Help! I've fallen and I cannot get up! Oh, wait, wrong story. I've finally decided to get my Canon BJC6000 printer working - somehow. (DON'T BUY CANON PRINTERS!) So, first attempt was to run vmware and print using the windows printer driver under windows, exported via samba to linux. (VMware allows the windows client OS to have access to devices you specify, and I tried to let it have the parallel port). This attempt failed miserably - when I try to have VMWare take the printer port it says "Unsupported parallel port hardware /dev/parport0 (no ECR register). Failed to connect device parallel0 [OK]" (I tried with lp0, and it complained about not having readback (basically)). Ok, I thought, so the kludge won't work, how about doing it 'right' - I'll get ghostscript working. Installed gs 6.01 Installed lprng (removing lpr) Installed apsfilter Everything looked good. Tried to print. Nothing. syslog says: Sep 15 18:27:18 base-station-alpha kernel: ppuser00: registered pardevice Sep 15 18:27:18 base-station-alpha kernel: ppuser00: claim the port first Sep 15 18:27:18 base-station-alpha kernel: ppuser00: released pardevice because user-space forgot Sep 15 18:27:18 base-station-alpha kernel: ppuser00: unregistered pardevice the lp2.0 log says: Status: subserver pid 18644 starting at 18:30:41.487 Status: accounting at start at 18:30:41.514 Status: waiting for subserver to exit at 18:30:41.484 Status: opening device '/dev/parport0' at 18:30:41.559 Status: printing job 'root@base-station-alpha+640' at 18:30:41.560 Status: processing 'dfA640base-station-alpha.descomp.com', size 226361, format 'f', IF filter 'aps1-bjc610a0.upp-letter-auto-default' at 18:30:41.560 Status: IF filter 'aps1-bjc610a0.upp-letter-auto-default' filter msg - 'Make_passthrough: pid 18645, execve '/root/apsfilter/filter/aps1-bjc610a0.upp-letter-auto-default' failed - 'Permission denied'' at 18:30:41.564 Status: IF filter 'aps1-bjc610a0.upp-letter-auto-default' filter exit status 'JABORT' at 18:30:41.564 Status: printing finished at 18:30:41.564 Status: accounting at end at 18:30:41.565 Status: finished 'root@base-station-alpha+640', status 'JABORT' at 18:30:41.565 Status: subserver pid 18644 exit status 'JABORT' at 18:30:41.566 Status: job 'root@base-station-alpha+640' error 'aborting operations' at 18:30:41.566 Status: removing job 'root@base-station-alpha+640' - ABORT at 18:30:41.568 Filter_status: lp2 is ready and printing Ok, so the obvious thing is that my execve target is bad. Here's a look at it: lrwxrwxrwx 1 root root 16 Sep 14 18:52 aps1-bjc610a0.upp-letter-auto-default -> ../bin/apsfilter* lrwxrwxrwx 1 root root 16 Sep 14 18:52 aps2-bjc610a0.upp-letter-raw -> ../bin/apsfilter* And here's what it points at: -r-xr-xr-x 1 bin wheel 55807 Sep 14 19:13 ../bin/apsfilter* THAT all looks good to me. So, ANYBODY, HELP! What have I fat-fingered? Oh, just in case it helps, here is my /etc/printcap: # LABEL apsfilter # apsfilter setup Thu Sep 14 18:51:53 MST 2000 # # DON'T DELETE THIS: # APS_BASEDIR:/root/apsfilter # # APS1_BEGIN:printer1:bjc610a0.upp:letter:default # - don't delete start label for apsfilter printer1 # - no other printer defines between BEGIN and END LABEL # lp2|aps1-bjc6000a1.upp-letter-auto-default|Printer1 bjc6000a1.upp letter auto default:\ :lp=/dev/lp0:\ :sd=/var/spool/lpd/printer1-bjc6000a1.upp-letter-auto-default:\ :lf=/var/spool/lpd/printer1-bjc6000a1.upp-letter-auto-default/log:\ :af=/var/spool/lpd/printer1-bjc6000a1.upp-letter-auto-default/acct:\ :if=/root/apsfilter/filter/aps1-bjc610a0.upp-letter-auto-default:\ :mx#0:\ :sh: # APS1_END - don't delete this END LABEL for printer1 Ok, I lied, I deleted all but lp2. anybody have a clue? I'm totally baffled... rusty From Don Harrop" \_ Thanks for the responses. I never know about the command "last". Very \_ cool. I've already found out most of what I needed. It was some guy over \_ in Russia. Those punks! :-) I'd guess that the box in Russia was merely a springboard not the source. David ________________________________________________ Thats true, but I couldn't trace it back any further than that. Don From Don Harrop" The only beaf I've got agains apt-get is the versions of the packages. They always seem to be slightly more dated than thier rpm counterparts or naturally the .tgz's... Maybe I've just got an outdated server in my server list? Don I would guess it was a unintentional flame, or it could have been intentional. I don't think it is the thing that will make me drop Debian and go back to Redhat, though thats for sure. I am sure it will be some time still before this new system will be able to catch up to the matureness of apt. Bill Warner > On Sep 21, 8:35am, Craig White wrote: > > Seems pretty clear that Debian is a committed free venture whereas > Redhat is > > and apparently always will be a commercial enterprise. Their hope is to > > commercialize added value. It may very well be the thing that kills apt. > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > I really don't understand this statement. Would you care to clarify? > > Kevin > > ________________________________________________ > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail. > > Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss > -- -- Bill Warner Direct Alliance Corp. Unix/Linux Admin. From Don Harrop" Ya, I already know about *most* of them. I'm pretty sure I cleaned it all up though. He tried again last night and couldn't. ;-) Clean up was successful. Rebuilding the whole box