Unable to run virsh on bookworm
Hi, I've installed virt-manager on a Debian bookworm system, and that is working fine. However, when I try to use the libvirt CLI client, virsh, I receive this error message: virsh: /usr/local/lib/x86_64-linux-gnu/libvirt.so.0: version `LIBVIRT_PRIVATE_9.0.0' not found (required by virsh) The Fedora package libvirt-libs <https://packages.fedoraproject.org/pkgs/libvirt/libvirt-libs/fedora-38.html> 9.0.0 states that it provides libvirt.so.0(LIBVIRT_PRIVATE_9.0.0)(64bit), so I'm not sure why the Debian package wouldn't be the same way, or why virt-manager works but virsh does not. I just filed a bug <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1035808> (that was my time using the Debian bug tracking system). Is anyone aware of a workaround for this bug until it is fixed? -- Respectfully, Sean Whalen signature.asc Description: OpenPGP digital signature
Re: How exactly do I create a Debian live USB?
That cp command looks fine, but if you want to try using dd with offsets, try: sudo dd if=debian-live-11.0.0-amd64-standard.iso of=/dev/sdb bs=4M if is input file, of is output file, bs is blocksize which I set to 4MB which is a typical block size If that still doesn't work it's likely an issue with the USB flash drive you're using. --- Sean Behan On 2021-10-11 06:38, kaye n wrote: > Hello Friends! > > I did this and was able to boot my newly created Debian 11 live USB but was > stuck in a black terminal-like screen where it says, I/O error, etc. > > Using GParted, I created an MS-DOS partition table and formatted the USB > stick in fat32. > > Then I used these commands > > sudo cp debian-live-11.0.0-amd64-standard.iso /dev/sdb > sync > > All seemed fine until I booted the live USB and got the error message as > stated above. > > Thank you for your time.
Re: Request of recommendations for public Mercurial repository hosting
Mario Castelán Castrowrites: > On 17/09/17 12:04, Mario Castelán Castro wrote: >> My only candidate so far is Bitbucket. I want to know if there are other >> options. I have already discarded SourceForge because it has Google JS. >> All other providers that I know either are paid or do not offer >> Mercurial. Unfortunately, most only offer Git. > > I discovered that Bitbucket registration does not work with Google > JavaScript blocked, so it is no longer an option. Yeah, we use Google for captcha. I just tried to register a new account by blocking analytics but allowing google ang gstatic. :shrug: signature.asc Description: PGP signature
Switch user is broken for multiple sessions after upgrade to stretch.
I've got a home desktop PC that often has several members of the family logged in to it at the same time, with a mixture of LXDE, GNOME, and FVWM(from .xsession) sessions. It uses gdm3 as a display manager. Since an upgrade to stretch, Switch User doesn't work. None of these work: - "Switch User" option in the LXDE logout menu. - "New Login" button in xscreensaver, - "Switch User" button in gnome-screensaver, - gdmflexiserver (It does work in GNOME) I've also tried other display managers - LDXM, lightdm, sddm, wdm, xdm - each has a switch user problem with some of the desktop sessions. Also, only gmd3 seems to remember the session choices on a per user basis. Any suggestions? (There is also a problem that LXDE uses light-locker, which, when used with gdm3, just gives a blank screen with no way to get out of it. I've disabled light-locker for LXDE in /etc/xdg/autostart/light-locker.desktop to get around this.) --
Re: Debian 9
On Wed, Jun 28, 2017 at 06:24:17PM -0700, Jimmy Johnson wrote: > On 06/27/2017 09:49 AM, Greg Wooledge wrote: > I downloaded the iso to check this out, yes it won't give you root passwd, > the install takes the passwd while installing. Sudo is installed but the > user is not allowed sudo rights. Now I have this install and it's worst than > the live dvd, it least you can sudo with the live dvd. Is there an easy fix > I can try? I've been googling but nothing easy to do. Login as root, run "visudo" and uncomment the line that says: # Allow members of group sudo to execute any command Then log out and back in on your regular user signature.asc Description: PGP signature
Re: Debian 9
On Tue, Jun 27, 2017 at 05:41:57PM -0400, Fungi4All wrote: > Is this all it takes to hack the root account of a secure debian system? Correct, if you're on the same architecture you can actually chroot to acquire the same effect by issuing commands. It's not really hacking, you have access to the file system, therefore you are able to change the data on the disk, such as passwords. signature.asc Description: PGP signature
Re: How to attach a fully encrypted drive to Stretch
On Tue, Jun 27, 2017 at 10:34:45AM +0200, Erwan David wrote: > Le 06/27/17 à 10:16, Hans a écrit : > > Hi! > > I believe, first of all is to check, how youz device is seen at the > > usb-port. > > > > As root start "tail -f /var/log/syslog" and then plugin your device. Check > > the > > messages. > > > > When you know the device, check the partionin. Just start "fdisk" and print > > out your partitions. Be careful, not to change anything! > > > > End fdisk, then open your encrypted partition (i.e. sdc3) using > > "cryptsetup luksOpen /dev/sdc3 somename" and enter your correct password. > > > > The term "somename" can freely be chosen, I personally are using something > > like "usr2" or "home2" whatever. > > > > When your device is opened, you can mount it somewhere, I am using > > either "/mnt" or create a new directory (i.e. /disk1) > > > > So, mount it using "mount /dev/mapper/somename /mnt". > > > > It won't work : the disk is an lvm volume (as said in first message), so > there is some lvm stuff to do before this. Sorry I do not know lvm to > give the right commands to use. When the drive is LVM it should me mapped to /dev/mapper/ automatically after being opened by cryptsetup, you can then mount it like so: "mount /dev/mapper/volume_name /mnt" signature.asc Description: PGP signature
Re: CPU frequency and custom kernel
On Fri, Nov 22, 2013 at 11:06:14AM +0100, Jochen Spieker wrote: Check the files in this directory: /sys/devices/system/cpu/cpu0/cpufreq Especially scaling_available_frequencies, scaling_max_freq and scaling_min_freq. I've been using the cpufreq-info, which I think reports what's in those files. For the Debian kernel I get: cpufrequtils 008: cpufreq-info (C) Dominik Brodowski 2004-2009 Report errors and bugs to cpuf...@vger.kernel.org, please. analyzing CPU 0: driver: acpi-cpufreq CPUs which run at the same hardware frequency: 0 1 2 3 CPUs which need to have their frequency coordinated by software: 0 maximum transition latency: 10.0 us. hardware limits: 800 MHz - 2.30 GHz available frequency steps: 2.30 GHz, 2.00 GHz, 1.80 GHz, 1.60 GHz, 1.40 GHz, 1.20 GHz, 1000 MHz, 800 MHz available cpufreq governors: conservative, powersave, userspace, ondemand, performance current policy: frequency should be within 800 MHz and 2.30 GHz. The governor ondemand may decide which speed to use within this range. current CPU frequency is 800 MHz (asserted by call to hardware). cpufreq stats: 2.30 GHz:5.20%, 2.00 GHz:0.14%, 1.80 GHz:0.16%, 1.60 GHz:0.20%, 1.40 GHz:0.28%, 1.20 GHz:0.44%, 1000 MHz:0.49%, 800 MHz:93.09% (39552) And then for the custom kernel I get: cpufrequtils 008: cpufreq-info (C) Dominik Brodowski 2004-2009 Report errors and bugs to cpuf...@vger.kernel.org, please. analyzing CPU 0: driver: acpi-cpufreq CPUs which run at the same hardware frequency: 0 1 2 3 CPUs which need to have their frequency coordinated by software: 0 maximum transition latency: 10.0 us. hardware limits: 800 MHz - 2.30 GHz available frequency steps: 2.30 GHz, 2.00 GHz, 1.80 GHz, 1.60 GHz, 1.40 GHz, 1.20 GHz, 1000 MHz, 800 MHz available cpufreq governors: conservative, powersave, userspace, ondemand, performance current policy: frequency should be within 800 MHz and 2.30 GHz. The governor ondemand may decide which speed to use within this range. current CPU frequency is 1.80 GHz (asserted by call to hardware). cpufreq stats: 2.30 GHz:11.32%, 2.00 GHz:1.27%, 1.80 GHz:0.94%, 1.60 GHz:0.59%, 1.40 GHz:1.17%, 1.20 GHz:0.60%, 1000 MHz:1.12%, 800 MHz:82.99% (713) That last line for the custom kernel says the CPU runs at 800 MHz most of the time, but I think that's because the stats don't roll over on reboot. It shows I'm using the Debian kernel most of the time. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20131122111329.GA5843@tuzo
Re: CPU frequency and custom kernel
On Fri, Nov 22, 2013 at 03:03:33AM -0500, ken wrote: I've found cpuspeed to be buggy... the speed at which the cpu runs seems to have little to do with the conditions specified in the config file. Recent kernel upgrades have improved cpuspeed somewhat (without any changes to the config file), but it's still nonsensical at times. I think that was it. I upgraded to most recent stable kernel (3.12.1) [1] and no longer see the problem. I took a look at the 3.2 changelog [2] to see if I could tell what particular change Debian developers made to get this working. There are quite a few cpufreq related changes, but it wasn't clear to me which fixes the problem I was seeing. [1] https://www.kernel.org/ [2] http://ftp-master.metadata.debian.org/changelogs//main/l/linux/linux_3.2.51-1_changelog -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20131122115430.GA7395@tuzo
CPU frequency and custom kernel
I've built my own kernel, but the CPU runs faster (hotter, more fan noise, etc.) I can't figure out why it's faster. Everything I've checked is the same between the two kernels. If I boot to the Debian provided kernel the CPU runs at 800 MHz, but if I boot to my custom kernel it runs at 1.8 GHz. (These are baseline speeds, after boot without running anything else.) Here's what I've checked so far: * Kernel versions are the same. The Debian version is 3.2.0-4-amd64 and the version I got from kernel.org is 3.2.52. * The boot command line has the same paremeters for both: linux /vmlinuz-3.2.0-4-amd64 root=/dev/mapper/tuzo-root ro quiet * Both boot to the same root file system, and use the same configuration files. * The .config file used to build the custom kernel is the same as the one used to build the Debian kernel. (I'm going to pare it down to just what I need once I figure out this problem.) * Both use the ondemand cpufreq governor. Is there anything else I should check? My next step would be to try and build the kernel source from the Debian package instead of from kernel.org. Maybe this is a code difference? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20131122004241.GA13986@tuzo
ssh tunnel delay
I'm seeing a delay when I attempt a connection through an ssh tunnel. The connection's fast without the tunnel, but has an inital 80 second delay with it. Here's the case that works, without the tunnel. I see lines I type echoed immediately: server nc -l -p 1212 client nc server 1212 But if instead I do this, the first line isn't seen for about 80 seconds. After that, everything's fine and lines appear immediately: server nc -l -p 1212 client ssh -o ExitOnForwardFailure=yes -fN -L1110:localhost:1212 server client nc localhost 1110 I can ssh to the server fine, with no delay. Any ideas why the tunnel has the delay? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130910101005.GA13051@tuzo
Re: ssh tunnel delay
On Tue, Sep 10, 2013 at 12:25:59PM +0200, Juan Sierra Pons wrote: Can you launch the tunnel in verbose (-vvv) mode and send the logs? ssh -vvv -o ExitOnForwardFailure=yes -fN -L1110:localhost:1212 server Here's what I'm seeing with -vvv: http://paste.debian.net/37873/ -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130910104403.GA13329@tuzo
Re: ssh tunnel delay
On Tue, Sep 10, 2013 at 01:11:17PM +0200, Juan Sierra Pons wrote: Hi, I don't see anything strange in the logs provided. Do you see anything strange in your dmesg, /var/log/daemon.log, etc? Is the DNS on the server's side working properly? Sometimes when the reverse DNS is not properly configure some TCP based services get some delay on first connection: ssh, mysql, etc Can a network issue be discarded. Please check with mtr: mtr remote server Not a solution but a very tiny improvement , launch the tunnel with the -C (compression) parameter. Thanks for looking at this. The other things you list look fine. I did notice something else with the log, though. Below I type the line hello. Then there's the 80 second delay. And then there's the log messages after the hello: debug1: Entering interactive session. client nc localhost 1110 hello debug1: Connection to port 1110 forwarding to localhost port 1212 requested. debug2: fd 6 setting TCP_NODELAY debug2: fd 6 setting O_NONBLOCK debug3: fd 6 is O_NONBLOCK debug1: channel 2: new [direct-tcpip] debug2: channel 2: open confirm rwindow 2097152 rmax 32768 I think the delay no longer happens, with subsequent lines, because TCP_NODELAY and O_NONBLOCK get set. I wonder if there's a way to configure things to set those from the start? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130910120513.GA14348@tuzo
