Re: can't delete file even after chmod 777 rm -f

2005-03-12 Thread Danie Du Toit
The attributes for the /home/robot and /home/mlbot by default set to
755. To have a users in the same group delete files from these
directories, you need to set the directory attributes to 775.


On Sat, 12 Mar 2005 16:47:03 -0500, Gary Stanny [EMAIL PROTECTED] wrote:
 
 Howdy -
 
 I'm having a weird problem. My users can't delete each other's files.
 Even if I chmod 777 the target file and use a rm -f cmd. Of course root
 can delete the files. Both users are in wheel.
 
 stanny ls -l  bf_com_exit_rpt.txt
 -rwxrwxrwx  1 robot  wheel  5241 Mar 11 16:30 bf_com_exit_rpt.txt
 
 stanny rm  bf_com_exit_rpt.txt
 rm: bf_com_exit_rpt.txt: Operation not permitted
 
 stanny rm -f  bf_com_exit_rpt.txt
 rm: bf_com_exit_rpt.txt: Operation not permitted
 
 cat /etc/passwd -
 stanny:*:1000:0:Gary Stanny:/home/stanny:/usr/local/bin/zsh
 robot:*::0:Mr. Robot:/home/robot:/usr/local/bin/zsh
 mlbot:*:9998:0:Mail Bot:/home/mlbot:/usr/local/bin/zsh
 
 stanny cat /etc/group
 # $FreeBSD: src/etc/group,v 1.19.2.1 2001/11/24 17:22:24 gshapiro Exp $
 #
 wheel:*:0:root,stanny,robot,mlbot
 
 Please also CC me direct as I get the list via digest.
 
 Thanks a bunch.
 
 cheers
 
 gary
 
 Gary Stanny  Tierra del Fuego Ltd.www.TDFltd.com
 [EMAIL PROTECTED]Financial Software   734-449-8306 (voice/fax)
 7725 Shady Beach Dr  Whitmore Lake, MI, 48189 USA
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


sshd - public key vs keyboard interactive authentication

2005-03-06 Thread Danie Du Toit
5.3 with OpenSSH.

Using public key authentication:

I generated/converted my keys - all set, I can ssh to the box using
the keys (no user authentication, I get logged in)

Using password authentication:

I can still ssh using interactive keyboard password authentication
(without using public/private keys).

So, my questions:

1. How do I disable password authentication - i.e. force to use the DSA keys?

2. Can I use both for added security - i.e.  using the keys and then
get prompted for password?

Any help appreciated - thanks
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sshd - public key vs keyboard interactive authentication

2005-03-06 Thread Danie Du Toit
Thanks for the responses - all set!


On Mon, 07 Mar 2005 01:58:30 +, Chris Hodgins
[EMAIL PROTECTED] wrote:
 Jeff With wrote:
 So, my questions:
 
 1. How do I disable password authentication - i.e. force to use the DSA 
 keys?
 
 
  Make sure all 'password' auth is disabled and publickey is enabled.
 
  sshd_config
 
  PasswordAuthentication no
  UseLogin no
  UsePAM no
  PubkeyAuthentication yes
 
 
 2. Can I use both for added security - i.e.  using the keys and then
 get prompted for password?
 
 
  There was some work stared on this type of thing last year, but I
  don't think it was every finalized...
 
  http://marc.theaimsgroup.com/?l=openssh-unix-devm=108552250117169w=2
 
  - jw
 
 You can add a passphrase to your key using ssh-keygen.  If you use a
 password you get something like this when you login.
 
 [EMAIL PROTECTED]:/usr/home/chris$ ssh myserver.net
 Enter passphrase for key '/home/chris/.ssh/id_dsa':
 
 Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Secure file transfers

2005-02-10 Thread Danie Du Toit
Which packages are available to upload /download large dumpfiles in a
secure fashion (e.g. using SSL). The customer should not need any
secure client installed on his PC.

Thanks
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Secure file transfers

2005-02-10 Thread Danie Du Toit
I am sorry, the requirements was a bit vague.

A customer will call in with a issue and I'll request they send me log
files, crashdumps, sniffer traces, etc.If  the info is, say less
than 5MB, I request they mail me the file zipped (password encryped)
as most users do not have pgp or a secure ftp client (mostly windows
users). Larger files must be FTP'd.  Well of course there is the
security concern.

