Re: iptables, ftp and dnat?
On Fri, Dec 05, 2008 at 03:30:19PM -0700, Robert L. Harris wrote: > I've read both of those and understand how the ftp works. I've > spent the last 2 days googling. > Unfortunately it's all working now except how to get the iptables data > connection in passive > mode working. I can log in, etc just fine but when I do a "ls" after > issuing the "passive" > command it times out. > > The second example looks good but doesn't handle the DNAT (the ftp > server is running on > another machine behind my firewall. It hangs after ls? Sounds like your data traffic gets jammed somehow. Some things to consider: - did you open up the data port (this is control port minus 1)? - did you open some ports for the passive connection? - did you tell this to your server? - does the NAT machine translate the ftp packets properly? If you're using proftpd you may try set following directives in the config: PassivePorts MasqueradeAddress I had the exact same problem, and this fixed it for me. -- Good day for a change of scene. Repaper the bedroom wall. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: lost my desktop
On Sat, Dec 6, 2008 at 19:17, Frank McCormick <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Kelly Clowers wrote: >> On Sat, Dec 6, 2008 at 17:22, Frank McCormick <[EMAIL PROTECTED]> wrote: >>> -BEGIN PGP SIGNED MESSAGE- >>> Hash: SHA1 >>> >>> Frank McCormick wrote: Well not all of it -- my regular icons have been replaced by generic looking white onesand when I click on 'em (I WAS configured to single-click) the desktop files open in a text editor. I did remove an icon theme ( Nimbus I believe it was called earlier today) and installed something called Moonlight (supposed to be a Linux/Unix equiv to Silverlight) but as far as I know didn't do or change anything else. Alt-F2 still works, and the panel looks OK so it seems its just the desktop affected. >>> >>> It seems I can't create any new icons on the desktop either... >> >> Have you logged out and back in? > > Dozens of times now :) Changed themes, customized themes by choosing new > icon packages...renamed the .gnome and .gnome2 directories...renamed the > .nautilus directory. > > > The strange thing is ALL the icons on the desktop now have .desktop > extensions. None had before. I have no ideas, except reinstall nautilus and maybe some related packages. If you want to try that in aptitude, select a package and press L to mark it for reinstall. I am sure other package managers have something similar. But maybe someone else will have a better idea. Cheers, Kelly Clowers -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: where is postgresql-8.3's packager's instructions?
On Sun, Dec 7, 2008 at 9:32 AM, 中和刘 <[EMAIL PROTECTED]> wrote: > On Sun, Dec 7, 2008 at 5:34 AM, Boyd Stephen Smith Jr. > <[EMAIL PROTECTED]> wrote: >> On Saturday 06 December 2008, "中和刘" <[EMAIL PROTECTED]> wrote >> about 'Re: where is postgresql-8.3's packager's instructions?': >>>when i connect to it using >>>pgadmin3(from the local >>>machine), i got the error: >>>-- >>>An error has occurred: >>>Error connecting to the server: FATAL: password authentication failed >>>for user "postgres" >>> >>>how can i fix it so that i can get pgadmin work? thanks >>> >>>here is my pg_hda.conf >>> >>># Database administrative login by UNIX sockets >>>local all postgres ident sameuser >>> >>># TYPE DATABASEUSERCIDR-ADDRESS METHOD >>> >>># "local" is for Unix domain socket connections only >>>local all all ident sameuser >>># IPv4 local connections: >>>hostall all 127.0.0.1/32 md5 >>># IPv6 local connections: >>>hostall all ::1/128 md5 >>>--- >> >> Looks like pgadmin3 is trying to conenct via tcp sockets. Over tcp, your >> pg_hda.conf requires a password. You have a couple of options: >> >> 1) Configure pgadmin3 to use unix sockets. In your pg_hda.conf, >> connections over unix sockets are automatically authenticated using the >> username associated with the process that is connecting. > how can i make this configuration? i >> 2) Configure pgadmin3 to provide a password. If you haven't set a password >> yet, you can set one by using the psql tool as the user "postgres". You >> can use sudo or su to execute as a different user. > thank you, i prefer this one, but there are some questions: > i saw one method is: > template1=# ALTER USER postgres WITH PASSWORD 'password'; > another is > postgres=# ALTER ROLE postgres WITH PASSWORD 'password'; > and the document says, the default postgres and template1 databases > are not necessory for postgresql server, > then i'm owndering, how to set the password of the database user postgres? > where are the database users and their passwords stored in postgresql > server? not in the postgresql database? > thanks > after reading the document, i have know that we should use the alter role one, and a role is global for all the databases. thank you all :) > >> -- >> Boyd Stephen Smith Jr. ,= ,-_-. =. >> [EMAIL PROTECTED] ((_/)o o(\_)) >> ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-' >> http://iguanasuicide.org/ \_/ >> >
Re: Issues with PCF and BDF Fonts after regular lenny updates
On Sat, 6 Dec 2008 16:50:02 +0900 Osamu Aoki <[EMAIL PROTECTED]> wrote: > Now default font set are picked via fontconfig thing. > > http://people.debian.org/~osamu/pub/getwiki/html/ch08.en.html#fontsinthexwindow > Thanks for the reply. Your document definitely helped a lot in understanding fonts in debain. So now I tried configuring my fonts using fontconfig, which I assume means configuration through fonts.conf. So I have the following ~/.fonts.conf: /home/amitu/.fonts But urxvt still can't seem to use the Dina font which is located in ~/.fonts. Any ideas? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: lost my desktop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kelly Clowers wrote: > On Sat, Dec 6, 2008 at 17:22, Frank McCormick <[EMAIL PROTECTED]> wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> Frank McCormick wrote: >>> Well not all of it -- my regular icons have been replaced by generic >>> looking white onesand when I click on 'em (I WAS configured to >>> single-click) the desktop files open in a text editor. >>> >>> I did remove an icon theme ( Nimbus I believe it was called earlier >>> today) and installed something called Moonlight (supposed to be a >>> Linux/Unix equiv to Silverlight) but as far as I know >>> didn't do or change anything else. >>> >>> Alt-F2 still works, and the panel looks OK so it seems its just the >>> desktop affected. >> >> It seems I can't create any new icons on the desktop either... > > Have you logged out and back in? Dozens of times now :) Changed themes, customized themes by choosing new icon packages...renamed the .gnome and .gnome2 directories...renamed the .nautilus directory. The strange thing is ALL the icons on the desktop now have .desktop extensions. None had before. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkk7QEoACgkQnQV1aTcQlJsaNQCfeDSaIQgLJuKrfDgL/B5bkorY jlkAmgJl5cEDHgKhDpkFg7OcJdDj4Lj3 =N9Iz -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Fidre channel array
On Sun, Dec 07, 2008 at 07:38:47AM +1300, Fred Zinsli wrote: > Current information tells me that support for this card stopped after > either kernel 2.4 or 2.2 I hate it when linux does that. > > Looks like I may have to roll my entire install back to a really old > version of deb or simply install RHEL5 or earlier. Something I wasn't > planning on, especially since the latest version of deb seems to be the > only linux distro that installs and runs properly on my old compaq > servers. On that basis I moved all my servers to deb (from windowz or FC). > This is the only server with Fibre. I am currently exploring the > possibility of changing the card. The arrays attached to the cards are old > series 4100 boxes. On my old boxes, I run OpenBSD. They seem to continue to support old hardware, and it runs very well. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: software raid 1: how to remove a UUID from a device?
