Bug#753290: [fabric] does not handle all ssh_config file representations
Package: fabric
Version: 1.8.2-1
Severity: minor
--- Please enter the report below this line. ---
Not sure this is not a python-paramiko bug
I have a very simple fabfile:
= fabfile.py =
from fabric.api import run, env
env.use_ssh_config = True
def host_type():
run('hostname -f')
run('lsb_release -a')
If I run this with a ~.ssh/config like:
= ~/.ssh/config =
Host *
User = root
Compression = yes
ControlMaster = auto
ControlPath = ~/.ssh/sock/ssh_%r@%h:%p
ControlPersist = 2h
ForwardAgent = yes
HashKnownHosts = no
ServerAliveInterval = 250
IdentityFile ~/.ssh/id_rsa
===
I got errors like this:
==
fab -H test_host host_type
1 ↵
[test_host] Executing task 'host_type'
[test_host] run: hostname -f
Traceback (most recent call last):
File /usr/lib/python2.7/dist-packages/fabric/main.py, line 743, in main
*args, **kwargs
File /usr/lib/python2.7/dist-packages/fabric/tasks.py, line 368, in execute
multiprocessing
File /usr/lib/python2.7/dist-packages/fabric/tasks.py, line 264, in _execute
return task.run(*args, **kwargs)
File /usr/lib/python2.7/dist-packages/fabric/tasks.py, line 171, in run
return self.wrapped(*args, **kwargs)
File /home/lminoza/src/fab/fabfile.py, line 7, in host_type
run('hostname -f')
File /usr/lib/python2.7/dist-packages/fabric/network.py, line 639, in
host_prompting_wrapper
return func(*args, **kwargs)
File /usr/lib/python2.7/dist-packages/fabric/operations.py, line 1042, in
run
shell_escape=shell_escape)
File /usr/lib/python2.7/dist-packages/fabric/operations.py, line 909, in
_run_command
channel=default_channel(), command=wrapped_command, pty=pty,
File /usr/lib/python2.7/dist-packages/fabric/state.py, line 388, in
default_channel
chan = _open_session()
File /usr/lib/python2.7/dist-packages/fabric/state.py, line 380, in
_open_session
return connections[env.host_string].get_transport().open_session()
File /usr/lib/python2.7/dist-packages/fabric/network.py, line 151, in
__getitem__
self.connect(key)
File /usr/lib/python2.7/dist-packages/fabric/network.py, line 143, in
connect
self[key] = connect(user, host, port, cache=self)
File /usr/lib/python2.7/dist-packages/fabric/network.py, line 444, in
connect
sock=sock
File /usr/lib/python2.7/dist-packages/paramiko/client.py, line 273, in
connect
self._auth(username, password, pkey, key_filenames, allow_agent,
look_for_keys)
File /usr/lib/python2.7/dist-packages/paramiko/client.py, line 387, in _auth
key = pkey_class.from_private_key_file(key_filename, password)
File /usr/lib/python2.7/dist-packages/paramiko/pkey.py, line 182, in
from_private_key_file
key = cls(filename=filename, password=password)
File /usr/lib/python2.7/dist-packages/paramiko/rsakey.py, line 55, in
__init__
self._from_private_key_file(filename, password)
File /usr/lib/python2.7/dist-packages/paramiko/rsakey.py, line 165, in
_from_private_key_file
data = self._read_private_key_file('RSA', filename, password)
File /usr/lib/python2.7/dist-packages/paramiko/pkey.py, line 254, in
_read_private_key_file
with open(filename, 'r') as f:
IOError: [Errno 2] No such file or directory: ' /home/lminoza/.ssh/id_rsa'
==
It takes me hours to view the space at the beginning of the past on the last
line. Rewriting my ~/.ssh/config file with single space instead of ' = '
between keys and values makes me able to log on my servers and use fabric.
