Re: buster ssh problem

2017-10-31 Thread Don Armstrong
On Tue, 31 Oct 2017, Glenn English wrote:
> On Tue, Oct 31, 2017 at 9:45 PM, Don Armstrong  wrote:
> > Host cisco1841
> >  KexAlgorithms diffie-hellman-group1-sha
> >  Ciphers aes128-cbc,3des-cbc
> >  MACs hmac-md5,hmac-sha1
> >
> > in your ~/.ssh/config and then connect to the machine like so:
> >
> > ssh cisco1841;
> 
> Sounds quite reasonable. Having a lame algorithm for just one host'll
> be no problem. But there's no 'config' of any sort in there.

You'll have to create it.

> > The real solution is to upgrade to a more recent version of IOS.
> 
> IOS is way not FOSS. Lovely software, though.

Heh; I would have suggested using openwrt or openswitch instead but
sometimes that's not an option. [I've personally had to deal with this
issue for older hardware's OOB management stacks.]


-- 
Don Armstrong  https://www.donarmstrong.com

unbeingdead isn't beingalive
 -- e.e. cummings "31" _73 Poems_



Nettoyage du spam : octobre 2017

2017-10-31 Thread jean-pierre giraud
Bonjour,
Comme nous sommes en novembre, il est désormais possible de
traiter les archives du mois d'octobre 2017 des listes francophones.

N'oubliez bien sûr pas d'ajouter votre nom à la liste des relecteurs
pour que nous sachions où nous en sommes.

Détails du processus de nettoyage du spam sur :

https://wiki.debian.org/I18n/FrenchSpamClean



Re: buster ssh problem

2017-10-31 Thread Sven Hartge
Glenn English  wrote:
> On Tue, Oct 31, 2017 at 9:45 PM, Don Armstrong  wrote:

>> It's ~/.ssh/config.

> Typo, please excuse.

>> That's the Key-exchange algorithm.

> That kinda makes sense. It sounds like that has nothing to do with the
> problem, since there are no keys involved here.

There are. Both sides exchange a symmetric session key to use for the
connection. The public/private key which can be used with SSH has
nothing to do with this.

>> Generally, what happens is that older switches and hardware run ancient
>> versions of ssh which don't support modern encryption algorithms.
>>
>> Usually that means that for that specific host, you have to advertise
>> specific host configurations, like so (where cisco1841 is the switch's
>> hostname):
>>
>> Host cisco1841
>>  KexAlgorithms diffie-hellman-group1-sha
>>  Ciphers aes128-cbc,3des-cbc
>>  MACs hmac-md5,hmac-sha1
>>
>> in your ~/.ssh/config and then connect to the machine like so:
>>
>> ssh cisco1841;

> Sounds quite reasonable. Having a lame algorithm for just one host'll
> be no problem. But there's no 'config' of any sort in there.

What do you mean? Just create ~/.ssh/config and put a Host statement
like above inside it.

>> The real solution is to upgrade to a more recent version of IOS.

> IOS is way not FOSS. Lovely software, though.

It needn't be FOSS for you to download a newer version from the Cisco
website. (Only with a valid support contract of course.)

> [SOLVED] -- there seems to be a lot of chatter about this on the web.

> In /etc/ssh/ssh_config, I added 2 lines at the bottom of the file:

> KexAlgorithms diffie-hellman-group1-sha1
> Ciphers 3des-cbc

No, this is not the solution, as this will a) set this for every
connection and b) restrict the Cipher list to *only* this insecure
cipher.

Please read "man ssh_config". The Ciphers statement recongnizes + and -
as prefixes to add or remove values without replacing the whole setting.

S°

-- 
Sigmentation fault. Core dumped.



Re: buster ssh problem

2017-10-31 Thread Glenn English
Take it back. Doesn't work anywhere but the router. FYI...

--
Glenn English



Re: Explication sur un ping étrange

2017-10-31 Thread Pascal Hambourg

Le 31/10/2017 à 21:44, babouchko a écrit :

Tu peux aussi regarder la table arp (arp -a) pour savoir quelle est
l'adresse mac associée


La visibilité des adresses MAC est limitée aux interfaces connectées au 
même domaine de diffusion. Peu probable que ce soit le cas ici.




Re: Another Devuan annoyance: CLI default apps

2017-10-31 Thread Ulf Volmer
On 01.11.2017 00:00, deloptes wrote:
> Renaud (Ron) OLGIATI wrote:

>> Now under Devuan, crontab opens the file with nano, which I hate,
>> abominate, pursue with intense loathing...

