Menu
▾
▴
webadmin-list
|
From: Neal M. <Ne...@mo...> - 2006-02-15 17:22:44
|
Jamie: Thanks for the clarification. I took the time to try this out and I find that both broadcast and scan only want to work if the UDP port on the servers is set to 10000. My non standard port won't work there. I see the UDP listener in place on the desired port using netstat, but it still doesn't seem to work. Another minor issue: if your servers are multihomed and listen on all interfaces, the broadcast option finds them on all interfaces and adds multiple instances of the same machine. I understand this is probably because they appear to be different based on IP - but they do report the same server name. I wonder if it's worth de-duping on name, or at least prompting for confirmation before adding when more than one with the same name was found. Neither of these are show-stoppers, but maybe you'd want to add them to your list of future fixes... As always, thanks for your support and the great software! Regards, Neal Morgan=20 -----Original Message----- From: web...@li... [mailto:web...@li...] On Behalf Of Jamie Cameron Sent: Tuesday, February 14, 2006 3:04 PM To: web...@li... Subject: Re: [webmin-l] Webmin Servers, Broadcast/scan <snip> Hi Neal, Webmin actually listens on two ports, which by default are port 10000 TCP and 10000 UDP. The first is for the actual HTTP connections, while the second is for accepting broadcasts from other Webmin servers. They are actually configured separately on the 'Ports and Addresses' page of the 'Webmin Configuration' module. When sending a broadcast, Webmin will send to the same port number that it listens on itself. - Jamie |
|
From: Neal M. <Ne...@mo...> - 2006-02-15 18:45:12
|
What I'm finding is running the web server on a non-standard port works fine, but running the UDP broadcast on a non-standard port does not work. -----Original Message----- From: web...@li... [mailto:web...@li...] On Behalf Of GX Sent: Wednesday, February 15, 2006 10:20 AM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan So if I set my Webmin servers on non-standard ports as a default and=20 open the same UDP port, It'll work? Thanks, Glenn=20 |
|
From: GX <gx...@1b...> - 2006-02-15 19:09:34
|
At 01:44 PM 2/15/2006, you wrote: >What I'm finding is running the web server on a non-standard port works >fine, but running the UDP broadcast on a non-standard port does not >work. I see. Yes, I never got that to work and was satisfied upon having a port that no one would poke around on. I have numerous servers at the same non-standard port. I immediately configure them that way. Thanks! Glenn |
|
From: Neal M. <Ne...@mo...> - 2006-02-16 00:00:05
|
Jamie: I was testing the UDP broadcast on two servers on the same network segment - there are neither switches nor firewalls between. Also, when I put the UDP port back to 10000 on both they find each other without problem. On the multihomed/duplicates issue, Webmin finds the server twice, with the same name. When you edit the entries they are entirely the same. It appears to be finding the webmin name versus the host name; not an FQDN - so it doesn't look like there's a reverse lookup involved. =20 Again, not a big issue, just thought you'd want to know in case you find yourself looking for something to do! (I doubt that happens often). All the best, Neal -----Original Message----- From: web...@li... [mailto:web...@li...] On Behalf Of Jamie Cameron Sent: Wednesday, February 15, 2006 3:05 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan <snip> Are you sure it isn't being blocked by a firewall? And that both the sending a receiving systems are using the same port? <snip> That is a tough one to solve, as presumably the different IPs won't resolve to the same hostname.. |
|
From: Jamie C. <jca...@we...> - 2006-02-16 00:20:47
|
On 16/Feb/2006 10:59 Neal Morgan wrote .. > Jamie: > > I was testing the UDP broadcast on two servers on the same network > segment - there are neither switches nor firewalls between. Also, when > I put the UDP port back to 10000 on both they find each other without > problem. Have you tried using tcpdump to check the traffic between the servers? Perhaps it is being sent to the wrong port? > On the multihomed/duplicates issue, Webmin finds the server twice, with > the same name. When you edit the entries they are entirely the same. > It appears to be finding the webmin name versus the host name; not an > FQDN - so it doesn't look like there's a reverse lookup involved. > > Again, not a big issue, just thought you'd want to know in case you find > yourself looking for something to do! (I doubt that happens often). Do all the IPs of this multihome server reverse-resolve to the same hostname? That is the only way Webmin can get the hostnames .. - Jamie |
|
From: Neal M. <Ne...@mo...> - 2006-02-16 02:14:13
|
Jamie: Short answer: ethereal shows it still using port 10000 for broadcast. Long answer: I first set the UDP port to 6789, ran a netstat to confirm a listener was in place there are none existed on 10000, then ran the broadcast. On the multihome: the IPs resolve to different hosts and FQDNs. =20 Both servers have 2 NICs: 10.X.X.X/255.255.255.0=20 66.X.X.X/255.255.255.224 Webmin broadcasts correctly to the expected two network addresses: 10.X.X.255=20 66.X.X.223 But it also adds in a broadcast to all networks, and a broadcast to the 10 net as a class A: 255.255.255.255 10.255.255.255 Ethereal shows the 10.255.255.255 ignored (not on my network), the 10.x.x.255 received by the first NIC, and the 66.X.X.223 and 255.255.255.255 received by the second NIC. So - it should receive 3 responses. Somehow, it is already de-duping them and concluding there are 2 new servers to add. I'm OK with that - except it uses the same host name and port for both. So, there is nothing I can see from the edit screen that indicates why it thinks they are different. =20 Furthermore, if I broadcast again, I would expect it to either re-add both, or add nothing. Instead, it adds just one of them! Every new broadcast adds one more server with the same name, same config settings. Hope that helps and wasn't too much information. Thanks, Neal |
|
From: Jamie C. <jca...@we...> - 2006-02-16 03:30:57
|
On 16/Feb/2006 13:13 Neal Morgan wrote .. > Jamie: > > Short answer: ethereal shows it still using port 10000 for broadcast. > > Long answer: I first set the UDP port to 6789, ran a netstat to confirm > a listener was in place there are none existed on 10000, then ran the > broadcast. I looked into this some more, and found the cause of this problem - the sending server isn't properly getting the UDP port to send to from it's own configuration. The work-around is to add the line listen=6789 to the file /etc/webmin/servers/config on the sending system. > On the multihome: the IPs resolve to different hosts and FQDNs. > > Both servers have 2 NICs: > > 10.X.X.X/255.255.255.0 > 66.X.X.X/255.255.255.224 > > Webmin broadcasts correctly to the expected two network addresses: > > 10.X.X.255 > 66.X.X.223 > > But it also adds in a broadcast to all networks, and a broadcast to the > 10 net as a class A: > > 255.255.255.255 > 10.255.255.255 > > Ethereal shows the 10.255.255.255 ignored (not on my network), the > 10.x.x.255 received by the first NIC, and the 66.X.X.223 and > 255.255.255.255 received by the second NIC. > > So - it should receive 3 responses. Somehow, it is already de-duping > them and concluding there are 2 new servers to add. I'm OK with that - > except it uses the same host name and port for both. So, there is > nothing I can see from the edit screen that indicates why it thinks they > are different. > > Furthermore, if I broadcast again, I would expect it to either re-add > both, or add nothing. Instead, it adds just one of them! Every new > broadcast adds one more server with the same name, same config settings. > > > Hope that helps and wasn't too much information. Ok, I see what is going on how - Webmin isn't handling a packet being received twice from the same address in the same scan. This will be fixed in the next release though. - Jamie |
|
From: Neal M. <Ne...@mo...> - 2006-02-16 07:14:14
|
Jamie: I think you're right about it not reading its own configuration. I didn't know about that file. =20 FWIW - it does properly set the "listen" parm in the miniserv.conf file. Thanks, Neal Morgan |
|
From: Khan, M. [SMO] <MK...@fr...> - 2006-02-16 21:38:58
|
Hi Jamie,=20 I getting the following errors: Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: check pass; user unknown Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: authentication failure; l= ogname=3D uid=3D0 euid=3D0 tty=3D ruser=3D rhost=3D When login with ldap user. Please advise. Thanks -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Wednesday, February 15, 2006 7:31 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan On 16/Feb/2006 13:13 Neal Morgan wrote .. > Jamie: >=20 > Short answer: ethereal shows it still using port 10000 for broadcast. >=20 > Long answer: I first set the UDP port to 6789, ran a netstat to confirm > a listener was in place there are none existed on 10000, then ran the > broadcast. I looked into this some more, and found the cause of this problem - the sen= ding server isn't properly getting the UDP port to send to from it's own configu= ration. The work-around is to add the line=20 listen=3D6789 to the file /etc/webmin/servers/config on the sending system. =20 > On the multihome: the IPs resolve to different hosts and FQDNs. =20 >=20 > Both servers have 2 NICs: >=20 > 10.X.X.X/255.255.255.0=20 > 66.X.X.X/255.255.255.224 >=20 > Webmin broadcasts correctly to the expected two network addresses: >=20 > 10.X.X.255=20 > 66.X.X.223 >=20 > But it also adds in a broadcast to all networks, and a broadcast to the > 10 net as a class A: >=20 > 255.255.255.255 > 10.255.255.255 >=20 > Ethereal shows the 10.255.255.255 ignored (not on my network), the > 10.x.x.255 received by the first NIC, and the 66.X.X.223 and > 255.255.255.255 received by the second NIC. >=20 > So - it should receive 3 responses. Somehow, it is already de-duping > them and concluding there are 2 new servers to add. I'm OK with that - > except it uses the same host name and port for both. So, there is > nothing I can see from the edit screen that indicates why it thinks they > are different. =20 >=20 > Furthermore, if I broadcast again, I would expect it to either re-add > both, or add nothing. Instead, it adds just one of them! Every new > broadcast adds one more server with the same name, same config settings. >=20 >=20 > Hope that helps and wasn't too much information. Ok, I see what is going on how - Webmin isn't handling a packet being received twice from the same address in the same scan. This will be fixed in the next release though. - Jamie ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D1= 21642 - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list Notice: All email and instant messages (including attachments) sent to or from Franklin Templeton Investments (FTI) personnel may be retained, monitored and/or reviewed by FTI and its agents, or authorized law enforcement personnel, without further notice or consent. |
|
From: Jamie C. <jca...@we...> - 2006-02-16 22:05:46
|
