Buster's VDR plugin epgsearch is broken.

2019-10-21 Thread Jari Fredriksson



The fixed release is in Debian testing. Will we ever get it backported 
to Buster? The plugin crashes VDR when it finds a conflict in the 
timers. VDR in Buster is unusable with this plugin and my use case 
requires the plugin.


What is Debian policy about this kind of incidents? Should I get the 
source package and patch and build it myself, or will it get ever 
patched to Buster?


I had a self build VDR 2.2.0 in Jessie-Stretch but now decided to go 
with the stock version with a fresh Buster setup.


What a misery.

--

Will the third world war keep "Bosom Buddies" off the air?



I can't find 1920x1080 from Display Settings

2019-09-28 Thread Jari Fredriksson
Hello.

I'm using Debian Buster in a VirtualBox VM on my server. I use it from 
Windows using Remote Desktop.

The desktop size is not automatically my FullHD size so I need to go to 
Display Settings and there from a dropdown list pick a resolution for 
display. That works but there is not the most common option 1920x1080 at 
all! The closest is 1920x1200 which I'm using now. But I just can't 
maximize any windows without losing the bottom content with this.

Any ideas?

br. jarif


-- 
Lähetetty Android-laitteestani K-9 Maililla. Pahoittelut vähäsanaisuudestani.

Debian Buster VirtualBox guest does not show GUI

2019-07-10 Thread Jari Fredriksson
The GUI starts all right, but just does not show up in RDP session. I wonder if 
it would work with X.org  but with the current setup (vanilla 
fresh install with Gnome) does not show up.

Any ideas?

Br. jarif

Re: Jessie unable to start lvm2 on boot (raspbian)

2016-03-27 Thread Jari Fredriksson

Elimar Riesebieter kirjoitti 27.3.2016 14:23:

* Jari Fredriksson <ja...@iki.fi> [2016-03-27 14:02 +0300]:


arian kirjoitti 17.3.2016 17:50:
>raspbian is not mainline debian. Maybe ask on raspbian support channels?
>
>>vgchange -a y
>>service lvm2 start
>>mount -a
>
>why the service lvm2 start? is lvm service disabled?
>
>please provide output of those commands.
>
>>Every time after a reboot the boot sequence aborts and sshd is not up
>>(maybe because the /home is an lvm2-partition...)
>
>sshd should not bother about /home not being available. default setups
>won't find users' authorized keys anymore obviously.

Output from those commands is expected: the services start.

They do not start on boot for *some reason I'm trying to figure out 
here in

this post*. The "fix" to make the services startable seems to be the
"vgchange -a". The boot process just cancels and no services will be 
up,

including the sshd...

But why is this like it is...


Workaround:
cat /etc/initramfs-tools/scripts/local-top/vgscan

#!/bin/sh
vgchange -ay



Thanks! I'll give that a shot.

--
jarif.bit



Re: Jessie unable to start lvm2 on boot (raspbian)

2016-03-27 Thread Jari Fredriksson

arian kirjoitti 17.3.2016 17:50:
raspbian is not mainline debian. Maybe ask on raspbian support 
channels?



vgchange -a y
service lvm2 start
mount -a


why the service lvm2 start? is lvm service disabled?

please provide output of those commands.

Every time after a reboot the boot sequence aborts and sshd is not up 
(maybe because the /home is an lvm2-partition...)


sshd should not bother about /home not being available. default setups
won't find users' authorized keys anymore obviously.


Output from those commands is expected: the services start.

They do not start on boot for *some reason I'm trying to figure out here 
in this post*. The "fix" to make the services startable seems to be the 
"vgchange -a". The boot process just cancels and no services will be up, 
including the sshd...


But why is this like it is...

--
jarif.bit



Re: Jessie unable to start lvm2 on boot (raspbian)

2016-03-27 Thread Jari Fredriksson

arian kirjoitti 17.3.2016 17:50:
raspbian is not mainline debian. Maybe ask on raspbian support channels?

vgchange -a y
service lvm2 start
mount -a

why the service lvm2 start? is lvm service disabled?

please provide output of those commands.

Every time after a reboot the boot sequence aborts and sshd is not up 
(maybe because the /home is an lvm2-partition...)


sshd should not bother about /home not being available. default setups
won't find users' authorized keys anymore obviously.

Output from those commands is expected: the services start.

They do not start on boot for *some reason I'm trying to figure out here 
in this post*. The "fix" to make the services startable seems to be the 
"vgchange -a". The boot process just cancels and no services will be up, 
including the sshd...


But why is this like it is...

--
jarif.bit



Jessie unable to start lvm2 on boot (raspbian)

2016-03-19 Thread Jari Fredriksson


I have an USB connected hard disk on my raspberry, and that is used via 
lvm2.


This worked as charm in wheezy, but after I upgraded to jessie it does 
not work. Every time after a reboot the boot sequence aborts and sshd is 
not up (maybe because the /home is an lvm2-partition...) and I have to 
connect a monitor and keyboard into the normally headless box.


There I have the following snippets in my /etc/rc.local

vgchange -a y
service lvm2 start
mount -a

(and then the starts of various services depending on the newly mounted 
parts...)



I have to enter root password to enter recovery mode in the boot 
sequence, and the run the /etc/rc.local not once, but twice, and after 
everything seems ok I have to systemctl default and disconnect the 
cables.


Very irritating. I would be very grateful if someone with similar 
problems had a cure for this!


Thanks.


--
jarif.bit



Re: Virtual box

2015-10-23 Thread Jari Fredriksson

On 20.10.2015 12:59, Darac Marjal wrote:

On Mon, Oct 19, 2015 at 09:33:56PM -0500, Mitch Nuss wrote:
I am wanting to install Debian into a pic tower I have and want to 
use it as a headless server and use a tight VNC so I can access it 
anywhere. Do you have any advice for me and will I need to install 
virtual box? Amy info you have for me would be great thanks.



You won't NEED to install virtualbox, but there's no reason you 
can't.

Virtualbox will allow you to create a "PC on a PC", but won't address
the issue of running things remotely.



VirtualBox can have a RDP server in itself for the VM, so one can use 
the VM remotely using that, no need to install any VNC server on it 
necessarily.


--
jarif.bit



Re: how to compile kernel for raspberry

2015-07-04 Thread Jari Fredriksson



On 3.7.2015 20.26, Glenn English wrote:

On Jul 3, 2015, at 5:30 AM, Abdelkader Belahcene abelahc...@gmail.com wrote:


I want to recompile  the raspbian, please where can I find  help

Have a look at the Google (etc.) searches from debian kernel compile. Lots of good 
advice -- the first link, on my computer, is Compiling a New Kernel - Debian.

But compiling a kernel on a 'Pi sounds like the better part of a couple days. 
I'd look into cross compiling on a computer a bit more powerful. I've never 
compiled on my 'Pi or cross compiled anything, but I've heard that gcc knows 
how to do it. I have compiled a kernel, though, and I do know it's a 
significant job (for the compiler).

Yes, it takes some 2 days to compile the kernel using a raspi 1. 
However, the new raspi 2 does it in mere hours, when compiled using make -j4


Very doable.

--
jarif.bit


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/5597cb77.1020...@iki.fi



Wheezy amd64 i386 package versions mismatch

2013-10-19 Thread Jari Fredriksson

Hello!

Currently I have a Wheezy virtual machine in state, that apt refuses to
install or update anything. Always the reason is that there is a version
for the package, or some dependence in two arch, amd64 and i386, and
they are of different version.

Anyone seen this?

dpkg: error processing libcurl3:amd64 (--configure):
 package libcurl3:amd64 7.26.0-1+wheezy4 cannot be configured because
libcurl3:i386 is at a different version (7.26.0-1+wheezy3)
dpkg: error processing libxml2:amd64 (--configure):
 package libxml2:amd64 2.8.0+dfsg1-7+nmu2 cannot be configured because
libxml2:i386 is at a different version (2.8.0+dfsg1-7+nmu1)
dpkg: dependency problems prevent configuration of libisc84:
 libisc84 depends on libxml2 (= 2.7.4); however:
  Package libxml2:amd64 is not configured yet.

dpkg: error processing libisc84 (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of libdns88:
 libdns88 depends on libisc84; however:
  Package libisc84 is not configured yet.
 libdns88 depends on libxml2 (= 2.6.27); however:
  Package libxml2:amd64 is not configured yet.

dpkg: error processing libdns88 (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of libisccc80:
 libisccc80 depends on libisc84; however:
  Package libisc84 is not configured yet.
 libisccc80 depends on libxml2 (= 2.6.27); however:
  Package libxml2:amd64 is not configured yet.

dpkg: error processing libisccc80 (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of libisccfg82:
 libisccfg82 depends on libdns88; however:
  Package libdns88 is not configured yet.
 libisccfg82 depends on libisc84; however:
  Package libisc84 is not configured yet.
 libisccfg82 depends on libisccc80; however:
  Package libisccc80 is not configured yet.
 libisccfg82 depends on libxml2 (= 2.6.27); however:
  Package libxml2:amd64 is not configured yet.

dpkg: error processing libisccfg82 (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of libbind9-80:
 libbind9-80 depends on libdns88; however:
  Package libdns88 is not configured yet.
 libbind9-80 depends on libisc84; however:
  Package libisc84 is not configured yet.
 libbind9-80 depends on libisccfg82; however:
  Package libisccfg82 is not configured yet.
 libbind9-80 depends on libxml2 (= 2.6.27); however:
  Package libxml2:amd64 is not configured yet.

dpkg: error processing libbind9-80 (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of liblwres80:
 liblwres80 depends on libxml2 (= 2.6.27); however:
  Package libxml2:amd64 is not configured yet.

dpkg: error processing liblwres80 (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of bind9utils:
 bind9utils depends on libbind9-80; however:
  Package libbind9-80 is not configured yet.
 bind9utils depends on libdns88; however:
  Package libdns88 is not configured yet.
 bind9utils depends on libisc84; however:
  Package libisc84 is not configured yet.
 bind9utils depends on libisccc80; however:
  Package libisccc80 is not configured yet.
 bind9utils depends on libisccfg82; however:
  Package libisccfg82 is not configured yet.
 bind9utils depends on libxml2 (= 2.6.27); however:
  Package libxml2:amd64 is not configured yet.

dpkg: error processing bind9utils (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of bind9:
 bind9 depends on libbind9-80 (= 1:9.8.4.dfsg.P1-6+nmu2+deb7u1); however:
  Package libbind9-80 is not configured yet.
 bind9 depends on libdns88 (= 1:9.8.4.dfsg.P1-6+nmu2+deb7u1); however:
  Package libdns88 is not configured yet.
 bind9 depends on libisc84 (= 1:9.8.4.dfsg.P1-6+nmu2+deb7u1); however:
  Package libisc84 is not configured yet.
 bind9 depends on libisccc80 (= 1:9.8.4.dfsg.P1-6+nmu2+deb7u1); however:
  Package libisccc80 is not configured yet.
 bind9 depends on libisccfg82 (= 1:9.8.4.dfsg.P1-6+nmu2+deb7u1); however:
  Package libisccfg82 is not configured yet.
 bind9 depends on liblwres80 (= 1:9.8.4.dfsg.P1-6+nmu2+deb7u1); however:
  Package liblwres80 is not configured yet.
 bind9 depends on libxml2 (= 2.7.4); however:
  Package libxml2:amd64 is not configured yet.
 bind9 depends on bind9utils (= 1:9.8.4.dfsg.P1-6+nmu2+deb7u1); however:
  Package bind9utils is not configured yet.

dpkg: error processing bind9 (--configure):
 dependency problems - leaving unconfigured
Errors were encountered while processing:
 libcurl3:amd64
 libxml2:amd64
 libisc84
 libdns88
 libisccc80
 libisccfg82
 libbind9-80
 liblwres80
 bind9utils
 bind9
E: Sub-process /usr/bin/dpkg returned an error code (1)


-- 
jarif.bit




signature.asc
Description: OpenPGP digital signature


Re: Monitor network download speed

2013-07-22 Thread Jari Fredriksson
20.07.2013 18:59, Joe Riel kirjoitti:
 Any recommendations for a graphical tool to monitor, real-time,
 the download network speed.  My connection to work frequently
 gets really slow, in which case I need to disconnect and reconnect.
 I currently use the gnome network monitor tool, however, its 
 display of Network History connection speed is buggy.  Right now,
 the vertical axis labels are:

 00.0 KiB/s
 20.0 KiB/s
 40.0 KiB/s
 60.0 KiB/s
 80.0 KiB/s
 00.0 KiB/s

 The fastest is supposed to be on the top, but what speed is it?
 I have no idea.  This happens all the time.  Other times I see
 all labels being 0.00 KiB/s.  Even when the labeling is correct,
 the scaling is usually bad, so the entire graph extends to all
 1/5 the height.  

