KPPP - Non-root users cannot get Internet access

Asked by asdinnie

Hi All

Under Feisty, I can ONLY access the Internet (POP, SMTP, http, etc) WHEN using root
access (eg. SUDO firefox) through my dialup connection. Never had this problem under Edgy.
NB The internet access is working ok when I am operating as root (using SUDO) within the same user session.

Accessing as a normal user (even with root permissions given to that user) does not work.
I just get errors which indicate that the internet connection is not working.
It appears that something is blocking traffic which only root access can overcome.

I have done the instructions to set up KPP as in the Dialup "How-To" for Kubuntu.
(ie. http://kubuntuforums.net/forums/index.php?topic=3081122.0)
Actually I did them after I set up my KPPP connection up using KPPP (as it worked ok in Edgy). I presume that this did not muck things up?

Another symptom is that I do not get any PPP connections showing up in KNetworkManager.
I did see my PPP connections with KNetworkManager previously under Mandriva. Thus, its more evidence that the session cannot see the PPP connection!

Any help would be greatly appreciated. I cannot resolve what's happening.

Many thanks

Andy, Perth (Aus)

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Benoit Malet (benoit-malet) said :
#1

Hello !

Can you post the content of your /etc/group file ?

Thanks and regards,
Benoît

Revision history for this message
asdinnie (andy-healingpeople) said :
#2

Hi Benoit

Thanks for such a prompt answer!

Here tis... as an attachment.

Andy

PS The UID that I was trying to get access with is "ASD".

--

Quoting Benoit Malet <email address hidden>:

> Your question #7112 on Ubuntu changed:
> https://answers.launchpad.net/ubuntu/+question/7112
>
> Status: Open => Needs information
>
> Benoit Malet requested for more information:
> Hello !
>
> Can you post the content of your /etc/group file ?
>
> Thanks and regards,
> Benoît
>
> _______________________________________________________________________
> To answer this request for more information, you can either reply to
> this email or enter your reply at the following page:
> https://answers.launchpad.net/ubuntu/+question/7112
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Revision history for this message
asdinnie (andy-healingpeople) said :
#3

Oops. It did not like attachments.

Here is the file in longhand:

Revision history for this message
asdinnie (andy-healingpeople) said :
#4

root:x:0:asd
daemon:x:1:
bin:x:2:
sys:x:3:
adm:x:4:asd
tty:x:5:
disk:x:6:
lp:x:7:cupsys
mail:x:8:asd
news:x:9:
uucp:x:10:asd
man:x:12:
proxy:x:13:asd
kmem:x:15:
dialout:x:20:cupsys,asd
fax:x:21:
voice:x:22:
cdrom:x:24:haldaemon,asd
floppy:x:25:haldaemon,asd
tape:x:26:
sudo:x:27:
audio:x:29:asd
dip:x:30:asd
www-data:x:33:asd
backup:x:34:
operator:x:37:
list:x:38:
irc:x:39:
src:x:40:
gnats:x:41:
shadow:x:42:
utmp:x:43:
video:x:44:asd
sasl:x:45:
plugdev:x:46:haldaemon,asd
staff:x:50:
games:x:60:asd
users:x:100:www-data,games,mail,proxy,asd
nogroup:x:65534:
dhcp:x:101:asd
syslog:x:102:
klog:x:103:
scanner:x:104:cupsys,hplip,asd
nvram:x:105:
ssl-cert:x:106:cupsys,asd
crontab:x:107:
ssh:x:108:
avahi-autoipd:x:109:
messagebus:x:110:
avahi:x:111:
netdev:x:112:asd
lpadmin:x:113:asd
haldaemon:x:114:
powerdev:x:115:haldaemon,asd
slocate:x:116:
fuse:x:117:
asd:x:1000:
admin:x:118:asd

Revision history for this message
Jayson Vaughn (thedonvaughn) said :
#5

Hello,
I believe if you add your user to group "asd" you should be good. Here is a link describing how to add a user to a group in Ubuntu.

http://www.freesoftwaremagazine.com/articles/users_in_ubuntu?page=0%2C1

P.S. Remember to logout and back in after adding your user to the group to make sure it goes into effect. You can also type "groups" at a terminal command prompt to verify which groups you are currently in.

