- WLUG - wlug.mailman3.com

Re: [Wlug] Grub problems after imaging drive

by Andy Stewart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dick Goodman wrote: > I recently configured a RedHat 9 system with OpenVPN . The original > configuration was done on an old junk box. This is a single boot w/grub > system > > As of last week I knew nothing about grub; I now know marginally more. > > As it was working successfully, it was decided to build a new box for it. > The hard drive was imaged with Ghost Corporate 8.x and restored onto the > new drive. There are some known issues with 8.x and grub > > The grub screen comes up on booting the new box, but when selecting the > (one) entry for RH9, after a short pause it comes back to the grub > screen. I read the grub manual, and from the grub screen did c-command, > then > > root (hd0,0) > setup (hd0) > quit > > The messages after setup did not look like error messages. The behavior > is the same, although I see a message about stage 1.5 flicker by. > I figured out how to look at the hard drive with Knoppix 3.8.2 Live CD > and the partitions and contents look "ok", so it appears to just be a > boot issue. > > How do I resolve this? What additional information do you need? Is there > a better way to clone Linux drive -> Linux drive? > > Dick > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > Here's what I use for boot commands in GRUB on my system. Its SuSE, but I don't think it should make a difference. root (hd0,0)/vmlinuz <boot parameters> initrd (hd0,0)/initrd - From a GRUB command line, make sure (by using the TAB key) that (hd0,0) is a legitimate partition, and that it can find /vmlinuz (or whatever kernel image you are using). If you need initrd, you can use the same trick with the TAB key to get a poor man's directory listing. After you enter those lines, or edit the existing lines to make them look as above, boot it and you should at least get the kernel to start. You may need to specify "root=/dev/xxx" as one of the boot parameters on the "root" command. If you get a panic when it tries to mount root, it is either because you didn't specify "root=/dev/xxx", or because the code for the root device isn't present in the kernel (for example, a SCSI driver or a reiserfs module, as appropriate). I hope root isn't part of LVM...that's a can of worms you should avoid, but I digress. I hope this helps, Andy - -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDlnkCHl0iXDssISsRAuiaAJ0ZhX3Il4sFM2Yt2cCG1IQBZMy11wCfZIcn bPoThROtkjrTtXGgaHq2Vms= =J3lU -----END PGP SIGNATURE-----

Dec. 7, 2005

Grub problems after imaging drive

by Dick Goodman

I recently configured a RedHat 9 system with OpenVPN . The original configuration was done on an old junk box. This is a single boot w/grub system As of last week I knew nothing about grub; I now know marginally more. As it was working successfully, it was decided to build a new box for it. The hard drive was imaged with Ghost Corporate 8.x and restored onto the new drive. There are some known issues with 8.x and grub The grub screen comes up on booting the new box, but when selecting the (one) entry for RH9, after a short pause it comes back to the grub screen. I read the grub manual, and from the grub screen did c-command, then root (hd0,0) setup (hd0) quit The messages after setup did not look like error messages. The behavior is the same, although I see a message about stage 1.5 flicker by. I figured out how to look at the hard drive with Knoppix 3.8.2 Live CD and the partitions and contents look "ok", so it appears to just be a boot issue. How do I resolve this? What additional information do you need? Is there a better way to clone Linux drive -> Linux drive? Dick

