webadmin-devel — The webmin development mailing list

Re: Webmin 0.86 pre-release

[Jamie C. <jca...@we...>]

The rounded corners are only used if the theme doesn't have it's
own colour scheme, because they are done using small gifs in the
standard webmin colours.

However, I guess your theme could have it's own replacement corner
images so this probably isn't necessary when only the theme colours
have changed ..

 - Jamie

Joe Cooper wrote:
> 
> Hey Jamie,
> 
> Something is weird about 0.854 and 0.856 and our theme.  The corner
> images (you know, the little rounded corner bits), are being ignored
> when the theme is non-default--so we're getting square corners, as if we
> had changed the colors on the appearence page rather than in the theme.
>   They worked fine in .85 and below..but stopped working in the .854
> version you sent me with the magic remote calls.
> 
> I figured you were fiddling with the themes support so didn't mention
> it, but I'm guessing it would be fixed by now, if it were intentionally
> broken.
> 
> Do I need to alter our theme in some way, or is this a broken bit in the
> new Webmins?
> 
> Thanks!
> 
> Jamie Cameron wrote:
> 
> > Hi Webmin developers,
> >
> > For those of you who like to contribute new translations to Webmin,
> > I have made a pre-release of version 0.86 (called 0.856) available
> > at the following URLs
> >
> > http://www.webmin.com/webmin/download/webmin-0.856.tar.gz
> > http://www.webmin.com/webmin/download/rpm/webmin-0.856.rpm
> >
> > This pre-release contains a partial Japanese translation by
> > Caldera that will be completed before the final release, and
> > a pretty much complete Korean translation.
> >
> >  - Jamie

Re: Webmin 0.86 pre-release

[Joe C. <jo...@sw...>]

Hey Jamie,

Something is weird about 0.854 and 0.856 and our theme.  The corner 
images (you know, the little rounded corner bits), are being ignored 
when the theme is non-default--so we're getting square corners, as if we 
had changed the colors on the appearence page rather than in the theme. 
  They worked fine in .85 and below..but stopped working in the .854 
version you sent me with the magic remote calls.

I figured you were fiddling with the themes support so didn't mention 
it, but I'm guessing it would be fixed by now, if it were intentionally 
broken.

Do I need to alter our theme in some way, or is this a broken bit in the 
new Webmins?

Thanks!

Jamie Cameron wrote:

> Hi Webmin developers,
> 
> For those of you who like to contribute new translations to Webmin,
> I have made a pre-release of version 0.86 (called 0.856) available
> at the following URLs
> 
> http://www.webmin.com/webmin/download/webmin-0.856.tar.gz
> http://www.webmin.com/webmin/download/rpm/webmin-0.856.rpm
> 
> This pre-release contains a partial Japanese translation by
> Caldera that will be completed before the final release, and
> a pretty much complete Korean translation.
> 
>  - Jamie


                                   --
                      Joe Cooper <jo...@sw...>
                  Affordable Web Caching Proxy Appliances
                         http://www.swelltech.com

Webmin 0.86 pre-release

[Jamie C. <jca...@cu...>]

Hi Webmin developers,

For those of you who like to contribute new translations to Webmin,
I have made a pre-release of version 0.86 (called 0.856) available
at the following URLs

http://www.webmin.com/webmin/download/webmin-0.856.tar.gz
http://www.webmin.com/webmin/download/rpm/webmin-0.856.rpm

This pre-release contains a partial Japanese translation by
Caldera that will be completed before the final release, and
a pretty much complete Korean translation.

 - Jamie

Re: Webmin Doesn't Clean Env (root exploit) (fwd)

[Ryan W. M. <ry...@gu...>]

Joe,

This is how I fixed it.  Here is a snippit from web-lib.pl.  I have a
example usage in the comments:

----- SNIP -----
###
### Example Usage of clean_env() and restore_env()
###
###    ### Clean and save the environment.
###    my %ENV_RESTORE;
###    %ENV_RESTORE  =  &clean_env();
###
###      ### Restart the daemon.
###      $out1 = `/etc/init.d/httpd restart 2>&1`;
###
###    ### Restore the environment.
###    &restore_env(%ENV_RESTORE);
###

################################################################################
# Name:     clean_env()
# Purpose:  Clear out all environmental varibles and store copy in hash
passed.
################################################################################
sub clean_env()
{
  my (%ENV_RESTORE);

  foreach my $k (keys %ENV) { $ENV_RESTORE{$k} = $ENV{$k}; delete($ENV{$k}); }

  return %ENV_RESTORE;
}

################################################################################
# Name:     restore_env()
# Purpose:  Restore the environemnt which was cleared with clean_env from
#           hash passed.
################################################################################
sub restore_env()
{
  my (%ENV_RESTORE)  =  @_;

  foreach my $k (keys %ENV_RESTORE) { $ENV{$k} = $ENV_RESTORE{$k}; }
}
----- SNIP -----

I've been playing with this all day and it doesn't look like anything
really needs the extra variables.  Even when restarting something like
sshd through Webmin (or, in my case, the WebTool ;)) leaves the sid in
/proc/<pid>/environ.  We're running the Openwall patch with restricted
/proc, but on systems that do not have it just about anybody can pull that
info out.