I believe one can set up a Apache server with SSL to PHP and have the
client browse to the server and upload the files securely (without
having to load any additional client software on their windows
PC's/servers)

I am running a 5.3 box and have some issues installing Apache/SSL/PHP
due to dependencies mismatches.

 


On Thu, 10 Feb 2005 14:40:47 -0600, Andrew L. Gould [EMAIL PROTECTED] wrote:
 On Thursday 10 February 2005 02:28 pm, Anthony Atkielski wrote:
  Danie Du Toit writes:
   Which packages are available to upload /download large dumpfiles in
   a secure fashion (e.g. using SSL). The customer should not need any
   secure client installed on his PC.
 
  Anything that is secure will require appropriate software at both
  ends of the transfer, and thus will require some sort of
  security-aware client on the customer's PC.
 
  SFTP provides secure file transfers.  I use SecureFX on my client
  machine, and the standard SFTP server on the FreeBSD server.
 
 How about webdav over SSL (https)?
 
 The easiest webdav client that I've found in *nix is Konqueror.  Windows
 (2K, XP) and Mac OSX have support for webdav by default.
 
 Andrew Gould
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: how to configure Xorg to run at 1280x1024

2005-02-06 Thread Danie Du Toit
You have two SubSection display's  with depth 8 - try remove the second one :

SubSection Display
   Viewport   0 0
   Depth 8
   EndSubSection


On Sun, 6 Feb 2005 06:42:23 +0100, Dejan Lesjak [EMAIL PROTECTED] wrote:
 Gary Kline wrote:
 
  People,
 
  One of my larger servers has 5.3 and Xorg; I can't find the
  right configuration setting for the display; so it runs at
  its maximum: 1600x1200.  This would be fine except that the
  apps shake with tiny wavy lines.  The driver may be pushing
  things to their limit.
 
  I've tried X -configure and Xorg -conf.  Somehow or other
  I've generated an xorg.conf in /etc/X11, but no luck in
  changing the resolution.   The closest I've come to having
  things work with xorg.conf and startx is to see a blank/grey
  screen--at 1600x1200.  I have ctwm set up in /root and
  /home/kline.
 
  Modifying the Screen Section messes things up for some
  reason.  I finally *do* have xorg working with /etc/X11/xorg.conf
  but only with the following commented:
 
 Try putting something like this:
 Option PreferredMode 1280x1024
 in Section Monitor.
 What do you mean by messes things up with the modified Screen Section? Do
 you get errors? Do note that you can't have more than one Screen section with
 same Identifier string.
 
 
 Dejan
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Configuring Ethernet Interface for 100 Half Duplex

2004-01-29 Thread Danie du Toit

   I need t= o set up a spare Ethernet Interface as 100Mb/s Half Duplex,
   with no IP pr= otocol info and permanently in promiscuous mode.

   Currently the card autosense 100 Full - = I want to set up a IDS
   interface. I could not find it in ifconfig, so I g= uess it is done on
   init?

   Thanks

   dsh
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: how to tell if my ISP is blocking email web ports

2004-01-21 Thread Danie du Toit

   Just run tc= pdump / ethereal (or any sniffer) on a PC at your place
   and telnet throug= h the Internet to your IP address on ports 110, 80,
   25.  If you can = see this packets, your ISP is not blocking it.
   freebsd-ques= [EMAIL PROTECTED] wrote:

