webadmin-list — Webmin users mailing list

[webmin-l] Nessus finds remote Webmin web server vulnerabilities

[Georgi L. <g....@we...>]

Hey, all

Yesterday I did a thorough nessus scan on a second box of mine, running
Debian 3.0 with the latest updates and Webmin 1.230 (I installed some
older version through apt-get first, then updated it through the webmin
interface.) This is what nessus found:

---
Vulnerability
snet-sensor-mgmt (10000/tcp)=20
The remote web server crashes when it receives a too long URL.

It might be possible to make it execute arbitrary code through this
flaw.

Solution : Contact your vendor for a patch
Risk factor : High

Solution : Upgrade your web server.
CVE : CVE-2000-0002, CVE-2000-0065, CAN-2001-1250, CAN-2003-0833
BID : 2979, 1423, 6994, 7067, 7280, 8726, 889
Nessus ID : 10320
---
Vulnerability
snet-sensor-mgmt (10000/tcp)=20
The remote web server seems to be vulnerable to a format string attack
on HTTP 1.0 header value.
An attacker might use this flaw to make it crash or even execute=20
arbitrary code on this host.


Solution : upgrade your software or contact your vendor and inform him
of this vulnerability

Risk factor : High
Nessus ID : 15642
---
Vulnerability
snet-sensor-mgmt (10000/tcp)=20
The remote web server seems to be vulnerable to a format string attack
on the URI.
An attacker might use this flaw to make it crash or even execute=20
arbitrary code on this host.


Solution : upgrade your software or contact your vendor and inform him
of this vulnerability

Risk factor : High
Nessus ID : 15640
---
Warning
snet-sensor-mgmt (10000/tcp)=20
The remote host appears to be running a version of
Apache 2.x which is older than 2.0.46

This version is vulnerable to various flaws :

- There is a denial of service vulnerability which may allow
an attacker to disable basic authentication on this host

- There is a denial of service vulnerability in the mod_dav module
which may allow an attacker to crash this service remotely

Solution : Upgrade to version 2.0.46
See also : http://www.apache.org/dist/httpd/CHANGES_2.0
Risk factor : Medium
CVE : CAN-2003-0245, CAN-2003-0189
BID : 7723, 7725
Other references : RHSA:RHSA-2003:186-01
Nessus ID : 11665
-----------------------------------------------

Can anyone confirm this?

Regards
Georgi Lipov

Re: [webmin-l] backup fails

[Jamie C. <jca...@we...>]

One solution would be to tell webmin to use a directory other than /tmp for temp files. For example, if you have plenty of free space on /var you could use this by adding the following line to /etc/webmin/config :

tempdir=/var/.webmin

 - Jamie

-----Original Message-----

From:  Ravi Gehlot <mai...@ra...>
Subj:  Re: [webmin-l] backup fails
Date:  Sat 8 Oct 2005 9:52 am
Size:  2K
To:  web...@li...

    
   Jamie,
 
  I never really thought of allocating space for /tmp and now I run out of space trying the backups. Whatelse is out there to try and revert this problem?
 
 Ravi.
 
 
 Jamie Cameron wrote:  On Fri, 2005-10-07 at 13:03, Ravi Gehlot wrote:   I keep getting this problem when trying to backup my files through virtualmin:    Creating TAR file of home directory .. .. TAR failed! pretar: /tmp/.webmin/779848_1_backup.pl/xtremeimages.us_dir: Wrote only 8192 of 10240 bytes tar: Error is not recoverable: exiting now /pre    Are you perhaps out of disk space on /tmp ?  - Jamie     ------------------------------------------------------- This SF.Net email is sponsored by: Power Architecture Resource Center: Free content, downloads, discussions, and more. http://solutions.newsforge.com/ibmarch.tmpl - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list     
 
 -- 
 
        
   		 ____                  Ravi Gehlot |___|           Computer Science Student |\\      University of Central Florida / ucf.edu | \\AVI     Orlando - Florida - United States            E-Mail: ra...@ra..., yahoo: ravigehlot ColdFusion Programmer for Cabibbo Inc Partner of InterCorp Online Inc      PGP Public Key Request by E-Mail or Yahoo 					  
         
    

Re: [webmin-l] backup fails

[Ravi G. <mai...@ra...>]

Jamie,

    I never really thought of allocating space for /tmp and now I run 
out of space trying the backups. Whatelse is out there to try and revert 
this problem?

Ravi.


Jamie Cameron wrote:

>On Fri, 2005-10-07 at 13:03, Ravi Gehlot wrote:
>  
>
>>I keep getting this problem when trying to backup my files through virtualmin:
>>
>>
>>
>>    Creating TAR file of home directory ..
>>    .. TAR failed! <pre>tar: /tmp/.webmin/779848_1_backup.pl/xtremeimages.us_dir: Wrote only 8192 of 10240 bytes
>>tar: Error is not recoverable: exiting now
>></pre>
>>    
>>
>
>Are you perhaps out of disk space on /tmp ?
>
> - Jamie
>
>
>
>
>-------------------------------------------------------
>This SF.Net email is sponsored by:
>Power Architecture Resource Center: Free content, downloads, discussions,
>and more. http://solutions.newsforge.com/ibmarch.tmpl
>-
>Forwarded by the Webmin mailing list at web...@li...
>To remove yourself from this list, go to
>http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
>
>  
>


-- 

	

		
____                  Ravi Gehlot
|___|           Computer Science Student
|\\      University of Central Florida / ucf.edu
| \\AVI     Orlando - Florida - United States           
       E-Mail: ra...@ra... <mailto:ra...@ra...>, yahoo: ravigehlot
            ColdFusion Programmer for Cabibbo Inc
              Partner of InterCorp Online Inc     
         PGP Public Key Request by E-Mail or Yahoo
					

	

[webmin-l] Software Packages Module

[James E. J. <jam...@sb...>]

Hey guys, Jamie, and all you other wonderful developers out there. (So
sue me, I am kissing up a bit here LOL).  Have a question regarding the
Software Packages Module.

