webadmin-list — Webmin users mailing list

Re: [webmin-l] Access Contorl to limit period for webmin users.

[Jamie C. <jca...@we...>]

On Sat, 2006-01-28 at 00:01, Chong Forward wrote:
> Dear all,
>     Anyone have idea about There are no configure to control time
> access for webmin's users. For example , 'usera' can access webmin
> between 8.00-12.00 or 'userb' can access webmin only monday and etc.
>     Which module or configure in webmin can do this access control? 

Hi,
At the moment, there is no way to limit when a Webmin user can login.
However, that is a pretty cool idea .. I may add it in a future release.

 - Jamie

Re: [webmin-l] Server Logs Regarding Possible Attack

[Jamie C. <jca...@we...>]

Is anything appearing in the miniserv.error log file? If not, that suggests the attack was at a lower protocol level, such as partially opening a huge number of TCP connections to use up the Webmin processes's listen queue. 

If so, this makes it more of a denial-of-service attack than a security breach. As far as I know, there isn't much you can do apart from blocking the attacker at your firewall, assuming you know their IP.

 - Jamie

-----Original Message-----

From:  MWS <we...@ro...>
Subj:  [webmin-l] Server Logs Regarding Possible Attack
Date:  Fri 27 Jan 2006 3:12 pm
Size:  996 bytes
To:  web...@li...


I had a weird situation yesterday where my server seemed to be under attack, or maybe just had a problem.

At first, the ports, 10000 and 20000, would not respond.  Then ssh and http both went down.  Ftp stayed available.

My network center eventually cleared up the issues, but told me it was up to me to figure out what went wrong.

Where do I look?

I looked at the logs under var/webmin/webmin.log, but don't see anything unusual.

Any suggestions?

Thanks,

-Mike


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
-
Forwarded by the Webmin mailing list at web...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Postfix module - Broken help file on Virtual Domains page

[Jamie C. <jca...@we...>]

On Sat, 2006-01-28 at 09:02, Dave Isaacs wrote:
> I am running Webmin 1.250 on Red Hat EL3, with Postfix 2.1.6.
> 
> I enter the Postfix module/Virtual Domains page and click the label
> names to bring up the help.
> 
> For "Domain mapping lookup tables" I get:
> "Failed to read help file
> /usr/libexec/webmin/postfix/help/opt_virtual_alias_maps.html"
> 
> For "Domains to perform virtual mapping for" I get:
> "Failed to read help file
> /usr/libexec/webmin/postfix/help/opt_virtual_alias_domains.html"
> 
> Is this a known issue, or do I have a configuration problem?

This is a bug, which will be fixed in the next Webmin release.

 - Jamie

[webmin-l] Postfix module - Broken help file on Virtual Domains page

[Dave I. <dav...@en...>]

I am running Webmin 1.250 on Red Hat EL3, with Postfix 2.1.6.

I enter the Postfix module/Virtual Domains page and click the label names to
bring up the help.

For "Domain mapping lookup tables" I get:
"Failed to read help file
/usr/libexec/webmin/postfix/help/opt_virtual_alias_maps.html"

For "Domains to perform virtual mapping for" I get:
"Failed to read help file
/usr/libexec/webmin/postfix/help/opt_virtual_alias_domains.html"

Is this a known issue, or do I have a configuration problem?

Thanks

Dave Isaacs

[webmin-l] postfix > virtual domains > virtualmin

[stefan <st...@fu...>]

Hello all,

I have just done a fresh debian 3.1 installation with webmin and virtualmin.
When I want access to virtualmin and do "re-check and refresh configuration"
 I get the error :

"     No virtual domains file was found in your Postfix configuration. Mayb=
e=20
no virtual domain map has been defined.

=2E. your system is not ready for use by Virtualmin."

okay, so I went to postfix and want to add an mapping.
Then Iget the error:

"Error while saving a mapping : No map file defined"

I googled around but could not find a solution for it.

Can someone help?

tia

stefan

Re: [webmin-l] SNMP on System and Server Status

[Enrique T. <enr...@gm...>]

Hi, Jamie

There have been problems in the download section of the web, and I
think last time I downloaded the version not changed. I have it now,
but I still have problems.
When I use the SNMP-session module, the traps does not include any
variable, and they come with OIDs not defined.

I think you've used wrong @oids in monitor.pl. Also, the generic trap
must be 6 and not 2.

I've made a working (but very bad) code to emulate the traps generated
by the Net::SNMP in monitor.pl (for snmp version 1):

        if ($config{'snmp_version'} =3D=3D 1) {
                local @myoid=3D ( 1,3,6,1,4,1 );
                local @mytrap=3D ( 1,3,6,1,4,1,10000,1 );
                $rv =3D $session->trap_request_send(
                        encode_oid(@myoid),
                      =20
encode_ip_address(&to_ipaddress(&get_system_hostname())),
                        encode_int(6), #generic trap
                        encode_int(0),
                        encode_timeticks(0),
                        [encode_oid(@mytrap,1),
                        encode_string($oids[2])]);
                }