--- System information. ---
Architecture: amd64
Kernel: Linux 3.14-1-amd64
Debian Release: jessie/sid
500 unstable http.debian.net
500 testing-updates http.debian.net
500 testing security.debian.org
500 testing http.debian.net
500 stable-updates http.debian.net
500 stable security.debian.org
500 stable http.debian.net
101 experimental http.debian.net
100 wheezy-backports http.debian.net
--- Package information. ---
Depends (Version) | Installed
===-+-===
python (= 2.7) | 2.7.6-2
python ( 2.8) | 2.7.6-2
python-paramiko (= 1.6) | 1.14.0-2
python-pkg-resources | 4.0.1-1
python-nose | 1.3.3-1
Package's Recommends field is empty.
Suggests (Version) | Installed
===-+-===
libjs-jquery | 1.7.2+dfsg-3
--
Landry MINOZA
MGI Sud-Ouest
Pour le compte du département informatique
de l’établissement public de musée d’Orsay et de l’Orangerie
Chef de projet technique Linux et réseaux
E-mail : landry.min...@musee-orsay.frmailto:landry.min...@musee-orsay.fr
Tél :01 40 49 47 15
Musée d’Orsay et de l’Orangerie :62 rue de Lille - 75343 Paris Cedex 07 |
www.musee-orsay.frhttp://www.musee-orsay.fr
MGI France :5 rue Sextius Michel - 75015 Paris | RCS: Paris B 382 770 584 |
www.mgi.frhttp://www.mgi.fr
MGI SO :281 route
Bug#711331: [libpam-mount]
Package: libpam-mount Version: 2.14~zgit2+aa0d624e-2 Severity: minor --- Please enter the report below this line. --- Please add the options applicables to the pam module pam_mount.so in the pam_mount man page or references /usr/share/doc/libpam-mount/options.txt in it. --- System information. --- Architecture: amd64 Kernel: Linux 3.9-1-amd64 Debian Release: jessie/sid 500 unstable http.debian.net 500 testing http.debian.net 500 stable security.debian.org 500 stable http.debian.net 101 experimental http.debian.net --- Package information. --- Depends (Version) | Installed -+-== libc6 (= 2.7) | libcryptsetup4 (= 2:1.4) | libhx28 | libmount1 (= 2.19.1) | libpam0g (= 0.99.7.1) | libssl1.0.0 (= 1.0.0) | libxml2 (= 2.7.4) | mount (= 2.12-3) | libpam-runtime (= 1.0.1-6) | base-files (= 6.4) | Package's Recommends field is empty. Suggests (Version) | Installed =-+-=== ncpfs | cifs-utils | 2:6.0-1 openssl | 1.0.1e-3 fuse | 2.9.2-4 davfs2 | lsof | 4.86+dfsg-1 psmisc | 22.20-1 xfsprogs | sshfs | tc-utils | -- Landry MINOZA MGI Sud-Ouest Pour le compte du département informatique de l’établissement public de musée d’Orsay et de l’Orangerie Chef de projet technique Linux et réseaux E-mail : landry.min...@musee-orsay.frmailto:landry.min...@musee-orsay.fr Tél :01 40 49 47 15 Musée d’Orsay et de l’Orangerie :62 rue de Lille - 75343 Paris Cedex 07 | www.musee-orsay.frhttp://www.musee-orsay.fr MGI France :5 rue Sextius Michel - 75015 Paris | RCS: Paris B 382 770 584 | www.mgi.frhttp://www.mgi.fr MGI SO :281 route d'Espagne - 31100 Toulouse | RCS: Toulouse B 421 125 816 | www.mgi.frhttp://www.mgi.fr MGI Suisse :5 avenue de Rothorn - CH3960 Sierre | TVA 517-269 | www.mgiconsultants.chhttp://www.mgiconsultants.ch
Bug#711341: [cups] Please call smbspool under user identity to allow it to read kerberos TGT
Package: cups
Version: 1.6.2-8
Severity: normal
--- Please enter the report below this line. ---
smbspool linked as smb in /usr/lib/cups/backend/ is able to read
/tmp/krb5cc_${uid} (or content of KRB5CCNAME variable) and authenticate itself
with kerberos on a shared samba or windows printer.
for exemple, launching as user:
DEVICE_URI=smb://SERVER/Printer strace -e trace=open smbspool 1 user Test
print 1 none EOF
printed OK
EOF
works
smbspool is launched with lp user so it does not have krb5 infos.
A workaround is to add login and password in the printer URI but the password
appears in clear text in /etc/cups/printer.conf and this method is not
applicable when a worksation is used by more than one user.
