webadmin-list — Webmin users mailing list

[webmin-l] Logrotate - Newsyslog

[Grant P. <gp...@th...>]

Hi Jamie,

Is there any change we can coerce you into updateting the Logrotate module 
so it will work with FreeBSD's newsyslog utility. It is very close to 
working, but it has no --version switch, so logrotate craps out when it try 
to get it (-v actually means verbose).

-Grant

Logrotate output ...

Failed to get the version of logrotate with the command 
/usr/sbin/newsyslog -v :
/var/log/cron <3Z>: --> will trim at Mon Oct 10 00:00:00 2005
/var/log/amd.log <3Z>: does not exist.
/var/log/kerberos.log <3Z>: does not exist.
...Manpage - FreeBSD 5.4 - newsyslogdefiant# man newsyslogFormatting page, 
please wait...Done.NEWSYSLOG(8)            FreeBSD System Manager's Manual 
NEWSYSLOG(8)NAME     newsyslog -- maintain system log files to manageable 
sizesSYNOPSIS     newsyslog [-CFnrsv] [-R tagname] [-a directory] [-f 
config_file]               [file ...]DESCRIPTION     The newsyslog utility 
should be scheduled to run periodically by cron(8).     When it is executed 
it archives log files if necessary.  If a log file is     determined to 
require archiving, newsyslog rearranges the files so that     ``logfile'' is 
empty, ``logfile.0'' has the last period's logs in it,     ``logfile.1'' has 
the next to last period's logs in it, and so on, up to     a user-specified 
number of archived logs.  Optionally the archived logs     can be compressed 
to save space.     A log can be archived for three reasons:           1. 
It is larger than the configured size (in kilobytes).           2.   A 
configured number of hours have elapsed since the log was 
last archived.           3.   This is the specific configured hour for 
rotation of the log.     The granularity of newsyslog is dependent on how 
often it is scheduled to     run by cron(8).  Since the program is quite 
fast, it may be scheduled to     run every hour without any ill effects, and 
mode three (above) assumes     that this is so.OPTIONS     The following 
options can be used with newsyslog:     -f config_file             Instruct 
newsyslog to use config_file instead of             /etc/newsyslog.conf for 
its configuration file.     -a directory             Specify a directory 
into which archived log files will be writ-             ten.  If a relative 
path is given, it is appended to the path of             each log file and 
the resulting path is used as the directory             into which the 
archived log for that log file will be written.             If an absolute 
path is given, all archived logs are written into             the given 
directory.  If any component of the path directory does             not 
exist, it will be created when newsyslog is run.     -v      Place newsyslog 
in verbose mode.  In this mode it will print out             each log and 
its reasons for either trimming that log or skipping             it.     -n 
Cause newsyslog not to trim the logs, but to print out what it 
would do if this option were not specified.     -r      Remove the 
restriction that newsyslog must be running as root.             Of course, 
newsyslog will not be able to send a HUP signal to             syslogd(8) so 
this option should only be used in debugging.     -s      Specify that 
newsyslog should not send any signals to any daemon             processes 
that it would normally signal when rotating a log file.             For any 
log file which is rotated, this option will usually also             mean 
the rotated log file will not be compressed if there is a             daemon 
which would have been signalled without this option.  How-             ever, 
this option is most likely to be useful when specified with 
            the -R option, and in that case the compression will be 
.     -C      If specified once, then newsyslog will create any log files 
which             do not exist, and which have the C flag specified in their 
config             file entry.  If specified multiple times, then newsyslog 
will             create all log files which do not already exist.  If log 
files             are given on the command-line, then the -C or -CC will 
only apply             to those specific log files.     -F      Force 
newsyslog to trim the logs, even if the trim conditions             have not 
been met.  This option is useful for diagnosing system             problems 
by providing you with fresh logs that contain only the 
        problems.     -R tagname             Specify that newsyslog should 
rotate a given list of files, even             if trim conditions are not 
met for those files.  The tagname is             only used in the messages 
written to the log files which are             rotated.  This differs from 
the -F option in that one or more log             files must also be 
specified, so that newsyslog will only operate             on those specific 
files.  This option is mainly intended for the             daemons or 
programs which write some log files, and want to trig-             ger a 
rotate based on their own criteria.  With this option they             can 
execute newsyslog to trigger the rotate when they want it to 
happen, and still give the system administrator a way to specify 
the rules of rotation (such as how many backup copies are kept, 
and what kind of compression is done).  When a daemon does exe- 
cute newsyslog with the -R option, it should make sure all of the 
log files are closed before calling newsyslog, and then it should 
re-open the files after newsyslog returns.  Usually the calling 
process will also want to specify the -s option, so newsyslog 
will not send a signal to the very process which called it to 
force the rotate.  Skipping the signal step will also mean that 
newsyslog will return faster, since newsyslog normally waits a 
few seconds after any signal that is sent.     If additional command line 
arguments are given, newsyslog will only exam-     ine log files that match 
those arguments; otherwise, it will examine all     files listed in the 
configuration file.FILES     /etc/newsyslog.conf      newsyslog 
configuration fileBUGS     Doesn't yet automatically read the logs to find 
security breaches.AUTHORS     Theodore Ts'o, MIT Project Athena 
Copyright 1987, Massachusetts Institute of TechnologyCOMPATIBILITY 
Previous versions of the newsyslog utility used the dot (``.'') character 
to distinguish the group name.  Beginning with FreeBSD 3.3, this has been 
changed to a colon (``:'') character so that user and group names may 
contain the dot character.  The dot (``.'') character is still accepted 
for backwards compatibility.SEE ALSO     bzip(1), gzip(1), syslog(3), 
newsyslog.conf(5), chown(8), syslogd(8)HISTORY     The newsyslog utility 
originated from NetBSD and first appeared in     FreeBSD 2.2.FreeBSD 5.4 
February 24, 2005                   FreeBSD 5.4 