Re: ssh tunnel delay
On Tue, Sep 10, 2013 at 02:28:37PM +0200, Juan Sierra Pons wrote: 2013/9/10 Sean Alexandre s...@alexan.org On Tue, Sep 10, 2013 at 01:11:17PM +0200, Juan Sierra Pons wrote: Hi, I don't see anything strange in the logs provided. Do you see anything strange in your dmesg, /var/log/daemon.log, etc? Is the DNS on the server's side working properly? Sometimes when the reverse DNS is not properly configure some TCP based services get some delay on first connection: ssh, mysql, etc Can a network issue be discarded. Please check with mtr: mtr remote server Not a solution but a very tiny improvement , launch the tunnel with the -C (compression) parameter. Thanks for looking at this. The other things you list look fine. I did notice something else with the log, though. Below I type the line hello. Then there's the 80 second delay. And then there's the log messages after the hello: debug1: Entering interactive session. client nc localhost 1110 hello debug1: Connection to port 1110 forwarding to localhost port 1212 requested. debug2: fd 6 setting TCP_NODELAY debug2: fd 6 setting O_NONBLOCK debug3: fd 6 is O_NONBLOCK debug1: channel 2: new [direct-tcpip] debug2: channel 2: open confirm rwindow 2097152 rmax 32768 I think the delay no longer happens, with subsequent lines, because TCP_NODELAY and O_NONBLOCK get set. I wonder if there's a way to configure things to set those from the start? Hi, I have found a kind of workaround: http://www.gossamer-threads.com/lists/openssh/bugs/56042 If the ssh client is invoked with: ssh -N host -R port # TCP_NODELAY is not set ssh -n host -R port sleep 1d # TCP_NODELAY is set - this is a workaround Can you try to launch the tunnel without the -N parameter (maybe you can send later the tunnel to background) I get the same thing, unfortunately, with this: ssh -o IPQoS=lowdelay lowdelay -o ExitOnForwardFailure=yes -f -L1110:localhost:1212 skoki3 sleep 1d I've also added this line to /etc/ssh/sshd_config on the server, and restarted ssh there: IPQoS lowdelay lowdelay This bug report makes it sound like the bug's been fixed on Debian 7.0, but maybe not: Debian Bug report logs - #643312 openssh-client: IPQoS option ignored for AF_INET since 5.9p1-1 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=643312 I've got version 1:6.0p1-4 of openssh-client. The bug report says the problems fixed there, but maybe not. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130910130754.GA14913@tuzo
dhcpdump not seeing dhclient messages
I have a machine that's not acquiring a DHCP lease from my ISP. I can see that dhclient is sending DHCPDISCOVER messages. My system log has: Aug 25 17:36:41 athabasca dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 7 Aug 25 17:36:48 athabasca dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 13 Aug 25 17:37:01 athabasca dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 12 Aug 25 17:37:13 athabasca dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 12 Aug 25 17:37:25 athabasca dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 5 Aug 25 17:37:30 athabasca dhclient: No DHCPOFFERS received. Aug 25 17:37:30 athabasca dhclient: No working leases in persistent database - sleeping. But for some reason the DHCPDISCOVER messages aren't making it out over the NIC. I'm running dhcpdump and see no traffic. This is with no firewall rules. All tables and chains are set to ACCEPT. The odd thing is if I do the exact same thing with this machine connected to a local TP-LINK router instead of my ISP cable modem, dhcpdump sees the DHCPDISCOVER, and the machine acquires a DHCP lease. Any ideas why would dhclient be sending a DHCPDISCOVER, but dhcpdump not see it? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130826083131.GA6922@tuzo
Re: dhcpdump not seeing dhclient messages
On Mon, Aug 26, 2013 at 02:54:27PM +0530, Arun Khan wrote: On Mon, Aug 26, 2013 at 2:01 PM, Sean Alexandre s...@alexan.org wrote: I have a machine that's not acquiring a DHCP lease from my ISP. I can see that dhclient is sending DHCPDISCOVER messages. My system log has: Aug 25 17:36:41 athabasca dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 7 -8-8-8-8-8-8-8- The odd thing is if I do the exact same thing with this machine connected to a local TP-LINK router instead of my ISP cable modem, dhcpdump sees the DHCPDISCOVER, and the machine acquires a DHCP lease. Is your cable modem setup in bridge mode? (bridge between it's ethernet (RJ45) and the 'wan' ports with cable coming in from ISP. Yes, bridge mode. (It's just a cable modem, and not a router. Bridge mode is the only way it works.) Any ideas why would dhclient be sending a DHCPDISCOVER, but dhcpdump not see it? Try tcpdump with dest port 67 OK, thanks. I just tried that now, and it got a DHCP lease this time, for some reason. So it's working again. I'll do a tcpdump next time, if I see the problem again, and hopefully that will tell me what's going on. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130826104607.GA5205@tuzo
Re: dhcpdump not seeing dhclient messages
On Mon, Aug 26, 2013 at 01:28:44PM -0300, Luther Blissett wrote: I do not know if this is the case, but ISP's usually record its customers MAC address which is universally unique. Maybe, just maybe, when you switched from your tp-link router to direct wan link, the ISP machine noticed that there was an unknown MAC attempting to connect and refused connection. Then your dhcp discover packets would reach ISP hardware, but would not receive any responses. I've checked with my ISP and they say to just power down the cable modem for 30 seconds before attaching a machine with a new MAC. And, I've been able to switch between two other machines, both with different MAC addresses. It's just this third machine that's given me problems. What I'm really stuck on right now is why does the dhclient log show that it's sending DHCPDISCOVER messages, but dhcpdump isn't seeing them? It's like something is sitting between dhclient and my NIC. I've disabled all firewall rules, though, so know it's not that. (All tables and chains have a default policy of ACCEPT, and no rules.) BTW, you should notice that dchp communications are not held with the same machines when you have a direct link as opposed to routed link. When routed through some gateway, you have two sets of dhcp ISP -- router -- pc. Thanks. All my connections right now are direct, like this: [ISP]---[cable modem]---[my machine] The cable modem is just a modem, and not a router. But I know what you mean. My final configuration will be: [ISP]---[cable modem]---[my machine, a router]---[LAN machines] -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130826170716.GA7349@tuzo
owncloud no longer in wheezy
I see owncloud is no longer in wheezy, and I'm trying to understand why. Where can I find information on why a package was pulled from a release? I see this, but it only seems to say when it was pulled: http://packages.qa.debian.org/o/owncloud.html It was pulled from testing to unstable on 2013-05-14. I'd like to understand why, (and how this works in general.) Is there somewhere else I can check? I'm trying to understand the Debian development process as much as anything. (I had installed owncloud on a wheezy box when wheezy was testing. I want to install it again, but this time on wheezy stable.) -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130809100704.GA28285@tuzo
Re: owncloud no longer in wheezy
On Fri, Aug 09, 2013 at 06:07:04AM -0400, Sean Alexandre wrote: I see owncloud is no longer in wheezy, and I'm trying to understand why. Where can I find information on why a package was pulled from a release? I see this, but it only seems to say when it was pulled: http://packages.qa.debian.org/o/owncloud.html It was pulled from testing to unstable on 2013-05-14. I'd like to understand why, (and how this works in general.) Is there somewhere else I can check? I'm trying to understand the Debian development process as much as anything. (I had installed owncloud on a wheezy box when wheezy was testing. I want to install it again, but this time on wheezy stable.) I think I just found the answer to my question, here: http://bugs.debian.org/cgi-bin/pkgreport.cgi?repeatmerged=nosrc=owncloud#_4_2_5 owncloud 4.0 (the version that was in wheezy testing) had a serious bug. It's been fixed, but in the next release: owncloud 5.0. But, wheezy had already been frozen by that time and so owncloud got pulled. So next time I'll check the Bugs in source package link to understand why a package got pulled from a release: http://bugs.debian.org/cgi-bin/pkgreport.cgi?repeatmerged=nosrc=owncloud -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130809103357.GA28387@tuzo
dhclient No DHCPOFFERS received
I've got two Debian Wheezy machines. One can connect to my cable modem fine, and gets an IP address. The other can't. They're both configured the same. Any ideas why this might be? The log message I get on the machine that doesn't work is: Aug 7 06:29:26 moose dhclient: No DHCPOFFERS received. The configuration on both machines looks the same. I've checked: * /etc/dhcp/dhclient.conf * /etc/sysctl.conf * iptables What's mysterious about this is that both machines can connect fine to my TP-LINK home router, and get DHCP leases and IP addresses. It's only when I try to connect the problem machine to my cable modem that it gets the No DHCPOFFERS received. I know it's not a MAC address issue. Both my TP-LINK home router and the Debian Wheezy machine that works get DHCP leases without any problems, and have different MAC addresses. Any ideas? Thanks! -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130807133856.GA6733@tuzo
Re: dhclient No DHCPOFFERS received
On Wed, Aug 07, 2013 at 02:57:58PM +, Andy Hawkins wrote: Sean Alexandres...@alexan.org wrote: I've got two Debian Wheezy machines. One can connect to my cable modem fine, and gets an IP address. The other can't. They're both configured the same. Any ideas why this might be? Apologies for suggesting something obvious you might already have thought of, but I seem to recall my Cable provider's modem will only provide DHCP addresses to a single MAC unless it's been correctly release (or perhaps the Cable Modem re-powered). Could it be as simple as that? No, unfortunately. I know it's not a MAC address issue. Both my TP-LINK home router and the Debian Wheezy machine that works get DHCP leases without any problems, and have different MAC addresses. I also asked my ISP about this, when I had them on the line to bring up my new cable modem. They said any MAC address is fine. Just power the cable modem down for 30 seconds first. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130807164822.GA7727@tuzo
Re: dhclient No DHCPOFFERS received
On Wed, Aug 07, 2013 at 05:24:57PM +, Andy Hawkins wrote: In article 20130807164822.GA7727@tuzo, Sean Alexandres...@alexan.org wrote: No, unfortunately. I know it's not a MAC address issue. Both my TP-LINK home router and the Debian Wheezy machine that works get DHCP leases without any problems, and have different MAC addresses. I also asked my ISP about this, when I had them on the line to bring up my new cable modem. They said any MAC address is fine. Just power the cable modem down for 30 seconds first. Ok, I did say I was kind of stating the obvious! Next thing I'd be doing is using tshark or similar to sniff the traffic being seen on the Debian box. OK, thanks, that's where I was headed, but was hoping it was something more obvious. I can get a tcpdump, but don't know DHCP very well. I'll take a look, though, and see what I can figure out. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130807191154.GA8969@tuzo
Re: dhclient No DHCPOFFERS received
On Wed, Aug 07, 2013 at 07:16:45PM +0100, Klaus wrote: On 07/08/13 18:24, Andy Hawkins wrote: In article 20130807164822.GA7727@tuzo, Sean Alexandres...@alexan.org wrote: No, unfortunately. I know it's not a MAC address issue. Both my TP-LINK home router and the Debian Wheezy machine that works get DHCP leases without any problems, and have different MAC addresses. I also asked my ISP about this, when I had them on the line to bring up my new cable modem. They said any MAC address is fine. Just power the cable modem down for 30 seconds first. Ok, I did say I was kind of stating the obvious! Next thing I'd be doing is using tshark or similar to sniff the traffic being seen on the Debian box. Andy Just more of the obvious stuff: You say it's a new cable modem, there is a home router, and there is at least one other Debian Wheezy box. Does your ISP provide you with one, or more than one IP address? If one, the router probably translates this public IP address to your private LAN. Does the router function as a DHCP server, or do you have a dedicated box on your LAN? Can you check the logs of your LAN DHCP server for entries matching the non-functioning box? There's no NAT in what I'm doing, no. The boxes in each case get a public IP address from my ISP (or try to.) The different cases are: CASE 1, works: [cable modem]---[TP-LINK router] CASE 2, works: [cable modem]---[wheezy box that works] CASE 3, doesn't work: [cable modem]---[wheezy box that doesn't work] I attach a laptop to the TP-LINK router to see that it got an IP address, so there's NAT there. But, NAT doens't come into play for the larger problem, if that's what you're asking. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130807191905.GB8969@tuzo
