Re: user reboot/shutdown (was Re: GUI login screen and non-root shutdown...)

2003-11-09 Thread Wolfgang Pfeiffer
On Fri, 7 Nov 2003, Jonathan Dowland wrote:

 On Tue, Nov 04, 2003 at 03:22:21PM +0100, S. Hakim Hamdani wrote:

  That would be appreciated, also from my side. I found it a bit strange
  yesterday, when I reinstalled debian on a laptop, that I couldn?t login as
  root graphically, and also that as a normal user I can?t shutdown or reboot
  graphically or in text. Only via su.

 This reminds me of a situation I faced over the summer. I was
 demonstrating something to a work-colleague and I was using X. So, I
 instructed my window manager to exit, which returned me to wdm's login
 screen. I then entered my username and password and changed the
 drop-down box to 'reboot' (I think).

 My colleague remarked on how I had to log out and then 'login' (or at
 least re-authenticate) to reboot the computer. He is from a different
 school of OS thought ;-)

 This has been nagging at me since. I thought the solution might be a
 package to manage permissions for users performing these operations,
 which could be driven from the menu-system. Does anyone have any
 thoughts about this?

/etc/gdm/gdm.conf (although I do not know whether you run gdm) offers
a setting like this:

# The system menu requires the root password for all options
SecureSystemMenu=true

I changed it to
SecureSystemMenu=false
and after this, (and after the login screen again wanted the root
passwd for a while in spite of this change, as it seems) I was able to
reboot the machine without providing any passwd.

The login screen still wants the root password if I want to make
changes to the login settings etc. So it seems, setting the option
above to 'false' only lets me reboot (shutdown?, suspend?) the system.
Which is exatly what I want.

HTH

Best Regards,
Wolfgang





-- 
Profile, Links:
http://profiles.yahoo.com/wolfgangpfeiffer


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen and non-root shutdown...

2003-11-07 Thread Jonathan Dowland
On Tue, Nov 04, 2003 at 03:22:21PM +0100, S. Hakim Hamdani wrote:
 
 Also, how can one get out of the whole x system under Debian? To get back into
 text mode? I also haven?t found a method of booting into text.

The display manager 'wdm' can be configured to allow users to shutdown,
reboot and exit the graphical environment.

If you want to get to text mode you can do so without closing down your
display manager by pressing CTRL+MOD1+F* where F is 1-6 by default.
CTRL+MOD1+F7 to return to the graphical display.

-- 
Jon Dowland
http://jon.dowland.name/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



user reboot/shutdown (was Re: GUI login screen and non-root shutdown...)

2003-11-07 Thread Jonathan Dowland
On Tue, Nov 04, 2003 at 03:22:21PM +0100, S. Hakim Hamdani wrote:
 
 That would be appreciated, also from my side. I found it a bit strange
 yesterday, when I reinstalled debian on a laptop, that I couldn?t login as
 root graphically, and also that as a normal user I can?t shutdown or reboot
 graphically or in text. Only via su.

This reminds me of a situation I faced over the summer. I was
demonstrating something to a work-colleague and I was using X. So, I
instructed my window manager to exit, which returned me to wdm's login
screen. I then entered my username and password and changed the
drop-down box to 'reboot' (I think).

My colleague remarked on how I had to log out and then 'login' (or at
least re-authenticate) to reboot the computer. He is from a different
school of OS thought ;-)

This has been nagging at me since. I thought the solution might be a
package to manage permissions for users performing these operations,
which could be driven from the menu-system. Does anyone have any
thoughts about this?

-- 
Jon Dowland
http://jon.dowland.name/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-07 Thread Jonathan Dowland
On Tue, Nov 04, 2003 at 10:14:54PM +0100, David Jardine wrote:
 On Tue, Nov 04, 2003 at 11:09:53AM -0700, Monique Y. Herman wrote:
  
  
  PLEASE don't CC me.  Please.  Pretty please with sugar on top.
  Whatever it takes, just don't CC me!  I'm already subscribed!!
  
 
 You know, it must be so obvious to you experienced people, but 
 there are some of us out here that take ages to discover that 
 in mutt, for example, we should press 'L' instead of 'r' to 
 send a list reply.

Perhaps a debian-sandbox mailing list would be useful :)

-- 
Jon Dowland
http://jon.dowland.name/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-06 Thread Hoyt Bailey

- Original Message - 
From: Monique Y. Herman [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 05, 2003 16:24
Subject: Re: GUI login screen.


 On Wed, 05 Nov 2003 at 21:50 GMT, Hoyt Bailey penned:
 
  The point being an example of
  Mainframe Mentality that seems to be growing in the Linux community
  (as someone mentioned a few days ago).  Everyone should consider the
  future. What is the future of Linux?  It should be to take over the
  Windows boxes it cant happen if everyone follows RH.
 ...
  It's just that it's so amazingly silly that people have trouble
  beliving that it is what you 'really want'. or Debian tends to be
  geared more toward multi-user computers an example of MM.  People
  have told me that their computer works just like I think mine should
  and they dont understand what the problem is. I think you should
  consider what is the purpose of the faces program which I noticed in
  my gnome start menu. Just because you dont use GUI dosent mean that
  others shouldnt and Linux isnt going to ever be as popular as Windows
  unless it becomes as user friendly as windows.  In my opinion and you
  have the freedom to feel differently.

 You assume that the future of linux should be to take over the Windows
 boxes.  Why?  Some people would like to see that, but that isn't the
 only possible point.  Linus himself would vehemently disagree.  His
 purpose for linux is to build the best damn operating system he can,
 according to his definitions.  If it happens to take out the windows
 market, fine, but if it doesn't, *shrug*.

 If linux (which covers a lot of territory) becomes as user-friendly as
 windows, it will become quite crackable.  That's not something that I
 want.

 Please consider that the reason that Debian is set up with certain
 defaults is that -- brace yourself -- overwhelmingly, the debian users
 like it that way.  Debian users tend to prefer security to ease of use.
 Debian users tend to prefer command-line solutions to GUIs.  Debian
 users tend to want to understand their system, not just use it.

 There are many distros out there, and while I adore Debian, I only
 recommend it to the subset of my friends who will probably appreciate
 it.  There are many people who are happier with other distros.

 -- 
 monique
 PLEASE don't CC me.  Please.  Pretty please with sugar on top.
 Whatever it takes, just don't CC me!  I'm already subscribed!!

You are entitled and encourged to use linux however you wish.  I would not
like for linux to become exclusive for the Cray's of the world nor should it
become exclusive to the home user box there is room for both.  Just look at
what 'setti' was able to do with the 1000's of home user's boxes that
allowed their home computers to be used by setti when they wernt using them.
It was the equivelent of a several(maybe 100's) of large mainframes. I
believe it is still going on today as well as several medical groups and
even environmental groups.  I think this is a worthy use and perhaps this is
where linux should go. I expect Linus would be pleased with this use of the
best damn operating system in this world.

Your comment about 'crackable' doesnt have to be true.  The average windows
user doesnt know or care about what the coputer is doing or how it is doing
it.  The crackers have been too lazy to figure out how to crack a linux
system easily.  Remember this is just a computer program [1-0] and any
system devised by man can be beaten by another man(or woman) if they are so
inclined. It would take a lot of intelligence and work to do it but dont
think it cant be done.

Linux is so versital that it provides an option for everyone from the
largest cray to the smallest user box and they can all do cosmology math.
However you want to use this feel free but dont stop anyone who wants to do
it another way. Let Freedom rule.
Regards;
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-06 Thread Hoyt Bailey
I would like to thank one and all for your assistance in this thread.

Thanks especially to Kent West for the reference to The Gnome Display
Manager Reference Manual.

It works like I think it should now and although a lot of users dont do
things this way its my way.

Regards to all;
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-06 Thread Rob Weir
On Wed, Nov 05, 2003 at 04:22:55PM -0600, Hoyt Bailey said
 Select terminal
 Issue comand: sudo shutdown -r now
 Password: root password

Yes, you need to use your user password.  su will let you switch to
root with root's password.

 Failed
 Password: My password
 Failed with message that I would be reported to me.

Did you add the line to /etc/sudoers that I sent in an earlier mail?  It
won't work until you do.  Here it is again if you missed it:

rob ALL=(ALL) ALL

Change rob to your username, of course...

 Punched logout button on gnome start menu and went to GUI login
 cntrl-alt-F1
 Text mode login

This sounds right.

 ? is it time to reinstall ?

What for?  Remember that all user settings are stored in ~/, which will
not be touched by a reinstall anyway.  If you think your gnome settings
are toast, just move them out of the way (mkdir ~/junk ; mv ~/.gnome*
~/junk).

-- 
Rob Weir [EMAIL PROTECTED] | [EMAIL PROTECTED]  |  Do I look like I want a CC?
Words of the day:   mindwar diwn New World Order NSA Echelon MILSATCOM BRLO


signature.asc
Description: Digital signature


Re: GUI login screen.

