webadmin-devel — The webmin development mailing list

Themes documentation now available

[Jamie C. <jca...@we...>]

For all those who want to create their own themes, documentation
is now available at http://www.webmin.com/webmin/modules.html
near the bottom of the page. I know several people were asking for
this, so I finally got around to writing it :)

 - Jamie

Re: Temporary Files

[Ryan W. M. <ry...@gu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Mon, 29 Jan 2001, Jamie Cameron wrote:

> How about this for an improved tempname() function - it uses /dev/urandom
> where available, though only reads 4 bytes for seeding srand() as any more
> would be larger than the function can handle anyway.

<code snippit>

I like it; it looks like a good tradeoff.  I would probably mention
something (in the developmental documentation) that it is up to the script
to make sure that the file has the correct mode (ala umask or chmod).  The
directory is 0755, which means if the files are created with some
world-readable mode then a malicious user can read them (and if the
contain sensitive data then do some damage).

Cheers,
Ryan

 +-- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --+
   Ryan W. Maple          "I dunno, I dream in Perl sometimes..."  -LW
   Guardian Digital, Inc.                     ry...@gu...
 +-- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --+

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE6dXQ+IwAIA9MpKWcRAuCdAKCBxGZM1YMLsHmKKw4mag2lVPqVoQCfev7A
g2KxMmsCqx18pXoXXxyoUzw=
=Lg0X
-----END PGP SIGNATURE-----

Re: Temporary Files

[Jamie C. <jca...@we...>]

"Ryan W. Maple" wrote:
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> You're right.  Actually there is a better way to seed the PRNG with a less
> expnsive hit on the processor.  Replace:
> 
>   srand (time ^ $$ ^ unpack "%L*", `ps axww | gzip`);
> 
> with:
> 
>   srand (time ^ $$ ^ `head -1 /dev/urandom`);
> 
> Just about every platform on which Webmin will run has either /dev/urandom
> or /dev/random, so you may want to make it /dev/random.  Being as the temp
> files are as secure as possible the name is not as important as it would
> be if it were simply being put in /tmp with world-read/write/execute
> rights.
> 
> However, using /dev/random can be VERY costly if the system does not have
> any entropy, as it will hang and wait for stuff to happen (disk seeks,
> keyboard input, etc).  So urandom is much better then random in this case.
> 
> In any case, like I said, the name is not that important.  Most people
> don't know how to do enough analysis on a PRNG and break it. :)  What you
> suggest should work very well.
> 
> Just some time estimates:
> 
> Using ps:
>   0.04user 0.06system 0:00.09elapsed 107%CPU (0avgtext+0avgdata 0maxresident)k
>   0.05user 0.04system 0:00.09elapsed 96%CPU (0avgtext+0avgdata 0maxresident)k
>   0.03user 0.06system 0:00.09elapsed 96%CPU (0avgtext+0avgdata 0maxresident)k
> 
> Using urandom:
>   0.01user 0.02system 0:00.02elapsed 120%CPU (0avgtext+0avgdata 0maxresident)k
>   0.01user 0.01system 0:00.02elapsed 80%CPU (0avgtext+0avgdata 0maxresident)k
>   0.02user 0.01system 0:00.02elapsed 115%CPU (0avgtext+0avgdata 0maxresident)k
> 
> Using random (note the time in #2, I had to bang on the keyboard):
>   0.01user 0.01system 0:00.01elapsed 111%CPU (0avgtext+0avgdata 0maxresident)k
>   0.02user 0.12system 0:04.74elapsed 2%CPU (0avgtext+0avgdata 0maxresident)k
>   0.01user 0.01system 0:00.01elapsed 117%CPU (0avgtext+0avgdata 0maxresident)k
> 
> Wow, these emails keep on getting long.  Sorry for my rambling.  I haven't
> been reading Applied Cryptography lately, really... :)
> 
> Cheers,
> Ryan

How about this for an improved tempname() function - it uses /dev/urandom
where available, though only reads 4 bytes for seeding srand() as any more
would be larger than the function can handle anyway.

