webadmin-devel — The webmin development mailing list

[webmin-devel] ssh to a diff host via webmin

[Sandro D. <san...@ti...>]

hi,

  I'd like to write a simple module to write conf for a tunnel with vtun. I
  already wrote a basic tool that generates 2 conf that shoud go in the
  server host and in the client. My problem is that I'd like to be able to
  prompt the user for an IP and a password and write directly the
  configuration to the remote host. How can I do that? If I exec scp how can
  I provide a password? (I'm not in the possibility to exchange authorized
  keys...). 

  Thanks in advance
  snadro
  *:-)


-- 
Sandro Dentella  *:-)
e-mail: san...@ti... 
http://www.tksql.org                    TkSQL Home page - My GPL work

[webmin-devel] ircd

[<ve...@gm...>]

hi there,

if you noticed i have posted a message to the usual webmin list that im
writing a ircd server.
At this point im so far with developement that i think im going to
upload the first alpha release in some days. with this release
the user will be able to configure the whole unrealircd.conf config file.
i do not want to do things twice, so i just wanted to say that no one
needs to start to write a ircd module...

another question: i'm really interested in some statistics e.g. how
many ppl actually use webmin or do download the releases,
it would be also interesting to know how many ppl have
subscribed to this dev list and to other lists, too.

webmin is of cource not the only one linux administrating tool,
the oter polular tool is linuxconf, but its not as nice as webmin ;)

and the most interesting thing is why does noone has written a
ircd module, yet? 
i saw that some ppl on the regular list are interested, but
is it really neceserry?

thanks
in regards
wladi

-- 
+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!

Re: [webmin-devel] Question useradmin layout

[Jamie C. <jca...@we...>]

On Fri, 2003-05-23 at 10:05, Clemens Oertel wrote:
> Hi alltogether,
> 
> while trying to write some to code to synchronize users among multiple 
> machines upon creation/modification/deletion, I noticed that many 
> functionality lies in the corresponding .cgi-files, not in the user-lib.pl.
> 
> My naive idea was to have a useradmin_update.pl file on the master machine, 
> with something like:
> 
> &remote_foreign_call('my_user_synchronizer', 'create', %{$user_reference});
> 
> and on the client machines a module called my_user_synchronizer with a 
> lib-file containing:
> 
> sub create {
> 	my (%user) = @_;
> 
> 	...
> 	&foreign_call('useradmin', 'create_user', \%user);
> 	&foreign_call('useradmin', 'make_changes');
> 	...
> }
> 
> Works great, user gets created (or deleted or whatever).
> However, this way I'm missing all the extended functionality, such as 
> group changes, home dir movings etc. I also don't want to cut'n'paste code out 
> of the respective cgi-scripts (maintainability ...).
> 
> So it occured to me that clean one-function interfaces for each of the user 
> maintenance tasks (create, modify, delete) would be the perfect solution. 
> Maybe with an additional parameter to turn on/off all output.
> 
> Since I'm not aware of the rationale for the current layout of the useradmin 
> module, I'd like to ask for some comments on that issue. MAybe somebody even 
> has found a working solution already?

Unfortunately, there is no single clean function for creating a user
with all the extras at the moment. The only good reason for the current
design is that it allows the creation of users without a home directory,
or without a corresponding Samba account. A few other modules do just
this for creating mailboxes and so on.

So anyway, right now you need to call several functions to create a
user. Have a look at the Cluster Users and Groups module's
create_user.cgi script to see how it is done remotely..

 - Jamie

[webmin-devel] Question useradmin layout

[Clemens O. <cl...@cs...>]

Hi alltogether,

while trying to write some to code to synchronize users among multiple 
machines upon creation/modification/deletion, I noticed that many 
functionality lies in the corresponding .cgi-files, not in the user-lib.pl.

My naive idea was to have a useradmin_update.pl file on the master machine, 
with something like:

&remote_foreign_call('my_user_synchronizer', 'create', %{$user_reference});

and on the client machines a module called my_user_synchronizer with a 
lib-file containing:

sub create {
	my (%user) = @_;

	...
	&foreign_call('useradmin', 'create_user', \%user);
	&foreign_call('useradmin', 'make_changes');
	...
}

Works great, user gets created (or deleted or whatever).
However, this way I'm missing all the extended functionality, such as 
group changes, home dir movings etc. I also don't want to cut'n'paste code out 
of the respective cgi-scripts (maintainability ...).

So it occured to me that clean one-function interfaces for each of the user 
maintenance tasks (create, modify, delete) would be the perfect solution. 
Maybe with an additional parameter to turn on/off all output.

