Re: Configuration file with sensitive data (password)
On Sun, 15 Nov 2009, Nicolas Alvarez wrote: But where to put the password? Due to the protocol used during authentication, the daemon needs the pass- word in plaintext form, it can't be a hash (remote client sends I want to auth, daemon sends nonce, remote client hashes password and nonce, daemon compares hashes). The image stored on the server should rather be (salt, H(salt + pass)), in a world-readable plaintext file. 1. client sends auth request 2. daemon sends (nonce, salt) 3. client sends H(nonce + H(salt + pass)) I'm not saying this is secure or anything, but it might be a bit less insecure. The nonce should protect against replay attacks, and the salt against precomputed password-hash tables. lacos -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Python Program Packaging: Problem Installing .desktop File
Hello there, I want to package a simple python program which allows sending SMS (text- messages) via an GMX (German E-Mail Provider) account. The packaging of the program itself is not the problem but I tried a lot of stuff to install a .desktop file for it - but without any sucess. You can get the source package from the Debian Mentors Repo [1] Any help is appreciated! Thanks in advance, Fabian [1] http://mentors.debian.net/debian/pool/main/g/gmxsms/ signature.asc Description: This is a digitally signed message part.
Re: Python Program Packaging: Problem Installing .desktop File
Am Montag, 16. November 2009 15:23:08 schrieben Sie: Hello there, I want to package a simple python program which allows sending SMS (text- messages) via an GMX (German E-Mail Provider) account. The packaging of the program itself is not the problem but I tried a lot of stuff to install a .desktop file for it - but without any sucess. I forgot to mention the problem: At some stage of the build process (I do not know where exactly) the .desktop file gets deleted and cannot be installed by dh_install. I tried to protect it by setting DEB_CLEAN_EXCLUDE+=*.desktop, but it does not help. You can get the source package from the Debian Mentors Repo [1] Any help is appreciated! Thanks in advance, Fabian [1] http://mentors.debian.net/debian/pool/main/g/gmxsms/ signature.asc Description: This is a digitally signed message part.
How to update package which is in ftp-master queue?
Hello again, some time ago I initially packaged a Java library called simple-xml which is now in the NEW queue on ftp-master [1]. During the past weeks I added some improvements to the package (added maven-repo support). The changes are already in the Debian Java SVN [2]. What is the correct policy for updating this package? Should I write a new RFS? Do I need to wait until the first version of this package is accepted in Debian? btw: When can I expect a decision by the ftp-masters over inclusion into Debian? Still a lot of things to learn.. Thanks, Fabian [1] http://ftp-master.debian.org/new.html [2] http://svn.debian.org/wsvn/pkg-java/trunk/simple- xml/debian/#_trunk_simple-xml_debian_ signature.asc Description: This is a digitally signed message part.
Re: How to update package which is in ftp-master queue?
On Mon, Nov 16, 2009 at 03:34:02PM +0100, Fabian Köster wrote: What is the correct policy for updating this package? Should I write a new RFS? Do I need to wait until the first version of this package is accepted in Debian? btw: When can I expect a decision by the ftp-masters over inclusion into Debian? Have it sponsored again and it will be in the queue alongside your original package. You won't lose your place in the queue. Packages were passing through in a few days, but there is a backlog at the moment because of the archive suspension during ftp-master's team meeting. -- Jonathan Wiltshire 1024D: 0xDB800B52 / 4216 F01F DCA9 21AC F3D3 A903 CA6B EA3E DB80 0B52 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
RFS: ethos
Dear mentors, I am looking for a sponsor for my package ethos. * Package name: ethos Version : 0.2.2-1 Upstream Author : Christan Hergert ch...@dronelabs.com * URL : http://dronelabs.com/projects/ * License : GPL-2 Section : libs It builds these binary packages: libethos-1.0-0 - GObject library for application plugins - shared libraries libethos-dev - GObject library for application plugins - development files libethos-doc - GObject library for application plugins - documentation libethos-ui-1.0-0 - GObject library for application plugins, GTK+ integration - share libethos-ui-dev - GObject library for application plugins, GTK+ integration - devel python-ethos - GObject library for application plugins - Python bindings The package appears to be lintian clean. The upload would fix these bugs: 551100 My motivation for maintaining this package is: This package is a dependency of another package I am preparing, emerillon (a map viewer for GNOME). The package can be found on mentors.debian.net: - URL: http://mentors.debian.net/debian/pool/main/e/ethos - Source repository: deb-src http://mentors.debian.net/debian unstable main contrib non-free - dget http://mentors.debian.net/debian/pool/main/e/ethos/ethos_0.2.2-1.dsc I would be glad if someone uploaded this package for me. Kind regards Mathieu Trudel -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Configuration file with sensitive data (password)