Hi, Make sure that in /etc/pam.d/webmin there are entries to call pam_ldap.so , just like in your system's other PAM config files. Or just copy /etc/pam.d/ssh to /etc/pam.d/webmin , assuming that SSH logins as LDAP users are working. - Jamie -----Original Message----- From: "Khan, Mohammed [SMO]" <MK...@fr...> Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan Date: Fri 17 Feb 2006 8:39 am Size: 2K To: <web...@li...> Hi Jamie, I getting the following errors: Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: check pass; user unknown Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= When login with ldap user. Please advise. Thanks -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Wednesday, February 15, 2006 7:31 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan On 16/Feb/2006 13:13 Neal Morgan wrote .. > Jamie: > > Short answer: ethereal shows it still using port 10000 for broadcast. > > Long answer: I first set the UDP port to 6789, ran a netstat to confirm > a listener was in place there are none existed on 10000, then ran the > broadcast. I looked into this some more, and found the cause of this problem - the sending server isn't properly getting the UDP port to send to from it's own configuration. The work-around is to add the line listen=6789 to the file /etc/webmin/servers/config on the sending system. > On the multihome: the IPs resolve to different hosts and FQDNs. > > Both servers have 2 NICs: > > 10.X.X.X/255.255.255.0 > 66.X.X.X/255.255.255.224 > > Webmin broadcasts correctly to the expected two network addresses: > > 10.X.X.255 > 66.X.X.223 > > But it also adds in a broadcast to all networks, and a broadcast to the > 10 net as a class A: > > 255.255.255.255 > 10.255.255.255 > > Ethereal shows the 10.255.255.255 ignored (not on my network), the > 10.x.x.255 received by the first NIC, and the 66.X.X.223 and > 255.255.255.255 received by the second NIC. > > So - it should receive 3 responses. Somehow, it is already de-duping > them and concluding there are 2 new servers to add. I'm OK with that - > except it uses the same host name and port for both. So, there is > nothing I can see from the edit screen that indicates why it thinks they > are different. > > Furthermore, if I broadcast again, I would expect it to either re-add > both, or add nothing. Instead, it adds just one of them! Every new > broadcast adds one more server with the same name, same config settings. > > > Hope that helps and wasn't too much information. Ok, I see what is going on how - Webmin isn't handling a packet being received twice from the same address in the same scan. This will be fixed in the next release though. - Jamie ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 --- message truncated --- |
|
From: Khan, M. [SMO] <MK...@fr...> - 2006-02-16 22:25:41
|
Hi Jamie,=20 Sorry to bug u sir. I am still getting the same error when login using lda= p user into usermin. Here is error: Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user unknown Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication failure; l= ogname=3D uid=3D0 euid=3D0 tty=3D ruser=3D rhost=3D And here is mt .ssh file #%PAM-1.0 auth required /lib/security/pam_securetty.so auth required /lib/security/pam_nologin.so auth required /lib/security/pam_env.so auth sufficient /lib/security/pam_ldap.so auth required /lib/security/pam_unix_auth.so use_first_pass # set_sec= rpc account required /lib/security/pam_unix.so account required /lib/security/pam_nologin.so session required /lib/security/pam_unix.so session required /lib/security/pam_limits.so Please lete me know.. Thanks -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Friday, February 17, 2006 1:04 AM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Hi, Make sure that in /etc/pam.d/webmin there are entries to call pam_ldap.so ,= just like in your system's other PAM config files. Or just copy /etc/pam.d= /ssh to /etc/pam.d/webmin , assuming that SSH logins as LDAP users are work= ing. - Jamie -----Original Message----- From: "Khan, Mohammed [SMO]" <MK...@fr...> Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan Date: Fri 17 Feb 2006 8:39 am Size: 2K To: <web...@li...> Hi Jamie,=20 I getting the following errors: Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: check pass; user unknown Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: authentication failure; l= ogname=3D uid=3D0 euid=3D0 tty=3D ruser=3D rhost=3D When login with ldap user. Please advise. Thanks -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Wednesday, February 15, 2006 7:31 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan On 16/Feb/2006 13:13 Neal Morgan wrote .. > Jamie: >=20 > Short answer: ethereal shows it still using port 10000 for broadcast. >=20 > Long answer: I first set the UDP port to 6789, ran a netstat to confirm > a listener was in place there are none existed on 10000, then ran the > broadcast. I looked into this some more, and found the cause of this problem - the sen= ding server isn't properly getting the UDP port to send to from it's own configu= ration. The work-around is to add the line=20 listen=3D6789 to the file /etc/webmin/servers/config on the sending system. =20 > On the multihome: the IPs resolve to different hosts and FQDNs. =20 >=20 > Both servers have 2 NICs: >=20 > 10.X.X.X/255.255.255.0=20 > 66.X.X.X/255.255.255.224 >=20 > Webmin broadcasts correctly to the expected two network addresses: >=20 > 10.X.X.255=20 > 66.X.X.223 >=20 > But it also adds in a broadcast to all networks, and a broadcast to the > 10 net as a class A: >=20 > 255.255.255.255 > 10.255.255.255 >=20 > Ethereal shows the 10.255.255.255 ignored (not on my network), the > 10.x.x.255 received by the first NIC, and the 66.X.X.223 and > 255.255.255.255 received by the second NIC. >=20 > So - it should receive 3 responses. Somehow, it is already de-duping > them and concluding there are 2 new servers to add. I'm OK with that - > except it uses the same host name and port for both. So, there is > nothing I can see from the edit screen that indicates why it thinks they > are different. =20 >=20 > Furthermore, if I broadcast again, I would expect it to either re-add > both, or add nothing. Instead, it adds just one of them! Every new > broadcast adds one more server with the same name, same config settings. >=20 >=20 > Hope that helps and wasn't too much information. Ok, I see what is going on how - Webmin isn't handling a packet being received twice from the same address in the same scan. This will be fixed in the next release though. - Jamie ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D1= 21642 --- message truncated --- ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D1= 21642 - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list Notice: All email and instant messages (including attachments) sent to or from Franklin Templeton Investments (FTI) personnel may be retained, monitored and/or reviewed by FTI and its agents, or authorized law enforcement personnel, without further notice or consent. |
|
From: Jamie C. <jca...@we...> - 2006-02-16 22:28:09
|
Did you set up /etc/pam.d/usermin as well? My last set of instructions only mentioned /etc/pam.d/webmin , sorry .. - Jamie On 17/Feb/2006 09:25 Khan, Mohammed [SMO] wrote .. > Hi Jamie, > Sorry to bug u sir. I am still getting the same error when login using > ldap user into usermin. Here is error: > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user unknown > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost= > > And here is mt .ssh file > #%PAM-1.0 > auth required /lib/security/pam_securetty.so > auth required /lib/security/pam_nologin.so > auth required /lib/security/pam_env.so > auth sufficient /lib/security/pam_ldap.so > auth required /lib/security/pam_unix_auth.so use_first_pass # set_secrpc > account required /lib/security/pam_unix.so > account required /lib/security/pam_nologin.so > session required /lib/security/pam_unix.so > session required /lib/security/pam_limits.so > > > Please lete me know.. > > Thanks > > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Friday, February 17, 2006 1:04 AM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > Hi, > Make sure that in /etc/pam.d/webmin there are entries to call pam_ldap.so > , just like in your system's other PAM config files. Or just copy /etc/pam.d/ssh > to /etc/pam.d/webmin , assuming that SSH logins as LDAP users are working. > > - Jamie > > -----Original Message----- > > From: "Khan, Mohammed [SMO]" <MK...@fr...> > Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan > Date: Fri 17 Feb 2006 8:39 am > Size: 2K > To: <web...@li...> > > Hi Jamie, > I getting the following errors: > Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: check pass; user unknown > Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: authentication failure; > logname= uid=0 euid=0 tty= ruser= rhost= > > When login with ldap user. > > Please advise. > > Thanks > > > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Wednesday, February 15, 2006 7:31 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > On 16/Feb/2006 13:13 Neal Morgan wrote .. > > Jamie: > > > > Short answer: ethereal shows it still using port 10000 for broadcast. > > > > Long answer: I first set the UDP port to 6789, ran a netstat to confirm > > a listener was in place there are none existed on 10000, then ran the > > broadcast. > > I looked into this some more, and found the cause of this problem - the > sending > server isn't properly getting the UDP port to send to from it's own configuration. > The work-around is to add the line > > listen=6789 > > to the file /etc/webmin/servers/config on the sending system. > > > On the multihome: the IPs resolve to different hosts and FQDNs. > > > > Both servers have 2 NICs: > > > > 10.X.X.X/255.255.255.0 > > 66.X.X.X/255.255.255.224 > > > > Webmin broadcasts correctly to the expected two network addresses: > > > > 10.X.X.255 > > 66.X.X.223 > > > > But it also adds in a broadcast to all networks, and a broadcast to the > > 10 net as a class A: > > > > 255.255.255.255 > > 10.255.255.255 > > > > Ethereal shows the 10.255.255.255 ignored (not on my network), the > > 10.x.x.255 received by the first NIC, and the 66.X.X.223 and > > 255.255.255.255 received by the second NIC. > > > > So - it should receive 3 responses. Somehow, it is already de-duping > > them and concluding there are 2 new servers to add. I'm OK with that > - > > except it uses the same host name and port for both. So, there is > > nothing I can see from the edit screen that indicates why it thinks they > > are different. > > > > Furthermore, if I broadcast again, I would expect it to either re-add > > both, or add nothing. Instead, it adds just one of them! Every new > > broadcast adds one more server with the same name, same config settings. > > > > > > Hope that helps and wasn't too much information. > > Ok, I see what is going on how - Webmin isn't handling a packet being > received twice from the same address in the same scan. This will be fixed > in the next release though. > > - Jamie > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 > > --- message truncated --- > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 > - > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > Notice: All email and instant messages (including attachments) sent to > or from Franklin Templeton Investments (FTI) personnel may be retained, > monitored and/or reviewed by FTI and its agents, or authorized > law enforcement personnel, without further notice or consent. > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd- > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list |
|
From: Khan, M. [SMO] <MK...@fr...> - 2006-02-16 22:32:10
|
