May 2005 - main - earth.li

Restricting ssh logins to certain users (not root)
by Chris Green 22 May '05

22 May '05

Is there any simple way of restricting ssh logins to a system to prevent remote root logins? I'd like to do this to add a little more security so that one has to login as a non-root user and *then* su to root (if you want root privileges for some reason). This would mean that an intruder would need to guess/hack two passwords to get root access. -- Chris Green (chris(a)areti.co.uk) "Never ascribe to malice that which can be explained by incompetence."

4 4

Welcome
by andy 22 May '05

22 May '05

thanks for the welcome folks,nice to see there are other users in my area. felt a bit lonely as most of the people i know use winbloze software. mention linux to them & they go all glassy eyed or stare at you as if you're from another planet. i sometimes feel as if i'm a scientist who has made a great discovery & no one is listening!!!!!!!!!!!!!!!!!!!!!! andy

2 1

Moving Mozilla config etc to Firefox
by Ted.Harding＠nessie.mcc.ac.uk 22 May '05

22 May '05

Hi Folks, As mentioned in another mail just composed, I run Mozilla on a somewhat puny laptop. I also have Firefox installed, which is a much more compact and nippy program. The main reason I still keep running Mozilla is that I have a massive collection of bookmarks on Mozilla, built up over the years, and also an assortment of auto-login data for certain websites (userids & passwords), and an unknown number of cookies also accumulated over time. Not forgetting sundry plugins. In order to switch cleanly and conprehensively over to Firefox, I would need to transfer this lot from wherever Mozilla looks for it to wherever Firefox would look for it. I have not succeeded in sussing this out. Nor do I wish to re-create it all by hand! Any tips? (Are the two even totally compatible in this respect?) With thanks, and best wishes to all, Ted. -------------------------------------------------------------------- E-Mail: (Ted Harding) <Ted.Harding(a)nessie.mcc.ac.uk> Fax-to-email: +44 (0)870 094 0861 Date: 08-May-05 Time: 13:38:52 ------------------------------ XFMail ------------------------------

4 4

Re: Humongous computing with Windows XP 64bit Edition
by tom potts 22 May '05

22 May '05

Just a comment on linux memory use vs windows. If I remember rightly the file system on linux tends to keep files in memory until it needs the space so the memory usage goes up so when it says your using 700meg of ram this may actually mean your only using 200 meg for the system but there are 500meg of closed files. Windows seems to scrabble every last bit back and still suffer. I have an amd with 256MB ram with w2k it struggles to get started but isnt too bad after that even though I use VS.NET but it does seem to choke a lot. Running RH9.0 it almost seems to get bored. You can run suse9.2 in 16MBytes Ram but you seem to need 64Mbytes to install it using the graphical interface. Same for RH9! Send instant messages to your online friends http://uk.messenger.yahoo.com

2 1

new member
by thedeceiver 22 May '05

22 May '05

hi my names andy, & i thought i'd join your lug mailing list as i have been using linux for about 3 years,mainly suse,mandrake & fedora core.i'm not the greatest user but if i can help in any way i will. i currently run suse 9.3 on my laptop & dual boot on my main p.c.mainly for the kids as they are used to winbloze software. gradually working them to a switch. i also help out in my local school as i am fairly well versed in most i.t. issues. if i don't know the answer i can always find out. thanks for letting me join your lug hope to hear more from other members Andy -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.322 / Virus Database: 266.11.12 - Release Date: 17/05/2005

4 3

Combining a collection of images into an animation file
by Ashley T. Howes, Ph.D. 21 May '05

21 May '05

I have a collection of image files that I would like to combine into an animation file, e.g. an MPEG. I have been playing around with the ImageMagick toolkit and mpeg2encode. They work, but the quality is not very good. Let me explain that - my images have some fine detail in them I need to preserve in the final animation, and mpeg2encode does not seem to provide any options for encoding quality. Can anyone recommend a better mpeg encoder for linux, which will allow me to control the quality of the final animation? Alternatively, if there is someone on the mailing list who does this sort of activity of a semi-regular basis, could you share the best way to do what I am attempting? -- Ashley T. Howes, Ph.D. http://www.ashleyhowes.com/ "I remember the very things I do not wish to; I cannot forget the things I wish to forget." - Cicero

1 0

Where does PHP get it's host name information from?
by Chris Green 20 May '05

20 May '05

I'm trying to get PHP5.02 and Apache2 working again having upgraded my slackware from 10 to 10.1. I've got Apache going OK but PHP is acting a bit odd. The essential problem is that I've got my DNS a little bit awry (this may sound unrelated to PHP but we'll get there). Before we had broadband my system had no name as there was never a need to access it from the outside world. Now we have broadband I've got a sub-domain pointing at the system:- home.isbd.net 84.51.144.229 I have a router which is what the outside world sees when it connects to home.isbd.net and the NAT and firewall are set up to send packets to the appropriate systems on the LAN side. Within the LAN I the systems have names such as fred.isbd.co.uk (I own the isbd.co.uk domain) which only exist within the LAN and, on the Linux box, are set up in /etc/hosts. Thus there are entries such as:- 192.168.13.5 fred.isbd.co.uk fred These are very convenient as one can use the short form 'fred' to connect to that machine. However there are now some oddities occurring and I'm thinking I may have to change some/all of my hosts file. Firstly PHP keeps using the Linux server box's full name (server.isbd.co.uk) to try and do things and is failing miserably. Secondly for some reason the DNS on the LAN can't find home.isbd.net whereas everyone else in the world can find it and DNS on the LAN works for all other addresses. In general what do others here do about naming machines on a small SoHo LAN behind a router? Is there some accepted way of doing it? -- Chris Green (chris(a)areti.co.uk) "Never ascribe to malice that which can be explained by incompetence."

4 12

Risks (or otherwise) of passwordless ssh use
by Chris Green 20 May '05

20 May '05

I currently use ssh for various logins from home and from work. I have set up the logins so that they work without me entering a password or key phrase at all, i.e. I *think* when asked for a key to generate the encrypted string used for authorisation I entered nothing. I know this creates some security holes but I'm not at all clear what they are really, can anyone elucidate? I realise that anyone with access to my work machine or my home machine will be able to login to these remote systems without knowing the password but that's not a big problem really, there is far more important and sensitive information on my desktop machines than there is on the places where I remotely login. Is this the only risk or is the encryption inherently weaker if I didn't enter a key? -- Chris Green (chris(a)areti.co.uk) "Never ascribe to malice that which can be explained by incompetence."

5 11

How to find out what mysql databases I have?
by Chris Green 20 May '05

20 May '05

I always have this problem when I come back to using mysql. How do I find out what mysql databases I have set up? The mysql daemon (mysqld) is running, I can run 'mysql' and I get the 'mysql>' prompt but that's it, there seems ot be no simple way of finding out what databases there are there to use. -- Chris Green (chris(a)areti.co.uk) "Never ascribe to malice that which can be explained by incompetence."

3 3

Apache + modssl + mount -o ro = segfault
by MJ Ray 19 May '05

19 May '05

Here's one I've not met before: I have an Apache (1.3.x) server doing SSL. The server has a read-only root partition and then read-write partitions for things like /home, /var, /tmp and so on. If Apache is started, all the https sites fail, return no data and say in the log "[notice] child pid 563 exit signal Segmentation fault (11)" or similar. If / is mounted read-write, Apache started, then / is remounted read-only, it works. I can't see any read-only directory being used in the httpd.conf - what's going on at startup that I'm missing? -- Thanks for any tips, MJR/slef http://mjr.towers.org.uk/

2 3