 There must be a better application.

I use ntop in my firewall/router.

-- 
jarif.bit




signature.asc
Description: OpenPGP digital signature


Re: Is this OK in C++ and C?

2013-01-01 Thread Jari Fredriksson
01.01.2013 22:11, Zbigniew Komarnicki kirjoitti:
 I was very surprised when I discover that this code was compiled 
 without any warning. I thought if a variable is 'unsigned int'  
 then this is not allowed to assign negative value.
 That's all. 
Indeed that is all. C and C++ are light weight code generators, and most
such checks must be coded, they are not generated by the compiler. There
are other languages, like Ada, and Pascal too, being more pedantic for
such issues. But they generate usually more bloated code, as the
compiler just creates the checks into it.

-- 

Q:  What is the burning question on the mind of every dyslexic
existentialist?
A:  Is there a dog?




signature.asc
Description: OpenPGP digital signature


Re: Is this OK in C++ and C?

2012-12-31 Thread Jari Fredriksson
31.12.2012 20:33, Zbigniew Komarnicki kirjoitti:
 Is this OK or is this a bug, when the wariable 'n' is
 initializing by negative value? There no any warning.
 Is this normal? I know that value -5 is converted
 to unsigned but probably this should by printed a warning,
 when this is a constant value. What do you think about this?


 // prog.cpp
 #include iostream
 using namespace std;

 int main()
 {
 const unsigned int n = -5;

   cout  The variable n is:   n  endl;

   return 0;
 }

 Results:
 $ g++ -Wall -W  prog.cpp -o prog
 $ ./prog
 The variable n is: 4294967291

 Thank you.


This is a known bug in Debian GNU/Linux. Happy new year ;)


-- 

April 1

This is the day upon which we are reminded of what we are on the other three
hundred and sixty-four.
-- Mark Twain, Pudd'nhead Wilson's Calendar




signature.asc
Description: OpenPGP digital signature


Re: Why is FQDN not found?

2012-07-27 Thread Jari Fredriksson
On 27.07.2012 21:33, Kent West wrote:
 Changing the order of the hosts: line to:
 
 hosts:  files dns mdns4_minimal [NOTFOUND=return] mdns4
 
 as you suggested above, seems to have solved the problem:
 
 ...
 
 Will this cause me any problems?

I put it into this:

hosts:  files dns

That is what I have been forced to do in all my machines for ages now.

No problems whatsoever.

-- 
http://jarif.dise.fi/



signature.asc
Description: OpenPGP digital signature


privoxy: remove banner, make unvisible

2012-07-23 Thread Jari Fredriksson

Hello.

I have earlier used proxomitron on Windows succesfully, but now
converted my rig from Windows to Linux.

I installed privoxy, and trying to clean my web experience where it was
with proxomitron.

These tools act a bit differently, which I would like to try to fix ;)

It looks like privoxy does not want to alter the page layout much, it
does not remove banners, but replaces the banned content with a blank
gray image with the original size. I would like to remove all traces
from the banned content. No placeholders, nothing.

How can I achieve that with privoxy or some other tool in Debian, or
Ubuntu, or Linux Mint?

Thanks
--jarif



signature.asc
Description: OpenPGP digital signature


Re: Reports of (Debian?) Linux kernel 2.6.32 livelocking when notified of leap second

2012-07-01 Thread Jari Fredriksson
On Sun, July 1, 2012 11:42, Camaleón wrote:
 On Sat, 30 Jun 2012 21:52:21 +, Andy Smith wrote:

 Has anyone been seeing this sort of thing in the last 22-ish hours?

 http://serverfault.com/questions/403732/anyone-else-experiencing-high-rates-of-linux-server-crashes-today

 (...)

 Mmm, interesting.

 My lennies (2.6.26) are only reporting in both dmesg and kernel logs:

 Clock: inserting leap second 23:59:60 UTC

 But nothing more, all is running fine here, no kernel locked.

Same here. Squeeze * 3 + Ubuntu 12.04 LTS * 2. All running ntpd, but no
problems.




-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/0b7d7c82d23477569135640c95c212c3.squir...@jarif.iki.fi



Re: Linux Path

2012-06-11 Thread Jari Fredriksson
On Mon, June 11, 2012 17:15, Ethan Rosenberg wrote:
 Dear List -

 I have a deficiency in my knowledge of paths.

 Will you please help.

 My working directory is /var/www/Webpages2

 In that directory I have a file b.mp4.

 This file also is in /home/ethan/Gingy/Pictures/Vol_1

 If I access b.mp4 in /var/www/Webpages2,  [src=b.mp4] the file is found.

 It is not found using the full path [src=
 /home/ethan/Gingy/Pictures/Vol_1/b.mp4] .

 Where is my error?

 Thanks.

 Ethan Rosenberg


How do you access it? If with a web browser (as the folder /var/www
suggests), it is not possible to access anything out of /var/www.

You can move the file to /home/ethan/public_html/Gingy/Pictures/Vol_1 and
access it via http://server/~ethan/Gingy/Pictures/Vol_1/b.mp4

Cheers.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/82eef0dc3aae821529f5851f19a809fd.squir...@jarif.iki.fi



Re: How to port forward inside a folder ?

2012-05-24 Thread Jari Fredriksson
On Thu, May 24, 2012 11:11, J. Bakshi wrote:
 Hello,

 iptables port forwarding is running fine here.

 192.168.1.1:82 forwarded to 192.168.1.2:80

 ``
 # for 82  80 of 192.168.1.2
 iptables -A INPUT -p tcp -m tcp --dport 82 -j ACCEPT
 iptables -A PREROUTING -t nat -i ${LAN_IFACE} -p tcp --dport 82 -j DNAT
 --to 192.168.1.2:80
 iptables -A FORWARD -p tcp --dport 82 -i ${LAN_IFACE} -j ACCEPT