Thank you







2006/1/25, Enrique Toledano <enr...@gm...>:
> Hi again, Jamie.
>
> I've seen you've included the support for SNMP-session in the 1.259
> release (you are incredibly fast!), but I can't see any changes in the
> module (it still needs Net-SNMP).
>
> What I'm doing wrong?
>
> Thanks
>
> Wed, 25 Jan 2006 23:13:00 1100, Jamie Cameron <jca...@we...>:
> > Hi Enrique,
> > No, there is no way to run SQL from a file at the moment .. only a fixe=
d SQL command entered into the custom command.
> >
> > However, you could create a command that runs a program like 'mysql -u =
user -ppass db <file' .. that would have the same effect.
> >
> >  - Jamie
> >
> > -----Original Message-----
> >
> > From:  Enrique Toledano <enr...@gm...>
> > Subj:  Re: [webmin-l] SNMP on System and Server Status
> > Date:  Wed 25 Jan 2006 6:13 pm
> > Size:  2K
> > To:  web...@li...
> >
> > Thank you very much, Jamie!
> >
> > Another question:
> >
> > In the "Custom Commands" module, is there (or is going to be) a way to
> > select an SQL file to execute on a database?
> >
> >
> > Thank you again
> >
> >
> >
> >
> > 25 Jan 2006 09:36:26 +1100, Jamie Cameron <jca...@we...>:
> > > On Wed, 2006-01-25 at 04:54, Enrique Toledano wrote:
> > > > Hi all
> > > >
> > > > Jamie, this is a feature request:
> > > > To use SNMP on the System and Server Status module, it's necessary =
to
> > > > install several perl modules, that can't be installed (or I don't k=
now
> > > > how to do it) on old versions of Perl.
> > > >
> > > > Have you considered to support the module from Simon Leinen "SNMP f=
or
> > > > Perl 5" to allow the use of this feature (It works on Perl 5 and it
> > > > doesn't need other modules) on old perl versions?
> > > >
> > > > http://www.switch.ch/misc/leinen/snmp/perl/
> > >
> > > I suppose it could be done, although the documentation on sending tra=
ps
> > > on that site is rather lacking. I should be able to put it into the n=
ext
> > > Webmin release.
> > >
> > >  - Jamie
> > >
> > >
> > >
> > >
> > > -------------------------------------------------------
> > > This SF.net email is sponsored by: Splunk Inc. Do you grep through lo=
g files
> > > for problems?  Stop!  Download the new AJAX search engine that makes
> > > searching your log files as easy as surfing the  web.  DOWNLOAD SPLUN=
K!
> > > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&d=
at=3D121642
> > > -
> > > Forwarded by the Webmin mailing list at web...@li...=
ge.net
> > > To remove yourself from this list, go to
> > > http://lists.sourceforge.net/lists/listinfo/webadmin-list
> > >
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by: Splunk Inc. Do you grep through log =
files
> > for problems?  Stop!  Download the new AJAX search engine that makes
> > searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> > http://sel.as-us.falkag.net/sel?cmd-
> > Forwarded by the Webmin mailing list at web...@li...=
.net
> > To remove yourself from this list, go to
> > http://lists.sourceforge.net/lists/listinfo/webadmin-list
> >
> > --- message truncated ---
> >
> >
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by: Splunk Inc. Do you grep through log =
files
> > for problems?  Stop!  Download the new AJAX search engine that makes
> > searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=
=3D121642
> > -
> > Forwarded by the Webmin mailing list at web...@li...=
.net
> > To remove yourself from this list, go to
> > http://lists.sourceforge.net/lists/listinfo/webadmin-list
> >
>

[webmin-l] Access Contorl to limit period for webmin users.

[Chong F. <cho...@gm...>]

Dear all,
    Anyone have idea about There are no configure to control time access fo=
r
webmin's users. For example , 'usera' can access webmin between
8.00-12.00or 'userb' can access webmin only monday and etc.
    Which module or configure in webmin can do this access control?

Thanks
KaiChelsea

RE: [webmin-l] Generating SSL CSR Requests in Webmin

[Frank H. <fr...@we...>]

Cheers Jamie - that explains it!

Glad I wasn't missing the obvious.

----Original Message-----
From: web...@li...
[mailto:web...@li...] On Behalf Of Jamie
Cameron
Sent: 27 January 2006 09:22
To: web...@li...
Subject: Re: [webmin-l] Generating SSL CSR Requests in Webmin

Hi Frank,
There is actually a bug in the current version of Webmin that prevents
custom SSL cert sizes from working - instead, it always uses the
default. However, the upcoming 1.260 version will fix this bug.

 - Jamie

-----Original Message-----

From:  "Frank Hutcheon" <fr...@we...>
Subj:  [webmin-l] Generating SSL CSR Requests in Webmin
Date:  Fri 27 Jan 2006 4:03 am
Size:  2K
To:  <web...@li...>

     Recently I was migrating a website to a Webmin managed  box and had
to get an SSL certificate for the site.
=20
 When I sent off the CSR to the issuer they replied that  the CSR I
generated and sent them was too small. I just accepted the default
(512) when creating it.
=20
 I regenerated a new one and set it to a custom size of  1024 but they
replied again that this was too small.
=20
 I got round it by generating a CSR on the old server  (which was a bit
longer in size) - they supplied the SSL cert and thenI  copied it to the
Webmin server, switched the SSL engine on in httpd.conf and it  worked
fine.
=20
 I've a few more of these to do in the coming year and  wouldn't mind a
pointer if I'm doing something wrong when generating the CSR or  if
there a setting I've missed in Virtualmin or even missing something very
obvious!=20
=20
 I'd rather not have to create sites on an Ensim box  just to have to
manually transfer them back to the Webmin managed  ones.
=20
 Thanks in advance.
=20
 Frank
 =20



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log
files for problems?  Stop!  Download the new AJAX search engine that
makes searching your log files as easy as surfing the  web.  DOWNLOAD
SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D=
121642
-
Forwarded by the Webmin mailing list at
web...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list

RE: [webmin-l] Server Logs Regarding Possible Attack

[Neal M. <Ne...@Mo...>]

Mike:

No guarantee this was your problem, but I have seen something similar
recently.  I was experimenting with policy based routing and managed to
get things hosed up.  Specifically, I had traffic coming in one adapter
but going out a different one.  The remote side of my connections were
ignoring my responses since they had the wrong IP - so the remote would
attempt additional connections.  This caused my number of open
connections to grow rapidly, and my normally "well behaved" Linux server
slowed to a crawl.  It was so bad I had to even wait for keyboard echo
when on the console.

