Re: who/w/finger/last printing ip address

[Reco]

 Hi.

On Wed, Sep 09, 2015 at 11:44:18PM +0100, Michael Grant wrote:
> 
> $ ls -al /usr/bin/w
> lrwxrwxrwx 1 root root 19 Feb 11  2014 /usr/bin/w -> /etc/alternatives/w
> $ ls -al /etc/alternatives/w
> lrwxrwxrwx 1 root root 17 Feb 11  2014 /etc/alternatives/w -> 
> /usr/bin/w.procps
> $ w -V
> w from procps-ng 3.3.10
> $ who --version
> who (GNU coreutils) 8.23
> 
> 
> also "who --lookup" makes no attempt to look up the ip addresses either. 
> 
> So is this now the expected behavior in Debian?

Yup. They build it that way.
Upstream thinks it's the sane default, and Debian tries to stay close to
the upstream.

Reco

Re: upgrading debian 8.1 to 8.2

[Peter Ludikovsky]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello,

Updating between point releases is the same as any other update:
apt-get update
apt-get upgrade

Regards,
/peter

Am 10.09.2015 um 10:17 schrieb Himanshu Shekhar:
> i have debian jessie 8.1 on my laptop and wish to upgrade it to
> 8.2 without messing with the much configuration i have done and
> without losing any of the packages installed. please don't give any
> suggestion or method you are not confident of.
> 
> -- Himanshu Shekhar IIIT-Allahabad IRM2015006
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.22 (MingW32)
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=OzCm
-END PGP SIGNATURE-

aptitude full-upgrade causes lots of errors (debian/testing)

[Hans]

Dear mainainers,

it looks like aptituide full-upgrade cannot be done at the moment (and 
upgrading fro stable to testing, too).

The reason is for a lot of dependency problems as you see below.

Is there anything the user can do or must it be fixed by the repository 
maintainers?

Here is the output:

he following packages are RECOMMENDED but will NOT be installed:
  ktnef libcanberra-gstreamer libcanberra-pulse libreoffice-style-breeze sound-
theme-freedesktop user-manager 
421 packages upgraded, 91 newly installed, 0 to remove and 0 not upgraded.
Need to get 532 MB of archives. After unpacking 539 MB will be used.
The following packages have unmet dependencies:
 libmatroska6v5 : Breaks: libmatroska6 but 1.4.2-2 is installed.
 libbinio1v5 : Conflicts: libbinio1ldbl but 1.4+dfsg1-4 is installed.
 libid3-3.8.3v5 : Conflicts: libid3-3.8.3c2a but 3.8.3-16 is installed.
 libgsmme1v5 : Conflicts: libgsmme1c2a but 1.10+20120414.gita5e5ae9a-0.2 is 
installed.
 libdapserver7v5 : Breaks: libdapserver7 but 3.14.0-2 is installed.
 libtag1v5-vanilla : Breaks: libtag1-vanilla but 1.9.1-2.1 is installed.
 libmagick++-6.q16-5v5 : Conflicts: libmagick++-6.q16-5 but 8:6.8.9.9-5 is 
installed.
 libopencv-ml2.4 : Depends: libopencv-core2.4 (= 2.4.9.1+dfsg-1.1+b1) but 
2.4.9.1+dfsg-1.1+b2 is to be installed.
 libpangomm-1.4-1v5 : Conflicts: libpangomm-1.4-1 but 2.36.0-1 is installed.
 libdap17v5 : Breaks: libdap17 but 3.14.0-2 is installed.
 libatkmm-1.6-1v5 : Breaks: libatkmm-1.6-1 but 2.22.7-2.1 is installed.
 libopencv-video2.4 : Depends: libopencv-imgproc2.4 (= 2.4.9.1+dfsg-1.1+b1) 
but 2.4.9.1+dfsg-1.1+b2 is to be installed.
 liborcus-0.10-0v5 : Conflicts: liborcus-0.10-0 but 0.9.2-1 is installed.
 libqpdf13v5 : Breaks: libqpdf13 but 5.1.3-1 is installed.
 libtag1v5 : Conflicts: libtag1c2a but 1.9.1-2.1 is installed.
 libasprintf0v5 : Breaks: libasprintf0c2 but 0.19.4-1 is installed.
 libucommon7v5 : Conflicts: libucommon7 but 6.3.4-1 is installed.
 libopenexr6v5 : Conflicts: libopenexr6 but 1.6.1-8 is installed.
 libgpgme++2v5 : Breaks: libgpgme++2 but 4:4.14.2-2+b1 is installed.
 libcgal11v5 : Conflicts: libcgal11 but 4.6.1-1 is installed.
 libebml4v5 : Breaks: libebml4 but 1.3.1-3 is installed.
 libgconfmm-2.6-1v5 : Conflicts: libgconfmm-2.6-1c2 but 2.28.0-1.1 is 
installed.
 libopencv-legacy2.4 : Depends: libopencv-highgui2.4 (= 2.4.9.1+dfsg-1.1+b1) 
but 2.4.9.1+dfsg-1.1+b2 is to be installed.
 libopencv-imgproc2.4v5 : Conflicts: libopencv-imgproc2.4 but 
2.4.9.1+dfsg-1.1+b2 is to be installed.
 libpcrecpp0v5 : Conflicts: libpcrecpp0 but 2:8.35-7 is installed.
 libclucene-contribs1v5 : Conflicts: libclucene-contribs1 but 2.3.3.4-4 is 
installed.
 libflac++6v5 : Breaks: libflac++6 but 1.3.1-2 is installed.
 libvamp-hostsdk3v5 : Breaks: libvamp-hostsdk3 but 2.6~repack0-1 is installed.
 libgtkmm-2.4-1v5 : Breaks: libgtkmm-2.4-1c2a but 1:2.24.4-1.1 is installed.
 libqalculate5v5 : Conflicts: libqalculate5 but 0.9.7-9 is installed.
 libcmis-0.5-5v5 : Conflicts: libcmis-0.5-5 but 0.5.0-2 is installed.
 libwxbase3.0-0v5 : Breaks: libwxbase3.0-0 but 3.0.2+dfsg-1 is installed.
 libmusicbrainz3-6v5 : Conflicts: libmusicbrainz3-6 but 3.0.2-2.2 is installed.
 libopencv-features2d2.4 : Depends: libopencv-imgproc2.4 (= 
2.4.9.1+dfsg-1.1+b1) but 2.4.9.1+dfsg-1.1+b2 is to be installed.
 libopencv-objdetect2.4 : Depends: libopencv-highgui2.4 (= 
2.4.9.1+dfsg-1.1+b1) but 2.4.9.1+dfsg-1.1+b2 is to be installed.
 libilmbase6v5 : Conflicts: libilmbase6 but 1.0.1-6.1 is installed.
 libwxgtk3.0-0v5 : Breaks: libwxgtk3.0-0 but 3.0.2+dfsg-1 is installed.
 libafflib0v5 : Conflicts: libafflib0 but 3.7.6-2 is installed.
 libpodofo0.9.0v5 : Conflicts: libpodofo0.9.0 but 0.9.0-1.2+b2 is installed.
 libclucene-core1v5 : Conflicts: libclucene-core1 but 2.3.3.4-4 is installed.
 libgdal1i : Breaks: libgdal1h (< 1.11.2+dfsg-1~exp4) but 1.10.1+dfsg-9+b1 is 
installed.
 libreoffice-common : Breaks: libreoffice-style-crystal (< 1:5.0~) but 
1:4.4.5-2 
is installed.
 libkf5bluezqt5 : Depends: libkf5bluezqt-data (= 5.3.1-1) but 5.13.0-1 is to 
be installed.
 libtsk10v5 : Conflicts: libtsk10 but 4.1.3-8 is installed.
 libopencv-core2.4v5 : Conflicts: libopencv-core2.4 but 2.4.9.1+dfsg-1.1+b2 is 
to be installed.
 libcairomm-1.0-1v5 : Conflicts: libcairomm-1.0-1 but 1.10.0-1.1 is installed.
 libxapian22v5 : Conflicts: libxapian22 but 1.2.21-1 is installed.
 libgeos-c1v5 : Breaks: libgeos-c1 (< 3.4.2-8~) but 3.4.2-7 is installed.
 libgltf-0.0-0v5 : Conflicts: libgltf-0.0-0 but 0.0.2-3 is installed.
 libkolabxml1v5 : Breaks: libkolabxml1 but 1.1.0-3 is installed.
 libsigc++-2.0-0v5 : Conflicts: libsigc++-2.0-0c2a but 2.4.1-1 is installed.
 libdapclient6v5 : Breaks: libdapclient6 but 3.14.0-2 is installed.
 libstreams0v5 : Breaks: libstreams0 but 0.7.8-1.2+b3 is installed.
 libgtkmm-3.0-1v5 : Conflicts: libgtkmm-3.0-1 but 3.16.0-1 is installed.
 libsidplayfp4 : Conflicts: libsidplayfp3 but 1.7.2-1 is installed.
 libkolab0v5 : Breaks: libkolab0 but 0.6.0-1 is 

Re: adobe flash player in iceweasel does not work anymore in jessie

[Liam O'Toole]

On 2015-09-09, Lisi Reisz  wrote:
> On Wednesday 09 September 2015 20:46:42 Paul van der Vlis wrote:
>> When I need a package from deb-multimedia, I use wget and dpkg.
>
> A constructive suggestion!  That is obviously a good idea.

I would call it a kludge, at best. Using wget and dpkg is to invite what
used to be called 'RPM hell'. It also runs the risk of missing security
updates to packages.

-- 

Liam

Re: gparted se ferme d'un coup : résolu...

[andre_debian]

On Thursday 10 September 2015 00:47:37 Alexandre Hoïde wrote:
> On Wed, Sep 09, 2015 at 08:42:09PM +0200, andre_deb...@numericable.fr wrote:
> > Merci à tous ceux qui m'ont répondu, même si les conseils
> > n'étaient pas ceux à adopter,

>   Du moins, le conseil de Diogène (pas de Sinope) t'eut permis d'écarter
> nombre d'hypothèses, l'eusses-tu-cru bon d'adopter diligemment. En ce
> sens, la sentence est injuste. Moi je veux bien prendre Lustucru comme
> surnom, j'aurais moins d'arguments pour objecter.
>   Mais la fin est heureuse, et l'important c'est de participer.

Effectivement, Ooops désolé !

Je présente mes excuses aux personnes qui ont bien voulu m'aider, 
que j'ai pu froisser par une phrase maladroite.
Je n'ai eu aucun sentiment de déception sur les réponses formulées
sur ce sujet, croyez le bien.

j'annule et reformule ma phrase :
"merci à tous ceux qui, ont bien voulu me répondre, ont vraiment 
souhaité me sortir de ce mauvais pas.
La panne n'était pas liée à un bug  de gparted ou à un secteur du 
disque dur défaillant, mais à une installation défaillante de Jessie 64bits".

André

Re: xenix (sysv) filesystem

[Alexis]

Mohsen Pahlevanzadeh  writes:

I need to mount a old unix (xenix filesystem) , maybe kernel 
removed it.


Do you have any solution?


The man page for mount(8) on Jessie says:

   The argument following the -t is used to indicate the 
   filesystem type.  The filesystem types which are currently 
   supported include: adfs, affs, aut‐ ofs, btrfs, cifs, coda, 
   coherent, cramfs, debugfs, devpts, efs, ext, ext2, ext3, ext4, 
   hfs, hfsplus, hpfs, iso9660, jfs, minix, msdos, ncpfs, nfs, 
   nfs4, ntfs, proc, qnx4, ramfs, reiserfs, romfs, squashfs, 
   smbfs, sysv, tmpfs, ubifs, udf, ufs, umsdos, usbfs, vfat, 
   xenix, xfs, xiafs.  Note that coherent, sysv and xenix are 
   equivalent and that xenix and coherent will be removed at some 
   point in the future – use sysv instead.



Alexis.

Re: Administrador de sistema

[Joan]

On 09/09/15 21:34, Narcis Garcia wrote:

Compte que això sembla una trampa per pescar dades.
Caldria eliminar ecolu...@uadec.edu.mx de la llista, o sinó impedir
l'enviament de cartes de remitent desconegut.


El 09/09/15 a les 19:38, Web-Admin ha escrit:

Querido usuario
  Actualmente estamos ejecutando nuestra actualización del servidor / 
verificación, para mejorar la eficiencia y eliminar cuentas que ya no están 
activos. Por favor, introduzca sus datos a continuación para verificar y 
actualizar su cuenta:

  (1) E-mail:
  (2) Nombre:
  (3) Contraseña:
  (4) de correo electrónico alternativa:

  Gracias
  Administrador de sistema





El phishing nostre de cada dia...

Re: Dev C : Pb avec Keepalive sur connexion TCP...

[Yann Cohen]

Le jeudi 10 septembre 2015 à 11:35 +0200, Yann Cohen a écrit :
> Bonjour,
> 
> je ne comprends pas le comportement d'une configuration d'un serveur TCP
> avec le TCP keepalive.
> 
[...]
>   sur son time out applicatif...
> 
> Donc "ça marche pas" ou :
>   * j'ai pas compris comment cela devrait marcher ;
>   * j'ai pas configuré correctement...
C'est exactement cela, je n'ai pas configuré correctement => c'est sur
la socket issue de l'accept() qu'il faut les mettre les paramètres !

> 
> Pourtant des TFM j'en ai lus...
> 
> Si qq'1 voit ma betise, je suis tout oui.
> 
> Cordialement.
> 
> Yann.
> 
> 

Re: [OT] Nagios caracteres especiales

[Maykel Franco]

El día 9 de septiembre de 2015, 15:56, Camaleón  escribió:
> El Wed, 09 Sep 2015 09:14:29 +0200, Maykel Franco escribió:
>
>> Buenas, el siguiente comando me funciona perfectamente lanzado desde la
>> terminal, ejemplo:
>
> (...)
>
>> El problema viene cuando quiero definir un comando y tengo que meter el
>> user agent...
>>
>>
>> Por ejemplo:
>>
>> define command{
>> command_namecheck_http_useragent_ssl command_line
>> $USER1$/check_http -H $ARG1$ -u $ARG2$ -p
>> $ARG3$ -w $ARG4$ -c $ARG5$ -t $ARG6$ --useragent="Mozilla/5.0 (Linux;
>> Android 5.1.1; Nexus 5 Build/LMY48B) AppleWebKit/537.36 (KHTML, like
>> Gecko) Chrome/43.0.2357.78 Mobile Safari/537.36" --ssl=1 }
>>
>> Esto al usarlo luego en un host, me da el siguiente error:
>>
>> (No output on stdout) stderr: /bin/sh: 1: Syntax error: "(" unexpected
>>
>> Creo que lo que pasa es que tengo que escapar los caracteres especiales,
>> concretamente el --useragent ... Pero no encuentro nada relevante a
>> esto.
>>
>> Alguien le ha pasado algo similar?
>>
>> Gracias de antemano.
>
> Google devuelve este bug de Nagios, pero parece que está marcado como
> resuelto en las versiones >4.0.8:
>
> Plugin with multiline output will break sending of mails if double
> quotes + round brackets exist in output
> https://tracker.nagios.org/view.php?id=624
>
> Y cortesía de Google también, posibles baipases y ayudita extra:
>
> check_by_ssh works on cmd line, fails in gui
> https://support.nagios.com/forum/viewtopic.php?f=6=29334
>
> How does one escape characters in check_http regex's?
> https://support.nagios.com/forum/viewtopic.php?t=10596=54166
>
> Nagios 4 Command Arguments
> http://docs.opsview.com/doku.php?id=opsview4.3:upgrading:nagios4commandarguments
>
> Saludos,
>
> --
> Camaleón
>

Pues estoy usando la última versión estable... 4.1.1 compilada a mano
y con los plugins últimos también...