would have been a mojor pain in the ass as well as unwanted down time. I know it's only a mush (game) server but those are the people that are constantly on and scream during downtime.. :-) Don There are also other items in a standard rootkit. You could spend time checking ls, ps, top, sum, yada yada yada, against your pristine versions on read-only installation media (after booting into single-user mode on pristine read-only trusted media (and ONLY running binaries from said media)), but IMHO your best bet after a breach/rootkit incident is to take off and nuke the site from orbit. It's the only way to be sure. I'm sure there's a HOWTO on cleaning up your system after a rootkit "upgrade." Check Google. D From Don Harrop" Eh, oh.. Better update again.. :-) Don >I saw it. Actually, I'm quite afraid that wu-ftpd 2.6 is also compromised...didn't I see a notice a few weeks back? Craig > -----Original Message----- > From: plug-discuss-admin@lists.plug.phoenix.az.us > [mailto:plug-discuss-admin@lists.plug.phoenix.az.us]On Behalf Of Don > Harrop > Sent: Monday, September 25, 2000 1:24 PM > To: plug-discuss@lists.plug.phoenix.az.us > Subject: Re: user tracking > > > Thanks for the responses. I never know about the command "last". Very > cool. I've already found out most of what I needed. It was some guy over > in Russia. Those punks! :-) He left some cool utilz on the hard drive > for me though. A login replacement that logs all usernames and passwords > and a in.ftpd replacement. That's how he got in in the first place. I > was running wu-ftpd 2.5.x... I already know there's tons of documented > exploits with that verison. I've just upgraded to wu-ftpd 2.6 so that > should slow 'em down a little bit. > > Don > > On 26 Sep 2000, Bill Warner wrote: > > > This information is located in the /etc/shadow file. it is refrenced > > in the standard unix time thing (seconds sense jan 1 1970) check > > man shadow for more details > > > > Bill Warner > > > > > Hey guys. > > > At login I get a printout of when the last login occured. Where > > > is that info stored? I want to check out a user on the system but > > > don't want to log in as them. One of the machines I work with had the > > > root account compromised. It's just running a few mushes so > it's not that > > > big of deal but I don't want it happening again. I went > through it with a > > > fine tooth comb and wouldn't mind it if any of you guys tried > to whack at > > > it... Lemme know what you find. The IP is 205.216.140.17 > > > > > > Don > > > > > > > > > ________________________________________________ > > > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your > mail doesn't post to the list quickly and you use Netscape to write mail. > > > > > > Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us > > > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss > > > > > > > > > > > > > > ________________________________________________ > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail > doesn't post to the list quickly and you use Netscape to write mail. > > Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss ________________________________________________ See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail. Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss ________________________________________________ See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail. Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss From Don Harrop" Here, here. (whatever that means) :-) I have no problem with spending money on things worth spending money on. If my few dollars and cents can help RedHat continue development of Linux, I'm happy with that. As long as they don't go overboard like Microsloth has. Don't get me wrong here. I'd like to see everything about linux remain free-of-charge. I just don't want to see linux raped to death because no one is willing to kick in any money. I don't know about you guys, but I think Red Hat deserves credit for their work. I think it's a great idea. ------------------------------------------- Lucas Vogel, Software Developer Exponent Failure Analysis Associates, Inc. lvogel@exponent.com (623)587-6739 From Don Harrop" I've got mixed Linux and NT and 95 boxen and haven't had a problem since I learned how to seutp the smb.conf file correctly. I can connect from any one to any other too. I've even got a bounce share. NT connecting to a smb share that is connected to another NT share. Make sure you double check all your permissions! Don >I have the same problem. I have a NT and 95 box. the 95 can connect and see the shares just fine but NT doesn't see it. Since it's not a big problem I haven't bothered to dig into it. > > > I have Samba running at home with my 9.x boxes. I am trying to get it to run > with an NT box now. I am not able to access the shared directories of the > Linux box on the NT box. I have 9.x here at work to test with. Has anyone > had a problem with Samba with NT boxes? > > Thank You, > > David Demland > Qa/Testing Manager > CADTEL Systems, Inc. > 11201 N. Tatum Ste. 200 > Phoenix, AZ 85028 > (602) 953-4888 > Fax: (602) 953-4833 > ddemland@cadtel.com > > > ________________________________________________ > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail. > > Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss > ________________________________________________ See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail. Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss