Tillbaka till svenska Fidonet
English   Information   Debug  
IC   0/2851
INTERNET   0/424
INTERUSER   0/3
IP_CONNECT   719
JAMNNTPD   0/233
JAMTLAND   0/47
KATTY_KORNER   0/41
LAN   0/16
LINUX-USER   0/19
LINUXHELP   0/1155
LINUX   0/22002
LINUX_BBS   0/957
mail   18.68
mail_fore_ok   249
MENSA   0/341
MODERATOR   0/102
MONTE   0/992
MOSCOW_OKLAHOMA   0/1245
MUFFIN   0/783
MUSIC   0/321
N203_STAT   894
N203_SYSCHAT   313
NET203   321
NET204   69
NET_DEV   0/10
NORD.ADMIN   0/101
NORD.CHAT   0/2572
NORD.FIDONET   189
NORD.HARDWARE   0/28
NORD.KULTUR   0/114
NORD.PROG   0/32
NORD.SOFTWARE   0/88
NORD.TEKNIK   0/58
NORD   0/453
OCCULT_CHAT   0/93
OS2BBS   0/787
OS2DOSBBS   0/580
OS2HW   0/42
OS2INET   0/37
OS2LAN   0/134
OS2PROG   0/36
OS2REXX   0/113
OS2USER-L   207
OS2   0/4779
OSDEBATE   0/18996
PASCAL   0/490
PERL   0/457
PHP   0/45
POINTS   0/405
POLITICS   0/29554
POL_INC   0/14731
PSION   103
R20_ADMIN   1117
R20_AMATORRADIO   0/2
R20_BEST_OF_FIDONET   13
R20_CHAT   0/893
R20_DEPP   0/3
R20_DEV   399
R20_ECHO2   1379
R20_ECHOPRES   0/35
R20_ESTAT   0/719
R20_FIDONETPROG...
...RAM.MYPOINT
  0/2
R20_FIDONETPROGRAM   0/22
R20_FIDONET   0/248
R20_FILEFIND   0/24
R20_FILEFOUND   0/22
R20_HIFI   0/3
R20_INFO2   2632
R20_INTERNET   0/12940
R20_INTRESSE   0/60
R20_INTR_KOM   0/99
R20_KANDIDAT.CHAT   42
R20_KANDIDAT   28
R20_KOM_DEV   112
R20_KONTROLL   0/13030
R20_KORSET   0/18
R20_LOKALTRAFIK   0/24
R20_MODERATOR   0/1852
R20_NC   76
R20_NET200   245
R20_NETWORK.OTH...
...ERNETS
  0/13
R20_OPERATIVSYS...
...TEM.LINUX
  0/44
R20_PROGRAMVAROR   0/1
R20_REC2NEC   534
R20_SFOSM   0/340
R20_SF   0/108
R20_SPRAK.ENGLISH   0/1
R20_SQUISH   107
R20_TEST   2
R20_WORST_OF_FIDONET   12
RAR   0/9
RA_MULTI   106
RA_UTIL   0/162
REGCON.EUR   0/2055
REGCON   0/13
SCIENCE   0/1206
SF   0/239
SHAREWARE_SUPPORT   0/5146
SHAREWRE   0/14
SIMPSONS   0/169
STATS_OLD1   0/2539.065
STATS_OLD2   0/2530
STATS_OLD3   0/2395.095
STATS_OLD4   0/1692.25
SURVIVOR   0/495
SYSOPS_CORNER   0/3
SYSOP   0/84
TAGLINES   0/112
TEAMOS2   0/4530
TECH   0/2617
TEST.444   0/105
TRAPDOOR   0/19
TREK   0/755
TUB   0/290
UFO   0/40
UNIX   0/1316
USA_EURLINK   0/102
USR_MODEMS   0/1
VATICAN   0/2740
VIETNAM_VETS   0/14
VIRUS   0/378
VIRUS_INFO   0/201
VISUAL_BASIC   0/473
WHITEHOUSE   0/5187
WIN2000   0/101
WIN32   0/30
WIN95   0/4275
WIN95_OLD1   0/70272
WINDOWS   0/1517
WWB_SYSOP   0/419
WWB_TECH   0/810
ZCC-PUBLIC   0/1
ZEC   4