[webmin-l] Webmin Cluster

[OIivier G. <ol....@bl...>]

Good morning, 

I've installed webmin successfully and added some different webmin servers,
but I can't distribute a package to severel registered webmin servers because
they won't be shown. I've registered webmin servers in the webmin modul Webmin
> Webmin Server Index. There I can see, edit and delete these servers.

Can somebody help me?`

Great, thanks.

AW: [webmin-l] Cluster - Server werden nicht angezeigt

[<ma...@an...>]

Hallo Olivier,

=20

ich kann dir da leider nicht weiter helfen, aber stell doch die Frage =
mal in
English, dann findet sich bestimmt jemand der dir helfen kann.

=20

Gruss

=20

Mathias

=20

=20

  _____ =20

Von: web...@li...
[mailto:web...@li...] Im Auftrag von =
Olivier
Grossmann
Gesendet: Sonntag, 9. Oktober 2005 21:51
An: web...@li...
Betreff: [webmin-l] Cluster - Server werden nicht angezeigt

=20

Hallo zusammen,

=20

ich versuche eine Software an mehrere Linux Workstations per Webmin zu
verteilen, aber ich sehe immer nur den eigenen Webmin Server. Obwohl ich
unter Webmin > Webmin Servers alle (3) Server hinzugef=FCgt habe?

=20

Wer kann mir helfen?

=20

Gruss Olivier

Re: [webmin-l] Backup Idea

[Jamie C. <jca...@we...>]

Hi Vern,
If you are just looking for a way to restore a Virtualmin backup
automatically, take a look at the restore-domain.pl script in the
virtual-server directory under the Webmin root. It does exactly the same
thing as the restore form in the web interface, but could be run from a
script if needed..

 - Jamie

On Mon, 2005-10-10 at 05:11, Vern wrote:
> The more I look at the way this is setup it should be an easy thing to do if there was 
> a Scheduled Restore option, which I don't see. So I guess this would go on the wish 
> list?
> 
> ---------- Original Message ----------- 
> From: "Vern" <ve...@cw...> 
> To: "Webmin List" <web...@li...> 
> Sent: Sun, 9 Oct 2005 14:57:21 -0400 
> Subject: [webmin-l] Backup Idea
> 
> > This weekend I ran into a situation where my T1 went down. Needless to say I wasn't 
> a 
> > happy camper as the local telephone company refused to do anything about it because 
> it 
> > was, of all things, raining out. Be that as it may, it got me to thinking. 
> > 
> > I have a T1 and I also have a 1.5 MEG DSL line. I host web sites on the T1 and 
> manage 
> > everything using Webmin which I find is better than either Plesk or Ensim (but 
> enough 
> > sucking up). Each night I also back up all the sites to another server in case 
> > anything goes wrong with the server I have a backup. However I have noticed that if 
> > and when you need to restore the file it is in a sort of zipped fashion. So what I 
> > would like to do is have each web site backed up to another server that has it's own 
> > DNS server and if that server's bind is actually turned on the sites go live. Is 
> there 
> > are way to do this where I don;t have to manually restore the sites, but rather it 
> > transfers into place, with associated MySQL databases and all? 
> > 
> > Thanks 
> > 
> > ------------------------------------------------------- 
> > This SF.Net email is sponsored by: 
> > Power Architecture Resource Center: Free content, downloads, discussions, 
> > and more. http://solutions.newsforge.com/ibmarch.tmpl
> > - 
> > Forwarded by the Webmin mailing list at web...@li... 
> > To remove yourself from this list, go to 
> > http://lists.sourceforge.net/lists/listinfo/webadmin-list
> ------- End of Original Message -------
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Power Architecture Resource Center: Free content, downloads, discussions,
> and more. http://solutions.newsforge.com/ibmarch.tmpl
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Cluster - Server werden nicht angezeigt

[Jamie C. <jca...@we...>]

On Mon, 2005-10-10 at 05:51, Olivier Grossmann wrote:
> Hallo zusammen,
> 
>  
> 
> ich versuche eine Software an mehrere Linux Workstations per Webmin zu
> verteilen, aber ich sehe immer nur den eigenen Webmin Server. Obwohl
> ich unter Webmin > Webmin Servers alle (3) Server hinzugefügt habe?

Could you post that again in English? Most list members don't speak
German unfortunately ..

 - Jamie

[webmin-l] Cluster - Server werden nicht angezeigt

[Olivier G. <ol....@bl...>]

Hallo zusammen,

=20

ich versuche eine Software an mehrere Linux Workstations per Webmin zu
verteilen, aber ich sehe immer nur den eigenen Webmin Server. Obwohl ich
unter Webmin > Webmin Servers alle (3) Server hinzugef=FCgt habe?

=20

Wer kann mir helfen?

