- WLUG - wlug.mailman3.com

OpenSSH Remote Root
by Matt Higgins Sept. 17, 2003

Sept. 17, 2003

There is a remote root exploit for OpenSSH <3.7 (note 3.7 was released today) Check your vendor or get the latest sources or apply the patch from the link below. http://www.openssh.com/txt/buffer.adv Matt

5 6

samba issue
by Chuck Noyes Sept. 16, 2003

Sept. 16, 2003

Hi all... I created a directory, on my RH 9.0 (2.4.20) Linux server, that I would like to share with other computers on our LAN. I have smb and nmb running and I can see the share from a MS windows 2000 box. When I try to map the drive and click on the remote folder name (\\linux-hostname\share-name), it asks me to log on to the Linux server (I'm using security = share in /etc/samba/smb.conf). When I enter my username/password pair, it tells me that they're invalid. I have identical usernames & passwords on both boxes and I'm not encrypting the usernames and passwords...yet. I'm using version samba-2.2.7a-8.9.0 for samba-common, samba-client and samba itself. What am I missing? Thanks, Chuck -- Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/

6 5

REMINDER: WLUG meeting Wed. 7 PM
by Andy Stewart Sept. 10, 2003

Sept. 10, 2003

HI Everybody, This is a reminder about the upcoming WLUG meeting on Wednesday, Sept. 10, in Kinnicutt Hall on the WPI campus. This will be a "Linux Introduction" meeting intended for people new to Linux. I'll do my slide presentation, and afterwards I'll demo the SuSE Live eval CD. If there's time and interest, I'll demo the Knoppix CD. Lots of Q/A will make this meeting much more interesting, so please bring along your questions. The URLs for these CDs, in case you wish to download and burn a copy for yourself, are as follows: SuSE Live Eval CD: ftp://ftp.suse.com/pub/suse/i386/live-eval-8.2/SuSE-8.2-LiveEval-i386-Int-R… - or - ftp://ftp.mirror.ac.uk/sites/ftp.suse.com/pub/suse/i386/live-eval-8.2/SuSE-… Knoppix Demo CD: http://www.knoppix.org/ (follow the download links) If somebody could burn a couple of these, that would be great, but if not, I'll burn a few at the meeting. If you want a copy, please bring a blank 700 MB CD (Knoppix won't fit on anything smaller, but the SuSE version might fit on a 650 MB CD). See ya there! Andy -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

1 0

Linux job opportunity
by Andy Stewart Sept. 6, 2003

Sept. 6, 2003

HI Everybody, Here is a job opportunity that was recently sent to me. If interested, please don't reply to the list or to me, but to the recruiter named below. Helene Fitch Friedlander HR Representative * (978) 461-7148 Fax (978) 461-3720 * helene.fitch(a)stratus.com S T R A T U S T E C H N O L O G I E S Code 03-076 & 03-075 Job Title Software Engineer III (Linux) Occupation Software Engineering Location Maynard, MA Description Will participate as a member of a small team of engineers working on the development and support of a Fault Tolerant version of Linux that runs on Stratus' Fault Tolerant IA32 HW. The work will be focused on 1) participating in the ongoing new development efforts to keep current with the latest versions Linux, 2) port our FT Linux to the latest Stratus HW platforms, 3)the productionization of our FT Linux SW and 4) providing support to Stratus' existing Technology Partners (i.e. - bugs fixes). The areas that we have made and continue to make modifications in Linux include providing for SCSI and PCI hot-plug support (including surprise removal of devices), overall hardening of a select set of Linux device drivers to adapt them for Stratus' Fault Tolerant environment and making Linux work with Stratus' FT Hardware. Experience 6+ years of Software development experience with at least 2+ years in Linux/Unix software development, including systems level Linux development. Ability to switch gears quickly and work on multiple problems simultaneously, Strong communication skills essential. Ability to work well within a team environment required. Must have Linux kernel development and/or device driver development. Experience in Linux SCSI a major plus. BSCS/BSEE or equivalent experience -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