On Fri, Dec 05, 2008 at 02:36:59PM -0600, Boyd Stephen Smith Jr. wrote: > On Friday 05 December 2008, lee <[EMAIL PROTECTED]> wrote about 'Re: > software raid 1: how to remove a UUID from a device?': > >On Fri, Dec 05, 2008 at 12:40:21PM +1100, Alex Samad wrote: > >> On Thu, Dec 04, 2008 at 07:10:44PM -0600, lee wrote: > >> > > On Thursday 2008 December 04 15:15, lee wrote: > >> whilst booting add init=/bin/bash to the kernel options, or boot up > >> knoppix or something like it > > > >Oh. Does bash run with only the root partition mounted? > > No, but there's few processes running so you can unmount most of the ones > that are mounted. Using fuser or similar tools, you can identify the > processes that are keeping the others from being unmounted, shutdown those > processes, and unmount the disks. > > I've always been able to go down to / being the only mount point with a > real filesystem attached when starting with init=/bin/bash. If you have > to do something to the filesystem mounted on / though, you'll probably > want to boot from CD -- the initrd is somewhat limited. If the kernel starts with init=/bin/sh, then /bin/sh is process number 1. Unless you start another process, there will be no other processes. Since you kernel command line's root= will likely include "ro", then / will be mounted read-only. You'll have to manually mount what filesystems you need and unmount them before you halt the system; without init you're running every aspect of the system yourself. If at some point you want to boot up normally, you can run # exec init and the init scripts will run. Note, however, that if you forget and type exit, or Ctrl-D and kill your sh, the kernel will panic with something about trying to kill init. If your disks are mounted rw at this point, you have an unclean shutdown. good luck. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: lost my desktop
On Sat, Dec 6, 2008 at 17:22, Frank McCormick <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Frank McCormick wrote: >> >> Well not all of it -- my regular icons have been replaced by generic >> looking white onesand when I click on 'em (I WAS configured to >> single-click) the desktop files open in a text editor. >> >> I did remove an icon theme ( Nimbus I believe it was called earlier >> today) and installed something called Moonlight (supposed to be a >> Linux/Unix equiv to Silverlight) but as far as I know >> didn't do or change anything else. >> >> Alt-F2 still works, and the panel looks OK so it seems its just the >> desktop affected. > > > It seems I can't create any new icons on the desktop either... Have you logged out and back in? Have you tried changing your theme? The desktop in Gnome is managed by Nautilus, the File Manager, so there might be a problem there... Cheers, Kelly Clowers -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Remote signing of large files
On Thu, Dec 04, 2008 at 12:26:31PM +, Magnus Therning wrote: > At work I want to add signing to our automatic build system. In > theory it's a simple application of `gpg` at the end of building to > get a detached signature would do, but I'm weary of sticking the > secret key on the build servers. I'd feel a bit more safe if the > signing could be done on a separate server. However, the built files > are large and I don't want to introduce a bottle neck by transfering > all files back and forth over the network. > > So, my idea was to somehow separate the two steps that GnuPG performs > under the hood when signing, creating the message digest (hash) and > the signing of this message digest. I've found `--print-md` which > looks promising, but there doesn't seem to be any `--sign-md`. If mountain won't come to you, go to the mountain. If you don't want to store the secret key on the build server and you don't want to copy the files over the network to a trusted server, can you access the secret key over the network and do the gpg stuff on the build server? I.e. pipe the secret key through ssh? I wonder about the latest comment on this thread. Examine why you don't want the secret key on the build server and why you would feel more secure with the signing done on a separate server. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Partition damaged
On Thu, Dec 04, 2008 at 12:19:33PM -0200, Patricio Inzaghi wrote: > Is there any possibility of restore the partition? or i have to focus > in data recovering? > I'd just use my backups, that I made just prior to fitzing with my disks. Sorry. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: [OT] bashism (was: Re: Locale testing)
On Saturday 2008 December 06 17:47, Dotan Cohen wrote: > 2008/12/7 Boyd Stephen Smith Jr. <[EMAIL PROTECTED]>: > > For maximum compatibility, that needs to be: > > VAR=; export VAR > > Compatibility with what? UNIX. The Single Unix Specification is maintained by the Open Group who certify UNIX products. In particular, Mac OS X is certified UNIX. -- Boyd Stephen Smith Jr. ,= ,-_-. =. [EMAIL PROTECTED] ((_/)o o(\_)) ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-' http://iguanasuicide.org/ \_/ pgp0wbqqeKg2M.pgp Description: PGP signature
Re: only root can unmount
On Tue, Dec 02, 2008 at 06:23:19PM -0800, Daniel Burrows wrote: > On Tue, Dec 02, 2008 at 10:50:23PM +, T o n g <[EMAIL PROTECTED]> was > heard to say: > > On Tue, 02 Dec 2008 06:01:59 -0800, Daniel Burrows wrote: > > > > >> [EMAIL PROTECTED]:~$ grep dvd /etc/fstab > > >> /dev/dvd /media/dvd autousers,noauto,exec,ro0 > > >> 0 /dev/dvd /mnt/dvd auto user,noauto,exec,ro 0 0 > > > > > > Is it intentional that one line says "users" and the other one says > > > "user"? > > > > Ahhh, thanks Daniel. Bingo, that's the real reason. I'll report the bug > > to grml-rebuildfstab. > > What I don't understand is why the one with "users" was the one that > worked. I thought that "user" was the correct string, and the manpage > agrees with me. I thought that "user" means that any one user could mount, but only that same user (and root) could then unmount. Whereas, "users" means that any user can mount and any other user could then unmount. I suppose "users" is helpful if people are co-operative or hurtful if you get "unmount wars". Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: where is postgresql-8.3's packager's instructions?
On Sun, Dec 7, 2008 at 5:34 AM, Boyd Stephen Smith Jr. <[EMAIL PROTECTED]> wrote: > On Saturday 06 December 2008, "中和刘" <[EMAIL PROTECTED]> wrote > about 'Re: where is postgresql-8.3's packager's instructions?': >>when i connect to it using >>pgadmin3(from the local >>machine), i got the error: >>-- >>An error has occurred: >>Error connecting to the server: FATAL: password authentication failed >>for user "postgres" >> >>how can i fix it so that i can get pgadmin work? thanks >> >>here is my pg_hda.conf >> >># Database administrative login by UNIX sockets >>local all postgres ident sameuser >> >># TYPE DATABASEUSERCIDR-ADDRESS METHOD >> >># "local" is for Unix domain socket connections only >>local all all ident sameuser >># IPv4 local connections: >>hostall all 127.0.0.1/32 md5 >># IPv6 local connections: >>hostall all ::1/128 md5 >>--- > > Looks like pgadmin3 is trying to conenct via tcp sockets. Over tcp, your > pg_hda.conf requires a password. You have a couple of options: > > 1) Configure pgadmin3 to use unix sockets. In your pg_hda.conf, > connections over unix sockets are automatically authenticated using the > username associated with the process that is connecting. how can i make this configuration? i > 2) Configure pgadmin3 to provide a password. If you haven't set a password > yet, you can set one by using the psql tool as the user "postgres". You > can use sudo or su to execute as a different user. thank you, i prefer this one, but there are some questions: i saw one method is: template1=# ALTER USER postgres WITH PASSWORD 'password'; another is postgres=# ALTER ROLE postgres WITH PASSWORD 'password'; and the document says, the default postgres and template1 databases are not necessory for postgresql server, then i'm owndering, how to set the password of the database user postgres? where are the database users and their passwords stored in postgresql server? not in the postgresql database? thanks > -- > Boyd Stephen Smith Jr. ,= ,-_-. =. > [EMAIL PROTECTED] ((_/)o o(\_)) > ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-' > http://iguanasuicide.org/ \_/ >
Re: lost my desktop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Frank McCormick wrote: > > Well not all of it -- my regular icons have been replaced by generic > looking white onesand when I click on 'em (I WAS configured to > single-click) the desktop files open in a text editor. > > I did remove an icon theme ( Nimbus I believe it was called earlier > today) and installed something called Moonlight (supposed to be a > Linux/Unix equiv to Silverlight) but as far as I know > didn't do or change anything else. > > Alt-F2 still works, and the panel looks OK so it seems its just the > desktop affected. It seems I can't create any new icons on the desktop either... > > Can anyone help ? > > > > Thanks -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkk7JVYACgkQnQV1aTcQlJuIcgCfRwASzxuppr3FXndNYSPK9Ldt DRYAn3OjH/rtSNA5+Vbw9YVQ7HaNvoWc =aWEb -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
GtKFileChooser doesn't always do tab completion
On my system, when the GtkFileChooser comes up, the Location bar is visible, but tab completion doesn't work. Closing the bar, by clicking in the little notepad icon in the upper left, and then reopening it, enables tab completion. I have seen this behavior across many Gtk applications (Sylpheed, Mousepad, Bluefish). Why doesn't it work immediately? The above is a bug I submitted (#506267) a couple of weeks ago against libgtk2.0-0. I've received no response, so I thought I'd ask here. Does anyone else see this? Am I doing something wrong? Celejar -- mailmin.sourceforge.net - remote access via secure (OpenPGP) email ssuds.sourceforge.net - A Simple Sudoku Solver and Generator -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
lost my desktop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Well not all of it -- my regular icons have been replaced by generic looking white onesand when I click on 'em (I WAS configured to single-click) the desktop files open in a text editor. I did remove an icon theme ( Nimbus I believe it was called earlier today) and installed something called Moonlight (supposed to be a Linux/Unix equiv to Silverlight) but as far as I know didn't do or change anything else. Alt-F2 still works, and the panel looks OK so it seems its just the desktop affected. Can anyone help ? Thanks -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkk7GFwACgkQnQV1aTcQlJvdAgCbBLMcnzVwl004vXPO9gjEEgQ6 P/YAoI3WNwjFfllS6VuYvStJSbh43Nuw =6Ryy -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: [OT] bashism (was: Re: Locale testing)
On Sat, Dec 6, 2008 at 15:47, Dotan Cohen <[EMAIL PROTECTED]> wrote: > 2008/12/7 Boyd Stephen Smith Jr. <[EMAIL PROTECTED]>: >> For maximum compatibility, that needs to be: >> VAR=; export VAR >> > > Compatibility with what? sh, ash, dash, zsh, pdksh, etc. Cheers, Kelly Clowers -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: [OT] bashism
Dotan Cohen wrote the following on 07.12.2008 00:47 >> For maximum compatibility, that needs to be: >> VAR=; export VAR >> > > Compatibility with what? csh, mksh, busybox, dash, zsh, ash and probably more... -- bye Thilo key: 0x4A411E09 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: [OT] bashism (was: Re: Locale testing)
2008/12/7 Boyd Stephen Smith Jr. <[EMAIL PROTECTED]>: > For maximum compatibility, that needs to be: > VAR=; export VAR > Compatibility with what? -- Dotan Cohen http://what-is-what.com http://gibberish.co.il א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه-و-ي А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я ä-ö-ü-ß-Ä-Ö-Ü
[OT] bashism (was: Re: Locale testing)
On Saturday 06 December 2008, Tzafrir Cohen <[EMAIL PROTECTED]> wrote about 'Re: Locale testing': >Off-topic: > >On Sat, Dec 06, 2008 at 10:06:36PM +0200, Dotan Cohen wrote: >> #!/bin/bash >> export LC_ALL="";export LC_TIME="en_DK.utf8";/usr/bin/thunderbird "$@" > >This is bashism. Yes. >#!/bin/sh >LC_ALL="" LC_TIME="en_DK.utf8" /usr/bin/thunderbird "$@" > >Or even better: > >#!/bin/sh >LC_ALL="" LC_TIME="en_DK.utf8" exec /usr/bin/thunderbird "$@" Well, that's changing more than the bash-ism. The bashism here is: export VAR= For maximum compatibility, that needs to be: VAR=; export VAR Standard "export" doesn't handle setting the value of the variable, it *only* marks the variable as exported. -- Boyd Stephen Smith Jr. ,= ,-_-. =. [EMAIL PROTECTED] ((_/)o o(\_)) ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-' http://iguanasuicide.org/ \_/ signature.asc Description: This is a digitally signed message part.
