| 00:00.09 | *** join/#debian MoDaX (n=nth@lan-84-240-22-131.vln.skynet.lt) |
| 00:00.10 | *** join/#debian GeorgeA (n=george@82.198.29.38.satgate.net) |
| 00:00.32 | Lagbolt | try reloading the module |
| 00:00.35 | Juventino | Lagbolt, so any way i can make the kernel rescan my devices? |
| 00:00.38 | Juventino | hmm how? |
| 00:00.43 | Lagbolt | rmmod bttv |
| 00:00.47 | Lagbolt | modprobe bttv |
| 00:01.14 | Juventino | $ rmmod bttv |
| 00:01.14 | Juventino | bash: rmmod: command not found |
| 00:01.21 | Lagbolt | must be root |
| 00:01.26 | Juventino | oh sorry |
| 00:01.28 | Juventino | my bad |
| 00:01.38 | Lagbolt | then ls -rlct /dev <-- should show reverse time and see if new devices are created |
| 00:02.07 | Juventino | ERROR: Module bttv is in use by bt878 |
| 00:02.52 | *** join/#debian bzed_ (n=bzed@devel.recluse.de) |
| 00:03.06 | *** join/#debian amigri (n=amigri@189-46-10-1.dsl.telesp.net.br) |
| 00:03.11 | *** join/#debian reZo (n=reZo@203-184-20-243.jetbuster.co.nz) |
| 00:03.25 | Lagbolt | hmm |
| 00:03.53 | *** join/#debian pflanze (n=chris__@77-56-83-98.dclient.hispeed.ch) |
| 00:03.53 | Lagbolt | yeah prob need to rmmod a couple mods to get it out |
| 00:04.16 | Juventino | ok |
| 00:04.23 | Juventino | did rmmod bt878 |
| 00:04.27 | Juventino | and then bttv |
| 00:05.09 | Lagbolt | are you supposed to have any firmware with this card? |
| 00:05.37 | Juventino | well it's supposed to work with no problems |
| 00:05.48 | Juventino | i mean no firmware is needed |
| 00:05.56 | pflanze | Hello. On testing, while installing fig2ps and running out of disk space during this operation, after making space, I'm now running into "dpkg.distrib: ../../src/packages.c:221: process_queue: Assertion `dependtry <= 4' failed.". So how am I going to get out of this? |
| 00:06.04 | *** join/#debian r3c4ll (i=alimoren@190.198.185.22) |
| 00:06.10 | Lagbolt | Juventino, what is the make and model of the card? |
| 00:06.25 | Juventino | TwinhanDTV 878 |
| 00:06.33 | *** join/#debian s0lid (n=s0lid@210.213.199.2) |
| 00:07.50 | Juventino | or also called bt878 (the name of the chipset) |
| 00:08.17 | *** join/#debian Mamanga (n=Carlo@190.189.26.220) |
| 00:08.20 | pflanze | found http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=143307 |
| 00:08.36 | Lagbolt | Juventino, do this - - find /dev/ -iname "*dvb*" |
| 00:08.43 | Joelito | What would be a nice image viewer that don't need a specific window manager? |
| 00:08.57 | jelly-home | qiv? gliv? |
| 00:09.08 | Lagbolt | qiv is great |
| 00:09.18 | jelly-home | xv if it was still in debian ;-)( |
| 00:09.22 | Juventino | Lagbolt, no results |
| 00:10.03 | Juventino | well, i have an error when i try loading the manfacturer's drivers: |
| 00:10.28 | binarymutant | feh |
| 00:10.34 | Juventino | insmod: error inserting './cx8800.ko': -1 Invalid module format |
| 00:10.34 | Juventino | /sbin/insmod ./cx88-dvb.ko |
| 00:13.36 | *** join/#debian creitos (n=creitos@nat1.inalambrica.net) |
| 00:13.44 | *** join/#debian NickPresta (n=nickpres@CPE001c102604d4-CM0011e6c456e3.cpe.net.cable.rogers.com) |
| 00:13.58 | Lagbolt | Juventino, everything about that card is sooooooooo old online lol |
| 00:14.07 | Juventino | lol yea |
| 00:14.10 | Juventino | it's an old card |
| 00:14.17 | Juventino | it's working like charm on Sidux |
| 00:14.25 | Juventino | so i'm amazed it's not working on ETCH |
| 00:14.25 | Juventino | :s |
| 00:15.00 | Lagbolt | what kern was in sidux? |
| 00:15.13 | Juventino | 2.6.23 |
| 00:15.29 | *** join/#debian joshteam (n=joshteam@adsl-66-137-224-98.dsl.rcsntx.swbell.net) |
| 00:15.29 | Lagbolt | maybe you should upgrade kern |
| 00:15.35 | joshteam | is there a apt-get for rsync? |
| 00:15.45 | susanne-- | joshteam: apt-get install rsync? |
| 00:15.48 | *** join/#debian wm4 (n=whatnao@p57A56F22.dip.t-dialin.net) |
| 00:15.53 | Juventino | hmm i'm not that experienced... and i don't wanna mess things up |
| 00:15.55 | joshteam | that worked quite well :) |
| 00:16.00 | joshteam | thanks susanne-- |
| 00:16.12 | Lagbolt | Juventino, you can use backports to upgrade to a newer kernel |
| 00:16.23 | itomato | Juventino: what happens with 'modprobe' instead of insmod? |
| 00:16.26 | Lagbolt | assuming you are using a debian packaged kern |
| 00:16.45 | Juventino | well i didn't try modprobe , it's a make file |
| 00:16.48 | wm4 | I don't have /dev/kvm, what package do I need to install to automatically add it? I already installed kvm and kvm-data and did modprobe kvm, I'm using debian unstable |
| 00:16.54 | itomato | .ko makefile |
| 00:16.57 | itomato | ? |
| 00:17.01 | joshteam | susanne--: can u do: rsync -r /www/aloe/ root@1.0.0.0:/var/www/aloeveramed |
| 00:17.12 | joshteam | assuming 1.0.0.0. is a real server |
| 00:17.21 | *** join/#debian s0lid_ (n=s0lid@121.1.18.241) |
| 00:17.21 | pflanze | sigh, anyone else with a broken Debian testing system (dpkg not working anymore..)? Be careful.. |
| 00:17.33 | Juventino | well, i think the /dev/dvb was there, but i deleted it by mistake |
| 00:17.33 | Lagbolt | Juventino, try "modprobe dvb_bt8xx" |
| 00:17.35 | susanne-- | joshteam: something like that. man rsync |
| 00:17.42 | Juventino | so any chance to resotre it? |
| 00:17.46 | *** join/#debian dendrite (n=ph@dsl092-150-203.wdc2.dsl.speakeasy.net) |
| 00:17.47 | Lagbolt | pflanze, dpkg isnt working? |
| 00:18.04 | wm4 | nevermind, I forgot modprobe kvm_intel |
| 00:18.10 | *** part/#debian wm4 (n=whatnao@p57A56F22.dip.t-dialin.net) |
| 00:18.17 | joshteam | I read it susanne-- but when I run that command, nothing is printed out. Unlike scp. |
| 00:18.20 | Juventino | Lagbolt, done |
| 00:18.29 | pflanze | Lagbolt: yeh, see above (On testing, while installing fig2ps and running out of disk space during this operation, after making space, I'm now running into "dpkg.distrib: ../../src/packages.c:221: process_queue: Assertion `dependtry <= 4' failed.". found http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=143307) |
| 00:18.32 | Lagbolt | any new "dmesg" andy new drivers? |
| 00:18.35 | Lagbolt | devs i mean |
| 00:18.37 | itomato | Juventino: when the module is loaded, the device should be available. - if not, it can be recreated with 'mknod' |
| 00:19.09 | *** join/#debian dante_2core (n=dante@80-219-138-141.dclient.hispeed.ch) |
| 00:19.20 | *** join/#debian reffle (n=reffle@cpc2-amer1-0-0-cust67.watf.cable.ntl.com) |
| 00:19.25 | itomato | Ju: run 'strings' on the module, like 'strings foo.ko | grep 2.6' and see what version pops out.. |
| 00:19.29 | susanne-- | joshteam: -v and --progress |
| 00:19.41 | Juventino | hmm |
| 00:19.46 | Juventino | something interesting here |
| 00:19.51 | pflanze | Lagbolt: dunno any way out now.. except downloading dpkg sources and installing a patched dpkg manually, but (a) I'll have to find out the patch myself it seems, and (b) horrors ahead getting the dpkg build deps onto this system, probably. |
| 00:19.57 | *** join/#debian dvs (n=colin@cwv.teksavvy.com) |
| 00:20.06 | Juventino | http://pastebin.com/m7b71908f |
| 00:20.26 | joshteam | Thanks susanne-- you rock |
| 00:20.33 | itomato | J'tino: it's possible to strip the kernel version information from the module and force it in, but it can get nasty.. |
| 00:20.36 | Lagbolt | Juventino, it says try removing bt87x |
| 00:20.38 | Lagbolt | so try it |
| 00:20.47 | *** join/#debian jelly-home (n=jelly@islands.iskon.hr) |
| 00:21.02 | Lagbolt | pflanze, i am reading that bug link . so you cant use dpkg at all or just hangs onthat package? |
| 00:21.07 | Juventino | Lagbolt, how? :s |
| 00:21.14 | pflanze | Lagbolt: I can't use it at all anymore |
| 00:21.19 | Juventino | and i just found out, i don't have ALSA installed |
| 00:21.28 | dvs | !install alsa |
| 00:21.33 | dvs | oops |
| 00:21.37 | *** join/#debian gnuSnob (n=jgombos@dialup-4.224.231.99.Dial1.Cincinnati1.Level3.net) |
| 00:21.45 | Lagbolt | Juventino, you dont have it installed eh |
| 00:21.59 | pinto3 | !alsa |
| 00:21.59 | dpkg | ALSA is the Advanced Linux Sound Architecture. Debian has documentation at http://wiki.debian.org/ALSA or see <alsa install>, <alsa-checklist>, or <alsa firmware> |
| 00:22.01 | Juventino | no.. which is weird, cause i do have sound |
| 00:22.10 | pflanze | Lagbolt: well, apt-get -f install calls dpkg which stops again; maybe some manual dpkg calls still work, dunno |
| 00:22.13 | Juventino | should i install it and try again? |
| 00:22.26 | *** join/#debian simmerz (n=simmerz@109.87.2.81.in-addr.arpa) |
| 00:22.26 | susanne-- | joshteam: be aware that rsync's progress output in terms of number of files left can be deceptive when traversing large directories. you may see 1033/13221 and then the next file might be 1034/14993 ... this is because of how your file list is being built |
| 00:22.29 | *** join/#debian markybob (i=markybob@unaffiliated/markybob) |
| 00:22.32 | *** join/#debian preds (n=nathan@203.212.17.18) |
| 00:22.33 | Lagbolt | pflanze, it is just that fig2ps right? |
| 00:22.43 | Lagbolt | try "dpkg -P pflanze" |
| 00:22.45 | stew | Juventino: alsa is built into the kernel, so if you are running a debian kernel, alsa is installed. you might not have all of the userspace utilities though, /msg dpkg alsa checklist |
| 00:22.49 | joshteam | susanne--: thanks. :) |
| 00:22.49 | *** part/#debian amigri (n=amigri@189-46-10-1.dsl.telesp.net.br) |
| 00:23.06 | simmerz | is there a monitoring tool that sounds a bit like munin? but not munin? I seem to recall there were two packages that sounded really similar to each other that sort of complement each other. one does monitoring, the other can graph it |
| 00:23.07 | *** join/#debian faw (n=felipe@unaffiliated/faw) |
| 00:23.08 | pflanze | Lagbolt: dpkg - warning: ignoring request to remove pflanze which isn't installed. |
| 00:23.19 | pinto3 | alsaconf is the config utility |
| 00:23.32 | susanne-- | is there a way to do a good hardware test on a drive? eg map new bad sectors and so on? drive doesn't have to be mounted in this scenario |
| 00:23.32 | Lagbolt | pflanze, dpkg -l | grep fig2ps |
| 00:23.38 | Lagbolt | what does that show |
| 00:23.43 | Juventino | hmmm i'm still nowhere :( |
| 00:23.47 | Lagbolt | Juventino, not sure what to tell you |
| 00:23.53 | stew | susanne--: badblocks |
| 00:23.54 | *** join/#debian Mr-Egd (n=jj@port-92-192-51-133.dynamic.qsc.de) |
| 00:23.55 | pflanze | Lagbolt: iU fig2ps 1.3.6-5 Converts xfig files into ps, eps or pdf files using LaTeX for pr |
| 00:24.01 | Juventino | Lagbolt, it's ok thnx anyway :) |
| 00:24.03 | Lagbolt | Juventino, all the info is old and i dont have a card like that |
| 00:24.23 | Lagbolt | Juventino, is that modules it was complaingin about loaded? check lsmod |
| 00:24.52 | pflanze | Lagbolt: I'm going to try to remove fig2ps and all deps now, ok? |
| 00:24.53 | Juventino | ok will do that |
| 00:25.08 | Lagbolt | pflanze, hmm try dpkg --configure fig2ps |
| 00:25.13 | stew | pflanze: you don't have to do that, its not installed |
| 00:25.28 | stew | pflanze: show us the output of "dpkg --configure -a && aptitutde -f install" |
| 00:25.29 | Lagbolt | iU is installed unconfigured isnt it? |
| 00:25.34 | *** join/#debian joshteam (n=joshteam@adsl-66-137-224-98.dsl.rcsntx.swbell.net) |
| 00:25.39 | pflanze | dpkg --configure fig2ps says "fig2ps depends on texlive-extra-utils | tetex-extra; however: |
| 00:25.39 | dpkg | You are moron #9, pflanze |
| 00:25.39 | pflanze | <PROTECTED> |
| 00:25.54 | stew | Lagbolt: i = you requested it to be installed U = unpacked (but not installed) |
| 00:26.03 | Lagbolt | ah gotcha |
| 00:26.23 | pflanze | so I better try dpkg -r fig2ps I guess |
| 00:26.41 | Lagbolt | no looks like prob is with texlive package |
| 00:26.59 | Lagbolt | it wont do fig2ps until the however is taken care of i think |
| 00:27.07 | pflanze | dpkg -r fig2ps worked, now going to try apt-get -f install and continue from there |
| 00:27.07 | dpkg | removes fig2ps worked, now going to try apt-get -f install and continue from there along with a pound of flesh from pflanze's body, then staples pflanze back up with a staple gun. |
| 00:27.22 | Lagbolt | pflanze, cool |
| 00:27.38 | Lagbolt | dpkg is funny |
| 00:27.38 | *** join/#debian kanzure (n=bryan@cpe-70-113-54-112.austin.res.rr.com) |
| 00:27.38 | dpkg | Lagbolt: KCI error, or a problem with the Keyboard-Chair Interface. |
| 00:27.43 | Lagbolt | wtf |
| 00:27.59 | Lagbolt | keyboard chair interface |
| 00:27.59 | Lagbolt | nice |
| 00:28.26 | kanzure | If debian dependencies were to be updated, what would a better method be? Right now dependencies look like: libc6 (>= 2.1), packageblah (<= 1.5), etc. Is this "good enough" or has anybody any better ideas ? |
| 00:28.51 | dondelelcaro | kanzure: most of the dependencies should be automatically generated anyway |
| 00:29.07 | dondelelcaro | kanzure: dependencies on <=1.5 are generally not a great idea either |
| 00:29.09 | kanzure | dondelelcaro: I see. I'm just trying to copy it for another project of similar nature. |
| 00:29.13 | *** join/#debian craigevil-eee (n=craig@114.64.205.68.cfl.res.rr.com) |
| 00:29.17 | *** join/#debian joshteam_ (n=joshteam@adsl-66-137-224-98.dsl.rcsntx.swbell.net) |
| 00:29.23 | kanzure | dondelelcaro: So I'm wondering if a markup language would make sense. |
| 00:29.39 | kanzure | I don't think so - otherwise we would've done MLs for debian dependencies in the first place. |
| 00:30.09 | dondelelcaro | kanzure: there's really no point; markup languages just make it hard for humans to read. |
| 00:30.17 | kanzure | heh :) |
| 00:30.27 | dondelelcaro | (and the rules are simple enough that a machine can easily parse it) |
| 00:30.49 | *** join/#debian xerophyte (i=xerophyt@CPE00195b0cd64f-CM001bd7ac48f4.cpe.net.cable.rogers.com) |
| 00:30.54 | *** join/#debian s0lid__ (n=s0lid@210.213.199.2) |
| 00:30.57 | dondelelcaro | about the only thing that is missing in dependencies is a grouping operator, but that's almost never a problem |
| 00:31.00 | *** join/#debian mtn (n=mtn@dpc6746233034.direcpc.com) |
| 00:31.17 | dondelelcaro | (and the few times it is, there are various ways around it) |
| 00:31.45 | simmerz | is there another package that provides monitoring apps that is spelt almost but not quite the same way as munin? I'm sure there is, but it's not coming to me right now |
| 00:31.45 | pflanze | stew: the output of dpkg --configure -a was actually what has been called to get that assertion failure. |
| 00:32.09 | dondelelcaro | simmerz: nagios is the other one, but munin is the best grapher out there that I know of. |
| 00:32.09 | *** join/#debian cmonk82 (n=IceChat7@CPE001d6019c1f0-CM0012c90d1cc2.cpe.net.cable.rogers.com) |
| 00:32.24 | dondelelcaro | (nagios and munin work together, really) |
| 00:32.41 | simmerz | dondelelcaro: don't necessarily want a grapher. just a monitor that will alert and do things like restart services if needed |
| 00:32.41 | pflanze | Lagbolt, stew: I've got control back now after dpkg -r'ing all dependencies from the previous interrupted installation attempt |
| 00:32.55 | Lagbolt | pflanze, cool deal |
| 00:32.57 | *** join/#debian apt_get (n=apt_get@201-24-122-35.bnut3702.dsl.brasiltelecom.net.br) |
| 00:32.59 | apt_get | Hi |
| 00:33.04 | dondelelcaro | simmerz: well, nagios then; though graphing with munin is so trivial that you almost certainly want it. |
| 00:33.07 | simmerz | dondelelcaro: and nagios is a pita to set up |
| 00:33.27 | simmerz | i thought there was another package that sounded like munin. it may well have been munin, but i thought there was |
| 00:33.29 | apt_get | i need the package v86d. Debian dont have it? |
| 00:33.32 | stew | simmerz: monit? |
| 00:33.41 | simmerz | stew: thats the one. thanks |
| 00:34.10 | dondelelcaro | heh; that's one that I didn't know about. |
| 00:34.14 | Lagbolt | apt_get, try packages.debian.org |
| 00:34.20 | apt_get | nothing there |
| 00:34.23 | *** join/#debian zwox__ (i=zwox@par69-7-82-243-234-94.fbx.proxad.net) |
| 00:34.29 | Lagbolt | then it is not in debian, try apt-get.org |
| 00:34.36 | *** join/#debian _CaNeS (n=Linux@bas4-montreal02-1096738082.dsl.bell.ca) |
| 00:35.02 | apt_get | ok |
| 00:35.06 | simmerz | was going to go for a monit/cacit setup |
| 00:35.09 | simmerz | cacti* |
| 00:35.12 | Lagbolt | or go here http://jeandamiendurand.free.fr/debian/splashutils/ |
| 00:36.33 | simmerz | was skemp who suggested that combination. |
| 00:36.49 | *** join/#debian sandman (n=s@CPE-24-208-55-92.new.res.rr.com) |
| 00:37.00 | *** join/#debian Saar (n=Saar@dsl253-098-066.sfo1.dsl.speakeasy.net) |
| 00:37.05 | *** join/#debian GeorgeA (n=george@82.198.29.38.satgate.net) |
| 00:37.23 | sandman | Can the "watchdog" package help in case I have some bad RAM? That is, will it reboot the computer if the kernel gets messed up automagically? |
| 00:37.24 | *** join/#debian PythonNinja (n=richo@unaffiliated/richohealey) |
| 00:37.41 | xerophyte | does anybody use xen 3.2 with debian if so how can i get the ip aliases work on domU |
| 00:37.43 | PythonNinja | can pinning in apt/preferences cause packages to not show in apt-cache policy ? |
| 00:37.56 | dondelelcaro | simmerz: IME, setting up cacti is quite complicated, unless everything you're supporting does SNMP... |
| 00:38.05 | stew | PythonNinja: no, it would cause them to show up with different priorities |
| 00:38.56 | PythonNinja | stew: ah ok, i have two machines with experimental lines in sources.list, but my laptop only sees one of the new packages for kde4 at the .72 version, all others are .68-svn .. which is mental, since it's i386 and the one that sees them all is amd64 |
| 00:39.20 | *** join/#debian Joelito (i=joel@201.160.207.148.cable.dyn.cableonline.com.mx) |
| 00:39.21 | simmerz | dondelelcaro: was going to use cacti purely for graphing output from monit |
| 00:39.57 | kanzure | dondelelcaro: What would be the use of a grouping operator? |
| 00:40.01 | simmerz | that way, I can use monit (very low resource usage) to do the grunt work, and send graphing from time to time to a remote server running cacti to display |
| 00:40.43 | *** part/#debian Livingroom (n=none@97.81.48.98) |
| 00:41.16 | *** join/#debian jerbear (n=jerbear@cpe-075-181-117-114.carolina.res.rr.com) |
| 00:41.53 | *** part/#debian cmonk82 (n=IceChat7@CPE001d6019c1f0-CM0012c90d1cc2.cpe.net.cable.rogers.com) |
| 00:42.13 | dondelelcaro | generally you just have a remote server call using munin periodically; you can also just graph on demand quite easily. |
| 00:42.36 | simmerz | does munin do restarting of services? |
| 00:42.48 | dondelelcaro | simmerz: no, it's just a data collection tool |
| 00:42.55 | dondelelcaro | it won't replace monit |
| 00:43.00 | simmerz | dondelelcaro: that's why i want monit. right yep |
| 00:43.18 | simmerz | so one of cacti or munin will do nicely for graphing anyway |
| 00:43.26 | dondelelcaro | kanzure: (foo, bar, baz) | blah |
| 00:43.34 | kanzure | dondelelcaro: ok, thank you |
| 00:43.35 | *** join/#debian zink_ (n=GOTA@pc-209-33-239-201.cm.vtr.net) |
| 00:43.36 | simmerz | doing it remotely because there are 20 odd servers that I want to install monit on |
| 00:43.45 | dondelelcaro | kanzure: now we go foo|blah, bar|blah, baz|blah |
| 00:44.05 | dondelelcaro | simmerz: yeah; you just install munin-node on those machines, and munin on whatever central one you want to use to graph. |
| 00:44.12 | dondelelcaro | has a few dozen machines running munin-node |
| 00:44.22 | *** join/#debian felix_da_catz (n=felix_da@c-76-31-32-109.hsd1.tx.comcast.net) |
| 00:44.25 | simmerz | ok. also low resource usage? |
| 00:44.38 | dondelelcaro | simmerz: pretty much |
| 00:44.47 | simmerz | how do monit/munin fit in with management packages like cfengine/puppet? |
| 00:45.34 | dondelelcaro | simmerz: they're orthogonal in most respects |
| 00:46.24 | simmerz | ok |
| 00:46.37 | simmerz | thanks for that |
| 00:46.45 | simmerz | right, off to bed now. nearly 2am |
| 00:47.06 | *** join/#debian Christma1 (n=dsotm@84.232.169.53) |
| 00:47.10 | *** join/#debian GeorgeA (n=george@82.198.29.38.satgate.net) |
| 00:50.52 | *** part/#debian apt_get (n=apt_get@201-24-122-35.bnut3702.dsl.brasiltelecom.net.br) |
| 00:53.24 | *** join/#debian r3c4ll (i=alimoren@190.198.185.22) |
| 00:55.46 | *** join/#debian lex_ (n=lex@c-98-212-229-220.hsd1.il.comcast.net) |
| 00:56.25 | *** join/#debian grand_grunt (n=remi@bel42-3-88-175-80-11.fbx.proxad.net) |
| 00:56.37 | *** join/#debian Celelaptop (i=celelibi@86.66.31.194) |
| 00:56.42 | *** join/#debian GeorgeA (n=george@82.198.29.38.satgate.net) |
| 00:56.44 | *** join/#debian Sipingal (n=Sipingal@inet-netcache2-o.oracle.com) |
| 00:57.09 | *** join/#debian zyx386 (n=tony@unaffiliated/zyx386) |
| 00:57.19 | *** join/#debian jim (n=jim@unaffiliated/jim) |
| 00:57.21 | zyx386 | !bts |
| 00:57.21 | dpkg | Bug Tracking System for Debian packages, http://bugs.debian.org/ or to go directly to the bug page for a particular package/bug, try http://bugs.debian.org/packagename or http://bugs.debian.org/bugnumber . aptitude install reportbug, and check out <querybts> too. Users of sid and testing are required to check the BTS. Useful for sid and testing: aptitude install apt-listbugs apt-listchanges . |
| 00:57.37 | *** join/#debian bullgard4 (n=detlef@p5B25AD96.dip0.t-ipconnect.de) |
| 00:59.25 | irule | I started using dnsmasq for a couple months, then my boss got a new nic and asked me to asign his IP address to the new mac address, I folowed the same syntax from the example, but dnsmasq will not asign that ip to the new mac address, is there something else to do to make sure it does what I need? thanks |
| 01:00.06 | *** join/#debian vKentucky (n=mshelby@h231.167.90.75.ip.alltel.net) |
| 01:00.40 | jim | ip/mac address stuff is handled by arp |
| 01:01.20 | jim | you're talking about dns tho, and I don't see how the two relate |
| 01:02.33 | *** join/#debian Crayzie (n=debian@cpe-76-181-121-122.columbus.res.rr.com) |
| 01:02.57 | \amethyst | jim: dnsmasq does both DNS and DHCP |
| 01:03.36 | \amethyst | jim: and presumably, like many DHCP servers, allows you to assign specific IPs to specific MACs |
| 01:03.44 | jim | oh, so mac address could potentially be used to identify the machine? |
| 01:04.28 | \amethyst | jim: that's the idea, and I do that with dhcp3-server; I haven't used dnsmasq myself |
| 01:04.32 | *** join/#debian zarac (i=zarac@c-a228e155.51-1-64736c10.cust.bredbandsbolaget.se) |
| 01:04.48 | grand_grunt | I got a bug on Debian Etch with Beryl: when I launch beryl-manager it restarts my X server. |
| 01:05.08 | markybob | beryl is a bug |
| 01:05.19 | markybob | isnt that a defunct project? merged into compiz again? |
| 01:05.46 | *** join/#debian morficus_ (n=morficus@69.0.44.52) |
| 01:06.06 | grand_grunt | markybob: maybe, but I have used it a few time ago, and kept some settings for it in my home/user that I'd like to try again |
| 01:06.09 | susanne-- | is there an easy way to determine the current size of the lenny archive? |
| 01:06.46 | *** join/#debian morficus_ (n=morficus@69.0.44.52) |
| 01:08.24 | dondelelcaro | !dstats testing |
| 01:08.48 | dondelelcaro | susanne--: what bits in particular did you want to know about? |
| 01:08.51 | dpkg | Debian Distro Stats on lenny... 22240 packages, 1899 maintainers, 56269 MB installed size, 19815 MB compressed size. |
| 01:09.00 | dondelelcaro | susanne--: but see above. |
| 01:09.44 | susanne-- | ty |
| 01:11.02 | *** join/#debian wrlinn (n=ds@adsl-71-135-64-103.dsl.pltn13.pacbell.net) |
| 01:12.35 | zyx386 | how can i fix this error? "E: Sub-process /usr/bin/dpkg returned an error code (1)" |
| 01:13.22 | jim | you need to find out more details about what happened |
| 01:13.46 | jim | do you know how unix programs return error codes |
| 01:13.47 | zyx386 | jim, i install lenny |
| 01:14.01 | jim | lenny could have bugs |
| 01:14.49 | zyx386 | and, most i downgrade to etch? |
| 01:14.55 | *** join/#debian ragnul (n=rjain@66-234-32-149.nyc.cable.nyct.net) |
| 01:15.16 | jim | downgrading is not supported in debian, and probably never will be |
| 01:16.00 | *** join/#debian CAiRO_ (n=tooar@p4FC25A6B.dip.t-dialin.net) |
| 01:16.37 | zyx386 | jim, http://paste.debian.net/2776/ |
| 01:16.47 | *** part/#debian yggshack (n=yggdrasi@c-76-113-119-233.hsd1.nm.comcast.net) |
| 01:18.24 | *** join/#debian gravity (n=david@dsl092-079-075.bos1.dsl.speakeasy.net) |
| 01:19.19 | zyx386 | ? |
| 01:21.05 | abrotman | zyx386: you still haven't found that error in the BTS? |
| 01:21.19 | zyx386 | no :( |
| 01:21.23 | zyx386 | sorry |
| 01:21.39 | abrotman | zyx386: i can't believe you're that lazy |
| 01:22.00 | *** mode/#debian [+l 801] by debhelper |
| 01:22.01 | *** join/#debian Amorphous (n=jan@dslb-088-076-174-196.pools.arcor-ip.net) |
| 01:22.01 | zyx386 | :) sorry, but i cant |
| 01:22.38 | *** join/#debian dFence (n=chatzill@p549810F8.dip0.t-ipconnect.de) |
| 01:22.58 | abrotman | zyx386: you mean you're too lazy ... how would you feel if everyone here was too lazy to help you? |
| 01:23.04 | dFence | eeeem.... anyone have a clue why #asterisk is empty!? |
| 01:23.27 | abrotman | there is 270 people there |
| 01:23.53 | dFence | damnit... cz is at it again... thx abrotman |
| 01:23.57 | binarymutant | does anyone use mutt here? |
| 01:24.04 | abrotman | lots of people, just ask |
| 01:24.13 | zyx386 | abrotman, belive me i found't |
| 01:24.23 | abrotman | huh? |
| 01:25.36 | zyx386 | abrotman, i stiill for this bug |
| 01:25.39 | zyx386 | :( |
| 01:25.56 | abrotman | english? |
| 01:26.02 | binarymutant | can someone show me their muttrc with a black on white/dark on light color scheme so I can copy it? |
| 01:26.26 | zyx386 | abrotman, yes |
| 01:27.29 | *** join/#debian c0m (n=c0m@203.252.119.70.cfl.res.rr.com) |
| 01:30.19 | zyx386 | abrotman, this pag don't worked http://bugs.debian.org/cgi-bin/pkgreport.cgi?which=pkg&data=Sub-process+%2Fusr%2Fbin%2Fdpkg+returned+an+error+code+%281%29&archive=no&version=&dist=unstable |
| 01:31.41 | *** join/#debian SlackDeb (n=fperetti@201.254.116.158) |
| 01:31.53 | zyx386 | abrotman, i search full debian.org for this keywords Sub-process /usr/bin/dpkg returned an error code (1) |
| 01:32.03 | zyx386 | 0 result |
| 01:32.14 | abrotman | goes to stick a fork in the socket |
| 01:32.27 | Tramp | we'd miss you |
| 01:32.55 | zyx386 | me |
| 01:33.09 | *** join/#debian Cheef-Daniel (n=chatzill@p5B17BCEE.dip0.t-ipconnect.de) |
| 01:33.20 | gravity | heh |
| 01:33.24 | abrotman | Tramp: jump in whenever you'd like |
| 01:33.25 | Cheef-Daniel | hi |
| 01:33.44 | *** join/#debian milia (n=milia@athedsl-4452185.home.otenet.gr) |
| 01:34.01 | Cheef-Daniel | dou you know a way to debug php with strace? |
| 01:34.05 | zyx386 | abrotman, can you help me? i finde nothin about my error |
| 01:34.15 | abrotman | because you're doing it wrong |
| 01:34.16 | *** join/#debian morficus_ (n=morficus@69.0.44.52) |
| 01:35.07 | zyx386 | abrotman, and what is the right? |
| 01:35.19 | *** join/#debian agnitio_ (n=magnus@h-91-126-123-244.wholesale.rp80.se) |
| 01:35.29 | itomato | Cheef: kick off apache via strace with a 'tee' redirect to log, execute questionable PHP |
| 01:35.46 | *** join/#debian ericzhan (n=zhan@137.132.198.17) |
| 01:36.03 | abrotman | Cheef-Daniel: wouldn't it be easier to fix your PHP code? |
| 01:36.24 | zyx386 | abrotman, help me or not? |
| 01:36.44 | abrotman | !bts |
| 01:36.44 | dpkg | Bug Tracking System for Debian packages, http://bugs.debian.org/ or to go directly to the bug page for a particular package/bug, try http://bugs.debian.org/packagename or http://bugs.debian.org/bugnumber . aptitude install reportbug, and check out <querybts> too. Users of sid and testing are required to check the BTS. Useful for sid and testing: aptitude install apt-listbugs apt-listchanges . |
| 01:36.46 | abrotman | find your bug |
| 01:37.05 | zyx386 | wicht keywords? |
| 01:37.11 | zyx386 | which+ |
| 01:38.36 | zyx386 | No reports found! |
| 01:38.54 | itomato | zyx: remove the last package you installed (exim?), then re-run 'apt-get -f install' and/or 'dpkg --reconfigure...' |
| 01:39.42 | Cheef-Daniel | itomato: tried already but get only the calls apache did to call my php-file (fstat64,3 reads, close) but I cant see whats actually doing with my file |
| 01:40.20 | abrotman | Cheef-Daniel: what is broken with PHP ? |
| 01:40.20 | itomato | Cheef: Run the code inside a Solaris vm with dtrace :) |
| 01:40.30 | *** join/#debian shellito (n=shellito@200.122.229.14) |
| 01:40.48 | itomato | or check in #php |
| 01:40.50 | grand_grunt | markybob: exactly the same issue with compiz |
| 01:40.52 | Cheef-Daniel | abrotman: the PHP-Code is fine, it has to to with iconv/charset-conversion and maybe a missing file. |
| 01:41.05 | abrotman | oh that should be fun |
| 01:41.26 | Cheef-Daniel | Error is Notice: iconv() [function.iconv]: Wrong charset, conversion from `ISO-8859-1' to `UTF-8//TRANSLIT' is not allowed in |
| 01:41.57 | *** join/#debian prolix (n=user@c-24-19-53-89.hsd1.mn.comcast.net) |
| 01:42.35 | itomato | Cheef: I recall some strange issues with iconv.. You might try regenerating the associated caches - or dpkg-reconfigure |
| 01:43.24 | *** part/#debian ericzhan (n=zhan@137.132.198.17) |
| 01:43.25 | Cheef-Daniel | In the chroot-shell the script works fine with an older php4 binary. Only when apache calls it with libapache-php5 I get this |
| 01:43.35 | *** join/#debian extor (i=xtor@c-24-1-247-223.hsd1.il.comcast.net) |
| 01:43.38 | zyx386 | itomato, i remove the exim4 complet and have no error message more |
| 01:43.45 | zyx386 | is that correct? |
| 01:44.01 | zyx386 | i did't need exim4? |
| 01:44.19 | itomato | zyx: not unless you need a SMTP server. |
| 01:44.58 | itomato | Cheef: unsatisfied php5/apache depends? |
| 01:45.19 | zyx386 | itomato, i use't smtp server |
| 01:45.56 | zyx386 | but what is stadard ftp client in Debian lenny? fillezilla is removed :( |
| 01:46.06 | Cheef-Daniel | itomato: that could be |
| 01:46.09 | itomato | zyx: ftp |
| 01:46.16 | itomato | just 'ftp' |
| 01:46.32 | zyx386 | filezilla? |
| 01:46.56 | itomato | try 'filerunner' or 'gftp' |
| 01:47.02 | doub_ | Cheef-Daniel: your scripts calls iconv itself? or is it php5 just f***ing up with utf8 again? |
| 01:48.03 | *** join/#debian poseidon (n=Joseph@ip70-161-211-76.hr.hr.cox.net) |
| 01:49.08 | Cheef-Daniel | $res = iconv('iso-8859-1', 'utf-8', 'test'); <-- here I got this error |
| 01:49.35 | abrotman | did you generate both locales on the syestem ? |
| 01:50.22 | Cheef-Daniel | no not manually, but when I try iconv directly from the shell it runs also fine |
| 01:50.44 | *** join/#debian dansushi (n=dan@pool-71-184-141-74.bstnma.fios.verizon.net) |
| 01:50.50 | itomato | environment for PHP. |
| 01:51.39 | Cheef-Daniel | sorry I don't understand your question? |
| 01:51.57 | itomato | I have seen all kinds of strange stuff re: locales as pertains to unique environments. |
| 01:52.31 | itomato | can you call or echo the LC_ALL variable from your script? |
| 01:54.19 | Cheef-Daniel | hm, I get a '6' |
| 01:54.29 | itomato | that might be a clue. |
| 01:54.46 | *** join/#debian MoDaX (n=nth@lan-84-240-22-131.vln.skynet.lt) |
| 01:54.48 | itomato | what about from the shell where iconv is successful? |
| 01:55.14 | Cheef-Daniel | yes |
| 01:55.28 | Cheef-Daniel | in the chroot and in the host, both successful |
| 01:55.45 | itomato | they both have LC_ALL="6"? |
| 01:56.41 | Cheef-Daniel | how can I see this? |
| 01:56.47 | itomato | http://us.php.net/function.setlocale |
| 01:56.49 | *** join/#debian shyam_k (n=user@117.196.135.185) |
| 01:56.54 | itomato | TTFN |
| 01:56.57 | *** part/#debian itomato (n=itomato@vc1-66-1.adsl.indra.com) |
| 01:57.13 | shyam_k | will enabling both india and us mirrors result in crashes? |
| 01:57.29 | shyam_k | i mean enabling them in apt |
| 02:00.38 | dondelelcaro | shyam_k: no. |
| 02:01.03 | dondelelcaro | shyam_k: though you should just pick a mirror that is close to you, network wise. [There's nothing on the us mirrors that isn't on the indian mirrors or vice versa.] |
| 02:01.22 | Cheef-Daniel | LC_ALL is not set in the shells/environment |
| 02:01.42 | dondelelcaro | Cheef-Daniel: why would it be? |
| 02:02.09 | dondelelcaro | if you've set LANG or LANGUAGE or LC_ALL to something insane, it'll propogate to LC_ALL. |
| 02:02.19 | Mirybr | I'm in a recursive loop here |
| 02:02.27 | Mirybr | x is displaying badly |
| 02:02.31 | Mirybr | so i backout to terminal |
| 02:02.33 | Mirybr | then x restarts |
| 02:02.40 | shyam_k | dondelelcaro: thanks.. iitm repo in india had some problems... so enabling both,will apt automatically find the closest repo?;-) |
| 02:02.52 | dondelelcaro | shyam_k: it'll use the first one in the list, actually. |
| 02:03.03 | dondelelcaro | shyam_k: if the mirror that you're using has problems, try picking a different one |
| 02:03.06 | dondelelcaro | !mirrors |
| 02:03.06 | dpkg | debian mirrors is probably http://www.debian.org/mirror/list or ftp://ftp.debian.org/debian/README.mirrors.txt | ask me about <apt-spy> or <netselect-apt> | to make a mirror, see http://www.debian.org/mirrors/, or http://lists.debian.org/debian-mirrors/ |
| 02:03.11 | dondelelcaro | shyam_k: if you use the links above, that'll help you. |
| 02:03.19 | shyam_k | yeah sure..i got the point.. |
| 02:03.55 | Cheef-Daniel | itomato: setlocale does'nt change anything |
| 02:03.58 | *** join/#debian r3c4ll (i=alimoren@190.198.185.22) |
| 02:03.59 | dondelelcaro | Mirybr: first, try not to overuse enter. Then, if you can get to a shell, stop xdm. Alternatively, ssh into your machine and stop it that way. If X is just cycling rapidly, xdm or gdm will stop after a few times |
| 02:04.27 | *** join/#debian javmarta (n=vero@r190-134-177-28.dialup.adsl.anteldata.net.uy) |
| 02:04.30 | dondelelcaro | Cheef-Daniel: run locale; env; and paste the results in your shell if you're not sure what you've done. |
| 02:04.31 | *** join/#debian chicobento (n=ponto-go@189.82.57.112) |
| 02:05.31 | Mirybr | dondelelcaro, it shows up with odd color lines, kind of resembling a mouse cursor, at an extremely odd resolution like 1500x300. i set res to 1024x768 and 800x600 during install |
| 02:05.45 | Mirybr | i managed to get to a terminal |
| 02:06.01 | *** join/#debian huhlig (n=Hilary@c-24-10-118-69.hsd1.ca.comcast.net) |
| 02:06.36 | sandman | I have a system with bad ram. I'm currently running with the badram memory patch applied, which I had to build the kernel manually for. |
| 02:06.50 | sandman | When security updates come around, though, my kernel is not automatically rebuilt and installed... |
| 02:06.54 | sandman | Is there a way I can arrange for this? |
| 02:07.15 | *** part/#debian javmarta (n=vero@r190-134-177-28.dialup.adsl.anteldata.net.uy) |
| 02:07.31 | mimcpher | Solution: Buy new ram, lol. |
| 02:07.41 | sandman | And also, I was wondering if I could perhaps instead just drop the badram memory patch, use a precompiled kernel with watchdog installed |
| 02:07.45 | sandman | mimcpher: I can't |
| 02:07.52 | sandman | mimcpher: No $$, and I won't have any for a while |
| 02:08.04 | sandman | Besides, badram is a fantastic memory patch. |
| 02:08.08 | abrotman | sandman: you could apply the patches they did to your source tree and continue for each security fix |
| 02:08.17 | *** join/#debian dFence (n=chatzill@p549810F8.dip0.t-ipconnect.de) |
| 02:08.37 | dFence | oi. how can i determine what application is using a certain kernel-mod? |
| 02:08.41 | sandman | abrotman: But that's manual, yes? |
| 02:08.58 | abrotman | yes |
| 02:09.29 | doub_ | sandman: you could attach a hook to apt so that everytime there's a new kernel in, it would patch your tree and rebuild |
| 02:09.32 | mimcpher | Choose Good, Free, Quick. You have selected "Good, Free". Build it by hand :-p |
| 02:09.38 | doub_ | sandman: but that's a little overkill, i guess |
| 02:10.06 | *** join/#debian bvk_ (n=bvk@121.247.253.9) |
| 02:10.21 | *** join/#debian pll (n=user@c-76-24-131-239.hsd1.ma.comcast.net) |
| 02:10.35 | doub_ | dFence: it depends on the module, how it interfaces with userland... there's no hard rule |
| 02:11.21 | dFence | doub_: i think i solved it.. seems the module capi doesn't get along with mISDN... now i just have to figure out how to stop mISDN from being included |
| 02:13.46 | dFence | hm.. what's the syntax for including a kernel module in the /etc/modprobe.d/ folder? |
| 02:14.07 | *** join/#debian ColdFyre (n=coldfyre@c-24-130-214-62.hsd1.ca.comcast.net) |
| 02:15.05 | *** join/#debian Wyzard (n=mike@pool-96-234-146-68.bltmmd.fios.verizon.net) |
| 02:19.02 | *** join/#debian Sipingal (n=Sipingal@inet-netcache2-o.oracle.com) |
| 02:20.31 | Mirybr | wow |
| 02:20.37 | Mirybr | x just does not want to work for me |
| 02:21.27 | Cheef-Daniel | is there a way to determine all files/libs a programm (php/apache) needs? |
| 02:21.47 | Cheef-Daniel | maybe I can then see why iconv fails |
| 02:22.01 | *** mode/#debian [+l 794] by debhelper |
| 02:22.03 | *** join/#debian smoser (n=smoser@d14-69-66-169.try.wideopenwest.com) |
| 02:22.23 | *** join/#debian snogglethorpe (n=snogglet@fencepost.gnu.org) |
| 02:24.26 | *** join/#debian rpedro__ (n=rpedro@87-196-169-117.net.novis.pt) |
| 02:24.33 | *** join/#debian usn_work (n=usn@p54934141.dip.t-dialin.net) |
| 02:25.14 | *** join/#debian helo_ (n=helo@unaffiliated/helo) |
| 02:27.28 | *** join/#debian bullgard1 (n=detlef@p5B25AD96.dip0.t-ipconnect.de) |
| 02:27.47 | Wyzard | Cheef-Daniel: The program's dependencies should be reflected in the package's dependencies |
| 02:27.53 | helo_ | i need to compile a driver for my current kernel version... what package will make the currently build kernel's source available in /usr/src/? |
| 02:28.01 | helo_ | *built |
| 02:28.17 | Wyzard | helo: linux-headers-`uname -r` |
| 02:28.23 | Wyzard | helo: You don't need the full source, just the headers |
| 02:28.35 | Mirybr | where is the xorg conf located so I can delete it |
| 02:28.45 | jim | well you want the headers not the source, then you can build just the driver |
| 02:29.28 | Wyzard | Mirybr: /etc/X11, but why do you want to delete it? |
| 02:29.48 | *** join/#debian brandom_ (i=repp@heap.f00f.net) |
| 02:30.00 | Mirybr | because its not working |
| 02:30.05 | jim | have you built your own kernel? are you using a kernel you built or one that came from/with debian?l |
| 02:30.08 | *** join/#debian orven (n=adsasd@yap-pm02-s45.telecom.fm) |
| 02:30.24 | *** join/#debian cesarCR (n=cesar@celord.ice.co.cr) |
| 02:30.25 | Wyzard | helo: If you install the linux-headers metapackage corresponding to whatever kernel arch/flavor you're using (e.g. linux-headers-2.6-686) you'll automatically get new headers packages together with new kernels in the future |
| 02:31.15 | *** join/#debian cesar_CR (n=cesar@celord.ice.co.cr) |
| 02:32.06 | *** join/#debian rats (n=rats@cpe-24-165-160-245.neo.res.rr.com) |
| 02:33.06 | *** join/#debian cesar_CR (n=cesar@celord.ice.co.cr) |
| 02:33.59 | jaggz- | how do I merge changes in two partitions? |
| 02:34.26 | jaggz- | I have a good fs, and a mirror which got slightly corrupt |
| 02:36.21 | *** join/#debian ehc (n=evan@wall.pacinfo.com) |
| 02:39.29 | *** join/#debian ehc (n=evan@wall.pacinfo.com) |
| 02:43.28 | jim | the mirror is of the good fs? |
| 02:43.36 | *** join/#debian anom01y (n=lsemple@d75-157-17-185.bchsia.telus.net) |
| 02:45.43 | jaggz- | I'd want to duplicate the good fs to the slightly messed up one.. |
| 02:47.08 | *** join/#debian ponto-gov (n=ponto-go@189.82.87.83) |
| 02:47.34 | jaggz- | patch is only saying the files differ.. I thought it could maybe do a binary diff |
| 02:47.41 | jaggz- | excuse me, diff is only saying that |
| 02:48.50 | abrotman | rsync |
| 02:49.02 | jaggz- | rsync /dev/sda3 /dev/sdb3 ? |
| 02:49.18 | *** join/#debian reZo (n=reZo@203-184-20-243.jetbuster.co.nz) |
| 02:49.38 | abrotman | man rsync |
| 02:49.39 | *** join/#debian punzada (n=punzada@ool-44c39ef8.dyn.optonline.net) |
| 02:49.39 | jaggz- | --no-whole-file maybe? |
| 02:50.28 | punzada | So .. kind of random question, trying to install debian on an old pc of mine, cept issue is it won't boot from the cd drive (probably busted) ... is there any method besides buying new hardware that I could get debian on it? ;x |
| 02:50.30 | *** join/#debian Zeit|awy_ (n=wurscht@p4FD8EF1B.dip.t-dialin.net) |
| 02:50.38 | abrotman | !bf |
| 02:50.39 | dpkg | etch floppies is probably http://ftp.debian.org/debian/dists/etch/main/installer-i386/current/images/floppy/ or substitute your arch for "i386". If you want lenny/testing change "etch" to "lenny". |
| 02:50.42 | *** join/#debian jamesnvc (n=user@bas1-toronto09-1279722283.dsl.bell.ca) |
| 02:50.43 | punzada | o.o |
| 02:50.44 | punzada | hotness |
| 02:50.46 | punzada | thanks |
| 02:50.47 | punzada | :D |
| 02:51.09 | punzada | now i have to find floppies ;x |
| 02:51.10 | punzada | lol |
| 02:51.19 | *** join/#debian jberg (n=johan@215.80-203-18.nextgentel.com) |
| 02:51.24 | jamesnvc | Hello, would this be an appropriate place to seek help with suspend-to-ram problems with Debian unstable on a T61? |
| 02:52.45 | *** join/#debian Celelibi (i=celelibi@APoitiers-258-1-127-230.w90-50.abo.wanadoo.fr) |
| 02:52.53 | *** join/#debian likevinyl (n=likeviny@190.18.116.157) |
| 02:52.56 | *** join/#debian lwizardl (n=james@adsl-64-149-133-14.dsl.klmzmi.sbcglobal.net) |
| 02:52.58 | lwizardl | hi |
| 02:53.18 | lwizardl | how do i change which user owns directories? |
| 02:53.24 | nevyn | chown |
| 02:53.39 | *** join/#debian Sipingal (n=Sipingal@inet-netcache2-o.oracle.com) |
| 02:53.58 | lwizardl | yeah but I can't get it to work i have tried sudo chown james /u /media/Movies |
| 02:54.25 | markybob | you read man chown |
| 02:54.45 | abrotman | /u/media/ ? |
| 02:54.48 | nevyn | lwizardl: /u? |
| 02:54.55 | abrotman | yay SCO Unix ? |
| 02:55.14 | lwizardl | i mis read the man output |
| 02:55.30 | lwizardl | <PROTECTED> |
| 02:55.44 | lwizardl | i still get |
| 02:55.44 | lwizardl | chown: changing ownership of `/media/Movies': Read-only file system |
| 02:56.49 | nevyn | oh.. |
| 02:56.56 | nevyn | is /media/movies a fat filesystem? |
| 02:57.06 | nevyn | you need to set the permissions on mount for those. |
| 02:57.18 | nevyn | because they don't really have permissions |
| 02:57.32 | lwizardl | nevyn, hfsplus |
| 02:57.52 | nevyn | same same. |
| 02:58.48 | *** join/#debian master_o1_master (n=master_o@p549D4C0D.dip.t-dialin.net) |
| 03:00.29 | *** part/#debian vKentucky (n=mshelby@h231.167.90.75.ip.alltel.net) |
| 03:01.50 | *** join/#debian b4ggi0 (n=Patrick@59.151.39.154) |
| 03:03.33 | jamesnvc | Is there anyone that could help me with s2ram/resume problems on a Thinkpad T61? |
| 03:04.39 | *** join/#debian binarymu1ant (n=binarymu@adsl-074-183-082-037.sip.tys.bellsouth.net) |
| 03:04.48 | binarymu1ant | how can I change mutt's background color? |
| 03:05.27 | Ryan52 | jamesnvc: whats wrong with it? |
| 03:06.09 | jamesnvc | Ryan52: I can suspend alright, but on resume it just beeps, and stays black, and I have to reboot |
| 03:06.30 | jamesnvc | I've googled around a bit, found a bunch of people with the problem, but no solutions that worked for me |
| 03:06.30 | *** join/#debian alvarezp (n=alvarezp@201.160.204.223.cable.dyn.cableonline.com.mx) |
| 03:06.58 | karsten | Any recommendations for a good color inkjet printer/scanner/copier? |
| 03:07.09 | karsten | Working under Linux w/ CUPS. |
| 03:07.11 | *** join/#debian tenzind (n=VBoi@dns.moic.gov.bt) |
| 03:07.24 | binarymutant | karsten: epson? |
| 03:07.25 | Ryan52 | karsten: find a good one and check it through the linux foundation website |
| 03:08.05 | binarymutant | so...how can I change mutt's background color? |
| 03:08.21 | Ryan52 | binarymutant: change your terminal background color? |
| 03:08.31 | Ryan52 | jamesnvc: I have a different problem...my backlight doesn't come back on... |
| 03:08.32 | karsten | Ryan52: Where on Linux Foundation? |
| 03:08.38 | karsten | binarymutant: ~/.muttrc |
| 03:09.00 | binarymutant | Ryan52: my terminal's background color is white but mutt's is red for some reason |
| 03:09.05 | karsten | binarymutant: less /usr/share/doc/mutt/manual.txt.gz |
| 03:09.23 | Ryan52 | karsten: http://openprinting.org/printer_list.cgi |
| 03:09.27 | jamesnvc | Ryan52: I think I had that problem on my old laptop...needed a radeontool thing in the script acpi was calling |
| 03:09.36 | karsten | binarymutant: ... and see the 'color' directives. I *think* there's a background value. |
| 03:10.25 | karsten | binarymutant: Ah: 'color <object> <foreground> <background> [<regex>] |
| 03:10.48 | *** join/#debian jcwong (n=catalyst@unaffiliated/jcwong) |
| 03:12.02 | *** join/#debian Rusty1 (n=Rusty1@cpe-72-226-109-62.nycap.res.rr.com) |
| 03:12.45 | karsten | binarymutant: Eg, for normal text: color normal white black |
| 03:13.03 | karsten | binarymutant: So: my mutt messages are white text on black background. |
| 03:14.13 | jaggz- | can't get rsync to do it |
| 03:14.24 | binarymutant | karsten: ok so I've tried that and it didn't work, instead of a white background like I specified it's red :/ |
| 03:14.28 | *** join/#debian Bakkal (n=bakkal@modemcable026.205-203-24.mc.videotron.ca) |
| 03:14.38 | karsten | binarymutant: http://paste.debian.net/2782/ |
| 03:14.39 | jaggz- | I can't figure it out anyway.. "skipping non-regular file 'sda3'" |
| 03:14.50 | Bakkal | guys, on etch when I kill Xorg it restarts, how do I stop it from running? |
| 03:14.51 | karsten | binarymutant: Those are my ~/.muttrc color directives. |
| 03:15.00 | Ryan52 | jaggz-: why do you want to sync sde3? |
| 03:15.13 | karsten | binarymutant: Try swapping those into your .muttrc and restarting mutt or re-sourceing ~/.muttrc. Make sure you're not including stuff elsewhere. |
| 03:15.16 | Ryan52 | Bakkal: /etc/init.d/gdm stop |
| 03:15.26 | Ryan52 | Bakkal: (or kdm or xdm) |
| 03:15.46 | karsten | !tdll Bakkal about nox |
| 03:16.19 | Bakkal | Ryan52: thanks :) |
| 03:16.27 | karsten | Bakkal: /etc/init.d/*dm stop generally works. |
| 03:16.42 | Bakkal | I have gdm, worked fine |
| 03:17.00 | binarymutant | karsten: this is what I have for colors http://pastebin.com/pastebin.php?dl=d22fa1240 |
| 03:17.44 | karsten | binarymutant: And? |
| 03:17.49 | jamesnvc | Hey, does anyone know if there is a thinkpad, or linux-on-laptop support channel? |
| 03:17.51 | *** join/#debian hxizan (n=hxizan@unaffiliated/hxizan) |
| 03:18.17 | karsten | jamesnvc: debian-laptop (mailing list), or /msg chanserv list *thinkpad* |
| 03:18.17 | phobos_anomaly | jamesnvc: try #linux |
| 03:18.19 | binarymutant | karsten: and you have a lot more :) brb |
| 03:18.28 | liable | yes ##thinkpad |
| 03:18.38 | liable | or is it ##ibm-thinkpad |
| 03:18.48 | liable | there is one, its quite slow though |
| 03:18.59 | karsten | #thinkpad and #linuxlaptops channels. |
| 03:19.11 | karsten | jamesnvc: If it's Debian-specific, ask here. |
| 03:19.24 | karsten | fondles his T42p. |
| 03:19.50 | liable | looks the other way |
| 03:20.04 | jamesnvc | karsten: Well, I have a T61, running unstable, and suspend-to-ram stopped resuming properly a week or two ago |
| 03:20.09 | karsten | fondles liable |
| 03:20.21 | karsten | jamesnvc: Just ask. |
| 03:20.35 | liable | blushes |
| 03:20.47 | liable | jamesnvc: did you upgrade kernel |
| 03:21.15 | liable | other than that, see if your suspend package was upgraded, check acpi logs etc |
| 03:21.35 | Ryan52 | acpi logs? |
| 03:21.36 | catsup | jaggz-: rsync won't do that. i've thought of patching it... |
| 03:21.47 | jamesnvc | liable: No kernel updates...I did install beryl around that time, but I've since removed all of it |
| 03:21.57 | catsup | jaggz-: i've poured over the man pages, it is absolutely not possible |
| 03:22.02 | liable | Ryan52: acpid has a log, yes. if he is using hotkeys, it will log it |
| 03:22.35 | Ryan52 | where is this log you speak of? |
| 03:22.48 | liable | where all the other logs are |
| 03:23.02 | jamesnvc | liable: I can't find anything from acpid in /var/logs |
| 03:23.18 | Ryan52 | "sudo find /var/log/ | grep acpi" returns nothing... |
| 03:23.18 | *** join/#debian gunthr (n=gunthr@c-71-195-12-226.hsd1.mn.comcast.net) |
| 03:23.30 | jamesnvc | /var/log/suspend2ram.log doesn't say anything useful either |
| 03:23.59 | liable | meh, my memory blows, lemme find which one it logs in |
| 03:25.09 | *** join/#debian nse (i=leo@2011218646.rec.megazon.com.br) |
| 03:25.43 | binarymutant | karsten: I took yours and changed every option to white black, and my background is still red |
| 03:26.04 | karsten | binarymutant: Hrm. |
| 03:26.08 | Ryan52 | binarymutant: hrm...the thing you pasted earlier made everything white for me. |
| 03:26.17 | karsten | binarymutant: How are you invoking your terminal? What's your terminal background default? |
| 03:27.01 | *** join/#debian spx2 (n=spx2@89.37.70.170) |
| 03:27.02 | liable | daemon log |
| 03:27.07 | binarymutant | karsten: transparent gnome-terminal |
| 03:27.21 | karsten | binarymutant: Hrm. Do you have custom-mapped colors? |
| 03:27.23 | Ryan52 | ah. |
| 03:27.43 | karsten | binarymutant: I prever rxvt myself (technically: urxvt) |
| 03:27.55 | karsten | liable: No, I wasn't fondling that. |
| 03:28.10 | Ryan52 | urxvt-unicode has better colors :P |
| 03:28.26 | karsten | Ryan52: I think that's what I'm using... |
| 03:28.43 | karsten | Ryan52: rxvt-unicode-mlinstall |
| 03:29.02 | karsten | (There should be a tab in there. rxvt-unicode-ml) |
| 03:29.48 | binarymutant | karsten: I'm using my gnome theme colors, but I turned it to just black on white and it didn't work...I dunno what is going on here |
| 03:30.35 | *** join/#debian phrozen77 (n=phrozen7@unaffiliated/phrozen77) |
| 03:31.52 | *** part/#debian lowlevel (n=Stuart@lowlevel.ca) |
| 03:32.24 | karsten | binarymutant: http://linuxmafia.com/~karsten/Download/ansicolors |
| 03:32.33 | karsten | binarymutant: Try running that and tell me what you get. |
| 03:32.58 | karsten | binarymutant: The columns should be black, red, green, yellow, blue, pink, cyan, and white |
| 03:33.47 | karsten | binarymutant: If they're different, you've got some odd ansi mapping going on. I'd also try another terminal, xterm, rxvt, etc., and see if that doesn't behave differently from gnome-terminal. Or console. |
| 03:35.03 | binarymutant | black red green brown :( |
| 03:35.04 | *** join/#debian lowlevel (n=Stuart@lowlevel.ca) |
| 03:35.53 | binarymutant | and pink is purple |
| 03:35.59 | *** join/#debian w3rd_ (n=w3rd_@75.144.244.222) |
| 03:35.59 | karsten | binarymutant: gnome-terminal allows you to remap colors. That's clearly happening. Try a different terminal program. I don't know how to fix your problem in gnome, but you're free to ask here or in #gnome |
| 03:37.09 | *** join/#debian lowlevel (n=Stuart@lowlevel.ca) |
| 03:37.31 | *** join/#debian umgeher (n=umgeher@c934d9d8.virtua.com.br) |
| 03:37.49 | binarymutant | karsten: Hey thanks for the deduction skills, gnome-terminal is the problem ty |
| 03:38.31 | karsten | binarymutant: It frequently is ;-) |
| 03:38.43 | karsten | binarymutant: I'm not a much of a gnome fan, m'self. |
| 03:39.07 | *** join/#debian litlebuda (n=litlebud@87-196-213-216.net.novis.pt) |
| 03:39.39 | *** join/#debian monstar-1 (n=gnu@p57B8D025.dip.t-dialin.net) |
| 03:41.07 | *** part/#debian Tramp (i=mt@d83-180-92-153.cust.tele2.ch) |
| 03:41.18 | *** join/#debian tgelter (n=tgelter@12.16.126.98) |
| 03:47.13 | tgelter | so, I'm an ubuntu user, but just wanted to pop in and say "thanks" for all the work you fellas do, it is obviously important to those of us who use ubuntu |
| 03:47.48 | *** part/#debian jamesnvc (n=user@bas1-toronto09-1279722283.dsl.bell.ca) |
| 03:48.30 | *** part/#debian helo_ (n=helo@unaffiliated/helo) |
| 03:48.57 | *** join/#debian binseer (n=binseer@121.247.149.5) |
| 03:49.36 | *** join/#debian alvarezp (n=alvarezp@201.160.204.223.cable.dyn.cableonline.com.mx) |
| 03:51.35 | binarymutant | :} |
| 03:52.00 | *** mode/#debian [+l 788] by debhelper |
| 03:53.23 | *** join/#debian sodio (n=sodio@va-71-1-140-171.sta.embarqhsd.net) |
| 03:53.54 | anom01y | how can I make a secondary hd (/media/Shared) readable and writeable to all debian users ? |
| 03:54.15 | anom01y | because by default if I make a folder with one user, I cannot write anything into that folder form another user |
| 03:54.15 | *** join/#debian iateadonu1 (n=dan@60.209.78.150) |
| 03:54.33 | karsten | anom01y: chomd 1777 /media/Shared |
| 03:54.35 | anom01y | it is always set to "read only" for group and others |
| 03:54.38 | karsten | anom01y: Same perms as /tmp |
| 03:54.41 | puff | anom01y: You'd have to make the partition world-writable. |
| 03:55.00 | karsten | anom01y: You want to set the sticky bit to allow only owners of a directory to modify it. |
| 03:55.33 | anom01y | so if I make a folder with one user, I will be able to add to that folder from another ? |
| 03:56.17 | karsten | anom01y: If you want to do that, either set a comon group for users using that folder, and add users to that group, or use a revision control system (the cleaner way) to manage files there. |
| 03:56.43 | *** join/#debian itomato (n=itomato@66-224-246-146.atgi.net) |
| 03:56.49 | *** join/#debian Xanthor|aw (n=Xanthor@ALyon-257-1-106-214.w90-28.abo.wanadoo.fr) |
| 03:57.02 | puff | anom01y: Every file or folder in the system has a set of nine permission flags (often called permission "bits"). Three sets of three permisions in each set. The three sets are user, group, and other (also called "world"). The three permissions are read, write, and execute (r, w, and x). |
| 03:57.07 | *** join/#debian googlah (n=googlah@c-2b2a70d5.02-1-756d6513.cust.bredbandsbolaget.se) |
| 03:57.22 | anom01y | ok |
| 03:57.41 | puff | anom01y: If you do "ls -l foldername" you will see the nine permission flags at the far-left. The first character is either - or "d" (for directory) and the next nine characters are the permission flags. |
| 03:57.43 | pinto3 | when you mount something the permissions on the mount point change to what you mounted right? |
| 03:57.47 | anom01y | I need it so user group and other have read and write |
| 03:57.51 | stew | anom01y: http://wiki.debian.org/Permissions |
| 03:57.54 | *** join/#debian tr00 (n=tr@adsl-76-229-88-252.dsl.pltn13.sbcglobal.net) |
| 03:57.55 | puff | stew: Thanks. |
| 03:58.18 | karsten | anom01y: You virtually *never* want to set *world* read permissions. |
| 03:58.36 | anom01y | yeah |
| 03:58.36 | stew | *write* |
| 03:58.49 | karsten | anom01y: I'd set 1770 perms on the directory, and do the groups trick I mentioned. How are you using this space, and how many users are involved. |
| 03:58.54 | karsten | anom01y: ... what stew said. World write. |
| 03:59.11 | karsten | anom01y: That's just begging for trouble, trojans, rootkits, etc. |
| 03:59.45 | stew | i can haz trojan plz? |
| 04:00.06 | anom01y | well, I store files there that I use my windows computer to ftp into that folder to access the files (read and write) |
| 04:00.13 | puff | anom01y: The easiest thing might be for you to just create a /media/Shared/username subdirectory for each user. |
| 04:00.17 | *** join/#debian binarymutant (n=binarymu@adsl-074-183-082-037.sip.tys.bellsouth.net) |
| 04:00.31 | anom01y | puff: yeah that will probably be my best option |
| 04:00.35 | puff | anom01y: And then change the ownership of each subdrectroy over to that user. |
| 04:00.52 | puff | anom01y: You're not using plain ftp, I hope? |
| 04:01.14 | anom01y | I am but I have a really weird password |
| 04:01.28 | anom01y | and user names |
| 04:01.35 | puff | anom01y: That does not help. |
| 04:01.36 | itomato | it's not your password that's weak - it's FTP.. |
| 04:01.56 | puff | anom01y: Logging in via plain ftp is like sending your ATM PIN on a postcard. |
| 04:02.05 | *** join/#debian sodio (n=sodio@va-71-1-140-171.sta.embarqhsd.net) |
| 04:02.07 | karsten | anom01y: To Russia. |
| 04:02.22 | puff | anom01y: Worse, actually. It's like taping your ATM card to a postcard with the PIN written next to it. |
| 04:02.33 | anom01y | haha |
| 04:02.35 | anom01y | yeah |
| 04:02.38 | puff | anom01y: It'll work otu fine as long as you trust everybody who gets a chance to look at that postcard. |
| 04:02.50 | anom01y | yeah its only me doing the ftping |
| 04:02.54 | anom01y | and my wife |
| 04:03.03 | puff | anom01y: Yeah, but it's not only you potentially eavesdropping. |
| 04:03.17 | puff | anom01y: Google "winscp", it's really easy to use. |
| 04:03.40 | anom01y | is this a linux app ? |
| 04:04.06 | puff | anom01y: Seriously, traditional ftp and telnet broadcast your username and passwrod in the clear. Anybody near you in the network can trivially eavesdrop and copy your username and password. |
| 04:04.25 | jaggz- | Ryan52: I want to get the good fs synchronised with its mirror partition on the other drive |
| 04:04.35 | anom01y | ok, well |
| 04:04.36 | WormFood | puff, if someone is stupid enough to use their system password as their ftp password |
| 04:04.36 | puff | anom01y: ssh is encrypted telnet. scp is file copy over ssh. Winscp is a windows GUI to let you use scp from windows to a linux server running ssh. |
| 04:04.42 | jaggz- | I just gave up and am doing a dd of the whole partition.. |
| 04:04.58 | jaggz- | one partition was corrupt in a power failure |
| 04:04.59 | puff | WormFood: What are the odds? |
| 04:05.01 | Bakkal | I want to install a .deb package through ssh, can I do this without copying the file to the remote box? |
| 04:05.17 | puff | anom01y: seriously, this is really fundamental linux security stuff. |
| 04:05.18 | anom01y | puff: you suggest scp ? |
| 04:05.19 | *** join/#debian dFence (n=chatzill@ings-d9322533.pool.mediaWays.net) |
| 04:05.22 | catsup | anom01y: use rsync |
| 04:05.23 | stew | his wife is totally going to steal his password |
| 04:05.28 | dFence | moornin |
| 04:05.36 | WormFood | what are the odds of what? whenever I setup ftp, I have a different user/password list for the ftp server to use |
| 04:05.38 | catsup | anom01y: rsync is scp but less stupid |
| 04:05.47 | homecable | anyone have a 100mb inet ? |
| 04:05.57 | puff | homecable: I have one around here somewhere. |
| 04:06.00 | catsup | (scp can't even resume...) |
| 04:06.01 | dFence | how risky is it installing a library-deb (libace-YADA) from the etch branch on a lenny machine? |
| 04:06.09 | puff | catsup: One step at a time :-). |
| 04:06.57 | WormFood | has anyone figured out how to override the low disk space shit in rtorrent, that makes it stop everything when it gets down to 500 meg of free space? I would much rather have it stop at 100 meg of free space. |
| 04:06.59 | stew | dFence: not very |
| 04:07.11 | catsup | puff: next thing is ssh keys instead of passwords... |
| 04:07.13 | jaggz- | okay.. dd'ing from one sata drive to the other with the default blocksize is lame. |
| 04:07.17 | karsten | WormFood: If your data pass through any US routers, count on at least the NSA snooping. There's a datacenter in SF run by AT&T that feeds pretty much all local traffic to the NSA. Interceptions at other locations by other entities aren't that conceptually difficult. |
| 04:07.49 | *** join/#debian MrNaz_ (n=MrNaz@125.27.17.146.adsl.dynamic.totbb.net) |
| 04:07.51 | karsten | anom01y: fish (file transfer over ssh), scp, and other SSH-based transports are very highly recommended. |
| 04:08.04 | dub | homecable, yes. why? |
| 04:08.07 | jaggz- | mount -t sshfs |
| 04:08.12 | karsten | anom01y: If you can find a GUI windows rsync tool (and that's your cup of tea), so much the better. |
| 04:08.13 | WormFood | karsten, that is why I always use ssh when talking to my computers in usa |
| 04:08.20 | *** join/#debian unixtippse (n=martin@unaffiliated/unixtippse) |
| 04:08.25 | karsten | WormFood: Bingo. |
| 04:08.36 | anom01y | ok well |
| 04:08.46 | catsup | ftp and telnet are from the era of mainframes and leaving the door of your house unlocked |
| 04:08.47 | WormFood | hell, I have more privacy in PRC than in USA |
| 04:08.49 | catsup | simpler times |
| 04:08.50 | anom01y | I will try all that, is it similar to setting up ftp ? |
| 04:09.09 | itomato | dFence: less risky than the other way 'round - is it not available in Lenny? |
| 04:09.13 | karsten | WormFood: We have better pr0n ;-) |
| 04:09.18 | catsup | anom01y: you don't have to set up anything to use rsync (or scp), it will just use the system user database |
| 04:09.26 | dFence | itomato: not THAT friggin package |
| 04:09.32 | WormFood | catsup, I don't know....I setup a computer once with a blank password....my boss goes onsite to install it, he calls me all pissed off, because he couldn't figure out the password |
| 04:09.47 | jaggz- | you can use it locally or it uses ssh services |
| 04:09.54 | homecable | anyone want to help me test my upload with the dl link http://joey.ath.cx/pub/linux/ubuntu-8.04-server-i386.iso |
| 04:10.04 | dFence | itomato: and spending the past 2 days compiling it by hand left me with hundreds of wasted mb and a bunch of error-messages each about 20 lines long |
| 04:10.07 | *** join/#debian MrNaz__ (n=MrNaz@222.123.194.104) |
| 04:10.14 | *** join/#debian Holborn (n=holborn@unaffiliated/holborn) |
| 04:10.14 | itomato | dFence: especially if you only want the libs. |
| 04:10.26 | dFence | itomato: eeeeeeeeexactly. |
| 04:10.28 | puff | anom01y: Assuming you have installed ssh, you can just get a GUI SCP tool like WinSCP and it will work fine. |
| 04:10.31 | itomato | use dpkg unpack. |
| 04:10.44 | catsup | wtf? windows? |
| 04:10.55 | dFence | why is it that you spend more time compiling supporting libraries than the actaul software itself... |
| 04:10.58 | puff | anom01y: If you need to install ssh, just "sudo aptitude install ssh" |
| 04:11.00 | dFence | itomato: thanks for the tip |
| 04:11.10 | anom01y | yeah I have ssh |
| 04:11.19 | anom01y | but cant find any packages for winscp |
| 04:11.24 | anom01y | I have grsync |
| 04:11.28 | puff | anom01y: Winscp is for the windows side. |
| 04:11.30 | dondelelcaro | dFence: why are you wasting time compiling libraries? |
| 04:11.34 | anom01y | oh |
| 04:11.52 | dFence | dondelelcaro: maybe cuz i need them!? d'aaah |
| 04:11.54 | dondelelcaro | almost anything you'd want to use is already compiled for you, anyway. |
| 04:12.08 | anom01y | can I use say, windows explorer to connect to my rync server, or do I need a special app ? |
| 04:12.33 | anom01y | or can I use a browser ? |
| 04:12.34 | dondelelcaro | anom01y: you need rsync. |
| 04:12.35 | catsup | anom01y: ask #windows on irc.microsoft.com |
| 04:12.37 | puff | anom01y: winscp will give you a windows explorer-like interface to ssh/scp. |
| 04:12.42 | dFence | i'm gonna take some time and think about it |
| 04:12.42 | WormFood | there are almost no rsync tools on winblows |
| 04:12.45 | karsten | anom01y: http://lists.samba.org/archive/rsync/2004-June/009943.html (GUI rsync windows client) |
| 04:12.55 | catsup | grr |
| 04:12.56 | zinx | WormFood: only takes one |
| 04:13.01 | puff | anom01y: And it's free. |
| 04:13.06 | dondelelcaro | dFence: what exactly are you trying to build? |
| 04:13.18 | WormFood | zinx, yeah, but winblows users can't use command line tools |
| 04:13.20 | catsup | i can't believe this channel answers windows questions |
| 04:13.25 | itomato | if you're not copying multiple directories back and forth, aiming to keep the contents syncronized, rsync is overkill (IMO) |
| 04:13.28 | anom01y | yeah, I downloaded a tool for winblows that automatically maps a ftp site as a drive letter |
| 04:13.28 | catsup | microsoft = the enemy |
| 04:13.38 | WormFood | microslop |
| 04:13.40 | karsten | catsup: Interoperability. |
| 04:13.43 | zinx | whose enemy? |
| 04:13.47 | puff | catsup: It has nothing to do with windows and everything to do with getting a debian linux user to stop using ftp and start using a secure file transfer protocol. |
| 04:13.47 | catsup | free software's |
| 04:13.55 | karsten | catsup: MSFT == Teh Opportunity |
| 04:14.11 | zinx | free software doesn't need enemies |
| 04:14.17 | dFence | dondelelcaro: opendiameter. no it's not available as .deb for lenny and the required libs for compilation aren't either. i checked. |
| 04:14.23 | catsup | zinx: free software has enemies |
| 04:14.26 | itomato | enemy, maybe - but they are arguably "on their back" like a scared beetle.. |
| 04:14.34 | karsten | anom01y: More: http://www.fileheap.com/software/win32_rsync.html |
| 04:14.37 | WormFood | MCSE = Must Consult Someone Experienced |
| 04:14.56 | catsup | the only correct way to to add rsync support to a windows machine is to install debian on it |
| 04:15.09 | itomato | or Cygwin |
| 04:15.40 | anom01y | ok well then I think I will just stick to plain old ftp |
| 04:15.43 | WormFood | cygwin is great, for Linux users forced to use Winblows....but cygwin is useless for windows losers, because they can't use a CLI |
| 04:15.46 | karsten | catsup: Cygwin in my book. MSFT has SFU, though I haven't tried it. |
| 04:15.46 | anom01y | and have big passwords |
| 04:15.49 | puff | anom01y: Why ontearth? |
| 04:15.50 | itomato | Cygwin = alternative external brain transplant for Win. |
| 04:15.59 | puff | anom01y: Big passwords are irrelevant. |
| 04:16.00 | anom01y | because the client computer is a windows machine |
| 04:16.05 | puff | anom01y: Then INSTALL WINSCP. |
| 04:16.18 | anom01y | can it map the server to a drive letter |
| 04:16.21 | puff | anom01y: It's easy, it's free, it's obvious, etc. |
| 04:16.45 | anom01y | because I need other apps in windows to be able to access the files on the server |
| 04:16.51 | itomato | cheers for WinSCP - it's "clicky" |
| 04:16.52 | catsup | crackers who steal your password from the wire will have more difficulty typing your longer password... |
| 04:17.08 | dondelelcaro | dFence: it only looks like it requires libace, boost, and openssl. |
| 04:17.17 | dondelelcaro | dFence: all of those are already distributed by Debian. |
| 04:17.25 | puff | anom01y: It's certainly possible to do what you're asking for using a secure protocol. |
| 04:17.31 | karsten | anom01y: Yeah, that's another option: install Samba on the Linux box, export the share. |
| 04:17.39 | dFence | dondelelcaro: trust me on this one |
| 04:17.47 | dondelelcaro | dFence: which libraries are you actually looking for? |
| 04:18.00 | *** join/#debian Suprano (i=suprano@pD95675DB.dip.t-dialin.net) |
| 04:18.05 | zinx | dondelelcaro: trust him!! |
| 04:18.07 | dondelelcaro | dFence: considering that it's taken you two days to compile something, trusting you isn't in your best interest. |
| 04:18.16 | karsten | anom01y: Among the cool hat tricks I like: rdesktop supports mapping local Linux paths to Windows driveletters (it's part of the remote desktop specification). |
| 04:18.43 | dFence | dondelelcaro: none currently, after massive problems with the isdn controller i decided i'm gonna bulldoze the whole thing and start from scratch. ill look into that whole diapphragma-thing later... |
| 04:22.35 | anom01y | well |
| 04:23.21 | *** join/#debian peterS (i=~m|ptrS|@adsl-68-88-175-99.dsl.wchtks.swbell.net) |
| 04:24.18 | *** join/#debian wer0 (n=weird@189.186.13.225) |
| 04:24.54 | *** mode/#debian [+o peterS] by ChanServ |
| 04:24.55 | *** mode/#debian [+b *!*@208.88.171.47] by peterS |