Some used to replace /usr/lib/cups/backend/smb by a wrapper that calls su -u
user smbspools, but thi can't work when launched as lp. It may be possible to
play with sudo and NOPASSWD: directives to but it can bring security problems.
--- System information. ---
Architecture: amd64
Kernel: Linux 3.9-1-amd64
Debian Release: jessie/sid
500 unstable http.debian.net
500 testing http.debian.net
500 stable security.debian.org
500 stable http.debian.net
101 experimental http.debian.net
--- Package information. ---
Depends (Version) | Installed
=-+-===
libavahi-client3 (= 0.6.16) |
libavahi-common3 (= 0.6.16) |
libc6 (= 2.16) |
libcups2 (= 1.6.2-8) |
libcupscgi1 (= 1.4.2) |
libcupsimage2 (= 1.4.0) |
libcupsmime1 (= 1.4.0) |
libcupsppdc1 (= 1.4.0) |
libgcc1 (= 1:4.1.1) |
libstdc++6 (= 4.1.1) |
libusb-1.0-0 (= 2:1.0.8) |
debconf (= 1.2.9) |
OR debconf-2.0 |
libc-bin (= 2.13) |
cups-daemon (= 1.6.2-8) |
poppler-utils (= 0.12) |
procps |
ghostscript (= 9.02~) |
lsb-base (= 3) |
cups-common (= 1.6.2-8) |
cups-server-common (= 1.6.2-8) |
cups-client (= 1.6.2-8) |
cups-ppdc |
cups-filters (= 1.0.24-3~) |
Recommends (Version) | Installed
-+-===
avahi-daemon | 0.6.31-2
colord | 0.1.21-4
foomatic-filters (= 4.0) | 4.0.17-1
printer-driver-gutenprint | 5.2.9-1
ghostscript-cups (= 9.02~) | 9.05~dfsg-6.3
Suggests (Version) | Installed
==-+-===
cups-bsd | 1.6.2-8
foomatic-db-compressed-ppds | 20130517-1
OR foomatic-db |
printer-driver-hpcups | 3.13.4-1+b1
hplip | 3.13.4-1+b1
cups-pdf |
udev | 175-7.2
smbclient | 2:3.6.15-1
--
Landry MINOZA
MGI Sud-Ouest
Pour le compte du département informatique
de l’établissement public de musée d’Orsay et de l’Orangerie
Chef de projet technique Linux et réseaux
E-mail : landry.min...@musee-orsay.frmailto:landry.min...@musee-orsay.fr
Tél :01 40 49 47 15
Musée d’Orsay et de l’Orangerie :62 rue de Lille - 75343 Paris Cedex 07 |
www.musee-orsay.frhttp://www.musee-orsay.fr
MGI France :5 rue Sextius Michel - 75015 Paris | RCS: Paris B 382 770 584 |
www.mgi.frhttp://www.mgi.fr
MGI SO :281 route d'Espagne - 31100 Toulouse | RCS: Toulouse B 421 125 816 |
www.mgi.frhttp://www.mgi.fr
MGI Suisse :5 avenue de Rothorn - CH3960 Sierre | TVA 517-269 |
www.mgiconsultants.chhttp://www.mgiconsultants.ch
Bug#658357: Regression: with version 10, iceweasel ask master password many times at startup
On 26/09/2012 20:47, Luís Picciochi Oliveira wrote: I couldn't reproduce this bug with Iceweasel version 10.0.7esr-2 currently in testing. I opened the browser with three tabs with auto-completable forms, with the Don't load tabs until selected option disabled and only one window requesting the master password appeared. Landry, can you confirm that this still happens on your setup? Best regards, Pitxyoki I'm using version 15 from experimental now and I don't load tabs until selected. Will try to find time to test again soon. Thx -- Landry MINOZA Chef de projet technique Linux et réseaux Département Informatique Sté TELBASE FC Tél: 4715 (+33140494715) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#682516: [libreoffice-writer] Can't save odt files, access denied to /tmp/luz...