(Note: I believe this kind of thing could also happen if you're the
target of a syn flood attack).

If you suspect something like this is happening, it's easy enough to
identify.  Run a netstat command to get an approximate count of
connections:

netstat -an -A inet | wc -l

run it several times and see if the number returned is growing.

If it is, (and you have console access), stop the network adapters and
see if the problem clears up.  For me: ifdown eth0 or ifconfig eth0 down
does the trick.  You'd need to use the appropriate command for your
system if webmin is unavailable.

With the interface(s) down, run the netstat command again and see if
your count is decreasing.  If it is, and the system appears to become
more responsive, you likely did have a problem related to the number of
open connections.

None of this has much to do with Webmin...and feel free to ignore me if
I'm way off track!


Regards,

Neal Morgan=20




-----Original Message-----
From: web...@li...
[mailto:web...@li...] On Behalf Of MWS
Sent: Thursday, January 26, 2006 8:11 PM
To: web...@li...
Subject: [webmin-l] Server Logs Regarding Possible Attack


I had a weird situation yesterday where my server seemed to be under
attack, or maybe just had a problem.

At first, the ports, 10000 and 20000, would not respond.  Then ssh and
http both went down.  Ftp stayed available.

My network center eventually cleared up the issues, but told me it was
up to me to figure out what went wrong.

Where do I look?

I looked at the logs under var/webmin/webmin.log, but don't see anything
unusual.

Any suggestions?

Thanks,

-Mike


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log
files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D=
121642
-
Forwarded by the Webmin mailing list at
web...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list

[webmin-l] Fetchmail Module Issue

[John H. <web...@ew...>]

When I go to Fetchmail and click on the "..." button, to select a user 
to "Add Fetchmail server for user:", the popup box seems to be too 
small. Under Firefox, I don't get a scroll bar on the right, nor do I 
get a grab point at the bottom right of the window in order to resize 
the window. So, I can't scroll to and select most users. This seems to 
be due to a long hostname, which is displayed in the status bar at the 
bottom of the popup browser window.

I tried the same thing under other areas and there doesn't seem to be a 
problem.

It would be nice to have an interface feature, like the help window size 
feature, for these user or file select boxes as well. Statistics are 
showing the the predominant resolution run now is 1024x768 with few 
users still running 800x600, almost none at 640x480.. and 1280x1024 
coming on strong. Perhaps increasing the size of several things would be 
acceptable now? Many of the textboxes even seem to me to be really small 
(running 1280x1024). Ahh yes... as if you don't have enough to do!

Thanks again for a great program. I guess it is really a 'positive' that 
all I have to complain about is the interface! ;)

John Hinton

[webmin-l] Server Logs Regarding Possible Attack

[MWS <we...@ro...>]

I had a weird situation yesterday where my server seemed to be under attack, or maybe just had a problem.

At first, the ports, 10000 and 20000, would not respond.  Then ssh and http both went down.  Ftp stayed available.

My network center eventually cleared up the issues, but told me it was up to me to figure out what went wrong.

Where do I look?

I looked at the logs under var/webmin/webmin.log, but don't see anything unusual.

Any suggestions?

Thanks,

-Mike

Re: [webmin-l] Generating SSL CSR Requests in Webmin

[Jamie C. <jca...@we...>]

Hi Frank,
There is actually a bug in the current version of Webmin that prevents custom SSL cert sizes from working - instead, it always uses the default. However, the upcoming 1.260 version will fix this bug.

 - Jamie

-----Original Message-----

From:  "Frank Hutcheon" <fr...@we...>
Subj:  [webmin-l] Generating SSL CSR Requests in Webmin
Date:  Fri 27 Jan 2006 4:03 am
Size:  2K
To:  <web...@li...>

     Recently I was migrating a website to a Webmin managed  box and had to get an SSL certificate for the site.
 
 When I sent off the CSR to the issuer they replied that  the CSR I generated and sent them was too small. I just accepted the default  (512) when creating it.
 
 I regenerated a new one and set it to a custom size of  1024 but they replied again that this was too small.
 
 I got round it by generating a CSR on the old server  (which was a bit longer in size) - they supplied the SSL cert and thenI  copied it to the Webmin server, switched the SSL engine on in httpd.conf and it  worked fine.
 
 I've a few more of these to do in the coming year and  wouldn't mind a pointer if I'm doing something wrong when generating the CSR or  if there a setting I've missed in Virtualmin or even missing something very  obvious! 
 
 I'd rather not have to create sites on an Ensim box  just to have to manually transfer them back to the Webmin managed  ones.
 
 Thanks in advance.
 
 Frank
  

RE: [webmin-l] External squid-style authentication program ?