# tempname([filename])
# Returns a mostly random temporary file name
sub tempname
{
while(1) {
        local @st = lstat("/tmp/.webmin");
        last if (!$st[4] && !$st[5] && $st[2] & 0x4000 &&
                 ($st[2] & 0777) == 0755);
        if (@st) {
                unlink("/tmp/.webmin") || system("rm -rf /tmp/.webmin");
                }
        mkdir("/tmp/.webmin", 0755) || next;
        chown(0, 0, "/tmp/.webmin");
        chmod(0755, "/tmp/.webmin");
        }
if (defined($_[0]) && $_[0] !~ /\.\./) {
        return "/tmp/.webmin/$_[0]";
        }
else {
        $main::tempfilecount++;
        if (!$main::done_tempname_srand++) {
                # Seed the random number generator
                if (open(RANDOM, "/dev/urandom")) {
                        local $buf;
                        read(RANDOM, $buf, 4);
                        close(RANDOM);
                        srand(time() ^ $$ ^ $buf);
                        }
                else {
                        srand(time() ^ $$);
                        }
                }
        return "/tmp/.webmin/".int(rand(1000000))."_".
               $main::tempfilecount."_".$scriptname;
        }
}

 - Jamie

Re: NPH support

[Jamie C. <jca...@we...>]

I think you have answered my question - you are looking for support for nph-
CGI scripts like apache provides. This should be quite simple for me to add
to miniserv - look for it in the next release, or even sooner ..

 - Jamie

Brett Schlank wrote:
> 
> Jamie,
> 
> Not sure I complete understand your response.
> 
> Yes, the script I am writing supplies its own status lines. I haven't seen
> support for such nph- cgi's under the webmin webserver.
> 
> I can see where  miniserv.pl could be modified to suppress the headers
> based on the name of the file by  modifying write_data (or calls to
> write_data), but if I am missing something obvious or if that is an
> enhancement that is coming in the future, I'd like to know! :)
> 
> Thanks!
> 
> -- Brett
> 
>                                                  At 10:10 AM 1/29/2001
> +1100, you wrote:
> >Brett Schlank wrote:
> > >
> > > Hi,
> > >
> > > Does anyone know if support for non-parsed headers is in the works? I am
> > > building  proxy www administration script based on webproxy and I would
> > > like to build it as a webmin module.
> > >
> > > Thanks for answers in advance!
> >
> >Do you support by the webmin webserver for nph- scripts, so that your
> >module CGIs can supply their own status line? If so, that wouldn't be
> >too hard to add ..
> >
> >  - Jamie

Re: NPH support

[Brett S. <bsc...@pa...>]

Jamie,

Not sure I complete understand your response.

Yes, the script I am writing supplies its own status lines. I haven't seen 
support for such nph- cgi's under the webmin webserver.

I can see where  miniserv.pl could be modified to suppress the headers 
based on the name of the file by  modifying write_data (or calls to 
write_data), but if I am missing something obvious or if that is an 
enhancement that is coming in the future, I'd like to know! :)

Thanks!

-- Brett


                                                 At 10:10 AM 1/29/2001 
+1100, you wrote:
>Brett Schlank wrote:
> >
> > Hi,
> >
> > Does anyone know if support for non-parsed headers is in the works? I am
> > building  proxy www administration script based on webproxy and I would
> > like to build it as a webmin module.
> >
> > Thanks for answers in advance!
>
>Do you support by the webmin webserver for nph- scripts, so that your
>module CGIs can supply their own status line? If so, that wouldn't be
>too hard to add ..
>
>  - Jamie
>
>-
>Forwarded by the Webmin mailing list at web...@we...



>To remove yourself from this list, go to
>http://lists.sourceforge.net/lists/listinfo/webadmin-devel

Re: NPH support

[Jamie C. <jca...@we...>]

Brett Schlank wrote:
> 
> Hi,
> 
> Does anyone know if support for non-parsed headers is in the works? I am
> building  proxy www administration script based on webproxy and I would
> like to build it as a webmin module.
> 
> Thanks for answers in advance!