> sudo update-alternatives --config editor

select-editor(1) is also an option (configurable per user). available in
package sensible-utils (in the default install AFAIK).

best regards
Ulf



Re: buster ssh problem

2017-10-31 Thread Glenn English
On Tue, Oct 31, 2017 at 9:45 PM, Don Armstrong  wrote:

> It's ~/.ssh/config.

Typo, please excuse.

> That's the Key-exchange algorithm.

That kinda makes sense. It sounds like that has nothing to do with the
problem, since there are no keys involved here.

> Generally, what happens is that older switches and hardware run ancient
> versions of ssh which don't support modern encryption algorithms.
>
> Usually that means that for that specific host, you have to advertise
> specific host configurations, like so (where cisco1841 is the switch's
> hostname):
>
> Host cisco1841
>  KexAlgorithms diffie-hellman-group1-sha
>  Ciphers aes128-cbc,3des-cbc
>  MACs hmac-md5,hmac-sha1
>
> in your ~/.ssh/config and then connect to the machine like so:
>
> ssh cisco1841;

Sounds quite reasonable. Having a lame algorithm for just one host'll
be no problem. But there's no 'config' of any sort in there.

> The real solution is to upgrade to a more recent version of IOS.

IOS is way not FOSS. Lovely software, though.

[SOLVED] -- there seems to be a lot of chatter about this on the web.

In /etc/ssh/ssh_config, I added 2 lines at the bottom of the file:

KexAlgorithms diffie-hellman-group1-sha1
Ciphers 3des-cbc

(3des-cbc is one the router offered)

Then I rebuilt the keys and restarted ssh. Worked.

I don't think I set the weak algorithm to just the router, though, and
I doubt this is as good a config as suggested. But I didn't have to
figure out the ~/.ssh/config problem, and I'm back on the air -- until
next openSSH upgrade, I suspect :-)

Thanks much for the help and explanation.

--
Glenn English



Re: Another Devuan annoyance: CLI default apps

2017-10-31 Thread deloptes
Renaud (Ron) OLGIATI wrote:

> Today for the first times since I upgraded my Debian Wheezy to Devuan
> Jessie, I tried to use crontab;
> 
> in Debian, it opened the file with vi, just as $DEITY had ordered it since
> the beginning of the world.
> 
> Now under Devuan, crontab opens the file with nano, which I hate,
> abominate, pursue with intense loathing...
> 
> How do I get crontab back to using vi ?
>  
> Cheers,
>  
> Ron.

sudo update-alternatives --config editor



Re: Another Devuan annoyance: CLI default apps

2017-10-31 Thread Will Mengarini
* Ron OLGIATI  [17-10/31=Tu 19:11 -0300]:
> [...] in Debian, [crontab -e] opened the file with vi [...].
> Now under Devuan, crontab opens the file with nano [...].
> How do I get crontab back to using vi ?

In your <~/.bashrc>:

  export EDITOR=vim
  export VISUAL=vim

Or modify as needed if you're using some other vi than Vim,
or some other shell than Bash.

-- 
 Will Mengarini  
 Free software: the Source will be with you, always.



Another Devuan annoyance: CLI default apps

2017-10-31 Thread Renaud (Ron) OLGIATI
Today for the first times since I upgraded my Debian Wheezy to Devuan Jessie, I 
tried to use crontab; 

in Debian, it opened the file with vi, just as $DEITY had ordered it since the 
beginning of the world.

Now under Devuan, crontab opens the file with nano, which I hate, abominate, 
pursue with intense loathing...

How do I get crontab back to using vi ?
 
Cheers,
 
Ron.
-- 
   Image
 Old houses were scaffolding once,   
   and workmen whistling.
-- T.E. Hulme

   -- http://www.olgiati-in-paraguay.org --
 



Re: [WARNING] Intel Skylake/Kaby Lake processors: broken hyper-threading

2017-10-31 Thread none

On Sun, 29 Oct 2017, none wrote:

So is there an example ocaml code that can trigger the bug ?


Read the first referece (the INRIA ocaml bug report) throughoutly.  It 
has been public since day one.


And read all references in the updates I sent to that thread too, for 
good measure.  It is not like I added them "just because".


--
 Henrique Holschuh


I did. Are you figuring it’s impossible to successfully compile and 
install the ocaml extprot Library on Debian Jessie? (really many many 
differents compiler errors)
That library is required for triggering the original bug report. As it’s 
impossible to opam install it nor to install it through apt, I’m asking 
for an alternative.




