Re: Diagnosing what applications are doing

[Erik Josefsson]

On 5/26/19 4:36 PM, Jonas Smedegaard wrote:

Quoting Gene Heskett (2019-05-26 16:25:43)

On Sunday 26 May 2019 07:05:45 am Jonas Smedegaard wrote:


Quoting Paul Sutton (2019-05-26 12:28:43)

On my netbook,  Thunderbird seems really unstable, it stars up
fine then seems to stall and fails to respond,  it eventually
picks up.

[...]

One thing that will "freeze" it is using its own download facilities
to fetch the mail, used to bug me pretty badly, but when it did come
back, everything I had typed into a message came back with it.  So I
offloaded that fetching of emails by making fetchmail, procmail,
clamscan and spamassassin all into background tasks that have minimal
effect on kmail.  Now my freezes are maybe a second as it sorts an
incoming email that has servived the spam and viri filters.

Good point!  (this is Thunderbird not KMail but still applies)

For IMAP mail, I recommend more modern alternatives to fetchmail:

   * pullimap
   * offlineimap


Could you recommend one of them to use with an install of the 
box-add-gui alternative for Teres-I?


As far as I can see, pullimap needs libconfig-tiny-perl and 
libinterimap, and offlineimap needs python-imaplib2 and python-socks.


Perhaps one is more lightweight than the other?

Best regards.

//Erik

Re: Reading pdf files

[Erik Christiansen]

On 14.06.19 10:51, Celejar wrote:
> On Fri, 14 Jun 2019 18:50:22 +1000
> Erik Christiansen  wrote:
> > I only use mupdf for problem pdf files, but it's very nifty to have on
> > hand.
> 
> I actually love mupdf, and I use it as my main pdf reader. It's just so
> lightweight and easy to use for basic pdf reading.

On trying it again, it does look very promising. Is there a way to set
the background colour? With xpdf I use "-papercolor wheat3" to avoid
eyestrain from the white background.

Erik

Re: Reading pdf files

[Gary Dale]

On 2019-06-13 12:10 p.m., Joe wrote:

On Thu, 13 Jun 2019 17:28:10 +0200
Hans  wrote:


Am Donnerstag, 13. Juni 2019, 16:29:27 CEST schrieb k. jantzen:
Did you try "Evince" or "Okular"?

Best

Hans

Hello,

in general I do not have a problem reading a pdf file with either
xpdf or documentviewer.

But once in a while I get a pdf file that they cannot read and then
I have to go to Windows to open it.

What is so spectacular about these files that they cannot be read
by the above mentioned programs? Is there another program that
would read such a file?


Not all PDF generation programs produce good code. Some PDF readers are
better than others at displaying technically invalid PDFs. I've had
some trouble viewing PDFs exported by LibreCAD in Evince, and a few
other funnies that I can't remember now.

Adobe Reader does seem a bit better at dealing with dodgy files, and of
course it deals with the extended PDFs e.g. editable forms.

Never had a problem with PDF forms using Okular.

Re: error when printing to Samsung C410 series colour laser printer

[Gary Dale]

On 2019-06-14 7:08 p.m., Gary Dale wrote:

On 2019-06-14 7:15 a.m., Brian wrote:

On Thu 13 Jun 2019 at 21:31:49 -0400, Gary Dale wrote:


On 2019-06-13 5:06 a.m., Brian wrote:

[...]


Your setup would appear to be:

1. The C410 is connected to a CUPS server via USB (but the connection
 can also be via wireless).

2. The server has the Samsung ULD software installed and is 
advertising

 shared queues.

3. The buster client contacts the server over wireless and is running
 cups-browsed.

Please post what you get with 'lpstat -l -e' from the client. You 
should
be able to recognise your print queue from the output, so follow up 
with

'lpoptions -p '.


Not quite. The network connection is wired. The C410 only connects
wirelessly using WPS, which I have disabled on the router.

$
Samsung_C410_Series permanent 
ipp://localhost/printers/Samsung_C410_Series
dnssd://Samsung%20C410%20Series%20(SEC30CDA71CB48A)._printer._tcp.local/ 


Samsung_C410_Series_SEC30CDA71CB48A_ network none
ipp://Samsung%20C410%20Series%20(SEC30CDA71CB48A)._ipp._tcp.local/
Samsung_C410_Series_TheLibrarian network none
ipps://Samsung%20C410%20Series%20%40%20TheLibrarian._ipps._tcp.local/cups 


Samsung_C410_Series_TheLibrarian_3 permanent
ipp://localhost/printers/Samsung_C410_Series_TheLibrarian_3 
file:///dev/null


The printer is defined  on the server (TheLibrarian) twice - once as a
network printer and once as a USB printer. It's defined once on my
workstation as a network printer, so I can avoid going through the 
server.


$ lpoptions -p Samsung_C410_Series
copies=1 
device-uri=dnssd://Samsung%20C410%20Series%20(SEC30CDA71CB48A)._printer._tcp.local/
finishings=3 job-cancel-after=10800 job-hold-until=no-hold 
job-priority=50

job-sheets=none,none marker-change-time=1560454516
marker-colors=#00,#00,#FF00FF,#00,none,none,none,none,none,none 

marker-levels=201,178,74,62,89,60,61,89,50,0 marker-names='Black\ 
Toner\
S/N\ :CRUM-14031169715,Cyan\ Toner\ S/N\ :CRUM-14031169678,Magenta\ 
Toner\

S/N\ :CRUM-14031182177,Yellow\ Toner\ S/N\ :CRUM-14031182186,Transfer\
Roller,Transfer\ Belt,Fuser\ Life,Pick-up\ Roller,Imaging\ Unit,Waste\
Toner'
marker-types=toner,toner,toner,toner,other,other,fuser,other,other,other 

number-up=1 PageSize=Letter printer-commands=none 
printer-info='Samsung C410

Series' printer-is-accepting-jobs=true printer-is-shared=false
printer-is-temporary=false printer-location='family room'
printer-make-and-model='Samsung C410 Series' printer-state=3
printer-state-change-time=1560454516 printer-state-reasons=none
printer-type=2101324
printer-uri-supported=ipp://localhost/printers/Samsung_C410_Series

Very useful. As confirmation (or not) of an idea, let us have what

cupsfilter -p /etc/cups/ppd/ -m printer/foo \
-e --list-filters /etc/nsswitch.conf

gives (as root). The line is broken for readability.

Reading over the above output, it struck me that my printer setup 
wasn't quite what I thought it was, so I went back to basics, deleted 
the queues on both my workstation and the server, downloaded and 
installed the Samsung driver on both machines then put the print 
queues back.


Now I seem to be able to print from the workstation to the server via 
the USB connector.


I stopped sharing the network connected printer from the server since 
that really made little sense. Unfortunately I still can't print 
directly to the network connection. The job gets processed but I just 
get an error message again.


I tried switching to the "driverless" driver but CUPS complained about 
not being able to copy the PPD file. I noticed an "IPP Anywhere" 
driver but that produced the same results as the normal driver.


The error I got on both print attempts (normal and IPP Anywhere) was:

SPL-C ERROR - Disconnected from host. Please check the connection and 
try again.


    POSITION : 0x396913 (3762451)

    SYSTEM : src/os_hook

    LINE :   1981

    VERSION : SPL-C 5.59.01 06-19-2013

This was printed by the printer instead of the output I sent.

