Re: Problème avec libpam-ldap pour utiliser ldap:// ou ldaps://

2014-04-13 Thread BOLLINGH Sebastien
De: Pascal Legrand pascal.legr...@univ-orleans.fr
Pour: BOLLINGH Sebastien sebastien.bolli...@ecolo.be
Références: 6f9f-53491f80-3-609d9680@24175504




 BOLLINGH Sebastien sebastien.bolli...@ecolo.be a écrit :

  Bonjour,
 
  Je suis en train d'essayer de configurer l'authentification ldap  
  pour des comptes utilisateurs sur un serveur.
 
  Après bien des tentatives, je parviens à faire fonctionner
  l'authentification,
  mais seulement en modifiant à la main le fichier de configuration
  /etc/pam_ldap.conf
  pour utiliser le paramètre host devant le nom du serveur LDAP, car
  si j'utilise ldap:// ou ldaps:// cela ne fonctionne pas.
 
  Je trouve en effet, une erreur dans /var/log/auth.log qui signale  
  que le ldap_bind simple n'a pas pu contacter le serveur ldap.
  Le fait que cela fonctionne en utilisant host me laisse supposer que
  ce n'est pas un problème d'accès mais sans doute une erreur de
  configuration ou un outil maquant.
  Y a-t-il autre chose à installer que cette librairie ? Parce que je
  ne trouve rien sur cette page https://wiki.debian.org/LDAP/PAM ...
 
  Or, j'aimerais surtout utiliser le ldaps:// histoire de mieux sécuriser 
  cela.
 
  Quelqu'un a une idée, ou carrément la solution ;-) ?
 
  Sébastien

 Je n'ai pas lu le tuto entièrement mais il ne manquerait pas la config
 du fichier  /etc/nsswitch.conf dans lequel il faut rajouter ldap comme
 source d'authentification ?
 un test avec getent permet de voir si ça marche normalement
 En espérant ne pas avoir répondu à côté


Merci pour ton intérêt et ta réponse.
J'avoue ne pas très bien saisir, malgré la lecture du manpage consacré à 
/etc/nsswitch.conf a quoi correspond compat (la valeur actuelle)
mais que je remplace compat par files ldap ne semble rien changer, je vais 
donc rester en compat jusqu'à preuve du contraire histoire de ne pas toucher 
à 36 paramètres en même temps ;-)

Par ailleurs, il se peut que je fasse un blocage obsessionnel sur libpam-ldap 
et son fichier de config /etc/pam_ldap.conf
mais en fait mon authentification fonctionne + ou - depuis que j'ai modifié ce 
fichier de config à la main et opté pour host xxx.xxx.xxx.xxx au lieu de 
ldap://xxx.xxx.xxx.xxx;

en effet, avec ldap(s)://xxx.xxx.xxx.xxx voici les lignes de /var/log/auth.log

Apr 12 19:50:12 saltmaster login[13412]: pam_unix(login:auth): 
authentication failure; logname=root uid=0 euid=0 tty=/dev/pts/0 ruser= rhost=  
user=xyzxyzxyz
Apr 12 19:50:12 saltmaster login[13412]: pam_ldap: ldap_simple_bind Can't 
contact LDAP server
Apr 12 19:50:12 saltmaster login[13412]: pam_ldap: reconnecting to LDAP 
server...
Apr 12 19:50:12 saltmaster login[13412]: pam_ldap: ldap_simple_bind Can't 
contact LDAP server
Apr 12 19:50:14 saltmaster login[13412]: FAILED LOGIN (1) on '/dev/pts/0' 
FOR 'xyzxyzxyz', Authentication failure

Quand je dis que cela va + ou -  bien avec host xxx.xxx.xxx.xxx
en réalité cela fonctionne tout à fait, mais j'ai 2 bizzarreries:

1) avec un test où en tant que root sur la machine je fais
root@lenomdelhote:~# login xyzxyzxyz
Mot de passe :
Mot de passe :
Dernière connexion : ...

= le système me demande 2x le mot de passe avant d'accepter la connexion (mais 
je suis bien connecté après cela !)
par contre, si je donne 1 des 2x un mot de passe erroné, je me fais jeter, mais 
pourquoi 2x le mot de passe ?
par ailleurs voici l'entrée du log pour cette tentative:

Apr 13 08:17:38 saltmaster login[18996]: pam_unix(login:auth): 
authentication failure; logname=root uid=0 euid=0 tty=/dev/pts/0 ruser= rhost=  
user=xyzxyzxyz
Apr 13 08:17:42 saltmaster login[18996]: pam_unix(login:session): session 
opened for user xyzxyzxyz by root(uid=0)
Apr 13 08:17:46 saltmaster login[18996]: pam_unix(login:session): session 
closed for user xyzxyzxyz
Apr 13 08:17:46 saltmaster login[18996]: PAM 1 more authentication failure; 
logname=root uid=0 euid=0 tty=/dev/pts/0 ruser= rhost=  user=xyzxyzxyz

2) avec un test où je me connecte non pas comme root mais comme xyzxyzxyz sur 
l'hôte via une clé ssh et que je fais:
xyzxyzxyz@lenomdelhote:~$ sudo less /var/log/auth.log
[sudo] password for xyzxyzxyz:

= j'obtiens la lecture du fichier de log avec 1 seule demande de mot de passe
même si le log en question me montre ceci :

Apr 13 08:18:09 saltmaster sudo: pam_unix(sudo:auth): authentication 
failure; logname=xyzxyzxyz uid=50002 euid=0 tty=/dev/pts/0 ruser=xyzxyzxyz 
rhost=  user=xyzxyzxyz
Apr 13 08:18:09 saltmaster sudo: xyzxyzxyz : TTY=pts/0 ; 
PWD=/home/xyzxyzxyz ; USER=root ; COMMAND=/usr/bin/less /etc/nsswitch.conf
Apr 13 08:18:09 saltmaster sudo: pam_unix(sudo:session): session opened for 
user root by xyzxyzxyz(uid=0)
Apr 13 08:18:10 saltmaster sudo: pam_unix(sudo:session): session closed for 
user root

Voilà ma situation plus en détail.


--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec 

Re: Problème avec libpam-ldap pour utiliser ldap:// ou ldaps://

2014-04-13 Thread BOLLINGH Sebastien

Bon, je suis une enclume (oui vous pouvez taper)
mais on progresse ...

Une faute de frappe initiale suivie d'une lecture bornée du fichier et de 
config et ses exemples et bardaf, c'est l'embardée.
En fait, la syntaxe est :

ldap://xxx.xxx.xxx.xxx/  =  le / final est indispensable et la cause de 
mes soucis 
contrairement à
host xxx.xxx.xxx.xxx ;-(

Du coup, ça va mieux avec ce /

Bon par contre, nouveau problème car, si cela fonctionne avec ldap:// pour le 
test login et le test sudo
malgré une nouvelle bizarrerie dans les logs (la première ligne donne 1x 
failure et les sudo suivant n'ont pas de problème):

Apr 13 08:57:48 saltmaster sudo: pam_unix(sudo:auth): authentication 
failure; logname=xyzxyzxyz uid=50002 euid=0 tty=/dev/pts/0 ruser=xyzxyzxyz 
rhost=  user=xyzxyzxyz
Apr 13 08:57:48 saltmaster sudo: xyzxyzxyz : TTY=pts/0 ; 
PWD=/home/xyzxyzxyz ; USER=root ; COMMAND=/usr/bin/less /var/log/auth.log
Apr 13 08:57:48 saltmaster sudo: pam_unix(sudo:session): session opened for 
user root by xyzxyzxyz(uid=0)
Apr 13 08:57:50 saltmaster sudo: pam_unix(sudo:session): session closed for 
user root
Apr 13 08:58:18 saltmaster sudo: xyzxyzxyz : TTY=pts/0 ; 
PWD=/home/xyzxyzxyz ; USER=root ; COMMAND=/usr/bin/less /var/log/auth.log
Apr 13 08:58:18 saltmaster sudo: pam_unix(sudo:session): session opened for 
user root by xyzxyzxyz(uid=0)
Apr 13 08:59:07 saltmaster sudo: pam_unix(sudo:session): session closed for 
user root
Apr 13 08:59:10 saltmaster sudo: xyzxyzxyz : TTY=pts/0 ; 
PWD=/home/xyzxyzxyz ; USER=root ; COMMAND=/usr/bin/less /var/log/auth.log
Apr 13 08:59:10 saltmaster sudo: pam_unix(sudo:session): session opened for 
user root by xyzxyzxyz(uid=0)
Apr 13 08:59:25 saltmaster sudo: pam_unix(sudo:session): session closed for 
user root

cela ne fonctionne pour ldaps:// avec les paramètres supplémentaires suivant 
que pour le test login (même comportement du double mot de passe et même log 
dans /var/log/auth.log)

port 636
ssl on
tls_checkpeer no

bizarrement le test sudo échoue quant à lui et donne ceci :

xyzxyzxyz@nomdelhote:~$ sudo less /var/log/auth.log
[sudo] password for xyzxyzxyz:
sudo: PERM_ROOT: setresuid(0, -1, -1): Opération non permise
sudo: unable to open /var/lib/sudo/xyzxyzxyz/0: Opération non permise
sudo: unable to set supplementary group IDs: Opération non permise
sudo: unable to execute /usr/bin/less: Operation not permitted

et le log donne :

Apr 13 09:17:44 saltmaster sudo: pam_unix(sudo:auth): authentication 
failure; logname=xyzxyzxyz uid=50002 euid=0 tty=/dev/pts/0 ruser=xyzxyzxyz 
rhost=  user=xyzxyzxyz
Apr 13 09:17:44 saltmaster sudo: xyzxyzxyz : unable to open 
/var/lib/sudo/xyzxyzxyz/0 : Permission non accordée ; TTY=pts/0 ; 
PWD=/home/xyzxyzxyz ; USER=root ; COMMAND=/usr/bin/less /var/log/auth.log
Apr 13 09:17:44 saltmaster sudo: xyzxyzxyz : TTY=pts/0 ; 
PWD=/home/xyzxyzxyz ; USER=root ; COMMAND=/usr/bin/less /var/log/auth.log
Apr 13 09:17:44 saltmaster sudo: pam_unix(sudo:session): session opened for 
user root by xyzxyzxyz(uid=50002)
Apr 13 09:17:44 saltmaster sudo: pam_unix(sudo:session): session closed for 
user root

Je ne comprend pas cette différence de comportement entre ldap et ldaps pour le 
test spécifique sudo ...
A nouveau, si quelqu'un à une idée , je prends.

pour ce qui est de la double demande de mot de passe, je vais investiguer la 
piste du binddn non anonyme avec un utilisateur en lecture seule sur le LDAP



 Merci pour ton intérêt et ta réponse.
 J'avoue ne pas très bien saisir, malgré la lecture du manpage consacré à 
 /etc/nsswitch.conf a quoi correspond compat (la valeur actuelle)
 mais que je remplace compat par files ldap ne semble rien changer, je 
 vais donc rester en compat jusqu'à preuve du contraire histoire de ne pas 
 toucher à 36 paramètres en même temps ;-)

 Par ailleurs, il se peut que je fasse un blocage obsessionnel sur libpam-ldap 
 et son fichier de config /etc/pam_ldap.conf
 mais en fait mon authentification fonctionne + ou - depuis que j'ai modifié 
 ce fichier de config à la main et opté pour host xxx.xxx.xxx.xxx au lieu de 
 ldap://xxx.xxx.xxx.xxx;

 en effet, avec ldap(s)://xxx.xxx.xxx.xxx voici les lignes de /var/log/auth.log

 Apr 12 19:50:12 saltmaster login[13412]: pam_unix(login:auth): 
 authentication failure; logname=root uid=0 euid=0 tty=/dev/pts/0 ruser= 
 rhost=  user=xyzxyzxyz
 Apr 12 19:50:12 saltmaster login[13412]: pam_ldap: ldap_simple_bind Can't 
 contact LDAP server
 Apr 12 19:50:12 saltmaster login[13412]: pam_ldap: reconnecting to LDAP 
 server...
 Apr 12 19:50:12 saltmaster login[13412]: pam_ldap: ldap_simple_bind Can't 
 contact LDAP server
 Apr 12 19:50:14 saltmaster login[13412]: FAILED LOGIN (1) on '/dev/pts/0' 
 FOR 'xyzxyzxyz', Authentication failure

 Quand je dis que cela va + ou -  bien avec host xxx.xxx.xxx.xxx
 en réalité cela fonctionne tout à fait, mais j'ai 2 

Re: Console qui fige

2014-04-13 Thread Daniel Huhardeaux

Le 12/04/2014 22:30, Guillaume Caron a écrit :

[...]
En attendant tu devrais essayer tmux à la place de screen, sa gestion du
défilement est plus simple : Ctrl b + PgUp / PgDn pour monter ou descendre.



Je plussoie pour tmux, tu peux changer ctrl-b eb ctrl-a comme pour 
screen.Tout comme Shift PgUp/PgDn mes parait plus judicieux, comme je 
l'avais dans screen.


Pour ce comportement dans screen, active dans screenrc

termcapinfo xterm|xterms|xs|rxvt ti@:te@



[...]

Le 12/04/2014 22:16, Daniel Caillibaud a écrit :

Salut,

Depuis un nouvel emplacement (connexion wifi à priori potable) j'ai mes
consoles ssh qui figent régulièrement (j'ai l'impression dès que je
m'en sert plus qq minutes) : plus rien ne réagit, obligé de fermer
l'onglet à la sauvage.

J'ai changé gnome-terminal pour xterm et roxterm sans que ça corrige ce
comportement.

Une idée ?

(en attendant je vais passer par screen mais sa gestion du défilement
me gêne)
  





--
Daniel Huhardeaux
+33.368460...@tootai.netsip:8...@sip.tootai.net
+48.222472...@tootai.nettootaiNET

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/534a6768.30...@tootai.net



Re: Deux points de montage identiques

2014-04-13 Thread Michel
Le dimanche 13 avril 2014, 00:06:04 Bzzz a écrit :
 On Sat, 12 Apr 2014 23:55:52 +0200
 
 andre_deb...@numericable.fr wrote:
  Je constate que j'ai deux partitions identiques montées :
  rootfs et
  /dev/disk/by-uuid/a8a150e7-77f0-4e27-bf93-33ab8932e427
  
  Est-ce normal ?
 
 J'ai pareil s/s wheezy mais pas s/s sid; donc, ptêt ben
 qu'oui, mais ptêt ben qu'non.

C'est un bug de coreutils. C'est corrigé en version 2.18 (dans testing 
actuellement).
Pour ma part, je n'ose pas passer à la libc6 (requis par coreutils) de testing 
juste pour ça... Ça perturbe pas mal d'outils de monitoring (cacti, mount, df, 
etc.)