Now, I know that this module will allow for installations via YUM,
however, the one thing I did not see available is the option to have YUM
look for packages in other repositories.

For example, with cAos Linux, we have 4 repositories available, Core,
Stable, Current, and Testing.  We also have Dag Wieers YUM repository
available.  Now, the way that cAos is setup, Core is enabled by default,
as is whichever build you have installed (such as with mine, I run the
Testing build).

Normally, from command line, if I wanted to install a package, I would
just type:

yum install foo

However, if package foo was not available in either Core or Testing, but
it was available in Dag, I could just type:

yum --enablerepo dag install foo

And it would search Core, Testing, and Dag.

How difficult would it be to add something similar to the Software
Packages module in future releases?

Thanks in advance, and sorry for the history lesson of YUM. :)

--
James E. Jennison

Re: [webmin-l] How to stop DHCP server

[Jamie C. <jca...@we...>]

This is really a missing feature in Webmin .. there is no button for stopping the DHCP server at the moment. However, I will add it in the next release ..

 - Jamie

-----Original Message-----

From:  Kyosuke Kirimoto <kir...@ma...>
Subj:  [webmin-l] How to stop DHCP server
Date:  Fri 7 Oct 2005 5:56 pm
Size:  793 bytes
To:  web...@li...

Hi,

Could anyone tell me how to stop DHCP server with Webmin, not on console?

I could start DHCP server with Webmin by just pushing "Start Server"
button, however cannot find any button to stop the server.

Webmin must be able to stop DHCP server, since it can start the server.

Any help would be appreciated.

Thanks,
Kyosuke

______________________
Kyosuke Kirimoto
______________________



-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
-
Forwarded by the Webmin mailing list at web...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] rndc: connect failed: connection refused

[Craig W. <cra...@az...>]

On Fri, 2005-10-07 at 11:34 +0200, Gordon CAMPBELL wrote:
> hi
> 
> every time i want to do a “force update” of a dns zone i get the error
> “NDC command failed : rndc: connect failed: connection refused”.
> 
> “apply changes” for the master and the slave server runs fine.
> 
> i am running webmin 1.231 on mac os x 10.3
> 
> can somebody help me?
----
probably have bind configured to use an rndc key that doesn't exist

man rndc
man rndc.conf

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Re: [webmin-l] How to stop DHCP server

[Craig W. <cra...@az...>]

On Fri, 2005-10-07 at 16:57 +0900, Kyosuke Kirimoto wrote:
> Hi,
> 
> Could anyone tell me how to stop DHCP server with Webmin, not on console?
> 
> I could start DHCP server with Webmin by just pushing "Start Server"
> button, however cannot find any button to stop the server.
> 
> Webmin must be able to stop DHCP server, since it can start the server.
> 
> Any help would be appreciated.
----
System Tab -> Bootup Shutdown -> dhcpd -> stop now

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

[webmin-l] rndc: connect failed: connection refused

[Gordon C. <gor...@wo...>]

hi

every time i want to do a =B3force update=B2 of a dns zone i get the error =B3NDC
command failed : rndc: connect failed: connection refused=B2.

=B3apply changes=B2 for the master and the slave server runs fine.

i am running webmin 1.231 on mac os x 10.3

can somebody help me?

[webmin-l] How to stop DHCP server

[Kyosuke K. <kir...@ma...>]

Hi,

Could anyone tell me how to stop DHCP server with Webmin, not on console?

I could start DHCP server with Webmin by just pushing "Start Server"
button, however cannot find any button to stop the server.

Webmin must be able to stop DHCP server, since it can start the server.

Any help would be appreciated.

Thanks,
Kyosuke

______________________
Kyosuke Kirimoto
______________________

Re: [webmin-l] backup fails

[Jamie C. <jca...@we...>]

On Fri, 2005-10-07 at 13:03, Ravi Gehlot wrote:
> I keep getting this problem when trying to backup my files through virtualmin:
> 
> 
> 
>     Creating TAR file of home directory ..
>     .. TAR failed! <pre>tar: /tmp/.webmin/779848_1_backup.pl/xtremeimages.us_dir: Wrote only 8192 of 10240 bytes
> tar: Error is not recoverable: exiting now
> </pre>

Are you perhaps out of disk space on /tmp ?

 - Jamie

[webmin-l] backup fails

[Ravi G. <mai...@ra...>]

I keep getting this problem when trying to backup my files through virtualmin:



    Creating TAR file of home directory ..
    .. TAR failed! <pre>tar: /tmp/.webmin/779848_1_backup.pl/xtremeimages.us_dir: Wrote only 8192 of 10240 bytes
tar: Error is not recoverable: exiting now
</pre>



-- 

	

		
____                  Ravi Gehlot
|___|           Computer Science Student
|\\      University of Central Florida / ucf.edu
| \\AVI     Orlando - Florida - United States           
       E-Mail: ra...@ra... <mailto:ra...@ra...>, yahoo: ravigehlot
            ColdFusion Programmer for Cabibbo Inc
              Partner of InterCorp Online Inc     
         PGP Public Key Request by E-Mail or Yahoo
					

	

Re: [webmin-l] I just noticed something peculiar

[Jamie C. <jca...@we...>]