=20

Gruss Olivier

Re: [webmin-l] Backup Idea

[Vern <ve...@cw...>]

The more I look at the way this is setup it should be an easy thing to do if there was 
a Scheduled Restore option, which I don't see. So I guess this would go on the wish 
list?

---------- Original Message ----------- 
From: "Vern" <ve...@cw...> 
To: "Webmin List" <web...@li...> 
Sent: Sun, 9 Oct 2005 14:57:21 -0400 
Subject: [webmin-l] Backup Idea

> This weekend I ran into a situation where my T1 went down. Needless to say I wasn't 
a 
> happy camper as the local telephone company refused to do anything about it because 
it 
> was, of all things, raining out. Be that as it may, it got me to thinking. 
> 
> I have a T1 and I also have a 1.5 MEG DSL line. I host web sites on the T1 and 
manage 
> everything using Webmin which I find is better than either Plesk or Ensim (but 
enough 
> sucking up). Each night I also back up all the sites to another server in case 
> anything goes wrong with the server I have a backup. However I have noticed that if 
> and when you need to restore the file it is in a sort of zipped fashion. So what I 
> would like to do is have each web site backed up to another server that has it's own 
> DNS server and if that server's bind is actually turned on the sites go live. Is 
there 
> are way to do this where I don;t have to manually restore the sites, but rather it 
> transfers into place, with associated MySQL databases and all? 
> 
> Thanks 
> 
> ------------------------------------------------------- 
> This SF.Net email is sponsored by: 
> Power Architecture Resource Center: Free content, downloads, discussions, 
> and more. http://solutions.newsforge.com/ibmarch.tmpl 
> - 
> Forwarded by the Webmin mailing list at web...@li... 
> To remove yourself from this list, go to 
> http://lists.sourceforge.net/lists/listinfo/webadmin-list 
------- End of Original Message -------

[webmin-l] Backup Idea

[Vern <ve...@cw...>]

This weekend I ran into a situation where my T1 went down. Needless to say I wasn't a 
happy camper as the local telephone company refused to do anything about it because it 
was, of all things, raining out. Be that as it may, it got me to thinking. 

I have a T1 and I also have a 1.5 MEG DSL line. I host web sites on the T1 and manage 
everything using Webmin which I find is better than either Plesk or Ensim (but enough 
sucking up). Each night I also back up all the sites to another server in case 
anything goes wrong with the server I have a backup. However I have noticed that if 
and when you need to restore the file it is in a sort of zipped fashion. So what I 
would like to do is have each web site backed up to another server that has it's own 
DNS server and if that server's bind is actually turned on the sites go live. Is there 
are way to do this where I don;t have to manually restore the sites, but rather it 
transfers into place, with associated MySQL databases and all?

Thanks

Re: [webmin-l] Webmin 1.230 signature failure

[Alan D. <We...@Om...>]

It looks like you are trying to do an RPM upgrade from a tar.gz file. 
You need to download the RPM file if you want to use RPM to install it. 
If this is incorrect, please indicate the exact command you used to do
the upgrade.

Also, make sure you have imported Jamie's key into your RPM database. 
If so, you should be able to run this command successfully:

rpm --checksig webmin-1.230-1.noarch.rpm

Alan

On 10/9/2005 9:59 AM, David W. Brown wrote:
> Hello Jamie, Joe and all the Webmin Gurus! Curiously, I attempted to upgrade my Webmin to: 1.230. I am upgrading from a local file. The error message and the system particulars follow. Any and all: comments, solutions, rants and raves welcomed.
>
> Upon attempt to upgrade via local file I receive the following error condition:
>
> Failed to upgrade from /home/dwbrown/tmp/webmin/webmin-1.230.tar.gz : 
> RPM signature verification failed :
>
> error: /home/dwbrown/tmp/webmin/webmin-1.230.tar.gz: rpmReadSignature failed
>
> System: rh7.2
> Webmin current: 1.220
> Access: public
> Services up: everything
>
> Please advise,
>
> David Brown
> IT/Systems
> KBR - Gov. Ops. - USMI
> Baghdad, Iraq
> REO
> International Zone

[webmin-l] Webmin 1.230 signature failure

[David W. B. <dw...@we...>]

Hello Jamie, Joe and all the Webmin Gurus! Curiously, I attempted to upgrade my Webmin to: 1.230. I am upgrading from a local file. The error message and the system particulars follow. Any and all: comments, solutions, rants and raves welcomed.

Upon attempt to upgrade via local file I receive the following error condition:

Failed to upgrade from /home/dwbrown/tmp/webmin/webmin-1.230.tar.gz : 
RPM signature verification failed :

error: /home/dwbrown/tmp/webmin/webmin-1.230.tar.gz: rpmReadSignature failed

System: rh7.2
Webmin current: 1.220
Access: public
Services up: everything

Please advise,

David Brown
IT/Systems
KBR - Gov. Ops. - USMI
Baghdad, Iraq
REO
International Zone

Re: [webmin-l] Software Packages Module

[Jamie C. <jca...@we...>]

Thanks for the info .. I will update my code to use that version as the cutoff for displaying the new option.<br /><br />=A0- Jamie<br /><br />On 9/Oct/2005 17:25 Alan Dobkin wrote ..
<blockquote type=3D"cite">