Dec. 7, 2005

Re: [Wlug] SSH without passwords

by Mike Leo

Just for the record, i did not have to make any changes from the default sshd_config file to get this to work. --- Chuck Anderson <cra(a)WPI.EDU> wrote: > Make sure public key auth is enabled on the client > and server: > > /etc/ssh/sshd_config: > > RSAAuthentication yes > PubkeyAuthentication yes > AuthorizedKeysFile .ssh/authorized_keys > > /etc/ssh/ssh_config: > > Host * > RSAAuthentication yes > PubkeyAuthentication yes > > (these are defaults, and so they are commented out > in my files) > > SSH version 1 uses RSAAuthentication, SSH version 2 > uses > PubkeyAuthentication. > > Make sure the perms on the directories and files are > tight enough > (sshd checks): > > chmod 700 ~/.ssh > chmod 600 ~/.ssh/* > > > Finally, are both the server/client the same > implementation of SSH? > SSH.COM uses slightly different formats than OpenSSH > for the public > keys. ssh-keygen can convert between the formats. > > On Wed, Nov 30, 2005 at 01:27:54PM -0800, Mike Leo > wrote: > > i do exactly that, yet it still prompts me for a > > password when ssh'ing. > > > > thoughts? > > > > --- Mike Frysinger <vapier(a)gentoo.org> wrote: > > > > > On Wed, Nov 30, 2005 at 12:37:19PM -0800, Mike > Leo > > > wrote: > > > > Basically we are ssh-keygen -t (dsa/rsa) the > keys, > > > > copy them to the "remote" servers ~/.ssh/ > > > > > > what are you copying ? for example, i create my > dsa > > > keys: > > > ~/.ssh/id_dsa ~/.ssh/id_dsa.pub > > > then i export my pub key to the remote server: > > > $ scp ~/.ssh/id_dsa.pub remotebox:~/ > > > $ ssh remotebox # <- enter my pw > > > $ cat ~/id_dsa.pub >> ~/.ssh/authorized_keys > > > $ rm ~/id_dsa.pub > > > $ logout > > > $ ssh remotebox # <- no pw needed > > > > > > > There are conflicting doc's at this > point...some > > > say > > > > you need an ssh-agent, some don't mention it. > > > Some > > > > use passphrases, some don't. But if i have to > > > enter > > > > an ssh passphrase everytime, why not just use > the > > > > account password? > > > > > > passphrases are not required, but many people > like > > > to use them > > > > > > ssh-agent allows you to cache the passphrase for > a > > > certain amount > > > of time, thus finding some ground between the > > > 'always use pw' and the > > > 'never use pw' ground of authentication > > > -mike > > > _______________________________________________ > > > Wlug mailing list > > > Wlug(a)mail.wlug.org > > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > -- > Chuck R. Anderson <cra(a)wpi.edu> / > http://angus.ind.wpi.edu/~cra/ > PGP Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 > A0F9 49BB 5886 > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Dec. 1, 2005

Re: [Wlug] SSH without passwords

by Mike Leo

YAAHAHAHAHAHAA!!! Accurate Oracle documents??!?!? HAHHAHAHAAHA --- Jared Greenwald <greenwaldjared(a)gmail.com> wrote: > Oh yea, I forgot that. That one bit me the first 10 > times I did > this... Strange, though that if this is a RAC > requirement it wouldn't > be outlined in the RAC docs... > > -Jared > > On 11/30/05, Mike Leo <mleo963(a)yahoo.com> wrote: > > I got it!! > > > > weird, but i had to change the permissions on the > auth > > file to 640, and then it worked. > > > > Weird is that with less restrictive permissions > (644) > > it failed, but more secure works. > > > > Anyway, thanks for the feedback! > > > > --- Mike Frysinger <vapier(a)gentoo.org> wrote: > > > > > On Wed, Nov 30, 2005 at 12:37:19PM -0800, Mike > Leo > > > wrote: > > > > Basically we are ssh-keygen -t (dsa/rsa) the > keys, > > > > copy them to the "remote" servers ~/.ssh/ > > > > > > what are you copying ? for example, i create my > dsa > > > keys: > > > ~/.ssh/id_dsa ~/.ssh/id_dsa.pub > > > then i export my pub key to the remote server: > > > $ scp ~/.ssh/id_dsa.pub remotebox:~/ > > > $ ssh remotebox # <- enter my pw > > > $ cat ~/id_dsa.pub >> ~/.ssh/authorized_keys > > > $ rm ~/id_dsa.pub > > > $ logout > > > $ ssh remotebox # <- no pw needed > > > > > > > There are conflicting doc's at this > point...some > > > say > > > > you need an ssh-agent, some don't mention it. > > > Some > > > > use passphrases, some don't. But if i have to > > > enter > > > > an ssh passphrase everytime, why not just use > the > > > > account password? > > > > > > passphrases are not required, but many people > like > > > to use them > > > > > > ssh-agent allows you to cache the passphrase for > a > > > certain amount > > > of time, thus finding some ground between the > > > 'always use pw' and the > > > 'never use pw' ground of authentication > > > -mike > > > _______________________________________________ > > > Wlug mailing list > > > Wlug(a)mail.wlug.org > > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Dec. 1, 2005

