Re: laptop protection in an office network

2015-08-30 Thread Chris Bannister
On Sat, Aug 29, 2015 at 06:39:46PM -0500, rlhar...@oplink.net wrote:
 
 At this point, I think that I should make a fresh installation, keeping in
 mind the comments which you and others have made.

And configure everything from scratch again? That seems a bit extreme.
Isn't it easier just to remove the software you don't want?

If you have all the security updates applied, what are you worried
about? 

-- 
If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the 
oppressing. --- Malcolm X



Re: Another system management tool to disappear.

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sat, Aug 29, 2015 at 08:30:58PM -0400, Gene Heskett wrote:

[...]

 Installed it, suid problems:
 
 gene@coyote:~$ busybox su amanda
 su: must be suid to work properly
 gene@coyote:~$ busybox su -
 su: must be suid to work properly
 
 Is it still finding the system su first?

No: It's telling you that it can't honour your request unless the
executable has the setuid bit set. This is the magic by which all
of this works, anyway.

This is easy to achieve (chmod u+s /bin/busybox). BUT you should
stop for a minute and think of the consequences. If busybox has
a vulnerability, then anyone capable of invoking it can achieve
root. Pick your poison :-)

- -- t
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlXiwY4ACgkQBcgs9XrR2kaV2ACcDOWyczzXhZLvCcvw6JroncI6
6Z4An3Nt+HgAMHmRjuccBtK7Z3VLguwC
=+3BQ
-END PGP SIGNATURE-



Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sun, Aug 30, 2015 at 09:25:23AM +0100, Joe wrote:
 On Sun, 30 Aug 2015 09:47:56 +0200
 to...@tuxteam.de wrote:
 
  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1
  
  On Sat, Aug 29, 2015 at 11:28:10PM +0100, Brian wrote:
 
 
   
   Its only listening on localhost. What's the problem?
  
  You're right, I missed that.
  
 
 Which is why I suggested nmap. When you've made absolutely sure you've
 read the netstat listing properly, you then need to look at the
 application configuration and the tcpwrappers files to see what other
 restrictions may be applied to connections, and then check the
 iptables rules to see what's there.
[snip]

Agreed. I wouldn't dismiss nmap -- on the contrary, it's *the* tool in
a security toolbox. Use both. Each has its strengths (netstat tells you
which process is behin a port, which is handy too).

- -- t
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlXivv0ACgkQBcgs9XrR2kaZjACfd8Ci457e/lVIIrcXCBhQHw3A
Q5wAnj2kVo4+s4vgLLtlzoFwElSk7FOR
=cO5D
-END PGP SIGNATURE-



Re: something at init is taking about 31s to finish

2015-08-30 Thread Sven Hartge
bri...@aracnet.com wrote:
 On Sun, 30 Aug 2015 04:25:36 +0200 Sven Hartge s...@svenhartge.de wrote:
 bri...@aracnet.com wrote:

 There's no way anyone can help until i can get a trace of what's
 going on at boot.
 
 Jessie or newer? With systemd?
 
 systemd-analyze blame


  29.597s networking.service
   3.256s systemd-suspend.service

 aha.  So I need to dig deeper into networking.service

networking.service is /etc/init.d/networking. Somehow the parsing and
acting upon /etc/network/interfaces is slow.

Please share the contents of /etc/network/interfaces, maybe something
odd stands out in there.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.



Re: Fwd: Iconos genericos en thunar, ahora que veo la red

2015-08-30 Thread Jose Antonio
Sí has roto sí, pero nada grave. Lo único que tendrás que tener en cuenta
es que verás un icono de red para los archivos del tipo MIME alterados,
vamos, que has solucionado una cosa pero has roto otra :-P

 En testing y sid ya está aplicado.

Si, eso lo tenia claro, el nombre del icono ya te dice que se usa para
otra cosa. Pero si el problema es de thunar que apunta a ese icono,
nada que hacer, porque de momento quiero probar la distro según está
en estable, por lo que no voy a ponerle los repositorios ni de testing
ni de sid.

Ahora tengo otros problemas raros de narices.. asi que esto ya lo doy
por solucionado jeje... En mi siguiente mensaje veréis que me pasa...



Re: Drivers Nvidia (GTX 9X0)- Consejos, recomendaciones o experiencias.

2015-08-30 Thread Camaleón
El Sat, 29 Aug 2015 16:10:56 -0430, José Maldonado escribió:

 nouevau carece de un buen control de reloj y de muchas caracteristicas
 de energía, entre otras caracteristicas avanzadas. Además muchas
 caracteristicas de OpenGL estan incompletas o tienen un rendimiento muy
 inferior usando nouevau/mesa.

Exacto. 

Además, no hay más que mirar la tabla¹ de las características que se han 
implementado en los chipsets y para NV110 (tarjetas GTX 960) ni siquiera 
las funcionalidades 2D básicas están terminadas.

 [ironic]Si a mi tambien me parece [/ironic]

Sí ¿verdad?

Por eso, a los que hablan por hablar y a los trolls que abundan en la 
lista los tengo bloqueados ;-)

Tengo gráficas nvidia en todos mis equipos y ATI (integradas) en los 
servidores. Uso el driver nouveau en algunos y en otros tengo los de 
nvidia, no le tengo ascos ni a uno ni a otro pero para las gráficas 
nuevas suele ser mejor tirar de los drivers propietarios porque lleva su 
tiempo añadir todas las funcionalidades en el driver libre.

 Entiendo el punto, pero mucha gente no está para eso, y creo que el
 amigo es uno de esos a los que le interesa que solo funcione y ya :)

No sólo eso, es que en este caso en concreto usar el libre resulta 
inviable salvo que se trabaje en una tty y no creo que nadie se compre 
una GTX 960 para trabajar en línea de comandos.

¹http://nouveau.freedesktop.org/wiki/FeatureMatrix/

Saludos,

-- 
Camaleón



Re: How to disable certain keys

2015-08-30 Thread Bret Busby
On 30/08/2015, Bret Busby bret.bu...@gmail.com wrote:
 On 16/08/2015, Bret Busby bret.bu...@gmail.com wrote:
 On 16/08/2015, Bret Busby bret.bu...@gmail.com wrote:
 On 16/08/2015, to...@tuxteam.de to...@tuxteam.de wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 On Sun, Aug 16, 2015 at 12:04:17PM +0800, Bret Busby wrote:
 On 15/08/2015, Carl Johnson ca...@peak.org wrote:
  Bret Busby bret.bu...@gmail.com writes:

 [...]

  That same right-click menu has an option to save the settings to a
  .xmodmap file and shows how to include that file on start.

 [...]

 Okay; whilst the option to save the settings to the .xmodmap file, is
 not explicit, and I had to guess it (something like Write settings
 from memory), in the response to doing that, it returns a dialgue box
 that states You should modify your login script to include a line
 like  

 How do I modify the login script? I do not know the file name or path,
 for the login script.

 That depends a bit on what shell you are using and on your other
 general
 setup. Typically, if your shell is bash, this file will be called
 .bash_login (note the dot at the start o the name), and will live in
 your
 home directory.

 How does the line you are supposed to include look?


 Hello.

 Unfortunately, like with many other message boxes/dialogue boxes,
 copying and pasting, is not possible.

 In the particular message box, is

 
 Wrote output to the file
 /home/bret/.xmodmap-bret-Aspire-V3-772-UbuntuMATE-1504

 You should modify your login script to include a line like
 xmodmap ~/.xmodmap-`uname-n`
 (those are backquotes.)
 OK
 

 
 bret@bret-Aspire-V3-772-UbuntuMATE-1504:~$ cat .bash_login
 cat: .bash_login: No such file or directory
 bret@bret-Aspire-V3-772-UbuntuMATE-1504:~$ sudo cat
 /home/bret/.bask_login
 sudo: unable to resolve host bret-Aspire-V3-772-UbuntuMATE-1504
 [sudo] password for bret:
 cat: /home/bret/.bask_login: No such file or directory
 bret@bret-Aspire-V3-772-UbuntuMATE-1504:~$ sudo cat
 /home/bret/.bash_login
 sudo: unable to resolve host bret-Aspire-V3-772-UbuntuMATE-1504
 cat: /home/bret/.bash_login: No such file or directory
 bret@bret-Aspire-V3-772-UbuntuMATE-1504:~$
 



 So, it occurred to me, to do an ls on .* and I got (apart from the
 .directory name directories),

 
 bret@bret-Aspire-V3-772-UbuntuMATE-1504:~$ ls .*
 .bash_history  .bashrc  .ICEauthority .profile
 .Xauthority  .xmodmap-bret-Aspire-V3-772-UbuntuMATE-1504
 .xsession-errors.old
 .bash_logout   .dmrc.pam_environment  .sudo_as_admin_successful
 .xinputrc.xsession-errors
 

 So, in running cat .profile, I got

 
 bret@bret-Aspire-V3-772-UbuntuMATE-1504:~$ cat .profile
 # ~/.profile: executed by the command interpreter for login shells.
 # This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
 # exists.
 # see /usr/share/doc/bash/examples/startup-files for examples.
 # the files are located in the bash-doc package.

 # the default umask is set in /etc/profile; for setting the umask
 # for ssh logins, install and configure the libpam-umask package.
 #umask 022

 # if running bash
 if [ -n $BASH_VERSION ]; then
 # include .bashrc if it exists
 if [ -f $HOME/.bashrc ]; then
  . $HOME/.bashrc
 fi
 fi

 # set PATH so it includes user's private bin if it exists
 if [ -d $HOME/bin ] ; then
 PATH=$HOME/bin:$PATH
 fi
 bret@bret-Aspire-V3-772-UbuntuMATE-1504:~$
 

 So, I asume that this is the applicable file, in the absence of the
 two named .bash* files.

 So, after editing that file, I now have

 
 bret@bret-Aspire-V3-772-UbuntuMATE-1504:~$ cat .profile
 # ~/.profile: executed by the command interpreter for login shells.
 # This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
 # exists.
 # see /usr/share/doc/bash/examples/startup-files for examples.
 # the files are located in the bash-doc package.

 # the default umask is set in /etc/profile; for setting the umask
 # for ssh logins, install and configure the libpam-umask package.
 #umask 022

 # if running bash
 if [ -n $BASH_VERSION ]; then
 # include .bashrc if it exists
 if [ -f $HOME/.bashrc ]; then
  . $HOME/.bashrc
 fi
 fi

 # set PATH so it includes user's private bin if it exists
 if [ -d $HOME/bin ] ; then
 PATH=$HOME/bin:$PATH
 fi

 # attempt to invoke .xmodmap upon login
 xmodmap ~/.xmodmap-`uname-n`

 bret@bret-Aspire-V3-772-UbuntuMATE-1504:~$
 

 Which I will test, the next time that I reboot (which probably will
 not be for a few hours).


 Unfortunately, this path of action, has turned out to be quite harmful.

 At first, it took away my End key functionality, and now I have lost
 the functionality of the cursor control keys, and so have to disable
 the numberic keypad, in order to access cursor control positioning.

 I have tried to restore the default settings, to no avail.


And the Page Up and Page Down keys, and the Home key, have also
stopped working. It is a bit like Langoliers or Pacman, eating the
keyboard 

Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sat, Aug 29, 2015 at 11:28:10PM +0100, Brian wrote:
 On Sat 29 Aug 2015 at 22:56:50 +0200, to...@tuxteam.de wrote:
 
  On Sat, Aug 29, 2015 at 01:25:28PM -0500, rlhar...@oplink.net wrote:

[...]

   tcp  0   00.0.0.0:22  0.0.0.0:*  LIS  568/sshd
  
  Common wisdom is to keep that (but to secure it properly [...]
[...]
 Common wisdom or old-wives tales? He probably has no need for it. Purge.

Count me als old-wive then. I know I've used that a couple of times to
diagnose things. To each one to decide (put another way: no need to take
with you the circular saw every time if you know you'll never use it :)

   tcp  0   0127.0.0.1:631   0.0.0.0:*  LIS  1248/cupsd
  
  Are you using your laptop as a print server? If not, the cups-client
  package might be enough.
 
 Its only listening on localhost. What's the problem?

You're right, I missed that.

 cups-client alone is insufficient to print to a printer attached to the
 machine.

that's correct. I assumed that the printer isn't attached to the laptop,
but that there are printer services around (I'm using lprng anyway).

   tcp  0   0127.0.0.1:5432  0.0.0.0:*  LIS  675/postgres
   tcp  0   0127.0.0.1:250.0.0.0:*  LIS  1063/exim4
  
  Database server, mail server. What are they doing? For postgres,
  you could configure it to just serve over an UNIX domain socket,
  if the only applications around connect locally. Your call.
  For exim4 (mail server)... depends on your mail setup.
 
 Both are only listening on localhost. Perfectly safe.

Correct. My fault. See above

   tcp  0   0127.0.0.1:2628  0.0.0.0:*  LIS  599/0
  
  Uh -- what is *this*? A process called 0? Looks really strange
  to me.
  
   tcp6 0   0:::111  :::*   LIS  530/rpcbind
   tcp6 0   0:::38930:::*   LIS  540/rpc.statd
   tcp6 0   0:::22   :::*   LIS  568/sshd
   tcp6 0   0::1:631 :::*   LIS  1248/cupsd
   tcp6 0   0::1:5432:::*   LIS  675/postgres
   tcp6 0   0::1:25  :::*   LIS  1063/exim4
  
  Those are IPV6 variants of some of the above.
  
   udp  0   00.0.0.0:36358   0.0.0.0:*   612/avahi-daemon:r
  
  Avahi: this is a service discovery service: your laptop is broadcasting
  to the network hey, here's a [printer, database, whatnot]. Wanna play
  with me?
  
  That's one of the things I ban from my computer.
 
 Broadcating is one thing. Allowing access to a service is another.

Broadcasting is inviting :-)

   udp  0   00.0.0.0:631 0.0.0.0:*   647/cups-browsed
  
  Here cups is announcing its availability. Down with it :-)
 
 CUPS isn't doing anything. Have another go. :)

This is 631/udp, aka CUPS browsing and polling: it's a discovery protocol
(any printers around? oh, yes, here's one). So it's doing something.
And sometimes, it has even holes:

  http://www.openwall.com/lists/oss-security/2014/04/01/4

I'd say down with his head. Leave 631/tcp (that's for printing) if you
use a local printer, but leave it restricted to localhost (as done by default
above).

regards
- -- tomás
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlXitSwACgkQBcgs9XrR2kbH1wCfZ8A587OGnbBSTvzv+Tdncvma
wOQAn0vuYGxLn6l82Y6FqU55iqHqQeKE
=ZHCq
-END PGP SIGNATURE-



Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sat, Aug 29, 2015 at 06:39:46PM -0500, rlhar...@oplink.net wrote:
 On Sat, August 29, 2015 3:56 pm, to...@tuxteam.de wrote:
  tcp  0   00.0.0.0:0.0.0.0:*  LIS  561/inetd
 
  As others noted: what's inetd doing on ? Do have a look at
  its config files (somewhere in /etc/inetd.conf).
 
 As I noted previously, port  is the approx server; there is a line for
 it in /etc/inetd.conf:
 
 #:OTHER: Other services
  stream tcp   nowait  approx  /usr/sbin/approx /usr/sbin/approx

Sorry, missed that. You might consider binding the listening socket
to 127.0.0.1 unless you want to provide the service network-wide.

  tcp  0   00.0.0.0:22  0.0.0.0:*  LIS  568/sshd
 
  Common wisdom is to keep that (but to secure it properly, by disabling
  root logins and possibly passwrd logins). Perhaps you can ssh into your
  laptop should the UI become unresponsive for some reason (e.g. X botches
  the graphics card but you still have some running programs you'd want to
  finalize in an orderly mode).
 
 On the desktop, I do use screen over ssh to access another desktop, but
 I can do without ssh access to the laptop.

Your call :-)

  tcp  0   0127.0.0.1:631   0.0.0.0:*  LIS  1248/cupsd
 
  Are you using your laptop as a print server? If not, the cups-client
  package might be enough.
 
 Then should I unistall the cups-daemon and cups-server-common packages?

See the other discussion. The cups server is bound to localhost (a fact I
overlooked on my first mail, as pointed out by Brian), and thus not reachable
from the network: thus most probably harmless; it would serve
locally-attached printers (for example, an USB-attached printer) to
local clients. In such a configuration, you'd need it.

  tcp  0   0127.0.0.1:5432  0.0.0.0:*  LIS  675/postgres tcp
  0   0127.0.0.1:250.0.0.0:*  LIS  1063/exim4
 
  Database server, mail server. What are they doing? For postgres,
  you could configure it to just serve over an UNIX domain socket, if the
  only applications around connect locally. Your call. For exim4 (mail
  server)... depends on your mail setup.
 
 I thought that I had left mail unconfigured, but perhaps not.

As far as I know Debian itself needs a minimal working mail infrastructure,
so that might be just part of this. Locally-bound, thus harmless, as
above.

  tcp  0   0127.0.0.1:2628  0.0.0.0:*  LIS  599/0
 
  Uh -- what is *this*? A process called 0? Looks really strange
  to me.
 
 2628 turns out to be the port for the dictionary server; I am using
 localhost as the server.

Also locally bound.

 No.  I simply was trying to make the laptop synchronize its clock whenever
 it connects to the Internet.  It appears that the package ntpdate is
 adequate for a laptop, and that is the package I should have installed;
 but I installed package ntp, which obviates the need for ntpdate.

Hm. The real NTPD has quite a few advantages over plain ntpdate (among
other things it calibrates the local clock, thus minimizing skew even
when there's no connectivity). Perhaps there's a way to configure it so
that it doesn't provide a service, which in the case of a laptop wouldn't
make any sense. But I don't know whether ntpd configuration allows that
(you can set it to pretty restrictive, though).
 
  I'd disable/uninstall many of those [...]
 
 At this point, I think that I should make a fresh installation, keeping in
 mind the comments which you and others have made.

Dunno. We went with a very fine comb over things. It's always a balance
between convenience/feasibility and security. You're not at the NSA, trying
to whistle-blow, after all (use TAILS for that, and some help from trusted
friends). If you reduce the lists by a bit, you'll end up with a manageable
set of things you could try to uninstall (and see what'd go down with it:
I don't know how much of GNOME is torn down these days if you take down
Avahi, just for one example).

The most interesting part here is the process. What makes you secure is
some awareness of what's in your box and what it's doing there.

Regards
- -- t
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlXivlIACgkQBcgs9XrR2kYH9wCcD0SPPe28IgErxWnWChP5Tz0e
shoAnRivub03uj1II+o+yK1RjKQDY3xi
=PVEJ
-END PGP SIGNATURE-



Re: laptop protection in an office network

2015-08-30 Thread rlharris
On Sun, August 30, 2015 3:26 am, to...@tuxteam.de wrote:
 ... We went with a very fine comb over things. It's always a balance
 between convenience/feasibility and security. You're not at the NSA,
 trying to whistle-blow, after all (use TAILS for that, and some help from
 trusted friends). If you reduce the lists by a bit, you'll end up with a
 manageable set of things you could try to uninstall (and see what'd go
 down with it: I don't know how much of GNOME is torn down these days if
 you take down Avahi, just for one example).

 The most interesting part here is the process. What makes you secure is
 some awareness of what's in your box and what it's doing there.

This has been an interesting experience for me, and I am grateful to you
and to all who have entered into the discussion.  I am going to print out
all these messages and read them again, and save them for reference.  This
interaction has given me a better understanding of the issues than I would
have gotten from reading a book on how to secure a machine.

My best regards to all,

Russell Harris




Re: Drivers Nvidia (GTX 9X0)- Consejos, recomendaciones o experiencias.

2015-08-30 Thread Emmanuel

El 30/08/2015 a las 05:26, Camaleón escibió:

El Sat, 29 Aug 2015 16:10:56 -0430, José Maldonado escribió:


nouevau carece de un buen control de reloj y de muchas caracteristicas
de energía, entre otras caracteristicas avanzadas. Además muchas
caracteristicas de OpenGL estan incompletas o tienen un rendimiento muy
inferior usando nouevau/mesa.


Exacto.

Además, no hay más que mirar la tabla¹ de las características que se han
implementado en los chipsets y para NV110 (tarjetas GTX 960) ni siquiera
las funcionalidades 2D básicas están terminadas.


[ironic]Si a mi tambien me parece [/ironic]


Sí ¿verdad?

Por eso, a los que hablan por hablar y a los trolls que abundan en la
lista los tengo bloqueados ;-)

Tengo gráficas nvidia en todos mis equipos y ATI (integradas) en los
servidores. Uso el driver nouveau en algunos y en otros tengo los de
nvidia, no le tengo ascos ni a uno ni a otro pero para las gráficas
nuevas suele ser mejor tirar de los drivers propietarios porque lleva su
tiempo añadir todas las funcionalidades en el driver libre.


Entiendo el punto, pero mucha gente no está para eso, y creo que el
amigo es uno de esos a los que le interesa que solo funcione y ya :)


No sólo eso, es que en este caso en concreto usar el libre resulta
inviable salvo que se trabaje en una tty y no creo que nadie se compre
una GTX 960 para trabajar en línea de comandos.

¹http://nouveau.freedesktop.org/wiki/FeatureMatrix/

Saludos,

Correcto, don José, al momento lo que ocupo es utilidad máxima y 
principalmente para entretenimiento, no estoy actualmente dando parte en 
cacería de bugs para Noveau.
Así es, Camaleón, el hecho de usar los privativos da mucha ventaja en 
cuanto al tema de rendimiento en juegos, vídeos y todo lo relacionado a 
aceleración gráfica.


¡Gracias a ambos por responder! :-)



Re: laptop protection in an office network

2015-08-30 Thread Joe
On Sun, 30 Aug 2015 09:47:56 +0200
to...@tuxteam.de wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 On Sat, Aug 29, 2015 at 11:28:10PM +0100, Brian wrote:


  
  Its only listening on localhost. What's the problem?
 
 You're right, I missed that.
 

Which is why I suggested nmap. When you've made absolutely sure you've
read the netstat listing properly, you then need to look at the
application configuration and the tcpwrappers files to see what other
restrictions may be applied to connections, and then check the
iptables rules to see what's there.

It's simpler just to poke it with nmap from a potentially hostile
machine, and see if it growls.

If you're seriously securing a machine, then yes, you do all those
things, and you use the tools to provide at least two methods of
protection (if you get one wrong, or there's a bug, it's not a
disaster). And it's still worth a portscan then to see if you've made
any serious errors, preferably with each of your single methods in turn
turned off.

If you're just looking to see if your machine can survive a short dip
in what is not explicitly known to be a hostile environment,
particularly in one which would not expect to see a Linux machine, then
I'd say an nmap scan is enough.

-- 
Joe



Re: Another system management tool to disappear.

2015-08-30 Thread claude juif
2015-08-29 13:35 GMT+02:00 Joel Rees joel.r...@gmail.com:

 On Sat, Aug 29, 2015 at 12:25 AM, claude juif claude.j...@gmail.com
 wrote:
  Hi,
 
  2015-08-28 17:16 GMT+02:00 Renaud OLGIATI 
 ren...@olgiati-in-paraguay.org:
 
  Systemd-Linux to get rid of su:
 
  https://tlhp.cf/lennart-poettering-su/
 
  Is this a trend to make _all_ the GNU-Linux tools disappear, and have
  _everything_
  incorporated into systemd ?
 
 
  Troll mode: ON
 
  What he explains in the blogpost you link make sense. So let's give it a
 try
  ;)

 So, do you mean to say that, when you say the blog post linked to
 makes sense, you are intending to be trolling?


No sorry it was exactly the opposite. I was afraid about a new troll around
systemd.


 --
 Joel Rees

 Be careful when you look at conspiracy.
 Arm yourself with knowledge of yourself, as well:
 http://reiisi.blogspot.jp/2011/10/conspiracy-theories.html




Re: Another system management tool to disappear.

2015-08-30 Thread Gene Heskett
On Sunday 30 August 2015 04:47:10 Reco wrote:

  Hi.

 On Sat, 29 Aug 2015 20:30:58 -0400

 Gene Heskett ghesk...@wdtv.com wrote:
  On Saturday 29 August 2015 10:39:07 Reco wrote:
Hi.
  
   On Sat, 29 Aug 2015 09:49:55 -0400
  
   Gene Heskett ghesk...@wdtv.com wrote:
  If su goes away, IMNSHO, it will be such a PITA that it will
  encourage far more people to just give up and run their
  machines as root full time.  And I don't believe for a
  millisecond that is the effect intended.

 They provide some systemd-specific kludge instead of su. So
 it's not that bad.
   
I don't recall recognizing that being discussed yet.
  
   Please read the bugreport. It's all there.
  
   https://github.com/systemd/systemd/issues/825
  
 And, given the current systemd adoption rate in Debian, I'd
 say that we, stable users, have 3-4 years before that
 machinectl login thing will be available to us.

  So, if su goes away,  how do I accomplish those tasks in a
  suitable manner that will not bore a hole in the user
  sandbox?

 If it comes to this (i.e 'su' will go away) - I just use
 busybox (which has perfectly working implementation of su
 without the fancy bits). I.e.

 busybox su -
   
Command not found. Wheezy 32 bit install.
  
   Obviously for this command to work it's required to install
   busybox. I'd recommend busybox-static package.
  
   Reco
 
  Installed it, suid problems:
 
  gene@coyote:~$ busybox su amanda
  su: must be suid to work properly
  gene@coyote:~$ busybox su -
  su: must be suid to work properly
 
  Is it still finding the system su first?

 No. The 'problem' is exactly what it tolds. Meaning:

 1) Original su is suid root-owned binary:

 $ ls -la /bin/su
 -rwsr-xr-x 1 root root 40168 Nov 21  2014 /bin/su

 2) Busybox, on the other hand - is not:

 $ ls -la /bin/busybox
 -rwxr-xr-x 1 root root 1837008 Feb 19  2015 /bin/busybox


 So, *root*-invoked busybox su should behave exactly like original
 su. Everyone other than root are told to get lost.

 Note that:

 1) Setting suid bit on busybox is *extremely* bad idea. Don't do it
 ever do it (as busybox provides *much* more than su).

 2) Your way of using su you've described should not be affected by
 this little inconvinience as you become root first, and do su second.

 Reco

So to me, nothing changes.  Thats good IMO.

Cheers, Gene Heskett
-- 
There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order.
-Ed Howdershelt (Author)
Genes Web page http://geneslinuxbox.net:6309/gene



Re: How to disable certain keys

2015-08-30 Thread David Wright
Quoting Bret Busby (bret.bu...@gmail.com):

  xmodmap ~/.xmodmap-`uname-n`
 
  bret@bret-Aspire-V3-772-UbuntuMATE-1504:~$

That's quite a hostname!

  
 
  Which I will test, the next time that I reboot (which probably will
  not be for a few hours).
 
 
  Unfortunately, this path of action, has turned out to be quite harmful.
 
  At first, it took away my End key functionality, and now I have lost
  the functionality of the cursor control keys, and so have to disable
  the numberic keypad, in order to access cursor control positioning.
 
  I have tried to restore the default settings, to no avail.
 
 
 And the Page Up and Page Down keys, and the Home key, have also
 stopped working. It is a bit like Langoliers or Pacman, eating the
 keyboard functionality.

I've no idea what you've put into .xmodmap but I think that's quite a
blunt instrument to be using. As you're obviously only concerned with X,
I'd have thought that the potted recipes at the end of
/usr/share/X11/xkb/rules/base.lst would be sufficient, and these can
be set from XKBOPTIONS in /etc/default/keyboard.

Cheers,
David.



Re: Som no debian

2015-08-30 Thread Manoel Pedro de Araújo
Ja verifiquei todas as configuraçoes. Está tudo ok. Não sei mais o que
fazer.

Em 30 de agosto de 2015 14:04, Albino B Neto tuxb...@gmail.com escreveu:

 Verificou a configuração do KDE ?

 Desculpe a brevidade, dispositivo móvel.
 www.bino.us

 Em 30/08/2015 09:20, Juscelino Cordeiro jfilho...@gmail.com escreveu:
 
  Tb to com esse msm problema. Antes ficava toda hora mudando pro volume
 maximo. Aperta alt+ f2 e digita kmix q ele volta mas acho q depois de um
 tempo ta sumindo novamente.
 
  Enviado do meu iPhone
 
   Em 29/08/2015, às 20:58, Manoel Pedro de Araújo mpara...@gmail.com
 escreveu:
  
   Olá, estou com um problema de som no debian. Quando eu ligo
   o som de inicialização do KDE nao aparece, mas o som
   nas nas multimidia estão normalmente.
  
   Alguem sabe resolver este problema?
  
   --
   Manoel
  
 




-- 
Manoel


Re: Too many system names

2015-08-30 Thread Jochen Spieker
Gary Roach:

 OK: With ServerName set to supercrunch and doing a systemctl reload and then
 systemctl -l status, I get the following message (In part)
 
 Aug 25 23:41:53 supercrunch apache2[662]: Starting web server:
 apache2AH00557: apache2: apr_sockaddr_info_get() failed for supercrunch

That may be related to a line like 'Listen supercrunch:80 or maybe
VirtualHost supercrunch:80. If your system cannot resolve that name,
Apache doesn't know what to do with it.

Please note that a ServerName supercrunch should not lead to that
problem since in this case supercrunch is just a string that Apache
expects in the Host header of requests. Technically, I don't think it
has to be a valid DNS name on the server.

 With this set up, I tried to run supercrunch/redmine, localhost/redmine,
 127.0.0.1/redmine. None worked.

