[gentoo-user] logins controlled via Samba AD DC - what did I miss?

2021-02-07 Thread Dan Egli
Hi people. I need a bit of help. I am trying to establish a Samba AD 
domain for purposes of central authentication and printer sharing with 
Windows and Linux hosts. I went through and managed to get the Domain 
created, and I can even talk to the AD DC from another Linux box using 
getent and wbtool and such. So I edited /etc/nsswitch and add winbind to 
the passwd and group lines. Winbind is running, but I still can't login 
as a domain-only user, even though all the mappings are there. I'm sure 
I missed something, but I have no idea what.


Any help is REALLY appreciated.





[gentoo-user] Sharing printers via Cups

2021-02-07 Thread Dan Egli

Hey folks, I'm a bit lost on this, so I hope you can help me out.

I have a computer I want to act as the central print server for a 
network. It would spool all jobs for all printers, and send them out to 
the actual computers the printers are connected to, or to the printer 
itself in the event of a printer directly connected to the network. To 
start with, I have setup the server and added the printer connected to a 
Windows 10 Home computer to it. After a bit of work, I managed to get it 
so I can print a test page from cups and it comes out on the printer. 
But when I try to connect another computer to the printer via the print 
server, the other computer never sends it out. Just says the printer is 
busy.


How can I set this up correctly? To describe exactly what I'm trying to 
do, let's just use four computers in this example. A is the central 
print server. B is the windows client with the printer. C and D are 
linux machines. What I want is if either C or D print something, they 
both send it to A, and then A sends it to B.


Thanks!





Re: [gentoo-user] fail2ban can't find sqlite?

2021-02-07 Thread Dan Egli
You were right. With the debugging tips from Alex Mishustin I was able 
to determine that I had rebuilt 3.9 while fail2ban was using 3.8. I did 
what I SHOULD have done in the first place and did an emerge -DN 
fail2ban. That caused portage to see that Python 3.8 needed to be 
rebuilt, and it did so. Now fail2ban is able to access the sqlite database.


Thanks!

On 2/6/2021 7:03 PM, Michael Orlitzky wrote:

On Sat, 2021-02-06 at 18:46 -0700, Dan Egli wrote:

At first I thought it was complaining about it's own missing module. But
there's no use flag for sqlite in fail2ban. So then I looked at python
itself.  Sure enough, the sqlite use flag was disabled. So I turned it
on and re-emerged python. I also fixed a couple flags on sqlite itself
and re-emerged it. STILL I get this error. How do I fix this?


Just a guess: did you rebuild EVERY version of python, or just one? It
could be that fail2ban is running under a version that you didn't re-
emerge.







Re: [gentoo-user] Re: Gentoo as NAS

2021-02-07 Thread Frank Steinmetzger
Am Fri, Feb 05, 2021 at 10:43:39AM -0600 schrieb Matt Connell (Gmail):

> On Fri, 2021-02-05 at 09:36 +, Michael wrote:
> > Wouldn't a binary distro, potentially purpose built as a NAS and/or HTPC 
> > offering, make more sense?  I don't see what advantage the maintenance 
> > burden 
> > of a Gentoo system has to offer in this use case, other than repurposing 
> > with 
> > little effort an existing Gentoo installation.  :-/
> 
> Running Gentoo on my home server makes the maintenance burden *lower*
> for me because I can use all the same tools I'm used to.  Besides,
> portage is the pinnacle of package managers IMHO.  Using a GNU+Linux
> system without USE flags and such feels like I'm stuck in a hallway,
> with someone else's idea of how software should be configured and
> deployed.

Coincidentally, my NAS is the only Gentoo system left in my menagerie. The
install base is much smaller than on a desktop, which keeps the package
graph to a manageable size (and with, it portage churning time). Every few
months I fire it up to store new movies or grab old ones to watch, and I do
a system update at the same time. That way I won’t lose all of my Gentoo-foo
over time.

I built it in a small cube-format server case and a server-grade mITX board,
and maxed it out with four drives, 6 TB each, plus a small system SSD. They
are used in a raid Z2 data pool, on top of LUKS-encrypted block devices.
This is out of pure paranoia in case I need to send a drive in for warranty.
Currently, I don’t use the system for anything else but media library. For
24/7 services I have a raspi. The power bill just isn’t worth it.

-- 
Gruß | Greetings | Qapla’
Please do not share anything from, with or about me on any social network.