Comment on this code is welcome.  I'm issuing an advisory sometime
today...

-r

 +-- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --+
   Ryan W. Maple                                Guardian Digital, Inc.
   "Expanding exponentially, like some recursive virus." -Phish
 +-- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --+


On Mon, 28 May 2001, Joe Cooper wrote:

> Just a thought...Any reason why Webmin can't create a new environment 
> for every external process it spawns (like daemons, and such--anything 
> out of it's control)?  Seems like some of the stuff that's in there 
> shouldn't be (obviously this information fits the bill).
> 
> It already has this feature for Custom Commands (if I understand things 
> correctly).  I recently looked into doing this for a wget 
> module...because some things are harder to set on the command line than 
> in the environment, doesn't seem that difficult.  But then I'm no perl monk.
> 
> Ryan W. Maple wrote:
> 
> >>Not really - it doensn't happen in session authentication mode, which
> >>is the default in webmin 0.85. However, if you are still using the old
> >>traditional HTTP authentication then it will be a problem ..
> >>
> > 
> > Actually, it _does_ happen in session auth (which is what the WebTool
> > uses).  The "HTTP_COOKIE" env. var has "sid=xxxxxxxxx" in it.  This is a
> > step in the right direction of the hijacking of a connection.
> >  
> > 
> >>Version 0.86 will be out really soon which will fix this properly
> >>in both modes.
> >>
> > 
> > Thanks.  I'll keep my eyes open and we can compare ways to fix it.  I'm
> > probably going to have to issue an advisory to close this issue, so if you
> > want I'll send you a patch so you can see how I end up doing it...
> > 
> > 
> >>>Jamie, is this fixed in the latest version?  I re-wrote the part of the
> >>>code that restarts apache but I am not cleaning the environment either,
> >>>making the WebTool succeptable to this bug too.
> >>>
> 
>                                    --
>                       Joe Cooper <jo...@sw...>
>                   Affordable Web Caching Proxy Appliances
>                          http://www.swelltech.com
> 
> 
> -
> Forwarded by the Webmin development list at web...@we...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-devel
> 

Re: Webmin Doesn't Clean Env (root exploit) (fwd)

[Jamie C. <jca...@we...>]

Good question :)  Maybe the reason is so that programs started by webmin
can inherit its PATH and a few other useful variables ... though in light
of this problem, it might have been better to only inherit a few selected
variables instead of all of them.

 - Jamie

Joe Cooper wrote:
> 
> Just a thought...Any reason why Webmin can't create a new environment
> for every external process it spawns (like daemons, and such--anything
> out of it's control)?  Seems like some of the stuff that's in there
> shouldn't be (obviously this information fits the bill).
> 
> It already has this feature for Custom Commands (if I understand things
> correctly).  I recently looked into doing this for a wget
> module...because some things are harder to set on the command line than
> in the environment, doesn't seem that difficult.  But then I'm no perl monk.
> 
> Ryan W. Maple wrote:
> 
> >>Not really - it doensn't happen in session authentication mode, which
> >>is the default in webmin 0.85. However, if you are still using the old
> >>traditional HTTP authentication then it will be a problem ..
> >>
> >
> > Actually, it _does_ happen in session auth (which is what the WebTool
> > uses).  The "HTTP_COOKIE" env. var has "sid=xxxxxxxxx" in it.  This is a
> > step in the right direction of the hijacking of a connection.
> >
> >
> >>Version 0.86 will be out really soon which will fix this properly
> >>in both modes.
> >>
> >
> > Thanks.  I'll keep my eyes open and we can compare ways to fix it.  I'm
> > probably going to have to issue an advisory to close this issue, so if you
> > want I'll send you a patch so you can see how I end up doing it...
> >
> >
> >>>Jamie, is this fixed in the latest version?  I re-wrote the part of the
> >>>code that restarts apache but I am not cleaning the environment either,
> >>>making the WebTool succeptable to this bug too.
> >>>

Re: Webmin Doesn't Clean Env (root exploit) (fwd)

[Joe C. <jo...@sw...>]

Just a thought...Any reason why Webmin can't create a new environment 
for every external process it spawns (like daemons, and such--anything 
out of it's control)?  Seems like some of the stuff that's in there 
shouldn't be (obviously this information fits the bill).

It already has this feature for Custom Commands (if I understand things 
correctly).  I recently looked into doing this for a wget 
module...because some things are harder to set on the command line than 
in the environment, doesn't seem that difficult.  But then I'm no perl monk.

