RE: Problema entre NFS, LVM y jbd2

2016-08-18 Thread Frank Harbey Sanabria Florez
Recuerda que cualquier tecnologia de disco va a usar mas IO, y si el proceso es 
pesado pues mas IO, el punto es LVM usa unas tablas para sincronizar sus 
archivos, y si son muchas estaciones pues imaginate, en cambio cuando se lo 
quitas, el disco va a estar "puro" y solo se va a dedicar a copiar, mover, 
crear y pegar archivos, no a sincronizar tablas, directorios, inodos etc. En 
este tipo de soluciones se debe de validar: 
1ro: El tipo de informacion que se va a pasar2do: La tecnologia de los discos, 
buffer, cache, y RPM3ro: Va a tener RAID? 4to: El tamaño promedio de los 
archivos para elejir el sistema de archivos adecuados asi como el tamaño del 
bloque
Con discos de 7200RPM SAS convencionales recomiendo maximo 3 clientes en un LVM 
con NFS (Pruebas propias) de consulta/escritura constante, esa misma 
configuracion pero con un disco extra en RAID 0 se aumenta hasta 10 Clientes, 
pero si lo creas en RAID1 siguen siendo maximo los 3 clientes.
Bueno no me extiendo mas, espero haberte podido ayudar.

FRANK HARBEY SANABRIA FLOREZBogota - Colombia@franksanabria
www.sugeek.co

From: jadolfo.pa...@gmail.com
Date: Thu, 18 Aug 2016 21:17:53 -0430
Subject: Problema entre NFS, LVM y jbd2
To: debian-user-spanish@lists.debian.org

Hola, quisiera comentarles algo que me sucedio a ver si me ayudan a comprender 
la raiz
del problema.

Se me ocurrió montar un servidor NFS para compartir los homes de los usuarios 
de la 
oficina, lo más sencillo posible. El servidor lo configuré para que usara todo 
el disco
mediante LVM y el archivo `/etc/export` contenáa la siguiente línea: 
/home192.168.1.0/24(rw,sync,no_subtree_check,root_squash)

Los mapas de automount y los usuarios están en un LDAP (que está en el mismo 
servidor).

Pruebo los clientes y todo funciona correctamente, los homes se montan 
sinproblema. 
Pero al poco tiempo noto que está lento, por algunos momentos se queda
congelado el cliente.

Revisando el servidor me percato que el proceso [jbd2/dm-0-8] esta realizando 
mucho 
trabajo de IO (cuando ejecutaba top, el jbd2 podia facilmente ocupar 80% o mas 
de IO).

Luego de unos dias, pruebas y leer mucho en internet, pruebo cambiando el
archivo exports, de "sync" a "async", y todo funciona perfectamente, el jbd2 ya 
no es un 
problema y aumentó la fluidez de los clientes del NFS de una manera íncreible.

Pero cuando estaba haciendo pruebas de diferente configuraciones, me doy cuenta 
que si
el servidor usa no LVM, el jbd2 no causa problema. Me refiero a que puedo 
exportar las
carpetas con la opcion "sync" y el jbd2 no ocupa todo el IO del servidor.

Entonces la duda es ¿por qué cuando uso LVM tengo que exportar de manera 
asíncrona ?.

Este es el link donde encontré la solución: 
https://ubuntuforums.org/showthread.php?t=2170496

Muchas gracias, si necesitan más información con gusto los ayudare.

Nota: No estoy suscrito a la lista.
  

*.debain.onion

2016-08-18 Thread oblvn

Hello,

Is there an official .onion address for either bugs.debian.org or 
wiki.debian.org?


https://onion.debian.org

Some of the *.debian.org subdomains don't see to be included in the 
above onion list.


Thanks.



Re: Shell In A Box no quiere responder,,,

2016-08-18 Thread Jorge A. Secreto
hola

El 18 de agosto de 2016, 16:49, Horacio  escribió:

> El problema es mas simple,,, son los certificados que confecciona el
> shellinabox que causa que se rechace la conexión por parte del
> firefox,,, rearmandolos ya solucioné el problema,,,
>

Ahá, ¿y como? :-)


>
> El día 18 de agosto de 2016, 11:05, Camaleón 
> escribió:
> > El Wed, 17 Aug 2016 17:40:25 -0300, Horacio escribió:
> >
> >> Hola, espero que alguien tenga experiencia en el programa shellinabox
> >> para levantar una webshell,,,
> >
> > Primera vez que lo leo :-)
> >
> >> He instalado con éxito y sin problema el programa, he modificado el
> >> /etc/default/shellinabox para que atienda en el puerto que quiero, y
> >> esto lo demuestra,,,
> >
> > Danos la salida de "/etc/default/shellinabox".
> >
> > (...)
> >
> >> Pero cuando por navegador intento conectar a http://127.0.0.1:9080
> >
> > ¿Has probado a usar una IP distinta de loopback?
> >
> >> me da el error el navegador,,,
> >> ---
> >> La conexión fue restablecida
> >
> > (...)
> >
> > Prueba a desactivar momentáneamente el cortafuegos.
> >
> >> el /var/log/syslog da este error extraño,,, que no tiene nada que ver
> supongo,,,
> >>
> >> Aug 17 17:22:37 azul2 named[11990]: validating mozilla.com/SOA: no
> valid signature found
> >> Aug 17 17:22:37 azul2 named[11990]: validating
> crkevej4n2eb86q8ooqslqc5eaj9h7k6.mozilla.com/NSEC3: no valid signature
> found
> >> Aug 17 17:22:37 azul2 named[11990]: validating sumo.external.zlb.scl3.
> mozilla.com/A: no valid signature found
> >
> > Named es el servidor de nombres bind (DNS) pero esos registros no apuntan
> > a nada relacionado con el sistema local.
> >
> > Saludos,
> >
> > --
> > Camaleón
> >
>
>


-- 
Jorge A Secreto
Analista de Sistemas
MP 361


Problema entre NFS, LVM y jbd2

2016-08-18 Thread Jesús Adolfo Parra Parra
Hola, quisiera comentarles algo que me sucedio a ver si me ayudan a
comprender la raiz
del problema.

Se me ocurrió montar un servidor NFS para compartir los homes de los
usuarios de la
oficina, lo más sencillo posible. El servidor lo configuré para que usara
todo el disco
mediante LVM y el archivo `/etc/export` contenáa la siguiente línea:
/home192.168.1.0/24(rw,sync,no_subtree_check,root_squash)

Los mapas de automount y los usuarios están en un LDAP (que está en el
mismo servidor).

Pruebo los clientes y todo funciona correctamente, los homes se montan
sinproblema.
Pero al poco tiempo noto que está lento, por algunos momentos se queda
congelado el cliente.

Revisando el servidor me percato que el proceso [jbd2/dm-0-8] esta
realizando mucho
trabajo de IO (cuando ejecutaba top, el jbd2 podia facilmente ocupar 80% o
mas de IO).

Luego de unos dias, pruebas y leer mucho en internet, pruebo cambiando el
archivo exports, de "sync" a "async", y todo funciona perfectamente, el
jbd2 ya no es un
problema y aumentó la fluidez de los clientes del NFS de una manera
íncreible.

Pero cuando estaba haciendo pruebas de diferente configuraciones, me doy
cuenta que si
el servidor usa no LVM, el jbd2 no causa problema. Me refiero a que puedo
exportar las
carpetas con la opcion "sync" y el jbd2 no ocupa todo el IO del servidor.

Entonces la duda es ¿por qué cuando uso LVM tengo que exportar de manera
asíncrona ?.

Este es el link donde encontré la solución:
https://ubuntuforums.org/showthread.php?t=2170496

Muchas gracias, si necesitan más información con gusto los ayudare.

Nota: No estoy suscrito a la lista.


RESOLVED: Re: Adding partition(s) to a Debian install pendrive

2016-08-18 Thread rhkramer
Thanks to all who replied (or read my original post), the problem is resolved.

I followed the instructions in Thomas Schmitt's first reply, and things just 
worked.

I need to try to puzzle out what I did differently the first time--I do know 
one 
difference, I was trying to make a logical instead of a primary partition, 
maybe that had something to do with it.  And, I guess it is possible in all 
the attempts I made, maybe in some of them I hadn't umounted the drive before 
partioning (I'm about 95% sure I did, but ??.

At this point in time, I probably won't file a bug against that document, but 
I'll think it over (sleep on it) and might suggest adding explicit 
instructions (like Thomas').

Also, I learned some other useful things, like lsblk.

Thanks again!

Randy Kramer


On Thursday, August 18, 2016 03:45:06 PM Thomas Schmitt wrote:
> Pascal Hambourg wrote:




Re: A minimalist network

2016-08-18 Thread Brian
On Thu 18 Aug 2016 at 13:46:14 -0600, Charlie Kravetz wrote:

> On Thu, 18 Aug 2016 11:50:23 -0700
> David Christensen  wrote:
> 
> >On 08/18/2016 06:58 AM, Richard Owlett wrote:
> >> On 8/17/2016 8:07 PM, David Christensen wrote:  
> >>> 3.  Internet modem or gateway.  
> >> 3. N/A  
> >
> >So, the laptops are not connected to the Internet?  How do you access
> >the Internet to post and read this list, download Debian ISO's, etc.?
> >
> >David
> >
> 
> Why do they have to be connected to the Internet? I have four computers
> here. Three are not connected, one is. 

They do not have to be. That wasn't the point of the question.

When the OP was asked about having an internet modem or gateway he
responded "N/A". On behalf of the OP you could perhaps explain what
that means when he obviously has a means of accessing the internet.



Re: A minimalist network

2016-08-18 Thread Lisi Reisz
On Thursday 18 August 2016 20:46:14 Charlie Kravetz wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> On Thu, 18 Aug 2016 11:50:23 -0700
>
> David Christensen  wrote:
> >On 08/18/2016 06:58 AM, Richard Owlett wrote:
> >> On 8/17/2016 8:07 PM, David Christensen wrote:
> >>> 3.  Internet modem or gateway.
> >>
> >> 3. N/A
> >
> >So, the laptops are not connected to the Internet?  How do you access
> >the Internet to post and read this list, download Debian ISO's, etc.?
> >
> >
> >David
>
> Why do they have to be connected to the Internet? I have four computers
> here. Three are not connected, one is.

So one of Richard's two has to be connected.

Lisi



Re: A minimalist network

2016-08-18 Thread Charlie Kravetz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Thu, 18 Aug 2016 11:50:23 -0700
David Christensen  wrote:

>On 08/18/2016 06:58 AM, Richard Owlett wrote:
>> On 8/17/2016 8:07 PM, David Christensen wrote:  
>>> 3.  Internet modem or gateway.  
>> 3. N/A  
>
>So, the laptops are not connected to the Internet?  How do you access
>the Internet to post and read this list, download Debian ISO's, etc.?
>
>
>David
>

Why do they have to be connected to the Internet? I have four computers
here. Three are not connected, one is. 

- -- 
Charlie Kravetz
Linux Registered User Number 425914
[http://linuxcounter.net/user/425914.html]
Never let anyone steal your DREAM.   [http://keepingdreams.com]
-BEGIN PGP SIGNATURE-

iQEcBAEBCAAGBQJXthCGAAoJEIqui46mydCASwEH/AnXd2OcG1fhIKOWPzxUDBUD
L0jfoK46PbTv6WBeuD73rBIFikf08t+ynGcLkvg1cegmwa50eP/lx2bcc0lKGRNM
K2c4nITsbVUQ/w9Gz72iwv5xUhR7KUFMlVQIbZR5V4UWV8GojYdHxD8JSCmd/xWK
pI/5qtkRJwmEjSxw8+FKqjJQ2i/0EgHz5Q+I1YM4utCusqhXeBE9wA2uLiaLq1XE
D7VzT/1cVWtjfm5oZ9g+8qUaHV3YoULgD0UTnAfILnC3Zk6SE9Dp9Wjzhd9++8Z+
8GrccIviZkdZLNpT6Ug94nd5LlsJWZIlpdo8E4oOmgsmVjHkQmdfSVyNj6QA5ak=
=OLf/
-END PGP SIGNATURE-


Re: A minimalist network

2016-08-18 Thread David Wright
On Thu 18 Aug 2016 at 10:33:28 (+), Andy Smith wrote:
> Hi Richard,
> 
> On Wed, Aug 17, 2016 at 05:27:13PM -0500, Richard Owlett wrote:
> > The WinXP machine no longer reported a disconnected cable.
> > The Jessie Mate machine now reported it was attempting to establish a
> > connection.
> > 
> > IOW both machines recognized a PHYSICAL connection.
> > *NOTHING MORE*
> 
> >From what I can gather of the thread, both of your machines have
> gigabit interfaces. That's good as it means the Auto-MDIX feature is
> virtually guaranteed be supported¹. So, you need not worry whether
> your cable is crossover or not.
> 
> All you need to do now is statically configure both machines to be
> in the same IP network. It does not really matter what numbers you
> choose as long as they are valid, but convention dictates that you
> should use one of the private networks as listed in RFC1918:
> 
> https://en.wikipedia.org/wiki/Private_network
> 
> As you are only going to have two machines on this network you could
> a /30. In fact given there won't be a default gateway host you could
> probably get away with a /31. But there is no need to make life
> confusing: you can just use a /24, so your network has use of all of
> the last octet of the address, e.g. 192.168.1.*.
> 
> So, let's say you did choose 192.168.1.0/24. Just configure one
> machine as 192.168.1.1 and the other as 192.168.1.2 with a netmask
> on both of 255.255.255.0. If either of them insists on needing a
> default gateway you can just put the IP of the other machine there.

Before I discovered the simplicity of using IPv6, I used IPv4.
I just dug out a backup of a configuration file from that time,
/etc/network/interfaces

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
allow-hotplug eth0
iface eth0 inet static
address 192.168.1.19
netmask 255.255.255.255
pointopoint 192.168.1.15

#

The other end had its 19 and 15 switched, naturally.

Cheers,
David.



Re: Shell In A Box no quiere responder,,,

2016-08-18 Thread Horacio
El problema es mas simple,,, son los certificados que confecciona el
shellinabox que causa que se rechace la conexión por parte del
firefox,,, rearmandolos ya solucioné el problema,,,

El día 18 de agosto de 2016, 11:05, Camaleón  escribió:
> El Wed, 17 Aug 2016 17:40:25 -0300, Horacio escribió:
>
>> Hola, espero que alguien tenga experiencia en el programa shellinabox
>> para levantar una webshell,,,
>
> Primera vez que lo leo :-)
>
>> He instalado con éxito y sin problema el programa, he modificado el
>> /etc/default/shellinabox para que atienda en el puerto que quiero, y
>> esto lo demuestra,,,
>
> Danos la salida de "/etc/default/shellinabox".
>
> (...)
>
>> Pero cuando por navegador intento conectar a http://127.0.0.1:9080
>
> ¿Has probado a usar una IP distinta de loopback?
>
>> me da el error el navegador,,,
>> ---
>> La conexión fue restablecida
>
> (...)
>
> Prueba a desactivar momentáneamente el cortafuegos.
>
>> el /var/log/syslog da este error extraño,,, que no tiene nada que ver 
>> supongo,,,
>>
>> Aug 17 17:22:37 azul2 named[11990]: validating mozilla.com/SOA: no valid 
>> signature found
>> Aug 17 17:22:37 azul2 named[11990]: validating 
>> crkevej4n2eb86q8ooqslqc5eaj9h7k6.mozilla.com/NSEC3: no valid signature found
>> Aug 17 17:22:37 azul2 named[11990]: validating 
>> sumo.external.zlb.scl3.mozilla.com/A: no valid signature found
>
> Named es el servidor de nombres bind (DNS) pero esos registros no apuntan
> a nada relacionado con el sistema local.
>
> Saludos,
>
> --
> Camaleón
>



Re: Adding partition(s) to a Debian install pendrive

2016-08-18 Thread Thomas Schmitt
Hi,

Pascal Hambourg wrote:
> Fdisk [...] calls the system call to tell the
> kernel to re-read the partition table

Ah yes. That's plausible. With my previous Linux i would have had to
unplug and re-plug the stick. But Debian 8 noticed the new partition
without that:

  $ ls -l /dev/sdc*
  brw-rw 1 root thomas 8, 32 Aug 18 20:44 /dev/sdc
  brw-rw 1 root disk   8, 33 Aug 18 20:44 /dev/sdc1
  brw-rw 1 root disk   8, 34 Aug 18 20:44 /dev/sdc2
  brw-rw 1 root disk   8, 35 Aug 18 20:44 /dev/sdc3

systemd magic ?


i wrote:
> > Let's hope the USB stick still boots via BIOS and EFI ...

> It boots via any decent BIOS.

That would be the more likely candidate for failure, because the BIOS
hops on the x86 code in the MBR of which the partition table got
manipulated by fdisk.

>  I haven't tested EFI boot with it, but I don't
> see why it would not work as the new partition is "regular".

As long as we have only one partition of type 0xef and not overlapping
partitions of non-zero type, EFI should be happy. From MBR it takes
only the partition table entry to find its FAT filesystem with the
boot programs.


Now it has to be tested whether or how easily the installer can make
use the files in partition 3.


> > > https://www.debian.org/releases/jessie/amd64/ch04s03.html.en

This looks pre-isohybrid, i.e. two generations behind of debian-cd
for i386 and amd64. I understand arm64 is suitable for CD and USB stick,
too. Some other arches make no difference between CD and disk at all.


Have a nice day :)

Thomas



Re: A minimalist network

2016-08-18 Thread David Wright
On Thu 18 Aug 2016 at 11:50:23 (-0700), David Christensen wrote:
> On 08/18/2016 06:58 AM, Richard Owlett wrote:
> > On 8/17/2016 8:07 PM, David Christensen wrote:
> >> 3.  Internet modem or gateway.
> > 3. N/A
> 
> So, the laptops are not connected to the Internet?  How do you access
> the Internet to post and read this list, download Debian ISO's, etc.?

and

https://lists.debian.org/debian-user/2015/06/msg00909.html

Cheers,
David.



Re: A minimalist network

2016-08-18 Thread David Wright
On Thu 18 Aug 2016 at 11:50:23 (-0700), David Christensen wrote:
> On 08/18/2016 06:58 AM, Richard Owlett wrote:
> > On 8/17/2016 8:07 PM, David Christensen wrote:
> >> 3.  Internet modem or gateway.
> > 3. N/A
> 
> So, the laptops are not connected to the Internet?  How do you access
> the Internet to post and read this list, download Debian ISO's, etc.?

Keep up, there at the back! :)

https://lists.debian.org/debian-user/2015/09/msg00930.html

Cheers,
David.



Re: Wordpress sites overzetten

2016-08-18 Thread Paul van der Vlis
Op 18-08-16 om 20:07 schreef Paul van der Vlis:
> Weet iemand misschien een manier om er achter te komen of er in een
> database van dergelijke "serialised data" zit?

Je herkent het volgens mij aan dit soort onderdelen in de SQL:
;s:33:"our-team-enhanced/sc_our_team.php";

Die "s" betekend "serialized", die "33" zegt dat de string 33 tekens
lang is. Volgens mij zit het in elke Wordpress site, zal wel sneller zijn.

Groet,
Paul.


-- 
Paul van der Vlis Linux systeembeheer Groningen
https://www.vandervlis.nl/



Re: Adding partition(s) to a Debian install pendrive

2016-08-18 Thread Brian
On Thu 18 Aug 2016 at 20:57:33 +0200, Thomas Schmitt wrote:

>   $ /sbin/fdisk  /dev/sdc
>   ...
>   Command (m for help): n
>   Select (default p): p
>   Partition number (3,4, default 3): 3
>   First sector (505856-3915775, default 505856): 
>   Last sector, +sectors or +size{K,M,G,T,P} (505856-3915775, default 
> 3915775): 
> 
>   Created a new partition 3 of type 'Linux' and of size 1.6 GiB.
>   Command (m for help): w
>   The partition table has been altered.
>   Calling ioctl() to re-read partition table.
>   Re-reading the partition table failed.: Permission denied

I get exactly this.

> (I wonder by what method fdisk tries to read the table and fails)

I ignore things I do not understand.

> In any case it has worked:

As it did for me.

>   $ /sbin/fdisk -l /dev/sdc
>   ...
>   Device Boot  Start End Sectors  Size Id Type
>   /dev/sdc1  * 0  505855  505856  247M  0 Empty
>   /dev/sdc2 39004731 832  416K ef EFI (FAT-12/16/32)
>   /dev/sdc3   505856 3915775 3409920  1.6G 83 Linux
> 
> Let's hope the USB stick still boots via BIOS and EFI ...

It does.

> Next one would mkfs.fat a filesystem onto /dev/sdc2 and copy files to it.

Indeed.



Re: Subject: Adding partition(s) to a Debian install pendrive

2016-08-18 Thread David Wright
On Thu 18 Aug 2016 at 19:43:10 (+0200), Pascal Hambourg wrote:
> Le 18/08/2016 à 18:17, rhkra...@gmail.com a écrit :
> >Is there any way to add another partition after copying the the DVD-1 install
> >image to the pendrive?
> 
> Sure. Just use any partitioning tool as long as it does not choke on
> the invalid layout of the partition table (the two partitions
> overlap and one overlaps the MBR).
> 
> >I found subchapter 4.3. of the Debian GNU/Linux Installation Guide: 
> >"Preparing
> >Files for USB Memory Stick Booting"
> >(https://www.debian.org/releases/jessie/amd64/ch04s03.html.en) and tried to
> >follow some of the instructions--In section 4.3.1. Preparing a USB stick 
> >using
> >a hybrid CD or DVD image, I see:
> >
> >
> >The hybrid image on the stick does not occupy all the storage space, so it 
> >may
> >be worth considering using the free space to hold firmware files or packages 
> >or
> >any other files of your choice. This could be useful if you have only one 
> >stick
> >or just want to keep everything you need on one device.
> 
> Did they really write this ? The last time I created an extra
> partition and tried to use it for such purpose, it didn't work. The
> installer just seemed to skip any partition on the same device as
> itself.

This may (or may not) be because it tries to mount the first partition
and finds it's busy (not surprising as it's the d-i itself) and
moves on to the next device rather than next partition.

It also seems to assume that subsequent devices are unpartitioned so
it tries /dev/sdX but not /dev/sdX1.

The good news with my laptop was that putting the firmware on an old
SD card out of a camera worked just fine. No good for the typical
desktop though.

> I had to manually mount the extra partition to some
> directory I don't remember (had to check into the installer logs
> /var/log/syslog) so that the installer eventually could find the
> firmware files on it.

I think /media is that place.

> >From the above, I inferred that I should be able to create a 2nd partition
> >after copying the DVD-1 image to the pendrive
> 
> You mean a third one : the Debian installer ISO hybrid images, at
> least for i386 or amd64, already define two partitions : one for the
> ISO filesystem and one for the EFI boot.
> 
> , but I tried quite a few
> >approaches (that I might describe in a follwup email if someone really wants
> >to know) and I'm beginning to believe it can't be done that way.
> >
> >And, that, instead, you have to follow the procedures in section 4.3.3.
> >"Manually copying files to the USB stick \u2014 the flexible way".
> 
> This is a completely different approach.
> 
> In any case, note that Windows or other OS's may not see more than
> one partition on a USB pendrive. I still wonder how it makes the
> differences with a USB disk.

Cheers,
David.



Re: Adding partition(s) to a Debian install pendrive

2016-08-18 Thread Pascal Hambourg

Le 18/08/2016 à 20:57, Thomas Schmitt a écrit :


  $ /sbin/fdisk  /dev/sdc
  ...
  Command (m for help): n
  Select (default p): p
  Partition number (3,4, default 3): 3
  First sector (505856-3915775, default 505856):
  Last sector, +sectors or +size{K,M,G,T,P} (505856-3915775, default 3915775):

  Created a new partition 3 of type 'Linux' and of size 1.6 GiB.
  Command (m for help): w
  The partition table has been altered.
  Calling ioctl() to re-read partition table.
  Re-reading the partition table failed.: Permission denied

(I wonder by what method fdisk tries to read the table and fails)


Fdisk does not tries to read the table, it calls the system call to tell 
the kernel to re-read the partition table to update its view of the 
partitions on the device. I guess this is a privileged operation.


Note also that this old system call fails if any partition of the device 
is in use (mounted filesystem, active swap, active RAID member, part of 
an active LVM...). Parted, partprobe and other tools based on libparted 
use a newer system call which does not have this flaw.



Let's hope the USB stick still boots via BIOS and EFI ...


It boots via any decent BIOS. I haven't tested EFI boot with it, but I 
don't see why it would not work as the new partition is "regular".




Re: Subject: Adding partition(s) to a Debian install pendrive

2016-08-18 Thread Brian
On Thu 18 Aug 2016 at 19:43:10 +0200, Pascal Hambourg wrote:

> Le 18/08/2016 à 18:17, rhkra...@gmail.com a écrit :
> >Is there any way to add another partition after copying the the DVD-1 install
> >image to the pendrive?
> 
> Sure. Just use any partitioning tool as long as it does not choke on the
> invalid layout of the partition table (the two partitions overlap and one
> overlaps the MBR).
> 
> >I found subchapter 4.3. of the Debian GNU/Linux Installation Guide: 
> >"Preparing
> >Files for USB Memory Stick Booting"
> >(https://www.debian.org/releases/jessie/amd64/ch04s03.html.en) and tried to
> >follow some of the instructions--In section 4.3.1. Preparing a USB stick 
> >using
> >a hybrid CD or DVD image, I see:
> >
> >
> >The hybrid image on the stick does not occupy all the storage space, so it 
> >may
> >be worth considering using the free space to hold firmware files or packages 
> >or
> >any other files of your choice. This could be useful if you have only one 
> >stick
> >or just want to keep everything you need on one device.
> 
> Did they really write this ? The last time I created an extra partition and
> tried to use it for such purpose, it didn't work. The installer just seemed
> to skip any partition on the same device as itself. I had to manually mount
> the extra partition to some directory I don't remember (had to check into
> the installer logs /var/log/syslog) so that the installer eventually could
> find the firmware files on it.

Probably written at a time when it did work. But the installer has moved
on and now it doesn't. It is more important that firmware files can be
loaded from a separate USB stick, so having everything on one stick is of
very minor importance.

A bug against the Installation Guide asking for the removal of this
section looks like a good move. Few would probably use the technique
even if it worked.



Re: Adding partition(s) to a Debian install pendrive

2016-08-18 Thread Thomas Schmitt
Hi,

rhkra...@gmail.com wrote:
> I'll characterize those as, generally, partition the USB stick, then add the
> installer image (and, iiuc, you have to use a different install image than
> the DVD-1 .iso.) and a different procedure.

The installer ISOs are supposed to be put on the base device of the
USB stick (e.g. /dev/sdc, not /dev/sdc1).
There they establish an MBR partition table which has two partitions:

  $ /sbin/fdisk -lu debian-8.4.0-amd64-netinst.iso
  ...
  Device  Boot StartEnd Sectors  Size Id Type
  debian-8.4.0-amd64-netinst.iso1 *0 505855  505856  247M  0 Empty
  debian-8.4.0-amd64-netinst.iso2   3900   4731 832  416K ef EFI (FAT
 
This is not a very neat one, as Pascal Hambourg wrote meanwhile.
(My program makes it, but it is not to blame because it only follows
the ishoybrid+GRUB layout developed by Matthew Garrett for Fedora.)
Also there is a GPT head block, which is normally not considered valid
because not properly announced by MBR. Nevertheless some partition editors
actively hate it.

The type "Empty" is part of the trick, because EFI ignores it but Linux
is willing to mount it (yielding the overall ISO).

I tried on Debian 8:

  # get rw-permission to /dev/sdc

  $ dd if=debian-8.4.0-amd64-netinst.iso of=/dev/sdc bs=1M

  $ /sbin/fdisk -l /dev/sdc
  ...
  /dev/sdc1  *0 505855  505856  247M  0 Empty
  /dev/sdc23900   4731 832  416K ef EFI (FAT-12/16/32)

  $ /sbin/fdisk  /dev/sdc
  ...
  Command (m for help): n
  Select (default p): p
  Partition number (3,4, default 3): 3
  First sector (505856-3915775, default 505856): 
  Last sector, +sectors or +size{K,M,G,T,P} (505856-3915775, default 3915775): 

  Created a new partition 3 of type 'Linux' and of size 1.6 GiB.
  Command (m for help): w
  The partition table has been altered.
  Calling ioctl() to re-read partition table.
  Re-reading the partition table failed.: Permission denied

(I wonder by what method fdisk tries to read the table and fails)

In any case it has worked:

  $ /sbin/fdisk -l /dev/sdc
  ...
  Device Boot  Start End Sectors  Size Id Type
  /dev/sdc1  * 0  505855  505856  247M  0 Empty
  /dev/sdc2 39004731 832  416K ef EFI (FAT-12/16/32)
  /dev/sdc3   505856 3915775 3409920  1.6G 83 Linux

Let's hope the USB stick still boots via BIOS and EFI ...

Next one would mkfs.fat a filesystem onto /dev/sdc2 and copy files to it.


Have a nice day :)

Thomas



Re: A minimalist network

2016-08-18 Thread David Christensen
On 08/18/2016 06:58 AM, Richard Owlett wrote:
> On 8/17/2016 8:07 PM, David Christensen wrote:
>> 3.  Internet modem or gateway.
> 3. N/A

So, the laptops are not connected to the Internet?  How do you access
the Internet to post and read this list, download Debian ISO's, etc.?


David



Re: machine checks on Dell R815 under jessie

2016-08-18 Thread Ritesh Raj Sarraf
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On Wed, 2016-08-10 at 10:20 -0400, Jeffrey Mark Siskind wrote:
>    From: Ritesh Raj Sarraf 
> 
>    I (still) have MCE errors on my new laptop [1]. But so far, hasn't created
>    any problem.
> 
> It causes my servers to halt.
> 
>     Jeff (http://engineering.purdue.edu/~qobi)

Were you able to progress on this issue?
You mentioned initially that, with older kernel, this issue was not seen. Is
that still the case ?

The manpage says that uncorrected machine check errors will lead to a kernel
panic.


- -- 
Ritesh Raj Sarraf | http://people.debian.org/~rrs
Debian - The Universal Operating System
-BEGIN PGP SIGNATURE-
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=8zBL
-END PGP SIGNATURE-



Re: Wireless - BCM 4311 802.11b/g/n não conecta

2016-08-18 Thread real bas
>
> root@JoaoBatistaFN:~# sudo rm /etc/modprobe.d/broadcom-sta-dkms.conf:blacklist
> b43
> rm: não foi possível remover 
> “/etc/modprobe.d/broadcom-sta-dkms.conf:blacklist”:
> Arquivo ou diretório não encontrado
> rm: não foi possível remover “b43”: Arquivo ou diretório não encontrado



>

root@JoaoBatistaFN:~# sudo rm /etc/modprobe.d/broadcom-sta-dkms.conf:blacklist
> b43legacy
> rm: não foi possível remover 
> “/etc/modprobe.d/broadcom-sta-dkms.conf:blacklist”:
> Arquivo ou diretório não encontrado
> rm: não foi possível remover “b43legacy”: Arquivo ou diretório não
> encontrado


Deve ser removido */etc/modprobe.d/broadcom-sta-dkms.conf* e *não*
/etc/modprobe.d/broadcom-sta-dkms.conf:blacklist *nem b43 *ou *b43legacy*

root@JoaoBatistaFN:~# sudo apt-get install linux-firmware-nonfree
> Lendo listas de pacotes... Pronto
> Construindo árvore de dependências
> Lendo informação de estado... Pronto
> E: Impossível encontrar o pacote linux-firmware-nonfree


Você precisa adicionar o repositório, atualizar e tentar novamente (não
tenho certeza qual é o repositorio, acho que é o contrib non-free)
Caso esse do linux-firmware-nonfree não funcione tem o firmware-b43-installer
[1] parece ser o driver correto pro seu dispositivo.

