Sype wont"t open

Hi,

in slackware10 trying to open skype a program
for Internet telephony I get the following error:

relocation error: /usr/lib/qt/lib/libqt-mt.so.3: undefined symbol:
XkbSetPerClientControls

and the program aborts.

How to resolve?

Thanks & regards
--
Peter

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Sype wont"t open

At 01:50 PM 3/1/2005 +0800, Peter H. wrote:
>Hi,
>
>in slackware10 trying to open skype a program
>for Internet telephony I get the following error:
>
>relocation error: /usr/lib/qt/lib/libqt-mt.so.3: undefined symbol:
>XkbSetPerClientControls
>
>and the program aborts.
>
>How to resolve?
>
>Thanks & regards

Probably by getting a newer version of libqt-mt.so.3 . An undefined symbol
usually means you have an older version of a library than the app was
compiled against. (If you have the library's -dev package installed ... or
whatever Slackware calls the packages with the headers files for various
libraries ... you could check the headers for this function call, as a way
of confirming my guess.)

In Debian-Sid, the current version of this package is 3.2.3-4 . The
installed copy I have on a system here is timestamped last July, but I
doubt my version is the current package. The Skype site says you need at
least version 3.2 of this library.

I'm guessing that you got Skype from the Skype site, not as part of
Slackware, probably the dynamic binary the site offers for download. The
Skype site does also list a version that has QT 3.2 compiled statically. I
imagine that includes the libqt-mt part, so using that might be an
effective workaround.

PS - Just to avoid misunderstanding ... libqt-mt.so.3 is normally a
symlink, to something like this:

/usr/lib/libqt-mt.so.3 -> libqt-mt.so.3.2.3

You need to check the underlying library it is a symlink to to determine
the version.


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Sype wont"t open

On Tuesday 01 March 2005 06:50, Peter H. wrote:
> Hi,
>
> in slackware10 trying to open skype a program
> for Internet telephony I get the following error:
>
> relocation error: /usr/lib/qt/lib/libqt-mt.so.3: undefined symbol:
> XkbSetPerClientControls

I did not get confronted with this problem when i tryed skype with=20
slackware-10, i found all sorts of problems tho'.

The following URL may well help you;

https://www.redhat.com/archives/fedora-list/2004-May/msg0458 9.html

If that helps then your problems are not over as you will meet many pro=
blems=20
with skype and slackware-10. I may well be able to help you tho=B4.

I did manage to get skype started but performance was lousy and to be h=
onest i=20
was very dissapointed with it.

I have it running under fedora 3, performance is fine and it was not to=
much=20
hassel to get going.

> and the program aborts.
>
> How to resolve?
>
> Thanks & regards
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie"=
in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Sype wont"t open

On Tuesday 01 March 2005 07:21, Ray Olszewski wrote:
> PS - Just to avoid misunderstanding ... libqt-mt.so.3 is normally a
> symlink, to something like this:
>
> =A0 =A0 =A0 =A0 =A0/usr/lib/libqt-mt.so.3 -> libqt-mt.so.3.2.3
>
> =A0 You need to check the underlying library it is a symlink to to de=
termine
> the version.

Standard slack-10 has 3.3.2 installed in/

/usr/lib/qt which should be linked to qt-3.3.2
My slack-10 /etc/ld.so.conf looks like;

/usr/local/lib
/usr/X11R6/lib
/usr/i486-slackware-linux/lib
/opt/kde/lib
/usr/lib/qt/lib
/usr/lib/xine
/usr/lib
/lib

I found many questions about this error on www.google.com/linux.
A few answers all saying the same as i pointed Peter to in my other rep=
ly.

Regards Richard.
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie"=
in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Skype wont"t open

Thanks Ray

> At 01:50 PM 3/1/2005 +0800, Peter H. wrote:
> >Hi,
> >
> >in slackware10 trying to open skype a program
> >for Internet telephony I get the following error:
> >
> >relocation error: /usr/lib/qt/lib/libqt-mt.so.3: undefined symbol:
> >XkbSetPerClientControls
> >
> >and the program aborts.
> >
> >How to resolve?
> >
> >Thanks & regards

On Mon, 28 Feb 2005 22:21:39 -0800
Ray Olszewski wrote:
>
> Probably by getting a newer version of libqt-mt.so.3 . An undefined symbol
> usually means you have an older version of a library than the app was
> compiled against. (If you have the library's -dev package installed ... or
> whatever Slackware calls the packages with the headers files for various
> libraries ... you could check the headers for this function call, as a way
> of confirming my guess.)
>
> In Debian-Sid, the current version of this package is 3.2.3-4 . The
> installed copy I have on a system here is timestamped last July, but I
> doubt my version is the current package. The Skype site says you need at
> least version 3.2 of this library.

The version I have is 3.3.2 which I took from a Fedora 3 CD. In Fedora 2
Skype opens with this version which I copied to slackware.

>
> I'm guessing that you got Skype from the Skype site, not as part of
> Slackware, probably the dynamic binary the site offers for download. The
> Skype site does also list a version that has QT 3.2 compiled statically. I
> imagine that includes the libqt-mt part, so using that might be an
> effective workaround.

I tried both the dynamic and static version and I am getting the same error.

::$ ls -l /usr/lib/qt/lib/libqt-mt.so.3
lrwxrwxrwx 1 root root 17 2004-10-29 09:24 /usr/lib/qt/lib/libqt-mt.so.3 ->
libqt-mt.so.3.3.2

> PS - Just to avoid misunderstanding ... libqt-mt.so.3 is normally a
> symlink, to something like this:
>
> /usr/lib/libqt-mt.so.3 -> libqt-mt.so.3.2.3
>
> You need to check the underlying library it is a symlink to to determine
> the version.
>



--
Peter

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Skype wont"t open

Thanks,

so when using Skype I will just boot into Fedora 2 instead of Slackware 10.
In Fedora 2 Skype opened and run well as soon as I had a library from Fedora3
installed. I can't install fedora 3 since the 2nd install disk I got is
damaged and no replacement yet from the company I bought it.

Regards
--
Peter

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Sype wont"t open

Peter H. wrote:
> Hi,
>
> in slackware10 trying to open skype a program
> for Internet telephony I get the following error:
>
> relocation error: /usr/lib/qt/lib/libqt-mt.so.3: undefined symbol:
> XkbSetPerClientControls
>
> and the program aborts.
>
> How to resolve?
>
> Thanks & regards

Dear Peter:

Get the 'static' version.
http://www.skype.com/products/skype/linux/
"Static binary tar.bz2 with Qt 3.2 compiled in (8.0 MB)"

HTH, Chuck


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Sype wont"t open

Peter wrote:
> chuck@gelm.net said:
>
>> Get the 'static' version. http://www.skype.com/products/skype/linux/
>>"Static binary tar.bz2 with Qt 3.2 compiled in (8.0 MB)
>
>
>
> I did and get the same error message.
>
>
>
I have the static version on a laptop with Slackware v10.0
and I do not get an error.

'locate libqt' yields ->

/usr/lib/qt-3.3.2/lib/libqt-mt.so.3
/usr/lib/qt-3.3.2/lib/libqt-mt.prl
/usr/lib/qt-3.3.2/lib/libqt-mt.la
/usr/lib/qt-3.3.2/lib/libqt-mt.so
/usr/lib/qt-3.3.2/lib/libqt-mt.so.3.3.2
/usr/lib/qt-3.3.2/lib/libqt-mt.so.3.3

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Sype wont"t open

On Tuesday 01 March 2005 10:46, chuck gelm wrote:
> Dear Peter:
>
> =A0 Get the 'static' version.
> http://www.skype.com/products/skype/linux/
> "Static binary tar.bz2 with Qt 3.2 compiled in (8.0 MB)"
>
> HTH, Chuck

Chuck, do you have it running on slack-10.?? if so what is your impress=
ion and=20
what things did you need to configure to get it to run.??

Regards Richard.
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie"=
in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Some users locked out of ssh and sftp?

This isn't making sense to me. I have users logging in
via SSH to a redhat linux box using their network
username/password. I'm able to do it as are most
others, either locally or remotely. ie:

ssh -l eve
or
sftp eve@

Thus far, I've run across 1 user who can't sftp OR
SSH. He's entirely locked out, despite having the
correct username and password. He appears to be set up
the same as well the others.

Is there a file or some such I should edit and/or
check to ensure he can get access? Anything to point
me to in terms of what I can check in that he may
*not* be set up the same as everyone else?

Thanks,
Eve

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Some users locked out of ssh and sftp?

At 08:22 AM 3/1/2005 -0800, Eve Emshoff wrote:

>This isn't making sense to me. I have users logging in
>via SSH to a redhat linux box using their network
>username/password. I'm able to do it as are most
>others, either locally or remotely. ie:
>
>ssh -l eve
>or
>sftp eve@
>
>Thus far, I've run across 1 user who can't sftp OR
>SSH. He's entirely locked out, despite having the
>correct username and password. He appears to be set up
>the same as well the others.
>
>Is there a file or some such I should edit and/or
>check to ensure he can get access? Anything to point
>me to in terms of what I can check in that he may
>*not* be set up the same as everyone else?


Ok. First thing to do is get his password and make sure that *you* can ssh
in using the same userid and password he is using. If you can, then you are
either seeing some sort of user error or a problem associated with the site
he is trying to connect *from*. (It's hard to come up with an example of
the second, but I can imagine that an ISP might block traffic to port 22
for some reason that does not occur to me ... although if "entirely locked
out" means he is prompted for a password, then rejected, that example does
not apply.)

(BTW, what do you mean by "network" username/password? Does this host use
something other than the standard files /etc/passwd and /etc/shadow for
userid and password? For example, is NIS involved somehow, or some LDAP
gimmickry? If so, and if you decide to post a followup, please clarify this
part.)

(Also, you say "most others" can log in. Is this just caution in reporting,
or do you have other reports of unexplained failures?)

If you can log in and you want to explore the possibility that the problem
is NOT user error, then to get help here you'll need to say more about the
failure he is seeing.

Once you've verified for yourself that the userid/password combo does not
work for you either, first check that this userid/password combo can do a
normal shell login. If it can't, try (as root) chainging the password, to
see if the problem is nothing more than the user having misremembered his
password. Also check his entry in /etc/passwd to make sure a valid shell
(/bin/bash, usually) is provided ... it has to be something listed in
/etc/shells .

If the ssh problem remains after a password change (but the local login
problem is fixed, or if local logins always worked so you skipped this
step), the check the sshd config file (not sure where Red Hat keeps this,
but maybe /etc/ssh/sshd_config ... that's where Debian puts it, anyway) and
see if something there is interfering. For example, the entry

PermitRootLogin no

blocks root logins via ssh. More generally, the entries

AllowUsers

and

DenyUsers

followed by a pattern or list can restrict which userids are allowed or
forbidden to ssh in.

These are the easy examples. There is too much more to say ... read the man
page for sshd_config if you want a general intro ... without a more
specific indication of what the problem actually looks like (more than
"entirely locked out", I mean), which could narrow the possibilities.

I've focused on ssh here because it is a bit easier to troubleshoot. But
all the same considerations should apply to sftp as well ... that is, once
you get ssh logins working, sftp should also work ... they use the same
authentication mechanism and tunneling.


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Some users locked out of ssh and sftp?