Re: Explication sur un ping étrange

2017-10-31 Thread babouchko
Tu peux aussi regarder la table arp (arp -a) pour savoir quelle est
l'adresse mac associée
Cdt
Bab
Le 31 oct. 2017 18:39, "Stephane Bortzmeyer"  a
écrit :

> On Mon, Oct 30, 2017 at 08:09:00PM +0100,
>  Migrec  wrote
>  a message of 42 lines which said:
>
> > Donc ça prendrait la route par défaut, qui part vers le net et l'une des
> > machines répondrait.
>
> traceroute permettrait de remplacer le conditionnel par l'indicatif.
>
>


Re: buster ssh problem

2017-10-31 Thread Don Armstrong
On Tue, 31 Oct 2017, Glenn English wrote:
> So I looked around a bit, and the openssh website says that's a
> insecure algorithm, but I can enable it if I want to by putting some
> text in ~/.ssh.config. Except there is no ~/.ssh.config. I created one
> and put what I think is the recommended text in it, but no joy.

It's ~/.ssh/config.

> I put 'KexAlgorithms +diffie-hellman-group1-sha1' in
> /etc/ssh/ssh_config, and ssh still says it can't find a good
> algorithm, and gives me another list of possibilities. I assume that
> list is coming from the router, and I have no idea what 'Kex' means

That's the Key-exchange algorithm.

> Anybody know what's going on? And how to fix it?

Generally, what happens is that older switches and hardware run ancient
versions of ssh which don't support modern encryption algorithms.

Usually that means that for that specific host, you have to advertise
specific host configurations, like so (where cisco1841 is the switch's
hostname):

Host cisco1841
 KexAlgorithms diffie-hellman-group1-sha
 Ciphers aes128-cbc,3des-cbc
 MACs hmac-md5,hmac-sha1

in your ~/.ssh/config and then connect to the machine like so:

ssh cisco1841;

If it doesn't work, run ssh -vv cisco1841; and see what is being
advertised, and adjust your options to suit.

The real solution is to upgrade to a more recent version of IOS.

-- 
Don Armstrong  https://www.donarmstrong.com

If it jams, force it. If it breaks, it needed replacing anyway.
 -- Lowery's Law



buster ssh problem

2017-10-31 Thread Glenn English
buster, seems to be all hosts can't talk to Cisco router

I'd like to get into my Cisco 1841 (IOS 12.4) router with ssh like I
have for a decade or so. But buster's ssh says there's no useful
encryption algorithm -- says the offer is diffie-hellman-group1-sha1.
So I looked around a bit, and the openssh website says that's a
insecure algorithm, but I can enable it if I want to by putting some
text in ~/.ssh.config. Except there is no ~/.ssh.config. I created one
and put what I think is the recommended text in it, but no joy.

I put 'KexAlgorithms +diffie-hellman-group1-sha1' in
/etc/ssh/ssh_config, and ssh still says it can't find a good
algorithm, and gives me another list of possibilities. I assume that
list is coming from the router, and I have no idea what 'Kex' means

Anybody know what's going on? And how to fix it? Should I just give up
on ssh and use telnet? (The router's in the next room on the other
side of an Ethernet switch, so there's not much chance of crackers.
But a civilized admin much prefers ssh over telnet.)

--
Glenn English



Re: Explication sur un ping étrange

2017-10-31 Thread Migrec

Le 31/10/2017 à 18:28, Stephane Bortzmeyer a écrit :

On Mon, Oct 30, 2017 at 08:09:00PM +0100,
  Migrec  wrote
  a message of 42 lines which said:


Donc ça prendrait la route par défaut, qui part vers le net et l'une des
machines répondrait.

traceroute permettrait de remplacer le conditionnel par l'indicatif.


Oui, j'y songerai lors de la prochaine mise en place de ma solution de 
secours. Merci !

--
Migrec



Re: compiz sous Sid

2017-10-31 Thread MENGUAL Jean-Philippe
Noralement il y a gtk-decorator dans Sid, qui assure le travail. Sauf si
les mises à jour gtk ont fragilisé l'assemblage