[1] https://wiki.debian.org/bcm43xx




Em 18 de agosto de 2016 01:36, Thiago Canuto 
escreveu:

> Boa noite real bas.
>
> Mais uma vez agradeço pela ajuda da comunidade.
>
> Então... testei os passos do tópico compartilhado, e parece que ajudou um
> pouco, mas ainda não solucionou o meu problema.
>
> Aqui esta os resultados dos comandos:
>
> joaobatistafn@JoaoBatistaFN:~$ sudo modprobe b43
> [sudo] password for joaobatistafn:
> joaobatistafn@JoaoBatistaFN:~$ lsmod | grep -e b43 -e wl
> b43   362085  0
> bcma   36446  1 b43
> mac80211  425575  1 b43
> ssb51408  1 b43
> pcmcia 44245  2 b43,ssb
> wl   6087369  0
> cfg80211  350041  3 wl,b43,mac80211
> rng_core   12645  1 b43
> mmc_core   91803  4 b43,ssb,sdhci,sdhci_pci
> joaobatistafn@JoaoBatistaFN:~$ dmesg | grep b43
> [  663.728750] b43-phy0: Broadcom 4311 WLAN found (core revision 10)
> [  663.760252] b43-phy0: Found PHY: Analog 4, Type 2 (G), Revision 8
> [  663.760264] b43-phy0 warning: 5 GHz band is unsupported on this PHY
> [  663.792089] b43 ssb0:0: firmware: direct-loading firmware b43/ucode5.fw
> [  663.801095] b43 ssb0:0: firmware: direct-loading firmware b43/pcm5.fw
> [  663.802371] b43 ssb0:0: firmware: direct-loading firmware
> b43/b0g0initvals5.fw
> [  663.808001] b43 ssb0:0: firmware: direct-loading firmware
> b43/b0g0bsinitvals5.fw
> joaobatistafn@JoaoBatistaFN:~$ iwconfig
> bash: iwconfig: comando não encontrado
> joaobatistafn@JoaoBatistaFN:~$ su -
> Senha:
> root@JoaoBatistaFN:~# iwconfig
> wlan0 IEEE 802.11bg  ESSID:off/any
>   Mode:Managed  Access Point: Not-Associated   Tx-Power=0 dBm
>   Retry short limit:7   RTS thr:off   Fragment thr:off
>   Encryption key:off
>   Power Management:on
>
> lono wireless extensions.
>
> eth0  no wireless extensions.
>
> root@JoaoBatistaFN:~# sudo apt-get purge bcmwl-kernel-source
> Lendo listas de pacotes... Pronto
> Construindo árvore de dependências
> Lendo informação de estado... Pronto
> E: Impossível encontrar o pacote bcmwl-kernel-source
> root@JoaoBatistaFN:~# grep 'blacklist b43' /etc/modprobe.d/*
> /etc/modprobe.d/broadcom-sta-dkms.conf:blacklist b43
> /etc/modprobe.d/broadcom-sta-dkms.conf:blacklist b43legacy
> root@JoaoBatistaFN:~# sudo rm /etc/modprobe.d/broadcom-sta-dkms.conf:blacklist
> b43
> rm: não foi possível remover 
> “/etc/modprobe.d/broadcom-sta-dkms.conf:blacklist”:
> Arquivo ou diretório não encontrado
> rm: não foi possível remover “b43”: Arquivo ou diretório não encontrado
> root@JoaoBatistaFN:~# sudo rm /etc/modprobe.d/broadcom-sta-dkms.conf:blacklist
> b43legacy
> rm: não foi possível remover 
> “/etc/modprobe.d/broadcom-sta-dkms.conf:blacklist”:
> Arquivo ou diretório não encontrado
> rm: não foi possível remover “b43legacy”: Arquivo ou diretório não
> encontrado
> root@JoaoBatistaFN:~# sudo modprobe -v b44
> insmod /lib/modules/3.16.0-4-686-pae/kernel/drivers/net/mii.ko
> insmod /lib/modules/3.16.0-4-686-pae/kernel/drivers/net/phy/libphy.ko
> insmod 
> /lib/modules/3.16.0-4-686-pae/kernel/drivers/net/ethernet/broadcom/b44.ko
>
> root@JoaoBatistaFN:~# sudo apt-get install linux-firmware-nonfree
> Lendo listas de pacotes... Pronto
> Construindo árvore de dependências
> Lendo informação de estado... Pronto
> E: Impossível encontrar o pacote linux-firmware-nonfree
> root@JoaoBatistaFN:~# sudo apt-get install linux-firmware-nonfree
> Lendo listas de pacotes... Pronto
> Construindo árvore de dependências
> Lendo informação de estado... Pronto
> E: Impossível encontrar o pacote linux-firmware-nonfree
> root@JoaoBatistaFN:~# lspci -nn | grep -e 0200 -e 0280

Re: Frequent Hash Sum mismatch on jessie-backports with apt-get update

2016-08-18 Thread Greg Wooledge
On Thu, Aug 18, 2016 at 12:33:27PM -0300, Henrique de Moraes Holschuh wrote:
> On Thu, 18 Aug 2016, Greg Wooledge wrote:
> > Now, starting last week, the problem is that when I try to apt-get update,
> > the files coming from security.debian.org HANG at 100% complete.  It
> > looks something like this:
> 
> While it really might be something else completely, the anti-virus
> function of an "UTM" box (firewall+av+ips+ids+content filter+kitchen
> sink) box is your first suspect.
> 
> You could try using https. It might help, or it might make matters much
> worse.

Around 10:30 this morning, it started working again all on its own.  I'm
guessing one of the networking people restarted something.

There is a phenomenon in one of the online communities that I engage with.
A sort of wink-nudge superstition, if you will: "If you want something
to happen, complain in chat about it not happening."  Posting in IRC
didn't work in this case, but apparently posting to debian-user worked.



Re: machine checks on Dell R815 under jessie

2016-08-18 Thread Ritesh Raj Sarraf
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On Thu, 2016-08-18 at 23:16 +0530, Ritesh Raj Sarraf wrote:
> On Wed, 2016-08-10 at 10:20 -0400, Jeffrey Mark Siskind wrote:
> >    From: Ritesh Raj Sarraf 
> > 
> >    I (still) have MCE errors on my new laptop [1]. But so far, hasn't
> created
> >    any problem.
> > 
> > It causes my servers to halt.
> > 
> >     Jeff (http://engineering.purdue.edu/~qobi)
> 
> Were you able to progress on this issue?
> You mentioned initially that, with older kernel, this issue was not seen. Is
> that still the case ?
> 
> The manpage says that uncorrected machine check errors will lead to a kernel
> panic.

I just extracted the logs for my machine. Contrary to what the manpage says, I
get Uncorrected errors, but no kernel panic.


Hardware event. This is not a software error.
MCE 0
CPU 0 BANK 6 
MISC 38a086 ADDR fef81780 
TIME 1471502624 Thu Aug 18 12:13:44 2016
MCG status:
MCi status:
Uncorrected error
MCi_MISC register valid
MCi_ADDR register valid
Processor context corrupt
MCA: corrected filtering (some unreported errors in same region)
Generic CACHE Level-2 Generic Error
STATUS ae40110a MCGSTATUS 0
MCGCAP c07 APICID 0 SOCKETID 0 
CPUID Vendor Intel Family 6 Model 69
Hardware event. This is not a software error.
MCE 0
CPU 0 BANK 6 
MISC 38a086 ADDR fef81780 
TIME 1471506843 Thu Aug 18 13:24:03 2016
MCG status:
MCi status:
Uncorrected error
MCi_MISC register valid
MCi_ADDR register valid
Processor context corrupt
MCA: corrected filtering (some unreported errors in same region)
Generic CACHE Level-2 Generic Error
STATUS ae40110a MCGSTATUS 0
MCGCAP c07 APICID 0 SOCKETID 0 
CPUID Vendor Intel Family 6 Model 69
Hardware event. This is not a software error.
MCE 0
CPU 0 BANK 6 
MISC 38a086 ADDR fef81780 
TIME 1471511695 Thu Aug 18 14:44:55 2016
MCG status:
MCi status:
Uncorrected error
MCi_MISC register valid
MCi_ADDR register valid
Processor context corrupt
MCA: corrected filtering (some unreported errors in same region)
Generic CACHE Level-2 Generic Error
STATUS ae40110a MCGSTATUS 0
MCGCAP c07 APICID 0 SOCKETID 0 
CPUID Vendor Intel Family 6 Model 69
Hardware event. This is not a software error.
MCE 0
CPU 0 BANK 6 
MISC 38a086 ADDR fef81780 
TIME 1471520827 Thu Aug 18 17:17:07 2016
MCG status:
MCi status:
Uncorrected error
MCi_MISC register valid
MCi_ADDR register valid
Processor context corrupt
MCA: corrected filtering (some unreported errors in same region)
Generic CACHE Level-2 Generic Error
STATUS ae40110a MCGSTATUS 0
MCGCAP c07 APICID 0 SOCKETID 0 
CPUID Vendor Intel Family 6 Model 69
Hardware event. This is not a software error.
MCE 0
CPU 0 BANK 6 
MISC 38a086 ADDR fef81780 
TIME 1471531931 Thu Aug 18 20:22:11 2016
MCG status:
MCi status:
Uncorrected error
MCi_MISC register valid
MCi_ADDR register valid
Processor context corrupt
MCA: corrected filtering (some unreported errors in same region)
Generic CACHE Level-2 Generic Error
STATUS ae40110a MCGSTATUS 0
MCGCAP c07 APICID 0 SOCKETID 0 
CPUID Vendor Intel Family 6 Model 69
Hardware event. This is not a software error.
MCE 0
CPU 0 BANK 6 
MISC 38a086 ADDR fef81780 
TIME 1471534964 Thu Aug 18 21:12:44 2016
MCG status:
MCi status:
Uncorrected error
MCi_MISC register valid
MCi_ADDR register valid
Processor context corrupt
MCA: corrected filtering (some unreported errors in same region)
Generic CACHE Level-2 Generic Error
STATUS ae40110a MCGSTATUS 0
MCGCAP c07 APICID 0 SOCKETID 0 
CPUID Vendor Intel Family 6 Model 69
Hardware event. This is not a software error.
MCE 0
CPU 0 BANK 6 
MISC 78a086 ADDR fef87300 
TIME 1471539248 Thu Aug 18 22:24:08 2016
MCG status:
MCi status:
Uncorrected error
MCi_MISC register valid
MCi_ADDR register valid
Processor context corrupt
MCA: corrected filtering (some unreported errors in same region)
Generic CACHE Level-2 Generic Error
STATUS ae40110a MCGSTATUS 0
MCGCAP c07 APICID 0 SOCKETID 0 
CPUID Vendor Intel Family 6 Model 69


- -- 
Ritesh Raj Sarraf | http://people.debian.org/~rrs
Debian - The Universal Operating System
-BEGIN PGP SIGNATURE-
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=Ay8k
-END PGP SIGNATURE-



Re: A minimalist network

2016-08-18 Thread Pascal Hambourg

Le 18/08/2016 à 19:18, Reco a écrit :


OP is seeking to connect exactly 2 PCs. Both SLAAC and DHCP are
overkill in such case IMO.


I won't argue.


I don't see what's so inconvenient in ipv6
link-local for such simplistic setup.


IPv6 link local addresses are harder to remember, and you must append 
the interface name to them (see D. Wright's reply), assuming that the 
application supports this notation.




Re: Subject: Adding partition(s) to a Debian install pendrive

2016-08-18 Thread Pascal Hambourg

Le 18/08/2016 à 18:17, rhkra...@gmail.com a écrit :

Is there any way to add another partition after copying the the DVD-1 install
image to the pendrive?


Sure. Just use any partitioning tool as long as it does not choke on the 
invalid layout of the partition table (the two partitions overlap and 
one overlaps the MBR).



I found subchapter 4.3. of the Debian GNU/Linux Installation Guide: "Preparing
Files for USB Memory Stick Booting"
(https://www.debian.org/releases/jessie/amd64/ch04s03.html.en) and tried to
follow some of the instructions--In section 4.3.1. Preparing a USB stick using
a hybrid CD or DVD image, I see:


The hybrid image on the stick does not occupy all the storage space, so it may
be worth considering using the free space to hold firmware files or packages or
any other files of your choice. This could be useful if you have only one stick
or just want to keep everything you need on one device.


Did they really write this ? The last time I created an extra partition 
and tried to use it for such purpose, it didn't work. The installer just 
seemed to skip any partition on the same device as itself. I had to 
manually mount the extra partition to some directory I don't remember 
(had to check into the installer logs /var/log/syslog) so that the 
installer eventually could find the firmware files on it.



From the above, I inferred that I should be able to create a 2nd partition
after copying the DVD-1 image to the pendrive


You mean a third one : the Debian installer ISO hybrid images, at least 
for i386 or amd64, already define two partitions : one for the ISO 
filesystem and one for the EFI boot.


, but I tried quite a few

approaches (that I might describe in a follwup email if someone really wants
to know) and I'm beginning to believe it can't be done that way.

And, that, instead, you have to follow the procedures in section 4.3.3.
"Manually copying files to the USB stick \u2014 the flexible way".


This is a completely different approach.

In any case, note that Windows or other OS's may not see more than one 
partition on a USB pendrive. I still wonder how it makes the differences 
with a USB disk.




Re: A minimalist network

2016-08-18 Thread Brian
On Thu 18 Aug 2016 at 20:18:56 +0300, Reco wrote:

> On Thu, 18 Aug 2016 12:51:08 +0200
> Pascal Hambourg  wrote:
> 
> > SLAAC (stateless address autoconfiguration) requires a properly 
> > configured IPv6 router sending RA's (router advertisements). Debian 
> > running radvd can do this.
> > 
> > Or do you mean link local addresses (fe80::/10) ? They're not the most 
> > convenient for everyday use.
> 
> OP is seeking to connect exactly 2 PCs. Both SLAAC and DHCP are
> overkill in such case IMO. I don't see what's so inconvenient in ipv6
> link-local for such simplistic setup.

To remind ourselves:

  I wish to connect two laptops via Ethernet

He has internet connectivity. Stick both machines into the router. Set
them up with addresses and routing. Verify they can communicate. Neither
machine need be capable of connecting with the outside world.



Re: A minimalist network

2016-08-18 Thread Reco
Hi.

On Thu, 18 Aug 2016 12:51:08 +0200
Pascal Hambourg  wrote:

> SLAAC (stateless address autoconfiguration) requires a properly 
> configured IPv6 router sending RA's (router advertisements). Debian 
> running radvd can do this.
> 
> Or do you mean link local addresses (fe80::/10) ? They're not the most 
> convenient for everyday use.

OP is seeking to connect exactly 2 PCs. Both SLAAC and DHCP are
overkill in such case IMO. I don't see what's so inconvenient in ipv6
link-local for such simplistic setup.

Reco



Re: exim4 under jessie vs wheezy

2016-08-18 Thread Brian
On Thu 18 Aug 2016 at 11:50:55 -0400, Jeffrey Mark Siskind wrote:

>> I just changed /etc/mailname on all of my machines to contain:
>> 
>> qobi@upplysingaoflun>cat /etc/mailname
>> purdue.edu
> 
>You know it makes sense to do this. :)
> 
> I had never manually edited /etc/mailname. I took whatever what put there by
> the debian installer perhaps as modified by whatever packages I installed and
> by running dpkg-reconfigure exim4-config.

/etc/mailname has to be sensible for your situation. I usually have to
edit it to get something which makes sense in my situation.

How did telnet go?



Re: Subject: Adding partition(s) to a Debian install pendrive

2016-08-18 Thread Brian
On Thu 18 Aug 2016 at 12:17:28 -0400, rhkra...@gmail.com wrote:

> Is there any way to add another partition after copying the the DVD-1 install 
> image to the pendrive?  
> 
> I found subchapter 4.3. of the Debian GNU/Linux Installation Guide: 
> "Preparing 
> Files for USB Memory Stick Booting" 
> (https://www.debian.org/releases/jessie/amd64/ch04s03.html.en) and tried to 
> follow some of the instructions--In section 4.3.1. Preparing a USB stick 
> using 
> a hybrid CD or DVD image, I see:
> 
> 
> The hybrid image on the stick does not occupy all the storage space, so it 
> may 
> be worth considering using the free space to hold firmware files or packages 
> or 
> any other files of your choice. This could be useful if you have only one 
> stick 
> or just want to keep everything you need on one device.
> 
> Create a second, FAT partition on the stick, mount the partition and copy or 
> unpack the firmware onto it. For example:
> 
> # mount /dev/sdX2 /mnt
> # cd /mnt
> # tar zxvf /path/to/firmware.tar.gz
> # cd /
> # umount /mnt
> 
> 
> From the above, I inferred that I should be able to create a 2nd partition 
> after copying the DVD-1 image to the pendrive, but I tried quite a few 
> approaches (that I might describe in a follwup email if someone really wants 
> to know) and I'm beginning to believe it can't be done that way.

You cannot create another partition with cfdisk?

Please show the output of 'lsblk' when the stick is plugged in.



Re: A minimalist network

2016-08-18 Thread David Wright
On Thu 18 Aug 2016 at 12:51:08 (+0200), Pascal Hambourg wrote:
> Le 18/08/2016 à 01:26, Henrique de Moraes Holschuh a écrit :
> >
> >Too bad it is WinXP, otherwise you'd have instant connectivity via IPv6
> >SLAAC.
> 
> Windows XP supports IPv6. It is just disabled by default, so you
> need to enable it with something like "ipv6 enable". Even Windows
> 2000 could have experimental basic IPv6 support.
> 
> SLAAC (stateless address autoconfiguration) requires a properly
> configured IPv6 router sending RA's (router advertisements). Debian
> running radvd can do this.
> 
> Or do you mean link local addresses (fe80::/10) ? They're not the
> most convenient for everyday use.

The latter is certainly what I meant earlier. I find it very
convenient, just by using an alias and function (which I deliberately
avoid below). Here's the networking on my laptop as normally
configured wirelessly (with uname -a; /sbin/ifconfig -a;
ip route show; ip neigh show) and then when I connect to a
host with cat5 cable, and back again. (I edited out the lo
interface for brevity):

--
Laptop connected normally by wireless:
Linux west 3.16.0-4-686-pae #1 SMP Debian 3.16.7-ckt25-2+deb8u3 (2016-07-02) 
i686 GNU/Linux

eth0  Link encap:Ethernet  HWaddr 00:1c:23:3b:9f:34  
  UP BROADCAST MULTICAST  MTU:1500  Metric:1
  RX packets:0 errors:0 dropped:0 overruns:0 frame:0
  TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
  Interrupt:18 

wlan0 Link encap:Ethernet  HWaddr 00:1c:bf:d5:28:76  
  inet addr:192.168.1.15  Bcast:192.168.1.255
  Mask:255.255.255.0
  inet6 addr: fe80::21c:bfff:fed5:2876/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:284407 errors:0 dropped:0 overruns:0 frame:0
  TX packets:147975 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:430082452 (410.1 MiB)  TX bytes:13065473 (12.4 MiB)

default via 192.168.1.1 dev wlan0 
192.168.1.0/24 dev wlan0  proto kernel  scope link  src 192.168.1.15 

192.168.1.19 dev wlan0 lladdr 00:13:72:83:0e:66 REACHABLE
192.168.1.1 dev wlan0 lladdr 44:94:fc:39:1f:ce REACHABLE

--
Remove 192.168.1.19's ethernet cable from wall and plug into laptop:
Linux west 3.16.0-4-686-pae #1 SMP Debian 3.16.7-ckt25-2+deb8u3 (2016-07-02) 
i686 GNU/Linux

eth0  Link encap:Ethernet  HWaddr 00:1c:23:3b:9f:34  
  inet6 addr: fe80::21c:23ff:fe3b:9f34/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:47 errors:0 dropped:0 overruns:0 frame:0
  TX packets:48 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:10259 (10.0 KiB)  TX bytes:10392 (10.1 KiB)
  Interrupt:18 

wlan0 Link encap:Ethernet  HWaddr 00:1c:bf:d5:28:76  
  inet addr:192.168.1.15  Bcast:192.168.1.255
  Mask:255.255.255.0
  inet6 addr: fe80::21c:bfff:fed5:2876/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:322207 errors:0 dropped:0 overruns:0 frame:0
  TX packets:166891 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:486912567 (464.3 MiB)  TX bytes:14726418 (14.0 MiB)

default via 192.168.1.1 dev wlan0 
192.168.1.0/24 dev wlan0  proto kernel  scope link  src 192.168.1.15 

fe80::213:72ff:fe83:e66 dev eth0 lladdr 00:13:72:83:0e:66 REACHABLE
192.168.1.19 dev wlan0 lladdr 00:13:72:83:0e:66 STALE
192.168.1.1 dev wlan0 lladdr 44:94:fc:39:1f:ce REACHABLE

--
Log in to 192.168.1.19:
$ ssh -X fe80::213:72ff:fe83:e66%eth0
Linux alum 3.2.0-4-686-pae #1 SMP Debian 3.2.81-1 i686
[...]
You have new mail.
Last login: Thu Aug 18 10:08:12 2016 from west
$ 

--
Transfer file from 192.168.1.19 back to the laptop:
$ scp -p a_file david@[fe80::21c:23ff:fe3b:9f34%eth0]:/tmp/
a_file 100% 1280KB   1.3MB/s   00:01
$ 

--
Log out of 192.168.1.19:
$ [typed ^D]
Connection to fe80::213:72ff:fe83:e66%eth0 closed.
$ 

--
Transfer a file from laptop to 192.168.1.19:
$ scp -p a_file david@[fe80::213:72ff:fe83:e66%eth0]:/tmp/
a_file 100% 1280KB   1.3MB/s   00:01
$ 
--

Reconnect 192.168.1.19 to the wall socket:
Linux west 3.16.0-4-686-pae #1 SMP Debian 3.16.7-ckt25-2+deb8u3 (2016-07-02) 
i686 GNU/Linux

eth0  Link encap:Ethernet  HWaddr 00:1c:23:3b:9f:34  
  inet6 addr: fe80::21c:23ff:fe3b:9f34/64 Scope:Link
  UP BROADCAST MULTICAST  MTU:1500  Metric:1
  RX packets:1385 errors:0 dropped:0 overruns:0 frame:0
  TX packets:1495 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:1457798 (1.3 MiB)  TX bytes:1464872 (1.3 MiB)
  Interrupt:18 

wlan0 Link encap:Ethernet  HWaddr 00:1c:bf:d5:28:76  
  inet 

Re: A minimalist network

2016-08-18 Thread Joe
On Thu, 18 Aug 2016 11:04:16 -0500
David Wright  wrote:


> 
> In days of yore, there was a minimum distance on coax because
> every transmission was effectively a broadcast, and had to pass a
> certain distance (≡time) before any reply would be recognised *as a
> reply* rather than the transmitter hearing itself transmitting.

I doubt that was it. A metre of coax will have a delay of 10-20ns,
which was the blink of an eye to hardware of that era. Collisions would
have been detected by abnormal levels, which is why termination of the
cable was such a big deal. Coax-based Ethernet was basically analogue
video technology. Except for, as you say, the damn' stupid 50 Ohms...

-- 
Joe



Subject: Adding partition(s) to a Debian install pendrive

2016-08-18 Thread rhkramer
Is there any way to add another partition after copying the the DVD-1 install 
image to the pendrive?  

I found subchapter 4.3. of the Debian GNU/Linux Installation Guide: "Preparing 
Files for USB Memory Stick Booting" 
(https://www.debian.org/releases/jessie/amd64/ch04s03.html.en) and tried to 
follow some of the instructions--In section 4.3.1. Preparing a USB stick using 
a hybrid CD or DVD image, I see:


The hybrid image on the stick does not occupy all the storage space, so it may 
be worth considering using the free space to hold firmware files or packages or 
any other files of your choice. This could be useful if you have only one stick 
or just want to keep everything you need on one device.

Create a second, FAT partition on the stick, mount the partition and copy or 
unpack the firmware onto it. For example:

# mount /dev/sdX2 /mnt
# cd /mnt
# tar zxvf /path/to/firmware.tar.gz
# cd /
# umount /mnt


From the above, I inferred that I should be able to create a 2nd partition 
after copying the DVD-1 image to the pendrive, but I tried quite a few 
approaches (that I might describe in a follwup email if someone really wants 
to know) and I'm beginning to believe it can't be done that way.

And, that, instead, you have to follow the procedures in section 4.3.3. 
"Manually copying files to the USB stick \u2014 the flexible way".  

I'll characterize those as, generally, partition the USB stick, then add the 
installer image (and, iiuc, you have to use a different install image than the 
DVD-1 .iso.) and a different procedure.

Am I missing something?

PS: Aside: The "instructions" above don't address creating a second FAT 
partition, only copying stuff to it after it is created--I may send a patch to 
the maintainer of that document after I fully understand the situation to make 
it more clear.



Re: A minimalist network

2016-08-18 Thread David Wright
On Thu 18 Aug 2016 at 11:07:28 (-0400), rhkra...@gmail.com wrote:
> On Thursday, August 18, 2016 09:58:23 AM Richard Owlett wrote:
> > On 8/17/2016 8:07 PM, David Christensen wrote:
> > > On 08/17/2016 07:45 AM, Richard Owlett wrote:
> 
> > > 6.  Distances between devices.
> 
> ...
> 
> > 6. < 1 ft.
> 
> Because I learned one thing here already (Gigabit ethernet usually doesn't 
> require crossover cables), I'll see if I can learn something else ;-)
> 
> Back in the "good ole days" there used to be a minimum segment / cable length 
> for an Ethernet cable--I don't recall to what all it applied--i.e., I don't 
> recall if it applied to thick Ethernet, thin (coax) Ethernet, Cat 5 and Cat 
> 6, 
> all of the above or just some of the above.  I always used a minimum of 6' 
> and 
> that worked for me.
> 
> Does that apply for Gigabit Ethernet?

6 feet is sensible. This may be why modems and routers come with
6-foot cables, the cheapest guaranteed to work. Shorter could give
problems with cheap devices.

But there's no harm in the devices themselves being closer,
eg stacked, as long as the ventilation works and you don't have our
sort of weather (often >100°F outside).

In days of yore, there was a minimum distance on coax because
every transmission was effectively a broadcast, and had to pass a
certain distance (≡time) before any reply would be recognised *as a
reply* rather than the transmitter hearing itself transmitting.
And if you had a problem, everyone on that segment would share it too.
They say half a metre, but we were not allowed anything less than
one metre. And 50Ω, not 75Ω TV cable!

Cheers,
David.



Re: exim4 under jessie vs wheezy

2016-08-18 Thread Jeffrey Mark Siskind
   > I just changed /etc/mailname on all of my machines to contain:
   > 
   > qobi@upplysingaoflun>cat /etc/mailname
   > purdue.edu

   You know it makes sense to do this. :)

I had never manually edited /etc/mailname. I took whatever what put there by
the debian installer perhaps as modified by whatever packages I installed and
by running dpkg-reconfigure exim4-config.

As per another post, on thakaa running wheezy I have

   qobi@thakaa>cat /etc/mailname 
   thakaa.ecn.purdue.edu
   qobi@thakaa>tail -n 1 /etc/aliases
   root: q...@purdue.edu
   qobi@thakaa>

and it does correctly forward mail to root to q...@purdue.edu.

On upplysingaoflun running jessie I have

   qobi@upplysingaoflun>cat /etc/mailname
   ecn.purdue.edu
   qobi@upplysingaoflun>tail -n 1 /etc/aliases
   root: q...@purdue.edu
   qobi@upplysingaoflun>

and it does not. I have tried putting each of
   upplysingaoflun.ecn.purdue.edu
   ecn.purdue.edu
   purdue.edu
in upplysingaoflun:/etc/mailname and none of them work. The debian installer,
perhaps as modified by dpkg-reconfigure exim4-config put
upplysingaoflun.ecn.purdue.edu in upplysingaoflun:/etc/mailname

   But it does qualify a bare qobi or root correctly.

Neither thakaa (wheezy) nor upplysingaoflun (jessie) will qualify a bare qobi.
I don't care about that. It would be nice to fix (i.e. send to @purdue.edu)
but is not crucial.

Thakaa (whezy) but not upplysingaoflun (jessie) will ultimately get mail
addressed to a bare root to q...@purdue.edu. That is what I would like to fix
on upplysingaoflun (and all of my other machines running jessie).

Thanks for everyone's help on this.

Jeff (http://engineering.purdue.edu/~qobi)



Re: exim4 under jessie vs wheezy

2016-08-18 Thread Jeffrey Mark Siskind
   I would bet you do not recall what you answered to the questions regarding
   mail config when installing wheezy.

I kept records of what I answered to those questions when installing sarge,
etch, lenny, squeeze, and wheezy.

   If you have a backup copy of /etc/exim4 you could diff and see.

All my machines save two have been upgraded to jessie. One (thakaa) is running
wheezy and one is runnign squeeze. I just tried on the machine running wheezy.

I just tried thakaa (wheezy) and it did correctly send mail that was addressed
to root to q...@purdue.edu. But it did not on upplysingaoflun (jessie).

I don't understand the files in /etc/exim4. I didn't create them. I just ran
dpkg-reconfigure exim4-config and edited /etc/aliases and
/etc/exim4/passwd.client (and more recently /etc/mailname on upplysingaoflun;
it has been unchanged on thakaa since install).

Any help on how to fix this would be appreciated.

Jeff (http://engineering.purdue.edu/~qobi)
---
qobi@thakaa>diff -r -q /tmp/{upplysingaoflun,thakaa}/
Files /tmp/upplysingaoflun/exim4/conf.d/auth/30_exim4-config_examples and 
/tmp/thakaa/exim4/conf.d/auth/30_exim4-config_examples differ
Files /tmp/upplysingaoflun/exim4/conf.d/router/200_exim4-config_primary and 
/tmp/thakaa/exim4/conf.d/router/200_exim4-config_primary differ
Files /tmp/upplysingaoflun/exim4/conf.d/router/500_exim4-config_hubuser and 
/tmp/thakaa/exim4/conf.d/router/500_exim4-config_hubuser differ
Files /tmp/upplysingaoflun/exim4/conf.d/transport/30_exim4-config_maildrop_pipe 
and /tmp/thakaa/exim4/conf.d/transport/30_exim4-config_maildrop_pipe differ
Files /tmp/upplysingaoflun/exim4/conf.d/transport/30_exim4-config_remote_smtp 
and /tmp/thakaa/exim4/conf.d/transport/30_exim4-config_remote_smtp differ
Files 
/tmp/upplysingaoflun/exim4/conf.d/transport/30_exim4-config_remote_smtp_smarthost
 and /tmp/thakaa/exim4/conf.d/transport/30_exim4-config_remote_smtp_smarthost 
differ
Files /tmp/upplysingaoflun/exim4/exim4.conf.template and 
/tmp/thakaa/exim4/exim4.conf.template differ
qobi@thakaa>

qobi@thakaa>diff -r /tmp/{upplysingaoflun,thakaa}/
diff -r /tmp/upplysingaoflun/exim4/conf.d/auth/30_exim4-config_examples 
/tmp/thakaa/exim4/conf.d/auth/30_exim4-config_examples
39c39
< #   server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}}
---
> #   server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
54c54
< #   server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}}
---
> #   server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
80c80
< #   server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}}
---
> #   server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
91c91
< #   server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}}
---
> #   server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
100c100
< #   server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}}
---
> #   server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
109c109
< #   server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}}
---
> #   server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
127c127
< #   server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}}
---
> #   server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
136c136
< #   server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}}
---
> #   server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
155c155
< #   server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}}
---
> #   server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
170c170
< #   server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}}
---
> #   server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
191c191
< #   server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}}
---
> #   server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
225c225
<   client_send = "<; ${if !eq{$tls_out_cipher}{}\
---
>   client_send = "<; ${if !eq{$tls_cipher}{}\
241c241
<   {!eq{$tls_out_cipher}{}}\
---
>   {!eq{$tls_cipher}{}}\



diff -r /tmp/upplysingaoflun/exim4/conf.d/router/200_exim4-config_primary 
/tmp/thakaa/exim4/conf.d/router/200_exim4-config_primary
82c82
<   host_find_failed = ignore
---
>   host_find_failed = defer



diff -r /tmp/upplysingaoflun/exim4/conf.d/router/500_exim4-config_hubuser 
/tmp/thakaa/exim4/conf.d/router/500_exim4-config_hubuser
26c26
<   host_find_failed = ignore
---
>   host_find_failed = defer



diff -r 
/tmp/upplysingaoflun/exim4/conf.d/transport/30_exim4-config_maildrop_pipe 
/tmp/thakaa/exim4/conf.d/transport/30_exim4-config_maildrop_pipe
7,8d6
<   message_prefix =
<   message_suffix =



diff -r /tmp/upplysingaoflun/exim4/conf.d/transport/30_exim4-config_remote_smtp 
/tmp/thakaa/exim4/conf.d/transport/30_exim4-config_remote_smtp
42,47d41
< .ifdef REMOTE_SMTP_TLS_CERTIFICATE
< tls_certificate = REMOTE_SMTP_TLS_CERTIFICATE
< .endif
< .ifdef REMOTE_SMTP_PRIVATEKEY
< 

Re: A minimalist network

2016-08-18 Thread Tim McDonough

On 8/18/2016 10:07 AM, rhkra...@gmail.com wrote:
Because I learned one thing here already (Gigabit ethernet usually 
doesn't

require crossover cables), I'll see if I can learn something else ;-)

Back in the "good ole days" there used to be a minimum segment / cable length
for an Ethernet cable--I don't recall to what all it applied--i.e., I don't
recall if it applied to thick Ethernet, thin (coax) Ethernet, Cat 5 and Cat 6,
all of the above or just some of the above.  I always used a minimum of 6' and
that worked for me.

Does that apply for Gigabit Ethernet?


I believe that only applied to the older 10Base2 (thinnet) type networks 
that used coaxial cables instead of twisted pair wiring. I do not recall 
the minimum length either.


Tim



Re: A minimalist network

2016-08-18 Thread Lisi Reisz
On Thursday 18 August 2016 16:07:28 rhkra...@gmail.com wrote:
> Back in the "good ole days" there used to be a minimum segment / cable
> length for an Ethernet cable--I don't recall to what all it applied--i.e.,
> I don't recall if it applied to thick Ethernet, thin (coax) Ethernet, Cat 5
> and Cat 6, all of the above or just some of the above.  I always used a
> minimum of 6' and that worked for me.

I have frequently used shorter ones.  I think that the shortest I have ever 
actually used was 30 cm. (12") (Cat 5 and Cat 5e.)  So far I have never had 
occasion to use a short Cat6 patch cable.

Lisi



Re: Frequent Hash Sum mismatch on jessie-backports with apt-get update

2016-08-18 Thread Henrique de Moraes Holschuh
On Thu, 18 Aug 2016, Greg Wooledge wrote:
> Now, starting last week, the problem is that when I try to apt-get update,
> the files coming from security.debian.org HANG at 100% complete.  It
> looks something like this:

While it really might be something else completely, the anti-virus
function of an "UTM" box (firewall+av+ips+ids+content filter+kitchen
sink) box is your first suspect.

You could try using https. It might help, or it might make matters much
worse.

-- 
  Henrique Holschuh



Re: A minimalist network

2016-08-18 Thread Lisi Reisz
On Thursday 18 August 2016 14:58:23 Richard Owlett wrote:
> On 8/17/2016 8:07 PM, David Christensen wrote:
> > On 08/17/2016 07:45 AM, Richard Owlett wrote:
> >> I wish to connect two laptops via Ethernet.
> >>
> >> The Debian machine is having various configurations of Jessie installed.
> >> Consider it a laboratory experiment. It can have multiple installs in a
> >> day. It intentionally has *NO* internet connectivity. It has a small
> >> partition set aside for preseed.cfg and miscellaneous scripts.
> >>
> >> The second machine is running WinXP Pro SP3 and serves as source of
> >> preseed and script files.
> >>
> >> My internet searches turn up too much outdated information and/or fine
> >> detail. Most link assume a server with multiple clients. Better
> >> description would be a peer to peer setup. It may be convenient to have
> >> the Windows machine act as a terminal for the Debian machine.
> >
> > It would help if you provided more information about your network and
> > computers:
> >
> > 1.  Laptop make, model, and version, CPU make and model, RAM size,
> > HDD/SSD size, and Ethernet speed of Windows laptop.
> >
> > 2.  Experimental laptop and key parameters (as above).
> >
> > 3.  Internet modem or gateway.
> >
> > 4.  Router and/or routing software.
> >
> > 5.  Any other devices we should know about.
> >
> > 6.  Distances between devices.
>
> 1. ThinkPad T43 [https://support.lenovo.com/us/en/documents/pd012235]
> 2. ThinkPad R61 [https://support.lenovo.com/us/en/documents/pd013965]
> 3. N/A
> 4. TBD
> 5. none
> 6. < 1 ft.

Are you not on the Internet at all?  I thought that your Windows computer did 
have a *limited* connection, at which rate you must have a modem of some 
kind, albeit possibly internal.

Lisi



Re: A minimalist network

2016-08-18 Thread Henrique de Moraes Holschuh
On Thu, 18 Aug 2016, rhkra...@gmail.com wrote:
> Back in the "good ole days" there used to be a minimum segment / cable length 
> for an Ethernet cable--I don't recall to what all it applied--i.e., I don't 
> recall if it applied to thick Ethernet, thin (coax) Ethernet, Cat 5 and Cat 
> 6, 
> all of the above or just some of the above.  I always used a minimum of 6' 
> and 
> that worked for me.
> 
> Does that apply for Gigabit Ethernet?

Sort of, but not directly.

Ethernet and fast-ethernet have minimum cable lengths specified.  There
is no minimum cable length specified for gigabit ethernet (1000BASE-T).

For gigabit ethernet, what matters is that none of the crosstalk
parameters are exceeded.  So, any length of cable *as long as it
certifies as CAT5e/6/6A* will work for gigabit ethernet.

In practice, you'll find good CAT6 1m patch cables readly available,
I've never seen anyone bother selling anything shorter than that, but
YMMV.

-- 
  Henrique Holschuh



Re: soucis avec ffmpeg et youtube-dl et certificats ssl

2016-08-18 Thread Vincent Lefevre
On 2016-08-18 16:14:26 +0200, Erwan David wrote:
> On Thu, Aug 18, 2016 at 03:56:42PM CEST, Vincent Lefevre  
> said:
> > On 2016-08-17 20:23:13 +0200, Bernard Schoenacker wrote:
> > > bonjour,
> > > 
> > > sur un ordi fraichelment mis à jour je n'arrive pas à télécharger un
> > > morceau de musique :
> > > 
> > >  youtube-dl  -x  "http://www.youtube.com/watch?v=dvWxoYULWrw;
> > > [youtube] dvWxoYULWrw: Downloading webpage
> > > ERROR: Unable to download webpage:  > > CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)>
> > > (caused by URLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED]
> > > certificate verify failed (_ssl.c:590)'),))
> > 
> > Une erreur SSL pour une URL qui n'est même pas https???
> > Ça mérite un rapport de bug.
> 
> http -> 301 vers l'URL en https
> ultracourant.

Le message d'erreur n'indique pas une telle redirection.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)



Re: A minimalist network

2016-08-18 Thread rhkramer
On Thursday, August 18, 2016 09:58:23 AM Richard Owlett wrote:
> On 8/17/2016 8:07 PM, David Christensen wrote:
> > On 08/17/2016 07:45 AM, Richard Owlett wrote:

> > 6.  Distances between devices.

...

> 6. < 1 ft.

Because I learned one thing here already (Gigabit ethernet usually doesn't 
require crossover cables), I'll see if I can learn something else ;-)

Back in the "good ole days" there used to be a minimum segment / cable length 
for an Ethernet cable--I don't recall to what all it applied--i.e., I don't 
recall if it applied to thick Ethernet, thin (coax) Ethernet, Cat 5 and Cat 6, 
all of the above or just some of the above.  I always used a minimum of 6' and 
that worked for me.

Does that apply for Gigabit Ethernet?



Re: créer un répertoire avec la date du jour

2016-08-18 Thread Bernard Schoenacker
Le Thu, 18 Aug 2016 16:54:38 +0200 (CEST),
Pierre Frenkiel  a écrit :

> On Thu, 18 Aug 2016, Bernard Schoenacker wrote:
> 
> > bonjour,
> >
> > je ne sais plus comment faire pour créer un répertoire qui intègre
> > la date du jour  
> 
> bonjour,
> qu'entendez-vous par là?
> 
>(la réponse "pas grand chose" est interdite...)
> 
>Quand on crée un un répertoire, il est à la date du jour.
>Pour lui donner une autre date:
>touch -t "${YY}${MM}${DD}${hh}$mm" dir
> 
> Cordialement,

bonjour,

la réponse de erwan david me suffit amplement

slt
bernard



Re: créer un répertoire avec la date du jour

2016-08-18 Thread Pierre Frenkiel

On Thu, 18 Aug 2016, Bernard Schoenacker wrote:


bonjour,

je ne sais plus comment faire pour créer un répertoire qui intègre la
date du jour


   bonjour,
   qu'entendez-vous par là?

  (la réponse "pas grand chose" est interdite...)

  Quand on crée un un répertoire, il est à la date du jour.
  Pour lui donner une autre date:
  touch -t "${YY}${MM}${DD}${hh}$mm" dir

Cordialement,
--
Pierre Frenkiel

Re: créer un répertoire avec la date du jour

2016-08-18 Thread Jean-Marc
Thu, 18 Aug 2016 16:03:44 +0200
Erwan David  écrivait :

> On Thu, Aug 18, 2016 at 03:55:51PM CEST, Bernard Schoenacker 
>  said:
> > bonjour,
> > 
> > je ne sais plus comment faire pour créer un répertoire qui intègre la
> > date du jour
> > 
> > slt
> > bernard
> > 
> 
> mkdir rep-$(date +'%Y-%m-%d')

Pour info, '%Y-%m-%d' = %F

La commande ci-dessus peut être remplacée par :
mkdir rep-$(date +%F)

8 caractères en moins. Uniquement pour fainéants comme moi.

Jean-Marc 


pgpSesIByJLkd.pgp
Description: PGP signature


Re: "No soundcard"-problem after reboot on 1005HA without speakers

2016-08-18 Thread Jude DaShiell
Have you run aplay -L?  Can you run amixer set Master 85% then alsactl 
store?  Last commands as root or sudo root most likely.


On Thu, 18 Aug 2016, Jonas Hedman wrote:


Date: Thu, 18 Aug 2016 09:29:13
From: Jonas Hedman 
To: debian-user@lists.debian.org
Subject: "No soundcard"-problem after reboot on 1005HA without speakers

Hello

I have a Asus Eee PC 1005HA on which I run Jessie. The thing is that the
speakers have been physically removed and I am having trouble getting
audio to work via the headphone jack.

However, if I run

# apt-get remove --purge alsa-base pulseaudio

and then reinstall them both and reboot it works perfectly. If I go to
alsamixer I see HDA Intel, Chip: Realtek ALC269 and:
cat /proc/asound/cards
0 [Intel]: HDA-Intel - HDA Intel
   HDA Intel at 0xf7db8000 irq 44

But when I reboot the computer again I'm back to square one and my
soundcard can't seem to be found.

$ lspci | grep Audio
00:1b.0 Audio device: Intel Corporation NM10/ICH7 Family High Definition
Audio Controller (rev 02)

# alsamixer
cannot open mixer: No such file or directory

also if I open the gui pulse mixer no sound card is found.

# cat /proc/asound/cards
--- no soundcards ---

# alsactl init
alsactl: init:1758: No soundcards found...

# journalctl | grep snd
Aug 18 15:16:02 noether kernel: snd_hda_intel :00:1b.0: irq 44 for
MSI/MSI-X
Aug 18 15:16:02 noether kernel: snd_hda_intel :00:1b.0: no codecs
found!

I can then purge and reinstall to make it work temporarily again which I
tried a number of times just to make sure that the behavior is
consistent.

How can I make alsa/pulse remember my card after purge/reinstall?

Regards



--



Re: A minimalist network

2016-08-18 Thread Lisi Reisz
On Thursday 18 August 2016 13:04:39 Richard Owlett wrote:
> On 8/17/2016 4:26 PM, Lisi Reisz wrote:
> > On Wednesday 17 August 2016 21:48:20 Richard Owlett wrote:
> >> [snip]
> >> The web hits I got for zeroconf indicated it's part of a support
> >> package for KDE, I'm using Mate. Don't know if that's a problem.
> >> http://manpages.debian.org/cgi-bin/man.cgi is still giving a 404
> >> error so I can't check there. Didn't find any link at kde.org
> >> that looked promising.
> >
> > Try one of these:
> > http://mate-desktop.com/community/
> >
> > They are a helpful enthusiastic lot.
> >
> > Lisi
>
> In a brief visit didn't find what I was looking for.

Perhaps the mailing list??

> *BUT* searching their wiki for "networking" led to a Arch Linux
> page which listed the key modules for Mate. That will allow me to
> install a leaner Jessie. Will get a chance to experiment with
> that this afternoon. Thanks.

Good!!

Lisi



Re: "No soundcard"-problem after reboot on 1005HA without speakers

2016-08-18 Thread Reco
Hi.

On Thu, 18 Aug 2016 15:29:13 +0200
Jonas Hedman  wrote:

This:

> Aug 18 15:16:02 noether kernel: snd_hda_intel :00:1b.0: no codecs
> found!

tells us that Jessie's kernel finds your soundcard, but for some reason
udev does not load supplementary (yet needed) kernel modules to actually
produce sound.


> I can then purge and reinstall to make it work temporarily again which I
> tried a number of times just to make sure that the behavior is
> consistent.

And that tells us that running Pulseaudio (or alsa-base post-install
script) requests to load such kernel modules.


> How can I make alsa/pulse remember my card after purge/reinstall?

It's simple.

Make your laptop enter this 'broken' state, in which no soundcard is
'found'. Execute /sbin/lsmod, redirect its output to some file.

Make your laptop enter 'correct' state, execute /sbin/lsmod again,
redirect the output to some other file.

