Damaging Terminal sudo session?
I’m new to Mac (less than a year), and to administering my own computer. Trying to get things right and agreeable to me, for security and utility, is taking up much of my available time—as much as, or often more time than I spend USING my Mac.
Recently, I tried to use a sudo command in Terminal for the first time, following advice published by Macworld for forcing updates to OS X’s new XProtect malware definitions, and I wonder whether I’ve done any damage by what I did, from knowing next to nothing about command-line protocols, how to exit Terminal properly, and so on. I have a spring 2011 MacBook Pro, running OS X 10.6.8 (it may have been running a prior update version when I got myself into that maybe-troublesome Terminal session some weeks ago).
The command I ran, per the Macworld article, was “sudo /usr/libexec/XProtectUpdater,” which brought up this typical warning: “Improper use of the sudo command could lead to data loss or the deletion of important system files. Please double-check your typing when using sudo. Type ‘man sudo’ for more information. [Which I did, haplessly: I didn’t then know how to get further down that file than what was appearing in the window!] To proceed, enter your password, or type Ctrl-C to abort.” After my visit to man sudo and maybe then having to paste in the sudo command again, to run it I entered my admin password. As no characters were appearing in the Terminal window for the password, I thought nothing was happening; but I pressed the Enter key (or the appropriate button in the password pop-up, whichever was the case) anyway.
When (eventually) I tried to close the Terminal window (without knowing at the time about using the exit command), I got this pop-up message: “Do you want to close this window? Closing this window will terminate the running processes: …” followed by a short list that included, I think, login, sudo, man, maybe bash. I chose to close the window anyway, and immediately worried that I may have done something I shouldn’t have.
After running that updater command again on one or two other occasions since (though those times exiting Terminal through the exit-command route), I’ve since read on macworld.com that using that sudo command to force malware-definitions updates “can cause users to lose their login.keychain file.” (Thanks for the initial generally-broadcast advice to use that sudo command, Macworld.) I don’t yet actively use the Keychain for storing passwords, so I thought, no problem.
When still at the computer right after that first, half-witted occasion, however, and switching between my standard account and the admin account, the desktop filled only about 80% of the display, from the upper-left corner; the remainder of the display below and to the right of the desktop was just plain blue screen. I’d never experienced THAT before. That got remedied by a restart (though I think I remember it happening that night when logging into both the admin and the standard-user accounts), but it has recurred often, seemingly now only when I log into the admin account. Each time it does happen, a restart fixes it. But I think it’s a result of my fiddling unknowingly with that sudo command, could that be?
Next, a little more knowledge maybe yields some more trouble: I’ve tried, as admin user, to look at the Mac’s /etc/sudoers file to see whether it contains my admin, or any other recognizable user, but I get this response: “Permission denied” and ditto for trying to look at (or run) /private/etc/sudoers, private/etc//sudoers (which I saw referred to in these forums, I think, and wondered that it might NOT be a typo with those two slash marks together), cat /etc/sudoers. But I’ve read that admin users have sudoer permissions, no?
Advice? (about damage from my Terminal sudo and botched-exit misadventure, the 80% desktop in the display, my inability to access the sudoers files)
The problem with the display seems to have occurred when logging out from one account (either my standard-user acct. or my admin acct.) and (though maybe just sometimes, not always) into another account. I hadn’t checked the screen resolution until following your suggestion, and found it at 1440 x 1052 (stretched) when in that ~80%-of-normal condition. This display’s nominal resolution is 1680 x 1050. When 1440 x 1052 (stretched) resolution is chosen normally, however, the desktop or login screens appear symmetrically onscreen, centered and using the full extent of the display, unlike how they appear when this problem occurs “on its own.” Since resetting the resolution (when the display was in that problematic state) to 1680 x 1050, last week, the problem hasn’t recurred, through several logouts and logins between these two accounts, in a couple of different sessions. Thanks for the helpful advice.