Re: [Wlug] SSH without passwords

by Chuck Anderson

I usually create service-specific unpriviliged accounts with their own SSH keys with no passphrases for this purpose. If there are many services/users that need to log in between the boxes, and you don't mind the boxes trusting each other completely, you can use HostBasedAuthentication, which is sort of like rhosts, but with SSH Public Key authentication. Then any user can SSH between boxes that are in /etc/ssh/shosts.equiv with no password, and no user-specific key/passphrase required. On Wed, Nov 30, 2005 at 01:38:42PM -0800, Mike Leo wrote: > that was all good info...thanks. > > We need to ssh via a service so we can't use a > username/password scheme, and, well, it should work!! > > also, oracle requires this ability to setup their > Oracle RAC database, to/from each node in the cluster.

Dec. 1, 2005

Re: [Wlug] SSH without passwords

by Jared Greenwald

Oh yea, I forgot that. That one bit me the first 10 times I did this... Strange, though that if this is a RAC requirement it wouldn't be outlined in the RAC docs... -Jared On 11/30/05, Mike Leo <mleo963(a)yahoo.com> wrote: > I got it!! > > weird, but i had to change the permissions on the auth > file to 640, and then it worked. > > Weird is that with less restrictive permissions (644) > it failed, but more secure works. > > Anyway, thanks for the feedback! > > --- Mike Frysinger <vapier(a)gentoo.org> wrote: > > > On Wed, Nov 30, 2005 at 12:37:19PM -0800, Mike Leo > > wrote: > > > Basically we are ssh-keygen -t (dsa/rsa) the keys, > > > copy them to the "remote" servers ~/.ssh/ > > > > what are you copying ? for example, i create my dsa > > keys: > > ~/.ssh/id_dsa ~/.ssh/id_dsa.pub > > then i export my pub key to the remote server: > > $ scp ~/.ssh/id_dsa.pub remotebox:~/ > > $ ssh remotebox # <- enter my pw > > $ cat ~/id_dsa.pub >> ~/.ssh/authorized_keys > > $ rm ~/id_dsa.pub > > $ logout > > $ ssh remotebox # <- no pw needed > > > > > There are conflicting doc's at this point...some > > say > > > you need an ssh-agent, some don't mention it. > > Some > > > use passphrases, some don't. But if i have to > > enter > > > an ssh passphrase everytime, why not just use the > > > account password? > > > > passphrases are not required, but many people like > > to use them > > > > ssh-agent allows you to cache the passphrase for a > > certain amount > > of time, thus finding some ground between the > > 'always use pw' and the > > 'never use pw' ground of authentication > > -mike > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Nov. 30, 2005

Re: [Wlug] SSH without passwords

by Mike Leo

I got it!! weird, but i had to change the permissions on the auth file to 640, and then it worked. Weird is that with less restrictive permissions (644) it failed, but more secure works. Anyway, thanks for the feedback! --- Mike Frysinger <vapier(a)gentoo.org> wrote: > On Wed, Nov 30, 2005 at 12:37:19PM -0800, Mike Leo > wrote: > > Basically we are ssh-keygen -t (dsa/rsa) the keys, > > copy them to the "remote" servers ~/.ssh/ > > what are you copying ? for example, i create my dsa > keys: > ~/.ssh/id_dsa ~/.ssh/id_dsa.pub > then i export my pub key to the remote server: > $ scp ~/.ssh/id_dsa.pub remotebox:~/ > $ ssh remotebox # <- enter my pw > $ cat ~/id_dsa.pub >> ~/.ssh/authorized_keys > $ rm ~/id_dsa.pub > $ logout > $ ssh remotebox # <- no pw needed > > > There are conflicting doc's at this point...some > say > > you need an ssh-agent, some don't mention it. > Some > > use passphrases, some don't. But if i have to > enter > > an ssh passphrase everytime, why not just use the > > account password? > > passphrases are not required, but many people like > to use them > > ssh-agent allows you to cache the passphrase for a > certain amount > of time, thus finding some ground between the > 'always use pw' and the > 'never use pw' ground of authentication > -mike > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Nov. 30, 2005