Compare two outputs, put the difference in /etc/modules. Since such
approach is much of a band-aid - expect the things to break again once
you'll upgrade to next Debian version.

Reco



Re: créer un répertoire avec la date du jour

2016-08-18 Thread Bernard Schoenacker
Le Thu, 18 Aug 2016 16:03:44 +0200,
Erwan David  a écrit :

> On Thu, Aug 18, 2016 at 03:55:51PM CEST, Bernard Schoenacker
>  said:
> > bonjour,
> > 
> > je ne sais plus comment faire pour créer un répertoire qui intègre
> > la date du jour
> > 
> > slt
> > bernard
> >   
> 
> mkdir rep-$(date +'%Y-%m-%d')
> 
> 
> 

bonjour,

merci de m'avoir rafraîchi la mémoire

slt
bernard



Re: soucis avec ffmpeg et youtube-dl et certificats ssl

2016-08-18 Thread Bernard Schoenacker
Le Thu, 18 Aug 2016 15:56:42 +0200,
Vincent Lefevre  a écrit :

> On 2016-08-17 20:23:13 +0200, Bernard Schoenacker wrote:
> > bonjour,
> > 
> > sur un ordi fraichelment mis à jour je n'arrive pas à télécharger un
> > morceau de musique :
> > 
> >  youtube-dl  -x  "http://www.youtube.com/watch?v=dvWxoYULWrw;
> > [youtube] dvWxoYULWrw: Downloading webpage
> > ERROR: Unable to download webpage:  > CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)>
> > (caused by URLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED]
> > certificate verify failed (_ssl.c:590)'),))  
> 
> Une erreur SSL pour une URL qui n'est même pas https???
> Ça mérite un rapport de bug.
> 

bonjour,

relire mon premier courriel contenant le BTS :

https://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=youtube-dl;dist=unstable

et ça impacte ffmpeg également (pas compris le pourquoi)

slt
bernard



Re: soucis avec ffmpeg et youtube-dl et certificats ssl

2016-08-18 Thread Erwan David
On Thu, Aug 18, 2016 at 03:56:42PM CEST, Vincent Lefevre  
said:
> On 2016-08-17 20:23:13 +0200, Bernard Schoenacker wrote:
> > bonjour,
> > 
> > sur un ordi fraichelment mis à jour je n'arrive pas à télécharger un
> > morceau de musique :
> > 
> >  youtube-dl  -x  "http://www.youtube.com/watch?v=dvWxoYULWrw;
> > [youtube] dvWxoYULWrw: Downloading webpage
> > ERROR: Unable to download webpage:  > CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)>
> > (caused by URLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED]
> > certificate verify failed (_ssl.c:590)'),))
> 
> Une erreur SSL pour une URL qui n'est même pas https???
> Ça mérite un rapport de bug.

http -> 301 vers l'URL en https
ultracourant.



Re: créer un répertoire avec la date du jour

2016-08-18 Thread Erwan David
On Thu, Aug 18, 2016 at 03:55:51PM CEST, Bernard Schoenacker 
 said:
> bonjour,
> 
> je ne sais plus comment faire pour créer un répertoire qui intègre la
> date du jour
> 
> slt
> bernard
> 

mkdir rep-$(date +'%Y-%m-%d')





Re: soucis avec ffmpeg et youtube-dl et certificats ssl

2016-08-18 Thread Vincent Lefevre
On 2016-08-17 20:23:13 +0200, Bernard Schoenacker wrote:
> bonjour,
> 
> sur un ordi fraichelment mis à jour je n'arrive pas à télécharger un
> morceau de musique :
> 
>  youtube-dl  -x  "http://www.youtube.com/watch?v=dvWxoYULWrw;
> [youtube] dvWxoYULWrw: Downloading webpage
> ERROR: Unable to download webpage:  CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)>
> (caused by URLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED]
> certificate verify failed (_ssl.c:590)'),))

Une erreur SSL pour une URL qui n'est même pas https???
Ça mérite un rapport de bug.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)



Re: Shell In A Box no quiere responder,,,

2016-08-18 Thread Camaleón
El Wed, 17 Aug 2016 17:40:25 -0300, Horacio escribió:

> Hola, espero que alguien tenga experiencia en el programa shellinabox
> para levantar una webshell,,,

Primera vez que lo leo :-)

> He instalado con éxito y sin problema el programa, he modificado el
> /etc/default/shellinabox para que atienda en el puerto que quiero, y
> esto lo demuestra,,,

Danos la salida de "/etc/default/shellinabox".

(...)

> Pero cuando por navegador intento conectar a http://127.0.0.1:9080

¿Has probado a usar una IP distinta de loopback?

> me da el error el navegador,,,
> ---
> La conexión fue restablecida

(...)

Prueba a desactivar momentáneamente el cortafuegos.

> el /var/log/syslog da este error extraño,,, que no tiene nada que ver 
> supongo,,,
> 
> Aug 17 17:22:37 azul2 named[11990]: validating mozilla.com/SOA: no valid 
> signature found
> Aug 17 17:22:37 azul2 named[11990]: validating 
> crkevej4n2eb86q8ooqslqc5eaj9h7k6.mozilla.com/NSEC3: no valid signature found
> Aug 17 17:22:37 azul2 named[11990]: validating 
> sumo.external.zlb.scl3.mozilla.com/A: no valid signature found

Named es el servidor de nombres bind (DNS) pero esos registros no apuntan 
a nada relacionado con el sistema local.

Saludos,

-- 
Camaleón



Re: A minimalist network

2016-08-18 Thread Brian
On Thu 18 Aug 2016 at 08:58:23 -0500, Richard Owlett wrote:

> On 8/17/2016 8:07 PM, David Christensen wrote:
> >On 08/17/2016 07:45 AM, Richard Owlett wrote:
> >>I wish to connect two laptops via Ethernet.
> >>
> >>The Debian machine is having various configurations of Jessie installed.
> >>Consider it a laboratory experiment. It can have multiple installs in a
> >>day. It intentionally has *NO* internet connectivity. It has a small
> >>partition set aside for preseed.cfg and miscellaneous scripts.
> >>
> >>The second machine is running WinXP Pro SP3 and serves as source of
> >>preseed and script files.
> >>
> >>My internet searches turn up too much outdated information and/or fine
> >>detail. Most link assume a server with multiple clients. Better
> >>description would be a peer to peer setup. It may be convenient to have
> >>the Windows machine act as a terminal for the Debian machine.
> >
> >It would help if you provided more information about your network and
> >computers:
> >
> >1.  Laptop make, model, and version, CPU make and model, RAM size,
> >HDD/SSD size, and Ethernet speed of Windows laptop.
> >
> >2.  Experimental laptop and key parameters (as above).
> >
> >3.  Internet modem or gateway.
> >
> >4.  Router and/or routing software.
> >
> >5.  Any other devices we should know about.
> >
> >6.  Distances between devices.
> >
> >
> 
> 1. ThinkPad T43 [https://support.lenovo.com/us/en/documents/pd012235]
> 2. ThinkPad R61 [https://support.lenovo.com/us/en/documents/pd013965]
> 3. N/A

You presumably have a modem/router already. The Debian machine doesn't
have to use it as gateway to the internet. Set up routing for it to send
packets to the local network only.



Re: A minimalist network

2016-08-18 Thread Richard Owlett

On 8/17/2016 8:07 PM, David Christensen wrote:

On 08/17/2016 07:45 AM, Richard Owlett wrote:

I wish to connect two laptops via Ethernet.

The Debian machine is having various configurations of Jessie installed.
Consider it a laboratory experiment. It can have multiple installs in a
day. It intentionally has *NO* internet connectivity. It has a small
partition set aside for preseed.cfg and miscellaneous scripts.

The second machine is running WinXP Pro SP3 and serves as source of
preseed and script files.

My internet searches turn up too much outdated information and/or fine
detail. Most link assume a server with multiple clients. Better
description would be a peer to peer setup. It may be convenient to have
the Windows machine act as a terminal for the Debian machine.


It would help if you provided more information about your network and
computers:

1.  Laptop make, model, and version, CPU make and model, RAM size,
HDD/SSD size, and Ethernet speed of Windows laptop.

2.  Experimental laptop and key parameters (as above).

3.  Internet modem or gateway.

4.  Router and/or routing software.

5.  Any other devices we should know about.

6.  Distances between devices.




1. ThinkPad T43 [https://support.lenovo.com/us/en/documents/pd012235]
2. ThinkPad R61 [https://support.lenovo.com/us/en/documents/pd013965]
3. N/A
4. TBD
5. none
6. < 1 ft.




créer un répertoire avec la date du jour

2016-08-18 Thread Bernard Schoenacker
bonjour,

je ne sais plus comment faire pour créer un répertoire qui intègre la
date du jour

slt
bernard



Re: Capturar vídeo mediante firewire

2016-08-18 Thread Camaleón
El Thu, 18 Aug 2016 12:28:42 +0200, Xavier Sarsanedas Trias escribió:

> Tengo una cámara Canon DV (modelo MV950) y quisiera pasar/capturar el
> vídeo a mi sistema Debian 8.5 mediante firewire.

(...)

sm01@stt008:~$ dmesg | grep firewire
[5.462148] firewire_ohci :06:07.0: PCI IRQ 28 -> rerouted to legacy IRQ 
16
[5.516073] firewire_ohci: Added fw-ohci device :06:07.0, OHCI v1.10, 4 
IR + 8 IT contexts, quirks 0x2
[5.572049] firewire_ohci: Added fw-ohci device :11:03.0, OHCI v1.10, 4 
IR + 8 IT contexts, quirks 0x2
[6.016066] firewire_core: created device fw0: GUID 08002856039a, S800
[6.072091] firewire_core: created device fw1: GUID 0030482022ca, S400

sm01@stt008:~$ lsmod | grep firewire
firewire_ohci  35772  0 
firewire_core  48449  1 firewire_ohci
crc_itu_t  12347  1 firewire_core

> A que se puede deber mi problema?
> Me falta un driver para la videocamara?
> Me falta algun módulo para cargar en el sistema relacionado con el
> firewire?
> La configuración de la tarjeta PCI puede no ser la correcta?
> 
> PD: todos los comandos mencionados los he ejecutado como usuario "root".

(...)

Huy... si mal no recuerdo, hace algún tiempo el driver del kernel eliminó 
la opción que permitía a los dispositivos firewire poder capturar vídeo 
por lo que ya no creaban el dispositivo correspondiente en "/dev/video0" 
y por lo tanto la captura no era posible. No recuerdo el motivo pero no 
debe ser difícil buscar información sobre esto en Internet...

https://kdenlive.org/user-manual/troubleshooting-and-common-problems/troubleshooting-firewire-capture
https://www.kernel.org/doc/Documentation/ABI/removed/raw1394

Saludos,

-- 
Camaleón



"No soundcard"-problem after reboot on 1005HA without speakers

2016-08-18 Thread Jonas Hedman
Hello 

I have a Asus Eee PC 1005HA on which I run Jessie. The thing is that the
speakers have been physically removed and I am having trouble getting
audio to work via the headphone jack.

However, if I run 

# apt-get remove --purge alsa-base pulseaudio

and then reinstall them both and reboot it works perfectly. If I go to
alsamixer I see HDA Intel, Chip: Realtek ALC269 and:
cat /proc/asound/cards
 0 [Intel]: HDA-Intel - HDA Intel
HDA Intel at 0xf7db8000 irq 44

But when I reboot the computer again I'm back to square one and my 
soundcard can't seem to be found.

$ lspci | grep Audio
00:1b.0 Audio device: Intel Corporation NM10/ICH7 Family High Definition
Audio Controller (rev 02)

# alsamixer
cannot open mixer: No such file or directory

also if I open the gui pulse mixer no sound card is found. 

# cat /proc/asound/cards
--- no soundcards ---

# alsactl init 
alsactl: init:1758: No soundcards found...

# journalctl | grep snd
Aug 18 15:16:02 noether kernel: snd_hda_intel :00:1b.0: irq 44 for
MSI/MSI-X
Aug 18 15:16:02 noether kernel: snd_hda_intel :00:1b.0: no codecs
found!

I can then purge and reinstall to make it work temporarily again which I
tried a number of times just to make sure that the behavior is
consistent.

How can I make alsa/pulse remember my card after purge/reinstall?

Regards
-- 
Jonas Hedman 

PGP:   8F72 C5BE AAFA B4BA 8F46  9185 5C39 89E0 616B B08C
XMPP:  n...@nstr.se 3778B2B8 1E1F192A E12F7046 EACA5C35 24F05C7E


signature.asc
Description: Digital signature


Re: Frequent Hash Sum mismatch on jessie-backports with apt-get update

2016-08-18 Thread Greg Wooledge
On Thu, Aug 18, 2016 at 04:47:55AM -0700, poiuytrez wrote:
> I have frequent errors when I do apt-get update: 
> W: Failed to fetch 
> http://http.debian.net/debian/dists/jessie-backports/main/source/Sources  
> Hash Sum mismatch

For you, I would suggest trying a different mirror.

$ host http.debian.net
http.debian.net is an alias for httpredir.debian.org.

This redirection service works very well for some people, and very poorly
for other people.  You appear to be in the latter group.

You can either select a single mirror directly from:
https://www.debian.org/mirror/list

(the single mirrors are listed at the bottom of the page)

or you can use one of the country-code round robin services, such as:
http://ftp.us.debian.org/debian/
http://ftp.ca.debian.org/debian/

(the round robins are listed at the top of the page).

Obviously you would want to choose a country that's close to you,
network-wise.

> Sometimes it works, sometimes it doesn't. The problem appeared on all my
> servers running Debian 8 (hosted on Google Cloud Platform) the last couple of
> days. 

I have also experienced a MASSIVE problem with apt-get in the last week
or so.  I don't know if it's the same problem you're having, or totally
unrelated, but I am going to piggyback on your thread.

I have my problem at WORK only.  At work, I am trapped inside a firewalled
network.  I have no control over the firewall.  The entities who control
it are mysterious dark wizards who do not reveal themselves or their
secrets to mere mortals like me.

One of the past features of this firewall was a "transparent" (worst term
ever) HTTP proxy with forced authentication (user name and password).
I was able to plead to get an exception in place.  HTTP connections coming
from my desktop workstation's IP address weren't required to perform a
Windows Active Directory login to the HTTP proxy.  So I put a Squid proxy
on my workstation and told all of the Debian servers to use that for apt.

This worked well enough for years.