Ryan W. Maple wrote:

>>Not really - it doensn't happen in session authentication mode, which
>>is the default in webmin 0.85. However, if you are still using the old
>>traditional HTTP authentication then it will be a problem ..
>>
> 
> Actually, it _does_ happen in session auth (which is what the WebTool
> uses).  The "HTTP_COOKIE" env. var has "sid=xxxxxxxxx" in it.  This is a
> step in the right direction of the hijacking of a connection.
>  
> 
>>Version 0.86 will be out really soon which will fix this properly
>>in both modes.
>>
> 
> Thanks.  I'll keep my eyes open and we can compare ways to fix it.  I'm
> probably going to have to issue an advisory to close this issue, so if you
> want I'll send you a patch so you can see how I end up doing it...
> 
> 
>>>Jamie, is this fixed in the latest version?  I re-wrote the part of the
>>>code that restarts apache but I am not cleaning the environment either,
>>>making the WebTool succeptable to this bug too.
>>>

                                   --
                      Joe Cooper <jo...@sw...>
                  Affordable Web Caching Proxy Appliances
                         http://www.swelltech.com

Re: Webmin Doesn't Clean Env (root exploit) (fwd)

[Jamie C. <jca...@we...>]

"Ryan W. Maple" wrote:
> 
> > Not really - it doensn't happen in session authentication mode, which
> > is the default in webmin 0.85. However, if you are still using the old
> > traditional HTTP authentication then it will be a problem ..
> 
> Actually, it _does_ happen in session auth (which is what the WebTool
> uses).  The "HTTP_COOKIE" env. var has "sid=xxxxxxxxx" in it.  This is a
> step in the right direction of the hijacking of a connection.

Damn, you are right :(

> > Version 0.86 will be out really soon which will fix this properly
> > in both modes.
> 
> Thanks.  I'll keep my eyes open and we can compare ways to fix it.  I'm
> probably going to have to issue an advisory to close this issue, so if you
> want I'll send you a patch so you can see how I end up doing it...

I've put an updated miniserv.pl on http://www.webmin.com/webmin/updates.html
for people to download ..

 - Jamie

Re: Webmin Doesn't Clean Env (root exploit) (fwd)

[Ryan W. M. <ry...@gu...>]

> Not really - it doensn't happen in session authentication mode, which
> is the default in webmin 0.85. However, if you are still using the old
> traditional HTTP authentication then it will be a problem ..

Actually, it _does_ happen in session auth (which is what the WebTool
uses).  The "HTTP_COOKIE" env. var has "sid=xxxxxxxxx" in it.  This is a
step in the right direction of the hijacking of a connection.


> Version 0.86 will be out really soon which will fix this properly
> in both modes.

Thanks.  I'll keep my eyes open and we can compare ways to fix it.  I'm
probably going to have to issue an advisory to close this issue, so if you
want I'll send you a patch so you can see how I end up doing it...


> > Jamie, is this fixed in the latest version?  I re-wrote the part of the
> > code that restarts apache but I am not cleaning the environment either,
> > making the WebTool succeptable to this bug too.

Re: Webmin Doesn't Clean Env (root exploit) (fwd)

[Jamie C. <jca...@we...>]

Not really - it doensn't happen in session authentication mode, which
is the default in webmin 0.85. However, if you are still using the old
traditional HTTP authentication then it will be a problem ..

Version 0.86 will be out really soon which will fix this properly
in both modes.

 - Jamie

"Ryan W. Maple" wrote:
> 
> Jamie, is this fixed in the latest version?  I re-wrote the part of the
> code that restarts apache but I am not cleaning the environment either,
> making the WebTool succeptable to this bug too.
> 
> -r
> 
>  +-- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --+
>    Ryan W. Maple                                Guardian Digital, Inc.
>    "Expanding exponentially, like some recursive virus." -Phish
>  +-- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --+
> 
> ---------- Forwarded message ----------
> Date: Sat, 26 May 2001 16:55:35 -0400
> From: J. Nick Koston <ni...@bu...>
> To: bu...@se...
> Subject: Webmin Doesn't Clean Env (root exploit)
> 
> Not sure if this is known, however I know I've seen quite a few people
> still using webmin 0.84.
> 
> Webmin doesn't seem to clean the env properly when starting apache
> (probably in other cases as well)
> 
> It leaves the var HTTP_AUTHORIZATION set.  All you need to do is run
> it though a mime 64 decode and you have the login and password to
> webmin.  (it also leaves SERVER_PORT set so there should be no problem
> figuring out where the webmin is)
> 
> You can best see the effects by:
> 
> 1. Kill Apache
> 2. Start Apache will webmin
> 3. Goto a <?php phpinfo() ?> page and look at the vars
> 
> The good news is that webmin 0.85 doesn't seem to have this problem
> because if doesn't use the same type of auth.  This only seems to
> affect webmin 0.84 and earlier.
> 
>             Nick

Webmin Doesn't Clean Env (root exploit) (fwd)

[Ryan W. M. <ry...@gu...>]

Jamie, is this fixed in the latest version?  I re-wrote the part of the
code that restarts apache but I am not cleaning the environment either,
making the WebTool succeptable to this bug too.

-r

 +-- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --+
   Ryan W. Maple                                Guardian Digital, Inc.
   "Expanding exponentially, like some recursive virus." -Phish
 +-- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --+


---------- Forwarded message ----------
Date: Sat, 26 May 2001 16:55:35 -0400
From: J. Nick Koston <ni...@bu...>
To: bu...@se...
Subject: Webmin Doesn't Clean Env (root exploit)

Not sure if this is known, however I know I've seen quite a few people
still using webmin 0.84.