| 04:24.55 | *** kick/#debian [homecable!i=~m|ptrS|@adsl-68-88-175-99.dsl.wchtks.swbell.net] by peterS (no unsolicited dcc plskthx) |
| 04:24.55 | *** mode/#debian [-o peterS] by peterS |
| 04:25.00 | anom01y | karsten |
| 04:25.10 | anom01y | rdesktop maps drives ? |
| 04:27.28 | *** join/#debian duque (n=chatzill@201.230.92.134) |
| 04:27.34 | itomato | man rdesktop |
| 04:27.48 | itomato | printers, too.. |
| 04:28.41 | anom01y | so if I rdesktop to a windows computer, I can share a folder that is on my Linux (client) to the windows ? |
| 04:28.48 | anom01y | as a drive letter ? |
| 04:29.03 | peterS | rdesktop isn't directly related to file service, no |
| 04:29.47 | *** join/#debian alfanick_ (n=alfanick@bxo181.internetdsl.tpnet.pl) |
| 04:30.05 | *** join/#debian mhymn (i=mhymn@unaffiliated/mhymn) |
| 04:30.12 | anom01y | that what is karsten talking about ? |
| 04:30.28 | karsten | anom01y: drives, COM ports, parallel (printer) ports, sound, printer. |
| 04:30.35 | karsten | anom01y: Yes. |
| 04:30.56 | karsten | anom01y: Within the rdesktop session. If you're on a terminal server, other users won't see the linux drive. |
| 04:31.00 | duque | Hello debian guys/girls, How I can know if the kernel in Debian 4.0 (etch for amd64) load the network drivers as a module? |
| 04:31.05 | karsten | peterS: It has the capability though. |
| 04:31.12 | peterS | it does? |
| 04:31.14 | *** join/#debian cmanns (n=cmanns@68-185-92-123.dhcp.scrm.ca.charter.com) |
| 04:31.16 | karsten | anom01y: I only found out about this about six months back, very cool hat trick. |
| 04:31.18 | peterS | I'd never heard of that |
| 04:31.27 | karsten | peterS: man rdesktop,'-r' option. |
| 04:31.30 | *** join/#debian kernele (n=kernele@ppp-69-236-51-82.dsl.irvnca.pacbell.net) |
| 04:31.34 | karsten | peterS: Device redirection. |
| 04:31.45 | peterS | nice |
| 04:31.52 | karsten | peterS: There's a number of interesting things buried in there. |
| 04:31.53 | anom01y | ahh |
| 04:31.54 | karsten | Yeah, quite. |
| 04:32.03 | itomato | duque: 'dmesg', 'grep' for your device (chipset, brand, MAC) 'lsmod' and 'grep |
| 04:32.06 | anom01y | so that should solve my problems |
| 04:32.09 | itomato | for matching info. |
| 04:32.16 | anom01y | now I dont need ftp |
| 04:32.28 | duque | itomato: thx |
| 04:32.52 | iateadonu1 | anom01y - did you set up samba? |
| 04:33.05 | \amethyst | are there free RDP servers? |
| 04:33.06 | anom01y | iateadonu1: I had samba set up |
| 04:33.14 | iateadonu1 | rdesktop 10.0.0.1, then just do cmd: \\yourcomputer and you should be able to share it there. |
| 04:33.17 | anom01y | but I found its transfer speed was extremely slow for some reason |
| 04:33.18 | itomato | duque: you can also check /sys |
| 04:33.29 | \amethyst | ah, never mind, xrdp |
| 04:33.40 | *** join/#debian SiliconViper (n=siliconv@S01060013107698ba.vf.shawcable.net) |
| 04:34.43 | anom01y | thats cool because I was using rdesktop anyway to control the windows computer, which was then ftping back to the linux computer for accessing the files |
| 04:34.52 | *** join/#debian sodio (n=sodio@va-71-1-140-171.sta.embarqhsd.net) |
| 04:34.52 | anom01y | now I can do it all with just rdesktop |
| 04:35.13 | karsten | anom01y: Glad to help. |
| 04:35.38 | Nyle | hey |
| 04:35.41 | Nyle | whats up guys |
| 04:36.00 | *** join/#debian Jurkki (n=jukka@dsl-hmlbrasgw1-ff05c100-213.dhcp.inet.fi) |
| 04:36.56 | *** join/#debian HellTiger (n=HellTige@p5B0CFAD0.dip.t-dialin.net) |
| 04:37.53 | itomato | howdy |
| 04:38.06 | Lagbolt | hi |
| 04:38.09 | itomato | no say hi to the ladies? |
| 04:38.39 | *** join/#debian quick (n=quick@kickban.eu) |
| 04:38.43 | itomato | (lad-"y", maybe?) |
| 04:38.47 | *** join/#debian zink_ (n=GOTA@pc-209-33-239-201.cm.vtr.net) |
| 04:38.51 | Nyle | hm |
| 04:39.03 | *** part/#debian quick (n=quick@kickban.eu) |
| 04:40.25 | *** join/#debian iawecw (n=leo@host47-243-dynamic.40-79-r.retail.telecomitalia.it) |
| 04:40.55 | Nyle | why? |
| 04:44.35 | *** join/#debian Sweetandy (n=sweetand@c-24-22-132-246.hsd1.wa.comcast.net) |
| 04:44.40 | *** join/#debian msn (i=msn@unaffiliated/msn) |
| 04:44.43 | duque | itomato: how must looks a RealTek nic in a "dmesg" dump? I have done that, but I can unveil if it is been loading as a module in the kernel. |
| 04:44.46 | itomato | Semi OT: has anyone looked into OpenSolaris "Indiana"? (Ian Murdock's new project at Sun) |
| 04:45.13 | itomato | duque: you'll see something similar to "RTL8129" in the output. |
| 04:45.29 | catsup | itomato: it has patent issues |
| 04:45.33 | peterS | errr, most realteks you see nowadays are 8139 compatible |
| 04:46.16 | duque | itomate: sure I see. So, Does it means that my this nic's driver is running as kernel module? |
| 04:46.19 | itomato | catsup: agreed, up and down.. The packaging system is interesting, though, with it's snapshotting, etc.. |
| 04:46.24 | *** join/#debian maquis (n=maquis@c-24-17-72-165.hsd1.wa.comcast.net) |
| 04:46.28 | itomato | likely, yes. |
| 04:46.31 | catsup | erm |
| 04:46.46 | peterS | duque: you can run 'lsmod' and see if there is a module loaded, either '8139too' or '8139cp' or 'ne2k-pci'. |
| 04:46.53 | catsup | just to be clear, i don't mean 'patently, opensolaris has issues' -- i mean it has legal issues regarding patents |
| 04:47.00 | *** join/#debian simonrvn_ (i=simon@unaffiliated/simonrvn) |
| 04:47.01 | peterS | (that last one is for the Realtek 8029) |
| 04:47.08 | *** part/#debian maquis (n=maquis@c-24-17-72-165.hsd1.wa.comcast.net) |
| 04:47.35 | Nyle | hey its peterS |
| 04:48.07 | peterS | Pedron Nyle. |
| 04:48.08 | itomato | I follow. It has issues with the practical aspects of those patented components, vis-a-vis developer, user, and support dysfunction. |
| 04:48.17 | itomato | It's an interesting Soap Opera :) |
| 04:48.26 | Nyle | peterS, I recently purchased a 22" WS HD lcd and I am enjoying it |
| 04:48.30 | *** join/#debian Jed (n=Jed@pool-141-149-185-54.bos.east.verizon.net) |
| 04:48.43 | Nyle | peterS, though on debian I can't get it to go at native 1680x1050 res |
| 04:48.50 | Nyle | trying to figure that one out... |
| 04:48.51 | itomato | You got GNU in my UNIX! You got UNIX in my GNU! |
| 04:49.29 | peterS | Nyle: yeah I have one of those at work. 1680x1050 also. Now that LCDs with 1050 pixels vertical are affordable, I'm thinking of actually buying one for home. I've held out against LCDs for a long time because resolution and color contrast just weren't there. |
| 04:49.29 | itomato | Nyle: link to the product? |
| 04:49.52 | itomato | I'm right there - 1400x950 ain't cutting it.. |
| 04:49.59 | peterS | Nyle: I've had no trouble driving the thing at 1680x1050. what graphics chip do you got? |
| 04:50.43 | Nyle | its like the matrix, kind of. Neo(now GNU): I know my rights man, I want my phone call. Smith(now DRM/MS): "Tell me Mr. GNU, what good is a phone call if you are unable to speak?" |
| 04:50.56 | Nyle | peterS, X1900 XT ati/fglrx or catalyst 8.4 w/e |
| 04:51.14 | Nyle | itomato, HD216D HDMI HANNS.G 22" widescreen |
| 04:51.31 | peterS | oh, I don't know anything about fglrx. I have a Radeon HD 3200 and it's dandy with the ati driver in unstable. |
| 04:51.34 | Nyle | I only bought it cuz it was like 150 usd |
| 04:51.45 | Nyle | peterS, you have an HD card |
| 04:51.45 | Nyle | nice |
| 04:51.55 | Nyle | my card does not process HD, but my cpu can ! :) |
| 04:51.58 | itomato | thx |
| 04:51.59 | peterS | Nyle: it's on the mobo, and I bought this thing like 2 weeks ago, so. |
| 04:52.04 | Nyle | word |
| 04:52.18 | peterS | I didn't actually buy it for the graphics, I just wanted the quad-core amd64 |
| 04:52.19 | Nyle | I just bought mine today |
| 04:52.23 | *** join/#debian galataranator (n=galatara@87.120.229.77) |
| 04:52.41 | Nyle | I think I am not satisfied |
| 04:52.47 | Nyle | I will get rid of this one and buy a 24" |
| 04:53.00 | Nyle | I really gotta have 1920 something x 1200 |
| 04:53.19 | peterS | hey if you can afford it, go for 24. also assuming you can return what you have for store credit |
| 04:53.22 | Nyle | i need 1200 height or 1600 |
| 04:53.28 | Nyle | peterS, of course |
| 04:53.32 | Nyle | 30 day /bs |
| 04:53.43 | Jed | For people who have nVidia cards - if I want the propriety drivers, is the best way to set up a lenny/sid system, or not? |
| 04:53.51 | Nyle | !nvidia |
| 04:53.51 | dpkg | To use an NVIDIA graphics card with Debian, see http://wiki.debian.org/NvidiaGraphicsDrivers. If you've done it before, ask me about <nvidia one-liner> for a reminder. or If using a later release than Etch, ask me about <nvidia_post_etch> |
| 04:53.57 | itomato | I cannot wait for the day when I can buy a 15-17" WSXGA/WUXGA |
| 04:54.10 | itomato | it's a conspiracy, I tell you.. |
| 04:54.15 | peterS | itomato: why so small? |
| 04:54.20 | itomato | pixel density |
| 04:54.21 | \amethyst | Nyle: I've gotten addicted to 1440 lines, so sub-$1500 LCDs are not quite good enough for me yet :) |
| 04:54.40 | itomato | 120+ dpi is where it's at. |
| 04:54.44 | Nyle | I'm glad you make a lot of money then \amethyst |
| 04:55.00 | \amethyst | Nyle: I don't; that's why I still have CRTs |
| 04:55.03 | Nyle | I just started my own company, I need a little while to generate some cash flow |
| 04:55.04 | peterS | my work workstation gives me 4240 pixels wide, but that's on 3 monitors, so I guess I don't feel the need for more than 1050 vertical |
| 04:55.07 | Nyle | \amethyst, ahh |
| 04:55.31 | Nyle | peterS, this monitor isn't bad, I might consider 2x 24" |
| 04:55.38 | \amethyst | Nyle: 2x 1920x1440 CRTs are less expensive than, say, a 2560x1440 LCD would be |
| 04:55.44 | peterS | word to xorg driving 3 separate cards with 2 separate drivers (nv, nv, mga) |
| 04:55.53 | Nyle | \amethyst, yes, I used to run 3200x1200 on crt |
| 04:55.59 | Nyle | but crt is huge, I had to move and sell it |
| 04:56.15 | *** join/#debian ravenbird_ (i=ravenbir@unaffiliated/simonrvn/bot/ravenbird) |
| 04:56.25 | \amethyst | Nyle: yeah, that's why I'm even considering taking a step down to 1200 lines :) |
| 04:56.26 | Nyle | now when i move i got one flat panel, (and i sold all my servers, desktops, machines w/e i had, tv, dvd, all the bullshit that will distract me from business) |
| 04:56.29 | itomato | CRT's are almost free these days - especially the honking huge ones. |
| 04:56.41 | Nyle | so really just clothes, amps, guitars, pc, monitor |
| 04:56.43 | Nyle | im moved. |
| 04:56.46 | *** join/#debian Livingroom (n=none@97.81.48.98) |
| 04:56.54 | Nyle | oh and some minor furniture and a bed |
| 04:56.57 | Livingroom | how do i show the list of installed packages in apt? i cant find anything about it in the howto :( |
| 04:57.02 | duque | peterS/itomato: I can see my network drivers in lsmod. Now, I am not so sure if this is what this URL pretends to say when mention "driver as a module" http://www.dgonzalez.net/pub/roc/node4.html#SECTION00043100000000000000 |
| 04:57.07 | Nyle | get rid of all your crt |
| 04:57.08 | Nyle | i tell ya |
| 04:57.11 | itomato | "beds are overrated" |
| 04:57.28 | Nyle | its like you go lcd, you don't go back |
| 04:57.32 | Nyle | unless you have to |
| 04:57.34 | jaggz- | it's not the right time to cut my desk short so i can live happily on the floor again is it? |
| 04:57.40 | jaggz- | I hate sitting in a chair at a desk |
| 04:57.46 | \amethyst | Livingroom: dpkg -l or aptitude search '~i' |
| 04:57.57 | jaggz- | ~i? |
| 04:57.58 | Livingroom | sweet, ty |
| 04:58.04 | *** join/#debian Cobra| (n=aa@U80fa.u.pppool.de) |
| 04:58.05 | Nyle | I have a nice big 2 bed apt in queens, nice quiet neighbourhood |
| 04:58.08 | Nyle | its the city i can't stand |
| 04:58.17 | peterS | duque: yeah I don't know why that procedure would require that the net drivers be modules. but whatever, yours is. |
| 04:58.22 | Nyle | in the city(manhattan) they will try to charge you like 1000$/mo for a closet |
| 04:58.24 | Nyle | oof |
| 04:58.33 | peterS | Nyle: if you don't like queens you could move to st. island |
| 04:58.34 | Nyle | talk about sleeping there |
| 04:58.40 | Nyle | peterS, I love queens |
| 04:58.41 | peterS | everyone loves it there |
| 04:58.50 | Nyle | peterS, where are you? |
| 04:58.57 | peterS | wichita, kansas. a long way from nyc. |
| 04:59.01 | Nyle | oh really |
| 04:59.03 | jaggz- | I can't figure out why I'm getting this from dmraid -ay: "ERROR: creating degraded mirror mapping for 'pdc_whatever'" |
| 04:59.07 | Nyle | my best mates live in topeka |
| 04:59.10 | itomato | duque - that looks old. when there was far more diversity in eth chipsets.. |
| 04:59.15 | Nyle | peterS, you knew at some time I was in OKC? |
| 04:59.20 | peterS | I didn't know that |
| 04:59.27 | Nyle | peterS, I went to school in columbia missouri too, jeff. jr.high |
| 04:59.28 | peterS | I was in Topeka ... yesterday noon or so. |
| 04:59.30 | itomato | I'd say you are good to proceed. |
| 04:59.47 | Nyle | peterS, never really been to kansas, only kansas city in mo |
| 04:59.53 | peterS | close enough (: |
| 05:00.04 | Nyle | peterS, word, my boy he manages night shift TV stuff at fox 43 |
| 05:00.15 | Nyle | tv control operator or something |
| 05:00.15 | itomato | "You've seen one side of Kansas, you've seen the other." |
| 05:00.24 | Nyle | pretty cool |
| 05:00.24 | peterS | nyle: last time I was in OK was February or so, I overnighted in Enid for something |
| 05:00.29 | *** join/#debian JW (n=jw@166.128.135.221) |
| 05:00.32 | Nyle | peterS, hehe word man |
| 05:00.43 | Nyle | shit i didn't you were up there man we coulda hung out |
| 05:00.47 | peterS | itomato: not really true. eastern KS isn't nearly as boring as either western KS or eastern Colo. |
| 05:00.49 | Nyle | now im all the way in nyc |
| 05:00.56 | jaggz- | 7 hits on google? |
| 05:01.01 | jaggz- | what's a degraded mirror mapping?? |
| 05:01.08 | Nyle | peterS, i hung out with damog he is cool here |
| 05:01.22 | peterS | ah yeah, damog is in NY now, isn't he. |
| 05:01.26 | Nyle | yup |
| 05:01.30 | itomato | jaggz: what's the context? RAID, or something specific? |
| 05:01.31 | Nyle | recently moved up here from mexico too |
| 05:01.36 | Nyle | i think |
| 05:01.38 | peterS | right |
| 05:01.41 | JW | Does anyone know how to get a listing of a package that is availbe to install via apt but not yet installed/? Kind of like wajig list-files - except on a package that is up in the repo? |
| 05:01.48 | Livingroom | how do i flush downloaded/cached packages with apt? |
| 05:01.53 | Nyle | peterS, he saw my desktop and i had ubuntu when he came over! |
| 05:02.00 | Nyle | i felt so ashamed |
| 05:02.00 | *** mode/#debian [+l 795] by debhelper |
| 05:02.03 | JW | Livingroom: apt-cache clean? |
| 05:02.05 | *** join/#debian freespace (i=steve@60-242-94-250.static.tpgi.com.au) |
| 05:02.11 | peterS | JW: there is 'apt-file'. you install it then you 'apt-file update' which downloads a honkin huge index. then you can use 'apt-file show' or whatever |
| 05:02.11 | Nyle | (i had just moved and no inet and only ubuntu cd around) |
| 05:02.14 | itomato | Livingroom: apt-cache flush |
| 05:02.16 | Livingroom | jw: thank you so much |
| 05:02.21 | jaggz- | itomato, yeah.. raid mirror.. |
| 05:02.32 | Livingroom | E: Invalid operation clean |
| 05:02.35 | Nyle | i didn't know of 'flush' |
| 05:02.37 | Livingroom | E: Invalid operation flush |
| 05:02.39 | Nyle | I just clean |
| 05:02.42 | Nyle | apt-get clean |
| 05:02.45 | peterS | JW: often it's easier to just use the apt-file frontend at http://packages.debian.org/ (: |
| 05:02.52 | itomato | that's it.. |
| 05:03.00 | Nyle | Livingroom, apt-get clean or apt-get auto-clean maybe something read the manapge |
| 05:03.08 | Livingroom | on my dpkg --get-selections, it shows a bunch of packages as status 'deinstall' |
| 05:03.10 | JW | Livingroom: on the Debian web site are the instuructions for upgrading from Sarge to Etch - it's in there somewhere :-D |
| 05:03.20 | *** join/#debian mirrorcolor (n=iunixan@196.218.222.116) |
| 05:03.32 | JW | Livingroom: yeah it was apt-get clean, not apt-cache, sorry |
| 05:03.37 | jaggz- | itomato: after a power failure it wouldn't boot anymore (and possibly software updates, but I'm not sure about that part) |
| 05:03.38 | itomato | jaggz: if it |
| 05:03.46 | *** join/#debian Kwitschibo_ (n=Michael@host-091-096-239-194.ewe-ip-backbone.de) |
| 05:03.46 | itomato | 's software raid - I dunno.. |
| 05:04.01 | jaggz- | after the boot it wouldn't boot anymore.. comes up and goes into the tinylinux thing or whatever it's called.. |
| 05:04.03 | itomato | check your host controller, otherwise - let it do it's work. |
| 05:04.03 | JW | Livingroom: I found my notes: apt-get clean ; aptitude clean |
| 05:04.04 | peterS | sounds like he's talking about one of those hybrid hardware/software raid thingies |
| 05:04.16 | JW | peterS: thanks |
| 05:04.21 | Livingroom | ok, i did an apt-get clean. but aptitude doesnt exsist? |
| 05:04.35 | peterS | Livingroom: if aptitude doesn't exist, install it |
| 05:04.43 | jaggz- | host controller doesn't seem to notice anything, but fsck.ext3 showed sda4 good and sdb4 had errors (I didn't fix them, it was in readonly -n mode) |
| 05:04.43 | *** join/#debian P_Kable (n=P_Kable@ip68-228-32-205.tc.ph.cox.net) |
| 05:04.46 | peterS | Livingroom: ...or don't. apt-get works. aptitude is IMO nicer, but apt-get works |
| 05:05.03 | jaggz- | so then I dd'ed the good one (sda4) to sdb4 |
| 05:05.13 | itomato | I have little faith in soft RAID. |
| 05:05.39 | enouf | that's not softraid - it's fakeraid |
| 05:05.41 | jaggz- | it's a promise onboard controller.. |
| 05:05.55 | jaggz- | been working for months |
| 05:06.00 | itomato | mostly because of things like that. If it's a straight mirror, disconnect, the other disk, fsck, and reconnect. |
| 05:06.02 | peterS | with fakeraid you can generally just ignore the fakeraid and use softraid if you want |
| 05:06.26 | JW | Hey for an quicker way or starting/stoping services, SuSE has "rc<servicename> foo" and Red Hat has "service <servicename> foo" - does Debian have anything like that? So you don't have to type /etc/init.d/<servicename> everytime? |
| 05:06.28 | enouf | righto - mdadm over dmraid |
| 05:06.53 | *** join/#debian dbmoodb (n=davids@unaffiliated/dbmoodb) |
| 05:06.56 | peterS | JW: well there is 'invoke-rc.d servicename {start|stop|whatever}' but that isn't really any less typing |
| 05:07.00 | jaggz- | the partitions are the same now (after I dd'ed them).. but dmraid is somehow coming up with this strange message which I find very little mention of online |
| 05:07.02 | JW | Livingroom: if you don't have aptitude, ignore it (though I'm quite supprised you don't have it) |
| 05:07.08 | enouf | (over , meaning 'use instead of') |
| 05:07.11 | Livingroom | ok |
| 05:07.16 | Livingroom | yeah i've never used it |
| 05:07.24 | Livingroom | so i dont know what i'm missing :P |
| 05:07.31 | JW | peterS: hey I like that! is it less typing if you're in the habit of using tab-complete like I am |
| 05:07.34 | dbmoodb | hi there i am just wondering how i can setup my disk to be encrypted without killing it all at once and then be able to resize the thing .... so i can move my data around... |
| 05:07.40 | dbmoodb | if that is possible |
| 05:07.49 | peterS | JW: my finger memory can do /etc/init.d/ pretty fast |
| 05:08.00 | jaggz- | I'm not sure what the error is.. |
| 05:08.17 | itomato | or 'pushd' or 'cd' |
| 05:08.43 | peterS | JW: honestly invoke-rc.d was invented mainly for scripts. it actually checks the current runlevel and only starts the service if it's _supposed_ to be started in the current runlevel. so it isn't _quite_ identical to just typing /etc/init.d/service |
| 05:08.57 | itomato | or '/e[TAB]/i[TAB]/' |
| 05:09.13 | JW | ah |
| 05:09.19 | jaggz- | I don't know if it's software raid or dmraid that's doing this.. but it's weird.. dmraid -s says the status is ok on the mirror |
| 05:09.27 | *** join/#debian spidey_ (n=spidey@97.95.153.97) |
| 05:09.27 | jaggz- | let me reboot |
| 05:09.30 | jaggz- | and don't try to stop me |
| 05:09.36 | peterS | itomato: apparently you don't have a /etc/iceweasel/ |
| 05:09.41 | itomato | jaggz: what's complaining abot degrade? |
| 05:09.45 | enouf | also, /etc/init.d/scripts come in many variants, like alsa vs alsautils etc |
| 05:09.49 | itomato | ice-what? Firefox? :) |
| 05:09.51 | jaggz- | dmraid -ay, when setting it up |
| 05:10.04 | jaggz- | that activates it |
| 05:10.21 | itomato | jaggz: no experience there, I'm no help. |
| 05:10.39 | *** join/#debian zzhlei (n=null@218.28.239.36) |
| 05:10.58 | duque | bye, thx |
| 05:11.07 | jaggz- | actually.. you know what? that's without specifying the drive.. it's adding my cdrom as a single drive raid mirror |
| 05:11.50 | itomato | I can see that being degraded.. But it sounds incredibly bone-headed for dmraid to behave that way.. |
| 05:11.51 | jaggz- | got it.. that's what "degraded" means.. it was creating the /dev/mapper/pdc_xxxxxx device for the cdrom (sdc) |
| 05:12.06 | *** part/#debian Gm4n (n=Gm4n@unaffiliated/gm4n) |
| 05:13.13 | jaggz- | so the error was not really a problem with my raid mirror.. it was likely just the partitions not being synchronised causing me a problem, and then for some reason it wasn't creating the devices in /dev/mapper/ but now when I exit X, before I rebooted (thanks something for stopping me), it creates them. |
| 05:13.25 | *** join/#debian P_Kable (n=P_Kable@ip68-228-32-205.tc.ph.cox.net) |
| 05:13.42 | jaggz- | and it mounts too! |
| 05:14.29 | *** join/#debian jayaraj (n=jayaraj@121.247.149.5) |
| 05:14.30 | jaggz- | so the dd /dev/sda4 /dev/sdb4 fixed it .. (my linux partition which became unsynchronised) |
| 05:14.36 | enouf | why is your cd drive connected to a fake raid controller (especially along with other disks in a raid setup) ? |
| 05:14.44 | jaggz- | I also left many megabytes at the end of the drive for the raid meta data |
| 05:15.18 | jaggz- | enouf, it's not.. linux doesn't detect the fake raid controllers actually.. it doesn't seem to be able to know the difference |
| 05:15.39 | enouf | oh, and you said onboard? no wonder |
| 05:15.44 | jaggz- | what it does recognize is the raid meta data stored at the end [all the time?] of the drives |
| 05:16.08 | *** join/#debian iateadonu1 (n=dan@60.209.78.150) |
| 05:16.32 | jaggz- | the cdrom is using the [e?]ide cable, the drives are sata on the raid controller.. I guess once linux detects the raid data it knows which controller driver to use |
| 05:16.43 | jaggz- | it's still not booting.. sigh. |
| 05:17.05 | iateadonu1 | hi. my snd_hda_intel sound still doesn't work. after unplugging the microphones, they won't activate when you plug them back in... i have mandriva installed on another partition, and it works on there - i'm wondering what files i might be able to grab from mandriva that could tell me the config problems... |
| 05:17.12 | *** join/#debian P_Kable (n=P_Kable@ip68-228-32-205.tc.ph.cox.net) |
| 05:18.03 | P_Kable | Guys I can't change my password... any idea why ? |
| 05:18.19 | itomato | check perms on /etc/passwd and /etc/shadow |
| 05:18.39 | P_Kable | the command sudo chpasswd gets stuck , no erros |
| 05:18.42 | JW | P_Kable: tried doing it as root? |
| 05:18.50 | P_Kable | yep JW |
| 05:18.54 | jim | chpasswd is not the command |
| 05:18.54 | jaggz- | I've messed with this a lot until i got a working mirror system with ntfs as the first partition (which handles the mirror), then linux taking up 3 partitions and booting into raid... |
| 05:19.01 | JW | P_Kable: just use "passwd" |
| 05:19.03 | itomato | try 'passwd $user' as root |
| 05:19.08 | itomato | or via sudo |
| 05:19.15 | JW | P_Kable: name the user, too - like itomato said |
| 05:19.21 | JW | sudo passwd fred |
| 05:19.29 | *** part/#debian dbmoodb (n=davids@unaffiliated/dbmoodb) |
| 05:19.40 | enouf | vipw |
| 05:19.55 | jaggz- | I think it might be messing up because I upgraded my kernel images, etc. recently. *sigh*.. what a complicated mess. |
| 05:20.13 | P_Kable | thanks :D |
| 05:20.24 | *** join/#debian Serajewe1KS (i=devnull@adsl-76-251-232-131.dsl.ipltin.sbcglobal.net) |
| 05:20.32 | *** join/#debian subir (n=subir@202.79.37.177) |
| 05:21.04 | itomato | jaggz - try DRBD |
| 05:21.28 | enouf | jim: ever get your /dev/cdrom yet? i helped someone using debian get theirs on a vanilla .25 after 1st fixing the missing 'sg' part of the kernel ;-) |
| 05:21.47 | itomato | boot another kernel/ramdisk single-user, and disable dmraid.. |
| 05:22.04 | jaggz- | Distributed Replicated Block Device? |
| 05:22.06 | itomato | that's my prescription. :) |
| 05:22.14 | itomato | yep! |
| 05:22.24 | jim | I seem to have a /dev/cdrom that somehow got disassociated and a /dev/cdrom1 |
| 05:22.30 | jaggz- | over a network? :) |
| 05:22.35 | *** join/#debian ChicoBento (n=ponto-go@189.82.87.83) |
| 05:22.38 | itomato | I dunno what your intentions are - simple mirror? |
| 05:22.40 | *** join/#debian R430R (i=angel@80.97.89.33) |
| 05:22.47 | jaggz- | yeah.. this is a plain raid mirror of the whole drive |
| 05:22.52 | jaggz- | ntfs too |
| 05:23.00 | enouf | jim: right, his issue was an olde stale entry in /etc/udev/rules.d/z25_persistent-cd.rules |
| 05:23.00 | itomato | yow! |
| 05:23.46 | jaggz- | consider just one drive with 4 partitions: ntfs, swap, boot, root .. then that whole drive is mirrored (raid1) |
| 05:23.55 | enouf | jim: http://erxz.com/pb/9072 before and after http://erxz.com/pb/9073 the HL DVD RAM drive was replaced/removed since it blows chunks |
| 05:23.56 | itomato | jaggz: there must be another way to eliminate that CDROM.. |
| 05:24.34 | itomato | jaggz: that seems to be the culprit.. I'm looking at dmraid man pages.. |
| 05:25.00 | jaggz- | windows handles it using the installed drivers (which itself is a bit of a hassle to get working.. you have 1 of 2 options if your drivers aren't built in.. 1. install windows, install drivers, install 2nd drive and let the duplication happen.. windows comes up. option 2. install windows and during installation provide the raid driver disk). |
| 05:25.02 | enouf | jim: actually just removed - his one and only optical was showing as all 1 appended cdrom1, cdrw1, etc (in the "before" paste) |
| 05:25.06 | *** join/#debian lispy (i=dagit@198.145.244.130) |
| 05:25.12 | lispy | what does {a} mean after a package name? |
| 05:26.10 | jaggz- | I'm getting the devices and can mount them.. I think I actually resolved the issue of the two drives being different.. I had attributed the "degraded" to that, but that wasn't it.. that did get me to dd the two root partitions (sda4 and sdb4) and find sdb4 was corrupt... |
| 05:26.26 | jaggz- | but I did do an aptitude update of all the things it normally holds back |
| 05:26.26 | *** part/#debian iateadonu1 (n=dan@60.209.78.150) |
| 05:26.28 | *** join/#debian sauvin (n=sauvin@unaffiliated/sauvin) |
| 05:26.46 | jim | so you were left with just the first stanza? |
| 05:26.49 | jaggz- | I did that a week ago, and this is the first reboot since |
| 05:26.51 | enouf | jim: funny how you can see the sg layer libata stuff doing the ide<->scsi mapping there with entries like ; "pci-0000:00:1f.1-scsi-0:0:1:0" |
| 05:26.56 | *** part/#debian lispy (i=dagit@198.145.244.130) |
| 05:27.10 | itomato | jaggz: then I stick by my earlier suggestion to disconnect the un-corrupted drive, boot single, fsck, and reconnect as desired. |
| 05:27.29 | *** join/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 05:27.37 | enouf | jim: the 2nd, then he rebooted and it populated correctly (3rd missing paste) |
| 05:27.47 | *** part/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 05:28.37 | jaggz- | you know one thing interesting? I think I got my linux raid array to work properly by using an e2fs driver for windows.. windows was handling my raid mirror fine so I could go edit the /etc/fstab while in xp. :) now I know I can just use dmraid -ay to get the /dev/mapper/ devices though. |
| 05:28.39 | enouf | jim: IOW, the entire # HL-DT-ST_DVDRAM_GSA-4167B (pci-0000:00:1f.1-ide-0:1) Stanza(s) got removed - b/c the drive was no longer in the system |
| 05:28.50 | jaggz- | it doesn't seem to be the drive sync problem now though |
| 05:28.56 | *** join/#debian nuncanada (n=nuncanad@201.86.144.23.adsl.gvt.net.br) |
| 05:29.04 | jaggz- | yeah, i was about to do that.. I think the raid is working fine now |
| 05:29.15 | jaggz- | trying to figure out if it's the installation of a new image |
| 05:29.46 | itomato | jaggz: dmraid does something with the ramdisk - you might try regenerating.. |
| 05:29.54 | enouf | jim: in dmesg and everywhere the optical becomes /dev/scd0 and /sr0 (symlink) |
| 05:30.06 | jaggz- | that's interesting.. what? :) |
| 05:30.20 | Livingroom | GAH why is there no DHCP SERVER?! |
| 05:30.43 | itomato | Livingroom: by default, or what? |
| 05:31.04 | jim | where have all the servers gone... |
| 05:31.10 | enouf | jim: and (atleast) SATA HDDs appear in wodim -scanbus output once "sg" is enabled .. as well as IDE CD drives also appear in /proc/scsi/scsi |
| 05:31.24 | jaggz- | with my understanding of the drive layout and raid requirements -- basically drives are identical data in all respects, except for a bit of extra data which the raid bios places at the end (in the last x mb of drive space).. it then reports a shorter number of cylinders to the requesting OS (linux can tell the full size too) |
| 05:31.27 | itomato | jaggz: not sure, but as part of the post-install of the package, a new initramfs image is created, but not on removal.. |
| 05:31.46 | jim | should I reboot or can I restart this another way? |
| 05:32.00 | enouf | jim: hs system has one sata HDD and one IDE CDRW |
| 05:32.00 | jim | also should I rm the cdrom and cdrom1? |
| 05:32.08 | enouf | no , no need |
| 05:32.15 | enouf | udev should handle all that |
| 05:32.46 | jaggz- | I experimented with this by installing windows and doing the whole shabang.. then I installed linux on a single drive, then i duplicated the partition table over and the linux partitions over to the other drive, which were carefully partitioned to leave about 20mb or so at the end (found this through doing the process many times.. many times too many that is.. increasing the additional space each time) |
| 05:32.47 | *** join/#debian DimmuR (n=DimmuR@87-205-187-184.adsl.inetia.pl) |
| 05:33.02 | jaggz- | scaling down the linux partition with gparted a few times too.. bleh |
| 05:33.05 | enouf | i mean, yes reboot, but don't bother removing symlinks and crap |
| 05:33.16 | enouf | jim: ^ |
| 05:33.34 | jim | so, what should I do now that I edited the file? |
| 05:33.55 | enouf | reboot 0 to make it simple |
| 05:33.59 | jaggz- | ahh, regenerating that.. |
| 05:34.25 | jaggz- | initrd.img-... ? |
| 05:34.46 | itomato | jaggz: update-initramfs |
| 05:34.48 | jaggz- | I kind of recall some strange error about that.. and it said it would .. probably .. be rebuilt when rebooting :) |
| 05:34.49 | itomato | (man) |
| 05:35.03 | *** join/#debian castset (n=introduc@41.232.79.229) |
| 05:35.05 | castset | hello |
| 05:35.07 | Livingroom | any of you guys have any experience using an Asus WL330g pocket AP? |
| 05:35.23 | enouf | i orig made him try all the typical "udevtrigger", "/etc/init.d/udev stop|start" and "cd dev; sh ./MAKEDEV" and before i got to tell him try "udevcontrol reload _rules" after he edited that file - he rebooted |
| 05:35.28 | itomato | no, but I have a feeling I'm about to :) |
| 05:35.31 | enouf | jim:^^^ |
| 05:35.43 | *** part/#debian castset (n=introduc@41.232.79.229) |
| 05:37.04 | jaggz- | more and less both give only one screen of manpage then exit.. that's weird. |
| 05:37.52 | itomato | 'man -P less'? |
| 05:38.01 | enouf | dpkg-reconfigure linux-image-`uname -r` should update the initrd |
| 05:38.21 | enouf | make BACKUPs of initrd prior |
| 05:38.29 | enouf | just in case |
| 05:38.53 | enouf | also update-initramfs -u see the man page |
| 05:40.15 | jaggz- | I gunzipped it and ran vi on it.. it's kinda ugly but it worked well enough.. update-initramfs -u (after setting my PATH because I'm chrooted from the mini boot failure image linux somehow has nowadays) |
| 05:40.33 | itomato | FYI: 'update-initramfs -u -k `uname -r`' or update-initramfs -u -k all' will do the trick, too.. |
| 05:40.41 | enouf | jim: i think even at one point in there he ran /lib/udev/write_cd_rules (whatever) and got an error about $DEVICE path wrong or similar |
| 05:40.50 | jaggz- | then the image was missing.. but initrd.img-2.6.18-6-k7.dpkg-bak was there.. a cp away and the update worked :) |
| 05:41.04 | jaggz- | it did, btw, detect the latest one.. thank you for being extremely helpful though |
| 05:41.33 | jaggz- | it helps a lot to have someone interested helping you along |
| 05:41.50 | jaggz- | I hope the bit of fake-raid info I gave back was useful too :) |
| 05:41.50 | itomato | other peoples' problems are often more interesting :) |
| 05:42.00 | *** mode/#debian [+l 784] by debhelper |
| 05:42.11 | jaggz- | my gawd.. I don't think it unmounted! |
| 05:42.19 | jaggz- | okay.. don't rely on ctrl-alt-del :) |
| 05:42.29 | jaggz- | bites his lip... |
| 05:42.41 | jaggz- | it boots now though :) |
| 05:42.48 | jaggz- | no.. damnit |
| 05:43.24 | enouf | itomato: isn't 'update-initramfs -u -k `uname -r` the same as 'update-initramfs -u' ? |
| 05:43.57 | enouf | itomato: and 'update-initramfs -u -k all` will do all of them .. not good if it fails |
| 05:43.58 | itomato | enouf: from what I understand, a kernel needs to be specified, but it may very well be.. |
| 05:44.14 | itomato | which is why backups are good :) |
| 05:44.28 | jaggz- | it takes the most recent by default.. not sure how it figures it out but it does |
| 05:44.40 | jaggz- | that is.. it got mine right :) |
| 05:44.52 | jaggz- | now I have to go diff the partitions again.. grr. |
| 05:45.20 | *** join/#debian livinroom (n=none@97.81.48.98) |
| 05:45.21 | jaggz- | using this thing by the way: http://www.sysresccd.com/ |
| 05:45.59 | *** join/#debian ravenbird (i=ravenbir@unaffiliated/simonrvn/bot/ravenbird) |
| 05:46.22 | itomato | it's good stuff - I also recommend 'bootmagic' |
| 05:46.23 | enouf | well , as far as the -k `uname -r` doesn't hurt to specify - as the man page says "newest" kernel in the Examples |
| 05:46.24 | jaggz- | (note: X11's resolution does not work on my display properly.. running mkxf86config, and nothing else, generates a working config.. lower resolution but I don't feel like fiddling with it... good to know if you use the image.. ) |
| 05:46.24 | *** join/#debian seemawn (n=seemawn@p5DC2CADC.dip.t-dialin.net) |
| 05:46.56 | enouf | Backups == win indeed ;-) |
| 05:47.17 | *** join/#debian MrNaz (n=MrNaz@61.7.179.8) |
| 05:47.21 | itomato | slaps himself.. Not bootmagic.. |
| 05:47.24 | *** join/#debian xenonex (n=xenonex@89.218.236.221) |
| 05:47.39 | jaggz- | "Files /dev/sda2 and /dev/sdb2 differ".. glad I checked. I wonder what the hell linux (dmraid) do with differences.. |
| 05:47.51 | itomato | > metadata |
| 05:48.12 | itomato | until cache write.. |
| 05:48.20 | *** join/#debian DirtyDawg (i=DirtyDaw@92-233-244-82.cable.ubr05.benw.blueyonder.co.uk) |
| 05:48.36 | *** join/#debian Administrator__ (i=iblicf@222.44.111.53) |
| 05:49.07 | *** join/#debian marc7 (n=marc@S0106001c10243803.gv.shawcable.net) |
| 05:49.27 | itomato | DRBD is awesome, but it sounds like it would be over the top for what you're doing.. |
| 05:49.43 | jaggz- | while true; do killall -USR1 dd; sleep 10; done :) |
| 05:49.44 | *** join/#debian justin007 (n=justin@59.96.20.186) |
| 05:50.23 | *** join/#debian iblicf (i=iblicf@222.44.111.53) |
| 05:50.44 | jaggz- | yeah.. sounds a bit .. something else.. this is just a personal desktop at home.. shares some files with my lady too.. |
| 05:52.23 | enouf | well, i guess i can surmise, but i am only making an educated guess; "dpkg-reconfigure linux-image-`uname -r`" will do the job if kernel is a "linux-image" made with make-kpkg as this command invokes 'mkinitramfs-kpkg' .. i guess update-initramfs can be used for all sorts of initrds though - again, i'm not sure though |
| 05:52.46 | jaggz- | my swap partition differed (2).. boot didn't, although I had edited the initrd on that device.. guess cache was dumped before I carelessly hit ctrl-alt-del |
| 05:53.17 | jaggz- | enouf.. hmm.. |
| 05:53.40 | jaggz- | I hope this is all okay from within a chroot.. |
| 05:53.50 | *** join/#debian rowdog (n=jth@host-64-234-1-212.nctv.com) |
| 05:54.09 | jaggz- | it's probably the same kernel image .. as grub does go into the latest one.. it's later on when loading the initrd thing that it fails .. I think. |
| 05:54.23 | itomato | enouf: I've been using it to generate and regenerate.. Custom, default, et. al.. |
| 05:54.38 | enouf | also, IIRC, mkinitramfs-kpkg can also be used if you did not originally build a linux-image-version .deb with make-kpkg, but forgot or intentionally did not use the --initrd option while building |
| 05:54.50 | enouf | or, was that update-initramfs, gah |
| 05:55.08 | *** join/#debian \\homer (n=homer@fw.pmsag.com) |
| 05:55.27 | itomato | I think make-kpkg calls update-initramfs (but don't hold me to it.) |
| 05:56.00 | jaggz- | once this is done guess what I'm going to try to do? I'm going to use gparted to size down my ntfs partition, and scale up linux, now that I'm semi-happily back in linux on my desktop.. I really don't know if I'm happy. primarily because my canon scanner/fax/printer is not supported in linux... the printer is, enough, by using some other driver though |
| 05:56.05 | *** join/#debian MrFlex (n=uni@212.248.186.144) |
| 05:56.33 | *** join/#debian rooott (n=rooottt@61.5.149.236) |
| 05:56.44 | rooott | hi everybody |
| 05:56.54 | jaggz- | I've been using linux for 14 years! |
| 05:57.47 | rooott | i have a problem about grub |
| 05:58.19 | streuner | jaggz-: bad luck |
| 05:58.32 | rooott | i have install debian but at the end when grub-install /dev/sda |
| 05:58.39 | rooott | its saying fatal error |
| 05:58.46 | streuner | multi-function stuff (printer/fax/scanner) isn't very well supported in Linux |
| 05:58.49 | *** join/#debian cahoot (n=radix@pdpc/supporter/active/cahoot) |
| 05:58.54 | itomato | seconded |
| 05:59.03 | rooott | on my first partion fedora is installed |
| 05:59.27 | streuner | jaggz-: did you look at linuxprinting.org yet? |
| 05:59.44 | rooott | now when im reinstalling grub lik root (hd0,9) |
| 05:59.48 | itomato | rooott: instead of installing grub to MBR (/dev/sda) try the debian partition (/dev/sda2?) |
| 05:59.50 | rooott | setup (hd0) |
| 05:59.51 | jaggz- | I did a while back.. not recently |
| 06:00.05 | jaggz- | not in my recent searches that is. |
| 06:00.18 | rooott | yes i tried it but failed |
| 06:00.21 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 06:00.33 | jaggz- | will do though.. afk a while.. got a diff going on the linux partition and I've gotta go take care of family :) |
| 06:00.40 | rooott | itomato:i tried it but failed |
| 06:00.57 | jaggz- | fatal error? that's it |
| 06:00.58 | jaggz- | ? |
| 06:01.03 | rooott | yes |
| 06:01.21 | rooott | grub-install /dev/sda9 "fatal error" |
| 06:01.54 | *** join/#debian slackd0Od (n=jason@c-71-231-114-231.hsd1.wa.comcast.net) |
| 06:02.00 | *** mode/#debian [+l 791] by debhelper |
| 06:02.19 | itomato | Have you tried to boot from grub command line? ('c' at grub prompt?) |
| 06:02.26 | rooott | yes |
| 06:02.40 | rooott | root (hd0,9) |
| 06:02.42 | rooott | then |
| 06:02.49 | rooott | kernle /boot/vmlinuz |
| 06:03.02 | rooott | but no success |
| 06:03.20 | itomato | will 'TAB' list anything in /boot? |
| 06:03.28 | rooott | no |
| 06:03.41 | itomato | try another partition - say (hd0,8) |
| 06:04.20 | rooott | my debian is installed on hd0,9 |
| 06:05.05 | rooott | kernel /vmlinuz root=/dev/hda10 |
| 06:05.10 | rooott | is this correct |
| 06:05.13 | rooott | ? |
| 06:05.14 | *** join/#debian xiaowei (n=zhbwei@222.210.21.47) |
| 06:05.25 | *** part/#debian xiaowei (n=zhbwei@222.210.21.47) |
| 06:05.39 | enouf | itomato: was afk, some ho was tracking me down :-P |
| 06:05.39 | itomato | what does 'cfdisk' show? |
| 06:06.07 | itomato | enouf: send her my way |
| 06:06.24 | rooott | on Name Flags Part Type FS Type [Label] Size (MB) |
| 06:06.24 | rooott | <PROTECTED> |
| 06:06.24 | rooott | <PROTECTED> |
| 06:06.24 | rooott | <PROTECTED> |
| 06:06.24 | rooott | <PROTECTED> |
| 06:06.25 | *** kick/#debian [rooott!n=debhelpe@unaffiliated/debhelper] by debhelper (use the paster bot or #flood) |
| 06:06.30 | enouf | itomato: no, make-kpkg doesn't call update-initramfs, the initrd gets build upon install using mkinitramfs=kpkg |
| 06:06.36 | enouf | itomato: afaik |
| 06:07.04 | itomato | oopsy.. |
| 06:07.15 | *** join/#debian rooott (n=rooottt@61.5.149.236) |
| 06:07.25 | jim | toomuchenterin! |
| 06:07.48 | rooott | yes saying sda10 Linux |
| 06:07.53 | enouf | like "tripendicular" ? |
| 06:08.14 | itomato | too many logical partitions, perhaps? |
| 06:08.26 | *** join/#debian frog (n=frog@p4FD4B423.dip0.t-ipconnect.de) |
| 06:08.27 | rooott | yes |
| 06:08.30 | *** join/#debian speme (n=speme@58.37.120.238) |
| 06:09.13 | itomato | I would try 'update-grub' from Fedora - use it's functioning grub, add Debian to the menu.lst (or equiv) |
| 06:09.48 | WormFood | is there software that will rip the audio tracks from a dvd? |
| 06:10.01 | *** join/#debian Pyro (n=pyro@192.211.25.149) |
| 06:10.03 | cahoot | mplayer? |
| 06:10.22 | WormFood | will that do it? |
| 06:10.27 | rooott | but there is no menu.lst installed on debian partion |
| 06:10.57 | *** join/#debian bibe (n=bibe@195.206.31.226) |
| 06:10.58 | itomato | rooott - does grub work for Fedora? |
| 06:11.04 | rooott | yes |
| 06:11.15 | itomato | add a debian entry to the menu.lst for Fedora. |
| 06:11.24 | cahoot | WormFood: with the right options yes |
| 06:11.27 | itomato | use your device, and the vmlinuz kernel |
| 06:11.41 | WormFood | thanks cahoot, I didn't even think of using mplayer |
| 06:11.52 | rooott | thanks itomato |
| 06:11.56 | rooott | i will try |
| 06:12.28 | bibe | hi all. I am looking for a web application (preferably, php/mysql based) to run a web site to aggregate different feeds. What does planet.debian.org use? |
| 06:13.58 | *** join/#debian hjubal (n=hjubal@unaffiliated/hjubal) |
| 06:14.42 | simonrvn | how about you ask *them*? |
| 06:16.50 | bibe | simonrvn: it must be the early hour here... thanks |
| 06:17.00 | itomato | how about 'planet'? 'apt-cache search feed aggregator' |
| 06:17.02 | simonrvn | :) |
| 06:17.54 | itomato | Planet was originally developed for: * Planet GNOME * Planet Debian... * Planet... |
| 06:18.12 | *** join/#debian westside (n=ethan@c-71-229-229-146.hsd1.co.comcast.net) |
| 06:19.20 | *** join/#debian reZo (n=reZo@130.216.93.5) |
| 06:19.38 | bibe | thanks itomato |
| 06:19.41 | bibe | bye all |
| 06:19.51 | itomato | hth |
| 06:22.04 | itomato | that's actually a pretty cool aggregator.. I may have to leverage that little chunk o' goodness! |
| 06:22.14 | dimir | Morning! |
| 06:22.35 | *** join/#debian larswey (n=webmaste@148.83.128.14) |
| 06:24.24 | *** join/#debian yure (n=yure@84-255-246-165.static.t-2.net) |
| 06:24.33 | itomato | if you say so! :) |
| 06:25.15 | dimir | ye! ;) |
| 06:25.23 | *** join/#debian akio (n=lucifer@178-90.200-68.tampabay.res.rr.com) |
| 06:25.29 | akio | hello |
| 06:25.50 | akio | i have a question about writing my own xorg.conf |
| 06:26.36 | akio | where is my x server getting its info from if my xorg.conf now has no configuration options? |
| 06:26.52 | *** join/#debian Deetz (n=pdi@mail.forcefive.de) |
| 06:27.08 | enouf | !break akio |
| 06:27.40 | dpkg | tells akio how to replace stable with unstable in his sources.list |
| 06:27.41 | akio | i want to enable the SHMConfig option but x crashes |
| 06:27.41 | akio | im running sid |
| 06:27.41 | enouf | no shit |
| 06:27.41 | *** join/#debian Refakki (i=refakki@ppp85-140-1-87.pppoe.mtu-net.ru) |
| 06:27.41 | enouf | :-P |
| 06:27.51 | akio | ? |
| 06:27.54 | akio | really? |
| 06:28.06 | enouf | sid sometimes breaks ... hence; 'unstable' |
| 06:28.10 | akio | but i need the b43 kernel module |
| 06:28.25 | akio | this is my laptop |
| 06:28.25 | enouf | if you don't know how the fix it, you shouldn't be using it |
| 06:28.28 | enouf | so what |
| 06:28.38 | enouf | you can backport it |
| 06:28.40 | akio | it has a touchpad |
| 06:28.49 | enouf | see above |
| 06:28.57 | akio | i dont know about the pros/cons of it |
| 06:29.13 | *** join/#debian stiv2k (n=steve@30.228.189.72.cfl.res.rr.com) |
| 06:29.14 | akio | so this is a known issue? |
| 06:29.40 | *** join/#debian CremonaMeGenuit (n=CremonaM@194.244.37.210) |
| 06:29.41 | enouf | not sure - but i've heard another mention same symptoms |
| 06:30.08 | akio | just trying to tame the touchpad a little crashes x? |
| 06:30.31 | itomato | if it doesn't have any configuration options, it creates them, doesn't it? as 'X --configure' |
| 06:31.07 | enouf | 3 options and the last 2 can break it beyond repair; 1) check the BTS 2) Xorg -configure 3) dexconf |
| 06:32.35 | akio | i have to learn how to use the BTS |
| 06:33.13 | akio | cool i can use google groups |
| 06:34.05 | *** join/#debian iguanna (n=david@80.30.190.86) |
| 06:37.15 | *** join/#debian n30 (n=n30@213.101.208.245) |
| 06:38.21 | enouf | jim: yo jimbo .. no update? |
| 06:39.01 | akio | the X site says use "xorgcfg" but i don't see it in the repos... |
| 06:39.14 | jim | just sat back down |
| 06:39.42 | *** join/#debian fireba11 (n=Miranda@145.253.117.242) |
| 06:40.56 | *** join/#debian billy12 (n=william@cpe-24-164-142-99.si.res.rr.com) |
| 06:41.12 | billy12 | cpu benchmarking tools? |
| 06:41.23 | jim | hmm, the entries came back from the you had me edit |
| 06:41.48 | markybob | billy12, you can try tiobench or glxinfo or compile something |
| 06:42.00 | markybob | glxgears* |
| 06:42.15 | jim | I did udevtrigger then much later /etc/init.d/udev stop/start |
| 06:42.28 | billy12 | thank, but glxgrears is out, server CPU |
| 06:43.07 | *** join/#debian fireba11 (n=Miranda@145.253.117.242) |
| 06:43.39 | *** join/#debian Tapout (n=Tapout@unaffiliated/tapout) |
| 06:43.48 | *** part/#debian markybob (i=markybob@unaffiliated/markybob) |
| 06:43.56 | *** join/#debian markybob (i=markybob@unaffiliated/markybob) |
| 06:44.05 | tenzind | Hi, I am running debian lenny on acer laptop. Everything is working fine except that when i use the earphone, the laptop speakers does not mute. How can I configure that? |
| 06:44.19 | Tapout | how do you control the outbound ip? I want to assign a few users their own ip.. So each shell gets a unique IP outbound. Anyone know if that can be done easily? |
| 06:45.31 | *** join/#debian visik7 (n=dksakd@unaffiliated/visik7) |
| 06:46.10 | jim | each -shell-? |
| 06:46.33 | *** join/#debian tanner (n=xero@c-24-20-184-182.hsd1.mn.comcast.net) |
| 06:46.36 | Tapout | jim, if I create you an account.. I want to assign your outgoing ip. I don't want you to use the default |
| 06:46.52 | Tapout | 123.123.123.1 <-- default , I want to assign all your packets in and out to be "123.123.123.22" lets say :) |
| 06:46.58 | Tapout | and for "joe" ... .23 |
| 06:47.12 | Tapout | and for 'james' .24 .. kinda thing... |
| 06:47.22 | jim | I guess you'd use ip aliasing |
| 06:47.27 | itomato | Tapout - it sounds like you need to jail each user, and assign each shell to an aliased ip. |
| 06:47.40 | itomato | good luck with that :) |
| 06:47.46 | Tapout | itomato, ya I didn't wanna jail :( |
| 06:47.51 | jim | why do you want to do this? |
| 06:48.07 | markybob | Tapout, that doent mean you arent going |
| 06:48.29 | itomato | AFAIK, there's no way to isolate the shell per user *and* have control over the environment as you describe. |
| 06:48.37 | *** join/#debian stiv2k (n=steve@30.228.189.72.cfl.res.rr.com) |
| 06:48.48 | itomato | tenzind: xmixer |
| 06:48.57 | itomato | or alsaconf |
| 06:49.56 | Tapout | jim, I have an account with a company, as does my friend. It's a restricted, document-signed thing.. where I wont' share my info, nor will he and stuff. |
| 06:50.12 | itomato | Tapout: maybe you can do it with profiles, but I dunno how secure it would be. |
| 06:50.32 | Tapout | so.. if I connect to them from my box, and want to let my buddy do it as well, I want to control it without having to have --bind all over the place (or whatever flag if the software supported it) |
| 06:50.36 | itomato | vlans? |
| 06:50.37 | *** join/#debian SerajewelKS (i=devnull@adsl-76-251-238-155.dsl.ipltin.sbcglobal.net) |
| 06:50.55 | *** join/#debian simbioz (n=shu4l0@pc-123-172-83-200.cm.vtr.net) |
| 06:50.58 | *** join/#debian iateadonu1 (n=dan@60.209.78.150) |
| 06:51.01 | simbioz | hi |
| 06:51.10 | iateadonu1 | what happens if you read the whole debian manual? |
| 06:51.17 | itomato | your head explodes. |
| 06:51.25 | itomato | same thing as if you 'apt-get install *' |
| 06:51.29 | simbioz | you get bored! |
| 06:51.55 | *** part/#debian MrWGW (n=opera@cpe-76-173-143-68.socal.res.rr.com) |
| 06:52.06 | itomato | seriously, though.. They send you a pin. |
| 06:52.11 | iateadonu1 | i was almost sure my head would explode. thanks for protecting me. |
| 06:52.13 | itomato | and a certificate. |
| 06:52.25 | iateadonu1 | "they" are pretty nice guys. |
| 06:53.13 | *** join/#debian Cato| (n=zep@146.72.251.17) |
| 06:53.13 | itomato | loves this mountain air and HD Espresso.. |
| 06:53.22 | rowdog | Tapout, maybe you could get away with aliasing the progs (alias prog="prog -bind blah') in .bashrc? |
| 06:53.40 | Tapout | rowdog, ya that probably is the only way to do it cleanly |
| 06:54.01 | rowdog | I can't think of a nice clean seperation short of virtualization |
| 06:54.02 | iateadonu1 | could you really do apt-get install * |
| 06:54.13 | itomato | ...until I 'zsh' my way out of it. |
| 06:54.16 | iateadonu1 | how much disk space would that take? |
| 06:54.33 | iateadonu1 | wouldn't the mirror ban your ip? |
| 06:54.34 | itomato | more than you probably have. |
| 06:54.40 | justin007 | Tapout, can you classify traffic based on user's with iptables and then route traffic with aliased ip's ?? |
| 06:54.53 | jim | well * is all the files in the dir you're in |
| 06:55.11 | jim | unless you quote it |
| 06:55.12 | itomato | it's also bash-completed apt-cache catalog.. |
| 06:55.47 | itomato | same as TAB-TAB |
| 06:55.50 | *** join/#debian Sipingal (n=Sipingal@inet-netcache2-o.oracle.com) |
| 06:56.13 | jaggz- | can we add another function key to our keyboards? this is lame. |
| 06:56.30 | jim | but if you have a bare * it pulls the dir contents |
| 06:56.44 | itomato | stands corrected.. |
| 06:57.04 | itomato | jaggz - xmodmap |
| 06:57.08 | *** join/#debian bfremon (n=ben@lns-bzn-22-82-249-94-177.adsl.proxad.net) |
| 06:57.57 | jaggz- | hmm.. could I make f12 into a modifier key? |
| 06:58.42 | jaggz- | sorry to distract from jim |
| 06:58.43 | *** join/#debian zwox (i=zwox@par69-7-82-243-234-94.fbx.proxad.net) |
| 06:59.45 | itomato | needs regex refresher course |
| 06:59.56 | itomato | jaggz - yep |
| 07:00.01 | itomato | lots of ways.. |
| 07:00.15 | itomato | if you have multimedia keys, you can use them, too.. |
| 07:00.37 | *** join/#debian streuner_laptop (n=streuner@p54A5CCB3.dip.t-dialin.net) |
| 07:00.42 | itomato | each key has it's own scancode, modified with each meta key.. |
| 07:00.54 | itomato | (except FN) |
| 07:01.36 | jaggz- | ahh.. could use those too.. interesting |
| 07:01.36 | *** join/#debian sphenxes (n=sphenxes@85-127-218-49.dynamic.adsl-line.inode.at) |
| 07:01.37 | jaggz- | thanks |
| 07:01.38 | *** join/#debian vraa (n=vraa@h203.180.213.151.ip.alltel.net) |
| 07:01.50 | jaggz- | whatcha wanna do with regex? |
| 07:02.00 | *** mode/#debian [+l 797] by debhelper |
| 07:02.02 | itomato | trick apt-get into installing all packages.. |
| 07:02.08 | itomato | without bash-completion |
| 07:02.18 | *** join/#debian AlbertyPasca1 (n=BWBckbx0@147.242-241-81.adsl-static.isp.belgacom.be) |
| 07:02.35 | itomato | checks into /etc/bash_completion.d |
| 07:02.43 | *** part/#debian AlbertyPasca1 (n=BWBckbx0@147.242-241-81.adsl-static.isp.belgacom.be) |
| 07:04.22 | *** part/#debian vraa (n=vraa@h203.180.213.151.ip.alltel.net) |
| 07:04.27 | jaggz- | I think regex's support for "not" is limited .. I'm not even aware of a posix extended regex that has any support for it but I could be wrong |
| 07:04.44 | *** join/#debian tor (n=tor@212-162-171-110.skbbip.com) |
| 07:04.50 | jaggz- | but there are ways of handling things I believe |
| 07:05.09 | itomato | I'm trying a few back-tick tricks with apt-cache, just for fun.. |
| 07:05.40 | itomato | 30-odd-thousand packages - oh, the humanity! |
| 07:05.57 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 07:06.07 | *** join/#debian svalvolo (n=lol@dafne.w2k.ts.infn.it) |
| 07:07.23 | *** join/#debian tombs (n=nyhc@ip565e4a39.direct-adsl.nl) |
| 07:07.44 | jaggz- | looks like it's booting.. the problem was the new grub/menu.lst had root=/dev/sda3 in it instead of the /dev/mapper/ line |
| 07:08.04 | itomato | good news |
| 07:08.47 | jaggz- | I really should have examined what was going on more closely -- the mounting of dev/sda3 returned 'device or resource busy' which occurs when the dm-support has established its mappings (into /dev/mapper/*) |
| 07:09.18 | itomato | was there any log data to indicate what you found? |
| 07:09.24 | *** join/#debian aRMX_ (n=aRMX@203.82.67.190) |
| 07:09.35 | *** join/#debian cmanns (n=cmanns@68-185-92-123.dhcp.scrm.ca.charter.com) |
| 07:09.38 | jaggz- | what the.. fsck died with exit status 1 |
| 07:09.46 | jaggz- | cringes in fear |
| 07:10.02 | *** join/#debian ryg9I (n=pavel@195.10.218.67) |
| 07:10.18 | jaggz- | yeah.. that's the thing -- if I were paying proper attention I would have noticed that message when it tried to mount sda3 (root partition) |
| 07:10.39 | jaggz- | I was distracted by other messages .. I really need to learn something about analysing the whole situation before taking action |
| 07:11.02 | jaggz- | it came up, said the device was not cleanly unmounted.. then it died.. freaky. |
| 07:11.12 | *** join/#debian desti (n=desti@p5B018A3E.dip0.t-ipconnect.de) |
| 07:11.25 | *** join/#debian the_sniff (n=sniff@85-250-149-54.bb.netvision.net.il) |
| 07:11.36 | itomato | has it been mounted outside of the Windows ext2 environment? |
| 07:11.44 | the_sniff | what ways are there to prevent ssh brute force attacks? |
| 07:11.55 | the_sniff | also, can anyone recommend a simple file backup system? |
| 07:12.05 | itomato | rsync |
| 07:12.17 | jaggz- | LOL: http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/6df54a252757bba6 "e2fsprogs: fsck could print less scary message on exit(1)" |
| 07:12.30 | *** join/#debian lewwy (n=biu@123-243-165-127.static.tpgi.com.au) |
| 07:12.38 | jaggz- | the_sniff, rsync is really simple.. setup your ssh keys and use rsync |
| 07:12.41 | itomato | jaggz - har! |
| 07:12.45 | jaggz- | I've been looking into dirvish and it looks promising |
| 07:12.57 | jaggz- | 0    - No errors |
| 07:12.57 | jaggz- | 1    - File system errors corrected |
| 07:13.10 | itomato | ssh brute force attacks on the standard port or against the service? |
| 07:13.18 | lewwy | any idea on how to get a HP P1005 printer to print properly? It won't work with the default drivers, and HPLIP manages to get one page out before hitting an error. Any ideas? |
| 07:13.28 | the_sniff | jaggz-: i want something to take a list of files and im too lazy to write a script :p |
| 07:13.37 | *** part/#debian Baloo (n=baloo@71-215-134-31.ptld.qwest.net) |
| 07:13.43 | jaggz- | rsync can take a list I think |
| 07:13.46 | itomato | try another driver from a similar familt |
| 07:13.50 | *** join/#debian aurehman (n=chatzill@202.59.70.211) |
| 07:14.04 | itomato | rsync can take redirected input, as includes or excluded. |
| 07:14.21 | lewwy | i tried that itomato, no dice |
| 07:14.26 | aurehman | Hi.. i've a problem.. i forgot my root password of debian.. how can i restore the root password? anybody help me plz.. |
| 07:14.46 | cahoot | !forgot roots password |
| 07:14.48 | jaggz- | lewwy, that one's best done with a bit of searching for others.. I don't have the printer and the alternate drivers that might work, like with my printer, I would never guess on my own |
| 07:15.00 | itomato | boot single user, edit root's entry in /etc/passwd |
| 07:15.06 | itomato | check the FAQ |
| 07:15.34 | the_sniff | itomato: on the standard port. what's against the service? |
| 07:15.38 | itomato | it might be a communication problem - lewwy |
| 07:15.55 | itomato | the_sniff: run ssh on another port. |
| 07:15.58 | lewwy | yeh i'm thinking that itomato |
| 07:16.08 | jaggz- | what's some intelligent, stable, possibly standard network monitoring software which can detect things like.. the ssh brute force attack.. and then block that IP? |
| 07:16.14 | the_sniff | itomato: that's not the "best of solutions" : |
| 07:16.15 | the_sniff | :| |
| 07:16.23 | lewwy | when i ran the hp setup utility in linux it complained that it couldnt connect to the printer |
| 07:16.27 | itomato | you're the_sniff, you tell me :) |
| 07:16.27 | lewwy | rebooting resolved that issue, tho |
| 07:16.39 | jaggz- | I got my printer to work.. but now that you bring this up -- I've not tried to print more than one page at a time :) |
| 07:16.42 | *** join/#debian edico (i=fenrir@unaffiliated/edico) |
| 07:16.44 | the_sniff | jaggz- yeah thats the direction i though of :s |
| 07:16.54 | the_sniff | itomato what ?lol |
| 07:16.56 | lewwy | at the end of the print job it complains of an error |
| 07:17.10 | *** join/#debian Fadoski (n=fadoski@dsl-mlibrasgw2-fe1ade00-98.dhcp.inet.fi) |
| 07:17.19 | jaggz- | we really have to sometime come up with a way of dealing with international network abuse |
| 07:17.32 | itomato | I thought 'the_sniff' was some network security reference.. |
| 07:17.51 | *** join/#debian sebn (n=seb@gambetta.sogilis.com) |
| 07:17.54 | the_sniff | nah, its a long story |
| 07:18.19 | the_sniff | and i did think of a way to block every ip with too many tries |
| 07:18.21 | jaggz- | I got my system working.. something hung for a while at boot then continued.. I'm very happy and relieved |
| 07:18.34 | lewwy | sigh, my print jobs are wedged in the queue now, but not getting processed |
| 07:18.35 | itomato | put up a honeypot, move your 'real' ssh to another port, and look into some of the finer points of iptables.. |
| 07:18.42 | *** join/#debian binseer (n=binseer@121.247.149.5) |
| 07:18.45 | *** join/#debian jelly-home (n=jelly@islands.iskon.hr) |
| 07:19.03 | itomato | lewwy; I assume it's usb? |
| 07:19.07 | *** join/#debian RA3OR (i=angel@80.97.89.33) |
| 07:19.18 | lewwy | yeh itomato |
| 07:19.19 | jaggz- | lewwy, my printing support has been unstable too, I should mention. The other day the kde print control panel would totally hang on add-printer.. (and the two existing printers weren't working and I had to remove them) |
| 07:19.39 | lewwy | can i start the windows printing service through wine or something ;) |
| 07:19.52 | jaggz- | I think I just restarted the cups system and that might have fixed it so i could add the new one |
| 07:19.59 | lewwy | yeh i restarted cups, no dice |
| 07:20.03 | jaggz- | lewwy, ooh.. tell me if that works.. I thought about it :) |
| 07:20.06 | lewwy | init.d cupsd restart |
| 07:20.13 | *** join/#debian ans_ (i=ans@p5B27EE57.dip.t-dialin.net) |
| 07:20.20 | jaggz- | maybe I could scan from wine too :) |
| 07:20.49 | *** join/#debian blupp (n=blupp@p508FF560.dip.t-dialin.net) |
| 07:21.07 | lewwy | maybe you could install xp from wine, too |
| 07:21.16 | the_sniff | itomato moving the ssh port is a mess its a dev box and there are too many users :( |
| 07:21.25 | lewwy | dammit its just such a letdown, i really want to break free from xp, but stuff like this is just gay |
| 07:21.47 | itomato | lewwy: is this you? http://foo2xqx.rkkda.com/ |
| 07:21.55 | *** join/#debian mishok13 (n=gdmfsob@195.3.130.70) |
| 07:21.57 | itomato | cheap hardware is gay. |
| 07:22.07 | lewwy | yehhhh debtable |
| 07:22.10 | itomato | it's tied to Windows.. |
| 07:22.12 | *** join/#debian Livingroom (n=none@97.81.48.98) |
| 07:22.28 | jim | what sex is cheap hardware? |
| 07:22.39 | *** join/#debian smoove666 (n=smoove66@p508FF560.dip.t-dialin.net) |
| 07:22.40 | jim | does it do it with other cheap hardware? |
| 07:22.50 | itomato | hermaphoritic, usually. with under-developed organs! |
| 07:23.09 | itomato | left out a few letters, there... |
| 07:23.21 | *** part/#debian smoove666 (n=smoove66@p508FF560.dip.t-dialin.net) |
| 07:23.28 | *** join/#debian SerajewelKS (i=devnull@adsl-69-219-226-245.dsl.ipltin.sbcglobal.net) |
| 07:23.32 | *** part/#debian blupp (n=blupp@p508FF560.dip.t-dialin.net) |
| 07:23.34 | *** join/#debian loganaden (n=test@196.20.140.116) |
| 07:23.37 | loganaden | greetings |
| 07:23.53 | loganaden | I have a LAMP system |
| 07:23.58 | *** join/#debian ecomp (n=hmaier@62.218.223.240) |
| 07:24.02 | jaggz- | lewwy, I can sympathise |
| 07:24.09 | itomato | wtf is "XQX"? |
| 07:24.15 | loganaden | with the following context |
| 07:24.22 | the_sniff | lol i have a USB messager and it got steeming |
| 07:24.24 | itomato | that's not postscript or PCL? |
| 07:24.32 | loganaden | users upload their files with SFTP-chroot |
| 07:24.34 | lewwy | its XQX |
| 07:24.37 | lewwy | some candy ass stream thing |
| 07:24.46 | loganaden | to their home directories |
| 07:24.53 | loganaden | and then we use virtual host |
| 07:24.53 | jaggz- | hugs and kisses? with.. something dangling off the hug? |
| 07:25.00 | itomato | foo2xqx looks like the key.. |
| 07:25.16 | loganaden | problem is that I must their home directories in chmod 777 |
| 07:25.26 | loganaden | for it to work properly |
| 07:25.45 | jim | how do I convert flash video to something like mpeg4 |
| 07:25.50 | loganaden | what do you suggest as a more secure alternative |
| 07:25.57 | catsup | jim: mencoder |
| 07:25.57 | itomato | jim: ffmpeg |
| 07:26.23 | loganaden | I heard Debian guy found a vulnerability in SSH, so I trust your judgement :-) |
| 07:26.43 | the_sniff | loganaden whats the vuln? :p |
| 07:26.45 | Livingroom | i've got a vulnerability... in my pants |
| 07:27.01 | the_sniff | lets exploit it |
| 07:27.02 | itomato | lognaden: chroot each user within their virtually hosted directory (/var/www/apache2-default/user1..user2, etc) |
| 07:27.02 | the_sniff | :| |
| 07:27.05 | loganaden | the_sniff, :-) |
| 07:27.25 | loganaden | itomato, ok |
| 07:27.35 | the_sniff | whats commited memory? |
| 07:27.36 | Livingroom | lol |
| 07:27.37 | catsup | um |
| 07:27.39 | Livingroom | btw |
| 07:27.43 | catsup | you put your vhosts inside apache2-default ?? |
| 07:27.45 | Livingroom | let me ax you guys something |
| 07:27.49 | lewwy | OH OH OH |
| 07:27.52 | loganaden | itomato, can't I use /home instead ? |
| 07:28.03 | jelly-home | loganaden: sure you can |
| 07:28.04 | itomato | dreamhost uses a similar scheme - and they are 100% debian, afaik.. |
| 07:28.06 | lewwy | There was an error during the CUPS operation: 'client-error-not-possible'. |
| 07:28.07 | Livingroom | i have a standalone, USB powered AP that freezes after 25 seconds unless it is plugged into an actual ethernet wire (it must be connected on both ends) why do you think that is? |
| 07:28.11 | lewwy | after foo2xqx |
| 07:28.16 | *** join/#debian _dbc_ (n=dbc___@78.31.183.42) |
| 07:28.18 | loganaden | itomato, okie |
| 07:28.33 | loganaden | Catsceo, nope |
| 07:28.51 | the_sniff | whats swap out? a value of under a zero? lol |
| 07:28.52 | loganaden | itomato, I use mysecureshell |
| 07:28.59 | *** join/#debian eth0 (n=rewt@jericho.nl) |
| 07:29.07 | loganaden | itomato, to allow my users to upload |
| 07:29.09 | itomato | dunno - make a loopback if you can (http://www.juniper.net/techpubs/software/nog/nog-interfaces/html/fe-ge-loopback25.html) and see if it still does it. |
| 07:29.26 | itomato | lognaden: i'm not familiar with that. |
| 07:29.56 | loganaden | itomato, which permission I need to assign to /var/www/apache2-default/user1...? |
| 07:29.57 | jaggz- | livingroom, sometimes something at boot waits for some network connection.. i sometimes ctrl-c those things and the boot continues |
| 07:30.20 | jaggz- | (whenI don't have an active network connection.. that is.. and don't really mind, whatever it is, failing) |
| 07:31.06 | *** join/#debian esaym (n=user@cpe-70-120-89-6.satx.res.rr.com) |
| 07:31.06 | itomato | lognaden: you may use the default home directory and the default permissions |
| 07:31.25 | itomato | as long as they are mapped to each virtual host |
| 07:31.44 | itomato | I'm not really an expert on this topic.. |
| 07:31.51 | loganaden | itomato, then I wouldn't need to chmod 777 |
| 07:32.10 | Livingroom | jaggz: but this is an AP, not a boxen |
| 07:32.16 | catsup | never chmod 777 anything |
| 07:32.43 | itomato | ...ever |
| 07:33.13 | itomato | any barrier you erect via virtual hosts are removed by the 777 permissions. |
| 07:33.23 | *** join/#debian bofur (n=bofur@office.euronet.nl) |
| 07:33.33 | loganaden | itomato, ok |
| 07:33.53 | itomato | this may help: http://www.openbsdsupport.org/ApacheSuexecChroot.html |
| 07:34.03 | itomato | should have gone to medical school |
| 07:34.59 | loganaden | itomato, ^^ |
| 07:36.31 | *** join/#debian DDave (n=DDave@83.222.36.154) |
| 07:37.26 | itomato | Livingroom - if you attach the AP to a powered hub does it still freeze? |
| 07:37.39 | *** join/#debian Shadow_mil (n=Shaddy@pdpc/active/Shadow-mil) |
| 07:38.27 | *** join/#debian aRMX (n=aRMX@203.82.67.190) |
| 07:38.52 | vlt | Hello. I tried reading a packets's changelog by running `aptitude changelog linux-image-2.6.18-6-k7` but get "Couldn't fetch URL http://packages.debian.org/changelogs/pool/main/l/linux-2.6/linux-2.6_2.6.18.dfsg.1-18etch4/changelog". Any idea why this doesn't work as expected? |
| 07:40.34 | *** join/#debian entaro (n=entaro@dhcp218-183.yandex.ru) |
| 07:40.38 | itomato | it gives a 404 with wget.. |
| 07:41.04 | itomato | etch1 is there, but not etch4.. |
| 07:42.03 | *** join/#debian p0g0__ (n=pogo@unaffiliated/p0g0) |
| 07:42.23 | *** join/#debian pksharma (i=pksharma@59.93.178.232) |
| 07:42.30 | *** join/#debian streuner (n=streuner@p54A5CCB3.dip.t-dialin.net) |
| 07:42.43 | itomato | not sure why, exactly. |
| 07:43.08 | *** join/#debian tor (n=tor@212-162-171-110.skbbip.com) |
| 07:43.08 | itomato | 2 & 3 are also MIA |
| 07:43.55 | *** join/#debian jirka (n=jagos@195.39.71.122) |
| 07:44.28 | simonrvn | vlt: hasn't been generated |
| 07:44.35 | itomato | must retire. The hours are slipping by more and more quickly.. |
| 07:44.38 | *** part/#debian itomato (n=itomato@66-224-246-146.atgi.net) |
| 07:44.52 | *** join/#debian aRMX__ (n=aRMX@203.82.67.190) |
| 07:44.55 | *** part/#debian jirka (n=jagos@195.39.71.122) |
| 07:45.01 | pksharma | how do i remap keyboard so that i can get characters by LeftCtrl+LeftAlt+key and LeftCtrl+LeftAlt+LeftShift+key for ALL keys ? |
| 07:45.28 | *** join/#debian Kalli (n=Kalli@pD9E603CC.dip.t-dialin.net) |
| 07:46.13 | *** join/#debian Filbert (n=Filbert@d54C17219.access.telenet.be) |
| 07:46.19 | pksharma | that will make it FOUR characters for every key .. keypress, Shift+Keypress and the other TWO mentioned above |
| 07:46.37 | pksharma | ols help |
| 07:46.51 | jaggz- | I'm not sure what you're asking |
| 07:46.53 | *** join/#debian godwin2 (n=Miranda@chello084113227153.18.14.vie.surfer.at) |
| 07:47.28 | jaggz- | look into xmodmap though? |
| 07:49.14 | pksharma | press a key to get a .. press LShft+a to get A, press LCtrl+LAlt+a to get accented A, press LCtrl+LAlt+LShift+a to get careted A .. how to remap keyboard for this ? |
| 07:49.51 | pksharma | jaggz tried .. answer given there is confusing .. human help needed .. tks in advance |
| 07:50.06 | *** join/#debian GNU\tresh (n=tresh@chello062178230100.10.12.vie.surfer.at) |
| 07:50.22 | jaggz- | xmodmap can do that I'm almost 90% sure.. look at its config file |
| 07:50.43 | pksharma | jagzz .. in which folder is xmodmap ? |
| 07:50.44 | jaggz- | also look into your control panel stuff.. I use kde and I think there's a mapping tool there |
| 07:50.50 | jaggz- | dpkg -L xmodmap might work |
| 07:50.50 | dpkg | No packages found matching xmodmap might work |
| 07:51.22 | *** join/#debian balrg (n=none@97.81.48.98) |
| 07:52.01 | *** mode/#debian [+l 803] by debhelper |
| 07:52.12 | pksharma | jaggz .. i guess the mapping tool works for the session and not permanently changing the layout |
| 07:52.53 | pksharma | jagzz ..i need to change for permanent .. to type french, german, etc with accent, caret, grave etc |
| 07:52.54 | *** join/#debian simonrvn_ (i=simon@unaffiliated/simonrvn) |
| 07:52.58 | jaggz- | I'd guess the other way |
| 07:53.31 | catsup | xmodmap doesn't have a configuration file... |
| 07:53.36 | *** part/#debian livinroom (n=none@97.81.48.98) |
| 07:54.02 | jaggz- | read up on the web on configuring xmodmap and also find the xmodmap package (probably its same name) and do that -L line I told you to do to try and find its config |
| 07:54.37 | jaggz- | hmm.. it's not in that package |
| 07:54.48 | simonrvn | xkeycaps? |
| 07:54.58 | catsup | of course, xmodmap is not in a package, it's distributed with X |
| 07:55.02 | catsup | it's in xbase-clients |
| 07:55.03 | *** join/#debian xlotlu (n=john@79.114.167.136) |
| 07:55.20 | *** join/#debian choc (i=natas@ool-14b82419.dyn.0pt0nline.com) |
| 07:55.23 | *** part/#debian preds (n=nathan@203.212.17.18) |
| 07:55.42 | catsup | you need to call it every time X starts, e.g., in .xsession or /etc/X11/Xsession.d/... |
| 07:58.42 | catsup | pksharma: there are standard ways to produce those characters--i don't know what they are, but switching to a european keyboard layout will certainly be easier than remapping your whole keyboard with xmodmap |
| 07:59.22 | *** join/#debian lukketto (n=user@host54-154-dynamic.10-87-r.retail.telecomitalia.it) |
| 07:59.35 | *** join/#debian floe (n=flo@i59F72A00.versanet.de) |
| 07:59.48 | *** join/#debian istree (n=webmaste@121.128.40.2) |
| 07:59.49 | simonrvn | no kidding. xkb switching, etc. |
| 08:00.32 | *** part/#debian lukketto (n=user@host54-154-dynamic.10-87-r.retail.telecomitalia.it) |
| 08:00.59 | *** join/#debian mishok13 (n=gdmfsob@195.3.130.70) |
| 08:02.59 | Sebboh | Hi. I'm setting up a virtual machine and specifying a mac address for the virtual network device. How can I check to see if the MAC I want is already on the network? I rent the hardware from a hosting provider.. And when I tried this a second ago, |
| 08:03.04 | *** join/#debian Superbartt (n=bart@ipd50a21c9.speed.planet.nl) |
| 08:03.27 | *** join/#debian maligor (n=maligor@a88-114-85-246.elisa-laajakaista.fi) |
| 08:03.31 | *** join/#debian arlinja (n=arm9cl@79.131.0.139) |
| 08:03.54 | pksharma | catsup: u r right .. it has to called up in every session .. i don't want to do that |
| 08:04.10 | catsup | Sebboh: when you tried this a second ago, [you were cut off here] |
| 08:04.27 | maligor | darned buggy asus bios, mtrr's set totally wrong |
| 08:04.37 | Sebboh | I couldn't get any network traffic. So I was thinking.. maybe they put me in a VNET based on my MAC.. So I was thinking of picking the next one up.. eh. This is not going to work. I'm going to have to put in a support ticket. |
| 08:04.50 | pksharma | catsup: actually i need to remap because i need to convert my keyboard from qwerty to alpabetic .. |
| 08:05.05 | catsup | Sebboh: uh, what? |
| 08:05.23 | *** join/#debian sarefo_work (n=sarefo@213.83.32.130) |
| 08:05.33 | *** join/#debian reZo (n=reZo@203-184-20-243.jetbuster.co.nz) |
| 08:05.37 | catsup | pksharma: ok. look at /usr/share/doc/kbd/dvorak/dvorak.xmodmap (install pkg kbd) for an example to work from |
| 08:06.02 | *** join/#debian frog___ (n=frog@p4FD48D47.dip0.t-ipconnect.de) |
| 08:06.20 | pksharma | catsup: hmm .. is it handy .. can u send over the file pls ? tks |
| 08:06.33 | catsup | pksharma: apt-get install kbd |
| 08:06.39 | *** join/#debian mishok13 (n=gdmfsob@195.3.130.70) |
| 08:06.41 | catsup | you probably already have kbd |
| 08:06.47 | pksharma | catsup: i hope it allows FOUR characters on every key |
| 08:06.59 | *** join/#debian mosno (n=mosno@unaffiliated/mosno) |
| 08:07.00 | pksharma | catsup: i'm not on a linux pc just now |
| 08:07.05 | Sebboh | catsup, nothing. Abort. Thanks though. |
| 08:07.08 | *** join/#debian simonrvn_ (i=simon@unaffiliated/simonrvn) |
| 08:07.23 | catsup | pksharma: that file won't help you set up modifiers at all, you'll have to read the docs for that |
| 08:07.48 | catsup | Sebboh: well, arp -n will list the known mac addresses on the network. |
| 08:08.29 | *** join/#debian Superbartt (n=bart@ipd50a21c9.speed.planet.nl) |
| 08:08.36 | pksharma | catsup: if u r on a linux mac and can access /usr/shara/doc/kbd/dvorak/dvorak.xmodmap .. uh oh ! that's an install .. not a c++ file or <script> file .. tch tch .. what to do ? .. i need the file to alter, tinker, stabilize |
| 08:09.12 | *** join/#debian Tiffon (n=name@unaffiliated/tiff0n) |
| 08:09.25 | *** join/#debian jaimet (n=jaimet@58.172.9.190) |
| 08:09.46 | *** join/#debian RaceCondition (n=RaceCond@80-235-42-57-dsl.mus.estpak.ee) |
| 08:09.56 | *** join/#debian nonno (n=nonno@ppp-91-115.33-151.iol.it) |
| 08:10.14 | catsup | pksharma: http://childrenofmay.org/dvorak.xmodmap |
| 08:10.41 | *** join/#debian aRMX_ (n=aRMX@203.82.67.190) |
| 08:11.26 | *** join/#debian adama (n=adama@207.189.243.178) |
| 08:13.42 | *** join/#debian Pusselgenerator (n=Pusselge@h-143-173.A213.cust.bahnhof.se) |
| 08:13.58 | *** join/#debian gypsymauro (n=coloriom@84.18.151.77) |
| 08:13.59 | gypsymauro | hi |
| 08:14.34 | gypsymauro | someone knows a "web disk" service for free? I need to have a > 2GB space on web protected by password |
| 08:15.10 | sep | gmail + gmailfs or some such combo ? |
| 08:15.44 | *** join/#debian Pusselgenerator (n=Pusselge@h-143-173.A213.cust.bahnhof.se) |
| 08:16.02 | *** join/#debian alphad (n=alphad@196.201.88.180) |
| 08:16.11 | *** join/#debian aRMX__ (n=aRMX@203.82.67.190) |
| 08:16.28 | gypsymauro | sep: I know them but I need a web service |
| 08:17.30 | *** join/#debian bluesceada_ (n=itsjustm@unaffiliated/bluesceada) |
| 08:18.33 | *** join/#debian nelf (n=nelf@host-217-159-124-123.satlynx.net) |
| 08:19.04 | adama | so.... what is the new way to do dual-head with nvidia, not xinerama? |
| 08:19.50 | Sebboh | gypsymauro, your reply didn't make sense. If you just need to send something large somewhere, try yousendit.com |
| 08:20.22 | *** join/#debian haxi (n=home_deb@73.171.68-86.rev.gaoland.net) |
| 08:20.23 | Sebboh | When I say send, I mean, store it on their server, and download it elsewhere via a link. |
| 08:20.30 | *** join/#debian nihil (i=mh@140.78.191.178) |
| 08:21.01 | *** join/#debian Agiofws (n=agiofws@athedsl-231360.home.otenet.gr) |
| 08:21.08 | pksharma | catsup: thanks .. checking out .... |
| 08:21.15 | maligor | what's the best place to reconfigure the mtrr's, rc.local is too late I think |
| 08:21.43 | *** join/#debian aRMX___ (n=aRMX@203.82.67.190) |
| 08:21.47 | *** join/#debian nvti (i=nvti@66.138.9.16) |
| 08:22.00 | *** mode/#debian [+l 818] by debhelper |
| 08:22.53 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 08:23.21 | pksharma | catsup: thanks .. checked out .. only TWO characters per key on dvorak layout .. here is c&p from that files : |
| 08:23.22 | pksharma | keysym a = a A |
| 08:23.23 | pksharma | keysym s = o O |
| 08:23.23 | pksharma | keysym d = e E |
| 08:23.23 | pksharma | keysym f = u U |
| 08:23.23 | pksharma | keysym g = i I |
| 08:23.23 | pksharma | keysym h = d D |
| 08:23.23 | *** kick/#debian [pksharma!n=debhelpe@unaffiliated/debhelper] by debhelper (use the paster bot or #flood) |
| 08:23.36 | adama | heh |
| 08:23.43 | *** join/#debian pksharma (i=pksharma@59.93.178.232) |
| 08:23.57 | streuner | !+tell adama -about paste |
| 08:23.57 | dpkg | told adama about paste. |
| 08:24.01 | pksharma | oops |
| 08:24.04 | pksharma | sorry |
| 08:24.20 | pksharma | new to irc .. won't happen again |
| 08:24.25 | adama | streuner: I know about paste |
| 08:24.29 | *** join/#debian ay^_ (n=ay@c-2465e253.1129-1-64736c10.cust.bredbandsbolaget.se) |
| 08:24.30 | gypsymauro | Sebboh: great |
| 08:24.56 | adama | I eat it all the time |
| 08:25.09 | streuner | adama: wrong nick, need some coffee |
| 08:25.19 | adama | ;-) |
| 08:25.28 | *** join/#debian KermitTheFragger (n=siepkes@118-197.bbned.dsl.internl.net) |
| 08:27.56 | *** join/#debian jatt (n=user@85.115.3.118) |
| 08:29.26 | sep | gypsymauro, Sebboh not exactly free ? :) |
| 08:30.19 | *** join/#debian khaleel5000 (n=khaleel@116.71.72.206) |
| 08:30.24 | *** join/#debian toastaky (n=yle@195.200.162.158) |
| 08:30.43 | *** part/#debian toastaky (n=yle@195.200.162.158) |
| 08:32.50 | c00l2sv | hi everyone, I got a problem, I setup postfix to use dkim-filter, everything works and I got my emails signed, but those are only seen as signed when received in gmail, in yahooo it says those don't have a signature... Can somebody help me? |
| 08:34.27 | *** join/#debian spaceninja (n=ali@c83-255-174-38.bredband.comhem.se) |
| 08:34.29 | fluxdude | since yesterday my X has been extremely slow, just scrolling in an xterm mkaes it jerking and takes 100 cpu, any ideas why? I haven't changed anything that I can remember... |
| 08:34.37 | spaceninja | where do I configure my startuo deamons? |
| 08:34.49 | spaceninja | startup daemons |
| 08:36.30 | liable | depends |
| 08:36.37 | *** join/#debian slxix (n=randy@p2083-ipbf216hodogaya.kanagawa.ocn.ne.jp) |
| 08:36.47 | liable | they can either have a config file, the default file, or the init script |
| 08:39.16 | *** join/#debian okan (n=okan@88.229.226.132) |
| 08:40.05 | *** join/#debian Firedrake (n=firedrak@218.193.14.64) |
| 08:40.17 | *** join/#debian yure (n=yure@84-255-246-165.static.t-2.net) |
| 08:40.26 | *** join/#debian FordCortina_ (n=FordCort@87.114.136.70.plusnet.thn-ag1.dyn.plus.net) |
| 08:41.20 | *** part/#debian tyzh (n=firedrak@218.193.14.64) |
| 08:41.24 | *** join/#debian ootput (n=ootput@unaffiliated/ootput) |
| 08:41.33 | *** join/#debian eth0 (n=rewt@jericho.nl) |
| 08:42.06 | *** join/#debian frog_ (n=frog@p4FD48BA5.dip0.t-ipconnect.de) |
| 08:43.15 | *** join/#debian konadr (n=Kon@unaffiliated/konadr) |
| 08:44.28 | *** part/#debian jaimet (n=jaimet@58.172.9.190) |
| 08:44.34 | spaceninja | ok |
| 08:45.31 | *** join/#debian Olgem (n=user@blg7-33.imt.net) |
| 08:46.46 | *** join/#debian haxi (n=home_deb@73.171.68-86.rev.gaoland.net) |
| 08:46.49 | *** join/#debian spem1 (n=speme@58.37.135.109) |
| 08:47.15 | *** join/#debian zyx386 (n=tony@unaffiliated/zyx386) |
| 08:49.17 | *** part/#debian Olgem (n=user@blg7-33.imt.net) |
| 08:49.31 | *** part/#debian spaceninja (n=ali@c83-255-174-38.bredband.comhem.se) |
| 08:49.33 | zyx386 | hi, how can fix this error? http://paste.debian.net/2802/ |
| 08:50.09 | cahoot | simply use aptitude with correct syntax |
| 08:50.17 | *** join/#debian klaf (n=akf@fw01.nykoping.se) |
| 08:50.23 | zyx386 | how |
| 08:50.43 | cahoot | like aptitude update |
| 08:51.32 | *** join/#debian dirk_ (n=dirk@cc955125-a.groni1.gr.home.nl) |
| 08:52.00 | *** mode/#debian [+l 810] by debhelper |
| 08:52.06 | *** join/#debian haxi (n=home_deb@73.171.68-86.rev.gaoland.net) |
| 08:52.35 | *** join/#debian RaceCondition (n=RaceCond@dsl2-39.uninet.ee) |
| 08:53.19 | zyx386 | cahoot, if try to intall or remove become this error every time |
| 08:53.40 | *** join/#debian stevil (n=stevil@cp1029020-a.dbsch1.nb.home.nl) |
| 08:53.41 | cahoot | so read up on how to use aptitude |
| 08:53.50 | zyx386 | aptitude update |
| 08:54.14 | fireba11 | is there any reasonable way to find out what mainboard is in a debian box without having physical access ? so from soem /provc entry or so ? |
| 08:54.29 | cahoot | dmidecode? |
| 08:54.51 | *** join/#debian derchris (n=derchris@87-194-89-163.bethere.co.uk) |
| 08:55.42 | zyx386 | now i try now remove gftp. become this error again http://paste.debian.net/2803/ cahoot |
| 08:56.14 | *** join/#debian Administrator (n=chatzill@218.104.71.166) |
| 08:57.22 | cahoot | zyx386: did you at some stage interrupt an upgrade? |
| 08:57.24 | *** join/#debian jivco (n=jivco@85.187.217.6) |
| 08:57.42 | cahoot | s/upgrade/installation/ |
| 08:57.51 | zyx386 | cahoot, i have lenny |
| 08:58.23 | zyx386 | apt-get dist-upgrade |
| 08:58.30 | DawnLight | hello. i can get my hands on a free, constant supply of pentium II and pentium III computers. how can they be used? for what? |
| 08:58.42 | fireba11 | haha |
| 08:59.15 | fireba11 | DawnLight : those are still around in reasonable numbers ?? |
| 08:59.24 | Kamping_Kaiser | DawnLight, theres a range of answers from 'anchors' to 'computers for disadvanged' ;) |
| 09:00.11 | *** part/#debian Administrator (n=chatzill@218.104.71.166) |
| 09:00.12 | DawnLight | fireba11: i can get them from a recycling company who just doesn't know what to do with them but have a good ecological intention that they will be reused |
| 09:00.22 | *** join/#debian ay^ (n=ay@c-2465e253.1129-1-64736c10.cust.bredbandsbolaget.se) |
| 09:00.33 | DawnLight | so if i just find a use to them, they'll throw them at me |
| 09:00.44 | Kamping_Kaiser | DawnLight, ignore the p2's, grab the p3's if you want something thats runable |
| 09:00.51 | zyx386 | choot, ? |
| 09:00.56 | DawnLight | P2s are runable |
| 09:01.04 | *** join/#debian skandaleras (n=luiz@84.77.155.219) |
| 09:01.10 | DawnLight | i've had some experience. debian etch works |
| 09:01.11 | Kamping_Kaiser | depends how much effort your willing to put into them i suppose |
| 09:01.19 | cahoot | zyx386: did you dist-upgrade from etch to lenny? |
| 09:01.23 | Kamping_Kaiser | after 4 years doing it you'll decide to take the easier way(s).... |
| 09:01.37 | DawnLight | i'm thinking something in the area of automation |
| 09:01.49 | DawnLight | like house automation |
| 09:02.08 | cahoot | DawnLight: a wordlwide inventroy of still running p2's and p3's? |
| 09:02.16 | *** join/#debian Orion_X11 (n=vagner@189.14.64.140) |
| 09:02.18 | *** join/#debian cxhan (n=chatzill@218.104.71.166) |
| 09:02.57 | zyx386 | cahoot, no, from lenny CD |
| 09:04.19 | *** join/#debian okan (n=okan@88.229.226.132) |
| 09:05.03 | cahoot | zyx386: looks to me you have a few not fully installed/configured apps on your system |
| 09:06.11 | *** join/#debian okan (n=okan@88.229.226.132) |
| 09:07.01 | *** join/#debian ay^__ (n=ay@c-2465e253.1129-1-64736c10.cust.bredbandsbolaget.se) |
| 09:07.28 | cahoot | zyx386: see if aptitude install -f does any good |
| 09:07.55 | *** join/#debian Eulex (n=alex@ip919.pool.wireless.lu.se) |
| 09:08.22 | *** join/#debian Ziroday (n=nick@unaffiliated/ziroday) |
| 09:08.57 | fireba11 | how to find out what mainboard is in a debian box ? i don't have physical access to it |
| 09:09.56 | petemc | dmidecode |
| 09:10.23 | *** join/#debian aardvarq (i=tgAardva@student25.student.nau.edu) |
| 09:10.38 | *** join/#debian heroxbd (n=user@2001:da8:200:900e:0:5efe:3b42:b96e) |
| 09:11.50 | *** join/#debian utrrrongeeb (n=mhciipec@blk-138-1-101.eastlink.ca) |
| 09:12.33 | *** join/#debian litlebuda (n=litlebud@87-196-213-216.net.novis.pt) |
| 09:13.43 | *** join/#debian `KaMa` (n=kama@host116-117-dynamic.16-87-r.retail.telecomitalia.it) |
| 09:14.17 | *** join/#debian jc_ (n=jc@AMontpellier-257-1-118-26.w90-0.abo.wanadoo.fr) |
| 09:14.37 | *** join/#debian xtr-II (i=94752345@216.19.191.191.novuscom.net) |
| 09:15.15 | *** part/#debian heroxbd (n=user@2001:da8:200:900e:0:5efe:3b42:b96e) |
| 09:15.28 | *** join/#debian jnbes (n=dr-jnut_@atreal.pck.nerim.net) |
| 09:16.07 | ootput | q/quit |
| 09:16.08 | *** join/#debian [Juventino] (n=Juve@41.196.58.9) |
| 09:17.38 | [Juventino] | hi, i have a problem with a DVB card, it seems to be working fine on a sid release, and i have a hard time getting it to work on etch, so i wanna compare the output of the 2 systems, to know what's missing, how can i do that? |
| 09:17.46 | zyx386 | h# installed/configured |
| 09:17.48 | zyx386 | bash: installed/configured: No such file or directory |
| 09:17.54 | utrrrongeeb | slxix,jim: Remember the installer trouble I was talking about yesterday? GRUB not getting installed? |
| 09:18.20 | zyx386 | cahoot, i try with -f install, but the error is stil her |
| 09:18.24 | slxix | yes i remember |
| 09:19.05 | zyx386 | how burn iso on debian? |
| 09:19.28 | [Juventino] | zykes-, get a burning software? |
| 09:19.41 | [Juventino] | zyx386, * |
| 09:19.41 | cahoot | wodim my.iso |
| 09:20.02 | Orion_X11 | Is there any low-level HD format utility in Debian? I need to low-level format my samsung HD |
| 09:21.09 | slxix | Orion_X11: what do you mean by low-level format? cfdisk/mkfs? |
| 09:21.37 | *** join/#debian haxi (n=home_deb@73.171.68-86.rev.gaoland.net) |
| 09:21.42 | utrrrongeeb | slxix: I'm going to eventually reinstall it (after an HD upgrade), so how do I get information which will be of use for determining the error? (if it occurs) |
| 09:21.55 | *** join/#debian haxi (n=home_deb@73.171.68-86.rev.gaoland.net) |
| 09:22.00 | *** mode/#debian [+l 817] by debhelper |
| 09:22.07 | Orion_X11 | slxix: > http://www.samsung.com/global/business/hdd/support/utilities/Support_HUTIL.html |
| 09:22.34 | *** join/#debian rca (i=ERROR@195.176.0.202) |
| 09:22.36 | *** join/#debian eth0_ (n=rewt@jericho.nl) |
| 09:23.02 | *** join/#debian fdd (n=fdd@79.116.104.182) |
| 09:23.20 | *** join/#debian bartden (n=bart@78-21-105-221.access.telenet.be) |
| 09:23.26 | bartden | hi, any suggestions for a good latex editor in linux |
| 09:23.39 | rca | bartden: graphical? try Kile |
| 09:23.44 | slxix | Orion_X11: what am i looking for on that webpage? |
| 09:24.27 | [Juventino] | how can i know the loaded drivers in the kernel? |
| 09:24.35 | Orion_X11 | slxix: for the explanation about what is a low-level format :-) |
| 09:24.39 | rca | [Juventino]: try lsmod |
| 09:24.54 | [Juventino] | rca yes, anything else? |
| 09:25.17 | rca | [Juventino]: not really. /proc/modules has some information too |
| 09:25.25 | [Juventino] | ok |
| 09:25.30 | [Juventino] | appreciated :) |
| 09:25.41 | *** join/#debian thrasher (n=thrasher@124-170-8-146.dyn.iinet.net.au) |
| 09:25.53 | rca | [Juventino]: no problem :) lsmod should be your best friend for that, though |
| 09:26.33 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 09:26.42 | slxix | utrrrongeeb: that's a really good question, i will try and find something. no promises, though. |
| 09:26.42 | [Juventino] | i already checked it, seems the 2 systems have the same drivers (same PC) but for some reason the card is working on one and not the other |
| 09:27.09 | rca | [Juventino]: same card, physically? and in the same slot (i.e. the third PCI slot on both of them)? |
| 09:27.27 | slxix | Orion_X11: it looks like the utility will low level format for you. why do you want to do it some other way? |
| 09:27.29 | [Juventino] | same card physically and in the same slot |
| 09:27.48 | rca | [Juventino]: hm. bios setup the same too? and does anything at all show up about the card in dmesg? |
| 09:27.57 | utrrrongeeb | slxix: Okay, thanks. I figured out why the graphical installer had unexplainably crashed: not enough RAM. It didn't tell me--I watched the same thing happen to GDM when reconfiguring the locales, which needed it... |
| 09:28.22 | [Juventino] | rca, yes, dmesg, lspci, and lsmod everything is almost the same (except the Kernel version) |
| 09:28.40 | rca | [Juventino]: is it a card that requires firmware? |
| 09:28.57 | Orion_X11 | slxix: Because I do not have Window$ in my machine, only Debian :-) |
| 09:29.01 | [Juventino] | rca, i got the firmware even, but still it's not working :( |
| 09:29.16 | *** join/#debian clusty (n=vlazar@BAF3fb5.baf.pppool.de) |
| 09:29.16 | *** join/#debian nse (i=leo@2011218646.rec.megazon.com.br) |
| 09:29.35 | rca | [Juventino]: hrm. and there are no complaints about loading the firmware in dmesg? just because two different kernels might have two different firmware directories |
| 09:29.40 | clusty | i want to set the SHMemmax to 1gb on the database server |
| 09:30.06 | clusty | i need to add shmemmax=100000 inside /etc/sysctl.conf? |
| 09:30.23 | rca | e.g. i have /lib/firmware/2.6.20-16-generic and /lib/firmware/2.6.24-16-generic |
| 09:30.28 | *** join/#debian bzk0711 (n=ps790413@vrvis3.rz.RWTH-Aachen.DE) |
| 09:30.55 | slxix | utrrrongeeb: find out if your installer has a "Save debug logs" option. that's about all i can offer... |
| 09:30.56 | [Juventino] | rca, well, i have Debian and Sidux, both use /lib/firmware i even made sure of that cause i have a speedtouch USB modem which needs a firmware and it's placed in /lib/firmware in both systems and working fine on both |
| 09:31.03 | *** join/#debian loca|host (n=tux@41.226.221.31) |
| 09:31.08 | loca|host | hello all |
| 09:31.15 | [Juventino] | hi loca|host |
| 09:31.30 | loca|host | wich distribution should i choose for an intel titanium server ? |
| 09:31.46 | Supaplex | !ia64 |
| 09:31.46 | dpkg | it has been said that ia64 is (Intel Architecture-64), a 64-bit processor architecture developed in cooperation by Intel and Hewlett-Packard, implemented by processors such as Itanium and Itanium 2. The goal of Itanium was to produce a "post-RISC era" arch using EPIC. see http://www.debian.org/ports/ia64/ -- if your CPU is opteron/athlon64/turion/sempron/xeon/em64t/pentium/core2duo/core*, then it is NOT ia64, it's amd64 |
| 09:31.47 | utrrrongeeb | slxix: Okay. It'll be a few days. What do I do with one of these logs--who gets it? |
| 09:33.02 | rca | [Juventino]: strange. but speedtouch is speedtouch, they aren't really known to be that reliable. is there no way you can try running the same kernel on both machines? |
| 09:33.13 | bartden | rca does kile support spelling check ? |
| 09:33.27 | [Juventino] | rca, it's the same machine |
| 09:33.27 | rca | bartden: oh, no idea, i never use that :( |
| 09:33.35 | *** part/#debian gypsymauro (n=coloriom@84.18.151.77) |
| 09:33.36 | bartden | ok |
| 09:33.41 | rca | [Juventino]: ah, ok |
| 09:33.44 | utrrrongeeb | Looks like dpkg has got his processor list muddled... |
| 09:33.47 | *** join/#debian GibbaTheHutt (n=moo@78-86-223-95.zone2.bethere.co.uk) |
| 09:33.50 | *** join/#debian stevil (n=stevil@host-2.tntlogistics-3.demon.nl) |
| 09:33.58 | [Juventino] | rca, i have the 2 kernels on the same machine :) |
| 09:33.58 | slxix | utrrrongeeb: if you're willing to read http://wiki.debian.org/DebianInstaller/FAQ ... but, again, that's not what a normal user would do. ;) |
| 09:34.00 | *** join/#debian jcwong (n=catalyst@cm4.omega175.maxonline.com.sg) |
| 09:34.54 | *** join/#debian FordCortina_ (n=FordCort@87.114.136.70.plusnet.thn-ag1.dyn.plus.net) |
| 09:34.56 | *** join/#debian ravenbird (i=ravenbir@unaffiliated/simonrvn/bot/ravenbird) |
| 09:35.06 | slxix | utrrrongeeb: note that page does not tell you where to send bug reports to.. |
| 09:35.31 | *** join/#debian andres__ (n=andres@89.100.144.252) |
| 09:35.39 | [Juventino] | rca, there's another issue, hope you can help me with it, how can i make the kernel check for devices? i mean i should have /dev/dvb/ but it's not there on debian, it's there on sid |
| 09:36.24 | rca | [Juventino]: do you have udev? udev should take care of that, normally |
| 09:36.34 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 09:36.38 | slxix | utrrrongeeb: install reportbug or read http://www.debian.org/Bugs/Reporting for e-mail instructions :) |
| 09:36.42 | *** join/#debian dan_nrw (n=chatzill@p578b7a95.dip0.t-ipconnect.de) |
| 09:36.53 | [Juventino] | rca, i do have udev yes, but to be honest i don't know the exact parameters to do so.. |
| 09:37.12 | *** join/#debian tenzind (n=VBoi@dns.moic.gov.bt) |
| 09:38.05 | *** join/#debian marenz_ (n=anonym00@pD9EEF81C.dip.t-dialin.net) |
| 09:38.31 | *** join/#debian Suprano (i=suprano@pD95675DB.dip.t-dialin.net) |
| 09:38.50 | rca | [Juventino]: it works mostly based on rules: http://www.kernel.org/pub/linux/utils/kernel/hotplug/udev.html |
| 09:39.41 | rca | [Juventino]: also http://wiki.debian.org/udev |
| 09:39.42 | *** join/#debian clemyeats (n=clemyeat@sealip01.ericsson.net) |
| 09:39.53 | slxix | Orion_X11: http://gentoo-wiki.com/HOWTO_Create_a_DOS_boot_disk |
| 09:40.15 | [Juventino] | rca, checking :) thnx |
| 09:40.33 | slxix | Orion_X11: i suspect you'll want to run that utility that the manufacturer provides. |
| 09:41.05 | *** join/#debian skandaleras (n=luiz@84.77.148.177) |
| 09:41.25 | rca | somehow a sarge upgrade on one of our servers broke umlaut support in the console. it just issues something like pgup when i press ü (swiss-german layout) |
| 09:41.26 | *** join/#debian mbroeker (n=mbroeker@BAF8d42.baf.pppool.de) |
| 09:41.31 | Orion_X11 | slxix: I think so. I will try to run from a Windows computer friend |
| 09:42.00 | *** mode/#debian [+l 824] by debhelper |
| 09:42.04 | slxix | Orion_X11: if you have a floppy disk, then you can do it all from your computer. not difficult. :) |
| 09:42.06 | *** join/#debian XSoul (n=XRule@tooms.ddns.cablebg.net) |
| 09:42.54 | Orion_X11 | slxix: I will try. Many thx :-) |
| 09:44.31 | *** join/#debian binseer (n=binseer@121.247.149.5) |
| 09:44.33 | slxix | Orion_X11: just ask if you have any questions about the instructions. |
| 09:44.38 | utrrrongeeb | slxix: Okay, thanks! It might not do the same thing--I'll give it some swap next time--but I'll see about it... Is there something about logging priority that should be set? |
| 09:44.53 | Orion_X11 | slxix: Ok. I will |
| 09:45.17 | *** join/#debian Havis (n=Havis@adsl-dyn58.91-127-24.t-com.sk) |
| 09:46.02 | rca | even when copy/pasting text that has an umlaut in it, the console freaks out and seems to receive odd events |
| 09:46.26 | *** join/#debian reZo (n=reZo@203-184-20-243.jetbuster.co.nz) |
| 09:47.27 | flokuehn | und vor allem |
| 09:47.38 | flokuehn | auf dem support.globalways.net |
| 09:47.55 | flokuehn | sorry |
| 09:49.06 | *** join/#debian haxi (n=home_deb@73.171.68-86.rev.gaoland.net) |
| 09:49.31 | *** join/#debian Pusselgenerator (n=Pusselge@h-143-173.A213.cust.bahnhof.se) |
| 09:50.11 | *** join/#debian alphad (n=alphad@196.201.88.180) |
| 09:50.19 | slxix | utrrrongeeb: i don't have an answer to that, but i did find out about a directory: /var/log/installer/ that might have some clues.. |
| 09:51.06 | loca|host | Supaplex, thanks for information |
| 09:51.27 | *** join/#debian fluxdude (n=fluxdude@mail.phgroup.com) |
| 09:51.44 | *** join/#debian oshiii-_^ (n=oshiii@unaffiliated/oshiii/x-3278) |
| 09:51.54 | utrrrongeeb | slxix: Okay, thanks! I'll see about getting it done sometime this week... |
| 09:52.29 | slxix | your existing /var/log/installer/ might have a clue as to why grub didn't run... |
| 09:54.40 | utrrrongeeb | slxix: Okay, I'll look at it... |
| 09:54.50 | loca|host | is it possible to burn ia64 iso image from my x86 system ? |
| 09:55.04 | *** join/#debian bluesceada_ (n=itsjustm@unaffiliated/bluesceada) |
| 09:55.08 | *** join/#debian disf1 (i=dudewtf@79.126.132.6) |
| 09:55.25 | disf1 | How do I get pppoe-setup script on a debian live cd? ( I downloaded rp-pppoe.deb and installed, but I cant find pppoe-setup) |
| 09:55.30 | slxix | utrrrongeeb: you have the logs. you can submit those. |
| 09:55.47 | utrrrongeeb | slxix: With a bug report? |
| 09:55.48 | *** join/#debian Givvade (n=Givvade@dslc-082-082-094-060.pools.arcor-ip.net) |
| 09:56.46 | *** join/#debian tolecnal_ (n=tolecnal@215.80-203-134.nextgentel.com) |
| 09:57.09 | *** join/#debian Maerz (i=suprano@pD95675DB.dip.t-dialin.net) |
| 09:57.44 | slxix | utrrrongeeb: yes. i'm sure that whoever looks at the report will know what caused it. the logs are very detailed. |
| 09:57.55 | *** part/#debian cxhan (n=chatzill@218.104.71.166) |
| 09:58.21 | *** part/#debian clusty (n=vlazar@BAF3fb5.baf.pppool.de) |
| 09:59.56 | *** join/#debian DawnLight (n=dawn@62.56.253.195) |
| 10:00.05 | utrrrongeeb | slxix: How do I report it with the log so that someone doesn't mind having to pore over it? |
| 10:00.52 | slxix | hm.. you could look at other similar bug reports? :) |
| 10:01.05 | *** join/#debian Maliuta (n=nikolai@kiev.lusan.id.au) |
| 10:01.49 | slxix | i'll look at them if you send them to me. |
| 10:02.00 | *** mode/#debian [+l 817] by debhelper |
| 10:02.22 | *** join/#debian MoDaX (n=nth@84.240.22.131) |
| 10:02.26 | *** join/#debian vraa_ (n=vraa@h203.180.213.151.ip.alltel.net) |
| 10:02.28 | *** join/#debian binseer (n=binseer@121.247.149.5) |
| 10:02.33 | utrrrongeeb | slxix: Okay. Mind if I send them tomorrow? |
| 10:02.40 | *** join/#debian justin008 (n=justin@123.201.129.67) |
| 10:03.19 | slxix | i don't. i can't promise i'll be here. (..but if history is any indication of the future..) |
| 10:03.49 | utrrrongeeb | slxix: Okay, thanks for the help! Time I left the channel, though... |
| 10:04.01 | slxix | ok. see you. :) |
| 10:04.45 | *** join/#debian rewired (i=rewired@eclipse.sh3lls.net) |
| 10:05.15 | *** join/#debian Laris (n=Laris@194.108-244-81.adsl-dyn.isp.belgacom.be) |
| 10:05.40 | *** join/#debian xenonex (n=xenonex@89.218.236.221) |
| 10:05.40 | *** join/#debian vraa (n=vraa@h203.180.213.151.ip.alltel.net) |
| 10:05.51 | *** part/#debian utrrrongeeb (n=mhciipec@blk-138-1-101.eastlink.ca) |
| 10:07.10 | jelly | Is there a way to see how many files are in a directory without enumerating them? I have a rather large directory and it would take hours to do a find or similar |
| 10:07.33 | *** join/#debian tequiled (i=dudewtf@79.126.128.139) |
| 10:08.09 | *** join/#debian l403 (n=l403@85.132.176.252) |
| 10:09.08 | *** join/#debian subir (n=subir@202.79.37.177) |
| 10:09.14 | *** join/#debian Dr0per_^ (n=david@LMontsouris-152-62-10-99.w80-13.abo.wanadoo.fr) |
| 10:09.31 | the-dude | doe you need to know exact? |
| 10:09.40 | the-dude | ls -lR|wc-l give a nice indication |
| 10:10.00 | *** join/#debian bfremo1 (n=ben@lns-bzn-33-82-252-45-56.adsl.proxad.net) |
| 10:10.37 | l403 | hi. my window manager got slow when starting new windows. how can i investigate what is causing it? |
| 10:11.26 | liable | check top for cpu usage and ram |
| 10:11.49 | slxix | what do you mean starting new windows? |
| 10:12.15 | Kamping_Kaiser | jelly, echo * ? |
| 10:13.17 | l403 | when i open terminal window for example. it takes maybe 20 seconds to appear. cpu is at 100% and HDD is quiet |
| 10:14.29 | l403 | i just powered up so the swap is clean,.. |
| 10:14.30 | slxix | jelly: http://www.computerhope.com/issues/ch000756.htm |
| 10:15.47 | jelly | Kamping_Kaiser: echo * is exactly what I'm trying to avoid. * makes shell look up all the entries |
| 10:16.18 | Kamping_Kaiser | jelly, ah right |
| 10:16.18 | jelly | slxix: same thing ;-) |
| 10:16.30 | *** join/#debian AcTiVaTe (n=activate@d594eeda.static.dsl.concepts.nl) |
| 10:17.02 | slxix | does tree enumerate, too? :) |
| 10:17.10 | l403 | now i clicked the link, cpu went up and hdd to for 2 secs. then they both idled for about 10sec, then it started again an Opera appeared |
| 10:17.41 | jelly | slxix: enumerate = look up every entry. |
| 10:18.12 | slxix | right. but i've never used tree. was hopeful. :) |
| 10:18.45 | *** join/#debian lukketto (n=user@host54-154-dynamic.10-87-r.retail.telecomitalia.it) |
| 10:19.10 | *** join/#debian chaataka (n=chaataka@77-85-190-223.btc-net.bg) |
| 10:20.00 | *** join/#debian ribasushi (n=rabbit@dslb-088-076-049-231.pools.arcor-ip.net) |
| 10:20.38 | ribasushi | in aptitude is there a way to search for packages which are NOT auto-installed because of a dependency |
| 10:21.46 | Trewas | jelly: size of the directory inode gives some slight indication how many files there is, and number of subdirectories is seen from how many links there is (stat /some/directory)... but otherwise I don't think you can count the files without counting them :) |
| 10:21.47 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 10:22.18 | ribasushi | jelly: you can look at the refcount |
| 10:22.33 | ribasushi | jelly: it will not be precise (additional dire entries, hard links, etc) but will be close |
| 10:22.34 | jelly | Trewas: I don't want to count the files in drwxr-xr-x 2 pmx pmx4 196780032 May 9 08:47 cur |
| 10:22.48 | *** part/#debian lukketto (n=user@host54-154-dynamic.10-87-r.retail.telecomitalia.it) |
| 10:22.49 | Trewas | ouch, seems bad :) |
| 10:23.22 | *** join/#debian honkytonk (n=honkyton@193.15.99.76) |
| 10:23.24 | jelly | it's 6 months worth of spam in a single file per message format |
| 10:23.32 | *** join/#debian tyzh (n=firedrak@218.193.14.64) |
| 10:23.47 | idimmu | mmmmm Maildir |
| 10:24.18 | *** part/#debian tyzh (n=firedrak@218.193.14.64) |
| 10:24.58 | *** join/#debian margiolas (i=chris@client-9-27.wifi.uoc.gr) |
| 10:24.59 | slxix | count it? you should just sacrifice the hard drive to the spam protection gods. |
| 10:25.09 | honkytonk | I am building sort of an embedded system and I've compiled everything a need into my kernel. I don't even have a /etc/modules file and there for I wonder if I can remove the /lib/modules directory or can these modules be loaded somewhere even though I have an /etc/modules file? |
| 10:25.18 | slxix | good fortune will result. :) |
| 10:25.51 | honkytonk | Maybe be modules are being loaded on demand which I cant easily see? |
| 10:26.00 | *** join/#debian frog__ (n=frog@p4FD48254.dip0.t-ipconnect.de) |
| 10:26.10 | idimmu | dude |
| 10:26.18 | idimmu | just dont compile your kernel with module support |
| 10:26.19 | idimmu | problem solved |
| 10:26.37 | honkytonk | idimmu: True..and hope it boots :) |
| 10:26.41 | *** join/#debian MrNaz (n=MrNaz@125.27.22.72.adsl.dynamic.totbb.net) |
| 10:26.46 | idimmu | rescue disks dude :) |
| 10:26.57 | *** join/#debian DirtyDawg (i=DirtyDaw@92-233-244-82.cable.ubr05.benw.blueyonder.co.uk) |
| 10:27.03 | *** join/#debian dante_2core (n=dante@80-219-138-141.dclient.hispeed.ch) |
| 10:27.44 | honkytonk | idimmu: he he its ok I just build it onto a disk on module anyway :) thanks |
| 10:29.47 | *** join/#debian Coma (n=john@82-70-119-241.dsl.in-addr.zen.co.uk) |
| 10:30.37 | *** join/#debian loca|host (n=tux@41.226.7.51) |
| 10:30.38 | *** join/#debian chuckkh (n=Chuckk_H@83-143-33-10.netglobe.ro) |
| 10:31.46 | chuckkh | I'm having trouble connecting to certain wifi spots under Linux, and I only want to run apt-get dist-upgrade; is it possible to automatically download the needed files under Windows and install them offline in Debian? |
| 10:32.21 | *** join/#debian binseer (n=binseer@121.247.149.5) |
| 10:32.28 | *** join/#debian si0ux (n=si0ux@201-048-208-161.static.ctbctelecom.com.br) |
| 10:33.16 | *** join/#debian greenmanwitch (n=greenman@c122-107-108-225.blktn5.nsw.optusnet.com.au) |
| 10:33.28 | greenmanwitch | How do I modify the message I recieve when I log in? |
| 10:34.03 | sep | greenmanwitch, /etc/motd |
| 10:34.09 | greenmanwitch | thanks :) |
| 10:34.24 | chuckkh | I'm thinking I could list the packages that are ready to update into a text file |
| 10:34.25 | sep | also /etc/motd.tail |
| 10:34.32 | greenmanwitch | ok |
| 10:34.37 | *** join/#debian binseer (n=binseer@121.247.149.5) |
| 10:35.07 | *** join/#debian Guerin (n=lewis@121-73-1-241.cable.telstraclear.net) |
| 10:35.36 | greenmanwitch | sep: I'm confused.. why are there two? |
| 10:35.42 | greenmanwitch | sep: which one do I edit? :S |
| 10:36.29 | sep | look at your login message and decide for yourself |
| 10:36.36 | chuckkh | ok I found me a guide to doing it with wget |
| 10:38.12 | sep | greenmanwitch, you want to edit the .tail one |
| 10:39.26 | sep | otherways it might be overwritten again |
| 10:40.33 | *** join/#debian omry_|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 10:40.47 | *** join/#debian smoser (n=smoser@d14-69-66-169.try.wideopenwest.com) |
| 10:41.54 | *** join/#debian Tiffon (n=name@unaffiliated/tiff0n) |
| 10:42.00 | *** mode/#debian [+l 826] by debhelper |
| 10:42.34 | omry_|work | dist-upgraded testing, libssl0.9.8 gets stuck: Checking for services that may need to be restarted...done <NEWLINE> Checking init scripts.. <no more output for minutes> |
| 10:43.02 | *** join/#debian Cobra^^ (n=aa@U96da.u.pppool.de) |
| 10:43.10 | omry_|work | someone already opened a bug for it |
| 10:43.11 | *** join/#debian salvin (n=salvin@host-84-221-49-146.cust-adsl.tiscali.it) |
| 10:43.18 | omry_|work | any idea for a workaround? |
| 10:43.38 | Guerin | omry_|work: fix the script in question |
| 10:43.47 | *** join/#debian kibibyte (n=bartosz@chello089079209223.chello.pl) |
| 10:43.49 | kibibyte | hi |
| 10:43.53 | kibibyte | i hae question |
| 10:44.12 | omry_|work | Guerin, how do I find which script? |
| 10:44.16 | kibibyte | my laptop doesnt hibernate when battery is fully discharged |
| 10:44.31 | kibibyte | hibernate-ram command works when execute it |
| 10:44.47 | kibibyte | but acpi does not hibernate it when battery is low |
| 10:44.51 | kibibyte | how to fix it |
| 10:45.18 | Guerin | omry_|work: i bet the dpkg output tells you which script it is. They live in /var/lib/dpkg/info and is called libssl.something. run it with sh -x and see where it stops; then fix those lines (or ask someone in here or in #bash) |
| 10:45.37 | Guerin | kibibyte: configure powersaved correctly |
| 10:45.49 | kibibyte | Guerin, how? |
| 10:46.17 | l403 | it seems that x.org halts for few seconds while loading a new window. how can i fix that? |
| 10:46.19 | Guerin | kibibyte: since you've given us no idea of what is wrong, I can't tell you. I suggest you read the documentation. |
| 10:46.24 | kibibyte | Guerin, is it some package? |
| 10:46.35 | kibibyte | i have laptop_modepackage |
| 10:46.43 | Guerin | kibibyte: yes. if you don't have it installed, install it. |
| 10:47.20 | *** join/#debian Biolunar (i=mahdi@blfd-4db5a241.pool.einsundeins.de) |
| 10:47.22 | kibibyte | Guerin, and laptop_mode package is not nesccesary? |
| 10:47.27 | *** join/#debian gatestone (n=app@wlan.telis.fi) |
| 10:47.31 | *** part/#debian greenmanwitch (n=greenman@c122-107-108-225.blktn5.nsw.optusnet.com.au) |
| 10:47.43 | Guerin | kibibyte: dunno. Never used it. |
| 10:47.53 | *** join/#debian xenonex (n=xenonex@89.218.236.221) |
| 10:50.29 | *** join/#debian eth0 (n=rewt@jericho.nl) |
| 10:52.37 | *** join/#debian Hoxzer (n=dsadsad@dsl-hkigw7-fe1df900-39.dhcp.inet.fi) |
| 10:53.15 | *** join/#debian themill (n=stuart@86.53.48.59) |
| 10:54.14 | sChaaa | hola |
| 10:56.54 | *** join/#debian spikerman (n=dbjwq@58.39.80.167) |
| 10:56.55 | *** join/#debian LordLamer (n=lordlame@venus.universe.linuxdelta.de) |
| 10:57.53 | omry_|work | Guerin, I am puzzled by this if statement in the script : if [ ! -z "$2" ]; when does this evaluate to true? |
| 10:58.11 | omry_|work | the script wont get to the part where it actually gets stuck. |
| 11:00.08 | *** join/#debian frog_ (n=frog@p4FD48061.dip0.t-ipconnect.de) |
| 11:00.31 | loca|host | i have a problem booting ia64 debian cd, i have this message at boot: elilo.c(line 71): Kernel file not found Linux |
| 11:00.41 | loca|host | any one can help ? |
| 11:01.54 | Trewas | loca|host: do you actually have itanium processor? |
| 11:01.57 | themill | loca|host: what sort of machine are you using? |
| 11:02.14 | loca|host | hp itanium2 |
| 11:03.12 | Trewas | that must be the first time someone is actually asking about ia64 with actual itanium processor :) |
| 11:03.37 | rca | it's the one they forgot to ship to the landfill |
| 11:03.51 | rca | don't worry, they'll have the helicopters on it soon, now that they have his IP |
| 11:04.02 | loca|host | :) |
| 11:04.14 | *** join/#debian RaceCondition (n=RaceCond@217-159-200-30-cn.lse.estpak.ee) |
| 11:04.46 | *** join/#debian babar_ (n=babar@AToulouse-257-1-152-120.w90-5.abo.wanadoo.fr) |
| 11:04.49 | kibibyte | Guerin, this powersave doesnt work |
| 11:04.51 | babar_ | hi all |
| 11:04.59 | kibibyte | im closing the lid and nothing happen |
| 11:05.01 | catsup | pls don't joke about the helicopters |
| 11:05.06 | catsup | they're trying to kill me :( |
| 11:05.14 | Guerin | kibibyte: it's because you didn't fucking configure it properly |
| 11:05.21 | Guerin | omry_|work: ask #bash |
| 11:05.43 | rca | catsup: live underground! lots of sewers aren't really used for anything these days |
| 11:06.22 | kibibyte | haha |
| 11:06.26 | kibibyte | i did |
| 11:06.43 | catsup | omry_|work: use -n "$2", it evaluates true when $2 contains one or more characters |
| 11:06.46 | kibibyte | i did fucking configure it fuckin propery fuck |
| 11:06.50 | Guerin | apparently not well enough] |
| 11:07.04 | *** join/#debian Super_Cat_Frog (n=bob@87-194-183-38.bethere.co.uk) |
| 11:07.08 | catsup | while -z "$2" evaluates true when it contains zero chars |
| 11:07.13 | kibibyte | im trying to fuckingure it |
| 11:07.19 | *** join/#debian jayaraj (n=jayaraj@121.247.149.5) |
| 11:07.38 | Super_Cat_Frog | hi - we have a few users that have write access to a web tree, but when one does 'svn up', it fudges the permissions so nobody else can then write, and ideas? |
| 11:07.41 | catsup | haha (well enough) |
| 11:07.44 | tarzeau | !qotd0 |
| 11:07.44 | dpkg | rumour has it, qotd152 is <jair_11> guys a secure and good ftp client for linux? | <jair_11> yes with gui |
| 11:08.03 | babar_ | 'lut |
| 11:08.09 | babar_ | oups |
| 11:08.29 | loca|host | so i have an extra terrestre's problem ? maybe from itanium planet :) |
| 11:08.32 | *** join/#debian Muchikon (n=chatzill@201.240.119.69) |
| 11:08.39 | catsup | secure ftp client? impossible |
| 11:08.56 | *** join/#debian debber1 (n=gilbert@69.196.5.28) |
| 11:10.29 | Guerin | any ftp client is secure when tunnelled over ssh |
| 11:10.29 | *** join/#debian microtux (n=microtux@196.203.53.57) |
| 11:10.43 | microtux | hi |
| 11:10.48 | *** join/#debian msshams (n=msshams@91.184.75.47) |
| 11:11.06 | msshams | i install libapache2-mod-perl2. but i cant run .pl pages from web? why? |
| 11:11.18 | Guerin | because you didn't fucking set it up right |
| 11:11.24 | microtux | i want to install a tftp server on my debian box, everything seems to be OK; but i can't load an image via tftp; any help ? |
| 11:11.28 | Guerin | ask kibibyte what I mean by that |
| 11:12.01 | *** mode/#debian [+l 832] by debhelper |
| 11:12.46 | *** join/#debian mib_9wt2hhd5 (i=dd02a40f@gateway/web/ajax/mibbit.com/x-bb6cd6183bc5cac3) |
| 11:13.50 | msshams | Guerin: can you fucking help me? |
| 11:14.02 | debber1 | hi does anyone know where I can get php5-mysqli package? after apt-get upgrade our drupal sites broke and it seems like it was due to a change in php5-mysql I'm not sure but the drupal people suggested that we change from mysqli to mysql in our settings.php file and it's working again. I don't know if mysqli is better than mysql for php, so anyone's opinion would be interesting |
| 11:14.12 | debber1 | oops forgot to mention we are on etch |
| 11:14.38 | Guerin | msshams: not without a cogent explanation of what actually happens, or doesn't, and a preliminary hypothesis as to why. |
| 11:15.01 | Guerin | msshams: as in, you have to do some of it yourself before we care. |
| 11:15.14 | *** join/#debian zyx386 (n=tony@unaffiliated/zyx386) |
| 11:15.26 | msshams | :D |
| 11:15.45 | *** join/#debian SlackDeb (n=fperetti@201.254.116.158) |
| 11:15.46 | themill | debber1: mysqli is in the same package as mysql support for php5. See the package description for php5-mysql |
| 11:16.03 | Guerin | I'm off to sleep now, but there are others in here with the skills to aid you. Also try #apache if you can't make sense of the logs. |
| 11:16.17 | debber1 | themill: thanks that was easy |
| 11:16.17 | *** part/#debian msshams (n=msshams@91.184.75.47) |
| 11:16.25 | themill | debber1: indeed! |
| 11:16.37 | kibibyte | Guerin, im still trying to fucking configure it |
| 11:16.52 | Guerin | kibibyte: there is no try. Do, or do not. |
| 11:17.07 | *** join/#debian xbaez (n=xbaez@201.151.41.82) |
| 11:17.37 | debber1 | themill: any idea why we needed to change the settings from mysqli to mysql if it's the same package |
| 11:17.39 | loca|host | guys it's done, Trewas just going through boot manger's shell and type elilo |
| 11:18.10 | *** join/#debian kilah (n=kilah@92.82.55.110) |
| 11:19.04 | themill | debber1: mysqli and mysql use different php calls to connect to the database. I can't really see one working if the other doesn't unless the drupal code is even worse than it is reputed to be... |
| 11:20.18 | *** part/#debian slxix (n=randy@p2083-ipbf216hodogaya.kanagawa.ocn.ne.jp) |
| 11:21.33 | debber1 | themill: thanks again have a good one |
| 11:21.46 | *** join/#debian MrNaz (n=MrNaz@222.123.194.104) |
| 11:22.02 | *** join/#debian GiabboO (n=GiabboO@217-133-169-10.b2b.tiscali.it) |
| 11:22.04 | GiabboO | hi ppl |
| 11:22.12 | GiabboO | i have a problem with maildrop |
| 11:22.27 | GiabboO | basically i dont find the way to use maildrop + mysql to search users |
| 11:23.57 | omry_|work | Guerin, looks like the script halts on : "db_go || true" |
| 11:24.03 | *** join/#debian keitherz (n=keitherz@122.53.174.71) |
| 11:24.24 | omry_|work | but I don't have db_go binary |
| 11:26.59 | liable | db_go sounds likea debconf function |
| 11:27.12 | omry_|work | great.. |
| 11:27.23 | omry_|work | how do I debug it? :) |
| 11:27.48 | *** join/#debian alphad (n=alphad@196.201.88.180) |
| 11:27.51 | *** join/#debian suki (i=1001@cm2.sigma7.maxonline.com.sg) |
| 11:28.06 | liable | no idea, not even sure it is, and if it is, its perl *shudder* |
| 11:28.28 | liable | there is a perl transition thats going through thats causing a few problems i think |
| 11:28.31 | omry_|work | excellent. |
| 11:28.40 | Tapout | anyone have a debian network tuning guide ? |
| 11:28.43 | omry_|work | okay, I`ll let it rest. but I`ll add my finding to the ticket. |
| 11:28.46 | *** join/#debian Deet1 (n=pdi@mail.forcefive.de) |
| 11:28.47 | Tapout | ??tuning network |
| 11:28.50 | suki | hi, i am trying to create raid using mdadm, i keep getting this error mdadm: cannot open /dev/sda2: device or resource busy |
| 11:29.14 | GiabboO | mounted ? |
| 11:30.24 | suki | hmm, that is where debian is running from, so its mounted.. |
| 11:30.56 | suki | i have 4 hdds, how do i get them working with raid 10 :) |
| 11:31.00 | *** join/#debian microtux (n=microtux@196.203.53.57) |
| 11:31.00 | *** join/#debian sandman (n=s@CPE-24-208-55-92.new.res.rr.com) |
| 11:34.52 | *** join/#debian o2T7 (n=wepssain@167.Red-80-39-94.staticIP.rima-tde.net) |
| 11:35.12 | *** join/#debian atomiku (n=atomiku@cpc3-ipsw1-0-0-cust5.colc.cable.ntl.com) |
| 11:39.49 | *** join/#debian S1ackDeb (n=fperetti@201.254.118.95) |
| 11:39.50 | *** join/#debian abrotman (n=abrotman@ip67-93-222-40.z222-93-67.customer.algx.net) |
| 11:41.51 | *** join/#debian mypapit (n=mypapit@pdpc/supporter/active/mypapit) |
| 11:42.15 | microtux | i need help on installing tftp server on debian |
| 11:42.28 | microtux | the server is installed; but i could not run it |
| 11:42.31 | abrotman | installing or using? |
| 11:42.42 | microtux | abrotman, hi |
| 11:42.49 | microtux | abrotman, using :p |
| 11:43.01 | keitherz | hmmm |
| 11:43.21 | *** part/#debian debber1 (n=gilbert@69.196.5.28) |
| 11:43.21 | *** join/#debian xenonex3 (n=xenonex@89.218.236.221) |
| 11:43.22 | keitherz | its on the startup scripts |
| 11:43.24 | keitherz | the daemon |
| 11:44.31 | microtux | i added it to the /etc/inetd.conf file |
| 11:44.47 | microtux | tftp dgram udp wait nobody /usr/sbin/tcpd /usr/sbin/in.tftpd /srv/tftp |
| 11:44.52 | *** join/#debian daya (n=daya@202.79.37.177) |
| 11:44.54 | microtux | is it right ? |
| 11:45.00 | abrotman | i had better luck with the atftpd or whatever it is |
| 11:45.01 | *** join/#debian foka (n=foka@61.149.171.148) |
| 11:45.06 | *** join/#debian dsfhdfh (n=dfhsfdh@ppp-245-219.33-151.iol.it) |
| 11:45.06 | *** join/#debian xored (n=gasdasdf@78.42.51.193) |
| 11:45.07 | abrotman | but that was on like .. woody |
| 11:45.48 | abrotman | maybe sarge |
| 11:46.06 | microtux | i'm on etch |
| 11:46.14 | microtux | using etch |
| 11:46.25 | *** join/#debian Micha_Btz (n=profbunn@cable-82-119-4-79.cust.blue-cable.de) |
| 11:46.53 | *** join/#debian hfdhdf (n=sok@bzq-84-108-125-252.cablep.bezeqint.net) |
| 11:47.09 | Micha_Btz | hi all, |
| 11:47.11 | *** join/#debian abdoreza (n=a@85.9.74.184) |
| 11:47.27 | abdoreza | Hi all |
| 11:47.43 | microtux | so ? any help ? |
| 11:48.28 | petemc | microtux: did the debian package not provide a means for you to start and stop the deamon? |
| 11:48.31 | Micha_Btz | i have crypted my home partition, which i mount with libpam-mount while the login. |
| 11:49.07 | microtux | no |
| 11:49.17 | abdoreza | what is channel debian etch??? |
| 11:49.18 | suki | is there any good advice/article on how to install debian with raid? mdadm |
| 11:49.19 | Micha_Btz | can i also bind the tmp directory with libpam-mount? |
| 11:49.40 | Micha_Btz | /home/.tmp /tmp none bind,auto 0 0 |
| 11:50.00 | *** join/#debian gkiagia (n=gkiagia@147.52.24.53) |
| 11:50.15 | Micha_Btz | but the problem is, home ist not mounted with fstab try to mount /home/.tmp |
| 11:50.44 | *** join/#debian hfdhdf (n=sok@78.90.86.76) |
| 11:50.52 | jelly | abdoreza: this is the channel for etch |
| 11:51.08 | *** join/#debian hfdhdf (n=sok@78.90.86.76) |
| 11:51.11 | abrotman | !tr |
| 11:51.11 | dpkg | extra, extra, read all about it, tr is türkçe yardIm için #debian.tr (irc.freenode.net): -- if you need help in turkish, please join #debian.tr on irc.freenode.net, or http://homepages.nildram.co.uk/~rakewell/z88/keyboards/turkish.jpg |
| 11:51.36 | *** join/#debian Fox_1_ (n=Vardan@91.103.31.146) |
| 11:51.38 | abrotman | microtux: like i said .. there's more than one tftpd .. i had better luck with the atftpd or something like that |
| 11:51.45 | Fox_1_ | hi all |
| 11:52.06 | abdoreza | ohh jelly thanks:D |
| 11:52.26 | microtux | abrotman, thank s ;) |
| 11:52.47 | abdoreza | Fox_1_: hi |
| 11:52.52 | Fox_1_ | people how can I know does string contain some substring in bash? |
| 11:53.20 | *** join/#debian sdfhdfh (n=dsdg@82.77.253.223) |
| 11:53.24 | Fox_1_ | for example I want to know does filename contain ".svn" |
| 11:53.57 | themill | Fox_1_: http://wooledge.org:8000/BashFAQ#head-9b64351040672683bb76d9c8de0e08473ad98275 |
| 11:54.49 | *** join/#debian edico (i=fenrir@unaffiliated/edico) |
| 11:55.10 | *** join/#debian gsdgdg (n=gds@85.137.228.115.dyn.user.ono.com) |
| 11:55.49 | abrotman | gives staff a beer |
| 11:56.05 | *** join/#debian Rprp (n=Rprp@cc763024-b.groni1.gr.home.nl) |
| 11:57.26 | *** join/#debian fdh (n=hfdhf@83.230.239.49) |
| 11:57.54 | *** join/#debian dirk_ (n=dirk@cc955125-a.groni1.gr.home.nl) |
| 11:58.39 | *** join/#debian omry_|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 12:01.17 | *** part/#debian abdoreza (n=a@85.9.74.184) |
| 12:01.38 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 12:03.35 | *** join/#debian tip_1 (n=kansu@88.229.118.199) |
| 12:04.14 | jberg | hey. apt-get says it cant find build-essential. i've looked at sources-list and it looks like its using the internet instead of cd so i dont know whats wrong |
| 12:04.27 | abrotman | jberg: paste your sources.list somewhere |
| 12:04.40 | *** join/#debian Caoimhin (n=Caoimhin@ANantes-256-1-167-147.w90-25.abo.wanadoo.fr) |
| 12:04.41 | *** join/#debian Conzariev (n=Caoimhin@ANantes-256-1-167-147.w90-25.abo.wanadoo.fr) |
| 12:04.41 | *** join/#debian Kdecherf (n=Caoimhin@ANantes-256-1-167-147.w90-25.abo.wanadoo.fr) |
| 12:04.43 | jberg | hm ok wait a minute |
| 12:04.55 | *** join/#debian penguim (n=penguim@ubuntu/member/linuxba) |
| 12:04.57 | liable | or just comment the cd line |
| 12:07.55 | *** join/#debian XTZGZoReX (i=xtzgzore@0x3e42c894.adsl.cybercity.dk) |
| 12:08.36 | jberg | liable: http://rafb.net/p/WDp0eP40.html |
| 12:08.41 | jberg | this is ubuntu btw |
| 12:08.45 | jberg | but they didnt answer |
| 12:09.08 | *** join/#debian Fadoski (n=fadoski@dsl-mlibrasgw2-fe1ade00-98.dhcp.inet.fi) |
| 12:09.22 | themill | jberg: this is not the right place to ask |
| 12:09.24 | liable | !topicsmite jberg |
| 12:09.24 | dpkg | And the wrath of /TOPIC descended with terrible fury upon jberg. And all the people marveled, saying, Behold, we too should read the /TOPIC, lest we be stricken. And all the people read the /TOPIC, and went away edified. |
| 12:09.41 | jberg | hmm |
| 12:09.48 | *** join/#debian K_Dallas (i=Korben@i209-195-93-68.cia.com) |
| 12:09.48 | jberg | oh right |
| 12:09.50 | jberg | sorry |
| 12:10.25 | jberg | but it didnt install firmware for my wireless network card. and it doesnt build the firmware i downloaded. so i think i need build-essential but it cant get that either |
| 12:10.28 | jberg | sucks :( |
| 12:10.33 | abrotman | jberg: this is #debian .. ask #ubuntu |
| 12:10.41 | jberg | i have :( |
| 12:10.45 | liable | you dont build firmware |
| 12:10.56 | abrotman | your options are to install Debian or ask ##liux/#ubuntu .. we cannot help you |
| 12:11.17 | abrotman | erm .. ##linux |
| 12:11.32 | abrotman | ##liux is a distro for large cats |
| 12:11.34 | jberg | does debian have drivers for laptop wireless network cards in the install? |
| 12:11.40 | abrotman | depends on the card |
| 12:11.51 | jberg | hm |
| 12:11.57 | abrotman | if it requires firmware, no |
| 12:14.30 | *** join/#debian sander_m (n=sander@atwork-242.r-212.178.96.atwork.nl) |
| 12:14.38 | *** join/#debian erikja (n=erikja@0x57314066.abnxx10.adsl-dhcp.tele.dk) |
| 12:14.53 | liable | jeez, they pack some sources in |
| 12:15.50 | abrotman | liable: he's got like 12 of each source |
| 12:16.19 | sander_m | Hello. I upgraded my system from Etch to Lenny today. I'm pretty impressed so far. Very few problems. My main hurdle is that the Lightning plugin does not work on IceDove 2.0. I removed it and installed iceowl-extension through synaptic, but nothing shows up in icedove. Can anyone help me? |
| 12:17.19 | *** join/#debian bier (n=bier@p54A54C6C.dip.t-dialin.net) |
| 12:17.32 | *** join/#debian msshams (n=msshams@91.184.75.47) |
| 12:17.45 | *** join/#debian Deetz (n=pdi@mail.forcefive.de) |
| 12:17.49 | msshams | in crontab when this script is run? 0-59 * * * * sh /root/rescue |
| 12:18.09 | abrotman | every minute |
| 12:18.31 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 12:18.43 | abrotman | though * * * * * would be just as easy .. slightly different results IIRC .. but roughly the same |
| 12:18.44 | *** join/#debian smallGnome (n=Administ@bolt.funcom.com) |
| 12:18.47 | *** part/#debian smallGnome (n=Administ@bolt.funcom.com) |
| 12:19.56 | *** join/#debian Idilux (n=sss@dsl60b8219.sdtnet.de) |
| 12:20.01 | msshams | abrotman: and this: 0,59 * * * * sh /root/rescue |
| 12:20.02 | msshams | ? |
| 12:20.38 | abrotman | i just told you |
| 12:20.45 | abrotman | what is broken about it? |
| 12:20.47 | *** join/#debian extor (i=xtor@c-24-1-247-223.hsd1.il.comcast.net) |
| 12:21.46 | *** join/#debian alphad (n=alphad@196.201.88.180) |
| 12:21.55 | msshams | abrotman: i need this script run every 15 min. please help me |
| 12:22.24 | *** part/#debian Micha_Btz (n=profbunn@cable-82-119-4-79.cust.blue-cable.de) |
| 12:22.29 | *** part/#debian alphad (n=alphad@196.201.88.180) |
| 12:22.49 | *** join/#debian alphad (n=alphad@196.201.88.180) |
| 12:23.13 | abrotman | msshams: man 5 crontab |
| 12:23.21 | alturiak | msshams: for a general understand of crontab, try reading man 5 crontab, it's full of examples and easy to understand |
| 12:23.24 | alturiak | sheesh :( |
| 12:23.28 | *** join/#debian alphad (n=alphad@196.201.88.180) |
| 12:24.36 | *** join/#debian alphad (n=alphad@196.201.88.180) |
| 12:24.37 | *** join/#debian Freduardo (n=Freduard@208.87-200-80.adsl-dyn.isp.belgacom.be) |
| 12:25.03 | *** part/#debian msshams (n=msshams@91.184.75.47) |
| 12:25.39 | Sebboh | Hi. Is there a way to like, kexec() into a debian installer environment, or something? I want to wipe this box, but I'd have to put a support ticket in to get them to pop an installer CD in... |
| 12:25.55 | *** join/#debian RaceCondition (n=RaceCond@217-159-200-30-cn.lse.estpak.ee) |
| 12:26.00 | abrotman | debootstrap ? |
| 12:26.20 | *** join/#debian aleksanteri (n=cogwheel@dsl-sjkbrasgw2-fef8f800-254.dhcp.inet.fi) |
| 12:26.55 | *** join/#debian DareDevil (n=DareDevi@h69-129-38-38.plmomi.dedicated.static.tds.net) |
| 12:27.36 | Sebboh | Sweet. |
| 12:27.46 | *** join/#debian woden1 (n=woden@62.225.50.123) |
| 12:27.56 | *** join/#debian RA3OR (i=angel@80.97.89.33) |
| 12:28.22 | abrotman | !debootstrap |
| 12:28.22 | dpkg | debootstrap is, like, <caphuso> get the debootstrap source from http://packages.debian.org/debootstrap, compile it, read the man page, install debian with it </caphuso> Useful for installing in a <chroot>. http://people.debian.org/~walters/chroot.html, or see http://wiki.debian.org/Debootstrap, or key to Installing Debian GNU/Linux from a Unix/Linux System. See to the release specific Debian GNU/Linux Installation Guide for more details. |
| 12:28.49 | DawnLight | abrotman: hi. can you think of a use for a constant supply of free pentium II and III computers? |
| 12:28.50 | *** join/#debian deny[all] (n=pdiablo@unaffiliated/denyall/x-000001) |
| 12:28.57 | woden1 | I need some help getting my sound to work. Here is my lspc -v http://paste.debian.net/2822 and here is cat /proc/asound/cards http://paste.debian.net/2823 |
| 12:29.01 | *** join/#debian jakub (n=jkb@r3t210.net.upc.cz) |
| 12:29.34 | idimmu | DawnLight: art project? 'beowolf cluster'? folding@home? donate them to really poor people? |
| 12:29.39 | woden1 | How do I tell if I have the right sound driver loaded? And, if it's already loaded, then how do I get the sound to work (it's not working)? |
| 12:29.50 | mquin | Sebboh: another approach (assuming you have remote console access) is to lift the debian-installer kernel and initrd and add them to your grub configuration - you can then boot into the debian-installer without needing media loaded |
| 12:30.10 | *** join/#debian omry|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 12:31.01 | abrotman | DawnLight: i doubt you mean constant .. and you could donate them to organizations that send them to needy schools/countries |
| 12:31.17 | abrotman | DawnLight: you're in .il right? |
| 12:31.23 | DawnLight | right |
| 12:31.36 | *** join/#debian dv_ (n=dv@83-64-248-68.inzersdorf.xdsl-line.inode.at) |
| 12:31.59 | *** join/#debian ps|cot|co (n=pil@mail.arge.com.br) |
| 12:32.00 | *** mode/#debian [+l 839] by debhelper |
| 12:32.02 | abrotman | DawnLight: for example http://www.computeraid.org/index.htm (i know nothing about them) |
| 12:32.03 | Sebboh | mquin, oh, I like that much better. I'd have to do a two-step repartitioning scheme otherwise.. |
| 12:32.33 | abrotman | DawnLight: google "donate old computer" |
| 12:33.45 | *** join/#debian fvwmnet (n=sdfpme@116.18.176.175) |
| 12:33.51 | *** join/#debian slidesinger (n=slidesin@static-70-106-127-111.pskn.east.verizon.net) |
| 12:34.36 | *** join/#debian studio32 (n=dirk@cc955125-a.groni1.gr.home.nl) |
| 12:35.21 | *** join/#debian dutche (n=dutche@200.169.133.98) |
| 12:35.38 | *** join/#debian msshams (n=msshams@91.184.75.47) |
| 12:35.44 | msshams | i want run a script every hour only one time. is this true? 0 * * * * sh /root/ref-ip-ban.sh |
| 12:35.52 | abrotman | msshams: man 5 crontab |
| 12:36.10 | msshams | abrotman: please. i want to know is this true? |
| 12:36.15 | *** join/#debian bartc (n=bart@62.133.200.189) |
| 12:36.21 | Sebboh | Another question: is there anything wrong with using the latest snapshot d-i to install Stable? |
| 12:36.23 | abrotman | msshams: please. i want you to read |
| 12:36.37 | abrotman | Sebboh: you mean the one that is for testing ? |
| 12:37.11 | *** join/#debian brandom (i=repp@66.241.137.107) |
| 12:37.27 | msshams | abrotman: i read, but im hang |
| 12:37.35 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 12:37.41 | msshams | abrotman: please tell me |
| 12:37.50 | orveldv | msshams: where exactly ? |
| 12:38.19 | *** part/#debian msshams (n=msshams@91.184.75.47) |
| 12:38.24 | Sebboh | abrotman, yes. It has an option to set-- wait, maybe I'm remembering incorrectly. Doesn't the d-i offer you an option to set your apt-sources to stable and such? |
| 12:39.45 | *** join/#debian phrozen77 (n=phrozen7@unaffiliated/phrozen77) |
| 12:39.47 | *** join/#debian dv_ (n=dv@83-64-248-68.inzersdorf.xdsl-line.inode.at) |
| 12:40.54 | *** join/#debian maiquel (n=maiquel@prognus.com.br) |
| 12:41.57 | abrotman | Sebboh: you mean the business card i think |
| 12:42.01 | *** mode/#debian [+l 845] by debhelper |
| 12:43.25 | woden1 | I can't figure out why my sound is not working. I tried System --> Preferences --> Sound, and click the "Test" button but nothing happens. The volume applet says the volume is up. I just tried alsamixer and it says the volume is up. |
| 12:43.33 | *** join/#debian opoftheuniverse (n=mark@202.88.255.207) |
| 12:43.58 | abrotman | !alsa checklist |
| 12:43.58 | dpkg | 1) run alsaconf as root 2) add yourself to the 'audio' group (log out and log in again) 3) use alsamixer and unmute channels and raise levels (also try muting some channels) 4) arts or esound stopped? 5) OSS modules unloaded? 6) speakers on? 7) modprobe snd-pcm-oss 8) does "cat /dev/urandom > /dev/dsp" work for root? Test your sound with aplay and a wav so codec issues don't confuse the situation. |
| 12:44.10 | petemc | should the openssl thing be in the topic? |
| 12:45.03 | liable | which openssl thing? |
| 12:45.08 | petemc | http://lists.debian.org/debian-security-announce/2008/msg00152.html |
| 12:45.09 | petemc | that one |
| 12:45.37 | liable | heh, swith to mail client, and there it is.. |
| 12:45.47 | abrotman | petemc: to have them regen their keys? |
| 12:46.12 | liable | yikes |
| 12:46.21 | petemc | abrotman: aye |
| 12:46.40 | woden1 | abrotman: I read that alsaconf should not be needed anymore. |
| 12:46.49 | abrotman | okay |
| 12:46.59 | bartc | does anyone have some more information about the openssl advisory other than what's in the mail to debian-security-announce@? e.g. a related bug report. |
| 12:47.25 | stew | woden1: alsaconf was never needed as long as you are able to make suer the right sound module is loaded into the kernel |
| 12:47.26 | *** join/#debian mentor (n=matthew@0-3-d-34-ee-9.gr.esol.dur.ac.uk) |
| 12:48.00 | *** join/#debian Tofast4u (n=Tofast4u@212.74.233.46) |
| 12:48.28 | Sebboh | abrotman, huh? Well, yes, I always use the business cards. but, which of these two should I use to install Stable? debian-40r3-i386-businesscard.iso or debian-testing-i386-businesscard.iso ? I mean, I see the obvious answer.. but if it's possible to use the second one, I'd like to. Eh? |
| 12:48.35 | Idilux | has anone an idear. I am using hylafax. by sending it comes message Send and wait failure (modem on hook) an error is bei [9:AT+FTS=3D7\r] [5:ERORR] MODEM Command error |
| 12:48.58 | abrotman | Sebboh: try them both and see? :) |
| 12:49.05 | woden1 | stew: I read that in kernel 2.6 the sound chip should be automatically detected and setup by udev. |
| 12:49.34 | opoftheuniverse | does this look like issue with ram stick |
| 12:49.35 | stew | woden1: ok |
| 12:49.37 | opoftheuniverse | http://sial.org/pbot/31023 |
| 12:49.57 | abrotman | what looks wrong with that? |
| 12:50.01 | Sebboh | pauses to try and remember which CD he used to install stable on that one machine.. |
| 12:50.23 | opoftheuniverse | swap usage |
| 12:50.24 | opoftheuniverse | is there |
| 12:50.30 | abrotman | opoftheuniverse: it happens .. so what? |
| 12:50.34 | abrotman | !am i swapping |
| 12:50.34 | dpkg | run "vmstat 3" and ignore the first 3 lines, if the "so" column is not 0s all the time you are swapping |
| 12:50.43 | opoftheuniverse | but ram 1 gb is left |
| 12:51.03 | *** join/#debian eOliva (n=dutche@200.169.133.98) |
| 12:51.03 | opoftheuniverse | free |
| 12:51.04 | abrotman | opoftheuniverse: it doesn't mean there always 1GB free |
| 12:51.04 | woden1 | stew: check it out http://paste.debian.net/2828/ |
| 12:51.53 | stew | woden1: so what is the problem? |
| 12:51.55 | abrotman | opoftheuniverse: i could write a program(let's call it firefox for the sake of argument) that could use all your ram, and once closed, it would free a lot of used RAM, but there still might be stuff in swap after that happens |
| 12:52.29 | woden1 | stew: My sound is not working, and alsaconf says I shouldn't need to use it. |
| 12:52.37 | stew | woden1: which driver are you using? |
| 12:52.37 | opoftheuniverse | http://sial.org/pbot/31024 |
| 12:52.46 | abrotman | you're not swapping |
| 12:52.50 | *** join/#debian morficus_ (n=morficus@69.0.44.52) |
| 12:52.51 | woden1 | stew: HDA-Intel |
| 12:53.15 | opoftheuniverse | abrotman: how did you find that out? |
| 12:53.21 | woden1 | stew: http://paste.debian.net/2823 and http://paste.debian.net/2822 |
| 12:53.34 | abrotman | opoftheuniverse: /msg dpkg am i swapping |
| 12:53.34 | opoftheuniverse | ok |
| 12:53.36 | opoftheuniverse | got it |
| 12:53.48 | stew | woden1: what does 'uname -r' say? |
| 12:53.56 | opoftheuniverse | hmm, so that is ok |
| 12:54.02 | opoftheuniverse | nothing abnormal |
| 12:54.14 | abrotman | opoftheuniverse: let it run longer if you like |
| 12:54.19 | woden1 | stew: 2.6.24-1-686 |
| 12:54.34 | *** join/#debian Holborn (n=holborn@unaffiliated/holborn) |
| 12:54.57 | woden1 | stew: I'm wondering if my sound chip is supported. http://www.alsa-project.org/main/index.php/Matrix:Vendor-Intel doesn't say anything about ICH8. |
| 12:55.19 | stew | woden1: you can try a newer driver: /msg dpkg new alsa |
| 12:55.23 | abrotman | in etch? |
| 12:55.48 | stew | i assumed he is not running etch |
| 12:56.00 | cahoot | woden1: hoe do you test sound? |
| 12:56.06 | keitherz | hmmm |
| 12:56.07 | cahoot | s/hoe/how/ |
| 12:56.14 | stew | since the message he keeps showing us saying he doesn't need alsaconf is for testing/sid |
| 12:56.31 | stew | woden1: btw i'm using the alsa hda-intel driver with 2.6.24-1 with ich8 |
| 12:57.02 | woden1 | cahoot: With System --> Preferences --> Sound --> Test, or with cat /dev/urandom > /dev/dsp |
| 12:57.10 | woden1 | stew: the one in lenny? |
| 12:57.19 | cahoot | woden1: run speaker-test in a term |
| 12:57.21 | stew | woden1: is snd-pcm-oss loaded? |
| 12:57.33 | woden1 | stew: i can check, but why would I need/want oss? |
| 12:57.40 | stew | woden1: becuase /dev/dsp is oss |
| 12:57.49 | woden1 | cahoot: speaker-test = no sound |
| 12:57.57 | cahoot | no error? |
| 12:58.07 | woden1 | stew: oh. I was following the advice from /msg dpkg alsa checklist |
| 12:58.08 | stew | woden1: and many applications only know how to talk to oss |
| 12:58.28 | woden1 | stew: The GNOME sound configurator says I'm using the ALSA sound system. |
| 12:58.35 | stew | woden1: ahh, then you loaded snd-pcm-oss before testing, i assume |
| 12:58.55 | *** part/#debian mib_9wt2hhd5 (i=dd02a40f@gateway/web/ajax/mibbit.com/x-bb6cd6183bc5cac3) |
| 12:58.57 | woden1 | stew: No this is a clean install of Lenny, from the beta1 net-install ISO |
| 12:59.01 | stew | woden1: yes, you are. and many applications wont work unless you load alsa's snd-pcm-oss module |
| 12:59.19 | stew | woden1: what are you saying 'no' to? |
| 12:59.35 | woden1 | stew: not sure. :) |
| 12:59.47 | stew | woden1: is snd-pcm-oss loaded? |
| 12:59.52 | woden1 | stew: snd-pcm-oss ? I don't see that in apt-cache search |
| 12:59.57 | *** join/#debian Eulex (n=alex@81-237-247-113-no120.tbcn.telia.com) |
| 13:00.02 | stew | woden1: is a kernel module |
| 13:00.16 | woden1 | stew: please remind me, how do I tell if a kernel module is loaded? |
| 13:00.22 | stew | woden1: with lsmod |
| 13:00.32 | stew | woden1: are you following the alsa checklist? |
| 13:00.41 | stew | woden1: did you do number 7? |
| 13:01.23 | woden1 | stew: No I didn't do #7 because I thought that OSS didn't need to be used...I thought it was pure ALSA. |
| 13:01.32 | *** join/#debian maxamillion (n=adam@ss-5-41.shsu.edu) |
| 13:01.51 | orveldv | woden1: do you have more than 1 sound cards? what does "asoundconf list" say? |
| 13:02.00 | *** mode/#debian [+l 837] by debhelper |
| 13:02.16 | stew | woden1: can you show us the output of "amixer"? |
| 13:02.50 | woden1 | stew: This is my lsmod http://paste.debian.net/2831/ |
| 13:03.03 | *** join/#debian lil_cain (n=lil_cain@minerva.redbrick.dcu.ie) |
| 13:03.13 | woden1 | orveldv: No, this is a laptop. I just have 1 sound chip. See this http://paste.debian.net/2823 |
| 13:03.31 | stew | woden1: what does "ls -l /dev/dsp" return? |
| 13:03.52 | woden1 | stew: amixer http://paste.debian.net/2832/ |
| 13:04.04 | woden1 | stew: crw-rw---- 1 root audio 14, 3 2008-05-13 16:15 /dev/dsp |
| 13:04.31 | *** join/#debian qwe1 (n=qwe@86.57.137.7) |
| 13:04.52 | stew | woden1: is this a laptop? |
| 13:04.54 | cahoot | soundchip doubling as modem? |
| 13:05.08 | woden1 | it might be the microphone, not sure. |
| 13:05.30 | woden1 | but it's second on the list anyway so it shouldn't interfere |
| 13:05.35 | woden1 | AFAIK |
| 13:06.28 | *** join/#debian intheboat (n=intheboa@246.196-247-81.adsl-dyn.isp.belgacom.be) |
| 13:06.33 | *** join/#debian roe (n=roe___@216-164-160-36.c3-0.eas-ubr10.atw-eas.pa.static.cable.rcn.com) |
| 13:06.34 | *** join/#debian namit (n=namit@83-70-241-72.b-ras1.prp.dublin.eircom.net) |
| 13:07.39 | *** join/#debian zephyr (n=zephyr@89.120.241.231) |
| 13:08.05 | *** join/#debian halflife (n=halflife@gatekeeper.athenahealth.com) |
| 13:08.20 | woden1 | so my snd-pcm-oss is there and so is /dev/dsp |
| 13:08.36 | *** join/#debian Tofast4u (n=Tofast4u@212.74.233.46) |
| 13:09.02 | l403 | it seems that x.org halts for few seconds while loading a new window. how can i fix that? |
| 13:09.27 | woden1 | l403: what driver are you using? |
| 13:10.14 | l403 | gfx card driver? |
| 13:10.18 | woden1 | yes |
| 13:10.19 | *** join/#debian crashanddie (n=crashand@lns-bzn-47f-81-56-209-63.adsl.proxad.net) |
| 13:10.23 | woden1 | vesa, nv, nvidia? |
| 13:10.25 | *** join/#debian chomwitt (n=aliosa@ppp167-182.adsl.forthnet.gr) |
| 13:10.38 | *** join/#debian bitshuffler (n=bitshuff@unaffiliated/bitshuffler) |
| 13:10.58 | woden1 | l403: look in your /var/log/Xorg.0.log |
| 13:10.59 | cahoot | woden1: I'd try disable the modem function in bios if possible |
| 13:11.04 | zephyr | I am trying to set up a printer server - it is a pretty old computer with USB1 and a HP DeskJect 3940 printer - on Debian etch. For some reason I can not find a driver. for some reason I can not even find the printer with lspci either. Where should I look for the problem ? |
| 13:11.11 | orveldv | woden1: was that paste the output of "asoundconf list" or? |
| 13:11.12 | *** join/#debian K_Dallas (i=Korben@i209-195-81-195.cia.com) |
| 13:11.17 | *** join/#debian nelf (n=nelf@host-217-159-124-123.satlynx.net) |
| 13:11.33 | dan2 | zephyr: bad usb port? |
| 13:11.33 | *** join/#debian BartVB (n=bartvb@phpbb/leader/BartVB) |
| 13:11.36 | *** join/#debian m_dige (n=mdige@dupont.control.auc.dk) |
| 13:11.49 | l403 | its an old dell with some ati card |
| 13:12.00 | *** mode/#debian [+l 848] by debhelper |
| 13:12.01 | zephyr | dan2, how can I check wether the USB port is bad or not ? |
| 13:12.02 | petemc | usb devices wouldnt be shown in lspci |
| 13:12.08 | petemc | lsusb, on the other hand... |
| 13:12.15 | m_dige | hi guys. Anyone else experiencing problem with using module-assistant with 2.6.25 custom kernels ? |
| 13:12.15 | dan2 | petemc: good point |
| 13:12.17 | *** join/#debian iateadonu1 (n=dan@124.129.158.115) |
| 13:12.24 | dan2 | zephyr: you plug it into a different port |
| 13:12.31 | zephyr | petemc, I meant lsusb |
| 13:12.31 | zephyr | :) |
| 13:12.32 | petemc | zephyr: check dmesg/messages |
| 13:12.35 | zephyr | *sorry* |
| 13:12.41 | petemc | *np* |
| 13:12.59 | [apo] | What is this about...? http://lists.debian.org/debian-security-announce/2008/msg00152.html |
| 13:13.07 | [apo] | should I shutdown all my deb serves.... |
| 13:13.20 | petemc | [apo]: did you read it? |
| 13:13.39 | henr_k | [apo]: or just remove all certificates generated in the given period |
| 13:13.57 | [apo] | righto I justed needed people smartr n me to decode it for me.. |
| 13:14.05 | lil_cain | after installing the new libssl |
| 13:14.13 | *** join/#debian Phil4 (n=phil@server1.germanserver.co.uk) |
| 13:14.18 | zephyr | I get something like this wih dmesg: |
| 13:14.19 | zephyr | hub 1-0:1.0: cannot reset port 1 (err = -19) |
| 13:14.19 | zephyr | hub 1-0:1.0: cannot disable port 1 (err = -19) |
| 13:14.26 | [apo] | thanks debian friends... |
| 13:14.38 | [apo] | if I may add smart debian friends... |
| 13:14.58 | *** join/#debian Fadoski (n=fadoski@dsl-mlibrasgw2-fe1ade00-98.dhcp.inet.fi) |
| 13:15.03 | iateadonu1 | i pooped up my iptables and now pinging google.com gives me "cannot connect to network" but i can still ping my adsl router. how do i clear these tables? |
| 13:15.06 | Phil4 | anyone have any ideas for updating 10+ servers without sshing into each one, su'ing to root and running the apt commands manually? |
| 13:15.08 | *** join/#debian tecky (n=tecky@cpe-74-67-30-26.nycap.res.rr.com) |
| 13:15.19 | *** part/#debian bitshuffler (n=bitshuff@unaffiliated/bitshuffler) |
| 13:15.29 | Phil4 | iateadonu1, iptables -X && iptables -F |
| 13:15.42 | *** join/#debian bitshuffler (n=bitshuff@unaffiliated/bitshuffler) |
| 13:15.49 | *** join/#debian frsk (i=fredrik@asterix.samfundet.no) |
| 13:15.52 | stew | iateadonu1: note that depending on your default policies, the above commands might disable all networking |
| 13:15.56 | *** join/#debian tacit (n=as48@opensuse/member/AndreasStieger) |
| 13:16.00 | zephyr | petemc, any idea? :) |
| 13:16.06 | *** join/#debian dFence (n=chatzill@ings-d9322533.pool.mediaWays.net) |
| 13:16.14 | petemc | zephyr: did you check dmesg? |
| 13:16.14 | iateadonu1 | hmmm... |
| 13:16.30 | iateadonu1 | i'm on mandriva now - there's no way to really test without rebooting. |
| 13:16.30 | zephyr | yes, I did. I posted all relevant findings above |
| 13:16.33 | iateadonu1 | wow. |
| 13:16.38 | *** join/#debian zeitsofas (n=zeitsofa@little-dude.net) |
| 13:16.53 | petemc | zephyr: ah, it looks not to be working |
| 13:17.24 | zephyr | and in this case what should I do? |
| 13:17.32 | l403 | so right at begining in log, it warns about missing font directories |
| 13:17.41 | *** join/#debian OncrAckz (n=ircap751@111.Red-88-0-203.dynamicIP.rima-tde.net) |
| 13:17.49 | petemc | zephyr: check if another usb device works, i guess |
| 13:17.57 | *** join/#debian rawb (n=rawb@unaffiliated/rawb) |
| 13:18.08 | zephyr | I have only 2 of them and I tried both of them. |
| 13:18.24 | iateadonu1 | the main thing is that i want to get a pocket pc on usb0 to be able to access the internet, (and for ssh to it from the laptop) - iptables -t nat -A POSTROUTING -o... then what? |
| 13:18.50 | *** join/#debian Crypticfortune (n=Crypticf@gw.dna.bio.keio.ac.jp) |
| 13:19.07 | liable | hmm, my key is dsa and made in sarge, but i still feel paranoid |
| 13:19.28 | Eulex | is it possible to shut of one core on a core 2 duo laptop to save power? |
| 13:19.32 | tacit | "Debian-specific: yes" :-) |
| 13:19.53 | badcfe | is it possible to tell a driver what irw to use? |
| 13:19.58 | iateadonu1 | has anyone ever been fired because they obsessed over a computer problem and couldn't concentrate on work? |
| 13:20.04 | tecky | I just did a ' apt-get install fluxbox fluxconf ' I cant run startx for some reason, Am I missing any packages that I should have installed beyond those 2 ? |
| 13:20.15 | badcfe | thing is i see that various hardware (drivers?) share the same irq ... |
| 13:20.16 | tacit | iateadonu1: I get paid for doing that. |
| 13:20.24 | rawb | http://tinyurl.com/6e3ynp - can someone tell me why the changelog link on the right is a 404? i noticed a lot of PHP packages were updated yesterday and all their changelogs are 404s |
| 13:20.49 | orveldv | tecky: xbase-clients ? |
| 13:20.59 | tecky | i thought it installed it w/ installing fluxbox ? |
| 13:21.00 | tecky | wtf |
| 13:21.12 | Dewi | liable: how predictable are we talking? |
| 13:21.18 | Dewi | liable: and how did it happen? |
| 13:21.21 | chomwitt | hi , in the gnome package why we put '1:' in front of the release nunmber? |
| 13:21.23 | tacit | liable: Paranioa is good in cryto. |
| 13:21.23 | stew | rawb: becuase changelogs.debian.net doesn't have changelogs for packages uploaded directly to stable or testing, only changelogs for packages that were at one time in unstable |
| 13:21.38 | bartc | liable: use the dowkd.pl tool listed in the advisory mail to decrease your paranoia :) |
| 13:21.38 | Dewi | tacit: paranoia is good in *software* |
| 13:21.39 | badcfe | badcfe: talking to yourself again? |
| 13:22.00 | tacit | Dewi: In a more general sense, yes. |
| 13:22.30 | rawb | stew: cool, thanks. thought I messed something up since a lot of packages weren't showing any changelogs :) |
| 13:22.55 | iateadonu1 | has anyone ever been fired for getting sick of a computer problem and not working on it? |
| 13:23.00 | Crypticfortune | bartc: i tried that tool, the output didn't make sense... |
| 13:23.08 | *** join/#debian PriitM_ (n=cel1200@ip222.cab16.mus.starman.ee) |
| 13:23.30 | bartc | Crypticfortune: works for me, what didn't make sense? |
| 13:23.42 | *** part/#debian tacit (n=as48@opensuse/member/AndreasStieger) |
| 13:23.42 | iateadonu1 | thanks. off to reboot |
| 13:23.45 | *** part/#debian iateadonu1 (n=dan@124.129.158.115) |
| 13:24.09 | *** part/#debian bitshuffler (n=bitshuff@unaffiliated/bitshuffler) |
| 13:24.46 | Crypticfortune | bartc: for example "dowkd.pl host localhost" -> "# localhost SSH-2.0-OpenSSH_4.7p1 Debian-4" (and that tels me what?) |
| 13:25.04 | *** join/#debian ionix- (n=ionix@p4234-ipbf1501marunouchi.tokyo.ocn.ne.jp) |
| 13:25.18 | *** join/#debian Unitux (n=Unitux@83.136.139.228) |
| 13:25.19 | bartc | Crypticfortune: afaik, that your key is not vulnerable |
| 13:25.32 | *** join/#debian felix_da_catz (n=felix_da@66.60.231.164) |
| 13:25.34 | bartc | Crypticfortune: it will output a line with the hostname (without a leading #) if the key is vulnerable |
| 13:26.05 | ionix- | Hey guys, how would I go and manage 30 linux (Debian) servers by myself? Servers are running different apps (mogileFS, httpd, etc). I mean, to apply patches and easy deployment? Any OS solution for that? |
| 13:26.09 | *** join/#debian jms (n=mike@esc3083-p.stonge.biota.utoronto.ca) |
| 13:26.21 | *** join/#debian morficus_ (n=morficus@69.0.44.52) |
| 13:26.24 | Crypticfortune | bartc: ahhh ok. i have some specimens that did turn up that way too =/ |
| 13:26.38 | Crypticfortune | thanks for the explaination |
| 13:26.51 | bartc | Crypticfortune: the comment lines are output from ssh-keyscan, I guess output to stderr is not being supressed by the script |
| 13:26.56 | *** join/#debian iateadonu1 (n=dan@124.129.158.115) |
| 13:27.10 | iateadonu1 | huh... all i had to do was reboot debian after all. |
| 13:27.33 | rawb | loves debian |
| 13:27.46 | *** part/#debian namit (n=namit@83-70-241-72.b-ras1.prp.dublin.eircom.net) |
| 13:27.50 | iateadonu1 | but, thanks for the iptables -X command - that will keep me from breaking the golden rule (don't reboot to solve a problem) again. |
| 13:28.29 | fireba11 | ionix-: depends a lot on what you actually need to do and want to automate .. yuo should start with setting up monitoring .. i'd suggest nagios and munin for that |
| 13:28.49 | ionix- | nagios AND munin? |
| 13:29.08 | ionix- | would you say cacti is better than munin? |
| 13:29.11 | orveldv | ionix-: or logsend to centralize all your logs to an e-mail address |
| 13:29.33 | iateadonu1 | what? is there another iateadonut logged in somewhere? |
| 13:29.35 | Sebboh | I get "error: ssh-keygen failed with exit status 1" when I run "dowkd.pl file myopenvpn.key" ... |
| 13:29.35 | frsk | If dowkd.pl host $hostnames returns the hostname without # in front, that's.. bad? |
| 13:29.35 | bartc | ionix-: I used both, I prefer munin personally |
| 13:29.39 | fireba11 | ionix-: they have different purpose .. nagios is to monitor if everything is up and running, munin is for more in-detail stats and long term graphs. also make sure error messages get your attention one way or another |
| 13:29.47 | ionix- | orveldv: I will use a central syslogd |
| 13:29.56 | bartc | frsk: no, only when it outputs hostnames without the leaading # |
| 13:29.56 | troubled | Im getting a 404 for http://security.debian.org/project/extra/dowkd/dowkd.pl.gz.asc is anyone else? |
| 13:29.59 | *** join/#debian likevinyl (n=likeviny@190.18.116.157) |
| 13:30.09 | frsk | bartc: That's what I said.. |
| 13:30.15 | *** join/#debian Eulex (n=alex@81-237-247-113-no120.tbcn.telia.com) |
| 13:30.26 | bartc | frsk: sorry, misread - yes that's bad :) |
| 13:30.32 | frsk | bartc: Ugh. :/ |
| 13:30.33 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 13:30.35 | frsk | bartc: Thanks, though |
| 13:30.38 | Maulkin | Website is in the middle of rebuilding |
| 13:30.49 | abrotman | there you go! |
| 13:30.58 | troubled | Maulkin: that reply apply to what I asked? |
| 13:31.00 | *** join/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 13:31.06 | Sebboh | troubled, yes, but, look here: http://security.debian.org/project/extra/dowkd/dowkd.pl.gz.sig |
| 13:31.17 | halflife | hello folks i am trying through grep through log file for all the lines that have today's date, the file has in the format mm/dd/yyyy, so i tried grep "$(date +%d) filename or grep `date +%D` filename but ican't seem to get it work , strace shows execve("/usr/bin/grep", ["grep", "05/13/08", which is the right pattern. i am kind of lost would appreciate help . i did try #bash, didn't get help. |
| 13:31.21 | Sebboh | typo in the email. |
| 13:31.26 | troubled | Sebboh: oh hey, thanks. dsa mentioned the .asc wasnt sure :) |
| 13:31.41 | abrotman | troubled: Maulkin just said |
| 13:31.49 | Sebboh | yeah they screwed up. ;) |
| 13:31.49 | *** join/#debian mendred (n=mendred@59.93.48.17) |
| 13:31.56 | troubled | abrotman: thanks, wasnt sure he was talking to me or not |
| 13:32.01 | stew | Maulkin: congrats btw on tricking your fellow townspeople into trusting you! |
| 13:32.02 | troubled | or rather the debian site |
| 13:32.18 | troubled | anyways, thanks guys, gl with all this :/ |
| 13:32.34 | Sebboh | yeah I like how we're all running some damned 0.8 meg perl script. =P |
| 13:32.43 | troubled | :) |
| 13:32.49 | Sebboh | that we got a link to.. in an email. ;) |
| 13:32.58 | Maulkin | stew: thanks :) |
| 13:33.44 | *** join/#debian mendred (n=mendred@59.93.48.17) |
| 13:34.13 | Crypticfortune | Sebboh: even better how we're all running it despite the fact the signature isn't available =P |
| 13:34.55 | *** join/#debian Eulex_ (n=alex@81-237-247-113-no120.tbcn.telia.com) |
| 13:34.58 | *** join/#debian dirk_ (n=dirk@cc955125-a.groni1.gr.home.nl) |
| 13:35.16 | Sebboh | I have a question regarding the weak key issue. How weak? Would exploits still take a long time, or, can I expect uninvited guests on my VPN today? |
| 13:35.22 | bartc | I didn't see anything abviously scary in the perl script - not saying that's any guarantee though :) |
| 13:35.31 | idimmu | i also hvae a question regarding the weak key issue |
| 13:35.35 | idimmu | who did the commit? |
| 13:35.38 | idimmu | and what's his address? |
| 13:35.40 | *** join/#debian twobitwork (n=isaac@nat/ibm/x-1243066bb2b62ccc) |
| 13:35.51 | *** join/#debian helo (n=helo@wsip-68-15-195-2.ok.ok.cox.net) |
| 13:36.00 | *** join/#debian slot4 (n=slot4@host-87-242-11-125.prtelecom.hu) |
| 13:36.14 | justin | halflife: uhh, 05/13/08 is mm/dd/yy not mm/dd/yyyy |
| 13:36.16 | Sebboh | Crypticfortune, first off, it is available. replace .asc with .sig. Second, heh.. signed = safe? Wanna trade me a personal check for some cash? :) |
| 13:36.42 | troubled | anyone agree with this fingerprint?: C8D3 D9CF FA9E 7056 3F32 FA54 BF7B FF04 02D5 24BE |
| 13:36.59 | Crypticfortune | Sebboh: yeah, i don't have trusted signatures enough to make a sign worth much... But still =P |
| 13:37.00 | woden1 | orveldv: asoundconf list is Names of available sound cards: |
| 13:37.01 | woden1 | Intel |
| 13:37.04 | bartc | troubled: yes |
| 13:37.08 | troubled | bartc: thanks |
| 13:37.11 | stew | woden1: is it a laptop? |
| 13:37.18 | woden1 | stew: yes it is a laptop |
| 13:37.28 | stew | woden1: do you have a hardware volume control on the laptop, like some buttons on the keyboard, or some key combination that alters the volume? |
| 13:37.43 | woden1 | stew: Yes, and they are all turned on and maxed volume. |
| 13:37.45 | orveldv | halflife: separate them, get the date string into a variable first and then grep for it |
| 13:37.53 | Crypticfortune | troubled: yes, same key fingerprint here for "Florian Weimer (HIGH SECURITY KEY) <fw@deneb.enyo.de>" |
| 13:38.02 | *** join/#debian MoDaX (n=nth@lan-84-240-22-131.vln.skynet.lt) |
| 13:38.07 | woden1 | stew: The hardware works, I have Vista on another partition and the sound works. |
| 13:38.10 | stew | woden1: i'd recommend trying a newer version of alsa then (1.0.16) |
| 13:38.18 | troubled | Crypticfortune: yup, thanks. lets just hope nothing been tampered with since 2006 now :) |
| 13:38.42 | woden1 | stew: I am using 1.0.16 (Lenny) |
| 13:38.51 | stew | woden1: how did you install it? |
| 13:38.56 | justin | woden1: what does cat /proc/asound/cards show? |
| 13:38.59 | *** join/#debian golan (n=golan@corbeta.momona.org) |
| 13:39.01 | stew | becuase lenny's kernel comes with 1.0.15 afaik |
| 13:39.01 | woden1 | stew: From the beta net-install ISO |
| 13:39.05 | *** join/#debian MoDaX (n=nth@lan-84-240-22-131.vln.skynet.lt) |
| 13:39.16 | *** join/#debian dirk__ (n=dirk@cc955125-a.groni1.gr.home.nl) |
| 13:39.18 | *** part/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 13:39.21 | woden1 | justin: Names of available sound cards: |
| 13:39.22 | woden1 | Intel |
| 13:39.22 | stew | woden1: what does 'cat /proc/asound/version' return? |
| 13:39.38 | woden1 | justin: strike that. It shows this: 0 [Intel ]: HDA-Intel - HDA Intel |
| 13:39.39 | woden1 | <PROTECTED> |
| 13:39.56 | *** join/#debian MoDaX (n=nth@lan-84-240-22-131.vln.skynet.lt) |
| 13:40.06 | woden1 | stew;justin: Or look at it here http://paste.debian.net/2823 |
| 13:40.25 | Sebboh | troubled, bartc, Crypticfortune.. I don't know what 'weak key' means. Could someone walk into my stuff today? |
| 13:40.39 | woden1 | stew: I just installed yesterday from the Lenny beta1 net-install ISO |
| 13:40.43 | stew | woden1: what does 'cat /proc/asound/version' return? |
| 13:40.52 | *** join/#debian mishok13 (n=gdmfsob@195.3.130.70) |
| 13:41.12 | stew | woden1: or, how did you determine you have 1.0.16 ? |
| 13:41.20 | *** join/#debian aurehman (n=chatzill@203.81.199.76) |
| 13:41.23 | woden1 | stew: apt-cache show alsa-base |
| 13:41.36 | *** join/#debian twobitwork (n=isaac@nat/ibm/x-57a33ec1b9748e56) |
| 13:41.41 | stew | woden1: i'm talking about the drivers |
| 13:41.59 | woden1 | stew: I guess I don't know then. How do I find out? |
| 13:42.08 | Crypticfortune | Sebboh: i'm not clear on exactly /how/ weak either. I looked at the diff but it's full of what look (at a glance) to be unrelated changes, so I don't know what exactly was wrong before...I'm curious too. |
| 13:42.08 | stew | woden1: i've told you 3 times how to find out |
| 13:42.17 | halflife | orveldv: thanks for the hint |
| 13:42.57 | *** join/#debian alphad (n=alphad@196.201.94.34) |
| 13:42.59 | woden1 | stew: Advanced Linux Sound Architecture Driver Version 1.0.15 (Tue Nov 20 19:16:42 2007 UTC). |
| 13:43.04 | stew | woden1: and btw, 'apt-cache show packagenmae' doens't tell you the version of a package installed, it shows you the version of the package which is available (but i'm not talking about the version of any package now) |
| 13:43.07 | bartc | Sebboh: cryptographic algorithms depend on the randomness of the key, and apparently, the key is not random when it has been generated with a specific version of openssl in debian. how easily this can be exploited, I don't know. |
| 13:43.15 | stew | woden1: i'd recommend you try 1.0.16: /msg dpkg new alsa |
| 13:43.20 | *** join/#debian MoDaX (n=nth@lan-84-240-22-131.vln.skynet.lt) |
| 13:43.45 | *** join/#debian Akuw (n=x@190.77.115.93) |
| 13:43.50 | woden1 | stew: I will try that |
| 13:43.55 | Crypticfortune | Sebboh: I mean, debian wouldn't do something absolutely braindead and use like "time()" to seed random numbers right? so it must be that they random number generator was not running at 100% of the entropy we thought it was. so we probably lost some bits of security on our keys...the question of the day is: how many bits? |
| 13:44.02 | troubled | Sebboh: I think the idea is that someone with a weakly made pub key could figure out the private key and this be able to pretend to be that person and use their ssh login or mitm attack with anything openssl related |
| 13:44.38 | orveldv | halflife: you can use the -x switch for debugging (put "set -x" somewhere at the beginning, or #!/bin/bash -x") |
| 13:44.48 | *** join/#debian chops (n=andrew@67.158.118.130) |
| 13:44.59 | halflife | orveldv: ok. |
| 13:45.46 | Sebboh | printk: 473365 messages suppressed <-- is that bad? :/ |
| 13:45.57 | *** join/#debian Batchy (n=batchy@AVelizy-155-1-95-152.w90-35.abo.wanadoo.fr) |
| 13:46.02 | *** join/#debian iateadonu1 (n=dan@124.129.158.115) |
| 13:46.02 | troubled | heh |
| 13:46.18 | troubled | i would say something needs to be looked at :) |
| 13:46.18 | halflife | Sebboh: what is the message that is being repeated ? |
| 13:46.18 | abrotman | Sebboh: depends what's being suppressed |
| 13:46.27 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 13:46.41 | Akuw | wher can i paste images? |
| 13:46.47 | *** join/#debian format_c (n=koeppea@p57A71887.dip0.t-ipconnect.de) |
| 13:46.54 | troubled | Akuw: pastebin.ca or imagebin.org |
| 13:47.05 | iateadonu1 | what's |
| 13:47.14 | *** join/#debian MoDaX (n=nth@lan-84-240-22-131.vln.skynet.lt) |
| 13:47.18 | *** join/#debian magmaniac (n=nobody@p4FDB2856.dip0.t-ipconnect.de) |
| 13:48.49 | *** join/#debian mns (n=mns@c-98-216-178-41.hsd1.ma.comcast.net) |
| 13:49.03 | *** join/#debian SamuraiDio (n=diovani@201.41.41.235) |
| 13:49.06 | SamuraiDio | hi |
| 13:49.14 | liable | are we gonna mention ssl in topic? |
| 13:49.22 | Sebboh | well.. the machine has only been up for half an hour, and, I'm the only one using it.. and I'm only logged in via ssh. So.. Yeah that's some screwy hardware issue, eh? *sigh* Hm, I don't know what message is being suppressed. Above says login: and below says 4gb seg fixup, process ldconfig (pid 3194), cs:ip 73:blah |
| 13:49.43 | troubled | liable: good idea i think |
| 13:49.50 | Sebboh | liable, not until someone writes a nice friendly blog post covering the issue and we can link to it. |
| 13:50.00 | troubled | Sebboh: why not the dsa url? |
| 13:50.04 | SamuraiDio | i changed the motherboard of my machine and now the new ethernet devixe show as eth1, how can i change it to eth0? |
| 13:50.21 | themill | troubled: too bloody long for one... and utterly indigestible for most |
| 13:50.31 | the-dude | SamuraiDio: check udev |
| 13:50.32 | bartc | Sebboh: are you using xen? |
| 13:50.33 | Sebboh | troubled, oh. Yeah, sure. Some people haven't read the DSA at all, eh. |
| 13:50.42 | Sebboh | bartc, yep! |
| 13:50.54 | bartc | Sebboh: try installing the libc6-xen package |
| 13:50.56 | liable | how about, if you have generated openssl keys in the last 18 months, you need to rebuild them.. |
| 13:50.57 | SamuraiDio | the-dude, sorry |
| 13:51.10 | *** join/#debian ^shark_ (n=^shark_@216.104.202.233) |
| 13:51.12 | Sebboh | bartc, I did! eh. |
| 13:51.20 | troubled | themill: then again, so is crypto and why this is a bad thing |
| 13:51.30 | *** join/#debian soror (n=sara13-2@41.221.26.174) |
| 13:51.33 | themill | troubled: indeed. |
| 13:51.47 | magmaniac | SamuraiDio: check /etc/udev/rules.d/z25_persistent-net.rules, remove lines as needed, restart udev |
| 13:51.52 | troubled | Sebboh: well, not everyone that uses debian likely subscribes to the email alerts keep in mind |
| 13:52.03 | Sebboh | oh, no, I saw it in here. |
| 13:52.06 | troubled | Sebboh: although, not everyone reads the topic on irc either |
| 13:52.24 | bartc | Sebboh: maybe restart all services or the entire domU to be sure? the 4gb seg fixup message is most likely caused by not having libc6-xen installed, or old processes still having the standard libc6 loaded |
| 13:52.24 | themill | troubled: especially if you're using the african os... |
| 13:52.29 | *** part/#debian soror (n=sara13-2@41.221.26.174) |
| 13:52.38 | [apo] | Wow debian is busy making lots of babies... http://futurist.se/gldt/gldt76.png |
| 13:52.39 | troubled | themill: african os? not sure what you mean |
| 13:52.43 | *** join/#debian soror (n=sara13-2@41.221.26.174) |
| 13:52.51 | Sebboh | troubled, ubuntu. |
| 13:52.55 | *** part/#debian soror (n=sara13-2@41.221.26.174) |
| 13:53.06 | troubled | Sebboh: ubuntu is african origin? |
| 13:53.19 | *** join/#debian ProN00b (n=dot@pD9E3BCE3.dip.t-dialin.net) |
| 13:53.29 | *** join/#debian Crypticfortune (n=Crypticf@gw.dna.bio.keio.ac.jp) |
| 13:53.44 | Sebboh | trouble, hell if I know. The word comes from Africa, I guess, but I dunno what language. |
| 13:53.45 | hoxu | !start a distro war |
| 13:53.45 | dpkg | Ubuntu is an ancient African word meaning 'I can't configure Debian'. |
| 13:53.54 | troubled | Sebboh: ahh, i see what you mean then heh |
| 13:53.59 | SamuraiDio | magmaniac, thanks |
| 13:54.03 | Sebboh | grumbles |
| 13:54.32 | chops | Sebboh: http://en.wikipedia.org/wiki/Ubuntu_(philosophy) |
| 13:54.48 | *** join/#debian jack_ (n=jack@404.be) |
| 13:55.02 | Sebboh | It's 2008 and people still don't realize that saying "African word" is like saying "European word"... |
| 13:55.28 | ^shark_ | i dont know if its just me but a "apt-get install bind9" didnt generate an rndc.key or rndc.conf for me |
| 13:55.47 | format_c | !start a holy war |
| 13:55.48 | dpkg | Balrogs have wings! |
| 13:56.14 | troubled | ^shark_: i think thats been like that forever |
| 13:56.23 | *** join/#debian paxcoder (n=paxcoder@78.134.151.219) |
| 13:56.44 | Sebboh | Can dpkg start race wars, too? |
| 13:56.50 | Sebboh | Anywho, back to work. |
| 13:56.59 | *** join/#debian paxcoder (n=paxcoder@78.134.151.219) |
| 13:57.11 | paxcoder | hey, anyone can't connect to ftp mirrors? |
| 13:57.53 | pinto3 | what's the proper extension for a pax file? |
| 13:58.03 | paxcoder | ftp.debian.org as well as US works, but, i can't connect to, for example HR (Croatia), and IE (Ireland) |
| 13:58.18 | ^shark_ | troubled: why is that and will an " rndc-confgen -a" solve my problem |
| 13:58.20 | *** mode/#debian [+o stew] by ChanServ |
| 13:58.32 | *** topic/#debian by stew -> openssl vulnerability: /msg dpkg dsa1571 | 4.0r3 released /msg dpkg etch | /msg dpkg etch->lenny | Offtopic: #debian-offtopic | PUBLIC KEY NOT AVAILABLE? /msg dpkg no public key | THIS IS NOT #ubuntu | FAQ: http://wiki.debian.org/DebianIRC | /msg dpkg bts | NO FLOOD: USE #flood or /msg dpkg paster | /msg bots NOT people |
| 13:58.54 | stew | i'd appriciate it if people checked that factoid for errors/omissions |
| 13:58.54 | themill | Thanks, stew. |
| 13:58.59 | *** mode/#debian [-o stew] by stew |
| 13:59.42 | troubled | ^shark_: not sure why, i didnt make the package. Perhaps becuase remote access to bind is bad to begin with thus forcing you to manually enable it? As for rndc-confgen, give it a shot. Bind is something I install like once every 3 or 4 years and leave it run forever without touching, so im not exactly up on it these days |
| 13:59.55 | *** part/#debian Teltariat (n=tekron@pool-71-249-46-10.nycmny.east.verizon.net) |
| 14:00.16 | *** join/#debian eOliva (n=dutche@200.169.133.98) |
| 14:00.34 | *** join/#debian max___ (n=max@p54A8434C.dip.t-dialin.net) |
| 14:00.36 | themill | stew: that dowkd.pl utility also reports some RSA keys as being vulnerable. I think. I've not yet finished reading through the entire source code to work out what it's output means :S I'm also not sure if they are false positives. |
| 14:00.42 | *** join/#debian godwin2 (n=Miranda@chello084113227153.18.14.vie.surfer.at) |
| 14:00.42 | paxcoder | pinto3: i think I got the joke now, after visiting the wiki :-) But I'm not a coder of a unix program pax. I'm a programmer of peace :-) |
| 14:00.42 | troubled | stew: !lock dsa1571 :) |
| 14:00.46 | paxcoder | anyway, anyone know? |
| 14:01.17 | max___ | some proof-of-concept exploit already out there for openssl bug? ;)) except dowkd.pl |
| 14:01.18 | troubled | stew: maybe also mention the fact that the dsa has a typo with regard to the .asc meant to be .sig? |
| 14:01.21 | bartc | stew: maybe add a link to the correct pgp signature for dowkd.pl.gz |
| 14:01.31 | bartc | (.sig instead of .asc) |
| 14:01.34 | stew | dpkg: dsa1571 =~ s/DSA // |
| 14:01.34 | dpkg | OK, stew |
| 14:01.35 | liable | troubled: whats wrong with .asc? |
| 14:01.48 | troubled | liable: its a 404, should have been .sig |
| 14:01.49 | *** join/#debian deeeb (n=deeeb@77.104.46.242) |
| 14:01.51 | deeeb | hi |
| 14:01.54 | bartc | ah, troubled already said that |
| 14:01.56 | pinto3 | ah, i wasn't bugging you like that :p, i was just curious |
| 14:02.07 | deeeb | How should packages that require special permissions (such as suid bits or new local system users) be handled ? How do you ensure that local permission changes aren't overwritten by upgrades ? |
| 14:02.08 | pinto3 | i'll check out the wiki though |
| 14:02.21 | moshii | has lots of keys to regenerate, crap |
| 14:02.37 | Crypticfortune | themill: only DSA ssh keys could be effected by this? (ie. RSA isn't handled by openssl?) |
| 14:02.44 | chops | deeeb: What sort of local permission changes? |
| 14:03.14 | tecky | so should i update to the released version of openssl ? |
| 14:03.18 | tecky | i didn't update yet today |
| 14:03.21 | Crypticfortune | err according to "man openssl" openssl most definitely does handle RSA |
| 14:03.23 | *** join/#debian mike1o (n=mike@host105-211-dynamic.5-87-r.retail.telecomitalia.it) |
| 14:03.55 | troubled | Crypticfortune: any key made, DSA just happens to be the arconym used to describe Debian Security Announcement. Dont confuse with meaning DSA encryption and not RSA |
| 14:04.00 | *** join/#debian xlotlu (n=john@79.114.167.226) |
| 14:04.11 | *** join/#debian mishok13 (n=gdmfsob@195.3.130.70) |
| 14:04.12 | max___ | hehe |
| 14:04.16 | chops | Crypticfortune, themill: Yes, I'm also confused by that -- dowkd.pl doesn't seem to be willing to check my .pem and .key files with RSA keys ("warning: unparsable line"). Should I be worried about those files? Should I be able to check them with dowkd.pl? |
| 14:04.23 | deeeb | chops : suid bits or new local system users |
| 14:04.42 | troubled | Crypticfortune: the problem is the underlying method used to generate the key (ie: pretend /dev/urandom just counted from 1 to 10 over and over, its that kinda of "bad") |
| 14:04.56 | themill | chops: I gave up on dowkd.pl. It's horrid and it bitches on just about everything that I ask it to check. |
| 14:04.57 | troubled | so the crypo algo is irrelevant |
| 14:05.03 | *** join/#debian loca|host (n=tux@41.226.253.222) |
| 14:05.05 | paxcoder | now connected to Croatian mirror, still can't connect to Ireland. |
| 14:05.20 | stew | aiui the bad link will be fixed when the debian www finishes rebuilding |
| 14:05.27 | stew | (which is in progress now) |
| 14:05.31 | troubled | themill: ya, im having issues running it atm too |
| 14:05.33 | moshii | troubled: thats a very big opps |
| 14:05.37 | *** join/#debian tacit (n=as48@opensuse/member/AndreasStieger) |
| 14:05.42 | max___ | i did ./do.. host my-ip, it only echos 4 lines, 2 with the openssh version and 2 with only the ip stated |
| 14:05.45 | chops | deeeb: If you create a new local system user, it will never be overwritten by any sensible package. If you manually set a binary to setuid or clear a setuid bit, then it will be overwritten by a package. Is it ever correct to modify the setuid bit on your package's binaries? Why? It's possible to handle that in your scripts if it's really necessary. |
| 14:05.51 | troubled | moshii: well counting 1..10 isnt the case, thats just an example in lay terms |
| 14:05.56 | paxcoder | works now. |
| 14:06.06 | liable | some info on how dowdk.pl works will be needed. |
| 14:06.12 | tacit | gives out some sympathy to all who are regenerating keys right now |
| 14:06.19 | moshii | troubled: ah, I didn't think is was *that* predictable ;) |
| 14:06.27 | chops | themill: dowkd.pl host blah blah blah seems to be working fine for me; I just can't figure out how to use 'dowkd.pl file' to check my openvpn and apache keys |
| 14:06.48 | troubled | moshii: no, sorry heh, was just trying to explain what bad entropy or predictable keys means |
| 14:06.49 | *** join/#debian twobitwork (n=isaac@nat/ibm/x-4b8f702873f6dd02) |
| 14:07.30 | moshii | wonders how all those debian-based distro's with next to useless support are going to handle this.. |
| 14:07.30 | liable | basically, if it outputs anything, your keys are bad i think |
| 14:07.39 | troubled | ya, and mine got 2 hits :( |
| 14:07.43 | Crypticfortune | troubled: right. i can't imagine it actually is _that_ bad...i'm still curious to approximately how many bits bad it is though... (and also, openssl should rely on /dev/random not /dev/urandom, right?) |
| 14:07.44 | Sebboh | troubled, erm, it's not debian's /dev/random.. it's debian's openssl. |
| 14:07.53 | chops | moshii: Probably about the same way all those Debian users who can't be bothered even to apply the security updates are going to handle it :-) |
| 14:08.06 | troubled | Crypticfortune: well, its bad enough that the perl script guesses it in a few seconds, so take what you want from that |
| 14:08.32 | moshii | chops: so there are going to be plently of boxes ripe for picking then |
| 14:08.41 | chops | moshii: _Plenty_ :-( |
| 14:08.49 | *** join/#debian tobias_ (n=tobias@cpe-066-026-085-055.nc.res.rr.com) |
| 14:08.56 | Sebboh | moshii, probably not *that* ripe.. Just more ripe that was previously promised. |
| 14:09.17 | *** join/#debian SpooForBrains (i=spoo@anduin.net) |
| 14:09.30 | troubled | Sebboh: sure, but the effect is the same, thats why i just used that example. I think everyone gets the point though :) |
| 14:10.14 | Sebboh | troubled, well, the perl script can look at the priv key. |
| 14:10.15 | troubled | moshii: heh, its stuff like this that cause early releases :) |
| 14:10.17 | tacit | So, do ubuntu folks know yet? |
| 14:10.19 | stew | Crypticfortune: it uses /dev/urandom if it exists and /dev/random if not |
| 14:10.23 | stew | tacit: yes |
| 14:10.30 | moshii | The DSA says there was a change in the debian package that caused this,.. someone changed openssl to use urandom instead of random I guess? |
| 14:10.30 | *** join/#debian ArthurArchnix (n=arthur@gw1.panoulu.net) |
| 14:10.35 | tacit | stew: Will the users get it? |
| 14:10.49 | Sebboh | moshii, lol. |
| 14:10.49 | format_c | !start a holy war |
| 14:10.49 | dpkg | Balrogs have wings! |
| 14:10.58 | liable | tacit: thats not out problem |
| 14:11.00 | stew | tacit: ask #ubuntu |
| 14:11.03 | liable | format_c: do you have to? |
| 14:11.12 | tacit | No need to, I know the answer. |
| 14:11.19 | format_c | just looking what happens |
| 14:11.26 | *** join/#debian dererk (n=dash@CAcert/user/dererk) |
| 14:11.29 | liable | you saw it 5 minutes ago.. |
| 14:11.31 | moshii | tacit: they'll ftp the debian packages and install them in their archive I guess |
| 14:11.54 | Crypticfortune | troubled: nono, the perl script isn't actually reversing our keys. it's simply checking to see if they're one of the 262148 keys that are known to be "weak". how "weak" we still don't know... |
| 14:12.00 | format_c | yes and it didn't change :( |
| 14:12.17 | liable | format_c: you can use /msg dpkg |
| 14:12.25 | moshii | Crypticfortune: you'd still need the password for the key to get access to the material inside |
| 14:12.26 | *** join/#debian shriphani (i=shriphan@60.243.172.51) |
| 14:12.32 | *** part/#debian Akatemik (n=tpievila@vipunen.hut.fi) |
| 14:12.36 | troubled | Crypticfortune: ahhh, ok. still trying to figure out the output of this thing. Regardless, I think im just going to be regenerateing all my keys anyways |
| 14:13.10 | Sebboh | yeah you guys that just have to regenerate *your* keys have it easy. :/ I've got employees over seas.. |
| 14:13.15 | *** join/#debian MattJ (n=MattJ@88-109-168-149.dynamic.dsl.as9105.com) |
| 14:13.17 | *** join/#debian mib_ipaf7t6k (i=dd02a40f@gateway/web/ajax/mibbit.com/x-03335058a94585d4) |
| 14:13.41 | Crypticfortune | stew: well that doesn't sound like a very good idea... but still not the root of this problem, right? |
| 14:13.44 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 14:13.45 | liable | Sebboh: such is life |
| 14:13.52 | moshii | Crypticfortune: I suppose the biggest issue here is that the material inside the key is predictable and that'll take a lot of the effort out of finding the password |
| 14:13.53 | *** join/#debian Joelito (i=joel@201.160.207.148.cable.dyn.cableonline.com.mx) |
| 14:13.53 | mike1o | I have a windows partition on /dev/hda5 how do I make it "appear" in my grub boot menu? |
| 14:13.57 | Sebboh | *shrug* I'll just throw the new ones up on the untrusted net. |
| 14:14.02 | *** join/#debian bitshuffler (n=bitshuff@unaffiliated/bitshuffler) |
| 14:14.20 | moshii | Sebboh: shouldn't your users be generating their own keys |
| 14:14.23 | Sebboh | I'm sure my 'weak' vpn is still better than email. ;) |
| 14:14.25 | *** join/#debian dgetsman (n=dgetsman@dsl89049-p5.btigate.com) |
| 14:14.33 | stew | Crypticfortune: its not the root of this problem. note that only recent versions even had a fallback to /dev/random. |
| 14:14.39 | chops | Sebboh: I have a server in another state that uses full-disk encryption because it's not 100% physically secure... I have to figure out whether I have to redo the encryption (though my bias is strongly in favor of "it's not worth bothering" :-/ ) |
| 14:14.40 | *** part/#debian tacit (n=as48@opensuse/member/AndreasStieger) |
| 14:14.44 | troubled | Sebboh: weak encryption is better than none at all still I guess :) |
| 14:15.10 | MattJ | Does anyone know how to (as a human) parse the output of the dowkd tool? |
| 14:15.13 | dgetsman | anybody know what .deb package will provide PAM unable to dlopen(/lib/security/pam_pwdb.so) |
| 14:15.14 | Joelito | good morning to all: Is there a web site, with debian's schedule releases? |
| 14:15.17 | max___ | in which state is a server phyiscally not secure? :D |
| 14:15.23 | MattJ | I get: <my key file>:1 |
| 14:15.24 | dgetsman | i'm on a lobotomized box where I can't search for it :| |
| 14:15.33 | max___ | MattJ: me to |
| 14:15.36 | max___ | *too |
| 14:15.37 | *** join/#debian alvarezp (n=alvarezp@201.160.204.223.cable.dyn.cableonline.com.mx) |
| 14:15.44 | *** join/#debian Xilent (n=supersti@unaffiliated/xilent) |
| 14:15.44 | MattJ | Does it mean I'm done for, or I'm ok? |
| 14:15.47 | troubled | chops: good question. I know I use a openssl key generation for crypto |
| 14:16.05 | liable | MattJ: if it outputs, you need to regenerate i think |
| 14:16.06 | *** join/#debian g_Karthik (n=chatzill@219.91.239.226) |
| 14:16.19 | *** part/#debian Ivan_Shi (i=dd02a40f@gateway/web/ajax/mibbit.com/x-03335058a94585d4) |
| 14:16.22 | Sebboh | moshii, what, with that like.. signing request.. thing? .. I followed a tutorial. I have no idea how it works. |
| 14:16.31 | MattJ | liable: Ok, thanks |
| 14:16.33 | MattJ | :S |
| 14:16.36 | liable | my ssh keys are ok, but it outputs my openvpn ones which i only generated recently |
| 14:16.43 | *** part/#debian g_Karthik (n=chatzill@219.91.239.226) |
| 14:16.45 | Crypticfortune | moshii: no. guessing passwords is only an issue if you have someone's password encrypted key. we're talking about a situation where you have a public key and are trying to reverse it to find the private key... |
| 14:16.46 | *** join/#debian Beineri (n=Beineri@kde/binner) |
| 14:16.59 | chops | max___: It's in someone's house, because he's a contractor and works from home. I don't want his housemate having a party and someone's brother-in-law walking away with all our company's source code. |
| 14:17.00 | moshii | Sebboh: you mean keys and certs for openvpn?... |
| 14:17.02 | format_c | mike1o, http://paste.debian.net/2845/ |
| 14:17.27 | Sebboh | moshii, ... wait wait, are.. those.. rsa? |
| 14:17.40 | *** join/#debian deny[all] (n=pdiablo@unaffiliated/denyall/x-000001) |
| 14:17.47 | Sebboh | yes, yes they are. I made them with rsa tools, not openssl tools. |
| 14:17.48 | moshii | Crypticfortune: ah, ok,.. thats a bigger issue |
| 14:18.22 | troubled | crap, looks like a full reinstall for me for fsck sakes |
| 14:18.24 | ArthurArchnix | In the past I found that as long as I didn't mount partitions under /mnt or /media then gnome wouldn't put them on the desktop while still showing hotplugged devices (usb, cd, ipods) on the desktop. I'm on Lenny now, but can't seem to find a mount point that gnome won't try and put on the desktop. Only way around it, is to give up and uncheck the gconf-key that shows mounted volumes on the desktop. Or does someone know a better way? |
| 14:18.26 | moshii | Sebboh: easyrsa? that's just a wrapper for openssl |
| 14:18.41 | troubled | all my crypto partitions were made with gen-ssl-key which uses openssl to make the keys |
| 14:18.44 | chops | I guess I sort of see; dowkd.pl doesn't look like it's designed to handle .pem or .key files. Crap. |
| 14:19.28 | Crypticfortune | troubled: that sounds very unfortunate =( |
| 14:19.30 | troubled | ok, this looks like its getting serious now. how does debian setup crypted partitions on install? openssl used by change? |
| 14:19.57 | Sebboh | moshii, oh ffs. Anyway yeah I figure if it has to do with encryption I'm gonna re-make it. Tonight. Hopefully the huns won't have razed my fields and raped my peasants by then. |
| 14:20.34 | *** join/#debian morficus__ (n=morficus@69.0.44.52) |
| 14:20.35 | mike1o | format_c, thank you |
| 14:20.40 | moshii | Sebboh: openvpn keys will be painful if your access path is openvpn ;) |
| 14:20.45 | stew | troubled: wouldn't that be a symetric key, not a pub/private pair? |
| 14:21.02 | *** join/#debian dolphin_noel (n=opensour@85.138.86.180) |
| 14:21.06 | moshii | is slightly glad the openvpn gateway is a shitty of fedora box |
| 14:21.11 | troubled | stew: not sure, but heres what the script calls: openssl enc -aes-256-cbc -e -salt -in $key -out $1 |
| 14:21.15 | format_c | mike1o, np |
| 14:21.19 | moshii | s/shitty of/shitty old/ |
| 14:21.30 | *** part/#debian dgetsman (n=dgetsman@dsl89049-p5.btigate.com) |
| 14:21.35 | troubled | stew: it is actually a filename.key I put in my /etc/crypttab, so im thinking that pki |
| 14:21.44 | Sebboh | moshii, huh? Dude, my keys aren't suddenly little viruses. I can still use them to get a shell and make new ones. =P |
| 14:21.45 | Crypticfortune | troubled: aes = symmetric |
| 14:21.46 | MattJ | The security announcement says DSA, does this mean RSA too? |
| 14:22.00 | *** mode/#debian [+l 858] by debhelper |
| 14:22.08 | *** join/#debian piju (n=x@121.120.46.19) |
| 14:22.13 | bartc | MattJ: yes |
| 14:22.24 | MattJ | Ok, thanks :) |
| 14:22.43 | troubled | Crypticfortune: you sure that doesnt apply? just doesnt feel right |
| 14:22.50 | *** join/#debian dirk_ (n=dirk@cc955125-a.groni1.gr.home.nl) |
| 14:22.55 | Sebboh | I just have to be careful someone else doesn't use them, too. ;) |
| 14:23.33 | *** join/#debian tellon (n=tellon@2001:470:1f09:277:240:d0ff:fe75:b504) |
| 14:23.36 | troubled | Crypticfortune: not that its a big deal though since the keys are on an encrypted boot partition which needs a symmetric pass to boot anyways, but still |
| 14:23.45 | *** join/#debian Caoimhin (n=Caoimhin@ANantes-256-1-138-154.w86-214.abo.wanadoo.fr) |
| 14:23.49 | Crypticfortune | troubled: well, kinda comes down to how that $key is generated. if it uses the same random mechanism that was the root of this whole problem, then you're in trouble. but chances are that's some password you type in to mount your drive, yes? |
| 14:24.00 | *** join/#debian DimmuR (n=DimmuR@87-205-187-184.adsl.inetia.pl) |
| 14:24.03 | troubled | Crypticfortune: but im not entirely sure that the boot part is sym since I can change it without reformat |
| 14:24.23 | troubled | that sounds like pki to me in that case (cryptsetup) |
| 14:25.36 | troubled | Crypticfortune: yes, I do require a password to boot. however, I can have like 10 diff pass's that i can change at any time independantly, and I can see the base fingerprint for the key in cryptsetup for luks. Im thinking the debian crypto install underlying system is PKI based |
| 14:25.42 | stew | well i'm glad that i didn't encrypt any of my partitions then. otherwise my data might be vulerable to this attack |
| 14:25.53 | liable | relogs in |
| 14:26.03 | *** join/#debian salvin (n=salvin@unaffiliated/salvin) |
| 14:26.09 | *** join/#debian luig1 (n=luigi@189.141.149.130) |
| 14:26.22 | chomwitt | trying to upgrade yelp in my mixed system i got http://paste.debian.net/2847/ after that i can log in gdm ( |
| 14:26.28 | *** join/#debian dv__ (n=dv@83-64-248-68.inzersdorf.xdsl-line.inode.at) |
| 14:26.38 | chomwitt | can->can't |
| 14:26.45 | *** part/#debian luig1 (n=luigi@189.141.149.130) |
| 14:26.48 | abrotman | yelp ? |
| 14:26.51 | troubled | stew: well, its not too bad for me since the partition keys are all on the main crypted setup. so really I just need to remake my root. But i dont know if its the case that debian installs using that openssl. Dont know much about the installer. Still sounds like a safe precaution though |
| 14:27.11 | *** join/#debian mag_mor (n=blob@vpn-1912.swh.uni-giessen.de) |
| 14:27.17 | abrotman | erm .. i was thinking yast .. ignore me :) |
| 14:27.17 | *** join/#debian minerale_ (i=35181@about/cooking/alfredo/Minerale) |
| 14:27.18 | *** join/#debian sdx (n=ethhrb@citgreece.lar.forthnet.gr) |
| 14:28.04 | sdx | what does logwatch do if invoked without arguments? |
| 14:28.04 | troubled | sdx: try and find out? :) |
| 14:28.04 | *** join/#debian slougi (n=slougi@gw2.clarifiednetworks.com) |
| 14:28.05 | chomwitt | yelp: The help reading application in the GNOME desktop environment. |
| 14:28.05 | chops | chomwitt: Mixed system? |
| 14:28.05 | slougi | hello everyone. is there an env variable i can set so dpkg uses a plain-text frontend? i don't want ncurses |
| 14:28.07 | sdx | troubled, i did |
| 14:28.11 | sdx | i can't figure out |
| 14:28.15 | mike1o | format_c, says "unrecongnized device string" :) |
| 14:28.30 | chomwitt | chops: i mean i have stable but i also downloaded testing |
| 14:28.31 | *** join/#debian sandman (n=s@CPE-24-208-55-92.new.res.rr.com) |
| 14:28.32 | bartc | is relieved GnuPG doesn't use OpenSSL... reencrypting sensitive mail would be a PITA |
| 14:28.42 | troubled | Crypticfortune, Sebboh: any chance you guys are on oftc and able to find out if the installer uses openssl for the luks crypto on install? |
| 14:29.31 | mike1o | format_c, hold on got the wrong partition |
| 14:29.36 | troubled | bartc: nice to know that the last 2 years or so we all been using worthless security :) (yes, I know thats extreme) |
| 14:29.56 | *** join/#debian vraa (n=vraa@h25.81.141.67.ip.alltel.net) |
| 14:29.59 | troubled | i knew i should have just used xor or rot13 :) |
| 14:30.18 | stew | troubled: how many breakins have you had? |
| 14:30.22 | abrotman | slougi: dpkg-reconfigure debconf .. choose readline |
| 14:30.37 | moshii | troubled: I wouldnt say it's that bad... there have been a lot of issues with random number generators recently |
| 14:30.49 | *** join/#debian liable (n=liable@pdpc/supporter/active/liable) |
| 14:31.04 | abrotman | <-- liable has quit (Read error: 104 (Connection reset by sheep)) |
| 14:31.04 | slougi | abrotman: thank you |
| 14:31.11 | troubled | stew: i see what you are getting at. zero from what I can tell, but I cant actually know for sure with my setup since i have no trusted usb boot or anything to verify easily |
| 14:31.13 | *** join/#debian isaac (n=isaac@debian/developer/isaac) |
| 14:31.31 | *** join/#debian porncake (n=beefcake@217.31.175.45) |
| 14:31.35 | porncake | hey guys |
| 14:31.35 | liable | shears abrotman and put lipstick on him. |
| 14:31.36 | slougi | abrotman: problem is... the ncurses interface is broken for me right now (own stupidity, never mind that). I suppose it can be set directly in some config file? |
| 14:31.36 | chops | troubled: Every 2 years we are using worthless security. If you fall 2 years behind in your security, you will be insecure. The trick is to find out about sooner than the bad people do. |
| 14:31.39 | porncake | im having a problem with hd speed |
| 14:31.40 | isaac | uhm, I am trying to get my iSight working on Debian, but ift-extract says "bad firmware length" or similar, any one got it working? |
| 14:31.44 | sandman | Is there a way to have a VServer use a host-based IP address, and not NAT? |
| 14:31.46 | themill | Here's the start of a simpler explanation on the SSL key thing that we can point users to: http://wiki.debian.org/SSLkeys .... please hack at it and add more details where appropriate. |
| 14:32.00 | porncake | <PROTECTED> |
| 14:32.02 | troubled | chops: nod |
| 14:32.05 | abrotman | slougi: yeah .. moment |
| 14:32.06 | porncake | on uw320 scsi disks |
| 14:32.10 | porncake | anyone have any idea how it can be that slow |
| 14:32.10 | bartc | themill: thanks |
| 14:32.16 | stew | themill: update the factoid? |
| 14:32.32 | moshii | porncake: debian version, hardware, tests that prove your issue.. in one line, back of a postcard if you wish |
| 14:33.09 | porncake | quad xeon, pci-x raid card, uw320 scsi disks, (Debian 2.6.18.dfsg.1-18etch1) |
| 14:33.12 | themill | stew: done |
| 14:33.24 | abrotman | slougi: you can edit (make a backup first) /var/cache/debconf/config.dat .. change it from Dialog to Readline |
| 14:33.32 | moshii | porncake: what do the specs says for that card and disks? |
| 14:33.44 | slougi | abrotman: thanks a lot |
| 14:33.49 | porncake | should do at least 220mb/s |
| 14:33.49 | stew | themill: thanks |
| 14:33.55 | *** join/#debian monstar-x (n=gnu@p57B8D025.dip.t-dialin.net) |
| 14:34.02 | *** join/#debian sdiz (n=sdiz@freenet/developer/j16sdiz) |
| 14:34.03 | porncake | 55mb/s is normal ata :( |
| 14:34.11 | *** part/#debian isaac (n=isaac@debian/developer/isaac) |
| 14:34.21 | RichiH | http://lists.debian.org/debian-security-announce/2008/msg00152.html |
| 14:34.31 | abrotman | slougi: make sure you change the right stanza .. should say like debconf/frontend |
| 14:34.45 | moshii | porncake: check dmesg, and that you don't have lots of io load somwhere... like swapping out |
| 14:34.46 | troubled | RichiH: aye, been a heated discussion the last hour or so |
| 14:34.48 | *** join/#debian minus198 (n=asdf@c83-250-74-212.bredband.comhem.se) |
| 14:35.09 | Bushmills | porncake: scsi doesn't make one single hard disk faster - scsi benefits are when using several disks on the same bus. |
| 14:35.21 | porncake | its 4 disks same bus bushmills |
| 14:35.25 | troubled | RichiH: possible that im going to have to redo my entire system since i used crypted install (luks) which might be using openssl generated keys :( |
| 14:35.26 | porncake | nothing in dmesg |
| 14:35.48 | RichiH | troubled: yah |
| 14:35.51 | moshii | porncake: are those 4 disks in a RAID of some sort though? |
| 14:35.54 | RichiH | i am in yay mode right now, as well |
| 14:35.57 | porncake | yes raid0 |
| 14:35.59 | *** join/#debian vinsci (n=vinsci@unaffiliated/vinsci) |
| 14:36.02 | slougi | abrotman: yeah i noticed that, and it works. thanks again :) google was nowhere near as helpful |
| 14:36.03 | Bushmills | porncake: how do you measure? |
| 14:36.06 | *** join/#debian K_Dallas (i=Korben@i209-195-81-195.cia.com) |
| 14:36.07 | porncake | hdparm |
| 14:36.18 | *** join/#debian minus198_ (n=asdf@c83-250-74-212.bredband.comhem.se) |
| 14:36.26 | Bushmills | hdparm tests I/o to/from one single disk? |
| 14:36.26 | abrotman | slougi: i am google! |
| 14:36.27 | moshii | porncake: you noted the fact that the hdparm test isn't all that good didn't you? |
| 14:36.34 | porncake | its 15krpm disks |
| 14:36.38 | porncake | i tested /md0 |
| 14:36.51 | *** join/#debian bluesceada_ (n=itsjustm@unaffiliated/bluesceada) |
| 14:36.58 | troubled | RichiH: luks as well? Well, im not positive it applies to it, but cryptsetup I used gen-ssl-key as I told these guys, which calls "openssl enc -aes-256-cbc -e -salt -in $key -out $1". So im worried (only minor since they still need to steal my pc/hd) |
| 14:37.09 | moshii | porncake: iirc it's just a linear read.. |
| 14:37.11 | porncake | on my other 2 boxes hdparm shows at least 200mb/s with inferior hardware |
| 14:37.30 | Bushmills | that is, soft raid? i'\d probably go for hard raid for performance |
| 14:37.36 | moshii | porncake: check you haven't got something thats causing io load,... |
| 14:37.46 | moshii | Bushmills: modern cpus can do RAID just fine |
| 14:37.58 | Iradieh | http://navies.hopto.org:6900/1777B/As_I_Lay_Dying_-_This_is_Who_We_Are |
| 14:38.01 | porncake | moshii: how would you suggest doing that? |
| 14:38.08 | abrotman | Iradieh: wrong channel ? |
| 14:38.10 | slougi | abrotman: :o you scare me now |
| 14:38.10 | Iradieh | Ops sorry, can anyone see the picture |
| 14:38.11 | Iradieh | http://navies.hopto.org:6900/ |
| 14:38.12 | stew | Bushmills: software raid is often more performant than hardware raid |
| 14:38.12 | moshii | Bushmills: and you don't have to put up with vendo specific disk formats etc |
| 14:38.14 | porncake | vmstat doesnt show anything |
| 14:38.21 | slougi | abrotman: so you're a bit like skynet then? ;) |
| 14:38.26 | RichiH | troubled: if it uses openssl on debian or ubuntu and has been done since 0.9.8c-1, you are fucked |
| 14:38.27 | moshii | Bushmills: *vendor |
| 14:38.29 | Iradieh | abrotman: can you see the picture/art http://navies.hopto.org:6900/ |
| 14:38.31 | abrotman | slougi: kidding! |
| 14:38.37 | *** join/#debian ray_`24 (n=raytruz_@74-138-37-35.dhcp.insightbb.com) |
| 14:38.38 | moshii | porncake: atop might help |
| 14:38.42 | abrotman | Iradieh: i see a picture that looks like a house .. not sure what i'm really looking for |
| 14:38.45 | sandman | This may seem like a dumb question, but... if the superblock is copied so many times depending on the size of the partition, doesn't that render it okay to just have one big partition? |
| 14:38.46 | RichiH | troubled: the 'good' thing is, you can be pretty certain _everything_ is affected |
| 14:38.54 | Iradieh | abrotman: http://navies.hopto.org:6900/?gallery is it bigger? |
| 14:38.56 | porncake | moshii: installing it now |
| 14:39.00 | sandman | That is, it's not really any less safe to use one big partition versus many small ones, except for perhaps the performance penalty |
| 14:39.01 | *** join/#debian Havis_ (n=Havis@adsl-dyn17.78-99-145.t-com.sk) |
| 14:39.17 | abrotman | yes |
| 14:39.25 | porncake | doesnt show anything strange |
| 14:39.33 | sandman | (there is, of course, the possibility of /tmp growing too much, of course, but aside from those things. I'm speaking only in the realm of fs corruption) |
| 14:39.33 | *** join/#debian piju (n=x@121.120.46.19) |
| 14:39.44 | moshii | porncake: it should show io load after a while.. |
| 14:39.51 | troubled | RichiH: well, what im not clear on is if it applies to symmetric only or not. But if its anything openssl, then I think that means every debian install using crypto :( Either way, might be offline for a few days when I finally decide to redo this. Have fun with your setup :) |
| 14:39.58 | moshii | porncake: but to be honest, hdparm isn't a good test |
| 14:40.01 | porncake | moshii: i'll let it run for a bit |
| 14:40.12 | *** join/#debian kjs (n=kjs@mx1.vm.bytemark.co.uk) |
| 14:40.12 | porncake | well i've tried it on transfers and it maxes at about 60mb/s |
| 14:40.18 | porncake | which is waaaay too slow for this hardware |
| 14:40.27 | troubled | porncake: pci card? |
| 14:40.32 | porncake | pci-x |
| 14:40.33 | RichiH | troubled: does it use the random generator (yes, it does)? if yes (see before), you are affected |
| 14:40.40 | RichiH | it is really quite simple |
| 14:40.43 | *** join/#debian pjz (n=pj@zachs.place.org) |
| 14:40.49 | troubled | porncake: nm then. was thinking 66mb pci but clearly thats not your case :) |
| 14:40.52 | *** part/#debian bitshuffler (n=bitshuff@unaffiliated/bitshuffler) |
| 14:40.53 | RichiH | the chances you are not affected go towards 0 |
| 14:41.01 | pjz | does the debian xen kernel handle >2G of RAM? |
| 14:41.09 | pjz | will it use it if I have it? |
| 14:41.24 | antgel | anyone know offhand how large a base debian install is - let's say no tasks selected, but with xorg |
| 14:41.30 | abrotman | 42 |
| 14:41.31 | troubled | RichiH: thats what im thinking. Just wondering at this point if they are going to mention that to people or if everyone understands how serious this is |
| 14:41.40 | moshii | troubled: pci bw is 66mb? |
| 14:41.47 | *** join/#debian CrazyEddy (n=CrazyEdd@wrongplanet/CrazyEddy) |
| 14:41.55 | abrotman | pci2 ? |
| 14:42.00 | *** mode/#debian [+l 864] by debhelper |
| 14:42.15 | porncake | moshii: no io yet |
| 14:42.23 | *** join/#debian apt_get (n=apt_get@setinet.com.br) |
| 14:42.38 | moshii | porncake: well, I reckon it's a case that hdparm isn't good from your hardware then |
| 14:42.38 | *** join/#debian belial_ (n=belial@sb.7k.km.ua) |
| 14:42.45 | troubled | moshii: think thats the pci throughput, 33mhz clock, but that doesnt work math wise with 32bit :/ |
| 14:43.02 | apt_get | how can I downgrade libc6? i had make a mistake, upgrade from etch to lenny... and want get back |
| 14:43.04 | RichiH | troubled: i suspect almost no one understands it |
| 14:43.05 | porncake | moshii: hdparm is just to get a number using normal file transfers it doesnt get above that speed either |
| 14:43.13 | porncake | i dont think hdparm is capping my disk spee |
| 14:43.13 | porncake | d |
| 14:43.17 | moshii | troubled: newer slots are 66mhz I think,.. 32bit wide |
| 14:43.49 | Iradieh | drwxr-xr-x@ <-- what does the @ do ? |
| 14:43.51 | moshii | porncake: hdparm doesnt give a shit about files,... it justs does reads from the block device |
| 14:43.58 | mike1o | format_c, "Unrecognized device string" error confirmed :( |
| 14:44.01 | porncake | yes but on files its slow as well |
| 14:44.06 | *** part/#debian belial_ (n=belial@sb.7k.km.ua) |
| 14:44.24 | porncake | so im trying to figure out a way to get my box faster, hdparm doesnt have anything to do with that but it can show if speed has improved, seeing it shows fast speed on my other boxes |
| 14:44.38 | troubled | moshii: ya, seems i was half: peak transfer rate of 133 MB/s (133 million bytes per second) for 32-bit bus width (33.33 MHz × 32 bits ÷ 8 bits/byte = 133 MB/s) |
| 14:44.40 | *** join/#debian omry_|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 14:44.41 | moshii | porncake: do the other boxes have the same raid setup? |
| 14:45.15 | *** part/#debian apt_get (n=apt_get@setinet.com.br) |
| 14:45.16 | troubled | RichiH: I can barely understand it since I still dont know the actual problem. Guess ill have to look at the patches and dig deeper so I can be sure of a fix |
| 14:45.20 | porncake | yes |
| 14:45.24 | porncake | but lesser raid cards |
| 14:45.30 | antgel | abrotman: was 42 ^^ for me? |
| 14:45.34 | l403 | could someone help me solve these xorg font errors? http://pastebin.com/m2a74e3f3 |
| 14:45.37 | *** join/#debian defected (n=rej@adsl27-120.kln.forthnet.gr) |
| 14:45.39 | moshii | troubled: yeah, actual speed would depend on if the device can bus master,.. if the pci bus is broken etc |
| 14:45.39 | abrotman | antgel: yeah .. |
| 14:45.40 | *** join/#debian DerHorst (n=Horst@e176097043.adsl.alicedsl.de) |
| 14:45.50 | porncake | example on a slow 1800mhz bot with normal disks (non 15krpm): Timing buffered disk reads: 338 MB in 3.00 seconds = 112.66 MB/sec |
| 14:45.54 | antgel | 42 what? |
| 14:45.55 | abrotman | antgel: base install is 250MB or so IIRC .. i'd say 'xorg' depends on the WM you choose |
| 14:45.56 | porncake | twice the speed of 15krpm scsi drives |
| 14:46.01 | moshii | porncake: what if you test the disks not the md device |
| 14:46.04 | themill | stew: nice tip about ssh-keygen -R hostname; I was just using vi.... :) |
| 14:46.05 | antgel | abrotman: no wm |
| 14:46.14 | troubled | moshii: aye. was just thinking it was 66mb/s for some reason and he was hitting the max, but clearly that isnt the case with pci-x he has anyways |
| 14:46.15 | porncake | same thing |
| 14:46.15 | antgel | abrotman: THANX MOFO! |
| 14:46.23 | *** part/#debian m_dige (n=mdige@dupont.control.auc.dk) |
| 14:46.24 | abrotman | antgel: what? |
| 14:46.54 | sdx | the load avg values have max 100? |
| 14:47.01 | sdx | at the uptime command |
| 14:47.17 | moshii | troubled: I think it's more a case that hdparms tests are crap for anything other than checking dma is enabled, and he's testing the raid array opposed to the disks |
| 14:47.26 | *** join/#debian dirk__ (n=dirk@cc955125-a.groni1.gr.home.nl) |
| 14:47.30 | Bushmills | abrotman: probably his peculiar way to show gratitude |
| 14:47.43 | Dewi | laughs. |
| 14:47.48 | abrotman | Bushmills: he was trying to raise my kingsley stats! |
| 14:48.07 | *** join/#debian Rprp` (n=Rprp@cc763024-b.groni1.gr.home.nl) |
| 14:48.10 | abrotman | antgel: i'd guess 500MBish .. maybe a bit less .. really depends on your WM and associated X tools |
| 14:48.13 | *** join/#debian nse (i=leo@2011218646.rec.megazon.com.br) |
| 14:48.28 | RichiH | troubled: there is not much to understand |
| 14:49.07 | stew | antgel: i was barely able to get etch onto a 512 mb usb key with xfce, but it required a shoehorn |
| 14:49.08 | troubled | RichiH: let me reword, I am not sure if the debian etch installer luks used openssl like cryptsetup's gen-ssl-key used |
| 14:49.11 | RichiH | troubled: everything that used openssl of debian/ubuntu in the last two years and in the widest sense to generate random numbers is insecure by default |
| 14:49.26 | kjs | lol @ this openssl sploit |
| 14:49.32 | RichiH | troubled: etch did have that problem |
| 14:49.37 | abrotman | you think it's funny? |
| 14:49.39 | stew | if i recall, a documentation deleting shoehorn that is |
| 14:49.42 | troubled | RichiH: so you can confirm me that luks installs used openssl? |
| 14:49.52 | troubled | RichiH: sorry, im not a debian installer internal guru :/ |
| 14:50.04 | sandman | Hrm. I just created a vserver, and tried to ssh into it, only to discover that it won't let me log in. |
| 14:50.05 | antgel | stew: meh, docs are useless :) |
| 14:50.07 | RichiH | troubled: i can't. but if it does, you are sol |
| 14:50.14 | RichiH | troubled: ask #debian-boot on oftc |
| 14:50.20 | *** join/#debian CremonaMeGenui1 (n=CremonaM@194.244.37.210) |
| 14:50.23 | troubled | i do recall getting into a heated argument about luks on the install a year ago though, funnny enough :) |
| 14:50.32 | mike1o | is the partition where I have the windows directory the one where grub should point at during boot? |
| 14:50.55 | troubled | mind you my argument was about zeroing the crypto parttiion being bad |
| 14:51.27 | *** join/#debian somnorosul (i=somnoros@194.116.201.52) |
| 14:53.05 | *** join/#debian John (n=chatzill@58.33.174.43) |
| 14:53.15 | *** join/#debian freqmod_qu (n=quassel@2001:700:300:1800:213:d3ff:fee9:5ed0) |
| 14:53.28 | kjs | abrotman: no i think its shamful |
| 14:53.43 | abrotman | kjs: just keep quiet |
| 14:53.59 | kjs | :) |
| 14:54.01 | *** join/#debian n30 (n=n30@213.101.208.245) |
| 14:54.21 | *** join/#debian duque (n=chatzill@201.230.156.157) |
| 14:54.24 | kjs | 15:53 < kjs> abrotman: no i think its shamful |
| 14:54.40 | moshii | troubled: you shouldn't zero it, you should fill it with predictable random material |
| 14:54.55 | *** part/#debian kjs (n=kjs@mx1.vm.bytemark.co.uk) |
| 14:55.25 | *** join/#debian n30 (n=n30@213.101.208.245) |
| 14:55.27 | *** join/#debian pksharma (n=email@59.93.254.148) |
| 14:55.55 | *** join/#debian Spida (n=timo@ns1.spinnennetz.org) |
| 14:56.04 | sandman | Is there a way to setup "bridged" networking in a vserver guest? |
| 14:56.34 | *** join/#debian eth01 (i=foo@gentoo/user/eth01) |
| 14:56.55 | duque | But, I dont know how to run "make menuconfig" |
| 14:57.02 | duque | Sorry. |
| 14:57.29 | troubled | moshii: clearly, but the installer might be just format it and be done with it. My take was that it should be a 20 hours dd if=/dev/urandom of=/mounted/crypted/part, instead |
| 14:57.34 | stew | duque: why do you want to? |
| 14:57.35 | duque | But, I dont know how to run "make menuconfig"? http://www.debian.org/doc/manuals/securing-debian-howto/ap-bridge-fw.en.html This url says I need to run that, but I believe that it lacks something. |
| 14:58.16 | stew | duque: your kernel already has those options |
| 14:58.24 | *** join/#debian holycow (n=new@mail.wjsgroup.com) |
| 14:58.30 | duque | how I know? |
| 14:59.05 | stew | duque: grep NETFILTER /boot/config-$(uname -r) |
| 14:59.14 | duque | stew: ok |
| 14:59.14 | moshii | troubled: the predictable bit was a joke,... I suppose it zero's the disk for speed, but really is should be filling it with entropy so that the encrypted stuff is less easy to detect |
