webadmin-list — Webmin users mailing list

Re: [webmin-l] Webmin security risk!

[Munzir T. ( ) <mun...@gm...>]

On Thursday 24 August 2006 18:38, Jamie Cameron wrote:
> On 24/Aug/2006 05:07 Munzir Taha wrote ..
>
> > Hi,
> > I noticed that webmin stores passwords unencrypted in its configuration
> > files. This is a security risk. If someone manage to find any
> > vulnerability to read those files, he won't need to waste any time trying
> > to crack them which is a serious issue.
>
> That is true - in some cases, Webmin needs to store passwords (like the
> mysql login) in a file. This is needed because connecting to mysql requires
> knowledge of the plain text password.

That's fine with me. After all one can secure mysql to to only accept 
connections from localhost.

> Fortunately, the mysql and postgresql modules are the only two I can think
> of that have this requirement.

The real problem is having the root password on this file
/etc/webmin/servers/1108941386.serv
May be this is because I am monitoring another server from webmin.

> And the files are only readable by root, so 
> there is no security risk from normal users..

As I read the vulnerability discovered in webmin 1.29- would allow any 
anonymous user to read any system file whatever the permissions are. In such 
cases the administrator need some time to provide the patch. Afterall, this 
is why the system root password is not only kept in non-readable by everyone 
shadow file but also kept encrypted.

Keep up the good work.

-- 
Munzir Taha
Telecommunications and Electronics Engineer
Maintainer of Fedora Arabic Translation Project
https://listman.redhat.com/mailman/listinfo/fedora-trans-ar
Maintainer of the OpenBugs project page at
http://www.arabic-fedora.org/munzir/OpenBugs.html
Master CIW Designer, ICDL, MOUS, Linux+, LPI 101
Riyadh, SA

Re: [webmin-l] small modification to LDAP Users and Groups

[Jamie C. <jca...@we...>]

On 24/Aug/2006 01:45 Andreas Moroder wrote ..
> Hello Jamie,
> 
> would it be possible to get the following small modification to the 
> "LDAP Users and Groups" module:
> 
> We have many groups and when we are in "edit_user.cgi" in the "Secondary
> groups" list it is not possible to see easily what groups a user belongs
> to.
> 
> Could you add a second list ( on the right of the actual one ) that 
> shows only the groups the user belongs to ?
> It should not be possible to make changes to this list.

How about if instead I add an option to show the groups as a'
text field, rather than a list? That would be more usable for
systems with a huge number of groups..

> I have a question too.
> Whe webmin enters the edit_user.cgi, does it read in the groups a second
> time ?

Yes, it does .. in order to get the group list. This is inevitable, as
membership is stored in groups rather than users.

 - Jamie

Re: [webmin-l] Webmin security risk!

[Jamie C. <jca...@we...>]

On 24/Aug/2006 05:07 Munzir Taha (=?utf-8?q?=D9=85=D9=86=D8=B0=D8=B1?=  =?utf-8?q?_=D8=B7=D9=87?=) wrote ..
> Hi,
> I noticed that webmin stores passwords unencrypted in its configuration
> files. This is a security risk. If someone manage to find any vulnerability to
> read those files, he won't need to waste any time trying to crack them which
> is a serious issue.

That is true - in some cases, Webmin needs to store passwords (like the mysql login)
in a file. This is needed because connecting to mysql requires knowledge of the plain
text password.

Fortunately, the mysql and postgresql modules are the only two I can think of
that have this requirement. And the files are only readable by root, so there is
no security risk from normal users..

 - Jamie

[webmin-l] Webmin security risk!

[Munzir T. ( ) <mun...@gm...>]

Hi,
I noticed that webmin stores passwords unencrypted in its configuration files. 
This is a security risk. If someone manage to find any vulnerability to read 
those files, he won't need to waste any time trying to crack them which is a 
serious issue.

-- 
Munzir Taha
Telecommunications and Electronics Engineer
Maintainer of Fedora Arabic Translation Project
https://listman.redhat.com/mailman/listinfo/fedora-trans-ar
Maintainer of the OpenBugs project page at
http://www.arabic-fedora.org/munzir/OpenBugs.html
Master CIW Designer, ICDL, MOUS, Linux+, LPI 101
Riyadh, SA

Re: [webmin-l] What defines permission for uploaded files if nottheumask

[Munzir T. ( ) <mun...@gm...>]

On Thursday 24 August 2006 08:59, Jamie Cameron wrote:
> On 23/Aug/2006 22:38 Munzir Taha wrote ..
>
> > Good. For now I guess any user can set his own umask by manually editing
> > his .bashrc file which is ok with me.
>
> That wouldn't actually work, as Usermin doesn't process .bashrc.

aha! So, it's very good to add this support as far as usermin won't change its 
policy of not requiring a shell access.

