Re: permissions: can you force ACL to be effective over unix perms?

2014-01-14 Thread Bob Goldberg
On Tue, Jan 14, 2014 at 7:13 AM, Joel Rees wrote: > Caveat. I don't have the patience to work with ACLs, mostly because I > can't see how they could really work without bringing a system to its > knees. > > To be honest - ACL's were by far my first choice for solving my problem. There is no doubt

Re: permissions: can you force ACL to be effective over unix perms?

2014-01-14 Thread Bob Goldberg
t; > good point; noted, and TY. > On 11/01/14 10:50, Bob Goldberg wrote: > > > > This action causes unix perms to OVERRIDE acl perms - NOT what I want > > Then you'll have to find another way to achieve what you want. > > *ACL should never override UNIX perms*. A

Re: permissions: can you force ACL to be effective over unix perms?

2014-01-13 Thread Bob Goldberg
Joel; i'm confused by your comments, which i'll address individually; with apologies in advance to the group for length, and content: On Fri, Jan 10, 2014 at 6:41 PM, Joel Rees wrote: > On Sat, Jan 11, 2014 at 8:50 AM, Bob Goldberg wrote: > > > > So - Is there a

Re: debian-live-7.2 doesn´t start

2014-01-13 Thread Bob Goldberg
many of the previous replies have touched on what i would have added. FWIW: i live on live-boots (no pun intended :) for all kinds of diagnostic work, and temp work env's. for this I use knoppix. it's one of the best (IMHO) live-boot linux dists out there. ironically, knoppix is debian based. s

Re: Installing several OSes from a single flash drive

2014-01-13 Thread Bob Goldberg
On Fri, Jan 10, 2014 at 6:30 PM, wrote: > > I've been tinkering with the idea of installing different operating > systems, not necessarily Linux, from the same bootable flash drive. -- > David Griffith > David; when it comes to booting ANYTHING off a flash drive - for me - there's only 1 flas

permissions: can you force ACL to be effective over unix perms?

2014-01-10 Thread Bob Goldberg
running wheezy. I have a dir w/ unix perm = 750 IE: root@wheezy:/home/chtest/home# ls -l drwxr-s--- 3 rootchadm 4096 Jan 9 14:12 ftptest I added an acl g perm using: # setfacl -m g:chadm:rwx ftptest this, unfortunately, changes unix perm to = 770 IE: V drwxrWs---+ 3 rootchadm 4096 Jan

Re: debian-live-7.2 doesn´t start

2014-01-10 Thread Bob Goldberg
On Fri, Jan 10, 2014 at 1:50 PM, peter.gierschner wrote: > Am 10.01.2014 19:50, schrieb Lisi Reisz: > > Putting this on list where OP might see it! It came to me off-list. >> >> > acpi=off nolapic fb=off nofb vga=normal (and maybe 1 more) >> if you want more technical information about what's

Re: Best SFTP (w/chroot): vsftpd vs mysecureshell vs other ??

2014-01-09 Thread Bob Goldberg
Sven; tx again, for your reply... my only interest is sftp - so maybe scponly/rssh is worth looking at i've ruled out proftpd on the port 22 issues alone. so failing rssh, i guess i'll just have to deal with added directory layers, and "stock" openssh; though still toying with idea of mysecu

Re: Best SFTP (w/chroot): vsftpd vs mysecureshell vs other ??

2014-01-06 Thread Bob Goldberg
On Sat, Jan 4, 2014 at 7:26 AM, Sven Hoexter wrote: > I'm not sure how the OpenSSH implementation handles ACLs, maybe that's > an option but I did not test it. my first problem is successfully logging in with sftp-only and chroot'ing in place. AFAIK - ACL's would only come into play afterward.

Re: Best SFTP (w/chroot): vsftpd vs mysecureshell vs other ??

2014-01-03 Thread Bob Goldberg
cess On Fri, Jan 3, 2014 at 12:52 PM, Bob Goldberg wrote: > trying to determine best solution for an SFTP server. > >vsftpd appears to be my current best choice, mostly because it's > supported by the distribution; but i'm not sure it meets my needs. >I know

Best SFTP (w/chroot): vsftpd vs mysecureshell vs other ??

2014-01-03 Thread Bob Goldberg
trying to determine best solution for an SFTP server. vsftpd appears to be my current best choice, mostly because it's supported by the distribution; but i'm not sure it meets my needs. I know mysecureshell meets my needs; but it's a sourceforge project, and not directly supported by the deb

Is there a work-around for a umask bug in rssh/chroot ??

2008-08-26 Thread Bob Goldberg
running etch; rssh/chroot with users allowed sftp only I have my umask=007 in my rssh.conf; I have setgid=true on all home dir's. When a user uploads a file, that file does NOT have mode=660 as I would expect - instead it's 640. has anyone had this problem, and found a work-around? TIA Bob

Can a user's default file creation mode use a group they're not a member of? (chroot/rssh issue)

2008-08-25 Thread Bob Goldberg
running debian etch; Here's the background - I'm using chroot/rssh to restrict users to sftp only. my chroot jail is /home/chroot all directory modes are 700 (except the users' directory), because I don't want users to even see the names of other users' home directory's. all users are in the chro

exim - config & timing of the queue - a few Q's :)

2007-12-18 Thread Bob Goldberg
David, I'm very appreciative for your response... TX much for the info.

exim - config & timing of the queue - a few Q's :)

2007-12-13 Thread Bob Goldberg
running debian etch, exim4; running exim as a relay to an internal email server; no local [to debian] mail or users. I know that I want a que, because if my internal email server is down, I want exim to collect & hold Email for it. Otherwise, I want email sent to it immediately. Apparently, the qu

back to basics: what's wrong with this exim condition statement?

