Re: Subdirectory security

2005-04-19 Thread Sebastian Korte
chmod +777 just doesn't do what I need. Try to solve it with group access: All files (including directory infotech) have rights 770, groupname e.g. infotech. User1,2,3 are only in the group users, so they only can change their own files. Only user infotech is in group infotech, so he can update

Re: OORexx

2005-04-19 Thread José Raúl Barón Rodríguez
Of course, I am VERY interested Saludos, José Raúl Barón Dpto. Sistemas CALCULO S.A. Tel. 91 330 86 44 e-mail: [EMAIL PROTECTED] -Mensaje original- De: Linux on 390 Port [mailto:[EMAIL PROTECTED] En nombre de Tom Shilson Enviado el: miércoles, 13 de abril de 2005 18:58 Para:

Re: Understanding Use of Memory below 2GB

2005-04-19 Thread Klaus Bergmann
Tom Duerbusch wrote: If I have a 31 bit guest, do all my pages reside below the line or will CP do it's magic, so the pages can exist above the line (except for I/O and some other functions). The pages can exist above 2GB (host real memory) and CP will do its magic. I have a dozen 31 bit SLES9

Re: src-vipa

2005-04-19 Thread Vic Cross
On Tue, Apr 12, 2005 at 09:20:21AM -0400, [EMAIL PROTECTED] wrote: I'm trying to use src_vipa and use it system--wide. I've placed src_vipa.so in ld.so.preload. Seems to be working OK. BUT if I do a ls, I end up with a session that seems to be hung. Can't load a new bash subshell

Re: [PATCH 2.4/2.6] arch/{ia64,x86_64,s390}: Fix: sys32_sendfile does not set offset on 32bit compatibility mode.

2005-04-19 Thread Andi Kleen
On Tue, Apr 19, 2005 at 11:13:47AM +0900, Yoshioka Tsuneo wrote: Hello If we use 64bit kernel on ia64/x86_64/s390 architecture, and we run 32bit binary on 32bit compatibility mode, sendfile system call seems be not set offset argument. This is because sendfile's return value is not zero but

Samba 2.2.x to 3.0.x migration

2005-04-19 Thread Darren Zamrykut
Has anyone on the list migrated from an older Samba Server 2.2.x to a more current one? If so, what were the steps that you took to migrate users and machine accounts to the new server? I am wanting to have the *** new *** Samba server authenticate against an LDAP server on a different image?

Re: LINUX-390 Digest - 16 Apr 2005 to 17 Apr 2005 (#2005-105)

2005-04-19 Thread George Morey
Interesting, for once around here I'm leading edge. [EMAIL PROTECTED] 4/17/2005 9:02:14 PM There are 3 messages totalling 113 lines in this issue. Topics of the day: 1. Debian win the City of Munich, and now Vienna 2. Guest LAN broken on SLES9 SP1...? (2)

[Fwd: Samba 2.2.x to 3.0.x migration]

2005-04-19 Thread Darren Zamrykut
Sorry, I failed to mention that I was moving both services to SLES9 s390x. - Has anyone on the list migrated from an older Samba Server 2.2.x to a more current one? If so, what were the steps that you took to migrate users and machine accounts to the new server? I am wanting to have the

Re: Samba 2.2.x to 3.0.x migration

2005-04-19 Thread Michael MacIsaac
Darren, I am wanting to have the *** new *** Samba server authenticate against an LDAP server on a different image? Is that possible or should I have both services (ldap, samba) on the same linux image? This is a tricky setup, but SLES9 makes it easier with OpenLDAP and yast modules. First a

Re: Samba 2.2.x to 3.0.x migration

2005-04-19 Thread Darren Zamrykut
Thanks Mike, What about migrating existing machine accounts to LDAP. Is there a script of some sort that will make life easier so I don't have to make the machines rejoin the domain? I have the old samba SID so I can change the new Samba server's SID to this. Should I just go ahead and create

Re: Samba 2.2.x to 3.0.x migration

2005-04-19 Thread David Boyes
Has anyone on the list migrated from an older Samba Server 2.2.x to a more current one? If so, what were the steps that you took to migrate users and machine accounts to the new server? The Samba HOW-TO document (from www.samba.org) has a very detailed cookbook on how to do this.

FW: IBM Rear Door Heat eXchanger - Water Cooling for 42u Racks

2005-04-19 Thread David Boyes
HA! My plumber's license is still paid up! Subject: IBM Rear Door Heat eXchanger - Water Cooling for 42u Racks _ 105150 IBM Rear Door Heat eXchanger (8.9KB) http://www.ibm.com/isource/cgi-bin/goto?it=usa_annredon=105-150

Re: Subdirectory security

2005-04-19 Thread Tom Duerbusch
I kind of figured that out, but I'm really looking for documentation on security. I can find man pages on commands, like adduser and addgroup, but I haven't found any pages on file security. I would guess the command name would be someone's cats name (many command names in Linux sure don't make

Re: Samba 2.2.x to 3.0.x migration

2005-04-19 Thread Michael MacIsaac
Darren, What about migrating existing machine accounts to LDAP. Is there a script of some sort that will make life easier so I don't have to make the machines rejoin the domain? padl.com has some migration utilities, but they read /etc/passwd, /etc/group/ as I recall. I don't know of a