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653073


--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/23293049.6oFxhoZ4fo@basket



Re: monté un system ext4 sur une autre installation

2014-04-13 Thread prego jérémy

bonjour,

je viens de trouver le pourquoi.

je viens de tester le disque dure sur un liveCD

en interne ça donne ceci :

root@grml ~ # fdisk -l

Disk /dev/sda: 750.2 GB, 750156374016 bytes
108 heads, 15 sectors/track, 904413 cylinders
Units = cylinders of 1620 * 512 = 829440 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disk identifier: 0x72f77835

Device Boot Start End Blocks Id System
/dev/sda1 2 14242 11534336 83 Linux
root@grml ~ #

mais en usb sur le même liveCD

root@grml ~ # fdisk -l
Note: sector size is 4096 (not 512)

Disk /dev/sda: 750.2 GB, 750156374016 bytes
108 heads, 15 sectors/track, 113051 cylinders
Units = cylinders of 1620 * 4096 = 6635520 bytes
Sector size (logical/physical): 4096 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disk identifier: 0x72f77835

Device Boot Start End Blocks Id System
/dev/sda1 2 14242 92274688 83 Linux
root@grml ~ #


et voila, quand je le met en interne il me détecte un secteur logique de 
512 Byte alors que par l'usb il le détecte en 4096 Byte. y-atil moyen de 
corriger ce comportement pour que via l'USB il détecte en 512 également 
? ou alors, que je puisse le faire fonctionner dans les deux modes ?


jerem
Le 11/04/2014 19:25, prego jérémy a écrit :



Le 11/04/2014 19:18, Sylvain L. Sauvage a écrit :

’lut,

Le vendredi 11 avril 2014, 16:56:53 prego jérémy a écrit :

[…]
n'hésitez pas si vous avez d'autre idée

T’as essayé avec un autre convertisseur USB ?

non malheureusement, je n'en ai pas

T’as essayé sur un autre PC ?

oui. et le résultat semble le même


jerem



--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/534ad1f4.6070...@prego-network.net



Re: Problème avec libpam-ldap pour utiliser ldap:// ou ldaps://

2014-04-13 Thread Johnny B

Salut !

J'ai mis un paquet de LDAP/Debian en place et je n'ai jaimais eu a seter 
un / sur la syntaxe, le problème vient d'ailleurs ;) ou une erreur de 
conf corrigée après un restart de service.


Pourquoi est ce que tu utilises ssl et non pas tls. ssl est obsolète et 
tu vas devoir te taper de la conf ssl sur le port 636 (mais c'est 
peut-etre un choix perso ? ;)


Pour gérer des utilisateurs et leurs droits associés il faut utiliser 
des ACL ldap.


Ta double auth vient surement de tes conf nsswitch et libpam-ldap est ce 
que tu t'es documenté sur la conf de ces libs ?


Sur quels tuto t'es tu basé pour mettre en place ton ldap ?

Bon courage
@+ !

Le 04/13/2014 09:26 AM, BOLLINGH Sebastien a écrit :

Bon, je suis une enclume (oui vous pouvez taper)
mais on progresse ...

Une faute de frappe initiale suivie d'une lecture bornée du fichier et de 
config et ses exemples et bardaf, c'est l'embardée.
En fait, la syntaxe est :

 ldap://xxx.xxx.xxx.xxx/  =  le / final est indispensable et la cause de 
mes soucis 
contrairement à
 host xxx.xxx.xxx.xxx ;-(

Du coup, ça va mieux avec ce /

Bon par contre, nouveau problème car, si cela fonctionne avec ldap:// pour le test 
login et le test sudo
malgré une nouvelle bizarrerie dans les logs (la première ligne donne 1x 
failure et les sudo suivant n'ont pas de problème):

 Apr 13 08:57:48 saltmaster sudo: pam_unix(sudo:auth): authentication 
failure; logname=xyzxyzxyz uid=50002 euid=0 tty=/dev/pts/0 ruser=xyzxyzxyz 
rhost=  user=xyzxyzxyz
 Apr 13 08:57:48 saltmaster sudo: xyzxyzxyz : TTY=pts/0 ; 
PWD=/home/xyzxyzxyz ; USER=root ; COMMAND=/usr/bin/less /var/log/auth.log
 Apr 13 08:57:48 saltmaster sudo: pam_unix(sudo:session): session opened 
for user root by xyzxyzxyz(uid=0)
 Apr 13 08:57:50 saltmaster sudo: pam_unix(sudo:session): session closed 
for user root
 Apr 13 08:58:18 saltmaster sudo: xyzxyzxyz : TTY=pts/0 ; 
PWD=/home/xyzxyzxyz ; USER=root ; COMMAND=/usr/bin/less /var/log/auth.log
 Apr 13 08:58:18 saltmaster sudo: pam_unix(sudo:session): session opened 
for user root by xyzxyzxyz(uid=0)
 Apr 13 08:59:07 saltmaster sudo: pam_unix(sudo:session): session closed 
for user root
 Apr 13 08:59:10 saltmaster sudo: xyzxyzxyz : TTY=pts/0 ; 
PWD=/home/xyzxyzxyz ; USER=root ; COMMAND=/usr/bin/less /var/log/auth.log
 Apr 13 08:59:10 saltmaster sudo: pam_unix(sudo:session): session opened 
for user root by xyzxyzxyz(uid=0)
 Apr 13 08:59:25 saltmaster sudo: pam_unix(sudo:session): session closed 
for user root

cela ne fonctionne pour ldaps:// avec les paramètres supplémentaires suivant que pour le 
test login (même comportement du double mot de passe et même log dans 
/var/log/auth.log)

 port 636
 ssl on
 tls_checkpeer no

bizarrement le test sudo échoue quant à lui et donne ceci :

 xyzxyzxyz@nomdelhote:~$ sudo less /var/log/auth.log
 [sudo] password for xyzxyzxyz:
 sudo: PERM_ROOT: setresuid(0, -1, -1): Opération non permise
 sudo: unable to open /var/lib/sudo/xyzxyzxyz/0: Opération non permise
 sudo: unable to set supplementary group IDs: Opération non permise
 sudo: unable to execute /usr/bin/less: Operation not permitted

et le log donne :

 Apr 13 09:17:44 saltmaster sudo: pam_unix(sudo:auth): authentication 
failure; logname=xyzxyzxyz uid=50002 euid=0 tty=/dev/pts/0 ruser=xyzxyzxyz 
rhost=  user=xyzxyzxyz
 Apr 13 09:17:44 saltmaster sudo: xyzxyzxyz : unable to open 
/var/lib/sudo/xyzxyzxyz/0 : Permission non accordée ; TTY=pts/0 ; 
PWD=/home/xyzxyzxyz ; USER=root ; COMMAND=/usr/bin/less /var/log/auth.log
 Apr 13 09:17:44 saltmaster sudo: xyzxyzxyz : TTY=pts/0 ; 
PWD=/home/xyzxyzxyz ; USER=root ; COMMAND=/usr/bin/less /var/log/auth.log
 Apr 13 09:17:44 saltmaster sudo: pam_unix(sudo:session): session opened 
for user root by xyzxyzxyz(uid=50002)
 Apr 13 09:17:44 saltmaster sudo: pam_unix(sudo:session): session closed 
for user root

Je ne comprend pas cette différence de comportement entre ldap et ldaps pour le 
test spécifique sudo ...
A nouveau, si quelqu'un à une idée , je prends.

pour ce qui est de la double demande de mot de passe, je vais investiguer la 
piste du binddn non anonyme avec un utilisateur en lecture seule sur le LDAP



Merci pour ton intérêt et ta réponse.
J'avoue ne pas très bien saisir, malgré la lecture du manpage consacré à 
/etc/nsswitch.conf a quoi correspond compat (la valeur actuelle)
mais que je remplace compat par files ldap ne semble rien changer, je vais donc 
rester en compat jusqu'à preuve du contraire histoire de ne pas toucher à 36 paramètres en même 
temps ;-)

Par ailleurs, il se peut que je fasse un blocage obsessionnel sur libpam-ldap 
et son fichier de config /etc/pam_ldap.conf
mais en fait mon authentification fonctionne + ou - depuis que j'ai modifié ce fichier de config à 
la main et opté pour host xxx.xxx.xxx.xxx au lieu de ldap://xxx.xxx.xxx.xxx;

en effet, avec ldap(s)://xxx.xxx.xxx.xxx voici les lignes de 

Re: Deux points de montage identiques

2014-04-13 Thread andre_debian
On Sunday 13 April 2014 19:58:17 Michel wrote:
 Le dimanche 13 avril 2014, 00:06:04 Bzzz a écrit :
  On Sat, 12 Apr 2014 23:55:52 +0200
  andre_deb...@numericable.fr wrote:
   Je constate que j'ai deux partitions identiques montées :
   rootfs et
   /dev/disk/by-uuid/a8a150e7-77f0-4e27-bf93-33ab8932e427
   Est-ce normal ?

  J'ai pareil s/s wheezy mais pas s/s sid; donc, ptêt ben
  qu'oui, mais ptêt ben qu'non.

 C'est un bug de coreutils. C'est corrigé en version 2.18 (dans testing
 actuellement).
 Pour ma part, je n'ose pas passer à la libc6 (requis par coreutils) de
 testing juste pour ça... Ça perturbe pas mal d'outils de monitoring (cacti,
 mount, df, etc.)
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653073

Donc rien de grave.

merci.

André

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/201404132221.06623.andre_deb...@numericable.fr



Re: Console qui fige

2014-04-13 Thread Daniel Caillibaud
Bonjour,

Une fois figée, l'appui sur une touche fini par renvoyer au bout d'un
moment (pas mesuré mais probablement le timeout par défaut) le
classique 
  Write failed: Broken pipe
comme si le client ssh n'avait plus de réseau.

J'ai vérifié que pendant une session active, si je coupe le wifi et
que je le rétablis la connexion reste active.

Je suppose donc que c'est le modem (ou un routeur du fai) qui coupe la
connexion au bout d'un moment sans traffic et que le client parvient
pas à la rouvrir, mais je vois pas comment contourner le pb.

J'ai regardé /etc/ssh/ssh_config mais pas vu de param particulier pour
maintenir une connexion active (et j'ai rien de spécial dans mon
~/.ssh/config).


Ci-dessous les résultats des tests suggérés par Bzzz

Le Sun, 13 Apr 2014 01:04:23 +0200,
Bzzz lazyvi...@gmx.com a écrit :
 Hm, as-tu aussi vérifié:
 
 * si la route est restée la même?

Non, mais ça doit arriver souvent d'autres fois avec une console qui
reste ouvert qq heures, et d'habitude ça fige pas la console pour
autant.

 * si le DNS renvoie systématiquement la bonne adresse IP?
   (à moins que tu ne sshassassines directement cette adresse).

Pas de pb dns puisque je peux me reconnecter aussitôt, mais je pige pas
pourquoi ça pourrait figer la console, une fois la connexion établie le
client ssh fait plus de requêtes dns si ?

 * si tu peux effectuer un ping cli→svr ET un autre svr→cli
   lorsque ça coince?

oui
 
 * accessoirement, ce qu'un traceroute renvoie en cours de
   coinçage?

la route sans rien de particulier

   * Que se passe-t-il si tu fais un restart du daemon ssh sur
 le svr alors que ça coince?

rien de spécial

  Je testerai, mais s'il faut tous les relancer à chaque fois ça va
  être pénible...
 
 Au pire, si c'est un PB temporaire, tu peux ajouter un crontab
 qui fait le job.

Le genre de bricolage que j'aime pas trop (ça serait à faire sur un
paquet de serveurs, et c'est un événement qui doit rester exceptionnel,
je reçois une notif par mail à chaque changement de pid d'un sshd) 


-- 
Daniel

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/20140413162758.2a9ad60f@mflabtop



Re: Console qui fige

2014-04-13 Thread Jacques
Le 13/04/2014 23:27, Daniel Caillibaud a écrit :
 ...
 Je suppose donc que c'est le modem (ou un routeur du fai) qui coupe la
 connexion au bout d'un moment sans traffic et que le client parvient
 pas à la rouvrir, mais je vois pas comment contourner le pb.
 
 J'ai regardé /etc/ssh/ssh_config mais pas vu de param particulier pour
 maintenir une connexion active (et j'ai rien de spécial dans mon
 ~/.ssh/config).

Bonjour,

As-tu essayé l'option ServerAliveInterval dans ~/.ssh/ssh_config ?

extrait de man ssh_config:
 ServerAliveInterval
   Sets a timeout interval in seconds after which if no data has
   been received from the server, ssh(1) will send a message through
   the encrypted channel to request a response from the server.  The
   default is 0, indicating that these messages will not be sent to
   the server, or 300 if the BatchMode option is set.  This option
   applies to protocol version 2 only.  ProtocolKeepAlives and
   SetupTimeOut are Debian-specific compatibility aliases for this
   option.

Tu peux aussi tenter d'agir sur le serveur ssh si tu as la main dessus
avec l'option pendante: ClientAliveInterval dans /etc/ssh/sshd_config


-- 
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/534b0404.2020...@hermine.no-ip.info



Re: regénérer les locales ?

2014-04-13 Thread Gaëtan PERRIER
Le Fri, 11 Apr 2014 09:33:52 +0200
Sébastien NOBILI sebnewslet...@free.fr a écrit:

 Bonjour,
 
 Le jeudi 10 avril 2014 à 22:28, Gaëtan PERRIER a écrit :
  Si j'ai bien compris ce script réinstalle tous les paquets ayant des
  locales pas seulement ceux dont des locales (gérées par localepurge)
  manquent, non ?
 
 Je n'ai pas creusé plus que ça, mais ça paraît logique de réinstaller tous
 les paquets ayant des locales puisque localepurge a sûrement supprimé des
 fichiers de chacun de ces paquets.
 
 La reconfiguration de localepurge n'est pas une opération qu'on fait tous les
 jours, on peut accepter qu'elle fasse un peu plus que le strict nécessaire.
 

J'ai essayé le script et ça ne fonctionne pas. Il télécharge tous les paquets
mais ensuite ça plante sur :
Fetched 328 MB in 5min 17s (1034
kB/s) E: Couldn't configure pre-depend dpkg:amd64 for man-db:amd64, probably a
dependency cycle.

Gaëtan

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20140414002728.15c96253177e28fc5a699...@neuf.fr



sane et pilotes 32 bits

2014-04-13 Thread Gaëtan PERRIER
Bonjour,

Depuis ma migration en 64 bits j'ai perdu l'usage de mon scanner Epson
Perfection 3170 Photo.
En 32 bits il fonctionnait avec le pilotes Epson
iscan-plugin-gt-9400_1.0.0-2_i386.deb mais celui n'existe qu'en 32 bits.
J'ai essayé en l'installant quand même mais ça ne fonctionne pas.
Savez-vous s'il existe une solution ?

Gaëtan

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20140414011709.9afbce205d39e97a714db...@neuf.fr



Re: No ejecuta directamente ningún .sh

2014-04-13 Thread Tino Sino
Solamente nautilus, sin exec?

Robottinosino

On 27 Mar 2014, at 16:22, listascor...@msjs.co listascor...@msjs.co wrote:

 El 27/03/14 09:56, Camaleón escribió:
 ls -la
 
 Es que es con cualquier .sh por ej:
 
 ~$
  cat /home/usuario/Desktop/asd.sh
 #!/bin/sh
 
 exec nautilus
 
 exit 0
 
 
 ls -la  /home/usuario/Desktop/asd.sh
 -rwxr-xr-x 1 usuario usuario 34 mar 26 16:31 /home/usuario/Desktop/asd.sh*
 
 y con cualquier .sh no ejecuta, ya ensaye con varios y no ejecuta, solo lo 
 abre con gedit así le haya dado permisos de ejecución y haya seleccionado en 
 abrir con:  ejecutar como programa
 
 
 -- 
 To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
 Archive: https://lists.debian.org/53344241.7000...@msjs.co
 


--
To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/19dd401d-6a2f-4e57-92c5-9bcb8dabb...@gmail.com



Re: No ejecuta directamente ningún .sh

2014-04-13 Thread Tino Sino
Desde bash, mejor type -p que which. 

