEMhecz/+wB9Wd
/Dr8rH5rUrJw2Lclx7ZmiLDLfBVHLahcRNQ/oH/itLg9UJXLzLKq8igEniIpyxgW
LevHNAnbWgM=
=VIIl
=====END PGP SIGNATURE=====

------------------------------

From: [email-masked] (Anto Daryanto)
Subject: 2 ethernet cards?
Date: 6 Sep 1994 03:05:03 -0500

Hi,
in our departement we need a router. I know that someone has already post 
it, but I missed it somehow. Is it possible to have a linux box that uses 
2 ethernet cards? What kind of configurations do you have to change in 
the kernel?

E-mail me please,
-anto

        ===============================================================
        |       Antonius Daryanto       |  Direktorat TEI       OS/2  |
        |   [email-masked]   |  BPPT Teknologi         &   |
        |                               |  Jakarta, INDONESIA   Linux |
        ===============================================================
         disclaimer:                                                    
                My opinion does not represent my employer's opinion  

------------------------------

From: [email-masked] (Tracy R. Reed)
Subject: Re: limits
Date: 6 Sep 1994 08:44:18 GMT

Alan Cox ([email-masked]) wrote:
: In article <[email-masked]> [email-masked] writes:
: >
: >What is the limit of telnet login sessions to Linux? And can it
: >be increased?

: With enough tty/pty pairs about 64 and it ought to be easy enough to 
: double but a bit harder to pass. I wouldn't want to pass 64 sessions on
: a 386/486 box without some thought anyway.

This reminds me, I am curious as to how many users my machine can 
support. I am going to be putting my Linux box on the net soon and would 
like to know how many users I can expect before the system becomes too 
bogged down. I currently have a 486/66 with 8 meg of ram and an 8 meg 
swap. I plan on upgrading the ram to 12 pretty soon. I usually run X on 
the local console. Any estimates on how many users I should be able to 
support? I have plans to make several services available on my machine, 
but what I can do depends on the number of users I can have at once.

=============================================================================
Mr. Tracy Reed         |Every artist is a cannibal.| Why did dad cry 
San Diego State Univ.  |Every poet is a thief.     |  when I gave him
Aerospace Engineering  |All kill their inspiration |  Willmaker 1.0?
[email-masked] |And sing about their grief.|
[email-masked]      |-U2 IRC-Maelcum /me smiles |  
=============================================================================

------------------------------

From: [email-masked] (Dave Gardner)
Subject: Re: linux & ISDN
Date: Tue, 6 Sep 1994 08:33:05 GMT

Gregory Trubetskoy ([email-masked]) wrote:
: I heard there is something called ISDN driver for Linux. I aslo heard 
: that PPP is the de facto standard for ISDN connections. I am confused.

Sorry, I can't help you there.

: A good place to look for cheap suppliers is comp....isdn group. I forgot 
: the exact name.

comp.dcom.isdn is the group.  Also, PacBell gives the names and numbers of
some (but probably not all) hardware suppliers on their handout. 

------------------------------

From: [email-masked] (David Kastrup)
Subject: Re: .bashrc does not exec...
Date: 6 Sep 1994 07:52:03 GMT

[email-masked] (Greg Cisko) writes:

>Since this works fine on my SUN, I am assuming that this is linux specific.
>Anyone know why my .bashrc does not run when I login??? I thought that if 
>you had a .bashrc in your $HOME directory, it would get executed? What file
>is supposed to look to see if there is a .bashrc to run??? 

>And my alaises are not enabled either. Where does the system get these defaults 
>from? There isn't a HOW-TO describing this is there???

>Thanks...

Well, the HOW-TO applying here is the
HOW-TO-get-informations-for-bloody-beginners. Oops, does not seem to have
been written yet. The advice can be described as RTFM.

Let's quote from it nevertheless:
The usual source of help available for using a specific command is the
so-called man-page. You can get this with the man command. For the usage
of the man command, try
man man
For the usage of bash, try
man bash
You might also consider using info in emacs. Type ^H (this is control-H) I
and then look for the fitting node, if you have installed info pages.

