From: Jamie C. <jca...@we...> - 2007-04-01 04:19:56
|
On 31/Mar/2007 19:38 Galen Johnson wrote .. > I need to add a path to my perl5lib in a more generic way. I've added > an export to webmin's start script since I was unable to successfully > add it any other way (I even tried setting it up in the webmin config as > an environment variable). > > Am I just missing something simple? Have you tried 'use lib' at the start of your Perl scripts? Something like : use lib '/path/to/mymodules'; use MyPerlModule; - Jamie |
From: Galen J. <gjo...@tr...> - 2007-04-01 16:08:54
|
Jamie Cameron wrote: > On 31/Mar/2007 19:38 Galen Johnson wrote .. > >> I need to add a path to my perl5lib in a more generic way. I've added >> an export to webmin's start script since I was unable to successfully >> add it any other way (I even tried setting it up in the webmin config as >> an environment variable). >> >> Am I just missing something simple? >> > > Have you tried 'use lib' at the start of your Perl scripts? Something like : > > use lib '/path/to/mymodules'; > use MyPerlModule; > > - Jamie > Unfortunately, it's not that simple. 1) it's not my webmin module that is having the problem, it's a 3rd party module. 2) it's for a perl module that exists in the perl library structure but is only being picked up unless I explicitly define the path globally...I've never run across that before. =G= |
From: Jamie C. <jca...@we...> - 2007-04-01 18:27:04
|
On 1/Apr/2007 09:08 Galen Johnson wrote .. > Jamie Cameron wrote: > > On 31/Mar/2007 19:38 Galen Johnson wrote .. > > > >> I need to add a path to my perl5lib in a more generic way. I've added > >> an export to webmin's start script since I was unable to successfully > >> add it any other way (I even tried setting it up in the webmin config > as > >> an environment variable). > >> > >> Am I just missing something simple? > >> > > > > Have you tried 'use lib' at the start of your Perl scripts? Something > like : > > > > use lib '/path/to/mymodules'; > > use MyPerlModule; > > > > - Jamie > > > > Unfortunately, it's not that simple. 1) it's not my webmin module that > is having the problem, it's a 3rd party module. 2) it's for a perl > module that exists in the perl library structure but is only being > picked up unless I explicitly define the path globally...I've never run > across that before. Ah .. in that case, setting PERLLIB in /etc/webmin/start is the only way to add a Perl library directory that will apply to all modules. - Jamie |
From: Richey G. <ri...@ai...> - 2007-04-01 18:24:17
|
When I start usermin I get a ton of connections from different places. I can make them go away by blocking them in my firewall but they are replaced by someone else. I am running Usermin 1.260 on Slackware 7.x. Webmin cannot be reached from the public and the box is NATed behind a firewall. As far as I can tell these connections are eating up resources and occasionally causing timeouts on SMTP and POP sessions. Does anyone have any ideas on this? Thanks, A ps -ax will show an excessive number of miniserv.pl processes 14466 ? S 0:03 perl /usr/local/src/usermin-1.260/miniserv.pl /etc/usermin/miniserv.conf Here is part of a netstat -a tcp 0 0 mail.americainter.n:www 71-83-54-106.dhcp.:1403 TIME_WAIT tcp 0 6728 mail.americainter.n:www hn.kd.ny.adsl:64163 CLOSE tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 ESTABLISHED tcp 0 6728 mail.americainter.n:www hn.kd.ny.adsl:64163 CLOSE tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 ESTABLISHED tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:64114 TIME_WAIT tcp 0 0 mail.americainter.n:www 66.232.126.139:51829 TIME_WAIT tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4078 TIME_WAIT tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:3295 FIN_WAIT2 tcp 0 0 mail.americainter.n:www CPE-58-166-225-42:61278 TIME_WAIT tcp 0 0 mail.americainter.n:www ALagny-152-1-31-18:3918 TIME_WAIT tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54533 ESTABLISHED tcp 0 0 mail.americainter.n:www ALagny-152-1-6-245:1699 TIME_WAIT tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4001 TIME_WAIT tcp 0 0 mail.americainter.n:www 71-83-54-106.dhcp.:1403 TIME_WAIT tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 ESTABLISHED tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:64114 TIME_WAIT tcp 0 0 mail.americainter.n:www 66.232.126.139:51829 TIME_WAIT tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4078 TIME_WAIT tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:3295 TIME_WAIT tcp 0 0 mail.americainter.n:www CPE-58-166-225-42:61278 TIME_WAIT tcp 0 0 mail.americainter.n:www ALagny-152-1-31-18:3918 TIME_WAIT tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54533 ESTABLISHED tcp 0 0 mail.americainter.n:www ALagny-152-1-6-245:1699 TIME_WAIT tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4001 TIME_WAIT tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1686 TIME_WAIT tcp 0 0 mail.americainter.n:www beta.freehost.com:51387 TIME_WAIT tcp 0 0 mail.americainter.:smtp 82.201.237.138:63151 TIME_WAIT tcp 0 0 mail.americainter.n:www 60.172.130.76:1542 TIME_WAIT tcp 0 0 mail.americainter.n:www colo-69-31-80-90.:52956 TIME_WAIT tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3915 TIME_WAIT tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2999 ESTABLISHED tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54529 ESTABLISHED tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1647 TIME_WAIT tcp 0 0 mail.americainter.n:www 124.128.102.96:2313 TIME_WAIT tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2999 ESTABLISHED tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54529 ESTABLISHED tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1647 TIME_WAIT tcp 0 0 mail.americainter.n:www 124.128.102.96:2313 TIME_WAIT tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3857 TIME_WAIT tcp 0 0 mail.americainter.:smtp 89.20.6.100:2103 TIME_WAIT tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:62923 TIME_WAIT tcp 0 0 mail.americainter.n:ssh lan-192-168-100-51:1049 ESTABLISHED tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3772 TIME_WAIT tcp 0 0 mail.americainter.n:www 208.74.100.16:3997 TIME_WAIT tcp 0 0 mail.americainter.n:www beta.freehost.com:62659 TIME_WAIT tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3721 TIME_WAIT tcp 0 0 mail.americainter.n:www c-66-30-138-52.hsd:3700 TIME_WAIT tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:1859 TIME_WAIT tcp 0 0 mail.americainter.n:www 60.219.254.222:4753 TIME_WAIT tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1174 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3004 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1270 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3216 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1494 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3229 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1573 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3707 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1932 ESTABLISHED tcp 0 8162 mail.americainter.n:www hn.kd.ny.adsl:62412 FIN_WAIT1 tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4059 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2236 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4262 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2291 ESTABLISHED tcp 0 6693 mail.americainter.n:www ALagny-152-1-31-18:4609 FIN_WAIT1 tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4423 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2553 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4725 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2646 ESTABLISHED tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:4756 FIN_WAIT1 tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2765 ESTABLISHED tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:2870 FIN_WAIT1 tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:1038 FIN_WAIT1 tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1174 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3004 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1270 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3216 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1494 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3229 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1573 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3707 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1932 ESTABLISHED tcp 0 8162 mail.americainter.n:www hn.kd.ny.adsl:62412 FIN_WAIT1 tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4059 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2236 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4262 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2291 ESTABLISHED tcp 0 6693 mail.americainter.n:www ALagny-152-1-31-18:4609 FIN_WAIT1 tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4423 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2553 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4725 ESTABLISHED tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2646 ESTABLISHED tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:4756 FIN_WAIT1 tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2765 ESTABLISHED tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:2870 FIN_WAIT1 tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:1038 FIN_WAIT1 |
From: Jamie C. <jca...@we...> - 2007-04-01 19:16:27
|
On 1/Apr/2007 11:23 Richey Goldberg wrote .. > When I start usermin I get a ton of connections from different places. > I can make them go away by blocking them in my firewall but they are replaced > by someone else. I am running Usermin 1.260 on Slackware 7.x. Webmin > cannot be reached from the public and the box is NATed behind a firewall. > As far as I can tell these connections are eating up resources and > occasionally causing timeouts on SMTP and POP sessions. Does anyone have > any ideas on this? > > Thanks, > > A ps -ax will show an excessive number of miniserv.pl processes > > 14466 ? S 0:03 perl /usr/local/src/usermin-1.260/miniserv.pl > /etc/usermin/miniserv.conf > > Here is part of a netstat -a > > > tcp 0 0 mail.americainter.n:www 71-83-54-106.dhcp.:1403 > TIME_WAIT > tcp 0 6728 mail.americainter.n:www hn.kd.ny.adsl:64163 CLOSE > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 > ESTABLISHED > tcp 0 6728 mail.americainter.n:www hn.kd.ny.adsl:64163 CLOSE > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 > ESTABLISHED > tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:64114 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 66.232.126.139:51829 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4078 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:3295 > FIN_WAIT2 > tcp 0 0 mail.americainter.n:www CPE-58-166-225-42:61278 > TIME_WAIT > tcp 0 0 mail.americainter.n:www ALagny-152-1-31-18:3918 > TIME_WAIT > tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54533 > ESTABLISHED > tcp 0 0 mail.americainter.n:www ALagny-152-1-6-245:1699 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4001 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 71-83-54-106.dhcp.:1403 > TIME_WAIT > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 > ESTABLISHED > tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:64114 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 66.232.126.139:51829 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4078 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:3295 > TIME_WAIT > tcp 0 0 mail.americainter.n:www CPE-58-166-225-42:61278 > TIME_WAIT > tcp 0 0 mail.americainter.n:www ALagny-152-1-31-18:3918 > TIME_WAIT > tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54533 > ESTABLISHED > tcp 0 0 mail.americainter.n:www ALagny-152-1-6-245:1699 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4001 > TIME_WAIT > tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1686 > TIME_WAIT > tcp 0 0 mail.americainter.n:www beta.freehost.com:51387 > TIME_WAIT > tcp 0 0 mail.americainter.:smtp 82.201.237.138:63151 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 60.172.130.76:1542 > TIME_WAIT > tcp 0 0 mail.americainter.n:www colo-69-31-80-90.:52956 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3915 > TIME_WAIT > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2999 > ESTABLISHED > tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54529 > ESTABLISHED > tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1647 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 124.128.102.96:2313 > TIME_WAIT > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2999 > ESTABLISHED > tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54529 > ESTABLISHED > tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1647 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 124.128.102.96:2313 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3857 > TIME_WAIT > tcp 0 0 mail.americainter.:smtp 89.20.6.100:2103 > TIME_WAIT > tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:62923 > TIME_WAIT > tcp 0 0 mail.americainter.n:ssh lan-192-168-100-51:1049 > ESTABLISHED > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3772 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 208.74.100.16:3997 > TIME_WAIT > tcp 0 0 mail.americainter.n:www beta.freehost.com:62659 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3721 > TIME_WAIT > tcp 0 0 mail.americainter.n:www c-66-30-138-52.hsd:3700 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:1859 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 60.219.254.222:4753 > TIME_WAIT > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1174 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3004 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1270 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3216 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1494 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3229 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1573 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3707 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1932 > ESTABLISHED > tcp 0 8162 mail.americainter.n:www hn.kd.ny.adsl:62412 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4059 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2236 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4262 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2291 > ESTABLISHED > tcp 0 6693 mail.americainter.n:www ALagny-152-1-31-18:4609 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4423 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2553 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4725 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2646 > ESTABLISHED > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:4756 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2765 > ESTABLISHED > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:2870 > FIN_WAIT1 > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:1038 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1174 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3004 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1270 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3216 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1494 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3229 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1573 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3707 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1932 > ESTABLISHED > tcp 0 8162 mail.americainter.n:www hn.kd.ny.adsl:62412 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4059 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2236 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4262 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2291 > ESTABLISHED > tcp 0 6693 mail.americainter.n:www ALagny-152-1-31-18:4609 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4423 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2553 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4725 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2646 > ESTABLISHED > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:4756 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2765 > ESTABLISHED > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:2870 > FIN_WAIT1 > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:1038 > FIN_WAIT1 Are you running Usermin on port 80 there? I ask because all tjose connections are to the www port (80), but Usermin usually runs on port 20000. - Jamie |
From: Richey G. <ri...@ai...> - 2007-04-01 22:31:57
|
Yes, usermin is running on port 80. We have people go to http://mail.theirdomain.com. Richey -----Original Message----- From: web...@li... [mailto:web...@li...] On Behalf Of Jamie Cameron Sent: Sunday, April 01, 2007 3:16 PM To: Webmin users list Subject: Re: [webmin-l] Excesive connections and miniserv.pl On 1/Apr/2007 11:23 Richey Goldberg wrote .. > When I start usermin I get a ton of connections from different places. > I can make them go away by blocking them in my firewall but they are replaced > by someone else. I am running Usermin 1.260 on Slackware 7.x. Webmin > cannot be reached from the public and the box is NATed behind a firewall. > As far as I can tell these connections are eating up resources and > occasionally causing timeouts on SMTP and POP sessions. Does anyone have > any ideas on this? > > Thanks, > > A ps -ax will show an excessive number of miniserv.pl processes > > 14466 ? S 0:03 perl /usr/local/src/usermin-1.260/miniserv.pl > /etc/usermin/miniserv.conf > > Here is part of a netstat -a > > > tcp 0 0 mail.americainter.n:www 71-83-54-106.dhcp.:1403 > TIME_WAIT > tcp 0 6728 mail.americainter.n:www hn.kd.ny.adsl:64163 CLOSE > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 > ESTABLISHED > tcp 0 6728 mail.americainter.n:www hn.kd.ny.adsl:64163 CLOSE > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 > ESTABLISHED > tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:64114 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 66.232.126.139:51829 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4078 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:3295 > FIN_WAIT2 > tcp 0 0 mail.americainter.n:www CPE-58-166-225-42:61278 > TIME_WAIT > tcp 0 0 mail.americainter.n:www ALagny-152-1-31-18:3918 > TIME_WAIT > tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54533 > ESTABLISHED > tcp 0 0 mail.americainter.n:www ALagny-152-1-6-245:1699 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4001 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 71-83-54-106.dhcp.:1403 > TIME_WAIT > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 > ESTABLISHED > tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:64114 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 66.232.126.139:51829 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4078 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:3295 > TIME_WAIT > tcp 0 0 mail.americainter.n:www CPE-58-166-225-42:61278 > TIME_WAIT > tcp 0 0 mail.americainter.n:www ALagny-152-1-31-18:3918 > TIME_WAIT > tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54533 > ESTABLISHED > tcp 0 0 mail.americainter.n:www ALagny-152-1-6-245:1699 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4001 > TIME_WAIT > tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1686 > TIME_WAIT > tcp 0 0 mail.americainter.n:www beta.freehost.com:51387 > TIME_WAIT > tcp 0 0 mail.americainter.:smtp 82.201.237.138:63151 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 60.172.130.76:1542 > TIME_WAIT > tcp 0 0 mail.americainter.n:www colo-69-31-80-90.:52956 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3915 > TIME_WAIT > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2999 > ESTABLISHED > tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54529 > ESTABLISHED > tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1647 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 124.128.102.96:2313 > TIME_WAIT > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2999 > ESTABLISHED > tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54529 > ESTABLISHED > tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1647 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 124.128.102.96:2313 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3857 > TIME_WAIT > tcp 0 0 mail.americainter.:smtp 89.20.6.100:2103 > TIME_WAIT > tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:62923 > TIME_WAIT > tcp 0 0 mail.americainter.n:ssh lan-192-168-100-51:1049 > ESTABLISHED > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3772 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 208.74.100.16:3997 > TIME_WAIT > tcp 0 0 mail.americainter.n:www beta.freehost.com:62659 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3721 > TIME_WAIT > tcp 0 0 mail.americainter.n:www c-66-30-138-52.hsd:3700 > TIME_WAIT > tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:1859 > TIME_WAIT > tcp 0 0 mail.americainter.n:www 60.219.254.222:4753 > TIME_WAIT > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1174 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3004 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1270 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3216 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1494 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3229 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1573 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3707 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1932 > ESTABLISHED > tcp 0 8162 mail.americainter.n:www hn.kd.ny.adsl:62412 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4059 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2236 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4262 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2291 > ESTABLISHED > tcp 0 6693 mail.americainter.n:www ALagny-152-1-31-18:4609 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4423 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2553 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4725 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2646 > ESTABLISHED > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:4756 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2765 > ESTABLISHED > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:2870 > FIN_WAIT1 > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:1038 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1174 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3004 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1270 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3216 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1494 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3229 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1573 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3707 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1932 > ESTABLISHED > tcp 0 8162 mail.americainter.n:www hn.kd.ny.adsl:62412 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4059 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2236 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4262 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2291 > ESTABLISHED > tcp 0 6693 mail.americainter.n:www ALagny-152-1-31-18:4609 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4423 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2553 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4725 > ESTABLISHED > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2646 > ESTABLISHED > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:4756 > FIN_WAIT1 > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2765 > ESTABLISHED > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:2870 > FIN_WAIT1 > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:1038 > FIN_WAIT1 Are you running Usermin on port 80 there? I ask because all tjose connections are to the www port (80), but Usermin usually runs on port 20000. - Jamie ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Jamie C. <jca...@we...> - 2007-04-02 04:26:08