Robottinosino

On 26 Mar 2014, at 22:29, listascor...@msjs.co listascor...@msjs.co wrote:

 El 26/03/14 16:11, El Ale... escribió:
 podrias verificar la ruta de tu bach
 
 Listo ya:
 ~$
  which bash
 /bin/bash
 
 
 -- 
 To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
 Archive: https://lists.debian.org/5333469c.7000...@msjs.co
 


--
To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/d7f314c4-27b5-4e10-8729-cfa667807...@gmail.com



Re: alternativa de aplicaciòn para Debian

2014-04-13 Thread Camaleón
El Sat, 12 Apr 2014 15:34:45 -0430, Miguel Matos escribió:

 Hola de nuevo, yo otra vez. Esta es mi nueva duda: ¿saben si existe una
 alternativa en software libre que haga EXACTAMENTE (resalto en
 mayúsculas) 

Sólo TuneUp hace lo mismo que TuneUP, eso es de cajón.

 esto:
 http://www.tune-up.com/fileadmin/images/screenshots/tuu2013_en/
sg24_Disk_Space_Explorer.png
 http://www.tune-up.com/fileadmin/images/screenshots/tuu2013_en/
TuneUp_Disk_Space_Explorer_1.png
 y
 http://www.diskview.com/dvimages/diskview-components.gif (aunque este
 ùltimo sòlo sirve para Windows y es de prueba, no es lo que busco).

Además de enlazar con imágenes a modo de ejemplo conviene que describas 
textualmente lo que buscas, más que nada porque habrá listeros que no 
tengan acceso a Internet y no sabrán lo que quieres.

 La utilidad de discos no me complace lo suficiente, 

¿Por algún motivo en concreto?

 así que sigo revisando lo mismo que hace el ya conocido Tuneup
 Diskspace Explorer, pero en software libre.

Pues no veo nada de especial en las imágenes que mandas de ejemplo :-?

La primera es un pantallazo con a) discos duros/espacio, b) desglose por 
tipo de archivo y c) clasificación de los 10 archivos de mayor tamaño.

En la segunda imagen se muestran los 100 archivos de mayor tamaño.

Si el analizar de uso de disco que incluyen gnome y kde no te sirven (son 
bastante completos) puedes mirar alguna otra herramienta. En la wiki de 
Archlinux apuntan varias:

https://wiki.archlinux.org/index.php/List_of_applications/
Utilities#Disk_usage_display_programs

Y bueno, siempre te queda la fría y solitaria línea de comandos (este lo 
tengo apuntado en mi hoja de chuletas):

# enumerar tamaño de archivos/directorio de mayor a menor tamaño
du -BM | sort -nr | less

Saludos,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/pan.2014.04.13.14.04...@gmail.com



Re: Actualización de la ISO - Open SSL heartbleed bug

2014-04-13 Thread Camaleón
El Sat, 12 Apr 2014 18:55:22 -0500, esmunarriz escribió:

 Estimada comunidad, gracias por vuestra ayuda e interés. He actualizado
 debian Wheezy de mi HD pero me queda la duda de si habrán actualizado
 las imágenes .iso de la web oficial de debian.

Seguramente no, las imágenes ISO se generan cada X meses, lo que sí está 
actualizado es el paquete vulnerable, pero de manera independiente 
(el .deb).

 Para conectarme a web's donde voy a suministrar datos sensibles inicio
 mediante un USB con arranque en debian y desconectando mi HD
 fisicamente. Tras este fallo de seguridad, ¿debería formatear el USB e
 instalar de nuevo una imagen booteable de debian con el fallo ya
 corregido? ¿Estarán ya actualizadas las imágenes? ¿como podría
 comprobarlo?.

No, únicamente tienes que mantener la Debian de la llave USB actualizada 
y ya está.

Saludos,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/pan.2014.04.13.14.12...@gmail.com



Re: Me refiero al USB.

2014-04-13 Thread Camaleón
El Sat, 12 Apr 2014 19:06:15 -0500, esmunarriz escribió:

 Gracias por tú interés.

¿Hablas solo? :-)

Saludos,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/pan.2014.04.13.14.13...@gmail.com



Re: Actualización de la ISO - Open SSL heartbleed bug

2014-04-13 Thread esmunarriz

El 13/04/14 09:12, Camaleón escribió:

El Sat, 12 Apr 2014 18:55:22 -0500, esmunarriz escribió:


Estimada comunidad, gracias por vuestra ayuda e interés. He actualizado
debian Wheezy de mi HD pero me queda la duda de si habrán actualizado
las imágenes .iso de la web oficial de debian.

Seguramente no, las imágenes ISO se generan cada X meses, lo que sí está
actualizado es el paquete vulnerable, pero de manera independiente
(el .deb).


Para conectarme a web's donde voy a suministrar datos sensibles inicio
mediante un USB con arranque en debian y desconectando mi HD
fisicamente. Tras este fallo de seguridad, ¿debería formatear el USB e
instalar de nuevo una imagen booteable de debian con el fallo ya
corregido? ¿Estarán ya actualizadas las imágenes? ¿como podría
comprobarlo?.

No, únicamente tienes que mantener la Debian de la llave USB actualizada
y ya está.

Saludos,

Estimados Santiago Vila y Camaleón, muchas gracias por vuestras 
respuestas/aclaraciones e interés.


--
Saludos cordiales.


--
To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/534ac766.10...@gmail.com



usuario

2014-04-13 Thread Edward Villarroel (EDD)
como crear un usuario en la pc q no pueda hacer nada
 no pueda escribir en el disco
 no tenga bash
 nada mas pueda usar los programas gnome chromium y asi?

Edward Villarroel:  @Agentedd


-- 
To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/cadfsjo30g3m00ficz-j4r+4kpog0njueybpt5whut+yp7vu...@mail.gmail.com



Re: My fellow (Debian) Linux users ...

2014-04-13 Thread Reco
 Hi.

On Sat, 12 Apr 2014 23:20:40 +0100
Lisi Reisz lisi.re...@gmail.com wrote:

 On Saturday 12 April 2014 23:11:35 Henrique de Moraes Holschuh wrote:
  There IS a reason why it was given a Severity: Apocaliptic label
  by the best in the field:
 
 So what action do readers recommend?  Change every single password, or 
 just passwords to sensitive sites/information?

It's much worse than this. Change every password, every certificate and
every key pair just to be sure.

Next, test services you're using for Heartbleed vulnerability, and if
they're still vulnerable - stop using them. They were given enough time
to patch the bug, and if they haven't did it until now - they won't do
it in the foreseeable future.

Next, test network equipment near you for Heartbleed vulnerability.
Update their firmware if possible, dump this piece of equipment if not.

Reco


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20140413102922.35b7bdbff611d8cf88eab...@gmail.com



Re: GNOME dependencies (was ... Re: apt-get doesn't upgrade, but synaptic does)

2014-04-13 Thread Reco
Hi.

On Sun, 13 Apr 2014 16:18:01 +1200
Chris Bannister cbannis...@slingshot.co.nz wrote:

 On Sat, Apr 12, 2014 at 12:26:10AM -0400, PaulNM wrote:
  paul@debguis2:~$ aptitude why libreoffice-writer
  i   gnome Depends libreoffice-writer | abiword (= 2.8)
 
 WTF. Shouldn't that be a recommends?
 
 Seems like a bug to me.

Remember, that it's the Debian Gnome Team who thought it would be a
great idea that 'gnome' metapackage would depend on Adblock Plus
Firefox extension. Took about a year [1] to convince them not to do it.
So, if you have free time to spare you're free to fill an appropriate
bug.

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=689858

Reco


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20140413105003.9150a5fd006c6ef603b7d...@gmail.com



Re: Copying complete SET of installation DVDs to a USB stick

2014-04-13 Thread Rick Thomas
As per debian list etiquette my reply is at the bottom...

On Apr 12, 2014, at 7:01 AM, Richard Owlett rowl...@cloud85.net wrote:

 I will be installing Debian at locations which DO NOT have internet.
 Instead of juggling a stack of DVDs, I want everything on a USB stick.
 I am using Debian 6.0.5 as test case - it's what I have available.
 There was no problem copying the first DVD to the beginning of the USB stick 
 with dd.
 I did a preliminary test by booting to the USB stick and the install program 
 apparently worked OK.
 
 I rebooted to an operable system and created a large partition on the 
 remainder of the flash drive. I then attempted to copy DVDs to the flash 
 drive using first
cp -r -l /media/cdrom0 /media/mydrive/disk1
 I aborted when started receiving error messages of failure with link files.
 I then tried
cp -r -l /media/cdrom0 /media/mydrive/disk1
 I aborted that also reviving similar error messages.
 
 How should I be doing this?

Hi Richard,

Have you tried using dd to make images of the DVDs on the extended part of the 
USB stick?  E.g.:
# put DVD1 in the drive
dd if=/dev/cdrom0 of=/media/mydrive/DVD1.iso bs=1M
eject cdrom
# put DVD2 in the drive
dd if=/dev/cdrom0 of=/media/mydrive/DVD2.iso bs=1M
# and so on...
them loop-mounting the images?

I'm not sure what you would have to do inside the installer to get the 
loop-mounted images into the installers sources.list file, but I'm sure a bit 
of wiki and/or FAQ scratching would answer that question.  Once you figure out 
the necessary magic, you can probably pre-seed it into your installer image on 
the front part of the USB stick.

I know this is just a sketch of a solution, but it's all I've got time for 
right now.  Anyway, it's the approach I'd take if I had the problem.

Hope it helps!
Good luck and let us know if you come up with something that works!

Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/1bfcb66f-a7ea-4f90-8eda-f062077c1...@pobox.com



Re: apt-get doesn't upgrade, but synaptic does

2014-04-13 Thread Brad Rogers
On Sat, 12 Apr 2014 20:59:02 -0700
Patrick Bartek bartek...@yahoo.com wrote:

Hello Patrick,

I rechecked, and the metapackage is removed, but not any of libreoffice
modules.  Ultimately, I just purged each of the modules by name, then
autoremove the orphaned dependencies.

There should be an easier way.

Maybe, IDK.  In any case, if the behaviour of meta-packages were to be
changed, I'm sure there would be some quite heated discussion about the
matter.

-- 
 Regards  _
 / )   The blindingly obvious is
/ _)radnever immediately apparent
I'm surfing on a wave of nostalgia for an age yet to come
Nostalgia - Buzzcocks


signature.asc
Description: PGP signature


Re: Cropping a large collection of .PNG screenshots

2014-04-13 Thread Cousin Stanley

 # convert source -crop widthxheight+wo+ho target

 Ah, gotcha. No problem. In the specific case of cropping, 
 it's pretty simple; other tasks, maybe the balance would 
 be tipped the other way. 

 In any case, it's only because of familiarity; I'll reach 
 for the hammer I know rather than the excellent tool 
 that I'd need to spend more time reading docs for 
 than running :)

  Some good imagemagick docs for reading
  if and when you have time  

http://www.imagemagick.org/Usage/

http://www.imagemagick.org/script/examples.php
  

-- 
Stanley C. Kitching
Human Being
Phoenix, Arizona


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/lidfth$3rt$1...@dont-email.me



Re: My fellow (Debian) Linux users ...

2014-04-13 Thread David Guntner
John Hasler grabbed a keyboard and wrote:
 Henrique writes:
 It also includes the emails that were read over a
 heartbleed-vulnerable IMAP, and every data that went over a
 heartbleed-vulnerable VPN tunnel, for example.
 
 I wasn't aware that IMAP and VPN used heartbeat.  I don't see that IMAP
 is all that serious, though.  Email isn't secure anyway.

That's all well and good, but I suspect that you probably don't login to
your IMAP server by sending your username and password in the clear.
And with a vulnerable version of the library, that's the kind of
information that an attacker can get access to.

 But I wonder how many VPN users are aware that they have a problem?

It would depend on what library was in use (OpenSSL or another) and what
version if OpenSSL.  The VPN provider that I use conducted a complete
survey of their systems and determined that none of their critical
infrastructure was vulnerable, but they still decided to revoke and
rotate their certs and private keys just as an additional precautionary
measure.

 --Dave




smime.p7s
Description: S/MIME Cryptographic Signature


Voice control

2014-04-13 Thread brian
My wife has contracted RSD (otherwise known as CRPS) affecting her
hands, and it's become very painful for her to use her PC. She can
cope with a mouse, just, but typing is a major problem for her.

Does anyone have any recommendations for (better yet, personal
experience with) voice-to-text software? We're using Debian 7 64-bit.

I know Dragon is the big name in the Windows world, so the fallback
would be a Windows virtual machine and Naturally Speaking, but I'd
like to stick with a Linux solution if it's possible.

Thanks.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/534a5705@meadows.pair.com



Re: Voice control

2014-04-13 Thread Karl E. Jorgensen
Hi

On Sun, Apr 13, 2014 at 05:21:09AM -0400, brian wrote:
 My wife has contracted RSD (otherwise known as CRPS) affecting her
 hands, and it's become very painful for her to use her PC. She can
 cope with a mouse, just, but typing is a major problem for her.
 
 Does anyone have any recommendations for (better yet, personal
 experience with) voice-to-text software? We're using Debian 7 64-bit.

Sorry to hear that :-(

I have no experience with voice-to-text software - I assume you're
already enabled the accessibility features - e.g. Orca and the like?

Other interesting text input methodologies like Dasher may be useful
too..

Not for typing, but in my past interweb wanderings I came across this
one:

  http://eviacam.sourceforge.net/

Perhaps that will be helpful?  I gave up playing with it when I
switched to a laptop without a built-in webcam...

-- 
Karl E. Jorgensen


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140413100150.GA12889@hawking



Adobe flash security

2014-04-13 Thread Rob van der Putten

Hi there


http://helpx.adobe.com/security/products/flash-player/apsb14-09.html
Does this effect Debian?


Regards,
Rob



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/lidncv$71k$1...@ger.gmane.org



Re: Voice control

2014-04-13 Thread Martin Steigerwald
Hi Brian!

Am Sonntag, 13. April 2014, 05:21:09 schrieb brian:
 My wife has contracted RSD (otherwise known as CRPS) affecting her
 hands, and it's become very painful for her to use her PC. She can
 cope with a mouse, just, but typing is a major problem for her.
 
 Does anyone have any recommendations for (better yet, personal
 experience with) voice-to-text software? We're using Debian 7 64-bit.
 
 I know Dragon is the big name in the Windows world, so the fallback
 would be a Windows virtual machine and Naturally Speaking, but I'd
 like to stick with a Linux solution if it's possible.

I recommend looking at Simon listens:

http://simon.kde.org/

I didn´t yet test it, but from what I saw it enables replacing keyboard and 
mouse by voice and is even used for home robotics.

