hostname

[Jonathan de Boyne Pollard]

Linux/Unix hostname resolution is only done by consulting respected 
services, not by everyone announcing themselves in broadcast mode.




Greg Wooledge, meet mDNS and avahi/Bonjour.  (-:

* http://multicastdns.org/

Re: SSL inspection

[Reco]

Hi.

On Sun, Feb 18, 2018 at 07:30:06AM +, Jonathan de Boyne Pollard wrote:
> Reco:
> 
> > Browsers do certificate validation, "wrong IP address" would be possible
> > if the third party somehow produced a valid certificate for
> > wiki.debian.org (you have to be a CA *or* the government to do this) and
> > faked a DNS record (that's easy part).
> > 
> One can also do it if one is the person's employer and owns the machine that
> the employee is running, no DNS resource record modifications required,
> merely the employer as an additional root authority pushed out via group
> policy or suchlike and either custom proxy auto-configuration or transparent
> proxying at the borders.  This has been a known practice for many years, and
> there have been for that time a wide range of products sold to employers for
> specifically doing this.

It's true, and I'm familiar with the cases like this. But I find it
highly unlikely that this hypothetical employer allows using KDE (which
is used by OP) at a workplace.

Reco

Re: hostname

[Reco]

Hi.

On Sun, Feb 18, 2018 at 07:47:32AM +, Jonathan de Boyne Pollard wrote:
> > Linux/Unix hostname resolution is only done by consulting respected
> > services, not by everyone announcing themselves in broadcast mode.
> > 
> 
> Greg Wooledge, meet mDNS and avahi/Bonjour.  (-:
> 
> * http://multicastdns.org/

Technically Greg is right. Broadcast and multicast are two different
type of beasts. nDNS is a multicast (your link says the same btw).
Greg's talking about broadcasts.

Samba, on the other hand (winbind in particular) can broadcast a
hostname via udp:137.

Reco

Re: troubleshooting Kmail

[David Baron]

Kmail has been broken for weeks. No action, just excuses. Might simply have
to abandon it after all these years.

On Sat, Feb 17, 2018, 11:42 PM  wrote:

> On Saturday, February 17, 2018 3:59:53 PM EST ernst doubt wrote:
> > I sent a similar message to debian-kde this morning, but it appears
> there's
> > not much activity there, so I figured I'd also try here.
> >
> > I've been a debian GNU/linux user (I like KDE for my desktop, though I
> > generally keep openbox (and gnome) available as "fallbacks") for quite
> some
> > time now (decades at least) and am in general a very happy user. I've
> been
> > using  both thunderbird and claws-mail as IMAP clients for some time, but
> > recently (a few months ago) I set up Kmail (and I like it very much, as
> > integration with gnupg was relatively painless). I am again using it as
> an
> > IMAP client (with this gmail address). I have two computers, both running
> > debian 9 stretch. On one of them (the laptop), Kmail is functioning
> > properly, but on the desktop machine which I'm writing from now, incoming
> > email has not been appearing since the end of January. I don't see any
> > obvious menu entries which would give me access to log files in order to
> > try to troubleshoot the problem, so I'm looking for any advice as to how
> I
> > might go about correcting the issue so this instance of Kmail can again
> > receive email (it's possible that the problem is as simple as an
> > incorrectly entered password though I've just attempted to reenter it
> with
> > no improvement in mail fetching behavior). I'm not currently subscribed
> to
> > this list, so CCing me is perfectly fine (though I'll monitor the web
> > archives for responses on which I may not be CCed).
> >
> >thanks so much in advance for any clues anyone may have to share with
> me,
> > ~c
>
> Ernst,
>
> Things that come to mind...
> The way IMAP works is e-mail is delivered to the mail server
> (google/gmail, is
> what I think you said). Your client (kmail, thunderbird, etc) reads an
> email
> message from the server. Then, depending on configuration, the message is
> saved
> or deleted?  So, check your configuration to be sure that the IMAP server
> is
> configured to leave mail on the server after being read.
> Also, have you checked that the version of kmail is the same on both
> computers?
>
> Mark
>
> Have you ckecked the version of each instance of kmail?
>
>

SMTP error from remote mail server after RCPT TO:

[Curt Saltzman]

The last two messages I sent through gmane.org have bounced back to me.

 This message was created automatically by mail delivery software.

 A message that you sent could not be delivered to one or more of its
 recipients. This is a permanent error. The following address(es) failed:

   debian-user@lists.debian.org
 SMTP error from remote mail server after RCPT 
TO::
 host bendel.debian.org [82.195.75.100]: 554 5.1.8 
:
 Sender address rejected: Domain not found

Domain not found. This is quite sudden; it worked, now it ain't working. 
'gmane.org' is
the domain that is not currently being found? This all seems outside of my 
purview (beyond
abandoning gmane, I suppose).

Re: SMTP error from remote mail server after RCPT TO:

[Karol Augustin]

On 2018-02-18 10:19, Curt Saltzman wrote:
> The last two messages I sent through gmane.org have bounced back to me.
> 
>  This message was created automatically by mail delivery software.
> 
>  A message that you sent could not be delivered to one or more of its
>  recipients. This is a permanent error. The following address(es) failed:
> 
>debian-user@lists.debian.org
>  SMTP error from remote mail server after RCPT
> TO::
>  host bendel.debian.org [82.195.75.100]: 554 5.1.8
> :
>  Sender address rejected: Domain not found
> 
> Domain not found. This is quite sudden; it worked, now it ain't
> working. 'gmane.org' is
> the domain that is not currently being found? This all seems outside
> of my purview (beyond
> abandoning gmane, I suppose).

There is no MX, A or  record for m.gmane.org, so it is not possible
to send you mail to address gldu-debian-use...@m.gmane.org and that is
why the mail is rejected.


k.


-- 
Karol Augustin
ka...@augustin.pl
http://karolaugustin.pl/
+353 85 775 5312

Kmail Broken?

[ernst doubt]

David,
   Thanks much for the heads-up.  Do you have a bug report you could refer me 
to so I can check out details? I guess in some sense I'm quite "lucky" as I do 
have one instance that's continuing to function properly (on the laptop) even 
though this one is reduced to being able to send emails and can't seem to 
receive them. I'd like to find the relevant bug report (or if there is none 
yet, open one myself) so that I can hopefully aid in troubleshooting the 
specific issue(s). It's hard for me to believe that this piece of software will 
just be abandoned considering how well it was working and how many functional 
options it has (had?).

 ~e

signature.asc
Description: This is a digitally signed message part.

sort (-g) [offtopic]

[Ionel Mugurel Ciobîcă]

Anyone care to explain what exactly means the -g option of sort? The
fine manual only says "general numerical", but I doubt that is true,
because -g (and all other options I have tried, -n, -M, -h, -V) will
all put Roman numeral 9 in between 4 and 5. See here:

# echo "III\nII\nI\nV\nIV\nVII\nVI\nVIII\nX\nIX" | sort -g | nl

What I expect is to put 9 in between 8 and 10.

As I wrote above, I have tried -n as well. I tried -M because in
Romanian often the months are written with Roman numerals (I to XII),
but that also failed. -h and -V were not useful here either.

How do I sort in a pipe those roman numerals? I have written two bash
scripts roman_to_arab.sh and arab_to_roman.sh, but I do not know how
to adapt it to use it in pipes. Also, it may be too cumbersome to make
the conversion to arab digits, sort with -n and then convert back into
roman numerals...