On Fri, 2005-10-07 at 09:46, Bob wrote:
> In the Webmin Sendmail module or more precisely in the System/System
> Logs/File /var/log/maillog  View
> 
> Last  lines of /var/log/maillog    Only show lines with text    
> 
> I have noticed that the above criteria for display now picks up ALL
> /var/log/maillog* instead of just /var/log/maillog
> 
> Since I rotate my mail logs every 2MB the current log should never be
> greater than 2MB.
> 
> But when I ran the above display, I noticed that it was taking a very
> long time to produce the results, then I noticed that it went all the
> way back to the August 31 log ---which I have named
> maillog200508311402
> 
> Webmin never used to do this and only recently have I noticed a
> problem and I thought at first that something was wrong with my mail
> server.
> 
> Is there a way to tell it ONLY to search /var/log/maillog with NO
> additional chars in the name?
> 
> I need to run this fairly often as I have many users on the mail
> server and when they complain about an error, I try to search for
> particulars.
> 
> It would be nice to have the OPTION of searching ALL logs, but the
> default should be the main one or ALL which can be switched as needed.
> 
> Version 1.230 on mail.dexis.net (Redhat Linux 7.2)

Hi Bob,
This is a new feature in Webmin 1.220 and above - by default, rotated
log files are included in the search as well. However, there is a
setting on the Module Config page of the syslog module that can be used
to revert back to the old behaviour of just searching /var/log/maillog .

 - Jamie

Re: [webmin-l] ProFTPD Version 1.3.0rc2

[Jamie C. <jca...@we...>]

Hi Torsten,
What is the new version string that proftpd -v displays? With that information, I will be able to add support for it in Webmin ..

 - Jamie

-----Original Message-----

From:  "Torsten @ CNC-LONDON" <to...@cn...>
Subj:  [webmin-l] ProFTPD Version 1.3.0rc2
Date:  Fri 7 Oct 2005 6:59 am
Size:  577 bytes
To:  <web...@li...>

Hi Guys, 
I'm running on FreeBSD 5.4 and just upgraded the ports and reinstalled
to newer versions.
The proftpd module does not recognise the new version string.

Cheers
Torsten



-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
-
Forwarded by the Webmin mailing list at web...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] [OT] Free Stanford web-based seminar on user interfaces for Admins

[Paul C. <pcu...@op...>]

Barry wrote:

>
> Hi All -
>
> Given the recent uptick in support by Open Country for webmin, and 
> Paul Cubbage's recent call for ideas into what the future Webmin might 
> look like, I thought this is on topic...
>
> Paul - I am not sure if you are in the Bay Area or not, but if you 
> are, these seminars are generally open to attend in person...there 
> might be a wealth of info for OC's own products there too.
>
> Best,
>
> Barry

Barry,
Thanks much!  Yes, OC is in the Bay Area (Belmont, a stones throw from 
Oracle) and I commute from Boulder Creek.

Rob Barret of IBM Research spoke at a Chi event at Stanford on "Systems 
Administrators Are Users Too!" and covered similar ground.  I got him 
scheduled to speak at SVLUG later.

>
> *************************************************************
> Stanford Seminar on People, Computers, and Design (CS547)
>                  http://hci.stanford.edu/seminar
> Gates B01 (HP Classroom) and SITN, 12:30-2:00pm PDT (UTC 19:30)
> Video: http://scpd.stanford.edu/scpd/students/courseList.asp CS547
> *************************************************************
> Friday, October 7, 2005
>
> Luke Kowalski, Oracle
>     v12...@ya...
>
> TITLE: Administrators Anonymous - UCD, TCO, LCM, and other interventions
>
> ABSTRACT:
> The lack of focus on administrative interfaces often comes from 
> management's mandates to prioritize end user facing screens ahead of 
> anything else. The number of "eyeballs" is greater for the end user 
> screens than admin screens. It is also easier for all stakeholders, 
> including interaction designers to understand the domain of an e-mail 
> application than it is to grasp things like complex system monitoring, 
> visualization of clickstream data, or the tools needed to bridge 
> interdependent systems. However in more complex software, this initial 
> emphasis on the end user turns out to be a short lived priority. The 
> more significant costs of running software are often associated with 
> installation, configuration, deployment, maintenance, and upgrade. 
> Often, this is referred to as LCM, or Lifecycle Change Management. 
> Industry estimates state that the budget for LCM can be 2-4 times as 
> large as the initial license cost of enterprise software. More 
> information is needed about how administrators work to manage these 
> systems and what business and integration problems they are trying to 
> solve. UCD, or user centered design can help answer these questions.
>
> The administrator is often a misunderstood user type. Experts have 
> recently started to shed light on this subject. As reported in this 
> forum by Rob Barrett of IBM Almaden, administrators cling to their 
> shells, scripts, and other command line utilities. We create GUI tools 
> for them, but is that what they really need to lower the Total Cost of 
> Ownership (TCO) of software, or to be more efficient when 
> communicating with each other? What are the real frustrations in a 
> given admin's day and how can Human Computer Interaction practitioners 
> help them?
>
> This talk will focus on better understanding administrators and what 
> design solutions and techniques work. I will present more information 
> about the latest user classifications I found in mid-to large scale 
> companies. Their user profiles vary in terms of technical skill, 
> breadth, and responsibility. I will also talk about a study of only 
> DBAs, where my team saw a large difference between self reported and 
> observed data concerning their real tasks.
>
> Practical case studies of software ecosystems that these admins 
> inhabit will be showcased throughout this talk. While sometimes 
> unexpected, the tools and techniques that an HCI practitioner, or any 
> software designer, can deploy will decrease the frustration, 
> complexity, and cost associated with enterprise software deployment. 
> The bridging of technical and organizational silos will often be 
> required, and designers will need to extend their role in order to 
> bring about any significant change and make life (and command line 
> withdrawal) easier for Administrators Anonymous.
>
> **********************************************************
> Luke Kowalski is the Corporate UI Architect at Oracle Corp. His role 
> serves to bridge the user interface design groups at Oracle and he 
> works as an evangelist for effective UI technology, on legal aspects 
> of user interfaces, business context, and cross-divisional information 
> architecture integration. Prior work includes begging for money at 
> startups as director of UI and Web, a longish stint at Netscape's 
> Server User Interface Group, as well as other odd HCI jobs to fill out 
> the 15 years in practice. He holds several UI patents, a CPE 
> Certification, and two Masters Degrees, one from Pratt Institute, and 
> another from Columbia University. His PhD in Divinity cost him $5 from 
> http://www.ulc.org/ and allows him to park in the minister spot in 
> front of hospitals. He has also published book chapters and articles 
> and spoke at the Nielsen Norman Group conference in Sydney in 2002.
>
> **************************************************************
> NEXT WEEK: October 14, 2005 - Jeffrey Heer, UC Berkeley Computer Science
>     he...@cs...
>    Presiding Over Accidents: Techniques for Designing Directive 
> Interfaces
>     http://hci/seminar/abstracts/05-06/051014-heer.html
>
> **************************************************************
> The mailing list for these seminar announcements is
> pcd...@li..., which is managed by an automated 
> server. For
> information on subscribing or unsubscribing, see
> http://hci.stanford.edu/lists.html
> For information about HCI at Stanford see http://hci.stanford.edu
>
> !DSPAM:43458a73148662498594652! 