2003-11-06 Thread Hoyt Bailey

- Original Message - 
From: Rob Weir [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Thursday, November 06, 2003 11:21
Subject: Re: GUI login screen.
I must admit I dont know I thought I fixed it but must not have done so.  I
printed your note this time and I'll get it done.

Thanks;
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: Ken Gilmour [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Tuesday, November 04, 2003 10:28
Subject: Re: GUI login screen.


Well i think the best solution to get around this is to setup a normal user
account... then edit the /etc/passwd file and set that person with root
permissions so as soon as they login theyre automatically made root.

Best Regards,

Ken Gilmour
You may be beautiful but they're keeping my idea on file.

Registered Linux User # 330371
http://counter.li.org


Replying to the message sent by Roberto Sanchez  on Tue, 04 Nov 2003
09:41:02 -0500, received at 16:27:29 on 04/11/2003.
snip
Will not work my password isnt in /etc/password its encripted somewhere
else.(shadow password)
Regards;
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: Kent West [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Tuesday, November 04, 2003 10:58
Subject: Re: GUI login screen.


 Ken Gilmour wrote:
  Well i think the best solution to get around this is to setup a normal
user account... then edit the /etc/passwd file and set that person with root
permissions so as soon as they login theyre automatically made root.
 


 Umm, no. That means you're still capable of doing nasty things to your
 system. It's much better to use su or sudo to do root-type things,
 or if we're still talking about rebooting/shutdowns from the GUI login
 manager (gdm, kdm, etc), to configure that login manager to allow
 non-root access to these functions.

 -- 
 Kent

Ok.  Could you give me a file name, command, or doc to explain the
rebooting/shutdown in gdm.
Regards;
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: Monique Y. Herman [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, November 04, 2003 12:09
Subject: Re: GUI login screen.


 On Tue, 04 Nov 2003 at 13:52 GMT, Hoyt Bailey penned:
  On a network I can understand why a normal used cannot shutdown the
  system, but a single user should be able to shutdown, reboot, etc,
  without becoming root.  This shouldnt be a big problem.
 
 In fact, I think it's critical for a machine to which a user has
 physical access.  If the user wants to reboot the machine, no matter how
 ill-advisedly, I'd rather they use the software version than the power
 button.
 
 
 -- 
 monique
 PLEASE don't CC me.  Please.  Pretty please with sugar on top.
 Whatever it takes, just don't CC me!  I'm already subscribed!!
 
 shutdown even with ext3 its still safer to do it right.
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread John Peter
Hoyt Bailey wrote:

- Original Message - 
From: Roberto Sanchez [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Tuesday, November 04, 2003 08:41
Subject: Re: GUI login screen.

I do not dissagree on any point.  However it should be my choice.  Should I
do something so stupid as download as root or read mail then I will be the
one to pick up what pieces are left. I am sure you have heard of welcha and
blaster, been there done that, they dont ask permission.  Maybe you dont
understand what I, and others,  want.  Idealy if the gui login screen added
3 items it would solve a lot of problems and would not incur any security
risks.
1. Reboot (If I want to go to Windows)
2. Shutdown (If I want to go to bed)
3. Text mode.(If I want to do something as root)
 

I have been reading this thread and I find all this very strange.
I installed Debian base (network install) and then went to Sarge .
Installed X, KDM and KDE and I have all that I used
to have in other distros - I can do all that you mention and more !
There may be ways not to have it like that but I have and didn't have to 
configure anything!
My login GUI even present you with clickcable icons (pictures) for you 
to select whatever
user / root you want with a single click ( no need to write the actual 
name ).
And for the really lasy and don't-care-about-login-stuff guys you can 
configure the GUI
to do an auto-login!
I don't know what else you may require - it will hardly wash your car ...

Incidently Cntl-alt-del doesnt work from gnome. I expected it would.
 

Neither does from KDE but you can use cntl-alt-backspace and go to login 
screen and then
choose whatever is that you wish .
And pressing cntrl-alt-F1 goes to you first tty , cntrl-alt-F2 to the 
second, until cntrl-alt-F7 that gets
you back on X ( where you were in the first place ).
If your machine doesn't work like this, then you shurelly have have 
something  strange going on ...

Good luck !

John



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen and non-root shutdown...

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: csj [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, November 04, 2003 14:28
Subject: Re: GUI login screen and non-root shutdown...


 On Tue, 04 Nov 2003 10:56:47 -0600,
 Kent West wrote:

 [...]

  If you have an X session going, and you switch to a VTx, you
  can then log in as a different user and start a second X
  session with a command like startx -- :1. Go to a third VT
  and start a third session with a command like startx --
  :2). You can then switch between these X sessions with
  Ctrl-Alt-F[7|8|9]. NOTE: Test first when you don't have
  anything important running; some video setups can't handle this
  and might freeze the box.

 If you have gdm installed and running you can run
 gdmflexiserver.  (Recommended only for home users.)

You kind people are giving me workarounds how about where where the gui
login screen lives.  i.e. what program is it?
Regards;
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: Monique Y. Herman [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, November 04, 2003 19:11
Subject: Re: GUI login screen.


 On Wed, 05 Nov 2003 at 00:19 GMT, Hoyt Bailey penned:
 
  - Original Message - From: Roberto Sanchez
  [EMAIL PROTECTED] To: debian-user
  [EMAIL PROTECTED] Sent: Tuesday, November 04, 2003 08:41
  Subject: Re: GUI login screen.
 
  I do not dissagree on any point.  However it should be my choice.
  Should I do something so stupid as download as root or read mail then
  I will be the one to pick up what pieces are left. I am sure you have
  heard of welcha and blaster, been there done that, they dont ask
  permission.  Maybe you dont understand what I, and others,  want.
  Idealy if the gui login screen added 3 items it would solve a lot of
  problems and would not incur any security risks.  1. Reboot (If I want
  to go to Windows) 2. Shutdown (If I want to go to bed) 3. Text
  mode.(If I want to do something as root) Incidently Cntl-alt-del
  doesnt work from gnome. I expected it would.  Regards; Hoyt
 
 

 I think you *can* set things up such that root can log in from the gui.
 It's just not set up that way in the *default* debian configuration.

 -- 
 monique
 PLEASE don't CC me.  Please.  Pretty please with sugar on top.
 Whatever it takes, just don't CC me!  I'm already subscribed!!

So true.  A point made by others as well. However knowing that while a good
thing doesnt help me. What program supplies gui login?  Or maybe what config
file sets up the login screen? I dont like the idea that debian builds that
jail and I cant get out.
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: Paul Johnson [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Tuesday, November 04, 2003 20:33
Subject: Re: GUI login screen.


 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 On Tue, Nov 04, 2003 at 07:08:11AM -0600, Hoyt Bailey wrote:
  Ok  for us stupid newbies.  Why is it dangerous and stupid.  RH and
Caldera
  support an item in their login screen called I believe Consol which
dumps
  you back to prior to startx and I recall root was included on the login
  screen.

 KDM does that, as well.

 - -- 
  .''`. Paul Johnson [EMAIL PROTECTED]
 : :'  :
 `. `'` proud Debian admin and user
   `-  Debian - when you have better things to do than fix a system
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.2.3 (GNU/Linux)

 iD8DBQE/qGGVUzgNqloQMwcRAmKLAKDHVAAUgrFHnF1eECX3IV0qi43sogCfW1Br
 iEu/EXhvVYYEYQeXB62hAbo=
 =yB0D
 -END PGP SIGNATURE-

That still dosent make it right.  How about a warning:
##
# WARNING#
# THIS COULD BE DANGEROUS TO   #
# YOUR HEALTH, WEALTH, AND   #
# YOUR CHILDREN AND VIOLATES  #
# THE NATIONAL SECURITY. #
#
Think that will help.
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Rob Weir
On Tue, Nov 04, 2003 at 03:51:35PM -0600, Hoyt Bailey said
 
 - Original Message - 
 From: Rob Weir [EMAIL PROTECTED]
 To: debian-user [EMAIL PROTECTED]
 Sent: Tuesday, November 04, 2003 01:28
 Subject: Re: GUI login screen.
 
 Guess I will have to.

You can almost certainly reconfigure GDM to allow you to do this, but
it's still a REALLY silly idea.  Using sudo is a good habit to get into,
and it WILL save your arse at some point.

From my /etc/sudoers:

rob ALL=(ALL) ALL

I can run anything as any user, and will only be prompted for my *user*
password after 15 minutes or whatever the timeout is.  I run everything
as a normal user, and use sudo programname for the occasional programs
which require root priveleges.  Don't forget to use visudo to edit
that file, not a regular text file.

Interesting fact: now that I have sudo setup, I haven't logged into this
machine as root in *months*.