 iptables -A PREROUTING -t nat -i ${WAN_IFACE} -p tcp --dport 82 -j DNAT
 --to 192.168.1.2:80
 iptables -A FORWARD -p tcp -d 192.168.1.2 --dport 80 -j ACCEPT
 ```

 How can I forward inside a folder like
 192.168.1.1:82 forwarded to 192.168.1.2:80/mysite

 I have modified the rules as [ --to 192.168.1.2:80/mysite ]
 but no success. Am I missing anything ?


Yes, you have missed quite a bit about how networking works. You just
can't do that with port forwarding or packet filtering. You have to do
that URL rewrite to the folder in your application serving on port 80,
probably Apache. iptables does not understand anything about folders.

 Thanks





-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/e5dd1360a49841384c9fe9bb678abcd3.squir...@jarif.iki.fi



Re: OT: More about GPG signing

2012-05-12 Thread Jari Fredriksson
On 12.5.2012 2:45, Jochen Spieker wrote:
 My main reason for signing public e-mails is to invite people to encrypt
 their e-mails to me. Signing is the easiest way to express that I (know
 how to) use PGP/GPG and that I prefer encrypted communication. In my
 opinion, the question is not why we should encrypt our communication,
 but why we should /not/.
 
 Of course, that is just an invitation which I think should be as
 unobtrusive as possible. PGP/MIME is the best way to do that.

+1

-- 

FORTUNE PROVIDES QUESTIONS FOR THE GREAT ANSWERS: #4
A:  Go west, young man, go west!
Q:  What do wabbits do when they get tiwed of wunning awound?



signature.asc
Description: OpenPGP digital signature


Re: Does anyone care about dialup?

2012-05-07 Thread Jari Fredriksson
On Tue, May 8, 2012 01:16, Paul Zimmerman wrote:
 Why is it so difficult to get dialup to work in Linux? It has been this
 way for many years, too. I tried a different distro in 1996 when dialup
 modems were still the main means of Internet access  for most home users,
 and it was painfully difficult then, as well.


I still use - kind of - dialup today. The usb 3g modem is used like a
dialup modem, and vwdial is the way to go.

I think I used vwdial back in the '90s but I'm not sure. It was not hard
then, and not hard now.

I had a LAN back then, and a linux machine dialing up every hour, sending
pending emails and downloading incoming using fetchmail. Life was quite
similar to what it is now, email wise.




-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/760e5087dc6465363d024c2c853988a3.squir...@jarif.iki.fi



Re: PAE kernels on old P4's (WAS Re: Latest update borks)

2012-03-06 Thread Jari Fredriksson
6.3.2012 23:28, Weaver kirjoitti:

   The 3.0 series  PAE kernels won't run on this machine...
 
 Yes they do.
 I'm currently running 686 PAE 3.2.7-1 on a Pentium 4, 2.8 GHz machine -
 this one - on a separate install.
 Qualifying remark - no gui, but it runs just fine.
 I don't need that capability on this processor, but it defaults to what's
 required.
 Regards,
 
 Weaver.
 

I confirm this. I have a router with 686 Ubuntu Server with the 3.0
kernel. Runs fine.

~$ uname -a
Linux tempest 3.0.0-16-generic-pae #28-Ubuntu SMP Fri Jan 27 19:24:01
UTC 2012 i686 i686 i386 GNU/Linux



signature.asc
Description: OpenPGP digital signature


Re: HTTP proxy over ssh recommendation?

2011-11-12 Thread Jari Fredriksson
11.11.2011 0:15, Bob Proulx kirjoitti:
 I often have a situation that I would like to improve.  I need to
 access web servers that exist on a private subnet.  I can log in using
 ssh. 

sshuttle is all you need. It is not a proxy per se, but it allows a
poor man's VPN over plain ssh.

https://github.com/apenwarr/sshuttle

-- 

Not Hercules could have knock'd out his brains, for he had none.
-- Shakespeare



signature.asc
Description: OpenPGP digital signature


Re: When was Debian installed

2011-10-09 Thread Jari Fredriksson
9.10.2011 18:19, Raf Czlonka kirjoitti:
 On Sat, Oct 08, 2011 at 11:39:26PM BST, Jari Fredriksson wrote:
 8.10.2011 4:09, Mark Panen kirjoitti:
 Which command do i run to find out on which date i installed my Debian OS?

 uptime
 
 Have you read the question?
 

Yes. Why? Linux is said to run forever, no boot required after windows
updates ;)

-- 

Whenever the literary German dives into a sentence, that is the last
you are going to see of him until he emerges on the other side of his
Atlantic with his verb in his mouth.
-- Mark Twain A Connecticut Yankee in King Arthur's Court



signature.asc
Description: OpenPGP digital signature


Re: When was Debian installed

2011-10-08 Thread Jari Fredriksson
8.10.2011 4:09, Mark Panen kirjoitti:
 Hi,
 
 Which command do i run to find out on which date i installed my Debian OS?
 

uptime

-- 

Everything that you know is wrong, but you can be straightened out.



signature.asc
Description: OpenPGP digital signature


/var/log/syslog is smaller than last time checked!

2011-09-16 Thread Jari Fredriksson

I just received this message from logcheck, on two machines (Debian), at
the same minute. They do not share /var/log/ via NFS or anything.

What might this be? Same minute!

System Events
=-=-=-=-=-=-=
***
*** This could indicate tampering.
*** WARNING ***: Log file /var/log/syslog is smaller than last time checked!


-- 

Tell the truth or trump--but get the trick.
-- Mark Twain, Pudd'nhead Wilson's Calendar



signature.asc
Description: OpenPGP digital signature


Re: Bind does not die

2011-09-13 Thread Jari Fredriksson
13.9.2011 18:53, Bob Proulx kirjoitti:
 Jari Fredriksson wrote:
 13.9.2011 7:01, Bob Proulx kirjoitti:
 Jari Fredriksson wrote:
 jarif@spitfire:~$ sudo rndc stop
 WARNING: key file (/etc/bind/rndc.key) exists, but using default
 configuration file (/etc/bind/rndc.conf)

 That should not produce that warning.  A default installation does not
 have the file /etc/bind/rndc.conf present.  Do you have it?  Where did
 it come from?  Try moving it out of the way.

 And, it stopped immediately! This is strange, why does it not stop when
 rebooting...

 I expected that it would fail and not stop the named.  The
 /etc/init.d/bind9 script calls rndc stop and then waits, possibly
 forever, waiting for it to die.  I was expecting the above not to stop
 the named but to produce errors that would identify the problem.

 I think you should examine and clean your /etc/bind/ directory as
 appropriate.  From the warning above you have a /etc/bind/rndc.conf
 that may be causing problems.

 Bob

 If I remove it, rndc does not work at all.

 jarif@spitfire:/etc/bind$ sudo mv rndc.conf /tmp/
 jarif@spitfire:/etc/bind$ sudo rndc reload
 rndc: connection to remote host closed
 This may indicate that
 * the remote server is using an older version of the command protocol,
 * this host is not authorized to connect,
 * the clocks are not synchronized, or
 * the key is invalid.
 jarif@spitfire:/etc/bind$

OK. I did it. I copied

key rndc-key {
algorithm hmac-md5;
secret EfoPh41zkCekeuQxDIBUHA==;
};

from that rndc.conf to rndc.key and removed the rndc.conf

Restarted binf and now all works.

The rndc.conf contained as follows:

# Start of rndc.conf
key rndc-key {
algorithm hmac-md5;
secret EfoPh41zkCekeuQxDIBUHA==;
};

options {
default-key rndc-key;
default-server 127.0.0.1;
default-port 953;
};
# End of rndc.conf



 
 After moving that conf file out of the way you should kill the running
 named and then start things up without it.
 
   # ps -e | grep named  # Is it running?
   # killall named
   # ps -e | grep named  # Verify stopped.
   # service bind9 start
   # ps -e | grep named  # Verify running.
 
 At that point I would hope that things would be working.
 
   # service bind9 stop
   # ps -e | grep named  # Verify stopped.
   # service bind9 start
   # ps -e | grep named  # Verify running.
 
 But perhaps it still won't be working properly.  If not then something
 is definitely broken with your installation.  I do not have any
 rndc.conf file present on any of my systems and am not emitting that
 error.  Therefore something in your configuration is referencing it.
 
 I think it should be possible to debug your problem to root cause.
 But it might be simpler to simply scrape it down to nothing, purge
 everything, and then reinstall it.  That should certainly put you back
 into a fully working state.  If you have local domains to serve you
 can merge your local configuration back in afterward.
 
 To simply purge and re-install everything.  Be sure to copy your local
 changes off first.  Not knowing if you have any let me suggest the
 following:
 
   # cp -a /etc/bind /root/bind.save
   # apt-get purge bind9
   # ...manually verify /etc/bind is empty...  rm -rf /etc/bind
   # apt-get install bind9
 
 That should make it to be as if the named was installed for the very
 first time without any previously existing configuration.  The default
 installation will be a simple caching nameserver suitable for most
 environments.  You can then customize it if needed.  Your previous
 configuration will be saved for your reference.
 
 Bob


-- 

Q:  What is the difference between Texas and yogurt?
A:  Yogurt has culture.



signature.asc
Description: OpenPGP digital signature


Re: Bind does not die

2011-09-12 Thread Jari Fredriksson
12.9.2011 7:49, Bob Proulx kirjoitti:
 Jari Fredriksson wrote:
 Whenever I shutdown or reboot my Debians, the process fails. Bind
 shutdown process waits for the process to end indefinitely, and the
 machine does not shut down. I have to manually find the process and kill
 with -9.
 
 This reads like a problem with your /etc/bind/rndc.key file.  What
 does this say when you try to run the stop command manually?
 
   # rndc stop
 
 If that indicates a problem with the rndc.key file then check that the
 contents have not been munged.  Check that the file permissions have
 not been munged.

jarif@spitfire:~$ sudo rndc stop
WARNING: key file (/etc/bind/rndc.key) exists, but using default
configuration file (/etc/bind/rndc.conf)

And, it stopped immediately! This is strange, why does it not stop when
rebooting...

 
 The contents should look something like this but with some different
 random contnes for the secret string.
 
 An example /etc/bind/rndc.key file:
 
   key rndc-key {
   algorithm hmac-md5;
   secret Zm9vIGZvbyBmb28gZm9vCg==;
   };
 
 The file permissions should look like this:
 
   -rw-r-   1 bind bind77 May  3  2010 rndc.key
 
 If you do not have the file then you can generate a new one with this
 command:
 
   # dc-confgen -r /dev/urandom -a
 
 If you fix a problem with the rndc.key file you will need to manually
 kill the named program and then restart it.  After fixing the file and
 restarting then named should start and stop normally again.
 
 Bob


-- 

For years a secret shame destroyed my peace--
I'd not read Eliot, Auden or MacNiece.
But now I think a thought that brings me hope:
Neither had Chaucer, Shakespeare, Milton, Pope.
-- Justin Richardson.



signature.asc
Description: OpenPGP digital signature


Bind does not die

2011-09-11 Thread Jari Fredriksson

Whenever I shutdown or reboot my Debians, the process fails. Bind
shutdown process waits for the process to end indefinitely, and the
machine does not shut down. I have to manually find the process and kill
with -9.

The same with 32bit and 64bit Squeezees.

-- 

Wrinkles should merely indicate where smiles have been.
-- Mark Twain



signature.asc
Description: OpenPGP digital signature


Re: setting up a static IP address

2011-08-17 Thread Jari Fredriksson
16.8.2011 18:31, Steve Kleene kirjoitti:
 On Tue, 16 Aug 2011 03:32:42 -0500, Selim T. Erdogan wrote:
 (I also have dns-nameservers lines in my eth0 stanza in /e/n/i.
 IIRC, when I didn't, using dynamic wireless connections kept clobbering
 the static DNS entries in /etc/resolv.conf.)
 
 That's interesting, because on one my machines resolv.conf gets nulled out
 during the boot process.  I hacked around that by putting it back via
 /etc/rc.local.  I'll try the better solution you suggest.
 

It is dhclient rewriting it, with data received from DHCP.

Edit /etc/dhcp3/dhclient.conf

I have added

prepend domain-name-servers 10.123.29.118, 10.123.29.115, 10.123.29.113;
prepend domain-name fredriksson.dy.fi;


-- 

Accent on helpful side of your nature.  Drain the moat.



signature.asc
Description: OpenPGP digital signature


bind does not want to die (squeeze)

2011-07-22 Thread Jari Fredriksson

I have two 32 bit squeeze machines running bind. Then I try to shutdown
them, they will not die. The console shows stopping x (pid)
repeatedly.

I have to kill -9 the bind manually, so the shutdown process can continue.

Is this is common feature, or there something wrong with my systems?



signature.asc
Description: OpenPGP digital signature


Re: how do I create a kdm login for non-desktop user

2011-07-22 Thread Jari Fredriksson
22.7.2011 14:35, Mark Charles kirjoitti:
 For remote maintenance I want to add a default user called
 fixme with no password to the system.
 
 If the remote user has problems with their computer they should be able
 to press Enter and fixme will login and run a script connecting the
 machine to the internet and send me the IP address in an email.
 
 As fixme has no password I don't want them to have a desktop... how do
 I do this??
 I'd also prefer they don't have a home directory - is that possible??
 How can I setup fixme's login to just run my script??
 

Quite strange setup. But OK.

- Set the home folder to /tmp/fixme or some other proprietary folder.
- Set the shell for fixme to your script.

I guess that should do it.


-- 

You prefer the company of the opposite sex, but are well liked by your own.



signature.asc
Description: OpenPGP digital signature


ntop question

2011-06-11 Thread Jari Fredriksson

I'm running squeeze and the latest ntop on it.