Re: [Wlug] SSH without passwords

by Chuck Anderson

Make sure public key auth is enabled on the client and server: /etc/ssh/sshd_config: RSAAuthentication yes PubkeyAuthentication yes AuthorizedKeysFile .ssh/authorized_keys /etc/ssh/ssh_config: Host * RSAAuthentication yes PubkeyAuthentication yes (these are defaults, and so they are commented out in my files) SSH version 1 uses RSAAuthentication, SSH version 2 uses PubkeyAuthentication. Make sure the perms on the directories and files are tight enough (sshd checks): chmod 700 ~/.ssh chmod 600 ~/.ssh/* Finally, are both the server/client the same implementation of SSH? SSH.COM uses slightly different formats than OpenSSH for the public keys. ssh-keygen can convert between the formats. On Wed, Nov 30, 2005 at 01:27:54PM -0800, Mike Leo wrote: > i do exactly that, yet it still prompts me for a > password when ssh'ing. > > thoughts? > > --- Mike Frysinger <vapier(a)gentoo.org> wrote: > > > On Wed, Nov 30, 2005 at 12:37:19PM -0800, Mike Leo > > wrote: > > > Basically we are ssh-keygen -t (dsa/rsa) the keys, > > > copy them to the "remote" servers ~/.ssh/ > > > > what are you copying ? for example, i create my dsa > > keys: > > ~/.ssh/id_dsa ~/.ssh/id_dsa.pub > > then i export my pub key to the remote server: > > $ scp ~/.ssh/id_dsa.pub remotebox:~/ > > $ ssh remotebox # <- enter my pw > > $ cat ~/id_dsa.pub >> ~/.ssh/authorized_keys > > $ rm ~/id_dsa.pub > > $ logout > > $ ssh remotebox # <- no pw needed > > > > > There are conflicting doc's at this point...some > > say > > > you need an ssh-agent, some don't mention it. > > Some > > > use passphrases, some don't. But if i have to > > enter > > > an ssh passphrase everytime, why not just use the > > > account password? > > > > passphrases are not required, but many people like > > to use them > > > > ssh-agent allows you to cache the passphrase for a > > certain amount > > of time, thus finding some ground between the > > 'always use pw' and the > > 'never use pw' ground of authentication > > -mike > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug -- Chuck R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886

Nov. 30, 2005

Re: [Wlug] SSH without passwords

by Mike Leo

that was all good info...thanks. We need to ssh via a service so we can't use a username/password scheme, and, well, it should work!! also, oracle requires this ability to setup their Oracle RAC database, to/from each node in the cluster. --- Chuck Anderson <cra(a)WPI.EDU> wrote: > On Wed, Nov 30, 2005 at 12:37:19PM -0800, Mike Leo > wrote: > > There are conflicting doc's at this point...some > say > > you need an ssh-agent, some don't mention it. > Some > > use passphrases, some don't. But if i have to > enter > > an ssh passphrase everytime, why not just use the > > account password? > > > Passwords get sent tunneled through the encrypted > SSH connection. A > trojaned ssh server could steal your password. > Passphrases and > private keys are never sent anywhere outside of your > box (unless you > want them to). > > If an account password gets compromised, you may > have to change it on > many boxes, and it may be shared with other > unrelated accounts > elsewhere. If a passphrase gets compromised, it > doesn't allow anyone > to do anything without your private key file--you > need both the > private key and the passphrase. > > You can share your passphrase for many different > private keys, but > still have different passwords on unrelated remote > systems. > > You can cache the passphrase in the memory of your > local box > (ssh-agent) so you don't need to enter anything to > ssh to remote > boxes. > > Using a private key with a blank passphrase means > someone could steal > your private key file and use it to log in as you. > This weakens the > requirement for having to steal both the private key > and the > passphrase. Since the private key sits on disk for > a long time, > someone down the road could steal it and you may > never know. This is > even worse if you use a network filesystem for your > home directory. > The passphrase encrypts your private key. > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Nov. 30, 2005

