Re: QoS

2015-01-12 Thread Samuel

Bonjour,

Plusieurs remarques (désolé si c'est à côté de la plaque) :

- Ne voyant pas le début des commandes, le marquage se fait-il bien dans 
la table mangle ?

iptables -t mangle -A POSTROUTING -p icmp -o eth1 -j MARK --set-mark 10

- Je ne vois pas la restauration de l'état en début de script :
iptables -t mangle -A PREROUTING -j CONNMARK --restore-mark

- Je ne vois pas non plus la sauvegarde en sortie de chaine :
iptables -t mangle -A POSTROUTING -o $DEV_SORTIE -m state --state NEW -j 
CONNMARK --save-mark


Samuel.

Le 09/01/2015 14:25, BERTRAND Joël a écrit :

Bonjour à tous,

Considérons un serveur connecté à deux interfaces WAN (eth1 et 
eth2, le LAN est sur eth0).


Les adresses IP sont les suivantes :
eth1 : 192.168.254.1
eth1:1 : 192.168.254.81
...
eth1:6 : 192.168.254.86

eth2 : 192.168.253.1

Tourne sur cette machine un proxy qui tire au hasard une 
adresse entre eth1:1 et eth1:6 pour se connecter sur les serveurs 
distants. Ça fonctionne.


Je veux rajouter une QoS sur cette machine. Pour cela, j'ai 
tagué les différents paquets comme suit :


[0:0] -A POSTROUTING -p icmp -o eth1 -j MARK --set-mark 10
[0:0] -A POSTROUTING -p icmp -o eth2 -j MARK --set-mark 10
[0:0] -A POSTROUTING -p udp --dport domain -o eth1 -j MARK --set-mark 20
[0:0] -A POSTROUTING -p udp --sport domain -o eth1 -j MARK --set-mark 20
[0:0] -A POSTROUTING -p udp --sport domain -o eth2 -j MARK --set-mark 20
[0:0] -A POSTROUTING -p udp --dport ntp -o eth1 -j MARK --set-mark 20
[0:0] -A POSTROUTING -p udp --sport ntp -o eth1 -j MARK --set-mark 20
[0:0] -A POSTROUTING -p udp --sport ntp -o eth2 -j MARK --set-mark 20
[0:0] -A POSTROUTING -p tcp --sport 3128 -o eth2 -j MARK --set-mark 30
[0:0] -A POSTROUTING -p tcp --sport ssh -o eth1 -j MARK --set-mark 40
[0:0] -A POSTROUTING -p tcp --sport ssh -o eth2 -j MARK --set-mark 40

tc qdisc add dev eth1 root handle 1: htb default 100
tc qdisc add dev eth2 root handle 2: htb default 100

tc class add dev eth1 parent 1:0 classid 1:1 htb \
rate 1100kbit mtu 1500
tc class add dev eth2 parent 2:0 classid 2:1 htb \
rate 3mbit mtu 1500

tc class add dev eth1 parent 1:1 classid 1:10 htb \
rate 10kbit ceil 1100kbit prio 1
tc class add dev eth1 parent 1:1 classid 1:20 htb \
rate 200kbit ceil 1100kbit prio 2
tc class add dev eth1 parent 1:1 classid 1:40 htb \
rate 500kbit ceil 1100kbit prio 4
tc class add dev eth2 parent 2:1 classid 2:10 htb \
rate 10kbit ceil 3mbit prio 1
tc class add dev eth2 parent 2:1 classid 2:20 htb \
rate 200kbit ceil 3mbit prio 2
tc class add dev eth2 parent 2:1 classid 2:30 htb \
rate 1mbit ceil 2mbit prio 3
tc class add dev eth2 parent 2:1 classid 2:40 htb rate \
500kbit ceil 3mbit prio 4

tc filter add dev eth1 parent 1: protocol ip prio 1 handle 10 \
fw flowid 1:10
tc filter add dev eth1 parent 1: protocol ip prio 2 handle 20 \
fw flowid 1:20
tc filter add dev eth1 parent 1: protocol ip prio 4 handle 40 \
fw flowid 1:40
tc filter add dev eth2 parent 2: protocol ip prio 1 handle 10 \
fw flowid 2:10
tc filter add dev eth2 parent 2: protocol ip prio 2 handle 20 \
fw flowid 2:20
tc filter add dev eth2 parent 2: protocol ip prio 3 handle 30 \
fw flowid 2:30
tc filter add dev eth2 parent 2: protocol ip prio 4 handle 40 \
fw flowid 2:40

J'aimerais avec cela que les l'ICMP, le ssh et certains autres
protocoles aient un débit minimal réservé et que le reste utilise la
bande passante restante. Visiblement, j'ai raté quelque chose
puisque cela ne fonctionne pas. Une requête sur le serveur apache
est capable de monopoliser toute la bande disponible au détriment
des autres protocoles.

Une idée ?

Cordialement,

JKB



--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b38af0.6020...@ingescom.com



Re: Have I been hacked?

2015-01-12 Thread Joe
On Mon, 12 Jan 2015 17:24:41 +0900
Joel Rees joel.r...@gmail.com wrote:


 The only truly secure computer is the one that you wrote all the OS
 and application code for.

*And* the compiler(s) and the rest of the build toolchain... *and* the
BIOS, *and* the code for any network hardware you use...*and* the
firmware of all of your hardware...

-- 
Joe


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150112091810.40d30...@jresid.jretrading.com



Re: Have I been hacked?

2015-01-12 Thread Joel Rees
On Mon, Jan 12, 2015 at 7:32 AM, Iain M Conochie i...@thargoid.co.uk wrote:

 On 10/01/15 20:31, Brian wrote:

 By all means advocate and use ssh keys. But at least provide some
 substantial reason for spurning password login for that particular
 situation. A blanket don't use passwords or keys are better doesn't cut
 it.


 There are 3 (current) factors in authentication:

According to some models.

 1. What the user knows

Knowledge is a thing which is had. It is potentially easy to
duplicate, in smal pieces. The choice of which piece is used is
hopefuly not so easily duplicated. This is the first assumed weakness
of passwords, that most people are lazy about the choice.

 2. What the user has

Typical example is a bank card. Unfortunately, this is easy to
duplicate, if one is not careful about where one uses it. (ATM
machines where the front panel has been augmented by atackers, and the
reader slot has a second reader hiding in front of the real reader
provide one example.)

Physical keys, like the key to your front door or to the safe deposit
box, are another example.

 3. What the user is

Try to define that in a way useful to authentication, without invoking
either of the above concepts.

 These increase in security as you go higher up the number.

How do prove that?

How do you define security?

 So (assuming the
 implementation is secure

Is secure here related to security above?

 ) my fingerprint (being something I am)

You sure it's not something you have?

 is more
 secure than a password.

Unless someone chops your hand off to steal your BMW.

 Also, an ssh-key (being something I have

Now there's an interesting assertion. It seems reasonable, if one
accepts certain implicit, arbitrary boundaries between the three
classes of tokens invoked above.

-- seems reasonable --

 ) is more
 secure than a password.

And, yet, it is no more secure than the user account on the machine in
which it is stored.

(Noting, not coincidentally, that the computer storage device acts as
a memory proxy.)

 In each case we have the _implementation_

among other things

 to let us down. #1 is up to the
 user whereas #2 and #3 are up to the programmer.

I can think of a number of ways in which what you appear to be talking
about as something you have and something you are are as much under
control of the user as under control of the programmer.

 Who do you trust ;)

I would prefer that we all learn to program.

-- 
Joel Rees

The only truly secure computer is the one that you wrote all the OS
and application code for.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/caar43iov07n20efsd2qqbxa_t_-utavabbbxg4fkyrew7c_...@mail.gmail.com



Changement de disque dur sur un ordinateur portable

2015-01-12 Thread MERLIN Philippe
Bonjour,
Voilà la problématique sur mon portable j'ai un disque dur de 250 Go, je 
voudrais le remplacer par un disque dur de 500 Go. Sur ce disque dur j'ai les 
systèmes MS Vista et Debian 8 Sid.
Pour effectuer cette opération j'ai l'aide d'un disque dur Externe USB de 1 Go.
J'envisage les étapes suivantes :
1 avec Clonezilla Live  faire une sauvegarde du disque 250 Go sur une 
partition du disque dur  externe, Clonezilla a l'avantage de vérifier sa 
sauvegarde.
2 Remplacer le disque 250 Go par le disque vierge 500 Go;
3 Restauration à l'aide de Clonezilla Live.
4 Tester le bon Fonctionnement de Sid et Vista.
5 Utlisé Gparted live pour redimensionner les partitions car Clonezilla remet 
à l'identique.
Voilà les partitions actuels leur taille et l'ordre sur le disque ainsi que 
l'évolution envisagée :
primaire sda1 NTFS 48,83 Go boot (Vista)---70 Go
étendue sda5  5 Go swap  =5 Go
étendue sda6 ext3 169,17 Go (Debian Sid)---330 Go
primaire sda2 fat32 1 Go HP_Tools  =   1 Go
primaire sda3 ntfs  9 Go  HP_RECOVERY  =   9 Go
N'ayant aucune expérience de cette opération je me tourne vers les experts de 
la liste pour me dire si c'est faisable et si il y a un risque, ou si il y a 
d'autres solutions plus facile, j'ai cherché sur Google et je n'ai rien 
trouvé.
Philippe Merlin




--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/3362316.sxUp4TMo6x@portable



Re: Changement de disque dur sur un ordinateur portable

2015-01-12 Thread Klaus Becker
Le lundi 12 janvier 2015, 12:03:36 honeyshell a écrit :
 Bonjour la team,
 
 Voici la méthode que j'ai déjà réalisé :
 http://www.isalo.org/wiki.debian-fr/La_commande_dd
 paragraphe Sauvegarder un disque dur ou une partition dans une image
 compressée
 
 Puis Gparted pour re-agrandir les partitions d'une manière ludique.
 
 


Salut, 

pour une partition, fsarchiver est également pratique et facile à utiliser :

$ apt-cache show fsarchiver

Suggests: xfsprogs, reiserfsprogs, reiser4progs, jfsutils, ntfsprogs, ntfs-3g, 
btrfs-tools
Description-en: file system archiver
 FSArchiver is a system tool that allows you to save the contents of a
 file system to a compressed archive file. The file system can be restored
 on a partition which has a different size and it can be restored on a
 different file system.
 Unlike tar/dar, FSArchiver also creates the file system when it extracts
 the data to partitions.
 Everything is checksummed in the archive in order to protect the data. If
 the archive is corrupt, you just lose the current file, not the whole archive.


Klaus

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/2447942.ReDoIkm2DR@1stein



Re: Consulta posible bug debian

2015-01-12 Thread Alexis Saucedo
Gracias por responder!, al final de cuentas mate mi debian y lo
reinstale nuevamente, es extraño que haya pasado 2 veces en dos
instalaciones, cuando tuve andando debian squeeze anteriormente muy
bien, lamentablemente ne aquella ocacion tuve que carga de nuevo sl SO
ya que mi disco duro expiro de un dia para el otro, pero bueno vamos a
ver como anda este wheeze que instale ahora.

Les mando un saludo a todos y muchas gracias por su tiempo.

El día 11 de enero de 2015, 13:33, Camaleón noela...@gmail.com escribió:
 El Sun, 11 Jan 2015 02:47:25 -0300, Alexis Saucedo escribió:

 (ese html...)

 Buenas noches, algun sabe si esta fallando la distro netinstall con
 respecto al xserver?

 ¿Y qué relación le ves a una imagen de instalación mínima con el servidor
 X? :-?

 Sucede que la semana pasaxa tuve problemas para
 levantar el xserver de un dia para el otro, busque en internet no pude
 solucionar el problema, acabo de reinstalar el sistema y de nuevo el
 mismo problema le instale xfce de entorno y ligthdm, no instale nada mas
 que eso,
 fue desde un netinstall me instalo wheezy estable.
 Alguna idea? Saludos!

 La imagen netinstall no contiene apenas paquetes, tienes que instalarlos
 tú después a través de Internet. En cuanto al problema con el servidor
 gráfico tendrías que darnos más datos como:

 1/ Tarjeta gráfica, marca y modelo
 2/ Driver en uso
 3/ Contenido de /var/log/Xorg.0.log
 4/ Qué sucede cuando intentas arrancar el entorno gráfico desde init 1
 con startx

 Saludos,

 --
 Camaleón


 --
 To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
 Archive: https://lists.debian.org/pan.2015.01.11.16.33...@gmail.com



--
To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAAu=vqdxnckqtqfuz3mkmoya61e4tsmovrkcc57kl6wm356...@mail.gmail.com



Re: récupérer des données en RAID 1

2015-01-12 Thread BERTRAND Joël

Bonjour,

	Si c'est du Raid1, tu dois pouvoir monter les disques à la main comme 
s'il s'agissait de disques non raid.


	Typiquement, si /dev/md0 est composé de /dev/sda1 et de /dev/sdb1, tu 
peux monter /dev/sdb1 tout seul.


	Quant à ton problème, il faut explicitement indiquer à grub qu'il doit 
démarrer sur /dev/sdax ou sur /dev/sdbx en cas de défaillance et 
installer le secteur de boot sur les deux disques.


Cordialement,

JKB

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3c628.1000...@systella.fr



Re: Have I been hacked?

2015-01-12 Thread iain

On 2015-01-12 08:24, Joel Rees wrote:
On Mon, Jan 12, 2015 at 7:32 AM, Iain M Conochie i...@thargoid.co.uk 
wrote:


On 10/01/15 20:31, Brian wrote:


By all means advocate and use ssh keys. But at least provide some
substantial reason for spurning password login for that particular
situation. A blanket don't use passwords or keys are better 
doesn't cut

it.



There are 3 (current) factors in authentication:


According to some models.


Care to enlighten me about others?



1. What the user knows


Knowledge is a thing which is had. It is potentially easy to
duplicate, in smal pieces. The choice of which piece is used is
hopefuly not so easily duplicated. This is the first assumed weakness
of passwords, that most people are lazy about the choice.


While it is possible to enforce certain password policies (e.g. must use 
capital letters, numbers, symbols etc) these
do not necessarily dictate a secure password. I guess if I know you 
phone number, if it is stored in my phone I have
it as well. Someone steals my phone they now also know and have your 
number. If I do not add it to my phone, do I still

have it?




2. What the user has


Typical example is a bank card. Unfortunately, this is easy to
duplicate, if one is not careful about where one uses it. (ATM
machines where the front panel has been augmented by atackers, and the
reader slot has a second reader hiding in front of the real reader
provide one example.)

Physical keys, like the key to your front door or to the safe deposit
box, are another example.


Yup - I agree with this.




3. What the user is


Try to define that in a way useful to authentication, without invoking
either of the above concepts.


These increase in security as you go higher up the number.


How do prove that?


Knowledge is easier to duplicate than a physical item. You mentioned the 
ATM attack.
That requires particular equipment to successfully orchestrate, and in 
fact many

ATM's have been modified to not allow said equipment to function.

Of course, with the advent of 3D printing, duplicating physical items is 
much easier that

it used to be.



How do you define security?


I don't need to. There is already a definition in English for this:

http://dictionary.cambridge.org/dictionary/british/security



So (assuming the
implementation is secure


Is secure here related to security above?


Secure as in the implementation has as close to 0 defects as possible.




) my fingerprint (being something I am)


You sure it's not something you have?


Nope - I am pretty sure it is something I am, within the context of the 
above statement.





is more
secure than a password.


Unless someone chops your hand off to steal your BMW.


Again - implementation. Is the hand warm? Is there a pulse?




Also, an ssh-key (being something I have


Now there's an interesting assertion. It seems reasonable, if one
accepts certain implicit, arbitrary boundaries between the three
classes of tokens invoked above.

-- seems reasonable --


) is more
secure than a password.


And, yet, it is no more secure than the user account on the machine in
which it is stored.


OK sure - but we are discussing how to authenticate to an account right?



(Noting, not coincidentally, that the computer storage device acts as
a memory proxy.)


In each case we have the _implementation_


among other things


Please expand on other things




to let us down. #1 is up to the
user whereas #2 and #3 are up to the programmer.


I can think of a number of ways in which what you appear to be talking
about as something you have and something you are are as much under
control of the user as under control of the programmer.


Something you have and something you are have to be digitised, to 
produce a
token that can be used to prove your identity to a computer system. That 
is

part of the implementation.




Who do you trust ;)


I would prefer that we all learn to program.


I would prefer that no-one would try and break into my machines to be 
honest, but we

all know that is not going to happen any time soon.

Cheers


Iain



--
Joel Rees

The only truly secure computer is the one that you wrote all the OS
and application code for.



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: 
https://lists.debian.org/23baaf9183378cac13fcbef4f7762...@thargoid.co.uk



Re: récupérer des données en RAID 1

2015-01-12 Thread Jacky ML

Bonjour

probablement le grub qui était sur le mbr du disque en rade et pas de 
grub sur le second


essai http://www.supergrubdisk.org/
suivant la version du grub (surement grub2) il va chercher 
automatiquement le fichier de conf pour boot dessus (ou lui spécifié 
s'il trouve pas)

et ainsi démarré ton système, ensuite plus qu'a réparer.

sinon pour monté les partitions sous livecd, c'est surement sous 
/dev/md0 et /dev/md1


Jacky


Le 12/01/15 13:50, Jose CHARTERS a écrit :

Bonjour,

Il y a plus d'un an, j'ai configuré un serveur en debian wheezy avec 
deux disques en raid 1. Chaque disque avait deux partitions, une pour 
le système et une pour /home.


Tout fonctionnait bien. Le serveur qui n'était pas utilisé 
régulièrement, était démarrer par réseau quand il était nécessaire et 
éteint automatiquement, via crontab, le soir. J'ai trouvé cela idiot 
mais exigence du responsable.


Et puis récemment, il n'a pas démarré. J'ai donc regardé de plus prêt. 
Un disque n'est plus reconnu, le premier /dev/sda. Il ne reste plus 
que le second mais la machine n'arrive pas à démarrer dessus. Je suis 
surpris car il me semble que justement le raid 1 permettait de palier 
à ce type de panne. J'en déduis que j'ai mal configurer grub.