Re: dhclient No DHCPOFFERS received
On Wed, Aug 07, 2013 at 08:29:53PM +0100, Klaus wrote: On 07/08/13 20:19, Sean Alexandre wrote: On Wed, Aug 07, 2013 at 07:16:45PM +0100, Klaus wrote: On 07/08/13 18:24, Andy Hawkins wrote: In article 20130807164822.GA7727@tuzo, Sean Alexandres...@alexan.org wrote: No, unfortunately. I know it's not a MAC address issue. Both my TP-LINK home router and the Debian Wheezy machine that works get DHCP leases without any problems, and have different MAC addresses. I also asked my ISP about this, when I had them on the line to bring up my new cable modem. They said any MAC address is fine. Just power the cable modem down for 30 seconds first. Ok, I did say I was kind of stating the obvious! Next thing I'd be doing is using tshark or similar to sniff the traffic being seen on the Debian box. Andy Just more of the obvious stuff: You say it's a new cable modem, there is a home router, and there is at least one other Debian Wheezy box. Does your ISP provide you with one, or more than one IP address? If one, the router probably translates this public IP address to your private LAN. Does the router function as a DHCP server, or do you have a dedicated box on your LAN? Can you check the logs of your LAN DHCP server for entries matching the non-functioning box? There's no NAT in what I'm doing, no. The boxes in each case get a public IP address from my ISP (or try to.) The different cases are: CASE 1, works: [cable modem]---[TP-LINK router] CASE 2, works: [cable modem]---[wheezy box that works] CASE 3, doesn't work: [cable modem]---[wheezy box that doesn't work] I attach a laptop to the TP-LINK router to see that it got an IP address, so there's NAT there. But, NAT doens't come into play for the larger problem, if that's what you're asking. Have you checked for DHCP client entries in /var/log/daemon.log ? I'm running the standard dhclient, from the isc-dhcp-client package (though my box is running SID), and there are log messages like /var/log/daemon.log:Aug 5 08:48:29 myhostname dhclient: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 7 /var/log/daemon.log:Aug 5 08:48:29 myhostname dhclient: DHCPREQUEST on eth0 to 255.255.255.255 port 67 /var/log/daemon.log:Aug 5 08:48:29 myhostname dhclient: DHCPOFFER from 192.168.0.1 /var/log/daemon.log:Aug 5 08:48:29 myhostname dhclient: DHCPACK from 192.168.0.1 On the wheezy box that works I get: Aug 6 17:46:13 tuzo dhclient: Internet Systems Consortium DHCP Client 4.2.2 Aug 6 17:46:13 tuzo dhclient: Copyright 2004-2011 Internet Systems Consortium. Aug 6 17:46:13 tuzo dhclient: All rights reserved. Aug 6 17:46:13 tuzo dhclient: For info, please visit https://www.isc.org/software/dhcp/ Aug 6 17:46:13 tuzo dhclient: Aug 6 17:46:13 tuzo dhclient: Listening on LPF/eth0/10:0b:a9:8b:33:f8 Aug 6 17:46:13 tuzo dhclient: Sending on LPF/eth0/10:0b:a9:8b:33:f8 Aug 6 17:46:13 tuzo dhclient: Sending on Socket/fallback Aug 6 17:46:13 tuzo dhclient: DHCPREQUEST on eth0 to 255.255.255.255 port 67 Aug 6 17:46:20 tuzo dhclient: DHCPREQUEST on eth0 to 255.255.255.255 port 67 Aug 6 17:46:20 tuzo dhclient: DHCPNAK from 10.132.192.1 Aug 6 17:46:20 tuzo dhclient: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 5 Aug 6 17:46:20 tuzo dhclient: DHCPREQUEST on eth0 to 255.255.255.255 port 67 Aug 6 17:46:20 tuzo dhclient: DHCPOFFER from 10.132.192.1 Aug 6 17:46:20 tuzo dhclient: DHCPACK from 10.132.192.1 Aug 6 17:46:21 tuzo dhclient: bound to 66.26.64.22 -- renewal in 1705 seconds. On the wheezy box that doesn't work I get: Aug 7 06:28:25 moose dhclient: Internet Systems Consortium DHCP Client 4.2.2 Aug 7 06:28:25 moose dhclient: Copyright 2004-2011 Internet Systems Consortium. Aug 7 06:28:25 moose dhclient: All rights reserved. Aug 7 06:28:25 moose dhclient: For info, please visit https://www.isc.org/software/dhcp/ Aug 7 06:28:25 moose dhclient: Aug 7 06:28:25 moose kernel: [ 208.409987] ADDRCONF(NETDEV_UP): eth-wan: link is not ready Aug 7 06:28:25 moose dhclient: Listening on LPF/eth-wan/00:25:90:39:de:08 Aug 7 06:28:25 moose dhclient: Sending on LPF/eth-wan/00:25:90:39:de:08 Aug 7 06:28:25 moose dhclient: Sending on Socket/fallback Aug 7 06:28:25 moose dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 3 Aug 7 06:28:28 moose dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 6 Aug 7 06:28:28 moose kernel: [ 211.369046] e1000e: eth-wan NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None Aug 7 06:28:28 moose kernel: [ 211.370437] ADDRCONF(NETDEV_CHANGE): eth-wan: link becomes ready Aug 7 06:28:34 moose dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 12 Aug 7 06:28:46 moose dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 13 Aug 7 06:28:59 moose dhclient: DHCPDISCOVER on eth-wan to 255.255.255.255 port 67 interval 19 Aug 7 06:29:18 moose dhclient: DHCPDISCOVER
Re: dhclient No DHCPOFFERS received
On Wed, Aug 07, 2013 at 09:29:57PM +0200, Slavko wrote: is your network like this, please: - |ISP| - | | - | modem | - | -- | | | - - - | Debian I | | Debian II | | TP-Link | - - - or like this? - |ISP| - | | - | modem | - | | - | TP-Link | - | -- || - - | Debian I | | Debian II | - - My network is like your first diagram, but with only one machine connected to the modem at a time. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130807205320.GB9875@tuzo
Re: SSHD Keys
On Sat, Aug 03, 2013 at 10:16:08PM -0400, Jerry Stuckle wrote: I was just renewing my SSHD keys (dpkg-reconfigure openssh-server) and noticed it is generating 512 bit RSA keys. This isn't all that secure. How can I get it to generate better keys? As root: rm /etc/ssh/ssh_host* ssh-keygen -N '' -b 4096 -t rsa -f /etc/ssh/ssh_host_rsa_key -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130804081950.GA23754@tuzo
Hardware support
Hello and Good Day, Please can you tell me if Debian squeeze 64 bit accepts more than 4GB ram, ie 8GB? I have a Dell Latitude D6200 and am in the process of upgrading to a D6300 which will accept 8GB maximum RAM and Dell actually sell these 8gb Memory modules (2x4gb), even though in the beginning they stated it's max was 4GB. And so knowing that the machine itself has no problems accepting it, I just need to make sure that Debian 6.0.7 64 bit will accept it, because these RAM modules are not on the cheap side! - about 150 uk pounds for the pair. The other thing, just out of curiosity really, is to do with NVIDIA chipsets. Apparently the D6300 with the NVIDIA chipsets don't last long. And I think that maybe it is the pressure of using Windows, especially 7 or 8, on the chip that is the problem. So, am I right in thinking that, even using compiz, Debian is still going to be lighter on the graphics chip, than of Windows? Thankyou -- Sean Griffith(s)
Re: server log centalized
On Mon, Jul 15, 2013 at 03:18:52PM +0200, Pol Hallen wrote: I need setting up a server log centralized over internet (using rsyslog). What is better? Using a vpn or crypt log files? stunnel is good for this. It creates encrypted SSL tunnels between machines, for network daemons. Here are some links: stunnel package in wheezy http://packages.debian.org/wheezy/stunnel4 Article about using stunnel with rsyslog http://freecode.com/articles/ssl-encrypting-syslog-with-stunnel Wikipedia article on stunnel https://en.wikipedia.org/wiki/Stunnel Official site https://www.stunnel.org/ -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130715144828.GA19958@tuzo
Deterministic Builds (was [Re: wacky question])
On Wed, Jun 19, 2013 at 10:44:12PM -0400, Greg wrote: Does anyone think that debian could participate in any programs like PRISM? Or could a lone (or group of) sympathetic DD or DM slip a backdoor or something that could collect private info in the binary packages distributed by debian? There was an interesting post on this the other day on the liberationtech mailing list by Mike Perry from the Tor Project: Deterministic builds and software trust https://mailman.stanford.edu/pipermail/liberationtech/2013-June/009257.html To quote: For the past several years, we've been seeing a steady increase in the weaponization, stockpiling, and the use of exploits by multiple governments, and by multiple *areas* of multiple governments. This includes weaponized exploits specifically designed to bridge the air gap, by attacking software/hardware USB stacks, disconnected Bluetooth interfaces, disconnected Wifi interfaces, etc. Even if these exploits themselves don't leak (ha!), the fact that they are known to exist means that other parties can begin looking for them. In this brave new world, without the benefit of anonymity to protect oneself from such targeted attacks, I don't believe it is possible to keep a software-based GPG key secure anymore, nor do I believe it is possible to keep even an offline build machine secure from malware injection anymore, especially against the types of adversaries that Tor has to contend with. This means that software development has to evolve beyond the simple models of Trust my gpg-signed apt archive from my trusted build machine, or even projects like Debian going to end up distributing state-sponsored malware in short order. This is where deterministic builds come in... He goes on to explain what deterministc builds are, how Tor has started using them, and how hopefully Linux distros will as well. Also related, Bruce Scheier just wrote an interesting piece on weaponized exploits, on how the NSA is planting logic bombs and backdoors in machines and routers around the world: Has U.S. started an Internet war? www.cnn.com/2013/06/18/opinion/schneier-cyberwar-policy -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130620073240.GA29135@tuzo
Re: Openvpn, network manager and resolv.conf
On Mon, Jun 17, 2013 at 08:58:51AM -0700, Erwan David wrote: I am in holidays going from hotel to hotel and I see that resolv.conf stays the same, i.e. the one networkmanager writes from the hotel DHCP. It sounds like you may not have the resolvconf package installed. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130617162546.GA5716@tuzo
Re: Openvpn, network manager and resolv.conf
On Mon, Jun 17, 2013 at 05:42:19PM -0700, Erwan David wrote: Le 17/06/2013 09:25, Sean Alexandre a écrit : It sounds like you may not have the resolvconf package installed. I have... And I see in my resolv.conf # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8) # DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN nameserver 8.8.8.8 search key.chillispot.info And in /var/log/daemon.log Jun 17 17:35:27 bibi ovpn-dedibox[4076]: PUSH: Received control message: 'PUSH_REPLY,ifconfig-ipv6 2a01:e0b:2070:1::1001/64 2a01:e0b:2070:1::1,tun-ipv6,route-ipv6 2000::/3 2a01:0e0b:2070:1::1,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.8.0.1,dhcp-option DOMAIN rail.eu.org,tun-ipv6,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.10 10.8.0.9' which shows that the openvpn server pushed the DNS Your openvpn config file may be missing these two lines: up /etc/openvpn/update-resolv-conf down /etc/openvpn/update-resolv-conf You should be seeing a log file entry like this, that shows resolv.conf has been updated: Sun June 16 08:18:10 2013 us=8295 /etc/openvpn/update-resolv-conf tun0 1500 1562 10.0.122.114 10.0.122.113 init -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130618024004.GA10498@tuzo
Re: Openvpn, network manager and resolv.conf
On Mon, Jun 17, 2013 at 08:31:41PM -0700, Erwan David wrote: Le 17/06/2013 19:40, Sean Alexandre a écrit : Your openvpn config file may be missing these two lines: up /etc/openvpn/update-resolv-conf down /etc/openvpn/update-resolv-conf You should be seeing a log file entry like this, that shows resolv.conf has been updated: Sun June 16 08:18:10 2013 us=8295 /etc/openvpn/update-resolv-conf tun0 1500 1562 10.0.122.114 10.0.122.113 init That would mazke the config file on client not only linux but even debian specific. And good security dictates that such decision should be forced by server. I remember it once worked this way... I see your point. I don't know if there's a way to do that -- to configure the OpenVPN server to update resolv.conf for all clients without the clients needing to configure anything. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130618034814.GA11868@tuzo
Re: Debian/Linux tutorials.
On Thu, Jun 06, 2013 at 02:11:21PM +0300, atar wrote: I wanted to know please where can I enrich my knowledge about Linux at general and especially about Debian Linode's got some great tutorials: https://library.linode.com/ -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130606144811.GA24390@tuzo
Re: avahi-daemon: Is it *really* needed?