Re: Subdirectory security

2005-04-19 Thread Fargusson.Alan
I am not sure I follow, but I think you need ACLs to do that. Check out the setfacl and getfacl man pages. -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] Behalf Of Tom Duerbusch Sent: Tuesday, April 19, 2005 8:26 AM To: LINUX-390@VM.MARIST.EDU Subject: Re:

Re: src-vipa

2005-04-19 Thread KarlKingston
Linux on 390 Port LINUX-390@VM.MARIST.EDU wrote on 04/18/2005 09:57:41 AM: On Tue, Apr 12, 2005 at 09:20:21AM -0400, [EMAIL PROTECTED] wrote: I'm trying to use src_vipa and use it system--wide. I've placed src_vipa.so in ld.so.preload. Seems to be working OK. BUT if I do a ls, I end

Re: Subdirectory security

2005-04-19 Thread Adam Thornton
On Apr 19, 2005, at 10:26 AM, Tom Duerbusch wrote: I kind of figured that out, but I'm really looking for documentation on security. I can find man pages on commands, like adduser and addgroup, but I haven't found any pages on file security. I would guess the command name would be someone's cats

Re: Subdirectory security

2005-04-19 Thread Tom Duerbusch
I think that is it. man acl for the more generic stuff. Thanks Tom Duerbusch THD Consulting [EMAIL PROTECTED] 04/19/05 10:31 AM I am not sure I follow, but I think you need ACLs to do that. Check out the setfacl and getfacl man pages. -Original Message- From: Linux on 390 Port

Re: Subdirectory security

2005-04-19 Thread Benny
Why not go about it the other way around? Have each user in his own group and then add that group to the infotech user's list of groups. Personally I'd be tempted to look at the ACL stuff to see if that helped (ah, an excuse to look it up and see what it does...) As for reading things up...

Re: Subdirectory security

2005-04-19 Thread David Boyes
#cd /home #ls alice bob carol #chgrp kahuna alice bob carol #chmod g+s alice bob carol Let's say frank is the user who should have write access to these files: Ted? Ted? My God, they've killed Ted! (sorry -- too much Bakshi recently) Does anyone know of a good Unix file permissions

Re: Subdirectory security

2005-04-19 Thread Richard Pinion
No, no, no that's not it! They shot Fritz! [EMAIL PROTECTED] 04/19/05 11:47AM #cd /home #ls alice bob carol #chgrp kahuna alice bob carol #chmod g+s alice bob carol Let's say frank is the user who should have write access to these files: Ted? Ted? My God, they've killed Ted!

Re: Subdirectory security

2005-04-19 Thread Eric Clapsaddle
Oh my God! They've killed Kenny! You %*@#^d's! --For the younger crowd Eric Richard Pinion [EMAIL PROTECTED] g To Sent by: Linux on LINUX-390@VM.MARIST.EDU 390

Re: Subdirectory security

2005-04-19 Thread David Boyes
Have each user in his own group and then add that group to the infotech user's list of groups. This breaks down quickly; there is a limit to the number of group members, and most systems limit the number of groups and/or do not implement hierarchical group membership. ACLs are the right

Re: Subdirectory security

2005-04-19 Thread Richard Pinion
Strictly off topic! Because of you I just bought the DVD Wizards. I need that like I need a hole in the head! [EMAIL PROTECTED] 04/19/05 11:47AM #cd /home #ls alice bob carol #chgrp kahuna alice bob carol #chmod g+s alice bob carol Let's say frank is the user who should have write

Suse/s390 patches

2005-04-19 Thread jason lowe
Where on the Internet, can I get Suse/390 patches? JL Jason Lowe - Mainframe Systems - Cornell Information Technologies [EMAIL PROTECTED] (607) 255-7851 The Supreme Court has surrendered. It has destroyed the Civil Rights Bill, and converted the Republican party into a party of money rather

Re: Suse/s390 patches

2005-04-19 Thread Wolfe, Gordon W
You can get them from the SuSE maintenance portal, but only if you've paid SuSE for service and have an account there. A statesman is a dead politician. Lord knows we need more statesmen! --Berkeley Breathed Gordon Wolfe, Ph.D. Boeing Shared Services Group Enterprise Servers VM Technical

Re: Suse/s390 patches

2005-04-19 Thread Wiggins, Mark
This brings up an interesting question. I've set up a YOU server to synchronize itself on a daily basis with SuSE. All of the rest of my Linux instances do their Online Updates against my YOU server instead of going over the wire to SuSE. If someone from outside of UConn were to pull updates off

Re: Suse/s390 patches

2005-04-19 Thread David Boyes
Where on the Internet, can I get Suse/390 patches? You can only get them from the SuSE maintenance site, which requires a valid support contract. -- db -- For LINUX-390 subscribe / signoff / archive access instructions, send

Re: Suse/s390 patches

2005-04-19 Thread Post, Mark K
This kind of question comes up every so often. Each RPM that SUSE provides is covered by some sort of license. Many of them are licensed under the GPL, Apache license, etc. Those types of license permit free/unfettered redistribution. Anything that is not covered by a license that permits free

FW: SNA tape mount and labeling tools added to Bacula

2005-04-19 Thread David Boyes
-Original Message- From: David Boyes [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 19, 2005 5:58 PM To: '[EMAIL PROTECTED]' Subject: SNA tape mount and labeling tools added to Bacula Just a FYI; the SNA tape mount daemon and some sample execs to label tapes for use with the