On Tuesday 01 March 2005 10:59 am, Ray Olszewski wrote:
> At 08:22 AM 3/1/2005 -0800, Eve Emshoff wrote:
> >This isn't making sense to me. I have users logging in
> >via SSH to a redhat linux box using their network
> >username/password. I'm able to do it as are most
> >others, either locally or remotely. ie:
> >
> >ssh -l eve
> >or
> >sftp eve@
> >
> >Thus far, I've run across 1 user who can't sftp OR
> >SSH. He's entirely locked out, despite having the
> >correct username and password. He appears to be set up
> >the same as well the others.
> >
> >Is there a file or some such I should edit and/or
> >check to ensure he can get access? Anything to point
> >me to in terms of what I can check in that he may
> >*not* be set up the same as everyone else?
>
> Ok. First thing to do is get his password and make sure that *you* ca=
n ssh
> in using the same userid and password he is using. If you can, then y=
ou are
> either seeing some sort of user error or a problem associated with th=
e site
> he is trying to connect *from*. (It's hard to come up with an example=
of
> the second, but I can imagine that an ISP might block traffic to port=
22
> for some reason that does not occur to me ... although if "entirely l=
ocked
> out" means he is prompted for a password, then rejected, that example=
does
> not apply.)
>
> (BTW, what do you mean by "network" username/password? Does this host=
use
> something other than the standard files /etc/passwd and /etc/shadow f=
or
> userid and password? For example, is NIS involved somehow, or some LD=
AP
> gimmickry? If so, and if you decide to post a followup, please clarif=
y this
> part.)
>
> (Also, you say "most others" can log in. Is this just caution in repo=
rting,
> or do you have other reports of unexplained failures?)
>
> If you can log in and you want to explore the possibility that the pr=
oblem
> is NOT user error, then to get help here you'll need to say more abou=
t the
> failure he is seeing.
>
> Once you've verified for yourself that the userid/password combo does=
not
> work for you either, first check that this userid/password combo can =
do a
> normal shell login. If it can't, try (as root) chainging the password=
, to
> see if the problem is nothing more than the user having misremembered=
his
> password. Also check his entry in /etc/passwd to make sure a valid sh=
ell
> (/bin/bash, usually) is provided ... it has to be something listed in
> /etc/shells .
>
> If the ssh problem remains after a password change (but the local log=
in
> problem is fixed, or if local logins always worked so you skipped thi=
s
> step), the check the sshd config file (not sure where Red Hat keeps t=
his,
> but maybe /etc/ssh/sshd_config ... that's where Debian puts it, anywa=
y) and
> see if something there is interfering. For example, the entry
>
> PermitRootLogin no
>
> blocks root logins via ssh. More generally, the entries
>
> AllowUsers
>
> and
>
> DenyUsers
>
> followed by a pattern or list can restrict which userids are allowed =
or
> forbidden to ssh in.
>
> These are the easy examples. There is too much more to say ... read t=
he man
> page for sshd_config if you want a general intro ... without a more
> specific indication of what the problem actually looks like (more tha=
n
> "entirely locked out", I mean), which could narrow the possibilities.
>
> I've focused on ssh here because it is a bit easier to troubleshoot. =
But
> all the same considerations should apply to sftp as well ... that is,=
once
> you get ssh logins working, sftp should also work ... they use the sa=
me
> authentication mechanism and tunneling.

Besides all of Ray's perfectly good suggestions I have something to add=


Check the permissions on his/her ~/.ssh directory. If the permissions s=
omehow=20
became world write/readable ssh will refuse to log that person in. Chec=
k the=20
log files too! If ssh is logging its failures it can tell you a whole l=
ot!

If you can, try running ssh on an alternate port in debugging mode and =
logging=20
in as that user. That way you can see where/why ssh is failing.

However, try to log the user in locally first because if its a local pr=
oblem=20
then fiddling with SSH wont do anything. Also if its a local problem an=
d you=20
fix it then SSH should work itself out.

--=20
----------------------------------------
--EB

> All is fine except that I can reliably "oops" it simply by trying to =
read
> from /proc/apm (e.g. cat /proc/apm).
> oops output and ksymoops-2.3.4 output is attached.
> Is there anything else I can contribute?

The latitude and longtitude of the bios writers current position, and
a ballistic missile.

                --Alan Cox LKML-Decembe=
r 08,2000=20

----------------------------------------
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie"=
in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Skype wont"t open

Is it possible that the kernel has something to do that skype will not open in
slackware10 instead aborts with:

skype: relocation error: /usr/lib/qt/lib/libqt-mt.so.3: undefined symbol:
XkbSetPerClientControls

My kernel in slackware10 is 2.4.26 whereas in Fedora2 where skype works
flawlessly the kernel is 2.6....

What is that anyhow XkbSetPerClientControls ?

Besides having tried the static and dynamic version I tried as well the rpm
version which I have in Fedora, made a tgz file with rpm2tgz and trying to run
it I get the identical error message.

Regards

--
Peter

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Skype wont"t open

At 10:07 AM 3/2/2005 +0800, Peter wrote:
>Is it possible that the kernel has something to do that skype will not
>open in
>slackware10 instead aborts with:
>
>skype: relocation error: /usr/lib/qt/lib/libqt-mt.so.3: undefined symbol:
>XkbSetPerClientControls
>
>My kernel in slackware10 is 2.4.26 whereas in Fedora2 where skype works
>flawlessly the kernel is 2.6....
>
>What is that anyhow XkbSetPerClientControls ?
>
>Besides having tried the static and dynamic version I tried as well the rpm
>version which I have in Fedora, made a tgz file with rpm2tgz and trying to
>run
>it I get the identical error message.

This result is somewhat puzzling, especially coming from the static version.

So I did a bit of checking, though, and apparently this message means that
libqt-mt.so.3 is unable to find one of its symbols. In this case, the
symbol should resolve to a call to libX11.so, so the problem is likely a
version incompatibility between the libqt-mt.so.3 you are using and
Slackware's libX11.so.

Probably the best workaround is to stop using the libqt-mt.so.3 you copied
over from SuSE and find a version of libqt-mt.so.3 that is compiled for,
and works with, Slackware 10. Then use the dynamic version of Skype with it.

In any case, it is all but surely not a kernel issue. It is some sort of X
issue.



-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Skype wont"t open

> At 10:07 AM 3/2/2005 +0800, Peter wrote:
> >Is it possible that the kernel has something to do that skype will not
> >open in
> >slackware10 instead aborts with:
> >
> >skype: relocation error: /usr/lib/qt/lib/libqt-mt.so.3: undefined symbol:
> >XkbSetPerClientControls
> >
> >My kernel in slackware10 is 2.4.26 whereas in Fedora2 where skype works
> >flawlessly the kernel is 2.6....
> >
> >What is that anyhow XkbSetPerClientControls ?
> >
> >Besides having tried the static and dynamic version I tried as well the rpm
> >version which I have in Fedora, made a tgz file with rpm2tgz and trying to
> >run
> >it I get the identical error message.
>
> This result is somewhat puzzling, especially coming from the static version.

>
On Tue, 01 Mar 2005 19:00:42 -0800
Ray Olszewski wrote:

> So I did a bit of checking, though, and apparently this message means that
> libqt-mt.so.3 is unable to find one of its symbols. In this case, the
> symbol should resolve to a call to libX11.so, so the problem is likely a
> version incompatibility between the libqt-mt.so.3 you are using and
> Slackware's libX11.so.
>
> Probably the best workaround is to stop using the libqt-mt.so.3 you copied
> over from SuSE and find a version of libqt-mt.so.3 that is compiled for,
> and works with, Slackware 10. Then use the dynamic version of Skype with it.
>
> In any case, it is all but surely not a kernel issue. It is some sort of X
> issue.

Thanks Ray!

I downloaded and installed the latest qt-3.3.3-i486-3.tgz from slackware.
There is no change, all installed skype won't open, sames error message.
I checked the libX11 and the latest version is installed.

Regards

--
Peter
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Skype wont"t open

On Wednesday 02 March 2005 03:07, Peter wrote:
> Is it possible that the kernel has something to do that skype will no=
t open
> in slackware10 instead aborts with:
>
> skype: relocation error: /usr/lib/qt/lib/libqt-mt.so.3: undefined sym=
bol:
> XkbSetPerClientControls
>
> My kernel in slackware10 is 2.4.26 whereas in Fedora2 where skype wor=
ks
> flawlessly the kernel is 2.6....
>
> What is that anyhow XkbSetPerClientControls ?
>
> Besides having tried the static and dynamic version I tried as well t=
he rpm
> version which I have in Fedora, made a tgz file with rpm2tgz and tryi=
ng to
> run it I get the identical error message.

When i searched google for your error message some said it is a bug in =
qt,=20
others say its because one has installed another version of qt and now =
has=20
two versions installed.
I pointed you to an URL which menioned a spesific order of directory=B4=
s in the=20
file /etc/ld.so.conf. here is what i used on my slack-10 system when i =
tryed=20
skype.

/usr/local/lib
/usr/X11R6/lib
/usr/i486-slackware-linux/lib
/opt/kde/lib
/usr/lib/qt/lib
/usr/lib/xine
/usr/lib
/lib

I noticed in another message of your that what ls -al /usr/lib/qt retur=
ed, it=20
was different to my origanal slack-10 install, i get;
/usr/lib/qt -> qt-3.3.2

I belive if you installed an rpm from fedora 2 then that could well be =
your=20
problem.

> Regards
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie"=
in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Skype wont"t open

Thanks Adam!

My /etc/ld.so.conf is practically the same:

/usr/local/lib
/usr/X11R6/lib
/usr/i486-slackware-linux/lib
/opt/kde/lib
/usr/lib/qt/lib
/usr/local/tmake/lib
/usr/lib
/usr/local/ActiveTcl/lib
/usr/include
/usr/local/lib/sigc++-1.2
/lib

and ls -al /usr/lib/qt
/usr/lib/qt -> qt-3.3.3

After this installation of qt-3.3.3 I did ldconfig.

I have no other version qt installed.

ls /usr/lib/qt*
/usr/lib/qt:
README-QT.TXT examples lib plugins
bin extensions mkspecs tutorial
doc include pics

/usr/lib/qt-3.3.3:
README-QT.TXT examples lib plugins
bin extensions mkspecs tutorial
doc include pics

Regards
--
Peter

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Skype wont"t open

On Wednesday 02 March 2005 08:33, Peter wrote:
> Thanks Adam!

I presume you meant Richard Adams...

> My /etc/ld.so.conf is practically the same:
>
> /usr/local/lib
> /usr/X11R6/lib
> /usr/i486-slackware-linux/lib
> /opt/kde/lib
> /usr/lib/qt/lib

There should be no need to define qt at all as you define /usr/lib, futher
more its the define order that matters according to others who have the same
problem as you.

Ray mentioned dependancies that quite possably backs up the need to define
libs in a spesific order to aviod such problems.

> /usr/local/tmake/lib
> /usr/lib
> /usr/local/ActiveTcl/lib
> /usr/include
> /usr/local/lib/sigc++-1.2
> /lib
>
> and ls -al /usr/lib/qt
> /usr/lib/qt -> qt-3.3.3

Ok but are you sure qt3.3.2 is deleted,??
>
> After this installation of qt-3.3.3 I did ldconfig.
>
> I have no other version qt installed.
>
> ls /usr/lib/qt*
> /usr/lib/qt:
> README-QT.TXT examples lib plugins
> bin extensions mkspecs tutorial
> doc include pics
>
> /usr/lib/qt-3.3.3:
> README-QT.TXT examples lib plugins
> bin extensions mkspecs tutorial
> doc include pics
>
> Regards
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Skype wont"t open

pa3gcu@zeelandnet.nl said:
> I presume you meant Richard Adams...

Actually Richards

pa3gcu@zeelandnet.nl said:
> Ok but are you sure qt3.3.2 is deleted,??

heisspf@~:$ locate qt-3.3.2
heisspf@~:$

Not a trace left. Updated daily.

I put this now into ld.so.conf only with no change of the error message after
doing ldconfig. This is anyhow the sequence put-in by slackware I think.

/usr/local/lib
/usr/X11R6/lib
/usr/i486-slackware-linux/lib
/opt/kde/lib
/usr/lib
/lib

and leaving /usr/lib/qt out I get:

error while loading shared libraries: libqt-mt.so.3: cannot open shared object
file: No such file or directory


I have the strong suspicion the problem is in those libs in /usr/X11R6/libs.
Are they different from distro to distro?

This is the end of strace dynamic skype:

read(4, "&\0\0\0\1\1\22\t\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\0"..., 604) = 604
writev(2, [{"./skype", 7}, {": ", 2}, {"symbol lookup error", 19}, {": ", 2},
{"./skype", 7}, {": ", 2}, {"undefined symbol: XkbSetPerClien"..., 41}, {"",
0}, {"", 0}, {"\n", 1}], 10./skype: symbol lookup error: ./skype: undefined
symbol: XkbSetPerClientControls
) = 81
exit_group(127)

Regards
--
Peter


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Skype wont"t open

Hi, Peter:

This 'skype' is rather new to me and I only have it working
well using Windows 2000 & Windows XP. It 'works' with
Slackware v9.1, but the audio is not good.

I am suggesting that you try with a fresh install of
Slackware so that it will not be confused with a 'rpm'
install of libraries from another distribution.

Skype 'works' for me when invoked from a Xwindow terminal.
My Xwindow environment is Gnome (Slackware v9.1 default).
I guess I installed (or it defaulted to) Skype binary into
/usr/local/bin. I run Gnome in Xwindows, open a terminal
windows and enter 'skype'. Viola! it runs.