| 14:59.59 | *** join/#debian rfufu (n=ref@LRouen-151-73-54-113.w80-13.abo.wanadoo.fr) |
| 15:00.08 | *** join/#debian icenine (n=tom@207-180-158-56.c3-0.wak-ubr1.sbo-wak.ma.cable.rcn.com) |
| 15:00.20 | troubled | moshii: that was basically my take on it, but I suppose zero is fine since lets face it, the gov doesnt need crypto to take over your box and even xor is strong enough to thwart most people |
| 15:00.22 | *** join/#debian balibalo (n=chatzill@116samana78.codetel.net.do) |
| 15:00.25 | *** part/#debian slougi (n=slougi@gw2.clarifiednetworks.com) |
| 15:00.54 | moshii | troubled: disk encryption only affects hackers that steal machines |
| 15:01.11 | moshii | troubled: and don't wire them to a battery before the said theft |
| 15:01.24 | *** part/#debian jaggz- (n=brandon@dsl081-044-035.lax1.dsl.speakeasy.net) |
| 15:01.27 | *** join/#debian pksharma (n=email@59.93.254.148) |
| 15:02.09 | petemc | or dump the contents of ram |
| 15:02.25 | moshii | indeed |
| 15:02.30 | *** join/#debian dpm (n=dpm@p54A111F2.dip0.t-ipconnect.de) |
| 15:03.37 | troubled | moshii: ya, im not too woried though since stealing the pc is the only case where someone would have to break my crypto and gov's would just use one of 50 diff ways to trojan a machine. |
| 15:04.28 | *** part/#debian pksharma (n=email@59.93.254.148) |
| 15:05.02 | moshii | troubled: I would guess "the government" has their fair share of cryptographers |
| 15:05.03 | *** join/#debian piju (n=x@121.120.46.19) |
| 15:05.36 | *** join/#debian anarcat (n=anarcat@pdpc/supporter/active/anarcat) |
| 15:05.48 | moshii | troubled: I read someone the GCHQ(UK) invented RSA-style encryption years before RSA did,.. ;) |
| 15:05.57 | moshii | troubled: s/someone/somewhere/ |
| 15:06.03 | troubled | moshii: sorry, was just trying to say, I dont care about the gov, and otherwise that leaves hackers which would have to steal my pc to even attempt to break it, and it would be easier to just sploit a daemon and get the files directly |
| 15:06.05 | *** join/#debian shingouz (n=doowop@a91-153-58-118.elisa-laajakaista.fi) |
| 15:06.18 | *** join/#debian trifler_ (i=trifler@farva.bsnet.se) |
| 15:06.20 | moshii | troubled: yup. |
| 15:06.48 | *** join/#debian jojux (n=joju@golomb.math.uni-paderborn.de) |
| 15:07.03 | troubled | also for those following, the guys on oftc seem to suggest that the installer uses cryptsetup to format which doesnt appear to have openssl as a lib, so unlikely a problem |
| 15:07.22 | *** join/#debian shingouz (n=doowop@a91-153-58-118.elisa-laajakaista.fi) |
| 15:07.42 | *** join/#debian FlavourFlav (n=filipe@vs2-84-91-52-199.netvisao.pt) |
| 15:07.42 | *** join/#debian DirtyDawg (i=tom@92-233-244-82.cable.ubr05.benw.blueyonder.co.uk) |
| 15:07.43 | troubled | although cryptsetup hasnt been checked for the problem in case code was copy/pasted, it seems unlikely. also, the openssl was not upstream so again, no worries it seems |
| 15:07.44 | *** join/#debian tonyb486 (n=tonyb@xen1.tonybox.net) |
| 15:07.48 | troubled | RichiH: ^^ |
| 15:07.55 | *** join/#debian fladi (n=fladisch@sh018.meduni-graz.at) |
| 15:08.10 | anarcat | does anyone actually understands how the dowdk.pl works from the dsa1571 advisory? |
| 15:08.19 | *** join/#debian misnix (n=jkr@corona.xs4all.nl) |
| 15:08.23 | liable | exit |
| 15:08.26 | anarcat | from what i see, it just checks keys against a list of known fingerprints... |
| 15:08.32 | troubled | anarcat: dowdk.pl host localhost |
| 15:08.41 | anarcat | troubled: i understand how to use it |
| 15:08.52 | anarcat | i don't understand how it works and that worries me |
| 15:08.54 | troubled | anarcat: if you get non commented output, i think it means you need to regen as someone mentioned earlier |
| 15:08.56 | *** join/#debian liable (n=liable@pdpc/supporter/active/liable) |
| 15:09.13 | *** join/#debian Havis_ (n=Havis@adsl-d32.84-47-124.t-com.sk) |
| 15:09.30 | anarcat | troubled: i understand that part and wouldn't ask about that here unless it was 3AM and would have been up for 18 hours :P |
| 15:09.34 | *** join/#debian funkyou (n=janm@e179132009.adsl.alicedsl.de) |
| 15:09.36 | jojux | hi ! |
| 15:09.43 | troubled | anarcat: :) |
| 15:09.55 | anarcat | now it's the morning, my mind is clear, i read through the source, and still don't understand how that script is supposed to do anything |
| 15:09.57 | jojux | how is the name for the package to configure the mac80211 stack ? |
| 15:09.58 | anarcat | and i'm not alone :) |
| 15:10.05 | troubled | anarcat: sorry, were all kinda up in arms trying to fully understand all this atm too, you arent alone |
| 15:10.33 | anarcat | troubled: i think i got the threat right, it's just the freakin script that confuses me |
| 15:10.38 | anarcat | i should probably just leave it out |
| 15:10.46 | *** join/#debian tmske (n=thomas@kotnet-149.kulnet.kuleuven.be) |
| 15:10.49 | troubled | ya, i was a little confused by its output |
| 15:11.21 | troubled | im sure they didnt want to spend a week polishing a script like that given the nature of the problem though |
| 15:11.23 | mike1o | I wrote over my first partition's MBR as I installed debian... I have windows on /dev/hda5 I modified my /boot/grub/menu.lst http://paste.debian.net/2845/ but I got an "unregognized device string" error |
| 15:11.46 | *** join/#debian liable (n=liable@pdpc/supporter/active/liable) |
| 15:12.14 | *** part/#debian vinsci (n=vinsci@unaffiliated/vinsci) |
| 15:12.22 | *** join/#debian tip_1 (n=kansu@88.229.118.199) |
| 15:12.23 | *** join/#debian trifler (i=trifler@farva.bsnet.se) |
| 15:12.26 | *** join/#debian i_am_ed (n=ed@80.175.128.209) |
| 15:12.38 | chops | anarcat: If you use 'dowkd.pl host localhost', you'll see '1.2.3.4: weak key' for any hosts that have weak ssh keys |
| 15:12.55 | troubled | chops: ahh, thanks for clearing that up |
| 15:13.09 | anarcat | chops: i understand that it's magic and all. i want to know how that magic works. |
| 15:13.11 | troubled | huh, wonder why my keys are safe :/ |
| 15:13.19 | chops | Yeah, notwithstanding "The Unix Way", it really should give an output if all the keys it scans are safe |
| 15:13.39 | *** join/#debian lnostdal (i=lars@149-36-67.oke2-bras5.adsl.tele2.no) |
| 15:14.45 | lnostdal | hm, quick question .. at the "Software Updates" dialog the "Changes" pane doesn't display any changes .. i'm assuming some .gnome/* thing has gone stale or something .. anyone know how to fix this? |
| 15:15.02 | *** join/#debian bAndie91 (n=sysop@szerver2.sztistvan-mako.sulinet.hu) |
| 15:15.06 | *** join/#debian procdaemon (n=procdaem@adsl-070-145-047-210.sip.aby.bellsouth.net) |
| 15:15.12 | *** join/#debian Sergiu1 (i=sergiu@87.255.79.154) |
| 15:15.22 | Sergiu1 | hello |
| 15:15.42 | Sergiu1 | anyone know, how to disable the "Granted permissions without asking for password" |
| 15:16.27 | Bushmills | the program says "ok", what key should i press now? |
| 15:16.43 | stew | Sergiu1: where are you seeing that message? |
| 15:16.54 | Sergiu1 | couz if i enter the wrong password, the system will remember this wrong password.. |
| 15:17.12 | Sergiu1 | stew, when using gksudo apt-get update for example |
| 15:17.14 | thrope | hi - just caught the tail end of ssl discussion - does anyone have a link (where to get the dowdk.pl) |
| 15:17.28 | *** join/#debian bitshuffler (n=bitshuff@unaffiliated/bitshuffler) |
| 15:17.35 | themill | thrope: http://lists.debian.org/debian-security-announce/2008/msg00152.html |
| 15:17.36 | anarcat | thrope: http://lists.debian.org/debian-security-announce/2008/msg00152.html http://security.debian.org/project/extra/dowkd/dowkd.pl.gz |
| 15:17.37 | *** join/#debian talexb (n=abeamish@216.235.10.210) |
| 15:17.52 | thrope | thanks |
| 15:18.08 | anarcat | so from discussions with other people obviously more enlightened than me, i think i now understand how the script works |
| 15:18.36 | anarcat | the whole vulnerability is that some condition makes it so that the initialisation vector for the random number generator doesn't get properly initialised |
| 15:18.47 | anarcat | and will yield predictable (ie. non-random) data |
| 15:18.55 | bAndie91 | hi all! |
| 15:19.05 | *** part/#debian Sergiu1 (i=sergiu@87.255.79.154) |
| 15:19.08 | bAndie91 | can u help me in wireless support? |
| 15:19.09 | anarcat | the dowkd script just list the fingerprint of all keys generated in that condition |
| 15:19.14 | anarcat | if you have a match, you're screwed |
| 15:19.29 | anarcat | i'd be very curious as to how those fingerprints were generated though |
| 15:20.13 | *** join/#debian dante_2core (n=dante@80-219-138-141.dclient.hispeed.ch) |
| 15:20.20 | ArthurArchnix | anarcat: I suspect with math. |
| 15:20.26 | bAndie91 | there is hotspots with no encryption, ive a wifi card (zd1211rw module). how can i connect to it? |
| 15:20.27 | *** join/#debian gusnan (n=gusnan@h57n7c1o269.bredband.skanova.com) |
| 15:20.41 | chops | anarcat: Probably that information reveals more precisely how to exploit the problem, and so they preferred not to make it public |
| 15:20.48 | talexb | Following the link to dpkg-deb from http://www.penguin-soft.com:80/penguin/man/1/dpkg-source.html gave me a java.lang.NullPointerException. :( |
| 15:20.56 | anarcat | chops: probably |
| 15:21.08 | liable | bAndie91: iwlist scan, pick an ap and configure with iwconfig |
| 15:21.09 | anarcat | chops: i guess i'd need to look more through the source of the actual openssl vuln |
| 15:21.57 | freqmod_qu | noen burde se på http://www.ubuntu.com/usn/usn-612-1 |
| 15:21.58 | talexb | I'm trying to understand how dpkg can be used to set the version number on a package that I'm building .. |
| 15:22.02 | freqmod_qu | sorry |
| 15:22.12 | *** join/#debian mavez (n=mavez@chloepatchmethrough.com) |
| 15:22.13 | chops | talexb: Edit debian/changelog |
| 15:22.17 | *** join/#debian le-dong (n=anna@62.3.229.53) |
| 15:22.22 | bAndie91 | liable, its ok, iwconfig says ok |
| 15:22.25 | mavez | lawl |
| 15:22.26 | talexb | Can the version number only come from the DEBIAN/control file or can I modify it with the svnversion value? |
| 15:22.53 | bAndie91 | liable, i gone to get ip, but dhclient has no result |
| 15:22.53 | liable | bAndie91: so your fixed? |
| 15:22.56 | *** join/#debian Shadow_mil (n=Shaddy@pdpc/active/Shadow-mil) |
| 15:23.00 | talexb | chops, Hmm thanks, I'll look into that. |
| 15:23.09 | liable | bAndie91: does iwconfig show as associated? |
| 15:23.11 | mavez | lol |
| 15:23.19 | chops | talexb: The version number does not come from debian/control |
| 15:23.22 | Shadow_mil | reminds everyone that they are special |
| 15:23.29 | stew | talexb: version number only comes from debian/changelog |
| 15:23.30 | *** join/#debian xored (n=gasdasdf@78.42.51.193) |
| 15:23.50 | bAndie91 | liable, i think there is dhcp |
| 15:24.08 | bAndie91 | liable, because its a public hotspot |
| 15:24.15 | *** join/#debian cahoot (n=radix@pdpc/supporter/active/cahoot) |
| 15:24.36 | mavez | cahoot lolz |
| 15:24.37 | le-dong | Why do women close their eyes during sex? They can't stand to see a man have a good time. |
| 15:24.41 | liable | bAndie91: paste your ifconfig and iwconfig output to a paster |
| 15:24.45 | bAndie91 | liable, iwconfig associated what? |
| 15:25.32 | talexb | stew, chops. Oh. News to me. |
| 15:25.37 | *** join/#debian pgpkeys (i=pgpkeys@neuron.subneural.net) |
| 15:25.49 | *** join/#debian mtn (n=mtn@dpc6746233034.direcpc.com) |
| 15:25.49 | *** join/#debian frog__ (n=frog@p4FD4B7AE.dip0.t-ipconnect.de) |
| 15:25.55 | bAndie91 | liable, i cant at now |
| 15:26.24 | bAndie91 | liable, im not there |
| 15:26.47 | *** join/#debian monstar-x (n=gnu@p57B8D025.dip.t-dialin.net) |
| 15:27.07 | talexb | I have conffiles control postinst in my DEBIAN directory but not changelog. I'm looking for where the changelog's structure is documented. |
| 15:27.22 | bAndie91 | iwconfig: essid: dlink; ap : ab:cd:ef....; mode: managed |
| 15:27.27 | *** join/#debian pksharma (n=email@59.93.254.148) |
| 15:27.34 | chops | talexb: (1) it's debian, not DEBIAN (2) /msg dpkg nmg |
| 15:28.09 | *** join/#debian testi (n=sadeq@85.185.161.7) |
| 15:28.22 | testi | hi guys |
| 15:28.35 | *** part/#debian testi (n=sadeq@85.185.161.7) |
| 15:29.18 | talexb | chops The sub-directory in this (home-grown) package is DEBIAN -- not sure why it's capitalized. I'll try (2), thanks. |
| 15:29.26 | *** part/#debian bitshuffler (n=bitshuff@unaffiliated/bitshuffler) |
| 15:29.39 | bAndie91 | dhclient: no DHCPOFFERS |
| 15:29.50 | chops | talexb: I'd be very surprised if calling it DEBIAN works. |
| 15:29.56 | mavez | lolcaekz |
| 15:30.02 | le-dong | I think its somewhat ironic that Graham Norton is hosting a programme to find a new Nancy. |
| 15:30.24 | *** join/#debian FordCortina_ (n=FordCort@87.114.136.70.plusnet.thn-ag1.dyn.plus.net) |
| 15:31.06 | *** join/#debian duns_s (n=duns_s@mnhm-590f5d49.pool.einsundeins.de) |
| 15:31.14 | *** join/#debian hopson (i=hopsonro@access.cws.oregonstate.edu) |
| 15:31.44 | *** join/#debian foka (n=foka@123.115.242.145) |
| 15:31.56 | *** join/#debian trifler (i=trifler@farva.bsnet.se) |
| 15:32.18 | bAndie91 | no idea? |
| 15:33.09 | bAndie91 | i know sure, there is dhcp server, other people had ip |
| 15:33.10 | *** join/#debian zarnozC (n=linuxz@ti541110a080-0154.bb.online.no) |
| 15:33.59 | *** part/#debian mhymn (i=mhymn@unaffiliated/mhymn) |
| 15:34.01 | *** join/#debian Rienzilla (i=rien@sinas.rename-it.nl) |
| 15:34.05 | *** join/#debian sparr_ (n=sparr@adsl-068-209-017-252.sip.asm.bellsouth.net) |
| 15:34.07 | *** join/#debian [intra]lanman (n=lanman@va-76-6-213-35.dhcp.embarqhsd.net) |
| 15:34.11 | bAndie91 | everyone left? |
| 15:34.18 | mavez | no lols |
| 15:34.20 | mavez | am here |
| 15:34.28 | themill | bAndie91: everyone's a little preoccupied today.... |
| 15:34.37 | liable | bAndie91: if you cant give us the info for when you are connected, its hard to help debug |
| 15:34.52 | *** join/#debian DawnLight (n=dawn@62.56.253.195) |
| 15:35.00 | *** join/#debian prh-x (n=prh@mjr.org) |
| 15:35.01 | Maliuta | bAndie91: that themill said .... and we don't really care |
| 15:35.04 | bAndie91 | what for info do u need? |
| 15:35.05 | chops | bAndie91: Someone asked you for information about your setup and you said you couldn't provide it... that's often the end of people trying to help you :-/ |
| 15:35.22 | liable | Maliuta: eh, dont be a prick |
| 15:36.14 | bAndie91 | so when i run dhclient, it says, no dhcpoffers |
| 15:36.16 | mavez | haha |
| 15:36.56 | hopson | I keep seeing references to a page at http://www.debian.org/security/key-rollover/ but it's a 404; does anyone know if that is still a work in progress? |
| 15:36.56 | Maliuta | liable: I'll be a prick as long as people a) ask questions before RTFM. b) ask stupid questions. c) expect people to fix all problems while providing no information. And last, but not least d) whenever the hell I feel like it :) |
| 15:36.59 | chops | Well, I think I have an idea how to modify dowkd.pl to parse .pem files also, but I've figured out by hand that none of my .pem files are vulnerable, so I can't really test it (and also I've lost my primary motivation for making that change :-) |
| 15:37.06 | mavez | Maliuta prick |
| 15:37.12 | mavez | :D |
| 15:38.02 | keith4 | Maliuta: while we're on the topic of being a prick... d) doesn't quite parse correctly |
| 15:38.07 | bAndie91 | i cant provide the config about the wireless network, because it dont work |
| 15:38.15 | *** join/#debian aurehman (n=chatzill@202.59.70.210) |
| 15:38.18 | *** join/#debian behanw (n=behanw@S0106000f66915cc8.vc.shawcable.net) |
| 15:38.20 | mavez | lol |
| 15:38.27 | keith4 | bAndie91: just because the network isn't encrypted, does not necessarily mean you'll be able to use it |
| 15:38.29 | cahoot | !lol |
| 15:38.30 | dpkg | If you want to laugh, use heh or hah or bwahahaha. lol doesn't sound like laughter at all and makes you look like an AOL user. |
| 15:38.40 | bAndie91 | i must be at other place, where i can reach the net |
| 15:38.40 | liable | bAndie91: we cant help if you cant supply the info we ask. if you are no longer connected to the network, your out of luck |
| 15:38.48 | chops | I think that calling "openssl x509 -in /blah/blah/blah.pem -fingerprint -noout" will give the fingerprint for a .pem file, which can then be parsed and checked by logic basically equivalent to that in ssh_fprintf_check(). |
| 15:38.49 | aurehman | Hi.. I need to install GD Version bundled (2.0.34 compatible) in php.. how can i do this? |
| 15:38.54 | mavez | lol |
| 15:39.05 | le-dong | What's better than roses on a Piano?Two-lips on an Organ! |
| 15:39.08 | chops | bAndie91: Someone asked you for the output of ifconfig and iwconfig, and you said you couldn't give him that. |
| 15:39.17 | sdx | how can i see the space a dir takes up? |
| 15:39.30 | Maliuta | sdx: du |
| 15:39.37 | aurehman | anybody help me |
| 15:39.41 | chops | bAndie91: You being in a situation where that's difficult to provide doesn't magically mean that we'll be able to help you without being able to find out more about your situation. |
| 15:39.45 | Maliuta | sdx: read the man page |
| 15:39.46 | keith4 | !tell aurehman about search |
| 15:39.47 | bAndie91 | ifconfig says eth1 interface ok |
| 15:40.04 | mavez | does debian have a no lolz policy? |
| 15:40.06 | mavez | like python |
| 15:40.08 | bAndie91 | and has no ip |
| 15:40.39 | aurehman | keith4 i tried a lot.. but unable to succed |
| 15:40.39 | bAndie91 | iwconfig says connected to an ap signal level ca. 30% |
| 15:40.46 | *** join/#debian Jussi (n=jussi@port190.ds1-abc.adsl.cybercity.dk) |
| 15:40.49 | *** join/#debian Holborn (n=holborn@unaffiliated/holborn) |
| 15:40.52 | chops | mavez: Not a policy, more of a preference |
| 15:41.19 | *** join/#debian keram` (n=marek@s77-27.resnet.ucla.edu) |
| 15:41.21 | mavez | lawl |
| 15:41.30 | keith4 | bAndie91: there could be a dozen things stopping that from working |
| 15:41.47 | *** join/#debian Deetz (n=Paul@host185.natpool.mwn.de) |
| 15:41.51 | bAndie91 | dhclient says no dhcp offers |
| 15:41.55 | *** join/#debian monstar-x (n=gnu@p57B8D025.dip.t-dialin.net) |
| 15:42.04 | keith4 | it could be MAC-address filtered, it could be not using DHCP, it could be set to not give out dynamic addresses to unknown clients, etc. |
| 15:42.48 | *** join/#debian StucKman_ (n=mdione@host21.190-137-100.telecom.net.ar) |
| 15:42.52 | bAndie91 | keith4, i sure there is no filtering and there is be dhcp server |
| 15:43.20 | bAndie91 | because other people can connect to |
| 15:43.20 | efaistos_ | does some use the iwl3945 driver ? |
| 15:43.37 | *** part/#debian StucKman_ (n=mdione@host21.190-137-100.telecom.net.ar) |
| 15:43.37 | pgpkeys | !tell us about ask |
| 15:43.38 | dpkg | pgpkeys wants you to know: If you have a question, just ask! For example: "I have a problem with ___; I'm running Debian version ___. when I try to do ___ I get the following output ___. I expected it to do ___." Don't ask if you can ask, or if anyone uses it, or pick one person to ask (ask the whole channel!). We're all volunteers; make it easy for us to help you. If you don't get an answer, ask later or ask debian-user@lists.debian.org |
| 15:43.44 | sparr_ | My home LAN uses the 192.168.1.* subnet. A VPN I am connecting to uses the same. How can I re-map one of them locally? |
| 15:44.02 | themill | efaistos_: assume yes and ask your real question |
| 15:44.04 | bAndie91 | that driver not used |
| 15:44.17 | talexb | Apparently the dpkg bot thinks I am moron #10. Does that mean nine of you are dumber than me? |
| 15:44.28 | chops | sparr_: The best thing is to tell the VPN administrator not to use that range; that problem will affect many, many clients. |
| 15:44.33 | bAndie91 | zd1211rw module loaded |
| 15:44.35 | pgpkeys | no it just means it found 9 others like you |
| 15:44.53 | sparr_ | chops: sure. lets assume i actually want an answer to the question i asked, though. |
| 15:45.12 | cahoot | bAndie91: firmware in place and correct version? |
| 15:45.37 | keith4 | sparr_: the answer is really that you're SOL |
| 15:45.43 | pgpkeys | then reorder your network. if they are using the same IP range as you, then you either have to add another range on your side and use IT, or remove your existing range |
| 15:46.02 | *** join/#debian vinc456 (n=user@S010600095bc42e81.cg.shawcable.net) |
| 15:46.03 | pgpkeys | either way, you have to change one side of the equation |
| 15:46.07 | sparr_ | keith4: i am very doubtful of that |
| 15:46.08 | bAndie91 | i ve zd1211-firmware zd1211-module from official debian package |
| 15:46.08 | *** join/#debian _eggy_ (n=mark@eggy.student.utwente.nl) |
| 15:46.09 | *** join/#debian Zesturian (n=zest@unaffiliated/zesturian) |
| 15:46.20 | sparr_ | i will be quite surprised if there is no way to remap network ranges |
| 15:46.20 | pgpkeys | sparr_ - you can be as doubtful as you wish. it's the way IPs work |
| 15:46.28 | keith4 | sparr_: doubt away! |
| 15:46.28 | chops | sparr_: You can set up NAT or something, but changing one range or the other is going to be much, much easier. |
| 15:46.31 | cahoot | bAndie91: IIRC the debian fw isn't what you want |
| 15:46.33 | *** join/#debian dutchfish (n=wil@wc-35.r-195-35-167.atwork.nl) |
| 15:46.35 | _eggy_ | what package contains the gnu compiler collection? gcc seems to be only the C compiler and doesnt seem to provide g++ on lenny |
| 15:46.36 | *** join/#debian liable (n=liable@pdpc/supporter/active/liable) |
| 15:46.41 | chops | _eggy_: build-essential |
| 15:46.42 | sparr_ | chops: no, it isnt, because i cant change either range |
| 15:46.45 | pgpkeys | you're remapping the SAME RANGE |
| 15:46.48 | _eggy_ | chops: ok thanks |
| 15:47.01 | cahoot | bAndie91: at least that used to be the case a few months ago |
| 15:47.04 | chops | sparr_: Yes, that's why it's a very bad idea to set up a VPN in that range. |
| 15:47.17 | sparr_ | pgpkeys: on different interfaces. i want to say "192.168.1.* goes to ath0, and 192.168.2.* goes to 192.168.1.* on ppp0" |
| 15:47.31 | *** join/#debian liable (n=liable@pdpc/supporter/active/liable) |
| 15:47.35 | keith4 | i'm thinking you don't understand how a VPN works |
| 15:47.44 | chops | sparr_: Right, that's NAT. Have fun. It's going to take you days to get right, probably. |
| 15:47.47 | pgpkeys | keith4 - I'm in agreeance |
| 15:47.52 | cahoot | bAndie91: http://linuxwireless.org/en/users/Drivers/zd1211rw#Firmware |
| 15:47.54 | sparr_ | pgpkeys: if i had cisco vpn hardware on this side i would know how to do it, but i dont know how to do it in linux |
| 15:48.10 | bAndie91 | cahoot, im going |
| 15:48.46 | cahoot | bAndie91: FYI I use zd1211rw on one laptop - works fine |
| 15:48.51 | pgpkeys | I would really love to know how you'd solve that issue using Cisco anything. |
| 15:49.11 | efaistos_ | themill: still issues to get it working ... |
| 15:49.20 | bAndie91 | apropos on oem cd i found some driver-source |
| 15:49.32 | efaistos_ | did everything taht is on the wiki but didnt really help |
| 15:49.32 | *** join/#debian nyws (n=nyws@83.101.21.161) |
| 15:49.34 | bAndie91 | but i cant compile it |
| 15:49.44 | sparr_ | pgpkeys: we have already done it. all of the business locations use the same subnet, and see each other as different subnets. |
| 15:50.02 | *** join/#debian zly (n=zly@5634dfcf.rev.stofanet.dk) |
| 15:50.03 | thrope | sparr_: its not as simple as just mapping 2.x to 1.x on your end - because how do packets coming from the vpn on the other side know where to go? |
| 15:50.08 | *** part/#debian nyws (n=nyws@83.101.21.161) |
| 15:50.18 | *** join/#debian sodio (n=sodio@va-71-1-140-171.sta.embarqhsd.net) |
| 15:50.23 | cahoot | bAndie91: if you speak about the zd1211 - the kernel supplies a working module (at least since 2.6.19 or so) |
| 15:50.27 | sparr_ | thrope: NAT, in general |
| 15:50.28 | pgpkeys | sparr_ - then they are using different subnets on the edges, and the same subnet internally |
| 15:50.35 | snewp | anyone familiar with dlink 524? it seems identd isnt working .. |
| 15:50.39 | pgpkeys | it's the only way they could even possibly do it |
| 15:50.49 | *** join/#debian squirrelpimp (n=squirrel@HSI-KBW-091-089-005-018.hsi2.kabelbw.de) |
| 15:50.57 | ArthurArchnix | efaistos_: Yes. I do. |
| 15:50.58 | pgpkeys | s/even//g |
| 15:51.01 | *** join/#debian frog_ (n=frog@p4FD4B55D.dip0.t-ipconnect.de) |
| 15:51.13 | extor | When I do a netstat on my webserver I see a lot of TIME_WAIT connections, are these taking up a lot of resources? Can I tweak something to make these die sooner and free up more mem or CPU ticks or whatever? |
| 15:51.14 | squirrelpimp | <PROTECTED> |
| 15:51.15 | thrope | sparr_: yes but I thought you wanted to avoid NAT - someone suggested that would be the only way to do it |
| 15:51.15 | *** join/#debian rafuch0 (n=rafuch0@201.211.220.35) |
| 15:51.33 | *** join/#debian mbroeker (n=mbroeker@BAF8d42.baf.pppool.de) |
| 15:51.33 | *** join/#debian dlight (n=jesper@84.238.69.205) |
| 15:51.38 | chops | pgpkeys: Yes, NAT+VPN is not an unusual configuration. It's a lot saner to do it by mapping different IP ranges, though. |
| 15:51.56 | *** join/#debian jimbo (n=jimbo@dynamic9-38.MAN-B2-1.cablenet.com.ni) |
| 15:51.57 | *** join/#debian eth01 (i=foo@cpc2-stkp3-0-0-cust381.manc.cable.ntl.com) |
| 15:52.00 | *** join/#debian Paivakil (n=paivakil@unaffiliated/paivakil) |
| 15:52.01 | *** mode/#debian [+l 870] by debhelper |
| 15:52.04 | sparr_ | thrope: i dont want to avoid NAT, i just dont know how to set it up in linux |
| 15:52.05 | chops | sparr_: Tell the VPN administrator to pick the local range using: echo 10.`head -c1 /dev/urandom | od -t u1 -An`.`head -c1 /dev/urandom | od -t u1 -An`.0/24 |
| 15:52.07 | *** join/#debian DirtyDawg (i=tom@92-233-244-82.cable.ubr05.benw.blueyonder.co.uk) |
| 15:52.17 | keith4 | hah |
| 15:52.19 | chops | sparr_: That's a good sustainable solution |
| 15:52.28 | *** join/#debian milligan_ (n=Milligan@66.84-49-202.nextgentel.com) |
| 15:52.29 | *** join/#debian _keitherz_ (n=keitherz@122.53.174.71) |
| 15:52.55 | keith4 | sparr_: the cisco equipment probably double-NATs. so, you're 192.168.1.0, and the other side is 192.168.1.0, but in the middle, it's 10.0.75.0 or something |
| 15:53.06 | efaistos_ | ArthurArchnix: I tried different things but cant have it working ... how did you setup it ? |
| 15:53.06 | thrope | sparr_: look up iptables - a normal internet access nat (SNAT) is one line, but I think for what you want it's going to be a bit more complicated |
| 15:53.20 | squirrelpimp | is it known, that the dowkd.pl utility published to check for vulnerable keys does not work on ubuntu? |
| 15:53.20 | sparr_ | thrope: im looking at the iptables docs, but its going to take a while |
| 15:53.26 | *** part/#debian Paivakil (n=paivakil@unaffiliated/paivakil) |
| 15:53.29 | *** join/#debian Holborn (n=holborn@unaffiliated/holborn) |
| 15:53.29 | squirrelpimp | an yes, i know this is not #ubuntu |
| 15:53.31 | chops | sparr_: We dealt with the pain of renumbering all our local IPs a few years back to solve exactly this problem, and it was a huge problem but still less painful than setting up NAT+VPN and dealing with all the associated brokenness. |
| 15:53.32 | dutchfish | hi, do i need to generate new ssl keys after the last ssl security fix and what about ssh keys, i understand this was a random number generation fix? |
| 15:53.52 | chops | squirrelpimp: I would expect that utility to still work on Ubuntu, though of course I don't know |
| 15:53.54 | pgpkeys | what they are probably doing is using assigning 2 ranges. IRIP to link the VPNs, internal assignments of 2 subnets (192.168.1|2|.*) with 1 for local (intranet) and 1 for enterprise wide) |
| 15:54.13 | squirrelpimp | chops: it reports "no suitable blacklist" |
| 15:54.20 | chops | squirrelpimp: And, of course, #ubuntu is a much, much more logical place to ask that question. |
| 15:54.29 | squirrelpimp | yes... the xubuntu-folk sent me here |
| 15:54.30 | chops | squirrelpimp: Ah, well there you are. Why did you ask if you knew the answer? :-) |
| 15:54.52 | squirrelpimp | because i don't know what that answer should mean to me |
| 15:54.53 | squirrelpimp | :) |
| 15:54.58 | *** join/#debian fixed_ (n=r00t@gw-staff-ci.fct.unl.pt) |
| 15:55.07 | *** join/#debian |aleksanteri| (n=cogwheel@dsl-sjkbrasgw2-fef8f800-254.dhcp.inet.fi) |
| 15:55.17 | thrope | sparr_, this might help: http://nimlabs.org/~nim/dirtynat.html |
| 15:55.43 | ArthurArchnix | efaistos_: I just installed the iwil firmware and rebooted. |
| 15:55.51 | *** join/#debian piju (n=x@121.120.46.19) |
| 15:56.00 | Bushmills | squirrelpimp: even if it doesn't work on ubuntu, so what? |
| 15:56.12 | *** part/#debian jimbo (n=jimbo@dynamic9-38.MAN-B2-1.cablenet.com.ni) |
| 15:56.12 | *** join/#debian ptw (n=ptw@modemcable178.77-70-69.static.videotron.ca) |
| 15:56.22 | prh-x | anyone know if how exploitable this openssl cockup is? |
| 15:56.30 | chops | prh-x: Exploitable |
| 15:56.37 | extor | Beats me...doesn t seem that serious |
| 15:56.38 | dutchfish | prh-x, i am intrested in that too |
| 15:56.46 | pgpkeys | chops - and I'll bet you he's trying to build *another* VPN connection internally (aka edges are VPN linked, and he's trying to build his own inside) and is running into IP collisions because he's using a range they also use. |
| 15:56.50 | ArthurArchnix | efaistos_: apt-get install firmware-iwlwifi then reboot |
| 15:56.57 | prh-x | chops: know if it's been exploited yet? |
| 15:57.05 | dutchfish | hi, do i need to generate new ssl keys after the last ssl security fix and what about ssh keys, i understand this was a random number generation fix? (etch) |
| 15:57.08 | ArthurArchnix | Oh, efaistos_ I'm using Lenny. I don't think that works on etch. |
| 15:57.18 | squirrelpimp | Bushmills: you get three guesses why it might matter to me |
| 15:57.25 | chops | prh-x: There is no intermediate value of exploitable. It's like being pregnant or dead. |
| 15:57.26 | efaistos_ | ArthurArchnix: didnt worked here ... |
| 15:57.32 | *** join/#debian frog_____ (n=frog@p4FD4B15F.dip0.t-ipconnect.de) |
| 15:57.36 | chops | prh-x: No idea. |
| 15:58.08 | prh-x | chops: :O) true but it could be that an exploit needed to capture an amount of data.. or just prod the server |
| 15:58.11 | Bushmills | squirrelpimp: fix it |
| 15:58.20 | prh-x | chops: or get hold of a public key |
| 15:58.27 | _eggy_ | Exactly what is the "file alteration monitor" ? |
| 15:58.46 | *** join/#debian xored (n=gasdasdf@78.42.51.193) |
| 15:58.47 | chops | prh-x: It's an exploit that can be used, among other things, to hijack an ssh session and make you believe you're talking to the server when in fact you're giving your password to a man in the middle |
| 15:58.48 | prh-x | _eggy_: apt-cache show fam |
| 15:59.06 | mquin | _eggy_: is a system which allows users programs to request that the kernel notify them when a file is changed |
| 15:59.09 | prh-x | chops: are you certain of that? |
| 15:59.13 | squirrelpimp | is there a general way of figuring out if a public part of a key found in an authorized_keys file is affected by the openssl flaw? |
| 15:59.20 | *** join/#debian S^n1x (n=ShangWu@modemcable178.77-70-69.static.videotron.ca) |
| 15:59.34 | _eggy_ | mquin: prh-x ah ok thanks |
| 15:59.42 | dutchfish | chops, so i need to recreate ssh_host_rsa_key and the dsa counterpart? |
| 15:59.47 | *** join/#debian HellTiger (n=HellTige@p5B0CFCA7.dip.t-dialin.net) |
| 15:59.48 | squirrelpimp | as one might not always know which version those keys were generated with? |
| 15:59.53 | _eggy_ | It seems to me to be to specific for a default start |
| 16:00.02 | pgpkeys | wait wait wait wait here. is this openssL or openssH? |
| 16:00.04 | *** join/#debian milardovich (n=milardov@host2.190-224-118.telecom.net.ar) |
| 16:00.12 | pgpkeys | there are distinct differences here. |
| 16:00.24 | dutchfish | its a random generation blooper |
| 16:00.29 | prh-x | pgpkeys: it's a problem with debians openssl - which openssh uses... |
| 16:00.30 | squirrelpimp | pgpkeys: both in that case... with one using the other |
| 16:00.58 | *** join/#debian meff (n=meff@gravity.gordian-knot.spherevision.org) |
| 16:00.58 | pgpkeys | prh-x - thanks for the clarification |
| 16:01.13 | pgpkeys | was reading and unsure which side of the buck had the issue |
| 16:01.16 | *** join/#debian poncha|laptop (n=poncha@gw.teleclalsms.co.il) |
| 16:01.31 | *** join/#debian namit (n=christia@83-70-241-72.b-ras1.prp.dublin.eircom.net) |
| 16:02.53 | *** join/#debian xenosoz_ (n=antispam@222.112.72.106) |
| 16:02.55 | *** join/#debian poncha|laptop (n=poncha@unaffiliated/poncha) |
| 16:02.55 | chops | dutchfish: Yes, see http://wiki.debian.org/SSLkeys |
| 16:02.56 | le-dong | chops, You are awesome! |
| 16:03.16 | *** join/#debian Caoimhin (n=Caoimhin@ANantes-256-1-126-194.w90-12.abo.wanadoo.fr) |
| 16:03.24 | chops | prh-x: Not sure, no. That's my understanding of the nature of the vulnerability. |
| 16:03.27 | dutchfish | chops, thank you Sir |
| 16:03.33 | *** join/#debian isBEKaml (n=nnn@122.164.229.91) |
| 16:03.35 | *** join/#debian Dekcarki (i=rico@port-ip-213-211-248-239.sta.reverse.mdcc-fun.de) |
| 16:03.39 | chops | le-dong: Glad to finally be receiving some recognition :-) |
| 16:04.02 | chops | adds another adjective to the "good things about me" master list |
| 16:04.06 | chops | dutchfish: np |
| 16:04.23 | dutchfish | chops++ |
| 16:04.24 | pgpkeys | chops - damn man. you ever miss a beat? ;) |
| 16:04.34 | *** join/#debian Fox_1_ (n=Vardan@91.103.31.146) |
| 16:04.36 | *** join/#debian a[2121]e (n=Linux@221.85.49.60.trm01-home.tm.net.my) |
| 16:04.39 | Fox_1_ | hi all |
| 16:05.11 | *** join/#debian hiwaypilot (n=Len@oh-65-40-132-135.sta.embarqhsd.net) |
| 16:05.23 | Fox_1_ | people how can I export svn repository folder with all revisions and logs? |
| 16:05.26 | poncha|laptop | i'm trying to log to files on NFS filesystem (the filesystem is on netapp appliance) from several servers, and i get garbage in the logfiles. any idea why and how i can avoid this ? |
| 16:05.37 | aurehman | Hi dear.. i m unable to install gd library in php... anybody guide me |
| 16:06.21 | *** join/#debian mike1o (n=mike@host105-211-dynamic.5-87-r.retail.telecomitalia.it) |
| 16:07.43 | *** join/#debian frog____1 (n=frog@p4FD4B363.dip0.t-ipconnect.de) |
| 16:07.46 | bAndie91 | re |
| 16:08.13 | dutchfish | aurehman, apt-get install php5-gd or if you want php4 php4-gd |
| 16:08.28 | *** join/#debian bier (n=bier@p54A54C6C.dip.t-dialin.net) |
| 16:09.10 | bAndie91 | i get the gzipped file from sf.net, zd1211-fw-1.4 , unpack, follow readme hints |
| 16:09.21 | *** join/#debian Refakki_ (i=refakki@ppp85-140-61-121.pppoe.mtu-net.ru) |
| 16:09.39 | bAndie91 | same as files have i early |
| 16:09.48 | bAndie91 | same as files have i early, which it includes |
| 16:10.13 | *** join/#debian LimCore (n=rafal@unaffiliated/limcore) |
| 16:10.19 | LimCore | facepalm |
| 16:11.29 | *** part/#debian JeffersonGiusti (n=pil@mail.arge.com.br) |
| 16:11.36 | dutchfish | aurehman, after that ou need ot relaod or restart apache2 |
| 16:11.40 | *** join/#debian trbs (n=trbs@82-171-82-139.ip.telfort.nl) |
| 16:11.57 | bAndie91 | so, i ve the right module |
| 16:12.22 | antgel | in ifconfig, does anyone know what the maximum Tx/Rx size is before it wraps? (using amd64) yes, i could read the source, but if someone knows... |
| 16:13.03 | pjz | anyone know if the debian xen kernel will use >2GB of RAM if I have it? |
| 16:13.09 | *** join/#debian Orion_X11 (n=vagner@189.14.64.140) |
| 16:13.18 | *** join/#debian aurehman_ (n=chatzill@202.59.70.210) |
| 16:13.29 | dutchfish | antgel, 4294967295 (max -1) |
| 16:13.35 | *** join/#debian Enyo (n=russ@82-36-128-225.cable.ubr01.perr.blueyonder.co.uk) |
| 16:14.21 | antgel | dutchfish: in GB? 40-odd GB? |
| 16:14.35 | dutchfish | antgel, bytes on a 32bit system |
| 16:15.00 | isBEKaml | guys, i'm unable to connect to irc from the net at my workplace... is irc incompatible with proxy networks?? |
| 16:15.03 | le-dong | guys, i'm unable to connect to irc from the net at my workplace... is irc incompatible with proxy networks?? |
| 16:15.05 | *** join/#debian LeGreffi3R (n=greffier@089156181097.chello.fr) |
| 16:15.05 | antgel | actually it just wrapped at just under 4GB! |
| 16:15.24 | isBEKaml | le-dong: ? |
| 16:15.36 | *** part/#debian rfufu (n=ref@LRouen-151-73-54-113.w80-13.abo.wanadoo.fr) |
| 16:16.58 | *** join/#debian Plouj (n=Plouj@red.cs.yorku.ca) |
| 16:17.11 | abrotman | guys, hi |
| 16:17.15 | abrotman | okay |
| 16:17.20 | abrotman | isBEKaml: depends on your proxy |
| 16:17.55 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 16:18.18 | dutchfish | !tell aurehman about bpo |
| 16:18.28 | pgpkeys | hey there abrotman |
| 16:18.33 | abrotman | hi |
| 16:18.42 | pgpkeys | how's things? |
| 16:18.56 | abrotman | fooblah |
| 16:18.59 | pgpkeys | hehe |
| 16:19.14 | *** join/#debian rwaite (n=richard@rrcs-74-218-125-86.central.biz.rr.com) |
| 16:19.29 | isBEKaml | abrotman: the workplace usu has intranet in place. However to connect to the internet, access is very restricted and monitored. And, while trying to connect to irc, all i get is 'unable to connect to host' |
| 16:19.50 | abrotman | isBEKaml: well .. it's your job, but i wouldn't try to get around the proxy |
| 16:20.12 | isBEKaml | abrotman: :D |
| 16:20.13 | rwaite | ssh tunneling ftw |
| 16:20.22 | abrotman | assuming that works |
| 16:20.36 | rwaite | yeah |
| 16:21.45 | neoark | http://it.slashdot.org/article.pl?sid=08/05/13/1533212&from=rss |
| 16:21.55 | *** join/#debian esaym (n=user@cpe-70-120-89-6.satx.res.rr.com) |
| 16:22.00 | *** mode/#debian [+l 863] by debhelper |
| 16:22.09 | themill | Just the sort of press we all wanted... |
| 16:22.12 | isBEKaml | abrotman: and, i wouldn't dare to try out any traceroute utils either!! :) nslookup, traceroute and d like are totally banned!! :) |
| 16:22.19 | abrotman | cute |
| 16:22.25 | *** join/#debian bullgard4 (n=detlef@p5B25A6DB.dip0.t-ipconnect.de) |
| 16:22.52 | *** join/#debian [GM]godwin (n=Miranda@chello084113227153.18.14.vie.surfer.at) |
| 16:22.59 | abrotman | themill: blame RichiH :) |
| 16:23.03 | *** join/#debian eth01 (i=foo@gentoo/user/eth01) |
| 16:23.11 | rwaite | meep @ openssl |
| 16:23.23 | Rienzilla | yeah |
| 16:23.25 | Rienzilla | sucks :/ |
| 16:23.34 | *** join/#debian Pool_ (n=Drop@74.133-243-81.adsl-dyn.isp.belgacom.be) |
| 16:24.07 | dutchfish | neoark, and in dutch too: http://core.tweakers.net/nieuws/53427/random-number-generator-van-debian-openssl-blijkt-al-jaren-voorspelbaar.html |
| 16:24.08 | rwaite | i wanna play nethack |
| 16:24.10 | le-dong | i wanna play nethack |
| 16:24.23 | *** join/#debian CharminTheMoose (n=Count_fu@unaffiliated/charminthemoose) |
| 16:24.32 | *** join/#debian frog_ (n=frog@p4FD4AF6D.dip0.t-ipconnect.de) |
| 16:24.40 | abrotman | le-dong: turn that off |
| 16:24.40 | le-dong | abrotman, You are awesome! |
| 16:24.45 | *** mode/#debian [+o abrotman] by ChanServ |
| 16:24.50 | *** mode/#debian [+b *!*@62.3.229.53] by abrotman |
| 16:24.54 | *** mode/#debian [-o abrotman] by abrotman |
| 16:25.05 | abrotman | le-dong: when you learn to control your IRC client, msg me |
| 16:25.27 | *** part/#debian Beineri (n=Beineri@kde/binner) |
| 16:25.33 | *** join/#debian mofino (i=reid@thirddimension.net) |
| 16:25.43 | RichiH | abrotman: i would have preferred my submission over the crap that is up there now |
| 16:25.46 | *** join/#debian toad_ (n=toad@freenet/developer/toad) |
| 16:25.54 | abrotman | RichiH: it's slashdot .. what do you want :) |
| 16:26.04 | RichiH | abrotman: as i wanted to prevent exactly that kind of article |
| 16:26.16 | *** join/#debian maligor (n=maligor@a88-114-85-246.elisa-laajakaista.fi) |
| 16:26.17 | *** join/#debian Orion_X11 (n=vagner@189.14.64.140) |
| 16:26.20 | toad_ | do we need to consider the systems potentially compromised, or do we only need to regenerate the ssh keys protecting them? |
| 16:26.31 | mofino | this openssl flaw should have NEVER happened |
| 16:26.34 | toad_ | if a system is remotely accessible by pubkey... |
| 16:26.35 | rwaite | speaking of trolldot. is trolltalk still operating, does anyone know |
| 16:26.44 | mofino | The maintainers should step down |
| 16:26.46 | *** join/#debian dokma (n=chatzill@78-0-185-4.adsl.net.t-com.hr) |
| 16:26.51 | RichiH | abrotman: not to have an article by a gentoo fanwhore on the /. front page |
| 16:26.56 | mofino | they are incapable of making sound decisions |
| 16:27.07 | Rienzilla | what exactly caused this bug? |
| 16:27.14 | stew | mofino: this is the wrong channel for such a discussion |
| 16:27.17 | rwaite | trying to shut valgrind up |
| 16:27.24 | mofino | Rienzilla, http://svn.debian.org/viewsvn/pkg-openssl/openssl/trunk/crypto/rand/md_rand.c?rev=300&view=diff&r1=300&r2=299&p1=openssl/trunk/crypto/rand/md_rand.c&p2=/openssl/trunk/crypto/rand/md_rand.c |
| 16:27.37 | abrotman | RichiH: oh well .. it happens ... you could post a comment to "correct" the story |
| 16:27.43 | mofino | Rienzilla, sorry: http://svn.debian.org/viewsvn/pkg-openssl/openssl/trunk/rand/md_rand.c?rev=141&r1=140&r2=141 |
| 16:27.51 | mofino | stew, what channel then? |
| 16:27.58 | RichiH | abrotman: it is factually correct |
| 16:28.06 | RichiH | abrotman: just written in a bad light |
| 16:28.07 | mofino | This is SO bad |
| 16:28.11 | mofino | it is BAD |
| 16:28.17 | mofino | horrible policy decision |
| 16:28.23 | stew | mofino: http://lists.debian.org/debian-project perhaps |
| 16:28.26 | rwaite | na. you know what i say, this shit happens everywhere |
| 16:28.33 | mofino | everywhere? |
| 16:28.33 | rwaite | oops sorry for language |
| 16:28.35 | mofino | are you fast? |
| 16:28.38 | mofino | daft? |
| 16:28.44 | rwaite | yeah, microsoft, sun, ibm |
| 16:28.51 | helo | so this means every single debian box has had the same default ssl keys, so if remote logins via pubkey are enabled, it is completely ownable? |
| 16:28.52 | rwaite | people cut corners and do dumb stuff all the time |
| 16:28.57 | LimCore | RichiH: you are mentioned there |
| 16:29.03 | mofino | This is incredibly dumb |
| 16:29.09 | mofino | He didn't even understand what he was changing |
| 16:29.17 | anarcat | helo: not completely ownable, unless you got your root pass sniffed too |
| 16:29.21 | mofino | I cannot believe this even went through |
| 16:29.25 | stew | mofino: can you please keep it constructive |
| 16:29.29 | stew | mofino: do you have a question? |
| 16:29.30 | liable | mofino: please, just shut up |
| 16:29.30 | mofino | stew, how? |
| 16:29.38 | Rienzilla | mofino: uhm.... just new comments? |
| 16:29.40 | mofino | This is not a discussion channel? |
| 16:29.43 | azeem | mofino: no |
| 16:29.43 | Rienzilla | or is this not the fix? |
| 16:29.47 | mofino | Rienzilla, look at it |
| 16:29.50 | azeem | it's a support channel |
| 16:29.54 | stew | mofino: no, its for end-user support |
| 16:30.00 | rwaite | yeah, i wanna know why someone who didnt understand the consequences of mucking around with encryption code was doing ... mucking around with encryption code |
| 16:30.00 | mofino | christ |
| 16:30.13 | RichiH | LimCore: i know |
| 16:30.18 | toad_ | do we need to regen host keys as well? |
| 16:30.18 | mofino | rwaite, he thought he knew what he was doing. |
| 16:30.24 | mofino | toad_, all |
| 16:30.24 | anarcat | mofino: it's good to vent off, but i'm not sure it's the proper place and time |
| 16:30.26 | stew | toad_: yes |
| 16:30.28 | *** join/#debian MadeinBrasil (n=acidroot@mail.arge.com.br) |
| 16:30.29 | anarcat | mofino: we all make mistakes |
| 16:30.31 | mofino | no |
| 16:30.35 | rwaite | well, if you look @ the comment he was just trying to shut up the profiler |
| 16:30.35 | mofino | This is unacceptable |
| 16:30.39 | *** mode/#debian [+o stew] by ChanServ |
| 16:30.39 | Rienzilla | oh wait |
| 16:30.40 | *** mode/#debian [+b %*!*@thirddimension.net] by stew |
| 16:30.40 | *** mode/#debian [-o stew] by stew |
| 16:30.43 | rwaite | which is dumb any way you look at it |
| 16:30.43 | stew | mofino: take a 10 minute breather |
| 16:30.45 | Rienzilla | he commented that statement out |
| 16:30.47 | LimCore | so is that story true, keys made on debian are guessable? |
| 16:31.02 | stew | LimCore: /msg dpkg dsa1571 |
| 16:31.03 | abrotman | !tell LimCore about dsa |
| 16:31.09 | *** join/#debian unixSnob (n=jgombos@70-9-134-221.area4.spcsdns.net) |
| 16:31.11 | azeem | Rienzilla:/msg dpkg dsa1571 |
| 16:31.12 | *** part/#debian mofino (i=reid@thirddimension.net) |
| 16:31.12 | azeem | bah |
| 16:31.19 | prh-x | /msg dpkg dsa1571 |
| 16:31.21 | abrotman | LimCore: subscribe to the list .. |
| 16:31.31 | rwaite | they lol |
| 16:31.36 | rwaite | nvm |
| 16:31.42 | Rienzilla | azeem: I know what dsa1571 is :) |
| 16:31.55 | toad_ | how do we regen host keys? |
| 16:32.06 | helo | wow this is pretty insane |
| 16:32.10 | Rienzilla | I have been working the last 4-5 hours to try to see what imapct it has and fixing a tonload of keys :x |
| 16:32.15 | stew | toad_: http://wiki.debian.org/SSLkeys |
| 16:32.23 | rwaite | yeah i only use it for sshing in from home, so i need to regen too |
| 16:32.34 | helo | i will only feel safe after i have reinstalled everything |
| 16:32.43 | *** join/#debian tca (n=tom@ti541110a080-2900.bb.online.no) |
| 16:32.50 | *** join/#debian Orion_X11 (n=vagner@189.14.64.140) |
| 16:33.04 | rwaite | i will only feel safe after i uninstall debian and install ubuntu! they would have never made this mistake [sic] |
| 16:33.20 | *** mode/#debian [-b %*!*@thirddimension.net] by RichiH |
| 16:33.27 | RichiH | rwaite: they have the same issue? |
| 16:33.29 | helo | i think they did... |
| 16:33.38 | rwaite | lol yeah, they do |
| 16:33.38 | Eulex | umh. as ubuntu take packages from debian, shouldn't this be in ubuntu too? |
| 16:33.47 | rwaite | [sic] <--- |
| 16:34.15 | *** join/#debian cemc (n=gimre@dummy.cluj.astral.ro) |
| 16:34.21 | helo | i was just in here a few weeks ago asking how to regenerate host keys... would have been nice to have done that |
| 16:34.26 | abrotman | Eulex: it is .. they're issued the same security bulletin .. it also affect most(all?) other debian based distros |
| 16:34.27 | xingu | RichiH: http://www.debian.org/security/key-rollover/ in your announcement 404's. |
| 16:34.51 | helo | has anything even remotely this serious ever happened before? |
| 16:34.57 | abrotman | yes |
| 16:34.57 | rwaite | yes |
| 16:35.16 | *** join/#debian frog___ (n=frog@p4FD4B86A.dip0.t-ipconnect.de) |
| 16:35.17 | prh-x | the world hasn't ended - but this is a very embaressing cockup |
| 16:35.24 | helo | debian-specific, of course |
| 16:35.36 | rwaite | this is why, for enterprise work, windows is the only choice |
| 16:35.46 | rwaite | that way you never find out :) |
| 16:35.47 | i_am_ed | Is there evidence that a system has been compromised due to this cockup? |
| 16:35.49 | toad_ | lol |
| 16:35.50 | trbs | is there any tool in debian (like openssh-blacklist) to check those possibly compromised ssh keys ? (and hopefully also regenerating the compromised ones) |
| 16:35.50 | liable | groan |
| 16:35.51 | stew | rwaite: please stop trolling |
| 16:36.02 | i_am_ed | actually broken into, i mean |
| 16:36.04 | stew | trbs: see the perl script in the dsa |
| 16:36.05 | rwaite | will do |
| 16:36.06 | *** join/#debian RaceCondition (n=RaceCond@217-159-200-30-cn.lse.estpak.ee) |
| 16:36.12 | toad_ | you find out when some blackhat builds a 0day |
| 16:36.15 | liable | looks like this will be a fun day in #debian. /me heads to bed |
| 16:36.23 | LimCore | hehe |
| 16:36.29 | trbs | stew, aah thnx cool i see the wiki has a page for it |
| 16:36.31 | RichiH | xingu: it is not mine. it will be created later today, though. people are working on securing the debian infrastructure, atm |
| 16:36.38 | trbs | which also helps :) |
| 16:36.40 | LimCore | last time #pidgin had trafic spike after ./ article |
| 16:36.53 | *** join/#debian CalebRipley (n=theo@p54863FD9.dip.t-dialin.net) |
| 16:37.00 | *** join/#debian jelly-home (n=jelly@islands.iskon.hr) |
| 16:37.33 | RichiH | xingu: http://wiki.debian.org/SSLkeys |
| 16:37.48 | rwaite | the only thing i care about is, ultimately, debian will be the better for this. it will be fixed, and will serve as a reminder/catalyst for more stringent checking |
| 16:38.15 | *** join/#debian chicobento (n=ponto-go@189.82.76.108) |
| 16:38.16 | LimCore | all linux distro really suffer from lack of QA teams etc |
| 16:38.22 | *** join/#debian bullgard1 (n=detlef@p5B25A6DB.dip0.t-ipconnect.de) |
| 16:38.24 | *** join/#debian PriitM_ (n=cel1200@ip222.cab16.mus.starman.ee) |
| 16:38.47 | xingu | RichiH: ta |
| 16:38.54 | *** join/#debian Orion_X11 (n=vagner@189.14.64.140) |
| 16:39.09 | *** part/#debian jivco (n=jivco@85.187.217.6) |
| 16:39.18 | themill | I've been trying to add more to that wiki page as I go, including some examples of using the dowkd.pl tool.... please keep adding stuff to it though; it's all very ssh-specific at present. |
| 16:39.31 | i_am_ed | LimCore: it's possible to say that about all software... |
| 16:39.36 | LimCore | would it be possible to hire full time people to really care about bug fixing |
| 16:39.37 | themill | Also, the dowkd.pl util has changed since the DSA was released; grab a newer version of it if you downloaded it more than a couple of hours ago. |
| 16:39.42 | *** join/#debian schmidtsmikey (n=schmidts@port-92-195-101-84.dynamic.qsc.de) |
| 16:40.02 | LimCore | i_am_ed: not about commerciall software that faces competition yet have resources |
| 16:40.08 | xingu | themill: someone needs to audit things like imapd/popd/smtpd's that create server certs |
| 16:40.39 | *** join/#debian Orion_X11 (n=vagner@189.14.64.140) |
| 16:40.51 | *** mode/#debian [+o stew] by ChanServ |
| 16:40.52 | *** mode/#debian [-b %*!*@thirddimension.net] by stew |
| 16:40.52 | *** mode/#debian [-o stew] by stew |
| 16:41.06 | themill | xingu: there is debate as to whether rsa keys are vulnerable as well as dsa keys. If they are not, then those things shouldn't be in trouble too. |
| 16:41.52 | LimCore | does debian have pepeople contributed solely to do code reviews and security audits etc? |
| 16:42.08 | *** join/#debian tech13 (n=tech13@adsl-76-221-79-150.dsl.milwwi.sbcglobal.net) |
| 16:42.15 | *** join/#debian raz0 (n=user@217.198.211.234) |
| 16:43.31 | *** join/#debian limpio (n=macondo@cpe-00155805d6a1.cpe.cableonda.net) |
| 16:43.59 | loca|host | how can i install a deb package from experimental on my stable debian (etch) ? |
| 16:44.14 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 16:44.15 | Eulex | you don't |
| 16:44.33 | Eulex | if anything, you'd backport it, and then install the resulting package |
| 16:44.53 | themill | loca|host: you probably don't want to though... |
| 16:44.54 | Eulex | note that it would require backporting any dependency that is not in etch |
| 16:45.03 | mavez | lol banz |
| 16:45.17 | loca|host | yes |
| 16:45.18 | *** join/#debian bitshuffler (n=bitshuff@unaffiliated/bitshuffler) |
| 16:45.26 | *** join/#debian CalJohn (n=pg99@87-194-236-208.bethere.co.uk) |
| 16:45.28 | loca|host | in fact, i need mysql 5.1rc |
| 16:45.40 | loca|host | and it's available only on experimental |
| 16:45.53 | themill | loca|host: that's because it's not yet ready for production use |
| 16:45.54 | *** join/#debian sodio (n=sodio@va-71-1-140-171.sta.embarqhsd.net) |
| 16:45.59 | xingu | themill: would I be right in thinking that dowkd.pl isn't going to do a damn thing for .pem's? |
| 16:46.13 | *** part/#debian extor (i=xtor@c-24-1-247-223.hsd1.il.comcast.net) |
| 16:46.17 | themill | xingu: it doesn't at present, but chops was hacking something up... |
| 16:46.19 | xingu | themill: pending conclusive statement on whether or not they're at risk, of course |
| 16:46.41 | *** join/#debian jonraman (n=jonraman@adsl139-137.kln.forthnet.gr) |
| 16:46.49 | loca|host | themill, there's no backports anywhere ? |
| 16:47.39 | *** join/#debian simNIX (n=user@82-204-21-111.dsl.bbeyond.nl) |
| 16:47.58 | Shadow_mil | my... keys... NO!!!!!!! |
| 16:48.00 | *** join/#debian aplsin_ (n=imar@unaffiliated/aplsin) |
| 16:48.01 | *** part/#debian mavez (n=mavez@chloepatchmethrough.com) |
| 16:48.02 | themill | loca|host: noone's that interested in backporting something that's not ready to be used. There's not enough interest in it. Given that mysql-server-5.1 isn't even in sid yet means that the maintainers don't even have the expectation that it will work. |
| 16:48.31 | *** join/#debian cb (i=cb@transgaming.de) |
| 16:48.34 | *** join/#debian Nibbler (n=Nibbler@e181117179.adsl.alicedsl.de) |
| 16:48.57 | *** join/#debian duns_s (n=duns_s@mnhm-590f5d49.pool.einsundeins.de) |
| 16:49.01 | *** join/#debian Steve[Work (i=steve@cugnet.net) |
| 16:49.15 | rwaite | waits patiently for lenny update to openbox |
| 16:49.15 | *** join/#debian shogunx (n=shogunx@rrcs-24-73-158-97.se.biz.rr.com) |
| 16:49.38 | *** join/#debian Akuw (n=x@190.77.115.93) |
| 16:49.43 | *** join/#debian spidey__ (n=spidey@97.95.153.97) |
| 16:49.50 | *** join/#debian XSoul (n=XRule@tooms.ddns.cablebg.net) |
| 16:49.53 | *** join/#debian ryg9I (n=pavel@nat-gw.sevcable.net) |
| 16:50.23 | *** part/#debian bitshuffler (n=bitshuff@unaffiliated/bitshuffler) |
| 16:50.45 | *** join/#debian SR71-Blackbird (n=nirvana@unaffiliated/sr71-blackbird) |
| 16:52.00 | *** mode/#debian [+l 873] by debhelper |
| 16:52.03 | helo | what is incorrect about the /. post? |
| 16:52.16 | *** join/#debian path_ (n=path@pc-168-207-46-190.cm.vtr.net) |
| 16:52.47 | *** join/#debian mhall (n=mhall@unaffiliated/mhall) |
| 16:52.58 | *** join/#debian frog (n=frog@p4FD4AF23.dip0.t-ipconnect.de) |
| 16:53.01 | *** join/#debian shellito (n=shellito@200.122.229.14) |
| 16:53.15 | mhall | Why did the ISIC tool (IP Stack Integrity Checker) exist in stable but disappear from unstable? It doesn't make sense. |
| 16:53.27 | *** join/#debian joele24 (n=Joel@71.237.81.140) |
| 16:53.32 | stew | mhall: have you checked the pts? |
| 16:53.32 | \amethyst | People |
| 16:53.52 | \amethyst | doh |
| 16:54.00 | *** join/#debian mazzanet (n=mazzanet@fe1-1.mel-ii.bdr1.mazzanet.id.au) |
| 16:54.01 | *** join/#debian mofino (i=reid@thirddimension.net) |
| 16:54.08 | *** join/#debian Xenguy (n=gnu@206-248-151-3.dsl.ncf.ca) |
| 16:55.55 | *** join/#debian streuner (n=streuner@p54A5CCB3.dip.t-dialin.net) |
| 16:57.35 | *** join/#debian aurehman (n=chatzill@202.59.70.210) |
| 16:57.42 | mhall | stew: pts? |
| 16:57.42 | *** join/#debian solidslash (n=andrzej@bdx134.neoplus.adsl.tpnet.pl) |
| 16:57.54 | *** mode/#debian [+o abrotman] by ChanServ |
| 16:57.58 | *** mode/#debian [-b *!*@62.3.229.53] by abrotman |
| 16:58.01 | mhall | stew: hmm google found it... one moment |
| 16:58.03 | *** mode/#debian [-o abrotman] by abrotman |
| 16:58.05 | stew | mhall: http://packages.qa.debian.org/packagename |
| 16:58.22 | stew | mhall: should show emails when things were removed, the emails should reference bug#'s |
| 16:59.05 | *** join/#debian DawnLight_ (n=dawn@62.56.253.195) |
| 16:59.20 | *** part/#debian solidslash (n=andrzej@bdx134.neoplus.adsl.tpnet.pl) |
| 16:59.20 | *** join/#debian duns_s (n=duns_s@mnhm-590f5d49.pool.einsundeins.de) |
| 16:59.37 | mhall | stew: so you must file a bug to remove stuff? |
| 16:59.50 | *** join/#debian Baloo (n=baloo@71-215-134-31.ptld.qwest.net) |
| 16:59.54 | stew | mhall: yes, one files a bug against the ftp.debian.org pseudo-package |
| 16:59.57 | abrotman | mhall: there's a bug filed on the package to request its removal |
| 17:00.03 | abrotman | i thought against the package? |
| 17:00.20 | anarcat | that's cool Automatically regenerate known-compromised host keys, with a critical-priority debconf note. |
| 17:00.28 | anarcat | oops wrong paste: http://packages.qa.debian.org/o/openssh/news/20080513T150212Z.html |
| 17:00.34 | stew | no, a RM: bug aginst ftp.debian.org (http://bugs.debian.org/ftp.debian.org) |
| 17:00.36 | *** join/#debian lynucs (n=lynucs@pD9E38705.dip.t-dialin.net) |
| 17:00.43 | DawnLight_ | exit |
| 17:00.45 | DawnLight_ | sorry |
| 17:00.49 | *** join/#debian joyr (n=joyr@dsl-tkubrasgw1-ffb7c100-219.dhcp.inet.fi) |
| 17:00.53 | *** join/#debian Sergiu1 (i=sergiu@87.255.79.154) |
| 17:01.19 | *** join/#debian unlink (n=unlink@r253237157.resnet.cornell.edu) |
| 17:03.50 | mhall | Damnit that's depressing. |
| 17:03.59 | mhall | I wish that package could have stayed in. |
| 17:04.44 | *** join/#debian craigevil (n=craigevi@114.64.205.68.cfl.res.rr.com) |
| 17:04.49 | *** join/#debian bucketfan99 (i=bucket@S010600010301ffb9.vc.shawcable.net) |
| 17:05.08 | *** join/#debian jonraman (n=jonraman@adsl139-137.kln.forthnet.gr) |
| 17:05.08 | bucketfan99 | anyone know if apache certs need to be regenerated with this openssl issue ? |
| 17:05.18 | *** join/#debian DawnLight_ (n=dawn@62.56.253.195) |
| 17:05.42 | *** join/#debian jetscreamer (n=jetscrea@unaffiliated/jetscreamer) |
| 17:05.46 | stew | mhall: it can. it just needs a maintainer |
| 17:05.53 | DawnLight_ | why is my alt+shift not changing layouts? this is the xorg.conf section http://pastie.org/196200 |
| 17:06.24 | pgpkeys | bucketfan99 - It is strongly recommended that all cryptographic key material which has been generated by OpenSSL versions starting with 0.9.8c-1 on Debian |
| 17:06.28 | pgpkeys | systems is recreated from scratch. Furthermore, all DSA keys ever used |
| 17:06.30 | pgpkeys | on affected Debian systems for signing or authentication purposes should be considered compromised; the Digital Signature Algorithm relies on a secret random value used during signature generation. |
| 17:06.57 | bucketfan99 | suprised they dont mention webserver certs in specific |
| 17:06.59 | bucketfan99 | if you should be doing that |
| 17:07.04 | vraa | pgpkeys: for someone who isn't too versed in what all this means, is there a page i can read that'll guide me through how to kinda.. uhh.. fix the keys issue? |
| 17:07.14 | pgpkeys | the 'all cryptographic key material' should cover that |
| 17:07.16 | bucketfan99 | thawtes going to have a good week |
| 17:07.17 | *** join/#debian Steve[Work] (i=steve@cugnet.net) |
| 17:07.20 | GiabboO | :@ |
| 17:07.22 | pgpkeys | vraa - yep. sec |
| 17:07.25 | bucketfan99 | big sales |
| 17:07.25 | vraa | thanks!!! |
| 17:07.30 | bucketfan99 | how awful. |
| 17:07.30 | pgpkeys | http://wiki.debian.org/SSLkeys |
| 17:07.36 | pgpkeys | vraa - that' |
| 17:07.39 | pgpkeys | s for you |
| 17:07.44 | Shadow_mil | So who was the moron who took the random seed out anyways? |
| 17:07.57 | pgpkeys | it wasn't taken out. |
| 17:07.58 | stew | Shadow_mil: please keep it constructive |
| 17:08.02 | vraa | excellent, so i read through that and what i got out of it is that i need to run the commands under the "openSSH (server)" box right? |
| 17:08.18 | vraa | i just have an apache server, sometimes people use the https:// portion |
| 17:08.30 | magmaniac | Shadow_mil: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=363516 <- that's how it started |
| 17:08.41 | pgpkeys | there were specific debian construct changes which caused this. people make mistakes. NO ONE is perfect. and not everything is caught before it goes out the door regardless of what OS you run |
| 17:08.51 | Shadow_mil | stew, I think the person who did this should have other packages he might had worked on checked. I think that is constructive don't you? |
| 17:09.06 | bucketfan99 | stew you get what you pay for ;) |
| 17:09.11 | bucketfan99 | but yeah shit happens |
| 17:09.15 | bucketfan99 | have fun patching i know i will, late |
| 17:09.38 | stew | Shadow_mil: calling people names is not constructive |
| 17:10.02 | *** join/#debian HellTiger (n=HellTige@p5B0CFCA7.dip.t-dialin.net) |
| 17:10.36 | *** join/#debian cemc (n=gimre@dummy.cluj.astral.ro) |
| 17:10.39 | helo | it was me! i admit it! |
| 17:10.48 | DawnLight_ | can anyone help me to get my layout group toggle with alt+shift? xorg.conf input section http://pastie.org/196200 |
| 17:10.54 | Shadow_mil | stew, if we don't call people names, how do we reference a single individual? |
| 17:10.57 | helo | (just kidding) |
| 17:11.20 | pgpkeys | Shadow_mil - that's just throwing the jerry can on the fire. |
| 17:11.20 | craigevil | did this DSA affect only Etch or lenny and Sid as well? |
| 17:11.20 | hoxu | !lart Shadow_mil |
| 17:11.20 | dpkg | blasts Shadow_mil to oblivion with a kamehameha wave |
| 17:11.41 | stew | Shadow_mil: i'm talking about you calling this person a moron |
| 17:11.44 | hoxu | !tell craigevil about dsa1571 |
| 17:11.48 | hoxu | !topic |
| 17:11.49 | vraa | craigevil: check this out : http://wiki.debian.org/SSLkeys |
| 17:11.58 | *** join/#debian icekiss (n=acidroot@mail.arge.com.br) |
| 17:12.23 | Shadow_mil | stew, well, do you have a better word to describe a person who did such a thing? |
| 17:12.43 | *** join/#debian dfranke (n=dfranke@c-67-169-38-126.hsd1.ca.comcast.net) |
| 17:12.49 | pgpkeys | craigevil - |
| 17:12.49 | pgpkeys | craigevil - The first vulnerable version, 0.9.8c-1, was uploaded to the unstable distribution on 2006-09-17, and has since propagated to the testing and |
| 17:12.52 | pgpkeys | current stable (etch) distributions. The old stable distribution (sarge) is not affected. |
| 17:12.53 | stew | Shadow_mil: there are many. please just move on an keep the conversation constructive |
| 17:12.54 | hoxu | Shadow_mil, just drop it, you aren't being very constructive |
| 17:12.55 | rahul | Shadow_mil: "software developer" |
| 17:12.57 | themill | Shadow_mil: how about well intentioned? doing their best? |
| 17:13.01 | craigevil | Installed: 0.9.8g-10 cool guess im good Sid rules |
| 17:13.12 | themill | Shadow_mil: How about, "why didn't you spot the problem and fix it"? |
| 17:13.17 | *** join/#debian kgod (n=karsten@c-67-164-35-47.hsd1.ca.comcast.net) |
| 17:13.25 | vraa | hey craigevil, where do you find your installed version? |
| 17:13.28 | pgpkeys | what in the hell is up with my damn clipboard?! this is the first time I've seen it add \n in random places like that |
| 17:13.34 | craigevil | apt-cache policy openssl |
| 17:13.36 | *** join/#debian elenril (n=wiskas@zohar.kolej.mff.cuni.cz) |
| 17:13.37 | Sergiu1 | how to add an specific user to sudoers . |
| 17:13.41 | Sergiu1 | is this hard |
| 17:13.50 | *** join/#debian versuchsanstalt (n=versuchs@p548558EA.dip.t-dialin.net) |
| 17:13.54 | vraa | Sergiu1: it's easy -- http://www.sudo.ws/sudo/man/sudoers.html |
| 17:14.00 | pgpkeys | there are a TON of sudo tutorials via google |
| 17:14.04 | helo | "All OpenSSH and X.509 keys generated on such systems must be |
| 17:14.04 | helo | considered untrustworthy, regardless of the system on which they |
| 17:14.06 | Eulex | vraa, or just man sudo |
| 17:14.07 | *** join/#debian z1pp3r (i=zipper@90.185.36.187) |
| 17:14.08 | Eulex | ers |
| 17:14.15 | helo | bah, didn't think it would break |
| 17:14.22 | vraa | thanks craigevil |
| 17:14.25 | vraa | thans Eulex |
| 17:14.31 | dfranke | Hi, I'm trying to make sense of this OpenSSL vulnerability. Apparently the problem was caused by setting previously-uninitialized memory to zero. But uninitialized memory is usually pretty predictable to begin with. So is the vulnerability overblown, or is openssl randomness not very good regardless? |
| 17:14.46 | rahul | dfranke: probably the latter |
| 17:14.53 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 17:15.09 | Shadow_mil | The issue is, was this done intentionally? Cause I feel such a thing is hard to do. I don't just wake up one day and say "Oh! Lets just remove all this code here" |
| 17:15.16 | pgpkeys | uhh uninitialized memory is NOT predictable. it can point anywhere within the memory banks. |
| 17:15.23 | rahul | Shadow_mil: that's not what happened |
| 17:15.35 | dfranke | pgpkeys: but the contents of the memory banks are not randomly distributed. |
| 17:15.36 | rahul | pgpkeys: that doesn't get exposed to userspace |
| 17:15.39 | squirrelpimp | what drove them to change the openssl-code in such a manner anyways? redhat and the others didn't do that as well |
| 17:15.40 | \amethyst | Shadow_mil: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=363516 explains the reasoning |
| 17:16.17 | *** join/#debian jintxo (n=jintxo@46.Red-83-43-35.dynamicIP.rima-tde.net) |
| 17:16.18 | magmaniac | as I understand it, the intention was to shut up valgrind... |
| 17:16.43 | *** join/#debian kalpik (n=kalpik@unaffiliated/kalpik) |
| 17:16.51 | *** join/#debian Nach (n=nach@89-139-69-25.bb.netvision.net.il) |
| 17:16.55 | \amethyst | upstream's rant is at http://www.links.org/?p=327 |
| 17:16.57 | squirrelpimp | magmaniac: how that? |
| 17:17.09 | rahul | they introduced a security bug by trying to make a security bug finding tool happy :) |
| 17:17.28 | Nach | This computer only has one network card, yet it's coming up as eth2, any way I can move it to eth0? |
| 17:17.30 | magmaniac | squirrelpimp: see that bug report |
| 17:17.40 | squirrelpimp | i do right now |
| 17:17.43 | hoxu | !tell Nach about z25 |
| 17:17.50 | pgpkeys | rolls off to read http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=363516 |
| 17:18.09 | vraa | what is the difference between "openssh (server)" and "openssh (client)"? i won't have to run any of the client specific commands because i'm doing this (this = dpkg-reconfigure openssh-server) on the server only right? |
| 17:18.37 | antgel | upstream is moaning about vendors. but without vendors nobody would be using their software. catch 22 |
| 17:18.45 | mofino | here |
| 17:18.46 | mofino | -reid |
| 17:18.48 | mofino | er |
| 17:18.53 | Nach | hoxu: thanks |
| 17:18.56 | mofino | openssl vendor approval: http://marc.info/?t=114651088900003&r=1&w=2 |
| 17:19.05 | mofino | Not the maintainers fault ... |
| 17:19.05 | Nach | Really odd that my firewires are showing up as eth's |
| 17:19.53 | *** join/#debian xenonex (n=xenonex@89.218.236.221) |
| 17:19.53 | anarcat | ethernet over firewire |
| 17:20.04 | dfranke | okay, I see. Debian's patch didn't just wipe the uninitialized part. It wiped the entire entropy pool. |
| 17:20.28 | rahul | mofino: where is there upstream approval there? |
| 17:20.52 | mofino | rahul, first response |
| 17:21.02 | *** part/#debian dokma (n=chatzill@78-0-185-4.adsl.net.t-com.hr) |
| 17:21.03 | mofino | "Not much. If it helps with debugging, I'm in favor of removing them." |
| 17:21.10 | dfranke | so I think both Debian and the OpenSSL guys were being silly. |
| 17:21.15 | mofino | They were |
| 17:21.24 | mofino | but I casted blame on the maintainers |
| 17:21.34 | dfranke | Debian for making the change, and openssl for bothering with such a lame approach to increasing entropy. |
| 17:21.40 | mofino | when in this case, it doesn't seem like they were entirely to blame |
| 17:21.44 | *** join/#debian thegraham (n=thomas@77-99-113-192.cable.ubr16.edin.blueyonder.co.uk) |
| 17:21.46 | mofino | Still a poor decision, but ... |
| 17:21.48 | anarcat | http://marc.info/?l=openssl-dev&m=114652287210110&w=2 |
| 17:21.53 | mofino | dfranke++ |
| 17:21.58 | mofino | dfranke good, good point! |
| 17:21.58 | *** join/#debian dutchfish (n=wil@wc-35.r-195-35-167.atwork.nl) |
| 17:22.06 | hoxu | who cares who should be blamed for it? |
| 17:22.06 | vyrus001 | is there a libssl0.9.8-g9 for lenny? |
| 17:22.12 | *** join/#debian acemi (n=acemi@unaffiliated/acemi) |
| 17:22.14 | vyrus001 | per the new sec update? |
| 17:22.16 | mofino | hoxu, accountability is important to some degree |
| 17:22.19 | pgpkeys | exactly. blame doesn't fix the problem |
| 17:22.20 | rahul | debian shouldn't be changing security-related code without an official patch from the upstream |
| 17:22.22 | pgpkeys | code does |
| 17:22.24 | \amethyst | however, the maintainer should possibly have done what Thorpe and Roeland both suggested, and used -DPURIFY instead of commenting out both of those lines of code |
| 17:22.27 | vyrus001 | also how do i regen my server keys? |
| 17:22.30 | mofino | rahul, agreed |
| 17:22.41 | rahul | right, -DPURIFY was mentioned twice in the thread |
| 17:22.47 | thegraham | Hi there, how do I make the back space on my MacBook pro act like a backspace (rather than a delete) over ssh? |
| 17:22.48 | vraa | vyrus001: http://wiki.debian.org/SSLkeys |
| 17:22.53 | pgpkeys | oh christ. someone want to add this to the bot to answer the key regen questions? |
| 17:22.58 | pgpkeys | http://wiki.debian.org/SSLkeys |
| 17:23.10 | z1pp3r | its there already |
| 17:23.13 | rahul | it is |
| 17:23.14 | hoxu | pgpkeys, it's in the bloody topic |
| 17:23.19 | rahul | right in the beginning of the topic |
| 17:23.32 | rahul | it's just the usual ask first, look for information later mentality |
| 17:23.42 | pgpkeys | uhh I don't see it |
| 17:23.44 | hoxu | !topicbadger pgpkeys |
| 17:23.45 | dpkg | /topic /topic /topic /topic /topic /topic *READ IT*READ IT* /topic /topic /topic /topic /topic /topic /topic *a shaaame it's a shaaame that pgpkeys didn't read the* /topic /topic /topic /topic... |
| 17:23.52 | pgpkeys | <PROTECTED> |
| 17:23.56 | pgpkeys | that's what I see for a topic |
| 17:24.00 | rahul | yes |
| 17:24.02 | helo | is there a list of the kinds of side effects this mistake might have? if you allow pubkey host authentication without passwords, you are at the highest risk... what lesser risks are there? |
| 17:24.04 | hoxu | pgpkeys, yes, now read it :) |
| 17:24.05 | azeem | pgpkeys: what part of openssl vulnerability is unclear? |
| 17:24.11 | GiabboO | im running maildrop on a debian sarge, is it there anyone that made it working with mysql ? |
| 17:24.15 | pgpkeys | holy fuck |
| 17:24.45 | pgpkeys | GUYS I KNOW ABOUT THE VULN! I'm saying add the SSLKeys URL to the bot so that (since topics desync) everyone can be told how to fix the shit |
| 17:24.48 | pgpkeys | christ |
| 17:25.02 | stew | pgpkeys: /msg dpkg dsa1571 |
| 17:25.03 | rahul | it is in the bot |
| 17:25.04 | hoxu | pgpkeys, it's in the bloody factoid |
| 17:25.41 | DawnLight_ | can anyone help me to get my layout group toggle with alt+shift? xorg.conf input section http://pastie.org/196200 |
| 17:25.49 | pgpkeys | ok, well then blast me for not reading a bot entry. not for supposedly not knowing about the vuln. *I* already knew about it thus *I* didn't need to read the bot entry. |
| 17:25.53 | pgpkeys | my apologies |
| 17:26.04 | rahul | !blast pgpkeys |
| 17:26.11 | pgpkeys | rahul - prick ;) |
| 17:26.12 | chops | themill: (Re me hacking something up) -- I'm not actively working on it; I was just sharing as far as I got with it with the channel in case someone else wanted to go the rest of the way with it |
| 17:26.15 | rahul | well, now you get to add your factoid |
| 17:26.23 | pgpkeys | yeah yeah yeah ;p |
| 17:26.47 | rahul | sings "you can't always get what you want..." |
| 17:26.50 | *** join/#debian frog___ (n=frog@p4FD4AE37.dip0.t-ipconnect.de) |
| 17:26.54 | *** join/#debian LukeL_ (n=Luke@unaffiliated/lukel) |
| 17:26.56 | pgpkeys | oh that was just WRONG! :) |
| 17:26.59 | \amethyst | dpkg, sslkeys is <reply> see dsa1571 |
| 17:27.00 | dpkg | okay, \amethyst |
| 17:27.07 | \amethyst | happy? |
| 17:27.08 | \amethyst | :) |
| 17:27.12 | pgpkeys | hahahaha |
| 17:27.14 | chops | themill: I would like to hack something up, but unfortunately I'm at work and so a bit bound by the need to only work on things that are directly useful for my job... contributing _my_ time to help with a vulnerability that I've verified doesn't affect me would be fine for me, but not someone else's time |
| 17:27.29 | chops | themill: Chatting on IRC is, of course, directly useful to my job. Nay, vital. |
| 17:27.31 | keith4 | hey... I have an idea. maybe we should make a factoid about the vulnerability, so people stop asking about it! |
| 17:27.33 | pgpkeys | you guys are just ruthless today hehe ;) |
| 17:27.34 | keith4 | ducks |
| 17:27.50 | simonrvn | !kill keith4 |
| 17:27.50 | dpkg | rips keith4 open with a rusty dagger |
| 17:27.54 | *** join/#debian chx (n=chx@drupal.org/user/9446/view) |
| 17:28.10 | vyrus001 | why is there no ssl 0.9.8g-9 for lenny? |
| 17:28.11 | pgpkeys | keith4 - what part of the blood on the chopping block failed to clue you into you are walking downa slippery slope? ;) |
| 17:28.18 | themill | pgpkeys: I added the sslkeys url to the bot after I made the page about oh... 4 hours ago... |
| 17:28.25 | Shadow_mil | wonders how many gigabytes of his data is compromised |
| 17:28.28 | *** join/#debian LaidBack_01 (n=jax@209.206.245.251) |
| 17:28.31 | *** join/#debian joh (i=johannj@leopard.stud.ntnu.no) |
| 17:28.34 | lnostdal | http://xkcd.com/221/ |
| 17:28.35 | lnostdal | :) |
| 17:28.40 | simonrvn | 0 bytes for me |
| 17:28.41 | chx | hello if perl dowkd.pl user came back empty handed then I am OK? regenerating my key and redeploying is probably days of work for me. |
| 17:29.05 | pgpkeys | themill - hehe I missed it :) I knew about the vuln, so I failed to read the bot entry and it didn't dawn on me that you'd include the SSLKeys URL :) I stand axed and corrected :) |
| 17:29.05 | rahul | lnostdal: indeed :) |
| 17:29.12 | vraa | chx: it can still generate false positives and false negatives |
| 17:29.31 | joh | Hi, how do I determine whether my hardware clock is UTC or localtime? |
| 17:29.35 | chx | vraa: okay, so what if i roll the dice? |
| 17:29.35 | keith4 | how did GnuPG escape this problem? |
| 17:29.38 | *** join/#debian isBEKaml (n=vats@122.164.229.91) |
| 17:29.45 | joh | (Determine in a scriptable manner) |
| 17:29.48 | LaidBack_01 | hey, I'm looking for a tool that will display everything that touches a packet along the way from source to dest. For example, if i traceroute a printer from my pc it comes back with only the IP of the printer and my pc. However I know there is at least a switch in the way. Is there a way to detect this with common tools? |
| 17:29.48 | chx | vraa: i mean, i presume noone bugged my keyboard and so on. |
| 17:30.05 | Shadow_mil | keith4, it uses different code to generate its random numbers |
| 17:30.15 | vraa | sorry chx, i dont know enough to take chances, i'm just gonna go ahead and do the update+upgrade and then rm /etc/blah blah blah, then dpkg-reconfigure openssh-server |
| 17:30.16 | keith4 | well, obviously |
| 17:30.21 | Eulex | vyrus001, 0.9.8g-10 is in lenny |
| 17:30.24 | hoxu | joh, hwclock, or grep the startup scripts for that |
| 17:30.26 | dutchfish | wonders what about ssl keys that have registered already, noone ask that ... (hides out now under a large debian-rock) |
| 17:30.26 | themill | chops: yeah, I know what you mean. Is it feasible to pastebin the top part of the perl script that you had worked on? (not the part after __DATA__) or perhaps send it off to the security team? They've updated dowkd.pl at least once already that I know of. |
| 17:30.33 | Shadow_mil | keith4, then why did you ask? |
| 17:30.36 | chx | vraa: server, not a problem ,i am talking of my personal ssh key |
| 17:30.42 | chops | joh: /etc/init.d/hwclock.sh start, date > /tmp/one, /etc/init.d/ntpdate start, date > /tmp/two, compare /tmp/one vs. /tmp/two vs. /etc/default/rcS |
| 17:30.51 | chx | vraa: that key is deployed so many places I hardly have count. |
| 17:30.52 | vraa | oh, no idea my friend, i am curious to your reply |
| 17:31.00 | keith4 | Shadow_mil: I guess I mean "why doesn't gnupg use openssl libs?" |
| 17:31.04 | pgpkeys | dutchfish - duuuuude you get me yelled at again I'ma cut you ;) |
| 17:31.18 | chops | joh: Or just check /etc/default/rcS if what you want is to find out whether your Debian system is _configured_ to think the BIOS clock is UTC or localtime, which is a different question :-) |
| 17:31.19 | Shadow_mil | keith4, ask the gpg developers |
| 17:31.23 | keith4 | pgpkeys: i just got ripped open with a rusty dagger, it's not so bad |
| 17:31.29 | pgpkeys | hah! |
| 17:31.48 | pgpkeys | say that when he tells you there's no antibiotics left |
| 17:31.57 | *** join/#debian s14ck (n=nombre@201.243.174.130) |
| 17:32.01 | *** mode/#debian [+l 880] by debhelper |
| 17:32.02 | dutchfish | !bear pgpkeys |
| 17:32.02 | dpkg | watches a angry circusbear scare pgpkeys |
| 17:32.11 | LaidBack_01 | use baking soda and water for cuts... |
| 17:32.14 | stew | keith4: openssl license contains a clause which makes it incompatible with the gpl, it uses gnu tls instead |
| 17:32.19 | *** join/#debian acxty (n=acxty@201.220.132.141) |
| 17:32.21 | pgpkeys | ooo, meat for the winter! yummy! I loves me some bear meat! |
| 17:32.21 | LaidBack_01 | way better than standard antibiotics. |
| 17:32.43 | *** join/#debian SolidSlash (n=andrzej@bdx134.neoplus.adsl.tpnet.pl) |
| 17:32.53 | pgpkeys | LaidBack_01 - ehh, lets just use straight salt! |
| 17:33.11 | kunwon1 | I just cauterize everything |
| 17:33.14 | dutchfish | pgpkeys, salty hearing yummy |
| 17:33.15 | LaidBack_01 | salt doesn't alkalyze the tissue as well... use baking soda and water. |
| 17:33.28 | justin | is this a good time to mention again that running ssh on port!=22 is a good idea? :) |
| 17:33.44 | chops | themill: I didn't start on the script part; I just figured out what needs to happen :-( |
| 17:33.48 | *** join/#debian shellito (n=shellito@200.122.229.14) |
| 17:33.52 | themill | chops: ahhh. I see. |
| 17:33.53 | acxty | hey guys, How can I have 2 monitors at the same time. laptop + monitor, but instead of showing the a same image on both, to show two different desktops to drag things between them? |
| 17:33.56 | pgpkeys | just starts beanging his head on the keyboard |
| 17:34.00 | acxty | etc |
| 17:34.03 | LaidBack_01 | i run ssh on 22 all the time. I also use suitable passwords if they are used or keys, and hosts.deny / hosts.allow |
| 17:34.04 | *** join/#debian blubberdiblub (i=foobar@dslb-088-072-043-119.pools.arcor-ip.net) |
| 17:34.05 | keith4 | stew: ah, that would do it. |
| 17:34.12 | *** join/#debian deny[all] (n=pdiablo@unaffiliated/denyall/x-000001) |
| 17:34.20 | dutchfish | laughs because most people did laugh when i mention portknock systems |
| 17:34.25 | pgpkeys | LaidBack_01 - then according to the advisory, you'[ve got some work to do |
| 17:34.33 | chops | squirrelpimp: BTW, I figured out what that blacklist error you pasted above means -- it means you're using a key that's not 1024 or 2048 bits long, and so it's not included in the generated blacklist |
| 17:34.47 | chops | squirrelpimp: That error could be a little more informative, of course. |
| 17:34.56 | Shadow_mil | complains about having to change all his passwords |
| 17:34.57 | LaidBack_01 | hmm, can someone point me to the advisory? |
| 17:35.06 | squirrelpimp | chops: ah, ok... thank you |
| 17:35.11 | pgpkeys | http://lists.debian.org/debian-security-announce/2008/msg00152.html |
| 17:35.12 | keith4 | acxty: depends on your video card and driver |
| 17:35.17 | squirrelpimp | fortunately all my ssh login keys are older than the problem |
| 17:35.23 | pgpkeys | actually.. |
| 17:35.32 | squirrelpimp | so actually it only affects noobs with not-so-old keys |
| 17:35.33 | squirrelpimp | :) |
| 17:35.37 | stew | LaidBack_01: /topic |
| 17:35.41 | pgpkeys | see the first part of the topic :) |
| 17:35.42 | squirrelpimp | hostkeys needed attention however |
| 17:35.47 | pgpkeys | see? I can learn! |
| 17:35.55 | keith4 | ha |
| 17:36.03 | acxty | keith4, what I am trying to do is to exten the desktop |
| 17:36.05 | joh | chops, hoxu: Thanks. Basically what I want to know is whether /proc/acpi/alarm wants UTC time or localtime. |
| 17:36.06 | pgpkeys | course it sometimes takes getting beat in the head with a rock.. but I learn! |
| 17:36.19 | *** part/#debian chx (n=chx@drupal.org/user/9446/view) |
| 17:36.24 | *** join/#debian magnet_ (n=magnet@silmaril.mithrandir.net) |
| 17:36.24 | pgpkeys | I'm *quite* sure rahul would be willing to provide the rock |
| 17:36.47 | chops | joh: In that case I would check /etc/default/rcS; if that's set incorrectly, then other things will be wrong (although that's not at all impossible). |
| 17:36.51 | rahul | just use the side of the shortbus :P |
| 17:36.51 | keith4 | acxty: yah, I picked up on that. but again.... |
| 17:36.54 | keith4 | <keith4> acxty: depends on your video card and driver |
| 17:37.16 | *** join/#debian kshah (n=kunalash@128.238.241.164) |
| 17:37.31 | joh | chops: Ok, but /etc/default/rcS is debian specific, right? |
| 17:37.32 | SolidSlash | hey, after few hours of having my computer working, the hard drive makes the sound like you shutdown the pc.. it's hard to describe, but it's when the power is being cut off i guess.. the sound starts ticking, the computer slows a bit down but nothing more happens.. what's going on? |
| 17:37.45 | justin | SolidSlash: run dmesg |
| 17:37.52 | chops | joh: I'm not sure; I imagine that there are Linux distributions that don't do it that way |
| 17:37.53 | anarcat | SolidSlash: dead drive? |
| 17:37.56 | *** join/#debian userID (n=userID@p5B117C46.dip.t-dialin.net) |
| 17:37.58 | *** join/#debian SecurityHoles (n=chuck@h210.46.16.98.ip.alltel.net) |
| 17:38.10 | vraa | hey guys, i did what was listed for the openssh (server), but now apache stopped working |
| 17:38.15 | chops | SolidSlash: Back up all your data right now if you haven't; don't wait around talking on IRC |
| 17:38.17 | vraa | what steps should i take to try to troubleshoot this? |
| 17:38.29 | SecurityHoles | Everyone! Update now! |
| 17:38.32 | SolidSlash | hm, it's probably going down.. i did a restart and it stopped, it just happens after few hours |
| 17:38.34 | joh | chops: Isn't there some lsb-way of doing this? :-) |
| 17:38.37 | *** join/#debian delire (n=delire@100.Red-88-6-25.staticIP.rima-tde.net) |
| 17:38.41 | chops | joh: Could be |
| 17:38.49 | joh | chops: Wrong place to ask I guess ;) |
| 17:38.49 | dfranke | SolidSlash: back up your data. Now. |
| 17:38.50 | SolidSlash | so i'll do dmesg when i'll hear the tick |
| 17:38.51 | SecurityHoles | SSL HAZ TEH H0L3z |
| 17:39.00 | dfranke | SolidSlash: no, spend that time backing up your data. |
| 17:39.00 | \amethyst | SolidSlash: is it a click or a whir? |
| 17:39.09 | SolidSlash | click |
| 17:39.23 | SolidSlash | btw, it's not my primary computer so i don't have anything important on here |
| 17:39.36 | *** join/#debian qualidafia_ (n=matt@74.95.55.9) |
| 17:39.44 | kshah | I pointed a newly registered domain to a nameservers on my network (colo of sorts) but how do I associate the name with my servers IP? does my box need to start announcing that it is whatever.com so the nameservers acknowledge it? ie, whats the next step |
| 17:39.54 | kshah | *to a = to the |
| 17:40.03 | *** join/#debian Rprp (n=Rprp@cc763024-b.groni1.gr.home.nl) |
| 17:40.13 | \amethyst | SolidSlash: you might try running 'smartctl' on the drive (package smartmontools), and maybe a surface scan with 'badblocks' |
| 17:40.13 | rahul | SolidSlash: then get on the phone with the manufacturer if it's still under warranty, or start shopping for a new drive if not |
| 17:40.18 | Breakz | not any way to use wget to get db links? |
| 17:40.18 | keith4 | kshah: the next step is to buy a book on DNS |
| 17:40.23 | delire | which are the reccommended libssl packages to use on Lenny to fix the terrible security hole affecting libssl? i see those for etch are libssl0.9.8c yet lenny ships libssl0.9.8g |
| 17:40.30 | Breakz | so it wont install the site >.> |
| 17:40.33 | rahul | and yeah, smartctl will give very concrete info on the failures |
| 17:40.34 | qualidafia_ | is this an appropriate channel for questions about the ssh vulnerability? |
| 17:40.39 | kshah | keith4: I know, its been a while since i've done this.. I'm a bit confused |
| 17:40.44 | hoxu | qualidafia_, yes |
| 17:40.49 | rahul | qualidafia_: you mean questions you haven't already been given the answer to? |
| 17:40.50 | hoxu | qualidafia_, just read the topic first |
| 17:41.01 | kshah | keith4: am I at least right that my box has to announce what it is in some fashion? |
| 17:41.04 | \amethyst | SolidSlash: I wouldn't recommend the surface scan if there were data you'd feel bad about losing, but since there's not, the risk isn't bad |
| 17:41.09 | *** join/#debian bluesceada_ (n=itsjustm@unaffiliated/bluesceada) |
| 17:41.26 | qualidafia_ | rahul: I'm trying to apt-get upgrade but it says the new openssl-client and openssl-server packages were held back |
| 17:41.30 | joh | kshah: No, you're not. Google for 'bind DNS howto' or something. |
| 17:41.36 | SolidSlash | okay thanks, and the best thing is - it happens only on debian - not on ubuntu or even windows |
| 17:41.38 | keith4 | kshah: http://www.amazon.com/exec/obidos/ASIN/0596100574 |
| 17:41.40 | qualidafia_ | rahul: I'm pretty new to linux so I'm not sure what to do |
| 17:41.42 | *** join/#debian jflm (n=jflm@d83-180-202-11.cust.tele2.es) |
| 17:41.44 | rahul | (a surface scan will make disk decay accelerate) |
| 17:41.52 | keith4 | kshah: no announcing. this isn't windoze and netbios |
| 17:42.00 | rahul | qualidafia_: use aptitude |
| 17:42.05 | kshah | ahh |
| 17:42.19 | *** join/#debian row (i=row@87-194-37-143.bethere.co.uk) |
| 17:42.21 | SecurityHoles | Everyone upgrade openSSL and regen all your keys or you'll die!!! |
| 17:42.21 | rahul | ubuntu didn't pick up this version? |
| 17:42.32 | kunwon1 | is that a threat? |
| 17:42.36 | *** join/#debian pior (n=pior@206.53.52.109) |
| 17:42.43 | linkslice | *sigh* just getting caught up on the news |
| 17:42.49 | qualidafia_ | rahul: is aptitude a textual program? I'm working on a server |
| 17:42.50 | *** join/#debian godwin2 (n=Miranda@chello084113227153.18.14.vie.surfer.at) |
| 17:42.54 | \amethyst | rahul: SolidSlash is talking about his hard drive problems, not the SSL bug |
| 17:42.54 | rahul | qualidafia_: yes |
| 17:43.02 | qualidafia_ | rahul: thanks, I'll try that |
| 17:43.13 | rahul | \amethyst: his drive clicks only in debian? |
| 17:43.16 | rahul | boggles |
| 17:43.20 | \amethyst | rahul: yes |
| 17:43.20 | SolidSlash | yea |
| 17:43.33 | *** join/#debian Saturn (i=saturn@saturn.xise.nl) |
| 17:43.34 | SecurityHoles | Thanks you debian asshats, you messed up my ubuntu's security! |
| 17:43.37 | \amethyst | SolidSlash: wait, you say it's the same sound the HD makes when you shut don't the computer? |
| 17:43.38 | rahul | maybe it has to do with powersaving settings |
| 17:43.45 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 17:44.02 | \amethyst | SolidSlash: what rahul said |
| 17:44.04 | LaidBack_01 | Oh, well I'll update my ssh. guess I'll rebuild the keys as well... no issue, it's all scripted here anyway. |
| 17:44.05 | rahul | nah, it wouldn't do that repeatedly for power saving |
| 17:44.07 | *** join/#debian Blast_Hardcheese (n=Blast@dsl092-032-215.lax1.dsl.speakeasy.net) |
| 17:44.10 | antgel | SecurityHoles: 2/10 for effort |
| 17:44.14 | *** join/#debian fdd-0 (n=fdd@79.116.105.175) |
| 17:44.21 | \amethyst | rahul: unless it spun down, then he accessed the disk and it spun back up |
| 17:44.24 | rahul | maybe debian just is able to push your disk harder :) |
| 17:44.25 | SolidSlash | I don't know *exactly* if the sound comes from harddrive.. but the click is the same when i shut my computer down |
| 17:44.29 | rahul | \amethyst: repeatedly? |
| 17:44.35 | *** part/#debian pjz (n=pj@zachs.place.org) |
| 17:44.48 | \amethyst | SolidSlash: how frequently does the sound appear? |
| 17:44.53 | rahul | SolidSlash: does it happen again and again... like a few seconds between clicks? |
| 17:44.56 | \amethyst | SolidSlash: every few minutes, seconds, hours? |
| 17:45.03 | themill | SecurityHoles: If you have a debian-specific question the please ask it. If you are running ubuntu, please go to #ubuntu. If you are trolling, please go elsewhere. Otherwise, please be silent. |
| 17:45.21 | SolidSlash | almost constantly, without any interval |
| 17:45.25 | LaidBack_01 | I wish ubuntu was based on something like fedora instead. |
| 17:45.35 | SolidSlash | just *click* *click* *click* and so on |
| 17:45.40 | \amethyst | SolidSlash: oh, that's probably not power management, or it's broken power management |
| 17:45.46 | antgel | LaidBack_01: 1/10 for effort |
| 17:45.47 | SecurityHoles | themill: debian sucks! It hard to use to and creates security holes in ubuntu! |
| 17:45.56 | *** join/#debian Pyretic (n=typing@timor.zolder.org) |
| 17:46.00 | delire | are the libssl packages in Lenny updated and safe to use? |
| 17:46.02 | antgel | the standard of trolling is really poor these days |
| 17:46.03 | joh | lol |
| 17:46.03 | hoxu | +q time |
| 17:46.08 | \amethyst | SolidSlash: usually repeated clicks are a sign of impending electromechanical failure |
| 17:46.13 | rahul | delire: read the topic... |
| 17:46.27 | LaidBack_01 | antgel lol, I'm not intentionally trolling... hmmm guess it was an unnecessary comment tho. |
| 17:46.29 | \amethyst | SolidSlash: or a major surface problem |
| 17:46.32 | SecurityHoles | I hate you all! |
| 17:46.35 | *** part/#debian SecurityHoles (n=chuck@h210.46.16.98.ip.alltel.net) |
| 17:46.36 | rahul | delire: if your versions are newer than the ones discussed, you're safe... unless you've actually USED those versions in the past |
| 17:46.48 | SolidSlash | so i guess i've got to get a new one |
| 17:46.59 | rahul | delire: it's not about what you're using NOW. it's about what you have used. |
| 17:47.04 | delire | rahul: yes, i realise |
| 17:47.08 | thegraham | Hi there, how do I make the back space on my MacBook pro act like a backspace (rather than a delete) over ssh? At the moment when I hit backspace it deletes the character to the right when I'm using nano, but not in the shell... |
| 17:47.21 | SolidSlash | i'll try to do some surface tests, i'll google it out. thanks guys. |
| 17:47.27 | LaidBack_01 | keymapping will help there |
| 17:47.33 | *** join/#debian qualidafia1 (n=qualidaf@74.95.55.9) |
| 17:47.34 | *** join/#debian konadr (n=Kon@unaffiliated/konadr) |
| 17:47.35 | *** join/#debian ktwilight_ (n=ktwiligh@33.110-67-87.adsl-dyn.isp.belgacom.be) |
| 17:47.41 | i_am_ed | thegraham: i think it's in the configuarion of the terminal on OS X |
| 17:47.46 | *** join/#debian xingu (n=xingu@cl-1387.ams-04.nl.sixxs.net) |
| 17:47.54 | \amethyst | SolidSlash: look at the smartctl stuff first |
| 17:48.04 | thegraham | i_am_ed: any other pointers? why does it only not work in nano,but not in the shell? |
| 17:48.07 | xingu | RichiH, themill (et al): ta. |
| 17:48.08 | *** join/#debian Agiofws (n=agiofws@athedsl-231360.home.otenet.gr) |
| 17:48.16 | \amethyst | SolidSlash: the drive might be clever enough to know what the problem is and tell you |
| 17:48.20 | linkslice | anyone have the inside scoop on why this linky doesn't work yet: http://www.debian.org/security/key-rollover/ |
| 17:48.33 | SolidSlash | smartctl -H /dev/hda gives SMART overall-health self-assessment test result: PASSED |
| 17:48.48 | rahul | SolidSlash: look at the details |
| 17:48.49 | antgel | linkslice: it's not ready? |
| 17:48.54 | rahul | SolidSlash: it could be starting to fail |
| 17:48.59 | SolidSlash | ok |
| 17:49.08 | i_am_ed | thegraham: I don't know the reason for the difference. I think you should find the setting you want in 'window settings...', in 'Keyboard' |
| 17:49.10 | thrope | I'm still not clear on why it's such a problem - the issue seems to be that unintialised memory was being used, and that was removed - but surely there are proper sources of randomness used so why does it matter? |
| 17:49.11 | themill | linkslice: apparently it's either still being written or isn't regenerated by the website rebuild yet. There is some info on the wiki page already. |
| 17:49.16 | antgel | SolidSlash: smart is shite. disks are cheap. you know what to do ;) |
| 17:49.26 | *** join/#debian Mash_ (n=Mash@p5B12CC11.dip.t-dialin.net) |
| 17:49.32 | i_am_ed | thegraham: 'Delete key sends backspace' |
| 17:49.37 | *** join/#debian dFence (n=chatzill@ings-d9322533.pool.mediaWays.net) |
| 17:49.57 | rahul | antgel: the problem is not in the data, but in the person who reads it |
| 17:49.58 | linkslice | themill, yeah I figured it wasn't ready, lol, just wondering if an insider is in this channel that knows an ETA :-) |
| 17:50.04 | DawnLight_ | can anyone help me to get my layout group toggle with alt+shift? xorg.conf input section http://pastie.org/196200. this is getting irritating |
| 17:50.10 | \amethyst | SolidSlash: if you take it apart, the platters are useful as coasters, and make nice conversation pieces :) |
| 17:50.22 | SolidSlash | :) |
| 17:50.24 | rahul | antgel: the drive hasn't failed YET, but there are indicators of how close it is to failing |
| 17:50.39 | rahul | SolidSlash: also, they make a very pure tone, so throwing them against walls is fun |
| 17:50.49 | thegraham | i_am_ed: I don't see any of those options in my settings. I've got keys to actions, but as I say the backspace normally works over ssh, it's just when i'm using nano that it doesn't |
| 17:50.53 | antgel | rahul: if it's making dodgy noises, i am not one to start running utilities |
| 17:50.55 | *** part/#debian eth01 (i=foo@gentoo/user/eth01) |
| 17:50.55 | \amethyst | SolidSlash: could you pastebin the output of smartctl -a /dev/hda ? |
| 17:51.00 | *** join/#debian brainsoft (i=brainsof@62.42.104.161.dyn.user.ono.com) |
| 17:51.03 | brainsoft | is there anyway to tell your system to send encripted all data you send throug a port? |
| 17:51.04 | *** part/#debian Pyretic (n=typing@timor.zolder.org) |
| 17:51.07 | SolidSlash | i'll keep it in mind ;) |
| 17:51.12 | SolidSlash | wait a sec |
| 17:51.29 | rahul | brainsoft: uh... how will the other side decrypt it? |
| 17:51.40 | DawnLight_ | ok, i've got it fixed somehow and i'm not touching it again until lenny! |
| 17:51.51 | \amethyst | brainsoft: no, but there might be other ways of doing what you want. What do you want, exactly? |
| 17:51.51 | rahul | brainsoft: you need to use a certain protocol that both sides are set up to follow |
| 17:51.52 | i_am_ed | thegraham: odd. I've just confirmed that's setting i needed to change. I am using 10.4 however. You might be better asking in #macosx |
| 17:52.01 | *** mode/#debian [+l 889] by debhelper |
| 17:52.02 | brainsoft | ok |
| 17:52.22 | brainsoft | is there a software like that for someone who uses windows and someone who uses linux |
| 17:52.25 | *** part/#debian Sergiu1 (i=sergiu@87.255.79.154) |
| 17:52.35 | brainsoft | to talk in real time |
| 17:52.37 | SolidSlash | http://pastebin.com/mb3f1faa |
| 17:52.45 | rahul | brainsoft: irc with ssl? |
| 17:52.57 | \amethyst | pidgin with otr? |
| 17:52.57 | rahul | well, the server would know what you are saying |
| 17:52.57 | thrope | brainsoft: jabber with ssl |
| 17:53.05 | *** join/#debian westside (n=ethan@c-71-229-229-146.hsd1.co.comcast.net) |
| 17:53.07 | pgpkeys | mmm pidgin + otr |
| 17:53.12 | antgel | brainsoft: email with gpg! |
| 17:53.27 | \amethyst | brainsoft: or you could set up an encrypted VPN between the computers and have them communicate over that |
| 17:53.28 | rahul | yeah, pidgin and jabber will do secure direct channels... or you can use an SSL DCC CHAT via IRC |
| 17:53.30 | *** join/#debian eth01 (i=foo@gentoo/user/eth01) |
| 17:53.50 | thegraham | i_am_ed: hmm, just not quite sure why it wouldn't work in nano, but would work normally everywhere else over ssh |
| 17:53.56 | pgpkeys | or use silc ;) |
| 17:54.08 | brainsoft | ok i'll look all the options |
| 17:54.16 | *** join/#debian meff (n=meff@gravity.gordian-knot.spherevision.org) |
| 17:54.20 | brainsoft | the VPN sounds good |
| 17:54.27 | i_am_ed | thegraham: irssi has the same behaviour as nano for me |
| 17:54.31 | brainsoft | thanks |
| 17:54.45 | enouf | thegraham: are you within a screen session? |
| 17:55.03 | *** part/#debian z1pp3r (i=zipper@90.185.36.187) |
| 17:55.03 | thegraham | enouf: no, but i also get it in a screen session (forgot about that!) |
| 17:55.17 | *** join/#debian aurehman_ (n=chatzill@202.59.70.210) |
| 17:55.24 | *** join/#debian Skratz0r (n=McSkrat@77-101-77-215.cable.ubr05.camd.blueyonder.co.uk) |
| 17:55.28 | enouf | thegraham: using an apple/macintosh ? |
| 17:55.38 | *** join/#debian Nibbler (n=Nibbler@e181115152.adsl.alicedsl.de) |
| 17:55.44 | thegraham | enouf: yep, MBP with mac os x 10.5.2 |
| 17:55.51 | *** join/#debian frog_ (n=frog@p4FD4A8F7.dip0.t-ipconnect.de) |
| 17:56.21 | enouf | i think i've only heard about this issue pertaining to macs - don't quote me though |
| 17:56.47 | thegraham | enouf: Yep, it works fine from other machines |
| 17:57.01 | *** part/#debian Skratz0r (n=McSkrat@77-101-77-215.cable.ubr05.camd.blueyonder.co.uk) |
| 17:57.08 | enouf | thegraham: does ^H work as backspace? |
| 17:57.14 | thrope | i_am_ed: check what TERM is set to - I think terminal/iterm often sets it to xterm-color (on my mbp it does anyway) and some (older) systems don't recognise that - try setting it to xterm |
| 17:57.39 | i_am_ed | thegraham: i think it's because the OS X terminal doesn't send a '^H' for the delete key by default and whatever it does send is interpretted differently by different applications. I might be talking out of my backside though. |
| 17:57.48 | rahul | !find x/xterm-color |
| 17:57.57 | *** join/#debian amikrop (n=indy@athedsl-4408396.home.otenet.gr) |
| 17:58.00 | enouf | does mbp == macbookpro? |
| 17:58.09 | kshah | yes |
| 17:58.18 | *** join/#debian davi_ (i=davi@57.Red-88-2-100.staticIP.rima-tde.net) |
| 17:58.21 | dpkg | Debian Search of 'x/xterm-color' (1): (/lib/terminfo/x/xterm-color, /usr/share/terminfo/x/xterm-color) in utils/ncurses-base. |
| 17:58.32 | kshah | enouf: fn+delete = backspace |
| 17:58.33 | enouf | hrm, i know wiki.debian.org has some macbook entries - not sure if any contain this issue though |
| 17:58.35 | rahul | hmm, it should be in stable |
| 17:59.02 | amikrop | Hello. Where can I find the official documentation/reference on Debian packaging? I have searched Google, but only found unofficial guides and quick manuals. |
| 17:59.13 | antgel | !tell amikrop about nmg |
| 17:59.17 | enouf | amikrop: /msg dpkg nmg |
| 17:59.25 | *** join/#debian startgame412 (n=startgam@pool-71-190-22-144.nycmny.east.verizon.net) |
| 17:59.25 | *** join/#debian rmwaite (n=richard@rrcs-74-218-125-86.central.biz.rr.com) |
| 17:59.30 | SolidSlash | \amethyst: Have you seen http://pastebin.com/mb3f1faa ? I posted it few minutes before, but didn't addressed it to you. |
| 17:59.40 | amikrop | antgel, enouf: OK. Thanks. |
| 18:00.01 | cusco | thegraham: yo mean.. you are using macos X operating system, and when SSHing into a debian box your backspace key acts as a delete |
| 18:00.05 | cusco | ? |
| 18:00.11 | thegraham | cusco: yes |
| 18:00.13 | cusco | that happens on my mum's mac... |
| 18:00.26 | cusco | that is something down to the mac operating system |
| 18:00.33 | cusco | never figured what |
| 18:00.39 | cusco | its anoying |
| 18:00.47 | *** join/#debian carbon60 (n=adam@dsl-207-112-124-100.tor.primus.ca) |
| 18:00.55 | thegraham | #macosx helped me: in 10.5.2 you need to go to Terminal -> Preferences -> Settings -> Advanced and check the Delete sends Ctrl-H box |
| 18:00.56 | i_am_ed | cusco: Terminal on 10.4 (tiger) has an option to make the delete key send a backspace by default. Not sure about Terminal on 10.5 though |
| 18:00.57 | thegraham | then it works |
| 18:01.03 | *** join/#debian seemawn (n=seemawn@p5DC2C2DA.dip.t-dialin.net) |
| 18:01.21 | enouf | thegraham: wow - hehe - someone make a factoid ;-) |
| 18:01.22 | *** part/#debian carbon60 (n=adam@dsl-207-112-124-100.tor.primus.ca) |
| 18:01.36 | *** join/#debian Ze` (n=ada@nbox.org) |
| 18:02.03 | *** join/#debian _ZeuZ_ (n=zeuz@2-90-17-190.fibertel.com.ar) |
| 18:02.03 | qualidafia1 | Is there a way to make line drawing characters look good in PuTTY on Windows? |
| 18:02.05 | enouf | dpkg: backspace broke is #macosx helped me: in 10.5.2 you need to go to Terminal -> Preferences -> Settings -> Advanced and check the Delete sends Ctrl-H box |
| 18:02.05 | dpkg | enouf: okay |
| 18:02.15 | _ZeuZ_ | How can I check the tc rules of a given interface? |
| 18:02.16 | enouf | :-) |
| 18:02.38 | *** part/#debian amikrop (n=indy@athedsl-4408396.home.otenet.gr) |
| 18:02.42 | Ze` | http://www.debian.org/security/key-rollover/ << 404 Not found ; anyone can give correct URL ? |
| 18:02.43 | thegraham | enouf: thanks :-) |
| 18:02.53 | azeem | Ze`: it's not up yet I think |
| 18:02.54 | JohnDoh | hi, does any one know how to test if website ssl certs are effected by the recent openssl vunrability? |
| 18:02.56 | enouf | no, thank you ;-) |
| 18:03.07 | stew | JohnDoh: they are |
| 18:03.08 | rmwaite | ugh, people cant read anymore can they |
| 18:03.23 | Ze` | okey... :/ how renew ssh-servers keys ? |
| 18:03.30 | enouf | Ze`: perhaps http://wiki.debian.org/SSLkeys |
| 18:03.31 | stew | Ze`: /topic |
| 18:04.40 | JohnDoh | ok thanks |
| 18:04.46 | Ze` | okey, sorry :) i have read topic and dpkg msg but not wiki page ;) |
| 18:05.27 | *** join/#debian Duddle (n=Duddle@91.66.243.96) |
| 18:05.30 | *** join/#debian shellito (n=kvirc@200.122.229.14) |
| 18:05.35 | *** join/#debian kyncani (n=kyncani@bro29-1-82-245-180-190.fbx.proxad.net) |
| 18:06.21 | _ZeuZ_ | tc qdisc show --->>> That shows all the tc politics for all interfaces? |
| 18:06.21 | *** join/#debian Sergiu1 (i=sergiu@87.255.79.154) |
| 18:06.56 | *** join/#debian Yvonne (n=Yvonne@pdpc/supporter/active/Yvonne) |
| 18:07.05 | *** join/#debian mstevens (n=mstevens@zazen.etla.org) |
| 18:07.59 | *** join/#debian jtsigma (n=jtsigma@adsl-69-106-102-97.dsl.irvnca.sbcglobal.net) |
| 18:08.04 | jtsigma | anyone understand why vmstat shows io as very little (most of the time 0 for bi and bo) but iostat shows that two of my disks are at 100% |
| 18:08.23 | azeem | what about si/so? |
| 18:08.23 | pinto3 | would $time iotest < testfile1 > /dev/null >> buffer_test append the time output to buffer_test? |
| 18:08.48 | pinto3 | or do i have to group that up somehow, put the >> after time command? |
| 18:09.55 | drwahl | is there someway (in irssi) to find what channels are on this server (irc.freenode.net) ? |
| 18:10.28 | stew | drwahl: /help list |
| 18:10.31 | drwahl | more specifially, i'm looking for a channel to ask questions related to google's GrandCentral |
| 18:10.34 | drwahl | thank stew |
| 18:11.06 | stew | drwahl: also /msg chanserv help list |
| 18:11.43 | *** join/#debian PriitM (n=amd4200@ip222.cab16.mus.starman.ee) |
| 18:12.37 | *** join/#debian LimCore (n=rafal@unaffiliated/limcore) |
| 18:12.53 | LimCore | URLs in http://www.debian.org/security/2008/dsa-1571 seem to be missing "Instructions how to implement key rollover for various packages will be published at:" |
| 18:13.07 | dondelelcaro | LimCore: the "will be published at" |
| 18:13.10 | *** join/#debian bzsa (n=bzsa@host-88-132-3-177.prtelecom.hu) |
| 18:13.17 | *** join/#debian mbroeker (n=mbroeker@BAF8d42.baf.pppool.de) |
| 18:13.17 | dondelelcaro | LimCore: is clearly the critical piece there. |
| 18:13.29 | themill | dondelelcaro: no, the DSA text is missing all the links |
| 18:13.32 | *** join/#debian DirtyDawg (i=tom@92-233-244-82.cable.ubr05.benw.blueyonder.co.uk) |
| 18:13.34 | LimCore | dondelelcaro: in other places there are links already to this files |
| 18:13.42 | *** join/#debian LegolasV (n=whoeiii3@citry.student.utwente.nl) |
| 18:13.51 | azeem | the web version is busted |
| 18:13.56 | themill | LimCore, dondelelcaro: view the html source |
| 18:14.11 | dondelelcaro | oh, thought we were talking about their non-existance |
| 18:14.15 | vraa | success, dowkd.pl no longer reports weak keys. thanks guys! |
| 18:14.18 | LimCore | <PROTECTED> |
| 18:14.18 | vraa | debian rules |
| 18:14.30 | chops | Does anyone happen to know how to make lm-sensors work on a Dell Poweredge 1950 or 2950? |
| 18:14.48 | dondelelcaro | yeah, that's just the automatic DSA parser falling over |
| 18:14.50 | *** join/#debian foka (n=foka@123.115.242.145) |
| 18:14.50 | rmwaite | lm? |
| 18:15.05 | *** part/#debian mofino (i=reid@thirddimension.net) |
| 18:15.30 | thrope | was the affected ssl package in sarge? |
| 18:15.40 | streuner | no |
| 18:15.43 | *** part/#debian _eggy_ (n=mark@eggy.student.utwente.nl) |
| 18:15.44 | chops | thrope: sarge was not affected by the ssl trouble |
| 18:15.54 | dondelelcaro | LimCore: and it's actually already fixed; it'll be correct in the next rebuild |
| 18:15.54 | thrope | ah ok thanks |
| 18:16.03 | *** join/#debian JW (n=JW@cvs.claborn.net) |
| 18:16.05 | pgpkeys | entry for the issue is at http://lists.debian.org/debian-security-announce/2008/msg00152.html |
| 18:16.09 | *** join/#debian merc (n=merrick@rrcs-24-172-179-175.central.biz.rr.com) |
| 18:16.50 | *** join/#debian itchi (n=David@unaffiliated/itchi) |
| 18:16.57 | *** join/#debian ErikRose (n=grinch@PollockMega-Mobile253.cac-labs.psu.edu) |
| 18:18.22 | *** join/#debian msshams (n=msshams@91.184.75.47) |
| 18:18.26 | *** join/#debian Shisui (i=chris@79.80.220.228) |
| 18:18.32 | enouf | chops: all i know is lm-sensors also made a fork pkg called i2c-tools (sid and mayne now in lenny?) - maybe "/msg dpkg myram" |
| 18:19.12 | chops | enouf: Interesting |
| 18:19.36 | *** join/#debian xtr-II (i=94752345@216.19.191.191.novuscom.net) |
| 18:19.38 | enouf | chops: some other possible info http://ornellas.apanela.com/dokuwiki/pub:spd |
| 18:19.51 | *** join/#debian bao (i=pank@h-79-136-17-13.NA.cust.bahnhof.se) |
| 18:19.56 | chops | enouf: I'm trying a more recent lm-sensors right now; I found a post which seems to imply that lm-sensors >= 2.10.2 knows how to talk to the PE sensors |
| 18:20.00 | *** join/#debian BudgetDedicated (n=BudgetDe@s5593c9b1.adsl.wanadoo.nl) |
| 18:20.05 | *** part/#debian merc (n=merrick@rrcs-24-172-179-175.central.biz.rr.com) |
| 18:20.29 | bao | does the latest kernel have fuse installed as default? i have 2.6.22 now and fuse didnt come either built in or as module with that |
| 18:20.29 | enouf | chops: no idea - i only used decode-dimms successfully |
| 18:20.43 | msshams | i need to analyze and classify all of packets that sends from or receives by my server. please recommend us an application. |
| 18:20.51 | enouf | (well - that's all i tried on my old hardware ;-)) |
| 18:20.57 | chops | msshams: snort |
| 18:20.57 | halflife | msshams: iptraf |
| 18:21.17 | halflife | oops i didnt read analyze . discard my suggestion |
| 18:21.43 | *** join/#debian mag_mor (n=blob@vpn-1552.swh.uni-giessen.de) |
| 18:22.00 | *** mode/#debian [+l 897] by debhelper |
| 18:22.05 | msshams | thank you |
| 18:22.14 | abrotman | !tell msshams about search |
| 18:22.36 | *** join/#debian mimcpher (n=mimcpher@mcpherrin.ca) |
| 18:22.52 | enouf | yep, in lenny now http://packages.debian.org/lenny/i386/i2c-tools/filelist |
| 18:22.59 | *** join/#debian jotun (n=ioppo@host-84-223-228-78.cust-adsl.tiscali.it) |
| 18:23.37 | qualidafia1 | What is the difference between dsa and rsa keys? Can I use ssh-keygen to create both types? |
| 18:23.42 | pgpkeys | yes |
| 18:24.05 | bao | noone has any idea about fuse? can i view the config file for the kernel somewhere? |
| 18:24.12 | justin | bao: /boot/ |
| 18:24.16 | qualidafia1 | pgpkeys: was that to me? |
| 18:24.23 | pgpkeys | google RSA and DSA to see |
| 18:24.24 | bao | justin: before i install it |
| 18:24.39 | zinx | bao: there is a fuse package in Debian |
| 18:24.50 | *** join/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 18:25.00 | bao | oh ok |
| 18:25.08 | *** join/#debian caosun (n=caosun@62-101-126-218.ip.fastwebnet.it) |
| 18:25.14 | *** part/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 18:25.35 | ErikRose | loves a big security-sensitive Perl script with no comments. :-P |
| 18:25.50 | *** join/#debian mib_4t8t6r (i=54ab6dee@gateway/web/ajax/mibbit.com/x-6c63bba860da439f) |
| 18:26.22 | themill | ErikRose: waddyamean? Lines 3-8 are comments :) |
| 18:26.29 | ErikRose | heh |
| 18:26.30 | zinx | bao: looks like the module is with the kernel though, at least with sid |
| 18:26.51 | *** join/#debian tobias (n=tobias@adsl-068-213-147-159.sip.rdu.bellsouth.net) |
| 18:26.51 | *** join/#debian frog___ (n=frog@p4FD4A5BA.dip0.t-ipconnect.de) |
| 18:27.00 | bao | zinx: ok, how do i know if i run sid? :) |
| 18:27.08 | zinx | bao: looks like it was even with 2.6.22 :/ |
| 18:27.19 | zinx | bao: you probably don't run it, and shouldn't :P |
| 18:28.13 | enouf | !fuse |
| 18:28.13 | dpkg | rumour has it, fuse is at http://fuse.sf.net/, is Filesystem in USEerspace, enables you to mount various exotic filesystems, like <ntfs-3g>, samba workgroups, tar files, ftp sites etc. Fuse is packaged in debian and already included in recent 2.6.x kernels.. See http://en.wikipedia.org/wiki/Filesystem_in_Userspace |
| 18:28.13 | bao | is it sources.list that defines if i run sid? |
| 18:28.38 | enouf | !tell bao -about releases |
| 18:28.39 | Spec | wow, you can mount tar files with fuse? that's neat |
| 18:28.45 | msshams | chops: can you tell more about snort? do you use it? its good for you? and .... |
| 18:28.56 | *** join/#debian wurstwolf (n=wurstwol@p4FCA7510.dip.t-dialin.net) |
| 18:29.05 | ErikRose | Hmm, looks like dowkd.pl doesn't claim to check generic, openssl-generated RSA keys. Right? Wrong? |
| 18:29.09 | Spec | msshams: snort is neat, it's a bit of a time overhead to fine tune the rules for your own environment, but it's very effective. |
| 18:29.19 | enouf | and yes bao , sources.list - also "/msg dpkg reference" and 'grounding' |
| 18:29.20 | ErikRose | tries to figure out whether he has to give Thawte another $80. |
| 18:29.32 | JohnDoh | is there anyway to find out which version of openssl was used to create a web ssl certificate, may be the testing tool can do it but i dont know how |
| 18:29.54 | msshams | Spec: is snort a solution for dos protection? |
| 18:30.01 | ErikRose | JohnDoh: If you can figure out when you generated your key, you can dig through the dpkg logs to see what version of openssl you had then. |
| 18:30.10 | Spec | not really, i've never used snort as an active filter, just a passive one. |
| 18:30.23 | qualidafia1 | is there a way to discover the charset being served in an ssh session? |
| 18:30.23 | Eulex | ErikRose, dpkg logs are a pretty recent invention |
| 18:30.26 | Spec | and i assume if you have the bandwidth, you could ddos the snort box. |
| 18:30.32 | ErikRose | Rats. |
| 18:31.17 | Spec | write a script to brute force the ssl key with the database of possible-keys that were generated...is one way to check. |
| 18:31.31 | Deezire | May 13 20:30:01 VHS001 CRON[19506]: (pam_unix) session opened for user root by (uid=0) |
| 18:31.34 | Deezire | May 13 20:30:01 VHS001 CRON[19506]: (pam_unix) session closed for user root |
| 18:31.37 | themill | ErikRose: correct, it doesn't check pem files and friends :( |
| 18:31.37 | Deezire | what is this? |
| 18:31.46 | ErikRose | themill: Rats again. THanks. |
| 18:31.47 | anarcat | Deezire: your cron jobs |
| 18:31.48 | themill | Deezire: a cron job |
| 18:31.57 | Deezire | Should they be doint that? |
| 18:32.14 | Eulex | ErikRose, first stable to include it was etch. |
| 18:32.20 | Spec | Deezire: most likely, yes. |
| 18:32.41 | ErikRose | Thanks, Eulex. I've been running Lennie on my box for awhile. :-( |
| 18:32.43 | Deezire | okey |
| 18:32.44 | *** join/#debian abchirk (n=rapunzel@cl-2502.ham-01.de.sixxs.net) |
| 18:32.46 | Spec | Deezire: check your /etc/crontab or /var/spool/cron/crontabs/* for a job that runs at 20:30, which should look like: 30 20 * * * or similar |
| 18:32.47 | *** join/#debian slack_ (n=nombre@201.243.174.130) |
| 18:33.38 | *** join/#debian kombucha (n=kombucha@c-67-174-249-33.hsd1.ca.comcast.net) |
| 18:34.38 | *** part/#debian porncake (n=beefcake@217.31.175.45) |
| 18:35.18 | mib_4t8t6r | hi guys... mmmh, i hope the guys in the german chan are not angry, because i asked there too... i use gnomesword, but in debian i haven't a german bible. is it in an extra package, that i haven't found?? or was it my mistake and i had it configure wrong? |
| 18:35.26 | *** join/#debian cloakable (n=cloakabl@host81-151-35-225.range81-151.btcentralplus.com) |
| 18:35.28 | *** join/#debian stoned (n=stoned@unaffiliated/stoned) |
| 18:35.29 | kombucha | which deb package has the command "at" , that lets me do stuff like 'at 11:59PM, run this command' ? |
| 18:36.31 | stew | kombucha: 'at' |
| 18:36.42 | kunwon1 | tricky |
| 18:36.49 | streuner | kombucha: apt-file search /bin/at |
| 18:36.59 | *** part/#debian qualidafia1 (n=qualidaf@74.95.55.9) |
| 18:37.01 | *** join/#debian JohnDoh (n=jeff@unaffiliated/johndoh) |
| 18:37.41 | *** join/#debian Sufixx (i=sufixx@unaffiliated/sufixx) |
| 18:37.44 | *** part/#debian Sergiu1 (i=sergiu@87.255.79.154) |
| 18:38.23 | enouf | Deezire: IINM, most/all system crons are by user 'nobody' via default, which is setup with no login sh and su's to root to run the jobs that need it (i likely have that info all jumbled up - and maybe just wrong) .. check /var/log/syslog , /kern.log and especially /auth.log (where i guess you got those entries) |
| 18:38.40 | Sufixx | hello, is there any way to limit maximum speed with which nfs reads/writes files? |
| 18:39.19 | *** join/#debian rascal999_ (n=aidan@host81-158-200-136.range81-158.btcentralplus.com) |
| 18:39.37 | stew | root su's to nobody in order to run jobs as nobody (not the other way around) when they are specifically setup to be run as nobody |
| 18:39.56 | rascal999_ | I'm getting a Kernel panic - not syncing: Attempted to kill init! Just before this error I get a cannot load floppy module. I'm using a usb floppy drive. What special boot parameters do I need? |
| 18:40.38 | enouf | Deezire: my bad, nobody seems to be related to /etc/cron.*/find (which does the updatedb stuff) |
| 18:40.41 | *** join/#debian dFence (n=chatzill@ings-d9322533.pool.mediaWays.net) |
| 18:40.45 | *** join/#debian bkw_ (n=bkw@h-235-0.A189.cust.bahnhof.se) |
| 18:40.51 | *** join/#debian brett (n=brett@meat.kavi.com) |
| 18:41.24 | enouf | stew: ok , thanks |
| 18:42.49 | *** part/#debian Sufixx (i=sufixx@unaffiliated/sufixx) |
| 18:42.53 | enouf | rascal999_: gah, i think your BIOS needs to be able to do usb 'floppy emulation' booting |
| 18:43.07 | rascal999_ | enouf: ah crap |
| 18:43.18 | rascal999_ | this isn't possible in my bios |
| 18:43.37 | enouf | ok, you can perhaps put whatever you need on CD? |
| 18:43.48 | enouf | or a USB key? |
| 18:43.58 | rascal999_ | don't get me started on usb install |
| 18:44.03 | rascal999_ | I spent 6 hours trying to get that to work |
| 18:44.05 | *** join/#debian i_am_ed (n=ed@80.175.128.209) |
| 18:44.11 | rascal999_ | I'm using a usb floppy drive |
| 18:44.11 | enouf | haha - well .. do you have a CD Drive? |
| 18:44.13 | GiabboO | grrrrr |
| 18:44.17 | rascal999_ | no |
| 18:44.23 | rascal999_ | I would use one if I did :D |
| 18:44.37 | enouf | rascal999_: internal drives are like only .. oh a craptop? |
| 18:44.45 | rascal999_ | hp tablet |
| 18:44.55 | enouf | grah |
| 18:44.59 | *** part/#debian brett (n=brett@meat.kavi.com) |
| 18:45.08 | *** join/#debian MrNaz (n=MrNaz@125.27.71.202.adsl.dynamic.totbb.net) |
| 18:45.32 | enouf | tftp is last to try ;-) |
| 18:45.43 | rascal999_ | :S |
| 18:45.53 | rascal999_ | there are no special parameters I can use? |
| 18:45.54 | *** join/#debian sodio (n=sodio@va-71-1-140-171.sta.embarqhsd.net) |
| 18:46.01 | enouf | rascal999_: seen http://goodbye-windows.com ? |
| 18:46.33 | LimCore | make a joke about goodby dsa key |
| 18:46.37 | *** join/#debian JuanCraft (n=shellito@200.122.229.14) |
| 18:46.37 | rascal999_ | in bios, is PXE/Remote boot the answer? |
| 18:46.50 | LimCore | 1 line, 2 typos, I need coffee. |
| 18:47.10 | enouf | rascal999_: you might be able to put SBM (btmgr.sf.net) on floppy or use hd-media (just guesses) |
| 18:47.11 | msshams | with which software can i get a graphs and maps from packets that send or receive? |
| 18:47.41 | *** join/#debian pallotro3 (i=chrono@marge.roa.cc) |
| 18:47.47 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 18:47.57 | enouf | rascal999_: the installation guide talks all about that (netboot/pxe/tftp) |
| 18:48.04 | *** join/#debian Peacimowen (n=Solar@CPE004010100002-CM001bd7a84e82.cpe.net.cable.rogers.com) |
| 18:48.50 | enouf | msshams: etherape? |
| 18:48.52 | *** join/#debian JohnDoh (n=jeff@unaffiliated/johndoh) |
| 18:49.09 | enouf | msshams: netperf? awstats (if for web site stats) |
| 18:49.17 | madclicker | hi, i,m trying to follow grub setup for "fallback=1" in menu.lst by adding a boot option for (hd1,0) but every time i run "update-grub" it wipes the changes. What would cause thos? |
| 18:49.21 | madclicker | this |
| 18:49.42 | msshams | enouf: thanks |
| 18:49.43 | *** join/#debian kshah (n=kunalash@128.238.241.164) |
| 18:49.45 | Eulex | madclicker, update-grub? |
| 18:49.55 | enouf | madclicker: the other options |
| 18:50.02 | xingu | trolls. |
| 18:50.08 | *** join/#debian aurehman_ (n=chatzill@202.59.70.210) |
| 18:50.14 | enouf | !comfort xtr-II |
| 18:50.15 | dpkg | There, there, xtr-II. It's OK. I'm here for you. |
| 18:50.17 | enouf | gah! |
| 18:50.25 | enouf | xingu: that was meant for you :-p |
| 18:50.25 | Eulex | madclicker, use the # kopt settings |
| 18:50.29 | madclicker | enouf, didnt get that |
| 18:50.39 | *** join/#debian autojack (n=owen@nerdnetworks.org) |
| 18:51.12 | enouf | madclicker: well, fallback is trick, something to do with default 0 and.or it writing a file into /boot/grub -- i'd have to dig out the specifics |
| 18:51.21 | xingu | man mkinitramfs-kpkg takes ages on this little c1ve |
| 18:51.28 | *** join/#debian m4ggus (n=marcus@p5B034C13.dip.t-dialin.net) |
| 18:51.59 | autojack | due to the Debian openssl vulnerability that was announced today, I've just upgraded my openssl to the latest Etch package that includes the fix. I've used ssh-keygen to regenerate my ssh DSA and RSA keys, and restarted openssh. yet when I run the key security test tool against my box, it still reports a weak ssh key. anyone else experiencing this? |
| 18:52.05 | *** join/#debian aplsin (n=imar@unaffiliated/aplsin) |
| 18:52.17 | enouf | madclicker: but i originally meant all the other options listed in between (within) the AUTOMAGIC area |
| 18:52.18 | vraa | autojack: try following the directions here, they worked for me |
| 18:52.18 | vraa | http://wiki.debian.org/SSLkeys |
| 18:52.19 | *** join/#debian frog (n=frog@p4FD4A3F5.dip0.t-ipconnect.de) |
| 18:52.36 | vraa | all i had to do on my server was the portion under "openssh (server)" |
| 18:52.42 | *** join/#debian omry_|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 18:52.45 | vraa | i think it was specifically the dpkg-reconfigure portion that fixed it |
| 18:52.46 | madclicker | enouf, i found some sarge and etch documentations, but none seem to discuss the issue of update-grub wiping the menu'lst |
| 18:52.47 | enouf | autojack: see /topic as well |
| 18:52.56 | *** join/#debian zamuroff (n=manuel@201.211.108.133) |
| 18:53.06 | enouf | madclicker: read menu.lst comments |
| 18:53.14 | *** join/#debian userID (n=userID@p5B117C46.dip.t-dialin.net) |
| 18:53.20 | *** join/#debian XLV (n=XLV@88.218.43.252) |
| 18:54.08 | *** join/#debian wam (n=wam@p5B2FF1F6.dip.t-dialin.net) |
| 18:54.15 | *** join/#debian Refakki (i=refakki@ppp85-140-62-136.pppoe.mtu-net.ru) |
| 18:54.43 | autojack | vraa: OK, that isn't exactly what I did. but I just followed those steps for openssl, and the test script still reports weak keys. |
| 18:54.53 | autojack | vraa: have you tried the test script against your system? |
| 18:54.56 | *** join/#debian SlackDeb (n=fperetti@201.254.118.95) |
| 18:54.58 | *** join/#debian zephyr (n=zephyr@89.120.241.231) |
| 18:55.13 | wam | Hi, I use fail2ban against dos attacks against my ssh daemon. Now a ddos is hitting me and fail2ban doesn't act, because they're just too many hosts. I have good/no passwords, so the risk is minimal. But my entropy shrinks and my ssh becomes slow. Is there anything else I could do? |
| 18:55.19 | vraa | i did, i did it and it said i had weak keys, i ran it again and now it doesn't. i did read that it could give false positives / negatives, but that's a risk i'm willing to take heh |
| 18:55.24 | vraa | i dont know much about all this, i just follow instructions |
| 18:55.32 | justin | wam: don't run ssh on port 22 |
| 18:55.34 | autojack | same here. hmm. |
| 18:55.43 | wam | justin: yeah. Any other solutions? |
| 18:55.46 | i_am_ed | autojack: did you delete all your odd keys as well? |
| 18:55.48 | justin | wam: that is the solution. |
| 18:56.04 | wam | justin: this is currently not an option. |
| 18:56.13 | *** join/#debian suki (i=1001@cm2.sigma7.maxonline.com.sg) |
| 18:56.16 | i_am_ed | are there any public keys from other systems hanging around in ~/.ssh? |
| 18:56.24 | wam | Isn't there a distributed blacklist like for mailhosts? |
| 18:56.35 | *** join/#debian Bravewolf (n=wolf@host-78-12-76-141.cust-adsl.tiscali.it) |
| 18:56.37 | suki | i cant seem to find the rc.iptables file in debian, can anyone point me to the file |
| 18:56.45 | abrotman | wam: probably because the times are too far apart for fail2ban to notice |
| 18:56.47 | abrotman | suki: isn't one |
| 18:56.56 | wam | abrotman: correct. |
| 18:56.59 | abrotman | wam: you could easily change the ssh port |
| 18:57.04 | abrotman | wam: or up the fail2ban time |
| 18:57.05 | autojack | i_am_ed: no, I didn't do that. |
| 18:57.13 | wam | abrotman: there are a lot of customers on the hosts... |
| 18:57.29 | abrotman | wam: i think i saw them to be about 12-15 minutes apart .. |
| 18:57.32 | wam | abrotman: that could be an option. Like for a few hours or so |
| 18:57.55 | zephyr | Hello, I am trying to install a HP Deskjet 3940 on a Debian Etch, but whenever I plug the printer into the USB port of the computer, the entire system freezes instantly. I have tried the USB port with a pen drive but the result is the same. Any ideas why this might happen ? |
| 18:57.56 | wam | abrotman: thanks, I'll further analyze the attact and see if I can see more patterns. |
| 18:58.07 | abrotman | wam: i don't expect that you're the only one .. from what i saw, very well controlled attack .. 12-15 minutes apart with a coordinated dictionary of user names |
| 18:58.10 | suki | hmm, ok, i have a a previous rc.iptables from my previous slackware machine, is it possible to bring it up with debian without much hassle ? :) |
| 18:58.11 | *** join/#debian haxi (n=home_deb@73.171.68-86.rev.gaoland.net) |
| 18:58.35 | abrotman | suki: try to use it from the 'pre-up' in your interfaces |
| 18:58.43 | wam | abrotman: are there any community websites that document such attacks? |
| 18:59.03 | autojack | i_am_ed: I just regenerated my own .ssh/id_rsa key and deleted my known_hosts. still get a weak key response. |
| 18:59.14 | *** join/#debian omry|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 18:59.21 | abrotman | wam: alternately .. grep Invalid /var/log/auth.log .. get a list of IPs .. ban them all with iptables (will take awhile and use a ton of RAM i suppose) |
| 18:59.31 | abrotman | but that probably won't really help |
| 18:59.41 | wam | abrotman: not for ling |
| 18:59.42 | wam | long |
| 18:59.47 | kshah | what version of bind does Etch ship with? |
| 18:59.50 | i_am_ed | autojack: http://wiki.debian.org/SSLkeys |
| 18:59.58 | *** join/#debian xingu (n=xingu@cl-1387.ams-04.nl.sixxs.net) |
| 19:00.08 | i_am_ed | autojack: are you running an ssh server too? |
| 19:00.23 | autojack | yeah, that's what I'm testing against. |
| 19:00.24 | abrotman | wam: right .. new port is the easiest |
| 19:00.35 | *** join/#debian Mash_ (n=Mash@p5B12CC11.dip.t-dialin.net) |
| 19:00.37 | abrotman | kshah: packages.debian.org |
| 19:00.41 | wam | abrotman: yep - I'll take that as a long-term option ;) |
| 19:01.10 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 19:01.15 | stew | kshah: 9.3.4 and 8.4.7 (http://packages.debian.org/bind) |
| 19:01.19 | i_am_ed | autojack: i think you need to do the OpenSSH (Server) part on http://wiki.debian.org/SSLkeys too then |
| 19:01.35 | autojack | yeah, that's what I did :) |
| 19:01.36 | LimCore | what is a good place to discuss this bug |
| 19:01.40 | LaidBack_01 | quit |
| 19:01.44 | LimCore | as in "how could this happen O_o" |
| 19:01.45 | autojack | I upgraded openssl and openssh, etc. |
| 19:02.00 | *** mode/#debian [+l 904] by debhelper |
| 19:02.31 | i_am_ed | autojack: and you did rm /etc/ssh/ssh_host_* and dpkg-reconfigure openssh-server? |
| 19:02.41 | *** join/#debian dfranke_ (n=dfranke@adsl-99-157-72-243.dsl.pltn13.sbcglobal.net) |
| 19:03.05 | streuner | LimCore: troll somewhere else |
| 19:04.16 | *** join/#debian tech13 (n=tech13@adsl-76-221-79-150.dsl.milwwi.sbcglobal.net) |
| 19:04.23 | Bravewolf | Are there known bugs in debian installer related to dm-crypt? |
| 19:04.33 | Bravewolf | In lenny? |
| 19:04.38 | zinx | Bravewolf: check the BTS |
| 19:04.47 | LimCore | streuner: I ment more like discussing some ideas for more testing etc... and I asked where to do it, why are you unkind |
| 19:05.04 | abrotman | LimCore: testing what? are you qualified to do this testing? |
| 19:05.06 | tech13 | is there an easy way to verify if a https cert was created by the weak openssl? |
| 19:05.17 | stew | LimCore: http://lists.debian.org/debian-qa is the place to discuss testing for debian. |
| 19:05.27 | abrotman | tech13: the DSA has a testing application type thing |
| 19:05.35 | *** part/#debian pallotro3 (i=chrono@marge.roa.cc) |
| 19:05.37 | *** join/#debian cristina_crow (n=cristina@86.106.3.229) |
| 19:05.54 | LimCore | abrotman: testing for possible bugs; hmm I may be qualified for some, probably not dsa |
| 19:05.55 | *** part/#debian cristina_crow (n=cristina@86.106.3.229) |
| 19:05.59 | *** part/#debian _ZeuZ_ (n=zeuz@2-90-17-190.fibertel.com.ar) |
| 19:06.32 | fugit | <PROTECTED> |
| 19:06.46 | tech13 | abrotman, was able to use it to check ssh keys, not sure how to use it for http certs though. |
| 19:06.50 | wam | fugit: too bad it's not. It's really worldwide. |
| 19:07.02 | i_am_ed | autojack: if you've managed to replace the servers keys correctly you should be warned about a potential man in the middle attack when you next log in |
| 19:07.04 | wam | fugit: just some random botnet (jsrb (TM)) ;) |
| 19:07.08 | abrotman | tech13: i'd say they're vulnerable .. based on my understanding |
| 19:08.42 | *** join/#debian mtn (n=mtn@dpc6746233034.direcpc.com) |
| 19:09.29 | madclicker | enouf, it seem to be a bug in grub as per <http://bugs.debian.org/cgi-bin/bugreport.chttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=302276gi?bug=302276 |
| 19:09.36 | autojack | i_am_ed: aha - I was. |
| 19:09.48 | autojack | but still... how do I know this key is really no longer weak? |
| 19:09.52 | madclicker | update-grub doesn't support fallback |
| 19:10.43 | pll | Is there a tool available I can use, which, when passed a directory containing a number of packages will tell me if there are any dependancy issues (i.e. missing dependancies, dependancy conflicts, etc) ? |
| 19:11.17 | *** join/#debian Piet_ (i=pietor@gateway/gpg-tor/key-0xC5C71DCE) |
| 19:11.47 | xingu | cd |
| 19:11.53 | dondelelcaro | or at least, aren't as strong as they should be |
| 19:12.00 | *** mode/#debian [+l 897] by debhelper |
| 19:12.03 | rascal999_ | I've installed dnsmasq but can't get it working. I've disabled the router as default dhcp |
| 19:12.13 | deadcat_ | dondelelcaro: i was checking out your photo gallery. no 2008 stuff eh? |
| 19:12.25 | dondelelcaro | deadcat_: not really; I've been super busy and slacking |
| 19:12.33 | dondelelcaro | deadcat_: I'll have some pictures up next week I think |
| 19:12.34 | deadcat_ | dondelelcaro: gotcha |
| 19:12.48 | *** join/#debian omry_|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 19:12.56 | LimCore | rascal999_: I use /etc/resolv.conf that just contain nameserver 127.0.0.1 and /etc/resolv.conf.isp that contains outside dns (i.e. IP of gateway) and I tell dnsmas to read the later |
| 19:13.24 | abrotman | super busy and slacking? |
| 19:13.28 | rascal999_ | LimCore: I'm trying to get PXE working LimCore |
| 19:13.30 | grand_grunt | :quit |
| 19:13.31 | *** join/#debian woden1 (n=woden@62.225.50.123) |
| 19:14.35 | *** join/#debian itomato (n=itomato@66-224-246-146.atgi.net) |
| 19:14.39 | *** join/#debian mschiff (n=mschiff@e176125012.adsl.alicedsl.de) |
| 19:15.20 | deadcat_ | i am just slacking (= |
| 19:15.34 | *** join/#debian Tramp (i=mt@d83-180-92-153.cust.tele2.ch) |
| 19:15.50 | [apo] | abrotman: No slacking slacking came from SLS which then became slackware whch then became SUSE so if you debian you can only be gentooing |
| 19:15.58 | mschiff | is sarge affected by DSA1571? |
| 19:16.02 | streuner | no |
| 19:16.18 | xingu | wonders about sarge-backports |
| 19:16.18 | *** join/#debian rats (n=rats@cpe-24-165-160-245.neo.res.rr.com) |
| 19:16.41 | *** join/#debian die7 (n=die7_4@p4FE5CE57.dip.t-dialin.net) |
| 19:16.41 | deadcat_ | the openssl package? |
| 19:16.45 | pll | what tools exist for package dependancy resolution? |
| 19:16.49 | xingu | mmm |
| 19:16.58 | mschiff | streuner: was this for me? |
| 19:17.07 | streuner | mschiff: yes, http://lists.debian.org/debian-security-announce/2008/msg00152.html |
| 19:17.24 | mschiff | streuner: thx |
| 19:17.26 | *** join/#debian troubled (n=troubled@pdpc/supporter/sustaining/troubled) |
| 19:17.42 | *** join/#debian Lagbolt (n=jm@pal-179-063.itap.purdue.edu) |
| 19:17.48 | pll | I have a directory full of packages I want to turn into a debian repository, but I need to know if there are packages missing or conflicts among the exisitng set. |
| 19:18.06 | deadcat_ | just apt-get graded openssl on my box. (= |
| 19:18.36 | abrotman | [apo]: uhm what? |
| 19:18.47 | *** join/#debian jotun (n=ioppo@host-84-222-102-86.cust-adsl.tiscali.it) |
| 19:19.08 | die7 | why i can not find tnsping on debian, i have 10.2.0 oracle client installed |
| 19:19.12 | i_am_ed | deadcat_: replaced all the keys too? |
| 19:19.21 | *** join/#debian omry|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 19:19.21 | *** join/#debian umgeher (n=umgeher@c934d9d8.virtua.com.br) |
| 19:19.28 | abrotman | die7: full path ? |
| 19:19.32 | deadcat_ | i_am_ed: thats fine. its just my home data server. (= |
| 19:19.40 | die7 | well i can find att all |
| 19:19.50 | rascal999_ | how do I find my ip? |
| 19:19.52 | *** join/#debian Gunirus (n=Gunirus@ip-81-11-205-122.dsl.scarlet.be) |
| 19:19.56 | rascal999_ | (local) |
| 19:20.03 | Eulex | ifconfig |
| 19:20.29 | i_am_ed | deadcat_: there doesn't seem much point upgrading openssh without replacing all the keys |
| 19:20.48 | deadcat_ | i_am_ed: oh.. |
| 19:20.59 | deadcat_ | i_am_ed: you mean the id_rsa right? |
| 19:21.21 | i_am_ed | deadcat_: http://wiki.debian.org/SSLkeys |
| 19:22.03 | deadcat_ | oh.. all of those.. thanks |
| 19:22.07 | stew | deadcat_: all the individuals' ~/.ssh/id_* and /etc/ssh/ssh_host_* |
| 19:22.21 | deadcat_ | thanks gang. |
| 19:22.53 | *** join/#debian woden1_ (n=woden@62.225.50.123) |
| 19:23.32 | woden1_ | What is the best solution when your BIOS is set to local time and you have Vista on another partition and you want Debian to show the correct time? When Debian boots it says "Unable to set system clock"... |
| 19:23.57 | deadcat_ | woden1_: ntpdate |
| 19:24.09 | dondelelcaro | woden1_: use UTC=no, ntpdate, and make sure you're using --directisa to hwclock |
| 19:24.54 | woden1_ | dondelecaro: How do I use --directisa to hwclock? |
| 19:25.01 | dondelelcaro | woden1_: if you add HWCLOCKPARS=--directisa to /etc/default/rcS, that'll do it. |
| 19:25.26 | dondelelcaro | woden1_: though that usually isn't required, it's generally the fix to "unable to set system clock" |
| 19:25.35 | dondelelcaro | !tell woden1_ -about set the time |
| 19:25.45 | dondelelcaro | woden1_: see what dpkg told you for some more details if you need them |
| 19:25.47 | drwahl | just outta curiosity, is it at all possible to switch kernels without rebooting? are there any projects that attempt to create this ? |
| 19:25.48 | *** join/#debian omry_|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 19:26.17 | *** join/#debian frog___ (n=frog@p4FD4A1DA.dip0.t-ipconnect.de) |
| 19:26.31 | Eulex | drwahl, did you read about kexec yet? |
| 19:26.46 | drwahl | Eulex: i did not, i will check it out |
| 19:26.48 | *** join/#debian steve_j (n=steve_j@woodendog.plus.com) |
| 19:26.52 | woden1_ | dondelelcaro: Would you look at my /etc/default/rcS ? Where do I add the HWCLOCKPARS=-directisa ? |
| 19:27.08 | steve_j | evening all - i've got a user (ftpbod) that i created to run vsftpd, but I've just spotted that ftpbod is logged in on pts/2 (and hasbeen since November) and I can't log 'him' out. any tips? |
| 19:27.10 | Eulex | drwahl, also, checkout ksplice (which is what I believe you mean) |
| 19:27.25 | stew | woden1_: anywhere |
| 19:27.57 | woden1_ | stew: btw, thanks for the alsa help earlier, my sound now works after I updated to the new alsa driver. |
| 19:28.00 | *** join/#debian erwin (n=erwin@pdpc/supporter/sustaining/Erwin) |
| 19:28.01 | Eulex | drwahl, kexec is like a reboot without rebooting the machine; all processes will have to quit. ksplice, however, is a (very experimental) way of patching a running kernel. |
| 19:28.05 | Piet_ | drwahl: ksplice, too (only meant for applying patches, though) |
| 19:28.05 | *** join/#debian omry|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 19:28.16 | woden1_ | dondelelcaro: Where do I check for UTC=no? |
| 19:28.33 | *** join/#debian morficus__ (n=morficus@69.0.44.52) |
| 19:28.35 | drwahl | Eulex: i'm not exactly sure what i mean :) i was just thinking it would be neat to be able to switch kernels without having to reboot the machine |
| 19:28.53 | stew | woden1_: in /etc/default/rcS |
| 19:29.05 | *** join/#debian xjkx (n=xjkx@201009130033.user.veloxzone.com.br) |
| 19:29.05 | Eulex | drwahl, there really is no way to completely switch kernel without shutting down all apps and reinitalizing the new kernel |
| 19:29.07 | xjkx | can you make your mouse click by a command on terminal ? always wanted to do that :p |
| 19:29.07 | woden1_ | dondelelcaro: oh, it's in the /etc/default/rcS hehe. What is ntpdate? |
| 19:29.17 | stew | woden1_: apt-cache show ntpdate |
| 19:29.27 | *** part/#debian ecomp (n=hmaier@62.218.223.240) |
| 19:29.33 | *** join/#debian morficus__ (n=morficus@69.0.44.52) |
| 19:29.40 | drwahl | Eulex: you mean none yet ;) |
| 19:29.43 | *** join/#debian ma3x (i=ma3x@unaffiliated/ma3x) |
| 19:30.00 | ma3x | audiocd:/ in kde doesn't have mp3 directory (conversion) |
| 19:30.04 | ma3x | why? what package should i install |
| 19:30.06 | woden1_ | stew: 13 May 23:29:50 ntpdate[4372]: no servers can be used, exiting |
| 19:30.14 | *** join/#debian blubberdiblub (i=foobar@dslb-088-072-043-119.pools.arcor-ip.net) |
| 19:30.16 | erwin | Hey. How does the vulnerability affect auth via authorized_keys? Are there in effect only ~100k private/public keypairs that can be brute-forced, thus after re-generated the key I should also wipe out any authorized_keys anywhere I might have them? |
| 19:30.29 | dondelelcaro | erwin: yes. |
| 19:30.42 | rascal999_ | I've got it to run from PXE, but now it can't download from mirrors |
| 19:30.59 | rascal999_ | I've set one of my computers as the dhcp server, and I've set the gateway to router ip, but does not work |
| 19:31.01 | rascal999_ | any ideas? |
| 19:31.06 | Eulex | drwahl, it's at least very hard, because internal information (in differing formats) would have to be retained. |
| 19:31.07 | woden1_ | how do I know what the name of the server is for the ntpdate server argument? |
| 19:31.09 | *** join/#debian Shisui` (n=chris@79.84.167.195) |
| 19:31.10 | rascal999_ | the dhcp uses same subnet as the router would |
| 19:31.13 | stew | woden1_: ntpdate pool.ntp.org |
| 19:31.13 | *** join/#debian aurehman_ (n=chatzill@202.59.70.210) |
| 19:31.16 | Eulex | drwahl, bordering on the impossible. |
| 19:31.16 | *** join/#debian Lone_Rifle (n=LoneRifl@87-194-55-35.bethere.co.uk) |
| 19:31.29 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 19:31.31 | *** part/#debian Lone_Rifle (n=LoneRifl@87-194-55-35.bethere.co.uk) |
| 19:31.40 | xingu | shoots self |
| 19:31.51 | stew | ksplice sounds like the attack vector of tomorrow |
| 19:32.07 | steve_j | should i have a user load of 1.00 1.00 1.00 if my server is supposedly idle? |
| 19:32.09 | *** join/#debian tim (n=tim@vs168153.vserver.de) |
| 19:32.25 | stew | steve_j: perhaps you have some process in the D state? |
| 19:32.32 | *** part/#debian tim (n=tim@vs168153.vserver.de) |
| 19:32.37 | *** join/#debian davi_ (i=davi@57.Red-88-2-100.staticIP.rima-tde.net) |
| 19:32.38 | *** join/#debian grand_grunt (n=remi@bel42-3-88-175-80-11.fbx.proxad.net) |
| 19:32.41 | *** join/#debian morficus__ (n=morficus@69.0.44.52) |
| 19:32.54 | *** join/#debian Kowalczyk (n=kowalczy@117.80-202-134.nextgentel.com) |
| 19:32.56 | steve_j | stew: as in daemonized? |
| 19:33.08 | stew | steve_j: as in uninterruptable sleep |
| 19:33.11 | Eulex | stew, well, every tool that is useful can be misused |
| 19:33.32 | stew | at least i think D state processes contribute to load |
| 19:33.34 | steve_j | stew - the only thing i've done recently is tweak some v minor table-related mysql settings and restart it |
| 19:33.36 | *** join/#debian LeGreffi3R (n=greffier@089156181093.chello.fr) |
| 19:33.54 | steve_j | seems odd that that would cause that |
| 19:34.00 | stew | steve_j: can you run "vmstat 1" let it run for a few seconds and then show us the output? use a pastebin: /msg dpkg pastebin |
| 19:34.29 | xingu | stew: D state processes appear to be running to userland (they're blocked in kernel space); so yes, if your measure of "load" is processes-ready-to-run, then they're included |
| 19:34.44 | xingu | stew: it's a classic mistake to confuse loadav with any notion of actual load. |
| 19:34.47 | steve_j | stew willdo thanks |
| 19:34.49 | *** join/#debian ColdFyre (n=coldfyre@c-24-130-214-62.hsd1.ca.comcast.net) |
| 19:35.09 | *** join/#debian PriitM_ (n=cel1200@ip222.cab16.mus.starman.ee) |
| 19:35.12 | xingu | stew: much better to go looking at more precise metrics like interrupts, context switches, or whatever. |
| 19:35.21 | helo | joins channel #debian-vent |
| 19:36.18 | stew | steve_j: see xingu above. look for a process stuck in the D state ('ps aux' shows the state in 7th column) |
| 19:36.28 | steve_j | Stew http://pastie.caboo.se/196329 |
| 19:36.41 | steve_j | cool. will ps aux again |
| 19:36.51 | *** part/#debian Steve[Work] (i=steve@cugnet.net) |
| 19:36.51 | *** join/#debian minus198 (n=asdf@c83-250-74-212.bredband.comhem.se) |
| 19:37.08 | *** part/#debian helo (n=helo@wsip-68-15-195-2.ok.ok.cox.net) |
| 19:37.16 | *** join/#debian Genghis|B (n=Genghis@got.debian-inside.com) |
| 19:37.18 | *** join/#debian charzero (n=magrat@cpe-67-240-132-199.rochester.res.rr.com) |
| 19:37.22 | *** join/#debian SparFux (n=raoul@e182020180.adsl.alicedsl.de) |
| 19:37.31 | SparFux | Anybody using misdn on kernel 2.6.25? |
| 19:37.32 | stew | err 8th, i can't count |
| 19:37.37 | steve_j | stew: saw this as top of, er, top -> |
| 19:37.49 | stew | steve_j: perhaps: ps aux | awk '$8=="D"{print}' |
| 19:37.53 | *** join/#debian helo (n=helo@unaffiliated/helo) |
| 19:38.28 | steve_j | mysqld safe is taking 100% btw - so it's busy doing something |
| 19:38.38 | steve_j | is mysqld safe the proper daemon to be using? |
| 19:39.24 | rascal999_ | I've used PXE to install remote copy of linux, this worked fine, I had to configure one of my computers to be the tftp and dhcp server which was ok. I made sure the router was default gateway |
| 19:39.35 | rascal999_ | <PROTECTED> |
| 19:41.15 | *** join/#debian telexicon (n=will@unaffiliated/chowmeined) |
| 19:41.16 | drwahl | ok, i just installed the openssl fix for the ssh exploit. quick question though. are the RSA hashes stored in .ssh/known_hosts at all related to the DSA keys that are changed in the openssl update? and more to the point, will i/should i wipe out my known_hosts file? |
| 19:41.18 | *** join/#debian davi_ (i=davi@57.Red-88-2-100.staticIP.rima-tde.net) |
| 19:41.41 | enouf | wam: have you looked at this pkg that debian offers? http://denyhosts.sourceforge.net/faq.html (i cam back late, was afk) |
| 19:41.54 | *** join/#debian kyncani_ (n=kyncani@bro29-1-82-245-180-190.fbx.proxad.net) |
| 19:42.28 | telexicon | drwahl, are the fingerprints of keys on remote debian systems? you'll need to regenerate those anyway |
| 19:43.24 | erwin | is there a discussion of how many false negatives the scanning tool generates somewhere? |
| 19:43.41 | drwahl | telexicon: umm... i'm not exactly sure. i have ssh'd between the two boxes (back and forth) before, so i'm going to guess, yes |
| 19:44.07 | i_am_ed | erwin: to measure false negatives you need a gold-standard test. I don't think one exists for this problem. |
| 19:44.18 | telexicon | drwahl, if those machines are debian based, the host ssh keys /etc/ssh/ssh_host_{rsa,dsa}_key needs to be regenerated |
| 19:44.30 | enouf | rascal999_: IINM, the info in the installation guide has requirements it tells you |
| 19:45.24 | erwin | i_am_ed: well, the http://wiki.debian.org/SSLkeys page mentions the authors think there might be false negatives, I'd like to see the discussion (why, if the list of keys is fixed?) |
| 19:45.34 | wam | enouf: thanks, thats nearly the same as fail2ban, which I'm using. |
| 19:45.45 | enouf | rascal999_: and/or you can start checking your sources.list entries - what's the error? can you ping google.com? can you browse? (try alt-f2 or shell and -f4 for messages) |
| 19:45.57 | enouf | wam: np |
| 19:46.03 | *** join/#debian Stephan (n=Stephan@mail.picsel.com) |
| 19:46.35 | *** join/#debian Metal_Militia (n=ioppo@host-84-223-77-115.cust-adsl.tiscali.it) |
| 19:47.08 | steve_j | stew: ps aux is here -> http://pastie.caboo.se/196335 |
| 19:47.13 | wam | enouf: abrotman: such an attack also has an advantage: I can tune my triggers and create test cases and have ready-to-test failiure scenarios ;) |
| 19:47.14 | steve_j | but have just sudo rebooted |
| 19:47.30 | rascal999_ | enouf: it would seem the nameservers are wrong |
| 19:47.32 | steve_j | as it lokoed like mysql was going nuts and taking 100% load in top, but not in ps aux |
| 19:47.34 | rascal999_ | so just changing them |
| 19:47.50 | abrotman | wam: lone ranger? |
| 19:47.51 | *** join/#debian floppypond (n=floppypo@unaffiliated/floppypond) |
| 19:48.19 | *** join/#debian ThomasZ (n=zander@kde/zander) |
| 19:48.33 | drwahl | telexicon: ok. i guess i am confused as to why my desktop did not complain about the known_host not matching (for my file server) when i tried to ssh into it after both systems had the update installed. |
| 19:48.39 | *** join/#debian davi_ (i=davi@57.Red-88-2-100.staticIP.rima-tde.net) |
| 19:48.58 | telexicon | drwahl, the problem affects key generation, not verification |
| 19:48.59 | erwin | steve_j: top shows "current" CPU load; ps shows it averaged out over a longer period |
| 19:49.14 | ThomasZ | anyone know how to force usb connection? My camera never gets past: "usb-storage: waiting for device to settle before scanning" (I waited 5 min so far) |
| 19:49.15 | *** join/#debian loca|host (n=tux@41.226.253.222) |
| 19:49.19 | telexicon | drwahl, you need to delete and recreate ssh keys, ssh certs, vpn certs and dnssec certs |
| 19:49.30 | telexicon | er ssl certs* |
| 19:49.37 | drwahl | telexicon: will running ssh-keygen do all that? |
| 19:49.48 | drwahl | i was informed by a colleage that it *should* |
| 19:50.04 | *** join/#debian e-funktion (n=seemawn@p5DC2DCE5.dip.t-dialin.net) |
| 19:50.06 | multi_io | running ssh-keygen on all those keys will |
| 19:50.07 | *** join/#debian buffed (n=tim@pD955E1D4.dip.t-dialin.net) |
| 19:50.08 | telexicon | are you doing pubkey auth? |
| 19:50.09 | buffed | Hello. |
| 19:50.21 | telexicon | drwahl, rm /etc/ssh/ssh_host_* |
| 19:50.21 | telexicon | dpkg-reconfigure openssh-server |
| 19:50.23 | drwahl | if not, do i just need to simply rm /etc/ssh/rsa and dsa files? |
| 19:50.27 | buffed | How do I check whether my OpenSSH installation is affected by this new vulnerability? |
| 19:50.27 | drwahl | aight |
| 19:50.33 | drwahl | iw ill give that a shot |
| 19:50.34 | *** join/#debian woden1 (n=woden@62.225.50.123) |
| 19:50.35 | telexicon | buffed, it is |
| 19:50.43 | telexicon | buffed, regenerate your keys |
| 19:50.48 | woden1 | stew;dondelelcaro: thanks for the help, sound is working perfectly now. |
| 19:50.49 | buffed | telexicon: Ok, nothing more? |
| 19:50.58 | woden1 | stew;dondelelcaro: time too |
| 19:50.58 | telexicon | buffed, and any ssl certs too |
| 19:51.05 | *** part/#debian mschiff (n=mschiff@e176125012.adsl.alicedsl.de) |
| 19:51.07 | buffed | telexicon: Ok, thanks very much. |
| 19:51.08 | erwin | buffed: and erase the old keys from anywhere where you've might have put them in authorized_keys apparently |
| 19:51.34 | multi_io | download & unpack http://security.debian.org/project/extra/dowkd/dowkd.pl.gz |
| 19:51.39 | woden1 | Got another question, how do I disable the laptop trackpad from interpreting a left-click when I tap on the pad part of the trackpad? In Vista, you can do this with the synaptics software. |
| 19:51.50 | *** part/#debian ThomasZ (n=zander@kde/zander) |
| 19:52.00 | multi_io | (to check your keys) |
| 19:52.01 | *** mode/#debian [+l 889] by debhelper |
| 19:52.18 | multi_io | or is that too unsafe? |
| 19:52.36 | erwin | multi_io: you can download the signature for that file too ( +.asc to url) and verify it |
| 19:52.46 | enouf | ThomasZ: perhaps you're hit by the usb_suspend bug; http://lkml.org/lkml/2007/8/14/187 follow link to http://alienghic.livejournal.com/382903.html -- but only if it applies (was working, was plugged, all of a sudden stopped and won't reactivate) |
| 19:52.46 | steve_j | thanks erwin |
| 19:52.52 | *** join/#debian thnee (n=thnee@holly.bsnet.se) |
| 19:53.08 | multi_io | erwin: I mean might it be the case that that script doesn't contain all vulnerable keys? |
| 19:53.24 | erwin | but if you upgraded the packages, there's a ssh-vulnkey script that does the same |
| 19:53.33 | enouf | man i hate drive-bys! someone hand me a rifle to fire back ;-) |
| 19:53.39 | drwahl | telexicon: ok, it all makes sense now. thanks for the insight. it seems to have worked |
| 19:53.51 | erwin | multi_io: I don't know, I'm trying to figure that out too. They have some ~100k keys listed. |
| 19:54.32 | multi_io | (looking at the script, it seems that all keypairs ever generated by those Debian OpenSS*s came from a fixed set of 262148 or somesuch possibilities :-O |
| 19:54.47 | *** join/#debian helo_ (n=helo@unaffiliated/helo) |
| 19:54.49 | *** join/#debian davi_ (i=davi@57.Red-88-2-100.staticIP.rima-tde.net) |
| 19:54.51 | *** join/#debian tobias (n=tobias@cpe-066-026-085-055.nc.res.rr.com) |
| 19:54.58 | buffed | erwin: Sorry, but where do I found this authorized_keys file? |
| 19:55.03 | telexicon | multi_io, its quite unfortunate |
| 19:55.34 | *** join/#debian Haris (i=Haris@unaffiliated/haris) |
| 19:55.37 | Haris | Hello people |
| 19:55.43 | buffed | Hello. |
| 19:55.43 | dondelelcaro | multi_io: that's not quite true |
| 19:55.48 | *** join/#debian foureyes779 (n=theron@unaffiliated/foureyes779) |
| 19:56.01 | erwin | buffed: the authorized_keys file lives on other systems you login to. If you ssh to another system you can put your own public key in there so you don't have to enter a password on the remote system. If you haven't done that, then you don't have to worry about the remote systems. |
| 19:56.07 | *** join/#debian Jemt (n=user@85.218.163.179) |
| 19:56.17 | *** join/#debian frog_ (n=frog@p4FD4A42E.dip0.t-ipconnect.de) |
| 19:56.17 | *** join/#debian cloakable (n=cloakabl@host81-151-35-225.range81-151.btcentralplus.com) |
| 19:56.29 | *** join/#debian caosun (n=caosun@host91-66-dynamic.50-82-r.retail.telecomitalia.it) |
| 19:56.48 | woden1 | Anyone know why I can't see youtube videos after installing gnash? |
| 19:57.00 | *** join/#debian TTimo (n=timo@pdpc/supporter/active/TTimo) |
| 19:57.02 | buffed | erwin: Ok, thanks. I haven't done that. |
| 19:57.15 | *** part/#debian die7 (n=die7_4@p4FE5CE57.dip.t-dialin.net) |
| 19:57.47 | *** join/#debian sharky (n=sharky@a40-prg1-15-56.static.adsl.vol.cz) |
| 19:57.49 | multi_io | they reduced 2^1024 (~ 10^309 = much more than there are electrons in the universe) to 262148 ! This is quite a mess. :-P |
| 19:57.56 | buffed | Ok, I used ssh-keygen to re-generate my keys. How do I re-generate the SSL certificate? |
| 19:58.06 | stew | woden1: what version did you install? it requires at least 0.8.0 iirc |
| 19:58.11 | *** part/#debian TTimo (n=timo@pdpc/supporter/active/TTimo) |
| 19:58.36 | *** join/#debian twobitwork (n=isaac@nat/ibm/x-59b6a9d948d5966d) |
| 19:58.43 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 19:58.48 | woden1 | stew: I don't know why it wasn't working before, it's working now though. I'm using the version from Lenny, I think 0.8.2 |
| 19:59.51 | telexicon | multi_io, i use 2048 and 4096 bit keys |
| 19:59.51 | woden1 | stew: Do you know how to disable the laptop trackpad from interpreting a left-click when I tap on the pad part of the trackpad? In Vista, you can do this with the synaptics software. |
| 20:00.00 | telexicon | but this is such a pain in the ass |
| 20:00.04 | telexicon | i use pubkeys _everywhere_ |
| 20:00.21 | helo | do you require a password along with the pubkey? |
| 20:00.33 | GiabboO | can anyone help me with a mysql query ? |
| 20:00.45 | telexicon | helo, to become root yes |
| 20:00.48 | *** join/#debian loldebian (i=d872814d@gateway/web/ajax/mibbit.com/x-9acc8b932b268580) |
| 20:01.04 | vlt | GiabboO: /j #mysql |
| 20:01.20 | loldebian | Hey guys, I have a problem with the way my cryptographic program generates random keys. |
| 20:01.25 | erwin | Hmm, did I read something about the key blacklist only having 1024 bit size keys? to my 2048 RSA key the script says "no blacklist info" -- I don't really remember when I created it; could have been in 2004 or 05. |
| 20:01.31 | enouf | woden1: perhaps if you follow the URLs shown in "/msg dpkg laptop" you will find some info |
| 20:01.36 | loldebian | Apparently, it's USING UNINITIALIZED DATA FOR ENTROPY! |
| 20:01.39 | loldebian | I know what I'll do! |
| 20:01.45 | loldebian | I'll REMOVE ALL SOURCES OF ENTROPY! |
| 20:01.50 | loldebian | So it WON'T BE RANDOM AT ALL! |
| 20:01.52 | loldebian | That will fix it! |
| 20:01.54 | anarcat | please stop yelling |
| 20:01.56 | loldebian | This is a brilliant plan! |
| 20:02.23 | *** join/#debian phrozen77 (n=phrozen7@unaffiliated/phrozen77) |
| 20:02.23 | loldebian | Whee, who needs unpredictable cryptographic keys? Stopping my debugging tool from complaining is much more important than that! |
| 20:02.24 | Eulex | loldebian, have you got a debian question? |
| 20:02.25 | loldebian | How can I lose? |
| 20:02.25 | vlt | Hello. Are openvpn keys affected and need to be changed? |
| 20:02.36 | telexicon | vlt, yes |
| 20:02.43 | loldebian | Eulex: Yeah, I do. WHY ARE DEBIAN DEVELOPERS SUCH MORONS? |
| 20:02.50 | helo | i've always felt there is a pretty good chance of a local priv escalation once someone gets a user shell (or sniffing root password) |
| 20:02.50 | enouf | woden1: also note, that might be configurable in your DE (Desktop Env) preferences/settings - for kde, that's k control center (can fire it up using 'kcontrol' in an xterm) |
| 20:02.59 | vlt | silently cries. |
| 20:03.02 | telexicon | helo, pretty much |
| 20:03.07 | Eulex | !ops loldebian is trolling |
| 20:03.07 | dpkg | Hydroxide, bob2, caphuso, dondelelcaro, doogie, eeyore-, ElectricElf, ):, helix, ljlane, LoRez, RichiH, mentor, Netsnipe, TML, walters, xk, abrotman, gravity, azeem, Maulkin, stew, peterS, Alife, Myon, Ganneff, Maulkin, weasel, zobel: eulex complains about: loldebian is trolling |
| 20:03.13 | RichiH | h,, |
| 20:03.16 | telexicon | vlt, all ssh keys, ssl certs, openvpn certs and dnssec certs |
| 20:03.19 | *** mode/#debian [+b %loldebian!*@*] by RichiH |
| 20:03.51 | *** join/#debian phatmonkey (n=ben@81.2.121.150) |
| 20:03.55 | Eulex | thank you. |
| 20:04.06 | vlt | telexicon: Keys generated on Sarge are safe, right? |
| 20:04.16 | Eulex | yes |
| 20:04.19 | *** part/#debian loldebian (i=d872814d@gateway/web/ajax/mibbit.com/x-9acc8b932b268580) |
| 20:04.25 | *** join/#debian debianlol (i=d872814d@gateway/web/ajax/mibbit.com/x-9acc8b932b268580) |
| 20:04.29 | debianlol | LOL ENTROPY |
| 20:04.30 | debianlol | WHO NEEDS IT |
| 20:04.36 | debianlol | LET'S RIP ALL SOURCES OF ENTROPY OUT OF THE CODE |
| 20:04.41 | *** mode/#debian [+o abrotman] by ChanServ |
| 20:04.43 | debianlol | THAT'S A BRILLIANT IDEA! |
| 20:04.44 | *** mode/#debian [+b *!*@gateway/web/ajax/mibbit.com/x-9acc8b932b268580] by abrotman |
| 20:04.52 | n3kl | Can someone point me to nifty little device that will run linux that will act as a small firewall/router. |
| 20:05.07 | woden1 | enouf: I have looked in the GNOME preferences/settings and don't see what I'm looking for. |
| 20:05.11 | telexicon | n3kl, soekris |
| 20:05.14 | scorche|sh | abrotman: wrong ban...you need *!d872814d@* |
| 20:05.23 | abrotman | scorche|sh: not yet |
| 20:05.23 | Eulex | why do I have a feeling that guy will just ban-evade once again... |
| 20:05.28 | *** join/#debian phatmonkey (n=ben@81.2.121.150) |
| 20:05.28 | multi_io | dondelelcaro: why not? |
| 20:05.35 | *** mode/#debian [-o abrotman] by abrotman |
| 20:05.42 | *** join/#debian kevind23 (n=rivalsou@cpe-74-71-65-146.twcny.res.rr.com) |
| 20:05.44 | *** part/#debian debianlol (i=d872814d@gateway/web/ajax/mibbit.com/x-9acc8b932b268580) |
| 20:05.57 | scorche|sh | well, with an asterisk before the IP, but alright...the last bit is a bit useless (and i wasnt sure if you were aware) |
| 20:06.00 | enouf | n3kl: how about a router ;-) |
| 20:06.19 | chops | Is there an easy command-line way to convert a unix timestamp to a date string? |
| 20:06.26 | chops | Besides using perl -e :-) |
| 20:06.29 | abrotman | man date |
| 20:06.33 | multi_io | dondelelcaro: the script checks the fingerprint against a fixed set of 262148 "weak" ones, AFAICS |
| 20:06.41 | bartc | chops: date --date=@timestamp |
| 20:06.51 | anarcat | scorche|sh: what's that first part before the @? |
| 20:06.57 | Haris | how do I set the timezone on cli? |
| 20:06.59 | *** join/#debian olivierk (n=olivier@olivierk.org) |
| 20:07.02 | scorche|sh | anarcat: that is their IP in hex |
| 20:07.06 | chops | bartc: Ah, thanks |
| 20:07.06 | abrotman | !tell Haris about set the time |
| 20:07.10 | Eulex | Haris, tzconfig |
| 20:07.18 | anarcat | scorche|sh: ack |
| 20:07.18 | Haris | I forget names |
| 20:07.19 | n3kl | enouf: yeah, thats what I am talking about |
| 20:07.27 | scorche|sh | anarcat: at least for cgi:irc and mibbit...otherwise it is the user name or ident |
| 20:07.30 | anarcat | scorche|sh: how about the last /x- part? |
| 20:07.34 | chops | abrotman: I did read 'man date', it just didn't say anything about how to use a unix timestamp as input |
| 20:07.34 | anarcat | scorche|sh: oh i know that :) |
| 20:07.53 | *** join/#debian tralala (n=joro@unaffiliated/tralala) |
| 20:08.00 | *** join/#debian LimCore (n=rafal@abkw70.neoplus.adsl.tpnet.pl) |
| 20:08.06 | n3kl | I have a little asus terminator c3 that runs as my firewall/router/vpn concentrator that I would like to replacewith somethingsmaller, less power consuming, fanless, etc |
| 20:08.12 | dondelelcaro | multi_io: yes, but that's not an exhaustive list. |
| 20:08.23 | dondelelcaro | (that script isn't particularly useful) |
| 20:08.46 | Haris | well, timezone is set, but I'm not satisfied with the time. How do I set it? |
| 20:09.00 | abrotman | !tell Haris about set the time |
| 20:09.02 | Jemt | Can someone help me get a simple configuration tool for networks using WPA encryption (Wireless) ? I'm currently using the Network Manager for Gnome so it have to be able to play along with that tool |
| 20:09.07 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 20:09.16 | Haris | oh, ok |
| 20:09.59 | *** join/#debian krubnew (i=455a6df7@gateway/web/ajax/mibbit.com/x-5b8c145116fc967f) |
| 20:10.03 | *** join/#debian mzhang (n=bessel@sar3.uchicago.edu) |
| 20:10.05 | enouf | n3kl: maybe a slug? or is that thing you have like one? |
| 20:10.07 | krubnew | http://xkcd.org/221/ THIS IS HOW DEBIAN'S CRYPTOGRAPHIC KEY GENERATION ACTUALLY WORKS. |
| 20:10.09 | krubnew | http://xkcd.org/221/ THIS IS HOW DEBIAN'S CRYPTOGRAPHIC KEY GENERATION ACTUALLY WORKS. |
| 20:10.09 | *** kick/#debian [krubnew!n=debhelpe@unaffiliated/debhelper] by debhelper (use the paster bot or #flood) |
| 20:10.13 | enouf | nice |
| 20:10.27 | *** join/#debian krubnew (i=455a6df7@gateway/web/ajax/mibbit.com/x-5b8c145116fc967f) |
| 20:10.28 | n3kl | enouf: its debuian. What is slug? |
| 20:10.32 | krubnew | http://xkcd.org/221/ THIS IS HOW DEBIAN'S CRYPTOGRAPHIC KEY GENERATION ACTUALLY WORKS. |
| 20:10.32 | krubnew | http://xkcd.org/221/ THIS IS HOW DEBIAN'S CRYPTOGRAPHIC KEY GENERATION ACTUALLY WORKS. |
| 20:10.33 | *** kick/#debian [krubnew!n=debhelpe@unaffiliated/debhelper] by debhelper (use the paster bot or #flood) |
| 20:10.35 | n3kl | enouf: if I could spell |
| 20:10.41 | *** join/#debian krubnew (i=455a6df7@gateway/web/ajax/mibbit.com/x-5b8c145116fc967f) |
| 20:10.45 | krubnew | http://xkcd.org/221/ THIS IS HOW DEBIAN'S CRYPTOGRAPHIC KEY GENERATION ACTUALLY WORKS. |
| 20:10.48 | krubnew | http://xkcd.org/221/ THIS IS HOW DEBIAN'S CRYPTOGRAPHIC KEY GENERATION ACTUALLY WORKS. |
| 20:10.50 | krubnew | http://xkcd.org/221/ THIS IS HOW DEBIAN'S CRYPTOGRAPHIC KEY GENERATION ACTUALLY WORKS. |
| 20:10.54 | *** join/#debian steve_j (n=steve_j@woodendog.plus.com) |
| 20:10.55 | *** mode/#debian [+o abrotman] by ChanServ |
| 20:10.55 | enouf | !ops krubnew flood |
| 20:10.55 | dpkg | Hydroxide, bob2, caphuso, dondelelcaro, doogie, eeyore-, ElectricElf, ):, helix, ljlane, LoRez, RichiH, mentor, Netsnipe, TML, walters, xk, abrotman, gravity, azeem, Maulkin, stew, peterS, Alife, Myon, Ganneff, Maulkin, weasel, zobel: enouf complains about: krubnew flood |
| 20:10.55 | krubnew | http://xkcd.org/221/ THIS IS HOW DEBIAN'S CRYPTOGRAPHIC KEY GENERATION ACTUALLY WORKS. |
| 20:10.57 | *** mode/#debian [+b *!*@gateway/web/ajax/mibbit.com/x-5b8c145116fc967f] by abrotman |
| 20:11.00 | *** mode/#debian [+o mentor] by ChanServ |
| 20:11.07 | *** mode/#debian [-o mentor] by ChanServ |
| 20:11.11 | *** part/#debian steve_j (n=steve_j@woodendog.plus.com) |
| 20:11.12 | *** mode/#debian [-o abrotman] by abrotman |
| 20:11.16 | enouf | n3kl: i mean an nslu2 |
| 20:11.24 | enouf | n3kl: linksys |
| 20:11.37 | n3kl | enouf: I would prefer it be something that I have more control over |
| 20:11.39 | mentor | Stupid troll |
| 20:11.39 | *** join/#debian slack_ (n=nombre@201.243.174.130) |
| 20:11.40 | multi_io | dondelelcaro: I generated some test keys with an affected ssh-keygen, and all were in the set |
| 20:11.44 | mentor | That's how the RNG works |
| 20:11.55 | woden1 | How is the "xserver-xorg-input-synaptics" driver configured? |
| 20:11.55 | Haris | omg! |
| 20:12.00 | *** join/#debian frog__ (n=frog@p4FD49E72.dip0.t-ipconnect.de) |
| 20:12.01 | Haris | people still flood |
| 20:12.11 | *** join/#debian qwm (n=qwm@c83-254-194-45.bredband.comhem.se) |
| 20:12.22 | scorche|sh | qwm! |
| 20:12.27 | qwm | oh no. not you! |
| 20:12.29 | Haris | qwm? |
| 20:12.30 | n3kl | enouf: I mean, like the os and stuff. I pretty much want to take this current 800mhz machine I am running, and turn it into a small novel-sized box and make it an iptables firewallish router thing |
| 20:12.32 | stew | woden1: "man synaptics" for instructions on how to configure it in xorg.conf or look at userspace tools like ksynaptics ro gsynaptics |
| 20:12.43 | *** join/#debian ThomasZ (n=zander@kde/zander) |
| 20:12.46 | multi_io | dondelelcaro: "some" = 50 |
| 20:12.47 | enouf | http://www.linksys.com/servlet/Satellite?c=L_Product_C2&childpagename=US%2FLayout&cid=1118334819312&packedargs=site%3DUS&pagename=Linksys%2FCommon%2FVisitorWrapper&lid=1931258184B15 |
| 20:12.50 | ThomasZ | enouf: re |
| 20:12.52 | enouf | wow |
| 20:12.58 | enouf | ThomasZ: yo |
| 20:13.08 | *** join/#debian rofldebianrofl (i=455a6df7@gateway/web/ajax/mibbit.com/x-87d10e63ff56f59b) |
| 20:13.11 | mentor | http://web.archive.org/web/20011027002011/http://dilbert.com/comics/dilbert/archive/images/dilbert2001182781025.gif |
| 20:13.13 | qwm | Haris: scorche|sh is a dear friend of mine. |
| 20:13.14 | *** join/#debian Joelito (n=joel@201.160.207.148.cable.dyn.cableonline.com.mx) |
| 20:13.15 | *** mode/#debian [+o stew] by ChanServ |
| 20:13.16 | *** mode/#debian [+b *!*@gateway/web/ajax/mibbit.com/x-87d10e63ff56f59b] by stew |
| 20:13.16 | *** part/#debian rofldebianrofl (i=455a6df7@gateway/web/ajax/mibbit.com/x-87d10e63ff56f59b) |
| 20:13.16 | *** mode/#debian [-o stew] by stew |
| 20:13.26 | grand_grunt | Waow. I've read some things about ssh.. has a security hole been discovered in ssh server? |
| 20:13.35 | Haris | wth! do people find in flooding? |
| 20:13.35 | n3kl | enouf: hmm, I like that. You think linux will load up on that guy |
| 20:13.43 | stew | grand_grunt: /topic |
| 20:13.43 | enouf | grand_grunt: see /topic |
| 20:13.45 | *** join/#debian Old_Fogie (n=Old_Fogi@cpe-69-204-70-243.buffalo.res.rr.com) |
| 20:13.54 | enouf | n3kl: yep ;-) |
| 20:14.03 | *** join/#debian rofldebianXD (i=455a6df7@gateway/web/ajax/mibbit.com/x-dc91ca88812db884) |
| 20:14.06 | grand_grunt | wosh |
| 20:14.08 | *** mode/#debian [+o abrotman] by ChanServ |
| 20:14.09 | *** mode/#debian [+o stew] by ChanServ |
| 20:14.10 | *** mode/#debian [-o stew] by stew |
| 20:14.12 | *** mode/#debian [-o abrotman] by abrotman |
| 20:14.21 | mentor | out clased. |
| 20:14.23 | *** part/#debian buffed (n=tim@pD955E1D4.dip.t-dialin.net) |
| 20:14.23 | streuner | thanks RichiH |
| 20:14.29 | *** join/#debian rofldebianXD (i=455a6df7@gateway/web/ajax/mibbit.com/x-056fcfeecd1f67e8) |
| 20:14.33 | *** mode/#debian [+o stew] by ChanServ |
| 20:14.33 | *** part/#debian qwm (n=qwm@c83-254-194-45.bredband.comhem.se) |
| 20:14.36 | Haris | I see, some operator work goes on in the day time |
| 20:14.41 | woden1 | stew: man 5 synaptics. I'm checking it out. Thanks. |
| 20:14.44 | *** mode/#debian [+o mentor] by ChanServ |
| 20:14.47 | Haris | my night time |
| 20:14.55 | *** mode/#debian [+b ?*!*@gateway/web/ajax/mibbit.com/*] by mentor |
| 20:14.59 | *** part/#debian Old_Fogie (n=Old_Fogi@cpe-69-204-70-243.buffalo.res.rr.com) |
| 20:15.01 | enouf | n3kl: see http://www.nslu2-linux.org/wiki/Debian/NoInitramfs and find info about dd-wrt, openwrt and tomato |
| 20:15.01 | *** mode/#debian [-o mentor] by ChanServ |
| 20:15.04 | *** part/#debian caosun (n=caosun@host91-66-dynamic.50-82-r.retail.telecomitalia.it) |
| 20:15.04 | themill | Some itchy trigger fingers around today. |
| 20:15.06 | ThomasZ | enouf: what is udevmonitor? |
| 20:15.06 | n3kl | enouf: neat. I will have to find a price tag. I just want something small, looks noce |
| 20:15.15 | streuner | grant: read /topic |
| 20:15.15 | *** part/#debian Haris (i=Haris@unaffiliated/haris) |
| 20:15.21 | enouf | see also wikipedia about it n3kl |
| 20:15.27 | *** join/#debian Sergiu1 (i=sergiu@87.255.79.154) |
| 20:15.30 | *** mode/#debian [-o stew] by stew |
| 20:15.30 | enouf | ThomasZ: man udevmonitor ;-) |
| 20:15.32 | Sergiu1 | hello |
| 20:15.36 | streuner | grand_grunt: read /topic |
| 20:15.40 | enouf | ThomasZ: it watches/shows events |
| 20:15.43 | *** join/#debian dFence_ (n=chatzill@ings-d93223a8.pool.mediaWays.net) |
| 20:15.45 | Sergiu1 | anyone know how to remove cookies in epiphany web browser. |
| 20:15.50 | mentor | patpats streuner |
| 20:15.52 | n3kl | enouf: ah, dd-wrt is the shizzle. I have a couple wireless routers I am using that on and I freaking love it |
| 20:15.52 | *** join/#debian sentabi (n=sentabi@125.163.12.142) |
| 20:16.10 | ThomasZ | enouf: ah, I forgot to su ;) (it wasn't in my path) |
| 20:16.16 | *** join/#debian bfremon (n=ben@lns-bzn-33-82-252-45-56.adsl.proxad.net) |
| 20:16.26 | enouf | ok |
| 20:17.29 | grand_grunt | <PROTECTED> |
| 20:17.32 | *** join/#debian Vegetable (n=david@145.100.197.14) |
| 20:17.34 | grand_grunt | oops |
| 20:17.50 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 20:18.03 | n3kl | enouf: cool, thanks for the link |
| 20:18.09 | woden1 | stew: Looking through man 5 synaptics I don't see the option I'm looking for. If I tap the pad I don't want it to be a mouse left-click. |
| 20:18.10 | *** join/#debian valkyrie-- (n=val@ool-4350bcb9.dyn.optonline.net) |
| 20:18.17 | *** join/#debian MrNaz_ (n=MrNaz@125.27.71.202.adsl.dynamic.totbb.net) |
| 20:19.31 | *** join/#debian m4ggus_ (n=marcus@p5B035BCD.dip.t-dialin.net) |
| 20:19.33 | ThomasZ | enouf: http://rafb.net/p/Wx5Zeg15.html I can just guess what this means, maybe you find something interresting in there? |
| 20:19.44 | *** part/#debian valkyrie-- (n=val@ool-4350bcb9.dyn.optonline.net) |
| 20:20.02 | *** join/#debian kshah (n=kunalash@17.255.240.2) |
| 20:20.03 | *** join/#debian maligor (n=maligor@a88-114-85-246.elisa-laajakaista.fi) |
| 20:20.10 | ThomasZ | enouf: In the mean time I used my old kubuntu laptop with this camera and that worked fine. Some specific modules I could look in the lsmod output? |
| 20:20.14 | *** join/#debian ixolit (n=nik@master.mksat.net) |
| 20:20.23 | *** join/#debian jezdez (n=jezdez@tichy.websushi.org) |
| 20:20.44 | *** join/#debian ericrw (n=ericrw@c-71-230-89-200.hsd1.pa.comcast.net) |
| 20:21.09 | enouf | ThomasZ: well, any scsi, usb, but really proprietary ones |
| 20:21.51 | stew | woden1: MaxTapTime |
| 20:22.01 | *** mode/#debian [+l 881] by debhelper |
| 20:22.19 | *** join/#debian faw (n=felipe@unaffiliated/faw) |
| 20:22.58 | enouf | ThomasZ: i see on/off, but did you unplug/plug ? have you been removing it without umounting prior to unplugging it in the past? |
| 20:23.05 | Sergiu1 | hello |
| 20:23.15 | Sergiu1 | can i install firefox in debian? |
| 20:23.31 | Sergiu1 | not iceweasel |
| 20:23.32 | *** join/#debian MrNaz__ (n=MrNaz@125.27.71.202.adsl.dynamic.totbb.net) |
| 20:23.34 | Sergiu1 | =] |
| 20:23.34 | dondelelcaro | Sergiu1: the only difference is the branding. |
| 20:24.38 | *** join/#debian IndyGunFreak (n=ken@user-0c93khn.cable.mindspring.com) |
| 20:25.16 | *** join/#debian m4ggus_ (n=marcus@p5B035BCD.dip.t-dialin.net) |
| 20:25.21 | vlt | I just got the third Debian router with OpenVPN not starting again after the ssl upgrade. Is this known already? |
| 20:25.27 | *** join/#debian blaab (n=Obliviou@3E339CE5.dslaccess.aol.com) |
| 20:25.34 | *** join/#debian morficus__ (n=morficus@69.0.44.52) |
| 20:25.47 | ThomasZ | enouf: on my ond laptop (2.6.15) I got some io-errors on device. But no problems other than that. |
| 20:25.48 | *** join/#debian Lagbolts (n=jm@dhcp-68-244.physics.purdue.edu) |
| 20:26.19 | enouf | ThomasZ: maybe you should think about doing a fsck on it |
| 20:26.19 | ThomasZ | enouf: I surely did cleanly unmount before unplugging it there and replugging it to my debian machine. |
| 20:26.29 | wam | abrotman: I have 742 different ips that attack one of my clusters. The maximum number of attacks is 79 within 24 hours. There are only 11 ips that dos more than 50 times a day. I can't firewall that attack. Damnit. |
| 20:26.42 | enouf | ThomasZ: i see, i meant more for the udevmonitor messages |
| 20:26.53 | abrotman | wam: change port |
| 20:27.07 | wam | abrotman: yeah - after informing and reconfiguring all users. |
| 20:27.08 | *** join/#debian vjoe (i=hugo@a83-132-36-163.cpe.netcabo.pt) |
| 20:27.16 | dondelelcaro | wam: you can firewall that off fairly easily, actually. |
| 20:27.28 | enouf | ThomasZ: make sure scsi_mod, usb_storage, and any {o,e,u}hci_hcd are all there |
| 20:27.30 | wam | dondelelcaro: not automatically enough, i think |
| 20:27.40 | *** join/#debian netdaemon (n=netdaemo@tuxhacker/netdaemon) |
| 20:28.05 | wam | I need a hardware random device... |
| 20:28.10 | enouf | ThomasZ: what brand of camera? does it have a removable flash card? |
| 20:28.35 | ThomasZ | enouf: removable sd card. Panasonic DMC-TZ3 |
| 20:28.37 | enouf | ThomasZ: the other thing might be related are the mmc_* modules (mmc_core, etc) |
| 20:28.57 | Sergiu1 | is very any difference betwen epiphany web browser and firefox iceweasel?) |
| 20:29.03 | enouf | yeah, sd cards need mmc, no? i don't know much about gadgets |
| 20:29.21 | enouf | Sergiu1: yes - but epiphany uses the same gecko engine |
| 20:29.41 | *** join/#debian AfeRaTa (n=newvisio@newvision.newvisiondevelopment.com) |
| 20:29.47 | *** join/#debian Phil|ZZZzzz (n=phil@server1.germanserver.co.uk) |
| 20:29.52 | *** join/#debian Firestarter- (n=Firestar@cpe-72-226-14-251.nycap.res.rr.com) |
| 20:29.54 | ThomasZ | enouf: only when you use the card-reader. Otherwise its simply usb-storage. |
| 20:30.04 | enouf | Sergiu1: although, as of late, some effort to replace that with tcl/tck ? is occuring |
| 20:30.08 | *** join/#debian dtatulea (n=dragos@85.121.13.9) |
| 20:30.12 | *** join/#debian ballard (n=ballard@optimator.cae.wisc.edu) |
| 20:30.28 | Sergiu1 | i can't log in to my e-mail with a different username account, the epiphany have stored an account information and i can log in to e-mail with only this account.. |
| 20:30.29 | *** join/#debian zomtec (n=seemawn@p5DC2C2CD.dip.t-dialin.net) |
| 20:30.47 | Sergiu1 | can=can't |
| 20:30.48 | *** join/#debian Suprano (i=suprano@pD95675DB.dip.t-dialin.net) |
| 20:30.50 | enouf | ThomasZ: i see - hrm, i'm out of ideas then :-( other than what i 1st mentioned about the usb port/host suspend issue |
| 20:30.53 | Sergiu1 | can |
| 20:30.55 | Sergiu1 | :D |
| 20:30.58 | ThomasZ | enouf: I'm leaning towards this being a regression in the kernel drivers where in 2.6.15 it was better able to cope with read errors and in newer versions it just hangs. |
| 20:31.03 | dtatulea | Hi. Do you guys have debian installed on a macbook system? I get a disturbing buzz when running linux. OS X and Windows don't generate this sound... |
| 20:31.06 | enouf | !confuse Sergiu1 |
| 20:31.06 | dpkg | Yes, what are your gerbil tomorrow, Sergiu1? lederhosen of the republic of mongolia with extra cream |
| 20:31.35 | enouf | ThomasZ: perhaps, but was your .15 using udev, hal and dbus too? |
| 20:31.38 | *** join/#debian gumpish (n=gumpish0@natsci-mac32.ns.utexas.edu) |
| 20:31.56 | Sergiu1 | :D |
| 20:32.04 | Sergiu1 | i am serious, i have an problem |
| 20:32.24 | ThomasZ | enouf: yes |
| 20:32.31 | enouf | ThomasZ: do other usb devices work? |
| 20:32.45 | *** join/#debian woden1 (n=woden@62.225.50.123) |
| 20:33.14 | Sergiu1 | enouf , are you using epiphany |
| 20:33.31 | enouf | no, i tried it a while back |
| 20:33.41 | Lagbolts | dtatulea, is it coming from speakers or hardware |
| 20:34.18 | ThomasZ | enouf: usbmouse does, I don't have anything else to test. |
| 20:34.24 | Sergiu1 | you are right |
| 20:34.33 | enouf | dtatulea: see wiki.debian.org search macbook ? |
| 20:34.41 | *** part/#debian itomato (n=itomato@66-224-246-146.atgi.net) |
| 20:34.42 | Sergiu1 | it's seems i have entered the wrong password.. |
| 20:34.51 | *** join/#debian visik7 (n=dksakd@unaffiliated/visik7) |
| 20:34.59 | *** join/#debian Metal_Militia_ (n=ioppo@host-84-222-103-242.cust-adsl.tiscali.it) |
| 20:35.18 | *** join/#debian quitte (n=quitte@g227016077.adsl.alicedsl.de) |
| 20:35.19 | enouf | ThomasZ: hrm, nothing storage related, eh? what's cat /proc/version say? and what's cat /proc/cmdline |
| 20:35.35 | dtatulea | Lagbolts: It's hardware. And it's only when the adapter's on. On second thought....i found the issue, it's not linux related. |
| 20:35.41 | *** join/#debian rm (n=irc@90.151.81.240) |
| 20:35.53 | enouf | adapter? |
| 20:35.58 | Lagbolts | lol |
| 20:36.02 | dtatulea | I might want to try using another power adapter. |
| 20:36.03 | *** join/#debian Dave2 (i=Dave2@freenode/staff/dave2) |
| 20:36.46 | *** join/#debian rtsa (n=rgoyder@S0106001346f7f531.vf.shawcable.net) |
| 20:36.54 | Sergiu1 | :P) |
| 20:37.05 | ThomasZ | enouf: Linux version 2.6.24-1-686 (Debian 2.6.24-6) (waldi@debian.org) (gcc version 4.1.3 20080308 (prerelease) (Debian 4.1.2-21)) #1 SMP Sat Apr 19 00:37:55 UTC 2008 |
| 20:37.06 | *** join/#debian beware (i=beware@unaffiliated/beware) |
| 20:37.08 | ThomasZ | root=/dev/sda1 ro |
| 20:37.22 | *** join/#debian jelly-home (n=jelly@islands.iskon.hr) |
| 20:37.28 | enouf | ThomasZ: ok, can you d/l and install and try an earlier kernel? |
| 20:37.38 | *** join/#debian woden1 (n=woden@62.225.50.123) |
| 20:37.43 | beware | http://xkcd.com/221/ |
| 20:37.43 | ThomasZ | enouf: already did; I had 24 and 18. Same result. |
| 20:37.46 | woden1 | What is the name of the synaptics driver and how do I tell if it's loaded? |
| 20:38.07 | Lagbolts | woden1, for X? you can look in xorg log |
| 20:38.21 | RichiH | ok |
| 20:38.27 | woden1 | Lagbolts: Yes for X.org |
| 20:38.29 | enouf | ThomasZ: yikes - look for a missing module then (not yet loaded) - otherwise, i'd have to say, something deeper (either in udev, or kernel) |
| 20:38.30 | ThomasZ | woden1: /var/log/Xorg.*.log |
| 20:38.35 | RichiH | who wants a dowkd.pl that can read PEM? |
| 20:38.47 | Lagbolts | woden1, look in /var/log/Xorg.0.log |
| 20:38.52 | beware | RichiH, why dont you upload it somewhere |
| 20:38.55 | *** join/#debian Kalli (n=Kalli@pD9E60AF3.dip.t-dialin.net) |
| 20:38.58 | beware | and, in fact, upload a diff |
| 20:38.58 | *** join/#debian balibalo (n=chatzill@116samana78.codetel.net.do) |
| 20:39.03 | woden1 | ThomasZ: So if I do a search of that file for synaptics and nothing shows up, then it's not loading right? How do I get it to load? |
| 20:39.03 | stew | RichiH: #debian-security on irc.oftc.net ? |
| 20:39.04 | beware | so we can immideately see youre not trying to steal our keys |
| 20:39.16 | beware | put it in a pastebin |
| 20:39.17 | RichiH | beware: will do |
| 20:39.21 | RichiH | stew: there is that? |
| 20:39.33 | *** join/#debian simbioz (n=shu4l0@pc-123-172-83-200.cm.vtr.net) |
| 20:39.43 | ThomasZ | enouf: yeah, tried that. I've compard lsmod outputs and can't figure out whats missing. udev/kernel I have no clue about. (I'd like to avoid configuring my own kernel, thats soo 2.4-is ;) |
| 20:39.44 | woden1 | Lagbolts: It's not in my log, what is the name of the synaptics driver? |
| 20:39.45 | Lagbolts | woden1, you can add it to xorg.conf |
| 20:39.53 | *** join/#debian barnum (i=pt@disgruntled.sysadmins.com) |
| 20:39.56 | Lagbolts | it is called synaptics :) |
| 20:40.01 | *** join/#debian cusco (i=cusco@client-82-20-48-71.brnt.adsl.virgin.net) |
| 20:40.07 | woden1 | Lagbolts: How? |
| 20:40.09 | enouf | RichiH: yes, all the 'official' channels for debian are on irc.debian.org/irc.oftc.net |
| 20:40.14 | ThomasZ | enouf: thanks, I'll try with my usbkey later and maybe format the card in the camera. |
| 20:40.23 | beware | using uninitialized memory as a source of entropy to the extent that it lacking causes it to be insecure sounds like a very bad idea to me |
| 20:40.27 | *** join/#debian muddd (n=superstr@24.129.17.116) |
| 20:40.34 | enouf | ThomasZ: ok, np - let us know ;-) |
| 20:40.49 | *** join/#debian _Dave2_ (i=dave@freenode/staff/dave2) |
| 20:40.52 | woden1 | Lagbolts: I put Driver"synaptics" under my Section "InputDevice", is that all I have to do? |
| 20:41.01 | Lagbolts | woden1, well bascially butyou can add options |
| 20:41.06 | Lagbolts | try this site http://gentoo-wiki.com/HARDWARE_Synaptics_Touchpad |
| 20:41.10 | Lagbolts | it has xorg config |
| 20:41.16 | muddd | hi i changed my /var/run/motd the other day and today its back to its original copy... what gives? |
| 20:41.20 | woden1 | Lagbolts: Ok I did all that, but it's still not working. My X log still shows no synaptics being loaded |
| 20:41.32 | Lagbolts | you have to add it to the ServerLayout |
| 20:41.37 | enouf | muddd: /etc/default/rcS line ? |
| 20:41.45 | Lagbolts | woden1, google "synaptics xorg.conf" |
| 20:41.47 | enouf | or maybe that's deprecated now? |
| 20:41.48 | streuner | muddd: some login script still create it new |
| 20:41.51 | Lagbolts | there are hundreds of examples |
| 20:42.19 | *** join/#debian confrey (n=dario@62.13.173.160) |
| 20:42.20 | muddd | *checking* |
| 20:42.22 | streuner | muddd: just disable it or make /etc/motd ro |
| 20:42.24 | *** join/#debian ma3x (i=ma3x@unaffiliated/ma3x) |
| 20:42.33 | muddd | ah ro.... forgot about that |
| 20:42.33 | *** join/#debian lukketto (n=user@host54-154-dynamic.10-87-r.retail.telecomitalia.it) |
| 20:42.44 | ma3x | is there cband module for apache available in any of the debian packages? |
| 20:42.59 | *** join/#debian frog_ (n=frog@p4FD49C75.dip0.t-ipconnect.de) |
| 20:43.33 | *** join/#debian xerophytev (n=xerophyt@216.40.38.232) |
| 20:43.35 | *** part/#debian lukketto (n=user@host54-154-dynamic.10-87-r.retail.telecomitalia.it) |
| 20:43.36 | *** join/#debian hatred- (n=phi@unaffiliated/sybec) |
| 20:43.39 | *** join/#debian arlinja (n=arm9cl@athedsl-270056.home.otenet.gr) |
| 20:43.39 | *** part/#debian ThomasZ (n=zander@kde/zander) |
| 20:44.00 | Sergiu1 | ok,thx toall . am quiting |
| 20:44.02 | *** join/#debian pythonic (n=nick@203-206-217-50.perm.iinet.net.au) |
| 20:44.09 | *** join/#debian thrope (n=thrope@87-194-103-206.bethere.co.uk) |
| 20:44.13 | dtatulea | I found the solution: keep the CPU busy! |
| 20:44.15 | folken | ma3x: i don't know, but can you enlighten me as to what it is? |
| 20:44.16 | *** part/#debian Sergiu1 (i=sergiu@87.255.79.154) |
| 20:44.17 | pythonic | ok.. who fucked up openssl? |
| 20:44.33 | ma3x | folken: for controlling bandwidth |
| 20:44.34 | enouf | j0'm0mma |
| 20:44.47 | streuner | muddd: its /etc/init.d/bootmisc.sh , btw (script) |
| 20:44.52 | *** join/#debian i_am_ed (n=ed@80.175.128.209) |
| 20:45.00 | folken | ma3x thx |
| 20:45.11 | folken | ma3x: and here is the answer to your question: libapache2-mod-cband: /etc/apache2/mods-available/cband.load |
| 20:45.17 | folken | apt-file esarch cband.load returned this. |
| 20:45.24 | muddd | Mmm checking that too |
| 20:45.27 | muddd | ty |
| 20:45.28 | folken | s/esarch/search/g |
| 20:45.33 | streuner | muddd: np |
| 20:46.12 | hatred- | where can I find details regarding the latest openssl `issue` ? |
| 20:46.22 | hatred- | never mind, it's in the topic. |
| 20:46.23 | stew | hatred-: /topic |
| 20:46.38 | hatred- | thanks stew |
| 20:46.39 | *** join/#debian pallotro3 (i=chrono@marge.roa.cc) |
| 20:47.03 | *** join/#debian sharky (n=sharky@a40-prg1-15-56.static.adsl.vol.cz) |
| 20:47.19 | *** join/#debian litlebuda (n=litlebud@87-196-213-216.net.novis.pt) |
| 20:47.26 | ma3x | E: Couldn't find package libapache2-mod-cband |
| 20:47.31 | ma3x | folken: im using lenny |
| 20:47.51 | stew | ma3x: /msg dpkg pdo |
| 20:47.51 | *** join/#debian i_am_ed (n=ed@80.175.128.209) |
| 20:48.01 | *** join/#debian mhymn (i=mhymn@unaffiliated/mhymn) |
| 20:48.02 | *** join/#debian frog____ (n=frog@p4FD49DCA.dip0.t-ipconnect.de) |
| 20:48.04 | muddd | ah I see so I can make the change to /etc/motd.tail eh? |
| 20:48.13 | muddd | or just comment that out... |
| 20:48.14 | *** join/#debian NetEcho (i=NetEcho@unaffiliated/netecho) |
| 20:48.26 | hatred- | why was openssl modified (under debian) in the first place? |
| 20:48.26 | *** join/#debian dpm_ (n=dpm@p54A119A1.dip0.t-ipconnect.de) |
| 20:48.34 | folken | ma3x: i'm using testing too... |
| 20:48.41 | folken | pool/main/m/mod-cband/libapache2-mod-cband_0.9.7.4-2_i386.deb |
| 20:49.28 | stew | its not in testing |
| 20:49.39 | pythonic | when were the debian project's ssh keys last generated? |
| 20:49.48 | balibalo | how use clonezilla ? |
| 20:49.49 | stew | hatred-: to fix a valgrind warning |
| 20:49.53 | stew | pythonic: today |
| 20:50.01 | *** join/#debian MrNaz_ (n=MrNaz@125.27.71.202.adsl.dynamic.totbb.net) |
| 20:50.02 | pythonic | before today? |
| 20:50.10 | stew | pythonic: yesterday |
| 20:50.12 | pythonic | has the debian repository been compromised? |
| 20:50.19 | stew | pythonic: no |
| 20:50.20 | folken | ma3x: ah i see, i also have the stable feeds in my sources.list.d |
| 20:50.31 | pythonic | stew: how do you know? |
| 20:50.55 | hatred- | stew: interesting. where can I read more on this subject? |
| 20:51.07 | stew | pythonic: ok. there is no evidence of a compromise of the debian repository. |
| 20:51.14 | stew | pythonic: why do you ask? |
| 20:51.24 | pythonic | because i'd like to know |
| 20:51.55 | streuner | pythonic: yes, and we want know WHY :-) |
| 20:51.56 | stew | hatred-: http://marc.info/?t=114651088900003&r=1&w=2 |
| 20:52.17 | pythonic | full disclosure? |
| 20:52.34 | stew | pythonic: if there was a known compromise of the debian respository, debian would make an effort to let people know |
| 20:52.37 | hatred- | thank you |
| 20:52.39 | *** join/#debian jjlee (n=chatzill@82-35-174-145.cable.ubr04.nmal.blueyonder.co.uk) |
| 20:52.54 | stew | hatred-: and http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=363516 |
| 20:53.06 | pythonic | has anyone checked if there has been a compromise? |
| 20:53.16 | pinto3 | what'd i do to just update my md5 keys for apt? |
| 20:53.27 | pinto3 | i'm getting a bunch of cannot be verified for everything |
| 20:53.33 | *** join/#debian bier (n=bier@p54A54C6C.dip.t-dialin.net) |
| 20:53.36 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 20:53.38 | stew | pinto3: "aptitude update" or "apt-get update" |
| 20:53.43 | pinto3 | alright |
| 20:54.39 | \amethyst | pythonic: I don't know about compromises, but http://lists.debian.org/debian-devel-announce/2008/05/msg00003.html describes host debian project keys are being handled |
| 20:54.46 | \amethyst | s/host/how/ |
| 20:54.53 | *** part/#debian Vegetable (n=david@145.100.197.14) |
| 20:54.59 | *** join/#debian konadr (n=Kon@unaffiliated/konadr) |
| 20:55.03 | *** join/#debian milligan (n=milligan@ns.multigan.com) |
| 20:55.05 | *** join/#debian derchris (n=derchris@87-194-89-163.bethere.co.uk) |
| 20:55.26 | *** part/#debian barnum (i=pt@disgruntled.sysadmins.com) |
| 20:55.41 | *** join/#debian Tonus (i=casper@tulis.dsinet.org) |
| 20:56.42 | *** part/#debian Tonus (i=casper@tulis.dsinet.org) |
| 20:56.55 | *** join/#debian Debbie (n=Debbie@82-204-21-111.dsl.bbeyond.nl) |
| 20:56.57 | *** join/#debian icurnow (n=user@91.110.179.138) |
| 20:57.22 | pythonic | \amethyst: thanks |
| 20:57.34 | *** join/#debian pitakill (n=pitakill@189.135.201.219) |
| 20:57.39 | pythonic | no mention if they're going to check the source repository though.. |
| 20:58.01 | *** join/#debian timmy_boy (n=timmy_bo@71-87-56-234.dhcp.stcd.mn.charter.com) |
| 20:58.37 | *** join/#debian sm (n=sm@lgb-static-208.57.70.51.mpowercom.net) |
| 20:58.45 | *** join/#debian SmallR2002 (n=SmallR20@c-67-162-60-33.hsd1.il.comcast.net) |
| 20:58.59 | pythonic | or the build machines.. |
| 20:59.01 | neoark | anyone good at regexp? |
| 20:59.03 | *** join/#debian blop (i=blop@228-177-112-217.dyn.adsl.belcenter.be) |
| 20:59.11 | *** join/#debian esDebian-ve (n=esDebian@190-76-93-234.dyn.movilnet.com.ve) |
| 20:59.20 | neoark | need to now how to match (word) and -word in regex |
| 20:59.22 | *** join/#debian poseidon (n=joe@ip70-161-211-76.hr.hr.cox.net) |
| 20:59.23 | sm | good morning all! thanks for debian. is there a way to specify extra configure arguments with apt-get source -b ? |
| 20:59.26 | itchi | stew: This got a crazy impact, but nice to see that things has go fast to block and fix the things |
| 20:59.26 | anarcat | it seems this upload won't make it to security.d.o, any idea why? http://packages.qa.debian.org/o/openssh/news/20080513T150212Z.html |
| 20:59.29 | *** join/#debian m4ggus (n=marcus@p5B035BCD.dip.t-dialin.net) |
| 21:00.06 | *** join/#debian faux (n=user@1-1-4-21a.gkp.gbg.bostream.se) |
| 21:00.10 | anarcat | seems fairly critical to me, and Ubuntu made a seperate advisory for it... |
| 21:00.20 | stew | sm: no, you'd have to get the source without -b, edit debian/rules, then rebuild (with dpkg-buildpacakge, debuild, pdebuild, etc) |
| 21:00.46 | sm | aha, thanks |
| 21:01.16 | sm | what I'm doing now is apt-get source -b to see the configure line it uses, ctrl-c and configure...; make install from there |
| 21:01.42 | *** part/#debian jezdez (n=jezdez@tichy.websushi.org) |
| 21:02.04 | *** join/#debian aFlag (n=rafael@201.78.95.158) |
| 21:02.21 | wam | Is there a module (e.g. for pam) that can use a sorbs-like blacklist for dropping the ip via iptables when it connects and is in sorbs? |
| 21:02.37 | stew | sm: /msg dpkg source ; /msg dpkg debian/rules |
| 21:02.48 | \amethyst | wam: you mean for ssh logins? |
| 21:02.55 | wam | \amethyst: correct |
| 21:03.56 | hatred- | I have to say, this whole openssl thing is pretty disappointing </drama></attention> |
| 21:04.10 | aFlag | I'm having a hard time figuring out how to make apache and mysql not start during the system boot. update-rc.d manpage advices not to use remove for that, but I don't get what's the alternative method. Should I manually change the name link from S91apache to K91apache on rc.d? |
| 21:04.17 | beware | definitely |
| 21:04.38 | muddd | i use update-rc.d |
| 21:04.53 | ma3x | how can i install libapache2-mod-cband in lenny? |
| 21:05.05 | *** join/#debian MrNaz__ (n=MrNaz@125.27.71.202.adsl.dynamic.totbb.net) |
| 21:05.05 | *** join/#debian ktwilight_ (n=ktwiligh@33.110-67-87.adsl-dyn.isp.belgacom.be) |
| 21:05.11 | sm | stew: that's great, thanks |
| 21:05.22 | *** join/#debian Dako-kun (n=dako@F30d5.f.strato-dslnet.de) |
| 21:05.35 | stew | aFlag: the manpage for update-rc.d does include an exmaple that renames S to K which is a recommended method |
| 21:05.43 | stew | aFlag: or maybe i'm not understanding your question |
| 21:05.45 | *** join/#debian abchirk (n=rapunzel@cl-2502.ham-01.de.sixxs.net) |
| 21:05.51 | stew | ma3x: by installing it from stable or unstable |
| 21:06.06 | jjlee | <PROTECTED> |
| 21:06.25 | jjlee | anarcat: if so, I guess this update would lock people out of their servers before they had a chance to update their keys |
| 21:06.33 | sm | dpkg rules indicates that no question that's answered in any doc should be asked here, is that true ? |
| 21:06.34 | dpkg | sm: that's too long |
| 21:06.38 | anarcat | jjlee: some packages do that |
| 21:06.39 | sm | quiet |
| 21:06.41 | anarcat | jjlee: apticron, maybe, i don't recall |
| 21:06.51 | jjlee | so I guess that's why |
| 21:06.54 | anarcat | jjlee: that's at your own risk if you allow automatic packages |
| 21:07.27 | esDebian-ve | ma3x: and.... in unstable it will be more updated than int stable. |
| 21:07.33 | jjlee | fairly severe consequence in this case, though, if your server happens to be on the surface of Mars ;-) |
| 21:08.04 | Mazingaro | hi |
| 21:08.13 | aFlag | I think that you are, I'm the one having trouble with the update-rc.d syntax. All the examples the manpage has for disabling a service has a remove command first, and I thought the manpage said you're not supposed to do that |
| 21:08.18 | Mazingaro | please how can I scan my lan for attached pc? |
| 21:08.32 | Mazingaro | please how can I scan my lan for attached pcs? |
| 21:08.48 | *** part/#debian frsk (i=fredrik@asterix.samfundet.no) |
| 21:09.24 | rm | nmap -sP your_network/your_netmask |
| 21:09.30 | Mazingaro | rm thanks |
| 21:09.31 | *** join/#debian CaNeS (n=Linux@bas4-montreal02-1096736385.dsl.bell.ca) |
| 21:09.45 | rm | np |
| 21:09.59 | Mazingaro | rm: but there are PCs that haven't got same netmask |
| 21:10.01 | Iradieh | Hmm |
| 21:10.14 | esDebian-ve | nmap? That comes with the base system? I'm a little interested in do that... too... |
| 21:10.18 | *** join/#debian acollins (n=acollins@80-195-188-120.cable.ubr04.nmal.blueyonder.co.uk) |
| 21:10.36 | Iradieh | I don't know what dist to choose, is there a channel to help one out :/ I am kinda familiar with Debian but don't know it if it will suit my server needs. I have been thinking of Gentoo, Debian, FreeBSD, OpenBSD and Fedora :/ |
| 21:10.41 | *** join/#debian karrotx (n=steve@pool-70-110-22-197.washdc.fios.verizon.net) |
| 21:10.48 | stew | Iradieh: try ##linux |
| 21:10.57 | stew | esDebian-ve: nmap doesn't come with a base system |
| 21:11.04 | rm | Mazingaro, if they are in the same subnet, they have same netmask |
| 21:11.06 | enouf | aFlag: another option is /msg dpkg rcconf |
| 21:11.11 | rm | otherwise they are on different subnets |
| 21:11.12 | JoshH | go with mandriva, it's the bestest by far |
| 21:11.28 | rm | I think you can specify many subnet/netmask combos on one nmap command line |
| 21:11.30 | *** join/#debian ^^MAg^^ (n=mag@entropy.be) |
| 21:11.34 | Mazingaro | rm: no, I attached an embedded mb but I don't know anything about its ip |
| 21:11.40 | *** part/#debian dtatulea (n=dragos@85.121.13.9) |
| 21:12.00 | *** mode/#debian [+l 875] by debhelper |
| 21:12.20 | rm | Iradieh, depends on what you want, if you want a working server, use what is familiar to you, |
| 21:12.31 | rm | if you want to learn, use a distro which looks interesting, etc |
| 21:12.43 | stew | Mazingaro: do you know its MAC addr? |
| 21:12.49 | aFlag | enouf: rcconf looks great, thanks |
| 21:12.53 | *** part/#debian startgame412 (n=startgam@pool-71-190-22-144.nycmny.east.verizon.net) |
| 21:13.05 | Mazingaro | stew: no |
| 21:13.16 | ^^MAg^^ | Hi, I made some test regarding recent openssl un-random'ness, it looks REALLY SCARY |
| 21:13.19 | esDebian-ve | yep, interesting like debian ;) |
| 21:13.33 | linkslice | ^^MAg^^, what kind of tests? |
| 21:13.33 | Mazingaro | stew: I tried console too, but no way |
| 21:13.34 | *** join/#debian robboplus (n=no@unaffiliated/robboplus) |
| 21:13.41 | ^^MAg^^ | linkslice: mag.entropy.be/blog |
| 21:13.44 | *** join/#debian JW (n=JW@cvs.claborn.net) |
| 21:13.44 | Iradieh | rm: I want a server that I can give out free shells to people with apache2, php, mysql and irssi. 100 mb limit. |
| 21:13.50 | Iradieh | rm: want it to be completly secure |
| 21:14.00 | stew | Iradieh: those are contradictory goals |
| 21:14.12 | stew | Mazingaro: sometimes a device would have the MAC printed on it physically somewhere |
| 21:14.18 | pythonic | why was openssl using uninitialized memory anyway? why not just use /dev/random? |
| 21:14.28 | ^^MAg^^ | if you tell me I have to regenerate CA with all ssl certs ... |
| 21:14.38 | stew | pythonic: ask openssl-dev on openssl.org |
| 21:14.39 | rm | yesterday i'd say just go with debian |
| 21:14.41 | ^^MAg^^ | pythonic: because not all os'es have /dev/random |
| 21:14.42 | Iradieh | stew: well I want it to be as secure as it can be with that setup =) |
| 21:14.51 | rm | but today I will mention that OpenBSD is very secure |
| 21:14.52 | pythonic | ^^MAg^^: yeah, but debian does |
| 21:15.09 | linkslice | ^^MAg^^, beautiful |
| 21:15.11 | ^^MAg^^ | pythonic: check my quick stats about how random debian openssl was :/ |
| 21:15.15 | stew | pythonic: in fact it was only 0.9.7 that added any checking for /dev/random at all |
| 21:15.36 | pythonic | ^^MAg^^: where's your quick stats? |
| 21:15.48 | esDebian-ve | Wow, openBSD and freeBSD are the same?? |
| 21:15.59 | hatred- | Wow, no |
| 21:16.04 | ^^MAg^^ | pythonic: http://mag.entropy.be/blog/ |
| 21:16.11 | pythonic | stew: etch is 0.9.8 |
| 21:16.23 | streuner | pythonic: really? |
| 21:16.35 | streuner | esDebian-ve: ask somewhere else about |
| 21:16.52 | stew | pythonic: yes |
| 21:16.56 | *** join/#debian R430R (i=angel@80.97.89.33) |
| 21:17.21 | rm | ^^MAg^^, I am afraid to say this, but I don't get it :> |
| 21:17.23 | *** join/#debian lilkid (n=luke@87-194-38-230.bethere.co.uk) |
| 21:17.28 | Mazingaro | stew: no way, no mac |
| 21:17.31 | stew | pythonic: but even with the current versions, on debian openssl would prefer /dev/urandom over /dev/random |
| 21:17.42 | *** join/#debian vorpal (n=rhunter@pdpc/supporter/student/vorpal) |
| 21:17.49 | esDebian-ve | jeje, it was just for curiosity... i'm kinda new with BSD concepts ^^, i mean, i didn't know about it and its variants..... |
| 21:17.53 | rm | ^^MAg^^, what to look at, in the Debian printout in your blog? |
| 21:17.59 | ^^MAg^^ | rm: openssl with this line commented out cannot generate any random numbers |
| 21:18.03 | stew | rm: the point is that it was tending to produce the same random numbers over and over |
| 21:18.08 | stew | "random" |
| 21:18.11 | *** join/#debian frog_ (n=frog@p4FD49B02.dip0.t-ipconnect.de) |
| 21:18.13 | *** part/#debian foureyes779 (n=theron@unaffiliated/foureyes779) |
| 21:18.15 | streuner | esDebian-ve: well, *BSD is OT here |
| 21:18.32 | ^^MAg^^ | ghm maybe I shoult explain this better for noobs |
| 21:18.36 | *** join/#debian futex (n=futex@ADijon-258-1-141-80.w90-26.abo.wanadoo.fr) |
| 21:18.38 | JW | I have a brand new Debian Etch installation, and I have installed vpostmaster. I ran sa-update nd restart spamd but I'm still getting tons of spam. Is there something I need to configure to make SA see the updates?when I run update there is no output - it just returns to the prompt - is that normal? |
| 21:18.39 | Tapout | anyone know when the etch openssh fix will be sent out? I know I can manually do it, but I wanna let aptitude manage it |
| 21:19.08 | streuner | Tapout: read /topic |
| 21:19.09 | rm | ^^MAg^^, what to look at in the results |
| 21:19.09 | *** join/#debian RA3OR (i=angel@80.97.89.33) |
| 21:19.29 | rm | ah |
| 21:19.30 | stew | streuner: that information isn't in the topic |
| 21:19.31 | rm | dammit |
| 21:19.38 | rm | first column is count |
| 21:19.38 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 21:19.40 | pythonic | ^^MAg^^: how many unique keys in that 100000? |
| 21:19.47 | rm | now understood |
| 21:19.52 | ^^MAg^^ | yeah |
| 21:19.54 | *** join/#debian humbolto (n=elias@213-147-185-150.adsl.ycn.com) |
| 21:19.59 | lilkid | how do i install support for AAC files? (e.g. for Rhythmbox on Debian) |
| 21:20.05 | enouf | aFlag: np ;-) |
| 21:20.15 | jjlee | anybody know where the script is that generated the blacklist files? |
| 21:20.20 | streuner | stew: if you read /msg dpkg dsa1571 carefully? |
| 21:20.22 | *** part/#debian icurnow (n=user@91.110.179.138) |
| 21:20.44 | streuner | !blacklist |
| 21:20.44 | dpkg | In etch, lenny and sid, create/edit /etc/modprobe.d/blacklist.local and add a line similar to this (without quotes): "blacklist module_name". IMPORTANT: ask about <blacklist-initramfs>. For sarge ask me about <blacklist sarge>. To blacklist a module at installation time, ask me about <installer blacklist>. |
| 21:20.49 | *** join/#debian sdubois92 (n=spacemon@c-24-63-173-219.hsd1.ma.comcast.net) |
| 21:20.53 | *** join/#debian Jussi (n=jussi@port190.ds1-abc.adsl.cybercity.dk) |
| 21:21.02 | *** join/#debian Phil4 (n=phil@server1.germanserver.co.uk) |
| 21:21.10 | sdubois92 | is tar xvjf the command for untarring a tar.bz2? |
| 21:21.14 | pythonic | you'd expect about zero collisions |
| 21:21.17 | stew | streuner: i wrote /msg dpkg dsa1571 |
| 21:21.20 | JW | sdubois92: tar xjvf |
| 21:21.22 | stew | streuner: yes |
| 21:21.22 | streuner | sdubois92: sure /msg dpkg tar |
| 21:21.24 | *** join/#debian RA3OR (i=angel@80.97.89.33) |
| 21:21.25 | JW | sdubois92: tar xjpvf |
| 21:21.31 | streuner | stew: i know |
| 21:21.34 | pythonic | ^^MAg^^: the 40 is 40 random bytes? |
| 21:21.41 | stew | streuner: the infomation he is asking for ins't there |
| 21:21.42 | JW | sdubois92: p preserves permissions, if you want that option - you may not |
| 21:21.47 | Mazingaro | stew: netdiscover |
| 21:22.07 | sdubois92 | both are giving me tar: bzip2: Cannot exec: No such file or directory |
| 21:22.10 | ^^MAg^^ | pythonic: yeah I juest tested for 40 bytes |
| 21:22.15 | JW | sdubois92: j is for bzip2. z is for.gz |
| 21:22.19 | *** join/#debian vorpal_ (n=rhunter@ip24-255-31-98.tc.ph.cox.net) |
| 21:22.25 | JW | sdubois92: it's not installed which is normal on a minmal instal |
| 21:22.29 | pythonic | ^^MAg^^: how many different keys in that 100000? |
| 21:22.31 | JW | sdubois92: apt-get update ; apt-get insatll bzip2 |
| 21:22.33 | antgel | lilkid: the gstreamer0.10-plugins-really-bad includes faac support - is this what you need? |
| 21:22.47 | JW | sdubois92:that should have read apt-get update ; apt-get install bzip2 |
| 21:23.01 | i_am_ed | Errrr, isn't a new version of openssh already available from the repositories? |
| 21:23.03 | jjlee | streuner: sorry, I meant openssh-blacklis |
| 21:23.07 | *** join/#debian ponto (n=ponto@p5087EA7A.dip.t-dialin.net) |
| 21:23.11 | ^^MAg^^ | pythonic: this are not keys, it's just 100000 random seeds generated using openssl implementation |
| 21:23.12 | jjlee | *openssh-blacklist |
| 21:23.37 | *** join/#debian Piet (i=pietor@gateway/gpg-tor/key-0xC5C71DCE) |
| 21:23.37 | pythonic | ^^MAg^^: keys/seeds/randoms/whatever |
| 21:23.51 | streuner | Tapout: you heard what stew told us, just get the deb via wget or such and install it just by hand (dpkg -i) |
| 21:23.55 | rm | ^^MAg^^, what is repeatability rate? |
| 21:24.20 | rm | few numbers repeated 4 times, or MOST numbers? |
| 21:24.23 | ^^MAg^^ | rm: horryfying :/ |
| 21:24.25 | lilkid | antgel: ah yeah thats the one, gstreamer, do i install it with apt? |
| 21:24.26 | ^^MAg^^ | rm: all |
| 21:24.27 | ^^MAg^^ | ;] |
| 21:24.32 | *** join/#debian cramj (n=jm@rou64-1-82-243-197-235.fbx.proxad.net) |
| 21:24.32 | rm | lol |
| 21:24.33 | ponto | Hi, is there better technical information about the ssl bug. The page http://wiki.debian.org/SSLkeys states: It is important to understand that this problem was caused by trying to remove valgrind warnings related to the use of uninitialised memory within the openssl libraries. I cannot believe that the random number generator really depends on uninitialized memory. |
| 21:24.46 | jjlee | pythonic: the change was *intended* to remove the seeding from uninitialised mem |
| 21:24.48 | *** join/#debian olskolirc (n=^olskoli@c-71-206-223-151.hsd1.pa.comcast.net) |
| 21:25.05 | antgel | lilkid: aptitude |
| 21:25.06 | *** join/#debian Yvonne (n=Yvonne@pdpc/supporter/active/Yvonne) |
| 21:25.09 | jjlee | pythonic: but *also* removed the primary effect of the function used to do the seeding |
| 21:25.11 | pythonic | jjlee: right, but they also removed the seeding from /dev/u?random too? |
| 21:25.21 | pythonic | right :-) |
| 21:25.22 | *** part/#debian cramj (n=jm@rou64-1-82-243-197-235.fbx.proxad.net) |
| 21:25.23 | jjlee | removed just about *all* seeding, I think |
| 21:25.23 | olskolirc | I lost my /dev/video0 how do i get it back please. my pvr fails to open (tvtuner card) |
| 21:25.24 | *** join/#debian derchris (n=derchris@87-194-89-163.bethere.co.uk) |
| 21:25.30 | *** join/#debian RA3OR (i=angel@80.97.89.33) |
| 21:25.42 | antgel | olskolirc: insert the correct module |
| 21:26.01 | olskolirc | how will i know what that is antgel and where do i put it |
| 21:26.27 | ponto | jjlee: is there a link to the patch that lead to the bug? |
| 21:26.40 | antgel | olskolirc: lspci to find the correct hardware, then google to see what module supports it. lsmod to ensure it's not already loaded then modprobe to load it |
| 21:26.40 | *** join/#debian icurnow (n=user@91.110.179.138) |
| 21:27.07 | *** part/#debian icurnow (n=user@91.110.179.138) |
| 21:27.11 | olskolirc | ill try |
| 21:27.19 | Debbie | when I search in synaptic for virtualbox i find nothing - its a fresh install do I need to add a certain repository perhpas ? |
| 21:27.30 | stew | ponto: http://svn.debian.org/viewsvn/pkg-openssl/openssl/trunk/crypto/rand/md_rand.c?rev=300&view=diff&r1=300&r2=299&p1=openssl/trunk/crypto/rand/md_rand.c&p2=/openssl/trunk/crypto/rand/md_rand.c |
| 21:27.58 | antgel | !info etch virtualbox |
| 21:28.40 | antgel | stew: can you correct my bot-fu? :) |
| 21:28.52 | stew | !info virtualbox etch |
| 21:29.11 | antgel | cheers, could have guessed, didn't want to look stupid twice |
| 21:29.14 | *** join/#debian honkytonk (n=honkyton@h-169-56.A192.cust.bahnhof.se) |
| 21:29.39 | stew | 17:29 <dpkg> Package 'virtualbox' does not exist. |
| 21:29.44 | antgel | Debbie: it's not in etch http://packages.debian.org/virtualbox |
| 21:29.54 | ponto | stew: thanks |
| 21:30.06 | *** join/#debian GhostlyDeath|Lpt (n=steven@unaffiliated/ghostlydeath) |
| 21:30.09 | antgel | Debbie: note it is in etch-backports |
| 21:30.15 | *** join/#debian icurnow (n=user@91.110.179.138) |
| 21:30.20 | *** part/#debian icurnow (n=user@91.110.179.138) |
| 21:30.44 | olskolirc | walk me though antgel ? |
| 21:30.59 | antgel | olskolirc: no |
| 21:31.04 | olskolirc | ok |
| 21:31.06 | GhostlyDeath|Lpt | I'm trying to setup file sharing between Debian and Vista but so far it is not working |
| 21:31.12 | *** join/#debian RA3OR (i=angel@80.97.89.33) |
| 21:31.28 | Debbie | ty antgel: ill google for that - ty |
| 21:31.54 | antgel | Debbie: don't waste time googling. you never know what you'll find. /msg dpkg backports |
| 21:32.00 | *** mode/#debian [+l 867] by debhelper |
| 21:32.01 | enouf | ponto: an earlier diff? http://svn.debian.org/viewsvn/pkg-openssl/openssl/trunk/rand/md_rand.c?rev=141&r1=140&r2=141 |
| 21:32.53 | *** join/#debian secleinteer (n=secl@70.230.187.85) |
| 21:33.18 | *** part/#debian secleinteer (n=secl@70.230.187.85) |
| 21:33.25 | antgel | as in, search the web by all means, but it's all about /how/ you google :) |
| 21:33.37 | Debbie | ty |
| 21:33.47 | pythonic | i'm not getting collisions here.. |
| 21:33.49 | antgel | !ty |
| 21:33.49 | dpkg | methinks ty is thank you, or cobb -- a baseball player, or the company that creates Beanie Babies(TM) |
| 21:33.55 | enouf | Debbie: if you're using etch - do as mentioned - backports, if not there /msg dpkg ssb |
| 21:34.04 | pythonic | i'm on debian etch without the libssl upgrade.. |
| 21:34.08 | antgel | enouf: it's there |
| 21:34.14 | jjlee | ponto: also http://svn.debian.org/viewsvn/pkg-openssl/openssl/trunk/rand/md_rand.c?rev=141&view=log |
| 21:34.23 | enouf | ok |
| 21:34.41 | pythonic | aha... there's one.. |
| 21:35.03 | *** join/#debian ustunozgur (n=ustun@88.232.26.150) |
| 21:35.05 | ponto | enouf: jjlee thanks. I see that the wrong function got commented out. The patch should have been agains the source of the uninitalized memory. |
| 21:35.08 | *** join/#debian deadcat (n=deadcat@c-98-207-143-60.hsd1.ca.comcast.net) |
| 21:35.21 | Iradieh | Could someone please assist me, trying to run Debian 64, but it keeps crashing at "decompressing Linux" |
| 21:35.47 | streuner | Iradieh: what kind of CPU do you have? |
| 21:36.02 | *** join/#debian nuncanada (n=nuncanad@201.86.144.23.adsl.gvt.net.br) |
| 21:36.03 | antgel | hey streuner |
| 21:36.11 | streuner | hi |
| 21:36.16 | Iradieh | streuner: C2D macbook |
| 21:36.22 | Iradieh | streuner: it's VmWare |
| 21:36.23 | *** part/#debian muddd (n=superstr@24.129.17.116) |
| 21:36.24 | Debbie | im in 40r3 |
| 21:36.34 | Debbie | just installed today |
| 21:36.38 | enouf | ask #vmware |
| 21:36.43 | Debbie | not sure what the name of this version is |
| 21:36.54 | *** join/#debian RA3OR (i=angel@80.97.89.33) |
| 21:36.57 | enouf | if they allow 64hosts and guests |
| 21:37.01 | *** part/#debian anarcat (n=anarcat@pdpc/supporter/active/anarcat) |
| 21:37.04 | antgel | !tell Debbie about releases |
| 21:37.10 | stew | Debbie: 'etch' |
| 21:37.13 | *** join/#debian tictac (n=tictac@ip24-255-224-20.ks.ks.cox.net) |
| 21:37.20 | versuchsanstalt | auch hey streuner... :-) |
| 21:37.29 | enouf | Debbie: see /topic ;-) |
| 21:37.34 | streuner | versuchsanstalt: du hier? haha |
| 21:37.52 | *** part/#debian joh (i=johannj@leopard.stud.ntnu.no) |
| 21:37.53 | versuchsanstalt | streuner: ich /msg dich mal |
| 21:38.06 | *** join/#debian wurstwolf (n=wurstwol@p4FCA7510.dip.t-dialin.net) |
| 21:38.15 | Debbie | okies - tnx for all the good info and kind responce - apreciated |
| 21:38.23 | sdubois92 | how do i tell what shell i am using? |
| 21:38.24 | antgel | Debbie: we rock |
| 21:38.31 | *** join/#debian korhojoa_ (i=joakim@www.jvprocon.com) |
| 21:39.01 | enouf | well, printenv ? echo $SHELL |
| 21:39.10 | Iradieh | Does anyone know what version of Debian has apt-get autoremove --purge? |
| 21:39.56 | stew | Iradieh: 0.7 or later |
| 21:41.53 | Iradieh | stew: what? |
| 21:42.00 | *** mode/#debian [+l 861] by debhelper |
| 21:42.09 | Iradieh | Does anyone know what version of Debian has apt-get autoremove --purge? |
| 21:42.15 | Iradieh | Is it lenny or sid? |
| 21:42.20 | stew | Iradieh: oh, autoremove came with apt 0.7. lenny has 0.7 |
| 21:42.33 | Iradieh | stew: alright cool |
| 21:42.44 | *** join/#debian deriaN (n=nopron@90.185.61.198) |
| 21:43.20 | RichiH | does anyone have a compromised 1024 or 2048 bit SSL cert for me? |
| 21:43.22 | stew | Iradieh: however, aptitude has had similar functionality to autoremove for many years (including etch) |
| 21:43.31 | Iradieh | stew: yeah but I prefer Apt-get |
| 21:43.37 | Iradieh | stew: thanks, lenny it is |
| 21:44.00 | Iradieh | stew: I have been looking for lenny (netinstall 64) on the website but cant seem to find it :/ could you give me a push |
| 21:44.08 | *** join/#debian tolecnal_ (n=tolecnal@215.80-203-134.nextgentel.com) |
| 21:44.27 | stew | Iradieh: http://debian.org/devel/debian-installer note that it is a beta and you should expect it to be broken |
| 21:44.40 | Iradieh | stew: it is gonna be my server -_- |
| 21:44.44 | *** join/#debian Bullie (n=Bulldog@011.254.dsl.concepts.nl) |
| 21:44.51 | stew | Iradieh: you should not run testing on a server |
| 21:44.56 | itchi | stew: Generating new keys for openvpn take 6x more time now. Up to 1:13 mins |
| 21:44.59 | Iradieh | stew: :) don't worry ;) |
| 21:45.09 | rm | Iradieh, an alternative to that is to do "dpkg -P `deborphan` |
| 21:45.11 | rm | " |
| 21:45.18 | Iradieh | stew: btw, Lenny is just Testing, Bleeding edge is Sid? |
| 21:45.27 | stew | Iradieh: yes |
| 21:45.30 | *** join/#debian FordCortina_ (n=FordCort@87.114.136.70.plusnet.thn-ag1.dyn.plus.net) |
| 21:45.30 | antgel | !tell Iradieh about releases |
| 21:45.32 | Iradieh | rm: removing all dependencies? |
| 21:45.37 | stew | Iradieh: testing is the worst from a security perspective |
| 21:45.37 | pythonic | sid is always unstable |
| 21:45.48 | *** join/#debian frog___ (n=frog@p4FD4990E.dip0.t-ipconnect.de) |
| 21:45.49 | rm | purging all packages which deborphan lists as unneeded |
| 21:45.53 | Iradieh | stew: When is testing becoming current? |
| 21:46.05 | rm | when it's ready (tm) |
| 21:46.09 | rm | :) |
| 21:46.09 | Iradieh | stew: why, I mean TEsting should have everything Current has + more |
| 21:46.13 | stew | Iradieh: when the count of release critical bugs in testing is zero: http://bugs.debian.org/release-critical |
| 21:46.20 | stew | Iradieh: no |
| 21:46.25 | *** join/#debian muh2000 (n=muh2000@unaffiliated/muh2000) |
| 21:46.39 | Iradieh | stew: Total number of release-critical bugs: 1768 Jesus Christ |
| 21:46.50 | *** join/#debian ggeecko (n=ggeecko@c-76-97-46-3.hsd1.ga.comcast.net) |
| 21:46.58 | stew | Iradieh: Number concerning the next release: 581 |
| 21:47.09 | *** join/#debian alberto (n=alberto@83.175.202.27) |
| 21:47.32 | Iradieh | stew: ah okay |
| 21:47.35 | rm | question... I have upgraded openssl etc, now, what is the easiest way to purge and regenerate all keys? |
| 21:47.49 | stew | rm: /msg dpkg dsa1571 |
| 21:48.21 | pythonic | in that openssl patch, buf is either (1) output from /dev/random or (2) uninitialized, eh? |
| 21:48.41 | rm | Key Rollover |
| 21:48.42 | rm | More to follow soon |
| 21:48.48 | rm | ok tnx ._. |
| 21:48.51 | stew | rm: try the wiki.debian.org link |
| 21:49.01 | stew | pythonic: /dev/urandom you mean |
| 21:49.06 | \amethyst | pythonic: the second one (surrounded with #ifdef PURIFY) is uninitialized |
| 21:49.14 | rm | i see, thanks |
| 21:49.20 | ajuc | hello, i have debian sid with kde 3.5.9, is it possible to install kde 4 for the same user, or sth wll be broken ? |
| 21:49.23 | pythonic | i'm looking at this: http://svn.debian.org/viewsvn/pkg-openssl/openssl/trunk/crypto/rand/md_rand.c?rev=300&view=diff&r1=300&r2=299&p1=openssl/trunk/crypto/rand/md_rand.c&p2=/openssl/trunk/crypto/rand/md_rand.c |
| 21:49.28 | \amethyst | pythonic: from what I gather, the problem is that the first one was removed, too |
| 21:50.42 | jjlee | pythonic: that's the place it was fixed |
| 21:50.47 | *** join/#debian sjig (n=mobile@hillenius.net) |
| 21:51.11 | jjlee | you want http://svn.debian.org/viewsvn/pkg-openssl/openssl/trunk/rand/md_rand.c?rev=141&view=diff&r1=141&r2=140&p1=openssl/trunk/rand/md_rand.c&p2=/openssl/trunk/rand/md_rand.c |
| 21:52.01 | pythonic | why is the fix only one line uncommented? |
| 21:52.07 | dondelelcaro | pythonic: because that's what the fix is. |
| 21:52.21 | jjlee | pythonic: the other change was correct |
| 21:52.22 | pythonic | oh, right :-} |
| 21:52.28 | *** join/#debian xpoint (n=xpoint@dlink.junc.org) |
| 21:52.37 | antgel | ajuc: if you have to ask maybe you shouldn't be running sid |
| 21:52.42 | \amethyst | pythonic: because the second one really was uninitialized |
| 21:52.57 | *** join/#debian tobias (n=tobias@user-0c998nt.cable.mindspring.com) |
| 21:53.00 | jjlee | it was soo close that somebody might have spotted it at the time |
| 21:53.05 | cizzi | \amethyst -hi how are you |
| 21:53.11 | *** join/#debian SEcki (n=SEcki@e181121040.adsl.alicedsl.de) |
| 21:53.12 | jjlee | http://marc.info/?t=114651088900003&r=1&w=2 |
| 21:53.23 | cizzi | \amethyst - do you remember the solar application i was working on? |
| 21:53.25 | \amethyst | pythonic: it appears that the correct fix would have been just #define PURIFY---someone upstream reported that valgrind did not warn when that happened |
| 21:53.40 | \amethyst | cizzi: Not sure, remind me |
| 21:53.50 | ajuc | I'd like to learn something as long as i can work on computer doing this |
| 21:54.05 | cizzi | \amethyst - i made a small site out of it this weekemd... do u want the link in pm? not sure about posting url's in here |
| 21:54.10 | \amethyst | cizzi: sure |
| 21:54.12 | pythonic | who is Kurt Roeckx? does he work for the communist party? :-) |
| 21:54.12 | cizzi | ok |
| 21:54.23 | *** join/#debian Lagbolts (n=jm@dhcp-68-244.physics.purdue.edu) |
| 21:54.33 | *** part/#debian lilkid (n=luke@87-194-38-230.bethere.co.uk) |
| 21:54.38 | jjlee | "So yes I think not using the uninitialized memory (it's only a single line, the other occurrence is already commented out) helps valgrind." -- Marco Roeland, 2006-05-02 |
| 21:54.53 | *** join/#debian iw (n=dsl@c-98-206-69-186.hsd1.in.comcast.net) |
| 21:54.54 | dondelelcaro | pythonic: he's the maintainer of openssl. |
| 21:55.02 | pythonic | the other occurrent is already commented out? |
| 21:55.03 | ajuc | antgel: I've had kde 4 on gentoo before but then moved to debian becouse of small disk |
| 21:55.06 | pythonic | occurrence* |
| 21:55.17 | \amethyst | cizzi: neat |
| 21:55.19 | antgel | ajuc: and? |
| 21:55.26 | pythonic | oic... |
| 21:55.27 | *** join/#debian blameless (n=blameles@c-71-62-57-94.hsd1.va.comcast.net) |
| 21:55.27 | ajuc | and I don't know if it's possible on debian to hve both kde 3.5 and kde 4 |
| 21:55.34 | cizzi | \amethyst - thanks.. yesterday i upgraded my batteyr.. i got a deep cycle battery 31AH from deka.. pretty neat stuff |
| 21:55.38 | antgel | ajuc: did you read what i wrote? |
| 21:55.43 | jjlee | pythonic: I was just quoting from the thread where the Debian maintainer asked on the openssl list and got that response, amongst others |
| 21:55.50 | cizzi | \amethyst - also.. my public shell server is doing great... got about 200 users now |
| 21:55.51 | *** join/#debian bart__ (n=bart@78-21-105-221.access.telenet.be) |
| 21:56.08 | cizzi | \amethyst - got started in here , you helped me out |
| 21:56.21 | rm | that guy should be banned from ever programming again |
| 21:56.22 | ajuc | yes - you said i shouldn't be running sid, I don't think so. |
| 21:56.33 | dustybin | http://it.slashdot.org/article.pl?sid=08/05/13/1533212&from=rss |
| 21:56.35 | *** join/#debian poslathian (i=poslathi@EASTCAMPUS-THREE-NINETY-EIGHT.MIT.EDU) |
| 21:56.42 | pythonic | rm: which one? Kurt Roeckx or Marco Roeland? |
| 21:56.43 | jjlee | pythonic: if somebody had spotted that they were talking about two different "other" lines (I think that's what happened, but haven't looked for the other "other" line), this wouldn't have happened |
| 21:56.46 | ajuc | But thank you for your opinion |
| 21:56.53 | antgel | ajuc: no, i said *if you have to ask* you shouldn't be running sid |
| 21:56.58 | rm | Kurt, imho |
| 21:57.05 | dondelelcaro | rm: hardly; and if you want to complain about the maintainer, help out. |
| 21:57.12 | poslathian | anyone know why it is that i have to rerun alsaconf everytime i boot up to get the sound to work, even though i save the config file in the wizard? |
| 21:57.28 | cizzi | \amethyst - a few months ago i went to a system admin job interview with a debian t-shirt, they were running redhat, i didnt get the job, thinking its related :) |
| 21:57.35 | \amethyst | cizzi: heh :) |
| 21:57.48 | ajuc | antgel: ok, so where can i find if what i want is possible |
| 21:58.06 | ajuc | I've been searching but opinions were different on each site |
| 21:58.35 | ajuc | sid is fine for me, becouse i want new stuff |
| 21:58.37 | chops | cizzi: Was it possibly related to the fact that you went to the interview wearing a t-shirt? |
| 21:58.51 | cizzi | chops - yes and that i really didnt want the job |
| 21:58.51 | rm | dondelelcaro, I don't want to flame here, just think this might be the most serious security flaw in OSS, ever found |
| 21:58.59 | \amethyst | rm: I really doubt that |
| 21:59.09 | *** join/#debian mr_oddwire (n=mr_oddwi@77-101-168-203.cable.ubr08.dals.blueyonder.co.uk) |
| 21:59.11 | *** join/#debian ma3x_ (i=ma3x@unaffiliated/ma3x) |
| 21:59.14 | antgel | ajuc: actually, it's not. if you run sid, you're expected to know answers. it's not supported |
| 21:59.17 | rm | you thought it was encrypted, and in reality it was almost not |
| 21:59.21 | rm | for two years. whoops. |
| 21:59.22 | antgel | !tell ajuc about sid |
| 21:59.56 | pythonic | were debian's build machines vulnerable? |
| 21:59.58 | jjlee | amethyst: name a worse one |
| 22:00.16 | cizzi | you need to pay me alot more than 55k a year to get to wear a shirt and tie |
| 22:00.21 | chops | rm: It's happened before, it'll happen again. There's not a lot that can be done to prevent really serious security flaws from slipping through sometimes. |
| 22:00.24 | ajuc | antgel: :) wow, now i understand why every site has it's opinion |
| 22:00.33 | ajuc | ok, if that is debian way |
| 22:00.38 | cizzi | anyways.. beer time |
| 22:00.39 | cizzi | later |
| 22:01.24 | *** join/#debian ionix (n=ionix@p4234-ipbf1501marunouchi.tokyo.ocn.ne.jp) |
| 22:01.28 | antgel | ajuc: sid is not really for those new to debian, debian is not /necessarily/ a distro for those who want to be on the bleeding edge and expect support :) |
| 22:01.47 | RichiH | does anyone have a compromised 1024 or 2048 bit SSL cert for me? i need it to test a new version of dowkd.pl |
| 22:01.51 | jjlee | chops: not messing with openssl seeding function without actually getting the patch committed to openssl would be a good start |
| 22:01.54 | RichiH | dondelelcaro: ? |
| 22:01.55 | ajuc | antgel - i know, only gentoo is big pain on old cpu becouse of all this compiling |
| 22:01.59 | *** join/#debian lanthan (n=lanthan@pD9EA26BF.dip0.t-ipconnect.de) |
| 22:01.59 | chops | jjlee: It would |
| 22:02.12 | RichiH | 'unfortunately' all my boxen are up to date and my certs are longer |
| 22:02.33 | ajuc | and by asking i don't wanted to have definite answer, I won't sue you if your answer will be wrong |
| 22:02.38 | antgel | ajuc: well, yes. my advice is to get familiar with debian via stable then when you know more, you'll be able to dip your toe in the water of sid |
| 22:02.38 | *** part/#debian pallotro3 (i=chrono@marge.roa.cc) |
| 22:02.55 | dustybin | does this mean every single debian machine running ssh server could now get cracked? |
| 22:03.11 | jjlee | dustybin: no |
| 22:03.11 | antgel | ajuc: it's not that i'm worried about being wrong, it's that as a rule, we don't support sid. can of worms |
| 22:03.22 | dustybin | jjlee: aye ok *phew* |
| 22:03.31 | jjlee | lots of machines will have firewall rules that prevent that, for example |
| 22:03.38 | \amethyst | jjlee: say, CVE-2002-0639 |
| 22:03.40 | beware | longer than 2048? |
| 22:03.40 | dustybin | jjlee: oh o_0 |
| 22:03.44 | *** join/#debian SlackDeb (n=fperetti@201.254.118.95) |
| 22:03.47 | beware | i know 2048 isnt perfect |
| 22:03.48 | *** join/#debian schallstrom_ (n=schallst@p57A26769.dip.t-dialin.net) |
| 22:03.50 | pythonic | dustybin: if you remote ssh into your machine someone could have sniffed the password |
| 22:03.54 | beware | but lots of things are still on 1024, which is stupid |
| 22:04.14 | *** join/#debian maxamillion (n=adam@ss-5-41.shsu.edu) |
| 22:04.23 | peterS | beware: why is that stupid? |
| 22:04.25 | *** part/#debian Baloo (n=baloo@71-215-134-31.ptld.qwest.net) |
| 22:04.40 | beware | because 1024 bits RSA is obsolete |
| 22:04.40 | peterS | beware: it is? |
| 22:04.42 | beware | imo, it is |
| 22:04.55 | beware | tell me a good reason to use, or generate, 1024 bits RSA keys |
| 22:04.58 | *** join/#debian mzhang (n=bessel@sar3.uchicago.edu) |
| 22:05.08 | peterS | they are faster than 2048-bit keys and take less space and bandwidth? |
| 22:05.15 | jjlee | dustybin: if you can ssh into your box with key you generated on a Debian box, it's a problem |
| 22:05.25 | pythonic | beware: to test your quantum computer factoring? |
| 22:05.30 | beware | lol |
| 22:05.33 | stiv2k | what does device br0 usually mean? |
| 22:05.41 | peterS | stiv2k: that is an ethernet bridge |
| 22:05.41 | rm | bridge |
| 22:05.42 | *** join/#debian humbolto (n=elias@213-147-185-150.adsl.ycn.com) |
| 22:05.43 | stew | stiv2k: an ipv4 bridge |
| 22:05.47 | beware | 1024 bits RSA is equivalent to 80 bits symmetric key, and it's too close to what can be cracked right now |
| 22:05.48 | chops | dustybin: This vulnerability affects the quality of the encryption, not the security of the server against privilege escalation. It's not the kind of thing that can result in the running of arbitrary code via an automated exploit |
| 22:05.50 | Maliuta | I would prefer to be able to generate larger keys, dsa will only let you do a 1024 |
| 22:05.57 | *** join/#debian Baloo (n=baloo@71-215-134-31.ptld.qwest.net) |
| 22:06.01 | stiv2k | stew: peterS: thought so |
| 22:06.02 | dustybin | aye ok |
| 22:06.21 | *** join/#debian tomaw_ (i=tom@freenode/staff/tomaw) |
| 22:06.22 | peterS | Maliuta: do you say this as someone who has analyzed the DSA algorithm and determined that 1024 bit keys are not sufficiently strong? |
| 22:06.25 | pythonic | chops: yeah, it is |
| 22:06.28 | pythonic | just not directly |
| 22:06.41 | beware | why is DSA seen as a "new, better" thing if it isnt more efficient per bit than RSA, and has a ceiling of 1024 |
| 22:07.18 | rm | why not just use a 4096-bit key |
| 22:07.26 | chops | beware: "In the realm of security, encryption is the one thing we already do pretty well. Focusing on encryption is like sticking a tall stake in the ground and hoping the enemy runs right into it, instead of building a wide wall. Arguing about whether this kind of thing is more secure than AES -- the United States' national encryption standard -- is like arguing about whether the stake should be a mile tall or a mile and a half tall. However tall it is, t |
| 22:07.29 | rm | uses 4096 in PGP |
| 22:07.42 | Maliuta | peterS: no, I say this as someone who watches the growing power of cpu's and thinks anything that keeps you slightly above the curve is good |
| 22:07.45 | pythonic | personally i use a 16777216 bit key |
| 22:07.48 | chops | beware: This exploit is a good example. You could be using 1048576-bit keys and it wouldn't have made a lick of difference. |
| 22:07.49 | sdubois92 | i have g++-3.4 installed but i am getting a no c++ compiler error |
| 22:07.51 | peterS | rm: because it's computationally expensive, cutting and pasting public keys gets really unwieldy, attaching sigs to emails bloats their size a lot more, etc.? |
| 22:07.51 | ajuc | antgel: I understand support like - we tried this on many configurations and it works, what i was asking about is - does anybody by any chance tried having kde 3.5 and 4 on sid. I don't think it's against your rules, but hey, that's your rules. So thank you, I'll try by myself. |
| 22:08.19 | peterS | Maliuta: does it bother you that AES specifies only 256 bits? you seem to be of the "more is better" camp, and 256 is only 1/4 of 1024 |
| 22:08.43 | poslathian | so i should just be able to autoupdate patch up openssl? |
| 22:08.43 | jjlee | amethyst: I guess so, we're awash with overflows |
| 22:08.47 | jjlee | :-( |
| 22:08.52 | pythonic | zomg and 256 is not even a prime number o.O |
| 22:08.59 | Lagbolts | Maliuta, yeah seriously . .. who are you trying to keep out? |
| 22:09.03 | chops | peterS: Not sure if you're joking or not, but symmetric and asymmetric key lengths are not comparable |
| 22:09.11 | zinx | what chops said |
| 22:09.18 | peterS | chops: I'm making the point that comparing 1024-bit DSA with 1024-bit RSA is not necessarsily meaningful |
| 22:09.22 | beware | peterS, thats symmetric key sizes, and 256 bits is considered totally uncrackable, key size wise |
| 22:09.29 | peterS | beware: I know, see my reply to chops |
| 22:09.45 | Lagbolts | long as 99.1% of the world cant beat my encryption i think i will be ok and i think 256bit is plenty for that. i would worry more about known attacks or vulnerabilities |
| 22:09.54 | Maliuta | Lagbolts: how many net facing servers do you run? have you seen the number of people trying 'sploits on ssh servers? |
| 22:09.55 | beware | while i see 1024 bits RSA as "too small for comfort", personally |
| 22:10.03 | chops | Lagbolts: You think 0.9% of the world can beat 256bit? |
| 22:10.13 | *** part/#debian toad_ (n=toad@freenet/developer/toad) |
| 22:10.14 | pythonic | haha |
| 22:10.23 | Lagbolts | chops, figure of speach lol |
| 22:10.23 | antgel | ajuc: to answer your question - anything's possible! good luck :) |
| 22:10.26 | pythonic | nsa employs a few.. |
| 22:10.27 | chops | poslathian: That's not a complete solution, /msg dpkg dsa1571 |
| 22:10.33 | beware | noone on earth can crack 256 bits AES. also its extremely unlikely that anyone can crack 128 bits atm |
| 22:10.39 | poslathian | chops: thanks |
| 22:10.53 | chops | Cheers all. I encourage you to argue further in my absence. |
| 22:10.56 | Lagbolts | Maliuta, how many people are successful? |
| 22:10.59 | Maliuta | beware: famous last words |
| 22:11.09 | *** join/#debian kshah (n=kunalash@cpe-68-173-252-199.nyc.res.rr.com) |
| 22:11.09 | jjlee | chops: why do you say it's not exploitable to automatically execute arbitrary code? |
| 22:11.14 | beware | this is under the assumption that the standard isnt broken through analysis |
| 22:11.29 | hramrach | Hello |
| 22:11.37 | *** join/#debian RaceKondition (n=RaceCond@217-159-200-30-cn.lse.estpak.ee) |
| 22:11.37 | beware | but using brute force, 128 bits is into the "cubic kilometers full of FPGA's" realm |
| 22:11.46 | beware | (which the US government might be able to afford) |
| 22:11.51 | Lagbolts | lol i feel like i am in ##crypto |
| 22:11.56 | beware | now its a factor 2 for every extra bit |
| 22:12.03 | Lagbolts | those guys are serious |
| 22:12.27 | *** join/#debian lousin (n=lousin@200.18.97.104) |
| 22:12.41 | prh-x | anyone know if the debian ssh maint is going to backport the new Ubuntu openssl/ssh/vpn key blacklisting and *-vuln tools? |
| 22:13.03 | sdubois92 | i have g++-3.4 installed but i am getting a no c++ compiler error |
| 22:13.04 | prh-x | and WHY does the new package not flash a big debconf warning to destroy old keys? |
| 22:13.20 | *** join/#debian gravity (i=david@dhcp-130-64-45-101.boston.tufts.edu) |
| 22:13.21 | Lagbolts | sdubois92, what are you trying to do that is telling you that? |
| 22:13.31 | sdubois92 | automake |
| 22:13.42 | stew | sdubois92: install build-essential |
| 22:13.43 | jberg | gaah. my computer crashes and i thought my cpu overheated so i installed lm_sensors and sensord. as far as i can tell the log says the cpu is steady at 40 celcius and i cant find anything else in /var/log/syslog or /var/log/dmesg that can tell me why it crashes. any tips? |
| 22:13.57 | antgel | jberg: RAM? |
| 22:14.07 | beware | run memtest86 |
| 22:14.29 | jberg | hm maybe. but it has crashed like a long time and i bought new ram two weeks ago |
| 22:14.37 | jberg | ill run memtest though |
| 22:14.38 | Lagbolts | jberg, does it crash randomly or only when you do certain things? or only under load or will it hang idling? |
| 22:14.42 | lousin | hi.. anyone knows the name of the tool that creates a debian package when you do a "make install" on a source code tree, so that you can do apt-get remove package, when you want to remove the software? |
| 22:14.42 | pythonic | what's the message digest used in that openssl code? |
| 22:14.51 | Lagbolts | lousin, checkinstall |
| 22:15.09 | hramrach | How do I make a Release file that apt does not ignore? |
| 22:15.11 | jberg | pythonic: i dont know. yesterday i didnt touch my computer the whole day, then i started doing stuff and it crashed |
| 22:15.27 | jberg | but i can also do stuff on it for like 6 hours without it crashing |
| 22:15.32 | lousin | Lagbolts: thanks! i think thats it! |
| 22:15.42 | pythonic | my laptop has started freezing on boot |
| 22:16.05 | beware | well, what bothers me is if i check the certificate of my internet banking site, and on the top of the chain is a 1024 bits key with a MD2 hash |
| 22:16.06 | jberg | err that meant to Lagbolts not pythonic |
| 22:16.18 | *** join/#debian ptux (n=tux@195.94.143.34) |
| 22:16.24 | beware | thats like 15 year old standards |
| 22:16.32 | *** join/#debian spinodal (n=jrd@24.174.42.106) |
| 22:16.36 | *** join/#debian RTFT (n=RTFT@78-40-194-191.dsl.alice.nl) |
| 22:16.41 | Lagbolts | jberg, well yeah check mem, if not cpu or mem then might be m/b or some other hardware |
| 22:16.41 | RTFT | Hies. |
| 22:16.50 | xand | am I likely to have any problems if /var lives on nfs? |
| 22:16.53 | jberg | Lagbolts: yep |
| 22:16.55 | Lagbolts | jberg, have you added any hardware lately? |
| 22:17.10 | hramrach | jberg: if your problem is not reproducible easily it will be hard to find what does it |
| 22:17.11 | Lagbolts | jberg, do you have any spare mem or cpus you could change out? |
| 22:17.13 | pythonic | so openssl is generating 2048 bit keys from a 128? bit digest seed? |
| 22:17.27 | beware | is it?? |
| 22:17.41 | beware | why do you think that |
| 22:17.41 | Lagbolts | jberg, yeah hramrach is right, repeatable is def easier to diagnose |
| 22:18.00 | beware | pythonic, the digests in that perl script are md5 hashes of vulnerable keys |
| 22:18.08 | *** join/#debian NetEcho__ (i=NetEcho@67.204.212.78) |
| 22:18.08 | jberg | Lagbolts: this was an old motherboard, cpu and graphics card and psu, i bought new hard disks and ram. it crashed before though, so i cleaned the cooling paste from the cpu and applied new |
| 22:18.15 | *** join/#debian Muchikon (n=chatzill@190.42.226.181) |
| 22:18.27 | pythonic | beware: the incorrect patch commented a line MD_Update |
| 22:18.33 | rm | xand, i have several PCs where / lives on NFS |
| 22:18.35 | RTFT | So about the Random number generator not being so random thing, would this line "apt-get update; apt-get -y dist-upgrade; ssh-keygen -f /etc/ssh/ssh_host_rsa_key -N '' -t rsa -b 8192; ssh-keygen -f /etc/ssh/ssh_host_dsa_key -N '' -t dsa" fix that? |
| 22:18.39 | rm | and no problems |
| 22:18.46 | pythonic | now if that line all by itself created weak keys... |
| 22:18.55 | hramrach | jberg: the cooling is usually not a problem (unless the cooler falls of or somethiong) |
| 22:18.55 | pythonic | err.. that line commented* |
| 22:19.04 | beware | i had 3 host keys. rsa, dsa, and "neither" (which is also rsa) |
| 22:19.10 | beware | i regenerated all 3 |
| 22:19.21 | stew | xand: some parts of /var cannot be shared between two different machines, if that is what you are trying to do |
| 22:19.23 | beware | logging in was using the "rsa" one |
| 22:19.29 | jberg | hramrach: hm ok. maybe psu or graphics card then. or maybe motherboard |
| 22:20.03 | hramrach | jberg: however, the ram, board, or cpu migh be defective (approximately in this order) |
| 22:20.27 | jberg | ok i see |
| 22:20.29 | olskolirc | I have video0-63 in /dev/.static/dev how do I get my tvtuner card to see it? |
| 22:20.41 | *** join/#debian academy (n=adam@unaffilated/academy) |
| 22:20.48 | olskolirc | I don't have /dev/video0 |
| 22:20.51 | academy | <PROTECTED> |
| 22:20.52 | olskolirc | its gone |
| 22:20.52 | hramrach | jberg: unless you have about one spare computer to swap parts with there is low chance of ever diagnosing the problem :/ |
| 22:21.00 | *** join/#debian dererk (n=dash@CAcert/user/dererk) |
| 22:21.04 | jberg | hramrach: yep :( |
| 22:21.33 | hramrach | jberg: still you can try to load different devices to see what does make it worse |
| 22:21.47 | ptux | i would like install jidgo, but it is not on the synaptic repo of my etch. so i downloaded it (in .deb) from the jidgo website.trying the installation i receive as output a message that inform me that the same version is on a "software channel" and suggest me to install from there. what does it means? |
| 22:22.00 | *** mode/#debian [+l 846] by debhelper |
| 22:22.01 | ptux | what have i to do? |
| 22:22.05 | hramrach | jberg: it migh be even xorg driver :-S |
| 22:23.02 | antgel | academy: have you read the manual? |
| 22:23.32 | jberg | hramrach: hm what is that and how so? |
| 22:23.41 | antgel | ptux: it means you have missed the fact that jigdo is in etch |
| 22:23.41 | telexicon | does the bug with ssl affect generating random session keys? |
| 22:23.43 | hramrach | jberg: you cen try memetest, cpuburn, dd and some fast torrents or gentoo bootstrap (to test dma) |
| 22:23.52 | hramrach | *memtest |
| 22:24.01 | jberg | hramrach: what do i use dd for? |
| 22:24.26 | hramrach | test that your ram and board can handle dma from hdd |
| 22:24.59 | jberg | ok |
| 22:25.04 | hramrach | I had ram that reproducibly failed that but it's usually not that easy :/ |
| 22:25.16 | *** part/#debian Saturn (i=saturn@saturn.xise.nl) |
| 22:25.56 | jberg | okay will try some different things. thanks |
| 22:25.58 | *** join/#debian chrisjw (n=gfh456@5ac8d01c.bb.sky.com) |
| 22:25.58 | hramrach | oh, and GL screensavers and stuff to test graphics is also a good idea |
| 22:26.24 | jberg | yep |
| 22:27.36 | hramrach | jberg: generally once you consider the work with trying all that it's probably easier to go for something like Little Valley |
| 22:28.48 | *** join/#debian Baloo (n=baloo@71-215-134-31.ptld.qwest.net) |
| 22:28.52 | *** join/#debian mahmoud2 (n=Mahmoud@41.234.155.63) |
| 22:28.56 | hramrach | It's a small cheap integrated board from Intel. The graphics sucks, though |
| 22:29.10 | *** join/#debian xuser (n=jj@unaffiliated/xuser) |
| 22:30.07 | *** join/#debian muh2000 (n=muh2000@unaffiliated/muh2000) |
| 22:30.10 | Baloo | Is there a way to make kwin tile windows a-la MS Explorer? |
| 22:30.50 | *** join/#debian joele23 (n=Joel@71.237.81.140) |
| 22:31.38 | *** join/#debian vincenzo (n=vincenzo@host101-61-dynamic.53-82-r.retail.telecomitalia.it) |
| 22:34.01 | *** join/#debian faw (n=felipe@unaffiliated/faw) |
| 22:34.02 | ptux | antgel, then why if i search for jidgo or jidgo-file synaptic doesn't show it? |
| 22:35.26 | ptux | have i to add some repos? |
| 22:36.07 | antgel | ptux: because you broke it. http://packages.debian.org/jigdo you'd better paste your sources.list /msg dpkg paste |
| 22:37.31 | *** join/#debian obsethryl (n=obsethry@unaffiliated/obsethryl) |
| 22:38.41 | vincenzo | How do I fix aothorized_keys affected by the SSL-bug? |
| 22:38.55 | antgel | vincenzo: TOPIC! |
| 22:39.49 | vincenzo | antgel: I already read the wikipage... |
| 22:40.15 | *** join/#debian m4ggus (n=marcus@p5B035BCD.dip.t-dialin.net) |
| 22:40.27 | *** join/#debian Bravewolf (n=wolf@host-78-12-76-141.cust-adsl.tiscali.it) |
| 22:40.35 | themill | vincenzo: the wiki page tells you how to make new keys |
| 22:40.51 | *** join/#debian Dangermouse (n=danger@65.Red-88-4-52.staticIP.rima-tde.net) |
| 22:41.42 | vincenzo | themill: my problem is that I have keys (in authorized_keys) I don't remember where they come from... |
| 22:41.52 | Bravewolf | I can't install Debian Lenny using dm-crypt to crypt /home. See http://img152.imageshack.us/img152/2885/partizpb5.png http://img152.imageshack.us/img152/7045/errorco4.png |
| 22:42.10 | ptux | antgel, http://rafb.net/p/p68OiT61.html |
| 22:42.11 | pythonic | vincenzo: then just remove them |
| 22:42.29 | *** join/#debian Suprano (i=suprano@pD95675DB.dip.t-dialin.net) |
| 22:42.48 | themill | vincenzo: ahh... that's a problem for you then. BTW you shouldn't have keys in there that you don't know where they are from. There should also be a username@hostname at the end of each key |
| 22:42.54 | Bravewolf | Can you help me? |
| 22:43.53 | *** join/#debian zink_ (n=GOTA@pc-209-33-239-201.cm.vtr.net) |
| 22:44.01 | vincenzo | themill: pythonic: my problem is that the tool I use to check the keys just gives me the key-fingerprint... |
| 22:44.31 | academy | antgel, sorry - I only just saw that you had replied. I can bind to an ip address, but I'd rather bind to an interface. |
| 22:44.33 | Daviey | vincenzo: dowkd.pl? |
| 22:45.49 | *** join/#debian sword (n=sword@c-98-222-60-229.hsd1.il.comcast.net) |
| 22:46.48 | *** join/#debian m4ggus_ (n=marcus@p5B035BCD.dip.t-dialin.net) |
| 22:46.53 | *** join/#debian m4ggus (n=marcus@p5B035BCD.dip.t-dialin.net) |
| 22:47.20 | *** join/#debian Fah (i=cynic@paranoia.neverlight.com) |
| 22:47.21 | hramrach | jberg: xorg driver is the thing in X server that programs the graphics card and is often buggy ;-) And it's good to check graphics cooler, those tend to be weak |
| 22:48.17 | hramrach | anybody knows how to make a Release file for an apt repository? |
| 22:48.31 | hramrach | Apt ignores mine |
| 22:48.45 | vincenzo | Daviey: did not try that one... running it just now... |
| 22:48.47 | ptux | antgel, did u read it? http://rafb.net/p/p68OiT61.html |
| 22:48.49 | hramrach | It says Ign while updating |
| 22:48.57 | *** join/#debian oshiii-_^ (n=oshiii@unaffiliated/oshiii/x-3278) |
| 22:50.14 | Fah | if the key checker for weak ssh keys doesn't print out 'weak key' then it's probably ok? |
| 22:50.30 | themill | hardnrg: try this http://www.debian-administration.org/articles/286 |
| 22:50.44 | themill | Fah: possibly.... but false-negatives are possible too |
| 22:51.04 | *** join/#debian spx2 (n=spx2@89.37.70.170) |
| 22:51.07 | Fah | so what's the right way to regenerate ssh keys? since there's no way to really know |
| 22:51.36 | themill | Fah: http://wiki.debian.org/SSLkeys |
| 22:52.00 | *** mode/#debian [+l 838] by debhelper |
| 22:52.01 | Fah | thanks, i'll just regenerate everything |
| 22:52.07 | *** join/#debian ShkodRaNi (i=InF-ScR@77.242.22.238) |
| 22:52.19 | *** join/#debian thechef (n=testi@217-162-41-17.dclient.hispeed.ch) |
| 22:52.44 | *** join/#debian pior (n=pior@206.53.52.109) |
| 22:52.49 | *** part/#debian kshah (n=kunalash@cpe-68-173-252-199.nyc.res.rr.com) |
| 22:54.03 | *** join/#debian abrotman (n=abrotman@c-71-230-50-249.hsd1.pa.comcast.net) |
| 22:54.33 | *** join/#debian mr_flea (n=mr_flea@unaffiliated/mrflea/x-834750) |
| 22:54.53 | lousin | anyone knows any open-source pki implementation, not counting openca or openxpki? |
| 22:55.01 | *** join/#debian tobias (n=tobias@user-0c998nt.cable.mindspring.com) |
| 22:55.25 | vincenzo | Daviey: themill: pythonic: tnx for your help... I resolved my issue with dowkd.pl :-) |
| 22:55.46 | *** join/#debian RA3OR (i=angel@80.97.89.33) |
| 22:55.53 | *** part/#debian Tofast4u (n=Tofast4u@212.74.233.46) |
| 22:56.06 | *** join/#debian mom (n=YHWH@76.29.135.68) |
| 22:56.11 | dFence | heyyy.... got a 2.6.25.3 kernel here, trying to compile a 3rd party kernel module that just threw a compiler-error because it couldn't find "linux/config.h" ... has it been moved/replaced? |
| 22:56.55 | mr_flea | I'm having some weird problems with characters in my SSH terminal. I'm using PuTTY, and as far as I know, stock configurations. Some characters, notably what I think are dashes and double quotes, appear as a-circumflex (â). Does anyone have any ideas as to what might be messed up? |
| 22:57.08 | hramrach | hmm, it requires placing the Release into a different directory. |
| 22:57.20 | abrotman | mr_flea: in what context? |
| 22:58.02 | themill | mr_flea: use a better font in putty is the normal fix for that... |
| 22:58.27 | hramrach | mr_flea: putty does not detect your locale. what is your locale and what encoding does putty use? |
| 22:59.31 | mr_flea | EN-US, and I think it's using ISO-8859 (West Europe) |
| 23:00.11 | hramrach | mr_flea: is it en_US or en_US.UTF-8 (which tends to be the default)? |
| 23:00.25 | mr_flea | I had previously used the same PuTTY install with another SSH server and it seemed to work right... |
| 23:00.54 | hramrach | yes, the locale might be different on different servers |
| 23:01.07 | mr_flea | hramrach: No idea. I'll adjust PuTTY to use Unicode with this server and see if it has any effect. |
| 23:01.15 | *** join/#debian luigi (n=luigi@189.141.149.130) |
| 23:01.41 | hramrach | mr_flea: just run "locale" in the session once connected |
| 23:01.47 | mr_flea | Yeah, that fixed it. Thanks hramrach, themill. |
| 23:02.24 | *** join/#debian RUSSIAN_SXY_f (n=GRUP@LAubervilliers-153-51-15-228.w193-252.abo.wanadoo.fr) |
| 23:02.25 | *** join/#debian ShkodRaNi (i=InF-ScR@77.242.22.238) |
| 23:03.42 | *** join/#debian ehc (n=evan@wall.pacinfo.com) |
| 23:03.48 | themill | mr_flea: good stuff :) |
| 23:04.31 | *** join/#debian path_ (n=path@pc-168-207-46-190.cm.vtr.net) |
| 23:05.06 | itchi | What about users that missed dsa1571? Will there somethings automated to generate back all weak keys? |
| 23:05.43 | Nyle | itchi, hi |
| 23:05.49 | itchi | Nyle: Oi |
| 23:05.59 | Nyle | hows the little one man! almost a year now eh |
| 23:06.14 | itchi | Nyle: 11 months :-p |
| 23:06.17 | *** join/#debian versuchsanstalt (n=versuchs@p54856834.dip.t-dialin.net) |
| 23:06.17 | Nyle | nice nice |
| 23:06.25 | *** join/#debian ehc (n=evan@wall.pacinfo.com) |
| 23:06.30 | Nyle | man I can't make my friggin new brand spankin' flatpanel to work |
| 23:06.43 | Nyle | I can't its native resolution at 1680x1050 no matter what I do |
| 23:07.05 | Nyle | in fact, thats the only resolution in xorg.conf atm too, yet still it won't go past 1400x1050 |
| 23:07.08 | itchi | Nyle: Needs some modline? |
| 23:07.14 | Nyle | i dunno perhaps |
| 23:07.28 | Nyle | on windows it works fine at that resolution so the lcd is fine |
| 23:07.41 | Nyle | hang on |
| 23:07.48 | Nyle | im gonna upload my xorg thingy in a minute |
| 23:07.53 | Dangermouse | Nyle: I've had to specify the Vert/Horiz refresh to get the correct res before |
| 23:08.00 | Nyle | Dangermouse, thats NEXT on my list |
| 23:08.04 | Nyle | I was playing with edid info |
| 23:08.08 | abrotman | itchi: you'd have to ask the debian-security list .. it'd be nice |
| 23:08.17 | sdubois92 | does anyone know if you can install midori on etch? |
| 23:08.17 | *** join/#debian mtn (n=mtn@dpc6746233034.direcpc.com) |
| 23:08.17 | itchi | abrotman: Right |
| 23:08.20 | Dangermouse | Nyle: Maybe try #xorg too |
| 23:08.25 | Nyle | Dangermouse, thank you very much |
| 23:08.26 | abrotman | itchi: or check the archives .. might have already been covered |
| 23:08.41 | itchi | abrotman: Yeah, i will follow this crazy issue :-p |
| 23:09.02 | *** join/#debian MoDaX (n=nth@84.240.22.131) |
| 23:09.22 | itchi | I'm still stuck at generating the courier pem file. Bah, i don't know how to :-p |
| 23:09.43 | Nyle | man dude |
| 23:09.45 | abrotman | how did you do it the first time? |
| 23:09.47 | *** join/#debian itomato (n=itomato@vc1-66-1.adsl.indra.com) |
| 23:09.56 | Nyle | Dangermouse, is the fucking man, yo thanks for that reminder on the frequency specification |
| 23:10.09 | itchi | abrotman: Well, with the None tool :-) |
| 23:10.12 | *** join/#debian stittel_ (n=tittel@unaffiliated/stittel) |
| 23:10.18 | *** join/#debian Optic (n=dfraser@miso.capybara.org) |
| 23:10.20 | abrotman | the who ? |
| 23:10.21 | Dangermouse | Nyle: No worries. |
| 23:10.22 | Nyle | Dangermouse, all is well now, oh my god it looks beautiful |
| 23:10.27 | Dangermouse | Hehe |
| 23:10.31 | itchi | abrotman: The nada :-p |
| 23:10.40 | abrotman | oh ok .. that makes perfect sense |
| 23:10.46 | Nyle | omy god its so sharp and crisp |
| 23:10.51 | Nyle | hanns g kicks booty |
| 23:10.56 | stittel_ | Due to today's openssl vulerability, I think I should generate new OpenSSH host keys. What is the preferable way to do so? |
| 23:11.24 | pythonic | topic |
| 23:11.40 | itomato | rebooted from Fedora 9 and feels like he awoke from a nightmare |
| 23:11.42 | Nyle | hey guys, if you don't have a video card that processes hd natively, but a powerful cpu, 3.5ghz core 2, with hdmi cable, i would get HD content right? if i were to play an hddvd in my pc, I'd see it on my new hd monitor in hd |
| 23:11.44 | itchi | abrotman: I thought this was auto-generated, found it just at /etc/courier/imapd.pem |
| 23:11.49 | Nyle | or do I need an actual hd gfx card? |
| 23:11.49 | themill | !tell stittel_ about dsa1571 |
| 23:11.57 | abrotman | itchi: no it wasn't |
| 23:12.01 | *** mode/#debian [+l 832] by debhelper |
| 23:12.11 | itchi | abrotman: Then it was again late when i did that :-p |
| 23:12.13 | stittel_ | themill: Thanks. |
| 23:12.22 | Nyle | itomato, fedora is a headache |
| 23:12.25 | abrotman | itchi: i'm sure you can find it online like in the ssl docs or so |
| 23:12.39 | themill | itchi: then add it to the wiki page for all this stuff :) |
| 23:12.55 | itomato | Nyle - I thought things might have changed from Redhat 6 days - but no. It's worse in so many ways.. |
| 23:13.06 | itchi | abrotman: I will do this pem gen tomorrow, kinda late here in .be I need to work heh tomorrow |
| 23:13.12 | themill | itchi: actually for courier imap, you should look at the wiki page already |
| 23:13.13 | Nyle | any input on my query? |
| 23:13.16 | Nyle | anyone |
| 23:13.32 | themill | !tell Nyle about anyone |
| 23:13.33 | itchi | themill: I'm looking at the Generic PEM Generation right now |
| 23:13.34 | themill | hides |
| 23:13.38 | Nyle | i swear to god |
| 23:13.38 | Nyle | lol |
| 23:13.43 | Nyle | runs after themill |
| 23:14.01 | Dangermouse | itomato: Encrypted partition, automatic installation of a PDF reader, live cd crap...oo FC9 here I come! 8-) |
| 23:14.08 | *** join/#debian Hoxzer (n=dsadsad@dsl-hkigw7-fe1df900-39.dhcp.inet.fi) |
| 23:14.26 | Nyle | alright, I gotta fix 3 pcs by 9:00pm tonight |
| 23:14.30 | Nyle | better get to work |
| 23:14.52 | Nyle | this is nice, working when you want... |
| 23:15.05 | Nyle | Dangermouse, thanks again man you're a life saver |
| 23:15.14 | Nyle | I'd done forgotten about specifying the shizboo manually |
| 23:15.26 | Dangermouse | Nyle: no btw |
| 23:15.27 | itomato | the encrypted partition is nice - just a checkbox away, but MAN - all the SELinux probing, the use of Upstart, audit everywhere, and just another Gnome (or KDE4) desktop.. |
| 23:15.37 | hramrach | Nyle: you should get HDDVD play with decent cpu, it can't be worse than h264 HD |
| 23:15.53 | Nyle | hramrach, hmm, 3.5ghz core 2 can process hd I suppose |
| 23:15.56 | Nyle | powerful enough |
| 23:16.04 | vincenzo | Daviey: Is the SSL patch "approved" upstream? |
| 23:16.06 | Nyle | I just got blade 3 for $3.99 in HD dvd |
| 23:16.09 | Nyle | :D |
| 23:16.17 | Nyle | blade trinity and gonna check it out now |
| 23:16.20 | itomato | they can keep it. I'll have to run CentOS, as my new workplace deploys it - I thought I'd get the jump on things with FC9 |
| 23:16.21 | Dangermouse | Nyle: Expensive ;) |
| 23:16.22 | Nyle | while i fix pc |
| 23:16.25 | hramrach | Nyle: I can get 1280x1024 h264 play on a celreon but no hd |
| 23:16.40 | itomato | I do have a nice CentOS zone deployed in OpenSolaris :) |
| 23:16.42 | Nyle | hramrach, ahh hmm i dunno h264 so ... gonna look it up |
| 23:17.00 | Nyle | ahh compressed video format/container |
| 23:17.06 | Nyle | !h264 |
| 23:17.10 | Nyle | hmm |
| 23:17.25 | hramrach | Nyle: it's probably the most demending codec in popular use right now |
| 23:17.30 | *** part/#debian luigi (n=luigi@189.141.149.130) |
| 23:17.33 | Nyle | as in cpu cycles? |
| 23:17.36 | Dangermouse | Nyle: The white box on the google home page :p |
| 23:17.37 | spx2 | how do I glue a couple of pdfs together ? |
| 23:17.46 | Nyle | Dangermouse, come again? |
| 23:17.49 | hramrach | Nyle: yes, as in cpu cycles for decoding |
| 23:17.52 | Nyle | i see |
| 23:18.05 | Nyle | hramrach, if i get a radeon hd or a nvidia 8800 i would be ok? |
| 23:18.07 | itomato | spx2: you might have to run pdf2ps | pd2pdf |
| 23:18.17 | abrotman | spx2: pdftk |
| 23:18.17 | itomato | ^ps2pdf |
| 23:18.21 | Nyle | should I get one or im fine?I have x1900xt w/ DVI dual, but no hdmi |
| 23:18.29 | Nyle | though i was told hdmi == dvi (digital/hd) |
| 23:18.49 | Dangermouse | spx2: http://www.googobits.com/articles/1627-combining-pdfs-in-linux.html http://www.google.com/search?q=combine+pdfs+linux |
| 23:19.01 | hramrach | Nyle: I would suggest a good cpu as it is surely supported. the new cards may be a waste of money if that particular feature is not handled by the driver |
| 23:19.11 | Nyle | i see |
| 23:19.16 | Nyle | yeh catalyst/fglrx is a pos |
| 23:19.26 | Nyle | i bought my first ati last year, x1900xt |
| 23:19.41 | Nyle | im sick of ati, extremely hot running card, not overclockable, and works like SHIT in debian |
| 23:19.45 | Nyle | or linux in general |
| 23:19.54 | Dangermouse | Nyle: Haha beat me to it |
| 23:20.04 | Nyle | yeh im paying for my mistake everyday |
| 23:20.06 | spx2 | Nyle: I believe you,I'm having the same problems |
| 23:20.11 | Nyle | though the reason I bought it was only for Oblivion gameplay |
| 23:20.15 | Nyle | which it kicks ass at |
| 23:20.17 | spx2 | Nyle: and I can't get it working at it's potential ... |
| 23:20.18 | hramrach | Nyle: this might get better over time. The new HD Radeons have expreimental drivers |
| 23:20.25 | Nyle | experimental? |
| 23:20.29 | Nyle | like the avivo opensource? |
| 23:20.29 | Dangermouse | bleh sell it and get an nvidia |
| 23:20.33 | Optic | phew my CA was generated in 2005 |
| 23:20.46 | peterS | well, the HD radeon series has 2 drivers. one is experimental, the other is the regular ati driver and it's not experimental |
| 23:20.48 | hramrach | Nyle: radeonhd or somesuch |
| 23:20.58 | Nyle | peterS, 3 drivers actually |
| 23:21.05 | peterS | I'm not counting fglrx |
| 23:21.10 | Nyle | i figured |
| 23:21.16 | Optic | well, i'll have to figure out how this huge debian fuckup affects us at work |
| 23:21.19 | Optic | haha |
| 23:21.22 | vincenzo | Does anyone know how much does it take to try 2^18 keys? |
| 23:21.23 | peterS | the chief difference is that radeonhd uses the card bios to do stuff, the ati driver tries to avoid this when possible |
| 23:21.28 | *** part/#debian lil_cain (n=lil_cain@minerva.redbrick.dcu.ie) |
| 23:21.40 | *** part/#debian Optic (n=dfraser@miso.capybara.org) |
| 23:21.47 | Nyle | well the only drivers that work on my card at the fglrx/catalyst and/or Vesa |
| 23:22.01 | *** mode/#debian [+l 824] by debhelper |
| 23:22.02 | Nyle | nothing else, not even the experimental, at leat I was unable to make it work |
| 23:22.15 | Nyle | plus it only has basic 2d, not evne 3d accel yet |
| 23:22.30 | *** join/#debian faux` (n=user@1-1-4-21a.gkp.gbg.bostream.se) |
| 23:22.35 | *** join/#debian Agiofws (n=agiofws@athedsl-231360.home.otenet.gr) |
| 23:22.46 | *** join/#debian Sir_Sid (n=sid@adsl-69-209-218-174.dsl.chcgil.ameritech.net) |
| 23:22.49 | itomato | It's sad that a built-in Intel chip outperforms a hotshit ATI/AMD PCIE card.. |
| 23:22.50 | Nyle | peterS, btw, I got my 1680x1050 native on debian (i had to manually specify freq. ranges) |
| 23:22.56 | Nyle | peterS, dude.. it is SWEET! |
| 23:23.13 | Nyle | peterS, i highly reccomend you ditch the crt ;) (at home) |
| 23:23.13 | *** join/#debian RainbowW (n=rnbwpnt@adsl-76-233-98-121.dsl.rcsntx.sbcglobal.net) |
| 23:23.18 | hramrach | yes, radeonhd is only for the hd cards. Support for the older cards newer than Radeon 9250 is problematic |
| 23:23.20 | peterS | it's a thought |
| 23:23.48 | Dangermouse | Nyle: My dad accidently too a drill to my monitor :( |
| 23:23.51 | peterS | what I need is the ability to POST an nvidia NV4x card. the nv driver can't do it. |
| 23:23.54 | Nyle | peterS, which resolution do you prefer? |
| 23:23.55 | Dangermouse | Huge 3 inch scratch |
| 23:23.56 | *** join/#debian felix_da_catz (n=felix_da@c-76-31-32-109.hsd1.tx.comcast.net) |
| 23:24.08 | peterS | Nyle: 144x72 |
| 23:24.14 | Nyle | heh |
| 23:24.14 | *** join/#debian dokma (n=chatzill@78-0-185-4.adsl.net.t-com.hr) |
| 23:24.17 | Nyle | old school |
| 23:24.22 | peterS | yes, that's text mode |
| 23:24.25 | dokma | hi guys |
| 23:24.26 | Dangermouse | Nobody should need more than 144x72 |
| 23:24.28 | dokma | I installed wine from cvs |
| 23:24.34 | dokma | any way to undo make install ? |
| 23:24.44 | itomato | make uninstall |
| 23:24.50 | dokma | that simple |
| 23:24.52 | Nyle | yes |
| 23:24.53 | itomato | if its in the makefile |
| 23:24.53 | dokma | darn |
| 23:24.54 | hramrach | dokma: some better managed software has make uninstall ;-) |
| 23:24.57 | Dangermouse | dokma: If theres a make target for it |
| 23:25.02 | dokma | ok |
| 23:25.06 | Dangermouse | failing that, 'rm' |
| 23:25.06 | Nyle | wine should and if it doesn't, then it really should. |
| 23:25.08 | streuner | dokman: or rm /usr/local/<some file> |
| 23:25.21 | dokma | theres a target :) |
| 23:25.31 | dokma | make is churning at it |
| 23:25.34 | Nyle | rm /dev/brain |
| 23:25.34 | abrotman | there are nightly debs on the wine site |
| 23:25.37 | dokma | cool |
| 23:25.37 | *** join/#debian Malf (n=Malf@216-164-58-125.c3-0.129-ubr2.lnh-129.md.cable.rcn.com) |
| 23:25.38 | hramrach | dokma: still the default prefix should be /usr/local so you can just rm-rf it |
| 23:25.43 | Dangermouse | Nyle: No such file :p |
| 23:25.48 | abrotman | hramrach: uhm .. BAD IDEA |
| 23:25.57 | dokma | hehe |
| 23:25.58 | Nyle | Dangermouse, your parents never created the device node for you ;) |
| 23:26.00 | Nyle | oooh burn! |
| 23:26.03 | Nyle | hehe j/k |
| 23:26.05 | dokma | rm -rf /usr/local |
| 23:26.06 | dokma | roger that |
| 23:26.13 | hramrach | well, as long as there's nothing else |
| 23:26.13 | streuner | nah |
| 23:26.17 | abrotman | dokma: DO NOT DO THAT |
| 23:26.18 | streuner | nobody said this |
| 23:26.20 | Dangermouse | Nyle: Ye they 'FAIL' at sys admin |
| 23:26.22 | dokma | hehe |
| 23:26.25 | dokma | don't worry |
| 23:26.35 | vincenzo | Does this math make sense? 2^18/(60*60*N) == 72.8/N... that means that if you can try 72 keys per second(N=72), it takes 1 hour to try 2^18 keys |
| 23:26.40 | streuner | We aren't worry, we only recommend... |
| 23:27.00 | Nyle | vincenzo, relate this to debian support please. |
| 23:27.09 | Nyle | if not, try #math |
| 23:27.18 | peterS | Nyle: he's asking about the debian openssl fiasco |
| 23:27.25 | peterS | it is related to debian |
| 23:27.28 | Nyle | i see |
| 23:27.33 | abrotman | more so than your habits |
| 23:27.33 | themill | Nyle: this is a question that was asked on http://wiki.debian.org/SSLkeys and also on debian-security |
| 23:27.36 | Nyle | my bad in that case |
| 23:27.42 | Nyle | abrotman, dude stfu about me would ya |
| 23:27.46 | Eulex | is there any good command line program in debian that will convert a text file into a pdf? |
| 23:27.47 | vincenzo | Nyle: np :-) |
| 23:27.53 | abrotman | stfu about yourself |
| 23:27.55 | *** join/#debian tnks (n=tnks@66-90-245-150.dyn.grandenetworks.net) |
| 23:27.59 | Dangermouse | Oh how I missed IRC |
| 23:28.02 | itchi | abrotman: Well, remove file /etc/courier/imapd.pem; dpkg-reconfigure courier; start mutt; accept the new cert and it's ok |
| 23:28.05 | milia | akuei thn urania musikh tu zalman anemisthra tu |
| 23:28.08 | Nyle | prick. die already. |
| 23:28.17 | peterS | Eulex: a2ps will convert to postscript, pstopdf will convert to pdf ... some pipeline involving those 2 tools might do what you want |
| 23:28.17 | Dangermouse | haha I was waiting for another language |
| 23:28.17 | streuner | enough |
| 23:28.18 | abrotman | Eulex: there are a few apps you could easily convert to ps .. then use ps2pdf IIRC |
| 23:28.28 | abrotman | oh poor guy .. don't say it here if you don't want it repeated |
| 23:28.40 | tnks | I have a feeling my nvidiafb is causing a problem. Is there a way to disable it? |
| 23:28.52 | streuner | Nyle, abrotman: we have enough problems here... |
| 23:28.52 | *** join/#debian grendal_prime (n=shawng@71-154-139-61.ded.pacbell.net) |
| 23:28.54 | tnks | say from the kernel comandline? |
| 23:29.07 | *** join/#debian jflm (n=jflm@d83-180-202-11.cust.tele2.es) |
| 23:29.07 | Nyle | streuner, my apologies. |
| 23:29.10 | Eulex | peterS, thank you |
| 23:29.15 | hramrach | tnks: there certainly is ;-) |
| 23:29.15 | Maliuta | kernel commandline? |
| 23:29.20 | Eulex | abrotman, yeah, if I can get to ps I can get to pdf |
| 23:29.23 | Maliuta | someone is on crack |
| 23:29.32 | grendal_prime | im staring at a new dell precisioni ma300. Any advice on how to get debian up and running on it? anyone out there using one of these ? |
| 23:29.34 | abrotman | Eulex: i think peterS just gave you the whole chain |
| 23:29.36 | Maliuta | the bootloader might have a cli, the kernel doesn't |
| 23:29.42 | *** join/#debian dutchfish (n=wil@wc-35.r-195-35-167.atwork.nl) |
| 23:29.43 | *** join/#debian tecky (n=tecky@cpe-74-67-30-26.nycap.res.rr.com) |
| 23:29.59 | peterS | abrotman: well, yeah, but you have to know the right options to pass a2ps to get a format somewhat like what you're looking for |
| 23:30.06 | itchi | I have forget my wiki password. Someone a trick to generate that back? OR want to add these info about generating back the pem file for courier ^^^ ? |
| 23:30.13 | hramrach | tnks: it's somewhere in the /usr/src/linux/Documentation/fb I would guess .. |
| 23:30.22 | *** join/#debian s0lid (n=s0lid@210.213.199.2) |
| 23:30.25 | abrotman | peterS: open in $GUI_EDITOR .. print to PS .. pstopdf :) |
| 23:30.30 | tnks | okay, command-line my term picked up from the naming of /proc/cmdline |
| 23:30.32 | Nyle | peterS, so what is this openssl fiasco |
| 23:30.37 | Nyle | whats going on |
| 23:30.39 | itomato | Eulex: lp will generate ps |
| 23:30.39 | rahul | tnks: I think you can do video=none or something |
| 23:30.41 | abrotman | Nyle: /topic |
| 23:30.46 | peterS | !topicsmite Nyle |
| 23:30.46 | dpkg | And the wrath of /TOPIC descended with terrible fury upon Nyle. And all the people marveled, saying, Behold, we too should read the /TOPIC, lest we be stricken. And all the people read the /TOPIC, and went away edified. |
| 23:30.50 | Nyle | ah |
| 23:30.53 | rahul | heh |
| 23:30.54 | Nyle | i haven't rejoined in a while |
| 23:30.56 | tnks | but I think "command line" isn't the worst name. |
| 23:31.03 | Nyle | rahul, gunda unda |
| 23:31.04 | rahul | tnks: it is the kernel command line |
| 23:31.07 | Dangermouse | Nyle: You can topic /topic still :p http://wiki.debian.org/SSLkeys |
| 23:31.11 | Nyle | :) |
| 23:31.14 | Nyle | I am aware |
| 23:31.21 | Nyle | I just hadn't noticed cuz i hadn't rejoined in a while |
| 23:31.27 | rahul | the topic should be there, you unda ka baap |
| 23:31.35 | Nyle | oye ... |
| 23:31.48 | *** join/#debian andres_f (n=andres@e178254128.adsl.alicedsl.de) |
| 23:31.53 | Dangermouse | e-n-g-l-i-s-h |
| 23:31.56 | milia | sorry for what I 'amed' before. Wrong server :X |
| 23:31.57 | rahul | hmm, I better get to this lisp meeting |
| 23:31.57 | Nyle | rahul, irssi displays the topic in oneline |
| 23:32.00 | tnks | Maliuta: I'm no longer on crack. |
| 23:32.01 | *** mode/#debian [+l 835] by debhelper |
| 23:32.05 | itchi | Oh cool, i got my flashback, can login on the wiki |
| 23:32.07 | rahul | Nyle: yeah, this is the first thing :) |
| 23:32.15 | *** join/#debian Sir_Sidd (n=sid@adsl-69-209-218-174.dsl.chcgil.ameritech.net) |
| 23:32.17 | Nyle | rahul, yo phone |
| 23:32.19 | Nyle | pick up |
| 23:32.19 | *** part/#debian andres_f (n=andres@e178254128.adsl.alicedsl.de) |
| 23:32.27 | rahul | bah. I gotta run in a minute |
| 23:32.34 | Nyle | stfu and pickup |
| 23:32.36 | Nyle | *out* |
| 23:32.39 | abrotman | MSG HIM |
| 23:32.44 | tnks | rahul: okay, I don't have the linux docs on this computer. I'll try video=none and if that doesn't work, I'll find the linux docs. |
| 23:32.47 | Nyle | die. |
| 23:32.48 | tnks | thanks. |
| 23:32.55 | Dangermouse | lol |
| 23:33.45 | themill | Maliuta: please try to be more positive and criticise people less when they are asking for help. Oh, and make sure you're right when you dump on someone like that otherwise you look really stupid. |
| 23:33.47 | Dangermouse | It doesnt matter how old the IRC protocol gets, the (mental) age of the users stays constant |
| 23:34.10 | streuner | amen |
| 23:35.17 | antgel | this is nothing compared to ye olden days |
| 23:35.27 | *** join/#debian sM10 (n=secure_s@ip68-0-210-147.ri.ri.cox.net) |
| 23:35.41 | *** part/#debian mr_flea (n=mr_flea@unaffiliated/mrflea/x-834750) |
| 23:35.59 | *** part/#debian sM10 (n=secure_s@ip68-0-210-147.ri.ri.cox.net) |
| 23:36.00 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 23:36.13 | Dangermouse | antgel: How old? Debian old? or smoke signals? :p |
| 23:36.45 | antgel | Dangermouse: i'm talking a mere 3/4 years ago |
| 23:36.55 | Dangermouse | antgel: Ah..ye I used IRC alot back then |
| 23:37.13 | antgel | iirc there was some complaint to the Powers That Be, and #d was never the same again |
| 23:37.18 | antgel | how i used to chuckle |
| 23:38.10 | itomato | more channels to dilute the energy |
| 23:38.30 | antgel | s/energy/flaming/ |
| 23:38.42 | *** join/#debian arlinja (n=arm9cl@athedsl-4428718.home.otenet.gr) |
| 23:38.43 | itomato | agreed |
| 23:39.14 | itomato | there's good and bad - lots can come out of a *good* session.. |
| 23:39.29 | pinto3 | there's some good channels where the stench of anus isn't the main topic of conversation |
| 23:39.44 | itomato | that good energy is not in the #opensolaris channel lately - it's a riot |
| 23:39.45 | pinto3 | i usually go to those :p |
| 23:40.03 | antgel | itomato: do tell |
| 23:40.14 | *** join/#debian gravity (n=david@dsl092-079-075.bos1.dsl.speakeasy.net) |
| 23:40.22 | itomato | they are all uptight about the influx of new people after the Indiana 2008.05 release.. |
| 23:40.35 | Dangermouse | the irc protocol can transmit energy now_ |
| 23:40.36 | Dangermouse | ? |
| 23:40.39 | itomato | people interfering with their precious proprietary UNIX |
| 23:40.40 | antgel | newbie scum? |
| 23:40.45 | itomato | yep. |
| 23:40.50 | itomato | I love it! |
| 23:41.02 | grendal_prime | im going with testing...ill let ya-all know how it turns out in the end |
| 23:41.21 | antgel | itomato: i joined :) |
| 23:41.29 | pinto3 | you'll be alright, i used testing as my first distro back in 01-02 |
| 23:41.41 | pinto3 | or unstable that might have been |
| 23:41.42 | antgel | i know nothing about open solaris, so i should fit in |
| 23:41.47 | itomato | there's good stuff like the suggestion to 'cat /dev/random > /dev/audio' |
| 23:42.01 | *** mode/#debian [+l 827] by debhelper |
| 23:42.05 | itomato | that's productive, positive discussion :) |
| 23:42.32 | itomato | ask a question about how to make "Solaris" more like Ubuntu :) |
| 23:42.39 | tecky | itomato: whats not fun about doing that ... its honestly hours upon hours of entertainment |
| 23:43.21 | itomato | tecky: I'm serious! That's good stuff.. Discussion about ZFS, cpu scalability vs. linux per core.. etc. It's not all bad |
| 23:43.22 | hramrach | I cant /dev/urandom to /dev/dsp to test sound once in a while .. when I have no more meaningful sound file around ;-) |
| 23:43.27 | hramrach | *cat |
| 23:43.42 | stiv2k | hey if you have a printer with a ethernet port where you can plug it straight into the network, can you just go straight and print to it w/o installing drivers? Or would you need to have some sort of machine handle it |
| 23:44.11 | itomato | print straight to it - just don't expect to exploit all the features (the traditional definition) |
| 23:44.14 | tecky | stiv you should be able to print to it w/o any issues |
| 23:44.14 | hramrach | stiv2k: it should speak PS then unless it's crap |
| 23:44.39 | antgel | it's funny actually, since i discovered debian, i lost interest in all other OSs, not just other linux distros |
| 23:44.49 | *** join/#debian zythmer (n=zythmer@97.89.162.47) |
| 23:44.58 | hramrach | stiv2k: older ones ususally over lpr, newer over cups |
| 23:45.08 | tecky | antgel: hrm ... i went slackware > freebsd > openbsd > slackware > debian > debian > debian |
| 23:45.12 | itomato | yeah, I know what you mean. I used to make time for shit like Syllable, AROS, and ReactOS - but not now.. |
| 23:45.14 | stiv2k | hramrach: it does speak postscript |
| 23:45.21 | antgel | if i ever work on a project where i can see the point, i might evaluate some other OSs again |
| 23:45.24 | stiv2k | hramrach: i dont know how to print to it from my windows machine... |
| 23:45.48 | hramrach | stiv2k: on windows install the drivers ... |
| 23:45.48 | stiv2k | hramrach: normally do you need to install drivers? (regardless of o/s) |
| 23:45.59 | stiv2k | hramrach: ok ill just make my server handle it it has cupsys |
| 23:46.14 | itomato | this video made me tingly for Solaris: http://blogs.sun.com/constantin/entry/csi_munich_how_to_save |
| 23:46.27 | tecky | stiv: depends on the printer .. some newer (cheaper) printers require the driver for hardware connectivity (i believe its in the color hp laserjets) |
| 23:46.29 | hramrach | stiv2k: normally it just works unless you want it to punch holes or make origami |
| 23:46.31 | *** join/#debian simbioz (n=shu4l0@pc-123-172-83-200.cm.vtr.net) |
| 23:46.47 | hramrach | or something like that |
| 23:46.49 | stiv2k | hramrach: my windows machine doesnt see it, but cupsys does |
| 23:47.10 | hramrach | stiv2k: then tell your windows machine where it is .. |
| 23:47.15 | stiv2k | hramrach: I tried |
| 23:47.40 | hramrach | stiv2k: does it do cups or lpr? |
| 23:47.45 | *** join/#debian zeeeee (n=zeeeee@ASHDOWN-FORTY-TWO.MIT.EDU) |
| 23:47.49 | tecky | what i need to do is spend some time and work w/ someone about converting my main vista desktop over to linux |
| 23:47.57 | stiv2k | hramrach: it supports ipp:// |
| 23:48.08 | hramrach | stiv2k: I think you can print over the web interface from Windows at least |
| 23:48.14 | tecky | i play WoW on it and do development... and it bothers me that I use windows ... but dont want to take the performance hit in WoW |
| 23:48.16 | stiv2k | hramrach: web interface? |
| 23:48.43 | hramrach | browse http://yourprinter:631 or somesuch |
| 23:48.52 | zeeeee | hi, about the openssl vulnerability: i've regenerated my priv/pub keys, but is it important to revoke the old pub key from all sites' authorized_keys files? |
| 23:48.54 | *** join/#debian OmiKrOn (n=fraktal@unaffiliated/omikron) |
| 23:48.56 | OmiKrOn | hi |
| 23:49.00 | hramrach | or even just http://yourprinter |
| 23:49.02 | zinx | tecky: Windows for Windows games. bug Blizzard if you want a Linux client, but don't expect them to car. |
| 23:49.04 | zinx | care :x |
| 23:49.15 | dondelelcaro | zeeeee: you should, yes. |
| 23:49.23 | tecky | zinx : nod thats why i haven't moved to linux for a main workstation |
| 23:49.28 | OmiKrOn | is there any security issue if I change perms /tmp from 755 to 1777 ? |
| 23:49.38 | dondelelcaro | OmiKrOn: yes. |
| 23:49.41 | tecky | begging blizzard to do something is like pissing on a wall and not expecting any spashback |
| 23:49.47 | tecky | splashback |
| 23:49.53 | OmiKrOn | dondelelcaro: any links for description? |
| 23:49.59 | stiv2k | oh shit! |
| 23:50.11 | dondelelcaro | OmiKrOn: /tmp should already be 1777. |
| 23:50.14 | *** join/#debian jerojasro (n=jerojasr@190.158.116.5) |
| 23:50.27 | dondelelcaro | OmiKrOn: if something has made it 0755, it's totally and absolutely wrong. |
| 23:50.38 | hramrach | stiv2k: Windows can theoretically do ipp by its spooler but I have no idea how |
| 23:50.50 | *** join/#debian r3c4ll (i=alimoren@190.198.163.247) |
| 23:51.02 | tecky | you use the 'add printer wizard' |
| 23:51.08 | tecky | and add a http printer |
| 23:51.13 | OmiKrOn | dondelelcaro: yeah amazon EC made it bleh |
| 23:51.30 | stiv2k | hramrach: it also supports http |
| 23:51.36 | stiv2k | tecky: it doesnt see the printer though! |
| 23:51.41 | tecky | hmm |
| 23:51.42 | stiv2k | it says unable to connect |
| 23:51.43 | OmiKrOn | so.. changing back to 1777 shouldn`t be a problem right? |
| 23:51.45 | dondelelcaro | OmiKrOn: yeah, then go ahead and change it, and indicate to amazon that whatever changed the permissions that way is pretty much broken. |
| 23:52.00 | tecky | can you add it through the driver possibly ? like some kinda ' find my printer ' |
| 23:52.05 | OmiKrOn | i did that for 2 months now .. no response |
| 23:52.11 | OmiKrOn | you try it |
| 23:52.11 | OmiKrOn | :) |
| 23:52.13 | tecky | or anything like ' my printer is a internet printer ' |
| 23:52.24 | tecky | i know hp had something like that in there newer laser jets |
| 23:52.30 | dondelelcaro | tecky: if your printer is a real network printer, cups generally will already find it automatically. |
| 23:52.48 | hramrach | yes but windows does not .. |
| 23:52.50 | tecky | dondelelcaro: ya ... he's asking about how the printer works via http connectivity |
| 23:52.59 | dondelelcaro | well, windows isn't particularly on topic here |
| 23:53.06 | hramrach | sure |
| 23:53.11 | *** join/#debian lumgwada (n=lumgwada@unaffiliated/lumgwada) |
| 23:53.24 | dondelelcaro | and the http stuff is just a method of determining the location of the printer; it almost certainly acatually spools using ipp |
| 23:53.46 | OmiKrOn | dondelelcaro: thanks mate |
| 23:53.53 | dondelelcaro | (or possibly by using some meta information to spool with a specific post request... but that's probably really ugly) |
| 23:55.31 | *** join/#debian peter_12 (n=peter_12@S010600119506b129.gv.shawcable.net) |
| 23:55.56 | Ryan52 | Whats the status of openssl in lenny? On an up to date lenny system I am still generating weak keys. |
| 23:56.41 | *** join/#debian benje (n=benje@cereli.org) |
| 23:56.58 | pythonic | lenny doesn't necessarily get timely security updates |
| 23:57.09 | pythonic | sometimes etch doesn't either :-p |
| 23:57.13 | Ryan52 | but the email said it was fixed in lenny. |
| 23:57.18 | peterS | Ryan52: lenny has 0.9.8g-10. is that what you have? |
| 23:57.24 | Tramp | Ryan52: see the advisory: For the unstable distribution (sid) and the testing distribution (lenny), these problems have been fixed in version 0.9.8g-9 |
| 23:57.25 | Ryan52 | yup |
| 23:57.28 | Malf | Ryan52: yeah I had to grab the package manually myself |
| 23:57.31 | *** join/#debian adama_ (n=adama@207.189.243.178) |
| 23:57.39 | *** join/#debian stiv2k (n=steve@30.228.189.72.cfl.res.rr.com) |
| 23:57.56 | Ryan52 | I have 0.9.8g-10. they have been fixed in 0.9.8g-9. but I still generate bad keys. |
| 23:57.59 | *** join/#debian benje (n=benje@cereli.org) |
| 23:58.02 | *** join/#debian balibalo (n=chatzill@116samana78.codetel.net.do) |
| 23:58.32 | Ryan52 | well, my etch system worked so I guess Ill just generate ssh keys on it :P |
| 23:58.36 | peterS | Ryan52: it is the libssl0.9.8 package that matters, not openssl, make sure you've got that |
| 23:58.44 | Ryan52 | ah. |
| 23:58.53 | peterS | (should both be at 0.9.8g-10 though) |
| 23:58.53 | zeeeee | i'm having trouble recalling where i've copied my pub key to (i'm pretty liberal about putting it anywhere)... any tips on how to proceed? |
| 23:59.09 | Rienzilla | create a new keypair :) |
| 23:59.22 | Rienzilla | your pubkey will be useless if there's no private key on any system |
| 23:59.31 | Rienzilla | (corresponding) |
| 23:59.40 | peterS | Rienzilla: not true. the whole point here is that someone could reconstruct the private key |
| 23:59.55 | peterS | zeeeee: check ~/.ssh/known_hosts on the machine with the private key. see where you've logged in in the past. |