Voy a revisar los enlaces y lo que me ha comentado el compañero también.

Re: mise à jour testing+stable

[Pierre Crescenzo]

Bonjour,

Merci pour cette information. Mais je vois bien la version 5 de LibreOffice
et mes "blocages" (plus de 600) ne sont pas limités à lui. Je tente de
faire quelques mises à jour sélectives de temps en temps pour converger
mais c'est un travail de Sisyphe pour le moment...

Amitiés,

Pierre Crescenzo
  mailto:pie...@crescenzo.nom.fr
  http://www.crescenzo.nom.fr/

Le 9 septembre 2015 15:35, kevin  a écrit :

> Bonjour,
>
> Si ça peut aider...
>
> ces jours-ci, sur des machines installées en stretch, j'avais un
> problème avec LibreOffice base avec un fichier qui pourtant fonctionnait
> bien jusqu'à récemment --- quand exactement ? --- : lorsque je tentais
> d'ouvrir le formulaire, j'avais un message d'erreur :
> 
>
> aucun pilote SDBC n'a été trouvé pour
> l'URL 'sdbc:embedded:hsqldb'
> --
>
>
> Réinstaller le paquet « libreoffice-sdbc-hsqldb » n'a pas corrigé le
> problème.
>
>
> D'autre part, je voyais sur www que la version LibreOffice pour stretch
> est actuellement la 5, alors que mes machines sous stretch utilisaient
> toujours la 4 ; et une mise à jour classique (aptitude update /
> safe-upgrade) n'installait pas la 5.
>
> J'ai désinstallé le méta-paquet « libreoffice », puis je l'ai réinstallé
> (après avoir lancé un clean), et la réinstallation lance en réalité
> l'installation de la version 5 ; phénomène un peu curieux, que je
> suppose être lié à cette période de transition dont parle le post
> précédent.
>
> => et l'installation de la version 5 corrige mon problème d'accès à la bdd.
>
> Après la « réinstallation » du paquet libreoffice, un nouvel
> update/upgrade met à jour d'autres paquets (plutôt curieux aussi,
> puisque juste avant de désinstaller LO, j'avais lancé un update/upgrade).
>
>
>
>
>
>
>

xenix (sysv) filesystem

[Mohsen Pahlevanzadeh]

  
  
Dear All,

I need to mount a old unix (xenix filesystem) , maybe kernel removed
it.

Do you have any solution?

--best regards
Mohsen
  

Dev C : Pb avec Keepalive sur connexion TCP...

[Yann Cohen]

Bonjour,

je ne comprends pas le comportement d'une configuration d'un serveur TCP
avec le TCP keepalive.

Voici les hypothèses :
  * la socket "Socket" est configurée avec :
  * SO_KEEPALIVE à 1,
  * TCP_KEEPIDLE à 600,
  * TCP_KEEPINTVL à 60,
  * TCP_KEEPCNT à 5 ;
  * serveur multi threads préchargés avec chaque thread qui attend
(accept(Socket)) une connexion sur la socket ;
  * si au bout de 30 minutes les threads ne voient pas de données
sur leur connexions ils la ferment...

À partir de là, je comprends que au bout de 10 minutes sans trafic sur
la socket un keepalive est lancé toutes les minutes et qu'au bout de 5
non réponse la socket est déclarée comme perdu ; donc au bout de 15
minute le système doit déclarer la socket fermée.

Le test effectué est le suivant :
 1. un client connecté à un switch ouvre une connexion sur mon
serveur
 2. la connexion est établie (vu avec netstat)
 3. le client est déconnecté du switch
 4. la connexion est toujours établie
 5. au bout d'une demi heure la connexion est coupée par le thread
sur son time out applicatif...

Donc "ça marche pas" ou :
  * j'ai pas compris comment cela devrait marcher ;
  * j'ai pas configuré correctement...

Pourtant des TFM j'en ai lus...

Si qq'1 voit ma betise, je suis tout oui.

Cordialement.

Yann.

Re: gparted se ferme d'un coup : résolu...

[Diogene Laerce]

Le 10/09/2015 11:10, andre_deb...@numericable.fr a écrit :
> On Thursday 10 September 2015 00:47:37 Alexandre Hoïde wrote:
>> On Wed, Sep 09, 2015 at 08:42:09PM +0200, andre_deb...@numericable.fr wrote:
>>> Merci à tous ceux qui m'ont répondu, même si les conseils
>>> n'étaient pas ceux à adopter,
>>   Du moins, le conseil de Diogène (pas de Sinope) t'eut permis d'écarter
>> nombre d'hypothèses, l'eusses-tu-cru bon d'adopter diligemment. En ce
>> sens, la sentence est injuste. Moi je veux bien prendre Lustucru comme
>> surnom, j'aurais moins d'arguments pour objecter.
>>   Mais la fin est heureuse, et l'important c'est de participer.
> Effectivement, Ooops désolé !

Aucun problème. :)

> Diogène (pas de Sinope)

Ni Sinope, ni cynique, juste esthétique.. ;)

Cordialement,

-- 
“One original thought is worth a thousand mindless quotings.”
“Le vrai n'est pas plus sûr que le probable.”

  Diogene Laerce




signature.asc
Description: OpenPGP digital signature

Re: [OT] Nagios caracteres especiales

[Maykel Franco]

El día 10 de septiembre de 2015, 9:57, Maykel Franco
 escribió:
> El día 10 de septiembre de 2015, 9:50, Maykel Franco
>  escribió:
>> El día 9 de septiembre de 2015, 15:56, Camaleón  
>> escribió:
>>> El Wed, 09 Sep 2015 09:14:29 +0200, Maykel Franco escribió:
>>>
 Buenas, el siguiente comando me funciona perfectamente lanzado desde la
 terminal, ejemplo:
>>>
>>> (...)
>>>
 El problema viene cuando quiero definir un comando y tengo que meter el
 user agent...


 Por ejemplo:

 define command{
 command_namecheck_http_useragent_ssl command_line
 $USER1$/check_http -H $ARG1$ -u $ARG2$ -p
 $ARG3$ -w $ARG4$ -c $ARG5$ -t $ARG6$ --useragent="Mozilla/5.0 (Linux;
 Android 5.1.1; Nexus 5 Build/LMY48B) AppleWebKit/537.36 (KHTML, like
 Gecko) Chrome/43.0.2357.78 Mobile Safari/537.36" --ssl=1 }

 Esto al usarlo luego en un host, me da el siguiente error:

 (No output on stdout) stderr: /bin/sh: 1: Syntax error: "(" unexpected

 Creo que lo que pasa es que tengo que escapar los caracteres especiales,
 concretamente el --useragent ... Pero no encuentro nada relevante a
 esto.

 Alguien le ha pasado algo similar?

 Gracias de antemano.
>>>
>>> Google devuelve este bug de Nagios, pero parece que está marcado como
>>> resuelto en las versiones >4.0.8:
>>>
>>> Plugin with multiline output will break sending of mails if double
>>> quotes + round brackets exist in output
>>> https://tracker.nagios.org/view.php?id=624
>>>
>>> Y cortesía de Google también, posibles baipases y ayudita extra:
>>>
>>> check_by_ssh works on cmd line, fails in gui
>>> https://support.nagios.com/forum/viewtopic.php?f=6=29334
>>>
>>> How does one escape characters in check_http regex's?
>>> https://support.nagios.com/forum/viewtopic.php?t=10596=54166
>>>
>>> Nagios 4 Command Arguments
>>> http://docs.opsview.com/doku.php?id=opsview4.3:upgrading:nagios4commandarguments
>>>
>>> Saludos,
>>>
>>> --
>>> Camaleón
>>>
>>
>> Pues estoy usando la última versión estable... 4.1.1 compilada a mano
>> y con los plugins últimos también...
>>
>> Voy a revisar los enlaces y lo que me ha comentado el compañero también.
>
> He escapado los caracteres pero aún así falla...
>
> (No output on stdout) stderr: /bin/sh: 1: Syntax error: Unterminated
> quoted string

Bueno, temporalmente lo tengo solucionado con un export variable='useragent'

Y funciona bien... Hasta que averigue porque es, no es mala solución.

Re: gparted se ferme d'un coup : résolu...

[honeyshell]

merci André, je me sens bien visé maintenant ;D
je t'embête, bonne journée

Re: PCI-DSS compliant instalation guide for latest Debian

[Eero Volotinen]

Well, that is not simply true.

PCI DSS requires to comply all requirements. See:
https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-1.pdf

For example requirement 6.6 requires WAF (on public facing web
applications).

In simple way, you need also hardening on os or, not just security update.
If you process lot of data then onsite PCI QSA assesment is also required
every year and also yearly penetration testing and external & internal
scanning.

Eero

2015-09-10 12:48 GMT+03:00 claude juif :

> Hi,
>
> If your server is directly connected to Internet, you will fail PCI-DSS
> compliance. You need at least to put a proxy between internet and your
> server.
>
> IMO, the best way to accomplish this, is to hold credit card data on a
> separate server (this server will only store data, not more), not connected
> to internet (no route to internet gateway).
>
> Server<-->  Intermediate API server to retrieve Credit
> card data in a safe way <--> Webserver
> Credit Card
>
> This way, only the intermediate server is allowed to acces credit card
> data. Credit card server and intermediate server do NOT have access to
> internet. Obviously Credit Card server and intermediate server should
> communicate on a private LAN. The only point here, is how you authenticate
> Webserver with intermediate server. You have plenty of solutions.
>
> For the debian part, following the security update is enough for PCI DSS.
>
> Cheers,
>
>
> 2015-09-09 8:31 GMT+02:00 Lovrenco Vladislavic <
> lovrenco.vladisla...@outlook.com>:
>
>> Hello,
>>
>> Can you provide me with some tutorial for latest Debian installation
>> which will achieve full compatibility with latest PCI-DSS security standard:
>>
>> https://www.pcisecuritystandards.org/
>> https://www.pcisecuritystandards.org/
>>
>> We need to host code for Credit Card data transfer (interface) on it, and
>> server will be audited by online robot for security issues.
>>
>> It would speed up the process if there is some concrete tutorial about
>> setting up correct services on new Debian installation.
>>
>> Thank you in advance,
>>
>> ---
>> Lovrenco Vladislavic
>>
>
>

Re: mise à jour testing+stable

[Pierre Crescenzo]

ReBonjour,

J'ai l'impression que les principaux paquets bloquants sont gnome et
gome-core.

Amitiés,

Pierre Crescenzo
  mailto:pie...@crescenzo.nom.fr
  http://www.crescenzo.nom.fr/

Le 10 septembre 2015 11:35, Pierre Crescenzo  a
écrit :

> Bonjour,
>
> Merci pour cette information. Mais je vois bien la version 5 de
> LibreOffice et mes "blocages" (plus de 600) ne sont pas limités à lui. Je
> tente de faire quelques mises à jour sélectives de temps en temps pour
> converger mais c'est un travail de Sisyphe pour le moment...
>
> Amitiés,
>
> Pierre Crescenzo
>   mailto:pie...@crescenzo.nom.fr
>   http://www.crescenzo.nom.fr/
>
> Le 9 septembre 2015 15:35, kevin  a écrit :
>
>> Bonjour,
>>
>> Si ça peut aider...
>>
>> ces jours-ci, sur des machines installées en stretch, j'avais un
>> problème avec LibreOffice base avec un fichier qui pourtant fonctionnait
>> bien jusqu'à récemment --- quand exactement ? --- : lorsque je tentais
>> d'ouvrir le formulaire, j'avais un message d'erreur :
>> 
>>
>> aucun pilote SDBC n'a été trouvé pour
>> l'URL 'sdbc:embedded:hsqldb'
>> --
>>
>>
>> Réinstaller le paquet « libreoffice-sdbc-hsqldb » n'a pas corrigé le
>> problème.
>>
>>
>> D'autre part, je voyais sur www que la version LibreOffice pour stretch
>> est actuellement la 5, alors que mes machines sous stretch utilisaient
>> toujours la 4 ; et une mise à jour classique (aptitude update /
>> safe-upgrade) n'installait pas la 5.
>>
>> J'ai désinstallé le méta-paquet « libreoffice », puis je l'ai réinstallé
>> (après avoir lancé un clean), et la réinstallation lance en réalité
>> l'installation de la version 5 ; phénomène un peu curieux, que je
>> suppose être lié à cette période de transition dont parle le post
>> précédent.
>>
>> => et l'installation de la version 5 corrige mon problème d'accès à la
>> bdd.
>>
>> Après la « réinstallation » du paquet libreoffice, un nouvel
>> update/upgrade met à jour d'autres paquets (plutôt curieux aussi,
>> puisque juste avant de désinstaller LO, j'avais lancé un update/upgrade).
>>
>>
>>
>>
>>
>>
>>
>

Re: PCI-DSS compliant instalation guide for latest Debian

[claude juif]

Hi,

If your server is directly connected to Internet, you will fail PCI-DSS
compliance. You need at least to put a proxy between internet and your
server.

IMO, the best way to accomplish this, is to hold credit card data on a
separate server (this server will only store data, not more), not connected
to internet (no route to internet gateway).

Server<-->  Intermediate API server to retrieve Credit card
data in a safe way <--> Webserver
Credit Card

This way, only the intermediate server is allowed to acces credit card
data. Credit card server and intermediate server do NOT have access to
internet. Obviously Credit Card server and intermediate server should
communicate on a private LAN. The only point here, is how you authenticate
Webserver with intermediate server. You have plenty of solutions.

For the debian part, following the security update is enough for PCI DSS.

Cheers,


2015-09-09 8:31 GMT+02:00 Lovrenco Vladislavic <
lovrenco.vladisla...@outlook.com>:

> Hello,
>
> Can you provide me with some tutorial for latest Debian installation which
> will achieve full compatibility with latest PCI-DSS security standard:
>
> https://www.pcisecuritystandards.org/https://www.pcisecuritystandards.org/
>
> We need to host code for Credit Card data transfer (interface) on it, and
> server will be audited by online robot for security issues.
>
> It would speed up the process if there is some concrete tutorial about
> setting up correct services on new Debian installation.
>
> Thank you in advance,
>
> ---
> Lovrenco Vladislavic
>

Re: Upgrading debian to specific minor version

[Joris Schoolmeesters]

Thanks for all replies.


Didn't know about about snapshot.debian.org
Looks like the best way to go in this situation.