-- 
Munzir Taha
Telecommunications and Electronics Engineer
Maintainer of Fedora Arabic Translation Project
https://listman.redhat.com/mailman/listinfo/fedora-trans-ar
Maintainer of the OpenBugs project page at
http://www.arabic-fedora.org/munzir/OpenBugs.html
Master CIW Designer, ICDL, MOUS, Linux+, LPI 101
Riyadh, SA

[webmin-l] small modification to LDAP Users and Groups

[Andreas M. <and...@sb...>]

Hello Jamie,

would it be possible to get the following small modification to the 
"LDAP Users and Groups" module:

We have many groups and when we are in "edit_user.cgi" in the "Secondary 
groups" list it is not possible to see easily what groups a user belongs to.

Could you add a second list ( on the right of the actual one ) that 
shows only the groups the user belongs to ?
It should not be possible to make changes to this list.

I have a question too.
Whe webmin enters the edit_user.cgi, does it read in the groups a second 
time ?

Thanks
Andreas

Re: [webmin-l] What defines permission for uploaded files if nottheumask

[Jamie C. <jca...@we...>]

On 23/Aug/2006 22:38 Munzir Taha (=?utf-8?q?=D9=85=D9=86=D8=B0=D8=B1?=  =?utf-8?q?_=D8=B7=D9=87?=) wrote ..
> On Thursday 24 August 2006 00:32, Jamie Cameron wrote:
> > On 23/Aug/2006 13:14 Munzir Taha wrote ..
> 
> > unfortunately Webmin doesn't yet have 
> > an option to set its own umask, but I will add this in future.
> 
> Good. For now I guess any user can set his own umask by manually editing
> his .bashrc file which is ok with me.

That wouldn't actually work, as Usermin doesn't process .bashrc.

> > > Also, may I request to add the support of extracting .tar.bz2 files?
> My
> > > experience with them they have better compression ratio than .tar.gz
> in
> > > general.
> >
> > Nice idea ... I will add this to the next release.
> 
> Great!
> Also don't forget the support need to be available for updown module, too.
>
> BTW: what's the difference between uploading using updown module or file
> manager? Isn't the functionality unnecessarily duplicated?

Yes .. yes it is :)

 - Jamie

Re: [webmin-l] What defines permission for uploaded files if not theumask

[Munzir T. ( ) <mun...@gm...>]

On Thursday 24 August 2006 00:32, Jamie Cameron wrote:
> On 23/Aug/2006 13:14 Munzir Taha wrote ..

> unfortunately Webmin doesn't yet have 
> an option to set its own umask, but I will add this in future.

Good. For now I guess any user can set his own umask by manually editing 
his .bashrc file which is ok with me.

> > Also, may I request to add the support of extracting .tar.bz2 files? My
> > experience with them they have better compression ratio than .tar.gz in
> > general.
>
> Nice idea ... I will add this to the next release.

Great!
Also don't forget the support need to be available for updown module, too.

BTW: what's the difference between uploading using updown module or file 
manager? Isn't the functionality unnecessarily duplicated?

-- 
Munzir Taha
Telecommunications and Electronics Engineer
Maintainer of Fedora Arabic Translation Project
https://listman.redhat.com/mailman/listinfo/fedora-trans-ar
Maintainer of the OpenBugs project page at
http://www.arabic-fedora.org/munzir/OpenBugs.html
Master CIW Designer, ICDL, MOUS, Linux+, LPI 101
Riyadh, SA

Re: [webmin-l] Why some of my messages don't reach the list?

[Jamie C. <jca...@we...>]

On 23/Aug/2006 20:33 Munzir Taha (=?utf-8?q?=D9=85=D9=86=D8=B0=D8=B1?= =?utf-8?q?_=D8=B7=D9=87?=) wrote ..
> On Wednesday 23 August 2006 23:31, you wrote:
> > On 23/Aug/2006 12:48 Munzir Taha 
> >
> > I have definately seen some of your messages on the list ..
> > What particular message subject did you think was not getting though?
> 
> Umm! I now checked the archive and found my thought-to-be-lost messages
> there. 
> The problem turned to be that mailman is set to not send copy of members
> own 
> posting may be which I didn't notice as far as you replied to my emails
> but 
> for a couple of messages that get no answers (e.g. How can usermin's view
> apache log files) , I managed to notice it.
> 
> I would like to change that option if possible so I tried to log put my
> subscription address at http://www.webmin.com/mailing.html to edit it but
> I  always get: "You must supply a valid email address."
> I am very sure I typed my email properly!

I'm pretty sure the mailman does by default send you a copy of your own
posting .. although perhaps your mail client is filtering them out? I know
that gmail does this for example.