Anyone has encounter this issue? Any ideas how to sort out this sort
issue? Of course, the easier will be if, indeed, the sort -g would
work as expected, e.g. if "_general_ numeric" will not be particular
to exclude Roman numerals...

At the moment I have to run this sort three times. First time to limit
it before IX (with grep -v -e IX -e '^X'), second time just grep "IX",
and third time to exclude all that starts with I and V: grep -v -e
"^I" -e "^V", and then put all together, like this:

( echo "III\nII\nI\nV\nIV\nVII\nVI\nVIII\nXI\nIX\nXII\nX" | sort -g | grep -v 
-e "IX" -e '^X' ; echo "III\nII\nI\nV\nIV\nVII\nVI\nVIII\nXI\nIX\nXII\nX" | 
grep -e "IX" ; echo "III\nII\nI\nV\nIV\nVII\nVI\nVIII\nXI\nIX\nXII\nX" | sort 
-g | grep -v -e "^I" -e "^V") | nl


I exclude here larger numerals, because at the moment I do not need
anything in that range...

Using the unicode gliphs also doesn't work:

# echo "Ⅲ\nⅡ\nⅠ\nⅣ\nⅤ\nⅨ\nⅥ\nⅦ\nⅧ\nⅫ\nⅪ\nⅩ" | sort -g | nl

either with -n, -V, -M, -h, etc.


Thanks,
 Ionel

Re: hostname

[bolakim53]

Subject: hostname
Re: hostname
to debian-user@lists.debian.org




terminology confusion : there are so many configuration & choices that it
is bit out of scope.
e.g on a lan or a mesh network.



> is my hostname transmitted as soon as i am connected ?

 if you are operating under the assumption that your hostname is
being broadcast to the entire network so that your peers can open
your shares, well, that's not a thing in Linux-world.
 That's only a thing in Windows-world.
 linux/Unix hostname resolution is only done by consulting respected
services, not by everyone announcing themselves in broadcast mode.

*so the hostname is not shared & not transmitted *blindly.

 If you use a DHCP client, then probably it is sent by the DHCP
client to the DHCP server whenever it's time to get a new IP
address.
 This will occur when you boot, and whenever your IP address lease
expires.

*the response was exactly that i asked.

In fact the topic came from an old article about the threat to 
be
hacked/targeted : backdoor & hostname_nsa tool.
Anyway the new equipment/hardware could solve all these 
'confusion' in a
near future by simplifying the terminology and perhaps implementing
officially backdoors (software too ? on the tor blog someone asked the
question - no response). i wonder if the 'independent' dns will be
"allowed" but it is another story.


o-t
Well there is a heavy brainwash in Europe regarding guns in the US,
but some
of us know very well where the real problem is.
* i do not think so : the mutual non-comprehension became a 
crime.

Re: sort (-g) [offtopic]

[tomas]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sun, Feb 18, 2018 at 04:55:28PM +0100, Ionel Mugurel Ciobîcă wrote:
> 
> Anyone care to explain what exactly means the -g option of sort? The
> fine manual only says "general numerical", but I doubt that is true,
> because -g (and all other options I have tried, -n, -M, -h, -V) will
> all put Roman numeral 9 in between 4 and 5. See here:
> 
> # echo "III\nII\nI\nV\nIV\nVII\nVI\nVIII\nX\nIX" | sort -g | nl
> 
> What I expect is to put 9 in between 8 and 10.


The info documentation has more (alternative, you can look
that up on the web, as stated in the man page itself).

Extracted from the info:

  ‘-g’
  ‘--general-numeric-sort’
  ‘--sort=general-numeric’
 Sort numerically, converting a prefix of each line to a long
 double-precision floating point number.  *Note Floating point::.
 Do not report overflow, underflow, or conversion errors.  Use
 the following collating sequence:

  • Lines that do not start with numbers (all considered to be
equal).
  • NaNs (“Not a Number” values, in IEEE floating point
arithmetic) in a consistent but machine-dependent order.
  • Minus infinity.
  • Finite numbers in ascending numeric order (with -0 and +0
equal).
  • Plus infinity.

 Use this option only if there is no alternative; it is much slower
 than ‘--numeric-sort’ (‘-n’) and it can lose information when
 converting to floating point.

So '-g' basically means (decimal representation of) float, plus a
couple of NaNs. No roman numerals, alas...

[...]

> How do I sort in a pipe those roman numerals? I have written two bash
> scripts roman_to_arab.sh and arab_to_roman.sh, but I do not know how
> to adapt it to use it in pipes. Also, it may be too cumbersome to make
> the conversion to arab digits, sort with -n and then convert back into
> roman numerals...

I fear sort is out of its smarts on that. There are libraries for
different languages to do this, e.g. Perl's Roman.pm (in Debian
package libperl-roman).

> Anyone has encounter this issue? Any ideas how to sort out this sort
> issue? Of course, the easier will be if, indeed, the sort -g would
> work as expected, e.g. if "_general_ numeric" will not be particular
> to exclude Roman numerals...

I guess your idea of "general" is just too general to be practical :)

Cheers
- -- tomás
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlqJrS0ACgkQBcgs9XrR2kZo4ACcDkY4H1RzyWYaQnQF7E/PfLN9
AbsAmgPSPyn7r5kWyTH7CFOir/OMPAwo
=SXF9
-END PGP SIGNATURE-

Re: USB key and lost space

[Rodary Jacques]

Le vendredi 16 février 2018, 12:03:56 CET Thomas Schmitt a écrit :
> Hi,
> 
> Rodary Jacques wrote:
> > I did subscribe  in april 2016,
> 
> The mail header X-Spam-Status in your mail to the list does not contain
> the test "LDOSUBSCRIBER". So currently your address roda...@free.fr is
> not subscribed.
> 
> Consider to subscribe again and also to Cc: the debian-user list with
> your replies.
> 
> 
> > Where am I supposed to find firmware.tar.gz. It may be a very stupid
> > question, I was used with .iso  image disks only.
> 
> Other people on debian-user probably have more experience with that.
> I have to google.
> For the current Debian release 9 "stretch" it is probably on
>   
> https://cdimage.debian.org/cdimage/unofficial/non-free/firmware/stretch/current/
> 
> 
> I wrote:
> > > So use /sbin/fdisk to create partition 3.
> 
> > I used fdisk, cfdisk and partitionprobe and it seems my Key is  quite
> > useless now
> 
> Which ISO image did you put onto the USB stick ?
> 
> Let's give current netinst a try:
> 
>   $ dd if=debian-9.3.0-amd64-netinst.iso of=/dev/sdc bs=1M
>   ...
>   $ /sbin/fdisk /dev/sdc
>   ...
>   Command (m for help): p
>   ...
>   Device Boot StartEnd Sectors  Size Id Type
>   /dev/sdc1  *0 593919  593920  290M  0 Empty
>   /dev/sdc23760   4591 832  416K ef EFI (FAT-12/16/32)
> 
>   Command (m for help): n
>   Partition type
>  p   primary (2 primary, 0 extended, 2 free)
>  e   extended (container for logical partitions)
>   Select (default p): p
>   Partition number (3,4, default 3): 3
>   First sector (593920-7864318, default 593920): 
>   Last sector, +sectors or +size{K,M,G,T,P} (593920-7864318, default 
> 7864318): 
> 
>   Created a new partition 3 of type 'Linux' and of size 3.5 GiB.
> 
>   Command (m for help): p
>   Disk /dev/sdc: 3.8 GiB, 4026531328 bytes, 7864319 sectors
>   Units: sectors of 1 * 512 = 512 bytes
>   Sector size (logical/physical): 512 bytes / 512 bytes
>   I/O size (minimum/optimal): 512 bytes / 512 bytes
>   Disklabel type: dos
>   Disk identifier: 0x0347fd41
> 
>   Device Boot  Start End Sectors  Size Id Type
>   /dev/sdc1  * 0  593919  593920  290M  0 Empty
>   /dev/sdc2 37604591 832  416K ef EFI (FAT-12/16/32)
>   /dev/sdc3   593920 7864318 7270399  3.5G 83 Linux
> 
> 
>   Command (m for help): w
>   The partition table has been altered.
>   Calling ioctl() to re-read partition table.
>   Re-reading the partition table failed.: Permission denied
> 
> The final error message comes because i did this as normal user, just
> having rw-permission to /dev/sdc.
> I unplug and replug the USB stick to let the kernel assess the new
> partitioning:
> 
>   $ ls /dev/sdc*
>   /dev/sdc  /dev/sdc1  /dev/sdc2  /dev/sdc3
> 
> 
> > I will try dd, very carefully. to erase this new partition I finally
> > created, and perhaps come back to you afterwards.
> 
> I would just copy the ISO again onto the USB stick base device 
> and then run fdisk.
> 
> 
> Have a nice day :)
> 
> Thomas
Saturday:
I don't quite know how, but with fdisk, cfdisk, parted,  partx and 
partprobe I now have a brand new key with 16 GB (or GiB),  the original size, 
without the iso file, type vfat (rw, nosuid, nodev, relatime, uid=1000, 
gid=1000, fmask=0022, dmask=0022, codepage=437, iocharset=ascii, 
shortname=mixed, showexec, utf8, flush,errors=remount-ro, uhelper=udisks2. I 
have three oher microSDHC to save!
Sunday:  That was yesterday! Two of the microSDHC cards didn't resist to my 
assaults. But the one with netinst iso (with the two partitions)  seem to be 
much harder. 
Tired of trying (fdisk cfdisk sfdisk parted failed with "read only 
disk"), I put the card in my camera to format it, successfully. 
On a Mac, it is now known as "NIKON D7100" and is read-write, as on the 
camera. But on my Debian and Fedora boxes, if it recognized as such also, it 
stays read only: 'wipefs /dev/sde' continue to read:
offset   type 

which was the old  situation, mount says "/dev/sde1 on /media/jr/NIKON D7100 
type vfat (ro, etc..." which is correct except for the ro! Same with the other 
tools.
How can I force the kernel to forget this 'read only' on the disk? 
Could it be because of the external card reader I use?
It is not really important, since I can use this card with my mac and 
to scan documents, but I like to understand.
Jacques

Direktoriaus kontaktai - tai Jūsų klientas

[Gautas pranešimas]

Laba diena,


Noriu Jus informuoti apie šių metų pasikeitimą dėl atnaujintos visos Lietuvos 
įmonių bazės 2018 metų sausio vidurio.
Visi juridiniai asmenys pateikti bazėje yra veikiantys, realiai vykdantys 
veiklą, turintys įdarbintų darbuotojų. Duomenys pagal Sodrą, Registrų centrą.
 
Bazėje nurodoma ir apyvarta, darbuotojų atlyginimai, darbuotojų skaičius, 
transporto skaičius ir daug kitų duomenų, kuriuos matysite pavyzdyje.
 
Duomenis galima filtruoti pagal veiklas, miestus ir kitus duomenis.
 
 
Šią bazę verta turėti visoms įmonėms. Pateiksiu priežastis:
 
1) Kontaktai pateikti bazėje direktorių ir kitų atsakingų asmenų, didelė 
tikimybė Jums surasti naujų klientų, partnerių, tiekėjų, kai tiesiogiai 
bendrausite su direktoriais, komercijos vadovais.
 
2) Konkurentų analizavimas, tiekėjų atsirinkimas pagal Jums reikalingus 
kriterijus, galite atsifiltruoti pagal įmonės dydį, bazėje nurodoma kiek įmonės 
skolingos Sodrai.
 
3) Lengva, greita ir patogu dirbti su šia baze, elektroninius pašto adresus 
galite importuoti į elektroninių laiškų siuntimo programas ar sistemas iš kurių 
siunčiate elektroninius laiškus.
Taip pat galite importuoti mobiliųjų telefonų numerius į SMS siuntimo programas.
 
 
Išsirinkite iš "Veiklų sąrašo" veiklas kurių Jums reikia.
( Sąrašas prisegtas laiške excel faile )
 
Parašykite, kurias veiklas išsirinkote 
ir atsiųsime pavyzdį ir pasiūlymą su sąlygomis įmonių bazei įsigyti



Pagarbiai,
Tadas Giedraitis
Tel. nr. +37067881041


Veiklos.xlsx
Description: Binary data

Re: sort (-g) [offtopic]

[David Wright]

On Sun 18 Feb 2018 at 16:55:28 (+0100), Ionel Mugurel Ciobîcă wrote:
> 
> Anyone care to explain what exactly means the -g option of sort? The
> fine manual only says "general numerical", but I doubt that is true,
> because -g (and all other options I have tried, -n, -M, -h, -V) will
> all put Roman numeral 9 in between 4 and 5. See here:
> 
> # echo "III\nII\nI\nV\nIV\nVII\nVI\nVIII\nX\nIX" | sort -g | nl
> 
> What I expect is to put 9 in between 8 and 10.
> 
> As I wrote above, I have tried -n as well. I tried -M because in
> Romanian often the months are written with Roman numerals (I to XII),
> but that also failed. -h and -V were not useful here either.
> 
> How do I sort in a pipe those roman numerals? I have written two bash
> scripts roman_to_arab.sh and arab_to_roman.sh, but I do not know how
> to adapt it to use it in pipes. Also, it may be too cumbersome to make
> the conversion to arab digits, sort with -n and then convert back into
> roman numerals...

Any script that reads stdin and writes stdout can be used in a pipe.
That's one of the guiding principles of unix.

Many commands take input from stdin, either be specifying no input
file or by using - as the filename. Same thing for output. Some use
a mixture, eg diff:
cat file1 file2 | diff - file3 | less
compares file1+file2 with file3 and pipes to less.

> Anyone has encounter this issue? Any ideas how to sort out this sort
> issue? Of course, the easier will be if, indeed, the sort -g would
> work as expected, e.g. if "_general_ numeric" will not be particular
> to exclude Roman numerals...

After they've done Roman numerals, they can settle down and do
yan tan tethera in all dialects.
https://en.wikipedia.org/wiki/Yan_Tan_Tethera

> At the moment I have to run this sort three times. First time to limit
> it before IX (with grep -v -e IX -e '^X'), second time just grep "IX",
> and third time to exclude all that starts with I and V: grep -v -e
> "^I" -e "^V", and then put all together, like this:
> 
> ( echo "III\nII\nI\nV\nIV\nVII\nVI\nVIII\nXI\nIX\nXII\nX" | sort -g | grep -v 
> -e "IX" -e '^X' ; echo "III\nII\nI\nV\nIV\nVII\nVI\nVIII\nXI\nIX\nXII\nX" | 
> grep -e "IX" ; echo "III\nII\nI\nV\nIV\nVII\nVI\nVIII\nXI\nIX\nXII\nX" | sort 
> -g | grep -v -e "^I" -e "^V") | nl

You shouldn't sort like that. If you've got records to sort which have
an unsortable field like Roman months, then write some thing in sed,
say, that can do the conversion. Now read your records, say:
field1 field2 XII field3 field4
field1 field2 IV field3 field4
and prefix each record with the numeric representation;
12 field1 field2 XII field3 field4
04 field1 field2 IV field3 field4
Now sort that, then throw away the first field with cut. You should
never have to worry about converting things back!