Since I'm not aware of the rationale for the current layout of the useradmin 
module, I'd like to ask for some comments on that issue. MAybe somebody even 
has found a working solution already?


Cheers & thanks,
Clemens

Re: [webmin-devel] Module RPM naming convention

[Joe C. <jo...@sw...>]

Jamie Cameron wrote:
> Joe Cooper wrote:

>> But perhaps rather than sending via email, you should post it to the 
>> devel page?  I guess I'm not the only one making RPMs of custom 
>> modules on a regular basis.
> 
> 
> Actually, I just noticed that it is already on the devel page under
> http://www.webmin.com/modules.html#wbm
> :-)

Perfect!  I've been reading the page so long I'm blind to what's on it. ;-)
-- 
Joe Cooper <jo...@sw...>
Web caching appliances and support.
http://www.swelltech.com

Re: [webmin-devel] Module RPM naming convention

[Jamie C. <jca...@we...>]

Joe Cooper wrote:
> Jamie Cameron wrote:
> 
>> Joe Cooper wrote:
>>
>>> Hey Jamie and all,
>>>
>>> I know I've seen you mention this somewhere before, but I can't 
>>> recall the specifics.
>>>
>>> What naming convention is Webmin looking for when installing a module 
>>> from RPM using the Webmin Modules module?  I'm rebuilding all of my 
>>> module RPMs for Red Hat 9, and would like to get it right this time.  
>>> ;-)
>>
>>
>>
>> They have to be named wbm-<modulename> , such as wbm-ppp-client . I 
>> have a script that can construct such an RPM from a module directory 
>> if you are planning on building a few.. The %post script of the RPM 
>> has to follow certain standards, like adding themselves to the 
>> /etc/webmin/webmin.acl file and copying config files to 
>> /etc/webmin/<modulename> .
> 
> 
> I have quite a few custom modules that I package, and I have a template 
> spec file that I use, but it does leave a few installation steps out, so 
> I have to finish up manually (mainly just making the module visible to 
> those users who need to see it).  So, a script to auto-generate would be 
> cool.
> 
> But perhaps rather than sending via email, you should post it to the 
> devel page?  I guess I'm not the only one making RPMs of custom modules 
> on a regular basis.

Actually, I just noticed that it is already on the devel page under
http://www.webmin.com/modules.html#wbm
:-)

  - Jamie

Re: [webmin-devel] Module RPM naming convention

[Joe C. <jo...@sw...>]

Jamie Cameron wrote:
> Joe Cooper wrote:
> 
>> Hey Jamie and all,
>>
>> I know I've seen you mention this somewhere before, but I can't recall 
>> the specifics.
>>
>> What naming convention is Webmin looking for when installing a module 
>> from RPM using the Webmin Modules module?  I'm rebuilding all of my 
>> module RPMs for Red Hat 9, and would like to get it right this time.  ;-)
> 
> 
> They have to be named wbm-<modulename> , such as wbm-ppp-client . I have 
> a script that can construct such an RPM from a module directory if you 
> are planning on building a few.. The %post script of the RPM has to 
> follow certain standards, like adding themselves to the 
> /etc/webmin/webmin.acl file and copying config files to 
> /etc/webmin/<modulename> .

I have quite a few custom modules that I package, and I have a template 
spec file that I use, but it does leave a few installation steps out, so 
I have to finish up manually (mainly just making the module visible to 
those users who need to see it).  So, a script to auto-generate would be 
cool.

But perhaps rather than sending via email, you should post it to the 
devel page?  I guess I'm not the only one making RPMs of custom modules 
on a regular basis.

Thanks for the quick reply.
-- 
Joe Cooper <jo...@sw...>
Web caching appliances and support.
http://www.swelltech.com

Re: [webmin-devel] Module RPM naming convention

[Jamie C. <jca...@we...>]

Joe Cooper wrote:
> Hey Jamie and all,
> 
> I know I've seen you mention this somewhere before, but I can't recall 
> the specifics.
> 
> What naming convention is Webmin looking for when installing a module 
> from RPM using the Webmin Modules module?  I'm rebuilding all of my 
> module RPMs for Red Hat 9, and would like to get it right this time.  ;-)

They have to be named wbm-<modulename> , such as wbm-ppp-client . I 
have a script that can construct such an RPM from a module directory 
if you are planning on building a few.. The %post script of the RPM 
has to follow certain standards, like adding themselves to the 
/etc/webmin/webmin.acl file and copying config files to 
/etc/webmin/<modulename> .