 - Jamie

Re: [webmin-l] Why some of my messages don't reach the list?

[Munzir T. ( ) <mun...@gm...>]

On Wednesday 23 August 2006 23:31, you wrote:
> On 23/Aug/2006 12:48 Munzir Taha 
>
> I have definately seen some of your messages on the list ..
> What particular message subject did you think was not getting though?

Umm! I now checked the archive and found my thought-to-be-lost messages there. 
The problem turned to be that mailman is set to not send copy of members own 
posting may be which I didn't notice as far as you replied to my emails but 
for a couple of messages that get no answers (e.g. How can usermin's view 
apache log files) , I managed to notice it.

I would like to change that option if possible so I tried to log put my 
subscription address at http://www.webmin.com/mailing.html to edit it but I 
always get: "You must supply a valid email address."
I am very sure I typed my email properly!


-- 
Munzir Taha
Telecommunications and Electronics Engineer
Maintainer of Fedora Arabic Translation Project
https://listman.redhat.com/mailman/listinfo/fedora-trans-ar
Maintainer of the OpenBugs project page at
http://www.arabic-fedora.org/munzir/OpenBugs.html
Master CIW Designer, ICDL, MOUS, Linux+, LPI 101
Riyadh, SA

Re: [webmin-l] Java File Manager Applet

[morrish <Mor...@Su...>]

Well I've seen a number of java code versions nd will send you a list.
As I search the web there are a million web based file managers and growing.

There is a growing need to send files over the net between companies and 
their vendors securly without a ftp client installed


Here's a example I found with pearl.

http://sourceforge.net/projects/wefis

I'll send you a big list.



Jamie Cameron wrote:

> Yes, it would be nice to show some kind of progress meter ..
> Do you know of any example Java code that can do this?
>
>  - Jamie
>
> On 23/Aug/2006 14:59 Morris Hooten - SES Web Services wrote ..
>
>> ok, this is the issue. the updown module and file manager applet
>> work great but what if you want to upload a larger file say 100mg or 
>> larger.
>> how do you know if the connection is still live after 15 min. or how 
>> much time is left, or
>> how fast the connection is? what if it drop connection after 15 min 
>> and the user is behind a proxy server
>> etc?
>>
>>
>>
>>
>> Jamie Cameron wrote On 08/23/06 15:55,:
>>
>>>On 23/Aug/2006 13:41 Morris Hooten - SES Web Services wrote ..
>>>  
>>>
>>>>Is there any plans to upgrade the file manager applet anytime in the 
>>>>future to allow for better features of uploading and downloading files such as:
>>>>
>>>>Features like Intelligent Multi-Part Downloading, Automatic Error 
>>>>Recovery, uploading status, etc.
>>>>    
>>>>
>>>
>>>This isn't planned at the moment, as I am just using the browser's file
>>>upload input which doesn't support any fancy operations.
>>>
>>> - Jamie
>>>
>>>-------------------------------------------------------------------------
>>>Using Tomcat but need to do more? Need to support web services, security?
>>>Get stuff done quickly with pre-integrated technology to make your job easier
>>>Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
>>>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>>>-
>>>Forwarded by the Webmin mailing list at web...@li...
>>>To remove yourself from this list, go to
>>>http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>  
>>>
>>
>>-- 
>>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>>Morris Hooten
>>SES Web Services   
>>Technology Enabled Learning 
>>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>>Phone:    303-272-9366 (x79366)
>>e-mail:   mor...@su...
>>    
>>
>
>------------------------------------------------------------------------
>
>-------------------------------------------------------------------------
>Using Tomcat but need to do more? Need to support web services, security?
>Get stuff done quickly with pre-integrated technology to make your job easier
>Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>  
>
>------------------------------------------------------------------------
>
>-
>Forwarded by the Webmin mailing list at web...@li...
>To remove yourself from this list, go to
>http://lists.sourceforge.net/lists/listinfo/webadmin-list
>  
>

Re: [webmin-l] Migrating users from one system to another

[Jamie C. <jca...@we...>]

My mistake .. I forgot that you need the line :

&init_config();

after the line :

require './web-lib.pl';

So the full first part of the program would be :

#!/usr/bin/perl
$no_acl_check++;
$ENV{'WEBMIN_CONFIG'} ||= "/etc/webmin";
$ENV{'WEBMIN_VAR'} ||= "/var/webmin";
if ($0 =~ /^(.*\/)[^\/]+$/) {
        chdir($1);
        }
chop($pwd = `pwd`);
$0 = "$pwd/usertest.pl";
require './web-lib.pl';
$< == 0 || die "usertest.pl must be run as root";
&init_config();
&foreign_require("useradmin", "user-lib.pl");
# Call &useradmin:: functions here ..