Package: libreoffice-writer Version: 1:3.5.4-6 Severity: important --- Please enter the report below this line. --- When trying to save a file since the latest update, I've got an error message like: access denied to /tmp/luzjf01q.tmp/luzjf1uk.tmp When I look for this file, it exists, I own it, but it is zero sized and have no rights (stat returns ) If I chmod it u+rw, then I can save my file. After some modifications on my document, trying to save it again will raise the same error with a different temporary filename. Looking more closely, this file seams to be created right after I save my document. My /tmp filesystem is on disk: /dev/mapper/vg_hd1-lv_tmp /tmp ext4 rw,relatime,user_xattr,barrier=1,data=ordered 0 0 As only some networked files on Windows shares causes this, I looked at the originals rights: lminoza@4277xw4600 ~ » ls -lah Réseau/partage/…/02-dossier_d\'architecture_gtc-v15.odt -- 1 lminoza utilisa. du domaine 8,7M juil. 23 15:23 Réseau/partage/…/02-dossier_d'architecture_gtc-v15.odt lminoza@4277xw4600 ~ » getfacl Réseau/partage/…/02-dossier_d\'architecture_gtc-v15.odt # file: Réseau/partage/…/02-dossier_d'architecture_gtc-v15.odt # owner: lminoza # group: utilisa.\040du\040domaine user::--- group::--- other::--- lminoza@4277xw4600 ~ » getcifsacl Réseau/partage/…/02-dossier_d\'architecture_gtc-v15.odt REVISION:0x1 CONTROL:0x8404 OWNER:…\lminoza GROUP:…\Utilisa. du domaine ACL:BUILTIN\Administrators:ALLOWED/I/FULL ACL:…\Admins du domaine:ALLOWED/I/FULL ACL:…\INFORMATIQUE:ALLOWED/I/FULL ACL:AUTORITE NT\Système:ALLOWED/I/FULL ACL:…\TFC:ALLOWED/I/CHANGE I'm a direct member of the group TFC so I have full access to this file. cat /proc/mounts for this share: //pluton/partage /home/…/lminoza/Réseau/partage cifs rw,relatime,sec=krb5,unc=\\pluton\partage,username=lminoza,uid=10750,forceuid,gid=1,forcegid,addr=10.1.1.142,file_mode=0755,dir_mode=0755,nounix,cifsacl,noperm,rsize=61440,wsize=65536,actimeo=1 0 0 --- System information. --- Architecture: amd64 Kernel: Linux 3.2.0-3-amd64 Debian Release: wheezy/sid 500 unstable http.debian.net 500 testing http.debian.net 500 stable security.debian.org 500 stable http.debian.net 101 experimental http.debian.net --- Package information. --- Depends (Version) | Installed =-+-== libreoffice-core (= 1:3.5.4-6) | 1:3.5.4-6 libreoffice-base-core (= 1:3.5.4-6) | 1:3.5.4-6 libc6 (= 2.4) | 2.13-35 libgcc1 (= 1:4.1.1) | 1:4.7.1-5 libicu48 (= 4.8-1) | 4.8.1.1-8 libstdc++6 (= 4.6) | 4.7.1-5 libwpd-0.9-9 | 0.9.4-3 libwpg-0.2-2 | 0.2.1-1 libwps-0.2-2 | 0.2.7-1 libxml2 (= 2.7.4) | 2.8.0+dfsg1-5 uno-libs3 (= 1.7.0) | 3.5.4-6 ure | 3.5.4-6 zlib1g (= 1:1.1.4) | 1:1.2.7.dfsg-13 libreoffice-common ( 1:3.5.4) | 1:3.5.4-6 fonts-opensymbol | 2:102.2+LibO3.5.4-6 OR ttf-opensymbol (= 1:3.0) | 2:102.2+LibO3.5.4-6 libc6 (= 2.7) | 2.13-35 libcairo2 (= 1.2.4) | 1.12.2-2 libcmis-0.2-0 | 0.1.0-1+b1 libcurl3-gnutls (= 7.16.2) | 7.26.0-1 libdb5.1 | 5.1.29-5 libexpat1 (= 2.0.1) | 2.1.0-1 libexttextcat0 (= 2.2-8) | 3.2.0-2 