  - Jamie

[webmin-devel] Module RPM naming convention

[Joe C. <jo...@sw...>]

Hey Jamie and all,

I know I've seen you mention this somewhere before, but I can't recall 
the specifics.

What naming convention is Webmin looking for when installing a module 
from RPM using the Webmin Modules module?  I'm rebuilding all of my 
module RPMs for Red Hat 9, and would like to get it right this time.  ;-)

Thanks!
-- 
Joe Cooper <jo...@sw...>
Web caching appliances and support.
http://www.swelltech.com

Re: [webmin-devel] mode 700 directories

[Jamie C. <jca...@we...>]

Those directory permissions are definately wrong, as all files in the 
webmin programs dir should be readable by all users (by writable only 
by root). I'll definately fix this in the next release ..

The other permission problems aren't such a big deal, but I guess they 
should be fixed up for consistency's sake as well :)

  - Jamie

ra...@si... wrote:
> 
>   Hope this doesn't open a can of worms, but as I look more, there seems
> to be an odd set of permissions, some 755 others 775, the occasional
> 744, and a 655 (not to mention the 644/664 differences).  Would it not
> make more sense to have a common set of modes (not to mention a suggested
> owner:group selection)?
> 
>   Thanks again!
> 
> 	---- Randy
> 
> On Fri, 16 May 2003 ra...@si... wrote:
> 
> 
>>
>>  I recently noticed that 5 directories
>>
>>    time/lang
>>    time/help
>>    time/images
>>    mysql/images
>>    inittab/help
>>
>> Are all mode 700.  Is there a reason this was done, or is it some
>>artifact?
>>
>>
>>  Thanks!
>>
>>
>>	---- Randy

Re: [webmin-devel] mode 700 directories

[<ra...@si...>]

  Hope this doesn't open a can of worms, but as I look more, there seems
to be an odd set of permissions, some 755 others 775, the occasional
744, and a 655 (not to mention the 644/664 differences).  Would it not
make more sense to have a common set of modes (not to mention a suggested
owner:group selection)?

  Thanks again!

	---- Randy

On Fri, 16 May 2003 ra...@si... wrote:

>
>
>   I recently noticed that 5 directories
>
>     time/lang
>     time/help
>     time/images
>     mysql/images
>     inittab/help
>
>  Are all mode 700.  Is there a reason this was done, or is it some
> artifact?
>
>
>   Thanks!
>
>
> 	---- Randy
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: If flattening out C++ or Java
> code to make your application fit in a relational database is painful,
> don't do it! Check out ObjectStore. Now part of Progress Software.
> http://www.objectstore.net/sourceforge
> -
> Forwarded by the Webmin development list at web...@we...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-devel
>

[webmin-devel] mode 700 directories

[<ra...@si...>]

  I recently noticed that 5 directories

    time/lang
    time/help
    time/images
    mysql/images
    inittab/help

 Are all mode 700.  Is there a reason this was done, or is it some
artifact?


  Thanks!


	---- Randy

Re: miniserv.pem

[<Rick H. <byt...@by...>]

A Thawte or Verasign cert works fine but for CAs using Entrust, GTE, and others for their root, a chained cert with the root and intermediate certificate(s) is needed or the browser won't recognize the CA as trustworthy.

More details can be found at 

http://www.instantssl.com/support/cert_installation/index.html

It would be nice to see Webmin added to the list of supported  servers along with the likes of Plesk, Hsphere, Ensim and others. : )

Jamie Cameron <jca...@we...> wrote ..
> I'm surprised that webmin cares at all, because it never tries to 
> validate the server cert. What goes wrong exactly?
> 
>   - Jamie
> 
> byt...@by... wrote:
> > The server's own cert.
> > 
> > Thanks,
> > 
> > Rick
> > 
> > Jamie Cameron <jca...@we...> wrote ..
> > 
> >>byt...@by... wrote:
> >> > Jamie,
> >> >
> >> > Any plans to allow chained root certificates? InstantSSL and others
> >> > now provide reasonably priced SSL Certs which would be great for
> >> > use with Webmin/Usermin.
> >>
> >>Do you mean for SSL client authentication, or for the webmin server's
> >>own SSL certificate?
> >>
> >>  - Jamie
> 
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> -
> Forwarded by the Webmin development list at web...@we...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-devel

Re: miniserv.pem

[Jamie C. <jca...@we...>]

I'm surprised that webmin cares at all, because it never tries to 
validate the server cert. What goes wrong exactly?