Cordialement,



Le 31/10/2017 à 18:40, mahashakti89 a écrit :
> On Tue, Oct 31, 2017 at 05:59:44PM +0100, Klaus Becker wrote:
>> On mardi 31 octobre 2017 11:03:59 CET mahashakt...@orange.fr wrote:
>>> Bonjour,
>>>
>>> Je l'utilise sous Dis -mais après avoir compilé les sources- et ça
>>> fonctionne bien. As-tu essayé de le lancer avec fusion-icon ?
>>>
>>> Cordialement
>>
>>
>> Salut,
>>
>> sous "Dis" ? C'est quoi ?
>>
>> Comment lancer compiz avec fusion-icon?
>>
>> bonne soirée
>>
>> Klaus
>>
>>
> On Tue, Oct 31, 2017 at 05:59:44PM +0100, Klaus Becker wrote:
>
> Il faut lire Sid  (Tippfehler ...)
> Pour fusion-icon ça n'existe pas dans le dépot instable. Il faut
> installer à partir des sources. C'est en python. Et ça fonctionne.
>
> Cordialement
>
>

-- 
signature_jp_2
Logo Hypra  JEAN-PHILIPPE MENGUAL
DIRECTEUR TECHNIQUE ET QUALITÉ
102, rue des poissonniers, 75018, Paris
Tel : +331 84 73 06 61  Mob : +336 76 34 93 37

jpmeng...@hypra.fr 
www.hypra.fr 
Facebook Hypra  Twitter Hypra
 Linkedin Jean-Philippe





Re: Stretch : mount Jessie encrypted HDD via USB

2017-10-31 Thread deloptes
commentsab...@riseup.net wrote:

> Hello,
> 
> I'm trying to connect my old Jessie HDD via USB in order to transfer
> files to my new Stretch system (details below). It does not work out of
> the box because it is encrypted, how should I proceed?
> 
> - I only have a laptop;
> 
> - 1 old HDD with Jessie (guided encrypted LVM install);
> 
> - 1 new SSD with Stretch (guided encrypted LVM install), this drive is
> in the laptop;
> 
> - 1 S-ATA to USB adapter.
> 
> Needless to say that I have the passphrase for both systems. I am
> actually worried to damage the Jessie system by using wrong commands so
> I am looking for help.
> 
> Thank you in advance :)
> 
> CA

most modern desktops will offer a tool to react when disk (usb) is plugged
in and if encrypted ask for password to decrypt. IF there is lvm they will
handle the lvm automatically

Manually it can be done as follows (presumably the disk was encrypted with
luks)

1. plugin in / connect the usb to the computer
2. cryptsetup luksOpen /dev/sd1 cryptedDisk
3. vgchange -ay cryptedDisk
4. mount /dev/mapper/cryptedDisk- ...

reverse

1. umount /dev/mapper/cryptedDisk-
2. vgchange -an cryptedDisk
3. cryptsetup luksClose cryptedDisk
4. unplug

*  - disk id (a,b,c,d etc)
*  - volume name



Re: Stretch : mount Jessie encrypted HDD via USB

2017-10-31 Thread Matthew Crews
> Original Message 
>Subject: Stretch : mount Jessie encrypted HDD via USB
>Local Time: October 31, 2017 9:22 AM
>UTC Time: October 31, 2017 4:22 PM
>From: commentsab...@riseup.net
>To: debian-user@lists.debian.org
>
>Hello,
>
> I'm trying to connect my old Jessie HDD via USB in order to transfer
> files to my new Stretch system (details below). It does not work out of
> the box because it is encrypted, how should I proceed?
> - I only have a laptop;
> - 1 old HDD with Jessie (guided encrypted LVM install);
> - 1 new SSD with Stretch (guided encrypted LVM install), this drive is
> in the laptop;
> - 1 S-ATA to USB adapter.

I found the easiest way is to use a GUI tool. My favorite is probably Gnome 
Disk Utility (package: gnome-disk-utility).

The Debian Wiki also has some information regarding LVM:

https://wiki.debian.org/LVM

I couldn't find it in the Debian Wiki, but the Arch Linux Wiki has information 
on dm-crypt and LUKS:

https://wiki.archlinux.org/index.php/Dm-crypt_with_LUKS



Re: FYI

2017-10-31 Thread Emiliano Gabriel Reynoso
To unsubscribe from this list, send "unsubscribe" in the message subject to:
-requ...@lists.debian.org
and you will be removed after your confirmation reply has been received.

El 31 oct. 2017 16:02, "Rajendran K"  escribió:

> I need to Unsubscribe from this email updates.
>


Re: looking for a file format for time series data other software can easily consume

2017-10-31 Thread Ben Caradoc-Davies

On 31/10/17 19:33, Dan Hitt wrote:

I plan to produce some time series data and i would like it to be in a
form that makes it easy or effortless for pre-existing programs to
plot or even process further.


NetCDF is very popular for scientific applications. NetCDF-4 uses HDF5 
(also mentioned in this thread) for storage, NetCDF-3 has its own 
storage format:

https://www.unidata.ucar.edu/software/netcdf/

Many open source libraries and tools.