Now, starting last week, the problem is that when I try to apt-get update,
the files coming from security.debian.org HANG at 100% complete.  It
looks something like this:

root@ebase-fla:~# apt-get update
Hit http://ftp.us.debian.org wheezy Release.gpg
Hit http://ftp.us.debian.org wheezy-updates Release.gpg
Hit http://ftp.us.debian.org wheezy Release
Hit http://ftp.us.debian.org wheezy-updates Release
Hit http://ftp.us.debian.org wheezy/main Sources 
Hit http://ftp.us.debian.org wheezy/contrib Sources
Hit http://ftp.us.debian.org wheezy/non-free Sources   
Hit http://ftp.us.debian.org wheezy/main amd64 Packages
Hit http://ftp.us.debian.org wheezy/contrib amd64 Packages 
Hit http://ftp.us.debian.org wheezy/non-free amd64 Packages
Hit http://ftp.us.debian.org wheezy/contrib Translation-en 
Hit http://ftp.us.debian.org wheezy/main Translation-en
Hit http://ftp.us.debian.org wheezy/non-free Translation-en
Hit http://ftp.us.debian.org wheezy-updates/main Sources   
Hit http://ftp.us.debian.org wheezy-updates/contrib Sources
Hit http://ftp.us.debian.org wheezy-updates/non-free Sources   
Hit http://ftp.us.debian.org wheezy-updates/main amd64 Packages/DiffIndex
Hit http://ftp.us.debian.org wheezy-updates/contrib amd64 Packages 
Hit http://ftp.us.debian.org wheezy-updates/non-free amd64 Packages/DiffIndex  
Hit http://ftp.us.debian.org wheezy-updates/contrib Translation-en 
Hit http://ftp.us.debian.org wheezy-updates/main Translation-en/DiffIndex  
Hit http://ftp.us.debian.org wheezy-updates/non-free Translation-en/DiffIndex  
Hit http://security.debian.org wheezy/updates Release.gpg  
Hit http://security.debian.org wheezy/updates Release
Hit http://security.debian.org wheezy/updates/contrib Sources
Hit http://security.debian.org wheezy/updates/non-free Sources
Get:1 http://security.debian.org wheezy/updates/main amd64 Packages [426 kB]
Hit http://security.debian.org wheezy/updates/contrib amd64 Packages   
Hit http://security.debian.org wheezy/updates/non-free amd64 Packages
Hit http://security.debian.org wheezy/updates/contrib Translation-en
Hit http://security.debian.org wheezy/updates/non-free Translation-en  
Get:2 http://security.debian.org wheezy/updates/main Sources [276 kB]
Get:3 http://security.debian.org wheezy/updates/main amd64 Packages [426 kB]   
Ign http://security.debian.org wheezy/updates/main Translation-en  
Get:4 http://security.debian.org wheezy/updates/main Sources [276 kB]
Err http://security.debian.org wheezy/updates/main amd64 Packages
  404  Not Found [IP: 128.101.240.215 80]
Fetched 69.9 kB in 22min 8s (52 B/s)
W: 

Re: Shell In A Box no quiere responder,,,

2016-08-18 Thread Cristian Mitchell
El 18 de agosto de 2016, 09:30, Horacio escribió:

> El día 17 de agosto de 2016, 17:45, Antonio Galicia
>  escribió:
> >
> > ¿Ya probaste conectarte por https?
>
>
> Si,,, y funca menos,,, porque el el server atiende por el protocolo
> http y no https,,,
>
> >
> >
> >  Saludos,
> >  Antonio Galicia
> >
> > Eram quod es, eris quod sum
> > --
> >
> > Use my invite code, i9j3t, and get a free ride up to MEX$150. Redeem it
> at
> > https://www.uber.com/invite/i9j3t
> >
> >
> > El 17 de agosto de 2016, 15:40, Horacio escribió:
> >>
> >> Hola, espero que alguien tenga experiencia en el programa shellinabox
> >> para levantar una webshell,,,
> >>
> >> He instalado con éxito y sin problema el programa, he modificado el
> >> /etc/default/shellinabox para que atienda en el puerto que quiero, y
> >> esto lo demuestra,,,
> >>
> >> root@azul2:~# netstat -nap | grep shellinabox
> >> tcp0  0 0.0.0.0:90800.0.0.0:*
> >> ESCUCHAR11372/shellinaboxd
> >> unix  3  [ ] FLUJO  CONECTADO 349337
> >> 11373/shellinaboxd
> >> unix  3  [ ] FLUJO  CONECTADO 349322
> >> 11372/shellinaboxd
> >> unix  3  [ ] FLUJO  CONECTADO 349336
> >> 11372/shellinaboxd
> >>
> >>
> >> Pero cuando por navegador intento conectar a http://127.0.0.1:9080
> >>
> >> me da el error el navegador,,,
> >> ---
> >> La conexión fue restablecida
> >>
> >> La conexión con el servidor fue restablecida mientras se cargaba la
> >> página.
> >>
> >> El sitio puede no estar disponible temporariamente o estar
> >> sobrecargado. Intente nuevamente en unos momentos.
> >> Si no puede cargar ninguna página, verifique la conexión de su
> >> computadora a la red.
> >> Si su computadora o red están protegidas por un firewall o proxy,
> >> asegúrese que Firefox tiene permiso para acceder a la web.
> >> 
> >>
> >> Permiso para accede a dicho puerto existe en las políticas del ufw,,,
> >>
> >> ufw status
> >> Estado: activo
> >>
> >> Hasta  Acción  Desde
> >> -  --  -
> >> 20 ALLOW   Anywhere
> >> 21 ALLOW   Anywhere
> >> 22 ALLOW   Anywhere
> >> 80 ALLOW   Anywhere
> >> 631ALLOW   Anywhere
> >> 9080   ALLOW   Anywhere
> >>
> >> el /var/log/syslog da este error extraño,,, que no tiene nada que ver
> >> supongo,,,
> >>
> >> Aug 17 17:22:37 azul2 named[11990]:   validating mozilla.com/SOA: no
> >> valid signature found
> >> Aug 17 17:22:37 azul2 named[11990]:   validating
> >> crkevej4n2eb86q8ooqslqc5eaj9h7k6.mozilla.com/NSEC3: no valid signature
> >> found
> >> Aug 17 17:22:37 azul2 named[11990]: validating
> >> sumo.external.zlb.scl3.mozilla.com/A: no valid signature found
> >>
> >> 
> >>
> >> Alguien sabe que cuernos pasa? si tiene la solución me la puede
> >> facilitar,,, gracias,,,
> >>
> >
>
>
lo ejectaste en tu navegador local como localhost:9080?
y desbilitaste el ssl?

y por que no publicas el /etc/default/shellinabox

-- 
MrIX
Linux user number 412793.
http://counter.li.org/

las grandes obras,
las sueñan los santos locos,
las realizan los luchadores natos,
las aprovechan los felices cuerdo,
y las critican los inútiles crónicos,


Re: Frequent Hash Sum mismatch on jessie-backports with apt-get update

2016-08-18 Thread Brad Rogers
On Thu, 18 Aug 2016 04:47:55 -0700 (PDT)
poiuytrez  wrote:

Hello poiuytrez,

>What's wrong and what would you recommend?

If it persists for more than a day or two, I usually do;

# rm -r /var/lib/apt/lists/*

Not elegant but it works.

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
Watching the people get lairy
I Predict A Riot - Kaiser Chiefs


pgphUiBKdyiDA.pgp
Description: OpenPGP digital signature


Re: Shell In A Box no quiere responder,,,

2016-08-18 Thread Horacio
El día 17 de agosto de 2016, 17:45, Antonio Galicia
 escribió:
>
> ¿Ya probaste conectarte por https?


Si,,, y funca menos,,, porque el el server atiende por el protocolo
http y no https,,,

>
>
>  Saludos,
>  Antonio Galicia
>
> Eram quod es, eris quod sum
> --
>
> Use my invite code, i9j3t, and get a free ride up to MEX$150. Redeem it at
> https://www.uber.com/invite/i9j3t
>
>
> El 17 de agosto de 2016, 15:40, Horacio escribió:
>>
>> Hola, espero que alguien tenga experiencia en el programa shellinabox
>> para levantar una webshell,,,
>>
>> He instalado con éxito y sin problema el programa, he modificado el
>> /etc/default/shellinabox para que atienda en el puerto que quiero, y
>> esto lo demuestra,,,
>>
>> root@azul2:~# netstat -nap | grep shellinabox
>> tcp0  0 0.0.0.0:90800.0.0.0:*
>> ESCUCHAR11372/shellinaboxd
>> unix  3  [ ] FLUJO  CONECTADO 349337
>> 11373/shellinaboxd
>> unix  3  [ ] FLUJO  CONECTADO 349322
>> 11372/shellinaboxd
>> unix  3  [ ] FLUJO  CONECTADO 349336
>> 11372/shellinaboxd
>>
>>
>> Pero cuando por navegador intento conectar a http://127.0.0.1:9080
>>
>> me da el error el navegador,,,
>> ---
>> La conexión fue restablecida
>>
>> La conexión con el servidor fue restablecida mientras se cargaba la
>> página.
>>
>> El sitio puede no estar disponible temporariamente o estar
>> sobrecargado. Intente nuevamente en unos momentos.
>> Si no puede cargar ninguna página, verifique la conexión de su
>> computadora a la red.
>> Si su computadora o red están protegidas por un firewall o proxy,
>> asegúrese que Firefox tiene permiso para acceder a la web.
>> 
>>
>> Permiso para accede a dicho puerto existe en las políticas del ufw,,,
>>
>> ufw status
>> Estado: activo
>>
>> Hasta  Acción  Desde
>> -  --  -
>> 20 ALLOW   Anywhere
>> 21 ALLOW   Anywhere
>> 22 ALLOW   Anywhere
>> 80 ALLOW   Anywhere
>> 631ALLOW   Anywhere
>> 9080   ALLOW   Anywhere
>>
>> el /var/log/syslog da este error extraño,,, que no tiene nada que ver
>> supongo,,,
>>
>> Aug 17 17:22:37 azul2 named[11990]:   validating mozilla.com/SOA: no
>> valid signature found
>> Aug 17 17:22:37 azul2 named[11990]:   validating
>> crkevej4n2eb86q8ooqslqc5eaj9h7k6.mozilla.com/NSEC3: no valid signature
>> found
>> Aug 17 17:22:37 azul2 named[11990]: validating
>> sumo.external.zlb.scl3.mozilla.com/A: no valid signature found
>>
>> 
>>
>> Alguien sabe que cuernos pasa? si tiene la solución me la puede
>> facilitar,,, gracias,,,
>>
>



Re: exim4 under jessie vs wheezy

2016-08-18 Thread Brian
On Wed 17 Aug 2016 at 18:44:59 -0400, Jeffrey Mark Siskind wrote:

[...Quite a bit of snipping of very useful information].

> I just changed /etc/mailname on all of my machines to contain:
> 
> qobi@upplysingaoflun>cat /etc/mailname
> purdue.edu

You know it makes sense to do this. :)

> qobi@upplysingaoflun>ls -l /etc/mailname
> -rw-r--r-- 1 root root 11 Aug 17 18:08 /etc/mailname
> qobi@upplysingaoflun>
> 
> It does not deliver mail that is addressed to either qobi or root without @...

But it does qualify a bare qobi or root correctly.

> The enclosed may help. I don't know how to interpret them. They come from
> procmail on dynamo.ecn.purdue.edu, a machine that I don't maintain.
> 
> Jeff (http://engineering.purdue.edu/~qobi)
> ---
> From mailer-dae...@ecn.purdue.edu  Wed Aug 17 18:10:20 2016
> Return-Path: 
> Received: from mx05.ecn.purdue.edu (mx05.ecn.purdue.edu [128.46.4.13])
>   by dynamo.ecn.purdue.edu (8.14.4/8.14.4) with ESMTP id u7HMAKUs029433
>   (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 
> verify=NOT)
>   for ; Wed, 17 Aug 2016 18:10:20 -0400
> Received: from mailhub180.itcs.purdue.edu (mailhub180.itcs.purdue.edu 
> [128.210.5.180])
>   by mx05.ecn.purdue.edu (8.14.4/8.14.4) with ESMTP id u7HMAJFV019693
>   (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)
>   for ; Wed, 17 Aug 2016 18:10:19 -0400
> Received: from mailhub130.itcs.purdue.edu (mailhub130.itcs.purdue.edu 
> [128.210.5.130])
>   by mailhub180.itcs.purdue.edu (8.14.4/8.14.4/spamscan) with ESMTP id 
> u7HMAJYX008224
>   for ; Wed, 17 Aug 2016 18:10:19 -0400
> Received: from smtp.ecn.purdue.edu (mx05.ecn.purdue.edu [128.46.4.13])
>   by mailhub130.itcs.purdue.edu (8.14.4/8.14.4/mta.smtp.purdue.edu) with 
> ESMTP id u7HMAIWv018160
>   (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)
>   for ; Wed, 17 Aug 2016 18:10:19 -0400

qobi has been qualified by Exim. The mail is accepted and makes its way
to dynamo.ecn.purdue.edu.

> From: Mail Delivery Subsystem 

And then gets rejected :(

[...Snip...]

for this reason:

>- The following addresses had permanent fatal errors -
> 
> 
>- Transcript of session follows -
> 554 5.0.0 MX list for upplysingaoflun.ecn.purdue.edu. points back to 
> smtp.ecn.purdue.edu
> 554 5.3.5 Local configuration error

A mail loop, if I am not mistaken. My thoughts would now be turning to a
server misconfiguration.

[...A big snip...]

Let's try to pin this down and determine whether Exim plays a part.

  brian@desktop:~$ telnet smtp.ecn.purdue.edu 25
  Trying 128.46.177.5...
  Connected to smtp.ecn.purdue.edu.
  Escape character is '^]'.
  220 smtp.ecn.purdue.edu ESMTP Sendmail 8.14.4/8.14.4; Thu, 18 Aug 2016 
08:04:08 -0400
  ehlo example.com
  250-smtp.ecn.purdue.edu Hello copernicus.demon.co.uk [80.177.21.246], pleased 
to meet you
  250-ENHANCEDSTATUSCODES
  250-PIPELINING
  250-8BITMIME
  250-SIZE 314572800
  250-DSN
  250-ETRN
  250-STARTTLS
  250-DELIVERBY
  250 HELP
  mail from:br...@example.com
  530 5.7.0 Authentication required

You'll be able get further than me and see how the server handles rcpt 
to:q...@purdue.edu.



Re: A minimalist network

2016-08-18 Thread Richard Owlett

On 8/17/2016 8:52 PM, Miles Fidelman wrote:

On 08/17/2016 03:27 PM, Richard Owlett wrote:

I am groping for the questions I *SHOULD BE* asking ;/

Q:  How does Ethernet work?

Q:  How do TCP/IP local area networks work?

Q:  How does the Internet work?



https://www.amazon.com/Networking-Dummies-Doug-Lowe/dp/B01FBEEOBU/ref=sr_1_2?s=books=UTF8=1471484996=1-2=networking+for+dummies


That looks like a good starting point. Put in a request for a 
copy with local library.





or, for the real nitty gritty,

https://www.amazon.com/Computer-Networks-5th-Andrew-Tanenbaum/dp/0132126958


It spends too much space on internet. SeaMonkey is more than 
sufficient for me.






Frequent Hash Sum mismatch on jessie-backports with apt-get update

2016-08-18 Thread poiuytrez
Hello, 

I have frequent errors when I do apt-get update: 
W: Failed to fetch 
http://http.debian.net/debian/dists/jessie-backports/main/source/Sources  Hash 
Sum mismatch

W: Failed to fetch 
http://http.debian.net/debian/dists/jessie-backports/main/i18n/Translation-en  
Hash Sum mismatch

W: Failed to fetch 
http://http.debian.net/debian/dists/jessie-backports/main/binary-amd64/PackagesIndex
  Hash Sum mismatch

Sometimes it works, sometimes it doesn't. The problem appeared on all my 
servers running Debian 8 (hosted on Google Cloud Platform) the last couple of 
days. 

What's wrong and what would you recommend?

Thank you for your help.
poiuytrez

PS: cat /etc/apt.sources.list
deb http://httpredir.debian.org/debian/ jessie main
deb http://security.debian.org/ jessie/updates main
deb http://httpredir.debian.org/debian/ jessie-updates main
deb http://http.debian.net/debian jessie main
deb-src http://http.debian.net/debian jessie main

cat /etc/apt/sources.list.d/backports.list
deb http://httpredir.debian.org/debian/ jessie-backports main
deb-src http://httpredir.debian.org/debian/ jessie-backports main
deb http://http.debian.net/debian jessie-backports main
deb-src http://http.debian.net/debian jessie-backports main



Re: A minimalist network

2016-08-18 Thread Richard Owlett

On 8/17/2016 4:26 PM, Lisi Reisz wrote:

On Wednesday 17 August 2016 21:48:20 Richard Owlett wrote:

[snip]
The web hits I got for zeroconf indicated it's part of a support
package for KDE, I'm using Mate. Don't know if that's a problem.
http://manpages.debian.org/cgi-bin/man.cgi is still giving a 404
error so I can't check there. Didn't find any link at kde.org
that looked promising.