[webmin-l] ProFTPD Version 1.3.0rc2

[Torsten @ CNC-L. <to...@cn...>]

Hi Guys, 
I'm running on FreeBSD 5.4 and just upgraded the ports and reinstalled
to newer versions.
The proftpd module does not recognise the new version string.

Cheers
Torsten

[webmin-l] [OT] Free Stanford web-based seminar on user interfaces for Admins

[Barry <we...@i1...>]

Hi All -

Given the recent uptick in support by Open Country for webmin, and Paul 
Cubbage's recent call for ideas into what the future Webmin might look 
like, I thought this is on topic...

Paul - I am not sure if you are in the Bay Area or not, but if you are, 
these seminars are generally open to attend in person...there might be a 
wealth of info for OC's own products there too.

Best,

Barry

*************************************************************
Stanford Seminar on People, Computers, and Design (CS547)
                 http://hci.stanford.edu/seminar
Gates B01 (HP Classroom) and SITN, 12:30-2:00pm PDT (UTC 19:30)
Video: http://scpd.stanford.edu/scpd/students/courseList.asp CS547
*************************************************************
Friday, October 7, 2005

Luke Kowalski, Oracle
    v12...@ya...

TITLE: Administrators Anonymous - UCD, TCO, LCM, and other interventions

ABSTRACT:
The lack of focus on administrative interfaces often comes from 
management's mandates to prioritize end user facing screens ahead of 
anything else. The number of "eyeballs" is greater for the end user 
screens than admin screens. It is also easier for all stakeholders, 
including interaction designers to understand the domain of an e-mail 
application than it is to grasp things like complex system monitoring, 
visualization of clickstream data, or the tools needed to bridge 
interdependent systems. However in more complex software, this initial 
emphasis on the end user turns out to be a short lived priority. The 
more significant costs of running software are often associated with 
installation, configuration, deployment, maintenance, and upgrade. 
Often, this is referred to as LCM, or Lifecycle Change Management. 
Industry estimates state that the budget for LCM can be 2-4 times as 
large as the initial license cost of enterprise software. More 
information is needed about how administrators work to manage these 
systems and what business and integration problems they are trying to 
solve. UCD, or user centered design can help answer these questions.

The administrator is often a misunderstood user type. Experts have 
recently started to shed light on this subject. As reported in this 
forum by Rob Barrett of IBM Almaden, administrators cling to their 
shells, scripts, and other command line utilities. We create GUI tools 
for them, but is that what they really need to lower the Total Cost of 
Ownership (TCO) of software, or to be more efficient when communicating 
with each other? What are the real frustrations in a given admin's day 
and how can Human Computer Interaction practitioners help them?

This talk will focus on better understanding administrators and what 
design solutions and techniques work. I will present more information 
about the latest user classifications I found in mid-to large scale 
companies. Their user profiles vary in terms of technical skill, 
breadth, and responsibility. I will also talk about a study of only 
DBAs, where my team saw a large difference between self reported and 
observed data concerning their real tasks.

Practical case studies of software ecosystems that these admins inhabit 
will be showcased throughout this talk. While sometimes unexpected, the 
tools and techniques that an HCI practitioner, or any software designer, 
can deploy will decrease the frustration, complexity, and cost 
associated with enterprise software deployment. The bridging of 
technical and organizational silos will often be required, and designers 
will need to extend their role in order to bring about any significant 
change and make life (and command line withdrawal) easier for 
Administrators Anonymous.

**********************************************************
Luke Kowalski is the Corporate UI Architect at Oracle Corp. His role 
serves to bridge the user interface design groups at Oracle and he works 
as an evangelist for effective UI technology, on legal aspects of user 
interfaces, business context, and cross-divisional information 
architecture integration. Prior work includes begging for money at 
startups as director of UI and Web, a longish stint at Netscape's Server 
User Interface Group, as well as other odd HCI jobs to fill out the 15 
years in practice. He holds several UI patents, a CPE Certification, and 
two Masters Degrees, one from Pratt Institute, and another from Columbia 
University. His PhD in Divinity cost him $5 from http://www.ulc.org/ and 
allows him to park in the minister spot in front of hospitals. He has 
also published book chapters and articles and spoke at the Nielsen 
Norman Group conference in Sydney in 2002.

