kdm, sssd, kerberos keytab login
by Anthony Joseph Messina
Is is possible to set up a system such that it can use KDM to auto login
a user via KDM (or GDM if need be) using a local kerberos keytab?
The underlying system will be a fully updated Fedora 16 or 17 host using
SSSD and access Kerberized NFSv4 mount points.
Thanks. -A
--
Anthony - http://messinet.com - http://messinet.com/~amessina/gallery
8F89 5E72 8DF0 BCF0 10BE 9967 92DC 35DC B001 4A4E
12 years, 1 month
Alt-tab on kde 4.8.1
by Chris Rouch
I recently updated to kde 4.8.1 on fedora 16, and notice that Alt-Tab
no longer works. In the settings window, I have this set to "walk
through windows". The top half of this is greyed out with a message
"Focus policy settings limit the functionality of navigating through
windows.", but previously (kde 4.7.4) this action would raise the next
window. The focus policy is "focus under mouse".
Is there a way to make alt-tab work again?
Regards,
Chris
12 years, 1 month
Per-Window Opacity
by Armelius Cameron
Hello,
There used to be a way to set per-window opacity from the Window advanced
menu, but I can't find that anymore. Does anyone know what's happened to that ?
I am using F-16 fully updated (kde-4.8.1) with Oxygen window theme. In the
past, there was pre-defined opacity level (e.g. 100%, 90%, 70%, ... ) that I
can select from.
Thanks.
AC
12 years, 1 month
Fastest mirror
by Timothy Murphy
I just came from Ireland to Italy,
and was surprised that when I ran "sudo yum update"
with the fastest_mirror plugin,
it still used the same repo in Ireland for fedora-update,
though I can't believe it would be the fastest in Italy.
--
Timothy Murphy
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College Dublin
12 years, 1 month
Timezones and SELinux...
by Marko Vojinovic
Hi folks!
Just updated my F16 to KDE 4.8.1, restarted the system in the latest kernel,
and I am hitting a few issues. I've seen the same issues with KDE 4.7.*, but
didn't complain, hoping that they'll go away... ;-)
After the KDE update, both before and after the restart of the system (there
was a new kernel as well), my timezone setting is wrong again --- it is set to
Lisbon (GMT), which was my previous setting, rather than Belgrade (GMT+1)
which was my current setting (prior to update). AFAIK, this should not happen
unless I ask for the timezone change.
Second, when I open systemsettings to change the timezone, after clicking
"apply" and giving the root password, the timezone change fails, and SELinux
gives an alert:
===== long quote =====
SELinux is preventing /usr/libexec/kde4/kcmdatetimehelper from using the
dac_override capability.
***** Plugin dac_override (91.4 confidence) suggests ***********************
If you want to help identify if domain needs this access or you have a file
with the wrong permissions on your system
Then turn on full auditing to get path information about the offending file and
generate the error again.
Do
Turn on full auditing
# auditctl -w /etc/shadow -p w
Try to recreate AVC. Then execute
# ausearch -m avc -ts recent
If you see PATH record check ownership/permissions on file, and fix it,
otherwise report as a bugzilla.