Sorry Jamie, it was only for usermin...but I made some changes in ldap.conf= file and as per instu. I copied my .ssh to usermin file it working. Than= ks so much sir. -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Thursday, February 16, 2006 2:28 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Did you set up /etc/pam.d/usermin as well? My last set of instructions only mentioned /etc/pam.d/webmin , sorry .. - Jamie On 17/Feb/2006 09:25 Khan, Mohammed [SMO] wrote .. > Hi Jamie,=20 > Sorry to bug u sir. I am still getting the same error when login using > ldap user into usermin. Here is error: > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user unknown > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication failure; > logname=3D uid=3D0 euid=3D0 tty=3D ruser=3D rhost=3D >=20 > And here is mt .ssh file > #%PAM-1.0 > auth required /lib/security/pam_securetty.so > auth required /lib/security/pam_nologin.so > auth required /lib/security/pam_env.so > auth sufficient /lib/security/pam_ldap.so > auth required /lib/security/pam_unix_auth.so use_first_pass # set_s= ecrpc > account required /lib/security/pam_unix.so > account required /lib/security/pam_nologin.so > session required /lib/security/pam_unix.so > session required /lib/security/pam_limits.so >=20 >=20 > Please lete me know.. >=20 > Thanks >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Friday, February 17, 2006 1:04 AM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > Hi, > Make sure that in /etc/pam.d/webmin there are entries to call pam_ldap.so > , just like in your system's other PAM config files. Or just copy /etc/pa= m=2Ed/ssh > to /etc/pam.d/webmin , assuming that SSH logins as LDAP users are working. >=20 > - Jamie >=20 > -----Original Message----- >=20 > From: "Khan, Mohammed [SMO]" <MK...@fr...> > Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan > Date: Fri 17 Feb 2006 8:39 am > Size: 2K > To: <web...@li...> >=20 > Hi Jamie,=20 > I getting the following errors: > Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: check pass; user unknown > Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: authentication failure; > logname=3D uid=3D0 euid=3D0 tty=3D ruser=3D rhost=3D >=20 > When login with ldap user. >=20 > Please advise. >=20 > Thanks >=20 >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Wednesday, February 15, 2006 7:31 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > On 16/Feb/2006 13:13 Neal Morgan wrote .. > > Jamie: > >=20 > > Short answer: ethereal shows it still using port 10000 for broadcast. > >=20 > > Long answer: I first set the UDP port to 6789, ran a netstat to confirm > > a listener was in place there are none existed on 10000, then ran the > > broadcast. >=20 > I looked into this some more, and found the cause of this problem - the > sending > server isn't properly getting the UDP port to send to from it's own confi= guration. > The work-around is to add the line=20 >=20 > listen=3D6789 >=20 > to the file /etc/webmin/servers/config on the sending system. > =20 > > On the multihome: the IPs resolve to different hosts and FQDNs. =20 > >=20 > > Both servers have 2 NICs: > >=20 > > 10.X.X.X/255.255.255.0=20 > > 66.X.X.X/255.255.255.224 > >=20 > > Webmin broadcasts correctly to the expected two network addresses: > >=20 > > 10.X.X.255=20 > > 66.X.X.223 > >=20 > > But it also adds in a broadcast to all networks, and a broadcast to the > > 10 net as a class A: > >=20 > > 255.255.255.255 > > 10.255.255.255 > >=20 > > Ethereal shows the 10.255.255.255 ignored (not on my network), the > > 10.x.x.255 received by the first NIC, and the 66.X.X.223 and > > 255.255.255.255 received by the second NIC. > >=20 > > So - it should receive 3 responses. Somehow, it is already de-duping > > them and concluding there are 2 new servers to add. I'm OK with that > - > > except it uses the same host name and port for both. So, there is > > nothing I can see from the edit screen that indicates why it thinks they > > are different. =20 > >=20 > > Furthermore, if I broadcast again, I would expect it to either re-add > > both, or add nothing. Instead, it adds just one of them! Every new > > broadcast adds one more server with the same name, same config settings. > >=20 > >=20 > > Hope that helps and wasn't too much information. >=20 > Ok, I see what is going on how - Webmin isn't handling a packet being > received twice from the same address in the same scan. This will be fixed > in the next release though. >=20 > - Jamie >=20 >=20 > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat= =3D121642 >=20 > --- message truncated --- >=20 >=20 >=20 >=20 > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat= =3D121642 > - > Forwarded by the Webmin mailing list at web...@li....n= et > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > Notice: All email and instant messages (including attachments) sent to > or from Franklin Templeton Investments (FTI) personnel may be retained, > monitored and/or reviewed by FTI and its agents, or authorized > law enforcement personnel, without further notice or consent. >=20 >=20 > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd- > Forwarded by the Webmin mailing list at web...@li....n= et > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D1= 21642 - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list Notice: All email and instant messages (including attachments) sent to or from Franklin Templeton Investments (FTI) personnel may be retained, monitored and/or reviewed by FTI and its agents, or authorized law enforcement personnel, without further notice or consent. |
|
From: Khan, M. [SMO] <MK...@fr...> - 2006-02-16 22:42:38
|
Hello Jamie,=20 Do you know how can I use usermin to change my ldap password. Please need = your help. Thanks Mohammed -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Thursday, February 16, 2006 2:28 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Did you set up /etc/pam.d/usermin as well? My last set of instructions only mentioned /etc/pam.d/webmin , sorry .. - Jamie On 17/Feb/2006 09:25 Khan, Mohammed [SMO] wrote .. > Hi Jamie,=20 > Sorry to bug u sir. I am still getting the same error when login using > ldap user into usermin. Here is error: > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user unknown > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication failure; > logname=3D uid=3D0 euid=3D0 tty=3D ruser=3D rhost=3D >=20 > And here is mt .ssh file > #%PAM-1.0 > auth required /lib/security/pam_securetty.so > auth required /lib/security/pam_nologin.so > auth required /lib/security/pam_env.so > auth sufficient /lib/security/pam_ldap.so > auth required /lib/security/pam_unix_auth.so use_first_pass # set_s= ecrpc > account required /lib/security/pam_unix.so > account required /lib/security/pam_nologin.so > session required /lib/security/pam_unix.so > session required /lib/security/pam_limits.so >=20 >=20 > Please lete me know.. >=20 > Thanks >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Friday, February 17, 2006 1:04 AM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > Hi, > Make sure that in /etc/pam.d/webmin there are entries to call pam_ldap.so > , just like in your system's other PAM config files. Or just copy /etc/pa= m=2Ed/ssh > to /etc/pam.d/webmin , assuming that SSH logins as LDAP users are working. >=20 > - Jamie >=20 > -----Original Message----- >=20 > From: "Khan, Mohammed [SMO]" <MK...@fr...> > Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan > Date: Fri 17 Feb 2006 8:39 am > Size: 2K > To: <web...@li...> >=20 > Hi Jamie,=20 > I getting the following errors: > Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: check pass; user unknown > Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: authentication failure; > logname=3D uid=3D0 euid=3D0 tty=3D ruser=3D rhost=3D >=20 > When login with ldap user. >=20 > Please advise. >=20 > Thanks >=20 >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Wednesday, February 15, 2006 7:31 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > On 16/Feb/2006 13:13 Neal Morgan wrote .. > > Jamie: > >=20 > > Short answer: ethereal shows it still using port 10000 for broadcast. > >=20 > > Long answer: I first set the UDP port to 6789, ran a netstat to confirm > > a listener was in place there are none existed on 10000, then ran the > > broadcast. >=20 > I looked into this some more, and found the cause of this problem - the > sending > server isn't properly getting the UDP port to send to from it's own confi= guration. > The work-around is to add the line=20 >=20 > listen=3D6789 >=20 > to the file /etc/webmin/servers/config on the sending system. > =20 > > On the multihome: the IPs resolve to different hosts and FQDNs. =20 > >=20 > > Both servers have 2 NICs: > >=20 > > 10.X.X.X/255.255.255.0=20 > > 66.X.X.X/255.255.255.224 > >=20 > > Webmin broadcasts correctly to the expected two network addresses: > >=20 > > 10.X.X.255=20 > > 66.X.X.223 > >=20 > > But it also adds in a broadcast to all networks, and a broadcast to the > > 10 net as a class A: > >=20 > > 255.255.255.255 > > 10.255.255.255 > >=20 > > Ethereal shows the 10.255.255.255 ignored (not on my network), the > > 10.x.x.255 received by the first NIC, and the 66.X.X.223 and > > 255.255.255.255 received by the second NIC. > >=20 > > So - it should receive 3 responses. Somehow, it is already de-duping > > them and concluding there are 2 new servers to add. I'm OK with that > - > > except it uses the same host name and port for both. So, there is > > nothing I can see from the edit screen that indicates why it thinks they > > are different. =20 > >=20 > > Furthermore, if I broadcast again, I would expect it to either re-add > > both, or add nothing. Instead, it adds just one of them! Every new > > broadcast adds one more server with the same name, same config settings. > >=20 > >=20 > > Hope that helps and wasn't too much information. >=20 > Ok, I see what is going on how - Webmin isn't handling a packet being > received twice from the same address in the same scan. This will be fixed > in the next release though. >=20 > - Jamie >=20 >=20 > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat= =3D121642 >=20 > --- message truncated --- >=20 >=20 >=20 >=20 > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat= =3D121642 > - > Forwarded by the Webmin mailing list at web...@li....n= et > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > Notice: All email and instant messages (including attachments) sent to > or from Franklin Templeton Investments (FTI) personnel may be retained, > monitored and/or reviewed by FTI and its agents, or authorized > law enforcement personnel, without further notice or consent. >=20 >=20 > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd- > Forwarded by the Webmin mailing list at web...@li....n= et > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D1= 21642 - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list Notice: All email and instant messages (including attachments) sent to or from Franklin Templeton Investments (FTI) personnel may be retained, monitored and/or reviewed by FTI and its agents, or authorized law enforcement personnel, without further notice or consent. |
|
From: Jamie C. <jca...@we...> - 2006-02-16 22:46:11
|
