[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-bugs-dist
Subject:    Bug#33067: https works for root but not for normal user
From:       "Neil Smith" <patterdale () hotmail ! com>
Date:       2001-09-30 11:50:42
[Download RAW message or body]

>From: "Neil Smith" <patterdale@hotmail.com>
>Reply-To: 33067@bugs.kde.org
>To: 33067@bugs.kde.org
>Subject: Bug#33067: https works for root but not for normal user
>Date: Sat, 29 Sep 2001 23:48:00
>
>>From: George Staikos <staikos@kde.org>
>>Reply-To: 33067@bugs.kde.org
>>To: 33067@bugs.kde.org
>>Subject: Bug#33067: https works for root but not for normal user
>>Date: Fri, 28 Sep 2001 12:48:42 -0400
>>
>>On Friday 28 September 2001 11:48, Neil Smith wrote:
>>
>> > > > When accessing https:// sites as root it all works fine.  When
>> > > > accessing the same sites as a normal user, a small window pops up
>> > > > saying that the site cannot be located.
>> > > >
>> > > > All the SSL settings are the same for root and the normal users.
>> > > >
>> > > > I have tried from a newly defined userid, so there is nothing
>>hanging
>> > >
>> > >over
>> > >
>> > > > from previous versions of kde.
>> > >
>> > >   Do you mean that the DNS lookup is failing, or that it can't
>>connect?
>> > >Also, do the "Test" button work on the OpenSSL configuration panel in
>> > >KControl/Personalization/Crypto?
>> >
>> > No, DNS is fine.  From the same machine as root I can connect to lots 
>>of
>> > different https sites, but can't connect to any of them as a normal
>>user.
>> > I'm guessing it's a permissions problem, but I've no idea what.
>> > The test button works.  It gives a message along the lines of OpenSSL
>> > library loaded.
>>
>>    check the permissions of /usr/share/apps/kssl/caroot/ca-bundle.crt.  
>>Hm
>>I
>>don't know what else could cause this.  However if the error message is
>>that
>>it can't find the site, well, that sounds like a DNS failure to me.
>>
>>--
>>
>>George Staikos
>>
>
>Permissions on ca-bundle.crt are 644.
>The actual message text in the error window that pops up when connecting to
>the https site is "Could not connect to host www.sitename.com"  (sitename 
>is
>whatever site I'm connecting to).
>I know what you mean about it sounding like a DNS problem, but I use a
>separate PC as a DNS server, so there's no reason why it would be able to 
>do
>a lookup for root but not for a normal user.
>I've also tried connecting to the https site using the actual IP address,
>which again works fine for root (and from windows), but not for a normal
>user.
>I'm guessing it must be something to do with SSL trying to write to a file.
>Is there any way I can trace what's going on?
>Thanks for your help
>Neil
>

Found it.  The permissions on /dev/random and /dev/urandom were set as 640.  
I've changed this to 644 and now https works for all users.
Thanks again
Neil



_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

[prev in list] [next in list] [prev in thread] [next in thread]