 
4DOS   0/134
ABORTION   0/7
ALASKA_CHAT   0/506
ALLFIX_FILE   0/1313
ALLFIX_FILE_OLD1   0/7997
ALT_DOS   0/152
AMATEUR_RADIO   0/1039
AMIGASALE   0/14
AMIGA   0/331
AMIGA_INT   0/1
AMIGA_PROG   0/20
AMIGA_SYSOP   0/26
ANIME   0/15
ARGUS   0/924
ASCII_ART   0/340
ASIAN_LINK   0/651
ASTRONOMY   0/417
AUDIO   0/92
AUTOMOBILE_RACING   0/105
BABYLON5   0/17862
BAG   135
BATPOWER   0/361
BBBS.ENGLISH   0/382
BBSLAW   0/109
BBS_ADS   0/5290
BBS_INTERNET   0/507
BIBLE   0/3563
BINKD   0/1119
BINKLEY   0/215
BLUEWAVE   0/2173
CABLE_MODEMS   0/25
CBM   0/46
CDRECORD   0/66
CDROM   0/20
CLASSIC_COMPUTER   0/378
COMICS   0/15
CONSPRCY   0/899
COOKING   27611
COOKING_OLD1   0/24719
COOKING_OLD2   0/40862
COOKING_OLD3   0/37489
COOKING_OLD4   0/35496
COOKING_OLD5   9370
C_ECHO   0/189
C_PLUSPLUS   0/31
DIRTY_DOZEN   0/201
DOORGAMES   0/1974
DOS_INTERNET   0/196
duplikat   5999
ECHOLIST   0/18295
EC_SUPPORT   0/318
ELECTRONICS   0/359
ELEKTRONIK.GER   1534
ENET.LINGUISTIC   0/13
ENET.POLITICS   0/4
ENET.SOFT   0/11701
ENET.SYSOP   33774
ENET.TALKS   0/32
ENGLISH_TUTOR   0/2000
EVOLUTION   0/1335
FDECHO   0/217
FDN_ANNOUNCE   0/7068
FIDONEWS   23439
FIDONEWS_OLD1   0/49742
FIDONEWS_OLD2   0/35949
FIDONEWS_OLD3   0/30874
FIDONEWS_OLD4   0/37224
FIDO_SYSOP   12841
FIDO_UTIL   0/180
FILEFIND   0/209
FILEGATE   0/212
FILM   0/18
FNEWS_PUBLISH   4155
FN_SYSOP   41520
FN_SYSOP_OLD1   71952
FTP_FIDO   0/2
FTSC_PUBLIC   0/13561
FUNNY   0/4886
GENEALOGY.EUR   0/71
GET_INFO   105
GOLDED   0/408
HAM   0/16041
HOLYSMOKE   0/6791
HOT_SITES   0/1
HTMLEDIT   0/71
HUB203   466
HUB_100   264
HUB_400   39
HUMOR   0/29
Möte LINUX, 22002 texter
 lista första sista föregående nästa
Text 1578, 108 rader
Skriven 2004-10-07 10:04:04 av Jasen Betts (3:640/1042)
     Kommentar till en text av Paul Rogers (1:105/360.0)
Ärende: Nunquam faciendum?
==========================
Hello Paul.

05 Oct 04 19:39, you wrote to all:

 PR> It was the motto of the UCLA Computer Club, which was in that
 PR> context broadly (and aptly) translated as "Don't even think
 PR> about it!"

The port SSH creates to tunnel the X protocol over the SSL link
seems to only be usable by the user that created the link

I have not figured out how to make this link available to root,
but it is possible to use "normal" TCPIP for the link.

try this, if it works do "man 7 Xsecurity"

  at the console command-line

# startx /usr/X11R6/bin/xterm -- -bpp 8

here that last bit " -- -bpp 8 " stops X from  being passed the defult settings
" -nolisten tcp " which if left seems to foil remote X-apps quite effectively.
feel free to try other colour depths, or use rxvt instead of xterm

  in the xterm

$ xhost root@SERVERMACHINE
$ ssh SERVERMACHINE
$ su
# DISPLAY=CONSOLEMACHINE:0.0 kde

 PR> My question has to do with setting up my intranet server.
 PR> Having moved many of my accumulated files there, well, they're
 PR> not organized as well as they should have been.  It would be
 PR> easiest to move things around from a GUI based file manager.  On
 PR> my Lewis workstation "paul" can start a clean X, ssh over to the
 PR> server, and start KDE.  Root can't--X doesn't connect, though
 PR> I'm not sure whether it's in the X-client or X-server on the
 PR> ssh-server or ssh-client (if I've got that right).

AFAICT it's something that involves the SSH server, the user ID and possibly
the ~paul/.Xauthority file.


 PR>   I often ssh
 PR> to the server as paul and "su -" to get to root, but trying to
 PR> run KDE then runs into the same/similar roadblock.

"su -" is going to loose you the DISPLAY variable that ssh sets up for you
"su" ( without the "-") won't but it does't help, much.

if I su to root and then back to jasen again it works, so it's not su blocking
something.

 PR> I remember
 PR> sshd.conf has a parameter about that.  Should I go chase that
 PR> down?  Is it indicative of a definite configuration problem?
 PR> SHOULD root be able to ssh to the server, or should it be
 PR> restricted to a tty console?

That's a security decision that you nust make.  if you do enable it try to
limit the number of users and hosts that are able to log in as root.
preferabley enforcing a pasword in addition to the normal ssh crypto
authentication.


 PR>  I suppose I could move /var/ftp/pub
 PR> to /home/paul/pub, and straighten it up from there, and then
 PR> move it all back.

The location of the files is of little importance, mostly it's the ownership
recorded against them, and if you're wanting to rename/move them, more
importanlty, the ownership and permissions on the directories in which they
reside. as root do this.

# cd /var/ftp/pub
# chown -R paul .

now paul will be able to move the files round etc.

Afterwards you can use a similar command to change the owner to root (or bbs or
whatever is apopriate)

another option would to be to add paul to a group that has write access to the
directories where the files reside.

To move, rename, erase, link to, or create files you need write access to the
directory (/ies) involved. To modify file contents, or timestamps (C,M) you
need, write access to the file.

Another way would be to export the directories using nfs with the
cno-root-squash option, mounting them locally and running the file
manipulation tool locally as root. (man exports exportfs)  this could be a
securiy risk.

I'm guessing that the GUI is something like "dfm", or "xnc", can't you use
something CUI that will work easily over ssh (like mc or git) instead?

or is this tool something special purpose like easytag that has no good
text-based equivalent?

Another way could be to set ssh up to allow you to log in as root, but still
require a password.  I'm not sure if that's possible or how to achieve that.

Jasen

--- GoldED+/LNX 1.1.4.7
 * Origin:  (3:640/1042)