Basically, that throwaway prefix (it could itself be several fields)
could be a function of any complexity: the order of seats in a
theatre, the value of chess pieces, a lookup table of the order of
precedence of church clergy, whatever turns unsortables into
sortables.

> I exclude here larger numerals, because at the moment I do not need
> anything in that range...

No—handling Romanian month names and abbreviations might be more
useful. I once wrote an arabic→roman converter but that was just as
an exercise in returning variable length strings from OS/360 assembler
to Fortran IV.

> Using the unicode gliphs also doesn't work:
> 
> # echo "Ⅲ\nⅡ\nⅠ\nⅣ\nⅤ\nⅨ\nⅥ\nⅦ\nⅧ\nⅫ\nⅪ\nⅩ" | sort -g | nl

Again, simpler with sed. And don't forget the lower case set just
along the way.

Cheers,
David.

Re: troubleshooting Kmail

[Gene Heskett]

On Sunday 18 February 2018 04:11:48 David Baron wrote:

> Kmail has been broken for weeks. No action, just excuses. Might simply
> have to abandon it after all these years.
>
Then look at TDE, its kde forked at about the 3.5 point, with kajillions 
of bugs fixed. I'm running it here, works perfect.

> On Sat, Feb 17, 2018, 11:42 PM  wrote:
> > On Saturday, February 17, 2018 3:59:53 PM EST ernst doubt wrote:
> > > I sent a similar message to debian-kde this morning, but it
> > > appears
> >
> > there's
> >
> > > not much activity there, so I figured I'd also try here.
> > >
> > > I've been a debian GNU/linux user (I like KDE for my desktop,
> > > though I generally keep openbox (and gnome) available as
> > > "fallbacks") for quite
> >
> > some
> >
> > > time now (decades at least) and am in general a very happy user.
> > > I've
> >
> > been
> >
> > > using  both thunderbird and claws-mail as IMAP clients for some
> > > time, but recently (a few months ago) I set up Kmail (and I like
> > > it very much, as integration with gnupg was relatively painless).
> > > I am again using it as
> >
> > an
> >
> > > IMAP client (with this gmail address). I have two computers, both
> > > running debian 9 stretch. On one of them (the laptop), Kmail is
> > > functioning properly, but on the desktop machine which I'm writing
> > > from now, incoming email has not been appearing since the end of
> > > January. I don't see any obvious menu entries which would give me
> > > access to log files in order to try to troubleshoot the problem,
> > > so I'm looking for any advice as to how
> >
> > I
> >
> > > might go about correcting the issue so this instance of Kmail can
> > > again receive email (it's possible that the problem is as simple
> > > as an incorrectly entered password though I've just attempted to
> > > reenter it
> >
> > with
> >
> > > no improvement in mail fetching behavior). I'm not currently
> > > subscribed
> >
> > to
> >
> > > this list, so CCing me is perfectly fine (though I'll monitor the
> > > web archives for responses on which I may not be CCed).
> > >
> > >thanks so much in advance for any clues anyone may have to
> > > share with
> >
> > me,
> >
> > > ~c
> >
> > Ernst,
> >
> > Things that come to mind...
> > The way IMAP works is e-mail is delivered to the mail server
> > (google/gmail, is
> > what I think you said). Your client (kmail, thunderbird, etc) reads
> > an email
> > message from the server. Then, depending on configuration, the
> > message is saved
> > or deleted?  So, check your configuration to be sure that the IMAP
> > server is
> > configured to leave mail on the server after being read.
> > Also, have you checked that the version of kmail is the same on both
> > computers?
> >
> > Mark
> >
> > Have you ckecked the version of each instance of kmail?



-- 
Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 

Re: Kmail Broken?

[Gene Heskett]

On Sunday 18 February 2018 06:29:34 ernst doubt wrote:

> David,
>Thanks much for the heads-up.  Do you have a bug report you could
> refer me to so I can check out details? I guess in some sense I'm
> quite "lucky" as I do have one instance that's continuing to function
> properly (on the laptop) even though this one is reduced to being able
> to send emails and can't seem to receive them. I'd like to find the
> relevant bug report (or if there is none yet, open one myself) so that
> I can hopefully aid in troubleshooting the specific issue(s). It's
> hard for me to believe that this piece of software will just be
> abandoned considering how well it was working and how many functional
> options it has (had?).
>
>  ~e
Simple solution, join the mailing list at debian. gmane my be gone for 
good from rumors I've read. Send an empty message to 
 with the subject "subscribe" or 
click on
 and hit 
send.
You will get a confirmation message, just hit reply to return it. Done.

-- 
Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 

Re: troubleshooting Kmail

[deloptes]

Gene Heskett wrote:

> Then look at TDE, its kde forked at about the 3.5 point, with kajillions
> of bugs fixed. I'm running it here, works perfect.

+1

Re: sort (-g) [offtopic]

[John Hasler]

 David Wright writes:
> You shouldn't sort like that. If you've got records to sort which have
> an unsortable field like Roman months, then write some thing in sed

And Awk, as well as Sort, Cut, Join, and other record-oriented filters.
-- 
John Hasler 
jhas...@newsguy.com
Elmwood, WI USA

Re: Stretch net install on EeePC - unable to resolve mirror host address

[Roger Price]

On Sat, 17 Feb 2018, Gene Heskett wrote:


  ~ # cat /etc/resolv.conf
  search rogerprice.org
  nameserver 8.8.8.8

Does the resolv.conf still contain that data?


Yes

On Sat, 17 Feb 2018, Gene Heskett wrote:


debian.proxad.net is 212.27.32.6. If you ping that?

Yes, works great even from a rock64 out in the garage.
Do a "sudo route -n" and see if you get a valid gateway, "UG" address.
Then describe your hardware arrangement precisely please


On Sat, 17 Feb 2018, Gene Heskett wrote:


On Saturday 17 February 2018 19:48:20 Rodary Jacques wrote:


I had this kind of problem with free (i.e. proxad) repository which
isn't any more (bust was in 2016) on the mirror list, and had to 
replace it with  -not a ftp server-

in /etc/apt/sources.list. Salut. Jacques


debian.proxad.net pings just fine from a stretch install on an arm64
machine:
rock64@rock64:/media/slash/home/rock64$ ping debian.proxad.net
PING debian.proxad.net (212.27.32.66) 56(84) bytes of data. 
64 bytes from debian.proxad.net (212.27.32.66): icmp_seq=1 ttl=50 time=107 ms

...

4 packets transmitted, 4 received, 0% packet loss, time 3003ms
Something is wrong with his gateway, or dns.