Ciao,
-- 
Martin 'Helios' Steigerwald - http://www.Lichtvoll.de
GPG: 03B0 0D6C 0040 0710 4AFA  B82F 991B EAAC A599 84C7


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/3421425.3iXT4jfozs@merkaba



Re: debmirror not installing libdigest-sha-perl, even though it is a dependency

2014-04-13 Thread Andrei POPESCU
On Jo, 10 apr 14, 21:24:38, Zenaan Harkness wrote:
 On 4/9/14, Kushal Kumaran kushal.kumaran+deb...@gmail.com wrote:
  Zenaan Harkness z...@freedbms.net writes:
  Any idea why the following:
 
  $ dpkg -s debmirror|grep Status
  Status: install ok installed
 
  $ apt-cache show debmirror|grep Depends
  Depends: perl (= 5.10), libnet-perl, libdigest-md5-perl,
  libdigest-sha-perl, liblockfile-simple-perl, rsync, bzip2, libwww-perl
  (= 5.815), libnet-inet6glue-perl
 
  $ dpkg -s libdigest-sha-perl|grep Status
  dpkg-query: package 'libdigest-sha-perl' is not installed and no
  information is available
 
  The perl package provides libdigest-sha-perl.
  https://packages.debian.org/wheezy/libdigest-sha-perl
 
 So why is it also a separate package? It is clear I am not
 understanding something here.

Not sure what you're looking for, but let me try to explain:

debmirror Depends: libdigest-sha-perl. From the output above it seems 
that on your system the dependency is satisfied by the Provides: 
libdigest-sha-perl of package perl, so there is no reason to have the 
real package libdigest-sha-perl installed.

dpkg can't tell anything about the libdigest-sha-perl package because 
it's not installed on your system.

Hope this explains,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Squid netdb

2014-04-13 Thread Rob van der Putten

Hi there


I'm tinkering a bit with Squid. Build a backport [1].
Does anyone know what the contents of /var/log/squid3/netdb.state means? 
Some things are obvious, others are not.


[1] http://www.sput.nl/software/squid33.html


Regards,
Rob



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/lido6d$gnl$1...@ger.gmane.org



Re: AMD Graphics on Debian 7.4

2014-04-13 Thread Lisi Reisz
On Sunday 13 April 2014 03:28:42 ray wrote:
   Error: unsupported architecture:
 
  I haven't been reading this properly.  Sorry. :-(  Are your
  distro,
 
  your driver and your CPU all the same architecture?

 Yes, from the dpkg --print-architecture -- amd64, the CPU is an
 Intel i7-3930K, and the Catalyst package is
 amd-catalyst-13.12-linux-x86.x86_64.run.

 It is complaining about the architecture, not the distro version.
 
  Have you got multiarch installed?

 Not that I know of.  So I did the following:

 # dpkg --print-architecture
 amd64

 # dpkg --print-foreign-architectures
 # dpkg --add-architecture i386
 # dpkg --print-architecture
 amd64

 # dpkg --print-foreign-architectures
 i386

 apt-get update
 Hit http://ftp.us.debian.org wheezy Release.gpg
 ...snip
 Fetched 6,647 kB in 18s (357 kB/s)
 Reading package lists... Done


 Then:

 # sh ./amd-catalyst-13.12-linux-x86.x86_64.run --buildpkg
 Debian/stable Created directory fglrx-install.hrcfIz
 Verifying archive integrity... All good.
 Uncompressing AMD Catalyst(TM) Proprietary Driver-13.251...
 ...
 Generating package: Debian/stable
 ./packages/Debian/ati-packager.sh: 1:
 ./packages/Debian/ati-packager.sh: dpkg-architecture: not found
 Error: unsupported architecture:
 Removing temporary directory: fglrx-install.hrcfIz

 I have looked but can't find what 'dpkg-architecture: not found'
 means, none the less, how to address it.

Would it be worth just trying installing multiarch?  With one of the 
apt family.  (I use aptitude).  I agree that it is not obviously 
needed, but it is apparently not there, and the problem now is 
something to do with the architecture.

Lisi


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201404131116.19361.lisi.re...@gmail.com



Re: Cropping a large collection of .PNG screenshots

2014-04-13 Thread Andrei POPESCU
On Sb, 12 apr 14, 12:26:48, Steve Litt wrote:
 On Thu, 10 Apr 2014 00:43:45 +0300
 Andrei POPESCU andreimpope...@gmail.com wrote:
 
  On Mi, 09 apr 14, 08:59:51, Steve Litt wrote:
   
   Or, you can just redirect ls into a file, use Vim to convert and
   rename each file individually.
  
  Could you please elaborate on this?
 
 ls -1 *.png  doit.sh
 chmod a+x doit.sh
 gvim doit.sh
 :%s/^/doconvert  /
 ggi
 function doconvert(){
  mv $1 $1.bak
  convert -crop whatever $1.bak $1
 }esc
 :wq
 ./doit.sh

(g)vim seems overkill to me.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: My fellow (Debian) Linux users ...

2014-04-13 Thread Martin Steigerwald
Hello!

Am Samstag, 12. April 2014, 21:03:36 schrieb Ralf Mardorf:
 On Sat, 2014-04-12 at 20:48 +0200, Ralf Mardorf wrote:
  I experience issues with Debian lists :(. _With Debian lists only_ :(.
  
  :( I'm still subscribed to d-community-offtopic, I checked it, however,
  
  my latest mail didn't come through the list:
 My apologies, it was delayed and did came trough right now :)

Honestly – please anyone who has the feeling that the mailing list software 
does not work or send mails to their account:

*First* and *foremost* give it some patience…

… and check *your own* setup. At least check:

- Your subscription status – by subscribing again for example.

- Check with a different mail account.


Only if you are confident that your setup is working 100%, then write a mail to 
the listmasters to check on their side.


Please, pretty please.

Cause honestly I am quite a bit fed up with the recent the mailing list does 
not work posting.



I assume that most of the subscribers receive mails as do I for example.

And I assume that the mailing list software *just works*.


So I assume that the likelyhood of it being a problem on *your* side is next 
to 100%.


(Thread set to ignored.]

Thanks,
-- 
Martin 'Helios' Steigerwald - http://www.Lichtvoll.de
GPG: 03B0 0D6C 0040 0710 4AFA  B82F 991B EAAC A599 84C7


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/1520441.OiQAsyUsPi@merkaba



Re: Cropping a large collection of .PNG screenshots

2014-04-13 Thread Scott Ferguson
On 13/04/14 20:21, Andrei POPESCU wrote:
 On Sb, 12 apr 14, 12:26:48, Steve Litt wrote:
 On Thu, 10 Apr 2014 00:43:45 +0300
 Andrei POPESCU andreimpope...@gmail.com wrote:

 On Mi, 09 apr 14, 08:59:51, Steve Litt wrote:

 Or, you can just redirect ls into a file, use Vim to convert and
 rename each file individually.

 Could you please elaborate on this?

 ls -1 *.png  doit.sh

for i in `ls *.png`;

 chmod a+x doit.sh
 gvim doit.sh
 :%s/^/doconvert  /
 ggi
 function doconvert(){
  mv $1 $1.bak

# WxH+X+Y
do convert $i -crop 600x400+0+600 crop_$i;


  convert -crop whatever $1.bak $1
 }esc
 :wq
 ./doit.sh

done

 
 (g)vim seems overkill to me.
 
 Kind regards,
 Andrei
 

Agreed.

Kind regards


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/534a67dc.2000...@gmail.com



Re: Adobe flash security

2014-04-13 Thread Артур Истомин
On Sun, Apr 13, 2014 at 12:03:11PM +0200, Rob van der Putten wrote:
 Hi there
 
 
 http://helpx.adobe.com/security/products/flash-player/apsb14-09.html
 Does this effect Debian?

Yes, affect.

# update-flashplugin-nonfree --status
Flash Player version installed on this system  : 11.2.202.335
Flash Player version available on upstream site: 11.2.202.350

To update this fucked proprietary software, run:
# update-flashplugin-nonfree --install

Thanks for reminder.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140413103101.GB13502@localhost



Re: Cropping a large collection of .PNG screenshots

2014-04-13 Thread shawn wilson
On Wed, Apr 9, 2014 at 6:03 AM, Kevin O'Gorman kogor...@gmail.com wrote:
 I have a few hundred screen shots I want to put on a web page, but
 they are all full-screen and I want to crop to the real contents.
 This is an identical region in all cases.  So I want to script it.

 So, 2 questions:
 A) What's the best tool for the job?  Gimp, irfanview, or something else?
 B) Is there a script already in existence where I can just change the
 crop rectangle?  I really don't want to learn a new language for a
 one-time job.


After seeing tons of different scripts and no response to your idea of
irfanview, I figured I'd put my $.02 in Irfanview is a Windows
program and this is a linux forum. Other than that, it is what I'd
recommend someone look at in order to attempt to do this before I had
to write them a one off script. Last I checked there is no linux port
of irfanview. You could look at xnview/xnconvert and after you figure
out the cli options, run it through a loop or xargs or find exec.

You could also look for a gimpscript (basically python iirc) to do
this there. Or if this is something you will need to repeat, you might
look into writing it.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAH_OBiey2Z=xf-AoYj7=fpdqhwtte_nhaatfmdu1tbokqx2...@mail.gmail.com



Re: Adobe flash security

2014-04-13 Thread Rob van der Putten

Hi there


Артур Истомин wrote:


Yes, affect.

# update-flashplugin-nonfree --status
Flash Player version installed on this system  : 11.2.202.335
Flash Player version available on upstream site: 11.2.202.350

To update this fucked proprietary software, run:
# update-flashplugin-nonfree --install


Somehow this doesn't update the software.


Regards,
Rob



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/lidpuv$5c9$1...@ger.gmane.org



Re: S-Video on ThinkPad T42 with Debian Jessie - can't get above 800x600

2014-04-13 Thread Chris Angelico
On Sun, Apr 13, 2014 at 1:39 AM, Chris Angelico ros...@gmail.com wrote:
 On Fri, Apr 11, 2014 at 12:50 AM, Chris Angelico ros...@gmail.com wrote:
 I've just converted a laptop from Windows XP to Debian Jessie, with
 the expectation that I'd be able to do everything at least as well as
 before. That's been mostly true, but I'm stuck on a problem with the
 S-Video output: whatever I do, the TV shows only 800x600.

 In the interests of experimentation, I live-booted AntiX on that same
 hardware. The result is exactly the same; xrandr says the S-video
 output is in its only mode of 800x600 60Hz, and telling it to go
 1024x768 just results in the top left 800x600 being visible.

Further experimentation has revealed a rather interesting result. It
seems that Windows was claiming that it was driving the S-video at
1024x768, but was actually stretching it down to 800x600. Short of
reinstalling Windows (which I will not do!), I have no way to prove
this, but anecdotal evidence is that text is a bit more readable now.
So it's looking like 800x600 is all we really get anyway. Everything's
working other than that, so I'm basically going to consider the matter
closed, unless anyone has fancy ideas to try.

ChrisA


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAPTjJmpNKaDY6t4ZOpuA0httvsSr=hhni0cfvosaqlzn17r...@mail.gmail.com



Re: My fellow (Debian) Linux users ...

2014-04-13 Thread Rick Thomas
On Apr 13, 2014, at 3:21 AM, Martin Steigerwald mar...@lichtvoll.de wrote:

 Hello!
 
 Am Samstag, 12. April 2014, 21:03:36 schrieb Ralf Mardorf:
 On Sat, 2014-04-12 at 20:48 +0200, Ralf Mardorf wrote:
 I experience issues with Debian lists :(. _With Debian lists only_ :(.
 
 :( I'm still subscribed to d-community-offtopic, I checked it, however,
 
 my latest mail didn't come through the list:
 My apologies, it was delayed and did came trough right now :)
 
 Honestly – please anyone who has the feeling that the mailing list software 
 does not work or send mails to their account:
 *First* and *foremost* give it some patience…
 … and check *your own* setup. At least check:
 - Your subscription status – by subscribing again for example.
 - Check with a different mail account.
 Only if you are confident that your setup is working 100%, then write a mail 
 to 
 the listmasters to check on their side.
 Please, pretty please.
 Cause honestly I am quite a bit fed up with the recent the mailing list does 
 not work posting.
 I assume that most of the subscribers receive mails as do I for example.
 And I assume that the mailing list software *just works*.
 So I assume that the likelyhood of it being a problem on *your* side is next 
 to 100%.
 (Thread set to ignored.]
 Thanks,
 -- 
 Martin 'Helios' Steigerwald - http://www.Lichtvoll.de
 GPG: 03B0 0D6C 0040 0710 4AFA  B82F 991B EAAC A599 84C7

Too bad that Martin won't see this reply since he's ignoring the thread it will 
appear under...

This particular problem is one of the very few cases where it turns out not to 
be a problem with the user's configuration.  Neither is it a problem with the 
mailing-list configuration -- unless you count believing and acting upon 
standards as a fault in the mailing list configuration.

For a fuller explanation, see:
http://www.ietf.org/mail-archive/web/ietf/current/msg87153.html 

Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/e8bf0d32-9dea-4af5-9aeb-616b274be...@pobox.com



Re: Adobe flash security

2014-04-13 Thread Rob van der Putten

Hi there


Rob van der Putten wrote:


Somehow this doesn't update the software.


Is just noticed that there is a bug reposrt;
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744263


Regards,
Rob



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/lidr2i$i9r$1...@ger.gmane.org



Re: Can't patch Heartbleed bug?

2014-04-13 Thread Andrei POPESCU
On Vi, 11 apr 14, 14:19:29, Reco wrote:
 
 'aptitude changelog' won't do one any good unless one has some deb-src
 entries in sources.list.
 
That's a bug in aptitude[1], the changelog downloading doesn't have 
anything to do with source packages.

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=587775

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: GNOME dependencies (was ... Re: apt-get doesn't upgrade, but synaptic does)

2014-04-13 Thread Chris Bannister
On Sun, Apr 13, 2014 at 10:50:03AM +0400, Reco wrote:
 Hi.
 
 On Sun, 13 Apr 2014 16:18:01 +1200
 Chris Bannister cbannis...@slingshot.co.nz wrote:
 
  On Sat, Apr 12, 2014 at 12:26:10AM -0400, PaulNM wrote:
   paul@debguis2:~$ aptitude why libreoffice-writer
   i   gnome Depends libreoffice-writer | abiword (= 2.8)
  
  WTF. Shouldn't that be a recommends?
  
  Seems like a bug to me.
 
 So, if you have free time to spare you're free to fill an appropriate
 bug.

I don't use GNOME, so I'll leave that to you. :)
GNOME is one of the reasons I use a Window Manager. :)

-- 
If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the 
oppressing. --- Malcolm X


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140413112155.GA24891@tal



Re: GNOME dependencies (was ... Re: apt-get doesn't upgrade, but synaptic does)

2014-04-13 Thread Reco
On Sun, 13 Apr 2014 23:21:55 +1200
Chris Bannister cbannis...@slingshot.co.nz wrote:

 I don't use GNOME, so I'll leave that to you. :)
 GNOME is one of the reasons I use a Window Manager. :)

Nah, I'll pass. Stopped using GNOME back in 2007, never looked back
since then.

Reco


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20140413153209.628b2e811c2a0ae0e124a...@gmail.com



Re: Adobe flash security

2014-04-13 Thread Артур Истомин
On Sun, Apr 13, 2014 at 01:05:53PM +0200, Rob van der Putten wrote:
 Hi there
 
 
 Rob van der Putten wrote:
 
 Somehow this doesn't update the software.
 
 Is just noticed that there is a bug reposrt;
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744263

I am on testing and it work for me. And yes, I remember I had the same
problems on stable with update-flashplugin-nonfree.