Please, describe what None worked exactly means and what you find in
the VirtualHost-specific log files I proposed to set up

J.
-- 
I'm being paid to act weirdly.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: apt-cacher-ng not expiring any more

2015-08-30 Thread David Wright
Quoting Eduard Bloch (e...@gmx.de):
 * David Wright [Tue, Aug 25 2015, 11:00:41AM]:
  Running apt-cacher-ng on wheezy (with wheezy-backports), some missing
  files in the repository are making the expiration step fail. Here are
  the relevant lines from the log:
  
  Checking/Updating 
  debrep/dists/jessie-backports/main/binary-i386/Packages.bz2...
  404 Not Found
 ...

 There is a newer BPO version where this problem should be fixed.

Thanks. I hadn't realised this because I wasn't using
wheezy-backports-sloppy as well as wheezy-backports itself.

 [Re missing .bz2 files]

 They were removed from mirrors because, well, they are not necessary and
 Jessie can work with .xz versions.

That's fine. I realised the .xz ones were probably newer because they
were the ones that the pure wheezy version couldn't parse.

Cheers,
David.



Re: Configure Postfix *as* a smart host?

2015-08-30 Thread Bob Bernstein

On Sun, 30 Aug 2015, David Wright wrote:


Did you type the ^] ? But the ball's in your court—say hello.

  Type:



  ehlo summat



I get:

ehlo debian
250-boris.fuzzywuzzy.com
250-PIPELINING
250-SIZE 2048
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN

Hmmm...I did not expect to see that STARTTLS in there...

--
IMPORTANT: This email is intended for the use of the individual
addressee(s) named above and may contain information that is
confidential, privileged or unsuitable for overly sensitive
persons with low self-esteem, no sense of humour or irrational
metaphysical beliefs.


Re: Configure Postfix *as* a smart host?

2015-08-30 Thread David Wright
Quoting Bob Bernstein (poo...@ruptured-duck.com):
 On Sun, 30 Aug 2015, David Wright wrote:
 
 Did you type the ^] ? But the ball's in your court—say hello.
 
   Type:
 
   ehlo summat
 
 
 I get:
 
 ehlo debian
 250-boris.fuzzywuzzy.com
 250-PIPELINING
 250-SIZE 2048
 250-VRFY
 250-ETRN
 250-STARTTLS
 250-ENHANCEDSTATUSCODES
 250-8BITMIME
 250 DSN
 
 Hmmm...I did not expect to see that STARTTLS in there...

Take a look at https://lists.debian.org/debian-user/2015/07/msg00526.html
where there's a fully worked example (with a gloss on it elsewhere in
the thread).

Cheers,
David.



Re: Another system management tool to disappear.

2015-08-30 Thread Christian Seiler
On 08/30/2015 05:00 PM, Andrew McGlashan wrote:
 On 29/08/2015 8:49 AM, T.J. Duchene wrote:
 snip rubbish

Really? Just because you disagree with somebody, their opinion is
rubbish?

 Read Lennart's own blog, you'll see that he is in the business of
 making Linux his own; thus my coined phrase Lennart's Linux.

It's really sad to see that so many people assume bad faith on the
other side of an argument, just because you disagree with them.

It's also quite patronizing to those of us who don't share your
extreme dislike of systemd, because if you think about it: what you are
in fact impliying is that all who are not opposed to it have given up
our free will to a single upstream developer. Do you really want to go
so far and say that?

 And ANYONE whom speaks against systemd is, quite simply, just like one
 who utters the name Voldermort in the Harry Potter story.  Both are
 just as evil, but one is purely fictional.

Again with the rhetoric...

As I said elsewhere in this thread to somebody else: it's fine not to
like systemd, it's fine not to like that Debian made it the default
init system, it's fine not to want to use Debian anymore because of
that, it's fine to express that opinion here.

But seriously, comparing a free software project to a mass-murderer,
even a fictional one? Not OK. (And it doesn't help at all if you are
even remotely interested in convincing people.)

Also, seriously, the other part of the analogy? Do you want me to
remind you what actually happened in the story? The part about people
being utterly terrified for their lives? The part about people who
uttered that name and were caught were physically (!) tortured? Put in
prison? That their families were threatened, sometimes also tortured
and even murdered?

When has something even remotely comparable happened to somebody
opposed to systemd? The worst that has happened was that people got
banned from discussion platforms because of abusive behavior. Nobody
opposed to systemd was ever physically threatened because of their
opinion.

On the contrary: Lennart has received threats to his own life and
well-being because of his work on systemd (and to a presumably
lesser extent also for his work on PulseAudio).

I've seen cases where people working on systemd upstream were very
opinionated and headstrong, even slightly abrasive and dismissive at
times. But I've NEVER seen them stoop to the level of rhetoric that
I've seen in this thread (and others) by opponents of the project -
and given that you aren't threatening anybody, your behavior is very
far from the worst that I've seen coming from those opposed to
systemd.

From that perspective, your analogy reeks of irony.

Christian



signature.asc
Description: OpenPGP digital signature


Re: Configure Postfix *as* a smart host?

2015-08-30 Thread David Wright
On 30/08/2015 00:13, Bob Bernstein wrote:
 I have an instance of Wheezy running on a VPS (for years) and only
 now have decided I want to take advantage of the possibility of
 using it as a smarthost for my home machines, instead of what my
 cable company makes available, which I confess works just fine.
 
 For example, I have a Jessie system here at home running Alpine,
 which is very flexible in how one may specify an SMTP host. Of
 course, I don't need authentication (or the submit port) to use
 my cable company's smarthost. But when I point alpine at my VPS
 for smtp services (as it were) it tells me that authentication is
 not offered, this despite my following to the letter (or so I
 thought) the directions for setting up SASL on Postfix.
 
 I have cleared the way for port 587 both ways on both the VPS
 and on my home router. Here's what happens (with phonied-up data):
 
 $ telnet boris.fuzzywuzzy.com 587
 Trying 12.34.123.123...
 Connected to boris.fuzzywuzzy.com.
 Escape character is '^]'.
 220 boris.fuzzywuzzy.com ESMTP Postfix (Debian/GNU)
 ^]

Did you type the ^] ? But the ball's in your court—say hello. Type:

ehlo summat

where summat is the hostname you're on. You should see some 250 replies.

Cheers,
David.



Re: Adapter Names on Stretch [OT]

2015-08-30 Thread David Wright
Quoting Gene Heskett (ghesk...@wdtv.com):

 You may well be correct, but to my grandfather they were loaned.  I do 
 know that when they left, each was equipt with a good sturdy tag/label 
 bareing the owners name  address, well sealed against the elements.
 
 I would suspect that the possibility of a little history rewriting may 
 have been done over the last 70 years to lesson the language from loan 
 to gift.  Recall as always, that the history of a war is written by 
 the winners.

That's difficult to do with contemporary newspaper appeals:

https://news.google.com/newspapers?nid=861dat=19401112id=vDFSIBAJsjid=EjYNIBAJpg=3629,1766022hl=en

https://news.google.com/newspapers?nid=1314dat=19401208id=mChWIBAJsjid=CuQDIBAJpg=6924,2616059hl=en

(The latter pops up one column to the right of the story's start.)

Cheers,
David.



Re: laptop protection in an office network

2015-08-30 Thread Brian
On Sun 30 Aug 2015 at 04:00:07 -0500, rlhar...@oplink.net wrote:

 On Sun, August 30, 2015 3:26 am, to...@tuxteam.de wrote:
  ... We went with a very fine comb over things. It's always a balance
  between convenience/feasibility and security. You're not at the NSA,
  trying to whistle-blow, after all (use TAILS for that, and some help from
  trusted friends). If you reduce the lists by a bit, you'll end up with a
  manageable set of things you could try to uninstall (and see what'd go
  down with it: I don't know how much of GNOME is torn down these days if
  you take down Avahi, just for one example).
 
  The most interesting part here is the process. What makes you secure is
  some awareness of what's in your box and what it's doing there.
 
 This has been an interesting experience for me, and I am grateful to you
 and to all who have entered into the discussion.  I am going to print out
 all these messages and read them again, and save them for reference.  This
 interaction has given me a better understanding of the issues than I would
 have gotten from reading a book on how to secure a machine.

It's already been said, but, although its up to you, there really is no
need for a reinstall.

You should also appreciate that (AFAIK) all services installed on Debian
are installed in a secure default state. Altering that state can degrade
security but you take responsibility for that.

The bottom line is that services are good. You can do what tomas advises
and become aware of what they do. On the other hand you can install them
and let them get on with the job they are configured to do in the
default state and not bother your head about them. In that state you can
be assured of the safeness of your machine.



Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sat, Aug 29, 2015 at 11:00:51PM +0100, Brian wrote:

[...]

 None of these. Bonjour plays a central role in printing over a network.
 Discarding it as a very useful tool isn't very helpful.

It aids in printer discovery. If your configuration is somewhat static,
it's totally superfluous. In a highly dynamic environment it's convenient.

I know for sure: my printing runs perfectly fine without Avahi (and
without CUPS, at that). I've just two printers I've to talk to, work
and home. Once they are configured, LPRNG does the rest.

Pick your tools. Know why.

- -- t
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlXisWYACgkQBcgs9XrR2kZVhwCggUEl80cZRBpY9UHhQwlMRnld
wiEAniy1AV7ewsH2Ho33oM3GobIvQQBA
=2X1C
-END PGP SIGNATURE-



Re: [OT] Re: llista de correu, trobades a Catalunya

2015-08-30 Thread Narcis Garcia
Subscric el què diu l'Eloi sobre fixar data i lloc.


El 29/08/15 a les 21:59, Eloi ha escrit:
 El 26/08/15 a les 11:05, Aniol Martí ha escrit:
 Bon dia,
 Aquests dies concideixen amb el Saló del Manga, no sé si això pot fer que 
 vingui menys gent, almenys jo no podria venir :'(.

 Salut!

 Enviat des del mòbil.
 
 Això depèn de les preferències de cadascú.
 
 Jo no he anat mai al Saló del Manga, tot i haver estat convidat per tres
 persones diferents i en repetides ocasions, precisament perquè coincidia
 amb les fires i festes de Sant Narcís.
 
 I és que si se'm deixa a triar entre disfressar-me de Son Goku o cantar
 el Girona m'enamora a les escales de la catedral, l'elecció és més que
 clara :-)
 
 El cas és que sigui qui sigui el cap de setmana que s'escolleixi, hi
 haurà algun altre acte interessant en un altre punt de Catalunya que
 algú preferirà abans de venir a aquesta trobada.
 
 Jo fixaria una data i només la canviaria en cas que hi hagués un nombre
 significatiu de persones a qui no li anés bé. Si algú no pot anar a una,
 mala sort i ja vindrà a la propera; si esperem una data que vagi bé a
 tothom, no farem mai cap trobada. Ho dic per experiència.
 



Re: Fwd: Iconos genericos en thunar, ahora que veo la red

2015-08-30 Thread Camaleón
El Sun, 30 Aug 2015 12:19:35 +0200, Jose Antonio escribió:

Sí has roto sí, pero nada grave. Lo único que tendrás que tener en
cuenta es que verás un icono de red para los archivos del tipo MIME
alterados, vamos, que has solucionado una cosa pero has roto otra :-P
 
 En testing y sid ya está aplicado.
 
 Si, eso lo tenia claro, el nombre del icono ya te dice que se usa para
 otra cosa. Pero si el problema es de thunar que apunta a ese icono, nada
 que hacer, porque de momento quiero probar la distro según está en
 estable, por lo que no voy a ponerle los repositorios ni de testing ni
 de sid.

Concuerdo en que sería una locura tener que usar testing o sid sólo por 
eso, simplemente me pareció relevante el dato por si a alguien más le 
interesaba ;-)

En cuanto a los iconos, puedes dejar el estándar (blanquito) o mantener 
el cambio que has hecho, no va a afectar en nada a la instalación ni al 
sistema. Tampoco es un icono que se suela ver a menudo (digo, el genérico 
para los tipo MIME application-octet-stream) y si estás accediendo a 
los recursos de red a menudo pues tener el icono adecuado te alegra la 
vista.

Saludos,

-- 
Camaleón



Re: laptop protection in an office network

2015-08-30 Thread Brian
On Sun 30 Aug 2015 at 18:28:14 +0200, to...@tuxteam.de wrote:

 On Sun, Aug 30, 2015 at 03:07:44PM +0100, Brian wrote:
  On Sun 30 Aug 2015 at 09:31:50 +0200, to...@tuxteam.de wrote:
  
   I know for sure: my printing runs perfectly fine without Avahi [...]
 
  This is a static configuration equivalent to the CUPS one outlined
  above. It has the same drawbacks. There is no reason why either setup
  shouldn't produce a satisfactory printing experience. I believe LPRNG
  cannot do service discovery so a roaming user may have the trouble of
  needing to get a server name for every new situation.
 
 Correct. LPRNG doesn't service discovery. I do that discovery (e.g. I
 walk in the office to the copier-printer and look at the label slapped
 on it where its IP is printed on). I gladly do that discovery.

That's fine and a helpful technique. But it isn't the norm in all
offices and if there is no one knowledgeable about...

   Pick your tools. Know why.
  
  Indeed; but banning one of them reduces the possibilities of effortless
  printing.
 
 Banning is a loaded word. I choose simplicity (and am ready to pay some
 price for it). I don't tell others to do likewise, I just offer help in
 making a choice. I can only ban it from my computer.

Apologies. I did not mean to imply you were all for the eradication of
service discovery on everyone's computer and did understand you had made
a choice for yourself only. I look like a Bonjour advocate but in a
similar way to you I have no wish to enforce its use. However, there is
a more mobile aspect to computing today and it cannot be ignored when it
comes to printing.

Picture a cosy suburban house in England. Daughter Number 1 returns with
a friend after a good day at the school's sports day. A simple job turns
into a saga.

Daughter Number 1: Hey Dad, Freya has a brilliant photo on her mobile of
   me winning the 200 metre race. Can we print it out?

Dad (Dropping into technical expert mode): The IP of the server is

Daughter Number 1: How does she put it into her phone?

Dad (flummoxed): I don't know. She probably can't. That's the problem
 with new technology.

Daughter Number 1: Please Dad, I want to show the photo to my friends.

Dad (Back in technical expert mode): Have her email it to me. I'll
 process and print it.

Daughter Number 1: Freya has used up her WiFi allowance. Can't we just
   send it to your computer.

Dad: No. I'll not have service discovery in this house. And I've no lead
 for the phone and would have to install special software anyway.

Daughter Number 1: Daad!

 - - - -
 [1] A case in point: at home we have a postscript network printer.
 For one file, my SO's computer (a fresh Debian installation, with
 all the Mate and Cups goodnes isn't able to print one specific PDF.
 My box, with LPRNG and apsfilter does print it. The CUPS log files
 say that yes, everything is fine. I've the hunch that the printer's
 Postscript implementation is crappy, and the CUPS variant is sending
 some Postscript Level 2 the printer can't digest (it prints an error
 message instead of the wanted document, so it seems to be the interpreter
 in the printer freaking out). With LPRNG/apsfilter, I'd be able to
 debug the thing. With all this CUPS mess, I don't even know where
 to start. Ick.