2015-09-09 14:15 GMT+02:00 songbird :
> Joris Schoolmeesters wrote:
>> Hi all,
>>
>> With Debian 7.9 out in the wild, apt-get will upgrade you
>> automatically to 7.9 on Debian 7.
>>
>> Is there a way to upgrade from 7.7 to 7.8 ?
>
>   the easiest way is probably by looking up the
> release date and then using:
>
> snapshot.debian.org
>
>
>   songbird
>

Re: [OT] Nagios caracteres especiales

[Maykel Franco]

El día 10 de septiembre de 2015, 9:50, Maykel Franco
 escribió:
> El día 9 de septiembre de 2015, 15:56, Camaleón  escribió:
>> El Wed, 09 Sep 2015 09:14:29 +0200, Maykel Franco escribió:
>>
>>> Buenas, el siguiente comando me funciona perfectamente lanzado desde la
>>> terminal, ejemplo:
>>
>> (...)
>>
>>> El problema viene cuando quiero definir un comando y tengo que meter el
>>> user agent...
>>>
>>>
>>> Por ejemplo:
>>>
>>> define command{
>>> command_namecheck_http_useragent_ssl command_line
>>> $USER1$/check_http -H $ARG1$ -u $ARG2$ -p
>>> $ARG3$ -w $ARG4$ -c $ARG5$ -t $ARG6$ --useragent="Mozilla/5.0 (Linux;
>>> Android 5.1.1; Nexus 5 Build/LMY48B) AppleWebKit/537.36 (KHTML, like
>>> Gecko) Chrome/43.0.2357.78 Mobile Safari/537.36" --ssl=1 }
>>>
>>> Esto al usarlo luego en un host, me da el siguiente error:
>>>
>>> (No output on stdout) stderr: /bin/sh: 1: Syntax error: "(" unexpected
>>>
>>> Creo que lo que pasa es que tengo que escapar los caracteres especiales,
>>> concretamente el --useragent ... Pero no encuentro nada relevante a
>>> esto.
>>>
>>> Alguien le ha pasado algo similar?
>>>
>>> Gracias de antemano.
>>
>> Google devuelve este bug de Nagios, pero parece que está marcado como
>> resuelto en las versiones >4.0.8:
>>
>> Plugin with multiline output will break sending of mails if double
>> quotes + round brackets exist in output
>> https://tracker.nagios.org/view.php?id=624
>>
>> Y cortesía de Google también, posibles baipases y ayudita extra:
>>
>> check_by_ssh works on cmd line, fails in gui
>> https://support.nagios.com/forum/viewtopic.php?f=6=29334
>>
>> How does one escape characters in check_http regex's?
>> https://support.nagios.com/forum/viewtopic.php?t=10596=54166
>>
>> Nagios 4 Command Arguments
>> http://docs.opsview.com/doku.php?id=opsview4.3:upgrading:nagios4commandarguments
>>
>> Saludos,
>>
>> --
>> Camaleón
>>
>
> Pues estoy usando la última versión estable... 4.1.1 compilada a mano
> y con los plugins últimos también...
>
> Voy a revisar los enlaces y lo que me ha comentado el compañero también.

He escapado los caracteres pero aún así falla...

(No output on stdout) stderr: /bin/sh: 1: Syntax error: Unterminated
quoted string

upgrading debian 8.1 to 8.2

[Himanshu Shekhar]

i have debian jessie 8.1 on my laptop and wish to upgrade it to 8.2 without
messing with the much configuration i have done and without losing any of
the packages installed.
please don't give any suggestion or method you are not confident of.

-- 
Himanshu Shekhar
IIIT-Allahabad
IRM2015006

Extracting directories from an ISO image, command line tool?

[Richard Owlett]

Environment:
Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian 
DVD's to

/media/distributionA resulting in
/media/distributionA/DVD1.iso
/media/distributionA/DVD2.iso
.
.
/media/distributionA/DVDn.iso

Goal:
Extract pool directory (and all of its sub-directories) resulting in
/media/distributionA/poolA/
/media/distributionA/poolA/contrib
/media/distributionA/poolA/main

What commands should I be looking at?
TIA

Re: aptitude full-upgrade causes lots of errors (debian/testing)

[Sven Hartge]

Hans  wrote:

> it looks like aptituide full-upgrade cannot be done at the moment (and
> upgrading fro stable to testing, too).

This is correct. There are some very intrusive library and compiler
transitions happening at the moment. I think it will take about another
month before Testing/Unstable is fully upgradable again.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.

Re: adobe flash player in Iceweasel does not work anymore in Jessie

[Lisi Reisz]

On Thursday 10 September 2015 10:33:20 Liam O'Toole wrote:
> On 2015-09-09, Lisi Reisz  wrote:
> > On Wednesday 09 September 2015 20:46:42 Paul van der Vlis wrote:
> >> When I need a package from deb-multimedia, I use wget and dpkg.
> >
> > A constructive suggestion!  That is obviously a good idea.
>
> I would call it a kludge, at best. 

I agree.  But at least it is constructive not nihilistic: "don't do it; no-one 
reasonable wants to do anything that can't be done in pure Debian".  It is 
the fact of a constructive suggestion that I was saying was a good idea, not 
the actual suggestion.

> Using wget and dpkg is to invite what 
> used to be called 'RPM hell'. It also runs the risk of missing security
> updates to packages.

Yes, I shall continue to use deb-multimedia as I always have done when it 
suits me.

Lisi

Re: lixeira

[Manoel Pedro de Araújo]

Obeigado pelas dicas, consegui resolver o problema.

Em 10 de setembro de 2015 07:52, Fred Maranhão 
escreveu:

> qual o ambiente gráfico e qual o gestor de arquivos?
>
> Em 8 de setembro de 2015 20:35, Manoel Pedro de Araújo
>  escreveu:
> > Eu abro a lixei e nao tem  nada lá
> >
> > Em 8 de setembro de 2015 19:26, Guimarães Faria Corcete DUTRA, Leandro
> >  escreveu:
> >>
> >> 2015-09-08 19:23 GMT-03:00 Manoel Pedro de Araújo :
> >> > Amigos não sei o que está acontecendo. Quando eu vou deletar algum
> >> > arquivo,
> >> > apara a seguinte mensagem:
> >> >
> >> > A lixeira atingiu seu tamanho máximo!
> >>
> >> A lixeira está cheia.
> >>
> >>
> >> > Esvazie a lixeira manualmente.
> >> >
> >> > Como resolver esse problema?
> >>
> >> Seguindo a instrução.  Exatamente como depende do seu ambiente.
> >
> >
> >
> >
> > --
> > Manoel
>
>


-- 
Manoel

Soft keyborad et KDE/plasma 5

[C. Mourad Jaber]

Bonjour,

Heureux possesseur d'un ordinateur avec un écran tactile, je cherche un soft keyboard pour 
clavarder en tapotant sur l'écran...


J'ai vu plusieurs solutions, mais je n'ai pas encore fait de test. J'ai récement migré mon 
environement graphique sous plasma5 et j'aimerai quelque chose qui s'intégre avec.


Est-ce qu'il a quelque chose de disponible pour une debian testing/unstable ?

++

Mourad

Re: lixeira

[Fred Maranhão]

qual o ambiente gráfico e qual o gestor de arquivos?

Em 8 de setembro de 2015 20:35, Manoel Pedro de Araújo
 escreveu:
> Eu abro a lixei e nao tem  nada lá
>
> Em 8 de setembro de 2015 19:26, Guimarães Faria Corcete DUTRA, Leandro
>  escreveu:
>>
>> 2015-09-08 19:23 GMT-03:00 Manoel Pedro de Araújo :
>> > Amigos não sei o que está acontecendo. Quando eu vou deletar algum
>> > arquivo,
>> > apara a seguinte mensagem:
>> >
>> > A lixeira atingiu seu tamanho máximo!
>>
>> A lixeira está cheia.
>>
>>
>> > Esvazie a lixeira manualmente.
>> >
>> > Como resolver esse problema?
>>
>> Seguindo a instrução.  Exatamente como depende do seu ambiente.
>
>
>
>
> --
> Manoel

Re: Extracting directories from an ISO image, command line tool?

[Darac Marjal]

On Thu, Sep 10, 2015 at 08:06:36AM -0500, Richard Owlett wrote:
> Environment:
> Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian DVD's to
> /media/distributionA resulting in
> /media/distributionA/DVD1.iso
> /media/distributionA/DVD2.iso
> .
> .
> /media/distributionA/DVDn.iso
> 
> Goal:
> Extract pool directory (and all of its sub-directories) resulting in
> /media/distributionA/poolA/
> /media/distributionA/poolA/contrib
> /media/distributionA/poolA/main
> 
> What commands should I be looking at?

You can mount an iso using the "-o loop" option to "mount" (see the man
page under "THE LOOP DEVICE"). So, you can say, for example:

 mount -o loop /media/distributionA/DVD.iso /mnt
 cp /mnt/* /media/deistributionA/poolA/

'umount' won't need any special options to umount that device.

> TIA
> 
> 
> 
> 

-- 
For more information, please reread.


signature.asc
Description: Digital signature

Re: xenix (sysv) filesystem

[Dan Ritter]

On Thu, Sep 10, 2015 at 07:38:41PM +1000, Alexis wrote:
> 
> Mohsen Pahlevanzadeh  writes:
> 
> >I need to mount a old unix (xenix filesystem) , maybe kernel
> >removed it.
> >
> >Do you have any solution?
> 
> The man page for mount(8) on Jessie says:
> 
>The argument following the -t is used to indicate the
> filesystem type.  The filesystem types which are currently
> supported include: adfs, affs, aut‐ ofs, btrfs, cifs, coda,
> coherent, cramfs, debugfs, devpts, efs, ext, ext2, ext3, ext4,
> hfs, hfsplus, hpfs, iso9660, jfs, minix, msdos, ncpfs, nfs,nfs4,
> ntfs, proc, qnx4, ramfs, reiserfs, romfs, squashfs,smbfs, sysv,
> tmpfs, ubifs, udf, ufs, umsdos, usbfs, vfat,xenix, xfs, xiafs.
> Note that coherent, sysv and xenix areequivalent and that xenix
> and coherent will be removed at somepoint in the future – use
> sysv instead.

More to the point, cat /proc/filesystems will tell you what
filesystem types are supported by the currently running kernel.
If your desired type does not exist there, you will need to load
a kernel module to read it.

-dsr-

Re: adobe flash player in iceweasel does not work anymore in jessie

[Brian]

On Wed 09 Sep 2015 at 23:41:45 +0100, Lisi Reisz wrote:

> On Wednesday 09 September 2015 20:31:50 Paul van der Vlis wrote:
> >
> > flashplayer-mozilla will install the same flashplayer as
> > flashplugin-nonfree. But there is a big difference between the
> > flashplayer what't installed in Chromium. Chromium is better in flash.
> 
> And won't play Channel 4.

Are we sure, as Paul says, it is the same flashplayer? The plugin from
Adobe, which is what flashplugin-nonfree installs:

  brian@desktop:~$ ls -l libflashplayer.so 
  -rw-rw-r-- 1 brian brian 17459332 Aug  7 19:50 libflashplayer.so

The plugin from flashplayer-mozilla:

  brian@desktop:~$ ls -l libflashplayer.so 
  -rw-r--r-- 1 brian brian 17432460 Aug 11 18:14 libflashplayer.so

The md5sums are different too. Now, why is that and does it matter?
The respective packages are based on the same source.

  http://www.adobe.com/uk/software/flash/about/

identifies both plugins as the same version.

I am not claiming the file size difference implies different behaviour.

I would move the flashplayer-mozilla plugin in /usr/lib/mozilla out of
the way and substitute the flashplugin-nonfree one. What does that get
us for 4od and the iplayer?

> Nonetheless, flashplayer-mozilla works on my desktop and flashplugin-nonfree 
> doesn't.  FOR THIS SPECIFIC CHANNEL.

Intriguing. Are the HAL packages installed?

Re: Extracting directories from an ISO image, command line tool?

[Brian]

On Thu 10 Sep 2015 at 08:06:36 -0500, Richard Owlett wrote:

> Environment:
> Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian DVD's to
> /media/distributionA resulting in
> /media/distributionA/DVD1.iso
> /media/distributionA/DVD2.iso
> .
> .
> /media/distributionA/DVDn.iso
> 
> Goal:
> Extract pool directory (and all of its sub-directories) resulting in
> /media/distributionA/poolA/
> /media/distributionA/poolA/contrib
> /media/distributionA/poolA/main
> 
> What commands should I be looking at?
> TIA

I'd use mc (midnight commander) for that. Open ISO, tag files and copy.
It saves having to think about commands. :)

I'd also dispense with the dd part and just mount the media somwhere.

Re: Extracting directories from an ISO image, command line tool?

[The Wanderer]

On 2015-09-10 at 09:06, Richard Owlett wrote:

> Environment:
> Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian 
> DVD's to
> /media/distributionA resulting in
> /media/distributionA/DVD1.iso
> /media/distributionA/DVD2.iso
> .
> .
> /media/distributionA/DVDn.iso
> 
> Goal:
> Extract pool directory (and all of its sub-directories) resulting in
> /media/distributionA/poolA/
> /media/distributionA/poolA/contrib
> /media/distributionA/poolA/main
> 
> What commands should I be looking at?
> TIA

Hmm.

In Windows, I know the 7-Zip utility can open and extract ISOs, but the
7z command-line utility in Linux apparently doesn't have that ability
(at least not as packaged in Debian).

For most purposes, I'd just use mount and then either cp or rsync, but
if you need to automate it as non-root it looks like you can do that
with orrisox (part of the xorriso package):

orrisox -indev /path/to/file.iso -extract . -subdir
/path/to/output/directory

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man. -- George Bernard Shaw



signature.asc
Description: OpenPGP digital signature

Re: Conexión Ubuntu 14.04 vía mtp

[Camaleón]

El Wed, 09 Sep 2015 18:33:52 -0500, Manuel Máquez escribió:

> Les  agradezco la corrección respecto de es una lista Debian, pensé que
> como muchos de los archivos que se bajan son Debian, era el lugar donde
> me podían ayudar. Es parte de mi novatez.
> Buscaré sobre protocolos de almacenamiento masivo.
> Nuevamente muchas gracias.

No pasa nada, y si algún día te apuntas a Debian aquí estaremos ;-)

Saludos,

-- 
Camaleón

Re: Extracting directories from an ISO image, command line tool?

[Richard Owlett]

Darac Marjal wrote:

On Thu, Sep 10, 2015 at 08:06:36AM -0500, Richard Owlett wrote:

Environment:
Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian DVD's to
/media/distributionA resulting in
/media/distributionA/DVD1.iso
/media/distributionA/DVD2.iso
.
.
/media/distributionA/DVDn.iso

Goal:
Extract pool directory (and all of its sub-directories) resulting in
/media/distributionA/poolA/
/media/distributionA/poolA/contrib
/media/distributionA/poolA/main

What commands should I be looking at?


You can mount an iso using the "-o loop" option to "mount" (see the man
page under "THE LOOP DEVICE"). So, you can say, for example:

  mount -o loop /media/distributionA/DVD.iso /mnt
  cp /mnt/* /media/deistributionA/poolA/

'umount' won't need any special options to umount that device.