**************************************************************
NEXT WEEK: October 14, 2005 - Jeffrey Heer, UC Berkeley Computer Science
    he...@cs...
   Presiding Over Accidents: Techniques for Designing Directive Interfaces
    http://hci/seminar/abstracts/05-06/051014-heer.html

**************************************************************
The mailing list for these seminar announcements is
pcd...@li..., which is managed by an automated server. 
For
information on subscribing or unsubscribing, see
http://hci.stanford.edu/lists.html
For information about HCI at Stanford see http://hci.stanford.edu

[webmin-l] [Mirror] Mirror Outdate Notification

[Martin M. <mm...@me...>]

Hi all,

this is a general notifier about mirrors of webmin.com which are either 

a) recent		Current Webmin Development version available
b) a bit behind		Webmin Version > v 1.23x available
c) rather old		Webmin Version > v 1.21x available
d) outdated		Webmin Version < v 1.21x available
e) unreachable		no route to host

Mirror-Masters please act as soon as possible at least if you are 
classified as c) or d). The primary mirror webmin.mamemu.de mirrors 
webmin.com every three hours and a good choice to update the mirrors 
should be at least once a week or triggered by my "On the fly" eMails.

Of course the classification e) may depend on common network problems 
but if you are classified as e) and the site is really off the mirror 
will be deleted from the list. Otherwise, please try to update at the 
next possible time.

Mirrors which have a redirect to another page which does not directly 
show the webmin content will be deleted. If this is a misconfiguration, 
please reconfigure and send an update note to mm...@us....

Thank you in advance for your co-operation

**********************************************************************

Mirrors						Classification
----------------------------------------------------------------------
http://webmin.fmsistemas.com/			a)
http://www.zordah.net/webmin/			a)
http://webmin.gds.tuwien.ac.at/			a)
http://webmin.ozane.net/			b)
http://webmin.desiato.de/ -> http://193.238.63.20/landing2/ {{delete}}
http://webmin.interprovide.de/			c)
http://webmin.linux-mirror.org/			a)
http://mirrors.pmmf.hu/linux/www.webmin.com/	a)
http://webmin.ugm.ac.id/			b)
http://webmin.alogica.it/			a)
http://www.zentek-international.com/mirrors/webmin/
						a)
http://www.webmin.it/				a)
http://webmin.ispace.co.jp/			a)
http://www.magaltavor.com/webmin/		a)
http://webmin.coolzero.info/			a)
http://webmin.bibsyst.no/			a)
http://webmin.com.es/				a)
http://webmin.cs.pu.edu.tw/			a)
http://webmin.dfk-systems.com/			b)
http://mirrors.redwoodvirtual.com/mirrors/www.webmin.com/
						b)
http://www.seanspc.net:8080/webmin/		e)
http://mirrors.omnicomp.org/Webmin/		a)


bis dahin/kind regards

Martin Mewes

-- 
Sicherheitsmeldungen fuer SuSE Linux bekommt man hier:
sus...@su...

[webmin-l] [FAQ] Webmin/Usermin/Virtualmin - On the fly updates

[Martin M. <mm...@me...>]

######################################################################

History:
--------

06.10.2005
Webmin-Development-Version 1.232 released
Usermin-Development-Version 1.162 released

03.10.2005
Virtualmin-Development-Version 2.604 released

20.09.2005
Webmin-Version 1.230 released as stable
Usermin-Version 1.160 released as stable

03.05.2005
Virtualmin-Version 2.60 released as stable

######################################################################

Current Stable Release for Webmin is 1.230
http://webmin.mamemu.de/devel/tarballs/webmin-1.230.tar.gz
http://webmin.mamemu.de/devel/tarballs/webmin-1.230-1.noarch.rpm
http://webmin.mamemu.de/devel/tarballs/webmin-1.230-minimal.tar.gz

Current Development Release for Webmin is 1.232
http://webmin.mamemu.de/devel/tarballs/webmin-1.232.tar.gz

Current Stable Release for Usermin is 1.160
http://webmin.mamemu.de/devel/tarballs/usermin-1.160.tar.gz
http://webmin.mamemu.de/devel/tarballs/usermin-1.160-1.noarch.rpm

Current Development Release for Usermin is 1.162
http://webmin.mamemu.de/devel/tarballs/usermin-1.162.tar.gz

Current Stable Release for VirtualMin is 2.60
http://webmin.mamemu.de/download/virtualmin/virtual-server-2.60.wbm.gz

Current Development Release for VirtualMin is 2.604
http://webmin.mamemu.de/download/virtualmin/virtual-server-2.604.wbm.gz
	
######################################################################

Important notice:
There are three announcments for stable versions.

a) Maybe the first one comes with a "on the fly"-update.
b) Paying sourceforge-members who are subscribed to notifications
about webmin/usermin-file uploads.
c) The one and only official one comes from Jamie Cameron directly.