Webmin doesn't seem to clean the env properly when starting apache
(probably in other cases as well)

It leaves the var HTTP_AUTHORIZATION set.  All you need to do is run
it though a mime 64 decode and you have the login and password to
webmin.  (it also leaves SERVER_PORT set so there should be no problem
figuring out where the webmin is)

You can best see the effects by:

1. Kill Apache
2. Start Apache will webmin
3. Goto a <?php phpinfo() ?> page and look at the vars

The good news is that webmin 0.85 doesn't seem to have this problem
because if doesn't use the same type of auth.  This only seems to
affect webmin 0.84 and earlier.


            Nick

<snip from phpinfo (some vars removed to protect the innocent)>

                                                                  PHP
Variables
                                    
         Variable                                Value
                                    
PHP_SELF                    /test.php
                                    
HTTP_SERVER_VARS            /usr/local/apache/htdocs
["DOCUMENT_ROOT"]                   
                                    
HTTP_SERVER_VARS            text/*, image/*, audio/*, application/*
["HTTP_ACCEPT"]                     
                                    
HTTP_SERVER_VARS            gzip, compress, bzip, bzip2, deflate
["HTTP_ACCEPT_ENCODING"]            
                                    
HTTP_SERVER_VARS            en; q=1.0
["HTTP_ACCEPT_LANGUAGE"]            
                                    
HTTP_SERVER_VARS            localhost
["HTTP_HOST"]                       
                             
HTTP_SERVER_VARS            w3m/0.2.1
["HTTP_USER_AGENT"]     

HTTP_SERVER_VARS["PATH"]
/bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin

HTTP_SERVER_VARS            127.0.0.1 
["REMOTE_ADDR"]
                       
HTTP_SERVER_VARS            56523
["REMOTE_PORT"]               

HTTP_SERVER_VARS            /usr/local/apache/htdocs/test.php
["SCRIPT_FILENAME"]
                              
HTTP_SERVER_VARS            127.0.0.1
["SERVER_ADDR"]           

HTTP_SERVER_VARS            80                             
["SERVER_PORT"]
                                                
HTTP_SERVER_VARS            Apache/1.3.17 (Unix) PHP/4.0.4pl1
["SERVER_SOFTWARE"]                 
                                     
HTTP_SERVER_VARS            CGI/1.1 
["GATEWAY_INTERFACE"]                               
                                    
HTTP_SERVER_VARS            HTTP/1.0
["SERVER_PROTOCOL"]                                                
                                    
HTTP_SERVER_VARS            GET     
["REQUEST_METHOD"]                                              
                                    
HTTP_SERVER_VARS                    
["QUERY_STRING"]                     
                                    
HTTP_SERVER_VARS            /test.php
["REQUEST_URI"]                      
                        
HTTP_SERVER_VARS            /usr/local/apache/htdocs/test.php
["PATH_TRANSLATED"]                                                     

HTTP_SERVER_VARS            /test.php 
["PHP_SELF"]    
                       
HTTP_SERVER_VARS["argv"]    Array
                            ( 
                            )
                                                             
HTTP_SERVER_VARS["argc"]    0
                              
HTTP_ENV_VARS               10000    
["SERVER_PORT"]           

HTTP_ENV_VARS               CGI/1.1                     
["GATEWAY_INTERFACE"]
                                                                 
HTTP_ENV_VARS["PWD"]        /root/webmin-0.84/apache/
                                
HTTP_ENV_VARS               Mozilla/5.0 (X11; U; Linux 2.4.2 i686;
en-US;
["HTTP_USER_AGENT"]         rv:0.9) Gecko/20010505         
                
HTTP_ENV_VARS["PATH_INFO"]                      
                 
HTTP_ENV_VARS               http://localhost:10000/apache/              
["HTTP_REFERER"]                                                           
                                    
HTTP_ENV_VARS["HTTP_HOST"]  localhost:10000                  
                                    
HTTP_ENV_VARS               Basic YWRtaW46ZGF2ZQ==
["HTTP_AUTHORIZATION"]              
                                                    
HTTP_ENV_VARS               keep-alive
["HTTP_CONNECTION"]                 
                                                                   
HTTP_ENV_VARS["WEBMIN_VAR"] /var/webmin
                                    
HTTP_ENV_VARS               gzip,deflate,compress,identity      
["HTTP_ACCEPT_ENCODING"]            
                                    
HTTP_ENV_VARS               /root/webmin-0.84
["SERVER_ROOT"]                      
                                    

....

Re: remote calls and success/fail?