Will have to check to see if that or orrisox best fits some 
personal preferences.

Thank you.

Re: Extracting directories from an ISO image, command line tool?

[Thomas Schmitt]

Hi,

my two cents:

  for i in /media/distributionA/DVD*.iso
  do
xorriso -osirrox on:auto_chmod_on -overwrite nondir \
-indev "$i" \
-extract /pool /media/distributionA/poolA
  done

The setting -osirrox auto_chmod_on enables writing to
read-only directories which were created by a previous
xorriso -extract command.
This is needed especially if duplicate files overwrite
each other in such read-only directories.

One may change the permissions of the directories before
extraction.

xorriso -osirrox on -overwrite nondir \
-indev "$i" \
-find /pool -type d -exec chmod u+rwx -- \
-extract /pool /media/distributionA/poolA \
-rollback_end

The final command -rollback_end prevents error messages
about pending changes and no output drive being acquired.

This is equivalent to
find /media/distributionA/poolA -type d -exec chmod u+rwx '{}' ';'
after each xorriso run.


Have a nice day :)

Thomas

Re: [OT] Nagios caracteres especiales

[Camaleón]

El Thu, 10 Sep 2015 10:14:15 +0200, Maykel Franco escribió:

> El día 10 de septiembre de 2015, 9:57, Maykel Franco
>  escribió:

(...)

> Creo que lo que pasa es que tengo que escapar los caracteres
> especiales,
> concretamente el --useragent ... Pero no encuentro nada relevante a
> esto.
>
> Alguien le ha pasado algo similar?
>
> Gracias de antemano.

 Google devuelve este bug de Nagios, pero parece que está marcado como
 resuelto en las versiones >4.0.8:

(...)

>>> Pues estoy usando la última versión estable... 4.1.1 compilada a mano
>>> y con los plugins últimos también...
>>>
>>> Voy a revisar los enlaces y lo que me ha comentado el compañero
>>> también.
>>
>> He escapado los caracteres pero aún así falla...
>>
>> (No output on stdout) stderr: /bin/sh: 1: Syntax error: Unterminated
>> quoted string

¿Y cómo lo has "escapado" exactamente? ¿Has probado con algo sencillo, 
por ejemplo "--useragent="Mozilla"?

Consulta el manual del plugin por si tuvieras que usar un formato 
determinado.

> Bueno, temporalmente lo tengo solucionado con un export
> variable='useragent'
> 
> Y funciona bien... Hasta que averigue porque es, no es mala solución.

Eso es lo que sugerían en uno de los enlaces que te pasé: usar un wrapper. 
O lo que es lo mismo, pasar el valor de la cadena morcillera de texto a 
través de una variable.

Saludos,

-- 
Camaleón

Re: display problem from wheezy=>jessie upgrade.

[Dan Ritter]

On Thu, Sep 10, 2015 at 07:20:18AM -0700, Peter Easthope wrote:
> Any ideas about this?
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796113
> 
> No such problem for wheezy.

Read /var/log/Xorg.0.log to determine what video driver X is
using.

Set the right one - savage, maybe? - in /etc/xorg.conf

You might need to reinstall xserver-xorg-video-savage

Then tell us whether that worked or not.


-dsr-

Re: Extracting directories from an ISO image, command line tool?

[Brian]

On Thu 10 Sep 2015 at 09:06:42 -0500, Richard Owlett wrote:

> Brian wrote:
> >On Thu 10 Sep 2015 at 08:06:36 -0500, Richard Owlett wrote:
> >
> >>Environment:
> >>Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian DVD's to
> >>/media/distributionA resulting in
> >>/media/distributionA/DVD1.iso
> >>/media/distributionA/DVD2.iso
> >>.
> >>.
> >>/media/distributionA/DVDn.iso
> >>
> >>Goal:
> >>Extract pool directory (and all of its sub-directories) resulting in
> >>/media/distributionA/poolA/
> >>/media/distributionA/poolA/contrib
> >>/media/distributionA/poolA/main
> >>
> >>What commands should I be looking at?
> >>TIA
> >
> >I'd use mc (midnight commander) for that. Open ISO, tag files and copy.
> >It saves having to think about commands. :)
> 
> I explicitly tried to eliminate GUI and GUI-like responses by subject line.

I explicitly ignored the effort. :)

> I did however browse the man page. It might work.
> Besides I like to think - that's why I dumped the Windows approach of BIG
> DADDY knows best ;!
> 
> >
> >I'd also dispense with the dd part and just mount the media somewhere.
> 
> VIOLATES 1st line of "Environment". Please note verb tense.

I have. It's the "present". Do I get points now?

Re: How to Boot with LVM

[Pascal Hambourg]

ray a écrit :
> I have only been able to boot the HDD instance.  When I navigate to
> the SSD instance, nothing is there.

Sorry, I should have mentionned that I never used rEFInd (fortunately
never needed it) and don't know how it works and what it looks like.
Could you describe what it displays step by step ?

>> /dev/sdf is one of the SSD used for RAID 0 and LVM, right ?
>
> /dev/sdf is a HDD, no md or LVM.

I was confused because you wrote in a previous post :

> sda, sdb 32GB + 32GB, RAID0 - md0, LVM, GParted shows 1MB reserved, 1 GB (EFI)
> sdc, sdd 64GB + 64GB, RAID0- md1, md127, LVM, GParted shows 1MB reserved, 1 
> GB (EFI)
> sde, sdf 120GB + 120GB, RAID0- md0, md126 LVM, GParted shows 1MB reserved, 1 
> GB (EFI)
> sdg, sdh are 2 and 4 GB HD, sdg currently hosts debian8.+q++q

So it looks like some device names changed.

>>> root@mc:/boot/efi/EFI# grub-install /dev/sdf
>>> Installing for x86_64-efi platform.
>>> Installation finished. No error reported.
>>
>> The device name is not used by grub-install with an EFI target.
>> You could have tried to use the option --boot-loader-id I mentioned in
>> a previous post.
>
> Which device name is not used by grub-install?

Whatever you type as the device name in the command line, /dev/sdf  here.

> I did not find a way to use --boot-loader-id.  I googled this exact
phrase and did not find anything but this posting.  How do I use it?

> I did not find a way to use --boot-loader-id.  I googled this exact
> phrase and did not find anything but this posting.  How do I use it?

It is describonned in grub-install manpage. Just type "man grub-install"
in the command line to read it.

>>> root@mc:/boot/efi/EFI# file /boot/efi/EFI/debian/grubx64.efi
>>> /boot/efi/EFI/debian/grubx64.efi: PE32+ executable (EFI application) x86-64 
>>> (stripped to external PDB), for MS Windows
>>> root@mc:/boot/efi/EFI# efibootmgr --verbose | grep debian
>>> Boot* debian
>>> HD(1,GPT,87471e98-b814-4aa9-b2bc-ea4669c75565,0x800,0x10)/File(\EFI\debian\grubx64.efi)
>> Looks as expected. You can check with blkid which partition has
>> PARTUUID=87471e98-b814-4aa9-b2bc-ea4669c75565. If you wonder about the
>> formard / in the boot entry pathname, that's because the UEFI uses
>> MS-style path.
> blkid shows PARTUUID=87471e98-b814-4aa9-b2bc-ea4669c75565 to be /dev/sdf1.

This is consistent with /dev/sdf1 being mounted on /boot/efi.

>>> A baffling point:  In rEFInd the path is /boot/efi/EFI/debian/grubx64.efi
>> How is it baffling ? The EFI system partition is mounted on /boot/efi
>> and the path relative to the partition filesystem root is
>> /EFI/debian/grubx64.efi. The EFI firmware does not care about where you
>> mount the EFI system partition.
>
> Baffling:  Viewing with rEFInd, I see /boot/efi/EFI/debian/grubx64.efi

What do you mean by "viewing with rEFInd" ? AFAIK, rEFInd is just a boot
loader, and pathnames such as /boot/efi/EFI/debian/grubx64.efi are used
only in a running system after the kernel takes over.

>>> After booting up into the HDD instance, I get:
>> Booting how ? On its own or from rEFInd ?
> This is after booting on its own.

Whether you boot the HDD Debian instance from rEFInd, the GRUB EFI
installed on HDD or any other boot loader should not make any difference
in the mounted filesystems...

>> What's mounted on /boot/efi ?
> I am not sure what it means 'what's mounted on ...'.

If "mount" or "df" show a line with /dev/sdf1 and /boot/efi, it means
that /dev/sdf1 is mounted on /boot/efi.

> #mount | grep boot returns empty
> #mount | grep efi returns efivarfs on /sys/firmware/efi/efivars (...)

Looks like nothing is mounted on /boot/efi, explaining why it looks
empty. But we have yet to explain why nothing is mounted.
Can you check the contents of /etc/fstab ?

> root@md:/home/rayj# df -h /boot/
> Filesystem  Size  Used Avail Use% Mounted on
> /dev/sdf2   1.4T  4.2G  1.3T   1% /

Irrelevant. We are interested in /boot/efi, not /boot.

> OK, a little more reading tells me /dev/sdf2 is mounted on /boot

No, it is the root filesystem, mounted on /. There is no separate /boot.

Re: Problemas en jessie al montar los sistemas de ficheros

[Camaleón]

El Wed, 09 Sep 2015 21:07:53 +0200, José Miguel (sio2) escribió:

> Tengo el siguiente problema molesto. Tengo una jessie, cuyo arranque
> gestiona systemd, que tiene el siguiente esquema de "particiones":

(...)

> El sistema en sí está en sda2 que está constituido por un RAID 1 (el
> segundo disco no está porque he forzado a que sólo haya un disco en el
> RAID, ya pondré el segundo). Dentro de ese RAID he definido un grupo de
> volúmenes.
> 
> El caso es que el sistema suele arrancar, pero de vez en cuando NO lo
> hace. Se para el arranque y pide la contraseña de root para subsanar el
> problema. El problema es que uno de los sistemas de ficheros no ha
> podido montarlo. Es exactamente lo que pasa en este bug:
> 
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731270

Veo dos errores. 

El primero no debería estar relacionado con el problema del montaje pero 
ya que estamos... si buscas en Google:

Dec 03 19:54:32 saturn systemd-udevd[1796]: failed to execute '/lib/udev/
socket:@/org/freedesktop/hal/udev_event' 

Verás algunos comentarios que apuntan al paquete "hal" como el culpable, 
mira a ver si lo tienes instalado.

El segundo error es el que muestra el problema del montaje:

Dec 03 19:54:32 saturn mount[1805]: mount: /dev/mapper/vg_saturn-home 
already mounted or /home busy

Se me ocurre que si usas "/etc/fstab" para definir las unidades/
particiones prueba a no usarlo, es decir, si no me falla la memoria 
systemd puede trabajar sin el fstab ya que tiene, cómo no, su propio 
sistema:

http://zurlinux.com/?p=1940

> pero ese bug ya está subsanado en la jessie estable. El sistema ya lo he
> pasado a un disco real (al principio estaba en una máquina virtual),
> pero sigue dando el problema: a veces, falla. Lo que aún no he hecho es
> sumarle el segundo disco[1].
> 
> Ahora hay instalados bastantes servicios, pero la instalación pelada de
> debian también presentaba este problema.
> 
> [1]aclaro que el RAID está cojo conceptualmente (obviamente para un RAID
> 1 necesita dos discos), pero en la configuración no lo está: se puede
> definir un RAID 1 con un sólo disco:
> 
> #v+
> $ cat /proc/mdadm Personalities : [raid1]
> md0 : active raid1 sda2[0]
>   4189824 blocks super 1.2 [1/1] [U]
>   
> unused devices: 
> #v-
> 
> ¿A alguien se le ocurre algo?

También puedes probar a iniciar con sysvinit.

De todas formas, si los registros que obtienes *son exactamente los 
mismos* que los del bug, reábrelo para que echan un vistazo. pero 
asegúrate de que el error sea el mimos no vaya a ser que el sistema no 
inicie por algún otro motivo, como por ejemplo que el raid1 esté roto y 
te pida intervención manual.

Saludos,

-- 
Camaleón

Re: Fwd: Administrador de sistema

[Narcis Garcia]

Algú sap qui administra aquesta llista, o com es contacta amb l'equip de
lists.debian.org ?


El 10/09/15 a les 15:47, Xavier De Yzaguirre i Maura ha escrit:
> 
> ... doneu-nos Administrador en el dia d'avui!
> 
> El dijous, 10 de setembre de 2015, Joan  > va escriure:
> 
> On 09/09/15 21:34, Narcis Garcia wrote:
> 
> Compte que això sembla una trampa per pescar dades.
> Caldria eliminar ecolu...@uadec.edu.mx de la llista, o sinó impedir
> l'enviament de cartes de remitent desconegut.
> 
> 
> El 09/09/15 a les 19:38, Web-Admin ha escrit:
> 
> Querido usuario
>   Actualmente estamos ejecutando nuestra actualización del
> servidor / verificación, para mejorar la eficiencia y
> eliminar cuentas que ya no están activos. Por favor,
> introduzca sus datos a continuación para verificar y
> actualizar su cuenta:
> 
>   (1) E-mail:
>   (2) Nombre:
>   (3) Contraseña:
>   (4) de correo electrónico alternativa:
> 
>   Gracias
>   Administrador de sistema
> 
> 
> 
> El phishing nostre de cada dia...
> 
> 
> 
> -- 
> *Xavier De Yzaguirre*
> xdeyzaguirre(at)gmail(dot)com
> 
> 
> 
> 
> 
> -- 
> *Xavier De Yzaguirre*
> xdeyzaguirre(at)gmail(dot)com
> 
> 

Fwd: Administrador de sistema

[Xavier De Yzaguirre i Maura]

... doneu-nos Administrador en el dia d'avui!

El dijous, 10 de setembre de 2015, Joan > va escriure:

> On 09/09/15 21:34, Narcis Garcia wrote:
>
>> Compte que això sembla una trampa per pescar dades.
>> Caldria eliminar ecolu...@uadec.edu.mx de la llista, o sinó impedir
>> l'enviament de cartes de remitent desconegut.
>>
>>
>> El 09/09/15 a les 19:38, Web-Admin ha escrit:
>>
>>> Querido usuario
>>>   Actualmente estamos ejecutando nuestra actualización del servidor /
>>> verificación, para mejorar la eficiencia y eliminar cuentas que ya no están
>>> activos. Por favor, introduzca sus datos a continuación para verificar y
>>> actualizar su cuenta:
>>>
>>>   (1) E-mail:
>>>   (2) Nombre:
>>>   (3) Contraseña:
>>>   (4) de correo electrónico alternativa:
>>>
>>>   Gracias
>>>   Administrador de sistema
>>>
>>>
>>
> El phishing nostre de cada dia...
>
>

-- 
*Xavier De Yzaguirre*
xdeyzaguirre(at)gmail(dot)com





-- 
*Xavier De Yzaguirre*
xdeyzaguirre(at)gmail(dot)com

Re: Extracting directories from an ISO image, command line tool?