Re: Bashism (Was: Locale testing)
2008/12/6 Tzafrir Cohen <[EMAIL PROTECTED]>: > VAR="value" command > > will run 'command' with the variable VAR set to "value". > > This is why you get a strange error with the following: > > VAR=value with spaces > > It will complain about trying to run the command 'with spaces' (or > rather: command 'with' with parameter 'spaces'). > >> nor the export command, but why is the "exec" preferable? > > exec (like all the exec* system calls) replace the current process. > > Try an 'strace -f' following script: > > #!/bin/sh > exec /bin/true > > which will show you that no forking was done, vs: > > #!/bin/sh > /bin/true > > Which runs /bin/true in a sub process, waits for it to exit and only > then exist. > +5 Informative, thanks! -- Dotan Cohen http://what-is-what.com http://gibberish.co.il א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه-و-ي А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я ä-ö-ü-ß-Ä-Ö-Ü
Re: Bashism (Was: Locale testing)
On Saturday 06 December 2008, "Dotan Cohen" <[EMAIL PROTECTED]> wrote about 'Bashism (Was: Locale testing)': >I could probably google and find out why the semicolons are not >necessary, nor the export command, but why is the "exec" preferable? That way the thunderbird process replaces the shell process rather than the shell process simply waiting around for the thunderbird process to die and then dieing itself. -- Boyd Stephen Smith Jr. ,= ,-_-. =. [EMAIL PROTECTED] ((_/)o o(\_)) ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-' http://iguanasuicide.org/ \_/ signature.asc Description: This is a digitally signed message part.
Re: Remote signing of large files
On Saturday 06 December 2008, Magnus Therning <[EMAIL PROTECTED]> wrote about 'Re: Remote signing of large files': >Boyd Stephen Smith Jr. wrote: >> Please don't CC me on replies, unless I request one. It is against >> debian-* list policy. > >Sure, and ditto! > >> On Friday 2008 December 05 15:49, you wrote: >>> Boyd Stephen Smith Jr. wrote: So, you might try --encrypt'ing the output of --print-md. >>> >>> AFAIU it wouldn't work: >>> >>> 1. Encrypting is actually using a symmetric algorithm for the bulk of >>> the data and asymmetric crypto is only used to encrypt the symmetric >>> key. In any case I don't think I can get `--encrypt` to use the >>> private key. >> >> That's only true in active protocols with a handshake, e.g. SSL or TLS. >> The only reason active protocols do this is because symmetric ciphers >> are generally faster. >> >> For "offline" encryption, using an asymmetric keys directly works fine. >> If you encrypt something with gpg it uses the public key of the chosen >> recipient or their public subkey designated for encryption. > >Please refer to section 2.1 of RFC2440 and you'll see the GnuPG indeed >does use a "session key" for symmetric encryption which is encrypted >with the public key and sent with the message. I imagine this helps a >lot when encrypting the same message for more than one recipient. Bah, well, never read that RFC, but that works, too. It's certainly possible to encrypt using the public/private key directly, but I guess the command-line tool may not have that functionality. Reading the manpage certainly gives a different impression. Since --encrypt --symmetric is used for encrypting with a symmetric key, I would expect --encrypt by itself to be *not* using a symmetric key. >Sure, i can always resort to modify gpg or write a custom tool that >combines crypto primitives in a way that solves the problem I have. In >this case that's not an option though, due to other requirements >(backwards compatibility, etc) requires that I use only a standard, >non-modified GnuPG. In any case, while what you want is definitely possible, your constraint that a particular, unmodified version of a particular tool be used severly limits you. I doubt what you want can be done simply with the gpg tool. -- Boyd Stephen Smith Jr. ,= ,-_-. =. [EMAIL PROTECTED] ((_/)o o(\_)) ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-' http://iguanasuicide.org/ \_/ signature.asc Description: This is a digitally signed message part.
Re: Bashism (Was: Locale testing)
On Sat, Dec 06, 2008 at 11:42:38PM +0200, Dotan Cohen wrote: > 2008/12/6 Tzafrir Cohen <[EMAIL PROTECTED]>: > > This is bashism. > > > > That is why we call it "bash"! > > > #!/bin/sh > > LC_ALL="" LC_TIME="en_DK.utf8" /usr/bin/thunderbird "$@" > > > > Or even better: > > > > #!/bin/sh > > LC_ALL="" LC_TIME="en_DK.utf8" exec /usr/bin/thunderbird "$@" > > > > I could probably google and find out why the semicolons are not > necessary, nor the export command, but why is the "exec" preferable? Probably just because it doesn't leave the wrapper script as a process to be returned to after you're done with thunderbird. Ken -- Ken Irving -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
wine sound drops after a few minutes
Hi all I am using Debian sid, updated daily (except for the kernel, it's 2.6.25). I am playing CS (1.6) on steam using wine for several years now. A few weeks ago, I noticed, that the sound mutes after a few minutes of playing. It always returnes when a mapchange occurs, so I blamed steam for it. Now I installed Age Of Mythology (which runs fine out of the box) and I noticed the same problem. After playing a few minutes with sound, the sound goes away. I am using the alsa sound modules (snd_pcm_oss snd_intel8x0 snd_ac97_codec ...) and the rest of the linux system (except wine) still plays sound as usual. Restarting wine (actually restarting the game) makes the sound coming back. The problem occurs with and without a running artsd. Anyone had this problem and solved it? Tnx in advance. Martin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: xorg and fonts
On 2008-12-06 20:31 +0100, lee wrote: > On Sat, Dec 06, 2008 at 09:37:38AM +0100, Sven Joachim wrote: >> It uses a compile-time path, we have to UTSL to find it out. The Debian >> package is configured with (sorry for the overly long line) >> >> --with-default-font-path="/usr/share/fonts/X11/misc, >> /usr/share/fonts/X11/cyrillic, >> /usr/share/fonts/X11/100dpi/:unscaled, >> /usr/share/fonts/X11/75dpi/:unscaled, >> /usr/share/fonts/X11/Type1, >> /usr/share/fonts/X11/100dpi, >> /usr/share/fonts/X11/75dpi, >> /var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType" > > UTSL? "Use the source, Luke" -- see http://catb.org/jargon/html/U/UTSL.html. > xset q says: > > Font Path: > /usr/share/fonts/X11/100dpi/:unscaled, > /usr/share/fonts/X11/misc/, > /usr/share/fonts/X11/Type1/, > /usr/share/fonts/X11/misc, > /usr/share/fonts/X11/100dpi/:unscaled, > /usr/share/fonts/X11/Type1, > /usr/share/fonts/X11/100dpi, > /var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType > > So what does it mean when man xorg.conf says that "the server falls > back to the compiled-in default font path" in case no font path is > specified in xorg.conf? In xorg.conf, I have specified: > > FontPath "/usr/share/fonts/X11/encodings/" > FontPath "/usr/share/fonts/X11/100dpi/:unscaled" > FontPath "/usr/share/fonts/X11/misc/" > FontPath "/usr/share/fonts/X11/Type1/" > FontPath "/usr/share/fonts/X11/util/" Do these directories all exist? Non-existent entries will be removed from the font path. > Now some font paths seem to come from somewhere else than from the > configuration. What happens with the compiled-in defaults when a font > path is specified in the configuration? They are merged, with the font path in the configuration coming first. See /usr/share/doc/xserver-xorg-core/NEWS.Debian.gz for details. > And look at the path: Three entries are doubled (100dpi/:unscaled, > misc, Type1), Because they are in the xorg.conf _and_ in the default path. > one entry seems to be incorrect (100dpi), Why should it be incorrect? > and one entry > might come from the compiled-in defaults. The /var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType directory, I suppose. > Two of the paths I specified > seem to be invalid --- if there are no fonts in those directories, > what do they have to do under /usr/share/X11/fonts? What a mess ... It was _you_ who specified them, and the X server just corrected that misconfiguration by deleting non-existent directories. The entry FontPath"/usr/share/fonts/X11/encodings/" only makes sense if the xfonts-encodings is installed, for instance. > Is it just me, or is Debian getting more and more sloppy with things > like this? Apart from the bad xorg.conf manpage, I don't see anything wrong. Sven -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Bashism (Was: Locale testing)
On Sat, Dec 06, 2008 at 11:42:38PM +0200, Dotan Cohen wrote: > 2008/12/6 Tzafrir Cohen <[EMAIL PROTECTED]>: > > This is bashism. > > > > That is why we call it "bash"! > > > #!/bin/sh > > LC_ALL="" LC_TIME="en_DK.utf8" /usr/bin/thunderbird "$@" > > > > Or even better: > > > > #!/bin/sh > > LC_ALL="" LC_TIME="en_DK.utf8" exec /usr/bin/thunderbird "$@" > > > > I could probably google and find out why the semicolons are not > necessary, VAR="value" command will run 'command' with the variable VAR set to "value". This is why you get a strange error with the following: VAR=value with spaces It will complain about trying to run the command 'with spaces' (or rather: command 'with' with parameter 'spaces'). > nor the export command, but why is the "exec" preferable? exec (like all the exec* system calls) replace the current process. Try an 'strace -f' following script: #!/bin/sh exec /bin/true which will show you that no forking was done, vs: #!/bin/sh /bin/true Which runs /bin/true in a sub process, waits for it to exit and only then exist. -- Tzafrir Cohen | [EMAIL PROTECTED] | VIM is http://tzafrir.org.il || a Mutt's [EMAIL PROTECTED] || best ICQ# 16849754 || friend -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: AFS
On Saturday 06 December 2008, "Jesus arteche" <[EMAIL PROTECTED]> wrote about 'AFS': >someone knows if there are something to create web access to my OpenAFS >cell? Not sure exactly what you are wanting, but you should be able to use WebDAV to share the contents of the AFS cell from any computer that has it mounted. -- Boyd Stephen Smith Jr. ,= ,-_-. =. [EMAIL PROTECTED] ((_/)o o(\_)) ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-' http://iguanasuicide.org/ \_/ signature.asc Description: This is a digitally signed message part.
Bashism (Was: Locale testing)
2008/12/6 Tzafrir Cohen <[EMAIL PROTECTED]>: > This is bashism. > That is why we call it "bash"! > #!/bin/sh > LC_ALL="" LC_TIME="en_DK.utf8" /usr/bin/thunderbird "$@" > > Or even better: > > #!/bin/sh > LC_ALL="" LC_TIME="en_DK.utf8" exec /usr/bin/thunderbird "$@" > I could probably google and find out why the semicolons are not necessary, nor the export command, but why is the "exec" preferable? -- Dotan Cohen http://what-is-what.com http://gibberish.co.il א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه-و-ي А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я ä-ö-ü-ß-Ä-Ö-Ü
Re: xorg and fonts
On Saturday 06 December 2008, lee <[EMAIL PROTECTED]> wrote about 'Re: xorg and fonts': >Is it just me, or is Debian getting more and more sloppy with things >like this? Could you please provide an example of the old behavior (e.g. by installing sarge or previous and showing the output with the same [modulo "backporting"] configuration) to show how the new behavior is more "sloppy"? Or are you just throwing around unsubstantiated claims? In any case, upstream changes sometimes cause your or Debian's configuration to be redundant. Last I checked one of X.org's stated goals for their X11 server is to make /dev/null a valid configuration file that "just works". As that occurs, less and less of your or Debian's configuration will be required (but still useful when things don't "just work"). -- Boyd Stephen Smith Jr. ,= ,-_-. =. [EMAIL PROTECTED] ((_/)o o(\_)) ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-' http://iguanasuicide.org/ \_/ signature.asc Description: This is a digitally signed message part.
Re: Locale testing
Off-topic: On Sat, Dec 06, 2008 at 10:06:36PM +0200, Dotan Cohen wrote: > #!/bin/bash > export LC_ALL="";export LC_TIME="en_DK.utf8";/usr/bin/thunderbird "$@" This is bashism. #!/bin/sh LC_ALL="" LC_TIME="en_DK.utf8" /usr/bin/thunderbird "$@" Or even better: #!/bin/sh LC_ALL="" LC_TIME="en_DK.utf8" exec /usr/bin/thunderbird "$@" -- Tzafrir Cohen | [EMAIL PROTECTED] | VIM is http://tzafrir.org.il || a Mutt's [EMAIL PROTECTED] || best ICQ# 16849754 || friend -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: where is postgresql-8.3's packager's instructions?
On Saturday 06 December 2008, "中和刘" <[EMAIL PROTECTED]> wrote about 'Re: where is postgresql-8.3's packager's instructions?': >when i connect to it using >pgadmin3(from the local >machine), i got the error: >-- >An error has occurred: >Error connecting to the server: FATAL: password authentication failed >for user "postgres" > >how can i fix it so that i can get pgadmin work? thanks > >here is my pg_hda.conf > ># Database administrative login by UNIX sockets >local all postgres ident sameuser > ># TYPE DATABASEUSERCIDR-ADDRESS METHOD > ># "local" is for Unix domain socket connections only >local all all ident sameuser ># IPv4 local connections: >hostall all 127.0.0.1/32 md5 ># IPv6 local connections: >hostall all ::1/128 md5 >--- Looks like pgadmin3 is trying to conenct via tcp sockets. Over tcp, your pg_hda.conf requires a password. You have a couple of options: 1) Configure pgadmin3 to use unix sockets. In your pg_hda.conf, connections over unix sockets are automatically authenticated using the username associated with the process that is connecting. 2) Configure pgadmin3 to provide a password. If you haven't set a password yet, you can set one by using the psql tool as the user "postgres". You can use sudo or su to execute as a different user. -- Boyd Stephen Smith Jr. ,= ,-_-. =. [EMAIL PROTECTED] ((_/)o o(\_)) ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-' http://iguanasuicide.org/ \_/ signature.asc Description: This is a digitally signed message part.
Re: Locale testing
2008/12/6 thveillon.debian <[EMAIL PROTECTED]>: > my locales are set system wide to fr_FR.UTF-8, and Ooo3 is set to use the > system default in it's linguistic preferences, so if I type 22-11-2008 in > calc's cell it gives me 22/11/2008 in the edit bar, and 22/11/08 in the cell > (auto-formating). > > If I change Ooo3 linguistic settings to "English USA" for the active > document, it instantly changes the cells and the edit bar to the US format > 11/22/2008 in both the cell and the edit bar. > > I am talking about Ooo3 1:3.0.0-6 from Debian experimental. > > If it can help. > Thanks, Tom. In response to your post, I went looking for a list of the differences between the locales in OOo3. I could not find such a list, so I asked on the OOo mailing list. Specifically, I am looking for a locale with -mm-dd date format but I'd like to know what other settings will be affected. When I hear back from OOo I will update here. Thanks. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه-و-ي А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я ä-ö-ü-ß-Ä-Ö-Ü
Re: Locale testing
2008/12/6 Sjoerd Hiemstra <[EMAIL PROTECTED]>: > Dotan Cohen wrote: >> I do know how to set the locales, but I want to see an app >> that shows that they are set correctly. Therefore I could conclude >> that Open Office is ignoring a correctly set locale and I could file >> an issue. > > The locale setting for Open Office is in OO itself. > > Tools > Options > Language Settings > Languages > Locale setting > And where in there can one configure the date format? I have tried many of the different locale places but none of them give me the -mm-dd date format. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه-و-ي А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я ä-ö-ü-ß-Ä-Ö-Ü
Re: Locale testing
Dotan Cohen wrote : > Thanks. I do know how to set the locales, but I want to see an app that shows that they are set correctly. Therefore I could conclude that Open Office is ignoring a correctly set locale and I could file an issue. If you'd like to help me, seeing as you are using the ISO date format, then please enter the date 2008-08-10 into a cell in calc, leave the cell, then return. Now press F2 to edit the cell. What date format have you in the edit bar? See attached screenshot for the mess that OOo is giving me. [...] Hi, my locales are set system wide to fr_FR.UTF-8, and Ooo3 is set to use the system default in it's linguistic preferences, so if I type 22-11-2008 in calc's cell it gives me 22/11/2008 in the edit bar, and 22/11/08 in the cell (auto-formating). If I change Ooo3 linguistic settings to "English USA" for the active document, it instantly changes the cells and the edit bar to the US format 11/22/2008 in both the cell and the edit bar. I am talking about Ooo3 1:3.0.0-6 from Debian experimental. If it can help. Tom -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Locale testing
Dotan Cohen wrote: > I do know how to set the locales, but I want to see an app > that shows that they are set correctly. Therefore I could conclude > that Open Office is ignoring a correctly set locale and I could file > an issue. The locale setting for Open Office is in OO itself. Tools > Options > Language Settings > Languages > Locale setting -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Locale testing
2008/12/6 Kelly Clowers <[EMAIL PROTECTED]>: > On Sat, Dec 6, 2008 at 05:52, Dotan Cohen <[EMAIL PROTECTED]> wrote: >> I am having a hard time configuring my locale. Is there an application >> that will display a date, a currency value, a time, a large integer, a >> negative number, and some other locale-related data such that I can >> see how my system is configured? >> >> Specifically, I want Open Office 3 and Thunderbird 2 to use the >> -mm-dd date format but I cannot seem to configure this. I am using >> the KDE 3.x desktop. Thanks. > > I use the en_US.UTF-8 locale overall, with the -mm-dd date format. > I do this with the /etc/environment file with these contents: > > LANG="en_US.UTF-8" > LC_CTYPE="en_US.UTF-8" > LC_TIME="en_DK.UTF-8" > > en_DK means English in Denmark, which is a fake locale made for > the ISO date format. > > I don't know if OO.o 3 and Thunderbird will pick this up (it is mainly > for CLI and system utilities). > Thanks. I do know how to set the locales, but I want to see an app that shows that they are set correctly. Therefore I could conclude that Open Office is ignoring a correctly set locale and I could file an issue. If you'd like to help me, seeing as you are using the ISO date format, then please enter the date 2008-08-10 into a cell in calc, leave the cell, then return. Now press F2 to edit the cell. What date format have you in the edit bar? See attached screenshot for the mess that OOo is giving me. By the way, I do know about en_DK, in fact I think that I discovered it myself while experimenting: [EMAIL PROTECTED]:~$ cat .bin/thunderbird #!/bin/bash export LC_ALL="";export LC_TIME="en_DK.utf8";/usr/bin/thunderbird "$@" -- Dotan Cohen http://what-is-what.com http://gibberish.co.il א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه-و-ي А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я ä-ö-ü-ß-Ä-Ö-Ü <>
Re: Mounting Samba and fstab problem
On Sat, Dec 06, 2008 at 08:16:06PM +0200, subscriptions wrote: > On Sat, 2008-12-06 at 17:52 +0100, Jesse Sheidlower wrote: > > > > I'm trying to set up a Samba share on a Lenny laptop that I > > can access as a regular user (i.e., me). I've tried going > > through the man pages and Googling, but I'm still hung up on > > something. > > > > I can mount it manually with: > > > > $ sudo mount -t smbfs -o username=jester //192.168.1.10/HD /mnt/RemoteDisk > > > > and then entering the Samba password. However, then I only > > have access as root. > > ... > > > Where is my mistake here? I've tried various things with no luck. > > > > Thanks. > > > > Jesse Sheidlower > > Use samba mount (as user, no fstab needed): > $ smbmount //192.168.1.10/HD mount-point > > Where mount-point has 'rwx' for you! Oh, god, thanks so much. The problem was just that /mnt/RemoteDisk was owned by root; once I changed this there's no problem with either an fstab-based mount or smbmount. Thanks! Jesse -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Locale testing
On Saturday 06 December 2008 13:52:04 Dotan Cohen wrote: > I am having a hard time configuring my locale. Is there an application > that will display a date, a currency value, a time, a large integer, a > negative number, and some other locale-related data such that I can > see how my system is configured? Kcontrol -> regional and accessibility -> country/region and language. Adjust/accept. HTH Lisi -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Locale testing
On Sat, Dec 6, 2008 at 05:52, Dotan Cohen <[EMAIL PROTECTED]> wrote: > I am having a hard time configuring my locale. Is there an application > that will display a date, a currency value, a time, a large integer, a > negative number, and some other locale-related data such that I can > see how my system is configured? > > Specifically, I want Open Office 3 and Thunderbird 2 to use the > -mm-dd date format but I cannot seem to configure this. I am using > the KDE 3.x desktop. Thanks. I use the en_US.UTF-8 locale overall, with the -mm-dd date format. I do this with the /etc/environment file with these contents: LANG="en_US.UTF-8" LC_CTYPE="en_US.UTF-8" LC_TIME="en_DK.UTF-8" en_DK means English in Denmark, which is a fake locale made for the ISO date format. I don't know if OO.o 3 and Thunderbird will pick this up (it is mainly for CLI and system utilities). Cheers, Kelly Clowers -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: xorg and fonts