[Jamie C. <jca...@we...>]

Joe Cooper wrote:
> 
> Hi Jamie,
> 
> I've begun to implement DNS record creation using remote_foreign_call,
> and in an attempt to code 'correctly' from the beginning, I'm trying to
> figure out how to do error checking, or at least some form of
> success/fail checking on the remote call.
> 
> Any pointers on how this should be done?  I see that the create_record
> routine (and pretty much all the rest) don't return anything
> explicitly...So I'm guessing this is one of those things that perl
> probably does implicitly in some magical manner, but I'm not real sure
> where to look to figure out the magic.
> 
> So, my question is:  Can I check for success/fail on a
> remote_foreign_call?  If so, how?

There are really 2 kinds of failure that you need to check for - failure
to connect to the remote server, and failure of the remote function. In
the first case, the &remote_foreign_call function will call perl's die
statement if anything goes wrong, which will usually cause your script
to exit. To trap this, use eval like so :

$rv = eval { &remote_foreign_call(....) }
if ($@) {
	# failed to connect or login to the remote webmin server
	}

The second thing you might need to check for is the return value of
the remote function, which will just be returned by &remote_foreign_call .
Though in the case you mentioned above (DNS record creation) there is no
meaningful return value even if the DNS record wasn't saved for some
reason, such as a lack of disk space.

 - Jamie

remote calls and success/fail?

[Joe C. <jo...@sw...>]

Hi Jamie,

I've begun to implement DNS record creation using remote_foreign_call, 
and in an attempt to code 'correctly' from the beginning, I'm trying to 
figure out how to do error checking, or at least some form of 
success/fail checking on the remote call.

Any pointers on how this should be done?  I see that the create_record 
routine (and pretty much all the rest) don't return anything 
explicitly...So I'm guessing this is one of those things that perl 
probably does implicitly in some magical manner, but I'm not real sure 
where to look to figure out the magic.

So, my question is:  Can I check for success/fail on a 
remote_foreign_call?  If so, how?

Thanks!
                                   --
                      Joe Cooper <jo...@sw...>
                  Affordable Web Caching Proxy Appliances
                         http://www.swelltech.com

Re: AW: general question

[Joe C. <jo...@sw...>]

Futureweb.at - Information wrote:

> hi,
> 
> thanks for all the information,
> does it operate like linuxconf at telnet?


Huh?  I don't know.  I haven't used LinuxConf in two years.  It ate one 
two many of my configuration files, and broke my working setups a few 
too many times.  Webmin is nothing like LinuxConf was back then.

 
> I just know this tool easily broke stuff at our
> server like bindings of ips. 
> 
> i got told the reason is, that it makes different config
> files than the other tool at that could cause problems.


Again, I have no idea how LinuxConf behaves today.  But, as I said in my 
original message, if you've been using the standard locations of 
configuration for your OS, then Webmin will not cause any harm.


> so far I have to do most things on the server via telnet. 
> only new accounts not. 
> 
> or does your tool just like parse the config files and 
> show the information on the webbrowser, based on the config
> files and setup doesn't change anything on the system,
> unless I change it?


It's not my tool...Jamie Cameron wrote it.

And, just like I said, Webmin does not interfere with hand-edited or 
otherwise configured files.

Haven't you read the Users Guide, Patrick?  I explain all of this stuff 
in the very first chapter, I thought pretty clearly.


> in case a config file is not formated properly, would it tell you
> there is an error or something it can't read, parse, or whatever?


Probably not.  In most cases, it ignores what it does not understand. 
This is a side effect of Webmin refusing to break something that you 
have configured already--if it doesn't understand something, it does the 
correct thing and leaves it alone.  (This is not covered in the Users 
Guide, but should be so I'll add it.)


> thanks
> patrick
> 
> -----Ursprungliche Nachricht-----
> Von: web...@li...
> [mailto:web...@li...]Im Auftrag von Joe
> Cooper
> Gesendet: Sonntag, 13. Mai 2001 01:41
> An: web...@li...
> Betreff: Re: general question
> 
> 
> Webmin won't break anything if you don't.
> 
> Assuming the tools you've already used create 'correct' configuration 
> files, Webmin will use them just fine.  You can continue to use whatever 
> other configuration tools you like, or hand editing of the configuration 
> files.  This, again, is assuming that your other tools create correct 
> files, and you don't do anything weird in your configurations when hand 
> editing.
> 
> However...Webmin doesn't do things for you.  You actually have to know 
> what you're doing, or you can break stuff quite easily (whereas maybe 
> your current tools will only let you 'Add', 'Delete', etc. without any 
> ability to do things entirely wrong).  So it's entirely possible to 
> completely misconfigure your server with Webmin.  Then again, it's 
> possible to do nearly everything on your system you might like to do--so 
> not as limited as your current tools.
> 
> Good luck.
> 
> Futureweb.at - Patrick Neuner wrote:
> 
> 
>>hi,
>>
>>we run a red hat server, version 6.2., apache webserver. 
>>
>>our provider already installed some cgi's for
>>webadministration of new users, webspace-customers.
>>
>>it is a little buggy and you can't do a whole lot with it,
>>so i am interested in installing your system.
>>
>>the only worry I have is, due to the new control panels, how easy
>>is it to break something if you install it at a already working
>>system?
>>
>>we have a couple of hundret domains running there with enough costumers, 
>>but I don't have a test enviroment I could set up and try with. 
>>
>>would u suggest to be careful with the adoption, or shouldn't there be
>>big issues?
>>
>>for apache, i am not able to add users and disc quotas? or what is
>>the main disadvantage having apache instead of your miniserv.pl?
>>
>>
>>thanks for your help. 
>>
>>patrick neuner
>>



                                   --
                      Joe Cooper <jo...@sw...>
                  Affordable Web Caching Proxy Appliances
                         http://www.swelltech.com

AW: general question

[Futureweb.at - I. <in...@fu...>]

hi,

thanks for all the information,
does it operate like linuxconf at telnet?