The lpstat output is now:

Samsung_C410_Series permanent 
ipp://localhost/printers/Samsung_C410_Series 
ipp://SEC30CDA71CB48A.local:631/ipp/printer
Samsung_C410_Series_SEC30CDA71CB48A_ network none 
ipp://Samsung%20C410%20Series%20(SEC30CDA71CB48A)._ipp._tcp.local/
Samsung_C410_Series_TheLibrarian network none 
ipps://Samsung%20C410%20Series%20%40%20TheLibrarian._ipps._tcp.local/cups


$ lpoptions -p Samsung_C410_Series is now:
copies=1 device-uri=ipp://SEC30CDA71CB48A.local:631/ipp/printer 
finishings=3 job-cancel-after=10800 job-hold-until=no-hold 
job-priority=50 job-sheets=none,none marker-change-time=1560552544 
marker-colors=#00,#00,#FF00FF,#00,none,none,none,none,none,none 
marker-levels=64,55,55,55,98,94,94,98,93,0 
marker-message=marker-message marker-names='Black\ Toner\ S/N\ 
:CRUM-14031169715,Cyan\ Toner\ S/N\ :CRUM-14031169678,Magenta\ Toner\ 
S/N\ :CRUM-14031182177,Yellow\ Toner\ S/N\ :CRUM-14031182186,Transfer\ 
Roller,Transfer\ Belt,

Re: web page problem

[Gene Heskett]

On Friday 14 June 2019 09:04:50 am Joe wrote:

> On Fri, 14 Jun 2019 14:58:05 +0200
>
>  wrote:
> > On Fri, Jun 14, 2019 at 08:46:51AM -0400, Greg Wooledge wrote:
> > > On Thu, Jun 13, 2019 at 06:11:03PM -0400, Gene Heskett wrote:
> > > > looks good, but the problem is, only gene=user 1000 has any
> > > > rights to follow that path, so this access must be done as gene,
> > > > not the default www-data:www-data, or even as the parent session
> > > > of apache2..
> > >
> > > So change the ownership/permissions on the content.  To serve it
> > > up from a web server, you need to make it world-readable.  This
> > > means that directories require the x bit, and files require the r
> > > bit, for the "other" (right-most characters in ls -l output, least
> > > significant bits in the octal mode).
> >
> > Perhaps group readable (074x, x being usually 0) and setting the
> > file's group would suffice?
> >
> > That's my standard setup: the files belong to a "www admin" (can be
> > a regular user, can be root) and have the group www-data. So the web
> > server hasn't (usually) write access to normal htmls and cgi-bins
> > (oh, for the last, execute access for the group is necessary, so
> > 075x.
> >
> > Better safe than...
>
> Even safer, post/run it on someone else's web server. Web space is no
> longer given away free by (most) ISPs, but a small amount can be had
> for 'hobby' money now.

The pro and cons are in favor of doing it myself just for the total 
control. The only sufferer is the one that wants to download my work as 
the uplink speed is noticeably slower. But he still gets it for only his 
bandwidth/time cost.  But because most ISP's think we are dumber than 
rocks, they block incoming port 80.  But I am also a fan of the Hitachi 
6309, a cmos and smarter clone of the moto 6809, but with fringies 
thrown in, hence the tongue-in-cheek use of port 6309 to run my web 
server on.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: web page problem

[Gene Heskett]

On Friday 14 June 2019 09:04:22 am Greg Wooledge wrote:

> On Fri, Jun 14, 2019 at 02:58:05PM +0200, to...@tuxteam.de wrote:
> > That's my standard setup: the files belong to a "www admin" (can be
> > a regular user, can be root) and have the group www-data. So the web
> > server hasn't (usually) write access to normal htmls and cgi-bins
> > (oh, for the last, execute access for the group is necessary, so
> > 075x.
>
> Changing the group-owner of the files is one possible approach, yes.
>
> However, I prefer to remind myself that if I put something on the web,
> the entire world can see it.  So any attempt to restrict who can read
> the files on my local system would be entirely pointless, if they can
> simply read them on the world wide web instead.

That is the intended scenario. The problem was in getting the files to a 
place where I could manipulate the rights, then move them to where they 
could be seen on my web page. They can now be accessed by the world, 
although its not something most would try to do with a pi. Realtime 
kernels for armhf, aren't that great, often giving IRQ delays of several 
milliseconds. But at the speeds of a bigger lathe, its actually "good 
enough for the girls I go with".

Although its customary to run a threading tap at whats a good cutting 
speed, when rigid tapping on a lathe, one must consider the weight of 
the spinning chuck, which at 40 lbs, can cause quite a delay between 
issuing the reverse command at the bottom of the hole, the overshoot can 
run the tap into the bottom of the hole, lock it and break it. Its 
possible to measure this over shoot while cutting air, which I am going, 
and offset the reversal point, which I am doing by hand, but its also 
possible to make it automatic, something I've yet to attempt to do, but 
on paper looks easy enough. But realistically, 300 revs and a 40 lb 
chuck is making the drive belts yelp at reverse time now, with just a 1 
hp motor. Overshoot is about 3.5 turns, so thats a good indicator to 
slow it some more.  But the fact that I have done it, can do it with a 
70 year old formerly manual machine does drop jaws.  I'll readily admit 
I like to impress any visiting frogs there may be. :)

> Thus, making the files world-readable is completely rational.  And
> saves you the headaches and hassles of managing group permissions and
> umasks and so on.  (However, those headaches may return if you are
> trying to allow multiple people administrative access to the content. 
> That's a separate issue.)

And as long as I am still sucking air, I am the lone admin.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: error when printing to Samsung C410 series colour laser printer

[Gary Dale]

On 2019-06-14 7:15 a.m., Brian wrote:

On Thu 13 Jun 2019 at 21:31:49 -0400, Gary Dale wrote:


On 2019-06-13 5:06 a.m., Brian wrote:

[...]


Your setup would appear to be:

1. The C410 is connected to a CUPS server via USB (but the connection
 can also be via wireless).

2. The server has the Samsung ULD software installed and is advertising
 shared queues.

3. The buster client contacts the server over wireless and is running
 cups-browsed.

Please post what you get with 'lpstat -l -e' from the client. You should
be able to recognise your print queue from the output, so follow up with
'lpoptions -p '.


Not quite. The network connection is wired. The C410 only connects
wirelessly using WPS, which I have disabled on the router.

$
Samsung_C410_Series permanent ipp://localhost/printers/Samsung_C410_Series
dnssd://Samsung%20C410%20Series%20(SEC30CDA71CB48A)._printer._tcp.local/
Samsung_C410_Series_SEC30CDA71CB48A_ network none
ipp://Samsung%20C410%20Series%20(SEC30CDA71CB48A)._ipp._tcp.local/
Samsung_C410_Series_TheLibrarian network none
ipps://Samsung%20C410%20Series%20%40%20TheLibrarian._ipps._tcp.local/cups
Samsung_C410_Series_TheLibrarian_3 permanent
ipp://localhost/printers/Samsung_C410_Series_TheLibrarian_3 file:///dev/null

The printer is defined  on the server (TheLibrarian) twice - once as a
network printer and once as a USB printer. It's defined once on my
workstation as a network printer, so I can avoid going through the server.

