webadmin-devel — The webmin development mailing list

Re: Usermonitor for FreeBSD

[Support <su...@ea...>]

Alexander,

I am a FreeBSD dude, if you need help testing, I can help you!

Diego


----- Original Message ----- 
From: "Gehrigal - Webminprojects" <we...@ge...>
To: "Mailinglist Webmin Dev" <web...@li...>
Sent: Monday, August 05, 2002 3:11 PM
Subject: Usermonitor for FreeBSD


> Hi All
> 
> i develope a Module named Usermonitor (
> http://www.gehrigal.net/projects/webmin_usermonitor/ ).
> I need some help for testing this software on FreeBSD.
> 
> Please send me an email if you want to help me.
> 
> Thanks!
> 
> 
> bye
> 
> Alexander
> 
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> -
> Forwarded by the Webmin development list at web...@we...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-devel
> 

Usermonitor for FreeBSD

[Gehrigal - W. <we...@ge...>]

Hi All

i develope a Module named Usermonitor (
http://www.gehrigal.net/projects/webmin_usermonitor/ ).
I need some help for testing this software on FreeBSD.

Please send me an email if you want to help me.

Thanks!


bye

Alexander

Re: running process from webmin - times-out?

[Jamie C. <jca...@we...>]

Yes, that is best , because if you use the backquote
operator in perl then all the output from your program
will be read into a variable which could potentially
get huge.

You could also display the output from the program
in the browser, with code like :

open(OUTOUT, "/usr/local/execute/fire 2>&1 |");
while(<OUTPUT>) {
	print;
	}
close(OUTPUT);

but that would also be a bad idea if lots of output
is generated.

  - Jamie

Diego Montalvo wrote:

> Jamie,
> 
> exactly,  the process does produce alot of output in
> the shell.  sometimes hours of output.
> 
> So I should use the following command?  
> system("/usr/local/excute/fire >/dev/null 
> 2>&1 </dev/null &");
> 
> 
> 
> Diego
> 
> --- Jamie Cameron <jca...@we...> wrote:
> 
>>Support wrote:
>>
>>
>>>Hello, 
>>>
>>>Additional information regarding "running process
>>>
>>from webmin - 
>>
>>>times-out?"   question
>>>
>>>the process actually only runs for about 
>>>
>>6:55-6:56 minutes then freezes 
>>
>>>until I "kill -9" the process.
>>>
>>
>>Does this process produce a lot of output when you
>>run it from the
>>shell prompt?
>>
>>
>>
>>>the parent process is: 
>>>
>>>
>>>
> /usr/bin/perl-w/usr/local/lib/webmin/howdy_index/c.cgi
> 
>>....
>>
>>>shouldn't it be running under /sbin/init ...
>>>
>>
>>No, because webmin is still waiting for output from
>>the
>>process as you are running it within backquotes. For
>>a long-running
>>command, it may be better to put it in the
>>background with
>>code like  system("/usr/local/excute/fire >/dev/null
>>2>&1 </dev/null &");
>>assuming you don't want to get the output.
>>
>>  - Jamie
>>
>>
>>
>>> 
>>>
>>>Diego
>>>
>>> 
>>>
>>> 
>>>
>>>    ----- Original Message -----
>>>
>>>    From: Support <mailto:su...@ea...>
>>>
>>>    To: web...@li...
>>>    <mailto:web...@li...>
>>>
>>>    Sent: Thursday, August 01, 2002 2:43 PM
>>>
>>>    Subject: running process from webmin -
>>>
>>times-out?
>>
>>>    Hello,
>>>
>>>    I am developing a module, which runs a unix
>>>
>>program.  The progam
>>
>>>    works fine from unix shell, or from Webmin if
>>>
>>the process is short. 
>>
>>>    After about 20 minutes I notice that the
>>>
>>process is still running,
>>
>>>    but is not doing anything "idle" or frozen,
>>>
>>and i must kill the
>>
>>>    process.  If I leave the computer overnight, I
>>>
>>come back to " no
>>
>>>    more SWAP space" errors, the computer locked
>>>
>>and must restart. 
>>
>>>    I am using the following command "my
>>>    $results=`/usr/local/excute/fire`;"
>>>
>>>     
>>>
>>>    what am i doing wrong?
>>>
>>>     
>>>
>>>    thanks,
>>>
>>>     
>>>
>>>    Diego

Re: running process from webmin - times-out?

[Support <su...@ea...>]

Jamie,

I am trying the following code:
system("/usr/local/excute/fire >/dev/null 2>&1 </dev/null &");

I will let know if it works, another thing...

How do I have a process print out what is going on in shell, onto a webmin
module (browser)?

Thanks,

Diego






----- Original Message -----
From: "Jamie Cameron" <jca...@we...>
To: <web...@li...>
Sent: Thursday, August 01, 2002 10:13 PM
Subject: Re: running process from webmin - times-out?


> Support wrote:
>
> > Hello,
> >
> > Additional information regarding "running process from webmin -
> > times-out?"   question
> >
> > the process actually only runs for about  6:55-6:56 minutes then freezes
> > until I "kill -9" the process.
>
>
> Does this process produce a lot of output when you run it from the
> shell prompt?
>
>
> > the parent process is:
> >
> > /usr/bin/perl-w/usr/local/lib/webmin/howdy_index/c.cgi ....
> >
> > shouldn't it be running under /sbin/init ...
>
>
> No, because webmin is still waiting for output from the
> process as you are running it within backquotes. For a long-running
> command, it may be better to put it in the background with
> code like  system("/usr/local/excute/fire >/dev/null 2>&1 </dev/null &");
> assuming you don't want to get the output.
>
>   - Jamie
>
>
> >
> >
> > Diego
> >
> >
> >
> >
> >
> >     ----- Original Message -----
> >
> >     From: Support <mailto:su...@ea...>
> >
> >     To: web...@li...
> >     <mailto:web...@li...>
> >
> >     Sent: Thursday, August 01, 2002 2:43 PM
> >
> >     Subject: running process from webmin - times-out?
> >
> >     Hello,
> >
> >     I am developing a module, which runs a unix program.  The progam
> >     works fine from unix shell, or from Webmin if the process is short.
> >     After about 20 minutes I notice that the process is still running,
> >     but is not doing anything "idle" or frozen, and i must kill the
> >     process.  If I leave the computer overnight, I come back to " no
> >     more SWAP space" errors, the computer locked and must restart.
> >
> >     I am using the following command "my
> >     $results=`/usr/local/excute/fire`;"
> >
> >
> >
> >     what am i doing wrong?
> >
> >
> >
> >     thanks,
> >
> >
> >
> >     Diego
> >
> >
> >
> >
>
>
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> -
> Forwarded by the Webmin development list at web...@we...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-devel
>

Re: running process from webmin - times-out?

[Diego M. <dmo...@ya...>]

Jamie,

exactly,  the process does produce alot of output in
the shell.  sometimes hours of output.

So I should use the following command?  
system("/usr/local/excute/fire >/dev/null 
2>&1 </dev/null &");



Diego

--- Jamie Cameron <jca...@we...> wrote:
> Support wrote:
> 
> > Hello, 
> > 
> > Additional information regarding "running process
> from webmin - 
> > times-out?"   question
> > 
> > the process actually only runs for about 
> 6:55-6:56 minutes then freezes 
> > until I "kill -9" the process.
> 
> 
> Does this process produce a lot of output when you
> run it from the
> shell prompt?
> 
> 
> > the parent process is: 
> > 
> >
>
/usr/bin/perl-w/usr/local/lib/webmin/howdy_index/c.cgi
> ....
> > 
> > shouldn't it be running under /sbin/init ...
> 
> 
> No, because webmin is still waiting for output from
> the
> process as you are running it within backquotes. For
> a long-running
> command, it may be better to put it in the
> background with
> code like  system("/usr/local/excute/fire >/dev/null
> 2>&1 </dev/null &");
> assuming you don't want to get the output.
> 
>   - Jamie
> 
> 
> >  
> > 
> > Diego
> > 
> >  
> > 
> >  
> > 
> >     ----- Original Message -----
> > 
> >     From: Support <mailto:su...@ea...>
> > 
> >     To: web...@li...
> >     <mailto:web...@li...>
> > 
> >     Sent: Thursday, August 01, 2002 2:43 PM
> > 
> >     Subject: running process from webmin -
> times-out?
> > 
> >     Hello,
> > 
> >     I am developing a module, which runs a unix
> program.  The progam
> >     works fine from unix shell, or from Webmin if
> the process is short. 
> >     After about 20 minutes I notice that the
> process is still running,
> >     but is not doing anything "idle" or frozen,
> and i must kill the
> >     process.  If I leave the computer overnight, I
> come back to " no
> >     more SWAP space" errors, the computer locked
> and must restart. 
> > 
> >     I am using the following command "my
> >     $results=`/usr/local/excute/fire`;"
> > 
> >      
> > 
> >     what am i doing wrong?
> > 
> >      
> > 
> >     thanks,
> > 
> >      
> > 
> >     Diego
> > 
> > 
> >      
> > 
> 
> 
> 
> 
> 
>
-------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> -
> Forwarded by the Webmin development list at
> web...@we...
> To remove yourself from this list, go to
>
http://lists.sourceforge.net/lists/listinfo/webadmin-devel
> 
> 
> 


__________________________________________________
Do You Yahoo!?
Yahoo! Health - Feel better, live better
http://health.yahoo.com

Re: running process from webmin - times-out?

[Jamie C. <jca...@we...>]

Support wrote:

> Hello, 
> 
> Additional information regarding "running process from webmin - 
> times-out?"   question
> 
> the process actually only runs for about  6:55-6:56 minutes then freezes 
> until I "kill -9" the process.


Does this process produce a lot of output when you run it from the
shell prompt?


> the parent process is: 
> 
> /usr/bin/perl-w/usr/local/lib/webmin/howdy_index/c.cgi ....
> 
> shouldn't it be running under /sbin/init ...


No, because webmin is still waiting for output from the
process as you are running it within backquotes. For a long-running
command, it may be better to put it in the background with
code like  system("/usr/local/excute/fire >/dev/null 2>&1 </dev/null &");
assuming you don't want to get the output.

  - Jamie


>  
> 
> Diego
> 
>  
> 
>  
> 
>     ----- Original Message -----
> 
>     From: Support <mailto:su...@ea...>
> 
>     To: web...@li...
>     <mailto:web...@li...>
> 
>     Sent: Thursday, August 01, 2002 2:43 PM
> 
>     Subject: running process from webmin - times-out?
> 
>     Hello,
> 
>     I am developing a module, which runs a unix program.  The progam
>     works fine from unix shell, or from Webmin if the process is short. 
>     After about 20 minutes I notice that the process is still running,
>     but is not doing anything "idle" or frozen, and i must kill the
>     process.  If I leave the computer overnight, I come back to " no
>     more SWAP space" errors, the computer locked and must restart. 
> 
>     I am using the following command "my
>     $results=`/usr/local/excute/fire`;"
> 
>      
> 
>     what am i doing wrong?
> 
>      
> 
>     thanks,
> 
>      
> 
>     Diego
> 
> 
>      
> 

Re: running process from webmin - times-out?

[Support <su...@ea...>]

Hello, =20

Additional information regarding "running process from webmin - =
times-out?"   question

the process actually only runs for about  6:55-6:56 minutes then freezes =
until I "kill -9" the process.

the parent process is: =20

/usr/bin/perl-w/usr/local/lib/webmin/howdy_index/c.cgi ....

shouldn't it be running under /sbin/init ...

Diego


  ----- Original Message -----=20
  From: Support=20
  To: web...@li...=20
  Sent: Thursday, August 01, 2002 2:43 PM
  Subject: running process from webmin - times-out?


  Hello,

  I am developing a module, which runs a unix program.  The progam works =
fine from unix shell, or from Webmin if the process is short.  After =
about 20 minutes I notice that the process is still running, but is not =
doing anything "idle" or frozen, and i must kill the process.  If I =
leave the computer overnight, I come back to " no more SWAP space" =
errors, the computer locked and must restart. =20

  I am using the following command "my =
$results=3D`/usr/local/excute/fire`;"=20

  what am i doing wrong?

  thanks,

  Diego

running process from webmin - times-out?

[Support <su...@ea...>]

Hello,

I am developing a module, which runs a unix program.  The progam works =
fine from unix shell, or from Webmin if the process is short.  After =
about 20 minutes I notice that the process is still running, but is not =
doing anything "idle" or frozen, and i must kill the process.  If I =
leave the computer overnight, I come back to " no more SWAP space" =
errors, the computer locked and must restart. =20

I am using the following command "my =
$results=3D`/usr/local/excute/fire`;"=20

what am i doing wrong?

thanks,

Diego

Re: Help, Usermin module coding question!

[Jamie C. <jca...@we...>]

If you just want to deny access to a usermin module on a per-user basis,
this will be possible in the next release of usermin (using a new feature
in the usermin configuration module in the next release of webmin). In fact,
you can try out development versions that include these features right now
from http://www.webmin.com/devel/ if you like ..

  - Jamie

Tony Shadwick wrote:

> Well, the module I'm writing is for Spambouncer
> (http://www.spambouncer.org), and right now I work at an ISP where we have
> about 100 users on a single system running FreeBSD for e-mail.  They all use
> POP3, and I installed Webmin and Usermin on the system for webmail.
> Literally mail forwarding and read e-mail were the only things that show up
> when someone logs into Usermin.
> 
> Recently, I rolled out Spambouncer as an additional pay service for a few
> users to see how they handled it.  I'd been using it for about a year and it
> worked wonders for me.  After about a dozen phone calls of people who
> couldn't figure out how to download a text file, edit it, and upload it
> again, I decided to write a Usermin control module.
> 
> I'm using the ACL to control whether a user has access or not based on
> whether or not they are paying for the Spambouncer service.  I know it
> sounds lame, but it  *does* eat up cpu cycles and additional disk space
> (caches last 100 messages for starters) so we have to justify costs.
> Besides, it wasn't my choice. :P  Anyway, the ACL fits that task perfectly.
> As I said, I can manually edit files and it works, but I presumed (wrongly)
> that Usermin had an equivalent control feature. :)
> 
> Any thoughts?
> 
> On 7/30/02 8:00 PM, "Jamie Cameron" <jca...@we...> wrote:
> 
> 
>>The simple answer is - there is no support for acl_security.pl
>>detailed access control editing in usermin. Because all users are
>>treated the same, it doesn't really make sense ..
>>
>>What kind of restrictions are you trying to configure in
>>your acl_security.pl file?
>>
>>- Jamie
>>
>>Tony Shadwick wrote:
>>
>>
>>>>Just got done writing the acl_security.pl for my Usermin module.  The
>>>>
>>>>
>>>thing
>>>
>>>
>>>>is, the module writing document you have on the site says for Webmin:
>>>>
>>>>"Module ACL options are set in the Webmin Users module by clicking on the
>>>>name of a module next to a user's name. The options available are
>>>>
>>>>
>>>generated
>>>
>>>
>>>>by code from the module itself (except for the Can edit module
>>>>configuration? option, which is always present). When the user clicks on
>>>>Update the form parameters are also parsed by code from the module being
>>>>configured, before being saved in the Webmin config directory. "
>>>>
>>>>
>>>>Um..okay, that's nice.  But I need to do this for usermin.  My module
>>>>obviously won't appear in the Webmin Users module because it's not
>>>>
>>>>
>>>installed
>>>
>>>
>>>>in Webmin, and there is no such thing as a Usermin Users module, as I
>>>>
>>>>
>>>cannot
>>>
>>>
>>>>log into Usermin as admin or root.  So...um...where on earth am I supposed
>>>>to do this?  I can do it for each individual user from the shell, but
>>>>
>>>>
>>>that's
>>>
>>>
>>>>silly.  I'm sure it's there someplace, but I certainly don't see it! :)
>>>>
>>>>Thanks!

Re: Help, Usermin module coding question!

[Tony S. <tsh...@st...>]

Well, the module I'm writing is for Spambouncer
(http://www.spambouncer.org), and right now I work at an ISP where we have
about 100 users on a single system running FreeBSD for e-mail.  They all use
POP3, and I installed Webmin and Usermin on the system for webmail.
Literally mail forwarding and read e-mail were the only things that show up
when someone logs into Usermin.

Recently, I rolled out Spambouncer as an additional pay service for a few
users to see how they handled it.  I'd been using it for about a year and it
worked wonders for me.  After about a dozen phone calls of people who
couldn't figure out how to download a text file, edit it, and upload it
again, I decided to write a Usermin control module.

I'm using the ACL to control whether a user has access or not based on
whether or not they are paying for the Spambouncer service.  I know it
sounds lame, but it  *does* eat up cpu cycles and additional disk space
(caches last 100 messages for starters) so we have to justify costs.
Besides, it wasn't my choice. :P  Anyway, the ACL fits that task perfectly.
As I said, I can manually edit files and it works, but I presumed (wrongly)
that Usermin had an equivalent control feature. :)

Any thoughts?

On 7/30/02 8:00 PM, "Jamie Cameron" <jca...@we...> wrote:

> The simple answer is - there is no support for acl_security.pl
> detailed access control editing in usermin. Because all users are
> treated the same, it doesn't really make sense ..
> 
> What kind of restrictions are you trying to configure in
> your acl_security.pl file?
> 
> - Jamie
> 
> Tony Shadwick wrote:
> 
>>> Just got done writing the acl_security.pl for my Usermin module.  The
>>> 
>> thing
>> 
>>> is, the module writing document you have on the site says for Webmin:
>>> 
>>> "Module ACL options are set in the Webmin Users module by clicking on the
>>> name of a module next to a user's name. The options available are
>>> 
>> generated
>> 
>>> by code from the module itself (except for the Can edit module
>>> configuration? option, which is always present). When the user clicks on
>>> Update the form parameters are also parsed by code from the module being
>>> configured, before being saved in the Webmin config directory. "
>>> 
>>> 
>>> Um..okay, that's nice.  But I need to do this for usermin.  My module
>>> obviously won't appear in the Webmin Users module because it's not
>>> 
>> installed
>> 
>>> in Webmin, and there is no such thing as a Usermin Users module, as I
>>> 
>> cannot
>> 
>>> log into Usermin as admin or root.  So...um...where on earth am I supposed
>>> to do this?  I can do it for each individual user from the shell, but
>>> 
>> that's
>> 
>>> silly.  I'm sure it's there someplace, but I certainly don't see it! :)
>>> 
>>> Thanks!

Re: Help, Usermin module coding question!

[Jamie C. <jca...@we...>]

The simple answer is - there is no support for acl_security.pl
detailed access control editing in usermin. Because all users are
treated the same, it doesn't really make sense ..

What kind of restrictions are you trying to configure in
your acl_security.pl file?

  - Jamie

Tony Shadwick wrote:

> Just passing this where it should probably go. :)
> 
> Tony Shadwick
> Manager of Internet Services
> Strategic Technology Group
> 
> 
> ------ Forwarded Message
> From: Ken Clarke <ken...@sh...>
> Organization: PerlProgrammer.net
> Reply-To: Ken Clarke <ken...@sh...>
> Date: Tue, 30 Jul 2002 14:58:48 -0700
> To: tsh...@st...
> Subject: Re: Help Usermin module coding question!
> 
> To clarify, I only maintain the Wish List, which as you've seen is currently
> not accepting new posts.  Unfortunately, I don't have time to fix that at
> the moment :(
> 
> With regard to writing modules, the best place to get questions like this
> answered is on the mailing-list.
> 
> Wish I could be more help to you today.
> 
> 
>>>Ken Clarke
>>>Webmin Wish List Maintainer
>>>www.webmin.com/webmin/
>>>
> 
> ----- Original Message -----
> From: "Tony Shadwick" <tsh...@st...>
> To: <ken...@sh...>
> Sent: July 30, 2002 2:40 PM
> Subject: Help Usermin module coding question!
> 
> 
> 
>>Just got done writing the acl_security.pl for my Usermin module.  The
>>
> thing
> 
>>is, the module writing document you have on the site says for Webmin:
>>
>>"Module ACL options are set in the Webmin Users module by clicking on the
>>name of a module next to a user's name. The options available are
>>
> generated
> 
>>by code from the module itself (except for the Can edit module
>>configuration? option, which is always present). When the user clicks on
>>Update the form parameters are also parsed by code from the module being
>>configured, before being saved in the Webmin config directory. "
>>
>>
>>Um..okay, that's nice.  But I need to do this for usermin.  My module
>>obviously won't appear in the Webmin Users module because it's not
>>
> installed
> 
>>in Webmin, and there is no such thing as a Usermin Users module, as I
>>
> cannot
> 
>>log into Usermin as admin or root.  So...um...where on earth am I supposed
>>to do this?  I can do it for each individual user from the shell, but
>>
> that's
> 
>>silly.  I'm sure it's there someplace, but I certainly don't see it! :)
>>
>>Thanks!
>>
>>Tony Shadwick
>>Manager of Internet Services
>>Strategic Technology Group

Help, Usermin module coding question!

[Tony S. <tsh...@st...>]

Just passing this where it should probably go. :)

Tony Shadwick
Manager of Internet Services
Strategic Technology Group


------ Forwarded Message
From: Ken Clarke <ken...@sh...>
Organization: PerlProgrammer.net
Reply-To: Ken Clarke <ken...@sh...>
Date: Tue, 30 Jul 2002 14:58:48 -0700
To: tsh...@st...
Subject: Re: Help Usermin module coding question!

To clarify, I only maintain the Wish List, which as you've seen is currently
not accepting new posts.  Unfortunately, I don't have time to fix that at
the moment :(

With regard to writing modules, the best place to get questions like this
answered is on the mailing-list.

Wish I could be more help to you today.

>> Ken Clarke
>> Webmin Wish List Maintainer
>> www.webmin.com/webmin/

----- Original Message -----
From: "Tony Shadwick" <tsh...@st...>
To: <ken...@sh...>
Sent: July 30, 2002 2:40 PM
Subject: Help Usermin module coding question!


> Just got done writing the acl_security.pl for my Usermin module.  The
thing
> is, the module writing document you have on the site says for Webmin:
>
> "Module ACL options are set in the Webmin Users module by clicking on the
> name of a module next to a user's name. The options available are
generated
> by code from the module itself (except for the Can edit module
> configuration? option, which is always present). When the user clicks on
> Update the form parameters are also parsed by code from the module being
> configured, before being saved in the Webmin config directory. "
>
>
> Um..okay, that's nice.  But I need to do this for usermin.  My module
> obviously won't appear in the Webmin Users module because it's not
installed
> in Webmin, and there is no such thing as a Usermin Users module, as I
cannot
> log into Usermin as admin or root.  So...um...where on earth am I supposed
> to do this?  I can do it for each individual user from the shell, but
that's
> silly.  I'm sure it's there someplace, but I certainly don't see it! :)
>
> Thanks!
>
> Tony Shadwick
> Manager of Internet Services
> Strategic Technology Group

>
>


------ End of Forwarded Message

Re: cde run priority?

[Jamie C. <jca...@we...>]

Support wrote:

> Hello,
> 
>  
> 
> I am working on a module, and have noticed that
> 
> "my $results=`/usr/local/excute/fire`;"
> 
> always has priority in running in a cgi file. 
> 
> Problem here is that I would like other code to run before
> 
> "my $results=`/usr/local/excute/fire`;"
> 
> once the other code processes,
> 
> "my $results=`/usr/local/excute/fire`;" may run.  
> 
>  
> 
> My question is how do I make code run in the order I would like?


That program will only run when that line of code is reached, so
if you put the line

my $output = `/path/to/other/program`;

before it, then the other program would execute first.

  - Jamie

cde run priority?

[Support <su...@ea...>]

Hello,

I am working on a module, and have noticed that=20
"my $results=3D`/usr/local/excute/fire`;"=20
always has priority in running in a cgi file. =20
Problem here is that I would like other code to run before=20
"my $results=3D`/usr/local/excute/fire`;"
once the other code processes,=20
"my $results=3D`/usr/local/excute/fire`;" may run.  =20



My question is how do I make code run in the order I would like?

Thanks,

Diego

Re: webmin - process module?

[Joe C. <jo...@sw...>]

When I wanted to write something like this (that downloaded and 
installed something) I stole the countdown code from Jamie's download 
routine (the one that is used during a Webmin upgrade).

You can also hold open a browser connection by sending a dot every 
second or so until the process is finished.  I.e.:

Installing...

And every second send another dot.  But this won't maintain state 
between logins!  You'll need to write out a temporary file (can be in 
the same directory as your module, or the directory where you are 
installing, or in the /tmp directory, but if there, be sure to protect 
against various race attacks that writing to a world writable directory 
can be subject to)...sort of a 'lock' file, except it indicates when the 
installation is completed.

So:

Open a file with something like `touch not-finished` (use system() for 
this, or properly open a file using the open call).

Spawn a new process to install the application.  This new process needs 
to be able to detect when the install is finished, so it can delete that 
temp file.

When the install is finished delete the temp file.

As long as the tempfile exists, show an 'Installing...' screen. 
Otherwise do whatever it is you want it to do.  If you want interactive 
users to be able to watch it installing rather than coming back 
periodically, you'll need to add a reload timeout like this:

print qq~<meta http-equiv="refresh" content=10"\n~;

If you feel fancy you could make a ticker to indicate the amount of time 
left in the install, or something similar.

Support wrote:
> Hello,
>  
> I am wanting to build a simple module that runs a process, and types out 
> something like "installing...."  The key to the module would be that it 
> would state "installing..." until the program is finished.  I would like 
> the module to "state installing" regardless of logging out of webmin and 
> later logging back in.  In other words, "installing..."  would be typed 
> out until the installation process is over.
>  
> Is a module of this sort possible?  can someone provide a some simple 
> source code?

-- 
Joe Cooper <jo...@sw...>
Web caching appliances and support.
http://www.swelltech.com

webmin - process module?

[Support <su...@ea...>]

Hello,

I am wanting to build a simple module that runs a process, and types out =
something like "installing...."  The key to the module would be that it =
would state "installing..." until the program is finished.  I would like =
the module to "state installing" regardless of logging out of webmin and =
later logging back in.  In other words, "installing..."  would be typed =
out until the installation process is over.

Is a module of this sort possible?  can someone provide a some simple =
source code?

Thanks,

Diego

Re: Module removed from user acl hangs around...

[Jamie C. <jca...@we...>]

jam...@te... wrote:

> 
>>That wouldn't really make any difference, unless there was another module
>>also in the /fdisk/ directory, which should never happen. Modules don't
>>
> look
> 
>>at each other's .acl files at the moment, not even for foreign function
>>
> calls
> 
>>(which are always assumed to be trusted).
>>
> 
> Well, what you are really saying is that the webmin infrastructure does not
> support
> this in a portable from release to release way.  To which I would submit
> that if I did
> do a foreign function call, and the thing that I was calling had a ACL
> attached to it,
> I would indeed verify the modules ACL's (which is trivial) to see if the
> current user
> should be doing that.


That doesn't happen, because often one module will make limited use of another
module to carry out certain tasks. For example, a user might have access to the
Change Passwords module but not to Users and Groups. However, the password module
makes foreign calls to users and groups, and edits unix users that the user would
not be able to edit manually. If ACL checking was done at the function level,
this wouldn't be possible ..


>>ACL checking is done at the .cgi program
>>level, not in the underlying libraries,
>>
> 
> Understood from the begining, though that is not a bad idea (-;
> 
> Really, what I am saying is that in a module's .cgi program it decides to
> use
> a foreign function which the .cgi program in the foreign module would make
> some
> ACL check against before calling this foreign-but-not-foreign-to-itself
> function
> then I want to make the same check myself in my module (hope that made
> sense).


That makes sense, and I can see situations in which a module would want
to do that. But none of the core modules have a need to at the moment ..

 
>>so even if you don't have access to the /mount
>>module you can still see information about mounted filesystems in the
>>
> /fdisk module.
> 
> 
>>Anyway, I am totally sure that there is no security risk in leaving .acl
>>
> files around.
> A loose security framework makes it easy for someone who does not fully
> understand the
> framework to oops.  Not to quote a rabbi, but "make fences".
> 
> 
>>If anything, removing them would be a security risk because if you
>>
> deleted a module and
> 
>>then re-installed it, all users with access to it would get fully
>>
> privileges if the .acl
> 
>>files were deleted.
>>
> 
> When you reinstalled the module, no one should have access, because when
> you removed the
> module that module should have been removed from all users list of
> accessible modules.
> Which I assumed was what happened (trying to hope for the best; but then
> again one musn't
> assume (-;).


That doesn't happen at the moment - if you remove a module and then re-install it,
the same people will still have access, with the same permissions. Maybe I should
add an option when removing a module to remove it from all users and to delete all
.acl files ..