  - Jamie

byt...@by... wrote:
> The server's own cert.
> 
> Thanks,
> 
> Rick
> 
> Jamie Cameron <jca...@we...> wrote ..
> 
>>byt...@by... wrote:
>> > Jamie,
>> >
>> > Any plans to allow chained root certificates? InstantSSL and others
>> > now provide reasonably priced SSL Certs which would be great for
>> > use with Webmin/Usermin.
>>
>>Do you mean for SSL client authentication, or for the webmin server's 
>>own SSL certificate?
>>
>>  - Jamie

Re: Repackaging webmin

[Jamie C. <jca...@we...>]

Paul Reilly wrote:
> Hi,
>  
> Is there a way of repackaging Webmin from my Solaris machine to include 
> my own modules.
>  
> I want to install on another machine without having to individually 
> install each module.

If you are just using the tar.gz package, this is easy. Just do the 
following :

  - Extract the .tar.gz file somewhere
  - In the newly created webmin-1.XXX directory, extract each of the 
module .wbm files, which are really just tar files. Each will create a 
new module subdirectory in addition to those already there.
  - Re-tar up the directory with a command like :
    tar cvzf webmin-1.XXX-with-extras.tar.gz webmin-1.XXX

Doing this for the Solaris package is a bit trickier though ..

  - Jamie

Re: miniserv.pem

[<Rick H. <byt...@by...>]

The server's own cert.

Thanks,

Rick

Jamie Cameron <jca...@we...> wrote ..
> byt...@by... wrote:
>  > Jamie,
>  >
>  > Any plans to allow chained root certificates? InstantSSL and others
>  > now provide reasonably priced SSL Certs which would be great for
>  > use with Webmin/Usermin.
> 
> Do you mean for SSL client authentication, or for the webmin server's 
> own SSL certificate?
> 
>   - Jamie
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> -
> Forwarded by the Webmin development list at web...@we...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-devel

Re: miniserv.pem

[Jamie C. <jca...@we...>]

byt...@by... wrote:
 > Jamie,
 >
 > Any plans to allow chained root certificates? InstantSSL and others
 > now provide reasonably priced SSL Certs which would be great for
 > use with Webmin/Usermin.

Do you mean for SSL client authentication, or for the webmin server's 
own SSL certificate?

  - Jamie

miniserv.pem

[<Rick H. <byt...@by...>]

Jamie,

Any plans to allow chained root certificates? InstantSSL and others now provide reasonably priced SSL Certs which would be great for use with Webmin/Usermin. 

Thanks,

Rick Hubbard
ri...@by...
bytemarks.com

Re: miniserv.pem / apache.pem

[Jamie C. <jca...@we...>]

Sandro Dentella wrote:
> Hi everybody,
> 
>    Is there any counterindication to symlink apache.pem and iniserv.pem?
>    
>    The aim is to avoid confusing people that don't understand why the same
>    "server" (the linux box) is prompting 2 certificates.

Any PEM file will work fine, even one that is a symlink ..

  - Jamie

miniserv.pem / apache.pem

[Sandro D. <san...@ti...>]

Hi everybody,

   Is there any counterindication to symlink apache.pem and iniserv.pem?
   
   The aim is to avoid confusing people that don't understand why the same
   "server" (the linux box) is prompting 2 certificates.

   Thanks
   sandro
   *:-)



-- 
Sandro Dentella  *:-)
e-mail: san...@ti... 
http://www.tksql.org                    TkSQL Home page - My GPL work

OpenLDAP Webmin Module

[Arunvijai <aru...@ho...>]

Hello Everyone,

I have a request for all Webmin Module Developers.
We have a third party webmin module for OpenLDAP =
.(http://gaia.anet.fr/webmin/openldap/)
But this an ALPHA module.I see no developement on this most-exiting =
module.

Jamie, why dont you include OpenLDAP module in Standard webmin base?
This is just a request from all the developers who use OpenLDAP.
Since Please consider developing an OpenLDAP webmin module.