$ lpoptions -p Samsung_C410_Series
copies=1 
device-uri=dnssd://Samsung%20C410%20Series%20(SEC30CDA71CB48A)._printer._tcp.local/
finishings=3 job-cancel-after=10800 job-hold-until=no-hold job-priority=50
job-sheets=none,none marker-change-time=1560454516
marker-colors=#00,#00,#FF00FF,#00,none,none,none,none,none,none
marker-levels=201,178,74,62,89,60,61,89,50,0 marker-names='Black\ Toner\
S/N\ :CRUM-14031169715,Cyan\ Toner\ S/N\ :CRUM-14031169678,Magenta\ Toner\
S/N\ :CRUM-14031182177,Yellow\ Toner\ S/N\ :CRUM-14031182186,Transfer\
Roller,Transfer\ Belt,Fuser\ Life,Pick-up\ Roller,Imaging\ Unit,Waste\
Toner'
marker-types=toner,toner,toner,toner,other,other,fuser,other,other,other
number-up=1 PageSize=Letter printer-commands=none printer-info='Samsung C410
Series' printer-is-accepting-jobs=true printer-is-shared=false
printer-is-temporary=false printer-location='family room'
printer-make-and-model='Samsung C410 Series' printer-state=3
printer-state-change-time=1560454516 printer-state-reasons=none
printer-type=2101324
printer-uri-supported=ipp://localhost/printers/Samsung_C410_Series

Very useful. As confirmation (or not) of an idea, let us have what

cupsfilter -p /etc/cups/ppd/ -m printer/foo \
-e --list-filters /etc/nsswitch.conf

gives (as root). The line is broken for readability.

Reading over the above output, it struck me that my printer setup wasn't 
quite what I thought it was, so I went back to basics, deleted the 
queues on both my workstation and the server, downloaded and installed 
the Samsung driver on both machines then put the print queues back.


Now I seem to be able to print from the workstation to the server via 
the USB connector.


I stopped sharing the network connected printer from the server since 
that really made little sense. Unfortunately I still can't print 
directly to the network connection. The job gets processed but I just 
get an error message again.


I tried switching to the "driverless" driver but CUPS complained about 
not being able to copy the PPD file. I noticed an "IPP Anywhere" driver 
but that produced the same results as the normal driver.


The error I got on both print attempts (normal and IPP Anywhere) was:

SPL-C ERROR - Disconnected from host. Please check the connection and 
try again.


    POSITION : 0x396913 (3762451)

    SYSTEM : src/os_hook

    LINE :   1981

    VERSION : SPL-C 5.59.01 06-19-2013

This was printed by the printer instead of the output I sent.

The lpstat output is now:

Samsung_C410_Series permanent 
ipp://localhost/printers/Samsung_C410_Series 
ipp://SEC30CDA71CB48A.local:631/ipp/printer
Samsung_C410_Series_SEC30CDA71CB48A_ network none 
ipp://Samsung%20C410%20Series%20(SEC30CDA71CB48A)._ipp._tcp.local/
Samsung_C410_Series_TheLibrarian network none 
ipps://Samsung%20C410%20Series%20%40%20TheLibrarian._ipps._tcp.local/cups


$ lpoptions -p Samsung_C410_Series is now:
copies=1 device-uri=ipp://SEC30CDA71CB48A.local:631/ipp/printer 
finishings=3 job-cancel-after=10800 job-hold-until=no-hold 
job-priority=50 job-sheets=none,none marker-change-time=1560552544 
marker-colors=#00,#00,#FF00FF,#00,none,none,none,none,none,none 
marker-levels=64,55,55,55,98,94,94,98,93,0 marker-message=marker-message 
marker-names='Black\ Toner\ S/N\ :CRUM-14031169715,Cyan\ Toner\ S/N\ 
:CRUM-14031169678,Magenta\ Toner\ S/N\ :CRUM-14031182177,Yellow\ Toner\ 
S/N\ :CRUM-14031182186,Transfer\ Roller,Transfer\ Belt,Fuser\ 
Life,Pick-up\ Roller,Imaging\ Unit,Waste\ Toner' 
marker-types=t

Re: Reading pdf files

[Celejar]

On Fri, 14 Jun 2019 18:50:22 +1000
Erik Christiansen  wrote:

...

> I only use mupdf for problem pdf files, but it's very nifty to have on
> hand.

I actually love mupdf, and I use it as my main pdf reader. It's just so
lightweight and easy to use for basic pdf reading.

Celejar

Re: Trying to install Audiveris

[Rodolfo Medina]

didier gaumet  writes:

> Le 20/04/2019 à 09:33, Rodolfo Medina a écrit :
>
>> I'm experimenting difficulty in installing Audiveris...  Anyone has already
>> installed it...?  Please help.
>
> What kind of difficulties?


I'm following the steps described at:

 https://github.com/Audiveris/audiveris/wiki/Installation

I did:

 $ git clone https://github.com/Audiveris/audiveris.git
 $ cd audiveris/
 $ ./gradlew clean build

FAILURE: Build failed with an exception.

* What went wrong:
Could not determine java version from '11.0.4'.

* Try:
Run with --stacktrace option to get the stack trace. Run with --info or --debug 
option to get more log output. Run with --scan to get full insights.

* Get more help at https://help.gradle.org



...Please help.

Thanks in advance,

Rodolfo

Re: Forgot name of Debian "configuration" {wrong word?} file

[Felix Miata]

Richard Owlett composed on 2019-06-14 06:10 (UTC-0500):

> I can't remember the name of the file which identifies the association 
> between a directory (i.e. \home) and which physical partition it is on. 
> The file I'm looking for also identifies which partition is used for swap.

You might wish to try

inxi -PpxxaD

You might like better a recent version from unstable or upstream rather than an
antique if you are a Stretch or older user.
-- 
Evolution as taught in public schools is religion, not science.

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata  ***  http://fm.no-ip.com/

Re: Forgot name of Debian "configuration" {wrong word?} file

[Pascal Hambourg]

Le 14/06/2019 à 13:50, Richard Owlett a écrit :

On 06/14/2019 06:20 AM, Erik Christiansen wrote:

On 14.06.19 06:10, Richard Owlett wrote:

I can't remember the name of the file which identifies the association
between a directory (i.e. \home) and which physical partition it is on. The
file I'm looking for also identifies which partition is used for swap.


Do you want to see the desired or current association ?
/etc/fstab contains the desired filesystem mounts and swaps.
There is no single file containing both mounted filesystems and active 
swaps. /proc/mounts or /proc/self/mounts contains mounted filesystems. 
/etc/mtab used to be a regular file containing similar information but 
is now a symlink to either /proc/mounts or /proc/self/mounts. 
/proc/swaps contains active swaps.



Easier than looking in /etc/fstab is just running the "mount" command.
The "df" command also includes what you seek in its output.


fstab and mount/df do not provide the same kind of information. mount 
and df provide information about currently mounted filesystems.
Note that df without argument hides some filesystems (proc, sysfs...) 
and bind mounts.


I just ran the mount command with no options. It gave a fascinating list 
that I should probably read about.


Note that mount without argument merely prints the contents of /proc/mounts.

Re: Want to take over maintenance of package xsnow

[Thomas Schmitt]

Hi,

Michael Stone wrote:
> I don't think there's any need to orphan a package to change maintainers.

Well possible. Three DDs = four opinions about packaging. :))
(I'm sitting on the fence, enjoying life as user and upstream.)

