Re: schema for NSS LDAP with not all accounts active

2001-03-29 Thread Russell Coker
On Friday 30 March 2001 08:55, Russell Coker wrote: > > That's not clean. And what you do with FTP and IMAP/POP? You don't need > > to have a shell for both, but you want to allow only one of those. Of > > course, yeah, I could have access lists for each of that service not > > stored in the LDAP t

Re: schema for NSS LDAP with not all accounts active

2001-03-29 Thread Russell Coker
On Thursday 29 March 2001 22:33, Alexander Reelsen wrote: > > > > Another question is, does anyone have any other suggestions for doing > > > > such things? > > > > > > I would like to do this as well. If you authenticate using PAM and wnat > > > to exclude users from using ftpd and ssh, but still

pon

2001-03-29 Thread paul taylor
When I installed kppp pon stopped working properly. I have dsl and for those frequent times when it goes out I use dialup. kppp dials but won't connect. pon used to dial and connect. Now pon does not dial. I have gotten some hints on writing new code on the kde reflector. HOWEVER, I am a desktop

Re: schema for NSS LDAP with not all accounts active

2001-03-29 Thread Russell Coker
On Friday 30 March 2001 08:55, Russell Coker wrote: > > That's not clean. And what you do with FTP and IMAP/POP? You don't need > > to have a shell for both, but you want to allow only one of those. Of > > course, yeah, I could have access lists for each of that service not > > stored in the LDAP

Re: Debian 2.2r2

2001-03-29 Thread Cameron Moore
* [EMAIL PROTECTED] [2001.03.29 13:59]: > > > deb http://security.debian.org/ stable/updates main > > > > > > Then just "apt-get update && apt-get dist-upgrade" > > Doh! Don't do 'apt-get dist-upgrade'. Do 'apt-get upgrade' instead, > > unless you want to install woody. > > stable points to pota

Re: schema for NSS LDAP with not all accounts active

2001-03-29 Thread Russell Coker
On Thursday 29 March 2001 22:33, Alexander Reelsen wrote: > > > > Another question is, does anyone have any other suggestions for doing > > > > such things? > > > > > > I would like to do this as well. If you authenticate using PAM and wnat > > > to exclude users from using ftpd and ssh, but still

pon

2001-03-29 Thread paul taylor
When I installed kppp pon stopped working properly. I have dsl and for those frequent times when it goes out I use dialup. kppp dials but won't connect. pon used to dial and connect. Now pon does not dial. I have gotten some hints on writing new code on the kde reflector. HOWEVER, I am a desktop

Re: Debian 2.2r2

2001-03-29 Thread Haim Dimermanas
> > deb http://security.debian.org/ stable/updates main > > > > Then just "apt-get update && apt-get dist-upgrade" > Doh! Don't do 'apt-get dist-upgrade'. Do 'apt-get upgrade' instead, > unless you want to install woody. stable points to potato AFAIK. Is there something I am missing here ? Haim

Re: "kickstart" for debian needed

2001-03-29 Thread Bob Billson
On Wed, Mar 28, 2001 at 09:52:49AM +0200, Michelle Konzack wrote: > newmachine:# dpkg --set-selections myselection.txt > > now use dselect to install it. Easier to run: 'apt-get dselect-upgrade' instead of running dselect. bob -- bob billsonemail: [EMAIL PROTECTED] h

Re: "kickstart" for debian needed

2001-03-29 Thread Bob Billson
On Wed, Mar 28, 2001 at 09:52:49AM +0200, Michelle Konzack wrote: > dpkg --get-selections >myselection.txt You should really use: dpkg --get-selections '*' > myselection.txt Difference is the '*' gives you a list of installed, removed and purged packages. Without it you get only a list of ins