|
One possible cause is automated attacks from worms or bots looking for webserver bugs to exploit. Normally you don't see this in Usermin, as it typically runs on port 20000 .. but when running on port 80, it would receive a lot of these. Is Usermin using up a lot of CPU or memory on your system? Use the 'top' command or Webmin's Running Processes module, and look for the miniserv.pl processes. - Jamie On 1/Apr/2007 15:31 Richey Goldberg wrote .. > Yes, usermin is running on port 80. We have people go to > http://mail.theirdomain.com. > > Richey > > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of Jamie > Cameron > Sent: Sunday, April 01, 2007 3:16 PM > To: Webmin users list > Subject: Re: [webmin-l] Excesive connections and miniserv.pl > > On 1/Apr/2007 11:23 Richey Goldberg wrote .. > > When I start usermin I get a ton of connections from different places. > > I can make them go away by blocking them in my firewall but they are > replaced > > by someone else. I am running Usermin 1.260 on Slackware 7.x. Webmin > > cannot be reached from the public and the box is NATed behind a firewall. > > As far as I can tell these connections are eating up resources and > > occasionally causing timeouts on SMTP and POP sessions. Does anyone > have > > any ideas on this? > > > > Thanks, > > > > A ps -ax will show an excessive number of miniserv.pl processes > > > > 14466 ? S 0:03 perl /usr/local/src/usermin-1.260/miniserv.pl > > /etc/usermin/miniserv.conf > > > > Here is part of a netstat -a > > > > > > tcp 0 0 mail.americainter.n:www 71-83-54-106.dhcp.:1403 > > TIME_WAIT > > tcp 0 6728 mail.americainter.n:www hn.kd.ny.adsl:64163 CLOSE > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 > > ESTABLISHED > > tcp 0 6728 mail.americainter.n:www hn.kd.ny.adsl:64163 CLOSE > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:64114 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www 66.232.126.139:51829 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4078 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:3295 > > FIN_WAIT2 > > tcp 0 0 mail.americainter.n:www CPE-58-166-225-42:61278 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www ALagny-152-1-31-18:3918 > > TIME_WAIT > > tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54533 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www ALagny-152-1-6-245:1699 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4001 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www 71-83-54-106.dhcp.:1403 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:64114 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www 66.232.126.139:51829 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4078 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:3295 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www CPE-58-166-225-42:61278 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www ALagny-152-1-31-18:3918 > > TIME_WAIT > > tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54533 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www ALagny-152-1-6-245:1699 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4001 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1686 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www beta.freehost.com:51387 > > TIME_WAIT > > tcp 0 0 mail.americainter.:smtp 82.201.237.138:63151 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www 60.172.130.76:1542 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www colo-69-31-80-90.:52956 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3915 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2999 > > ESTABLISHED > > tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54529 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1647 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www 124.128.102.96:2313 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2999 > > ESTABLISHED > > tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54529 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1647 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www 124.128.102.96:2313 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3857 > > TIME_WAIT > > tcp 0 0 mail.americainter.:smtp 89.20.6.100:2103 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:62923 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:ssh lan-192-168-100-51:1049 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3772 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www 208.74.100.16:3997 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www beta.freehost.com:62659 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3721 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www c-66-30-138-52.hsd:3700 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:1859 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www 60.219.254.222:4753 > > TIME_WAIT > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1174 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3004 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1270 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3216 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1494 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3229 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1573 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3707 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1932 > > ESTABLISHED > > tcp 0 8162 mail.americainter.n:www hn.kd.ny.adsl:62412 > > FIN_WAIT1 > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4059 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2236 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4262 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2291 > > ESTABLISHED > > tcp 0 6693 mail.americainter.n:www ALagny-152-1-31-18:4609 > > FIN_WAIT1 > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4423 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2553 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4725 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2646 > > ESTABLISHED > > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:4756 > > FIN_WAIT1 > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2765 > > ESTABLISHED > > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:2870 > > FIN_WAIT1 > > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:1038 > > FIN_WAIT1 > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1174 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3004 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1270 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3216 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1494 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3229 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1573 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3707 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1932 > > ESTABLISHED > > tcp 0 8162 mail.americainter.n:www hn.kd.ny.adsl:62412 > > FIN_WAIT1 > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4059 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2236 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4262 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2291 > > ESTABLISHED > > tcp 0 6693 mail.americainter.n:www ALagny-152-1-31-18:4609 > > FIN_WAIT1 > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4423 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2553 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4725 > > ESTABLISHED > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2646 > > ESTABLISHED > > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:4756 > > FIN_WAIT1 > > tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2765 > > ESTABLISHED > > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:2870 > > FIN_WAIT1 > > tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:1038 > > FIN_WAIT1 > > Are you running Usermin on port 80 there? I ask because all tjose > connections are to the www port (80), but Usermin usually runs on > port 20000. > > - Jamie > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share > your > opinions on IT & business topics through brief surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > - > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share > your > opinions on IT & business topics through brief surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > - > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Marcos R. <we...@al...> - 2007-04-02 08:40:23
|
In a mail (only) server I'm running usermin in port 443 (normally for https)... I do not receive to many "fake" connections! (80 is totally closed). I needed to do that to be sure that people could use the webmail from anyplace! (believe it or not... some universities and some "hot spots" *only* allow connections to port 80 and 443). Cheers! Marcos On Sun, 1 Apr 2007, Jamie Cameron wrote: > One possible cause is automated attacks from worms or > bots looking for webserver bugs to exploit. Normally you > don't see this in Usermin, as it typically runs on port 20000 .. > but when running on port 80, it would receive a lot of these. > > Is Usermin using up a lot of CPU or memory on your system? > Use the 'top' command or Webmin's Running Processes module, > and look for the miniserv.pl processes. > > - Jamie > > On 1/Apr/2007 15:31 Richey Goldberg wrote .. >> Yes, usermin is running on port 80. We have people go to >> http://mail.theirdomain.com. >> >> Richey >> >> -----Original Message----- >> From: web...@li... >> [mailto:web...@li...] On Behalf Of Jamie >> Cameron >> Sent: Sunday, April 01, 2007 3:16 PM >> To: Webmin users list >> Subject: Re: [webmin-l] Excesive connections and miniserv.pl >> >> On 1/Apr/2007 11:23 Richey Goldberg wrote .. >>> When I start usermin I get a ton of connections from different places. >>> I can make them go away by blocking them in my firewall but they are >> replaced >>> by someone else. I am running Usermin 1.260 on Slackware 7.x. Webmin >>> cannot be reached from the public and the box is NATed behind a firewall. >>> As far as I can tell these connections are eating up resources and >>> occasionally causing timeouts on SMTP and POP sessions. Does anyone >> have >>> any ideas on this? >>> >>> Thanks, >>> >>> A ps -ax will show an excessive number of miniserv.pl processes >>> >>> 14466 ? S 0:03 perl /usr/local/src/usermin-1.260/miniserv.pl >>> /etc/usermin/miniserv.conf >>> >>> Here is part of a netstat -a >>> >>> >>> tcp 0 0 mail.americainter.n:www 71-83-54-106.dhcp.:1403 >>> TIME_WAIT >>> tcp 0 6728 mail.americainter.n:www hn.kd.ny.adsl:64163 CLOSE >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 >>> ESTABLISHED >>> tcp 0 6728 mail.americainter.n:www hn.kd.ny.adsl:64163 CLOSE >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:64114 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www 66.232.126.139:51829 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4078 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:3295 >>> FIN_WAIT2 >>> tcp 0 0 mail.americainter.n:www CPE-58-166-225-42:61278 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www ALagny-152-1-31-18:3918 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54533 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www ALagny-152-1-6-245:1699 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4001 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www 71-83-54-106.dhcp.:1403 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1134 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:64114 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www 66.232.126.139:51829 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4078 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:3295 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www CPE-58-166-225-42:61278 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www ALagny-152-1-31-18:3918 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54533 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www ALagny-152-1-6-245:1699 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:4001 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1686 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www beta.freehost.com:51387 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.:smtp 82.201.237.138:63151 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www 60.172.130.76:1542 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www colo-69-31-80-90.:52956 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3915 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2999 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54529 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1647 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www 124.128.102.96:2313 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2999 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.:smtp dmz-192-168-101-7:54529 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www ded1.medyanova.com:1647 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www 124.128.102.96:2313 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3857 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.:smtp 89.20.6.100:2103 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www hn.kd.ny.adsl:62923 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:ssh lan-192-168-100-51:1049 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3772 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www 208.74.100.16:3997 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www beta.freehost.com:62659 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www p5494E70B.dip.t-di:3721 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www c-66-30-138-52.hsd:3700 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www p1164-ipad311sasaj:1859 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www 60.219.254.222:4753 >>> TIME_WAIT >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1174 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3004 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1270 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3216 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1494 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3229 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1573 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3707 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1932 >>> ESTABLISHED >>> tcp 0 8162 mail.americainter.n:www hn.kd.ny.adsl:62412 >>> FIN_WAIT1 >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4059 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2236 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4262 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2291 >>> ESTABLISHED >>> tcp 0 6693 mail.americainter.n:www ALagny-152-1-31-18:4609 >>> FIN_WAIT1 >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4423 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2553 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4725 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2646 >>> ESTABLISHED >>> tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:4756 >>> FIN_WAIT1 >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2765 >>> ESTABLISHED >>> tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:2870 >>> FIN_WAIT1 >>> tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:1038 >>> FIN_WAIT1 >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1174 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3004 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1270 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3216 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1494 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3229 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1573 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:3707 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:1932 >>> ESTABLISHED >>> tcp 0 8162 mail.americainter.n:www hn.kd.ny.adsl:62412 >>> FIN_WAIT1 >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4059 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2236 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4262 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2291 >>> ESTABLISHED >>> tcp 0 6693 mail.americainter.n:www ALagny-152-1-31-18:4609 >>> FIN_WAIT1 >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4423 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2553 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:4725 >>> ESTABLISHED >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2646 >>> ESTABLISHED >>> tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:4756 >>> FIN_WAIT1 >>> tcp 0 0 mail.americainter.n:www KH210-202-95-11.vd:2765 >>> ESTABLISHED >>> tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:2870 >>> FIN_WAIT1 >>> tcp 0 214 mail.americainter.n:www KH210-202-95-11.vd:1038 >>> FIN_WAIT1 >> >> Are you running Usermin on port 80 there? I ask because all tjose >> connections are to the www port (80), but Usermin usually runs on >> port 20000. >> >> - Jamie >> >> ------------------------------------------------------------------------- >> Take Surveys. Earn Cash. Influence the Future of IT >> Join SourceForge.net's Techsay panel and you'll get the chance to share >> your >> opinions on IT & business topics through brief surveys-and earn cash >> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV >> - >> Forwarded by the Webmin mailing list at web...@li... >> To remove yourself from this list, go to >> http://lists.sourceforge.net/lists/listinfo/webadmin-list >> >> >> ------------------------------------------------------------------------- >> Take Surveys. Earn Cash. Influence the Future of IT >> Join SourceForge.net's Techsay panel and you'll get the chance to share >> your >> opinions on IT & business topics through brief surveys-and earn cash >> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV >> - >> Forwarded by the Webmin mailing list at web...@li... >> To remove yourself from this list, go to >> http://lists.sourceforge.net/lists/listinfo/webadmin-list > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share your > opinions on IT & business topics through brief surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > - > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > |
From: Dave I. <dav...@en...> - 2007-04-23 21:37:24
|
My apologies for the long description that follows. I am having a most peculiar problem and need to describe the setup in detail in order to make any sense whatsoever. I have a custom Webmin theme that, among other things, displays the a string in the header of each page "You are logged in to HOSTNAME as USERNAME" where HOSTNAME and USERNAME are the hostname of the Webmin server and names of the logged in user, respectively. The USERNAME string I am getting from the $remote_user global variable. Also, I an using Full PAM Conversations, so when logging in, instead of a single form with Username and Password, logging in requires 2 pages. One for the Username and one of the Password. The "You are logged in ..." string is suppressed when $remote_user is empty, to avoid displaying the message when you are logging in. Here's the problem: Sometimes (not all the time), if I log out as one user and then log in immediately as another user, something odd occurs. Let's assume I am logged in as User1, and want to log in as User2. I click the Logout link, and get the page that prompts for the username. I enter User2 and click Continue. The next page prompts for the password, but it also displays the string "You are logged in ... as User1." So halfway through the process of logging in as User2, I am seeing $remote_user being equal to "User1".=20 I have no idea why this is occurring, but I think there are larger ramifications to the issue because often (again not always) after this occurs, miniserv.pl starts failing completely when logging in and will start returning "403 Login failed" after entering the username. At this point the only solution I have is to shell into the box and restart Webmin. Thanks Dave Isaacs Oh yeah, this is running on Red Hat EL4, and I have specified the pam_radius_auth.so PAM library in /etc/pam.d/webmin. It all works fine, except for this periodic problem. |
From: Jamie C. <jca...@we...> - 2007-04-24 04:44:17
|
On 23/Apr/2007 14:37 Dave Isaacs wrote .. > My apologies for the long description that follows. I am having a most > peculiar problem and need to describe the setup in detail in order to > make any sense whatsoever. > > I have a custom Webmin theme that, among other things, displays the a > string in the header of each page "You are logged in to HOSTNAME as > USERNAME" where HOSTNAME and USERNAME are the hostname of the Webmin > server and names of the logged in user, respectively. > > The USERNAME string I am getting from the $remote_user global variable. > > Also, I an using Full PAM Conversations, so when logging in, instead of > a single form with Username and Password, logging in requires 2 pages. > One for the Username and one of the Password. The "You are logged in > ..." string is suppressed when $remote_user is empty, to avoid > displaying the message when you are logging in. > > Here's the problem: > Sometimes (not all the time), if I log out as one user and then log in > immediately as another user, something odd occurs. Let's assume I am > logged in as User1, and want to log in as User2. I click the Logout > link, and get the page that prompts for the username. I enter User2 and > click Continue. The next page prompts for the password, but it also > displays the string "You are logged in ... as User1." So halfway through > the process of logging in as User2, I am seeing $remote_user being equal > to "User1". > > I have no idea why this is occurring, but I think there are larger > ramifications to the issue because often (again not always) after this > occurs, miniserv.pl starts failing completely when logging in and will > start returning "403 Login failed" after entering the username. At this > point the only solution I have is to shell into the box and restart > Webmin. > > Thanks > > Dave Isaacs > > Oh yeah, this is running on Red Hat EL4, and I have specified the > pam_radius_auth.so PAM library in /etc/pam.d/webmin. It all works fine, > except for this periodic problem. Hi Dave, This definately looks like a Webmin bug, but I couldn't see anything in the code that could trigger it .. except perhaps incorrect caching of the PAM login page in the browser. I'm curious about why you enabled the full PAM conversations feature though - typically this is only needed if your PAM setup asks for more than a username and password. Is this the case on your system? If not, you could try turning it off.. - Jamie |
From: Dave I. <dav...@en...> - 2007-04-24 10:59:22
|
Though not included in the setup I described, we plan on extending the Webmin login to include 2-factor authentication. This will require full PAM conversations.=20 There have been reports of similar behaviour, dating back to before pam conversations was turned on, that occurred after a session timeout. The resulting login page (which prompted for username and password) also contained the "You are logged in ..." message. That bug reports was using version 1.290. We are currently running 1.330. I will continue debugging. Are there any specific places I should look at in miniserv.pl? Thanks Dave I -----Original Message----- From: web...@li... [mailto:web...@li...] On Behalf Of Jamie Cameron Sent: Tuesday, April 24, 2007 12:44 AM To: Webmin users list Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM authentication problem On 23/Apr/2007 14:37 Dave Isaacs wrote .. > My apologies for the long description that follows. I am having a most > peculiar problem and need to describe the setup in detail in order to=20 > make any sense whatsoever. >=20 > I have a custom Webmin theme that, among other things, displays the a=20 > string in the header of each page "You are logged in to HOSTNAME as=20 > USERNAME" where HOSTNAME and USERNAME are the hostname of the Webmin=20 > server and names of the logged in user, respectively. >=20 > The USERNAME string I am getting from the $remote_user global variable. >=20 > Also, I an using Full PAM Conversations, so when logging in, instead=20 > of a single form with Username and Password, logging in requires 2 pages. > One for the Username and one of the Password. The "You are logged in=20 > ..." string is suppressed when $remote_user is empty, to avoid=20 > displaying the message when you are logging in. >=20 > Here's the problem: > Sometimes (not all the time), if I log out as one user and then log in > immediately as another user, something odd occurs. Let's assume I am=20 > logged in as User1, and want to log in as User2. I click the Logout=20 > link, and get the page that prompts for the username. I enter User2=20 > and click Continue. The next page prompts for the password, but it=20 > also displays the string "You are logged in ... as User1." So halfway=20 > through the process of logging in as User2, I am seeing $remote_user=20 > being equal to "User1". >=20 > I have no idea why this is occurring, but I think there are larger=20 > ramifications to the issue because often (again not always) after this > occurs, miniserv.pl starts failing completely when logging in and will > start returning "403 Login failed" after entering the username. At=20 > this point the only solution I have is to shell into the box and=20 > restart Webmin. >=20 > Thanks >=20 > Dave Isaacs >=20 > Oh yeah, this is running on Red Hat EL4, and I have specified the=20 > pam_radius_auth.so PAM library in /etc/pam.d/webmin. It all works=20 > fine, except for this periodic problem. Hi Dave, This definately looks like a Webmin bug, but I couldn't see anything in the code that could trigger it .. except perhaps incorrect caching of the PAM login page in the browser. I'm curious about why you enabled the full PAM conversations feature though - typically this is only needed if your PAM setup asks for more than a username and password. Is this the case on your system? If not, you could try turning it off.. - Jamie ------------------------------------------------------------------------ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Dave I. <dav...@en...> - 2007-04-24 20:43:55
|
I appear to have reproduced this issue without using my custom theme or a special PAM library.=20 The steps to reproduce: (1) Install Webmin 1.330. On my setup, Webmin is configured to use SSL connections only. (2) Login as root and go to the Webmin Configuration -> Authentication module. (3) Turn on Full PAM Conversations and save. (4) Go to the Webmin Configuration -> Webmin Themes (5) Change to the MSC Linux Theme and save. (6) Click on the System tab. (7) Click on the Logout link. (8) When prompted for the username, enter root and click Continue. (9) The page that prompts for the password appears, somewhat messed up. At this point, you may be on a page that appears as in the following screen shot: http://khendron.com/sandbox/login_problem.gif. Note that even though you are not logged in, the theme appears to think you are logged in and displays the tabs across the top of the page. I also edited the MSC Linux Theme files to display the value of $remote_user, and at this point $remote_user is set to "root". Step (6) is important. You don't have to click on the System tab specifically. The idea is that you have to *not* be on the home URL of the webmin server. If you are https://servername:10000 the problem will not occur, but if you are on https://servername:10000/some_page_or_module the problem will occur. Perhaps the login process is trying to redirect to the referrer page before the login is complete? Interestingly, the problem will occur only once. If you recreate the problem, complete the login and then pick it up again at step (6), the problem will not reoccur. But if you clear the browser cache and then pick it up at step (6), then problem will reoccur (On my custom theme, the problem occurs every single time, regardless of caching). Note I've reproduced this using IE7 and FF2. I hope you are able to repeat this issue. I am totally scratching my head on it and need some assistance. Thanks Dave I -----Original Message----- From: web...@li... [mailto:web...@li...] On Behalf Of Dave Isaacs Sent: Tuesday, April 24, 2007 6:59 AM To: Webmin users list Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM authentication problem Though not included in the setup I described, we plan on extending the Webmin login to include 2-factor authentication. This will require full PAM conversations.=20 There have been reports of similar behaviour, dating back to before pam conversations was turned on, that occurred after a session timeout. The resulting login page (which prompted for username and password) also contained the "You are logged in ..." message. That bug reports was using version 1.290. We are currently running 1.330. I will continue debugging. Are there any specific places I should look at in miniserv.pl? Thanks Dave I -----Original Message----- From: web...@li... [mailto:web...@li...] On Behalf Of Jamie Cameron Sent: Tuesday, April 24, 2007 12:44 AM To: Webmin users list Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM authentication problem On 23/Apr/2007 14:37 Dave Isaacs wrote .. > My apologies for the long description that follows. I am having a most > peculiar problem and need to describe the setup in detail in order to=20 > make any sense whatsoever. >=20 > I have a custom Webmin theme that, among other things, displays the a=20 > string in the header of each page "You are logged in to HOSTNAME as=20 > USERNAME" where HOSTNAME and USERNAME are the hostname of the Webmin=20 > server and names of the logged in user, respectively. >=20 > The USERNAME string I am getting from the $remote_user global variable. >=20 > Also, I an using Full PAM Conversations, so when logging in, instead=20 > of a single form with Username and Password, logging in requires 2 pages. > One for the Username and one of the Password. The "You are logged in=20 > ..." string is suppressed when $remote_user is empty, to avoid=20 > displaying the message when you are logging in. >=20 > Here's the problem: > Sometimes (not all the time), if I log out as one user and then log in > immediately as another user, something odd occurs. Let's assume I am=20 > logged in as User1, and want to log in as User2. I click the Logout=20 > link, and get the page that prompts for the username. I enter User2=20 > and click Continue. The next page prompts for the password, but it=20 > also displays the string "You are logged in ... as User1." So halfway=20 > through the process of logging in as User2, I am seeing $remote_user=20 > being equal to "User1". >=20 > I have no idea why this is occurring, but I think there are larger=20 > ramifications to the issue because often (again not always) after this > occurs, miniserv.pl starts failing completely when logging in and will > start returning "403 Login failed" after entering the username. At=20 > this point the only solution I have is to shell into the box and=20 > restart Webmin. >=20 > Thanks >=20 > Dave Isaacs >=20 > Oh yeah, this is running on Red Hat EL4, and I have specified the=20 > pam_radius_auth.so PAM library in /etc/pam.d/webmin. It all works=20 > fine, except for this periodic problem. Hi Dave, This definately looks like a Webmin bug, but I couldn't see anything in the code that could trigger it .. except perhaps incorrect caching of the PAM login page in the browser. I'm curious about why you enabled the full PAM conversations feature though - typically this is only needed if your PAM setup asks for more than a username and password. Is this the case on your system? If not, you could try turning it off.. - Jamie ------------------------------------------------------------------------ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list ------------------------------------------------------------------------ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Jamie C. <jca...@we...> - 2007-04-25 01:39:53
|
Hi Dave, Thanks for the detailed list of steps to re-produce this - I found the problem by following them, and will include a fix in the next Webmin release. Or if you don't want to wait, you can edit miniserv.pl and change the lines : $ENV{"REMOTE_USER"} = $authuser if (defined($authuser)); $ENV{"BASE_REMOTE_USER"} =$baseauthuser if ($authuser ne $baseauthuser); to : $ENV{"REMOTE_USER"} = $authuser; $ENV{"BASE_REMOTE_USER"} = $authuser ne $baseauthuser ? $baseauthuser : undef; - Jamie On 24/Apr/2007 13:43 Dave Isaacs wrote .. > I appear to have reproduced this issue without using my custom theme or > a special PAM library. > > The steps to reproduce: > > (1) Install Webmin 1.330. On my setup, Webmin is configured to use SSL > connections only. > (2) Login as root and go to the Webmin Configuration -> Authentication > module. > (3) Turn on Full PAM Conversations and save. > (4) Go to the Webmin Configuration -> Webmin Themes > (5) Change to the MSC Linux Theme and save. > (6) Click on the System tab. > (7) Click on the Logout link. > (8) When prompted for the username, enter root and click Continue. > (9) The page that prompts for the password appears, somewhat messed up. > > At this point, you may be on a page that appears as in the following > screen shot: http://khendron.com/sandbox/login_problem.gif. Note that > even though you are not logged in, the theme appears to think you are > logged in and displays the tabs across the top of the page. I also > edited the MSC Linux Theme files to display the value of $remote_user, > and at this point $remote_user is set to "root". > > Step (6) is important. You don't have to click on the System tab > specifically. The idea is that you have to *not* be on the home URL of > the webmin server. If you are https://servername:10000 the problem will > not occur, but if you are on > https://servername:10000/some_page_or_module the problem will occur. > Perhaps the login process is trying to redirect to the referrer page > before the login is complete? > > Interestingly, the problem will occur only once. If you recreate the > problem, complete the login and then pick it up again at step (6), the > problem will not reoccur. But if you clear the browser cache and then > pick it up at step (6), then problem will reoccur (On my custom theme, > the problem occurs every single time, regardless of caching). Note I've > reproduced this using IE7 and FF2. > > I hope you are able to repeat this issue. I am totally scratching my > head on it and need some assistance. > > Thanks > > Dave I > > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of Dave > Isaacs > Sent: Tuesday, April 24, 2007 6:59 AM > To: Webmin users list > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > authentication problem > > Though not included in the setup I described, we plan on extending the > Webmin login to include 2-factor authentication. This will require full > PAM conversations. > > There have been reports of similar behaviour, dating back to before pam > conversations was turned on, that occurred after a session timeout. The > resulting login page (which prompted for username and password) also > contained the "You are logged in ..." message. That bug reports was > using version 1.290. We are currently running 1.330. > > I will continue debugging. Are there any specific places I should look > at in miniserv.pl? > > Thanks > > Dave I > > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of Jamie > Cameron > Sent: Tuesday, April 24, 2007 12:44 AM > To: Webmin users list > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > authentication problem > > On 23/Apr/2007 14:37 Dave Isaacs wrote .. > > My apologies for the long description that follows. I am having a most > > > peculiar problem and need to describe the setup in detail in order to > > make any sense whatsoever. > > > > I have a custom Webmin theme that, among other things, displays the a > > string in the header of each page "You are logged in to HOSTNAME as > > USERNAME" where HOSTNAME and USERNAME are the hostname of the Webmin > > server and names of the logged in user, respectively. > > > > The USERNAME string I am getting from the $remote_user global > variable. > > > > Also, I an using Full PAM Conversations, so when logging in, instead > > of a single form with Username and Password, logging in requires 2 > pages. > > One for the Username and one of the Password. The "You are logged in > > ..." string is suppressed when $remote_user is empty, to avoid > > displaying the message when you are logging in. > > > > Here's the problem: > > Sometimes (not all the time), if I log out as one user and then log in > > > immediately as another user, something odd occurs. Let's assume I am > > logged in as User1, and want to log in as User2. I click the Logout > > link, and get the page that prompts for the username. I enter User2 > > and click Continue. The next page prompts for the password, but it > > also displays the string "You are logged in ... as User1." So halfway > > through the process of logging in as User2, I am seeing $remote_user > > being equal to "User1". > > > > I have no idea why this is occurring, but I think there are larger > > ramifications to the issue because often (again not always) after this > > > occurs, miniserv.pl starts failing completely when logging in and will > > > start returning "403 Login failed" after entering the username. At > > this point the only solution I have is to shell into the box and > > restart Webmin. > > > > Thanks > > > > Dave Isaacs > > > > Oh yeah, this is running on Red Hat EL4, and I have specified the > > pam_radius_auth.so PAM library in /etc/pam.d/webmin. It all works > > fine, except for this periodic problem. > > Hi Dave, > > This definately looks like a Webmin bug, but I couldn't see anything in > the code that could trigger it .. except perhaps incorrect caching of > the PAM login page in the browser. > > I'm curious about why you enabled the full PAM conversations feature > though - typically this is only needed if your PAM setup asks for more > than a username and password. Is this the case on your system? If not, > you could try turning it off.. > > - Jamie > > ------------------------------------------------------------------------ > - > This SF.net email is sponsored by DB2 Express Download DB2 Express C - > the FREE version of DB2 express and take control of your XML. No limits. > Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at > web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > ------------------------------------------------------------------------ > - > This SF.net email is sponsored by DB2 Express Download DB2 Express C - > the FREE version of DB2 express and take control of your XML. No limits. > Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at > web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Dave I. <dav...@en...> - 2007-04-25 13:49:26
|
Ummmm, I made the change that you suggested (I cut and pasted the corrected lines from your email), restarted Webmin, and it had no effect whatsoever. I am still able to reproduce the problem as described.=20 Thanks Dave I -----Original Message----- From: web...@li... [mailto:web...@li...] On Behalf Of Jamie Cameron Sent: Tuesday, April 24, 2007 9:40 PM To: Webmin users list Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM authentication problem Hi Dave, Thanks for the detailed list of steps to re-produce this - I found the problem by following them, and will include a fix in the next Webmin release. Or if you don't want to wait, you can edit miniserv.pl and change the lines : $ENV{"REMOTE_USER"} =3D $authuser if (defined($authuser)); $ENV{"BASE_REMOTE_USER"} =3D$baseauthuser if ($authuser ne $baseauthuser); to : $ENV{"REMOTE_USER"} =3D $authuser; $ENV{"BASE_REMOTE_USER"} =3D $authuser ne $baseauthuser ? $baseauthuser : undef; - Jamie On 24/Apr/2007 13:43 Dave Isaacs wrote .. > I appear to have reproduced this issue without using my custom theme=20 > or a special PAM library. >=20 > The steps to reproduce: >=20 > (1) Install Webmin 1.330. On my setup, Webmin is configured to use SSL > connections only. > (2) Login as root and go to the Webmin Configuration -> Authentication > module. > (3) Turn on Full PAM Conversations and save. > (4) Go to the Webmin Configuration -> Webmin Themes > (5) Change to the MSC Linux Theme and save. > (6) Click on the System tab. > (7) Click on the Logout link. > (8) When prompted for the username, enter root and click Continue. > (9) The page that prompts for the password appears, somewhat messed up. >=20 > At this point, you may be on a page that appears as in the following=20 > screen shot: http://khendron.com/sandbox/login_problem.gif. Note that=20 > even though you are not logged in, the theme appears to think you are=20 > logged in and displays the tabs across the top of the page. I also=20 > edited the MSC Linux Theme files to display the value of $remote_user, > and at this point $remote_user is set to "root". >=20 > Step (6) is important. You don't have to click on the System tab=20 > specifically. The idea is that you have to *not* be on the home URL of > the webmin server. If you are https://servername:10000 the problem=20 > will not occur, but if you are on=20 > https://servername:10000/some_page_or_module the problem will occur. > Perhaps the login process is trying to redirect to the referrer page=20 > before the login is complete? >=20 > Interestingly, the problem will occur only once. If you recreate the=20 > problem, complete the login and then pick it up again at step (6), the > problem will not reoccur. But if you clear the browser cache and then=20 > pick it up at step (6), then problem will reoccur (On my custom theme, > the problem occurs every single time, regardless of caching). Note=20 > I've reproduced this using IE7 and FF2. >=20 > I hope you are able to repeat this issue. I am totally scratching my=20 > head on it and need some assistance. >=20 > Thanks >=20 > Dave I >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of Dave > Isaacs > Sent: Tuesday, April 24, 2007 6:59 AM > To: Webmin users list > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM=20 > authentication problem >=20 > Though not included in the setup I described, we plan on extending the > Webmin login to include 2-factor authentication. This will require=20 > full PAM conversations. >=20 > There have been reports of similar behaviour, dating back to before=20 > pam conversations was turned on, that occurred after a session=20 > timeout. The resulting login page (which prompted for username and=20 > password) also contained the "You are logged in ..." message. That bug > reports was using version 1.290. We are currently running 1.330. >=20 > I will continue debugging. Are there any specific places I should look > at in miniserv.pl? >=20 > Thanks >=20 > Dave I >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of=20 > Jamie Cameron > Sent: Tuesday, April 24, 2007 12:44 AM > To: Webmin users list > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM=20 > authentication problem >=20 > On 23/Apr/2007 14:37 Dave Isaacs wrote .. > > My apologies for the long description that follows. I am having a=20 > > most >=20 > > peculiar problem and need to describe the setup in detail in order=20 > > to make any sense whatsoever. > >=20 > > I have a custom Webmin theme that, among other things, displays the=20 > > a string in the header of each page "You are logged in to HOSTNAME=20 > > as USERNAME" where HOSTNAME and USERNAME are the hostname of the=20 > > Webmin server and names of the logged in user, respectively. > >=20 > > The USERNAME string I am getting from the $remote_user global > variable. > >=20 > > Also, I an using Full PAM Conversations, so when logging in, instead > > of a single form with Username and Password, logging in requires 2 > pages. > > One for the Username and one of the Password. The "You are logged in > > ..." string is suppressed when $remote_user is empty, to avoid=20 > > displaying the message when you are logging in. > >=20 > > Here's the problem: > > Sometimes (not all the time), if I log out as one user and then log=20 > > in >=20 > > immediately as another user, something odd occurs. Let's assume I am > > logged in as User1, and want to log in as User2. I click the Logout=20 > > link, and get the page that prompts for the username. I enter User2=20 > > and click Continue. The next page prompts for the password, but it=20 > > also displays the string "You are logged in ... as User1." So=20 > > halfway through the process of logging in as User2, I am seeing=20 > > $remote_user being equal to "User1". > >=20 > > I have no idea why this is occurring, but I think there are larger=20 > > ramifications to the issue because often (again not always) after=20 > > this >=20 > > occurs, miniserv.pl starts failing completely when logging in and=20 > > will >=20 > > start returning "403 Login failed" after entering the username. At=20 > > this point the only solution I have is to shell into the box and=20 > > restart Webmin. > >=20 > > Thanks > >=20 > > Dave Isaacs > >=20 > > Oh yeah, this is running on Red Hat EL4, and I have specified the=20 > > pam_radius_auth.so PAM library in /etc/pam.d/webmin. It all works=20 > > fine, except for this periodic problem. >=20 > Hi Dave, >=20 > This definately looks like a Webmin bug, but I couldn't see anything=20 > in the code that could trigger it .. except perhaps incorrect caching=20 > of the PAM login page in the browser. >=20 > I'm curious about why you enabled the full PAM conversations feature=20 > though - typically this is only needed if your PAM setup asks for more > than a username and password. Is this the case on your system? If not, > you could try turning it off.. >=20 > - Jamie >=20 > ---------------------------------------------------------------------- > -- > - > This SF.net email is sponsored by DB2 Express Download DB2 Express C - > the FREE version of DB2 express and take control of your XML. No limits. > Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at=20 > web...