[OT] Intelectual Property Law [WAS: Re: what graphic card to buy?]

2012-07-18 Thread Rick Thomas
Hi folks,

While fascinating, this discussion has wandered seriously Off Topic.  It's no 
longer appropriate for debian-user, I think.  I'm not a list-guru.  Is there 
a debian list where it would be on-topic? If so, maybe we should take it there.

Enjoy!

Rick


On Jul 18, 2012, at 6:46 AM, Gary Dale wrote:

 On 18/07/12 08:35 AM, Chris Bannister wrote:
 On Wed, Jul 18, 2012 at 12:21:03AM -0400, Gary Dale wrote:
 The original justification for patents was that the government
 would protect your invention for a short period if you told the
 world about how it works.
 I thought that too, but ... :(
 https://en.wikipedia.org/wiki/Statute_of_Monopolies_1623
 
 Copyright and patents were never about promoting culture and
 innovations; from the very start they were legalized bribes to give the
 king some income and to let businesses get rid of competition.
 
 True about copyright but not about patents in North America. The American 
 patent system was originally set up with good intentions on the part of at 
 least some of its backers.
 
 
 -- 
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject 
 of unsubscribe. Trouble? Contact listmas...@lists.debian.org
 Archive: http://lists.debian.org/5006be50.6060...@rogers.com
 
 
 


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/8d187b7e-3df2-446f-9695-6da643ddb...@pobox.com



Re: Tools in Debian to create whole disk image (multiple partitions)?

2012-07-22 Thread Rick Thomas


If all the empty space is filled with something redundant (like,  
zeroes?) then you can use almost any compress program (gzip comes to  
mind...) and it will all be compressed out.


If the empty space is filled with random junk, it will depend on just  
how random the junk is.


Does that help?

Rick

On Jul 22, 2012, at 11:05 AM, Andrei POPESCU wrote:


On Du, 22 iul 12, 17:38:58, Sthu Deus wrote:

Good time of the day, Andrei.

You worte:


Any suggestions?


Why don't You copy Your installation w/ cp -a and reconfiguring  
then

grub for the copy - to another disk (USB one?). OR I'm missing
something?


The Raspberry Pi can only boot from an SD card and the partition  
layout

matters (e.g. /boot needs to be primary, FAT32, bootable and probably
the first partition -- there is no bootloader like grub AFAICT).

# parted -l
Model: SD SD08G (sd/mmc)
Disk /dev/mmcblk0: 7948MB
Sector size (logical/physical): 512B/512B
Partition Table: msdos

Number  Start   End SizeType File system Flags
1  1049kB  79,7MB  78,6MB  primary  fat32   boot
2  79,7MB  336MB   256MB   primary  linux-swap(v1)
3  336MB   7947MB  7612MB  primary  ext4

The ext4 partition only holds about 630 MiB of data (Debian base  
install

+ SSH server). I want to create an image that I can:

* reuse myself later (just dd to some SD card)
* distribute to possibly not very knowledgeable people

Actually, I already have the image (with GNU ddrescue --sparse), but
it's about 5 times bigger than expected, which makes it difficult to
store and/or distribute :(

Hope this explains,
Andrei
--
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/f1aabf71-4355-49db-9cfd-9dc093a90...@pobox.com



Re: Tools in Debian to create whole disk image (multiple partitions)?

2012-07-23 Thread Rick Thomas


On Jul 22, 2012, at 11:15 PM, Andrei POPESCU wrote:


On Du, 22 iul 12, 19:28:35, Rick Thomas wrote:


If all the empty space is filled with something redundant (like,
zeroes?) then you can use almost any compress program (gzip comes to
mind...) and it will all be compressed out.

If the empty space is filled with random junk, it will depend on
just how random the junk is.

Does that help?


A compressor of course helps reduce the size a *lot* (it's only 368  
MiB

gziped), but this introduces an additional step that I was trying to
avoid.



You can do it all in a shell one liner that does the compression on- 
the-fly.
E.g. (assuming your SD card is on /dev/sdx, and you want to call your  
image raspbian.img):


dd bs=1M if=/dev/sdx | gzip | dd bs=1M of=raspbian.img.gz

If the swap partition has been used, it will have random garbage in  
it.  You may want to zero it out and re-initialize it before you  
create the image.  That will give you maximum compression.


E.g. (again, assuming your SD card is on /dev/sdx, and the partition  
setup you gave in your previous email is still in effect):


dd bs=1M if=/dev/zero of=/dev/sdx2 count=256
mkswap /dev/sdx2

Note, I don't have an Rpi and none of the above have been tested, so  
be careful.




I'll look at Colenzilla, but just creating the live USB is a pain[1]  
and

having to reboot each time I want to generate a new image is also not
something I look forward to :(

[1] http://clonezilla.org/liveusb.php


I don't think clonezilla will help.  The wiki page [2], which tells  
people how to use these images, pretty much assumes that they were  
created exactly as I have described above.


[2] http://elinux.org/RPi_Easy_SD_Card_Setup


Kind regards,
Andrei
--
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic



HTH,

Rick



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/d56c8933-a67c-4000-9d97-fd18c38f8...@pobox.com



Re: Tools in Debian to create whole disk image (multiple partitions)?

2012-07-23 Thread Rick Thomas


On Jul 23, 2012, at 12:15 AM, Andrei POPESCU wrote:


On Lu, 23 iul 12, 09:15:36, Andrei POPESCU wrote:


A compressor of course helps reduce the size a *lot* (it's only 368  
MiB

gziped), but this introduces an additional step that I was trying to
avoid.


... and a gzip/gunzip cycle makes the file non-sparse. I fixed it with
cp --sparse always, but this is definitely a show stopper.


Well... making it non-sparse is kinda the point.  The parts that -- 
sparse removes are a subset of the parts that gzip will give maximum  
compression to.


Again, when I read the wiki instructions for using the images, it  
pretty much assumes that the image was produced with dd and gzip as I  
have described.





Kind regards,
Andrei
--
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic


HTH
Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/fadd3e24-6ad4-4f21-a113-32a23bd5f...@pobox.com



Re: Purge Empathy messes up apt

2012-07-26 Thread Rick Thomas


On Jul 25, 2012, at 5:53 PM, Bob Proulx wrote:


Mark Allums wrote:

Bob Proulx wrote:

Mark Allums wrote:

No, it's dependency hell.


No.  Dependency Hell[1] would require a rigidity of dependencies  
that
are difficult to resolve.  These resolve fine.  And as is they are  
not

causing any problems.  It is just suggesting that if you don't want
gnome installed then it would, if you told it to do so, remove the
lint associated with it.


Well, okay.  But being require to manually mark 100+ packages in
order to remove one seems needlessly tedious.  Debian is a harsh
mistress.


What would you suggest as an alternative and how would it be
implemented?



Mark Allums wrote:
I still think that kind of purge shouldn't be possible.  a more  
granular approach would be appreciated.


Rather than have the top level virtual packages (gnome, in this case)  
depend on over 60 second level packages, could the to- level recommend  
a small number (say less than a dozen) second level packages that each  
represent a major subsystem of the Gnome Desktop Environment.  Each  
second level subsystem would then depend-on or recommend, in turn, a  
manageable number of actual packages -- perhaps with some overlap as  
necessary amongst the low-level libraries and leaf packages.


This would allow a more modular approach and let people purge (or  
never install in the first place) those packages they don't need.


If done carefully, it might also allow users to mix-and-match from  
amongst a collection of third level packages that provide a given  
functionality represented by a given second-level virtual package.


Just a thought...

And, no, I'm not volunteering to do a sample implementation -- I don't  
have the necessary Debian Packaging skills.  I'm just putting the idea  
out for discussion.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/f834da1d-437b-4e95-ae46-d976afabd...@pobox.com



Re: installing Debian on an iMac

2012-07-31 Thread Rick Thomas


If this is a PowerPC iMac, you should be able to use the Debian  
PowerPC installer.


If so, you can install Debian Squeeze with either

http://cdimage.debian.org/cdimage/release/current/powerpc/iso-cd/debian-6.0.5-powerpc-CD-1.iso
or

http://cdimage.debian.org/cdimage/release/current/powerpc/iso-cd/debian-6.0.5-powerpc-netinst.iso

Use the netinst if you expect to have broadband internet access  
during the installation process.  If not, use the CD-1 image.
Download your iso image of choice and burn it to a CD-R; put it in the  
CD drive of the iMac; boot while holding down the c key; and follow  
the instructions from there.


It's probably a good idea to read the installation manual before you  
start.  You can download it from

http://www.debian.org/releases/stable/installmanual
You will want the PowerPC version.  You have a variety of language  
translations to choose from if you're not comfortable with English.



Hope this helps...

Rick

On Jul 30, 2012, at 1:19 PM, David Harrison wrote:


Hi,

I thought I'd like to install Debian on my mac.  Any hints or clues  
on where to start is appreciated.


Cheers
David

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/e597f0e7-5c5e-4516-9ad9-7d48e60f8...@charter.net






--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/a1fa4ea1-3d84-42a0-b4d8-8e560889e...@pobox.com



Re: installing Debian on an iMac

2012-07-31 Thread Rick Thomas

Hi David,

Lest we get flamed for top posting, I've rearranged the segments of  
this discussion to conform to the conventions of debian-users.  Look  
for my reply at the bottom of this email... /-:



On Jul 30, 2012, at 1:19 PM, David Harrison wrote:



Hi,

I thought I'd like to install Debian on my mac.  Any hints or clues  
on where to start is appreciated.


Cheers
David



On Jul 31, 2012, at 1:47 AM, Rick Thomas rbtho...@pobox.com wrote:



If this is a PowerPC iMac, you should be able to use the Debian  
PowerPC installer.


If so, you can install Debian Squeeze with either
  
http://cdimage.debian.org/cdimage/release/current/powerpc/iso-cd/debian-6.0.5-powerpc-CD-1.iso
or
  
http://cdimage.debian.org/cdimage/release/current/powerpc/iso-cd/debian-6.0.5-powerpc-netinst.iso

Use the netinst if you expect to have broadband internet access  
during the installation process.  If not, use the CD-1 image.
Download your iso image of choice and burn it to a CD-R; put it in  
the CD drive of the iMac; boot while holding down the c key; and  
follow the instructions from there.


It's probably a good idea to read the installation manual before you  
start.  You can download it from

  http://www.debian.org/releases/stable/installmanual
You will want the PowerPC version.  You have a variety of language  
translations to choose from if you're not comfortable with English.



Hope this helps...

Rick




On Jul 31, 2012, at 7:27 AM, David Harrison wrote:



Thanks for the help.   It's a 2009 iMac so I'm not sure at this  
point where to look.





So it's an Intel iMac.  That means it boots with Apple's version of  
EFI firmware.  Right now there's considerable discussion in debian- 
user mailing list on the subject of support for EFI booting in Wheezy  
-- mostly centered around what to do about the MS Secure Boot  
adjunct to EFI.  I haven't seen much in the way of serious software  
development come out of it yet -- though I may be looking in the wrong  
discussion groups; I don't subscribe to debian-developers.


Since I don't have an Intel Mac that I want to use for Linux (MacOS-X  
works well for my needs), I can't be much help.


I can report that for the old PowerPC machines, Debian is great!   
Machines that barely crawl with ancient versions of MacOS-X get new  
life and vigor when installed with the latest Debian.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/23a6da46-6c68-4685-a4a2-9f6a90796...@pobox.com



Re: PowerPC install stuck at dmesg

2012-08-15 Thread Rick Thomas



Begin forwarded message:


Resent-From: debian-user@lists.debian.org
From: Michael Aldridge aldridge@gmail.com
Date: August 14, 2012 6:05:29 PM PDT
To: debian-user@lists.debian.org
Subject: PowerPC install stuck at dmesg

After deciding that the official OS was becoming too slow for this  
aging hardware, and Apple PowerBook G4 FW800 (not sure about the  
FW800, it could be the one immediately following that model), I  
decided to install debian and then a WM such as LXDE, to better use  
the hardware.  I downloaded, burned, and verified the ppc netinst  
disk, and it does boot to a yaboot prompt. I then type 'install' and  
a white screen briefly flashes onto the screen.  Then I see the  
output of dmesg as the machine partially boots, it makes it up to  
locating/defining the vmalloc and ioremap memory addresses, but then  
it appears to halt.


I do not recieve any messages such as kernel panics, clock to NO Hz  
mode, or similar; if I leave the computer, it will remain in that  
state until I reboot it.  My assumption is that this is not a  
console, just a dmesg readout, but I cannot figure out what the  
keybinding is on the mac to get to any other consoles.  I should  
point out that the disk drive remains spun up, then spins down a few  
minutes later.  I know how to use the text installer, if only I  
could get to it.


What I have tried so far:
reset the SMU
reset the nvram
reset the entire non-volatile memory
use the video flag offered in yaboot
connect an external monitor -- yields a grey screen with what looks  
like an open firmware readout, defining memory ranges



Any help is greatly appreciated, it was suggested that I ask this  
issue on one of the IRC channels, but having never used those  
before, I figured I'd stick with the mailing list I knew.


Hi Michael,

First: try sending this to the debian-powerpc list.  You may get  
more answers there...


Second: I have a couple of G4 tower machines that work just fine, but  
unfortunately I don't have any powerbooks to try, so I can't be of  
direct help to you.  However, the answers to a few questions may make  
it easier to diagnose your problem.


1) What netinst image did you download?  Can you supply the URL and  
time/date of the .iso?  One way to get this: Mount the CD (on /mnt,  
for example) and look in the file /mnt/.disk/info.  It will give your  
enough to uniquely identify the version, time and date of creation of  
the .iso .


2) I doubt what you're seeing is just dmesg output.  Certainly, on my  
tower machines, it's the real console output -- at least up to the  
stage you are talking about as it hangs.


3) To switch virtual consoles, try various combinations of fn alt  
and the F# keys for #=[1..4] .  If that doesn't work, add the ctl,  
shift and cmd/apple keys into the mix in that order.


4) Try an external USB keyboard.

Hope this helps!

Rick



Re: PowerPC install stuck at dmesg

2012-08-15 Thread Rick Thomas


On Aug 15, 2012, at 8:25 AM, Michael Aldridge wrote:

On Wed, Aug 15, 2012 at 2:06 AM, Rick Thomas rbtho...@pobox.com  
wrote:



Resent-From: debian-user@lists.debian.org
From: Michael Aldridge aldridge@gmail.com
Date: August 14, 2012 6:05:29 PM PDT
To: debian-user@lists.debian.org
Subject: PowerPC install stuck at dmesg

After deciding that the official OS was becoming too slow for this  
aging hardware, and Apple PowerBook G4 FW800 (not sure about the  
FW800, it could be the one immediately following that model), I  
decided to install debian and then a WM such as LXDE, to better  
use the hardware.  I downloaded, burned, and verified the ppc  
netinst disk, and it does boot to a yaboot prompt. I then type  
'install' and a white screen briefly flashes onto the screen.   
Then I see the output of dmesg as the machine partially boots, it  
makes it up to locating/defining the vmalloc and ioremap memory  
addresses, but then it appears to halt.