Re: [Wlug] SSH without passwords

by Mike Leo

i do exactly that, yet it still prompts me for a password when ssh'ing. thoughts? --- Mike Frysinger <vapier(a)gentoo.org> wrote: > On Wed, Nov 30, 2005 at 12:37:19PM -0800, Mike Leo > wrote: > > Basically we are ssh-keygen -t (dsa/rsa) the keys, > > copy them to the "remote" servers ~/.ssh/ > > what are you copying ? for example, i create my dsa > keys: > ~/.ssh/id_dsa ~/.ssh/id_dsa.pub > then i export my pub key to the remote server: > $ scp ~/.ssh/id_dsa.pub remotebox:~/ > $ ssh remotebox # <- enter my pw > $ cat ~/id_dsa.pub >> ~/.ssh/authorized_keys > $ rm ~/id_dsa.pub > $ logout > $ ssh remotebox # <- no pw needed > > > There are conflicting doc's at this point...some > say > > you need an ssh-agent, some don't mention it. > Some > > use passphrases, some don't. But if i have to > enter > > an ssh passphrase everytime, why not just use the > > account password? > > passphrases are not required, but many people like > to use them > > ssh-agent allows you to cache the passphrase for a > certain amount > of time, thus finding some ground between the > 'always use pw' and the > 'never use pw' ground of authentication > -mike > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Nov. 30, 2005

Re: [Wlug] SSH without passwords

by Chuck Anderson

On Wed, Nov 30, 2005 at 12:37:19PM -0800, Mike Leo wrote: > There are conflicting doc's at this point...some say > you need an ssh-agent, some don't mention it. Some > use passphrases, some don't. But if i have to enter > an ssh passphrase everytime, why not just use the > account password? Passwords get sent tunneled through the encrypted SSH connection. A trojaned ssh server could steal your password. Passphrases and private keys are never sent anywhere outside of your box (unless you want them to). If an account password gets compromised, you may have to change it on many boxes, and it may be shared with other unrelated accounts elsewhere. If a passphrase gets compromised, it doesn't allow anyone to do anything without your private key file--you need both the private key and the passphrase. You can share your passphrase for many different private keys, but still have different passwords on unrelated remote systems. You can cache the passphrase in the memory of your local box (ssh-agent) so you don't need to enter anything to ssh to remote boxes. Using a private key with a blank passphrase means someone could steal your private key file and use it to log in as you. This weakens the requirement for having to steal both the private key and the passphrase. Since the private key sits on disk for a long time, someone down the road could steal it and you may never know. This is even worse if you use a network filesystem for your home directory. The passphrase encrypts your private key.

Nov. 30, 2005

Re: [Wlug] SSH without passwords

by Jared Greenwald

I've used this setup in the past... http://www.astro.caltech.edu/~mbonati/WIRC/manual/DATARED/setting_up_no-pas… On 11/30/05, Mike Leo <mleo963(a)yahoo.com> wrote: > I remember someone talking about sharing keys between > systems so you can ssh around at will without needing > the password.... > > we are trying to do this, but are having a hard time. > Anyone have a good doc (or willing to write one) about > how to do this? > > Basically we are ssh-keygen -t (dsa/rsa) the keys, > copy them to the "remote" servers ~/.ssh/ > > There are conflicting doc's at this point...some say > you need an ssh-agent, some don't mention it. Some > use passphrases, some don't. But if i have to enter > an ssh passphrase everytime, why not just use the > account password? > > Any advise would be helpful... > > thanks as always.. > Mike > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Nov. 30, 2005

Re: [Wlug] SSH without passwords

by Mike Frysinger

On Wed, Nov 30, 2005 at 12:37:19PM -0800, Mike Leo wrote: > Basically we are ssh-keygen -t (dsa/rsa) the keys, > copy them to the "remote" servers ~/.ssh/ what are you copying ? for example, i create my dsa keys: ~/.ssh/id_dsa ~/.ssh/id_dsa.pub then i export my pub key to the remote server: $ scp ~/.ssh/id_dsa.pub remotebox:~/ $ ssh remotebox # <- enter my pw $ cat ~/id_dsa.pub >> ~/.ssh/authorized_keys $ rm ~/id_dsa.pub $ logout $ ssh remotebox # <- no pw needed > There are conflicting doc's at this point...some say > you need an ssh-agent, some don't mention it. Some > use passphrases, some don't. But if i have to enter > an ssh passphrase everytime, why not just use the > account password? passphrases are not required, but many people like to use them ssh-agent allows you to cache the passphrase for a certain amount of time, thus finding some ground between the 'always use pw' and the 'never use pw' ground of authentication -mike