Revision history for this message
Benoit Malet (benoit-malet) said :
#6

The group settings seem to be OK ...

Can you also post the content of /etc/ppp/peers/kppp-options ?

Thanks and regards,
Benoît

Revision history for this message
asdinnie (andy-healingpeople) said :
#7

Hi Benoit

Thanks for your persistence.

It simply contains the following option (enabled, ie no preceding #):
noauth

Cheers

Andy

--

Quoting Benoit Malet <email address hidden>:

> Your question #7112 on Ubuntu changed:
> https://answers.launchpad.net/ubuntu/+question/7112
>
> Benoit Malet requested for more information:
> The group settings seem to be OK ...
>
> Can you also post the content of /etc/ppp/peers/kppp-options ?
>
> Thanks and regards,
> Benoît
>
> _______________________________________________________________________
> To answer this request for more information, you can either reply to
> this email or enter your reply at the following page:
> https://answers.launchpad.net/ubuntu/+question/7112
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Revision history for this message
Benoit Malet (benoit-malet) said :
#8

This is also correct ...

If /etc/ppp/options is not empty, you can comment the line with "auth" ...

Also double check that /etc/resolv.conf contains correct DNS info.

Hope this will do the trick !

Regards,
Benoît

Revision history for this message
asdinnie (andy-healingpeople) said :
#9

Hi Benoit

Thanks once again for your info.

I have checked the two files as follows:

1. /etc/ppp/options

auth was already commented out.
the active options in that file are as follows:
asyncmap 0
noauth
crtscts
lock
hide-password
modem
proxyarp
lcp-echo-interval 30
lcp-echo-failure 4
noipx

2. /etc/resolv.conf

it contains my DNS servers (as I have used before when it works) but
somehow does them in duplicate:
nameserver 139.134.5.51
nameserver 139.134.2.190
nameserver 139.134.5.51 #kppp temp entry
nameserver 139.134.2.190 #kppp temp entry

I even tried to set KPPP up for Auto DNS and it did not seem to make
any difference to the issue at hand.

Still no coconut (its not working yet)...

Cheers

Andy

PS Its getting late here (2125 hrs). So I'll check in the morning!

--

Quoting Benoit Malet <email address hidden>:

> Your question #7112 on Ubuntu changed:
> https://answers.launchpad.net/ubuntu/+question/7112
>
> Status: Open => Answered
>
> Benoit Malet proposed the following answer:
> This is also correct ...
>
> If /etc/ppp/options is not empty, you can comment the line with "auth"
> ...
>
> Also double check that /etc/resolv.conf contains correct DNS info.
>
> Hope this will do the trick !
>
> Regards,
> Benoît
>
> _______________________________________________________________________
> If this answers your question, please go to the following page to let us
> know that it is solved:
> https://answers.launchpad.net/ubuntu/+question/7112/+confirm?answer_id=7
>
> If you still need help, you can reply to this email or go to the
> following page to enter your feedback:
> https://answers.launchpad.net/ubuntu/+question/7112
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Revision history for this message
Benoit Malet (benoit-malet) said :
#10

Hello !

Can you try to comment the duplicate entries in /etc/resolv.conf ?

And if it doesn't solve the problem, maybe try to comment every line in /etc/ppp/options (as I read somewhere that it is recommended to delete this file)

Regards,
Benoît

Revision history for this message
asdinnie (andy-healingpeople) said :
#11

Bonjour Benoit

Thanks for your continued patience!

I have deleted the duplicate entries in /etc/resolv.conf
When I reconnect using KPPP it reinserts new identical entries...
I have tried to comment out both the existing and the new ones but the
same occurs each time (thats real strange).

I have also commented out etc/ppp/options. egrep tells me none are
now active.

Tried to reconnect.
Still the same problem with . It seems to have a mind of its own.

Curiously I have been reading the /etc/ppp/pap-secrets file. Have not
changed it though.
It talks about blocking users ("# This file should block ALL users
that should not be able to do AUTO_PPP.").
My suspicions are raised that this might have something to do with the
problem that I am experiencing?
Does this make sense?