The F9 key function doesn’t seem to have had anything to do with this display problem. Your wondering about that, though, and the advice in your last two paragraphs, are worth my attention generally. I appreciate the links to Apple’s instructions on resetting PRAM, NVRAM, and the SMC.
So, the display problem that may or may not have come up from my half-baked Terminal session seems solved, but my worry or wondering remains over what may have occurred from my sudo fiddling to get malware definitions updated. And why my admin account can’t access the sudoers file, and whether that’s another problem, I dunno, and I don’t have a lot of time to be getting into finding out, yet. I wonder whether I should just reinstall the OS and start fresh.
Similar Messages
-
Printing to a Deskjet 1000 from a terminal services session (2003) on my XP laptop.
The printer is a CH340-64001 and it works fine on an XP laptop. When an attempt is made to use it during a terminal services session it fails because Server 2003 does not have the drivers for the printer.
When I try to run the installation from the CD I get a message that the operating system is not compatible.
Is there any way to install the XP drivers to Server 2003 or does the printer need to be replaced with another model?There isn't a way, that I know of, to get the printer's XP drivers to work with Server 2008. However, there is an alternate driver that you can try using. It's the Deskjet 990c driver. It's a generic inkjet driver that works with most inkjet printers. It should work with the printer you're using. That's really the only thing I can think of that might work.
-------------How do I give Kudos? | How do I mark a post as Solved? -------------------------------------------------------- -
Hi all,
As title, I have this question: why do we need a rdp session to take remote control of a terminal server session?
I copied tsadmin and related file to a windows 8.1 pc and I'm able to see for every terminal server the list of users logged in, but the option "take control" is greyed out... why? is not possible to avoid this block?
Thanks in advance
DavideHello, Davide_ita.
Also tried to use RDSM to "Remote Control" user's sessions, but in this thread
Remote Control
with Remote Desktop Services Manager - error Access is denied (Windows Server 2012 R2)
I get the recommendation to use RDP or Remote Assistance.
The quote of
TP []:
Hi,
You cannot remote control a session on a 2012 R2 RDSH server using Remote Desktop Services Manager. You need to use the RDP 8.1 mstsc.exe or the RDS gui in Server Manager on 2012 R2. The command you would use with the RDP 8.1 client would be
this:
mstsc /shadow:<sessionid> /control
-TP -
2003 Terminal Server Session Directory Clustering
Hi everybody ;
I have question about clustering TS Session Directory Service.
In my environment I have four terminal server which running Windows Server 2003 R2. Now we bought two new servers and we are planning to use them for File Server with Windows Server 2008 R2. I installed Windows Server 2008 R2 to this new servers
and i configured them for file server and clustered this two server. But i want to cluster the my terminal servers session directory service in this cluster environment. My terminal server WS2003 but cluster environment is WS2008. Is there a problem about
this version difference ?
Thanks.i don't believe so. 2003 terminal services requires at least 2x 2003 servers with the session directory service running on them to be clustered in MSCS. 2008 has a whole new session directory which will not serve 2003 remote desktop hosts
http://support.microsoft.com/kb/301923
http://support.microsoft.com/kb/301926
http://download.microsoft.com/download/8/6/2/8624174c-8587-4a37-8722-00139613a5bc/TS_Session_Directory.doc
you may want to consider upgrading your old 2003 terminal server environment to 2008 though. -
Hi,
I think this can be done in Unix, using telnet, you may log into the
system and install it.
Regards
Raj
Mozkill Williams wrote:
why is it that directory server and IAS will not install through a
remote Terminal Services session??
Try our New Web Based Forum at http://softwareforum.sun.com
Includes Access to our Product Knowledge Base! -
Windows Terminal Server Session Directory
Anybody know when Session Directory will be supported?
We have a TS farm that uses session directory. Our Sun Rays with uttsc work fine and will redirect the users to their active session.
No such luck with SGD pointed at the farm. The user will open a new session and not get redirected to their existing session.
As one can imagine, this causes all sorts of problems when users leave their desks and then go home and can no longer access their existing session on the terminal server.Currently SGD does not support the Terminal Server Session Directory. It is however on the roadmap of SGD, but I don't know if it will be in the next release yet.