On Thu, May 23, 2013 at 12:39:16PM -0700, David Guntner wrote: I'm still running Squeeze for a while longer before I finally upgrade to Wheezy - want to let it shake out a bit before taking the plunge. :-) A question that I've been pondering for a while now: Is the avahi-daemon *really* needed? I've disabled it, and haven't needed it. Here's more on what it's for: http://packages.debian.org/wheezy/avahi-daemon So it seems you'd only need it if you want auto-discovery for printers and other devices on your network. You should be able to disable it with: update-rc.d avahi-daemon disable This leaves it installed, to satisfy the dependencies you're seeing, but causes it not to start when you reboot. To stop it before rebooting: service avahi-daemon stop -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130523204656.GA29320@tuzo
Debugging a Wheezy Hang
I've installed Wheezy on a laptop. Every few days it hangs. (I can't even ctl+alt+f2 to get a console.) I'd like to report this. How do I capture debug info that would be useful in a bug report? (And, where do I file a bug report?) Thanks! -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130520194008.GA16983@tuzo
Re: Debugging a Wheezy Hang
On Mon, May 20, 2013 at 03:47:13PM -0400, staticsafe wrote: Didn't you post this earlier this week? I will repost my answer and CC you as well: I just joined the list, but apparently not in time to get your earlier response. I'm seeing responses now. Thanks for resending. I'll take a look at those logs, and the other things people are suggesting. Would there any way to trigger a core dump, of the entire system, and would that be in any way useful? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130520212738.GA18144@tuzo
Reporting Wheezy Freeze
I've installed Wheezy on my laptop and it's freezing every so often. (I can't even ctl+alt+F2 to get a console.) I'd like to report a bug, but don't know where to start. What can I run to capture info on the bug the next time it happens? Where/how do I report it? Thanks for any pointers! -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20130519221724.GA6955@tuzo
ATI Graphics Radeon HD 5470
Hi I am having an HP Laptop DV3 - 4170ee It has a ATI Graphics card Radeon HD 5470 . I am having trouble with the open source driver that comes with debian sqeeze. It doesnt detect it fine. By the way I tried the open source driver with Ubuntu 12.04.1 and Linux Mint maya and it detects and activates it just fine.. Any suggestion with debian... -- Best Regards *Sean Gregory*
Nvidia module makes system unstable
Hello All, I recently made the switch from Kubuntu 11.10 to Debain stable. Everything was running very well until I installed the Nvidia module the Debian way. Then, the system became highly unstable. I noticed that the system would become very sluggish during simple tasks The most repeatable example of this is the slow rate at which the background fades when calling gksu. Additionally, there is a visible lag in the redrawing of windows when applications are minimized or restored. interestingly, video from YouTube seemed to be fluid. The situation was annoying, but not unbearable, until the entire system began to freeze. It seems that this may be related in some way to bug #664261. My situation differs in that I used the version from backports (280.13.really.275.36-1) in order to achieve compatibility with my GeForce GTX 560 Ti FPB (Fermi) GPU, it's worth noting that it did not experience any stability issues with the Ubuntu distribution of the Nvidia module 280.13 when I used Kubuntu 11.10. What should I do at this point? I'm tempted use the Nvidia installer, but I'm concerned that it might unnecessarily dirty my system. Is it possible to cleanly switch from the Nvidia installer to the Debian way? I'm also not sure whether I should report this as a separate bug, or as an addition to the one mentioned above. Any thoughts would be helpful. Thanks in advance, Sean -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAHJnR_LzgUHziCm6BYLJA_9ngjs=ncs3bnwv9m-6aksnwal...@mail.gmail.com
Re: Problem with Samba on Squeeze
On Sun, May 1, 2011 at 6:51 AM, Roger Morgan halbtaxabo-...@yahoo.comwrote: Samba is running but I can't connect to it, and when I do the following test (from the Samba server): smbclient -L servername the response (after entering correct password) is: cut here--- Receiving SMB: Server stopped responding session setup failed: Call timed out: server did not respond after 2 milliseconds ---end of response-- the Samba programs are running, here's the relevant part of the output of ps -ef | grep mb root 1969 1 0 18:13 ?00:00:00 /usr/sbin/smbd -D root 1983 1969 0 18:13 ?00:00:00 /usr/sbin/smbd -D root 2308 1 0 18:13 ?00:00:00 /usr/sbin/nmbd -D And here's my smb.conf file: #=== Global Settings === [global] log file = /var/log/samba/log.%m load printers = yes guest account = leong add: map to guest = Bad User printer = ML-1510_700 passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* . obey pam restrictions = yes write list = leong Delete write list encrypt passwords = true public = yes Delete public passwd program = /usr/bin/passwd %u passdb backend = tdbsam dns proxy = no writeable = yes Delete writeable server string = %h server path = /var/common Delete path unix password sync = yes workgroup = galaxy comment = lyra smbshare #valid users = leong (no valid users list means anyone can login) syslog = 0 panic action = /usr/share/samba/panic-action %d max log size = 1000 directory mode = 766 Delete directory mode pam password change = yes ## Browsing/Identification ### # Change this to the workgroup/NT-domain name your Samba server will part of # server string is the equivalent of the NT Description field # Windows Internet Name Serving Support Section: # WINS Support - Tells the NMBD component of Samba to enable its WINS Server # wins support = no # WINS Server - Tells the NMBD components of Samba to be a WINS Client # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both ; wins server = w.x.y.z # This will prevent nmbd to search for NetBIOS names through DNS. # What naming service and in what order should we use to resolve host names # to IP addresses ; name resolve order = lmhosts host wins bcast Networking # The specific set of interfaces / networks to bind to # This can be either the interface name or an IP address/netmask; # interface names are normally preferred ; interfaces = 127.0.0.0/8 eth0 # Only bind to the named interfaces and/or networks; you must use the # 'interfaces' option above to use this. # It is recommended that you enable this feature if your Samba machine is # not protected by a firewall or is a firewall itself. However, this # option cannot handle dynamic or non-broadcast interfaces correctly. ; bind interfaces only = yes Debugging/Accounting # This tells Samba to use a separate log file for each machine # that connects # Cap the size of the individual log files (in KiB). # If you want Samba to only log through syslog then set the following # parameter to 'yes'. # syslog only = no # We want Samba to log a minimum amount of information to syslog. Everything # should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log # through syslog you should set the following parameter to something higher. # Do something sensible when Samba crashes: mail the admin a backtrace ### Authentication ### # security = user is always a good idea. This will require a Unix account # in this server for every user accessing the server. See # /usr/share/doc/samba-doc/htmldocs/Samba3-HOWTO/ServerType.html # in the samba-doc package for details. security = user # You may wish to use password encryption. See the section on # 'encrypt passwords' in the smb.conf(5) manpage before enabling. # If you are using encrypted passwords, Samba will need to know what # password database type you are using. # This boolean parameter controls whether Samba attempts to sync the Unix # password with the SMB password when the encrypted SMB password in the # passdb is changed. # For Unix password sync to work on a Debian GNU/Linux system, the following # parameters must be set (thanks to Ian Kahan ka...@informatik.tu-muenchen.de for # sending the correct chat script for the passwd program in Debian Sarge). # This boolean controls whether PAM will be used for password changes # when requested by an SMB client instead of the program listed in # 'passwd program'. The default is 'no'. ## Domains ### # Is this machine able to authenticate users. Both PDC and BDC # must have this setting enabled. If you are the BDC you must # change the 'domain master'
Re: installer preseeding - partitioning
On Mon, Apr 25, 2011 at 4:51 PM, Richard Hector rich...@walnut.gen.nzwrote: On Mon, 2011-04-25 at 18:27 +1200, Richard Hector wrote: Hi all, I've got a preseed file, with a partitioning recipe that I think is valid, but I'm having trouble getting past the partitioner with no interaction. Unfortunately the documentation is a bit lacking on how the various partman values interact. This is the partitioning section of my preseed.cfg so far: ## Partitioning ## d-i partman-auto/disk string /dev/sda # d-i partman-auto/method string my-recipe # d-i partman-auto/choose_recipe select my-recipe d-i partman-auto/expert_recipe string my-recipe :: \ 10240 10240 -1 ext4 \ $primary{ } \ $bootable{ } \ method{ format } \ format{ } \ use_filesystem{ } \ filesystem{ ext4 } \ mountpoint{ / } . \ \ 2048 2048 2560 linux-swap \ $primary{ } \ method{ swap } \ format{ } . d-i partman/confirm_write_new_label boolean true d-i partman/choose_partition \ select Finish partitioning and write changes to disk d-i partman/confirm boolean true This is my preseed (from Lucid): d-i partman-auto/disk string /dev/sda d-i partman-auto/method string regular d-i partman-auto/expert_recipe string physics-workstation :: \ 200 2 250 ext4 \ $primary{ } \ $bootable{ } \ method{ format } \ format{ } \ use_filesystem{ } \ filesystem{ ext4 } \ mountpoint{ /boot } . \ 25000 2 29000 ext4 \ method{ format } \ format{ } \ use_filesystem{ } \ filesystem{ ext4 } \ mountpoint{ /usr/local } . \ 3000 2 6000 ext4 \ method{ format } \ format{ } \ use_filesystem{ } \ filesystem{ ext4 } \ mountpoint{ /tmp } . \ 18000 18000 21000 ext4 \ method{ format } \ format{ } \ use_filesystem{ } \ filesystem{ ext4 } \ mountpoint{ / } . \ 1000 2 300% linux-swap \ method{ swap } \ format{ } . \ 1000 1 10 ext4 \ method{ format } \ format{ } \ use_filesystem{ } \ filesystem{ ext4 } \ mountpoint{ /scratch } . d-i partman/confirm_write_new_label boolean true d-i partman/choose_partitionselect Finish partitioning and write changes to disk d-i partman/confirm boolean true d-i partman-partitioning/confirm_copy boolean true d-i partman/confirm_new_label boolean true I think what you are missing is the d-i partman-auto/method string regular line - from the example: # The presently available methods are: regular, lvm and crypto d-i partman-auto/method string regular I also think there's a mistake in your formatting of the partition sizes. The format (as I know it) is 200 2 250 ext4 \ Which is min_size priority max_size I think it is also getting confused about the -1 in your / partition Sean
Re: o/t ipod
Sharepod Free application to transfer music and video files from an iPod/iPod Touch/ iPhone to a PC. Try running it in wine, or use a VM. On Fri, Jan 7, 2011 at 09:17, Thomas H. George li...@tomgeorge.info wrote: On Tue, Dec 28, 2010 at 04:27:16PM +0100, Klistvud wrote: Dne, 27. 12. 2010 18:43:06 je Camaleón napisal(a): rant_and_malicious mode on I still fail to see what people find exciting in Apple devices. Yes, they look nice but they're also even more closed than any MS product :-) /rant_and_malicious mode off It must be their price. In our profit-centered culture, anything overly expensive seems to instantly achieve a magical aura and a high perceived value, be it a rolex, a ferrari, or a high-maintenance lady. Yes, but I must give the devil his due. While I have no intention of using the gadget as an mp3 player - my Sundisk Sansa plays both mp3 and ogg - what the designers have crammed into this little package is truly impressive. Wi-Fi, send and receive email, camera with zoom and the pictures can be emailed to my computer (my cell phone charges for that), motion and position sensors (the Star Walk app shifts the view of the night sky as you point the device at different stars), etc. If it had been my money I would have bought an Android device but I can't look this gift horse in the mouth. Tom George -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20110107151756.ga10...@tomgeorge.info
My Alt keys don't work!
