Login Scripts - Best Practices

I've been very busy the last couple of weeks. It's past time to post on my blog. This week I found a great Cool Solutions article by David Lange on Login Scripts.

Login scripts should be simple to manage. They should be easily viewed and intuitive to any IT staffer with a little programming background. In fact, if you treat them like code and create modular script that can be referenced in subordinate containers, you'll find you can easily manage your scripts and make changes to accommodate user needs much more efficiently.

You should get three valuable tips from reading this article:

1. Where to find instructions on building your scripts.
2. How to modularize your login script for easy management and execution.
3. How to help eDirectory deliver your modular scripts without slowing down the login process.

Check out the Novell Login Scripts Guide (PDF Format) for NetWare and Linux.

- Bucky

Get the Patch for the Microsoft WMF File Vulnerability

See my earlier blog about this Microsoft Issue a couple of blogs ago. Microsoft Document 912919

Learn more about this update

More info

Latest eDirectory Matrix Chart - 8.6 and greater

I find this matrix very useful in large corporate trees.

Novell TID 10066623

With the introduction of eDirectory 8.6, all eDirectory components have newer marketing and build version formats. These formats are meant to eliminate any confusion for future releases. The goal of this TID is to provide information on this new versioning standard and why it has changed. The following table is meant to help keep track of which versions are included with each eDirectory product or patch.

Includes versions for DS.NLM, DSREPAIR.NLM, NLDAP.NLM, DSLOADER.NLM

Note the latest eDirectory 8.8 version:
eDirectory 8.8 DS.NLM 20112.92

VMWare Image SuSE Linux with KDE 3.5 - Hot!

KDE Developer Stephan Beineri (or Binner) has released a VMware image of SUSE 10 with latest KDE 3.5 installed.

"I created an image which contains a standard KDE desktop installation of SUSE Linux 10.0 OSS, upgraded to KDE 3.5 including KOffice 1.4.2 excluding non-KDE applications. It's a fully working installation."

www.kdedevelopers.org

Links to VMWare image and free VMWare player!

Link to VMWare free player

Now you can run SuSE 10 on top of Windows! Check it out this great opportunity to see SuSE10 and the latest KDE! It's all done for you. Show your co-workers, be the envy of all your friends!

- Bucky

PS. Here's another tip! Novell and VMWare, as well as other vendors such as Red Hat and IBM have a joint web page to download eval versions of software VM's.
Download Novell SLES9 or Novell Linux Desktop that runs inside of VMWare player.
Link to VMTN (Virtual Machine Technology Network)

Link to Novell's eval VM's

Beware - Nasty Windows Exploit - wmf files

There is a new Microsoft Windows XP and 2003 exploit, which uses wmf image files to attack.

According to Secunia's website:

The vulnerability is caused due to an error in the handling of corrupted Windows Metafile files (".wmf"). This can be exploited to execute arbitrary code by tricking a user into opening a malicious ".wmf" file in "Windows Picture and Fax Viewer" or previewing a malicious ".wmf" file in explorer (i.e. selecting the file). This can also be exploited automatically when a user visits a malicious web site using Microsoft Internet Explorer.

Several security groups are reporting that it is extremely easy to get whacked by this vulnerability/exploit just by visiting one of a growing number of malicious Web sites that are now employing this attack. F-Secure's blog post on this indicates that -- because the vulnerability lies in the way Windows parses WMF image files -- Firefox and Opera users also can get infected -- although they at least have to agree to download and run a file first. The Sunbelt Blog Website also has some good information on this exploit, including some nice screenshots of what it looks like when your machine gets hit with this.

Temporary Workaround:

Windows users can disable the rendering of WMF files using the following hack:

1. Click on the Start button on the taskbar.
2. Click on Run...
3. Type "regsvr32 /u shimgvw.dll" to disable.
4. Click ok when the change dialog appears.

Once Microsoft issues a patch, the WMF feature may be enabled again by entering the command "regsvr32 shimgvw.dll" in step three above.

More Information:

• What is a WMF file?
• Microsoft Security Advisory 912840
  
• Sunbelt Blog
• Security Focuss Website / Discussion
• Gameshout Article

Unofficial Patch for Windows Flaw
Security experts are urging Windows users to apply a non-Microsoft-issued software patch to fix an extremely dangerous bug that has exposed hundreds of millions of the operating system's users to spyware and viruses.

The patch was developed by computer programmer Ilfak Guilfanov, perhaps best known in security circles at the creator of IDA Pro, a tool used to design and deconstruct software and even malware.

Article on unofficial patch
Download unofficial patch

I have not been able to successfully get to the website to download the patch. I would use the temporary workaround until an official patch gets released by Microsoft.

Or for a better permanent solution and I really feel I have to mention this - Switch to SuSE Linux 10 or Novell Linux Desktop. ;-)

SuSE Linux 10 Customer Reviews

I was on Amazon.com today looking for new Novell / Linux Books and came across product reviews from customers of SuSE Linux 10.

I've heard nothing but excellent reviews but if you want to see for yourself, check these reviews out.

www.amazon.com

One example:
"I am a computer systems engineer by profession and I work with many different computer systems. About 3 years ago I became involved with Linux. I have used or tried just about every Linux distro available. But I must say that SUSE Linux 10 is, in my opinion anyway, the best available. It's the easiest to set up, the easiest to use, the easiest to administer and has more applications included then you could ever want. To me, this distro definitely gives Microsnot a run for its money.

If you're new to Linux or just want to try it out, get SUSE Linux 10: you'll be glad you did."
- Richard G Brock, Hartford CT