Kind regards,

--
Ben Caradoc-Davies 
Director
Transient Software Limited 
New Zealand



Re: compiz sous Sid

2017-10-31 Thread mahashakti89

On Tue, Oct 31, 2017 at 07:58:42PM +0100, Klaus Becker wrote:

On mardi 31 octobre 2017 19:38:49 CET you wrote:

Noralement il y a gtk-decorator dans Sid, qui assure le travail. Sauf si
les mises à jour gtk ont fragilisé l'assemblage



'soir,

gtk-decorator n'existe pas dans Sid, donc encore à compiler?

Klaus


On Tue, Oct 31, 2017 at 07:58:42PM +0100, Klaus Becker wrote:

Essaie avec fusion-icon

Sources  > python setup.py build > setup.py install --prefix=${PREFIX} 
--root=${DESTDIR}


Terminé



FYI

2017-10-31 Thread Rajendran K
I need to Unsubscribe from this email updates.


Re: compiz sous Sid

2017-10-31 Thread Klaus Becker
On mardi 31 octobre 2017 19:38:49 CET you wrote:
> Noralement il y a gtk-decorator dans Sid, qui assure le travail. Sauf si
> les mises à jour gtk ont fragilisé l'assemblage


'soir,

gtk-decorator n'existe pas dans Sid, donc encore à compiler?

Klaus



unattended desktop installation using gnome-boxes express install

2017-10-31 Thread Federico Bruni

Hi all

I'm not subscribed to this list.
I hope this email will go through and please use Reply to all so I can 
get your replies.


I'm not a Debian user anymore (switched to Fedora), but I'd like to 
report the problem described here:

https://bugzilla.gnome.org/show_bug.cgi?id=755297

Summary: when I install an official Debian LXDE image in Gnome-Boxes 
using the express install, GNOME is installed instead of LXDE.
Boxes wants to install 'desktop'. The Debian image turns desktop into 
GNOME, even if it's missing in the image. It should use LXDE instead.


I guess this should be reported to deb-conf or preseed?

Thanks in advance
Federico





Re: compiz sous Sid

2017-10-31 Thread mahashakti89

On Tue, Oct 31, 2017 at 05:59:44PM +0100, Klaus Becker wrote:

On mardi 31 octobre 2017 11:03:59 CET mahashakt...@orange.fr wrote:

Bonjour,

Je l'utilise sous Dis -mais après avoir compilé les sources- et ça
fonctionne bien. As-tu essayé de le lancer avec fusion-icon ?

Cordialement



Salut,

sous "Dis" ? C'est quoi ?

Comment lancer compiz avec fusion-icon?

bonne soirée

Klaus



On Tue, Oct 31, 2017 at 05:59:44PM +0100, Klaus Becker wrote:

Il faut lire Sid  (Tippfehler ...)
Pour fusion-icon ça n'existe pas dans le dépot instable. Il faut
installer à partir des sources. C'est en python. Et ça fonctionne.

Cordialement



Re: Explication sur un ping étrange

2017-10-31 Thread Stephane Bortzmeyer
On Mon, Oct 30, 2017 at 08:09:00PM +0100,
 Migrec  wrote 
 a message of 42 lines which said:

> Donc ça prendrait la route par défaut, qui part vers le net et l'une des
> machines répondrait.

traceroute permettrait de remplacer le conditionnel par l'indicatif.



Re: compiz sous Sid

2017-10-31 Thread Klaus Becker
On mardi 31 octobre 2017 11:03:59 CET mahashakt...@orange.fr wrote:
> Bonjour,
> 
> Je l'utilise sous Dis -mais après avoir compilé les sources- et ça
> fonctionne bien. As-tu essayé de le lancer avec fusion-icon ?
> 
> Cordialement


Salut,

sous "Dis" ? C'est quoi ?

Comment lancer compiz avec fusion-icon?

bonne soirée

Klaus



> 
> Le 30/10/2017, à 20:36, Klaus Becker a écrit :
> 
> Salut,
> 
> sous Sid et XFCE, j'ai installé compiz, surtout pour le cube.
> 
> Mais un "compiz --replace" me laisse avec un bureau inutilisable, et si
> j'essaye d'utiliser ccsm pour lancer des effets compiz, rien ne fonctionne.
> 
> J'ai déjà posé la question sur la liste allemande à laquelle je suis
> également abonné, personne ne m'a répondu.
> 
> Est-ce que qn ici est arrivé à utiliser compiz sous Debian?
> 
> bonne soirée
> 
> Klaus




Stretch : mount Jessie encrypted HDD via USB

2017-10-31 Thread commentsabout
Hello,

I'm trying to connect my old Jessie HDD via USB in order to transfer
files to my new Stretch system (details below). It does not work out of
the box because it is encrypted, how should I proceed?

