December 2010 - RAS-run

Repec author service says my record is damaged. Please let me know what I need to do. Thanks. <EOM> (fwd)
by Christian Zimmermann 26 Dec '10

26 Dec '10

Something not going right indeed. Christian Zimmermann FIGUGEGL! Department of Economics University of Connecticut 341 Mansfield Road, Unit 1063 Storrs, CT 06269-1063 http://ideas.repec.org/zimm/ christian.zimmermann(a)uconn.edu http://ideas.repec.org/e/pzi1.html ---------- Forwarded message ---------- Date: Sat, 25 Dec 2010 18:21:43 -0500 From: Kartik Athreya <kitrak101(a)gmail.com> To: "authors(a)repec.org" <authors(a)repec.org> Subject: Repec author service says my record is damaged. Please let me know what I need to do. Thanks. <EOM>

1 0

nekba software upgrade
by Thomas Krichel 12 Dec '10

12 Dec '10

I made an emergency upgrade this morning following http://lists.debian.org/debian-security-announce/2010/msg00181.html -- Cheers, Thomas Krichel http://openlib.org/home/krichel http://authorclaim.org/profile/pkr1 skype: thomaskrichel

1 0

security on nebka
by Thomas Krichel 06 Dec '10

06 Dec '10

It looks like somebody came from khufu, got in as tim, then changed to root using sudo. Tim is in /etc/sudoers. Dec 1 19:41:18 nebka sshd[3389]: Accepted keyboard-interactive/pam for tim from 129.3.20.41 port 35641 ssh2 That's khufu. But I can't see how he got into khufu. Dec 1 19:41:18 nebka sshd[3389]: pam_unix(sshd:session): session opened for user tim by (uid=0) Dec 1 19:45:01 nebka CRON[3812]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 19:45:01 nebka CRON[3812]: pam_unix(cron:session): session closed for user root Dec 1 19:46:01 nebka CRON[4269]: pam_unix(cron:session): session opened for user aras by (uid=0) Dec 1 19:46:29 nebka sshd[4294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=informatika.brkk.hu user=root Dec 1 19:46:31 nebka sshd[4292]: error: PAM: Authentication failure for root from informatika.brkk.hu Dec 1 19:48:17 nebka CRON[4269]: pam_unix(cron:session): session closed for user aras Dec 1 19:49:16 nebka su[4369]: pam_unix(su:auth): authentication failure; logname=tim uid=1001 euid=0 tty=pts/1 ruser=tim rhost= user=aras Dec 1 19:49:19 nebka su[4369]: pam_authenticate: Authentication failure Dec 1 19:49:19 nebka su[4369]: FAILED su for aras by tim Dec 1 19:49:19 nebka su[4369]: - pts/1 tim:aras Dec 1 19:49:24 nebka su[4371]: pam_unix(su:auth): authentication failure; logname=tim uid=1001 euid=0 tty=pts/1 ruser=tim rhost= user=root Dec 1 19:49:27 nebka su[4371]: pam_authenticate: Authentication failure Dec 1 19:49:27 nebka su[4371]: FAILED su for root by tim Dec 1 19:49:27 nebka su[4371]: - pts/1 tim:root Dec 1 19:49:35 nebka sudo: tim : TTY=pts/1 ; PWD=/home/aras ; USER=root ; COMMAND=/bin/su - Dec 1 19:49:36 nebka su[4373]: Successful su for root by root Dec 1 19:49:36 nebka su[4373]: + pts/1 root:root I removed the user tim. I can't find a rootkit. Cheers, Thomas Krichel http://openlib.org/home/krichel http://authorclaim.org/profile/pkr1 skype: thomaskrichel

1 1

Re: [RAS] Cron <aras@nebka> /home/aras/acis/bin/clean-up >> /home/aras/acis/clean-up.log
by Thomas Krichel 05 Dec '10

05 Dec '10

Cron Daemon writes > [6614] Forking a request: ACIS: l/e/leopold.simar(a)uclouvain.be.xml > [6614] Forking a request: ACIS: a/w/a.weichenrieder(a)em.uni-frankfurt.de.xml > [6614] Forking a request: ACIS: f/r/francesco.pastore(a)unina2.it.xml > [6614] Forking a request: ACIS: p/b/pbrenton(a)worldbank.org.xml > [6614] Forking a request: ACIS: m/s/msmoav(a)huji.ac.il.xml > [6614] Forking a request: ACIS: e/v/evzen.kocenda(a)cerge-ei.cz.xml > [6614] Forking a request: ACIS: m/c/mcincera(a)ulb.ac.be.xml > [6614] Forking a request: ACIS: t/v/t.valletti(a)imperial.ac.uk.xml > [6614] Forking a request: ACIS: s/w/swank(a)few.eur.nl.xml > DBD::mysql::st execute failed: MySQL server has gone away at /home/aras/acis/lib/sql_helper.pm line 453. > ...propagated at /home/aras/acis/lib/sql_helper.pm line 296. I restarted the daemon. Cheers, Thomas Krichel http://openlib.org/home/krichel http://authorclaim.org/profile/pkr1 skype: thomaskrichel

1 0

Re: [RAS] Cron <aras@nebka> /home/aras/acis/bin/clean-up >> /home/aras/acis/clean-up.log
by Christian Zimmermann 02 Dec '10

02 Dec '10

Usual procedure does not work: aras@nebka:~/acis/userdata$ rid stop Killing control_daemon with pid 7937 /home/aras/acis/bin/rid: line 63: kill: (7937) - No such process Wait for control_daemon to exit................................. gave up waiting! Probably the daemon is busy. aras@nebka:~/acis/userdata$ rid start going to start RI daemon (/home/aras/acis/bin/control_daemon.pl) pid file /home/aras/acis/RI/daemon.pid is present aborting aras@nebka:~/acis/userdata$ All I can do, in classroom for the next hours. On Thu, 2 Dec 2010, Cron Daemon wrote: > [18209] Forking a request: ACIS: k/i/kisinbay(a)yahoo.com.xml > [18209] Forking a request: ACIS: e/s/esteban.perez(a)cepal.org.xml > [18209] Forking a request: ACIS: o/l/olivier.cardi(a)u-paris2.fr.xml > [18209] Forking a request: ACIS: a/z/a.zapechelnyuk(a)qmul.ac.uk.xml > [18209] Forking a request: ACIS: s/t/steven.poelhekke(a)dnb.nl.xml > [18209] Forking a request: ACIS: c/o/colemat(a)gmail.com.xml > [18209] Forking a request: ACIS: q/u/quentin.max.david(a)gmail.com.xml > [18209] Forking a request: ACIS: m/p/m.pugno(a)unicas.it.xml > [18209] Forking a request: ACIS: m/a/matias.braun(a)uai.cl.xml > DBD::mysql::st execute failed: MySQL server has gone away at /home/aras/acis/lib/sql_helper.pm line 453. > ...propagated at /home/aras/acis/lib/sql_helper.pm line 296. >

2 1