- Remold | Everett -
Revision: 4628
Author: [email protected]
Date: 2009-01-22 15:45:06 -0800 (Thu, 22 Jan 2009)
Log Message:
Fix FB-15947: Terminating debug session closes Safari window including tabs not launched by debugger
Ticket Links:
http://bugs.adobe.com/jira/browse/FB-15947
Modified Paths:
flex/sdk/trunk/modules/debugger/src/java/flash/tools/debugger/concrete/appleScriptCloseSa fariWindow.txtRevision: 4628
Author: [email protected]
Date: 2009-01-22 15:45:06 -0800 (Thu, 22 Jan 2009)
Log Message:
Fix FB-15947: Terminating debug session closes Safari window including tabs not launched by debugger
Ticket Links:
http://bugs.adobe.com/jira/browse/FB-15947
Modified Paths:
flex/sdk/trunk/modules/debugger/src/java/flash/tools/debugger/concrete/appleScriptCloseSa fariWindow.txt -
Terminal Server Session Freezes/Hangs
Hi,
Just a little background info, I have a terminal server farm running Windows 2003 R2 Enterprise behind a hardware load balancer and I am utilizing the session directory service.
The issue I am running into is users’ terminal sessions will freeze up when they reconnect to their existing session. There are two scenarios that this happens. When a user moves from one desk to another and they log into the terminal server and reconnect
to their session or after a period of inactivity their session will lock them out and then they log in. All the user gets is usually only a partial display or just the desktop backgroup and the session doesn't respond. I used to just kill their session and
have them log back in but now I have narrowed it down to the OUTLOOK.EXE process. If I log into the server they are on and kill their Outlook process their session starts to respond. I have noticed that Outlook will be utilizing 2% to 10% CPU when it is occurring.
We are running Office 2010. It seems to be random and very frustrating.
Any help would be greatly appreciated.
ThanksHi,
Thanks for your posting.
According to your issue, I can let you know some solutions but before that want information from your side.
a. How many clients are logged in TS session at a time?
b. Have you tried by disabling Offloads?
Information regarding Offloads:
http://support.microsoft.com/default.aspx/kb/951037
c. You check the performance of your server by using Performance Monitor tools and can capture logs.
http://technet.microsoft.com/en-us/library/cc749115.aspx
Please install the required hotfixes available for the issue.
1. Terminal Server and connected Terminal Services clients pause when a Terminal Services client logs on or logs off (KB 324446):
http://support.microsoft.com/kb/324446
2. A Windows Server 2003-based or Windows Server 2008-based terminal server stops accepting new connections, and existing connections stop responding (KB 956438):
http://support.microsoft.com/kb/956438
Might This Helps!
Thanks. -
Terminating PPPoE Session in a 7206vxr Router
Hi
We are running a 7206vxr Router as an ISG. We have an Ethernet LAN , the clients are using a static IP assigned to their LAN Card. The clients are logging into the network using a Broadhop AAA Server ( SME ) using a Portal ( L4Redirect ). But we also want to use a PPPoE client to be used by the customers to logg in . I am attaching the output of "sh run" of the Router with this mail in which you can see the configuration which I have done for terminating the PPPoE Sessions. But somehow it is not working.
Any suggestions is welcome.
AbhishekHi Nirmal,
I have added a javascript function to handle the onunload event in the masthead.
This function opens a pop up window that terminates the session.
To terminate the session the pop up window redirects to the SAP logoff component which is:
/irj/servlet/prt/portal/prtroot/com.sap.portal.navigation.masthead.LogOutComponent?logout_submit=true
The only problem with the onunload event is that it also triggers on a browser refresh so I've added a check in the child window to see whether the parent window is still open or not and based on that decided whether to fire the logoff call.
If the parent browser is still open it's a refresh otherwise it is a close.