-- 
Rob Weir [EMAIL PROTECTED] | [EMAIL PROTECTED]  |  Do I look like I want a CC?
Words of the day:  Juiliett Class Submarine bce SSL Fidel Castro Subversion


signature.asc
Description: Digital signature


Re: GUI login screen.

2003-11-05 Thread Rob Weir
On Tue, Nov 04, 2003 at 06:19:54PM -0600, Hoyt Bailey said
 I do not dissagree on any point.  However it should be my choice.  Should I
 do something so stupid as download as root or read mail then I will be the
 one to pick up what pieces are left. 

Then go for it.  It's just that it's so amazingly silly that people have
trouble believing it is what you *really* want.  Can you tell us *why*
you want to do things like this as root?  That said, it's certainly
possible to do these things, even if the default Debian configuration
makes it difficult.

 I am sure you have heard of welcha and
 blaster, been there done that, they dont ask permission.  

Uh, yes.  This doesn't have anything to do with Debian, however.  If
such a thing were to appear on Linux, and could exploit a popular MUA
(mail client), then it wouldn't matter if you were running as root or a
regular user, the crap would still be mailed out and your privacy would
still be breached.

 Maybe you dont
 understand what I, and others,  want.  Idealy if the gui login screen added
 3 items it would solve a lot of problems and would not incur any security
 risks.
 1. Reboot (If I want to go to Windows)
 2. Shutdown (If I want to go to bed)

No idea if these are there, I don't use a graphical login manager
thingy.  I'm sure I've seen them in screenshots, though.  KDM or WDM
maybe?

 3. Text mode.(If I want to do something as root)

ctrl-alt-f1 from the login thingy.  I've said it lots of times, but sudo
is a better option.  What doesn't it do that you need?

-- 
Rob Weir [EMAIL PROTECTED] | [EMAIL PROTECTED]  |  Do I look like I want a CC?
Words of the day:  anarchy red noise overthorw Etacs RSA brigand War Crimes


signature.asc
Description: Digital signature


Re: GUI login screen.

2003-11-05 Thread Colin Watson
On Wed, Nov 05, 2003 at 05:57:30AM -0600, Hoyt Bailey wrote:
 From: Monique Y. Herman [EMAIL PROTECTED]
  I think you *can* set things up such that root can log in from the
  gui. It's just not set up that way in the *default* debian
  configuration.
 
 So true.  A point made by others as well. However knowing that while a
 good thing doesnt help me. What program supplies gui login?  Or maybe
 what config file sets up the login screen?

In gdm (the GNOME Display Manager; if you're not using that, please
tell us what your login screen looks like, otherwise we can't tell!),
select Configure from the System menu.

 I dont like the idea that debian builds that jail

Please, talk about jails is completely over the top.

Cheers,

-- 
Colin Watson  [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: Kent West [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: debian-user [EMAIL PROTECTED]
Sent: Tuesday, November 04, 2003 22:25
Subject: Re: GUI login screen.


 Hoyt Bailey wrote:

 - Original Message - 
 From: Roberto Sanchez [EMAIL PROTECTED]
 To: debian-user [EMAIL PROTECTED]
 Sent: Tuesday, November 04, 2003 08:41
 Subject: Re: GUI login screen.
 
 I do not dissagree on any point.  However it should be my choice.  Should
I
 do something so stupid as download as root or read mail then I will be
the
 one to pick up what pieces are left. I am sure you have heard of welcha
and
 blaster, been there done that, they dont ask permission.  Maybe you dont
 understand what I, and others,  want.  Idealy if the gui login screen
added
 3 items it would solve a lot of problems and would not incur any security
 risks.
 1. Reboot (If I want to go to Windows)
 2. Shutdown (If I want to go to bed)
 3. Text mode.(If I want to do something as root)
 
 

 You can set Debian up to do this; Debian is just set up to not do this
 by default. You can always over-ride defaults, but Debian does not have
 the purpose of winning people over with trinkets; Debian is designed for
 stability, security, robustness, Freedom, ease of maintenance. What
 you're asking for is more of a feature found on single-user computers;
 Debian tends to be geared more toward multi-user computers.

 In other words; it is your choice. But it's not the default.

 All you have to do is figure out how to over-ride the defaults. Since I
 usually don't use gdm or kdm, etc, I'm not familiar with where those
 things are set up. But looking in KDE real quick, I see there's a
 Control Panel, with a Login Manager control, that has a Sessions tab,
 that looks to be just what you're looking for. I suspect gdm and others
 have similar options.

 Incidently Cntl-alt-del doesnt work from gnome. I expected it would.
 
 

 I believe you'll find that it doesn't work anywhere in X, not just
 Gnome. Unless of course you've reconfigured your window manager/etc for
 it to work. I have no idea where that setting might be.

 -- 
 Kent

Thank you at last a starting point.
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Colin Watson
On Wed, Nov 05, 2003 at 06:59:02PM +1100, Rob Weir wrote:
 You can almost certainly reconfigure GDM to allow you to do this, but
 it's still a REALLY silly idea.  Using sudo is a good habit to get into,
 and it WILL save your arse at some point.

Well, gdm asks for the root password in order to shut down, I think; so
it's not too silly. (You can probably configure it in other ways too.)

-- 
Colin Watson  [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: John Peter [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Wednesday, November 05, 2003 04:30
Subject: Re: GUI login screen.


 Hoyt Bailey wrote:

 - Original Message - 
 From: Roberto Sanchez [EMAIL PROTECTED]
 To: debian-user [EMAIL PROTECTED]
 Sent: Tuesday, November 04, 2003 08:41
 Subject: Re: GUI login screen.
 
 I do not dissagree on any point.  However it should be my choice.  Should
I
 do something so stupid as download as root or read mail then I will be
the
 one to pick up what pieces are left. I am sure you have heard of welcha
and
 blaster, been there done that, they dont ask permission.  Maybe you dont
 understand what I, and others,  want.  Idealy if the gui login screen
added
 3 items it would solve a lot of problems and would not incur any security
 risks.
 1. Reboot (If I want to go to Windows)
 2. Shutdown (If I want to go to bed)
 3. Text mode.(If I want to do something as root)
 
 
 I have been reading this thread and I find all this very strange.
 I installed Debian base (network install) and then went to Sarge .
 Installed X, KDM and KDE and I have all that I used
 to have in other distros - I can do all that you mention and more !
 There may be ways not to have it like that but I have and didn't have to
 configure anything!
 My login GUI even present you with clickcable icons (pictures) for you
 to select whatever
 user / root you want with a single click ( no need to write the actual
 name ).
 And for the really lasy and don't-care-about-login-stuff guys you can
 configure the GUI
 to do an auto-login!
 I don't know what else you may require - it will hardly wash your car ...

 Incidently Cntl-alt-del doesnt work from gnome. I expected it would.
 
 
 Neither does from KDE but you can use cntl-alt-backspace and go to login
 screen and then
 choose whatever is that you wish .
 And pressing cntrl-alt-F1 goes to you first tty , cntrl-alt-F2 to the
 second, until cntrl-alt-F7 that gets
 you back on X ( where you were in the first place ).
 If your machine doesn't work like this, then you shurelly have have
 something  strange going on ...

 Good luck !

 John

That is exactly what I wanted to hear.  I dont doubt there is something
strange going on at all.  I do thank you for confirming what I expected
linux to be and as soon as I get my real modem maybe a sarge update will
be in order.
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Kent West
John Peter wrote:
I don't know what else you may require - it will hardly wash your car ...
That explains the condition of my vehicle! Well then, forget Debian. I'm 
switching to Novell/SuSE.

--
Kent
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Kent West
Rob Weir wrote:

Interesting fact: now that I have sudo setup, I haven't logged into this
machine as root in *months*.
That's pretty much the norm for me also. I love sudo.

--
Kent
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: Colin Watson [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Wednesday, November 05, 2003 06:32
Subject: Re: GUI login screen.


 On Wed, Nov 05, 2003 at 05:57:30AM -0600, Hoyt Bailey wrote:
  From: Monique Y. Herman [EMAIL PROTECTED]
   I think you *can* set things up such that root can log in from the
   gui. It's just not set up that way in the *default* debian
   configuration.
 
  So true.  A point made by others as well. However knowing that while a
  good thing doesnt help me. What program supplies gui login?  Or maybe
  what config file sets up the login screen?

 In gdm (the GNOME Display Manager; if you're not using that, please
 tell us what your login screen looks like, otherwise we can't tell!),
 select Configure from the System menu.

  I dont like the idea that debian builds that jail

 Please, talk about jails is completely over the top.