On Sat, Dec 06, 2008 at 09:37:38AM +0100, Sven Joachim wrote: > The manpage is wrong about the paths, fonts are in /usr/share/fonts and > that's where the server looks. See http://bugs.debian.org/428918. This bug doesn't mention the paths. I'll send a followup. > It uses a compile-time path, we have to UTSL to find it out. The Debian > package is configured with (sorry for the overly long line) > > --with-default-font-path="/usr/share/fonts/X11/misc, > /usr/share/fonts/X11/cyrillic, > /usr/share/fonts/X11/100dpi/:unscaled, > /usr/share/fonts/X11/75dpi/:unscaled, > /usr/share/fonts/X11/Type1, > /usr/share/fonts/X11/100dpi, > /usr/share/fonts/X11/75dpi, > /var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType" UTSL? xset q says: Font Path: /usr/share/fonts/X11/100dpi/:unscaled, /usr/share/fonts/X11/misc/, /usr/share/fonts/X11/Type1/, /usr/share/fonts/X11/misc, /usr/share/fonts/X11/100dpi/:unscaled, /usr/share/fonts/X11/Type1, /usr/share/fonts/X11/100dpi, /var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType So what does it mean when man xorg.conf says that "the server falls back to the compiled-in default font path" in case no font path is specified in xorg.conf? In xorg.conf, I have specified: FontPath "/usr/share/fonts/X11/encodings/" FontPath "/usr/share/fonts/X11/100dpi/:unscaled" FontPath "/usr/share/fonts/X11/misc/" FontPath "/usr/share/fonts/X11/Type1/" FontPath "/usr/share/fonts/X11/util/" Now some font paths seem to come from somewhere else than from the configuration. What happens with the compiled-in defaults when a font path is specified in the configuration? And look at the path: Three entries are doubled (100dpi/:unscaled, misc, Type1), one entry seems to be incorrect (100dpi), and one entry might come from the compiled-in defaults. Two of the paths I specified seem to be invalid --- if there are no fonts in those directories, what do they have to do under /usr/share/X11/fonts? What a mess ... Is it just me, or is Debian getting more and more sloppy with things like this? -- "Don't let them, daddy. Don't let the stars run down." http://adin.dyndns.org/adin/TheLastQ.htm -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Remote signing of large files
On Sat, Dec 06, 2008 at 08:21:12PM +0200, subscriptions wrote: > > > On Thu, Dec 04, 2008 at 12:26:31PM +, Magnus Therning wrote: > > I'd feel a bit more safe if the signing could be done on a separate > > server. However, the built files are large and I don't want to > > introduce a bottle neck by transfering all files back and forth over > > the network. > > The above sentences describe a mutual exclusive proposition. > > That is the problem! Why? Tehcnically you just need the digest (e.g.: the .dsc file) to sign. The signature technically only signs its content. If you don't trust the build system to provide you the correct information, how come you trust it not modify the package before signing (e.g.: add a 'rm -rf /*' in the prerm script). -- Tzafrir Cohen | [EMAIL PROTECTED] | VIM is http://tzafrir.org.il || a Mutt's [EMAIL PROTECTED] || best ICQ# 16849754 || friend -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Fidre channel array
Thank for that. I got the following. server1:/tmp# dmesg | grep -i sd server1:/tmp# dmesg | grep -i scsi server1:/tmp# ls -l /dev/disk/by-path total 0 lrwxrwxrwx 1 root root 9 2008-11-08 07:33 pci-:00:0f.1-ide-0:0 -> ../../hda server1:/tmp# Now I have been doing a little more research into this. It seems I have the Tachyon HPFC-5000 PCI card. Current information tells me that support for this card stopped after either kernel 2.4 or 2.2 Looks like I may have to roll my entire install back to a really old version of deb or simply install RHEL5 or earlier. Something I wasn't planning on, especially since the latest version of deb seems to be the only linux distro that installs and runs properly on my old compaq servers. On that basis I moved all my servers to deb (from windowz or FC). This is the only server with Fibre. I am currently exploring the possibility of changing the card. The arrays attached to the cards are old series 4100 boxes. If anyone has any comments or thoughts I would love to here them. Regards Fred -Original Message- From: "Douglas A. Tutty" <[EMAIL PROTECTED]> To: debian-user@lists.debian.org Date: Sat, 6 Dec 2008 08:57:34 -0500 Subject: Re: Fidre channel array > On Sat, Dec 06, 2008 at 08:33:27PM +1300, Fred Zinsli wrote: > > Hello everyone > > > > I am a real newby to linux, not just debian. > > > > I have an old compaq 6500 with 2 fibre channel arrays insalled. > > > > I have installed deb 4.0R5 on the server. > > > > When I do a lspci the 2 adapters appear on the list of devices. > > > The adapters already have disk arrays attached. > > > > What I am wanting to know is how do I use/access/setup these devices > so > > that I can access/use the disk arrays attached to the devices. > > The adapter should present the disk arrays as virtual drives to the OS. > They should just appear in dmesg as if they are scsi drives of whatever > size. do: > > $ dmesg | grep -i sd > > and > > $ dmesg | grep -i scsi > > and > > $ ls -l /dev/disk/by-path > > > Doug. > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Remote signing of large files
Boyd Stephen Smith Jr. wrote: > Please don't CC me on replies, unless I request one. It is against debian-* > list policy. Sure, and ditto! > On Friday 2008 December 05 15:49, you wrote: >> Boyd Stephen Smith Jr. wrote: >>> On Thursday 04 December 2008, "Magnus Therning" <[EMAIL PROTECTED]> >>> wrote >>> about 'Remote signing of large files': So, my idea was to somehow separate the two steps that GnuPG performs under the hood when signing, creating the message digest (hash) and the signing of this message digest. I've found `--print-md` which looks promising, but there doesn't seem to be any `--sign-md`. >>> A detached signature is, mathematically, the message digest run thorough >>> the encrypt() function. [Encrypting with the private key allows anyone >>> with the public key to decrypt to the digest "plaintext" which they can >>> compare to a locally calculated message digest, thus verifying the >>> signature. They can also be assured that the signature is from the owner >>> of the private key, or that the private key has been compromised.] >>> >>> So, you might try --encrypt'ing the output of --print-md. >> AFAIU it wouldn't work: >> >> 1. Encrypting is actually using a symmetric algorithm for the bulk of >> the data and asymmetric crypto is only used to encrypt the symmetric >> key. In any case I don't think I can get `--encrypt` to use the private >> key. > > That's only true in active protocols with a handshake, e.g. SSL or TLS. The > only reason active protocols do this is because symmetric ciphers are > generally faster. > > For "offline" encryption, using an asymmetric keys directly works fine. If > you encrypt something with gpg it uses the public key of the chosen recipient > or their public subkey designated for encryption. Please refer to section 2.1 of RFC2440 and you'll see the GnuPG indeed does use a "session key" for symmetric encryption which is encrypted with the public key and sent with the message. I imagine this helps a lot when encrypting the same message for more than one recipient. >> 2. AFAIU signing always signs a message digest, no matter what type of >> data I stick in. So signing the output of `--print-md` wouldn't do >> since verification would require a manual step. > > Um, sort of. sign(data, privkey) == encrypt(digest(data), privkey), by > definition. So, you should be able to take the output of --print-md, > then --encrypt it, specifying your private key. It's a bit more complex then > that, because of data encoding issues, but it should be possible with the > command-line tools. If not, it's definitely possible with some custom C > code -- I forget what the C binding for gpg are called, but you'll probably > need that and libgcrypt. I don't see how I can do that using the command line options. I don't see how I can get `--encrypt` to use the private key, and even if I could then we get back to the problem with gpg encrypting using a symmetric cipher as per the RFC. The only way I can see of getting encryption with the private key is by using `--sign` and that will _always_ sign a hash of the file and that won't do since I then can't use _only_ gpg to verify the signature. Sure, i can always resort to modify gpg or write a custom tool that combines crypto primitives in a way that solves the problem I have. In this case that's not an option though, due to other requirements (backwards compatibility, etc) requires that I use only a standard, non-modified GnuPG. Cheers, M -- Magnus Therning (OpenPGP: 0xAB4DFBA4) magnus＠therning．org Jabber: magnus＠therning．org http://therning.org/magnus Haskell is an even 'redder' pill than Lisp or Scheme. -- PaulPotts signature.asc Description: OpenPGP digital signature
Re: Remote signing of large files
> On Thu, Dec 04, 2008 at 12:26:31PM +, Magnus Therning wrote: > I'd feel a bit more safe if the signing could be done on a separate > server. However, the built files are large and I don't want to > introduce a bottle neck by transfering all files back and forth over > the network. The above sentences describe a mutual exclusive proposition. That is the problem! Best, Rob -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mounting Samba and fstab problem
On Sat, 2008-12-06 at 17:52 +0100, Jesse Sheidlower wrote: > > I'm trying to set up a Samba share on a Lenny laptop that I > can access as a regular user (i.e., me). I've tried going > through the man pages and Googling, but I'm still hung up on > something. > > I can mount it manually with: > > $ sudo mount -t smbfs -o username=jester //192.168.1.10/HD /mnt/RemoteDisk > > and then entering the Samba password. However, then I only > have access as root. ... > Where is my mistake here? I've tried various things with no luck. > > Thanks. > > Jesse Sheidlower Use samba mount (as user, no fstab needed): $ smbmount //192.168.1.10/HD mount-point Where mount-point has 'rwx' for you! Best, Rob -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Mounting Samba and fstab problem
I'm trying to set up a Samba share on a Lenny laptop that I can access as a regular user (i.e., me). I've tried going through the man pages and Googling, but I'm still hung up on something. I can mount it manually with: $ sudo mount -t smbfs -o username=jester //192.168.1.10/HD /mnt/RemoteDisk and then entering the Samba password. However, then I only have access as root. My goal is to have access without becoming root. I don't need it to mount on boot, as it's a laptop, and I can't access the disk when away from home. I tried following various instructions in the man pages, and after making a separate credential file, ended up with this in my /etc/fstab: //192.168.1.10/HD /mnt/RemoteDisk smbfs noauto,users,credentials=/home/jester/.smbpassword 0 0 However, when I then try to mount this, I get an error: $ mount //192.168.1.10/HD mount error: permission denied or not superuser and mount.cifs not installed SUID $ Where is my mistake here? I've tried various things with no luck. Thanks. Jesse Sheidlower -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Remote signing of large files
Osamu Aoki wrote: > On Thu, Dec 04, 2008 at 12:26:31PM +, Magnus Therning wrote: >> At work I want to add signing to our automatic build system. In >> theory it's a simple application of `gpg` at the end of building to >> get a detached signature would do, but I'm weary of sticking the >> secret key on the build servers. I'd feel a bit more safe if the >> signing could be done on a separate server. However, the built files >> are large and I don't want to introduce a bottle neck by transfering >> all files back and forth over the network. > > Are you sigining each file or signing like what we do at Debian. > > If you install devscripts package, there is "debsign" to sign *.dsc > properly while creating right *.changes > > Thisallow us to sign package build on remote machine safely. I need to sign each file. /M -- Magnus Therning (OpenPGP: 0xAB4DFBA4) magnus＠therning．org Jabber: magnus＠therning．org http://therning.org/magnus Haskell is an even 'redder' pill than Lisp or Scheme. -- PaulPotts signature.asc Description: OpenPGP digital signature
Re: AFS
Jesus arteche wrote: hey, someone knows if there are something to create web access to my OpenAFS cell? You might try the openafs-info mailing list. They are pretty helpful. Later, Jason -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Customizable web based GUI for Debian server and daemon administration?