 - Jamie

On 23/Aug/2006 10:40 Carlton Thomas wrote ..
> 
> Jamie,
> 
> Thanks for the reply. I have implemented it but I am having a
> problem with the Perl modules. The problem seems to be caused
> by the fact that the program does not have all the context
> information correctly configured.
> 
> As an example, the line:
> 
>    &foreign_require("useradmin", "user-lib.pl");
> 
> causes the program to generate the error message:
> 
>   "module useradmin does not exist"
> 
> but if I replace that with:
> 
>   require 'useradmin/user-lib.pl';
> 
> it gets past that point OK.
> 
> Also:
> 
>   &useradmin::making_changes();
> 
> causes the error:
> 
>   Undefined subroutine &useradmin::making_changes called...
> 
> but removing the module name (ie. useradmin::), the call to
> making_changes works OK.
> 
> By making changes to my program I can get Perl to satisfy all
> the direct references. However, those indirect references to
> Perl modules made by the Webmin functions I call are failing
> with similar error messages.
> 
> Thanks in advance for any help you can provide.
> 
> Regards !
> 
> --
> Carlton
> =============================
> GIFFORD INTERNET SERVICES
> Bristol, United Kingdom
> Tel: 0845 868 2245
> Fax: 0845 004 6843
> Email: ad...@gi...
> Web: http://www.gifford.co.uk
> =============================
> 
> On Tue, 22 Aug 2006, Jamie Cameron wrote:
> 
> > On 22/Aug/2006 08:53 Carlton Thomas wrote ..
> > >
> > > Hi,
> > >
> > > I need to migrate some users from an old UNIX system to a
> > > Linux box. Since I need to do a number of operations, eg.
> > > copy user files, I have decided to write a Perl script to
> > > automate the task. To simplify things and to take advantage
> > > of some of Webmin's functionality, I would like to have my
> > > script call the Webmin "save_user.cgi" script to add the
> > > users to the Linux box.
> > >
> > > My script will run on the Linux box and do the following:-
> > >
> > > 1) read a line from the password file
> > >
> > > 2) parse the line to extract things like username, enc_password
> > >
> > > 3) call Webmin's "save_user.cgi" to add new user to linux box
> > >
> > > 4) rcp user's files from old box to new directories on Linux box
> > >
> > > 5) chown and chgrp user's files
> > >
> > > Is it feasible (or even possible) to use the Webmin module in this
> > > way?  If it is possible, what do I need to do to ensure that the
> > > Webmin script will run correctly, eg. setting environment variables.
> >
> > Yes, you could use a command-line program that calls Webmin
> > functions to do this. I would recommend putting it in the base
> > directory (typically /usr/libexec/webmin), and coding it like :
> >
> > #!/usr/bin/perl
> >
> > $no_acl_check++;
> > $ENV{'WEBMIN_CONFIG'} ||= "/etc/webmin";
> > $ENV{'WEBMIN_VAR'} ||= "/var/webmin";
> > if ($0 =~ /^(.*\/)[^\/]+$/) {
> >         chdir($1);
> >         }
> > chop($pwd = `pwd`);
> > $0 = "$pwd/create-users.pl";
> > require './web-lib-lib.pl';
> > $< == 0 || die "create-users.pl must be run as root";
> >
> > &foreign_require("useradmin", "user-lib.pl");
> > &useradmin::making_changes();
> > while(<STDIN>) {
> >   # Parse user and create object
> >   $user = { ... };
> >
> >   &useradmin::create_user($user);
> >   }
> > &useradmin::made_changes();
> >
> >  - Jamie
> >
> > -------------------------------------------------------------------------
> > Using Tomcat but need to do more? Need to support web services, security?
> > Get stuff done quickly with pre-integrated technology to make your job
> easier
> > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> > -
> > Forwarded by the Webmin mailing list at web...@li...
> > To remove yourself from this list, go to
> > http://lists.sourceforge.net/lists/listinfo/webadmin-list
> >
> 
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job
> easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Java File Manager Applet

[Jamie C. <jca...@we...>]

Yes, it would be nice to show some kind of progress meter ..<br />Do you know of any example Java code that can do this?<br /><br />=A0- Jamie<br /><br />On 23/Aug/2006 14:59 Morris Hooten - SES Web Services wrote ..
<blockquote type=3D"cite">

ok, this is the issue. the updown module and file manager applet<br />
work great but what if you want to upload a larger file say 100mg or
larger.<br />
how do you know if the connection is still live after 15 min. or how
much time is left, or <br />
how fast the connection is? what if it drop connection after 15 min and
the user is behind a proxy server<br />
etc?<br />
<br />
<br />
<br />
<br />
Jamie Cameron wrote On 08/23/06 15:55,:
<blockquote type=3D"cite" cite=3D"https://mail.webmin.com:20000/mailbox/mid...@ww...">
  <pre>On 23/Aug/2006 13:41 Morris Hooten - SES Web Services wrote ..<br />  </pre>
  <blockquote type=3D"cite">
    <pre>Is there any plans to upgrade the file manager applet anytime in the <br />future to allow for better features of uploading and downloading files such as:<br /><br />Features like Intelligent Multi-Part Downloading, Automatic Error <br />Recovery, uploading status, etc.<br />    </pre>
  </blockquote>
  <pre><!---->
This isn't planned at the moment, as I am just using the browser's file
upload input which doesn't support any fancy operations.