Only drawback of this solution is that the user must allow pop ups on the portal URL but that should already be allowed otherwise other parts of the portal won't work properly (such as BI reports).
Hope it helps,
Roy -
Running word macro's in a Terminal Server session.
I have multiple word documents that employees use. Within this document is a macro that is used to ask questions and then replace sections within the document with information entered with the macro.
Problem is that when used in a Terminal Session (Server 2008 R2) it only updates the first page and a small section of the second page.
When the document is used on a PC (Win 7) it runs fine and all the information supplied to the macro, is entered where it should be all the way through the document.
I've searched the net high and low yet I cannot find any information relating to this.
Any help would be great.
Dean.So no Microsoft professional knows what's going on?
-
Hide Windows Updates reminders from users on Terminal server sessions
Windows 2008 Server - Users of the terminal server are getting reminders popping up on their sessions every 4 hours with a prompt to restart and update now, or postpone until later. How can I stop them from seeing these messages?
I would suggest that you create a GPO for your users, possiblty a loopback as its a TS but your choice, and include the following settings.
Computer Configuration – Policies – Administrative Template –Windows Components – Windows Update
Configure Automatic Updates: Enabled;
Allow non-administrators to receive update notifications: Disable;
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. If you find an answer helpful
then please "Vote As Helpful" -
Flash Player hangs users entire Terminal server session
Hi all, Firstly many thanks for reading this.
We're running Windows Terminal Server 2008 r2 using Flash Player 11.1.102.62
Whenever one of our users hits a flash enabled site they experience heavy session lags and even sometimes cause the session to hang until the server times out the session via group policy. This is regardless of the size of the Flash content being played (full screen content or a little ad in the corner).
To give an Idea of the layout, the Terminal Server is situated locally to the clients (not at a remote location) which eliminates it being a broadband issue for the clients. The Terminal server is a fresh install with a single install of flash( Flash 11.1.102.62 64-bit)
I've read through the administration guide and created a mms.cfg file. Presently it has the following entries:
AutoUpdateDisable = 1
FullScreenDisable = 1
OverrideGPUValidation = 0 (this was previously set to 1 to see if it would increase performance but it didnt.)
I dont see any options in the guide to tweak performance as such - just security related. Are there any other references to values that can be changed to increase performance?
Any thoughts/insights would be greatly appreciated as this is causing a real headache.
Kind Regards,
JonWindows
2.33GHz or faster x86-compatible processor, or Intel® Atom™ 1.6GHz or faster processor for netbooks
Microsoft® Windows® XP (32-bit), Windows Server® 2003 (32-bit), Windows Server 2008 (32-bit), Windows Vista® (32-bit), Windows 7 (32-bit and 64-bit)
Internet Explorer 7.0 and above, Mozilla Firefox 4.0 and above, Google Chrome, Safari 5.0 and above, Opera 11
128MB of RAM (1GB of RAM recommended for netbooks); 128MB of graphics memory
Have you tried uninstalling the 64-bit Flash Player and installing the 32-bit Flash Player? Where can I find direct downloads of Flash Player 11 for Windows or Macintosh? -
LMS 3.2 doesn't terminated SSH sessions on ACE
Hi all,
the customer has a problem with LMS 3.2. This software doesn't terminate ssh sessions created by LMS on ACE. All ssh sessions still exist on ACE, so no new ssh session can be created until the administrator manually clear these session on ACE. Thank you for your advice.