I do not recieve any messages such as kernel panics, clock to NO  
Hz mode, or similar; if I leave the computer, it will remain in  
that state until I reboot it.  My assumption is that this is not a  
console, just a dmesg readout, but I cannot figure out what the  
keybinding is on the mac to get to any other consoles.  I should  
point out that the disk drive remains spun up, then spins down a  
few minutes later.  I know how to use the text installer, if only  
I could get to it.


What I have tried so far:
reset the SMU
reset the nvram
reset the entire non-volatile memory
use the video flag offered in yaboot
connect an external monitor -- yields a grey screen with what  
looks like an open firmware readout, defining memory ranges



Any help is greatly appreciated, it was suggested that I ask this  
issue on one of the IRC channels, but having never used those  
before, I figured I'd stick with the mailing list I knew.


Hi Michael,

First: try sending this to the debian-powerpc list.  You may get  
more answers there...


Second: I have a couple of G4 tower machines that work just fine,  
but unfortunately I don't have any powerbooks to try, so I can't be  
of direct help to you.  However, the answers to a few questions may  
make it easier to diagnose your problem.


1) What netinst image did you download?  Can you supply the URL and  
time/date of the .iso?  One way to get this: Mount the CD (on /mnt,  
for example) and look in the file /mnt/.disk/info.  It will give  
your enough to uniquely identify the version, time and date of  
creation of the .iso .


2) I doubt what you're seeing is just dmesg output.  Certainly, on  
my tower machines, it's the real console output -- at least up to  
the stage you are talking about as it hangs.


3) To switch virtual consoles, try various combinations of fn  
alt and the F# keys for #=[1..4] .  If that doesn't work, add the  
ctl, shift and cmd/apple keys into the mix in that order.


4) Try an external USB keyboard.

Hope this helps!

Rick

The iso was downloaded from the debian.org mirror (as near as I can  
tell at least), and it is the small cd image available by clicking  
on the power-pc link below the heading of small cds.  The iso was  
obtained and burned yesterday.


  I tried the key combinations you suggested, but none worked.  I  
also tried with an external keyboard, but that seemed as though it  
did not register keypresses.


any other ideas?


I need to know *exactly* which iso you downloaded and burned.  Please  
follow the instructions in part (1) of my reply.  With the data from  
the .../.disk/info file on the CD I can download the exact same iso  
and test it on one of my G4 tower machines.  That will let us know if  
it's specific to your laptop, or a generic problem with that  
particular iso.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/a617880c-0f4f-43ba-947b-1e990cba4...@pobox.com



Re: PowerPC install stuck at dmesg

2012-08-15 Thread Rick Thomas


On Aug 15, 2012, at 1:52 PM, Michael Aldridge wrote:

okay, I understand now; although, there is a slight problem with  
doing that, I have no other linux machines handy with disk drives.   
Is there a way of doing that from the mac terminal?




If you just put the CD in the CD drive with MacOS-X running, it should  
mount it.


In the terminal window type df it will show (among other things) a  
volume mounted on /Volumes/Debian...


Type cat /Volumes/Debian*/.disk/info (without the quotes)

Report what you see.

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/ee27110f-38df-4a1a-b8ce-ea60c8d9c...@pobox.com



Re: PowerPC install stuck at dmesg

2012-08-15 Thread Rick Thomas


On Aug 15, 2012, at 2:46 PM, Michael Aldridge wrote:

On Wed, Aug 15, 2012 at 4:37 PM, Rick Thomas rbtho...@pobox.com  
wrote:



On Aug 15, 2012, at 1:52 PM, Michael Aldridge wrote:

okay, I understand now; although, there is a slight problem with  
doing that, I have no other linux machines handy with disk  
drives.  Is there a way of doing that from the mac terminal?



If you just put the CD in the CD drive with MacOS-X running, it  
should mount it.


In the terminal window type df it will show (among other things)  
a volume mounted on /Volumes/Debian...


Type cat /Volumes/Debian*/.disk/info (without the quotes)

Report what you see.

Rick


Debian GNU/Linux 6.0.5 Squeeze- Official powerpc NETINST Binary -  
1 20120512-20:49


OK.  That says you are using the official stable/Squeeze netinst  
iso, available from



http://cdimage.debian.org/cdimage/release/6.0.5/powerpc/iso-cd/debian-6.0.5-powerpc-netinst.iso

This is the current version that has (presumably) been used by lots of  
folks since it was released last May.  So it's unlikely that the  
problem is in the ISO itself.


Have you checked that the CD is bit-for-bit the same as the iso?

I haven't personally tried this, but there is a help topic in the  
MacOS-X disk utility called Verifying files are copied correctly from  
a disk image that seems to tell you how to use checksums to tell if a  
CD was burned properly.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/d09fda20-3d74-4488-a206-a37f959db...@pobox.com



Re: Logging ISP Download Speed.

2012-08-21 Thread Rick Thomas


On Aug 21, 2012, at 6:53 AM, Camaleón wrote:


On Mon, 20 Aug 2012 13:37:43 -0700, Weaver wrote:



I regularly log 40-47Kb/s on updates.. Cheers,



And so do we all...  The problem here is not the network bandwidth,  
it's that some parts of the update process have to download a lot of  
small files (a few KiB each).  Each file involves a negotiation  
process that needs several round-trips and one or more file-directory  
lookups on the part of both the server and the client.  The round- 
trips may be on the order of hundreds of milliseconds, so the time to  
retrieve a 4 KiB file can be on the order of a half second or more.   
That translates to 8KiB/s for that particular file.  Sad, but it's a  
fact of life on a global-scale packet switched network.


Look at the reported speed when downloading a large package.  Here you  
have the opportunity to take full advantage of a big pipe and large  
windows on each end to fill the pipe.  Your limiting rate here is more  
likely to be the ability of the server to get your file off its disk  
at the same time as it's getting other files for other clients off the  
same disk.


For example, I find that getting security updates is much slower  
(factor of 4 or 5, often) than getting new packages from one of the  
big mirrors.  The security.debian.org server seems to be a  
bottleneck.  There's a design trade-off here -- between getting  
security stuff posted and available quickly (in favor of a single  
server or at most a small number of servers), and getting it out at  
high bandwidth (in favor of mirroring it to lots of servers with the  
attendant polling delays) the Debian folks have opted to get security  
stuff available quickly but at a lower bandwidth, and regular package  
updates available with some delay but at higher bandwidth.


Hope this helps to understand what you're seeing.

Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/7ab3d910-6448-4533-b9fd-a66cc57cb...@pobox.com



Re: IA64 or AMD64?

2012-09-23 Thread Rick Thomas

Stan,

Calling people names is no way to encourage them to use free software.

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/bb13d31f-28c7-47b1-b34c-3c121e74f...@pobox.com



Re: ntpd crashes.

2012-09-23 Thread Rick Thomas


On Sep 22, 2012, at 6:51 AM, Camaleón wrote:

Anyway, no NTP daemon should crash because of skewed time; one thing  
is

that it refushes to sync (which can be fine, and should log this fact
so the admin can make the proper measures) but a different thing is
completely killing the service.



Hi Camaleón!  A bit of NTP history:

That issue has been argued on the NTP developer mailing lists.   
Crashing the daemon is Dave Mills' way of telling the admin that  
something is badly broken here and needs to be fixed.  Several  
developers (myself included) disagreed with him at the time, but he  
was adamant on the subject.  So that's the way it is.


Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/d8b34071-ed17-429b-a6e9-0f602e37f...@pobox.com



Re: ntpd crashes.

2012-09-23 Thread Rick Thomas


On Sep 23, 2012, at 6:13 AM, David L. Craig wrote:


On 12Sep23:0208-0700, Rick Thomas wrote:


On Sep 22, 2012, at 6:51 AM, Camaleón wrote:


Anyway, no NTP daemon should crash because of skewed time;
one thing is that it refushes to sync (which can be fine,
and should log this fact so the admin can make the proper
measures) but a different thing is completely killing the
service.


That issue has been argued on the NTP developer mailing lists.
Crashing the daemon is Dave Mills' way of telling the admin
that something is badly broken here and needs to be fixed.
Several developers (myself included) disagreed with him at the
time, but he was adamant on the subject.  So that's the way it
is.


There must be at least one patch available and maintained
that can be applied to modify the official distribution's
behavior if multiple developers disagree with this
behavior.  Where should one look?



The final outcome was that -- some years later -- the -g option was  
added to ntpd. Quoting from man 8 ntpd:



 -g Normally,  ntpd  exits  with a message to the system log if
the offset exceeds the panic threshold, which is 1000 s  by
default.   This  option  allows  the  time to be set to any
value without restriction; however, this  can  happen  only
once.   If  the threshold is exceeded after that, ntpd will
exit with a message to the system log.  This option can  be
used with the -q and -x options.


This was added to allow closing out support for ntpdate, but it also  
satisfied most of the developers who felt that crashing was an  
ungraceful way of delivering a message.


It works for me.

Rick



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/d236f7c7-3f91-403b-a854-c70f22c7e...@pobox.com



Re: apache2's handling of IP version 6

2012-10-04 Thread Rick Thomas


On Oct 3, 2012, at 8:40 PM, Satoru Otsubo wrote:



But the phenomena are same, that is,
When booting my PC, apache2 failed to start.
And when I executed the following:
# /etc/init.d/apache2 restart
apache2 started successfully with the dual stack.

Why this phenomena happens ?



Is the apache2 daemon starting before the ipv6 part of the network  
configuration is completely up?


Try putting ipv6 in your /etc/modules file...

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/edf66603-9c79-4cfd-bd22-8379bbe5e...@pobox.com



Re: Swap space not used

2012-05-02 Thread Rick Thomas


Another use for a large swap partition is if you want to put /tmp into 
tmpfs.


Whether doing so is a good thing(TM) is a religious debate that I 
don't want to stir up here.  But there are people who do it, and for 
them a large swap partition can be useful.


Rick

PS:  We haven't heard back from the OP yet.  I'm with the folks who 
think he probably forgot to put it in fstab, but we won't know until he 
replies.



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/39e8e5797ec4782d849f00461fd3f...@pobox.com



Re: Swap space not used

2012-05-03 Thread Rick Thomas



On Fri, 4 May 2012 02:40:16 +0800 (WST), Bret Busby wrote:

free:


:~# free
 total   used   free sharedbuffers cached
Mem:   80599647746808 313156  0  54708 
1352976

-/+ buffers/cache:63391241720840
Swap: 42860340  66296   42794044

A snaphot of the header of top gives


:~# top

top - 02:31:37 up 3 days, 44 min,  3 users,  load average: 0.09, 
0.17, 0.16

Tasks: 205 total,   2 running, 203 sleeping,   0 stopped,   0 zombie
Cpu(s): 24.3%us,  2.6%sy,  0.0%ni, 73.1%id,  0.0%wa,  0.0%hi,  
0.0%si, 0.0%st
Mem:   8059964k total,  7722984k used,   336980k free,55484k 
buffers
Swap: 42860340k total,66296k used, 42794044k free,  1353544k 
cached





Well.

According to the above:
You do, indeed, have 40GB of swap configured.
It appears to be using 66MB of that swap.

So swapping is not disabled, and you have plenty of swap space for any 
normal use.


The remaining question is, why do you periodically run out of memory 
and crash?  Or, put another way, what abnormal use is occurring to cause 
your crashes?


Are there any indications in syslog of what may be going on immediately 
before the crash?


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/6532d84107430b080540568c0c5f0...@pobox.com



Re: Password salt

2012-06-08 Thread Rick Thomas



On Fri, 08 Jun 2012 12:05:56 +0300, Lars Noodén wrote:

On 6/8/12 12:02 PM, Alberto Fuentes wrote:

On 06/08/2012 10:57 AM, Lars Noodén wrote:

The hashed password + salt is stored in /etc/shadow.  Where is the
actual password salt for Debian stored?



Yes, I understand that the salt is different and random for each
password, but how is it stored so that the hash can be used for
authentication?  Sorry for the dumb questions.

Regards,
/Lars


The salt is stored in the password entry in the shadow file along with 
the result of hash(salt+actualTextPassword).


The fact that the salt is public (quotes because /etc/shadow is 
readable only by root in most systems) does not detract from its 
usefulness.  Its purpose is to multiply the necessary size of the 
reverse-look-up table needed in a time-vs-space tradeoff brute-force 
attack.


It's all explained in this wikipedia article.
http://en.wikipedia.org/wiki/Salt_(cryptography)

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/b7bfe0e229b6aeef169e2e4b1de52...@pobox.com



what causes slogin -X to not generate a $DISPLAY variable on the server?

2012-06-08 Thread Rick Thomas


Recently, when I do slogin -X server (for one particular server, not 
all of them) the resulting session can't run any X11 utilities (e.g. 
xterm) because there is no DISPLAY variable in the environment.


It used to work.  I don't know what changed for sure.

Does anybody know what can cause this?

Thanks!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4fd1da63.1030...@pobox.com



Re: what causes slogin -X to not generate a $DISPLAY variable on the server?

2012-06-08 Thread Rick Thomas


On Jun 8, 2012, at 10:06 AM, Camaleón wrote:


On Fri, 08 Jun 2012 03:56:35 -0700, Rick Thomas wrote:

Recently, when I do slogin -X server (for one particular server,  
not

all of them) the resulting session can't run any X11 utilities (e.g.
xterm) because there is no DISPLAY variable in the environment.

It used to work.  I don't know what changed for sure.

Does anybody know what can cause this?


Try to run slogin with extra verbosity on, e.g.:

slogin -X user@server -vvv


Thanks for the suggestion.

The client is a Mac G5 running OS-X Leopard.  The server is a Mac G4  
running Debian Squeeze.  It's not specific to this particular client.   
I get the same problem from a client running Debian Squeeze.


Here's the output.  I see it requesting X11 forwarding (near the end)  
but I don't see anything specifically saying it was granted.  Nor do I  
see it being specifically refused.  Fascinating...