ERSEK Laszlo wrote: On Sun, 15 Nov 2009, Nicolas Alvarez wrote: But where to put the password? Due to the protocol used during authentication, the daemon needs the pass- word in plaintext form, it can't be a hash (remote client sends I want to auth, daemon sends nonce, remote client hashes password and nonce, daemon compares hashes). The image stored on the server should rather be (salt, H(salt + pass)), in a world-readable plaintext file. 1. client sends auth request 2. daemon sends (nonce, salt) 3. client sends H(nonce + H(salt + pass)) I'm not saying this is secure or anything, but it might be a bit less insecure. The nonce should protect against replay attacks, and the salt against precomputed password-hash tables. I don't have the choice of changing the protocol. Clients doing md5(nonce+passwd) have been in the wild for a few years now. -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
RFS: spring
Dear mentors, I am looking for a sponsor for my package spring. * Package name: spring Version : 0.80.5.2-1 Upstream Author : The Spring Team * URL : http://springrts.com * License : GPL and BSD Section : games It builds these binary packages: spring - a modern full-3D RTS game engine spring-common - a modern full-3D RTS game engine (common files) The package appears to be lintian clean. The upload would fix these bugs: 367883 My motivation for maintaining this package is: I like this game and it is a really modern multiplatform free engine. The package can be found on mentors.debian.net: - URL: http://mentors.debian.net/debian/pool/main/s/spring - Source repository: deb-src http://mentors.debian.net/debian unstable main contrib non-free - dget http://mentors.debian.net/debian/pool/main/s/spring/spring_0.80.5.2-1.dsc I would be glad if someone uploaded this package for me. Kind regards Marco Amadori -- ESC:wq -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
RFS: springlobby
Dear mentors, I am looking for a sponsor for my package springlobby. * Package name: springlobby Version : 0.34-1 Upstream Author : The Springlobby Team * URL : http://springlobby.info * License : GPL and BSD Section : games It builds these binary packages: springlobby - single/multiplayer lobby for the Spring RTS engine The package appears to be lintian clean. The upload would fix these bugs: 550250 My motivation for maintaining this package is: I like this game and it is a really modern multiplatform free engine. The package can be found on mentors.debian.net: - URL: http://mentors.debian.net/debian/pool/main/s/springlobby - Source repository: deb-src http://mentors.debian.net/debian unstable main contrib non-free - dget http://mentors.debian.net/debian/pool/main/s/springlobby/springlobby_0.34-1.dsc I would be glad if someone uploaded this package for me. Kind regards Marco Amadori -- ESC:wq -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
RFS: vrfy (updated, QA upload)
Dear mentors, I am looking for a sponsor for my package vrfy. The format of this package is 3.0 (quilt). * Package name: vrfy Version : 990522-5 Upstream Author : Eric Wassenaar, Nikhef-H, e...@nikhef.nl * URL : http://www.sepp.ee.ethz.ch/sepp/vrfy-990522-to.html * License : BSD Section : mail It builds these binary packages: vrfy - Verify electronic mail addresses The package appears to be lintian clean. The upload would fix these bugs: 337201 (minor) , 405761 (important) The package can be found on mentors.debian.net: - URL: http://mentors.debian.net/debian/pool/main/v/vrfy - Source repository: deb-src http://mentors.debian.net/debian unstable main contrib non-free - dget http://mentors.debian.net/debian/pool/main/v/vrfy/vrfy_990522-5.dsc I would be glad if someone reviewed/uploaded this package for me. Kind regards Ignace Mouzannar -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
RFS: e2tools (updated package, New maintainer)
Dear mentors, I am looking for a sponsor for the new version 0.0.16-6 of my package e2tools. It builds these binary packages: e2tools- utilities for manipulating files in an ext2/ext3 filesystem The package appears to be lintian clean. The upload would fix these bugs: 540918 The package can be found on mentors.debian.net: - URL: http://mentors.debian.net/debian/pool/main/e/e2tools - Source repository: deb-src http://mentors.debian.net/debian unstable main contrib non-free - dget http://mentors.debian.net/debian/pool/main/e/e2tools/e2tools_0.0.16-6.dsc I would be glad if someone uploaded this package for me. Kind regards William Vera -- William Vera bi...@billy.com.mx PGP Key: 1024D/F5CC22A4 Fingerprint: 3E73 FA1F 5C57 6005 0439 4D75 1FD2 BF96 F5CC 22A4 -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: RFS: vrfy (updated, QA upload)