- I only have a laptop;

- 1 old HDD with Jessie (guided encrypted LVM install);

- 1 new SSD with Stretch (guided encrypted LVM install), this drive is
in the laptop;

- 1 S-ATA to USB adapter.

Needless to say that I have the passphrase for both systems. I am
actually worried to damage the Jessie system by using wrong commands so
I am looking for help.

Thank you in advance :)

CA



Re: servidor de DNS externo sin clave correcta

2017-10-31 Thread u-01



31. Oct 2017 06:39 por javier.debian.bb...@gmail.com:


> El 31/10/17 a las 10:11, Oscar Martinez escribió:
>> buenas tardes lista estoy frente a un problema interesante tengo un servidor 
>> de DNS externo el coordinador de redes renunció y se llevó todas las claves 
>> de los equipos en particular el equipo a donde queremos acceder no tenemos 
>> la clave y contiene el servicio de DNS externo
>>
>> nuestro temor es que si al tratar de tumbar y cambiar la clave del equipo 
>> podríamos perder la configuración del servicio de DNS. alguien podría 
>> ayudarme
>
> ¿Qué significa "tumbar"?
> Lo de "servidor externo", ¿significa que no tienen accesos físico al servidor?
>
> Si tenés acceso físico, no hay mayores problemas; se hace una copia de 
> seguridad de las configuraciones DNS, se intenta el cambio de claves, y si no 
> funciona, lo peor que puede pasar es que debas reinstalar el servidor en sí 
> mismo y restaurar las configuraciones.
>
> Si tienen un servidor que es administrado por otra empresa, se le explica a 
> la empresa la situación y se les pide un blanqueo de claves; son ustedes los 
> que pagan.
>
> -- 
> JAP
> https://wiki.debian.org/es/NormasLista




Tal cual, como dicen. No hay mayores riesgos. Podés acceder y copiar a través 
de un liveusb, por grub, clonar, pedirle al proveedor, etc... (supongo un 
servidor no tiene el disco encriptado)




La situación me recuerda a lo que se dice en mi trabajo: 

“La culpa siempre es del que se fué” xD

 


Re: servidor de DNS externo sin clave correcta

2017-10-31 Thread JAP

El 31/10/17 a las 10:11, Oscar Martinez escribió:
buenas tardes lista estoy frente a un problema interesante tengo un 
servidor de DNS externo el coordinador de redes renunció y se llevó 
todas las claves de los equipos en particular el equipo a donde queremos 
acceder no tenemos la clave y contiene el servicio de DNS externo


nuestro temor es que si al tratar de tumbar y cambiar la clave del 
equipo podríamos perder la configuración del servicio de DNS. alguien 
podría ayudarme


¿Qué significa "tumbar"?
Lo de "servidor externo", ¿significa que no tienen accesos físico al 
servidor?


Si tenés acceso físico, no hay mayores problemas; se hace una copia de 
seguridad de las configuraciones DNS, se intenta el cambio de claves, y 
si no funciona, lo peor que puede pasar es que debas reinstalar el 
servidor en sí mismo y restaurar las configuraciones.


Si tienen un servidor que es administrado por otra empresa, se le 
explica a la empresa la situación y se les pide un blanqueo de claves; 
son ustedes los que pagan.


--
JAP
https://wiki.debian.org/es/NormasLista



Re: servidor de DNS externo sin clave correcta

2017-10-31 Thread remgasis remgasis
"nuestro temor es que si al tratar de tumbar y cambiar la clave del equipo
podríamos perder la configuración del servicio de DNS. alguien podría
ayudarme"

Si sólo cambias la clave no.