[Jamie C. <jca...@we...>]

Hi Dave,
Webmin can use PAM to check passwords, and PAM has modules for all kinds of multi-factor authentication. However, for this to work there are three things you need to setup :

- All your Webmin logins must have their passwords set the 'unix authentication' , and Unix users with the same names must exist.

- The Authen::PAM perl module must be installed, and /etc/pam.d/webmin must be configured to do multi-factor authentication.

- In the Webmin Configuration module on the Authentication page, the 'full PAM conversations' option must be selected.

 - Jamie

-----Original Message-----

From:  Dave Isaacs <dav...@en...>
Subj:  RE: [webmin-l] External squid-style authentication program ?
Date:  Thu 26 Jan 2006 11:08 pm
Size:  2K
To:  "'web...@li...'" <web...@li...>

Thanks, I will look into that.

What about enhanced login using multiple-factor authentication? I am
thinking here of an interactive login, where there is a username/password
challenge, followed by an Entrust Identity Guard challenge (on a new page).
I am assuming that to do this I will have to customize the Webmin login page
beyond what is supported in the configuration.  Which Webmin scripts should
I be looking at to do this?

Thanks

Dave I

-----Original Message-----
From: web...@li...
[mailto:web...@li...] On Behalf Of Joe Cooper
Sent: Thursday, January 26, 2006 12:58 AM
To: web...@li...
Subject: Re: [webmin-l] External squid-style authentication program ?


Yes.  There are several that come with Squid.  On a Red Hat system 
they'll be in /usr/lib/squid.  There are quite a few others on the web 
in varying states of quality.  Writing ones own is not difficult, as 
you've seen.

BTW-the standard way to solve your problem is to put Perl into 
unbuffered mode at the start of the code (but a flush works fine too). 
You can do that with:

$|=1;

Somewhere early in the file.  When things get complicated, it's nice to 
not have to think about flushing after every result.

The Squid FAQ has a lot of good information about authenticators.

Dave Isaacs wrote:
> Solved my own problem.  I just needed to add a flush command after the
> print.
>  
> Follow-up question: Are there any standard external authentication in
> existence, to support (for example) LDAP or kerberos authentication?
>  
> Thanks
>  
> Dave I
> 
>     -----Original Message-----
>     *From:* web...@li...
>     [mailto:web...@li...] *On Behalf Of
>     *Dave Isaacs
>     *Sent:* Wednesday, January 25, 2006 8:53 AM
>     *To:* 'web...@li...'
>     *Subject:* [webmin-l] External squid-style authentication program 
> ?
> 
>     I am experimenting with the Webmin Authenticate feature "External
>     squid-style authentication program" that allows you to use an
>     external application to authenticate username/password login. 
>     Unfortunately, I am failing at the most simple test.
>      
>     Just to try it out, I created an auth.pl script that does nothing
>     except read from STDIN and unconditionally prints out "OK\n" for
>     each line of input.
>      
>     #!/usr/bin/perl
>     while (<STDIN>) {
>             print "OK\n";
>     }
>     I then specified this script in the "External squid-style
>     authentication program" setting on the Authentication page. This
>     should, if I am understanding this correctly, successfully
>     authenticate any Webmin use who has "External authentication
>     program" specified in their user access rights.
>      
>     But it is not working.  When trying to log in with an externally
>     authenticated user, I don't get success or failure.  What happens is

--- message truncated ---

[webmin-l] Generating SSL CSR Requests in Webmin

[Frank H. <fr...@we...>]

Recently I was migrating a website to a Webmin managed box and had to
get an SSL certificate for the site.
=20
When I sent off the CSR to the issuer they replied that the CSR I
generated and sent them was too small. I just accepted the default (512)
when creating it.
=20
I regenerated a new one and set it to a custom size of 1024 but they
replied again that this was too small.
=20
I got round it by generating a CSR on the old server (which was a bit
longer in size) - they supplied the SSL cert and then I copied it to the
Webmin server, switched the SSL engine on in httpd.conf and it worked
fine.
=20
I've a few more of these to do in the coming year and wouldn't mind a
pointer if I'm doing something wrong when generating the CSR or if there
a setting I've missed in Virtualmin or even missing something very
obvious!=20
=20
I'd rather not have to create sites on an Ensim box just to have to
manually transfer them back to the Webmin managed ones.
=20
Thanks in advance.
=20
Frank

RE: [webmin-l] External squid-style authentication program ?

[Dave I. <dav...@en...>]

Thanks, I will look into that.

What about enhanced login using multiple-factor authentication? I am
thinking here of an interactive login, where there is a username/password
challenge, followed by an Entrust Identity Guard challenge (on a new page).
I am assuming that to do this I will have to customize the Webmin login page
beyond what is supported in the configuration.  Which Webmin scripts should
I be looking at to do this?

Thanks

Dave I

-----Original Message-----
From: web...@li...
[mailto:web...@li...] On Behalf Of Joe Cooper
Sent: Thursday, January 26, 2006 12:58 AM
To: web...@li...
Subject: Re: [webmin-l] External squid-style authentication program ?


Yes.  There are several that come with Squid.  On a Red Hat system 
they'll be in /usr/lib/squid.  There are quite a few others on the web 
in varying states of quality.  Writing ones own is not difficult, as 
you've seen.

BTW-the standard way to solve your problem is to put Perl into 
unbuffered mode at the start of the code (but a flush works fine too). 
You can do that with:

$|=1;

Somewhere early in the file.  When things get complicated, it's nice to 
not have to think about flushing after every result.

The Squid FAQ has a lot of good information about authenticators.