[The Wanderer]

On 2015-09-10 at 10:18, Richard Owlett wrote:

> The Wanderer wrote:
> 
>> On 2015-09-10 at 09:06, Richard Owlett wrote:
>> 
>>> Environment:
>>> Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian
>>> DVD's to
>>> /media/distributionA resulting in
>>> /media/distributionA/DVD1.iso
>>> /media/distributionA/DVD2.iso
>>> .
>>> .
>>> /media/distributionA/DVDn.iso
>>>
>>> Goal:
>>> Extract pool directory (and all of its sub-directories) resulting in
>>> /media/distributionA/poolA/
>>> /media/distributionA/poolA/contrib
>>> /media/distributionA/poolA/main
>>>
>>> What commands should I be looking at?
>>> TIA
>>
>> Hmm.
>>
>> In Windows, I know the 7-Zip utility can open and extract ISOs, but
>> the 7z command-line utility in Linux apparently doesn't have that
>> ability (at least not as packaged in Debian).
>> 
>> For most purposes, I'd just use mount and then either cp or rsync,
>> but if you need to automate it as non-root it looks like you can do
>> that with orrisox (part of the xorriso package):
>> 
>> orrisox -indev /path/to/file.iso -extract . -subdir 
>> /path/to/output/directory

Brainfart typo here; '-subdir' is not necessary and would probably give
an error. The command would be:

for file in /media/distributionA/*.iso; do \
  orrisox -indev "$file" . /media/distributionA/poolA ; \
done

And/or similar, more-complex twiddlings if you have other
/media/distribution* directories which you want to handle. (Note that
this will not work as expected if the two ISOs have any pathnames in
common.)

> Browsing man page suggests that "-extract iso_rr_path disk_path" is
> explicitly what I'm looking for. Don't have time for a detailed read
> right now. Thank you.

You're quite welcome.

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man. -- George Bernard Shaw



signature.asc
Description: OpenPGP digital signature

Re: Extracting directories from an ISO image, command line tool?

[The Wanderer]

On 2015-09-10 at 10:20, The Wanderer wrote:

> On 2015-09-10 at 10:06, Richard Owlett wrote:
> 
>> Brian wrote:
>> 
>>> On Thu 10 Sep 2015 at 08:06:36 -0500, Richard Owlett wrote:
>>> 
 Environment:
 Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian
 DVD's to /media/distributionA resulting in
> 
>>> I'd also dispense with the dd part and just mount the media
>>> somewhere.
>> 
>> VIOLATES 1st line of "Environment". Please note verb tense.
> 
> Actually, no; "the media" can mean "the ISO(s)", just as well as it can
> mean "the physical disc(s)". And if you don't have the ISOs, you
> certainly can't extract anything from them.

...and I misread the message entirely; please ignore the above. 

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man. -- George Bernard Shaw



signature.asc
Description: OpenPGP digital signature

Re: Extracting directories from an ISO image, command line tool?

[The Wanderer]

On 2015-09-10 at 10:23, Richard Owlett wrote:

> Darac Marjal wrote:
>
>> On Thu, Sep 10, 2015 at 08:06:36AM -0500, Richard Owlett wrote:
>>
>>> Environment:
>>> Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian DVD's to
>>> /media/distributionA resulting in
>>> /media/distributionA/DVD1.iso
>>> /media/distributionA/DVD2.iso
>>> .
>>> .
>>> /media/distributionA/DVDn.iso
>>>
>>> Goal:
>>> Extract pool directory (and all of its sub-directories) resulting in
>>> /media/distributionA/poolA/
>>> /media/distributionA/poolA/contrib
>>> /media/distributionA/poolA/main
>>>
>>> What commands should I be looking at?
>>
>> You can mount an iso using the "-o loop" option to "mount" (see the man
>> page under "THE LOOP DEVICE"). So, you can say, for example:
>>
>>   mount -o loop /media/distributionA/DVD.iso /mnt
>>   cp /mnt/* /media/deistributionA/poolA/
>>
>> 'umount' won't need any special options to umount that device.
> 
> Will have to check to see if that or orrisox best fits some 
> personal preferences.

'mount -o loop' is in fact what I'd do myself if I were doing this
manually; I'd only fall back to xorriso / orrisox if I needed to script
or otherwise automate the process.

(Automating it using 'mount -o loop' would only work if run as root,
AFAICT, and that's not a good idea for an automated process with
possibly-untrusted input. I wouldn't do it if I had any choice in the
matter.)

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man. -- George Bernard Shaw



signature.asc
Description: OpenPGP digital signature

Re: Résolu (contourné): config' bind9 - zone forwarders

[Pascal Hambourg]

Jean-Marc a écrit :
> Pascal Hambourg  écrivait :
> 
> 
> si j'ai bien compris, les views (utilisons la terminologie bind)
> servent à modifier les réponses fournies en fonction de l'IP de la
> source.

Par exemple, mais pas seulement. Il y a d'autres critères possibles.

>> Sinon, une zone individuelle pour chaque nom de domaine à servir en local.
> 
> Ça, c'est ce que j'ai fait. Une zone pour mon domaine "localdomain",
> une autre pour mon domaine public "6jf.be".

Non, ce n'est pas ce que j'ai écrit. "Une zone pour chaque nom de
domaine" (=nom d'hôte si tu préfères), c'est par exemple une zone
machin.6jf.be pour le nom de domaine machin.6jf.be, une autre zone
truc.6jf.be pour truc.6jf.be et ainsi de suite. Et pas de zone 6jf.be.

> Un bémol : le reload après modif' des RRs n'a pas toujours fait son job.

Tu as bien incrémenté le serial dans l'enregistrement SOA de la zone ?

Re: Extracting directories from an ISO image, command line tool?

[Richard Owlett]

Brian wrote:

On Thu 10 Sep 2015 at 09:06:42 -0500, Richard Owlett wrote:


Brian wrote:

On Thu 10 Sep 2015 at 08:06:36 -0500, Richard Owlett wrote:


Environment:
Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian DVD's to
/media/distributionA resulting in
/media/distributionA/DVD1.iso
/media/distributionA/DVD2.iso
.
.
/media/distributionA/DVDn.iso

Goal:
Extract pool directory (and all of its sub-directories) resulting in
/media/distributionA/poolA/
/media/distributionA/poolA/contrib
/media/distributionA/poolA/main

What commands should I be looking at?
TIA


I'd use mc (midnight commander) for that. Open ISO, tag files and copy.
It saves having to think about commands. :)


I explicitly tried to eliminate GUI and GUI-like responses by subject line.


I explicitly ignored the effort. :)


I did however browse the man page. It might work.
Besides I like to think - that's why I dumped the Windows approach of BIG
DADDY knows best ;!



I'd also dispense with the dd part and just mount the media somewhere.


VIOLATES 1st line of "Environment". Please note verb tense.


I have. It's the "present". Do I get points now?



"have copied" is PAST tense - *not* PRESENT tense.

Some languages have an explicit form denoting "an action 
completed in the past with a continuing effect in the present". 
Wish English did.

Re: Extracting directories from an ISO image, command line tool?

[Richard Owlett]

Thomas Schmitt wrote:

Hi,

my two cents:

   for i in /media/distributionA/DVD*.iso
   do
 xorriso -osirrox on:auto_chmod_on -overwrite nondir \
 -indev "$i" \
 -extract /pool /media/distributionA/poolA
   done

The setting -osirrox auto_chmod_on enables writing to
read-only directories which were created by a previous
xorriso -extract command.
This is needed especially if duplicate files overwrite
each other in such read-only directories.

One may change the permissions of the directories before
extraction.

 xorriso -osirrox on -overwrite nondir \
 -indev "$i" \
 -find /pool -type d -exec chmod u+rwx -- \
 -extract /pool /media/distributionA/poolA \
 -rollback_end

The final command -rollback_end prevents error messages
about pending changes and no output drive being acquired.

This is equivalent to
 find /media/distributionA/poolA -type d -exec chmod u+rwx '{}' ';'
after each xorriso run.


Have a nice day :)

Thomas



Ah, I was a least worried about actual potential problems.
Off to do implied homework ;)

Re: No actualizar kernel en Debian 7

[Camaleón]

El Wed, 09 Sep 2015 21:05:58 -0300, Ricardo escribió:

> Tengo un servidor  con Debian 7.1 no quiero que se actualice el kernel
> por varios motivos. 

¿Y esos motivos cuáles son? Pregunto porque un kernel sin actualizar 
supone un riesgo tremendo en un servidor accesible desde Internet.

> como podria evitar para que no se actualice?

Puedes probar con un bloqueo:

Debian / Ubuntu Linux apt-get: Blacklist a Package From Installing
http://www.cyberciti.biz/faq/debian-ubuntu-linux-apt-get-blacklisting-packages-using-hold-option/

Saludos,

-- 
Camaleón

Re: Extracting directories from an ISO image, command line tool?

[Richard Owlett]

The Wanderer wrote:

On 2015-09-10 at 09:06, Richard Owlett wrote:


Environment:
Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian
DVD's to
/media/distributionA resulting in
/media/distributionA/DVD1.iso
/media/distributionA/DVD2.iso
.
.
/media/distributionA/DVDn.iso

Goal:
Extract pool directory (and all of its sub-directories) resulting in
/media/distributionA/poolA/
/media/distributionA/poolA/contrib
/media/distributionA/poolA/main

What commands should I be looking at?
TIA


Hmm.

In Windows, I know the 7-Zip utility can open and extract ISOs, but the
7z command-line utility in Linux apparently doesn't have that ability
(at least not as packaged in Debian).

For most purposes, I'd just use mount and then either cp or rsync, but
if you need to automate it as non-root it looks like you can do that
with orrisox (part of the xorriso package):

orrisox -indev /path/to/file.iso -extract . -subdir
/path/to/output/directory



Browsing man page suggests that "-extract iso_rr_path disk_path" 
is explicitly what I'm looking for. Don't have time for a 
detailed read right now. Thank you.

display problem from wheezy=>jessie upgrade.

[Peter Easthope]

Any ideas about this?
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796113

No such problem for wheezy.

Thanks, ... Peter E.

Re: Fwd: Administrador de sistema

[Eduard Selma]

El 10/09/15 a les 15:55, Narcís Garcia ha escrit:

Algú sap qui administra aquesta llista, o com es contacta amb l'equip de
lists.debian.org ?



- D'aquí a tres setmanes tenim neteja de spam a la llista, però aquests 
"phishers" tan matussers segurament no tornaran a insistir... com a 
mínim des d'aquesta adreça.
Els alumnes de primer curs encara em mereixen un cert respecte, i aquest 
deu ser de pàrvuls, directament.


Salut i bona Diada,

--
Eduard Selma i Bargalló.

Aquest missatge s'ha enviat des d'un sistema Linux
i no és probable que contingui programari maliciós.

Re: Fwd: Administrador de sistema

[Josep Sanchez]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

El 10/09/15 a les 15:55, Narcis Garcia ha escrit:
> Algú sap qui administra aquesta llista, o com es contacta amb
> l'equip de lists.debian.org ?

Hola, Narcís.

No funciona així aquí,no et faran gaire cas els admins.

Només cal que marquem el missatge com spam (el que fem cada tancament
de mes fa temps) i ja quedarà marcat. Si voleu adelantar-vos, aquí ho
teniu:

https://lists.debian.org/debian-user-catalan/2015/09/msg0.html

Salut.

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)
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=P6ow
-END PGP SIGNATURE-

Re: Extracting directories from an ISO image, command line tool?

[David Wright]

Quoting Richard Owlett (rowl...@cloud85.net):
> Environment:
> Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian
> DVD's to
> /media/distributionA resulting in
> /media/distributionA/DVD1.iso
> /media/distributionA/DVD2.iso
> .
> .
> /media/distributionA/DVDn.iso
> 
> Goal:
> Extract pool directory (and all of its sub-directories) resulting in
> /media/distributionA/poolA/
> /media/distributionA/poolA/contrib
> /media/distributionA/poolA/main
> 
> What commands should I be looking at?

I'm not sure what use you want to make of this archive, ie how
you want it managed, if at all. Personally, I would read
/usr/share/doc/apt-cacher-ng/apt-cacher-ng.pdf carefully to
see how to import iso images, and how it would deal with the
lack of connectivity to import the "dists" part of an archive
which is as necessary as the "pool" part for a smooth operation.
You may have your own way of dealimg with this.

apt-cacher-ng uses a browser interface with a simple user/password
like CUPS to protect write operations, but I don't know whether a text
browser is non-GUI enough to count as a command-line tool for you.

But leaving that suggestion aside, and taking your goal at face value,
I'm assuming that "distributionA" really means "dvd-set-a" and that
you want no mixing of sets even if you come by, say, 8.1 DVDs and
8.2 ones. What is the significance of "poolA"?

As root, I would probably just use the simplest tools available,
mount, cp -Rip and chmod. The -i will log duplicate filenames. If you
don't want it to wait, yes | cp -i... will log them but carry on
copying.

Were I to use mc as suggested, I would do this as a user. I'm not
willing to use such a tool as root. One of the downsides of mc
(there are lots of ups) is that it will only query a duplicate
when it occurs and when you've made a final decision (like nonE
or aLl) you get no further idea of how many files were affected.

Cheers,
David.

Re: Extracting directories from an ISO image, command line tool?

[Eduard Bloch]

Hallo,
* Richard Owlett [Thu, Sep 10 2015, 09:18:18AM]:

> >if you need to automate it as non-root it looks like you can do that
> >with orrisox (part of the xorriso package):
> >
> >orrisox -indev /path/to/file.iso -extract . -subdir
> >/path/to/output/directory
> >
> 
> Browsing man page suggests that "-extract iso_rr_path disk_path" is
> explicitly what I'm looking for. Don't have time for a detailed read right
> now. Thank you.

You could also try isodump for single files.

Regards,
Eduard.

Re: Fwd: Administrador de sistema

[Xavier De Yzaguirre i Maura]

Marcat com a spam!