Ntop does not show DNS-names in its listings, but bare IP-addresses
only. Is there a setting somewhere that I can tweak or so? I think older
versions showed DNS-names.

-- 

Your temporary financial embarrassment will be relieved in a surprising
manner.



signature.asc
Description: OpenPGP digital signature


Re: ntop question

2011-06-11 Thread Jari Fredriksson
12.6.2011 1:54, Jari Fredriksson kirjoitti:
 
 I'm running squeeze and the latest ntop on it.
 
 Ntop does not show DNS-names in its listings, but bare IP-addresses
 only. Is there a setting somewhere that I can tweak or so? I think older
 versions showed DNS-names.
 

OK. There is this in /etc/default/ntop

# Additional ommand line options passed when invoking ntop
# Disable DNS resolution, as it makes ntop crash
GETOPT=-n 0

I guess it is best left as it is...

-- 

Q:  What do you call a blind pre-historic animal?
A:  Diyathinkhesaurus.

Q:  What do you call a blind pre-historic animal with a dog?
A:  Diyathinkhesaurus Rex.



signature.asc
Description: OpenPGP digital signature


Re: Problems with cron-apt in Lenny

2011-06-08 Thread Jari Fredriksson
7.6.2011 17:25, Camaleón kirjoitti:
 On Tue, 07 Jun 2011 17:00:21 +0300, Jari Fredriksson wrote:
 
 7.6.2011 16:07, Camaleón kirjoitti:
  
 How does your cron-apt sources list file look like? Have you try by
 setting another package repository mirrors, different than the current
 ones? What does apt-get update  apt-get upgrade say?

 Greetings,


 aptitude update  aptitude upgade works fine (this is lenny, where
 aptitude is the better).
 
 I'm afraid cron-apt uses apt-get by default so I would try to mimic as 
 much as possible in order to reproduce the failure. Try the above 
 commands and see what happens.
 

apt-get works also, as expected. This is strange, and it happens in two
separate machines!

-- 

I dote on his very absence.
-- William Shakespeare, The Merchant of Venice



signature.asc
Description: OpenPGP digital signature


Re: ftp problem?

2011-06-07 Thread Jari Fredriksson
7.6.2011 9:46, hadi motamedi kirjoitti:
 Dear All
 I cannot ftp to my debian server from MS  Windows machine ,but ping
 and telnet are ok. I checked as the following :
 #chkconfig tftp on
 #setup
 After enabling tftp service, still the ftp is not ok but ping  telnet
 are ok. Can you please help me?
 Thank you
 

Hmm. tfpt is not FTP. It's a different animal alltogether.

-- 

You don't become a failure until you're satisfied with being one.



signature.asc
Description: OpenPGP digital signature


Problems with cron-apt in Lenny

2011-06-07 Thread Jari Fredriksson

I maintain several machines with Squeeze and Lenny, and they have
cron-apt running.

The lenny machines report this (via logcheck)

System Events
=-=-=-=-=-=-=
Jun  7 04:59:30 www128 cron-apt: W: Failed to fetch
http://ftp.fi.debian.org/debian/dists/lenny/Release  Unable to find
expected entry  nonfree/source/Sources in Meta-index file (malformed
Release file?)
Jun  7 04:59:30 www128 cron-apt:
Jun  7 04:59:30 www128 cron-apt: W: Failed to fetch
http://security.debian.org/dists/lenny/updates/Release  Unable to find
expected entry  nonfree/binary-amd64/Packages in Meta-index file
(malformed Release file?)
Jun  7 04:59:30 www128 cron-apt:
Jun  7 04:59:30 www128 cron-apt: W: Failed to fetch
http://volatile.debian.org/debian-volatile/dists/lenny/volatile/Release
 Unable to find expected entry  nonfree/binary-amd64/Packages in
Meta-index file (malformed Release file?)
Jun  7 04:59:30 www128 cron-apt:

What might be wrong? I just installed cron-apt and let it go.

-- 

You'll feel much better once you've given up hope.



signature.asc
Description: OpenPGP digital signature


Re: Problems with cron-apt in Lenny

2011-06-07 Thread Jari Fredriksson
7.6.2011 16:07, Camaleón kirjoitti:
 On Tue, 07 Jun 2011 13:16:20 +0300, Jari Fredriksson wrote:
 
 I maintain several machines with Squeeze and Lenny, and they have
 cron-apt running.

 The lenny machines report this (via logcheck)

 System Events
 =-=-=-=-=-=-=
 Jun  7 04:59:30 www128 cron-apt: W: Failed to fetch
 http://ftp.fi.debian.org/debian/dists/lenny/Release  Unable to find
 expected entry  nonfree/source/Sources in Meta-index file (malformed
 Release file?)
 
 (...)
 
 How does your cron-apt sources list file look like? Have you try by 
 setting another package repository mirrors, different than the current 
 ones? What does apt-get update  apt-get upgrade say?
 
 Greetings,
 

aptitude update  aptitude upgade works fine (this is lenny, where
aptitude is the better).

The apt.sources looks like



#
# deb cdrom:[Debian GNU/Linux 5.0.6 _Lenny_ - Official amd64 NETINST
Binary-1 20100905-11:18]/ lenny main

#deb cdrom:[Debian GNU/Linux 5.0.6 _Lenny_ - Official amd64 NETINST
Binary-1 20100905-11:18]/ lenny main

deb http://ftp.fi.debian.org/debian/ lenny main contrib non-free
deb-src http://ftp.fi.debian.org/debian/ lenny main contrib non-free

deb http://security.debian.org/ lenny/updates main contrib non-free
deb-src http://security.debian.org/ lenny/updates main contrib non-free

deb http://volatile.debian.org/debian-volatile lenny/volatile main
contrib non-free
deb-src http://volatile.debian.org/debian-volatile lenny/volatile main
contrib non-free

deb http://backports.debian.org/debian-backports lenny-backports main
contrib non-free



-- 

You will pioneer the first Martian colony.



signature.asc
Description: OpenPGP digital signature


Re: Samba or NFS

2011-06-03 Thread Jari Fredriksson
3.6.2011 18:08, Dan kirjoitti:
 Hi,
 
 I have two linux servers. One file server (debian) that is running
 samba and one application server (redhat). I would like to mount the
 shares of the file server in the application server. The problem is
 that the usernames are very different. Samba is already running and
 easier to set-up. NFS seems to be more difficult to set-up and also
 there are more security issues.
 
 Which are the advantages of NFS over Samba (cifs) other than the
 symbolic links. I read that even some people prefer samba over NFS to
 connect Unix to Unix.
 

NFS is by far simpler to use in pure Linux environment, Samba is for
Windows networks. NFS has no passwords, just install it with apt-get,
and declare /etc/exports in the server, and mount the shares in the
clients /etc/fstab. That's all it takes.

NFS offers native looking folders to *nix machines over networks.

-- 

Sheriff Chameleotoptor sighed with an air of weary sadness, and then
turned to Doppelgutt and said 'The Senator must really have been on a
bender this time -- he left a party in Cleveland, Ohio, at 11:30 last
night, and they found his car this morning in the smokestack of a British
aircraft carrier in the Formosa Straits.'
-- Grand Panjandrum's Special Award, 1985 Bulwer-Lytton
   bad fiction contest.



signature.asc
Description: OpenPGP digital signature


Re: Debian update/upgrade good practices?

2011-05-18 Thread Jari Fredriksson
18.5.2011 10:20, Rafał Radecki kirjoitti:
 Hi all.
 
 I have a new LAN to administer, I have 8 Debian production servers
 which have been configured by someone else.
 I try to make a reasonable update/upgrade policy for those servers.
 Till now (for my home servers) I used aptitude update/upgrade and it
 was ok. But here every server has many services (Oracje, JBoss, VMWare
 2 Server, ...) and I think that now I should be more careful.
 
 Should upgrades/updates be made automatically or manually? What
 additional steps could be made? When should be dist-upgrade made? One
 one site I have read that Debian's policy is to use stable versions
 and only add security updates... what do you think?

Be VERY cautious with those Oracle  VMWare if you think about
dist-upgrade. At least VMware will break. There is a 3rd party patch to
compile Vmware modules with a newer kernel.

I think there is no need to upgrade to squeeze for the VMware box anyway.

-- 

You will feel hungry again in another hour.



signature.asc
Description: OpenPGP digital signature


Re: MySQL Server Rebooting Automatically?

2011-05-05 Thread Jari Fredriksson
5.5.2011 18:38, Abraham kirjoitti:
 Does anyone know why a MySQL Server would be automatically rebooting at
 midnight? I never set it to reboot and can't find an option to change
 this. I've also searched online and can't find an answer. Any ideas?
 

Rebooting? Is the mysqld process restarting at midnight, or is the whole
machine running the MySQL server rebooting?

Is there anything in /var/log/daemon.log?

-- 

Beware of a tall black man with one blond shoe.



signature.asc
Description: OpenPGP digital signature


Re: VMware server 2.0 and Debian Squeeze?

2011-05-03 Thread Jari Fredriksson

Thanks, got it working with:
http://radu.cotescu.com/how-to-install-vmware-server-ubuntu-fedora-opensuse/



2.5.2011 17:36, Dogan Hanoglu kirjoitti:
 Hi Jari,
 
 Check this forum thread:
 http://communities.vmware.com/message/1141306
 
 Apparently there is a patch.
 
 Cheers.
 -D
 
 2011/5/2 Jari Fredriksson ja...@iki.fi mailto:ja...@iki.fi
 
 pallas:~# CC=gcc-4.3 vmware-config.pl http://vmware-config.pl
 
 Making sure services for VMware Server are stopped.
 
 Stopping VMware autostart virtual machines:
   Virtual machines  
 failed
 Stopping VMware management services:
   VMware Virtual Infrastructure Web Access
   VMware Server Host Agent  
 failed
 Stopping VMware services:
   VMware Authentication Daemon  
  done
   Virtual machine communication interface  
   done
   Virtual machine monitor  
   done
   Bridged networking on /dev/vmnet0
   done
   Host network detection
  done
   DHCP server on /dev/vmnet1
  done
   Host-only networking on /dev/vmnet1  
   done
   DHCP server on /dev/vmnet8
  done
   NAT service on /dev/vmnet8
  done
   Host-only networking on /dev/vmnet8  
   done
   Virtual ethernet  
  done
 
 None of the pre-built vmmon modules for VMware Server is suitable
 for your
 running kernel.  Do you want this program to try to build the vmmon
 module for
 your system (you need to have a C compiler installed on your
 system)? [yes]
 
 Using compiler /usr/bin/gcc-4.3. Use environment variable CC to
 override.
 
 What is the location of the directory of C header files that match your
 running
 kernel? [/lib/modules/2.6.32-5-amd64/build/include]
 
 Extracting the sources of the vmmon module.
 
 Building the vmmon module.
 
 Using 2.6.x kernel build system.
 make: Entering directory `/tmp/vmware-config1/vmmon-only'
 make -C /lib/modules/2.6.32-5-amd64/build/include/.. SUBDIRS=$PWD
 SRCROOT=$PWD/. modules
 make[1]: Entering directory `/usr/src/linux-headers-2.6.32-5-amd64'
  CC [M]  /tmp/vmware-config1/vmmon-only/linux/driver.o
 In file included from /tmp/vmware-config1/vmmon-only/linux/driver.c:31:
 /tmp/vmware-config1/vmmon-only/./include/compat_wait.h:78: error:
 conflicting types for âpoll_initwaitâ
 /usr/src/linux-headers-2.6.32-5-common/include/linux/poll.h:70: error:
 previous declaration of âpoll_initwaitâ was here
 In file included from
 /tmp/vmware-config1/vmmon-only/./common/vmx86.h:32,
 from /tmp/vmware-config1/vmmon-only/linux/driver.h:29,
 from /tmp/vmware-config1/vmmon-only/linux/driver.c:101:
 /tmp/vmware-config1/vmmon-only/./include/x86msr.h:164:1: warning:
 MSR_THERM2_CTL redefined
 In file included from
 /usr/src/linux-headers-2.6.32-5-common/arch/x86/include/asm/msr.h:4,
 from
 
 /usr/src/linux-headers-2.6.32-5-common/arch/x86/include/asm/processor.h:21,
 from
 /usr/src/linux-headers-2.6.32-5-common/include/linux/prefetch.h:14,
 from
 /usr/src/linux-headers-2.6.32-5-common/include/linux/list.h:6,
 from
 /usr/src/linux-headers-2.6.32-5-common/include/linux/module.h:9,
 from
 /tmp/vmware-config1/vmmon-only/./include/compat_module.h:27,
 from /tmp/vmware-config1/vmmon-only/linux/driver.c:26:
 
 /usr/src/linux-headers-2.6.32-5-common/arch/x86/include/asm/msr-index.h:230:1:
 warning: this is the location of the previous definition
 /tmp/vmware-config1/vmmon-only/linux/driver.c: In function
 âLinuxDriverSyncCallOnEachCPUâ:
 /tmp/vmware-config1/vmmon-only/linux/driver.c:1423: error: too many
 arguments to function âsmp_call_functionâ
 /tmp/vmware-config1/vmmon-only/linux/driver.c: In function
 âLinuxDriver_Ioctlâ:
 /tmp/vmware-config1/vmmon-only/linux/driver.c:1987: error: âstruct
 task_structâ has no member named âeuidâ
 /tmp/vmware-config1/vmmon-only/linux/driver.c:1987: error: âstruct
 task_structâ has no member named âuidâ
 /tmp/vmware-config1/vmmon-only/linux/driver.c:1988: error: âstruct
 task_structâ has no member named âfsuidâ
 /tmp/vmware-config1/vmmon-only/linux/driver.c:1988: error: âstruct
 task_structâ has no member named âuidâ
 /tmp/vmware-config1/vmmon-only/linux/driver.c:1989: error: âstruct

VMware server 2.0 and Debian Squeeze?

2011-05-02 Thread Jari Fredriksson

I went and upgraded my Lenny to Squeeze and now VMware server does not
compile.

Is it possible, and if it is, how?

Preparing to reinstall lenny now...dammit.

-- 

A visit to a strange place will bring fresh work.



signature.asc
Description: OpenPGP digital signature


Re: VMware server 2.0 and Debian Squeeze?

2011-05-02 Thread Jari Fredriksson
 to build the vmmon module.

For more information on how to troubleshoot module-related problems, please
visit our Web site at http://www.vmware.com/go/unsup-linux-products; and
http://www.vmware.com/go/unsup-linux-tools;.

Execution aborted.


2.5.2011 16:52, Burhan kirjoitti:
 Hi Jari,
 
 What is it complaining about?
 
 -B
 
 2011/5/2 Jari Fredriksson ja...@iki.fi mailto:ja...@iki.fi
 
 
 I went and upgraded my Lenny to Squeeze and now VMware server does not
 compile.
 
 Is it possible, and if it is, how?
 
 Preparing to reinstall lenny now...dammit.
 
 --
 
 A visit to a strange place will bring fresh work.
 
 


-- 