***** Plugin catchall (9.59 confidence) suggests ***************************
If you believe that kcmdatetimehelper should have the dac_override capability
by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep kcmdatetimehelp /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp
Additional Information:
Source Context system_u:system_r:gnomeclock_t:s0-s0:c0.c1023
Target Context system_u:system_r:gnomeclock_t:s0-s0:c0.c1023
Target Objects [ capability ]
Source kcmdatetimehelp
Source Path /usr/libexec/kde4/kcmdatetimehelper
Port <Unknown>
Host Yoda
Source RPM Packages kde-workspace-4.8.1-6.fc16.x86_64
Target RPM Packages
Policy RPM selinux-policy-3.10.0-75.fc16.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name Yoda
Platform Linux Yoda 3.2.10-3.fc16.x86_64 #1 SMP Thu Mar
15
19:39:46 UTC 2012 x86_64 x86_64
Alert Count 1
First Seen Mon 19 Mar 2012 08:00:25 AM WET
Last Seen Mon 19 Mar 2012 08:00:25 AM WET
Local ID 6c829d68-d5d6-4696-b636-f6efa26b8b49
Raw Audit Messages
type=AVC msg=audit(1332144025.273:73): avc: denied { dac_override } for
pid=2173 comm="kcmdatetimehelp" capability=1
scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023
tcontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tclass=capability
type=SYSCALL msg=audit(1332144025.273:73): arch=x86_64 syscall=access
success=no exit=EACCES a0=1db33d8 a1=2 a2=200 a3=0 items=0 ppid=1 pid=2173
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
tty=(none) ses=4294967295 comm=kcmdatetimehelp
exe=/usr/libexec/kde4/kcmdatetimehelper
subj=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 key=(null)
Hash: kcmdatetimehelp,gnomeclock_t,gnomeclock_t,capability,dac_override
audit2allow
#============= gnomeclock_t ==============
allow gnomeclock_t self:capability dac_override;
audit2allow -R
#============= gnomeclock_t ==============
allow gnomeclock_t self:capability dac_override;
===== end of long quote =====
Somehow I feel that I am not supposed to tweak SELinux policy in order to
change my timezone setting. In the past I would put SELinux into permissive
mode, change the timezone, and then re-enforce SELinux. But the issue keeps
reappearing, so I don't believe that this is the right solution.
Ideas?
Best, :-)
Marko
12 years, 1 month
claws-mail crashing with updated KDE on F16
by George Avrunin
I did a yum update yesterday and got a lot of kde 4.8.1 rpms (replacing mostly
4.7.4, I guess). Now claws-mail crashes every time I send a message (though
the message does seem to get sent). Claws-mail didn't get updated, and it
seems to work ok with gnome, so I assume the problem is the kde stuff.
Claws shows a message at the bottom saying it's "Scanning folder
avrunin(a)ext.math.umass.edu/Queue" (the account is avrunin(a)ext.math.umass.edu)
and dies.
I have sent off the abrt stuff (#804790 on bugzilla), but I'm hoping there's
some known problem and I can either work around it or use rpms from
updates-testing or the kde repos. Any suggestions will be appreciated.
George
12 years, 1 month
Kmail two little questions
by Mario Santagiuliana
I update my kde pim package to new present in stable repo. Now I have kde
4.8.1.
I must to delete and recreate my akonadi database. New version can't read
old database. I must recreate all my email accounts and filters and I can
retrieve my old emails.
Now I have two problems:
- some emails contain just the header but not the body message. This happen
on email in local folder and some time on an imap account (gmail);
- the filters are not apply every time kmail download new emails, I must do
it manually...
Do you have these problems? Have you got any suggestions?
Thank you
--
Mario Santagiuliana
www.marionline.it
12 years, 1 month
KMail search facility
by Timothy Murphy
Now that KMail appears to be more or less stable on my laptop (touch wood),
I'm looking at some less important features.
I notice that there seem to be 2 search facilities, to look through folders:
(1) there is a narrow Search window above the list of emails in the folder,
and (2) there is a search facility Tools=>Find Messages.
The former seems to work,
but the second appears completely non-functional,
eg I just searched for "the" in 1000 emails (choosing "Complete message")
and got no response on pressing Search.
There is no evidence in fact that any search is being made.
This doesn't really matter, since one method works.
But I wonder if the second method works for anyone?
There has incidentally been some changes in the format of the Tools method,
eg it looks (or claims to be looking) through the current folder,
rather than through all folders.
--
Timothy Murphy
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College Dublin
12 years, 1 month
KMail working!
by Timothy Murphy
KMail seems to be working fine for me now on my Fedora-16 laptop.
I saw there was a kdepim update which may have been responsible.
But something else I did which seemed to have a dramatic effect
was to yum-reinstall mysql and mysql-server.
Akonadi seemed to take some time after this re-creating a database,
which I don't recall it doing before, when moving to KMail2?
--
Timothy Murphy
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College Dublin
12 years, 1 month