@li... > To remove yourself from this list, go to=20 > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > ---------------------------------------------------------------------- > -- > - > This SF.net email is sponsored by DB2 Express Download DB2 Express C - > the FREE version of DB2 express and take control of your XML. No limits. > Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at=20 > web...@li... > To remove yourself from this list, go to=20 > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > ---------------------------------------------------------------------- > --- This SF.net email is sponsored by DB2 Express Download DB2 Express > C - the FREE version of DB2 express and take control of your XML. No=20 > limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at=20 > web...@li... > To remove yourself from this list, go to=20 > http://lists.sourceforge.net/lists/listinfo/webadmin-list ------------------------------------------------------------------------ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Jamie C. <jca...@we...> - 2007-04-25 16:59:24
|
Hi Dave, Hmm, perhaps I made some other miniserv.pl changes since 1.340 that also contributed to this fix. You can get the latest version from http://fudu.webmin.com/miniserv.pl. You'll need to fix up the #! line at the top after copying it into place, and of course restart Webmin.. - Jamie On 25/Apr/2007 06:49 Dave Isaacs wrote .. > Ummmm, I made the change that you suggested (I cut and pasted the > corrected lines from your email), restarted Webmin, and it had no effect > whatsoever. I am still able to reproduce the problem as described. > > Thanks > > Dave I > > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of Jamie > Cameron > Sent: Tuesday, April 24, 2007 9:40 PM > To: Webmin users list > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > authentication problem > > Hi Dave, > Thanks for the detailed list of steps to re-produce this - I found the > problem by following them, and will include a fix in the next Webmin > release. > Or if you don't want to wait, you can edit miniserv.pl and change the > lines : > > $ENV{"REMOTE_USER"} = $authuser if (defined($authuser)); > $ENV{"BASE_REMOTE_USER"} =$baseauthuser if ($authuser ne > $baseauthuser); > > to : > > $ENV{"REMOTE_USER"} = $authuser; > $ENV{"BASE_REMOTE_USER"} = $authuser ne $baseauthuser ? > $baseauthuser : undef; > > - Jamie > > On 24/Apr/2007 13:43 Dave Isaacs wrote .. > > I appear to have reproduced this issue without using my custom theme > > or a special PAM library. > > > > The steps to reproduce: > > > > (1) Install Webmin 1.330. On my setup, Webmin is configured to use SSL > > > connections only. > > (2) Login as root and go to the Webmin Configuration -> Authentication > > > module. > > (3) Turn on Full PAM Conversations and save. > > (4) Go to the Webmin Configuration -> Webmin Themes > > (5) Change to the MSC Linux Theme and save. > > (6) Click on the System tab. > > (7) Click on the Logout link. > > (8) When prompted for the username, enter root and click Continue. > > (9) The page that prompts for the password appears, somewhat messed > up. > > > > At this point, you may be on a page that appears as in the following > > screen shot: http://khendron.com/sandbox/login_problem.gif. Note that > > even though you are not logged in, the theme appears to think you are > > logged in and displays the tabs across the top of the page. I also > > edited the MSC Linux Theme files to display the value of $remote_user, > > > and at this point $remote_user is set to "root". > > > > Step (6) is important. You don't have to click on the System tab > > specifically. The idea is that you have to *not* be on the home URL of > > > the webmin server. If you are https://servername:10000 the problem > > will not occur, but if you are on > > https://servername:10000/some_page_or_module the problem will occur. > > Perhaps the login process is trying to redirect to the referrer page > > before the login is complete? > > > > Interestingly, the problem will occur only once. If you recreate the > > problem, complete the login and then pick it up again at step (6), the > > > problem will not reoccur. But if you clear the browser cache and then > > pick it up at step (6), then problem will reoccur (On my custom theme, > > > the problem occurs every single time, regardless of caching). Note > > I've reproduced this using IE7 and FF2. > > > > I hope you are able to repeat this issue. I am totally scratching my > > head on it and need some assistance. > > > > Thanks > > > > Dave I > > > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...] On Behalf Of Dave > > > Isaacs > > Sent: Tuesday, April 24, 2007 6:59 AM > > To: Webmin users list > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > authentication problem > > > > Though not included in the setup I described, we plan on extending the > > > Webmin login to include 2-factor authentication. This will require > > full PAM conversations. > > > > There have been reports of similar behaviour, dating back to before > > pam conversations was turned on, that occurred after a session > > timeout. The resulting login page (which prompted for username and > > password) also contained the "You are logged in ..." message. That bug > > > reports was using version 1.290. We are currently running 1.330. > > > > I will continue debugging. Are there any specific places I should look > > > at in miniserv.pl? > > > > Thanks > > > > Dave I > > > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...] On Behalf Of > > Jamie Cameron > > Sent: Tuesday, April 24, 2007 12:44 AM > > To: Webmin users list > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > authentication problem > > > > On 23/Apr/2007 14:37 Dave Isaacs wrote .. > > > My apologies for the long description that follows. I am having a > > > most > > > > > peculiar problem and need to describe the setup in detail in order > > > to make any sense whatsoever. > > > > > > I have a custom Webmin theme that, among other things, displays the > > > a string in the header of each page "You are logged in to HOSTNAME > > > as USERNAME" where HOSTNAME and USERNAME are the hostname of the > > > Webmin server and names of the logged in user, respectively. > > > > > > The USERNAME string I am getting from the $remote_user global > > variable. > > > > > > Also, I an using Full PAM Conversations, so when logging in, instead > > > > of a single form with Username and Password, logging in requires 2 > > pages. > > > One for the Username and one of the Password. The "You are logged in > > > > ..." string is suppressed when $remote_user is empty, to avoid > > > displaying the message when you are logging in. > > > > > > Here's the problem: > > > Sometimes (not all the time), if I log out as one user and then log > > > in > > > > > immediately as another user, something odd occurs. Let's assume I am > > > > logged in as User1, and want to log in as User2. I click the Logout > > > link, and get the page that prompts for the username. I enter User2 > > > and click Continue. The next page prompts for the password, but it > > > also displays the string "You are logged in ... as User1." So > > > halfway through the process of logging in as User2, I am seeing > > > $remote_user being equal to "User1". > > > > > > I have no idea why this is occurring, but I think there are larger > > > ramifications to the issue because often (again not always) after > > > this > > > > > occurs, miniserv.pl starts failing completely when logging in and > > > will > > > > > start returning "403 Login failed" after entering the username. At > > > this point the only solution I have is to shell into the box and > > > restart Webmin. > > > > > > Thanks > > > > > > Dave Isaacs > > > > > > Oh yeah, this is running on Red Hat EL4, and I have specified the > > > pam_radius_auth.so PAM library in /etc/pam.d/webmin. It all works > > > fine, except for this periodic problem. > > > > Hi Dave, > > > > This definately looks like a Webmin bug, but I couldn't see anything > > in the code that could trigger it .. except perhaps incorrect caching > > of the PAM login page in the browser. > > > > I'm curious about why you enabled the full PAM conversations feature > > though - typically this is only needed if your PAM setup asks for more > > > than a username and password. Is this the case on your system? If not, > > > you could try turning it off.. > > > > - Jamie > > > > ---------------------------------------------------------------------- > > -- > > - > > This SF.net email is sponsored by DB2 Express Download DB2 Express C > - > > > the FREE version of DB2 express and take control of your XML. No > limits. > > Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at > > web...@li... > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > ---------------------------------------------------------------------- > > -- > > - > > This SF.net email is sponsored by DB2 Express Download DB2 Express C > - > > > the FREE version of DB2 express and take control of your XML. No > limits. > > Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at > > web...@li... > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > ---------------------------------------------------------------------- > > --- This SF.net email is sponsored by DB2 Express Download DB2 Express > > > C - the FREE version of DB2 express and take control of your XML. No > > limits. Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at > > web...@li... > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > ------------------------------------------------------------------------ > - > This SF.net email is sponsored by DB2 Express Download DB2 Express C - > the FREE version of DB2 express and take control of your XML. No limits. > Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at > web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Dave I. <dav...@en...> - 2007-04-25 18:19:58
|
That URL returned a file not found error, so I downloaded the latest dev version (1.343) and took the miniserv.pl from that package, updated it accordingly, and restarted. Nope, the problem still occurs. I did notice that now to recreate the problem repeatedly I have to change the page I am on before logging out. For example, click on the Servers tab, logout, reproduce, click on the System tab, logout, reproduce, click on the Networking tab, logout, reproduce, etc etc. Thanks Dave I =20 -----Original Message----- From: web...@li... [mailto:web...@li...] On Behalf Of Jamie Cameron Sent: Wednesday, April 25, 2007 12:59 PM To: Webmin users list Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM authentication problem Hi Dave, Hmm, perhaps I made some other miniserv.pl changes since 1.340 that also contributed to this fix. You can get the latest version from http://fudu.webmin.com/miniserv.pl. You'll need to fix up the #! line at the top after copying it into place, and of course restart Webmin.. - Jamie On 25/Apr/2007 06:49 Dave Isaacs wrote .. > Ummmm, I made the change that you suggested (I cut and pasted the=20 > corrected lines from your email), restarted Webmin, and it had no=20 > effect whatsoever. I am still able to reproduce the problem as described. >=20 > Thanks >=20 > Dave I >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of=20 > Jamie Cameron > Sent: Tuesday, April 24, 2007 9:40 PM > To: Webmin users list > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM=20 > authentication problem >=20 > Hi Dave, > Thanks for the detailed list of steps to re-produce this - I found the > problem by following them, and will include a fix in the next Webmin=20 > release. > Or if you don't want to wait, you can edit miniserv.pl and change the=20 > lines : >=20 > $ENV{"REMOTE_USER"} =3D $authuser if (defined($authuser)); > $ENV{"BASE_REMOTE_USER"} =3D$baseauthuser if ($authuser ne=20 > $baseauthuser); >=20 > to : >=20 > $ENV{"REMOTE_USER"} =3D $authuser; > $ENV{"BASE_REMOTE_USER"} =3D $authuser ne $baseauthuser ? > $baseauthuser : undef; >=20 > - Jamie >=20 > On 24/Apr/2007 13:43 Dave Isaacs wrote .. > > I appear to have reproduced this issue without using my custom theme > > or a special PAM library. > >=20 > > The steps to reproduce: > >=20 > > (1) Install Webmin 1.330. On my setup, Webmin is configured to use=20 > > SSL >=20 > > connections only. > > (2) Login as root and go to the Webmin Configuration ->=20 > > Authentication >=20 > > module. > > (3) Turn on Full PAM Conversations and save. > > (4) Go to the Webmin Configuration -> Webmin Themes > > (5) Change to the MSC Linux Theme and save. > > (6) Click on the System tab. > > (7) Click on the Logout link. > > (8) When prompted for the username, enter root and click Continue. > > (9) The page that prompts for the password appears, somewhat messed > up. > >=20 > > At this point, you may be on a page that appears as in the following > > screen shot: http://khendron.com/sandbox/login_problem.gif. Note=20 > > that even though you are not logged in, the theme appears to think=20 > > you are logged in and displays the tabs across the top of the page.=20 > > I also edited the MSC Linux Theme files to display the value of=20 > > $remote_user, >=20 > > and at this point $remote_user is set to "root". > >=20 > > Step (6) is important. You don't have to click on the System tab=20 > > specifically. The idea is that you have to *not* be on the home URL=20 > > of >=20 > > the webmin server. If you are https://servername:10000 the problem=20 > > will not occur, but if you are on=20 > > https://servername:10000/some_page_or_module the problem will occur. > > Perhaps the login process is trying to redirect to the referrer page > > before the login is complete? > >=20 > > Interestingly, the problem will occur only once. If you recreate the > > problem, complete the login and then pick it up again at step (6),=20 > > the >=20 > > problem will not reoccur. But if you clear the browser cache and=20 > > then pick it up at step (6), then problem will reoccur (On my custom > > theme, >=20 > > the problem occurs every single time, regardless of caching). Note=20 > > I've reproduced this using IE7 and FF2. > >=20 > > I hope you are able to repeat this issue. I am totally scratching my > > head on it and need some assistance. > >=20 > > Thanks > >=20 > > Dave I > >=20 > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...] On Behalf Of=20 > > Dave >=20 > > Isaacs > > Sent: Tuesday, April 24, 2007 6:59 AM > > To: Webmin users list > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM=20 > > authentication problem > >=20 > > Though not included in the setup I described, we plan on extending=20 > > the >=20 > > Webmin login to include 2-factor authentication. This will require=20 > > full PAM conversations. > >=20 > > There have been reports of similar behaviour, dating back to before=20 > > pam conversations was turned on, that occurred after a session=20 > > timeout. The resulting login page (which prompted for username and > > password) also contained the "You are logged in ..." message. That=20 > > bug >=20 > > reports was using version 1.290. We are currently running 1.330. > >=20 > > I will continue debugging. Are there any specific places I should=20 > > look >=20 > > at in miniserv.pl? > >=20 > > Thanks > >=20 > > Dave I > >=20 > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...] On Behalf Of=20 > > Jamie Cameron > > Sent: Tuesday, April 24, 2007 12:44 AM > > To: Webmin users list > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM=20 > > authentication problem > >=20 > > On 23/Apr/2007 14:37 Dave Isaacs wrote .. > > > My apologies for the long description that follows. I am having a=20 > > > most > >=20 > > > peculiar problem and need to describe the setup in detail in order > > > to make any sense whatsoever. > > >=20 > > > I have a custom Webmin theme that, among other things, displays=20 > > > the a string in the header of each page "You are logged in to=20 > > > HOSTNAME as USERNAME" where HOSTNAME and USERNAME are the hostname > > > of the Webmin server and names of the logged in user, respectively. > > >=20 > > > The USERNAME string I am getting from the $remote_user global > > variable. > > >=20 > > > Also, I an using Full PAM Conversations, so when logging in,=20 > > > instead >=20 > > > of a single form with Username and Password, logging in requires 2 > > pages. > > > One for the Username and one of the Password. The "You are logged=20 > > > in >=20 > > > ..." string is suppressed when $remote_user is empty, to avoid=20 > > > displaying the message when you are logging in. > > >=20 > > > Here's the problem: > > > Sometimes (not all the time), if I log out as one user and then=20 > > > log in > >=20 > > > immediately as another user, something odd occurs. Let's assume I=20 > > > am >=20 > > > logged in as User1, and want to log in as User2. I click the=20 > > > Logout link, and get the page that prompts for the username. I=20 > > > enter User2 and click Continue. The next page prompts for the=20 > > > password, but it also displays the string "You are logged in ...=20 > > > as User1." So halfway through the process of logging in as User2,=20 > > > I am seeing $remote_user being equal to "User1". > > >=20 > > > I have no idea why this is occurring, but I think there are larger > > > ramifications to the issue because often (again not always) after=20 > > > this > >=20 > > > occurs, miniserv.pl starts failing completely when logging in and=20 > > > will > >=20 > > > start returning "403 Login failed" after entering the username. At > > > this point the only solution I have is to shell into the box and=20 > > > restart Webmin. > > >=20 > > > Thanks > > >=20 > > > Dave Isaacs > > >=20 > > > Oh yeah, this is running on Red Hat EL4, and I have specified the=20 > > > pam_radius_auth.so PAM library in /etc/pam.d/webmin. It all works=20 > > > fine, except for this periodic problem. > >=20 > > Hi Dave, > >=20 > > This definately looks like a Webmin bug, but I couldn't see anything > > in the code that could trigger it .. except perhaps incorrect=20 > > caching of the PAM login page in the browser. > >=20 > > I'm curious about why you enabled the full PAM conversations feature > > though - typically this is only needed if your PAM setup asks for=20 > > more >=20 > > than a username and password. Is this the case on your system? If=20 > > not, >=20 > > you could try turning it off.. > >=20 > > - Jamie > >=20 > > -------------------------------------------------------------------- > > -- > > -- > > - > > This SF.net email is sponsored by DB2 Express Download DB2 Express C > - >=20 > > the FREE version of DB2 express and take control of your XML. No > limits. > > Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at=20 > > web...@li... > > To remove yourself from this list, go to=20 > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > >=20 > > -------------------------------------------------------------------- > > -- > > -- > > - > > This SF.net email is sponsored by DB2 Express Download DB2 Express C > - >=20 > > the FREE version of DB2 express and take control of your XML. No > limits. > > Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at=20 > > web...@li... > > To remove yourself from this list, go to=20 > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > >=20 > > -------------------------------------------------------------------- > > -- > > --- This SF.net email is sponsored by DB2 Express Download DB2=20 > > Express >=20 > > C - the FREE version of DB2 express and take control of your XML. No > > limits. Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at=20 > > web...@li... > > To remove yourself from this list, go to=20 > > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > ---------------------------------------------------------------------- > -- > - > This SF.net email is sponsored by DB2 Express Download DB2 Express C - > the FREE version of DB2 express and take control of your XML. No limits. > Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at=20 > web...@li... > To remove yourself from this list, go to=20 > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > ---------------------------------------------------------------------- > --- This SF.net email is sponsored by DB2 Express Download DB2 Express > C - the FREE version of DB2 express and take control of your XML. No=20 > limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at=20 > web...@li... > To remove yourself from this list, go to=20 > http://lists.sourceforge.net/lists/listinfo/webadmin-list ------------------------------------------------------------------------ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Jamie C. <jca...@we...> - 2007-04-25 19:37:39