Could someone help me sort out my keyboard configuration, or send me on the right track? I've investigated a little but I really don't know what to do. It's a somewhat tricky configuration. 1. I have two keyboards. The built-in one (it's a laptop), and an external one that I use. Since the keyboards are different no one configuration will work for both. Is it possible to have different configs for different keyboards? 2. Since the built-in keyboard has a stuck left alt key (it presses itself all the time) I had to disable left alt using an Xmodmap file. But this also disables left alt on the external keyboard. Is there a way to disable the key on the built-in only? 3. Currently I've tried to get my single keyboard config working for the external keyboard, but there are problems. Details follow. I apologise for the length of this but, well, it's complicated and I wanted to give as many relevant details as I could. I'm running Debian testing on an OLPC XO-1 via DebXO, a build of Debian for the XO-1. The XO-1 has a slightly unusual keyboard ofcourse, but the DebXO image comes with a usable configuration for it. My keyboard has the 'stuck alt key' problem where the left alt presses itself all the time making the XO unusable, so I used an Xmodmap file to disable left alt and turn the XO's left 'grab' key into an alt instead: remove mod1 = Alt_L keycode 64 = keycode 115 = Alt_L Meta_L add mod1 = Alt_L This worked. Now I actually use the laptop with an external keyboard, currently a UK-layout IBM Model M. I just plugged this keyboard in (using a USB-PS2 adapter) and it worked, aside from various details of course. The layout was wrong, so I had to press to get an @ and so on, and of course the Xmodmap unnecessarily disabled the left alt on the external keyboard as well, although Alt Gr seemed to function as an alt key. When I upgraded from debian stable to testing it asked me various questions about my keyboard configuration and the end result was the Alt Gr on the external keyboard stopped functioning as well, and now I have no alt keys! I went into the Gnome keyboard prefs and set the keyboard to 'Generic 102 key (Intl) PC', I could not find IBM Model M in the list of keyboards so I chose this generic one after counting the number of keys (102). I set the layout to UK. Now all the keys seem to work, they do what is shown on the keys themselves, except: * Neither Alt key functions. I used the program xev to find that Alt on the external keyboard is keycode 64 and Alt Gr is 108. Obviously my Xmodmap file is still disabling keycode 64. In the Gnome keyboard shortcuts config tool Alt is recognised as 0x40 and not seen as a modifier key, Alt Gr is not recognised at all. I tried to use Xmodmap to remap Alt Gr to an alt instead of remapping the XO's 'grab' key as before: `keycode 108 = Alt_L Meta_L` but this doesn't work (Alt Gr still does nothing), so I changed my Xmodmap back to as before. * There is a key in the top-left under Esc which has three labelled functions and I can't use the third one (the pipe character). Maybe cause you have to press Alt to get the third one? * There is a key near the bottom-left which is broken pipe and backslash, this key doesn't function at all. So all in all I can't use Alt, pipe or backslash, which makes things fairly difficult, and I'm out of ideas. Thanks in advance for any pointers. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Call for testing: New PHP 5.3 debian packages
(Please excuse the gratuitous cross-post) Now that PHP 5.3 has been officially released[1], the Debian PHP packaging team would like to announce the availability of PHP 5.3 packages for initial public testing. The packages are currently available for both amd64 and i386 users of testing/unstable, via the experimental release section of the debian packaging archive. To install these packages on your system, add the following line to /etc/apt/sources.list: deb http://ftp.debian.org/debian/ experimental main you should then be able to install these packages with apt-get install -t experimental php5 (and you can replace php5 with a more specific package selection of course) DISCLAIMER: You should not install these packages on a production system, until they have recieved wider testing and review. I have given the packages limited local testing but due to the nature of the 5.3 upgrade it's possible that you may have problems with either the packaging or one of the many changes in this update! As time progresses we may set up an alternate location dedicated for php5.3 related packages, depending on demand, how many additional packages we need to rebuild for testing (all debian packages that build against the php API/ABI need to be updated) and how long we delay the transition to 5.3 in debian unstable. I should emphasize that we don't have plans to transition to PHP 5.3 in debian testing/unstable in the immediate future; at least not until we feel comfortable that the packages and software are reasonably stable and tested. So if you want to see this happen faster the best thing you can do is report to us with your problems (and successes!) using these packages. Please forward any and all feedback/problems to the Debian PHP team's mailing list[2] and if you're convinced that there's a problem, the debian bug tracking system[3] and/or the PHP bug tracking system[4] depending on who you think should get the blame :). Sean Finney (and the rest of the Debian PHP Maintainers) [1] http://www.php.net/archive/2009.php#id2009-06-30-1 [2] pkg-php-ma...@lists.alioth.debian.org [3] reportbug php5 [4] http://bugs.php.net signature.asc Description: Digital signature
Re: prevent writing to unmounted directory
Chris [EMAIL PROTECTED] writes: I want to run a script to rsync local files to a NAS mounted to /mnt/music. Sometimes the NAS is not running, and I want to prevent the script from writing to the mount directory: is there any easy way to prevent this? Umount /mnt/music. Run chattr +i /mnt/music, or, if rsync doesn't run as root, chmod o-w /mnt/music. This doesn't prevent writes to existing files under the mount directory, or to any file in any existing subdirectory of the mount directory. The immutable flag will become unset on /mnt/music when it's mounted, and the permissions and ownership and so on will match those of the root of the filesystem being mounted. Example: /tmp# dd if=/dev/zero of=loopfs.img count=400 400+0 records in 400+0 records out 204800 bytes (205 kB) copied, 0.00501796 s, 40.8 MB/s /tmp# mke2fs -Fq loopfs.img /tmp# mkdir loopdir /tmp# chattr +i loopdir /tmp# touch loopdir/foo touch: cannot touch `loopdir/foo': Permission denied /tmp# lsattr -d loopdir i- loopdir /tmp# mount -o loop loopfs.img loopdir /tmp# touch loopdir/foo /tmp# lsattr -d loopdir -- loopdir -- sean [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: VIM question
On Wednesday 30 April 2008 06:18:27 pm Alex Samad wrote: but I can't change windows with C-PGUP C-PGDN. My first thought You can also use gt and gT. and I am not sure what syntax to use for control-page up is it C-PGUP C-PageUp (and i_C-PageUp or i_CTRL-PageUp). -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Restricting resource usage on a shell server
Hello, I am looking to set up a shell server providing apache, MySQL and mailman as well as standard shell features. For this I am going to need to limit my users usage of server resources so that they don't compromise the usage of others. Particularly, I am looking to limit disc usage across MySQL, mailman and of course normal files, bandwidth usage across ssh, sftp, httpd and anything else (e.g. wget), and memory/process usage to prevent one user hogging the server's capacity - all of this in a clean, low maintenance manner! Yes, it is a lot to ask, but I think Debian can do it, I just don't know how to make it. 1) Disc usage I can setup quotas to limit users to a certain amount of drive space quite easily, but how can I tie this to MySQL usage too? For example, if a user has a 1GB quota and uses 512MB for a database, they should then only be able to use 512MB for their home directory. 2) Bandwidth usage I get the impression from asking around that this is not at all going to be easy. I am thinking that simply limiting httpd and setting up a restrictive firewall to stop users binding their own servers would be an effective method assuming I can trust them not to upload huge files. However, does anyone know of a better way of limiting bandwidth globally? 3) Memory usage In my experience of using limited free shells this is not at all hard to do, I just don't know how. If you are interested in the background: this is to expand http://silentflame.com/ away from just a cPanel-based server to a proper 'geek server' that doesn't spend its valuable ram on hosting cPanel processes. cPanel does most of the above management automatically and I am seeking to replace that - it handles the issues above with MySQL and /home and all forms of traffic in one bandwidth limit. Any advice appreciated so that this project can go ahead. Thanks, Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Restricting resource usage on a shell server
On Sat, Mar 15, 2008 at 4:32 PM, Raj Kiran Grandhi [EMAIL PROTECTED] wrote: Sean Whitton wrote: Hello, I am looking to set up a shell server providing apache, MySQL and mailman as well as standard shell features. For this I am going to need to limit my users usage of server resources so that they don't compromise the usage of others. Particularly, I am looking to limit disc usage across MySQL, mailman and of course normal files, bandwidth usage across ssh, sftp, httpd and anything else (e.g. wget), and memory/process usage to prevent one user hogging the server's capacity - all of this in a clean, low maintenance manner! Yes, it is a lot to ask, but I think Debian can do it, I just don't know how to make it. 1) Disc usage I can setup quotas to limit users to a certain amount of drive space quite easily, but how can I tie this to MySQL usage too? For example, if a user has a 1GB quota and uses 512MB for a database, they should then only be able to use 512MB for their home directory. Are the databases and the home directories on the same partition? The mysql database files are owned my the 'mysql' user on debian. So, it might not be possible to implement a quota system that includes the database. They will be on the same partition :( I believe there are however scripts out there to handle this kind of thing. 2) Bandwidth usage I get the impression from asking around that this is not at all going to be easy. I am thinking that simply limiting httpd and setting up a restrictive firewall to stop users binding their own servers would be an effective method assuming I can trust them not to upload huge files. However, does anyone know of a better way of limiting bandwidth globally? Perhaps the iproute package would suit your needs. The following rules provide some basic limiting. I got them from some page. # tc qdisc add dev $DEV handle : ingress and # tc filter add dev $DEV parent : protocol ip prio 50 u32 match ip \ src 0.0.0.0/0 police rate ${RATE}kbit burst 10k drop flowid :1 That makes sense but I want to set a limit in GB per month, and then allow as fast transfer as required by the user. Is this possible with that package? Thanks, Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Firewall suggestions?
SafeSquid - Content Filtering Internet Proxy (http:// www.safesquid.com/) ? (No, it is not built on Squid-cache) Proxy + cache + application layer firewall + built-in connectivity to ClamAV daemon Description - http://www.safesquid.com/html/portal.php?page=105 Using ClamAV - http://www.safesquid.com/html/viewtopic.php?t=2237 Download 20 user free version - http://www.safesquid.com/html/portal.php?page=126 Better to install and manage a single app. (has a browser based GUI) :D -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: jEdit - ia32-sun-java5-bin_1.5.0-10-3_ia64 (32-bit/etch)?
Just a follow-up in case anyone else has this issue. By removing 'sablevm', jedit works now. Cheers! -sod Sean O'Donnell wrote: Hi All, I'm trying to get jEdit to run on Debian (etch) 32-bit, but am having some issues. I got it installed on my 64-bit system just fine, but this was only accomplished on the 64-bit system because I was able to install the 'ia32-sun-java5-bin_1.5.0-10-3_ia64.deb' package (along with the other required java packages). I'm unable to install this particular package on a 32-bit system, nor can I find a 32-bit version. I've installed all other required java packages that I needed to install on my 64-bit system, but it seems I still need the 'ia32-sun-java5-bin' package to get it going. When I run jEdit, I receive the following errors: $ jedit Warning: -mx32m option NOT RECOGNIZED by java-sablevm. A not recognized option will be just passed to SableVM. Note that we don't know if we should expect an argument after it. It almost _surely_ will result in an errors when the param is followed by an argument. Refer to 'man java-sablevm' and 'man sablevm'. Unknown option: -mx32m Any suggestions would be much appreciated! -sod -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Tuning access to the internet
On Dec 18, 7:10 pm, Pol [EMAIL PROTECTED] wrote: How to tune access to the internet, to allow only certain users, or to limit access to certain hours of the day? SafeSquid - Content Filtering Proxy, can do that and more. It allows you to decide who can access what, when and how much on the net. Just install SafeSquid and either create usernames and passwords to allow only authenticated access, or specify what IPs are allowed access. See http://www.safesquid.com/html/portal.php?page=22 for creating profiles and time based rules.
jEdit - ia32-sun-java5-bin_1.5.0-10-3_ia64 (32-bit/etch)?