Michael Iatrou wrote: Depending on the configurability you want, a couple of custom made PHP scripts that manipulate config files could be enough for a minimal, lightweight web-based configuration tool. So far, that sounds about right. Monowall is FreeBSD based, but I assume I could download their source and use some of their PHP scripts under Linux? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: cryptsetup, hald and automounting external disk
On Sat, 2008-12-06 at 00:50 +0100, Michal R. Hoffmann wrote: > On 04/12/08 21:28, subscriptions wrote: > > Hi all, > > > > I am using cryptsetup (LUKS) successfully on most of my partitions (i.e. > > not /boot) and external disk drives. > > > > For the external drives, HALD recognises the LUKS encrypted partition > > and prompts for a password. > > > > Does anybody know where I can configure the system such that the > > external disk is automatically decrypted with encryption keys and > > mounted. > > In Gnome the password dialog gives a user 3 options for the password: > - forget immediately > - remember till logout > - remember 'forever' > > Debian sid. I don't know what do you use - any window manager? I believe > KDE has a similar option. > > -- > Kind regards, > Michal R. Hoffmann Dear Michal, thanks! However, the solution is per user. Thanks anyway. Best, Rob -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Sound preview w/Nautilus
On Sun, 7 Dec 2008 00:46:13 +1300 Dean Sutherland <[EMAIL PROTECTED]> wrote: > On Fri, 5 Dec 2008 02:34:27 -0600, Chris wrote: > > > Greetings, > > > > Oh buggers... What must I have installed/running to have sound > > preview of mp3's within Nautilus (Lenny). > > > > Hi Chris, > > Were you trying to disable sound preview in Nautilus? Sound preview is > built into Nautilus and can be disabled in Edit->Preferences->Preview. > > Hopefully if you were trying to disable it you have already, if not > try the above. > > Dean Sutherland > > Thansk Dean however, I can check and uncheck preview all day long and it still will not allow sound preview. I did read a bug report from March (iirc) that mentions something about a 3rd party app (working or not). Perhaps my issue is temporary (untill the official release). That brings me to this; any word on when that may be? -- Best regards, Chris () ascii ribbon campaign - against html e-mail /\ www.asciiribbon.org - against proprietary attachments "There's no place like 127.0.0.1" -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
AFS
hey, someone knows if there are something to create web access to my OpenAFS cell? thanks
AFS
hey, Alguien sabe si hay algo para crear un acceso web en un servidor para una celula openafs Gracias
Re: where is postgresql-8.3's packager's instructions?
On Sat, Dec 6, 2008 at 4:21 PM, Eugene V. Lyubimkin <[EMAIL PROTECTED]> wrote: > 中和刘 wrote: >> I'm learnimg to use postgresql-8.3 database server on debian sid, and >> I have installed it successfully from debian package, then when i read >> the document from postgresql to learn to manage it, it says: >> (If you are installing a pre-packaged distribution, such as an RPM or >> Debian package, ignore this chapter and read the packager's >> instructions instead) >> so i'm wondering where is the packager's instructions? thanks > Debian packagers have done all needed for you. Just install postgresql-8.3 > package, it's a > PostgreSQL server. > > -- > Eugene V. Lyubimkin aka JackYF, JID: jackyf.devel(maildog)gmail.com > Ukrainian C++ developer, Debian APT contributor > > thank you, i have another problem, when i connect to it using pgadmin3(from the local machine), i got the error: -- An error has occurred: Error connecting to the server: FATAL: password authentication failed for user "postgres" how can i fix it so that i can get pgadmin work? thanks here is my pg_hda.conf # Database administrative login by UNIX sockets local all postgres ident sameuser # TYPE DATABASEUSERCIDR-ADDRESS METHOD # "local" is for Unix domain socket connections only local all all ident sameuser # IPv4 local connections: hostall all 127.0.0.1/32 md5 # IPv6 local connections: hostall all ::1/128 md5 ---
Locale testing
I am having a hard time configuring my locale. Is there an application that will display a date, a currency value, a time, a large integer, a negative number, and some other locale-related data such that I can see how my system is configured? Specifically, I want Open Office 3 and Thunderbird 2 to use the -mm-dd date format but I cannot seem to configure this. I am using the KDE 3.x desktop. Thanks. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه-و-ي А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я ä-ö-ü-ß-Ä-Ö-Ü
Re: Fidre channel array
On Sat, Dec 06, 2008 at 08:33:27PM +1300, Fred Zinsli wrote: > Hello everyone > > I am a real newby to linux, not just debian. > > I have an old compaq 6500 with 2 fibre channel arrays insalled. > > I have installed deb 4.0R5 on the server. > > When I do a lspci the 2 adapters appear on the list of devices. > The adapters already have disk arrays attached. > > What I am wanting to know is how do I use/access/setup these devices so > that I can access/use the disk arrays attached to the devices. The adapter should present the disk arrays as virtual drives to the OS. They should just appear in dmesg as if they are scsi drives of whatever size. do: $ dmesg | grep -i sd and $ dmesg | grep -i scsi and $ ls -l /dev/disk/by-path Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: debootstrap - qemu - I've this error : "TSC appears to be running slowly. Marking it as unstable"
Le Thu, 04 Dec 2008 15:11:18 +, KLEIN Stéphane a écrit : > Hi, > > I've build debian image with debootstrap like in > http://thread.gmane.org/ gmane.linux.debian.user/328763 messages. > > When I start my image with qemu, I've this error : > > """ > TSC appears to be running slowly. Marking it as unstable """ > > What can I do to solve this issue ? Obviously, it isn't possible. I've asked the question on #qemu irc channel and folk answered : * I can't fix this warning * It isn't important Regards, Stephane -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Can't build 2.6.5 kernel after Upgrade to Etch-and-a-Half
Ron Johnson writes: > 2.6.5 is (relatively) ancient. Did you mean 2.6.25? I did, in fact, mean 2.6.5. It's been 3 or 4 years now that you mention it. I'll try a newer kernel.:-) Thanks. Martin McCormick -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: is there any error for my postgresql installation?
中和刘 wrote: > here is a latest log messages for my newly installed postgresql server > 2008-12-06 12:33:08 HKT LOG: could not load root certificate file > "root.crt": no SSL error reported (1) > 2008-12-06 12:33:08 HKT DETAIL: Will not verify client certificates. (2) > 2008-12-06 12:33:08 HKT LOG: could not create IPv6 socket: Address > family not supported by protocol (3) > 2008-12-06 12:33:09 HKT LOG: database system was shut down at > 2008-12-06 12:32:18 HKT > 2008-12-06 12:33:09 HKT LOG: autovacuum launcher started > 2008-12-06 12:33:09 HKT LOG: database system is ready to accept connections > 2008-12-06 12:33:09 HKT LOG: incomplete startup packet (4) > I don't know postgresql specifically, but judging by the messages, let me try: > is (1) a error? what should i do? > what does (2) mean? is it normal? > Both are connected. And they are only relevant if you want the clients to use certificates to authenticate themselves. You probably don't. > is (3) ok? > Yes, unless you want IPv6 support. -- How kind of you to be willing to live someone's life for them. Eduardo M KALINOWSKI [EMAIL PROTECTED] http://move.to/hpkb -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Sound preview w/Nautilus
On Fri, 5 Dec 2008 02:34:27 -0600, Chris wrote: > Greetings, > > Oh buggers... What must I have installed/running to have sound preview > of mp3's within Nautilus (Lenny). > Hi Chris, Were you trying to disable sound preview in Nautilus? Sound preview is built into Nautilus and can be disabled in Edit->Preferences->Preview. Hopefully if you were trying to disable it you have already, if not try the above. Dean Sutherland -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: sshd in Vserver not working
Sjoerd Hardeman schreef:
>> Jochen Schulz wrote:
>>> Are you logging in as root? Does the server allow this?
>> Yes, but it is still a brand new install so root-login is allowed. And,
>> logging in as another user also gives the same problem
>>> Did you restrict access to the server in /etc/hosts.{allow,deny}?
>> Unfortunately, it is a remote machine, and somebody shut it down. Yet,
>> as it is a brand new install, I don't suspect anything to be in the
>> /etc/hosts.* files.
>>
>> Sjoerd
> I indeed have an empty /etc/hosts.*. Yet, I have been able to get
> slightly more debugging-info. Any ideas?
>
> ~$ ssh -vvv 10.1.1.14
> OpenSSH_4.3p2 Debian-9etch3, OpenSSL 0.9.8c 05 Sep 2006
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> debug2: ssh_connect: needpriv 0
> debug1: Connecting to 10.1.1.14 [10.1.1.14] port 22.