El 31 de octubre de 2017, 9:11, Oscar Martinez 
escribió:

> buenas tardes lista estoy frente a un problema interesante tengo un
> servidor de DNS externo el coordinador de redes renunció y se llevó todas
> las claves de los equipos en particular el equipo a donde queremos acceder
> no tenemos la clave y contiene el servicio de DNS externo
>
> nuestro temor es que si al tratar de tumbar y cambiar la clave del equipo
> podríamos perder la configuración del servicio de DNS. alguien podría
> ayudarme
>


servidor de DNS externo sin clave correcta

2017-10-31 Thread Oscar Martinez
buenas tardes lista estoy frente a un problema interesante tengo un
servidor de DNS externo el coordinador de redes renunció y se llevó todas
las claves de los equipos en particular el equipo a donde queremos acceder
no tenemos la clave y contiene el servicio de DNS externo

nuestro temor es que si al tratar de tumbar y cambiar la clave del equipo
podríamos perder la configuración del servicio de DNS. alguien podría
ayudarme


Re: Retro update

2017-10-31 Thread Eric Degenetais
Le 31 oct. 2017 1:13 PM, "Felix Defrance"  a écrit :

Ah oui! j'avais pas pensé aux bases de données sur le coup!

Pour les fichiers de confs, si pendant l'upgrade tu spécifies pas
explicitement à APT de d'écraser la configuration en place, il garde tes
modifications sur.

Il est capable de garder les modifications à l'upgrade, ce qui ne veut
absolument pas dire qu'il peut downgrader la configuration proprement...


Re: Retro update

2017-10-31 Thread Felix Defrance
Ah oui! j'avais pas pensé aux bases de données sur le coup!

Pour les fichiers de confs, si pendant l'upgrade tu spécifies pas
explicitement à APT de d'écraser la configuration en place, il garde tes
modifications.

autre? tu penses à quoi ?


Le 30/10/2017 à 20:54, Yves Rutschle a écrit :
> On Fri, Oct 27, 2017 at 03:34:59PM +0200, Felix Defrance wrote:
>> Dans l'absolut c'est possible.
> Non, dans l'absolu, c'est impossible. Les paquets qui
> "upgradent" (augmentent de version) ont le droit de changer
> les formats de fichiers de configuration, les schémas de
> bases de données et autre. Les paquets qui "downgradent" ne
> savent typiquement pas le faire.
>
> En d'autre termes, si un format a changé, ça ne marchera pas
> à moins de ressortir des backups.
>
> (Mais vous avez des backups de tout, bien sûr? Faut
> considérer toute donnée non sauvegardée comme perdue).
>
> Y.
>

-- 
Félix Defrance
PGP: 0x0F04DC57



Re: looking for a file format for time series data other software can easily consume

2017-10-31 Thread Henning Follmann
On Mon, Oct 30, 2017 at 11:33:36PM -0700, Dan Hitt wrote:
> I plan to produce some time series data and i would like it to be in a
> form that makes it easy or effortless for pre-existing programs to
> plot or even process further.
> 
> The data would consist of a few hundred to a few thousand time points,
> and for each time point there would be a half-dozen to a dozen values.
> 
> So conceptually it would be something like a csv file with a few
> hundred to a few thousand rows, and a half-dozen to a dozen columns.
> 
> However, a csv file doesn't seem exactly right, as i would like the
> files to include some embedded metadata (ideally in some form that at
> least in principle could be digested by another program).  I suppose i
> could have some comment lines somehow, but that feels pretty ad hoc.
> But maybe i'm being overly fastidious.
> 
> Something like a RIFF file format (like WAVE) might be better, but not
> sure what it would be.
> 
> For the plotting or processing software i'd want to use something like
> octave or python/matplotlib or a derivative.
> 
> I googled around for time series file formats, and i didn't see
> exactly what i was looking for.
> 
> So i'd appreciate any advice or suggestions, and thanks in advance!
> 
> dan
>


Hello,
you should look at HDF(5).
https://support.hdfgroup.org/HDF5/

There exist free and open libraries (in debian repositories) to access HDF
files. There is a python binding wich makes it easy to integrate into
scipy/mathplotlib.


-H
 

-- 
Henning Follmann   | hfollm...@itcfollmann.com



Re: looking for a file format for time series data other software can easily consume

2017-10-31 Thread Darac Marjal

On Mon, Oct 30, 2017 at 11:33:36PM -0700, Dan Hitt wrote:

I plan to produce some time series data and i would like it to be in a
form that makes it easy or effortless for pre-existing programs to
plot or even process further.

The data would consist of a few hundred to a few thousand time points,
and for each time point there would be a half-dozen to a dozen values.

So conceptually it would be something like a csv file with a few
hundred to a few thousand rows, and a half-dozen to a dozen columns.

However, a csv file doesn't seem exactly right, as i would like the
files to include some embedded metadata (ideally in some form that at
least in principle could be digested by another program).  I suppose i
could have some comment lines somehow, but that feels pretty ad hoc.
But maybe i'm being overly fastidious.

Something like a RIFF file format (like WAVE) might be better, but not
sure what it would be.