Dave Isaacs wrote:
> Solved my own problem.  I just needed to add a flush command after the
> print.
>  
> Follow-up question: Are there any standard external authentication in
> existence, to support (for example) LDAP or kerberos authentication?
>  
> Thanks
>  
> Dave I
> 
>     -----Original Message-----
>     *From:* web...@li...
>     [mailto:web...@li...] *On Behalf Of
>     *Dave Isaacs
>     *Sent:* Wednesday, January 25, 2006 8:53 AM
>     *To:* 'web...@li...'
>     *Subject:* [webmin-l] External squid-style authentication program 
> ?
> 
>     I am experimenting with the Webmin Authenticate feature "External
>     squid-style authentication program" that allows you to use an
>     external application to authenticate username/password login. 
>     Unfortunately, I am failing at the most simple test.
>      
>     Just to try it out, I created an auth.pl script that does nothing
>     except read from STDIN and unconditionally prints out "OK\n" for
>     each line of input.
>      
>     #!/usr/bin/perl
>     while (<STDIN>) {
>             print "OK\n";
>     }
>     I then specified this script in the "External squid-style
>     authentication program" setting on the Authentication page. This
>     should, if I am understanding this correctly, successfully
>     authenticate any Webmin use who has "External authentication
>     program" specified in their user access rights.
>      
>     But it is not working.  When trying to log in with an externally
>     authenticated user, I don't get success or failure.  What happens is
>     that the browser just spins and there is never a response.
>      
>     Any ideas as to what the problem is?
>      
>     The Webmin version is 1.240 running on Red hat EL3 Workstation)
>      
>     Thanks
>      
>     Dave Isaacs
>      
>      



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
-
Forwarded by the Webmin mailing list at web...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Can custom modules for virtualmin have parameters in templates

[Jamie C. <jca...@we...>]

Hi Jonas,
It is possible for a module to have it's own template-level settings, but only in the latest version of the Pro version of Virtualmin. The next release of the GPL version will also include this capability..

 - Jamie

-----Original Message-----

From:  Jonas Munk <jon...@gm...>
Subj:  [webmin-l] Can custom modules for virtualmin have parameters in templates
Date:  Thu 26 Jan 2006 8:59 pm
Size:  533 bytes
To:  web...@li...

I am thinking of building a module for virtualmin – but its only
interesting if I can configure the module in templates.

Is it possible to have parameters configured in a template?

Jonas Munk
ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿӆ+ù޵隊X¬²š'²ŠÞu¼ÿJ™nžB'sðèʋ ­êm†º.‚hø¥zÇ讚ènW¦³ô­¢ŸÃ£	塧m…éÞÀ@^ǚ­È^ž§zØZ¶f¤zËj·!Šx2¢êå¢â•ë±æ¬É«,º·âža{›ü3–4³€
#ËPÒÿ†Ûiÿÿìz_Ú³û¬ýö¥‘¨ÿë±éÿrg–yÿ’'×MøßoۉßN<ë÷Z×®6üZ+ÁªÝyÖò¶–y¹¢žf¢–)à–+-jÜm§fŠåŠËÿ–+-³û(º·~Šà{ùÞµ:+zj/{*.®Ç¥}úèšØb²X¬·ø(¶ˆm¶ŸÿþX¬¶Ïì¢êÜyú+ïçzßåŠËlþX¬¶)ߣüm§fŠå

Re: [webmin-l] Login

[Jamie C. <jca...@we...>]

Hi Grant,
At the moment, no ... mainly because there is no Perl module for Wtmp. You can enable Utmp logging though, which is similar (but only keeps track of currently logged in users).

 - Jamie

-----Original Message-----

From:  "Grant Peel" <gp...@th...>
Subj:  [webmin-l] Login
Date:  Thu 26 Jan 2006 1:05 am
Size:  619 bytes
To:  <web...@li...>

Hi all,

Is there a way to enable login logging to the wtmp log for Webmin/Usermin?

-GRant



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
-
Forwarded by the Webmin mailing list at web...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list

[webmin-l] Can custom modules for virtualmin have parameters in templates

[Jonas M. <jon...@gm...>]

SSBhbSB0aGlua2luZyBvZiBidWlsZGluZyBhIG1vZHVsZSBmb3IgdmlydHVhbG1pbiCWIGJ1dCBp
dHMgb25seQppbnRlcmVzdGluZyBpZiBJIGNhbiBjb25maWd1cmUgdGhlIG1vZHVsZSBpbiB0ZW1w
bGF0ZXMuCgpJcyBpdCBwb3NzaWJsZSB0byBoYXZlIHBhcmFtZXRlcnMgY29uZmlndXJlZCBpbiBh
IHRlbXBsYXRlPwoKSm9uYXMgTXVuawo=

Re: [webmin-l] External squid-style authentication program ?

[Joe C. <jo...@sw...>]

Yes.  There are several that come with Squid.  On a Red Hat system 
they'll be in /usr/lib/squid.  There are quite a few others on the web 
in varying states of quality.  Writing ones own is not difficult, as 
you've seen.

BTW-the standard way to solve your problem is to put Perl into 
unbuffered mode at the start of the code (but a flush works fine too). 
You can do that with:

$|=1;

Somewhere early in the file.  When things get complicated, it's nice to 
not have to think about flushing after every result.

The Squid FAQ has a lot of good information about authenticators.

Dave Isaacs wrote:
> Solved my own problem.  I just needed to add a flush command after the 
> print.
>  
> Follow-up question: Are there any standard external authentication in 
> existence, to support (for example) LDAP or kerberos authentication?
>  
> Thanks
>  
> Dave I
> 
>     -----Original Message-----
>     *From:* web...@li...
>     [mailto:web...@li...] *On Behalf Of
>     *Dave Isaacs
>     *Sent:* Wednesday, January 25, 2006 8:53 AM
>     *To:* 'web...@li...'
>     *Subject:* [webmin-l] External squid-style authentication program ?
> 
>     I am experimenting with the Webmin Authenticate feature "External
>     squid-style authentication program" that allows you to use an
>     external application to authenticate username/password login. 
>     Unfortunately, I am failing at the most simple test.
>      
>     Just to try it out, I created an auth.pl script that does nothing
>     except read from STDIN and unconditionally prints out "OK\n" for
>     each line of input.
>      
>     #!/usr/bin/perl
>     while (<STDIN>) {
>             print "OK\n";
>     }
>     I then specified this script in the "External squid-style
>     authentication program" setting on the Authentication page. This
>     should, if I am understanding this correctly, successfully
>     authenticate any Webmin use who has "External authentication
>     program" specified in their user access rights.
>      
>     But it is not working.  When trying to log in with an externally
>     authenticated user, I don't get success or failure.  What happens is
>     that the browser just spins and there is never a response. 
>      
>     Any ideas as to what the problem is?
>      
>     The Webmin version is 1.240 running on Red hat EL3 Workstation)
>      
>     Thanks
>      
>     Dave Isaacs
>      
>      

Re: [webmin-l] SNMP on System and Server Status

[Enrique T. <enr...@gm...>]

Hi again, Jamie.

I've seen you've included the support for SNMP-session in the 1.259
release (you are incredibly fast!), but I can't see any changes in the
module (it still needs Net-SNMP).

What I'm doing wrong?

Thanks

Wed, 25 Jan 2006 23:13:00 1100, Jamie Cameron <jca...@we...>:
> Hi Enrique,
> No, there is no way to run SQL from a file at the moment .. only a fixed =
SQL command entered into the custom command.
>
> However, you could create a command that runs a program like 'mysql -u us=
er -ppass db <file' .. that would have the same effect.
>
>  - Jamie
>
> -----Original Message-----
>
> From:  Enrique Toledano <enr...@gm...>
> Subj:  Re: [webmin-l] SNMP on System and Server Status
> Date:  Wed 25 Jan 2006 6:13 pm
> Size:  2K
> To:  web...@li...
>
> Thank you very much, Jamie!
>
> Another question:
>
> In the "Custom Commands" module, is there (or is going to be) a way to
> select an SQL file to execute on a database?
>
>
> Thank you again
>
>
>
>
> 25 Jan 2006 09:36:26 +1100, Jamie Cameron <jca...@we...>:
> > On Wed, 2006-01-25 at 04:54, Enrique Toledano wrote:
> > > Hi all
> > >
> > > Jamie, this is a feature request:
> > > To use SNMP on the System and Server Status module, it's necessary to
> > > install several perl modules, that can't be installed (or I don't kno=
w
> > > how to do it) on old versions of Perl.
> > >
> > > Have you considered to support the module from Simon Leinen "SNMP for
> > > Perl 5" to allow the use of this feature (It works on Perl 5 and it
> > > doesn't need other modules) on old perl versions?
> > >
> > > http://www.switch.ch/misc/leinen/snmp/perl/
> >
> > I suppose it could be done, although the documentation on sending traps
> > on that site is rather lacking. I should be able to put it into the nex=
t
> > Webmin release.
> >
> >  - Jamie
> >
> >
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by: Splunk Inc. Do you grep through log =
files
> > for problems?  Stop!  Download the new AJAX search engine that makes
> > searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=
=3D121642
> > -
> > Forwarded by the Webmin mailing list at web...@li...=
.net
> > To remove yourself from this list, go to
> > http://lists.sourceforge.net/lists/listinfo/webadmin-list
> >
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log fi=
les
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://sel.as-us.falkag.net/sel?cmd-
> Forwarded by the Webmin mailing list at web...@li....n=
et
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
> --- message truncated ---
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log fi=
les
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=
=3D121642
> -
> Forwarded by the Webmin mailing list at web...@li....n=
et
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>

Re: [webmin-l] Users and Groups module misfiring

[Bill A. <waa...@re...>]