Thanks for all your comments, I repeated my attempt to install as follows:

Hardware: EeePC1201K (AMD Athlon 1000MHz, 1Gbyte)
 External CD/DVD reader Samsung SE-S084.
 Router: TP-Link 450M Wireless N Gigabit Model No. TL-WR1043ND. No IPv6

"Graphical expert install"
  1. Configure the keyboard (AZERTY)
  2. Detect and mount CD-ROM
  3. Load installer components from CD
 [X] choose-mirror
  4. Detect network hardware
 Missing firmware files are: rt2680.bin Load? [X] No
  5. Configure the network
 enp0s4: Silicon Intergrated Systems [SiS] 190 Ethernet Adapter
 wlp2s0: Ralink Corp: RT3090 Wireless 802.11n 1T/1R PCIe (wireless)
  6. Choose enp0s4 as primary
  7. Auto-configure networking? Yes
 IPv6 + DHCP, set hostname and domain name.
  8. Ctl-Alt-F3 to /dev/tty3
 ~ # route
 Kernel IP routing table
 Destination  Gateway GenmaskFlags Metric Ref Use Iface
 default  10.218.0.1  0.0.0.0UG0  0   0   enp0s4
 10.218.0.0   *   255.255.255.0  U 0  0   0   enp0s4
  9. ~ # ip address
 ...
 3: enp0s4:  mtu 1500 ...
link/ether 20:cf:30:10:43:fd brd ff:...
inet 10.218.0.100/24 scope global enp0s4
 ...
 10. ~ # ping -c3 debian.proxad.net
 PING debian.proxad.net (212.27.32.66): 56 data bytes
 64 bytes from 212.27.32.66: seq=0 ttl=57 time=38.838 ms
 ...
 3 packets transmitted, 3 packets received, 0% packet loss
 11. Ctl-Alt-F5 Graphical install
 Choose a mirror of the Debian archive
   http, debian.proxad.net
 12. Ctl-Alt-F4
 Last line shows EeePC hung on
 choose-mirror[4246]: DEBUG: command: wget --no-verbose
  http://debian.proxad.net/debian/dists/stretch/Release -O - | grep -E
  '^(Suite|Codename|Architectures):'
 13. Ctl-Alt-F3 to /dev/tty3
 ping ftp.fr.debian.org is successful, but
 hangs on command wget --no-verbose
  http://ftp.fr.debian.org/debian/dists/stretch/Release -O - | grep -E
  '^(Suite|Codename|Architectures):'
 14. I repeated 13 with more verbosity:
 wget http://ftp.fr.debian.org/debian/dists/stretch/Release -O - | grep -E
  '^(Suite|Codename|Architectures):'
 --2018-02-18 20:50:31-- 
http://ftp.fr.debian.org/debian/dists/stretch/Release
 Resolving ftp.fr.debian.org... 212.27.32.66, 2a01:e0c:1:1598::2
 Connecting to ftp.fr.debian.org|212.27.32.66|:80... Connected
 HTTP request sent, awaiting response
 ... 15 minutes go by ...
 Read error (Connection timed out) in headers.
 Retrying

It looks as if the network setup in the EeePC is correct, but wget fails.
Any suggestion would be very welcome, Roger

Re: Stretch net install on EeePC - unable to resolve mirror host address

[Gene Heskett]

On Sunday 18 February 2018 17:19:48 Roger Price wrote:

> On Sat, 17 Feb 2018, Gene Heskett wrote:
> >>   ~ # cat /etc/resolv.conf
> >>   search rogerprice.org
> >>   nameserver 8.8.8.8
> >
> > Does the resolv.conf still contain that data?
>
> Yes
>
> On Sat, 17 Feb 2018, Gene Heskett wrote:
> >> debian.proxad.net is 212.27.32.6. If you ping that?
> >
> > Yes, works great even from a rock64 out in the garage.
> > Do a "sudo route -n" and see if you get a valid gateway, "UG"
> > address. Then describe your hardware arrangement precisely please
>
> On Sat, 17 Feb 2018, Gene Heskett wrote:
> > On Saturday 17 February 2018 19:48:20 Rodary Jacques wrote:
> >> I had this kind of problem with free (i.e. proxad) repository which
> >> isn't any more (bust was in 2016) on the mirror list, and had to
> >> replace it with  -not a ftp
> >> server- in /etc/apt/sources.list. Salut. Jacques
> >
> > debian.proxad.net pings just fine from a stretch install on an arm64
> > machine:
> > rock64@rock64:/media/slash/home/rock64$ ping debian.proxad.net
> > PING debian.proxad.net (212.27.32.66) 56(84) bytes of data.
> > 64 bytes from debian.proxad.net (212.27.32.66): icmp_seq=1 ttl=50
> > time=107 ms
>
> ...
>
> > 4 packets transmitted, 4 received, 0% packet loss, time 3003ms
> > Something is wrong with his gateway, or dns.
>
> Thanks for all your comments, I repeated my attempt to install as
> follows:
>
> Hardware: EeePC1201K (AMD Athlon 1000MHz, 1Gbyte)
>   External CD/DVD reader Samsung SE-S084.
>   Router: TP-Link 450M Wireless N Gigabit Model No. TL-WR1043ND. No
> IPv6
>
> "Graphical expert install"
>1. Configure the keyboard (AZERTY)
>2. Detect and mount CD-ROM
>3. Load installer components from CD
>   [X] choose-mirror
>4. Detect network hardware
>   Missing firmware files are: rt2680.bin Load? [X] No
>5. Configure the network
>   enp0s4: Silicon Intergrated Systems [SiS] 190 Ethernet Adapter
>   wlp2s0: Ralink Corp: RT3090 Wireless 802.11n 1T/1R PCIe
> (wireless) 6. Choose enp0s4 as primary
>7. Auto-configure networking? Yes
>   IPv6 + DHCP, set hostname and domain name.
>8. Ctl-Alt-F3 to /dev/tty3
>   ~ # route
>   Kernel IP routing table
>   Destination  Gateway GenmaskFlags Metric Ref Use
> Iface default  10.218.0.1  0.0.0.0UG0  0   0  
> enp0s4 10.218.0.0   *   255.255.255.0  U 0  0   0  
> enp0s4 9. ~ # ip address
>   ...
>   3: enp0s4:  mtu 1500 ...
>  link/ether 20:cf:30:10:43:fd brd ff:...
>  inet 10.218.0.100/24 scope global enp0s4
>   ...
>   10. ~ # ping -c3 debian.proxad.net
>   PING debian.proxad.net (212.27.32.66): 56 data bytes
>   64 bytes from 212.27.32.66: seq=0 ttl=57 time=38.838 ms
>   ...
>   3 packets transmitted, 3 packets received, 0% packet loss
>   11. Ctl-Alt-F5 Graphical install
>   Choose a mirror of the Debian archive
> http, debian.proxad.net
>   12. Ctl-Alt-F4
>   Last line shows EeePC hung on
>   choose-mirror[4246]: DEBUG: command: wget --no-verbose
>http://debian.proxad.net/debian/dists/stretch/Release -O - |
> grep -E '^(Suite|Codename|Architectures):'
>   13. Ctl-Alt-F3 to /dev/tty3
>   ping ftp.fr.debian.org is successful, but
>   hangs on command wget --no-verbose
>http://ftp.fr.debian.org/debian/dists/stretch/Release -O - |
> grep -E '^(Suite|Codename|Architectures):'
>   14. I repeated 13 with more verbosity:
>   wget http://ftp.fr.debian.org/debian/dists/stretch/Release -O -
> | grep -E '^(Suite|Codename|Architectures):'
>   --2018-02-18 20:50:31--
> http://ftp.fr.debian.org/debian/dists/stretch/Release Resolving
> ftp.fr.debian.org... 212.27.32.66, 2a01:e0c:1:1598::2 Connecting to
> ftp.fr.debian.org|212.27.32.66|:80... Connected HTTP request sent,
> awaiting response
>   ... 15 minutes go by ...
>   Read error (Connection timed out) in headers.
>   Retrying
>
> It looks as if the network setup in the EeePC is correct, but wget
> fails. Any suggestion would be very welcome, Roger

Check the list, I think wget was mentioned as a problem child child 
within the last 2 or 3 weeks. Is the machine fully uptodate?



-- 
Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 

Re: Stretch net install on EeePC - unable to resolve mirror host address

[Brian]

On Sun 18 Feb 2018 at 23:19:48 +0100, Roger Price wrote:

> Thanks for all your comments, I repeated my attempt to install as follows:
> 
> Hardware: EeePC1201K (AMD Athlon 1000MHz, 1Gbyte)
>  External CD/DVD reader Samsung SE-S084.
>  Router: TP-Link 450M Wireless N Gigabit Model No. TL-WR1043ND. No IPv6
> 
> "Graphical expert install"
>   1. Configure the keyboard (AZERTY)
>   2. Detect and mount CD-ROM
>   3. Load installer components from CD
>  [X] choose-mirror

Why? I've never used it. I don't know what it does. It's optional. Don't
select it.

>   4. Detect network hardware
>  Missing firmware files are: rt2680.bin Load? [X] No
>   5. Configure the network
>  enp0s4: Silicon Intergrated Systems [SiS] 190 Ethernet Adapter
>  wlp2s0: Ralink Corp: RT3090 Wireless 802.11n 1T/1R PCIe (wireless)
>   6. Choose enp0s4 as primary
>   7. Auto-configure networking? Yes
>  IPv6 + DHCP, set hostname and domain name.
>   8. Ctl-Alt-F3 to /dev/tty3
>  ~ # route
>  Kernel IP routing table
>  Destination  Gateway GenmaskFlags Metric Ref Use Iface
>  default  10.218.0.1  0.0.0.0UG0  0   0   enp0s4
>  10.218.0.0   *   255.255.255.0  U 0  0   0   enp0s4
>   9. ~ # ip address
>  ...
>  3: enp0s4:  mtu 1500 ...
> link/ether 20:cf:30:10:43:fd brd ff:...
> inet 10.218.0.100/24 scope global enp0s4
>  ...
>  10. ~ # ping -c3 debian.proxad.net
>  PING debian.proxad.net (212.27.32.66): 56 data bytes
>  64 bytes from 212.27.32.66: seq=0 ttl=57 time=38.838 ms
>  ...
>  3 packets transmitted, 3 packets received, 0% packet loss
>  11. Ctl-Alt-F5 Graphical install
>  Choose a mirror of the Debian archive
>http, debian.proxad.net
>  12. Ctl-Alt-F4
>  Last line shows EeePC hung on
>  choose-mirror[4246]: DEBUG: command: wget --no-verbose
>   http://debian.proxad.net/debian/dists/stretch/Release -O - | grep -E
>   '^(Suite|Codename|Architectures):'
>  13. Ctl-Alt-F3 to /dev/tty3
>  ping ftp.fr.debian.org is successful, but
>  hangs on command wget --no-verbose
>   http://ftp.fr.debian.org/debian/dists/stretch/Release -O - | grep -E
>   '^(Suite|Codename|Architectures):'
>  14. I repeated 13 with more verbosity:
>  wget http://ftp.fr.debian.org/debian/dists/stretch/Release -O - | grep -E
>   '^(Suite|Codename|Architectures):'
>  --2018-02-18 20:50:31-- 
> http://ftp.fr.debian.org/debian/dists/stretch/Release
>  Resolving ftp.fr.debian.org... 212.27.32.66, 2a01:e0c:1:1598::2
>  Connecting to ftp.fr.debian.org|212.27.32.66|:80... Connected
>  HTTP request sent, awaiting response
>  ... 15 minutes go by ...
>  Read error (Connection timed out) in headers.
>  Retrying
> 
> It looks as if the network setup in the EeePC is correct, but wget fails.
> Any suggestion would be very welcome, Roger

Try a different mirror. With and without step 3.

-- 
Brian.

Re: Stretch net install on EeePC - unable to resolve mirror host address

[Brian]

On Sun 18 Feb 2018 at 17:51:50 -0500, Gene Heskett wrote:

> On Sunday 18 February 2018 17:19:48 Roger Price wrote:

[Snipped]
 
> > It looks as if the network setup in the EeePC is correct, but wget
> > fails. Any suggestion would be very welcome, Roger
> 
> Check the list, I think wget was mentioned as a problem child child 
> within the last 2 or 3 weeks. Is the machine fully uptodate?

What significance does "fully uptodate" have when using the installer?

-- 
Brian.

Re: Stretch net install on EeePC - unable to resolve mirror host address

[Gene Heskett]

On Sunday 18 February 2018 18:47:58 Brian wrote:

> On Sun 18 Feb 2018 at 17:51:50 -0500, Gene Heskett wrote:
> > On Sunday 18 February 2018 17:19:48 Roger Price wrote:
>
> [Snipped]
>
> > > It looks as if the network setup in the EeePC is correct, but wget
> > > fails. Any suggestion would be very welcome, Roger
> >
> > Check the list, I think wget was mentioned as a problem child child
> > within the last 2 or 3 weeks. Is the machine fully uptodate?
>
> What significance does "fully uptodate" have when using the installer?

The install media may be dated, so if it will boot at all, the first 
thing should be to update it and see if wget is replaced and now works.

-- 
Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 

Re: Stretch net install on EeePC - unable to resolve mirror host address

[Ólafur Jens Sigurðsson]

On Sat, Feb 17, 2018 at 06:52:43PM +, Curt wrote:
> On 2018-02-17, Reco  wrote:
> >
> > First, please don't get me wrong, but can you provide the output of
> > (regular box, of course):
> >
> > wget -S --spider https://wiki.debian.org
> >
> > There have been some reports from people using your ISP that this page
> > does not work for them somehow, and I'm too lazy to travel to France to
> > check it out :)
> >
> 
> Here I am conveniently in France:
> 
> curty@einstein:~$ wget -S --spider https://wiki.debian.org
> Spider mode enabled. Check if remote file exists.
> --2018-02-17 19:52:06--  https://wiki.debian.org/
> Resolving wiki.debian.org (wiki.debian.org)... 82.195.75.112, 
> 2001:41b8:202:deb:6564:a62:52c3:4b70
> Connecting to wiki.debian.org (wiki.debian.org)|82.195.75.112|:443... 
> connected.
> HTTP request sent, awaiting response... 
>   HTTP/1.1 403 FORBIDDEN
>   Date: Sat, 17 Feb 2018 18:52:06 GMT
>   Server: Apache
>   X-Content-Type-Options: nosniff
>   X-Frame-Options: sameorigin
>   Referrer-Policy: no-referrer
>   X-Xss-Protection: 1
>   Strict-Transport-Security: max-age=15552000
>   Public-Key-Pins: pin-sha256="yPqY/77C2aLVJIEAYtuMrFy+cX6g4CatH03gcBQbxpo="; 
> pin-sha256="TzmD7DK6d5d7RU66/XTJtlENSfv+i0P7x2Xmpl8uFrY="; max-age=5184000
>   Content-Length: 166
>   X-Clacks-Overhead: GNU Terry Pratchett
>   Keep-Alive: timeout=5, max=100
>   Connection: Keep-Alive
>   Content-Type: text/html
> Remote file does not exist -- broken link!!!
> 
> I surfed the wiki the other day, no problemo, but "HTTP/1.1 403 FORBIDDEN"?

I get the same here in Iceland, IP address is 193.109.xxx.xxx (AS Number
is 24743) and I can browse the wiki just fine.

What do people in the US get?

Cheers, Oli

Re: wiki

[Rodary Jacques]

Le vendredi 16 février 2018, 19:53:44 CET Reco a écrit :
>   Hi.
> 
> On Fri, Feb 16, 2018 at 10:38:49AM -0500, Greg Wooledge wrote:
> > On Fri, Feb 16, 2018 at 10:30:31AM -0500, Gene Heskett wrote:
> > > On Friday 16 February 2018 07:08:57 Rodary Jacques wrote:
> > > 
> > > > Le vendredi 16 février 2018, 06:42:52 CET rhkra...@gmail.com a écrit :
> > > > > On Thursday, February 15, 2018 08:42:14 PM Rodary Jacques wrote:
> > > > > > Why can't I access wikis from a Debian box:
> > > > > > Forbidden
> > > > > > You are not allowed to access this!
> > > > > > is the message I get.
> > > > >
> > > > > I think we need more information--which wiki are you having trouble
> > > > > with? (What is its URL?)
> > > >
> > > > I first had this message on  https://wiki.debian.org, then on various
> > > > problems.
> > > 
> > > Old but uptodate wheezy install here. firefox had no problems navigating 
> > > the site.
> > > Perhaps your http->S<- is defective somehow.
> > 
> > The original message was so incredibly vague that it could mean anything.
> > 
> > But.
> > 
> > If the actual complaint is "I get 403 Forbidden on https://wiki.debian.org";
> > then we need additional detail: what version of Debian the OP is using,
> > what browser, and any unusual aspects of the OP's network that could
> > be relevant (workplace firewall, China firewall, etc.).
> 
> My crystal ball says that OP is using home connection, and no, these
> details aren't needed. tcpdump/wireshark capture, combined with the SSL
> session key - that's what needed.
> Or someone from 11AS12322 willing to provide a temporary shell account.
> 
> E-mail headers say that e-mail came from 11AS12322 belonging to some
> French provider:
> 
> Received: from ns.rodary.net (unknown [88.170.1.143])
> by smtp5-g21.free.fr (Postfix) with ESMTP id 154405FF27
> for ; Fri, 16 Feb 2018 02:42:15 +0100 
> (CET)
> 
> With MUA which is uncommon in dull enterprise world:
> 
> User-Agent: KMail/5.2.3 (Linux/4.9.0-5-amd64; KDE/5.28.0; x86_64; ; )
> 
> I believe we can exclude such possibilities as China Great Firewall
> (unless they installed it in France for some reason), or workplace SSL
> Bump (else OP won't see HTTP 403).
> 
> 
> > There have been several similar complaints in #debian IRC over the last
> > year or two, with random people coming in and saying that they get a
> > "403 Forbidden" on the Debian wiki, but the one thing they all have in
> > common is a LACK OF DETAIL.
> 
> Whose who know they way around don't have such problems. Whose who don't
> are unable to describe it. I see nothing unusual in this.
> 
> My suggestion to OP - try Tor, see if it works.
> 
> 
> > At this point nobody knows how to diagnose the problem, because nobody
> > who HAS the problem is willing or able to come forward and just say what
> > is happening and why.  Is it a DNS resolution error, in which they're
> > getting the wrong IP address?
> 
> No. Browsers do certificate validation, "wrong IP address" would be
> possible if the third party somehow produced a valid certificate for
> wiki.debian.org (you have to be a CA *or* the government to do this) and
> faked a DNS record (that's easy part).
> 
> > Does the wiki or its front-end web server have a firewall that
> > blacklists certain IP address ranges?
> 
> Even if it did, the firewall have not come into play.
> Since the user saw HTTP 403 it means that HTTPS connection was
> established successfully, and a front-end (or back-end) webserver gave
> 403 code, which was transferred to a user.
> 
> >  Is it a web browser bug?  Nobody knows!
I was using Opera  browser,so quick,  but I just tried with firefox, so slow, 
but both mozilla, and the result is the same when google search ( which I don't 
use with  Opera)  gives me a lot of choices , all with 403 result. My  public 
IP, 88.170.1.143 is the one my provider ( free.fr=proxad.fr)  gave me.
> 
> Hardly. Of course OP could use some ancient toy browser that does not do
> SNI, 
what is  SNI?
> but wiki.debian.org provides a correct certificate even for
> *those*. It's easy to check with (openssl does not use SNI unless you
> ask for it):
> 
> openssl s_client -host wiki.debian.org -port 443
> 
> Reco
> 
Will my comments help?
Jacques

debian preseed net configuration

[John Ratliff]

I'm trying to setup a debian preseed with a pxeboot setup. But it always 
seems to ignore the netcfg section; or perhaps I am configuring it wrong.


I am getting the preseed file from tftp. I'm fine if it needs to use 
DHCP while it's installing, but why doesn't it configure it for static 
after it's done?


# Static Network Config (10.246.89.89/24)
d-i netcfg/choose_interface select ens192
d-i netcfg/disable_autoconfig boolean true

d-i netcfg/get_ipaddress string 10.246.89.89
d-i netcfg/get_netmask string 255.255.255.0
d-i netcfg/get_gateway string 10.246.89.254
d-i netcfg/get_nameservers string 10.9.6.114 10.9.6.138
d-i netcfg/confirm_static boolean true

Thanks.

Re: wiki

[Roberto C . Sánchez]

On Mon, Feb 19, 2018 at 03:29:50AM +0100, Rodary Jacques wrote:
> what is  SNI?

https://en.wikipedia.org/wiki/Server_Name_Indication

Essentially, there was a time when you could not host more than one
HTTPS-enabled site per IP address and port combination. This was a
problem for virtual hosting configurations where the server name in the
request was used to decide what content to serve. SNI allows for
identifying the server associated with the request early in the
connection so that a matching SSL certificate can be used for the
connection. Or something along those lines.

Regards,

-Roberto

-- 
Roberto C. Sánchez

Re: Stretch net install on EeePC - unable to resolve mirror host address

[David Wright]

On Mon 19 Feb 2018 at 01:33:52 (+), Ólafur Jens Sigurðsson wrote:
> On Sat, Feb 17, 2018 at 06:52:43PM +, Curt wrote:
> > On 2018-02-17, Reco  wrote:
> > >
> > > First, please don't get me wrong, but can you provide the output of
> > > (regular box, of course):
> > >
> > > wget -S --spider https://wiki.debian.org
> > >
> > > There have been some reports from people using your ISP that this page
> > > does not work for them somehow, and I'm too lazy to travel to France to
> > > check it out :)
> > >
> > 
> > Here I am conveniently in France:
> > 
> > curty@einstein:~$ wget -S --spider https://wiki.debian.org
> > Spider mode enabled. Check if remote file exists.
> > --2018-02-17 19:52:06--  https://wiki.debian.org/
> > Resolving wiki.debian.org (wiki.debian.org)... 82.195.75.112, 
> > 2001:41b8:202:deb:6564:a62:52c3:4b70
> > Connecting to wiki.debian.org (wiki.debian.org)|82.195.75.112|:443... 
> > connected.
> > HTTP request sent, awaiting response... 
> >   HTTP/1.1 403 FORBIDDEN
> >   Date: Sat, 17 Feb 2018 18:52:06 GMT
> >   Server: Apache
> >   X-Content-Type-Options: nosniff
> >   X-Frame-Options: sameorigin
> >   Referrer-Policy: no-referrer
> >   X-Xss-Protection: 1
> >   Strict-Transport-Security: max-age=15552000
> >   Public-Key-Pins: 
> > pin-sha256="yPqY/77C2aLVJIEAYtuMrFy+cX6g4CatH03gcBQbxpo="; 
> > pin-sha256="TzmD7DK6d5d7RU66/XTJtlENSfv+i0P7x2Xmpl8uFrY="; max-age=5184000
> >   Content-Length: 166
> >   X-Clacks-Overhead: GNU Terry Pratchett
> >   Keep-Alive: timeout=5, max=100
> >   Connection: Keep-Alive
> >   Content-Type: text/html
> > Remote file does not exist -- broken link!!!
> > 
> > I surfed the wiki the other day, no problemo, but "HTTP/1.1 403 FORBIDDEN"?
> 
> I get the same here in Iceland, IP address is 193.109.xxx.xxx (AS Number
> is 24743) and I can browse the wiki just fine.
> 
> What do people in the US get?

Much the same as anyone else. But who cares. This subthread was
hijacked here:
https://lists.debian.org/debian-user/2018/02/msg00755.html

Forget the wiki. And as Brian said, forget this option:

Installer components to load:
[ ] choose-mirror: Choose mirror to install from (menu item)

Work your way through the main menu …

  │  Choose language
  │  Configure the keyboard
  │  Detect and mount CD-ROM
  │  Load installer components from CD
  │  Detect network hardware
  │  Configure the network
  │  Set up users and passwords
  │  Configure the clock
  │  Detect disks
  │  Partition disks
  │  Install the base system
  │  Configure the package manager

… and don't think about mirrors until you get to this point.

  │  Select and install software
  │  Install the GRUB boot loader on a hard disk
  │  Finish the installation

Cheers,
David.

Re: sort (-g) [offtopic]

[Ionel Mugurel Ciobîcă]

On 18-02-2018, at 14h 44'27", David Wright wrote about "Re: sort (-g) 
[offtopic]"
> Any script that reads stdin and writes stdout can be used in a pipe.
> That's one of the guiding principles of unix.

I change the scripts to use read if $# is zero. I could use them in
pipes now. But that is not helping me.

> 
> After they've done Roman numerals, they can settle down and do
> yan tan tethera in all dialects.
> https://en.wikipedia.org/wiki/Yan_Tan_Tethera

Well, I do not see those to use any symbols. It is like asking the
computer to sort numerically one two three four ... in whatever
language. This will fail.

Roman numerals never fail from usage, they should be considered, in my
opinion.

> You shouldn't sort like that. If you've got records to sort which have
> an unsortable field like Roman months, then write some thing in sed,
> say, that can do the conversion. Now read your records, say:
> field1 field2 XII field3 field4
> field1 field2 IV field3 field4
> and prefix each record with the numeric representation;
> 12 field1 field2 XII field3 field4
> 04 field1 field2 IV field3 field4
> Now sort that, then throw away the first field with cut. You should
> never have to worry about converting things back!

My programing capacities in sed or awk must be improved in order to
accomplish that. In the mean time, since I only need to move the 5th
line into 9th position (before 10) I can supliment the sort with a sed
pipe:

some input | sort -k2,2 | sed -e '5h;5d;10H;10x'

This of course if all the Roman numerals from 1 to 12 are present...
and only once..., hm...

Thank you for the hints, David.

Ionel

Re: wiki

[Reco]

Hi.

On Mon, Feb 19, 2018 at 03:29:50AM +0100, Rodary Jacques wrote:
> > Even if it did, the firewall have not come into play.
> > Since the user saw HTTP 403 it means that HTTPS connection was
> > established successfully, and a front-end (or back-end) webserver gave
> > 403 code, which was transferred to a user.
> > 
> > >  Is it a web browser bug?  Nobody knows!
> I was using Opera  browser,so quick,  but I just tried with firefox, so slow, 
> but both mozilla, and the result is the same when google search ( which I 
> don't use with  Opera)  gives me a lot of choices , all with 403 result. My  
> public IP, 88.170.1.143 is the one my provider ( free.fr=proxad.fr)  gave me.

As I wrote earlier - try Tor.
It seems that your network subnet was banned at wiki.debian.org.

Reco

Re: wiki

[Rodary Jacques]

Le dimanche 18 février 2018, 21:47:59 CET Roberto C. Sánchez a écrit :
> On Mon, Feb 19, 2018 at 03:29:50AM +0100, Rodary Jacques wrote:
> > what is  SNI?
> 
> https://en.wikipedia.org/wiki/Server_Name_Indication
> 
> Essentially, there was a time when you could not host more than one
> HTTPS-enabled site per IP address and port combination. This was a
> problem for virtual hosting configurations where the server name in the
> request was used to decide what content to serve. SNI allows for
> identifying the server associated with the request early in the
> connection so that a matching SSL certificate can be used for the
> connection. Or something along those lines.
> 
> Regards,
> 
> -Roberto
Reading all your posts, I realized that I didn't allow NEW connections 
by https (port 443) or by ssh (port 22) in my iptables setup. So I did but 
nothing changed neither with Opera, nor with Firefox.
So no wiki for me!  :-(

Re: USB key and lost space

[Thomas Schmitt]

Hi,

Rodary Jacques wrote:
> I don't quite know how, but with fdisk, cfdisk, parted, partx and partprobe
> I now have a brand new key with 16 GB (or GiB), the original size, without
> the iso file,
> [...]
> But the one with netinst iso (with the two partitions) seem to be much
> harder.
> [...]
> 'wipefs /dev/sde' continue to read:
> [...]
> 0x8001   iso9660   [filesystem]
> LABEL: Debian 9.3.0 amd64 n

Originally you asked:
> > On  several USB keys used for installation (or try of) I copied iso files of
> > more or less  MB, and the remaining space (of 15 or 31MB is inaccessible

This is a different job than removing an installation ISO from a USB stick
or memory card.

To erase the ISO 9660 superblock of debian-9.3.0-amd64-netinst.iso do

  umount /dev/sde1
  dd if=/dev/zero bs=2048 seek=16 count=4 conv=notrunc of=/dev/sde

But first make sure that /dev/sde is indeed the medium you want to erase.
Device names can change on unplug and replug.


I really wonder what the regular use case of wipefs is. Its man page
looks confusing:

   wipefs can erase filesystem , raid or partition-table signatures (magic
   strings) from the specified device to make the signatures invisible for
   libblkid.
   wipefs does not erase the filesystem itself [...]

Removing "signatures" quite surely damages the mountability. It looks like
this tool is intended to create confusion about disk content.


> mount says "/dev/sde1 on /media/jr/NIKON D7100
> type vfat (ro, etc..." which is correct except for the ro!

So partition 1 now marks a block range with a FAT filesystem.

What does a partition editor (not wipefs) say about partitions ?


> How can I force the kernel to forget this 'read only' on the disk?

First you will have to find the reason.

It could be over-smartness because of the ISO 9660 superblock which
is now iprobably valid only if read from the base device.

It could be lack of rw-permission on /dev/sde1.


In worst case you will have to overwrite the first MB and the last MB of
/dev/sde and then partition it again. All filesystem content will become
inaccessible then.

But for now, try to get rid of ISO 9660, unplug, replug, and see what
happens. Especially look at permissions of overall device file
(e.g. /dev/sde) and partition device files (e.g. /dev/sde1).


Have a nice day :)

Thomas

where can i find a list of usb wireless card that are supported by linux?

[Long Wind]

i don't like to install additional driveri wish default linux kernel already 
has driver
on Chinese market, many cards claim thatit included driver for Windowsi'm not 
sure if it supports linux
i have install linux-docbut can't find useful info
Thanks!