Rick

PS:  I recently ran aptitude update  aptitude upgrade on this  
server and it picked up a couple of months worth of updates.  I don't  
*think* I had this problem before then...




bigal:~ rbthomas$ slogin -X -vvv macs
OpenSSH_5.2p1, OpenSSL 0.9.7l 28 Sep 2006
debug1: Reading configuration data /Users/rbthomas/.ssh/config
debug1: Applying options for *
debug1: Reading configuration data /etc/ssh_config
debug2: ssh_connect: needpriv 0
debug1: Connecting to macs [192.168.1.119] port 22.
debug1: Connection established.
debug1: identity file /Users/rbthomas/.ssh/identity type -1
debug3: Not a RSA1 key file /Users/rbthomas/.ssh/id_rsa.
debug2: key_type_from_name: unknown key type '-BEGIN'
debug3: key_read: missing keytype
debug2: key_type_from_name: unknown key type 'Proc-Type:'
debug3: key_read: missing keytype
debug2: key_type_from_name: unknown key type 'DEK-Info:'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug2: key_type_from_name: unknown key type '-END'
debug3: key_read: missing keytype
debug1: identity file /Users/rbthomas/.ssh/id_rsa type 1
debug1: identity file /Users/rbthomas/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version  
OpenSSH_5.5p1 Debian-6+squeeze2

debug1: match: OpenSSH_5.5p1 Debian-6+squeeze2 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_5.2
debug2: fd 3 setting O_NONBLOCK
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: diffie-hellman-group-exchange- 
sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14- 
sha1,diffie-hellman-group1-sha1

debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256- 
ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128- 
cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-...@lysator.liu.se
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256- 
ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128- 
cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-...@lysator.liu.se
debug2: kex_parse_kexinit: hmac-md5,hmac- 
sha1,umac...@openssh.com,hmac-ripemd160,hmac- 
ripemd...@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac- 
sha1,umac...@openssh.com,hmac-ripemd160,hmac- 
ripemd...@openssh.com,hmac-sha1-96,hmac-md5-96

debug2: kex_parse_kexinit: none,z...@openssh.com,zlib
debug2: kex_parse_kexinit: none,z...@openssh.com,zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: kex_parse_kexinit: diffie-hellman-group-exchange- 
sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14- 
sha1,diffie-hellman-group1-sha1

debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256- 
ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128- 
cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-...@lysator.liu.se
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256- 
ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128- 
cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-...@lysator.liu.se
debug2: kex_parse_kexinit: hmac-md5,hmac- 
sha1,umac...@openssh.com,hmac-ripemd160,hmac- 
ripemd...@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac- 
sha1,umac...@openssh.com,hmac-ripemd160,hmac- 
ripemd...@openssh.com,hmac-sha1-96,hmac-md5-96

debug2: kex_parse_kexinit: none,z...@openssh.com
debug2: kex_parse_kexinit: none,z...@openssh.com
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2

Re: what causes slogin -X to not generate a $DISPLAY variable on the server?

2012-06-08 Thread Rick Thomas


On Jun 8, 2012, at 11:48 AM, Rick Thomas wrote:

Here's the output.  I see it requesting X11 forwarding (near the  
end) but I don't see anything specifically saying it was granted.   
Nor do I see it being specifically refused.  Fascinating...


FWIW, I tried the same 'slogin -vvv -X' to a server for which it works  
properly (I get a valid $DISPLAY on that server) and the relevant  
portions of the output were identical between the two servers.


Curiouser and curiouser!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/130204e6-555b-4703-a30d-80ed11840...@pobox.com



Re: /tmp is too small

2012-06-11 Thread Rick Thomas


On Jun 7, 2012, at 6:48 AM, Hendrik Boom wrote:

Or alternatively, how can I enlarge the tmpfs?  I need it enlarged  
from
anout 200M to about 2G for this week's project.  Yes, that's a lot  
bigger

than my RAM.


Increase your swap to 4GB -- even if you plan never to swap.  The  
space will be available to act as backing store for tmpfs.


I *think* the algorithm for setting the size of tmpfs is one half of  
RAM + SWAP.  Hence the 4GB.  If that doesn't work, you can set the  
size explicitly in /etc/fstab.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/ac4f5050-fe33-4878-8821-dfaeaad39...@pobox.com



Re: what causes slogin -X to not generate a $DISPLAY variable on the server?

2012-06-12 Thread Rick Thomas


On Jun 9, 2012, at 3:31 AM, Camaleón wrote:

Given that you are login on your own computers you can try with -Y  
flag

(untrusted X11 forwarding) and see how it goes.

Another test you can run is by creating a new user and launching
slogin -X -vvv macs xterm session from there.



Thanks for the help...

Neither the -Y option, nor trying a brand-new user made any difference.

Any more suggestions?  I'm still puzzled by this one!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/b8a05aa3-5828-4167-b2ed-b5b9b8b74...@pobox.com



Re: what causes slogin -X to not generate a $DISPLAY variable on the server?

2012-06-12 Thread Rick Thomas


On Jun 12, 2012, at 1:43 PM, Camaleón wrote:


On Tue, 12 Jun 2012 01:03:24 -0700, Rick Thomas wrote:


On Jun 9, 2012, at 3:31 AM, Camaleón wrote:


Given that you are login on your own computers you can try with -Y
flag
(untrusted X11 forwarding) and see how it goes.

Another test you can run is by creating a new user and launching
slogin -X -vvv macs xterm session from there.



Thanks for the help...

Neither the -Y option, nor trying a brand-new user made any  
difference.


And with both options, are you still getting the same log entries?


Any more suggestions?  I'm still puzzled by this one!


Yup, it's not normal that it works from some clients but not for  
others.


Lets see, server's the same, is client what changes... mmm, you can
compare the client openssh versions and look for any difference here  
and
you can also try to run sshd (the server part) with debug mode  
turned on,

there can be also something of interest here...

Besides... once you login, can you manually set the display  
environment

variable fine and run xterm or it also fails?


I think I haven't been clear.

First, some definitions:
   client = the machine I type slogin -X server on.
   sever  = the machine running sshd to which the above slogin  
connects.


Server is running Debian Squeeze powerpc (there are actually two such  
machines, but the results are the same for both).  Client is (actually  
a number of machines) running MacOS-X Leopard, MacOS-X Snow-Leopard,  
Debian Squeeze-i386 and Deebian Squeeze armel.


Prior to running the recent full-upgrade on the servers, I was able to  
do slogin -X from any and all of the clients and get an X session  
with a defined DISPLAY variable in the env (on the servers).  I  
could, for example, start up an xterm on the servers from such a  
session.


After running full-upgrade on the servers (they had been out of action  
for a couple of months, so it was a fairly large upgrade -- which  
makes diagnosing the problem harder...) when I did slogin -X from  
any of the clients, the resulting session had no DISPLAY variable in  
its env.  Moreover, defining DISPLAY=localhost:10.0 ; export DISPLAY  
did not help.  I get xterm Xt error: Can't open display: localhost: 
10.0 error-message.


I tried creating a new account on one of the servers, with a bare- 
bones home directory (nothing X related in it) and doing slogin -X  
newuser@server didn't change anything.  Same with slogin -Y server.


The exact output of slogin -vvv -X server  varies from one client to  
another, but they all mac clients have some variation on



debug1: channel 0: new [client-session]
debug3: ssh_session2_open: channel_new: 0
debug2: channel 0: send open
debug1: Requesting no-more-sessi...@openssh.com
debug1: Entering interactive session.
debug2: callback start
debug2: x11_get_proto: /usr/X11R6/bin/xauth -f /tmp/ssh-6LuZsOhrh3/ 
xauthfile generate /tmp/launch-Gk6NLm/:0 MIT-MAGIC-COOKIE-1  
untrusted timeout 1200 2/dev/null
debug2: x11_get_proto: /usr/X11R6/bin/xauth -f /tmp/ssh-6LuZsOhrh3/ 
xauthfile list /tmp/launch-Gk6NLm/:0 2/dev/null

debug1: Requesting X11 forwarding with authentication spoofing.
debug2: channel 0: request x11-req confirm 0
debug2: client_session2_setup: id 0
debug2: channel 0: request pty-req confirm 1
debug2: channel 0: request shell confirm 1
debug2: fd 3 setting TCP_NODELAY
debug2: callback done
debug2: channel 0: open confirm rwindow 0 rmax 32768
debug2: channel_input_status_confirm: type 99 id 0
debug2: PTY allocation request accepted on channel 0
debug2: channel 0: rcvd adjust 2097152
debug2: channel_input_status_confirm: type 99 id 0
debug2: shell request accepted on channel 0



and all Debian clients have some variation on:


debug3: ssh_session2_open: channel_new: 0
debug2: channel 0: send open
debug1: Requesting no-more-sessi...@openssh.com
debug1: Entering interactive session.
debug2: callback start
debug2: x11_get_proto: /usr/bin/xauth  list unix:10.0 2/dev/null
debug1: Requesting X11 forwarding with authentication spoofing.
debug2: channel 0: request x11-req confirm 0
debug2: client_session2_setup: id 0
debug2: channel 0: request pty-req confirm 1
debug1: Sending environment.
debug3: Ignored env TERM
debug3: Ignored env SHELL
debug3: Ignored env XDG_SESSION_COOKIE
debug3: Ignored env SSH_CLIENT
debug3: Ignored env SSH_TTY
debug3: Ignored env USER
debug3: Ignored env LS_COLORS
debug3: Ignored env MAIL
debug3: Ignored env PATH
debug3: Ignored env PWD
debug1: Sending env LANG = C
debug2: channel 0: request env confirm 0
debug3: Ignored env SHLVL
debug3: Ignored env HOME
debug3: Ignored env LOGNAME
debug3: Ignored env SSH_CONNECTION
debug3: Ignored env DISPLAY
debug3: Ignored env _
debug2: channel 0: request shell confirm 1
debug2: fd 3 setting TCP_NODELAY
debug2: callback done
debug2: channel 0: open confirm rwindow 0 rmax 32768
debug2: channel_input_status_confirm: type 99 id 0
debug2: PTY allocation request accepted on channel 0
debug2: channel 0: rcvd adjust

Re: what causes slogin -X to not generate a $DISPLAY variable on the server?

2012-06-12 Thread Rick Thomas


On Jun 12, 2012, at 1:43 PM, Camaleón wrote:


... mmm, you can
compare the ... openssh versions


That got me thinking...

Looking at a third server (the same i386 Debian Squeeze machine I was  
using as a client in the previous reply) I *can* slogin -X and get  
an X session.


On both the successful server and the failing server, the version of  
openssh-server is 1:5.5p1-6+squeeze2.


So  that's no help, either.

Very curious...

Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1e79e52e-877c-414e-a4a5-a6cc07226...@pobox.com



Re: what causes slogin -X to not generate a $DISPLAY variable on the server?

2012-06-13 Thread Rick Thomas


On Jun 12, 2012, at 9:44 PM, Erwan David wrote:


On 13/06/12 04:12, Rick Thomas wrote:


On Jun 12, 2012, at 1:43 PM, Camaleón wrote:


... mmm, you can
compare the ... openssh versions


That got me thinking...

Looking at a third server (the same i386 Debian Squeeze machine I was
using as a client in the previous reply) I *can* slogin -X and  
get

an X session.

On both the successful server and the failing server, the version of
openssh-server is 1:5.5p1-6+squeeze2.

So  that's no help, either.

Very curious...

Rick



Is xauth installed on the server ?



Yes.  As noted in the previous message -- everything worked fine until  
the upgrade.
The versions of xauth on the working server and the non-working ones  
are identical:

1:1.0.4-1

Are there any other packages I should check?  I don't know much about  
the guts of X11, so any suggestions will be welcome!




You might also launch the ssh server with verbose log option to get  
its

version of the transaction.


That's the next step.

Thanks for the help!

Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/30efd288-eddf-4d6d-9d12-8578c1f65...@pobox.com



Re: what causes slogin -X to not generate a $DISPLAY variable on the server?

2012-06-13 Thread Rick Thomas


On Jun 13, 2012, at 7:23 AM, Camaleón wrote:

Also, while searching for more information on this issue at Google  
I've

found many posts¹, articles and blogs² pointing to a
problem with X forwarding and ipv6 though I'm not sure this is going  
to

be the case for this but it can be something to consider :-?

¹http://ubuntuforums.org/showthread.php?t=1649657
²http://hang4r.blogspot.com.es/2011/08/enabling-remote-x11-forwarding-over-ssh.html


Which says that to overcome a bug that gets tickled when you disable  
IPv6, you have to add

AddressFamily inet
to the server's /etc/ssh/sshd_config file.


Camaleón, you are awesome!  (I'll bet you knew that...   -: )

I *never* would have guessed that disabling IPv6 was causing my  
problem.  And if I did, I *really never* would have guessed that work- 
around!


For reasons that need not concern us here, I need to disable IPv6 on  
the portion of my lan containing the two servers in question.  I never  
guessed it would cause problems for X11 over ssh.  I will file a bug  
report ASAP against openssh-server.  I've spent over a week tracking  
this one down.


And the awesome part is that you, Camaleón, didn't know that i had  
disabled IPv6, but you *still* found the necessary magic.  You are a  
wonderful asset to the Debian-user community.  We are privileged to  
have you with us!


Thank you!

Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/69beecb8-1ba9-4dee-82ad-8652c4485...@pobox.com



Re: what causes slogin -X to not generate a $DISPLAY variable on the server?

2012-06-13 Thread Rick Thomas


On Jun 13, 2012, at 11:24 AM, Rick Thomas wrote:


I will file a bug report ASAP against openssh-server.



It turns out this is bug #422327, which dates all the way back to  
2007, and nothing has been done about it.  The bug report even  
suggested a patch (well, not exactly a patch with actual code changes,  
but at least a design that could be used to generate code changes)


Sigh!

If I get some time, I'll see if I can work up a patch...

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/0cd44ce5-ba6a-4f22-9684-c68721fdc...@pobox.com



[SOLVED] Re: what causes slogin -X to not generate a $DISPLAY variable on the server?

2012-06-14 Thread Rick Thomas


On Jun 13, 2012, at 11:24 AM, Rick Thomas wrote:


I will file a bug report ASAP against openssh-server.



It turns out this is bug #422327, which dates all the way back to  
2007, and nothing has been done about it.  The bug report even  
suggested a patch (well, not exactly a patch with actual code changes,  
but at least a design that could be used to generate code changes)


Sigh!

If I get some time, I'll see if I can work up a patch...

Rick




--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/8d241824-75a6-4a2c-8770-eeaa16239...@pobox.com



Re: netinst on old dell hardware

2012-06-20 Thread Rick Thomas


On Jun 20, 2012, at 1:07 PM, Paul E Condon wrote:


On 20120620_121804, Teemu Likonen wrote:

Paul E. Condon [2012-06-20 02:55:41 -0600] wrote:


On 20120620_081652, didier gaumet wrote:

Your CD, being from the lenny=stable era, probably attempts to
access stable release but it does not exists on an archive
repository. Replacing stable by lenny could do the trick


This is what must be happening. And I have no way to edit an iso  
image

to do the replacement, so I can't use the archive to get a working
debian installation on the box and then dist-upgrade to something  
more

modern.


Doesn't the expert install method allow editing sources.list?
(I'm not sure.)


It allows selecting a mirror from a long list of existing mirrors and
typing in the name of an unlisted mirror, but not editing a line in
sources.list format. In this case the built in name on the CD is
surely 'stable' and *not* 'lenny', as support or named releases was
not yet fully implemented back then. Didier reminded me of that. I
think this fact pretty is a show stopper for what I was hoping to
do. I am rethinking my goals and objectives today.


You can always use the Alt-F2 console to edit (I think nano is  
available) the sources.list file yourself after the choose-mirror step.


You may have to do it in /target/etc/apt as well as /etc/apt .

I haven't tried it myself, so let us know how/whether it works for you.

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/a6237fbc-e47b-42ea-9aa7-deb431b37...@pobox.com



Re: Very slow network with certain APs -- ipv6 problem?

2012-07-05 Thread Rick Thomas


On Jul 4, 2012, at 3:09 PM, Paul Zimmerman wrote:


Camaleón noela...@gmail.com wrote:

You mean you're still using ipv4 with no ipv6 support from the OS  
at all?


I am using an up-to-date install of Squeeze. There were several  
network


related updates when IPv6 was supposed to be activated. So I presume

this was an activation for Debian. Since then, certain wireless APs  
have
not worked properly. It claims to connect and get an IP address, but  
there
is almost no actual traffic. It can take 5 or 10 minutes to get a  
simple page
with mostly text and very few graphics. Yet, these same IPs are as  
fast as


ever when you connect with a Windows machine. Which leads me to  
suspect
that Windows automatically detects what the AP is using and adjusts,  
while

Linux does not.


There is a problem that sometimes occurs:

If the AP does not properly route IPv6 traffic, but does mistakenly  
advertise an IPv6 prefix, and some website has  records (IPv6  
addresses) in DNS, your browser may try to connect to the IPv6  
address, causing a long time-out.  Usually, it will give up and re-try  
the connection with IPv4, causing bursty behavior with successful IPv4  
traffic interspersed with long timeouts trying IPv6.


You can test for that by temporarily disabling IPv6 entirely on your  
client machine as described in the website Camaleón pointed to.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/474a3c2c-f46c-4086-ab38-4a14b1329...@pobox.com



Proposal for stage-1 secure boot Re: [POSTPONED] Re: installation with UEFI

2012-07-05 Thread Rick Thomas



The fundamental problem we must solve is allowing the *user* to  
securely choose which OS she wants to install.  Whether that OS  
follows thru and verifies all its parts is between the user and the  
person or group who provided the OS (could be the user, herself, of  
course!)


We need a stage-1 boot loader, signed by somebody trusted (FSF?  
SFLC?) with a key that will be recognized by the SecureBoot BIOS.   
This is an un-changable binary blob, so it can't be GPL (is this a  
problem?) but at least we can publish the source code, and anybody who  
wants to can verify that the blob is the result of compiling that  
source code.  Whoever did the original signing can publish signed  
updated blobs in the future if changes become necessary or desirable.   
Hopefully, the limited functionality in the original version will be  
enough to get the job done so changes will be infrequent to non- 
existent.


The stage-1 boot loader blob has the following functionality:

1) It can ask the user to enter a password, which it hashes into a the  
private half of a cryptographic signing key.  Without the user's  
password, the private half of the key is unknowable.  The public half  
of the key is, of course, freely available and should be cached in  
some kind of write-once/read-many memory if such is available (You can  
buy USB keys with a physical write-enable switch.  Would something  
like that be good for this application? Does the UEFI API have a way  
of stashing such a thing along with its keys?)


2) It can keep a cache of (location, description, signature) triplets  
for stage-2 bootloaders in some place where it can be retrieved  
without further user intervention.  Would the boot block be a good  
place?  The cache will be publicly readable -- and writable -- so it  
needs to be signed by the private part of the user's key, and  
verifiable with the public part of that key.


3) When it's loaded by the UEFI bios, it reads the cache and verifies  
the signature using the public part of the user's key.  Based on  
keyboard input (or lack thereof, after a short timeout) it picks one  
entry from the cache and loads that stage-2 boot loader, verifies its  
signature, and pass control to it.


4) Other things the user can do if she has access to the keyboard  
before the time-out expires:


a) Request a menu of, and choose one of, the available stage-2  
boot loaders, taken from the description part of the cached triplets.


b) Designate one from the above menu as the default for future  
boots if the timeout expires.


c) Request to add a new entry to the stage-2 boot loaders cache,  
providing the location and description.  It then requests and verifies  
the user's password and uses it to compute the signature of the new  
stage-2, then sign and write the modified cache.


d) Request deletion of a cache entry.   It then requests and  
verifies the user's password and uses it to sign and write the  
modified cache.


e) Request to change her password, providing the old password as  
verification of her right to do so.


f) Request to chain-load another stage-1 boot loader from  
removable media.  This program would need to be signed with one of the  
keys known to the SecureBoot BIOS, or, if not, have explicit  
permission to be loaded from the user at the keyboard.  This is the  
rat-hole we provide for installation of new OS's.


Would this work?  What have I missed?


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/c4ae1b33-4f28-4ac9-856b-4c82171e6...@pobox.com



Re: partitions - primary vs logical and bootability

2012-11-10 Thread Rick Thomas


On Nov 10, 2012, at 2:09 PM, Charles Blair wrote:


  I am trying to set up a dual-boot windows 7 / wheezy.

  The installer shows me 3 primary ntfs partitions,
presumably for windows7.

  I have been able to resize to create freespace.
As I understand it, / must be bootable, which seems
to mean it must be a primary partition.  However,
when I do that, the installer shows the remaining
free space as unusable, and won't let me create
logical partitions for swap, /usr, etc.

  I'm sure I'm overlooking something basic.  Thanks
for your patient help.


You only get 4 primary partitions.  If you want any Logical  
partitions, you have to have to make one of the primary partitions an  
Extended partition, and put your Logical partitions inside that  
Extended partition.


So, in effect, your three Primary NTFS partitions have used up all the  
primary partitions you can have if you want to use Logical partitions.


As I see it, you have two options:

1) Make your Linux partition an everything partition (root, boot,  
usr, var, home, and so on...), in Primary slot #4.


2) Backup one of your NTFS partitions (say, #3); put your Linux Root  
in the now-free Primary partition (#3) resized as necessary; move the  
remaining two NTFS Primary partitions around (if necessary) so you can  
consolidate all your free-space into one Extended partition (#4); then  
create a Logical partition (#5), inside the Extended (free-space)  
partition, to hold the backed-up contents of the old #3; and one or  
more Logical partitions (#6, #7, #8) to hold the rest of your Linux  
stuff.



Or... You could leave your old Windows disk alone, buy a new disk and  
put Linux on it.  Then you can switch between booting Linux and  
Windows by using the boot disk chooser of the BIOS.  There was a  
recent thread in Debian-Users on this topic -- I recommend you read it  
before you start.


For more on the topic of Logical/Extended/Primary partitions, see  
WikiPedia at


  http://en.wikipedia.org/wiki/Disk_partitioning
or
  http://en.wikipedia.org/wiki/Master_boot_record

and the man page for fdisk (it may be called fdisk.distrib if you  
have gnu-fdisk installed) which is available on the web at (among  
other places) http://linux.die.net/man/8/fdisk .



Enjoy!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/57b29786-4867-439a-b67a-9b923433c...@pobox.com



Re: partitions - primary vs logical and bootability

2012-11-11 Thread Rick Thomas


On Nov 10, 2012, at 9:49 PM, Charles Blair wrote:


  Thank you very much for your reply.  I think I will post
a restatement of the question.  I would have thought that
a dual boot of windows 7 and debian would be a common
enough problem that there should be something about it
somewhere, perhaps in the installer instructions.



1) Make your Linux partition an everything partition (root, boot,
usr, var, home, and so on...), in Primary slot #4.


  Just to get more detail on how this would work:
I would create a primary partition using all the available
free space, described as / and bootable?  This would work
even though there isn't swap space?

  I must admit I'm afraid to tinker with the windows section,
so that your other idea of backing up one of the windows partitions
(don't even know how I would do that) and doing things so I
have only two primary winows partitions and
have one primary debian partiton for / (bootable) and one extended
partion for swap, /home, etc.  Actually I must be misunderstanding
your idea, since I think swap is somehow incompatible type from /,
/home, etc.


If you've got enough RAM, you don't absolutely have to have a swap  
partition.  If you're short on RAM you can make a swap file in the  
root directory and use it.  E.g.:

dd if=/dev/zero of=/swap bs=1M count=512
mkswap /swap
swapon /swap

To back up the Windows partition, you probably want an external (e.g.  
USB) hard disk to put the backup image onto.


Take a look at the clonezilla utility as described at
http://www.linuxjournal.com/content/clonezilla-live
for ideas.

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/28ccce93-8610-4b98-a938-1a6c56c4a...@pobox.com



Re: partitions - primary vs logical and bootability

2012-11-11 Thread Rick Thomas

Hi Charles,

On Nov 11, 2012, at 4:56 AM, Charles Blair wrote:


  Thanks again.  I wish these issues had been
addressed either by the installer itself or by the
installation instructions.  Tnere must be
many other unsophisticated users that
have encountered this problem.


You're welcome, of course.  That's what these lists are for.

If you succeed in your experiments, one thing you can do to help the  
next person is: write-up your experiences.  If you follow the basic  
format of the installation manual, I think there might be somebody  
here who would be willing to help you to get it into shape to include  
as an appendix to the manual.


A good place to start is the Debian wiki at
http://wiki.debian.org/

If you decide to start a wiki page, let us know the URL so we can  
contribute our thoughts too.


That's what open source is all about, after all -- share and share  
alike.  Share the effort; share the benefits.


Enjoy!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/b2e189fe-f58c-4849-9e07-eddc86f33...@pobox.com



Installing Lenny on PowerMac?

2012-11-18 Thread Rick Thomas


I have a temporary need to install Lenny on a PowerMac G4 so I can run  
some tests on a fresh installation for a user who is unable (for  
various reasons) to upgrade to Squeeze at this time.


When I run the netinst installer CD all seems well until it wants to  
setup sources.list.  Then it dies claiming to be unable to determine  
code-name for release. (I don't remember the exact wording of the  
error message, but the intent is clear.)


Is there a work-around for this that would allow me to do my testing?

Would I have better luck with a DVD, where I wouldn't need to get  
anything from the network mirrors until after the installation is  
complete?


Thanks!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/49400222-4490-45b2-ad83-382bb0d5b...@pobox.com



Re: need lenny.

2012-12-08 Thread Rick Thomas


On Dec 8, 2012, at 5:14 AM, Andrei POPESCU wrote:


On Sb, 08 dec 12, 12:46:23, Mauro wrote:

W: Failed to fetch
http://archive.debian.org/debian/dists/lenny/main/binary-amd64/Packages
302 Moved [IP: 193.62.202.28 80]


Hmm, your apt is trying to download the uncompressed Packages file,
which is actually not available (anymore?) -- even though mentioned in
the Release file -- and doesn't fall back to the compressed Packages
files.

You should check your apt configurations for any overrides.

Kind regards,
Andrei
--
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic



Have you tried aptitude instead of apt-get?

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/6b39640c-2875-457c-82f7-44422c6a2...@pobox.com



Re: need lenny.

2012-12-08 Thread Rick Thomas


On Dec 8, 2012, at 7:32 AM, Mauro wrote:




Have you tried aptitude instead of apt-get?



yes, same error.


Just a guess, but take a look at backports and see if you can install  
a more modern version of apt or aptitude.


FWIW My lenny box has aptitude version 0.4.11.11-1~lenny2.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/5f639e2d-1444-4b10-a0bb-6ceb2ace4...@pobox.com



Re: need lenny.

2012-12-08 Thread Rick Thomas


On Dec 8, 2012, at 9:00 AM, Mauro wrote:


On 8 December 2012 17:37, Rick Thomas rbtho...@pobox.com wrote:


On Dec 8, 2012, at 7:32 AM, Mauro wrote:




Have you tried aptitude instead of apt-get?



yes, same error.



Just a guess, but take a look at backports and see if you can  
install a more

modern version of apt or aptitude.

FWIW My lenny box has aptitude version 0.4.11.11-1~lenny2.


now works, perhaps a problem of my dns provider.


Great!  I wish we knew why  :-/

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/c1623481-236f-4430-b108-affeec6ba...@pobox.com



Anybody have a chromebook? Can it run Debian?

2013-02-01 Thread Rick Thomas


I was googling for an inexpensive laptop for a friend and came across  
the chromebook C710 from Acer:

http://www.staples.com/Acer-C710-2847-116-Chromebook/product_125265
or
http://www.newegg.com/Product/Product.aspx?Item=N82E16834215914

• Intel Celeron 847 1.1GHz
• 2GB Memory (expandable to 4GB) 320GB HDD (5400RPM)
• 11.6 HD Widescreen CineCrystal™ LED-backlit LCD
• Wi-fi 802.11a/b/g/n
• Google Chome OS

Price $200.

Can't beat the price!

Does anybody have any experience with this device?  Can I put Debian  
on it?  How about other flavors of Linux?  Failing that, what do you  
think of Chrome-OS?  Can it run Libre Office?



Thanks!

Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4678b2f4-32b5-4ecc-9a4e-06befe045...@pobox.com



Re: Anybody have a chromebook? Can it run Debian?

2013-02-02 Thread Rick Thomas

Thanks!

For myself those look great.  But she is *extremely* price conscious.

Rick

On Feb 2, 2013, at 3:28 AM, Weaver wrote:

Why not go for hardware that is specifically designed for Linux and  
remove

any potential problems completely?

https://zareason.com/shop/Laptops/



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/2d3ba284-43c4-4883-957d-605adb87e...@pobox.com



Re: Anybody have a chromebook? Can it run Debian?

2013-02-02 Thread Rick Thomas


On Feb 2, 2013, at 1:30 AM, Lars Noodén wrote:

Also beware of the screen resolution.  It might not be what you  
think it

is.  I notice it is missing from the stats above.




Staples technical details section says this:

  HD Widescreen CineCrystal™ LED-backlit LCD Display (1366 x 768)
  Intel HD Graphics chip
  128MB Video Graphics Memory

So it's not a huge display (either in physical size or in pixel real- 
estate) but for the price, it's acceptable.


However, the reports of firmware problems, mentioned by others in this  
thread, are worrisome...


Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/d1d61e8e-af41-4562-bc09-fdd154231...@pobox.com



Re: Seeking advise on changing names of target in dm-crypt

2013-02-19 Thread Rick Thomas


On Feb 19, 2013, at 12:10 PM, J.A. de Vries wrote:


On 2013-02-19 20:36, green wrote:


I use LUKS and cryptsetup encryption, but not for the root
filesystem. Probably fstab and crypttab are all that you need to
change.  Grub configuration is another possibility, but I am guessing
that you have a dedicated /boot partition and so no grub change is
necessary.


Yes, that's correct. /boot is the only non-encrypted partition I have.


I suggest that you make sure you have a live Linux CD/DVD (eg. grml)
(just in case), make the changes, and reboot.


That's always sound advise.

Thanks for your time. I think I'll dive into the deep and see what  
happens.


Grx HdV


Please give us a report when you're done.  I curious how it turns out!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4345591a-08e8-40cd-ae69-32f020d23...@pobox.com



Re: Keeping backups until storage runs short (deja-dup style) with command line tools?

2013-02-24 Thread Rick Thomas


On Feb 21, 2013, at 3:46 AM, Johannes Graumann wrote:


Hi,

deja-dup has an option to keep backups forever or until storage on  
the drive
backed up to runs short (at which point it starts deleting old  
backups).
Does someone have any pointers on how to copy that behavior using  
duplicity

and/or other CLI tools?

Cheers, Joh



Have you looked at the rsnapshot package?

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/22a1c6b2-750e-4fb1-a839-46933a4fe...@pobox.com



Re: Understanding versioning.

2011-11-08 Thread Rick Thomas


On Nov 8, 2011, at 2:07 AM, Sthu Deus wrote:


it seems to me to be weird having those epoches


If all software developers were well behaved and they all co- 
operated in their versioning, it would be weird to have epochs.  All  
versions, from all sources, would be monotonically increasing as a  
function of time.


But, as we know, software developers are an independent bunch of  
cowboys.  Sometimes, for reasons that seem good and reasonable to the  
individual upstream developer involved, software version time seems to  
run backwards.  Epochs are there so the rest of us (who aren't  
upstream developers) can pretend it didn't do that -- when the  
developers glitch their versions, we just move into a different epoch  
and go on about our lives.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/edf1249b-a1d0-429f-abc5-524dd9621...@pobox.com



Why do I have wpasupplicant installed if I don't have a wifi interface?

2011-11-14 Thread Rick Thomas


Can anybody tell me why I have wpasupplicant installed, even though I  
don't have a wifi interface on this machine?


The machine has a single 10/100 twisted pair ethernet interface which  
is configured static in the /etc/network/interfaces file.  It does  
not have any wifi hardware, and (consequently?) no wifi mentioned in  
interfaces...


If I try to deinstall wpasuplicant, it then wants to also remove  
network-manager and network-manager-gnome.  Should I just let it?   
What would be the consequences if I do?


Thanks!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/468f2377-d835-4541-b170-f6d34513b...@pobox.com



Re: Why do I have wpasupplicant installed if I don't have a wifi interface?

2011-11-14 Thread Rick Thomas


On Nov 14, 2011, at 8:35 AM, Henrique de Moraes Holschuh wrote:


If you use a static /etc/network/interfaces, you're likelly to be much
better off without that desktop fluff.  IMHO, you should just get  
rid of
it, at most you will lose the dekstop applets that show ethernet  
state.




Thanks!

I did. and it works fine!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/23554d82-8dfb-4850-8583-0635f1b82...@pobox.com



Re: Full Disk Encryption

2011-11-27 Thread Rick Thomas


On Nov 26, 2011, at 2:00 AM, Bob Proulx wrote:


The way I like to set up the system is to set up /boot in its own
partition on /dev/sda1.  Then set up the rest of the disk in /dev/sda5
as a logical partition for an encrypted partition.  Then use that
encrypted partition for one large LVM volume.  This includes swap.
You definitely want to encrypt swap along with everything else.


Unless you are concerned about growing swap at some later date, you  
should leave swap out of the LVM and encrypt it separately -- with a  
*random* key.


I.e. something like this in /etc/crypttab:

# Swap
hda4_crypt /dev/hda4 /dev/urandom cipher=aes-cbc- 
essiv:sha256,size=256,swap



You don't have to provide an extra key at boot time for swap (the  
system generates it automatically).


This way, when the system is turned off, your swap becomes  
undecipherable.


If you put swap on the LVM, its contents survive a reboot, and  
therefor can be read by anyone who has the key to the LVM.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/a61fcd91-efd5-4d8c-b7e3-854596c1c...@pobox.com



Re: Full Disk Encryption

2011-11-28 Thread Rick Thomas


On Nov 28, 2011, at 8:48 AM, J. Bakshi wrote:


On Mon, 28 Nov 2011 13:15:59 + (UTC)
Virgo Pärna virgo.pa...@mail.ee wrote:

On Mon, 28 Nov 2011 00:59:34 -0500, Rick Thomas  
rbtho...@pobox.com wrote:


Unless you are concerned about growing swap at some later date, you
should leave swap out of the LVM and encrypt it separately -- with a
*random* key.



   I think, that this would not work, if one wants to use  
hibernation. And

that could be case on laptop.



Good point I am already using both suspend and hibernation and  
expect the

same after disk FDE. Thanks for pointing 


Yes... That's something I hadn't thought about.  I've only used it for  
an always-on server.


Another point about using a separate swap vs including swap on the  
encrypted LVM:  On a server,  the LVM will almost certainly be on a  
RAID.  There's no point in putting swap on RAID.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1036be0b-9635-4cf7-a147-e4e391c8b...@pobox.com



address and port translation (NAT) no longer required in IPv6 -- but...

2011-12-26 Thread Rick Thomas


On Dec 26, 2011, at 3:44 PM, Andrei Popescu wrote:


On Lu, 26 dec 11, 21:39:27, Victor Nitu wrote:

On 12/26/2011 08:00 PM, Andrei Popescu wrote:


This is one reason I welcome the switch to IPv6.


Just out of curiosity: can you be more specific on this issue?  
(please

excuse me for being a bit off-topic).


As far as I understand the main benefit and driver for adopting IPv6  
is

that there are enough addresses for every host in your lan to have its
own public IP address, which completely eliminates (the need for)
masquerading and (D)NAT.

Hope this explains,
Andrei


It eliminates the need for masquerading and port translation, but it  
does not eliminate the need for a proper firewall.


An (IPv4) router/NAT-box has the unavoidable side-effect of not  
allowing any incoming (Internet - LAN) connections unless they have  
been explicitly programmed by the user. Most people consider this to  
be a good thing.


That's not automatic anymore with IPv6.  But it easily can (and  
should, by default) be programmed into any IPv6 router.


(Sigh!) ;-\ Now if somebody would just manufacture and sell an  
inexpensive IPv6-capable SOHO router... /-;  (sigh!)


Hope that explains (a little more),
Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/f6bb41a2-9f3c-457a-a53e-d2c7121ef...@pobox.com



Re: address and port translation (NAT) no longer required in IPv6 -- but...

2011-12-29 Thread Rick Thomas

Thanks!

Can you provide some specific model numbers?  I'll need a box that can  
do IPv6 tunneling over IPv4, since none of the ISP's I have access to  
have native IPv6 or any plans for it in the foreseeable future.  Of  
course, it will also need to be able to do basic stateful fire-wall  
stuff, and the IPv4 side will need to do NAT and port translation.


Thanks!

Rick


On Dec 27, 2011, at 6:40 AM, Scott Ferguson wrote:


Most of the manufacturers already do (or don't you consider sub-$100AU
cheap?)
Apple, Allied Telesis,  AVM, Buffalo Tech, Cisco, D-Link, Funkwerk  
E.C.,
*cough* Juniper Networks, Linksys, Sonicwall, Trendnet. All sell  
cheap

home/office routers. That's an incomplete list - and I've not covered
enterprise solutions.



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4772ca0a-9302-4eb1-9c71-8661abf56...@pobox.com



problems with having two DHCP servers...

2012-01-05 Thread Rick Thomas

On 12/27/11 22:04, Scott Ferguson wrote:


It sounds like you are running two DHCP servers - in which case you
have four options (none of which involve preseeding).

If you have multiple DHCP servers the problem is *easily* fixed - please
tell me the make and model of the primary (router/firewall) DHCP server
and I'll give you instructions.


Hi Scott,

I'm not the OP, but I do have this problem.  When I try to do an install 
(wheezy) on a network with two DHCP servers, the installer's dhcp-client 
never seems to get an IP address -- even though the two servers are both 
responding and both giving the same IP address.


Both DHCP servers are dnsmasq.

When I kill off one of the servers temporarily, all goes well.

Is there a solution that isn't so drastic?

Thanks!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4f056cbc.3090...@pobox.com



Re: problems with having two DHCP servers...

2012-01-05 Thread Rick Thomas


A limited amount of redundancy is good.  If one goes down, the network  
can still limp along.


Anyway, that's the theory.

Rick

On Jan 5, 2012, at 10:07 AM, Osamu Aoki wrote:


I'm not the OP, but I do have this problem.  When I try to do an
install (wheezy) on a network with two DHCP servers, the installer's
dhcp-client never seems to get an IP address -- even though the two
servers are both responding and both giving the same IP address.


Then why have 2?



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/d73b70b2-c677-4de4-a722-3606ae535...@pobox.com



Re: problems with having two DHCP servers...

2012-01-05 Thread Rick Thomas


On Jan 5, 2012, at 1:40 PM, John A. Sullivan III wrote:


On Thu, 2012-01-05 at 12:57 -0500, Rick Thomas wrote:
A limited amount of redundancy is good.  If one goes down, the  
network

can still limp along.

Anyway, that's the theory.

Rick

On Jan 5, 2012, at 10:07 AM, Osamu Aoki wrote:


I'm not the OP, but I do have this problem.  When I try to do an
install (wheezy) on a network with two DHCP servers, the  
installer's

dhcp-client never seems to get an IP address -- even though the two
servers are both responding and both giving the same IP address.


Then why have 2?



The problem is when they are administering addresses in the same  
range.
I've not configured DHCP for a long time so maybe this is common now  
and

the problems have all been resolved but, in the past, if one wanted
redundancy, one would administer different ranges on the same subnet  
so

that there would be no conflicts.  Hope that helps - John


Yes, that does seem to fit.

The two servers have different ranges for their dynamic clients  
(i.e. transient laptops with no fixed IP address) but for the static  
clients (desktops with a fixed IP address) there is only one address,  
so both servers have to provide the same address.


So... when I do an install for a machine with an unknown Ethernet Mac  
address -- hence getting it's IP from one or another of the dynamic  
ranges -- all goes well.  It's only when I attempt to install a  
machine with a known Mac address (hence a single static IP) that I run  
into trouble.


Somehow, I would have thought it should be the other way round --  
conflicting responses would cause problems, not two responses that  
both say the same thing.  Sigh!  Just shows how much I know...


So is there a way to have both redundancy *and* reliable installs?

Thanks for any help,

Rick

PS: As others have noted, it seems to affect only the installer's DHCP  
client.  After the reboot, there's no problem -- with either static or  
dynamic IP...



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/cbe291f4-f733-4eed-9cb3-6d62732e1...@pobox.com



Re: problems with having two DHCP servers...

2012-01-05 Thread Rick Thomas

On 01/05/12 16:30, John A. Sullivan III wrote:

On Thu, 2012-01-05 at 15:55 -0500, Rick Thomas wrote:

On Jan 5, 2012, at 1:40 PM, John A. Sullivan III wrote:


On Thu, 2012-01-05 at 12:57 -0500, Rick Thomas wrote:

A limited amount of redundancy is good.  If one goes down, the
network
can still limp along.

Anyway, that's the theory.

Rick

On Jan 5, 2012, at 10:07 AM, Osamu Aoki wrote:


I'm not the OP, but I do have this problem.  When I try to do an
install (wheezy) on a network with two DHCP servers, the
installer's
dhcp-client never seems to get an IP address -- even though the two
servers are both responding and both giving the same IP address.

Then why have 2?



The problem is when they are administering addresses in the same
range.
I've not configured DHCP for a long time so maybe this is common now
and
the problems have all been resolved but, in the past, if one wanted
redundancy, one would administer different ranges on the same subnet
so
that there would be no conflicts.  Hope that helps - John

Yes, that does seem to fit.

The two servers have different ranges for their dynamic clients
(i.e. transient laptops with no fixed IP address) but for the static
clients (desktops with a fixed IP address) there is only one address,
so both servers have to provide the same address.

So... when I do an install for a machine with an unknown Ethernet Mac
address -- hence getting it's IP from one or another of the dynamic
ranges -- all goes well.  It's only when I attempt to install a
machine with a known Mac address (hence a single static IP) that I run
into trouble.

Somehow, I would have thought it should be the other way round --
conflicting responses would cause problems, not two responses that
both say the same thing.  Sigh!  Just shows how much I know...

So is there a way to have both redundancy *and* reliable installs?

Thanks for any help,

Rick

PS: As others have noted, it seems to affect only the installer's DHCP
client.  After the reboot, there's no problem -- with either static or
dynamic IP...


Hmm . . . could you install with a manual IP address and then simply
change the configuration once the installation is done? - John


Of course. And that's exactly what I usually wind up doing.  Though now 
that I've discovered that temporarily killing one of the dhcp servers 
works, I may do more of that in the future.


Really, I'm mostly interested in figuring out what's going on and 
probing to help get it fixed.


Enjoy!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4f064899.6020...@pobox.com



Re: problems with having two DHCP servers... (Rick Thomas)

2012-01-05 Thread Rick Thomas

On 01/05/12 20:02, Scott Ferguson wrote:

On 05/01/12 20:26, Rick Thomas wrote:

On 12/27/11 22:04, Scott Ferguson wrote:

It sounds like you are running two DHCP servers - in which case you
have four options (none of which involve preseeding).

If you have multiple DHCP servers the problem is *easily* fixed - please
tell me the make and model of the primary (router/firewall) DHCP server
and I'll give you instructions.

Hi Scott,

I'm not the OP, but I do have this problem.  When I try to do an install
(wheezy) on a network with two DHCP servers, the installer's dhcp-client
never seems to get an IP address -- even though the two servers are both
responding and both giving the same IP address.

Both DHCP servers are dnsmasq.

When I kill off one of the servers temporarily, all goes well.

Is there a solution that isn't so drastic?

Thanks!

Rick

Hi Rick - sorry about the delayed reply, I've been busy. I've had a
quick look at the thread and I've a few questions before I make any
suggestions.

Busy happens.  Thanks for getting back in any case.

Q1. Is there any functionality only one of your DHCP servers[*1] can
provide eg. wireless connection.
They are essentially identical.  Both are SheevaPlug ARM based 
plug-computers.  I'm researching using cheap boxes like these (running 
Debian) to provide network services.  I hope to show that one can use 
free software and very inexpensive energy-efficient general-purpose 
hardware do full-up network support (DHCP, DNS, TFTP booting, NIS, 
Kerberos, printer spooling, NTP, network monitoring, etc...) for much 
less money than conventional IT costs using commercial purpose-built 
routers. Redundancy and load-sharing are important parts of the strategy.



Q2. What is the maximum number of clients you are ever likely to have
connected to the networks serviced by these DHCP servers.
In my test network, I don't expect to have more than 15-20 clients.  In 
the eventual fully deployed system, I could be providing services to 
well over a 1000 clients.  Here, redundancy and load-sharing will become 
crucial.



Q3. Do you use PXE/GPXE/RIS?


Not yet.  it's in the plans though.  Right now, I'm concentrating on 
DHCP and DNS service.

Q4. If either of these DHCP servers doesn't run Debian - what is/are the
make and model/s?

See Q1.  SheevaPlug, running Debian Squeeze.

Q5. If either of these DHCP servers run FOSS - what is the DHCP package?

Running dnsmasq providing DHCP and DNS

[*1] I noted your intention of having a backup/failover DHCP server -
I'd probably suggest a different way of doing that, but I'll wait on
some answers first.

Does that help?

Thanks!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4f0688e4.9040...@pobox.com



Re: Message about ntp when updating

2012-01-11 Thread Rick Thomas


On Jan 11, 2012, at 10:17 AM, Sthu Deus wrote:


Good time of the day, Patrick.

You worte:

I see this message when running an update:

Installing new version of config file /etc/cron.daily/ntp ...
insserv: warning: current stop runlevel(s) (0 1 6) of script `ntp'
overwrites defaults (empty).

Should I be concerned about it?  And, if so, what am I supposed to do
to correct it.


Not answering to Your question, but as mine opinion - if You do not
intend other hosts to be sync-ing time w/ this host, I think You need
the service at all. For sync-ing time from Internet for the host You
can use ntpdate in cron/anacron for example.


One more reason not to use ntpdate:  It's no longer supported but the  
upstream developers of the ntp package.  The ntp daemon has been  
enhanced so that it can now do all the things people used to use   
ntpdate for.  Then to simplify maintenance (no longer have to maintain/ 
synchronize two code bases for doing the same things) ntpdate has been  
dropped from future versions of the ntp package.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/3554ebee-7d30-49de-9ac6-d0f85dfc6...@pobox.com



gdm3 - how to put a picture on the login screen?

2012-01-22 Thread Rick Thomas
In an effort to make my life with wheezy more beautiful/serene and less 
silly-looking, I've been exploring ways to personalize the various 
screen parts.


The gdm3 login screen by default provides a list of possible users and 
their names with a place that looks like it's intended to hold a picture 
(or avatar, if you will) of the person.


How does one set that avatar to something more interesting than the 
default shadow head?


Thanks!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4f1cb00e.9000...@pobox.com



Re: gdm3 - how to put a picture on the login screen?

2012-01-22 Thread Rick Thomas

On 01/22/12 20:52, Tony Baldwin wrote:

On Sun, Jan 22, 2012 at 07:55:42PM -0500, Rick Thomas wrote:

In an effort to make my life with wheezy more beautiful/serene and
less silly-looking, I've been exploring ways to personalize the
various screen parts.

The gdm3 login screen by default provides a list of possible users
and their names with a place that looks like it's intended to hold a
picture (or avatar, if you will) of the person.


Here's my gdm login screen:
http://tonybaldwin.me/imgs/myGDMloginscreen.jpg
Definitely possible to customize it.
But, this is on Squeeze, and was done with the GDM Setup
in the Debian menu.
(I don't know for sure where that is in Gnome, since I'm using openbox,
but I would guess
Applications  System  Administration  GDM Setup


How does one set that avatar to something more interesting than the
default shadow head?

same GDM Setup program offers this, as well.

./tony
Well, wheezy uses the gnome3 train-wreck.  It doesn't seem to have 
anything resembling


Applications  System  Administration  GDM Setup

I've googled til I'm blue in the face, I've guessed based on my googling that I 
need to manually edit something in the [greeter] section of 
/etc/gdm3/daemon.conf but there doesn't seem to be a human readable explanation 
of the available options I could put there and what they do.

Any clues are welcome!

Rick



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4f1d09a7.7090...@pobox.com



how to get gdm3 greeter to display menu of hosts for remote login via xdmcp

2012-01-29 Thread Rick Thomas


How do I get the gnome3 greeter to give me a menu of hosts on the local 
network who are willing to accept an xdmcp login?


On my squeeze machines running gdm, at the login screen there is a 
drop-down called Actions that has one option called Remote login via 
xdmcp.  When I choose that option, I get a list of hosts on the local 
network who are willing to accept logins via xdmcp.


But on my wheeze machine, first of all there's no Actions drop down 
at all, and I can't find any other way to get the list of xdmcp 
accepting hosts.


Does anyone know what magic I'm missing?  Is there something I can put 
into one of the files in /etc/gdm3/ that will enable the remote host 
chooser?


Thanks in advance!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4f26321e.20...@pobox.com



Re: ntp problem: the server clock slowly recedes

2011-08-09 Thread Rick Thomas


On Aug 9, 2011, at 5:41 AM, Stan Hoeppner wrote:


On 8/9/2011 2:40 AM, owl...@gmail.com wrote:

   remote   refid  st t when poll reach   delay
offset  jitter
= 
= 
= 
= 
= 
= 
= 
= 
= 
=
ntp1.inrim.it   .CTD.1 u   46   64  377   23.641   
329686. 2517.77
ntp2.inrim.it   .CTD.1 u   29   64  377   25.236   
329834. 2524.50



2.6.32-5-amd64 #1 SMP Tue Jun 14 09:42:28 UTC 2011 x86_64 GNU/Linux


...

If this is a bare metal host then you probably have a hardware  
problem.

In that case your system board will probably need to be replaced.


In many cases, judicious use of adjtimex to trim the system clock  
can avoid a system board replacement.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/5a8f5475-be44-480f-9b18-514f099d4...@pobox.com



Re: jigdo-bd

2011-08-14 Thread Rick Thomas


On Aug 12, 2011, at 3:43 PM, Dejan Ribič wrote:


Dne 12.8.2011 21:26, piše Paul E Condon:

I am looking into downloading some iso images of squeeze. I have not
done this in quite a while and I see that things have changed a lot
while I wasn't looking. I think I need jigdo-cd.

But what is jigdo-bd? Under what conditions is it the proper choice?
bd must be mnemonic for something, but I don't make the connection
the way I do for cd.

TIA

Hi,

  bd stands for Bluray-Disc.

Cheers,

Dejan


You might want it if you have a bluray drive for some reason.  I  
haven't seen a regular PC with a BD drive yet, so I assume they are  
fairly rare in the wild.  Reader/Writer drives (in the same form- 
factor as standard PC 5.25-inch internal CD/DVD drives) seem to be  
selling for about US$100 - $200 on the web.


At http://en.wikipedia.org/wiki/Blu-ray_Disc_recordable is the  
following information:


Blu-ray Disc recordable (or BD-R) refers to two direct to disc  
optical disc recording technologies that can be recorded on to an  
optical disc with an optical disc recorder. BD-R discs can be written  
to once, whereas BD-RE (Blu-ray Disc Rewritable) can be erased and re- 
recorded multiple times. Disc capacities are 25 GB (23.28 GiB) for  
single-layer discs, 50 GB (46.57 GiB) for double-layer discs, 100 GB  
for triple-layer discs, and 128 GB for quad-layer discs.


25GB is about 5 single-layer DVDs.  So you can get a substantial  
fraction of the entire Debian distribution, including source, on a  
single BD disk.


Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/bf642dcd-0bad-48fe-aff5-438428b93...@pobox.com



Re: Partitioning my new 1TB drive

2011-09-25 Thread Rick Thomas

On 9/25/2011 10:19 PM, Marc Shapiro wrote:

Now that I have my Seagate 1TB drive functional and recognized by Linux,
I need to format the thing. As I mentioned in my previous thread, my
current boot drive on this box is only 40 GB. I intend to keep it as the
boot drive and use the new drive primarily for extra storage. Since I
don't do regular backups (I already know what you will say about that) I
am also wondering what I might be able to do, now that I have space, for
a little added security in that matter. Perhaps I could just copy the
40GB boot drive to a backup directory tree and keep it updated with
rsync, or some such? Any ideas on that?

My main question, however, was partitioning the 1TB drive. I have never
had this much space to deal with. While it may be technically possible
to simply make one big partition, I am guessing that it is probably not
a practical way to do it (and I will want several different partitions,
anyway). If I am using ext3 partitions with neither vast numbers of tiny
files, nor small numbers of monstrously large files, what is a
reasonable maximum size for a partition that will be easy on the file
system and the drive, itself?



How you partition it depends on what you want to use the space for. 
Tell us more about it and we can tell you what we'd do if we were in 
your shoes.


As far as backups? I'd allocate some space -- maybe 500 GB, on the new 
drive and use rsnapshot to back up the 40GB main disk.[*]


Then you have 500GB left over to put stuff you don't want to back up 
(e.g. copies of CDs and DVDs that you think it's convenient to have 
online, but that you can restore from the original if they get clobbered.)


Enjoy!

Rick

[*] see http://www.rsnapshot.org/; for a description.
do  aptitude install rsnapshot to install the Debian version.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4e7feb93.6080...@pobox.com



Re: Why is exim installed by default?

2011-10-16 Thread Rick Thomas


On Oct 16, 2011, at 5:47 PM, Andrew Wood wrote:

Why is an MTA (exim) installed by deafult on Squeeze even if the  
'Mail Server' option is not selected during installation? Does it  
actually serve any purpose on an out of the box basic installation?


Andrew


Yes,

It serves as local mail delivery agent for messages from cron and  
other system daemons.


There are lower overhead/less feature-full replacements if you like,  
but exim4 works well and has the flexibility to handle things like  
sending (locally originated but non-locally destined) mail to a smart  
host -- things that don't strictly fit into the mail server job  
description, but are necessary all-the-same.  And it can grow into a  
full-fledged mail server if you ever need it.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/da7c1392-bd19-43cd-922d-18fdd258a...@pobox.com



Re: Sticky bit on device files?

2012-02-16 Thread Rick Thomas


I tried it on a couple of Debian Squeeze machines and only saw
shm d
Which makes sense.

What release are you running?

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/9b28e00a-17e0-4578-a689-59a1db271...@pobox.com



Re: Sticky bit on device files?

2012-02-16 Thread Rick Thomas


On Feb 16, 2012, at 12:32 PM, Peter Lebbing wrote:


On 16/02/12 17:54, Rick Thomas wrote:


I tried it on a couple of Debian Squeeze machines and only saw
   shm d
Which makes sense.


Correct, that is also what I see on Squeeze boxes.


What release are you running?


This is on Wheezy (testing). This behaviour is relatively new in  
testing.


Greets,

Peter.


OK.  I tried it on one of my Wheezy boxes, I got the same results as  
you.


Your later posting gives an explanation.

Interesting...

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/55d003c5-1662-487b-9d64-44a994591...@pobox.com



Re: printing dead slow since squeeze

2012-03-02 Thread Rick Thomas

On 03/02/12 15:04, Rémi Letot wrote:


I force reinstalled the whole cups stack (cups and co, foomatic,...)
just to be sure that no etch file was lying around, but it didn't help.

Thanks,


Try doing:

aptitude search '~c'

to get a list of packages that have been removed but left configuration 
files lying around.  One of them may be causing your problem.


You can purge them all by doing

sudo aptitude -Pv purge $(aptitude search '~c' -F '%p')

if you're confident it won't hurt your system.

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4f51c6a1.4000...@pobox.com



Re: Can no longer mount SDHC card

2012-03-22 Thread Rick Thomas



On 03/22/12 10:47, Camaleón wrote:

To be sincere, I'm still unsure about what log file holds what
information. In openSUSE, the main log was /var/log/messages and you
had to look there to see the most relevant information, but here (Debian)
seems to be /var/log/syslog. Then there are additional small files for
authentication, user and other stuff I never remember which is
disseminated into small registries files.


Take a look at /etc/rsyslog.conf  and
man rsyslog.conf rsyslogd
All your questions will be answered (albeit cryptically) there.

Enjoy!
Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4f6c034c.9080...@pobox.com



Re: Can no longer mount SDHC card

2012-03-24 Thread Rick Thomas


On Mar 23, 2012, at 11:53 AM, Camaleón wrote:


On Fri, 23 Mar 2012 00:59:56 -0400, Rick Thomas wrote:


On 03/22/12 10:47, Camaleón wrote:

To be sincere, I'm still unsure about what log file holds what
information. In openSUSE, the main log was /var/log/messages and  
you

had to look there to see the most relevant information, but here
(Debian) seems to be /var/log/syslog. Then there are additional  
small
files for authentication, user and other stuff I never remember  
which

is disseminated into small registries files.


Take a look at /etc/rsyslog.conf


Nothing of interest (for the matter) here.


and
man rsyslog.conf rsyslogd


Still no way to know where messages are being dropped.

I would like to see more integration/compatibility in this regard  
coming

from all distributions.


All your questions will be answered (albeit cryptically) there.


Mmm... I'm afraid they're not ;-)

Greetings,

--
Camaleón


Perhaps I didn't understand your question.

Those man pages, along with the rsyslog.conf file will give you the  
general rules governing which messages get sent into which log files.   
Any particular messages will be a special case of those general  
rules.  I did say that they were cryptic.  So the application of the  
rules may require specialized knowledge, often available only by  
examining the source code.


Perhaps your question was prompted by the need for that specialized  
knowledge?  If that's the case, I apologize for misunderstanding.


Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/225fac29-e7a4-40b2-a371-bc43d3225...@pobox.com



Re: Logs normalization (was: Can no longer mount SDHC card)

2012-03-24 Thread Rick Thomas


On Mar 24, 2012, at 12:58 PM, Camaleón wrote:


Well, it's far more simpler than that: I was only whining for not
having the same log files, located in the same place and holding the  
same

information between the different distributions :-)


Ahhh... The joy of Linux!  /-;

Linux is all about choices.
Sometimes we like that -- we call it freedom.
Sometimes we don't -- then we call it chaos.

Enjoy!
Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/46370bc3-6818-4001-af9f-c4d47a124...@pobox.com



CUPS Driver for Epson Stylus NX420 printer?

2011-05-19 Thread Rick Thomas


Anybody know what driver I should be using in Debian Squeeze for my  
new Epson Stylus NX420 printer?


There's no NX420 in the list of drivers offered by the CUPS web  
interface.


Thanks for any help!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/983d8932-b5f8-4595-ad78-a6bc7eee7...@pobox.com



Re: CUPS Driver for Epson Stylus NX420 printer?

2011-05-20 Thread Rick Thomas


On May 20, 2011, at 12:48 AM, Roger Leigh wrote:


On Thu, May 19, 2011 at 04:50:45PM -0700, Rick Thomas wrote:


Anybody know what driver I should be using in Debian Squeeze for my
new Epson Stylus NX420 printer?

There's no NX420 in the list of drivers offered by the CUPS web
interface.


It's unsupported by free software at the moment.  The gutenprint
driver supports the NX415, which may be entirely compatible, and
it will offer full support when the new model is added.  Note that
this might need the gutenprint from unstable; it will rebuild without
issues for squeeze.

If that doesn't work, Epson provide a proprietary driver (but I
don't think it's that great).


Thanks, Roger!  I'm glad to know that there's something in the works.   
I tried the NX415 driver from Debian Squeeze and got a couple of lines  
at the top of a page and lots of blank paper after that.


I googled a bit and came up with a website from openprinting.org that  
had proprietary (and some open) drivers for lots of printers,  
including the NX420 -- as .deb and .rpm, no less!  The one for the  
NX420 was i386 and AMD64 binary-only, no source provided, and the  
machine I wanted to install it on was an ARMel OpenRD Ultimate.   
Fortunately I had an old Toshiba laptop I'd recently installed Debian  
Squeeze on, so I downloaded the openprinting.org driver and installed  
it there.


It seems to work OK, but if I export the printer via CUPS from the  
Toshiba to the OpenRD and try to use it to print that way from the  
OpenRD, the driver on the Toshiba dies with a segfault.  So it's not  
perfect.


If I replace lpr on the OpenRD with a stub that does ssh to the  
Toshiba and runs lpr there, everything seems to be OK.  But it's a  
kludge that should not be necessary if Epson would just release the  
source for their drivers.


Ahhh well...  A perfect world would be *so* boring!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/cff8652d-b540-40b4-8081-90edd1cfe...@pobox.com



Re: CUPS Driver for Epson Stylus NX420 printer?

2011-05-20 Thread Rick Thomas


On May 20, 2011, at 3:12 AM, Camaleón wrote:


On Thu, 19 May 2011 16:50:45 -0700, Rick Thomas wrote:

Anybody know what driver I should be using in Debian Squeeze for my  
new

Epson Stylus NX420 printer?

There's no NX420 in the list of drivers offered by the CUPS web
interface.


Your printer is listed here:

http://www.openprinting.org/printer/Epson/Epson-NX420_Series

So you can try with the Avasys driver (epson-nx420), at least for
printing. If you also want to use the scanning facility, there is  
also a

standalone driver/utility for the scanner:

http://avasys.jp/eng/linux_driver/download/



Thanks, Camaleón!  I'd already discovered openprinting.org.  As I  
described in my reply to Roger's email, it wasn't a perfect  
solution, but it got me up and running after a bit of kludging.


Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/10d35684-61c5-4af8-88e5-5665c0736...@pobox.com



Re: CUPS Driver for Epson Stylus NX420 printer?

2011-05-20 Thread Rick Thomas


On May 20, 2011, at 10:18 AM, Rick Thomas wrote:

if I export the printer via CUPS from the Toshiba to the OpenRD and  
try to use it to print that way from the OpenRD, the driver on the  
Toshiba dies with a segfault.


If anybody wants to try and help me debug the problem, here's the  
relevant portion of the log file from the Toshiba.


Thanks!

Rick




error_log.gz
Description: GNU Zip compressed data




Re: CUPS Driver for Epson Stylus NX420 printer?

2011-05-20 Thread Rick Thomas


On May 20, 2011, at 11:29 AM, Camaleón wrote:

There is a source rpm package, but I'm not sure if this can help you  
to

rebuild the package for your architecture :-?


Interesting.  I'll have a look at it if I get some time.  I wonder if  
there's a source plain-and-simple tar-ball in the same place?  I'll  
investigate.  If I find anything useful, I'll report back.  If not, of  
course I can dissect the rpm and get at it that way.  But a tar-ball  
with a README/INSTALL file would be perfect.


But a perfect world would be *so* boring...

Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/a7b7a16d-5562-4de5-bb0b-057b8eb65...@pobox.com



Re: CUPS Driver for Epson Stylus NX420 printer?

2011-05-21 Thread Rick Thomas


Actually, the evidence in this particular case is pretty optimistic:

1) I was able to find a (binary i386/AMD64 only) driver at  
OpenPrinting.Org with only a little bit of google-ing.


2) When I whined about not being able to use i386 binaries on my ARM  
machine, Camaleón (thanks!) found a source RPM at the same site.  I  
haven't taken the RPM apart and compiled it yet, but it's certainly a  
start.


If Epson had a hand in making that driver available to OpenPrinting,  
I'd have to say they care more than most about their non-Windows users.


For my money, we'd all be better off if the energy expended in  
complaining about lack of support for open source by commercial  
companies (who have a fiduciary --hence legal-- responsibility to  
their share holders, and only a somewhat tenuous moral responsibility  
to open-source users) were better used in figuring out why it seg- 
faults when used as a CUPS network printer.


If you really support open source software, put your time and talent  
where your mouth is.  Help make it better!


Just my two cents...

Rick

On May 21, 2011, at 5:49 AM, Ron Johnson wrote:


On 05/21/2011 02:54 AM, Klistvud wrote:
[snip]


How's this for a reason: Epson not giving a rodent's undertail for  
their

non-Windows users?



Surprising, since Epson printers used to be well-supported by CUPS.



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/360be1aa-c1be-4cde-8838-f3ab45223...@pobox.com



Re: UUID - autmatically entries?

2011-05-22 Thread Rick Thomas


On May 21, 2011, at 11:09 PM, Ron Johnson wrote:

Since like many others you find UUIDs a huge jumbled pile of human  
meaninglessness, then by all means create labels for all your fixed  
devices, and modify your /etc/fstab accordingly.  Many of us have  
done so.


Wouldn't it be nice if the Debian installer would offer (at some  
appropriate priority) the option to create labels and use them when  
partitioning disks?


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/b9d129a5-417c-4ebd-a2f5-95d4ff993...@pobox.com



Bug in bash? different from ksh, at any rate...

2011-05-28 Thread Rick Thomas


Can anybody explain this difference between the behavior of bash and  
ksh?


When reading the man page, I would expect both of them to have the  
behavior exhibited by ksh.
Why does bash seem to treat return like a single level break in  
this context?


The echo $AA | while read is important context.  If I change it to  
for i in 0 1, return does as expected.


If it's any help, changing return to break 2 doesn't help.  with  
bash, it still gives 1 1 1 1

while ksh still gives 1

I wonder if it has anything to do with while read causing a subshell  
to be created, and bash getting confused about the return inside of  
a subshell.  If so, it's a bug in bash that ksh gets right, so it  
ought to be fixable.


ADVthanksANCE

Rick

--- example of strange behavior below ---

:~$ cat /tmp/testit
function strange {
for j in 0 1 2 3
do
AA=' 1
2'
echo $AA | while read i
do
echo $i
return
done
done
}
echo $(strange)

:~$ bash /tmp/testit
1 1 1 1

:~$ ksh /tmp/testit
1

--- example of strange behavior above ---


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/2ad2a80f-b087-4730-b7ff-6b7daa0f4...@pobox.com



Re: Bug in bash? different from ksh, at any rate...

2011-05-28 Thread Rick Thomas


On May 28, 2011, at 2:47 AM, David Sastre wrote:


On Sat, May 28, 2011 at 01:14:42AM -0700, Rick Thomas wrote:


Can anybody explain this difference between the behavior of bash and
ksh?

When reading the man page, I would expect both of them to have the
behavior exhibited by ksh.
Why does bash seem to treat return like a single level break in
this context?

The echo $AA | while read is important context.  If I change it
to for i in 0 1, return does as expected.

If it's any help, changing return to break 2 doesn't help.  with
bash, it still gives 1 1 1 1
while ksh still gives 1

I wonder if it has anything to do with while read causing a
subshell to be created, and bash getting confused about the return
inside of a subshell.  If so, it's a bug in bash that ksh gets
right, so it ought to be fixable.


I can't reproduce it:

$ cat strange.sh
function strange {
for j in 0 1 2 3
do
   AA=' 1
2'
   echo $AA | while read i
   do
   echo $i
   return
   done
done
}
echo $(strange)

$ bash ./strange.sh
1 1 1 1

$ ksh ./strange.sh
1 1 1 1

ii  bash  4.1-3 The GNU Bourne Again SHell
ii  mksh  39.3.20100725-1   MirBSD Korn Shell

--  
Huella de clave primaria: AD8F BDC0 5A2C FD5F A179  60E7 F79B AB04  
5299 EC56


As noted in other responses to my question, the behavior depends on  
how your particular shell does pipes (with or without generating a  
subshell)  You have the MirBSD Korn Shell.  I was using the ksh that  
calls itself The real, ATT version of the Korn shell which has  
different behavior.


Thanks for testing!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/afc95b26-55d3-4395-847d-57cb8133b...@pobox.com



Re: aptitude/apt-get hangs during update (plus) on IPv6

2011-06-04 Thread Rick Thomas


On Jun 3, 2011, at 10:46 AM, Jeffrey B. Green wrote:


On Fri, 03 Jun 2011 09:42:49 +0200
Pascal Hambourg pascal.m...@plouf.fr.eu.org wrote:



It could be an MTU/MSS issue. See the recent discussion in the
debian-ipv6 list with subject schein.debian.org [2001:4f8:8:36::6].



Many thanks. Changing the MTU to 1480 as suggested worked. Indeed as
was mentioned my connection to the IPv6 network is via a tunnel and  
I'm
assuming as a poster commented that someone on the path is not  
handling

the packaging correctly.

-jeff


The RFCs say that any conforming implementation MUST handle an MTU of  
1280, and may not necessarily handle anything larger.  So it makes  
sense (if you're going to go to the trouble of setting the MTU in the  
first place) to use that number.  The difference in overhead between  
1280 and 1400 is negligible.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/e8a5248c-e882-455b-935b-a863eb2d7...@pobox.com



Re: aptitude/apt-get hangs during update (plus) on IPv6

2011-06-05 Thread Rick Thomas


On Jun 5, 2011, at 9:46 AM, Pascal Hambourg wrote:


Rick Thomas a écrit :

On Jun 3, 2011, at 10:46 AM, Jeffrey B. Green wrote:

The RFCs say that any conforming implementation MUST handle an MTU of
1280, and may not necessarily handle anything larger.


What is your point in mentionning this requirement? Do you mean that  
the

server should not send packets bigger than 1280 bytes if it fails to
handle properly path MTU discovery ? If so, I fully agree.


My point is that by setting your MTU to 1280, you have done *your*  
part.  At least you can be assured that all your packets will get thru  
without fragmentation, even if the host at the other end -- or some  
intervening router -- is improperly configured.


If the host on the other end sets its MTU to something larger and an  
intervening router doesn't do fragmentation, they (or the admins of  
the router) need to fix that.  An easy recommendation that you can  
make in this case (if the server admin on the other end is clueless  
but willing to help) is for them to set their MTU to 1280 as well.   
That will fix the problem regardless of intervening routers.


Finding a (possible series of) mis-configured intermediate router(s)  
and convincing the respective router-admin(s) to fix their  
configuration is often difficult.  It's easier if you have only one  
person to talk to, the server admin on the other end.





So it makes
sense (if you're going to go to the trouble of setting the MTU in the
first place) to use that number.


Lowering the MTU at the client side does not fix the problem that  
exists

at the server side. It is just a workaround that works for TCP because
it happens that TCP uses the *outgoing* MTU to calculate the  
advertised

*incoming* MSS (how weird when you consider that internet routing is
likely to be asymmetric).


In the particular case in hand -- aptitude/apt-get talking to  
schein.debian.org, that is: the ipv6 avitar of security.debian.org --   
I have observed that setting your own MTU to 1280 is all that's  
necessary.


Enjoy!

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/eb0db985-c349-4108-a689-120c3c997...@pobox.com



Re: [OT] Bad characters on e-mail headers (was iceape 1.0.9 and IPv6 compatibility)

2011-06-10 Thread Rick Thomas


On Jun 10, 2011, at 5:58 AM, Lisi wrote:


I presumed it *likely* that you are female, but was uncertain


Yes, most of the time on line it is very difficult to be sure.  And  
we have to

accept that statistically the majority ...



On the internet, nobody knows you're a God...

-- Dyslexic Unitarian

(-:


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/80f1c7c2-fd08-48ed-83a2-b5849...@pobox.com



Default paper size in LibreOffice

2011-06-26 Thread Rick Thomas


I've tried everything I can think of, but every time I create a new  
document in LibreOffice Writer it wants to print on A4 paper.  I'm in  
the US and everything else uses US-Letter paper.  As I understand it,  
the accepted way to set this is with dpkg-reconfigure libpaper1. But  
this has no effect on LibreOffice.


To reproduce the problem:

In Gnome go to the Applications-Office-LibreOffice Writer menu.
In the new document window, go to File-Print menu, click on the  
General tab, click on the Properties button.  Notice that it says  
A4 for paper size.


If I change that, I can print on Letter paper OK.  But the next time I  
open a document, I get the same thing.


What's the magic I'm missing?

I've googled; I've searched the help documentation, I've found lots of  
suggestions. but none that work...


Thanks in advance!

Rick




--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/7ace5918-b544-4b20-852a-6570798bb...@pobox.com



Re: Default paper size in LibreOffice - SOLVED?

2011-06-26 Thread Rick Thomas



On 06/26/11 20:38, Greg Madden wrote:



On Sunday 26 June 2011 04:04:40 pm Rick Thomas wrote:

I've tried everything I can think of, but every time I create a new
document in LibreOffice Writer it wants to print on A4 paper.  I'm in
the US and everything else uses US-Letter paper.  As I understand it,
the accepted way to set this is with dpkg-reconfigure libpaper1. But
this has no effect on LibreOffice.

To reproduce the problem:

In Gnome go to the Applications-Office-LibreOffice Writer menu.
In the new document window, go to File-Print menu, click on the
General tab, click on the Properties button.  Notice that it says
A4 for paper size.

If I change that, I can print on Letter paper OK.  But the next time I
open a document, I get the same thing.

What's the magic I'm missing?

I've googled; I've searched the help documentation, I've found lots of
suggestions. but none that work...


Not sure if its relevant, I have one additional step involved here. Before
clicking on 'properties' I select from a list of printers available, i have more
than one  installed on my system. Highlighting a printer I can set paper size,
different sizes for different printers here. Its sticky.

I am using LO from Debian backports on Squeeze.


I don't know why this works, but I noticed that one of my machines had a 
package called cups-pdf installed (which hauls in libpaper-utils -- 
more on this later...) and on that machine I got a choice of two 
printers (as Greg notes above) one is lp (my networked postscript 
printer) and one is pdf a virtual pdf printer.  On that machine, the 
default paper size is Letter.


So I installed cups-pdf on another machine and lo-and-behold!  Now the 
default paper size is Letter on that one too!


I'm guessing that libpaper-utils is needed to make the configuration 
of libpaper1 visible to LibreOffice?



Description: library for handling paper characteristics (utilities)
 The libpaper paper-handling library automates recognition of many different
 paper types and sizes for programs that need to deal with printed output.

 This package contains utilities for setting the system's default paper type and
 for accessing paper type information from shell scripts.


Anyway, it seems to work.

I wonder if libpaper-utils should be depended upon (or at least 
recommended by) by libreoffice?


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4e08123e.7020...@pobox.com



Re: Default paper size in LibreOffice - SOLVED?

2011-06-27 Thread Rick Thomas


On Jun 27, 2011, at 1:53 AM, Gerfried Fuchs wrote:


* Rick Thomas rbtho...@pobox.com [2011-06-27 07:16:46 CEST]:
I don't know why this works, but I noticed that one of my machines  
had a
package called cups-pdf installed (which hauls in libpaper- 
utils --

more on this later...) and on that machine I got a choice of two
printers (as Greg notes above) one is lp (my networked postscript
printer) and one is pdf a virtual pdf printer.  On that machine,  
the

default paper size is Letter.


Out of curiosity, what's the content of your /etc/papersize file in  
all

your environments, especially the ones that give you the wrong result?


All machines, currently and since installation, have letter in /etc/ 
papersize.  It's on my checklist for installations.


The difference between the one and the others is the presence of the  
cups-pdf and libpaper-utils packages.



Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/d84cf108-21d1-4bcd-88db-41e044568...@pobox.com



Re: IPv6 and DNS

2011-07-12 Thread Rick Thomas


On Jul 12, 2011, at 12:30 PM, Laurence Hurst wrote:

 I am only aware of using DHCP with DNS to achieve what I currently  
do wrt reliable, cross-device, forward and reverse host lookups but  
was wondering if there was a way to take advantage of IPv6's  
stateless configuration to get the same end. Looking at the research  
I've done so far it's not looking good since the stateless addresses  
are not guaranteed - I found one document referring to Windows  
specifically randomising IPv6 addresses rather than using the MAC  
(no idea if this is default or configurable).




H Laurence,

I've been doing essentially this (what you propose) for over a year,  
using a tunnel from SIXXS.


What I've found is:

+) Stateless automatic address configuration (SLAAC) works OK on all  
the platforms I've tried it on (MacOS-X, Windows Vista and XP, Debian  
and CentOS Linux). By works I mean A unique IPv6 address is  
assigned and people can connect to and from that address.


+) SLAAC does not interact automatically with DNS or DHCP/DHCPv6.   
That's up to you.


+) Manually entering IPv6 addresses into DHCPv6 or DNS tables is no  
harder than the same job for IPv4 addresses.  The only difference is  
that the addresses involved are not assigned by you, the admin -- they  
are the addresses discovered by SLAAC.


+) Addresses assigned by SLAAC are permanent enough for most  
purposes.  If you swap NIC cards around a lot for some reason, this  
would change; but I'm having a hard time imagining a SO/HO network  
where you would do that.


+) Getting your reverse DNS (IPv6 address - name) supported outside  
of your home network is difficult/impossible.  It's no problem, of  
course, *inside* the home network where you control the DNS server. [**]


+) Getting global (outside the home network) forward DNS (name - IPv6  
address) support is easy. I use PairNIC, but almost any registrar will  
provide the service for a reasonable fee.


+) It can be nice to be able to bypass the ISP-imposed NAT.  You can  
SSH directly into your home server without messing around with port  
mapping.  This has a security downside, of course, but the convenience  
is nice.


+) Essentially everything I used to do with IPv4, I've been able to do  
the same with IPv6.  One exception is installing software.  Even the  
Debian installer exclusively over IPv6 is a work in progress.  I  
haven't tried it with CentOS, but I expect Debian is ahead of them.   
Microsoft or Apple, forget it!  On the other hand, once you have an OS  
installed, apt and aptitude work just fine over IPv6.


+) I haven't experimented with doing IPv6 firewalls yet, but that's a  
project I do plan on exploring soon.


Have fun!  It's a big new world out there!

Rick

[**]  I haven't found a good free way to do reverse DNS outside the  
home network (either sense of free -- or even proprietary but  
inexpensive, for that matter!).  I'd love to hear from anyone who has!




--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/b118254f-3abc-4670-8e7d-f5db216d3...@pobox.com



Re: IPv6 and DNS

2011-07-19 Thread Rick Thomas


On Jul 19, 2011, at 6:13 PM, John Hasler wrote:


Go Linux writes:

How is [IPv6] going to work on DIALUP!


I wrote:

Just fine.  What makes you think it wouldn't?


Johan Kullstam writes:

The fact that it doesn't work anywhere else?  :-


Works fine here.


Here too.

What kind of problems are you having, Johan?

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4c618f70-431f-42fc-8c91-383a45896...@pobox.com



Re: Backup Software

2011-07-21 Thread Rick Thomas


On Jul 21, 2011, at 10:10 AM, Nico Kadel-Garcia wrote:

On Thu, Jul 21, 2011 at 3:57 AM, Johann Spies jsp...@sun.ac.za  
wrote:

On Thu, Jul 21, 2011 at 08:20:26AM +0200, lee wrote:

Ethan Rosenberg eth...@earthlink.net writes:


What software would you recommend to backup a Debian system on a
stand-alone computer?


If possible, tie rsync to rsnapshot to provide hardlinked daily,
weekly, or monthly snapshots.



 I urge you to check it out
for a supported tool that does just what you need.


I also recommend rsnapshot.

It's easy to setup and use, and completely automatic once you've set  
up the config file.


And, just as important, easy and intuitive to restore from.

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/e747882f-d986-49df-95b2-255ce3818...@pobox.com



Re: IPv6 and DNS

2011-07-21 Thread Rick Thomas


On Jul 21, 2011, at 3:29 AM, Ivan Shmakov wrote:


Johan Kullstam kullstj...@verizon.net writes:


[…]


My ISP does not offer IPv6.


And in the case of NAT'ed IPv4, it's still possible to register
for a free-of-charge tunnel service at http://sixxs.net/ and use
AICCU (# apt-get install aiccu.)


This (SIXXS) is what I use at home.  It works a treat for me.  Easy to  
set up. Easy to use. Fully connected to the IPv6 internet.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/ef9e9f22-e686-4ab6-a285-1afe47680...@pobox.com



Re: 6rd vs. interfaces(5)

2011-07-22 Thread Rick Thomas

On Jul 22, 2011, at 5:17 AM, Dejan Ribič wrote:

 Dne 22.7.2011 11:09, piše Ivan Shmakov:
 Rick Thomasrbtho...@pobox.com  writes:
 On Jul 21, 2011, at 3:29 AM, Ivan Shmakov wrote:
 […]
 
And in the case of NAT'ed IPv4, it's still possible to register for
a free-of-charge tunnel service at http://sixxs.net/ and use AICCU
(# apt-get install aiccu.)
 
This (SIXXS) is what I use at home.  It works a treat for me.  Easy
to set up. Easy to use. Fully connected to the IPv6 internet.
 
  One of the ISP's here has finally started to offer IPv6, namely:
  6to4 (AIUI, they run their own gateway for that) and 6rd.
 
  Unfortunately, 6rd is only available for Linux 2.6.33 and later
  (as per Wikipedia), which isn't in Squeeze.
 
  But anyway, is there a way to add a 6rd tunnel to interfaces(5)?
 
  TIA.
 
 Hi,
 
   you can install 2.6.38 from squeeze-backports[1], works perfectly.
 
 Cheers,
 
 Dejan
 
 [1]http://backports-master.debian.org/Instructions/

Or, if you already have a home network with more than one computer (if  you're 
interested in IPv6, I'll bet that description fits you) I'd recommend to invest 
a small amount of money (US$200) in a small computer (like an OpenRD or one of 
the plug machines from Marvel, or an ALIX board from PC-Engines.  If you 
don't care about energy usage, an even cheaper alternative is to reuse an 
obsolete PC -- I'll bet you've got one of them in your garage waiting to be 
recycled.)

Make that your IPv6 gateway -- run Debian testing on it.  Having a separate 
single-purpose gateway router has the advantage that you can experiment with 
things like firewalls and new drivers without endangering the rest of your 
machines.

That's what I did.  I'm quite pleased with the result.

Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/bf124a4c-3e6f-4d9c-ae5d-f4b1945a6...@pobox.com



Re: installing debian from USB... IS IT POSSIBLE?

2011-07-28 Thread Rick Thomas


On Jul 28, 2011, at 5:12 PM, Per Carlson wrote:


On Thu, Jul 28, 2011 at 09:15, Scott Ferguson
prettyfly.producti...@gmail.com wrote:

Yes it's with the official documentation:-
http://www.debian.org/releases/stable/i386/ch04.html.en


Where the first sentence reads: To prepare the USB stick, you will
need a system where GNU/Linux is already running and where USB is
supported.. So, to install Debian from an USB-stick you need a system
where Debian (for example) is installed. Smells recursion here :-)

IMHO there should be some hints what to do if the user currently is
running something else than GNU/Linux, like Windows or OS X.


In Mac OS-X, it should be pretty straight-forward.  E.g. the dd  
command exists in standard OS-X.  There may be some tricks required to  
write directly to a USB stick device, but I'm guessing it's not  
impossible.


But the real answer to your point is this:  If you're thinking of  
running Linux, you probably have a friend who has Linux running.   
Friends are good things to have.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/12a96f59-892b-433e-a712-6486522ef...@pobox.com



Request for enhancement [Re: Question about /etc/fstab in Squeeze]

2010-12-19 Thread Rick Thomas


On Dec 19, 2010, at 8:09 AM, Stephen Powell wrote:


Caution: reformatting a swap partition with mkswap will change the
uuid unless the existing one is explicitly re-specified during  
formatting.


Which raises a question that has been on my mind for a while...

The Debian Installer insists on reformatting any swap partitions it  
finds, even though that partition, specified by UUID, is probably in  
use in the /etc/fstab for some other instantiation of Linux -- thus  
breaking the other Linux, leaving it without a usable swap partition.


Would it be possible to either:

1) have the option (default) of *not* reformatting a swap partition
or
2) if reformatting is necessary or desired, have the option (default)  
of preserving the UUID.

or
3) using LABEL= instead of UUID= in fstab for swap partitions, if  
it turns out to be easier to preserve a LABEL than a UUID.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/25d65ecd-1ced-4b5b-9b81-f562ed14c...@pobox.com



Re: Fun with DVD-RAM

2010-12-20 Thread Rick Thomas

Curt Howland wrote:

Is there a way to do a file system check on a UDF disk?

Next, while I realize that UDF spreads the writes around and makes 
the disks last longer, I am using them for long-term archive rather 
than something like a daily backup. Is there a reason anyone can 
think of for not reformatting in ext2 or some other fsck-able 
format? (I know not to use a journaling file system, because of the 
myriad rewrites of the journal itself)


Curt-
  

Have you thought about a simple log-structured filesystem?

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4d0fb635.7040...@pobox.com



Re: Fun with DVD-RAM

2010-12-21 Thread Rick Thomas


On Dec 21, 2010, at 5:24 PM, Curt Howland wrote:


On Monday 20 December 2010, Rick Thomas was heard to say:

Curt Howland wrote:

Is there a
reason anyone can think of for not reformatting in ext2 or some
other fsck-able format?



Have you thought about a simple log-structured filesystem?

Rick


Which would you suggest?

As an aside, I threw away that particular disk, and simply took a new
one out and used that.

It's amazing that there is no udffsck in the Debian udfutils package.

Curt-


Using aptitude search lfs (I tried other variants on log structured  
filesystem and go nothing) turned up nilfs2-tools and nilfs2- 
modules and nilfs2-source.  The home page seems to be http://www.nilfs.org/ 
 .  I've never used it myself, so I can't recommend pro or con.  My  
remark was just in passing that a log-structured filesystem would seem  
to be perfect for your needs.


You should also investigate (try google) the filesystems that are  
being developed for use with flash-RAM, which shares many of the  
distinctive characteristics of DVD-RAM.  If you find anything useful,  
I'd be interested to hear.  This is an active area of development  
these days (powered by the  dropping cost of flash RAM and the  
possibility of using it for low-power and very fast system residency  
devices for embedded systems), so it should be a fertile ground for  
google searches.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/69f94694-c37b-46d6-8e2c-bb1a976c5...@pobox.com



Re: Request for enhancement [Re: Question about /etc/fstab in Squeeze]

2010-12-21 Thread Rick Thomas


On Dec 20, 2010, at 3:07 AM, Herbert Kaminski wrote:


Rick Thomas schrieb:

2) if reformatting is necessary or desired, have the option  
(default) of preserving the UUID.


This would be an useful option for all partitions, not only for swap,
for people like me who dare to test DI in a spare partition of their
normal workstation.

cu
 Herbert


Here's an easy way out...

Add an option to mkswap (and mkfs, if that seems appropriate -- right  
now, I think swap is critical and the other filesystem types are  
merely annoying.  YMMV)
that says assume that the filesystem is currently formatted as swap  
and preserve the UUID while re-formatting it according to the other  
options.


Then modify the installer partitioner code to use that option by  
default when invoking mkswap.


Adding the code to mkswap should be a piece of cake.  (I'm on vacation  
right now.  I'll have a crack at it when I get back to civilization if  
other things don't have higher priority by then.) I don't know enough  
about the installer partitioner code to tell whether adding an option  
to invocations of mkswap is easy or hard.  I'm guessing easy, but I'm  
not volunteering to do it.


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/bd8e-3bd3-4179-88e4-357b77aeb...@pobox.com



[slightly OT] Internet accessible home security systems using Debian?

2010-12-30 Thread Rick Thomas
Does anybody have any experience installing/using an internet  
accessible home security system?


We recently bought a retirement home, but it will be a year or so  
before we can move in -- leaving the place uninhabited most of the  
time.  I'd like to install an inexpensive (under $1000 for parts --  
I'll do the installation myself) CC-TV  (CC=closed circuit) and  
recorder that can be connected to a Linux-based computer I can access  
over the Internet.


Has anybody done such a thing?  Any recommendations?

A friend recommended Apex CC-TV.  Their web site has a setup with 4  
cameras and a 250GB DVR that has the ability to remotely view live  
and recorded video from any Internet connection.   Has anybody here  
ever dealt with them?  Any thoughts?



Thanks in advance!


Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/8eb861ec-0098-48ad-b139-8d500ed54...@pobox.com



Re: [slightly OT] Internet accessible home security systems using Debian?

2010-12-30 Thread Rick Thomas


Cool!  Thanks, I'll look into those.

Rick

On Dec 30, 2010, at 2:10 PM, Mirco Piccin wrote:


Hi,

 We recently bought a retirement home, but it will be a year or so  
before we can move in
 -- leaving the place uninhabited most of the time.  I'd like to  
install an inexpensive (under
 $1000 for parts -- I'll do the installation myself) CC-TV   
(CC=closed circuit) and recorder
 that can be connected to a Linux-based computer I can access over  
the Internet.


you can use ZoneMinder
http://www.zoneminder.com/

with or without DVR (ZoneMinder itself can act as video recorder).
Zoneminder has a lot of features (e.g. Motion Detection, Trigger,  
email delivery..), and a wui - web user interface.

It supports lan streaming (e.g. Ip Cam, Video server) and usb cam.

Or, if you want to save more $$, you could use also something like  
this:

http://icamview.com/
that convert usb camera in ip camera, providing Motion Detection,  
email delivery, ftp upload...


My 2 cents
Regards
M



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/e03a4c65-dc47-437a-aca0-80fb99826...@pobox.com



Re: Hardware needed for home network

2011-02-13 Thread Rick Thomas


On Feb 13, 2011, at 9:09 AM, Tixy wrote:


(I don't discount me getting something horribly wrong, this setup is
only a few weeks old and my first foray into firewalls and routing.)



Computer security is so much fun!  /-;

As others have pointed out, it is *possible* for an attacker to get  
directly to the client machines without going thru your server.   
However, it's not as likely to actually happen as they make it seem.   
I can think of a couple of ways a determined enemy could do it, but it  
would require a specialized attack knowing many of the details of your  
setup.  It's unlikely that a random script-kiddy would have the  
detailed expertise (or the persistence) required.


So... unless you've made some enemies in places like the American  
CIA or the Russian Mafia you're probably safe.


That said, there's a cheap way to be a bit safer:  Buy a USB to  
Ethernet adapter (about US$30 in office supply stores) and use it to  
attach your Sheeva-plug to the ADSL-Modem.  This way you can keep the  
switch (with only the clients connected to it) on the Sheeva's Gig-E  
port.  Then the hypothetical bad-guy who has taken over the modem has  
one more level of firewall to get thru in the Sheeva before he can  
have his way with your client machines.



Have fun!

Rick



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4cc3eaa7-c7d9-4a68-ba43-dd234b3f2...@pobox.com



Re: Woohooo! Dell + Linux

2007-03-30 Thread Rick Thomas


On Mar 30, 2007, at 3:23 AM, Paul Walsh wrote:

(do manufacturers have to pay M$ to allow them to pre-install  
Windows?).


Yes.

But it's actually worse than that.  They pay MicroSoft based on their  
total sales numbers.  Not just the number of machines they happen to  
install Windows on.  So Dell won't save a penny by selling you a  
machine with Linux on it.  And they may loose some revenue by not  
being able to put free trial stuff on the desktop.




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




  1   2   3   4   5   6   7   >