At least with bash, man bash should do the trick:
.bashrc is read by all interactive shells *except* login shells.
Setting up PATH and other things which get exported anyway is best
done not in .bashrc, but in .profile (or .bash_profile). In fact,
I have yet to find a good use for .bashrc. In case I'll find one,
my .profile contains
if [ -r ~/.bashrc ]; then . ~/.bashrc; fi
-- 
 David Kastrup        [email-masked]          
 Tel: +49-241-72419 Fax: +49-241-79502
 Goethestr. 20, D-52064 Aachen

------------------------------

From: [email-masked] (Anton de Wet)
Subject: UID 0 Passwd blues
Date: 6 Sep 1994 09:14:15 GMT

I ran accross an inconvenient ``feature'' of the passwd program yesterday.
On one of our Linux boxes we have 3 UID 0 users --- root and two others. 
Since initial setup a week ago, everything was working fine, but suddenly
the root password was invalid :-( After some investigation and experimenting
we found that one of the users had changed his password and that this changes
all the  UID 0 passwords to the same thing.

Is this supposed to be so? I think not. What is the easiest way to fix it?
(I'm using Slackware 2.0 distribution)

Thanx

Anton

------------------------------

From: [email-masked] ()
Subject: Re: [ALERT] Password problem with Linux
Date: 6 Sep 1994 06:39:49 GMT

Jason Aaron Fager ([email-masked]) wrote:
: >>Like, oh my god! It's almost like unix passwords have been only been 8 
: >>characters for like 30 years!....
: >>You cant be serious. 

: >I was serious. I thought there was a problem. Sorry.

: All of you that can't wait for Linux to surpass DOS/Windows, look well upon
: the kind of questions you're going to get from Unix newbies.  If you respond
: nastily to their questions, don't expect their affair with Unix to be a long
: one.

: jafager

Well said!  This is supposed to be a community, isn't it?  Part of
the reason that I'm getting involved in Linux is because I miss the
spirit of the OS-9 community that I was involved in for so many years.
We helped the newbies out patiently, and often as not, they went on to
develop lots of wonderful things once they got the hang of things. I'm
well known out in the real world for being quite sarcastic & having a
bit of a caustic wit, but there's no need for that sort of thing in a
case like this.  Save it for flaming DrOSs/Windoze types if you must
flame, but lets not shoot ourselves in the foot...

--
Greg A. Jandl  a.k.a.  ShadowFyr        "You can believe anything you
EMail> [email-masked]                  want.  The Universe is not
  "I will choose a path that's clear,    obligated to keep a straight
   I will choose freewill." -- N.P.      face."  -- Solomon Short

------------------------------

From: [email-masked]
Subject: Re: gated.conf, Does anyone have this puppy working on a linux box.
Date: 6 Sep 1994 09:19:17 GMT

In article <[email-masked]>
@maclap.uucp (Matthew Martin) wrote:

#
#  This configuration emulates routed.  It runs RIP and never turns
#  off an interface due to lack of input RIP data.
#
#                                                              
#NOTE that RIP *will not* run if UDP checksums are disabled in
#                                                                              
#the kernel.
#

interfaces {                    
        interface all passive ; 
} ;                             
rip yes ;
#traceoptions all;

thats all I use.. Works well and we have a large network

--
Stephen Thompson - South Pacific Technical Support
Digital Equipment Corporation (Australia) Pty. Limited A.C.N. 000 446 800
DTN: 730-5566
+61-2-561-5566
([email-masked])

------------------------------

From: Jay Schlieske <[email-masked]>
Subject: Re: [Q] lynx with term support ?
Date: Tue, 6 Sep 1994 01:51:19 -0400 (EDT)
Reply-To: Jay Schlieske <[email-masked]>

On 6 Sep 1994 Christophe@.MISSING-HOST-NAME. wrote:

> 
> Hi,
> 
> 
> 
> Does anybody know where to find (if exists) a lynx version with term support?
> 
> Thanks
> 
> <a href="http://dirac.bcm.tmc.edu/people/chrisp.html">
> Christophe Person</a>

Yes, the latest version, (lynx 2.3) is on sunsite at pub/Linux/system
/Network/info-systems, together with Mosaic+term. 

BTW, you need to set the *hostname* in your return E-Mail address.

  - Jay                      o
         Jay Schlieske     <#<         " Above all.... have fun. " 
  +*+ Credits: smartmail __>^>__  by * Linux-Pine3.90-Smail-Term201-PoP +*+ 

------------------------------

From: [email-masked]
Subject: Re: [Q] routed problems
Date: 6 Sep 1994 09:31:56 GMT

In article <[email-masked]>
[email-masked] (Jake Colman) wrote:

I have been unable to get routed to work, try getting gated (from sunsite.unc.edu) and I think your problems will go away

--
Stephen Thompson - South Pacific Technical Support
Digital Equipment Corporation (Australia) Pty. Limited A.C.N. 000 446 800
DTN: 730-5566
+61-2-561-5566
([email-masked])

------------------------------

From: [email-masked] (Jens Krauss)
Subject: Re: Remote Shell from linux to Solaris?
Date: 6 Sep 1994 07:52:24 GMT
Reply-To: igd.fhg.de

yaeh , I've done it.
ask our network manager what he has done with this mashines.
But it worked from the first "networkable" boot!!!

I have another rsh problem.......
I can rsh to my Linux Box, from Suns but From Silicons it does not work.
I only get a message like   cannot open   !!!

Any Idea

------------------------------

From: [email-masked] (Tracy R. Reed)
Crossposted-To: comp.unix.misc,comp.os.linux.misc
Subject: Re: Monitoring TTY's ..
Date: 6 Sep 1994 08:40:17 GMT

Ivan Parga ([email-masked]) wrote:
: Rob McKenzie (rpm@bcars601) wrote:
: > [If this is the wrong group for this post please don't flame]

: > I'm running a Linux box and would like to find out if there is software 
: > that will allow me to monitor someone's tty.  We have had some problems 
: > with people trying to break system security.. it would be nice to be able 
: > to monitor and record the actions of these people live, while it happens.

: > Any ideas?

: I know that there is a software named "Peek & Spy" from Networking
: Dynamics Corp... that software was developed for VAX/VMS at first,

What about ttysnoop? Anybody know how well it works and how easy it is to 
use?

=============================================================================
Mr. Tracy Reed         |Every artist is a cannibal.| Why did dad cry 
San Diego State Univ.  |Every poet is a thief.     |  when I gave him
Aerospace Engineering  |All kill their inspiration |  Willmaker 1.0?
[email-masked] |And sing about their grief.|
[email-masked]      |-U2 IRC-Maelcum /me smiles |  
=============================================================================

------------------------------

From: [email-masked] (Wayne Hodgen)
Subject: Re: QUOTA available for v1.1.49 yet?
Date: 6 Sep 1994 08:02:38 GMT
Reply-To: [email-masked]

|> A lot of things have changed in recent kernel releases. I'm currently
|> running v1.1.37 with QUOTA and ACCT patches, but it won't patch up to
|> v1.1.49 cleanly. Usually I'd just go in and apply the patches by hand
|> but this time it doesn't look as easy as it normally does.

I did exactly that, patched by hand. I put the .21 QUOTA kdiffs into a 47
kernel. The patchs 47->48 and 48->49 went in with no problem. The first
step's a biggie though :) I can't say about ACCT 'cos I don't bother with
process paranoia ;)

I agree that they should get into the real kernel soon. I've been using
QUOTA for weeks now and it works beautifully.

-- 
Wayne Hodgen   | [email-masked] | #include <ridiculouslylong
Uni Koblenz,   | or Fight-o-net 2:2454/518.42     | legalesemumbojumbodisclaim
Rheinau 1,     | Voice: +49 261 9119-645          | er||stupidasciipictureover
56075 Koblenz. | Fax:   +49 261 9119-499          | 20linestoannoythenet.cops>

------------------------------

From: [email-masked] (David Kastrup)
Subject: Re: UID 0 Passwd blues
Date: 6 Sep 1994 09:44:53 GMT

[email-masked] (Anton de Wet) writes:

>I ran accross an inconvenient ``feature'' of the passwd program yesterday.
>On one of our Linux boxes we have 3 UID 0 users --- root and two others. 
>Since initial setup a week ago, everything was working fine, but suddenly
>the root password was invalid :-( After some investigation and experimenting
>we found that one of the users had changed his password and that this changes
>all the  UID 0 passwords to the same thing.

>Is this supposed to be so? I think not. What is the easiest way to fix it?
>(I'm using Slackware 2.0 distribution)

Setting the passwords in turn, saving the passwd file to different
names each time, then pasting together with a text editor.

OR: giving those other users other ids, setting their passwords, then changing
the ids back to 0. Sounds great, doesn't it?

But at least it works.
Downside to this: anybody knowing any password of any user 0 can change the
superuser one, if he is able to get a shell (usually this will not quite work).
-- 
 David Kastrup        [email-masked]          
 Tel: +49-241-72419 Fax: +49-241-79502
 Goethestr. 20, D-52064 Aachen

------------------------------

From: [email-masked] (Anton de Wet)
Subject: Re: What is my root password????????
Date: 6 Sep 1994 08:58:28 GMT

: For Linux, you have to pass the "single" argument to the kernel.

: At the LILO prompt, just type "linux single" (if your image's name is 
: "linux").

I had the same problem yesterday, booted into single user mode 
and it didn't help a bit :-( If I tried any change, the system said the drive
was read only, although mount reported it as (rw). I tried playing arround with
remounting /dev/hda1 (my boot drive) to no avail.

Finally I rebooted the computer with the slackware boot/root combination, 
mounted /dev/hda1 and fixed it this way.

I'm currently using the 1.1.18 kernel straight from the Slackware 2.0 q 
series. 

Is this normal behavior? How do you get _real_ (rw) after booting single user?

Anton

------------------------------

Crossposted-To: comp.os.linux.misc
From: [email-masked] (Eelco H. Essenberg)
Subject: 525MB streamer that wouldn't backup 300MB: SOLVED!
Date: Tue, 6 Sep 1994 09:29:58 GMT

Hi all!

First of all, thanks to all of you who replied to my initial post! I received
many suggestions, backup scripts etc. I tried many of the solutions you suggested,
but none seemed to solve my problem. Fiddling around with cpio's parameters
I tried different block-sizes, IO-sizes (-C param)... whether my streamer was
in streaming mode (almost) all the time or started-stopped pretty often didn't
make any difference.

I got NovaStor under MSDOG, and it didn't do any better either. Its main virtue
has been to tell precisely how much data I got on a single tape: about 160MB...
That sort of gave the game away: the tapes I had were labelled "DC6525", but were
in fact DC6150's... I got myself another tape, a 3M DC6525 and lo and behold: 523MB
on a single tape...

Once again, thanks to all of you who helped. The lesson seems to be that not every
DC6525 is in fact a DC6525 ;-)

Regards,

Eelco.

-- 
==========================< Eelco Essenberg >===============================
[email-masked]                            [email-masked]
                      FTP Manager: ftp.twi.tudelft.nl
   <a href=http://www.twi.tudelft.nl/People/E.Essenberg.html>Click me!</a>

------------------------------

** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [email-masked]

You can send mail to the entire list (and comp.os.linux.admin) via:

    Internet: [email-masked]

Linux may be obtained via one of these FTP sites:
    nic.funet.fi				pub/OS/Linux
    tsx-11.mit.edu				pub/linux
    sunsite.unc.edu				pub/Linux

End of Linux-Admin Digest
******************************