Just make sure that /etc/pam.d/passwd is setup to talk to LDAP, and that Usermin's Change Password module is setup to use PAM. - Jamie On 17/Feb/2006 09:42 Khan, Mohammed [SMO] wrote .. > Hello Jamie, > Do you know how can I use usermin to change my ldap password. Please need > your help. > > Thanks > Mohammed > > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Thursday, February 16, 2006 2:28 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > Did you set up /etc/pam.d/usermin as well? My last set of instructions > only > mentioned /etc/pam.d/webmin , sorry .. > > - Jamie > > On 17/Feb/2006 09:25 Khan, Mohammed [SMO] wrote .. > > Hi Jamie, > > Sorry to bug u sir. I am still getting the same error when login using > > ldap user into usermin. Here is error: > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user unknown > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication failure; > > logname= uid=0 euid=0 tty= ruser= rhost= > > > > And here is mt .ssh file > > #%PAM-1.0 > > auth required /lib/security/pam_securetty.so > > auth required /lib/security/pam_nologin.so > > auth required /lib/security/pam_env.so > > auth sufficient /lib/security/pam_ldap.so > > auth required /lib/security/pam_unix_auth.so use_first_pass # set_secrpc > > account required /lib/security/pam_unix.so > > account required /lib/security/pam_nologin.so > > session required /lib/security/pam_unix.so > > session required /lib/security/pam_limits.so > > > > > > Please lete me know.. > > > > Thanks > > > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...]On Behalf Of Jamie > > Cameron > > Sent: Friday, February 17, 2006 1:04 AM > > To: web...@li... > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > > > > Hi, > > Make sure that in /etc/pam.d/webmin there are entries to call pam_ldap.so > > , just like in your system's other PAM config files. Or just copy /etc/pam.d/ssh > > to /etc/pam.d/webmin , assuming that SSH logins as LDAP users are working. > > > > - Jamie > > > > -----Original Message----- > > > > From: "Khan, Mohammed [SMO]" <MK...@fr...> > > Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan > > Date: Fri 17 Feb 2006 8:39 am > > Size: 2K > > To: <web...@li...> > > > > Hi Jamie, > > I getting the following errors: > > Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: check pass; user unknown > > Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: authentication failure; > > logname= uid=0 euid=0 tty= ruser= rhost= > > > > When login with ldap user. > > > > Please advise. > > > > Thanks > > > > > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...]On Behalf Of Jamie > > Cameron > > Sent: Wednesday, February 15, 2006 7:31 PM > > To: web...@li... > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > > > > On 16/Feb/2006 13:13 Neal Morgan wrote .. > > > Jamie: > > > > > > Short answer: ethereal shows it still using port 10000 for broadcast. > > > > > > Long answer: I first set the UDP port to 6789, ran a netstat to confirm > > > a listener was in place there are none existed on 10000, then ran the > > > broadcast. > > > > I looked into this some more, and found the cause of this problem - the > > sending > > server isn't properly getting the UDP port to send to from it's own configuration. > > The work-around is to add the line > > > > listen=6789 > > > > to the file /etc/webmin/servers/config on the sending system. > > > > > On the multihome: the IPs resolve to different hosts and FQDNs. > > > > > > Both servers have 2 NICs: > > > > > > 10.X.X.X/255.255.255.0 > > > 66.X.X.X/255.255.255.224 > > > > > > Webmin broadcasts correctly to the expected two network addresses: > > > > > > 10.X.X.255 > > > 66.X.X.223 > > > > > > But it also adds in a broadcast to all networks, and a broadcast to > the > > > 10 net as a class A: > > > > > > 255.255.255.255 > > > 10.255.255.255 > > > > > > Ethereal shows the 10.255.255.255 ignored (not on my network), the > > > 10.x.x.255 received by the first NIC, and the 66.X.X.223 and > > > 255.255.255.255 received by the second NIC. > > > > > > So - it should receive 3 responses. Somehow, it is already de-duping > > > them and concluding there are 2 new servers to add. I'm OK with that > > - > > > except it uses the same host name and port for both. So, there is > > > nothing I can see from the edit screen that indicates why it thinks > they > > > are different. > > > > > > Furthermore, if I broadcast again, I would expect it to either re-add > > > both, or add nothing. Instead, it adds just one of them! Every new > > > broadcast adds one more server with the same name, same config settings. > > > > > > > > > Hope that helps and wasn't too much information. > > > > Ok, I see what is going on how - Webmin isn't handling a packet being > > received twice from the same address in the same scan. This will be fixed > > in the next release though. > > > > - Jamie > > > > > > ------------------------------------------------------- > > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > > files > > for problems? Stop! Download the new AJAX search engine that makes > > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 > > > > --- message truncated --- > > > > > > > > > > ------------------------------------------------------- > > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > > files > > for problems? Stop! Download the new AJAX search engine that makes > > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 > > - > > Forwarded by the Webmin mailing list at web...@li... > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > > Notice: All email and instant messages (including attachments) sent > to > > or from Franklin Templeton Investments (FTI) personnel may be retained, > > monitored and/or reviewed by FTI and its agents, or authorized > > law enforcement personnel, without further notice or consent. > > > > > > ------------------------------------------------------- > > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > > files > > for problems? Stop! Download the new AJAX search engine that makes > > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > > http://sel.as-us.falkag.net/sel?cmd- > > Forwarded by the Webmin mailing list at web...@li... > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 > - > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > Notice: All email and instant messages (including attachments) sent to > or from Franklin Templeton Investments (FTI) personnel may be retained, > monitored and/or reviewed by FTI and its agents, or authorized > law enforcement personnel, without further notice or consent. > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd- > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list |
|
From: Khan, M. [SMO] <MK...@fr...> - 2006-02-16 23:06:59
|
Hi Jamie, Here is my passwd file: Pls tell me what I am doing worng. #%PAM-1.0 password required pam_cracklib.so password sufficient pam_ldap.so password sufficient pam_unix.so password required pam_deny.so Thanks Mohammed -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Thursday, February 16, 2006 2:46 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Just make sure that /etc/pam.d/passwd is setup to talk to LDAP, and that Us= ermin's Change Password module is setup to use PAM. - Jamie On 17/Feb/2006 09:42 Khan, Mohammed [SMO] wrote .. > Hello Jamie,=20 > Do you know how can I use usermin to change my ldap password. Please need > your help. >=20 > Thanks > Mohammed >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Thursday, February 16, 2006 2:28 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > Did you set up /etc/pam.d/usermin as well? My last set of instructions > only > mentioned /etc/pam.d/webmin , sorry .. >=20 > - Jamie >=20 > On 17/Feb/2006 09:25 Khan, Mohammed [SMO] wrote .. > > Hi Jamie,=20 > > Sorry to bug u sir. I am still getting the same error when login using > > ldap user into usermin. Here is error: > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user unkn= own > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication failur= e; > > logname=3D uid=3D0 euid=3D0 tty=3D ruser=3D rhost=3D > >=20 > > And here is mt .ssh file > > #%PAM-1.0 > > auth required /lib/security/pam_securetty.so > > auth required /lib/security/pam_nologin.so > > auth required /lib/security/pam_env.so > > auth sufficient /lib/security/pam_ldap.so > > auth required /lib/security/pam_unix_auth.so use_first_pass # set= _secrpc > > account required /lib/security/pam_unix.so > > account required /lib/security/pam_nologin.so > > session required /lib/security/pam_unix.so > > session required /lib/security/pam_limits.so > >=20 > >=20 > > Please lete me know.. > >=20 > > Thanks > >=20 > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...]On Behalf Of Jamie > > Cameron > > Sent: Friday, February 17, 2006 1:04 AM > > To: web...@li... > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > >=20 > >=20 > > Hi, > > Make sure that in /etc/pam.d/webmin there are entries to call pam_ldap.= so > > , just like in your system's other PAM config files. Or just copy /etc/= pam.d/ssh > > to /etc/pam.d/webmin , assuming that SSH logins as LDAP users are worki= ng. > >=20 > > - Jamie > >=20 > > -----Original Message----- > >=20 > > From: "Khan, Mohammed [SMO]" <MK...@fr...> > > Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan > > Date: Fri 17 Feb 2006 8:39 am > > Size: 2K > > To: <web...@li...> > >=20 > > Hi Jamie,=20 > > I getting the following errors: > > Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: check pass; user unkn= own > > Feb 16 13:37:09 dublx09 usermin(pam_unix)[31966]: authentication failur= e; > > logname=3D uid=3D0 euid=3D0 tty=3D ruser=3D rhost=3D > >=20 > > When login with ldap user. > >=20 > > Please advise. > >=20 > > Thanks > >=20 > >=20 > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...]On Behalf Of Jamie > > Cameron > > Sent: Wednesday, February 15, 2006 7:31 PM > > To: web...@li... > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > >=20 > >=20 > > On 16/Feb/2006 13:13 Neal Morgan wrote .. > > > Jamie: > > >=20 > > > Short answer: ethereal shows it still using port 10000 for broadcast. > > >=20 > > > Long answer: I first set the UDP port to 6789, ran a netstat to confi= rm > > > a listener was in place there are none existed on 10000, then ran the > > > broadcast. > >=20 > > I looked into this some more, and found the cause of this problem - the > > sending > > server isn't properly getting the UDP port to send to from it's own con= figuration. > > The work-around is to add the line=20 > >=20 > > listen=3D6789 > >=20 > > to the file /etc/webmin/servers/config on the sending system. > > =20 > > > On the multihome: the IPs resolve to different hosts and FQDNs. =20 > > >=20 > > > Both servers have 2 NICs: > > >=20 > > > 10.X.X.X/255.255.255.0=20 > > > 66.X.X.X/255.255.255.224 > > >=20 > > > Webmin broadcasts correctly to the expected two network addresses: > > >=20 > > > 10.X.X.255=20 > > > 66.X.X.223 > > >=20 > > > But it also adds in a broadcast to all networks, and a broadcast to > the > > > 10 net as a class A: > > >=20 > > > 255.255.255.255 > > > 10.255.255.255 > > >=20 > > > Ethereal shows the 10.255.255.255 ignored (not on my network), the > > > 10.x.x.255 received by the first NIC, and the 66.X.X.223 and > > > 255.255.255.255 received by the second NIC. > > >=20 > > > So - it should receive 3 responses. Somehow, it is already de-duping > > > them and concluding there are 2 new servers to add. I'm OK with that > > - > > > except it uses the same host name and port for both. So, there is > > > nothing I can see from the edit screen that indicates why it thinks > they > > > are different. =20 > > >=20 > > > Furthermore, if I broadcast again, I would expect it to either re-add > > > both, or add nothing. Instead, it adds just one of them! Every new > > > broadcast adds one more server with the same name, same config settin= gs. > > >=20 > > >=20 > > > Hope that helps and wasn't too much information. > >=20 > > Ok, I see what is going on how - Webmin isn't handling a packet being > > received twice from the same address in the same scan. This will be fix= ed > > in the next release though. > >=20 > > - Jamie > >=20 > >=20 > > ------------------------------------------------------- > > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > > files > > for problems? Stop! Download the new AJAX search engine that makes > > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat= =3D121642 > >=20 > > --- message truncated --- > >=20 > >=20 > >=20 > >=20 > > ------------------------------------------------------- > > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > > files > > for problems? Stop! Download the new AJAX search engine that makes > > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat= =3D121642 > > - > > Forwarded by the Webmin mailing list at web...@li...= .net > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list > >=20 > > Notice: All email and instant messages (including attachments) sent > to > > or from Franklin Templeton Investments (FTI) personnel may be retained, > > monitored and/or reviewed by FTI and its agents, or authorized > > law enforcement personnel, without further notice or consent. > >=20 > >=20 > > ------------------------------------------------------- > > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > > files > > for problems? Stop! Download the new AJAX search engine that makes > > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > > http://sel.as-us.falkag.net/sel?cmd- > > Forwarded by the Webmin mailing list at web...@li...= .net > > To remove yourself from this list, go to > > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 >=20 > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat= =3D121642 > - > Forwarded by the Webmin mailing list at web...@li....n= et > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > Notice: All email and instant messages (including attachments) sent to > or from Franklin Templeton Investments (FTI) personnel may be retained, > monitored and/or reviewed by FTI and its agents, or authorized > law enforcement personnel, without further notice or consent. >=20 >=20 > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd- > Forwarded by the Webmin mailing list at web...@li....n= et > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D1= 21642 - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list Notice: All email and instant messages (including attachments) sent to or from Franklin Templeton Investments (FTI) personnel may be retained, monitored and/or reviewed by FTI and its agents, or authorized law enforcement personnel, without further notice or consent. |