Nov. 30, 2005

SSH without passwords

by Mike Leo

I remember someone talking about sharing keys between systems so you can ssh around at will without needing the password.... we are trying to do this, but are having a hard time. Anyone have a good doc (or willing to write one) about how to do this? Basically we are ssh-keygen -t (dsa/rsa) the keys, copy them to the "remote" servers ~/.ssh/ There are conflicting doc's at this point...some say you need an ssh-agent, some don't mention it. Some use passphrases, some don't. But if i have to enter an ssh passphrase everytime, why not just use the account password? Any advise would be helpful... thanks as always.. Mike

Nov. 30, 2005

Re: [Wlug] SAMBA My Documents Redirection and Offile Available with out Roaming Profiles

by Matt Higgins

The redirection part is quite easy, the problem I'm having is making it available offline. This happens automatically in winXP with a roaming profile where all the profile data is offline. This policy can be applied to just the My Documents folder in 2k server and 2k3 server. On 11/28/05, Karl Hiramoto <karl(a)hiramoto.org> wrote: > That is pretty easy to find your self. run regedit. Search for key value > of "My Documents" And you will find the value that is by default set to > c:/user data/My Documents or something like that. I don't have a Micro$haft > machine near me right now, or i would search for the value and tell you. ;-) > > > I just did a quick google search and found some examples: > http://www.linbox.com/ucome.rvt/any/doc_distrib/samba-2.0.9/pdc/profiles.ht… > http://www.sfu.ca/ad/logon_scripts.html > http://www.rethinkit.com/ntscript/LogonScript.htm > http://www.experts-exchange.com/Programming/Programming_Platforms/Q_2150380… > > Matt Higgins wrote: > > I have a logon drive of H: where there home dir is shared and mounted > > at login. This may be a stretch, but do you know the reg keys? or a > > place I can look for the keys? to make this off line and point the My > > Documents folder to it? I can do this by hand (right click My > > Documents -> set target.) but it would be nice to have a logon scripts > > that makes these changes for me for all systems. > > > > On 11/27/05, Karl Hiramoto <karl(a)hiramoto.org> wrote: > > > >>Matt Higgins wrote: > >> > >> > >>>Is it possible to disable roaming profiles and then redirect the My > >>>Documents folder to a share and make it available off line? This is > >>>common behavior for a win2k3 server. > >> > >>This I have done. Give each user a home dir that mounts at login for > >>example H: drive. Put the MyDocuments in H: And you can make all of > >>H: Available offline for a laptop that is not always connected. > >> > >> > >>-- > >> > >>-- > >>Karl Hiramoto <karl(a)hiramoto.org> > >>Yahoo_IM = karl_hiramoto jabber.org=karl_hiramoto > >> > >>_______________________________________________ > >>Wlug mailing list > >>Wlug(a)mail.wlug.org > >>http://mail.wlug.org/mailman/listinfo/wlug > >> > > > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > -- > > --- > Karl Hiramoto <karl(a)hiramoto.org> http://karl.hiramoto.org/ > Yahoo_IM = karl_hiramoto GTalk=karl.hiramoto(a)gmail.com > ------ > - > If you live long enough, you'll see that every victory turns into a defeat. > -- Simone de Beauvoir > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Nov. 28, 2005

Re: [Wlug] SAMBA My Documents Redirection and Offile Available with out Roaming Profiles