Thanks Jamie, although I have a correction.=A0 I looked at the code a
little further (since the changelog is very confusing), and found that
the enableRepo option was added on 10/19/2004 in yum version <u><b>2.1.10</b></u>:<br />
<br />
<a href=3D"https://lists.dulug.duke.edu/pipermail/yum/2004-October/005480.html" class=3D"moz-txt-link-freetext">https://lists.dulug.duke.edu/pipermail/yum/2004-October/005480.html</a><br />
<br />
<a href=3D"http://devel.linux.duke.edu/cgi-bin/viewcvs.cgi/yum/ChangeLog?rev=3D1.41&view=3Dmarkup" class=3D"moz-txt-link-freetext">http://devel.linux.duke.edu/cgi-bin/viewcvs.cgi/yum/ChangeLog?rev=3D1.41&amp;view=3Dmarkup</a><br />
<br />
The change in version 2.3.2 that I stated earlier was that these
options were added to the new interactive yum shell, which first
appeared in Fedora Core 4.<br />
<br />
Alan<br />
<br />
On 10/9/2005 2:39 PM, Jamie Cameron wrote:
<blockquote type=3D"cite" cite=3D"http://fudu.home:20000/mailbox/mid...@fu...">
  <pre>Hi Alan,<br />Thanks for that info .. I will enable this feature for yum 2.3.2 and up in the next webmin.<br /><br /> - Jamie<br /><br />-----Original Message-----<br /><br />From:  Alan Dobkin <a href=3D"_unsafe_link_" class=3D"moz-txt-link-rfc2396E">&lt;We...@Om...&gt;</a>
Subj:  Re: [webmin-l] Software Packages Module
Date:  Sun 9 Oct 2005 11:13 am
Size:  993 bytes
To:  Webmin List <a href=3D"_unsafe_link_" class=3D"moz-txt-link-rfc2396E">&lt;Web...@li...&gt;</a>

On 10/8/2005 8:43 PM, Jamie Cameron wrote:
  </pre>
  <blockquote type=3D"cite">
    <pre>Hi Craig,<br />I see how that option could be useful now, and I will add support for it<br />in the next version of Webmin on systems that have any disabled<br />repositories.<br /><br />Which version of YUM was it first introduced in though? On my Fedora 2<br />system YUM doesn't seem to support that enablerepo=3D option.<br />    </pre>
  </blockquote>
  <pre><!---->
It was added in Fedora Core 3 to yum version 2.3.2:

<a href=3D"http://www.redhat.com/archives/fedora-devel-list/2004-September/msg00187.html" class=3D"moz-txt-link-freetext">http://www.redhat.com/archives/fedora-devel-list/2004-September/msg00187.html</a>

<a href=3D"http://devel.linux.duke.edu/cgi-bin/viewcvs.cgi/yum/yum/repos.py?rev=3D1.74&only_with_tag=3Dyum-2-3-2&view=3Dlog" class=3D"moz-txt-link-freetext">http://devel.linux.duke.edu/cgi-bin/viewcvs.cgi/yum/yum/repos.py?rev=3D1.74&amp;only_with_tag=3Dyum-2-3-2&amp;view=3Dlog</a>

Alan</pre>
</blockquote>
</blockquote><br />

Re: [webmin-l] Software Packages Module

[Alan D. <We...@Om...>]

Thanks Jamie, although I have a correction.  I looked at the code a
little further (since the changelog is very confusing), and found that
the enableRepo option was added on 10/19/2004 in yum version _*2.1.10*_:

https://lists.dulug.duke.edu/pipermail/yum/2004-October/005480.html

http://devel.linux.duke.edu/cgi-bin/viewcvs.cgi/yum/ChangeLog?rev=1.41&view=markup

The change in version 2.3.2 that I stated earlier was that these options
were added to the new interactive yum shell, which first appeared in
Fedora Core 4.

Alan

On 10/9/2005 2:39 PM, Jamie Cameron wrote:
> Hi Alan,
> Thanks for that info .. I will enable this feature for yum 2.3.2 and up in the next webmin.
>
>  - Jamie
>
> -----Original Message-----
>
> From:  Alan Dobkin <We...@Om...>
> Subj:  Re: [webmin-l] Software Packages Module
> Date:  Sun 9 Oct 2005 11:13 am
> Size:  993 bytes
> To:  Webmin List <Web...@li...>
>
> On 10/8/2005 8:43 PM, Jamie Cameron wrote:
>   
>> Hi Craig,
>> I see how that option could be useful now, and I will add support for it
>> in the next version of Webmin on systems that have any disabled
>> repositories.
>>
>> Which version of YUM was it first introduced in though? On my Fedora 2
>> system YUM doesn't seem to support that enablerepo= option.
>>     
>
> It was added in Fedora Core 3 to yum version 2.3.2:
>
> http://www.redhat.com/archives/fedora-devel-list/2004-September/msg00187.html
>
> http://devel.linux.duke.edu/cgi-bin/viewcvs.cgi/yum/yum/repos.py?rev=1.74&only_with_tag=yum-2-3-2&view=log
>
> Alan

Re: [webmin-l] Software Packages Module

[James E. J. <jam...@sb...>]

Jamie:

You might want to try it is yum --enablerepo repository name.  That's
what we have to do, at least with version 2.2.1 of YUM. :) Ie:  yum --
enablerepo dag install xmms.