 Cheers,

 -- 
 Colin Watson  [EMAIL PROTECTED]

I am using gdm.  If jail is over the top then you cannot know how I feel.
One of the contributors to the list made a refrenct to the location of
Debian Reference I looked and found Debian Users Guide as well perhaps they
will help.  Thank you for the information.  I'll try your suggestions.
Regards;
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Dr.-Ing. C. Hurschler
Am Mittwoch, 5. November 2003 15:27 schrieb Hoyt Bailey:
 - Original Message -
 From: John Peter [EMAIL PROTECTED]
 To: debian-user [EMAIL PROTECTED]
 Sent: Wednesday, November 05, 2003 04:30
 Subject: Re: GUI login screen.

  Hoyt Bailey wrote:
  - Original Message -
  From: Roberto Sanchez [EMAIL PROTECTED]
  To: debian-user [EMAIL PROTECTED]
  Sent: Tuesday, November 04, 2003 08:41
  Subject: Re: GUI login screen.
  
  I do not dissagree on any point.  However it should be my choice. 
   Should

 I

  do something so stupid as download as root or read mail then I will be

 the

  one to pick up what pieces are left. I am sure you have heard of welcha

 and

  blaster, been there done that, they dont ask permission.  Maybe you dont
  understand what I, and others,  want.  Idealy if the gui login screen

 added

  3 items it would solve a lot of problems and would not incur any
   security risks.
  1. Reboot (If I want to go to Windows)
  2. Shutdown (If I want to go to bed)
  3. Text mode.(If I want to do something as root)
 
  I have been reading this thread and I find all this very strange.
  I installed Debian base (network install) and then went to Sarge .
  Installed X, KDM and KDE and I have all that I used
  to have in other distros - I can do all that you mention and more !
  There may be ways not to have it like that but I have and didn't have to
  configure anything!
  My login GUI even present you with clickcable icons (pictures) for you
  to select whatever
  user / root you want with a single click ( no need to write the actual
  name ).
  And for the really lasy and don't-care-about-login-stuff guys you can
  configure the GUI
  to do an auto-login!
  I don't know what else you may require - it will hardly wash your car ...
 
  Incidently Cntl-alt-del doesnt work from gnome. I expected it would.
 
  Neither does from KDE but you can use cntl-alt-backspace and go to login
  screen and then
  choose whatever is that you wish .
  And pressing cntrl-alt-F1 goes to you first tty , cntrl-alt-F2 to the
  second, until cntrl-alt-F7 that gets
  you back on X ( where you were in the first place ).
  If your machine doesn't work like this, then you shurelly have have
  something  strange going on ...
 
  Good luck !
 
  John

 That is exactly what I wanted to hear.  I dont doubt there is something
 strange going on at all.  I do thank you for confirming what I expected
 linux to be and as soon as I get my real modem maybe a sarge update will
 be in order.
 Hoyt

It has nothing to do with sarge, it works the way he described in woody too.  
Try dpkg-reconfigure kdm if you haven't already.

Chris 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen and non-root shutdown...

2003-11-05 Thread Kent West
Hoyt Bailey wrote:
- Original Message - 
From: csj [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, November 04, 2003 14:28
Subject: Re: GUI login screen and non-root shutdown...



On Tue, 04 Nov 2003 10:56:47 -0600,
Kent West wrote:
[...]


If you have an X session going, and you switch to a VTx, you
can then log in as a different user and start a second X
session with a command like startx -- :1. Go to a third VT
and start a third session with a command like startx --
:2). You can then switch between these X sessions with
Ctrl-Alt-F[7|8|9]. NOTE: Test first when you don't have
anything important running; some video setups can't handle this
and might freeze the box.
If you have gdm installed and running you can run
gdmflexiserver.  (Recommended only for home users.)
You kind people are giving me workarounds how about where where the gui
login screen lives.  i.e. what program is it?
Regards;
Hoyt


From an earlier posting:
ps ax | grep [d]m should give you a good clue [as to which session 
manager you're using (e.g. which login screen you're using) - we 
don't know what login screen you're using; only you know that]

Then you can either uninstall it (apt-get --purge remove gdm to 
remove/purge gdm) or disable it (various ways, such as putting exit 0 
as the first executable line in the script; the script for kdm should 
reside at /etc/init.d/kdm, or renaming/moving the script or symlink to 
the script).

--
Kent
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Kent West
Hoyt Bailey wrote:

I am using gdm.  If jail is over the top then you cannot know how I feel.
This is probably what you want:
http://www.ibiblio.org/oswg/oswg-nightly/gdm2/docs/C/gdm.html#AEN353
Especially see:

2.2.2. Security Options

[security]
AllowRoot
AllowRoot=0

Graphical root logins are disallowed by default. Set this value to 
1 to enable priviledged user logins.

2.2.5. Greeter Configuration

[greeter]
. . .
SystemMenu
SystemMenu=0

Turns the Shutdown/Halt menu on/off.

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Monique Y. Herman
On Wed, 05 Nov 2003 at 11:57 GMT, Hoyt Bailey penned:
 

 I think you *can* set things up such that root can log in from the
 gui.  It's just not set up that way in the *default* debian
 configuration.

 So true.  A point made by others as well. However knowing that while a
 good thing doesnt help me. What program supplies gui login?  Or maybe
 what config file sets up the login screen? I dont like the idea that
 debian builds that jail and I cant get out.  Hoyt
 

I try to avoid the gui login, so I'm not sure.  But I'm pretty sure I've
seen references to it.

-- 
monique
PLEASE don't CC me.  Please.  Pretty please with sugar on top.
Whatever it takes, just don't CC me!  I'm already subscribed!!


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: Rob Weir [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Wednesday, November 05, 2003 02:04
Subject: Re: GUI login screen.
As an answer to your first comment;  If I desire to configure the Control
Panel I dont like to continualy have to reenter root password to get it done
also this concept has apparantly removed a lot of configuration options that
should be there. I.E. in desktop 2.4 Caldera has an excellent configuration
for X, you can set everything up correctly,  this is gone in desktop 3 and
RH 7.2.  Before you get the urge I know this is Debian these are for example
only  The point being an example of Mainframe Mentality that seems to be
growing in the Linux community (as someone mentioned a few days ago).
Everyone should consider the future. What is the future of Linux?  It should
be to take over the Windows boxes it cant happen if everyone follows RH.

Welcha  blaster dont come through the mailbox and since they are just
computer programs they can be stopped.  Every time I got one or the other it
was while downloading the Norton updates. That should tickel your fancy.  I
dont believe for a moment that the Norton site is infected.  Nor have I been
after getting the download finished.

It's just that it's so amazingly silly that people have trouble beliving
that it is what you 'really want'. or Debian tends to be geared more
toward multi-user computers an example of MM.  People have told me that
their computer works just like I think mine should and they dont understand
what the problem is. I think you should consider what is the purpose of the
faces program which I noticed in my gnome start menu. Just because you
dont use GUI dosent mean that others shouldnt and Linux isnt going to ever
be as popular as Windows unless it becomes as user friendly as windows.  In
my opinion and you have the freedom to feel differently.

Regards;
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Monique Y. Herman
On Wed, 05 Nov 2003 at 21:50 GMT, Hoyt Bailey penned:
 
 The point being an example of
 Mainframe Mentality that seems to be growing in the Linux community
 (as someone mentioned a few days ago).  Everyone should consider the
 future. What is the future of Linux?  It should be to take over the
 Windows boxes it cant happen if everyone follows RH.
...
 It's just that it's so amazingly silly that people have trouble
 beliving that it is what you 'really want'. or Debian tends to be
 geared more toward multi-user computers an example of MM.  People
 have told me that their computer works just like I think mine should
 and they dont understand what the problem is. I think you should
 consider what is the purpose of the faces program which I noticed in
 my gnome start menu. Just because you dont use GUI dosent mean that
 others shouldnt and Linux isnt going to ever be as popular as Windows
 unless it becomes as user friendly as windows.  In my opinion and you
 have the freedom to feel differently.

You assume that the future of linux should be to take over the Windows
boxes.  Why?  Some people would like to see that, but that isn't the
only possible point.  Linus himself would vehemently disagree.  His
purpose for linux is to build the best damn operating system he can,
according to his definitions.  If it happens to take out the windows
market, fine, but if it doesn't, *shrug*.

If linux (which covers a lot of territory) becomes as user-friendly as
windows, it will become quite crackable.  That's not something that I
want.

Please consider that the reason that Debian is set up with certain
defaults is that -- brace yourself -- overwhelmingly, the debian users
like it that way.  Debian users tend to prefer security to ease of use.
Debian users tend to prefer command-line solutions to GUIs.  Debian
users tend to want to understand their system, not just use it.

There are many distros out there, and while I adore Debian, I only
recommend it to the subset of my friends who will probably appreciate
it.  There are many people who are happier with other distros.

-- 
monique
PLEASE don't CC me.  Please.  Pretty please with sugar on top.
Whatever it takes, just don't CC me!  I'm already subscribed!!