|
Try that URL again now .. the miniserv.pl in 1.343 doesn't include the fix. - Jamie On 25/Apr/2007 11:19 Dave Isaacs wrote .. > That URL returned a file not found error, so I downloaded the latest dev > version (1.343) and took the miniserv.pl from that package, updated it > accordingly, and restarted. > > Nope, the problem still occurs. I did notice that now to recreate the > problem repeatedly I have to change the page I am on before logging out. > For example, click on the Servers tab, logout, reproduce, click on the > System tab, logout, reproduce, click on the Networking tab, logout, > reproduce, etc etc. > > Thanks > > Dave I > > > > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of Jamie > Cameron > Sent: Wednesday, April 25, 2007 12:59 PM > To: Webmin users list > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > authentication problem > > Hi Dave, > Hmm, perhaps I made some other miniserv.pl changes since 1.340 that also > contributed to this fix. > > You can get the latest version from http://fudu.webmin.com/miniserv.pl. > You'll need to fix up the #! line at the top after copying it into > place, and of course restart Webmin.. > > - Jamie > > On 25/Apr/2007 06:49 Dave Isaacs wrote .. > > Ummmm, I made the change that you suggested (I cut and pasted the > > corrected lines from your email), restarted Webmin, and it had no > > effect whatsoever. I am still able to reproduce the problem as > described. > > > > Thanks > > > > Dave I > > > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...] On Behalf Of > > Jamie Cameron > > Sent: Tuesday, April 24, 2007 9:40 PM > > To: Webmin users list > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > authentication problem > > > > Hi Dave, > > Thanks for the detailed list of steps to re-produce this - I found the > > > problem by following them, and will include a fix in the next Webmin > > release. > > Or if you don't want to wait, you can edit miniserv.pl and change the > > lines : > > > > $ENV{"REMOTE_USER"} = $authuser if (defined($authuser)); > > $ENV{"BASE_REMOTE_USER"} =$baseauthuser if ($authuser ne > > $baseauthuser); > > > > to : > > > > $ENV{"REMOTE_USER"} = $authuser; > > $ENV{"BASE_REMOTE_USER"} = $authuser ne $baseauthuser ? > > $baseauthuser : undef; > > > > - Jamie > > > > On 24/Apr/2007 13:43 Dave Isaacs wrote .. > > > I appear to have reproduced this issue without using my custom theme > > > > or a special PAM library. > > > > > > The steps to reproduce: > > > > > > (1) Install Webmin 1.330. On my setup, Webmin is configured to use > > > SSL > > > > > connections only. > > > (2) Login as root and go to the Webmin Configuration -> > > > Authentication > > > > > module. > > > (3) Turn on Full PAM Conversations and save. > > > (4) Go to the Webmin Configuration -> Webmin Themes > > > (5) Change to the MSC Linux Theme and save. > > > (6) Click on the System tab. > > > (7) Click on the Logout link. > > > (8) When prompted for the username, enter root and click Continue. > > > (9) The page that prompts for the password appears, somewhat messed > > up. > > > > > > At this point, you may be on a page that appears as in the following > > > > screen shot: http://khendron.com/sandbox/login_problem.gif. Note > > > that even though you are not logged in, the theme appears to think > > > you are logged in and displays the tabs across the top of the page. > > > I also edited the MSC Linux Theme files to display the value of > > > $remote_user, > > > > > and at this point $remote_user is set to "root". > > > > > > Step (6) is important. You don't have to click on the System tab > > > specifically. The idea is that you have to *not* be on the home URL > > > of > > > > > the webmin server. If you are https://servername:10000 the problem > > > will not occur, but if you are on > > > https://servername:10000/some_page_or_module the problem will occur. > > > Perhaps the login process is trying to redirect to the referrer page > > > > before the login is complete? > > > > > > Interestingly, the problem will occur only once. If you recreate the > > > > problem, complete the login and then pick it up again at step (6), > > > the > > > > > problem will not reoccur. But if you clear the browser cache and > > > then pick it up at step (6), then problem will reoccur (On my custom > > > > theme, > > > > > the problem occurs every single time, regardless of caching). Note > > > I've reproduced this using IE7 and FF2. > > > > > > I hope you are able to repeat this issue. I am totally scratching my > > > > head on it and need some assistance. > > > > > > Thanks > > > > > > Dave I > > > > > > -----Original Message----- > > > From: web...@li... > > > [mailto:web...@li...] On Behalf Of > > > Dave > > > > > Isaacs > > > Sent: Tuesday, April 24, 2007 6:59 AM > > > To: Webmin users list > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > > authentication problem > > > > > > Though not included in the setup I described, we plan on extending > > > the > > > > > Webmin login to include 2-factor authentication. This will require > > > full PAM conversations. > > > > > > There have been reports of similar behaviour, dating back to before > > > pam conversations was turned on, that occurred after a session > > > timeout. The resulting login page (which prompted for username and > > > password) also contained the "You are logged in ..." message. That > > > bug > > > > > reports was using version 1.290. We are currently running 1.330. > > > > > > I will continue debugging. Are there any specific places I should > > > look > > > > > at in miniserv.pl? > > > > > > Thanks > > > > > > Dave I > > > > > > -----Original Message----- > > > From: web...@li... > > > [mailto:web...@li...] On Behalf Of > > > Jamie Cameron > > > Sent: Tuesday, April 24, 2007 12:44 AM > > > To: Webmin users list > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > > authentication problem > > > > > > On 23/Apr/2007 14:37 Dave Isaacs wrote .. > > > > My apologies for the long description that follows. I am having a > > > > most > > > > > > > peculiar problem and need to describe the setup in detail in order > > > > > to make any sense whatsoever. > > > > > > > > I have a custom Webmin theme that, among other things, displays > > > > the a string in the header of each page "You are logged in to > > > > HOSTNAME as USERNAME" where HOSTNAME and USERNAME are the hostname > > > > > of the Webmin server and names of the logged in user, > respectively. > > > > > > > > The USERNAME string I am getting from the $remote_user global > > > variable. > > > > > > > > Also, I an using Full PAM Conversations, so when logging in, > > > > instead > > > > > > of a single form with Username and Password, logging in requires > 2 > > > pages. > > > > One for the Username and one of the Password. The "You are logged > > > > in > > > > > > ..." string is suppressed when $remote_user is empty, to avoid > > > > displaying the message when you are logging in. > > > > > > > > Here's the problem: > > > > Sometimes (not all the time), if I log out as one user and then > > > > log in > > > > > > > immediately as another user, something odd occurs. Let's assume I > > > > am > > > > > > logged in as User1, and want to log in as User2. I click the > > > > Logout link, and get the page that prompts for the username. I > > > > enter User2 and click Continue. The next page prompts for the > > > > password, but it also displays the string "You are logged in ... > > > > as User1." So halfway through the process of logging in as User2, > > > > I am seeing $remote_user being equal to "User1". > > > > > > > > I have no idea why this is occurring, but I think there are larger > > > > > ramifications to the issue because often (again not always) after > > > > this > > > > > > > occurs, miniserv.pl starts failing completely when logging in and > > > > will > > > > > > > start returning "403 Login failed" after entering the username. At > > > > > this point the only solution I have is to shell into the box and > > > > restart Webmin. > > > > > > > > Thanks > > > > > > > > Dave Isaacs > > > > > > > > Oh yeah, this is running on Red Hat EL4, and I have specified the > > > > pam_radius_auth.so PAM library in /etc/pam.d/webmin. It all works > > > > fine, except for this periodic problem. > > > > > > Hi Dave, > > > > > > This definately looks like a Webmin bug, but I couldn't see anything > > > > in the code that could trigger it .. except perhaps incorrect > > > caching of the PAM login page in the browser. > > > > > > I'm curious about why you enabled the full PAM conversations feature > > > > though - typically this is only needed if your PAM setup asks for > > > more > > > > > than a username and password. Is this the case on your system? If > > > not, > > > > > you could try turning it off.. > > > > > > - Jamie > > > > > > -------------------------------------------------------------------- > > > -- > > > -- > > > - > > > This SF.net email is sponsored by DB2 Express Download DB2 Express > C > > - > > > > > the FREE version of DB2 express and take control of your XML. No > > limits. > > > Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at > > > web...@li... > > > To remove yourself from this list, go to > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > > > -------------------------------------------------------------------- > > > -- > > > -- > > > - > > > This SF.net email is sponsored by DB2 Express Download DB2 Express > C > > - > > > > > the FREE version of DB2 express and take control of your XML. No > > limits. > > > Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at > > > web...@li... > > > To remove yourself from this list, go to > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > > > -------------------------------------------------------------------- > > > -- > > > --- This SF.net email is sponsored by DB2 Express Download DB2 > > > Express > > > > > C - the FREE version of DB2 express and take control of your XML. No > > > > limits. Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at > > > web...@li... > > > To remove yourself from this list, go to > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > ---------------------------------------------------------------------- > > -- > > - > > This SF.net email is sponsored by DB2 Express Download DB2 Express C > - > > > the FREE version of DB2 express and take control of your XML. No > limits. > > Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at > > web...@li... > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > ---------------------------------------------------------------------- > > --- This SF.net email is sponsored by DB2 Express Download DB2 Express > > > C - the FREE version of DB2 express and take control of your XML. No > > limits. Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at > > web...@li... > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > ------------------------------------------------------------------------ > - > This SF.net email is sponsored by DB2 Express Download DB2 Express C - > the FREE version of DB2 express and take control of your XML. No limits. > Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at > web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Dave I. <dav...@en...> - 2007-04-27 13:43:42
|
I downloaded your new file and tried it out, but it made no difference. I can still reproduce the problem as originally described. Dave I -----Original Message----- From: web...@li... [mailto:web...@li...] On Behalf Of Jamie Cameron Sent: Wednesday, April 25, 2007 3:38 PM To: Webmin users list Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM authentication problem Try that URL again now .. the miniserv.pl in 1.343 doesn't include the fix. - Jamie On 25/Apr/2007 11:19 Dave Isaacs wrote .. > That URL returned a file not found error, so I downloaded the latest=20 > dev version (1.343) and took the miniserv.pl from that package,=20 > updated it accordingly, and restarted. >=20 > Nope, the problem still occurs. I did notice that now to recreate the=20 > problem repeatedly I have to change the page I am on before logging out. > For example, click on the Servers tab, logout, reproduce, click on the > System tab, logout, reproduce, click on the Networking tab, logout,=20 > reproduce, etc etc. >=20 > Thanks >=20 > Dave I >=20 > =20 >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of=20 > Jamie Cameron > Sent: Wednesday, April 25, 2007 12:59 PM > To: Webmin users list > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM=20 > authentication problem >=20 > Hi Dave, > Hmm, perhaps I made some other miniserv.pl changes since 1.340 that=20 > also contributed to this fix. >=20 > You can get the latest version from http://fudu.webmin.com/miniserv.pl. > You'll need to fix up the #! line at the top after copying it into=20 > place, and of course restart Webmin.. >=20 > - Jamie >=20 > On 25/Apr/2007 06:49 Dave Isaacs wrote .. > > Ummmm, I made the change that you suggested (I cut and pasted the=20 > > corrected lines from your email), restarted Webmin, and it had no=20 > > effect whatsoever. I am still able to reproduce the problem as > described. > >=20 > > Thanks > >=20 > > Dave I > >=20 > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...] On Behalf Of=20 > > Jamie Cameron > > Sent: Tuesday, April 24, 2007 9:40 PM > > To: Webmin users list > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM=20 > > authentication problem > >=20 > > Hi Dave, > > Thanks for the detailed list of steps to re-produce this - I found=20 > > the >=20 > > problem by following them, and will include a fix in the next Webmin > > release. > > Or if you don't want to wait, you can edit miniserv.pl and change=20 > > the lines : > >=20 > > $ENV{"REMOTE_USER"} =3D $authuser if (defined($authuser)); > > $ENV{"BASE_REMOTE_USER"} =3D$baseauthuser if ($authuser ne=20 > > $baseauthuser); > >=20 > > to : > >=20 > > $ENV{"REMOTE_USER"} =3D $authuser; > > $ENV{"BASE_REMOTE_USER"} =3D $authuser ne $baseauthuser ? > > $baseauthuser : undef; > >=20 > > - Jamie > >=20 > > On 24/Apr/2007 13:43 Dave Isaacs wrote .. > > > I appear to have reproduced this issue without using my custom=20 > > > theme >=20 > > > or a special PAM library. > > >=20 > > > The steps to reproduce: > > >=20 > > > (1) Install Webmin 1.330. On my setup, Webmin is configured to use > > > SSL > >=20 > > > connections only. > > > (2) Login as root and go to the Webmin Configuration ->=20 > > > Authentication > >=20 > > > module. > > > (3) Turn on Full PAM Conversations and save. > > > (4) Go to the Webmin Configuration -> Webmin Themes > > > (5) Change to the MSC Linux Theme and save. > > > (6) Click on the System tab. > > > (7) Click on the Logout link. > > > (8) When prompted for the username, enter root and click Continue. > > > (9) The page that prompts for the password appears, somewhat=20 > > > messed > > up. > > >=20 > > > At this point, you may be on a page that appears as in the=20 > > > following >=20 > > > screen shot: http://khendron.com/sandbox/login_problem.gif. Note=20 > > > that even though you are not logged in, the theme appears to think > > > you are logged in and displays the tabs across the top of the page. > > > I also edited the MSC Linux Theme files to display the value of=20 > > > $remote_user, > >=20 > > > and at this point $remote_user is set to "root". > > >=20 > > > Step (6) is important. You don't have to click on the System tab=20 > > > specifically. The idea is that you have to *not* be on the home=20 > > > URL of > >=20 > > > the webmin server. If you are https://servername:10000 the problem > > > will not occur, but if you are on=20 > > > https://servername:10000/some_page_or_module the problem will occur. > > > Perhaps the login process is trying to redirect to the referrer=20 > > > page >=20 > > > before the login is complete? > > >=20 > > > Interestingly, the problem will occur only once. If you recreate=20 > > > the >=20 > > > problem, complete the login and then pick it up again at step (6), > > > the > >=20 > > > problem will not reoccur. But if you clear the browser cache and=20 > > > then pick it up at step (6), then problem will reoccur (On my=20 > > > custom >=20 > > > theme, > >=20 > > > the problem occurs every single time, regardless of caching). Note > > > I've reproduced this using IE7 and FF2. > > >=20 > > > I hope you are able to repeat this issue. I am totally scratching=20 > > > my >=20 > > > head on it and need some assistance. > > >=20 > > > Thanks > > >=20 > > > Dave I > > >=20 > > > -----Original Message----- > > > From: web...@li... > > > [mailto:web...@li...] On Behalf Of=20 > > > Dave > >=20 > > > Isaacs > > > Sent: Tuesday, April 24, 2007 6:59 AM > > > To: Webmin users list > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > > authentication problem > > >=20 > > > Though not included in the setup I described, we plan on extending > > > the > >=20 > > > Webmin login to include 2-factor authentication. This will require > > > full PAM conversations. > > >=20 > > > There have been reports of similar behaviour, dating back to=20 > > > before pam conversations was turned on, that occurred after a=20 > > > session timeout. The resulting login page (which prompted for=20 > > > username and > > > password) also contained the "You are logged in ..." message. That > > > bug > >=20 > > > reports was using version 1.290. We are currently running 1.330. > > >=20 > > > I will continue debugging. Are there any specific places I should=20 > > > look > >=20 > > > at in miniserv.pl? > > >=20 > > > Thanks > > >=20 > > > Dave I > > >=20 > > > -----Original Message----- > > > From: web...@li... > > > [mailto:web...@li...] On Behalf Of=20 > > > Jamie Cameron > > > Sent: Tuesday, April 24, 2007 12:44 AM > > > To: Webmin users list > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > > authentication problem > > >=20 > > > On 23/Apr/2007 14:37 Dave Isaacs wrote .. > > > > My apologies for the long description that follows. I am having=20 > > > > a most > > >=20 > > > > peculiar problem and need to describe the setup in detail in=20 > > > > order >=20 > > > > to make any sense whatsoever. > > > >=20 > > > > I have a custom Webmin theme that, among other things, displays=20 > > > > the a string in the header of each page "You are logged in to=20 > > > > HOSTNAME as USERNAME" where HOSTNAME and USERNAME are the=20 > > > > hostname >=20 > > > > of the Webmin server and names of the logged in user, > respectively. > > > >=20 > > > > The USERNAME string I am getting from the $remote_user global > > > variable. > > > >=20 > > > > Also, I an using Full PAM Conversations, so when logging in,=20 > > > > instead > >=20 > > > > of a single form with Username and Password, logging in requires > 2 > > > pages. > > > > One for the Username and one of the Password. The "You are=20 > > > > logged in > >=20 > > > > ..." string is suppressed when $remote_user is empty, to avoid=20 > > > > displaying the message when you are logging in. > > > >=20 > > > > Here's the problem: > > > > Sometimes (not all the time), if I log out as one user and then=20 > > > > log in > > >=20 > > > > immediately as another user, something odd occurs. Let's assume=20 > > > > I am > >=20 > > > > logged in as User1, and want to log in as User2. I click the=20 > > > > Logout link, and get the page that prompts for the username. I=20 > > > > enter User2 and click Continue. The next page prompts for the=20 > > > > password, but it also displays the string "You are logged in ... > > > > as User1." So halfway through the process of logging in as=20 > > > > User2, I am seeing $remote_user being equal to "User1". > > > >=20 > > > > I have no idea why this is occurring, but I think there are=20 > > > > larger >=20 > > > > ramifications to the issue because often (again not always)=20 > > > > after this > > >=20 > > > > occurs, miniserv.pl starts failing completely when logging in=20 > > > > and will > > >=20 > > > > start returning "403 Login failed" after entering the username.=20 > > > > At >=20 > > > > this point the only solution I have is to shell into the box and > > > > restart Webmin. > > > >=20 > > > > Thanks > > > >=20 > > > > Dave Isaacs > > > >=20 > > > > Oh yeah, this is running on Red Hat EL4, and I have specified=20 > > > > the pam_radius_auth.so PAM library in /etc/pam.d/webmin. It all=20 > > > > works fine, except for this periodic problem. > > >=20 > > > Hi Dave, > > >=20 > > > This definately looks like a Webmin bug, but I couldn't see=20 > > > anything >=20 > > > in the code that could trigger it .. except perhaps incorrect=20 > > > caching of the PAM login page in the browser. > > >=20 > > > I'm curious about why you enabled the full PAM conversations=20 > > > feature >=20 > > > though - typically this is only needed if your PAM setup asks for=20 > > > more > >=20 > > > than a username and password. Is this the case on your system? If=20 > > > not, > >=20 > > > you could try turning it off.. > > >=20 > > > - Jamie > > >=20 > > > ------------------------------------------------------------------ > > > -- > > > -- > > > -- > > > - > > > This SF.net email is sponsored by DB2 Express Download DB2 Express > C > > - > >=20 > > > the FREE version of DB2 express and take control of your XML. No > > limits. > > > Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at=20 > > > web...