Do you support by the webmin webserver for nph- scripts, so that your
module CGIs can supply their own status line? If so, that wouldn't be
too hard to add ..

 - Jamie

NPH support

[Brett S. <bsc...@pa...>]

Hi,

Does anyone know if support for non-parsed headers is in the works? I am 
building  proxy www administration script based on webproxy and I would 
like to build it as a webmin module.

Thanks for answers in advance!

-- brett 

Re: Themes

[Joe C. <jo...@sw...>]

I think all of the documentation remains in Jamies head.  However, after 
quizzing him mercilessly I've managed to make one.  So here's a quick 
rundown--hopefully Jamie will correct if I'm missing something.

Create a directory called "mytheme" in your webmin directory.

Create a file called theme.info in that directory that contains the 
following:

desc=Name of the theme

Create a file called config, with the following:

brand=Company or whatever who made the theme
brand_url=http://your.url.com
cs_header=hex triplet for your chosen header color
cd_link=hex triplet for the link color

All are optional, and there are a few others that can be included...the 
source is probably the place to go for completeness.  (I'll document 
themes in the Webmin Users Guide eventually...)

Now create a complete copy of the directory tree of Webmin, without all 
the files.  Just the base module directories and the images directories 
below those.  Now put your new icons into the various correct locations 
within your new tree, change themse in Webmin and you'll be set.

It's not a non-tedious task, since everything goes into it's own 
directory and you have to go through and make sure you're naming things 
correctly.  Also, it's a damn lot of icons...it took us two weeks of 
constant work to make ours (which will be publically available 
soon...see screenshots on my homepage:
http://www.swelltech.com/pengies/joe -- just zip down to the Webmin 
section to find the links to the images).

Hope this helps.

C. Wildermuth wrote:

> Does anyone know any specifics about how to create themes?  I havent 
> really seen any documentation or how-to's on it.

                                   --
                      Joe Cooper <jo...@sw...>
                  Affordable Web Caching Proxy Appliances
                         http://www.swelltech.com

Re: What am I missing?

[Joe C. <jo...@sw...>]

Egads.  You're right.

Now I feel silly.  (I didn't spot it, because my mind was seeing the 
(auth...) bit above and equating the calamaris link to it, wrt number of 
parantheses.)

Now it appears in the Squid index page.  Beautiful.

Thanks, Jamie.

Jamie Cameron wrote:

> Joe Cooper wrote:
> 
>> Hi folks,
>> 
>> Ok, I've added a submodule to the Squid module, that provides user
>> tracking data (ie, who visited what and when).  I've got everything
>> working great...but I can't make it appear in the Squid mainpage.
>> 
>> I've editted the index.cgi to include a reference to it in each page
>> layout section (i.e. basic, simple, all options).  I just copied the
>> stuff that was already there so I guess it's OK.  I've put an icon in
>> the images dir, and I've added the necessary entries in lang/en.
>> 
>> Here's an example of the modified lines in index.cgi, just in case I did
>> something wrong:
>>          @otitles = ( $text{'index_portsnets'}, $text{'index_mdusage'},
>>                       $text{'index_actrl'},
>>                       ($auth ? ( $text{'index_proxyauth'} ) : ( ) ),
>>                       $text{'index_rebuild'},
>>                       $calamaris ? ( $text{'index_calamaris'} ) : ( ) ),
>>                       $text{'index_usertrack'};
>>          @olinks = ( "edit_sports.cgi", "edit_smem.cgi", "edit_acl.cgi",
>>                       ($auth == 1 ? ( "edit_auth.cgi" ) :
>>                        $auth == 2 ? ( "edit_nauth.cgi" ) : ( ) ),
>>                      "clear.cgi",
>>                      $calamaris ? ( "calamaris.cgi" ) : ( ) ),
>>                      "usertrack.cgi";
>>          }
>> 
>> So what am I missing here?  How do I make it show up?
>> 
>> Thanks for any enlightenment anyone can provide.
> 
> 
> Shouldn't the  $text{'index_usertrack'}  go inside the bracket before it?
> Same for  "usertrack.cgi"  .. otherwise you are creating a comma expression
> those meaning I am unsure of :)
> 
>  - Jamie
> 
> -
> Forwarded by the Webmin mailing list at web...@we...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-devel