Ignace Mouzannar wrote: Dear mentors, I am looking for a sponsor for my package vrfy. The format of this package is 3.0 (quilt). * Package name: vrfy Version : 990522-5 Upstream Author : Eric Wassenaar, Nikhef-H, e...@nikhef.nl * URL : http://www.sepp.ee.ethz.ch/sepp/vrfy-990522-to.html * License : BSD Section : mail It builds these binary packages: vrfy - Verify electronic mail addresses The package appears to be lintian clean. The upload would fix these bugs: 337201 (minor) , 405761 (important) The package can be found on mentors.debian.net: - URL: http://mentors.debian.net/debian/pool/main/v/vrfy - Source repository: deb-src http://mentors.debian.net/debian unstable main contrib non-free - dget http://mentors.debian.net/debian/pool/main/v/vrfy/vrfy_990522-5.dsc I would be glad if someone reviewed/uploaded this package for me. Kind regards Ignace Mouzannar Uploaded, thank you. Barry deFreese -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: RFS: e2tools (updated package, New maintainer)
William Vera wrote: Dear mentors, I am looking for a sponsor for the new version 0.0.16-6 of my package e2tools. It builds these binary packages: e2tools- utilities for manipulating files in an ext2/ext3 filesystem The package appears to be lintian clean. The upload would fix these bugs: 540918 The package can be found on mentors.debian.net: - URL: http://mentors.debian.net/debian/pool/main/e/e2tools - Source repository: deb-src http://mentors.debian.net/debian unstable main contrib non-free - dget http://mentors.debian.net/debian/pool/main/e/e2tools/e2tools_0.0.16-6.dsc I would be glad if someone uploaded this package for me. Kind regards William Vera Uploaded. Thanks! Barry deFreese -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: RFS: e2tools (updated package, New maintainer)
thanks! On Mon, Nov 16, 2009 at 8:36 PM, Barry deFreese bdefre...@verizon.net wrote: William Vera wrote: Dear mentors, I am looking for a sponsor for the new version 0.0.16-6 of my package e2tools. It builds these binary packages: e2tools - utilities for manipulating files in an ext2/ext3 filesystem The package appears to be lintian clean. The upload would fix these bugs: 540918 The package can be found on mentors.debian.net: - URL: http://mentors.debian.net/debian/pool/main/e/e2tools - Source repository: deb-src http://mentors.debian.net/debian unstable main contrib non-free - dget http://mentors.debian.net/debian/pool/main/e/e2tools/e2tools_0.0.16-6.dsc I would be glad if someone uploaded this package for me. Kind regards William Vera Uploaded. Thanks! Barry deFreese -- William Vera bi...@billy.com.mx PGP Key: 1024D/F5CC22A4 Fingerprint: 3E73 FA1F 5C57 6005 0439 4D75 1FD2 BF96 F5CC 22A4 -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Man and UTF-8.
Dear mentors, for a program with no upstream manual page, I generated one stub with help2man, which unfortunately duplicated the program's output, and tidied the source by manual editing. But I run into another problem: unicode characters in the nroff source get corrupted. Is there a way to put an indication in the manpage source code for the nroff parser, that the UTF-8 encoding is used? Have a nice day, -- Charles Plessy Debian Med packaging team, http://www.debian.org/devel/debian-med Tsurumi, Kanagawa, Japan -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Debian JED Group needs a co-maintainer/sponsor (solved)
On 2009-11-05, Luca Falavigna wrote: Guenter Milde mi...@users.berlios.de ha scritto: However, after the retirement of the group leader, there is no DD left in the group. Is any of you a DM, or plan to apply for the role? It could really help a lot if no DDs are available for regular sponsoring activities. Yes, one of us is DM. We also found a DD for the initial sponsoring, so the problem is solved. Thanks, Günter -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Man and UTF-8.
Hi, Charles.
On Nov 17 2009, Charles Plessy wrote:
Is there a way to put an indication in the manpage source code for the
nroff parser, that the UTF-8 encoding is used?
I don't know the answer to that. OTOH, if you only need to use accented
latin characters, you can use something like this:
Rog\('erio Brito
This is described in man 7 groff_char. Perhaps other characters are too.
Regards, Rog\('erio. :-)
--
Rogério Brito : rbr...@{mackenzie,ime.usp}.br : GPG key 1024D/7C2CAEB8
http://www.ime.usp.br/~rbrito : http://meusite.mackenzie.com.br/rbrito
Projects: algorithms.berlios.de : lame.sf.net : vrms.alioth.debian.org
--
To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