Q:  How many gradual (sorry, that's supposed to be graduate) students
does it take to screw in a light bulb?
A:  I'm afraid we don't know, but make my stipend tax-free, give my
advisor a $30,000 grant of the taxpayer's money, and I'm sure he
can tell me how to do the gruntwork for him so he can take the
credit for answering this incredibly vital question.



signature.asc
Description: OpenPGP digital signature


Re: Seagate Barracuda drives?

2011-03-14 Thread Jari Fredriksson
On 14.3.2011 4:11, Marc Shapiro wrote:
 There has been much talk about the WD 2TB drives and the problems that
 they can have with linux.  I just went into an electronics store that is
 going out of business and has 40% off all drives.  For internal drives,
 all they have are Seagate Barracudas.  They have 1.5 TB and 2 TB drives
 running at 5900 RPM.  The 2 TB drive said it was 'Low Power'.  I didn't
 get the model number.  I was in a rush and had to move fast.  Do these
 drives play nicely with linux, or should I look for something else.  If
 'something else' what high capacity drives can people recommend that do
 work well on linux boxes?
 

I have a similar sounding low power Barracuda 2 TB disk in a NetGear
ReadyNAS Duo device. It runs Linux if I'm not mistaken, and the disk is
certified to the device.

-- 

If one cannot enjoy reading a book over and over again, there is no use
in reading it at all.
-- Oscar Wilde



signature.asc
Description: OpenPGP digital signature


Re: File server without the Xserver

2011-03-12 Thread Jari Fredriksson
On 12.3.2011 2:57, Dan wrote:
 On Fri, Mar 11, 2011 at 7:14 PM, Dr. Ed Morbius dredmorb...@gmail.com wrote:
 on 18:37 Fri 11 Mar, Dan (ganc...@gmail.com) wrote:
 On Fri, Mar 11, 2011 at 6:09 PM, Dr. Ed Morbius 
 dredmorb...@gmail.comwrote:
 xauth is required by xbase-clients.  It'll get installed with that.
 
 Should I then install xbase-clients?
 
 

No. I have a lean server, and I want to use gedit by PuTTY in Windows.I
have XMing server on my Windows, and

$ sudo apt-get install gedit

is all I need to do to run gedit. apt-get will install whatever needed.

-- 

FORTUNE PROVIDES QUESTIONS FOR THE GREAT ANSWERS: #5
A:  The Halls of Montezuma and the Shores of Tripoli.
Q:  Name two families whose kids won't join the Marines.



signature.asc
Description: OpenPGP digital signature


Re: File server without the Xserver

2011-03-12 Thread Jari Fredriksson
On 12.3.2011 23:50, Leonardo Ruoso wrote:
 Is it  all about running gedit? 
 
 Although I can't imagine why you can't use vim, emacs or even nano from
 ssh it's pretty possible to download a copy of the file, edit it with
 your preferred editor and upload it back to the server.
 

I'm not the OP, I just told my case.I use vim 99.9% of my edits,when
sometimes I need gedit for something that I can not do with vim (because
I just can't, I have never learned the keyboard commands for vim, except
very basic insert,append,delete ;)).

Xserver on windows is mandatory too, as some software from commercial
sources (IBM, Oracle in my case) require X, so it is not so hard.

Windows editor with sftp-support is not what I want, I work on Linux
command line anyway.



signature.asc
Description: OpenPGP digital signature


Re: Internet connection sharing?

2011-03-08 Thread Jari Fredriksson
On 8.3.2011 11:36, kuLa wrote:
 On 08/03/11 09:25, hadi motamedi wrote:
 Dear All
 My debian machine is connected to my MS Windows machine on the net.The
 MS Windows machine is connected to Internet via valid IP address
 setting and on its secondary ip address setting it can see my debian
 machine on the intranet.Can you please let me know how can try for
 Internet connection sharing such that my debian machine can see
 internet with minor modifications done?
 Thank you in advance
 
 Hi,
 I think modifications must be done on Win machine (setting up sharing)
 so it has nothing to do with Debian. Of course I assume that you're
 using dhcp and have 2nd nic on you Win box.
 

Yes. But a modification in Debian is needed also. The Debian's default
gateway has to be set to the Windows box's LAN address.

-- 

Your reasoning is excellent -- it's only your basic assumptions that are
wrong.



signature.asc
Description: OpenPGP digital signature


Re: Internet connection sharing?

2011-03-08 Thread Jari Fredriksson
On 8.3.2011 11:52, kuLa wrote:
 On 08/03/11 09:50, Jari Fredriksson wrote:
 On 8.3.2011 11:36, kuLa wrote:
 On 08/03/11 09:25, hadi motamedi wrote:
 Dear All
 My debian machine is connected to my MS Windows machine on the net.The
 MS Windows machine is connected to Internet via valid IP address
 setting and on its secondary ip address setting it can see my debian
 machine on the intranet.Can you please let me know how can try for
 Internet connection sharing such that my debian machine can see
 internet with minor modifications done?
 Thank you in advance

 Hi,
 I think modifications must be done on Win machine (setting up sharing)
 so it has nothing to do with Debian. Of course I assume that you're
 using dhcp and have 2nd nic on you Win box.

 Yes. But a modification in Debian is needed also. The Debian's default
 gateway has to be set to the Windows box's LAN address.
 
 As I wrote before - DHCP!
 

That is how I handle it, yes. But one must indeed run own DHCP server to
get that luxury.

-- 

You are going to have a new love affair.



signature.asc
Description: OpenPGP digital signature


Re: Is there anything wrong with sticking with Lenny?

2011-02-23 Thread Jari Fredriksson
On 23.2.2011 3:35, Jason Hsu wrote:
 If that doesn't work, I'll do a fresh installation of Lenny on the old
computer, upgrade it to Squeeze, and then set it up as a firewall/server.
 

I hope you have Lenny full CD disk images available. Net Install does
not work any more.

I just reinstalled a Lenny, after failed upgrade to Squeeze. It was
pain, until I finally found a CD1.iso for Lenny. Even with that, you
have to use expert install or whatever it is, the default simple route
tries to find software from security.debian.org (even when no mirrors
are selected) and fails.








signature.asc
Description: OpenPGP digital signature


dvd+rw-tools/growisofs is broken on 2.6.32 kernel and so with Squeeze.

2011-02-20 Thread Jari Fredriksson

My setup:

Debian Lenny amd64 under VMware 2.0.2 on Windows7 hostm using a Writable
DVD-RW drive. The drive is cofigured to be directly accessed to the
Linux client, not via ATAPI emulation.

If I use kernel 2.6.26-2-amd64 growisofs works.

If I upgrade kernel to .32 via Backports, or distupgrade to Squeeze
growisofs not more works.

It does not recognize the DCD-drive any more as capable to write a DVD.

The error message printed is:

   :-( /dev/dvdrw: media is not recognized as recordable DVD: 0

When I googled this, I found numerous Ubuntu posters, so it must have
been around with the newer kernel for some time.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4d612e93.9030...@iki.fi



Re: OT: Make Windows act like Debian and copy text just by marking it

2011-01-31 Thread Jari Fredriksson
On 31.1.2011 13:01, Daniel Andersson wrote:
 Hi all,
 
 Can anyone recommend a program that allows me to make Windows to act
 like as Debian and copy text just by marking it?
 
 It would lessen the annoyance of switching to Windows :)
 
 

I use PuTTY to access Linux in Windows. It just works there.

-- 

The surest protection against temptation is cowardice.
-- Mark Twain



signature.asc
Description: OpenPGP digital signature


Re: recursively find duplicate filenames

2011-01-06 Thread Jari Fredriksson
On 5.1.2011 13:15, S Mathias wrote:
 find duplicate filenames in a folder
 find | perl -ne 's!([^/]+)$!lc $1!e; print if 1 == $seen{$_}++'
 
 find duplicate filenames in a folder recursively
 ? how? 
 

$ sudo aptitude install fdupes

-- 

Q:  What's the difference between the 1950's and the 1980's?
A:  In the 80's, a man walks into a drugstore and states loudly, I'd
like some condoms, and then, leaning over the counter, whispers,
and some cigarettes.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4d25bc6d.9020...@iki.fi



Re: firewall package for laptop wi-fi client

2011-01-03 Thread Jari Fredriksson
On 3.1.2011 11:55, Russell L. Harris wrote:

 
 The major threats are web browser security holes (update often)
 especially through flash and java plug-ins, and pdf.
 
 Flash and java are in most web pages.  Does a firewall not protect
 against these threats? or are browser updates necessary even with a
 firewall?
 

Most web sites today do NOT have Java Applets. Javascript is NOT Java.
Totally different concept, and that is very common, almost 100% of web
sites do has Javascript.

Firewall does not protect from Web Browser vulnerabilities, browser
updates are must.

-- 

Tomorrow, this will be part of the unchangeable past but fortunately,
it can still be changed today.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4d219ed2.60...@iki.fi



Re: When is best time to upgrade lenny to squeeze

2010-08-06 Thread Jari Fredriksson
On 6.8.2010 18:35, PaulNM wrote:
 If you'll be running the VM only when logged in, virtualbox is
 definitely preferred. If you need to run headless servers that start
 automatically on bootup, qemu is the way to go.
 

I use VirtualBox just like you described, but I use VMWare Server 2.0
for the headless servers. Is qemu somehow better? My host is a Windows 7
64bit.

-- 

Kiss me, Kate, we will be married o' Sunday.
-- William Shakespeare, The Taming of the Shrew


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4c5c37d6.6030...@iki.fi



Re: Linux PDA cell phones - Linux on Android compatible cell phones? ; jor Debian

2010-06-29 Thread Jari Fredriksson
On 29.6.2010 11:23, giovanni_re wrote:
 Anyone here have an Android cell phone that runs a some full capability
 linux distro?
 
 ie, making something like a linux pda with cell phone capability?
 
 Is there an Ubuntu, or Debian, or some other community based distro for
 the android phone hw?

Android no, but Nokia's N900 has the Debian based Maemo distro. The next
versions will be converted to MeeGo, a Nokia/Intel joint venture.

-- 
http://www.iki.fi/jarif/
I use PGP. If there is an incompatibility problem with your mail
client, please contact me.

You are a fluke of the universe; you have no right to be here.



signature.asc
Description: OpenPGP digital signature


Re: help for a new user

2010-05-08 Thread Jari Fredriksson
On 9.5.2010 0:13, Alexander Batischev wrote:
 On Sat, May 08, 2010 at 02:02:01PM -0700, Robert Holtzman wrote:
 What is an internet key and did you mean to publish it for all the world  
 to read?
 Internet key is modern kind of modem. It uses mobile phone network to access.
 Key looks just like usual USB pendrive, but it have place for SIM card (which
 is similar to your mobile phone's card). I think you can find more detailed
 (and professional) explanation on the Internet.
 

Yes. You can even exchange Internet Keys with a special protocol
designed for that: http://en.wikipedia.org/wiki/Internet_Key_Exchange

-- 
http://www.iki.fi/jarif/

Q:  What do you call the money you pay to the government when
you ride into the country on the back of an elephant?
A:  A howdah duty.



signature.asc
Description: OpenPGP digital signature


Re: Good Use for ClamAV

2010-04-07 Thread Jari Fredriksson
On 7.4.2010 10:51, Freeman wrote:
 I'll always be slowly catching up on comp tech. 
 
 I was using Knoppix and ClamAV to remove a virus for a friend when the
 futility of it all hit me.  The free anti-virus hopscotch game that windows
 users play to feel safe.  What wasted energy--over an OS I boot into maybe
 7% of the time.  They screw up half the time.
 
 There isn't a big demand for ClamAV on the Debian partitions of a
 laptop/desktop.  But I'll be scheduling scans of the XP partition from
 Debian.  Doh!
 
 There is even a ClamAV *win32* for the unlucky.
  

I don't scan my disk partitions with it, but all incoming as well as
outgoing email is scanned with ClamAV (by amavisd-new). ClamAV with some
3rd party signatures (SaneSecurity) works quite well in that. Not
because it detects good, but clamav_daemon is the only daemonized FREE
anti-virus for Linux.

And my Linux is a server for my Windows workstation. Without Windows, I
would not bother scanning viruses.

-- 
http://www.iki.fi/jarif/

You learn to write as if to someone else because NEXT YEAR YOU WILL BE
SOMEONE ELSE.



signature.asc
Description: OpenPGP digital signature


Re: Spam

2010-04-07 Thread Jari Fredriksson
On 7.4.2010 19:07, Freeman wrote:
 On Wed, Apr 07, 2010 at 07:24:58AM -0500, John Hasler wrote:
 Freeman writes:
 Has there been an increase of spam on the list over the past few
 weeks?

 I have observed a general increase in spam.

 I started filtering the list, which I don't like doing.

 I've been filtering the lists for years.  The listmasters do a good job,
 but their filters can't know my ham as mine can.

 But no avail.  I assume it passes my filters for the same reason it
 gets by list filters.

 The latter is mostly a matter of sheer bulk: almost every message that
 hits the Debian servers is spam.  What filters are you using?
 -- 

 
 Good to know the Debian people are talented at that. Hate to think about the
 sea of spam though.
 
 I am remembering that my provider uses Spamassassin, but the settings are
 light and it has never filtered Debian list addresses that I've seen.
 
 I use Spambouncer on procmail. List spam is getting a spam-score of 0. 
 pattern matching is on.  So I might add some more aggressive block-list
 services to get that score up.
 

I use SpamAssassin in my email server, and it does not get much spam
points with spam posted to mailing lists. The email headers are mean