On Tuesday 24 January 2006 22:23, Jamie Cameron wrote:
> On Wed, 2006-01-25 at 10:06, William Arlofski wrote:
> > Jamie Cameron wrote:
> > > On Wed, 2006-01-25 at 09:21, William Arlofski wrote:
> > >>A client of mine just reported a STRANGE problem when trying to create
> > >>new users in WebMins "Users and Groups" Module. I have spent the last
> > >>hour troubleshooting and verifying this. What follows is a description
> > >>of what is happening to the system files (/etc/passwd and /etc/shadow)
> > >>as well as the Samba user file (smbpasswd) when a new users is added
> > >> and later edited.
> > >>
> > >>They are currently using Webmin 1.250
> > >>
> > >>
> > >>Create a new user with
> > >>
> > >>id: first_last
> > >>
> > >>User ID: choose text field and type 9999
> > >>select "normal password" radio button and type in "password" (no
> > >> quotes) choose primary group
> > >>
> > >>
> > >>Save
> > >>
> > >>/etc/passwd now contains:
> > >>
> > >>first_last:x:9999:6000:Test User:/home//students/first_last:/bin/false
> > >>
> > >>(which is correct except for the TWO slashes between home and student=
s)
> > >>
> > >>the /etc/shadow file looks like:
> > >>
> > >>first_last:$1$38139902$erEXj5Hm2wp4Dp4qUTzvO0:13172::::::
> > >>
> > >>Which looks correct.
> > >>
> > >>
> > >>BUT, Samba's smbpasswd file contains:
> > >>
> > >>first_last:9999:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXX=
XX
> > >>XXXXXXXXXX:[U ]:LCT-43D6A303:
> > >>
> > >>it is not wrapped in the smbpasswd file. Notice there is no password =
so
> > >>he can not log in to the Samba Domain controller.
> > >>
> > >>
> > >>But wait... Maybe I didn't actually select the "Normal Password" radio
> > >>button when I entered him - even though I did. (This is where it gets
> > >>really strange)
> > >>
> > >>Go back and edit the user:
> > >>
> > >>switch the "Pre encrypted passwrod" radio button to "Normal Password"
> > >>and retyp his password.
> > >>
> > >>Click SAVE...
> > >>
> > >>
> > >>NOW...
> > >>
> > >>/etc/password contains:
> > >>
> > >>first_lastfirst_last:x:9999:6000:Test
> > >>User:/home//students/first_lastfirst_last:/bin/false
> > >>
> > >>(not wrapped of course)
> > >>
> > >>/etc/shadow contains:
> > >>
> > >>first_lastfirst_last:$1$38140733$C29l/0szvz337yXUOwMB3/:13172::::::
> > >>
> > >>AND SMBPASSWD CONTAINS:
> > >>first_lastfirst_last:9999:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXX=
XX
> > >>XXXXXXXXXXXXXXXXXXXX:[U ]:LCT-43D6A641:
> > >>
> > >>
> > >>HHHM!   So I go re-edit the user and notice that his name appears twi=
ce
> > >>in the list of users and in the id field... so I strip off the 2nd
> > >>iteration of his name, set his password again and save:
> > >>
> > >>NOW, /etc/passwd contains:
> > >>
> > >>first_lastfirst_last first_last:x:9999:6000:Test
> > >>User:/home//students/first_lastfirst_last first_last:/bin/false
> > >>
> > >>
> > >>And so on... As it is, Webmin's "Users and Groups" module is no longer
> > >>funtional at my client's site. If there a fix, or if can I provide mo=
re
> > >>information to help solve thess issues please let me know.
> > >
> > > That is extremely strange,
> >
> > Agreed...
> >
> > > and certainly doesn't happen on my system!
> > > What operating system are you running Webmin on there?
> > >
> > >  - Jamie
> >
> > The system is an older RedHat 6.2 system that has had Webmin as its
> > interface for my clients since about December 2000.   Never saw such a
> > funky set of symptoms.
> >
> > As it stands, I can add a user by manually issuing the three commands:
> >
> > # useradd (with all appropriate parameters)
> > # passwd   to set the UNIX password
> > # smbpasswd   and re-typing their samba password twice.
>
> Of those, Webmin actually only uses smbpasswd .. for the user creation,
> it modifies /etc/passwd directly.

Hmmm, perhaps something has gone awry with the smbpasswd file that webmin i=
s=20
calling... I'll check the users and groups module's config as well as the=20
samba module's config to be 100% sure that it is not calling a=20
stray/old/leftover smbpasswd all of a sudden.

But even so, I'd like to keep in mind another odd thing that I reported whi=
ch=20
is that when I go to EDIT a current user the user's ID on the edit page has=
=20
their id automatically inserted twice into the text field. I'll double-chec=
k=20
this on a few users and report back on this, perhaps in a separate thread.=
=20

> > So I know the base command line tools are fully functional.
> >
> > Is there something I can set within webmin to have that module log some
> > debugging information to help track this down? Obviously something is
> > wrong but it is eluding me.
>
> You might want to check out the Webmin Actions Log module, which records
> exactly what changes are made to what files, and what commands are run
> (assuming full logging is enabled).


Looks like FULL logging was/is enabled.  I just checked and the only thing=
=20
that was not enabled was" Record all modified files before actions, for=20
rollbacks". I just checked that box, but it is probably not necessary.


The "Action Details" for that user creation test show that=20
useradmin/save_user.cgi was run and the it created the=20
directory /home/students/first_last with two forward slashes between home a=
ns=20
students, and the data it put into /usr/local/samba/private/smbpasswd was a=
ll=20
XXXXs. I know the two slashes will not affect/break anything, but they were=
=20
never appearing before.=20

Here is a the complete text of that "Action Details" page:

(please ignore the wrapping by my email client on this paste)

=2D-[snip]--=20
Created directory /home//students/first_last
=20
 Executed command
  cp -R \/etc\/skel\/Psidata \/home\/\/students\/first_last\/Psidata=20

  Executed command
  chown  -R 9999:6000 "/home//students/first_last/Psidata"=20

  Executed command
  cp \/etc\/skel\/\.bash_logout \/home\/\/students\/first_last\/\.bash_logo=
ut=20

  Executed command
  cp \/etc\/skel\/\.bash_profile=20
\/home\/\/students\/first_last\/\.bash_profile=20
=20
  Executed command
  cp \/etc\/skel\/\.bashrc \/home\/\/students\/first_last\/\.bashrc=20
=20
  Executed command
  ln -s Psidata \/home\/\/students\/first_last\/\.psi=20
=20
 Executed command
  chown -h -R 9999:6000 "/home//students/first_last/.psi"=20