OBTW, my brother has Skype running on at least one
desktop and one laptop under Slackware. I'll BC:
him and maybe he can offer some help or hints.
John: This is 'linux-newbie'.
http://vger.kernel.org/majordomo-info.html

Are there archives of linux-newbie?

HTH, Chuck


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Skype wont"t open

On Thursday 03 March 2005 10:56, Peter wrote:
> pa3gcu@zeelandnet.nl said:
> > I presume you meant Richard Adams...
>
> Actually Richards
>
> pa3gcu@zeelandnet.nl said:
> > Ok but are you sure qt3.3.2 is deleted,??
>
> heisspf@~:$ locate qt-3.3.2
> heisspf@~:$
>
> Not a trace left. Updated daily.
>
> I put this now into ld.so.conf only with no change of the error messa=
ge
> after doing ldconfig. This is anyhow the sequence put-in by slackware=
I
> think.
>
> /usr/local/lib
> /usr/X11R6/lib
> /usr/i486-slackware-linux/lib
> /opt/kde/lib
> /usr/lib
> /lib
>
> and leaving /usr/lib/qt out I get:
>
> error while loading shared libraries: libqt-mt.so.3: cannot open shar=
ed
> object file: No such file or directory

I was seemingly missleading on saying that /usr/lib should have been en=
ought,=20
iá¸=BF sorry to say but i seem to be wrong.

It is defined here as

/usr/lib/qt/lib
Once again i have qt-3.3.2.
I have tryed skype on another box with a clean slack-10 install and i d=
o not=20
get that message.

Anyway like i mentioned slackware-10 and skype do not really like each =
other,=20
even if skype starts you need to tune things a lot to get it to even th=
ink of=20
working.


>
> I have the strong suspicion the problem is in those libs in
> /usr/X11R6/libs. Are they different from distro to distro?
>
> This is the end of strace dynamic skype:
>
> read(4, "&\0\0\0\1\1\22\t\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\0"..., =
604) =3D
> 604 writev(2, [{"./skype", 7}, {": ", 2}, {"symbol lookup error", 19}=
, {":
> ", 2}, {"./skype", 7}, {": ", 2}, {"undefined symbol: XkbSetPerClien"=
..,
> 41}, {"", 0}, {"", 0}, {"\n", 1}], 10./skype: symbol lookup error: ./=
skype:
> undefined symbol: XkbSetPerClientControls
> ) =3D 81
> exit_group(127)


I am quite sure someone on the skype site mailing list(s) would apprica=
te that=20
as a problem report Peter.
All it says to me is that an undefined symbol was discoverd-;)


>
> Regards
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie"=
in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Thought I was mounting drive correctly, but backup failed

My setup:
1 Linux RedHat 9 kernel
1 Windows 2000 backup machine with 2 firewire hot-swap drives attached
(named 'backup')
- firewire drives have been partitioned and ready to roll
- drives are lettered/named, respectively, e/Granite1, and
f/Granite2
- linuxadmin/password set up on system to allow for the following...

My procedure:
mount -t smbfs -o username=linuxadmin,password=password,workgroup=wowcorp
//backup/e /mnt/backup

/mnt/backup directory's definitely created. When I use the above command, I
return no errors, and the drive is empty so I thought it was mounting.
However, when I checked the backup logs, the logs were empty...and remount
shows no files were copied over from the script I've set up.

It doesn't appear to be the backup script that is the issue. Is there
something amiss in my setup? Let me know if you need more info (I'm sure you
will!).

Thanks,
Eve


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Thought I was mounting drive correctly, but backup failed

At 02:20 PM 3/11/2005 -0500, Eve Atley wrote:

>My setup:
>1 Linux RedHat 9 kernel

I don't know if this part of the info matters, but identifying a kernel
this way is almost useless. More useful is to report the output of "uname
-a" and mention if you are using a stock or locally-compiled version of the
kernel.

>1 Windows 2000 backup machine with 2 firewire hot-swap drives attached
>(named 'backup')
> - firewire drives have been partitioned and ready to roll
> - drives are lettered/named, respectively, e/Granite1, and
>f/Granite2
> - linuxadmin/password set up on system to allow for the following...
>
>My procedure:
>mount -t smbfs -o username=linuxadmin,password=password,workgroup=wowcorp
>//backup/e /mnt/backup
>
>/mnt/backup directory's definitely created.

This looks right, at least from the Linux end of it (I don't know if
Windows properly maps //backup/e to e/Granite1 or not, but I'd expect to
see an error message from the Linux end if not.)

>When I use the above command, I
>return no errors, and the drive is empty so I thought it was mounting.

What does "df" think? (It knows more than you do about these things.) Does
the drive show up there and is it the right size to be the intended target
filesystem?

>However, when I checked the backup logs, the logs were empty...and remount
>shows no files were copied over from the script I've set up.

I wonder if there is a permissions problem of some sort. After you smbmount
the filesystem this way, are you able to cp one or more files to it
manually? If yes, can you do so as whatever userid the script runs from? If
no, can you do so as root?

>It doesn't appear to be the backup script that is the issue.

We've discussed this style point before, I think, but whenever I read a
phrasing like "doesn't appear to be" in a trouble report, I see
uncertainty, not assurance, and my suspiciousness gene kicks in. How did
you form this belief?

>Is there
>something amiss in my setup?

If cp'ing by hand works, then you need to examine your script with a bit
more skepticism. (BTW, does the script detect and log cp'ing failures? Or
are its STDOUT and STDERR routed to /dev/null or someplace equally useless?)

If it doesn't work, then you need to check both the permissions on the
local mount point ("ls -l /mnt/backup" and on the remote system (not sure
how to do this, since that's a Windows host) to see that you have
("linuxadmin" has, that is) write permission.

>Let me know if you need more info (I'm sure you
>will!).

My comments above should serve to tell you what we need to see, with the
exact choices depending on how you answer the questions I asked. As always,
never summarize results, report them word for word.


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Thought I was mounting drive correctly, but backup failed

Hi Ray, thanks for your usual excellent tips. Here's what I've done...

1. mount -t smbfs -o username=linuxadmin,password=password,workgroup=wowcorp
//backup/e /mnt/backup
Result: no errors

2. df shows:
/dev/hda2 37334192 5252668 30185052 15% /
/dev/hda1 101089 29129 66741 31% /boot
/dev/hdb1 57669728 42343604 12396676 78% /home
none 256800 0 256800 0% /dev/shm
//backup/e 120623104 69632 120553472 1% /mnt/backup

So, it appears to be mounting...with correct partition size.

3. cp mount_test.txt /mnt/backup
Result: mount_test.txt resides on /mnt/backup

>If yes, can you do so as whatever userid the script runs from? If
>no, can you do so as root?

Well, I logged in via ssh as root, mounted the drive, and copied the file.

>If cp'ing by hand works, then you need to examine your script with a bit
>more skepticism. (BTW, does the script detect and log cp'ing failures? Or
>are its STDOUT and STDERR routed to /dev/null or someplace equally
useless?)

Well, I say it's not the script's fault because it all worked previously. :)
Linuxadmin is set up as an administrator, so should have full read/write
capabilities. At this point, the backup script shows:

mount -t smbfs -o username=linuxadmin,password=password,workgroup=wowcorp
//backup/e /mnt/backup &>/root/backup_scripts/logs/`date
+"MOUNT-%y-%m-%d.log"`
if [ -f /mnt/backup/connected ]; then
rm -rf /mnt/backup/`date +"%A/"`
mkdir /mnt/backup/`date +"%A/"`
cp -r /home/shared/* /mnt/backup/`date +"%A/"`
1>/mnt/backup/logs/`date
+"DAILY-%y-%m-%d.log"` 2>/mnt/backup/logs/`date +"DAILY-%y-%m-%d.err"`
umount /mnt/backup &>/root/backup_scripts/logs/`date
+"MOUNT-%y-%m-%d.log"`
fi


----------------

The generated log appears completely empty, whereas the day before it
indicated:
SMB connection failed
15538: session setup failed: ERRDOS - ERRnoaccess (Access denied.)
....since I had nothing set up at that time.


- Eve


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Thought I was mounting drive correctly, but backup failed

I've made several suggestions inline. But skip to the last one first, since
it's my best guess about what your actual problem is.

At 05:35 PM 3/11/2005 -0500, Eve Atley wrote:

>Hi Ray, thanks for your usual excellent tips. Here's what I've done...
>
>1. mount -t smbfs -o username=linuxadmin,password=password,workgroup=wowcorp
>//backup/e /mnt/backup
>Result: no errors
>
>2. df shows:
>/dev/hda2 37334192 5252668 30185052 15% /
>/dev/hda1 101089 29129 66741 31% /boot
>/dev/hdb1 57669728 42343604 12396676 78% /home
>none 256800 0 256800 0% /dev/shm
>//backup/e 120623104 69632 120553472 1% /mnt/backup
>
>So, it appears to be mounting...with correct partition size.

I agree. This part looks good.

>3. cp mount_test.txt /mnt/backup
>Result: mount_test.txt resides on /mnt/backup
>
> >If yes, can you do so as whatever userid the script runs from? If
> >no, can you do so as root?
>
>Well, I logged in via ssh as root, mounted the drive, and copied the file.

I don't know if you answered the question or not, since I don't know what
userid the script runs under (I'm guessing that it is a daily cron job, but
I can't guess the uid). But if the script runs under a userid other than
root, it could still be a problem at the Linux end. So please check --

(a) permissions on this mounted directory as Linux sees them. That
is, what does "ls -l /mnt/backup" report?

(b) if you can cp a file to this directory as the userid that runs
the script.
> >If cp'ing by hand works, then you need to examine your script with a bit
> >more skepticism. (BTW, does the script detect and log cp'ing failures? Or
> >are its STDOUT and STDERR routed to /dev/null or someplace equally
>useless?)
>
>Well, I say it's not the script's fault because it all worked previously. :)
>Linuxadmin is set up as an administrator, so should have full read/write
>capabilities.

Since the term "administrator" is not used on Linux and Unix systems, I
assume you refer here to privileges on the Windows end. I'll have to take
your word for that part. But whether permissions are OK on the Linux end is
not sorted out by this.

> At this point, the backup script shows:

>mount -t smbfs -o username=linuxadmin,password=password,workgroup=wowcorp
>//backup/e /mnt/backup &>/root/backup_scripts/logs/`date
>+"MOUNT-%y-%m-%d.log"`
>if [ -f /mnt/backup/connected ]; then
> rm -rf /mnt/backup/`date +"%A/"`
> mkdir /mnt/backup/`date +"%A/"`
> cp -r /home/shared/* /mnt/backup/`date +"%A/"`
>1>/mnt/backup/logs/`date
>+"DAILY-%y-%m-%d.log"` 2>/mnt/backup/logs/`date +"DAILY-%y-%m-%d.err"`
> umount /mnt/backup &>/root/backup_scripts/logs/`date
>+"MOUNT-%y-%m-%d.log"`
>fi

Hmmm ... have you created (touch'ed) the file /mnt/backup/connected on the
backup drive? If not, the script is failing to perform the backup because
the conditional in its if statement (if [ -f /mnt/backup/connected ];)
fails. And the script has no instructions for what to do if the if test
fails (no "else", that is), so nothing would get logged in this case.

>----------------
>
>The generated log appears completely empty, whereas the day before it
>indicated:
>SMB connection failed
>15538: session setup failed: ERRDOS - ERRnoaccess (Access denied.)
>...since I had nothing set up at that time.
>
>
>- Eve

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Some users locked out of ssh and sftp?

Ok, let me see if I can narrow the problem down a bit. Using the GUI panel,
I first create a user and password combination - let's use jean / password1.
This autocreates a user home directory (jean) and gives them a bash shell
(in this case).

Then, via terminal, I 'useradd jean'. Following this, I 'smbpasswd -a jean'
and enter the password as prompted (twice). I return to the GUI and uncheck
all account expiration, just in case. I then set the user up with access to
the groups she should be permitted to (via the GUI).

Now, I'm set up this way (eve), as is user Keyur (keyur) and Gagan (gagan).
I just set up Jean (jean) this way. Gagan and I can log in; neither of us
have a .ssh file located anywhere that we know of, for ourselves. Keyur and
Jean cannot, they are prompted for a session password. Gagan and I never are
prompted for such.