much in spam analysing, and when the sender is a Debian or Apache
server, they do not look spammy.

But then, I don't get much spam from mailing lists. I get hundreds of
real spam daily, and a spam or two in a mailing list does not make me
sad. Mailing list maintainers do pretty good job filtering IMHO.

-- 
http://www.iki.fi/jarif/

You are wise, witty, and wonderful, but you spend too much time reading
this sort of trash.



signature.asc
Description: OpenPGP digital signature


Re: How to read log files

2010-04-02 Thread Jari Fredriksson
On 2.4.2010 1:45, Dotan Cohen wrote:
 etcgrep () { grep -ir $1 /etc/* ; }
 sgrep () { grep -ir $1 /usr/src/linux ; }
 xgrep () { grep -i $1 $(echo $PATH | tr :  ) ; }

 
 Nice. I'm having a hard time understanding that last one, but I will
 figure it out. Thanks!
 
 

It looks like it takes the PATH environment variable and splits it into
multiple tokens (directories), and grep will search in *every* directory
included in PATH.

-- 
http://www.iki.fi/jarif/

You will have a long and boring life.



signature.asc
Description: OpenPGP digital signature


Re: [OT] postfix clarification

2010-04-02 Thread Jari Fredriksson
On 2.4.2010 21:36, supervinx wrote:
 Hi !
 There's a way to override postfix behaviour to use as sender name the 
 current user ?
 When I send as user1 (e.g.) I end up with us...@mydomain.com sender,
 if I send as root or other user), r...@mydomain.com
 

Postfix does not create the From: header into the mail, but the mail
client sending the message does. Postfix delivers what is passed thru
it, and adds a Received: hostname header, but that's all.

-- 
http://www.iki.fi/jarif/

Q:  What do you call a boomerang that doesn't come back?
A:  A stick.



signature.asc
Description: OpenPGP digital signature


Re: squirrelmail: how select all messages?

2010-03-31 Thread Jari Fredriksson
On 31.3.2010 14:44, Pol Hallen wrote:
 hi all :)
 
 Using squirrelmail on debian stable, I can't see how select all
 messages.
 it there a way or plugin to do this?
 thanks

No plugins needed: just click the 'Toggle all' link above the message
list or another under the list. If the list does not show all messages,
you can click Show all link first, then Toggle all.

-- 
http://www.iki.fi/jarif/

Q:  Why is it that Mexico isn't sending anyone to the '84 summer games?
A:  Anyone in Mexico who can run, swim or jump is already in LA.



signature.asc
Description: OpenPGP digital signature


Re: How to read log files

2010-03-31 Thread Jari Fredriksson
On 28.3.2010 19:33, Jari Fredriksson wrote:
 On 28.3.2010 19:11, Dotan Cohen wrote:
 Is there a good resource for learning to read log files such as the
 kernel log, messages, dmesg, and such? I have been googling but found
 nothing really comprehensive yet understandable for a newbie. Where
 should I start?

 
 Install logwatch, it will email you the essentials of daily logs.
 

Another one is logcheck. It will mail hourly much more log messages, but
tries to eliminate noise. It has a plugin mechanism to include filters
for the exclusion. Still posts plenty.

-- 
http://www.iki.fi/jarif/

You possess a mind not merely twisted, but actually sprained.



signature.asc
Description: OpenPGP digital signature


bind9 rndc reload problem

2010-03-31 Thread Jari Fredriksson

When I command rndc reload, this will be written to daemon.log

Apr  1 04:13:17 spitfire named[19287]: received control channel command
'reload'
Apr  1 04:13:17 spitfire named[19287]: loading configuration from
'/etc/bind/named.conf'
Apr  1 04:13:17 spitfire named[19287]: using default UDP/IPv4 port
range: [1024, 65535]
Apr  1 04:13:17 spitfire named[19287]: using default UDP/IPv6 port
range: [1024, 65535]
Apr  1 04:13:17 spitfire named[19287]: reloading configuration succeeded
Apr  1 04:13:17 spitfire named[19287]: reloading zones succeeded

All seems good. But no, if I have changed, or modified the zone records,
for example added or removed an address, the changes do not show!

Using Debian Lenny, BIND 9.6.1-P3

I tried to google, but could not find a suitable solution.

The new configuration comes alive if I do a restart for bind, but that
reload does not make it.

The configuration files are as follows:

/etc/bind/named.conf
|
/etc/bind/named.conf.local
 |
 /etc/bind/myzone.hosts

I think this is how it is supposed to be in Debian.

So.
1. I change a zone file
2. I add one to serial in the zone file
3. I command rndc reload
4. rndc connects to named, and all seems good
5. changes do not show up :(

Any ideas?

-- 
http://www.iki.fi/jarif/

You will attract cultured and artistic people to your home.



signature.asc
Description: OpenPGP digital signature


Re: bind9 rndc reload problem (SOLVED)

2010-03-31 Thread Jari Fredriksson
On 1.4.2010 4:24, Jari Fredriksson wrote:
 
 I think this is how it is supposed to be in Debian.
 
 So.
 1. I change a zone file
 2. I add one to serial in the zone file
 3. I command rndc reload
 4. rndc connects to named, and all seems good
 5. changes do not show up :(
 
 Any ideas?
 

Found it in BIND FAQ :/

Q:  
Why don't my zones reload when I do an rndc reload or SIGHUP?

A:  
A zone can be updated either by editing zone files and reloading the
server or by dynamic update, but not both. If you have enabled dynamic
update for a zone using the allow-update option, you are not supposed
to edit the zone file by hand, and the server will not attempt to reload it


-- 
http://www.iki.fi/jarif/

You will attract cultured and artistic people to your home.



signature.asc
Description: OpenPGP digital signature


Re: How to read log files

2010-03-29 Thread Jari Fredriksson
On 28.3.2010 19:11, Dotan Cohen wrote:
 Is there a good resource for learning to read log files such as the
 kernel log, messages, dmesg, and such? I have been googling but found
 nothing really comprehensive yet understandable for a newbie. Where
 should I start?
 

As has been said, Google is maybe the best answer here. I doubt there is
any comprehensive tutorial, because (while the log file has some -
logger dependent - format), the messages themselves are not standardized.

Each and every application (including Linux kernel) has it's own
messages, and if Googling the message (with the app name added to the
query) does not help; there is always the source code *horror*.

Indeed, while I try to use Debian packaged applications, I remember
having downloaded the source code and tried to understand what the code
is trying to do. While this may sound horrendous, it is IMHO still miles
better than what we have in Windows. Windows log messages are usually
totally bizarre, and there is in most cases not anything in Google, nor
source code available.

Understanding log files is - while not art - sometimes hard labor.
Google, mailing lists, Usenet, those are good to have. Often some one
else has seen the same message, and internet remembers. It has quite
good memory, and it does not pay much to ask.

If you still insist, and want to be the über authority and master of all
log messages, feel free to begin your journey. Such a master most
certainly will get paid as a system admin, and enjoy great salary!

-- 
http://www.iki.fi/jarif/

If you laid all of our laws end to end, there would be no end.
-- Mark Twain



signature.asc
Description: OpenPGP digital signature


Re: ad blocking squid

2010-03-29 Thread Jari Fredriksson
On 29.3.2010 8:17, Glenn English wrote:
 
 On Mar 28, 2010, at 7:42 PM, John Hasler wrote:
 
 Jozsef Vadkan wrote:
 Can anyone post a link to a good howto, how to set up a transparent
 squid proxy, that can filter ads?

 I suggest that you try Privoxy.  No need for a HOWTO: just install the
 Debian package.
 
 ... and point your browser at port 8118...
 
 I don't remember how I did it, but I followed an instruction in either 
 squid's or privoxy's FAQ and got them daisy-chained. I go to squid's port and 
 it goes through privoxy. Works good...
 
 Oh, wait. That's not transparent. You'll need a redirect rule in the packet 
 filter on the proxy host. And make it the proxy host the default route. And 
 make the real router to the Internet the default route on the proxy host... 
 Are you sure it has to be transparent???
 

I once toyed with squid (transparent) chained with privoxy, and it
worked quite well. But I removed them, as I use Windows as my
workstation and there is Proxomitron which is better for my tastes. But,
if using Linux, the squid/privoxy might be in use.

Privoxy (I think) can not play as a transparent proxy, but Squid can,
and it can be chained with Privoxy.

-- 
http://www.iki.fi/jarif/

Today's weirdness is tomorrow's reason why.
-- Hunter S. Thompson



signature.asc
Description: OpenPGP digital signature


Re: ad blocking squid

2010-03-29 Thread Jari Fredriksson
On 29.3.2010 17:52, Glenn English wrote:
 
 On Mar 29, 2010, at 8:17 AM, Jari Fredriksson wrote:
 
 Privoxy (I think) can not play as a transparent proxy, but Squid can,
 and it can be chained with Privoxy.
 
 potential newbie question
 
 Why not? If privoxy's running on a host acting as a gateway, with a redirect 
 in the packet filter, what could possibly go wrong?
 
 /potential newbie question
 

Well, I Googled, and it seems that Privoxy CAN do that.

http://www.privoxy.org/faq/configuration.html#INTERCEPTING

-- 
http://www.iki.fi/jarif/

Today's weirdness is tomorrow's reason why.
-- Hunter S. Thompson



signature.asc
Description: OpenPGP digital signature


Re: How to read log files

2010-03-28 Thread Jari Fredriksson
On 28.3.2010 19:11, Dotan Cohen wrote:
 Is there a good resource for learning to read log files such as the
 kernel log, messages, dmesg, and such? I have been googling but found
 nothing really comprehensive yet understandable for a newbie. Where
 should I start?
 

Install logwatch, it will email you the essentials of daily logs.

-- 
http://www.iki.fi/jarif/

You may be recognized soon.  Hide.



signature.asc
Description: OpenPGP digital signature


Re: How to read log files

2010-03-28 Thread Jari Fredriksson
On 28.3.2010 21:16, Dotan Cohen wrote:
 Install logwatch, it will email you the essentials of daily logs.

 
 Thanks. Actually, my goal is to understand what I am reading in the
 logs, not just to have the error pointed out. But I will install
 logwatch for sure.
 
 Right now, I am fighting with a kernel panicking machine. Instead of
 googling each and every line of the messages log, I would love a
 reference that would explain what common lines mean, with an emphasis
 on error lines. But I can find no such resource!
 

I have no problem reading log files. But I have 25 years behind of
reading those.

Maybe you are not entitled to use a computer in the first place?

-- 
http://www.iki.fi/jarif/

You're definitely on their list.  The question to ask next is what list
it is.



signature.asc
Description: OpenPGP digital signature


Small snort/oinkmaster problem

2010-03-20 Thread Jari Fredriksson

Using snort  oinkmaster.

How to restart snort when and only when the rules were changed? When
googling I only found suggestions and the snort should not be restarted
in vain, and I agree. But how to do that? oinkmaster does not return any
special return codes, which would be useful.

How do you do it?

-- 
http://www.iki.fi/jarif/

Don't Worry, Be Happy.
-- Meher Baba



signature.asc
Description: OpenPGP digital signature


Re: Virtualbox-3.1

2010-03-11 Thread Jari Fredriksson
On 11.3.2010 22:36, Frank J Niertit wrote:
 Hi
 
 First of all let me thank you for a great system. You have made my
 life a lot better. But there is always a but. I cannot load
 Virtualbox-3.1. I am reliant on it in order to run Windows on top of
 Debian in an office environment. I cannot get people to use just
 your work so I have to comply. However it is much easier to back up
 and maintain Windows from Virtualbox. I am trying to deploy 10
 machines at this time but I am unable to load Virtualbox. An error
 message keeps coming up telling me that it has been temporarily
 moved. Is there any way for you to still let me load the system with
 the same load I have now while you work on whatever the problem is.
 
 Thanks again for a great system.
 
 Frank
 

I wonder what this is... What means Load? Executing VirtualBox on a
Debian? No. been temporarily moved sounds more like http. Do it must
be download?

I tried to download VirtualBox 3.1 for Debian AMD64 from Sun site. No
problem.

What is the problem here?

-- 
http://www.iki.fi/jarif/

You attempt things that you do not even plan because of your extreme
stupidity.



signature.asc
Description: OpenPGP digital signature


Re: Bash email attachment

2010-03-08 Thread Jari Fredriksson
On 8.3.2010 15:53, Raven wrote:
 Hi all,
 
 I recently wrote a small content filter script (in bash) to use on my
 local Postfix installation. The script receives via pipe: the
 recipient and the sender's addresses then responds by sending back a
 message containing some body text and an image attachment.
 It works as it is supposed to do, but with some email clients the image
 is not displayed properly.
 Gmail, Yahoo and MS Outlook detect the image as an attachment, but
 Squirrelmail and my Blackberry only show garbled text.
 Here's what a message looks like:
 
 [headers]
 [body]
 
 begin 600 img.jpg
 m_]...@`.5$n5!y(J__X`#DD!-@D!P```J2R__;`$,``P(`@(
 M`P(`@,#`P,$...@0$!`0$`8!08)`H*0@)0H,#PP*PX+0D-$0T.#Q`0
 M$1`*#!(3$A`3#Q`0$/_;`$,!`P,#!`,$`0$!`+0L0$!`0$!`0$!`0$!`0
 M$!`0$!`0$!`0$!`0$!`0$!`0$!`0$!`0$!`0$!`0$!`0$!`0$/_``!$(``
 
 [...]
 
 MXD.U5'F(,9Y'%-RYG=F:5M!MX[%1!)'O#`D8Z[L]ZR5C7[3!;$%)IY-H4MP
 MO.,FMU1-,T,@'F$-A\_8_PBKB^']9UGQ3I[6^FR`+,`TAZ#`S^/%:4X7=[
 'ERI6;/_V0``
 `
 end
 
 
 To encode the image I use:
 
 /usr/bin/uuencode img.jpg img.jpg  attachment.txt