I've had similar. It's nothing to do with CUPS. cups-filters is the
resposible agent and changing the renderer can help.



Re: Another system management tool to disappear.

2015-08-30 Thread Ron
On Sun, 30 Aug 2015 13:56:18 -0500
T.J. Duchene t.j.duch...@gmail.com wrote:

 If you really have a problem with systemd's design, why don't you take
 the source, fix it and submit the patch?  

Sadly, considering the effort that has been spent (wasted ?) 
developing systemd, the only fix would be to avoid adopting it, 
or later to get rid of it completely
 
Cheers,
 
Ron.
-- 
 Luck, that's when preparation and opportunity meet.
 -- P.E. Trudeau

   -- http://www.olgiati-in-paraguay.org --
 



Re: Another system management tool to disappear.

2015-08-30 Thread The Wanderer
On 2015-08-30 at 15:08, Renaud (Ron) OLGIATI wrote:

 On Sun, 30 Aug 2015 13:56:18 -0500 T.J. Duchene
 t.j.duch...@gmail.com wrote:
 
 If you really have a problem with systemd's design, why don't you
 take the source, fix it and submit the patch?
 
 Sadly, considering the effort that has been spent (wasted ?) 
 developing systemd, the only fix would be to avoid adopting it, or
 later to get rid of it completely

Not to mention that some of the changes which would be necessary to fix
some parts of the design have already been pre-rejected by upstream;
they've specifically and explicitly stated that patches to remove the
interdependencies among the various components will not be accepted.

I don't have a link handy for that, but I could dig one up if it were
really necessary. I don't particularly want to dive as deeply into the
systemd discussion environment as that would require, though.

Plus, at least to all appearances, some of the problems with the design
can pretty much only be fixed by removing features and functionality.
The systemd developers seem to think that those features and that
functionality are worth the cost, so of course they aren't going to
accept patches to remove those things.


Short of that, my own first step in trying to fix systemd would
probably be to disambiguate the names, so that we don't refer to the
binary which gets executed as PID1 _and_ the collection of other
binaries which orbits that binary _and_ the project which develops all
of these binaries by one single undistinguished name. So far as I can
see, no one else seems to have the slightest interest in this.

My second step would probably be to A: clearly define which of the
interfaces involved in the project are internal (and subject to change
without notice) and which are external (and guaranteed to remain
stable in the long term, to be removed or see non-backwards-compatible
changes only with a years-long deprecation process if at all), and B:
define the boundaries in such a way that any interface which one of the
project's modular components uses to communicate with another such
component is considered an external interface.

My reasoning in that latter is more or less as follows:

* In order for a component of a system to be properly considered
modular, it must be possible not only to remove that component without
interfering with the functioning of the rest of the system (except
perhaps by way of explicitly declared dependencies), but to have the
option of replacing it with an alternative component which is developed
and maintained by a third party.

* A third-party tool cannot safely use or depend on an internal
interface of a different project. (I believe even the current systemd
project would agree with this statement.)

* Therefore, either the interfaces between the components are not
internal interfaces, or those components are not modular.

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man. -- George Bernard Shaw



signature.asc
Description: OpenPGP digital signature


Re: Configure Postfix *as* a smart host?

2015-08-30 Thread Bob Bernstein

On Sun, 30 Aug 2015, Martin Smith wrote:

You might find more answers at www.postfix.org, they also have 
a very good mailing list, which I can recommend


No doubt a very good idea; thanks.

--
Bob Bernstein



Re: Another system management tool to disappear.

2015-08-30 Thread Andrew McGlashan

On 31/08/2015 1:24 AM, Renaud (Ron) OLGIATI wrote:
 On Mon, 31 Aug 2015 01:00:27 +1000
 Andrew McGlashan andrew.mcglas...@affinityvision.com.au wrote:
 
 And ANYONE whom speaks against systemd is, quite simply, just like one
 who utters the name Voldermort in the Harry Potter story.  Both are
 just as evil, but one is purely fictional.
 
 With due respect, m'lud, it is not he who is evil, who dares utter the name 
 of 
 He Who Must Not Be Named.
 
 HWMNBN, and his followers, are another matter...

Yes, of course, that is what I actually meant ;-)
 - that's the fictional one [HWMNBN].
 - systemd is the non-fictional one
 Just to be clear... both of those evil.

The person whom speaks up against systemd is typically [and most
certainly erroneously] considered a troll.  We are allowed to have an
opinion, even though expressing it is demonized by the pro systemd crowd.

Cheers
A.



Re: Another system management tool to disappear.

2015-08-30 Thread Ron
On Mon, 31 Aug 2015 04:35:46 +1000
Andrew McGlashan andrew.mcglas...@affinityvision.com.au wrote:

 The person whom speaks up against systemd is typically [and most
 certainly erroneously] considered a troll.  We are allowed to have an
 opinion, even though expressing it is demonized by the pro systemd crowd.

Common phenomenon: It is well documented that the recently converted are 
the most rabid defenders of their newly-found faith; even though it may be of 
recent creation (For reference, see Scientology)
 
Cheers,
 
Ron.
-- 
 Luck, that's when preparation and opportunity meet.
 -- P.E. Trudeau

   -- http://www.olgiati-in-paraguay.org --
 



usb read only

2015-08-30 Thread atux

hello everyone.

i have a usb stick that it gets recognised as read only.
how do i fix that issue, so i could format it and have a usable usb stick?
i have tried with dosfsck -a without success

Disk /dev/sdb: 31.4 GB, 31449415680 bytes
19 heads, 19 sectors/track, 170151 cylinders, total 61424640 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x10635f1f

   Device Boot  Start End  Blocks   Id  System
/dev/sdb1   *806461424639307082887  HPFS/NTFS/exFAT
*root@netbook:~#* dosfsck -a /dev/sdb1
dosfsck 3.0.13, 30 Jun 2012, FAT32, LFN
open: Read-only file system
*root@netbook:~#*

even gparted has it recognised as read only


Re: Too many system names

2015-08-30 Thread Jochen Spieker
Sorry, please ignore this post. I didn't notice I was replying to an
older response.

Regards,
Jochen.

Jochen Spieker:
 Gary Roach:
 
 OK: With ServerName set to supercrunch and doing a systemctl reload and then
 systemctl -l status, I get the following message (In part)
 
 Aug 25 23:41:53 supercrunch apache2[662]: Starting web server:
 apache2AH00557: apache2: apr_sockaddr_info_get() failed for supercrunch
 
 That may be related to a line like 'Listen supercrunch:80 or maybe
 VirtualHost supercrunch:80. If your system cannot resolve that name,
 Apache doesn't know what to do with it.
 
 Please note that a ServerName supercrunch should not lead to that
 problem since in this case supercrunch is just a string that Apache
 expects in the Host header of requests. Technically, I don't think it
 has to be a valid DNS name on the server.
 
 With this set up, I tried to run supercrunch/redmine, localhost/redmine,
 127.0.0.1/redmine. None worked.
 
 Please, describe what None worked exactly means and what you find in
 the VirtualHost-specific log files I proposed to set up
 
 J.
 -- 
 I'm being paid to act weirdly.
 [Agree]   [Disagree]
  http://www.slowlydownward.com/NODATA/data_enter2.html



-- 
If I was a supermodel I would give all my cocaine to the socially
excluded.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


Re: Another system management tool to disappear.

2015-08-30 Thread Doug



On 08/30/2015 03:33 PM, T.J. Duchene wrote:



On 08/30/2015 02:44 PM, The Wanderer wrote:

On 2015-08-30 at 15:08, Renaud (Ron) OLGIATI wrote:


Sadly, considering the effort that has been spent (wasted ?)
developing systemd, the only fix would be to avoid adopting it, or
later to get rid of it completely

Not to mention that some of the changes which would be necessary to fix
some parts of the design have already been pre-rejected by upstream;
they've specifically and explicitly stated that patches to remove the
interdependencies among the various components will not be accepted.


I honestly doubt most of the people on this list would attempt to upstream a 
patch to the systemd project, even if they had one.   If you personally prefer 
a Linux system sans systemd, it is very possible.



I know this because I have actually built 95% of base Linux from source by hand 
- multiple times  -  over the last 17 years. In my opinion, if you don't want 
to take the effort to do the work, then you simply



ave to accept other's decisions regarding what they compiled in.



/snip/

That's easy for you to say, since you are obviously a programmer. The rest of 
us may never have programmed anything, and C just looks like some foreign 
language --which it is!
What we would like is stability, and until Poettering started messing with 
Linux, we pretty much had it--at least in any given distro.

--doug



Re: Another system management tool to disappear.

2015-08-30 Thread Joel Rees
On Sat, Aug 29, 2015 at 12:16 AM, Renaud  OLGIATI
ren...@olgiati-in-paraguay.org wrote:
 Systemd-Linux to get rid of su:

 https://tlhp.cf/lennart-poettering-su/

 Is this a trend to make _all_ the GNU-Linux tools disappear, and have 
 _everything_
 incorporated into systemd ?

 Cheers,

 Ron.

My interpretation of that blog post ranges from

He's trying to imitate Ted Unangst's doas, but decided sudo isn't
a good enough target.

to

This is more of his attempting to extend the ability of systemd to
completely wrap the kernel.

As a median interpretation, their group has tried to use su for
something they have in their roadmap, recognized the spec puts su
outside their planned use, and is working on a tool similar to su,
which provides a bit more of the fine-grained control they think they
need (and less of the fine-grained control they don't want).

And, because of the way they do things, they are currently selling
their shiny new tool as an alternative to su, which means they may
soon be coming around trying to get support from a lot of young,
ambitious new programmers willing to develop a whole lot of code to
replace a lot of system scripts that use su.

Just more of that re-inventing the wheel thing over there. Since
debian has decided to bring systemd in, it will affect us, but
probably not this year.

Joel Rees

Be careful when you look at conspiracy.
Arm yourself with knowledge of yourself, as well:
http://reiisi.blogspot.jp/2011/10/conspiracy-theories.html



Re: localhost sin acceso

2015-08-30 Thread Ricardo Mendoza
En los tres caso no carga nada, solo una pagina de error, quiero que se vea
una pagina web que esta en /var/www, en los registros de apache aparece
esto.

[Sat Aug 29 08:21:35.836708 2015] [mpm_event:notice] [pid 736:tid
3073611584] AH00489: Apache/2.4.10 (Debian) configured -- resuming normal
operations
[Sat Aug 29 08:21:35.836748 2015] [core:notice] [pid 736:tid 3073611584]
AH00094: Command line: '/usr/sbin/apache2'
[Sat Aug 29 09:06:29.477905 2015] [mpm_event:notice] [pid 736:tid
3073611584] AH00491: caught SIGTERM, shutting down
[Sat Aug 29 09:32:19.887640 2015] [mpm_event:notice] [pid 1285:tid
3073558336] AH00489: Apache/2.4.10 (Debian) configured -- resuming normal
operations
[Sat Aug 29 09:32:20.102357 2015] [core:notice] [pid 1285:tid 3073558336]
AH00094: Command line: '/usr/sbin/apache2'
[Sat Aug 29 17:10:33.377460 2015] [mpm_event:notice] [pid 1285:tid
3073558336] AH00491: caught SIGTERM, shutting down
[Sat Aug 29 18:51:08.321644 2015] [mpm_event:notice] [pid 757:tid
3073480512] AH00489: Apache/2.4.10 (Debian) configured -- resuming normal
operations
[Sat Aug 29 18:51:08.598057 2015] [core:notice] [pid 757:tid 3073480512]
AH00094: Command line: '/usr/sbin/apache2'
[Sat Aug 29 20:38:04.859974 2015] [mpm_event:notice] [pid 757:tid
3073480512] AH00491: caught SIGTERM, shutting down
[Sat Aug 29 17:07:26.969024 2015] [mpm_event:notice] [pid 1266:tid
3074250560] AH00489: Apache/2.4.10 (Debian) configured -- resuming normal
operations
[Sat Aug 29 17:07:27.002327 2015] [core:notice] [pid 1266:tid 3074250560]
AH00094: Command line: '/usr/sbin/apache2'
[Sun Aug 30 00:17:06.066158 2015] [mpm_event:notice] [pid 1266:tid
3074250560] AH00491: caught SIGTERM, shutting down
[Sun Aug 30 09:44:28.387672 2015] [mpm_event:notice] [pid 1317:tid
3073488704] AH00489: Apache/2.4.10 (Debian) configured -- resuming normal
operations
[Sun Aug 30 09:44:29.076761 2015] [core:notice] [pid 1317:tid 3073488704]
AH00094: Command line: '/usr/sbin/apache2'
[Sun Aug 30 09:49:29.127354 2015] [mpm_event:notice] [pid 1317:tid
3073488704] AH00493: SIGUSR1 received.  Doing graceful restart
AH00558: apache2: Could not reliably determine the server's fully qualified
domain name, using ::1. Set the 'ServerName' directive globally to suppress
this message



El 30 de agosto de 2015, 6:00, Camaleón noela...@gmail.com escribió:

 El Sat, 29 Aug 2015 13:11:37 -0500, Ricardo Mendoza escribió:

 Corrijo el html y top-posting.

  El 29 de agosto de 2015, 12:48, Camaleón noela...@gmail.com escribió:
 
  El Sat, 29 Aug 2015 12:33:11 -0500, Ricardo Mendoza escribió:
 
  (ese html...)
 
   Saludos, hace un tiempo intente montar un servidor web, de ese
   intento quedo inutilizado localhost, como puedo volver a habilitar el
   acceso a localhost,gracias
 
  ¿En qué sentido quedó inutilizado? Si explicas un poco más lo que
  sucede y lo que quieres hacer, mejor :-)

  el problema esta en el acceso a la direccion localhost en el url del
  navegador, cuando intento cargar paginas que estan ubicadas en /var/ww/.

 Veamos... doy por hecho que tienes un servidor web apache funcionando
 pero tengo la duda de lo que sucede cuando en el navegador pones:

 http://localhost
 o
 http://127.0.0.1
 o
 http://localhost/misitio

 Dependiendo de la configuración que hayas hecho (¿virtual host?) los dos
 primeros enlaces deben cargar el sitio que tengas como predeterminado
 (@default) y el tercero debe cargar la página principal del misitio.

 ¿Qué es lo que se carga en los 3 casos y qué es lo que quieres que pase?

 En cualquier caso, revisa siempre los registros de Apache que te dirán
 qué es lo que está pasando.

 Saludos,

 --
 Camaleón




Re: Som no debian

2015-08-30 Thread Juscelino Cordeiro
Tb to com esse msm problema. Antes ficava toda hora mudando pro volume maximo. 
Aperta alt+ f2 e digita kmix q ele volta mas acho q depois de um tempo ta 
sumindo novamente. 

Enviado do meu iPhone

 Em 29/08/2015, às 20:58, Manoel Pedro de Araújo mpara...@gmail.com escreveu:
 
 Olá, estou com um problema de som no debian. Quando eu ligo
 o som de inicialização do KDE nao aparece, mas o som
 nas nas multimidia estão normalmente.
 
 Alguem sabe resolver este problema?
 
 -- 
 Manoel
 



Re: Another system management tool to disappear.

2015-08-30 Thread Joel Rees
On Sun, Aug 30, 2015 at 5:47 PM, Reco recovery...@gmail.com wrote:
  Hi.

 On Sat, 29 Aug 2015 20:30:58 -0400
 Gene Heskett ghesk...@wdtv.com wrote:

 On Saturday 29 August 2015 10:39:07 Reco wrote:

   Hi.
 
  On Sat, 29 Aug 2015 09:49:55 -0400
 
  Gene Heskett ghesk...@wdtv.com wrote:
 If su goes away, IMNSHO, it will be such a PITA that it will
 encourage far more people to just give up and run their machines
 as root full time.  And I don't believe for a millisecond that
 is the effect intended.
   
They provide some systemd-specific kludge instead of su. So it's
not that bad.
  
   I don't recall recognizing that being discussed yet.
 
  Please read the bugreport. It's all there.
 
  https://github.com/systemd/systemd/issues/825
 
And, given the current systemd adoption rate in Debian, I'd say
that we, stable users, have 3-4 years before that machinectl
login thing will be available to us.
   
 So, if su goes away,  how do I accomplish those tasks in a
 suitable manner that will not bore a hole in the user sandbox?
   
If it comes to this (i.e 'su' will go away) - I just use busybox
(which has perfectly working implementation of su without the
fancy bits). I.e.
   
busybox su -
  
   Command not found. Wheezy 32 bit install.
 
  Obviously for this command to work it's required to install busybox.
  I'd recommend busybox-static package.
 
  Reco

 Installed it, suid problems:

 gene@coyote:~$ busybox su amanda
 su: must be suid to work properly
 gene@coyote:~$ busybox su -
 su: must be suid to work properly

 Is it still finding the system su first?

 No. The 'problem' is exactly what it tolds. Meaning:

 1) Original su is suid root-owned binary:

 $ ls -la /bin/su
 -rwsr-xr-x 1 root root 40168 Nov 21  2014 /bin/su

 2) Busybox, on the other hand - is not:

 $ ls -la /bin/busybox
 -rwxr-xr-x 1 root root 1837008 Feb 19  2015 /bin/busybox


 So, *root*-invoked busybox su should behave exactly like original
 su. Everyone other than root are told to get lost.

 Note that:

 1) Setting suid bit on busybox is *extremely* bad idea. Don't do it
 ever do it (as busybox provides *much* more than su).

 2) Your way of using su you've described should not be affected by this
 little inconvinience as you become root first, and do su second.

Being curious, myself, about this question, I did a web search on
suid busybox and found this interesting tidbit:

http://www.softforge.de/bb/suid.html

which refers one compile-time configuration, and to a convenient
configuration file:

/etc/busybox.conf

I would assume that, if you have installed busybox, you would have man
pages that explain this, as well. But I don't have a debian system
booted to check, at the moment, sorry. After a search on the web,
maybe it is not easy to find in the man pages, after all.

I must say, my personal impression of busybox has always been that I
would rather simply have enough persistent storage to have a proper
userland -- that it would be indicated only on embedded stuff where
flash RAM and other persistent storage is extremely limited for some
reason or other.

Curt seems to be using it in other ways -- which might be interesting
to hear more about?

-- 
Joel Rees

Be careful when you look at conspiracy.
Arm yourself with knowledge of yourself, as well:
http://reiisi.blogspot.jp/2011/10/conspiracy-theories.html



Re: Configure Postfix *as* a smart host?

2015-08-30 Thread Martin Smith

On 30/08/2015 00:13, Bob Bernstein wrote:
I have an instance of Wheezy running on a VPS (for years) and only now 
have decided I want to take advantage of the possibility of using it 
as a smarthost for my home machines, instead of what my cable company 
makes available, which I confess works just fine.


For example, I have a Jessie system here at home running Alpine, which 
is very flexible in how one may specify an SMTP host. Of course, I 
don't need authentication (or the submit port) to use my cable 
company's smarthost. But when I point alpine at my VPS for smtp 
services (as it were) it tells me that authentication is not offered, 
this despite my following to the letter (or so I thought) the 
directions for setting up SASL on Postfix.


I have cleared the way for port 587 both ways on both the VPS and on 
my home router. Here's what happens (with phonied-up data):


$ telnet boris.fuzzywuzzy.com 587
Trying 12.34.123.123...
Connected to boris.fuzzywuzzy.com.
Escape character is '^]'.
220 boris.fuzzywuzzy.com ESMTP Postfix (Debian/GNU)
^]
telnet quit
Connection closed.

Not a hint of the Postfix config I've done, under the inspiration,
mostly, of this page:

http://postfix.state-of-mind.de/patrick.koetter/smtpauth/smtp_auth_mailservers.html 



Extra-Credit question: why does debian ship postfix with an empty
/etc/postfix/sasl directory?


Thanks,

You might find more answers at www.postfix.org, they also have a very 
good mailing list,

which I can recommend



Re: something at init is taking about 31s to finish

2015-08-30 Thread briand
On Sun, 30 Aug 2015 13:18:19 +0200
Sven Hartge s...@svenhartge.de wrote:

 bri...@aracnet.com wrote:
  On Sun, 30 Aug 2015 04:25:36 +0200 Sven Hartge s...@svenhartge.de wrote:
  bri...@aracnet.com wrote:
 
  There's no way anyone can help until i can get a trace of what's
  going on at boot.
  
  Jessie or newer? With systemd?
  
  systemd-analyze blame
 
 
   29.597s networking.service
3.256s systemd-suspend.service
 
  aha.  So I need to dig deeper into networking.service
 
 networking.service is /etc/init.d/networking. Somehow the parsing and
 acting upon /etc/network/interfaces is slow.
 
 Please share the contents of /etc/network/interfaces, maybe something
 odd stands out in there.
 

cat /etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
allow-hotplug eth0
iface eth0 inet dhcp

there's this in dmesg:

[6.210098] EXT4-fs (sda7): mounted filesystem with ordered data mode. Opts: 
(null)
[   35.827945] r8169 :03:00.0: firmware: failed to load 
rtl_nic/rtl8168f-1.fw (-2)
[   35.827963] r8169 :03:00.0: Direct firmware load failed with error -2
[   35.827965] r8169 :03:00.0: Falling back to user helper
[   35.828580] r8169 :03:00.0 eth0: unable to load firmware patch 
rtl_nic/rtl8168f-1.fw (-12)

so it is the dreaded r8169 firmware crappola.  the system works fine not 
loading it.  is there any way to tell the module to not even try and load it ?

Brian



Re: laptop protection in an office network

2015-08-30 Thread Brian
On Sun 30 Aug 2015 at 09:31:50 +0200, to...@tuxteam.de wrote:

 On Sat, Aug 29, 2015 at 11:00:51PM +0100, Brian wrote:
 
 [...]
 
  None of these. Bonjour plays a central role in printing over a network.
  Discarding it as a very useful tool isn't very helpful.
 
 It aids in printer discovery. If your configuration is somewhat static,
 it's totally superfluous. In a highly dynamic environment it's convenient.

The distinction between static and dynamic is a useful one when it comes
to printing. With a policy of only printing to a local USB connected
printer or a designated server in client.conf the need for service
discovery with avahi-daemon is, as you say, superfluous. Whether it can
be removed depends on the system setup. On GNOME its purging will take
gnome-core with it. That doesn't look good. :), so disabling it looks a
better bet.

In a dynamic environment (moving from site to site, for example) I'd see
the status of avahi-daemon as essential, not simply convenient. Setting
up a static configuration in such a circumstance may not be easy. There
is no assurance that anyone even knows the server address and, for some
devices such as a mobile phone, it wouldn't do you much good if they
did.

 I know for sure: my printing runs perfectly fine without Avahi (and
 without CUPS, at that). I've just two printers I've to talk to, work
 and home. Once they are configured, LPRNG does the rest.

This is a static configuration equivalent to the CUPS one outlined
above. It has the same drawbacks. There is no reason why either setup
shouldn't produce a satisfactory printing experience. I believe LPRNG
cannot do service discovery so a roaming user may have the trouble of
needing to get a server name for every new situation.

 Pick your tools. Know why.

Indeed; but banning one of them reduces the possibilities of effortless
printing.



Re: Another system management tool to disappear.

2015-08-30 Thread Andrew McGlashan
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 29/08/2015 8:49 AM, T.J. Duchene wrote:
snip rubbish

Lennart is the /main/ reason systemd exists; vocal or not.

The linux kernel is bloated, it shouldn't be as large IMHO either.  It
too goes against the *NIX way

Read Lennart's own blog, you'll see that he is in the business of
making Linux his own; thus my coined phrase Lennart's Linux.

I want no part of Lennart Linux and I don't want ANY feature creep to
lessen my freedom of choice for any essential component on my systems.

Once you take in systemd, you are going to get to the stage that it
will be necessary whether you like it or not.

And ANYONE whom speaks against systemd is, quite simply, just like one
who utters the name Voldermort in the Harry Potter story.  Both are
just as evil, but one is purely fictional.

Kind Regards
AndrewM
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iF4EAREIAAYFAlXjGooACgkQqBZry7fv4vuT+gEAsMhRA4r2kxXAKRXFIwyBgB76
jx0zF5WQzwQPYQ2Jg98A/iFC1cqvD8+irElZ3llsB2194FnU/WMrxofbboNV2K2W
=qEN/
-END PGP SIGNATURE-



Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sun, Aug 30, 2015 at 03:07:44PM +0100, Brian wrote:
 On Sun 30 Aug 2015 at 09:31:50 +0200, to...@tuxteam.de wrote:
 
  On Sat, Aug 29, 2015 at 11:00:51PM +0100, Brian wrote:
  
  [...]
  
   None of these. Bonjour plays a central role in printing over a network.
   Discarding it as a very useful tool isn't very helpful.
  
  It aids in printer discovery. If your configuration is somewhat static,
  it's totally superfluous. In a highly dynamic environment it's convenient.
 
 The distinction between static and dynamic is a useful one when it comes
 to printing. With a policy of only printing to a local USB connected
 printer or a designated server in client.conf the need for service
 discovery with avahi-daemon is, as you say, superfluous. Whether it can
 be removed depends on the system setup. On GNOME its purging will take
 gnome-core with it. That doesn't look good. :), so disabling it looks a
 better bet.

I remember something like that. Actually, my wrangling to get rid of Avahi,
and the realization of how intertwined things had become was the first nail
in Gnome's coffin (for me, that is!). A couple more nails, and I'm now
Gnome-free. Farewell, it was nice while it lasted. Too complex, to many
dependencies and too hard to debug [1]

 In a dynamic environment (moving from site to site, for example) I'd see
 the status of avahi-daemon as essential, not simply convenient [...]

  I know for sure: my printing runs perfectly fine without Avahi [...]

 This is a static configuration equivalent to the CUPS one outlined
 above. It has the same drawbacks. There is no reason why either setup
 shouldn't produce a satisfactory printing experience. I believe LPRNG
 cannot do service discovery so a roaming user may have the trouble of
 needing to get a server name for every new situation.

Correct. LPRNG doesn't service discovery. I do that discovery (e.g. I
walk in the office to the copier-printer and look at the label slapped
on it where its IP is printed on). I gladly do that discovery.

  Pick your tools. Know why.
 
 Indeed; but banning one of them reduces the possibilities of effortless
 printing.

Banning is a loaded word. I choose simplicity (and am ready to pay some
price for it). I don't tell others to do likewise, I just offer help in
making a choice. I can only ban it from my computer.

- - - - -
[1] A case in point: at home we have a postscript network printer.
For one file, my SO's computer (a fresh Debian installation, with
all the Mate and Cups goodnes isn't able to print one specific PDF.
My box, with LPRNG and apsfilter does print it. The CUPS log files
say that yes, everything is fine. I've the hunch that the printer's
Postscript implementation is crappy, and the CUPS variant is sending
some Postscript Level 2 the printer can't digest (it prints an error
message instead of the wanted document, so it seems to be the interpreter
in the printer freaking out). With LPRNG/apsfilter, I'd be able to
debug the thing. With all this CUPS mess, I don't even know where
to start. Ick.

Regards
- -- tomás
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlXjLx4ACgkQBcgs9XrR2kZTGgCfdLm6A73a718kWqyJx6HjiDR5
ZG4An2VHT4+16jfSPhQydfpvjFhUtTc7
=3vun
-END PGP SIGNATURE-



Re: Another system management tool to disappear.

2015-08-30 Thread Joel Rees
On Sun, Aug 30, 2015 at 8:23 PM, claude juif claude.j...@gmail.com wrote:


 2015-08-29 13:35 GMT+02:00 Joel Rees joel.r...@gmail.com:

 On Sat, Aug 29, 2015 at 12:25 AM, claude juif claude.j...@gmail.com
 wrote:
  Hi,
 
  2015-08-28 17:16 GMT+02:00 Renaud OLGIATI
  ren...@olgiati-in-paraguay.org:
 
  Systemd-Linux to get rid of su:
 
  https://tlhp.cf/lennart-poettering-su/
 
  Is this a trend to make _all_ the GNU-Linux tools disappear, and have
  _everything_
  incorporated into systemd ?
 
 
  Troll mode: ON
 
  What he explains in the blogpost you link make sense. So let's give it a
  try
  ;)

 So, do you mean to say that, when you say the blog post linked to
 makes sense, you are intending to be trolling?


 No sorry it was exactly the opposite. I was afraid about a new troll around
 systemd.

Well, where I'm from, troll_mode is a property of the OP, and only the
OP can set it. We might read it between the lines, but we can't
actually set it.

We, after the fact, can assert troll_warning or such, and the least
processor-intensive way to assert that would be to use interweaved
response, with the troll_warning flag above the quoted text.

Lisi might tell me I'm being too pedantic.

-- 
Joel Rees

Be careful when you look at conspiracy.
Arm yourself with knowledge of yourself, as well:
http://reiisi.blogspot.jp/2011/10/conspiracy-theories.html



Re: Another system management tool to disappear.

2015-08-30 Thread Ron
On Mon, 31 Aug 2015 01:00:27 +1000
Andrew McGlashan andrew.mcglas...@affinityvision.com.au wrote:

 And ANYONE whom speaks against systemd is, quite simply, just like one
 who utters the name Voldermort in the Harry Potter story.  Both are
 just as evil, but one is purely fictional.

With due respect, m'lud, it is not he who is evil, who dares utter the name of 
He Who Must Not Be Named.

HWMNBN, and his followers, are another matter...
 
Cheers,
 
Ron.
-- 
 C'est bien plus beau lorsque c'est inutile.
   -- Edmond Rostand

   -- http://www.olgiati-in-paraguay.org --
 



Re: what is the static ip address I assigned to eth0?

2015-08-30 Thread David Wright
Quoting Reco (recovery...@gmail.com):
 On Fri, 28 Aug 2015 14:35:09 +0100
 Brian a...@cityscape.co.uk wrote:
  On Fri 28 Aug 2015 at 14:45:32 +0300, Reco wrote:
   On Fri, 28 Aug 2015 12:09:08 +0100
   Brian a...@cityscape.co.uk wrote:
On Fri 28 Aug 2015 at 10:01:59 +, Curt wrote:
 On 2015-08-28, David Wright deb...@lionunicorn.co.uk wrote:
 
  $ host localhost
  Host localhost not found: 3(NXDOMAIN)
  $ ping localhost
  PING localhost (127.0.0.1) 56(84) bytes of data.
  64 bytes from localhost (127.0.0.1): icmp_req=1 ttl=64 time=0.032 ms
 
 curty@einstein:~$ host localhost
 localhost has address 127.0.0.1
 localhost has IPv6 address ::1

To complete the picture:

  brian@desktop:~$ dig -x 127.0.0.1

  ;  DiG 9.9.5-9-Debian  -x 127.0.0.1
[...]
  ;; ANSWER SECTION:
  1.0.0.127.in-addr.arpa. 10800   IN  PTR localhost.
[...]
host and dig use only the DNS.

Elimar's suggestion to use 'host $(hostname)' will work if hostname is
a FQDN. But it shouldn't (or wouldn't) be on a stock Debian system.
   
   Not unless said 'stock Debian system' has 'search domain' stanza
   in /etc/resolv.conf.
  
  Does search example.org count? :)
 
 It should count for the hosts in this domain. Provided, of course, that
 one needs to resolve 'bare' hostnames (i.e. non-FQDN).
 
  What is not understandable (to me) is why 'host localhost' resolves for
  some but not for others and why it is thought 'host $(hostname)' should
  resolve in the DNS.
 
 Stock Debian BIND configuration includes this wonderful snippet
 (/etc/bind/db.local):
 
 ;
 ; BIND data file for local loopback interface
 ;
 $TTL604800
 @   IN  SOA localhost. root.localhost. (
   2 ; Serial
  604800 ; Refresh
   86400 ; Retry
 2419200 ; Expire
  604800 )   ; Negative Cache TTL
 ;
 @   IN  NS  localhost.
 @   IN  A   127.0.0.1
 @   IN  ::1
 
 Translating this to English - every BIND installed on Debian considers
 itself the final authority on localhost zone and always returns
 127.0.0.1 for A queries (IPv4) and ::1 for  queries (IPv6).
 Other Linux distributions can store zone files elsewhere, but the
 principle is the same.
 Interpreting /etc/bind/db.127 (PTR entries) is left for an exercise for
 the readers.
 
 So - 'host localhost' *should* work given an ideal world (because in
 ideal world everyone will use an ideal DNS, which is BIND).

Why on earth would I want to use BIND on my LAN at home? Just so I
have to read and understand RFC1035? No, I just put the hostnames
and addresses into /etc/hosts. (And script it because I have five
to do.)

Debian correctly puts   127.0.0.1 localhost   into /etc/hosts and
hosts: files mdns4_minimal [NOTFOUND=return] dns
into /etc/nsswitch.conf. So it's the hosts file that resolves
localhost. DNS is not involved. BIND has to know the answer *in case*
it's asked, not because it's *got to be* asked.

My earlier posting (included above) was to show that, of the many
suggestions made in this thread, host was not a good choice on a
typical correctly-configured system.

Cheers,
David.



Re: the IBM keyboard

2015-08-30 Thread Carl Fink
On Sun, Aug 30, 2015 at 07:54:11PM -0500, rlhar...@oplink.net wrote:

 Eventually, at the stroke of midnight on 31 December A.D. 1999, M$ Word
 5.0 for DO$ began writing garbage to the data files.  This is one of the
 very few genuine Y2K bugs.  M$ had no patch, but offered instead a free
 copy of Word 5.5.  But who in his right mind would migrate to 5.5?  Word
 5.0 was the last version of Word for DO$ which could be used without aid
 of the rodent, and a rodent is anathema to efficiency.

This is not supported by evidence, e.g.
http://facweb.cs.depaul.edu/sjost/csc423/examples/anova/efficiency.pdf

Jacob Nielsen has argued that people _feel_ more efficient using just the
keyboard, but objective measurements don't agree.
-- 
Carl Fink   nitpick...@nitpicking.com 

Read my blog at blog.nitpicking.com.  Reviews!  Observations!
Stupid mistakes you can correct!



Re: Adapter Names on Stretch [OT]

2015-08-30 Thread Gene Heskett
On Sunday 30 August 2015 14:50:54 David Wright wrote:

 Quoting Gene Heskett (ghesk...@wdtv.com):
  You may well be correct, but to my grandfather they were loaned.  I
  do know that when they left, each was equipt with a good sturdy
  tag/label bareing the owners name  address, well sealed against the
  elements.
 
  I would suspect that the possibility of a little history rewriting
  may have been done over the last 70 years to lesson the language
  from loan to gift.  Recall as always, that the history of a war
  is written by the winners.

 That's difficult to do with contemporary newspaper appeals:

 https://news.google.com/newspapers?nid=861dat=19401112id=vDFSIBA
Jsjid=EjYNIBAJpg=3629,1766022hl=en

 https://news.google.com/newspapers?nid=1314dat=19401208id=mChWIB
AJsjid=CuQDIBAJpg=6924,2616059hl=en

Both of those are seriously close to the bottom of the pile in what we 
call the morgue.  And while it might be possible to do some bit tweeking 
to clean up a blind offset plate, it would sure be a thankless job to 
rewrite those now digital images.

And its dates (Dec 1940 etc) mean that I was just barely 6 years old, so 
I obviously never had a chance to see those articals first hand.  So I 
guess maybe my grandfather may have said what he wished would happen.  
That would have to be a tad out of character for him IMO ubless he was 
horse trading. He rarely came back from town driving the same team he 
left with.

One thing he did pass down thru his 2nd daughter, to me, is a decent IQ.  
That daughter, my mother, was the only girl in the class on aviation 
technology at Des Moines Technical High School, in 1929. When a little 
boy asked a question, if she did not know the answer, she did know where 
the library was, so I was reading high school physics books by the time 
we moved to town to work loading ammo during WW-II. ISTR that was early 
in '42.

 (The latter pops up one column to the right of the story's start.)

Thank you for digging that up.  It does I believe, lay that story to 
rest.

 Cheers,
 David.


Cheers, Gene Heskett
-- 
There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order.
-Ed Howdershelt (Author)
Genes Web page http://geneslinuxbox.net:6309/gene



Re: laptop protection in an office network

2015-08-30 Thread Martin Read

On 30/08/15 03:20, rlhar...@oplink.net wrote:

Back in the 1960's and 1970's, manufacturers such as Honeywell and Cherry
made keyswitches with a life rating in the tens of millions or even
hundreds of millions of keystrokes.


Cherry still *are* (or at some point resumed) making mechanical 
keyswitches with a rated life in the tens of millions, and the Internet 
is full of mail-order vendors selling keyboards (from several different 
manufacturers) built with those Cherry keyswitches.




DVD authoring software tested, DVDStyler wins

2015-08-30 Thread Joel Roth
For anyone who may have reason to deal with this
antiquated, anticloud technology, I needed to
author a couple disks.

I tried videotrans, tovid. Maybe I didn't understand enough
to use videotrans, and would get better result if I tried
again. Tovid was was disappointment, after laying out a DVD,
the codec doubled the file size, so now it wouldn't fit on
the disc.

Bombono looks good in the youtube tutorial, but is
unmaintained.  I had problems, again disappointment after
getting DVD menus and clips created, and crashing later in
the process.

Cross-platform DVDStyler didn't install on my debian system,
because some probably upgraded-related sid package
conflicts, what I tested was on our iMac. (This was with an
older OSX, 10.6.8, which wouldn't accommodate the newest
version 2.9, but 2.4.1 did install.)

Debian has much newer available, so should be all this and
more. I found it helpful that there was an auto setting for
video transcoding compression that ensures the material will
fit on disc.  Also, it caches the transcoded files, so that
the process of updating the menus and creating a new disc
image goes quickly.

I wanted to use 720x480 m2v and separate mpa files supplied
to me, I was told in DVD-ready form, however tovid had
complained the m2v wasn't DVD compatible. Must be some
further transformation to VOB. So instead of multiplexing
them to import, ended up transcoding from .mov files I had
for the same job.

It took me a long time to figure out
that clicking on a highlight color (replacing it with a fine
black X) was needed for the palette to update the color.

Otherwise, the WxWidget GUI was okay.  There were a few
bugs.  A few times I had to exit and restart the app. Once
the OS needed to reboot in order for DVDStyler to startup
properly. Once I needed to remove and re-install the app to
get it to continue. I did managed to coax it through authoring
the two discs.

I like the look of WxWidget, perhaps will use it one day
in one of my projects...


Cheers,

Joel

-- 
Joel Roth
  



the IBM keyboard

2015-08-30 Thread rlharris
On Sun, August 30, 2015 10:42 pm, Doug wrote:
 What you need is an IBM model M keyboard. They are refurbished and sold
 by Clicky Keys:
 http://www.clickykeyboards.com/

I learned to touch-type in 1963, in highschool, on a manual keybar machine
with QWERTY keyboard and blank keycaps; I was the best typist in the class
(90 to 100 wpm).  Over the years I have used manual and portable keybar
machines and the marvelous IBM Correcting Selectric II.  Then I moved, in
succession, to an IBM memory typewriter, an early dedicated word
processing system by Exxon, and then to a very expensive professional word
processing system, which I believe was manufactured by
Addressorgraph-Multigraph.  My next system was a floppy-based IBM-PC
running version 1.0 of M$ Word for DO$, which I purchased sometime in the
interval 1980-1983.

Thankfully, shortly after acquiring the IBM-PC, I switched to the Dvorak
keymap, using dedicated (custom firmware) Dvorak keyboards.  But by the
time that I had worn out several of the dedicated keyboards, keymapping
software became available for the M$ DO$ environment.

Eventually, at the stroke of midnight on 31 December A.D. 1999, M$ Word
5.0 for DO$ began writing garbage to the data files.  This is one of the
very few genuine Y2K bugs.  M$ had no patch, but offered instead a free
copy of Word 5.5.  But who in his right mind would migrate to 5.5?  Word
5.0 was the last version of Word for DO$ which could be used without aid
of the rodent, and a rodent is anathema to efficiency.

Hundreds of Word 5.0 documents had to be abandoned, because, even in the
present day, while it is possible to convert Word 5.0 documents to plain,
unformatted ASCII, there appears to be no automated method to convert the
convoluted proprietary M$ scheme of encoding to another format while
preserving (via markup) vital formatting such as italic and boldface.  And
the labour of manual editing to add markup for italic and boldface was
prohibitive, not to mention the subsequent proofreading).

So that fiasco led me to Linux and gave me the determination never again
to fall into the trap of proprietary software and proprietary encoding
schemes.  The use of plain text and markup is the only safe and sane
approach to word processing.

==

Anyway, all this history comes to mind because I recall that there is
something really strange about the IBM keyboard -- at least to anyone who
types by touch.  Looking today at a photograph of a mode M, I think that
the problem is that IBM reduced the width of the left-hand shift key, in
order to accommodate a   key.

This is something which, for me, destroys the usefulness of the Model M. 
And keymapping cannot correct the fact that two keycaps occupy the space
in which the fingers of a touch typist expect to find only one keycap.

But this blunder is typical of IBM, who at times has done stupid things to
accommodate stupid customers.  A similar blunder was the IBM
implementation of the Dvorak keyboard for the original Selectric.  August
Dvorak arranged the keys of the numeric row in the order 751902468 .  But
IBM implemented a modified Dvorak keyboard in which the keys of the
numeric row are in the order 123456780 .  With original Dvorak layout,
numbers are typed easily and with few errors, while in the IBM layout,
even a good typist has difficulty with numbers.

By the way, xkb provides not only the modified layout, but also the
Dvorak Classic layout.

RLH

-- 
Be ware of confounding ignorance and stupidity.  Ignorance may be
corrected by instruction and education.  But there is no remedy for
stupidity.




Re: the IBM keyboard

2015-08-30 Thread rlharris
On Sun, August 30, 2015 8:18 pm, Karen Lewellen wrote:
 Oh joy!  forgive my nose, especially since I missed this post at first.
 Still, I am typing right now, this very moment, on a real IBM clicky
 keyboard! However the cable is starting to fray,  and I was wondering if I
 would be able to replace this treasure...i. have. had. this. for. a. very!
 long time. Anyway, your link to this company may be a solution and I am
 sososososo happy! thanks, Kare

If the only problem is a cable, all you need to do is find a local
technician who can replace the cable with the cable from one of the
chinese keyboards which someone has tossed into the dumpster.

Of course, most keyboards nowadays are USB.  But most of us (myself
included) have in the closet a keyboard or two which uses the old-style
connector, if that is what you need.

The technician would take the back cover off the keyboard, clip the leads
of the old cable, attach the leads of the replacement cable, and replace
the back cover.  Soldering may be necessary, but that is simple for any
technician.  A fifteen-minute repair.

For a local technicial, ask around.  Almost any amateur radio operator
should be competent.  Look around your neighbourhood for a house with a
large antenna or for a car with an amateur radio license plate.

Failing that, if you have a local radio or television station, walk in
with you keyboard in hand (and the old keyboard from which you are going
to scavange the cable) and ask to see the technician.

The cost of the repair?  A box of donuts should do it.

RLH




Re: laptop protection in an office network

2015-08-30 Thread Lisi Reisz
On Monday 31 August 2015 04:42:12 Doug wrote:
 On 08/29/2015 09:20 PM, rlhar...@oplink.net wrote:
  On Sat, August 29, 2015 8:33 pm, Gene Heskett wrote:
  On Saturday 29 August 2015 21:24:47 rlhar...@oplink.net wrote:
  Forgive me; my fingers are dyslexic.
 
  So are mine.  They don't type what I tell them to lots of the time.
  Coulnd't be the accumulated years (nearly 81) could it?
 
  Not necessarily.
 
 From time to time, I have found a sudden, large increase in the number of
 
  typographical errors in the documents which I produce.  And several
  times, investigation has revealed that the problem lies in a worn-out
  keyboard.
 
  Back in the 1960's and 1970's, manufacturers such as Honeywell and Cherry
  made keyswitches with a life rating in the tens of millions or even
  hundreds of millions of keystrokes.  Nowadays, it is becoming difficult
  to find a keyboard with a rating in the tens of thousands of keystrokes.
 
  Many manufacturers today have a poor keyswitch design which utilizes
  low-quality plastics; they depend upon a lubricant such as wax to keep
  the plunger working freely.  And when the wax wears away, the plunger
  begins to stick.  And when the plunger does not depress freely, the
  result is a multitude of typographical errors.
 
  RLH

 What you need is an IBM model M keyboard. They are refurbished and sold by
 Clicky Keys:

   http://www.clickykeyboards.com/

I use an IBM KB-9910.   Not quite as good as the Model M, nor as good as I was 
trying to find, but not bad.

I make loads of typos.  Old age?  Poor sight?  The fact that I am a lousy 
typist?  The last one certainly. The sight doesn't help.  But so far I don't 
feel that old age has exacerbated things.

Lisi



Re: something at init is taking about 31s to finish

2015-08-30 Thread Sven Hartge
bri...@aracnet.com wrote:

 [6.210098] EXT4-fs (sda7): mounted filesystem with ordered data mode. 
 Opts: 
 (null)
 [   35.827945] r8169 :03:00.0: firmware: failed to load 
 rtl_nic/rtl8168f-1.fw (-2)
 [   35.827963] r8169 :03:00.0: Direct firmware load failed with error -2
 [   35.827965] r8169 :03:00.0: Falling back to user helper
 [   35.828580] r8169 :03:00.0 eth0: unable to load firmware patch 
 rtl_nic/rtl8168f-1.fw (-12)

 so it is the dreaded r8169 firmware crappola.  the system works fine
 not loading it.  is there any way to tell the module to not even try
 and load it ?

modinfo r8169 tells me: no, there is not.

Why not just install the package firmware-realtek and be done with it?

I understand the whole oh noes, firmware is a binary blob with unknown
contents, woe me, woe me, the NSA is gonna hack me stance, but in this
case, the unknown binary blob is already active in the NIC, the firmware
file merely provides an update.

By not installing the firmware package, you are just making your life
harder without gaining anything but a delayed boot.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.



Re: the IBM keyboard

2015-08-30 Thread David Wright
Quoting Carl Fink (c...@finknetwork.com):
 On Sun, Aug 30, 2015 at 07:54:11PM -0500, rlhar...@oplink.net wrote:
 
  Eventually, at the stroke of midnight on 31 December A.D. 1999, M$ Word
  5.0 for DO$ began writing garbage to the data files.  This is one of the
  very few genuine Y2K bugs.  M$ had no patch, but offered instead a free
  copy of Word 5.5.  But who in his right mind would migrate to 5.5?  Word
  5.0 was the last version of Word for DO$ which could be used without aid
  of the rodent, and a rodent is anathema to efficiency.
 
 This is not supported by evidence, e.g.
 http://facweb.cs.depaul.edu/sjost/csc423/examples/anova/efficiency.pdf

I'm struggling to see how this reference backs up your assertion.
The use-case is not word-processing (Word) where both hands are
expected to be on the keys most of the time. This study prepared the
hands on the mouse (for the mouse method) in advance (penultimate
paragraph). This might be sensible if you were dealing with
Illustrator/CorelDraw etc but not word processing.

Looking at the size of some toolbars nowadays, and the proportion of
real estate left for the text, it's arguable that the desirability of
a toolbar is moot. So the very last sentence supports the keyboard.

Moving back to the antepenultimate paragraph, 90 trials might be an
adequate number for some ad hoc banking application involving US
states, but can hardly be considered adequate for a power-user (like
RLH) of a textual application where individual commands that have been
used hundreds of times will be typed without any conscious effort at
all, rather like a pianist plays ornaments.

 Jacob Nielsen has argued that people _feel_ more efficient using just the
 keyboard, but objective measurements don't agree.

This statement has no context by which to judge it.

Cheers,
David.



Re: the IBM keyboard

2015-08-30 Thread Karen Lewellen

Oh joy!  forgive my nose, especially since I missed this post at first.
Still, I am typing right now, this very moment, on a real IBM clicky 
keyboard!
However the cable is starting to fray,  and I was wondering if I would be 
able to replace this treasure...i. have. had. this. for. a. very! long 
time.
Anyway, your link to this company may be a solution and I am sososososo 
happy!

thanks,
Kare


On Sun, 30 Aug 2015, rlhar...@oplink.net wrote:


On Sun, August 30, 2015 10:42 pm, Doug wrote:

What you need is an IBM model M keyboard. They are refurbished and sold
by Clicky Keys:
http://www.clickykeyboards.com/


I learned to touch-type in 1963, in highschool, on a manual keybar machine
with QWERTY keyboard and blank keycaps; I was the best typist in the class
(90 to 100 wpm).  Over the years I have used manual and portable keybar
machines and the marvelous IBM Correcting Selectric II.  Then I moved, in
succession, to an IBM memory typewriter, an early dedicated word
processing system by Exxon, and then to a very expensive professional word
processing system, which I believe was manufactured by
Addressorgraph-Multigraph.  My next system was a floppy-based IBM-PC
running version 1.0 of M$ Word for DO$, which I purchased sometime in the
interval 1980-1983.

Thankfully, shortly after acquiring the IBM-PC, I switched to the Dvorak
keymap, using dedicated (custom firmware) Dvorak keyboards.  But by the
time that I had worn out several of the dedicated keyboards, keymapping
software became available for the M$ DO$ environment.

Eventually, at the stroke of midnight on 31 December A.D. 1999, M$ Word
5.0 for DO$ began writing garbage to the data files.  This is one of the
very few genuine Y2K bugs.  M$ had no patch, but offered instead a free
copy of Word 5.5.  But who in his right mind would migrate to 5.5?  Word
5.0 was the last version of Word for DO$ which could be used without aid
of the rodent, and a rodent is anathema to efficiency.

Hundreds of Word 5.0 documents had to be abandoned, because, even in the
present day, while it is possible to convert Word 5.0 documents to plain,
unformatted ASCII, there appears to be no automated method to convert the
convoluted proprietary M$ scheme of encoding to another format while
preserving (via markup) vital formatting such as italic and boldface.  And
the labour of manual editing to add markup for italic and boldface was
prohibitive, not to mention the subsequent proofreading).

So that fiasco led me to Linux and gave me the determination never again
to fall into the trap of proprietary software and proprietary encoding
schemes.  The use of plain text and markup is the only safe and sane
approach to word processing.

==

Anyway, all this history comes to mind because I recall that there is
something really strange about the IBM keyboard -- at least to anyone who
types by touch.  Looking today at a photograph of a mode M, I think that
the problem is that IBM reduced the width of the left-hand shift key, in
order to accommodate a   key.

This is something which, for me, destroys the usefulness of the Model M.
And keymapping cannot correct the fact that two keycaps occupy the space
in which the fingers of a touch typist expect to find only one keycap.

But this blunder is typical of IBM, who at times has done stupid things to
accommodate stupid customers.  A similar blunder was the IBM
implementation of the Dvorak keyboard for the original Selectric.  August
Dvorak arranged the keys of the numeric row in the order 751902468 .  But
IBM implemented a modified Dvorak keyboard in which the keys of the
numeric row are in the order 123456780 .  With original Dvorak layout,
numbers are typed easily and with few errors, while in the IBM layout,
even a good typist has difficulty with numbers.

By the way, xkb provides not only the modified layout, but also the
Dvorak Classic layout.

RLH

--
Be ware of confounding ignorance and stupidity.  Ignorance may be
corrected by instruction and education.  But there is no remedy for
stupidity.







Re: Why does Debian not recognize my USB3 disk drive?

2015-08-30 Thread rlharris
On Sun, August 30, 2015 10:21 pm, Rick Thomas wrote:
 I recently added a USB3 PCI card to my Dell Poweredge 1430 server box.
...
 Am I missing a driver for the USB3 card?
 Are some USB3 chipsets not supported?
 Am I missing something important?

Have you installed gnome-disk-utility?

RLH





Re: Som no debian

2015-08-30 Thread Isaac Ferreira Filho



On 30-08-2015 17:24, Manoel Pedro de Araújo wrote:
Ja verifiquei todas as configuraçoes. Está tudo ok. Não sei mais o que 
fazer.

não aparece como?
por um acaso aparece com uma interface ficticia ?

Abs,
yzak



Why does Debian not recognize my USB3 disk drive?

2015-08-30 Thread Rick Thomas

I recently added a USB3 PCI card to my Dell Poweredge 1430 server box.

I've tried plugging in various USB3 and USB2 devices (FLASH sticks, a WD 
MyBook 3TB external drive, etc) but they are not recognized by Debian as 
disks.


When I plug these devices into a USB2 card also on the same server, they 
are recognized, but I'm limited to USB2 data speeds on the USB3 devices.


Am I missing a driver for the USB3 card?
Are some USB3 chipsets not supported?
Am I missing something important?

Thanks for any help you can provide!
Rick

With the disk plugged into the USB2 card, I get the following


rbthomas@monk:~$ lsusb
Bus 001 Device 004: ID :0013 MacAlly
Bus 001 Device 003: ID 0557:8021 ATEN International Co., Ltd CS1764A 
[CubiQ DVI KVMP Switch]

Bus 001 Device 002: ID 0409:005a NEC Corp. HighSpeed Hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 006 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 007 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 008 Device 002: ID 1058:1230 Western Digital Technologies, Inc. My 
Book (WDBFJK0030HBK)

Bus 008 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 010 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 009 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
rbthomas@monk:~$ lspci | grep -i usb
00:1d.0 USB controller: Intel Corporation 631xESB/632xESB/3100 Chipset 
UHCI USB Controller #1 (rev 09)
00:1d.1 USB controller: Intel Corporation 631xESB/632xESB/3100 Chipset 
UHCI USB Controller #2 (rev 09)
00:1d.2 USB controller: Intel Corporation 631xESB/632xESB/3100 Chipset 
UHCI USB Controller #3 (rev 09)
00:1d.3 USB controller: Intel Corporation 631xESB/632xESB/3100 Chipset 
UHCI USB Controller #4 (rev 09)
00:1d.7 USB controller: Intel Corporation 631xESB/632xESB/3100 Chipset 
EHCI USB2 Controller (rev 09)
07:05.0 USB controller: VIA Technologies, Inc. VT82xx/62xx UHCI USB 
1.1 Controller (rev 62)
07:05.1 USB controller: VIA Technologies, Inc. VT82xx/62xx UHCI USB 
1.1 Controller (rev 62)

07:05.2 USB controller: VIA Technologies, Inc. USB 2.0 (rev 65)
08:00.0 USB controller: Renesas Technology Corp. uPD720201 USB 3.0 
Host Controller (rev 03)

But if I plug the same disk into the USB3 card, I get the following

rbthomas@monk:~$ lsusb
Bus 001 Device 004: ID :0013 MacAlly
Bus 001 Device 003: ID 0557:8021 ATEN International Co., Ltd CS1764A 
[CubiQ DVI KVMP Switch]

Bus 001 Device 002: ID 0409:005a NEC Corp. HighSpeed Hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 006 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 007 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 008 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 010 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 009 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
rbthomas@monk:~$ lspci | grep -i usb
00:1d.0 USB controller: Intel Corporation 631xESB/632xESB/3100 Chipset 
UHCI USB Controller #1 (rev 09)
00:1d.1 USB controller: Intel Corporation 631xESB/632xESB/3100 Chipset 
UHCI USB Controller #2 (rev 09)
00:1d.2 USB controller: Intel Corporation 631xESB/632xESB/3100 Chipset 
UHCI USB Controller #3 (rev 09)
00:1d.3 USB controller: Intel Corporation 631xESB/632xESB/3100 Chipset 
UHCI USB Controller #4 (rev 09)
00:1d.7 USB controller: Intel Corporation 631xESB/632xESB/3100 Chipset 
EHCI USB2 Controller (rev 09)
07:05.0 USB controller: VIA Technologies, Inc. VT82xx/62xx UHCI USB 
1.1 Controller (rev 62)
07:05.1 USB controller: VIA Technologies, Inc. VT82xx/62xx UHCI USB 
1.1 Controller (rev 62)

07:05.2 USB controller: VIA Technologies, Inc. USB 2.0 (rev 65)
08:00.0 USB controller: Renesas Technology Corp. uPD720201 USB 3.0 
Host Controller (rev 03)




Re: the IBM keyboard

2015-08-30 Thread rlharris
On Sun, August 30, 2015 9:29 pm, David Wright wrote:
 ...
 but can hardly be considered adequate for a power-user of a
 textual application where individual commands that have been used hundreds
 of times will be typed without any conscious effort at all, rather like a
 pianist plays ornaments.

In that epoch of my career I was running Window$ (95 or 98 or whatever) --
rodent and all -- on a second machine, for typesetting with Aldus (now
Adobe) PageMaker.  The work of composition, however, was done exclusively
on a DO$ machine running Word 5.0.

This all was in the day before the advent of low-cost Ethernet with
multi-conductor cables terminated in RJ-45 connectors; back then,
networking generally was done with coaxial cable.  But nonetheless, I had
a network connecting the two machines -- sneaker net.

So when an error by me or a blunder by PageMaker was discovered in the
typeset output, I would go back to the master document in Word 5.0, make
a change, and then copy the revised document file to floppy.  (I think
that, by that time, 3.5 inch floppies had become common, if not the
standard.)  Next, I would network the floppy to the drive of the Window$
machine, load the file into PageMaker, and typeset the document again.



So even still today I am amazed by the ability in Debian to make a
mouseless edit with EMacs, then, with a keystroke or two, switch to the
terminal and typeset with a single command, and finally, with another
keystroke, switch to the xdvi window and see the change -- all in a matter
of seconds.

Having learned PageMaker on the Macintosh and subsequently having migrated
to PageMaker on the IBM-PC, I can say from experience that (at least, back
then) PageMaker could not hold a candle to LaTeX.  LaTeX was far more
simple to use, and LaTeX produced far better quality of typesetting.

So in the end, that Y2K bug in M$ Word 5.0 turned out to be a great
blessing, and nothing less than Providential.

RLH




Re: the IBM keyboard

2015-08-30 Thread Karen Lewellen

Hi Doug,
What a fine idea!
I would  much rather give this gem of a company  my business than hunt 
aimlessly  for someone to repair the cable as suggested by others.
i am sure mine does not go that far back...yours must be such fun.  Will 
get the  numbers though and reach out to them.

Thanks,
kare


On Mon, 31 Aug 2015, Doug wrote:




On 08/30/2015 08:39 PM, rlhar...@oplink.net wrote:

 On Sun, August 30, 2015 8:18 pm, Karen Lewellen wrote:
  Oh joy!  forgive my nose, especially since I missed this post at first.
  Still, I am typing right now, this very moment, on a real IBM clicky
  keyboard! However the cable is starting to fray,  and I was wondering if 
  I
  would be able to replace this treasure...i. have. had. this. for. a. 
  very!

  long time. Anyway, your link to this company may be a solution and I am
  sososososo happy! thanks, Kare


The model M that I am typing on right now was made in 1964 (!) and it
has a connector for the cable, so the company that refurbishes them can
probably supply a cable, saving you the cost of a whole keyboard. Check 
yours,

of course--I don't know if they were all made this way. If you contact the
firm, you should first get all the numbers, etc. off your keyboard to
get them on board, so to speak.

--doug



 If the only problem is a cable, all you need to do is find a local
 technician who can replace the cable with the cable from one of the
 chinese keyboards which someone has tossed into the dumpster.

 Of course, most keyboards nowadays are USB.  But most of us (myself
 included) have in the closet a keyboard or two which uses the old-style
 connector, if that is what you need.

 The technician would take the back cover off the keyboard, clip the leads
 of the old cable, attach the leads of the replacement cable, and replace
 the back cover.  Soldering may be necessary, but that is simple for any
 technician.  A fifteen-minute repair.

 For a local technicial, ask around.  Almost any amateur radio operator
 should be competent.  Look around your neighbourhood for a house with a
 large antenna or for a car with an amateur radio license plate.

 Failing that, if you have a local radio or television station, walk in
 with you keyboard in hand (and the old keyboard from which you are going
 to scavange the cable) and ask to see the technician.

 The cost of the repair?  A box of donuts should do it.

 RLH










Re: Why does Debian not recognize my USB3 disk drive?

2015-08-30 Thread Rick Thomas



On 08/30/15 21:34, Rick Thomas wrote:

I’ll plug in a disk and test it next chance I get, if you think it will help.
Plugging the disk in after reboot shows nothing happening with the USB3 
card.


Plugging it into the USB2 card gets the expected

[  372.956020] usb 8-3: new high-speed USB device number 2 using ehci-pci
[  373.097430] usb 8-3: New USB device found, idVendor=05dc, 
idProduct=a838
[  373.097434] usb 8-3: New USB device strings: Mfr=1, Product=2, 
SerialNumber=3

[  373.097437] usb 8-3: Product: USB Flash Drive
[  373.097439] usb 8-3: Manufacturer: Lexar
[  373.097442] usb 8-3: SerialNumber: AALBOCEKDL6LQK8A
[  373.129075] usb-storage 8-3:1.0: USB Mass Storage device detected
[  373.129229] scsi host5: usb-storage 8-3:1.0
[  373.129364] usbcore: registered new interface driver usb-storage
[  373.143513] usbcore: registered new interface driver uas
[  374.434275] scsi 5:0:0:0: Direct-Access LexarUSB Flash 
Drive  1100 PQ: 0 ANSI: 6

[  374.434685] sd 5:0:0:0: Attached scsi generic sg4 type 0
[  374.436135] sd 5:0:0:0: [sdc] 62517248 512-byte logical blocks: 
(32.0 GB/29.8 GiB)

[  374.436998] sd 5:0:0:0: [sdc] Write Protect is off
[  374.437002] sd 5:0:0:0: [sdc] Mode Sense: 43 00 00 00
[  374.437878] sd 5:0:0:0: [sdc] Write cache: enabled, read cache: 
enabled, doesn't support DPO or FUA

[  374.453902]  sdc: sdc1 sdc2
[  374.458001] sd 5:0:0:0: [sdc] Attached SCSI removable disk




Re: Why does Debian not recognize my USB3 disk drive?

2015-08-30 Thread CaT
On Sun, Aug 30, 2015 at 09:34:41PM -0700, Rick Thomas wrote:
 On Aug 30, 2015, at 9:12 PM, CaT c...@zip.com.au wrote:
 
  On Sun, Aug 30, 2015 at 08:21:26PM -0700, Rick Thomas wrote:
  Am I missing a driver for the USB3 card?
  Are some USB3 chipsets not supported?
  Am I missing something important?
  
  Does 'dmesg' show that the drive is seen and a /dev device is allocated
  to it when you plug it into the USB3 card?
 
 There is no /dev allocated to the disk drive when plugged into the USB3 board.

Three possibilities IMO:

* cable too dodgy for USB3 but not dodgy enough for USB2 to fail :)
* card is dodgy (do you know that it actually does work?)
* drivers are dodgy (can happen - is there a newer kernel you can try?)

-- 
  A search of his car uncovered pornography, a homemade sex aid, women's 
  stockings and a Jack Russell terrier.
- 
http://www.dailytelegraph.com.au/news/wacky/indeed/story-e6frev20-118083480



Re: Why does Debian not recognize my USB3 disk drive?

2015-08-30 Thread Rick Thomas

On Aug 30, 2015, at 8:35 PM, rlhar...@oplink.net wrote:

 On Sun, August 30, 2015 10:21 pm, Rick Thomas wrote:
 I recently added a USB3 PCI card to my Dell Poweredge 1430 server box.
 ...
 Am I missing a driver for the USB3 card?
 Are some USB3 chipsets not supported?
 Am I missing something important?
 
 Have you installed gnome-disk-utility?
 
 RLH

That package is installed, though it was installed automatically, not manually.

Why do you ask?
Rick


Re: Why does Debian not recognize my USB3 disk drive?

2015-08-30 Thread CaT
On Sun, Aug 30, 2015 at 08:21:26PM -0700, Rick Thomas wrote:
 Am I missing a driver for the USB3 card?
 Are some USB3 chipsets not supported?
 Am I missing something important?

Does 'dmesg' show that the drive is seen and a /dev device is allocated
to it when you plug it into the USB3 card?

 rbthomas@monk:~$ lspci | grep -i usb

try 'lspci -v | less' and find your card in there. See if there's a
driver allocated to it.

-- 
  A search of his car uncovered pornography, a homemade sex aid, women's 
  stockings and a Jack Russell terrier.
- 
http://www.dailytelegraph.com.au/news/wacky/indeed/story-e6frev20-118083480



Re: Why does Debian not recognize my USB3 disk drive?

2015-08-30 Thread Rick Thomas

On Aug 30, 2015, at 9:12 PM, CaT c...@zip.com.au wrote:

 On Sun, Aug 30, 2015 at 08:21:26PM -0700, Rick Thomas wrote:
 Am I missing a driver for the USB3 card?
 Are some USB3 chipsets not supported?
 Am I missing something important?
 
 Does 'dmesg' show that the drive is seen and a /dev device is allocated
 to it when you plug it into the USB3 card?

There is no /dev allocated to the disk drive when plugged into the USB3 board.

Typing “dmesg | less” and looking for ‘usb’ shows the following

 [1.022294] xhci_hcd :08:00.0: hcc params 0x014051c7 hci version 0x100 
 quirks 0x0010
 [1.023891] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
 [1.023895] usb usb2: New USB device strings: Mfr=3, Product=2, 
 SerialNumber=1
 [1.023898] usb usb2: Product: xHCI Host Controller
 [1.023900] usb usb2: Manufacturer: Linux 4.1.0-1-amd64 xhci-hcd
 [1.023903] usb usb2: SerialNumber: :08:00.0
 [1.024123] hub 2-0:1.0: USB hub found
 [1.024141] hub 2-0:1.0: 4 ports detected
 [1.024370] xhci_hcd :08:00.0: xHCI Host Controller
 [1.024376] xhci_hcd :08:00.0: new USB bus registered, assigned bus 
 number 7
 [1.025847] usb usb7: New USB device found, idVendor=1d6b, idProduct=0003
 [1.025850] usb usb7: New USB device strings: Mfr=3, Product=2, 
 SerialNumber=1
 [1.025853] usb usb7: Product: xHCI Host Controller
 [1.025855] usb usb7: Manufacturer: Linux 4.1.0-1-amd64 xhci-hcd
 [1.025858] usb usb7: SerialNumber: :08:00.0
 [1.026035] hub 7-0:1.0: USB hub found
 [1.026053] hub 7-0:1.0: 4 ports detected

This appears to be happening during a reboot.  There was no disk plugged into 
it at the time.

I’ll plug in a disk and test it next chance I get, if you think it will help.

 
 rbthomas@monk:~$ lspci | grep -i usb
 
 try 'lspci -v | less' and find your card in there. See if there's a
 driver allocated to it.

I get the following

 08:00.0 USB controller: Renesas Technology Corp. uPD720201 USB 3.0 Host 
 Controller (rev 03) (prog-if 30 [XHCI])
 Subsystem: Renesas Technology Corp. uPD720201 USB 3.0 Host Controller
 Flags: bus master, fast devsel, latency 0, IRQ 24
 Memory at fd9fe000 (64-bit, non-prefetchable) [size=8K]
 Capabilities: [50] Power Management version 3
 Capabilities: [70] MSI: Enable- Count=1/8 Maskable- 64bit+
 Capabilities: [90] MSI-X: Enable+ Count=8 Masked-
 Capabilities: [a0] Express Endpoint, MSI 00
 Kernel driver in use: xhci_hcd

It appears to have a the xhci_hcd driver.  Does that help?

Rick


Re: Why does Debian not recognize my USB3 disk drive?

2015-08-30 Thread rlharris
On Sun, August 30, 2015 11:08 pm, Rick Thomas wrote:
 On Aug 30, 2015, at 8:35 PM, rlhar...@oplink.net wrote:
 Have you installed gnome-disk-utility?
 Why do you ask?

When working with external drives, I constantly use gnome-disk-utility to
mount and unmount, and generally to mount partitions of external drives
(including USB sticks) to see what I have stored there.

To me it is a basic tool.  But it was not installed by default in my
Debian Jessie installation; I had to install it.

RLH




Re: Why does Debian not recognize my USB3 disk drive?

2015-08-30 Thread Glenn English

On Aug 30, 2015, at 11:17 PM, CaT c...@zip.com.au wrote:

 On Sun, Aug 30, 2015 at 09:34:41PM -0700, Rick Thomas wrote:
 On Aug 30, 2015, at 9:12 PM, CaT c...@zip.com.au wrote:
 
 On Sun, Aug 30, 2015 at 08:21:26PM -0700, Rick Thomas wrote:
 Am I missing a driver for the USB3 card?
 Are some USB3 chipsets not supported?
 Am I missing something important?
 
 Does 'dmesg' show that the drive is seen and a /dev device is allocated
 to it when you plug it into the USB3 card?
 
 There is no /dev allocated to the disk drive when plugged into the USB3 
 board.
 
 Three possibilities IMO:
 
 * cable too dodgy for USB3 but not dodgy enough for USB2 to fail :)
 * card is dodgy (do you know that it actually does work?)
 * drivers are dodgy (can happen - is there a newer kernel you can try?)

Yet another possible possibility:

* Is the disk backward compatible with USB2? If so, does it work with a USB2 
card? Might get rid of some variables.

-- 
Glenn English





Re: the IBM keyboard

2015-08-30 Thread David Wright
[This quotes the missing post, which was accidentally sent off-list, in full]

Quoting Carl Fink (c...@finknetwork.com):
 
 
 On 08/30/2015 10:29 PM, David Wright wrote:
 Quoting Carl Fink (c...@finknetwork.com):
 On Sun, Aug 30, 2015 at 07:54:11PM -0500, rlhar...@oplink.net wrote:
 
 Eventually, at the stroke of midnight on 31 December A.D. 1999, M$ Word
 5.0 for DO$ began writing garbage to the data files.  This is one of the
 very few genuine Y2K bugs.  M$ had no patch, but offered instead a free
 copy of Word 5.5.  But who in his right mind would migrate to 5.5?  Word
 5.0 was the last version of Word for DO$ which could be used without aid
 of the rodent, and a rodent is anathema to efficiency.
 This is not supported by evidence, e.g.
 http://facweb.cs.depaul.edu/sjost/csc423/examples/anova/efficiency.pdf
 I'm struggling to see how this reference backs up your assertion.
 I doubt it.

You may doubt it, but I have set out why I think the last three
paragraphs of the conclusions carry more weight in favour of the
keyboard than against it. All you have done is name the file.

 
 Here's Bruce Tognazzini (Nielsen's colleague at the Nielsen-Norman
 Design Group) on the subject:
 http://www.asktog.com/TOI/toi06KeyboardVMouse1.html
 
 Carl

Once again, you've just named a file and left it at that.

Looking at this page, the main argument against the keyboard appears
to be that someone spent a cool $50 million of R  D on the Apple
Human Interface. There's no information about what was compared with
what, unlike in the efficiency.pdf reference.

Later on the author says Regardless, you have presented the standard
argument that makes it seem logical that command keys would be
faster. Unfortunately, experimental evidence does not support the
argument. No reference.

But as far as *this* discussion is concerned (ie Word), he writes the
following:

Hence, users achieve a significant productivity increase with the
mouse in spite of their subjective experience.

Not that any of the above True Facts will stop the religious
wars. And, in fact, I find myself on the opposite side in at least one
instance, namely editing.

So the author agrees with RLH and not with you!

Cheers,
David.



Re: the IBM keyboard

2015-08-30 Thread Doug



On 08/30/2015 08:39 PM, rlhar...@oplink.net wrote:

On Sun, August 30, 2015 8:18 pm, Karen Lewellen wrote:

Oh joy!  forgive my nose, especially since I missed this post at first.
Still, I am typing right now, this very moment, on a real IBM clicky
keyboard! However the cable is starting to fray,  and I was wondering if I
would be able to replace this treasure...i. have. had. this. for. a. very!
long time. Anyway, your link to this company may be a solution and I am
sososososo happy! thanks, Kare


The model M that I am typing on right now was made in 1964 (!) and it
has a connector for the cable, so the company that refurbishes them can
probably supply a cable, saving you the cost of a whole keyboard. Check yours,
of course--I don't know if they were all made this way. If you contact the
firm, you should first get all the numbers, etc. off your keyboard to
get them on board, so to speak.

--doug



If the only problem is a cable, all you need to do is find a local
technician who can replace the cable with the cable from one of the
chinese keyboards which someone has tossed into the dumpster.

Of course, most keyboards nowadays are USB.  But most of us (myself
included) have in the closet a keyboard or two which uses the old-style
connector, if that is what you need.

The technician would take the back cover off the keyboard, clip the leads
of the old cable, attach the leads of the replacement cable, and replace
the back cover.  Soldering may be necessary, but that is simple for any
technician.  A fifteen-minute repair.

For a local technicial, ask around.  Almost any amateur radio operator
should be competent.  Look around your neighbourhood for a house with a
large antenna or for a car with an amateur radio license plate.

Failing that, if you have a local radio or television station, walk in
with you keyboard in hand (and the old keyboard from which you are going
to scavange the cable) and ask to see the technician.

The cost of the repair?  A box of donuts should do it.

RLH







Re: Why does Debian not recognize my USB3 disk drive?

2015-08-30 Thread Rick Thomas

On 08/30/15 21:30, rlhar...@oplink.net wrote:

On Sun, August 30, 2015 11:08 pm, Rick Thomas wrote:

On Aug 30, 2015, at 8:35 PM, rlhar...@oplink.net wrote:

Have you installed gnome-disk-utility?

Why do you ask?

When working with external drives, I constantly use gnome-disk-utility to
mount and unmount, and generally to mount partitions of external drives
(including USB sticks) to see what I have stored there.

To me it is a basic tool.  But it was not installed by default in my
Debian Jessie installation; I had to install it.

RLH
Thanks for the pointer.  I used to use palimpsest for this kind of 
thing when I wanted a GUI disk manager, but I went away in Jessie. This 
may be a suitable substitute.


Unfortunately, it doesn't see the disk either when plugged into the USB3 
card.

Rick