Re: Debian 2.2r2

2001-03-29 Thread Cameron Moore
* [EMAIL PROTECTED] [2001.03.29 13:59]: > > > deb http://security.debian.org/ stable/updates main > > > > > > Then just "apt-get update && apt-get dist-upgrade" > > Doh! Don't do 'apt-get dist-upgrade'. Do 'apt-get upgrade' instead, > > unless you want to install woody. > > stable points to pot

Re: Debian 2.2r2

2001-03-29 Thread Cameron Moore
* [EMAIL PROTECTED] [2001.03.29 13:04]: > Rich Puhek <[EMAIL PROTECTED]> writes: > > The upgrade is very easy... just do: > > > > "wget > > http://security.debian.org/dists/stable/updates/main/binary-i386/bind_8.2.3-0.potato.1_i386.deb"; > > > > > > to get the file, and: > > > > "dpkg -i bind_

Re: Debian 2.2r2

2001-03-29 Thread Fraser Campbell
Rich Puhek <[EMAIL PROTECTED]> writes: > The upgrade is very easy... just do: > > "wget > http://security.debian.org/dists/stable/updates/main/binary-i386/bind_8.2.3-0.potato.1_i386.deb"; > > > to get the file, and: > > "dpkg -i bind_8.2.3-0.potato.1_i386.deb" Or, even easier, make sure tha

Re: "kickstart" for debian needed

2001-03-29 Thread Michelle Konzack
Hello, you need only the Base-Installation then install all programms needed and after ths make a dpkg --get-selections >myselection.txt Now you can install on other machines the Base-Installation and at the end quiet it withot any selections. Login as root and make newmachine:# dpkg --set-s

Re: Debian 2.2r2

2001-03-29 Thread Rich Puhek
*yes* ... and it's a big one. Any BIND before 8.2.3 is vulnerable. Upgrade immediately, and look to see if you have already been hacked. See the following link for information: http://www.debian.org/security/2001/dsa-026 The upgrade is very easy... just do: "wget http://security.debian.org/dis

Re: Debian 2.2r2

2001-03-29 Thread Jeremy C. Reed
On Thu, 29 Mar 2001, Y2KNET wrote: > I have installed Debian 2.2r2 and it is using > bind 8-2.2p7-1. > > Is it any security hole in this Debian 2.2r2 > and bind 8-2.2p7-1. You can find out by looking at Debian's security page or http://www.debian.org/security/2001/dsa-026 The ISC website says:

Re: Debian 2.2r2

2001-03-29 Thread Haim Dimermanas
> > deb http://security.debian.org/ stable/updates main > > > > Then just "apt-get update && apt-get dist-upgrade" > Doh! Don't do 'apt-get dist-upgrade'. Do 'apt-get upgrade' instead, > unless you want to install woody. stable points to potato AFAIK. Is there something I am missing here ? Hai

Re: "kickstart" for debian needed

2001-03-29 Thread Bob Billson
On Wed, Mar 28, 2001 at 09:52:49AM +0200, Michelle Konzack wrote: > newmachine:# dpkg --set-selections myselection.txt > > now use dselect to install it. Easier to run: 'apt-get dselect-upgrade' instead of running dselect. bob -- bob billsonemail: [EMAIL PROTECTED]

Re: "kickstart" for debian needed

2001-03-29 Thread Bob Billson
On Wed, Mar 28, 2001 at 09:52:49AM +0200, Michelle Konzack wrote: > dpkg --get-selections >myselection.txt You should really use: dpkg --get-selections '*' > myselection.txt Difference is the '*' gives you a list of installed, removed and purged packages. Without it you get only a list of in

Debian 2.2r2

2001-03-29 Thread Y2KNET
I have installed Debian 2.2r2 and it is using bind 8-2.2p7-1.    Is it any security hole in this Debian 2.2r2 and bind 8-2.2p7-1.   Will appreciate any help.   Thanks.   Abu Umair    