|
From: Jamie C. <jca...@we...> - 2006-02-16 23:12:22
|
Hi, That looks OK.. Can LDAP users use the command-line passwd command to change their passwords? - Jamie -----Original Message----- From: "Khan, Mohammed [SMO]" <MK...@fr...> Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan Date: Fri 17 Feb 2006 10:07 am Size: 2K To: <web...@li...> Hi Jamie, Here is my passwd file: Pls tell me what I am doing worng. #%PAM-1.0 password required pam_cracklib.so password sufficient pam_ldap.so password sufficient pam_unix.so password required pam_deny.so Thanks Mohammed -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Thursday, February 16, 2006 2:46 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Just make sure that /etc/pam.d/passwd is setup to talk to LDAP, and that Usermin's Change Password module is setup to use PAM. - Jamie On 17/Feb/2006 09:42 Khan, Mohammed [SMO] wrote .. > Hello Jamie, > Do you know how can I use usermin to change my ldap password. Please need > your help. > > Thanks > Mohammed > > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Thursday, February 16, 2006 2:28 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > Did you set up /etc/pam.d/usermin as well? My last set of instructions > only > mentioned /etc/pam.d/webmin , sorry .. > > - Jamie > > On 17/Feb/2006 09:25 Khan, Mohammed [SMO] wrote .. > > Hi Jamie, > > Sorry to bug u sir. I am still getting the same error when login using > > ldap user into usermin. Here is error: > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user unknown > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication failure; > > logname= uid=0 euid=0 tty= ruser= rhost= > > > > And here is mt .ssh file > > #%PAM-1.0 > > auth required /lib/security/pam_securetty.so > > auth required /lib/security/pam_nologin.so > > auth required /lib/security/pam_env.so > > auth sufficient /lib/security/pam_ldap.so > > auth required /lib/security/pam_unix_auth.so use_first_pass # set_secrpc > > account required /lib/security/pam_unix.so > > account required /lib/security/pam_nologin.so > > session required /lib/security/pam_unix.so > > session required /lib/security/pam_limits.so > > > > > > Please lete me know.. > > > > Thanks > > > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...]On Behalf Of Jamie > > Cameron > > Sent: Friday, February 17, 2006 1:04 AM > > To: web...@li... > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > > > > Hi, --- message truncated --- |
|
From: Khan, M. [SMO] <MK...@fr...> - 2006-02-16 23:43:08
|
Yes they can. -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Friday, February 17, 2006 2:10 AM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Hi, That looks OK.. Can LDAP users use the command-line passwd command to change their password= s? - Jamie -----Original Message----- From: "Khan, Mohammed [SMO]" <MK...@fr...> Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan Date: Fri 17 Feb 2006 10:07 am Size: 2K To: <web...@li...> Hi Jamie, Here is my passwd file: Pls tell me what I am doing worng. #%PAM-1.0 password required pam_cracklib.so password sufficient pam_ldap.so password sufficient pam_unix.so password required pam_deny.so Thanks Mohammed -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Thursday, February 16, 2006 2:46 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Just make sure that /etc/pam.d/passwd is setup to talk to LDAP, and that Us= ermin's Change Password module is setup to use PAM. - Jamie On 17/Feb/2006 09:42 Khan, Mohammed [SMO] wrote .. > Hello Jamie,=20 > Do you know how can I use usermin to change my ldap password. Please need > your help. >=20 > Thanks > Mohammed >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Thursday, February 16, 2006 2:28 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > Did you set up /etc/pam.d/usermin as well? My last set of instructions > only > mentioned /etc/pam.d/webmin , sorry .. >=20 > - Jamie >=20 > On 17/Feb/2006 09:25 Khan, Mohammed [SMO] wrote .. > > Hi Jamie,=20 > > Sorry to bug u sir. I am still getting the same error when login using > > ldap user into usermin. Here is error: > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user unkn= own > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication failur= e; > > logname=3D uid=3D0 euid=3D0 tty=3D ruser=3D rhost=3D > >=20 > > And here is mt .ssh file > > #%PAM-1.0 > > auth required /lib/security/pam_securetty.so > > auth required /lib/security/pam_nologin.so > > auth required /lib/security/pam_env.so > > auth sufficient /lib/security/pam_ldap.so > > auth required /lib/security/pam_unix_auth.so use_first_pass # set= _secrpc > > account required /lib/security/pam_unix.so > > account required /lib/security/pam_nologin.so > > session required /lib/security/pam_unix.so > > session required /lib/security/pam_limits.so > >=20 > >=20 > > Please lete me know.. > >=20 > > Thanks > >=20 > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...]On Behalf Of Jamie > > Cameron > > Sent: Friday, February 17, 2006 1:04 AM > > To: web...@li... > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > >=20 > >=20 > > Hi, --- message truncated --- ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D1= 21642 - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list Notice: All email and instant messages (including attachments) sent to or from Franklin Templeton Investments (FTI) personnel may be retained, monitored and/or reviewed by FTI and its agents, or authorized law enforcement personnel, without further notice or consent. |
|
From: Khan, M. [SMO] <MK...@fr...> - 2006-02-16 23:44:17
|
This what I am getting when changing password on usermin. Failed to change password : Your username was not found in the password fil= e=20 =20 -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Friday, February 17, 2006 2:10 AM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Hi, That looks OK.. Can LDAP users use the command-line passwd command to change their password= s? - Jamie -----Original Message----- From: "Khan, Mohammed [SMO]" <MK...@fr...> Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan Date: Fri 17 Feb 2006 10:07 am Size: 2K To: <web...@li...> Hi Jamie, Here is my passwd file: Pls tell me what I am doing worng. #%PAM-1.0 password required pam_cracklib.so password sufficient pam_ldap.so password sufficient pam_unix.so password required pam_deny.so Thanks Mohammed -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Thursday, February 16, 2006 2:46 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Just make sure that /etc/pam.d/passwd is setup to talk to LDAP, and that Us= ermin's Change Password module is setup to use PAM. - Jamie On 17/Feb/2006 09:42 Khan, Mohammed [SMO] wrote .. > Hello Jamie,=20 > Do you know how can I use usermin to change my ldap password. Please need > your help. >=20 > Thanks > Mohammed >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Thursday, February 16, 2006 2:28 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > Did you set up /etc/pam.d/usermin as well? My last set of instructions > only > mentioned /etc/pam.d/webmin , sorry .. >=20 > - Jamie >=20 > On 17/Feb/2006 09:25 Khan, Mohammed [SMO] wrote .. > > Hi Jamie,=20 > > Sorry to bug u sir. I am still getting the same error when login using > > ldap user into usermin. Here is error: > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user unkn= own > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication failur= e; > > logname=3D uid=3D0 euid=3D0 tty=3D ruser=3D rhost=3D > >=20 > > And here is mt .ssh file > > #%PAM-1.0 > > auth required /lib/security/pam_securetty.so > > auth required /lib/security/pam_nologin.so > > auth required /lib/security/pam_env.so > > auth sufficient /lib/security/pam_ldap.so > > auth required /lib/security/pam_unix_auth.so use_first_pass # set= _secrpc > > account required /lib/security/pam_unix.so > > account required /lib/security/pam_nologin.so > > session required /lib/security/pam_unix.so > > session required /lib/security/pam_limits.so > >=20 > >=20 > > Please lete me know.. > >=20 > > Thanks > >=20 > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...]On Behalf Of Jamie > > Cameron > > Sent: Friday, February 17, 2006 1:04 AM > > To: web...@li... > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > >=20 > >=20 > > Hi, --- message truncated --- ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D1= 21642 - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list Notice: All email and instant messages (including attachments) sent to or from Franklin Templeton Investments (FTI) personnel may be retained, monitored and/or reviewed by FTI and its agents, or authorized law enforcement personnel, without further notice or consent. |
|
From: Khan, M. [SMO] <MK...@fr...> - 2006-02-17 00:43:31
|