  - Jamie

Re: Module removed from user acl hangs around...

[<jam...@te...>]

> That wouldn't really make any difference, unless there was another module
> also in the /fdisk/ directory, which should never happen. Modules don't
look
> at each other's .acl files at the moment, not even for foreign function
calls
> (which are always assumed to be trusted).

Well, what you are really saying is that the webmin infrastructure does not
support
this in a portable from release to release way.  To which I would submit
that if I did
do a foreign function call, and the thing that I was calling had a ACL
attached to it,
I would indeed verify the modules ACL's (which is trivial) to see if the
current user
should be doing that.

>ACL checking is done at the .cgi program
> level, not in the underlying libraries,

Understood from the begining, though that is not a bad idea (-;

Really, what I am saying is that in a module's .cgi program it decides to
use
a foreign function which the .cgi program in the foreign module would make
some
ACL check against before calling this foreign-but-not-foreign-to-itself
function
then I want to make the same check myself in my module (hope that made
sense).
> so even if you don't have access to the /mount
> module you can still see information about mounted filesystems in the
/fdisk module.

> Anyway, I am totally sure that there is no security risk in leaving .acl
files around.
A loose security framework makes it easy for someone who does not fully
understand the
framework to oops.  Not to quote a rabbi, but "make fences".

> If anything, removing them would be a security risk because if you
deleted a module and
> then re-installed it, all users with access to it would get fully
privileges if the .acl
> files were deleted.

When you reinstalled the module, no one should have access, because when
you removed the
module that module should have been removed from all users list of
accessible modules.
Which I assumed was what happened (trying to hope for the best; but then
again one musn't
assume (-;).

Cheers...james

Re: Module removed from user acl hangs around...

[Jamie C. <jca...@we...>]

jam...@te... wrote:

>>>will be created.  When you do step 4, remove the module, the acl hangs
>>>around (i.e. it does not get deleted).   I am not sure if this could be
>>>exploited or even lends itself to a writer of a module shooting
>>>
> themselves
> 
>>>in the foot and allowing what was not intended to be allowed.  Even
>>>still I don't think its the right thing to do.  Is this seen as
>>>a problem by any others?
>>>
>>That is actually a feature, so that if you give the module back to the
>>user in future he will have the same access control settings as before.
>>
> 
> I kind of figured that may be the reason its left around.  My main concern
> with it being left around is a module
> being written that uses another modules ACL for something becuase it is
> going to use a foreign function from that
> module.  What should occur (at least as I understand it the webmin code)
> is:
> 
>      1) Make sure the user can even use the foreign module at all; if not
> abort (or don't show the link (-:).
>      2) Then make sure the user can do the particular foreign funciton.

 >

> What I am afraid of is code that is written that neglects to do the first
> check.  What I think could avoid this from occuring
> and still keep the feature around (I agree it is a nice feature; I am just
> your security paranoid concience talking to you (-;)
> is that you rename the acl when that module is removed from the users list
> of modules.  For instance, say its user test,
> and the fdisk module is being removed, then the acl file:
> 
>      fdisk/test.acl
> 
> could be renamed to:
> 
>      fdisk/_old_test.acl
> 
> or prepend a dot or whatever seems nice.  If the module gets added back
> then it would look for the users old
> acl file and rename it appropriately.


That wouldn't really make any difference, unless there was another module
also in the /fdisk/ directory, which should never happen. Modules don't look
at each other's .acl files at the moment, not even for foreign function calls
(which are always assumed to be trusted). ACL checking is done at the .cgi program
level, not in the underlying libraries, so even if you don't have access to the /mount
module you can still see information about mounted filesystems in the /fdisk module.

Anyway, I am totally sure that there is no security risk in leaving .acl files around.
If anything, removing them would be a security risk because if you deleted a module and
then re-installed it, all users with access to it would get fully privileges if the .acl
files were deleted.

  - Jamie

Re: Module removed from user acl hangs around...

[<jam...@te...>]

>> will be created.  When you do step 4, remove the module, the acl hangs
>> around (i.e. it does not get deleted).   I am not sure if this could be
>> exploited or even lends itself to a writer of a module shooting
themselves
>> in the foot and allowing what was not intended to be allowed.  Even
>> still I don't think its the right thing to do.  Is this seen as
>> a problem by any others?
>
> That is actually a feature, so that if you give the module back to the
> user in future he will have the same access control settings as before.

I kind of figured that may be the reason its left around.  My main concern
with it being left around is a module
being written that uses another modules ACL for something becuase it is
going to use a foreign function from that
module.  What should occur (at least as I understand it the webmin code)
is:

     1) Make sure the user can even use the foreign module at all; if not
abort (or don't show the link (-:).
     2) Then make sure the user can do the particular foreign funciton.