- Arun

Re: Advice on Compact Flash Operation required

[Jamie C. <jca...@we...>]

On Tue, 2003-04-08 at 21:04, Thomas P. Jones wrote:
> Hi folks,
> 
> I'm currently setting up a linux unit to boot and operate 
> from a compact flash disk (SanDisk).
> I'd like to use webmin to configure/monitor this unit.
> 
> The main goal is to reduce any writes caused by 
> webmin to the compact flash disk -  since it has a
> limited life time regarding writes to it. So any temporary
> files created during the operation of webmin I'd like
> to reduce or eliminate.
> 
> I'll be putting /tmp and /var to a RAM Filesystem so
> that will help there for any writes webmin makes
> to those dirs.
> 
> The other main thing I can think of regarding webmin
> is the creation/deletion of lock files by the lock_file and
> unlock_file functions. My idea here is to modify these
> functions to create/delete this lock file from under the 
> /tmp/.webmin dir (ie the pathname of the file with the
> .lock extension could be created with the root dir
> being /tmp/.webmin instead of /. 
> eg /tmp/.webmin/etc/resolv.conf.lock instead of
> /etc/resolv.conf.lock)
> 
> Is there any other element of webmin that I have
> overlooked that should need changing as well ?
> 
> I'd be interested in any advice you may have on 
> this matter. Thanks a lot.

Sounds like quite an interesting project .. Anyway, the most commonly
written-to files by webmin are :

- Temp files in /tmp/.webmin
- Lock files just about anywhere, like /etc/passwd.lock
- Logs and the PID file in /var/webmin
- Some files in /etc/webmin, such as the per-module config files.
However, these are nowhere near as frequently modified as the first
three ..
- The webmin root directory /usr/libexec/webmin. This is never changed
unless a clone of a module is created..

So it looks like you have the important ones covered.

 - Jamie

Re: Open File Manager with a specific directory?

[Jamie C. <jca...@we...>]

No, it's not possible - however, it could be implemented relatively
easily in a future version, perhaps by a parameter passed to the file
manager's index.cgi. I'll add it to my TODO list ..

 - Jamie

On Wed, 2003-04-09 at 06:08, Jennifer Cranfill wrote:
> Hi, I'm working on a webmin module, and I have a page where I would like to
> open File Manager to a specific directory (to make it easier for the user
> to edit the files in that directory). Is this possible? The behavior I
> would like to see is similar to the behavior of File Manager when root is
> set to a specific directory in the acl file. However, I don't want to
> change the acl file, but would like to be able to pass a directory
> parameter to File Manager (which would only open the directory if the user
> had acl access).
> 
> If this behavior isn't possible, that's okay, I'll just instruct the user
> to browse to the needed directory. Thanks for your help.
> 
> Regards,
> Jennifer Cranfill
> AIX/Linux Cluster Development, IBM, Poughkeepsie, NY
> Email: jc...@us...    Phone: 845-433-6656, TL 293-6656
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: ValueWeb: 
> Dedicated Hosting for just $79/mo with 500 GB of bandwidth! 
> No other company gives more support or power for your dedicated server
> http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/
> -
> Forwarded by the Webmin development list at web...@we...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-devel
> 

Open File Manager with a specific directory?

[Jennifer C. <jc...@us...>]

Hi, I'm working on a webmin module, and I have a page where I would like to
open File Manager to a specific directory (to make it easier for the user
to edit the files in that directory). Is this possible? The behavior I
would like to see is similar to the behavior of File Manager when root is
set to a specific directory in the acl file. However, I don't want to
change the acl file, but would like to be able to pass a directory
parameter to File Manager (which would only open the directory if the user
had acl access).

If this behavior isn't possible, that's okay, I'll just instruct the user
to browse to the needed directory. Thanks for your help.

Regards,
Jennifer Cranfill
AIX/Linux Cluster Development, IBM, Poughkeepsie, NY
Email: jc...@us...    Phone: 845-433-6656, TL 293-6656

Advice on Compact Flash Operation required

[Thomas P. J. <Tom...@oc...>]

Hi folks,

I'm currently setting up a linux unit to boot and operate 
from a compact flash disk (SanDisk).
I'd like to use webmin to configure/monitor this unit.

The main goal is to reduce any writes caused by 
webmin to the compact flash disk -  since it has a
limited life time regarding writes to it. So any temporary
files created during the operation of webmin I'd like
to reduce or eliminate.

I'll be putting /tmp and /var to a RAM Filesystem so
that will help there for any writes webmin makes
to those dirs.

The other main thing I can think of regarding webmin
is the creation/deletion of lock files by the lock_file and
unlock_file functions. My idea here is to modify these
functions to create/delete this lock file from under the 
/tmp/.webmin dir (ie the pathname of the file with the
.lock extension could be created with the root dir
being /tmp/.webmin instead of /. 
eg /tmp/.webmin/etc/resolv.conf.lock instead of
/etc/resolv.conf.lock)

Is there any other element of webmin that I have
overlooked that should need changing as well ?

I'd be interested in any advice you may have on 
this matter. Thanks a lot.

/regards/tom