I just know this tool easily broke stuff at our
server like bindings of ips. 

i got told the reason is, that it makes different config
files than the other tool at that could cause problems.

so far I have to do most things on the server via telnet. 
only new accounts not. 

or does your tool just like parse the config files and 
show the information on the webbrowser, based on the config
files and setup doesn't change anything on the system,
unless I change it?

in case a config file is not formated properly, would it tell you
there is an error or something it can't read, parse, or whatever?

thanks
patrick

-----Ursprungliche Nachricht-----
Von: web...@li...
[mailto:web...@li...]Im Auftrag von Joe
Cooper
Gesendet: Sonntag, 13. Mai 2001 01:41
An: web...@li...
Betreff: Re: general question


Webmin won't break anything if you don't.

Assuming the tools you've already used create 'correct' configuration 
files, Webmin will use them just fine.  You can continue to use whatever 
other configuration tools you like, or hand editing of the configuration 
files.  This, again, is assuming that your other tools create correct 
files, and you don't do anything weird in your configurations when hand 
editing.

However...Webmin doesn't do things for you.  You actually have to know 
what you're doing, or you can break stuff quite easily (whereas maybe 
your current tools will only let you 'Add', 'Delete', etc. without any 
ability to do things entirely wrong).  So it's entirely possible to 
completely misconfigure your server with Webmin.  Then again, it's 
possible to do nearly everything on your system you might like to do--so 
not as limited as your current tools.

Good luck.

Futureweb.at - Patrick Neuner wrote:

> hi,
> 
> we run a red hat server, version 6.2., apache webserver. 
> 
> our provider already installed some cgi's for
> webadministration of new users, webspace-customers.
> 
> it is a little buggy and you can't do a whole lot with it,
> so i am interested in installing your system.
> 
> the only worry I have is, due to the new control panels, how easy
> is it to break something if you install it at a already working
> system?
> 
> we have a couple of hundret domains running there with enough costumers, 
> but I don't have a test enviroment I could set up and try with. 
> 
> would u suggest to be careful with the adoption, or shouldn't there be
> big issues?
> 
> for apache, i am not able to add users and disc quotas? or what is
> the main disadvantage having apache instead of your miniserv.pl?
> 
> 
> thanks for your help. 
> 
> patrick neuner

                                   --
                      Joe Cooper <jo...@sw...>
                  Affordable Web Caching Proxy Appliances
                         http://www.swelltech.com


-
Forwarded by the Webmin development list at web...@we...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-devel

Re: general question

[Joe C. <jo...@sw...>]

Webmin won't break anything if you don't.

Assuming the tools you've already used create 'correct' configuration 
files, Webmin will use them just fine.  You can continue to use whatever 
other configuration tools you like, or hand editing of the configuration 
files.  This, again, is assuming that your other tools create correct 
files, and you don't do anything weird in your configurations when hand 
editing.

However...Webmin doesn't do things for you.  You actually have to know 
what you're doing, or you can break stuff quite easily (whereas maybe 
your current tools will only let you 'Add', 'Delete', etc. without any 
ability to do things entirely wrong).  So it's entirely possible to 
completely misconfigure your server with Webmin.  Then again, it's 
possible to do nearly everything on your system you might like to do--so 
not as limited as your current tools.

Good luck.

Futureweb.at - Patrick Neuner wrote:

> hi,
> 
> we run a red hat server, version 6.2., apache webserver. 
> 
> our provider already installed some cgi's for
> webadministration of new users, webspace-customers.
> 
> it is a little buggy and you can't do a whole lot with it,
> so i am interested in installing your system.
> 
> the only worry I have is, due to the new control panels, how easy
> is it to break something if you install it at a already working
> system?
> 
> we have a couple of hundret domains running there with enough costumers, 
> but I don't have a test enviroment I could set up and try with. 
> 
> would u suggest to be careful with the adoption, or shouldn't there be
> big issues?
> 
> for apache, i am not able to add users and disc quotas? or what is
> the main disadvantage having apache instead of your miniserv.pl?
> 
> 
> thanks for your help. 
> 
> patrick neuner

                                   --
                      Joe Cooper <jo...@sw...>
                  Affordable Web Caching Proxy Appliances
                         http://www.swelltech.com

general question

[Futureweb.at - P. N. <ne...@fu...>]

hi,

we run a red hat server, version 6.2., apache webserver. 

our provider already installed some cgi's for
webadministration of new users, webspace-customers.

it is a little buggy and you can't do a whole lot with it,
so i am interested in installing your system.

the only worry I have is, due to the new control panels, how easy
is it to break something if you install it at a already working
system?

we have a couple of hundret domains running there with enough costumers, 
but I don't have a test enviroment I could set up and try with. 

would u suggest to be careful with the adoption, or shouldn't there be
big issues?

for apache, i am not able to add users and disc quotas? or what is
the main disadvantage having apache instead of your miniserv.pl?


thanks for your help. 

patrick neuner

**************
Futureweb St. Johann
in...@fu...

"I am easily satisfied by the very best"
- Winston Churchill 

win32 ?