For the plotting or processing software i'd want to use something like
octave or python/matplotlib or a derivative.

I googled around for time series file formats, and i didn't see
exactly what i was looking for.

So i'd appreciate any advice or suggestions, and thanks in advance!


The lowest-common-denominator here is usually RRD [1], the Round-Robin 
Database. This will give you a fixed-size file containing various 
"buckets" for data at specific intervals (for example every 5 minutes 
for a day, every hour for a month and every day for a year). Lots of 
programs can read and write RRD because it's been stable for ages.


If you want something a bit more new/capable/interesting, there's 
whisper [2], the TSDB for carbon/graphite. Or OpenTSDB [3], or InfluxDB 
[4] or Prometheus [5].



[1] https://oss.oetiker.ch/rrdtool/index.en.html
[2] http://graphite.wikidot.com/whisper
[3] http://opentsdb.net
[4] https://www.influxdata.com
[5] https://prometheus.io



dan



--
For more information, please reread.


signature.asc
Description: PGP signature


Re: looking for a file format for time series data other software can easily consume

2017-10-31 Thread deloptes
Dan Hitt wrote:

> So i'd appreciate any advice or suggestions, and thanks in advance!
> 

when you have chosen the tool that will do the work, look at what format it
accepts and dump the data in this format.

from what you said it might be done in xml or DB if there are internal
relations

regards



Re: HOWTO: Setup persistent RDP sessions

2017-10-31 Thread deloptes
Hörmetjan Yiltiz wrote:

> I would like to creates only one Xfce4 session for Alice wherever she
> connects to, however she connects to (any OS, any RDP client), until she
> kills/terminates Xfce4-session herself, so she can always keep on previous
> work.
> 
> What is the simplest configuration for X11vnc to achieve this?

I am not familiar to Xfce4, but what I don't understand if you use the Xfce4
login manager or alike to spawn the vnc server.

In my setup each user has a vnc-run.sh script that has a dedicated VNC port

For example user with id 1005 gets vnc port 5905

#!/bin/sh
vncserver -geometry 1440x900 :5

If this runs once the user can connect always and from everywhere to port
5905 or in the vnc terms server:5

regards



looking for a file format for time series data other software can easily consume

2017-10-31 Thread Dan Hitt
I plan to produce some time series data and i would like it to be in a
form that makes it easy or effortless for pre-existing programs to
plot or even process further.

The data would consist of a few hundred to a few thousand time points,
and for each time point there would be a half-dozen to a dozen values.

So conceptually it would be something like a csv file with a few
hundred to a few thousand rows, and a half-dozen to a dozen columns.

However, a csv file doesn't seem exactly right, as i would like the
files to include some embedded metadata (ideally in some form that at
least in principle could be digested by another program).  I suppose i
could have some comment lines somehow, but that feels pretty ad hoc.
But maybe i'm being overly fastidious.

Something like a RIFF file format (like WAVE) might be better, but not
sure what it would be.

For the plotting or processing software i'd want to use something like
octave or python/matplotlib or a derivative.

I googled around for time series file formats, and i didn't see
exactly what i was looking for.

So i'd appreciate any advice or suggestions, and thanks in advance!

dan



Weird font dots in terminal

2017-10-31 Thread Bhasker C V
Hi,

 I am using debian buster.

 I have been using rxvt-unicode with Gohu font happily until the latest update.
 The terminal window now shows extra pixels around the characters.
 Attached is screenshot.
 I have run fc-cache both as root and also as user and re-started the
laptop too.

Attached is the screenshot. This was all clean just a few days ago

My rxvt command is

urxvtc -xrm 'XTerm*selectToClipboard:true' -bc -cr GREEN -vb -fn
'xft:GohuFont:pixelsize=14' -sl 5 -fg \#FF7E00 -bg BLACK

and I have these in

$ ls /usr/share/fonts/X11/misc/gohufont-*
/usr/share/fonts/X11/misc/gohufont-11b.pcf.gz
/usr/share/fonts/X11/misc/gohufont-uni-11b.pcf.gz
/usr/share/fonts/X11/misc/gohufont-11.pcf.gz
/usr/share/fonts/X11/misc/gohufont-uni-11.pcf.gz
/usr/share/fonts/X11/misc/gohufont-14b.pcf.gz
/usr/share/fonts/X11/misc/gohufont-uni-14b.pcf.gz
/usr/share/fonts/X11/misc/gohufont-14.pcf.gz
/usr/share/fonts/X11/misc/gohufont-uni-14.pcf.gz

Can someone help please ?