Menu
▾
▴
RE: [webmin-l] Webmin Servers, Broadcast/scan
|
From: Jamie C. <jca...@we...> - 2006-02-16 22:46:11
|
Just make sure that /etc/pam.d/passwd is setup to talk to LDAP, and that Usermin's Change Password module is setup to use PAM. - Jamie On 17/Feb/2006 09:42 Khan, Mohammed [SMO] wrote .. > Hello Jamie, > Do you know how can I use usermin to change my ldap password. Please need > your help. > > Thanks > Mohammed > > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Thursday, February 16, 2006 2:28 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > Did you set up /etc/pam.d/usermin as well? My last set of instructions > only > mentioned /etc/pam.d/webmin , sorry .. > > - Jamie > > On 17/Feb/2006 09:25 Khan, Mohammed [SMO] wrote .. > > Hi Jamie, > > Sorry to bug u sir. I am still getting the same error when login using > > ldap user into usermin. Here is error: > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user unknown > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication failure; > > logname= uid=0 euid=0 tty= ruser= rhost= > > > > And here is mt .ssh file > > #%PAM-1.0 > > auth required /lib/security/pam_securetty.so > > auth required /lib/security/pam_nologin.so > > auth required /lib/security/pam_env.so > > auth sufficient /lib/security/pam_ldap.so > > auth required /lib/security/pam_unix_auth.so use_first_pass # set_secrpc > > account required /lib/security/pam_unix.so > > account required /lib/security/pam_nologin.so > > session required /lib/security/pam_unix.so > > session required /lib/security/pam_limits.so > > > > > > Please lete me know.. > > > > Thanks > > > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...]On Behalf Of Jamie > > Cameron > > Sent: Friday, February 17, 2006 1:04 AM > > To: web...@li... > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > > > > Hi, > > Make sure that in /etc/pam.d/webmin there are entries to call pam_ldap.so > > , just like in your system's other PAM config files. Or just copy /etc/pam.d/ssh > > to /etc/pam.d/webmin , assuming that SSH logins as LDAP users are working. > > > > - Jamie > > > > -----Original Message----- > > > > From: "Khan, Mohammed [SMO]" <MK...@fr...> > > Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan > > Date: Fri 17 Feb 2006 8:39 am > > Size: 2K > > To: <web...@li...> > > > > Hi Jamie, > > I getting the following errors: > > Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: check pass; user unknown > > Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: authentication failure; > > logname= uid=0 euid=0 tty= ruser= rhost= > > > > When login with ldap user. > > > > Please advise. > > > > Thanks > > > > > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...]On Behalf Of Jamie > > Cameron > > Sent: Wednesday, February 15, 2006 7:31 PM > > To: web...@li... > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > > > > On 16/Feb/2006 13:13 Neal Morgan wrote .. > > > Jamie: > > > > > > Short answer: ethereal shows it still using port 10000 for broadcast. > > > > > > Long answer: I first set the UDP port to 6789, ran a netstat to confirm > > > a listener was in place there are none existed on 10000, then ran the > > > broadcast. > > > > I looked into this some more, and found the cause of this problem - the > > sending > > server isn't properly getting the UDP port to send to from it's own configuration. > > The work-around is to add the line > > > > listen=6789 > > > > to the file /etc/webmin/servers/config on the sending system. > > > > > On the multihome: the IPs resolve to different hosts and FQDNs. > > > > > > Both servers have 2 NICs: > > > > > > 10.X.X.X/255.255.255.0 > > > 66.X.X.X/255.255.255.224 > > > > > > Webmin broadcasts correctly to the expected two network addresses: > > > > > > 10.X.X.255 > > > 66.X.X.223 > > > > > > But it also adds in a broadcast to all networks, and a broadcast to > the > > > 10 net as a class A: > > > > > > 255.255.255.255 > > > 10.255.255.255 > > > > > > Ethereal shows the 10.255.255.255 ignored (not on my network), the > > > 10.x.x.255 received by the first NIC, and the 66.X.X.223 and > > > 255.255.255.255 received by the second NIC. > > > > > > So - it should receive 3 responses. Somehow, it is already de-duping > > > them and concluding there are 2 new servers to add. I'm OK with that > > - > > > except it uses the same host name and port for both. So, there is > > > nothing I can see from the edit screen that indicates why it thinks > they > > > are different. > > > > > > Furthermore, if I broadcast again, I would expect it to either re-add > > > both, or add nothing. Instead, it adds just one of them! Every new > > > broadcast adds one more server with the same name, same config settings. > > > > > > > > > Hope that helps and wasn't too much information. > > > > Ok, I see what is going on how - Webmin isn't handling a packet being > > received twice from the same address in the same scan. This will be fixed > > in the next release though. > > > > - Jamie > > > > > > ------------------------------------------------------- > > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > > files > > for problems? Stop! Download the new AJAX search engine that makes > > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 > > > > --- message truncated --- > > > > > > > > > > ------------------------------------------------------- > > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > > files > > for problems? Stop! Download the new AJAX search engine that makes > > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 > > - > > Forwarded by the Webmin mailing list at web...@li... > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > Notice: All email and instant messages (including attachments) sent > to > > or from Franklin Templeton Investments (FTI) personnel may be retained, > > monitored and/or reviewed by FTI and its agents, or authorized > > law enforcement personnel, without further notice or consent. > > > > > > ------------------------------------------------------- > > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > > files > > for problems? Stop! Download the new AJAX search engine that makes > > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > > http://sel.as-us.falkag.net/sel?cmd- > > Forwarded by the Webmin mailing list at web...@li... > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 > - > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > Notice: All email and instant messages (including attachments) sent to > or from Franklin Templeton Investments (FTI) personnel may be retained, > monitored and/or reviewed by FTI and its agents, or authorized > law enforcement personnel, without further notice or consent. > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd- > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list |