-- 

                                   --
                      Joe Cooper <jo...@sw...>
                  Affordable Web Caching Proxy Appliances
                         http://www.swelltech.com

(no subject)

[C. W. <cj...@ho...>]

Does anyone know any specifics about how to create themes?  I havent really 
seen any documentation or how-to's on it.


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com

Re: What am I missing?

[Jamie C. <jca...@we...>]

Joe Cooper wrote:
> 
> Hi folks,
> 
> Ok, I've added a submodule to the Squid module, that provides user
> tracking data (ie, who visited what and when).  I've got everything
> working great...but I can't make it appear in the Squid mainpage.
> 
> I've editted the index.cgi to include a reference to it in each page
> layout section (i.e. basic, simple, all options).  I just copied the
> stuff that was already there so I guess it's OK.  I've put an icon in
> the images dir, and I've added the necessary entries in lang/en.
> 
> Here's an example of the modified lines in index.cgi, just in case I did
> something wrong:
>          @otitles = ( $text{'index_portsnets'}, $text{'index_mdusage'},
>                       $text{'index_actrl'},
>                       ($auth ? ( $text{'index_proxyauth'} ) : ( ) ),
>                       $text{'index_rebuild'},
>                       $calamaris ? ( $text{'index_calamaris'} ) : ( ) ),
>                       $text{'index_usertrack'};
>          @olinks = ( "edit_sports.cgi", "edit_smem.cgi", "edit_acl.cgi",
>                       ($auth == 1 ? ( "edit_auth.cgi" ) :
>                        $auth == 2 ? ( "edit_nauth.cgi" ) : ( ) ),
>                      "clear.cgi",
>                      $calamaris ? ( "calamaris.cgi" ) : ( ) ),
>                      "usertrack.cgi";
>          }
> 
> So what am I missing here?  How do I make it show up?
> 
> Thanks for any enlightenment anyone can provide.

Shouldn't the  $text{'index_usertrack'}  go inside the bracket before it?
Same for  "usertrack.cgi"  .. otherwise you are creating a comma expression
those meaning I am unsure of :)

 - Jamie

Re: www.webmin.com mailing list instructions do not point to Sourceforge

[Jamie C. <jca...@we...>]

Chris Halls-pager wrote:
> 
> Hi folks,
> 
> Great piece of software, makes me want to improve my Perl so I can help out.
> I have Webmin running on AIX and Solaris machines if anyone needs something
> testing.
> 
> Just wanted to point out that the webmin page
> http://www.webmin.com/webmin/mailing.html tells you to subscribe to Webmin
> lists at wemin.com, but Majordomo says:
> 
> > Webmin mailing lists no longer use Majordomo. To subscribe or
> > unsubscribe, go to
> >
> > http://sourceforge.net/mail/?group_id=17457
> >

Fixed now - I have just been moving the lists to sourceforge tonight.
Hopefully nothing breaks :)

 - Jamie

www.webmin.com mailing list instructions do not point to Sourceforge

[Chris Halls-p. <chr...@ni...>]

Hi folks,

Great piece of software, makes me want to improve my Perl so I can help out.
I have Webmin running on AIX and Solaris machines if anyone needs something
testing.

Just wanted to point out that the webmin page
http://www.webmin.com/webmin/mailing.html tells you to subscribe to Webmin
lists at wemin.com, but Majordomo says:

> Webmin mailing lists no longer use Majordomo. To subscribe or
> unsubscribe, go to
>
> http://sourceforge.net/mail/?group_id=17457
>

Chris Halls
--
Systems development
VRM Frankfurt

Testing mailing list

[Jamie C. <jca...@we...>]

Just testing to see if the lists got moved to sourceforge ok ..

 - Jamie