RomanHi Gaganjeet,
thank you very much for your reply. But I think, that this problem is with LMS, because I used some manually created SSH sessions on ACE an these sessions was terminated correctly. I'm sending you the output from one ACE module:
ace1/Admin# sho ssh session-info
Session ID Remote Host Active Time
789 10.210.40.41:24389 280: 2:14
3946 10.210.40.41:37910 160:47:13
7394 10.210.40.41:46981 256:46:54
11129 10.210.40.41:11010 136:46:43
11651 10.210.40.41:11295 136:40:53
14651 10.210.40.41:20522 232:46:45
15143 10.210.40.41:20759 232:42:26
18317 10.210.40.41:32636 112:47: 5
19061 10.210.40.41:35109 112: 2:25
19152 10.210.40.41:35240 112: 0:20
21886 10.210.40.41:42629 208:47: 1
22383 10.210.40.41:42839 208:43:14
25713 10.210.40.41:7305 88:47: 4
28996 10.210.40.41:48379 400:47: 8
29105 10.210.40.41:16016 184:47:16
29579 10.210.40.41:16193 184:44:15
You can see that there are a lot of ssh sessions from LMS (10.210.40.41) with the long active time.:-(
Best regards
Roman -
Crystal Reports 2008 crashes in Windows 2003 terminal Services Session
Hi,
We installed Crystal Reports Server and Crystal Reports 2008 on a new Windows 2003 Small Business Server. Crystal Reports works when run at the physical console, but when accessed from Remote Desktop it crashes to the debugger when I try to:
a) open an existing working report that uses SQL Server 2005 parameterized stored procedure,
b) create a new report using any SQL Server 2005 parameterized stored procedure,
c) access help.
All the above work fine at the physical server but I need to access remotely using RDC.
I log in as administrator, I have tried turning off DEP and I am running RDC via the mstsc command both without and with the /admin switch to run in session 0 but there is still a difference between being at the physical console versus remote that CR does not like.
More: I have to drive a long way to get to the server to try things locally. For now, as a workaround, I have started crw32.exe at the physical server and I can use that when I log in via RDC - I just cannot start crw32.exe remotely and run it successfully. Also, when I do run remotely, I get the entire menu bar on startup with no start page, but running at physical server I get only the File, View and Help menus but I do get the Start page.
Any ideas?
Thanks,
Rob Hershfield
Dave Machado
Edited by: David Machado on Nov 17, 2008 9:39 PMPermission issues
-
Problem in terminating the session in a session bean
Please any one would guide me how I can kill the session in a session bean so that when the user enters through the login page(jsp) of my application its username and password should be validated each time. Presently it is just valideted just for the first time when the user enters through the login page. But if the user logs out and then re-logins through the login page he is allowed to go ahead just on the basis of the correct username.
Regards,
Shouket Ali.Try to do the following.
1. Remove the session bean as soon as you are done with it. No point let it be alive, eating resources.
2. when user logs out, put the following code in the java/jsp file which handles the logging out operation.
a. session.removeAttribute(If_any_attribute_set_for_the_user);
b. Kill the cookies if any set related to the authentication/session.
c. HttpServletRequest.getSession().invalidate();
Things will work properly.
Maybe you are looking for
-
Error while using dbms_xmlsave.UpdateXML and dbms_xmlsave.insertXML
The Record I am trying to insert/update has the following structure <ROWSET> <ROW> <COL1>123</COL1> </ROW> </ROWSET> Table structure is as below COL1 INT [Primary constraint] COL2 VARCHAR2(100) NOT NULL [but has default value of 'COL2_Default'] Now s
-
IChat NetGear on/off: -8 and abrupt disconnect
iChat worked flawlessly until NetGear was installed. I have worked with local techies and NetGear techies in India, and THOUGHT two problems (Error -8 and failure to connect with the immediate message that AIM was suddenly disconnected) were solved w
-
hi guru so i have created PA. and also time series created for it.. and also PB DV created for it.. now i want to add a KEY figure to that PA??? is that POssible? how i should i add a kf to PA???? the same senerio to MPOS and PB????
-
Bluetooth Updates in Mac OS X 10.5.7
Mac OS X 10.5.7 has just been released and includes a large number of Bluetooth related updates: • Apple Bluetooth Software has been updated from v2.1.3f8 (on an Intel iMac with CSR chipset) to v2.1.6f8 All of the following are updated from v2.1.3 to
-
I have two ASA5520's with ASA-SSM-10 modules which are running Cisco Intrusion Prevention System, Version 6.0(6)E4. These are located at two different sites (one is local and the other remote from where I am based) and so are not running failover. I