The other option I think would be nice is if there were support for the
grouplist, groupinstall, groupremove, and groupupgrade features :)

Ciao,

-James

On Sun, 2005-10-09 at 10:43 +1000, Jamie Cameron wrote:
> On Sat, 2005-10-08 at 23:05, Craig White wrote:
> > On Sat, 2005-10-08 at 22:36 +1000, Jamie Cameron wrote:
> > > Hi James,
> > > Is it possible to have YUM look in all the configured repositories
> > > for a specified package? It would seem to me that this would be better
> > > than needing to tell it which one to look in ... unless the same package
> > > exists on more than one repository?
> > > 
> > > As you can see, I am not really much of a YUM expert :)
> > > 
> > ----
> > it's possible (and likely) to have yum repos listed in yum.conf or
> > better these days, in their own files in /etc/yum.repos.d/WHATEVER.repo
> > 
> > and have 'enabled=0' in the configuration for that repo.
> > 
> > Then running from a command line (or I would presume from yumex) you
> > could install a package just from that repo with the enablerepo=XXXXX in
> > the same command line - i.e.
> > 
> > yum enablerepo=dag install xmms-mp3
> > 
> > and yet still have dag repo disabled so it is not involved in commands
> > such as 'yum update' or 'yum upgrade' because yes, sometimes the same
> > packages - often varying levels of stability exist in multiple
> > repositories. In fact most of the time now, they are including the
> > 'testing' branch of the repositories in the yum.repos section (disabled
> > of course) which would cause havoc if enabled by average user.
> 
> Hi Craig,
> I see how that option could be useful now, and I will add support for it
> in the next version of Webmin on systems that have any disabled
> repositories.
> 
> Which version of YUM was it first introduced in though? On my Fedora 2
> system YUM doesn't seem to support that enablerepo= option.
> 
>  - Jamie
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Power Architecture Resource Center: Free content, downloads, discussions,
> and more. http://solutions.newsforge.com/ibmarch.tmpl
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Software Packages Module

[Jamie C. <jca...@we...>]

Hi Alan,
Thanks for that info .. I will enable this feature for yum 2.3.2 and up in the next webmin.

 - Jamie

-----Original Message-----

From:  Alan Dobkin <We...@Om...>
Subj:  Re: [webmin-l] Software Packages Module
Date:  Sun 9 Oct 2005 11:13 am
Size:  993 bytes
To:  Webmin List <Web...@li...>

On 10/8/2005 8:43 PM, Jamie Cameron wrote:
> Hi Craig,
> I see how that option could be useful now, and I will add support for it
> in the next version of Webmin on systems that have any disabled
> repositories.
>
> Which version of YUM was it first introduced in though? On my Fedora 2
> system YUM doesn't seem to support that enablerepo= option.

It was added in Fedora Core 3 to yum version 2.3.2:

http://www.redhat.com/archives/fedora-devel-list/2004-September/msg00187.html

http://devel.linux.duke.edu/cgi-bin/viewcvs.cgi/yum/yum/repos.py?rev=1.74&only_with_tag=yum-2-3-2&view=log

Alan


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
-
Forwarded by the Webmin mailing list at web...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Software Packages Module

[Craig W. <cra...@az...>]

On Sun, 2005-10-09 at 10:43 +1000, Jamie Cameron wrote:
> On Sat, 2005-10-08 at 23:05, Craig White wrote:
> > On Sat, 2005-10-08 at 22:36 +1000, Jamie Cameron wrote:
> > > Hi James,
> > > Is it possible to have YUM look in all the configured repositories
> > > for a specified package? It would seem to me that this would be better
> > > than needing to tell it which one to look in ... unless the same package
> > > exists on more than one repository?
> > > 
> > > As you can see, I am not really much of a YUM expert :)
> > > 
> > ----
> > it's possible (and likely) to have yum repos listed in yum.conf or
> > better these days, in their own files in /etc/yum.repos.d/WHATEVER.repo
> > 
> > and have 'enabled=0' in the configuration for that repo.
> > 
> > Then running from a command line (or I would presume from yumex) you
> > could install a package just from that repo with the enablerepo=XXXXX in
> > the same command line - i.e.
> > 
> > yum enablerepo=dag install xmms-mp3
> > 
> > and yet still have dag repo disabled so it is not involved in commands
> > such as 'yum update' or 'yum upgrade' because yes, sometimes the same
> > packages - often varying levels of stability exist in multiple
> > repositories. In fact most of the time now, they are including the
> > 'testing' branch of the repositories in the yum.repos section (disabled
> > of course) which would cause havoc if enabled by average user.
> 
> Hi Craig,
> I see how that option could be useful now, and I will add support for it
> in the next version of Webmin on systems that have any disabled
> repositories.
> 
> Which version of YUM was it first introduced in though? On my Fedora 2
> system YUM doesn't seem to support that enablerepo= option.
----
not entirely sure 'which' version but the yum in FC-3 definitely has
it...
$ rpm -q yum
yum-2.2.2-0.fc3

as does CentOS 4.x
# rpm -q yum
yum-2.2.1-1.centos4

My guess would be somewhere around 2.2

http://devel.linux.duke.edu/cgi-bin/viewcvs.cgi/yum/ChangeLog?
rev=1.52&view=auto

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Re: [webmin-l] Software Packages Module

[Alan D. <We...@Om...>]

On 10/8/2005 8:43 PM, Jamie Cameron wrote:
> Hi Craig,
> I see how that option could be useful now, and I will add support for it
> in the next version of Webmin on systems that have any disabled
> repositories.
>
> Which version of YUM was it first introduced in though? On my Fedora 2
> system YUM doesn't seem to support that enablerepo= option.