 Send freebsd-questions mailing list submiss= ions to
 [EMAIL PROTECTED]
 To subscribe or unsubsc= ribe via the World Wide Web, visit
 http://lists.freebsd.org/mailman/l= istinfo/freebsd-questions
 or, via email, send a message with subject = or body 'help' to
 [EMAIL PROTECTED]
 You c= an reach the person managing the list at
 [EMAIL PROTECTED] bsd.org
 When replying, please edit your Subject line so it is mor= e
 specific
 than Re: Contents of freebsd-questions digest...
 Today's Topics:
 1. Re: How to mount a FreeBSD-5.1 partition = from FreeBSD-4.9
 (Jerry McAllister)
 2. passwd command problem. (f= [EMAIL PROTECTED])
 3. RE: Unable to mount CDrom in 5.2, reading pas= t threads is of
 no help (fbsd_user)
 4. Re: ipfw/nated stateful ru= les example (Jonathan Chen)
 5. latency (Stas)
 6. ([EMAIL PROTECTED] .com)
 7. Re: Using FreeBSD to burn in computers (Jeremy Faulkner)  BR8. new 
install of 5.2 ISO aft hour system freeze cold reboot
 only = option ([EMAIL PROTECTED])
 9. ALSA drivers (Stas)
 10. Re: ALSA = drivers (Kenneth Culver)
 11. Re: USB sound device questions (multiple= s!)
 (Daan Vreeken [PA4DAN])
 12. Re: latency (Lance E. Lott)
 1= 3. Re: latency (Benjamin Walkenhorst)
 14. Re: latency (Cordula's Web) 15. Re: ALSA drivers (Cordula's Web)
 16. Re: IPFW and Dynamic Ru= les (Dave McCammon)
 17. Re: passwd command problem. (Jonathan Chen) = BR18.
 Monolithic kernel possible in 5.2? (Peter Schmiedeskamp)
 19. R= e: ALSA drivers (Thomas T. Veldhouse)
 20. how to tell if my ISP is bl= ocking email  web ports
 (fbsd_user)
  --
 Message: 1
 Date: Wed, 21 Jan 2004 12:52:32 -0500 (EST)
 From: Jerry McAllister = lt;[EMAIL PROTECTED]
 Subject: Re: How to mount a FreeBSD-= 5.1 partition from
 FreeBSD-4.9
 To: [EMAIL PROTECTED] (Juan Rodrigu= ez Hervella)
 Cc: [EMAIL PROTECTED]
 Message-ID: 20= [EMAIL PROTECTED]
 Content-Type: text/plai= n; charset=us-ascii
 
  On Wednesday 21 January 2004 = 17:26, Sergey 'DoubleF'
 Zaharchenko wrote:
   On Wed, 21 Jan 2= 004 15:52:25 +0100
  
   Juan Rodriguez Hervella l= t;[EMAIL PROTECTED] probably
 wrote:
On Wednesda= y 21 January 2004 14:53, Sergey 'DoubleF'
 Zaharchenko wrote:
  = ;   On Wed, 21 Jan 2004 13:26:25 +0100
 Juan Rodriguez Hervella [EMAIL PROTECTED]= ;
 probably wrote:
  Hello, please send the rep= ly to myself cause Im not
  subscribe to the l= ist
 
  I've got a = FreeBSD-5.1 installation in /dev/ad0s3,
  but = I usually run FreeBSD-4.9 from /dev/ad0s2.

 g= t;5.x uses UFS2 by default. 4.x does not understand
 UFS2.= In short, you
 either re-newfs the 5.x partition = to be UFS1, or you are
 short of luck
 this time. = BR  
I can not believe you !,
  g= t; 
I guess there is (or there will be) some work-= in-progress
 to have
UFS2 support on FreeBSD-4.X system= s.
  
   If only by you:(. I'd suggest you make you= r 5.x partition
 UFS1 and be
   satisfied with that - that's pr= etty much all you can do.
  
Or are we foll= owing Windows way of life here ?
  
   If 5.x cou= ldn't understand 4.x, that would be a bad thing.
 But forcing
  = ; 5.x to be absolutely compatible with 4.x is another bad
 thing.
 = 
   If you were forced to stay that compatible all the ti= me, you
 wouldn't be
   able to do major architectural changes.= If everyone thought
 the same
   way, an Athlon or a P4 would = be a 80286, only MUCH faster
 (which it is
   for most olden DO= S or Windows/16 programs, so your definition
 of
   `Windows wa= y of life' is definitely contrary to mine).
  
   Y= ou don't complain 4.x can't run 5.x binaries, do you?:)
 
 = But the filesystem is a different thing, imho.
 
  For exa= mple, if you use FreeBSD-4.X you can mount
  ext2,ntfs,msdos,cd966= 0,smbfs. if you use Linux, you
  can mount ufs. what's the= reason it is not possible to
  make a program which understands t= he UFS2 filesystem
  under FreeBSD-4.X ? Is there any tecnical bar= rier ? Even
  if the filesystem was mounted read-only (like ntfs= ),
  that would fit me
 Because the development track i= s 5. and that is where new
 things are going. The 4. track get= s necessary bug and
 security fixes, etc now, but not any major new fe= atures.