2007-12-12 Thread Bob Goldberg
nevermind - I finally figured it out...

back to basics: what's wrong with this exim condition statement?

2007-12-11 Thread Bob Goldberg
running debian etch (which is exim4); I'm having problems with an ACL; so i've gone to absolute basics, and I still have a problem :) So here's what I have in my ACL: accept message = condition is false condition = ${if eq{23}{123}{1}{0}} next, I telnet in, and transact an email up to th

exim - what is it? (how does it run)

2007-12-06 Thread Bob Goldberg
On Dec 6, 12:50 pm, David Brodbeck <[EMAIL PROTECTED]> wrote: > On Dec 5, 2007, at 5:29 PM, Bob Goldberg wrote: > > > when I setup an exim conf file - what exactly runs it? perl? > > Exim reads it in itself. Just like Sendmail reads in sendmail.cf. > > Unless you&

exim4 config - what EXACTLY is "final destination"

2007-12-06 Thread Bob Goldberg
On Dec 6, 12:50 pm, Andrew Sackville-West <[EMAIL PROTECTED]> wrote: > > > I believe there have only been 2 people, you & someone else that made > > reference to the the example conf file distributed with exim. This file > > I think that was me too ;) LOL > > > no man page for exim.conf > >

exim - what is it? (how does it run)

2007-12-06 Thread Bob Goldberg
On Dec 5, 9:40 pm, Andrew Sackville-West <[EMAIL PROTECTED]> wrote: > On Wed, Dec 05, 2007 at 06:26:38PM -0800, [EMAIL PROTECTED] wrote: > > ie: the command line [from my router] is: > > data = [EMAIL PROTECTED]/etc/exim4/email-accept} > > {:fail: User unknown }} > > > what interpreter can I execut

exim4 config - what EXACTLY is "final destination"

2007-12-06 Thread Bob Goldberg
On Dec 5, 9:50 pm, Andrew Sackville-West <[EMAIL PROTECTED]> wrote: > exchange_router: > driver = manualroute # not manual! > data = ${lookup{$local_part}lsearch{/path/to/recipient-file}} > transport = exchange_smtp > > you don't need a 'fail' part (other thread) because sin

exim - what is it? (how does it run)

2007-12-05 Thread Bob Goldberg
i've spent DAYS trying to get exim to work to no avail. so let me start at the beginning. What exactly IS exim? IOW: when I setup sendmail, I'm working with bash scripts. when I setup an exim conf file - what exactly runs it? perl?

exim4 config - what EXACTLY is "final destination"

2007-12-05 Thread Bob Goldberg
running debian etch w/ exim 4. I want to setup exim to receive internet email, and accept/relay ONLY emails to a recipient listed in a text file, on to my exchange server. It will not send any outbound email. I've been having a heck of a time getting this to work. been trying to edit config files

LDAP - howto get linux to talk to exchange/AD

2007-12-04 Thread Bob Goldberg
Clarence, I'm most appreciative for your post. although your perl script doesn't work for me as is... I was able to use it to make one that DOES work. what REALLY confuses me now, is that my perl script WILL access ldap, and produce results - but when I try the same thing using ldapsearch from b

LDAP - howto get linux to talk to exchange/AD

2007-11-30 Thread Bob Goldberg
CR - TX for your reply, your script & data was very useful. I've made some progress... I still don't know why I can't authenticate using my admin account / password (and NOTHING I do seems to resolve this). BUT - with my improved understanding of the structure of the ldapsearch command (TX SK); an

LDAP - howto get linux to talk to exchange/AD

2007-11-29 Thread Bob Goldberg
OK; I agree - problem is DEFINITELY ldap authentication; forget about exim my exchange server is setup to accept clear text, and anonymous OK (even though I'm not trying to be anon). here's the thing - I have no idea what is going on between ldapsearch, and my exchange server. I've tried ne

LDAP - howto get linux to talk to exchange/AD

2007-11-29 Thread Bob Goldberg
Apologies for any duplicate posts I'm reading this thread on google (groups), and I apparently can't reply/post from there reply to s.: hi s. yes, I have...(google searches) but none of my searches has revealed any information that actually works. All I can get out of exim is "Unrouteabl

LDAP - howto get linux to talk to exchange/AD

2007-11-29 Thread Bob Goldberg
at the end of the day, this is what I want: my debian(etch)/exim machine to accept all internet Email to my domain, ignore all else, and relay on to my exchange 5.5 server. This means I want exim to validate email recipients thru ldap lookups. seems like a simple enough task, even one that many

LDAP - howto get linux to talk to exchange/AD

2007-11-28 Thread Bob Goldberg
at the end of the day, this is what I want: my debian(etch)/exim machine to accept all internet Email to my domain, ignore all else, and relay on to my exchange 5.5 server. This means I want exim to validate email recipients thru ldap lookups. seems like a simple enough task, even one that many pe

Is there a "quick" how-to or "getting started" for exim?

2007-11-16 Thread Bob Goldberg
running etch in console (no X); I just want to take inbound Email & forward to exchange server only email w/ valid recipients. isn't there a document that says how to do this in less than 400 pages??? TIA

Is there a "quick" how-to or "getting started" for exim?

2007-11-16 Thread Bob Goldberg
running etch in console (no X); I just want to take inbound Email & forward to exchange server only email w/ valid recipients. isn't there a document that says how to do this in less than 400 pages??? TIA