Anyway you can download it manualy, unpack and put it to
/usr/lib/flashplugin-nonfree/libflashplayer.so


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140413113248.GC13502@localhost



Re: the importance of defaults ( was: Debian default desktop environment )

2014-04-13 Thread alberto fuentes
On Sun, Apr 13, 2014 at 6:51 AM, Chris Bannister
cbannis...@slingshot.co.nz wrote:
 On Sat, Apr 12, 2014 at 12:17:47PM +0200, alberto fuentes wrote:
 tl;dr

 http://knowyourmeme.com/memes/tldr

In this case I used it like, my mail is just my own opinion and if you
dont want to read the mail of yet another skewed opinion, at least
watch the presentation that is the interesting part. Its the subject
of the mail as well, the importance of defaults. which is pretty
objective

 I've always considered Debian to be closer to the NetBSD goals and
 objectives and the derivatives closer to the PC-BSD goals and
 objectives.

 I believe this distinction is important and is currently the source of
 contention within the Debian project.

 Thoughts?

Yeah, well, no default desktop at all and make user pick one is
another option with a lot of supporters. I agree is bikeshedding in
the debian context since the goals of the project are others like you
suggest. Give the user more responsability...

 OTOH, the features which attract some users could be the very features
which scare others away.

Its just a default. Power users can still dont install desktop or the
one they like. This default wont scare anybody away. It only has the
potential to attract more new users that have a first contact if at
all.

I do think defaults are powerful and to have users is very important
as well. Among the leechers there are the 2% of new contributors

And I dont think we should be disruptive in the transition to jessie



This mail was intended for another list anyway. Sorry it ended up here
in debian-user


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CALkubT72ZY=z_amvfuvzubsfwtcbcc9nmhpdijvmkgn391s...@mail.gmail.com



Re: My fellow (Debian) Linux users ...

2014-04-13 Thread Curt
On 2014-04-13, Eduardo M KALINOWSKI edua...@kalinowski.com.br wrote:
 On 20h20 12 de Abril de 2014, Steve Litt wrote:
 I'm changing every password: That's about 100 of them.

 That's a good thing to do, but only after the server has patched
 openssl and changed its certificate. Otherwise someone could have
 captured the private key and other information that could be used to
 eavesdrop your newly changed password.

This online tester:

http://possible.lv/tools/hb/

provides this sort of output in the critical case:

ext 65281 (renegotiation info, length=1)
ext 00011 (EC point formats, length=4)
ext 00035 (session ticket, length=0)
ext 00015 (heartbeat, length=1) -- Your server supports heartbeat. Bug
is possible when linking against OpenSSL 1.0.1f or older. Let me check.
Actively checking if CVE-2014-0160 works: Your server appears to be
patched against this bug.

Checking your certificate
Certificate has been reissued since the 0day. Good. lt-- Have you
changed the passwords?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnlkktvo.315.cu...@einstein.electron.org



Re: Copying complete SET of installation DVDs to a USB stick

2014-04-13 Thread Richard Owlett

Chris Bannister wrote:

On Sat, Apr 12, 2014 at 09:01:05AM -0500, Richard Owlett wrote:

I will be installing Debian at locations which DO NOT have internet.
Instead of juggling a stack of DVDs, I want everything on a USB stick.
I am using Debian 6.0.5 as test case - it's what I have available.
There was no problem copying the first DVD to the beginning of the USB stick
with dd.
I did a preliminary test by booting to the USB stick and the install program
apparently worked OK.

I rebooted to an operable system and created a large partition on the
remainder of the flash drive. I then attempted to copy DVDs to the flash
drive using first
 cp -r -l /media/cdrom0 /media/mydrive/disk1
I aborted when started receiving error messages of failure with link files.
I then tried
 cp -r -l /media/cdrom0 /media/mydrive/disk1
I aborted that also reviving similar error messages.

How should I be doing this?


man cp

IOW you are probably missing an option, perhaps the -a, or even the -H?

This is only a suggestion, I'd play around with them and see which one
gives the desired behaviour.



I had read both the manpage and textinfo for cp.
That doesn't mean I understood what I read.
Your references to -a and -H clued me in to how I misread 
description of -l.


I suspect that Rick's suggestion to investigate loop mounting an 
iso image is a better match for my ill-defined mental image of 
what I'm trying to do.


Thank you.



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/534a78af.8010...@cloud85.net



Re: Copying complete SET of installation DVDs to a USB stick

2014-04-13 Thread Richard Owlett

Rick Thomas wrote:

As per debian list etiquette my reply is at the bottom...

On Apr 12, 2014, at 7:01 AM, Richard Owlett rowl...@cloud85.net wrote:


I will be installing Debian at locations which DO NOT have internet.
Instead of juggling a stack of DVDs, I want everything on a USB stick.
I am using Debian 6.0.5 as test case - it's what I have available.
There was no problem copying the first DVD to the beginning of the USB stick 
with dd.
I did a preliminary test by booting to the USB stick and the install program 
apparently worked OK.

I rebooted to an operable system and created a large partition on the remainder 
of the flash drive. I then attempted to copy DVDs to the flash drive using first
cp -r -l /media/cdrom0 /media/mydrive/disk1
I aborted when started receiving error messages of failure with link files.
I then tried
cp -r -l /media/cdrom0 /media/mydrive/disk1
I aborted that also reviving similar error messages.

How should I be doing this?


Hi Richard,

Have you tried using dd to make images of the DVDs on the extended part of the 
USB stick?  E.g.:
 # put DVD1 in the drive
 dd if=/dev/cdrom0 of=/media/mydrive/DVD1.iso bs=1M
 eject cdrom
 # put DVD2 in the drive
 dd if=/dev/cdrom0 of=/media/mydrive/DVD2.iso bs=1M
 # and so on...
them loop-mounting the images?

I'm not sure what you would have to do inside the installer to get the loop-mounted 
images into the installers sources.list file, but I'm sure a bit of wiki 
and/or FAQ scratching would answer that question.  Once you figure out the necessary 
magic, you can probably pre-seed it into your installer image on the front part of the 
USB stick.

I know this is just a sketch of a solution, but it's all I've got time for 
right now.  Anyway, it's the approach I'd take if I had the problem.

Hope it helps!
Good luck and let us know if you come up with something that works!

Rick



I hadn't thought of loop mounting.
A Google search yielded:
https://wiki.debian.org/IsoBuster
https://wiki.debian.org/CDToPool

I've only skimmed them but it's encouraging enough that I'll 
making iso images of my DVDs.


Thanks.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/534a7a71@cloud85.net



Re: Cropping a large collection of .PNG screenshots

2014-04-13 Thread Andrei POPESCU
On Du, 13 apr 14, 20:33:00, Scott Ferguson wrote:
 
 for i in `ls *.png`;

Is there something wrong with

for i in *.png

?

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: Cropping a large collection of .PNG screenshots

2014-04-13 Thread Scott Ferguson
On 13/04/14 22:05, Andrei POPESCU wrote:
 On Du, 13 apr 14, 20:33:00, Scott Ferguson wrote:

 for i in `ls *.png`;
 
 Is there something wrong with
 
 for i in *.png
 
 ?

Yes.
It leaves no room for improvement.

 
 Kind regards,
 Andrei
 

Kind regards


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/534a7fc0.6090...@gmail.com



Re: Cropping a large collection of .PNG screenshots

2014-04-13 Thread Curt
On 2014-04-13, Andrei POPESCU andreimpope...@gmail.com wrote:

 for i in `ls *.png`;

 Is there something wrong with

 for i in *.png

According to this, there is everything right:

http://mywiki.wooledge.org/BashPitfalls#for_i_in_.24.28ls_.2A.mp3.29

# POSIX
for i in *.png; do
[ -e $i ] || continue
some command $i
done


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnlkl0dt.32t.cu...@einstein.electron.org



Re: Adobe flash security

2014-04-13 Thread Rob van der Putten

Hi there


Артур Истомин wrote:


I am on testing and it work for me.


Which has the same dependencies. So I installed it on stable. It wants;
http://people.debian.org/~bartm/flashplugin-nonfree/fp.11.2.202.350.sha512.i386.pgp.asc
Which doesn't exist.

Cut


Regards,
Rob


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/lidvok$det$1...@ger.gmane.org



Re: Adobe flash security

2014-04-13 Thread Slavko
Hi,

Dňa Sun, 13 Apr 2014 10:31:01 + Артур Истомин art.is...@yandex.ru
napísal:

 # update-flashplugin-nonfree --status
 Flash Player version installed on this system  : 11.2.202.335
 Flash Player version available on upstream site: 11.2.202.350
 
 To update this fucked proprietary software, run:
 # update-flashplugin-nonfree --install
 

At my testing:

update-flashplugin-nonfree --status
Flash Player version installed on this system  : 11.2.202.346
Flash Player version available on upstream site: 11.2.202.350

the 11.2.202.350 is not installed by the mentioned --install command

regards

-- 
Slavko
http://slavino.sk


signature.asc
Description: PGP signature


Re: Network Manager networking disabled after suspend

2014-04-13 Thread Michael Biebl
Am 11.04.2014 16:26, schrieb Patrick Wiseman:

 I have two frequently updated testing systems and I'm seeing this
 problem on only one of them (both laptops, both typically connected
 via wifi). On the one with the problem, after suspend the nm-applet
 shows networking disabled

This is fixed in:


network-manager (0.9.8.8-6) unstable; urgency=medium

  [ Laurent Bigonville ]
  * Rework the fix for #734460, kill NetworkManager in the postinst script
instead of the preinst one to minimize downtime on big upgrades

  [ Michael Biebl ]
  * Don't setup Sleep Monitor if system was not booted with systemd. With a
standalone logind we don't receive the Resume signal after a suspend
request and NetworkManager remains in sleep mode where the devices are
unmanaged. (Closes: #742933)
  * Use dh-autoreconf to update the build system. Override dh_autoreconf since
we need to run gtkdocize.

 -- Michael Biebl bi...@debian.org  Sat, 12 Apr 2014 12:48:33 +0200

Will enter testing in 4 days.

Michael

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Re: Cropping a large collection of .PNG screenshots

2014-04-13 Thread Jonathan Dowland


 On 13 Apr 2014, at 11:33, Scott Ferguson 
 scott.ferguson.debian.u...@gmail.com wrote:
 
 for i in `ls *.png`;

Never parse the output of ls.

for i in *.png;

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/54e1dcc6-5515-492e-b0c2-4e796beca...@debian.org



Re: Adobe flash security

2014-04-13 Thread Stephen Allen
On Sun, Apr 13, 2014 at 02:36:43PM +0200, Slavko wrote:
 Hi,
 
 Dňa Sun, 13 Apr 2014 10:31:01 + Артур Истомин art.is...@yandex.ru
 napísal:
 
  # update-flashplugin-nonfree --status
  Flash Player version installed on this system  : 11.2.202.335
  Flash Player version available on upstream site: 11.2.202.350
  
  To update this fucked proprietary software, run:
  # update-flashplugin-nonfree --install
  
 
 At my testing:
 
 update-flashplugin-nonfree --status
 Flash Player version installed on this system  : 11.2.202.346
 Flash Player version available on upstream site: 11.2.202.350
 
 the 11.2.202.350 is not installed by the mentioned --install command
---end quoted text---

+1 Not installed. :(


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140413130714.GA14414@Jessie



Re: Adobe flash security

2014-04-13 Thread Rob van der Putten

Hi there


Stephen Allen wrote:


+1 Not installed. :(


A manual install, as suggested by Arthur, works.
For i386, download;
http://fpdownload.macromedia.com/get/flashplayer/pdc/11.2.202.350/install_flash_player_11_linux.i386.tar.gz
I renamed /usr/lib/flashplugin-nonfree/libflashplayer.so to 
libflashplayer.so.bak and copied the libflashplayer.so from the tar to 
/usr/lib/flashplugin-nonfree/

A bit blunt, but it will have to do for now.


Regards,
Rob



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/lie37l$q8r$1...@ger.gmane.org



Re: Cropping a large collection of .PNG screenshots

2014-04-13 Thread Steve Litt
On Sun, 13 Apr 2014 13:21:19 +0300
Andrei POPESCU andreimpope...@gmail.com wrote:

 On Sb, 12 apr 14, 12:26:48, Steve Litt wrote:
  On Thu, 10 Apr 2014 00:43:45 +0300
  Andrei POPESCU andreimpope...@gmail.com wrote:
  
   On Mi, 09 apr 14, 08:59:51, Steve Litt wrote:

Or, you can just redirect ls into a file, use Vim to convert and
rename each file individually.
   
   Could you please elaborate on this?
  
  ls -1 *.png  doit.sh
  chmod a+x doit.sh
  gvim doit.sh
  :%s/^/doconvert  /
  ggi
  function doconvert(){
   mv $1 $1.bak
   convert -crop whatever $1.bak $1
  }esc
  :wq
  ./doit.sh
 
 (g)vim seems overkill to me.

Quick, relatively safe, and mistake-resistant, and without the immense
downside risk of various one-liners.

SteveT

Steve Litt*  http://www.troubleshooters.com/
Troubleshooting Training  *  Human Performance


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140413104707.5c98d4f2@mydesk



unsuscribe

2014-04-13 Thread Julio González

El 25/01/14 14:41, debian-user-digest-requ...@lists.debian.org escribió:


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/534aa2e6.2050...@gmail.com



Re: Adobe flash security

2014-04-13 Thread Артур Истомин
On Sun, Apr 13, 2014 at 11:32:48AM +, Артур Истомин wrote:
 On Sun, Apr 13, 2014 at 01:05:53PM +0200, Rob van der Putten wrote:
  Hi there
  
  
  Rob van der Putten wrote:
  
  Somehow this doesn't update the software.
  
  Is just noticed that there is a bug reposrt;
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744263
 
 I am on testing and it work for me. And yes, I remember I had the same
 problems on stable with update-flashplugin-nonfree.
 
 Anyway you can download it manualy, unpack and put it to
 /usr/lib/flashplugin-nonfree/libflashplayer.so

Oops, guys. I am liar, I am sorry. I just only re-check and really
version flash player does not upgraded for me too.

So, let's upgrade this stupid software manualy together =)

links:
http://fpdownload.macromedia.com/get/flashplayer/pdc/11.2.202.350/install_flash_player_11_linux.x86_64.tar.gz
- for amd64
http://fpdownload.macromedia.com/get/flashplayer/pdc/11.2.202.350/install_flash_player_11_linux.i386.tar.gz
- for i386

As root:
# update-flashplugin-nonfree --uninstall
# tar xvf install_flash_player_11_linux.$(uname -m).tar.gz libflashplayer.so
# mv libflashplayer.so /usr/lib/flashplugin-nonfree/
# update-flashplugin-nonfree --status
Flash Player version installed on this system  : 11.2.202.350
Flash Player version available on upstream site: 11.2.202.350
update-alternatives: error: no alternatives for flash-mozilla.so

//not tested// Also it is possible (e.g you don't have root permission) to put 
it 
in ~/.mozilla/plugins/. If you don't have the plugins directory there yet, 
just go ahead and make it.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140413145801.GD13502@localhost



Re: Cropping a large collection of .PNG screenshots

2014-04-13 Thread Jonathan Dowland


 On 13 Apr 2014, at 15:47, Steve Litt sl...@troubleshooters.com wrote:
 
 Quick, relatively safe, and mistake-resistant, and without the immense
 downside risk of various one-liners.

Another advantage, and a short coming of developing shell scripts I'd love to 
see addressed one day: you can iteratively develop, test, undo changes etc 
without necessarily rerunning expensive ops like big greps, sorts, etc or 
destructive operations on data. 