Jamie, now i am getting this error: Feb 16 16:36:29 dublx09 l/usermin/changepass/changepass.cgi: pam_ldap: erro= r trying to bind as user "uid=3Dmkhan,ou=3DPeople, dc=3Dnoam,dc=3Dcorp,dc= =3Dfrk,dc=3Dcom" (Invalid credentials) -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Friday, February 17, 2006 2:10 AM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Hi, That looks OK.. Can LDAP users use the command-line passwd command to change their password= s? - Jamie -----Original Message----- From: "Khan, Mohammed [SMO]" <MK...@fr...> Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan Date: Fri 17 Feb 2006 10:07 am Size: 2K To: <web...@li...> Hi Jamie, Here is my passwd file: Pls tell me what I am doing worng. #%PAM-1.0 password required pam_cracklib.so password sufficient pam_ldap.so password sufficient pam_unix.so password required pam_deny.so Thanks Mohammed -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Thursday, February 16, 2006 2:46 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Just make sure that /etc/pam.d/passwd is setup to talk to LDAP, and that Us= ermin's Change Password module is setup to use PAM. - Jamie On 17/Feb/2006 09:42 Khan, Mohammed [SMO] wrote .. > Hello Jamie,=20 > Do you know how can I use usermin to change my ldap password. Please need > your help. >=20 > Thanks > Mohammed >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Thursday, February 16, 2006 2:28 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > Did you set up /etc/pam.d/usermin as well? My last set of instructions > only > mentioned /etc/pam.d/webmin , sorry .. >=20 > - Jamie >=20 > On 17/Feb/2006 09:25 Khan, Mohammed [SMO] wrote .. > > Hi Jamie,=20 > > Sorry to bug u sir. I am still getting the same error when login using > > ldap user into usermin. Here is error: > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user unkn= own > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication failur= e; > > logname=3D uid=3D0 euid=3D0 tty=3D ruser=3D rhost=3D > >=20 > > And here is mt .ssh file > > #%PAM-1.0 > > auth required /lib/security/pam_securetty.so > > auth required /lib/security/pam_nologin.so > > auth required /lib/security/pam_env.so > > auth sufficient /lib/security/pam_ldap.so > > auth required /lib/security/pam_unix_auth.so use_first_pass # set= _secrpc > > account required /lib/security/pam_unix.so > > account required /lib/security/pam_nologin.so > > session required /lib/security/pam_unix.so > > session required /lib/security/pam_limits.so > >=20 > >=20 > > Please lete me know.. > >=20 > > Thanks > >=20 > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...]On Behalf Of Jamie > > Cameron > > Sent: Friday, February 17, 2006 1:04 AM > > To: web...@li... > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > >=20 > >=20 > > Hi, --- message truncated --- ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D1= 21642 - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list Notice: All email and instant messages (including attachments) sent to or from Franklin Templeton Investments (FTI) personnel may be retained, monitored and/or reviewed by FTI and its agents, or authorized law enforcement personnel, without further notice or consent. |
|
From: Jamie C. <jca...@we...> - 2006-02-17 01:25:42
|
Make sure that in your PAM LDAP config file (/etc/pam_ldap/auth_ldap.conf on my system) that the binddn and rootbinddn parameters are set to your LDAP administration user, and that the passwords in the bindpw parameter and /etc/ldap.secret file are set to match. Otherwise PAM will connect to LDAP as the user who is changing his password, which will generally not be allowed. - Jamie On 17/Feb/2006 11:43 Khan, Mohammed [SMO] wrote .. > Jamie, now i am getting this error: > Feb 16 16:36:29 dublx09 l/usermin/changepass/changepass.cgi: pam_ldap: > error trying to bind as user "uid=mkhan,ou=People, dc=noam,dc=corp,dc=frk,dc=com" > (Invalid credentials) > > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Friday, February 17, 2006 2:10 AM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > Hi, > That looks OK.. > Can LDAP users use the command-line passwd command to change their passwords? > > - Jamie > > -----Original Message----- > > From: "Khan, Mohammed [SMO]" <MK...@fr...> > Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan > Date: Fri 17 Feb 2006 10:07 am > Size: 2K > To: <web...@li...> > > Hi Jamie, > Here is my passwd file: Pls tell me what I am doing worng. > #%PAM-1.0 > password required pam_cracklib.so > password sufficient pam_ldap.so > password sufficient pam_unix.so > password required pam_deny.so > > > > Thanks > Mohammed > > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Thursday, February 16, 2006 2:46 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > Just make sure that /etc/pam.d/passwd is setup to talk to LDAP, and that > Usermin's > Change Password module is setup to use PAM. > > - Jamie > > On 17/Feb/2006 09:42 Khan, Mohammed [SMO] wrote .. > > Hello Jamie, > > Do you know how can I use usermin to change my ldap password. Please > need > > your help. > > > > Thanks > > Mohammed > > > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...]On Behalf Of Jamie > > Cameron > > Sent: Thursday, February 16, 2006 2:28 PM > > To: web...@li... > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > > > > Did you set up /etc/pam.d/usermin as well? My last set of instructions > > only > > mentioned /etc/pam.d/webmin , sorry .. > > > > - Jamie > > > > On 17/Feb/2006 09:25 Khan, Mohammed [SMO] wrote .. > > > Hi Jamie, > > > Sorry to bug u sir. I am still getting the same error when login using > > > ldap user into usermin. Here is error: > > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user > unknown > > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication failure; > > > logname= uid=0 euid=0 tty= ruser= rhost= > > > > > > And here is mt .ssh file > > > #%PAM-1.0 > > > auth required /lib/security/pam_securetty.so > > > auth required /lib/security/pam_nologin.so > > > auth required /lib/security/pam_env.so > > > auth sufficient /lib/security/pam_ldap.so > > > auth required /lib/security/pam_unix_auth.so use_first_pass # > set_secrpc > > > account required /lib/security/pam_unix.so > > > account required /lib/security/pam_nologin.so > > > session required /lib/security/pam_unix.so > > > session required /lib/security/pam_limits.so > > > > > > > > > Please lete me know.. > > > > > > Thanks > > > > > > -----Original Message----- > > > From: web...@li... > > > [mailto:web...@li...]On Behalf Of Jamie > > > Cameron > > > Sent: Friday, February 17, 2006 1:04 AM > > > To: web...@li... > > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > > > > > > > Hi, > > --- message truncated --- > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 > - > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list > > Notice: All email and instant messages (including attachments) sent to > or from Franklin Templeton Investments (FTI) personnel may be retained, > monitored and/or reviewed by FTI and its agents, or authorized > law enforcement personnel, without further notice or consent. > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd- > Forwarded by the Webmin mailing list at web...@li... > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list |
|
From: Khan, M. [SMO] <MK...@fr...> - 2006-02-17 05:20:44
|
I don't have that file so shall I create these files, just fyi my server li= nux AS2.1. If I do what shall I put in the file. -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Thursday, February 16, 2006 5:26 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Make sure that in your PAM LDAP config file (/etc/pam_ldap/auth_ldap.conf on my system) that the binddn and rootbinddn parameters are set to your LDAP administration user, and that the passwords in the bindpw parameter and /etc/ldap.secret file are set to match. Otherwise PAM will connect to LDAP as the user who is changing his password, which will generally not be allow= ed. - Jamie On 17/Feb/2006 11:43 Khan, Mohammed [SMO] wrote .. > Jamie, now i am getting this error: > Feb 16 16:36:29 dublx09 l/usermin/changepass/changepass.cgi: pam_ldap: > error trying to bind as user "uid=3Dmkhan,ou=3DPeople, dc=3Dnoam,dc=3Dcor= p,dc=3Dfrk,dc=3Dcom" > (Invalid credentials) >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Friday, February 17, 2006 2:10 AM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > Hi, > That looks OK.. > Can LDAP users use the command-line passwd command to change their passwo= rds? >=20 > - Jamie >=20 > -----Original Message----- >=20 > From: "Khan, Mohammed [SMO]" <MK...@fr...> > Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan > Date: Fri 17 Feb 2006 10:07 am > Size: 2K > To: <web...@li...> >=20 > Hi Jamie, > Here is my passwd file: Pls tell me what I am doing worng. > #%PAM-1.0 > password required pam_cracklib.so > password sufficient pam_ldap.so > password sufficient pam_unix.so > password required pam_deny.so >=20 >=20 >=20 > Thanks > Mohammed >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Thursday, February 16, 2006 2:46 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > Just make sure that /etc/pam.d/passwd is setup to talk to LDAP, and that > Usermin's > Change Password module is setup to use PAM. >=20 > - Jamie >=20 > On 17/Feb/2006 09:42 Khan, Mohammed [SMO] wrote .. > > Hello Jamie,=20 > > Do you know how can I use usermin to change my ldap password. Please > need > > your help. > >=20 > > Thanks > > Mohammed > >=20 > > -----Original Message----- > > From: web...@li... > > [mailto:web...@li...]On Behalf Of Jamie > > Cameron > > Sent: Thursday, February 16, 2006 2:28 PM > > To: web...@li... > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > >=20 > >=20 > > Did you set up /etc/pam.d/usermin as well? My last set of instructions > > only > > mentioned /etc/pam.d/webmin , sorry .. > >=20 > > - Jamie > >=20 > > On 17/Feb/2006 09:25 Khan, Mohammed [SMO] wrote .. > > > Hi Jamie,=20 > > > Sorry to bug u sir. I am still getting the same error when login usi= ng > > > ldap user into usermin. Here is error: > > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: check pass; user > unknown > > > Feb 16 14:23:08 dublx09 usermin(pam_unix)[32085]: authentication fail= ure; > > > logname=3D uid=3D0 euid=3D0 tty=3D ruser=3D rhost=3D > > >=20 > > > And here is mt .ssh file > > > #%PAM-1.0 > > > auth required /lib/security/pam_securetty.so > > > auth required /lib/security/pam_nologin.so > > > auth required /lib/security/pam_env.so > > > auth sufficient /lib/security/pam_ldap.so > > > auth required /lib/security/pam_unix_auth.so use_first_pass # > set_secrpc > > > account required /lib/security/pam_unix.so > > > account required /lib/security/pam_nologin.so > > > session required /lib/security/pam_unix.so > > > session required /lib/security/pam_limits.so > > >=20 > > >=20 > > > Please lete me know.. > > >=20 > > > Thanks > > >=20 > > > -----Original Message----- > > > From: web...@li... > > > [mailto:web...@li...]On Behalf Of Jamie > > > Cameron > > > Sent: Friday, February 17, 2006 1:04 AM > > > To: web...@li... > > > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > >=20 > > >=20 > > > Hi, >=20 > --- message truncated --- >=20 >=20 >=20 >=20 > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat= =3D121642 > - > Forwarded by the Webmin mailing list at web...@li....n= et > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list >=20 > Notice: All email and instant messages (including attachments) sent to > or from Franklin Templeton Investments (FTI) personnel may be retained, > monitored and/or reviewed by FTI and its agents, or authorized > law enforcement personnel, without further notice or consent. >=20 >=20 > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd- > Forwarded by the Webmin mailing list at web...@li....n= et > To remove yourself from this list, go to > http://lists.sourceforge.net/lists/listinfo/webadmin-list ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D1= 21642 - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list Notice: All email and instant messages (including attachments) sent to or from Franklin Templeton Investments (FTI) personnel may be retained, monitored and/or reviewed by FTI and its agents, or authorized law enforcement personnel, without further notice or consent. |
|
From: Jamie C. <jca...@we...> - 2006-02-17 06:03:48
|
