Re: See what a weak password will get ya?

2004-07-23 Thread Awais Ahmad
Hi,

I haven't caught the start of this thread, but how can you be sure your
core utilities have not been altered?

Do have a record of how they looked before the crack (a backup, MD5 sums
etc, AIDE,Tripwire database)?. IMO, you would really need to examine
those binaries on another box against a known equivalent clean copy or
backup/AIDE/Tripwire database before really being sure.


Awais


On Fri, 2004-07-23 at 12:23, Paul Stolp wrote:
 * Monique Y. Mudama [EMAIL PROTECTED] [2004-07-23 00:04]:
 
  I'd add the suggestion to not use obvious usernames like guest ... 
 
 agree -- I will prob. replace this account name
 
  
  Btw, are you 100% sure they never managed to root you and replace some
  of your files?
 
 I wasn't 100% sure I wasn't cracked when I installed, but I am sure that
 my core utilities are the same as before this attempt. This and clean
 chkrootkit are enough for me, as long as I continue to watch what's
 going on.
 
 Thanks everyone, mostly I was just venting, but hopefully this will help
 prompt anyone who knows of a potential system weakness.
 
 Paul
 -- 
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: nfs locking daemon?

2004-07-23 Thread Awais Ahmad
Yes, lockd. You need to run it on the clients. 

Awais


On Fri, 2004-07-23 at 15:22, Christian Schwarz wrote:
 Hi!
 
 Is there a special nfs locking daemon for NFS-clients?
 
 I'm running a server with nfs-kernel-server and on the server there is a
 lockd process.  If I try to log into GNOME 2.2 on the client (which has
 nfs-mounted home directories), GNOME complains about a problem with your
 operating system configuration: A common cause of this error is that the
 nfslock service has been disabled.  Unfortunately, I can't find a
 nfslock package in Debian.
 
 
 Thanks for your help,
 
 Chris
 
 --  _,, Christian Schwarz
/ o \__   [EMAIL PROTECTED]
!   ___;   [EMAIL PROTECTED], [EMAIL PROTECTED]
\  /
   \\\__/  !PGP-fp: 8F 61 EB 6D CF 23 CA D7  34 05 14 5C C8 DC 22 BA
\  / http://schwarz-online.com
 -.-.,---,-,-..---,-,-.,.-.-
   DIE ENTE BLEIBT DRAUSSEN!
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]