 cat hdr.txt body.txt attachment.txt  message.txt
 $SENDMAIL -f $4 -- $2 message.txt
 
 
 Anyone knows how to solve this?
 Thanks
 

I think uuencode is used mostly in Usenet, and normally not in email.
Software having an usenet client (like OE) understand uuencode, but it
is not normally required for an email client.

I have never seen uuencode in email myself. MIME attachments might work
better.

-- 
http://www.iki.fi/jarif/

For a light heart lives long.
-- Shakespeare, Love's Labour's Lost



signature.asc
Description: OpenPGP digital signature


Re: useradd: Problem joining into a Samba domain

2010-03-05 Thread Jari Fredriksson
On 5.3.2010 5:46, Olaf Reitmaier Veracierta wrote:
 
 On 04/03/10 17:02, Jari Fredriksson wrote:
 I have an ancient domain, originally started with Red Hat 7.x. It is
 running on latest Lenny now, and works fine, except..

 Now I try to add a new server into the domain.

 I found out that somehow I do not have add machine script in smb.cfg

 So, I googled and found this:

  /usr/sbin/useradd -d /var/lib/nobody -g 100 -s /bin/false -M %u

 Why not try to use smbldap-useradd and smbldap-* from smbldap-tools
 package?
 

I don't use LDAP. Those are LDAP-specific tools, right?

-- 
http://www.iki.fi/jarif/

You dialed 5483.



signature.asc
Description: OpenPGP digital signature


useradd: Problem joining into a Samba domain

2010-03-04 Thread Jari Fredriksson

I have an ancient domain, originally started with Red Hat 7.x. It is
running on latest Lenny now, and works fine, except..

Now I try to add a new server into the domain.

I found out that somehow I do not have add machine script in smb.cfg

So, I googled and found this:

/usr/sbin/useradd -d /var/lib/nobody -g 100 -s /bin/false -M %u

Seems reasonable. But joining to the domain still does not work.

Trying locally smbpasswd

 # smbpasswd -a -m lancaster$

Returns an error from useradd:

 _samr_create_user: Running the command `/usr/sbin/useradd -d
/var/lib/nobody -g 65534 -s /bin/false -M lancaster$' gave 2
Failed to add entry for user lancaster$.

I have tried modifying the command, but it always returns that syntax error.

I wonder if anyone happens to have a working command in a Debian Lenny
Samba configuration? Would be grateful for help.

-- 
http://www.iki.fi/jarif/




signature.asc
Description: OpenPGP digital signature


Re: useradd: Problem joining into a Samba domain

2010-03-04 Thread Jari Fredriksson
On 4.3.2010 23:32, Jari Fredriksson wrote:
 
 I have an ancient domain, originally started with Red Hat 7.x. It is
 running on latest Lenny now, and works fine, except..
 
 Now I try to add a new server into the domain.

Never mind, I got it.

/usr/sbin/useradd -c Machine  -d /var/lib/nobody -g 65534 -s /bin/false %u

There was some extra option.

-- 
http://www.iki.fi/jarif/

We know all about the habits of the ant, we know all about the habits of the
bee, but we know nothing at all about the habits of the oyster.  It seems
almost certain that we have been choosing the wrong time for studying the
oyster.
-- Mark Twain, Pudd'nhead Wilson's Calendar



signature.asc
Description: OpenPGP digital signature


Re: SpamAssassin not following private whitelist commands

2010-03-03 Thread Jari Fredriksson
On 3.3.2010 3:38, Ron Johnson wrote:
 Hi,
 
 (Up-to-date Sid system.)
 
 SA, which is attached to Postfix, isn't doing what I think it should
 do.  According to instructions I found on the Intarweb, per-user
 whitelist addresses go in ~/.spamassassin/user_prefs with the format:
 whitelist_from  f...@bar.com
 

Side note: whitelist_from is the most dangerous variant of those
whitelist commands in SA. whitelist_auth of whitelist_from_rcvd
should be used, if at all possible.

whitelist_from accepts also spam, if the sender address is forged, which
most often is in spam or virii.

-- 
http://www.iki.fi/jarif/

Don't get stuck in a closet -- wear yourself out.



signature.asc
Description: OpenPGP digital signature


tcp/ip traffic shaping in Debian

2010-03-03 Thread Jari Fredriksson

Hello.

I have several PC:s in my LAN, and a Debian Lenny as a router/firewall
on the edge of it.

Does Lenny has tools for traffic shaping. I have one machine here
downloading lots of binaries from Giganews, and I might be tempted to
limit that traffic somehow.

I installed tcng after googling something, but the examples I found did
not compile.

Any good tutorials or pointers for a Debian user with tcng/tc or other
tools?


-- 
http://www.iki.fi/jarif/

Your nature demands love and your happiness depends on it.



signature.asc
Description: OpenPGP digital signature


Re: SpamAssassin not following private whitelist commands

2010-03-03 Thread Jari Fredriksson
On 3.3.2010 17:42, green wrote:
 Jari Fredriksson wrote at 2010-03-03 07:52 -0600:
 On 3.3.2010 3:38, Ron Johnson wrote:
 SA, which is attached to Postfix, isn't doing what I think it should
 do.  According to instructions I found on the Intarweb, per-user
 whitelist addresses go in ~/.spamassassin/user_prefs with the format:
 whitelist_from  f...@bar.com

 Side note: whitelist_from is the most dangerous variant of those
 whitelist commands in SA. whitelist_auth of whitelist_from_rcvd
 should be used, if at all possible.

 whitelist_from accepts also spam, if the sender address is forged, which
 most often is in spam or virii.
 
 Unfortunately whitelist_from_rcvd requires a second relay rDNS parameter, 
 and 
 whitelist_auth requires SPF or DKIM.
 
 Is it possible to have something like whitelist_from_rcvd without the second 
 required parameter?

No, but it should be possible to find the relay by looking into some
previous message from the sender, and set it accordingly. Of course, it
is a laptop user moving from network to another, that does not work.

-- 
http://www.iki.fi/jarif/

And do you think (fop that I am) that I could be the Scarlet Pumpernickel?



signature.asc
Description: OpenPGP digital signature


Re: tcp/ip traffic shaping in Debian

2010-03-03 Thread Jari Fredriksson
On 3.3.2010 19:18, Mart Frauenlob wrote:
 On 03.03.2010 15:29, Jari Fredriksson wrote:

 Hello.

 I have several PC:s in my LAN, and a Debian Lenny as a router/firewall
 on the edge of it.

 Does Lenny has tools for traffic shaping. I have one machine here
 downloading lots of binaries from Giganews, and I might be tempted to
 limit that traffic somehow.

 I installed tcng after googling something, but the examples I found did
 not compile.

 Any good tutorials or pointers for a Debian user with tcng/tc or other
 tools?


 eris:~# aptitude show wondershaper
 Package: wondershaper

Thanks!


  After installing this package, read highly the detailed instructions:
 /usr/share/doc/wondershaper/README.Debian
 

File not found.

Have to google.


-- 
http://www.iki.fi/jarif/

Keep emotionally active.  Cater to your favorite neurosis.



signature.asc
Description: OpenPGP digital signature


Re: tcp/ip traffic shaping in Debian

2010-03-03 Thread Jari Fredriksson
On 3.3.2010 19:54, Jari Fredriksson wrote:
 On 3.3.2010 19:18, Mart Frauenlob wrote:
 On 03.03.2010 15:29, Jari Fredriksson wrote:

 Hello.

 I have several PC:s in my LAN, and a Debian Lenny as a router/firewall
 on the edge of it.

 Does Lenny has tools for traffic shaping. I have one machine here
 downloading lots of binaries from Giganews, and I might be tempted to
 limit that traffic somehow.

 I installed tcng after googling something, but the examples I found did
 not compile.

 Any good tutorials or pointers for a Debian user with tcng/tc or other
 tools?


 eris:~# aptitude show wondershaper
 Package: wondershaper
 
 Thanks!
 
 
  After installing this package, read highly the detailed instructions:
 /usr/share/doc/wondershaper/README.Debian

 
 File not found.
 
 Have to google.
 

OK, it was gunzipped.

Does not seem to be a useful utility. Limits all traffic on some
interface, no good. I want to limit traffic per ip address or port.


-- 
http://www.iki.fi/jarif/

Keep emotionally active.  Cater to your favorite neurosis.



signature.asc
Description: OpenPGP digital signature


Re: tcp/ip traffic shaping in Debian

2010-03-03 Thread Jari Fredriksson
On 3.3.2010 19:43, Raimund Sacherer wrote:
 Hi, i strongly advice you, if you do want this seriously, to read and 
 understand:
 http://lartc.org/lartc.html
 
 This is the Linux Advanced Routing  Traffic Control HOWTO
 
 Here you should find everything you need to shape your traffic at your 
 heart's will.
 
 best regards
 Raimund
 

You are right, this stuff needs to be taken seriously. I have not what
it takes in the seriousness.

Quite a text, that ;)

-- 
http://www.iki.fi/jarif/

Cheer Up!  Things are getting worse at a slower rate.



signature.asc
Description: OpenPGP digital signature


Re: Limited X setup

2010-02-28 Thread Jari Fredriksson
On 28.2.2010 0:24, joseph lockhart wrote:
 Hello, been a while since I posted, working on setting up a partition which 
 will run mainly console programs, however, I was interested in setting up X 
 to run a few programs (or maybe the framebuffer) a quick search of the web 
 yielded no help. Any suggestions on where to look. 
 
 Running lenny from netinstall with some console added already but no graphics 
 yet. Also I have no interest in a GUI for this project.
 
 jwlockhart
 

I just install xterm, and get minimal stuff to run software on a remote
x-server.

-- 
http://www.iki.fi/jarif/

Elves and Dragons! I says to him.  Cabbages and potatoes are better
for you and me.
-- J. R. R. Tolkien



signature.asc
Description: OpenPGP digital signature


Re: perl or bash question [convert strings in a txt to html links]

2010-02-28 Thread Jari Fredriksson
On 27.2.2010 19:12, Vadkan Jozsef wrote:
 How can I do that in bash or perl, that I have a txt file, e.g.:
 
 $cat file.txt
 Hi, this is the content of the txt file, that contains links like this:
 http://www.somewhere.it/, and it could contain: http://somewhere.com,
 etc..
 This is the second line, that doesn't contains links..
 ..
 This is the XYZ line, that contains a link: http://www.somewhere.net
 $
 

No regexp but how about the txt2html utility?


-- 
http://www.iki.fi/jarif/

Elves and Dragons! I says to him.  Cabbages and potatoes are better
for you and me.
-- J. R. R. Tolkien



signature.asc
Description: OpenPGP digital signature


installing snort

2010-02-19 Thread Jari Fredriksson

aptitude install snort

will not create /etc/snort.conf nor the rule files in /etc/snort/rules

If I think that it should, am I wrong?

Debian Lenny 32-bit with backports.

-- 
http://www.iki.fi/jarif/

Consider well the proportions of things.  It is better to be a young
June-bug
than an old bird of paradise.
-- Mark Twain, Pudd'nhead Wilson's Calendar



signature.asc
Description: OpenPGP digital signature


Re: installing snort

2010-02-19 Thread Jari Fredriksson
On 19.2.2010 18:00, Jordan Metzmeier wrote:
 Sounds like you want the package snort-rules-default. This is in the
 Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get
 familiar with searching the /usr/share/doc directory for information
 such as this.
 
meta-package (?) snort loads this snort-rules-default, but nothing comes
in /etc/snort.

I even tried to load it manually (before asking here), but no joy.


 
 Jordan Metzmeier
 
 On Fri, Feb 19, 2010 at 10:32 AM, Jari Fredriksson ja...@iki.fi wrote:

 aptitude install snort

 will not create /etc/snort.conf nor the rule files in /etc/snort/rules

 If I think that it should, am I wrong?

 Debian Lenny 32-bit with backports.



-- 
http://www.iki.fi/jarif/

You are dishonest, but never to the point of hurting a friend.



signature.asc
Description: OpenPGP digital signature


Re: installing snort

2010-02-19 Thread Jari Fredriksson
On 19.2.2010 19:33, Jari Fredriksson wrote:
 On 19.2.2010 18:00, Jordan Metzmeier wrote:
 Sounds like you want the package snort-rules-default. This is in the
 Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get
 familiar with searching the /usr/share/doc directory for information
 such as this.

 meta-package (?) snort loads this snort-rules-default, but nothing comes
 in /etc/snort.
 
 I even tried to load it manually (before asking here), but no joy.
 
 

Ok, I commanded aptitude install snort on an another machine, and it
worked! Copied the /etc/snort from there.



 Jordan Metzmeier

 On Fri, Feb 19, 2010 at 10:32 AM, Jari Fredriksson ja...@iki.fi wrote:

 aptitude install snort

 will not create /etc/snort.conf nor the rule files in /etc/snort/rules

 If I think that it should, am I wrong?

 Debian Lenny 32-bit with backports.

 
 


-- 
http://www.iki.fi/jarif/

You are dishonest, but never to the point of hurting a friend.



signature.asc
Description: OpenPGP digital signature


Re: installing snort

2010-02-19 Thread Jari Fredriksson
On 19.2.2010 19:56, Jordan Metzmeier wrote:
 So you are saying you have installed the snort-rules-default package
 but the /etc/snort/rules/ directory remains missing? Doing something
 manually could cause dpkg to not write the config files (although I
 have typically only seen this when you delete a config file installed
 by a package and then attempt to reinstall).
 
 If this is the case reinstall snort-rules-default with `aptitude -o
 DPkg::Options::=--force-confmiss reinstall snort-rules-default`. You
 can view what config files should be present with `dpkg -L
 snort-rules-default`

Thanks, I did this, hopefully the installation now is ok.

But now I have the problem that Lenny snort is no longer supported by
snort rules. We need snort 2.8 as that is what the rules are updated for.




signature.asc
Description: OpenPGP digital signature


Re: which debian i should install?

2010-02-07 Thread Jari Fredriksson