That file should already exist somewhere under /etc on your system. It may be called something different too, like pam_ldap.conf - Jamie -----Original Message----- From: "Khan, Mohammed [SMO]" <MK...@fr...> Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan Date: Fri 17 Feb 2006 4:21 pm Size: 2K To: <web...@li...> I don't have that file so shall I create these files, just fyi my server linux AS2.1. If I do what shall I put in the file. -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Thursday, February 16, 2006 5:26 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Make sure that in your PAM LDAP config file (/etc/pam_ldap/auth_ldap.conf on my system) that the binddn and rootbinddn parameters are set to your LDAP administration user, and that the passwords in the bindpw parameter and /etc/ldap.secret file are set to match. Otherwise PAM will connect to LDAP as the user who is changing his password, which will generally not be allowed. - Jamie On 17/Feb/2006 11:43 Khan, Mohammed [SMO] wrote .. > Jamie, now i am getting this error: > Feb 16 16:36:29 dublx09 l/usermin/changepass/changepass.cgi: pam_ldap: > error trying to bind as user "uid=mkhan,ou=People, dc=noam,dc=corp,dc=frk,dc=com" > (Invalid credentials) > > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Friday, February 17, 2006 2:10 AM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > Hi, > That looks OK.. > Can LDAP users use the command-line passwd command to change their passwords? > > - Jamie > > -----Original Message----- > > From: "Khan, Mohammed [SMO]" <MK...@fr...> > Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan > Date: Fri 17 Feb 2006 10:07 am > Size: 2K > To: <web...@li...> > > Hi Jamie, > Here is my passwd file: Pls tell me what I am doing worng. > #%PAM-1.0 > password required pam_cracklib.so > password sufficient pam_ldap.so > password sufficient pam_unix.so > password required pam_deny.so > > > > Thanks > Mohammed > > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Thursday, February 16, 2006 2:46 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan > > > Just make sure that /etc/pam.d/passwd is setup to talk to LDAP, and that > Usermin's > Change Password module is setup to use PAM. > > - Jamie > > On 17/Feb/2006 09:42 Khan, Mohammed [SMO] wrote .. > > Hello Jamie, > > Do you know how can I use usermin to change my ldap password. Please > need > > your help. > > > > Thanks > > Mohammed > > --- message truncated --- |
|
From: Khan, M. [SMO] <MK...@fr...> - 2006-02-17 18:54:48
|
Morning Jamie, I am attaching my ldap.conf file please check and let me know what I am do= ing wrong. If I an able the bindpw I am not able to login to usermin. Pl= ease check if the way I have set it up is correct. Do I create a file /etc= /ldap.secret and copy the line from ldap.conf file. Please let me know # @(#)$Id: ldap.conf,v 1.27 2003/01/17 21:37:12 lukeh Exp $ # # This is the configuration file for the LDAP nameservice # switch library and the LDAP PAM module. # # PADL Software # http://www.padl.com # # Your LDAP server. Must be resolvable without using LDAP. # Multiple hosts may be specified, each separated by a # space. How long nss_ldap takes to failover depends on # whether your LDAP client library supports configurable # network or connect timeouts (see bind_timelimit). #host 127.0.0.1 host dublx06.noam.corp.frk.com # The distinguished name of the search base. #base dc=3Dexample,dc=3Dcom #base dc=3Dpeople,dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom base dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom # Another way to specify your LDAP server is to provide an # uri with the server name. This allows to use # Unix Domain Sockets to connect to a local LDAP Server. #uri ldap://127.0.0.1/ #uri ldaps://127.0.0.1/ #uri ldapi://%2fvar%2frun%2fldapi_sock/ # Note: %2f encodes the '/' used as directory separator # The LDAP version to use (defaults to 3 # if supported by client library) ldap_version 3 # The distinguished name to bind to the server with. # Optional: default is to bind anonymously. #binddn cn=3Dproxyuser,dc=3Dexample,dc=3Dcom #binddn cn=3DDirectory Manager # The credentials to bind with. # Optional: default is no credential. bindpw secret # The distinguished name to bind to the server with # if the effective user ID is root. Password is # stored in /etc/ldap.secret (mode 600) #rootbinddn cn=3Dmanager,dc=3Dexample,dc=3Dcom rootbinddn cn=3DDirectory Manager # The port. # Optional: default is 389. #port 389 # The search scope. #scope sub #scope one #scope base # Search timelimit #timelimit 30 # Bind timelimit #bind_timelimit 30 # Idle timelimit; client will close connections # (nss_ldap only) if the server has not been contacted # for the number of seconds specified below. #idle_timelimit 3600 # Filter to AND with uid=3D%s #pam_filter objectclass=3Daccount pam_filter objectclass=3DposixAccount # The user ID attribute (defaults to uid) pam_login_attribute uid # Search the root DSE for the password policy (works # with Netscape Directory Server) #pam_lookup_policy yes # Check the 'host' attribute for access control # Default is no; if set to yes, and user has no # value for the host attribute, and pam_ldap is # configured for account management (authorization) # then the user will not be allowed to login. #pam_check_host_attr yes # Group to enforce membership of #pam_groupdn cn=3DPAM,ou=3DGroups,dc=3Dexample,dc=3Dcom pam_groupdn cn=3DTestGroup,ou=3DGroups,dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom #pam_groupdn cn=3Ddublx09,ou=3DGroups,dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom # Group member attribute #pam_member_attribute uniquemember pam_member_attribute memberUid # Specify a minium or maximum UID number allowed #pam_min_uid 0 #pam_max_uid 0 # Template login attribute, default template user # (can be overriden by value of former attribute # in user's entry) #pam_login_attribute userPrincipalName #pam_template_login_attribute uid #pam_template_login nobody # HEADS UP: the pam_crypt, pam_nds_passwd, # and pam_ad_passwd options are no # longer supported. # Do not hash the password at all; presume # the directory server will do it, if # necessary. This is the default. #pam_password clear # Hash password locally; required for University of # Michigan LDAP server, and works with Netscape # Directory Server if you're using the UNIX-Crypt # hash mechanism and not using the NT Synchronization # service. #pam_password crypt # Remove old password first, then update in # cleartext. Necessary for use with Novell # Directory Services (NDS) #pam_password nds # Update Active Directory password, by # creating Unicode password and updating # unicodePwd attribute. #pam_password ad # Use the OpenLDAP password change # extended operation to update the password. #pam_password exop #pam_password crypt # Redirect users to a URL or somesuch on password # changes. #pam_password_prohibit_message Please visit http://internal to change your = password. # RFC2307bis naming contexts # Syntax: # nss_base_XXX base?scope?filter # where scope is {base,one,sub} # and filter is a filter to be &'d with the # default filter. # You can omit the suffix eg: # nss_base_passwd ou=3DPeople, # to append the default base DN but this # may incur a small performance impact. #nss_base_passwd ou=3DPeople,dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom #nss_base_shadow ou=3DPeople,dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom #nss_base_passwd ou=3DPeople,dc=3Dexample,dc=3Dcom?one #nss_base_shadow ou=3DPeople,dc=3Dexample,dc=3Dcom?one #nss_base_group ou=3DGroup,dc=3Dexample,dc=3Dcom?one #nss_base_group ou=3DGroups,dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom #nss_base_hosts ou=3DHosts,dc=3Dexample,dc=3Dcom?one #nss_base_services ou=3DServices,dc=3Dexample,dc=3Dcom?one #nss_base_networks ou=3DNetworks,dc=3Dexample,dc=3Dcom?one #nss_base_protocols ou=3DProtocols,dc=3Dexample,dc=3Dcom?one #nss_base_rpc ou=3DRpc,dc=3Dexample,dc=3Dcom?one #nss_base_ethers ou=3DEthers,dc=3Dexample,dc=3Dcom?one #nss_base_netmasks ou=3DNetworks,dc=3Dexample,dc=3Dcom?ne #nss_base_bootparams ou=3DEthers,dc=3Dexample,dc=3Dcom?one #nss_base_aliases ou=3DAliases,dc=3Dexample,dc=3Dcom?one #nss_base_netgroup ou=3DNetgroup,dc=3Dexample,dc=3Dcom?one # attribute/objectclass mapping # Syntax: #nss_map_attribute rfc2307attribute mapped_attribute #nss_map_objectclass rfc2307objectclass mapped_objectclass # configure --enable-nds is no longer supported. # For NDS now do: #nss_map_attribute uniqueMember member # configure --enable-mssfu-schema is no longer supported. # For MSSFU now do: #nss_map_objectclass posixAccount User #nss_map_attribute uid msSFUName #nss_map_attribute uniqueMember posixMember #nss_map_attribute userPassword msSFUPassword #nss_map_attribute homeDirectory msSFUHomeDirectory #nss_map_objectclass posixGroup Group #pam_login_attribute msSFUName #pam_filter objectclass=3DUser #pam_password ad # configure --enable-authpassword is no longer supported # For authPassword support, now do: #nss_map_attribute userPassword authPassword #pam_password nds # For IBM SecureWay support, do: #nss_map_objectclass posixAccount aixAccount #nss_map_attribute uid userName #nss_map_attribute gidNumber gid #nss_map_attribute uidNumber uid #nss_map_attribute userPassword passwordChar #nss_map_objectclass posixGroup aixAccessGroup #nss_map_attribute cn dublx09 #nss_map_attribute memberUid member #pam_login_attribute userName #pam_filter objectclass=3DaixAccount #pam_password clear # Netscape SDK LDAPS #ssl on # Netscape SDK SSL options #sslpath /etc/ssl/certs/cert7.db # OpenLDAP SSL mechanism # start_tls mechanism uses the normal LDAP port, LDAPS typically 636 #ssl start_tls #ssl on # OpenLDAP SSL options # Require and verify server certificate (yes/no) # Default is "no" #tls_checkpeer yes # CA certificates for server certificate verification # At least one of these are required if tls_checkpeer is "yes" #tls_cacertfile /etc/ssl/ca.cert #tls_cacertdir /etc/ssl/certs # Seed the PRNG if /dev/urandom is not provided #tls_randfile /var/run/egd-pool # SSL cipher suite # See man ciphers for syntax #tls_ciphers TLSv1 # Client certificate and key # Use these, if your server requires client authentication. #tls_cert #tls_key ssl no -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Friday, February 17, 2006 9:02 AM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan That file should already exist somewhere under /etc on your system. It may = be called something different too, like pam_ldap.conf - Jamie -----Original Message----- From: "Khan, Mohammed [SMO]" <MK...@fr...> Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan Date: Fri 17 Feb 2006 4:21 pm Size: 2K To: <web...@li...> I don't have that file so shall I create these files, just fyi my server li= nux AS2.1. If I do what shall I put in the file. -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Thursday, February 16, 2006 5:26 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Make sure that in your PAM LDAP config file (/etc/pam_ldap/auth_ldap.conf on my system) that the binddn and rootbinddn parameters are set to your LDAP administration user, and that the passwords in the bindpw parameter and /etc/ldap.secret file are set to match. Otherwise PAM will connect to LDAP as the user who is changing his password, which will generally not be allow= ed. - Jamie On 17/Feb/2006 11:43 Khan, Mohammed [SMO] wrote .. > Jamie, now i am getting this error: > Feb 16 16:36:29 dublx09 l/usermin/changepass/changepass.cgi: pam_ldap: > error trying to bind as user "uid=3Dmkhan,ou=3DPeople, dc=3Dnoam,dc=3Dcor= p,dc=3Dfrk,dc=3Dcom" > (Invalid credentials) >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Friday, February 17, 2006 2:10 AM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > Hi, > That looks OK.. > Can LDAP users use the command-line passwd command to change their passwo= rds? >=20 > - Jamie >=20 > -----Original Message----- >=20 > From: "Khan, Mohammed [SMO]" <MK...@fr...> > Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan > Date: Fri 17 Feb 2006 10:07 am > Size: 2K > To: <web...@li...> >=20 > Hi Jamie, > Here is my passwd file: Pls tell me what I am doing worng. > #%PAM-1.0 > password required pam_cracklib.so > password sufficient pam_ldap.so > password sufficient pam_unix.so > password required pam_deny.so >=20 >=20 >=20 > Thanks > Mohammed >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Thursday, February 16, 2006 2:46 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > Just make sure that /etc/pam.d/passwd is setup to talk to LDAP, and that > Usermin's > Change Password module is setup to use PAM. >=20 > - Jamie >=20 > On 17/Feb/2006 09:42 Khan, Mohammed [SMO] wrote .. > > Hello Jamie,=20 > > Do you know how can I use usermin to change my ldap password. Please > need > > your help. > >=20 > > Thanks > > Mohammed > >=20 --- message truncated --- ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D1= 21642 - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list Notice: All email and instant messages (including attachments) sent to or from Franklin Templeton Investments (FTI) personnel may be retained, monitored and/or reviewed by FTI and its agents, or authorized law enforcement personnel, without further notice or consent. |