Bien sûr, je veux récupérer mes données sur le disque qui reste. J'ai 
cherché via notre copain Google, comment récupérer des partitions raid 
1, mais je n'ai pas trouver beaucoup de solutions. J'ai même trouvé 
une page qui disait qu'il suffisait de faire un simple mount -t ext4 
/dev/sdxx /repertoire_montage. J'ai essayé et la réponse est : wrong 
fs type. Cela se semble clair.


J'ai essayé de bouter avec une liveCD knoppix pour retrouver les 
disques. Hélas, le montage des disques raid 1 ne se fait pas.


Je crains d'utiliser mdadm pour reconstruire le raid par peur 
d'effacer les données contenues sur les disques.


Quelqu'un peut il me rassurer ou me donner une procédure pour 
retrouver soit les partitions raid 1 ou les données des disques ?


Merci,

José



--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3c8c9.30...@omega-centauri.net



RE:solicitud informacion debian (Alberto Cabrejas Pérez)

2015-01-12 Thread Alberto Cabrejas Pérez
Instala Debian su ultima actualizacion 7.8 y con la herramienta de 
virtualizacion VirtualBox puedes lugrar lo que quieres (viene en los repos).

--

Saludos, *Alberto Cabrejas Pérez*
Administrador de Redes Informáticas
ARTex S.A. Sucursal Granma
http://www.artexsa.com
http://www.scgra.artex.sa
Linux Usuario Registrado # 31 666
Teléf.(0123) 48-1956, 48-1912, 48-1934 (Ext 107)
Todos los caminos conducen a Debian...





Re: récupérer des données en RAID 1

2015-01-12 Thread Jean-Michel OLTRA

Bonjour,


Le lundi 12 janvier 2015, Jose CHARTERS a écrit...


 Et puis récemment, il n'a pas démarré. J'ai donc regardé de plus prêt. Un
 disque n'est plus reconnu, le premier /dev/sda. Il ne reste plus que le
 second mais la machine n'arrive pas à démarrer dessus. Je suis surpris car
 il me semble que justement le raid 1 permettait de palier à ce type de
 panne. J'en déduis que j'ai mal configurer grub.

La partie Rescue des cd Debian d'installation gère très bien le RAID.
Systemrescuecd également. Je parle d'expérience pour ces 2 systèmes de
récupération.

Tu peux marquer ton disque malade comme faulty, et le sortir du raid

mdadm /dev/mdX --fail /dev/sdY
mdadm /dev/mdX --remove /dev/sdY

Tu peux ré-installer grub sur le bon disque qui te reste, avec :

grub-install /dev/sdX

-- 
jm

-- 
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/20150112132023.GD2841@espinasse



Screen refresh

2015-01-12 Thread Diogene Laerce
Hi,

I have an annoying refreshing/redrawing issue with my monitor screen LG Flatron 
L222WS
on my Wheezy (Nvidia GT 640 with last proprietary driver installed).

The screen, pretty much all the time, does not refresh the image (does not 
redraw it) :
the screen stays idle for example when I change tabs in iceweasel, I have to 
resize, 
minimize and maximize the window to effectively see the screen to update the 
image.

And that happens in every softwares installed as long as they have graphical 
interface,
of course. :)

Did anyone have the same issue or figure what could be the cause of that issue ?


Thank you,

-- 
“One original thought is worth a thousand mindless quotings.”
“Le vrai n'est pas plus sûr que le probable.”

  Diogene Laerce




signature.asc
Description: OpenPGP digital signature


Re: Gnash - Debian Testing

2015-01-12 Thread Enio Climaco Sales Junior
Também não tenho o flash instalado, pois mesmo o Adobe Flash vive tendo 
brechas de segurança.

Uso o Chrome para ver os vídeos e o youtube-dl para baixá-los ;-)
On 12-01-2015 08:45, Antonio Terceiro wrote:

On Sun, Jan 11, 2015 at 12:59:53PM -0200, Jack Jr wrote:

O ruim é não termos Gnash no Testing.

Uso mais o Wheezy, mas gosto de ter o Jessie para ir vendo as novidades e ter
que habilitar contrib e non-free para usar Adobe eu não gosto (no Wheezy não
tenho essa necessidade pois me viro bem com Gnash).

Com o Gnash parado vamos ficar a ver navios até a implementação total do Html5
ou nas mãos da Adobe?

o pacote parece estar abandonado. tem um bug crítico nele desde julho de
2014 que teria pelo menos uma forma fácil de consertar, mas ninguém se
deu ao trabalho, e ele ficou fora do jessie. provavelmente não tem muita
gente usando ...

eu não tenho nenhum tipo de flash instalado faz um tempo, e não sinto
muita falta. mas cada um sabe de si.




--
To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3ddec.9070...@gmail.com



Re: solicitud informacion debian (Alberto Cabrejas Pérez)

2015-01-12 Thread Camaleón
El Mon, 12 Jan 2015 11:35:02 -0300, javier frf escribió:

(ese html...)

 El 12 de enero de 2015, 11:15, Alberto Cabrejas Pérez
 albe...@scgr.artex.cu
 escribió:
 
  Instala Debian su ultima actualizacion 7.8 y con la herramienta de
 virtualizacion VirtualBox puedes lugrar lo que quieres (viene en los
 repos).
 --


 colega, no abra hilos nuevos, sobre el mismo asunto. intente responder
 en el otro hilo. saludos

Hum... No creo que haya abierto un hilo nuevo sino que al editar la línea 
del asunto el cliente de correo lo habrá tomado como un mensaje nuevo y 
no ha generado el campo de la cabecera correspondiente que indica que 
responde a otro mensaje (References o In-Reply-To).

Saludos,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/pan.2015.01.12.14.46...@gmail.com



Re: solicitud informacion debian (Alberto Cabrejas Pérez)

2015-01-12 Thread Manolo Díaz
El lunes, 12 ene 2015, a las 15:46 horas (UTC+1),
Camaleón escribió:

El Mon, 12 Jan 2015 11:35:02 -0300, javier frf escribió:

(ese html...)

 El 12 de enero de 2015, 11:15, Alberto Cabrejas Pérez
 albe...@scgr.artex.cu
 escribió:
 
  Instala Debian su ultima actualizacion 7.8 y con la herramienta de
 virtualizacion VirtualBox puedes lugrar lo que quieres (viene en los
 repos).
 --


 colega, no abra hilos nuevos, sobre el mismo asunto. intente responder
 en el otro hilo. saludos

Hum... No creo que haya abierto un hilo nuevo sino que al editar la línea 
del asunto el cliente de correo lo habrá tomado como un mensaje nuevo y 
no ha generado el campo de la cabecera correspondiente que indica que 
responde a otro mensaje (References o In-Reply-To).

Pues es la primera noticia que tengo de que Thunderbird haga eso.

Saludos.
-- 
Manolo Díaz


--
To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150112155431.479b0...@gmail.com



Re: Gnash - Debian Testing

2015-01-12 Thread P. J.
Sempre ouço dizer que flash um dia vai morrer... mas vaso ruim não quebra...rs

Em 12/01/15, Enio Climaco Sales Junioreniocsjun...@gmail.com escreveu:
 Também não tenho o flash instalado, pois mesmo o Adobe Flash vive tendo
 brechas de segurança.
 Uso o Chrome para ver os vídeos e o youtube-dl para baixá-los ;-)
 On 12-01-2015 08:45, Antonio Terceiro wrote:
 On Sun, Jan 11, 2015 at 12:59:53PM -0200, Jack Jr wrote:
 O ruim é não termos Gnash no Testing.

 Uso mais o Wheezy, mas gosto de ter o Jessie para ir vendo as novidades e
 ter
 que habilitar contrib e non-free para usar Adobe eu não gosto (no Wheezy
 não
 tenho essa necessidade pois me viro bem com Gnash).

 Com o Gnash parado vamos ficar a ver navios até a implementação total do
 Html5
 ou nas mãos da Adobe?
 o pacote parece estar abandonado. tem um bug crítico nele desde julho de
 2014 que teria pelo menos uma forma fácil de consertar, mas ninguém se
 deu ao trabalho, e ele ficou fora do jessie. provavelmente não tem muita
 gente usando ...

 eu não tenho nenhum tipo de flash instalado faz um tempo, e não sinto
 muita falta. mas cada um sabe de si.



 --
 To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/54b3ddec.9070...@gmail.com




-- 
|  .''`.   A fé não dá respostas. Só impede perguntas.
| : :'  :
| `. `'`
|   `-   Je vois tout


--
To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CACnf0pjvoYR67ufdSZ_WNhzUXHtZy5rpu=snBnXYXU6qYDg=u...@mail.gmail.com



mounting a labeled filesystem

2015-01-12 Thread peter
peter@dalton:~$ grep GRN /etc/fstab
LABEL=GRNSDHC41 /home/peter/GR auto defaults,noauto,user,users 0 0

peter@dalton:~$ mount LABEL=GRNSDHC41
mount: must be superuser to use mount
peter@dalton:~$ sudo mount LABEL=GRNSDHC41
[sudo] password for peter: 
peter@dalton:~$ mount | grep GR
/dev/sda1 on /home/peter/GR type ext2 
(rw,nosuid,nodev,noexec,relatime,errors=continue,user_xattr,acl)

Does anyone have a clever way to allow a user to mount a storage 
part containing a labeled filesystem without giving a password?

Thanks,   ... Peter E.
 
-- 
123456789 123456789 123456789 123456789 123456789 123456789 123456789 12
Tel +1 360 639 0202   http://carnot.yi.org/   Bcc: peter at easthope. ca


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/E1YAfor-0002T2-Qg@dalton.invalid



Re: solicitud informacion debian (Alberto Cabrejas Pérez)

2015-01-12 Thread Camaleón
El Mon, 12 Jan 2015 15:54:31 +0100, Manolo Díaz escribió:

 El lunes, 12 ene 2015, a las 15:46 horas (UTC+1),
 Camaleón escribió:

(...)

Hum... No creo que haya abierto un hilo nuevo sino que al editar la
línea del asunto el cliente de correo lo habrá tomado como un mensaje
nuevo y no ha generado el campo de la cabecera correspondiente que
indica que responde a otro mensaje (References o In-Reply-To).
 
 Pues es la primera noticia que tengo de que Thunderbird haga eso.

Sí, es raro, pero más extraño me parecía que el OP hubiera creado un 
mensaje nuevo y por ende hubiera tenido que escribir manualmente (o 
copiar y pegar) el asunto y el contenido del correo. Demasiado rebuscado 
y demasiada intervención manual por eso lo achaco a algún sistema 
automático ;-)

Saludos,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/pan.2015.01.12.15.02...@gmail.com



Re: Have I been hacked?

2015-01-12 Thread Chris Bannister
On Mon, Jan 12, 2015 at 09:19:58AM -0500, Jerry Stuckle wrote:
 On 1/12/2015 8:05 AM, i...@thargoid.co.uk wrote:
  
  Nope - I am pretty sure it is something I am, within the context of the
  above statement.
 
 
 A fingerprint is something you HAVE.  It is present on your body; it is
 NOT something you are.  You can leave a fingerprint on a glass, for
 instance, and it doesn't affect you at all.

Oh, come on! 
http://www.thefreedictionary.com/context

It is all about *who* you are, or claim to be.

https://danielmiessler.com/blog/security-identification-authentication-and-authorization/

-- 
If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the 
oppressing. --- Malcolm X


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150112151008.GA2954@tal



Re: mounting a labeled filesystem

2015-01-12 Thread Darac Marjal
On Mon, Jan 12, 2015 at 06:18:13AM -0800, pe...@easthope.ca wrote:
 peter@dalton:~$ grep GRN /etc/fstab
 LABEL=GRNSDHC41 /home/peter/GR auto defaults,noauto,user,users 0 0
 
 peter@dalton:~$ mount LABEL=GRNSDHC41
 mount: must be superuser to use mount

The user option SHOULD allow this. What happens if you request the
mount by mountpoint, rather than by label?

 $ mount /home/peter/GR

Another alternative is to run strace mount LABEL=GRNSDHC41 and then
read the last few lines to see where the rejection is coming from (for
example, is mount unable to read fstab, is the kernel rejecting the
mount etc etc).

 peter@dalton:~$ sudo mount LABEL=GRNSDHC41
 [sudo] password for peter: 
 peter@dalton:~$ mount | grep GR
 /dev/sda1 on /home/peter/GR type ext2 
 (rw,nosuid,nodev,noexec,relatime,errors=continue,user_xattr,acl)
 
 Does anyone have a clever way to allow a user to mount a storage 
 part containing a labeled filesystem without giving a password?
 
 Thanks,   ... Peter E.
  
 -- 
 123456789 123456789 123456789 123456789 123456789 123456789 123456789 12
 Tel +1 360 639 0202   http://carnot.yi.org/   Bcc: peter at easthope. ca
 
 
 -- 
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
 with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
 Archive: https://lists.debian.org/E1YAfor-0002T2-Qg@dalton.invalid
 


signature.asc
Description: Digital signature


mounting a labeled filesystem

2015-01-12 Thread peter
peter@dalton:~$ grep GRN /etc/fstab
LABEL=GRNSDHC41 /home/peter/GR auto defaults,noauto,user,users 0 0

peter@dalton:~$ mount LABEL=GRNSDHC41
mount: must be superuser to use mount
peter@dalton:~$ sudo mount LABEL=GRNSDHC41
[sudo] password for peter: 
peter@dalton:~$ mount | grep GR
/dev/sda1 on /home/peter/GR type ext2 
(rw,nosuid,nodev,noexec,relatime,errors=continue,user_xattr,acl)

Does anyone have a clever way to allow a user to mount a storage 
part containing a labeled filesystem without giving a password?

Thanks,   ... Peter E.
 
-- 
123456789 123456789 123456789 123456789 123456789 123456789 123456789 12
Tel +1 360 639 0202   http://carnot.yi.org/   Bcc: peter at easthope. ca


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/E1YAg9s-0002YN-Eo@dalton.invalid



Re: récupérer des données en RAID 1

2015-01-12 Thread Vincent Bernat
 ❦ 12 janvier 2015 14:03 +0100, BERTRAND Joël joel.bertr...@systella.fr :

   Si c'est du Raid1, tu dois pouvoir monter les disques à la
 main comme s'il s'agissait de disques non raid.

   Typiquement, si /dev/md0 est composé de /dev/sda1 et de
 /dev/sdb1, tu peux monter /dev/sdb1 tout seul.

Avec des métadata en 1.1 ou 1.2, le superblock est maintenant en début
de volume, on ne peut donc plus monter une partition comme si de rien
n'était.

En wheezy, par défaut, c'est du 1.2 qui est créé.
-- 
The very ink with which all history is written is merely fluid prejudice.
-- Mark Twain


signature.asc
Description: PGP signature


Re: solicitud informacion debian (Alberto Cabrejas Pérez)

2015-01-12 Thread javier frf
El 12 de enero de 2015, 11:15, Alberto Cabrejas Pérez albe...@scgr.artex.cu
 escribió:

  Instala Debian su ultima actualizacion 7.8 y con la herramienta de
 virtualizacion VirtualBox puedes lugrar lo que quieres (viene en los repos).
 --


colega, no abra hilos nuevos, sobre el mismo asunto. intente responder en
el otro hilo. saludos

   Saludos, *Alberto Cabrejas Pérez*
 Administrador de Redes Informáticas
 ARTex S.A. Sucursal Granma
 http://www.artexsa.com
 http://www.scgra.artex.sa
 Linux Usuario Registrado # 31 666
 Teléf.(0123) 48-1956, 48-1912, 48-1934 (Ext 107)
 Todos los caminos conducen a Debian...



Re: [OT] Raid por hardware

2015-01-12 Thread Camaleón
El Mon, 12 Jan 2015 13:12:00 +0100, José Miguel (sio2) escribió:

 El Sun, 11 de Jan de 2015, a las 04:29:13PM +, Camaleón dijo:
 
 Sí, era el que usaba para comprobar el estado del RAID, antes de
 descubrir que también existía la utilidad lsiutil. Lo único que indica
 es el modelo también. De hecho, ni siquiera da información del
 progreso de la sincronización: sólo de que los discos no están
 sincronizados y de que se está en proceso de sincronización. Pero del
 tanto por ciento, nada de nada.
 Pues no lo entiendo, la verdad. LSI no es precisamente un fabricante de
 los considerados malillos, no tiene sentido que disponga de
 herramientas para la gestión del raid tan pobres, la menos la suya
 (lsiutil) debería ser más completa pero parece que no :-?
 
 Quizás me has entendido mal: es mpt-status el que no devuelve el
 porcentaje de la sincronización: lsiutil, sí. Lo que fui incapaz de
 encontrar con lsiutil fue la identificación del disco.

No me refería al estado de la sincronización sino al nº de serie de los 
discos, que no se entiende que ninguna de las dos herramientas te diga 
cuáles son. Sinceramente, incomprensible.

El hecho de que mpt-status no te diga el porcentaje de la reconstrucción 
no me extraña porque por la propia descripción del paquete parece más 
bien una herramienta de control y no tanto de gestión del raid, es decir, 
una especie de demonio que monitoriza el estado del raid y en caso de 
caída te informa de alguna manera (e-mail, wall), algo que las 
herramientas CLI convencionales que proporcionan los fabricantes no 
suelen disponer ya que se ejecutan una vez para trabajar con el raid pero 
poco más. Es decir, que mpt-status vendría a ser el complemento perfecto 
de lsiutil, cada una con funciones bien definidas.

 No, no... qué va, no vale. Recuerda que en el supuesto que estamos
 tratando estás deshaciendo el raid 1: pinchas un disco únicamente en
 una controladora de disco duro distinta. Lo normal en ese caso es que
 si se tratara de un volumen de inicio no pudiera arrancar.
  La definición del RAID en sí puede estar almacenada en memoria flash
  y no hay que guardar metadatos del RAID en los discos duros.
 ¿En qué memoria flash?
 
 En la de la propia controladora RAID, que tiene su propia BIOS
 actualizable por lo que debe tener memoria flash.

Mucho esperas... Me extrañaría que tuviera memoria flash con capacidad 
suficiente para albergar los datos más allá de los que necesita (firmware 
y metadatos). Salvo que la controladora sea buena (pero de las buenas de 
verdad que tienen un batería y todas esas gaitas) y aún así tendría mis 
dudas.

 Los datos del RAID quedan en los discos duros y la controladora RAID es
 la que se encarga de interpretarlos, de ahí que mientras conectes los
 discos a una controladora igual no haya problemas pero no sucede lo
 mismo si los discos se conectan a una controladora distinta (sea RAID o
 no).
 
 Pues he probado a conectar el otro disco a otro ordenador y arranca sin
 problemas. Como uno lo conecté al servidor pero no a través de la
 controladora y otro a otro ordenador sin ella, ambos discos han
 arrancado y funciona su sistema perfectamente sin la controladora. 

Si el kernel donde tienes instalado el sistema ya tiene en su imagen el 
driver de la nueva controladora donde has conectado el disco, no tienes 
que hacer nada, lo cargará al iniciarse. 

 Así que los datos de definición del RAID deben de estar en la propia
 controladora, porque el único lugar libre que se me ocurre en los discos
 es el espacio que hay entre el MBR y el principio de la primera
 partición. Pero ese espacio ya lo usa grub, al menos en parte. Además el
 RAID se puede inicializar antes de tener hecha ninguna partición. He
 mirado con fdisk la definición de las particiones del disco (que ya no
 gestiona la controladora) y no hay nada raro en ellas. La primera
 empieza en el sector 2048.

Creo que tienes un error de concepto. Cuando inicializas los discos desde 
la utilidad de la controladora raid para empezar a definir el nivel de 
raid que quieres y el resto de datos del array, lo que estás haciendo es 
grabar esa información en los discos duros que hayas seleccionado para 
formar parte del array. Los datos se almacenan en lo que llama 
superbloques persistentes (igual que cuando usas raid por software o 
md).

Lo que no tenía tan claro es que se pudiera iniciar un sistema que tenía 
un raid 1 (definido por una controladora hardware raid) con un único 
disco, no sé por qué pero algo me dice que en windows te encontrarías con 
un bonito pantallazo azul, pero quizá en linux sea diferente :-)

 El driver no lo estoy usando para nada ahora mismo. De hecho acabo de
 hacer unos rmmod para eliminar todos los drivers mtp* y los he
 descargado sin problemas.
 Pues la salida que enviaste de lspci decía que estaban en uso:
 
 La salida dice que lo está usando la controladora, lo cual es normal
 porque sigue pinchada y no la he deshabilitado. Como es software plug
 and play, 

Re: Have I been hacked?

2015-01-12 Thread Jerry Stuckle
On 1/12/2015 8:05 AM, i...@thargoid.co.uk wrote:
 
 While it is possible to enforce certain password policies (e.g. must use
 capital letters, numbers, symbols etc) these
 do not necessarily dictate a secure password. I guess if I know you
 phone number, if it is stored in my phone I have
 it as well. Someone steals my phone they now also know and have your
 number. If I do not add it to my phone, do I still
 have it?


No different than having a key on your notebook and having the notebook
stolen.

snip


 Knowledge is easier to duplicate than a physical item. You mentioned the
 ATM attack.

Incorrect.  Knowledge cannot be duplicated if there is no basis for that
knowledge.

For instance, it was not possible for archeologists to decipher ancient
Egyption hieroglyphics before the discovery of the Rosetta Stone in 1799
- before this, there was no basis for knowledge of the language.

The same is true for passwords.  If you don't have a basis for knowledge
of the password's construction, it is impossible to duplicate that
password in any reasonable length of time.

For instance - let's see you duplicate the password to one of my
servers.  You won't be able to do it, because it's random and I don't
have it written down anywhere.  Even if you steal every one of my
computers, it won't help you at all, because it's not stored on any of
them.

 

 How do you define security?
 
 I don't need to. There is already a definition in English for this:
 
 http://dictionary.cambridge.org/dictionary/british/security

I happen to agree with Joel here.  I don't want to know the dictionary
definition - I want to know YOUR definition of security.

snip

 ) my fingerprint (being something I am)

 You sure it's not something you have?
 
 Nope - I am pretty sure it is something I am, within the context of the
 above statement.


A fingerprint is something you HAVE.  It is present on your body; it is
NOT something you are.  You can leave a fingerprint on a glass, for
instance, and it doesn't affect you at all.

Also, a fingerprint be duplicated from anywhere you leave it.  Watch
some of the CSI or similar TV shows, for instance.  They take
fingerprints off of surfaces all the time.  And it's not much harder to
make a duplicate of the fingerprint which can be used to access a
system.  It's already been done multiple times with the new IPhone
fingerprint security.


 is more
 secure than a password.

 Unless someone chops your hand off to steal your BMW.
 
 Again - implementation. Is the hand warm? Is there a pulse?


Not part of the fingerprint - but again, these can be duplicated - a
latex glove with the fingerprint etched into it, for instance.


 Also, an ssh-key (being something I have

 Now there's an interesting assertion. It seems reasonable, if one
 accepts certain implicit, arbitrary boundaries between the three
 classes of tokens invoked above.

 -- seems reasonable --

 ) is more
 secure than a password.

 And, yet, it is no more secure than the user account on the machine in
 which it is stored.
 
 OK sure - but we are discussing how to authenticate to an account right?


We are discussing how to authenticate an account on another machine.  If
your key is on your machine, and I steal your machine, I can break the
passphrase your key uses.  It may take a while, but it will be a lot
faster than if that same passphrase were uses as a password to your server.

 
 Something you have and something you are have to be digitised, to produce a
 token that can be used to prove your identity to a computer system. That is
 part of the implementation.


Everything you have mentioned is something I have.  I have knowledge
of a long, random password (not stored anywhere else).  I have a key
stored on my computer (protected by a password).  I have a fingerprint.

And the security of these three items are in DESCENDING order.

Jerry


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3d80e.3060...@gmail.com



Re: Choosing/Rotating screen for greeter

2015-01-12 Thread Sven Arvidsson
On Mon, 2015-01-12 at 11:01 +, Daniel Lintott wrote:
 Hi,
 
 I've recently switched to using one of my screens in vertical
 orientation. This is fine from the desktop (after login), but currently
 the greeter displays on the vertical screen but on it's side.
 
 Is it possible to move the greeter to the other screen, which is
 horizontal or rotate the greeter so it displays correctly?

I found an old thread about this:
http://ubuntuforums.org/showthread.php?t=1602481

It might still be possible to do something similar, but the
configuration files have changed a bit.

-- 
Cheers,
Sven Arvidsson
http://www.whiz.se
PGP Key ID 760BDD22



signature.asc
Description: This is a digitally signed message part


Re: Changement de disque dur sur un ordinateur portable

2015-01-12 Thread yamo'
Salut et Bonne année,

MERLIN Philippe a écrit le 12/01/2015 11:40 :
 Bonjour,
 Voilà la problématique sur mon portable j'ai un disque dur de 250 Go, je 
 voudrais le remplacer par un disque dur de 500 Go. Sur ce disque dur j'ai les 
 systèmes MS Vista et Debian 8 Sid.

Pour avoir déjà fait ça avec un bête cat, c'est pas debian mais windows
qui risque de poser problème.

-- 
Stéphane

-- 
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/m90c2r$jue$1...@usenet.pasdenom.info



[no subject]

2015-01-12 Thread Julio S. Peppe
Pessoal estou com problemas na instalação do debian 7.7, procedo instalando
o debian sem rede, depois configuro a rede manualmente no etc network
interfaces, mas o etc resolv.conf não existe.  Parece que a instalação não
carregou algum pacote de resolução do Dns..

Alguém pode ajudar? ???

#
A fé não da respostas, só impede as perguntas. ..
#


Re: Changement de disque dur sur un ordinateur portable

2015-01-12 Thread honeyshell
Honeywell = marque déposée,

moi c'est HoneyShell (miel + terminal, car le terminal c'est doux
comme du miel .. Oo )

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: 
https://lists.debian.org/cajehwdbewqqvz8yahhv4gs6nyjtr6w-hxiycodcueurx0pg...@mail.gmail.com



Re: Changement de disque dur sur un ordinateur portable

2015-01-12 Thread honeyshell
Bonjour la team,

Voici la méthode que j'ai déjà réalisé :
http://www.isalo.org/wiki.debian-fr/La_commande_dd
paragraphe Sauvegarder un disque dur ou une partition dans une image
compressée

Puis Gparted pour re-agrandir les partitions d'une manière ludique.

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: 
https://lists.debian.org/cajehwdajpvdtv42k4hy86pbkwqd99yj9cilwb1ade4vvorf...@mail.gmail.com



Re: Searching for information site

2015-01-12 Thread Darac Marjal
On Sun, Jan 11, 2015 at 11:38:58PM +0100, Hans wrote:
 Hello list,
 
 is there an information site, which or where I can subscribe, to get 
 informed, 
 when packages are put off the repo and its reason for it? 

Yes. https://ftp-master.debian.org/removals.html

 
 Thanks for any infos.
 
 Best 
 
 Hans
 
 
 
 -- 
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
 with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
 Archive: https://lists.debian.org/2353102.Q4ozpoJYfO@protheus2
 


signature.asc
Description: Digital signature


Choosing/Rotating screen for greeter

2015-01-12 Thread Daniel Lintott
Hi,

I've recently switched to using one of my screens in vertical
orientation. This is fine from the desktop (after login), but currently
the greeter displays on the vertical screen but on it's side.

Is it possible to move the greeter to the other screen, which is
horizontal or rotate the greeter so it displays correctly?

Cheers

Daniel

PS: I'm not subscribed, so please CC me. Thanks



signature.asc
Description: OpenPGP digital signature


Re: QoS

2015-01-12 Thread BERTRAND Joël

Samuel a écrit :

Bonjour,


Bonjour,


Plusieurs remarques (désolé si c'est à côté de la plaque) :

- Ne voyant pas le début des commandes, le marquage se fait-il bien dans
la table mangle ?


Naturellement. J'ai coupé un peu vite le début du script...


iptables -t mangle -A POSTROUTING -p icmp -o eth1 -j MARK --set-mark 10

- Je ne vois pas la restauration de l'état en début de script :
iptables -t mangle -A PREROUTING -j CONNMARK --restore-mark

- Je ne vois pas non plus la sauvegarde en sortie de chaine :
iptables -t mangle -A POSTROUTING -o $DEV_SORTIE -m state --state NEW -j
CONNMARK --save-mark


	Je n'ai jamais utilisé --restore-mark ou --save-mark. Mes paquets sont 
bien tagués mais la QoS n'est pas réellement active...


Cordialement,

JKB

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3a9aa.1090...@systella.fr



Re: Have I been hacked?

2015-01-12 Thread Darac Marjal
On Mon, Jan 12, 2015 at 09:18:10AM +, Joe wrote:
 On Mon, 12 Jan 2015 17:24:41 +0900
 Joel Rees joel.r...@gmail.com wrote:
 
 
  The only truly secure computer is the one that you wrote all the OS
  and application code for.
 
 *And* the compiler(s) and the rest of the build toolchain... *and* the
 BIOS, *and* the code for any network hardware you use...*and* the
 firmware of all of your hardware...

Actually, I disagree with this.

If I were to write all the OS and application code for my computer, and
all that other stuff, I would actually expect it to be LESS secure than
it currently is. Mostly because I don't know what I'm doing. And I
*REALLY* don't want to have to sit my parents down at a completely dead
computer and say Happy Christmas. You'll have to start writing code to
boot strap this computer I got you. You might need to start with writing
an editor... somehow. Actually, where DO you start with that task?

OK, I could get people to review it, apply fixes but if the reason I'm
writing this all myself is because I don't trust other people, when why
would I trust their judgement?

No, the better solution is what we already have. The OS, the application
code, the build toolchain, the BIOS, the hardware firmware etc etc,
should be written by the people who know about these things. The code
should then be made available for peer review along with methods to
confirm that what's loaded onto the computer is what was reviewed.

Personally, I don't mind if a company says the BIOS will only accept a
firmware update signed by our key if they also timely update that
firmware with community patches. Open source doesn't really *have* to
mean anyone can modify the code. Anyone can suggest modifications,
which the original developers will approve/deny should be an acceptable
step.

 
 -- 
 Joe
 
 
 -- 
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
 with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
 Archive: 
 https://lists.debian.org/20150112091810.40d30...@jresid.jretrading.com
 


signature.asc
Description: Digital signature


Re: Changement de disque dur sur un ordinateur portable

2015-01-12 Thread Pierre TOUZEAU
J'ai utilisé classiquement la méthode dd (lien fourni par Honeywell)
pour remplacer un HDD de 320Go par un SSD de 500Go
en gros :
- on boot en LiveLinux CD/USB
- on copie en brut (dd) le HDD1 vers HDD2   ! ON FAIT ATTENTION AU
SENS  if  of  !
- on élargie les partitions (avec gparted dans mon cas) ...
  Attention là !
Je n'avais qu'un OS et 2 partitions root swap...
j'ai donc élargi la partition primaire et étendue seulement
   [cela a quand même provoqué la modification de l'UUID des partitions
  == modifier /etc/fstab pour remonter les bonnes partitions]
   J'imagine que la modifications DES partitions est beaucoup plus
risquée et qu'il faille, comme indiqué par Honeywell, procéder par
sauvegarde (iso ?) de chacune des partitions, création par Gparted d'un
disque aux partitions bien redimensionnées puis recopie de chacune des
partitions vers le nouveau disque.
puis modification du fstab...  voir grub...  mais je ne suis pas expert.

My two cent.

Pierre

Le 12/01/2015 11:34, MERLIN Philippe a écrit :
 Bonjour,
 Voilà la problématique sur mon portable j'ai un disque dur de 250 Go, je 
 voudrais le remplacer par un disque dur de 500 Go. Sur ce disque dur j'ai les 
 systèmes MS Vista et Debian 8 Sid.
 Pour effectuer cette opération j'ai l'aide d'un disque dur Externe USB de 1 
 Go.
 J'envisage les étapes suivantes :
 1 avec Clonezilla Live  faire une sauvegarde du disque 250 Go sur une 
 partition du disque dur  externe, Clonezilla a l'avantage de vérifier sa 
 sauvegarde.
 2 Remplacer le disque 250 Go par le disque vierge 500 Go;
 3 Restauration à l'aide de Clonezilla Live.
 4 Tester le bon Fonctionnement de Sid et Vista.
 5 Utlisé Gparted live pour redimensionner les partitions car Clonezilla remet 
 à l'identique.
 Voilà les partitions actuels leur taille et l'ordre sur le disque ainsi que 
 l'évolution envisagée :
 primaire sda1 NTFS 48,83 Go boot (Vista)---70 Go
 étendue sda5  5 Go swap  =5 Go
 étendue sda6 ext3 169,17 Go (Debian Sid)---330 Go
 primaire sda2 fat32 1 Go HP_Tools  =   1 Go
 primaire sda3 ntfs  9 Go  HP_RECOVERY  =   9 Go
 N'ayant aucune expérience de cette opération je me tourne vers les experts de 
 la liste pour me dire si c'est faisable et si il y a un risque, ou si il y a 
 d'autres solutions plus facile, j'ai cherché sur Google et je n'ai rien 
 trouvé.
 Philippe Merlin


  


-- 
Pro. Signature

Pierre Touzeau

--
Chargé de mission  /  Préfecture de region Basse-Normandie
SGAR/rue Daniel HUET/14038 CAEN CEDEX/Tel: +33 231 306 306
pierre.touz...@basse-normandie.pref.gouv.fr / Fax: ... 564
--



Re: zsh is pretty good

2015-01-12 Thread Chris Bannister
On Mon, Jan 12, 2015 at 12:46:55AM -0500, kamaraju kusumanchi wrote:
 I have always used bash as it is the default shell on Debian. However,
 I started using zsh  couple of days ago and find it pretty impressive.

Have a look at this:

http://grml.org/zsh/zsh-lovers.html

At the very end there's a list of links.

-- 
If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the 
oppressing. --- Malcolm X


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150112122337.GB32305@tal



Re: Choosing/Rotating screen for greeter

2015-01-12 Thread Daniel Lintott

On 12/01/15 11:48, Alex Mestiashvili wrote:
  I use lightdm with option display-setup-script:
 
  display-setup-script=/etc/fixscreen.sh
 
  cat /etc/fixscreen.sh:
  #!/bin/sh
  /usr/bin/xrandr --output DP-1 --rotate left
 
  execute xrandr in your x session to get the output names. 

Thankyou Alex, I had found a similar post on askubuntu (after I sent the
mail).

Along with [1], I have added the command to the bottom of
/etc/gdm3/Init/Default

which seems to have resolved the issue!


[1]
http://unix.stackexchange.com/questions/42611/how-can-i-run-a-script-that-starts-before-my-login-screen




signature.asc
Description: OpenPGP digital signature


Re:

2015-01-12 Thread P. J.
OI,

Essa frase da assinatura eu conheço...rs mas sempre esqueço de
mencionar que é da ATEIA...

Se vc fez essa instalação sem rede, é natural que isso ocorra, pois
essas configurações são feitas via protocolo dhcp. Vc pode usar o
dchlient ou algum gerenciador de rede

Em 12/01/15, Julio S. Peppejuliope...@gmail.com escreveu:
 Pessoal estou com problemas na instalação do debian 7.7, procedo instalando
 o debian sem rede, depois configuro a rede manualmente no etc network
 interfaces, mas o etc resolv.conf não existe.  Parece que a instalação não
 carregou algum pacote de resolução do Dns..

 Alguém pode ajudar? ???

 #
 A fé não da respostas, só impede as perguntas. ..
 #



-- 
|  .''`.   A fé não dá respostas. Só impede perguntas.
| : :'  :
| `. `'`
|   `-   Je vois tout


--
To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/cacnf0pgfo0xzr139qshyqxudo459o_act4obk6hcn3lanbb...@mail.gmail.com



Re: récupérer des données en RAID 1

2015-01-12 Thread Johnny B

Salut José,

- As-tu effectué ton installation avec RAID + LVM (si tu es en /dev/sda 
direct tu n'a surement pas mis de LVM mais c'est pour etre sur)
- En bootant en liveCD quel est le statut de /proc/partitions ou avec 
les commandes :


parted -l

cat /proc/mdstat (dans l'environnement liveCD cela ne donnera pas grand 
chose)


mdadm --examine --scan


Quel est le retour du boot defecteux à l'écran ?

Perso cela m'est deja arrivé, je m'en suis sorti mais j'avais du LVM 
donc il y a quelques subtilités





On 01/12/2015 01:50 PM, Jose CHARTERS wrote:

Bonjour,

Il y a plus d'un an, j'ai configuré un serveur en debian wheezy avec 
deux disques en raid 1. Chaque disque avait deux partitions, une pour 
le système et une pour /home.