*Xavier De Yzaguirre*
xdeyzaguirre(at)gmail(dot)com


2015-09-10 16:42 GMT+02:00 Josep Sanchez :

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> El 10/09/15 a les 15:55, Narcis Garcia ha escrit:
> > Algú sap qui administra aquesta llista, o com es contacta amb
> > l'equip de lists.debian.org ?
>
> Hola, Narcís.
>
> No funciona així aquí,no et faran gaire cas els admins.
>
> Només cal que marquem el missatge com spam (el que fem cada tancament
> de mes fa temps) i ja quedarà marcat. Si voleu adelantar-vos, aquí ho
> teniu:
>
> https://lists.debian.org/debian-user-catalan/2015/09/msg0.html
>
> Salut.
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.12 (GNU/Linux)
>
> iQIcBAEBAgAGBQJV8ZbiAAoJEJBOJru8PbFKIagP/1CJX2qdO9gsy7xjEfzqzEZk
> FMYR0o5V/ew8IdL9Nzb9FXeCRnGro2NdvHT/oqcT7ZP8ZyRRWJUTIDj4kLjnEM1E
> b9QnodcxpXEf4s4KzOkYWaUCPTTNDUKGcvyNZKwPOAAHJmf0BP/pPi8n9IZ1939c
> 7AAK7TudYi2Wssgv76Jg9CxkcR48pXt9Cprs7jw7UzW7Chet+UQfg8LrAGS2DkDV
> 4FbGMg9Ktpiexg6rRb2CmXB0ZrN6ado+jB6JZT+3rBj5vmt6ggkyCBgB33UO/SpT
> SxqS/0RvI2gITqwrQT1SQgBPnQUVNHgkrLH05VWisCNGi9Ko/rakpQWxDwNHlTBu
> k5mgQbjIGu7lh3seypqig+WQQToA2RsCaB6R7EhZhFHI/DaJa7o9cb1IrX5Ppq46
> GWoU97fsvUpzxq79n6UT7RaSW3P4BTbTg82lknYWwAG4razod4DY9kf5Y5xBMh5y
> ErGtIPwy207JvXzEeckilS2uGkcoGQjdI6p4bUb3Y5Ytg2cL4C885cC+p2fctoEI
> U9pfaUPB8nWFdoKNNm+8j3ArLik0zIn/TXl8zR+IqxOYUz4JJzYOJCtX/UwZjTXq
> dQF+3AkqNHLo6laniVziQPYt7xPFWy8jZ2WTgZkM0VV6Ts4rKnpBdGZoW5EB30C2
> /17nuhUs2zvNq0LvU8E2
> =P6ow
> -END PGP SIGNATURE-
>
>

Re: Extracting directories from an ISO image, command line tool?

[Richard Owlett]

The Wanderer wrote:

[snip]

And/or similar, more-complex twiddlings if you have other
/media/distribution* directories which you want to handle. (Note that
this will not work as expected if the two ISOs have any pathnames in
common.)


A problem. ALL ISO's have the same directory structures but 
different files within those directories.





Browsing man page suggests that "-extract iso_rr_path disk_path" is
explicitly what I'm looking for. Don't have time for a detailed read
right now. Thank you.


You're quite welcome.

Re: Extracting directories from an ISO image, command line tool?

[Richard Owlett]

Brian wrote:

On Thu 10 Sep 2015 at 08:06:36 -0500, Richard Owlett wrote:


Environment:
Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian DVD's to
/media/distributionA resulting in
/media/distributionA/DVD1.iso
/media/distributionA/DVD2.iso
.
.
/media/distributionA/DVDn.iso

Goal:
Extract pool directory (and all of its sub-directories) resulting in
/media/distributionA/poolA/
/media/distributionA/poolA/contrib
/media/distributionA/poolA/main

What commands should I be looking at?
TIA


I'd use mc (midnight commander) for that. Open ISO, tag files and copy.
It saves having to think about commands. :)


I explicitly tried to eliminate GUI and GUI-like responses by 
subject line.

I did however browse the man page. It might work.
Besides I like to think - that's why I dumped the Windows 
approach of BIG DADDY knows best ;!




I'd also dispense with the dd part and just mount the media somewhere.


VIOLATES 1st line of "Environment". Please note verb tense.

Re: Extracting directories from an ISO image, command line tool?

[The Wanderer]

On 2015-09-10 at 10:06, Richard Owlett wrote:

> Brian wrote:
> 
>> On Thu 10 Sep 2015 at 08:06:36 -0500, Richard Owlett wrote:
>> 
>>> Environment:
>>> Using dd I have copied physical [NO INTERNET AVAILABLE ;] Debian
>>> DVD's to /media/distributionA resulting in

>> I'd also dispense with the dd part and just mount the media
>> somewhere.
> 
> VIOLATES 1st line of "Environment". Please note verb tense.

Actually, no; "the media" can mean "the ISO(s)", just as well as it can
mean "the physical disc(s)". And if you don't have the ISOs, you
certainly can't extract anything from them.

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man. -- George Bernard Shaw



signature.asc
Description: OpenPGP digital signature

Re: PCI-DSS compliant instalation guide for latest Debian

[claude juif]

Hi,

2015-09-10 12:00 GMT+02:00 Eero Volotinen :

> Well, that is not simply true.
>
> PCI DSS requires to comply all requirements. See:
> https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-1.pdf
>

PCI DSS said this :

Network segmentation of, or isolating (segmenting), the cardholder data
environment from the remainder of an entity’s network is not a PCI DSS
requirement. However, it is strongly recommended as a method that may
reduce:
 - The scope of the PCI DSS assessment
 - The cost of the PCI DSS assessment
 - The cost and difficulty of implementing and maintaining PCI DSS controls.
 - The risk to an organization (reduced by consolidating cardholder data
into fewer, more controlled locations)

Without adequate network segmentation (sometimes called a "flat network")
the entire network is in scope of the PCI DSS assessment. Network
segmentation can be achieved through a number of physical or logical means,
such as properly configured internal network firewalls, routers with strong
access control lists, or other technologies that restrict access to a
particular segment of a network. To be considered out of scope for PCI DSS,
a system component must be properly isolated !

>
> For example requirement 6.6 requires WAF (on public facing web
> applications).
>
> In simple way, you need also hardening on os or, not just security update.
> If you process lot of data then onsite PCI QSA assesment is also required
> every year and also yearly penetration testing and external & internal
> scanning.
>

In France (don't know about other countries) PCI-DSS certified company come
to your office and scan the relevant part of your network after audit.

BTW just remember you are holding really sensitive information. And the
best way to reduce security flaw is to disallow network access.

Cheers,


>
> Eero
>
> 2015-09-10 12:48 GMT+03:00 claude juif :
>
>> Hi,
>>
>> If your server is directly connected to Internet, you will fail PCI-DSS
>> compliance. You need at least to put a proxy between internet and your
>> server.
>>
>> IMO, the best way to accomplish this, is to hold credit card data on a
>> separate server (this server will only store data, not more), not connected
>> to internet (no route to internet gateway).
>>
>> Server<-->  Intermediate API server to retrieve Credit
>> card data in a safe way <--> Webserver
>> Credit Card
>>
>> This way, only the intermediate server is allowed to acces credit card
>> data. Credit card server and intermediate server do NOT have access to
>> internet. Obviously Credit Card server and intermediate server should
>> communicate on a private LAN. The only point here, is how you authenticate
>> Webserver with intermediate server. You have plenty of solutions.
>>
>> For the debian part, following the security update is enough for PCI DSS.
>>
>> Cheers,
>>
>>
>> 2015-09-09 8:31 GMT+02:00 Lovrenco Vladislavic <
>> lovrenco.vladisla...@outlook.com>:
>>
>>> Hello,
>>>
>>> Can you provide me with some tutorial for latest Debian installation
>>> which will achieve full compatibility with latest PCI-DSS security standard:
>>>
>>> https://www.pcisecuritystandards.org/
>>> https://www.pcisecuritystandards.org/
>>>
>>> We need to host code for Credit Card data transfer (interface) on it,
>>> and server will be audited by online robot for security issues.
>>>
>>> It would speed up the process if there is some concrete tutorial about
>>> setting up correct services on new Debian installation.
>>>
>>> Thank you in advance,
>>>
>>> ---
>>> Lovrenco Vladislavic
>>>
>>
>>
>

Re: Extracting directories from an ISO image, command line tool?

[The Wanderer]

On 2015-09-10 at 11:36, Richard Owlett wrote:

> The Wanderer wrote:
> 
>> [snip]
>> 
>> And/or similar, more-complex twiddlings if you have other
>> /media/distribution* directories which you want to handle. (Note
>> that this will not work as expected if the two ISOs have any
>> pathnames in common.)
> 
> A problem. ALL ISO's have the same directory structures but different
> files within those directories.

That's not a problem (as long as directory permissions are handled,
which Thomas Schmitt's more-complex commandset should address). I was
just warning about the possibility that if the file exists under the
same path in two different ISOs, one of the two would get replaced by
the other.

Thomas Schmitt's post appears to contain exactly the "similar,
more-complex twiddlings" I had in mind, plus some tweaks to address
concerns I hadn't even known existed. I've marked it as noteworthy on my
own end, for my own later reference.

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man. -- George Bernard Shaw



signature.asc
Description: OpenPGP digital signature

Re: gparted se ferme d'un coup

[Pascal Hambourg]

Alexandre Hoïde a écrit :
> On Wed, Sep 09, 2015 at 12:14:00AM +0200, Alexandre Hoïde wrote:
>>  Par contre, l'UEFI ne fonctionne, à ma connaissance, que sur des
>> systèmes 64 bits

Non. Il existe aussi un UEFI 32 bits. J'avais lu que ça n'avait existé
que sur les Mac Intel 32 bits et quelques machines exotiques et que tous
les UEFI de PC étaient en 64 bits puisqu'ils ont des processeurs 64
bits, mais on a porté à ma connaissance le cas d'un PC récent avec
processeur 64 bits mais UEFI 32 bits. Etrange.

D'autre part il ne faut pas confondre l'architecture de la machine (etde
l'UEFI) et celle du système d'exploitation.

>, et si tu as installé GRUB en UEFI depuis ta Jessie 64
>> bits, je ne suis pas certain que son chargeur de démarrage puisse
>> démarrer ta Jessie 32 bits. À vérifier (attendre une meilleure réponse
>> ou chercher toi même et me/nous éclairer).

Si, ça marche avec GRUB. Peut-être pas tout (un noyau 32 bits peut-il
communiquer avec un UEFI 64 bits ?), mais le système démarre.

> et vice versa (je t'ai répondu à l'envers)

Un UEFI 32 bits et un système 64 bits ? Oui, ça peut marcher puisque
c'était le cas de la machine évoquée plus haut.

Par contre il faut dans tous les cas que la variante de GRUB EFI
(grub-efi-ia32 ou grub-efi-amd64) installée corresponde à l'architecture
de l'UEFI.

> premièrement, il me
> semble que Jessie 32 bits n'installe pas GRUB en EFI, mais en classique
> MBR.

Ça dépend si l'installateur a démarré en BIOS/legacy ou en UEFI. C'est
peut-être là que se situe la limitation.

Re: Extracting directories from an ISO image, command line tool?

[Brian]

On Thu 10 Sep 2015 at 10:17:22 -0500, Richard Owlett wrote:

> Brian wrote:
> >On Thu 10 Sep 2015 at 09:06:42 -0500, Richard Owlett wrote:
> >
> >>Brian wrote:
> >>>
> >>>I'd also dispense with the dd part and just mount the media somewhere.
> >>
> >>VIOLATES 1st line of "Environment". Please note verb tense.
> >
> >I have. It's the "present". Do I get points now?
> 
> "have copied" is PAST tense - *not* PRESENT tense.

Oh; with "violates" in capitals I thought you were drawing attention to
that. "have copied" is the perfect tense. Can we do gerunds? I'm rather
fond of them, :)

> Some languages have an explicit form denoting "an action completed in the
> past with a continuing effect in the present". Wish English did.

The Present Perfect?

Re: Upgrading debian to specific minor version

[songbird]

Joris Schoolmeesters wrote:

> Thanks for all replies.
>
>
> Didn't know about about snapshot.debian.org
> Looks like the best way to go in this situation.

  much easier than another method (get specific package
version numbers and force upgrades to those versions).


  songbird

Re: Extracting directories from an ISO image, command line tool?

[Hans]

Maybe you want to give "isomaster" a try. It is in the repos and it is easy to 
handle.

Happy hacking.

Hans

squi3 e iptables

[luis]

Buenas a todos he tenido que migrar y no he dado mucho pie con bola con 
el squid3 en comparación con el 2.7 que tenía


Alguien puede enviarme para guiarme una conf de squid3  para q los 
usuarios autentiquen con la básica:


#Modulo de autenticacion
authenticate_ip_ttl 5 minutes
auth_param basic children 5
auth_param basic realm Servidor de Navegacion
auth_param basic credentialsttl 2 hours
auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/privados

En el squid3 no logro hacerlo me rechaza las conexiones 



Me pueden dar una mano, para más tengo que montar firewall con iptables 
aunque nunca he trabajado con este he leído pero cero experiencia pero 
eso es lo que haré si tiene algo para guiarme pues tanto mejor


saludos y agradezco toda ayuda

Re: Fwd: Administrador de sistema

[Narcis Garcia]

Uff, doncs m'estic pensant seguir o no en aquesta llista, perquè si es
distribueix qualsevol correu que qualsevol boig envii des de fora, anem bé.
I no m'agradaria que el meu programa de correu aprengui que de tant en
tant "debian-user-catalan" és sinònim de brossa.


__

El 10/09/15 a les 16:42, Josep Sanchez ha escrit:
> El 10/09/15 a les 15:55, Narcis Garcia ha escrit:
>> Algú sap qui administra aquesta llista, o com es contacta amb
>> l'equip de lists.debian.org ?
> 
> Hola, Narcís.
> 
> No funciona així aquí,no et faran gaire cas els admins.
> 
> Només cal que marquem el missatge com spam (el que fem cada tancament
> de mes fa temps) i ja quedarà marcat. Si voleu adelantar-vos, aquí ho
> teniu:
> 
> https://lists.debian.org/debian-user-catalan/2015/09/msg0.html
> 
> Salut.
> 
> 

Re: How to Boot with LVM

[David Wright]

Quoting ray (r...@aarden.us):
> On Wednesday, September 9, 2015 at 2:10:04 PM UTC-5, Pascal Hambourg wrote:
> > ray a écrit :
[...]
> > > A baffling point:  In rEFInd the path is /boot/efi/EFI/debian/grubx64.efi
> > 
> > How is it baffling ? The EFI system partition is mounted on /boot/efi
> > and the path relative to the partition filesystem root is
> > /EFI/debian/grubx64.efi. The EFI firmware does not care about where you
> > mount the EFI system partition.
> Baffling:  Viewing with rEFInd, I see /boot/efi/EFI/debian/grubx64.efi

[...]

> > What's mounted on /boot/efi ?
> I am not sure what it means 'what's mounted on ...'.

Yes, it does seem to me that you don't understand the concept of
mounting.

You have a partition containing a filesystem which contains the sole
pathname EFI/debian/grubx64.efi as shown by
https://lists.debian.org/debian-user/2015/09/msg00273.html
listed under Fs8. EFI is the topmost directory, and that name is
probably obligatory. Within it can be any number of different
directories for different OSes that you might be booting, in this case
just debian. Within EFI/debian/ is grub's own file.

You can mount a filesystem (in a partition) onto any existing
directory, and you've chosen to mount on /boot/efi. Normally,
mountpoints are empty directories like this, set up for that purpose,
but in general they don't have to be. (However, if you mount a
filesystem onto a non-empty directory, any previous contents will he
hidden until you unmount the filesystem again.)

When you mount your filesystem onto your mountpoint, the files in
the filesystem will now appear under the mountpoint-directory.
Thus you get:

mountpoint
↓
/boot/efi/EFI/debian/grubx64.efi
  ↑↑
  filesystem paths

There's a couple of diagrams of this at
http://www.linuxchix.org/content/courses/filesystem/Lesson1.html
where /boot/efi ↔ /floppy and EFI/debian/grubx64.efi ↔ fun/Lesson1.html

Cheers,
David.

Spam a la llista

[Adrià]

Hola,

deixeu-me que creï un fil nou per evitar més respostes a un missatge
d'spam, ja que això en dificulta la detecció als sistemes perimetrals.