[<fra...@ya...>]

hi folks,

just had an idea which is maybe totally stupid but
that's worth trying :))
I wanted to rewrite webmin in a win32 code to be able
to run from a winbloz machine, does anybody have
already begun or tried that before ?
Thanks 


=====
François Raynaud
England       \!/
             (@ @)            
mobile 0044 (0)7754 749971
      ----oOO-(_)-OOo--------

___________________________________________________________
Do You Yahoo!? -- Pour faire vos courses sur le Net, 
Yahoo! Shopping : http://fr.shopping.yahoo.com

/etc/webmin directory query...

[Joe C. <jo...@sw...>]

Ok,

I'm going to try to keep up with some state information, as well as 
provide skeleton directories in /etc/webmin/mojo-admin.  So my question:

Is there a way for a series of files and directories to be installed in 
/etc/webmin/mojo-admin when the module is installed?  Or do I have to 
copy them there the first time the module is run?

Most important in this case is that I need to have a skeleton directory 
for the virtual host domain owner, which will be different than the 
system /etc/skel (it won't contain the X stuff that a normal Red Hat 
skel has, and it will have a number of other directories that a virt 
would need).

Thanks!
                                   --
                      Joe Cooper <jo...@sw...>
                  Affordable Web Caching Proxy Appliances
                         http://www.swelltech.com

Re: Output from the miniserver on commandline

[Jamie C. <jca...@we...>]

Andreas Gruber wrote:
> 
> Hallo!
> 
> I have detected a kind of unfriendly behaviour of the miniserv of
> Webmin. It occurs quite often when I call external commands within my
> webmin module. Whenever the Webmin module (or the external command)
> prints some output not to the resulting webpage but to STDERR I suppose.
> The output appears somewhere on the system. Usually it appears on the
> console I previously started the webmin miniserv from. But sometimes,
> and this can really be annoying on systems several people work on, these
> outputs appear on just any other console.
> 
> Is it possible to divert all these outputs to a defined point?
> (/dev/null)
> 
> Any other idea to workaround the problem

You could stop this by editing /etc/webmin/start and changing the

exec /path/to/miniserv.pl /etc/webmin/miniserv.conf

line to

exec /path/to/miniserv.pl /etc/webmin/miniserv.conf 2>/dev/null

Personally, I prefer to leave it in so that my CGI programs can output
debugging into the STDERR. As another poster mentioned, it is best to
make sure your CGIs never output stuff to STDERR either directly or
indirectly, unless you want it to appear on the console.

 - Jamie

Re: Output from the miniserver on commandline

[Ryan W. M. <ry...@gu...>]

Andres,

Yes, this is a problem with your module.  You're not catching all of the
output.  Take for example a command such as this:

  if (`rpm -q <package>`) {
    do_this();
  }

If this is run and the package is not installed, you'll get a message such
as this spit to the first open console:

  package <package> is not installed

The proper workaround is to use standard shell tricks to trap the output:

  if (`rpm -q <package> > /dev/null 2>&1`) {
    do_this();
  }

Hope this helps.  The same goes for system()'s and the such; all you're
really doing is spawning an external shell so the standard shell tricks
apply.

Cheers,
Ryan

 +-- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --+
   Ryan W. Maple                                Guardian Digital, Inc.
   "If you eliminate the redundancy, sleep is a four letter word." -CW
 +-- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --+


On Mon, 23 Apr 2001, Andreas Gruber wrote:

> Hallo!
> 
> I have detected a kind of unfriendly behaviour of the miniserv of
> Webmin. It occurs quite often when I call external commands within my
> webmin module. Whenever the Webmin module (or the external command)
> prints some output not to the resulting webpage but to STDERR I suppose.
> The output appears somewhere on the system. Usually it appears on the
> console I previously started the webmin miniserv from. But sometimes,
> and this can really be annoying on systems several people work on, these
> outputs appear on just any other console.
> 
> Is it possible to divert all these outputs to a defined point?
> (/dev/null)

Output from the miniserver on commandline

[Andreas G. <a.g...@fa...>]

Hallo!

I have detected a kind of unfriendly behaviour of the miniserv of
Webmin. It occurs quite often when I call external commands within my
webmin module. Whenever the Webmin module (or the external command)
prints some output not to the resulting webpage but to STDERR I suppose.
The output appears somewhere on the system. Usually it appears on the
console I previously started the webmin miniserv from. But sometimes,
and this can really be annoying on systems several people work on, these
outputs appear on just any other console.