|
From: Khan, M. [SMO] <MK...@fr...> - 2006-02-17 23:54:51
|
Jamie, Please can you please check my file. And let me know what I am doin= g wrong. -----Original Message----- From: Khan, Mohammed [SMO]=20 Sent: Friday, February 17, 2006 10:55 AM To: 'web...@li...' Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Morning Jamie, I am attaching my ldap.conf file please check and let me know what I am do= ing wrong. If I an able the bindpw I am not able to login to usermin. Pl= ease check if the way I have set it up is correct. Do I create a file /etc= /ldap.secret and copy the line from ldap.conf file. Please let me know # @(#)$Id: ldap.conf,v 1.27 2003/01/17 21:37:12 lukeh Exp $ # # This is the configuration file for the LDAP nameservice # switch library and the LDAP PAM module. # # PADL Software # http://www.padl.com # # Your LDAP server. Must be resolvable without using LDAP. # Multiple hosts may be specified, each separated by a # space. How long nss_ldap takes to failover depends on # whether your LDAP client library supports configurable # network or connect timeouts (see bind_timelimit). #host 127.0.0.1 host dublx06.noam.corp.frk.com # The distinguished name of the search base. #base dc=3Dexample,dc=3Dcom #base dc=3Dpeople,dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom base dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom # Another way to specify your LDAP server is to provide an # uri with the server name. This allows to use # Unix Domain Sockets to connect to a local LDAP Server. #uri ldap://127.0.0.1/ #uri ldaps://127.0.0.1/ #uri ldapi://%2fvar%2frun%2fldapi_sock/ # Note: %2f encodes the '/' used as directory separator # The LDAP version to use (defaults to 3 # if supported by client library) ldap_version 3 # The distinguished name to bind to the server with. # Optional: default is to bind anonymously. #binddn cn=3Dproxyuser,dc=3Dexample,dc=3Dcom #binddn cn=3DDirectory Manager # The credentials to bind with. # Optional: default is no credential. bindpw secret # The distinguished name to bind to the server with # if the effective user ID is root. Password is # stored in /etc/ldap.secret (mode 600) #rootbinddn cn=3Dmanager,dc=3Dexample,dc=3Dcom rootbinddn cn=3DDirectory Manager # The port. # Optional: default is 389. #port 389 # The search scope. #scope sub #scope one #scope base # Search timelimit #timelimit 30 # Bind timelimit #bind_timelimit 30 # Idle timelimit; client will close connections # (nss_ldap only) if the server has not been contacted # for the number of seconds specified below. #idle_timelimit 3600 # Filter to AND with uid=3D%s #pam_filter objectclass=3Daccount pam_filter objectclass=3DposixAccount # The user ID attribute (defaults to uid) pam_login_attribute uid # Search the root DSE for the password policy (works # with Netscape Directory Server) #pam_lookup_policy yes # Check the 'host' attribute for access control # Default is no; if set to yes, and user has no # value for the host attribute, and pam_ldap is # configured for account management (authorization) # then the user will not be allowed to login. #pam_check_host_attr yes # Group to enforce membership of #pam_groupdn cn=3DPAM,ou=3DGroups,dc=3Dexample,dc=3Dcom pam_groupdn cn=3DTestGroup,ou=3DGroups,dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom #pam_groupdn cn=3Ddublx09,ou=3DGroups,dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom # Group member attribute #pam_member_attribute uniquemember pam_member_attribute memberUid # Specify a minium or maximum UID number allowed #pam_min_uid 0 #pam_max_uid 0 # Template login attribute, default template user # (can be overriden by value of former attribute # in user's entry) #pam_login_attribute userPrincipalName #pam_template_login_attribute uid #pam_template_login nobody # HEADS UP: the pam_crypt, pam_nds_passwd, # and pam_ad_passwd options are no # longer supported. # Do not hash the password at all; presume # the directory server will do it, if # necessary. This is the default. #pam_password clear # Hash password locally; required for University of # Michigan LDAP server, and works with Netscape # Directory Server if you're using the UNIX-Crypt # hash mechanism and not using the NT Synchronization # service. #pam_password crypt # Remove old password first, then update in # cleartext. Necessary for use with Novell # Directory Services (NDS) #pam_password nds # Update Active Directory password, by # creating Unicode password and updating # unicodePwd attribute. #pam_password ad # Use the OpenLDAP password change # extended operation to update the password. #pam_password exop #pam_password crypt # Redirect users to a URL or somesuch on password # changes. #pam_password_prohibit_message Please visit http://internal to change your = password. # RFC2307bis naming contexts # Syntax: # nss_base_XXX base?scope?filter # where scope is {base,one,sub} # and filter is a filter to be &'d with the # default filter. # You can omit the suffix eg: # nss_base_passwd ou=3DPeople, # to append the default base DN but this # may incur a small performance impact. #nss_base_passwd ou=3DPeople,dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom #nss_base_shadow ou=3DPeople,dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom #nss_base_passwd ou=3DPeople,dc=3Dexample,dc=3Dcom?one #nss_base_shadow ou=3DPeople,dc=3Dexample,dc=3Dcom?one #nss_base_group ou=3DGroup,dc=3Dexample,dc=3Dcom?one #nss_base_group ou=3DGroups,dc=3Dnoam,dc=3Dcorp,dc=3Dfrk,dc=3Dcom #nss_base_hosts ou=3DHosts,dc=3Dexample,dc=3Dcom?one #nss_base_services ou=3DServices,dc=3Dexample,dc=3Dcom?one #nss_base_networks ou=3DNetworks,dc=3Dexample,dc=3Dcom?one #nss_base_protocols ou=3DProtocols,dc=3Dexample,dc=3Dcom?one #nss_base_rpc ou=3DRpc,dc=3Dexample,dc=3Dcom?one #nss_base_ethers ou=3DEthers,dc=3Dexample,dc=3Dcom?one #nss_base_netmasks ou=3DNetworks,dc=3Dexample,dc=3Dcom?ne #nss_base_bootparams ou=3DEthers,dc=3Dexample,dc=3Dcom?one #nss_base_aliases ou=3DAliases,dc=3Dexample,dc=3Dcom?one #nss_base_netgroup ou=3DNetgroup,dc=3Dexample,dc=3Dcom?one # attribute/objectclass mapping # Syntax: #nss_map_attribute rfc2307attribute mapped_attribute #nss_map_objectclass rfc2307objectclass mapped_objectclass # configure --enable-nds is no longer supported. # For NDS now do: #nss_map_attribute uniqueMember member # configure --enable-mssfu-schema is no longer supported. # For MSSFU now do: #nss_map_objectclass posixAccount User #nss_map_attribute uid msSFUName #nss_map_attribute uniqueMember posixMember #nss_map_attribute userPassword msSFUPassword #nss_map_attribute homeDirectory msSFUHomeDirectory #nss_map_objectclass posixGroup Group #pam_login_attribute msSFUName #pam_filter objectclass=3DUser #pam_password ad # configure --enable-authpassword is no longer supported # For authPassword support, now do: #nss_map_attribute userPassword authPassword #pam_password nds # For IBM SecureWay support, do: #nss_map_objectclass posixAccount aixAccount #nss_map_attribute uid userName #nss_map_attribute gidNumber gid #nss_map_attribute uidNumber uid #nss_map_attribute userPassword passwordChar #nss_map_objectclass posixGroup aixAccessGroup #nss_map_attribute cn dublx09 #nss_map_attribute memberUid member #pam_login_attribute userName #pam_filter objectclass=3DaixAccount #pam_password clear # Netscape SDK LDAPS #ssl on # Netscape SDK SSL options #sslpath /etc/ssl/certs/cert7.db # OpenLDAP SSL mechanism # start_tls mechanism uses the normal LDAP port, LDAPS typically 636 #ssl start_tls #ssl on # OpenLDAP SSL options # Require and verify server certificate (yes/no) # Default is "no" #tls_checkpeer yes # CA certificates for server certificate verification # At least one of these are required if tls_checkpeer is "yes" #tls_cacertfile /etc/ssl/ca.cert #tls_cacertdir /etc/ssl/certs # Seed the PRNG if /dev/urandom is not provided #tls_randfile /var/run/egd-pool # SSL cipher suite # See man ciphers for syntax #tls_ciphers TLSv1 # Client certificate and key # Use these, if your server requires client authentication. #tls_cert #tls_key ssl no -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Friday, February 17, 2006 9:02 AM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan That file should already exist somewhere under /etc on your system. It may = be called something different too, like pam_ldap.conf - Jamie -----Original Message----- From: "Khan, Mohammed [SMO]" <MK...@fr...> Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan Date: Fri 17 Feb 2006 4:21 pm Size: 2K To: <web...@li...> I don't have that file so shall I create these files, just fyi my server li= nux AS2.1. If I do what shall I put in the file. -----Original Message----- From: web...@li... [mailto:web...@li...]On Behalf Of Jamie Cameron Sent: Thursday, February 16, 2006 5:26 PM To: web...@li... Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan Make sure that in your PAM LDAP config file (/etc/pam_ldap/auth_ldap.conf on my system) that the binddn and rootbinddn parameters are set to your LDAP administration user, and that the passwords in the bindpw parameter and /etc/ldap.secret file are set to match. Otherwise PAM will connect to LDAP as the user who is changing his password, which will generally not be allow= ed. - Jamie On 17/Feb/2006 11:43 Khan, Mohammed [SMO] wrote .. > Jamie, now i am getting this error: > Feb 16 16:36:29 dublx09 l/usermin/changepass/changepass.cgi: pam_ldap: > error trying to bind as user "uid=3Dmkhan,ou=3DPeople, dc=3Dnoam,dc=3Dcor= p,dc=3Dfrk,dc=3Dcom" > (Invalid credentials) >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Friday, February 17, 2006 2:10 AM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > Hi, > That looks OK.. > Can LDAP users use the command-line passwd command to change their passwo= rds? >=20 > - Jamie >=20 > -----Original Message----- >=20 > From: "Khan, Mohammed [SMO]" <MK...@fr...> > Subj: RE: [webmin-l] Webmin Servers, Broadcast/scan > Date: Fri 17 Feb 2006 10:07 am > Size: 2K > To: <web...@li...> >=20 > Hi Jamie, > Here is my passwd file: Pls tell me what I am doing worng. > #%PAM-1.0 > password required pam_cracklib.so > password sufficient pam_ldap.so > password sufficient pam_unix.so > password required pam_deny.so >=20 >=20 >=20 > Thanks > Mohammed >=20 > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Jamie > Cameron > Sent: Thursday, February 16, 2006 2:46 PM > To: web...@li... > Subject: RE: [webmin-l] Webmin Servers, Broadcast/scan >=20 >=20 > Just make sure that /etc/pam.d/passwd is setup to talk to LDAP, and that > Usermin's > Change Password module is setup to use PAM. >=20 > - Jamie >=20 > On 17/Feb/2006 09:42 Khan, Mohammed [SMO] wrote .. > > Hello Jamie,=20 > > Do you know how can I use usermin to change my ldap password. Please > need > > your help. > >=20 > > Thanks > > Mohammed > >=20 --- message truncated --- ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D103432&bid=3D230486&dat=3D1= 21642 - Forwarded by the Webmin mailing list at web...@li... To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list Notice: All email and instant messages (including attachments) sent to or from Franklin Templeton Investments (FTI) personnel may be retained, monitored and/or reviewed by FTI and its agents, or authorized law enforcement personnel, without further notice or consent. |