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: Colin Watson [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Wednesday, November 05, 2003 07:37
Subject: Re: GUI login screen.


 On Wed, Nov 05, 2003 at 06:59:02PM +1100, Rob Weir wrote:
  You can almost certainly reconfigure GDM to allow you to do this, but
  it's still a REALLY silly idea.  Using sudo is a good habit to get into,
  and it WILL save your arse at some point.

 Well, gdm asks for the root password in order to shut down, I think; so
 it's not too silly. (You can probably configure it in other ways too.)

 -- 
 Colin Watson  [EMAIL PROTECTED]

Thanks.  I told you I would try your suggestions.  Here is what happened:
Loged in as me at GUI login screen
Selected Control Panel from gnome start menu
under Debian selected Configure X Window (I told you gdm apparantly I was
wrong)
Input root password (now I'm root in X Windows)
Now the panel has only X(red)cancel useable the rest are grayed out as is
the panel Select cancel
Open a drawer that has logout button inside
All programs except Terminal are gone from both drawers.
Select terminal
Issue comand: sudo shutdown -r now
Password: root password
Failed
Password: My password
Failed with message that I would be reported to me.
Punched logout button on gnome start menu and went to GUI login
cntrl-alt-F1
Text mode login
? is it time to reinstall ?
Regards:
Hoyt




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: Dr.-Ing. C. Hurschler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 05, 2003 09:24
Subject: Re: GUI login screen.


 Am Mittwoch, 5. November 2003 15:27 schrieb Hoyt Bailey:
  - Original Message -
  From: John Peter [EMAIL PROTECTED]
  To: debian-user [EMAIL PROTECTED]
  Sent: Wednesday, November 05, 2003 04:30
  Subject: Re: GUI login screen.
 
   Hoyt Bailey wrote:
   - Original Message -
   From: Roberto Sanchez [EMAIL PROTECTED]
   To: debian-user [EMAIL PROTECTED]
   Sent: Tuesday, November 04, 2003 08:41
   Subject: Re: GUI login screen.
   
   I do not dissagree on any point.  However it should be my choice.
snip
   I have been reading this thread and I find all this very strange.
   I installed Debian base (network install) and then went to Sarge .
   Installed X, KDM and KDE and I have all that I used
   to have in other distros - I can do all that you mention and more !
   There may be ways not to have it like that but I have and didn't have
to
   configure anything!
   My login GUI even present you with clickcable icons (pictures) for you
   to select whatever
   user / root you want with a single click ( no need to write the actual
   name ).
   And for the really lasy and don't-care-about-login-stuff guys you can
   configure the GUI
   to do an auto-login!
   I don't know what else you may require - it will hardly wash your car
...
kw washed his car since I have.
  That is exactly what I wanted to hear.  I dont doubt there is something
  strange going on at all.  I do thank you for confirming what I expected
  linux to be and as soon as I get my real modem maybe a sarge update
will
  be in order.
  Hoyt

 It has nothing to do with sarge, it works the way he described in woody
too.
 Try dpkg-reconfigure kdm if you haven't already.

 Chris

That is a comfort to know that Your system works like Linux should I must
confess that I dont understand the agenda of some.
Since I issued apt-get --purge remove kdm.  I suspect that wouldnt work will
the command be the same for xdm, or maybe it was another command anyway its
gone.
Regards:
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: Stephen Touset [EMAIL PROTECTED]
To: Hoyt Bailey [EMAIL PROTECTED]
Sent: Wednesday, November 05, 2003 12:06
Subject: Re: GUI login screen.


 Hoyt Bailey wrote:
  - Original Message - 
  From: Kent West [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Cc: debian-user [EMAIL PROTECTED]
  Sent: Tuesday, November 04, 2003 22:25
  Subject: Re: GUI login screen.

 
 Hoyt Bailey wrote:
 
 
 - Original Message - 
 From: Roberto Sanchez [EMAIL PROTECTED]
 To: debian-user [EMAIL PROTECTED]
 Sent: Tuesday, November 04, 2003 08:41
 Subject: Re: GUI login screen.
 In /etc/inittab, there's a line beginning with ctrlaltdel, or
 something very similar. In Debian (atleast to my knowledge), it's bound
 to /sbin/reboot, but it seems like it's not in your situation. Simply
 put /sbin/reboot at the end of the line (erasing any command that's
 there, if there is one), and restart init.



Thanks that is good to know I'll keep it around Just In Case, somehow I
think there may be bigger problems here than I first thought.
Regards;
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: Kent West [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Wednesday, November 05, 2003 10:53
Subject: Re: GUI login screen.


 Hoyt Bailey wrote:

  I am using gdm.  If jail is over the top then you cannot know how I
feel.

 This is probably what you want:
 http://www.ibiblio.org/oswg/oswg-nightly/gdm2/docs/C/gdm.html#AEN353

 Especially see:

 2.2.2. Security Options

  [security]
 AllowRoot

 AllowRoot=0

  Graphical root logins are disallowed by default. Set this value to
 1 to enable priviledged user logins.


 2.2.5. Greeter Configuration

  [greeter]
 . . .
 SystemMenu

 SystemMenu=0

  Turns the Shutdown/Halt menu on/off.

Thank you sir that appears to be exactly what I need.
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Hoyt Bailey

- Original Message - 
From: Monique Y. Herman [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 05, 2003 10:42
Subject: Re: GUI login screen.


 On Wed, 05 Nov 2003 at 11:57 GMT, Hoyt Bailey penned:
  
 
  I think you *can* set things up such that root can log in from the
  gui.  It's just not set up that way in the *default* debian
  configuration.
 
  So true.  A point made by others as well. However knowing that while a
  good thing doesnt help me. What program supplies gui login?  Or maybe
  what config file sets up the login screen? I dont like the idea that
  debian builds that jail and I cant get out.  Hoyt
  
 
 I try to avoid the gui login, so I'm not sure.  But I'm pretty sure I've
 seen references to it.
 
 -- 
 monique
 PLEASE don't CC me.  Please.  Pretty please with sugar on top.
 Whatever it takes, just don't CC me!  I'm already subscribed!!
 
Thanks I think Kent West just gave me the information I need.
Hoyt


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Nov 05, 2003 at 09:19:30AM -0600, Kent West wrote:
 John Peter wrote:
 I don't know what else you may require - it will hardly wash your car ...
 
 That explains the condition of my vehicle! Well then, forget Debian. I'm 
 switching to Novell/SuSE.

Drive it Northwest style: Don't wash it until the grass growing in the
dirt starts affecting the gas mileage.  Bill Nye is the only person
I've seen that had a car demonstrating the result.

- -- 
 .''`. Paul Johnson [EMAIL PROTECTED]
: :'  :
`. `'` proud Debian admin and user
  `-  Debian - when you have better things to do than fix a system
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/qadCUzgNqloQMwcRAiDfAJ9AtWlcAG/AGfDK6JXAmgT8TResDACg2Nh2
+KMf9boSF8OnwaIOSo3zSfg=
=/1F5
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-05 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Nov 05, 2003 at 03:24:02PM -0700, Monique Y. Herman wrote:
 Please consider that the reason that Debian is set up with certain
 defaults is that -- brace yourself -- overwhelmingly, the debian users
 like it that way.  Debian users tend to prefer security to ease of use.
 Debian users tend to prefer command-line solutions to GUIs.  Debian
 users tend to want to understand their system, not just use it.

I've read in more than one computer magazine complimenting Debian with
the idea that Debian is the community successor to ATT UNIX.  Whether
or not this is the case, I take it as a compliment.

- -- 
 .''`. Paul Johnson [EMAIL PROTECTED]
: :'  :
`. `'` proud Debian admin and user
  `-  Debian - when you have better things to do than fix a system
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/qajAUzgNqloQMwcRAlg8AJ9FjGOyx2moqCq0oz/kjUNS1+YnMQCeNvwM
UbTzqCSozaDaIOYSKbv/6Lk=
=gbE1
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread Hoyt Bailey

- Original Message - 
From: Jacob S. [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, November 03, 2003 19:11
Subject: Re: GUI login screen.
Thats one way but cant I have a choice. of -r or -h.
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread Rob Weir
On Mon, Nov 03, 2003 at 08:47:50PM -0800, Paul Johnson said
 On Mon, Nov 03, 2003 at 06:02:27PM -0600, Hoyt Bailey wrote:
  There are a few things I dont understand about Debians login screen.
  1.  Root cannot log in on this screen.  Why?
 
 Because it's dangerous and stupid.  Just use su -m when you need root,
 and end that session as soon as you don't need root anymore.

Better still, sudo, so you have to consciously think about whether each
command requires root privileges.  Also, the audit trail is handy if you
screw up.

-- 
Rob Weir [EMAIL PROTECTED] | [EMAIL PROTECTED]  |  Do I look like I want a CC?
Words of the day: Becker cryptographic gamma global Mena Axis Of Evil Mafia


signature.asc
Description: Digital signature


Re: GUI login screen.