Hi All, I'm trying to get jEdit to run on Debian (etch) 32-bit, but am having some issues. I got it installed on my 64-bit system just fine, but this was only accomplished on the 64-bit system because I was able to install the 'ia32-sun-java5-bin_1.5.0-10-3_ia64.deb' package (along with the other required java packages). I'm unable to install this particular package on a 32-bit system, nor can I find a 32-bit version. I've installed all other required java packages that I needed to install on my 64-bit system, but it seems I still need the 'ia32-sun-java5-bin' package to get it going. When I run jEdit, I receive the following errors: $ jedit Warning: -mx32m option NOT RECOGNIZED by java-sablevm. A not recognized option will be just passed to SableVM. Note that we don't know if we should expect an argument after it. It almost _surely_ will result in an errors when the param is followed by an argument. Refer to 'man java-sablevm' and 'man sablevm'. Unknown option: -mx32m Any suggestions would be much appreciated! -sod -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Configuraci'on de Squid
Even I don't know much about Squid. I use SafeSquid and forwarding in SafeSquid is quite simple - http://www.safesquid.com/html/portal.php?page=37 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
ALSA problems after kernel update
Hello everyone. I have a question regarding ALSA and the kernel. I recently updated my Debian system's kernel from 2.6.18.4 to 2.6.22.2. When I began using my new kernel, I noticed that anything that worked with ALSA locked up (mplayer, gnome sound, etc). I used module-assistant to build new alsa modules (from alsa-source) for my new kernel, and after the new package was installed, sound began working again. However, after rebooting, I had the same problem I did before: everything that used alsa had problems. If I ran /etc/init.d/alsa reload (or force-reload), then sound worked again. I think the system might be trying to load the old modules at startup. Is there a way to fix this? Regards, Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Regarding tar and split
Paul E Condon pecondon at mesanetworks.net writes: The difference is that afio compresses each input file individually, so if there is a read/write error, only one file is lost from the archive. (Actually, there are a lot more differences - to start with the options are totally different syntax and symantics.) Thanks everyone for all of your help. I have one final question: some people have brought up the strength of programs like afio that compress files individually to protect against corruption. Most of the things I archive are large image or movie files (which typically don't compress well). I read through most of both tar's and afio's man pages, and afio seems to have some interesting features (like the ability to seek to blocks in an archive). If I am not compressing the archive, does afio and/or cpio still have benefits that make it more appealing than tar? Regards, Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Regarding tar and split
Douglas A. Tutty dtutty at porchlight.ca writes: Tar archive isn't designed for this, since its designed for sequential devices. Have you considered using another archive format? Perhaps iso? You can split and join iso files, mount them with loop mount, compress, burn, whatever. Doug. If I ignored the indexing issue (since most of my work with tar is large, non-incremental backups where I typically restore the entire contents - it would be nice if there was indexing, but is not a huge problem), should I still use something other than tar? Right now, I use it to backup large files over multiple media, and tar's multipart feature allows me to do this without having to duplicate all of the files on my hard disk (though I have enough room to do this if I needed to). But if I were to use split instead of tar -M, and I don't need the archives indexed, should I still switch to another archive format (cpio, ar, iso)? Also, if I give tar the --posix flag with -M, doesn't that make it so the archive does not use the gnu extensions and follows the standard format? Thanks everyone for all of your help, Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
new beta packages for cacti/spine(former cacti-cactid) available
hello debian-user, for those of you who use cacti I've prepared some packages of the beta4 release of cacti/spine 0.8.7 (for spine, i386 and amd64 builds), which are now available for general testing and feedback. The easiest way to upgrade is to put: deb http://people.debian.org/~seanius/cacti/beta ./ into your /etc/apt/sources.list, and run apt-get update for users who don't already have cacti installed, they can then do: apt-get install cacti mysql-server and to install spine: apt-get install spine for users who have cacti (but not cacti-cactid) already installed: apt-get upgrade for users who have cacti and cacti-cactid installed: apt-get dist-upgrade is needed, to transition from cacti-cactid to the new spine package. i'll make a best effort to keep this repository up to date with any future releases between now and the official 0.8.7 release, and any feedback you might have about problems/errors/etc is welcome. sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Regarding tar and split
Hello. I frequently work with large tar archives that often need to be split into smaller pieces. Up until now, I've used tar -m to create multi-part archives. I recently read that I can use split to do the same thing. Is there an advantage or disadvantage to using split over tar -m? Also, is there some way to index a large tar file, so if I want to extract a file at the end of a large archive, tar doesn't have to seek through the entire archive to get the file? Thank you for any help. Regards, Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
dpkg not changing files in /boot after kernel upgrade
Hello. I have been using the 2.6.18-4-powerpc kernel on my system for a while now because, when the 2.6.21 kernel came out, it introduced a few bugs that significantly diminished the performance of the system. I wanted to see if the newer 2.6.21 still has this problem of if it has been repaired. I opened aptitude and installed linux-image-2.6-powerpc, which also installed linux-image-2.6.21-2-powerpc. The packages were apparently installed successfully, but when I rebooted, it booted into the old kernel. I looked at the /boot directory, and none of the links had changed. Here's the output from when I reconfigured the kernel packages: Running depmod. Finding valid ramdisk creators. Using mkinitramfs-kpkg to build the ramdisk. Not updating initrd symbolic links since we are being updated/reinstalled (2.6.21-6 was configured last, according to dpkg) Not updating image symbolic links since we are being updated/reinstalled (2.6.21-6 was configured last, according to dpkg) Examining /etc/kernel/postinst.d. run-parts: executing /etc/kernel/postinst.d/mkvmlinuz Why is it not updating the links - I had a version of 2.6.21, but I removed it a long time ago. Is there a way to get dpkg to realize that it does need to modify the symbolic links? Thank you for any help, Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: http URL filter
I am looking for a http URL filter for the gateway on my LANs, the basic requirement is: If the URL is in the blacklist, deny it and reply the user a page with No, we cannot let you pass. squid (transparent proxy) can do this job, but sometimes I do not want to configure a transparent proxy on the gateway. Hello Deephay, Have a look at SafeSquid ( http://freshmeat.net/projects/safesquid/). It is a content filteing proxy and has a browser based GUI interface. It allows you to give a 'profiled' internet access to users. The SafeSquid Composite Edition is compatible with URL blacklist, and also has a feature 'Customizable Templates', which can be used to display customized html pages for deny events. It also has many advanced features for content filtering. Cheers
Re: Iceweasel Display Problem
Hugo Vanwoerkom hvw59601 at care2.com writes: I just went to http://www.mplayerhq.hu/design7/news.html and it looks fine to me. A blackish background with light grey-brown letters. Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.3) Gecko/20070310 Iceweasel/2.0.0.3 (Debian-2.0.0.3-2) on a current Sid. Same here. Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.1) Gecko/20061205 Iceweasel/2.0.0.1 (Debian-2.0.0.1+dfsg-2) on a slightly outdated (TM) Sid. Hugo Hm. Is it possible that this is not an iceweasel problem and instead has something to do with my font files, gtk, the fact I use ppc, or something like that? I'm fairly sure that it was working before all of the gtk updates were migrated into testing, but I could be mistaken and it could be just a considence. I also recently deleted my .gtk* and .gnome* files, but again, I'm not sure if this is related. Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Iceweasel Display Problem
Create a virgin account, log in from it and see if you still have the same problem. I created a new account, but Iceweasel had the same problem. Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Iceweasel Display Problem
Ron Johnson ron.l.johnson at cox.net writes: On 06/14/07 20:46, Sean Zimmermann wrote: Create a virgin account, log in from it and see if you still have the same problem. I created a new account, but Iceweasel had the same problem. Hmmm. Wish I could help you more. Iceweasel is working. I have no idea why. After the xorg driver got updated, I had to reset a few things in my xorg.conf file, so I decided to simply run dpkg-reconfigure -phigh xserver-xorg and then add the modeline I needed. After adjusting the settings for my old crt monitor so the image was centered, I opened Iceweasel out of habit and it was working. Thank you for all of your help. Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Iceweasel Display Problem
Here's what Iceweasel says on my about: page: Mozilla/5.0 (X11; U; Linux ppc; en-US; rv:1.8.1.3) Gecko/2007031001 Iceweasel/2.0.0.3 (Debian-2.0.0.3-1) I'm running this on a ppc system; could that have something to do with the problem? Sean Zimmermann -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Last log and noshell
Hi guys When using last log, the users that use noshell appear to have never logged on. How do you configure noshell to show whether or not a user using noshell has logged on or not. Thanks -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
UPS software on Debian
Hi People I got a Meissner Netsafe 600 UPS that im trying to install on a Debian mail server, however the software it comes with looks to be only for the Red Hat/Fedora distros. Does anyone know of any good generic for Debian that I can I can use sort this out. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Shutdown my Laptop? Why should I?
David R. Litwin wrote: I have a year old Toshiba Intel Mobil P4 laptop using Sid. I recently downloaded two large files via BitTorrent. As I wanted to have them as quickly as I could, I decided to leave my laptop on until they were fully downloaded, rebooting only for upgrades. I noticed no real difference in performance (maybe Azureus was hogging a bit more memory after a few days). The question is this: Why should I ever turn off my laptop on a normal occasion (normal being every-day, standard, stationary usage)? If I don't want it on, I can suspend it in some way: Waking-up is faster than booting-up. My laptops live until a battery dies on the train (-: Seriously though, no good reason to bounce a Linux box unless a) horrible app b) kernel mishap c) kernel upgrade. That said, most laptop batteries degrade performance significantly if left plugged into the mains 24/7. So only plug in for refills. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
upgrade screwed up my network.
Earlier tonight, I ran an upgrade with aptitude, and my network configuration started acting weird. Previously, I had set eth0 up to use a static IP of 192.168.15.10 with the household router's IP of 192.168.15.1 as the gateway and nameserver. This had been working fine for months. After the upgrade today, ifconfig lists the following for eth0: eth0 Link encap:Ethernet HWaddr 00:04:5A:88:A5:54 inet addr:169.254.246.208 Bcast:0.0.0.0 Mask:255.255.0.0 inet6 addr: fe80::204:5aff:fe88:a554/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:925 errors:0 dropped:0 overruns:0 frame:0 TX packets:1071 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:220593 (215.4 KiB) TX bytes:82583 (80.6 KiB) Interrupt:11 Base address:0xdc00 Web browsing and e-mail work fine, but accessign other systems on the LAN does not. If I run /etc/init.d/networking restart the original static IP of 192.168.15.1 gets set and LAN access works, but web browsing and e-mail do not. Can anyone tell me what is going on, and how do I fix it? Thank you, Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Silicon Image 3114 and Seagate?
On Tue, Dec 20, 2005 at 08:59:25AM -0200, Henrique de Moraes Holschuh wrote: On Mon, 19 Dec 2005, Roberto Sanchez wrote: You did not specify whether I should be looking for a drive with NCQ or without NCQ. :-) Look for information on the SIL 3114. I don't own one, so I wouldn't know. I know that, for my ICH5R boards, I need SATA 150 because of chipset problems (I searched and read the errata datasheet from Intel), and NCQ won't make a difference at all (because the chip doesn't implement TCQ or NCQ). http://www.newegg.com/Product/Product.asp?Item=N82E16856152018 http://www.newegg.com/Product/Product.asp?Item=N82E16822148065 Do you think that I may run into problems with these? No idea. As I said, do the homework in google :-( I just pointed it out to you that a Barracuda is not the same as other Barracuda unless you remember to also ask the model. The ones in that blacklist in the kernel are ancient drives as far as these things go :P So that blacklist is not worth much for making a decision. I'd get one of the newer 7200.8 (NCQ), there is no reason to believe the 7200.9 would give you any advantage, and there might be compatibility problems, and the NCQ versions of the 7200.8 have newer firmware _and_ are newer drives so you get more warranty out of them :P Why don't you test the drives in the platform first, before buying them? Just for a datapoint, I'm using two of the ST3250823AS models (the cuda 7200.8s that do support NCQ) on a 3112, and they work beautifully. IIRC the 3114 is only different from the 3112 in that it has four ports instead of two (correct me if I'm wrong of course) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: RAR under linux: any alternative?
On Sun, Dec 11, 2005 at 08:00:45PM -0800, Steve Lamb wrote: Sean Davis wrote: split(1). Been around since ATT Version 6. Now verify each portion has no errors in it with split. Oh, wait, ya can't. That's because it is just a rough split and not an actual archive which can be verified. That's what checksums are for. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: RAR under linux: any alternative?
On Sun, Dec 11, 2005 at 05:59:41PM -0600, Gnu-Raiz wrote: On 11:49, Sun 11 Dec 05, John Hasler wrote: Gnu_Raiz writes: This is one program that I believe is worth buying the license for. This is especially true if you have any windows machine's around. If you use Usenet for any amount of time you will find that this program is a must have. Interesting. I've been on Usenet for twenty years and I have not felt any need for that program. It's kind of like needing Lame, or Mplayer nowadays, yes it's non free, but you really do need it. Mplayer is licensed under the GPL. -- John Hasler Luke, Luke come to the dark side Luke! I think it is strange that when a person mentions Usenet all they think about is the text groups. It's the other left folks, the alt.binaries side that use's rar files. Yes their is plenty of uses without copyright infringement. If your into video and working on a project and someone asks for a sample if you use zip, or tar they will probably laugh at you. How else are you going to get a uniform file size of say 15mb each in your sample if you don't use rar? split(1). Been around since ATT Version 6. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Root's Mail
Hi, I just renamed the user that root's mail was being redirected to on a fresh install. I assume I can change it to the new username in the exim config file - where is this? Or am I wrong? Do I need to do something else? Thanks. -- [ xyrael.net -- silentflame.com ] -- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
POP SMTP
Hi, I'm a newbie and I need to set up a complete mail server, POP and SMTP, on a Debian box. Help! Thanks! Note: I'm not subscribed, so please don't reply to the list! --xyrael.net-- binThsak91DfL.bin Description: PGP Public Key
Re: Newbie Problems!