 - Jamie

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
<a href=3D"http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=3D121642" class=3D"moz-txt-link-freetext">http://sel.as-us.falkag.net/sel?cmd=3Dlnk&amp;kid=3D120709&amp;bid=3D263057&amp;dat=3D121642</a>
-
Forwarded by the Webmin mailing list at <a href=3D"_unsafe_link_" class=3D"moz-txt-link-abbreviated">web...@li...</a>
To remove yourself from this list, go to
<a href=3D"http://lists.sourceforge.net/lists/listinfo/webadmin-list" class=3D"moz-txt-link-freetext">http://lists.sourceforge.net/lists/listinfo/webadmin-list</a>
  </pre>
</blockquote>
<br />
<pre cols=3D"72" class=3D"moz-signature">-- <br />~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br />Morris Hooten<br />SES Web Services   <br />Technology Enabled Learning <br />~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br />Phone:    303-272-9366 (x79366)<br />e-mail:   <a href=3D"_unsafe_link_" class=3D"moz-txt-link-abbreviated">mor...@su...</a>
</pre>
</blockquote><br />

Re: [webmin-l] Java File Manager Applet

[Morris H. - S. W. S. <Mor...@Su...>]

ok, this is the issue. the updown module and file manager applet
work great but what if you want to upload a larger file say 100mg or larger.
how do you know if the connection is still live after 15 min. or how 
much time is left, or
how fast the connection is? what if it drop connection after 15 min and 
the user is behind a proxy server
etc?




Jamie Cameron wrote On 08/23/06 15:55,:

>On 23/Aug/2006 13:41 Morris Hooten - SES Web Services wrote ..
>  
>
>>Is there any plans to upgrade the file manager applet anytime in the 
>>future to allow for better features of uploading and downloading files such as:
>>
>>Features like Intelligent Multi-Part Downloading, Automatic Error 
>>Recovery, uploading status, etc.
>>    
>>
>
>This isn't planned at the moment, as I am just using the browser's file
>upload input which doesn't support any fancy operations.
>
> - Jamie
>
>-------------------------------------------------------------------------
>Using Tomcat but need to do more? Need to support web services, security?
>Get stuff done quickly with pre-integrated technology to make your job easier
>Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>-
>Forwarded by the Webmin mailing list at web...@li...
>To remove yourself from this list, go to
>http://lists.sourceforge.net/lists/listinfo/webadmin-list
>  
>

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Morris Hooten
SES Web Services   
Technology Enabled Learning 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Phone:    303-272-9366 (x79366)
e-mail:   mor...@su...

Re: [webmin-l] Usermin User Logging

[Jamie C. <jca...@we...>]

No, there is no equivalent of the Webmin Actions Log module for Usermin.<br /><br />=A0- Jamie<br /><br />On 23/Aug/2006 14:54 Morris Hooten - SES Web Services wrote ..
<blockquote type=3D"cite">

but not through a module correct?<br />
i'm aware of the module for webmin.<br />
<br />
thanks<br />
<br />
<br />
<br />
Jamie Cameron wrote On 08/23/06 15:34,:
<blockquote type=3D"cite" cite=3D"https://mail.webmin.com:20000/mailbox/mid...@ww...">
  <pre>On 23/Aug/2006 13:34 Morris Hooten - SES Web Services wrote ..<br />  </pre>
  <blockquote type=3D"cite">
    <pre>Is there an option or module to track who and how many times a user has<br />logged into usermin?<br /><br />can't seem to find anything.<br />    </pre>
  </blockquote>
  <pre><!---->
The support for logging in Usermin isn't as extensive as Webmin, but you
can track user logins in the /var/usermin/miniserv.log file. Also, if syslog
support is enabled (as it is by default), each login will be recorded in
/var/log/secure or /var/log/authlog.