It was added in Fedora Core 3 to yum version 2.3.2:

http://www.redhat.com/archives/fedora-devel-list/2004-September/msg00187.html

http://devel.linux.duke.edu/cgi-bin/viewcvs.cgi/yum/yum/repos.py?rev=1.74&only_with_tag=yum-2-3-2&view=log

Alan

[webmin-l] Cool Virtualmin theme

[Thomas E D. <ed...@al...>]

Jamie,

When will that cool virtualmin professional theme be available to us poor
souls?

TIA

Re: [webmin-l] Software Packages Module

[Jamie C. <jca...@we...>]

On Sat, 2005-10-08 at 23:05, Craig White wrote:
> On Sat, 2005-10-08 at 22:36 +1000, Jamie Cameron wrote:
> > Hi James,
> > Is it possible to have YUM look in all the configured repositories
> > for a specified package? It would seem to me that this would be better
> > than needing to tell it which one to look in ... unless the same package
> > exists on more than one repository?
> > 
> > As you can see, I am not really much of a YUM expert :)
> > 
> ----
> it's possible (and likely) to have yum repos listed in yum.conf or
> better these days, in their own files in /etc/yum.repos.d/WHATEVER.repo
> 
> and have 'enabled=0' in the configuration for that repo.
> 
> Then running from a command line (or I would presume from yumex) you
> could install a package just from that repo with the enablerepo=XXXXX in
> the same command line - i.e.
> 
> yum enablerepo=dag install xmms-mp3
> 
> and yet still have dag repo disabled so it is not involved in commands
> such as 'yum update' or 'yum upgrade' because yes, sometimes the same
> packages - often varying levels of stability exist in multiple
> repositories. In fact most of the time now, they are including the
> 'testing' branch of the repositories in the yum.repos section (disabled
> of course) which would cause havoc if enabled by average user.

Hi Craig,
I see how that option could be useful now, and I will add support for it
in the next version of Webmin on systems that have any disabled
repositories.

Which version of YUM was it first introduced in though? On my Fedora 2
system YUM doesn't seem to support that enablerepo= option.

 - Jamie

Re: [webmin-l] Multiple DNS Servers

[Jamie C. <jca...@we...>]

Hi,
It is possible to configure Webmin to add a zone to one or more slave
servers when you add it to a master, although this isn't documented too
well. The steps to take for this are :

1) Install Webmin on the slave server, and make sure the BIND module it
set up.
2) On the master system, go to the Webmin Servers Index module and add
the slave server.
3) In the BIND module on the master, click on the Cluster Slave Servers
icon and add the slave defined in step 2
4) From now on, any master zone created on master system will be added
as a slave on the slave system too.

 - Jamie

On Thu, 2005-10-06 at 23:23, Bubba Carter wrote:
> Hello All-
> 
> I'm a recent newcomer to Webmin, and I love it.  I'm in the process of
> making some network changes, and I'd like some advice on what steps to
> take.
> 
> I currently have one server doing all the work, and I'm wanting to add a
> server and have it become a secondary DNS as well as host the webpages
> for our business, while the 1st server is our primary DNS and email.  
> 
> My question is:  Using Webmin & DNS, where is a good place to start
> setting up a secondary (slave) dns?  Are there websites?  Books?  Dummy
> guides??
> 
> I'm using Red Hat ES 4.0
> 
> 
> Thank you so much for any suggestions.
> 
> 
> James Carter
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Power Architecture Resource Center: Free content, downloads, discussions,
> and more. http://solutions.newsforge.com/ibmarch.tmpl
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Nessus finds remote Webmin web server vulnerabilities

[Georgi L. <g....@we...>]

On Sat, 2005-10-08 at 05:57 -0700, Craig White wrote:

> according to IANA the webmin default port 10000 got registered to the
> people that make the netapp filer.
>=20
> http://www.iana.org/assignments/port-numbers
>=20
> This isn't the same as Webmin so Nessus isn't really identifying
> Webmin
> as running on port 10000

Things probably would have been clearer if I had pasted the whole log
(which I'm doing now - see below for the second half). Actually Nessus
is identifying Webmin correctly as well as MiniServ and it is also going
a little further in trying to determine the type of service than just
looking at a list of well known ports (using plugins for system
fingerprinting, protocol analysis, etc.).
So basically the fingerprinting plugin confuses miniserv's with apache's
behaviour, while the one looking at the server header gets it right.
However I don't think this influences the plugins that reported the
vulnerabilities, the way I see it they run independently from the web
server type/version.

On Sat, 2005-10-08 at 23:56 +1000, Jamie Cameron wrote:=20
> Hi Georgi,
> Nessus has always reported a bunch of incorrect vulnerabilities when scan=
ning Webmin. To my understanding, it assumes that because Webmin does not r=
espond with a normal HTTP error to certain requests that it uses to check f=
or vulnerabilties, that those vulnerabilties exist.
>=20
> In reality, Webmin doesn't have any of the security problems that nessus =
reports - they are all only relevant to other programs.=20
>=20
>  - Jamie
>=20

If you're sure about that, I guess it might be a good idea to drop the
Nessus guys a mail, so they can look into the respective plugins.

Georgi

----------------------------------------------------------------------
Informational snet-sensor-mgmt (10000/tcp) Nmap has identified this
service as Webmin httpd
Nessus ID : 14259
---
Informational snet-sensor-mgmt (10000/tcp) A SSLv2 server answered on
this port

Nessus ID : 10330
---
Informational snet-sensor-mgmt (10000/tcp) A web server is running on
this port through SSL
Nessus ID : 10330
---
Informational snet-sensor-mgmt (10000/tcp) The remote web server type
is :

MiniServ/0.01=20

Solution : We recommend that you configure (if possible) your web server
to return
a bogus Server header in order to not leak information.

Nessus ID : 10107
---
Informational snet-sensor-mgmt (10000/tcp) Here is the SSLv2 server
certificate:
Certificate:
Data:
Version: 1 (0x0)
Serial Number: 0 (0x0)
Signature Algorithm: md5WithRSAEncryption
Issuer: O=3DWebmin Software, CN=3D*
Validity
Not Before: Jan 3 10:34:50 1998 GMT
Not After : Oct 3 10:34:50 2007 GMT
Subject: O=3DWebmin Software, CN=3D*
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (512 bit)
Modulus (512 bit):
00:d6:91:05:5e:d7:e8:35:94:6d:39:bc:28:18:e3:
1f:1e:02:00:75:52:40:29:9e:8b:c4:08:c2:bb:95:
3e:78:30:3a:41:21:b2:0c:df:21:3d:48:63:a8:f2:
63:74:0c:e9:ae:00:4a:5e:f1:a2:4a:32:e5:4e:10:
67:c1:3f:ab:8d
Exponent: 65537 (0x10001)
Signature Algorithm: md5WithRSAEncryption
14:2a:18:78:b9:56:70:29:69:bf:6b:12:73:bc:c8:72:1b:0c:
47:70:ca:78:7f:ce:d5:9b:5f:11:ec:f3:91:aa:27:ad:ee:fc:
1d:e6:15:c1:24:2f:ba:85:65:79:be:c0:e3:de:d3:15:c4:81:
eb:e1:4e:37:a6:b3:a1:5a:8f:c9
Here is the list of available SSLv2 ciphers:
RC4-MD5
EXP-RC4-MD5
RC2-CBC-MD5
EXP-RC2-CBC-MD5
DES-CBC-MD5
DES-CBC3-MD5
RC4-64-MD5
The SSLv2 server offers 5 strong ciphers, but also
0 medium strength and 2 weak "export class" ciphers.
The weak/medium ciphers may be chosen by an export-grade
or badly configured client software. They only offer a=20
limited protection against a brute force attack

Solution: disable those ciphers and upgrade your client
software if necessary.
See http://support.microsoft.com/default.aspx?scid=3Dkb;en-us;216482
or http://httpd.apache.org/docs-2.0/mod/mod_ssl.html#sslciphersuite
This SSLv2 server also accepts SSLv3 connections.
This SSLv2 server also accepts TLSv1 connections.

Nessus ID : 10863
---
Informational snet-sensor-mgmt (10000/tcp) The SSL certificate of the
remote service is not valid before 980103103450Z!
Nessus ID : 15901

Re: [webmin-l] Nessus finds remote Webmin web server vulnerabilities

[Alan D. <We...@Om...>]

Since we're discussing Nessus, here's some recent news posted to the
NMap mailing list about its future:

http://seclists.org/lists/nmap-hackers/2005/Oct-Dec/0000.html

Alan

On 10/8/2005 11:56 PM, Jamie Cameron wrote:
> Hi Georgi,
> Nessus has always reported a bunch of incorrect vulnerabilities when scanning Webmin. To my understanding, it assumes that because Webmin does not respond with a normal HTTP error to certain requests that it uses to check for vulnerabilties, that those vulnerabilties exist.
>
> In reality, Webmin doesn't have any of the security problems that nessus reports - they are all only relevant to other programs. 
>
>  - Jamie

Re: [webmin-l] Nessus finds remote Webmin web server vulnerabilities

[Jamie C. <jca...@we...>]

Hi Georgi,
Nessus has always reported a bunch of incorrect vulnerabilities when scanning Webmin. To my understanding, it assumes that because Webmin does not respond with a normal HTTP error to certain requests that it uses to check for vulnerabilties, that those vulnerabilties exist.

In reality, Webmin doesn't have any of the security problems that nessus reports - they are all only relevant to other programs. 

 - Jamie

-----Original Message-----

From:  Georgi Lipov <g....@we...>
Subj:  [webmin-l] Nessus finds remote Webmin web server vulnerabilities
Date:  Sat 8 Oct 2005 7:42 pm
Size:  2K
To:  Webmin Mailing List <web...@li...>

Hey, all

Yesterday I did a thorough nessus scan on a second box of mine, running
Debian 3.0 with the latest updates and Webmin 1.230 (I installed some
older version through apt-get first, then updated it through the webmin
interface.) This is what nessus found:

---
Vulnerability
snet-sensor-mgmt (10000/tcp) 
The remote web server crashes when it receives a too long URL.

It might be possible to make it execute arbitrary code through this
flaw.

Solution : Contact your vendor for a patch
Risk factor : High

Solution : Upgrade your web server.
CVE : CVE-2000-0002, CVE-2000-0065, CAN-2001-1250, CAN-2003-0833
BID : 2979, 1423, 6994, 7067, 7280, 8726, 889
Nessus ID : 10320
---
Vulnerability
snet-sensor-mgmt (10000/tcp) 
The remote web server seems to be vulnerable to a format string attack
on HTTP 1.0 header value.
An attacker might use this flaw to make it crash or even execute 
arbitrary code on this host.