Whatever, Willem Vermin already posted a RFS bug a week ago:
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930074
But it does not show up in
  https://lists.debian.org/debian-mentors/2019/06/threads.html
Probably because it was filed against Package "xsnow" rather than the shown
  https://lists.debian.org/debian-mentors/2019/06/msg00023.html
  https://lists.debian.org/debian-mentors/2019/06/msg00038.html
which are attributed to Package "sponsorship-requests".

Maybe
  https://wiki.debian.org/DebianMentorsFaq
has useful hints.


Have a nice day :)

Thomas

Re: strange behaviour with RDP clients connecting to Windows 10 machines

[Alexander V. Makartsev]

On 14.06.2019 17:41, Gary Dale wrote:
> On 2019-06-14 3:45 a.m., Curt wrote:
>> On 2019-06-14, john doe  wrote:
>>> Not realy an answer, depending on what you need vnc for, one
>>> alternative
>>> would be to use Cygwin as an ssh server on the Windows boxes.
>>
>> He might try removing ~/.config/freerdp/known_hosts (after backing it
>> up) or commenting out or deleting the offending host key.
>>
> On my system it is known_hosts2 but I get the same results. Don't
> forget, I'm connecting to localhost while the ssh tunnel provides the
> route to the real host.
>
Anything interesting on remote Win10 machine's eventlog?
It often might be a CAL license is a culprit. Try to delete (move)
"~/.config/freerdp/licenses/*.cal" files. They will be recreated on
successful connection.

-- 
With kindest regards, Alexander.

⢀⣴⠾⠻⢶⣦⠀ 
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄ 

Re: Want to take over maintenance of package xsnow

[Michael Stone]

On Fri, Jun 14, 2019 at 04:03:33PM +0200, Thomas Schmitt wrote:

The up-to-now maintainer should officially "orphan" the package so that
you can express your interest in taking over.


I don't think there's any need to orphan a package to change 
maintainers.

Re: Forgot name of Debian "configuration" {wrong word?} file

[Elimar Riesebieter]

* Richard Owlett  [2019-06-14 06:10 -0500]:

> I can't remember the name of the file which identifies the association
> between a directory (i.e. \home) and which physical partition it is on. The
> file I'm looking for also identifies which partition is used for swap.

There is a fantastic tool to get an overview of your partitions:

# apt get install dfc

Just read the manpage and get famous info's like from:

$ dfc -WT -q name -sf -d -txfs,nfs,ext4

Elimar
-- 
  You cannot propel yourself forward by
  patting yourself on the back.

Re: web page problem

[Gene Heskett]

On Friday 14 June 2019 08:46:51 am Greg Wooledge wrote:

> On Thu, Jun 13, 2019 at 06:11:03PM -0400, Gene Heskett wrote:
> > looks good, but the problem is, only gene=user 1000 has any rights
> > to follow that path, so this access must be done as gene, not the
> > default www-data:www-data, or even as the parent session of
> > apache2..
>
So in the end I copied the debs to a /home/gene/subdir made to catch 
them, and changed the ownership of the subdir and contents to www-data, 
then moved the whole thing to /var/www/html/gene/subdir, and added that 
to the  and they can now be downloaded by 
interested parties.

> So change the ownership/permissions on the content.  To serve it up
> from a web server, you need to make it world-readable.  This means
> that directories require the x bit, and files require the r bit, for
> the "other" (right-most characters in ls -l output, least significant
> bits in the octal mode).
>
> In other words, 711 or 755 on the directories, and 644 on the files.
>
> > Is there
> > an "as user=gene" command that can be used only for this stanza that
> > I can put in this stanza?  root cannot go up this path to see
> > anything, neither can www-data.
>
> If root can't see the files, that means you're dealing with some kind
> of remote file system, like NFS?  If so, you really need to state the
> full relevant details up front.

Not NFS, its too wibbly, works only with the right phase of the moon and 
your astrological period or some such.  But an sshfs mount as me Just 
Works. Because one of those isn't yet set for passwordless key file 
access, I get asked for my password once, so this file has to be run by 
hand:

#!/bin/bash
sshfs gene@shop:/ /sshnet/shop
sshfs gene@lathe:/ /sshnet/lathe
sshfs gene@GO704:/ /sshnet/GO704
sshfs pi@picnc:/ /sshnet/picnc
sshfs gene@rock64:/ /sshnet/rock64

I keep  a bunch of that sort of stuff in ~/gene/bin, which is first in my 
$PATH.
And I just got a lunch order from my missus. later.
>
> If you need to change permissions on an NFS-mounted file system that
> you're serving up through a web server on the NFS client system, then
> you'll need to make the changes *on* the NFS server, or as the owner
> of the files on the NFS client.
>
> By the way, I recommend running the web server from the same box where
> the files reside if at all possible, just for efficiency and sanity.
>
> > Is this a place where making gene a member of group www-data would
> > help?
>
> No.
>
> Longer answer: each process has its own UID, GID and list of
> supplementary groups.  If the apache worker process that tries to read
> your content is running as UID www-data and GID www-data with no
> supplementary groups, then the *only* permissions that matter are the
> "other" permissions on the file (those always matter), or the "group"
> permissions if the *FILE* belongs to group www-data (sounds like this
> is not the case), or the "user" permissions if the *FILE* belongs to
> user www-data (definitely not the case).
>
> When you "add user gene to group www-data", this has absolutely zero
> effect on a process that is running as user www-data/group www-data.
> (Daemons are launched by lower-level system processes that do not give
> half a flip about what groups users are "in" in /etc/group.)  The only
> effect that your group addition has is on *logins* made by the user
> named gene.  Future login sessions for gene will have one more group
> added to their list of supplementary groups.
>
> Adding a user to a group has no effect on files that you own.  Each
> file has one user-owner, one group-owner, one octal mode number
> declaring yes/no permissions for user/group/owner, and some ACL crap
> that I *really* am not going to get into here.  Suffice to say,
> "adding a user to a group" is not a thing that file systems or the
> files in them care about.
>
> Adding a user to a group has no effect on the privileges of daemons
> that are started by your init system.

So it would appear now. With wheezy it was useally the fix.

> It *does* appear to affect the group membership of your at jobs,
> though. I didn't test cron, and of course neither cron(8) nor
> crontab(1) tells me whether it affects cron jobs, because why would
> they mention something important like the privileges of your running
> jobs

Good question, because I have another perms problem that is preventing 
awfull from generating any data from looking at the apache2 logs, and 
again it worked flawlessly on wheezy.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: Reading pdf files

[Jonas Smedegaard]

Quoting Cindy Sue Causey (2019-06-14 15:32:20)
> On 6/13/19, Jonas Smedegaard  wrote:
> > Quoting k. jantzen (2019-06-13 16:29:27)
> >> in general I do not have a problem reading a pdf file with either xpdf
> >> or documentviewer.
> >>
> >> But once in a while I get a pdf file that they cannot read and then I
> >> have to go to Windows to open it.
> >>
> >> What is so spectacular about these files that they cannot be read by
> >> the above mentioned programs?
> >
> > PDF is a big complex data format, and several things could have gone
> > wrong, including the file being broken (but in a way that some
> > commercial viewers handle more graceful than what you tried on Linux)
> > and the files using features from newer revisions of PDF than is
> > implemented in those Linux viewers.
> >
> >> Is there another program that would read such a file?
> >
> > There are many PDF viewers in Debian.  Probably best way to sift through
> > them is to install the package apt-xapian-index and run these:
> >
> >   axi-cache search pdf viewer
> >   axi-cache more
> >
> >
> > When your interest is in what PDF files the applications can render,
> > then you need not try them all but can check which underlying PDF
> > rendering library they use which are far more limited.
> >
> > Evince (a.k.a. "documentviewer"), Xpdf, Okular, Atril, Qpdfview and
> > others use Poppler:
> 
> 
> I started using Atril in last couple years after seeing it mentioned
> over on Debian-Accessibility. I haven't used anything else since. I
> haven't had any problems reading PDF files, but that just that means
> that maybe I haven't encountered any files written in a less than
> optimal way..
> 
> Wandering off now wondering didn't or doesn't one of the viewers 
> let us do some editing in addition to "just" being a viewer? I'm not 
> finding it via a couple fairly non-invasive "apt-cache search" 
> attempts via "main" repositories only. I'm sure I'm not imagining it. 
> Seems like I remember either mentioning that feature over at 
> Accessibility or at least thinking about mentioning having encountered 
> it ages ago. :)

PDF "editing" can mean several things:

  * PDF files containing XFA forms that a viewer offers to fill out
  * Adding bookmarks
  * Adding annotations
  * Re-rendering (essentially creating a new PDF inspired by the old)

Okular was the first to support XFA.  Nowadays Evince should do too, and 
possible simpler derivatives too like Atril.  A common problem is font 
sizes handled wrongly - sometimes solved by installing fonts (e.g. 
Microsoft-ish ones).

Inkscape and Scribus can (crudely) re-render PDFs (as can many scripting 
tools albeit not interactively).


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private


signature.asc
Description: signature

Re: web page problem

[Kevin DAGNEAUX]

Le 14/06/2019 à 15:04, Joe a écrit :

On Fri, 14 Jun 2019 14:58:05 +0200
 wrote:


On Fri, Jun 14, 2019 at 08:46:51AM -0400, Greg Wooledge wrote:

On Thu, Jun 13, 2019 at 06:11:03PM -0400, Gene Heskett wrote:

looks good, but the problem is, only gene=user 1000 has any
rights to follow that path, so this access must be done as gene,
not the default www-data:www-data, or even as the parent session
of apache2..

So change the ownership/permissions on the content.  To serve it up
from a web server, you need to make it world-readable.  This means
that directories require the x bit, and files require the r bit,
for the "other" (right-most characters in ls -l output, least
significant bits in the octal mode).

Perhaps group readable (074x, x being usually 0) and setting the
file's group would suffice?

That's my standard setup: the files belong to a "www admin" (can be a
regular user, can be root) and have the group www-data. So the web
server hasn't (usually) write access to normal htmls and cgi-bins
(oh, for the last, execute access for the group is necessary, so 075x.

Better safe than...


Even safer, post/run it on someone else's web server. Web space is no
longer given away free by (most) ISPs, but a small amount can be had for
'hobby' money now.


Another approch is to use apache mpm itk


<>

Re: Want to take over maintenance of package xsnow

[Thomas Schmitt]

Hi,

Willem Vermin wrote:
> the current maintainer of the package xsnow:
>   https://packages.debian.org/sid/xsnow
> has let me know that he is not maintaining the package any more, and that it
> is OK with him that I take over maintenance.
> Can you please let me know how to proceed?

See
  https://mentors.debian.net/intro-maintainers

If needed ask for advise at the mailing list
  https://lists.debian.org/debian-mentors/

The up-to-now maintainer should officially "orphan" the package so that
you can express your interest in taking over.


Have a nice day :)

Thomas

Re: Reading pdf files

[Cindy Sue Causey]

On 6/13/19, Jonas Smedegaard  wrote:
> Quoting k. jantzen (2019-06-13 16:29:27)
>> in general I do not have a problem reading a pdf file with either xpdf
>> or documentviewer.
>>
>> But once in a while I get a pdf file that they cannot read and then I
>> have to go to Windows to open it.
>>
>> What is so spectacular about these files that they cannot be read by
>> the above mentioned programs?
>
> PDF is a big complex data format, and several things could have gone
> wrong, including the file being broken (but in a way that some
> commercial viewers handle more graceful than what you tried on Linux)
> and the files using features from newer revisions of PDF than is
> implemented in those Linux viewers.
>
>> Is there another program that would read such a file?
>
> There are many PDF viewers in Debian.  Probably best way to sift through
> them is to install the package apt-xapian-index and run these:
>
>   axi-cache search pdf viewer
>   axi-cache more
>
>
> When your interest is in what PDF files the applications can render,
> then you need not try them all but can check which underlying PDF
> rendering library they use which are far more limited.
>
> Evince (a.k.a. "documentviewer"), Xpdf, Okular, Atril, Qpdfview and
> others use Poppler:


I started using Atril in last couple years after seeing it mentioned
over on Debian-Accessibility. I haven't used anything else since. I
haven't had any problems reading PDF files, but that just that means
that maybe I haven't encountered any files written in a less than
optimal way..

Wandering off now wondering didn't or doesn't one of the viewers
let us do some editing in addition to "just" being a viewer? I'm not
finding it via a couple fairly non-invasive "apt-cache search"
attempts via "main" repositories only. I'm sure I'm not imagining it.
Seems like I remember either mentioning that feature over at
Accessibility or at least thinking about mentioning having encountered
it ages ago. :)

Cindy :)
-- 
Cindy-Sue Causey
Talking Rock, Pickens County, Georgia, USA

* runs with birdseed *

Re: web page problem

[Greg Wooledge]

On Fri, Jun 14, 2019 at 02:58:05PM +0200, to...@tuxteam.de wrote:
> That's my standard setup: the files belong to a "www admin" (can be a
> regular user, can be root) and have the group www-data. So the web
> server hasn't (usually) write access to normal htmls and cgi-bins
> (oh, for the last, execute access for the group is necessary, so 075x.

Changing the group-owner of the files is one possible approach, yes.

However, I prefer to remind myself that if I put something on the web,
the entire world can see it.  So any attempt to restrict who can read
the files on my local system would be entirely pointless, if they can
simply read them on the world wide web instead.

Thus, making the files world-readable is completely rational.  And saves
you the headaches and hassles of managing group permissions and umasks
and so on.  (However, those headaches may return if you are trying to
allow multiple people administrative access to the content.  That's a
separate issue.)

Re: web page problem

[Joe]

On Fri, 14 Jun 2019 14:58:05 +0200
 wrote:

> On Fri, Jun 14, 2019 at 08:46:51AM -0400, Greg Wooledge wrote:
> > On Thu, Jun 13, 2019 at 06:11:03PM -0400, Gene Heskett wrote:  
> > > looks good, but the problem is, only gene=user 1000 has any
> > > rights to follow that path, so this access must be done as gene,
> > > not the default www-data:www-data, or even as the parent session
> > > of apache2..  
> > 
> > So change the ownership/permissions on the content.  To serve it up
> > from a web server, you need to make it world-readable.  This means
> > that directories require the x bit, and files require the r bit,
> > for the "other" (right-most characters in ls -l output, least
> > significant bits in the octal mode).  
> 
> Perhaps group readable (074x, x being usually 0) and setting the
> file's group would suffice?
> 
> That's my standard setup: the files belong to a "www admin" (can be a
> regular user, can be root) and have the group www-data. So the web
> server hasn't (usually) write access to normal htmls and cgi-bins
> (oh, for the last, execute access for the group is necessary, so 075x.
> 
> Better safe than...
> 

Even safer, post/run it on someone else's web server. Web space is no
longer given away free by (most) ISPs, but a small amount can be had for
'hobby' money now.

-- 
Joe

Re: web page problem

[tomas]

On Fri, Jun 14, 2019 at 08:46:51AM -0400, Greg Wooledge wrote:
> On Thu, Jun 13, 2019 at 06:11:03PM -0400, Gene Heskett wrote:
> > looks good, but the problem is, only gene=user 1000 has any rights to 
> > follow that path, so this access must be done as gene, not the default 
> > www-data:www-data, or even as the parent session of apache2..
> 
> So change the ownership/permissions on the content.  To serve it up
> from a web server, you need to make it world-readable.  This means that
> directories require the x bit, and files require the r bit, for the
> "other" (right-most characters in ls -l output, least significant bits
> in the octal mode).

Perhaps group readable (074x, x being usually 0) and setting the file's
group would suffice?

That's my standard setup: the files belong to a "www admin" (can be a
regular user, can be root) and have the group www-data. So the web
server hasn't (usually) write access to normal htmls and cgi-bins
(oh, for the last, execute access for the group is necessary, so 075x.

Better safe than...

Cheers
-- t


signature.asc
Description: Digital signature

Re: web page problem

[Greg Wooledge]

On Thu, Jun 13, 2019 at 06:11:03PM -0400, Gene Heskett wrote:
> looks good, but the problem is, only gene=user 1000 has any rights to 
> follow that path, so this access must be done as gene, not the default 
> www-data:www-data, or even as the parent session of apache2..

So change the ownership/permissions on the content.  To serve it up
from a web server, you need to make it world-readable.  This means that
directories require the x bit, and files require the r bit, for the
"other" (right-most characters in ls -l output, least significant bits
in the octal mode).

In other words, 711 or 755 on the directories, and 644 on the files.

> Is there 
> an "as user=gene" command that can be used only for this stanza that I 
> can put in this stanza?  root cannot go up this path to see anything,  
> neither can www-data.

If root can't see the files, that means you're dealing with some kind
of remote file system, like NFS?  If so, you really need to state the
full relevant details up front.

If you need to change permissions on an NFS-mounted file system that
you're serving up through a web server on the NFS client system, then
you'll need to make the changes *on* the NFS server, or as the owner
of the files on the NFS client.

By the way, I recommend running the web server from the same box where
the files reside if at all possible, just for efficiency and sanity.

> Is this a place where making gene a member of group www-data would help? 

No.

Longer answer: each process has its own UID, GID and list of supplementary
groups.  If the apache worker process that tries to read your content is
running as UID www-data and GID www-data with no supplementary groups,
then the *only* permissions that matter are the "other" permissions on
the file (those always matter), or the "group" permissions if the *FILE*
belongs to group www-data (sounds like this is not the case), or the
"user" permissions if the *FILE* belongs to user www-data (definitely
not the case).

When you "add user gene to group www-data", this has absolutely zero
effect on a process that is running as user www-data/group www-data.
(Daemons are launched by lower-level system processes that do not give
half a flip about what groups users are "in" in /etc/group.)  The only
effect that your group addition has is on *logins* made by the user
named gene.  Future login sessions for gene will have one more group
added to their list of supplementary groups.

Adding a user to a group has no effect on files that you own.  Each file
has one user-owner, one group-owner, one octal mode number declaring
yes/no permissions for user/group/owner, and some ACL crap that I *really*
am not going to get into here.  Suffice to say, "adding a user to a group"
is not a thing that file systems or the files in them care about.

Adding a user to a group has no effect on the privileges of daemons
that are started by your init system.

It *does* appear to affect the group membership of your at jobs, though.
I didn't test cron, and of course neither cron(8) nor crontab(1) tells me
whether it affects cron jobs, because why would they mention something
important like the privileges of your running jobs

Re: strange behaviour with RDP clients connecting to Windows 10 machines

[Gary Dale]

On 2019-06-14 3:45 a.m., Curt wrote:

On 2019-06-14, john doe  wrote:

Not realy an answer, depending on what you need vnc for, one alternative
would be to use Cygwin as an ssh server on the Windows boxes.


He might try removing ~/.config/freerdp/known_hosts (after backing it
up) or commenting out or deleting the offending host key.

On my system it is known_hosts2 but I get the same results. Don't 
forget, I'm connecting to localhost while the ssh tunnel provides the 
route to the real host.

Re: Forgot name of Debian "configuration" {wrong word?} file

[songbird]

Richard Owlett wrote:
> I can't remember the name of the file which identifies the association 
> between a directory (i.e. \home) and which physical partition it is on. 
> The file I'm looking for also identifies which partition is used for swap.

  /etc/fstab


  songbird

Re: strange behaviour with RDP clients connecting to Windows 10 machines

[Gary Dale]

On 2019-06-14 1:49 a.m., john doe wrote:

On 6/14/2019 5:46 AM, Gary Dale wrote:

I recently had the unpleasant experience of "upgrading" a pair of
Windows 7/Pro computers to Windows 10/Pro - the 9 month old version, not
the latest install image. That's when I discovered the Windows 10
"feature" that it doesn't allow VNC connections when the monitor is
turned off (or not attached).

I enabled Remote Desktop services on both machines and can connect to
them when the monitor is off using RDP. However, even though I installed
the same version of Windows 10/Pro on each, they behave differently. One
was a long drawn out slug fest to get the "upgrade" to work (it still is
having problems with roaming profiles) while the other was a
straightforward.

I connect using an ssh tunnel to a stretch server with local port
forwarding so my connection is to localhost:3388. The ssh command
specifies the machine I want to connect to (e.g. ssh  -L
3388:10.0.0.25:3389). This way I never expose a Windows machine to the
Internet. The only way in is through the server.

The machine that gave me the trouble on the upgrade connects without
problem using KDRC but not Remmina or Vinagre. The other computer
connects without a problem using Vinagre but not KDRC or Remmina.

Remmina gives a message saying "Unable to connect to RDP server
localhost" when I try connecting to either machine. Vinagre on the first
machine brings up an authentication dialog then crashes. KDRC does the
same thing when I try to connect to the second machine.

I'm probably going to "upgrade" both to the latest Windows 10 version in
the coming weeks, but for now I am puzzled about why I have to use 2
different programs to connect to 2 machines that are largely identical.


Not realy an answer, depending on what you need vnc for, one alternative
would be to use Cygwin as an ssh server on the Windows boxes.

I would not spend my time on non-up-to-date systems when Windows is
involved, one can only hope that the issues you are facing are fixed on
up-to-date Windows systems! :)


1) The Windows boxes are up to date. Microsoft releases a new version of 
Windows 10 every 6 months but continues to release updates for the older 
versions. This is similar to what Ubuntu does except that Microsoft 
doesn't label some versions as LTS and so far haven't dropped support 
for any version of Windows 10.


2) I don't want to directly connect to a Windows box. That would require 
opening up more ports on the router and giving hackers more targets.




--
John Doe

Re: Forgot name of Debian "configuration" {wrong word?} file

[Richard Owlett]

On 06/14/2019 06:20 AM, Erik Christiansen wrote:

On 14.06.19 06:10, Richard Owlett wrote:

I can't remember the name of the file which identifies the association
between a directory (i.e. \home) and which physical partition it is on. The
file I'm looking for also identifies which partition is used for swap.


Easier than looking in /etc/fstab is just running the "mount" command.
The "df" command also includes what you seek in its output.

Erik



Thanks. I've never used the df command and I always think of mount as an 
action command not as a query.


I just ran the mount command with no options. It gave a fascinating list 
that I should probably read about.

Re: Forgot name of Debian "configuration" {wrong word?} file

[Richard Owlett]

On 06/14/2019 06:20 AM, john doe wrote:

On 6/14/2019 1:10 PM, Richard Owlett wrote:

I can't remember the name of the file which identifies the association
between a directory (i.e. \home) and which physical partition it is on.
The file I'm looking for also identifies which partition is used for swap.

TIA




Maybe:

'/etc/fstab'



Thanks.

Re: Forgot name of Debian "configuration" {wrong word?} file

[Jonas Smedegaard]

Quoting Richard Owlett (2019-06-14 13:10:25)
> I can't remember the name of the file which identifies the association 
> between a directory (i.e. \home) and which physical partition it is 
> on. The file I'm looking for also identifies which partition is used 
> for swap.

/etc/fstab

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private


signature.asc
Description: signature

Re: Forgot name of Debian "configuration" {wrong word?} file

[Erwan David]

/etc/fstab


Le 14/06/2019 à 13:10, Richard Owlett a écrit :
> I can't remember the name of the file which identifies the association
> between a directory (i.e. \home) and which physical partition it is
> on. The file I'm looking for also identifies which partition is used
> for swap.
>
> TIA
>
>
>

Re: Forgot name of Debian "configuration" {wrong word?} file

[Erik Christiansen]

On 14.06.19 06:10, Richard Owlett wrote:
> I can't remember the name of the file which identifies the association
> between a directory (i.e. \home) and which physical partition it is on. The
> file I'm looking for also identifies which partition is used for swap.

Easier than looking in /etc/fstab is just running the "mount" command.
The "df" command also includes what you seek in its output.

Erik

Re: Forgot name of Debian "configuration" {wrong word?} file

[john doe]

On 6/14/2019 1:10 PM, Richard Owlett wrote:
> I can't remember the name of the file which identifies the association
> between a directory (i.e. \home) and which physical partition it is on.
> The file I'm looking for also identifies which partition is used for swap.
>
> TIA
>
>

Maybe:

'/etc/fstab'

--
John Doe

Re: error when printing to Samsung C410 series colour laser printer

[Brian]

On Thu 13 Jun 2019 at 21:31:49 -0400, Gary Dale wrote:

> On 2019-06-13 5:06 a.m., Brian wrote:

[...]

> > Your setup would appear to be:
> > 
> > 1. The C410 is connected to a CUPS server via USB (but the connection
> > can also be via wireless).
> > 
> > 2. The server has the Samsung ULD software installed and is advertising
> > shared queues.
> > 
> > 3. The buster client contacts the server over wireless and is running
> > cups-browsed.
> > 
> > Please post what you get with 'lpstat -l -e' from the client. You should
> > be able to recognise your print queue from the output, so follow up with
> > 'lpoptions -p '.
> > 
> Not quite. The network connection is wired. The C410 only connects
> wirelessly using WPS, which I have disabled on the router.
> 
> $ lpstat -l -e
> Samsung_C410_Series permanent ipp://localhost/printers/Samsung_C410_Series
> dnssd://Samsung%20C410%20Series%20(SEC30CDA71CB48A)._printer._tcp.local/
> Samsung_C410_Series_SEC30CDA71CB48A_ network none
> ipp://Samsung%20C410%20Series%20(SEC30CDA71CB48A)._ipp._tcp.local/
> Samsung_C410_Series_TheLibrarian network none
> ipps://Samsung%20C410%20Series%20%40%20TheLibrarian._ipps._tcp.local/cups
> Samsung_C410_Series_TheLibrarian_3 permanent
> ipp://localhost/printers/Samsung_C410_Series_TheLibrarian_3 file:///dev/null
> 
> The printer is defined  on the server (TheLibrarian) twice - once as a
> network printer and once as a USB printer. It's defined once on my
> workstation as a network printer, so I can avoid going through the server.
> 
> $ lpoptions -p Samsung_C410_Series
> copies=1 
> device-uri=dnssd://Samsung%20C410%20Series%20(SEC30CDA71CB48A)._printer._tcp.local/
> finishings=3 job-cancel-after=10800 job-hold-until=no-hold job-priority=50
> job-sheets=none,none marker-change-time=1560454516
> marker-colors=#00,#00,#FF00FF,#00,none,none,none,none,none,none
> marker-levels=201,178,74,62,89,60,61,89,50,0 marker-names='Black\ Toner\
> S/N\ :CRUM-14031169715,Cyan\ Toner\ S/N\ :CRUM-14031169678,Magenta\ Toner\
> S/N\ :CRUM-14031182177,Yellow\ Toner\ S/N\ :CRUM-14031182186,Transfer\
> Roller,Transfer\ Belt,Fuser\ Life,Pick-up\ Roller,Imaging\ Unit,Waste\
> Toner'
> marker-types=toner,toner,toner,toner,other,other,fuser,other,other,other
> number-up=1 PageSize=Letter printer-commands=none printer-info='Samsung C410
> Series' printer-is-accepting-jobs=true printer-is-shared=false
> printer-is-temporary=false printer-location='family room'
> printer-make-and-model='Samsung C410 Series' printer-state=3
> printer-state-change-time=1560454516 printer-state-reasons=none
> printer-type=2101324
> printer-uri-supported=ipp://localhost/printers/Samsung_C410_Series

Very useful. As confirmation (or not) of an idea, let us have what

cupsfilter -p /etc/cups/ppd/ -m printer/foo \
-e --list-filters /etc/nsswitch.conf

gives (as root). The line is broken for readability.

-- 
Brian.

Forgot name of Debian "configuration" {wrong word?} file

[Richard Owlett]

I can't remember the name of the file which identifies the association 
between a directory (i.e. \home) and which physical partition it is on. 
The file I'm looking for also identifies which partition is used for swap.


TIA

Want to take over maintenance of package xsnow

[Willem Vermin]

LS,

the current maintainer of the package xsnow:
 https://packages.debian.org/sid/xsnow
has let me know that he is not maintaining the package any more, and 
that it is OK with him that I take over maintenance.


Can you please let me know how to proceed?

Regards,

Willem Vermin

Re: Fetchmail not working after upgrade to Debian 9.9 (Stretch)

[Gene Heskett]

On Friday 14 June 2019 01:06:16 am Joe Aquilina wrote:

> > >> On Thursday 13 June 2019 09:58:39 pm Joe Aquilina wrote:
> > >>
> > >> Hello all.
> > >> A colleague has very recently upgraded his Debian system at home
> > >> from Jessie (not sure which version) to Stretch (9.9) and from
> > >> that moment, fetchmail has failed to collect emails. I/we are
> > >> relatively inexperienced with diagnosing & fixing such problems
> > >> and are looking for any advice people here may be able to give us
> > >> to overcome this problem. When fetchmail polls the email server,
> > >> we get the following error message:
> > >>
> > >> Jun 14 09:21:02 localhost fetchmail[15672]: Your OpenSSL version
> > >> does not support SSLv3.Jun 14 09:21:02 localhost
> > >> fetchmail[15672]: SSL connection failed.Jun 14 09:21:02 localhost
> > >> fetchmail[15672]: socket error while fetching from
> > >> cccm...@mail.chem.com.auJun 14 09:21:02
> > >
> > > its rather plainly telling you your ssl version is too old.
> > > Perhaps it did not get upgraded with the rest of the system?  Make
> > > sure the security channel for your repo is enabled.
>
> Checked in dpkg, which tells me that fetchmail and openssl are both
> upgraded to the current versions.
>
> Is this the relevant section of the sources.list:
>
> deb http://ftp.iinet.net.au/debian/debian/ stretch main
>
> deb http://security.debian.org/ stretch/updates main contrib non-free
>
> This leads me to think that the security channel is enabled, but I
> have been known to be wrong about these things.
>
> Anything else I need to be looking for?
>
I think I would verify that both are using the same version.  You might 
even compare the installed .conf files.  Got to be a diff someplace.  

My own isp's mailserver is using dovecot, and doesn't use sslv3 just 
plain ssl. And because they also serve imap users from the same 
accounts, fetchmails DELE is ignored, so I log in daily with a browser 
and clean house.  Does your email agent have a "check what the server 
supports" function?

I've been known to use that, then transfer those results to fetcmail's 
recipe. 

> > >> localhost fetchmail[15672]: Query status=2 (SOCKET)
> > >> Below is a copy of the .fetchmailrc file on that system (with any
> > >> sensitive data replaced:
> > >> set no bouncemail
> > >> set postmaster "postmaster_details"
> > >>
> > >> poll email.server.name
> > >>     protocol pop3 port 995
> > >>     with uidl
> > >>     user "username" with password "secret" is
> > >> "local_account" here
> > >>     with ssl and sslproto 'TLS1+'
> > >>     with sslfingerprint
> > >> "AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA"
> > >>     with keep
> > >>     smtpaddress "local_smtp_server"
> > >>     mda "/usr/bin/procmail -d %T"
> > >>
> > >> We have a near identical machine here at work, that has been
> > >> running Debian 9 for some time, and it is collecting emails from
> > >> the relevant email server just fine.
> > >> Any thoughts/suggestions welcome. Is there anything else that I
> > >> can post here that might give those more knowledgeable than us a
> > >> clue as to what we need to do to fix this?
> > >> Thanks in advance.
> > >> Cheers.
> > >> Joe Aquilina
> > >
> > > --
> > > "There are four boxes to be used in defense of liberty:
> > > soap, ballot, jury, and ammo. Please use in that order."
> > > -Ed Howdershelt (Author)
> > > If we desire respect for the law, we must first make the law
> > > respectable. - Louis D. Brandeis
> > > Genes Web page 


Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: Reading pdf files

[Erik Christiansen]

On 13.06.19 16:29, k. jantzen wrote:
> 
> in general I do not have a problem reading a pdf file with either xpdf or
> documentviewer.

Yup, documentviewer will sometimes show faint lines better, I find, but
it's easy to set the background colour in xpdf.

> But once in a while I get a pdf file that they cannot read and then I have
> to go to Windows to open it.
> 
> What is so spectacular about these files that they cannot be read by the
> above mentioned programs?

That varies, and a reader with good error messages is the easiest way to
find out.

> Is there another program that would read such a file?

Well, given s/would/could, try mupdf:

$ apt-cache search mupdf
mupdf - lightweight PDF viewer
mupdf-tools - commmand line tools for the MuPDF viewer
libmupdf-dev - development files for the MuPDF viewer

In my case, a pdf certificate from a state authority displayed the logo
and signature in xpdf, but none of the text - not much use at all.

A quick install of mupdf not only allowed the whole document to be
displayed, but issued (a squillion times) the following error message on
stderr:

Error: Couldn't create a font for 'ABCDEE+Calibri,Bold'
Error: Found a bad table definition on true type definition, trying to 
continue...

after an initial:

Error: PDF file is damaged - attempting to reconstruct xref table...

I only use mupdf for problem pdf files, but it's very nifty to have on
hand.

Erik

Re: Wondering how long it usually takes for a package to move from stable-p-u

[andreimpopescu]

On Jo, 11 apr 19, 08:20:18, Jerome BENOIT wrote:
> Hello,
> 
> On 11/04/2019 05:59, Luke Picciau wrote:
> > I have been tracking this package 
> > https://tracker.debian.org/pkg/ca-certificates-java for about a month 
> > because the package version 20170929~deb9u1 which is in stable has a bug 
> > which is blocking my docker image builds. Version 20170929~deb9u2 should 
> > fix it but the package has been in stable-p-u for a while now. How long 
> > usually does it take for a package to move from stable-p-u to stable?
> 
> You have to bear in mind that currently Debian is terminating a cycle.

stable-proposed-updates is currently just a link to 
stretch-proposed-updates.

When buster is released the link will be changed to point to 
buster-proposed-updates instead, it won't affect the contents of the 
archive.

This is just another way of recommending to always use code-names in 
sources.list, as it avoids surprises on releases.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature

Re: konquerer access to Stretch with fish or sftp not working

[thomas]

Hello,
Am Donnerstag, 13. Juni 2019, 20:31:24 CEST schrieb Étienne Mollier:

> On 6/13/19 10:52 AM, Thomas wrote:
> > konsole in user mode (NOT root)
> > (1) # sftp 192.168.1.20
> > The authenticity of host '192.168.1.20 (192.168.1.20)' can't be

> Perhaps it could have been just this validation missing?

May be, but for me its not anymore understandably because of so many versions 
of konquerer, console, fish, sftp, root, user
Later on I may be look for an "better/newer" solution to handle this kind of 
access to another PC..

thanks for help!
Thomas

Re: strange behaviour with RDP clients connecting to Windows 10 machines

[Curt]

On 2019-06-14, john doe  wrote:
>
> Not realy an answer, depending on what you need vnc for, one alternative
> would be to use Cygwin as an ssh server on the Windows boxes.


He might try removing ~/.config/freerdp/known_hosts (after backing it
up) or commenting out or deleting the offending host key.

Re: Promotional material (presentations)

[andreimpopescu]

On Mi, 10 apr 19, 18:03:39, Paul Sutton wrote:
> Hi
> 
> I have sent a message to pr...@debian.org with regard to submitting a
> presentation on Debian for review, while I got a successful delivery
> report, I then got another e-mail saying it had failed.
> dnorw...@portalus.com (generated from pr...@debian.org)
> 
> I don't know if this e-mail has reached its destination or not.

Debian is using aliases for the official contact addresses. The failed 
delivery is only from one of the addresses behind the alias 
(assuming/hoping there is more than one person behind it).
 
> I just wondered if anyone here perhaps deals with publicity materials
> and would be able to advise or review a submission please. The latest
> presentation here (
> https://wiki.debian.org/Presentations#For_latex-beamer ) is dated 2013.
> 
> Just thought I would ask here for some advice.

If this is still an issue you might want to ask for help on 
debian-project. Someone (TM) should know the status of the Press Team 
and might be able to guide you further.

I would suggest you expand your subject to include "Debian" or so. The 
current one looks a lot like what spammers are using.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser


signature.asc
Description: PGP signature