We log in using Winscp3. Locally, as an example, we put in address
192.168.10.x, port 22, username: jean, password: password1. For most of us
(I give only 3 examples here), the login is successful. No session password
needed.

> (BTW, what do you mean by "network" username/password? Does this host

We have it set up so that once the user is logged into his computer with
his/her user/pass combo, then accessing the network via samba uses the same
credentials. Therefore, user/pass combo is same on Windows logon as well as
Samba.

> (Also, you say "most others" can log in. Is this just caution in
> reporting, or do you have other reports of unexplained failures?)

See above.

>Check the permissions on his/her ~/.ssh directory. If the permissions
somehow

Again, I see no .ssh directory, at least not for /home/keyur, /home/gagan,
/home/jean or /home/eve.


- Eve

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Some users locked out of ssh and sftp?

Had the same problem. My problem was solved when I install all the packages
required for log in in all the computers. Suggest you check upor packages.

PS All packages REQUIRED for login DO NOT have SSH as part of their name.
Sorry can not remember what the additional names are.

Frank

On Friday 11 March 2005 17:56, Eve Atley wrote:
> Ok, let me see if I can narrow the problem down a bit. Using the GUI panel,
> I first create a user and password combination - let's use jean /
> password1. This autocreates a user home directory (jean) and gives them a
> bash shell (in this case).
>
> Then, via terminal, I 'useradd jean'. Following this, I 'smbpasswd -a jean'
> and enter the password as prompted (twice). I return to the GUI and uncheck
> all account expiration, just in case. I then set the user up with access to
> the groups she should be permitted to (via the GUI).
>
> Now, I'm set up this way (eve), as is user Keyur (keyur) and Gagan (gagan).
> I just set up Jean (jean) this way. Gagan and I can log in; neither of us
> have a .ssh file located anywhere that we know of, for ourselves. Keyur and
> Jean cannot, they are prompted for a session password. Gagan and I never
> are prompted for such.
>
> We log in using Winscp3. Locally, as an example, we put in address
> 192.168.10.x, port 22, username: jean, password: password1. For most of us
> (I give only 3 examples here), the login is successful. No session password
> needed.
>
> > (BTW, what do you mean by "network" username/password? Does this host
>
> We have it set up so that once the user is logged into his computer with
> his/her user/pass combo, then accessing the network via samba uses the same
> credentials. Therefore, user/pass combo is same on Windows logon as well as
> Samba.
>
> > (Also, you say "most others" can log in. Is this just caution in
> > reporting, or do you have other reports of unexplained failures?)
>
> See above.
>
> >Check the permissions on his/her ~/.ssh directory. If the permissions
>
> somehow
>
> Again, I see no .ssh directory, at least not for /home/keyur, /home/gagan,
> /home/jean or /home/eve.
>
>
> - Eve
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.linux-learn.org/faqs
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Thought I was mounting drive correctly, but backup failed

>Hmmm ... have you created (touch'ed) the file /mnt/backup/connected on the
>backup drive? If not, the script is failing to perform the backup because
>the conditional in its if statement (if [ -f /mnt/backup/connected ];)
>fails. And the script has no instructions for what to do if the if test
>fails (no "else", that is), so nothing would get logged in this case.

Oh my! Let's go with this one first. :) I copied the connected file over
from the old machine and I'll see if that solves my problems. :)

- Eve


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Some users locked out of ssh and sftp?

Yeah, Eve, details help a lot. My memory of your earlier postings on this
is a bit hazy, so I may be dragging you through something you've already
tried. If so, I'm sorry. But based on the fresh info, I have a couple of
suggestions, provided below.

At 05:56 PM 3/11/2005 -0500, Eve Atley wrote:

>Ok, let me see if I can narrow the problem down a bit. Using the GUI panel,
>I first create a user and password combination - let's use jean / password1.
>This autocreates a user home directory (jean) and gives them a bash shell
>(in this case).
>
>Then, via terminal, I 'useradd jean'. Following this, I 'smbpasswd -a jean'
>and enter the password as prompted (twice). I return to the GUI and uncheck
>all account expiration, just in case. I then set the user up with access to
>the groups she should be permitted to (via the GUI).
>
>Now, I'm set up this way (eve), as is user Keyur (keyur) and Gagan (gagan).
>I just set up Jean (jean) this way. Gagan and I can log in; neither of us
>have a .ssh file located anywhere that we know of, for ourselves.

See the end of the message on this bit.

>Keyur and
>Jean cannot, they are prompted for a session password. Gagan and I never are
>prompted for such.

OK. Now though you call it a "session" password, this is just the same
password that the user has already entered in as "password1" (from below).
Right?

As you've described the test, it sounds like a different client-side host
(Windows workstation) is uniquely associated with each userid. So you want
to figure out if the problem is associated with a subset of userids or with
a subset of hosts. See if you can, from a workstation that logs in eve
without a password request, log in as jean without getting a follow-on
password prompt. If yes, the problem is with client configuration, not
server configuration or account creation.

I just downloaded Winscp3 and tested it out. (Nice app, BTW ... nicer
interface than the putty scp app I've occasionally used.) What I found is ...

... if I enter the correct password in the password box, then it
logs me on without any fuss.

... if I enter the wrong password in the password box, then it
prompts me for a password (probably what you call the "session" password).

So the first thing to do is verify that the passwords entered into the
Winscp3 "Session" dialog is correct, not mistyped. Windows users sometimes
forget, for example, that Unix-style passwords are case-sensitive ... since
so much on Windows systems is not case sensitive.

Second, still in Winscp3, check in Advanced Options->Authentication and
make sure "Attempt keyboard-active authentication" and "Respond with
password to the first prompt" are both checked.

Third, still in Winscp3, check in SSH to make sure SSH2 is the only, or at
least the preferred, connection method.

Furth, check for any other differences in Winscp3 setup. I didn't see any
other promising candidates when I looked at the app, but you never know (at
least not when you've used the app only for 10 minutes, as I have).

Last, I've assumed we are in all cases talking about connecting to the same
server. You certainly seem to be saying that. But if I've misunderstood
you ... might there be differences in the sshd implementations between
servers that do and do not prompt for the password? This could be an SSH1
versus SSH2 issue, for example.

>We log in using Winscp3. Locally, as an example, we put in address
>192.168.10.x, port 22, username: jean, password: password1. For most of us
>(I give only 3 examples here), the login is successful. No session password
>needed.
>
> > (BTW, what do you mean by "network" username/password? Does this host
>
>We have it set up so that once the user is logged into his computer with
>his/her user/pass combo, then accessing the network via samba uses the same
>credentials. Therefore, user/pass combo is same on Windows logon as well as
>Samba.
>
> > (Also, you say "most others" can log in. Is this just caution in
> > reporting, or do you have other reports of unexplained failures?)
>
>See above.
>
> >Check the permissions on his/her ~/.ssh directory. If the permissions
>somehow
>
>Again, I see no .ssh directory, at least not for /home/keyur, /home/gagan,
>/home/jean or /home/eve.

To see directories that begin with a . character (other than . and ..), you
have to use the -a flag with ls. But on my systems, these directories only
hold host keys for systems the account connects to (not from), so you may
not have them (I don't know, since I don't use user keys to authenticate,
and I don''t recall where sshd puts them, though the man page seems to say
they go in $HOME/.ssh/authorized_keys).


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Some users locked out of ssh and sftp?

Eve Emshoff wrote:

> Thus far, I've run across 1 user who can't sftp OR
> SSH. He's entirely locked out, despite having the
> correct username and password. He appears to be set up
> the same as well the others.
>
> Is there a file or some such I should edit and/or
> check to ensure he can get access? Anything to point
> me to in terms of what I can check in that he may
> *not* be set up the same as everyone else?

Check if there is something like

.. ~/.bashrc

or

source .bashrc

in his .bash_profile, and if there is, then comment it out.

If that doesn't work, try temporarily renaming or deleting .bashrc
and .bash_profile, and then try to ssh again.

Marcus.

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Some users locked out of ssh and sftp?

Hi All

I just spent half a day trying to fix this problem on the wrong computer. In
justification of the time I was not using SSH directly but fish which uses
SSH so I was not getting the error messages. Once I tried it connecting using
SSH I fixed the problem in 5 minutes

In Linux SSH has a computer verification file for computers that have
permission to log in at /home//.ssh/known_hosts:2

Explanation. I trashed the HD in one box [a test box with no data in it].
After re installation of HD, & configuration I found that I could SSH from
the new system but could not SSH from computers which had previously
connected to the box with the new HD and system.

I removed contents of above fine saved and was able to immediately log-in.

Hope this helps.

Frank

On Friday 11 March 2005 18:27, SOTL wrote:
> Had the same problem. My problem was solved when I install all the packages
> required for log in in all the computers. Suggest you check upor packages.
>
> PS All packages REQUIRED for login DO NOT have SSH as part of their name.
> Sorry can not remember what the additional names are.
>
> Frank
>
> On Friday 11 March 2005 17:56, Eve Atley wrote:
> > Ok, let me see if I can narrow the problem down a bit. Using the GUI
> > panel, I first create a user and password combination - let's use jean /
> > password1. This autocreates a user home directory (jean) and gives them a
> > bash shell (in this case).
> >
> > Then, via terminal, I 'useradd jean'. Following this, I 'smbpasswd -a
> > jean' and enter the password as prompted (twice). I return to the GUI and
> > uncheck all account expiration, just in case. I then set the user up with
> > access to the groups she should be permitted to (via the GUI).
> >
> > Now, I'm set up this way (eve), as is user Keyur (keyur) and Gagan
> > (gagan). I just set up Jean (jean) this way. Gagan and I can log in;
> > neither of us have a .ssh file located anywhere that we know of, for
> > ourselves. Keyur and Jean cannot, they are prompted for a session
> > password. Gagan and I never are prompted for such.
> >
> > We log in using Winscp3. Locally, as an example, we put in address
> > 192.168.10.x, port 22, username: jean, password: password1. For most of
> > us (I give only 3 examples here), the login is successful. No session
> > password needed.
> >
> > > (BTW, what do you mean by "network" username/password? Does this host
> >
> > We have it set up so that once the user is logged into his computer with
> > his/her user/pass combo, then accessing the network via samba uses the
> > same credentials. Therefore, user/pass combo is same on Windows logon as
> > well as Samba.
> >
> > > (Also, you say "most others" can log in. Is this just caution in
> > > reporting, or do you have other reports of unexplained failures?)
> >
> > See above.
> >
> > >Check the permissions on his/her ~/.ssh directory. If the permissions
> >
> > somehow
> >
> > Again, I see no .ssh directory, at least not for /home/keyur,
> > /home/gagan, /home/jean or /home/eve.
> >
> >
> > - Eve
> >
> > -
> > To unsubscribe from this list: send the line "unsubscribe linux-newbie"
> > in the body of a message to majordomo@vger.kernel.org
> > More majordomo info at http://vger.kernel.org/majordomo-info.html
> > Please read the FAQ at http://www.linux-learn.org/faqs
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.linux-learn.org/faqs
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Some users locked out of ssh and sftp?

>>OK. Now though you call it a "session" password, this is just the same
>>password that the user has already entered in as "password1" (from below).

>>Right?

In this case, they should be able to log in as, say, jean/password1, as you
say. This is entered in the winscp fields, ie. testing locally:

Host name: 192.168.10.57
Port number: 22
User name: jean
Password: password1

> ... if I enter the correct password in the password box, then it
>logs me on without any fuss.

Yeah, that's how it *should* work. :)

> ... if I enter the wrong password in the password box, then it
>prompts me for a password (probably what you call the "session" password).

Still prompts me, no matter what I enter, right or wrong. I have reset the
password on jean several times from the Linux box; then tried reentering the
password each time and it still prompts me and denies jean access.

>Second, still in Winscp3, check in Advanced Options->Authentication and
>make sure "Attempt keyboard-active authentication" and "Respond with
>password to the first prompt" are both checked.

Checked.

>Third, still in Winscp3, check in SSH to make sure SSH2 is the only, or at
>least the preferred, connection method.

Done.

>Last, I've assumed we are in all cases talking about connecting to the same

>server. You certainly seem to be saying that. But if I've misunderstood
>you ... might there be differences in the sshd implementations between
>servers that do and do not prompt for the password? This could be an SSH1
>versus SSH2 issue, for example.