Thanks very much. I have been thinking about it though. I have a DNS server already running on silentflame.com. So I edited the Host File (using WHM), and added a simple a record underneath for a subdomain. Will this work? Thanks. Quoting ke6isf [EMAIL PROTECTED]: On Thu, 22 Sep 2005, Sean Whitton wrote: 2) I want a domain to point to the server. During installation I selected DNS server, and I need to know how to set this up. A link to a tutorial would be appreciated. Like another responder said, assuming you have a domain and a static IP, check around. dyndns is pretty good for a free service. Generally speaking, if you ever need to run your own DNS, you'll know - and this isn't quite one of those times. 3) What do I need to do to set up an ftp server? proftpd seems to Just Work with minimal to no tweaking. =Dennis Carr -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] bindN64pcE6dh.bin Description: PGP Public Key
Newbie Hostname Change
Hi, My friend installed Debian on his computer and I'm supposed to be admining it as a server. THings are going well (except I keep mistyping shutdown and killing the server), but there is one problem: the hostname. He typed Ask4 instead of ask4, which is a problem. I assume I can change this with the hostname command, but I want to be sure there arn't any additional steps beyond this. Thanks, Sean --xyrael.net-- binQ10YXk5xy4.bin Description: PGP Public Key
Re: Newbie Hostname Change
Interesting. I have just tried it with base-config, and it appears to have worked. But, just in case, is there anywhere else I need to change it? Thanks. --xyrael.net-- Quoting Bill Marcum [EMAIL PROTECTED]: On Fri, Sep 23, 2005 at 04:50:26PM +0100, Sean Whitton wrote: Hi, My friend installed Debian on his computer and I'm supposed to be admining it as a server. THings are going well (except I keep mistyping shutdown and killing the server), but there is one problem: the hostname. He typed Ask4 instead of ask4, which is a problem. I assume I can change this with the hostname command, but I want to be sure there arn't any additional steps beyond this. The hostname command will only change it temporarily. For a permanent change, edit /etc/hostname. -- EARTH smog | bricks AIR -- mud -- FIRE soda water | tequila WATER -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] binEwgeYT0JXp.bin Description: PGP Public Key
MOTD
How does one set up MOTD? A cat of /etc/motd? Thanks. --xyrael.net-- binBd6vw8gUsM.bin Description: PGP Public Key
SSH
Hi Debian Community, A total newbie question, but... Is there any need to enable SSH, or will it just work out-of-the-box? Thanks! binakQtKFBaMf.bin Description: PGP Public Key
Newbie Problems!
Hi all, I would be grateful for any help on the following problems. Please indicate what you are replying to in your response! Thanks. 1) I installed apache using wajig. I want to create a link between ~/public_html and the webspace for the user at ip/~user. How do I do this please? 2) I want a domain to point to the server. During installation I selected DNS server, and I need to know how to set this up. A link to a tutorial would be appreciated. 3) What do I need to do to set up an ftp server? Thanks, Sean --xyrael.net-- binvg87RvRstr.bin Description: PGP Public Key
two scary syslog kernel messages
I'm running Debian Testing with the following kernel: Linux marvin 2.6.11-1-686-smp #1 SMP Mon Jun 20 20:18:45 MDT 2005 i686 GNU/Linux My system is a 2.8Ghz Intel P4 with hyper threading enabled, 2GB RAM, and 2 SATA drives running in software RAID-1 (everything is mirrored including the boot and swap partitions). This system is reasonably new and has been in production for about a month. Up until about 3 days ago there were no problems - then suddenly mysql mysteriously corrupted a table. Since mysql has done that sort of thing to me in the past (on different hardware), I didn't think too much of it and was able to restore from backup without any problem. It bothered me as we had just purchased new hardware, but I put it to the back of my mind at the time. This morning, however, I found the following two scary snippets in my syslog: Sep 20 03:46:06 marvin kernel: [ cut here ] Sep 20 03:46:06 marvin kernel: kernel BUG at mm/rmap.c:482! Sep 20 03:46:06 marvin kernel: invalid operand: [#1] Sep 20 03:46:06 marvin kernel: SMP Sep 20 03:46:06 marvin kernel: Modules linked in: ipv6 i2c_i801 i2c_core capability commoncap ext3 jbd mbcache evdev pcspkr hw_random shpchp pci_hotplug intel_agp intel_mch_agp agpgart psmouse genrtc raid5 xor raid0 dm_mod e100 mii e1000 yenta_socket rsrc_nonstatic pcmcia_core sd_m od ide_cd cdrom ide_disk ide_generic pdc202xx_new aec62xx alim15x3 amd74xx atiixp cmd64x cs5520 cs5530 cy82c693 generic hpt34x ns87415 opti62 1 pdc202xx_old rz1000 sc1200 serverworks siimage sis5513 slc90e66 triflex trm290 via82cxxx floppy usb_storage piix ide_core vga16fb vgastate usbserial usbhid usbkbd ehci_hcd uhci_hcd usbcore thermal processor fan ata_piix libata scsi_mod raid1 md unix fbcon font bitblit vesafb cfbc opyarea cfbimgblt cfbfillrect Sep 20 03:46:06 marvin kernel: CPU:0 Sep 20 03:46:06 marvin kernel: EIP:0060:[page_remove_rmap+57/80] Not tainted VLI Sep 20 03:46:06 marvin kernel: EFLAGS: 00010286 (2.6.11-1-686-smp) Sep 20 03:46:06 marvin kernel: EIP is at page_remove_rmap+0x39/0x50 Sep 20 03:46:06 marvin kernel: eax: ebx: 2000 ecx: c181cec0 edx: c181cec0 Sep 20 03:46:06 marvin kernel: esi: cfcfa00c edi: c181cec0 ebp: 3000 esp: d3349d54 Sep 20 03:46:06 marvin kernel: ds: 007b es: 007b ss: 0068 Sep 20 03:46:06 marvin kernel: Process java (pid: 20194, threadinfo=d3348000 task=db7a6a60) Sep 20 03:46:06 marvin kernel: Stack: b5404000 2000 c0149805 c181cec0 c02f2f80 d3349d8c 40e765e9 Sep 20 03:46:06 marvin kernel:b5801000 f536eb58 b5404000 c01499e3 c200c3a0 f536eb54 b5401000 Sep 20 03:46:06 marvin kernel:3000 b5401000 f536eb58 b5404000 c0149a43 c200c3a0 Sep 20 03:46:06 marvin kernel: Call Trace: Sep 20 03:46:06 marvin kernel: [zap_pte_range+341/736] zap_pte_range+0x155/0x2e0 Sep 20 03:46:06 marvin kernel: [zap_pmd_range+83/112] zap_pmd_range+0x53/0x70 Sep 20 03:46:06 marvin kernel: [zap_pud_range+67/96] zap_pud_range+0x43/0x60 Sep 20 03:46:06 marvin kernel: [unmap_page_range+126/160] unmap_page_range+0x7e/0xa0 Sep 20 03:46:06 marvin kernel: [unmap_vmas+246/592] unmap_vmas+0xf6/0x250 Sep 20 03:46:06 marvin kernel: [exit_mmap+159/400] exit_mmap+0x9f/0x190 Sep 20 03:46:06 marvin kernel: [mmput+56/160] mmput+0x38/0xa0 Sep 20 03:46:06 marvin kernel: [do_exit+175/832] do_exit+0xaf/0x340 Sep 20 03:46:06 marvin kernel: [do_IRQ+30/48] do_IRQ+0x1e/0x30 Sep 20 03:46:06 marvin kernel: [common_interrupt+26/32] common_interrupt+0x1a/0x20 Sep 20 03:46:06 marvin kernel: [do_group_exit+64/176] do_group_exit+0x40/0xb0 Sep 20 03:46:06 marvin kernel: [get_signal_to_deliver+528/800] get_signal_to_deliver+0x210/0x320 Sep 20 03:46:06 marvin kernel: [do_signal+155/304] do_signal+0x9b/0x130 Sep 20 03:46:06 marvin kernel: [del_singleshot_timer_sync+19/64] del_singleshot_timer_sync+0x13/0x40 Sep 20 03:46:06 marvin kernel: [schedule_timeout+118/192] schedule_timeout+0x76/0xc0 Sep 20 03:46:06 marvin kernel: [process_timeout+0/16] process_timeout+0x0/0x10 Sep 20 03:46:06 marvin kernel: [sys_nanosleep+222/368] sys_nanosleep+0xde/0x170 Sep 20 03:46:06 marvin kernel: [do_notify_resume+55/60] do_notify_resume+0x37/0x3c Sep 20 03:46:06 marvin kernel: [work_notifysig+19/21] work_notifysig+0x13/0x15 Sep 20 03:46:06 marvin kernel: Code: f0 83 42 08 ff 0f 98 c0 84 c0 74 1b 8b 42 08 40 78 19 c7 04 24 10 00 00 00 b8 ff ff ff ff 89 44 24 04 e8 bb f8 fe ff 83 c4 08 c3 0f 0b e2 01 08 23 2c c0 eb dd 0f 0b df 01 08 23 2c c0 eb c1 8d And then later: Sep 20 06:26:15 marvin kernel: Bad page state at prep_new_page (in process 'mysqld', page c181cec0) Sep 20 06:26:15 marvin kernel: flags:0x4114 mapping: mapcount:-1 count:0 Sep 20 06:26:15 marvin kernel: Backtrace: Sep 20 06:26:15 marvin kernel: [bad_page+117/176] bad_page+0x75/0xb0 Sep 20 06:26:15 marvin kernel: [prep_new_page+64/112] prep_new_page+0x40/0x70 Sep 20 06:26:15
Re: two scary syslog kernel messages
On 2005-09-20 14:30:10 -0500, Alejandro Bonilla [EMAIL PROTECTED] said: I'm running Debian Testing with the following kernel: Linux marvin 2.6.11-1-686-smp #1 SMP Mon Jun 20 20:18:45 MDT 2005 i686 GNU/Linux My system is a 2.8Ghz Intel P4 with hyper threading enabled, 2GB RAM, and 2 SATA drives running in software RAID-1 (everything is mirrored including the boot and swap partitions). Well, try another kernel and see if the problems is still there. 2.6.14-rc2 has only a lot of fixes and clean ups to become the new more stable kernel, maybe that could help you? .Alejandro Thanks for the suggestion. I was kind of hoping someone would know if these problems were fixed, though. :-) I assume that kernel is still in the unstable branch? l8r Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Tips and Tricks for Dial-Up Internet Access?
On Tue, Aug 30, 2005 at 10:21:34AM +0200, Kai Grossjohann wrote: Basajaun [EMAIL PROTECTED] writes: One question I would like to make myself (I mean... not _to_ myself, hehehe) is: how does one get the modem not to produce its annoying noises with pon? There is an AT command you can send to the modem to tell it about the noise. I believe the options are: no noise, noise until the connection is established, and noise all the time. You just need to include that command in your dialstring. I forgot the exact command, though, but googling for the AT/Hayes command set should find it quickly enough. I believe the command you're thinking of is ATW0. ATW1 is noise when connecting, and ATW2 is noise all the time (I've used that when on a dirty phone line with lots of interference, but eventually it got so annoying that I just started going with auto-reconnect.) (Note that I'm not positive: it's been years since I've used a dialup connection. I am pretty sure that it's ATW[n] though. YMMV) -Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Default alsa card
I'm using ALSA (w/ a 2.6 kernel) and I have two sound cards first being a C-Media CM8738 and second being a Creative Labs SB Live!. I want the SB Live! to be my primary card, but despite choosing emu10k1 (the SB Live! driver) in alsaconf, Debian (on bootup) still initializes the CM8738 card first thus making it my primary. I don't want to disable the CM8738 card, I just want it to be secondary. Thank you. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
easiest way to upgrade woody to sarge?