by Karl Hiramoto

That is pretty easy to find your self. run regedit. Search for key value of "My Documents" And you will find the value that is by default set to c:/user data/My Documents or something like that. I don't have a Micro$haft machine near me right now, or i would search for the value and tell you. ;-) I just did a quick google search and found some examples: http://www.linbox.com/ucome.rvt/any/doc_distrib/samba-2.0.9/pdc/profiles.ht… http://www.sfu.ca/ad/logon_scripts.html http://www.rethinkit.com/ntscript/LogonScript.htm http://www.experts-exchange.com/Programming/Programming_Platforms/Q_2150380… Matt Higgins wrote: > I have a logon drive of H: where there home dir is shared and mounted > at login. This may be a stretch, but do you know the reg keys? or a > place I can look for the keys? to make this off line and point the My > Documents folder to it? I can do this by hand (right click My > Documents -> set target.) but it would be nice to have a logon scripts > that makes these changes for me for all systems. > > On 11/27/05, Karl Hiramoto <karl(a)hiramoto.org> wrote: > >>Matt Higgins wrote: >> >> >>>Is it possible to disable roaming profiles and then redirect the My >>>Documents folder to a share and make it available off line? This is >>>common behavior for a win2k3 server. >> >>This I have done. Give each user a home dir that mounts at login for >>example H: drive. Put the MyDocuments in H: And you can make all of >>H: Available offline for a laptop that is not always connected. >> >> >>-- >> >>-- >>Karl Hiramoto <karl(a)hiramoto.org> >>Yahoo_IM = karl_hiramoto jabber.org=karl_hiramoto >> >>_______________________________________________ >>Wlug mailing list >>Wlug(a)mail.wlug.org >>http://mail.wlug.org/mailman/listinfo/wlug >> > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > -- --- Karl Hiramoto <karl(a)hiramoto.org> http://karl.hiramoto.org/ Yahoo_IM = karl_hiramoto GTalk=karl.hiramoto(a)gmail.com ------ - If you live long enough, you'll see that every victory turns into a defeat. -- Simone de Beauvoir

Nov. 28, 2005

Re: [Wlug] SAMBA My Documents Redirection and Offile Available with out Roaming Profiles

by Matt Higgins

I have a logon drive of H: where there home dir is shared and mounted at login. This may be a stretch, but do you know the reg keys? or a place I can look for the keys? to make this off line and point the My Documents folder to it? I can do this by hand (right click My Documents -> set target.) but it would be nice to have a logon scripts that makes these changes for me for all systems. On 11/27/05, Karl Hiramoto <karl(a)hiramoto.org> wrote: > Matt Higgins wrote: > > >Is it possible to disable roaming profiles and then redirect the My > >Documents folder to a share and make it available off line? This is > >common behavior for a win2k3 server. > > This I have done. Give each user a home dir that mounts at login for > example H: drive. Put the MyDocuments in H: And you can make all of > H: Available offline for a laptop that is not always connected. > > > -- > > -- > Karl Hiramoto <karl(a)hiramoto.org> > US VOIP: (+1) 603.966.4448 > Spain Casa (+34) 951.273.347 > Spain Mobil (+34) 617.463.826 > Yahoo_IM = karl_hiramoto jabber.org=karl_hiramoto > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Nov. 28, 2005

Re: [Wlug] SAMBA My Documents Redirection and Offile Available with out Roaming Profiles

by Karl Hiramoto

Matt Higgins wrote: >Is it possible to disable roaming profiles and then redirect the My >Documents folder to a share and make it available off line? This is >common behavior for a win2k3 server. This I have done. Give each user a home dir that mounts at login for example H: drive. Put the MyDocuments in H: And you can make all of H: Available offline for a laptop that is not always connected. -- -- Karl Hiramoto <karl(a)hiramoto.org> US VOIP: (+1) 603.966.4448 Spain Casa (+34) 951.273.347 Spain Mobil (+34) 617.463.826 Yahoo_IM = karl_hiramoto jabber.org=karl_hiramoto

