Re: Password authentication with LDAP and SSH

2006-03-02 Thread Martijn Marsman
Same here, can do anythin, except ssh :/ tijn aflorent wrote: hello i've got exactly the same problem if no objectClass : shadowAccount in ldap database, i get Could not get shadow information for user if i add objectClass : shadowAccount, i get Failed password for user, and getent

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Florian Weimer
* martin f. krafft: One day more or less doesn't really matter. So far, Debian security updates predated widespread (semi-)automated exploits by weeks. Why then do you think security.d.o is not mirrored by Debian? Our mirror network is not actually well-known for its integrity (think

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Florian Weimer
* Geoff Crompton: I'm also wondering if security.debian.org has enough resources for every single debian box on the planet checking it every X minutes. You can use the DSA posting as a trigger. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Michael Stone
On Thu, Mar 02, 2006 at 08:06:07PM +0100, Florian Weimer wrote: * martin f. krafft: Why then do you think security.d.o is not mirrored by Debian? Our mirror network is not actually well-known for its integrity (think The explanation is far simpler--debian *does* have mirrors of

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread martin f krafft
also sprach Florian Weimer [EMAIL PROTECTED] [2006.03.02.2006 +0100]: By default, package authenticity is not validated in sarge and earlier releases. From a security POV, it's better to download those updates from a limited set of well-maintained servers. It reduces the attack surface

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread martin f krafft
also sprach Michael Stone [EMAIL PROTECTED] [2006.03.02.2032 +0100]: The explanation is far simpler--debian *does* have mirrors of security.debian.org. At the moment I see three hosts in the rotation. Yeah, push, not pull mirrors. -- Please do not send copies of list mail to me; I read the

Re: avahi-daemon

2006-03-02 Thread Loïc Minier
Hi, On Thu, Feb 23, 2006, Javier Fernández-Sanguino Peña wrote: IMHO the problem here is having a music program (as rhythmbox) Recommends: avahi-daemon, when IMHO it should be Suggests: . The functionality provided by avahi-daemon (a network service for sharing music) is not

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Marc Haber
On Thu, Mar 02, 2006 at 08:06:48PM +0100, Florian Weimer wrote: * Geoff Crompton: I'm also wondering if security.debian.org has enough resources for every single debian box on the planet checking it every X minutes. You can use the DSA posting as a trigger. Usually, cron-apt has already

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Florian Weimer
* Marc Haber: On Thu, Mar 02, 2006 at 08:06:48PM +0100, Florian Weimer wrote: * Geoff Crompton: I'm also wondering if security.debian.org has enough resources for every single debian box on the planet checking it every X minutes. You can use the DSA posting as a trigger. Usually,

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Horst Pflugstaedt
On Thu, Mar 02, 2006 at 10:36:16PM +0100, Marc Haber wrote: On Thu, Mar 02, 2006 at 08:06:48PM +0100, Florian Weimer wrote: * Geoff Crompton: I'm also wondering if security.debian.org has enough resources for every single debian box on the planet checking it every X minutes. You can

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Steve Kemp
On Thu, Mar 02, 2006 at 10:36:16PM +0100, Marc Haber wrote: How would you implement the automatism to trigger the update on the incoming e-mail? procmail, matching on new mails to the debian-security-announce mailing list .. Steve -- Debian GNU/Linux System Administration

Re: Password authentication with LDAP and SSH

2006-03-02 Thread Nicolas François
hello, There is an open bug on login regarding LDAP (http://bugs.debian.org/277767). It may (maybe not) be related. In any case, it would be nice if somebody could have a look at it, or at least indicate if it can be reproduced or not on your environment. The Shadow maintainers lack resources

Re: Password authentication with LDAP and SSH

2006-03-02 Thread Marcos S. Trazzini
Historiadores acreditam que em Quarta 01 Fevereiro 2006 04:07, Jonas Liljenfeldt escreveu: Hello all, I run Debian Sarge and I have a problem with my SSH server (in combination with password authentication and LDAP). It doesn't work well with password authentication when I try to login as a

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Marc Haber
On Thu, Mar 02, 2006 at 11:09:28PM +0100, Florian Weimer wrote: * Marc Haber: How would you implement the automatism to trigger the update on the incoming e-mail? I typically use an Exim .forward file which invokes a special script using pipe. The script creates a file, and a cron job