response 200 of 467:

Oct 17 07:02 UTC 2004

You'll have at least 3 days notice.

I fixed some bugs in web-newuser, and that seems to be working right now.

Editted up the lynx config file to match the one on Grex.  I haven't done
any extensive testing of the lynx shell, however.  It seems to at least
sort of basically work.

Installed 'kermit' from the ports tree.  I guess we still have dialup users,
huh?

The 'sx', 'sz', 'rx', rz' commands on Grex do X-modem and Z-modem file
transfers.  I haven't looked very hard, but I haven't found a copy of them
for OpenBSD.  There are some things call 'lrz' and 'lsz' in the ports tree
that proport to do x-modem, y-modem, and z-modem transfers.  I don't know
if they are an adequate substitute.  Does anyone still care?

It's 3am.  Time for bed.

response 202 of 467:

Oct 17 21:26 UTC 2004

I installed the lrzsz package.

response 204 of 467:

Oct 18 05:19 UTC 2004

I'm posting this using fronttalk from m-net.  Even more cool.

response 206 of 467:

Oct 19 13:36 UTC 2004

I did a review of the tools for renumbering GID and UIDs that Dan Cross
did.  They look fine.  I applied some very minor bug fixes and added
a wee bit of documentation and stuck them in ~janc/regroup on nextGrex
where I can find them when I need them.

response 208 of 467:

Oct 19 15:18 UTC 2004

Fixed two more bugs reported by styles:  Newuser was setting group ids
incorrectly, and MANPATH was not being set right.  He raised some questions
about the packet filters, which I forwarded to Grex Staff because I've
not worked with them at all yet.

response 210 of 467:

Oct 19 21:09 UTC 2004

I could not find pine, elm, or links at nextgrex.  Have you simply not
installed them yet?  Are we testing a partial system?

response 212 of 467:

Oct 21 14:20 UTC 2004

Cindi reported that the 'change' program was wasn't working right.  I tried
it and found that when I changed to 'pico' it editted my .login file, changing

     setenv EDITOR pico

to 

     EDITOR= ; export EDITOR

Uh huh.  Not only is it setting the editor to a null string, it's putting 'sh'
shell syntax into a 'csh' startup file.

Fixed a number of bugs in the change_editor script

  - Deleted option to change to the 'bbsed' editor.  We don't have source
    for this and probably don't want it.

  - Fixed paths of different shells so it should be better at identifying
    which shell a user has.

  - nawk now appears to require a "-v" flag before any variable setting
    parameters on the command line.  Fixed this in change_editor,
    change_keys and the chsh wrapper.

Also added bbs to /etc/shells.

response 214 of 467:

Oct 21 14:48 UTC 2004

Copied the pine.conf file from Grex to nextGrex.  Added two lines Cindi
wanted that enable it to automaticaly view URLs with lynx.

response 216 of 467:

Oct 21 16:11 UTC 2004

Ported over the 'listcommands' script, which is mentioned in the FAQ.

response 218 of 467:

Oct 21 20:03 UTC 2004

Elm works.  Pine works and reads URLs with lynx.  Is it also supposed to
display html mails with lynx (as plain text instead of with tags)?
The change program worked to change shells (bash to tcsh and back).
It still does not work for changing editors.  I tried to change from pico to
joe and was told "Unknown shell.  Keys not permanently changed".

response 220 of 467:

Oct 22 00:20 UTC 2004

Sure, why not.

response 222 of 467:

Oct 22 00:39 UTC 2004

Currently trying to figure inet wrappers out.

I understand that the packet filters test only the user's effective group.
Our internet users don't have their effective group changed, instead they
are only added to the inet group list in /etc/group.  This is a supplementary
group, not understood by pf.

Dan had change the wrapper scripts around telnet and ftp to do this:

  exec sg inet -c "${REAL_CLIENTS}/${MYNAME} $*"

'sg' is similar to 'newgrp'.  It lets you run a command as one of your
supplementary groups.  This would work fine, if 'sg' existed for OpenBSD.
Near as I can tell, BSD unix lets you access files based on your
supplementary groups, so people figured they didn't need 'sg' and 'newgrp'.

I've been trying to think of ways to make this work right.  One way would
be to turn the wrapper into a C program.  It would be permitted set-gid
'inet'.  It would check if 'inet' is one of the user's supplementary groups.
If not it would setgid(getgid()), reseting the effective group id to the
user's real uid.  Either way, it would then run telnet or ftp or whatever.
(Running it even if the user is not in the inet group leaves the option open
of letting non-members telnet to some places, as determined by the 'pf'
rules).

Maybe I'll take a cut at coding such a wrapper.

response 224 of 467:

Oct 22 01:51 UTC 2004

I wrote it, but then discovered that that's not the way pf is configured.
I think I'll wait till Joe gets a chance to look at this.