Virtualmin has gone Virtualmin Pro:
Jamie Cameron and Joe Cooper founded Virtualmin Inc.
Please visit http://www.virtualmin.com/ for details

If you are anoyed by these post you can filter this with procmail
scanning for

X-Webmin: update

in the header.


bis dahin - kind regards

Martin Mewes

-- 
######################################################################
http://www.webmin.com/		| Webbased Administration Tool for
http://webmin.mamemu.de/	| Unixoid Systems :-)
Webmin Translation Team
######################################################################

Re: [webmin-l] DNS Report - Lame Name Server

[John H. <web...@ew...>]

Vern wrote:

>>Check permissions on the zone files. On CentOS, I needed to change the 
>>owner:group in the bind config within Webmin for when new zone files are 
>>created. It was writing them as root:root... I set it to named:named and 
>>all was well. After of course going in and chown/chgrp the wrong 
>>permissioned zone files. 
>>    
>>
>
>Not so sure I want to mess with permissions and so forth since things were working 
>fine until I added the Windows DNS box and now they are not I would think that that is 
>not the issue. I thought that stopping the Windows DNS service might resolve the 
>issue, but it does not. Mind you, the site is working, it's just these errors make me 
>crazy. I like things to work as they are supposed to.
>
>V
>  
>
I understand the worry about this... but at least 'look' at owner/group 
on the Fedora box. If it is root.root... that is the problem as bind on 
Redhat systems now runs under named not root. You can edit the bind 
config file to set it to root.... not a good idea... but the bottom line 
issue is zone files created using Webmin default to root on Redhat boxes 
and root will not transfer as bind is operating under user 'named'. 
(Note: I think Jamie fixed this permission problem in one of the latest 
releases of Webmin)

It has been a while since I had this issue, but it seems like logwatch 
was giving an error which helped... like permission denied. Also, if you 
restart bind on the Redhat boxes, and quickly tail the messages log, 
you'll see the problems... might need to tail -100 or tail -500 messages 
to get enough return to see the issue.

I run three nameservers as well... two CentOS 3 (master and slave) and 
one RH7.2 (slave - a system not long for this world! but has nothing 
critical on it). I also slave with the master for some other 
masters/colos on our network. All has been well after beating my head 
against the wall forever trying to figure out why transfers wouldn't go.

Also, as for the other thread on this... Jamie's book has a very good 
section on bind. I would suggest that anyone using Webmin get his book. 
It is much more than just a book on Webmin, but more like a book on 
server administration and how Webmin interacts with that administration. 
A great reference.

John Hinton

RE: [webmin-l] Configure Webmin with PAM Authentication

[Laurenz, D. <Dir...@fu...>]

Hi,

this problem still exists.

Mit freundlichem Gru=DF,



Dirk Laurenz
Systems Engineer=09

Fujitsu Siemens Computers
S CE DE SE PS N/O
Sales Central Europe Deutschland=20
Professional Service Nord / Ost

Hildesheimer Strasse 25
30880 Laatzen
Germany

Telephone:	+49 (511) 84 89 - 18 08
Telefax:	+49 (511) 84 89 - 25 18 08
Mobile:	+49 (170) 22 10 781
Email:	mailto:dir...@fu...
Internet:	http://www.fujitsu-siemens.com
            http://www.fujitsu-siemens.de/services/index.html
*************************************************************************=
******************************************
 =20

-|  -----Original Message-----
-|  From: web...@li...=20
-|  [mailto:web...@li...] On=20
-|  Behalf Of Dir...@fu...
-|  Sent: Tuesday, September 20, 2005 1:44 PM
-|  To: web...@li...
-|  Subject: RE: [webmin-l] Configure Webmin with PAM Authentication
-| =20
-|  Hi,
-| =20
-|  i use a SuSE SLES 9 and they offer a pam_unix2.conf, which itself
-|  uses ldap as you can see here. Moreover we also tried pam_ldap.so=20
-|  directly and logging on via shell or samba /w ldap works fine.
-| =20
-|  hgest3201:~ # cat /etc/security/pam_unix2.conf
-|  # pam_unix2 config file
-|  #
-|  # This file contains options for the pam_unix2.so module.
-|  # It contains a list of options for every type of management group,
-|  # which will be used for authentication, account management and
-|  # password management. Not all options will be used from=20
-|  all types of
-|  # management groups.
-|  #
-|  # At first, pam_unix2 will read this file and then uses the local
-|  # options. Not all options can be set her global.
-|  #
-|  # Allowed options are:
-|  #
-|  # debug                 (account, auth, password, session)
-|  # nullok                (auth)
-|  # md5                   (password)
-|  # bigcrypt              (password)
-|  # blowfish              (password)
-|  # crypt_rounds=3DXX
-|  # none                  (session)
-|  # trace                 (session)
-|  # call_modules=3Dx,y,z    (account, auth, password)
-|  #
-|  #  Example:
-|  #  auth:        nullok
-|  #  account:
-|  #  password:    nullok blowfish crypt_rounds=3D8
-|  #  session:     none
-|  #
-|  auth:           use_ldap
-|  account:        use_ldap
-|  password:       md5
-|  session:        none use_ldap
-| =20
-| =20
-| =20
-|  Mit freundlichem Gru=DF,
-| =20
-| =20
-| =20
-|  Dirk Laurenz
-|  Systems Engineer=09
-| =20
-|  Fujitsu Siemens Computers
-|  S CE DE SE PS N/O
-|  Sales Central Europe Deutschland=20
-|  Professional Service Nord / Ost
-| =20
-|  Hildesheimer Strasse 25
-|  30880 Laatzen
-|  Germany
-| =20
-|  Telephone:	+49 (511) 84 89 - 18 08
-|  Telefax:	+49 (511) 84 89 - 25 18 08
-|  Mobile:	+49 (170) 22 10 781
-|  Email:	mailto:dir...@fu...
-|  Internet:	http://www.fujitsu-siemens.com
-|              http://www.fujitsu-siemens.de/services/index.html
-|  ************************************************************
-|  *******************************************************
-|   =20
-| =20
-|  -|  -----Original Message-----
-|  -|  From: web...@li...=20
-|  -|  [mailto:web...@li...] On=20
-|  -|  Behalf Of Jamie Cameron
-|  -|  Sent: Tuesday, September 20, 2005 11:34 PM
-|  -|  To: web...@li...
-|  -|  Subject: Re: [webmin-l] Configure Webmin with PAM Authentication
-|  -| =20
-|  -|  Hi Dirk,
-|  -|  One thing you will definately need is to setup=20
-|  -|  /etc/pam.d/webmin to use pam_ldap.so . Typically this also=20
-|  -|  requires that a file like /etc/pam.d/pam_ldap.conf be set=20
-|  -|  up to talk to your LDAP server.. although that file may be=20
-|  -|  in a different location depending on your Linux distribution.
-|  -| =20
-|  -|   - Jamie
-|  -| =20
-|  -|  -----Original Message-----
-|  -| =20
-|  -|  From:  <Dir...@fu...>
-|  -|  Subj:  [webmin-l] Configure Webmin with PAM Authentication
-|  -|  Date:  Tue 20 Sep 2005 6:32 pm
-|  -|  Size:  1K
-|  -|  To:  <web...@li...>
-|  -| =20
-|  -|  Hello list,
-|  -| =20
-|  -|  i want to configure webmin to authenticate users against an=20
-|  -|  ldap server.
-|  -|  Users in a certain (ldap) group should be able  to=20
-|  -|  administer the server.
-|  -|  I don't want to a have a second source of authentication.=20
-|  -|  I got so far, that webmin uses the ldap accounts in that=20
-|  -|  way, that if the
-|  -|  user exists he will be authenticated, but it doesn't=20
-|  matter which=20
-|  -|  password you type in as long as it is not zero length. What=20
-|  -|  i want to have,
-|  -|  that webmin authenticates against the ldap server and has=20
-|  -|  no vitual users.
-|  -|  (like in MS AD, oder sudo where an account as=20
-|  additional privileges)
-|  -| =20
-|  -|  Here's my setup:
-|  -|  hgest3201:/etc/webmin # cat miniserv.conf
-|  -|  port=3D20000
-|  -|  addtype_cgi=3Dinternal/cgi
-|  -|  realm=3DWebmin Server
-|  -|  logfile=3D/var/webmin/miniserv.log
-|  -|  errorlog=3D/var/webmin/miniserv.error
-|  -|  pidfile=3D/var/webmin/miniserv.pid
-|  -|  logtime=3D168
-|  -|  ppath=3D
-|  -|  ssl=3D1
-|  -|  env_WEBMIN_CONFIG=3D/etc/webmin
-|  -|  env_WEBMIN_VAR=3D/var/webmin
-|  -|  atboot=3D1
-|  -|  logout=3D/etc/webmin/logout-flag
-|  -|  listen=3D20000
-|  -|  denyfile=3D\.pl$
-|  -|  log=3D1
-|  -|  blockhost_failures=3D3
-|  -|  blockhost_time=3D300
-|  -|  syslog=3D1
-|  -|  session=3D1
-|  -|  userfile=3D/etc/webmin/miniserv.users
-|  -|  keyfile=3D/etc/webmin/miniserv.pem
-|  -|  passwd_file=3D/etc/shadow
-|  -|  passwd_uindex=3D0
-|  -|  passwd_pindex=3D1
-|  -|  passwd_cindex=3D2
-|  -|  passwd_mindex=3D4
-|  -|  passwd_mode=3D0
-|  -|  preroot=3Dmscstyle3
-|  -|  passdelay=3D1
-|  -|  logouttime=3D
-|  -|  root=3D/usr/libexec/webmin
-|  -|  mimetypes=3D/usr/libexec/webmin/mime.types
-|  -|  bind=3D192.168.53.44
-|  -|  sockets=3D
-|  -|  pam_conv=3D1
-|  -|  no_pam=3D0
-|  -|  unixauth=3Dpam
-|  -| =20
-|  -|  hgest3201:/etc/webmin # cat /etc/pam.d/webmin
-|  -|  #%PAM-1.0
-|  -| =20
-|  -| =20
-|  -|  auth    required        pam_unix2.so
-|  -|  account required        pam_unix2.so
-|  -|  session required        pam_unix2.so
-|  -|  password        required        pam_unix2.so
-|  -| =20
-|  -| =20
-|  -|  =20
-|  -| =20
-|  -|  Mit freundlichem Gru=DF,
-|  -| =20
-|  -| =20
-|  -| =20
-|  -|  Dirk Laurenz
-|  -|  Systems Engineer=09
-|  -| =20
-|  -|  Fujitsu Siemens Computers
-|  -|  S CE DE SE PS N/O
-|  -|  Sales Central Europe Deutschland=20
-|  -|  Professional Service Nord / Ost
-|  -| =20
-|  -|  Hildesheimer Strasse 25
-|  -|  30880 Laatzen
-|  -|  Germany
-|  -| =20
-|  -|  Telephone:	+49 (511) 84 89 - 18 08
-|  -|  Telefax:	+49 (511) 84 89 - 25 18 08
-|  -|  Mobile:	+49 (170) 22 10 781
-|  -|  Email:	mailto:dir...@fu...
-|  -|  Internet:	http://www.fujitsu-siemens.com
-|  -| =20
-|  -|  --- message truncated ---
-|  -| =20
-|  -| =20
-|  -| =20
-|  -| =20
-|  -|  -------------------------------------------------------
-|  -|  SF.Net email is sponsored by:
-|  -|  Tame your development challenges with Apache's Geronimo App=20
-|  -|  Server. Download
-|  -|  it for free - -and be entered to win a 42" plasma tv or=20
-|  -|  your very own
-|  -|  Sony(tm)PSP.  Click here to play:=20
-|  -|  http://sourceforge.net/geronimo.php
-|  -|  -
-|  -|  Forwarded by the Webmin mailing list at=20
-|  -|  web...@li...
-|  -|  To remove yourself from this list, go to
-|  -|  http://lists.sourceforge.net/lists/listinfo/webadmin-list
-|  -| =20
-| =20
-| =20
-|  -------------------------------------------------------
-|  SF.Net email is sponsored by:
-|  Tame your development challenges with Apache's Geronimo App=20
-|  Server. Download
-|  it for free - -and be entered to win a 42" plasma tv or=20
-|  your very own
-|  Sony(tm)PSP.  Click here to play:=20
-|  http://sourceforge.net/geronimo.php
-|  -
-|  Forwarded by the Webmin mailing list at=20
-|  web...@li...
-|  To remove yourself from this list, go to
-|  http://lists.sourceforge.net/lists/listinfo/webadmin-list
-| =20

Re: [webmin-l] DNS Report - Lame Name Server

[Vern <ve...@cw...>]

> Check permissions on the zone files. On CentOS, I needed to change the 
> owner:group in the bind config within Webmin for when new zone files are 
> created. It was writing them as root:root... I set it to named:named and 
> all was well. After of course going in and chown/chgrp the wrong 
> permissioned zone files. 

Not so sure I want to mess with permissions and so forth since things were working 
fine until I added the Windows DNS box and now they are not I would think that that is 
not the issue. I thought that stopping the Windows DNS service might resolve the 
issue, but it does not. Mind you, the site is working, it's just these errors make me 
crazy. I like things to work as they are supposed to.

V

Re: [webmin-l] DNS Report - Lame Name Server

[John H. <web...@ew...>]

Vern wrote:

>I keep struggling with this DNS stuff, so could some one please explain to me why I am 
>having this trouble.
>
>I have three DNS servers setup. 
>   One is a Fedora Core 3 box
>   One a Red Hat 9.0 
>   and the last a Debain server
>
>I am having no trouble with the Debian box. 
>
>I WAS however having trouble with the Red Hat box so I decided to move over to a 
>Windows 2003 DNS. The problem I was having with the Red Hat 9.0 box is that the DNS 
>zones were not transfering from the Fedora box. 
>
>Now the zone are transferring to the Windows box no problem. So now the Fedora box is 
>the Master and the Windows and Debian boxes are Slaves.
>
>But now when I do a DNS Report I get this lame name server error for the Master server 
>on DNSreport.com:
>
>http://www.dnsreport.com/tools/dnsreport.ch?domain=comp-wiz.com
>
>ERROR: You have one or more lame nameservers. These are nameservers that do NOT answer 
>authoritatively for your domain. This is bad; for example, these nameservers may never 
>get updated. The following nameservers are lame: 
>64.81.130.196
>
>Anyone have any ideas?
>
>Thanks
>Vern
>  
>
Check permissions on the zone files. On CentOS, I needed to change the 
owner:group in the bind config within Webmin for when new zone files are 
created. It was writing them as root:root... I set it to named:named and 
all was well. After of course going in and chown/chgrp the wrong 
permissioned zone files.

Incidentally, CentOS rocks!!! Updates normally follow Redhat by a day or 
less. Quarterly releases (new ISOs) are normally done within a few days. 
It's a good way to be not quite so 'cutting edge' as Fedora, in case you 
are interested.

John Hinton

[webmin-l] Multiple DNS Servers

[Bubba C. <ca...@wi...>]

Hello All-

I'm a recent newcomer to Webmin, and I love it.  I'm in the process of
making some network changes, and I'd like some advice on what steps to
take.

I currently have one server doing all the work, and I'm wanting to add a
server and have it become a secondary DNS as well as host the webpages
for our business, while the 1st server is our primary DNS and email.  

My question is:  Using Webmin & DNS, where is a good place to start
setting up a secondary (slave) dns?  Are there websites?  Books?  Dummy
guides??

I'm using Red Hat ES 4.0


Thank you so much for any suggestions.


James Carter

[webmin-l] DNS Report - Lame Name Server

[Vern <ve...@cw...>]

I keep struggling with this DNS stuff, so could some one please explain to me why I am 
having this trouble.

I have three DNS servers setup. 
   One is a Fedora Core 3 box
   One a Red Hat 9.0 
   and the last a Debain server

I am having no trouble with the Debian box. 

I WAS however having trouble with the Red Hat box so I decided to move over to a 
Windows 2003 DNS. The problem I was having with the Red Hat 9.0 box is that the DNS 
zones were not transfering from the Fedora box. 

Now the zone are transferring to the Windows box no problem. So now the Fedora box is 
the Master and the Windows and Debian boxes are Slaves.

But now when I do a DNS Report I get this lame name server error for the Master server 
on DNSreport.com:

http://www.dnsreport.com/tools/dnsreport.ch?domain=comp-wiz.com

ERROR: You have one or more lame nameservers. These are nameservers that do NOT answer 
authoritatively for your domain. This is bad; for example, these nameservers may never 
get updated. The following nameservers are lame: 
64.81.130.196

Anyone have any ideas?

Thanks
Vern

Re: [webmin-l] Minor Bug?

[Jamie C. <jca...@we...>]

You are right, that is a bug .. I will fix this in the next release.

 - Jamie

On 6/Oct/2005 14:36 Thomas Leavitt wrote ..
> I restored the config files from a previous installation - same version,
> but different version of the O.S.
> 
> System says "Mandrake Linux 10.0"
> 
> Detected Operating System "Generic Linux 2.6"
> 
> Check "Update Webmin to use detected OS"
> 
> this is the result:
> 
> Error - Perl execution failed
> Undefined subroutine &main::detect_operating_system called at /usr/libexec/webmin/usermin/change_os.cgi
> line 15.
> 
> Thomas
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Power Architecture Resource Center: Free content, downloads, discussions,
> and more. http://solutions.newsforge.com/ibmarch.tmpl
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list