Cheers

Andy

--

Quoting Benoit Malet <email address hidden>:

> Your question #7112 on Ubuntu changed:
> https://answers.launchpad.net/ubuntu/+question/7112
>
> Status: Open => Answered
>
> Benoit Malet proposed the following answer:
> Hello !
>
> Can you try to comment the duplicate entries in /etc/resolv.conf ?
>
> And if it doesn't solve the problem, maybe try to comment every line in
> /etc/ppp/options (as I read somewhere that it is recommended to delete
> this file)
>
> Regards,
> Benoît
>
> _______________________________________________________________________
> If this answers your question, please go to the following page to let us
> know that it is solved:
> https://answers.launchpad.net/ubuntu/+question/7112/+confirm?answer_id=9
>
> If you still need help, you can reply to this email or go to the
> following page to enter your feedback:
> https://answers.launchpad.net/ubuntu/+question/7112
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Revision history for this message
Benoit Malet (benoit-malet) said :
#12

OK, here another clue :

sudo chmod u+s /usr/sbin/pppd

According to some Howtos, that should do the trick ;)

Regards,
Benoît

Revision history for this message
asdinnie (andy-healingpeople) said :
#13

Hi Benoit

Thanks once again.

Did the chmod (never can work those out... sadly its in a different
language for me). So the permissions should be changed aok.

(dip has Read & Execute privileges under group for /usr/sbin/pppd and
the UID is a member of this group)

Still no luck :o|

Cheers

Andy

--

Quoting Benoit Malet <email address hidden>:

> Your question #7112 on Ubuntu changed:
> https://answers.launchpad.net/ubuntu/+question/7112
>
> Status: Open => Answered
>
> Benoit Malet proposed the following answer:
> OK, here another clue :
>
> sudo chmod u+s /usr/sbin/pppd
>
> According to some Howtos, that should do the trick ;)
>
> Regards,
> Benoît
>
> _______________________________________________________________________
> If this answers your question, please go to the following page to let us
> know that it is solved:
> https://answers.launchpad.net/ubuntu/+question/7112/+confirm?answer_id=11
>
> If you still need help, you can reply to this email or go to the
> following page to enter your feedback:
> https://answers.launchpad.net/ubuntu/+question/7112
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Revision history for this message
Benoit Malet (benoit-malet) said :
#14

Hello again !

/usr/sbin/pppd is suposed to belong to root ... So please change ownership with this :

sudo chown root:root /usr/sbin/pppd

And now let's pray ;)

Regards,
Benoît

Revision history for this message
asdinnie (andy-healingpeople) said :
#15

Hi Benoit

Actually the owner of /usr/sbin/pppd is root
& the group is dip.
My mistake. I was not clear in my last answer here.

owner permissions are: r,w,e,s
group permissions are: r,e
others permissions are: r,e

and the UID I want to access the Net is in the dip group.

So changing the owner would not help then... as its already root.

Cheers

Andy

--

Quoting Benoit Malet <email address hidden>:

> Your question #7112 on Ubuntu changed:
> https://answers.launchpad.net/ubuntu/+question/7112
>
> Status: Open => Answered
>
> Benoit Malet proposed the following answer:
> Hello again !
>
> /usr/sbin/pppd is suposed to belong to root ... So please change
> ownership with this :
>
> sudo chown root:root /usr/sbin/pppd
>
> And now let's pray ;)
>
> Regards,
> Benoît
>
> _______________________________________________________________________
> If this answers your question, please go to the following page to let us
> know that it is solved:
> https://answers.launchpad.net/ubuntu/+question/7112/+confirm?answer_id=13
>
> If you still need help, you can reply to this email or go to the
> following page to enter your feedback:
> https://answers.launchpad.net/ubuntu/+question/7112
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Revision history for this message
Benoit Malet (benoit-malet) said :
#16

Hello !

In fact, I think (not sure at all :s) that the group for /usr/sbin/pppd has to be root as well ... The command I suggested should change group as well ...

Regards,
Benoit

Revision history for this message
forculate (sut-sami2002) said :
#17

i m installing ubuntu 8.10 on my PII pc.
i have 400MH prosseser and 327MB Ram
but i have a problem with using ubuntu
i m using windows xp (sp2)
and use internet with vfone.
i have no ether choice u connect the internet.
vfone dosn't sport ubuntu.
so what i can do
please help me out

Can you help with this problem?

Provide an answer of your own, or ask asdinnie for more information if necessary.

To post a message you must log in.