Re: Debian 2.2r2

2001-03-29 Thread Cameron Moore
* [EMAIL PROTECTED] [2001.03.29 13:04]: > Rich Puhek <[EMAIL PROTECTED]> writes: > > The upgrade is very easy... just do: > > > > "wget > > >http://security.debian.org/dists/stable/updates/main/binary-i386/bind_8.2.3-0.potato.1_i386.deb" > > > > > to get the file, and: > > > > "dpkg -i bind_8

Re: Debian 2.2r2

2001-03-29 Thread Fraser Campbell
Rich Puhek <[EMAIL PROTECTED]> writes: > The upgrade is very easy... just do: > > "wget > >http://security.debian.org/dists/stable/updates/main/binary-i386/bind_8.2.3-0.potato.1_i386.deb" > > > to get the file, and: > > "dpkg -i bind_8.2.3-0.potato.1_i386.deb" Or, even easier, make sure th

Re: "kickstart" for debian needed

2001-03-29 Thread Michelle Konzack
Hello, you need only the Base-Installation then install all programms needed and after ths make a dpkg --get-selections >myselection.txt Now you can install on other machines the Base-Installation and at the end quiet it withot any selections. Login as root and make newmachine:# dpkg --set-

Re: Debian 2.2r2

2001-03-29 Thread Rich Puhek
*yes* ... and it's a big one. Any BIND before 8.2.3 is vulnerable. Upgrade immediately, and look to see if you have already been hacked. See the following link for information: http://www.debian.org/security/2001/dsa-026 The upgrade is very easy... just do: "wget http://security.debian.org/di

Re: Debian 2.2r2

2001-03-29 Thread Jeremy C. Reed
On Thu, 29 Mar 2001, Y2KNET wrote: > I have installed Debian 2.2r2 and it is using > bind 8-2.2p7-1. > > Is it any security hole in this Debian 2.2r2 > and bind 8-2.2p7-1. You can find out by looking at Debian's security page or http://www.debian.org/security/2001/dsa-026 The ISC website says

Debian 2.2r2

2001-03-29 Thread Y2KNET
I have installed Debian 2.2r2 and it is using bind 8-2.2p7-1.    Is it any security hole in this Debian 2.2r2 and bind 8-2.2p7-1.   Will appreciate any help.   Thanks.   Abu Umair    

Re: schema for NSS LDAP with not all accounts active

2001-03-29 Thread Alexander Reelsen
Hi On Thu, Mar 29, 2001 at 10:19:44PM +1000, Russell Coker wrote: > On Thursday 29 March 2001 18:08, Alexander Reelsen wrote: > > On Thu, Mar 29, 2001 at 10:03:39AM +1000, Russell Coker wrote: > > > So the question is, what attribute should I use? > > This is the minor question IMHO. > Not so mino

Re: schema for NSS LDAP with not all accounts active

2001-03-29 Thread Russell Coker
On Thursday 29 March 2001 18:08, Alexander Reelsen wrote: > On Thu, Mar 29, 2001 at 10:03:39AM +1000, Russell Coker wrote: > > So the question is, what attribute should I use? > > This is the minor question IMHO. Not so minor if you want to avoid having your schema break other software you may wa

Re: schema for NSS LDAP with not all accounts active

2001-03-29 Thread Alexander Reelsen
Hi On Thu, Mar 29, 2001 at 10:19:44PM +1000, Russell Coker wrote: > On Thursday 29 March 2001 18:08, Alexander Reelsen wrote: > > On Thu, Mar 29, 2001 at 10:03:39AM +1000, Russell Coker wrote: > > > So the question is, what attribute should I use? > > This is the minor question IMHO. > Not so min

Re: schema for NSS LDAP with not all accounts active

2001-03-29 Thread Russell Coker
On Thursday 29 March 2001 18:08, Alexander Reelsen wrote: > On Thu, Mar 29, 2001 at 10:03:39AM +1000, Russell Coker wrote: > > So the question is, what attribute should I use? > > This is the minor question IMHO. Not so minor if you want to avoid having your schema break other software you may w