3 3

RE: [Wlug] Re: Next Meeting?
by Keller, Tim Sept. 4, 2003

Sept. 4, 2003

We could also have a distribution bake off if we wanted as well. We did this before and it worked really well. If we have a BSD head in the crowd, they could demo [Open|Free|Net]BSD as well. I think as a follow-up to this, we could have a separate meeting that would be entirely focused on securing BAD/linux. I think it would be disingenuous to not only the students of WPI, but also tech guys in WPI to let a bunch of people loose on the network with easily rootable machines. That's my 0.018441 Euros. Tim. -----Original Message----- From: Matt Higgins [mailto:matt@higgsolutions.com] Sent: Wednesday, September 03, 2003 9:49 AM To: wlug(a)mail.wlug.org Subject: RE: [Wlug] Re: Next Meeting? My 2 cents or less if you will. I think Knoppix is the way to go! The point is to showoff Linux-wares not to teach about a particular distributions configuration mechanism or file system layout. Knoppix is clean and impressive in many ways and does a great job at showing off what Linux can do. Furthermore we are to the point were a Linux install is no more difficult then a Windows install, particularly the commercial distributions; Red Hat, SuSe, Mandrake, Yellow Dog, etc... So thats my 2 cents or less, long live Slackware! Matt Quoting Steve Freitag <Steve.Freitag(a)alum.wpi.edu>: > I've recently spent a small amount of time playing around with both the SuSe > 8.2 Live Eval, and Knoppix 7-26-03, so I thought I'd pass along my > observations. > > > > Both default you into KDE and have a similar selection of apps (Like > OpenOffice, Mozilla, the GIMP etc). Knoppix happens to be based of Debian. > > > > There were a couple of things I liked about Knoppix. The first is that you > don't have to go through all the YaST screens when you boot, Knoppix just > boots right up to KDE and logs you on as user knoppix. The other neat thing > about Knoppix is that you can save your configuration and home directory of > the size you specify on a USB flash drive. With SuSE if you want to save > your configuration/home dir it creates a 100MB file on your hard drive (and > another 100MB for swap if you want). With Knoppix you can carry a cheap > ($10 after rebate) 64MB USB flash drive around with you and a Knoppix CD and > boot a PC into your personal environment without touching the hard disk. > > > > -----Original Message----- > From: wlug-admin(a)mail.wlug.org [mailto:wlug-admin@mail.wlug.org] On Behalf > Of Stephen C. Daukas > Sent: Tuesday, September 02, 2003 4:23 PM > To: wlug(a)mail.wlug.org > Subject: Re: [Wlug] Re: Next Meeting? > > > > Is introducing yet-another-flavor-of-linux useful? I understand what you > are trying to achieve, but one of the first questions that came to my mind > was "what is the difference between Knoppix and a regular Linux distro"? > (The first was actually "what the hell is Knopix"!) Will it be confusing to > the people looking at is verusus what they see when they look at SuSe, Red > Hat, etc.? > > Andy Stewart wrote: > > > > On Monday 01 September 2003 4:52 pm, albutler33(a)netscape.net wrote: > > > Andy, > > I think a great topic especially for the new students would be "Fast Track > to Linux" where you introduce the GNOME and KDE desktops and a few of your > favorite tools and utilities. > > Al Butler > > > > HI Al, > > My most current thoughts are centered on Linux, its origins, the GPL, > WLUG/WPILA, and then segue into single CD demo distributions for folks who > want to "kick the tires", as it were, without fully committing their hard > drives to Linux. > > One such single CD demo distribution is Knoppix, which does have KDE (and > GNOME?). Once Knoppix is running, many things could be demonstrated. If I > go with this idea, I'd want to have copies of the Knoppix CD available for > people to take home, and hopefully they would try it at their leisure. > > How does that sound? Do people have additional ideas? Let's hear them! > :-) > > Later, > > Andy > > > > > __________________________________________________________________ > McAfee VirusScan Online from the Netscape Network. > Comprehensive protection for your entire computer. Get your free trial > today! > http://channels.netscape.com/ns/computing/mcafee/index.jsp?promo=393397 > > Get AOL Instant Messenger 5.1 free of charge. Download Now! > http://aim.aol.com/aimnew/Aim/register.adp?promo=380455 > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > > > > > > > > > -- > Stephen C. Daukas - stephen(a)daukas.com - http://daukas.com/ > > _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