Nov. 27, 2005

SAMBA My Documents Redirection and Offile Available with out Roaming Profiles

by Matt Higgins

Here is some back ground before the question: I'm currently running a SAMBA PDC 3.0.10 on FC3. Samba is backed by an LDAP server for account information ldapsam. User accounts were created with smb-ldap tools from IDEALX. I have fixed these scripts up a bit so they also add ldap attributes for OpenExchange. The PDC has a netlogon share with a nice Default Profile for users. Roaming profiles is turned on and all profile data is replicated to the server. All the clients are windows XP Pro. The problem is the profiles are quite large and we don't have the space to support many more users. We also have quite a few remote sites were replicating an entire profile is not practical. I have found that the most important data is in My Documents. Mail is stored on the IMAP server and contact and calendar in OpenExchange. I have read many howtos including nearly the entire Official Samba Howto. All of these documents describe folder redirection with respect to roaming profiles. I have also not found any documents that address the issue of making a redirected folder available off line such as the My Documents folder. I have looked at excluding Folders from the Roaming Profile so only the Personal folder a.k.a My Documents is "roamed" but that looks like a hack. Is it possible to disable roaming profiles and still distribute my nice Default User profile from netlogon? I am fairly sure this is possible just have not tried. Is it possible to disable roaming profiles and then redirect the My Documents folder to a share and make it available off line? This is common behavior for a win2k3 server. Is anyone doing this in production and can give me some pointers or point me to some documentation? Could these settings be made with .pol file or with a bat script running at logon? My I deal scenario is this. User logs in for the 1st time the Default User profile is loaded from the PDC, the My Documents folder is redirected to a share on the server, say there home dir, and that folder is available off line. -Matt

Nov. 27, 2005

Re: [Wlug] Allowing users to start or stop a service

by Mike Leo

Thanks for the feed back...I will continue down the sudo path. --- John Stoffel <john(a)stoffel.org> wrote: > > Mike> We have a set of users who need the power to > Mike> stop/start their own particular > service/daemon. > > Mike> I've tried granting user rights directly to > the init > Mike> script, but that doesn't work. > > Nope, this won't work at all. > > Mike> I am looking into sudo, but am not sure it can > be specific to > Mike> only 1 service, and not all of them? > > sudo will do exactly what you want, but you also > need to be careful > that the user(s) can't run arbitrary program from > with sudo or the > script(s) they are allowed to run. > > For example: > > sudo vi /path/to/file > > is just a gaping security hole, since the user can > now either push to > to a sub-shell from within vi, or edit another file. > Go see the docs > and such on: http://www.courtesan.com/sudo/ and I > really recommend > that you go with this tool. > > John > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Nov. 27, 2005

Re: [Wlug] Allowing users to start or stop a service

by John Stoffel

Mike> We have a set of users who need the power to Mike> stop/start their own particular service/daemon. Mike> I've tried granting user rights directly to the init Mike> script, but that doesn't work. Nope, this won't work at all. Mike> I am looking into sudo, but am not sure it can be specific to Mike> only 1 service, and not all of them? sudo will do exactly what you want, but you also need to be careful that the user(s) can't run arbitrary program from with sudo or the script(s) they are allowed to run. For example: sudo vi /path/to/file is just a gaping security hole, since the user can now either push to to a sub-shell from within vi, or edit another file. Go see the docs and such on: http://www.courtesan.com/sudo/ and I really recommend that you go with this tool. John

Nov. 27, 2005

Re: [Wlug] Unknown binary file

by Michael Long

> # rpm -qf /usr/bin/[ > coreutils-5.3.0-10 > > I believe this is the equivalent of the 'test' command that you use as > part of shell scripting. i.e.: > > if [ "$flying_pigs" = "yes" ]; then > echo "I'm dreaming" > fi > Thanks, I will remember the rpm -qf <file_name> from now on.

Nov. 26, 2005

Re: [Wlug] Unknown binary file

by Adam Keck

Hello Mike, My understanding is that it is a hard link to the 'test' binary for use in shell scripts: if [ -f /etc/group ] ; then .... -Adam On Nov 25, 2005, at 10:48 AM, Michael Long wrote: > Hi all, > > As I was looking through my /usr/bin directory I came across a binary > file "[". What is this? I am running Suse 9.3. > > Thanks, > Mike > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Nov. 25, 2005

Re: [Wlug] Unknown binary file

by Brett Russ

On 11/25/05, Michael Long <mlong(a)datalong.com> wrote: > As I was looking through my /usr/bin directory I came across a binary > file "[". What is this? I am running Suse 9.3. # rpm -qf /usr/bin/[ coreutils-5.3.0-10 I believe this is the equivalent of the 'test' command that you use as part of shell scripting. i.e.: if [ "$flying_pigs" = "yes" ]; then echo "I'm dreaming" fi BR

Nov. 25, 2005

Unknown binary file

by Michael Long

Hi all, As I was looking through my /usr/bin directory I came across a binary file "[". What is this? I am running Suse 9.3. Thanks, Mike

Nov. 25, 2005