> debug1: Connection established.
> debug1: identity file /home/sjoerd/.ssh/identity type -1
> debug1: identity file /home/sjoerd/.ssh/id_rsa type 1
> debug1: identity file /home/sjoerd/.ssh/id_dsa type -1
> debug1: Remote protocol version 2.0, remote software version
> OpenSSH_5.1p1 Debian-3
> debug1: match: OpenSSH_5.1p1 Debian-3 pat OpenSSH*
> debug1: Enabling compatibility mode for protocol 2.0
> debug1: Local version string SSH-2.0-OpenSSH_4.3p2 Debian-9etch3
> debug2: fd 3 setting O_NONBLOCK
> debug1: An invalid name was supplied
> Cannot determine realm for numeric host address
>
> debug1: An invalid name was supplied
> A parameter was malformed
> Validation error
>
> debug1: An invalid name was supplied
> Cannot determine realm for numeric host address
>
> debug1: An invalid name was supplied
> A parameter was malformed
> Validation error
>
> debug1: SSH2_MSG_KEXINIT sent
> Connection closed by 10.1.1.14
>
>
> Sjoerd
>
Problem found. In bugreport 506949:
ec 6 10:56:12 hopapp sshd[26578]: Server listening on 0.0.0.0 port 22.
Dec 6 10:56:15 hopapp sshd[26584]: error writing /proc/self/oom_adj:
Permission denied
Dec 6 10:56:15 hopapp sshd[26585]: fatal: chroot("/var/run/sshd"):
Operation not permitted
This is resolved by installing the fixed package from sid.
--
() ascii ribbon campaign - against html e-mail
/\ www.asciiribbon.org - against proprietary attachments
signature.asc
Description: OpenPGP digital signature
Re: iptables, ftp and dnat?
On Fri, Dec 05, 2008 at 03:30:19PM -0700, Robert L. Harris wrote: [snip] > > > >> here is another link > >> http://www.cyberciti.biz/faq/iptables-open-ftp-port-21/ (again > > google). > > > > > >> My strength is in itables not ftp (which is the reason for > > googling :) ) > > > >> Also anything to do with iptables and firewalls you should > > probably read > >> a tutorial on iptables > > > > I've read both of those and understand how the ftp works. I've > spent the last 2 days googling. > Unfortunately it's all working now except how to get the iptables data > connection in passive > mode working. I can log in, etc just fine but when I do a "ls" after > issuing the "passive" > command it times out. > > The second example looks good but doesn't handle the DNAT (the ftp > server is running on > another machine behind my firewall. What I do to track down iptables problems is (if you have access to all 3 machines, client server and firewall). Dump on all 3 machines, something like tcpdump -pni -s 1500 -w /tmp/trace.dmp host and host client and server ip will vary depending on which machine you are on (natting). Also just before the drop statement in you iptables chain, put a line which logs the packets. These way you can see what is going on and create some rules to fix it. But maybe another solution is to use a ftp proxy ? (ftp-proxy) - never used it ? to get around the active passive port problem > > Robert > > > > - -- > > :wq! > > Robert L. Harris | GPG Key ID: E344DA3B > @ x-hkp://pgp.mit.edu > DISCLAIMER: > These are MY OPINIONS With Dreams To Be A King, >ALONE. I speak for First One Should Be A Man >no-one else. - Manowar > > -BEGIN PGP SIGNATURE- > Version: GnuPG v1.4.8 (Darwin) > > iD8DBQFJOat68+1vMONE2jsRAuFiAJ4tZUiKdn1pVMTVJooRjcpMWsHUgQCfTggd > c08luNBZJjlIvtBgRnoR5+I= > =ZWjq > -END PGP SIGNATURE- > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > -- Tsort's Constant: 1.67563, or precisely 1,237.98712567 times the difference between the distance to the sun and the weight of a small orange. -- Terry Pratchett, "The Light Fantastic" (slightly modified) signature.asc Description: Digital signature
Re: sshd in Vserver not working
> Jochen Schulz wrote:
>> Are you logging in as root? Does the server allow this?
> Yes, but it is still a brand new install so root-login is allowed. And,
> logging in as another user also gives the same problem
>>
>> Did you restrict access to the server in /etc/hosts.{allow,deny}?
> Unfortunately, it is a remote machine, and somebody shut it down. Yet,
> as it is a brand new install, I don't suspect anything to be in the
> /etc/hosts.* files.
>
> Sjoerd
I indeed have an empty /etc/hosts.*. Yet, I have been able to get
slightly more debugging-info. Any ideas?
~$ ssh -vvv 10.1.1.14
OpenSSH_4.3p2 Debian-9etch3, OpenSSL 0.9.8c 05 Sep 2006
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to 10.1.1.14 [10.1.1.14] port 22.
debug1: Connection established.
debug1: identity file /home/sjoerd/.ssh/identity type -1
debug1: identity file /home/sjoerd/.ssh/id_rsa type 1
debug1: identity file /home/sjoerd/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version
OpenSSH_5.1p1 Debian-3
debug1: match: OpenSSH_5.1p1 Debian-3 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.3p2 Debian-9etch3
debug2: fd 3 setting O_NONBLOCK
debug1: An invalid name was supplied
Cannot determine realm for numeric host address
debug1: An invalid name was supplied
A parameter was malformed
Validation error
debug1: An invalid name was supplied
Cannot determine realm for numeric host address
debug1: An invalid name was supplied
A parameter was malformed
Validation error
debug1: SSH2_MSG_KEXINIT sent
Connection closed by 10.1.1.14
Sjoerd
--
() ascii ribbon campaign - against html e-mail
/\ www.asciiribbon.org - against proprietary attachments
signature.asc
Description: OpenPGP digital signature
Re: Better support for merging local and upstream (was: Erase cache, clean registry in Linux)
On Saturday 2008 December 06 02:03, lee wrote: > On Sat, Dec 06, 2008 at 12:45:28AM -0600, Boyd Stephen Smith Jr. wrote: > > On Friday 2008 December 05 23:02, Stefan Monnier wrote: > > > When an upgrade is installed, local changes *have* to be merged with > > > the changes brought in from the upgrade. That's just an unvoidable > > > need. > > > > I disagree with this. It should be possible to establish "hooks" so that > > the administrator should not ever have to edit an installed file, but > > instead place additional or overriding instructions in a separate file > > which the packages manager would not read or modify. > > How exactly would that work? For example, a configuration file that was sourced as part of the startup script would have "[ -r /etc/package/user.conf ] && . /etc/package/user.conf" near the end of the file. Another example is the configuration for gdm, the defaults are in /usr/share/gdm/defaults.conf, and the administrator and supplement or override those with /etc/gdm/gdm.conf. There are lots of ways to do this, but it basically boils down to having a distribution/upstream provided configuration and locally provided configuration. This is actually ALWAYS the case, as the source code has some default behavior (might be: error out of otherwise "break") which is under control of upstream/distribution and configuration files change that. The ideal would be that files installed by packages would not be touched by the administrator. It would make auditing a system easier and would also allow for identifying and repairing packages that were corrupted for whatever reason. However, packages should also work (or some definition of work) immediately after they are installed, so that other packages can use them in their install/remove scripts. For programs that cannot provide reasonable defaults themselves, they generally load settings from *a* configuration file, or *a* system configuration file and a user file. When the program only reads from a single file, it's difficult to separate distribution settings from locally administered settings, even though those are two different things. Thus, we have conffiles -- a half-way solution between having separate files for distribution and locally-administered settings. When/where the defaults work administrators have no worries, the package maintainer updates the conffiles as needed. When the defaults don't work, you get the dpkg prompt, which is usually enough; administrators that have made changes keep their old file, until they see an incompatable change (e.g. in the conffile format) and then have to rebuild their configuration. At this point they'd generally have to rebuild their configuration anyway. Anyway, the point is that most users of F(L)OSS software don't get their software directly from the original authors, so it makes sense to have at least 3 configuration files/directories (distribution, in /usr/share mostly; system, in /etc mostly; and user, in ~ mostly) for any user application, and 2 (the first 2) for non-user applications. [It would also be nice to have "site" configuration in /usr/local/share or somesuch.] Unfortunately, this doesn't happen often and we get half-way solutions like conffiles (or Gentoo's equivalent). -- Boyd Stephen Smith Jr. ,= ,-_-. =. [EMAIL PROTECTED] ((_/)o o(\_)) ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-' http://iguanasuicide.org/ \_/ pgp7MA5t8tcQj.pgp Description: PGP signature
Re: xorg and fonts
On 2008-12-06 09:13 +0100, lee wrote: > On Sat, Dec 06, 2008 at 08:44:30AM +0100, Sven Joachim wrote: >> On 2008-12-06 08:23 +0100, lee wrote: >> > There was a Section "Files" in xorg.conf, but it was empty. >> >> Which is fine because the X server knows (or at least, is supposed to >> know) where to find fonts. > > See man xorg.conf: > > > "When this [the FontPath] entry is not specified in the config file, > the server falls back to the compiled-in default font path, which > contains the following font path elements: > > /usr/lib/X11/fonts/misc/ > /usr/lib/X11/fonts/TTF/ > /usr/lib/X11/fonts/Type1/ > /usr/lib/X11/fonts/75dpi/ > /usr/lib/X11/fonts/100dpi/" The manpage is wrong about the paths, fonts are in /usr/share/fonts and that's where the server looks. See http://bugs.debian.org/428918. > [EMAIL PROTECTED]:~$ ls -la /usr/lib/X11/ > total 48 > drwxr-xr-x 3 root root 4096 2008-12-06 00:33 . > drwxr-xr-x 95 root root 40960 2008-12-05 23:31 .. > drwxr-xr-x 2 root root 4096 2008-12-06 00:33 x11perfcomp > [EMAIL PROTECTED]:~$ > > > The server knows where it could find fonts, but there are none. It > worked before I made the FontPath entries, though. > > So how does the xserver find the fonts? It uses a compile-time path, we have to UTSL to find it out. The Debian package is configured with (sorry for the overly long line) --with-default-font-path="/usr/share/fonts/X11/misc,/usr/share/fonts/X11/cyrillic,/usr/share/fonts/X11/100dpi/:unscaled,/usr/share/fonts/X11/75dpi/:unscaled,/usr/share/fonts/X11/Type1,/usr/share/fonts/X11/100dpi,/usr/share/fonts/X11/75dpi,/var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType" Sven -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: where is postgresql-8.3's packager's instructions?