 - Jamie

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
<a href=3D"http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=3D121642" class=3D"moz-txt-link-freetext">http://sel.as-us.falkag.net/sel?cmd=3Dlnk&amp;kid=3D120709&amp;bid=3D263057&amp;dat=3D121642</a>
-
Forwarded by the Webmin mailing list at <a href=3D"_unsafe_link_" class=3D"moz-txt-link-abbreviated">web...@li...</a>
To remove yourself from this list, go to
<a href=3D"http://lists.sourceforge.net/lists/listinfo/webadmin-list" class=3D"moz-txt-link-freetext">http://lists.sourceforge.net/lists/listinfo/webadmin-list</a>
  </pre>
</blockquote>
<br />
<pre cols=3D"72" class=3D"moz-signature">-- <br />~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br />Morris Hooten<br />SES Web Services   <br />Technology Enabled Learning <br />~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br />Phone:    303-272-9366 (x79366)<br />e-mail:   <a href=3D"_unsafe_link_" class=3D"moz-txt-link-abbreviated">mor...@su...</a>
</pre>
</blockquote><br />

Re: [webmin-l] Java File Manager Applet

[Jamie C. <jca...@we...>]

On 23/Aug/2006 13:41 Morris Hooten - SES Web Services wrote ..
> Is there any plans to upgrade the file manager applet anytime in the 
> future to allow for better features of uploading and downloading files such as:
> 
> Features like Intelligent Multi-Part Downloading, Automatic Error 
> Recovery, uploading status, etc.

This isn't planned at the moment, as I am just using the browser's file
upload input which doesn't support any fancy operations.

 - Jamie

Re: [webmin-l] Usermin User Logging

[Morris H. - S. W. S. <Mor...@Su...>]

but not through a module correct?
i'm aware of the module for webmin.

thanks



Jamie Cameron wrote On 08/23/06 15:34,:

>On 23/Aug/2006 13:34 Morris Hooten - SES Web Services wrote ..
>  
>
>>Is there an option or module to track who and how many times a user has
>>logged into usermin?
>>
>>can't seem to find anything.
>>    
>>
>
>The support for logging in Usermin isn't as extensive as Webmin, but you
>can track user logins in the /var/usermin/miniserv.log file. Also, if syslog
>support is enabled (as it is by default), each login will be recorded in
>/var/log/secure or /var/log/authlog.
>
> - Jamie
>
>-------------------------------------------------------------------------
>Using Tomcat but need to do more? Need to support web services, security?
>Get stuff done quickly with pre-integrated technology to make your job easier
>Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>-
>Forwarded by the Webmin mailing list at web...@li...
>To remove yourself from this list, go to
>http://lists.sourceforge.net/lists/listinfo/webadmin-list
>  
>

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Morris Hooten
SES Web Services   
Technology Enabled Learning 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Phone:    303-272-9366 (x79366)
e-mail:   mor...@su...

Re: [webmin-l] Usermin User Logging

[Jamie C. <jca...@we...>]

On 23/Aug/2006 13:34 Morris Hooten - SES Web Services wrote ..
> Is there an option or module to track who and how many times a user has
> logged into usermin?
> 
> can't seem to find anything.

The support for logging in Usermin isn't as extensive as Webmin, but you
can track user logins in the /var/usermin/miniserv.log file. Also, if syslog
support is enabled (as it is by default), each login will be recorded in
/var/log/secure or /var/log/authlog.

 - Jamie

Re: [webmin-l] What defines permission for uploaded files if not theumask

[Jamie C. <jca...@we...>]

On 23/Aug/2006 13:14 Munzir Taha (=?utf-8?q?=D9=85=D9=86=D8=B0=D8=B1?=  =?utf-8?q?_=D8=B7=D9=87?=) wrote ..
> Hi,
> Some usermin users reported that their uploaded files (especially compressed
> files when extracted) would have a permission of 600 and they need to change
> the permission to 644 using the info button. I am not able to reproduce
> it though I tried it from linux and windows using firefox and explorer. Any
> hint what could be the problem with them?

I guess the umask is the problem.. unfortunately Webmin doesn't yet have
an option to set its own umask, but I will add this in future.
 
> Also, may I request to add the support of extracting .tar.bz2 files? My
> experience with them they have better compression ratio than .tar.gz in
> general.

Nice idea ... I will add this to the next release.

 - Jamie

[webmin-l] Java File Manager Applet

[Morris H. - S. W. S. <Mor...@Su...>]

Is there any plans to upgrade the file manager applet anytime in the 
future to allow
for better features of uploading and downloading files such as:

Features like Intelligent Multi-Part Downloading, Automatic Error 
Recovery, uploading status, etc.

Thanks

[webmin-l] Usermin User Logging

[Morris H. - S. W. S. <Mor...@Su...>]

Is there an option or module to track who and how many times a user has 
logged into usermin?

can't seem to find anything.

[webmin-l] What defines permission for uploaded files if not the umask

[Munzir T. ( ) <mun...@gm...>]

Hi,
Some usermin users reported that their uploaded files (especially compressed 
files when extracted) would have a permission of 600 and they need to change 
the permission to 644 using the info button. I am not able to reproduce it 
though I tried it from linux and windows using firefox and explorer. Any hint 
what could be the problem with them?