2 1

Re: Next Meeting?
by albutler33＠netscape.net Sept. 4, 2003

Sept. 4, 2003

Andy, I think a great topic especially for the new students would be "Fast Track to Linux" where you introduce the GNOME and KDE desktops and a few of your favorite tools and utilities. Al Butler __________________________________________________________________ McAfee VirusScan Online from the Netscape Network. Comprehensive protection for your entire computer. Get your free trial today! http://channels.netscape.com/ns/computing/mcafee/index.jsp?promo=393397 Get AOL Instant Messenger 5.1 free of charge. Download Now! http://aim.aol.com/aimnew/Aim/register.adp?promo=380455

9 14

fun, scary...
by Mike Peckar Sept. 1, 2003

Sept. 1, 2003

http://www.malevole.com/mv/misc/killerquiz/ Mike

1 0

Crypto filesystem
by Chuck Homic Aug. 31, 2003

Aug. 31, 2003

Does anyone have experience with an encrypted filesystem? I have a notebook with a good chunk of confidential data, and although I would be really pissed off if I lost it ($$$), I'd be even more pissed off not knowing that my personal and corporate data may or may not have been found. So if anyone knows the answers, I have some questions: 1. Is loop-aes the way to go? Sounds pretty simple and painless to me. 2. What's your opinion of the optimal security/CPU tradeoff? I have an 800ish MHz Crusoe. So, I'll play around and probably figure out the answers by myself, but if anyone can jumpstart me (such as "Don't use funkyfish128, because that can be easily exploited!") that would be appreciated. If anyone's interested, I'll report the results of my adventure when I know something. Thanks! -Chuck

2 1

Query regarding email applications...
by Stephen C. Daukas Aug. 30, 2003

Aug. 30, 2003

Hi all! I am currently using mozilla 1.3.1 and want to be able to move my email to other applications. I'd like to be able to move it to Netscape, Eudora, and yes, Outlook. The reason for this is to show my new department head why folks using different operating systems, say Linux, should be allowed to use different operating systems as well as different email applications. His only concern is "email compatibility". Now, once upon a time, it was really easy to move the files between Netscape and Eudora, for example. They both had simple files that contained the information (e.g., Eudora used to use .toc of the index, and .mbx for the actual email while Netscape use to use - well, I can't remember, but is was a similar flat file arrangement). So, I took a quick look at Eudora 5.1, and it looks like the familiar old setup. Mozilla 1.3.1 looks like it is using a database of some sort (.sdb?) and Netscape 7.1 looks, well, different from what I remember! In the good old days, I could figure this out in a few minutes and would have replicated my email across all of these apps! the last time I did this was about 3 years ago as a demonstration of the very same point. Sigh! So, I decided to see how the import capabilities look and, well, they don't play well, as far as I can tell. Outlook and Eudora have no idea about Mozilla, and it doesn't look like Netscape does either. The point to all this is the following question: I have a boss who is predisposed to setting up Linux for those in his department who are interested (he might be as well). He wants to be able to "import & export" between Outlook and whatever on whatever. Is there a way to show him that he can have his cake and eat it too, either by moving files, or by using more than one email application as an intermediary (e.g., Mozilla -> Outlook Express -> Eudora)? Steve -- Stephen C. Daukas - stephen(a)daukas.com - http://daukas.com/

2 2

ssh woes followup
by mhughes＠wpidalamar.com Aug. 29, 2003

Aug. 29, 2003

Also... From both machines, I can scp to an external machine. These 2 boxes I'm having problems with are on opposite sides of an intracompany vpn. Could I be having problems with the vpn? The VPN is a big-expensive end to end hardware solution that I don't get to play with. If it were that, any ideas on how I could prove that to corporate IT? Please note... it's possible that the vpn has nothing to do with the problem. -Marc

3 6