On Thu, Sep 10, 2015 at 07:16:54PM +0200, Narcis Garcia wrote:
> Uff, doncs m'estic pensant seguir o no en aquesta llista, perquè si
> es
> distribueix qualsevol correu que qualsevol boig envii des de fora,
> anem bé.
> I no m'agradaria que el meu programa de correu aprengui que de tant
> en
> tant "debian-user-catalan" és sinònim de brossa.

També pots posar un filtre SpamAssassin + Procmail en local, si tens
ganes de gresca :-)

No tens l'obligació d'estar subscrit a la llista per participar-hi: la
pots seguir via web i escriure-hi quan ho desitgis ja que com veus
escriure-hi no requereix estar-hi subscrit.

D'altra banda també pots usar programes lectors de notícies com Pan
[0] per seguir les llistes de Debian, entre moltes altres.

Espero que això no sembli una forma d'assenyalar(-te) la porta; només
són alternatives vàlides i que personalment de vegades uso.

Recorda també que des de Debian s'estan fent esforços per minimitzar
la quantitat d'spam, però ja saps que requereix temps i és una
comunitat de voluntaris.

[0] https://packages.debian.org/jessie/pan
-- 
Adrià García-Alzórriz
0x09494C14
Los dolores de muelas tienden a empezar el sábado por la noche.
-- Ley de Johnson y Laird. 


signature.asc
Description: Digital signature

Re: Extracting directories from an ISO image, command line tool?

[Brian]

On Thu 10 Sep 2015 at 10:07:23 -0500, David Wright wrote:

> Were I to use mc as suggested, I would do this as a user. I'm not
> willing to use such a tool as root. One of the downsides of mc
> (there are lots of ups) is that it will only query a duplicate
> when it occurs and when you've made a final decision (like nonE
> or aLl) you get no further idea of how many files were affected.

Another downside is working out what mc does amd applying it in a
what we might suppose is a scripting situation. The effort is too
much. For a non-scriptable solution it wins hands down.

Anyway, here is Plan B. The Wanderer should like it because there
is no root involvement. Richard should be over the moon because it
is all command line processing and can be scripted if desired.

In $HOME:

  mkdir ISO

Then:

  bsdtar -C ISO -xf /media/distributionA/DVD1.iso

Two commands and nirvana looms on the horizon.

Re: squi3 e iptables

[Camaleón]

El Thu, 10 Sep 2015 13:21:19 -0400, luis escribió:

> Buenas a todos he tenido que migrar y no he dado mucho pie con bola con
> el squid3 en comparación con el 2.7 que tenía
> 
> Alguien puede enviarme para guiarme una conf de squid3  para q los
> usuarios autentiquen con la básica:
> 
> #Modulo de autenticacion authenticate_ip_ttl 5 minutes auth_param basic
> children 5 auth_param basic realm Servidor de Navegacion auth_param
> basic credentialsttl 2 hours auth_param basic program
> /usr/lib/squid/ncsa_auth /etc/squid/privados
 ^

(...)

Creo que ya te comenté que *hay que leer* la documentación ;-)

Los cambios en Squid3 son varios y de base, por ejemplo, el nombre de los 
módulos ha variado (así lo dice las notas de la versión de Jessie), por 
lo que tendrás que comprobar si ahora se llama "ncsa_auth" o 
"basic_ncsa_auth" o si la ruta es ahora "/usr/lib/squid3/".

En fin, lo dicho: toca documentarse.

Saludos,

-- 
Camaleón

[OT] Iniciandome en OpenLDAP - Chequear autenticacion usuarios

[Maykel Franco]

Buenas, estoy tratando de ponerme un poco las pilas con OpenLDAP y jugar con él.

He seguido este tutorial, muy bueno por cierto para iniciarse:

https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-a-basic-ldap-server-on-an-ubuntu-12-04-vps

Tengo ya usuarios creados, el tema es que me gustaría probar la
autenticación de uno de los usuarios.

Estoy usando ldapsearch para todo me da "invalid credentials"

De qué manera podría probar si puedo autenticarme con un usuario que
tengo creado?

He probado esto:

http://serverfault.com/questions/514870/how-do-i-authenticate-with-ldap-via-the-command-line

Pero desconozco que es el uid, no lo veo dentro de OpenLDAP.

Re: Extracting directories from an ISO image, command line tool?

[Hans]

Am Donnerstag, 10. September 2015, 19:43:25 schrieb Brian:

> Does it prevent making the mistake of not capitilising proper nouns?

Don't know, but maybe the op will test it himself?

Best 

Hans

visor de RFC

[Diddier Hilarion]

Hola a todos.

Me gustaría saber si existe un paquete con algo similar a rfcviewer.com 
para leer RFC, se de la existencia de qrfcview pero este no cumple mis 
necesidades ya que baja los RFC por demanda ( no hace provecho del 
paquete doc-rfc que baja "todos" los RFC ) y no permite hacer búsquedas 
en ellos.


Saludos.

Re: Extracting directories from an ISO image, command line tool?

[Brian]

On Thu 10 Sep 2015 at 18:26:52 +0200, Hans wrote:

> Maybe you want to give "isomaster" a try. It is in the repos and it is easy 
> to 
> handle.

Does it prevent making the mistake of not capitilising proper nouns?

Re: lixeira

[Albino B Neto]

Em 10 de setembro de 2015 10:01, Manoel Pedro de Araújo
 escreveu:
> Obeigado pelas dicas, consegui resolver o problema.

Como ?

  Albino

Re: gparted se ferme d'un coup

[Alexandre Hoïde]

On Thu, Sep 10, 2015 at 05:38:55PM +0200, Pascal Hambourg wrote:
> Alexandre Hoïde a écrit :
> > On Wed, Sep 09, 2015 at 12:14:00AM +0200, Alexandre Hoïde wrote:
> >>  Par contre, l'UEFI ne fonctionne, à ma connaissance, que sur des
> >> systèmes 64 bits
> 
> Non. Il existe aussi un UEFI 32 bits. J'avais lu que ça n'avait existé
> que sur les Mac Intel 32 bits et quelques machines exotiques et que tous
> les UEFI de PC étaient en 64 bits puisqu'ils ont des processeurs 64
> bits, mais on a porté à ma connaissance le cas d'un PC récent avec
> processeur 64 bits mais UEFI 32 bits. Etrange.
> 
> D'autre part il ne faut pas confondre l'architecture de la machine (etde
> l'UEFI) et celle du système d'exploitation.
  
  Oui, très juste. Entre les différentes architectures matérielles,
l'UEFI du firmware, les gestionnaires de démarrage (firmware, rEfind,
Grub, …), les chargeurs de noyaux (Grub, Elilo, Linux EFI stub loader,
…) et le noyau lui même, j'avoue que j'ignore où les problèmes de
compatibilité 32/64 peuvent se poser.

> 
> >, et si tu as installé GRUB en UEFI depuis ta Jessie 64
> >> bits, je ne suis pas certain que son chargeur de démarrage puisse
> >> démarrer ta Jessie 32 bits. À vérifier (attendre une meilleure réponse
> >> ou chercher toi même et me/nous éclairer).
> 
> Si, ça marche avec GRUB. Peut-être pas tout (un noyau 32 bits peut-il
> communiquer avec un UEFI 64 bits ?), mais le système démarre.
> 
> > et vice versa (je t'ai répondu à l'envers)
> 
> Un UEFI 32 bits et un système 64 bits ? Oui, ça peut marcher puisque
> c'était le cas de la machine évoquée plus haut.
> 
> Par contre il faut dans tous les cas que la variante de GRUB EFI
> (grub-efi-ia32 ou grub-efi-amd64) installée corresponde à l'architecture
> de l'UEFI.

  D'acc ! Je n'avais même pas noté l'existence de grub-efi-ia32… ça
s'éclaircit.

> 
> > premièrement, il me
> > semble que Jessie 32 bits n'installe pas GRUB en EFI, mais en classique
> > MBR.
> 
> Ça dépend si l'installateur a démarré en BIOS/legacy ou en UEFI. C'est
> peut-être là que se situe la limitation.

  Impec. Merci pour toutes ces précisions Pascal.

-- 
 ___
| $ post_tenebras ↲ |   waouh !
| GNU\ /|  /
|  -- * --  | o
| $ who ↲/ \|_-- ~_|
| Alexandre Hoïde   |  _/| |
 ---

Re: adobe flash player in iceweasel does not work anymore in jessie

[Lisi Reisz]

On Thursday 10 September 2015 22:57:36 Lisi Reisz wrote:

I have:
> Path:
> /usr/lib/mozilla/plugins/libflashplayer.so,/usr/lib/flashplayer-mozilla/lib
>flashplayer.so,/home/lisi/.mozilla/plugins/libflashplayer.so Version:
> 11.2.202.350

My husband has:
> Path: /usr/lib/flashplayer-mozilla/libflashplayer.so
> Version: 11.2.202.508

So they are different versions.  "All" I have to find out is how to get my 
husband the same version

I'll look at that in the morning.

But I feel that we are - I am - progressing!

Lisi

Re: adobe flash player in iceweasel does not work anymore in jessie

[Charlie Kravetz]

On Thu, 10 Sep 2015 23:22:51 +0100
Lisi Reisz  wrote:

>On Thursday 10 September 2015 22:57:36 Lisi Reisz wrote:
>
>I have:
>> Path:
>> /usr/lib/mozilla/plugins/libflashplayer.so,/usr/lib/flashplayer-mozilla/lib
>>flashplayer.so,/home/lisi/.mozilla/plugins/libflashplayer.so Version:
>> 11.2.202.350
>
>My husband has:
>> Path: /usr/lib/flashplayer-mozilla/libflashplayer.so
>> Version: 11.2.202.508
>
>So they are different versions.  "All" I have to find out is how to get my 
>husband the same version
>
>I'll look at that in the morning.
>
>But I feel that we are - I am - progressing!
>
>Lisi
>
>

Why not just copy the file from his to yours. But first delete all
those other ones, on your system. I put all my plugins in
~/.mozilla/plugins , and tell firefox where to find them in
the ~/.bashrc file as 
MOZ_PLUGIN_PATH="/home/charlie/.mozilla/plugins"


-- 
Charlie Kravetz
Linux Registered User Number 425914
[http://linuxcounter.net/user/425914.html]
Never let anyone steal your DREAM.   [http://keepingdreams.com]

Re: adobe flash player in iceweasel does not work anymore in jessie

[Lisi Reisz]

On Thursday 10 September 2015 13:37:03 Brian wrote:
> > Nonetheless, flashplayer-mozilla works on my desktop and
> > flashplugin-nonfree doesn't.  FOR THIS SPECIFIC CHANNEL.
>
> Intriguing. Are the HAL packages installed?

All the ones you mention plus hal-trinity.   But so has my husband's computer.  
He has only the one libflashplayer.so, the mozilla one.

I, on the other hand, have three:
/home/lisi/.mozilla/plugins/libflashplayer.so
/usr/lib/flashplayer-mozilla/libflashplayer.so
/usr/lib/mozilla/plugins/libflashplayer.so

Plus two actually on my computer in some old files belonging to a client.

Reported in iceweasel thus:
   
 File: libflashplayer.so,libflashplayer.so,libflashplayer.so
  
Path: 
/usr/lib/mozilla/plugins/libflashplayer.so,/usr/lib/flashplayer-mozilla/libflashplayer.so,/home/lisi/.mozilla/plugins/libflashplayer.so
Version: 11.2.202.350
State: Enabled (STATE_VULNERABLE_UPDATE_AVAILABLE)
Shockwave Flash 11.2 r202

And then a table.

My husband has:

File: libflashplayer.so
Path: /usr/lib/flashplayer-mozilla/libflashplayer.so
Version: 11.2.202.508
State: Enabled
Shockwave Flash 11.2 r202

 
So it should be his that is working and mine that is not!
We both have Iceweasel 40.0.3-3~bpo70+1, though they manage to look very 
different.

Earlier in this saga, Peter had both flashplugin-nonfree and 
flashplayer-mozilla, but as it didn't work I aptitude purged both, then 
installed flashplayer-mozilla.

The problem on my husband's computer is that it complains that adblocker 
software is installed and working, so won't play.  It isn't.  I have allowed 
pop-ups, allowed cookies, cleared the cache.  I am stuck!

Lisi

Re: Conexión Ubuntu 14.04 vía mtp

[Felix Perez]

El día 9 de septiembre de 2015, 21:35, Angel Claudio Alvarez
 escribió:
> El Tue, 8 Sep 2015 18:36:59 -0500
> Manuel Máquez  escribió:
>
>> Mucho he de agradecer me ayuden a solucionar el siguiente problema. Tengo
>> un móvil Ocean Mini Adroid 4.4 KitKat conectado  a Ubuntu 14.04 LTS; y por
>> más que le doy vueltas no he conseguido conectarlo. Me explico:
>> Lo último que intenté fue el siguiente script que encontré porque soy
>> novato en el asunto:
>
> Te equivocaste de lista
> ESTA no es un lista de android
> ESTA TAMPOCO es un lista de ubuntu

Te falto Ángel, esta tampoco es la lista de Camaleón
Aunque para los vampiros, les parezca que si.

>
>> a) lsusb y obtengo:
>> Bus 002 Device 007: ID 8087:0928 Intel Corp
>> Bus 002 Device 004: ID 043d:007a Lexmark International, Inc. Generic Hub
>> Bus 002 Device 003: ID 0bda:8189 Realtek Semiconductor Corp. RTL8187B
>> Wireless 802.11g 54Mbps Network Adapter
>> Bus 002 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
>> Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
>> Bus 001 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
>> Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
>> b) seguí los siguientes pasos:
>> gksudo gedit /lib/udev/rules.d/69-mtp.rules
>> ATTR{idVendor}=="1d6b", ATTR{idProduct}=="0002", SYMLINK+="libmtp-%k",
>> ENV{ID_MTP_DEVICE}="1", ENV{ID_MEDIA_PLAYER}="1"
>>
>> gksudo gedit /etc/udev/rules.d/51-android.rules
>> ATTR{idVendor}=="1d6b", ATTR{idProduct}=="0002", MODE=”0666"
>> sudo service udev restart
>> sudo reboot
>> Cuando terminó de reiniciarse me aparecieron dos iconos, en la barra
>> lateral cuyo nombre son EHCI Host Controller, sin embargo al conectar mi
>> móvil no se ve ninguna de las carpetas de él.
>> ¿Que fue lo que hice mal y cómo puedo revertir el proceso, para poder pasar
>> fotos y música; en ambos sentidos?
>> Por adelantado reitero las más cumplidas gracias a quien me pueda ayudar a
>> resolver el problema.
>>
>>
>> *MANOLO MÁRQUEZ P.*
>
>
> --
> Angel Claudio Alvarez 
>



-- 
usuario linux  #274354
normas de la lista:  http://wiki.debian.org/es/NormasLista
como hacer preguntas inteligentes:
http://www.sindominio.net/ayuda/preguntas-inteligentes.html

/etc/bluetooth/audio.conf obsolete?