Also, may I request to add the support of extracting .tar.bz2 files? My 
experience with them they have better compression ratio than .tar.gz in 
general.

Keep up the good work.

Note: not sure whether this would reach the list so I cc Jamie.

-- 
Munzir Taha
Telecommunications and Electronics Engineer
Maintainer of Fedora Arabic Translation Project
https://listman.redhat.com/mailman/listinfo/fedora-trans-ar
Maintainer of the OpenBugs project page at
http://www.arabic-fedora.org/munzir/OpenBugs.html
Master CIW Designer, ICDL, MOUS, Linux+, LPI 101
Riyadh, SA

Re: [webmin-l] ftp questions/recommendations (also web mailquestions)

[John H. <web...@ew...>]

Barry wrote:
> Thanks Jamie -
>
> I might need that eventually for some domains, so good to know.
>
> Any tips on configuration options for virtual hosting with vsftpd? 
> Currently googling, haven't found anything that makes sense yet...
>
> Best,
>
> Barry
>   
First, check that the 'Users' have ftp access. You can do this in 
Virtualmin by looking at the domain owner/user under the 'FTP and Mail 
Users' button. Likely they have access already.

OH!!! and make sure you have vsftp set to start at bootup and of course 
that it is running now....

Within the vsftp module, I turn off all anon ftp and in the 'Local User' 
area, I set everything to yes... Enable, Chroot and Write. I set a 
welcome message and that's it for the interface part.

If you click on manual entries, you'll see the config file which 
contains a lot of notes and abilities. It really comes down to what you 
want to do, how secure you want to run and such as that.

As for FTPing to CentOS/RHEL systems, I've found passive mode is pretty 
much broken. You have to do additional configurations to get passive to 
work, back near the kernel level.. and even then I haven't really been 
completely successful with totally smooth transfers. I'll get back to 
this again sometime in the future... but port mode works beautifully. So 
if you find someone is having trouble with 'seeing' their files, but are 
logging in... have them set the transfer mode to port.. or uncheck 
passive, whichever their ftp client allows.

Best,
John Hinton


>
>
> Jamie Cameron wrote:
>   
>> That plugin isn't actually for managing vsftpd fully - instead, it just
>> allows you to enable a vsftpd virtual IP anonymous FTP server for a domain
>> in Virtualmin. Which is probably not what you are looking for ..
>>
>>  - Jamie
>>
>> On 23/Aug/2006 07:43 Barry wrote ..
>>     
>>> Thanks John -
>>>
>>> I installed vsftpd and the vsftpd module - yes, pretty plain. But should
>>> be OK.
>>>
>>> I also installed Jamie's vsftpd module for virtualmin. When I installed,
>>> the install output said  it was "hidden". which it dies seem to be since
>>> I can not locate how to configure it.
>>>
>>> Any tips?
>>>
>>> Best,
>>>
>>> Barry
>>> John Hinton wrote:
>>>       
>>>> Barry wrote:
>>>>         
>>>>> Hi all - I am running a centos 4.3 system with a bunch of virtual 
>>>>> domains. Latest webmin 1.290, just upgraded to virtualmin gpl  tonight.
>>>>>
>>>>>
>>>>> Until now there has been no ftp server installed on this system. I'd
>>>>> like to have virtual domains, automiatically configured for new 
>>>>> virtual servers, and willing to do old ones byhand to get them 
>>>>> launched although if it happened automatically that would be good too.
>>>>>   
>>>>>           
>>>> vsftp is the default for CentOS. It's solid performer and using it keeps
>>>> you abreast of updates as with other packages.
>>>>
>>>> There is a module for it which works fine.. not a lot of frills, but
>>>>         
>>> it 
>>>       
>>>> does what you need. It does have all the basics available easily and
>>>>         
>>> has 
>>>       
>>>> the ability to open the config file for editing within Webmin.
>>>>
>>>> Best,
>>>> John Hinton
>>>>         
>>>>> Any recommendations on ftp servers that are up to the task and have
>>>>>           
>>> a 
>>>       
>>>>> nice webmin interface? How will I go about getting the old virtual 
>>>>> servers set up?
>>>>>
>>>>> And as long as I am at it, I plan to add webmail capabilities soon too
>>>>> - any recommendations for applications? preferably with webmin modules
>>>>> too, and also would be good if old domains can be brought on board 
>>>>> relatively easily....
>>>>>
>>>>> Thanks!
>>>>>
>>>>> Barry
>>>>>
>>>>> -------------------------------------------------------------------------
>>>>> Using Tomcat but need to do more? Need to support web services, security?
>>>>> Get stuff done quickly with pre-integrated technology to make your job
>>>>> easier
>>>>> Download IBM WebSphere Application Server v.1.0.1 based on Apache 
>>>>> Geronimo
>>>>> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>>>>> -
>>>>> Forwarded by the Webmin mailing list at 
>>>>> web...@li...
>>>>> To remove yourself from this list, go to
>>>>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>>>
>>>>>
>>>>>
>>>>>   
>>>>>           
>>> -------------------------------------------------------------------------
>>> Using Tomcat but need to do more? Need to support web services, security?
>>> Get stuff done quickly with pre-integrated technology to make your job
>>> easier
>>> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
>>> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>>> -
>>> Forwarded by the Webmin mailing list at web...@li...
>>> To remove yourself from this list, go to
>>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>       
>
>
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
> !DSPAM:44ec776279742127750296!
>
>   