What I am afraid of is code that is written that neglects to do the first
check.  What I think could avoid this from occuring
and still keep the feature around (I agree it is a nice feature; I am just
your security paranoid concience talking to you (-;)
is that you rename the acl when that module is removed from the users list
of modules.  For instance, say its user test,
and the fdisk module is being removed, then the acl file:

     fdisk/test.acl

could be renamed to:

     fdisk/_old_test.acl

or prepend a dot or whatever seems nice.  If the module gets added back
then it would look for the users old
acl file and rename it appropriately.

Just a thought...james

Re: Password Module and PAM bug?

[Jamie C. <jca...@we...>]

ra...@si... wrote:

> 
>   First, I would like to mention that the Password Module for Usermin can
> include Solaris as a supported OS, I don't know if this was an oversight.
> On the otherhand, if there is a bug that I am unaware of which affects
> Solaris users, it would be nice to know.

I've just tried it on my own solaris system, and it seems to work well.

In the next usermin release, the module will use PAM for password changing

on Solaris.


>   The other item is in reguards to PAM and authentication of users in
> Usermin.  While recently searching a problem to which a user was
> connecting via Usermin, but failed an FTP session, I identified that the
> FTP session was failing because the password had expired.  There was no
> notification in Usermin, however.  I am not certain at this time if this
> is a bug/rfe for Usermin, or a bug/rfe in the PAM module, however, I
> wanted to make folks on this list aware of this issue.  When I can put in
> the cycles to hunt down what is needed, I will pass on the solution
> (unless someone else knows the answer already).


Normally PAM should check if an account has expired, and if so deny authentication.
Usermin never does any such checking itself ..

  - Jamie

Re: Bug in fsdump module...

[Jamie C. <jca...@we...>]

jam...@te... wrote:

> Jamie,
> 
> I downloaded your filesystem update module, and it only has your fix in the
> first funciton, and not
> the second one, execute_dump().  And now completely understanding the
> problem I see that it is
> also in parse_restore().   Lastly, I really do think some code needs to be
> at the bottome of execute_dump()
> to check the return code of the dump command and let the user know if there
> was an error.


Actually, I found another occurance of the same error when adding code to
display a success/failure message, so I've released a new update that fixes
both problems.

  - Jamie

Re: Module removed from user acl hangs around...

[Jamie C. <jca...@we...>]

jam...@te... wrote:

> Hi All,
> 
> I noticed a behaviour of webmin that at first look seems most troubling.
> Here is the
> scenario:
> 
>      1) Add a user.
>      2) Add a module to the user.
>      3) Configure the module for the user.
>      4) At some later point remove the module from the user list of
> modules.
> 
> After step 3 is completed an acl in file called:
> 
>      /etc/webmin/mod_name/user.acl
> 
> will be created.  When you do step 4, remove the module, the acl hangs
> around (i.e. it does
> not get deleted).   I am not sure if this could be exploited or even lends
> itself to a
> writer of a module shooting themselves in the foot and allowing what was
> not intended
> to be allowed.  Even still I don't think its the right thing to do.  Is
> this seen as a
> problem by any others?


That is actually a feature, so that if you give the module back to the
user in future he will have the same access control settings as before.

  - Jamie

Re: fdisk links to mount...

[Jamie C. <jca...@we...>]

jam...@te... wrote:

> Hi All,
> 
> My general philosophy on security is that unless a user has access to
> something, they should not even
> be given a direct opportunity by which they may be tempted to break a
> security policy.  For instance if
> a user is not allowed within a certain module of a program then no where
> should that user be given a
> link to that module.  In the fdisk module this is not the case as whether
> or not the user has access to the
> mount there are links over the mount points in the fdisk module pointing to
> the mount command.  If they
> clikc there it will stop them and say access denied, but really I don't
> think they should be given the opportunity
> to click.
> 
> Anyway I have attached a patch wich I think achieves this (if they don't
> have access they do not get
> a link).  I tried to figure out what was the right way to figure out if a
> user was able to access a foreign module,
> but maybe I overlooked something.   Anyway here its:


Sounds like a good fix - I will put it in the next release.
I suspect that someone with access to the fdisk module could find a way
to become root and subvert all your security restrictions though :)

  - Jamie

Re: (no subject)

[Jamie C. <jca...@we...>]

ra...@si... wrote:

> 
>   Has there ever been a consideration of releasing Webmin updates as a
> patch for sites where Webmin was installed a a package?  Using the
> "Update" selection effectivly installs a new tarball, and then transfers
> the older configuration to the new, leaving around the old installation
> (unless, of course, they choose to remove the old version, but that could
> make havoc of the installed package).


Someone else suggested that to me recently as well - instead of upgrading your
entire webmin install, you could just install updates to bring your install
up to the most recent version. Sort of like how Debian does things in a way ..

Currently this isn't possible because updates can only effect modules, not
the core code. Also, there would have to be two sets of updates - one for
bug fixes and one for new features, just like Debian's 'stable' and 'unstable'
branches. However, I might implement it for some future versions of webmin ..

  - Jamie