My test environment is simply this. I try connecting to a variety of users
from my own machine, to the same machine in all cases. So, whereas
credentials for 'eve' work, credentials for 'jean' do not. So it's not a
client setup issue that I can see...quite possibly the way the user is set
up, though how so I can't place.

Now, I wondered if the known_hosts problem may clue me into something, but
here's my return when I locate known_hosts:
/root/.ssh/known_hosts
/home/kolt/.ssh/known_hosts
/home/eve/.ssh/known_hosts
/home/edwin/.ssh/known_hosts
/home/navneet/.ssh/known_hosts
/home/vaibhav/.ssh/known_hosts

This translates to: eve can log in as well as all the others shown
here...but so can Gagan, who has no such known_hosts file.

So I tried copying one of these known_hosts to /home/keyur/.ssh/known_hosts.
When I next try a locate for known_hosts, keyur never actually appears in
the listing.
/root/.ssh/known_hosts
/home/kolt/.ssh/known_hosts
/home/eve/.ssh/known_hosts
/home/edwin/.ssh/known_hosts
/home/navneet/.ssh/known_hosts
/home/vaibhav/.ssh/known_hosts
....even when ensuring permissions are set the same as Gagan.


- Eve




-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Some users locked out of ssh and sftp?

As a side note, it as if most of the 'older' users can login, but the newer
users cannot! I just tried with another user...michele, who was one of the
earliest users but has previously never logged in via SSH...and she had no
issues whatsoever.

- Eve

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Some users locked out of ssh and sftp?

I have to think about the message in general, but I wanted to correct one
small error in your procedure right away.

At 02:17 PM 3/14/2005 -0500, Eve Atley wrote:
[...]
>So I tried copying one of these known_hosts to /home/keyur/.ssh/known_hosts.
>When I next try a locate for known_hosts, keyur never actually appears in
>the listing.

The command "locate" checks a database on the system and, by taking that
approach, can respond VERY quickly. But the database is updated as a batch
job ("updatedb") run through cron, usually whenever cron.daily runs
(between 6 and 7 AM local time is typical ... mine runs at 6:25). So right
after you make a change, it will not show up in "locate" searches.

To detect new files immediately after creation, use the "find" command
instead. It actually walks the filesystem tree to find matches (so is
slower but more current). Example usage:

find / -name known_hosts

The man page is pretty clear on usage options; the only tricky thing is the
need, sometimes, to enclose wildcarded filespecs in quotes.



-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Some users locked out of ssh and sftp?

Thanks for the info on locate; I didn't realize it was database-driven.
More details on the SSH issue here. I checked the session log for WinSCP and
here are the results.
I will include here a non-working session (keyur@local) as well as a working
session (gagan@local).


NON-WORKING
--------------------------------

.. 2005-03-14 16:48:22.233
------------------------------------------------------------ --------------
.. 2005-03-14 16:48:22.233 WinSCP Version 3.7.3 (Build 265) (OS 5.0.2195
Service Pack 4)
.. 2005-03-14 16:48:22.233 Login time: Monday, March 14, 2005 4:48:22 PM
.. 2005-03-14 16:48:22.233
------------------------------------------------------------ --------------
.. 2005-03-14 16:48:22.233 Session name: keyur@local
.. 2005-03-14 16:48:22.233 Host name: 192.168.10.57 (Port: 22)
.. 2005-03-14 16:48:22.233 User name: keyur (Password: Yes, Key file: No)
.. 2005-03-14 16:48:22.233 Transfer Protocol: SFTP (SCP)
.. 2005-03-14 16:48:22.233 SSH protocol version: 2; Compression: No
.. 2005-03-14 16:48:22.233 Agent forwarding: No; TIS/CryptoCard: No; KI: Yes;
GSSAPI: No
.. 2005-03-14 16:48:22.233 Ciphers: aes,blowfish,3des,WARN,des; Ssh2DES: No
.. 2005-03-14 16:48:22.233 Ping type: -, Ping interval: 30 sec; Timeout: 15
sec
.. 2005-03-14 16:48:22.233 SSH Bugs: -,-,-,-,-,-,-,-
.. 2005-03-14 16:48:22.243 SFTP Bugs: -,-
.. 2005-03-14 16:48:22.243 Proxy: none
.. 2005-03-14 16:48:22.243 Return code variable: Autodetect; Lookup user
groups: Yes
.. 2005-03-14 16:48:22.243 Shell: default, EOL: 0
.. 2005-03-14 16:48:22.243 Local directory: default, Remote directory: home,
Update: No, Cache: Yes
.. 2005-03-14 16:48:22.243 Cache directory changes: Yes, Permanent: Yes
.. 2005-03-14 16:48:22.243 Clear aliases: Yes, Unset nat.vars: Yes, Resolve
symlinks: Yes
.. 2005-03-14 16:48:22.243 Alias LS: No, Ign LS warn: Yes, Scp1 Comp: No
.. 2005-03-14 16:48:22.243
------------------------------------------------------------ --------------
.. 2005-03-14 16:48:22.243 Looking up host "192.168.10.57"
.. 2005-03-14 16:48:22.243 Connecting to 192.168.10.57 port 22
.. 2005-03-14 16:48:22.253 Server version: SSH-1.99-OpenSSH_3.5p1
.. 2005-03-14 16:48:22.253 We claim version: SSH-2.0-WinSCP_release_3.7.3
.. 2005-03-14 16:48:22.253 Using SSH protocol version 2
.. 2005-03-14 16:48:22.263 Doing Diffie-Hellman group exchange
.. 2005-03-14 16:48:22.303 Doing Diffie-Hellman key exchange
.. 2005-03-14 16:48:25.127 Host key fingerprint is:
.. 2005-03-14 16:48:25.127 ssh-rsa 1024
70:ea:61:3a:cb:96:f9:02:3b:99:4f:81:da:93:a1:06
.. 2005-03-14 16:48:25.137 Initialised AES-256 client->server encryption
.. 2005-03-14 16:48:25.137 Initialised HMAC-SHA1 client->server MAC algorithm
.. 2005-03-14 16:48:25.137 Initialised AES-256 server->client encryption
.. 2005-03-14 16:48:25.137 Initialised HMAC-SHA1 server->client MAC algorithm
! 2005-03-14 16:48:25.137 Using username "keyur".
.. 2005-03-14 16:48:25.147 Keyboard-interactive authentication refused
.. 2005-03-14 16:48:25.147 Session password prompt (keyur@192.168.10.57's
password: )
.. 2005-03-14 16:48:25.147 Using stored password.
.. 2005-03-14 16:48:25.147 Sent password
! 2005-03-14 16:48:27.501 Access denied
.. 2005-03-14 16:48:27.501 Access denied
.. 2005-03-14 16:48:27.501 Session password prompt (keyur@192.168.10.57's
password: )
.. 2005-03-14 16:48:27.501 Asking user for password.
.. 2005-03-14 16:48:28.462 Sent password
! 2005-03-14 16:48:30.816 Access denied
.. 2005-03-14 16:48:30.816 Access denied
.. 2005-03-14 16:48:30.816 Session password prompt (keyur@192.168.10.57's
password: )
.. 2005-03-14 16:48:30.816 Asking user for password.
.. 2005-03-14 16:48:31.527 Unable to authenticate
.. 2005-03-14 16:48:31.527 Attempt to close connection due to fatal
exception:
* 2005-03-14 16:48:31.527 Unable to authenticate
.. 2005-03-14 16:48:31.527 Closing connection.
* 2005-03-14 16:48:31.537 (ESshFatal) Authentication failed.
* 2005-03-14 16:48:31.537 Authentication log (see session log for details):
* 2005-03-14 16:48:31.537 Using username "keyur".
* 2005-03-14 16:48:31.537 Access denied
* 2005-03-14 16:48:31.537 Access denied
* 2005-03-14 16:48:31.537
* 2005-03-14 16:48:31.537 Unable to authenticate

WORKING
--------------

.. 2005-03-14 16:52:19.965
------------------------------------------------------------ --------------
.. 2005-03-14 16:52:20.005 WinSCP Version 3.7.3 (Build 265) (OS 5.0.2195
Service Pack 4)
.. 2005-03-14 16:52:20.005 Login time: Monday, March 14, 2005 4:52:20 PM
.. 2005-03-14 16:52:20.005
------------------------------------------------------------ --------------
.. 2005-03-14 16:52:20.005 Session name: gagan@local
.. 2005-03-14 16:52:20.005 Host name: 192.168.10.57 (Port: 22)
.. 2005-03-14 16:52:20.005 User name: gagan (Password: Yes, Key file: No)
.. 2005-03-14 16:52:20.005 Transfer Protocol: SFTP (SCP)
.. 2005-03-14 16:52:20.005 SSH protocol version: 2; Compression: No
.. 2005-03-14 16:52:20.005 Agent forwarding: No; TIS/CryptoCard: No; KI: Yes;
GSSAPI: No
.. 2005-03-14 16:52:20.005 Ciphers: aes,blowfish,3des,WARN,des; Ssh2DES: No
.. 2005-03-14 16:52:20.005 Ping type: -, Ping interval: 30 sec; Timeout: 15
sec
.. 2005-03-14 16:52:20.005 SSH Bugs: -,-,-,-,-,-,-,-
.. 2005-03-14 16:52:20.005 SFTP Bugs: -,-
.. 2005-03-14 16:52:20.005 Proxy: none
.. 2005-03-14 16:52:20.005 Return code variable: Autodetect; Lookup user
groups: Yes
.. 2005-03-14 16:52:20.005 Shell: default, EOL: 0
.. 2005-03-14 16:52:20.005 Local directory: default, Remote directory: home,
Update: No, Cache: Yes
.. 2005-03-14 16:52:20.005 Cache directory changes: Yes, Permanent: Yes
.. 2005-03-14 16:52:20.005 Clear aliases: Yes, Unset nat.vars: Yes, Resolve
symlinks: Yes
.. 2005-03-14 16:52:20.005 Alias LS: No, Ign LS warn: Yes, Scp1 Comp: No
.. 2005-03-14 16:52:20.005
------------------------------------------------------------ --------------
.. 2005-03-14 16:52:20.005 Looking up host "192.168.10.57"
.. 2005-03-14 16:52:20.005 Connecting to 192.168.10.57 port 22
.. 2005-03-14 16:52:20.055 Server version: SSH-1.99-OpenSSH_3.5p1
.. 2005-03-14 16:52:20.055 We claim version: SSH-2.0-WinSCP_release_3.7.3
.. 2005-03-14 16:52:20.055 Using SSH protocol version 2
.. 2005-03-14 16:52:20.055 Doing Diffie-Hellman group exchange
.. 2005-03-14 16:52:20.105 Doing Diffie-Hellman key exchange
.. 2005-03-14 16:52:22.979 Host key fingerprint is:
.. 2005-03-14 16:52:22.979 ssh-rsa 1024
70:ea:61:3a:cb:96:f9:02:3b:99:4f:81:da:93:a1:06
.. 2005-03-14 16:52:22.979 Initialised AES-256 client->server encryption
.. 2005-03-14 16:52:22.979 Initialised HMAC-SHA1 client->server MAC algorithm
.. 2005-03-14 16:52:22.989 Initialised AES-256 server->client encryption
.. 2005-03-14 16:52:22.989 Initialised HMAC-SHA1 server->client MAC algorithm
! 2005-03-14 16:52:22.989 Using username "gagan".
.. 2005-03-14 16:52:22.999 Keyboard-interactive authentication refused
.. 2005-03-14 16:52:22.999 Session password prompt (gagan@192.168.10.57's
password: )
.. 2005-03-14 16:52:22.999 Using stored password.
.. 2005-03-14 16:52:22.999 Sent password
.. 2005-03-14 16:52:23.009 Access granted
.. 2005-03-14 16:52:23.009 Opened channel for session
.. 2005-03-14 16:52:23.029 Started a shell/command
.. 2005-03-14 16:52:23.029
------------------------------------------------------------ --------------
.. 2005-03-14 16:52:23.029 Using SFTP protocol.
.. 2005-03-14 16:52:23.029 Doing startup conversation with host.
> 2005-03-14 16:52:23.029 Type: SSH_FXP_INIT, Size: 5, Number: -1
< 2005-03-14 16:52:23.029 Type: SSH_FXP_VERSION, Size: 5, Number: -1
.. 2005-03-14 16:52:23.029 SFTP version 3 negotiated.
> 2005-03-14 16:52:23.029 Type: SSH_FXP_EXTENDED, Size: 38, Number: 200
< 2005-03-14 16:52:23.029 Type: SSH_FXP_STATUS, Size: 38, Number: 200
< 2005-03-14 16:52:23.029 Status/error code: 8
.. 2005-03-14 16:52:23.029 Server does not recognise WinSCP.
.. 2005-03-14 16:52:23.039 Getting current directory name.
.. 2005-03-14 16:52:23.039 Getting real path for '.'
> 2005-03-14 16:52:23.039 Type: SSH_FXP_REALPATH, Size: 10, Number: 528
< 2005-03-14 16:52:23.039 Type: SSH_FXP_NAME, Size: 43, Number: 528
.. 2005-03-14 16:52:23.039 Real path is '/home/gagan'
.. 2005-03-14 16:52:23.039 Listing directory "/home/gagan".
> 2005-03-14 16:52:23.039 Type: SSH_FXP_OPENDIR, Size: 20, Number: 779
< 2005-03-14 16:52:23.039 Type: SSH_FXP_HANDLE, Size: 13, Number: 779
> 2005-03-14 16:52:23.039 Type: SSH_FXP_READDIR, Size: 13, Number: 1036
< 2005-03-14 16:52:23.049 Type: SSH_FXP_NAME, Size: 783, Number: 1036
> 2005-03-14 16:52:23.049 Type: SSH_FXP_READDIR, Size: 13, Number: 1292
.. 2005-03-14 16:52:23.049 Reading symlink "marketing".
> 2005-03-14 16:52:23.049 Type: SSH_FXP_READLINK, Size: 30, Number: 1555
> 2005-03-14 16:52:23.049 Type: SSH_FXP_STAT, Size: 30, Number: 1809
< 2005-03-14 16:52:23.049 Type: SSH_FXP_STATUS, Size: 28, Number: 1292
.. 2005-03-14 16:52:23.049 Storing reserved response
< 2005-03-14 16:52:23.059 Type: SSH_FXP_NAME, Size: 65, Number: 1555
< 2005-03-14 16:52:23.180 Type: SSH_FXP_ATTRS, Size: 37, Number: 1809
.. 2005-03-14 16:52:23.180 Reading symlink "public".
> 2005-03-14 16:52:23.180 Type: SSH_FXP_READLINK, Size: 27, Number: 2067
> 2005-03-14 16:52:23.180 Type: SSH_FXP_STAT, Size: 27, Number: 2321
< 2005-03-14 16:52:23.190 Type: SSH_FXP_NAME, Size: 59, Number: 2067
< 2005-03-14 16:52:23.190 Type: SSH_FXP_ATTRS, Size: 37, Number: 2321
.. 2005-03-14 16:52:23.190 Reading symlink "wowerpresumes".
> 2005-03-14 16:52:23.190 Type: SSH_FXP_READLINK, Size: 34, Number: 2579
> 2005-03-14 16:52:23.190 Type: SSH_FXP_STAT, Size: 34, Number: 2833
< 2005-03-14 16:52:23.190 Type: SSH_FXP_NAME, Size: 73, Number: 2579
< 2005-03-14 16:52:23.200 Type: SSH_FXP_ATTRS, Size: 37, Number: 2833
.. 2005-03-14 16:52:23.200 Reading symlink "wow_resumes".
> 2005-03-14 16:52:23.200 Type: SSH_FXP_READLINK, Size: 32, Number: 3091
> 2005-03-14 16:52:23.200 Type: SSH_FXP_STAT, Size: 32, Number: 3345
< 2005-03-14 16:52:23.200 Type: SSH_FXP_NAME, Size: 69, Number: 3091
< 2005-03-14 16:52:23.200 Type: SSH_FXP_ATTRS, Size: 37, Number: 3345
.. 2005-03-14 16:52:23.200 Reading symlink "technical".
> 2005-03-14 16:52:23.200 Type: SSH_FXP_READLINK, Size: 30, Number: 3603
> 2005-03-14 16:52:23.200 Type: SSH_FXP_STAT, Size: 30, Number: 3857
< 2005-03-14 16:52:23.210 Type: SSH_FXP_NAME, Size: 65, Number: 3603
< 2005-03-14 16:52:23.210 Type: SSH_FXP_ATTRS, Size: 37, Number: 3857
< 2005-03-14 16:52:23.210 Status/error code: 1
> 2005-03-14 16:52:23.210 Type: SSH_FXP_CLOSE, Size: 13, Number: 4100
.. 2005-03-14 16:52:23.210 Startup conversation with host finished.
.. 2005-03-14 16:52:26.304 Closing connection.