  Executed command
  cp \/etc\/skel\/\.screenrc \/home\/\/students\/first_last\/\.screenrc=20

  Executed command
  cp -R \/etc\/skel\/\.profile \/home\/\/students\/first_last\/\.profile=20

  Executed command
  chown  -R 9999:6000 "/home//students/first_last/.profile"=20

  Changed file /etc/passwd
  467a468
> first_last:x:9999:6000:Test User:/home//students/first_last:/bin/false

  Changed file /etc/shadow
  471a472
> first_last:$1$38139902$erEXj5Hm2wp4Dp4qUTzvO0:13172::::::

  Changed file /usr/local/samba/private/smbpasswd
  436a437
>=20
first_last:9999:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXX=
XXXXXX:
[U          ]:LCT-43D6A303:

=2D-[snip]-- =20


> By the way, which theme do you have selected in Webmin?
>
>  - Jamie

MSC.Linux Theme


Thanks again Jamie

=2D -
Bill Arlofski
Reverse Polarity
waa...@re...

RE: [webmin-l] External squid-style authentication program ?

[Dave I. <dav...@en...>]

Solved my own problem.  I just needed to add a flush command after the
print.
 
Follow-up question: Are there any standard external authentication in
existence, to support (for example) LDAP or kerberos authentication?
 
Thanks
 
Dave I

-----Original Message-----
From: web...@li...
[mailto:web...@li...] On Behalf Of Dave Isaacs
Sent: Wednesday, January 25, 2006 8:53 AM
To: 'web...@li...'
Subject: [webmin-l] External squid-style authentication program ?


I am experimenting with the Webmin Authenticate feature "External
squid-style authentication program" that allows you to use an external
application to authenticate username/password login.  Unfortunately, I am
failing at the most simple test.
 
Just to try it out, I created an auth.pl script that does nothing except
read from STDIN and unconditionally prints out "OK\n" for each line of
input.
 
#!/usr/bin/perl
while (<STDIN>) {
        print "OK\n";
}

I then specified this script in the "External squid-style authentication
program" setting on the Authentication page. This should, if I am
understanding this correctly, successfully authenticate any Webmin use who
has "External authentication program" specified in their user access rights.
 
But it is not working.  When trying to log in with an externally
authenticated user, I don't get success or failure.  What happens is that
the browser just spins and there is never a response.  
 
Any ideas as to what the problem is?
 
The Webmin version is 1.240 running on Red hat EL3 Workstation)
 
Thanks
 
Dave Isaacs
 
 

[webmin-l] Login

[Grant P. <gp...@th...>]

Hi all,

Is there a way to enable login logging to the wtmp log for Webmin/Usermin?

-GRant

[webmin-l] External squid-style authentication program ?

[Dave I. <dav...@en...>]

I am experimenting with the Webmin Authenticate feature "External
squid-style authentication program" that allows you to use an external
application to authenticate username/password login.  Unfortunately, I am
failing at the most simple test.
 
Just to try it out, I created an auth.pl script that does nothing except
read from STDIN and unconditionally prints out "OK\n" for each line of
input.
 
#!/usr/bin/perl
while (<STDIN>) {
        print "OK\n";
}

I then specified this script in the "External squid-style authentication
program" setting on the Authentication page. This should, if I am
understanding this correctly, successfully authenticate any Webmin use who
has "External authentication program" specified in their user access rights.
 
But it is not working.  When trying to log in with an externally
authenticated user, I don't get success or failure.  What happens is that
the browser just spins and there is never a response.  
 
Any ideas as to what the problem is?
 
The Webmin version is 1.240 running on Red hat EL3 Workstation)
 
Thanks
 
Dave Isaacs
 
 

Re: [webmin-l] SNMP on System and Server Status

[Jamie C. <jca...@we...>]

Hi Enrique,
No, there is no way to run SQL from a file at the moment .. only a fixed SQL command entered into the custom command.

However, you could create a command that runs a program like 'mysql -u user -ppass db <file' .. that would have the same effect.

 - Jamie

-----Original Message-----

From:  Enrique Toledano <enr...@gm...>
Subj:  Re: [webmin-l] SNMP on System and Server Status
Date:  Wed 25 Jan 2006 6:13 pm
Size:  2K
To:  web...@li...

Thank you very much, Jamie!

Another question:

In the "Custom Commands" module, is there (or is going to be) a way to
select an SQL file to execute on a database?


Thank you again




25 Jan 2006 09:36:26 +1100, Jamie Cameron <jca...@we...>:
> On Wed, 2006-01-25 at 04:54, Enrique Toledano wrote:
> > Hi all
> >
> > Jamie, this is a feature request:
> > To use SNMP on the System and Server Status module, it's necessary to
> > install several perl modules, that can't be installed (or I don't know
> > how to do it) on old versions of Perl.
> >
> > Have you considered to support the module from Simon Leinen "SNMP for
> > Perl 5" to allow the use of this feature (It works on Perl 5 and it
> > doesn't need other modules) on old perl versions?
> >
> > http://www.switch.ch/misc/leinen/snmp/perl/
>
> I suppose it could be done, although the documentation on sending traps
> on that site is rather lacking. I should be able to put it into the next
> Webmin release.
>
>  - Jamie
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd-
Forwarded by the Webmin mailing list at web...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list

--- message truncated ---