@li... > > > To remove yourself from this list, go to=20 > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > >=20 > > > ------------------------------------------------------------------ > > > -- > > > -- > > > -- > > > - > > > This SF.net email is sponsored by DB2 Express Download DB2 Express > C > > - > >=20 > > > the FREE version of DB2 express and take control of your XML. No > > limits. > > > Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at=20 > > > web...@li... > > > To remove yourself from this list, go to=20 > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > >=20 > > > ------------------------------------------------------------------ > > > -- > > > -- > > > --- This SF.net email is sponsored by DB2 Express Download DB2=20 > > > Express > >=20 > > > C - the FREE version of DB2 express and take control of your XML.=20 > > > No >=20 > > > limits. Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at=20 > > > web...@li... > > > To remove yourself from this list, go to=20 > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > >=20 > > -------------------------------------------------------------------- > > -- > > -- > > - > > This SF.net email is sponsored by DB2 Express Download DB2 Express C > - >=20 > > the FREE version of DB2 express and take control of your XML. No > limits. > > Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at=20 > > web...@li... > > To remove yourself from this list, go to=20 > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > >=20 > > -------------------------------------------------------------------- > > -- > > --- This SF.net email is sponsored by DB2 Express Download DB2=20 > > Express >=20 > > C - the FREE version of DB2 express and take control of your XML. No > > limits. Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at=20 > > web...@li... > > To remove yourself from this list, go to=20 > > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > ---------------------------------------------------------------------- > -- > - > This SF.net email is sponsored by DB2 Express Download DB2 Express C - > the FREE version of DB2 express and take control of your XML. No limits. > Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at=20 > web...@li... > To remove yourself from this list, go to=20 > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > ---------------------------------------------------------------------- > --- This SF.net email is sponsored by DB2 Express Download DB2 Express > C - the FREE version of DB2 express and take control of your XML. No=20 > limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at=20 > web...@li... > To remove yourself from this list, go to=20 > http://lists.sourceforge.net/lists/listinfo/webadmin-list ------------------------------------------------------------------------ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Jamie C. <jca...@we...> - 2007-04-28 04:43:35
|
Hi Dave, Ok, I found *another* bug that can cause this! Try re-downloading miniserv.pl from that user, and let me know how it goes this time.. - Jamie On 27/Apr/2007 06:43 Dave Isaacs wrote .. > I downloaded your new file and tried it out, but it made no difference. > I can still reproduce the problem as originally described. > > Dave I > > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of Jamie > Cameron > Sent: Wednesday, April 25, 2007 3:38 PM > To: Webmin users list > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > authentication problem > > Try that URL again now .. the miniserv.pl in 1.343 doesn't include the > fix. > > - Jamie > > On 25/Apr/2007 11:19 Dave Isaacs wrote .. > > That URL returned a file not found error, so I downloaded the latest > > dev version (1.343) and took the miniserv.pl from that package, > > updated it accordingly, and restarted. > > > > Nope, the problem still occurs. I did notice that now to recreate the > > problem repeatedly I have to change the page I am on before logging > out. > > For example, click on the Servers tab, logout, reproduce, click on the > > > System tab, logout, reproduce, click on the Networking tab, logout, > > reproduce, etc etc. > > > > Thanks > > > > Dave I > > > > > > > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...] On Behalf Of > > Jamie Cameron > > Sent: Wednesday, April 25, 2007 12:59 PM > > To: Webmin users list > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > authentication problem > > > > Hi Dave, > > Hmm, perhaps I made some other miniserv.pl changes since 1.340 that > > also contributed to this fix. > > > > You can get the latest version from > http://fudu.webmin.com/miniserv.pl. > > You'll need to fix up the #! line at the top after copying it into > > place, and of course restart Webmin.. > > > > - Jamie > > > > On 25/Apr/2007 06:49 Dave Isaacs wrote .. > > > Ummmm, I made the change that you suggested (I cut and pasted the > > > corrected lines from your email), restarted Webmin, and it had no > > > effect whatsoever. I am still able to reproduce the problem as > > described. > > > > > > Thanks > > > > > > Dave I > > > > > > -----Original Message----- > > > From: web...@li... > > > [mailto:web...@li...] On Behalf Of > > > Jamie Cameron > > > Sent: Tuesday, April 24, 2007 9:40 PM > > > To: Webmin users list > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > > authentication problem > > > > > > Hi Dave, > > > Thanks for the detailed list of steps to re-produce this - I found > > > the > > > > > problem by following them, and will include a fix in the next Webmin > > > > release. > > > Or if you don't want to wait, you can edit miniserv.pl and change > > > the lines : > > > > > > $ENV{"REMOTE_USER"} = $authuser if (defined($authuser)); > > > $ENV{"BASE_REMOTE_USER"} =$baseauthuser if ($authuser ne > > > $baseauthuser); > > > > > > to : > > > > > > $ENV{"REMOTE_USER"} = $authuser; > > > $ENV{"BASE_REMOTE_USER"} = $authuser ne $baseauthuser ? > > > $baseauthuser : undef; > > > > > > - Jamie > > > > > > On 24/Apr/2007 13:43 Dave Isaacs wrote .. > > > > I appear to have reproduced this issue without using my custom > > > > theme > > > > > > or a special PAM library. > > > > > > > > The steps to reproduce: > > > > > > > > (1) Install Webmin 1.330. On my setup, Webmin is configured to use > > > > > SSL > > > > > > > connections only. > > > > (2) Login as root and go to the Webmin Configuration -> > > > > Authentication > > > > > > > module. > > > > (3) Turn on Full PAM Conversations and save. > > > > (4) Go to the Webmin Configuration -> Webmin Themes > > > > (5) Change to the MSC Linux Theme and save. > > > > (6) Click on the System tab. > > > > (7) Click on the Logout link. > > > > (8) When prompted for the username, enter root and click Continue. > > > > (9) The page that prompts for the password appears, somewhat > > > > messed > > > up. > > > > > > > > At this point, you may be on a page that appears as in the > > > > following > > > > > > screen shot: http://khendron.com/sandbox/login_problem.gif. Note > > > > that even though you are not logged in, the theme appears to think > > > > > you are logged in and displays the tabs across the top of the > page. > > > > I also edited the MSC Linux Theme files to display the value of > > > > $remote_user, > > > > > > > and at this point $remote_user is set to "root". > > > > > > > > Step (6) is important. You don't have to click on the System tab > > > > specifically. The idea is that you have to *not* be on the home > > > > URL of > > > > > > > the webmin server. If you are https://servername:10000 the problem > > > > > will not occur, but if you are on > > > > https://servername:10000/some_page_or_module the problem will > occur. > > > > Perhaps the login process is trying to redirect to the referrer > > > > page > > > > > > before the login is complete? > > > > > > > > Interestingly, the problem will occur only once. If you recreate > > > > the > > > > > > problem, complete the login and then pick it up again at step (6), > > > > > the > > > > > > > problem will not reoccur. But if you clear the browser cache and > > > > then pick it up at step (6), then problem will reoccur (On my > > > > custom > > > > > > theme, > > > > > > > the problem occurs every single time, regardless of caching). Note > > > > > I've reproduced this using IE7 and FF2. > > > > > > > > I hope you are able to repeat this issue. I am totally scratching > > > > my > > > > > > head on it and need some assistance. > > > > > > > > Thanks > > > > > > > > Dave I > > > > > > > > -----Original Message----- > > > > From: web...@li... > > > > [mailto:web...@li...] On Behalf Of > > > > Dave > > > > > > > Isaacs > > > > Sent: Tuesday, April 24, 2007 6:59 AM > > > > To: Webmin users list > > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > > > > authentication problem > > > > > > > > Though not included in the setup I described, we plan on extending > > > > > the > > > > > > > Webmin login to include 2-factor authentication. This will require > > > > > full PAM conversations. > > > > > > > > There have been reports of similar behaviour, dating back to > > > > before pam conversations was turned on, that occurred after a > > > > session timeout. The resulting login page (which prompted for > > > > username and > > > > password) also contained the "You are logged in ..." message. That > > > > > bug > > > > > > > reports was using version 1.290. We are currently running 1.330. > > > > > > > > I will continue debugging. Are there any specific places I should > > > > look > > > > > > > at in miniserv.pl? > > > > > > > > Thanks > > > > > > > > Dave I > > > > > > > > -----Original Message----- > > > > From: web...@li... > > > > [mailto:web...@li...] On Behalf Of > > > > Jamie Cameron > > > > Sent: Tuesday, April 24, 2007 12:44 AM > > > > To: Webmin users list > > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > > > > authentication problem > > > > > > > > On 23/Apr/2007 14:37 Dave Isaacs wrote .. > > > > > My apologies for the long description that follows. I am having > > > > > a most > > > > > > > > > peculiar problem and need to describe the setup in detail in > > > > > order > > > > > > > to make any sense whatsoever. > > > > > > > > > > I have a custom Webmin theme that, among other things, displays > > > > > the a string in the header of each page "You are logged in to > > > > > HOSTNAME as USERNAME" where HOSTNAME and USERNAME are the > > > > > hostname > > > > > > > of the Webmin server and names of the logged in user, > > respectively. > > > > > > > > > > The USERNAME string I am getting from the $remote_user global > > > > variable. > > > > > > > > > > Also, I an using Full PAM Conversations, so when logging in, > > > > > instead > > > > > > > > of a single form with Username and Password, logging in requires > > 2 > > > > pages. > > > > > One for the Username and one of the Password. The "You are > > > > > logged in > > > > > > > > ..." string is suppressed when $remote_user is empty, to avoid > > > > > displaying the message when you are logging in. > > > > > > > > > > Here's the problem: > > > > > Sometimes (not all the time), if I log out as one user and then > > > > > log in > > > > > > > > > immediately as another user, something odd occurs. Let's assume > > > > > I am > > > > > > > > logged in as User1, and want to log in as User2. I click the > > > > > Logout link, and get the page that prompts for the username. I > > > > > enter User2 and click Continue. The next page prompts for the > > > > > password, but it also displays the string "You are logged in ... > > > > > as User1." So halfway through the process of logging in as > > > > > User2, I am seeing $remote_user being equal to "User1". > > > > > > > > > > I have no idea why this is occurring, but I think there are > > > > > larger > > > > > > > ramifications to the issue because often (again not always) > > > > > after this > > > > > > > > > occurs, miniserv.pl starts failing completely when logging in > > > > > and will > > > > > > > > > start returning "403 Login failed" after entering the username. > > > > > At > > > > > > > this point the only solution I have is to shell into the box and > > > > > > restart Webmin. > > > > > > > > > > Thanks > > > > > > > > > > Dave Isaacs > > > > > > > > > > Oh yeah, this is running on Red Hat EL4, and I have specified > > > > > the pam_radius_auth.so PAM library in /etc/pam.d/webmin. It all > > > > > works fine, except for this periodic problem. > > > > > > > > Hi Dave, > > > > > > > > This definately looks like a Webmin bug, but I couldn't see > > > > anything > > > > > > in the code that could trigger it .. except perhaps incorrect > > > > caching of the PAM login page in the browser. > > > > > > > > I'm curious about why you enabled the full PAM conversations > > > > feature > > > > > > though - typically this is only needed if your PAM setup asks for > > > > more > > > > > > > than a username and password. Is this the case on your system? If > > > > not, > > > > > > > you could try turning it off.. > > > > > > > > - Jamie > > > > > > > > ------------------------------------------------------------------ > > > > -- > > > > -- > > > > -- > > > > - > > > > This SF.net email is sponsored by DB2 Express Download DB2 Express > > C > > > - > > > > > > > the FREE version of DB2 express and take control of your XML. No > > > limits. > > > > Just data. Click to get it now. > > > > http://sourceforge.net/powerbar/db2/ > > > > - > > > > Forwarded by the Webmin mailing list at > > > > web...@li... > > > > To remove yourself from this list, go to > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > > > > > ------------------------------------------------------------------ > > > > -- > > > > -- > > > > -- > > > > - > > > > This SF.net email is sponsored by DB2 Express Download DB2 Express > > C > > > - > > > > > > > the FREE version of DB2 express and take control of your XML. No > > > limits. > > > > Just data. Click to get it now. > > > > http://sourceforge.net/powerbar/db2/ > > > > - > > > > Forwarded by the Webmin mailing list at > > > > web...@li... > > > > To remove yourself from this list, go to > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > > > > > ------------------------------------------------------------------ > > > > -- > > > > -- > > > > --- This SF.net email is sponsored by DB2 Express Download DB2 > > > > Express > > > > > > > C - the FREE version of DB2 express and take control of your XML. > > > > No > > > > > > limits. Just data. Click to get it now. > > > > http://sourceforge.net/powerbar/db2/ > > > > - > > > > Forwarded by the Webmin mailing list at > > > > web...@li... > > > > To remove yourself from this list, go to > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > > > -------------------------------------------------------------------- > > > -- > > > -- > > > - > > > This SF.net email is sponsored by DB2 Express Download DB2 Express > C > > - > > > > > the FREE version of DB2 express and take control of your XML. No > > limits. > > > Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at > > > web...@li... > > > To remove yourself from this list, go to > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > > > -------------------------------------------------------------------- > > > -- > > > --- This SF.net email is sponsored by DB2 Express Download DB2 > > > Express > > > > > C - the FREE version of DB2 express and take control of your XML. No > > > > limits. Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at > > > web...@li... > > > To remove yourself from this list, go to > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > ---------------------------------------------------------------------- > > -- > > - > > This SF.net email is sponsored by DB2 Express Download DB2 Express C > - > > > the FREE version of DB2 express and take control of your XML. No > limits. > > Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at > > web...@li... > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > ---------------------------------------------------------------------- > > --- This SF.net email is sponsored by DB2 Express Download DB2 Express > > > C - the FREE version of DB2 express and take control of your XML. No > > limits. Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at > > web...@li... > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > ------------------------------------------------------------------------ > - > This SF.net email is sponsored by DB2 Express Download DB2 Express C - > the FREE version of DB2 express and take control of your XML. No limits. > Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at > web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Dave I. <dav...@en...> - 2007-04-30 14:18:08
|
This appears to do the trick. Let me confirm with a completely fresh installation, and I will get back to you. Thanks! Dave I=20 -----Original Message----- From: web...@li... [mailto:web...@li...] On Behalf Of Jamie Cameron Sent: Saturday, April 28, 2007 12:43 AM To: Webmin users list Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM authentication problem Hi Dave, Ok, I found *another* bug that can cause this! Try re-downloading miniserv.pl from that user, and let me know how it goes this time.. - Jamie On 27/Apr/2007 06:43 Dave Isaacs wrote .. > I downloaded your new file and tried it out, but it made no difference. > I can still reproduce the problem as originally described. >=20 > Dave I >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of=20 > Jamie Cameron > Sent: Wednesday, April 25, 2007 3:38 PM > To: Webmin users list > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM=20 > authentication problem >=20 > Try that URL again now .. the miniserv.pl in 1.343 doesn't include the > fix. >=20 > - Jamie >=20 > On 25/Apr/2007 11:19 Dave Isaacs wrote .. > > That URL returned a file not found error, so I downloaded the latest > > dev version (1.343) and took the miniserv.pl from that package,=20 > > updated it accordingly, and restarted. > >=20 > > Nope, the problem still occurs. I did notice that now to recreate=20 > > the problem repeatedly I have to change the page I am on before=20 > > logging > out. > > For example, click on the Servers tab, logout, reproduce, click on=20 > > the >=20 > > System tab, logout, reproduce, click on the Networking tab, logout,=20 > > reproduce, etc etc. > >=20 > > Thanks > >=20 > > Dave I > >=20 > > =20 > >=20 > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...] On Behalf Of=20 > > Jamie Cameron > > Sent: Wednesday, April 25, 2007 12:59 PM > > To: Webmin users list > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM=20 > > authentication problem > >=20 > > Hi Dave, > > Hmm, perhaps I made some other miniserv.pl changes since 1.340 that=20 > > also contributed to this fix. > >=20 > > You can get the latest version from > http://fudu.webmin.com/miniserv.pl. > > You'll need to fix up the #! line at the top after copying it into=20 > > place, and of course restart Webmin.. > >=20 > > - Jamie > >=20 > > On 25/Apr/2007 06:49 Dave Isaacs wrote .. > > > Ummmm, I made the change that you suggested (I cut and pasted the=20 > > > corrected lines from your email), restarted Webmin, and it had no=20 > > > effect whatsoever. I am still able to reproduce the problem as > > described. > > >=20 > > > Thanks > > >=20 > > > Dave I > > >=20 > > > -----Original Message----- > > > From: web...@li... > > > [mailto:web...@li...] On Behalf Of=20 > > > Jamie Cameron > > > Sent: Tuesday, April 24, 2007 9:40 PM > > > To: Webmin users list > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > > authentication problem > > >=20 > > > Hi Dave, > > > Thanks for the detailed list of steps to re-produce this - I found > > > the > >=20 > > > problem by following them, and will include a fix in the next=20 > > > Webmin >=20 > > > release. > > > Or if you don't want to wait, you can edit miniserv.pl and change=20 > > > the lines : > > >=20 > > > $ENV{"REMOTE_USER"} =3D $authuser if (defined($authuser)); > > > $ENV{"BASE_REMOTE_USER"} =3D$baseauthuser if ($authuser ne = > > > $baseauthuser); > > >=20 > > > to : > > >=20 > > > $ENV{"REMOTE_USER"} =3D $authuser; > > > $ENV{"BASE_REMOTE_USER"} =3D $authuser ne $baseauthuser ? > > > $baseauthuser : undef; > > >=20 > > > - Jamie > > >=20 > > > On 24/Apr/2007 13:43 Dave Isaacs wrote .. > > > > I appear to have reproduced this issue without using my custom=20 > > > > theme > >=20 > > > > or a special PAM library. > > > >=20 > > > > The steps to reproduce: > > > >=20 > > > > (1) Install Webmin 1.330. On my setup, Webmin is configured to=20 > > > > use >=20 > > > > SSL > > >=20 > > > > connections only. > > > > (2) Login as root and go to the Webmin Configuration ->=20 > > > > Authentication > > >=20 > > > > module. > > > > (3) Turn on Full PAM Conversations and save. > > > > (4) Go to the Webmin Configuration -> Webmin Themes > > > > (5) Change to the MSC Linux Theme and save. > > > > (6) Click on the System tab. > > > > (7) Click on the Logout link. > > > > (8) When prompted for the username, enter root and click Continue. > > > > (9) The page that prompts for the password appears, somewhat=20 > > > > messed > > > up. > > > >=20 > > > > At this point, you may be on a page that appears as in the=20 > > > > following > >=20 > > > > screen shot: http://khendron.com/sandbox/login_problem.gif. Note > > > > that even though you are not logged in, the theme appears to=20 > > > > think >=20 > > > > you are logged in and displays the tabs across the top of the > page. > > > > I also edited the MSC Linux Theme files to display the value of=20 > > > > $remote_user, > > >=20 > > > > and at this point $remote_user is set to "root". > > > >=20 > > > > Step (6) is important. You don't have to click on the System tab > > > > specifically. The idea is that you have to *not* be on the home=20 > > > > URL of > > >=20 > > > > the webmin server. If you are https://servername:10000 the=20 > > > > problem >=20 > > > > will not occur, but if you are on=20 > > > > https://servername:10000/some_page_or_module the problem will > occur. > > > > Perhaps the login process is trying to redirect to the referrer=20 > > > > page > >=20 > > > > before the login is complete? > > > >=20 > > > > Interestingly, the problem will occur only once. If you recreate > > > > the > >=20 > > > > problem, complete the login and then pick it up again at step=20 > > > > (6), >=20 > > > > the > > >=20 > > > > problem will not reoccur. But if you clear the browser cache and > > > > then pick it up at step (6), then problem will reoccur (On my=20 > > > > custom > >=20 > > > > theme, > > >=20 > > > > the problem occurs every single time, regardless of caching).