Solution : upgrade your software or contact your vendor and inform him
of this vulnerability

Risk factor : High
Nessus ID : 15642
---
Vulnerability
snet-sensor-mgmt (10000/tcp) 
The remote web server seems to be vulnerable to a format string attack
on the URI.
An attacker might use this flaw to make it crash or even execute 
arbitrary code on this host.


Solution : upgrade your software or contact your vendor and inform him
of this vulnerability

Risk factor : High
Nessus ID : 15640
---
Warning
snet-sensor-mgmt (10000/tcp) 
The remote host appears to be running a version of
Apache 2.x which is older than 2.0.46

This version is vulnerable to various flaws :

- There is a denial of service vulnerability which may allow
an attacker to disable basic authentication on this host

- There is a denial of service vulnerability in the mod_dav module
which may allow an attacker to crash this service remotely

Solution : Upgrade to version 2.0.46
See also : http://www.apache.org/dist/httpd/CHANGES_2.0
Risk factor : Medium
CVE : CAN-2003-0245, CAN-2003-0189
BID : 7723, 7725
Other references : RHSA:RHSA-2003:186-01
Nessus ID : 11665
-----------------------------------------------

Can anyone confirm this?

Regards
Georgi Lipov



--- message truncated ---

Re: [webmin-l] Software Packages Module

[Craig W. <cra...@az...>]

On Sat, 2005-10-08 at 22:36 +1000, Jamie Cameron wrote:
> Hi James,
> Is it possible to have YUM look in all the configured repositories
> for a specified package? It would seem to me that this would be better
> than needing to tell it which one to look in ... unless the same package
> exists on more than one repository?
> 
> As you can see, I am not really much of a YUM expert :)
> 
----
it's possible (and likely) to have yum repos listed in yum.conf or
better these days, in their own files in /etc/yum.repos.d/WHATEVER.repo

and have 'enabled=0' in the configuration for that repo.

Then running from a command line (or I would presume from yumex) you
could install a package just from that repo with the enablerepo=XXXXX in
the same command line - i.e.

yum enablerepo=dag install xmms-mp3

and yet still have dag repo disabled so it is not involved in commands
such as 'yum update' or 'yum upgrade' because yes, sometimes the same
packages - often varying levels of stability exist in multiple
repositories. In fact most of the time now, they are including the
'testing' branch of the repositories in the yum.repos section (disabled
of course) which would cause havoc if enabled by average user.

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Re: [webmin-l] Nessus finds remote Webmin web server vulnerabilities

[Craig W. <cra...@az...>]

On Sat, 2005-10-08 at 11:40 +0200, Georgi Lipov wrote:
> Hey, all
> 
> Yesterday I did a thorough nessus scan on a second box of mine, running
> Debian 3.0 with the latest updates and Webmin 1.230 (I installed some
> older version through apt-get first, then updated it through the webmin
> interface.) This is what nessus found:
> 

> 
> Can anyone confirm this?
----
according to IANA the webmin default port 10000 got registered to the
people that make the netapp filer.

http://www.iana.org/assignments/port-numbers

This isn't the same as Webmin so Nessus isn't really identifying Webmin
as running on port 10000 - which is made all the more obvious by it's
thinking that it is running Apache web server < 2.0.46 (which itself
seems a little old unless it's RHEL 3 backported patches ad infinitum)

Not sure what you wish confirmed - that nessus didn't identify webmin?
That it's running Apache web server 2.0.46 or greater (it's not running
apache web server at all) or that long URL's are gonna crash it (don't
think so - Jamie?)

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Re: [webmin-l] Software Packages Module

[Jamie C. <jca...@we...>]

Hi James,
Is it possible to have YUM look in all the configured repositories
for a specified package? It would seem to me that this would be better
than needing to tell it which one to look in ... unless the same package
exists on more than one repository?

As you can see, I am not really much of a YUM expert :)

 - Jamie

On 8/Oct/2005 01:19 James E. Jennison wrote ..
> Hey guys, Jamie, and all you other wonderful developers out there. (So
> sue me, I am kissing up a bit here LOL).  Have a question regarding the
> Software Packages Module.
> 
> Now, I know that this module will allow for installations via YUM,
> however, the one thing I did not see available is the option to have YUM
> look for packages in other repositories.
> 
> For example, with cAos Linux, we have 4 repositories available, Core,
> Stable, Current, and Testing.  We also have Dag Wieers YUM repository
> available.  Now, the way that cAos is setup, Core is enabled by default,
> as is whichever build you have installed (such as with mine, I run the
> Testing build).
> 
> Normally, from command line, if I wanted to install a package, I would
> just type:
> 
> yum install foo
> 
> However, if package foo was not available in either Core or Testing, but
> it was available in Dag, I could just type:
> 
> yum --enablerepo dag install foo
> 
> And it would search Core, Testing, and Dag.
> 
> How difficult would it be to add something similar to the Software
> Packages module in future releases?
> 
> Thanks in advance, and sorry for the history lesson of YUM. :)
> 
> --
> James E. Jennison
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Power Architecture Resource Center: Free content, downloads, discussions,
> and more. http://solutions.newsforge.com/ibmarch.tmpl
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list