Try one of these:
http://mate-desktop.com/community/

They are a helpful enthusiastic lot.

Lisi


In a brief visit didn't find what I was looking for.
*BUT* searching their wiki for "networking" led to a Arch Linux 
page which listed the key modules for Mate. That will allow me to 
install a leaner Jessie. Will get a chance to experiment with 
that this afternoon. Thanks.




Re: soucis avec ffmpeg et youtube-dl et certificats ssl

2016-08-18 Thread Bernard Schoenacker
Le Thu, 18 Aug 2016 13:05:59 +0200,
Francois Mescam  a écrit :

> Je viens d'essayer sans problème :
> 
> $ youtube-dl  -x  "http://www.youtube.com/watch?v=dvWxoYULWrw;
> [youtube] dvWxoYULWrw: Downloading webpage
> [youtube] dvWxoYULWrw: Downloading video info webpage
> [youtube] dvWxoYULWrw: Extracting video information
> [youtube] dvWxoYULWrw: Downloading MPD manifest
> [download] Destination: Kol Nidre-dvWxoYULWrw.m4a
> [download] 100% of 3.93MiB in 00:02
> [ffmpeg] Correcting container in "Kol Nidre-dvWxoYULWrw.m4a"
> WARNING: Your copy of avconv is outdated, update avconv to version
> 10-0 or newer if you encounter any errors.
> [ffmpeg] Post-process file Kol Nidre-dvWxoYULWrw.m4a exists, skipping
> 
> Je suis en testing à jour de ce matin et j'ai youtube-dl :
> 
> iiyoutube-dl
> 
> 2016.02.22-1   all
> downloader of videos from YouTube and other sites
> 
bonjour,

merci pour la réflexion, mais je n'ai pas trouvé d'autre solution pour
un seul ordi (ancien) alors que les autres ne posent pas de problème

slt
bernard



Wordpress sites overzetten

2016-08-18 Thread Paul van der Vlis
Hoi,

Zit er in Debian ook een tool om Wordpress over te zetten naar een
andere URL of een ander path?  Of weten jullie een goede methode?

Ik doe het nu door de database te dumpen en dan zoek-en-vervang te doen
met rpl. Maar dit gaat niet altijd goed.

Groeten,
Paul.



-- 
Paul van der Vlis Linux systeembeheer Groningen
https://www.vandervlis.nl/



Re: soucis avec ffmpeg et youtube-dl et certificats ssl

2016-08-18 Thread Francois Mescam

Je viens d'essayer sans problème :

$ youtube-dl  -x  "http://www.youtube.com/watch?v=dvWxoYULWrw;
[youtube] dvWxoYULWrw: Downloading webpage
[youtube] dvWxoYULWrw: Downloading video info webpage
[youtube] dvWxoYULWrw: Extracting video information
[youtube] dvWxoYULWrw: Downloading MPD manifest
[download] Destination: Kol Nidre-dvWxoYULWrw.m4a
[download] 100% of 3.93MiB in 00:02
[ffmpeg] Correcting container in "Kol Nidre-dvWxoYULWrw.m4a"
WARNING: Your copy of avconv is outdated, update avconv to version 10-0 
or newer if you encounter any errors.

[ffmpeg] Post-process file Kol Nidre-dvWxoYULWrw.m4a exists, skipping

Je suis en testing à jour de ce matin et j'ai youtube-dl :

iiyoutube-dl    
   2016.02.22-1   all
downloader of videos from YouTube and other sites



On 17/08/2016 20:23, Bernard Schoenacker wrote:

bonjour,

sur un ordi fraichelment mis à jour je n'arrive pas à télécharger un
morceau de musique :

  youtube-dl  -x  "http://www.youtube.com/watch?v=dvWxoYULWrw;
[youtube] dvWxoYULWrw: Downloading webpage
ERROR: Unable to download webpage: 
(caused by URLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED]
certificate verify failed (_ssl.c:590)'),))

https://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=youtube-dl;dist=unstable

j'ai juste réinstallé la version stable et tout est rentré dans l'ordre

slt
bernard



--
 Francois Mescam



Re: A minimalist network

2016-08-18 Thread Pascal Hambourg

Le 18/08/2016 à 01:26, Henrique de Moraes Holschuh a écrit :


Too bad it is WinXP, otherwise you'd have instant connectivity via IPv6
SLAAC.


Windows XP supports IPv6. It is just disabled by default, so you need to 
enable it with something like "ipv6 enable". Even Windows 2000 could 
have experimental basic IPv6 support.


SLAAC (stateless address autoconfiguration) requires a properly 
configured IPv6 router sending RA's (router advertisements). Debian 
running radvd can do this.


Or do you mean link local addresses (fe80::/10) ? They're not the most 
convenient for everyday use.




Capturar vídeo mediante firewire

2016-08-18 Thread Xavier Sarsanedas Trias

Buenas,

Tengo una cámara Canon DV (modelo MV950) y quisiera pasar/capturar el 
vídeo a mi sistema Debian 8.5 mediante firewire.


Los puertos firewire de mi torre estan en una tarjeta PCI. Esta misma 
tarjeta la he utilizado en sistemas Windows sin problemas.


Tengo instalados los siguentes paquetes:
-dvgrab
-kdenlive
-kdenlive-data
-libavc1394-0
-libdc1394-22
-libiec61883-0
-libraw1394-11

Mediante el comando "lspci -vv" me devuelve la siguiente información:

04:07.4 FireWire (IEEE 1394): ULi Electronics Inc. M5253 P1394 OHCI 1.1 
Controller (prog-if 10 [OHCI])

Subsystem: Belkin Device 0519
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- 
Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- 
SERR-  no me devuelve nada

lsmod | grep firewire --> me devuelve lo siguiente:

firewire_ohci  39523  0
firewire_core  56665  1 firewire_ohci
crc_itu_t 12347  1 firewire_core

Mi intención es utilizar la aplicación "Kdenlive" que utiliza "dvgrab", 
así que des de terminal he intentado lanzar el comando "dvgrab -i" y me 
devuelve el siguente mensaje:


rom1394_1 warning: read failed: 0xf414
error reading config rom directory for node 1
Error: no camera exists

A que se puede deber mi problema?
Me falta un driver para la videocamara?
Me falta algun módulo para cargar en el sistema relacionado con el 
firewire?

La configuración de la tarjeta PCI puede no ser la correcta?

PD: todos los comandos mencionados los he ejecutado como usuario "root".

Un saludo.



Re: A minimalist network

2016-08-18 Thread Andy Smith
Hi Richard,

On Wed, Aug 17, 2016 at 05:27:13PM -0500, Richard Owlett wrote:
> The WinXP machine no longer reported a disconnected cable.
> The Jessie Mate machine now reported it was attempting to establish a
> connection.
> 
> IOW both machines recognized a PHYSICAL connection.
> *NOTHING MORE*

>From what I can gather of the thread, both of your machines have
gigabit interfaces. That's good as it means the Auto-MDIX feature is
virtually guaranteed be supported¹. So, you need not worry whether
your cable is crossover or not.

All you need to do now is statically configure both machines to be
in the same IP network. It does not really matter what numbers you
choose as long as they are valid, but convention dictates that you
should use one of the private networks as listed in RFC1918:

https://en.wikipedia.org/wiki/Private_network

As you are only going to have two machines on this network you could
a /30. In fact given there won't be a default gateway host you could
probably get away with a /31. But there is no need to make life
confusing: you can just use a /24, so your network has use of all of
the last octet of the address, e.g. 192.168.1.*.

So, let's say you did choose 192.168.1.0/24. Just configure one
machine as 192.168.1.1 and the other as 192.168.1.2 with a netmask
on both of 255.255.255.0. If either of them insists on needing a
default gateway you can just put the IP of the other machine there.

Your Debian machine is probably saying that it's "attempting to
establish a connection" because it has detected that you've plugged
in an Ethernet cable that has carrier (has the electrical properties
of a working Ethernet network), and is now trying to automatically
configure that interface with DHCP.

That's most likely going to fail because you don't have a DHCP
server on your "network"—unless you *did* happen to have a DHCP
server running on one of those two machines.

Since this setup is very limited and isn't going to change, I would
just statically configure the network on both machines. Setting up a
DHCP server would be just one more thing to learn.

Once your network is working you can use the same tools that you use
over the internet to transfer files over your local network. So,
things like scp, sftp and so on. If your purpose in direct
connection is to have a secure link that needs no encryption and
you're satisfied that it needs no encryption², then you could get
faster transfers with tools like netcat.

Cheers,
Andy

¹ Auto-MDIX is OPTIONAL in the 1000Base-T standard so it is possible
  that some gigabit NIC would not support it, but I have never seen
  one that doesn't, even really cheap ones.

² A lot of times just because you have a private link between
  machines still wouldn't make it safe to ignore encryption, because
  if the cable goes somewhere where you don't have 24/7 vision then
  it's trivial for someone to attach something that passively sniffs
  it. But, it sounds like this is a setup in the home where that is
  perhaps too paranoid.

Cheers,
Andy

-- 
http://bitfolk.com/ -- No-nonsense VPS hosting



Re: renommer en masse des fichiers m4a.mp3 en mp3

2016-08-18 Thread Bernard Schoenacker
Le Thu, 18 Aug 2016 10:54:17 +0200,
"JF Straeten"  a écrit :

> Hello,
> 
> On Thu, Aug 18, 2016 at 10:33:48AM +0200, Bernard Schoenacker wrote:
> 
> [...]
> > après avoir encodé au format mp3, je me retrouve avec des fichiers
> > nommés :
> > 
> > mon_fichier.m4a.mp3
> > 
> > 
> > comment supprimer le m4a ?  
> 
> rename 's/\.m4a//' *.mp3 ?
> 
> Hih,
> 
> 

bonjour,

merci beaucoup, je n'y avais pas pensé (trou de mémoire)

slt
bernard



Re: renommer en masse des fichiers m4a.mp3 en mp3

2016-08-18 Thread Bernard Schoenacker
Le Thu, 18 Aug 2016 10:53:23 +0200,
Jean-Michel OLTRA  a écrit :

> Bonjour,
> 
> 
> Le jeudi 18 août 2016, Bernard Schoenacker a écrit...
> 
> 
> > après avoir encodé au format mp3, je me retrouve avec des fichiers
> > nommés :  
> 
> > mon_fichier.m4a.mp3  
> 
> 
> > comment supprimer le m4a ?  
> 
> s="monfichier.m4a.mp3"; echo ${s%%m4a*}
> 
> La suite, je te la laisse…
> 

bonjour,

merci pour la commande

slt
bernard



Re: renommer en masse des fichiers m4a.mp3 en mp3

2016-08-18 Thread JF Straeten
Hello,

On Thu, Aug 18, 2016 at 10:33:48AM +0200, Bernard Schoenacker wrote:

[...]
> après avoir encodé au format mp3, je me retrouve avec des fichiers
> nommés :
> 
> mon_fichier.m4a.mp3
> 
> 
> comment supprimer le m4a ?

rename 's/\.m4a//' *.mp3 ?

Hih,


-- 

JFS.



Re: renommer en masse des fichiers m4a.mp3 en mp3

2016-08-18 Thread Jean-Michel OLTRA

Bonjour,


Le jeudi 18 août 2016, Bernard Schoenacker a écrit...


> après avoir encodé au format mp3, je me retrouve avec des fichiers
> nommés :

> mon_fichier.m4a.mp3


> comment supprimer le m4a ?

s="monfichier.m4a.mp3"; echo ${s%%m4a*}

La suite, je te la laisse…

-- 
jm



renommer en masse des fichiers m4a.mp3 en mp3

2016-08-18 Thread Bernard Schoenacker
bonjour,

après avoir encodé au format mp3, je me retrouve avec des fichiers
nommés :

mon_fichier.m4a.mp3


comment supprimer le m4a ?

slt
bernard



Re: exim4 under jessie vs wheezy

2016-08-18 Thread deloptes
Jeffrey Mark Siskind wrote:

> I did not modify /etc/mailname. It contained whatever the debian installer
> put there or perhaps what dpkg-reconfigure exim4-config put there with the
> answers to the questions I put in my original post. These are the same
> answers I have given under wheezy and previous releases. I did the same
> configuration under wheezy and previous releases. It used to work and
> stopped working with a fresh install of jessie.

I would bet you do not recall what you answered to the questions regarding
mail config when installing wheezy. If you have a backup copy of /etc/exim4
you could diff and see.

Regarding receiving mails from root from one machine and routing them to
another you should tell the local exim what to do. It used to ask related
question when configure/reconfigure.

The most simple way to do this is to use the default satellite config. This
is also good for the reason that you usually have one MX for your domain.

Then for the root account you usually define alias to some admin user
account/mailbox.

Just keep it as simple as possible

example of test envs /etc/exim4/update-exim4.conf.conf

MX server

dc_eximconfig_configtype='internet'
dc_other_hostnames='mxhost; test.home; *.test.home'
dc_local_interfaces='192.168.40.40; 127.0.0.1; 127.0.0.1.10025'
disable_ipv6=true
dc_readhost=''
dc_relay_domains=''
dc_minimaldns='false'
dc_relay_nets=''
dc_smarthost=''
CFILEMODE='644'
dc_use_split_config='false'
dc_hide_mailname='false'
#dc_hide_mailname=''
dc_mailname_in_oh='true'


MX client

dc_eximconfig_configtype='satellite'
dc_other_hostnames=''
dc_local_interfaces='127.0.0.1'
dc_readhost='test.home'
dc_relay_domains=''
dc_minimaldns='false'
dc_relay_nets=''
dc_smarthost='192.168.40.40'
CFILEMODE='644'
dc_use_split_config='false'
dc_hide_mailname='true'
dc_mailname_in_oh='true'


On both we do something similar to

cat /etc/aliases
# /etc/aliases
mailer-daemon: postmaster
postmaster: root
nobody: root
hostmaster: root
usenet: root
news: root
webmaster: root
www: root
ftp: root
abuse: root
noc: root
security: root
root: admin_account


Resulting in
From: 
Cron Daemon 
  To: 
r...@gw.test.home

From: 
Cron Daemon 
  To: 
r...@maistor.test.home

In the MX machine mailbox for the admin_account


Return-path: 
Envelope-to: admin_acco...@test.home
Delivery-date: Thu, 18 Aug 2016 06:00:21 +0200
Received: from Debian-exim by mxhost with bogoscanned (Exim 4.84_2)
(envelope-from )
id 1baEVB-00058w-1p
for admin_acco...@test.home; Thu, 18 Aug 2016 06:00:21 +0200
Received: from localhost ([127.0.0.1])
by mxhost with esmtp (Exim 4.84_2)
(envelope-from )
id 1baEVA-00058s-UM
for admin_acco...@test.home; Thu, 18 Aug 2016 06:00:20 +0200
Received: from mxhost ([127.0.0.1])
by localhost (localhost.localdomain [127.0.0.1]) (amavisd-new, port 
10024)
with ESMTP id 5TP3FA85aYiP for ;
Thu, 18 Aug 2016 06:00:20 +0200 (CEST)
Received: from maistor.test.home ([192.168.40.80])
by mxhost with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
(Exim 4.84_2)
(envelope-from )
id 1baEVA-00058n-Pf
for admin_acco...@test.home; Thu, 18 Aug 2016 06:00:20 +0200
Received: from root by maistor.test.home with local (Exim 4.84_2)
(envelope-from )
id 1baEVA-0002Oy-I4
for r...@maistor.test.home; Thu, 18 Aug 2016 06:00:20 +0200
From: r...@test.home (Cron Daemon)
To: r...@maistor.test.home