=20 > > > > Note >=20 > > > > I've reproduced this using IE7 and FF2. > > > >=20 > > > > I hope you are able to repeat this issue. I am totally=20 > > > > scratching my > >=20 > > > > head on it and need some assistance. > > > >=20 > > > > Thanks > > > >=20 > > > > Dave I > > > >=20 > > > > -----Original Message----- > > > > From: web...@li... > > > > [mailto:web...@li...] On Behalf=20 > > > > Of Dave > > >=20 > > > > Isaacs > > > > Sent: Tuesday, April 24, 2007 6:59 AM > > > > To: Webmin users list > > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible=20 > > > > PAM >=20 > > > > authentication problem > > > >=20 > > > > Though not included in the setup I described, we plan on=20 > > > > extending >=20 > > > > the > > >=20 > > > > Webmin login to include 2-factor authentication. This will=20 > > > > require >=20 > > > > full PAM conversations. > > > >=20 > > > > There have been reports of similar behaviour, dating back to=20 > > > > before pam conversations was turned on, that occurred after a=20 > > > > session timeout. The resulting login page (which prompted for=20 > > > > username and > > > > password) also contained the "You are logged in ..." message.=20 > > > > That >=20 > > > > bug > > >=20 > > > > reports was using version 1.290. We are currently running 1.330. > > > >=20 > > > > I will continue debugging. Are there any specific places I=20 > > > > should look > > >=20 > > > > at in miniserv.pl? > > > >=20 > > > > Thanks > > > >=20 > > > > Dave I > > > >=20 > > > > -----Original Message----- > > > > From: web...@li... > > > > [mailto:web...@li...] On Behalf=20 > > > > Of Jamie Cameron > > > > Sent: Tuesday, April 24, 2007 12:44 AM > > > > To: Webmin users list > > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible=20 > > > > PAM >=20 > > > > authentication problem > > > >=20 > > > > On 23/Apr/2007 14:37 Dave Isaacs wrote .. > > > > > My apologies for the long description that follows. I am=20 > > > > > having a most > > > >=20 > > > > > peculiar problem and need to describe the setup in detail in=20 > > > > > order > >=20 > > > > > to make any sense whatsoever. > > > > >=20 > > > > > I have a custom Webmin theme that, among other things,=20 > > > > > displays the a string in the header of each page "You are=20 > > > > > logged in to HOSTNAME as USERNAME" where HOSTNAME and USERNAME > > > > > are the hostname > >=20 > > > > > of the Webmin server and names of the logged in user, > > respectively. > > > > >=20 > > > > > The USERNAME string I am getting from the $remote_user global > > > > variable. > > > > >=20 > > > > > Also, I an using Full PAM Conversations, so when logging in,=20 > > > > > instead > > >=20 > > > > > of a single form with Username and Password, logging in=20 > > > > > requires > > 2 > > > > pages. > > > > > One for the Username and one of the Password. The "You are=20 > > > > > logged in > > >=20 > > > > > ..." string is suppressed when $remote_user is empty, to avoid > > > > > displaying the message when you are logging in. > > > > >=20 > > > > > Here's the problem: > > > > > Sometimes (not all the time), if I log out as one user and=20 > > > > > then log in > > > >=20 > > > > > immediately as another user, something odd occurs. Let's=20 > > > > > assume I am > > >=20 > > > > > logged in as User1, and want to log in as User2. I click the=20 > > > > > Logout link, and get the page that prompts for the username. I > > > > > enter User2 and click Continue. The next page prompts for the=20 > > > > > password, but it also displays the string "You are logged in ... > > > > > as User1." So halfway through the process of logging in as=20 > > > > > User2, I am seeing $remote_user being equal to "User1". > > > > >=20 > > > > > I have no idea why this is occurring, but I think there are=20 > > > > > larger > >=20 > > > > > ramifications to the issue because often (again not always)=20 > > > > > after this > > > >=20 > > > > > occurs, miniserv.pl starts failing completely when logging in=20 > > > > > and will > > > >=20 > > > > > start returning "403 Login failed" after entering the username. > > > > > At > >=20 > > > > > this point the only solution I have is to shell into the box=20 > > > > > and >=20 > > > > > restart Webmin. > > > > >=20 > > > > > Thanks > > > > >=20 > > > > > Dave Isaacs > > > > >=20 > > > > > Oh yeah, this is running on Red Hat EL4, and I have specified=20 > > > > > the pam_radius_auth.so PAM library in /etc/pam.d/webmin. It=20 > > > > > all works fine, except for this periodic problem. > > > >=20 > > > > Hi Dave, > > > >=20 > > > > This definately looks like a Webmin bug, but I couldn't see=20 > > > > anything > >=20 > > > > in the code that could trigger it .. except perhaps incorrect=20 > > > > caching of the PAM login page in the browser. > > > >=20 > > > > I'm curious about why you enabled the full PAM conversations=20 > > > > feature > >=20 > > > > though - typically this is only needed if your PAM setup asks=20 > > > > for more > > >=20 > > > > than a username and password. Is this the case on your system?=20 > > > > If not, > > >=20 > > > > you could try turning it off.. > > > >=20 > > > > - Jamie > > > >=20 > > > > ---------------------------------------------------------------- > > > > -- > > > > -- > > > > -- > > > > -- > > > > - > > > > This SF.net email is sponsored by DB2 Express Download DB2=20 > > > > Express > > C > > > - > > >=20 > > > > the FREE version of DB2 express and take control of your XML. No > > > limits. > > > > Just data. Click to get it now. > > > > http://sourceforge.net/powerbar/db2/ > > > > - > > > > Forwarded by the Webmin mailing list at=20 > > > > web...@li... > > > > To remove yourself from this list, go to=20 > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > >=20 > > > > ---------------------------------------------------------------- > > > > -- > > > > -- > > > > -- > > > > -- > > > > - > > > > This SF.net email is sponsored by DB2 Express Download DB2=20 > > > > Express > > C > > > - > > >=20 > > > > the FREE version of DB2 express and take control of your XML. No > > > limits. > > > > Just data. Click to get it now. > > > > http://sourceforge.net/powerbar/db2/ > > > > - > > > > Forwarded by the Webmin mailing list at=20 > > > > web...@li... > > > > To remove yourself from this list, go to=20 > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > >=20 > > > > ---------------------------------------------------------------- > > > > -- > > > > -- > > > > -- > > > > --- This SF.net email is sponsored by DB2 Express Download DB2=20 > > > > Express > > >=20 > > > > C - the FREE version of DB2 express and take control of your XML. > > > > No > >=20 > > > > limits. Just data. Click to get it now. > > > > http://sourceforge.net/powerbar/db2/ > > > > - > > > > Forwarded by the Webmin mailing list at=20 > > > > web...@li... > > > > To remove yourself from this list, go to=20 > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > >=20 > > > ------------------------------------------------------------------ > > > -- > > > -- > > > -- > > > - > > > This SF.net email is sponsored by DB2 Express Download DB2 Express > C > > - > >=20 > > > the FREE version of DB2 express and take control of your XML. No > > limits. > > > Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at=20 > > > web...@li... > > > To remove yourself from this list, go to=20 > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > >=20 > > > ------------------------------------------------------------------ > > > -- > > > -- > > > --- This SF.net email is sponsored by DB2 Express Download DB2=20 > > > Express > >=20 > > > C - the FREE version of DB2 express and take control of your XML.=20 > > > No >=20 > > > limits. Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at=20 > > > web...@li... > > > To remove yourself from this list, go to=20 > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > >=20 > > -------------------------------------------------------------------- > > -- > > -- > > - > > This SF.net email is sponsored by DB2 Express Download DB2 Express C > - >=20 > > the FREE version of DB2 express and take control of your XML. No > limits. > > Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at=20 > > web...@li... > > To remove yourself from this list, go to=20 > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > >=20 > > -------------------------------------------------------------------- > > -- > > --- This SF.net email is sponsored by DB2 Express Download DB2=20 > > Express >=20 > > C - the FREE version of DB2 express and take control of your XML. No > > limits. Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at=20 > > web...@li... > > To remove yourself from this list, go to=20 > > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > ---------------------------------------------------------------------- > -- > - > This SF.net email is sponsored by DB2 Express Download DB2 Express C - > the FREE version of DB2 express and take control of your XML. No limits. > Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at=20 > web...@li... > To remove yourself from this list, go to=20 > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > ---------------------------------------------------------------------- > --- This SF.net email is sponsored by DB2 Express Download DB2 Express > C - the FREE version of DB2 express and take control of your XML. No=20 > limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at=20 > web...@li... > To remove yourself from this list, go to=20 > http://lists.sourceforge.net/lists/listinfo/webadmin-list ------------------------------------------------------------------------ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Dave I. <dav...@en...> - 2007-05-01 15:54:28
|
This appears to fix the problem. Thanks for your help. BTW, much of this problem exists because I, and some other themes, are using the global $remote_user variable to detect whether or not the user is logged in. The assumption is that if $remote_user is undef, then the user is not logged in, and otherwise the user is logged in. Is this a valid assumption, or is there a better way to test that a user is logged in? Thanks again. Dave I=20 -----Original Message----- From: web...@li... [mailto:web...@li...] On Behalf Of Dave Isaacs Sent: Monday, April 30, 2007 10:18 AM To: Webmin users list Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM authentication problem This appears to do the trick. Let me confirm with a completely fresh installation, and I will get back to you. Thanks! Dave I=20 -----Original Message----- From: web...@li... [mailto:web...@li...] On Behalf Of Jamie Cameron Sent: Saturday, April 28, 2007 12:43 AM To: Webmin users list Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM authentication problem Hi Dave, Ok, I found *another* bug that can cause this! Try re-downloading miniserv.pl from that user, and let me know how it goes this time.. - Jamie On 27/Apr/2007 06:43 Dave Isaacs wrote .. > I downloaded your new file and tried it out, but it made no difference. > I can still reproduce the problem as originally described. >=20 > Dave I >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of=20 > Jamie Cameron > Sent: Wednesday, April 25, 2007 3:38 PM > To: Webmin users list > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM=20 > authentication problem >=20 > Try that URL again now .. the miniserv.pl in 1.343 doesn't include the > fix. >=20 > - Jamie >=20 > On 25/Apr/2007 11:19 Dave Isaacs wrote .. > > That URL returned a file not found error, so I downloaded the latest > > dev version (1.343) and took the miniserv.pl from that package,=20 > > updated it accordingly, and restarted. > >=20 > > Nope, the problem still occurs. I did notice that now to recreate=20 > > the problem repeatedly I have to change the page I am on before=20 > > logging > out. > > For example, click on the Servers tab, logout, reproduce, click on=20 > > the >=20 > > System tab, logout, reproduce, click on the Networking tab, logout,=20 > > reproduce, etc etc. > >=20 > > Thanks > >=20 > > Dave I > >=20 > > =20 > >=20 > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...] On Behalf Of=20 > > Jamie Cameron > > Sent: Wednesday, April 25, 2007 12:59 PM > > To: Webmin users list > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM=20 > > authentication problem > >=20 > > Hi Dave, > > Hmm, perhaps I made some other miniserv.pl changes since 1.340 that=20 > > also contributed to this fix. > >=20 > > You can get the latest version from > http://fudu.webmin.com/miniserv.pl. > > You'll need to fix up the #! line at the top after copying it into=20 > > place, and of course restart Webmin.. > >=20 > > - Jamie > >=20 > > On 25/Apr/2007 06:49 Dave Isaacs wrote .. > > > Ummmm, I made the change that you suggested (I cut and pasted the=20 > > > corrected lines from your email), restarted Webmin, and it had no=20 > > > effect whatsoever. I am still able to reproduce the problem as > > described. > > >=20 > > > Thanks > > >=20 > > > Dave I > > >=20 > > > -----Original Message----- > > > From: web...@li... > > > [mailto:web...@li...] On Behalf Of=20 > > > Jamie Cameron > > > Sent: Tuesday, April 24, 2007 9:40 PM > > > To: Webmin users list > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > > authentication problem > > >=20 > > > Hi Dave, > > > Thanks for the detailed list of steps to re-produce this - I found > > > the > >=20 > > > problem by following them, and will include a fix in the next=20 > > > Webmin >=20 > > > release. > > > Or if you don't want to wait, you can edit miniserv.pl and change=20 > > > the lines : > > >=20 > > > $ENV{"REMOTE_USER"} =3D $authuser if (defined($authuser)); > > > $ENV{"BASE_REMOTE_USER"} =3D$baseauthuser if ($authuser ne = > > > $baseauthuser); > > >=20 > > > to : > > >=20 > > > $ENV{"REMOTE_USER"} =3D $authuser; > > > $ENV{"BASE_REMOTE_USER"} =3D $authuser ne $baseauthuser ? > > > $baseauthuser : undef; > > >=20 > > > - Jamie > > >=20 > > > On 24/Apr/2007 13:43 Dave Isaacs wrote .. > > > > I appear to have reproduced this issue without using my custom=20 > > > > theme > >=20 > > > > or a special PAM library. > > > >=20 > > > > The steps to reproduce: > > > >=20 > > > > (1) Install Webmin 1.330. On my setup, Webmin is configured to=20 > > > > use >=20 > > > > SSL > > >=20 > > > > connections only. > > > > (2) Login as root and go to the Webmin Configuration ->=20 > > > > Authentication > > >=20 > > > > module. > > > > (3) Turn on Full PAM Conversations and save. > > > > (4) Go to the Webmin Configuration -> Webmin Themes > > > > (5) Change to the MSC Linux Theme and save. > > > > (6) Click on the System tab. > > > > (7) Click on the Logout link. > > > > (8) When prompted for the username, enter root and click Continue. > > > > (9) The page that prompts for the password appears, somewhat=20 > > > > messed > > > up. > > > >=20 > > > > At this point, you may be on a page that appears as in the=20 > > > > following > >=20 > > > > screen shot: http://khendron.com/sandbox/login_problem.gif. Note > > > > that even though you are not logged in, the theme appears to=20 > > > > think >=20 > > > > you are logged in and displays the tabs across the top of the > page. > > > > I also edited the MSC Linux Theme files to display the value of=20 > > > > $remote_user, > > >=20 > > > > and at this point $remote_user is set to "root". > > > >=20 > > > > Step (6) is important. You don't have to click on the System tab > > > > specifically. The idea is that you have to *not* be on the home=20 > > > > URL of > > >=20 > > > > the webmin server. If you are https://servername:10000 the=20 > > > > problem >=20 > > > > will not occur, but if you are on=20 > > > > https://servername:10000/some_page_or_module the problem will > occur. > > > > Perhaps the login process is trying to redirect to the referrer=20 > > > > page > >=20 > > > > before the login is complete? > > > >=20 > > > > Interestingly, the problem will occur only once. If you recreate > > > > the > >=20 > > > > problem, complete the login and then pick it up again at step=20 > > > > (6), >=20 > > > > the > > >=20 > > > > problem will not reoccur. But if you clear the browser cache and > > > > then pick it up at step (6), then problem will reoccur (On my=20 > > > > custom > >=20 > > > > theme, > > >=20 > > > > the problem occurs every single time, regardless of caching).=20 > > > > Note >=20 > > > > I've reproduced this using IE7 and FF2. > > > >=20 > > > > I hope you are able to repeat this issue. I am totally=20 > > > > scratching my > >=20 > > > > head on it and need some assistance. > > > >=20 > > > > Thanks > > > >=20 > > > > Dave I > > > >=20 > > > > -----Original Message----- > > > > From: web...@li... > > > > [mailto:web...@li...] On Behalf=20 > > > > Of Dave > > >=20 > > > > Isaacs > > > > Sent: Tuesday, April 24, 2007 6:59 AM > > > > To: Webmin users list > > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible=20 > > > > PAM >=20 > > > > authentication problem > > > >=20 > > > > Though not included in the setup I described, we plan on=20 > > > > extending >=20 > > > > the > > >=20 > > > > Webmin login to include 2-factor authentication. This will=20 > > > > require >=20 > > > > full PAM conversations. > > > >=20 > > > > There have been reports of similar behaviour, dating back to=20 > > > > before pam conversations was turned on, that occurred after a=20 > > > > session timeout. The resulting login page (which prompted for=20 > > > > username and > > > > password) also contained the "You are logged in ..." message.=20 > > > > That >=20 > > > > bug > > >=20 > > > > reports was using version 1.290. We are currently running 1.330. > > > >=20 > > > > I will continue debugging. Are there any specific places I=20 > > > > should look > > >=20 > > > > at in miniserv.pl? > > > >=20 > > > > Thanks > > > >=20 > > > > Dave I > > > >=20 > > > > -----Original Message----- > > > > From: web...@li... > > > > [mailto:web...@li...] On Behalf=20 > > > > Of Jamie Cameron > > > > Sent: Tuesday, April 24, 2007 12:44 AM > > > > To: Webmin users list > > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible=20 > > > > PAM >=20 > > > > authentication problem > > > >=20 > > > > On 23/Apr/2007 14:37 Dave Isaacs wrote .. > > > > > My apologies for the long description that follows. I am=20 > > > > > having a most > > > >=20 > > > > > peculiar problem and need to describe the setup in detail in=20 > > > > > order > >=20 > > > > > to make any sense whatsoever. > > > > >=20 > > > > > I have a custom Webmin theme that, among other things,=20 > > > > > displays the a string in the header of each page "You are=20 > > > > > logged in to HOSTNAME as USERNAME" where HOSTNAME and USERNAME > > > > > are the hostname > >=20 > > > > > of the Webmin server and names of the logged in user, > > respectively. > > > > >=20 > > > > > The USERNAME string I am getting from the $remote_user global > > > > variable. > > > > >=20 > > > > > Also, I an using Full PAM Conversations, so when logging in,=20 > > > > > instead > > >=20 > > > > > of a single form with Username and Password, logging in=20 > > > > > requires > > 2 > > > > pages. > > > > > One for the Username and one of the Password. The "You are=20 > > > > > logged in > > >=20 > > > > > ..." string is suppressed when $remote_user is empty, to avoid > > > > > displaying the message when you are logging in. > > > > >=20 > > > > > Here's the problem: > > > > > Sometimes (not all the time), if I log out as one user and=20 > > > > > then log in > > > >=20 > > > > > immediately as another user, something odd occurs. Let's=20 > > > > > assume I am > > >=20 > > > > > logged in as User1, and want to log in as User2. I click the=20 > > > > > Logout link, and get the page that prompts for the username. I > > > > > enter User2 and click Continue. The next page prompts for the=20 > > > > > password, but it also displays the string "You are logged in ... > > > > > as User1." So halfway through the process of logging in as=20 > > > > > User2, I am seeing $remote_user being equal to "User1". > > > > >=20 > > > > > I have no idea why this is occurring, but I think there are=20 > > > > > larger > >=20 > > > > > ramifications to the issue because often (again not always)=20 > > > > > after this > > > >=20 > > > > > occurs, miniserv.pl starts failing completely when logging in=20 > > > > > and will > > > >=20 > > > > > start returning "403 Login failed" after entering the username. > > > > > At > >=20 > > > > > this point the only solution I have is to shell into the box=20 > > > > > and >=20 > > > > > restart Webmin. > > > > >=20 > > > > > Thanks > > > > >=20 > > > > > Dave Isaacs > > > > >=20 > > > > > Oh yeah, this is running on Red Hat EL4, and I have specified=20 > > > > > the pam_radius_auth.so PAM library in /etc/pam.d/webmin. It=20 > > > > > all works fine, except for this periodic problem. > > > >=20 > > > > Hi Dave, > > > >=20 > > > > This definately looks like a Webmin bug, but I couldn't see=20 > > > > anything > >=20 > > > > in the code that could trigger it .. except perhaps incorrect=20 > > > > caching of the PAM login page in the browser. > > > >=20 > > > > I'm curious about why you enabled the full PAM conversations=20 > > > > feature > >=20 > > > > though - typically this is only needed if your PAM setup asks=20 > > > > for more > > >=20 > > > > than a username and password. Is this the case on your system?