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

SOLVED: Some users locked out of ssh and sftp?

First, I had 'user account is locked'.

Second, once I logged in via the linux box, using 'ssh -l manik
192.168.10.57', it created a new .Xauthority file, apparently.

And they're in.

- Eve


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: SOLVED: Some users locked out of ssh and sftp?

At 07:01 PM 3/14/2005 -0500, Eve Atley wrote:

>First, I had 'user account is locked'.
>
>Second, once I logged in via the linux box, using 'ssh -l manik
>192.168.10.57', it created a new .Xauthority file, apparently.
>
>And they're in.

I hope your problem is solved ... but I'd encourage you to keep an eye on
this, at the least.

..Xauthority should have no connection with ssh logins ... and I just
verified that the one host where I have an account but no .Xauthority file
(this file derives from running X sessions, as you might guess from the
name, so is present on my workstations) connects just fine with Winscp.

I don't know what "user account is locked" means, possibly hecause I don't
know the context in which you got that message.


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: SOLVED: Some users locked out of ssh and sftp?

I got this error message as shown below . . .
How do I change the /root/.ssh/known_hosts file?
It seems encrypted . . .


@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!
@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now
(man-in-the-middle attack)!
It is also possible that the RSA host key has just
been changed.
The fingerprint for the RSA key sent by the remote
host is
23:52:d4:e8:6a:75:72:ed:78:cb:31:1f:6a:ff:b4:ea.
Please contact your system administrator.
Add correct host key in /root/.ssh/known_hosts to get
rid of this message.
Offending key in /root/.ssh/known_hosts:7
RSA host key for 192.168.0.1 has changed and you have
requested strict checking.
Host key verification failed.


__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: SOLVED: Some users locked out of ssh and sftp?

On Tuesday 15 March 2005 04:23, Donald Duckie wrote:
> I got this error message as shown below . . .
> How do I change the /root/.ssh/known_hosts file?
> It seems encrypted . . .
>
>
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!
> @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> Someone could be eavesdropping on you right now
> (man-in-the-middle attack)!
> It is also possible that the RSA host key has just
> been changed.
> The fingerprint for the RSA key sent by the remote
> host is
> 23:52:d4:e8:6a:75:72:ed:78:cb:31:1f:6a:ff:b4:ea.
> Please contact your system administrator.
> Add correct host key in /root/.ssh/known_hosts to get
> rid of this message.
> Offending key in /root/.ssh/known_hosts:7
> RSA host key for 192.168.0.1 has changed and you have
> requested strict checking.
> Host key verification failed.
>
I posted this to you several days ago.

The file you are seeking is located in the computer you are loging in F=
ROM not=20
the server.

Look at my previous message:

Hi All

I just spent half a day trying to fix this problem on the wrong compute=
r. In=20
justification of the time I was not using SSH directly but fish which u=
ses=20
SSH so I was not getting the error messages. Once I tried it connecting=
using=20
SSH I fixed the problem in 5 minutes

In Linux SSH has a computer verification file for computers that have=20
permission to log in at /home//.ssh/known_hosts:2

Explanation. I trashed the HD in one box [a test box with no data in it=
].=20
After re installation of HD, & configuration I found that I could SSH f=
rom=20
the =A0new system but could not SSH from computers which had previously=
=20
connected to the box with the new HD and system.=20

I removed contents of above fine saved and was able to immediately log-=
in.

Hope this helps.

=46rank
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie"=
in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: SOLVED: Some users locked out of ssh and sftp?

Donald Duckie wrote:
> I got this error message as shown below . . .
> How do I change the /root/.ssh/known_hosts file?
> It seems encrypted . . .

Hi, Donald:

The file is not encripted, but it contains an encription key for
each remote hostname. There is a line for each 'ssh' host that
you have sucessfully connected. If the remote 'host' has changed
its encription key and you already have a line with the old
encription key, 'ssh' will fail with that message.

Solution:

Use a 'text' editor and open /root/.ssh/known_hosts.
Delete the line that starts with the remote hostname.
Save and exit. (or 'rm known_hosts')

'ssh' to that hostname.
Answer 'yes' when prompted.

HTH, Chuck

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: SOLVED: Some users locked out of ssh and sftp?

If this still you, Eve, just from a different e-mail address? Or is this
someone new with (almost) the same problem as Eve?

At 01:23 AM 3/15/2005 -0800, Donald Duckie wrote:

>I got this error message as shown below . . .
>How do I change the /root/.ssh/known_hosts file?
>It seems encrypted . . .

Chuck identified the right first-pass fix here. To expand a bit: go into
the known_hosts file (on the client end, NOT the server end), find the
entry for the target sshd server's system (at the START of each long entry
is one or more identifiers, which could be hostnames, FQDNs, or IP
addresses ... look for 192.168.0.1) and simply delete it. Then your ssh
client will see the connection attempt as a first connection to a new host
and ask you to confirm it manually ... at which point it will do the
required update to known_hosts for you.

The above may not work in your setup, though; as I read the man page, it is
unclear how ssh handles new connections when set to "StrictHostKeyChecking
Yes". If this does NOT work, I suggest a second approach below.


>@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
>@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!
> @
>@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
>IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
>Someone could be eavesdropping on you right now
>(man-in-the-middle attack)!
>It is also possible that the RSA host key has just
>been changed.
>The fingerprint for the RSA key sent by the remote
>host is
>23:52:d4:e8:6a:75:72:ed:78:cb:31:1f:6a:ff:b4:ea.
>Please contact your system administrator.
>Add correct host key in /root/.ssh/known_hosts to get
>rid of this message.
>Offending key in /root/.ssh/known_hosts:7
>RSA host key for 192.168.0.1 has changed and you have
>requested strict checking.
>Host key verification failed.

What is causing your problem is that you (probably) have

StrictHostKeyChecking Yes

in your ssh **client's** config file (/etc/ssh/ssh_config for systemwide
settings, $HOME/.ssh/config for user-specific setting). Change this
setting to

StrictHostKeyChecking Ask

and ssh will ask you if you want to update the key when it sees this sort
of thing, which occurred either because you reinstalled sshd on the host in
question (thereby generating a new server key in
/etc/ssh/ssh_host_rsa_key), or you replaced the host at that hostname,
FQDN, or IP address (whichever way you attempted to connect to it ...
probably IP address, since the message refers to 192.168.0.1).


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: SOLVED: Some users locked out of ssh and sftp?

It's not me! :)

- Eve

-----Original Message-----
From: linux-newbie-owner@vger.kernel.org
[mailto:linux-newbie-owner@vger.kernel.org] On Behalf Of Ray Olszewski
Sent: Tuesday, March 15, 2005 11:03 AM
To: linux-newbie@vger.kernel.org
Subject: Re: SOLVED: Some users locked out of ssh and sftp?


If this still you, Eve, just from a different e-mail address? Or is this
someone new with (almost) the same problem as Eve?

At 01:23 AM 3/15/2005 -0800, Donald Duckie wrote:

>I got this error message as shown below . . .
>How do I change the /root/.ssh/known_hosts file?
>It seems encrypted . . .

Chuck identified the right first-pass fix here. To expand a bit: go into
the known_hosts file (on the client end, NOT the server end), find the
entry for the target sshd server's system (at the START of each long entry
is one or more identifiers, which could be hostnames, FQDNs, or IP
addresses ... look for 192.168.0.1) and simply delete it. Then your ssh
client will see the connection attempt as a first connection to a new host
and ask you to confirm it manually ... at which point it will do the
required update to known_hosts for you.

The above may not work in your setup, though; as I read the man page, it is
unclear how ssh handles new connections when set to "StrictHostKeyChecking
Yes". If this does NOT work, I suggest a second approach below.