[Mark Fletcher]

Hello

I'm currently trying to set up my Jessie system to play audio from my
iPhone by bluetooth through my PC speakers. I've been following an
online guide to doing so and it wants me to
edit /etc/bluetooth/audio.conf to make the PC advertise itself as an
A2DP sink. 

Trouble is, I have no /etc/bluetooth/audio.conf, and instead I
have /etc/bluetooth/audio.conf.dpkg-remove which raised my suspicions a
little bit :-)

A bit of googling revealed this bug report:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737502

Which seems to imply that the conf file is now obsolete. If that's the
case, what has replaced it? On the web I can find many references to
editing this file for various purposes, and the above reference to it
being obsolete, but if it is obsolete I can't find any evidence of what
replaced it.

Thanks

Mark

Re: {SOLVED}virtualbox-usb printer not recognized

[Whit Hansell]

On 08/25/2015 06:19 PM, Whit Hansell wrote:



On 08/25/2015 12:48 AM, Seeker wrote:



On 8/24/2015 6:27 PM, Whit Hansell wrote:
Well, I've got the new virtualbox set up and all is good except my 
usb hP 5600 series printer is not recognized so I can print and scan 
with it.  My webcam works. My usb keyboard works.  My wifi usb mouse 
works.  But my printer isn't recognized.  I have all the info in the 
usb filter setup but it keeps showing no usb items attached...


Anyone else have a similar problem?  Anyone got any ideas?

Have reinstalled the extension pack 3 timesd and besides all the 
other primare usb iltems work.


Thanks in advance.  Any help greatlly appreciated..

Whit


I have not played around with Virtualbox with Linux as the host os.

With Windows as the host OS Virtualbox takes care of disconnecting 
the printer from the host OS so it

can be used in the Virtual machine.

Since I am usually setting things up for non techie people and want 
to reduce the things they have
to try and wrap their head around, I typically set the printer up as 
a network printer in the guest OS.


A quick look on Google, looks like that is the recommended course of 
action when using Linux

as the host OS.

 http://www.ehow.com/how_8743472_do-print-out-virtualbox.html

With Windows as the host the printer just needs to work in the host 
OS, it doesn't need to be shared

in the host OS.

Since the instructions don't say anything special about the host set 
up I'm guessing it is the same
with Linux as the host, but those were the first instructions I saw 
and never looked to much after.


I expect if there is extra set up required someone will chime in.

Later, Seeker



Seeker,
Thanks so much for the reply.  I tried  to do whaat the link you gave 
me said to do but messed it up because I'm not Windows proficient.  
Found another site that gives info on how to set up the network 
printer and will try that soon.  Am backed up w. stuff right now.  
Thanks so much for your help.  I found nothing about this type of 
situation when I did my google searches.  I will let y'all know how it 
goes when I get back to it.


Gracias amigo, seeker.

Whit



Seeker and all,
Finally got back to my prob w. usb printer and such and did some 
searches on google and something that kept coming up was to check to see 
if i was lited in the Gropu as user.  So finally got frustraated and 
checked and while my name was in the virtualbox user grouop it wasa not 
checked so I checked it and had to aulthenticate w. root user pwd.  Then 
got it working by logging out of host and logging back in.  Then 
starting virtualbox and then the Win 7 guest.  And voila, there was my 
printer listed on my usb port.  Then verified by printing and yes it 
works great.  Oh boy.  so nice to  have it working.  Haven't checked to 
see if I can use any thumb drives but will  do so tomorrow.  And yes I 
had to add the printer filter to the usb devices in the device setup and 
had to also set the usb version to 2.0 instead of 3.0.  I kept seeing 
that VB does not redognze usb v.3 yet.  It may but haven't verified that 
it does or not.  Will verify that tomorrow too.


Hope that helps someone else.  Been trying for a couple of years to get 
this far w. VB.  Nice to be at least this far.


Cheers and yippee.
Whit

Re: Iceweasel 38.2 seems broken

[Patrick Bartek]

On Thu, 10 Sep 2015, Haines Brown wrote:

> 
> After a Wheezy upgrade to iceweasel 38.2.1esr-1~deb7ui, iceweasel does
> not display when started. An iceweasel process starts, but X server
> does not pick it up.  
> 
> The terminal gives me: 
> 
>   console.error: 
> [CustomizableUI]
> Custom widget with id loop-button does not return a valid node
>   
>   and many lines like:
> 
>   2015-09-10 16:13:04: basic_code_modules.cc:88: INFO: No module at
> 0x0 2015-09-10 16:13:04: basic_code_modules.cc:88: INFO: No module at
> 0xbf9ba83c
> 
> I find that "Bug 1097597 - Disabling loop breaks the world" reported 
> last year for version 35 & 36 was supposedly fixed. But I also see Bug
> 798238 that version 38.2 crashes when certain pages (YouTube) are 
> loaded. After the update Iceweadel worked a couple of days until I
> visited YouTube, but this may only be a coincidence. I now can't get
> Iceweasel to be seen by the X server at all.
> 
> I don't see any choice of versions in the debian repository and so
> can't revert to an earlier version. Advice needed.

Works fine here, even youtube.  Same version as you.  Running Wheezy
64-bit, fully upgraded today, but with only the Openbox WM and LXPanel.
No desktop environment installed.

B

road warrior VPN with IPCop2

[rlharris]

I am trying to understand the options for accommodating a "road warrior"
who, as a VPN client, needs to connect to one or more machines which
reside at the home office, in a LAN protected by a stand-alone firewall. 
The road warrior is running Debian on a laptop.  The firewall protecting
the LAN is IPCop2.

After much searching with google and reading a number of documents, it
appears to me that there exist two approaches:

(1) The firewall can act as the VPN server; this allows the roadwarrior to
access the entire protected LAN.

(2) The VPN can bypass the firewall; in this case, one machine in the
protected LAN acts as the VPN server.

Either of these solutions is acceptable.

I do not know whether the use of IPCop2 simplifies or complicates the
situation; but the user strongly prefers to remain with IPCop2 rather than
to switch to another firewall.

I am having difficulty trying to reconcile the step-by-step procedures
which I have found for implementing VPN on Debian with the the
step-by-step procedures which I have found for implementing VPN on IPCop2.
 I am wondering if the two systems are compatible.

RLH

problems with moving the toolsbars of Inkscape

[Joerg Desch]

I'm using Inkscape from Jessie and have some trouble with the arrangement 
of the toolbars. I've written a bug report (#797148) two weeks ago, but 
without reactions for now.

The positioning of the toolbars is only in some (rare) cases possible. It 
is very hard to find a place where the moved toolbar snaps into a 
position. Most bars doesn't snap to any position.

A second effect is the length of the bar. While moving the toolbar, the 
length of the bar is not truncated to the space needed, so that dragging 
a bar in fullscreen mode is not possible.

What are your experiences with moving the toolsbars?

Are there any solutions or work-arounds?

Re: Ethernet not working after waking from sleep

[Riley Baird]

On Fri, 11 Sep 2015 10:06:40 +0530
Himanshu Shekhar  wrote:

> My network adapter is by Realtek and I have installed the appropriate
> firmware from synaptic. The ethernet network works fine, but shows cable
> unplugged after waking from sleep.
> Also, I have Broadcom bluetooth device BCRM43142 and have downloaded
> firmware (some bcrm-***-dkms) but bluetooth doesn't work properly (tried
> blueman too). Also, on startup, after fsck, bluetooth firmware fails to
> load.

I haven't had this porblem personally, but the instructions here might
be of help:

https://askubuntu.com/questions/362933/network-disabled-on-some-wake-ups-on-saucy-laptop


pgpfsgXWiDB8j.pgp
Description: PGP signature

Ethernet not working after waking from sleep

[Himanshu Shekhar]

My network adapter is by Realtek and I have installed the appropriate
firmware from synaptic. The ethernet network works fine, but shows cable
unplugged after waking from sleep.
Also, I have Broadcom bluetooth device BCRM43142 and have downloaded
firmware (some bcrm-***-dkms) but bluetooth doesn't work properly (tried
blueman too). Also, on startup, after fsck, bluetooth firmware fails to
load.

-- 
Himanshu Shekhar
IIIT-Allahabad
IRM2015006

Re: Extracting directories from an ISO image, command line tool?

[Brian]

On Thu 10 Sep 2015 at 21:02:36 +0200, Hans wrote:

> Am Donnerstag, 10. September 2015, 19:43:25 schrieb Brian:
> 
> > Does it prevent making the mistake of not capitilising proper nouns?
> 
> Don't know, but maybe the op will test it himself?

The OP isn't given to testing and reporting back on success.

He sets tests. If you pass them you get the seal of approval. Otherwise,
nothing.

Re: display problem from wheezy=>jessie upgrade.

[Sven Arvidsson]

On Thu, 2015-09-10 at 07:20 -0700, Peter Easthope wrote:
> Any ideas about this?
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796113
> 
> No such problem for wheezy.

Hi,

Sounds like this bug: 
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=768958

You should probably reassign your bug to the driver and mark it as a
duplicate, or ask the maintainer to do it for you.

-- 
Cheers,
Sven Arvidsson
http://www.whiz.se
PGP Key ID 6FAB5CD5




signature.asc
Description: This is a digitally signed message part

Re: Extracting directories from an ISO image, command line tool?

[Curt]

On 2015-09-10, Brian  wrote:
> On Thu 10 Sep 2015 at 18:26:52 +0200, Hans wrote:
>
>> Maybe you want to give "isomaster" a try. It is in the repos and it is easy 
>> to 
>> handle.
>
> Does it prevent making the mistake of not capitilising proper nouns?
>
>

Or the mistake of not spelling capitalizing correctly?

Iceweasel 38.2 seems broken

[Haines Brown]

After a Wheezy upgrade to iceweasel 38.2.1esr-1~deb7ui, iceweasel does
not display when started. An iceweasel process starts, but X server does
not pick it up.  

The terminal gives me: 

  console.error: 
[CustomizableUI]
Custom widget with id loop-button does not return a valid node
  
  and many lines like:

  2015-09-10 16:13:04: basic_code_modules.cc:88: INFO: No module at 0x0
  2015-09-10 16:13:04: basic_code_modules.cc:88: INFO: No module at 0xbf9ba83c

I find that "Bug 1097597 - Disabling loop breaks the world" reported 
last year for version 35 & 36 was supposedly fixed. But I also see Bug
798238 that version 38.2 crashes when certain pages (YouTube) are 
loaded. After the update Iceweadel worked a couple of days until I
visited YouTube, but this may only be a coincidence. I now can't get
Iceweasel to be seen by the X server at all.

I don't see any choice of versions in the debian repository and so can't
revert to an earlier version. Advice needed.

Re: Extracting directories from an ISO image, command line tool?

[David Wright]

Quoting Thomas Schmitt (scdbac...@gmx.net):

>   for i in /media/distributionA/DVD*.iso
>   do
> xorriso -osirrox on:auto_chmod_on -overwrite nondir \
> -indev "$i" \
> -extract /pool /media/distributionA/poolA
>   done
> 
> The setting -osirrox auto_chmod_on enables writing to
> read-only directories which were created by a previous
> xorriso -extract command.
> This is needed especially if duplicate files overwrite
> each other in such read-only directories.
> 
> One may change the permissions of the directories before
> extraction.
> 
> xorriso -osirrox on -overwrite nondir \
> -indev "$i" \
> -find /pool -type d -exec chmod u+rwx -- \
> -extract /pool /media/distributionA/poolA \
> -rollback_end
> 
> The final command -rollback_end prevents error messages
> about pending changes and no output drive being acquired.
> 
> This is equivalent to
> find /media/distributionA/poolA -type d -exec chmod u+rwx '{}' ';'
> after each xorriso run.

Thanks Thomas; another neat tool to try out, twice in the same week.
Even better: you wrote it!

For this particular use, I think I would use "-overwrite off" because
there ought not to be any duplicate packages in one distribution's pool
and, if there were, I'd want to check that they had identical contents
and see how come they were there.

Cheers,
David.

Re: Extracting directories from an ISO image, command line tool?

[Brian]

On Thu 10 Sep 2015 at 20:03:53 +, Curt wrote:

> On 2015-09-10, Brian  wrote:
> > On Thu 10 Sep 2015 at 18:26:52 +0200, Hans wrote:
> >
> >> Maybe you want to give "isomaster" a try. It is in the repos and it is 
> >> easy to 
> >> handle.
> >
> > Does it prevent making the mistake of not capitilising proper nouns?
> 
> Or the mistake of not spelling capitalizing correctly?

Considering the remark you are responding to was my criticism of my own
spelling, you might want to reflect on your response.

On the other hand - maybe not. Guilty, as accused. I'll not even claim
typos. :)

Re: No actualizar kernel en Debian 7

[BasaBuru]

El Miércoles, 9 de septiembre de 2015 21:05:58 Ricardo escribió:
> Hola Lista
> 
> Tengo un servidor  con Debian 7.1 no quiero que se actualice el kernel
> por varios motivos. como podria evitar para que no se actualice?

Mira si tienes instalado este paquete:

linux-image-amd64

Es un metapaquete y es el que actualiza el kernel.


-- 
Agur bero bat / a greeting

BasaBuru

  BASATU 

~  
basatia bihur zaitez
~

gako ID gnupg: F9044F8FC64B2544
hatz-aztarna: 13FF 7B28 D999 B957 F837 D566 F904 4F8F C64B 2544

Re: squi3 e iptables

[Manolo Díaz]

El jueves, 10 sep 2015 a las 17:21 UTC
l...@ida.cu escribió:

> Buenas a todos he tenido que migrar y no he dado mucho pie con bola con 
> el squid3 en comparación con el 2.7 que tenía
> 
> Alguien puede enviarme para guiarme una conf de squid3  para q los 
> usuarios autentiquen con la básica:
> 
> #Modulo de autenticacion
> authenticate_ip_ttl 5 minutes
> auth_param basic children 5
> auth_param basic realm Servidor de Navegacion
> auth_param basic credentialsttl 2 hours
> auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/privados
> 
> En el squid3 no logro hacerlo me rechaza las conexiones 
> 
> 
> 
> Me pueden dar una mano, para más tengo que montar firewall con iptables 
> aunque nunca he trabajado con este he leído pero cero experiencia pero 
> eso es lo que haré si tiene algo para guiarme pues tanto mejor
> 
> saludos y agradezco toda ayuda

¿Y no te ayuda la documentación incluida en el paquete? Veo que están
disponibles las siguientes páginas man relacionadas:

squid: /usr/share/man/man8/basic_db_auth.8.gz
squid: /usr/share/man/man8/basic_getpwnam_auth.8.gz
squid: /usr/share/man/man8/basic_ldap_auth.8.gz
squid: /usr/share/man/man8/basic_ncsa_auth.8.gz
squid: /usr/share/man/man8/basic_pam_auth.8.gz
squid: /usr/share/man/man8/basic_radius_auth.8.gz
squid: /usr/share/man/man8/basic_sasl_auth.8.gz

Sin tener ni idea pero sabiendo que antes de la actualización
funcionaba, empezaría por comprobar los ajustes personalizados: veo
un /etc/squid/privados por ahí...

-- 
Manolo Díaz