=20 > > > > If not, > > >=20 > > > > you could try turning it off.. > > > >=20 > > > > - Jamie > > > >=20 > > > > ---------------------------------------------------------------- > > > > -- > > > > -- > > > > -- > > > > -- > > > > - > > > > This SF.net email is sponsored by DB2 Express Download DB2=20 > > > > Express > > C > > > - > > >=20 > > > > the FREE version of DB2 express and take control of your XML. No > > > limits. > > > > Just data. Click to get it now. > > > > http://sourceforge.net/powerbar/db2/ > > > > - > > > > Forwarded by the Webmin mailing list at=20 > > > > web...@li... > > > > To remove yourself from this list, go to=20 > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > >=20 > > > > ---------------------------------------------------------------- > > > > -- > > > > -- > > > > -- > > > > -- > > > > - > > > > This SF.net email is sponsored by DB2 Express Download DB2=20 > > > > Express > > C > > > - > > >=20 > > > > the FREE version of DB2 express and take control of your XML. No > > > limits. > > > > Just data. Click to get it now. > > > > http://sourceforge.net/powerbar/db2/ > > > > - > > > > Forwarded by the Webmin mailing list at=20 > > > > web...@li... > > > > To remove yourself from this list, go to=20 > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > >=20 > > > > ---------------------------------------------------------------- > > > > -- > > > > -- > > > > -- > > > > --- This SF.net email is sponsored by DB2 Express Download DB2=20 > > > > Express > > >=20 > > > > C - the FREE version of DB2 express and take control of your XML. > > > > No > >=20 > > > > limits. Just data. Click to get it now. > > > > http://sourceforge.net/powerbar/db2/ > > > > - > > > > Forwarded by the Webmin mailing list at=20 > > > > web...@li... > > > > To remove yourself from this list, go to=20 > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > >=20 > > > ------------------------------------------------------------------ > > > -- > > > -- > > > -- > > > - > > > This SF.net email is sponsored by DB2 Express Download DB2 Express > C > > - > >=20 > > > the FREE version of DB2 express and take control of your XML. No > > limits. > > > Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at=20 > > > web...@li... > > > To remove yourself from this list, go to=20 > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > >=20 > > > ------------------------------------------------------------------ > > > -- > > > -- > > > --- This SF.net email is sponsored by DB2 Express Download DB2=20 > > > Express > >=20 > > > C - the FREE version of DB2 express and take control of your XML.=20 > > > No >=20 > > > limits. Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at=20 > > > web...@li... > > > To remove yourself from this list, go to=20 > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > >=20 > > -------------------------------------------------------------------- > > -- > > -- > > - > > This SF.net email is sponsored by DB2 Express Download DB2 Express C > - >=20 > > the FREE version of DB2 express and take control of your XML. No > limits. > > Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at=20 > > web...@li... > > To remove yourself from this list, go to=20 > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > >=20 > > -------------------------------------------------------------------- > > -- > > --- This SF.net email is sponsored by DB2 Express Download DB2=20 > > Express >=20 > > C - the FREE version of DB2 express and take control of your XML. No > > limits. Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at=20 > > web...@li... > > To remove yourself from this list, go to=20 > > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > ---------------------------------------------------------------------- > -- > - > This SF.net email is sponsored by DB2 Express Download DB2 Express C - > the FREE version of DB2 express and take control of your XML. No limits. > Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at=20 > web...@li... > To remove yourself from this list, go to=20 > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > ---------------------------------------------------------------------- > --- This SF.net email is sponsored by DB2 Express Download DB2 Express > C - the FREE version of DB2 express and take control of your XML. No=20 > limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at=20 > web...@li... > To remove yourself from this list, go to=20 > http://lists.sourceforge.net/lists/listinfo/webadmin-list ------------------------------------------------------------------------ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list ------------------------------------------------------------------------ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list |
From: Jamie C. <jca...@we...> - 2007-05-01 16:36:16
|
Hi Dave, That is a valid assumption - unfortunately, Webmin was setting this variable when it shouldn't have been in some cases. - Jamie On 1/May/2007 08:53 Dave Isaacs wrote .. > This appears to fix the problem. Thanks for your help. > > BTW, much of this problem exists because I, and some other themes, are > using the global $remote_user variable to detect whether or not the user > is logged in. The assumption is that if $remote_user is undef, then the > user is not logged in, and otherwise the user is logged in. Is this a > valid assumption, or is there a better way to test that a user is logged > in? > > Thanks again. > > Dave I > > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of Dave > Isaacs > Sent: Monday, April 30, 2007 10:18 AM > To: Webmin users list > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > authentication problem > > This appears to do the trick. > > Let me confirm with a completely fresh installation, and I will get back > to you. > > Thanks! > > Dave I > > -----Original Message----- > From: web...@li... > [mailto:web...@li...] On Behalf Of Jamie > Cameron > Sent: Saturday, April 28, 2007 12:43 AM > To: Webmin users list > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > authentication problem > > Hi Dave, > Ok, I found *another* bug that can cause this! Try re-downloading > miniserv.pl from that user, and let me know how it goes this time.. > > - Jamie > > On 27/Apr/2007 06:43 Dave Isaacs wrote .. > > I downloaded your new file and tried it out, but it made no > difference. > > I can still reproduce the problem as originally described. > > > > Dave I > > > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...] On Behalf Of > > Jamie Cameron > > Sent: Wednesday, April 25, 2007 3:38 PM > > To: Webmin users list > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > authentication problem > > > > Try that URL again now .. the miniserv.pl in 1.343 doesn't include the > > > fix. > > > > - Jamie > > > > On 25/Apr/2007 11:19 Dave Isaacs wrote .. > > > That URL returned a file not found error, so I downloaded the latest > > > > dev version (1.343) and took the miniserv.pl from that package, > > > updated it accordingly, and restarted. > > > > > > Nope, the problem still occurs. I did notice that now to recreate > > > the problem repeatedly I have to change the page I am on before > > > logging > > out. > > > For example, click on the Servers tab, logout, reproduce, click on > > > the > > > > > System tab, logout, reproduce, click on the Networking tab, logout, > > > reproduce, etc etc. > > > > > > Thanks > > > > > > Dave I > > > > > > > > > > > > -----Original Message----- > > > From: web...@li... > > > [mailto:web...@li...] On Behalf Of > > > Jamie Cameron > > > Sent: Wednesday, April 25, 2007 12:59 PM > > > To: Webmin users list > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > > authentication problem > > > > > > Hi Dave, > > > Hmm, perhaps I made some other miniserv.pl changes since 1.340 that > > > also contributed to this fix. > > > > > > You can get the latest version from > > http://fudu.webmin.com/miniserv.pl. > > > You'll need to fix up the #! line at the top after copying it into > > > place, and of course restart Webmin.. > > > > > > - Jamie > > > > > > On 25/Apr/2007 06:49 Dave Isaacs wrote .. > > > > Ummmm, I made the change that you suggested (I cut and pasted the > > > > corrected lines from your email), restarted Webmin, and it had no > > > > effect whatsoever. I am still able to reproduce the problem as > > > described. > > > > > > > > Thanks > > > > > > > > Dave I > > > > > > > > -----Original Message----- > > > > From: web...@li... > > > > [mailto:web...@li...] On Behalf Of > > > > Jamie Cameron > > > > Sent: Tuesday, April 24, 2007 9:40 PM > > > > To: Webmin users list > > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible PAM > > > > > authentication problem > > > > > > > > Hi Dave, > > > > Thanks for the detailed list of steps to re-produce this - I found > > > > > the > > > > > > > problem by following them, and will include a fix in the next > > > > Webmin > > > > > > release. > > > > Or if you don't want to wait, you can edit miniserv.pl and change > > > > the lines : > > > > > > > > $ENV{"REMOTE_USER"} = $authuser if (defined($authuser)); > > > > $ENV{"BASE_REMOTE_USER"} =$baseauthuser if ($authuser ne > > > > $baseauthuser); > > > > > > > > to : > > > > > > > > $ENV{"REMOTE_USER"} = $authuser; > > > > $ENV{"BASE_REMOTE_USER"} = $authuser ne $baseauthuser ? > > > > $baseauthuser : undef; > > > > > > > > - Jamie > > > > > > > > On 24/Apr/2007 13:43 Dave Isaacs wrote .. > > > > > I appear to have reproduced this issue without using my custom > > > > > theme > > > > > > > > or a special PAM library. > > > > > > > > > > The steps to reproduce: > > > > > > > > > > (1) Install Webmin 1.330. On my setup, Webmin is configured to > > > > > use > > > > > > > SSL > > > > > > > > > connections only. > > > > > (2) Login as root and go to the Webmin Configuration -> > > > > > Authentication > > > > > > > > > module. > > > > > (3) Turn on Full PAM Conversations and save. > > > > > (4) Go to the Webmin Configuration -> Webmin Themes > > > > > (5) Change to the MSC Linux Theme and save. > > > > > (6) Click on the System tab. > > > > > (7) Click on the Logout link. > > > > > (8) When prompted for the username, enter root and click > Continue. > > > > > (9) The page that prompts for the password appears, somewhat > > > > > messed > > > > up. > > > > > > > > > > At this point, you may be on a page that appears as in the > > > > > following > > > > > > > > screen shot: http://khendron.com/sandbox/login_problem.gif. Note > > > > > > that even though you are not logged in, the theme appears to > > > > > think > > > > > > > you are logged in and displays the tabs across the top of the > > page. > > > > > I also edited the MSC Linux Theme files to display the value of > > > > > $remote_user, > > > > > > > > > and at this point $remote_user is set to "root". > > > > > > > > > > Step (6) is important. You don't have to click on the System tab > > > > > > specifically. The idea is that you have to *not* be on the home > > > > > URL of > > > > > > > > > the webmin server. If you are https://servername:10000 the > > > > > problem > > > > > > > will not occur, but if you are on > > > > > https://servername:10000/some_page_or_module the problem will > > occur. > > > > > Perhaps the login process is trying to redirect to the referrer > > > > > page > > > > > > > > before the login is complete? > > > > > > > > > > Interestingly, the problem will occur only once. If you recreate > > > > > > the > > > > > > > > problem, complete the login and then pick it up again at step > > > > > (6), > > > > > > > the > > > > > > > > > problem will not reoccur. But if you clear the browser cache and > > > > > > then pick it up at step (6), then problem will reoccur (On my > > > > > custom > > > > > > > > theme, > > > > > > > > > the problem occurs every single time, regardless of caching). > > > > > Note > > > > > > > I've reproduced this using IE7 and FF2. > > > > > > > > > > I hope you are able to repeat this issue. I am totally > > > > > scratching my > > > > > > > > head on it and need some assistance. > > > > > > > > > > Thanks > > > > > > > > > > Dave I > > > > > > > > > > -----Original Message----- > > > > > From: web...@li... > > > > > [mailto:web...@li...] On Behalf > > > > > Of Dave > > > > > > > > > Isaacs > > > > > Sent: Tuesday, April 24, 2007 6:59 AM > > > > > To: Webmin users list > > > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible > > > > > PAM > > > > > > > authentication problem > > > > > > > > > > Though not included in the setup I described, we plan on > > > > > extending > > > > > > > the > > > > > > > > > Webmin login to include 2-factor authentication. This will > > > > > require > > > > > > > full PAM conversations. > > > > > > > > > > There have been reports of similar behaviour, dating back to > > > > > before pam conversations was turned on, that occurred after a > > > > > session timeout. The resulting login page (which prompted for > > > > > username and > > > > > password) also contained the "You are logged in ..." message. > > > > > That > > > > > > > bug > > > > > > > > > reports was using version 1.290. We are currently running 1.330. > > > > > > > > > > I will continue debugging. Are there any specific places I > > > > > should look > > > > > > > > > at in miniserv.pl? > > > > > > > > > > Thanks > > > > > > > > > > Dave I > > > > > > > > > > -----Original Message----- > > > > > From: web...@li... > > > > > [mailto:web...@li...] On Behalf > > > > > Of Jamie Cameron > > > > > Sent: Tuesday, April 24, 2007 12:44 AM > > > > > To: Webmin users list > > > > > Subject: Re: [webmin-l] Peculiar custom theme problem,possible > > > > > PAM > > > > > > > authentication problem > > > > > > > > > > On 23/Apr/2007 14:37 Dave Isaacs wrote .. > > > > > > My apologies for the long description that follows. I am > > > > > > having a most > > > > > > > > > > > peculiar problem and need to describe the setup in detail in > > > > > > order > > > > > > > > > to make any sense whatsoever. > > > > > > > > > > > > I have a custom Webmin theme that, among other things, > > > > > > displays the a string in the header of each page "You are > > > > > > logged in to HOSTNAME as USERNAME" where HOSTNAME and USERNAME > > > > > > > are the hostname > > > > > > > > > of the Webmin server and names of the logged in user, > > > respectively. > > > > > > > > > > > > The USERNAME string I am getting from the $remote_user global > > > > > variable. > > > > > > > > > > > > Also, I an using Full PAM Conversations, so when logging in, > > > > > > instead > > > > > > > > > > of a single form with Username and Password, logging in > > > > > > requires > > > 2 > > > > > pages. > > > > > > One for the Username and one of the Password. The "You are > > > > > > logged in > > > > > > > > > > ..." string is suppressed when $remote_user is empty, to avoid > > > > > > > displaying the message when you are logging in. > > > > > > > > > > > > Here's the problem: > > > > > > Sometimes (not all the time), if I log out as one user and > > > > > > then log in > > > > > > > > > > > immediately as another user, something odd occurs. Let's > > > > > > assume I am > > > > > > > > > > logged in as User1, and want to log in as User2. I click the > > > > > > Logout link, and get the page that prompts for the username. > I > > > > > > > enter User2 and click Continue. The next page prompts for the > > > > > > password, but it also displays the string "You are logged in > ... > > > > > > as User1." So halfway through the process of logging in as > > > > > > User2, I am seeing $remote_user being equal to "User1". > > > > > > > > > > > > I have no idea why this is occurring, but I think there are > > > > > > larger > > > > > > > > > ramifications to the issue because often (again not always) > > > > > > after this > > > > > > > > > > > occurs, miniserv.pl starts failing completely when logging in > > > > > > and will > > > > > > > > > > > start returning "403 Login failed" after entering the > username. > > > > > > At > > > > > > > > > this point the only solution I have is to shell into the box > > > > > > and > > > > > > > > restart Webmin. > > > > > > > > > > > > Thanks > > > > > > > > > > > > Dave Isaacs > > > > > > > > > > > > Oh yeah, this is running on Red Hat EL4, and I have specified > > > > > > the pam_radius_auth.so PAM library in /etc/pam.d/webmin. It > > > > > > all works fine, except for this periodic problem. > > > > > > > > > > Hi Dave, > > > > > > > > > > This definately looks like a Webmin bug, but I couldn't see > > > > > anything > > > > > > > > in the code that could trigger it .. except perhaps incorrect > > > > > caching of the PAM login page in the browser. > > > > > > > > > > I'm curious about why you enabled the full PAM conversations > > > > > feature > > > > > > > > though - typically this is only needed if your PAM setup asks > > > > > for more > > > > > > > > > than a username and password. Is this the case on your system? > > > > > If not, > > > > > > > > > you could try turning it off.. > > > > > > > > > > - Jamie > > > > > > > > > > ---------------------------------------------------------------- > > > > > -- > > > > > -- > > > > > -- > > > > > -- > > > > > - > > > > > This SF.net email is sponsored by DB2 Express Download DB2 > > > > > Express > > > C > > > > - > > > > > > > > > the FREE version of DB2 express and take control of your XML. No > > > > limits. > > > > > Just data. Click to get it now. > > > > > http://sourceforge.net/powerbar/db2/ > > > > > - > > > > > Forwarded by the Webmin mailing list at > > > > > web...@li... > > > > > To remove yourself from this list, go to > > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > > > > > > > ---------------------------------------------------------------- > > > > > -- > > > > > -- > > > > > -- > > > > > -- > > > > > - > > > > > This SF.net email is sponsored by DB2 Express Download DB2 > > > > > Express > > > C > > > > - > > > > > > > > > the FREE version of DB2 express and take control of your XML. No > > > > limits. > > > > > Just data. Click to get it now. > > > > > http://sourceforge.net/powerbar/db2/ > > > > > - > > > > > Forwarded by the Webmin mailing list at > > > > > web...@li... > > > > > To remove yourself from this list, go to > > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > > > > > > > ---------------------------------------------------------------- > > > > > -- > > > > > -- > > > > > -- > > > > > --- This SF.net email is sponsored by DB2 Express Download DB2 > > > > > Express > > > > > > > > > C - the FREE version of DB2 express and take control of your > XML. > > > > > No > > > > > > > > limits. Just data. Click to get it now. > > > > > http://sourceforge.net/powerbar/db2/ > > > > > - > > > > > Forwarded by the Webmin mailing list at > > > > > web...@li... > > > > > To remove yourself from this list, go to > > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > > > > > ------------------------------------------------------------------ > > > > -- > > > > -- > > > > -- > > > > - > > > > This SF.net email is sponsored by DB2 Express Download DB2 Express > > C > > > - > > > > > > > the FREE version of DB2 express and take control of your XML. No > > > limits. > > > > Just data. Click to get it now. > > > > http://sourceforge.net/powerbar/db2/ > > > > - > > > > Forwarded by the Webmin mailing list at > > > > web...@li... > > > > To remove yourself from this list, go to > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > > > > > ------------------------------------------------------------------ > > > > -- > > > > -- > > > > --- This SF.net email is sponsored by DB2 Express Download DB2 > > > > Express > > > > > > > C - the FREE version of DB2 express and take control of your XML. > > > > No > > > > > > limits. Just data. Click to get it now. > > > > http://sourceforge.net/powerbar/db2/ > > > > - > > > > Forwarded by the Webmin mailing list at > > > > web...@li... > > > > To remove yourself from this list, go to > > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > > > -------------------------------------------------------------------- > > > -- > > > -- > > > - > > > This SF.net email is sponsored by DB2 Express Download DB2 Express > C > > - > > > > > the FREE version of DB2 express and take control of your XML. No > > limits. > > > Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at > > > web...@li... > > > To remove yourself from this list, go to > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > > > -------------------------------------------------------------------- > > > -- > > > --- This SF.net email is sponsored by DB2 Express Download DB2 > > > Express > > > > > C - the FREE version of DB2 express and take control of your XML. No > > > > limits. Just data. Click to get it now. > > > http://sourceforge.net/powerbar/db2/ > > > - > > > Forwarded by the Webmin mailing list at > > > web...@li... > > > To remove yourself from this list, go to > > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > ---------------------------------------------------------------------- > > -- > > - > > This SF.net email is sponsored by DB2 Express Download DB2 Express C > - > > > the FREE version of DB2 express and take control of your XML. No > limits. > > Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at > > web...@li... > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > ---------------------------------------------------------------------- > > --- This SF.net email is sponsored by DB2 Express Download DB2 Express > > > C - the FREE version of DB2 express and take control of your XML. No > > limits. Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > - > > Forwarded by the Webmin mailing list at > > web...@li... > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > ------------------------------------------------------------------------ > - > This SF.net email is sponsored by DB2 Express Download DB2 Express C - > the FREE version of DB2 express and take control of your XML. No limits. > Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at > web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > ------------------------------------------------------------------------ > - > This SF.net email is sponsored by DB2 Express Download DB2 Express C - > the FREE version of DB2 express and take control of your XML. No limits. > Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at > web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > - > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list |