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/74c4d57b-6fab-41ad-b7ca-ed8a2190b...@debian.org



Re: S-Video on ThinkPad T42 with Debian Jessie - can't get above 800x600

2014-04-13 Thread Joe
On Sun, 13 Apr 2014 20:57:46 +1000
Chris Angelico ros...@gmail.com wrote:

 On Sun, Apr 13, 2014 at 1:39 AM, Chris Angelico ros...@gmail.com
 wrote:
  On Fri, Apr 11, 2014 at 12:50 AM, Chris Angelico ros...@gmail.com
  wrote:
  I've just converted a laptop from Windows XP to Debian Jessie, with
  the expectation that I'd be able to do everything at least as well
  as before. That's been mostly true, but I'm stuck on a problem
  with the S-Video output: whatever I do, the TV shows only 800x600.
 
  In the interests of experimentation, I live-booted AntiX on that
  same hardware. The result is exactly the same; xrandr says the
  S-video output is in its only mode of 800x600 60Hz, and telling it
  to go 1024x768 just results in the top left 800x600 being visible.
 
 Further experimentation has revealed a rather interesting result. It
 seems that Windows was claiming that it was driving the S-video at
 1024x768, but was actually stretching it down to 800x600. Short of
 reinstalling Windows (which I will not do!), I have no way to prove
 this, but anecdotal evidence is that text is a bit more readable now.
 So it's looking like 800x600 is all we really get anyway. Everything's
 working other than that, so I'm basically going to consider the matter
 closed, unless anyone has fancy ideas to try.
 

I was waiting for someone more knowledgeable to answer, as I've never
used S-Video with computers, but downconversion does seem likely.

I did wonder what was going on, because as far as I knew S-Video is
defined only for PAL and NTSC, 576i/50 and 480i/60 in modern
terminology. The point of it is that analogue luminance and chrominance
are carried on separate channels, thus avoiding some of the nastiness
inherent in encoding colour into a luminance signal. It really is a TV
signal, and an analogue standard definition one at that.

It would seem that the Linux driver doesn't control the video card
downconversion process properly, but as you say, a downconversion from
1024x768 isn't going to give you better results than from 800x600.

Mr Google says that JVC first used S-Video in 1987, but it would have
been around 1981 that I modified a Hitachi SK-81 camera to provide
separate Y and C outputs to feed a portable U-Matic, modified by
Roderick Snell who was then working at Brighton Polytechnic.

-- 
Joe


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140413162729.34ff9...@jretrading.com



Re: Skype - no microphone input sound...

2014-04-13 Thread Rodney D. Myers
Yes. Grab pavucontrol, and make sure it's not disabled.

On Sun, 13 Apr 2014 09:26:36 +0900
Man_Without_Clue love.cha...@gmail.com wrote:

 Is there anyone who is using Skype with no problem at all on Debian 
 Wheezy 64 bit?
 
 
 
 On 04/12/2014 12:13 AM, Man_Without_Clue wrote:
  Hi all,
 
  I don't know what really is going on and where to start this off.
 
  For some reason Skype doesn't pick up microphone audio at all.
 
  I set pulse audio and with other applications, microphone is
  working fine...
 
  On Debian wheezy 64 bit
 
  No clue, absolutely no clue...
 
 
 


-- 
Rodney D. Myers rod_dmy...@fastmail.fm

They that can give up essential liberty to obtain a
little temporary safety deserve neither liberty nor safety.
        Ben Franklin - 1759


signature.asc
Description: PGP signature


Re: S-Video on ThinkPad T42 with Debian Jessie - can't get above 800x600

2014-04-13 Thread Chris Angelico
On Mon, Apr 14, 2014 at 1:27 AM, Joe j...@jretrading.com wrote:
 I did wonder what was going on, because as far as I knew S-Video is
 defined only for PAL and NTSC, 576i/50 and 480i/60 in modern
 terminology. The point of it is that analogue luminance and chrominance
 are carried on separate channels, thus avoiding some of the nastiness
 inherent in encoding colour into a luminance signal. It really is a TV
 signal, and an analogue standard definition one at that.

Interesting. My brother has a desktop video card (an Nvidia one, but I
didn't ask what exact card it is) with S-Video output, and he plugged
it into the same TV via the same cable as the laptop had been using.
According to xrandr, resolutions went up to (I think) 1024x768, but he
saw some oddities, which could have been caused by a stretching down.
I never thought to check the definition of S-Video, as I thought
(naively) that Windows was being honest when it told me it was running
it at 1024x768.

Thanks for the response. The silence was a little worrying - I was
afraid nobody here had ever used S-Video with old hardware, and that
I'd be completely on my own.

ChrisA


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/captjjmpq_mq9fokbghxsopuuoa3h1zxt7sbjuk5_w59qbb6...@mail.gmail.com



Re: unsuscribe

2014-04-13 Thread Robin
On 13 April 2014 15:44, Julio González juliolok...@gmail.com wrote:
 El 25/01/14 14:41, debian-user-digest-requ...@lists.debian.org escribió:


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject
 of unsubscribe. Trouble? Contact listmas...@lists.debian.org
 Archive: https://lists.debian.org/534aa2e6.2050...@gmail.com


mail needs to go to debian-user-requ...@lists.debian.org with subject
unsubscribe
^
 --
rob


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAOZWb-pw5wm1Y=5twyuwrr66aRRF7hDeUdvhw=xwkik-tcs...@mail.gmail.com



Re: My fellow (Debian) Linux users ...

2014-04-13 Thread Ralf Mardorf


On Sun, 2014-04-13 at 09:33 +0900, Joel Rees wrote:
 In what sense do you mean hacked? 
 Cracked, as in passwords and other sensitive information

Exactly in this way.

 The openssl issues have been baking for how many years?

Too long for Linux community members to be surprised by the news of
today ;). While there are no news on television and radio in Germany not
mentioning apocalyptic openssl issues, I haven't seen one serious post
about it on any open source mailing list.

JFTR

 Forwarded Message 
From: freebsd-questions-requ...@freebsd.org
To: ralf
Date: Sun, 13 Apr 2014 14:39:45 +
 Your membership in the mailing list freebsd-questions has been
 disabled due to excessive bounces [...]
 
 To re-enable your membership, you can simply respond to this message
 (leaving the Subject: line intact), or visit the confirmation page at [...]

IMO this is a better solution, simply visiting a confirmation page
instead of being unsubscribed, however, I only own an Alice account and
3 Rocketmail accounts, but all accounts do cause issues now, currently
not for Debian lists only :(.

Regards,
Ralf

PS: Cc'ing is wanted.



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/1397407039.609.61.camel@archlinux



Re: My fellow (Debian) Linux users ...

2014-04-13 Thread Ralf Mardorf
PS:

On Sun, 2014-04-13 at 18:37 +0200, Ralf Mardorf wrote:
 I only own an Alice account and 3 Rocketmail accounts

Oops, it's 1 Alice, 2 Rocketmail and 1 Yahoo account, but Rocketmail is
Yahoo. First I used Alice (My ISP) only. When I run into issues using
Alice only, I add the Rocketmail/Yahoo accounts. I dislike to add new
accounts using other companies, just to experience that I have to switch
to additional companies next month.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/1397408382.609.74.camel@archlinux



Re: AMD Graphics and Gnome on testing (Jessie)

2014-04-13 Thread Bruno Schneider
On Sat, Apr 12, 2014 at 6:07 PM, Gary Dale wrote:
 Welcome to the world of proprietary drivers. Every system update can break
 the driver. You can either use the open source driver or re-install the
 proprietary driver (if it works with the new kernel  xorg). I'd stick with
 the open source driver as long as you are running Debian/testing.

The open source driver is not an option because I need hardware
acceleration. However, it must be some configuration on  my system,
otherwise there would be tons of people complaining.

Reinstalling fglrx 14.3 or 14.2 (which was working before) did not
solve anything.

-- 
Bruno Schneider
http://www.dcc.ufla.br/~bruno/


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAP1wdQttdsLm33nyAymxgBfRsjx-OJN=s5f5Y=kxtmfkhrc...@mail.gmail.com



Q: LDAP - perl script using Net::LDAP and start_tls gives an error

2014-04-13 Thread Snow Leopard

Hi,

I am trying to write perl script with Net::LDAP module, start_tls 
command and stumbled on a problem.


I would appreciate if somebody could point me to the source of the 
problem.


If there is better place to get an assistance in resolution of the 
problem please indicate in your reply.


Thank you in advance,

Andrew


OS wheezy
slapd  2.4.31-1+nmu2
gnutls-bin 3.0.22-3+really2.12.20-8+deb7u1
cacert /etc/ssl/certs/cacert.pem -rw-r--r-- 1 openldap openldap
   /etc/ssl/certs/04a8f1dd.0 - cacert.pem   lrwxrwxrwx 1 
root root

server-key /etc/ssl/private/server-key.pem-rw--- 1 openldap openldap
server-cert/etc/ssl/certs/server-cert.pem -rw-r--r-- 1 openldap openldap

--- Begin of ldap_sec.pl --
#!/usr/bin/perl

use Net::LDAP;
#use Net::LDAP::Util qw(ldap_error_text);;
use Data::Dumper;

my $server = 'install.myclub.com';  #'localhost';
my $base   = 'dc=myclub,dc=com';
my $scope  = 'sub';
my $filter = 'objectClass=*';

my $ldap = Net::LDAP-new( $server ) or die $@;

my $mesg = $ldap-bind( version = 3 ) || die Could not bind...;

$mesg = $ldap-start_tls(
verify = 'none',   # none, optional, require
clientcert = 'certs/client-cert.pem',
clientkey  = 'certs/client-key.pem',
keydecrypt = sub { 'secret'; },
capath = '/etc/ssl/certs/'
);

$mesg-{resultCode}  die $mesg-{errorMessage};
#print Dumper($mesg); exit 0;

$mesg = $ldap-search(
base   = $base,
#scope  = $sub,
filter = $filter
);


#print Dumper($mesg);

if ($mesg-{resultCode}) {
die An error occured binding to the LDAP server: 
  . $mesg-{errorMessage} . \n;
}

foreach my $entry ( $mesg-entries ) {
$entry-dump;
}

$mesg = $ldap-unbind;
--- End of ldap_sec.pl -


If the script run as it embedded above then it produces correct output


root@install:~/prog# ./ldap_sec.pl

dn:dc=myclub,dc=com

objectClass: top
 dcObject
 organization
  o: myclub.com
 dc: myclub

dn:cn=admin,dc=myclub,dc=com

objectClass: simpleSecurityObject
 organizationalRole
 cn: admin
description: LDAP administrator
root@install:~/prog#


If I made a change in start_tls command for option verify = none to 
one of 'optional' or 'required' then I get next error message



root@install:~/prog# ./ldap_sec.pl
SSL connect attempt failed with unknown error error:14090086:SSL 
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed at 
./ldap_sec.pl line 25, DATA line 751.

root@install:~/prog#


Otherwise LDAP server allows to bind and retrieve information from 
command line



root@install:~/prog# ldapsearch -ZZ -H ldap:/// -W  -D 
'cn=admin,dc=myclub,dc=com'

Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base dc=myclub,dc=com (default) with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# myclub.com
dn: dc=myclub,dc=com
objectClass: top
objectClass: dcObject
objectClass: organization
o: myclub.com
dc: myclub

# admin, myclub.com
dn: cn=admin,dc=myclub,dc=com
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
userPassword:: {encrypted_password}### password removed

# search result
search: 3
result: 0 Success

# numResponses: 3
# numEntries: 2
root@install:~/prog#


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/534acd33.7000...@gmail.com



Re: the importance of defaults ( was: Debian default desktop environment )

2014-04-13 Thread Paul E Condon
On 20140413_1651+1200, Chris Bannister wrote:
 On Sat, Apr 12, 2014 at 12:17:47PM +0200, alberto fuentes wrote:
  tl;dr 
 
 http://knowyourmeme.com/memes/tldr
 
  My point is that gnome3 is even more disruptive than unity. Do we want
  to attract users or scare them away?
 
 Neither. I suggest that the lack of one option doesn't automatically
 imply the other.
 
 OTOH, the features which attract some users could be the very features
 which scare others away. 
 
 Consider NetBSD vs PC-BSD
 https://www.netbsd.org/./about/
 http://www.pcbsd.org/en/about/
 
 I've always considered Debian to be closer to the NetBSD goals and
 objectives and the derivatives closer to the PC-BSD goals and
 objectives.
 
 I believe this distinction is important and is currently the source of
 contention within the Debian project.
 
 Thoughts?
 

Defaults are important, but so are people.  

My discovery of Debian came in the days of 'Y2K'. I think my first
install of Debian was Potato. Coming from distributions of RedHat
purchased in a red box at a retail store, it was a revelation. What
impressed me about Debian then was that the people giving answers on
debian-user seemed to be real, knowledgeable 'SysAdmins', but without
the anger, people who were clearly able to help, and clearly hoping
that the questioner would succeeded, not just go away quickly. I had
already been exposed to big, 'main frame' computers in my work in
Physics research, and had recently retired. I had some thought of
learning the internals of how computers worked as a retirement
hobby. Compared to Red Hat, back then, there was much less frustration
in getting useful help, and, for me more importantly, the help came
with some education. I remember reading the File Hierarchy Standard
(FHS). It must have been suggested to me in the answer to one of my
questions. Otherwise, I would never have found it.

I began to develop an idea of the organization that was developing
inside the Debian organization. To me it seemed that the people had a
shared view of how Debian might take over the world, and they realized
that they needed more people to join their ranks. Yes, defaults are
important, but, in this context, namely a reply to a request for
opinion about the value of defaults, I think 'default' is really
'context'.  That is to say the default for a decision or an action is
determined by the context.

Now the context is very different from what it was in the time of
Potato.  But for Debian, there is still the organizational imperative
of recruiting and training the next generation. There is so much more
work to be done. The organization has to be so much larger. The people
'at the top' have to be in touch with what is needed in so many new
issues that never troubled Debian way back when... 

When I read OP's post, I took it to be a comment on the contending
'desk tops', and that people were worrying that somebody else's desk
top would win top billing (i.e. default) position. If desk-tops are
in an alphabetically ordered list, my preference will surely lose,
but so be it. The tradition of Debian is that so long as a qualified
maintainer can be found for a package, that package will not be 
dropped, just because it not appropriate for some view of the modern
computer market context. But maybe I shouldn't be so complacient. 

Maybe I should be afraid, very afraid.
Oh well,
-- 
Paul E Condon   
pecon...@mesanetworks.net


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140413180034.ga4...@big.lan.gnu



Re: apt-get doesn't upgrade, but synaptic does

2014-04-13 Thread Patrick Bartek
On Sun, 13 Apr 2014, Brad Rogers wrote:

 On Sat, 12 Apr 2014 20:59:02 -0700
 Patrick Bartek bartek...@yahoo.com wrote:
 
 I rechecked, and the metapackage is removed, but not any of
 libreoffice modules.  Ultimately, I just purged each of the modules
 by name, then autoremove the orphaned dependencies.
 
 There should be an easier way.
 
 Maybe, IDK.

No way I've found, so far.  Things are set up to make only INSTALLATION
easy, not the other way around.

  In any case, if the behaviour of meta-packages were to be
 changed, I'm sure there would be some quite heated discussion about
 the matter.