中和刘 wrote: > I'm learnimg to use postgresql-8.3 database server on debian sid, and > I have installed it successfully from debian package, then when i read > the document from postgresql to learn to manage it, it says: > (If you are installing a pre-packaged distribution, such as an RPM or > Debian package, ignore this chapter and read the packager's > instructions instead) > so i'm wondering where is the packager's instructions? thanks Debian packagers have done all needed for you. Just install postgresql-8.3 package, it's a PostgreSQL server. -- Eugene V. Lyubimkin aka JackYF, JID: jackyf.devel(maildog)gmail.com Ukrainian C++ developer, Debian APT contributor signature.asc Description: OpenPGP digital signature
Re: xorg and fonts
On Sat, Dec 06, 2008 at 04:52:45PM +0900, Osamu Aoki wrote: > On Sat, Dec 06, 2008 at 01:23:31AM -0600, lee wrote: > > There was a Section "Files" in xorg.conf, but it was empty. > > Yes there was I also wondered... that wa core X11 core fonts > Now we have xft2: > > http://people.debian.org/~osamu/pub/getwiki/html/ch08.en.html#fontsinthexwindow Ah, thanks! So I shouldn't have FontPath entries in xorg.conf, it works automagically :) -- "Don't let them, daddy. Don't let the stars run down." http://adin.dyndns.org/adin/TheLastQ.htm -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: xorg and fonts
On Sat, Dec 06, 2008 at 08:44:30AM +0100, Sven Joachim wrote: > On 2008-12-06 08:23 +0100, lee wrote: > > There was a Section "Files" in xorg.conf, but it was empty. > > Which is fine because the X server knows (or at least, is supposed to > know) where to find fonts. See man xorg.conf: "When this [the FontPath] entry is not specified in the config file, the server falls back to the compiled-in default font path, which contains the following font path elements: /usr/lib/X11/fonts/misc/ /usr/lib/X11/fonts/TTF/ /usr/lib/X11/fonts/Type1/ /usr/lib/X11/fonts/75dpi/ /usr/lib/X11/fonts/100dpi/" [EMAIL PROTECTED]:~$ ls -la /usr/lib/X11/ total 48 drwxr-xr-x 3 root root 4096 2008-12-06 00:33 . drwxr-xr-x 95 root root 40960 2008-12-05 23:31 .. drwxr-xr-x 2 root root 4096 2008-12-06 00:33 x11perfcomp [EMAIL PROTECTED]:~$ The server knows where it could find fonts, but there are none. It worked before I made the FontPath entries, though. So how does the xserver find the fonts? -- "Don't let them, daddy. Don't let the stars run down." http://adin.dyndns.org/adin/TheLastQ.htm -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Fidre channel array
Hello everyone I am a real newby to linux, not just debian. I have an old compaq 6500 with 2 fibre channel arrays insalled. I have installed deb 4.0R5 on the server. When I do a lspci the 2 adapters appear on the list of devices. server1:~# lspci 00:01.0 PCI bridge: IBM IBM27-82351 (rev 07) 00:02.0 PCI bridge: Digital Equipment Corporation DECchip 21152 (rev 03) 00:0b.0 PCI Hot-plug controller: Compaq Computer Corporation PCI Hotplug Controller (rev 04) 00:0c.0 System peripheral: Compaq Computer Corporation Advanced System Management Controller 00:0d.0 SCSI storage controller: LSI Logic / Symbios Logic 53c875 (rev 14) 00:0d.1 SCSI storage controller: LSI Logic / Symbios Logic 53c875 (rev 14) 00:0e.0 VGA compatible controller: ATI Technologies Inc 3D Rage IIC 215IIC [Mach64 GT IIC] (rev 7a) 00:0f.0 ISA bridge: Intel Corporation 82371AB/EB/MB PIIX4 ISA (rev 02) 00:0f.1 IDE interface: Intel Corporation 82371AB/EB/MB PIIX4 IDE (rev 01) 00:0f.2 USB Controller: Intel Corporation 82371AB/EB/MB PIIX4 USB (rev 01) 00:0f.3 Bridge: Intel Corporation 82371AB/EB/MB PIIX4 ACPI (rev 02) 00:10.0 Host bridge: Intel Corporation 450NX - 82451NX Memory & I/O Controller (rev 03) 00:12.0 Host bridge: Intel Corporation 450NX - 82454NX/84460GX PCI Expander Bridge (rev 02) 00:14.0 Host bridge: Intel Corporation 450NX - 82454NX/84460GX PCI Expander Bridge (rev 02) 01:00.0 Mass storage controller: Compaq Computer Corporation Smart-2/P RAID Controller (rev 03) 02:04.0 Ethernet controller: Intel Corporation 82557/8/9 [Ethernet Pro 100] (rev 05) 02:05.0 Ethernet controller: Intel Corporation 82557/8/9 [Ethernet Pro 100] (rev 05) 04:02.0 Network controller: Compaq Computer Corporation Fibre Channel Host Controller (rev 03) 04:04.0 Network controller: Compaq Computer Corporation Fibre Channel Host Controller (rev 03) 04:0b.0 PCI Hot-plug controller: Compaq Computer Corporation PCI Hotplug Controller (rev 04) The adapters already have disk arrays attached. What I am wanting to know is how do I use/access/setup these devices so that I can access/use the disk arrays attached to the devices. Sorry if this is a basic question, but I really am new to linux and don't have a single clue. Regards Fred -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: xorg and fonts
On Sat, Dec 06, 2008 at 01:23:31AM -0600, lee wrote: > Hi, > > is there something that is supposed to update /etc/X11/xorg.conf > regarding font paths --- or something that is supposed to make the > installed fonts available otherwise? I got an automatically created > xorg.conf with no font paths specified, so I put the paths in > myself. Or do things like kdm/gdm/xdm specify font paths on the > commandline when starting the xserver? > > There was a Section "Files" in xorg.conf, but it was empty. Yes there was I also wondered... that wa core X11 core fonts Now we have xft2: http://people.debian.org/~osamu/pub/getwiki/html/ch08.en.html#fontsinthexwindow Osamu -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Issues with PCF and BDF Fonts after regular lenny updates
Hi, On Fri, Dec 05, 2008 at 12:21:39PM -0800, Amit Uttamchandani wrote: > > I do my usual Lenny/Testing updates every couple of days and this time > however, my terminal and X fonts are messed up. > > The curios thing is that it is only PCF or BDF fonts. TrueType fonts > display correctly. > > For example, I use slim X11 session manager and this specific theme > uses snap.pcf (from artwiz). It can't seem to find snap.pcf and thus > defaults to Bitstream or some other font. > > Same issue with urxvt. I use Dina.bdf for that and now it displays a > super large font. If I change urxvt to use Liberation Sans or Courier, > everything works as expected. > > After looking at logs, I figured the only cause was my last set of > updates included updates to fontconfig. I searched bug reports but to > no avail. > > I am not too familiar with fonts on linux systems so any help would be > appreciated. Maybe I just need to rebuild the font caches? How do I do > that? > > Also, I don't use GNOME or KDE so CLI method is preferable. Now default font set are picked via fontconfig thing. http://people.debian.org/~osamu/pub/getwiki/html/ch08.en.html#fontsinthexwindow -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Better support for merging local and upstream (was: Erase cache, clean registry in Linux)
On Sat, Dec 06, 2008 at 12:45:28AM -0600, Boyd Stephen Smith Jr. wrote: > On Friday 2008 December 05 23:02, Stefan Monnier wrote: > > When an upgrade is installed, local changes *have* to be merged with the > > changes brought in from the upgrade. That's just an unvoidable need. > > I disagree with this. It should be possible to establish "hooks" so that the > administrator should not ever have to edit an installed file, but instead > place additional or overriding instructions in a separate file which the > packages manager would not read or modify. How exactly would that work? Think of /etc/exim4/exim4.conf, for example --- I'm already bypassing the automatic configuration because I was unable to figure out how to make it do what I want and because I don't want to use it because it's not human readable and editable and I wouldn't know how exactly exim is configured. To use the automatic configuration, you do not only need to know how to configure exim, you also would have to know how to use the automatic configuration to get it to create the configuration you want. That makes it at least twice as difficult to configure exim. Now, given that you use the automatic configuration, you want to add another level of difficulty by having another configuration to counteract the automatic configuration. Configuring exim would become at least three times as difficult as needed because you would have to learn how to configure exim, how to make the automatic configuration do what you want and then how to counteract the automatic configuration. Using /etc/exim4/exim4.conf is already providing "additional or overriding instructions" the package management doesn't touch. I wouldn't want package management software to interact in any way with my instructions, so merging something or having to provide only particular instructions against what the package management does is out of the question: It's easy to overlook something that the package management does which would require me to counteract it, especially when installing updates that might unexpectedly activate new features. With that kind of complexity, people will start asking if they can't go back to configure things themselves --- like they already do with exim. If I was serious about apache2, I would do the same for apache2, completely bypass the automatic stuff. Frankly, I don't know how the apache2 I'm running is configured because the automatic stuff hides the configuration from me. It's working, it doesn't matter much, but if it was an important service, I'd have to bypass the automatic system because I would need to know exactly what's configured. And it's the same as with exim: You'd have to know how to configure apache2, then you'd have to know how to make the automatic configuration create the configuration you want, and then you'd have to know which "additional or overriding instructions" you need to give. That's at least three times as difficult as just configuring apache2 yourself. The package management software just needs to tell you that it wants to make changes, what these changes would be and to give you the option to decide what you want. That's what it does now. If an update brings changes, I want to know what these changes are. I don't want them to be hidden from me by automatically changing or merging configurations. -- "Don't let them, daddy. Don't let the stars run down." http://adin.dyndns.org/adin/TheLastQ.htm -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