libfontconfig1 (= 2.9.0) | 2.9.0-6 libfreetype6 (= 2.2.1) | 2.4.9-1 libgcc1 (= 1:4.1.1) | 1:4.7.1-5 libglib2.0-0 (= 2.15.0) | 2.32.3-1 libgraphite2-2.0.0 | 1.1.3-1 libgstreamer-plugins-base0.10-0 (= 0.10.0) | 0.10.36-1 libgstreamer0.10-0 (= 0.10.0) | 0.10.36-1 libhunspell-1.3-0 | 1.3.2-4 libhyphen0 (= 2.7.1) | 2.8.3-2 libice6 (= 1:1.0.0) | 2:1.0.8-2 libicu48 (= 4.8-1) | 4.8.1.1-8 libjpeg8 (= 8c) | 8d-1 libmythes-1.2-0 | 2:1.2.2-1 libneon27-gnutls | 0.29.6-3 libnspr4 (= 2:4.9-2~) | 2:4.9.2-1 OR libnspr4-0d (= 1.8.0.10) | 2:4.9.2-1 libnss3 (= 2:3.13.4-2~) | 2:3.13.5-1 OR libnss3-1d (= 3.12.0~1.9b1) | 2:3.13.5-1 libpng12-0 (= 1.2.13-4) | 1.2.49-2 libsm6 | 2:1.2.1-2 libssl1.0.0 (= 1.0.0) | 1.0.1c-3 libstdc++6 (= 4.6) | 4.7.1-5 libx11-6 | 2:1.5.0-1 libxext6 | 2:1.3.1-2 libxinerama1 | 2:1.1.2-1 libxml2 (= 2.7.4) | 2.8.0+dfsg1-5 libxrandr2 | 2:1.3.2-2 libxrender1 | 1:0.9.7-1 libxslt1.1 (= 1.1.25) | 1.1.26-13 uno-libs3 (= 3.5.0~beta) | 3.5.4-6 ure (= 3.5.4~) | 3.5.4-6 zlib1g (= 1:1.1.4) | 1:1.2.7.dfsg-13 librdf0 (= 1.0.15) | 1.0.15-1+b1 librsvg2-2 (= 2.36.1) | 2.36.1-1 fontconfig | 2.9.0-6 Recommends (Version) | Installed ==-+-== libreoffice-filter-binfilter | 1:3.5.4-6 default-jre | 1:1.6-47 OR gcj-jre | OR java-gcj-compat | OR openjdk-6-jre | 6b24-1.11.3-2 OR openjdk-7-jre | OR sun-java5-jre | 1.5.0-22-0lenny1 OR sun-java6-jre | 6.26-3 OR java5-runtime | OR jre | libreoffice-java-common (= 1:3.5.4~) | 1:3.5.4-6 libreoffice-emailmerge | 1:3.5.4-6 libreoffice-math | 1:3.5.4-6 Suggests (Version) | Installed ===-+-=== libreoffice-gcj | libreoffice-base | 1:3.5.4-6 -- Landry MINOZA Chef de projet technique Linux et réseaux Département Informatique Sté TELBASE FC Tél: 4715 (+33140494715) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of
Bug#678097: [dia-shapes] shapes at least in central data processing and racks don't have default size
Package: dia-shapes Version: 0.3.0-1 Severity: important --- Please enter the report below this line. --- Just installed dia-shapes and tried to use central data processing and rack sheets to draw my data center. the shapes have no default size, dia scale them to something like 2cm heigh. The result is that a 42U rack has exactly the same heigh than a 1U server making them very difficult to rescale and fit the server inside the rack. I think the simplest way is to add a default size to the shapes as recommanded in dia doc for custom shapes. --- System information. --- Architecture: amd64 Kernel: Linux 3.2.0-2-amd64 Debian Release: wheezy/sid 500 unstable ftp.fr.debian.org 500 testing ftp.fr.debian.org 500 stable security.debian.org 500 stable ftp.fr.debian.org 101 experimental ftp.fr.debian.org --- Package information. --- Depends (Version) | Installed ==-+-=== dia | 0.97.2-8 Package's Recommends field is empty. Package's Suggests field is empty. -- Landry MINOZA Chef de projet technique Linux et réseaux Département Informatique Sté TELBASE FC Tél: 4715 (+33140494715) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