Maybe, no change is needed since a meta-package is just a list of
files to install. Maybe all that is needed is a more intelligent package
manager.

B


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140413110342.3ad01...@debian7.boseck208.net



Re: apt-get doesn't upgrade, but synaptic does

2014-04-13 Thread Sven Joachim
On 2014-04-13 05:59 +0200, Patrick Bartek wrote:

 On Sat, 12 Apr 2014, Brad Rogers wrote:

 On Fri, 11 Apr 2014 18:28:04 -0700
 Patrick Bartek bartek...@yahoo.com wrote:
 
 Hello Patrick,
 
 uninstall or purge libreoffice from the system. 'apt-get purge
 libreoffice' won't do it.  I've done tests, and as far as I can tell
 little or nothing is removed. 
 
 Not even the meta-package 'libreoffice'?

 I rechecked, and the metapackage is removed, but not any of libreoffice
 modules.

In the past, removing a metapackage caused its dependencies to be
autoremoved as well, and people complained about that apt wanted to
remove half their system as soon as they decided to uninstall a
dependency of the gnome metapackage.  Therefore, apt's behavior wrt
metapackages was changed to _not_ mark their dependencies as
automatically installed. 

 Ultimately, I just purged each of the modules by name, then
 autoremove the orphaned dependencies.

 There should be an easier way.

You could use aptitude to mark the dependencies as auto-installed
(untested):

# aptitude markauto ~Dlibreoffice

Then you can autoremove them as you wish.

Cheers,
   Sven


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/87r451jczl@turtle.gmx.de



Re: AMD Graphics on Debian 7.4

2014-04-13 Thread ray
 Would it be worth just trying installing multiarch?  With one of the 
 apt family.  (I use aptitude).  I agree that it is not obviously 

# apt-get install multiarch
Reading package lists... Done
Building dependency tree   
Reading state information... Done
E: Unable to locate package multiarch

https://wiki.debian.org/Multiarch/Implementation says:
  Using multiarch

  To enable the installation of multiarch binaries, apt and dpkg need   
configuration changes. For example, if you have an amd64 system that you want 
to install i386 libraries onto, do the following:

  multiarch support is present from dpkg 1.16.2 (or 1.16.0 in Ubuntu) and apt 
0.8.13.

  run dpkg --add-architecture i386

  run apt-get update to refresh the package cache with the newly added 
architecture 

This seems to only provide for dpkg multiarch awareness and not the 
implementation.  From the above referenced webpage, it looks like the packages 
(Catalyst) must be built to use this.

Just for record, https://wiki.debian.org/Multiarch/Bootstrapping addresses how 
to assemble multiarch awareness but all the content was produced 3 years ago 
and appears to no longer be needed due to Debain maturation.
https://wiki.debian.org/ATIProprietary#wheezy
I updated to:

deb http://http.debian.net/debian/ wheezy main contrib non-free

Ran:aptitude update

with no errors,
and:
aptitude -r install linux-headers-$(uname -r|sed 's,[^-]*-[^-]*-,,') 
fglrx-driver

which ran without error except for the initial emission:
No candidate version found for fglrx-driver
No candidate version found for fglrx-driver
So I tried:
# apt-get install fglrx-modules-dkms
Reading package lists... Done
Building dependency tree  
Reading state information... Done
E: Unable to locate package fglrx-modules-dkms


Similarly,
# apt-get install fglrx-driver
Reading package lists... Done
Building dependency tree   
Reading state information... Done
Package fglrx-driver is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

E: Package 'fglrx-driver' has no installation candidate

I did see a reference to i386 files on http://wiki.cchtml.com/index.php/Debian:
# sudo apt-get remove --purge xserver-xorg-video-radeon
Reading package lists... Done
Building dependency tree   
Reading state information... Done
The following packages were automatically installed and are no longer required:
  hyphen-en-us libfs6 x11-apps x11-session-utils x11-xfs-utils xinit xorg
Use 'apt-get autoremove' to remove them.
The following packages will be REMOVED:
  task-desktop* task-gnome-desktop* xserver-xorg-video-all*
  xserver-xorg-video-ati* xserver-xorg-video-radeon*
0 upgraded, 0 newly installed, 5 to remove and 9 not upgraded.
After this operation, 1,998 kB disk space will be freed.
Do you want to continue [Y/n]? y
(Reading database ... 137565 files and directories currently installed.)
Removing task-gnome-desktop ...
Removing task-desktop ...
Removing xserver-xorg-video-all ...
Removing xserver-xorg-video-ati ...
Removing xserver-xorg-video-radeon ...
Purging configuration files for xserver-xorg-video-radeon ...
Processing triggers for man-db ...

And followed this up with:
sudo apt-get install fglrx-driver fglrx-control fglrx-glx fglrx-atieventsd 
fglrx-modules-dkms

which produced:
Reading package lists... Done
Building dependency tree   
Reading state information... Done
Package fglrx-glx is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

Package fglrx-driver is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

E: Package 'fglrx-driver' has no installation candidate
E: Unable to locate package fglrx-control
E: Package 'fglrx-glx' has no installation candidate
E: Unable to locate package fglrx-atieventsd
E: Unable to locate package fglrx-modules-dkms

From the same site, to get ia32 libraries:
sudo apt-get install fglrx-glx-ia32
Reading package lists... Done
Building dependency tree   
Reading state information... Done
Package fglrx-glx-ia32 is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

E: Package 'fglrx-glx-ia32' has no installation candidate

It looks like there is a challenge with doing something with fglrx.

Am I missing something here?

I found an alternative at:  
https://wiki.debian.org/Installing_ATI_fglrx_legacy_with_latest_kernel

This is a year old but it addressing building the driver package.  Is there any 
problem with this approach?

Thanks for all the input,
Ray







Ray


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Re: AMD Graphics on Debian 7.4

2014-04-13 Thread Ric Moore

On 04/13/2014 02:27 PM, ray wrote:
Am I missing something here? I found an alternative at: 
https://wiki.debian.org/Installing_ATI_fglrx_legacy_with_latest_kernel 
This is a year old but it addressing building the driver package. Is 
there any problem with this approach? Thanks for all the input, Ray Ray 
Do you have Synaptic installed?? Use that to hunt down and install your 
packages. If the wheezy version fails you then try the run package ...as 
a last resort. Or, upgrade to jessie to legally get the latest and 
greatest. That is what I did to get the newer versions of my nVidia 
drivers and VLC. As a plus, you stay within the deb package scheme of 
things. Just make darn sure you do the upgrade in text terminal mode, 
with X stopped totally. Ric


--

My father, Victor Moore (Vic) used to say:

There are two Great Sins in the world...

..the Sin of Ignorance, and the Sin of Stupidity.

Only the former may be overcome. R.I.P. Dad.

https://linuxcounter.net/cert/44256.png

X-oldie-warning: Toothless but still vicious



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/534ae587.4050...@gmail.com



Re: Skype - no microphone input sound...

2014-04-13 Thread Ric Moore

On 04/12/2014 08:26 PM, Man_Without_Clue wrote:
Is there anyone who is using Skype with no problem at all on Debian 
Wheezy 64 bit?




On 04/12/2014 12:13 AM, Man_Without_Clue wrote:

Hi all,

I don't know what really is going on and where to start this off.

For some reason Skype doesn't pick up microphone audio at all.

I set pulse audio and with other applications, microphone is working 
fine...


On Debian wheezy 64 bit

No clue, absolutely no clue...

As a prophylactic measure, from a command line type: padsp skype
which will firmly/forcefully put skype to pulse input/output. See what 
happens. Ric




--

My father, Victor Moore (Vic) used to say:

There are two Great Sins in the world...

..the Sin of Ignorance, and the Sin of Stupidity.

Only the former may be overcome. R.I.P. Dad.

https://linuxcounter.net/cert/44256.png

X-oldie-warning: Toothless but still vicious



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/534ae6ff.2020...@gmail.com



Re: Q: LDAP - perl script using Net::LDAP and start_tls gives an error

2014-04-13 Thread Atle Solbakken


If I made a change in start_tls command for option verify = none 
to one of 'optional' or 'required' then I get next error message



root@install:~/prog# ./ldap_sec.pl
SSL connect attempt failed with unknown error error:14090086:SSL 
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed at 
./ldap_sec.pl line 25, DATA line 751.

root@install:~/prog#




It seems to me that the verify-option tells Net::LDAP whether it 
should verify that the certificate the server you are connecting to is 
using has been signed by a known certificate authority (listed in 
/etc/ssl/certs).


start_tls will fail if the server does not provide any certificate, or 
if the certificate is not signed by a CA (ref 
http://search.cpan.org/~marschap/perl-ldap/lib/Net/LDAP.pod ).


Atle.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/534ae8d2.1060...@goliathdns.no



Q: Squeeze - debmirror 1:2.4.5 / Bug #673444 : not fetch Translation files

2014-04-13 Thread Snow Leopard

Hi,

due limited traffic from my ISP (200GB/month) I've decided to make own 
mirror for Debian wheeze.


A quick search brought my attention to debmirror utility. After a 
couple days of download I had local mirror for wheeze and 
wheeze-updates.


Shortly after the mirror was ready I configured Apache to serve files, 
DHCP server and preceed.cfg to make automatic installation over 
network utilizing PXE boot.


After a little struggle to make everything right to be able install OS 
and packages I found that installation process stops to inform me that 
i18n translation files are missing in wheeze-updates. My inspection of 
wheeze-updates/main directory confirmed that directory i18n is missing.


My further investigation brought my attentions to bug #673444 
(Maintainer: Joey Hess jo...@debian.org) in regard missing translation 
files.


https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=673444

So, it looks like Squeezy still has debmirror version which is affected 
by this bug.


dpkg -l | grep debmirror
ii  debmirror 1:2.4.5

For the moment I've added a block of code to my script to sync mirror 
which resolves the issue



-- Begin my_mirror.sh 
#!/bin/bash

.
.

#
# Translation files fix
#
# Description:
#   Older version of debmirror does not copy a
#   directory if file Index is missing. In this
#   particular case client will not find directory
#   Translation-en as dists/wheeze-updates/main/i18n
#   directory misses Index file.
#
# Bugs: #673444
#
# Note:
#   Newer version of debmirror relies on Packages.gz
#   file instead of Index and do not have this problem.
#

URL=ftp://ftp.debian.org/debian/dists/wheezy-updates/main/i18n/

DIR=here
DIR_TMP=here/debian/dists/wheezy-updates/main/i18n
MIRROR=/home/debian/mirror/dists/wheezy-updates/main/

[ -d ${DIR} ]  rm -f ${DIR}

wget -r -nH -P here ${URL}

cp -r ${DIR_TMP} ${MIRROR}

rm -r here

-- End my_mirror.sh --


What is the best way to address this issue? Contact the maintainer? Use 
backports?


Sincerely,

Andrew


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/534af323.2020...@gmail.com



Re: Q: LDAP - perl script using Net::LDAP and start_tls gives an error

2014-04-13 Thread Snow Leopard

Hi Atle,

in my case I am certificate agency (self-signed certificate) and I issue 
private key and certificate (cacert.pem) as for root CA as for 
LDAP server (server-key.pem and server-cert.pem) and LDAP perl script 
client (client-key.pem and client-cert.pem).


The script and client run on the same computer (for the moment) and LDAP 
server private key (private/server-key.pem) and certificate 
(certs/server-cert.pem) located in /etc/ssl/ directory. CA root 
certificate (certs/cacert.pem) is located in /etc/ssl/certs directory -- 
and as recommended I created certificate named using hash value


URL: https://metacpan.org/pod/Net::LDAP#start_tls

|ln -s cacert.pem `openssl x509 -hash -noout  cacert.pem`.0

Client (perl script) has reference to client's key/cert in the script 
which is stored in sub-directory 'certs' where located the script 
(certs/client-key.pem and certs/client-cert.pem).


At the moment I am not fully grasp why verification of server 
certificate fails.


I am welcome any ideas how to fix it.

NOTE: It is my first attempt to program with Net::LDAP and start_tls -- 
I am in process of learning how it works and how to program to use LDAP 
over TLS in perl.


Thanks for any input,

Andrew
|

On 4/13/2014 12:43 PM, Atle Solbakken wrote:


If I made a change in start_tls command for option verify = none 
to one of 'optional' or 'required' then I get next error message



root@install:~/prog# ./ldap_sec.pl
SSL connect attempt failed with unknown error error:14090086:SSL 
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed at 
./ldap_sec.pl line 25, DATA line 751.

root@install:~/prog#




It seems to me that the verify-option tells Net::LDAP whether it 
should verify that the certificate the server you are connecting to is 
using has been signed by a known certificate authority (listed in 
/etc/ssl/certs).


start_tls will fail if the server does not provide any certificate, or 
if the certificate is not signed by a CA (ref 
http://search.cpan.org/~marschap/perl-ldap/lib/Net/LDAP.pod ).


Atle.






Re: Q: LDAP - perl script using Net::LDAP and start_tls gives an error

2014-04-13 Thread Ric Moore

On 04/13/2014 04:45 PM, Snow Leopard wrote:

Hi Atle,

in my case I am certificate agency (self-signed certificate) and I 
issue private key and certificate (cacert.pem) as for root CA as 
for LDAP server (server-key.pem and server-cert.pem) and LDAP perl 
script client (client-key.pem and client-cert.pem).


The script and client run on the same computer (for the moment) and 
LDAP server private key (private/server-key.pem) and certificate 
(certs/server-cert.pem) located in /etc/ssl/ directory. CA root 
certificate (certs/cacert.pem) is located in /etc/ssl/certs directory 
-- and as recommended I created certificate named using hash value


URL: https://metacpan.org/pod/Net::LDAP#start_tls

|ln -s cacert.pem `openssl x509 -hash -noout  cacert.pem`.0

Client (perl script) has reference to client's key/cert in the script 
which is stored in sub-directory 'certs' where located the script 
(certs/client-key.pem and certs/client-cert.pem).


At the moment I am not fully grasp why verification of server 
certificate fails.


I am welcome any ideas how to fix it.

NOTE: It is my first attempt to program with Net::LDAP and start_tls 
-- I am in process of learning how it works and how to program to use 
LDAP over TLS in perl.


Thanks for any input,

Andrew
|

On 4/13/2014 12:43 PM, Atle Solbakken wrote:


If I made a change in start_tls command for option verify = 
none to one of 'optional' or 'required' then I get next error message



root@install:~/prog# ./ldap_sec.pl
SSL connect attempt failed with unknown error error:14090086:SSL 
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed at 
./ldap_sec.pl line 25, DATA line 751.

root@install:~/prog#




It seems to me that the verify-option tells Net::LDAP whether it 
should verify that the certificate the server you are connecting to 
is using has been signed by a known certificate authority (listed in 
/etc/ssl/certs).


start_tls will fail if the server does not provide any certificate, 
or if the certificate is not signed by a CA (ref 
http://search.cpan.org/~marschap/perl-ldap/lib/Net/LDAP.pod ).



I think it would be better if there was an easier way. Especailly for 
older non-elastic brains. :) Ric




--

My father, Victor Moore (Vic) used to say:

There are two Great Sins in the world...

..the Sin of Ignorance, and the Sin of Stupidity.