Is it possible to divert all these outputs to a defined point?
(/dev/null)

Any other idea to workaround the problem

Thanks

Andreas Gruber

Re: Webmin-DNS Module and management of subnets

[Jamie C. <jca...@we...>]

Bjoern Krueger wrote:
> 
> On 11.04.2001 at 20:11 Jamie Cameron wrote:
> 
> >Have you tried putting the class C reverse zone after the class B in your
> >named.conf file? Because of the way webmin searches for reverse zones when
> >automatically adding a reverse IP, the last matching zone will be the one
> >that it gets added to ..
> 
> Yes, Class B entry is first, then come the Class C ones.
> Nevertheless, all (!) reverse entries are written in the main Class B file.
> If you want, I can paste my named.conf (not including all 100+ class c
> zones but only some :) ).
> 
> Thanks for your reply and time.

Maybe you could email your named.conf and the appropriate zone files to me ..
because I checked my code again, and webmin definately looks for a class C
zone first when adding a reverse IP address.

 - Jamie

Re: Webmin-DNS Module and management of subnets

[Bjoern K. <B.K...@rz...>]

On 11.04.2001 at 20:11 Jamie Cameron wrote:

>Have you tried putting the class C reverse zone after the class B in your
>named.conf file? Because of the way webmin searches for reverse zones when
>automatically adding a reverse IP, the last matching zone will be the one
>that it gets added to ..

Yes, Class B entry is first, then come the Class C ones.
Nevertheless, all (!) reverse entries are written in the main Class B file.
If you want, I can paste my named.conf (not including all 100+ class c
zones but only some :) ).

Thanks for your reply and time.
-- 
Bjoern Krueger
B.K...@rz...
HiWi DNS-Verwaltung HRZ Uni Frankfurt

Re: Webmin-DNS Module and management of subnets

[Jamie C. <jca...@we...>]

Bjoern Krueger wrote:
> 
> Hi all,
> 
> we are currently trying to use webmin to manage our DNS servers.
> All is pretty well except webmin's management of reverse DNS entries.
> 
> To make this issue clear I have to tell you our configuration:
>  We have one "root" zone for the whole Class-B net:
> 
> zone "uni-frankfurt.de" {
>         type master;
>         file "zones.prim/hosts.uniffm";
> };
> 
> In this zone, we manage several (100+) subzones (all Class C), e.g.:
> 
> zone "geochem.uni-frankfurt.de" {type master; file
> "zones.prim/hosts.geochem";};
> 
> When adding a host to one of the subzones, the reverse entry doesn't get
> written in the zones reverse file, which is defined in the named conf file
> as well, but in the reverse file of the main Class B Zone
> (uni-frankfurt.de), where it shouldn't be (there are only major servers
> listed like our WWW servers).
> 
> Reverse Class C zones are defined by e.g.
> zone "179.2.141.in-addr.arpa." {type master; file
> "zones.prim/hosts.179.rev";};
> 
> Did anyone had a similiar problem and maybe a solution?
> We'd even be glad to change our structure if only we could get webmin to
> work with our zones correctly.
> I don't think this is a real module issue, but since I am no perl guru,
> checking the code itself is a task too big for me (I am a student helping
> out :) ).
> 
> Any help is greatly appreciated!
> Thanks!H

Have you tried putting the class C reverse zone after the class B in your
named.conf file? Because of the way webmin searches for reverse zones when
automatically adding a reverse IP, the last matching zone will be the one
that it gets added to ..

 - Jamie

Webmin-DNS Module and management of subnets

[Bjoern K. <B.K...@rz...>]

Hi all,

we are currently trying to use webmin to manage our DNS servers.
All is pretty well except webmin's management of reverse DNS entries.

To make this issue clear I have to tell you our configuration:
 We have one "root" zone for the whole Class-B net:

zone "uni-frankfurt.de" {
        type master;
        file "zones.prim/hosts.uniffm";
};

In this zone, we manage several (100+) subzones (all Class C), e.g.:

zone "geochem.uni-frankfurt.de" {type master; file
"zones.prim/hosts.geochem";};

When adding a host to one of the subzones, the reverse entry doesn't get
written in the zones reverse file, which is defined in the named conf file
as well, but in the reverse file of the main Class B Zone
(uni-frankfurt.de), where it shouldn't be (there are only major servers
listed like our WWW servers).

Reverse Class C zones are defined by e.g.
zone "179.2.141.in-addr.arpa." {type master; file
"zones.prim/hosts.179.rev";};

Did anyone had a similiar problem and maybe a solution?
We'd even be glad to change our structure if only we could get webmin to
work with our zones correctly.
I don't think this is a real module issue, but since I am no perl guru,
checking the code itself is a task too big for me (I am a student helping
out :) ).

Any help is greatly appreciated!
Thanks!H
-- 
Bjoern Krueger
B.K...@rz...
HiWi DNS-Verwaltung HRZ Uni Frankfurt