On 6.2.2010 20:49, rosy cutie wrote:
 i want to install debian on my computer.by searching its website i
 reaches at the page
 http://cdimage.debian.org/debian-cd/5.0.4/i386/iso-cd/
 but i am not able to decide which debian?
 i dont understand the computer jargon.i cannot install it via internet
 or through any network.
 i think i can install it by a cd and   debian-504-i386-CD-.iso
 http://cdimage.debian.org/debian-cd/5.0.4/i386/iso-cd/debian-504-i386-CD-1.iso
 will work for me but why there are cd-1 to cd-31.
 i also want to know what to do with MD5SUMS.
 is it also nessacery to download it.
 may be it is not nessacery but i want to know how to use it.
 please help me.
 
 

I have used Linux from 1994, but mostly in servers and text mode. I now
have a VirtualBox on my Windows, and desktop linuces on that too. I have
latest Debian, and latest Ubuntu Desktops.

While I prefer Debian as my server systems, I definitely prefer Ubuntu
as a Desktop. The Debian workstation has this font problem: it just does
not like usable out of the box. Ubuntu looks great.

Ubuntu, while a bit strange at first to me as a Debian user (it does not
have root superuser, but this sudo -i), is great. I find myself
booting the Ubuntu when I need Linux, the Debian I do not use.

As a Linux beginner, I say: go Ubuntu. That way you get the Debian open
system with acceptable user experience.

-- 
http://www.iki.fi/jarif/

Tell the truth or trump--but get the trick.
-- Mark Twain, Pudd'nhead Wilson's Calendar



signature.asc
Description: OpenPGP digital signature


Re: which debian i should install?

2010-02-07 Thread Jari Fredriksson
On 7.2.2010 21:02, Mark wrote:
On Sun, Feb 7, 2010 at 8:28 AM, Jari Fredriksson ja...@iki.fi
 mailto:ja...@iki.fi wrote:
 
 I have used Linux from 1994, but mostly in servers and text mode. I now
 have a VirtualBox on my Windows, and desktop linuces on that too. I
 have
 latest Debian, and latest Ubuntu Desktops.
 
 While I prefer Debian as my server systems, I definitely prefer Ubuntu
 as a Desktop. The Debian workstation has this font problem: it just
 does
 not like usable out of the box. Ubuntu looks great.
 
 
 As a Linux beginner, I say: go Ubuntu. That way you get the Debian open
 system with acceptable user experience.
 
 
 Your linux experience definitely outweighs mine (only about 1 year for
 me) but I tried to give Ubuntu a chance several times this past year and
 always wound up coming back to Debian.  To each his/her own I suppose,
 but I guess I would expect to hear use Ubuntu from people in an
 experience range more like mine, while I'd expect to hear use Debian
 from people with more experience.  Strange to hear the opposite in this
 case.

Debian is a great base. Ubuntu is based on Debian (try 'cat
/etc/debian_version' under Ubuntu ;)

Debian is great. And Ubuntu is an improvement on that platform.
Improvement in the sense that it is better for inexperienced users, and
also for experienced users being lazy, and not willing to tweak the
system. Canonical the company workers are doing the tweaking for us.

-- 
http://www.iki.fi/jarif/

A banker is a fellow who lends you his umbrella when the sun is shining
and wants it back the minute it begins to rain.
-- Mark Twain



signature.asc
Description: OpenPGP digital signature


Re: HTTP Filter Proxy

2010-01-22 Thread Jari Fredriksson
On 21.1.2010 7:07, Kun Niu wrote:
 With squid you can filter hijacked sites. But I wonder if any server
 side software can control popups. I think that they are blocked by
 client side software.
 

I use Proxomitron in Windows, and it kills pop ups. While it is really a
client side proxy, it can be used in a server too, and works like a server.

-- 
http://www.iki.fi/jarif/

You attempt things that you do not even plan because of your extreme
stupidity.



signature.asc
Description: OpenPGP digital signature


Re: Mouse problem in VirtualBox client Lenny

2010-01-13 Thread Jari Fredriksson

Installed Virtualbox-guest-X11 from lenny repository and now it works.
The guest from Virtualbox virtual CD did not work.





signature.asc
Description: OpenPGP digital signature


Java plugins in 64bit Debian

2010-01-11 Thread Jari Fredriksson

I installed a Debian Lenny (amd64), and sun-jdk in addition to the
default gcj based default Java.

When I access Java content with Firefox (or is IceWeasel) the browsed
prompts me to install JDK... Clicking the prompt shows Sun's website
with download button.

I installed that, but nothing changes.

Using update-java-alternatives talks about missing firefox.plugin.so or
something similar, no matter which of the alternatives I pick.

Where can those plugin shared libraries can be get? Downloading JRE from
Sun does not install them.

-- 
http://www.iki.fi/jarif/

You will step on the night soil of many countries.



signature.asc
Description: OpenPGP digital signature


Re: Java plugins in 64bit Debian

2010-01-11 Thread Jari Fredriksson


 So maybe you are missing the sun-java6-plugin package.

 Greetings,

 --
 Camaleón


Thanks, works now! That was it.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Java plugins in 64bit Debian

2010-01-11 Thread Jari Fredriksson
On 11.1.2010 11:12, Camale�n wrote:
 
 So maybe you are missing the sun-java6-plugin package.
 

Thanks, Java works now in the browser!

-- 
http://www.iki.fi/jarif/

Your life would be very empty if you had nothing to regret.



signature.asc
Description: OpenPGP digital signature


Mouse problem in VirtualBox client Lenny

2010-01-10 Thread Jari Fredriksson

I have VirtualBox 3.1.2r56127 running on amd64 Windows7 host, and an
amd64 Lenny client.

Everything seemed to work before I finished the vboxadd setup adding
VirtualBox client support.

Now the mouse responds to right click (opening a menu in right bottom
corner of the window), but nothing else works mouse wise.

After vboxadd setup my xorg.conf has following setup for mouse:

Section InputDevice
  Driver   mouse
  Identifier   Mouse[1]
  Option   Buttons 9
  Option   Device /dev/input/mice
  Option   Name VirtualBox Mouse Buttons
  Option   Protocol explorerps/2
  Option   Vendor Sun Microsystems Inc
  Option   ZAxisMapping 4 5
  Option   CorePointer
EndSection

Section InputDevice
  Driver   vboxmouse
  Identifier   Mouse[2]
  Option   Device /dev/vboxguest
  Option   Name VirtualBox Mouse
  Option   Vendor Sun Microsystems Inc
  Option   SendCoreEvents
EndSection

I googled, and tried to replace those with

Section InputDevice
   Identifier   Configured Mouse
   Driver   vboxmouse
   Option   CorePointer
EndSection

but that made the Xorg unstartable.

What might be wrong in the setup?


-- 
http://www.iki.fi/jarif/

April 1

This is the day upon which we are reminded of what we are on the other three
hundred and sixty-four.
-- Mark Twain, Pudd'nhead Wilson's Calendar



signature.asc
Description: OpenPGP digital signature


Re: A Debian Lenny machine declined to work

2009-11-27 Thread Jari Fredriksson


On 23.11.2009 5:52, Jari Fredriksson wrote:
 
 
 On 23.11.2009 5:50, Jari Fredriksson wrote:


 On 22.11.2009 23:34, Stan Hoeppner wrote:
 Jari Fredriksson put forth on 11/22/2009 3:27 PM:

 I believe it is a hardware problem. But still disk works, it loads
 scripts from /etc/init.d. At least /etc/init.d/arno-firewall as it
 printes the output to console.

 Strange.

 A corrupt filesystem can cause a hard lock on boot as well.  Please
 provide the last dozen lines or so on the screen.  That may help
 immensely in troubleshooting this problem.


 Thanks... But that is hard to provide, as I can't ssh into it. Had to
 copy those info by hand from another monitor.

 I got my net working by switchin the modem to routing mode with NAT and
 setting its IP to the address of the Linux router.

 Have to work on that machine later... I lost my firewall, as well as
 amavisd-new (with ClamAV, F-Prot and BitDefender), they were working on
 that machine, can can't setup those on any other machine (inefficient RAM..)

 
 I'll propably boot that machine with a Knoppix CD, and try to check the
 disks. And find logs..
 

RESOLVED! :/

It booted fine from a Knoppix CD, and everything looked good. The
problem was my late editing of an init script, which went waiting input
from user (a typo). Pressing Ctrl-C continued and finally I found the
bug in the script.

-- 
http://www.iki.fi/jarif/

Q:  What is the burning question on the mind of every dyslexic
existentialist?
A:  Is there a dog?



signature.asc
Description: OpenPGP digital signature


A Debian Lenny machine declined to work

2009-11-22 Thread Jari Fredriksson

I write this to here, while it is probable that no one will have any ideas.

I had a Lenny PC as my router to internet, having 2 NICs and an ADSL
modem in bridged mode in one, and another in my switch.

Suddenly my network died, and when I rebooted the router this happened.

It boots, finds the hard disk, and loads stuff. Last stuff it prints on
screen is usual boot stuff, and in addition to that Arno's Firewall
output. I think that is normally printed to screen console. All logging
should be logged via syslog to my main server, but nothing happends now.

The console does not show login prompt, and the machine seems to be dead
or otherwise dead after the boot. It does not route network, and does
not allow me to log in and study logs.

If only the NIC was broken it should allow me to log in from console, right?

What might cause this? It boots but not fully. No error messages in
console. It just does not do anything useful.

-- 
http://www.iki.fi/jarif/

Good news.  Ten weeks from Friday will be a pretty good day.



signature.asc
Description: OpenPGP digital signature


Re: A Debian Lenny machine declined to work

2009-11-22 Thread Jari Fredriksson


On 22.11.2009 22:09, Jari Fredriksson wrote:

 It boots, finds the hard disk, and loads stuff. Last stuff it prints on
 screen is usual boot stuff, and in addition to that Arno's Firewall
 output. I think that is normally printed to screen console. All logging
 should be logged via syslog to my main server, but nothing happends now.
 

I think that is normally *NOT* printed to screen console.

-- 
http://www.iki.fi/jarif/

Q:  What is purple and concord the world?
A:  Alexander the Grape.



signature.asc
Description: OpenPGP digital signature


Re: A Debian Lenny machine declined to work

2009-11-22 Thread Jari Fredriksson


On 22.11.2009 23:14, Andrew Sackville-West wrote:
 On Sun, Nov 22, 2009 at 10:09:55PM +0200, Jari Fredriksson wrote:
 
 [..]
 

 It boots, finds the hard disk, and loads stuff. Last stuff it prints on
 screen is usual boot stuff, and in addition to that Arno's Firewall
 output. I think that is normally printed to screen console. All logging
 should be logged via syslog to my main server, but nothing happends now.

 The console does not show login prompt, and the machine seems to be dead
 or otherwise dead after the boot. It does not route network, and does
 not allow me to log in and study logs.
 
 does it respond to pings? can you ssh in? 

No, ping says no route to ...

 
 have you tried booting into single-user mode? 

Yes, same issue. No login prompt or anything.

 
 is it locked up hard or does the keyboard (capslock, numlock) respond?
 Any response from the magic Alt-SysRq?

I have not tried those. But Ctrl-Alt-Del does not do anything, that I
tested. Dead meat.

 
 
 

 If only the NIC was broken it should allow me to log in from
 console, right?
 
 if it previously allowed console login, I would assume it would
 continue to do so unless, in general.
 

 What might cause this? It boots but not fully. No error messages in
 console. It just does not do anything useful.
 
 if it is locked hard that would point to some hardware problem,
 otherwise I would look for recent updates for a clue. Some boot
 process is failing to terminate.
 

I believe it is a hardware problem. But still disk works, it loads
scripts from /etc/init.d. At least /etc/init.d/arno-firewall as it
printes the output to console.

Strange.

-- 
http://www.iki.fi/jarif/

Stop!  There was first a game of blindman's buff.  Of course there was.
And I no more believe Topper was really blind than I believe he had eyes
in his boots.  My opinion is, that it was a done thing between him and
Scrooge's nephew; and that the Ghost of Christmas Present knew it.  The
way he went after that plump sister in the lace tucker, was an outrage
on the credulity of human nature.



signature.asc
Description: OpenPGP digital signature


Re: A Debian Lenny machine declined to work

2009-11-22 Thread Jari Fredriksson


On 22.11.2009 23:34, Stan Hoeppner wrote:
 Jari Fredriksson put forth on 11/22/2009 3:27 PM:
 
 I believe it is a hardware problem. But still disk works, it loads
 scripts from /etc/init.d. At least /etc/init.d/arno-firewall as it
 printes the output to console.

 Strange.
 
 A corrupt filesystem can cause a hard lock on boot as well.  Please
 provide the last dozen lines or so on the screen.  That may help
 immensely in troubleshooting this problem.
 

Thanks... But that is hard to provide, as I can't ssh into it. Had to
copy those info by hand from another monitor.

I got my net working by switchin the modem to routing mode with NAT and
setting its IP to the address of the Linux router.

Have to work on that machine later... I lost my firewall, as well as
amavisd-new (with ClamAV, F-Prot and BitDefender), they were working on
that machine, can can't setup those on any other machine (inefficient RAM..)

-- 
http://www.iki.fi/jarif/

... A solemn, unsmiling, sanctimonious old iceberg who looked like he
was waiting for a vacancy in the Trinity.
-- Mark Twain



signature.asc
Description: OpenPGP digital signature


  1   2   >