Tout fonctionnait bien. Le serveur qui n'était pas utilisé 
régulièrement, était démarrer par réseau quand il était nécessaire et 
éteint automatiquement, via crontab, le soir. J'ai trouvé cela idiot 
mais exigence du responsable.


Et puis récemment, il n'a pas démarré. J'ai donc regardé de plus prêt. 
Un disque n'est plus reconnu, le premier /dev/sda. Il ne reste plus 
que le second mais la machine n'arrive pas à démarrer dessus. Je suis 
surpris car il me semble que justement le raid 1 permettait de palier 
à ce type de panne. J'en déduis que j'ai mal configurer grub.


Bien sûr, je veux récupérer mes données sur le disque qui reste. J'ai 
cherché via notre copain Google, comment récupérer des partitions raid 
1, mais je n'ai pas trouver beaucoup de solutions. J'ai même trouvé 
une page qui disait qu'il suffisait de faire un simple mount -t ext4 
/dev/sdxx /repertoire_montage. J'ai essayé et la réponse est : wrong 
fs type. Cela se semble clair.


J'ai essayé de bouter avec une liveCD knoppix pour retrouver les 
disques. Hélas, le montage des disques raid 1 ne se fait pas.


Je crains d'utiliser mdadm pour reconstruire le raid par peur 
d'effacer les données contenues sur les disques.


Quelqu'un peut il me rassurer ou me donner une procédure pour 
retrouver soit les partitions raid 1 ou les données des disques ?


Merci,

José



--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3c51f.7090...@gmail.com



Rafraichissement ecran

2015-01-12 Thread Diogene Laerce
Bonjour,

J'ai un problème de rafraîchissement avec mon écran LG Flatron L222WS
sur ma Wheezy (Nvidia GT 640).

Très souvent, trop à mon goût, l'écran ne rafraîchit pas du tout : la
page reste
identique après avoir changé de tab dans iceweasel, je dois redimensionner
la fenêtre pour forcer le rafraîchissement et le même chose arrive, avec
tout
types de logiciels.

Est-ce que quelqu'un a déjà eu ce genre de problème ou a une idée sur ce
qui
cause cela ?

Merci.

-- 
“One original thought is worth a thousand mindless quotings.”
“Le vrai n'est pas plus sûr que le probable.”

  Diogene Laerce





signature.asc
Description: OpenPGP digital signature


Re: Have I been hacked?

2015-01-12 Thread ken

On 01/12/2015 04:18 AM, Joe wrote:

On Mon, 12 Jan 2015 17:24:41 +0900
Joel Reesjoel.r...@gmail.com  wrote:



The only truly secure computer is the one that you wrote all the OS
and application code for.

*And*  the compiler(s) and the rest of the build toolchain...*and*  the
BIOS,*and*  the code for any network hardware you use...*and*  the
firmware of all of your hardware...

-- Joe


Good point, Joe.  I'd add that, because IC chips contain code too, we'd 
also need to build quite a lot of our own hardware.



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/54b3acca.3020...@mousecar.com



Re: Gnash - Debian Testing

2015-01-12 Thread Antonio Terceiro
On Sun, Jan 11, 2015 at 12:59:53PM -0200, Jack Jr wrote:
 O ruim é não termos Gnash no Testing.
 
 Uso mais o Wheezy, mas gosto de ter o Jessie para ir vendo as novidades e ter
 que habilitar contrib e non-free para usar Adobe eu não gosto (no Wheezy não
 tenho essa necessidade pois me viro bem com Gnash).
 
 Com o Gnash parado vamos ficar a ver navios até a implementação total do Html5
 ou nas mãos da Adobe?

o pacote parece estar abandonado. tem um bug crítico nele desde julho de
2014 que teria pelo menos uma forma fácil de consertar, mas ninguém se
deu ao trabalho, e ele ficou fora do jessie. provavelmente não tem muita
gente usando ...

eu não tenho nenhum tipo de flash instalado faz um tempo, e não sinto
muita falta. mas cada um sabe de si.

-- 
Antonio Terceiro terce...@debian.org


signature.asc
Description: Digital signature


Re: solicitud informacion debian

2015-01-12 Thread Fernando Miculan
Hola,

Otras opciones para virtualizar, PROXMOX, http://www.proxmox.com/
Esta basado en KVM... pero es solo para virtualizar.

Salutes!


El día 12 de enero de 2015, 8:16, Ricardo w...@guzman.com.ar escribió:

 El ene 11, 2015 9:17 p.m., alexlikerock-Gmail alexliker...@gmail.com
 escribió:



 Les escribo este email pues recien estoy comenzando a utilizar debian y
 queria saber cual distribucion me recomendarian para luego instalar en
 debian VMware.


 vmware  te pide  seriales  y licencias  y esas  basuras que no usamos en
 el mundo GNU/Linux

 para novatos te recomiendo virtualbox




 Hola

 Podes usar XenServer, que es una distro open source ya esta todo cocinado
 listo para usar no tenes que compilar nada de cosas raras, aquí :

 miniacademia.es

 tenes un buen machete para empezar.

 Eso si tenes que tener un pc dedicada y que soporte virtualización, los
 últimos Mothers y Micro ya soportan de movida.

 Saludos

 Ricardo



-- 
Fernando Miculan.-
FCM Sistemas
Tel. 15-5435862 / ID: 160*6915
ICQ: 6410724 / Skype: fcmsistemas
http://fcmsistemas.ddns.net
BBS Telnet: ferchobbs.ddns.net:23 | WebServer: http://ferchobbs.ddns.net


--
To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CA+qfd8cfSZQrBZ4G=whpyk-aykg+2l_jij4zgsrngzd-rhl...@mail.gmail.com



Re: solicitud informacion debian

2015-01-12 Thread Ricardo
El ene 11, 2015 9:17 p.m., alexlikerock-Gmail alexliker...@gmail.com
escribió:



 Les escribo este email pues recien estoy comenzando a utilizar debian y
 queria saber cual distribucion me recomendarian para luego instalar en
 debian VMware.


 vmware  te pide  seriales  y licencias  y esas  basuras que no usamos en
el mundo GNU/Linux

 para novatos te recomiendo virtualbox




Hola

Podes usar XenServer, que es una distro open source ya esta todo cocinado
listo para usar no tenes que compilar nada de cosas raras, aquí :

miniacademia.es

tenes un buen machete para empezar.

Eso si tenes que tener un pc dedicada y que soporte virtualización, los
últimos Mothers y Micro ya soportan de movida.

Saludos

Ricardo


Re: Choosing/Rotating screen for greeter

2015-01-12 Thread Alex Mestiashvili

On 01/12/2015 12:01 PM, Daniel Lintott wrote:

Hi,

I've recently switched to using one of my screens in vertical
orientation. This is fine from the desktop (after login), but currently
the greeter displays on the vertical screen but on it's side.

Is it possible to move the greeter to the other screen, which is
horizontal or rotate the greeter so it displays correctly?

Cheers

Daniel

PS: I'm not subscribed, so please CC me. Thanks



I use lightdm with option display-setup-script:

display-setup-script=/etc/fixscreen.sh

cat /etc/fixscreen.sh:
#!/bin/sh
/usr/bin/xrandr --output DP-1 --rotate left

execute xrandr in your x session to get the output names.




--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/54b3b3f8.5010...@biotec.tu-dresden.de



Re: [OT] Raid por hardware

2015-01-12 Thread sio2
El Sun, 11 de Jan de 2015, a las 04:29:13PM +, Camaleón dijo:

 Sí, era el que usaba para comprobar el estado del RAID, antes de
 descubrir que también existía la utilidad lsiutil. Lo único que indica
 es el modelo también. De hecho, ni siquiera da información del progreso
 de la sincronización: sólo de que los discos no están sincronizados y de
 que se está en proceso de sincronización. Pero del tanto por ciento,
 nada de nada.
 Pues no lo entiendo, la verdad. LSI no es precisamente un fabricante de 
 los considerados malillos, no tiene sentido que disponga de herramientas 
 para la gestión del raid tan pobres, la menos la suya (lsiutil) debería 
 ser más completa pero parece que no :-?

Quizás me has entendido mal: es mpt-status el que no devuelve el
porcentaje de la sincronización: lsiutil, sí. Lo que fui incapaz de
encontrar con lsiutil fue la identificación del disco.

 No, no... qué va, no vale. Recuerda que en el supuesto que estamos 
 tratando estás deshaciendo el raid 1: pinchas un disco únicamente en 
 una controladora de disco duro distinta. Lo normal en ese caso es que si 
 se tratara de un volumen de inicio no pudiera arrancar.
  La definición del RAID en sí puede estar almacenada en memoria flash y
  no hay que guardar metadatos del RAID en los discos duros.
 ¿En qué memoria flash?

En la de la propia controladora RAID, que tiene su propia BIOS actualizable
por lo que debe tener memoria flash.

 Los datos del RAID quedan en los discos duros y la 
 controladora RAID es la que se encarga de interpretarlos, de ahí que 
 mientras conectes los discos a una controladora igual no haya problemas 
 pero no sucede lo mismo si los discos se conectan a una controladora 
 distinta (sea RAID o no).

Pues he probado a conectar el otro disco a otro ordenador y arranca sin
problemas. Como uno lo conecté al servidor pero no a través de la
controladora y otro a otro ordenador sin ella, ambos discos han
arrancado y funciona su sistema perfectamente sin la controladora. Así
que los datos de definición del RAID deben de estar en la propia
controladora, porque el único lugar libre que se me ocurre en los discos
es el espacio que hay entre el MBR y el principio de la primera
partición. Pero ese espacio ya lo usa grub, al menos en parte. Además el
RAID se puede inicializar antes de tener hecha ninguna partición. He
mirado con fdisk la definición de las particiones del disco (que ya no
gestiona la controladora) y no hay nada raro en ellas. La primera
empieza en el sector 2048.
 
 El driver no lo estoy usando para nada ahora mismo. De hecho acabo de
 hacer unos rmmod para eliminar todos los drivers mtp* y los he
 descargado sin problemas.
 Pues la salida que enviaste de lspci decía que estaban en uso:

La salida dice que lo está usando la controladora, lo cual es normal
porque sigue pinchada y no la he deshabilitado. Como es software plug
and play, durante el arranque se detecta que hay una controladora y se
carga su driver para usarla.

Pero no estoy usando la controladora para acceder a disco porque el
disco lo pinché directamente a la placa base. De hecho, he descargado
los módulos mpt* y se hizo sin problemas. Si hago ahora un lspci -v
no sale la línea esa que indica que ese driver está usando el módulo.
En concreto esta que citas:

   Kernel driver in use: mptsas

  O incluso puedo pinchar unos de los discos en un ordenador
  completamente diferente y mirar a ver si en ese ordenador el sistema
  tiene los lapsus que tiene en el servidor.
 
 Bueno, con eso cuidado porque es posible que no inicie a la primera y que 
 (dependiendo de cómo tengas detectados los discos duros) tengas que hacer 
 cambios en el gestor de arranque o cargar el módulo del kernel que se 
 encargue de la controladora de los discos duros en el nuevo equipo.

Ha funcionado sin problemas. Como la placa exige tarjetas PCI de perfil
bajo, no he podido pincharle tarjetas de red para que haga exactamente
la labor del servidor y dejarlo un par de días, que sería lo suyo. Lo
que si hice fue actualizar paquetes, que es una tarea que el servidor
hace siempre anormalmente lenta, y la velocidad fue la normal. Si
pudiera hacer una prueba definitiva haciendo que se tire unos días
sustituyendo al servidor, podría descartar algún fallo de configuración,
y buscar entre el hardware del servidor el culpable. Pero tengo el
problema de la caja.

Mañana por la tarde haré algunas cosillas que tengo pendientes (chequear
la memoria y deshabilitar la controladora RAID en la BIOS si es
posible).

 Saludos,

Saludos.

-- 
   Et nulla stringo, et tutto 'l mondo abraccio
  --- Francisco Petrarca ---


-- 
To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150112121200.ga2...@cubo.casa



récupérer des données en RAID 1

2015-01-12 Thread Jose CHARTERS

Bonjour,

Il y a plus d'un an, j'ai configuré un serveur en debian wheezy avec 
deux disques en raid 1. Chaque disque avait deux partitions, une pour le 
système et une pour /home.


Tout fonctionnait bien. Le serveur qui n'était pas utilisé 
régulièrement, était démarrer par réseau quand il était nécessaire et 
éteint automatiquement, via crontab, le soir. J'ai trouvé cela idiot 
mais exigence du responsable.


Et puis récemment, il n'a pas démarré. J'ai donc regardé de plus prêt. 
Un disque n'est plus reconnu, le premier /dev/sda. Il ne reste plus que 
le second mais la machine n'arrive pas à démarrer dessus. Je suis 
surpris car il me semble que justement le raid 1 permettait de palier à 
ce type de panne. J'en déduis que j'ai mal configurer grub.


Bien sûr, je veux récupérer mes données sur le disque qui reste. J'ai 
cherché via notre copain Google, comment récupérer des partitions raid 
1, mais je n'ai pas trouver beaucoup de solutions. J'ai même trouvé une 
page qui disait qu'il suffisait de faire un simple mount -t ext4 
/dev/sdxx /repertoire_montage. J'ai essayé et la réponse est : wrong fs 
type. Cela se semble clair.


J'ai essayé de bouter avec une liveCD knoppix pour retrouver les 
disques. Hélas, le montage des disques raid 1 ne se fait pas.


Je crains d'utiliser mdadm pour reconstruire le raid par peur d'effacer 
les données contenues sur les disques.


Quelqu'un peut il me rassurer ou me donner une procédure pour retrouver 
soit les partitions raid 1 ou les données des disques ?


Merci,

José

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3c31e.2030...@free.fr



Re: A capability in the IMAP protocol.

2015-01-12 Thread peter
 IMAP allows retrieving a message, and IMAP allows deleting a message, so
 this can certainly be done. (As long as the server actually respects the
 delete command, rather than archiving on delete or something like that,
 but that would be server-specific.)
 ...
 I imagine that various other mail clients also provide sufficiently
 capable message-filtering or other scripting functionality. No direct
 support for this by IMAP itself should be necessary.

Thanks.  After some exporation and trial  error with the client it work nicely,

Thanks again,   ... Peter E.
 
-- 
123456789 123456789 123456789 123456789 123456789 123456789 123456789 12
Tel +1 360 639 0202   http://carnot.yi.org/   Bcc: peter at easthope. ca


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/E1YAh3R-0002iC-Va@dalton.invalid



Fwd: Re: récupérer des données en RAID 1

2015-01-12 Thread Jose CHARTERS


Désolé, j'ai répondu directement au lieu de répondre à la liste.

 Message transféré 
Sujet : Re: récupérer des données en RAID 1
Date :  Mon, 12 Jan 2015 17:18:43 +0100
De :Jose CHARTERS jose.chart...@free.fr
Pour :  BERTRAND Joël joel.bertr...@systella.fr



Le 12/01/2015 14:03, BERTRAND Joël a écrit :

Bonjour,

Si c'est du Raid1, tu dois pouvoir monter les disques à la main
comme s'il s'agissait de disques non raid.

Typiquement, si /dev/md0 est composé de /dev/sda1 et de /dev/sdb1,
tu peux monter /dev/sdb1 tout seul.

Bonjour,

J'ai bien essayé en bootant sur une knoppix de monter une des partitions :
mount -t ext4 /dev/sdxx /repertoire

J'obtiens :
wrong fs type, bad option, bad superblock ...

Et si je ne mets pas l'option -t , un simple : mount /dev/sdxx /repertoire

Le retour est :
unknown filesystem type 'linux_raid_member'


Quant à ton problème, il faut explicitement indiquer à grub qu'il
doit démarrer sur /dev/sdax ou sur /dev/sdbx en cas de défaillance et
installer le secteur de boot sur les deux disques.

Je n'ose pas encore écrire sur le disque pour l'instant.

Merci beaucoup.

José



--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3f6a8.5030...@free.fr



Fwd: Re: récupérer des données en RAID 1

2015-01-12 Thread Jose CHARTERS


Désolé, j'ai répondu directement au lieu de répondre à la liste.

 Message transféré 
Sujet : Re: récupérer des données en RAID 1
Date :  Mon, 12 Jan 2015 17:24:23 +0100
De :Jose CHARTERS jose.chart...@free.fr
Pour :  Jacky ML jacky...@omega-centauri.net



Le 12/01/2015 14:14, Jacky ML a écrit :

Bonjour

probablement le grub qui était sur le mbr du disque en rade et pas de
grub sur le second

essai http://www.supergrubdisk.org/
suivant la version du grub (surement grub2) il va chercher
automatiquement le fichier de conf pour boot dessus (ou lui spécifié
s'il trouve pas)
et ainsi démarré ton système, ensuite plus qu'a réparer.

Bonjour,

Merci de votre aide.

J'ai donc télécharger et graver un CD avec supergrubdisk.

Par contre, je n'ai pas réussie à booter sur aucun des modes proposés.
J'ai bien activer le raid et dans la reconnaissance des disque et
partitions, mes partitions raid sont bien retrouvées. Mais lorsque je
lui demande de chercher soit les OS, ou GRUB, il ne trouve rien.

Je n'ai pas réussie à faire booter la machine d'aucune façon.


sinon pour monté les partitions sous livecd, c'est surement sous
/dev/md0 et /dev/md1

Les partitions sont reconnues en tant que /dev/md/0 et /dev/md/1 mais je
n'arrive pas à les monter.

Cordialement,

José



--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3f6ba.5040...@free.fr



Fwd: Re: Have I been hacked?

2015-01-12 Thread iain

Forwarding to the list as I seemed to have managed to leave it off.
Apologies.




Knowledge is easier to duplicate than a physical item. You mentioned 
the

ATM attack.


Incorrect.  Knowledge cannot be duplicated if there is no basis for 
that

knowledge.

For instance, it was not possible for archeologists to decipher ancient
Egyption hieroglyphics before the discovery of the Rosetta Stone in 
1799

- before this, there was no basis for knowledge of the language.


Really? Are you honestly saying that because they did not know what the
hieroglyphics  meant, they were unable to copy them?


The same is true for passwords.  If you don't have a basis for 
knowledge

of the password's construction, it is impossible to duplicate that
password in any reasonable length of time.

For instance - let's see you duplicate the password to one of my
servers.  You won't be able to do it, because it's random and I don't
have it written down anywhere.  Even if you steal every one of my
computers, it won't help you at all, because it's not stored on any of
them.


What if I stand over your shoulder with a video camera and video you 
typing? Or

indeed install a keylogger on your machine?

You seem to be confusing duplicate with understand, or maybe you are 
just confusing me :)








How do you define security?


I don't need to. There is already a definition in English for this:

http://dictionary.cambridge.org/dictionary/british/security


I happen to agree with Joel here.  I don't want to know the dictionary
definition - I want to know YOUR definition of security.



Semantics is a boring argument. If you wish, tell me yours and I will 
tell you mine (oooh err missus ;)




snip


) my fingerprint (being something I am)


You sure it's not something you have?


Nope - I am pretty sure it is something I am, within the context of 
the

above statement.



A fingerprint is something you HAVE.  It is present on your body; it is
NOT something you are.  You can leave a fingerprint on a glass, for
instance, and it doesn't affect you at all.


Jerry - just cos you shout does not mean you are more RIGHT.

Again, within the context of the above statement it is. You may 
disagree. Fair enough.

snip




is more
secure than a password.


Unless someone chops your hand off to steal your BMW.


Again - implementation. Is the hand warm? Is there a pulse?



Not part of the fingerprint - but again, these can be duplicated - a
latex glove with the fingerprint etched into it, for instance.


May or may not work, depending on the implementation.






Also, an ssh-key (being something I have


Now there's an interesting assertion. It seems reasonable, if one
accepts certain implicit, arbitrary boundaries between the three
classes of tokens invoked above.

-- seems reasonable --


) is more
secure than a password.


And, yet, it is no more secure than the user account on the machine 
in

which it is stored.


OK sure - but we are discussing how to authenticate to an account 
right?




We are discussing how to authenticate an account on another machine.  
If

your key is on your machine, and I steal your machine, I can break the
passphrase your key uses.  It may take a while, but it will be a lot
faster than if that same passphrase were uses as a password to your 
server.


Is this due to being limited over the network for the number of tries? 
What if I delete
the key on the server when my machine is stolen? What if I generate new 
keys every week?






Something you have and something you are have to be digitised, to 
produce a
token that can be used to prove your identity to a computer system. 
That is

part of the implementation.



Everything you have mentioned is something I have.  I have 
knowledge

of a long, random password (not stored anywhere else).  I have a key
stored on my computer (protected by a password).  I have a 
fingerprint.




In your opinion. Not in mine (within the context of this discussion)


And the security of these three items are in DESCENDING order.


In your opinion. Again, shouting does not make you right.

Iain



Jerry



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: 
https://lists.debian.org/2711d91488cf15ad4c87653734c35...@thargoid.co.uk



Re: Changement de disque dur sur un ordinateur portable

2015-01-12 Thread Guy Roussin
1) Tu bootes sur clonezilla (live usb)
 - Tu choisis l'option copie de disque local à disque local
 - Tu branches ton nouveau disque de 500Go en usb.
 - Tu lances la copie du 250Go vers le 500Go

2) Tu mets le 500Go dans le portable pour vérifier que tout est ok.

3) Tu bootes sur un live usb contenant gparted. pour agrandir
tes partitions comme tu le souhaites.

Tu gardes ton 250Go comme sauvegarde ...


Le 12/01/2015 11:34, MERLIN Philippe a écrit :
 Bonjour,
 Voilà la problématique sur mon portable j'ai un disque dur de 250 Go, je 
 voudrais le remplacer par un disque dur de 500 Go. Sur ce disque dur j'ai les 
 systèmes MS Vista et Debian 8 Sid.
 Pour effectuer cette opération j'ai l'aide d'un disque dur Externe USB de 1 
 Go.
 J'envisage les étapes suivantes :
 1 avec Clonezilla Live  faire une sauvegarde du disque 250 Go sur une 
 partition du disque dur  externe, Clonezilla a l'avantage de vérifier sa 
 sauvegarde.
 2 Remplacer le disque 250 Go par le disque vierge 500 Go;
 3 Restauration à l'aide de Clonezilla Live.
 4 Tester le bon Fonctionnement de Sid et Vista.
 5 Utlisé Gparted live pour redimensionner les partitions car Clonezilla remet 
 à l'identique.
 Voilà les partitions actuels leur taille et l'ordre sur le disque ainsi que 
 l'évolution envisagée :
 primaire sda1 NTFS 48,83 Go boot (Vista)---70 Go
 étendue sda5  5 Go swap  =5 Go
 étendue sda6 ext3 169,17 Go (Debian Sid)---330 Go
 primaire sda2 fat32 1 Go HP_Tools  =   1 Go
 primaire sda3 ntfs  9 Go  HP_RECOVERY  =   9 Go
 N'ayant aucune expérience de cette opération je me tourne vers les experts de 
 la liste pour me dire si c'est faisable et si il y a un risque, ou si il y a 
 d'autres solutions plus facile, j'ai cherché sur Google et je n'ai rien 
 trouvé.
 Philippe Merlin


  


-- 
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3ed04.2020...@teledetection.fr



Fwd: Re: récupérer des données en RAID 1

2015-01-12 Thread Jose CHARTERS


Désolé, j'ai répondu directement au lieu de la liste.

 Message transféré 
Sujet : Re: récupérer des données en RAID 1
Date :  Mon, 12 Jan 2015 17:10:17 +0100
De :Jose CHARTERS jose.chart...@free.fr
Pour :  Johnny B frozzensh...@gmail.com



Le 12/01/2015 13:59, Johnny B a écrit :

Salut José,

Bonjour,

Merci pour vos réponses rapides.


- As-tu effectué ton installation avec RAID + LVM (si tu es en
/dev/sda direct tu n'a surement pas mis de LVM mais c'est pour etre sur)

Je n'ai fait que du raid 1 et pas du tout du LVM.

- En bootant en liveCD quel est le statut de /proc/partitions ou avec
les commandes :

Le /proc/partitions auquel j'ai accès est celui du liveCD. Je pense
qu'il ne présente pas d'intérêt.


parted -l

Model: COMPAQ BD07288277 (scsi)
Disk /dev/sda: 72.8GB
Sector size (logical/physical): 512B/512B
Partition Table: msdos

Number  Start   End SizeType File system  Flags
 1  1049kB  5000MB  4999MB  primary   raid
 2  5000MB  42.3GB  37.3GB  primary   raid


Warning: Unable to open /dev/sr0 read-write (Read-only file system).
/dev/sr0
has been opened read-only.
Error: /dev/sr0: unrecognised disk label

Error: /dev/zram0: unrecognised disk label

Warning: Unable to open /dev/cloop0 read-write (Read-only file system).
/dev/cloop0 has been opened read-only.
Error: /dev/cloop0: unrecognised disk label




cat /proc/mdstat (dans l'environnement liveCD cela ne donnera pas
grand chose)

mdadm --examine --scan

ARRAY /dev/md/0 metadata=1.2 UUID=db943bd0:fe4f0cf1:f88ba2f8:d0955017
name=sinpa
cs:0
ARRAY /dev/md/1 metadata=1.2 UUID=7212f58f:b7280277:3ee33742:f55ec247
name=sinpa
cs:1




Quel est le retour du boot defecteux à l'écran ?

Je n'ai pas de message d'erreur en retour. Une fois la reconnaissance
des disques SCSI faite, j'ai le curseur et c'est tout. Le dernier
message que j'ai c'est : Installation du BIOS SCSI réussie !

C'est tout et j'ai le curseur qui attend.

José



--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3f66f.8050...@free.fr



Re: Fwd: Re: Have I been hacked?

2015-01-12 Thread Ric Moore

On 01/12/2015 11:50 AM, Jerry Stuckle wrote:



You should learn from some REAL security experts, not the internet.


Like who? There are compromises all over the net, with consumer security 
files lying in the open like gutted bleeding fish. I don't think anyone 
is a REAL security expert, except the ones breaking in. Any advances 
we have now is result of closing the barn doors after the cow got out. I 
guess we owe the BlackHats that much. :/ Ric




--
My father, Victor Moore (Vic) used to say:
There are two Great Sins in the world...
..the Sin of Ignorance, and the Sin of Stupidity.
Only the former may be overcome. R.I.P. Dad.
Linux user# 44256


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/54b428aa.7060...@gmail.com



Re: Have I been hacked?

2015-01-12 Thread Brian
On Sun 11 Jan 2015 at 16:43:34 -0700, Bob Proulx wrote:

 Brian wrote:
  Bob Proulx wrote:
   Complete agreement.  I want to go further and say that a password that
   you can remember without needing to write it down is probably not a
   good password.
  
  Security of an ssh login is aimed at allowing access to some but denying
  it to others. An authorised user who cannot remember his 20 character
  password has experienced a security failure.
 
 Security is the part of the system designed to make it not only hard
 to use but the design goal is to prevent it from being used.

Seeing that my argument that enforcing (if it is possible) an
unmemorable password is not in the best interests of security doesn't
gain any tracton, let me try a different tack.

The password

  TwasBrilligAndTheSlithyToves

strikes me as a pretty good one for an ssh login. (I have capitalised
some letters for readability, not to add complexity). Personally, I find
it easy to remember and associate with ssh and my account. I cannot see
why it is not a good password for me.

The automated probes wouldn't get close to cracking it. The danger might
be a directed attack - from friends, associates, colleagues etc. If they
knew about my fixation on Lewis Carroll they might have a go at breaking
in.

Actually, it would be ok as a password for banking access too. There
surely cannot be a banking site which does not take action after a
number of failed logins. Maybe not using fail2ban, but a similar
approach which protects both parties.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/12012015193541.dea84e875...@desktop.copernicus.demon.co.uk



Re: debian/testing philosophie?

2015-01-12 Thread Dan Ritter
On Sat, Jan 10, 2015 at 02:09:02PM +0100, Hans wrote:
 To all these thoughts, what do you advice me to install? Better unstable than 
 testing? I know, youi will now say stable but stable is sometimes just too 
 old for a desktop (for example I had problems with the installation on 
 notebooks, as the rather old kernel from debian/stable did not support some 
 modern hardware network card or the wlan-card).

Have you checked wheezy-backports? Kernels up to 3.16 are
available there for use with wheezy systems.

-dsr-


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150112192417.gq30...@randomstring.org



Re:

2015-01-12 Thread Rodrigo Cunha
Tente criar os arquivos,alterando sempre que necessário. :
/etc/resolv.conf
domain localdomain
search localdomain
nameserver 192.168.0.2
nameserver 8.8.8.8
Veja o arquivo  /etc/nsswitch.conf e compare as entradas abaixo.

# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc Name Service Switch' for information about this file.

passwd: compat
group:  compat
shadow: compat

hosts:  files dns
networks:   files

protocols:  db files
services:   db files
ethers: db files
rpc:db files
netgroup:   nis

Basicamente são eles que correspondem ao serviço de dns no debian.
Como eu disse, se não tiver crie-os e coloque as permisões :
root@lamp:~# ls -l /etc/nsswitch.conf
-rw-r--r-- 1 root root 475 Aug 28  2006 /etc/nsswitch.conf
root@lamp:~#
root@lamp:~# ls -l /etc/resolv.conf
-rw-r--r-- 1 root root 162 Dec 29 13:10 /etc/resolv.conf
root@lamp:~#




Em 12 de janeiro de 2015 18:59, Rodrigo Cunha rodrigo.root...@gmail.com
escreveu:

 Julio, uma dica.
 Não esqueça de colocar o assunto no email.Isso, em listas ,facilita tanto
 a sua procura pelas respostas quanto o rastreamento por outros usuários.

 Em 12 de janeiro de 2015 16:20, Rodolfo rof20...@gmail.com escreveu:

 O resolv.conf realmente não existe, porém você pode criá-lo sem problemas.

 Em 12 de janeiro de 2015 14:14, Enio Climaco Sales Junior 
 eniocsjun...@gmail.com escreveu:

 Eu sempre faço assim: instalo o Debian com todos os cabos de rede
 desplugados, e quando ele pede para configurar a rede, deixo que o faça.
 Como não encontrará rede alguma, então ele faz a pergunta se devo tentar
 novamente ou deixar a rede sem configurar. Respondo para não configurar a
 rede agora. Terminando a instalação, reinicio o computador, conecto o cabo
 de rede e, voilà, a rede está configurada!!!
 Tente isso ;-)
 On 12-01-2015 10:53, P. J. wrote:

 OI,

 Essa frase da assinatura eu conheço...rs mas sempre esqueço de
 mencionar que é da ATEIA...

 Se vc fez essa instalação sem rede, é natural que isso ocorra, pois
 essas configurações são feitas via protocolo dhcp. Vc pode usar o
 dchlient ou algum gerenciador de rede

 Em 12/01/15, Julio S. Peppejuliope...@gmail.com escreveu:

 Pessoal estou com problemas na instalação do debian 7.7, procedo
 instalando
 o debian sem rede, depois configuro a rede manualmente no etc network
 interfaces, mas o etc resolv.conf não existe.  Parece que a instalação
 não
 carregou algum pacote de resolução do Dns..

 Alguém pode ajudar? ???

 #
 A fé não da respostas, só impede as perguntas. ..
 #




 --
 To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/54b40eef.8000...@gmail.com





 --
 Atenciosamente,
 Rodrigo da Silva Cunha




-- 
Atenciosamente,
Rodrigo da Silva Cunha


Re: Droits des fichiers de /var/log/cups

2015-01-12 Thread Olivier
Le 11 janvier 2015 12:36, Sylvain L. Sauvage
sylvain.l.sauv...@free.fr a écrit :
 Le dimanche 11 janvier 2015, 11:22:55 Michel a écrit :
 Le 11/01/2015 10:30, Bernardo a écrit :
  Bonjour,
 
  il suffit d'ajouter l'utilisateur au groupe lpadmin :
 
  adduser user lpadmin

 Voilà qui va sûrement intéresser Olivier

   Yep. Ils vont continuer à ne pas lire la question et à essayer
 tous les groupes qui existent…

   Pour revenir à la question : cupsd a évidemment les bons
 droits sur les fichiers de log puisque c’est lui qui les écrit.
 (Donc 0640 fonctionne.) En revanche :
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=757964
 (archivé).

Comme le bug n'est corrigé qu'avec la version 1.7.4 de cups, il ne me
reste qu'à passer à Jessie.
Je vais m'y préparer et rapporterait ici-même le résultat, dans quelques jours.

À suivre ...


 --
  Sylvain Sauvage

 --
 Lisez la FAQ de la liste avant de poser une question :
 http://wiki.debian.org/fr/FrenchLists

 Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
 vers debian-user-french-requ...@lists.debian.org
 En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
 Archive: https://lists.debian.org/2512679.pIb6RQ7PHU@earendil


--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: 
https://lists.debian.org/capet9jjbeh67ms23_ofxgczs2r-sonvthiwqgzroyqmp+jz...@mail.gmail.com



Re: Fwd: Re: Have I been hacked?

2015-01-12 Thread Iain M Conochie


On 12/01/15 16:50, Jerry Stuckle wrote:

On 1/12/2015 11:36 AM, i...@thargoid.co.uk wrote:

Forwarding to the list as I seemed to have managed to leave it off.
Apologies.



Knowledge is easier to duplicate than a physical item. You mentioned the
ATM attack.

Incorrect.  Knowledge cannot be duplicated if there is no basis for that
knowledge.

For instance, it was not possible for archeologists to decipher ancient
Egyption hieroglyphics before the discovery of the Rosetta Stone in 1799
- before this, there was no basis for knowledge of the language.

Really? Are you honestly saying that because they did not know what the
hieroglyphics  meant, they were unable to copy them?

They were unable to decipher them.  It has nothing to do with copying.


Since when is duplication not copying?

snip



I happen to agree with Joel here.  I don't want to know the dictionary
definition - I want to know YOUR definition of security.


Semantics is a boring argument. If you wish, tell me yours and I will
tell you mine (oooh err missus ;)


You were asked first.  How about putting up?
Not playing that game. Joel wanted a definition I gave a definition that 
apparently was not good enough for you. Tough!





snip


) my fingerprint (being something I am)

You sure it's not something you have?

Nope - I am pretty sure it is something I am, within the context of the
above statement.


A fingerprint is something you HAVE.  It is present on your body; it is
NOT something you are.  You can leave a fingerprint on a glass, for
instance, and it doesn't affect you at all.

Jerry - just cos you shout does not mean you are more RIGHT.


And repeating something ad nauseum doesn't make you right.

Very true.




Again, within the context of the above statement it is. You may
disagree. Fair enough.
snip


You need to learn the difference between is and has.  They are two
entirely different concepts, but you seem to have them mixed up.

Not really.

I can understand you not wanting to accept that, say, you iris scan is 
something you are. Surely your eye (and all it's unique properties) is 
something you have. I have 2 eyes. How can it be something I am?


From the point of view of authentication, this is something you are 
because it is unique to you. Get it now?



is more
secure than a password.

Unless someone chops your hand off to steal your BMW.

Again - implementation. Is the hand warm? Is there a pulse?


Not part of the fingerprint - but again, these can be duplicated - a
latex glove with the fingerprint etched into it, for instance.

May or may not work, depending on the implementation.


It has been proven to work.  That's one reason fingerprints alone are
not used for government security.


If you think I meant that fingerprints alone are more secure that a 
password, then of course this is not the case. As well, fingerprints are 
an _example_ of something you are. Oh, and we all know how secure 
governments are



Also, an ssh-key (being something I have

Now there's an interesting assertion. It seems reasonable, if one
accepts certain implicit, arbitrary boundaries between the three
classes of tokens invoked above.

-- seems reasonable --


) is more
secure than a password.

And, yet, it is no more secure than the user account on the machine in
which it is stored.

OK sure - but we are discussing how to authenticate to an account right?


We are discussing how to authenticate an account on another machine.  If
your key is on your machine, and I steal your machine, I can break the
passphrase your key uses.  It may take a while, but it will be a lot
faster than if that same passphrase were uses as a password to your
server.

Is this due to being limited over the network for the number of tries?
What if I delete
the key on the server when my machine is stolen? What if I generate new
keys every week?


It is so easy for me to prevent that it isn't even funny.  All I need to
do is copy the keyfile (or indeed, the entire disk) to another machine.
  In fact, that's what I'll probably do, anyway.  That way I can access
all of your data without even booting your machine.
Jolly good. The public key from which you have the private key and are 
hacking away on to brake the passphrase has been removed from all 
machines. It is now completely useless to you.


Of course, if your disk is encrypted, that becomes another problem.  But
then you have to use a password to decrypt the disk...

Or a fingerprint ;)



Something you have and something you are have to be digitised, to
produce a
token that can be used to prove your identity to a computer system.
That is
part of the implementation.


Everything you have mentioned is something I have.  I have knowledge
of a long, random password (not stored anywhere else).  I have a key
stored on my computer (protected by a password).  I have a fingerprint.


In your opinion. Not in mine (within the context of this discussion)


You seem to have difficulty in understanding have versus is.
Not 

Re: Have I been hacked?

2015-01-12 Thread Iain M Conochie


On 12/01/15 16:41, Jerry Stuckle wrote:

On 1/12/2015 10:10 AM, Chris Bannister wrote:

snip
Oh, come on!
http://www.thefreedictionary.com/context

It is all about *who* you are, or claim to be.

https://danielmiessler.com/blog/security-identification-authentication-and-authorization/


You have completely missed the point, Chris.

And don't believe every blog you read on the internet.

Pot, kettle, black

In fact this blog pretty much describes what I am talking about. Seems 
to be falling on deaf ears though


Jerry





--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/54b42f25.4000...@thargoid.co.uk



Re: Have I been hacked?

2015-01-12 Thread Ric Moore

On 01/12/2015 02:47 AM, Joel Rees wrote:

On Sun, Jan 11, 2015 at 4:37 AM, Ric Moore wayward4...@gmail.com wrote:

You all may wish to read this, from ars technica:
http://arstechnica.com/security/2013/05/how-crackers-make-minced-meat-out-of-your-passwords/1/

Very interesting. So interesting that I downloaded cudahashcat. I have 96
cuda cores, and it was running the sample program quickly as it tore into 6
char / 2 numeral paaswd combinations. :) Ric


Good for you.

That article did a much better job of talking about cracking
pswords/passcodes/passphrases than my ramble did.


p/s for the sake of $deity, please TRIM these posts!!


Heh.

Still trying to figure out how I pasted that post into the middle of
the post. I was dozing of, I'm sure that had something to do with it.


I humbly apologize to you as that rant was directed at ALL who let the 
thread be untrimmed, not you solely. :) Ric



--
My father, Victor Moore (Vic) used to say:
There are two Great Sins in the world...
..the Sin of Ignorance, and the Sin of Stupidity.
Only the former may be overcome. R.I.P. Dad.
Linux user# 44256


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/54b43230.2060...@gmail.com



Re:

2015-01-12 Thread Rodrigo Cunha
Julio, uma dica.
Não esqueça de colocar o assunto no email.Isso, em listas ,facilita tanto a
sua procura pelas respostas quanto o rastreamento por outros usuários.

Em 12 de janeiro de 2015 16:20, Rodolfo rof20...@gmail.com escreveu:

 O resolv.conf realmente não existe, porém você pode criá-lo sem problemas.

 Em 12 de janeiro de 2015 14:14, Enio Climaco Sales Junior 
 eniocsjun...@gmail.com escreveu:

 Eu sempre faço assim: instalo o Debian com todos os cabos de rede
 desplugados, e quando ele pede para configurar a rede, deixo que o faça.
 Como não encontrará rede alguma, então ele faz a pergunta se devo tentar
 novamente ou deixar a rede sem configurar. Respondo para não configurar a
 rede agora. Terminando a instalação, reinicio o computador, conecto o cabo
 de rede e, voilà, a rede está configurada!!!
 Tente isso ;-)
 On 12-01-2015 10:53, P. J. wrote:

 OI,

 Essa frase da assinatura eu conheço...rs mas sempre esqueço de
 mencionar que é da ATEIA...

 Se vc fez essa instalação sem rede, é natural que isso ocorra, pois
 essas configurações são feitas via protocolo dhcp. Vc pode usar o
 dchlient ou algum gerenciador de rede

 Em 12/01/15, Julio S. Peppejuliope...@gmail.com escreveu:

 Pessoal estou com problemas na instalação do debian 7.7, procedo
 instalando
 o debian sem rede, depois configuro a rede manualmente no etc network
 interfaces, mas o etc resolv.conf não existe.  Parece que a instalação
 não
 carregou algum pacote de resolução do Dns..

 Alguém pode ajudar? ???

 #
 A fé não da respostas, só impede as perguntas. ..
 #




 --
 To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/54b40eef.8000...@gmail.com





-- 
Atenciosamente,
Rodrigo da Silva Cunha


Re: Rafraichissement ecran

2015-01-12 Thread Diogene Laerce

On 01/12/2015 06:18 PM, Sylvain L. Sauvage wrote:
 Le lundi 12 janvier 2015, 11:28:43 Diogene Laerce a écrit :
 Bonjour,
 ’soir,

'r,

 J'ai un problème de rafraîchissement avec mon écran LG Flatron
 L222WS sur ma Wheezy (Nvidia GT 640).

 Très souvent, trop à mon goût, l'écran ne rafraîchit pas du
 tout : la page reste
 identique après avoir changé de tab dans iceweasel, je dois
 redimensionner la fenêtre pour forcer le rafraîchissement et
 le même chose arrive, avec tout
 types de logiciels.

 Est-ce que quelqu'un a déjà eu ce genre de problème ou a une
 idée sur ce qui
 cause cela ?
   Le problème peut venir des « effets » visuels 
 (« composition », OpenGL et Cie). Essaie de tripoter les 
 paramètres.

   Sinon, qu’est-ce que tu utilises ? Gnome, KDE, autre ?

Gnome 3.4.2, rien de spécial par dessus. Aucun effet visuel spécial a ma
connaissance : le basique du gnome non-classique, avec les bureaux
coulissants verticalement.

Jouer avec nvidia-settings ne semble pas faire grand chose ou est trop
à la marge pour pouvoir y voir un effet réel, je continue..

Est-ce qu'un vieil écran pourrait justifier un tel comportement ? Le mien
a une douzaine d'années ?

Merci. ;)

-- 
“One original thought is worth a thousand mindless quotings.”
“Le vrai n'est pas plus sûr que le probable.”

  Diogene Laerce




signature.asc
Description: OpenPGP digital signature


wireless usb adopter installation

2015-01-12 Thread zaheer ahmed
hi
i am using compaq 32bit desktop. i am new user of debian 5. i am using wifi
USB TL- WN727N its woks fine in xp but not working in debain5. i am new in
linux debian5 plz tell me all steps which i follow and easily install
driver. tell me installation process with complete commands.
thanx

regards
zaheer
zaheerahmad...@gmail.com


Configurar telacldo

2015-01-12 Thread Manoel Araujo
Ol, O teclado de meu notbook desconfigurou apos a conexao de um teclado usb.
O teclado usb funciona normalmente. Porem ao desconectar  o usb o teclado
do not nao funciona, mesmo reiniciando a maquina. Alguem pode me ajudar

Uso debian wheezy interface gnome


Re: unable to boot with systemd (works with sysvinit)

2015-01-12 Thread Selim T . Erdoğan
On Sat, Jan 10, 2015 at 12:33:36PM +0100, Johannes Schauer wrote:
 
 I'm not subscribed, so please keep me CC-ed.
 
 I'm unable to boot my laptop with systemd which worked before. I'm unable to
 tell the changes I made since the last time it worked because according to my
 uptime, the last time I rebooted was September last year.

I see you already have a bug report, so including it for the list:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758808

(Also for reference, your older bug report, where you first saw this issue, 
indicates that this might have arisen between systemd 204-14 and systemd 208-6:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=755581)

 The output of `journalctl -xb` in the systemd rescue console is here:
 
 https://mister-muffin.de/p/AabX.txt
 
 My system contains up-to-date package versions with Debian Jessie. This means
 I'm running systemd and udev version 215-8.
 
 Since the problem seems to be related to a failed fsck job, according to above
 log, here is my fstab (minus comment lines):

It looks to me like it's not fsck as much as not being able to access 
/boot, /home and swap.  If you want to check this, you can probably tell systemd
not to run fsck at boot.  (How to do this was the topic of some recent threads
on debian-user, but I didn't follow them so I can't help with that.)

 proc/proc   procdefaults0   0
 /dev/mapper/volumegroup-root/   ext4errors=remount-ro 0   
 1
 UUID=ac034ff5-d28a-4ad1-8bac-97d554395e3e /boot   ext2defaults
 0   2
 /dev/mapper/volumegroup-home /home   ext4defaults0   2
 /dev/mapper/volumegroup-swap noneswapsw  0   0
 /dev/scd0   /media/cdrom0   udf,iso9660 user,noauto   0  0
 cgroup  /sys/fs/cgroup  cgroup  defaults  0  0
 tmpfs   /tmptmpfs   nodev,nosuid,size=8G  0  0
 tmpfs   /runtmpfs   nodev,nosuid,size=8G  0  0
 
 I also booted my system into the initramfs busybox by passing break to the
 kernel command line and did an `fsck -f` on my root and home partitions and
 everything seems to be clean.
 
 Booting my laptop with sysvinit instead works fine, so my fstab should be
 correct.
 
 How can I further debug this problem? The journalctl output seems 
 inconclusive.

I wonder if the problem is with decryption (under systemd), which then leads 
to the timeout when accessing everything inside it?  Unfortunately, I don't 
know enough to suggest a good way to test this.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150112213808.GA11541@side



Re: Rafraichissement ecran

2015-01-12 Thread Diogene Laerce

On 01/12/2015 06:18 PM, Sylvain L. Sauvage wrote:
 Le lundi 12 janvier 2015, 11:28:43 Diogene Laerce a écrit :
 Bonjour,
 ’soir,

 J'ai un problème de rafraîchissement avec mon écran LG Flatron
 L222WS sur ma Wheezy (Nvidia GT 640).

 Très souvent, trop à mon goût, l'écran ne rafraîchit pas du
 tout : la page reste
 identique après avoir changé de tab dans iceweasel, je dois
 redimensionner la fenêtre pour forcer le rafraîchissement et
 le même chose arrive, avec tout
 types de logiciels.

 Est-ce que quelqu'un a déjà eu ce genre de problème ou a une
 idée sur ce qui
 cause cela ?
   Le problème peut venir des « effets » visuels 
 (« composition », OpenGL et Cie). Essaie de tripoter les 
 paramètres.

   Sinon, qu’est-ce que tu utilises ? Gnome, KDE, autre ?

Ca y est : cela semble résolu : il suffisait de faire confiance  la
carte pour tout
gérer, plutôt que les applications logicielles et tout est rentré dans
l'ordre.

Merci à toi ! Je n'avais pas eu à revenir dans les réglages depuis
longtemps,
c'est pour cela que ça ne m'est pas venu à l'idée : les avantages de
l'intelligence
collective..

Re-merci ! :)

-- 
“One original thought is worth a thousand mindless quotings.”
“Le vrai n'est pas plus sûr que le probable.”

  Diogene Laerce




signature.asc
Description: OpenPGP digital signature


Sortie de veille marche pas avec Thinkpad X230

2015-01-12 Thread kaliderus
Bonjour,

Depuis la mise à jour de sécurité d'aujourd'hui (je ne sais pas si
c'est lié au noyau), suite à une mise en veille (avec Fn + F4) lorsque
j'ouvre l'écran de mon X230, rien ne se passe (2 fois dans la
journée).
Impossible de le sortir de veille, je dois le rebooter violemment
électriquement, d'où un fsck et perte de données éventuelle.
J'avais déjà eu ce comportement précédemment, mais jamais aussi fréquemment.
Et je n'ai rien trouver, à priori, d'intéressant dans les log :-(

Si quelqu'un a une idée du pourquoi ? Là je sèche ...

Merci par avance.

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: 
https://lists.debian.org/caprkk3cakpkn1jspao9gbac3pogsuxjfxdscubnx0dfcbza...@mail.gmail.com



i386 MultiArch: Am I Right or Wrong?

2015-01-12 Thread Patrick Bartek
As I understand on an AMD64 system, when i386 multi-architecture is
enabled and apt-get update is run, nothing gets installed until one
installs some 386 app, etc., and then only those i386 dependencies
specific to, and necessary for THAT app are installed.  Nothing else.

So, for example, a 386 app XYZ has a single 386 library dependency of
abc.lib. ONLY that 386 lib will be installed.  Right?

This is different from my Fedora days where you got almost a complete
386 system installed beside your 64-bit one -- all libraries, configs,
etc. Only a few system things like the kernel didn't get mirrored.
Almost doubled the size of an install.  Don't want this to happen with
my 64-bit Wheezy set up.  So I'm checking first.

A lot to go through just to run one app that's only available in
32-bit.  But what can you do? 

B


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150112141723.69770...@debian7.boseck208.net



Re: Sortie de veille marche pas avec Thinkpad X230

2015-01-12 Thread Romain Casati


On 12/01/2015 22:58, kaliderus wrote:
 Bonjour,
 
 Depuis la mise à jour de sécurité d'aujourd'hui (je ne sais pas si
 c'est lié au noyau), suite à une mise en veille (avec Fn + F4) lorsque
 j'ouvre l'écran de mon X230, rien ne se passe (2 fois dans la
 journée).
 Impossible de le sortir de veille, je dois le rebooter violemment
 électriquement, d'où un fsck et perte de données éventuelle.
 J'avais déjà eu ce comportement précédemment, mais jamais aussi fréquemment.
 Et je n'ai rien trouver, à priori, d'intéressant dans les log :-(
 
 Si quelqu'un a une idée du pourquoi ? Là je sèche ...
 
 Merci par avance.
 


Bonjour,

Je possède aussi un Thinkpad X230 et suis dans le même cas : impossible
de sortir d'un suspend to ram. Il semble que cela vienne de la mise à
jour du noyau 3.2.65-1. En effet, on forçant l’installation de la
version précédente 3.2.63-2+deb7u2 comme ceci

sudo aptitude install linux-image-3.2.0-4-amd64=3.2.63-2+deb7u2

et après un redémarrage, la sorti de veille se passe sans problème. En
attendant une correction et en suivant le bug de près :

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774461

j'ai figé le paquet avec

sudo apt-mark hold linux-image-3.2.0-4-amd64

pour ne plus être embêté par la proposition de mise à jour. Une fois une
nouvelle version disponible, j'utiliserai

sudo apt-mark unhold linux-image-3.2.0-4-amd64

Au passage, si quelqu'un sait comment blacklister une version
spécifique d'un paquet, je suis intéressé.

Romain



signature.asc
Description: OpenPGP digital signature


Re: Speed up a WiFI interface ??

2015-01-12 Thread Selim T . Erdoğan
On Tue, Dec 30, 2014 at 07:14:19PM +0100, Bernhard Frühmesser wrote:
 Hello,
 
 For a friend i setup a small RAID-1 config using Wheezy on one of his old
 machines, just to backup his most important stuff. Unfortunately the
 location where the box is placed can not be reached via cable because of
 building conditions, so only Wireless is possible.
 
 I have installed package firmware-ralink for the network card and these
 modules are loaded after reboot:
 
 rt2800pci
 rt2800lib
 rt2x00pci
 
 After using wpa_passphrase and adding wlan0 to /etc/network/interfaces all
 works so far, the client get´s an ip from the dhcp server, can copy stuff
 and so on.
 
 The Problem is that it´s extremely slow.
 
 The WLAN-Router is setup to support 11bgn mixed mode, channel bandwith
 audo and max transfer rate 150Mbit/s.
 
 But when i check the client side with iwconfig i get this:
 
 wlan0 IEEE 802.11bgn  ESSID:My friends SSID
   Mode:Managed  Frequency:2.462 GHz  Access Point:MAC-Adress
   Bit Rate=58.5 Mb/s   Tx-Power=20 dBm
   Retry  long limit:7   RTS thr:off   Fragment thr:off
   Encryption key:off
   Power Management:off
   Link Quality=45/70  Signal level=-65 dBm
   Rx invalid nwid:0  Rx invalid crypt:0  Rx invalid frag:0
   Tx excessive retries:5788  Invalid misc:58   Missed beacon:0
 
 The wlan-card is supposed to support 150Mbit/s as well.
 
 I have tested and position the box right next to the wlan-Router but this
 doesn´t help much except the Link Quality is then 70/70.
 
 I have used iptraf to check for the data rates and the overall input rate
 for this interface is about 5,8 Mbit/s which is not even 5% of the max
 (theoretical) speed. I know that the max speed of a WLAN is never reached
 but 5,8 Mbit/s overall speed seems very slow to me - no?
 
 Anything i can do to speed this up?

It seems to me that the ralink cards are not great, and in some cases the 
rt2x00 drivers (at least when certain options are set/selected) are much 
slower than the other drivers, but I don't remember details.  You could 
try asking for help on the rt2x00-users list: us...@rt2x00.serialmonkey.com
http://rt2x00.serialmonkey.com/mailman/listinfo/users_rt2x00.serialmonkey.com

(It's not really a very active list, though you might look through the
archives to see if anyone reported problems/work-arounds/solutions with your
card.
http://rt2x00.serialmonkey.com/pipermail/users_rt2x00.serialmonkey.com/)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150112223802.GA12139@side



Re: Sortie de veille marche pas avec Thinkpad X230

2015-01-12 Thread kaliderus
Impec, c'est testé, je garde cette solution.
(Il fallait le remonter ce bug)
J'espère juste que la mise à jour de sécurité n'ai pas d'impact.

Merci bien.

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAPrKK3AsBO5bAJ5W3JNjW6QXs=1+nvgfce7e-1wruvnvkh8...@mail.gmail.com



Re: Have I been hacked?

2015-01-12 Thread Joel Rees
2015/01/13 5:45 Ric Moore wayward4...@gmail.com:

 On 01/12/2015 02:47 AM, Joel Rees wrote:

 On Sun, Jan 11, 2015 at 4:37 AM, Ric Moore wayward4...@gmail.com wrote:

 You all may wish to read this, from ars technica:

http://arstechnica.com/security/2013/05/how-crackers-make-minced-meat-out-of-your-passwords/1/

 Very interesting. So interesting that I downloaded cudahashcat. I have
96
 cuda cores, and it was running the sample program quickly as it tore
into 6
 char / 2 numeral paaswd combinations. :) Ric


 Good for you.

 That article did a much better job of talking about cracking
 pswords/passcodes/passphrases than my ramble did.

 p/s for the sake of $deity, please TRIM these posts!!


 Heh.

 Still trying to figure out how I pasted that post into the middle of
 the post. I was dozing of, I'm sure that had something to do with it.


 I humbly apologize to you as that rant was directed at ALL who let the
thread be untrimmed, not you solely. :) Ric


No problem. I was just taking the opportunity to attempt to apologize to
the list for failing to catch that before I posted it. I'm sure the attempt
at sleep-recursing didn't make the ramble more comprehensible.

Heh. Unfortunately, I'm not sure it makes it less comprehensible. :/

Security, with all that we conflate onto it, is a hard concept to pin down.

Joel Rees

Computer memory is just fancy paper,
CPUs just fancy pens.
All is a stream of text
flowing from the past into the future.


Re: VPN IPSec (Cisco vpnc)

2015-01-12 Thread Chris Davies
Hajder Rabiee hajd...@gmail.com wrote:
 Trying to connect to VPN at work but keep getting: vpnc: no response from
 target.

This is a typical response when the group name/password are incorrect.

IPSec ID group-id
IPSec secret group-psk

Chris


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/h1pbobxuhc@news.roaima.co.uk



Re: i386 MultiArch: Am I Right or Wrong?

2015-01-12 Thread The Wanderer
On 01/12/2015 at 05:17 PM, Patrick Bartek wrote:

 As I understand on an AMD64 system, when i386 multi-architecture is
 enabled and apt-get update is run, nothing gets installed until one
 installs some 386 app, etc., and then only those i386 dependencies
 specific to, and necessary for THAT app are installed.  Nothing else.
 
 So, for example, a 386 app XYZ has a single 386 library dependency of
 abc.lib. ONLY that 386 lib will be installed.  Right?

Correct.

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man. -- George Bernard Shaw



signature.asc
Description: OpenPGP digital signature


Several dracut problems (keymap, luks passphrase, resume from hibernate) in wheezy(-backports)

2015-01-12 Thread Aleksandar Dimitrov
Hi,

Bear with me, this is a long email. Ideally, if you're reading it, you're
involved or interested in dracut. If you don't think anybody will read it here,
please point me to the right place.

My setup is: / is unencrypted, on /sdd1. /sdd2 contains a luks volume, which in
turn contains an lvm volume with swap (and another partition.)

Lots of things happened, I'm going to try to summarize:

I'm using wheezy with wheezy backports. Installing kernel 3.16.0 (suspend and
hibernate don't work for me in 3.2.0) pulled in dracut.

Out of the box, dracut's initrd prompted me for a password, but the keyboard was
not active (generic logitech wired usb keyboard.) Thankfully, the 3.2.0 kernel
booted, without passphrase prompt (init system's cryptdisks-early.sh unlocked
the luks volume.)

Googling led to me including hid-generic in /etc/dracut.conf.

However, 3.2.0 doesn't know about hid-generic, and now dpkg-reconfigure dracut
won't create a new initrd for it. (which was good, since I had a working initrd
dracut refused to mess up, but it's still undesired behaviour in general.) But
it will generate a new initrd for 3.16.0.

With hid-generic and 3.16.0, the keyboard worked, and I could type in my pass
phrase. After typing it in, nothing happened (at all, even with kopts rdshell
rinitdebug and no quiet.) I could also type and see the input, and noticed the
keymap was the wrong one (I'm using Dvorak, this was ANSI.)

I got dracut to boot the 3.16.0 kernel by enabling host-only mode. Now dracut
complains when making initrds:

E: i18n_vars not set!  Please set up i18n_vars in  configuration file.
E: No KEYMAP.

Debian bugs #640101 [0] and #664678 [1] suggest this shouldn't happen. I don't
know how to remedy the situation. Now I know for sure that the wrong keymap will
be loaded, if any!

Regardless, dracut doesn't prompt me for a passphrase (root volume is NOT
encrypted) and /etc/init.d/cryptdisks-early.sh is run only after some initial
console initialization, so I could easily give my pass phrase and boot. At this
point, suspend works, but hibernate doesn't.

When I hibernate, the disk image gets written correctly (kernel log messages
tell me so.) On boot, dracut ignores the image, and just does a normal init.

A Fedora bug [2] led me to include resume=UUID=UUID-of-my-swap-lvm-partition
in kopts. Since I have debug messages on, I see dracut outputting a large-ish
amount of shell code to the console (this doesn't seem to get logged to a file.)
It ends in sleep 0.5. Predictably, it flickers every half a second as it is
being reprinted several times. It seems there is a max counter on this, as after
some iterations it just falls back into cold boot, which works and brings me to
my system's login screen. This [3] is probably the code in question.

To summarize my problems:

* Dracut requires hid-generic to recognize usb keyboard at initrd boot
* hid-generic is applied to all kernels on dpkg-reconfigure dracut, which will
  then fail on older kernels.
* Even with a recognized keyboard dracut doesn't seem to check the pass phrase
  correctly, or continue booting
* The keymap isn't getting set correctly
* host-only mode seems to be required to boot my particular setup at all
* host-only mode seems to interfere with Debian's custom way of setting the
  keymap (which doesn't seem to be working in the first place.)
* Out of the box, resume doesn't work
* Including the resume=UUID kopt does not work either

I'm happy to have a working system, but I'm unhappy with the amount of work it
took, and I'm also unhappy that hibernate is not working.

Should I report any/all of the above bullet points as bugs? How can I get dracut
to resume from hibernate on my setup?

Versions, as reported by apt-cache show:

dracut: 020-2
linux-image-3.16.0-0.bpo.4-amd64: 3.16.7-ckt2-1~bpo70+1
lvm2: 2.02.95-8
cryptsetup: 2:1.4.3-4

(all in wheezy or wheezy-backports)

I'm not using systemd. I've attached some relevant config and log
files. dracut.log is from last initrd creation, kern.log from last
boot. Configuration files are in the current (bootable with 3.16.0, but not
hibernateable state)

If any additional information should be provided, please do tell me. Thanks!

Regards,
Aleks

[0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=640101
[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=664678
[2] https://bugzilla.redhat.com/show_bug.cgi?id=781728
[3] 
https://github.com/haraldh/dracut/blob/bea41b898a93e4437640817964861bbb694b01e6/modules.d/99base/init.sh#L174
# If you change this file, run 'update-grub' afterwards to update
# /boot/grub/grub.cfg.
# For full documentation of the options in this file, see:
#   info -f grub -n 'Simple configuration'

GRUB_DEFAULT=0
GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR=`lsb_release -i -s 2 /dev/null || echo Debian`
GRUB_CMDLINE_LINUX_DEFAULT=rdshell rdinitdebug 
resume=UUID=8981a3b5-07d4-4ceb-a7b2-f4f5865970b1
GRUB_CMDLINE_LINUX=

# Uncomment to enable BadRAM filtering, modify to suit your needs
# This works with 

Re: Sortie de veille marche pas avec Thinkpad X230

2015-01-12 Thread Romain Casati


On 13/01/2015 00:16, kaliderus wrote:
 Impec, c'est testé, je garde cette solution.
 (Il fallait le remonter ce bug)
 J'espère juste que la mise à jour de sécurité n'ai pas d'impact.
 
 Merci bien.
 

Je n'ai pas pris le temps d'aller voir ce que la mise à jour contenait.
Si elle t'intéresses, tu peux toujours installer le fix proposé :

cd /tmp
wget
https://people.debian.org/~benh/packages/linux-image-3.2.0-4-amd64_3.2.65-1+deb7u1~test_amd64.deb
sudo dpkg -i linux-image-3.2.0-4-amd64_3.2.65-1+deb7u1~test_amd64.deb

Je ne l'ai pas testé moi-même mais il semble fonctionner sur un X230.

Romain



signature.asc
Description: OpenPGP digital signature


Wheezy: motion app error: Unable to find a compatible palette format

2015-01-12 Thread Ldten K
Hi,

Am trying to get my webcam to work with the motion app. The webcam is working 
fine with VLC, I can save the webcam's output to a file without any problems, 
but the motion app fails with the same webcam with Unable to find a compatible 
palette format error (see [1] below).

Some people seem to be able to resolve this error by preloading v4l1compat.so, 
tried that, the error message seems a bit different but the app still doesn't 
work for me (see [2] below).

Any ideas? Thanks


$ cat /proc/version 
Linux version 3.2.0-4-amd64 (debian-ker...@lists.debian.org) (gcc version 4.6.3 
(Debian 4.6.3-14) ) #1 SMP Debian 3.2.63-2+deb7u2

[1]
$ /usr/bin/motion -n
[0] Processing thread 0 - config file /etc/motion/motion.conf
[0] Motion 3.2.12 Started
[0] ffmpeg LIBAVCODEC_BUILD 3482368 LIBAVFORMAT_BUILD 3478785
[0] Thread 1 is from /etc/motion/motion.conf
[0] motion-httpd/3.2.12 running, accepting connections
[0] motion-httpd: waiting for data on port TCP 8080
[1] Thread 1 started
[1] cap.driver: uvcvideo
[1] cap.card: GENERAL - UVC 
[1] cap.bus_info: usb-:00:12.2-1
[1] cap.capabilities=0x0401
[1] - VIDEO_CAPTURE
[1] - STREAMING
[1] Config palette index 8 (YU12) doesn't work.
[1] Supported palettes:
[1] 0: MJPG (MJPEG)
[1] Selected palette MJPG
[1] VIDIOC_TRY_FMT failed for format MJPG: Input/output error
[1] Unable to find a compatible palette format.
[1] ioctl (VIDIOCGCAP): Invalid argument
[1] Could not fetch initial image from camera
[1] Motion continues using width and height from config file(s)
[1] Resizing pre_capture buffer to 1 items
[1] Started stream webcam server in port 8081
[1] Retrying until successful connection with camera
[1] cap.driver: uvcvideo
[1] cap.card: GENERAL - UVC 
[1] cap.bus_info: usb-:00:12.2-1
[1] cap.capabilities=0x0401
[1] - VIDEO_CAPTURE
[1] - STREAMING
[1] Config palette index 8 (YU12) doesn't work.
[1] Supported palettes:
[1] 0: MJPG (MJPEG)
[1] Selected palette MJPG
[1] VIDIOC_TRY_FMT failed for format MJPG: Input/output error
[1] Unable to find a compatible palette format.
[1] ioctl (VIDIOCGCAP): Invalid argument
[1] Retrying until successful connection with camera
[1] cap.driver: uvcvideo
[1] cap.card: GENERAL - UVC 
[1] cap.bus_info: usb-:00:12.2-1
[1] cap.capabilities=0x0401
[1] - VIDEO_CAPTURE
[1] - STREAMING
[1] Config palette index 8 (YU12) doesn't work.
[1] Supported palettes:
[1] 0: MJPG (MJPEG)
[1] Selected palette MJPG
[1] VIDIOC_TRY_FMT failed for format MJPG: Input/output error
[1] Unable to find a compatible palette format.
[1] ioctl (VIDIOCGCAP): Invalid argument
^C[1] Thread exiting
[0] httpd - Finishing
[0] httpd Closing
[0] httpd thread exit
[0] Motion terminating



[2]
$ LD_PRELOAD=/usr/lib/x86_64-linux-gnu/libv4l/v4l1compat.so /usr/bin/motion -n
[0] Processing thread 0 - config file /etc/motion/motion.conf
[0] Motion 3.2.12 Started
[0] ffmpeg LIBAVCODEC_BUILD 3482368 LIBAVFORMAT_BUILD 3478785
[0] Thread 1 is from /etc/motion/motion.conf
[1] Thread 1 started
[0] motion-httpd/3.2.12 running, accepting connections
[0] motion-httpd: waiting for data on port TCP 8080
[1] cap.driver: uvcvideo
[1] cap.card: GENERAL - UVC 
[1] cap.bus_info: usb-:00:12.2-1
[1] cap.capabilities=0x0501
[1] - VIDEO_CAPTURE
[1] - READWRITE
[1] - STREAMING
[1] Test palette YU12 (320x240)
libv4l2: error setting pixformat: Input/output error
[1] Error setting pixel format VIDIOC_S_FMT: Input/output error
[1] Config palette index 8 (YU12) doesn't work.
[1] Supported palettes:
[1] 0: MJPG (MJPEG)
[1] 1: RGB3 (RGB3)
[1] 2: BGR3 (BGR3)
[1] 3: YU12 (YU12)
[1] 4: YV12 (YV12)
[1] Selected palette YU12
[1] Test palette YU12 (320x240)
libv4l2: error setting pixformat: Input/output error
[1] Error setting pixel format VIDIOC_S_FMT: Input/output error
[1] VIDIOC_TRY_FMT failed for format YU12: Input/output error
[1] Unable to find a compatible palette format.
libv4l2: error setting pixformat: Input/output error
libv4l1: error setting pixformat: Input/output error
[1] Failed with YUV420P, trying YUV422 palette: Input/output error
[1] Failed with YUV422, trying YUYV palette: Invalid argument
[1] Failed with YUYV, trying RGB24 palette: Invalid argument
libv4l2: error setting pixformat: Input/output error
libv4l1: error setting pixformat: Input/output error
[1] Failed with RGB24, trying GREYSCALE palette: Input/output error
[1] Failed with all supported palettes - giving up: Invalid argument
[1] Could not fetch initial image from camera
[1] Motion continues using width and height from config file(s)
[1] Resizing pre_capture buffer to 1 items
[1] Started stream webcam server in port 8081
[1] Retrying until successful connection with camera
[1] cap.driver: uvcvideo
[1] cap.card: GENERAL - UVC 
[1] cap.bus_info: usb-:00:12.2-1
[1] cap.capabilities=0x0501
[1] - VIDEO_CAPTURE
[1] - READWRITE
[1] - STREAMING
[1] Test palette YU12 (320x240)
libv4l2: error setting pixformat: Input/output error
[1] Error setting pixel format VIDIOC_S_FMT: Input/output error
[1] Config 

Re: wireless USB adopter installation

2015-01-12 Thread Lisi Reisz
On Monday 12 January 2015 20:59:07 zaheer ahmed wrote:
 hi
 i am using compaq 32bit desktop. i am new user of debian 5. i am using wifi
 USB TL- WN727N its woks fine in xp but not working in debain5. i am new in
 linux debian5 plz tell me all steps which i follow and easily install
 driver. tell me installation process with complete commands.

Why are you using Debian 5?  Like XP it is not receiving security updates, and 
hasn't done for the last two years.

The current Debian Stable is 7.7 and Debian 8 will be released soon.

Lisi


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201501122333.06777.lisi.re...@gmail.com



Re: Fwd: Re: Have I been hacked?

2015-01-12 Thread Joel Rees
2015/01/13 5:04 Ric Moore wayward4...@gmail.com:

 On 01/12/2015 11:50 AM, Jerry Stuckle wrote:


 You should learn from some REAL security experts, not the internet.


 Like who? There are compromises all over the net, with consumer security
files lying in the open like gutted bleeding fish. I don't think anyone is
a REAL security expert, except the ones breaking in. Any advances we have
now is result of closing the barn doors after the cow got out. I guess we
owe the BlackHats that much. :/ Ric


Can I read you as saying that the black hats may be the closest thing to
security experts that we have?

I was thinking I agree.

But I also think we are letting them define security.

I keep forgetting that I don't like the definitions they seem to want to
impose on us.

Joel Rees


Re:

2015-01-12 Thread Julio S. Peppe
Obrigado a todos pelas dicas, consegui resolver o problema.
...

Em 12 de janeiro de 2015 10:10, Julio S. Peppe juliope...@gmail.com
escreveu:

 Pessoal estou com problemas na instalação do debian 7.7, procedo
 instalando o debian sem rede, depois configuro a rede manualmente no etc
 network interfaces, mas o etc resolv.conf não existe.  Parece que a
 instalação não carregou algum pacote de resolução do Dns..

 Alguém pode ajudar? ???

 #
 A fé não da respostas, só impede as perguntas. ..
 #




-- 

*Júlio S. Peppe.Programador*


Re: unable to boot with systemd (works with sysvinit)

2015-01-12 Thread Johannes Schauer
Hi,

Quoting Selim T. Erdoğan (2015-01-12 22:38:08)
 On Sat, Jan 10, 2015 at 12:33:36PM +0100, Johannes Schauer wrote:
  I'm unable to boot my laptop with systemd which worked before. I'm unable to
  tell the changes I made since the last time it worked because according to 
  my
  uptime, the last time I rebooted was September last year.
 
 I see you already have a bug report, so including it for the list:
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758808

this is the right bug report. Downgrading to 204-14 fixes the problem I
encountered in my first email.

My apologies for not having supplied that bug report in my initial email. I
honestly forgot that I already faced the same problem in August last year.

 It looks to me like it's not fsck as much as not being able to access /boot,
 /home and swap.  If you want to check this, you can probably tell systemd not
 to run fsck at boot.  (How to do this was the topic of some recent threads on
 debian-user, but I didn't follow them so I can't help with that.)

Searching the archives you might've meant to add fsck.mode=skip to my kernel
command line. I tried that but it didn't fix the problem.

 I wonder if the problem is with decryption (under systemd), which then leads
 to the timeout when accessing everything inside it?  Unfortunately, I don't
 know enough to suggest a good way to test this.

This is a possibility. Thank you for your help!

cheers, josch


signature.asc
Description: signature


Fwd: Re: récupérer des données en RAID 1

2015-01-12 Thread Jose CHARTERS


Désolé, j'ai répondu directement au lieu de répondre à la liste.

 Message transféré 
Sujet : Re: récupérer des données en RAID 1
Date :  Mon, 12 Jan 2015 17:27:53 +0100
De :Jose CHARTERS jose.chart...@free.fr
Pour :  Vincent Bernat ber...@debian.org



Le 12/01/2015 14:39, Vincent Bernat a écrit :

  ❦ 12 janvier 2015 14:03 +0100, BERTRAND Joël joel.bertr...@systella.fr :


Si c'est du Raid1, tu dois pouvoir monter les disques à la
main comme s'il s'agissait de disques non raid.

Typiquement, si /dev/md0 est composé de /dev/sda1 et de
/dev/sdb1, tu peux monter /dev/sdb1 tout seul.

Avec des métadata en 1.1 ou 1.2, le superblock est maintenant en début
de volume, on ne peut donc plus monter une partition comme si de rien
n'était.

En wheezy, par défaut, c'est du 1.2 qui est créé.

Aïe, autrement dit, avec ces versions, il est normal que je ne puisse
pas monter avec un simple mount.

José



--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3f6df.7010...@free.fr



Fwd: Re: récupérer des données en RAID 1

2015-01-12 Thread Jose CHARTERS


Désolé, j'ai répondu directement au lieu de répondre à la liste.

 Message transféré 
Sujet : Re: récupérer des données en RAID 1
Date :  Mon, 12 Jan 2015 17:26:42 +0100
De :Jose CHARTERS jose.chart...@free.fr
Pour :  Jean-Michel OLTRA jm.oltra.antis...@espinasse.net



Le 12/01/2015 14:20, Jean-Michel OLTRA a écrit :

 Bonjour,


Le lundi 12 janvier 2015, Jose CHARTERS a écrit...



Et puis récemment, il n'a pas démarré. J'ai donc regardé de plus prêt. Un
disque n'est plus reconnu, le premier /dev/sda. Il ne reste plus que le
second mais la machine n'arrive pas à démarrer dessus. Je suis surpris car
il me semble que justement le raid 1 permettait de palier à ce type de
panne. J'en déduis que j'ai mal configurer grub.

La partie Rescue des cd Debian d'installation gère très bien le RAID.
Systemrescuecd également. Je parle d'expérience pour ces 2 systèmes de
récupération.

Tu peux marquer ton disque malade comme faulty, et le sortir du raid

mdadm /dev/mdX --fail /dev/sdY
mdadm /dev/mdX --remove /dev/sdY

Bonjour,

Merci mais pour cela, il faudrait que la machine démarre ce qui n'est
pas le cas. Je cherche justement à la faire fonctionner.


Tu peux ré-installer grub sur le bon disque qui te reste, avec :

grub-install /dev/sdX

Merci pour cette info. Je la garde car pour l'instant, j'évite d'écrire
sur le disque.

José



--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3f6ce.6010...@free.fr



Re:

2015-01-12 Thread Enio Climaco Sales Junior
Eu sempre faço assim: instalo o Debian com todos os cabos de rede 
desplugados, e quando ele pede para configurar a rede, deixo que o faça. 
Como não encontrará rede alguma, então ele faz a pergunta se devo tentar 
novamente ou deixar a rede sem configurar. Respondo para não configurar 
a rede agora. Terminando a instalação, reinicio o computador, conecto o 
cabo de rede e, voilà, a rede está configurada!!!

Tente isso ;-)
On 12-01-2015 10:53, P. J. wrote:

OI,

Essa frase da assinatura eu conheço...rs mas sempre esqueço de
mencionar que é da ATEIA...

Se vc fez essa instalação sem rede, é natural que isso ocorra, pois
essas configurações são feitas via protocolo dhcp. Vc pode usar o
dchlient ou algum gerenciador de rede

Em 12/01/15, Julio S. Peppejuliope...@gmail.com escreveu:

Pessoal estou com problemas na instalação do debian 7.7, procedo instalando
o debian sem rede, depois configuro a rede manualmente no etc network
interfaces, mas o etc resolv.conf não existe.  Parece que a instalação não
carregou algum pacote de resolução do Dns..

Alguém pode ajudar? ???

#
A fé não da respostas, só impede as perguntas. ..
#






--
To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54b40eef.8000...@gmail.com



Re:

2015-01-12 Thread Rodolfo
O resolv.conf realmente não existe, porém você pode criá-lo sem problemas.

Em 12 de janeiro de 2015 14:14, Enio Climaco Sales Junior 
eniocsjun...@gmail.com escreveu:

 Eu sempre faço assim: instalo o Debian com todos os cabos de rede
 desplugados, e quando ele pede para configurar a rede, deixo que o faça.
 Como não encontrará rede alguma, então ele faz a pergunta se devo tentar
 novamente ou deixar a rede sem configurar. Respondo para não configurar a
 rede agora. Terminando a instalação, reinicio o computador, conecto o cabo
 de rede e, voilà, a rede está configurada!!!
 Tente isso ;-)
 On 12-01-2015 10:53, P. J. wrote:

 OI,

 Essa frase da assinatura eu conheço...rs mas sempre esqueço de
 mencionar que é da ATEIA...

 Se vc fez essa instalação sem rede, é natural que isso ocorra, pois
 essas configurações são feitas via protocolo dhcp. Vc pode usar o
 dchlient ou algum gerenciador de rede

 Em 12/01/15, Julio S. Peppejuliope...@gmail.com escreveu:

 Pessoal estou com problemas na instalação do debian 7.7, procedo
 instalando
 o debian sem rede, depois configuro a rede manualmente no etc network
 interfaces, mas o etc resolv.conf não existe.  Parece que a instalação
 não
 carregou algum pacote de resolução do Dns..

 Alguém pode ajudar? ???

 #
 A fé não da respostas, só impede as perguntas. ..
 #




 --
 To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/54b40eef.8000...@gmail.com




Re: récupérer des données en RAID 1

2015-01-12 Thread Johnny B

Salut José,

Le plus simple est de booter en modifiant la ligne de grub au démarrage 
en tapant e tu vas pouvoir éditer le device sur lequel tu boot puis 
F10 pour déclencher le boot


C'est la ligne linux /boot/vmlinuzXXX-amd64 root=/dev/md0 ou /dev/md1

Tu vas donc pouvoir tester ton boot sur /dev/md0 ou /dev/md1

C'est de cette manière que j'ai récupéré mon RAID/LVM dont le grub était 
corrompu




On 01/12/2015 06:10 PM, Jean-Michel OLTRA wrote:

 Bonjour,


Le lundi 12 janvier 2015, Jose CHARTERS a écrit...



Tu peux marquer ton disque malade comme faulty, et le sortir du raid

mdadm /dev/mdX --fail /dev/sdY
mdadm /dev/mdX --remove /dev/sdY

Merci mais pour cela, il faudrait que la machine démarre ce qui n'est pas le
cas. Je cherche justement à la faire fonctionner.

Tu peux le faire à partir d'un cd de secours, et même ré-écrire le
/etc/mdadm/mdadm.conf



--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b401f8.6070...@gmail.com



Re: A capability in the IMAP protocol.

2015-01-12 Thread peter
*   From: Andrei POPESCU em concurrently.  Someone might 
work with a smartphone and a desktop system concurrently for 
example.  IMAP is useful there.

In a simpler but similar case, an mbox file can be on a flash 
storage card which is shifted from one machine to another not
too frequently.  Then POP3 suffices to retrieve messages to the 
mbox.  If a client system has only IMAP, the question of simulating 
POP3 arises.

Regards,... Peter E.



-- 
123456789 123456789 123456789 123456789 123456789 123456789 123456789 12
Tel +1 360 639 0202   http://carnot.yi.org/   Bcc: peter at easthope. ca


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/E1YAhXd-0002id-7i@dalton.invalid



Re: Fwd: Re: récupérer des données en RAID 1

2015-01-12 Thread Jacky ML

je n'ai utilisé l'outil qu'une fois pour une lenny en raid 1 logiciel.

dans Super Grub2 Disk faire everything + la il va charger tous les 
modules dont le raid pour grub et lancer la recherche des fichiers de conf.

est ce qu'il t'affiche un système trouvé à ce niveau?

Jacky

Le 12/01/15 17:30, Jose CHARTERS a écrit :


Désolé, j'ai répondu directement au lieu de répondre à la liste.

 Message transféré 
Sujet : Re: récupérer des données en RAID 1
Date : Mon, 12 Jan 2015 17:24:23 +0100
De : Jose CHARTERS jose.chart...@free.fr
Pour : Jacky ML jacky...@omega-centauri.net



Le 12/01/2015 14:14, Jacky ML a écrit :

Bonjour

probablement le grub qui était sur le mbr du disque en rade et pas de
grub sur le second

essai http://www.supergrubdisk.org/
suivant la version du grub (surement grub2) il va chercher
automatiquement le fichier de conf pour boot dessus (ou lui spécifié
s'il trouve pas)
et ainsi démarré ton système, ensuite plus qu'a réparer.

Bonjour,

Merci de votre aide.

J'ai donc télécharger et graver un CD avec supergrubdisk.

Par contre, je n'ai pas réussie à booter sur aucun des modes proposés.
J'ai bien activer le raid et dans la reconnaissance des disque et
partitions, mes partitions raid sont bien retrouvées. Mais lorsque je
lui demande de chercher soit les OS, ou GRUB, il ne trouve rien.

Je n'ai pas réussie à faire booter la machine d'aucune façon.


sinon pour monté les partitions sous livecd, c'est surement sous
/dev/md0 et /dev/md1

Les partitions sont reconnues en tant que /dev/md/0 et /dev/md/1 mais je
n'arrive pas à les monter.

Cordialement,

José





--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3fadb.4070...@omega-centauri.net



Re: Have I been hacked?

2015-01-12 Thread Jerry Stuckle
On 1/12/2015 10:10 AM, Chris Bannister wrote:
 On Mon, Jan 12, 2015 at 09:19:58AM -0500, Jerry Stuckle wrote:
 On 1/12/2015 8:05 AM, i...@thargoid.co.uk wrote:

 Nope - I am pretty sure it is something I am, within the context of the
 above statement.


 A fingerprint is something you HAVE.  It is present on your body; it is
 NOT something you are.  You can leave a fingerprint on a glass, for
 instance, and it doesn't affect you at all.
 
 Oh, come on! 
 http://www.thefreedictionary.com/context
 
 It is all about *who* you are, or claim to be.
 
 https://danielmiessler.com/blog/security-identification-authentication-and-authorization/
 

You have completely missed the point, Chris.

And don't believe every blog you read on the internet.

Jerry


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3f931.8050...@gmail.com



Re: Fwd: Re: récupérer des données en RAID 1

2015-01-12 Thread Jose CHARTERS

Le 12/01/2015 17:48, Jacky ML a écrit :

je n'ai utilisé l'outil qu'une fois pour une lenny en raid 1 logiciel.

dans Super Grub2 Disk faire everything + la il va charger tous les 
modules dont le raid pour grub et lancer la recherche des fichiers de 
conf.

est ce qu'il t'affiche un système trouvé à ce niveau?
C'est bien ce que j'ai fait mais il n'a trouvé aucun fichier. Je n'ai 
rien vu d'afficher. Je n'avais que file not found.


José

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b3ffea.8000...@free.fr



Re: Fwd: Re: Have I been hacked?

2015-01-12 Thread Jerry Stuckle
On 1/12/2015 11:36 AM, i...@thargoid.co.uk wrote:
 Forwarding to the list as I seemed to have managed to leave it off.
 Apologies.
 
 

 Knowledge is easier to duplicate than a physical item. You mentioned the
 ATM attack.

 Incorrect.  Knowledge cannot be duplicated if there is no basis for that
 knowledge.

 For instance, it was not possible for archeologists to decipher ancient
 Egyption hieroglyphics before the discovery of the Rosetta Stone in 1799
 - before this, there was no basis for knowledge of the language.
 
 Really? Are you honestly saying that because they did not know what the
 hieroglyphics  meant, they were unable to copy them?

They were unable to decipher them.  It has nothing to do with copying.


 The same is true for passwords.  If you don't have a basis for knowledge
 of the password's construction, it is impossible to duplicate that
 password in any reasonable length of time.

 For instance - let's see you duplicate the password to one of my
 servers.  You won't be able to do it, because it's random and I don't
 have it written down anywhere.  Even if you steal every one of my
 computers, it won't help you at all, because it's not stored on any of
 them.
 
 What if I stand over your shoulder with a video camera and video you
 typing? Or

I would shoot you.

 indeed install a keylogger on your machine?


You'd first have to compromise my machine.  And that you can't do.


 You seem to be confusing duplicate with understand, or maybe you are
 just confusing me :)
 



 How do you define security?

 I don't need to. There is already a definition in English for this:

 http://dictionary.cambridge.org/dictionary/british/security

 I happen to agree with Joel here.  I don't want to know the dictionary
 definition - I want to know YOUR definition of security.

 
 Semantics is a boring argument. If you wish, tell me yours and I will
 tell you mine (oooh err missus ;)
 

You were asked first.  How about putting up?

 
 snip

 ) my fingerprint (being something I am)

 You sure it's not something you have?

 Nope - I am pretty sure it is something I am, within the context of the
 above statement.


 A fingerprint is something you HAVE.  It is present on your body; it is
 NOT something you are.  You can leave a fingerprint on a glass, for
 instance, and it doesn't affect you at all.
 
 Jerry - just cos you shout does not mean you are more RIGHT.
 

And repeating something ad nauseum doesn't make you right.

 Again, within the context of the above statement it is. You may
 disagree. Fair enough.
 snip
 

You need to learn the difference between is and has.  They are two
entirely different concepts, but you seem to have them mixed up.


 is more
 secure than a password.

 Unless someone chops your hand off to steal your BMW.

 Again - implementation. Is the hand warm? Is there a pulse?


 Not part of the fingerprint - but again, these can be duplicated - a
 latex glove with the fingerprint etched into it, for instance.
 
 May or may not work, depending on the implementation.
 

It has been proven to work.  That's one reason fingerprints alone are
not used for government security.



 Also, an ssh-key (being something I have

 Now there's an interesting assertion. It seems reasonable, if one
 accepts certain implicit, arbitrary boundaries between the three
 classes of tokens invoked above.

 -- seems reasonable --

 ) is more
 secure than a password.

 And, yet, it is no more secure than the user account on the machine in
 which it is stored.

 OK sure - but we are discussing how to authenticate to an account right?


 We are discussing how to authenticate an account on another machine.  If
 your key is on your machine, and I steal your machine, I can break the
 passphrase your key uses.  It may take a while, but it will be a lot
 faster than if that same passphrase were uses as a password to your
 server.
 
 Is this due to being limited over the network for the number of tries?
 What if I delete
 the key on the server when my machine is stolen? What if I generate new
 keys every week?
 

It is so easy for me to prevent that it isn't even funny.  All I need to
do is copy the keyfile (or indeed, the entire disk) to another machine.
 In fact, that's what I'll probably do, anyway.  That way I can access
all of your data without even booting your machine.

Of course, if your disk is encrypted, that becomes another problem.  But
then you have to use a password to decrypt the disk...



 Something you have and something you are have to be digitised, to
 produce a
 token that can be used to prove your identity to a computer system.
 That is
 part of the implementation.


 Everything you have mentioned is something I have.  I have knowledge
 of a long, random password (not stored anywhere else).  I have a key
 stored on my computer (protected by a password).  I have a fingerprint.

 
 In your opinion. Not in mine (within the context of this discussion)
 

You seem to have difficulty in understanding have 

Re: récupérer des données en RAID 1

2015-01-12 Thread Jean-Michel OLTRA

Bonjour,


Le lundi 12 janvier 2015, Jose CHARTERS a écrit...


 Tu peux marquer ton disque malade comme faulty, et le sortir du raid
 
 mdadm /dev/mdX --fail /dev/sdY
 mdadm /dev/mdX --remove /dev/sdY

 Merci mais pour cela, il faudrait que la machine démarre ce qui n'est pas le
 cas. Je cherche justement à la faire fonctionner.

Tu peux le faire à partir d'un cd de secours, et même ré-écrire le
/etc/mdadm/mdadm.conf

-- 
jm

-- 
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/20150112171030.GF2841@espinasse



Re: Rafraichissement ecran

2015-01-12 Thread Sylvain L. Sauvage
Le lundi 12 janvier 2015, 11:28:43 Diogene Laerce a écrit :
 Bonjour,

’soir,

 J'ai un problème de rafraîchissement avec mon écran LG Flatron
 L222WS sur ma Wheezy (Nvidia GT 640).
 
 Très souvent, trop à mon goût, l'écran ne rafraîchit pas du
 tout : la page reste
 identique après avoir changé de tab dans iceweasel, je dois
 redimensionner la fenêtre pour forcer le rafraîchissement et
 le même chose arrive, avec tout
 types de logiciels.
 
 Est-ce que quelqu'un a déjà eu ce genre de problème ou a une
 idée sur ce qui
 cause cela ?

  Le problème peut venir des « effets » visuels 
(« composition », OpenGL et Cie). Essaie de tripoter les 
paramètres.

  Sinon, qu’est-ce que tu utilises ? Gnome, KDE, autre ?

-- 
 Sylvain Sauvage

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/7289726.DVSpHznNRI@earendil



Re: QoS

2015-01-12 Thread Samuel

Samuel a écrit :

- Je ne vois pas la restauration de l'état en début de script :
iptables -t mangle -A PREROUTING -j CONNMARK --restore-mark

- Je ne vois pas non plus la sauvegarde en sortie de chaine :
iptables -t mangle -A POSTROUTING -o $DEV_SORTIE -m state --state NEW -j
CONNMARK --save-mark


En fait c'est plus lié à la sauvegarde des états pour la gestion des 
doubles routes, mais qui sont gérées par ton proxy.


Pas d'autre idée.

Bonne recherche.

Samuel.

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b4136c.60...@ingescom.com



Re: Clients identiek houden

2015-01-12 Thread Paul van der Vlis
Hallo,

Bedankt voor de antwoorden. Ik zie het, jullie raden me een config
management systeem aan.

Maar waar ik eigenlijk vooral nieuwsgierig naar ben is waarom rsyncen
van zo'n client geen goed idee is. Het lijkt me zo'n simpele en voor de
hand liggende oplossing dat ik vast niet de eerste ben die er op is gekomen.

Het nadeel van een config management systeem lijkt me dat je alleen
dingen wijzigt en de rest laat staan. Het lijkt me dat er in de loop der
tijd toch wat verschillen ontstaan tussen de systemen, omdat er iemand
vergeet iets op te ruimen e.d.

Bij rsync doe je het omgekeerde, je maakt alles helemaal gelijk, met een
paar uitzonderingen. Dat lijkt me in principe beter (maar niet overal
bruikbaar).

Dus nog een keer de vraag: waarom is het geen goed idee om een client te
beheren door middel van een rsync?

Met vriendelijke groet,
Paul van der Vlis.


-- 
Paul van der Vlis Linux systeembeheer, Groningen
http://www.vandervlis.nl


-- 
To UNSUBSCRIBE, email to debian-user-dutch-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54b41859.8010...@vandervlis.nl