Re: [webmin-l] Migrating users from one system to another

[Carlton T. <ca...@gi...>]

Jamie,

Thanks for the reply. I have implemented it but I am having a
problem with the Perl modules. The problem seems to be caused
by the fact that the program does not have all the context
information correctly configured.

As an example, the line:

   &foreign_require("useradmin", "user-lib.pl");

causes the program to generate the error message:

  "module useradmin does not exist"

but if I replace that with:

  require 'useradmin/user-lib.pl';

it gets past that point OK.

Also:

  &useradmin::making_changes();

causes the error:

  Undefined subroutine &useradmin::making_changes called...

but removing the module name (ie. useradmin::), the call to
making_changes works OK.

By making changes to my program I can get Perl to satisfy all
the direct references. However, those indirect references to
Perl modules made by the Webmin functions I call are failing
with similar error messages.

Thanks in advance for any help you can provide.

Regards !

--
Carlton
=============================
GIFFORD INTERNET SERVICES
Bristol, United Kingdom
Tel: 0845 868 2245
Fax: 0845 004 6843
Email: ad...@gi...
Web: http://www.gifford.co.uk
=============================

On Tue, 22 Aug 2006, Jamie Cameron wrote:

> On 22/Aug/2006 08:53 Carlton Thomas wrote ..
> >
> > Hi,
> >
> > I need to migrate some users from an old UNIX system to a
> > Linux box. Since I need to do a number of operations, eg.
> > copy user files, I have decided to write a Perl script to
> > automate the task. To simplify things and to take advantage
> > of some of Webmin's functionality, I would like to have my
> > script call the Webmin "save_user.cgi" script to add the
> > users to the Linux box.
> >
> > My script will run on the Linux box and do the following:-
> >
> > 1) read a line from the password file
> >
> > 2) parse the line to extract things like username, enc_password
> >
> > 3) call Webmin's "save_user.cgi" to add new user to linux box
> >
> > 4) rcp user's files from old box to new directories on Linux box
> >
> > 5) chown and chgrp user's files
> >
> > Is it feasible (or even possible) to use the Webmin module in this
> > way?  If it is possible, what do I need to do to ensure that the
> > Webmin script will run correctly, eg. setting environment variables.
>
> Yes, you could use a command-line program that calls Webmin
> functions to do this. I would recommend putting it in the base
> directory (typically /usr/libexec/webmin), and coding it like :
>
> #!/usr/bin/perl
>
> $no_acl_check++;
> $ENV{'WEBMIN_CONFIG'} ||= "/etc/webmin";
> $ENV{'WEBMIN_VAR'} ||= "/var/webmin";
> if ($0 =~ /^(.*\/)[^\/]+$/) {
>         chdir($1);
>         }
> chop($pwd = `pwd`);
> $0 = "$pwd/create-users.pl";
> require './web-lib-lib.pl';
> $< == 0 || die "create-users.pl must be run as root";
>
> &foreign_require("useradmin", "user-lib.pl");
> &useradmin::making_changes();
> while(<STDIN>) {
>   # Parse user and create object
>   $user = { ... };
>
>   &useradmin::create_user($user);
>   }
> &useradmin::made_changes();
>
>  - Jamie
>
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>

[webmin-l] Why some of my messages don't reach the list?

[Munzir T. ( ) <mun...@gm...>]

Hi,
Some messages I have sent haven't reach the list. e.g. I sent a message 
entitled "How can usermin's view apache log files" many times to no avail!

-- 
Munzir Taha
Telecommunications and Electronics Engineer
Maintainer of Fedora Arabic Translation Project
https://listman.redhat.com/mailman/listinfo/fedora-trans-ar
Maintainer of the OpenBugs project page at
http://www.arabic-fedora.org/munzir/OpenBugs.html
Master CIW Designer, ICDL, MOUS, Linux+, LPI 101
Riyadh, SA