2003-11-04 Thread Hoyt Bailey

- Original Message - 
From: Paul Johnson [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Monday, November 03, 2003 22:47
Subject: Re: GUI login screen.


 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 On Mon, Nov 03, 2003 at 06:02:27PM -0600, Hoyt Bailey wrote:
  There are a few things I dont understand about Debians login screen.
  1.  Root cannot log in on this screen.  Why?

 Because it's dangerous and stupid.  Just use su -m when you need root,
 and end that session as soon as you don't need root anymore.

 - -- 
  .''`. Paul Johnson [EMAIL PROTECTED]
 : :'  :
 `. `'` proud Debian admin and user
   `-  Debian - when you have better things to do than fix a system
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.2.3 (GNU/Linux)

 iD8DBQE/py92UzgNqloQMwcRAitLAKC41oUDBhNmneFTUfspCdQQgY1BkwCfdOK8
 qkMhqTK4SbfPRj2De8liM0E=
 =3hkr
 -END PGP SIGNATURE-

Ok  for us stupid newbies.  Why is it dangerous and stupid.  RH and Caldera
support an item in their login screen called I believe Consol which dumps
you back to prior to startx and I recall root was included on the login
screen.  I would like at least the promise made after the logout button is
pushed to be provided and I dont think that is unreasonable.
Regards;
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread Hoyt Bailey

- Original Message - 
From: Kent West [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Monday, November 03, 2003 23:08
Subject: Re: GUI login screen.


 Hoyt Bailey wrote:

 There are a few things I dont understand about Debians login screen.
 1.  Root cannot log in on this screen.  Why?
 
 
 
 Security issues.

At the expense of being a stupid newbie, what security issues RH and Caldera
both have root on their login screen.  Has the rash of virisus caused a
reconsideration of this.  Not being disposed in this direction or capable of
exploting any security hole I dont understand the problem.

 2.  The sessions secect drop down menu has: Gnome, Gnome chooser, Debian,
 KDE, Xsession, Failsafe Gnome, Failsafe KDE.  When you leave Gnome or KDE
by
 pressing the logout button you are told that you can logout, change
logins
 or shutdown.  Well I cant figure out how to shutdown other than login as
me
 and start a terminal su, enter password, and issue the shutdown command.
 This is too much Cntl-alt-del would be simpler assuming I wanted to go to
 Windows,  But how do you to go to shutdown -h now?
 
 
 

 As a normal user, you don't have permission to shut down. You have to
 reconfigure whatever session manager you're using (kdm, gdm, wdm, xdm)
 and edit the appropriate config file to allow normal users (or at least
 you) to shut down. Figure out which session manager you're using and let
 us know (ps ax | grep [d]m should give you a good clue), and then we
 can probably be more specific as to what needs to be changed in what file.

 -- 
 Kent

On a network I can understand why a normal used cannot shutdown the system,
but a single user should be able to shutdown, reboot, etc, without becoming
root.  This shouldnt be a big problem.  The output of ps ax | grep [d]m
(some day I'll understand that grep command):
380 ?S/usr/bin/gdm
391 ?S/usr/bin/gdm
392 ?S/usr/bin/X11/X:0 -deferglyphs 16 -nolisten tcp vt7 -auth
/var/lib/gdm/:0,xauth
?shouldnt there be only 1 (either 380 or 391) and what does 392 mean.
Regards;
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen and non-root shutdown...

2003-11-04 Thread S. Hakim Hamdani
 As a normal user, you don't have permission to shut down. You have to
 reconfigure whatever session manager you're using (kdm, gdm, wdm, xdm)
 and edit the appropriate config file to allow normal users (or at least
 you) to shut down. Figure out which session manager you're using and let
 us know (ps ax | grep [d]m should give you a good clue), and then we
 can probably be more specific as to what needs to be changed in what file.

That would be appreciated, also from my side. I found it a bit strange
yesterday, when I reinstalled debian on a laptop, that I couldnt login as
root graphically, and also that as a normal user I cant shutdown or reboot
graphically or in text. Only via su.

Also, how can one get out of the whole x system under Debian? To get back into
text mode? I also havent found a method of booting into text.

Regards, Hakim.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen and non-root shutdown...

2003-11-04 Thread Johannes Zarl
 Also, how can one get out of the whole x system under Debian? To get
 back into text mode? I also havent found a method of booting into text.


You can always switch to text-mode via CtrlAltFx. Another solution is 
to press Altn during the kdm-login-screen (I don't know about gdm, 
though).

If you want to always start into text-mode, just edit /etc/X11/
default-display-manager not to start your kdm/gdm/xdm.

If you want to start into text-mode only sometimes you could also make your 
default-runlevel (in /etc/inittab) 5 (3 or 4 should also work) instead of 
2 and rename the Sxx[kgx]dm in /etc/rc2.d/ to Kxx[kgx]dm. Then whenever 
you want to boot into text-mode you can give 2 as kernel-parameter, so 
that init activates runlevel 2.

HTH
  Johannes

-- 
More than machinery we need humanity -- Charlie Chaplin, The Great 
Dictator


pgp0.pgp
Description: signature


Re: GUI login screen and non-root shutdown...

2003-11-04 Thread Colin Watson
On Tue, Nov 04, 2003 at 03:22:21PM +0100, S. Hakim Hamdani wrote:
 That would be appreciated, also from my side. I found it a bit strange
 yesterday, when I reinstalled debian on a laptop, that I couldn´t login as
 root graphically, and also that as a normal user I can´t shutdown or reboot
 graphically or in text. Only via su.

gdm seems to let you shutdown or reboot if you configure it to let you
(System / Configure, if I remember correctly).

 Also, how can one get out of the whole x system under Debian? To get
 back into text mode?

Ctrl-Alt-F1. (Ctrl-)Alt-F7 gets you back to X.

Cheers,

-- 
Colin Watson  [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen and non-root shutdown...

2003-11-04 Thread S. Hakim Hamdani
 just logout and it will go to text mode or use ctrl+alt+F1 if you use the
 latter simply press ctrl+alt+F7 to get back to graphical mode

When I do that, I get back to the login screen, and no way of getting out of
there, except killing the xserver, which is a bit harsh.

H.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread Roberto Sanchez
Hoyt Bailey wrote:

There are a few things I dont understand about Debians login screen.
1.  Root cannot log in on this screen.  Why?
Because it's dangerous and stupid.  Just use su -m when you need root,
and end that session as soon as you don't need root anymore.
[snip]
Ok  for us stupid newbies.  Why is it dangerous and stupid.  RH and Caldera
support an item in their login screen called I believe Consol which dumps
you back to prior to startx and I recall root was included on the login
screen.  I would like at least the promise made after the logout button is
pushed to be provided and I dont think that is unreasonable.
Regards;
Hoyt
Because when you login, every process runs with the permissions of the
user that started it.  So logging into X as root is dangerous becuase it
makes it very easy to make a mistake and accidentally delete something
or otherwise hose your system.
As far as virsuses, if you happened to get one through email (unlikely)
or fro untarring an unknown tarball, it would have root permissions and
could easily wreak havoc.
The idea of the root account is that it is for system maintenance, and
should only be used for that.  Thus, when you encounter a specific task
like updating with apt, you use su or sudo and accomplish the task and
then go back to being a normal user.
The reason why distros like RH and Caldera support it is that much of
their market (I believe) is former Windows admins or people running
mixed shops.  Once you are accustomed to the crutch of a GUI on a server
it is difficult to change your way of thinking.  In fact, you can setup
GDM or KDM to allow root login, but Debian has it disabled by default.
It is disabled for precisely the reasons I mentioned above.  It is very
risky to run so many processes as root.
-Roberto

-Roberto


pgp0.pgp
Description: PGP signature


Re: GUI login screen.

2003-11-04 Thread Ken Gilmour
Well i think the best solution to get around this is to setup a normal user account... 
then edit the /etc/passwd file and set that person with root permissions so as soon as 
they login theyre automatically made root.

Best Regards,

Ken Gilmour
You may be beautiful but they're keeping my idea on file.

Registered Linux User # 330371
http://counter.li.org


Replying to the message sent by Roberto Sanchez  on Tue, 04 Nov 2003 09:41:02 -0500, 
received at 16:27:29 on 04/11/2003. Roberto Sanchez wrote:
Hoyt Bailey wrote:

There are a few things I dont understand about Debians login screen.
1.  Root cannot log in on this screen.  Why?

Because it's dangerous and stupid.  Just use su -m when you need root,
and end that session as soon as you don't need root anymore.

[snip]

 Ok  for us stupid newbies.  Why is it dangerous and stupid.  RH and Caldera
 support an item in their login screen called I believe Consol which dumps
 you back to prior to startx and I recall root was included on the login
 screen.  I would like at least the promise made after the logout button is
 pushed to be provided and I dont think that is unreasonable.
 Regards;
 Hoyt

Because when you login, every process runs with the permissions of the
user that started it.  So logging into X as root is dangerous becuase it
makes it very easy to make a mistake and accidentally delete something
or otherwise hose your system.

As far as virsuses, if you happened to get one through email (unlikely)
or fro untarring an unknown tarball, it would have root permissions and
could easily wreak havoc.

The idea of the root account is that it is for system maintenance, and
should only be used for that.  Thus, when you encounter a specific task
like updating with apt, you use su or sudo and accomplish the task and
then go back to being a normal user.

The reason why distros like RH and Caldera support it is that much of
their market (I believe) is former Windows admins or people running
mixed shops.  Once you are accustomed to the crutch of a GUI on a server
it is difficult to change your way of thinking.  In fact, you can setup
GDM or KDM to allow root login, but Debian has it disabled by default.
It is disabled for precisely the reasons I mentioned above.  It is very
risky to run so many processes as root.

-Roberto

-Roberto



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen and non-root shutdown...

2003-11-04 Thread Kent West
S. Hakim Hamdani wrote:
just logout and it will go to text mode or use ctrl+alt+F1 if you use the
latter simply press ctrl+alt+F7 to get back to graphical mode


When I do that, I get back to the login screen, and no way of getting out of
there, except killing the xserver, which is a bit harsh.
H.


I'm not sure what you're saying.
 -- If you're logged into X, and press Ctrl-Alt-Fx, you'll switch to 
VTx (e.g. Ctrl-Alt-F3 to go to VT3), and from there, if you hit 
(Ctrl-)Alt-F7 (in most cases; F5 I believe with Knoppix, etc), you'll 
switch back to your open session in X.
 -- If you're not logged into X, but are sitting at the GUI login 
screen (such as gdm or kdm), and you do the above procedure, you'll 
switch to the VTx, then back to the GUI login screen.

If you want to shut down the GUI login screen and just have text mode, 
switch to VTx, and then run something like /etc/init.d/gdm stop as 
root. This particular command will shut down the gdm GUI login screen.



Free Tip for You and Your Friends/Family:
-
If you have an X session going, and you switch to a VTx, you can then 
log in as a different user and start a second X session with a command 
like startx -- :1. Go to a third VT and start a third session with a 
command like startx -- :2). You can then switch between these X 
sessions with Ctrl-Alt-F[7|8|9]. NOTE: Test first when you don't have 
anything important running; some video setups can't handle this and 
might freeze the box.

--
Kent


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread Kent West
Ken Gilmour wrote:
Well i think the best solution to get around this is to setup a normal user account... then edit the /etc/passwd file and set that person with root permissions so as soon as they login theyre automatically made root.



Umm, no. That means you're still capable of doing nasty things to your 
system. It's much better to use su or sudo to do root-type things, 
or if we're still talking about rebooting/shutdowns from the GUI login 
manager (gdm, kdm, etc), to configure that login manager to allow 
non-root access to these functions.

--
Kent


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread Rob Weir
[Please wrap your lines!  It makes it much easier to read, and thus more
likely that you'll get a response.  Anywhere between 70 and 80 is
acceptable; 72 seems to be a nice value.]

On Tue, Nov 04, 2003 at 04:28:38PM +, Ken Gilmour said
 Well i think the best solution to get around this is to setup a normal
 user account... then edit the /etc/passwd file and set that person
 with root permissions so as soon as they login theyre automatically
 made root.

Uh, why?  If you really, truly want to run as root, then run as root.
Making a second uid 0 account is no security at all.  The normal user,
then sudo when you need to mantra may be old, but it's still extremely
good advice.

-- 
Rob Weir [EMAIL PROTECTED] | [EMAIL PROTECTED]  |  Do I look like I want a CC?
Words of the day: AGT. AMME digicash Subversion beanpole BCCI Marxist asset


signature.asc
Description: Digital signature


Re: GUI login screen and non-root shutdown...

2003-11-04 Thread Jacob S.
On Tue, 04 Nov 2003 10:56:47 -0600
Kent West [EMAIL PROTECTED] wrote:

snip
 I'm not sure what you're saying.
   -- If you're logged into X, and press Ctrl-Alt-Fx, you'll switch to 
 VTx (e.g. Ctrl-Alt-F3 to go to VT3), and from there, if you hit 
 (Ctrl-)Alt-F7 (in most cases; F5 I believe with Knoppix, etc), you'll 
 switch back to your open session in X.

It's still F7 as of Knoppix v. 3.2.

   -- If you're not logged into X, but are sitting at the GUI login 
 screen (such as gdm or kdm), and you do the above procedure, you'll 
 switch to the VTx, then back to the GUI login screen.
 
 If you want to shut down the GUI login screen and just have text mode,
 
 switch to VTx, and then run something like /etc/init.d/gdm stop as 
 root. This particular command will shut down the gdm GUI login screen.

I think this is the part that was confusing him. He was trying to logout
and it was simply taking him back to the gdm login screen.
/etc/init.d/gdm stop is a much better way, as you mention.

Jacob

- 
GnuPG Key: 1024D/16377135

.vbs = Virus Bearing Script?


pgp0.pgp
Description: PGP signature


Re: GUI login screen.

2003-11-04 Thread Monique Y. Herman
On Tue, 04 Nov 2003 at 13:52 GMT, Hoyt Bailey penned:
 On a network I can understand why a normal used cannot shutdown the
 system, but a single user should be able to shutdown, reboot, etc,
 without becoming root.  This shouldnt be a big problem.

In fact, I think it's critical for a machine to which a user has
physical access.  If the user wants to reboot the machine, no matter how
ill-advisedly, I'd rather they use the software version than the power
button.


-- 
monique
PLEASE don't CC me.  Please.  Pretty please with sugar on top.
Whatever it takes, just don't CC me!  I'm already subscribed!!


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread David Jardine
On Tue, Nov 04, 2003 at 11:09:53AM -0700, Monique Y. Herman wrote:
 
 
 PLEASE don't CC me.  Please.  Pretty please with sugar on top.
 Whatever it takes, just don't CC me!  I'm already subscribed!!
 

You know, it must be so obvious to you experienced people, but 
there are some of us out here that take ages to discover that 
in mutt, for example, we should press 'L' instead of 'r' to 
send a list reply.

-- 
David Jardine

Running Debian GNU/Linux and
loving every minute of it. -Sacher M.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen and non-root shutdown...

2003-11-04 Thread csj
On Tue, 04 Nov 2003 10:56:47 -0600,
Kent West wrote:

[...]

 If you have an X session going, and you switch to a VTx, you
 can then log in as a different user and start a second X
 session with a command like startx -- :1. Go to a third VT
 and start a third session with a command like startx --
 :2). You can then switch between these X sessions with
 Ctrl-Alt-F[7|8|9]. NOTE: Test first when you don't have
 anything important running; some video setups can't handle this
 and might freeze the box.

If you have gdm installed and running you can run
gdmflexiserver.  (Recommended only for home users.)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread Monique Y. Herman
On Tue, 04 Nov 2003 at 21:14 GMT, David Jardine penned:
 On Tue, Nov 04, 2003 at 11:09:53AM -0700, Monique Y. Herman wrote:
 
 
 PLEASE don't CC me.  Please.  Pretty please with sugar on top.
 Whatever it takes, just don't CC me!  I'm already subscribed!!
 
 
 You know, it must be so obvious to you experienced people, but there
 are some of us out here that take ages to discover that in mutt, for
 example, we should press 'L' instead of 'r' to send a list reply.
 

I would never claim that it's so obvious.  I'm just requesting that I
not be CC'd.  The mechanics of not getting CC'd, of course, depend on
the person and the client they're using.  I do set some headers to
encourage the mail client to do the right thing, but unfortunately, not
all clients respect them.

-- 
monique
PLEASE don't CC me.  Please.  Pretty please with sugar on top.
Whatever it takes, just don't CC me!  I'm already subscribed!!


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread Hoyt Bailey

- Original Message - 
From: Rob Weir [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Tuesday, November 04, 2003 01:28
Subject: Re: GUI login screen.

Guess I will have to.
Regards;
Hoyt 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread Hoyt Bailey

- Original Message - 
From: Roberto Sanchez [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Tuesday, November 04, 2003 08:41
Subject: Re: GUI login screen.

I do not dissagree on any point.  However it should be my choice.  Should I
do something so stupid as download as root or read mail then I will be the
one to pick up what pieces are left. I am sure you have heard of welcha and
blaster, been there done that, they dont ask permission.  Maybe you dont
understand what I, and others,  want.  Idealy if the gui login screen added
3 items it would solve a lot of problems and would not incur any security
risks.
1. Reboot (If I want to go to Windows)
2. Shutdown (If I want to go to bed)
3. Text mode.(If I want to do something as root)
Incidently Cntl-alt-del doesnt work from gnome. I expected it would.
Regards;
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread Monique Y. Herman
On Wed, 05 Nov 2003 at 00:19 GMT, Hoyt Bailey penned:
 
 - Original Message - From: Roberto Sanchez
 [EMAIL PROTECTED] To: debian-user
 [EMAIL PROTECTED] Sent: Tuesday, November 04, 2003 08:41
 Subject: Re: GUI login screen.
 
 I do not dissagree on any point.  However it should be my choice.
 Should I do something so stupid as download as root or read mail then
 I will be the one to pick up what pieces are left. I am sure you have
 heard of welcha and blaster, been there done that, they dont ask
 permission.  Maybe you dont understand what I, and others,  want.
 Idealy if the gui login screen added 3 items it would solve a lot of
 problems and would not incur any security risks.  1. Reboot (If I want
 to go to Windows) 2. Shutdown (If I want to go to bed) 3. Text
 mode.(If I want to do something as root) Incidently Cntl-alt-del
 doesnt work from gnome. I expected it would.  Regards; Hoyt
 
 

I think you *can* set things up such that root can log in from the gui.
It's just not set up that way in the *default* debian configuration.

-- 
monique
PLEASE don't CC me.  Please.  Pretty please with sugar on top.
Whatever it takes, just don't CC me!  I'm already subscribed!!


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, Nov 04, 2003 at 07:08:11AM -0600, Hoyt Bailey wrote:
 Ok  for us stupid newbies.  Why is it dangerous and stupid.  RH and Caldera
 support an item in their login screen called I believe Consol which dumps
 you back to prior to startx and I recall root was included on the login
 screen. 

KDM does that, as well.

- -- 
 .''`. Paul Johnson [EMAIL PROTECTED]
: :'  :
`. `'` proud Debian admin and user
  `-  Debian - when you have better things to do than fix a system
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/qGGVUzgNqloQMwcRAmKLAKDHVAAUgrFHnF1eECX3IV0qi43sogCfW1Br
iEu/EXhvVYYEYQeXB62hAbo=
=yB0D
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Nov 05, 2003 at 04:24:21AM +1100, Rob Weir wrote:
 [Please wrap your lines!  It makes it much easier to read, and thus more
 likely that you'll get a response.  Anywhere between 70 and 80 is
 acceptable; 72 seems to be a nice value.]
 
 On Tue, Nov 04, 2003 at 04:28:38PM +, Ken Gilmour said
  Well i think the best solution to get around this is to setup a normal
  user account... then edit the /etc/passwd file and set that person
  with root permissions so as soon as they login theyre automatically
  made root.

And you now have two possible passwords to gain access to super-user
access, you've doubled the odds of someone gaining root by
brute-force.

- -- 
 .''`. Paul Johnson [EMAIL PROTECTED]
: :'  :
`. `'` proud Debian admin and user
  `-  Debian - when you have better things to do than fix a system
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/qGOrUzgNqloQMwcRAluYAJ9xnIprjQyW7bIS3HiMk3MJpFReegCgjRIe
kTG9NDPO/nlyfJTAgabY6Ck=
=izx3
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-04 Thread Kent West
Hoyt Bailey wrote:

- Original Message - 
From: Roberto Sanchez [EMAIL PROTECTED]
To: debian-user [EMAIL PROTECTED]
Sent: Tuesday, November 04, 2003 08:41
Subject: Re: GUI login screen.

I do not dissagree on any point.  However it should be my choice.  Should I
do something so stupid as download as root or read mail then I will be the
one to pick up what pieces are left. I am sure you have heard of welcha and
blaster, been there done that, they dont ask permission.  Maybe you dont
understand what I, and others,  want.  Idealy if the gui login screen added
3 items it would solve a lot of problems and would not incur any security
risks.
1. Reboot (If I want to go to Windows)
2. Shutdown (If I want to go to bed)
3. Text mode.(If I want to do something as root)
 

You can set Debian up to do this; Debian is just set up to not do this 
by default. You can always over-ride defaults, but Debian does not have 
the purpose of winning people over with trinkets; Debian is designed for 
stability, security, robustness, Freedom, ease of maintenance. What 
you're asking for is more of a feature found on single-user computers; 
Debian tends to be geared more toward multi-user computers.

In other words; it is your choice. But it's not the default.

All you have to do is figure out how to over-ride the defaults. Since I 
usually don't use gdm or kdm, etc, I'm not familiar with where those 
things are set up. But looking in KDE real quick, I see there's a 
Control Panel, with a Login Manager control, that has a Sessions tab, 
that looks to be just what you're looking for. I suspect gdm and others 
have similar options.

Incidently Cntl-alt-del doesnt work from gnome. I expected it would.
 

I believe you'll find that it doesn't work anywhere in X, not just 
Gnome. Unless of course you've reconfigured your window manager/etc for 
it to work. I have no idea where that setting might be.

--
Kent


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



GUI login screen.

2003-11-03 Thread Hoyt Bailey
There are a few things I dont understand about Debians login screen.
1.  Root cannot log in on this screen.  Why?

2.  The sessions secect drop down menu has: Gnome, Gnome chooser, Debian,
KDE, Xsession, Failsafe Gnome, Failsafe KDE.  When you leave Gnome or KDE by
pressing the logout button you are told that you can logout, change logins
or shutdown.  Well I cant figure out how to shutdown other than login as me
and start a terminal su, enter password, and issue the shutdown command.
This is too much Cntl-alt-del would be simpler assuming I wanted to go to
Windows,  But how do you to go to shutdown -h now?
Regards;
Hoyt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-03 Thread Jacob S.
On Mon, 3 Nov 2003 18:02:27 -0600
Hoyt Bailey [EMAIL PROTECTED] wrote:

 There are a few things I dont understand about Debians login screen.
 1.  Root cannot log in on this screen.  Why?
 
 2.  The sessions secect drop down menu has: Gnome, Gnome chooser,
 Debian, KDE, Xsession, Failsafe Gnome, Failsafe KDE.  When you leave
 Gnome or KDE by pressing the logout button you are told that you can
 logout, change logins or shutdown.  Well I cant figure out how to
 shutdown other than login as me and start a terminal su, enter
 password, and issue the shutdown command. This is too much
 Cntl-alt-del would be simpler assuming I wanted to go to Windows,  But
 how do you to go to shutdown -h now? Regards;
 Hoyt

I'll let one of the security gurus explain #1 to you.

A quick solution for #2 though, is to edit /etc/inittab and look for the
line containing ctrlaltdel, then change the -r to -h. Here's what the
unedited line looks like on my Debian Woody system:

ca:12345:ctrlaltdel:/sbin/shutdown -t1 -a -r now

HTH,
Jacob

- 
GnuPG Key: 1024D/16377135

With Windows Millennium, Microsoft was able to get the boot time down to
25 seconds. That's almost as short as it's uptime. 


pgp0.pgp
Description: PGP signature


Re: GUI login screen.

2003-11-03 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Mon, Nov 03, 2003 at 06:02:27PM -0600, Hoyt Bailey wrote:
 There are a few things I dont understand about Debians login screen.
 1.  Root cannot log in on this screen.  Why?

Because it's dangerous and stupid.  Just use su -m when you need root,
and end that session as soon as you don't need root anymore.

- -- 
 .''`. Paul Johnson [EMAIL PROTECTED]
: :'  :
`. `'` proud Debian admin and user
  `-  Debian - when you have better things to do than fix a system
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/py92UzgNqloQMwcRAitLAKC41oUDBhNmneFTUfspCdQQgY1BkwCfdOK8
qkMhqTK4SbfPRj2De8liM0E=
=3hkr
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: GUI login screen.

2003-11-03 Thread Kent West
Hoyt Bailey wrote:

There are a few things I dont understand about Debians login screen.
1.  Root cannot log in on this screen.  Why?
 

Security issues.

2.  The sessions secect drop down menu has: Gnome, Gnome chooser, Debian,
KDE, Xsession, Failsafe Gnome, Failsafe KDE.  When you leave Gnome or KDE by
pressing the logout button you are told that you can logout, change logins
or shutdown.  Well I cant figure out how to shutdown other than login as me
and start a terminal su, enter password, and issue the shutdown command.
This is too much Cntl-alt-del would be simpler assuming I wanted to go to
Windows,  But how do you to go to shutdown -h now?
 

As a normal user, you don't have permission to shut down. You have to 
reconfigure whatever session manager you're using (kdm, gdm, wdm, xdm) 
and edit the appropriate config file to allow normal users (or at least 
you) to shut down. Figure out which session manager you're using and let 
us know (ps ax | grep [d]m should give you a good clue), and then we 
can probably be more specific as to what needs to be changed in what file.

--
Kent

 



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]