Only the former may be overcome. R.I.P. Dad.

https://linuxcounter.net/cert/44256.png

X-oldie-warning: Toothless but still vicious



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/534afa9b.1000...@gmail.com



Re: Q: Squeeze - debmirror 1:2.4.5 / Bug #673444 : not fetch Translation files

2014-04-13 Thread Brian
On Sun 13 Apr 2014 at 13:27:15 -0700, Snow Leopard wrote:

 So, it looks like Squeezy still has debmirror version which is
 affected by this bug.
 
 dpkg -l | grep debmirror
 ii  debmirror 1:2.4.5
 
 For the moment I've added a block of code to my script to sync
 mirror which resolves the issue

1:2.14 is in squeeze backports:

  https://packages.debian.org/squeeze/debmirror

It is also possible a downloaded unstable version may install on squeeze
with 'dpkg -i package' and 'apt-get -f install'.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/13042014215848.75ff900a4...@desktop.copernicus.demon.co.uk



Re: Q: Squeeze - debmirror 1:2.4.5 / Bug #673444 : not fetch Translation files

2014-04-13 Thread Snow Leopard

Brain,

well it seems that I've missed something somewhere, next command shows 
that there is verify error


Verify return code: 21 (unable to verify the first certificate)

I wonder what is the medicine to fix it?

Andrew


root@install:~/prog# openssl s_client -showcerts -connect localhost:636
CONNECTED(0003)
depth=0 C = CA, O = Andromeda Inc., OU = IT Department, L = Burnaby, ST 
= BC, CN = install.myclub.com, UID = 8482, emailAddress = ad...@myclub.com

verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 C = CA, O = Andromeda Inc., OU = IT Department, L = Burnaby, ST 
= BC, CN = install.myclub.com, UID = 8482, emailAddress = ad...@myclub.com

verify error:num=27:certificate not trusted
verify return:1
depth=0 C = CA, O = Andromeda Inc., OU = IT Department, L = Burnaby, ST 
= BC, CN = install.myclub.com, UID = 8482, emailAddress = ad...@myclub.com

verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
 0 s:/C=CA/O=Andromeda Inc./OU=IT 
Department/L=Burnaby/ST=BC/CN=install.myclub.com/UID=8482/emailAddress=ad...@myclub.com
   i:/C=CA/O=Andromeda Inc./OU=IT Department/ST=BC/CN=Andrey 
Vlassov/UID=wizard

-BEGIN CERTIFICATE-
..
-END CERTIFICATE-
 1 s:/C=CA/O=Andromeda Inc./OU=IT Department/ST=BC/CN=Andrey 
Vlassov/UID=wizard
   i:/C=CA/O=Andromeda Inc./OU=IT Department/ST=BC/CN=Andrey 
Vlassov/UID=wizard

-BEGIN CERTIFICATE-
-END CERTIFICATE-
---
Server certificate
subject=/C=CA/O=Andromeda Inc./OU=IT 
Department/L=Burnaby/ST=BC/CN=install.myclub.com/UID=8482/emailAddress=ad...@myclub.com
issuer=/C=CA/O=Andromeda Inc./OU=IT Department/ST=BC/CN=Andrey 
Vlassov/UID=wizard

---
No client certificate CA names sent
---
SSL handshake has read 2602 bytes and written 726 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-SHA256
Server public key is 2432 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol  : TLSv1.2
Cipher: AES256-SHA256
Session-ID: 
020FE950E0F7F0A2925CFB34D57B0D6CF7557B3145476C6309A130478BBE0974

Session-ID-ctx:
Master-Key: 
B68A064FBA1795AEB147AEBE0CCFD8E7C6EEAB8D583819201CACED9CA71DC58B3CD4C258CE0884F9AE217F88B18D10C1

Key-Arg   : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1397422787
Timeout   : 300 (sec)
Verify return code: 21 (unable to verify the first certificate)
---



On 4/13/2014 2:03 PM, Brian wrote:

On Sun 13 Apr 2014 at 13:27:15 -0700, Snow Leopard wrote:


So, it looks like Squeezy still has debmirror version which is
affected by this bug.

dpkg -l | grep debmirror
ii  debmirror 1:2.4.5

For the moment I've added a block of code to my script to sync
mirror which resolves the issue

1:2.14 is in squeeze backports:

   https://packages.debian.org/squeeze/debmirror

It is also possible a downloaded unstable version may install on squeeze
with 'dpkg -i package' and 'apt-get -f install'.





--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/534afe12.5080...@gmail.com



Re: Q: Squeeze - debmirror 1:2.4.5 / Bug #673444 : not fetch Translation files

2014-04-13 Thread Brian
On Sun 13 Apr 2014 at 14:13:54 -0700, Snow Leopard wrote:

 well it seems that I've missed something somewhere, next command
 shows that there is verify error

I was suggesting something like

  wget 
http://http.debian.net/debian-backports/pool/main/d/debmirror/debmirror_2.14~bpo60+1_all.deb

followed by

  dpkg -i debmirror_2.14~bpo60+1_all.deb

to see whether this fixed your problem.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/13042014224307.7fa667e41...@desktop.copernicus.demon.co.uk



Re: My fellow (Debian) Linux users ...

2014-04-13 Thread Richard Hector
On 13/04/14 23:43, Curt wrote:
 On 2014-04-13, Eduardo M KALINOWSKI edua...@kalinowski.com.br wrote:
 On 20h20 12 de Abril de 2014, Steve Litt wrote:
 I'm changing every password: That's about 100 of them.

 That's a good thing to do, but only after the server has patched
 openssl and changed its certificate. Otherwise someone could have
 captured the private key and other information that could be used to
 eavesdrop your newly changed password.
 
 This online tester:
 
 http://possible.lv/tools/hb/
 
 provides this sort of output in the critical case:

I have 2 significant issues with all these online testers.

Firstly, they generally actively exploit the bug, which is probably
illegal in most jurisdictions - at least if you're using it on a server
that isn't yours.

Secondly - do you know who runs it? I don't. If I wanted to harvest a
bunch of potentially vulnerable sites, setting up a test site is how I'd
do it ...

Richard



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/534b2635.30...@walnut.gen.nz



Re: apt-get doesn't upgrade, but synaptic does

2014-04-13 Thread Patrick Bartek
On Sun, 13 Apr 2014, Sven Joachim wrote:

 On 2014-04-13 05:59 +0200, Patrick Bartek wrote:
 
  On Sat, 12 Apr 2014, Brad Rogers wrote:
 
  On Fri, 11 Apr 2014 18:28:04 -0700
  Patrick Bartek bartek...@yahoo.com wrote:
  
 [snip]
  
  Not even the meta-package 'libreoffice'?
 
  I rechecked, and the metapackage is removed, but not any of
  libreoffice modules.
 
 In the past, removing a metapackage caused its dependencies to be
 autoremoved as well, and people complained about that apt wanted to
 remove half their system as soon as they decided to uninstall a
 dependency of the gnome metapackage.  Therefore, apt's behavior wrt
 metapackages was changed to _not_ mark their dependencies as
 automatically installed. 

Remember that quirk well.  What a nightmare it caused if you were trying
to slim down a system of unneeded or unwanted files when everything
is a dependent of everything else.

  Ultimately, I just purged each of the modules by name, then
  autoremove the orphaned dependencies.
 
  There should be an easier way.
 
 You could use aptitude to mark the dependencies as auto-installed
 (untested):
 
 # aptitude markauto ~Dlibreoffice
 
 Then you can autoremove them as you wish.

Not all that knowledgeable of aptitude.  Wary of using an untested
procedure of a utility I'm unfamiliar with.  That's surely asking for
trouble. However, I did come up with a possible method to more easily
uninstall meta-package installed apps.

First, find the one module of the app that is the dependancy for all the
others, but is itself not dependent on them.  Does that make sense?
With libreoffice, it's libreoffice-common.  Purge just that one module,
i.e. apt-get purge libreoffice-common, and that should automatically get
most all the others. Then autoremove to get any orphaned dependencies.
Then do a search for any lingering modules, and purge them if found.

With libreoffice, I did an apt-get purge libreoffice* which found
one: libreoffice-filters-something-or-other.  I then manually deleted
the libreoffice directory in the user's .config directory.  All gone.

I'm hoping this technique will work with other such apps until
something easier is invented.

Thanks for the info and the suggestion.

B


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140413172407.1582a...@debian7.boseck208.net



Re: AMD Graphics on Debian 7.4

2014-04-13 Thread ray
 Do you have Synaptic installed?? Use that to hunt down and install your 
 packages. If the wheezy version fails you then try the run package ...as 
 a last resort. Or, upgrade to jessie to legally get the latest and 
 greatest. That is what I did to get the newer versions of my nVidia 
 drivers and VLC. As a plus, you stay within the deb package scheme of 
 things. Just make darn sure you do the upgrade in text terminal mode, 
 with X stopped totally. 

I did not find the fglrx package in Synaptic.  I did find some multiarch 
packages which I installed.  But the initial error of not finding the 
architecture was persistent.

Ray


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/e0a29707-c069-4c60-bb69-c7efe79cb...@googlegroups.com



best way to backup USB stick (2)

2014-04-13 Thread Hugo Vanwoerkom

Hi,

So I got a script that backs up the USB stick to a file and restores a 
(larger) USB stick from that file all using dd.  It is here:


http://paste.debian.net/93598

the relevant parts are the backup:

dd conv=notrunc,noerror bs=4096 if=$usbDrive | gzip  $backupFilename

and the restore:

gzip -dc $backupFilename | dd of=$usbDrive

Makes perfect copy AFAICT, but it does not boot and the original USB 
stick does. Completes w/o errors.


Can any dd expert tell me what I am doing wrong?

Hugo


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/lifgea$oii$1...@ger.gmane.org



Heartbleed (was ... Re: My fellow (Debian) Linux users ...)

2014-04-13 Thread Chris Bannister
On Sun, Apr 13, 2014 at 06:37:19PM +0200, Ralf Mardorf wrote:
 
 
 On Sun, 2014-04-13 at 09:33 +0900, Joel Rees wrote:
  In what sense do you mean hacked? 
  Cracked, as in passwords and other sensitive information
 
  The openssl issues have been baking for how many years?

The bug was introduced two years ago.

 While there are no news on television and radio in Germany ...

Weird. I haven't heard *anything* from the TV or radio either,
considering it is a catastrophe worse than the Y2K bug.  

It seems very likely that people are using compromised apps on their
smartphone and you'd think it would be advisable to warn people ASAP!

Not even an email from the bank! 

Then there is also the very serious issue of embedded devices using
openssl. Tablets, smartphones, routers, ... etc. etc. 

-- 
If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the 
oppressing. --- Malcolm X


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140414030313.GA9681@tal



Re: missing devel pkgs for emacs build

2014-04-13 Thread Harry Putnam
Tom Furie t...@furie.org.uk writes:

 On Mon, Apr 07, 2014 at 09:19:25PM +0100, Tom Furie wrote:

 Ah, I tested with wheezy. I'll load up a jessie vm and test again. In
 theory it shouldn't make any difference, but that's the difference
 between theory and practice :)

 With a fresh install of Jessie plus xorg-dev, libgif-dev, libtiff-dev
 and ncurses-dev (along with anything else they pull in) I can't get the
 build to fail. The build also completes if I use gtk2 or 3.

 If you're still having problems I'd suggest a back to basics approach.
 Can you get emacs to build with 'configure --without-all --without-x'?

I made no further changes than those posted as regards my debian
install, but did do another 'bzr pull' in my sources top level, about
2 hrs ago (Sunday night Apr 13 in USA)

That change allowed my latest effort using the same ./configure line
as posted, followed my 'make', 'make install'.  to conclude successfully.

I didn't investigate all the changes involved in that short time
period but whatever it is... it was enough to make it all work again.

Thank you for your patience and forbearance.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/87sipg37w2@newsguy.com



Re: best way to backup USB stick (2)

2014-04-13 Thread PaulNM
On 04/13/2014 10:16 PM, Hugo Vanwoerkom wrote:
 Hi,
 
 So I got a script that backs up the USB stick to a file and restores a
 (larger) USB stick from that file all using dd.  It is here:
 
 http://paste.debian.net/93598
 

That's small enough that you should have included it in the email, in my
opinion.

 the relevant parts are the backup:
 
 dd conv=notrunc,noerror bs=4096 if=$usbDrive | gzip  $backupFilename
 
 and the restore:
 
 gzip -dc $backupFilename | dd of=$usbDrive
 
 Makes perfect copy AFAICT, but it does not boot and the original USB
 stick does. Completes w/o errors.
 
 Can any dd expert tell me what I am doing wrong?

Actually, the really relevant part is the variable definitions.

Specifically: usbDrive=/dev/sde1

You're not backing up and restoring usb drives, you're backing up and
restoring a partition on usb drives.  The partition table and bootloader
aren't handled by your script.  No bootloader=no booting. :)

I'd suggest getting the whole device (/dev/sde) unless you're planning
to restore to a drive with other partitions you want to preserve.

 
 Hugo
 
 

Another suggestion: Look into ddrescue (package name is gddrescue).
It's more flexible when dealing with drives that have problems.

- PaulNM


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/534b59a0.40...@paulscrap.com



debian install wireless fails on laptop with Ralink RT3290 wireless, what to do?

2014-04-13 Thread Britton Kerin
The installer correctly detects a Ralink RT3290 and seems to think its
going to be
able to work with it, but then it always fails (I think at the DHCP
stage) to actually
manage to connect to the network.

Has anyone else encountered this issue?  Workarounds?

As usually everyone assumes it would work on Ubuntu and as usual I'd rather not
go there.

What I'm hoping to do is install a gnome system from CD image, then follow these
instructions:

  https://wiki.debian.org/rt3290

Is this probably workable?  Is it the best way?  If there was some way to get
wireless working at the point in the installation where the installer
tries to set
it up that seem like it would be best, but maybe it isn't required then if you
have one of the big (non-netinst) CDs?

Thanks,
Britton


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAC4O8c9OgobJZoJj28DBtR+CQaSsHX6KU=XR=koio_4pida...@mail.gmail.com



Re: Gnupg key en OpenSSL problemen

2014-04-13 Thread Kristof Provost


 On 12 Apr 2014, at 11:03, Matijs van Zuijlen mat...@matijs.net wrote:
 
 On 11/04/14 11:20, Winfried Tilanus wrote:
 De beste informatie die ik over heartbleed kon vinden was dit:
 
 http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/
 
 Over de impact:
 - met heartbleed krijgt een aanvaller een *willekeurig* blok van 64K uit
 het geheugen van de server
 - de aanvaller kan niet sturen welk blok 'ie ontvangt
 - de aanvaller kan de aanval onbeperkt herhalen
 
 Met andere woorden: in potentie kan *ALLES* wat in het geheugen van de
 server zit/zat gecompromitteerd zijn. Dat kunnen read/write caches zijn
 van gegevens op de disk, actieve sessies, sleutels van welke soort dan
 ook, ontsleutelde data, wachtwoorden die op dat moment gecheckt worden,
 wat dan ook. Op het internet zijn inmiddels scripts te vinden die
 blokjes geheugen doorzoeken naar specifiek zaken als (sessie)cookies.
 
 Hoe zit dat met geheugen dat in gebruik is door andere processen? Je zou 
 denken
 dat daar een zekere mate van afscherming aanwezig is.
 
Inderdaad, je kan met heartbleed alleen maar geheugen uit het proces met de TLS 
server lezen, niet van andere processen. 

-- 
Kristof


--
To UNSUBSCRIBE, email to debian-user-dutch-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/e73d390e-fe0b-4d9c-888c-016b0f6e5...@sigsegv.be