I've got a Debian Woody system that's been running decently for over a month now, and would like to update it to Sarge. I know it's been covered before, but is there an authoritative document on updating? I can only access the box remotely - it's hosted at the datacenter at which I work, and I don't typically have time to mess with it at work, although I could hook up a monitor/keyboard if I hosed it badly enough - so I'm wondering if there is a procedure known to work on remote servers without much trouble. The hardware is nothing exotic; Athlon XP2200+, 1GB ram, 80GB ATA100 HD. TIA, -Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: root compromise on debian woody
On Thu, May 26, 2005 at 07:55:50PM -0700, Alvin Oga wrote: On Thu, 26 May 2005, Roberto C. Sanchez wrote: On Thu, May 26, 2005 at 06:41:18PM -0700, Alvin Oga wrote: CAN-2005-1263 [Linux kernel ELF core dump privilege escalation] - kernel-source-2.6.11 2.6.11 2.6.11-4 - kernel-source-2.6.8 2.6.8-16 - kernel-source-2.4.27 2.4.27-10 always use the latest kernel ... from kernel.org ... and similarly with other important binaries from their respective originating site mta, apache, kernel, glib, make/gcc, bash, endless list Sorry, but that is horrible advice. For every app you get directly from upstream, you become directly responsible for supporting security issues. I understand that even if you use the Debian packages, you are still ultimately responsible. Not only that, but the Debian Security Team does an excellent job given the resources and situation. Woody has versions of software that were no longer support upstream when Woody shipped. That makes security support really difficult, but that doesn't mean that someone should run out and install everything from source. That sort of defeatst the purpose of a distro. sounds like all the same identical arguments can also be used for using the originating sources instead of *.deb and the lag time between patches is up to the debian security team or *you/me* ... ones preferences to depend on *.debs should NOT make it better or worst than using *.tgz files released from the original sources i prefer to have tighter and finer controls than depend on old packages I agree. None of the packages in Woody are up to date unless you count up-to-dateness as within five years of the last released version. I can tolerate the Debian environment, but when they can't decide whether or not to actually release Sarge, and keep touting Woody as stable when even a fully-updated Woody still has a crappy kernel* ... I start thinking about de-racking my server, backing it up, and going BSD. *: Linux LOVES to swap. I swap all the time on my 1.8ghz Athlon XP with 1GB ram. However, my NetBSD machine with the same amount of ram running at the same frequency NEVER swaps, due to the ability to tune the VM, and the better VM (UVM) in general. The NetBSD server almost always has at least twice if not three times as much going on (+ KDE3.4) than the Linux machine. Yet still never swaps or lags. Wish I could say that for Debian Woody, but I can't. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: root compromise on debian woody
On Fri, May 27, 2005 at 10:43:11AM -0400, Carl Fink wrote: On Fri, May 27, 2005 at 07:00:56AM -0400, Sean Davis wrote: *: Linux LOVES to swap. I swap all the time on my 1.8ghz Athlon XP with 1GB ram. However, my NetBSD machine with the same amount of ram running at the same frequency NEVER swaps, due to the ability to tune the VM, and the better VM (UVM) in general. The NetBSD server almost always has at least twice if not three times as much going on (+ KDE3.4) than the Linux machine. Yet still never swaps or lags. Wish I could say that for Debian Woody, but I can't. Linux swaps aggressively, even when unnecessary in the short term on purpose, so RAM containing the swapped data or executable is available if a new task arises. If the swapped stuff is called for, it's used from RAM and no time is lost. no time is lost... you have infinite-transfer-speed zero-latency drives, or what? I can't be the only one who's noticed that when machines start swapping, they start getting slower. Or the only one to connect the two, for that matter. If there is enough RAM for the current workload, there is no reason to swap. Period. Swapping when it's not needed is a ridiculous waste of CPU time and disk I/O. If I understand your argument correctly, an accurate analogy would be leaving your car running 24/7 just so that you don't have to start it the next time you want to drive somewhere. Would you do that? no. -Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: how to determine WAN IP address from behind a NAT router?
On Thu, May 05, 2005 at 07:17:38PM -0400, Brendan wrote: /sbin/ifconfig eth0 | grep 'inet add' | awk '{print $2}' |cut -d ' ' -f 12 | cut -d: -f 2 or, more simply, /sbin/ifconfig eth0 | awk -F: '/inet/ {print $2}'|sed s/'[[:space:]].*'// but.. that won't tell you the WAN address if you're on a machine behind a NAT router. just your LAN address. -Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: how to determine WAN IP address from behind a NAT router?
On Thu, May 05, 2005 at 07:54:42PM -0400, Brendan wrote: On Thursday 05 May 2005 07:33 pm, Sean Davis wrote: On Thu, May 05, 2005 at 07:17:38PM -0400, Brendan wrote: /sbin/ifconfig eth0 | grep 'inet add' | awk '{print $2}' |cut -d ' ' -f 12 | cut -d: -f 2 or, more simply, /sbin/ifconfig eth0 | awk -F: '/inet/ {print $2}'|sed s/'[[:space:]].*'// but.. that won't tell you the WAN address if you're on a machine behind a NAT router. just your LAN address. I *am* the NAT router. ;-) Oh. Um. Yeah. Nevermind :) -Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: kernel2.6 I cannot login
Hello Massa Some questions; What kind of keyboard and mouse are you using? Can you send the list a copy of your XF86Config-4? Is the keyboard working fine when not using X Windows under 2.6? On Tuesday 04 Jan 2005 11:26 am, Massa Takeuti wrote: Hello I'm in despair. since 3 weeks, I'm waiting some good advice in some Debian forums but unfortunately I've got nothing helpful yet... I already depenced more than a hundred hours for this problem. In vain. I compiled 2.6.9 (from source made by Debian). I get installation successful message. it boots. I see gdm login screen. But I cannnot login. I cannot move my mouce. Keyboard doesn't work. My system (kernel 2.4 works since 1 year) : intel P4 mother MSI neo2 with intel 82865 chipset matrox G450 videocard. In my syslog, I don't find a line marked as ERROR or WARNING. In xf86log, I find these elements : 1 (--) MGA(0): BIOS at 0xF5DC (II) Truncating PCI BIOS Length to 36864 (--) MGA(0): Video BIOS info block at offset 0x07CE0 (WW) MGA(0): Video BIOS info block not detected! (II) MGA(0): MGABios.RamdacType = 0x0 2 many lines like that : (II) MGA(0): Not using default mode 640x350 (vrefresh out of range) (II) MGA(0): Not using default mode 320x175 (bad mode clock/interlace/doublescan) (II) MGA(0): Not using default mode 640x400 (vrefresh out of range) (II) MGA(0): Not using default mode 320x200 (bad mode clock/interlace/doublescan) (II) MGA(0): Not using default mode 720x400 (vrefresh out of range) (II) MGA(0): Not using default mode 360x200 (vrefresh out of range) (II) MGA(0): Not using default mode 320x240 (bad mode clock/interlace/doublescan) and especially : (WW) (1280x960,gamen) mode clock 108MHz exceeds DDC maximum 80MH 3 drmOpenDevice: minor is 0 drmOpenDevice: node name is /dev/dri/card0 drmOpenDevice: open result is -1, (Unknown error 999) drmOpenDevice: open result is -1, (Unknown error 999) drmOpenDevice: Open failed drmOpenDevice: minor is 0 drmOpenDevice: node name is /dev/dri/card0 drmOpenDevice: open result is -1, (Unknown error 999) drmOpenDevice: open result is -1, (Unknown error 999) drmOpenDevice: Open failed drmOpenDevice: minor is 0 drmOpenDevice: node name is /dev/dri/card0 drmOpenDevice: open result is 5, (OK) drmGetBusid returned '' 4 Warning: font renderer for .pcf already registered at priority 0 Warning: font renderer for .pcf.Z already registered at priority 0 Warning: font renderer for .pcf.gz already registered at priority 0 Warning: font renderer for .snf already registered at priority 0 Warning: font renderer for .snf.Z already registered at priority 0 Warning: font renderer for .snf.gz already registered at priority 0 Warning: font renderer for .bdf already registered at priority 0 Warning: font renderer for .bdf.Z already registered at priority 0 Warning: font renderer for .bdf.gz already registered at priority 0 Warning: font renderer for .pmf already registered at priority 0 Regards Tianlou -- Using Opera's revolutionary e-mail client: http://www.opera.com/m2/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Error from X
Whenever I try to start xfontsel, the program pops up then soon after closes with these errors: [EMAIL PROTECTED]:~$ xfontsel X Error of failed request: BadValue (integer parameter out of range for operation) Major opcode of failed request: 45 (X_OpenFont) Value in failed request: 0x352 Serial number of failed request: 1192 Current serial number in output stream: 1193 [EMAIL PROTECTED]:~$ I've tried changing the locale to C with LC_ALL=C before invoking xfontsel, but it didn't help it. Any help is greatly appreciated. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: xorg
Yes, I'm running them right now and they seem to work well. I have had one small problem with xfree86-common not upgrading right but that hasn't caused any other problems that I can see. Heres the error I get when upgrading xfree86-common: Setting up xfree86-common (6.8.1-0.4) ... update-rc.d: /etc/init.d/xfree86-common exists during rc.d purge (use -f to force) dpkg: error processing xfree86-common (--configure): subprocess post-installation script returned error exit status 1 On Friday 24 Dec 2004 8:35 pm, cancer wrote: has anybody tried out these xorg packages?: deb http://debian.linux-systeme.com unstable main deb-src http://debian.linux-systeme.com unstable main -- Rise Again! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
module documentation
Where is there documentation on each of the modules/options available for kernel-2.4.27. I'm trying to compile the kernel and some of these parameters, I really don't know what I'm doing. Esp. when It gets into chip support, flash support, Pentium VS. Pentium-pro/i586/etc. options. I'm compiling on a Pentium 90MHZ system which is a Compaq from 1995. This system has CD-ROM, floppy, pci network/sound card. It works with the debian pre-compiled package kernel-image-2.4.27-speakup if that helps. Obviously, I need to know which options are important for my system to boot. Sean
Re: gdm and reboot
On Wednesday 01 Dec 2004 8:02 pm, Ralph Katz wrote: On 12/01/2004 02:10 PM, Frederico Rodrigues Abraham wrote: Isn't there an option on GDM to enable normal users to shutdown and reboot the machine? It always requires the root password to do it... -- Fred Yes. This is from my /etc/gdm/gdm.conf (using Sarge): And you can also change this from the gdmsetup tool by turning off secure actions menu in the Security tab # The Actions menu (formerly system menu) is shown in the greeter, this is the # menu that contains reboot, shutdown, suspend, config and chooser. None of # these is available if this is off. They can be turned off individually # however SystemMenu=true # The Actions in the Actions menu require the root password SecureSystemMenu=false Regards, Ralph -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: how does mutt send?
Mutt does use exim4 to send your mail. You have to do dpkg--reconfigure exim4-config. Setup your mail to be sent through a smarthost assuming you're sending it through another system. When you compose mail, you have to include a from address and name in double quotes and you must suply an email address on the reply-to line. This is all documented in the mutt manual. Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: devfs vs. udev
[snip] - Does hotplug inform udev when a new device connects to the computer? Not sure, but new devices plugged in will cause new dev entries to be made. I think hotplug will just load the relevant modules and udev will sort out devices on its own - Does udev make use of devfs? No hope that helps, Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
mutt skipping messages and the concept of threads
I somehow deleted a mesage from someone who only sent me one message and I did this by just deleting message by thread where I deleted all messages in a thread. What makes up a thread? Also I guess it's actually skipping certain messages and not popping them off the server. What could be causing this? Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Where can I find the program supervgatextmode
The subject line says it all, I did apt-get install supervgatextmode, nothing. Then I did apt-cache search supervgatextmode, nothing. I found nothing on google except references to it on email lists and no links to source, debs, docs, etc with further info on this program. Thanks Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
playing cds
Ok, I have my cd-rom drive conected to my sound card.and normal sound works but cd's do not. I am a member of groups audio and disk. cdcd doesn't give me any error messages, but nothing plays. What am I missing here? Where should I look for any error messages. Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
question relating to speakers and my soundcard
I don't know if this related to linux, but my sound only works if I plug headphones or a really old pair of unpowered speakers into the jack. The old speakers are really faint, which I gues is why now they all have pwoered. My question is, what is the difference between these old working speakers and my new non-working Boston Akustic speakers? The newer speakers do work fine on another computer with a different soundcard.If I have to get new speakers, what specific kind do I need which will work with this s1370 soundcard? The newer speakers work on a sbpci 64d, which I believe is a 1373 chipset. I can't confirm the chipset on that, it's still a winblows machine. Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
annoying mutt problem
After fetching my mail from my isp's pop server, mutt usually only displays the first 10 or so messages. The others although fetched by fetchmail, don't display in my mailbox for a few minutes, according to mutt. If I have about 50 or so, I can quit mutt, and go back in to see all the messages. However if there are 200 or so, like today, it takes 2 or so minutes and quitting and restarting mutt before I see them all. What's appening here? Can I fix that? Sean -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]