Team work:
Everyone does what he wants, nobody does what he should, and all play along.


signature.asc
Description: PGP signature


Re: [gentoo-user] xf86OpenConsole: Cannot open virtual console 1 (Permission denied)

2021-02-07 Thread Neil Bothwick
On Sun, 7 Feb 2021 14:01:57 -0700, the...@sys-concept.com wrote:

> > [ -z "$SSH_TTY" ] && startx ...
> >
> > to only start it when not using SSH.  
> 
>  What do you suggest?
>  I was planning to get away from "slim" as I think it is getting
>  more unstable; I just need a simple system to start X, log-in over
>  ssh and use x2go session.
> >>>
> >>> Why do you need to start X, doesn't x2go run its own X session? You
> >>> are trying to start X in an SSH session, which is what gives your
> >>> error. The line I suggested runs startx only if you are not logging
> >>> in via SSH. No display manager is involved.
> >>  
> >> Maybe I wasn't clear.  No, I don't start any X over ssh.  
> > 
> > But you do, because you run it from .bash_profile whenever you login.
> > That's why I suggested an alternative command that wouldn't do that.  
> 
> OK, according to Gentoo-wiki:
> https://wiki.gentoo.org/wiki/Start_X_on_login
> 
>  ~/.bash_profile
> if [[ -z $DISPLAY ]] && [[ $(tty) = /dev/tty1 ]]; then exec startx; fi
> The above command works.

It is effectively the same as the one I suggested right at the start of
this thread.


-- 
Neil Bothwick

Windows95 - crash compatible on Windows 3.x


pgpRuUQsb4RY1.pgp
Description: OpenPGP digital signature


Re: [gentoo-user] xf86OpenConsole: Cannot open virtual console 1 (Permission denied)

2021-02-07 Thread thelma
On 2/7/21 1:14 PM, Neil Bothwick wrote:
> On Sun, 7 Feb 2021 12:38:25 -0700, the...@sys-concept.com wrote:
> 
>> I disable "slim" login manager and try not to use any display
>> manger (for simplicity). I start X from:
>>
>>  ~/.bash_profile 
>> exec startx -- vt1
>>
>> but now when I try to ssh as user, I get:
>>
>> (==) Using system config directory "/usr/share/X11/xorg.conf.d"
>> (EE) 
>> Fatal server error:
>> (EE) xf86OpenConsole: Cannot open virtual console 1 (Permission
>> denied)   
>
> Of course you are, because you are still trying to start X. If you
> must start X from .bash_profile, you need something like
>
> [ -z "$SSH_TTY" ] && startx ...
>
> to only start it when not using SSH.

 What do you suggest?
 I was planning to get away from "slim" as I think it is getting more
 unstable; I just need a simple system to start X, log-in over ssh and
 use x2go session.  
>>>
>>> Why do you need to start X, doesn't x2go run its own X session? You
>>> are trying to start X in an SSH session, which is what gives your
>>> error. The line I suggested runs startx only if you are not logging
>>> in via SSH. No display manager is involved.  
>>  
>> Maybe I wasn't clear.  No, I don't start any X over ssh.
> 
> But you do, because you run it from .bash_profile whenever you login.
> That's why I suggested an alternative command that wouldn't do that.

OK, according to Gentoo-wiki:
https://wiki.gentoo.org/wiki/Start_X_on_login

 ~/.bash_profile
if [[ -z $DISPLAY ]] && [[ $(tty) = /dev/tty1 ]]; then exec startx; fi
The above command works.

with: 
~/.xinitrc 
exec startxfce4

Both ssh and x2go sessions (both: connect to local desktop and XFCE) work 
correctly. 



Re: [gentoo-user] xf86OpenConsole: Cannot open virtual console 1 (Permission denied)

2021-02-07 Thread Neil Bothwick
On Sun, 7 Feb 2021 12:38:25 -0700, the...@sys-concept.com wrote:

>  I disable "slim" login manager and try not to use any display
>  manger (for simplicity). I start X from:
> 
>   ~/.bash_profile 
>  exec startx -- vt1
> 
>  but now when I try to ssh as user, I get:
> 
>  (==) Using system config directory "/usr/share/X11/xorg.conf.d"
>  (EE) 
>  Fatal server error:
>  (EE) xf86OpenConsole: Cannot open virtual console 1 (Permission
>  denied)   
> >>>
> >>> Of course you are, because you are still trying to start X. If you
> >>> must start X from .bash_profile, you need something like
> >>>
> >>> [ -z "$SSH_TTY" ] && startx ...
> >>>
> >>> to only start it when not using SSH.
> >>
> >> What do you suggest?
> >> I was planning to get away from "slim" as I think it is getting more
> >> unstable; I just need a simple system to start X, log-in over ssh and
> >> use x2go session.  
> > 
> > Why do you need to start X, doesn't x2go run its own X session? You
> > are trying to start X in an SSH session, which is what gives your
> > error. The line I suggested runs startx only if you are not logging
> > in via SSH. No display manager is involved.  
>  
> Maybe I wasn't clear.  No, I don't start any X over ssh.

But you do, because you run it from .bash_profile whenever you login.
That's why I suggested an alternative command that wouldn't do that.


-- 
Neil Bothwick

Hospitality:  making your guests feel like they're at home, even if you
wish they were.


pgpFeyuXO8KoJ.pgp
Description: OpenPGP digital signature


Re: [gentoo-user] xf86OpenConsole: Cannot open virtual console 1 (Permission denied)

2021-02-07 Thread thelma
On 2/7/21 12:26 PM, Neil Bothwick wrote:
> On Sun, 7 Feb 2021 12:10:50 -0700, the...@sys-concept.com wrote:
> 
>> On 2/7/21 4:09 AM, Neil Bothwick wrote:
>>> On Sun, 7 Feb 2021 01:28:39 -0700, the...@sys-concept.com wrote:
>>>   
 I disable "slim" login manager and try not to use any display manger
 (for simplicity). I start X from:

  ~/.bash_profile 
 exec startx -- vt1

 but now when I try to ssh as user, I get:

 (==) Using system config directory "/usr/share/X11/xorg.conf.d"
 (EE) 
 Fatal server error:
 (EE) xf86OpenConsole: Cannot open virtual console 1 (Permission
 denied) 
>>>
>>> Of course you are, because you are still trying to start X. If you
>>> must start X from .bash_profile, you need something like
>>>
>>> [ -z "$SSH_TTY" ] && startx ...
>>>
>>> to only start it when not using SSH.  
>>
>> What do you suggest?
>> I was planning to get away from "slim" as I think it is getting more
>> unstable; I just need a simple system to start X, log-in over ssh and
>> use x2go session.
> 
> Why do you need to start X, doesn't x2go run its own X session? You are
> trying to start X in an SSH session, which is what gives your error. The
> line I suggested runs startx only if you are not logging in via SSH. No
> display manager is involved.
 
Maybe I wasn't clear.  No, I don't start any X over ssh.

When I'm directly in front of the PC and I have a log-in screen and type user 
ID + passwords 
I was under impression that "startxfce4" would run automatically when from 
.xinitrc
~/.xinitrc  
exec startxfce4

but it doesn't, when I log-in the XFCE4 is not starting automatically, I have 
to type manually: startxfce4



Re: [gentoo-user] xf86OpenConsole: Cannot open virtual console 1 (Permission denied)

2021-02-07 Thread Neil Bothwick
On Sun, 7 Feb 2021 12:10:50 -0700, the...@sys-concept.com wrote:

> On 2/7/21 4:09 AM, Neil Bothwick wrote:
> > On Sun, 7 Feb 2021 01:28:39 -0700, the...@sys-concept.com wrote:
> >   
> >> I disable "slim" login manager and try not to use any display manger
> >> (for simplicity). I start X from:
> >>
> >>  ~/.bash_profile 
> >> exec startx -- vt1
> >>
> >> but now when I try to ssh as user, I get:
> >>
> >> (==) Using system config directory "/usr/share/X11/xorg.conf.d"
> >> (EE) 
> >> Fatal server error:
> >> (EE) xf86OpenConsole: Cannot open virtual console 1 (Permission
> >> denied) 
> > 
> > Of course you are, because you are still trying to start X. If you
> > must start X from .bash_profile, you need something like
> > 
> > [ -z "$SSH_TTY" ] && startx ...
> > 
> > to only start it when not using SSH.  
> 
> What do you suggest?
> I was planning to get away from "slim" as I think it is getting more
> unstable; I just need a simple system to start X, log-in over ssh and
> use x2go session.

Why do you need to start X, doesn't x2go run its own X session? You are
trying to start X in an SSH session, which is what gives your error. The
line I suggested runs startx only if you are not logging in via SSH. No
display manager is involved.
 

-- 
Neil Bothwick

If you got the words it does not mean you got the knowledge.


pgpZy15vtCjES.pgp
Description: OpenPGP digital signature


Re: [gentoo-user] xf86OpenConsole: Cannot open virtual console 1 (Permission denied)

2021-02-07 Thread thelma
On 2/7/21 4:09 AM, Neil Bothwick wrote:
> On Sun, 7 Feb 2021 01:28:39 -0700, the...@sys-concept.com wrote:
> 
>> I disable "slim" login manager and try not to use any display manger
>> (for simplicity). I start X from:
>>
>>  ~/.bash_profile 
>> exec startx -- vt1
>>
>> but now when I try to ssh as user, I get:
>>
>> (==) Using system config directory "/usr/share/X11/xorg.conf.d"
>> (EE) 
>> Fatal server error:
>> (EE) xf86OpenConsole: Cannot open virtual console 1 (Permission denied)
>>
> 
> Of course you are, because you are still trying to start X. If you must
> start X from .bash_profile, you need something like
> 
> [ -z "$SSH_TTY" ] && startx ...
> 
> to only start it when not using SSH.

What do you suggest?
I was planning to get away from "slim" as I think it is getting more unstable; 
I just need a simple system to start X, log-in over ssh and use x2go session.

I removed startx from .bash_profile and put in: ~/.xinitrc  "exec startxfce4"  
and I was under impression that xfce4 will start automatically when I log-in 
but instead I get a user command prompt and have to type:
startxfce4 
But now ssh login works and x2go-session works as well.

So why isn't startxfce4 starts automatically, what am I missing? 



Re: [gentoo-user] forcing Gentoo to accept simple password

2021-02-07 Thread thelma
On 2/7/21 2:58 AM, David Haller wrote:
> Hello,
> 
> On Sat, 06 Feb 2021, the...@sys-concept.com wrote:
>> What changing one need to make to force gentoo log-in to accept
>> simple password. The system is not a high security risk so I have no
>> need for a sophisticated password.
> 
>> I think it has to do something with file: /etc/pam.d/system-auth
> [..]
>> passwordrequiredpam_passwdqc.so 
>> config=/etc/security/passwdqc.conf
> 
> Uninstall sys-auth/passwdqc... From it's manpage:
> 
> 
> DESCRIPTION
>  The pam_passwdqc module is a simple password strength checking
>  module for PAM.
> 
> 
> You need to remove the 'passwdqc' USE flag from sys-auth/pambase, else
> it'll get pulled in again.
> 
> HTH,
> -dnh

Thank you, that worked!
unmerging "sys-auth/passwdqc" and compile "sys-auth/pambase" without "passwdqc" 
 solved the problem   



Re: [gentoo-user] xf86OpenConsole: Cannot open virtual console 1 (Permission denied)

2021-02-07 Thread Neil Bothwick
On Sun, 7 Feb 2021 01:28:39 -0700, the...@sys-concept.com wrote:

> I disable "slim" login manager and try not to use any display manger
> (for simplicity). I start X from:
> 
>  ~/.bash_profile 
> exec startx -- vt1
> 
> but now when I try to ssh as user, I get:
> 
> (==) Using system config directory "/usr/share/X11/xorg.conf.d"
> (EE) 
> Fatal server error:
> (EE) xf86OpenConsole: Cannot open virtual console 1 (Permission denied)
> 

Of course you are, because you are still trying to start X. If you must
start X from .bash_profile, you need something like

[ -z "$SSH_TTY" ] && startx ...

to only start it when not using SSH.


-- 
Neil Bothwick

Mac screen message: "Like, dude, something went wrong."


pgpvlLndERK8K.pgp
Description: OpenPGP digital signature


Re: [gentoo-user] forcing Gentoo to accept simple password

2021-02-07 Thread David Haller
Hello,

On Sat, 06 Feb 2021, the...@sys-concept.com wrote:
>What changing one need to make to force gentoo log-in to accept
>simple password. The system is not a high security risk so I have no
>need for a sophisticated password.

>I think it has to do something with file: /etc/pam.d/system-auth
[..]
>passwordrequiredpam_passwdqc.so 
>config=/etc/security/passwdqc.conf

Uninstall sys-auth/passwdqc... From it's manpage:


DESCRIPTION
 The pam_passwdqc module is a simple password strength checking
 module for PAM.


You need to remove the 'passwdqc' USE flag from sys-auth/pambase, else
it'll get pulled in again.

HTH,
-dnh

-- 
Linux is not a desktop OS for people whose VCRs are still
flashing "12:00". -- Paul Tomblin



[gentoo-user] xf86OpenConsole: Cannot open virtual console 1 (Permission denied)

2021-02-07 Thread thelma
I disable "slim" login manager and try not to use any display manger (for 
simplicity).
I start X from:

 ~/.bash_profile 
exec startx -- vt1

but now when I try to ssh as user, I get:

(==) Using system config directory "/usr/share/X11/xorg.conf.d"
(EE) 
Fatal server error:
(EE) xf86OpenConsole: Cannot open virtual console 1 (Permission denied)