>@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
>@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!
> @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
>IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
>Someone could be eavesdropping on you right now
>(man-in-the-middle attack)!
>It is also possible that the RSA host key has just
>been changed.
>The fingerprint for the RSA key sent by the remote
>host is
>23:52:d4:e8:6a:75:72:ed:78:cb:31:1f:6a:ff:b4:ea.
>Please contact your system administrator.
>Add correct host key in /root/.ssh/known_hosts to get
>rid of this message.
>Offending key in /root/.ssh/known_hosts:7
>RSA host key for 192.168.0.1 has changed and you have
>requested strict checking.
>Host key verification failed.

What is causing your problem is that you (probably) have

StrictHostKeyChecking Yes

in your ssh **client's** config file (/etc/ssh/ssh_config for systemwide
settings, $HOME/.ssh/config for user-specific setting). Change this
setting to

StrictHostKeyChecking Ask

and ssh will ask you if you want to update the key when it sees this sort
of thing, which occurred either because you reinstalled sshd on the host in
question (thereby generating a new server key in
/etc/ssh/ssh_host_rsa_key), or you replaced the host at that hostname,
FQDN, or IP address (whichever way you attempted to connect to it ...
probably IP address, since the message refers to 192.168.0.1).


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org More majordomo info at
http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: SOLVED: Some users locked out of ssh and sftp?

>I don't know what "user account is locked" means, possibly hecause I don't

>know the context in which you got that message.

In the RedHat User Manager, you can choose the Properties of each user and
edit things like what shell they use, change password, enable/disable
account expiration. Also included is a simple checkbox: "User account is
locked." On a whim, I unchecked this and things started working for me.

Which seems somehow too simple...

- Eve


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: SOLVED: Some users locked out of ssh and sftp?

hi chuck,

thanks for your information.
i was quite hesistant to delete that line, that was
why i wanted some confirmation.
it is already ok now.

this is not eve.
sorry eve :)
it just happen that i have the same problem that
moment, and while taking some break, i happen to read
this thread. that was why i asked as to how i would
modify the known_hosts file.

donald

--- chuck gelm wrote:
> Donald Duckie wrote:
> > I got this error message as shown below . . .
> > How do I change the /root/.ssh/known_hosts file?
> > It seems encrypted . . .
>
> Hi, Donald:
>
> The file is not encripted, but it contains an
> encription key for
> each remote hostname. There is a line for each
> 'ssh' host that
> you have sucessfully connected. If the remote
> 'host' has changed
> its encription key and you already have a line with
> the old
> encription key, 'ssh' will fail with that message.
>
> Solution:
>
> Use a 'text' editor and open
> /root/.ssh/known_hosts.
> Delete the line that starts with the remote
> hostname.
> Save and exit. (or 'rm known_hosts')
>
> 'ssh' to that hostname.
> Answer 'yes' when prompted.
>
> HTH, Chuck
>
> -
> To unsubscribe from this list: send the line
> "unsubscribe linux-newbie" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at
> http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at
> http://www.linux-learn.org/faqs
>



__________________________________
Do you Yahoo!?
Take Yahoo! Mail with you! Get it on your mobile phone.
http://mobile.yahoo.com/maildemo
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Setting quota on user"s home folders?

Is there a way to set a quota limit on user's home folders? EG. say I have
/home/joe, /home/jane, and want to set it so they can have no more than 5GB
in their folders?

Thanks,
Eve


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Setting quota on user"s home folders?

On Wed, 16 Mar 2005, Eve Atley wrote:

> Is there a way to set a quota limit on user's home folders? EG. say I have
> /home/joe, /home/jane, and want to set it so they can have no more than 5GB
> in their folders?
>
> Thanks,
> Eve

What you have todo is:

1. Create seperate partitions for the /home/joe /home/jane directory
entrys.
2. install the quota program for your native GNU/Linux distribution you
are using. Which is ??? [Next time tell your system specs when asking
a question]
3. Update /etc/fstab and remount the system.

Note, the kernel has to support the use of quota's in most cases.

Here are some links:
http://www.yolinux.com/TUTORIALS/LinuxTutorialQuotas.html
http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/custom -guide/ch-disk-quotas.html
http://www.eyrie.org/~eagle/notes/debian/quotas.html

B.t.w.
The `Folders' terminology is used in a M$ Wintendo enviroment but in the *X world they
are refered to as directorys or special files.

cheers

J.

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Setting quota on user"s home folders?

At 06:43 PM 3/16/2005 -0500, Eve Atley wrote:

>Is there a way to set a quota limit on user's home folders? EG. say I have
>/home/joe, /home/jane, and want to set it so they can have no more than 5GB
>in their folders?

The general answer is yes, and it's called ... wait for it ... quotas. The
"yes" assumes you are using ext2 filesystems (probably ext3 works too, but
I don't know that, and maybe other journaling filesystems like reiserfs).

For quotas to work, they have to be enabled in your kernel. Stock kernels
usually do not include quota capability, so this means a local compile. (If
you do it with "make menuconfig", quotas are the first choice in the File
Systems submenu; if you edit .config by hand, you're looking for the line
"# CONFIG_QUOTA is not set", which you'll change to "CONFIG_QUOTA=y".)

Once you have a kernel that supports quotas, you'll use the "quota" command
to set actual quotas. Getting this command will probably mean downloading
an RPM. And there are a few other details that are covered in the link below.

For more background on quotas, look here:

http://www.asenec.com/quota.html

If all this sounds like too much trouble ... I don't know how comfortable
you are with custom kernel compiles, say ... you might look for a simpler
option. Whether some other approach will work depends on what your real
requirements are.

For example, way back when I admin'd several Unix and Linux systems at a
school, I just ran this command daily ...

du -s /home/* | sort -nr

.... to get a listing that started with the largest home directories. Then I
told people whose directories were too big to cut back. Not ideal, but it
was good enough, back in the days when I was sufficiently inexperienced
that I didn't want to figure out how to enable quotas on Linux 1.something,
HP-UX, and Solaris.


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Setting quota on user"s home folders?

On Wed, 2005-03-16 at 16:31 -0800, Ray Olszewski wrote:
>
> For quotas to work, they have to be enabled in your kernel. Stock
> kernels
> usually do not include quota capability, so this means a local
> compile.

I noticed, on running ` locate quota` , that these lines appear in my
output

/lib/modules/2.6.8.1-4-386/kernel/fs/quota_v1.ko
/lib/modules/2.6.8.1-4-386/kernel/fs/quota_v2.ko

I'm thinking this means quotas are supported by modules in this kernel,
and thus a `modprobe quota* ` or similar would suffice, rather than a
kernel recompile.

Is this correct?

Just thinking this could save Eve and others a *lot* of time...

In Debian, I assume after using the modprobe command the module name
could simply be put in /etc/modules to make loading persistent across
reboots. ( Other distros like the Redhat variants would do this
differently, I suppose)

apt-get install quota

would then install what's necessary for the quota command...



Peter

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Setting quota on user"s home folders?

Sorry about not including system info: it's RedHat 9 ATM (to upgrade to RH
Enterprise 3).

>I noticed, on running ` locate quota` , that these lines appear in my
output

I ran this too, and it came back with this:

(truncated)
/etc/warnquota.conf
/usr/bin/quota
/usr/sbin/edquota
/usr/sbin/quotastats
/usr/sbin/repquota
/usr/sbin/rpc.rquotad
/usr/sbin/setquota
/usr/sbin/warnquota
/sbin/convertquota
/sbin/quotacheck
/sbin/quotaoff
/sbin/quotaon

So, I'm wondering if it's already in my system.

- Eve

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Setting quota on user"s home folders?

Quotas are supported by default in the RH kernels. Here is the step by
step from RH site.
http://www.redhat.com/docs/manuals/linux/RHL-8.0-Manual/admi n-primer/s1-
storage-quotas.html If you are using ext2, you must enable journaling
first since it is not default until ext3. Steps to create disk quotas

In order to use disk quotas, you must first enable them.
1. Modifying /etc/fstab
2. Remounting the file system(s)
3. Running quotacheck (quotacheck -avug)
4. Assigning quotas (edquota)

Example /etc/fstab
/dev/md0 / ext3 defaults 1 1
LABEL=/boot /boot ext3 defaults 1 2
none /dev/pts devpts gid=5,mode=620 0 0
LABEL=/home /home ext3 defaults,usrquota,grpquota
1 2
none /proc proc defaults 0 0
none /dev/shm tmpfs defaults 0 0
/dev/md1 swap swap defaults 0 0

Example edquota
Disk quotas for user ed (uid 500):
Filesystem blocks soft hard inodes soft
hard
/dev/md3 6617996 6900000 7000000 17397 0
0


Jessica Schieffer
* (201) 248-3566

-----Original Message-----
From: linux-newbie-owner@vger.kernel.org
[mailto:linux-newbie-owner@vger.kernel.org] On Behalf Of Eve Atley
Sent: Thursday, March 17, 2005 2:01 PM
To: 'Peter'; 'Ray Olszewski'
Cc: linux-newbie@vger.kernel.org
Subject: RE: Setting quota on user's home folders?


Sorry about not including system info: it's RedHat 9 ATM (to upgrade to
RH
Enterprise 3).

>I noticed, on running ` locate quota` , that these lines appear in my
output

I ran this too, and it came back with this:

(truncated)
/etc/warnquota.conf
/usr/bin/quota
/usr/sbin/edquota
/usr/sbin/quotastats
/usr/sbin/repquota
/usr/sbin/rpc.rquotad
/usr/sbin/setquota
/usr/sbin/warnquota
/sbin/convertquota
/sbin/quotacheck
/sbin/quotaoff
/sbin/quotaon

So, I'm wondering if it's already in my system.

- Eve

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie"
in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Simple script to set permissions on folders daily - write script and cron it?

Hello! I want to write a very simple script that once daily (via cron) will
set permissions to 777. This is to override any permissions set on files
uploaded by other people, so everyone who already has access to the group
will have rwx access to the file(s).

So I'm double-checking if the best route is to create my script, then run it
in cron as necessary. Or is there another way I should be handling it?

Here's the script:

#!/bin/sh
#set_permissions: simple routine to set permissions of directories to be
#accessible by everyone who already has specific group access.
#
#written by EMM - 3/28/2005
cd /home/shared/hr/
chmod 777 -R *
cd /home/shared/public
chmod 777 -R *
#put an exception here for /scans and /cd however
#????
cd /home/shared/accounting
chmod 777 -R *
Fi

Thanks much,
Eve


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Simple script to set permissions on folders daily - write script and cron it?

you could use a sticky bit on the directory instead.

man chmod and read the second on sticky bit and directories. It might save
you effort.


----- Original Message -----
From: "Eve Atley"
To:
Sent: Monday, March 28, 2005 4:02 PM
Subject: Simple script to set permissions on folders daily - write script
and cron it?


>
> Hello! I want to write a very simple script that once daily (via cron)
will
> set permissions to 777. This is to override any permissions set on files
> uploaded by other people, so everyone who already has access to the group
> will have rwx access to the file(s).
>
> So I'm double-checking if the best route is to create my script, then run
it
> in cron as necessary. Or is there another way I should be handling it?
>
> Here's the script:
>
> #!/bin/sh
> #set_permissions: simple routine to set permissions of directories to be
> #accessible by everyone who already has specific group access.
> #
> #written by EMM - 3/28/2005
> cd /home/shared/hr/
> chmod 777 -R *
> cd /home/shared/public
> chmod 777 -R *
> #put an exception here for /scans and /cd however
> #????
> cd /home/shared/accounting
> chmod 777 -R *
> Fi
>
> Thanks much,
> Eve
>
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.linux-learn.org/faqs


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Simple script to set permissions on folders daily - write script and cron it?

At 04:02 PM 3/28/2005 -0500, Eve Atley wrote:

>Hello! I want to write a very simple script that once daily (via cron) will
>set permissions to 777. This is to override any permissions set on files
>uploaded by other people, so everyone who already has access to the group
>will have rwx access to the file(s).
>
>So I'm double-checking if the best route is to create my script, then run it
>in cron as necessary. Or is there another way I should be handling it?
>
>Here's the script:
>
>#!/bin/sh
>#set_permissions: simple routine to set permissions of directories to be
>#accessible by everyone who already has specific group access.
>#
>#written by EMM - 3/28/2005
> cd /home/shared/hr/
> chmod 777 -R *
> cd /home/shared/public
> chmod 777 -R *
>#put an exception here for /scans and /cd however
>#????
> cd /home/shared/accounting
> chmod 777 -R *
>Fi
>
>Thanks much,
>Eve

Eve --

I'm not quite sure what you mean by "has access to the group" ...
specifically, what the "group" is. In normal Unix/Linux terminology, user
accounts (userids) are associated with one or more groups, through either
the /etc/passwd entry (for an account's main group) or /etc/group (for
secondary group affiliations).

If that's what you are talking about, you shouldn't be using mode 777 ...
which gives read-write-execure access to *anyone* with an account on the
system, not just to members of a specific group. You should be using 770,
or maybe 775, depending on your specifics. Maybe you also need to change
the group settings of the files to the common group, again depending on
details you have but I don't.

I assume you've decided for some reason that handling this by changing
umask entries (I think we discussed that in an earlier thread you started)
is unsuitable for your site for some reason I've forgotten.

Aside from that, the script looks fine (unless the "Fi" line is meant to be
part of it; that won't work) ... since I don't know what the comment about
exceptions means, I can't suggest how to implement it. You could shorted
nit by skipping the "cd" lines and just writing (for example) "chmod 777 -R
/home/shared/hr/*".

The script will probably need to run as root (or perhaps some other account
that has the ability to change permissions for all the files involved, if
you have such an account). If Red Hat (you use RH, right?) has the ability
to run scripts from /etc/cron.daily, you can do it that way ... otherwise,
use crontab as root to set t ups as a root cron job.

(BTW, if the details of modes are not already clear to you, "man chmod"
will tell you a bit. "man 2 chmod" will (or should, if it is on your
system) tell you a good bit more, albeit in harder to read form.)

Hope this helps.


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

Re: Simple script to set permissions on folders daily - write scriptand cron it?

On Mon, 28 Mar 2005, Eve Atley wrote:

> Hello! I want to write a very simple script that once daily (via cron) will
> set permissions to 777. This is to override any permissions set on files
> uploaded by other people, so everyone who already has access to the group
> will have rwx access to the file(s).

You should do that by setting the `umask value' or configuring the
programs that store the files correctly . No need for a
cronscript. That is if they are only uploading and not accessing the
shell interactively, even then you should go for a systemwide default
`umask' value.

> So I'm double-checking if the best route is to create my script, then run it
> in cron as necessary. Or is there another way I should be handling it?
>
> Here's the script:
>
> #!/bin/sh
> #set_permissions: simple routine to set permissions of directories to be
> #accessible by everyone who already has specific group access.
> #
> #written by EMM - 3/28/2005
> cd /home/shared/hr/

Does the directory exsist you `cd' to ?
test -d /home/shared/hr/ || echo "Error - .... and exittttt.. "
or
if [ ! -d /home/shared/hr/ ] ; then
print error..
fi

> chmod 777 -R *

You say, `permissions of directorys' The above will set permissions of
all files except for the dotted files.

You could walk the directory structure by means of `find' and evaluate if
the file is a directory file by `-type d'.
find /home/shared/hr/ -type d -exec chmod 0755 '{}' \;

Then there is overhead, since every file no matter what the permissions
are is set. Check if the file needs permissions 777 and what the current
permissions are..

Other..., Maybe there are files that no matter what shouldn't be world
readable and writable.. If multiple users are on your system they could
put a file in a certain directory, your cronscript goes over
it, maybe as user root.. and.. makes it world readable/writable.. Not a
good thing. There is also a time gap inbetween the two different
permissions, users can't access their files until your cronscript has set
the correct permissions. Yes running your cronscript every X sec's will
fix that, but that's not the way...

> cd /home/shared/public
> chmod 777 -R *
> #put an exception here for /scans and /cd however
> #????
> cd /home/shared/accounting
> chmod 777 -R *
> Fi

There is no error wrapper in your script, it will keep running after
errors or notifying messages have occurred. Cron takes also the exit value
of your script to determine if it's successful or not..

> Thanks much,
> Eve

You should take more effort doing the `Unix filosofy', Do one thing
and do it well.. [Right from the beginning in your case].

You are fixing symptoms, after the problem has occurred. E.G.

From the moment a file is stored on your system, it should have the right
permissions. That takes good configuration of the basics of your system.

Before looking at these type of problems, try to imagine if you are
running an ISP with 1000+ users. Who are constantly accessing their files.

You surely don't want to run constantly cronscripts to fix every
user/group rights management problem ?

GNU/Linux , Unix are multitasking, multiuser operatingsystems and they
should be treated like that.. Otherwise you will loose all the advantages
of that at a certain given point..

GoodLuck..

J.

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Simple script to set permissions on folders daily - write script and cron it?

I am fairly new to the linux scene, and I am currently using Gentoo
Linux. How exactly do I go about setting a global default umask value to
set 777 permissions on a particular folder and its contents?

Michael Turcotte
Information Systems
City of North Bay
200 McIntyre St. E
PO Box 360
North Bay, Ontario
P1B 8H8

Mike.Turcotte@cityofnorthbay.ca
http://www.cityofnorthbay.ca

> -----Original Message-----
> From: linux-newbie-owner@vger.kernel.org [mailto:linux-newbie-
> owner@vger.kernel.org] On Behalf Of J.
> Sent: Monday, March 28, 2005 6:11 PM
> To: linux-newbie@vger.kernel.org
> Subject: Re: Simple script to set permissions on folders daily - write
> script and cron it?
>
> On Mon, 28 Mar 2005, Eve Atley wrote:
>
> > Hello! I want to write a very simple script that once daily (via
cron)
> will
> > set permissions to 777. This is to override any permissions set on
files
> > uploaded by other people, so everyone who already has access to the
> group
> > will have rwx access to the file(s).
>
> You should do that by setting the `umask value' or configuring the
> programs that store the files correctly . No need for a
> cronscript. That is if they are only uploading and not accessing the
> shell interactively, even then you should go for a systemwide default
> `umask' value.
>
> > So I'm double-checking if the best route is to create my script,
then
> run it
> > in cron as necessary. Or is there another way I should be handling
it?
> >
> > Here's the script:
> >
> > #!/bin/sh
> > #set_permissions: simple routine to set permissions of directories
to be
> > #accessible by everyone who already has specific group access.
> > #
> > #written by EMM - 3/28/2005
> > cd /home/shared/hr/
>
> Does the directory exsist you `cd' to ?
> test -d /home/shared/hr/ || echo "Error - .... and exittttt.. "
> or
> if [ ! -d /home/shared/hr/ ] ; then
> print error..
> fi
>
> > chmod 777 -R *
>
> You say, `permissions of directorys' The above will set permissions of
> all files except for the dotted files.
>
> You could walk the directory structure by means of `find' and evaluate
if
> the file is a directory file by `-type d'.
> find /home/shared/hr/ -type d -exec chmod 0755 '{}' \;
>
> Then there is overhead, since every file no matter what the
permissions
> are is set. Check if the file needs permissions 777 and what the
current
> permissions are..
>
> Other..., Maybe there are files that no matter what shouldn't be world
> readable and writable.. If multiple users are on your system they
could
> put a file in a certain directory, your cronscript goes over
> it, maybe as user root.. and.. makes it world readable/writable.. Not
a
> good thing. There is also a time gap inbetween the two different
> permissions, users can't access their files until your cronscript has
set
> the correct permissions. Yes running your cronscript every X sec's
will
> fix that, but that's not the way...
>
> > cd /home/shared/public
> > chmod 777 -R *
> > #put an exception here for /scans and /cd however
> > #????
> > cd /home/shared/accounting
> > chmod 777 -R *
> > Fi
>
> There is no error wrapper in your script, it will keep running after
> errors or notifying messages have occurred. Cron takes also the exit
value
> of your script to determine if it's successful or not..
>
> > Thanks much,
> > Eve
>
> You should take more effort doing the `Unix filosofy', Do one thing
> and do it well.. [Right from the beginning in your case].
>
> You are fixing symptoms, after the problem has occurred. E.G.
>
> From the moment a file is stored on your system, it should have the
right
> permissions. That takes good configuration of the basics of your
system.
>
> Before looking at these type of problems, try to imagine if you are
> running an ISP with 1000+ users. Who are constantly accessing their
files.
>
> You surely don't want to run constantly cronscripts to fix every
> user/group rights management problem ?
>
> GNU/Linux , Unix are multitasking, multiuser operatingsystems and they
> should be treated like that.. Otherwise you will loose all the
advantages
> of that at a certain given point..
>
> GoodLuck..
>
> J.
>
> -
> To unsubscribe from this list: send the line "unsubscribe
linux-newbie" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.linux-learn.org/faqs
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Simple script to set permissions on folders daily - write script and cron it?

At 09:31 AM 3/29/2005 -0500, Mike Turcotte wrote:
>I am fairly new to the linux scene, and I am currently using Gentoo
>Linux. How exactly do I go about setting a global default umask value to
>set 777 permissions on a particular folder and its contents?
[...]

You don't. That's not how umask works. Instead, it sets default permissions
for *all* files saved by a particular account (userid).

If you want to make this change for all userids (or all except root), do it
in some file that sets the environment globally. For the bash shell, this
is probably /etc/profile (that's the standard one, and I imagine Gentoo
follows the standard). For example, my /etc/profile file contains this line:

umask 022

A umask is the (octal) inverse of permissions, so this sets the default
permissions to 755. For a default of 777, set the umask to 000.

If you want to make the change for specific accounts (userids), put a line
to reset the umash in that account's individual configuration file. This
varies in name a bitr more than systemwide files, but ones to look for are
(in the account's home directory) .profile, .bash_profile, or .bashrc (use
"ls -a" to display filenames that begin with a .).

I don't know of a way to set default permissions for a specific directory
only, which is why I didn't discourage Eve from taking the approach she
described for her problem. Perhaps someone else does, though ... we'll have
to wait and see.



-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Simple script to set permissions on folders daily - write script and cron it?

That is my issue as well; Ray and others, I hadn't implemented umask because
it still appears Greek to me. I'm not against use umask; I just didn't 'get
it' upon reading stuff online. A link or two pointing to 'Umask for Idiots'
would be great!

Thanks,
Eve


P.S. For additional info, my setup is something like this:
Directories 'accounting' and 'hr' are created.
Groups 'accounting' and 'hr' are active in the system.
Users have been assigned to accounting and hr group.
Directories are then locked to those users with access to accounting or hr,
respectively.
Accounting and HR are currently set up as
drwxrwx--T accounting
drwxrwx--T hr

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

RE: Simple script to set permissions on folders daily - write scriptand cron it?

On Tue, 29 Mar 2005, Eve Atley wrote:

> That is my issue as well; Ray and others, I hadn't implemented umask because
> it still appears Greek to me.

Eve I think ray's answer was very good. I think you have to look a bit
more at how permissions work, and what happends when someone
log's in [or program logins in] . I know it's a bit akward these
permission bit's and bytes in the umask forrest.

That is because it requires a fundemental understanding of
nr. systems. Like octal, binary. Yes.. yuk.. Learning curve steep, but it
makes or breakes your system, take it from me...

The Fundemental questions:
1. What & Who is creating the files on your system ?
2. What & Who needs to access them ?

If you know that, you solved half your problem. Now you can pick the best
approach.

As for umask:

New files are created with a default access mode to automatically set the
permision levels. [umask] .

When new files are created, the protection bits are set according to the
users default setting. Like ray said . The default is established using
the umask command in some sort of startup script either bash or
another shell. `man umask' or `umask --help'

If you are the sys-admin of your system then you can set the default umask
value for all users, not just your self.

There are also programs which can set their own permission bits. Like
for example in samba:
create mask = 0700
directory mask = 0700
browseable = No

Or ssh shell..
.....etc..

That's why you need to know what, and who's creating the files and who
want's to access them..

> I'm not against use umask;

It's not if you are against it or not. You will have to use it.. No matter
what.

> I just didn't 'get it' upon reading stuff
> online. A link or two pointing to 'Umask for Idiots' would be great!

Again, that's because the Nr.'s dont make any sense. And I can't blame you
for that.

http:/www.google.com/linux

search for octal, umask....

> Thanks,
> Eve
>
>
> P.S. For additional info, my setup is something like this:
> Directories 'accounting' and 'hr' are created.
> Groups 'accounting' and 'hr' are active in the system.
> Users have been assigned to accounting and hr group.
> Directories are then locked to those users with access to accounting or hr,
> respectively.
> Accounting and HR are currently set up as
> drwxrwx--T accounting
> drwxrwx--T hr

The program they use to access these files, does that program run under
?? which user/group ?? My best guess is, Fix that, and you fixed your
problem..

J.

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs