| 00:00.01 | Rienzilla | yes, but you should revoke access with that specific key to all machines |
| 00:00.13 | balibalo | and clonezilla ? |
| 00:00.15 | peterS | Rienzilla: you should reread what he said then. he is asking about that. |
| 00:00.41 | Rienzilla | uhm, no? |
| 00:00.42 | *** join/#debian RaceCondition (n=RaceCond@80-235-42-57-dsl.mus.estpak.ee) |
| 00:00.52 | balibalo | who use clonezilla ? |
| 00:00.53 | *** join/#debian dvs (n=cwv@cwv.teksavvy.com) |
| 00:00.59 | *** join/#debian m4ggus (n=marcus@p5B0352A6.dip.t-dialin.net) |
| 00:01.24 | peterS | Rienzilla: uhm, yes. he knows he has to revoke the key, he just needs to figure out what machines he has put it on |
| 00:01.37 | peterS | hence ~/.ssh/known_hosts, unless you are hashing that |
| 00:01.46 | *** join/#debian ustunozgur (n=ustun@88.232.26.150) |
| 00:01.47 | balibalo | nooooooooooon, rien de rien |
| 00:01.57 | *** join/#debian itomato_ (n=itomato@vc1-66-1.adsl.indra.com) |
| 00:01.59 | balibalo | je ne |
| 00:02.10 | balibalo | regrette rien |
| 00:02.13 | peterS | ...sais rien? |
| 00:02.26 | Rienzilla | h wait |
| 00:02.29 | Rienzilla | sorry, I have a brainfart |
| 00:02.37 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 00:02.38 | Rienzilla | you are right peterS, sorry. |
| 00:02.41 | *** join/#debian okan (n=okan@88.229.226.132) |
| 00:02.54 | balibalo | ni le bien |
| 00:02.54 | dvs | je regrette etude francais |
| 00:03.06 | *** join/#debian Lagbolt (n=jm@dhcp-68-244.physics.purdue.edu) |
| 00:03.18 | *** join/#debian vorpal__ (n=rhunter@ip24-255-31-98.tc.ph.cox.net) |
| 00:03.34 | peterS | dvs: clearly your études didn't get too far (: |
| 00:03.41 | balibalo | ni le maaaaaaaaaaaaaaaaaaaaaaaaaaaal |
| 00:03.43 | balibalo | what's dvs ? yes regretter it s a french verb of the first groupe |
| 00:04.05 | *** join/#debian dutchfish (n=wil@wc-35.r-195-35-167.atwork.nl) |
| 00:04.15 | dvs | see? |
| 00:05.20 | *** join/#debian satD_ (n=Yzco@247.Red-88-14-43.dynamicIP.rima-tde.net) |
| 00:05.21 | balibalo | it s a french song of the very famous Edith Piaf |
| 00:05.39 | dvs | qui? |
| 00:05.55 | peterS | -> #debian-fr thanks |
| 00:05.57 | Maliuta | que? |
| 00:06.21 | Rienzilla | ...so any machine where a weak key is in ~/.ssh/authorized_keys of some user is now exploitable? |
| 00:06.44 | Eulex | potentially. |
| 00:06.50 | balibalo | quoi ? |
| 00:06.51 | peterS | Rienzilla: yes, if the attacker has the ability to try thousands of connections |
| 00:06.58 | Rienzilla | ok |
| 00:07.03 | peterS | and knows a likely username to try |
| 00:07.04 | Rienzilla | that's even worse than I thought |
| 00:07.05 | dvs | balibalo: alright, it's officially tired now. |
| 00:07.30 | peterS | Rienzilla: note, sshd disconnects after about 5 unauthorized keys, so they have to reconnect a lot of times. but that can probably be done pretty fast. |
| 00:07.49 | *** join/#debian heroxbd (n=user@2001:da8:200:900e:0:5efe:3b42:b96e) |
| 00:08.06 | Rienzilla | well indeed.. you can do some tricks with firewalling, but none of those solutions is really safe |
| 00:08.17 | *** join/#debian Holborn (n=holborn@unaffiliated/holborn) |
| 00:08.20 | Eulex | also, something like fail2ban would protect against it, right? |
| 00:08.22 | *** join/#debian semprix (n=semprix@125.212.91.22) |
| 00:08.26 | balibalo | dvs: are you sure ? |
| 00:08.41 | dvs | balibalo: si. ;-) |
| 00:08.44 | peterS | at least, if I understand the attack vector properly, given a public key somebody can _relatively_ trivially obtain the corresponding private key |
| 00:09.02 | peterS | so if the attacker has some way of seeing your .pub file, it is game over in one try |
| 00:09.06 | Rienzilla | I believe i READ THERE ARE LIKE 300K POSSIBILITIES |
| 00:09.14 | Rienzilla | -caps |
| 00:09.17 | *** join/#debian vorpal (n=rhunter@pdpc/supporter/student/vorpal) |
| 00:09.25 | Rienzilla | so that's nothing |
| 00:09.28 | Eulex | 262144 |
| 00:09.35 | Eulex | I believe it was |
| 00:09.37 | Rienzilla | (and a pubkey is not supposed to be secret, really) |
| 00:09.41 | peterS | right |
| 00:09.41 | Rienzilla | yeah something like that |
| 00:09.42 | rawb | this is going to cost companies thousands upon thousands |
| 00:09.46 | Rienzilla | 250k, which is nothing |
| 00:09.48 | nevyn | url? |
| 00:10.04 | *** join/#debian vorpal (n=rhunter@pdpc/supporter/student/vorpal) |
| 00:10.16 | *** join/#debian elvis (n=elvisenr@75-179-246-201.adsl.terra.cl) |
| 00:10.23 | *** join/#debian vorpal_ (n=rhunter@ip24-255-31-98.tc.ph.cox.net) |
| 00:10.27 | peterS | !topicsmite nevyn |
| 00:10.27 | dpkg | And the wrath of /TOPIC descended with terrible fury upon nevyn. And all the people marveled, saying, Behold, we too should read the /TOPIC, lest we be stricken. And all the people read the /TOPIC, and went away edified. |
| 00:10.35 | *** join/#debian sier (n=sier@unaffiliated/sier) |
| 00:10.37 | *** part/#debian vorpal_ (n=rhunter@ip24-255-31-98.tc.ph.cox.net) |
| 00:11.00 | abrotman | i think he meant the 250k possiblity thing |
| 00:11.47 | *** part/#debian elvis (n=elvisenr@75-179-246-201.adsl.terra.cl) |
| 00:11.54 | *** join/#debian hugyup (n=unk@124.80.72.161) |
| 00:12.02 | *** join/#debian vorpal_ (n=rhunter@ip24-255-31-98.tc.ph.cox.net) |
| 00:12.29 | *** join/#debian omnil (n=omnil_@unaffiliated/chandor) |
| 00:14.51 | Tramp | Is there some technical analysis which confirms this 250k? Or is it just because of the hashes in this utility? |
| 00:15.17 | abrotman | read it on the internet .. must be true |
| 00:15.36 | *** join/#debian xpoint (n=xpoint@dlink.junc.org) |
| 00:16.25 | Tramp | Just generated 60k files with openssl rand, 30k were unique. Now if I'd remember my math, I could test the hypothesis, that there are 250k different possibilities ... |
| 00:16.39 | *** join/#debian astro76 (n=jtaji@unaffiliated/astro76) |
| 00:17.21 | Tramp | or, rather, 30k unique hashes out of 60k files. |
| 00:17.57 | *** join/#debian vorpal (n=rhunter@pdpc/supporter/student/vorpal) |
| 00:19.04 | *** join/#debian cpst (n=Cameron@gepetto.cgl.uwaterloo.ca) |
| 00:19.26 | *** part/#debian cpst (n=Cameron@gepetto.cgl.uwaterloo.ca) |
| 00:24.08 | *** part/#debian iateadonu1 (n=dan@124.129.158.115) |
| 00:25.24 | zeeeee | i thought i've updated, but for some reason, the keys i'm generating are still 'weak' according to dowkd.pl |
| 00:25.35 | abrotman | which keys? |
| 00:26.03 | zeeeee | abrotman, ssh-keygen -t dsa |
| 00:26.16 | peterS | zeeeee: 'dpkg -l libssl0.9.8'. double check that it is version 0.9.8g-9 or -10. |
| 00:26.22 | abrotman | your keys or the host? |
| 00:26.27 | zeeeee | abrotman, my keys |
| 00:26.30 | peterS | or I mean if it's etch then 0.9.8c-4etch3 |
| 00:26.39 | *** join/#debian meff (n=meff@gravity.gordian-knot.spherevision.org) |
| 00:27.08 | *** join/#debian litlebuda (n=litlebud@87-196-213-216.net.novis.pt) |
| 00:27.09 | zeeeee | peterS, 0.9.8-4ubuntu3 |
| 00:27.09 | simonrvn | peterS: hey there stranger =) |
| 00:27.29 | simonrvn | that's meaningless |
| 00:27.33 | peterS | zeeeee: ummm, I don't think we have any idea what ubuntu version is supposed to fix the bug |
| 00:27.41 | zeeeee | peterS, ok |
| 00:27.50 | *** join/#debian paulfm (n=freddio@cpe-76-88-45-65.san.res.rr.com) |
| 00:28.01 | paulfm | good afternoon to you all |
| 00:28.03 | *** join/#debian dendrite (n=ph@dsl092-150-203.wdc2.dsl.speakeasy.net) |
| 00:28.06 | simonrvn | you should be asking in #ubuntu |
| 00:29.07 | *** join/#debian vraa (n=vraa@h203.180.213.151.ip.alltel.net) |
| 00:29.12 | *** join/#debian astro76 (n=jtaji@unaffiliated/astro76) |
| 00:29.15 | paulfm | can some kind soul tell me why when I do a ssh-keygen -t rsa localhost I get "no hostkey alg" back? |
| 00:29.29 | paulfm | Its been driving me crazy |
| 00:29.39 | peterS | paulfm: uh, sounds fine to me, try -trsa without the space? |
| 00:29.48 | peterS | paulfm: oh ... use -o localhost |
| 00:30.05 | peterS | assuming you meant for localhost to be a filename |
| 00:30.10 | paulfm | peterS: -o.. .. hmmm - thanks - let me give it a shot |
| 00:30.34 | paulfm | peterS - no - localhost is just the host to do a scan on |
| 00:30.41 | *** join/#debian dvs (n=cwv@cwv.teksavvy.com) |
| 00:30.44 | *** join/#debian Kdecherf (n=Caoimhin@ANantes-256-1-126-194.w90-12.abo.wanadoo.fr) |
| 00:30.46 | peterS | paulfm: that isn't a scan, it generates a key |
| 00:31.25 | paulfm | peterS: Sorry - Im making stuff up.. I made the keys using "ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key" |
| 00:31.33 | peterS | -f, that's it, yeah |
| 00:31.51 | paulfm | peterS: I did the scan with "ssh-keyscan -t rsa locallhost" |
| 00:32.11 | paulfm | I just cant figure out why it keeps giving me "no hostkey alg" |
| 00:32.36 | peterS | paulfm: dunno, works for me. try also -t dsa and -t rsa1 |
| 00:32.37 | paulfm | the keys are generated - they "look" ok... they even let me run -e and -l on them |
| 00:32.42 | *** join/#debian Holborn (n=holborn@unaffiliated/holborn) |
| 00:33.24 | *** join/#debian Gnurdux (n=gnurdux@c-69-251-255-231.hsd1.md.comcast.net) |
| 00:33.42 | paulfm | peterS: yeah it gives the same error for dsa. Im running a ssh2 only server so rsa1 doesnt do the trick |
| 00:33.53 | peterS | paulfm: rsa1 should just return nothing at all. does it? |
| 00:34.05 | paulfm | peterS: yes it did |
| 00:34.09 | paulfm | no output |
| 00:34.10 | *** join/#debian jaggz1 (i=brandon@dsl081-044-035.lax1.dsl.speakeasy.net) |
| 00:34.15 | *** part/#debian itomato (n=itomato@vc1-66-1.adsl.indra.com) |
| 00:34.45 | peterS | paulfm: so, rsa / dsa do or don't print the banner line, the one that talks about the OpenSSL version? what does the banner say? |
| 00:34.47 | jaggz1 | how do I make an ext3fs in a file (later mountable through loopback)? |
| 00:34.56 | peterS | jaggz1: mkfs.ext3 |
| 00:35.09 | *** join/#debian dubd (n=elauria@201.163.21.248) |
| 00:35.29 | paulfm | peterS: both produce this: # localhost SSH-2.0-OpenSSH_4.3p2 Debian-9 |
| 00:35.33 | peterS | jaggz1: to get a specific sized fs it's probably easiest to create the file ahead of time, using dd bs=1m count=N where N is the number of megabytes you want |
| 00:35.51 | peterS | jaggz1: ....err, I mean dd bs=1m count=N < /dev/zero > filename |
| 00:35.55 | dFence | hey, i'm in a 192.168.1.0 network with netmask 255.255.255.0 ... what's that in that 192.168.1.0/foo code? |
| 00:36.10 | peterS | paulfm: fair enough, that's what they should say. (if you had proto 1 enabled it would say version 1.99) |
| 00:36.18 | dubd | Is it possible to install .deb packages in another distro? I found a gnupg for arm .deb package, and I want to install it in another distro. Where should I start? What should I read? or look for |
| 00:36.20 | jaggz1 | yeah.. then mkfs.ext3 wants a device.. so I need to get that file to be a device |
| 00:36.21 | *** join/#debian eth0_ (n=rewt@jericho.nl) |
| 00:36.27 | jaggz1 | which I guess would be like a blank partition |
| 00:36.29 | paulfm | peterS: aha.. good to know |
| 00:36.47 | dutchfish | hey guys, for those updating ssl keys of there mail servers, it can act funny on certain services, i had to restart the machines as stated in 0.9.8c-4etch3.diff.gz source |
| 00:36.48 | peterS | paulfm: I suspect it's because some ssh proto 1 clients wouldn't otherwise think "SSH 2.0" was compatible with them |
| 00:36.53 | jaggz1 | you know what.. I shoudl just rsync the stuff to the actual drive here.. I'm not sure what I'm hoping for by making it a filesystem.. |
| 00:37.05 | *** join/#debian iguanna (n=david@117.Red-88-12-153.dynamicIP.rima-tde.net) |
| 00:37.18 | paulfm | peterS: ... your probably right... funny t place "critical" info in a banner though |
| 00:37.21 | peterS | jaggz1: -F will tell it to use a non-device file |
| 00:37.25 | jaggz1 | I was going to just dd the whole partition over the network to make the duplicate of it.. then I could mount it to access it |
| 00:37.42 | karsten | Has xorg changed its autodetection behavior of displays lately? My dual-head config is b0rken as of this morning's update. |
| 00:37.56 | jaggz1 | basically, I have a really old old system.. and the stuff on it is scattered and I wanted to backup the whole thing and re-install.. |
| 00:37.56 | peterS | paulfm: well, it's how the client knows what the server is and what it can do. the first step of negotiating a connection. I think that's a reasonable place to put it. the fact that the banner is human-readable is neither good nor bad, really |
| 00:38.00 | *** join/#debian CaT[t3] (n=cat@124.189.48.224) |
| 00:38.34 | *** join/#debian antgel_ (n=antony@82-68-107-174.dsl.in-addr.zen.co.uk) |
| 00:38.34 | paulfm | peterS: yeah... good point - its probably good to be able to see it from a troubleshooting perspective |
| 00:39.05 | *** join/#debian l3jj (n=chatzill@dsl093-001-038.det1.dsl.speakeasy.net) |
| 00:39.11 | peterS | paulfm: right. no reason _not_ to have that first line be human-readable, then you can use telnet instead of writing your own network audit module or whatever (: |
| 00:39.23 | *** part/#debian versuchsanstalt (n=versuchs@p54856834.dip.t-dialin.net) |
| 00:39.33 | *** join/#debian tnks (n=tnks@66-90-245-150.dyn.grandenetworks.net) |
| 00:40.05 | tnks | I just did some upgrades, and Ctrl-Alt-F# stopped working for me to switch virtual terminals. |
| 00:40.10 | tnks | anyone seen something like this? |
| 00:40.30 | dutchfish | tnks, what upgrades? |
| 00:40.47 | paulfm | peterS: I did notice that the new keys Im generating say this at the top of the key file: Proc-Type: 4,ENCRYPTED followed by: DEK-Info: DES-EDE3-CBC,5BE13C4056CE62BD |
| 00:41.14 | paulfm | peterS: and my old (working keys) didnt have this |
| 00:41.16 | zeeeee | peterS, you mentioned that i should check known_hosts, but it doesn't seem to tell me where i've logged in in the past |
| 00:41.39 | *** join/#debian aardvarq (n=aardvarq@134.114.239.116) |
| 00:41.50 | peterS | zeeeee: yes, that is what known_hosts is - a cache of remote host keys, which also is a cache of remote hosts |
| 00:42.12 | abrotman | zeeeee: please ask #ubuntu |
| 00:42.40 | peterS | zeeeee: unfortunately a few years ago someone decided it was bad security to keep a list of machines you've sshed to in plain sight, so nowadays the default option is to hash the hostnames/IP addresses, so you can't get at them directly. more's the pity. |
| 00:42.59 | karsten | peterS: Any way to unhash them? |
| 00:43.18 | peterS | karsten: no, the point of hashing them is to prevent someone from figuring out what machines you ssh to when they hack you. if it were reversible there wouldn't be any point. |
| 00:43.18 | themill | karsten: that would be a pretty poor hash function... |
| 00:43.25 | *** join/#debian Riotblade (n=Riotblad@adsl-71-135-60-193.dsl.pltn13.pacbell.net) |
| 00:43.26 | peterS | karsten: ...unless the hash is generated by recent openssl, perhaps (: |
| 00:43.28 | dutchfish | no unhash, but on connection its show th eline number of the offending key |
| 00:43.29 | stew | karsten: no way to unhash them. you can set new ones to not be hashed. if you need to remove one, you can remove it by name |
| 00:43.35 | karsten | peterS: I mean: not hash them. |
| 00:43.47 | peterS | karsten: oh yeah, there is an option, see 'man ssh_config' |
| 00:43.47 | karsten | How do you remove a given host then? |
| 00:44.02 | stew | karsten: ssh-kegen -R hostname |
| 00:44.04 | peterS | karsten: "HashKnownHosts no" in ~/.ssh/config |
| 00:44.07 | Rienzilla | you probably can hash the machines name and see if there is such a hash |
| 00:44.09 | themill | karsten: or when you make a connection, it bitches about the key change and tells you the line; use vi |
| 00:44.13 | dutchfish | karsten, remove the offending line |
| 00:44.17 | stew | karsten: man ssh_config and look for Hash for instructions on not hasing them |
| 00:44.22 | Tramp | karsten: ssh-keygen, -R option |
| 00:44.23 | Riotblade | Hey, anyone can recommend me a lightweight browser that supports flash? I'm currently using iceweasel but it likes to crash sometimes while on flash intensive sites. I also use Opera 8.50 but it does the same. |
| 00:44.36 | dendrite | Hmm. We regenerated keys today. I wonder if we should also regen known_host entries... |
| 00:44.38 | karsten | themill: The problem I have with that is there are generally *two* lines associated, usually one after the other. |
| 00:44.39 | peterS | oooh, a non-openssl-related question |
| 00:44.44 | *** join/#debian antgel__ (n=antony@82-68-107-174.dsl.in-addr.zen.co.uk) |
| 00:44.44 | paulfm | peterS: is there anyway that my original keys are using a different encryption algorithm?... the new keys looks like they are des3? would that be right |
| 00:44.57 | karsten | themill: I manage a few thousand hosts. Key management isn't Job # 1 here, so keys frequently change. |
| 00:44.58 | stew | Riotblade: when iceweasel crashes on flash sites, it is the flash plugin's fault, not iceweasel's |
| 00:45.01 | *** join/#debian tecky (n=tecky@cpe-74-67-30-26.nycap.res.rr.com) |
| 00:45.02 | paulfm | maybe that explains the no alg error |
| 00:45.19 | Riotblade | stew, yes, I understand but I would also like to lower the memory usage |
| 00:45.34 | *** join/#debian RyanPrior (n=chatzill@137.28.242.76) |
| 00:45.37 | karsten | Hrm. |
| 00:45.53 | Riotblade | stew, I'm using the latest version of adobe's flash plugin, I dont know of any others |
| 00:45.56 | peterS | paulfm: are you talking about ssh keys generated by ssh-keygen? it doesn't do that on my machine. maybe ubuntu has patched openssh in some way? |
| 00:46.01 | karsten | So: I nuked my known_hosts file as a workaround recently. Probably not the intended goal / outcome. |
| 00:46.02 | peterS | errr, I guess you aren't the ubuntite |
| 00:46.09 | l3jj | With the openssl issue, do we need to regen the host key, or just keys we have placed in a ~/.ssh |
| 00:46.09 | ericrw | stew: actually, it wouldn't be entirely impossible to create a plugin architecture that provided enough of a sandbox that no plugin could cause such problems.. |
| 00:46.10 | RyanPrior | So, is the guy responsible for this SSH oopsie a dufass, |
| 00:46.19 | *** join/#debian Flimzy (n=flimzy@ip68-103-180-252.ks.ok.cox.net) |
| 00:46.20 | RyanPrior | or is it just a little mistake? |
| 00:46.24 | peterS | RyanPrior: he's generally a pretty smart guy |
| 00:46.27 | karsten | RyanPrior: Um, which? |
| 00:46.28 | stew | ericrw: no, it wouldn't |
| 00:46.37 | paulfm | peterS : yes ssh-keygen puts that in the top. Im running debian etch |
| 00:46.39 | karsten | RyanPrior: ssl, you mean, right? |
| 00:46.53 | RyanPrior | karsten: Yeah, SSL. <-- dufass |
| 00:46.56 | jaggz1 | peters, think there's any reason to make a single .iso on the remote (my desktop system which I'm backing up onto) system instead of just rsync'ing the files over? |
| 00:47.03 | stew | Riotblade: gnash is another flash player. it works with far less flash content, but possibly doesn't crash iceweasel as often |
| 00:47.06 | jaggz1 | it seems better to rsync.. I can remove extraneous stuff then.. n/m |
| 00:47.33 | CaT[t3] | not being able to see what entries belong to what inknown_hosts is /really/ going to make changing 40+ boxes fun. oh the joy. |
| 00:47.35 | RyanPrior | Has there been any speculation that it was done in order to open a back-door to Debian systems? |
| 00:47.36 | peterS | paulfm: it doesn't on my machines, etch or sid |
| 00:47.41 | themill | RyanPrior: for more information, /msg dpkg dsa1571 and see the wiki page. Please try to stay on topic and keep it positive. |
| 00:47.55 | RyanPrior | I can just see the OpenBSD guys rolling in laughter. |
| 00:47.56 | paulfm | peterS: hmm... let check /etc/issue |
| 00:48.00 | peterS | jaggz1: yeah I have no idea of your situation, you can answer your question a lot better than I can |
| 00:48.02 | jaggz1 | am I okay with rsync / remote@sys ? |
| 00:48.07 | ericrw | RyanPrior: well, he is an agent of the NSA, and a republican, so he must be evil. |
| 00:48.12 | jaggz1 | or will it choke on /dev/ and stuff? |
| 00:48.14 | antgel | RyanPrior: only the ones who are cunts |
| 00:48.14 | peterS | jaggz1: use -x at least, so you don't end up rsyncing your /proc partition |
| 00:48.18 | stew | RyanPrior: are you asking if this bug might have been intentionally introduced in order to backdoor debian? |
| 00:48.24 | paulfm | peterS: etc/issue->Debian GNU/Linux 4.0 |
| 00:48.37 | peterS | jaggz1: also you probably want -a |
| 00:48.38 | pythonic | it's the communist party |
| 00:48.52 | jaggz1 | yeah.. I'm using -e 'ssh -c arcfour' -vaz .. |
| 00:48.53 | RyanPrior | stew: That's what I'm asking, and additional I'm wonderig if it's been asked already by somebody with more knowledge of the people involved than I have. |
| 00:48.59 | jaggz1 | but I should probably setup an rsync daemon on the remote huh |
| 00:49.07 | pythonic | it does look a bit suspicious.. |
| 00:49.17 | *** join/#debian blop (i=blop@228-177-112-217.dyn.adsl.belcenter.be) [NETSPLIT VICTIM] |
| 00:49.17 | *** join/#debian XSoul (n=XRule@tooms.ddns.cablebg.net) [NETSPLIT VICTIM] |
| 00:49.17 | *** join/#debian unixtippse (n=martin@unaffiliated/unixtippse) [NETSPLIT VICTIM] |
| 00:49.17 | *** join/#debian kingsley (n=kingsley@ipv4-198-182-208-24.openaccess.org) [NETSPLIT VICTIM] |
| 00:49.17 | *** join/#debian Oktane (i=oktane@irkkaava.panomies.org) [NETSPLIT VICTIM] |
| 00:49.17 | *** join/#debian duckx (n=Duck@81.57.39.234) [NETSPLIT VICTIM] |
| 00:49.17 | *** join/#debian Cromag (i=cromag@as1337.dk) [NETSPLIT VICTIM] |
| 00:49.17 | *** join/#debian hifi (i=hifi@conky/developer/hifi) [NETSPLIT VICTIM] |
| 00:49.17 | *** join/#debian Nielsen (i=Doc@unaffiliated/nielsen) |
| 00:49.17 | *** join/#debian `nstuff (i=bindery@c3p0.reverse.net) [NETSPLIT VICTIM] |
| 00:49.17 | *** join/#debian tazle (n=tazle@fop3.kyla.fi) [NETSPLIT VICTIM] |
| 00:49.17 | *** join/#debian ledet (n=thomas@irc.starnix.dk) [NETSPLIT VICTIM] |
| 00:49.18 | *** join/#debian XSoul (n=XRule@tooms.ddns.cablebg.net) |
| 00:49.19 | *** join/#debian th0ger (n=th0ger]@ip70-179-136-46.fv.ks.cox.net) |
| 00:49.23 | peterS | jaggz1: yeah you definitely want -x unless you want to try to rsync all of /proc |
| 00:49.34 | jaggz1 | thanks :) |
| 00:49.35 | pythonic | only one of the two lines had the purify comment.. |
| 00:49.39 | stew | RyanPrior: its not being considered. the develpoer in question is a well esteemed developer, and if this was his intention, he probably would not have run his changes by the openssl-dev mailing list before commiting them to debian |
| 00:49.47 | paulfm | peterS: where is the setup script for ssh that originally creates the keys on install |
| 00:50.05 | peterS | paulfm: I think that's /var/lib/dpkg/info/openssh-server.postinst |
| 00:50.06 | pythonic | stew: aha! but that's the perfect cover |
| 00:50.23 | stew | so is a tin-foil hat |
| 00:50.31 | *** join/#debian tnks (n=tnks@66-90-245-150.dyn.grandenetworks.net) |
| 00:50.33 | paulfm | peterS: thanks - Ill take a look |
| 00:50.37 | pythonic | does he have any connections with the communist party? |
| 00:50.38 | tnks | sorry, I asked a question and then dropped out. |
| 00:50.40 | dendrite | That was a good question, re whether to regen host keys. |
| 00:50.42 | RyanPrior | stew: That doesn't convince me. If I were going to try to slip a backdoor into Debian, I wouldn't want to draw suspicion by giving the security mailing list a miss. |
| 00:50.51 | tnks | my question was about virtual terminal switching problems. |
| 00:50.53 | antgel | FFS |
| 00:50.53 | dutchfish | pythonic, why didnt you detect the mistakein first place? ;) |
| 00:50.57 | *** join/#debian NetEcho__ (i=NetEcho@67.204.213.37) |
| 00:51.04 | tnks | I'm on testing. |
| 00:51.11 | peterS | paulfm: as they say, the simple thing to do is delete your host keys then 'dpkg-reconfigure openssh-server' |
| 00:51.15 | stew | RyanPrior: would anything convince you? |
| 00:51.16 | peterS | paulfm: that will rerun that .postinst file |
| 00:51.55 | pythonic | dutchfish: because i have connections to the communist party, duh |
| 00:51.57 | pythonic | :-p |
| 00:51.58 | ericrw | peterS: i wish that debian actually released a new openssh-server package like Ubuntu did, which forced a host-key update. |
| 00:51.59 | RyanPrior | stew: That's a good question. |
| 00:52.09 | pythonic | falsifiability sucks |
| 00:52.12 | paulfm | peterS: aha - very smart you are.... tell me - the openssl "bug" would that mean I need to recreate my SSL cert CSR and need SSL certs reissued? |
| 00:52.20 | stew | ericrw: afaik it is in the works |
| 00:52.22 | pythonic | shreds too many conspiracy theories |
| 00:52.40 | peterS | paulfm: whoever issues your cert needs to reissue it if they're running etch, yeah. if it's self-signed, then I guess that's you. |
| 00:52.47 | *** join/#debian aindilis (i=andrewdo@75.146.96.195) |
| 00:53.11 | poslathian | yea its not worth worrying about for a few days until all the issuing authorities get their shit up to date...or so is my thinking |
| 00:53.24 | ericrw | peterS... the certificate would be fine if they're not running etch, but if the private key was generated on your own etch system... I think thats an issue |
| 00:53.28 | peterS | paulfm: however, note I don't have much experience with ssl certs, the various files and parties involved tend to confuse me a bit. so I can't give _specific_ advice on who signs what when where. |
| 00:53.30 | stew | any authority worth it's salt is already up to date |
| 00:53.36 | *** join/#debian netdaemon (n=netdaemo@tuxhacker/netdaemon) |
| 00:53.39 | zythmer | dendrite: Wait, host keys (as in /etc/ssh/ssh_host_*) or known_hosts (which you mentioned earlier)? Known hosts is only a hash which doesn't use an RNG. |
| 00:53.46 | poslathian | stew: yea youre right |
| 00:53.53 | paulfm | peterS: they are not self signed (theyre from Thawte).... so they I only use my priv cert to sign my CSR.. once they have that the create the cert and my old priv key does not matter anymore? |
| 00:53.54 | peterS | ericrw: oh I thought it was just the CA's private key involved with a cert, I didn't know you had one too. see above, I'm not much on ssl/tls |
| 00:54.16 | dendrite | zythmer: Host keys, are what I'm wondering about. And I think the answer is we should regen. |
| 00:54.24 | *** join/#debian _ZeuZ_ (n=zeuz@2-90-17-190.fibertel.com.ar) |
| 00:54.40 | poslathian | openssl is just a variant in public key encryp right? both party's have private keys, then one shared public key |
| 00:54.48 | poslathian | raise one to the other to generate the final shared private key |
| 00:54.50 | zythmer | dendrite: yeah, you should. |
| 00:54.51 | poslathian | ....? |
| 00:54.51 | stew | paulfm: no, your private key is still being used, and if it was generated by openssl on etch, you need a new cert |
| 00:54.53 | ericrw | peterS, you have your own private key (you generate) then get a signing request made, and you then receive a signed certificate from a 3rd party. To 'use' the certificate, the server must have the private key *and* the signed certificate |
| 00:54.56 | _ZeuZ_ | Anybody up to check my (almost)FULL-FOR-ISP startup script with Traffic managment (shaping) and NAT? |
| 00:54.58 | *** join/#debian faw0 (n=felipe@200-138-44-211.ctame705.dsl.brasiltelecom.net.br) |
| 00:54.59 | dendrite | zythmer: *nod* |
| 00:55.02 | jaggz1 | I think I got it.. slight modification to the rsyncd.conf example and rsync --daemon is running.. .. oh.. and there are other permissions problems I didn't fix yet :) |
| 00:55.22 | dendrite | zythmer: When I started in on this this morning, the link to the howto in the DSA was 404. I'll look into it again. |
| 00:55.26 | paulfm | peterS: hmm.... thanks.. sounds like another pjoject for another day - I guess I need to fix ssh first :-) |
| 00:55.35 | peterS | poslathian: well, yeah but it's more complex than that. there's the certs (server cert and optional client cert) which are a bit like PKI, then there's also the key exchange for the connection itself, which produces a shared secret key just for the connection ... it's a lot to take in |
| 00:56.00 | *** join/#debian Sipingal (n=Sipingal@inet-nc01-o.oracle.com) |
| 00:56.09 | peterS | ericrw: so in other words the cert is basically your public key signed by the CA? |
| 00:56.18 | stew | dendrite: try the wiki link in /msg dpkg dsa1571 |
| 00:56.21 | ericrw | peterS: yes. |
| 00:56.24 | peterS | ericrw: (with metadata in it like your DNS records) |
| 00:56.56 | *** join/#debian antgel__ (n=antony@82-68-107-174.dsl.in-addr.zen.co.uk) |
| 00:57.05 | Dewi | dendrite: it's there now |
| 00:57.09 | ericrw | peterS: so you need to generate a whole new keypair, and hope that your SSL provider will work with you on this. (which I'm not sure that mine will..) |
| 00:57.42 | Dewi | dendrite: but empty :) |
| 00:57.44 | themill | Dewi: you mean a page that says "More to follow soon" |
| 00:57.46 | *** join/#debian NetEcho__ (i=NetEcho@67.204.213.37) |
| 00:57.47 | peterS | paulfm: it sounds like, from what ericrw says, that you need to revoke/reissue your cert if you have any concerns that your filesystem isn't safe from attackers. though ... in that case ... you've already lost. I'm not sure what attack vector is enabled by your private key not being so private anymore |
| 00:57.54 | *** join/#debian duns_s (n=duns_s@mnhm-590f5d49.pool.einsundeins.de) |
| 00:58.08 | Dewi | themill: at least they haven't *completely* forgotten about it |
| 00:58.15 | *** part/#debian hopson (i=hopsonro@access.cws.oregonstate.edu) |
| 00:58.18 | pythonic | is this a cert for a web site? |
| 00:58.29 | peterS | pythonic: yes, or any other SSL/TLS connection, like a secure POP3 server |
| 00:58.31 | ericrw | peterS: if they can get to the private key, you've already lost. |
| 00:58.41 | paulfm | peterS: agreed - not too worried about that so much |
| 00:58.41 | pythonic | they'll sniff your traffic |
| 00:58.43 | peterS | ericrw: oh right, I'm starting to understand the architecture here. |
| 00:58.45 | pythonic | any passwords, etc. |
| 00:58.46 | *** join/#debian vollmer (i=foobar@ampache/staff/vollmer) |
| 00:58.55 | pythonic | where "they" = communists |
| 00:58.55 | Baloo | im in ur router, sniffin all ur traffic. |
| 00:59.04 | peterS | paulfm: listen to eric, not to me. he has the cert architecture much more firmly in his head than I do |
| 00:59.05 | *** join/#debian ootput (n=ootput@unaffiliated/ootput) |
| 00:59.08 | themill | Dewi: :( Actually, I think the community response (on the wiki) has been impressive. |
| 00:59.22 | karsten | Does the ssl bug affect PGP/GPG keys, and if so, what variants? |
| 00:59.29 | paulfm | peterS: heh.... modesty - your strongest trait |
| 00:59.31 | ericrw | peterS, I run a hosting company and resell SSL certificates. :) |
| 00:59.34 | peterS | karsten: gpg doesn't use openssl, so no. |
| 00:59.38 | stew | karsten: not gpg, gpg uses tls not openssl |
| 00:59.43 | Dewi | themill: aah, I'd better look there then |
| 01:00.09 | karsten | Thanks. |
| 01:00.17 | karsten | SSH though. |
| 01:00.22 | karsten | regens ssh keys |
| 01:00.31 | peterS | paulfm: seriously I need to understand how certs work at least well enough to do self-signed ones convincingly. my employer ships appliances that have https servers with self-signed certs that aren't even regenerated to reflect the correct vhostname. so we have some work to do. |
| 01:00.37 | _ZeuZ_ | Anybody up to check my iptables + tc script???? |
| 01:00.37 | ericrw | personally, my first concern is SSH, and SSL secondarily... with SSL you still need a Mitm attack. SSH right now, is really screwed, if you're using key-auth |
| 01:00.50 | peterS | agreed. |
| 01:00.59 | paulfm | peterS: hah... just turn off error logging and forget about it :-) |
| 01:01.13 | peterS | SSL for websites was always kind of overkill. people don't attack the TCP stream, they attack the Windows 2003 server at the other end. |
| 01:01.31 | peterS | paulfm: well we end up telling people to click away the dire warnings in their browsers. |
| 01:01.46 | ericrw | peterS: you need to really change that behavior with IE7 and Firefox3... Firefox3's error on self-signed certificates is even more draconian than IE7's |
| 01:01.51 | antgel__ | _ZeuZ_: /msg dpkg smart questions |
| 01:02.02 | stew | paulfm: yes. i had to do some convincing of clients today that this wasn't necessarily high risk for their low traffic https sites |
| 01:02.06 | stew | peterS: ^^ |
| 01:02.07 | peterS | ericrw: yeah, so I've heard. unfortunately we have some other fish to fry before fixing our cert signing magic |
| 01:02.15 | *** join/#debian NetEcho__ (i=NetEcho@67.204.213.50) |
| 01:02.27 | _ZeuZ_ | antgel: Nobody here seems to know bout traffic shaping nor traffic control |
| 01:02.30 | peterS | stew: in our case our https:// appliances are typically behind a firewall anyway. I think ssl attacks are the least of their concerns |
| 01:02.31 | paulfm | peterS: ...yeah... thats a problem. |
| 01:03.11 | peterS | _ZeuZ_: mostly we're preoccupied talking about the openssl fiasco |
| 01:03.27 | stew | _ZeuZ_: show us the script and ask a more specific question |
| 01:03.30 | _ZeuZ_ | I just need someone to give an eye at it, and tell me if I'm forgeting something |
| 01:03.37 | _ZeuZ_ | http://pastebin.com/d61fe8c4a >> Script |
| 01:03.42 | antgel__ | _ZeuZ_: did you message the bot? |
| 01:03.51 | *** part/#debian vollmer (i=foobar@ampache/staff/vollmer) |
| 01:04.05 | _ZeuZ_ | I read the man pages of both iptables and tcng, so did read the manuals of frozen tux, and so did read lartc.org |
| 01:04.21 | _ZeuZ_ | this IS a I-pretty much know what I'm talking about question |
| 01:04.49 | antgel__ | gives up |
| 01:04.57 | _ZeuZ_ | So did I read tutorials for SH and BASH so I could do the MAC filtering |
| 01:05.00 | paulfm | peterS: when I do "ssh-keygen -y -f /etc/ssh/ssh_host_rsa_key" it prints the public key.... but ssh-keyscan -t rsa localhost fails? |
| 01:05.03 | *** join/#debian poseidon (n=joe@ip70-161-211-76.hr.hr.cox.net) |
| 01:05.19 | _ZeuZ_ | antgel__ read it and tell me, then I will be able to judge why you gave up, because you don't know, or you just don;t want to help |
| 01:05.25 | peterS | paulfm: have you restarted sshd? |
| 01:05.32 | paulfm | peterS: its almost like ssh-keyscan is not working - is that in a separate package? |
| 01:05.46 | ericrw | _ZeuZ_: do you have a specific question about that script? its a bit lengthy and the question seemed a bit non-specific? |
| 01:05.55 | peterS | paulfm: no, both are in openssh-client |
| 01:06.00 | _ZeuZ_ | About NAT in there ericrw |
| 01:06.01 | paulfm | peterS: ... not yet - didnt want to be able to not get back into the server if it fails.... |
| 01:06.16 | _ZeuZ_ | check if it's enough like to allow my users of the LAN to send and receive data through any port |
| 01:06.19 | _ZeuZ_ | 1:1 nat |
| 01:06.20 | peterS | paulfm: this isn't red hat, which is to say, restarting the server doesn't kill existing ssh connections |
| 01:06.24 | ericrw | _ZeuZ_: as in, your packets aren't being NAT'ed? |
| 01:06.37 | _ZeuZ_ | Not well enough, as I can check with tcpdump |
| 01:06.48 | paulfm | peterS:... wow... really... let me try |
| 01:06.48 | peterS | we've learned to our sorrow that red hat _did_ used to kill all your connections.... |
| 01:06.58 | *** join/#debian reZo (n=reZo@203-184-20-243.jetbuster.co.nz) |
| 01:07.05 | _ZeuZ_ | I previously had like 4 lines for NATing, including SNAT and DNAT, then the forwards appart, I tried to d it more compact, now |
| 01:07.07 | paulfm | hrmmm |
| 01:07.29 | paulfm | peterS: say... Restarting OpenBSD Secure Shell server: sshdCould not load host key: /etc/ssh/ssh_host_rsa_key |
| 01:07.58 | peterS | paulfm: then don't log out, your server is dead (: |
| 01:08.16 | _ZeuZ_ | paulfm: On the doubt: This is just an idea, but why don't you purge the package, and reinstall it, then start with a clean configuration and key files |
| 01:08.17 | paulfm | peterS: haha..... it can be dead |
| 01:08.38 | _ZeuZ_ | Also make sure the file is owned by the correct user (this should be, it would be rare if it wouldnt) |
| 01:08.48 | stew | paulfm: dpkg-reconfigure openssl-server |
| 01:08.58 | peterS | ooof, I tried to reproduce that test of running 'openssl rand' lots of times to see how many dupes I got - and ran my fs out of inodes! |
| 01:09.21 | *** join/#debian iNToIT (n=iNToIT@84.18.159.25) |
| 01:09.22 | *** join/#debian Samonoske (n=Samonosk@adsl-67-38-29-49.dsl.sfldmi.ameritech.net) |
| 01:09.22 | _ZeuZ_ | or reconfigure it xD |
| 01:09.26 | *** join/#debian Penol (i=penol@linkas.no) |
| 01:09.36 | paulfm | peterS: Imma try dpkg-reconfigure |
| 01:09.37 | peterS | stew: openssh-server |
| 01:09.54 | stew | yeah that's the one |
| 01:09.58 | Samonoske | how do i COMPLTELY remove a package...when i do apt-get remove package there are still files left on my comp and i cant find all of them |
| 01:09.59 | paulfm | stew: thanks |
| 01:10.04 | peterS | paulfm: delete the problematic /etc/ssh/ssh_host_rsa_key* first |
| 01:10.11 | peterS | Samonoske: --purge |
| 01:10.11 | Penol | how to write a howto? |
| 01:10.17 | *** join/#debian Bakkal (n=bakkal@modemcable026.205-203-24.mc.videotron.ca) |
| 01:10.37 | Bakkal | Hello, how do I make apt list all the installed packages on my system? |
| 01:10.46 | stew | Bakkal: aptitude search '~i' |
| 01:10.56 | *** join/#debian xerophyte (i=xerophyt@CPE00195b0cd64f-CM001bd7ac48f4.cpe.net.cable.rogers.com) |
| 01:11.09 | _ZeuZ_ | ericrw, did you find anythingin it? I'm going to add an automatic routine to make each client's IP to be limited to a maximum number of connections and to be shaped on egress to a determined traffic (upload can be unlimited for them) |
| 01:11.33 | *** join/#debian netdaemon (n=netdaemo@tuxhacker/netdaemon) |
| 01:11.44 | paulfm | peterS: great - reconfigure worked.. I think - but It didnt even ask for new passwords? |
| 01:11.55 | ericrw | _ZeuZ_: it looks like you need to do some solid debugging, I can't diagnose that remotely, especially not with my limited time at the moment. LIke others, I'm dealing with SSL problems. |
| 01:12.03 | peterS | paulfm: the host key can't use passwords, or you'd have to type them every time the machine boots and sshd starts up |
| 01:12.19 | ericrw | _ZeuZ_: (I've got over 200 hosts with SSL/SSH security vulnerabilities...) |
| 01:12.23 | peterS | thus dpkg-reconfigure creates them without passwords |
| 01:12.25 | paulfm | peterS: doooooooooohhhhhhhhh |
| 01:12.27 | *** join/#debian Insolit (n=daniel@89.155.32.151) |
| 01:12.41 | _ZeuZ_ | ericrw, why don;t use p4p to send patches? |
| 01:12.42 | paulfm | peterS:... that must be it right? |
| 01:12.59 | peterS | paulfm: I suspect you're fine now. try '/etc/init.d/sshd start' then try sshing in |
| 01:13.02 | paulfm | peterS:... how do I do a keygen with no passwords.. leave them empty when prompted? |
| 01:13.12 | *** join/#debian ootput (n=ootput@unaffiliated/ootput) |
| 01:13.15 | peterS | paulfm: yeah. or there's a flag to tell it not to even prompt |
| 01:13.16 | _ZeuZ_ | ericrw, create a deb with the configuration files bundled to break the divert and then send it as a proposed update |
| 01:13.21 | *** join/#debian Songtao (n=action@222.131.164.75) |
| 01:13.32 | zythmer | paulfm: -N '' |
| 01:13.32 | paulfm | peterS: hmmm... Im not too smart |
| 01:13.43 | paulfm | zythmer: thanks |
| 01:14.06 | karsten | paulfm: better: use ssh-agent, if possible |
| 01:14.27 | karsten | bbiam |
| 01:14.30 | peterS | karsten: well, talking about host keys, which can't have passwords as '/etc/init.d/ssh start' needs access to them |
| 01:14.37 | *** join/#debian sc68cal (n=sc68cal@c-76-99-52-119.hsd1.pa.comcast.net) |
| 01:14.58 | *** join/#debian vraa_ (n=vraa@h203.180.213.151.ip.alltel.net) |
| 01:14.58 | *** join/#debian itomato (n=itomato@66-224-246-146.atgi.net) |
| 01:15.14 | ericrw | _ZeuZ_: 1) we've only been running our own debian mirror for a year or so, older systems are using global mirrors (though we could poison dns...) 2) we want to nab user-keys too, 3) it isn't that simple with our SSL certificate,s we've got to create new keys, and get 3rd-party signatures on a case-by-case basis |
| 01:15.18 | paulfm | peterS: totally worked... |
| 01:15.26 | peterS | paulfm: and ssh-keyscan is ok now too? |
| 01:15.28 | sc68cal | Could someone turn around and use the openssl tool and start brute forcing? |
| 01:15.34 | pythonic | yes |
| 01:15.40 | *** part/#debian zeeeee (n=zeeeee@ASHDOWN-FORTY-TWO.MIT.EDU) |
| 01:15.49 | peterS | sc68cal: I assume the black hats are already doing that as we speak. |
| 01:15.51 | paulfm | peterS: and also just manually created the keys using ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N '' |
| 01:16.08 | paulfm | peterS: ssh-keyscan returns the pub key perfectly |
| 01:16.17 | peterS | cool. is it a known weak key? |
| 01:16.18 | abrotman | peterS: or were a few days ago |
| 01:16.27 | paulfm | peterS: im going to delete all keys and create them manually 1 more time to verify |
| 01:16.32 | sc68cal | Guess when there are 8 million lines in the has, dumb question :-\ |
| 01:16.33 | peterS | abrotman: yeah, I meant "already doing it in production", not "already writing the tools" |
| 01:16.37 | sc68cal | *hash |
| 01:16.50 | ericrw | abrotman, yes, which is even scarier. I'm hoping I haven't been bitten already. |
| 01:16.57 | sword | What is the scope for time of brute force? |
| 01:17.00 | ericrw | abrotman: the vulnerability back in February was bad enough. |
| 01:17.22 | pythonic | this is worse |
| 01:17.28 | Samonoske | peterS the programs i'm using is mydns...it has files saved in a specific place of which i'm not sure...i have a password containing illegal characters so it doesnt finish setting up |
| 01:17.43 | Samonoske | but whenever i reinstall the program it goes back to the password and tries to use it. |
| 01:17.57 | *** join/#debian arlinja (n=arm9cl@athedsl-4438809.home.otenet.gr) |
| 01:17.57 | pythonic | this is the worst vulnerability in free software history |
| 01:18.08 | ericrw | pythonic: yes, and no. This is a bit easier to patch, I think, and it only has a dire impact on those using key-auth. |
| 01:18.17 | Riotblade | stew, know any stable flash version? |
| 01:18.28 | paulfm | peterS: everything works now - it was hanging up on my old certs as they were passworded! |
| 01:18.28 | Riotblade | I use to be able to run these fine, but I've been getting segmentation faults lately |
| 01:18.35 | Riotblade | I'm not sure if it's caused by trickle or flash |
| 01:19.32 | *** part/#debian th0ger (n=th0ger]@ip70-179-136-46.fv.ks.cox.net) |
| 01:19.59 | ericrw | (dire meaning, requiring immediate fixing).. this is scary because its remote, not local. |
| 01:20.10 | stew | Riotblade: no |
| 01:20.27 | _ZeuZ_ | ericrw, Well, it get's complicated forsure xD |
| 01:21.25 | itomato | says Kdecherf's quit message is all Greek to him... |
| 01:21.44 | itomato | so apparently, Sarge is unaffected? |
| 01:22.03 | peterS | itomato: yes, and if your keys were created back in the sarge days (as some of mine were), those keys are fine |
| 01:22.07 | paulfm | peterS: 1 last q: if I was logging in to my server using PAM... and had no ssh key for my user... should I have one - Im assuming its more secure than PAM? |
| 01:22.16 | *** join/#debian Amorphous (n=jan@dslb-088-076-188-005.pools.arcor-ip.net) |
| 01:22.43 | peterS | paulfm: I'm not sure what you mean by your question. pam can do a lot of things. also, openssh use of pam isn't just for login, it is also for sessions and such |
| 01:22.47 | pythonic | itomato: the quotation marks are not greek |
| 01:23.19 | itomato | no, but the greek is.. |
| 01:23.37 | peterS | the question is whether the greek is a quotation |
| 01:24.17 | karsten | ignores quits, so the whole greek quit quote caper is greek to him. |
| 01:24.18 | itomato | it's in quotes - so yes. But so is salvin's :) "Leaving" could be attributed to a number of people.. |
| 01:24.38 | pythonic | babelfish says "A serene life is presented a eternal happiness" |
| 01:24.57 | itomato | I'll buy that - but now I'm going to buy some speakers.. |
| 01:24.59 | *** part/#debian itomato (n=itomato@66-224-246-146.atgi.net) |
| 01:25.04 | paulfm | peterS:... I guess what Im asking is do I need to create ssh keys for my users on this machine... although as their are No keys and currently they login with ssh using PAM... then the "wek keys" problem is not an issue? |
| 01:25.38 | peterS | paulfm: keys are generally better than passwords, except when they're not, like when you only have 16 or 18 bits of entropy in them. |
| 01:25.45 | ericrw | paulfm: its only an issue if they use key-auth.. |
| 01:25.50 | pythonic | haha |
| 01:26.08 | peterS | paulfm: but key management is a complex enough topic that most users are either going to be unable to set them up, or will manage them as badly as they manage their passwords, the digital equivalent of post-it notes |
| 01:26.11 | pythonic | it's easier to see the entropy in a password :-) |
| 01:26.20 | paulfm | ericw: thanks - I figured as much... wasnt sure if there was some PAM ssh-key in the background there somewhere |
| 01:26.54 | Dewi | oh god. I woke up this morning and some bastard had punched a hole in my private key, and all the entropy has drained right out. |
| 01:26.57 | paulfm | thanks for all the help guys peterS! and ericw. And to everyone else who chimed in to save me from disaster |
| 01:27.30 | sc68cal | Thank god that we block SSH via firewall |
| 01:27.32 | CaT[t3] | I have so many keys to regenerate. sigh. 100+ maybe. I hate today. |
| 01:27.46 | stew | peterS: aiui even if keys were generated with sarge, if they were used with etch's vulnerable openssl, they could potentially be no longer trusted |
| 01:27.48 | ericrw | CaT[t3]: same. |
| 01:27.49 | peterS | I think I need to save my company's servers from disaster. my boss would no doubt disagree, he would rather I be working on the product launch we're supposed to do tomorrow. but, you know, being rooted is less fun than pushing a product launch back a day |
| 01:27.50 | paulfm | I just wish I trotted on over hear earlier - I spent the past 4 hours trying to troubleshoot my keys.. when all along it was because they werent supposed to have passwords :-/ |
| 01:27.53 | sc68cal | All I had to worry about was someone on the uni network getting nasty |
| 01:28.06 | peterS | paulfm: hehe |
| 01:28.20 | Sebboh | Hey uh. In lvm, do volume groups always take up whole physical volumes? So if I want to have more than one volume group, I have to create more than one physical volume? Or, phrased another way, my question is, should I divide my 500gb single drive into more than one physical volume? How many? |
| 01:28.30 | CaT[t3] | ericrw: heh. then I have another 50+ SSL certs. |
| 01:28.35 | pythonic | yesterday, all my troubles seemed so far away. |
| 01:28.43 | CaT[t3] | ericrw: including bought and paid for ones. those will be double-fun. |
| 01:28.46 | ericrw | CaT[t3]: ... same |
| 01:28.46 | Dewi | Sebboh: I'm not sure, but you don't really need to |
| 01:28.47 | peterS | Sebboh: correct. a PV can be made from any disk or any partition, but you can't split a PV into multiple VGs |
| 01:28.52 | poslathian | sc68cal: thats lucky but really weird! why were you blocking ssh before now!? |
| 01:28.52 | paulfm | hmm yeah... ssl certs... thats for tomorrow |
| 01:28.55 | Dewi | Sebboh: you can put as many LVs on as you like though |
| 01:29.13 | sc68cal | poslathian: We block SSH except for a few gateway hosts |
| 01:29.14 | Dewi | Sebboh: just define a physical extents length of less than what's available across the VG |
| 01:29.14 | CaT[t3] | ericrw: you doing it all by hand? |
| 01:29.16 | poslathian | honestly who uses monitors anymore! |
| 01:29.25 | ericrw | CaT[t3]: worse, my SSL provider has no way to actually do that without paying them for new certs. I've gotta call them and ask nicely |
| 01:29.29 | poslathian | except of course to open a terminal and ssh into another machine! |
| 01:29.31 | *** join/#debian tavito (n=tavo@200-55-104-195.dsl.prima.net.ar) |
| 01:29.48 | CaT[t3] | ericrw: I think I'll be having to do the same. and I bought 3yr keys |
| 01:29.49 | Dewi | ericrw: ugh |
| 01:29.58 | Dewi | ericrw: they're going to make a fucking killing then |
| 01:29.59 | CaT[t3] | ericrw: err certs. I have keys on the brain. |
| 01:30.02 | muh2000 | ssh with certificates(generated in the vulnerable year) to logon without a password => weak key --> yes/no ? (not the openSSH key. i mean the certificate) |
| 01:30.12 | *** join/#debian B-ker (i=beker@189.193.79.41) |
| 01:30.32 | sc68cal | muh2000: If you used OpenSSL to generate any of that you're probably at risk |
| 01:30.35 | *** join/#debian BlueG (n=blue@71-80-27-167.dhcp.kgpt.tn.charter.com) |
| 01:30.49 | sc68cal | * Debian's OpenSSL |
| 01:30.50 | ericrw | CaT[t3]: uh, not entirely. I did scripts for my iron, which all but 3 are updated now (due to various problems with apt bombing..)... the other hosts will be virtual ones, and I'll be shutting down each host, mounting their filesystems, and doing it that way (I don't have root to those) |
| 01:30.56 | poslathian | ericw: dewi: i didnt realize anyone was using openssl for propetietary software... |
| 01:31.12 | ericrw | poslathian: ... websites |
| 01:31.20 | ericrw | email servers... anything that uses tls/ssl |
| 01:31.38 | Sebboh | Dewi.. hmm? physical.. extents? Well I'll look that up. :) |
| 01:31.40 | CaT[t3] | ericrw: nice. I'll be trying to figure out a way to automate some of this. otherwise I'm going to go wholly mad. |
| 01:31.44 | sc68cal | Argh, I forgot about the ftp/tls cert |
| 01:31.50 | sc68cal | grumbles |
| 01:32.01 | Dewi | Sebboh: a VG is made up of several physical volumes, LVs |
| 01:32.06 | CaT[t3] | ericrw: the ssl certs are fairly easy I guess. the authorized_keys files are going to hurt. |
| 01:32.12 | Dewi | Sebboh: but the VG *contains* one or more logical volumes |
| 01:32.21 | Dewi | Sebboh: a VG is sliced up into thousands of "extents" |
| 01:32.31 | Dewi | Sebboh: and your LVs just take as many as they want |
| 01:32.39 | Dewi | Sebboh: its' -L or -l in lvcreate |
| 01:32.44 | *** join/#debian CAiRO_ (n=tooar@p4FC25EE9.dip.t-dialin.net) |
| 01:33.03 | *** join/#debian hellues (n=hellues@hopper.cs.bilgi.edu.tr) |
| 01:33.05 | hellues | hey |
| 01:33.10 | hellues | i have a problem |
| 01:33.29 | hellues | aptitude: error while loading shared libraries: libapt-pkg-libc6.6-6.so.4.4: cannot open shared object file: No such file or directory |
| 01:33.45 | muh2000 | sc68cal: "ssh-keygen -t rsa" is what i did. |
| 01:33.46 | hellues | i cannot find this package it says it is virtual package of apt |
| 01:34.04 | hellues | it said aptitude depends this package |
| 01:34.08 | sc68cal | muh2000: If you want to be sure, download and run the audit tool |
| 01:34.26 | muh2000 | sc68cal: dowkd.pl ? |
| 01:34.32 | sc68cal | yep |
| 01:35.24 | hellues | how can i install this |
| 01:35.47 | muh2000 | sc68cal: ok it says that the keys have fail and aids (weak key ). thnx :) |
| 01:36.06 | sc68cal | muh2000: >:3 |
| 01:36.07 | hellues | apt |
| 01:36.26 | Riotblade | Okay, it looks like trickle was crashing Iceweasel. Anyone have any trickle alternatives? |
| 01:36.57 | muh2000 | sc68cal: i dont know that smilie. |:+() |
| 01:38.06 | *** join/#debian spx2 (n=spx2@89.37.70.170) |
| 01:38.25 | Tramp | Sorry, but what is this dowkd.pl good for? May have false positives, may have false negatives and even if the positive is right, you may be in trouble - what's the point? |
| 01:38.26 | ericrw | Riotblade: trickle the voip phone? |
| 01:38.29 | sc68cal | muh2000: http://www.encyclopediadramatica.com/Lion |
| 01:38.46 | pythonic | Tramp: seems it's to help the black hats :-) |
| 01:38.58 | Riotblade | ericrw, the bandwidth management app |
| 01:40.25 | Tramp | I think, there are just 32k possible keys. The fact, that this tool has 260k hashes may be due to the fact, that it tests different key-representations |
| 01:40.36 | ericrw | runs to grab some energy drinks, coffee, and anything else for the all-nighter. |
| 01:41.18 | *** part/#debian _ZeuZ_ (n=zeuz@2-90-17-190.fibertel.com.ar) |
| 01:42.03 | *** join/#debian tecky (n=tecky@cpe-74-67-30-26.nycap.res.rr.com) |
| 01:42.17 | muh2000 | sc68cal: :D is there also a smilie for the picture where the lion is already in the car? |
| 01:44.30 | eljefe_ | In my KDE, a fat32 flashdrive is mounting w/o giving me any permissions; how can i fix this? |
| 01:45.19 | *** join/#debian gm152 (n=glen@d150-14-63.home.cgocable.net) |
| 01:45.35 | *** join/#debian TSC (n=user@ppp59-167-133-134.lns3.mel6.internode.on.net) |
| 01:45.36 | pythonic | eljefe_: are you in floppy group? |
| 01:46.21 | *** join/#debian detcjw (n=carrick@c-65-96-179-54.hsd1.ma.comcast.net) |
| 01:46.30 | eljefe_ | not sure, how to check? |
| 01:46.41 | sc68cal | eljefe_: type "id" |
| 01:46.44 | eljefe_ | well, i'll just add myself, no hurt there |
| 01:46.45 | eljefe_ | ok |
| 01:46.51 | eljefe_ | yes |
| 01:47.28 | *** join/#debian grendal_prime (n=shawng@12.44.166.53) |
| 01:47.31 | eljefe_ | sc68cal: yes i am in floppy group. |
| 01:47.42 | eljefe_ | This is with the HAL automount |
| 01:47.48 | grendal_prime | wow thats one hell of a thing to see when you first log on |
| 01:47.57 | grendal_prime | "im in floppy group" |
| 01:48.04 | vraa_ | lol |
| 01:48.16 | eljefe_ | lol |
| 01:48.42 | grendal_prime | so anyway...anyone using a dell precision m4300 by any chance? |
| 01:48.46 | Supaplex | how fat do you have to be before you end up in the "floppy group"? |
| 01:49.00 | grendal_prime | or just ...hell floppy... |
| 01:49.11 | eljefe_ | fat32? |
| 01:49.43 | grendal_prime | who cares...thing is...when thats the first thing you see..you wonder...what the hell channel did i just log into?? |
| 01:50.18 | *** join/#debian CaNeS (n=Linux@bas4-montreal02-1096736385.dsl.bell.ca) |
| 01:51.07 | grendal_prime | need to fix a drink..brb..I would shure love to here someone..ANYONE say "ya i got a dell precision m4300..and debian lenny runs great on it!!" |
| 01:51.26 | Supaplex | !screw dell |
| 01:51.35 | *** join/#debian techrush (n=techrush@adsl-75-4-17-193.dsl.irvnca.sbcglobal.net) |
| 01:52.47 | *** join/#debian PaulTT (n=chatzill@adsl-76-240-60-56.dsl.hstntx.sbcglobal.net) |
| 01:53.26 | grendal_prime | ya..well...thats not EXACTLY what i wanted to hear. |
| 01:54.15 | Supaplex | grendal_prime: are you having issues with it, or is this a purchasing decesion? |
| 01:54.49 | grendal_prime | thing is..work gave me and my coworker a blank check (for the most part) on two laptops. I didnt have to to reasearch, he did the purchase and now its sitting on the desk infront of me... |
| 01:55.26 | stew | grendal_prime: /msg dpkg laptops |
| 01:55.31 | *** part/#debian TSC (n=user@ppp59-167-133-134.lns3.mel6.internode.on.net) |
| 01:55.34 | *** join/#debian gunthr (n=gunthr@c-71-195-12-226.hsd1.mn.comcast.net) |
| 01:55.37 | grendal_prime | i started a lenny install on it (he read that kubuntu is supposed to work great on it) but i dont like any of the boontoos. |
| 01:55.50 | grendal_prime | thanks stew |
| 01:56.19 | grendal_prime | msg dpkg laptops |
| 01:56.26 | tecky | anyone have any experience running Cedega and World of Warcraft on deb ? |
| 01:57.08 | Supaplex | ask cedega. it's a commercial thing isn't it? |
| 01:57.25 | tecky | i've asked in there and gotten no response |
| 01:57.37 | Supaplex | I think winehq smoked the cedega code releases ago. |
| 01:57.45 | tecky | even w/o cedega involved |
| 01:57.58 | tecky | i just wanna know the problems w/ WoW |
| 01:58.00 | Supaplex | save for some propritary (c)protection code |
| 01:58.14 | Supaplex | tecky: try winehq.org, search under "appdb" |
| 01:58.27 | Supaplex | http://appdb.winehq.org iirc |
| 01:59.50 | ericrw | grendal_prime: if you wanted to run Linux on it, you should've bought their Linux systems... otherwise, 'good luck' |
| 01:59.54 | *** join/#debian jberg (n=johan@215.80-203-18.nextgentel.com) |
| 02:02.15 | Supaplex | grendal_prime: dell has a 30day return window (minus shipping). call their customer scv for more details. |
| 02:03.31 | *** join/#debian ericoo (n=eirc@AAmiens-754-1-31-53.w86-208.abo.wanadoo.fr) |
| 02:03.32 | ericoo | hi |
| 02:03.37 | ericoo | <PROTECTED> |
| 02:03.40 | ericoo | any idea why ? |
| 02:03.47 | Supaplex | dns resolution? |
| 02:03.52 | Supaplex | strace is your friend? |
| 02:04.00 | Supaplex | !start an mta war |
| 02:04.00 | dpkg | smail rulez |
| 02:04.09 | ericoo | strace ? |
| 02:04.09 | pythonic | smail sucks |
| 02:04.14 | peterS | smail hasn't been in debian for a long time |
| 02:04.15 | ericoo | i have no command line, thats the problem |
| 02:04.27 | Supaplex | try to ^C it |
| 02:04.29 | pythonic | apt-cache show smail |
| 02:04.32 | *** join/#debian techrush (n=techrush@adsl-75-4-17-193.dsl.irvnca.sbcglobal.net) |
| 02:04.40 | Supaplex | !+info smail woody |
| 02:04.41 | dpkg | Updating debian files... please wait. |
| 02:04.42 | ericoo | i hope for a timeout, but its stuck since 2 hours |
| 02:04.50 | peterS | hehe, yeah, it may have still been in woody |
| 02:05.15 | ericoo | control c do nothing, enter goes to next line |
| 02:05.16 | Supaplex | ericoo: do you show up 2 hours late to work? of course not. why did you wait that long? :P |
| 02:05.25 | pythonic | http://packages.debian.org/etch/smail |
| 02:06.00 | pythonic | what do you mean "of course not"? |
| 02:06.05 | ericoo | i can do nothing else |
| 02:06.07 | Supaplex | that 10oz medium rib eye steak hit the spot. |
| 02:06.22 | abrotman | murderer! |
| 02:06.22 | ericoo | it use to be 3mn long, and boot, but not today |
| 02:07.16 | Supaplex | abrotman: I sent that animal to a happy place. :P nonetheless, try eatting something that is/was not alive, or is/was not derrived from something alive. :) |
| 02:07.31 | abrotman | eww gross |
| 02:07.31 | grendal_prime | ya ericrw that would have been my choice, however, like i say i didnt have time to do the picking, so ill look into this thing for now. I have heard some success storys. but the tuxmobil doesnt list it anywhere... |
| 02:08.50 | Supaplex | !tell ericoo -about single |
| 02:09.09 | grendal_prime | all the precissions are like m90's m70's ? whatever the hell those are..im looking a 4300 in the face...im wondering if |
| 02:09.12 | grendal_prime | well..hmm |
| 02:09.48 | l3jj | Does anyone have a good script, ubuntu ran and redid all the keys for ssh (both in .ssh files) and the host key. While I realize that can break things, it would be nice to have something that is 100% done (other then ssl certs) |
| 02:10.04 | *** join/#debian sveiss (n=sveiss@host81-158-218-65.range81-158.btcentralplus.com) |
| 02:10.10 | *** join/#debian jaggz- (i=brandon@dsl081-044-035.lax1.dsl.speakeasy.net) |
| 02:10.22 | abrotman | l3jj: this is #debian |
| 02:10.24 | grendal_prime | this looks promissing though http://hardware4linux.info/system/1407/ |
| 02:10.26 | *** join/#debian snogglethorpe (n=snogglet@fencepost.gnu.org) |
| 02:10.56 | l3jj | abrotman: Yes I know, all my servers are debian, all my workstations are ubuntu. |
| 02:11.18 | stew | l3jj: so you are looking for a script like the one in ubuntu? |
| 02:11.24 | abrotman | l3jj: oh .. you want the ubuntu script for debian ? |
| 02:11.41 | l3jj | abrotman: I was saying they made it much easier, install one package, and it cleaned everything. I was wondering if someone wrote a shell script for debian? |
| 02:11.47 | PaulTT | Hi all, I'd like to apply the patch provided at wiki.debian.org/sslkeys/ to test PEM files, however my attempt at pasting that into a file and running patch -p0 < dowkd.pl.patch did not work. How can I apply that patch? |
| 02:11.53 | *** join/#debian susanne-- (n=rnbwpnt@adsl-76-233-98-121.dsl.rcsntx.sbcglobal.net) |
| 02:12.00 | stew | l3jj: whatever script was used in ubuntu would presumably work in debian |
| 02:12.10 | susanne-- | will the stock debian kernel support at least read-only hfs+ journaled (new macos format)? |
| 02:12.21 | abrotman | or fail horribly ... but you'll know quickly :) |
| 02:12.32 | stew | susanne--: do you know which upstream kernel supports it? |
| 02:12.34 | l3jj | thank you, do I have to regen the host key, or just keys that are used for auth via public/private key? |
| 02:12.46 | sc68cal | both |
| 02:12.52 | abrotman | susanne--: i believe etch's kernel does |
| 02:13.07 | abrotman | in RO mode |
| 02:13.09 | PaulTT | l3jj: My understanding is that you'd need to regenerate the host keys. See http://wiki.debian.org/SSLkeys |
| 02:13.27 | susanne-- | stew: not off the top of my head, i've seen noises that 2.4 does, RO is fine, this is just to convert to linux, mounds of existing data |
| 02:13.42 | dpkg | Package 'smail' does not exist. |
| 02:13.44 | stew | susanne--: if 2.4 does, then any current debian kernel would |
| 02:14.10 | abrotman | susanne--: grep HFS /boot/config-`uname -r` |
| 02:14.35 | susanne-- | i just don't have a box i can dedicate to testing it before dedicating a machine to a real install, i don't want to do it, have it fail, and then have to reinstall macos to have access to my data |
| 02:15.30 | *** join/#debian Hoxzer (n=dsadsad@dsl-hkigw7-fe1df900-39.dhcp.inet.fi) |
| 02:15.47 | *** join/#debian morficus__ (n=morficus@69.0.44.52) |
| 02:16.00 | CaT[t3] | oh sweet jesus. 157 keys left to go. |
| 02:16.04 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 02:16.28 | *** join/#debian faw0 (n=felipe@200-103-244-231.ctame705.dsl.brasiltelecom.net.br) |
| 02:16.35 | *** join/#debian morficus__ (n=morficus@69.0.44.52) |
| 02:16.50 | *** join/#debian extor (i=xtor@c-24-1-247-223.hsd1.il.comcast.net) |
| 02:17.24 | *** join/#debian jhulst (n=jhulst@unaffiliated/jhulst) |
| 02:17.48 | susanne-- | well then, here goes nothing |
| 02:17.58 | ericoo | can a server work without exim4 ? |
| 02:18.10 | CaT[t3] | as long as it does no mail. |
| 02:18.13 | abrotman | yes, but you should have an SMTP server of some sort |
| 02:18.44 | ericoo | it doesn not need one |
| 02:20.20 | Ryan52 | ericoo: you probably need cron emails |
| 02:20.47 | abrotman | ericoo: the system uses email to send root notes if bad things happen .. wouldn't you like to know about those things? |
| 02:20.49 | ericoo | well, i got a shell as signle mode user know, but what to do to skip that exim4 MTA hang on boot ? |
| 02:21.08 | CaT[t3] | 161 keys |
| 02:21.23 | heroxbd | Hello, if I want to change my i386 debian to AMD64, do I have to reinstall the entire system? |
| 02:21.47 | Ryan52 | heroxbd: yes |
| 02:21.50 | *** join/#debian abdoreza (n=a@85.9.75.156) |
| 02:21.59 | abdoreza | hi guys:D |
| 02:22.00 | *** join/#debian omar (n=omar@unaffiliated/omar) |
| 02:22.17 | *** join/#debian morficus__ (n=morficus@69.0.44.52) |
| 02:22.25 | *** join/#debian ggeecko (n=ggeecko@c-76-97-63-229.hsd1.ga.comcast.net) |
| 02:22.34 | grendal_prime | ericoo: thing is..its nice if it can email you information about the system status |
| 02:22.58 | grendal_prime | i mean like embedded things..thats kinda asking alor of them.. |
| 02:23.32 | grendal_prime | but hell i work on a dom based project..it sends sysloginfo..emails...just about everything from less than a 250 meg install |
| 02:23.33 | ericrw | ericoo: it is hanging on boot because your hostname probably isn't in /etc/hosts (most likely) |
| 02:23.49 | grendal_prime | CHRIST whats with all the erics?? |
| 02:24.14 | ericrw | its a conspiracy |
| 02:24.42 | *** join/#debian akafurious (n=akafurio@CPE00121713f42b-CM000a73a87e26.cpe.net.cable.rogers.com) |
| 02:24.43 | grendal_prime | aparent...ly |
| 02:25.21 | CaT[t3] | hmm |
| 02:25.28 | CaT[t3] | wonders if that perl script is conclusive. |
| 02:25.44 | Ryan52 | <PROTECTED> |
| 02:25.48 | stew | CaT[t3]: it is not |
| 02:25.57 | grendal_prime | i was thinking it was ..a like visual quark or something...was like man this eric is working on an awfull lot |
| 02:26.14 | CaT[t3] | stew: drat. back to 161 keys then |
| 02:26.34 | *** join/#debian V4Nelle (n=eisai_pa@adsl15-228.lsf.forthnet.gr) |
| 02:27.06 | V4Nelle | guys if i have a i386 debian system on core 2 duo which kernel must i apt-get? |
| 02:27.17 | abrotman | V4Nelle: either -686 or -amd64 |
| 02:27.20 | ericrw | grendal_prime: I dropped using aliases a few years ago. |
| 02:27.26 | abrotman | or even -486 |
| 02:27.45 | *** join/#debian morficus__ (n=morficus@69.0.44.52) |
| 02:27.56 | V4Nelle | ok...thx abrotman |
| 02:28.31 | *** join/#debian elagar (n=elagar@200.8.162.50) |
| 02:28.40 | CaT[t3] | I think it's time to whip out sed. |
| 02:29.55 | *** join/#debian tavito (n=tavo@200-55-104-195.dsl.prima.net.ar) |
| 02:29.57 | Maliuta | CaT[t3]: sed whips you |
| 02:30.11 | pythonic | in soviet russia? |
| 02:30.38 | SerajewelKS | why would IPv6 be working on one of my boxen but IPv4 simply not work at all? |
| 02:30.38 | heroxbd | I am confused, why -amd64 kernel entered i386 repository? |
| 02:30.39 | elagar | hi... |
| 02:30.52 | *** join/#debian tavito (n=tavo@200-55-104-195.dsl.prima.net.ar) |
| 02:30.53 | Maliuta | pythonic: no, in post soviet Ukraine |
| 02:31.01 | SerajewelKS | i've configured it to a static address on my LAN. other boxes can ping each other but no box can ping this one or vice-versa, all on the same switch. |
| 02:31.04 | dondelelcaro | heroxbd: because people run i386 on amd64. |
| 02:31.04 | SerajewelKS | ping6 works fine however. |
| 02:32.04 | heroxbd | dondelelcaro: I think running i386 apps on amd64 is insufficient. |
| 02:32.20 | SerajewelKS | no iptables rules are matching |
| 02:32.26 | SerajewelKS | so iptables isn't filtering anything |
| 02:32.55 | elagar | i need help.. i buy a AMD64 X2 .. but my installed system is an i386... what should i do? i have a 2.6 kernel compiled with support to amd64 .. can i run like this.. or do i need to reinstall all the system to an debian-AMD64? |
| 02:33.00 | heroxbd | SerajewelKS: maybe you do some sniffer, e.g. with wireshark. |
| 02:33.10 | *** part/#debian sveiss (n=sveiss@host81-158-218-65.range81-158.btcentralplus.com) |
| 02:33.13 | *** join/#debian ViViViPirePengy (n=orangero@kcs4u.com) |
| 02:33.13 | SerajewelKS | heroxbd: i tried that, but i just figured it out |
| 02:33.14 | Lagbolt | elagar, depends. . . do you want to run debian 64 |
| 02:33.17 | ViViViPirePengy | hidey hodey |
| 02:33.19 | CaT[t3] | elgar: you can continue to use i386 happily or you can do a reinstall. your choice. |
| 02:33.21 | SerajewelKS | heroxbd: box has two NICs, had the cable in the wrong one :X |
| 02:33.53 | ViViViPirePengy | http://forums.debian.net/viewtopic.php?t=26762 |
| 02:33.59 | heroxbd | SerajewelKS: Then how did the ipv6 work? |
| 02:34.15 | elagar | Lagbolt: I use games, compiz, and music applications.. |
| 02:34.16 | SerajewelKS | heroxbd: because both interfaces are configured and it's a router |
| 02:34.27 | SerajewelKS | heroxbd: it was routing my connection to eth0 over eth1 |
| 02:34.34 | abrotman | ViViViPirePengy: ctrl-alt-f1 ? |
| 02:34.40 | ViViViPirePengy | dont work |
| 02:34.48 | Lagbolt | elagar, yeah? whats your point? so do lots of people. you dont need to run a 64bit kern to do that |
| 02:34.56 | abrotman | ViViViPirePengy: see if your window manager is blocking it |
| 02:35.03 | *** join/#debian susanne-- (n=rnbwpnt@adsl-76-233-98-121.dsl.rcsntx.sbcglobal.net) |
| 02:35.11 | susanne-- | well scratch that. blah. i HATE living here |
| 02:35.18 | ViViViPirePengy | abrotman: where would i look im running kdm |
| 02:35.23 | stew | i didn't think that it was possible for the WM to grab those keys |
| 02:35.25 | abrotman | no idea .. don't use kde |
| 02:35.38 | Nyle | hmm |
| 02:35.40 | Nyle | what about kde? |
| 02:35.47 | *** join/#debian kalpik (n=kalpik@unaffiliated/kalpik) |
| 02:35.55 | abrotman | stew: i thought it was .. but blah |
| 02:36.02 | elagar | Lagbolt: ok.. but if i use an 64Bits kernel the nvidia driver dont run... them i need to run all the system in 32bits? |
| 02:36.03 | stew | i guess i could try |
| 02:36.03 | ViViViPirePengy | Nyle: scroll up to my debian forums link |
| 02:36.09 | Nyle | I'm doing that |
| 02:36.12 | ViViViPirePengy | :) |
| 02:36.20 | stew | but i'm not going to |
| 02:36.21 | *** join/#debian sc68cal (n=sc68cal@c-76-99-52-119.hsd1.pa.comcast.net) |
| 02:36.25 | abrotman | hehe |
| 02:36.29 | Nyle | hi stew |
| 02:36.48 | ViViViPirePengy | in 6 yrs of using debian never experienced this issue... so i dont even know where to look |
| 02:36.50 | ViViViPirePengy | lol |
| 02:36.55 | Lagbolt | elagar, if you run 32bit debian then run 32bit kern and 32bit nvidia |
| 02:37.05 | susanne-- | am i correct in guessing that attempting a businesscard install of testing over a mac mini airport card is a Bad Idea? since it apparently requires an ndiswrapper setup ... |
| 02:37.41 | Nyle | laughs |
| 02:37.55 | stew | i thougth airport was orinoco |
| 02:38.24 | abrotman | on PPC it's broadcom if it's airport extremee .. orinoco if airport .. and ipwxxxx if x86 |
| 02:38.24 | stew | this comes from no actual experience, mind you |
| 02:38.31 | abrotman | IIRC anyways |
| 02:38.35 | susanne-- | not in the intel mac minis, it's some kind of broadcom apparently. and i'm using wpa encryption, as well. |
| 02:38.57 | Nyle | ViViViPirePengy, the regular key combinations don't work? |
| 02:39.12 | ViViViPirePengy | nope not in X but out of X or using chvt # |
| 02:39.19 | Nyle | ViViViPirePengy, any wm? |
| 02:39.22 | ViViViPirePengy | neither side works |
| 02:39.34 | ViViViPirePengy | kdm and kde 3.5.9 |
| 02:39.58 | Nyle | hm.. any keyboard shortcuts in kde that maybe blocking those alt+ctrl+fkeys |
| 02:40.05 | Nyle | double check there, look in kcontrol |
| 02:40.13 | ViViViPirePengy | not that i know of i havent done any keymap mods |
| 02:40.22 | ViViViPirePengy | let me check real quick |
| 02:40.59 | *** join/#debian sc68cal_ (n=sc68cal@c-76-99-52-119.hsd1.pa.comcast.net) |
| 02:41.28 | *** part/#debian abdoreza (n=a@85.9.75.156) |
| 02:41.46 | mrec | hi, does anyone know an application for measuring the window size of an application? (something like kruler but smaller) |
| 02:41.52 | Nyle | ViViViPirePengy, just for the hell of it, install a minimal wm, like a *box, and update-alternatives --config x-session-manager select it temprarily and do startx, without even going through kdm |
| 02:42.05 | Nyle | ViViViPirePengy, see if the keys work then |
| 02:42.25 | *** join/#debian nwf (n=nwf@a.rr.ietfng.org) |
| 02:42.25 | abrotman | mrec: xwininfo |
| 02:42.51 | d34df00d | Hi there! I need some help with basic networking layout |
| 02:43.10 | Nyle | !tell d34df00d -about ask |
| 02:43.51 | *** join/#debian lilkid (n=admin@87-194-38-230.bethere.co.uk) |
| 02:43.55 | mrec | abrotman: thanks :-) |
| 02:43.56 | *** join/#debian aib (n=__aib@pdpc/supporter/basic/aib) |
| 02:44.41 | d34df00d | So, I run debian unstable/testing, I'm quite new to it all, and here is my /etc/network/interfaces: http://rafb.net/p/DKt61925.html |
| 02:44.50 | lilkid | is there any way to reset theme settings for a user account? |
| 02:45.17 | lilkid | as in, an account has an issue forcing it to go back to the login page after flashing black |
| 02:45.52 | d34df00d | When I run ifup eth2, I get this output of ifconfig: http://rafb.net/p/HucdAN30.html, but after a few seconds it changes to: http://rafb.net/p/HUIF0Q37.html and interface becomes unusable. |
| 02:45.58 | d34df00d | What is wrong? |
| 02:46.24 | extor | what exactly is the "vserver" addon to the linux kernel? And what does it have to do with xen, should I try it on a test box? |
| 02:46.39 | *** join/#debian itomato (n=itomato@66-224-246-146.atgi.net) |
| 02:47.07 | *** join/#debian DawnLigh1 (n=dawn@62.56.253.195) |
| 02:47.15 | abrotman | d34df00d: which version of debian ? |
| 02:47.37 | d34df00d | abrotman: 4.0r3 with unstable a testing allowed. |
| 02:47.46 | abrotman | huh? |
| 02:47.50 | abrotman | so you're running unstable |
| 02:48.16 | abrotman | d34df00d: check for other utilities that can assign IPs like network-manager etc |
| 02:48.44 | d34df00d | abrotman: how could I do it? I haven't started it manually. |
| 02:48.50 | stew | network-manager wouldn't touch if if it was static |
| 02:48.53 | *** join/#debian morficus__ (n=morficus@69.0.44.52) |
| 02:49.05 | d34df00d | btw now it changed to http://rafb.net/p/mUcAuc39.html |
| 02:49.24 | abrotman | that's a failed dhcp attempt usually |
| 02:49.37 | stew | <PROTECTED> |
| 02:49.50 | *** join/#debian xxiao (n=chatzill@cpe-70-113-78-24.austin.res.rr.com) |
| 02:50.02 | d34df00d | abrotman: but the interface is static. |
| 02:50.05 | stew | d34df00d: show us the output of "ip a" |
| 02:50.09 | ViViViPirePengy | Nyle: ya i loaded fluxbox and just did a startx and it jumped into flux after doing the update-alternatives --config |
| 02:50.16 | d34df00d | stew: zeroconf isn't installed |
| 02:50.20 | ViViViPirePengy | so someting is up with kdm/kde |
| 02:50.22 | grendal_prime | grrrrrrrrrrrrrr bindshell |
| 02:50.27 | grendal_prime | what the hell is this? |
| 02:50.37 | ViViViPirePengy | as it stands right now it just prints capital letters |
| 02:50.49 | d34df00d | stew: http://rafb.net/p/VovL8J49.html |
| 02:51.03 | magyar | since this ssl fiasco, my ssh denylogs are through the roof |
| 02:51.51 | *** part/#debian lilkid (n=admin@87-194-38-230.bethere.co.uk) |
| 02:52.00 | *** mode/#debian [+l 821] by debhelper |
| 02:52.05 | abrotman | stew: i thought it was a private reserved .. not just for zeroconf |
| 02:52.20 | *** join/#debian simtower (n=simtower@unaffiliated/simtower) |
| 02:52.30 | abrotman | Automagic Private |
| 02:53.06 | stew | abrotman: all different names for the same thing, which is rfc3927 |
| 02:53.21 | zythmer | extor: vserver and xen basically do the same thing but in different ways. A vserver-xen kernel is one that lets you run vservers inside of xen domains. http://en.wikipedia.org/wiki/Comparison_of_virtual_machines |
| 02:53.41 | sword | Assuming you're running ssh only, would denying keyed logins prevent the vuln? |
| 02:53.45 | extor | Oh gosh |
| 02:54.02 | extor | which one is more resource efficient, ie faster? Xen or vserver? |
| 02:54.10 | *** join/#debian tr00 (n=tr@adsl-76-229-88-252.dsl.pltn13.sbcglobal.net) |
| 02:54.14 | extor | Oh wait..they are not separate are they |
| 02:54.15 | stew | sword: no, becuase the host keys might be vulnerable |
| 02:54.22 | findlay | sneezes at Supaplex |
| 02:55.20 | findlay | !rfc3927 |
| 02:55.21 | OmiKrOn | supaplex rulez |
| 02:55.22 | *** join/#debian simbioz (n=shu4l0@pc-123-172-83-200.cm.vtr.net) |
| 02:55.29 | ericrw | sword: it would prevent random people from scanning, and logging in without a password..... |
| 02:55.33 | Supaplex | fro sure |
| 02:55.41 | ericrw | sword: but you would be vulnerable to Man-in-the-middle attacks |
| 02:55.47 | OmiKrOn | not you, the game |
| 02:55.54 | Supaplex | !supaplex |
| 02:55.54 | dpkg | it has been said that supaplex is a classic game from the m$dos days featuring 111 levels of insanity. Now it's freeware, and has atleast 11 level seperate sets of (111) levels. a super hero one man support team, or see http://www.elmerproductions.com/sp/dlinst.html |
| 02:57.03 | Supaplex | dpkg: supaplex =~ s/atleast/somewhere around/ |
| 02:57.04 | dpkg | OK, Supaplex |
| 02:57.11 | zythmer | extor: They are separate. From what I've read, vserver is probably more efficient but Xen is better at isolation. Those two are probably the most popular used by VPSes (virtual private server) hosts. |
| 02:57.28 | extor | Ok so vserver is sort of a likea chroot env |
| 02:57.30 | ericrw | zythmer: I'd think that openvz is more popular than vserver... |
| 02:57.32 | extor | kinda like BSD jails? |
| 02:57.40 | d34df00d | Very strange, I've added the gateway pointing to computer's peer address in ppp0 to the /etc/network/interfaces, and now everything works. |
| 02:57.41 | extor | Is vserver = BSD jails in most respects? |
| 02:57.45 | ericrw | extor: yes, vserver is like bsd jails... xen provides actual virtualization |
| 02:57.46 | zythmer | ericrw: When I was looking at VPSes, I mostly saw vserver and xen. |
| 02:59.06 | *** join/#debian master_o1_master (n=master_o@p549D4CB8.dip.t-dialin.net) |
| 02:59.16 | *** join/#debian R|chy (n=richy@201.210.237.222) |
| 02:59.53 | *** join/#debian Cabal (n=bconway@unaffiliated/cabal) |
| 02:59.56 | extor | WARNING: The following packages cannot be authenticated! |
| 02:59.56 | extor | <PROTECTED> |
| 03:00.01 | extor | Should I be concerned? |
| 03:00.12 | ericrw | zythmer: interesting... at least when I started doing Xen hosting, the major competition was from virtualizo (openvz) |
| 03:00.16 | *** part/#debian R|chy (n=richy@201.210.237.222) |
| 03:00.19 | zythmer | ericrw: Actually, I think you're right. I remember the proprietary server I saw a lot was Virtuozzo and that's tied to openvz. So you're right, I mostly saw openvz and xen (it was a while ago :) |
| 03:00.29 | *** join/#debian hrbllv (n=hrbllv@cpe-24-165-160-245.neo.res.rr.com) |
| 03:00.31 | extor | I think it is virtuozzo not virtualizo lol |
| 03:00.46 | ericrw | extor: yeah.. I don't use it, so I don't have to spell it right |
| 03:00.53 | *** join/#debian pipeline (i=08537375@adsl-71-156-82-59.dsl.ipltin.sbcglobal.net) |
| 03:01.21 | *** join/#debian felix_da_catz (n=felix_da@c-76-31-32-109.hsd1.tx.comcast.net) |
| 03:01.26 | extor | I have never used BSD jail myself, for a webhosting LAMP box is vserver more suited(to prevent root sploits) than the xen..would xen be overkill in this case? |
| 03:01.56 | *** join/#debian lunaphyte_ (n=lunaphyt@unaffiliated/lunaphyte) |
| 03:02.45 | findlay | well, might even xen might be susceptible to exploits? There is no absolute security, only paranoia |
| 03:03.08 | findlay | dons his aluminum cap |
| 03:04.08 | *** join/#debian kryptoz (n=kryptoz@221.135.191.222) |
| 03:04.10 | extor | shakes his head at findlay and sighs |
| 03:04.41 | susanne-- | according to one thing i found, the intel mac mini contains an atheros wireless nic |
| 03:05.08 | susanne-- | i'm thinking, still, bad idea to attempt a business card install over it with wpa |
| 03:05.39 | ericrw | extor: with xen, many of my customers use kernel modules that they wouldn't be able to use under vserver... also, xen's isolation really does make it more secure. It does also bring some problems with it. |
| 03:06.06 | *** join/#debian lantha1 (n=lanthan@pD9EA26BF.dip0.t-ipconnect.de) |
| 03:06.14 | extor | kernel modules such as what? Any examples? |
| 03:06.27 | extor | Yeah one problem is Xen probably sucks up some overhead |
| 03:06.32 | ericrw | extor: for reference, a dual 8-core opteron can push about 100 guests on Xen, at least with four 1TB 7200rpm drives in RAID-1 |
| 03:06.49 | ericrw | (at that point, the disk IO is a greater problem than CPU or memory bandwidth) |
| 03:07.39 | extor | hmmmm |
| 03:07.58 | ericrw | er.. sorry, dual quad-core (8 cores total) |
| 03:08.06 | extor | But vserver is more efficient cuz it has zero emulation |
| 03:08.59 | *** join/#debian shellito (n=kvirc@200.122.229.14) |
| 03:09.02 | *** join/#debian Rusty1 (n=Rusty1@cpe-72-226-109-62.nycap.res.rr.com) |
| 03:09.27 | *** join/#debian braydon (n=braydon@68-190-217-86.dhcp.psdn.ca.charter.com) |
| 03:09.28 | epsilon | xen's not emulaton either |
| 03:10.13 | *** join/#debian alvarezp (n=alvarezp@201.139.193.235) |
| 03:10.24 | Ryan52 | I heard that xen doesnt work in lenny. Is this true? |
| 03:10.40 | *** join/#debian XTR-III (i=94752345@216.19.191.191.novuscom.net) |
| 03:10.50 | epsilon | dunno, test it |
| 03:11.08 | *** join/#debian thechef (n=testi@217-162-41-17.dclient.hispeed.ch) |
| 03:11.35 | ericrw | extor: well, xen doesn't exactly 'emulate' either. With both, you're running all the processes and services of the OS, just that Xen gets its own kernel per guest (which uses a small amount of RAM). The Linux kernel sits in Ring-1 which makes it slightly slower than vserver which stays in ring-0 but its marginal. |
| 03:12.50 | ericrw | extor: the biggest difference, other than security (xen wins here), is that with vserver you don't allocate dedicated memory resoruces, its pooled with the host system. |
| 03:13.19 | *** join/#debian morficus__ (n=morficus@69.0.44.52) |
| 03:13.41 | zythmer | extor: I've used vserver and xen on a local machine. With Xen, you can treat like separate machines (own IPtables rules etc). With vserver, I had to write rules in the main computer's firewall to accomodate vserver instances. |
| 03:13.42 | ericrw | well, you can dedicate memory resources, but it can be pooled |
| 03:14.01 | *** join/#debian ``Ghostface_Kill (n=localhos@200.188.244.164) |
| 03:14.02 | ericrw | zythmer: right, because its a single kernel. |
| 03:15.53 | *** join/#debian Hoxzer (n=dsadsad@dsl-hkigw7-fe1df900-39.dhcp.inet.fi) |
| 03:16.27 | *** join/#debian lunaphyte_ (n=lunaphyt@unaffiliated/lunaphyte) |
| 03:19.20 | *** join/#debian [intra]lanman (n=lanman@75-105-17-160.cust.wildblue.net) |
| 03:20.36 | *** join/#debian olivierk_ (n=olivier@olivierk.org) |
| 03:21.16 | *** join/#debian dserban (n=dserban@S0106000c4144ffff.ok.shawcable.net) |
| 03:21.41 | *** join/#debian obnauticus (n=obnautic@c-67-160-187-7.hsd1.wa.comcast.net) |
| 03:24.33 | ViViViPirePengy | Nyle: got it now.. seems like there was a corrupt .kde file so i did a dpkg-reconfigure kde-core and deleted the .kde from ~ and now works fine |
| 03:24.44 | *** join/#debian phrozen77 (n=phrozen7@unaffiliated/phrozen77) |
| 03:26.09 | *** join/#debian H2OyJaBoN (n=unix@unaffiliated/h2oyjabon) |
| 03:26.12 | *** join/#debian jair (n=jair@adsl-75-34-22-7.dsl.chcgil.sbcglobal.net) |
| 03:26.18 | *** join/#debian pyrohotdog (n=aaron@98.145.91.254) |
| 03:26.47 | jair | guys, is there a room in IRC for ruby and rails? |
| 03:26.49 | pyrohotdog | How do I edit the sessions menu? For some reason I have two fluxbox entries, and two gnome entries. |
| 03:27.24 | zythmer | ericrw: Do you use the amd/intel hardware extensions with xen? My xen computer is too old to have those CPU extensions. |
| 03:27.33 | *** join/#debian SR71-Blackbird (n=nirvana@unaffiliated/sr71-blackbird) |
| 03:27.54 | ericrw | zythmer: no, I don't. I would only need them for Windows, and we don't do that, typically |
| 03:29.16 | H2OyJaBoN | pyrohotdog, you have to put files in /usr/share/xsession |
| 03:29.20 | H2OyJaBoN | anything like fluxbox.desktop |
| 03:29.34 | H2OyJaBoN | thie file really are script to execute the "desktop" =) |
| 03:29.48 | jair | does anyone knows about a good channel where people develop with ruby and rails on debian? |
| 03:29.55 | jair | I am checking in google now |
| 03:30.31 | pyrohotdog | Well there are only two files in /usr/share/xsessions... |
| 03:30.52 | jair | nevermind I ound it |
| 03:30.54 | jair | found it |
| 03:31.46 | *** join/#debian daya (n=daya@202.79.37.177) |
| 03:32.03 | H2OyJaBoN | pyrohotdog, you have to create your files for each desktio manager |
| 03:32.14 | H2OyJaBoN | 1 for fluxbox, 1 for kde , 1 for gnome, etc |
| 03:32.15 | *** join/#debian x3on (n=compost@CPE-124-178-56-133.wa.bigpond.net.au) |
| 03:32.31 | *** join/#debian JuanCraft (n=shellito@200.122.229.14) |
| 03:32.40 | *** join/#debian hoofman (n=jamie@74-130-192-213.dhcp.insightbb.com) |
| 03:33.01 | pyrohotdog | I understand that...but on my GDM, before I login, and click "Session", there are two entries for each Gnome and Fluxbox, but only one file for each. |
| 03:33.28 | *** part/#debian ViViViPirePengy (n=orangero@kcs4u.com) |
| 03:34.35 | *** join/#debian atomiku (n=atomiku@cpc3-ipsw1-0-0-cust5.colc.cable.ntl.com) |
| 03:34.43 | Lagbolt | pyrohotdog, two eh, look in /usr/share/xsessions |
| 03:35.06 | Lagbolt | are there 2 in there? |
| 03:35.08 | Lagbolt | or 4? |
| 03:36.12 | Lagbolt | pyrohotdog, what is in those files? does it only have 1 entry in each? |
| 03:36.15 | pyrohotdog | There are 2. |
| 03:36.29 | pyrohotdog | One in each. |
| 03:36.29 | Lagbolt | 2 right, what are the 2 |
| 03:36.47 | pyrohotdog | fluxbox.desktop, gnome.desktop |
| 03:37.39 | extor | zythmer, were you able to compare performance between vservers and xen servers? |
| 03:38.39 | extor | wonders which one is best for a 2 gig ram LAMP box |
| 03:39.12 | *** join/#debian pipeline (i=bff33a9f@adsl-71-156-82-59.dsl.ipltin.sbcglobal.net) |
| 03:39.35 | pipeline | I am, like, so totally not, going to, like, disconnect. |
| 03:40.20 | obnauticus | err |
| 03:40.42 | obnauticus | does anyone here know how to mount a drive locally via smbfs/cifs? |
| 03:41.08 | ericrw | extor: personally, I recommend xen because its more flexible, if you decide that you want to move things to a dedicated box later, or if you later decide that you need per-guest iptables, openvpn, or anything else that might need kernel modules. |
| 03:41.10 | *** join/#debian martian67_ (n=martian6@S01060014bfdd953c.ed.shawcable.net) |
| 03:42.06 | *** join/#debian ehc (n=evan@wall.pacinfo.com) |
| 03:42.19 | *** join/#debian lanthan (n=lanthan@pD9EA264B.dip0.t-ipconnect.de) |
| 03:42.27 | extor | ericrw, I also notice that there is a xen+vserver kernel. I wonder how that would work out |
| 03:42.37 | ericrw | performance-wise, v-server will be faster. |
| 03:42.53 | extor | you could have xen running with 95% of your system RAM...and then in that Xen session run some vservers? That way the core of your OS is unrootable |
| 03:43.50 | *** join/#debian chickamade (n=aht@c-24-60-252-136.hsd1.ma.comcast.net) |
| 03:44.14 | ericrw | extor: well, xen only uses a very small faction of your RAM itself, though you will want to give your dom0 (management system) about 64-96MB of ram. |
| 03:44.25 | ericrw | and then your guests will use the unallocated RAM |
| 03:45.00 | *** join/#debian ehc (n=evan@wall.pacinfo.com) |
| 03:45.22 | *** join/#debian iateadonu1 (n=dan@60.209.78.150) |
| 03:45.23 | extor | yeah what I am looking for is a way to just "reformat" the xen machine after a potential rooting or hacking |
| 03:45.39 | extor | assuming the base system is untouched which I assume it usually will be |
| 03:46.07 | zythmer | extor: I think it would be a tougher call if you wanted to have lots of vservers/xen domains because the overhead may dominate. If you only want a couple, I would go with xen. |
| 03:46.38 | extor | yeah but with xen don't you have to specifically allocate a set amount of RAM per instance? |
| 03:46.48 | iateadonu1 | hi... still trying to connect usb0 PDA to debian. - both can ping each other and any other machine on the LAN. i'd like to rdesktop (or ssh) and to tunnel through debian to the Internet. can i have some keywords to google? |
| 03:46.54 | extor | whereas with vserver it is dynamically allocated on a sliding scale? |
| 03:47.14 | *** join/#debian Crayzie (n=zach@cpe-76-181-121-122.columbus.res.rr.com) |
| 03:47.39 | iateadonu1 | and links to good tutorials if possible. |
| 03:47.41 | ericrw | extor: with vserver it can be dynamically changed or even pooled, yes. |
| 03:49.38 | extor | but not with Xen? |
| 03:50.08 | *** join/#debian bullgard4 (n=detlef@p5B258E31.dip0.t-ipconnect.de) |
| 03:52.00 | *** mode/#debian [+l 813] by debhelper |
| 03:52.48 | ericrw | extor: not really, there is some support for memory ballooning but I don't suggest it |
| 03:52.50 | *** join/#debian JdGordon (i=jonno@rockbox/developer/JdGordon) |
| 03:53.32 | JdGordon | http://www.debian.org/releases/sarge/i386/ch05s01.html.en#boot-initrd suggests you can get the install going from an iso image on the hard disk... I've got the installer loaded from grub but now im stuckj |
| 03:54.07 | *** part/#debian detcjw (n=carrick@c-65-96-179-54.hsd1.ma.comcast.net) |
| 03:54.56 | extor | ya but with Xen if I make 2 virtual machines then I have to split my RAM in two..and if one has too much ram and the other two little ram I am screwed, right? |
| 03:55.12 | *** join/#debian kshah (n=kunalash@cpe-68-173-252-199.nyc.res.rr.com) |
| 03:56.26 | ericrw | extor: you can issue shutdown commands and reassign the memory. |
| 03:57.05 | kshah | I'm still having a bindrndc problem on bind9 restart... I can't find the reference i'm supposed to remove in the named.conf file or includes |
| 03:59.07 | *** join/#debian jaggz1 (i=brandon@dsl081-044-035.lax1.dsl.speakeasy.net) |
| 03:59.26 | extor | yeah but I cant leave it alone and expect it to handle memory intelligently--that is a minus with a meagre 2 gigs ram on the web server |
| 04:01.38 | *** join/#debian binarymutant (n=binarymu@adsl-074-183-082-037.sip.tys.bellsouth.net) |
| 04:02.00 | *** join/#debian acehigh (n=acehigh@c-68-35-81-216.hsd1.nm.comcast.net) |
| 04:02.04 | acehigh | sup everyone |
| 04:02.10 | *** join/#debian suki (i=1001@cm2.sigma7.maxonline.com.sg) |
| 04:02.18 | acehigh | anyone know why loading virtualbox in debian using apt-get will not produce a vboxdrv file? |
| 04:02.30 | acehigh | when I try to start my vbox it complains saying to modprobe vboxdrv and when I do it doesnt locate the file |
| 04:03.03 | acehigh | FATAL: Module vboxdrv not found. |
| 04:03.23 | suki | how do i configure static eth0 in my /etc/network/interfaces, as well as a static eth1 (with multiple virtual ip addresses), for example eth1:1, eth1:2 |
| 04:05.47 | *** join/#debian cahoot (n=radix@pdpc/supporter/active/cahoot) |
| 04:06.02 | *** join/#debian Kaell (n=none@146.187.130.93) |
| 04:06.20 | Kaell | how do i patch debian stable to remove ssh vulnerability? |
| 04:06.35 | CaT[t3] | it's an ssl vuln |
| 04:07.09 | *** join/#debian binseer (n=binseer@121.247.149.5) |
| 04:07.14 | CaT[t3] | see topic |
| 04:07.20 | Kaell | afaik, its an RSA key vulnerability, applicable to both ssl and ssh? |
| 04:07.31 | Kaell | ok |
| 04:07.33 | CaT[t3] | no. to ssl. ssh gets hit because it uses ssl. |
| 04:07.36 | *** join/#debian ehc (n=evan@wall.pacinfo.com) |
| 04:09.26 | stew | Kaell: to "patch" you need a new openssl. "aptitude update && aptitude upgrade" should get the fixed openssl, but then you have to replace any keys generated by the old openssl: /msg dpkg dsa1571 |
| 04:09.36 | *** join/#debian ehc (n=evan@wall.pacinfo.com) |
| 04:10.01 | Kaell | i have tried "sudo apt-get update, sudo apt-get dist-upgrade, sudo apt-get upgrade" and it has not updated it afaict |
| 04:10.23 | CaT[t3] | kaell: do you have the security repo in your sourcs.list? |
| 04:10.47 | *** join/#debian mogaal (n=agm@201.208.135.192) |
| 04:10.50 | *** part/#debian mogaal (n=agm@201.208.135.192) |
| 04:11.13 | *** part/#debian chickamade (n=aht@c-24-60-252-136.hsd1.ma.comcast.net) |
| 04:11.36 | stew | Kaell: show us the output of "apt-cache policy openssl" ; use a pastebin: /msg dpkg pastebin |
| 04:12.00 | *** mode/#debian [+l 805] by debhelper |
| 04:12.02 | *** join/#debian aurehman (n=chatzill@202.59.70.210) |
| 04:13.17 | Kaell | hmm, it looks like its upgraded to proper version then, maybe i just missed it in the list of things upgraded |
| 04:13.35 | *** join/#debian radius (n=cube@pdpc/supporter/active/radius) |
| 04:13.43 | Kaell | thanks |
| 04:13.50 | binarymutant | whats the openssl version without the vuln. ? 0.9.8g-10? |
| 04:14.05 | stew | binarymutant: /topic |
| 04:16.14 | *** join/#debian Hoxzer (n=dsadsad@dsl-hkigw7-fe1df900-39.dhcp.inet.fi) |
| 04:16.33 | aurehman | Hi.. I need to install gd 2.0.34 library in debian.. i download source and compile it.. but unable succeed.. anybody help me plz |
| 04:17.12 | *** join/#debian D0c5i5 (n=caldwell@cpe-75-185-102-97.insight.res.rr.com) |
| 04:17.31 | binarymutant | what does irssi display on the first tab when I join channels? I thought it was /topic but it's not... |
| 04:17.35 | *** join/#debian nse (i=leo@2011218646.rec.megazon.com.br) |
| 04:18.29 | stew | aurehman: why do you need that specific version of gd instead of the newer version that debian is currently shipping? |
| 04:18.59 | *** join/#debian meff (n=meff@70.85.129.236) |
| 04:19.10 | *** join/#debian ApOgEE- (n=ApOgEE@210.19.133.120) |
| 04:19.26 | aurehman | stew: ok.. i need new version.. but apt-get have 2.0 version... they don't have 2.0.34 or later version |
| 04:19.27 | stew | oh wait, it is only 2.0.33 in stable |
| 04:19.50 | stew | aurehman: /msg dpkg ssb |
| 04:20.32 | aurehman | ok |
| 04:20.55 | *** join/#debian Sweetandy (n=sweetand@c-24-22-132-246.hsd1.wa.comcast.net) |
| 04:20.58 | stew | aurehman: in stable currently is 2.0.33, if you need 2.0.34, you should backport it with the "/msg dpkg ssb" instructions |
| 04:21.23 | aurehman | stew: ok... how can i get 2.0.33 version |
| 04:21.32 | aurehman | as apt-get have 2.0 version |
| 04:21.47 | stew | aurehman: what package are you speicifically looking at in apt-get? |
| 04:22.26 | aurehman | apt-get install php5-gd |
| 04:22.38 | stew | !info php5-gd stable |
| 04:22.59 | dpkg | php5-gd: (GD module for php5), section web, is optional. Version: 5.2.0-8+etch10 (etch), Packaged size: 32 kB, Installed size: 160 kB |
| 04:23.09 | *** join/#debian tavito (n=tavo@200-55-105-93.dsl.prima.net.ar) |
| 04:23.15 | stew | aurehman: the current version is 5.2.0, what version do you need? |
| 04:23.57 | aurehman | stew: our developers used 2.0.33 version of gd |
| 04:25.25 | stew | aurehman: apt-get install php5-gd |
| 04:25.48 | stew | aurehman: php5-gd depends on libgd2-xpm |
| 04:25.52 | stew | !info libgd2-xpm stable |
| 04:25.54 | dpkg | libgd2-xpm: (GD Graphics Library version 2), section libs, is optional. Version: 2.0.33-5.2 (etch), Packaged size: 195 kB, Installed size: 616 kB |
| 04:26.05 | stew | aurehman: ^^^ it would install 2.0.33-5.2 |
| 04:26.27 | aurehman | stew: let me install it again and i'll show you phpinfo |
| 04:26.29 | *** join/#debian ggeecko (n=ggeecko@c-76-97-63-229.hsd1.ga.comcast.net) |
| 04:28.04 | *** join/#debian evilgold (n=evilgold@71-222-25-37.ptld.qwest.net) |
| 04:28.22 | *** join/#debian aardvarc (i=tgAardva@student25.student.nau.edu) |
| 04:28.48 | *** join/#debian alvarezp (n=alvarezp@201.160.204.223.cable.dyn.cableonline.com.mx) |
| 04:29.21 | Kaell | why when i delete my known_hosts file and go to 1 site and add the key, does it add 2 entries in known hosts? |
| 04:29.29 | Kaell | is one of them for myself, and the other for the new host? |
| 04:29.48 | Kaell | is there a way i can see whats in the 2 known_host entries? |
| 04:29.49 | aurehman | stew: i got this error while trying to install php5-gd... http://pastebin.com/d4f673750 |
| 04:31.11 | *** part/#debian ApOgEE- (n=ApOgEE@210.19.133.120) |
| 04:31.21 | stew | aurehman: oh, i wasn under the impression that you were running debian stable, but you are running debian testing or debian unstable |
| 04:31.49 | aurehman | stew: ohh... then what should i do? |
| 04:33.12 | *** join/#debian slackjr (n=slack@c9340f3b.virtua.com.br) |
| 04:33.17 | stew | aurehman: check the bts for your problems with exim4-daemon-light/exim4 |
| 04:33.28 | stew | aurehman: why are you running testing instead of stable? |
| 04:33.44 | *** join/#debian jaggz- (i=brandon@dsl081-044-035.lax1.dsl.speakeasy.net) |
| 04:33.59 | aurehman | stew: how can i check bts |
| 04:34.01 | aurehman | guide me |
| 04:34.06 | stew | aurehman: /msg dpkg bts |
| 04:34.31 | aurehman | -bash: /msg: No such file or directory |
| 04:34.35 | *** join/#debian seemawn (n=seemawn@p5DC2E658.dip.t-dialin.net) |
| 04:34.44 | stew | dpkg: tell aurehman about bts |
| 04:36.06 | *** join/#debian HellTiger (n=HellTige@p5B0CDF0A.dip.t-dialin.net) |
| 04:36.28 | *** join/#debian Muchikon (n=chatzill@201.240.119.69) |
| 04:36.29 | *** join/#debian simbioz (n=shu4l0@pc-123-172-83-200.cm.vtr.net) |
| 04:36.36 | *** join/#debian seemawn (n=seemawn@p5DC2E658.dip.t-dialin.net) |
| 04:40.39 | stew | aurehman: 'aptitude install php5-gd' is the command I'd recommend to install php5-gd on your machine |
| 04:41.40 | vraa_ | hey stew is there a significant difference between aptitude and apt-get? |
| 04:41.53 | vraa_ | i've been using both actually, some commands involved aptitude, some involved apt-get (most involved apt-get) |
| 04:42.00 | stew | vraa_: yes. aptitude is far better at resolving dependencies |
| 04:42.10 | stew | vraa_: /msg dpkg why apttitude |
| 04:42.18 | vraa_ | so am i just lucky that i've never encountered issues regarding dependencies? ever? |
| 04:42.19 | vraa_ | k |
| 04:42.42 | *** join/#debian markybob (i=markybob@unaffiliated/markybob) |
| 04:42.43 | nevyn | vraa_: yes |
| 04:42.50 | nevyn | vraa_: or you use stable |
| 04:43.05 | vraa_ | i did use stable for a few days, but it was kinda boring |
| 04:43.13 | craigevil | apt handles install depends just fine it just leaves more behind when you remove things |
| 04:43.14 | *** join/#debian jayaraj (n=jayaraj@121.247.149.5) |
| 04:43.15 | vraa_ | i kinda like it when i have to google for things :S |
| 04:43.24 | *** join/#debian webPragmatist (n=none@adsl-76-203-230-36.dsl.rcsntx.sbcglobal.net) |
| 04:43.31 | vraa_ | i have never removed anything, i just format and reinstall, so i guess i've never had a chance to run into trouble |
| 04:43.46 | vraa_ | so technically, aptitutude cleans up after apt-get's mess? |
| 04:43.54 | stew | vraa_: not necessarily, when upgrading an install of stable, complex dependency issues don't arise much. however, given a problem, apt-get generally finds an "easy way out", and often, people will be happy with that. in contrast, aptitude will generate many possibly ways to solve a problem, rank them, and present them all to you to choose from |
| 04:44.11 | vraa_ | wow that sounds fairly complex, yet wickedly cool |
| 04:44.21 | vraa_ | thanks, i'll use aptitude from now on, i'm reading the homepage now |
| 04:44.57 | vraa_ | is there a reason most FAQs and HOW-TO's use apt-get though? |
| 04:45.07 | vraa_ | aptitude is a fairly recent addition? |
| 04:45.22 | *** join/#debian Zap-W (i=zapw@87.69.59.32.cable.012.net.il) |
| 04:45.23 | stew | vraa_: you can also queue up a complex set of tasks by using the aptitude frontend, like 'upgrade this package, remove this one, purge this one, whatever you do don't let version a of package b be installed...' |
| 04:45.28 | stew | vraa_: not recent |
| 04:46.03 | stew | vraa_: http://changelogs.debian.net/aptitude has it at around 8 years old |
| 04:46.22 | vraa_ | 8 years! wow |
| 04:46.23 | Kaell | thank you for assistance chan, i'm all good now, cheers :) |
| 04:46.26 | *** join/#debian rats (n=rats@cpe-24-165-160-245.neo.res.rr.com) |
| 04:46.35 | vraa_ | then how come all the guides use apt-get? is there *something* apt-get is superior at? |
| 04:46.38 | *** join/#debian xbaez (n=xbaez@201.151.41.82) |
| 04:46.53 | stew | vraa_: becuase those guides need to be updated |
| 04:47.07 | pythonic | apt-get doesn't ask too many questions |
| 04:47.18 | stew | vraa_: currently there are still some things that apt-get can do that aptitude can't do, namely 'apt-get source' and 'apt-get build-dep' |
| 04:47.32 | aurehman | stew: i tried to install aptitude install php5-gd but now the gd library is not installing |
| 04:47.35 | vraa_ | oh! i just had to do that to install a game's lobby |
| 04:47.46 | aurehman | http://stage1.uraan.net/index.php |
| 04:47.51 | Zap-W | does anyone know if debian's openssl Vulnerability affects kerberos ? |
| 04:48.46 | Kaell | if its using just symmetric key, i'd guess no |
| 04:48.54 | susanne-- | still prefers apt-get. She hasn't yet really mastered aptitude. |
| 04:48.55 | Kaell | if its using the public key part, then i dunno |
| 04:49.19 | stew | aurehman: why isn't it installing? did you fix the exim4 problems? |
| 04:49.22 | Kaell | it is the public key system of ssl that was compromised afaik |
| 04:49.32 | *** join/#debian Decepticon (n=Deceptic@dhcp172173.rag-a.fsu.edu) |
| 04:49.40 | *** join/#debian linux_jones (n=djones@cpe-65-189-54-204.cinci.res.rr.com) |
| 04:49.44 | linux_jones | hello |
| 04:49.51 | aurehman | stew: no.. how to fix exim4 problems? |
| 04:49.57 | stew | Kaell: there wasn't a compromise, but any random data produced by the openssl library was predictable |
| 04:50.01 | stew | aurehman: did you check the bts? |
| 04:50.17 | Kaell | isnt that a compromise? |
| 04:50.30 | pythonic | it's a vulnerability |
| 04:50.31 | stew | Kaell: depending on how you define compromise, i guess |
| 04:50.32 | Kaell | a thing which makes a highly entropic thing for security reasons, not so entropic |
| 04:50.35 | Kaell | ok |
| 04:50.36 | susanne-- | no, it's a bug. |
| 04:50.50 | Kaell | its a bug which leads to a security compromise |
| 04:51.17 | Kaell | anyway, semantics |
| 04:51.21 | aurehman | stew: yes.. but my problem's solution is not there |
| 04:51.23 | Kaell | thanks for the help... and ciao |
| 04:51.34 | stew | Kaell: its a bug which makes brute forcing a key easier |
| 04:51.49 | Guerin | ... but probably still not easy |
| 04:51.49 | stew | aurehman: why are you running testing instead of stable? |
| 04:51.53 | Kaell | yes, we're all saying the same thing :) |
| 04:51.57 | pythonic | your 2048 bit key is now just 16 bits.. |
| 04:52.09 | susanne-- | actually, i'm curious about the practical implications. i don't use ssh keys for login authentication, only for session encryption. the upshot here would, i guess, be that my sessions are snoopable. altho since i use password authentication, it would also make the password snoopable, hrm. |
| 04:52.16 | streuner | Guerin: yes, if you using rsa :-P |
| 04:52.18 | Kaell | oh, actually, before i go.... this may be interesting for a network security class... does anyone know just how much easier it becomes? |
| 04:52.31 | pythonic | 2048 bit -> 16 bit |
| 04:52.34 | aurehman | stew: how can i check that this is stable or not? |
| 04:52.37 | pythonic | walk in the park |
| 04:52.46 | Guerin | pythonic: is that based on anything mathematical, or are you pulling numbers out of your arse? |
| 04:52.53 | Kaell | so if i try all 2^16 possible keys, on a non-updated system, then i get in right? |
| 04:53.06 | pythonic | seems the process id is the only entropy in the pool |
| 04:53.06 | *** join/#debian keitherz (n=keitherz@122.53.170.128) |
| 04:53.16 | Kaell | if they're not updated, and have key based authentication enabled |
| 04:53.19 | Kaell | without a passphrase |
| 04:53.19 | stew | aurehman: compare the installed version of libc6 to available versions on http://packages.debian.org/libc6 and see if it is newer than the libc6 in stable |
| 04:53.39 | susanne-- | guerin: the notice indicated that the keys were based on 16-bit random data, so 2048->16 is about right. |
| 04:53.57 | Guerin | ok |
| 04:54.02 | Guerin | i'm not going to take that as given |
| 04:54.18 | susanne-- | tho it indicated that in practice, it may have been something as simple as pid numbers, which aren't even 16-bit. |
| 04:54.32 | susanne-- | at least i think that was the notification. |
| 04:54.39 | susanne-- | anyway, it's out there. |
| 04:54.49 | Guerin | yeah, I've updated mine. |
| 04:54.53 | Guerin | already :) |
| 04:55.06 | stew | Guerin: afaik its bigger than 2^16 but believed to be in the range of 260k |
| 04:55.21 | susanne-- | the check script lists approx 260k keys |
| 04:55.40 | Guerin | ok, so that is pretty easy |
| 04:55.41 | stew | Guerin: but still something actually brute forcable by run of the mill hardware |
| 04:55.48 | Guerin | yeah |
| 04:55.49 | susanne-- | stew: yes. |
| 04:56.18 | stew | this also potentially affects 'strong' dsa keys used with broken openssl libraries |
| 04:56.49 | stew | since pubkey + crypted messages + guessable random data == private key, more or less ( aiui ) |
| 04:56.58 | susanne-- | the REAL pisser is that i have a now-broken ssl certificate i paid to have signed so thunderbird wouldn't bitch every time i connected to my imap server over ssl. now i have to pay again to have it re-signed. |
| 04:57.20 | *** join/#debian kingsley2 (n=taylor@ipv4-198-182-208-24.openaccess.org) |
| 04:57.26 | pythonic | susanne--: just check the fingerprint |
| 04:57.34 | *** join/#debian [gquit]bombadil (n=dana@CPE-70-94-44-157.wi.res.rr.com) |
| 04:57.35 | pythonic | when you use thunderbird.. |
| 04:57.42 | pythonic | and accept the cert permanently |
| 04:57.58 | susanne-- | i could get that to work in firefox, but not in tbird |
| 04:58.02 | pythonic | (after generating a new key) |
| 04:58.22 | susanne-- | it doesn't REALLY matter, i retired my imap server in favor of gmail anyway |
| 04:58.27 | pythonic | thunderbird here has that option |
| 04:58.42 | stew | susanne--: so your mail is guaranteed to be snooped |
| 04:58.43 | aurehman | stew: come to pm.. i need to talk you something personal |
| 04:59.00 | stew | oooh |
| 04:59.09 | streuner | !guidelines |
| 04:59.09 | dpkg | 1) Read the /topic, the FAQ, and google before asking us. 2) Don't ask to ask. Just ask. 3) Don't repeat; show that you have tried to help yourself by refining the question. 4) Reading docs (man/info pages, READMEs) is a worthwhile skill. Practice it. 5) Use /msg to talk to the bots (not the people). See <msg>. 6) Be polite and patient. 7) Paste on #flood or <paster>, not here. 8) No trolls or spam. |
| 04:59.10 | susanne-- | sounds kinky. do it in public. |
| 04:59.56 | susanne-- | anyway, the snooping is less the issue, i just didn't want the password compromised. |
| 05:00.35 | susanne-- | and at this point if i have to take the data mining to do away with the spam, i'll take that. |
| 05:00.55 | dondelelcaro | dunno; spamassassin is pretty good |
| 05:01.10 | susanne-- | even SA has limitations when you're throwing 100k a day at it. |
| 05:04.06 | Supaplex | gah. what utter BS This package must be built on a SPARC machine |
| 05:05.11 | Zap-W | "Note that this last point means that passwords transmitted over ssh to a server with a weak dsa server key could be compromised too" |
| 05:05.18 | Zap-W | why do they only mention dsa keys |
| 05:05.20 | Zap-W | not rsa |
| 05:05.27 | *** join/#debian cmanns (n=cmanns@68-185-92-123.dhcp.scrm.ca.charter.com) |
| 05:05.41 | *** join/#debian aurehman_ (n=chatzill@202.59.70.210) |
| 05:08.20 | *** join/#debian edico (i=fenrir@unaffiliated/edico) |
| 05:09.42 | *** join/#debian ggeecko (n=ggeecko@c-76-97-63-229.hsd1.ga.comcast.net) |
| 05:10.50 | *** join/#debian omry_|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 05:11.00 | *** join/#debian epsilon (n=epsilon@raid1.net) |
| 05:11.00 | LimCore | on the bright side... this dsa bug in really epic, still debians seem to be only distros that pgp sign repository |
| 05:11.05 | LimCore | *is |
| 05:11.31 | *** join/#debian bullgard1 (n=detlef@p5B258E31.dip0.t-ipconnect.de) |
| 05:13.20 | *** join/#debian holycow (n=new@mail.wjsgroup.com) |
| 05:13.37 | *** join/#debian deriaN (n=nopron@90.185.61.198) |
| 05:14.34 | *** join/#debian bob_ (n=bob@87-194-183-38.bethere.co.uk) |
| 05:16.40 | *** join/#debian u_quark (n=albadros@83.212.217.9) |
| 05:17.59 | *** part/#debian u_quark (n=albadros@83.212.217.9) |
| 05:19.16 | *** join/#debian omry|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 05:22.31 | *** join/#debian shital_ (n=shital@122.167.91.92) |
| 05:24.07 | *** join/#debian Kwitschibo (n=Michael@host-091-096-237-012.ewe-ip-backbone.de) |
| 05:24.22 | *** join/#debian nolan (n=nolan@voxel.sigbus.net) |
| 05:26.45 | *** join/#debian olskolirc (n=^olskoli@c-71-206-223-151.hsd1.pa.comcast.net) |
| 05:27.19 | *** part/#debian nolan (n=nolan@voxel.sigbus.net) |
| 05:27.36 | olskolirc | hey guys. my /dev/video0 is missing but I have it in /dev/.static/dev/ how do i use my vlc to stream from my hauppauge 150 pvr card? I use vlc. I'm on Gutsy |
| 05:27.47 | LimCore | "Apparently, OpenSSL was using uninitialized memory as a source of randomness. This made valgrind complain about the program, and some enterprising programmer decided to fix it by clearing the memory before use." |
| 05:27.54 | *** join/#debian vort3x (n=vortex@unaffiliated/dfa001) |
| 05:27.59 | LimCore | wonders why not just read /dev/random |
| 05:29.58 | stew | LimCore: ask the openssl developers |
| 05:30.04 | *** join/#debian lindenle (n=lindenle@216-160-160-240.hlrn.qwest.net) |
| 05:30.15 | *** join/#debian Hydroxide (n=jim@debian/developer/jimmy) |
| 05:30.17 | lindenle | Anyone know of a nice piece of software to make timelines? |
| 05:30.29 | *** join/#debian zzhlei (n=null@218.28.239.42) |
| 05:32.18 | *** join/#debian Kalli (n=Kalli@pD9E60DFE.dip.t-dialin.net) |
| 05:33.01 | tarzeau | !qotd0 |
| 05:33.57 | *** join/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 05:34.03 | aurehman | whenever i tried to remove my package.. i shows that package is removed.. but when i see with dpkg the package is still there. |
| 05:34.11 | aurehman | what might be the problem |
| 05:34.15 | *** part/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 05:34.20 | tarzeau | aurehman: using what code is it there? ii? |
| 05:35.07 | aurehman | tarzeau: apt-get remove php4-common i m trying with this command |
| 05:35.20 | tarzeau | aurehman: that'll not remove the config files since you didn't say --purge |
| 05:35.29 | aurehman | ok |
| 05:35.35 | tarzeau | aurehman: you can do dpkg -P php4-common to have them removed as well |
| 05:35.36 | aurehman | let me do it wit --purge |
| 05:35.47 | stew | aurehman: wait |
| 05:35.55 | stew | aurehman: what exactly do you "see with dpkg the package" |
| 05:36.01 | stew | aurehman: show us the actual command you typed and the actual output, use a pastebin: /msg dpkg pastebin |
| 05:36.21 | *** part/#debian JdGordon (i=jonno@rockbox/developer/JdGordon) |
| 05:37.35 | *** part/#debian lindenle (n=lindenle@216-160-160-240.hlrn.qwest.net) |
| 05:37.43 | *** join/#debian wurstwolf (n=wurstwol@p4FCA6567.dip.t-dialin.net) |
| 05:40.11 | shital_ | when i tried to mount a partition its saying /dev/sda5 is not a block device. can any one tell me wat problem is this? |
| 05:40.38 | aurehman | yes dpkg -P worked |
| 05:40.38 | aurehman | http://pastebin.com/d6b5c7fbb |
| 05:41.42 | Lagbolt | shital_, what command did you use? |
| 05:41.46 | aurehman | but i installed php5-gd again... and it is not showing... in phpinof http://stage1.uraan.net/index.php |
| 05:42.00 | *** mode/#debian [+l 799] by debhelper |
| 05:43.22 | *** join/#debian place (n=place@gprs-sonofon-5-nat.mobil.telenor.no) |
| 05:46.29 | aurehman | stew: can you help me |
| 05:47.25 | *** join/#debian olskolirc (n=^olskoli@c-71-206-223-151.hsd1.pa.comcast.net) |
| 05:48.08 | stew | aurehman: what are you trying to do? |
| 05:48.17 | olskolirc | I'm on gutsy. can someone help me find the module or drivers for my Hauppauge pvr 150 tv tuner card please? Can't open device. |
| 05:48.32 | stew | olskolirc: please go to #ubuntu for help with ubuntu |
| 05:48.43 | aurehman | i m trying to install php5-gd and it shows that php5-gd is installed.. but when i see in phpinfo the gd is not installed |
| 05:48.57 | simonrvn | aurehman: is it enabled? |
| 05:49.06 | olskolirc | wow how did you know i was on ubuntu stew? i was trying to sneak some help. they ignores ppl :-( |
| 05:49.14 | aurehman | simonrvn: what is enabled? |
| 05:49.15 | simonrvn | should have an ini file in /etc/php5/conf.d |
| 05:49.37 | simonrvn | olskolirc: that's a secret |
| 05:50.16 | olskolirc | hey we are all the debian family. can't we all just get along? lol |
| 05:50.22 | olskolirc | anyone want to help me? |
| 05:50.57 | streuner | olskolirc: #ubuntu |
| 05:50.57 | stew | olskolirc: we only support debian in this channel, sorry. please just ask #ubuntu. if you can't get help there, try a ubuntu mailing list or a ubuntu web-forum |
| 05:51.05 | *** join/#debian peter_12 (n=peter_12@S010600119506b129.gv.shawcable.net) |
| 05:51.20 | *** join/#debian bartvk (n=bartvk@91.195.201.27) |
| 05:51.22 | *** join/#debian xbaez (n=xbaez@201.151.41.82) |
| 05:51.28 | olskolirc | thanks stew :-( |
| 05:51.33 | *** part/#debian olskolirc (n=^olskoli@c-71-206-223-151.hsd1.pa.comcast.net) |
| 05:52.02 | *** join/#debian grendal_2 (n=sgraham@12.44.166.53) |
| 05:52.15 | grendal_2 | this blows..i cant get the sound to work on this laptop |
| 05:52.22 | aurehman | simonrvn: there is gd.ini in /etc/php5/conf.d... you can see.. http://stage1.uraan.net/index.php |
| 05:52.28 | aurehman | but gd is not installed |
| 05:52.30 | streuner | grendal_2: what model? |
| 05:53.46 | streuner | grendal_2: What does 'dpkg -l libc6 | tail -1' say? |
| 05:53.48 | simonrvn | aurehman: <?php phpinfo(); ?> ; that output doesn't look like any phpinfo file i've seen |
| 05:53.56 | simonrvn | use that ^^^ |
| 05:53.58 | *** part/#debian Shadow_mil (n=Shaddy@pdpc/active/Shadow-mil) |
| 05:54.01 | streuner | grendal_2: What does 'cat /proc/version' say? |
| 05:54.11 | grendal_2 | slow down |
| 05:54.16 | streuner | hehe |
| 05:54.30 | streuner | ok, just tell us what kind of model that is (laptop) |
| 05:54.34 | grendal_2 | streuner: its a del precision 4300 |
| 05:54.38 | grendal_2 | with lenny on it |
| 05:54.47 | aurehman | simonrvn: what might be the problem? |
| 05:55.19 | simonrvn | use what i just gave you, then i'll answer that if needed |
| 05:55.24 | grendal_2 | ii libc6 2.7-10 GNU C Library: Shared libraries |
| 05:55.46 | *** join/#debian Dik (n=KVIrc@nat-65-21.kirovnet.ru) |
| 05:55.59 | *** part/#debian Dik (n=KVIrc@nat-65-21.kirovnet.ru) |
| 05:56.13 | grendal_2 | Linux version 2.6.22-3-686 (Debian 2.6.22-6.lenny1) (sf@debian.org) (gcc version 4.1.3 20071209 (prerelease) (Debian 4.1.2-18)) #1 SMP Sun Feb 10 20:20:49 UTC 2008 |
| 05:56.41 | *** join/#debian sm (n=sm@lgb-static-208.57.70.51.mpowercom.net) |
| 05:56.48 | *** join/#debian Kowalczyk (n=kowalczy@117.80-202-134.nextgentel.com) |
| 05:57.14 | stew | aurehman: how did you upgrade from stable to testing? |
| 05:57.17 | stew | aurehman: and why? |
| 05:57.38 | grendal_2 | i dont think the wireless device is working ither...(i dont know if there is even one it it to be honest) it also uses nvidia for the video..which i have never had any luck with that. |
| 05:57.42 | aurehman | stew: actually i did it on the behalf of dutchfish.. he guide me to do this |
| 05:57.57 | aurehman | i am a newbie in debian |
| 05:58.03 | aurehman | :( |
| 05:58.26 | aurehman | dutchfish was also present in debian channel last night |
| 05:58.48 | streuner | grendal_2: so basically nothing works at all? :-) |
| 05:59.30 | streuner | grendal_2: show us the output of 'lspci -v' in paste.debian.net |
| 05:59.57 | stew | aurehman: dutchfish did not tell you to upgrade to testing. he told you to install php5-gd and about backports.org |
| 06:00.03 | *** join/#debian Kwitschibo_ (n=Michael@host-091-096-232-111.ewe-ip-backbone.de) |
| 06:00.17 | grendal_2 | but honestly the sound would be a good start...all in all this does not look good |
| 06:00.41 | aurehman | yes... he also guide me to update and upgrade |
| 06:00.53 | stew | aurehman: no, he didn't |
| 06:01.05 | aurehman | stew: ok... you think it is my fault then i admit.. |
| 06:01.17 | aurehman | but i need the solution |
| 06:01.36 | stew | aurehman: what are you going to use th server for? is it going to be a publicly exposed server? |
| 06:02.05 | *** part/#debian itomato (n=itomato@66-224-246-146.atgi.net) |
| 06:02.55 | aurehman | stew: it is only for our applications |
| 06:02.56 | grendal_2 | streuner: http://paste.debian.net/2917/ |
| 06:03.13 | stew | aurehman: are the applications going to be accesssed via the internet? |
| 06:03.21 | aurehman | yes |
| 06:03.24 | *** join/#debian Ainu (n=Ainu@c-76-123-5-168.hsd1.va.comcast.net) |
| 06:03.27 | Ainu | hello |
| 06:03.41 | *** join/#debian erikja (n=erikja@0x57314066.abnxx10.adsl-dhcp.tele.dk) |
| 06:04.01 | grendal_2 | this is starting to look like something i cant handle |
| 06:04.11 | Ainu | ill try ot be friendly :D but im just a little angry about the ssl thing, is there an easy way to find out which packages have been modified with any tweak/security fix, and which ones are 'clean' |
| 06:04.19 | stew | aurehman: then i'd recommend reinstalling debian stable. the 'testing' version you are running now is the worst possible option security-wise, and it is also known to have hundreds of bugs, which is the reason it hasn't yet been released |
| 06:04.24 | *** join/#debian sauvin (n=sauvin@unaffiliated/sauvin) |
| 06:04.36 | grendal_2 | im wondering if i should send this beotch back and just get one of there "linux" certified machines. |
| 06:04.50 | streuner | grendal_2: is snd-hda-intel loaded? |
| 06:04.54 | aurehman | stew: oh my god.. please don't say that.. i can't reinstall the debian again |
| 06:04.59 | Ainu | i just want to be able to run a check and know what ive got |
| 06:05.14 | grendal_2 | ummm streuner good question |
| 06:05.15 | aurehman | stew: this might be resultant in client lose |
| 06:05.27 | *** join/#debian RogerW (n=rogerw@client-86-27-236-253.popl.adsl.virgin.net) |
| 06:05.32 | grendal_2 | how would i tell..lsmod snd-hda-intel ? |
| 06:05.32 | streuner | grendal_2: run "lsmod" and look if the kernel module is loaded |
| 06:06.30 | streuner | grendal_2: or just run "alsaconf" (alsa-utils) |
| 06:07.04 | grendal_2 | that looks like a fat no..and i ran alsaconf it worked great up tell the end then it failed to set a mixer? |
| 06:07.19 | streuner | grendal_2: what error? |
| 06:07.38 | grendal_2 | im running it again |
| 06:07.43 | grendal_2 | hold please |
| 06:07.55 | simonrvn | Ainu: stew's right though. |
| 06:08.12 | streuner | ok, if it works ok, add your <user> to audio group "adduser <user> audio" |
| 06:08.46 | Ainu | stew? |
| 06:08.51 | grendal_2 | ixer attach default error: No such file or directory |
| 06:08.56 | *** join/#debian \\homer (n=homer@fw.pmsag.com) |
| 06:09.08 | *** join/#debian voltagex (n=voltagex@dsl-203-113-233-31.ACT.netspace.net.au) |
| 06:09.09 | aurehman | stew: is there any option that i can reinstall server remotely? |
| 06:09.11 | stew | Ainu: not a simple way. for the non-debian native source packages, you scan the diff.gz for altered files that are outside of the debian directory or for files in debian/patches. this would, however miss packages and would have tons of false positives |
| 06:09.26 | voltagex | how do i explicitly tell debian to hold packages back? |
| 06:09.31 | stew | aurehman: '/msg dpkg partial downgrade' expect this process to be tedious and take a long time |
| 06:09.36 | streuner | voltagex: /msg dpkg hold |
| 06:09.45 | voltagex | thanks |
| 06:09.52 | grendal_2 | streuner: error i get is "mixer attach default error: No such file or directory" |
| 06:09.56 | Ainu | well i just want a distro that doesnt go around patching third party packages, does slackware do this at all, not trying to diss debian ehre |
| 06:09.57 | stew | Ainu: simonrvn mean his message for aurehman afaict |
| 06:09.59 | aurehman | stew: how much time will it take? |
| 06:10.15 | Ainu | im against vender patching |
| 06:10.19 | grendal_2 | and then "/usr/sbin/alsactl: save_state:1497: No soundcards found..." |
| 06:10.23 | streuner | grendal_2: what happens if you run 'modprobe snd-hda-intel' |
| 06:10.50 | stew | Ainu: then debian definately isn't for you. note that in this case, the debian maintainer ran this patch by the upstream developers who said, "I'm all for it" |
| 06:10.51 | *** join/#debian alfadir (n=alfadir@e180045201.adsl.alicedsl.de) |
| 06:10.53 | *** join/#debian mrfan_ (n=brizio@lugbari/people/mrfan) |
| 06:10.55 | Ainu | how do i know who does what, where is this policy stated, im n00b to the politics and legal stuff |
| 06:10.59 | cahoot | according to lspci snd-hda-intel is already loaded |
| 06:11.04 | grendal_2 | no error |
| 06:11.08 | grendal_2 | interesting |
| 06:11.24 | Ainu | i was reading that it was the oposite, that they didtn notify upstream, but anyway |
| 06:11.26 | sep | Ainu, then you have to build your own i think all distros patch sources to a certain degree. |
| 06:11.33 | stew | Ainu: http://marc.info/?t=114651088900003&r=1&w=2 |
| 06:11.39 | streuner | grendal_2: is the <user> in audio group? |
| 06:12.11 | grendal_2 | should be...but wont i need to reboot the..nevermind |
| 06:12.12 | stew | Ainu: specifically, http://marc.info/?l=openssl-dev&m=114652287210110&w=2 where you can see that the maintainer was worried about the decreasing of the entropy pool and the upstream maintainer sais, "If it helps with debugging, I'm in favor of removing them" |
| 06:12.29 | *** join/#debian vraa (n=vraa@h203.180.213.151.ip.alltel.net) |
| 06:12.33 | *** join/#debian Faithful (n=Faithful@ns.linuxterminal.com) |
| 06:12.34 | streuner | grendal_2: make sure, just run "adduser <user> audio" |
| 06:12.37 | Ainu | hmm |
| 06:12.52 | streuner | grendal_2: log out and back (no reboot) |
| 06:12.52 | *** join/#debian vy (n=user@213.139.194.86) |
| 06:12.58 | *** join/#debian jirka (n=jagos@195.39.71.122) |
| 06:12.59 | Ainu | ok maybe it was a clusterfsck |
| 06:13.03 | stew | Ainu: it was |
| 06:13.18 | grendal_2 | ya the users part of audio...brb |
| 06:13.23 | Ainu | i jsut at least want to KNOW which packages have been tweaked and which ones are still unchanged from the original |
| 06:13.28 | Ainu | i guess ill ahve to do it the hard way as u said |
| 06:13.33 | Ainu | comparing diff |
| 06:13.54 | *** part/#debian jirka (n=jagos@195.39.71.122) |
| 06:13.55 | aurehman | stew: how can i install it |
| 06:14.05 | *** join/#debian mirezwer (n=mirezwer@36-175-222-85.adsl.verat.net) |
| 06:14.07 | *** join/#debian fireba11 (n=Miranda@145.253.117.242) |
| 06:14.14 | stew | aurehman: install what? |
| 06:14.22 | streuner | what's the latest kernel in lenny? |
| 06:14.24 | aurehman | stew: i think reinstalling is necessary.. can u guide me how to reinstall debian stable? |
| 06:14.30 | stew | aurehman: /msg dpkg ig |
| 06:14.55 | bartvk | hi ppl, I have a Q on the recent vulnerability |
| 06:15.20 | streuner | hm, nobody runs lenny here, fine :-) |
| 06:15.25 | *** join/#debian bk_ (i=bk@a.rschlo.ch) |
| 06:15.36 | stew | streuner: http://packages.debian.org/linux-source |
| 06:15.39 | bartvk | Is it possible to log in using this vulnerability? |
| 06:15.47 | bartvk | Or does traffic need to be sniffed? |
| 06:16.22 | streuner | stew: ah, thanks |
| 06:16.49 | stew | bartvk: traffic would have to be sniffed, you still need to present valid credentials. if you could watch a ssh session in progress using vulnerable keys, you could ascrertain these credentials |
| 06:17.01 | Ainu | theres no way this ssl bug affects the encrypted LVM setup during the install process does it |
| 06:17.25 | Guerin | Ainu: if you generated keys with this lib, you need to re-generate them |
| 06:17.37 | bartvk | stew, great that's what I thought; thanks a lot |
| 06:17.39 | Ainu | whateve the etch setup cd does.. |
| 06:17.40 | stew | Ainu: it does not |
| 06:17.42 | Ainu | ah ok |
| 06:17.53 | Ainu | thx |
| 06:17.56 | *** join/#debian e-type (n=pieter@sourcemage/guru/e-type) |
| 06:18.01 | e-type | hi all |
| 06:18.25 | Ainu | im between installs anyway, running fluxbuntu atm getting my stuff together to reformat |
| 06:18.30 | aurehman | stew: it is a remote server..how can i save all my data |
| 06:18.38 | *** part/#debian Baloo (n=baloo@71-215-134-31.ptld.qwest.net) |
| 06:18.47 | aurehman | and install a new stagle debian version |
| 06:19.16 | stew | aurehman: you can copy data from the reomte server using scp or rsync for instance |
| 06:19.18 | *** join/#debian Refakki (i=refakki@ppp85-140-62-136.pppoe.mtu-net.ru) |
| 06:19.32 | *** join/#debian dimir (n=dimir@159.148.229.161) |
| 06:19.35 | Ainu | i was tryin to use the older slax 5 live cd to get some transfer work doen ,but that was a mess, i had to use fluxbuntu |
| 06:19.39 | stew | aurehman: if it is a remote server than installing a new version of debian will be difficult unless you have remote console access |
| 06:19.50 | dimir | Morning! |
| 06:19.53 | *** join/#debian grendal_prime (n=sgraham@dsl-12-44-166-053.arpa2.caltel.com) |
| 06:19.55 | *** join/#debian Maxt3r (n=Maxt3r@0x5550877d.adsl.cybercity.dk) |
| 06:20.01 | grendal_prime | ya streuner no dice on that |
| 06:20.02 | aurehman | stew: you mean ssh access? |
| 06:20.18 | stew | aurehman: no, i mean actual physical console |
| 06:20.23 | Maxt3r | i shall chomod a disk, what is the right chmod for write/read/edit a disk |
| 06:20.28 | streuner | grendal_prime: so you got an error running aumix? |
| 06:20.37 | grendal_prime | not yet hold on |
| 06:20.38 | aurehman | stew: o no.. i think i don't have physical console access |
| 06:21.34 | grendal_prime | aumix: error opening mixer |
| 06:21.58 | *** join/#debian dewey (n=dewey@c-24-17-71-36.hsd1.wa.comcast.net) |
| 06:22.00 | *** mode/#debian [+l 805] by debhelper |
| 06:22.03 | streuner | grendal_prime: ok, just upgrade to 2.6.24 (kernel) |
| 06:22.23 | grendal_prime | ? |
| 06:22.25 | grendal_prime | ok |
| 06:22.29 | grendal_prime | i guess |
| 06:22.45 | *** join/#debian Deetz (n=pdi@mail.forcefive.de) |
| 06:24.28 | *** join/#debian behanw (n=behanw@S0106000f66915cc8.vc.shawcable.net) |
| 06:24.54 | *** part/#debian bk_ (i=bk@a.rschlo.ch) |
| 06:25.19 | e-type | Maxt3r: what's the goal? |
| 06:28.06 | Maxt3r | e-type, i used 7 i worked |
| 06:28.22 | grendal_prime | streuner: where the hell do i find that kernel? |
| 06:29.02 | grendal_prime | unstable? |
| 06:29.02 | streuner | grendal_prime: apt-cache search linux-image-2.6 |
| 06:29.28 | streuner | no, its in testing |
| 06:30.30 | grendal_prime | werid..i thought i had the most current kernel in testing |
| 06:30.51 | grendal_prime | its downloading..so..this should fix this? |
| 06:31.05 | streuner | i hope |
| 06:31.09 | *** join/#debian dpowerd (n=dpower@c-71-194-110-66.hsd1.il.comcast.net) |
| 06:31.29 | grendal_prime | not as much as i do |
| 06:31.51 | grendal_prime | this machine is a 2* dual core |
| 06:31.57 | grendal_prime | 4 gigs of ram |
| 06:32.04 | Ainu | ... |
| 06:32.08 | Ainu | want |
| 06:33.02 | *** join/#debian ingw3 (n=karolis@jeanette.crepido.se) |
| 06:33.24 | grendal_prime | 64bit intels |
| 06:33.26 | ingw3 | is there is any way to find free space by cleaning up in debian? |
| 06:33.38 | grendal_prime | ok ill brb need to reboot with new kernel.. |
| 06:34.06 | Ainu | there was suposed to be some new utility out that lets you patch kernel wo reboot, havent tried it |
| 06:34.16 | Ainu | probably flakey |
| 06:37.54 | Ainu | maybe ill get into lfs |
| 06:37.56 | Ainu | heeh |
| 06:37.59 | Ainu | this seems neat |
| 06:38.21 | Ainu | i have too many distros running as is though |
| 06:38.32 | *** join/#debian grendal_prime (n=sgraham@dsl-12-44-166-053.arpa2.caltel.com) |
| 06:38.45 | grendal_prime | streuner: you the man that got the sound working |
| 06:39.02 | grendal_prime | hmmm now..what do you know about nvidia? |
| 06:39.10 | Ainu | heh |
| 06:39.31 | *** join/#debian Dekcarki (i=rico@port-ip-213-211-248-239.sta.reverse.mdcc-fun.de) |
| 06:39.36 | Ainu | i jsut use nv |
| 06:39.46 | grendal_prime | ? |
| 06:40.14 | Ainu | the default nvidia driver.. it asked me for it during setup, then i think another time it didnt |
| 06:40.26 | streuner | grendal_prime: run "dpkg-reconfigure xserver-xorg" and choose "vga" as driver |
| 06:40.33 | grendal_prime | i tried running the usual dpkg-reconfigure server-xorg but it never gets to that point |
| 06:40.50 | *** join/#debian Sebboh (n=hobbes@ip68-96-139-5.om.om.cox.net) |
| 06:41.46 | Ainu | its been good to me, except i can only get to 85hz at my prefered res with any modeline ive tried, it will go to 100 in windows, gotta be a diff display param or something |
| 06:41.52 | *** join/#debian _dbc_ (n=dbc___@78.31.183.42) |
| 06:41.53 | Ainu | different mode |
| 06:42.39 | *** join/#debian sebn (n=seb@gambetta.sogilis.com) |
| 06:42.53 | grendal_prime | ok "use a kernel frame buffer interface"? |
| 06:42.57 | streuner | no |
| 06:43.11 | grendal_prime | autodetect keyboard? |
| 06:43.19 | streuner | default |
| 06:43.24 | *** join/#debian Fox_1_ (n=Fox_1_@91.103.31.146) |
| 06:43.34 | streuner | just choose low values for bpp and resolution |
| 06:44.13 | grendal_prime | ya after the keyboard business it just exits |
| 06:44.24 | grendal_prime | xserver-xorg postinst warning: overwriting possibly-customised configuration |
| 06:44.35 | grendal_prime | <PROTECTED> |
| 06:44.53 | grendal_prime | never gets to the video config section |
| 06:44.56 | grendal_prime | kinda werid |
| 06:45.00 | streuner | ok |
| 06:45.05 | *** join/#debian xlotlu (n=john@79.114.167.226) |
| 06:45.09 | streuner | just rm the config-files then |
| 06:45.10 | *** join/#debian gpm (n=gpm@c-76-102-193-24.hsd1.ca.comcast.net) |
| 06:45.14 | *** join/#debian NthDegree (n=nth@unaffiliated/forcerain) |
| 06:45.28 | streuner | in /etc/X11/xorg.conf* |
| 06:45.37 | grendal_prime | ok..that seems kinda..drastic but will do |
| 06:46.24 | *** join/#debian tyzh (n=firedrak@218.193.14.64) |
| 06:46.41 | grendal_prime | md5sum: /etc/X11/xorg.conf: No such file or directory |
| 06:47.02 | *** join/#debian row (i=row@87-194-37-143.bethere.co.uk) |
| 06:47.04 | simonrvn | dpkg-reconfigure -plow |
| 06:47.21 | grendal_prime | wow that sounds hardcore |
| 06:47.24 | grendal_prime | im down |
| 06:47.58 | *** part/#debian Ainu (n=Ainu@c-76-123-5-168.hsd1.va.comcast.net) |
| 06:48.06 | grendal_prime | '/usr/sbin/dpkg-reconfigure: please specify a package to reconfigur |
| 06:48.14 | grendal_prime | im assuming the xserver-xorg |
| 06:48.23 | streuner | !drxx grendal_prime |
| 06:48.24 | dpkg | grendal_prime: To reconfigure your X server, run dpkg-reconfigure xserver-xorg as root. If you're not using Xorg (sarge or earlier), dpkg-reconfigure xserver-xfree86, and ask me about xmd5sum if you've changed XF86Config-4 yourself. |
| 06:48.28 | simonrvn | heh, you were supposed to add in the rest ;) |
| 06:49.04 | grendal_prime | i got the same thing though |
| 06:49.27 | *** join/#debian vraa (n=vraa@h203.180.213.151.ip.alltel.net) |
| 06:49.29 | grendal_prime | this is a brand new install by the way there was never any sarge on this box |
| 06:49.34 | Maxt3r | hmm lenny is unstable right |
| 06:49.37 | grendal_prime | or etch. |
| 06:49.54 | *** join/#debian Baloo (n=baloo@71-215-134-31.ptld.qwest.net) |
| 06:50.00 | streuner | Maxt3r: lenny/tesing, sid/unstable |
| 06:50.02 | *** part/#debian Baloo (n=baloo@71-215-134-31.ptld.qwest.net) |
| 06:51.00 | bartvk | If people download installation CDs now, will the recent vulnerability be present in a newly installed box? |
| 06:51.01 | grendal_prime | i do have the The NVIDIA X Configuration Tool installed should i try that? |
| 06:51.24 | Maxt3r | which one is newest |
| 06:51.28 | *** join/#debian floppypond (n=floppypo@unaffiliated/floppypond) |
| 06:51.37 | streuner | Maxt3r: /msg dpkg sid faq |
| 06:51.40 | grendal_prime | VALIDATION ERROR: Data incomplete in file /etc/X11/xorg.conf. |
| 06:51.41 | grendal_prime | <PROTECTED> |
| 06:51.41 | grendal_prime | <PROTECTED> |
| 06:51.50 | simonrvn | Maxt3r: if you have to ask, don't use that. |
| 06:52.19 | *** join/#debian mint (n=mint@d83-189-38-11.cust.tele2.de) |
| 06:52.30 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 06:53.03 | *** join/#debian DDave (n=DDave@83.222.36.154) |
| 06:53.10 | Maxt3r | simonrvn, testing must be the newest |
| 06:53.21 | Maxt3r | simonrvn, rigth |
| 06:53.36 | *** join/#debian desti_T2 (n=desti@p5B018903.dip0.t-ipconnect.de) |
| 06:54.35 | *** join/#debian meff (n=meff@unaffiliated/meff) |
| 06:54.36 | *** join/#debian jivco (n=jivco@85.187.217.6) |
| 06:55.00 | tyzh | All the section in the xorg.conf will be empty, if I use dpkg-reconfig xserver-xorg. |
| 06:55.15 | *** join/#debian CremonaMeGenuit (n=CremonaM@194.244.37.210) |
| 06:55.29 | grendal_prime | im parnoid about nvidia drivers. It seems there is always a ton of bad stories about nvidia and linux |
| 06:55.30 | *** join/#debian nonno (n=nonno@ppp-33-112.33-151.iol.it) |
| 06:55.38 | sep | Maxt3r, the question is wrong, or based on wrong assumptions. read the faq that streuner told you about |
| 06:56.05 | *** join/#debian streuner_ (n=streuner@p54A5BE3D.dip.t-dialin.net) |
| 06:56.10 | grendal_prime | this problem with reconfigureing the xserver the usual way is somewhat disenchanting |
| 06:56.38 | *** join/#debian CremonaMeGenuit (n=CremonaM@194.244.37.210) |
| 06:56.39 | simonrvn | debconf has had some odd changes. i do believe that's a known bug. |
| 06:56.45 | dpowerd | grendal_prime, not sure what your problem is i dont feel like scrolling xD but have you tried envy? |
| 06:56.58 | grendal_prime | nope |
| 06:57.02 | grendal_prime | package? |
| 06:57.05 | dpowerd | you have nvidia driver probs? |
| 06:57.07 | dpowerd | yah |
| 06:57.08 | sep | Maxt3r, use stable if you need a machine that works, use testing if you are ok with having to tinker now and then. use unstable if you are a developer, but then you would not ask this :) |
| 06:57.27 | epsilon | does the ssl bug mean, only the established connection can be cracked, or the access to the server (sshd) itself? |
| 06:57.30 | sep | grendal_prime, you have installed all the needed xserver-xorg-video packages you need ? |
| 06:57.47 | dpowerd | grendal_prime, http://albertomilone.com/nvidia_scripts1.html |
| 06:58.01 | *** join/#debian Blackhold (n=Blackhol@203.Red-80-34-166.staticIP.rima-tde.net) |
| 06:58.04 | Blackhold | hello |
| 06:58.15 | Blackhold | could someone give me some help about time? |
| 06:58.27 | grendal_prime | sep thats agood question..ive never installed nividia successfully so that may be my problem. |
| 06:58.34 | sep | epsilon, that you should regenerate all user and host keys made with the affected ssl libraries. http://wiki.debian.org/SSLkeys for details |
| 06:58.36 | grendal_prime | what other packages would i need? |
| 06:59.07 | *** join/#debian scraisy (n=claro@230.pool85-60-148.dynamic.orange.es) |
| 06:59.13 | Blackhold | I've got a PC when I change the time using ntpdate server, bios time changes, when I change the bios time, then linux time changes, and this successively... how could I change the time without affecting BIOS? |
| 06:59.15 | sep | grendal_prime, dont know if you would need any in the nvidia case. but i would atlest like to have the libre nv driver and the vesa driver |
| 06:59.23 | dpowerd | envy worked beautifully for me right away, no tinkering with xorg.conf, nice gui... had my dual monitors up and running in no time at all |
| 06:59.45 | *** join/#debian msshams (n=msshams@91.184.75.47) |
| 06:59.53 | grendal_prime | X.Org X server -- NV display driver is installed |
| 07:00.14 | sep | Blackhold, usualy the bios time is on UTC time. while your OS/system have a timezone applied.they are not equal. |
| 07:00.24 | msshams | hi, please clarify about this line in crontab: 1,10,20,30,40,50 * * * * sh /root/rescue.sh |
| 07:00.26 | grendal_prime | i just did a standard net install of lenny..well (laptop, desktop. install) |
| 07:00.28 | *** join/#debian streuner1laptop (n=streuner@p54A5BE3D.dip.t-dialin.net) |
| 07:01.01 | Blackhold | sep then I must define my Linux UTC time to correct? |
| 07:01.03 | sep | Blackhold, but if you happen to have windows on the same machine it's insane behavior is to alter the actual bios time when timezones changes.. and are equal there. |
| 07:01.22 | Blackhold | sep this machine don't have windows ¬¬ |
| 07:01.25 | sep | so dualbooting means you must make linux use the same broken method as windows |
| 07:01.49 | sep | lucky you :) just set your timezone and adjsut the clock in linux. and bios will stay on utc happily |
| 07:01.56 | Blackhold | :D |
| 07:01.57 | Blackhold | ok |
| 07:02.00 | *** mode/#debian [+l 820] by debhelper |
| 07:02.20 | *** join/#debian markybob (i=markybob@unaffiliated/markybob) |
| 07:03.01 | *** join/#debian goll (n=goll@81.10.126.24) |
| 07:03.16 | *** part/#debian tyzh (n=firedrak@218.193.14.64) |
| 07:03.35 | Blackhold | gonna try if it worked... |
| 07:03.42 | Blackhold | I used ntpdate server |
| 07:03.52 | Blackhold | maybe that get confused to the computer... |
| 07:03.59 | *** join/#debian ringo999 (n=ringo999@onv.cybercity.dk) |
| 07:04.23 | *** join/#debian [GM]godwin (n=Miranda@chello084113227153.18.14.vie.surfer.at) |
| 07:04.54 | *** join/#debian bofur (n=bofur@office.euronet.nl) |
| 07:06.27 | simonrvn | Blackhold: you can always set the system timezone in utc, and set your user to the tz you want. TZ=foo in your .bash_profile |
| 07:06.43 | *** join/#debian ans_ (i=ans@p5B27E6F3.dip.t-dialin.net) |
| 07:06.59 | Blackhold | nope |
| 07:07.02 | Blackhold | it don't worked |
| 07:07.06 | Blackhold | bios time changed again |
| 07:07.17 | Blackhold | I used date --set='-2 hours' |
| 07:07.31 | simonrvn | !set the time |
| 07:07.31 | dpkg | To set the time in debian, use date --set. The truly enlightened user, however, will install ntp and adjtimex to have their clock set automatically on reboot and slewed to match time servers. You may also need to run tzconfig (sarge, etch), dpkg-reconfigure tzdata (lenny, sid), and make sure you have the right UTC setting in /etc/default/rcS first. |
| 07:07.54 | simonrvn | meh, that should also mention hwclock --systohc |
| 07:07.55 | *** join/#debian jayaraj (n=jayaraj@121.247.149.5) |
| 07:08.14 | *** part/#debian bartvk (n=bartvk@91.195.201.27) |
| 07:08.16 | cahoot | and possibly --directisa |
| 07:08.21 | msshams | can you please tell me that this line in crontab when runs?: 1,10,20,30,40,50 * * * * sh /root/rescue.sh |
| 07:08.45 | simonrvn | every ten minutes |
| 07:08.52 | Blackhold | http://rafb.net/p/BsiaGI71.html |
| 07:08.57 | simonrvn | except the first one, which is 9 |
| 07:09.01 | *** join/#debian foka (n=foka@124.64.110.135) |
| 07:09.02 | Blackhold | my /etc/default/rcS file |
| 07:09.31 | Blackhold | ev'ry 10 minutes? |
| 07:10.03 | simonrvn | was talking to msshams |
| 07:10.16 | sep | Blackhold, why do you think the biostime is wrong ? how do you check it ? show us your time, your bios time and your timezone |
| 07:10.47 | Blackhold | sep, I rebooted, and look into the bios, and the time changed, exactly the time I changed |
| 07:11.09 | Blackhold | luckyly, I know what time is it :P |
| 07:11.21 | Blackhold | not my linux |
| 07:11.21 | sep | Blackhold, and it was not tracking UTC time as it should ? |
| 07:11.22 | Blackhold | lol |
| 07:11.24 | *** join/#debian vazul (n=user@91.82.36.118.pool.invitel.hu) |
| 07:11.42 | Blackhold | I'm thinking to put UTC=no in rcS file |
| 07:12.20 | *** join/#debian binseer_ (n=binseer@121.247.149.5) |
| 07:12.29 | sep | Blackhold, becouse you get confused when bios is UTC and not localtime ? |
| 07:12.31 | simonrvn | @wb streuner |
| 07:12.33 | ravenbird | Welcome back streuner, o lonely traveller amongst the TCP/IP packets of cheese. |
| 07:12.41 | streuner | thanks |
| 07:12.51 | *** join/#debian Tiffon (n=name@unaffiliated/tiff0n) |
| 07:13.05 | Blackhold | root@frodo:~# date -u |
| 07:13.06 | Blackhold | mié may 14 09:12:27 UTC 2008 |
| 07:13.06 | Blackhold | root@frodo:~# date |
| 07:13.06 | Blackhold | mié may 14 11:12:37 CEST 2008 |
| 07:13.06 | *** kick/#debian [Blackhold!n=debhelpe@unaffiliated/debhelper] by debhelper (use the paster bot or #flood) |
| 07:13.21 | *** join/#debian Blackhold (n=Blackhol@203.Red-80-34-166.staticIP.rima-tde.net) |
| 07:13.23 | Blackhold | oops |
| 07:13.26 | Blackhold | I'm really stupid... |
| 07:13.26 | simonrvn | sighs |
| 07:13.57 | *** join/#debian dsop (n=dsp@ns.km20749-03.keymachine.de) |
| 07:13.59 | *** join/#debian mishok13 (n=gdmfsob@195.3.130.70) |
| 07:14.26 | dsop | is there a way to force openvpn to use a key reported by openssl-vulnkey after the latest openssl security updates? |
| 07:14.30 | *** join/#debian JohnnyST (i=johnny@mail.osp.fi) |
| 07:14.43 | sep | Blackhold, is it not 07:14 utc now ? |
| 07:14.44 | *** join/#debian foka_ (n=foka@123.115.242.145) |
| 07:14.55 | simonrvn | yes |
| 07:15.31 | sep | Blackhold, think your clock is wrong. ntpdate as you mentioned earlier should fix it for you |
| 07:16.42 | *** join/#debian ryg9I (n=pavel@195.10.218.67) |
| 07:16.45 | *** join/#debian vitasoy (n=vitasoy@adsl-69-109-182-170.dsl.pltn13.pacbell.net) |
| 07:17.07 | *** join/#debian Danielss89 (n=Im@0x57304f1b.hknxx3.adsl-dhcp.tele.dk) |
| 07:17.08 | Danielss89 | hi.. |
| 07:17.48 | Blackhold | sep, I have to define my system clock to utc |
| 07:17.55 | Blackhold | 'cause now it is not at utc |
| 07:17.57 | *** join/#debian Kevin` (n=kevin@etmalec.net) |
| 07:18.04 | Blackhold | date --set "date -u" |
| 07:18.05 | Danielss89 | ive got this message in my syslog a lot of times: collected(NUMBE HERE): Cannot open "proc/1/stat": No such file or directory.... |
| 07:18.07 | Kevin` | how do I get a gui wireless manager in debian? |
| 07:18.10 | Blackhold | maybe that will work? |
| 07:18.42 | vitasoy | how worried should I be about the openssh vulnerability? is there a known exploit in the wild for it? my understanding so far is that basically since 2006, if someone knew about this problem, and had the know-how they could: 1) decrypt my SSL-encrypted traffic (assuming they are in a position to) 2) my SSH login password could be brute forced ? |
| 07:19.09 | *** join/#debian hilikus` (n=hacknake@unaffiliated/hilikus/x-692456) |
| 07:19.20 | msshams | when load of our serve more than 20, crontab isn't run. i need crontab run that my rescue script start. please help me |
| 07:19.25 | cahoot | Kevin`: network-manager-gnome f ex |
| 07:19.25 | sep | Blackhold, that's the default i can't image why your having so big a problem with this. you are sure your timezone is correct ? just set your time (eg with ntpdate) then check that it can be saved with hwclock --systohc |
| 07:19.45 | *** join/#debian LoRez (i=lorez@freenode/staff/lorez) |
| 07:20.12 | Blackhold | sep, now, the only thing I have to do is set my timezone to utc |
| 07:20.15 | CoolCold | Blackhold: tzconfig ? |
| 07:20.17 | sep | vitasoy, very, since now everyone know about it, and are busy making their little scripts |
| 07:20.35 | sep | Blackhold, if that is your correct timezone then yes |
| 07:20.38 | *** join/#debian mbroeker (n=mbroeker@BAEd4b9.bae.pppool.de) |
| 07:20.56 | Blackhold | to define the correct zone is as I said before? |
| 07:20.58 | Blackhold | date --set "date -u" |
| 07:21.01 | Blackhold | ? |
| 07:21.19 | *** join/#debian sphenxes (n=sphenxes@85-127-213-249.dynamic.adsl-line.inode.at) |
| 07:21.23 | CoolCold | argh |
| 07:21.27 | *** join/#debian bfremon (n=ben@lns-bzn-33-82-252-45-56.adsl.proxad.net) |
| 07:21.32 | Danielss89 | ive got this message in my syslog a lot of times: collected(NUMBE HERE): Cannot open "proc/1/stat": No such file or directory.... |
| 07:21.35 | *** join/#debian hron (n=hron@212.98.179.118) |
| 07:21.36 | CoolCold | Blackhold: u need to set time or timezone? |
| 07:21.41 | sep | set your timezone correctly. adjust linux clock to localtime, (eg with ntpdate), run hwclock --systohc, now linuxtime is localtime and bios time is UTC as it should be |
| 07:21.44 | CoolCold | if timezone - tzconfig does this |
| 07:21.45 | Blackhold | CoolCold: YES! |
| 07:21.56 | sep | if this is hard. then i can't help you |
| 07:21.58 | vitasoy | sep: if I had a box where I don't do web stuff, just ssh into -- then even with this vulnerabilty, they'd have to brute force my password? |
| 07:22.00 | *** mode/#debian [+l 832] by debhelper |
| 07:22.02 | Kevin` | cahoot: I installed that from a package.. how do I use it? |
| 07:22.16 | cahoot | click on the applet |
| 07:22.18 | CoolCold | Blackhold: that was question with two variants, which variant u said "yes" to ? |
| 07:22.18 | *** join/#debian q-tip (n=simon@dc5147a6cd.adsl.wanadoo.nl) |
| 07:22.37 | sep | vitasoy, well since it's so incredibly easy to regenerate your keys i dont see why you wound not do it |
| 07:22.45 | Kevin` | cahoot: I don't see an applet |
| 07:22.52 | Blackhold | sep, I did what you said |
| 07:22.56 | vitasoy | sep: yeah i'm just trying to assess how exposed I've been |
| 07:22.59 | Blackhold | now I'm gonna reboot the system |
| 07:23.04 | Blackhold | and see if bios time is ok |
| 07:23.05 | msshams | when this line run in crontab? : */12 * * * * sh /root/rescue.sh |
| 07:23.20 | sep | Blackhold, cant you just check with hwclock ? |
| 07:23.26 | cahoot | Kevin`: try nm in a term |
| 07:23.28 | Blackhold | http://rafb.net/p/AxCBly68.html |
| 07:23.31 | sep | Blackhold, and define OK ! since it should be on UTC time |
| 07:23.42 | Blackhold | uh! ok |
| 07:23.43 | vitasoy | sep: i been running denyhosts - but i guess with this vulnerablity, a man-in-the-middle attack is possible? |
| 07:23.46 | Blackhold | don't mind on it :P |
| 07:24.03 | *** join/#debian dFence_ (n=chatzill@ings-d93223a8.pool.mediaWays.net) |
| 07:24.06 | Blackhold | mié 14 may 2008 09:23:36 CEST -0.769048 seconds |
| 07:24.07 | sep | Blackhold, if your timezone is +2 then that looks normal ? |
| 07:24.12 | Blackhold | yes |
| 07:24.20 | Kevin` | cahoot: nm - list symbols from object files... |
| 07:24.40 | Blackhold | today I learned a thing! hwclock shows bios clock... |
| 07:24.43 | Blackhold | thanks :) |
| 07:24.46 | sep | and this is what it was like when you installed the system... so what you did wrong was assuming that bios tracks localtime. |
| 07:25.17 | Kevin` | only time you should use localtime is for dualbooting windows |
| 07:25.17 | *** join/#debian Blast_Hardcheese (n=Blast@dsl092-032-215.lax1.dsl.speakeasy.net) |
| 07:25.29 | sep | its silly for a hardware clock to move back and forth when timezones/dayligth time changes. so better its fixed on utc and the OS with it's timezone can adjust to localtime |
| 07:25.48 | *** join/#debian agnitio_ (n=magnus@h-91-126-123-244.wholesale.rp80.se) |
| 07:25.59 | Kevin` | cahoot: ? |
| 07:26.41 | Blackhold | sed, I rebooted, and bios time have got 2 hours minus |
| 07:27.02 | enouf | Kevin`: nm == network-manager, iinm |
| 07:27.04 | Blackhold | I would like to define my time to UTC time |
| 07:27.05 | cahoot | Kevin`: see if you can find it under system-prefs-sessions-startup smth |
| 07:27.23 | Blackhold | I want to use UTC as default timezone |
| 07:27.32 | Kevin` | enouf: no such program |
| 07:27.35 | enouf | Kevin`: kde has kwifimanager |
| 07:28.17 | CoolCold | Blackhold: show me ur date output |
| 07:28.36 | enouf | Blackhold: /etc/default/rcS |
| 07:28.47 | sep | vitasoy, just recreate your keys hosts and users if you have any |
| 07:29.04 | *** join/#debian subir (n=subir@202.79.37.177) |
| 07:29.10 | enouf | Blackhold: /msg dpkg set the time |
| 07:29.16 | *** join/#debian visik7 (n=dksakd@unaffiliated/visik7) |
| 07:29.17 | Kevin` | it's running nm-applet --sm-disable |
| 07:29.22 | dsop | sep: but I need to recreated the keys for users that want to connect, too. |
| 07:29.27 | Kevin` | but nm-applet has no documentation :( |
| 07:29.37 | sep | dsop, if they use keys to login yes |
| 07:29.45 | sep | if they use password and have no user key no. |
| 07:29.55 | sep | and you can check the keys using the tool on the wikipage |
| 07:30.00 | Blackhold | enouf: I'm not chatting from this computer |
| 07:30.12 | Blackhold | <PROTECTED> |
| 07:30.13 | Blackhold | mié may 14 11:30:03 CEST 2008 |
| 07:30.25 | Blackhold | date -u |
| 07:30.25 | Blackhold | mié may 14 09:30:14 UTC 2008 |
| 07:30.29 | enouf | is not here either, i'm virtual |
| 07:31.17 | *** join/#debian tombs (n=nyhc@ip565e4a39.direct-adsl.nl) |
| 07:31.26 | markybob | msshams, every 12 minutes, assuming it has proper permissions |
| 07:31.26 | CoolCold | Blackhold: run tzconfig and set timezone.. |
| 07:31.34 | sep | Blackhold, are you sure hwclock --systohc actualy managed to save the time ? |
| 07:32.00 | sep | Blackhold, i have seen examples where you have to use --directisa or else the bios wont store the change |
| 07:32.04 | enouf | lenny/sid -> ~$ man tz |
| 07:32.04 | enouf | tzfile tzselect tzset |
| 07:32.05 | Blackhold | I havent tzconfig installed |
| 07:32.09 | cahoot | <PROTECTED> |
| 07:32.16 | Blackhold | only tzselect |
| 07:32.31 | sep | Blackhold, besides your timezone is correct as you said earlier. it just forgets it after a reboot ? |
| 07:32.43 | *** join/#debian Tiffon (n=name@unaffiliated/tiff0n) |
| 07:32.45 | markybob | dondelelcaro, i have a proposition for you. pay me and make #debian my full time job :P |
| 07:32.46 | sep | so i think it's more likely that is can't store the time to the bios |
| 07:33.09 | sep | and hwclock --systohc would tell you error if it can not |
| 07:33.28 | enouf | sometimes --directisa is needed - could be placed in /etc/default/rcS as HWCLOCKPAR=--directisa |
| 07:33.36 | msshams | markybob: so, this line runs wvery 5 minutes? */5 * * * * sh /root/rescue.sh |
| 07:33.43 | enouf | or PARS= ? |
| 07:33.50 | markybob | msshams, yes it would |
| 07:33.56 | Blackhold | au! I defined UTC+0 |
| 07:34.02 | Blackhold | problem finished! |
| 07:34.16 | Blackhold | grrr |
| 07:34.25 | Blackhold | date don't shows me the UTC time... |
| 07:34.32 | sep | Blackhold, if you dont care about daylight savnigs time yes |
| 07:35.05 | Blackhold | http://rafb.net/p/Uzdcgt87.html |
| 07:35.31 | Blackhold | I have a bios command that runs this computer each day |
| 07:35.43 | Blackhold | and this computer turns off to specific time |
| 07:35.47 | Blackhold | if time are not well |
| 07:35.59 | Blackhold | computer won't turn on and turn off correctly |
| 07:36.09 | *** join/#debian SlimG (n=SlimG@84.205.48.248) |
| 07:36.26 | *** join/#debian Stephan (n=Stephan@195.27.13.34) |
| 07:36.45 | sep | Blackhold, so defining the time in bios to turn on as utc was not an option ? |
| 07:37.15 | *** join/#debian sd_ (n=grr@2a01:490:11:1:3:3:7:0) |
| 07:37.16 | *** part/#debian dsop (n=dsp@ns.km20749-03.keymachine.de) |
| 07:38.03 | Blast_Hardcheese | How do you get cron to not send you mail when a job runs? |
| 07:38.09 | Blast_Hardcheese | Is there a way? |
| 07:38.15 | *** join/#debian haxi (n=home_deb@73.171.68-86.rev.gaoland.net) |
| 07:38.25 | sd_ | append >/dev/null2>/dev/null |
| 07:38.32 | sd_ | general rule: peek to other's crons :) |
| 07:38.39 | *** join/#debian mhymn (i=mhymn@unaffiliated/mhymn) |
| 07:39.32 | enouf | er &>/dev/null should suffice - or see /etc/syslog.conf man syslog.conf |
| 07:41.15 | *** join/#debian KaMa (n=kama@host236-118-dynamic.10-87-r.retail.telecomitalia.it) |
| 07:41.21 | Blast_Hardcheese | Good advice, thanks :) |
| 07:41.52 | *** join/#debian and][ng (n=and][ng@213-156-49-141.fastres.net) |
| 07:41.54 | and][ng | hello |
| 07:41.55 | Blackhold | sep I only could define bios time as UTC |
| 07:41.55 | SlimG | what's the command in debian etch to sync the clock with a ntp timeserver? |
| 07:42.00 | *** mode/#debian [+l 841] by debhelper |
| 07:42.06 | *** join/#debian eth01 (i=foo@gentoo/user/eth01) |
| 07:42.08 | gbp | [04/01/08 12:08:20] 220.132.158.18 Banned: 906 invalid attempts in 8s |
| 07:42.14 | gbp | wow. |
| 07:42.15 | and][ng | how is tab copletion implemented for stuffs like apt packages? |
| 07:42.25 | sep | SlimG, depends on what application you install to do it with |
| 07:42.30 | *** join/#debian p0g0_ (n=pogo@unaffiliated/p0g0) |
| 07:42.37 | sep | usualy i run ntpd all the time |
| 07:42.38 | and][ng | completion* |
| 07:42.54 | sep | SlimG, there are a few in debian so pick one you like |
| 07:43.35 | *** join/#debian ganes (n=gan@203.129.255.178) |
| 07:43.37 | *** join/#debian bluesceada_ (n=itsjustm@unaffiliated/bluesceada) |
| 07:44.30 | Blackhold | SlimG: ntpdate server |
| 07:44.48 | ganes | <PROTECTED> |
| 07:44.58 | *** join/#debian jim (n=jim@unaffiliated/jim) |
| 07:45.02 | SlimG | sep: If I install the «ntp» package, will it sync my time automatically on every boot? or do I need to activate that in the config? |
| 07:45.07 | and][ng | ganes: it depends on what service |
| 07:45.26 | dondelelcaro | SlimG: yes, it will. |
| 07:45.31 | ganes | and][ng, tell me the some files |
| 07:45.44 | sep | SlimG, assuming you allow it network access yes |
| 07:45.57 | ganes | and][ng, how the ip get configuring when i boot |
| 07:45.59 | *** join/#debian wid (n=rgriffit@213.254.207.180) |
| 07:46.00 | dondelelcaro | markybob: if you accept virtual beer, I can pay you in that. Here's a prepayment. |
| 07:46.03 | dondelelcaro | !beer markybob |
| 07:46.03 | dpkg | pours a litre of Yuengling Lager for markybob |
| 07:46.05 | *** join/#debian godwin2 (n=Miranda@chello084113227153.18.14.vie.surfer.at) |
| 07:46.18 | jim | if configured properly and you have a suitable net connection, ntp will keep a clock in sync with another clock, and/or act as a relay (a server and a client) |
| 07:46.31 | ganes | and][ng, not only ip , some of the devices |
| 07:46.42 | and][ng | ganes: assuming you're talking about a NIC configuration you should look at /etc/network/ |
| 07:46.59 | *** part/#debian jflm (n=jflm@d83-180-202-11.cust.tele2.es) |
| 07:46.59 | SlimG | sep: Howto manually initiate a timesync with ntp after install? |
| 07:47.00 | and][ng | ganes: specifically the "interfaces" files |
| 07:47.00 | markybob | dondelelcaro, :) |
| 07:47.02 | and][ng | file* |
| 07:47.07 | sep | SlimG, start it |
| 07:47.16 | sep | then you can look at the state with ntpq |
| 07:47.45 | fireba11 | *sigh* will have to re-create quite a few SSL certificates .. :-/ |
| 07:48.25 | ganes | and][ng, yeah |
| 07:48.46 | sep | feel lucky i have upgraded most from potato--sarge--etch :) |
| 07:48.50 | ganes | and][ng, i want to stop some services when boot it taking more unnecessarily |
| 07:49.06 | sep | and still have quite a many to do... |
| 07:49.30 | *** join/#debian _keitherz_ (n=keitherz@122.53.170.128) |
| 07:49.54 | SlimG | thanks sep! |
| 07:51.11 | sep | ganes update-rc.d or install some other tool like rcconf or whatever they are called |
| 07:51.52 | and][ng | sep: is there a dpkg topic to explain runlevels ? |
| 07:52.02 | and][ng | ah lol |
| 07:52.09 | sep | !runlevel |
| 07:52.09 | dpkg | 0 is halt, 1 is single user, 2, 3, 4, 5 are multiuser, 6 is reboot. By default 2, 3, 4 and 5 are identical (no graphic/non-graphic runlevels), but you can configure this if you wish. Read /usr/share/doc/sysvinit/*; read /etc/init.d/README; man update-rc.d; if that doesn't make sense, consider installing <rcconf> or <file-rc> instead. http://www.debian-administration.org/articles/212, or ask me about <startup> |
| 07:52.14 | and][ng | !tell ganes runlevel |
| 07:52.14 | *** join/#debian xored (n=gasdasdf@HSI-KBW-078-042-051-193.hsi3.kabel-badenwuerttemberg.de) |
| 07:52.29 | and][ng | sep: straightforward |
| 07:52.36 | sep | often is |
| 07:52.36 | ganes | and][ng, init 5 |
| 07:52.38 | *** join/#debian n30 (n=n30@213.101.208.245) |
| 07:52.55 | sep | ganes, init 2-3-4-5 is equal in debian |
| 07:53.03 | *** join/#debian prh-lt (n=prh@mjr.org) |
| 07:53.04 | *** join/#debian keitherz[- (n=keitherz@122.53.170.128) |
| 07:53.17 | ganes | sep, yea |
| 07:53.17 | sep | but you are free to customize them |
| 07:54.31 | fireba11 | sep : at least outside connections with ssl is using a verisign certificate (urks) that is hopefully not generaed on the buggy version ^^ |
| 07:54.34 | *** join/#debian mrak (n=mrak@gate-out.netcentrum.cz) |
| 07:54.41 | mrak | hello there |
| 07:55.05 | ganes | sep, the service get configured at the time of boot through some file , already a file is there |
| 07:55.09 | *** join/#debian SlayerXP (n=martin@82.109.87.190) |
| 07:55.14 | ganes | sep, i think so |
| 07:55.47 | sep | fireba11, if in doubt check with the tool on the wiki |
| 07:56.11 | fireba11 | sep : i'll probably have to check everything, yes |
| 07:56.26 | vy | Is there any tool you can suggest to monitor daily/weekly/monthly/yearly system resource usage? (e.g. CPU, proc, memory, disk/swap I/O, network traffic, etc.) I was used to produce these reports using simple shell scripts and rrdtool, but I wonder if there is any tool for that. |
| 07:56.52 | sep | ganes, ofcourse it uses sysvinit. so the file is in etc/init.d and it's started/stopped acordnig to the links in /etc/rcX.d hence why i said to use update-rc.d to enable /disable the service at bot. |
| 07:57.04 | sep | ofcourse if you dont need it you could just remove it |
| 07:57.05 | Blackhold | well solved |
| 07:57.17 | mrak | can u tell me where i find changelog of nfs-common ? i need know changes between sarge package and etch package |
| 07:57.19 | sep | vy, munin |
| 07:57.26 | Blackhold | I changed a value from a file rcS |
| 07:57.57 | vy | sep: Thanks. Let me check tat. |
| 07:58.06 | sep | mrak, /usr/share/doc/nfs-common/changelog.gz |
| 07:58.15 | mrak | sep: thx |
| 07:58.20 | *** join/#debian Zoup (n=Zoup@78.110.121.1) |
| 07:58.55 | sep | mrak, also there is changelog.Debian for the debian packages changes |
| 07:59.14 | ganes | sep, thanks |
| 07:59.17 | Zoup | i have an acpi rule in my acpi direectory for swithching dpms off when lid is closed , its just working when i restart acpid while i'm in X , acpid is started in default run level |
| 08:01.11 | *** join/#debian lucia (n=lucia@125.141.117.217) |
| 08:02.19 | fireba11 | lm-sensors isn't reporting usefull values on my box, is there any place else i can find config settings for specific boards than the lm-sensors wiki ? or other hints how to fix it ? |
| 08:04.23 | *** join/#debian laurly (n=laurly@0x50a4082e.vgnxx4.adsl-dhcp.tele.dk) |
| 08:10.05 | *** join/#debian alfadir_ (n=alfadir@e180038105.adsl.alicedsl.de) |
| 08:11.31 | *** join/#debian eap (n=eap@220-245-17-97.free.tpgi.com.au) |
| 08:11.40 | *** join/#debian simonrvn (i=simon@unaffiliated/simonrvn) |
| 08:11.42 | *** join/#debian voltagex (n=voltagex@dsl-202-45-98-236.ACT.netspace.net.au) |
| 08:11.44 | *** join/#debian JJ|Laptop (n=joeyjone@S01060016365a2351.gv.shawcable.net) |
| 08:11.48 | mrak | sep: thx .. i look for change where should be know why i must wait 10-30s for refresh of attrcache on client side |
| 08:12.11 | mrak | in this time i don't see changed file |
| 08:12.12 | mrak | :/ |
| 08:12.13 | Lagbolt | <PROTECTED> |
| 08:12.47 | *** part/#debian SpooForBrains (i=spoo@anduin.net) |
| 08:12.51 | *** join/#debian floe (n=flo@i59F74FB0.versanet.de) |
| 08:12.56 | *** join/#debian funkyou (n=janm@e179132009.adsl.alicedsl.de) |
| 08:14.01 | *** join/#debian ktwilight (n=ktwiligh@224.109-66-87.adsl-dyn.isp.belgacom.be) |
| 08:14.14 | *** join/#debian abchirk (n=rapunzel@cl-2502.ham-01.de.sixxs.net) |
| 08:14.18 | fireba11 | Lagbolt: yes, and it also says the default values for the chipsets might not work for some boards, and that's the case here |
| 08:14.38 | *** join/#debian themill (n=stuart@86.53.48.59) |
| 08:14.50 | Lagbolt | is it not detecting your board or is it just giving garbage for values? |
| 08:16.03 | *** join/#debian reZo (n=reZo@203-184-20-243.jetbuster.co.nz) |
| 08:19.11 | fireba11 | Lagbolt: values are just way off |
| 08:19.35 | fireba11 | Lagbolt: so the formula to calculate the actual values from sensor data is wrong |
| 08:19.49 | *** join/#debian PDani (n=pdani@catv-56654498.catv.broadband.hu) |
| 08:20.15 | *** join/#debian Zeit|awy (n=wurscht@p4FD8D125.dip.t-dialin.net) |
| 08:20.31 | catsup | or maybe it really is 200C in there... |
| 08:20.51 | *** join/#debian namit (n=christia@83-70-241-72.b-ras1.prp.dublin.eircom.net) |
| 08:22.01 | catsup | i used to monitor a p90 cpu by putting my finger on it and counting 'til it hurt. under 10 seconds and i'd shut it off a while. |
| 08:22.23 | catsup | fireba11: would that work for you? |
| 08:22.38 | fireba11 | catsup : lol .. no i got about 15 boxes to monitor, also i want the voltages too |
| 08:22.39 | Lagbolt | fireba11, yeah i read about that once long ago. there is a file with that info or used to be |
| 08:22.42 | Lagbolt | let me look about |
| 08:23.38 | catsup | i see... 15 boxes and only 10 fingers |
| 08:24.54 | fireba11 | catsup : you using your tonge to check -12v ? |
| 08:25.07 | Lagbolt | fireba11, have you looked in /etc/sensors.conf ? |
| 08:25.16 | fireba11 | Lagbolt: of course |
| 08:25.34 | Lagbolt | what is your chipset? |
| 08:25.46 | fireba11 | Lagbolt: i can fix the formula to show reasonable values fo cours but i got no idea if that is correct then |
| 08:25.48 | *** join/#debian bullgard1 (n=detlef@p5B258E31.dip0.t-ipconnect.de) |
| 08:25.54 | catsup | fireba11: good idea! |
| 08:26.33 | fireba11 | Lagbolt : w83627thf |
| 08:26.58 | *** join/#debian neiljp (n=Neil@i-83-67-78-67.freedom2surf.net) |
| 08:27.01 | *** join/#debian zaggy-nl|cpts600 (n=zaggynl@87.195.60.182) |
| 08:27.37 | *** join/#debian Eulex (n=alex@ip937.pool.wireless.lu.se) |
| 08:27.49 | Lagbolt | what values are off? temps? voltages? all? |
| 08:28.56 | fireba11 | some voltages .. the one that have to be calculated ... cpu temp has to be off, it's lower than MBtemp ... |
| 08:29.27 | *** join/#debian KermitTheFragger (n=siepkes@118-197.bbned.dsl.internl.net) |
| 08:29.45 | Lagbolt | was your M/B listed on the configurations site? |
| 08:30.05 | fireba11 | where is that ? |
| 08:30.07 | Lagbolt | what is your board? |
| 08:30.15 | Lagbolt | http://www.lm-sensors.org/wiki/Configurations |
| 08:30.19 | fireba11 | MSI K8T Neo2 F |
| 08:30.30 | fireba11 | nope, not on that list |
| 08:30.34 | Lagbolt | hmmm |
| 08:30.37 | *** join/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 08:30.44 | Lagbolt | that is fairly new right? |
| 08:30.47 | Lagbolt | the neo2? |
| 08:31.06 | fireba11 | hm .. don't think so it's 939 after all .. the server is bit over a year old |
| 08:31.10 | *** part/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 08:31.14 | Lagbolt | hmm yeah 939 |
| 08:31.36 | fireba11 | since i don't have physical access i can't checn what bios says to guess the correct calculation of the values |
| 08:31.41 | *** join/#debian skandaleras (n=luiz@84.77.159.47) |
| 08:33.28 | Lagbolt | hmmm does this http://ubuntuforums.org/archive/index.php/t-86341.html help? same board i think |
| 08:34.32 | Lagbolt | hmm i dont think that is any help |
| 08:34.44 | Lagbolt | OLD lol |
| 08:35.35 | simonrvn | fireba11: dmidecode |
| 08:35.51 | *** join/#debian PriitM_ (n=cel1200@ip222.cab16.mus.starman.ee) |
| 08:35.54 | fireba11 | simonrvn: sorry ? |
| 08:36.04 | simonrvn | "look at the bios" |
| 08:36.36 | simonrvn | oh, that stuff, no, won't tell you that |
| 08:37.13 | *** join/#debian RaceCondition (n=RaceCond@217-159-205-18-dsl.est.estpak.ee) |
| 08:37.14 | *** join/#debian vaq (n=xaafwa@vaq/unaffiliated) |
| 08:39.11 | *** join/#debian streuner (n=streuner@p54A5BE3D.dip.t-dialin.net) |
| 08:39.24 | Lagbolt | i dont have much knowledge bout how lm-sensors works. . . maybe a bios update? |
| 08:39.57 | Lagbolt | or maybe no one has gone about getting the values tweaked for it in sensors.conf . . . there are more than a few boards not listed |
| 08:40.07 | fireba11 | Lagbolt: i repeat .. it's a rented box in soem server room far away :-) so no looking at bios, no bios update. also disabling acpi doesn't sound like a good idea for a box running 24/7 |
| 08:41.00 | Lagbolt | oh |
| 08:41.24 | Lagbolt | renting from a company or a friend? |
| 08:42.00 | *** mode/#debian [+l 847] by debhelper |
| 08:42.16 | Lagbolt | i have seen paying for virtual machines but not for the actual box . . . didnt know that was an option |
| 08:42.21 | fireba11 | Lagbolt: company .. already asked them (i needed mainboard model anyway) but it seems noone tried to use lm_sensors yet .. at least not that they know of |
| 08:42.31 | fireba11 | Lagbolt: of course :-) |
| 08:42.56 | Lagbolt | if you are renting cant you ask them to update bios or get some of those sort of questions answered? |
| 08:43.56 | *** join/#debian heavensrevenge (n=heavensr@valleyeast-cable-69-60-245-188.unitz.ca) |
| 08:45.02 | *** join/#debian oshiii-_^ (n=oshiii@unaffiliated/oshiii/x-3278) |
| 08:45.43 | Deetz | I'm planning to install debian now at work |
| 08:45.57 | Deetz | I believe the machine is 64bit it would make sense then to download the 64bit verison yes? |
| 08:45.58 | Guerin | good for you |
| 08:46.04 | Guerin | that seems to add up |
| 08:46.15 | Guerin | it depends what machine and version |
| 08:46.19 | zaggy-nl|cpts600 | if you need a lot of memory, say 4gb+, it'd be very sensible |
| 08:46.23 | Deetz | okay (only asking as the people before me were installing 32 bit versions of suse) |
| 08:46.30 | Guerin | a 64-bit mips is not much use with an amd64 distro |
| 08:46.44 | *** join/#debian omry_|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 08:46.44 | heavensrevenge | hello |
| 08:46.49 | Deetz | don't need huge amounts of ram, the install will be a vm server |
| 08:46.58 | *** join/#debian jaggz1 (i=brandon@dsl081-044-035.lax1.dsl.speakeasy.net) |
| 08:46.59 | Deetz | er not a vm server but a virtual server |
| 08:47.31 | *** join/#debian clemyeats (n=clemyeat@cacher3.ericsson.net) |
| 08:49.17 | *** join/#debian Stephan_ (n=Stephan@mail.picsel.com) |
| 08:49.57 | *** join/#debian thrasher (n=thrasher@124-170-218-98.dyn.iinet.net.au) |
| 08:50.47 | *** join/#debian CrazyEddy (n=CrazyEdd@wrongplanet/CrazyEddy) |
| 08:51.05 | Stephan | Hi. I've regenerated my openssh keys and it seems to be fine. I can connect on port 22 from any of the machines on my network (got a warning about the key having changed, but that's expected). However, I also have SSH running on port 9999. Whenever I connect from remote servers on the Internet, it closes the connection and SSH says "error: Could not load host key: /etc/ssh/ssh_host_rsa_key" in the auth logs. Does anyone know why? |
| 08:52.13 | liable | did you do a dpkg-reconfigure openssh-server? |
| 08:52.18 | Guerin | Stephan: what have you ruled out? |
| 08:52.19 | Stephan | yeah |
| 08:52.34 | liable | and the key exists? |
| 08:52.47 | telmich | hello |
| 08:52.51 | Stephan | Nothing yet. I'm confused as the keys do exist, permissions are normal (compared with another server). It works fine for port 22, just not 9999 |
| 08:53.08 | Guerin | same key for two servers? |
| 08:53.20 | Stephan | No, same permissions |
| 08:53.40 | Guerin | hmm. |
| 08:53.44 | Stephan | It also says it can't find the dsa key, then "fatal: No supported key exchange algorithms". However, I can login on port 22 from anywhere, just not the secondary port. |
| 08:53.55 | telmich | since some time I've the problem that home, end, del do not work correctly in the zsh under debian; using bindkey -e changes that behaviour to printing ~, but I am wondering where it broke |
| 08:53.56 | jim | firewall issue? maybe with isp? |
| 08:54.15 | jim | what does it say when you try? |
| 08:54.15 | *** join/#debian bip-bip (n=milani@sos.groar.org) |
| 08:54.18 | *** join/#debian cousin_luigi (n=luigi@unaffiliated/cousinluigi/x-395723) |
| 08:55.02 | Stephan | I don't think it could be a firewall issue as it worked before I regenerated the keys. I've tried logging in from remote servers that I've never connected from before too. On the remote side, I get "Connection closed by <IP>" |
| 08:55.03 | *** join/#debian Agiofws (n=agiofws@athedsl-231360.home.otenet.gr) |
| 08:55.04 | jim | wait, I backscrolled |
| 08:55.57 | jim | maybe you could watch the ssh server log while you try logging in |
| 08:56.07 | jim | no idea if that would helo |
| 08:56.12 | jim | help |
| 08:56.44 | Stephan | Yeah I've done that, it says error: Could not load host key: /etc/ssh/ssh_host_rsa_key, then the same for dsa key, then "fatal: No supported key exchange algorithms". I switched on debug logging too but it didn't say any extra info. |
| 08:57.00 | *** join/#debian woden1 (n=woden@62.225.51.138) |
| 08:57.34 | jim | anyway, just thought I'd put in my 2 cts... but you're in good hands |
| 08:57.46 | woden1 | How do I make it so that I can play DVD movies using Totem/Gstreamer? And also DivX movies too. |
| 08:57.56 | *** join/#debian Suprano (i=suprano@pD9564B22.dip.t-dialin.net) |
| 08:57.57 | Stephan | Thanks jim |
| 08:58.17 | *** join/#debian zyx386 (n=tony@unaffiliated/zyx386) |
| 08:58.38 | moshii | woden1: divx should just work |
| 08:58.59 | moshii | woden1: encrypted DVDs will require a css library |
| 08:59.00 | *** part/#debian cousin_luigi (n=luigi@unaffiliated/cousinluigi/x-395723) |
| 08:59.02 | Lagbolt | moshii, needs codecs for it. are they installed by default? |
| 08:59.13 | *** join/#debian et (n=et@130.83.213.199) |
| 08:59.24 | woden1 | moshii: if it's just a regular DVD movie, like what you would rent from blockbuster for example, is that encrypted? |
| 08:59.36 | Lagbolt | woden1, yes |
| 08:59.42 | moshii | Lagbolt: most players depend on the same libraries... which decode xvid etc out of el box |
| 08:59.45 | themill | woden1: /msg dpkg dvd playback |
| 08:59.57 | *** join/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 08:59.57 | Lagbolt | woden1, very few dvds are not encrypted |
| 09:00.15 | *** part/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 09:00.37 | woden1 | Lagbolt: ok I'm checking the dvd playback dpkg message thanks. |
| 09:00.58 | *** join/#debian bzk0711 (n=ps790413@vrvis3.rz.RWTH-Aachen.DE) |
| 09:01.25 | moshii | woden1: you may then have a problem that your DVDs have extra "protection" which none of the players handle yet |
| 09:02.24 | *** part/#debian jaggz1 (i=brandon@dsl081-044-035.lax1.dsl.speakeasy.net) |
| 09:02.42 | *** join/#debian jelly-home (n=jelly@islands.iskon.hr) |
| 09:04.05 | woden1 | I have contrib and non-free in my sources but I still don't see libdvdcss2 |
| 09:04.18 | Lagbolt | woden1, you need debian multimedia |
| 09:04.38 | moshii | or run the script that gets the library for you |
| 09:04.41 | themill | woden1: as dpkg told you, it's in debian-multimedia.org |
| 09:04.45 | Lagbolt | woden1, deb http://www.debian-multimedia.org/ etch main |
| 09:05.44 | woden1 | okay I'm checking on that thanks. |
| 09:06.39 | *** join/#debian nelf (n=nelf@host-217-159-124-123.satlynx.net) |
| 09:07.11 | *** join/#debian utrrrongeeb (n=mhciipec@blk-138-1-53.eastlink.ca) |
| 09:07.18 | *** join/#debian andres (n=andres@89.100.128.133) |
| 09:07.48 | *** join/#debian cosmodad (n=cosmodad@unaffiliated/cosmodad) |
| 09:10.16 | moshii | you really dont need all the stuff d-m |
| 09:10.25 | moshii | has |
| 09:10.25 | Stephan | Hi again, about my SSH issue, it turns out that when I switched the secondary SSH port from 9999 to 9998, it worked. So I think it's not killing off port 9999 properly or something when I restart. I need to give it a kick basically, it's not the config. |
| 09:11.31 | crem0r | hey guys. it is possible to let sshd run without root if it uses a port above 1024? |
| 09:12.42 | woden1 | Lagboldt;themill: I don't see libdvdplay0 |
| 09:12.52 | sd_ | crem0r: sshd of some sorts, perhaps, but it wont be openssh |
| 09:14.08 | the-dude | crem0r: it is possible if you want 2 |
| 09:14.44 | themill | woden1: it's in etch; but seems to have been removed so it's probably not necessary |
| 09:15.22 | woden1 | thmill: Is w32codecs necessary if I'm using Totem + Gstreamer? |
| 09:15.29 | Lagbolt | lol |
| 09:15.31 | *** join/#debian Hoxzer (n=dsadsad@dsl-hkigw7-fe1df900-39.dhcp.inet.fi) |
| 09:15.45 | *** join/#debian killerchicken (n=kc@nrbg-4dbfe063.pool.einsundeins.de) |
| 09:16.11 | Lagbolt | woden1, http://www.pctech101.com/debian_multimedia.php |
| 09:16.16 | Lagbolt | try google :) |
| 09:17.16 | killerchicken | Hi, due to the recent discovery of the bug in openssl, I am trying to use the dowkd.pl-script provided to find insecure keys. |
| 09:17.46 | crem0r | the-dude: sounds great. do you have some doku for that? |
| 09:17.56 | *** join/#debian BeerSerc (n=dries@unaffiliated/beerserc) |
| 09:18.05 | killerchicken | The command does not complete successfully, though. |
| 09:18.05 | killerchicken | http://paste.debian.net/2929/ |
| 09:18.08 | killerchicken | This is my output |
| 09:18.11 | the-dude | crem0r: No I dont but I know it would be possible with some "hacks" |
| 09:18.17 | killerchicken | I'm glad for any ideas |
| 09:18.20 | woden1 | Lagbolt: Thanks for that link. I don't want to use mplayer. I want to use Totem + Gstreamer. Will w32codecs be picked up by Totem + Gstreamer, or do I need a different package for that? |
| 09:18.41 | the-dude | crem0r: search for run ssh unprivileged user or something |
| 09:18.42 | Lagbolt | doesnt matter . . . you still need those libdvdcss2 |
| 09:18.56 | BeerSerc | Hi folks. I am trying to boot a debian netinst cd from grub, but I fail. how would I do that correctly? I have a grub running from hd, and I want to boot from CD. |
| 09:19.00 | iateadonu1 | hi... still trying to connect usb0 PDA to debian. - both can ping each other and any other machine on the LAN. i'd like to rdesktop (or ssh) and to tunnel through debian to the Internet. can i have some keywords to google? |
| 09:19.10 | *** join/#debian edico (i=fenrir@unaffiliated/edico) |
| 09:19.18 | iateadonu1 | links to good tutorials if possible. |
| 09:19.20 | themill | killerchicken: you need to specify a hostname |
| 09:19.31 | woden1 | Lagbolt: Yes I got libdvdcss2 and the other ones. But I'm asking about w32codecs package specifically. Will Totem+Gstreamer pick up w32codecs, or do I need to install gstreamer-ugly or gstreamer-bad or whatever it's called instead? |
| 09:19.40 | Guerin | iateadonu1: is it a network-like connection? |
| 09:19.42 | Lagbolt | BeerSerc, what? you have grub on the hd but want the cd? so it didnt finish installing or you cant get the cd to boot |
| 09:19.54 | Lagbolt | w32codecs gives you windows 32bit codecs |
| 09:19.59 | Lagbolt | does dpkg have something? |
| 09:20.11 | Guerin | Lagbolt: /msg dpkg w32codecs |
| 09:20.15 | Lagbolt | there it is :) |
| 09:20.19 | *** join/#debian Orion_X11 (n=vagner@189.14.64.140) |
| 09:20.24 | Lagbolt | woden1, do that or . . . google w32codecs :) |
| 09:20.29 | BeerSerc | Lagbolt: its an old installation on the hd, and I want to install a new one, but my pc wont boot from cdrom |
| 09:20.42 | *** join/#debian faux (n=user@1-1-4-21a.gkp.gbg.bostream.se) |
| 09:20.44 | Lagbolt | BeerSerc, no option in bios? |
| 09:20.44 | themill | woden1: no idea; I don't use gstreamer for anything |
| 09:21.02 | killerchicken | themill: thanks. I receive output, but not including a warning |
| 09:21.02 | Lagbolt | BeerSerc, how old is computer? might have an option during post to change boot order |
| 09:21.15 | woden1 | themill: you are not running GNOME I take it? |
| 09:21.28 | killerchicken | just "# hostname SSH-2.0-OpenSSH_4.3p2 Debian-9" |
| 09:21.29 | BeerSerc | Lagbolt: its a scsi cdrom on an old controller in a athlon xp computer |
| 09:21.31 | killerchicken | twice |
| 09:21.40 | Lagbolt | lol nice |
| 09:21.41 | killerchicken | does that mean I should take action? |
| 09:21.45 | *** join/#debian DJGummikuh (n=joey@ip3198.saw.RWTH-Aachen.DE) |
| 09:21.51 | themill | killerchicken: that means that key doesn't match the weak key database /msg dpkg dsa1571 and look at the wiki for more info |
| 09:22.01 | *** mode/#debian [+l 855] by debhelper |
| 09:22.02 | Lagbolt | um dunno bout that BeerSerc , you prob need to go to bios and set boot order |
| 09:22.04 | the-dude | crem0r: does it have to be a normal user? cause running it on a different port is easy :) |
| 09:22.16 | *** join/#debian Superbartt (n=bart@ipd50a21c9.speed.planet.nl) |
| 09:22.20 | Lagbolt | woden1, if you have libdvdcss2 and what not installed try playing the dvd |
| 09:22.26 | Lagbolt | you do not need w32codecs |
| 09:22.29 | BeerSerc | Lagbolt: I am looking for a way to boot the cd from grub |
| 09:22.34 | iateadonu1 | Guerin: yes, i guess so. it's configured in /etc/network/interfaces |
| 09:22.39 | Lagbolt | woden1, did you /msg dpkg w32codecs |
| 09:22.45 | Lagbolt | if you did you would see what they are about |
| 09:22.59 | Lagbolt | BeerSerc, hmm not sure let me see |
| 09:23.01 | *** join/#debian PaulNM (n=PaulNM@216-164-129-161.c3-0.rdl-ubr3.trpr-rdl.pa.cable.rcn.com) |
| 09:23.04 | themill | woden1: no, I don't use gnome; I use kde. |
| 09:23.06 | killerchicken | themill: thanks. I had overlooked the wiki |
| 09:23.15 | woden1 | Lagbolt: Looks like w32codecs is not for Gstreamer, which is the default multimedia back-end for Debian. Might want to put a note in the dpkg entry. |
| 09:23.39 | themill | woden1: what do you mean by default multimedia backend? |
| 09:23.52 | *** join/#debian tictac_ (n=tictac@ip24-255-224-20.ks.ks.cox.net) |
| 09:23.55 | woden1 | themill: Debian defaults to GNOME. GNOME's default multimedia back-end is Gstreamer. |
| 09:23.56 | iateadonu1 | configured just like this: ifconfig usb0 10.0.0.138 netmask 255.255.255.255 up |
| 09:23.56 | iateadonu1 | route add -host 10.0.0.200 usb0 |
| 09:24.15 | Lagbolt | woden1, :) you are right it is not :) why would anyone think it is part of gstreamer? it is not gstreamer-w32codecs lol |
| 09:24.23 | Lagbolt | BeerSerc, i think i found something for ya |
| 09:24.37 | BeerSerc | Lagbolt: nice, where? |
| 09:24.42 | iateadonu1 | so, the device at usb0 can ping all other devices in the network... but cannot ping outside the network. |
| 09:25.02 | Lagbolt | BeerSerc, maybe not, this is something about chainloading a cdrom |
| 09:25.25 | crem0r | the-dude: sshd is already running on another port ;) but it would be even more secure if it would not running with root |
| 09:25.27 | *** join/#debian derchris (n=derchris@87-194-89-163.bethere.co.uk) |
| 09:25.42 | BeerSerc | i found something about that too, but not isolinux, as debians cd is |
| 09:26.34 | moshii | crem0r: secure in what way? |
| 09:26.38 | the-dude | crem0r: running as the default user is fine :) |
| 09:26.49 | *** part/#debian dancek (n=hthartik@thoth.hut.fi) |
| 09:27.08 | the-dude | ssh uses a own user anyway :) |
| 09:27.37 | *** join/#debian kgod (n=karsten@c-67-164-35-47.hsd1.ca.comcast.net) |
| 09:29.17 | Lagbolt | BeerSerc, dont see anything obvious |
| 09:29.31 | woden1 | Lagbolt: Looks like I got it all. gstreamer0.10-plugins-ugly and gstreamer0.10-ffmpeg-full. |
| 09:30.25 | moshii | crem0r: I just re-read what you wrote... how is running on a different port "more secure"...? |
| 09:30.40 | Breakz | making ppl guess :P |
| 09:30.55 | moshii | Breakz: 3 seconds with nmap |
| 09:31.07 | Breakz | plus alot of auto bots etc.. check a fixed nr of ports |
| 09:31.39 | crem0r | moshii: it's not real more secure. its Security through obscurity. |
| 09:31.48 | Breakz | so it slightly increases security :P |
| 09:31.48 | liable | wonders how long it will take for a script for brute force key logins to turn up |
| 09:31.51 | moshii | Breakz: so it doesn't make it any more secure |
| 09:32.23 | *** join/#debian dutchfish (n=dutchfis@213.133.57.25) |
| 09:32.29 | crem0r | the bad guy has no clue on which port my sshd is running so he has to try all ports |
| 09:32.49 | moshii | crem0r: which is trivial |
| 09:32.53 | crem0r | and it keeps your auth.log much cleaner ;) |
| 09:32.54 | the-dude | I think it is a bit more secure, cause scriptkiddie useally just try port 22 |
| 09:33.03 | woden1 | Weird, I am now playing a DVD, but the volume is very low even though I have all volume controls maxed out |
| 09:33.05 | themill | liable: I have a suspicion it's not as easy as it looks |
| 09:33.13 | dutchfish | is /etc/ssl/certs/ssl-cert-snakeoil.pem affected in etch (openssl flaw) no/yes? |
| 09:33.17 | Breakz | your getting deaf woden1 |
| 09:33.19 | the-dude | at least that what my logs tell me most of the time |
| 09:33.24 | liable | themill: i suspect too, but they will try .. |
| 09:33.34 | moshii | the-dude: or you could just secure you sshd properly? |
| 09:33.52 | woden1 | Breakz: Too many times shooting the M4 in Iraq with no hearing protection :/ |
| 09:33.53 | dutchfish | and what about mysql pemÅ? |
| 09:34.15 | woden1 | Breakz: Volume is fine with headphones though. Just not through the laptop speakers. |
| 09:34.40 | *** join/#debian reto_ (i=daemon@38.23.3.213.fix.bluewin.ch) |
| 09:34.48 | moshii | the-dude: scriptkiddies are easily blocked with denyhosts |
| 09:35.27 | *** join/#debian shan (n=gan@203.129.255.178) |
| 09:39.44 | the-dude | moshii: I know or fail2ban |
| 09:40.32 | *** join/#debian ilf (n=ilf@unaffiliated/ilf) |
| 09:41.43 | woden1 | what region is the U.S. for DVD drives? |
| 09:42.56 | moshii | 1 |
| 09:43.08 | Lagbolt | <PROTECTED> |
| 09:43.27 | woden1 | yea I just found my answer already |
| 09:43.57 | *** join/#debian poopotoo1ti (i=mhirvola@shell.paivola.fi) |
| 09:44.01 | moshii | I wonder why the us is region 1,... oh right because they are Number 1(TM) |
| 09:44.13 | woden1 | I just thought it was strange that man regionset doesn't say. And when you execute regionset it doesn't say either. |
| 09:44.39 | woden1 | So I set my region to 1, but why is my 300 DVD playing in a foreign language? |
| 09:45.19 | *** join/#debian goll_ (n=goll@81.10.126.24) |
| 09:46.02 | moshii | woden1: is it in mexican? |
| 09:46.11 | Lagbolt | woden1, i have found some dvd's play the wrong audio track. try changing it |
| 09:46.22 | cosmodad | regarding the openssl security hole: is there a chance that openssl keys marked as non-weak are in fact weak? I mean, how strong is this non-weak guarantee? (on a sub-paranoic level) |
| 09:46.51 | *** join/#debian dolphin_noel (n=opensour@85.138.86.180) |
| 09:46.54 | themill | cosmodad: the tool is known to generate false positives and false negatives |
| 09:47.09 | woden1 | moshii: very funny guy. |
| 09:47.10 | liable | cosmodad: just regenerate them |
| 09:47.13 | *** join/#debian hjubal (n=hjubal@unaffiliated/hjubal) |
| 09:47.24 | cosmodad | ok |
| 09:47.30 | cosmodad | so the tool isn't really that helpful I suppose? |
| 09:47.32 | *** join/#debian duns_s (n=duns_s@mnhm-590e0415.pool.einsundeins.de) |
| 09:47.42 | liable | not really |
| 09:47.48 | *** join/#debian fstab (n=fstab@c-98-192-187-67.hsd1.ca.comcast.net) |
| 09:47.55 | liable | not if you really want to be sure |
| 09:48.01 | BeerSerc | In the manual it says "Copy the following files from the Debian archives to a convenient location on your hard drive, for instance to /boot/newinstall/" for installing from hard disk. where can I find those files for current stable? |
| 09:48.21 | liable | in the hd-media dir |
| 09:48.54 | fstab | hey guys im trying to mount a ftp as a local directory on my computer example mount ftp://user:user@0.0.0.0:21 /mnt/somefolder |
| 09:49.19 | cosmodad | I'm curious, why have keys become very weak only due to a faulty RNG? shouldn't the password provided when creating the key help out? |
| 09:49.33 | BeerSerc | liable: where? I dont understand. on the CD is no media folder |
| 09:49.59 | dutchfish | is /etc/ssl/certs/ssl-cert-snakeoil.pem affected in etch (openssl flaw) ... can someone help me out? |
| 09:50.02 | BeerSerc | liable: I found it! thx |
| 09:50.24 | themill | dutchfish: if it was generated on an etch machine then yes. |
| 09:50.37 | *** part/#debian PaulNM (n=PaulNM@216-164-129-161.c3-0.rdl-ubr3.trpr-rdl.pa.cable.rcn.com) |
| 09:50.38 | *** join/#debian rdd (n=rdd@c83-250-142-219.bredband.comhem.se) |
| 09:50.49 | *** join/#debian PhilKC (i=PhilKC@freenode/staff/philkc) |
| 09:50.49 | dutchfish | themill, and ssl keys for mysql also i suppose? |
| 09:51.38 | themill | dutchfish: I don't think there are any certs for mysql in a default installation |
| 09:51.39 | Bushmills | cosmodad: i doubt that the passphrase will help - if you can regenerate a private key from a public key, you can generate it without passphrase. |
| 09:51.47 | fstab | any ideas guys? |
| 09:51.52 | dutchfish | themill, how can i regenerate /etc/ssl/certs/ssl-cert-snakeoil.pem ? |
| 09:51.55 | fstab | !mount |
| 09:51.55 | dpkg | [mount] a command used to mount a device to the local filesystem |
| 09:53.21 | *** join/#debian PingFloyd (n=pingfloy@adsl-68-88-122-54.dsl.lgvwtx.swbell.net) |
| 09:53.26 | idimmu | fstab: you can use gnome-vfs to do that (afaik thatll make it only accessable through gnome) |
| 09:53.58 | fstab | hmm |
| 09:54.12 | fstab | can i get gnome-vfs onto kde |
| 09:54.23 | idimmu | kde probably has it's own better alternative |
| 09:54.32 | themill | http://lists.debian.org/debian-security-announce/2008/msg00153.html |
| 09:54.33 | idimmu | atleast i think it has, i dont use kde |
| 09:54.35 | fstab | aww idimmu |
| 09:54.39 | *** join/#debian foobar8 (n=user@dslb-088-066-244-077.pools.arcor-ip.net) |
| 09:54.41 | fstab | oh |
| 09:54.43 | idimmu | http://gentoo-wiki.com/HOWTO_FTP_Mount |
| 09:54.46 | *** join/#debian nihil (i=mh@140.78.191.178) |
| 09:54.50 | idimmu | fstab use fuse ^^ |
| 09:54.51 | fstab | thank you |
| 09:54.58 | fstab | yes i have fuse |
| 09:55.01 | *** join/#debian kaneda (n=kaneda@joe.grn.es) |
| 09:55.13 | *** join/#debian tolecnal_ (n=tolecnal@215.80-203-134.nextgentel.com) |
| 09:55.21 | *** join/#debian henry (n=hnt@156.234-244-81.adsl-dyn.isp.belgacom.be) |
| 09:55.25 | fstab | i was reading onn it but got very lost |
| 09:55.36 | themill | dpkg: dsa1571 is also updated openssh packages that check for weak keys are now available http://lists.debian.org/debian-security-announce/2008/msg00153.html |
| 09:55.36 | dpkg | that's too long, themill |
| 09:55.41 | themill | dpkg: fuck you |
| 09:55.42 | dpkg | no, fuck you |
| 09:55.45 | cosmodad | Bushmills: I see. |
| 09:55.46 | idimmu | in ubuntu fuse is easy, in debian i cant imagine its much different |
| 09:55.52 | themill | sulks in the corner |
| 09:56.29 | Lagbolt | fuse is def easy |
| 09:56.43 | kgod | is looking for a good music player/organizer app but doesn't feel like risking a poll.... |
| 09:56.53 | Lagbolt | install fuse, add your user to fuse group and yay fuse |
| 09:57.17 | Bushmills | and weak because a random number, derived from a limited set of seeds to a pseudo random generator, is not a good random number anymore. key generation relies on a trap door function. that is, a function which can not easily be reversed without all initial operands. by limiting the set of one of the operands, the results is guessable. |
| 09:57.33 | cosmodad | Bushmills: so if I cannot provide a quick key recreation now, I guess I should just delete my public keys spread around the world? That would prevent evildoers from cracking any keys? |
| 09:57.40 | *** join/#debian zaggy-nl|cpts600 (n=zaggynl@87.195.60.182) |
| 09:57.48 | fstab | sshfs [user@]host:[dir] mountpoint so would that be like sshfs ftp://user:user@1.1.1.1:21/G /mnt/somefolder |
| 09:57.49 | kgod | Bushmills: BTW, konqueror's search: khtml-plugins, IIRC. |
| 09:58.09 | kgod | Bushmills: konq-plugins |
| 09:58.14 | kgod | Bushmills: From a week or so back. |
| 09:58.26 | Bushmills | sorry, not "all" but "some" |
| 09:58.36 | *** join/#debian djr (n=djr@82.209.149.167) |
| 09:58.36 | Lagbolt | fstab, sshfs is nice i user it a lot, you can try curlftpfs as well |
| 09:58.57 | djr | would it be possible to install a specific apache2 version in etch? |
| 09:59.15 | Bushmills | cosmodad: yes, you should do that. at least, weak keys. |
| 09:59.34 | cosmodad | Bushmills: okey. |
| 09:59.40 | *** join/#debian ootput (n=ootput@unaffiliated/ootput) |
| 10:00.37 | fstab | lagbolt im just trying to mount my xbox ftp to my asus 2g eee so i can save my downloaded files from ktorrent onto the xbox basically sense theres only 2 gigs worth of space on my computer, I will be saving directly to the xbox. How ghetto am i |
| 10:00.58 | fstab | :) |
| 10:01.19 | Lagbolt | very ghetto |
| 10:01.33 | fstab | well i guess this will be a good experience |
| 10:01.37 | *** join/#debian jc_ (n=jc@AMontpellier-257-1-118-26.w90-0.abo.wanadoo.fr) |
| 10:01.40 | Lagbolt | try curlftpfs |
| 10:01.40 | jelly-home | fstab: sshfs uses sftp as transport. can't use it for an ftp server. |
| 10:01.42 | dutchfish | themill, thank you |
| 10:01.43 | jelly-home | right |
| 10:02.01 | *** mode/#debian [+l 864] by debhelper |
| 10:02.12 | Lagbolt | fstab, you can also ftp:// using nautilus if you have that i believe |
| 10:02.16 | themill | dutchfish: no worries. There doesn't seem to be a reliable way of detecting weak openssl certs other than those for ssh at present. |
| 10:02.27 | liable | bah, now i need to regenerate keys again! |
| 10:02.34 | fstab | hmm ill get nautilus |
| 10:02.41 | *** join/#debian xenosoz_ (n=antispam@222.112.72.106) |
| 10:02.41 | fstab | just modprobed fuse |
| 10:02.47 | fstab | how do i unmodprobe it |
| 10:02.52 | jelly-home | fstab: curlftpfs is nice |
| 10:02.54 | dutchfish | themill, so, what about the .pem ones, should i just wait a bit more or regenrate them all for ALL packages? |
| 10:02.56 | Bushmills | kgod, konq-plugins? what about them? |
| 10:03.11 | Lagbolt | unmodprobe lol |
| 10:03.16 | fstab | haha |
| 10:03.17 | dutchfish | themill, like ssl-vpn, mail, apache2, mysql, ntop etc ect |
| 10:03.18 | Lagbolt | rmmod fuse fstab |
| 10:03.22 | themill | dutchfish: that seems to be the course of action to take :( |
| 10:03.24 | fstab | thank you |
| 10:03.33 | Lagbolt | unmodprobe, i am aliasing that |
| 10:03.38 | fstab | im a goober |
| 10:03.49 | fstab | i was going to do umodprobe |
| 10:03.51 | jelly-home | "modprobe -r" |
| 10:03.54 | fstab | like umount |
| 10:04.23 | fstab | :P |
| 10:04.30 | *** part/#debian henry (n=hnt@156.234-244-81.adsl-dyn.isp.belgacom.be) |
| 10:04.33 | Lagbolt | liable, http://selinuxnews.org/planet/ |
| 10:05.06 | Lagbolt | i love mythweb :) 9 days 13 hours 57 minutes of recorded tv awaits me when i get home |
| 10:05.18 | *** join/#debian muh2000 (n=muh2000@unaffiliated/muh2000) |
| 10:05.44 | dutchfish | themill, i did most of them but i am worried about ssl-cert-snakeoil.pem because on many machines its symlinked many times too |
| 10:05.57 | foobar8 | is trying the dowkd.pl tool to detect weak keys worth it? (if understand correctly it is only a blacklist?) |
| 10:06.08 | *** join/#debian ghenry (n=ghenry@suretecsystems.plus.com) |
| 10:06.14 | *** part/#debian djr (n=djr@82.209.149.167) |
| 10:06.21 | Bushmills | Lagbolt: i understand, i'd postpone going home too in that case :) |
| 10:06.35 | Lagbolt | Bushmills, :) |
| 10:06.45 | themill | dutchfish: if that's actually being used then you've probably got other problems... |
| 10:07.03 | *** join/#debian szymon (n=szymon@cba180.neoplus.adsl.tpnet.pl) |
| 10:07.04 | dutchfish | themill, exim uses it as default |
| 10:07.08 | themill | :( |
| 10:07.32 | dutchfish | themill, ok, thanks so far (and for th elnik) |
| 10:07.46 | dutchfish | s/elnik/link |
| 10:07.57 | foobar8 | could somebody paste a md5sum of dowkd.pl.gz ? |
| 10:08.01 | Bushmills | Lagbolt: douglas adams described video recorders as one of the helpful kind machines, which relieve people of some burdens - in that case the burden of watching TV |
| 10:08.02 | *** join/#debian keyvision (n=keyvisio@89-96-199-46.ip13.fastwebnet.it) |
| 10:08.03 | *** join/#debian shinoj (n=shinoj@117.97.1.135) |
| 10:08.19 | *** join/#debian sandsmark (n=quassel@likbilen.com) |
| 10:08.26 | Bushmills | (thats was where he also invented electrical monks, machines which take over the task of believing) |
| 10:08.37 | sandsmark | what is the difference between "unknown" and "not blacklisted" from the vulnkeys utility? |
| 10:08.53 | Lagbolt | Bushmills, lol nice . . . prob is 8 tuners and a roomate that records ALL SHOWS EVER |
| 10:09.09 | sandsmark | Bushmills: dirk gently? =) |
| 10:09.13 | Bushmills | sandsmark: yes |
| 10:09.17 | fireba11 | ow .. openssh-blacklist package .. neat |
| 10:09.22 | foobar8 | sandsmark: vulnkeys utility = dowkd.pl ? |
| 10:09.29 | sandsmark | no, ssh-vulnkeys |
| 10:09.29 | *** part/#debian killerchicken (n=kc@nrbg-4dbfe063.pool.einsundeins.de) |
| 10:09.37 | sandsmark | which brings in the aforementioned openssh-blacklist |
| 10:09.40 | fstab | sweet i like nautilus now i can remove konqueror its crap |
| 10:09.49 | *** join/#debian robboplus (n=no@unaffiliated/robboplus) |
| 10:09.56 | sandsmark | fstab: try Dolphin =) |
| 10:10.23 | fstab | dolphin? will that mount ftp as a directory? |
| 10:10.24 | Bushmills | sandsmark: quote from hitchhikers' guide, and most people know those. quote from tea time, and only few do. the latter seems to be much less popular than the former. |
| 10:10.29 | fstab | !dolphin |
| 10:10.35 | fstab | nope haha |
| 10:10.38 | *** join/#debian Rprp (n=Rprp@cc763024-b.groni1.gr.home.nl) |
| 10:10.43 | fireba11 | that was fast |
| 10:10.52 | sandsmark | fstab: oh, dolphin use the same mechanisms as konqueror |
| 10:11.04 | sandsmark | jumped to conclusions |
| 10:11.54 | fstab | its okay |
| 10:11.56 | fstab | :) |
| 10:12.16 | fstab | konqueror is a bit bulky anyhow nautilus came in with the weight of 15 mb |
| 10:12.21 | *** join/#debian LimCore (n=rafal@unaffiliated/limcore) |
| 10:12.40 | sandsmark | fstab: konqueror tries to be everything to everyone, which is bad imho |
| 10:12.51 | sandsmark | dolphin just tries to be a neat file manager, and does it very well =) |
| 10:12.59 | sandsmark | (it's the default in kde 4) |
| 10:13.07 | *** join/#debian assasukasse (n=agostino@host-84-222-170-152.cust-adsl.tiscali.it) |
| 10:13.09 | *** join/#debian ktwilight_ (n=ktwiligh@224.109-66-87.adsl-dyn.isp.belgacom.be) |
| 10:13.37 | fstab | sweet |
| 10:13.43 | *** join/#debian M0ffe (n=moffe@smaug.amagerkollegiet.dk) |
| 10:13.46 | Bushmills | sandsmark: so computers are bad too, by emulate many different types of machines? |
| 10:13.49 | Bushmills | emulating |
| 10:14.15 | *** join/#debian zd32nv (n=zd32nv@unaffiliated/ootput) |
| 10:14.21 | fstab | oh no i think that i asked to many questions :P |
| 10:14.37 | sandsmark | Bushmills: what I meant was that apps should do one thing, and do it well =) |
| 10:14.55 | Bushmills | sandsmark: like, a type writer instead of a word processor |
| 10:15.23 | themill | like latex and not m$ word |
| 10:15.24 | sandsmark | Bushmills: no, like a file manager trying to be both a file manager, web browser, and a type writer |
| 10:15.27 | *** join/#debian jg_uk (n=jmkg@62.3.216.18) |
| 10:15.28 | *** join/#debian INternat (n=nf@123-243-184-161.static.tpgi.com.au) |
| 10:16.01 | *** join/#debian ktwilight (n=ktwiligh@224.109-66-87.adsl-dyn.isp.belgacom.be) |
| 10:16.25 | *** join/#debian nonno (n=nonno@ppp-210-118.33-151.iol.it) |
| 10:16.26 | Bushmills | or like a computer, trying to be type writer, video game, desk calculator, brain extension and much more all at the same time |
| 10:17.39 | fstab | sweet hey guys this is going to work good the only thing is nautilus is using sftp 192.168.2.3 i need the addy changed to 192.168.0.3:21 anyone know how to change this |
| 10:17.58 | fstab | Couldn't display "sftp://192.168.2.3:22/" see |
| 10:18.37 | Kevin` | ssh on port 21? |
| 10:18.38 | Kevin` | odd |
| 10:19.04 | jelly-home | fstab: sftp and ftp are totally different things |
| 10:19.04 | fstab | kevin its my xbox :P |
| 10:19.08 | fstab | aww |
| 10:19.28 | *** join/#debian Meaw (n=salem@a148-38.adsl.paltel.net) |
| 10:19.33 | fstab | darn im going to try one more thing turn my xbox into a windows share |
| 10:19.37 | *** join/#debian Holborn (n=holborn@unaffiliated/holborn) |
| 10:19.37 | foobar8 | sandsmark: can't find anything about ssh-vulnkeys - any url? |
| 10:19.40 | Bushmills | fstab: nautilus will accept that |
| 10:19.44 | jelly-home | fstab: if you have an ftp server, use ftp. |
| 10:19.49 | sandsmark | foobar8: erh... that's why I came here =) |
| 10:20.05 | themill | foobar8: it's in the new openssh packages |
| 10:20.07 | sandsmark | usually use Arch Linux =) |
| 10:20.15 | foobar8 | themill: thanks |
| 10:20.23 | *** join/#debian SlackDeb (n=fperetti@201.254.118.95) |
| 10:21.51 | *** join/#debian agnitio_ (n=magnus@h-91-126-123-244.wholesale.rp80.se) |
| 10:22.11 | fstab | okay i think its mounted i did connect to server |
| 10:22.34 | *** join/#debian waxhead_ (n=pete@124.176.59.252) |
| 10:23.02 | *** join/#debian Sero (n=sero@site02.streamnetworks.no) |
| 10:23.25 | Kevin` | you know, you'd think it would be easier to turn an xbox into a windows share, considering it's a microsoft product? |
| 10:23.28 | jelly-home | !info openssh-server etch |
| 10:23.33 | waxhead_ | hi everyone.. is there a page that explains to a dummy how to get a source package, patch it and then build it? |
| 10:23.52 | dpkg | openssh-server: (Secure shell server, an rshd replacement), section net, is optional. Version: 1:4.3p2-9 (etch), Packaged size: 216 kB, Installed size: 556 kB |
| 10:23.54 | *** join/#debian zd32nv (n=zd32nv@unaffiliated/ootput) |
| 10:24.04 | Sero | Hi! I have a "new" box I am trying to install; it has an Intel Xeon 3.2Ghz 64-bit CPU. I've downloaded the ia64 net install image, but it doesn't boot!? it just hangs.... any clues to what might be causing this? |
| 10:24.19 | *** join/#debian format_c (n=koeppea@p57A71C35.dip0.t-ipconnect.de) |
| 10:24.22 | Kevin` | Sero: the cpu isn't ia64, it's amd64 |
| 10:24.26 | Sero | (it boots from a fedora core cd, but we wouldn't want that now, would we!) |
| 10:24.31 | Sero | fuck |
| 10:24.33 | Sero | sorry |
| 10:24.35 | themill | jelly-home: 1:4.3p2-9etch1 has just hit security |
| 10:24.51 | *** part/#debian msshams (n=msshams@91.184.75.47) |
| 10:25.05 | Kevin` | Sero: be happy, it's an easy fix =p |
| 10:25.12 | Sero | ;) |
| 10:25.26 | Sero | what's IA then?= |
| 10:25.37 | Kevin` | itanium |
| 10:25.38 | drac | Sero: Itanium |
| 10:25.39 | themill | !ia64 |
| 10:25.39 | dpkg | it has been said that ia64 is (Intel Architecture-64), a 64-bit processor architecture developed in cooperation by Intel and Hewlett-Packard, implemented by processors such as Itanium and Itanium 2. The goal of Itanium was to produce a "post-RISC era" arch using EPIC. see http://www.debian.org/ports/ia64/ -- if your CPU is opteron/athlon64/turion/sempron/xeon/em64t/pentium/core2duo/core*, then it is NOT ia64, it's amd64 |
| 10:25.46 | jelly-home | themill: I guess it's too new for aptitude changelog openssh-server=4.3p2-9etch1 |
| 10:26.12 | themill | jelly-home: yeah. that won't work until the next point release, aiui |
| 10:26.29 | *** join/#debian hkai1 (n=dpalic@ip-77-24-202-145.web.vodafone.de) |
| 10:26.35 | hkai1 | hi |
| 10:27.03 | hkai1 | anyone here, who has experiences with measuring time between tiers in one application? |
| 10:28.11 | *** join/#debian Rajec (n=opera@dsl-static-105.212-5-197.telecom.sk) |
| 10:28.11 | antgel | !tell hkai1 abount smart questions |
| 10:28.28 | *** join/#debian dagar (n=dagar@206-248-137-66.dsl.teksavvy.com) |
| 10:29.21 | shital_ | i compiled and created bzImage kernel and m usung initrd from debian, using these m trying to boot a custom distro but its waiting at "files needed to boot" and its giving initramfs commandprompt? where i went wrong can any one tell me? |
| 10:29.21 | Rajec | hi sorry about OT but what is word in english for list where you write what did you work on during your day and then you give it yo your employeer? |
| 10:29.22 | *** join/#debian Stephan_ (n=Stephan@mail.picsel.com) |
| 10:29.22 | Kevin` | shital_: did you recreate the initrd? |
| 10:29.22 | themill | Rajec: timesheet? |
| 10:30.07 | Rajec | themill: yeah thx :) |
| 10:30.15 | Kevin` | shital_: mkinitramfs -o initrd.bin kernel_version if not (probably have to have the modules installed) |
| 10:30.25 | petemc | worksheet |
| 10:31.14 | themill | dpkg: ssh-vulnkey is a tool to identify known weak ssh keys (ask me about <dsa1571>). It is found in the openssh-client package version 4.3p2-9etch1 or later; you will need to "aptitude update && aptitude dist-upgrade" to also install the new openssh-blacklist package. See http://wiki.debian.org/SSLkeys for usage. |
| 10:31.14 | dpkg | themill: okay |
| 10:32.00 | *** mode/#debian [+l 870] by debhelper |
| 10:32.21 | *** join/#debian taoyuan (n=taoyuan@210.21.201.122) |
| 10:32.27 | Kevin` | when/is lenny going to get that ssh update? |
| 10:32.42 | taoyuan | who knows? |
| 10:32.48 | *** join/#debian si0ux (n=si0ux@201-048-208-161.static.ctbctelecom.com.br) |
| 10:32.57 | Kevin` | meh. i'll just reinstall with etch :) |
| 10:33.11 | themill | Kevin`: 10 days according to http://release.debian.org/migration/testing.pl?package=openssh unless someone hints it sooner |
| 10:33.27 | themill | (well, that and openssh is frozen now....) |
| 10:33.38 | taoyuan | i 'm using etch . hey kevin, how 's the feel of lenny? |
| 10:33.43 | haxi | do anyone knows if Western Digital My Book II Essential Edition 500 Go USB 2.0 works on linux? |
| 10:33.55 | *** part/#debian shinoj (n=shinoj@117.97.1.135) |
| 10:34.10 | kevind23 | I like Lenny :) |
| 10:34.22 | Kevin` | taoyuan: i'm just using it for a server. it's been very good so far though |
| 10:34.49 | taoyuan | what kind of server do you run? |
| 10:34.56 | Kevin` | haxi: it almost surely does, all usb hard drives use the same interface |
| 10:35.14 | taoyuan | i have a samba in my intranet using etch |
| 10:35.18 | Kevin` | taoyuan: xen host - email, web sites, etc |
| 10:35.51 | kevind23 | taoyuan: There isn't much difference between Lenny and Etch, aside from up-to-date packages in Lenny, that also happen to be slightly more unstable than those in etch |
| 10:35.58 | *** part/#debian KimuSan^ (n=kimusan@ip205.tankegang.dk) |
| 10:36.14 | taoyuan | yes ,i undersood. |
| 10:36.19 | *** join/#debian Caoimhin (n=Caoimhin@ANantes-256-1-126-194.w90-12.abo.wanadoo.fr) |
| 10:36.33 | *** join/#debian acemi (n=acemi@unaffiliated/acemi) |
| 10:36.49 | taoyuan | i got 2 linux machine right , one for sama , another for desktop using |
| 10:37.01 | *** join/#debian msshams (n=msshams@91.184.75.47) |
| 10:37.13 | taoyuan | and i got some IBM x series , i plan to install etch on them |
| 10:37.18 | msshams | some times my load of server rise to 100!!! when i stop the apache2 load down to normal average. how can i find what is problem? |
| 10:37.38 | *** join/#debian the-dude_ (n=the-dude@senturparks.xs4all.nl) |
| 10:37.38 | Kevin` | msshams: apache log file might be a good start |
| 10:38.10 | *** join/#debian ustunozgur (n=ustun@88.232.26.150) |
| 10:38.28 | msshams | which log file? access log? error log? which?> |
| 10:38.53 | Kevin` | access log probably. it's YOUR system, you know what's normal and not |
| 10:39.39 | *** join/#debian zd32nv (n=zd32nv@unaffiliated/ootput) |
| 10:39.59 | msshams | can you recommend me a software that can analyze access.log? |
| 10:40.04 | Kevin` | less |
| 10:40.18 | *** join/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 10:40.20 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 10:40.32 | *** join/#debian ghatak (n=idontkno@84-93-217-81.plus.net) |
| 10:40.36 | *** part/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 10:40.36 | cosmodad | assuming an attacker exploited the recent openssl weak key flaw, how can this be used on a remote machine where the public key is stored? |
| 10:40.39 | taoyuan | less and grep :-) |
| 10:40.45 | *** join/#debian daya (n=daya@202.79.37.177) |
| 10:41.10 | shital_ | Kevin: i have not created initrd instead i used Debian's existing initrd |
| 10:41.11 | cosmodad | I cannot see how eavesdropping and such works, unless a MITM approach was taken. |
| 10:41.28 | Kevin` | shital_: that probably won't work since it has modules that must match your kernel |
| 10:41.53 | shital_ | ok |
| 10:41.55 | et | cosmodad: define "can be used on" |
| 10:41.55 | sd_ | cosmodad: for i in `seq 300 32768`; do echo "-i"; echo "rsa$i"; done | xargs -L 14 | xargs -P 8 -I '{}' sh -c "echo '{}'; if ssh user@host {} ls; then exit 255; else exit 0; fi" ... is the common use case ... |
| 10:42.19 | ghatak | Hi, when using /usr/bin/dpkg-query --show --showformat='${Package}\n${Description}' apt . The description bit is too big, is there a way/tag to get short desc ? |
| 10:42.21 | cosmodad | et: taken advantage of |
| 10:42.53 | *** join/#debian killerchicken (n=kc@nrbg-4dbfe063.pool.einsundeins.de) |
| 10:42.58 | shital_ | Kevin:can u tell the link how to create initrd? |
| 10:43.02 | *** join/#debian Cobra| (n=aa@Uba6b.u.pppool.de) |
| 10:43.06 | cosmodad | sd_: can you tell me what this does in a nutshell? I get lost when xargs'ing starts. |
| 10:43.10 | Kevin` | shital_: mkinitramfs -o initrd.bin kernel_version |
| 10:43.26 | shital_ | thank you |
| 10:43.44 | killerchicken | In the wiki, it says nothing about fingerprint verification of bad keys. What format do I have to use so that dowkd.pl can check the fingerprints in those files? |
| 10:43.47 | sd_ | cosmodad: tries 32k pregenerated private keys against someone's account, hoping that someone has weak public key in their authorized_keys |
| 10:43.49 | jelly-home | msshams: webalizer is probably the most common, but when you're having issues in real time, you'll do it with less |
| 10:43.56 | kevind23 | shital_: If you won't use tab complete, can you please use "Kevin`"? "Kevin" alone highlights me. |
| 10:44.05 | taoyuan | everyone ,good bye! |
| 10:44.18 | Kevin` | sd_: where are those pregenerated private keys? |
| 10:44.34 | jelly-home | kevind23: um, fix your highlighting? :-) |
| 10:44.41 | *** part/#debian Rajec (n=opera@dsl-static-105.212-5-197.telecom.sk) |
| 10:44.41 | cosmodad | sd_: I was thinking one step ahead. What if someone managed to guess my private key? What next? |
| 10:44.43 | sd_ | its easy to figure them out, but its better for them to be not publicly available |
| 10:45.02 | kevind23 | jelly-home: I go by Kevin on many networks, and I don't think I can get network-specific lightlighting |
| 10:45.09 | sd_ | that is, the script above cracks an account w/ weak key in about 1-5 minutes |
| 10:45.37 | prh-lt | sd_: what script? That's scary |
| 10:45.40 | shital_ | it was looking for "files needed to boot" what are these files and where should be these? |
| 10:46.49 | moshii | sd_: 32k... blocked by denyhosts very quickly then |
| 10:47.00 | *** join/#debian dokma (n=chatzill@78-0-185-4.adsl.net.t-com.hr) |
| 10:47.35 | cosmodad | sd_: for instance, would it be feasible to eavesdrop traffic going through a (cracked) SSH channel? Can't see that since it would require messing in someone else's address space. |
| 10:47.51 | cosmodad | sd_: disregarding MITM. |
| 10:48.08 | moshii | cosmodad: or working over a insecure channel |
| 10:49.00 | msshams | jelly-home: is webalizer for analyze only one site? or all of access.log file? |
| 10:49.02 | cosmodad | moshii: how'd that help if the attacker had only access to one endpoint (the one where the public key was cracked)? |
| 10:49.03 | Kevin` | cosmodad: bigger problem is authorized_keys |
| 10:49.07 | sd_ | moshii: see the oneliner, it tries 7 keys at once |
| 10:49.38 | cosmodad | Kevin`: could you explain? |
| 10:49.40 | sd_ | of course host keys are issue too, its trivial to do mitm now |
| 10:49.47 | *** join/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 10:49.59 | jelly-home | msshams: whatever logs you give it, it parses and draws some nice stats |
| 10:50.00 | sd_ | but that is another level of attack, kids hunting for weak authorized_keys is whats happening now |
| 10:50.05 | *** part/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 10:50.06 | moshii | sd_: a few bad login attempts is all you need for denyhosts/similar to block that host |
| 10:50.09 | Kevin` | cosmodad: it's possible and very common to use rsa keys for authentication with ssh |
| 10:50.20 | sd_ | moshii: by default these wont be logged anywhere |
| 10:50.28 | sd_ | thats the most fun part about it, btw :) |
| 10:50.31 | *** join/#debian misnix (n=jkr@corona.xs4all.nl) |
| 10:50.53 | sd_ | moshii: try passing 7 keys (-i parameter) to ssh ... it will just kick you out with _nothing_ in logs |
| 10:50.55 | cosmodad | Kevin`: surely. |
| 10:51.16 | sd_ | moshii: ie tcpwrappers otherwise you're screwed ... |
| 10:51.22 | cosmodad | can I have one example of key abuse that doesn't involve being required to be a MITM? |
| 10:51.37 | Kevin` | cosmodad: you don't seem to understand the issue |
| 10:51.38 | sd_ | yup |
| 10:51.41 | Kevin` | it allows login without a password |
| 10:51.54 | sd_ | cosmodad: paste me weak key public key, i'll give you private key for it |
| 10:51.57 | Kevin` | that doesn't require mitm |
| 10:51.58 | sd_ | cosmodad: isnt that enough? :) |
| 10:52.05 | cosmodad | Kevin`: in the compromised machine, that is? |
| 10:52.10 | moshii | Kevin`: then you have the problem that the stream is encrypted with your key material |
| 10:52.16 | cosmodad | Kevin`: compromised = where the pub key is located. |
| 10:52.21 | *** join/#debian nocti (n=skjdfsdj@222.127.93.226) |
| 10:52.34 | cosmodad | sd_: I don't question your capability on that. :) |
| 10:52.35 | *** join/#debian Eulex (n=alex@81-237-247-113-no120.tbcn.telia.com) |
| 10:52.56 | foobar8 | how many CA's are affected by this? how do they manage it? |
| 10:53.02 | Kevin` | cosmodad: sd_ can run his little script against your computer and get a root login remotely without entering a password, assuming you enabled this form of authentication |
| 10:53.29 | cosmodad | Kevin`: ok I see. |
| 10:53.31 | foobar8 | did somebody check ca-certificates already? |
| 10:53.32 | moshii | wonders how many sites are uses weak certs.. |
| 10:53.43 | *** join/#debian slxix (n=randy@p2083-ipbf216hodogaya.kanagawa.ocn.ne.jp) |
| 10:53.46 | *** join/#debian mzb_d800 (n=mzb@ppp108-88.static.internode.on.net) |
| 10:53.51 | cosmodad | Kevin`: I didn't get that you don't actually need access to the public key file. |
| 10:54.09 | sd_ | you dont, you just try em all, if you know the public key, its one hit game :/ |
| 10:54.40 | *** join/#debian ranit (n=ranjit@61.16.248.242) |
| 10:54.48 | ranit | i did every thing possible, from installing restrictive driver for Broadcom Corporation BCM94311MCG wlan mini-PCI (rev 01), iwconfig is giving me correct response, network-manager is installed, now what to do |
| 10:54.56 | zd32nv | how do i add an alternative tool for, say, x-www-browser? I'm testing the firefox beta build that resides in /usr/local/swiftweasel/bin |
| 10:55.02 | moshii | sd_: you could do it before, it's just now the amount of keys you have to try is a lot smaller |
| 10:55.09 | ranit | i did every thing possible, from installing restrictive driver for Broadcom Corporation BCM94311MCG wlan mini-PCI (rev 01), iwconfig is giving me correct response, network-manager is installed, now what to do |
| 10:55.10 | zd32nv | (for update-alternatives purposes) |
| 10:55.21 | Eulex | ranit, get an ip with dhclient or pump? |
| 10:55.41 | cosmodad | Kevin`, sd_: but why do people claim that stealing passwords is possible? How'd that work? |
| 10:55.45 | *** part/#debian hkai1 (n=dpalic@ip-77-24-202-145.web.vodafone.de) |
| 10:56.06 | Kevin` | stealing passwords would require a MITM |
| 10:56.15 | Kevin` | ..or root access and cat /etc/shadow and crack it |
| 10:56.17 | sd_ | and low elvel network access |
| 10:56.28 | cosmodad | ok. |
| 10:56.40 | *** join/#debian cahoot (n=radix@pdpc/supporter/active/cahoot) |
| 10:56.48 | *** part/#debian killerchicken (n=kc@nrbg-4dbfe063.pool.einsundeins.de) |
| 10:56.52 | cosmodad | or can you key-log without root access? |
| 10:56.53 | sd_ | the eminent danger is for people using authorized_keys as auth method (lots of people do) |
| 10:57.24 | *** join/#debian roald_ (n=roald@ip51cda99e.speed.planet.nl) |
| 10:57.36 | Kevin` | I hope there isn't a way to key-log without root access. sd_ would probably know :) |
| 10:57.51 | sd_ | cosmodad: well, i'm not sure youre familiar with the whole public auth concept :) |
| 10:57.51 | sandsmark | cosmodad: a process can monitor all input/output from all processes run as the same users |
| 10:57.54 | slxix | you can key-log with physical access |
| 10:58.22 | sandsmark | cosmodad: the system monitor in kde 4 allows you to attach to all processes (you have access to), and see what goes in and out |
| 10:58.38 | cosmodad | sd_: I'd consider myself to be, in fact. Just got a bit rusty on it. :) |
| 10:58.42 | *** join/#debian |inuxmath (n=mike@198.188-224-87.telenet.ru) |
| 10:58.54 | cosmodad | sd_: not sure how knowledge about pubkey is related to key-logging, however. |
| 10:59.11 | sd_ | i've no idea what keylogging is in terms of linux though |
| 10:59.25 | sd_ | that is, its pretty useless, theres nobody close to the physical console most of the time, right? :) |
| 10:59.30 | *** join/#debian zink_ (n=GOTA@pc-209-33-239-201.cm.vtr.net) |
| 10:59.54 | *** join/#debian hjb (n=bellsout@p4FC825F9.dip0.t-ipconnect.de) |
| 10:59.58 | sd_ | cosmodad: in relation to ssl bug, its possible to mitm passwords, OR spoof keys for auth, thats about it. |
| 11:00.13 | moshii | key logging .. public key encrpytion.. different ends of the spectrum |
| 11:00.15 | cosmodad | sandsmark: so I can crack a public key, establish a key logger, wait for the real user to log in and record, e.g., sudo passwords. |
| 11:00.24 | sandsmark | yes |
| 11:00.53 | moshii | cosmodad: or just use a local exploit to gain root access |
| 11:00.55 | hjb | Hi. Under which UID is hald supposed to be running? |
| 11:01.01 | *** join/#debian mosno (n=mosno@unaffiliated/mosno) |
| 11:01.02 | sd_ | yup, its actually fun to watch .ro/.br kids doing exactly that :) |
| 11:01.13 | sandsmark | moshii: well, if there's any open ones (I don't know of any) =) |
| 11:01.44 | sandsmark | moshii: last one that allowed you to do that (afaik) was the one posted to slashdot |
| 11:02.01 | moshii | sandsmark: vmsplice one iirc |
| 11:02.04 | *** join/#debian SlackDeb_ (n=fede@201.254.118.95) |
| 11:02.04 | sandsmark | yes |
| 11:02.19 | Bushmills | hjb: a system user "haldaemon" is created, its uid depends on your system |
| 11:02.29 | moshii | sandsmark: its likely there are machines out there running exploitable kernels though |
| 11:02.44 | msshams | jelly-home: i install webalizer from apt-get. now what do i do? how can i see analyzed logs? |
| 11:02.45 | hjb | Bushmills haldaemon:x:105:105:Hardware abstraction layer,,,:/home/haldaemon:/bin/false |
| 11:02.51 | hjb | Bushmills This one? |
| 11:02.55 | sandsmark | moshii: unfortunately |
| 11:03.00 | Bushmills | hjb: i suppose so |
| 11:03.45 | hjb | Bushmills Strange, then something with my /bin/ps seems to be wrong, as it shows 105 instead of haldaemon |
| 11:04.03 | hjb | Bushmills But the user is in /etc/passwd |
| 11:04.24 | *** join/#debian umgeher (n=umgeher@c934d9d8.virtua.com.br) |
| 11:04.32 | Kevin` | hjb: cat /proc/*/cmdline? ;) |
| 11:04.39 | *** join/#debian usn_work (n=usn@p54933C22.dip.t-dialin.net) |
| 11:04.53 | slxix | ps au ? |
| 11:04.53 | Kevin` | ick it has no line endings |
| 11:05.03 | moshii | Can anyone confirm how denyhosts or fail2ban handle lots of bad public key logins? |
| 11:05.11 | *** join/#debian jas4711 (n=jas@c80-216-126-5.bredband.comhem.se) |
| 11:05.27 | *** join/#debian phrost6 (i=phrost@phrost.us) |
| 11:05.49 | sd_ | moshii: if its relying on default ssh log level in debian, i doubt so |
| 11:06.39 | *** join/#debian omnil (n=omnil_@unaffiliated/chandor) |
| 11:07.14 | zd32nv | how do i add an alternative tool for, say, x-www-browser with update-alternatives? I'm testing the firefox beta build that resides in /usr/local/swiftweasel/bin |
| 11:07.25 | Guerin | man update-alternatives |
| 11:07.32 | zd32nv | I'd also like to pass command line arguments to ~swiftweasel |
| 11:07.50 | zd32nv | Guerin: ah sorry, i've just resolved the first issue |
| 11:07.55 | *** join/#debian acemi_ (n=acemi@unaffiliated/acemi) |
| 11:08.32 | hjb | Kevin` Bushmills Ah, same thing with user 'messagebus'. I guess ps just doesn't display usernames when there length exeeds 8 chars :D |
| 11:08.48 | zd32nv | atm, a process would seek to create a new instance of firefox when there's one currently active.. causing that process to fail. How do specify opening up a new tab (in a window on a different DISPLAY) |
| 11:08.56 | moshii | sd_: ok, shit ;) |
| 11:09.07 | slxix | hjb: what happens when the uid exceeds 8 characters? ;) |
| 11:09.20 | sd_ | moshii: well, we could give it a try |
| 11:09.31 | sd_ | moshii: i wrote the script to sweep local 300+ box uni network |
| 11:09.32 | *** join/#debian blame (n=zhs@unaffiliated/blame) |
| 11:09.33 | hjb | slxix The (numerical) UID is displayed |
| 11:09.45 | zd32nv | Guerin: any ideas on the latter? |
| 11:09.51 | sd_ | moshii: so guess its ok as long the box/ip is yours ... |
| 11:11.07 | Guerin | zd32nv: ask #firefox on irc.mozilla.org |
| 11:11.09 | Kevin` | xm list |
| 11:11.26 | moshii | sd_: all my boxes are production .. |
| 11:11.41 | *** join/#debian infinity0 (n=infinity@xl269.quns.cam.ac.uk) |
| 11:11.41 | sd_ | :/ |
| 11:12.00 | *** mode/#debian [+l 876] by debhelper |
| 11:12.11 | zd32nv | Guerin: that's not something to be passed to update-alternatives? |
| 11:12.24 | sd_ | moshii: i recommend you using hashlimit ip table target then, 5 connections a minute per ip ... so long password/key crackers |
| 11:12.37 | *** join/#debian obsethryl (n=obsethry@unaffiliated/obsethryl) |
| 11:12.40 | zd32nv | ie -new-tab |
| 11:12.59 | jelly-home | msshams: read the docs and let it run, I guess |
| 11:13.23 | *** join/#debian jberg (n=johan@215.80-203-18.nextgentel.com) |
| 11:13.47 | Guerin | zd32nv: I don't know how you do it in firefox. As afar as update-alternatives goes, you'd use a wrapper script. |
| 11:14.16 | zd32nv | Guerin: ah righto. thanks |
| 11:15.08 | Bushmills | hjb: try output formatting, such as ps ax -o "%u %p %c" |
| 11:15.10 | *** join/#debian testi (n=testi@217-162-41-17.dclient.hispeed.ch) |
| 11:15.39 | *** join/#debian lic0m (n=lic0m@host86-150-189-153.range86-150.btcentralplus.com) |
| 11:15.48 | *** join/#debian smoser (n=smoser@d14-69-66-169.try.wideopenwest.com) |
| 11:15.52 | *** join/#debian Hoxzer (n=dsadsad@dsl-hkigw7-fe1df900-39.dhcp.inet.fi) |
| 11:16.23 | sChaaa | hola |
| 11:16.41 | *** join/#debian gkiagia (n=gkiagia@147.52.24.53) |
| 11:16.44 | moshii | sd_: as you said, there's nothing in the logs recording bad key attempts. A little bit of an oversight :/ |
| 11:16.55 | *** join/#debian obsethryl (n=obsethry@unaffiliated/obsethryl) |
| 11:17.23 | et | is there some kind of "firewall" in debian? i can connect to a daemon when i connect from localhost, but not from an external net |
| 11:17.36 | et | netstat says it listens on all interfaces |
| 11:17.40 | the-dude_ | et: check with iptables -L |
| 11:17.44 | azeem | et: not by default |
| 11:18.02 | shital_ | what could be the smallest possible initrd size? |
| 11:18.19 | Bushmills | et, netstat -l... can show whether it is bound to an interface which can be reached from outsidew |
| 11:18.21 | hjb | Bushmills Same thing. I doubt that there's any way to let ps show usernames longer then 8 chars. |
| 11:18.44 | et | the-dude_: looks empty |
| 11:19.13 | Bushmills | et, other than that, check the daemon config, whether outside access is permitted |
| 11:19.32 | *** join/#debian Fox_1_ (n=Fox_1_@91.103.31.146) |
| 11:19.34 | *** join/#debian abrotman (n=abrotman@ip67-93-222-40.z222-93-67.customer.algx.net) |
| 11:19.45 | the-dude_ | et: then there is no "firewall" |
| 11:19.46 | et | i straced the daemon, and it doesn't notice the connection attempt |
| 11:19.51 | haxi | I've a usb key, I plug it, but the files are read only, and there is no button on it, any ideas? |
| 11:20.09 | cahoot | haxi: try /msg dpkg vfatrw |
| 11:20.25 | *** part/#debian vazul (n=user@91.82.36.118.pool.invitel.hu) |
| 11:20.51 | *** join/#debian tux (n=tux@lns-bzn-49f-81-56-157-136.adsl.proxad.net) |
| 11:20.55 | tux | greetings |
| 11:21.18 | tux | i was looking forward to know if there is a known release date for the next RC |
| 11:21.48 | fireba11 | tux: of what |
| 11:21.58 | tux | of etch. |
| 11:21.58 | asg | debian doesn't do RCs |
| 11:22.16 | *** join/#debian RogerW (n=rogerw@client-86-27-127-149.hers.adsl.virgin.net) |
| 11:22.26 | *** join/#debian ranit (n=ranjit@61.16.248.242) |
| 11:22.26 | fireba11 | tux: etch is stable for months already |
| 11:22.34 | tux | asg how then are called the regular patches ? |
| 11:22.39 | asg | fireba11: they periodically release revisions r3 is the current |
| 11:22.43 | dustybin | after a big lenny apt-get upgrade, mysql is reporting corrupted tables, heres the full email from mysql: http://paste.linux-noob.com/index.php?query=2580 |
| 11:22.45 | asg | tux: revisions |
| 11:22.56 | *** join/#debian skandaleras (n=luiz@84.77.149.45) |
| 11:23.02 | tux | well, then s/RC/revision ;) |
| 11:23.11 | fireba11 | asg : i know. but if you update regulary you don't normally need a new installer |
| 11:23.31 | *** join/#debian fxmf (n=fxmf@p578b5976.dip0.t-ipconnect.de) |
| 11:23.48 | *** join/#debian sine (i=sine@dogmatix.digmia.com) |
| 11:23.56 | *** join/#debian Gunirus (n=Gunirus@ip-81-11-205-122.dsl.scarlet.be) |
| 11:24.01 | *** join/#debian keyvision (n=keyvisio@89-96-199-46.ip13.fastwebnet.it) |
| 11:24.28 | asg | fireba11: indeed. Some non-security fixes do make it when a new revision is released though (remember rdesktop from r0 -> r1) |
| 11:24.46 | *** join/#debian Ragnarel (n=ragna@unaffiliated/ragnarel) |
| 11:26.28 | Eulex | ranit, if everything is setup properly, dhclient (or dhclient <interface> if stuff isn't totally setup properly) should just work (tm) |
| 11:27.07 | ranit | can i send u conf file |
| 11:27.44 | *** join/#debian maligor (n=maligor@a88-114-85-246.elisa-laajakaista.fi) |
| 11:28.01 | *** join/#debian zd32nv (n=zd32nv@unaffiliated/ootput) |
| 11:28.29 | Eulex | ranit, please use pastebin instead. |
| 11:28.46 | ranit | Ok |
| 11:31.06 | waxhead_ | what's the best way to get a simply patch fix into a package? |
| 11:31.16 | waxhead_ | simply = simple |
| 11:31.28 | tux | asg, so, the question still stands for itself, is there a major / minor revision going on sooner or later ? :) |
| 11:32.17 | *** join/#debian DimmuR (n=DimmuR@87-205-211-186.adsl.inetia.pl) |
| 11:32.48 | *** join/#debian thrope_ (n=thrope@winnipeg.8networks.co.uk) |
| 11:32.55 | *** join/#debian infernixx (i=nix@unaffiliated/infernix) |
| 11:33.40 | thrope_ | hi - I am trying to upgrade but apt says the following packages have been held back for openssh-client and openssh-server, but obviously I want them upgraded - why is this? |
| 11:33.58 | fengor | did you try upgrade or dist-upgrade? |
| 11:34.17 | abrotman | tux: you want to know when the next full stable is released or the next point release of etch ? |
| 11:34.19 | *** join/#debian LordLamer (n=lordlame@venus.universe.linuxdelta.de) |
| 11:34.22 | thrope_ | apt-get upgrade or aptitude upgrade |
| 11:34.25 | thrope_ | both the same |
| 11:34.31 | fengor | use dist-upgrade |
| 11:34.32 | abrotman | dist-upgrade |
| 11:35.02 | thrope_ | ok that works thanks |
| 11:35.12 | thrope_ | how would I do it if I only wanted to update the ssl/ssh packages? |
| 11:35.20 | abrotman | aptitude install <foo> |
| 11:35.29 | thrope_ | ok thanks |
| 11:36.30 | *** join/#debian waxhead_ (n=pete@124.176.59.252) |
| 11:36.34 | *** join/#debian zxd (n=XoX@213.31.43.2) |
| 11:36.56 | zxd | is it possible to specify in fstab to NOT fsck a device on boot? |
| 11:37.06 | zxd | never mind |
| 11:37.12 | tux | abrotman, the next point release :) |
| 11:37.20 | zxd | no not never mind :) |
| 11:37.25 | zxd | how do i prevent fsck a device on boot |
| 11:37.34 | abrotman | tux: no idea .. usually you'll see rumblings when they start preparing .. but it's largely not relevant |
| 11:37.41 | jelly-home | zxd: yes. man fstab |
| 11:37.47 | abrotman | or mark it clean |
| 11:37.53 | *** join/#debian prh-lt (n=prh@yoda.mjr.org) |
| 11:38.34 | zxd | man fstab describes the include file |
| 11:38.37 | zxd | for programming |
| 11:38.45 | jelly-home | "If the sixth field is |
| 11:38.45 | jelly-home | <PROTECTED> |
| 11:39.13 | *** join/#debian mirrorcolor (n=iunixan@196.218.222.116) |
| 11:39.36 | jelly-home | zxd: it describes the fstab file as well |
| 11:39.40 | zxd | thanks |
| 11:40.31 | *** join/#debian faux (n=user@1-1-4-21a.gkp.gbg.bostream.se) |
| 11:40.42 | asg | tux: I'd check on the d-d list. It's usually advertised around the time before a release |
| 11:41.20 | *** join/#debian themill (n=stuart@137.222.40.78) |
| 11:41.38 | abrotman | the d-d-a ? |
| 11:41.56 | tux | asg, of course, the idea was to know if there was one scheduled :) |
| 11:42.00 | *** mode/#debian [+l 885] by debhelper |
| 11:43.07 | sChaaa | http://article.gmane.org/gmane.linux.debian.security.announce/1614 |
| 11:43.20 | Sero | the server I am setting up has sata hardware raid; and I have created a raid-1 partition; when trying to install debian it shows up with two sata discs, and not the raid -- do I have to use software raid? |
| 11:43.20 | asg | tux: historically, there is a revision every 3 to 6 months depending on the number of updates required. |
| 11:43.46 | tux | rgr that. |
| 11:43.46 | asg | tux: the last one was in Feb so there will likely be one over the summer. |
| 11:44.36 | *** join/#debian mosno (n=mosno@unaffiliated/mosno) |
| 11:45.36 | abrotman | tux: actually .. there's usually a prep page |
| 11:46.09 | abrotman | or there used to be |
| 11:46.32 | *** join/#debian aleex (i=alex@muh.cc) |
| 11:46.41 | aleex | i'm trying to install debian on a sun e420r with netboot (debian-sparc-cd1), but i get the following error: |
| 11:46.44 | aleex | "a00000 Fast Data Access MMU Miss" |
| 11:46.48 | aleex | this error appears after the 420 loaded the install-img; any ideas? |
| 11:47.13 | *** join/#debian dimir (n=dimir@159.148.229.161) |
| 11:47.27 | jelly-home | aleex: it comes up often on debian-sparc mailing list; check the archives |
| 11:47.28 | asg | aleex: did you do a cold shutdown and start? sparcs can often be crotchety about that. |
| 11:48.35 | aleex | asg, done that two-times |
| 11:48.37 | jelly-home | funny how that thing never happens on solaris |
| 11:48.42 | *** join/#debian dimir (n=dimir@159.148.229.161) |
| 11:48.51 | *** join/#debian MrNaz (n=MrNaz@221.133.46.150) |
| 11:48.51 | *** join/#debian Biolunar (i=mahdi@blfd-4db5b31b.pool.einsundeins.de) |
| 11:49.37 | *** join/#debian Phil4 (n=phil@server1.germanserver.co.uk) |
| 11:49.51 | *** join/#debian miles_cook (n=miles_co@cpc2-cdif7-0-0-cust160.cdif.cable.ntl.com) |
| 11:50.01 | miles_cook | hi, looking for help with fc 6? |
| 11:50.10 | asg | jelly-home: Sun is a purveyor of magic dust |
| 11:50.15 | asg | miles_cook: try #fedora |
| 11:50.25 | miles_cook | their topics are f7 -9 |
| 11:50.36 | jelly-home | ... |
| 11:50.40 | petemc | our topic is debian |
| 11:50.44 | miles_cook | lol ok |
| 11:50.46 | *** part/#debian miles_cook (n=miles_co@cpc2-cdif7-0-0-cust160.cdif.cable.ntl.com) |
| 11:51.00 | asg | I probably could have helped with redhat 6.2 |
| 11:51.01 | *** join/#debian SEcki (n=SEcki@e181089098.adsl.alicedsl.de) |
| 11:51.04 | aleex | asg, hehe ;) |
| 11:51.23 | *** join/#debian Toman-- (n=tommyo@pat-tdc.opera.com) |
| 11:52.17 | *** join/#debian MrNaz_ (n=MrNaz@221.133.46.150) |
| 11:52.22 | jelly-home | RHEL5 has a lot of .c]fc |
| 11:52.32 | jelly-home | .fc6 versioned packages |
| 11:53.12 | Bushmills | aleex: do you have some sort of device mapped into memory, behind the first 10 megabytes of RAM? |
| 11:53.39 | *** join/#debian LV-426 (n=lama@89.0.27.181.dynamic.barak-online.net) |
| 11:53.43 | *** join/#debian faux (n=user@1-1-4-21a.gkp.gbg.bostream.se) |
| 11:53.57 | Bushmills | maybe Flash/ROM or such? |
| 11:55.06 | aleex | Bushmills, no |
| 11:55.29 | aleex | Bushmills, i tried to boot the netboot image (18mb or something like that), that worked, only got no internet here :< |
| 11:55.37 | Toman-- | Do anyone know why flashplayer-nonfree is not in Lenny? |
| 11:55.41 | *** join/#debian Coke (n=peter@1-1-1-8a.asp.sth.bostream.se) |
| 11:55.50 | *** join/#debian deriaN (n=nopron@90.185.61.198) |
| 11:56.00 | asg | Toman--: /msg dpkg why is flashplayer-nonfree not in testing |
| 11:56.02 | Coke | Hi, I'm googling for Etch and a half images download, but can't find any, hint? |
| 11:56.19 | Toman-- | asg, thank you |
| 11:56.20 | Breakz | asg: flashplugin-nonfree-extrasound is :P |
| 11:56.27 | Breakz | oh i mean Toman--* |
| 11:56.30 | berzerka | how to install the 32 bit iceweasel on debian amd64? |
| 11:57.00 | *** join/#debian Zwift (n=opera@chello084010100220.chello.pl) |
| 11:57.01 | Toman-- | Breakz, yes I know, that is odd :) |
| 11:57.18 | abrotman | it's been removed .. intentionally |
| 11:57.29 | *** join/#debian CalebRipley (n=theo@p54866177.dip.t-dialin.net) |
| 11:57.53 | Toman-- | not much help from dpkg |
| 11:57.54 | *** join/#debian Givvade (n=Givvade@dslc-082-082-079-036.pools.arcor-ip.net) |
| 11:58.43 | Toman-- | I wonder why... I work at Opera and we have our own wrapper. Now, flashplugin-mozilla depends on nspluginwrapper, and we use that at the moment since it is in our plugin paths. |
| 11:59.12 | Toman-- | So I want to know why it is removed (intentionally) and if it will come back. |
| 11:59.15 | themill | !tell Toman-- about adobe flash |
| 11:59.38 | Toman-- | themill, I know all that |
| 11:59.46 | themill | Toman--: well you didn't read it then. |
| 11:59.57 | themill | Toman--: the reasons for its removal are in that factoid. |
| 12:00.00 | Toman-- | themill, oops, a link I missed :) |
| 12:00.05 | themill | indeed |
| 12:00.10 | *** join/#debian Dako-kun (n=dako@F3277.f.strato-dslnet.de) |
| 12:01.02 | *** join/#debian my007ms (i=master@botmaster.x86.be) |
| 12:01.03 | themill | Toman--: There is no way to backport fixes to older versions of flash. The user is forced to upgrade to a newer version. This is contrary to the idea of debian stable, so flash is unsuitable for stable. Hence it is also unsuitable for "testing", since "testing" is supposed to always be in a releasable state. |
| 12:01.14 | *** join/#debian bier_ (n=bier@p54A57ED0.dip.t-dialin.net) |
| 12:01.21 | my007ms | what dpkg i have to install to get command "wish " |
| 12:01.28 | my007ms | it's used to run tcl scripts |
| 12:01.31 | asg | my007ms: /msg dpkg search |
| 12:01.38 | *** join/#debian umgeher (n=umgeher@c934d9d8.virtua.com.br) |
| 12:01.48 | asg | my007ms: the bit about 'apt-file' is particularly interesting |
| 12:02.00 | *** mode/#debian [+l 893] by debhelper |
| 12:02.06 | *** join/#debian eth01 (i=foo@cpc2-stkp3-0-0-cust381.manc.cable.ntl.com) |
| 12:02.19 | my007ms | apt-file search wish give me no result |
| 12:02.33 | themill | my007ms: run "apt-file update" then |
| 12:02.57 | *** join/#debian eth01 (i=foo@cpc2-stkp3-0-0-cust381.manc.cable.ntl.com) |
| 12:03.09 | *** part/#debian Coke (n=peter@1-1-1-8a.asp.sth.bostream.se) |
| 12:03.12 | *** join/#debian Coke (n=peter@1-1-1-8a.asp.sth.bostream.se) |
| 12:04.15 | Coke | I'm thinking of installing 64-bit version of Testing on my AMD Phenom box, but I like games and such, last time I tried running 32-bit software in 64-bit Debian it failed miserable because required 32-bit libraries were missing. How well does 64-bit Debian handle 32-bit stuff? |
| 12:04.39 | *** join/#debian Lin_ (n=igormorg@200.179.57.57) |
| 12:05.26 | Zwift | hi, I'm a newbie, and this is simple question: iptables - when i prepare some rules and then exec iptables-save - are those rulles going to be instantly applied ? |
| 12:05.52 | *** part/#debian gynterk (i=002-free@unaffiliated/gynterk) |
| 12:06.50 | Toman-- | themill, so, using backports is the preferred way to get flashplayer-nonfree? |
| 12:06.53 | *** join/#debian jewel (n=jewel@dsl-242-133-24.telkomadsl.co.za) |
| 12:07.34 | *** join/#debian Dave2[DS] (n=root@freenode/staff/dave2) |
| 12:08.56 | *** part/#debian tux (n=tux@lns-bzn-49f-81-56-157-136.adsl.proxad.net) |
| 12:09.17 | *** join/#debian lunaphyte_ (n=lunaphyt@unaffiliated/lunaphyte) |
| 12:09.26 | Toman-- | themill, hmm, lokks like adobes switch to using gtk for flash is the main reason for not having it in testing? |
| 12:09.32 | Toman-- | *looks |
| 12:09.35 | msshams | how can i found information about my machine in debian (text-mode)? |
| 12:09.55 | Toman-- | msshams, what info do you want? |
| 12:10.17 | cahoot | where it is |
| 12:10.18 | msshams | Toman--: e.g. ram, hdd, net card, cpu etc |
| 12:10.20 | berzerka | msshams: look at the different files in /proc and /sys, use lspci and lshw, or ask a more specific question. |
| 12:10.34 | mhymn | Zwift: yes i suppose, you can check that with "iptables -L" or maybe some other tricks, i'm not familiar with iptables though! |
| 12:11.08 | Toman-- | msshams, what berzerka said :) |
| 12:11.23 | *** join/#debian SlackDeb (n=fede@201.254.118.95) |
| 12:11.28 | Toman-- | for example: cat /proc/cpuinfo |
| 12:11.29 | cahoot | msshams: hwinfo, dmidecode |
| 12:11.54 | berzerka | just discovered lshal |
| 12:12.02 | msshams | berzerka: i need to know information about my hardware. e.g ram hard cpu ... |
| 12:12.05 | *** join/#debian DaveDorm (n=dave@pool-71-100-16-226.tampfl.dsl-w.verizon.net) |
| 12:12.06 | *** join/#debian zumbi (n=Hector@morgoth.tlc.upv.es) |
| 12:12.10 | DaveDorm | good morning |
| 12:12.21 | Toman-- | msshams, you mean lshal | more |
| 12:12.22 | Toman-- | :P |
| 12:12.32 | Toman-- | er I meant berzerka |
| 12:12.34 | DaveDorm | I keep getting a crapton of network messages when I switch to a tty console session |
| 12:12.39 | *** join/#debian magmaniac (i=foobar@gauss.pci.uni-heidelberg.de) |
| 12:12.43 | berzerka | Toman--: right :) |
| 12:12.48 | DaveDorm | I have the syslog thing installed |
| 12:12.55 | DaveDorm | but it's really annoying |
| 12:13.13 | msshams | Toman--: i haven't this command |
| 12:13.13 | DaveDorm | it is definitely the ethernet card spewing messages |
| 12:13.19 | *** join/#debian xbaez (n=xbaez@201.151.41.82) |
| 12:13.20 | *** join/#debian kyrbe (n=adwbw0@igate2.chron.com) |
| 12:13.20 | Zwift | mhymn: ok, thx |
| 12:13.21 | Toman-- | msshams, what command? |
| 12:13.27 | DaveDorm | dropped packets, etc |
| 12:13.27 | berzerka | msshams: cpuinfo -> cat /proc/cpuinfo ; meminfo -> cat /proc/meminfo |
| 12:13.38 | DaveDorm | any ideas what I can do to stop it? |
| 12:13.56 | *** join/#debian marvil07 (n=marvil07@64.76.110.195) |
| 12:14.23 | asg | DaveDorm: /msg dpkg klogd |
| 12:14.51 | zxd | hi |
| 12:14.53 | *** join/#debian Demosthenes (n=demo@206.180.154.177.adsl.hal-pc.org) |
| 12:15.02 | zxd | where are all the installed packages pre install and post install scripts kept? |
| 12:15.07 | magmaniac | hello, i have a question regarding the openssl key issue: when ssh'ing from host A to host B, which keys are involved in the connection setup? definitely the server key of host B, and potentially also the user key (privkey on host A, pubkey on host B) -- but does it also involve the server key of host A? |
| 12:15.17 | *** part/#debian kyrbe (n=adwbw0@igate2.chron.com) |
| 12:15.27 | abrotman | no |
| 12:15.50 | abrotman | but if serverA is affected by the issue, it should still be fixed |
| 12:15.50 | DaveDorm | crap |
| 12:15.54 | DaveDorm | that simple, huh? |
| 12:15.56 | DaveDorm | heh |
| 12:16.06 | DaveDorm | <-- dork |
| 12:16.15 | *** join/#debian Hoxzer (n=dsadsad@dsl-hkigw7-fe1df900-39.dhcp.inet.fi) |
| 12:16.15 | magmaniac | abrotman: thanks, I thought so. |
| 12:16.16 | asg | DaveDorm: you should find out why your card is spewing dropped packet messages though |
| 12:16.30 | DaveDorm | asg: heh |
| 12:16.38 | DaveDorm | asg: yeah, probably |
| 12:16.49 | magmaniac | though http://wiki.debian.org/SSLkeys says "key generated with good openssl and used to ssh from a machine with bad ssl = bad" |
| 12:17.05 | DaveDorm | asg: but it works fine, I don't have any issues |
| 12:17.06 | magmaniac | so shouldn't it says "to" instead of "from"? |
| 12:17.42 | *** join/#debian CaNeS (n=Linux@bas4-montreal02-1096723847.dsl.bell.ca) |
| 12:19.37 | et | magmaniac: why? |
| 12:19.38 | *** join/#debian stittel (n=tittel@unaffiliated/stittel) |
| 12:19.40 | *** join/#debian LeGreffi3R (n=greffier@089156181097.chello.fr) |
| 12:20.05 | *** join/#debian fdd-0 (n=fdd@79.116.105.10) |
| 12:21.11 | et | I have read that DSA is weaker than RSA, is this true and (more importantly) are there any sources on that? |
| 12:21.44 | *** join/#debian mns (n=mns@c-98-216-178-41.hsd1.ma.comcast.net) |
| 12:21.45 | *** join/#debian SolidSlash (n=andrzej@bdx134.neoplus.adsl.tpnet.pl) |
| 12:22.00 | *** mode/#debian [+l 902] by debhelper |
| 12:22.54 | mhymn | et: yep, google -> http://www.google.com/search?q=DSA+RSA&ie=UTF-8&oe=UTF-8 |
| 12:23.15 | et | this turns up only questions |
| 12:23.25 | *** part/#debian Plouj (n=Plouj@red.cs.yorku.ca) |
| 12:23.52 | *** join/#debian Kumool (i=Administ@24.139.157.244) |
| 12:24.10 | stittel | et: As far as I know even good DSA (user) keys can be compromised if used from a maschine with bad SSH host keys. That doesn't seem to be the case with RSA. |
| 12:25.13 | magmaniac | abrotman: I know it needs to be fixed on server A, but if the host key of A is not involved in outgoing connections, then I don't have to worry as much whether user passwords might have been compromoised -- ssh server on host A is only reachable from a small number of trusted machines |
| 12:25.35 | Zwift | I have dynamic ip at a workplace, but two first parts are always the same, if i add as first rule to accept input chain from x.x.0.0/16, and then deny everything else will it work for me? |
| 12:25.40 | *** part/#debian BenC` (n=benc@lapetitesoeur.zebleh.org) |
| 12:25.46 | *** join/#debian Pete_B (n=p@host81-137-179-77.in-addr.btopenworld.com) |
| 12:25.54 | Zwift | I want to connect via ssh |
| 12:26.23 | msshams | is "MemTotal" parameter size of memory? (in the /proc/meminfo) |
| 12:26.33 | *** join/#debian wipf (n=wipf@dslb-084-057-224-071.pools.arcor-ip.net) |
| 12:26.43 | *** join/#debian mosno (n=mosno@unaffiliated/mosno) |
| 12:26.45 | DaveDorm | asg: ok, I thought that would work but it didn't |
| 12:27.09 | DaveDorm | the bot says to add something to the KLOGD variable in the init.d file |
| 12:27.21 | DaveDorm | but I don't see where that variable is defined |
| 12:27.35 | *** join/#debian RA3OR (i=angel@80.97.89.33) |
| 12:27.38 | asg | DaveDorm: it may now be defined in /etc/default/klogd |
| 12:27.45 | DaveDorm | ah |
| 12:27.49 | DaveDorm | let em look |
| 12:29.35 | Zwift | how can i check current iptables counters ? |
| 12:29.36 | *** join/#debian bluesceada (n=itsjustm@unaffiliated/bluesceada) |
| 12:30.04 | *** join/#debian Pete_B (n=p@host81-137-179-77.in-addr.btopenworld.com) |
| 12:30.21 | dropbear | Zwift: iptables -L -v |
| 12:30.30 | DaveDorm | asg: aha! that did the trick |
| 12:30.36 | DaveDorm | asg: thanks, man! |
| 12:30.46 | asg | you're welcome |
| 12:31.16 | Pete_B | what software (preferably GUI, preferably GTK) do you recommend for comparing two directories and to show files that differ and what in the files differs? |
| 12:31.30 | msshams | how can i see end of file with vim? |
| 12:31.30 | liable | this is good, read the comments -- http://www.links.org/?p=327 |
| 12:31.40 | Zwift | dropbear: thx |
| 12:31.45 | Crypticfortune | ok, so with all the openssl latest openssl crazy stuff, our CA was generated long ago before the bug so it's fine, but a bunch of our other keys/certs were (in theory) weakend by this bug. So i revoked and remade them, but now I'm wondering, what to do with the CRL to get debian to actual distrust those certs? where should i put the crl.pem/what should i do with it? |
| 12:32.09 | *** join/#debian ehird (n=ehird@91.105.68.170) |
| 12:32.39 | ehird | Is it forbidden to point and laugh at you guys for removing the entropy sources from openssh? :( |
| 12:32.41 | ehird | *openssl |
| 12:33.03 | azeem | ehird: we might point at laugh at you for the unqualified comment as well then |
| 12:33.05 | liable | ehird: yes, its a great way to get flamed and hopefully banned. |
| 12:33.10 | ehird | yay |
| 12:33.19 | *** join/#debian pior (n=pior@206.53.52.109) |
| 12:33.22 | Crypticfortune | (in particular so that libnss-ldap distrusts them) |
| 12:34.00 | ehird | azeem: I'd like to see how not only commenting out the uninitialized buffer entropy source (which openssl does _not_ require for entropy), *but the main source of entropy as well* is justifiable. I'd love to know |
| 12:34.07 | *** join/#debian Ace2016 (n=ace@halls-129-31-70-5.hor.ic.ac.uk) |
| 12:34.23 | azeem | ehird: dunno, one of the openssl devs said it was fine |
| 12:34.28 | ehird | azeem: no they did not |
| 12:34.36 | jelly-home | ehird: we've all read the articles, no need to be cocky |
| 12:34.39 | ehird | openssl-dev is a list for people who use openssl libs in their apps, azeem |
| 12:34.44 | liable | erm |
| 12:34.47 | azeem | ehird: wrong |
| 12:34.54 | liable | ehird: stop the troll you idiot |
| 12:35.04 | *** join/#debian tenzind (n=tenzin@dns.moic.gov.bt) |
| 12:35.08 | ehird | liable: how am I trolling? I use debian. I am using it right now. |
| 12:35.10 | azeem | ehird: please research a bit before citing random blog posts |
| 12:35.15 | jelly-home | ehird: http://www.advogato.org/person/branden/diary/5.html |
| 12:35.29 | ehird | azeem: 'random blog posts' ... from the openssl team? I thought you were just using them to justify the change? |
| 12:35.45 | azeem | ehird: nevertheless wrong |
| 12:35.48 | tenzind | Hi.. does Debian keep a log of all the logins made on the system? |
| 12:36.04 | liable | ehird: heres from the horses mouth, read the comments to the end, and the lack of response from the author http://www.links.org/?p=327 |
| 12:36.10 | petemc | tenzind: for 2 months, yes |
| 12:36.23 | mquin | ehird: Someone made a mistake, and for whatever reason the mistake wasn't caught for some time. These things happen - people are away of it now, and are dealing with it. I don't see why this needs to be kicked around further. |
| 12:36.29 | mquin | s/away/aware/ |
| 12:36.48 | asg | indeed, a 25 year old bug was just fixed in BSD |
| 12:36.55 | tenzind | petemc: in which log file does it store the logs? |
| 12:37.05 | petemc | tenzind: wtmp and wtmp.1 |
| 12:37.09 | petemc | use last to read them |
| 12:37.21 | ehird | mquin: it's not a particularly clever idea to break cryptography for 2 years just because of valgrind. even fixing it properly wouldn't have had any damage, but the patch outright broke it |
| 12:37.25 | jelly-home | mquin: but... pointing at other people mistakes is fun! |
| 12:37.26 | Pete_B | what software (preferably GUI, preferably GTK) do you recommend for diffing directories and files? |
| 12:37.27 | *** join/#debian Ability (n=toyo@blx32.neoplus.adsl.tpnet.pl) |
| 12:37.36 | ehird | and I wouldn't say that BSD's directory handling edge-cases are as serious |
| 12:37.42 | ehird | i'm not trying to flame here |
| 12:37.46 | petemc | yes you are |
| 12:37.48 | jelly-home | ehird: yes you are. |
| 12:37.48 | ehird | i'm just .. suprised, really |
| 12:37.56 | azeem | ehird: 14:29 < ehird> Is it forbidden to point and laugh at you guys for removing the entropy sources from openssh? :( |
| 12:38.00 | *** join/#debian berzerka (n=ps790413@vrvis3.rz.RWTH-Aachen.DE) |
| 12:38.10 | faux | Pete_B: i use Meld |
| 12:38.17 | azeem | ehird: either you're trolling, or you're stupid |
| 12:38.20 | Pete_B | faux: thanks, I'll take a look |
| 12:38.26 | liable | anyway, go laugh in #debian-dev, we are a support channel |
| 12:38.31 | liable | see how far that gets you |
| 12:38.35 | ehird | azeem: Then I guess I'm stupid but you haven't offered any justification for that |
| 12:38.46 | azeem | ehird: for what? |
| 12:38.57 | ehird | azeem: for me being stupid |
| 12:38.57 | azeem | obviously it was a grave mistake |
| 12:39.05 | *** join/#debian ajonat__ (n=ajonat@190.48.115.122) |
| 12:39.05 | *** part/#debian Extend (i=Extend@hackerstech.net) |
| 12:39.13 | azeem | but also obviously, the developer didn't "remove the entryop sources from openssh" |
| 12:39.16 | *** join/#debian omry|work (n=omry@bzq-179-135-171.static.bezeqint.net) |
| 12:39.21 | azeem | it's about openssl, first off |
| 12:39.30 | ehird | yes, I said *openssl |
| 12:39.39 | tenzind | petemc: i did a "last wtmp" and it just gave me some dates as output |
| 12:39.48 | azeem | and he removed what he thought was some uninitialized buffer handling to silence valgrind |
| 12:39.58 | ehird | anyway, whatever, this is getting nowhere. I'm just saying that I, personally, wouldn't mess with cryptography code just to shut valgrind up |
| 12:40.01 | petemc | tenzind: man last |
| 12:40.08 | azeem | asserting he removed the "entropy source" on purpose is either trolling or stupid |
| 12:40.11 | antgel | i'd like my desktop cpu fan to slow down when necessary, to save my ears. is this a mission for acpi alone or do i need cpufreqd as well? |
| 12:40.16 | ehird | azeem: I didn't assert he did it on purpose |
| 12:40.25 | azeem | ehird: he /asked on openssl-dev/ |
| 12:40.38 | azeem | he even said "I don't know what this might do to the entropy pool" (paraphrased) |
| 12:40.39 | magmaniac | antgel: check package "fancontrol" |
| 12:40.43 | azeem | still, 14:36 < azeem> obviously it was a grave mistake |
| 12:40.47 | ehird | azeem: yes, but he should have asked on openssl-team |
| 12:40.49 | tenzind | petemc: .. thanks |
| 12:40.49 | ehird | anyway, whatever. |
| 12:40.50 | *** part/#debian ehird (n=ehird@91.105.68.170) |
| 12:40.53 | azeem | wtf |
| 12:40.58 | antgel | magmaniac: you'd think i didn't aptitude search fan. i'll turn my brain on |
| 12:41.11 | azeem | probably nobody in the world knew about openssl-team until Ben Laurie commented on his blog |
| 12:41.35 | *** join/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 12:41.45 | magmaniac | antgel: i think it's part of lm-sensors |
| 12:41.50 | antgel | magmaniac: it seems fancontrol doesn't exist http://packages.debian.org/fancontrol |
| 12:41.53 | *** part/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 12:41.59 | *** join/#debian magyar (n=ondrish@76-10-176-50.dsl.teksavvy.com) |
| 12:42.00 | *** mode/#debian [+l 895] by debhelper |
| 12:42.03 | antgel | magmaniac: now you're talking |
| 12:42.04 | *** join/#debian purld (n=123456@unaffiliated/purld) |
| 12:42.22 | magmaniac | antgel: yes sorry, the utility script is called fancontrol |
| 12:42.23 | antgel | i have lm-sensors installed on this box, i never did understand it, too low level for me ;) |
| 12:42.29 | Pete_B | faux: meld looks great, thanks |
| 12:42.56 | prh-x | And ben laurie is muppet - the openssl website (under support) says about the openssl-dev mailing list: "openssl-dev open subscribers Discussions on development of the OpenSSL library. Not for application development questions!" |
| 12:42.59 | antgel | pwmconfig looks good |
| 12:43.11 | Crypticfortune | so, just in my question about CRLs got buried by ehird's flame-war: anybody familiar with where to put CRL's in a debian friendly way so that libnss-ldap pays attention to them? |
| 12:43.13 | prh-x | And laurie says that is the wrong place to discuss the OpenSSL library eh? |
| 12:43.15 | azeem | prh-x: thanks, but we know already |
| 12:43.30 | liable | azeem: and as pointed out in the comments, the overwhelming consensus is that they need to fix their website to say so. |
| 12:43.35 | magmaniac | antgel: right, pwmconfig will do most of the nasty configuration, fancontrol is the daemon |
| 12:43.57 | prh-x | azeem: aye - didn't notice etird had left already |
| 12:44.08 | antgel | magmaniac: "There are no pwm-capable sensor modules installed", maybe my motherboard doesn't support it. i'll do another sensors-detect |
| 12:44.14 | prh-x | oops the t and h keys are close aren't they |
| 12:44.41 | liable | thankfully i have been busy today, i guess we have had a few ehurds today |
| 12:44.42 | *** join/#debian eOliva (n=dutche@200.169.133.98) |
| 12:44.55 | *** join/#debian dcnoye (n=dcn113@PollockMega-Mobile241.cac-labs.psu.edu) |
| 12:45.03 | azeem | liable: stop trolling the Hurd, it was ehird |
| 12:45.08 | magmaniac | antgel: nowadays the mainboard, or even the cpu cooler itself, might manage the fan speed by themselves. depends on the hardware... |
| 12:45.16 | liable | azeem: eturd? |
| 12:45.22 | *** join/#debian woden1 (n=woden@62.225.51.138) |
| 12:45.26 | *** part/#debian purld (n=123456@unaffiliated/purld) |
| 12:45.40 | prh-x | electric turd! |
| 12:45.40 | woden1 | How do I make it so that when I insert a DVD movie, totem-xine autoplays the movie? |
| 12:45.52 | *** join/#debian SW0RDF15H (n=RMDS@189.6.40.33) |
| 12:46.08 | *** join/#debian Don-Corleone (n=pate@cust-IP-2.data.3.dk) |
| 12:46.20 | Don-Corleone | hi |
| 12:46.40 | *** join/#debian margiolas (i=chris@client-9-34.wifi.uoc.gr) |
| 12:46.51 | *** join/#debian funkyou (n=janm@e179132009.adsl.alicedsl.de) |
| 12:47.02 | Don-Corleone | i set now my wireless qouter from LinkSys, and have now signal. ican't connect to internet? |
| 12:47.53 | liable | but you were! :) |
| 12:47.53 | *** join/#debian Don-Corleone (n=pate@cust-IP-2.data.3.dk) |
| 12:48.01 | *** join/#debian Phil4 (n=phil@server1.germanserver.co.uk) |
| 12:48.32 | *** join/#debian Esaj (n=Jason@host-84-9-52-236.dslgb.com) |
| 12:48.42 | antgel | magmaniac: i don't ever hear the fan speed change, so i doubt it. i'll just have to get a non-stock fan that is quiet and that i can turn down manually |
| 12:48.45 | liable | Don-Corleone: it shows as associated? dhclient fails to get a lease? |
| 12:48.50 | *** join/#debian ugelt (n=ugelt@reserved-225136.rol.raiffeisen.net) |
| 12:48.51 | antgel | magmaniac: thanks by the way |
| 12:49.27 | Don-Corleone | liable, wht is dhclient? |
| 12:49.41 | Don-Corleone | i have signal but i can't connect |
| 12:49.44 | liable | Don-Corleone: how are you configuring wireless? |
| 12:50.19 | Don-Corleone | default? |
| 12:50.33 | *** join/#debian purld (n=123456@unaffiliated/purld) |
| 12:50.50 | liable | Don-Corleone: no, what program are you using to configure wireless? |
| 12:50.55 | *** join/#debian _keitherz_ (n=keitherz@122.53.170.128) |
| 12:51.01 | Don-Corleone | b43 |
| 12:51.14 | keith4 | "ii" is the normal state of a package, as listed by 'dpkg -l', right? What's "Ui" ? |
| 12:51.20 | liable | no, how are you setting the essid? |
| 12:51.36 | azeem | keith4: it's explained in the first three lines |
| 12:51.51 | liable | Don-Corleone: how did you change linksys? |
| 12:52.01 | *** mode/#debian [+l 901] by debhelper |
| 12:52.05 | Don-Corleone | jes to my name |
| 12:52.13 | liable | Don-Corleone: is english your main language? |
| 12:52.14 | Don-Corleone | yes* |
| 12:52.18 | Don-Corleone | yes |
| 12:52.25 | *** join/#debian skidj (n=skidj@78-86-170-196.zone2.bethere.co.uk) |
| 12:52.35 | antgel | azeem: it still takes me a while to parse that dpkg -l header |
| 12:53.27 | keith4 | azeem: ah, so it is. those are lines that I usually miss while grepping dpkg -l output |
| 12:53.28 | Demosthenes | so i intend to rebuild my thinkpad T43, replacing gentoo with either debian testing or the new ubuntu. jury's out, any comments? i'm obviously leaning toward debian being in the channel ;] |
| 12:53.34 | *** join/#debian robocop101 (n=robocop2@cpc3-warr1-0-0-cust875.bagu.cable.ntl.com) |
| 12:53.35 | *** join/#debian auao (n=sad@athedsl-187242.home.otenet.gr) |
| 12:53.58 | Don-Corleone | libale, i can connect to 191.168.1.1 to router configuration, but i can't connect to internet |
| 12:54.17 | keith4 | a lot more crap "just works" on laptops, using ubuntu... but a T43 will probably feel a bit sluggish with Hardy, as it's quite bloated |
| 12:54.19 | liable | Don-Corleone: right, so you are setting your ip manually? |
| 12:54.26 | liable | Don-Corleone: did you set the route? |
| 12:54.30 | *** join/#debian Phil4 (n=phil@server1.germanserver.co.uk) |
| 12:54.42 | Don-Corleone | ip?? |
| 12:54.44 | *** join/#debian slidesinger (n=slidesin@static-70-106-127-111.pskn.east.verizon.net) |
| 12:54.49 | Don-Corleone | that is from isp |
| 12:54.53 | Don-Corleone | i edit't |
| 12:54.58 | moshii | keith4: you can not run stuff you don't want you realise |
| 12:55.11 | moshii | keith4: applications aren't built into the kernel |
| 12:55.26 | keith4 | yah, but it seems silly to start with everything, and remove junk that you don't want |
| 12:55.29 | liable | Don-Corleone: i cant help you if you cant answer my questions |
| 12:55.35 | keith4 | rather than start with nothing, and install only what you need |
| 12:55.58 | Don-Corleone | libale. i answer you |
| 12:55.59 | moshii | keith4: that doesn't make debian faster(tm) that debian does it? |
| 12:56.03 | Don-Corleone | i edit anything |
| 12:56.07 | *** part/#debian mhymn (i=mhymn@unaffiliated/mhymn) |
| 12:56.12 | keith4 | moshii: i guess it's sort of a top-down/bottom-up argument |
| 12:56.17 | moshii | keith4: you can still install and badly configure the same amount of crap |
| 12:56.20 | antgel | moshii: even gnome has a massive footprint with all the stuff in the panels |
| 12:56.42 | Don-Corleone | if i click wireless, say is conected, but i can't open any page. liable |
| 12:56.46 | *** part/#debian sword (n=sword@c-98-222-60-229.hsd1.il.comcast.net) |
| 12:57.03 | *** join/#debian woden1 (n=woden@62.225.51.138) |
| 12:57.07 | keith4 | Don-Corleone: there are many layers between "i am connected to a wireless network" and "i can browse the web" |
| 12:57.23 | moshii | antgel: ok, so that's a gnome issue and not one of binary X running faster because its running on almost the same base only with the label changed |
| 12:57.38 | auao | http://rapidshare.com/files/113860291/sexy18.jpg.rar.html . if i like you come prive for cyber :D |
| 12:57.42 | Don-Corleone | keith, i can connect to my router wireless, but not in internet |
| 12:57.49 | Don-Corleone | keith4, |
| 12:57.53 | *** part/#debian auao (n=sad@athedsl-187242.home.otenet.gr) |
| 12:58.06 | woden1 | When Lenny boots on my laptop, I get an error: PCI: Failed to allocate mem resource #6:20000@e0000000 for 0000:01:00.0 |
| 12:58.09 | woden1 | What does that mean? |
| 12:58.12 | moshii | keith4: layers? helper applications aren't part of the network stack. |
| 12:58.40 | *** join/#debian zignig (n=zignig@the.interthingy.com) |
| 12:58.43 | robocop101 | has mitch42 left? |
| 12:58.49 | *** part/#debian vy (n=user@213.139.194.86) |
| 12:58.52 | *** join/#debian and][ng (n=and][ng@213-156-49-141.fastres.net) |
| 12:58.56 | Don-Corleone | liable, ?? |
| 12:58.59 | and][ng | hello |
| 12:59.13 | keith4 | moshii: have I wronged you in a previous life? or are you just trying to pick a fight? |
| 12:59.35 | liable | Don-Corleone: can you ping the router? |
| 12:59.39 | moshii | keith4: it doesn't help anyone to tell them wishy washy pap |
| 12:59.40 | robocop101 | themill do you have a record of what mitch posted about the sources .list? |
| 12:59.43 | *** join/#debian gngkai (n=kasaas@ip-45-99.sn3.eutelia.it) |
| 12:59.45 | gngkai | hi |
| 13:00.02 | zignig | hope everyone is fixing their ssl keys..... |
| 13:00.04 | keith4 | moshii: if you can speak danish, by all means explain it to him in technical terms |
| 13:00.13 | Don-Corleone | liable, how can ping it? |
| 13:00.14 | *** join/#debian sdx (n=ethhrb@citgreece.lar.forthnet.gr) |
| 13:00.21 | *** part/#debian bob_ (n=bob@87-194-183-38.bethere.co.uk) |
| 13:00.28 | sdx | anyone know how to find the first disk on the system? |
| 13:00.30 | sdx | using grub? |
| 13:00.30 | and][ng | zignig: why? |
| 13:00.48 | moshii | sdx: the first mapped disk is hd0 |
| 13:00.49 | *** join/#debian nihil (i=mh@140.78.191.178) |
| 13:00.54 | *** join/#debian eap (n=eap@220-245-17-97.free.tpgi.com.au) |
| 13:00.56 | and][ng | sdx: not sure but there's name convention, so hd0 |
| 13:00.57 | gngkai | about ssl bug, dowkd.pl says that I have vulnerable ssh keys. still it says nothing about openvpn shared key... is that possible? |
| 13:01.08 | zignig | and][ng: ummm ... the big securiy advisory |
| 13:01.15 | themill | robocop101: ? mitch is on oftc not freenode; he never posted his sources.list that I know of. |
| 13:01.20 | zignig | gngkai: you will ahve to regenerate _all_ of them. |
| 13:01.26 | sdx | moshii, it's not on mine |
| 13:01.32 | moshii | gngkai: anything generated by the broken versions of openssl should be replaced |
| 13:01.39 | liable | Don-Corleone: with the ping program |
| 13:01.46 | and][ng | zignig: tell me more |
| 13:01.52 | keith4 | is there a #debian-dk? |
| 13:01.52 | zignig | and][ng: the ssh keys generated by debian since 2006 are borked. |
| 13:02.08 | *** join/#debian Lin (n=igormorg@unaffiliated/lincity) |
| 13:02.12 | moshii | keith4: the whole X is faster than Y stuff is moot. |
| 13:02.14 | gngkai | hmm. have to think, because it could be I generated it on a old woody box and then migrate to etch... this could explain that |
| 13:02.14 | and][ng | zignig: remedy? |
| 13:02.23 | Don-Corleone | liable, ping 192.168.1.1 |
| 13:02.23 | and][ng | zignig: ah here it is, in topic |
| 13:02.25 | Don-Corleone | ? |
| 13:02.28 | zignig | and][ng: http://it.slashdot.org/it/08/05/13/1533212.shtml |
| 13:02.30 | keith4 | moshii: what the *hell* are you talking about? |
| 13:02.39 | liable | Don-Corleone: yes |
| 13:02.45 | *** join/#debian entaro (n=entaro@dhcp218-183.yandex.ru) |
| 13:02.51 | Don-Corleone | yes |
| 13:03.09 | moshii | keith4: who knows. ;) |
| 13:03.12 | liable | Don-Corleone: ping 64.233.167.99 |
| 13:03.16 | *** join/#debian funkyou_ (n=janm@e179133004.adsl.alicedsl.de) |
| 13:03.17 | *** join/#debian halflife (n=halflife@gatekeeper.athenahealth.com) |
| 13:03.17 | *** join/#debian Agiofws (n=agiofws@athedsl-231360.home.otenet.gr) |
| 13:03.32 | *** join/#debian [intra]lanman (n=lanman@va-76-6-213-35.dhcp.embarqhsd.net) |
| 13:03.43 | zignig | kind of scary , as I understand it any historic ssl connection that has been made ( and tcp recorded ) can be replayed in clear text because the keys can be guessed. |
| 13:03.46 | moshii | gngkai: the broken openssl was from etch on |
| 13:03.57 | Suprano | kernel config, BLK_DEV_JMICRON , desc For full support,use the libata drivers. does this mean use libata instead of this one? |
| 13:03.59 | Don-Corleone | liable, yes |
| 13:04.13 | zignig | still replace all your keys and change your passwords. |
| 13:04.17 | liable | Don-Corleone: ok, edit /etc/resolv.conf and fix your namserver |
| 13:04.39 | *** join/#debian Phil4 (n=phil@server1.germanserver.co.uk) |
| 13:04.45 | *** join/#debian qwe (n=qwe@86.57.137.7) |
| 13:05.37 | Don-Corleone | liable, nameserver: 192.168.1.1 |
| 13:05.41 | Don-Corleone | edit to what? |
| 13:05.47 | *** part/#debian purld (n=123456@unaffiliated/purld) |
| 13:05.55 | *** join/#debian dragonheart (n=dragonhe@gentoo/developer/dragonheart) |
| 13:06.18 | liable | Don-Corleone: that *should* work. put your isp's nameserver in there and see if it works |
| 13:06.22 | *** join/#debian PegaS (n=pegas@gate.nivalonline.com) |
| 13:07.16 | *** join/#debian ranit (n=ranjit@61.16.248.242) |
| 13:07.23 | ranit | I did all from installing 3rd party firmware using bcm for Broadcom Corporation BCM94311MCG wlan mini-PCI (rev 01), network-manager, and used pump too please check out the pastebin http://ubuntu.pastebin.com/m1451e761 |
| 13:07.26 | Don-Corleone | liable, no not worked |
| 13:08.02 | *** part/#debian Pete_B (n=p@host81-137-179-77.in-addr.btopenworld.com) |
| 13:08.27 | liable | Don-Corleone: 192.231.203.132 <-- put that in there |
| 13:09.17 | *** join/#debian suki (i=suki@ftp.hotspeed.com) |
| 13:09.29 | robocop101 | themill......thanks |
| 13:09.32 | robocop101 | brb |
| 13:10.30 | *** join/#debian aRyn (n=aryn@unaffiliated/aryn/x-98355) |
| 13:10.41 | Don-Corleone | liable, dont worked to |
| 13:11.11 | liable | Don-Corleone: can you ping google.com with that in there? |
| 13:11.18 | suki | i have setup dhcpd on my debian (internet works on the box) and the pcs get their local ip addresses, how do i ipmasquerade so they have internet too ? :) |
| 13:11.33 | *** join/#debian gleng (n=glen@wf02442-itg-ghs.phys.soton.ac.uk) |
| 13:11.39 | Don-Corleone | liable, i can't because iam from another pc |
| 13:12.06 | liable | Don-Corleone: what do you mean? |
| 13:12.07 | and][ng | zignig: read, it's nothing critical to me anyway |
| 13:12.30 | Don-Corleone | i have no internet connectiom |
| 13:12.31 | and][ng | zignig: and I learnt about xkcd.com (bookmarked) |
| 13:12.40 | *** join/#debian versuchsanstalt (n=versuchs@p54856834.dip.t-dialin.net) |
| 13:12.52 | liable | Don-Corleone: you said you could ping 64.233.167.99 before. |
| 13:13.21 | Don-Corleone | no ia cant |
| 13:13.41 | Don-Corleone | you understand? |
| 13:13.45 | liable | then your routers is broken, or your internet connection |
| 13:13.54 | Don-Corleone | no |
| 13:13.59 | *** join/#debian thrope_ (n=thrope@winnipeg.8networks.co.uk) |
| 13:14.11 | Don-Corleone | i have signal to internet in wireless |
| 13:14.17 | liable | Don-Corleone: you said you could ping 64.233.167.99 before. |
| 13:14.18 | Don-Corleone | and say |
| 13:14.22 | Don-Corleone | no |
| 13:14.27 | Don-Corleone | i never say that |
| 13:14.32 | Don-Corleone | waht is ping? |
| 13:14.36 | Don-Corleone | ping |
| 13:14.41 | Don-Corleone | ping ip |
| 13:14.44 | Don-Corleone | and? |
| 13:14.46 | nevyn | packet internet groper |
| 13:14.51 | *** join/#debian PhilKC (i=PhilKC@freenode/staff/philkc) |
| 13:15.02 | Don-Corleone | nevyn, i know |
| 13:15.29 | Don-Corleone | but how can i know, if i ping ok or not ok? |
| 13:15.56 | *** join/#debian sandman (n=s@CPE-24-208-55-92.new.res.rr.com) |
| 13:15.59 | nevyn | well if it's ok you'll get something like... |
| 13:16.15 | Don-Corleone | no |
| 13:16.20 | nevyn | 64 bytes from 64.233.167.99: icmp_seq=2 ttl=240 time=237 ms |
| 13:16.25 | *** join/#debian jflm (n=jflm@d83-180-202-11.cust.tele2.es) |
| 13:16.44 | *** join/#debian orveldv (i=orveldv@85.214.22.8) |
| 13:17.21 | Don-Corleone | frFrom 192.168.1.1 icmp seq=1 Destination NET Unreachable |
| 13:17.27 | Don-Corleone | that the message |
| 13:17.29 | *** join/#debian Eulex (n=alex@81-237-247-113-no120.tbcn.telia.com) |
| 13:17.59 | nevyn | Don-Corleone: do you have a default route? |
| 13:18.05 | nevyn | Don-Corleone: route -n |
| 13:18.16 | Don-Corleone | i dont know |
| 13:18.26 | nevyn | route -n look for something like this: |
| 13:18.27 | Don-Corleone | i have router from LinkSys |
| 13:18.35 | *** join/#debian pjz (n=pj@zachs.place.org) |
| 13:18.37 | Don-Corleone | who? |
| 13:18.42 | nevyn | 0.0.0.0 10.10.64.142 0.0.0.0 UG 0 0 0 eth0 |
| 13:18.55 | omry|work | is there a simple way to verify the integrity of the files of a specific package? |
| 13:18.57 | *** join/#debian vazul (n=user@91.82.36.118.pool.invitel.hu) |
| 13:19.01 | omry|work | (md5 sum for instance) |
| 13:19.05 | pjz | <PROTECTED> |
| 13:19.12 | justin | omry|work: debsums |
| 13:19.13 | asg | omry|work: debsums |
| 13:19.23 | Don-Corleone | nevyn, i dont know which you mean |
| 13:19.23 | *** part/#debian Demosthenes (n=demo@206.180.154.177.adsl.hal-pc.org) |
| 13:19.41 | omry|work | Judgen__, asg thanks |
| 13:19.53 | nevyn | Don-Corleone: what's the ip address of the machine? |
| 13:20.16 | *** join/#debian aseques3 (n=aseques@joe.grn.es) |
| 13:20.16 | Don-Corleone | 192.168.1.1 |
| 13:20.41 | nevyn | and of the linksys router? |
| 13:20.48 | Don-Corleone | yes |
| 13:21.00 | nevyn | what's the address of the debian machine? |
| 13:21.03 | liable | they are the same? |
| 13:21.05 | *** part/#debian pjz (n=pj@zachs.place.org) |
| 13:21.20 | nevyn | liable: sounds like it? |
| 13:21.33 | Don-Corleone | i can connect to router, nevyn |
| 13:21.35 | liable | nevyn: anything is possible i think.. |
| 13:21.49 | nevyn | Don-Corleone: you can connect from the debian machine to the router? |
| 13:21.56 | Don-Corleone | yes |
| 13:22.10 | *** join/#debian rdz (i=roman@netpd.org) |
| 13:22.11 | nevyn | the router is 192.168.1.1? |
| 13:22.17 | Don-Corleone | yes |
| 13:22.31 | nevyn | and your debian machine is ? |
| 13:22.51 | Don-Corleone | what is that? |
| 13:22.51 | nevyn | 192.168.1.something but not 1 right? |
| 13:23.01 | *** join/#debian Solfrost (n=Solfrost@213.236.211.98) |
| 13:23.19 | Don-Corleone | nevyn, that is adress from router, belive you not? |
| 13:23.39 | *** part/#debian Solfrost (n=Solfrost@213.236.211.98) |
| 13:23.48 | *** join/#debian robocop101 (n=robocop2@cpc3-warr1-0-0-cust875.bagu.cable.ntl.com) |
| 13:23.52 | *** part/#debian vazul (n=user@91.82.36.118.pool.invitel.hu) |
| 13:23.58 | nevyn | Don-Corleone: ok so 192.168.1.1 is the linux machine and 192.168.1.100 or is the router |
| 13:24.11 | nevyn | Don-Corleone: what's route -n print? |
| 13:24.12 | rdz | hi all. i am having a problem with a harddrive. a directory with the name 'daily.6' is corrupted. because of that, rsnapshot won't create any new backups anymore. how can i remove or rename that directory? |
| 13:24.26 | *** part/#debian ilf (n=ilf@unaffiliated/ilf) |
| 13:24.26 | abrotman | fsck the filesystem |
| 13:24.34 | robocop101 | themill whats the command to add to the sources.list please.....mitch said it was something like sed etc |
| 13:24.36 | *** join/#debian hdevalence (n=harry@bas9-toronto12-1177580356.dsl.bell.ca) |
| 13:24.44 | rdz | abrotman, doi need to umount it before doing that? |
| 13:24.45 | Don-Corleone | nevyn, LinkSYS |
| 13:24.51 | themill | robocop101: what are you trying to do? |
| 13:24.52 | *** join/#debian funkyou (n=janm@e179133004.adsl.alicedsl.de) |
| 13:24.56 | hdevalence | how do I find why apt is holding back packages? |
| 13:24.57 | rdz | abrotman, do i need special skills ion order to do that? |
| 13:25.01 | simNIX | rdz; Ive had this at one point also w rsnapshot; a fsck of the filesystem fixed it for me |
| 13:25.04 | nevyn | Don-Corleone: brand not important.. IP address important. |
| 13:25.06 | *** join/#debian minus198_ (n=asdf@c83-250-74-212.bredband.comhem.se) |
| 13:25.09 | stew | hdevalence: /msg dpkg kept back |
| 13:25.16 | rdz | when i booted, fsck already checked the disk, but couldn't remove it |
| 13:25.25 | rdz | simNIX, what did you run? |
| 13:25.33 | rdz | simNIX, btw: i am happy to hear that |
| 13:25.40 | abrotman | rdz: umounting is really recommended |
| 13:25.40 | Don-Corleone | nevyn, i cant connect to interne5t |
| 13:25.42 | rdz | i mean, that oyu were able to fix it |
| 13:25.44 | and][ng | so I think we're expecting an Etch update for the ssl keys thing |
| 13:25.46 | rdz | abrotman, thanks |
| 13:25.51 | *** join/#debian mugwort13 (n=mugwort1@pool-70-22-14-94.balt.east.verizon.net) |
| 13:26.00 | simNIX | in single user mode Ive ran fsck /dev/DEVICE |
| 13:26.00 | Don-Corleone | nevyn, how can i send my ip if i disconnect |
| 13:26.03 | rdz | simNIX, thanks |
| 13:26.04 | simNIX | with it unmounted |
| 13:26.05 | hdevalence | stew: thank you! |
| 13:26.07 | stew | and][ng: what do you mean by 'etch update'? |
| 13:26.08 | robocop101 | themill i want to add non free etc to my sources list so i can install the ati drivers and make them work |
| 13:26.09 | simNIX | np |
| 13:26.12 | *** join/#debian pythonic (n=nick@203-206-217-50.perm.iinet.net.au) |
| 13:26.37 | nevyn | Don-Corleone: you have multiple computers or a single computer? |
| 13:26.48 | Don-Corleone | 4 pc |
| 13:26.48 | and][ng | stew: isn't etch being updated from time to time? |
| 13:27.05 | *** join/#debian Fare (n=Fare@ita4fw1.itasoftware.com) |
| 13:27.06 | themill | robocop101: ok, so edit your /etc/apt/sources.list (as root) and add contrib non-free to the end of each line that begins with deb |
| 13:27.15 | Fare | I'm trying to use m-a a-i, and it complains |
| 13:27.24 | *** part/#debian hdevalence (n=harry@bas9-toronto12-1177580356.dsl.bell.ca) |
| 13:27.27 | Don-Corleone | nevyn, ? |
| 13:27.29 | stew | and][ng: yes. this security announcement that raised the awareness of this issue was an announcement that etch was being updated |
| 13:27.34 | Don-Corleone | ia have 4 pc |
| 13:27.45 | and][ng | stew: I mean my iso burned last year has the ssl keys issue, and I noticed it's not the same that is available now so I'm assuming there will be an update soon |
| 13:27.45 | Fare | Bad kernel version specification at /usr/bin/m-a line 566, <$apt> line 8 |
| 13:27.50 | *** join/#debian Suprano (i=suprano@pD9564B22.dip.t-dialin.net) |
| 13:27.51 | Fare | what does that mean? |
| 13:28.06 | stew | and][ng: you mean a revision |
| 13:28.12 | nevyn | Don-Corleone: ok. so you're on a computer connected by wireless and there's another computer that you can't connect to the internet wired to the linksys router? |
| 13:28.15 | and][ng | stew: ok, I read what you just said but I had to type enter anyway as my line took time to be written :-) |
| 13:28.24 | robocop101 | brb....lunch |
| 13:28.25 | and][ng | stew: my bad, a revision |
| 13:28.49 | Don-Corleone | nevyn, with cabel connecion have no problem |
| 13:28.59 | *** join/#debian nonno (n=nonno@ppp-79-114.33-151.iol.it) |
| 13:29.07 | Don-Corleone | i well ative the wireless , that is my problem |
| 13:29.14 | stew | and][ng: no plans for a new revision becuase of this issue have been announced |
| 13:29.55 | *** join/#debian fireba11_grr (n=Miranda@145.253.117.242) |
| 13:29.55 | stew | and][ng: becuase revisions are made regularly regardless |
| 13:29.55 | nevyn | Don-Corleone: ok so wired connection to the internet works correctly.. wireless doesnt? |
| 13:30.02 | and][ng | stew: that's what I supposed as I noticed the revision has changed since I burned the iso but I tought this would lead to an earlier new revision |
| 13:30.16 | *** join/#debian Esaj (n=Jason@cpc1-walt9-0-0-cust805.popl.cable.ntl.com) |
| 13:30.19 | *** join/#debian LastLemming (n=a@men13-2-82-224-174-159.fbx.proxad.net) |
| 13:30.25 | Don-Corleone | nevyn, I CAN WIRED CONNECTON, BUT I CAN NOT NOT NOT WORELESS CONNECT, I HAVE JUST ONE ROUTER |
| 13:30.38 | stew | Don-Corleone: please turn off your caps |
| 13:30.38 | nevyn | Don-Corleone: no need to shout. |
| 13:30.42 | simNIX | (no need to shout) |
| 13:31.08 | nevyn | Don-Corleone: what wireless card/chip do you have? |
| 13:31.08 | Don-Corleone | AHA SORRY |
| 13:31.10 | *** join/#debian tobias (n=tobias@cpe-066-026-085-055.nc.res.rr.com) |
| 13:31.20 | pythonic | YOU'RE NOT SORRY |
| 13:31.22 | liable | i am not sure if we are being trolled or not |
| 13:31.28 | ^shark_ | hi guys where is the named include statement for the rndc key specified by default, my bind didnt have an rndc key and i am trying to specify this key for named |
| 13:31.53 | woden1 | When Lenny boots on my laptop, I get an error: PCI: Failed to allocate mem resource #6:20000@e0000000 for 0000:01:00.0 |
| 13:31.55 | woden1 | What does that mean? |
| 13:32.02 | Don-Corleone | i am finish with wireless connectopn install, that is BCM43xx |
| 13:32.14 | nevyn | ^shark_: check your openssl version before you get too involved |
| 13:32.43 | *** join/#debian cosmodad (n=cosmodad@unaffiliated/cosmodad) |
| 13:32.43 | ^shark_ | nevyn: i am running OpenSSL 0.9.8c |
| 13:32.47 | pythonic | how was the openssl fault detected? |
| 13:33.11 | nevyn | ^shark_: just checking ;) |
| 13:33.12 | *** join/#debian minus198 (n=asdf@c83-250-74-212.bredband.comhem.se) |
| 13:33.31 | *** join/#debian XTZGZoReX (i=xtzgzore@0x3e42c894.adsl.cybercity.dk) |
| 13:33.32 | *** join/#debian killerchicken (n=kc@nrbg-4dbfe063.pool.einsundeins.de) |
| 13:33.59 | killerchicken | hm, why would openssh-client openssh-server be kept back when doing apt-get update && apt-get upgrade? |
| 13:34.11 | nevyn | ^shark_: which sub version of 0.9.8c? |
| 13:34.11 | *** join/#debian moka (n=X@unaffiliated/repyskichboarder) |
| 13:34.26 | asg | killerchicken: /msg dpkg kept back |
| 13:34.38 | ^shark_ | nevyn: OpenSSL 0.9.8c 05 Sep 2006 |
| 13:34.46 | nevyn | ^shark_: everything up to -4etch3 is broken |
| 13:34.52 | killerchicken | asg: thanks |
| 13:34.53 | *** part/#debian [intra]lanman (n=lanman@va-76-6-213-35.dhcp.embarqhsd.net) |
| 13:35.02 | nevyn | !tell ^shark_ about dsa1571 |
| 13:35.02 | ^shark_ | ok - now who is going to help me with my query |
| 13:35.47 | *** join/#debian Danielss89 (n=Im@0x57304f1b.hknxx3.adsl-dhcp.tele.dk) |
| 13:36.00 | robocop101 | themill....how do i get kate to work under root so I can edit my sources.list? |
| 13:36.05 | *** part/#debian killerchicken (n=kc@nrbg-4dbfe063.pool.einsundeins.de) |
| 13:36.18 | beardy | You don't run X as root. |
| 13:36.21 | stew | robocop101: /msg dpkg run stuff as root ; /msg dpkg sux |
| 13:36.21 | beardy | Use a damn editor. |
| 13:36.30 | stew | kate is an editor |
| 13:36.36 | *** part/#debian voltagex (n=voltagex@dsl-202-45-98-236.ACT.netspace.net.au) |
| 13:36.40 | ^shark_ | nevyn: thanks alot mate i wil look into it |
| 13:36.45 | ^shark_ | nevyn: ;) |
| 13:36.52 | beardy | Take the first line, then try to run a GUI editor, or do as you should. |
| 13:37.03 | *** join/#debian vazul` (n=bamyadUs@91.82.36.118.pool.invitel.hu) |
| 13:37.04 | sep | robocop101, use vi or nano or pico or emacs or some other text based editor. it you MUST use X use sux or ssh -X root@localhost |
| 13:38.16 | themill | robocop101: it's best not to use tools like kate as root. Learn to use other things for such tasks. |
| 13:38.19 | *** join/#debian vazul (n=user@91.82.36.118.pool.invitel.hu) |
| 13:38.27 | robocop101 | sep typing this in terminal sux game me this error "command not found" |
| 13:38.31 | *** join/#debian LeGreffi3R (n=greffier@089156181097.chello.fr) |
| 13:38.42 | asg | robocop101: why do you want to edit your sources.list? |
| 13:38.57 | *** join/#debian skandaleras (n=luiz@84.77.136.14) |
| 13:39.02 | robocop101 | themill....thats what I want to do..makew kate run as root I tried sux and it didnt work |
| 13:39.17 | robocop101 | asg so i can get the ati drivers working |
| 13:39.23 | *** part/#debian vazul (n=user@91.82.36.118.pool.invitel.hu) |
| 13:39.30 | and][ng | I'd be careful editing anything as root with that keyboard... |
| 13:39.51 | *** join/#debian ommoddonya (n=salam546@62.215.45.26) |
| 13:40.50 | stew | robocop101: which chipset does your ati card have? |
| 13:40.59 | nevyn | ^shark_: so the include statement can go anywhere outside a section |
| 13:41.00 | *** join/#debian jberg (n=johan@215.80-203-18.nextgentel.com) |
| 13:41.07 | stew | robocop101: you'd have to install sux before you could use it |
| 13:41.14 | *** join/#debian DelPede (n=pede@port91.ds1-abc.adsl.cybercity.dk) |
| 13:41.28 | robocop101 | stew do you want me to take it out and have a look?..its an ati 9600xt |
| 13:41.33 | nevyn | you could use the evil hack that is su-to-root |
| 13:41.43 | nevyn | part of menu. |
| 13:42.04 | stew | robocop101: you don't need to alter your sources.list for that card. debian fully supports it with free drivers |
| 13:42.11 | nevyn | which still attempts to implement policy tho it's gotten smarter than when I filed a bug on it. |
| 13:42.18 | *** join/#debian patiq (n=user@91.82.36.118.pool.invitel.hu) |
| 13:42.32 | sep | !tell robocop101 about installit |
| 13:43.16 | *** part/#debian patiq (n=user@91.82.36.118.pool.invitel.hu) |
| 13:43.22 | *** join/#debian ustunozgur (n=ustun@88.232.26.150) |
| 13:44.10 | DawnLigh1 | sighs... |
| 13:44.19 | DawnLigh1 | debian, debian... |
| 13:44.27 | nevyn | DawnLigh1: I know right. |
| 13:44.31 | robocop101 | !sources.list |
| 13:44.31 | dpkg | The list of repositories for installing packages is /etc/apt/sources.list and has lines like "deb http://ftp.<cc>.debian.org/debian etch main" and "deb http://security.debian.org/ etch/updates main" where <cc> is your country code. Be sure to run "aptitude update" after editing sources.list. Also see <mirrors> <apt-spy> <apt-setup> <etch security> <testing security> "man sources.list" and /usr/share/doc/apt/examples/sources.list |
| 13:44.59 | *** join/#debian limpio (n=macondo@cpe-00155805d6a1.cpe.cableonda.net) |
| 13:45.50 | robocop101 | brb |
| 13:46.39 | stew | robocop101: 'aptitude install xorg && dpkg-reconfigure xserver-xorg' should be all you need to do in order to get your video card working. you should not need to alter your sources.list |
| 13:47.09 | *** join/#debian rwaite (n=richard@rrcs-74-218-125-86.central.biz.rr.com) |
| 13:47.30 | *** join/#debian pallotro3 (i=chrono@marge.roa.cc) |
| 13:47.42 | robocop101 | stew....thanks.....I will try that when I get back from doggie walkies |
| 13:47.56 | Nyle | haha |
| 13:47.58 | Nyle | cute |
| 13:48.18 | Nyle | you got lil tiny weiner dogs? |
| 13:48.22 | Nyle | (i love those) |
| 13:48.23 | *** join/#debian jcwong (n=catalyst@unaffiliated/jcwong) |
| 13:48.28 | stew | robocop101: but if you are already running X, which i assume you are, since you are trying to run kate. i wonder what it is you are trying to accomplish |
| 13:48.33 | Nyle | hi stew |
| 13:48.38 | stew | hi |
| 13:48.41 | *** join/#debian felix_da_catz (i=HydraIRC@64.244.168.222) |
| 13:50.32 | *** join/#debian Phil4 (n=phil@server1.germanserver.co.uk) |
| 13:50.39 | *** join/#debian speeves (n=speeves@pub136-132.public.stolaf.edu) |
| 13:50.46 | *** part/#debian speeves (n=speeves@pub136-132.public.stolaf.edu) |
| 13:51.24 | *** join/#debian Paivakil (n=paivakil@unaffiliated/paivakil) |
| 13:51.30 | ^shark_ | i have put it in /etc/bind/named.conf |
| 13:51.43 | ^shark_ | nevyn: ^^ |
| 13:51.59 | pll | Does anyone know if there's a perl API to dpkg ? |
| 13:52.02 | *** join/#debian asmarin (n=asmarin@ceduroam3.us.es) |
| 13:52.05 | *** join/#debian GNU\tresh (n=tresh@chello062178230100.10.12.vie.surfer.at) |
| 13:52.31 | asmarin | hi when try to upgrade lenny for fucked ssl bug, exim4 doesnt upgrade correctly and breaks apt-get process |
| 13:52.50 | *** join/#debian grendal_prime (n=shawng@71-154-139-61.ded.pacbell.net) |
| 13:52.50 | asmarin | said mail-transport-agent arent isntalled |
| 13:53.04 | *** join/#debian Phil4 (n=phil@server1.germanserver.co.uk) |
| 13:53.08 | *** join/#debian ProN00b (n=dot@pD9E38DEF.dip.t-dialin.net) |
| 13:53.24 | asmarin | and exim4-daemon-light needs mail-transport-agent :-S |
| 13:53.29 | asmarin | any advice? |
| 13:53.34 | grendal_prime | ok, soooooo this machine has dual 64 bit intel procs in it. im not going to find a kernel that will support that am i? |
| 13:54.29 | cahoot | only a lot of sympathy |
| 13:54.33 | Nyle | perl api to dpkg? |
| 13:54.43 | *** part/#debian mugwort13 (n=mugwort1@pool-70-22-14-94.balt.east.verizon.net) |
| 13:54.45 | Nyle | I would assume you could call dpkg within a perl script |
| 13:55.09 | Nyle | I don't see a 'need' for an api to dpkg in perl, but then agian i could be wrong |
| 13:55.13 | themill | asmarin: check the bts |
| 13:55.22 | grendal_prime | or a bash script. |
| 13:55.22 | asmarin | themill bts? |
| 13:55.30 | asmarin | what is bts? |
| 13:55.31 | et | grendal_prime: most of the computers with intel cpus sold nowadays have dual or quad 64-bit cpus |
| 13:55.31 | halflife | grendal_prime: huh ? what do you mean ? 64bit arch support has been there for etch ? |
| 13:55.33 | themill | !btssmite asmarin |
| 13:55.33 | dpkg | beats asmarin around the head repeatedly with http://bugs.debian.org/ and apt-listbugs, along with a chainsaw if asmarin is running Unstable |
| 13:55.42 | asmarin | ahhhh ok |
| 13:55.43 | asmarin | thanks |
| 13:56.18 | grendal_prime | halflife: ok how can i tell if this thing is actually using it? |
| 13:56.23 | Nyle | well you can run a mixed 32/64 system |
| 13:56.26 | et | grendal_prime: it's your choice if you want the 32-bit or the amd64 distribution |
| 13:56.31 | Nyle | or not |
| 13:56.51 | et | grendal_prime: uname -a |
| 13:57.00 | Nyle | you could do a lot of things |
| 13:57.22 | beardy | asmarin: Fucking run aptitude like you should. |
| 13:57.28 | Nyle | just a kernel, or like a full blown amd64 |
| 13:57.38 | Nyle | or you can have a 64bit kernel only |
| 13:57.46 | asmarin | beardy: i tried all i know without success |
| 13:57.47 | Nyle | keep your other stuff 32bit |
| 13:57.48 | asmarin | :-S |
| 13:57.48 | fireba11_grr | Nyle: you can have amd64 kernel only |
| 13:57.50 | suki | i have setup dhcpd on my debian (internet works on the box) and the pcs get their local ip addresses, how do i ipmasquerade so they have internet too ? :) |
| 13:57.51 | Nyle | yes |
| 13:57.53 | Nyle | fireba11_grr, yes |
| 13:57.53 | *** join/#debian PriitM_ (n=cel1200@ip222.cab16.mus.starman.ee) |
| 13:58.05 | nevyn | does that still limit you to 4gb per process? |
| 13:58.15 | stew | suki: have a look at the ipmasq package |
| 13:58.16 | Nyle | i think so |
| 13:58.28 | Nyle | hmm |
| 13:58.33 | suki | stew, i have a few iptable lines |
| 13:58.34 | fireba11 | nevyn : most likely .. but at least you get full 4 GB per process |
| 13:58.38 | Nyle | im gonna go to jackson heights and get some pakistani breakfast |
| 13:58.38 | suki | but it doesnt work |
| 13:58.40 | Nyle | man i love queens |
| 13:58.43 | Nyle | bye now |
| 13:58.51 | grendal_prime | i know that et |
| 13:58.53 | mimcpher | I've found having an amd64 kernel can occasionly lead to oddities. It mostly worked, but some things (Nvidia proprietary driver, for one) didn't work out. |
| 13:59.10 | grendal_prime | i know wich kernel i have installed the only images i see for 64 bit though are amd |
| 13:59.14 | asmarin | uhmmm exim4-daemon-light for lenny has a little fandango with bugs :-S i will to wait |
| 13:59.30 | *** join/#debian RaceCondition (n=RaceCond@217-159-205-18-dsl.est.estpak.ee) |
| 14:00.04 | stew | suki: you can also look for the masquerade howto. or ask a more specific question |
| 14:00.09 | grendal_prime | and the kernel im using is a 2.6.24-1-686 |
| 14:00.32 | *** join/#debian deny[all] (n=pdiablo@unaffiliated/denyall/x-000001) |
| 14:00.40 | DawnLight | i'm purchasing a mobile phone. what works flawlessly? |
| 14:00.53 | *** join/#debian Phil4 (n=phil@server1.germanserver.co.uk) |
| 14:01.00 | *** join/#debian timdau (n=paul@H188.C137.B196.A67.tor.heavycomputing.ca) |
| 14:01.00 | helo | everything is flawed :( |
| 14:01.02 | grendal_prime | i love my treo650 |
| 14:01.02 | rawb | can soemone tell me what generated /etc/ssl/private/ssl-cert-snakeoil.key? my postfix main.cf points to it (even though I don't use SSL with postfix) |
| 14:01.16 | grendal_prime | ssh client on it.. |
| 14:01.24 | liable | rawb: comes with the package |
| 14:01.26 | grendal_prime | vnc client for it |
| 14:01.27 | helo | yeah that is pretty cool... |
| 14:01.38 | *** join/#debian Entr4nced (n=IMG001@67-129-213-39.dia.static.qwest.net) |
| 14:01.40 | suki | stew, my box has internet and my clients doesnt have internet, box is running dhcpd, clients get local ip |
| 14:02.09 | timdau | how reliably should I expect dowkd.pl to work? |
| 14:02.19 | timdau | it says my newly generated keys are weak |
| 14:02.27 | *** join/#debian entaro_ (n=entaro@213.180.203.45) |
| 14:02.47 | stew | rawb: the ssl-cert package (/var/lib/dpkg/info/ssl-cert.postinst) |
| 14:02.47 | themill | timdau: have you upgraded both openssl and libssl0.9.8? |
| 14:02.53 | *** join/#debian PriitM_ (n=cel1200@ip222.cab16.mus.starman.ee) |
| 14:02.53 | helo | so... if someone had captured output of debian https sessions using one of the affected releases, would they now be able to decrypt them more easily? |
| 14:03.04 | liable | timdau: if says they are weak, trust it. if it says they are secure, dont trust it.. :) |
| 14:03.23 | timdau | yeah, that is why I am in here :) |
| 14:03.32 | stew | timdau: if it says they are weak, you should consider them weak. |
| 14:03.40 | helo | so don't even bother using it |
| 14:03.55 | DawnLight | grendal_prime: does everything play well with the linux tools? |
| 14:04.02 | rawb | stew: thanks. so assuming I updated openssl/packages, would removing them and re-running 'make-ssl-cert generate-default-snakeoil' generate 'safe' keys? |
| 14:04.22 | helo | what is the point of using something where, in either case you are unable to make a more meaningful decision. |
| 14:04.42 | stew | rawb: i wouldn't assume that |
| 14:04.59 | stew | helo: what do you mean? |
| 14:05.22 | *** join/#debian x86 (n=x86@p3m/member/x86) |
| 14:05.23 | stew | helo: you mean the perl script? |
| 14:05.33 | liable | it cant verify with any certainty your keys are secure. so whats the point |
| 14:05.37 | *** join/#debian extor (i=xtor@c-24-1-247-223.hsd1.il.comcast.net) |
| 14:05.38 | x86 | gah, I'm running etch and there is no "dig" with bind9 or bind9-host? |
| 14:05.43 | x86 | how do I install dig? |
| 14:05.45 | asg | x86: install dnsutils |
| 14:05.49 | x86 | cool |
| 14:05.53 | stew | it can verify with certainty that certain keys are weak |
| 14:05.59 | x86 | thanks :) |
| 14:06.00 | nevyn | liable: it forces the point if they're weak tho |
| 14:06.01 | *** part/#debian x86 (n=x86@p3m/member/x86) |
| 14:06.12 | *** join/#debian Phil4 (n=phil@server1.germanserver.co.uk) |
| 14:06.23 | nevyn | (I think it should just return weak in all cases) force a global refresh of keys |
| 14:06.46 | liable | yes, but if you cant tell if they are *not* *weak* there is not much point |
| 14:07.00 | liable | just regenerate and be done with it |
| 14:07.29 | *** join/#debian kalpik (n=kalpik@unaffiliated/kalpik) |
| 14:07.29 | *** join/#debian treyka (n=trey@cable-83.217.131.85.coditel.net) |
| 14:07.30 | *** join/#debian nocturn (n=guy@ubuntu/member/nocturn) |
| 14:07.31 | stew | people have regenerated checked with the perl script and realized that their keys are still weak, so it has been useful |
| 14:07.34 | suki | stew, any ideas, what should i do? |
| 14:07.36 | nevyn | liable: you're of course correct |
| 14:07.39 | nocturn | Hi all |
| 14:07.51 | stew | suki: yeah, it sounds like you want to setup masquerading |
| 14:08.01 | nocturn | Is it possible to make an smtp server a transparent gateway (like a proxy) |
| 14:08.09 | grendal_prime | DawnLight: ?? what do you mean |
| 14:08.15 | *** join/#debian dbmoodb (n=david@unaffiliated/dbmoodb) |
| 14:08.15 | nocturn | I want all other servers in the domain to relay through it, even if I have no relayhost set |
| 14:08.43 | dbmoodb | hi ah ... this openssl thing does it mean my luks encrypted partitions are now useless ... |
| 14:08.46 | dbmoodb | as in they are not protected |
| 14:08.58 | DawnLight | grendal_prime: all the features that have to do with communication between the computer and the phone |
| 14:08.59 | themill | dbmoodb: check the wiki page |
| 14:09.19 | grendal_prime | ooo sorry |
| 14:09.39 | suki | stew, i assume its just a "NAT" issue? |
| 14:09.41 | grendal_prime | na, i just use it mostly to check up on the servers. but i mean. |
| 14:09.53 | stew | suki: yes, masqerading is a special case of nat |
| 14:10.59 | *** part/#debian helo (n=helo@unaffiliated/helo) |
| 14:11.15 | *** join/#debian blackinside (n=blackins@ADijon-153-1-81-10.w81-49.abo.wanadoo.fr) |
| 14:11.41 | stew | suki: if you need more help, you'll have to provide us with more information and/or ask us more specific questions |
| 14:11.46 | Lagbolt | themill is it just 0.9.8? i thought had to have version 0.9.8g-10 or something |
| 14:12.12 | *** join/#debian speeves (n=speeves@pub136-132.public.stolaf.edu) |
| 14:12.19 | *** part/#debian speeves (n=speeves@pub136-132.public.stolaf.edu) |
| 14:12.30 | themill | Lagbolt: don't confuse the package name with the package version. |
| 14:12.38 | themill | !info libssl0.9.8 etch |
| 14:12.45 | *** join/#debian KU0N (n=KU0N@119-193.104-92.cust.bluewin.ch) |
| 14:12.47 | KU0N | hello |
| 14:12.57 | suki | ok, my eth0 is a local range 168.168.168.*, my eth1 is my global ip |
| 14:13.08 | dpkg | libssl0.9.8: (SSL shared libraries), section libs, is important. Version: 0.9.8c-4etch1 (etch), Packaged size: 2652 kB, Installed size: 6152 kB |
| 14:13.08 | themill | dpkg: you're slow |
| 14:13.08 | dpkg | No, I'm not slow, I'm just overworked, underpaid, underappreciated and much maligned. Now STOP NAGGING ME!!!! |
| 14:13.14 | KU0N | when I connect a HID usb device, it is created with 660 permissions, how can I change that? |
| 14:13.17 | suki | i need a simple masq to ensure my LAN clients have internet :) |
| 14:13.19 | Lagbolt | yeah, i have openssl 0.9.8g-10 |
| 14:13.26 | Lagbolt | using lenny |
| 14:13.33 | KU0N | I need it to be 666 |
| 14:13.40 | *** join/#debian zyx386 (n=tony@unaffiliated/zyx386) |
| 14:13.44 | zyx386 | hi |
| 14:14.04 | zyx386 | how can i know, if i have Dynemic IP or Static IP? |
| 14:14.06 | abrotman | stew: do you know if anyone does like joey used to do with the pages that show what packages are going to be updated with the next point release ? |
| 14:14.14 | *** join/#debian aFlag (n=rafael@201.78.109.157) |
| 14:14.26 | hoxu | zyx386, you are getting it via dhclient? |
| 14:14.38 | abrotman | stew: ignore .. http://release.debian.org/stable/4.0/4.0r3/ |
| 14:14.44 | aFlag | invoke-rc.d apache start doesn't work but /etc/init.d/apache start does, am I missing something here? |
| 14:14.46 | abrotman | stew: though r4 hasn't started yet |
| 14:14.57 | hoxu | zyx386, your network admin / service provider should be able to tell that |
| 14:15.20 | *** join/#debian format_c (n=format_c@p57A71C35.dip0.t-ipconnect.de) |
| 14:15.21 | *** join/#debian norules (n=poppy@85-18-136-77.fastres.net) |
| 14:15.21 | aFlag | invoke-rc.d doesn't print anything and it doesn't start apache either |
| 14:15.27 | *** part/#debian Zwift (n=opera@chello084010100220.chello.pl) |
| 14:15.38 | *** join/#debian limpio (n=macondo@cpe-00155805d6a1.cpe.cableonda.net) |
| 14:16.03 | hoxu | aFlag, have you configured apache to start at your current runlevel? |
| 14:16.21 | Paivakil | aFlag: is'nt invoke-rc.d supposed to be invoked by scripts? |
| 14:16.53 | *** join/#debian berzerka (n=ps790413@vrvis3.rz.RWTH-Aachen.DE) |
| 14:17.04 | aFlag | hoxu: no, I configured it not to start, I want to start it manually whenever I need it. |
| 14:17.05 | hoxu | Paivakil, I use it myself, if there's a reason why you shouldn't, please tell |
| 14:17.19 | hoxu | aFlag, then you need to use the path as you mentioned, not invoke-rc.d |
| 14:17.38 | *** join/#debian ricosecada (n=ricoseca@85.233.228.239) |
| 14:17.40 | zyx386 | nevyn, iam Don-Corleone from another PC ;) |
| 14:17.44 | aFlag | I see, I thought starting with /etc/init.d/script was considered bad practice |
| 14:17.47 | *** join/#debian gener1c (n=gagagugu@unaffiliated/gener1c) |
| 14:17.48 | *** join/#debian lodder (n=lodder@141.253-245-81.adsl-dyn.isp.belgacom.be) |
| 14:18.08 | *** join/#debian juliank (n=juliank@ubuntu/member/juliank) |
| 14:18.28 | ricosecada | What installing amavisd-new support for clamav is automatically turned on, how do I shut this off? |
| 14:18.30 | zyx386 | nevyn, from this LinkSYS router i have internet signal wired and wireless, but i cant connect to internet |
| 14:18.32 | *** join/#debian Phil4 (n=phil@server1.germanserver.co.uk) |
| 14:18.32 | *** join/#debian dejones (n=donnie@157-236-210-63-arpa.cust.cinci.current.net) |
| 14:18.44 | *** join/#debian Esaj (n=Jason@cpc1-walt9-0-0-cust805.popl.cable.ntl.com) |
| 14:18.50 | Dewi | aFlag: I' |
| 14:18.53 | Dewi | ve not heard of that |
| 14:19.11 | Dewi | aFlag: it always seemed like the most consistent way |
| 14:19.21 | *** part/#debian pallotro3 (i=chrono@marge.roa.cc) |
| 14:19.24 | Paivakil | hoxu: oh. I always used the full path whenever I needed to start some service |
| 14:19.54 | Dewi | Paivakil: argh, they all have complicated command lines and different methods for killing them |
| 14:19.55 | hoxu | aFlag, check the manpage of invoke-rc.d too, you could use --force if you still want to use that ;) |
| 14:20.12 | Dewi | Paivakil: dealing with that is probably my least favourite part of BSD |
| 14:20.13 | *** join/#debian FiendishF1sh (n=Fiendish@82-32-106-55.cable.ubr02.hawk.blueyonder.co.uk) |
| 14:20.21 | lodder | ricosecada: uncomment the clamav part in here: /etc/amavis/conf.d/15-av_scanners |
| 14:20.32 | ricosecada | lodder, thanks! |
| 14:20.46 | abrotman | or comment ? |
| 14:21.01 | lodder | abrotman: yea sorry comment |
| 14:21.03 | nevyn | I need to sleep it's 20 past midnight |
| 14:21.27 | lodder | ricosecada: comment the part that you don't need. sorry working al day is making me falling a sleep |
| 14:21.52 | *** join/#debian jakub (n=jkb@r3t210.net.upc.cz) |
| 14:21.59 | ricosecada | lodder, I understood :-) |
| 14:22.04 | Dewi | nevyn: at least a sensible timezone |
| 14:22.05 | lodder | ricosecada: oke |
| 14:22.09 | Dewi | at last even |
| 14:22.12 | lodder | nevyn: thx for correcting me |
| 14:22.27 | lodder | eah nevyn I meant abrotman |
| 14:23.05 | *** join/#debian aleksanteri (n=cogwheel@dsl-sjkbrasgw2-fef8f800-254.dhcp.inet.fi) |
| 14:23.16 | *** join/#debian s14ck (n=nombre@201.243.174.130) |
| 14:23.39 | *** join/#debian kshah (n=kunalash@cpe-68-173-252-199.nyc.res.rr.com) |
| 14:24.29 | *** join/#debian tanner (n=xero@c-24-20-184-182.hsd1.mn.comcast.net) |
| 14:24.37 | grendal_prime | ok i guess a better question would be ..how do i tell if my current kernel has 64bit support? |
| 14:24.39 | *** join/#debian StucKman_ (n=mdione@host21.190-137-100.telecom.net.ar) |
| 14:24.46 | *** join/#debian crumblenaut (i=r00t@crumblenaut.jugglemonkey.net) |
| 14:24.53 | crumblenaut | does debian use a different version of NSS than CentOS/RHEL? |
| 14:25.23 | grendal_prime | debian probably uses the correct one..(whichever one that is) hehehee |
| 14:25.33 | and][ng | bye |
| 14:25.34 | *** part/#debian and][ng (n=and][ng@213-156-49-141.fastres.net) |
| 14:25.58 | crumblenaut | thanks grendal for that very useful and insightful response |
| 14:26.03 | lodder | crumblenaut: hard to anwser maby check packages.debian.org the you can find all the packages for each version |
| 14:26.54 | jelly-home | crumblenaut: it's entirely possible they're different, both in upstream versions and applied patches |
| 14:27.14 | abrotman | the copyright file on packages.d.o might give some useful info |
| 14:27.19 | *** join/#debian lantius (n=sf@196.pool85-53-82.dynamic.orange.es) |
| 14:27.36 | ricosecada | lodder, since I don't want any kind of antivirus support, is if okay to remove that file completely? |
| 14:27.52 | crumblenaut | the centos one doesn't seem to support nss-mysql, which is very annoying |
| 14:27.54 | liable | heh, the wiki is showing my last page i edited plus the SSL keys page at the end.. |
| 14:27.57 | lodder | ricosecada: I wouldn't recommand it |
| 14:28.38 | ricosecada | lodder, then comment everything? As I can see it is only related to anti-virus. |
| 14:28.42 | liable | oh, its just like lastpage in a browser i guess |
| 14:28.48 | *** join/#debian SlimG (n=SlimG@84.205.58.242) |
| 14:28.48 | abrotman | crumblenaut: we're not going to be much help with centos |
| 14:28.48 | *** join/#debian faw (n=felipe@unaffiliated/faw) |
| 14:28.52 | *** join/#debian Agiofws (n=agiofws@athedsl-231360.home.otenet.gr) |
| 14:29.36 | lodder | ricosecada: I don't know how amavisd-new will react on that but you can simple move the file to another location and try it, if it doesn't work you can simple butit back |
| 14:29.36 | *** join/#debian RaceCondition (n=RaceCond@217-159-205-18-dsl.est.estpak.ee) |
| 14:29.36 | *** join/#debian zmotok (n=emanresu@isc.cps.unizar.es) |
| 14:29.36 | ricosecada | lodder, thanks |
| 14:29.36 | Dewi | abrotman: aren't we all transitioning to centos because of the RNG ? |
| 14:29.36 | StucKman_ | about ssh-vulnkey -a, what should I do with Unknown keys? |
| 14:29.36 | Dewi | abrotman: I assumed we were :) |
| 14:29.46 | liable | Dewi: i'm switching to ubuntu myself .. oh wait.. |
| 14:29.47 | zmotok | anyone here that's using or ever used (installed) debian on a DEC Alpha? |
| 14:29.48 | lodder | Dewi: RNG ? |
| 14:29.57 | Dewi | disclaimer: I don't even like centos; I'm just bitter |
| 14:30.00 | Dewi | (and a troll) |
| 14:30.18 | Danielss89 | ive got this message in my syslog a lot of times: collected(NUMBE HERE): Cannot open "proc/1/stat": No such file or directory.... |
| 14:30.24 | Dewi | lodder: debian random number generator bug yesterday |
| 14:30.28 | StucKman_ | lodder: random number generator |
| 14:30.35 | Danielss89 | and my apache2 server shuts down all the time.. |
| 14:30.51 | lodder | Dewi: ah wel I solved it ;) hopefully it's alll fixed now |
| 14:31.03 | suki | hi, if i did a apt-get install kde, it installed kde and 100 other files, now if i want to remove kde and all the files, how do i do that? |
| 14:31.07 | *** join/#debian ringo999 (n=ringo999@onv.cybercity.dk) |
| 14:31.15 | *** join/#debian CalJohn (n=pg99@87-194-236-208.bethere.co.uk) |
| 14:31.20 | StucKman_ | Danielss89: I think you better go check your ram. use memtest86+ |
| 14:32.00 | *** mode/#debian [+l 907] by debhelper |
| 14:32.23 | Danielss89 | collected(NUMBE HERE): Cannot open "proc/1/stat": No such file or directory.... <-- what does this error mean? |
| 14:32.29 | Danielss89 | is that something with the RAM? |
| 14:32.52 | *** join/#debian ommoddonya (n=salam546@62.215.45.26) |
| 14:33.15 | *** join/#debian Gryfelhase (n=Gryflhas@p4FD22811.dip0.t-ipconnect.de) |
| 14:33.18 | *** part/#debian ommoddonya (n=salam546@62.215.45.26) |
| 14:33.34 | nevyn | nope. |
| 14:33.39 | nevyn | usually pid 1 is init. |
| 14:33.59 | woden1 | are my PGP keys affected by the bug? |
| 14:34.04 | liable | Danielss89: looks like a bug, you should always have that file, its init. |
| 14:34.30 | *** join/#debian xpoint (n=xpoint@dlink.junc.org) |
| 14:34.37 | liable | Danielss89: cat /proc/1/stat |
| 14:34.38 | StucKman_ | suki: there are logs of what files are installed somewhere in /var |
| 14:34.44 | StucKman_ | brb |
| 14:34.54 | hoxu | !tell StucKman_ about dpkg.log |
| 14:35.04 | *** join/#debian academy (n=adam@unaffilated/academy) |
| 14:35.26 | Danielss89 | liable cat: /proc/1/stat: No such file or directory |
| 14:35.27 | nevyn | woden1: no. |
| 14:35.34 | hoxu | StucKman_, oh wait, maybe you meant /msg dpkg installed |
| 14:35.39 | academy | Is it possible to make bind9 'bind' to only one interface, rather than listen on all of them, but only to a particular ip. |
| 14:35.43 | Paivakil | liable: Danielss89 init can be replaced by an upgrade, no? |
| 14:36.05 | liable | Paivakil: good point, and i have no idea |
| 14:36.22 | hoxu | academy, I doubt it if the documentation doesn't tell you how |
| 14:36.25 | ricosecada | lodder, I just looked at /usr/share/doc/amavisd-new/README.Debian and it seems like both clamav and spamassasin should be turned on and off in /etc/amavis/conf.d//etc/amavis/conf.d/15-content_filter_mode, but when I comment out the clamav part in that file. Amavis still complains. |
| 14:36.31 | Danielss89 | uhm i dont have a folder called 1 in my proc folder liable... but i have a lot of other folders with numbers |
| 14:36.35 | academy | hoxu, bah that's annoying. |
| 14:37.01 | lodder | ricosecada: what is the error you get from amavisd |
| 14:37.05 | liable | Danielss89: whats at the top of your ps ax output? whats init's pid? |
| 14:37.41 | *** join/#debian foka (n=foka@61.51.152.151) |
| 14:37.49 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 14:38.03 | StucKman_ | hoxu: tell suki |
| 14:38.18 | Danielss89 | i cant see the top of the list liable.. i am using Putty do connect.. but i see a lot and lot of /usr/sbin/apache2 -k start |
| 14:38.29 | liable | Danielss89: ps ax|grep init |
| 14:38.50 | Danielss89 | 6505 pts/24 S+ 0:00 grep init |
| 14:38.52 | hoxu | StucKman_, sorry, I thought it was you asking :) |
| 14:38.54 | *** join/#debian LeGreffi3R (n=greffier@089156181122.chello.fr) |
| 14:39.07 | liable | Danielss89: ok, i'm confused then.. |
| 14:39.14 | hoxu | suki, you should use aptitude because it keeps track of what is installed automatically, I suggest you learn to use the GUI |
| 14:39.34 | StucKman_ | hoxu: np |
| 14:39.39 | liable | Danielss89: init it the grand daddy of all processes, you should have it.. |
| 14:39.39 | *** join/#debian muninn (n=muninn@84-107-164-89.dsl.quicknet.nl) |
| 14:39.55 | hoxu | suki, you could start the GUI and limit the view with 'l' and type "kde" and mark all those packages automatically installed with 'M' (if you don't want to keep them) |
| 14:39.58 | StucKman_ | Danielss89: pipe to less |
| 14:40.14 | StucKman_ | Danielss89: ps ax | less |
| 14:40.40 | ricosecada | lodder, ClamAV-clamd av-scanner FAILED: Too many retries to talk to /var/run/clamav/clamd.ctl |
| 14:40.54 | *** join/#debian litlebuda (n=litlebud@87-196-213-216.net.novis.pt) |
| 14:41.01 | ricosecada | lodder, since I don't need clamav, I just wanted to remove support for it |
| 14:41.25 | *** join/#debian userID (n=userID@p5B116295.dip.t-dialin.net) |
| 14:42.01 | *** mode/#debian [+l 913] by debhelper |
| 14:42.18 | fugit | academy: listen-on in /etc/bind/named.conf.options good place to start |
| 14:42.33 | liable | i wonder if the ssl bug can get us to 1000 in #debian :) |
| 14:42.45 | *** join/#debian dbmoodb (n=david@unaffiliated/dbmoodb) |
| 14:42.59 | dbmoodb | where is the ssl wiki page for encryption info ? |
| 14:43.02 | academy | fugit, yeah but I'd like to do listen-on{ 'eth0'} incase the ip address changes. |
| 14:43.39 | asg | dbmoodb: /topic |
| 14:44.00 | suki | any easy way to remove kde completely ? :) |
| 14:44.03 | liable | well, linked from the dsa factoid |
| 14:44.05 | Danielss89 | StucKman_ http://pastebin.ca/1018023 |
| 14:44.17 | hoxu | suki, gee, did you try "aptitude remove kde"? |
| 14:44.29 | *** join/#debian CremonaMeGenuit (n=CremonaM@194.244.37.210) |
| 14:44.34 | ricosecada | lodder, also clamav isn't installed on the system |
| 14:44.39 | hoxu | !tell suki about remove kde |
| 14:44.46 | liable | i wonder if linking to the wiki page would be better than the factoid for the /topic |
| 14:45.17 | *** join/#debian Zulus (n=Zulus@78-24-230-131-gprs.vntc.ru) |
| 14:45.26 | asg | liable: the problem is not the factoid, it's that nobody read the /topic |
| 14:45.32 | hoxu | liable, I think the factoid gives a good summary |
| 14:45.33 | StucKman_ | Danielss89: two things: you lack of init. that's plain weird. also, you havel lots of apache's. |
| 14:45.50 | grendal_prime | ok its been so long since i had to set up a desktop...what is the name of the package for mp3 playback.. |
| 14:46.01 | *** join/#debian joussen (n=joussen@212.66.132.170) |
| 14:46.06 | Danielss89 | yes StucKman_ i dont know why there are so many apache's running? |
| 14:46.07 | liable | ok, my wonderings appear incorrect. |
| 14:46.12 | *** part/#debian Zulus (n=Zulus@78-24-230-131-gprs.vntc.ru) |
| 14:46.18 | Danielss89 | and i surtanly dont know why i dont have init.. |
| 14:46.24 | grendal_prime | im totally drawing a blank..i have the right repo in the source.lst..i just cant remember the name of the codec package |
| 14:46.31 | liable | Danielss89: you have to have init.. |
| 14:46.43 | hoxu | Danielss89, what is that system running? |
| 14:46.49 | StucKman_ | liable: http://pastebin.ca/1018023 |
| 14:46.51 | Danielss89 | it debian etch.. |
| 14:46.57 | *** join/#debian srand (n=verde@unaffiliated/srand) |
| 14:47.04 | srand | how script turn my eth* up ?! |
| 14:47.05 | liable | StucKman_: i saw it. |
| 14:47.16 | StucKman_ | Danielss89: wait a second |
| 14:47.18 | liable | StucKman_: kill apache for a start |
| 14:47.25 | liable | Danielss89: ^^ |
| 14:47.30 | grendal_prime | and do all of the kernels now support mutiproc by default? |
| 14:47.38 | fireba11 | Danielss89: also there is rotatelogs running .. looks like something gets stuck, it's not likely that you catch that running normally |
| 14:47.40 | hoxu | StucKman_, is that full output of ps? |
| 14:47.49 | liable | obviouslt not |
| 14:47.53 | StucKman_ | Danielss89: can you do a "ps fax", and paste all the output? putty has scrollback support |
| 14:48.06 | StucKman_ | hoxu: I suspect it's not |
| 14:48.17 | hoxu | StucKman_, pipe it into a file and pastebin that |
| 14:48.22 | StucKman_ | grendal_prime: SMP, yes |
| 14:48.36 | *** part/#debian zmotok (n=emanresu@isc.cps.unizar.es) |
| 14:48.36 | StucKman_ | hoxu: again, it's not me, it's Danielss89 :) |
| 14:48.52 | hoxu | StucKman_, I guess I *am* tired... :) |
| 14:48.57 | StucKman_ | hoxu: heeh :) |
| 14:49.13 | *** part/#debian suki (i=suki@ftp.hotspeed.com) |
| 14:49.13 | joussen | Hi! I found the following on <http://wiki.debian.org/SSLkeys>: "key generated with good openssl and used to ssh from a machine with bad ssl = bad" |
| 14:49.13 | Danielss89 | http://pastebin.com/m55b9c7e3 here it is |
| 14:49.19 | lodder | ricosecada: you need to comment every reference in the config files of amavisd to clamav I xould sugges |
| 14:49.32 | joussen | Can someone explain me why it should compromise the key? |
| 14:50.18 | grendal_prime | so, i dont see any kernels that specify that (i remember i use to have to install an smp kernel specifically) but now they all just support it? |
| 14:50.23 | StucKman_ | holy molly! he doen't have init! |
| 14:50.28 | *** join/#debian koolhead17 (n=atul@220.227.149.144) |
| 14:50.38 | hoxu | Danielss89, "ps fax |grep init" says what? |
| 14:50.42 | *** join/#debian dpm (n=dpm@p54A119A1.dip0.t-ipconnect.de) |
| 14:50.44 | *** join/#debian holymoly (n=new@mail.wjsgroup.com) |
| 14:50.45 | riot | my wacom tablet (x60t) device doesn't appear anywhere :( |
| 14:50.54 | Danielss89 | hoxu 8179 pts/24 S+ 0:00 \_ grep init |
| 14:50.56 | *** join/#debian x86 (n=x86@p3m/member/x86) |
| 14:51.01 | debian | What does dist-upgrade do? |
| 14:51.01 | hoxu | Danielss89, nothing else? |
| 14:51.06 | riot | i tried lots of howtos, yet everything failed. |
| 14:51.07 | x86 | ok, in debian etch, where can I get "tracepath"? |
| 14:51.09 | Danielss89 | no hoxu |
| 14:51.12 | StucKman_ | holy molly²! he still doesn't have init! |
| 14:51.17 | x86 | and "tracepath6" and "traceroute6"? |
| 14:51.23 | hoxu | !installit |
| 14:51.24 | dpkg | *** NEWS FLASH! *** Your box does not come with every app, tool and utility known to debiankind installed already. If you find that the program you've been told to use isn't there, install it. Also ask me about <search>. if someone suggests an application to you, it's highly likely that it's available via apt-get, or aptitude |
| 14:51.54 | x86 | !search tracepath |
| 14:51.57 | Danielss89 | so what can i do StucKman_ |
| 14:52.03 | *** part/#debian srand (n=verde@unaffiliated/srand) |
| 14:52.04 | hoxu | x86, /msg dpkg search |
| 14:52.06 | *** join/#debian sdvxpu (n=nonno@ppp-2-117.33-151.iol.it) |
| 14:52.18 | liable | Danielss89: paste the results of ls /proc |
| 14:52.23 | hoxu | debian, that would be covered on the manual page of whichever command you are thinking of |
| 14:52.23 | x86 | hoxu: hopefully it provides something better than apt-cache search |
| 14:52.32 | grendal_prime | msg dpkg sex |
| 14:52.33 | debian | hoxu: Maual? |
| 14:52.34 | liable | i think youve hit some weird overrun |
| 14:52.35 | grendal_prime | hehehe |
| 14:52.43 | Danielss89 | liable: http://pastebin.com/m15e26dbe |
| 14:52.46 | x86 | 09:52 <x86> search tracepath |
| 14:52.46 | x86 | 09:52 <dpkg> no idea, x86 |
| 14:52.46 | hoxu | x86, that should work |
| 14:52.49 | x86 | GAH! WTF |
| 14:52.53 | fugit | academy: don't know that you can/can't do that within bind9 configs. GL |
| 14:53.12 | StucKman_ | hmm! there's PID 1... |
| 14:53.23 | abrotman | !tell x86 about search |
| 14:53.25 | x86 | guess I shouldn't be surprised, hell you have to install about 5 packages just to get all of BIND installed (not including deps) |
| 14:53.27 | StucKman_ | Danielss89: ls -l /proc/1 |
| 14:53.28 | *** join/#debian Songtao (n=action@222.131.164.75) |
| 14:53.32 | *** join/#debian klync (n=kevins@gentoo/user/klync) |
| 14:53.44 | Danielss89 | StucKman_ ls: /proc/1: No such file or directory |
| 14:53.47 | *** join/#debian sodio (n=sodio@va-71-1-140-171.sta.embarqhsd.net) |
| 14:53.49 | jelly-home | x86: have you actually read what dpkg told you after "/msg dpkg search"? |
| 14:53.53 | x86 | dnsutils, bind9, bind9-host.... gah wtf just put it in a single package |
| 14:53.59 | debian | abrotman: What does dist-upgrade do? I forgott. |
| 14:54.02 | x86 | jelly-home: I pasted it |
| 14:54.03 | *** join/#debian hjb (n=bellsout@p4FC81B13.dip0.t-ipconnect.de) |
| 14:54.08 | abrotman | debian: man aptitude .. READ |
| 14:54.16 | *** join/#debian unixSnob (n=jgombos@68-31-213-40.area4.spcsdns.net) |
| 14:54.20 | StucKman_ | Danielss89: ?!!? it's in the previous output... |
| 14:54.24 | jelly-home | x86: "search", not "search tracepath" |
| 14:54.26 | StucKman_ | Danielss89: ls -l /proc? |
| 14:54.31 | hjb | Hi. In which package contains the dovecot sieve plugin? |
| 14:54.35 | Danielss89 | StucKman_ what? |
| 14:54.39 | *** join/#debian Agiofws (n=agiofws@athedsl-231360.home.otenet.gr) |
| 14:54.40 | hjb | dovecot-common? |
| 14:54.44 | Danielss89 | I just copy past what |
| 14:54.46 | hoxu | x86, because not everyone wants to install all of the 30k+ packages |
| 14:54.48 | jelly-home | x86: it ought to have told you _how_ to search properly |
| 14:54.52 | StucKman_ | Danielss89: paste the output of "ls -l /proc" |
| 14:55.01 | liable | Danielss89: is this a critical box? can you kill apache to make shit look more sane at least? |
| 14:55.05 | *** join/#debian Hybridus (n=7thLord@85.105.213.188) |
| 14:55.07 | debian | abrotman: It updates stuff? |
| 14:55.16 | *** join/#debian CharminTheMoose (n=Count_fu@unaffiliated/charminthemoose) |
| 14:55.22 | hoxu | abrotman, heh |
| 14:55.32 | x86 | hoxu: no, but it'd be nice to get ALL of a package when you install ONE package, instead of splitting one thing into 5 little parts |
| 14:55.35 | abrotman | debian: i'm not going to tell you. i'm pretty sure you're capable of reading |
| 14:55.35 | Danielss89 | liable well its my webserver so apache should be running.. |
| 14:55.37 | x86 | jelly-home: yeah not helping? |
| 14:55.53 | x86 | jelly-home: tells me how to find a package name based on a given (installed) file, but that's no help |
| 14:56.03 | *** join/#debian Lin (n=igormorg@unaffiliated/lincity) |
| 14:56.03 | x86 | (since it's not installed) |
| 14:56.03 | liable | Danielss89: and you have some shit php code on it from the looks, so can you kill it momentarily? |
| 14:56.04 | hoxu | x86, only real dependencies (and since lenny recommends) are installed by default |
| 14:56.11 | debian | abrotman: The manual is soo bloated. |
| 14:56.15 | klync | anyone know if this ssh bugfix is getting backported to sarge? |
| 14:56.15 | abrotman | x86: it also tells you how to search packages you don't have installed |
| 14:56.16 | Danielss89 | yeah ok liable.. |
| 14:56.17 | jelly-home | x86: that's not all it says. it should mention apt-file |
| 14:56.21 | abrotman | debian: tough shit .. stop being so lazy |
| 14:56.25 | jelly-home | !tell x86 about apt-file |
| 14:56.33 | Danielss89 | StucKman_ how did i do so i could see the whole list? |
| 14:56.38 | x86 | jelly-home: it does... "zsh: command not found: apt-file" |
| 14:56.38 | *** part/#debian dbmoodb (n=david@unaffiliated/dbmoodb) |
| 14:56.43 | jelly-home | !installit |
| 14:56.43 | dpkg | *** NEWS FLASH! *** Your box does not come with every app, tool and utility known to debiankind installed already. If you find that the program you've been told to use isn't there, install it. Also ask me about <search>. if someone suggests an application to you, it's highly likely that it's available via apt-get, or aptitude |
| 14:56.44 | x86 | that's what I get on my system |
| 14:56.47 | hilikus` | how can i check my SSL pem file if it is bad |
| 14:56.51 | StucKman_ | Danielss89: which list? |
| 14:56.59 | x86 | jelly-home: I have no apt-file |
| 14:57.00 | *** join/#debian sparr_ (n=sparr@adsl-068-209-017-252.sip.asm.bellsouth.net) |
| 14:57.00 | hoxu | debian, I'm sure you can find someone whose lap you can sit on while they read the manual aloud to you, keep searching |
| 14:57.03 | abrotman | hilikus`: if you generated in the last two years, it is |
| 14:57.07 | jelly-home | x86: install it. |
| 14:57.09 | *** part/#debian nocturn (n=guy@ubuntu/member/nocturn) |
| 14:57.12 | Danielss89 | i get a very long list, but i cant see the whole list from ls -l /proc z-- StucKman_ |
| 14:57.14 | abrotman | x86: aptitude install apt-file && apt-file update && apt-file search <foo> |
| 14:57.16 | hilikus` | i'm not sure if it was on a debian box though |
| 14:57.17 | Danielss89 | liable done.. |
| 14:57.27 | debian | hoxu: Im reading, but it is long, and my terminal is small. |
| 14:57.35 | StucKman_ | Danielss89: kill apache, try again |
| 14:57.44 | liable | Danielss89: are your apache processes gone? |
| 14:57.49 | *** join/#debian luig1 (n=luigi@189.141.149.130) |
| 14:57.50 | hoxu | debian, use a sane pager like less and search with '/' |
| 14:58.01 | Danielss89 | here: http://pastebin.com/m2740a931 |
| 14:58.04 | Danielss89 | yes liable |
| 14:58.05 | jelly-home | x86: to be honest, the _easiest_ thing to do is "/msg dpkg find bin/tracepath". The best thing to do probably is use http://packages.debian.org |
| 14:58.17 | liable | Danielss89: cool, paste your ps output again |
| 14:58.21 | x86 | jelly-home: that would have been nice 10 minutes ago ;) |
| 14:58.22 | x86 | thanks |
| 14:58.44 | Danielss89 | ps x --> http://pastebin.com/m6bbd5fef |
| 14:58.49 | abrotman | the bot told you that 5 minutes ago |
| 14:59.05 | *** join/#debian R430R (i=angel@80.97.89.33) |
| 14:59.29 | x86 | bot didn't mention anything about find |
| 14:59.31 | Danielss89 | am i fucked :D |
| 14:59.59 | abrotman | !tell x86 about search |
| 15:00.02 | StucKman_ | Danielss89: there it is |
| 15:00.08 | abrotman | x86: read the whole thing |
| 15:00.12 | liable | Danielss89: got me beat, i can only guess youve overrun some pid buffer. even syslogd is 8000 or so |
| 15:00.14 | StucKman_ | Danielss89: change the perms for /proc/1 |
| 15:00.14 | grendal_prime | grrrrrrrrrr |
| 15:00.15 | debian | hoxu: It migth remove something I want? Spookey! |
| 15:00.20 | jelly-home | !be a reading barbie |
| 15:00.20 | dpkg | Aww, reading is HARD! Let's go shopping, jelly-home |
| 15:00.23 | grendal_prime | package with the mp3 codecs in it? |
| 15:00.23 | *** part/#debian luig1 (n=luigi@189.141.149.130) |
| 15:00.30 | *** join/#debian abdoreza (n=a@85.9.75.204) |
| 15:00.37 | jelly-home | grendal_prime: just install your player |
| 15:00.42 | abdoreza | Hi guys |
| 15:00.48 | hoxu | !penixstrike abdoreza |
| 15:00.48 | dpkg | A towering Penix descends from the heavens, knocking abdoreza to the ground and leaving a large wet spot. |
| 15:00.54 | liable | StucKman_: where is it? |
| 15:00.58 | x86 | abrotman: ah i see now... if you know the path beforehand, it's ok... |
| 15:01.08 | StucKman_ | liable: see http://pastebin.com/m2740a931 |
| 15:01.10 | jelly-home | grendal_prime: mp3s ought to "just work" |
| 15:01.12 | debian | It wanted to install sshd-blacklist... |
| 15:01.21 | *** part/#debian x86 (n=x86@p3m/member/x86) |
| 15:01.27 | jelly-home | debian: accept it |
| 15:01.40 | abrotman | the path? .. yeah .. binaries are generally in *bin/<foo> |
| 15:01.40 | Danielss89 | hmm what should i change it to StucKman_? |
| 15:01.41 | *** join/#debian Fersure (i=Maybe@unaffiliated/fersure) |
| 15:01.46 | jelly-home | debian: openssh-blacklist is good for your lungs! |
| 15:01.48 | *** join/#debian floe (n=flo@i59F7006B.versanet.de) |
| 15:01.50 | StucKman_ | Danielss89: sec |
| 15:01.56 | liable | StucKman_: oh, i missed that one, how the hell did that happen though? |
| 15:02.10 | StucKman_ | liable: I still suspect ram corruption |
| 15:02.46 | debian | jelly-home: Does it do annything? Does it use my ram? Like gnome. |
| 15:03.16 | *** join/#debian bluesceada (n=itsjustm@unaffiliated/bluesceada) |
| 15:03.28 | *** join/#debian bluesceada (n=itsjustm@unaffiliated/bluesceada) |
| 15:03.36 | *** join/#debian Sivik (n=sivik@adsl-76-214-81-221.dsl.hstntx.sbcglobal.net) |
| 15:03.49 | Sivik | how do you add a repo key so that the repo is verified |
| 15:04.05 | liable | Sivik: /topic |
| 15:04.11 | *** join/#debian daswork (n=nobody@71.36.142.59) |
| 15:04.12 | liable | Sivik: follow the factoids |
| 15:04.19 | *** join/#debian revolunet (n=juju@mtl93-3-82-225-167-22.fbx.proxad.net) |
| 15:04.30 | Sivik | !key |
| 15:04.30 | dpkg | methinks key is Install the latest debian-archive-keyring package to get the latest gpg key used to sign the Debian archive |
| 15:04.31 | daswork | I'm trying to figure out how to automatically dump all the photos from a camera, witha graphical interface. |
| 15:04.32 | *** part/#debian revolunet (n=juju@mtl93-3-82-225-167-22.fbx.proxad.net) |
| 15:04.40 | liable | Sivik: in /msg please |
| 15:04.41 | Sivik | !debian-archive-keyring |
| 15:04.41 | daswork | gphoto2 works, but is only a command line. |
| 15:04.50 | Sivik | how do you do that liable? |
| 15:04.57 | daswork | gtkam does not seem to be able to automate itself at all. |
| 15:05.00 | liable | Sivik: /msg dpkg foo |
| 15:05.05 | Danielss89 | StucKman_ what should i change the perms to? |
| 15:06.35 | liable | Sivik: once you open a query window with dpkg, just type the factoid, ie, key |
| 15:06.39 | *** join/#debian zyx386 (n=tony@unaffiliated/zyx386) |
| 15:06.41 | *** join/#debian [kladizkov] (n=[kladizk@203.197.151.138) |
| 15:06.41 | *** join/#debian balzac5000 (n=chatzill@alfred.wrl.org) |
| 15:06.43 | nevyn | daswork: with or without? |
| 15:06.43 | [kladizkov] | in my lenny, i get "white screen of death" sporadically, how should I go about troubleshooting it? |
| 15:06.44 | *** part/#debian halflife (n=halflife@gatekeeper.athenahealth.com) |
| 15:06.48 | StucKman_ | Danielss89: you can't. can't change something that it's not a directory into one |
| 15:06.52 | Sivik | i must not be smart enough to do that |
| 15:07.18 | liable | Sivik: /msg dpkg key .. look for a query window from dpkg |
| 15:07.35 | Sivik | no, i got that part, i'm having issues with getting the key installed |
| 15:07.44 | liable | oh, heh |
| 15:07.49 | balzac5000 | I've recently moved some servers from sarge to etch and I'm trying to do some traffic control via qdisc. In sarge this was with the "tc" command - anyone know the package that provides this in etch? |
| 15:07.55 | hoxu | Sivik, show us the error |
| 15:08.09 | *** join/#debian SparFux (n=raoul@e182026173.adsl.alicedsl.de) |
| 15:08.19 | *** join/#debian Majk (n=woot@c83-254-85-27.bredband.comhem.se) |
| 15:08.25 | Sivik | i have a repo_key.asc for the repository but i don't see anything about how to install it from a .asc file |
| 15:08.39 | *** join/#debian Lewoco (i=Lewoco@203.29.21.178) |
| 15:08.56 | SparFux | openssl is insecure in debian pre 0.9.8g-9 |
| 15:09.02 | liable | !apt-key |
| 15:09.02 | *** join/#debian kalpik (n=kalpik@unaffiliated/kalpik) |
| 15:09.17 | hilikus` | how can i update just openssl |
| 15:09.21 | hoxu | !key |
| 15:09.21 | dpkg | extra, extra, read all about it, key is Install the latest debian-archive-keyring package to get the latest gpg key used to sign the Debian archive |
| 15:09.28 | Lewoco | Could someone please 'ping -f 72.55.164.91' for a few seconds and then ctrl-c and tell me how much packet loss they got? Trying to figure out if there's something wrong with my net setup or the remote host. |
| 15:09.46 | *** join/#debian assasukasse (n=agostino@host-84-222-170-152.cust-adsl.tiscali.it) |
| 15:09.53 | themill | hilikus`: you need to update both openssl and libssl0.9.8 |
| 15:09.57 | Sivik | 0 packet loss |
| 15:10.14 | hilikus` | apt-get upgrade openssl libssl0.9.8 |
| 15:10.16 | Lewoco | Well at least that confirms the problem is on my end. |
| 15:10.21 | SparFux | hilikus: do an apt-get update and then apt-get install openssl |
| 15:10.22 | balzac5000 | Lewoco: I get "ping: cannot flood; minimal interval, allowed for user, is 200ms" |
| 15:10.24 | *** join/#debian DimmuR (n=DimmuR@87-205-211-186.adsl.inetia.pl) |
| 15:10.46 | Sivik | Lewoco: 0 packet loss for 10 sends |
| 15:10.52 | Lewoco | balzac5000, You have to run it as super user. |
| 15:10.55 | *** join/#debian Joelito (n=joel@201.160.207.148.cable.dyn.cableonline.com.mx) |
| 15:10.58 | balzac5000 | Lewoco: Regular ping gives me no loss |
| 15:11.02 | dropbear | balzac5000: tc is provided by tcng |
| 15:11.16 | Lewoco | Sivik, 10 sends is nothing. Works for me too. I want to know the results of the flood. |
| 15:11.16 | balzac5000 | dropbear: AH, ha! Great - many thanks! |
| 15:11.49 | liable | Sivik: /msg dpkg 2006 key, susbstitute the gpg bit with the asc file you have |
| 15:11.51 | aFlag | Lewoco: 165 packets transmitted, 148 packets received, 10% packet loss |
| 15:11.53 | aFlag | round-trip min/avg/max/stddev = 163.815/178.024/199.428/10.230 ms |
| 15:12.00 | *** mode/#debian [+l 907] by debhelper |
| 15:12.10 | Sivik | minimal interval, allowed for user, is 200ms |
| 15:12.11 | balzac5000 | Lewoco: 1642 packets transmitted, 1500 received, 8% packet loss, time 22112ms |
| 15:12.11 | liable | Sivik: man gpg of course |
| 15:12.21 | Sivik | liable: got it now |
| 15:12.42 | Lewoco | balzac5000, Damn. I get about 50%. I think there's something wrong with my ISP. |
| 15:12.53 | *** join/#debian isofunk (n=isopleth@ip70-179-136-116.fv.ks.cox.net) |
| 15:12.57 | Sivik | thanks all |
| 15:12.58 | balzac5000 | Lewoco: That is pretty lousy. |
| 15:13.03 | Lewoco | balzac5000, Thanks for your help. |
| 15:13.05 | *** part/#debian Sivik (n=sivik@adsl-76-214-81-221.dsl.hstntx.sbcglobal.net) |
| 15:13.06 | *** join/#debian ApOgEE- (n=apogee@243.22.111.218.klj02-home.tm.net.my) |
| 15:13.10 | *** join/#debian traza (n=traza@sistemas.uis.edu.co) |
| 15:13.23 | balzac5000 | Sure - let me know if knowing what IP block I'm coming from is useful. |
| 15:13.25 | *** join/#debian smica (n=smica@pool156-212.cable.tolna.net) |
| 15:13.56 | *** join/#debian jberg (n=johan@215.80-203-18.nextgentel.com) |
| 15:14.29 | *** join/#debian twobitwork (n=isaac@nat/ibm/x-782134c3b8073ee7) |
| 15:14.37 | *** part/#debian StucKman_ (n=mdione@host21.190-137-100.telecom.net.ar) |
| 15:15.26 | *** join/#debian Gunirus (n=Gunirus@ip-81-11-205-122.dsl.scarlet.be) |
| 15:16.21 | *** join/#debian mtn (n=mtn@dpc6746233034.direcpc.com) |
| 15:17.14 | *** join/#debian xbaez (n=xbaez@201.151.41.82) |
| 15:17.20 | *** part/#debian norules (n=poppy@85-18-136-77.fastres.net) |
| 15:17.32 | *** join/#debian tnks (n=tnks@66-90-245-150.dyn.grandenetworks.net) |
| 15:17.35 | robocop101 | !ati |
| 15:17.35 | dpkg | rumour has it, ati is For X1300 and later, see Proprietary FGLRX <fglrx> <fglrx one-liner>. 3D accel is available via xserver-xorg-video-ati driver for many cards. "man radeon" for a full list. <radeon>, <radeonhd> |
| 15:17.44 | robocop101 | !ati |
| 15:17.45 | *** join/#debian reffle_ (n=reffle@cpc2-amer1-0-0-cust67.watf.cable.ntl.com) |
| 15:18.12 | stew | dpkg: ati =~ s/full/partial/ |
| 15:18.13 | dpkg | stew: OK |
| 15:18.50 | *** join/#debian skandaleras (n=luiz@84.77.136.14) |
| 15:18.58 | *** join/#debian Fah (i=cynic@paranoia.neverlight.com) |
| 15:19.14 | robocop101 | !one-liner |
| 15:19.24 | *** join/#debian duns_s (n=duns_s@mnhm-590e0415.pool.einsundeins.de) |
| 15:19.47 | stew | robocop101: what are you trying to do? |
| 15:20.04 | robocop101 | stew earlier you mentioned about reconfiguring my x server what was it again please? |
| 15:20.04 | keith4 | !tell robocop101 about fglrx one-liner |
| 15:20.28 | stew | robocop101: ignore that fglrx one-liner |
| 15:20.32 | stew | robocop101: dpkg-reconfigure xserver-xorg |
| 15:20.36 | *** join/#debian reffle_ (n=reffle@cpc2-amer1-0-0-cust67.watf.cable.ntl.com) |
| 15:20.39 | stew | robocop101: what is the problem you are trying to fix? |
| 15:20.53 | keith4 | oh, sorry. i thought he was trying to get that factoid |
| 15:22.18 | *** join/#debian NthDegree (n=nth@unaffiliated/forcerain) |
| 15:22.39 | *** join/#debian liable_ (n=liable@pdpc/supporter/active/liable) |
| 15:22.40 | *** join/#debian opoftheuniverse (n=mark@202.88.255.201) |
| 15:22.47 | robocop101 | stew ive done that now.......but its saying pci2 I have an agp card |
| 15:22.57 | *** join/#debian psychon (i=r00t@eautoreconf.gmake.de) |
| 15:23.07 | *** join/#debian DirtyDawg (i=DirtyDaw@92-233-244-82.cable.ubr05.benw.blueyonder.co.uk) |
| 15:23.15 | stew | robocop101: what is the exact message, when do you see it? |
| 15:23.17 | robocop101 | stew what should i type there to make it accept agp? |
| 15:23.19 | *** part/#debian DirtyDawg (i=DirtyDaw@92-233-244-82.cable.ubr05.benw.blueyonder.co.uk) |
| 15:23.37 | stew | keith4: he was, but he shouldn't be |
| 15:23.41 | robocop101 | stew Video card's bus identifier: â |
| 15:23.41 | robocop101 | <PROTECTED> |
| 15:23.41 | robocop101 | <PROTECTED> |
| 15:23.52 | keith4 | stew: .... yes, I see that now |
| 15:24.21 | stew | robocop101: leave bus identifier blank |
| 15:24.30 | stew | robocop101: same for the amount of memory |
| 15:24.40 | robocop101 | stew...ok...just backspace whats there then? |
| 15:25.04 | *** join/#debian olivierk (n=olivier@olivierk.org) |
| 15:25.18 | stew | robocop101: yes |
| 15:25.21 | psychon | hey, i have a question regarding bashism |
| 15:25.29 | stew | robocop101: what is the problem you are trying to solve? |
| 15:25.53 | psychon | all i want to know: is echo -n (which dash supports) fine or not? (because that one is not in the specs) |
| 15:26.32 | *** join/#debian Sivik (n=sivik@adsl-76-214-81-221.dsl.hstntx.sbcglobal.net) |
| 15:27.06 | *** join/#debian EmleyMoor (i=phil@topdeck.tinsleyviaduct.com) |
| 15:27.10 | robocop101 | stI want to install the drivers for the ato 9600xt card |
| 15:27.25 | Sivik | !PAM |
| 15:27.25 | dpkg | methinks pam is the Pluggable Authentication Modules. Check http://www.us.kernel.org/pub/linux/libs/pam/ for more information. Linux-PAM SysAdmin's Guide is at http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/Linux-PAM_SAG.html. PAM Always Malfunctions |
| 15:27.30 | *** join/#debian godwin2 (n=Miranda@chello084113227153.18.14.vie.surfer.at) |
| 15:27.33 | snewp | when i restarted oidentd i got a message that says Bind: Address is already in use |
| 15:27.43 | psychon | and with 'the specs' i mean POSIX :) |
| 15:28.51 | moshii | snewp: netstat -l and work out what is already bound to that port |
| 15:29.04 | *** join/#debian Faithful (n=Faithful@ns.linuxterminal.com) |
| 15:29.22 | snewp | moshii: it's the auth which is port 113 |
| 15:29.40 | Iradieh | Does anyone know how to make SCreen to show what window you are inside, like http://navies.hopto.org:6900/67494/Picture_1.png |
| 15:29.47 | moshii | snewp: what does netstat say.. is there something listening? |
| 15:30.12 | *** part/#debian Sivik (n=sivik@adsl-76-214-81-221.dsl.hstntx.sbcglobal.net) |
| 15:30.34 | *** part/#debian psychon (i=r00t@eautoreconf.gmake.de) |
| 15:31.05 | moshii | snewp: its possible the restart didnt manage to terminate the old one before it tried to start the new one. |
| 15:31.08 | stew | robocop101: what was making you think that they weren't already installed? |
| 15:31.39 | asmarin | where is official url to patch ssl problem? i founded but now i cant remember it... |
| 15:31.46 | *** join/#debian CharminTheMoose (n=Count_fu@unaffiliated/charminthemoose) |
| 15:31.49 | stew | asmarin: /topic |
| 15:31.58 | *** join/#debian wasynyt (i=timo@a82-197-9-210.mpynet.fi) |
| 15:32.25 | robocop101 | stew........the screensavers are all jumpy....not fluid like |
| 15:33.19 | *** join/#debian Gunirus (n=Gunirus@ip-81-11-205-122.dsl.scarlet.be) |
| 15:33.21 | stew | robocop101: show us your /var/log/Xorg.0.log ; use a pastebin: /msg dpkg pastebin |
| 15:34.39 | robocop101 | stew....gimme a few mins.....just folowed the instructions given......brb |
| 15:34.50 | *** join/#debian Gunirus (n=Gunirus@ip-81-11-205-122.dsl.scarlet.be) |
| 15:34.53 | *** join/#debian slack_ (n=nombre@201.243.174.130) |
| 15:36.11 | *** join/#debian suki (i=suki@ftp.hotspeed.com) |
| 15:36.39 | suki | hi, i have been trying and cant get my debian to iptables masquerade |
| 15:37.46 | *** join/#debian schmidtsmikey (n=schmidts@port-92-195-63-88.dynamic.qsc.de) |
| 15:37.57 | *** join/#debian Syn- (n=hisyn2@c-76-117-55-239.hsd1.pa.comcast.net) |
| 15:38.14 | Bushmills | suki: http://scarydevilmonastery.net/masq |
| 15:38.55 | *** join/#debian magnet (n=magnet@silmaril.mithrandir.net) |
| 15:38.59 | dropbear | Iradieh: put something like: caption always "%{rw}%n%f %t %{bk} | %?%-Lw%?%{bw}%n*%f %t%?(%u)%?%{wk}%?%+Lw%?" |
| 15:39.12 | dropbear | Iradieh: in your .screenrc |
| 15:39.18 | *** join/#debian Shadow_mil (n=Shaddy@pdpc/active/Shadow-mil) |
| 15:41.30 | *** join/#debian salvin (n=salvin@unaffiliated/salvin) |
| 15:41.41 | *** join/#debian phrozen77 (n=phrozen7@unaffiliated/phrozen77) |
| 15:41.50 | *** join/#debian Geru (n=Geru@38.Red-88-15-210.dynamicIP.rima-tde.net) |
| 15:42.03 | suki | Bushmills , tried that but still it doesnt work |
| 15:42.28 | Bushmills | suki: then there must be something broken. or you;re doing it wrong. |
| 15:42.40 | abdoreza | bye all |
| 15:42.41 | abdoreza | :d |
| 15:42.42 | Iradieh | dropbear: thanks |
| 15:42.43 | *** part/#debian abdoreza (n=a@85.9.75.204) |
| 15:43.01 | *** join/#debian moka (n=X@unaffiliated/repyskichboarder) |
| 15:43.07 | Iradieh | dropbear: where is .screenrc located /Home/User? |
| 15:43.12 | suki | i tried many different variants of the masquerading command |
| 15:43.31 | Bushmills | suki: don't. just use one which works. |
| 15:43.36 | suki | tried firewall scripts, flushed the iptables, and tried again |
| 15:43.44 | suki | none worked thus far |
| 15:44.21 | dropbear | Iradieh: you can create one in your home, tr edit the global screenrc in /etc |
| 15:44.39 | suki | my wan is eth1, lan is eth0 |
| 15:44.43 | dropbear | Iradieh: s/tr/or/ |
| 15:44.46 | Bushmills | suki: what is the reason that it doesn't work? |
| 15:45.08 | suki | iptables -L doesnt show much |
| 15:45.14 | DimmuR | i've tv/radio card that perfectly works under debian (pixel view) - is there any way that i use this card to "broadcast" radio on some website (or other system) - to make streaming radio that use signal from tv/radio card? |
| 15:45.25 | DimmuR | ofc on debian etch |
| 15:45.30 | suki | dont know.. |
| 15:45.41 | Bushmills | suki, iptables -t nat -L |
| 15:45.45 | *** join/#debian cmanns (n=cmanns@68-185-92-123.dhcp.scrm.ca.charter.com) |
| 15:46.22 | *** part/#debian Geru (n=Geru@38.Red-88-15-210.dynamicIP.rima-tde.net) |
| 15:46.29 | *** join/#debian kshah (n=kunalash@cpe-68-173-252-199.nyc.res.rr.com) |
| 15:46.41 | Bushmills | tries to imagine how "not much" could like like |
| 15:46.48 | *** join/#debian xored (n=gasdasdf@HSI-KBW-078-042-051-193.hsi3.kabel-badenwuerttemberg.de) |
| 15:46.51 | suki | chain postrouting (Masquerade 0 -- anywhere anywhere) |
| 15:47.32 | moshii | DimmuR: record the output and broadcast it with icecast or something |
| 15:47.32 | Bushmills | i guess if it doesn't show much, the cause of the problem is not serious |
| 15:47.59 | *** join/#debian assasukasse (n=agostino@host-84-222-168-189.cust-adsl.tiscali.it) |
| 15:48.03 | *** join/#debian _slack (n=nombre@201.243.174.130) |
| 15:48.05 | moshii | DimmuR: could potentially be illegal in your location though |
| 15:48.16 | *** join/#debian meff (n=meff@unaffiliated/meff) |
| 15:49.17 | daswork | nevyn: With a graphical interface. |
| 15:49.56 | DimmuR | moshii, i astked lawyer and he told that in my company (~60 peoples) i can broadcast some station legally (if i don't do this people just listen radio from internet and it only make more data transmitted) |
| 15:50.47 | neoark | anyone have debian running under vista using vmware? |
| 15:50.57 | abrotman | you? |
| 15:51.35 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 15:51.42 | moshii | DimmuR: you just need an application that can record to a pipe and another one that can stream it... vlc/its stream server part can do both tasks iirc |
| 15:51.47 | themill | neoark: "vista"... hmmm... heard of it but can't quite place it. What is it? |
| 15:51.55 | *** join/#debian namit (n=christia@83-70-241-72.b-ras1.prp.dublin.eircom.net) |
| 15:51.58 | neoark | lol |
| 15:51.59 | dropbear | suki: did you enable ip forwarding? what does 'cat /proc/sys/net/ipv4/ip_forward' return? |
| 15:52.00 | *** mode/#debian [+l 899] by debhelper |
| 15:52.40 | *** join/#debian dutchfish (n=wil@wc-35.r-195-35-167.atwork.nl) |
| 15:52.51 | esteel | is there a way i can start a program inside a 'screen' nomatter if there is one already running or not? when i use 'screen -mdS test' it will create a second sesstion called test if there is already one running.. thats very annoying |
| 15:53.18 | dutchfish | screen -R opens a new screen or an existing one |
| 15:53.33 | sandman | Is there a way to configure Debian to, when automatically updating kernels, to append a particular kernel parameter? Namely, badram=stuff |
| 15:53.36 | *** join/#debian tyzh (n=firedrak@218.193.14.64) |
| 15:53.37 | moshii | esteel: use some shell logic |
| 15:53.53 | Bushmills | DimmuR: you could have a look at ezstream (client) and icecast (relay) |
| 15:54.06 | themill | sandman: look at the kopt comments in /boot/grub/menu.lst |
| 15:54.35 | Bushmills | by client i mean, stream client to send audio/video to stream server |
| 15:55.00 | *** join/#debian Zenton (n=Vicente@212.166.192.129) |
| 15:55.00 | Bushmills | which in turn distributes to to whoever cares to connect to it |
| 15:55.03 | dropbear | sandman: /boot/grub/menu.lst look for defoptions and altopions |
| 15:55.36 | esteel | dutchfish: yeah but -R reattaches.. i want a way to start a program inside a screen without really attaching to it.. |
| 15:55.40 | DimmuR | Bushmills, thanks for tips it sound's promissing :) |
| 15:56.05 | esteel | dutchfish: screen -mdS test PROGRAM works as long as this screen is not running yet.. |
| 15:56.14 | *** join/#debian sphenxes (n=sphenxes@85-127-213-249.dynamic.adsl-line.inode.at) |
| 15:56.27 | esteel | and afterwards i can use screen -S test -X screen ANOTHERPROGRAM |
| 15:56.28 | dutchfish | esteel, then make a script that test for a runnnig screen |
| 15:56.34 | *** join/#debian V4Nelle_ (n=eisai_pa@adsl15-228.lsf.forthnet.gr) |
| 15:56.43 | *** part/#debian Iradieh (i=iradieh@gateway/shell/blinkenshell.org/x-b3e91b73e3cb71ca) |
| 15:56.52 | esteel | hmm.. well i guess that would work, its just strange screen does not support this already |
| 15:57.12 | *** join/#debian sphenxes (n=sphenxes@85-127-213-249.dynamic.adsl-line.inode.at) |
| 15:57.21 | *** join/#debian deriaN (n=nopron@90.185.61.198) |
| 15:57.30 | *** part/#debian tyzh (n=firedrak@218.193.14.64) |
| 15:58.01 | *** join/#debian orveldv (i=orveldv@85.214.22.8) |
| 15:59.01 | *** join/#debian markybob (i=markybob@unaffiliated/markybob) |
| 15:59.14 | *** join/#debian Muchikon (n=chatzill@190.42.214.47) |
| 15:59.35 | dutchfish | sandman, look also at /usr/sbin/update-grub (maybe) |
| 15:59.38 | *** join/#debian der0b (n=s0d_0ff@c-24-128-221-35.hsd1.nh.comcast.net) |
| 15:59.51 | *** join/#debian maligor (n=maligor@a88-114-85-246.elisa-laajakaista.fi) |
| 16:00.59 | *** join/#debian foka_ (n=foka@61.51.160.219) |
| 16:00.59 | sandman | So would this be okay?: kopt=badram=0x1e3cf554,0xfffffffc |
| 16:02.19 | sandman | And that will apply the kernel option to all boots commands, whether it be default, alternative, or whatever |
| 16:02.22 | sandman | Right? |
| 16:02.23 | themill | sandman: except that it needs to have a # in front of it, |
| 16:02.52 | themill | sandman: the option is applied to "debian automatic kernels" the next time update-grub is run |
| 16:03.42 | sandman | themill: Oh, so options preceeded with "#" are read by update-grub? Whereas the ones that aren't preceeded by a # are read by the bootloader itself, while those preceeded with "##" are comments all-around |
| 16:03.43 | *** join/#debian eml (n=eml@irk.bob.fi) |
| 16:04.01 | *** part/#debian eml (n=eml@irk.bob.fi) |
| 16:04.03 | themill | sandman: yeah |
| 16:04.08 | *** join/#debian PovAddict (n=nicolas@200.127.223.79) |
| 16:04.14 | *** join/#debian Bravewolf (n=wolf@78.13.84.41) |
| 16:04.16 | sandman | Okay, then I shouldn't overwrite the existing kopt line |
| 16:04.29 | *** join/#debian halflife (n=halflife@gatekeeper.athenahealth.com) |
| 16:04.43 | *** join/#debian halflife (n=halflife@gatekeeper.athenahealth.com) |
| 16:04.51 | sandman | Then this would work: # kopt=root=/dev/mapper/cdecaf-root ro badmem=0x1e3cf554,0xfffffffc |
| 16:05.29 | themill | sandman: something like that sounds fine. |
| 16:05.34 | sandman | Most excellent. |
| 16:05.38 | *** join/#debian Batchy (n=batchy@AVelizy-155-1-95-152.w90-35.abo.wanadoo.fr) |
| 16:05.47 | *** join/#debian _moro_bana_ (n=boikhuts@80.250.181.18) |
| 16:05.48 | PovAddict | ssh-vulnkey isn't outputting *anything* |
| 16:05.56 | PovAddict | does that mean I don't have any key to be checked at all? |
| 16:05.58 | sandman | Now, since the stock debian kernel's don't have the badram patch, I'll need to roll one with the vserver patches and such. |
| 16:06.08 | _moro_bana_ | can vpn connection manager be used to connect to microsoft ppptp |
| 16:06.34 | sandman | Which reminds me: How often does RAM go bad? Or does it generally only go bad when being handled |
| 16:07.14 | Bushmills | sandman: no general rule. closest is, either within 3 days, or after > 5 years. |
| 16:07.24 | Bushmills | depends on how hot it was running |
| 16:08.37 | dutchfish | !pptp |
| 16:08.37 | dpkg | hmm... pptp is Point to Point Tunneling Protocol, or a a very insecure unreliable way to create tunnels. A few unfortunate ISPs use it to provide service on ethernet connected broadband networks. See also http://www.schneier.com/paper-pptpv2.html |
| 16:09.09 | Danielss89 | How can i see how much disk space is used and available on my partitions? |
| 16:09.18 | dutchfish | df -h |
| 16:09.25 | *** join/#debian good_dana (n=dana@mail.comp911.com) |
| 16:09.47 | *** join/#debian kalpik (n=kalpik@unaffiliated/kalpik) |
| 16:10.04 | *** join/#debian dc2447 (n=davidcam@eul0000997-pip.eu.verio.net) |
| 16:10.25 | madclicker | hi, is there a way to do "fallback =1" with grub(etch)? |
| 16:10.40 | dutchfish | defualt |
| 16:10.50 | dutchfish | s/defualt/default |
| 16:10.56 | _moro_bana_ | dutchfish: any program that can connect to that other that kvpnc/ |
| 16:11.12 | dutchfish | _moro_bana_, dont use nntp |
| 16:11.15 | sandman | I sure wish the stock kernels had the small badram patch built in =) |
| 16:11.19 | dc2447 | aptitude is trying to remove the running kernel - help http://pastebin.com/d7b4dcda9 |
| 16:11.25 | sandman | I mean, the debian stock kernels, of course. |
| 16:11.33 | dutchfish | _moro_bana_, even the manufacturer of the 'other' os discurages it |
| 16:11.44 | _moro_bana_ | dutchfish: what should i use then? |
| 16:11.44 | themill | _moro_bana_: there's pptpconfig -- http://pptpclient.sourceforge.net/ and there are some packages about for network-manager-pptp too. But not in etch. |
| 16:11.54 | dutchfish | !openvpn |
| 16:11.54 | dpkg | i heard openvpn is at http://openvpn.net |
| 16:11.57 | PovAddict | dutchfish: nntp? :P |
| 16:12.09 | themill | dutchfish: openvpn can't connect to a pptp server, however. |
| 16:12.19 | dutchfish | themill, luckely not |
| 16:12.42 | _moro_bana_ | dutchfish: openvpn is CLI, any graphical interface to that? |
| 16:12.44 | dutchfish | ssl-vpn is another good option |
| 16:13.03 | *** join/#debian BaudXP (n=deviant@c58-107-132-47.rivrw8.nsw.optusnet.com.au) |
| 16:13.04 | *** part/#debian sandsmark (n=quassel@likbilen.com) |
| 16:13.30 | *** part/#debian bip-bip (n=milani@sos.groar.org) |
| 16:13.34 | _moro_bana_ | dutchfish: does ssl-vpn have GUI? |
| 16:13.49 | dutchfish | _moro_bana_, duno, dont use gui for that |
| 16:14.11 | BaudXP | I just reboot, and I got "ACPI: looking for DSDT in initramfs... error, file /DSDT.aml not found" followed by a system hang |
| 16:14.21 | BaudXP | any idea what happenned!? |
| 16:14.25 | Danielss89 | Hmm it seems like my temp space i full.. how can i increase it? |
| 16:14.28 | Bushmills | _moro_bana_: it gives you ip addresses .. what do you need a GUI for an ip address? |
| 16:14.29 | sandman | It looks like the BadRAM patch was submitted upstream last month. I wonder how long it'll take for it to be included |
| 16:14.37 | Danielss89 | Filesystem Size Used Avail Use% Mounted on |
| 16:14.37 | Danielss89 | none 16M 16M 0 100% /tmp |
| 16:15.18 | _moro_bana_ | Bushmills: im gonna be connecting internet through microsoft pptp |
| 16:15.20 | dutchfish | Danielss89, o.o |
| 16:15.30 | *** join/#debian RA3OR (i=angel@80.97.89.33) |
| 16:15.52 | Bushmills | _moro_bana_: openvpn has nothing to do with pptp |
| 16:16.09 | dutchfish | _moro_bana_, good luck, but dont be surprised when compromised |
| 16:16.31 | dc2447 | anyone any vviews on aptitude trying to remove my running kernel? |
| 16:16.41 | _moro_bana_ | Bushmills: i need something to work with that |
| 16:16.42 | kshah | hmm, I can't find the bindrndc reference in my named.conf or named.conf.local or .options file, am I missing something here? bind won't start.. I haven't done one of these setups in 8 years, but I've read the docs |
| 16:16.54 | Bushmills | _moro_bana_: you have a connection, somehow, you can use openvpn to build a tunnel through it. |
| 16:17.08 | *** join/#debian helo (n=helo@unaffiliated/helo) |
| 16:17.13 | *** part/#debian BaudXP (n=deviant@c58-107-132-47.rivrw8.nsw.optusnet.com.au) |
| 16:17.15 | *** join/#debian HockeyInJune (i=HockeyIn@pool-162-84-181-211.ny5030.east.verizon.net) |
| 16:17.22 | Bushmills | _moro_bana_: use the pptp client for pptp. use openvpn for openvpn. |
| 16:17.45 | _moro_bana_ | Bushmills: which pptp client |
| 16:18.07 | Bushmills | _moro_bana_: apt-cache search pptp |
| 16:18.29 | themill | dutchfish: if people are asking about pptp clients, it is because they have to connect to a pptp server that someone else has set up. While pptp is a PoS, there's no point in telling them about alternatives as fundamentally, they have to connect to a pptp server for their work's vpn (for example). |
| 16:19.10 | dutchfish | themill, true, but still couldnt resist to pin point the security risk involved |
| 16:19.12 | *** part/#debian dc2447 (n=davidcam@eul0000997-pip.eu.verio.net) |
| 16:19.21 | *** join/#debian _dbc_ (n=dbc___@78.31.183.42) |
| 16:19.36 | Deezire | dutchfish: Security:Usability is a nice ratio. |
| 16:19.56 | dutchfish | Deezire, also true, use ssl-vpn |
| 16:20.02 | PovAddict | themill: and the bot's factoid is similarly useless |
| 16:20.09 | themill | !pptp |
| 16:20.09 | dpkg | methinks pptp is Point to Point Tunneling Protocol, or a a very insecure unreliable way to create tunnels. A few unfortunate ISPs use it to provide service on ethernet connected broadband networks. See also http://www.schneier.com/paper-pptpv2.html Also ask me about <pptp clients> |
| 16:20.13 | themill | past tense :) |
| 16:20.19 | PovAddict | :) |
| 16:20.28 | PovAddict | !pptp clients |
| 16:20.28 | dpkg | hmm... pptp clients is If you have to connect to a pptp server for your vpn, you can try kvpnc, pptpconfig (http://pptpclient.sourceforge.net/) and network-manager-pptp (unofficial packages for etch or dapper are around that work but are not supported here on #debian). |
| 16:20.54 | *** join/#debian joebrunner (n=joe@206.81.49.171) |
| 16:21.15 | *** join/#debian astro76 (n=jtaji@unaffiliated/astro76) |
| 16:21.27 | *** join/#debian vader-- (n=me@c-71-226-192-99.hsd1.nj.comcast.net) |
| 16:21.41 | *** join/#debian jlund (n=jlund@c-67-182-202-38.hsd1.ut.comcast.net) |
| 16:22.16 | markybob | have nautilus scripts been deprecated? i cant get the damn things to show up |
| 16:23.08 | azeem | markybob: which version of nautilus? |
| 16:23.20 | markybob | 2.20.0 |
| 16:23.33 | _moro_bana_ | dutchfish: which security risks were you talking about. its the only way i can connect to internet from my pc |
| 16:24.30 | *** join/#debian TheOnly|afk (n=theonly@darkwings.org) |
| 16:25.06 | *** join/#debian ApOgEE- (n=apogee@243.22.111.218.klj02-home.tm.net.my) |
| 16:25.14 | *** join/#debian cwrstl (n=cwrstl@adsl-69-153-174-41.dsl.stlsmo.swbell.net) |
| 16:25.30 | *** join/#debian Jussi (n=jussi@port190.ds1-abc.adsl.cybercity.dk) |
| 16:25.31 | helo | is it easy to run a newer kernel with etch? |
| 16:25.38 | *** part/#debian ApOgEE- (n=apogee@243.22.111.218.klj02-home.tm.net.my) |
| 16:25.44 | *** join/#debian unlink (n=unlink@r253237157.resnet.cornell.edu) |
| 16:25.50 | stew | helo: backports.org has backported kernels: /msg dpkg bpo |
| 16:26.23 | *** join/#debian vader-- (n=me@c-71-226-192-99.hsd1.nj.comcast.net) |
| 16:27.00 | themill | helo: /msg dpkg etchnhalf |
| 16:27.12 | linkslice | Do I need to regenerate apache keys? the wiki only mentions apache2-ssl and someone posted further down that their keys tested as being safe |
| 16:27.19 | *** join/#debian stoned (n=stoned@unaffiliated/stoned) |
| 16:27.20 | linkslice | http://wiki.debian.org/SSLkeys |
| 16:27.26 | Eulex | about the ssl key vulnerabilities... does it make host keys (practically) vulnerable too and if so how do I regenerate a host key? |
| 16:27.43 | *** join/#debian jburd (n=jburd@59.184.32.138) |
| 16:28.07 | *** join/#debian SUxvdmVSYXlh (n=theonly@darkwings.org) |
| 16:28.21 | asg | Eulex: after reading the info in the /topic, the answer should be obvious |
| 16:28.25 | _moro_bana_ | Bushmills: i had problems with kvpnc in the past,it showed that i was connected to internet but my internet apps could not go through.u said something about using openvpn to tunnel through |
| 16:28.32 | themill | linkslice: it's essentially impossible to test apache's keys. Regenerate them using the same method that you used to make them in the first place, which will be approximately what is there for apache2. |
| 16:28.37 | *** join/#debian HellTiger (n=HellTige@p5B0CE83A.dip.t-dialin.net) |
| 16:28.39 | dutchfish | _moro_bana_, http://pptpclient.sourceforge.net/protocol-security.phtml |
| 16:28.48 | cwrstl | question about the ssh update. There are a few user keys on the system that the scanner flagged. However, contrary to the security note, the updated sshd is still allowing them to authenticate with those keys. openssh-server version shows 4.3p2-9etch1 |
| 16:28.53 | stew | linkslice: you need to regenerate apache keys if they were created by the broken ssl, or if its DSA based key used by the broken ssl |
| 16:28.57 | *** join/#debian yure (n=yure@84-255-246-165.static.t-2.net) |
| 16:29.13 | Bushmills | _moro_bana_: openvpn will be of no use or help without an existing connection. it is completely independent from pptp, and has nothing to do with it. |
| 16:29.16 | Eulex | asg, yeah. |
| 16:29.29 | *** join/#debian esaym (n=user@cpe-70-120-89-6.satx.res.rr.com) |
| 16:30.16 | Bushmills | _moro_bana_: it just requires a connection. be it over pppoe, or ppp, or pptp, or whatever. doesn't matter. |
| 16:30.59 | *** part/#debian golan (n=golan@corbeta.momona.org) |
| 16:31.06 | jelly-home | it can even be a protocol with less than three pees |
| 16:31.08 | *** join/#debian touparx_ (n=touparx@60.173.80.138) |
| 16:31.25 | Bushmills | but it won't help you getting connected to a pptp peer |
| 16:32.00 | *** mode/#debian [+l 905] by debhelper |
| 16:33.11 | *** join/#debian rhineheart_m (n=rhine@unaffiliated/rhineheartm/x-283746) |
| 16:33.19 | *** join/#debian userID (n=userID@p5B116295.dip.t-dialin.net) |
| 16:33.20 | rhineheart_m | how to exit/quit ping ? |
| 16:33.31 | enouf | Eulex: after reviewing/reading a lot of yesterdays convo; i basically did something like this (and maybe not in this order) - BUT, let the /topic factoid and the others here be more of an authority; |
| 16:33.39 | enouf | Eulex: in a nutshell; rm /etc/ssh/ssh_host_{dsa,rsa}*; apt-get update; apt-get -u install openssl libssl0.9.8; dpkg-reconfigure openssh-server; .. now also rm ~/.ssh/{known_hosts,authorized_keys}* prior if they exist |
| 16:33.52 | *** join/#debian Bravewolf (n=wolf@78.13.84.41) |
| 16:34.00 | *** join/#debian properzel (n=properze@gallimaufry.net.nz) |
| 16:34.27 | _moro_bana_ | rhineheart_m: contro+c |
| 16:34.50 | Eulex | enouf, thank you :) |
| 16:34.51 | enouf | Eulex: gah, .. and then regen using sshgen -t {dsa,rsa} |
| 16:35.18 | *** join/#debian thrope_ (n=thrope@87-194-103-206.bethere.co.uk) |
| 16:35.32 | rhineheart_m | _moro_bana_, thanks.. |
| 16:35.40 | *** join/#debian maxamillion (n=adam@ss-5-41.shsu.edu) |
| 16:35.56 | *** join/#debian ehc (n=evan@wall.pacinfo.com) |
| 16:36.10 | Eulex | enouf, if I have a strong key (from when I ran sarge on a box), is it a problem that it has been used by an openssl with the problem? |
| 16:36.26 | enouf | i think so |
| 16:37.10 | enouf | Eulex: others can explain it - (some sort of attack vector still exists, even if sideways) |
| 16:37.33 | Eulex | enouf, ok, yeah, I found info that suggested it |
| 16:38.05 | PovAddict | ssh-vulnkey isn't outputting *anything* |
| 16:38.08 | PovAddict | does that mean I don't have any key to be checked at all? |
| 16:38.14 | *** join/#debian timo_ (n=timo@141.52.94.78) |
| 16:38.14 | jelly-home | !test |
| 16:38.14 | dpkg | Test Failed. |
| 16:38.17 | *** join/#debian ehc (n=evan@wall.pacinfo.com) |
| 16:38.23 | cwrstl | any ideas why my updated Etch box allows users with blacklisted keys to still log in? |
| 16:38.31 | enouf | Eulex: possibly moreso from man in the middle, than the guy out the window O_O |
| 16:38.45 | *** join/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 16:38.51 | helo | i'm thinking someone would be able to decrypt your ssl session, even if you used a good key to authenticate with... |
| 16:39.03 | *** part/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 16:39.34 | helo | does using a weak ssl key make your ssl sessions observable? |
| 16:39.44 | dutchfish | absolutely |
| 16:39.54 | timo_ | I've got some code here, which uses openssl to generate a key pair. Before it does that, there is an srand(random_integer()); Does it affect anything? |
| 16:40.06 | stew | helo: yes |
| 16:40.08 | helo | so they couldn't authenticate as you without your (strong) private key, but they could see everything you did? |
| 16:41.50 | enouf | Eulex: wow, what a typo above, i meant "ssh-keygen -t ..." |
| 16:42.01 | *** mode/#debian [+l 898] by debhelper |
| 16:42.09 | *** join/#debian SR71-Blackbird (n=nirvana@unaffiliated/sr71-blackbird) |
| 16:42.15 | Eulex | enouf, I figured :) thank you |
| 16:42.22 | enouf | heh |
| 16:42.31 | enouf | np ;-) |
| 16:42.35 | PovAddict | o_o? |
| 16:42.40 | *** join/#debian lucia (n=lucia@125.141.117.217) |
| 16:42.41 | stoned | hm |
| 16:42.43 | stoned | tools |
| 16:42.45 | timo_ | What I mean is: Does the C++ random number generator have any impact on the RSA key generation? |
| 16:43.15 | timo_ | If I seed it myself, are the keys still weak? Because there's no real reason for a srand(...) in the code at that point, because no random numbers are generated. |
| 16:43.22 | dutchfish | timo_, yes |
| 16:43.30 | enouf | stoned: dude - saw a nice little thing about dtv vs hdtv last night - even a hal-advanced ape could comprehend it ;-) |
| 16:43.39 | enouf | half* |
| 16:43.40 | PovAddict | hmm nice timing, I had the same question |
| 16:44.05 | stoned | great |
| 16:44.12 | enouf | basically yes, hdtv falls under dtv; but not all dtv is hdtv |
| 16:44.16 | stoned | enouf, you callin me a half avdanced ape? |
| 16:44.17 | PovAddict | this code gets a nice random number from /dev/random |
| 16:44.18 | *** join/#debian rgr_dev (n=user@e179199193.adsl.alicedsl.de) |
| 16:44.21 | dutchfish | timo_, there is nothing wrong with thr random bumber generation, its a blooper in openssl package using buffer |
| 16:44.22 | Eulex | now this gets interesting. I'll have to sftp over the new key while using the old key to login |
| 16:44.24 | enouf | stoned: no, me ;-) |
| 16:44.26 | PovAddict | and passes it to srand |
| 16:44.31 | dutchfish | s/bumber/number |
| 16:44.42 | stoned | enouf, we're all primates |
| 16:44.43 | timonator | so how exactly are they guessable? |
| 16:44.51 | PovAddict | dutchfish: "A weakness has been discovered in the random number generator used by..." |
| 16:44.52 | timonator | are they guessable if you know the datetime of creation? |
| 16:44.54 | dutchfish | stoned, confirmed |
| 16:44.57 | rgr_dev | I have just regnerated a new rsa key and copied the id_rsa.pub into the know_hosts on the remote machine. But its still prompting for password when I ssh in. What have I missed? |
| 16:45.04 | *** join/#debian msshams (n=msshams@91.184.75.47) |
| 16:45.09 | Eulex | timonator, there are only 262144 possibilities |
| 16:45.11 | *** join/#debian PaulTT (n=chatzill@adsl-76-240-60-56.dsl.hstntx.sbcglobal.net) |
| 16:45.14 | dutchfish | PovAddict, look at the diff and read |
| 16:45.17 | timonator | ow, that's easy |
| 16:45.18 | *** join/#debian pand0ra (n=pand0ra@plns-207-7-185-253-pppoe.dsl.plns.epix.net) |
| 16:45.21 | timonator | regenerates at once. |
| 16:45.29 | linkslice | rgr_dev, cat id_rsa.pub >> ~/.ssh/authorized_keys |
| 16:45.33 | PovAddict | dutchfish: I didn't find the diff |
| 16:45.34 | msshams | how can i echo first parameter of /proc/loadavg ? |
| 16:45.39 | *** join/#debian blackinside (n=blackins@ADijon-153-1-81-10.w81-49.abo.wanadoo.fr) |
| 16:45.39 | enouf | (lets to keep the bantor to a minimum) |
| 16:45.42 | rgr_dev | linkslice: doh. of course. thanks. |
| 16:45.42 | PovAddict | the one linked from the vuln. page is all the differences debian has from upstream |
| 16:45.43 | timonator | what key length is recommended? |
| 16:45.46 | PovAddict | so it's a HUGE diff |
| 16:45.50 | *** part/#debian jlund (n=jlund@c-67-182-202-38.hsd1.ut.comcast.net) |
| 16:45.53 | enouf | wow - how's that for english phrasing, lmao |
| 16:46.01 | pand0ra | Hi, I'm currently running DWM, I want to throw gnome on my computer, but how can I put gnome on it but have to manually start it and not have it overwrite .xinitrc and whatnot. |
| 16:46.08 | Eulex | timonator, use ssh-vulnkey to check whether the key is vulnerable. |
| 16:46.09 | dutchfish | PovAddict, http://www.debian.org/security/2008/dsa-1571 |
| 16:46.09 | timo_ | dutchfish, this is the code in question: http://pastebin.com/d3f6cf251 |
| 16:46.29 | Eulex | timonator, as pointed out by others, replace the key if it has even been used by an openssl which has the vulnerability |
| 16:46.39 | timo_ | dutchfish: and apart from that, thanks! |
| 16:46.42 | *** join/#debian keyes (n=keyes@easyubuntu/keyes) |
| 16:46.45 | *** join/#debian mugwort13 (n=mugwort1@pool-70-22-14-94.balt.east.verizon.net) |
| 16:46.45 | PovAddict | dutchfish: where's the diff? |
| 16:46.47 | Eulex | even if the key in itself isn't. |
| 16:47.07 | *** join/#debian ApOgEE- (n=apogee@243.22.111.218.klj02-home.tm.net.my) |
| 16:47.11 | dutchfish | PovAddict, http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8c-4etch3.diff.gz |
| 16:47.16 | PovAddict | that one is 208KB |
| 16:47.26 | *** join/#debian docmax (n=docmax@f049002153.adsl.alicedsl.de) |
| 16:47.27 | *** part/#debian ApOgEE- (n=apogee@243.22.111.218.klj02-home.tm.net.my) |
| 16:47.28 | enouf | pand0ra: i don't think gnome nor kde makes or touches any ~/.xinitrc or ~/.xsession files |
| 16:47.31 | PovAddict | 208KB of changed code in order to fix *this* bug? |
| 16:47.32 | docmax | hello i need help |
| 16:47.42 | Dewi | take all your machines that have had openssl installed on them between 2006 and yesterday, throw them in a pile, and *set it on fire*. |
| 16:47.44 | docmax | i need to setup IR and Bluetooth |
| 16:47.45 | enouf | pand0ra: also install a DM, such as gdm, xdm, kdm, etc |
| 16:47.48 | stoned | !tell docmax about ask |
| 16:47.48 | docmax | anyone?? |
| 16:47.51 | timo_ | dutchfish, ah sorry - I misunderstood: you meant, that it is still weak. - Thanks for the info! |
| 16:48.02 | dutchfish | timo_, yw |
| 16:48.13 | enouf | pand0ra: make backups of your special/customized files ;-) |
| 16:48.14 | *** join/#debian Nurulwai (n=nurulwai@about/goats/billygoat/Nurulwai) |
| 16:48.18 | pand0ra | enouf: Do i need gdm to run gnome? I'm just really only using it like once in a great while |
| 16:48.20 | dutchfish | timo_, http://wiki.debian.org/SSLkeys |
| 16:48.26 | Dewi | pand0ra: no |
| 16:48.26 | docmax | i need to setup Bluetooth and IR |
| 16:48.27 | enouf | pand0ra: /msg dpkg install gnome |
| 16:48.32 | docmax | who can help me? |
| 16:48.33 | enouf | pand0ra: no, you do not |
| 16:48.42 | PovAddict | recognizes timo_'s code |
| 16:48.43 | Nurulwai | Hey did you guys break firefox in your iceweasel build or is it just generally shit on linux? |
| 16:48.46 | pand0ra | enouf: alright |
| 16:48.47 | Dewi | pand0ra: the bigger virtual packages might include it but you do not need it |
| 16:48.54 | Dewi | pand0ra: just deselect it |
| 16:48.55 | *** part/#debian cwrstl (n=cwrstl@adsl-69-153-174-41.dsl.stlsmo.swbell.net) |
| 16:49.00 | pand0ra | Dewi: okay thanks |
| 16:49.02 | *** join/#debian joshteam (n=joshteam@adsl-66-140-44-63.dsl.rcsntx.swbell.net) |
| 16:49.16 | Eulex | Nurulwai, iceweasel has patches applied to it to make it work _better_ on linux |
| 16:49.17 | PovAddict | drags timo_ into #boinc |
| 16:49.17 | Dewi | Nurulwai: you're just shit at using linux |
| 16:49.19 | *** join/#debian TheOnly (n=theonly@darkwings.org) |
| 16:49.20 | enouf | pand0ra: /msg dpkg nodm <--general info, should one be installed |
| 16:49.21 | docmax | i need to setup Bluetooth and IR in Debian, who can help me? |
| 16:49.34 | Nurulwai | Dewi: justify that |
| 16:49.41 | rgr_dev | linkslice: why would one way (ssh from b back a) keep prompting for passphrase? |
| 16:49.53 | Dewi | Nurulwai: your line of reasoning led directly to it |
| 16:49.53 | Nurulwai | Eulex: It runs better in a damned windows xp virtual box vm than it does natively. |
| 16:49.59 | Dewi | Nurulwai: since you haven't specified what your problem is... |
| 16:50.09 | themill | Nurulwai: please /part, work on your people skills, and then come back when you're ready to have a civil conversation in here. |
| 16:50.09 | Dewi | Nurulwai: "better" |
| 16:50.11 | Eulex | Nurulwai, define 'better' |
| 16:50.26 | enouf | docmax: i don't know, but install any/all bluez* pkgs |
| 16:50.34 | joshteam | what's the command to unrar a file? |
| 16:50.36 | docmax | i installed bluez |
| 16:50.37 | joshteam | sorry, i am green |
| 16:50.42 | enouf | docmax: and perhaps lirc pkgs |
| 16:50.43 | docmax | but i dont have any servies |
| 16:50.48 | Nurulwai | Dewi: firefox and xorg conspiring to rape my CPU on a webpage that has text with a animated background. |
| 16:50.53 | *** join/#debian bAndie91 (n=sysop@szerver2.sztistvan-mako.sulinet.hu) |
| 16:50.56 | Nurulwai | It's only a poor shit old PC |
| 16:51.18 | joebrunner | if I do a dpkg-reconfigure openssh-server and it fails to restart the daemon with "Host key ab:cd:... blacklisted" message, what would that mean? |
| 16:51.18 | Dewi | Nurulwai: web pages can have text with an animated background? |
| 16:51.30 | *** join/#debian xenosoz (n=antispam@222.112.72.106) |
| 16:51.31 | Dewi | Nurulwai: is that like... an animated GIF as background of a block? |
| 16:51.35 | joebrunner | I've already run the dist-upgrade and it seems that everything got upgraded correctly |
| 16:51.36 | Dewi | Nurulwai: I've never seen that |
| 16:51.37 | docmax | enouf: lirc is only a IR frontend... not a driver |
| 16:51.41 | enouf | docmax: please read the docs, or wait for others or ask in ##linux, or other perhaps bluetooth channels? (#bluez ? /cs list #*bluez*) |
| 16:52.24 | themill | joebrunner: check the version of libssl0.9.8 that you have on your machine; you can regenerate the keys yourself using examples at http://wiki.debian.org/SSLkeys |
| 16:52.35 | Nurulwai | Dewi: have a look at http://telebid.com/ - the site itself is sort of dodgy (and must make a mint for the owners, damn) but the updates to prices cause xorg and firefox to go into rape mode. |
| 16:52.38 | enouf | docmax: check dmesg, try using hcitool ? - i don't know any more than that |
| 16:52.45 | joebrunner | themill: thanks, I'll check that out |
| 16:52.59 | themill | joebrunner: no worries |
| 16:53.02 | Nurulwai | Especially bad if you click on an item and you have both price update and list update |
| 16:53.14 | stew | Nurulwai: works fine here |
| 16:53.18 | stew | Nurulwai: what is "rape mode" |
| 16:53.36 | asg | stew: heavy petting^Wthrashing |
| 16:53.41 | Nurulwai | 2856 root 20 0 139m 45m 5100 S 54.3 7.2 4:35.22 Xorg |
| 16:53.42 | Nurulwai | 2918 nurulwai 20 0 156m 67m 19m R 35.0 10.7 8:40.57 firefox-bin |
| 16:53.50 | *** join/#debian chronic1 (n=anciento@adsl-158-33-2.asm.bellsouth.net) |
| 16:53.55 | *** join/#debian minus198_ (n=asdf@c83-250-74-212.bredband.comhem.se) |
| 16:53.59 | timonator | why does dowkd say "no suitable blacklist"? |
| 16:54.10 | Nurulwai | Like I said, it's a shit old pc with a 1.1ghz processor in. |
| 16:54.40 | Nurulwai | And for some bizzare fucking reason firefox performs better if I run it in a windows XP VM in virtualbox. Far less CPU load to boot. |
| 16:54.44 | Nurulwai | How the hell does that work |
| 16:54.55 | *** join/#debian MindCr (i=MindCr@216.Red-83-34-2.dynamicIP.rima-tde.net) |
| 16:54.56 | enouf | joshteam: install 'unrar', man unrar, /msg dpkg unrar <--(note, you might need the 'non-free' version) |
| 16:55.06 | *** join/#debian Kumool (i=Administ@24.139.157.244) |
| 16:55.10 | Nurulwai | And xorg doesn't work nearly as hard to render it |
| 16:55.26 | Eulex | Nurulwai, what X driver? |
| 16:55.28 | *** join/#debian reffle_ (n=reffle@cpc2-amer1-0-0-cust67.watf.cable.ntl.com) |
| 16:55.30 | joshteam | enouf: apt-get install ? |
| 16:55.38 | Nurulwai | Eulex: ati and nv. |
| 16:55.44 | *** join/#debian deego (n=user@74.255.63.136) |
| 16:56.04 | Eulex | Nurulwai, happening on two different machines? |
| 16:56.06 | stew | Nurulwai: ask #firefox |
| 16:56.06 | enouf | joshteam: yes, but apt-get update prior |
| 16:56.16 | *** join/#debian gkiagia (n=gkiagia@hera530-a036.home.otenet.gr) |
| 16:56.18 | *** join/#debian Hilary_ (n=Hilary@c-24-10-118-69.hsd1.ca.comcast.net) |
| 16:56.19 | enouf | joshteam: /msg dpkg grounding <--please read |
| 16:56.20 | docmax | enouf: i want to read the docs |
| 16:56.27 | docmax | but which driver? |
| 16:56.39 | enouf | docmax: in /usr/share/docs is the standard |
| 16:56.43 | Dewi | Nurulwai: on my athlon 5200+ in windows XP it's using like 20-40% CPU |
| 16:56.49 | Nurulwai | Eulex: Nah, two graphics cards. Onboard is some crap ATI 8Mb thinger, and I have an nvidia GF2 MX providing a second monitor. |
| 16:56.51 | Dewi | Nurulwai: I'm not surprised it's slow |
| 16:56.57 | *** join/#debian dante_2core (n=dante@80-219-138-141.dclient.hispeed.ch) |
| 16:57.02 | enouf | docmax: i don't know with bluez at all - dpkg -L <pkgname> | grep doc |
| 16:57.04 | *** join/#debian bkw__ (n=bkw@h-81-170-235-0.NA.cust.bahnhof.se) |
| 16:57.17 | Dewi | Nurulwai: using 2 (especially so different) video cards like that can make things slow in my experience |
| 16:57.18 | helo | so... if anyone has been sitting around capturing ssl sessions, hoping to decrypt them in the future, they will now likely be able to see most debian users credit card #s, etc? |
| 16:57.35 | Dewi | helo: what do you mean now? |
| 16:57.36 | *** join/#debian maxamillion (n=adam@ss-5-41.shsu.edu) |
| 16:57.47 | Dewi | helo: they could have noticed this flaw years ago |
| 16:57.55 | enouf | joshteam: a sample to do many might be like; cd /place/of/rars; for i in "*.rar" ; do unrar -x $i ; done |
| 16:58.09 | *** join/#debian Bravewolf (n=wolf@78.13.84.41) |
| 16:58.15 | helo | assumming it is unlikely that they have noticed it before now... now it is likely that they can :) |
| 16:58.24 | enouf | joshteam: the -x is for extract |
| 16:58.26 | sandman | Does anyone know how to take the output from memtest86+ and incorporate it into the excludemem= kernel parameter, so that it will work around bad memory? |
| 16:58.28 | Dewi | Nurulwai: that was awful |
| 16:58.41 | Nurulwai | On me games box (a fairly hefty c2d running XP) there's sod all strain on the processor at all. firefox doesn't even register more than 1%. |
| 16:58.44 | joshteam | thanks enouf |
| 16:58.50 | Dewi | sandman: all I know is that I heard it had a specific output mode for that |
| 16:59.23 | Nurulwai | I'd use only one graphics card but the vga on the arse end of the dock is shit as all hell, output is blurry. |
| 16:59.24 | enouf | np |
| 16:59.27 | *** join/#debian Hilary__ (n=Hilary@c-24-10-118-69.hsd1.ca.comcast.net) |
| 16:59.30 | *** part/#debian timo_ (n=timo@141.52.94.78) |
| 16:59.32 | Dewi | wonders why debian thinks /home hasn't been fsck'd for 46,000 days |
| 16:59.35 | Nurulwai | The only issues i've had with it are the xorg rapemode |
| 16:59.52 | abrotman | Dewi: clock issues? |
| 16:59.52 | asg | Dewi: it's Debian Neanderthal ... came before bo |
| 17:00.07 | Dewi | Nurulwai: like I say it behaved quite unpleasantly on my fast athlon XP machine |
| 17:00.09 | sandman | Dewi: Alright. Basically I'm trying to use a stock kernel, instead of a custom one with the BadRAM patch. Apparently, BadRAM patch allows more precise mapping of the actual bad areas of RAM. But there is already a way to do this with just broad ranges of RAM |
| 17:00.16 | Nurulwai | But okay, I'll ask #firefox why their shit sucks. |
| 17:00.22 | sandman | Dewi: So, I will try this. |
| 17:00.24 | Nurulwai | Dewi: Interesting. Thanks for the input |
| 17:00.26 | Dewi | Nurulwai: um |
| 17:00.35 | Dewi | Nurulwai: why do you think it means firefox or linux sucks? |
| 17:00.46 | Dewi | Nurulwai: do you have some emotional attachment to idle CPU cycles? |
| 17:00.59 | Dewi | Nurulwai: if a web site script asks your CPU to do some work, the browser will do that work |
| 17:01.03 | *** join/#debian msshams (n=msshams@91.184.75.47) |
| 17:01.06 | Nurulwai | neither, I just like being a pain in the ass. I have an issue with it causing lack of responsiveness to the rest of the computer. |
| 17:01.12 | Kumool | arm i got this error...http://geocities.com/sacred_amarant/bug.png i havent updated yet but because the other pc is mostly offline i cant update... unless i get the dvd update |
| 17:01.21 | Dewi | Nurulwai: the fact that you consider "using your CPU when a web page requests it" to be rape, makes you look like... well, an idiot |
| 17:01.25 | msshams | do you have any solution for this post: http://www.apacheforum.com/showthread.php?p=17914#post17914 ? |
| 17:01.31 | Dewi | Nurulwai: so don't visit shit web pages? |
| 17:01.34 | *** join/#debian minus__ (n=asdf@c83-250-74-212.bredband.comhem.se) |
| 17:01.40 | snewp | anyone familiar with oidentd ? |
| 17:01.54 | *** join/#debian eth0 (n=rewt@jericho.nl) |
| 17:02.00 | *** mode/#debian [+l 913] by debhelper |
| 17:02.06 | Dewi | Nurulwai: admittedly it would be nice if browsers provided an OS-like environment where resources could be specifically assigned to particular zones... but that's years away |
| 17:02.15 | gkiagia | why there is no xen-amd64 kernel for lenny ? |
| 17:02.16 | Nurulwai | Dewi: that fixes the symptom not the problem :-) |
| 17:02.33 | *** join/#debian Havis (n=Havis@adsl-dyn38.91-127-41.t-com.sk) |
| 17:02.44 | Dewi | Nurulwai: the problem is that you are visiting a webpage that continuously updates the screen, and you are for some reason surprised that firefox/xorg/windows accomodate it |
| 17:02.47 | *** join/#debian ApOgEE- (n=apogee@243.22.111.218.klj02-home.tm.net.my) |
| 17:02.52 | *** join/#debian path_ (n=path@pc-168-207-46-190.cm.vtr.net) |
| 17:03.01 | d34df00d | /leave |
| 17:03.02 | *** part/#debian d34df00d (n=0xd34df0@80.251.122.132) |
| 17:03.04 | Dewi | Nurulwai: it's simply the correct behaviour; the *problem* is in your mind... |
| 17:03.07 | Kumool | i just installed debian so im kind of a noob :( . wait let me rephrase i am a noob |
| 17:03.10 | *** join/#debian Kbyte (n=nontelad@160.97.39.210) |
| 17:03.15 | Dewi | Nurulwai: ask the web site owners not to update the screen so often, or stop going there |
| 17:03.16 | Nurulwai | Dewi: I am suprised that firefox running on xorg slows right the fuck down, and firefox on XP in virtualbox uses far less cpu load. |
| 17:03.26 | *** join/#debian nihil (i=mh@140.78.191.178) |
| 17:03.27 | Nurulwai | And performs far better |
| 17:03.31 | *** join/#debian gustavonarea (n=gustavon@193.153.233.186) |
| 17:03.31 | enouf | sandman: heh, .25 seems to have a new kernel param for that - http://lxr.linux.no/linux+v2.6.25/Documentation/kernel-parameters.txt#L1128 |
| 17:03.41 | Dewi | Nurulwai: are you listening? it uses 20-40% CPU, in the background, in my XP firefox on athlon 5200+ |
| 17:03.51 | abrotman | Nurulwai: use a non-gecko browser |
| 17:03.51 | Dewi | Nurulwai: you're wrong about the problem not being there in windows |
| 17:04.12 | *** part/#debian mugwort13 (n=mugwort1@pool-70-22-14-94.balt.east.verizon.net) |
| 17:04.20 | Dewi | Opera might well render it faster |
| 17:04.22 | joshteam | i do unrar-free x file.rar and it starts extracting but the files always fail and I don't see an error message? |
| 17:04.27 | Dewi | or even IE if it's optimised for that |
| 17:04.31 | Dewi | IE6 was pretty fast for some stuff |
| 17:04.35 | jelly-home | msshams: there's no problem explained in that post, just a request for comments about the setup |
| 17:04.47 | *** join/#debian Ramattack (n=ramattac@111.Red-80-59-36.staticIP.rima-tde.net) |
| 17:04.49 | Ramattack | Hi!!! |
| 17:05.10 | Nurulwai | Dewi: It rapes cpu in the virtualbox instance too - the thing is it remains responsive while raping. |
| 17:05.12 | *** join/#debian sodio (n=sodio@va-71-1-140-171.sta.embarqhsd.net) |
| 17:05.13 | helo | putting a swap partition on a hardware raid0+1 disk is bad, right? |
| 17:05.15 | Ramattack | have heard about openssl bug |
| 17:05.19 | enouf | joshteam: if it |
| 17:05.22 | Ramattack | wich debian branches are affected? |
| 17:05.23 | Dewi | abrotman: whoa |
| 17:05.25 | Ramattack | debian etch too? |
| 17:05.28 | jelly-home | helo: why would it be? |
| 17:05.30 | Ramattack | or just unstable ? |
| 17:05.31 | Dewi | abrotman: I manually set the date this morning on a new motherboard using 'date -s' |
| 17:05.36 | themill | !tell Ramattack about dsa1571 |
| 17:05.39 | pll | Is there a way to tell cdebootstrap to include additional pkgs on the command line? |
| 17:05.44 | enouf | joshteam: if it was made with unrar 3.0 or above, you need the non-free version, IINM |
| 17:05.45 | Dewi | abrotman: it has retained all fields with perfect accuracy, except year, which has reverted to 1999 |
| 17:05.50 | abrotman | heh |
| 17:05.53 | Dewi | abrotman: hence the crazy offset since my last fsck |
| 17:06.03 | gustavonarea | Hello, everyone. I'm using Debian Etch and I cannot find the setlock application in the repositories. I found a webpage that suggests to install daemontools, but it's not in the repos either. I've also installed "svtools" because its description is "Utilities for daemontools and multilog", but it doesn't install setlock. What package should I look for? Thanks in advance. |
| 17:06.27 | Dewi | abrotman: imagine that... no fsck since 1999 |
| 17:06.30 | enouf | joshteam: /msg dpkg non-free |
| 17:06.53 | helo | jelly-home: because linux is good at striping swap itself |
| 17:06.55 | jelly-home | Dewi: my old machine sometimes didn't fsck since 1980! |
| 17:07.10 | Dewi | Nurulwai: lower the priority of the firefox process? |
| 17:07.16 | Nurulwai | The slowdown and lack of responsiveness is true to anything that causes frequent screen updates, be it something like youtube or something like this shit website. Is there anything to do to make it not shit itself so much when it gets under load or is it something to just put up with? |
| 17:07.16 | kshah | I'm having a real problem setting up BIND, I've read the docs and I'm still lost, I keep seeing references to the config tool, but it isn't available on Etch? |
| 17:07.27 | jelly-home | helo: so? putting it on a raid0+1 won't hurt |
| 17:07.31 | sandman | enouf: Oh, you mean BadRAM? That's great. Means it was accepted by upstream. |
| 17:07.36 | Dewi | Nurulwai: what graphics driver are you using? |
| 17:07.43 | enouf | Dewi: funny - have you been messing with any ACPI settings? |
| 17:07.44 | Nurulwai | Dewi: nv and ati. |
| 17:07.57 | Dewi | enouf: not particularly |
| 17:08.03 | Dewi | enouf: it just lost the year part |
| 17:08.16 | enouf | sandman: perhaps, dunno ;-) also see kernelnewbies.org , find the summations of changes for .25 |
| 17:08.21 | Dewi | enouf: admittedly I don't normally change the date using 'date -s' from a rescue CD, but this time I did |
| 17:08.25 | *** part/#debian ApOgEE- (n=apogee@243.22.111.218.klj02-home.tm.net.my) |
| 17:08.28 | Dewi | enouf: just interesting that it kept every field but year |
| 17:08.30 | enouf | Dewi: ahh |
| 17:08.34 | Dewi | enouf: maybe I have y2k!! |
| 17:08.36 | *** join/#debian floppypond (n=floppypo@unaffiliated/floppypond) |
| 17:08.47 | webPragmatist | how do i make an existing user join a group i just made? |
| 17:08.48 | Dewi | hacks his lungs out and keels over |
| 17:08.53 | enouf | that's what i'm thinking, some y2k cutoff bug |
| 17:08.58 | stew | webPragmatist: adduser username groupname |
| 17:08.58 | *** join/#debian dolphin_noel (n=opensour@85.138.197.60) |
| 17:08.59 | helo | jelly-home: instead of having linux use my 1GB (2GB physical) hardware raid0+1 partition to swap onto, wouldn't it be better (faster) to have it stripe swap activity between the two separate partitions? |
| 17:09.01 | Nurulwai | The same screen updating doesn't cause the xorg load to spike nearly as much when it's being done in virtualbox. It's just firefox running natively that causes xorg to spike cpu usage massively. |
| 17:09.10 | webPragmatist | stew: even if they are existing? |
| 17:09.16 | stew | webPragmatist: only if they are existing |
| 17:09.20 | webPragmatist | oh ok |
| 17:09.37 | Dewi | enouf: this is fantastic. First I wake up and some bastard has punched a hole in my private key and drained out all the entropy, and now I get the millennium bug in 2008 |
| 17:09.58 | enouf | Dewi: which rescue cd ? it's possible that CDs kernel has the param that cutsoff ACPI support auto (unless you boot with acpi=force) |
| 17:10.02 | Dewi | enouf: this is all too depressing for words; I think I'd better go to bed :) |
| 17:10.02 | *** join/#debian selim (n=chatzill@e181102230.adsl.alicedsl.de) |
| 17:10.04 | webPragmatist | stew: and to list groups or users? |
| 17:10.10 | *** join/#debian floppypond (n=floppypo@wnpgmb014tw-ad03-153-160.dynamic.mts.net) |
| 17:10.15 | Dewi | enouf: a debian live image I built recently |
| 17:10.18 | stew | webPragmatist: getent passwd ; getent group |
| 17:10.20 | enouf | Dewi: nightey nite ;-) |
| 17:10.29 | jelly-home | helo: then you need to setup two raid1s |
| 17:10.32 | *** join/#debian dolphin_noel (n=opensour@85.138.197.60) |
| 17:10.40 | Dewi | enouf: no major customizations, just some presets and a bunch of package selections |
| 17:10.50 | Dewi | enouf: mind you, the BIOS on this machine is royally messed up |
| 17:10.52 | *** join/#debian agnitio (n=magnus@h-91-126-123-244.wholesale.rp80.se) |
| 17:11.10 | Dewi | enouf: there's not enough configuration space for all 3 storage controllers |
| 17:11.20 | Dewi | enouf: so I can only boot off the devices that probe first |
| 17:11.31 | helo | so... is there anything that guarantees the uninitialized memory openssl uses for entropy will be different from one install to another? (without the debian bug) |
| 17:11.41 | Dewi | enouf: so who knows which bits of ACPI are being strangled...... |
| 17:11.45 | enouf | Dewi: ugh |
| 17:11.56 | *** join/#debian linkslice (n=bryan@officefw.tac.opticfusion.net) |
| 17:12.06 | Dewi | enouf: note - I know absolutely nothing about ACPI; it's just that the whole BIOS/PnP situation on this is messed up |
| 17:12.15 | enouf | but i'd say, therein lies the base of the fault ;-) |
| 17:13.08 | *** join/#debian mhymn (i=mhymn@unaffiliated/mhymn) |
| 17:13.23 | *** join/#debian dolphin_noel (n=opensour@85.138.197.60) |
| 17:13.28 | enouf | you people type way too fast for me .. grah :-P |
| 17:13.47 | *** join/#debian elurin (n=user@88.254.104.37) |
| 17:13.58 | *** join/#debian Geru (n=Geru@38.Red-88-15-210.dynamicIP.rima-tde.net) |
| 17:14.05 | *** part/#debian Geru (n=Geru@38.Red-88-15-210.dynamicIP.rima-tde.net) |
| 17:14.46 | Kumool | hi... i got a bug when trying to mound a hdd sayin that because it is not removable it wont mount |
| 17:14.56 | *** part/#debian elurin (n=user@88.254.104.37) |
| 17:15.03 | stew | Kumool: show us the actual command you typed and the actual output, use a pastebin: /msg dpkg pastebin |
| 17:15.07 | gustavonarea | Guys, is there any alternative to setlock for Debian Etch? |
| 17:15.13 | *** join/#debian PegaS (n=pegas@217.10.38.186) |
| 17:15.24 | Kumool | http://geocities.com/sacred_amarant/bug.png |
| 17:16.01 | themill | For those in need of a little something to cheer your day up, this may be appropriate: http://picpaste.com/glasbergen_-_new_encryption_code.gif [safe for work] |
| 17:16.15 | *** join/#debian nn64 (n=nn@74.94.43.196) |
| 17:16.17 | Kumool | tried mounting from the terminal but it cant find the hdc1 :( |
| 17:16.23 | *** join/#debian Phase (i=phase@unaffiliated/phase) |
| 17:16.24 | *** join/#debian MoDaX (n=nth@lan-84-240-22-131.vln.skynet.lt) |
| 17:16.30 | helo | kills themill |
| 17:16.36 | *** join/#debian Hoxzer (n=dsadsad@dsl-hkigw7-fe1df900-39.dhcp.inet.fi) |
| 17:16.51 | stew | Kumool: what command di dyou use from the terminal? |
| 17:16.51 | themill | helo: meh... we have to be able to laugh at ourselves. |
| 17:16.53 | selim | can someone help me to configure my exim4 with some sort of virtusertable or a aliases file? I've had confixx installed before and it put some confixx directory into the /etc/exim4 it contains a sendmail.cf and sendmail.cw file anyone some idea how that works, cause somehow it's broken now. My exim denies every relay cause it don't know the recipient |
| 17:16.57 | n3kl | has flashplayer-nonfree been removed from lenny? |
| 17:17.09 | enouf | Dewi: here's that param; config ACPI_BLACKLIST_YEAR |
| 17:17.09 | themill | n3kl: yes. /msg dpkg adobe flash |
| 17:17.14 | Kumool | mount /dev/hdc1 :( sry noob at this |
| 17:17.36 | *** join/#debian minus198 (n=asdf@c83-250-74-212.bredband.comhem.se) |
| 17:17.41 | helo | yeah... heh |
| 17:17.52 | *** join/#debian Piet (i=pietor@gateway/gpg-tor/key-0xC5C71DCE) |
| 17:17.53 | helo | there i did it... /me resumes killing people |
| 17:18.55 | *** join/#debian MoDaX (n=nth@lan-84-240-22-131.vln.skynet.lt) |
| 17:19.15 | *** join/#debian zumbi_ (n=zumbi@94.132.219.87.dynamic.jazztel.es) |
| 17:19.15 | stew | Kumool: you need to specify where you want it mounted |
| 17:19.26 | jelly-home | selim: what is "confixx"? |
| 17:19.26 | Kumool | oh well ill just erase the partition and make it ext |
| 17:19.48 | Kumool | ok then tell me what i shud type |
| 17:20.04 | n3kl | So how do I install flash? |
| 17:20.06 | *** join/#debian RoyK (n=roy@ti211310a080-7765.bb.online.no) |
| 17:20.08 | RoyK | <PROTECTED> |
| 17:20.08 | RoyK | <PROTECTED> |
| 17:20.10 | RoyK | ... wtf?? |
| 17:20.17 | RoyK | I get dozens of these |
| 17:20.23 | *** join/#debian Kamping_Kaiser (n=kgoetz@gnewsense/friend/pdpc.active.kgoetz) |
| 17:20.27 | selim | jelly-home: some sort of webconfig panel |
| 17:20.43 | *** join/#debian mugwort13 (n=mugwort1@pool-70-22-14-94.balt.east.verizon.net) |
| 17:21.06 | mugwort13 | can anyone advise me how to upgrade to a newer version of alsa with etch ? |
| 17:21.14 | *** join/#debian omry (n=omry@bzq-84-108-20-56.cablep.bezeqint.net) |
| 17:21.17 | webPragmatist | whats /etc/logcheck/ignore.d.*/ |
| 17:21.21 | selim | jelly-home: but that's not really important cause it's broken anyway I need to fix the mailing but I don't know much about exim |
| 17:21.21 | RoyK | mugwort13: recompile kernel? |
| 17:21.22 | jelly-home | selim: "sendmail.cf" and the other one are Sendmail configuration files. That software probably expects Sendmail, not exim. |
| 17:21.22 | *** join/#debian phenom_ (n=blueface@bas2-unionville55-1242395933.dsl.bell.ca) |
| 17:21.54 | mugwort13 | RoyK: what is a a safe way to do that ? |
| 17:22.00 | *** mode/#debian [+l 907] by debhelper |
| 17:22.07 | jelly-home | selim: since it's not in Debian, you'll have to ask the authors about it |
| 17:22.07 | selim | jelly-home: no it seem's like exim is somehow emulating sendmail behaviour |
| 17:22.21 | *** join/#debian nurdys (n=nurdys@bft33-1-88-168-253-54.fbx.proxad.net) |
| 17:22.36 | *** join/#debian bzsa (n=bzsa@host-88-132-3-177.prtelecom.hu) |
| 17:22.45 | RoyK | mugwort13: download the source from kernel.org, make menuconfig, make ; make modules ; make install modules_install, modify grub, reboot |
| 17:22.46 | jelly-home | selim: it's not likely that exim is reading sendmail.cf. |
| 17:23.04 | selim | jelly-home: right know exim4 is installed an running and I need some hint how I can configure my users to force exim to deliver the e-mail to the correct mailbox |
| 17:24.09 | selim | jelly-home: just forget the sendmail config, what would I have to do to setup new users within exim |
| 17:24.39 | *** join/#debian abchirk (n=rapunzel@cl-2502.ham-01.de.sixxs.net) |
| 17:24.47 | *** part/#debian mugwort13 (n=mugwort1@pool-70-22-14-94.balt.east.verizon.net) |
| 17:25.03 | jelly-home | selim: if you don't care about the current setup, I'd suggest reinstalling exim4-daemon-light (or -heavy, whatever you have). It can deliver to local unix users by default. |
| 17:25.32 | asg | or dpkg-reconfigure exim4-config |
| 17:25.54 | jelly-home | er... right |
| 17:27.58 | *** part/#debian gustavonarea (n=gustavon@193.153.233.186) |
| 17:29.02 | *** part/#debian Danielss89 (n=Im@0x57304f1b.hknxx3.adsl-dhcp.tele.dk) |
| 17:29.17 | *** join/#debian halflife (n=halflife@gatekeeper.athenahealth.com) |
| 17:29.17 | Kumool | :D worked now dont ask me what i did thx either way |
| 17:30.04 | *** join/#debian RaceCondition (n=RaceCond@217-159-200-30-cn.lse.estpak.ee) |
| 17:30.06 | selim | jelly-home: and how can I set some virtual e-mail addresses? |
| 17:30.39 | selim | jelly-home: I need some mappings like xyz@dom.com -> user web1 |
| 17:30.40 | jelly-home | selim: can't help you with real exim issues, sorry. The best I can do is edit /etc/aliases |
| 17:31.25 | *** join/#debian sharky (n=sharky@a40-prg1-15-56.static.adsl.vol.cz) |
| 17:31.37 | *** join/#debian roald (n=roald@ip51cda99e.speed.planet.nl) |
| 17:32.08 | helo | how did this vuln become known? |
| 17:32.37 | abrotman | Seer from Omaha |
| 17:32.40 | *** join/#debian ApOgEE- (n=apogee@243.22.111.218.klj02-home.tm.net.my) |
| 17:33.03 | *** join/#debian atomiku (n=atomiku@cpc3-ipsw1-0-0-cust5.colc.cable.ntl.com) |
| 17:33.20 | Fah | selim: for virtual users in exim, have a look here: http://www.debian-administration.org/articles/140 |
| 17:33.27 | Fah | Google has a bunch of info if you search it |
| 17:33.58 | selim | Fah: I've already tried that but found nothing helpful so far, but thank you for the hint |
| 17:34.00 | asg | abrotman: nah, it was the Oracle 10i at Delphi |
| 17:34.25 | Fah | selim: it isn't a hint so much as a how to guide |
| 17:34.31 | *** join/#debian bacon000 (n=x@c-71-202-113-120.hsd1.ca.comcast.net) |
| 17:34.33 | Fah | it covers virtual users |
| 17:34.44 | abrotman | hehe |
| 17:35.22 | abrotman | asg: they should have used a RAQ .. they'd have found it sooner |
| 17:35.50 | helo | Could not resolve 'ftp.us.debian.org' |
| 17:35.52 | *** join/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 17:35.57 | helo | oh lol |
| 17:35.59 | *** join/#debian timo_ (n=timo@141.52.94.78) |
| 17:37.39 | xingu | abrotman: ... and then we could have rated it |
| 17:37.52 | abrotman | +5 important ? |
| 17:38.06 | Ramattack | thanks mates see u! |
| 17:38.08 | Ramattack | see u |
| 17:38.44 | *** join/#debian Shisui (n=chris@79.84.167.66) |
| 17:40.01 | *** join/#debian Sergiu1 (i=sergiu@87.255.79.154) |
| 17:40.05 | Sergiu1 | hi |
| 17:40.07 | *** part/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 17:40.12 | *** join/#debian halflife (n=halflife@gatekeeper.athenahealth.com) |
| 17:40.19 | *** part/#debian ApOgEE- (n=apogee@243.22.111.218.klj02-home.tm.net.my) |
| 17:40.27 | Sergiu1 | why mozilla-firefox, epiphany browser is crashing to me so often .=[ |
| 17:40.44 | halflife | hello folks, how can configure my system such that i don't have to reboot the system for the kernel to use the new partitioning table when i delete partitions and add them |
| 17:41.14 | *** join/#debian lordlamer (n=fhaberma@e176064126.adsl.alicedsl.de) |
| 17:41.25 | Fah | halflife: use the umount and mount commands? |
| 17:41.36 | Sergiu1 | maybe bcouse i have installed the flashplayer-mozilla from external mirror |
| 17:41.51 | *** join/#debian Piet (i=pietor@gateway/gpg-tor/key-0xC5C71DCE) |
| 17:42.05 | *** join/#debian drowe (n=drowe@ip68-229-187-87.om.om.cox.net) |
| 17:42.11 | halflife | Fah: huh ? the paritions are not mounted, i am using fdisk to add or remove partitions to try different file systems |
| 17:42.12 | xand | halflife: don't think you can |
| 17:42.17 | themill | Sergiu1: flash and java are the usual culprits |
| 17:42.19 | asg | halflife: use logical volume management such as LVM |
| 17:42.40 | *** join/#debian blackinside (n=blackins@ADijon-153-1-81-10.w81-49.abo.wanadoo.fr) |
| 17:42.45 | xand | I just got a new laptop with windows vista :D |
| 17:42.47 | drowe | Hi folks, on my laptop, is it possible to disable just the mouse nub, but not the trackpad or a connected PS/2 mouse? |
| 17:42.57 | xand | what's a mouse "nub"? |
| 17:43.00 | halflife | asg: ok. thanks |
| 17:43.02 | Fah | halflife: i'm not clear what you're asking. if you're creating partitions, define the mount points in fstab and mount them, or use autofs or some lvm type system |
| 17:43.03 | xand | the nipple? |
| 17:43.07 | asg | drowe: I think the clitoris is connected to the g-spot so no |
| 17:43.09 | drowe | xand: yeah |
| 17:43.18 | xand | maybe in the bios? |
| 17:43.22 | xand | dunno |
| 17:43.33 | msshams | i installed apache2. and now use /etc/apache2/apache2.conf / but i installed apache2.2-common package too. now i use which version? 2 or 2.2 ? |
| 17:44.08 | halflife | asg: what cause the kernel to not use the new paritition tables when using fdisk to create or destroy partitions that it requires a reboot to use the new partitions |
| 17:44.13 | PovAddict | xand, drowe: http://xkcd.com/243/ |
| 17:44.29 | *** join/#debian nfsnobody- (n=nnscript@sexy.whitey.hostaroo.net.au) |
| 17:44.29 | themill | msshams: did you install apache2 from the debian packages? if so, you will already have it |
| 17:44.36 | xand | haha |
| 17:44.46 | *** join/#debian jpin (n=jpinto@duonghome.NMSU.Edu) |
| 17:44.51 | *** join/#debian goll__ (n=goll@81.10.126.24) |
| 17:44.55 | Sergiu1 | themill, what package i should use for to play flash ?:) |
| 17:44.55 | themill | PovAddict: nice |
| 17:44.59 | *** join/#debian spx2 (n=spx2@89.37.70.170) |
| 17:45.14 | Sergiu1 | themill, to install adobe flash player from the adobe.com ? |
| 17:45.15 | *** join/#debian SnowCrash (n=Snow-Cra@i198063.upc-i.chello.nl) |
| 17:45.20 | *** join/#debian ribasushi (n=rabbit@dslb-088-077-216-042.pools.arcor-ip.net) |
| 17:45.24 | Sergiu1 | is he safe and stable:> |
| 17:45.29 | *** join/#debian abchirk (n=rapunzel@cl-2502.ham-01.de.sixxs.net) |
| 17:45.31 | drowe | exactly. I want to disable just that.... |
| 17:45.37 | themill | Sergiu1: none of them is my preference. I use flashplayer-mozilla from debian-multimedia.org |
| 17:45.46 | Sergiu1 | themill, i use it too |
| 17:45.48 | *** join/#debian ma3x (i=ma3x@unaffiliated/ma3x) |
| 17:45.48 | themill | Sergiu1: But don't go straight to adobe. |
| 17:45.54 | ma3x | why do i get so many damn error messages |
| 17:45.59 | halflife | Fah: i am using fdisk to paritition my extended partitions into parititions that have ext3,reiserfs and different sizes. i find that i need to reboot my system when i partition the disk. filesystems and mount points are much later |
| 17:46.00 | ma3x | usb-storage: device found at 12 |
| 17:46.00 | ma3x | usb-storage: waiting for device to settle before scanning |
| 17:46.01 | *** join/#debian gunthr (n=gunthr@mail.ericksontech.com) |
| 17:46.02 | *** join/#debian Faithful (n=Faithful@ns.linuxterminal.com) |
| 17:46.03 | ma3x | usb-storage: device scan complete |
| 17:46.10 | ma3x | and then this: |
| 17:46.12 | ma3x | usb 2-3: reset high speed USB device using ehci_hcd and address 12 |
| 17:46.12 | ma3x | usb 2-3: device descriptor read/64, error -71 |
| 17:46.18 | ribasushi | which is the exact debian package affected y the openssl problem uncovered this week? is it openssl itself or one of the libs? |
| 17:46.22 | msshams | themill: i install apache2 first from apt-get. next i install apache2.2-common from apt-get too. now which version is work? |
| 17:46.24 | keith4 | !pastebin |
| 17:46.24 | dpkg | Please don't paste anything into the channel; use a paste site instead, like: http://paste.lisp.org, http://rafb.net/paste/, http://pastebin.ca/, http://picpaste.com for pics. --- Also ask me: <pastebin pipe> |
| 17:46.26 | halflife | ma3x: use #flood |
| 17:46.26 | ma3x | i've tried on/off my hard drive thousand times, and im getting that all the time |
| 17:46.42 | *** join/#debian jebba (n=jebba@unaffiliated/jebba) |
| 17:47.05 | SparFux | just recreat all keys! |
| 17:47.28 | PovAddict | ribasushi: it's your keys |
| 17:47.31 | SparFux | How can I use misdn with kernel-2.6.25? |
| 17:47.38 | themill | msshams: apache2.2-common is the config files, helper scripts etc. You need both packages but there is only one apache server there. |
| 17:47.40 | *** join/#debian debian2_6_24_1am (n=user@12-210-55-82.client.mchsi.com) |
| 17:47.41 | dondelelcaro | ribasushi: it's openssl itself, which means that libssl is affected. The advisory explains what the deal is. |
| 17:47.44 | *** join/#debian Bravewolf (n=wolf@78.13.84.41) |
| 17:47.53 | themill | ribasushi: /msg pkg dsa1571 |
| 17:47.56 | ribasushi | PovAddict: I know it's the keys, but I need to regenerate them with a corrected ssl setup don't I? :) |
| 17:48.05 | asg | halflife: the partition information is probed at boot-time by the kernel and, iirc, can't be refreshed on a running system. |
| 17:48.08 | PovAddict | just upgrading won't get the vulnerability away, you need to re-generate the weak keys |
| 17:48.08 | SparFux | riba: yes. |
| 17:48.09 | PovAddict | heh yes |
| 17:48.25 | *** join/#debian bjwebb (n=bjwebb@tuxhacker/Bjwebb) |
| 17:48.27 | ribasushi | to rephrase - from which version of which package am I safe to proceed |
| 17:48.29 | SparFux | first erase all ~/.ssh dirs. That's it. |
| 17:48.37 | bjwebb | will debian lenny contain some non-free firmware? |
| 17:48.42 | themill | ribasushi: check tha advisory. /msg pkg dsa1571 |
| 17:48.44 | SparFux | riba: fomr openssl 0.9.8g-9 on. |
| 17:48.55 | tecky | <PROTECTED> |
| 17:49.09 | SparFux | be sure to erase server keys. |
| 17:49.23 | Saar | i just upgraded etch but I don't think ssh-vulnkey is anywhere to be found |
| 17:49.23 | ribasushi | themill: thanks, much appreciated |
| 17:49.26 | themill | SparFux: not for etch, it's not. And there's no need to delete ~/.ssh/config |
| 17:49.47 | SparFux | sudo rm /etc/ssh/ssh_host_*_key* |
| 17:49.49 | themill | Saar: did you dist-upgrade? |
| 17:49.49 | xingu | asg, halflife: partprobe(8), from parted |
| 17:49.52 | debian2_6_24_1am | using debian 2.6.24-1-amd64 and ndiswrapper for wireless no light on on router no led light on laptop but able to browse any ideas on what i dont have loaded right? |
| 17:49.53 | *** join/#debian Buck (n=Buck@j2113.upc-j.chello.nl) |
| 17:49.55 | Saar | oops just upgrade |
| 17:50.02 | Buck | how to I update openssl to a safe version? |
| 17:50.13 | *** join/#debian berzerka (n=bzk@p508958AF.dip.t-dialin.net) |
| 17:50.14 | SparFux | themill: right, keep the config stuff. |
| 17:50.21 | asg | xingu: ah, nifty |
| 17:50.24 | PovAddict | Buck: just upgrading won't get the vulnerability away, you need to re-generate your keys |
| 17:50.25 | helo | if i'm doing a new install, is there any way to only use the new openssl? |
| 17:50.26 | halflife | xingu: thanks! |
| 17:50.30 | halflife | asg: thanks |
| 17:50.46 | PovAddict | Buck: to upgrade... same way as you upgrade any other package? |
| 17:50.47 | *** part/#debian Kumool (i=Administ@24.139.157.244) |
| 17:51.00 | beardy | Buck: Use aptitude and update like usual. But what PovAddict said afterwards. |
| 17:51.01 | helo | does netinstall pull from security.debian.org? |
| 17:51.06 | SparFux | erase all server keys and reinstall openssh-server package! |
| 17:51.10 | tecky | helo: i believe if you use the netinstall it pulls the latest packages |
| 17:51.22 | helo | i hope so... |
| 17:51.25 | tecky | so you should be good after the new openssl was released as it would pull that package instead |
| 17:51.28 | SparFux | get unstable off the net and you're done. |
| 17:51.34 | PovAddict | ssh-vulnkey isn't outputting *anything* |
| 17:51.36 | PovAddict | does that mean I don't have any key to be checked at all? |
| 17:51.41 | tecky | if not ... double check by apt-get update && upgrade and see what happens ? |
| 17:51.53 | asg | PovAddict: for your user, try 'sudo ssh-vulnkey -a' |
| 17:52.03 | themill | SparFux: (1) you can't install unstable directly (2) please don't tell people to use unstable. |
| 17:52.13 | *** join/#debian unlink (n=unlink@r253237157.resnet.cornell.edu) |
| 17:52.22 | webPragmatist | bleh |
| 17:52.34 | SparFux | not blacklisted is a good sign, right? :-) |
| 17:52.39 | PovAddict | I don't even have a ssh server installed, I was just wondering, maybe there was some other key that needed checking |
| 17:52.41 | *** join/#debian simbioz (n=shu4l0@pc-123-172-83-200.cm.vtr.net) |
| 17:52.41 | *** join/#debian mick_home (n=clamwin@h-74-2-196-226.miatflad.covad.net) |
| 17:52.47 | PovAddict | SparFux: it is |
| 17:52.55 | PovAddict | asg: no output |
| 17:52.59 | asg | SparFux: it's not proof that the key isn't bad. If you are unsure, definitely regen it. |
| 17:53.11 | SparFux | themill: ok, it is just what I have been doing. |
| 17:53.12 | asg | PovAddict: do you have ssh installed at all? |
| 17:53.17 | helo | you should be unsure, so regen it regardless. |
| 17:53.18 | unlink | why might i be seeing very high latency in an ssh connection between a pair of computers on the same lan, neither of which is very busy? |
| 17:53.25 | xingu | themill: sorry to be a pest - has anything conclusive come back regarding rsa .pem's since yesterday? |
| 17:53.56 | asg | unlink: duplex mismatch, high cpu load on one or the other |
| 17:53.59 | *** join/#debian mishok13 (n=gdmfsob@92.112.48.39) |
| 17:54.05 | dondelelcaro | xingu: if they were generated using openssl, they're suspect. |
| 17:54.07 | helo | (man in the middle) |
| 17:54.10 | unlink | haha |
| 17:54.12 | dondelelcaro | xingu: you should regenerate them. |
| 17:54.16 | *** join/#debian Sweetandy (n=sweetand@c-24-22-132-246.hsd1.mn.comcast.net) |
| 17:54.18 | themill | xingu: conclusive from people who know what's going on, no. But our conclusions from various tests are that you can't test pems against the blacklists that have been provided. They are, however, weak. |
| 17:54.20 | dondelelcaro | xingu: if you generated them using gnutls, you're file. |
| 17:54.21 | PovAddict | asg: no ssh server installed, but I connected to other servers, and I dunno maybe there was some non-ssh key somewhere that could be weak |
| 17:54.27 | selim | fah: anyway, thank you |
| 17:54.41 | selim | fah: I think it will help me in that case |
| 17:54.56 | xingu | dondelelcaro: ta; uw-imapd, postinstall - I assume openssl given the deps |
| 17:54.57 | asg | PovAddict: the ssh-vulnkey code only checks in known places, if you have keys and they are not in ~/.ssh, it won't print them. |
| 17:54.59 | SparFux | themill: I questioned myself wether I would have to recreate server.pem of lighttpd, but as it uses gnutls, I don't think so. |
| 17:55.02 | *** join/#debian jelly-home (n=jelly@islands.iskon.hr) |
| 17:55.07 | PovAddict | hmm I should write a script to convert boinc key format into the ssh format so that it can be checked |
| 17:55.13 | ggeecko | can someone suggest an alternative to phpsysinfo?? |
| 17:55.19 | dondelelcaro | xingu: in short, any keys generated with openssl between 2006 and now should be regenerated. |
| 17:55.31 | *** join/#debian Nibbler (n=Nibbler@e181101078.adsl.alicedsl.de) |
| 17:55.33 | unlink | asg: both have low cpu load, and both are full duplex, 100 Mb/s |
| 17:55.41 | SparFux | The NSA will have a hard time with all the new keys on the net. Suckers! |
| 17:55.47 | PovAddict | asg: I only have known_hosts in there |
| 17:56.02 | *** join/#debian slidesinger (n=slidesin@70.106.127.111) |
| 17:56.04 | Sergiu1 | the God use linux... |
| 17:56.09 | simonrvn | regenerated 20+ pems yesterday |
| 17:56.13 | asg | PovAddict: then you have no keys and only connected to other systems using passwd auth |
| 17:56.14 | xingu | dondelelcaro, themill: cheers, just catching up with the wiki now; we can add uw-imapd to that list |
| 17:56.18 | Sergiu1 | there in heaven |
| 17:56.19 | unlink | i've had to update nearly 100 things after yesterday |
| 17:56.37 | pll | does anyone know what the --configdir option to cdebootstrap is for? |
| 17:56.56 | pll | Or, where I can find docs on what is supposed to go in there? |
| 17:56.57 | Sergiu1 | dont even thought about his |
| 17:56.59 | Sergiu1 | this |
| 17:57.03 | *** join/#debian Jemt (n=user@85.218.163.179) |
| 17:57.08 | PovAddict | asg: how do I check a key from another system? what file should I pass to the key checker? |
| 17:57.24 | asg | PovAddict: the manpage indicates the option (-i iirc) |
| 17:57.25 | *** join/#debian factotum (n=cedarpos@24-247-59-120.dhcp.aldl.mi.charter.com) |
| 17:57.35 | ribasushi | ok I am confused |
| 17:57.51 | Sergiu1 | :D |
| 17:57.52 | unlink | PovAddict: use ssh-keygen -l -f /etc/ssh/ssh_host_dsa_key to check your host key, replacing the pathname to check another key file |
| 17:57.59 | unlink | PovAddict: to check the fingerprint, that is |
| 17:58.00 | *** part/#debian versuchsanstalt (n=versuchs@p54856834.dip.t-dialin.net) |
| 17:58.03 | ribasushi | http://www.debian.org/security/ lists the vuln. yet my debian testing installs do not pick up any new packages |
| 17:58.11 | PovAddict | ah that's the path, thx |
| 17:58.11 | asg | unlink: he's asking about ssh-vulnkey |
| 17:58.16 | PovAddict | oh |
| 17:58.24 | ribasushi | let me pastebin sources.lst |
| 17:58.25 | *** join/#debian ma3x (i=ma3x@unaffiliated/ma3x) |
| 17:58.35 | ma3x | is there a free dyndns update script somewher? |
| 17:58.36 | factotum | debian stable with current nvidia binary driver for a 7300pcie GT, should work? |
| 17:59.00 | *** join/#debian toor (n=toor@aokneufi.dyndns.org) |
| 17:59.01 | asg | PovAddict: ssh-keyscan -t rsa remote.example.org | ssh-vulnkey - (will check host keys of remote systems) |
| 17:59.12 | *** join/#debian ColdFyre (n=coldfyre@c-24-130-214-62.hsd1.ca.comcast.net) |
| 17:59.13 | abrotman | ribasushi: which version says it will be fixed for testing ? |
| 17:59.22 | asg | ma3x: it didn't occur to you to 'apt-cache search dyndns'? |
| 17:59.38 | ma3x | tanks |
| 17:59.43 | abrotman | seriously? |
| 17:59.57 | PovAddict | not blacklisted \o/ |
| 18:00.14 | helo | is the standard 686 SMP kernel the best for a quad-core xeon e5335 cpu? |
| 18:00.22 | *** join/#debian DustyDingo (n=dustydin@rock-n-roll.proserver1.at) |
| 18:00.31 | ribasushi | http://pastebin.com/m35821cd |
| 18:00.32 | *** join/#debian tiben (n=tiben@cap31-1-82-66-73-179.fbx.proxad.net) |
| 18:00.35 | helo | netinst did install the fixed openssl, btw |
| 18:00.41 | ma3x | asg: im running thru router. ddclient asks for the interface? should i specify wlan0? that has static ip 192.168.1.2 |
| 18:00.42 | abrotman | helo: or -amd64 |
| 18:00.47 | V4Nelle_ | guys i think that debian etch try to upgrade my kernel with the same version of kernel....there is any problem? look hee -> http://pastebin.com/d3721bd1b |
| 18:00.56 | helo | i better stick with 32-bit |
| 18:01.05 | ribasushi | abrotman; um... shouldn't security updates pick it up...? |
| 18:01.17 | abrotman | V4Nelle_: normal .. it's a security upgrade |
| 18:01.17 | asg | ma3x: I don't know. Read the documentation. |
| 18:01.29 | ribasushi | abrotman; I am fuzzy on how testing picks up these high-profile updates |
| 18:01.31 | abrotman | ribasushi: it wasn't a security fix .. came in via normal channels AFAIK |
| 18:01.34 | *** join/#debian lepton (n=john@c-98-212-140-16.hsd1.il.comcast.net) |
| 18:01.40 | V4Nelle_ | ok abrotman ....thx :) |
| 18:01.42 | abrotman | ribasushi: if you're concerned about security, don't use testing |
| 18:01.48 | xingu | dondelelcaro, themill: for uw-impad in the SSLkeys wiki: rm `openssl x509 -noout -hash < imapd.pem`.0 imapd.pem; dpkg-reconfigure uw-imapd |
| 18:02.02 | ribasushi | abrotman: sooo... I need to wait for the packages to hit testing so I can regen my keys or have to pull manually from sid... lovely |
| 18:02.03 | xingu | dondelelcaro, themill: for uw-impad in the SSLkeys wiki: cd /etc/ssl/certs; rm `openssl x509 -noout -hash < imapd.pem`.0 imapd.pem; dpkg-reconfigure uw-imapd |
| 18:02.04 | xingu | rather. |
| 18:02.20 | abrotman | ribasushi: it's already fixed |
| 18:02.22 | abrotman | supposedly |
| 18:02.24 | ribasushi | abrotman; 1st usability, then security :) |
| 18:02.35 | abrotman | ribasushi: then quit whining |
| 18:03.24 | msshams | please recommend me a software that can create graphs and maps from send/received packets. |
| 18:03.42 | *** join/#debian SSGunner05 (n=tim@c-76-100-42-11.hsd1.md.comcast.net) |
| 18:03.50 | asg | msshams: cacti, munin, rrdtool, mtrg |
| 18:03.57 | *** part/#debian SSGunner05 (n=tim@c-76-100-42-11.hsd1.md.comcast.net) |
| 18:04.24 | *** join/#debian Celelaptop (i=celelibi@86.66.31.194) |
| 18:04.33 | *** join/#debian phenom|zZz (n=blueface@bas2-unionville55-1242519732.dsl.bell.ca) |
| 18:05.05 | ribasushi | abrotman: my bad, it was updated may 7th |
| 18:05.12 | abrotman | i said that |
| 18:05.18 | ribasushi | abrotman; I thought the vuln came to life on the 10th so didn't bother looking ack |
| 18:05.21 | *** join/#debian Piet (i=pietor@gateway/gpg-tor/key-0xC5C71DCE) |
| 18:05.27 | abrotman | ribasushi: changelogs are helpful |
| 18:05.39 | ribasushi | abrotman: if one reads them |
| 18:05.45 | ribasushi | goes into the corner |
| 18:06.01 | asg | apt-get install duncecap |
| 18:06.14 | *** join/#debian debian2_6_24_1am (n=user@12-210-55-82.client.mchsi.com) |
| 18:06.19 | SparFux | what is duncecap? |
| 18:07.00 | *** part/#debian Sergiu1 (i=sergiu@87.255.79.154) |
| 18:07.20 | *** part/#debian kshah (n=kunalash@cpe-68-173-252-199.nyc.res.rr.com) |
| 18:07.42 | factotum | join ##nvidia |
| 18:07.46 | *** part/#debian tiben (n=tiben@cap31-1-82-66-73-179.fbx.proxad.net) |
| 18:07.58 | *** join/#debian abchirk (n=rapunzel@cl-2502.ham-01.de.sixxs.net) |
| 18:08.26 | asg | !wrench |
| 18:08.26 | dpkg | * HaQDaQ wants to use apt-get agaaaaaaaaaaaaaaaain greycat> HaQDaQ: then do so. HaQDaQ> it doesn't work anymore... dependency erros : greycat> HaQDaQ: fix them. HaQDaQ> greycat: how ? greycat> HaQDaQ: with an apt wrench. Are you going to ask any more stupid questions? * HaQDaQ is linux n00b, and how to apt wrench ? HaQDaQ> greycat: how to apt wrench ? |
| 18:08.54 | *** join/#debian ionix- (n=ionix@p4234-ipbf1501marunouchi.tokyo.ocn.ne.jp) |
| 18:09.39 | *** join/#debian phenom_ (n=blueface@bas2-unionville55-1242396535.dsl.bell.ca) |
| 18:10.01 | *** join/#debian roald (n=roald@ip51cda99e.speed.planet.nl) |
| 18:10.45 | *** join/#debian Winkie (n=urmom@ur.fa.gs) |
| 18:11.01 | simonrvn | classic |
| 18:11.08 | asg | in every way |
| 18:11.19 | *** join/#debian SW0RDF15H (n=RMDS@189.6.40.33) |
| 18:11.31 | simonrvn | :D |
| 18:11.48 | *** join/#debian davi (i=davi@57.Red-88-2-100.staticIP.rima-tde.net) |
| 18:11.51 | *** join/#debian ma3x_ (i=ma3x@unaffiliated/ma3x) |
| 18:11.59 | msshams | asg: thank you |
| 18:12.12 | msshams | when i call a webpage, apache2 show it, with a delay. how can i solve this problem? |
| 18:12.32 | *** join/#debian zly (n=zly@5634dfcf.rev.stofanet.dk) |
| 18:13.00 | *** join/#debian shellito (n=shellito@200.122.229.14) |
| 18:13.13 | *** join/#debian jim (n=jim@unaffiliated/jim) |
| 18:13.28 | *** join/#debian Jemt (n=user@85.218.163.179) |
| 18:13.42 | *** join/#debian renowned (n=chatzill@66.158.33.4) |
| 18:13.58 | Jemt | Greetz. I'm trying to get WPA support. I have installed wpasupplicant and wpagui. When I start wpagui (as root), I get this error: Failed to open control connection to wpa_supplicant. |
| 18:14.02 | Jemt | PING failed - trying to reconnect |
| 18:14.05 | Jemt | Any suggestions ? |
| 18:14.26 | renowned | if Debian and Duke Nukem Forever were in a race to see which would be released first, who would win? |
| 18:14.26 | *** join/#debian furicle (n=chatzill@pppoe-66-186-88-250.vianet.ca) |
| 18:14.26 | asg | wtf cares |
| 18:14.31 | *** join/#debian abchirk (n=abchirk@78.52.192.31) |
| 18:14.36 | *** join/#debian m4ggus (n=marcus@p5B036103.dip.t-dialin.net) |
| 18:14.46 | jim | renowned: they'd each be released when they're ready... what part of that was unclear? |
| 18:15.03 | renowned | yes but if it was a race setting |
| 18:15.04 | *** join/#debian ryg9I (n=pavel@nat-gw.sevcable.net) |
| 18:15.12 | jim | it's not |
| 18:15.19 | renowned | you know like horse races |
| 18:15.22 | jim | (obviously :) |
| 18:15.40 | milia | hi |
| 18:15.45 | renowned | well I already bet over $250 on Debian |
| 18:15.47 | *** join/#debian tomaw_ (i=tom@freenode/staff/tomaw) |
| 18:15.48 | renowned | so it better win |
| 18:15.54 | abrotman | renowned: do you have a support question? |
| 18:15.56 | jim | at your peril :) |
| 18:16.06 | renowned | i already asked my q |
| 18:16.07 | asg | !lenny pool |
| 18:16.08 | dpkg | it has been said that lenny pool is Come and bet on when Lenny will be released. Ask me about "listkeys lenny pool" to find all of the bets, and "lenny bet" to find out how to bet. |
| 18:16.09 | *** part/#debian timdau (n=paul@H188.C137.B196.A67.tor.heavycomputing.ca) |
| 18:16.53 | shellito | Hi, I trying to configure tvtime (it works before but now Im getting a "is not possible to open /dev/video0").. I dont want to fix it (at some point I will)... I want to know how check which device is being using by who.. |
| 18:17.26 | shellito | any idea about what should I read? |
| 18:17.30 | *** join/#debian penguim (n=penguim@ubuntu/member/linuxba) |
| 18:17.30 | *** join/#debian aryane (n=ane_ast@201-66-2-8.ctaje700.dsl.brasiltelecom.net.br) |
| 18:17.58 | jim | I'm trying to find out why mp3s aren't playing... noatun starts, but doesn't play... wait let me check an mp3 on the hd instead of a weird-fs cd |
| 18:18.22 | NthDegree | hey guys, just wondering are debian apps compiled with -fstack-protector and -D_FORTIFY_SOURCE=2 by default? |
| 18:18.24 | *** join/#debian zir0faive (n=zir0faiv@mar92-2-82-67-214-216.fbx.proxad.net) |
| 18:18.58 | jelly-home | NthDegree: no; at least, not yet |
| 18:19.03 | debian2_6_24_1am | how can my router show no wireless connection even though im connected? |
| 18:19.18 | xingu | shellito: fuser -uf /dev/device |
| 18:19.32 | *** join/#debian Deetz (n=Paul@host185.natpool.mwn.de) |
| 18:19.32 | shellito | xingu, thank you |
| 18:19.32 | furicle | Hi All - http://wiki.debian.org/SSLkeys says 'some dsa keys may be comprised' when used from a machine with bad ssl What about RSA keys? |
| 18:19.38 | debian2_6_24_1am | ndiswrapper shows full strength |
| 18:19.45 | NthDegree | jelly-home: ah, hmm well no problem.. I guess i'll just have to recompile some bits |
| 18:20.01 | *** part/#debian PovAddict (n=nicolas@200.127.223.79) |
| 18:20.14 | NthDegree | furicle: it crippled the random pool |
| 18:20.15 | debian2_6_24_1am | atheros 5007 ndiswrapper amd64 |
| 18:20.34 | maligor | doesn't madwifi support it? |
| 18:20.36 | NthDegree | furicle: it affects everything that needs strong randomisation to my knowledge |
| 18:21.24 | furicle | I was afraid you'd say that. The key is good - it was generated on a Red hat box a long time ago.... and I've used it too darned many places since.... |
| 18:21.38 | asg | debian2_6_24_1am: perhaps you are connected to someone else's ap |
| 18:21.40 | *** join/#debian ApOgEE- (n=apogee@243.22.111.218.klj02-home.tm.net.my) |
| 18:21.43 | joebrunner | anyone had an issue when regenerating your ssh keys that you are left with a set of .broken files in /etc/ssh? |
| 18:21.56 | *** part/#debian ApOgEE- (n=apogee@243.22.111.218.klj02-home.tm.net.my) |
| 18:22.13 | zinx | i thought DSA has a vulnerability anyway? |
| 18:22.24 | joebrunner | .broken files, as in ssh_host_dsa_key.broken |
| 18:22.28 | stew | furicle: a strong DSA key used to sign messages with a weak openssl should be considered compromised, but this is NOT true of RSA |
| 18:22.45 | zinx | i haven't used DSA for years, in any case |
| 18:22.51 | *** join/#debian phenom|Away (n=blueface@bas2-unionville55-1242396375.dsl.bell.ca) |
| 18:22.51 | *** part/#debian aryane (n=ane_ast@201-66-2-8.ctaje700.dsl.brasiltelecom.net.br) |
| 18:23.14 | *** part/#debian mhymn (i=mhymn@unaffiliated/mhymn) |
| 18:23.24 | Jemt | How frustrating that Debian dosn't support WPA encryption. Maybe it does but it's useless if one have to modify configuration files all the time. Why dosn't wpa_gui and wpasupplicant work properly together ? |
| 18:23.53 | joebrunner | zinx: that was just an example, all the files have a .broken version also |
| 18:24.03 | *** join/#debian pksharma (n=email@59.93.195.159) |
| 18:24.27 | zinx | joebrunner: er, read what i said before that |
| 18:24.27 | furicle | stew: can you explain why? or point me to more info? I'd surely like that answer.... |
| 18:24.32 | zinx | joebrunner: it wasn't about the .broken :/ |
| 18:24.53 | jim | Jemt: so there's a problem you're having that someone could help you with? |
| 18:25.23 | *** join/#debian cristina_crow (n=cvintila@212.146.94.66) |
| 18:25.31 | debian2_6_24_1am | no madwif |
| 18:25.34 | Jemt | jim: Yea. wpa_gui gives me the following error: "Debian Failed to open control connection to wpa_supplicant" |
| 18:25.45 | debian2_6_24_1am | at least not for me i tried no joy |
| 18:26.02 | jim | it really said "Debian Failed"? |
| 18:26.17 | stew | furicle: becuase of a weakness in DSA if attacker has public key + crypted message and can guess the random data from the small pool, then attcker can recover your private key |
| 18:27.00 | jim | Jemt: what does your /etc/debian_version file contain? |
| 18:27.19 | *** join/#debian daemonmidi (n=markus@dslb-084-059-221-169.pools.arcor-ip.net) |
| 18:27.32 | Jemt | jim: Sec :) |
| 18:27.44 | Jemt | jim: 4.0 (etch) |
| 18:27.56 | *** join/#debian binwiederhier (n=pheckel@p5B07655E.dip.t-dialin.net) |
| 18:27.58 | Jemt | jim: Well, just "4.0" :) |
| 18:28.03 | jim | ok |
| 18:28.25 | minerale | is it possible to quickly create a large file? ie, just by allocating the inodes but without actually writing anything to the data blocks |
| 18:28.34 | binwiederhier | hey there, can i install unison 2.27.57 under etch? |
| 18:28.38 | jim | and there are no packages you've installed outside of official debian repo? |
| 18:28.45 | stoned | hm |
| 18:28.49 | stew | minerale: perhaps you want a sparse file? |
| 18:28.56 | Jemt | jim: Nope, not a single package |
| 18:29.11 | *** join/#debian GeorgeA (n=george@82.198.29.38.satgate.net) |
| 18:29.17 | Jemt | jim: For wireless configuration I've installed wireless-tools, wpasupplicant and wpa_gui |
| 18:29.23 | stew | Jemt: did you start wpa_cupplicant? |
| 18:29.24 | binwiederhier | unison needs the same versions to sucessfully synchronize (mac leopard / debian etch) |
| 18:30.16 | stew | Jemt: err wpa_supplicant |
| 18:30.16 | Jemt | stew: Nope. I have to start it ? |
| 18:30.16 | stew | Jemt: i believe so |
| 18:30.17 | Eulex | binwiederhier, /msg dpkg simple sid backport |
| 18:30.17 | Jemt | stew: Dosn't it start automatically when I reboot ? |
| 18:30.17 | minerale | stew: yeah, a 1 gb sparse file... dd if=/dev/zero of=sparse-file bs=1 count=0 seek=1Gb ? |
| 18:30.17 | debian2_6_24_1am | i just should have researched my wifi chipset better anyway so its my fault im just glad its works |
| 18:30.17 | jim | so the question becomes, why can't you open a control connection |
| 18:30.19 | Jemt | jim: Yep |
| 18:30.41 | *** join/#debian Sero (n=sero@084202240180.customer.alfanett.no) |
| 18:30.56 | jelly-home | minerale: no |
| 18:30.58 | stew | Jemt: not afaik |
| 18:31.02 | joebrunner | so nobody else sees .broken ssh config files then eh? |
| 18:31.07 | binwiederhier | /msg dpkg simple sid backport |
| 18:31.07 | *** join/#debian varney (n=varney@dsl-035-051.cust.imagine.ie) |
| 18:31.07 | *** join/#debian schlurchz (n=nikolaus@83.125.40.75) |
| 18:31.09 | Sero | when installing ssl on apache, do I need the apache-ssl module? |
| 18:31.10 | binwiederhier | hm |
| 18:31.13 | Jemt | stew: So I have to fiddle with specifying drivers every time ? |
| 18:31.16 | debian2_6_24_1am | flash even works pretty decent with 64bit now |
| 18:31.20 | stew | minerale: something like that, but i thougtt seek takes a number of blocks, not a size |
| 18:31.26 | Jemt | stew: Not very useful when I move my laptop around, you see |
| 18:31.31 | stew | Jemt: where would you have to specify drivers? |
| 18:31.35 | Sero | or is libapache-mod-ssl sufficient? |
| 18:31.41 | varney | when i want to use virtual ip based hosts, do i point the (sub-)domain at the ip of the virtual interface, or the main ip of the server? because i can't seem to get ssl working for the site... |
| 18:31.46 | cahoot | Jemt: once it works from commandline you can make it automatic |
| 18:31.46 | *** join/#debian Refakki (i=refakki@ppp85-140-63-227.pppoe.mtu-net.ru) |
| 18:31.57 | *** join/#debian daemonmi1i (n=markus@dslb-084-059-209-039.pools.arcor-ip.net) |
| 18:31.57 | *** join/#debian gdmfsob (n=gdmfsob@92.112.191.144) |
| 18:32.00 | stew | Jemt: perhaps consider using network-manager? |
| 18:32.10 | Jemt | stew: Network-Manager only supports WEP |
| 18:32.11 | *** join/#debian hatred- (n=phi@unaffiliated/sybec) |
| 18:32.16 | jelly-home | minerale: sorry, I completely missed the "sparse" bit. But that way you'll get a file 1G+1 long ;-) |
| 18:32.22 | stew | Jemt: i'm using network-manager with WPA currently |
| 18:32.22 | Jemt | stew: I usually use it for my own setup as I only use WEP |
| 18:32.28 | Jemt | stew: On Ubuntu ? |
| 18:32.34 | cahoot | Jemt: nm manages wpa too |
| 18:32.37 | stew | Jemt: on debian |
| 18:32.44 | Jemt | whut ? |
| 18:32.50 | Jemt | How did you manage that ?? |
| 18:33.07 | Jemt | stew: I've installed network-manager-gnome |
| 18:33.09 | stew | Jemt: i clicked on the thingy on my gnome panel, selected a network, and it prompted me for a WPA key |
| 18:33.17 | Jemt | stew: O.O |
| 18:33.19 | abrotman | stew clicked a thingy ... |
| 18:33.20 | jelly-home | cahoot: when did that happen (NetworkManager and wpa)? |
| 18:33.27 | abrotman | hands stew his MCSE |
| 18:33.40 | Jemt | stew: Running Etch ? |
| 18:33.49 | cahoot | jelly-home: at least the last 1-2 years |
| 18:34.08 | stew | Jemt: no, i'm running lenny |
| 18:34.09 | cahoot | jelly-home: might depend on driver maturity |
| 18:34.10 | *** part/#debian hatred- (n=phi@unaffiliated/sybec) |
| 18:34.25 | *** join/#debian chop2 (n=andrew@67.158.118.130) |
| 18:34.26 | *** join/#debian martman (n=martman@cpe-74-71-221-144.twcny.res.rr.com) |
| 18:34.28 | *** join/#debian sodio (n=sodio@va-71-1-140-171.sta.embarqhsd.net) |
| 18:34.32 | Jemt | Funny because Network-Manager is not supposed to support WPA; http://www.gnome.org/projects/NetworkManager/ (NetworkManager currently supports WEP encrypted networks, and support for WPA encryption is planned in the near future) |
| 18:34.44 | jim | so did you try it? |
| 18:34.45 | stew | !depends network-maanger etch |
| 18:34.46 | jelly-home | cahoot: I'm using wpa_supplicant with ipw2200, set it up manually in 2006 |
| 18:34.54 | enouf | minerale: http://lxr.linux.no/linux+v2.6.24/Documentation/device-mapper/zero.txt |
| 18:35.11 | Jemt | jim: Try what ? |
| 18:35.19 | cahoot | jelly-home: so do I but only to simplify matters |
| 18:35.25 | martman | i just installed postgresql but i dont seem to have a postgresql command |
| 18:35.30 | martman | cant seem to find it either |
| 18:35.36 | stew | !depends network-manager etch |
| 18:35.37 | martman | is there another package now or something? |
| 18:35.39 | dpkg | network-manager: depends on libc6 (>= 2.3.6-6), libdbus-1-3 (>= 0.94), libdbus-glib-1-2 (>= 0.71), libgcrypt11 (>= 1.2.2), libglib2.0-0 (>= 2.12.0), libgpg-error0 (>= 1.4), libhal1 (>= 0.5), libiw28 (>= 28), libnl1-pre6, libnm-util0, iproute, iputils-arping, dhcdbd (>= 1.12-2), lsb-base (>= 2.0-6), wpasupplicant (>= 0.4.8), dbus (>= 0.60), hal (>= 0.5.7.1), ifupdown, adduser |
| 18:35.42 | stew | ^^^ it depends on wpacupplicant, it would be silly for it to depend on wpasupplicant if it weren't going to support wpa |
| 18:35.44 | martman | all the guides seem to use old releases... |
| 18:35.48 | jelly-home | martman: "psql"? |
| 18:36.08 | Jemt | stew: That is true. Hmmm |
| 18:36.18 | jelly-home | stew: otoh, it's nm. |
| 18:36.26 | *** join/#debian LukeL_ (n=Luke@unaffiliated/lukel) |
| 18:36.27 | Jemt | stew: But again. It's not supposed to support WPA (notice the official website) |
| 18:36.30 | jim | postgresql-clients |
| 18:36.30 | *** join/#debian zamuroff (n=manuel@201.211.108.133) |
| 18:36.34 | hramrach | Jemt: technically you should be able to set up multiple networks with wpasupplicant in a single config so no need to switch anything once it works .. |
| 18:37.22 | Jemt | hramrach: That's not good enough. Any user of this laptop should be able to set up a new network :-/ |
| 18:37.33 | *** join/#debian Phase (i=phase@unaffiliated/phase) |
| 18:37.53 | stew | Jemt: if the official website says that, the official website is incorrect |
| 18:37.56 | hramrach | Then you probably want the clickable thhingy |
| 18:37.56 | jim | Jemt: if that's not good enough, you always have the choice of running something that is |
| 18:38.30 | Jemt | stew: Heh, okay :) |
| 18:38.45 | martman | jelly-home i have that command, am supposed to get a monitor command prompt though right? i just get (as root) "psql: FATAL: database "root" does not exist" |
| 18:39.16 | jim | martman: you can't do it as root, first off |
| 18:39.26 | Jemt | stew: Is it possible that my laptop does not support WPA properly since it is not showing up in network-manager ? |
| 18:39.26 | madclicker | hi, is there a way to do "fallback =1" with grub(etch)? |
| 18:39.31 | *** join/#debian Havis_ (n=Havis@adsl-dyn240.91-127-98.t-com.sk) |
| 18:39.33 | davi | is debian insecure? |
| 18:39.38 | hramrach | Note that the clickable thingy disables network during upgrade. But if you d not plan upgrading the machine while connected through ssh you should be OK ;-) |
| 18:39.44 | martman | ummm....why? |
| 18:39.51 | *** join/#debian ryan`c (n=ryan@c-67-160-205-109.hsd1.ca.comcast.net) |
| 18:39.54 | jim | !8ball is debian insecure? |
| 18:39.54 | dpkg | Negative. |
| 18:40.05 | jim | davi: there you have it! |
| 18:40.13 | jim | you heard it here first! |
| 18:40.14 | stew | Jemt: i don't know. which driver are you using? |
| 18:40.22 | *** join/#debian joebrunner (n=joe@206.81.49.171) |
| 18:40.22 | davi | martman, jim, the ssh issue, etc. |
| 18:40.27 | asg | davi: /topic |
| 18:40.42 | ryan`c | hey, does anyone with a nopt-updated version of ssh/openssl wanna help me with a quick test of something? |
| 18:40.45 | jim | martman: I don't believe pg will let you |
| 18:41.01 | Jemt | stew: airo I think |
| 18:41.06 | davi | asg, debian is on /topic here. isn't it? |
| 18:41.10 | Jemt | stew: At least that module shows up in "lsmod" |
| 18:41.14 | martman | jim wont run under my normal user either....weird |
| 18:41.15 | asg | davi: read the /topic |
| 18:41.20 | abrotman | martman: it's psql .. and you have to specify a DB .. otherwise it uses your $username .. and don't use psql as root |
| 18:41.22 | *** part/#debian ryan`c (n=ryan@c-67-160-205-109.hsd1.ca.comcast.net) |
| 18:41.33 | davi | thanks asg |
| 18:41.37 | abrotman | martman: su to root .. then `createuser` .. and make one for yourself .. |
| 18:41.51 | jim | martman: you could try creating a database and connecting to that (man createdb, man psql for details) |
| 18:41.51 | abrotman | martman: erm .. WRONG |
| 18:42.01 | *** mode/#debian [+l 900] by debhelper |
| 18:42.04 | abrotman | martman: su to root .. then su to 'postgres' .. then `createuser` .. and make one for yourself .. |
| 18:42.27 | jim | I think he's already root now |
| 18:42.31 | *** join/#debian PleXuS (n=gotYa@d54C2F406.access.telenet.be) |
| 18:42.35 | *** join/#debian ndryden (n=ndryden@c-68-62-80-172.hsd1.mi.comcast.net) |
| 18:42.41 | Jemt | stew: http://fixunix.com/debian/132423-thinkpad-airo-driver-wpa.html <= Quite interesting |
| 18:42.44 | abrotman | that's fine .. i'm doing the completeness bit |
| 18:42.46 | asg | abrotman: sudo su - postgres (pass go, grab the cash, and get a beer) |
| 18:43.04 | abrotman | su - postgres .. whatever |
| 18:43.17 | abrotman | asg: not everyone has sudo .. this isn't ubuntu! |
| 18:43.23 | jim | sudo sudo postgres psql? |
| 18:43.42 | asg | abrotman: no excuse |
| 18:43.54 | abrotman | it is if the command fails? |
| 18:43.57 | rwaite | i run as root, in fact, no other accounts except for root exist on this machine |
| 18:44.01 | jim | asg: it's their choice to install that or not |
| 18:44.02 | sandman | May multiple memmap parameters be specified to the kernel? |
| 18:44.10 | *** part/#debian varney (n=varney@dsl-035-051.cust.imagine.ie) |
| 18:44.23 | abrotman | !moron rwaite |
| 18:44.23 | dpkg | rwaite: You are moron #18 |
| 18:44.27 | asg | jim: of course, I was joking with ab |
| 18:44.33 | rwaite | lol |
| 18:44.45 | ribasushi | !moron ribasushi |
| 18:44.45 | dpkg | ribasushi: You are moron #25 |
| 18:44.51 | abrotman | dpkg: flw52 is <rwaite> i run as root, in fact, no other accounts except for root exist on this machine |
| 18:44.52 | dpkg | okay, abrotman |
| 18:44.52 | milligan_ | Running debian etch kernel 2.6.18-6-686 with the latest nvidia drivers from the nvidia site. I'm using gnome as my window manager, and now I'd like to fiddle with compiz a bit. Is the installation really going to be as easy and painless as the wiki is indicating? (http://wiki.debian.org/Compiz) |
| 18:44.53 | rwaite | am not, root is the most powerful account |
| 18:44.54 | Jemt | stew: Is it possible to load another driver that supports WPA to check if it shows in Network Manager ? |
| 18:44.56 | ribasushi | :( |
| 18:45.07 | ribasushi | how do I become more moronic? |
| 18:45.13 | rwaite | why would i want to limit my power? |
| 18:45.45 | SparFux | why moronic? |
| 18:45.49 | rwaite | i mean, i hunt down some obscure config file only to rm it and get a permission denied error |
| 18:45.49 | stew | Jemt: only if you have a wireless card supported by said driver |
| 18:45.51 | rwaite | no good |
| 18:46.11 | dondelelcaro | uh... it's not like tools exist to become root when you need to be |
| 18:46.14 | ribasushi | rwaite: because Gandalf didn't want the ring :D |
| 18:46.14 | Jemt | stew: Okay :-/ |
| 18:46.24 | jim | rwaite: if you're asking that question, you don't do sysad stuff... |
| 18:46.27 | *** join/#debian brett (n=brett@meat.kavi.com) |
| 18:46.35 | jelly-home | ... dudes, obvious troll? |
| 18:46.40 | *** join/#debian krohn (n=krohn@0x6.net) |
| 18:46.42 | jim | rwaite: that |
| 18:46.42 | brett | Hi, I'm trying to get thunderbird to run on unstable |
| 18:46.45 | jim | err |
| 18:46.50 | *** join/#debian mentor (n=matthew@0-3-d-34-ee-9.gr.esol.dur.ac.uk) |
| 18:46.51 | brett | Is that just a losing proposition? |
| 18:47.15 | dondelelcaro | brett: any reason why you're not just using icedove? |
| 18:47.18 | rwaite | jim: lol i know |
| 18:47.21 | jim | rwaite: that is a choice you make... I did too for like two years, but then I started managing a computer lab |
| 18:47.41 | rwaite | i typically just set sudo to not ask for passwd |
| 18:47.43 | sandman | Like this?: vmlinuz memmap=0K$480M memmap=482M$1024M ? |
| 18:47.48 | *** join/#debian visik7 (n=dksakd@unaffiliated/visik7) |
| 18:47.57 | xingu | stew: wpasupplicant has been interfaces-ified; there's up/ down scripts that start/stop it as needed |
| 18:48.09 | rwaite | i trust myself enough to at least think it over before '^[home]sudo 'ing |
| 18:48.19 | *** join/#debian joebrunner (n=joe@206.81.49.171) |
| 18:48.26 | xuser | How can I extract a .deb file? |
| 18:48.29 | stew | xingu: i know |
| 18:48.39 | *** join/#debian ApOgEE- (n=apogee@243.22.111.218.klj02-home.tm.net.my) |
| 18:48.39 | SparFux | xuser: dpkg -x file.deb |
| 18:48.51 | xuser | thx |
| 18:48.59 | *** part/#debian ApOgEE- (n=apogee@243.22.111.218.klj02-home.tm.net.my) |
| 18:49.15 | jim | you learn very quickly that in order to figure out how to give plain users abilities to use resources (but not control them), you have to be a plain user yourself and use your sysad powers to grant yourself those rights so you can see how it's done |
| 18:49.29 | *** part/#debian SparFux (n=raoul@e182026173.adsl.alicedsl.de) |
| 18:49.33 | xingu | eating one's own dog food |
| 18:49.44 | rwaite | actually, i was reading up on vista, and mandatory access control, does linux offer anything like that |
| 18:49.51 | asg | rwaite: SELinux |
| 18:49.59 | enouf | acls |
| 18:50.03 | rwaite | that's the nsa patches right |
| 18:50.09 | asg | nods |
| 18:50.10 | rwaite | acls are different |
| 18:50.23 | extor | NSA has a back door in vista too? Like a really big one this time? |
| 18:50.28 | rwaite | from what i understand, you can have init be unkillable by anything with that |
| 18:50.31 | rwaite | even root |
| 18:50.44 | *** join/#debian braydon (n=braydon@68-190-217-86.dhcp.psdn.ca.charter.com) |
| 18:50.50 | abrotman | !ot |
| 18:50.50 | dpkg | Please keep the discussions in #debian on-topic (i.e., Debian support), or return to the topic after a short while. #debian-offtopic is the place for longer off-topic discussions. |
| 18:51.00 | *** join/#debian sohail (n=Sohail@unaffiliated/sohail) |
| 18:51.00 | asg | extor: no, Microsoft put one in and gives it away to whatever organization asks for it |
| 18:51.04 | rwaite | < me? |
| 18:51.11 | jim | rwaite: so why would you want to do that? wouldn't it restrict your power? |
| 18:51.21 | *** join/#debian nick01 (i=nick01@91.123.7.40) |
| 18:51.42 | rwaite | jim: i'm just being facetious, i never run as root :p |
| 18:51.55 | nick01 | can ifconfig change the mac address permanently ? or is it stored in a file somewhere ? cause the change survived reboot somehow |
| 18:51.56 | rwaite | i like to have as little power as possible to get the job done |
| 18:52.02 | Jemt | BRB |
| 18:52.25 | enouf | don't fault me for MPoop's improper use of mnemonics and english |
| 18:52.54 | enouf | 'access control' accounts for 2/3 of ACL |
| 18:53.12 | *** join/#debian format_c (n=koeppea@p57A71C35.dip0.t-ipconnect.de) |
| 18:53.14 | rwaite | mandatory |
| 18:53.23 | rwaite | not discretionary |
| 18:53.24 | krohn | nick01: do a "man interfaces" and search for "hwaddress" |
| 18:53.33 | *** join/#debian shellito (n=shellito@200.122.229.14) |
| 18:53.36 | enouf | mandate this homey |
| 18:53.38 | rwaite | ponders switching to mutt because thunderbird is really irritating |
| 18:53.50 | *** join/#debian cloakable (n=cloakabl@host81-151-35-225.range81-151.btcentralplus.com) |
| 18:54.13 | *** join/#debian schmidtsmikey (n=schmidts@port-92-195-63-88.dynamic.qsc.de) |
| 18:54.53 | nick01 | krohn, how do I search inside a man page |
| 18:54.54 | nick01 | ?* |
| 18:54.57 | hramrach | rwaite: mutt is too, it takes ages to read/sort the mbox, and you cannot do anything while it is sorting throgh it |
| 18:55.02 | asg | nick01: /keyword |
| 18:55.03 | enouf | heh - like we need yet another 'MAC' meaning ..ugh .. mpoop |
| 18:55.06 | extor | ebay has a really nice picture show with play-pause-forward-back in which you have your pics |
| 18:55.06 | krohn | nick01: / (slash) |
| 18:55.43 | *** join/#debian ma3x_ (i=ma3x@unaffiliated/ma3x) |
| 18:55.46 | *** join/#debian Phase (i=phase@unaffiliated/phase) |
| 18:55.51 | xingu | hands enouf a big MAC |
| 18:56.00 | *** join/#debian tomaw_ (i=tom@freenode/staff/tomaw) |
| 18:56.09 | nick01 | krohn, any key for next result ? :) |
| 18:56.15 | enouf | chomps on the corn raised cow |
| 18:56.18 | asg | xingu: don't forget to make him pay his /etc/mactab |
| 18:56.37 | jim | munches on an ear of cow-raised corn |
| 18:57.08 | krohn | nick01: 'n' or something like that .. pls check manpage of 'less' |
| 18:57.29 | binwiederhier | hm, i can't find a backport for unison, i need unison 2..27.57 on my etch server |
| 18:57.32 | binwiederhier | any ideas? |
| 18:57.33 | rwaite | hramrach: what about imap? |
| 18:57.52 | rwaite | TB is just so slow, and it seems extremely unresponsive sometimes |
| 18:58.11 | asg | binwiederhier: /msg dpkg simple sid backport |
| 18:58.18 | sohail | so this ssl bug... does it affect rsa keys as well? |
| 18:59.15 | *** join/#debian DaveDorm (n=dave@pool-71-100-16-226.tampfl.dsl-w.verizon.net) |
| 18:59.17 | Phase | `apt-get autoremove` won't remove anything that could possibly be needed by another package installed, right? |
| 18:59.18 | sandman | Hm. That's odd. No kernel-patch-vserver package in etch =) |
| 18:59.46 | *** join/#debian koeppea (n=koeppea@p57A71C35.dip0.t-ipconnect.de) |
| 19:00.32 | *** join/#debian davi_ (i=davi@57.Red-88-2-100.staticIP.rima-tde.net) |
| 19:00.40 | *** join/#debian ma3x_ (i=ma3x@unaffiliated/ma3x) |
| 19:01.10 | *** join/#debian |inuxmath (n=mike@198.188-224-87.telenet.ru) |
| 19:01.12 | nick01 | krohn, that man page doesnt seem to tell me where the mac setting would be saved if I configured it from terminal- as I said it remains the same after reboot |
| 19:01.14 | enouf | rwaite: http://lxr.linux.no/linux+v2.6.25/security/smack/Kconfig |
| 19:01.44 | rwaite | hey is there a way to get perl 5.10 on debian |
| 19:01.57 | nick01 | krohn, and I looked in /etc/network/if-up.d and if-pre-up.d/ doesnt seem to be set there |
| 19:02.01 | *** mode/#debian [+l 894] by debhelper |
| 19:02.08 | enouf | how's that for some dope? :-P |
| 19:02.21 | msshams | i cant kill a process. how can kill it? |
| 19:02.34 | simonrvn | rwaite: yes |
| 19:02.37 | *** join/#debian amphi (n=amphi@user-5441bc6a.lns2-c7.dsl.pol.co.uk) |
| 19:02.40 | *** join/#debian sodio (n=sodio@va-71-1-140-171.sta.embarqhsd.net) |
| 19:02.50 | hramrach | msshams: by using a big hammer on your computer |
| 19:02.52 | rwaite | simonrvn: i tried searching the packages but couldnt find it |
| 19:03.03 | Deezire | rwaite: www.perl.org |
| 19:03.04 | rwaite | enouf: looks nice |
| 19:03.06 | *** join/#debian Tramp (i=mt@d83-180-92-153.cust.tele2.ch) |
| 19:03.18 | rwaite | i wanna keep the package system if possible |
| 19:03.22 | simonrvn | rwaite: it's in debian now |
| 19:03.24 | asg | msshams: kill -9 (if that doesn't work, it's probably a zombie) |
| 19:03.34 | hramrach | msshams: what process, what was it doing, in what state is it stuck? |
| 19:03.51 | rwaite | libperl5.10 is in sid |
| 19:03.55 | rwaite | is that what you mean |
| 19:04.39 | rwaite | hmm |
| 19:04.41 | rwaite | okay |
| 19:05.16 | *** part/#debian sohail (n=Sohail@unaffiliated/sohail) |
| 19:05.57 | *** join/#debian cloakable (n=cloakabl@host81-151-35-225.range81-151.btcentralplus.com) |
| 19:06.11 | simonrvn | i meant the whole of debian's perl release |
| 19:06.17 | *** join/#debian Agiofws (n=agiofws@athedsl-231360.home.otenet.gr) |
| 19:06.59 | enouf | nick01: /msg dpkg z25 |
| 19:07.11 | *** join/#debian zorton (i=zorton@unaffiliated/zorton) |
| 19:07.29 | *** join/#debian infinity0 (n=infinity@xl269.quns.cam.ac.uk) |
| 19:07.38 | *** join/#debian seemawn (n=seemawn@p5DC2F57C.dip.t-dialin.net) |
| 19:08.15 | *** join/#debian Orion_X11 (n=vagner@189.14.64.140) |
| 19:08.27 | *** part/#debian infinity0 (n=infinity@xl269.quns.cam.ac.uk) |
| 19:08.29 | rwaite | i found it in sid, but the 5.8 in lenny says essential so id have to keep it around |
| 19:08.49 | *** join/#debian dagar (n=dagar@206-248-137-66.dsl.teksavvy.com) |
| 19:09.12 | nick01 | enouf, tks, that was it |
| 19:09.15 | simonrvn | yes. many base and essential stuff depends on a good working perl |
| 19:09.25 | *** join/#debian user__ (n=user@85.218.163.179) |
| 19:09.39 | Jemt | Back |
| 19:09.43 | rwaite | i'm just gonna leave 5.8 |
| 19:09.48 | rwaite | i doubt i need 5.10 anyway |
| 19:10.02 | zorton | thought you guys might appreciate this: private key created 08-30-06 :) |
| 19:10.03 | stoned | rahul, ping |
| 19:10.06 | zorton | now it's not so hard :) |
| 19:10.16 | *** join/#debian olivierk_ (n=olivier@olivierk.org) |
| 19:11.07 | Jemt | Can someone help me get Wireless to work on my other laptop ? The network card is not detected and I'm not sure what chipset it uses |
| 19:12.05 | enouf | Jemt: /msg dpkg laptop |
| 19:12.06 | *** join/#debian abchirk (n=rapunzel@cl-2502.ham-01.de.sixxs.net) |
| 19:12.11 | Orion_X11 | How can I ssh my own machine? I can ping my ip, but when I try to ssh it this message appear > ssh_exchange_identification: Connection closed by remote host. I think that it has to do with some misconfiguration in ssh_config (???!!!). Any help? |
| 19:12.11 | Jemt | Ok |
| 19:12.14 | *** join/#debian Bulldog (n=Bulldog@011.254.dsl.concepts.nl) |
| 19:12.37 | *** join/#debian gener1c (n=gagagugu@unaffiliated/gener1c) |
| 19:13.07 | enouf | use 'lspci' - then show us 'lspci -nn | grep -i wireless' (perhaps) |
| 19:13.15 | *** join/#debian tolecnal (n=tolecnal@215.80-203-134.nextgentel.com) |
| 19:13.35 | stew | Orion_X11: check /var/log/auth.log ; and if you don't find the answer there, /msg dpkg debug sshd |
| 19:13.56 | *** join/#debian ay^ (n=ay@c-2465e253.1129-1-64736c10.cust.bredbandsbolaget.se) |
| 19:15.10 | n3kl | I looked at the article that dpkg refered to for adobe flash and all it toldme was to install the non-free flashplayer, which does not exist. What is the standard method toinstall flash support? |
| 19:15.51 | *** join/#debian milligan_ (n=Milligan@66.84-49-202.nextgentel.com) |
| 19:15.59 | *** part/#debian brett (n=brett@meat.kavi.com) |
| 19:16.43 | *** join/#debian sebn (n=seb@dra38-6-88-164-123-57.fbx.proxad.net) |
| 19:16.43 | chop2 | rwaite: You can switch your sources.list to unstable, install perl 5.10 from unstable and whatever else needs to be upgraded to the sid versions, and then switch back to testing and wait for testing to catch up to unstable |
| 19:17.01 | *** join/#debian NthDegree (n=nth@unaffiliated/forcerain) |
| 19:17.09 | chop2 | rwaite: If you really want perl 5.10, that is :-). Your system will experience a reduction in reliability, as with all upgrades to sid, of course |
| 19:17.11 | Orion_X11 | <PROTECTED> |
| 19:17.11 | *** join/#debian mata22 (i=ssss33@86.126.110.86) |
| 19:17.21 | simonrvn | not a good idea. AT ALL. |
| 19:17.28 | *** join/#debian PegaS (n=pegas@217.10.38.186) |
| 19:17.31 | simonrvn | chop2, rwaite ^^^ |
| 19:17.39 | chop2 | simonrvn: Why not a good idea? |
| 19:17.53 | simonrvn | think a bit, and you'll see why. |
| 19:17.53 | *** join/#debian lindenle (n=lindenle@216-160-160-240.hlrn.qwest.net) |
| 19:18.03 | pinto3 | win 2 |
| 19:18.06 | debian2_6_24_1am | are you trying 64bit flash? |
| 19:18.07 | lindenle | Is there a pre-built debian kernel with the ext2online patch? |
| 19:18.14 | Orion_X11 | stew: No answer there |
| 19:18.18 | *** part/#debian opoftheuniverse (n=mark@202.88.255.201) |
| 19:18.31 | stew | !debug sshd |
| 19:18.31 | dpkg | To debug sshd (server), run this as root on the server: "/usr/sbin/sshd -d -p 2222". Then use "ssh -p 2222 username@servername" on the client. |
| 19:18.36 | chop2 | simonrvn: I think this happened before -- you told me something was a bad idea, I disagreed and asked why you thought it was a bad idea, and you refused to tell me and eventually /ignored me. |
| 19:18.45 | n3kl | 32 bit flash |
| 19:18.56 | lindenle | !ext2online |
| 19:18.56 | dpkg | i heard ext2online is part of ext2resize, it allows you to hot resize ext2 filesystems. Combined with LVM's e2fsadm, it makes a very cool and useful tool. the kernel patches are in /usr/share/doc/ext2resize/patches/ but they're slightly out of date (2.4.0), or (fooz's 2.4.17 patch: http://sync.dyndns.org/~walker/files/ext2online-2.4.17.diff) |
| 19:19.23 | chops | simonrvn: I've now changed my nick back, so if you still have that /ignore... well, you won't see this :-) |
| 19:20.11 | *** join/#debian mauser (n=mauser@83.151.31.42) |
| 19:20.21 | simonrvn | perl is `essential', it's installed with the installer even. you're telling him/her to do something not usual, and many of the modules are api-specific, and some have binary .sos in them. IT'S GOING TO BREAK SHIT. |
| 19:20.35 | simonrvn | chops: i can see you fine. |
| 19:20.39 | *** part/#debian Buck (n=Buck@j2113.upc-j.chello.nl) |
| 19:20.56 | debian2_6_24_1am | go to adobe web site and get it |
| 19:21.09 | simonrvn | !flash non-free |
| 19:21.16 | simonrvn | that's not it... |
| 19:21.17 | assasukasse | hi everyone |
| 19:21.23 | assasukasse | i was reading about the openssh big |
| 19:21.25 | assasukasse | bug |
| 19:21.30 | NthDegree | assasukasse: OpenSSL |
| 19:21.33 | *** part/#debian mauser (n=mauser@83.151.31.42) |
| 19:21.36 | neoark | sorry newbie how do u disable gnome and start in server enviroment |
| 19:21.42 | assasukasse | NthDegree: openssl only? |
| 19:22.00 | NthDegree | assasukasse: it affected OpenSSH keys if you generated them at that time |
| 19:22.02 | markybob | neoark, update-rc.d -f gdm remove |
| 19:22.05 | alturiak | openssl and all applications which use openssl-keys... |
| 19:22.08 | cusco | uh... openssl is a discussion topic now... right? |
| 19:22.08 | *** join/#debian flypiper (n=46cub@75.149.68.164) |
| 19:22.13 | *** part/#debian lindenle (n=lindenle@216-160-160-240.hlrn.qwest.net) |
| 19:22.25 | asg | neoark: /msg dpkg nodm |
| 19:22.27 | *** join/#debian quitte (n=quitte@f051081016.adsl.alicedsl.de) |
| 19:22.29 | assasukasse | NthDegree: yes i did, so i wanted to ask...do i need to rebuild all the keys or there is another way |
| 19:22.44 | simonrvn | asg: i'm glad you were able to parse that |
| 19:22.54 | NthDegree | assasukasse: the advisory should be able to tell you whether or not you need to |
| 19:23.05 | asg | simonrvn: markybob gave the non-portable answer first though |
| 19:23.11 | NthDegree | if your SSH keys were made before you had the bad OpenSSL you should be fine |
| 19:23.21 | NthDegree | if not then yes remake them |
| 19:23.23 | *** join/#debian agnitio_ (n=magnus@h-91-126-123-244.wholesale.rp80.se) |
| 19:23.23 | simonrvn | didn't see his reply |
| 19:23.36 | chops | simonrvn: Only a little more than the extent to which it's broken in sid. Anything that declares its API dependencies will get upgraded to sid at the same time perl is upgraded. Anything that doesn't declare its API dependencies is broken anyway, in a way that can affect sid users as well. It's true that what I recommended is more risky than just upgrading to sid. |
| 19:23.43 | assasukasse | NthDegree: this i dont remember, if there is a way to check? or just i remake em |
| 19:23.46 | asg | NthDegree: unless you logged into a server using the private/pub keys and that server had bad libraries. |
| 19:24.01 | simonrvn | chops: good point |
| 19:24.28 | *** part/#debian jzu_ (i=jussi@jus.si) |
| 19:24.30 | stew | asg: client, not server |
| 19:24.32 | *** join/#debian cyboreal (n=tajore@s1-101-rb4.ka.centurytel.net) |
| 19:24.54 | assasukasse | NthDegree: ssh-vulnkeys doesn't tell me anything bout my keys..do i dunno what to do |
| 19:24.58 | assasukasse | *so |
| 19:25.05 | stew | asg: logging into a bad server with a good key is ok. logging into a server with a bad client with a strong key is still bad |
| 19:25.17 | *** join/#debian minus198_ (n=asdf@c83-250-74-212.bredband.comhem.se) |
| 19:25.25 | asg | stew: ah, okay. I got it backwards then. Thanks. |
| 19:25.28 | NthDegree | assasukasse: regenerate them is the best way |
| 19:25.48 | NthDegree | and let everyone know your current public SSH key is terminated and won't be used |
| 19:25.49 | *** join/#debian juliank0 (n=juliank@ubuntu/member/juliank) |
| 19:25.54 | NthDegree | everyone appropriate* |
| 19:26.09 | assasukasse | NthDegree: just make new ones right? i can't regenerate them keeping the same pubkey..since i use for ssh and i am rather far from there.. |
| 19:26.25 | NthDegree | assasukasse: basically |
| 19:26.39 | simonrvn | mine's from 2004 =) |
| 19:27.08 | NthDegree | hehe I don't think Debian will be forgetting this anytime soon xD |
| 19:27.13 | assasukasse | any advice about the bytes the key should have? 4096 is fine? |
| 19:27.23 | dondelelcaro | assasukasse: 2048 is probably even ok. |
| 19:27.30 | NthDegree | 2048 is easier to generate |
| 19:27.35 | dondelelcaro | (more is probably more secure, but slower) |
| 19:27.43 | NthDegree | 4096 takes a while |
| 19:27.47 | NthDegree | and 8192 is painful |
| 19:28.04 | NthDegree | (if 8192 can even be done properly?) |
| 19:28.06 | alturiak | my mobile needs like 3 minutes to connect with a 4096 key :( |
| 19:28.35 | *** join/#debian jkugler (n=jkugler@216-67-98-32.static.acsalaska.net) |
| 19:28.39 | zorton | ssh-vulnkey isn't in sid from the looks of it |
| 19:28.44 | NthDegree | i'm so glad I generated my SSH and GPG keys with Fedora before I made the switch hehehe |
| 19:28.46 | Saar | is there something like pastebin in debian which i could install for users to drop in stuff like pdf files and what have you they can link to in emails, so as to avoid big attachments? |
| 19:29.03 | Orion_X11 | Do I have to uncoment and set to "yes" > "#ForwardAgent yes #ForwardX11 yes #port 22" this 3 lines in ssh_config for me to ssh my on computer? |
| 19:29.18 | asg | Orion_X11: no |
| 19:29.24 | NthDegree | Orion_X11: those are the defaults that are commented |
| 19:29.32 | NthDegree | only uncomment if you want to change from the default |
| 19:29.39 | NthDegree | i.e. ForwardX11 no |
| 19:29.53 | jkugler | Don't know if this is a known bug yet. I upgraded an Etch system with the SSH upgrades, and it regenerated the ssh keys. But even the new keys are on the black list, so the server won't accept new connections. Fixes? Ideas? |
| 19:29.57 | *** join/#debian kevind23 (n=rivalsou@cpe-74-71-65-146.twcny.res.rr.com) |
| 19:30.22 | binwiederhier | can i create a backport-package on a virtual machine (etch system) and then just install it on my real server? |
| 19:30.25 | stew | jkugler: what version of openssl is installed? |
| 19:30.27 | binwiederhier | also etch |
| 19:30.55 | jkugler | 0.9.8e-4 I've done all the apt-get update/dist-upgrades. |
| 19:31.08 | *** join/#debian xerophytev (n=xerophyt@216.40.38.232) |
| 19:31.22 | jkugler | And the ssh blacklist package was installed, so I'm pretty sure I'm pulling from the right place. |
| 19:31.28 | Orion_X11 | NthDegree: When I try to ssh myself it says > "ssh_exchange_identification: Connection closed by remote host" |
| 19:31.31 | hilikus` | how can i update just openssl? |
| 19:31.37 | hilikus` | not all package |
| 19:31.45 | xerophytev | if i restart the bind .. does it clear the dns cache ? |
| 19:31.55 | xerophytev | or do i have clear it manually |
| 19:32.22 | *** join/#debian zeroshift (n=zeroshif@205.215.116.226) |
| 19:32.28 | *** join/#debian minus__ (n=asdf@83.250.74.212) |
| 19:32.29 | jkugler | stew: Yup, my sources are ftp.us.debian.org/debian/ and security.debian.org |
| 19:32.31 | rwaite | binwiederhier: yes, that's exactly what i do |
| 19:32.33 | NthDegree | hmmm |
| 19:32.39 | NthDegree | never seen that error before |
| 19:32.45 | stew | jkugler: what version of openssl is installed |
| 19:32.54 | rwaite | just make sure the etch system in the vm is pretty similar to the system you want to install it on |
| 19:33.17 | binwiederhier | rwaite: ok. so i only have to set up an etch system, damn it, that will take ages again, but thanks for the information |
| 19:33.20 | jkugler | stew: Sorry...I answered, but didn't prefix your name. OpenSSL 0.9.8e-4 I've done all the apt-get update/dist-upgrades. And the ssh blacklist package was installed, so I'm pretty sure I'm pulling from the right place. |
| 19:33.33 | rwaite | binwiederhier why are you doing this |
| 19:33.43 | binwiederhier | there is no unison backport package |
| 19:33.56 | rwaite | oh okay, yeah, thats the best way to do it |
| 19:33.57 | simonrvn | chops: obviously i wasn't thinking it through, myself. |
| 19:34.02 | asg | binwiederhier: did you try to build your own backport (/msg dpkg simple sid backport) |
| 19:34.06 | *** join/#debian vraa (n=vraa@h25.81.141.67.ip.alltel.net) |
| 19:34.14 | binwiederhier | asg: yes thats what i'm trying to do |
| 19:34.16 | stew | jkugler: yeah, that is not a fixed version |
| 19:34.19 | *** join/#debian CutMeOwnThroat (n=XXX@chem014179.chem.northwestern.edu) |
| 19:34.23 | CutMeOwnThroat | <PROTECTED> |
| 19:34.29 | binwiederhier | asg: but i dont wanna install everything on my server |
| 19:34.30 | *** part/#debian zeroshift (n=zeroshif@205.215.116.226) |
| 19:34.31 | asg | binwiederhier: then just follow the instructions in the factoid |
| 19:34.33 | ribasushi | xerophytev: you don't even have to restart: `rndc flush` will do it for you |
| 19:34.34 | rwaite | asg: he wants to cleanroom it, and move it over to the production system |
| 19:34.45 | binwiederhier | right! |
| 19:34.46 | binwiederhier | ;) |
| 19:34.48 | asg | binwiederhier: you can always remove any build-deps afterwrads |
| 19:34.51 | Eulex | binwiederhier, not necessarily, just get an etch chroot. |
| 19:34.52 | jkugler | stew: I'm pulling from deb repositories, so that mean the updated version isn't there yet? |
| 19:34.56 | chops | simonrvn: No worries |
| 19:34.58 | rwaite | i do the same, because i am anal retentive |
| 19:34.58 | stew | jkugler: the problem is that you are running an old openssl from testing, but are trying to upgrade using stable sources, and the testing verison you have installed appears to be newer than the fixed stable version, since it is from a newer upstrem version |
| 19:35.13 | stew | jkugler: its there, but you are trying to upgrade using stable repositories when you are running testing |
| 19:35.19 | binwiederhier | LOL |
| 19:35.21 | rwaite | i hate installing/uninstalling because in the back of my mind i always envision stuff being left behind and it drives me nuts |
| 19:35.33 | xerophytev | ribasushi: thaks but .. just wondering if i restart the named will it crear it .. seems like itsonly clear the cache if you do rndc flush .. when you restart it will not |
| 19:35.37 | Eulex | binwiederhier, to do that, use debootstrap |
| 19:35.52 | jkugler | stew: GRRRR! OK, yeah, before I took over this box, it had 'testing' as its source, so some misc packages from testing got installed. Thanks for pointing out the problem. I'll go pull the package manually. |
| 19:36.05 | ribasushi | xerophyte: of course it will - where would the cache be stored otherwise? :) |
| 19:36.08 | rwaite | wow i never knew of debootstrap. |
| 19:36.11 | binwiederhier | Eulex: thx, i guess i'm gonna use a virtual system anyway, i have to test a few more things |
| 19:36.17 | Eulex | binwiederhier, ok |
| 19:36.29 | ribasushi | rwaite: then you probably don't know of schroot either |
| 19:36.34 | ribasushi | rwaite: neat neat shit :) |
| 19:36.38 | sandman | Anyone familiar with running "memtest" while running linux? Is there any way I can manipulate this to cycle through all my memory in portions? |
| 19:37.00 | rwaite | wow, so you can apt-get into a debootstrap dir |
| 19:37.53 | chops | sandman: It cycles through all your memory in portions all on its own... why do you want to control its operation in more detail than "scan all my memory"? |
| 19:38.44 | sandman | chops: Because it seems to reserve memory for use |
| 19:39.03 | sandman | chops: Thus, if I wanted to test all my RAM, it'd have to reserve it all first, making my system inoperable for the duration |
| 19:39.16 | *** join/#debian arlinja (n=arm9cl@athedsl-387753.home.otenet.gr) |
| 19:39.19 | *** join/#debian sm (n=sm@pool-71-107-252-2.lsanca.dsl-w.verizon.net) |
| 19:39.36 | jkugler | stew: OK, 0.9.8c-4etch3 is now installed, and I'm still being told the keys generated are bad. |
| 19:39.37 | Orion_X11 | So. What this message mean? > "ssh_exchange_identification: Connection closed by remote host" if my ssh_config is set to default? It should work. Shouldn't it? |
| 19:39.49 | chops | sandman: Oh, I see... you want a version of memtest that works on a _running_ Linux system. I'm not familiar with that possibility; I only know of the memtest tools that you reboot into, and run on a non-running system |
| 19:39.52 | ribasushi | sandman: a full memtest takes about 5 hours for 4G, do yourself a favor, plan some downtime at night, and test properly |
| 19:40.00 | sm | hi all. what's the meaning of S (not s) in a file's group permission flags ? coreutils docs don't mention it |
| 19:40.10 | enouf | Orion_X11: 1st, i think you missed stew's trigger in channel of the "/msg dpkg debug sshd" factoid, 2) /etc/X11/xinit/xserverrc <--might need to remove '-nolisten tcp' part from that file -- also .. |
| 19:40.25 | chops | sandman: I'm sure it would be possible to do what you describe with kernel support, and it might even already exist, but the popular memtest tools all run offline |
| 19:40.44 | stew | jkugler: what version of libssl0.9.8 is installed? |
| 19:40.51 | *** join/#debian vjoe (i=hugo@a83-132-36-73.cpe.netcabo.pt) |
| 19:41.04 | vjoe | hey |
| 19:41.07 | *** join/#debian usn (n=usn@p54933C22.dip.t-dialin.net) |
| 19:41.10 | sandman | ribasushi: I was planning on making a system where "nice -n 19 memtest <somefragmentofmemory>" would run constantly. When an error would be found, it'd automatically mark it as reserved to the kernel. |
| 19:41.13 | Tramp | sm: it means, the corresponding x-bit is not set |
| 19:41.27 | enouf | Orion_X11: if you are trying to use X11 forwarding; "/msg dpkg ssh x11 forwarding" |
| 19:41.27 | sandman | This would allow a system to sustain heavy damage to its RAM, and continue being operational, all while running. |
| 19:41.29 | jkugler | stew: Didn't think about that...be right back. |
| 19:41.54 | sandman | So long, of course, as the damage doesn't occur in the first 2 or so megabytes of memory where the kernel resides... |
| 19:42.02 | *** join/#debian craigevil-eee (n=craig@114.64.205.68.cfl.res.rr.com) |
| 19:42.12 | *** join/#debian vjt_ (i=vjt@openssl.it) |
| 19:42.36 | chops | sandman: If a system sustains heavy damage to its RAM, you do not want it to continue being operational. You want to shut it down and replace the memory. It only takes one bad bit in a section that the memory scanner isn't going to get around the checking for another 50 milliseconds to corrupt your filesystems. |
| 19:42.48 | *** join/#debian OncrAckz (n=ircap751@111.Red-88-0-203.dynamicIP.rima-tde.net) |
| 19:42.52 | ribasushi | sandman: this is the dumbest thing I ever heard :) |
| 19:43.01 | ribasushi | chops++ |
| 19:43.03 | *** join/#debian vampirefrog (n=fewbars@91.192.140.44) |
| 19:43.04 | chops | sandman: If you want to write such a tool, knock yourself out -- just please don't call it 'memtest', there are already several tools called that |
| 19:43.04 | *** join/#debian Suprano (i=suprano@pD9564B22.dip.t-dialin.net) |
| 19:43.10 | jkugler | stew: That's it. THANK YOU!! |
| 19:43.17 | rwaite | datacorruptiontest? |
| 19:43.24 | *** join/#debian tecky (n=tecky@cpe-74-67-30-26.nycap.res.rr.com) |
| 19:44.07 | ribasushi | this DSA stuff... does it apply to apache certs too? |
| 19:44.21 | *** join/#debian milligan_ (n=Milligan@66.84-49-202.nextgentel.com) |
| 19:44.27 | sandman | ribasushi: Thanks. |
| 19:44.41 | sm | Tramp: I don't understand.. wouldn't it simply be - then ? |
| 19:44.49 | Eulex | ribasushi, yes |
| 19:44.53 | *** join/#debian khaleel5000 (n=khaleel@116.71.73.249) |
| 19:44.55 | *** join/#debian SEcki_ (n=SEcki@e181095094.adsl.alicedsl.de) |
| 19:44.55 | sandman | Well, I think that sort of thing should be do-able, nontheless, one way or another. |
| 19:45.29 | *** join/#debian doff (n=doff@89.222.213.179) |
| 19:45.33 | Tramp | sm: no. sgid is set, but not the corresponding x. - would mean neither is set. |
| 19:46.12 | chops | sandman: Certainly it's doable. It just sounds very difficult and not terribly useful to me. |
| 19:46.24 | sm | aha.. thanks. And what does that mean in practice ? any idea where to find this documented ? |
| 19:46.25 | *** join/#debian versuchsanstalt (n=versuchs@p54856834.dip.t-dialin.net) |
| 19:46.28 | *** join/#debian spidey (n=spidey@97.95.153.97) |
| 19:46.30 | *** join/#debian LeGreffi3R_ (n=greffier@089156181122.chello.fr) |
| 19:46.40 | simonrvn | ribasushi: yes, pems also |
| 19:46.45 | ribasushi | what's funny is everyone knows the name of the poor chap who made the debian change, and no one seems to know which motherfucker used the same seed splicer function in different places |
| 19:46.51 | sandman | chops: It'd save time, primarily. Instead of a system just screwing up, it could instead say "hey, I found a bad memory location @ such and such and mapped it as reserved" |
| 19:46.56 | *** join/#debian |inuxmath (n=mike@198.188-224-87.telenet.ru) |
| 19:47.04 | sm | it indicates a misconfigured perm, basically ? |
| 19:47.11 | rwaite | i wanna know who found the bug |
| 19:47.13 | Tramp | sm: /msg dpkg permissions should give you some links |
| 19:47.22 | sandman | chops: Then, if a system has been on for years and years, I could know before-hand that it's starting to go bad. |
| 19:47.42 | sandman | chops: I wouldn't have to learn of the BadRAM only when the whole system gets screwed up and suffers filesystem corruption. |
| 19:47.47 | valdyn | sandman: pc hardware does not do this. |
| 19:47.53 | valdyn | sandman: there'S hardware that does. |
| 19:47.55 | simonrvn | ribasushi: all pems that were made within the dates described with the openssh stuff |
| 19:48.01 | sandman | Why must it be a hardware thing |
| 19:48.22 | sandman | Well, whatever. |
| 19:48.27 | enouf | !tell sm -about permissions |
| 19:48.28 | *** join/#debian konadr (n=Kon@unaffiliated/konadr) |
| 19:48.38 | enouf | ooops, late - sorry |
| 19:48.53 | jelly-home | sandman: your memory controller and ECC RAM should have warned you your RAM is dying |
| 19:48.54 | sm | thanks, all |
| 19:49.04 | *** join/#debian NetEcho (i=NetEcho@unaffiliated/netecho) |
| 19:49.29 | rwaite | i once heard *BSD is *dying* |
| 19:49.36 | khaleel5000 | hello , from which repository can I get kickoff (the new kde menu) for etch? |
| 19:49.42 | NetEcho | uhm specific flavours of BSD maybe |
| 19:49.46 | NetEcho | but not all BSD |
| 19:49.52 | NetEcho | not yet atleast |
| 19:49.53 | *** join/#debian bahadunn (n=bahadunn@24.244.172.71) |
| 19:49.59 | valdyn | khaleel5000: experimental i guess |
| 19:50.00 | sandman | jelly-home: My memory controller didn't tell me my RAM was bad, but I don't have ECC |
| 19:50.23 | valdyn | sandman: all ram is constantly used in a modern os |
| 19:50.30 | abrotman | or should be |
| 19:50.34 | bahadunn | anyone know what happened in openssh-server since security updates? Seems like keys do not work anymore |
| 19:50.37 | jelly-home | sandman: ... er, so how do you expect that you'll know about problems with RAM? |
| 19:50.49 | abrotman | bahadunn: works fine for me |
| 19:50.50 | sandman | valdyn: Well in my case, 80% is being used for cache at the moment. |
| 19:50.57 | abrotman | sandman: that's normal and good |
| 19:51.03 | *** join/#debian Mash_ (n=Mash@p5B12D66D.dip.t-dialin.net) |
| 19:51.03 | *** part/#debian dpowerd (n=dpower@c-71-194-110-66.hsd1.il.comcast.net) |
| 19:51.06 | valdyn | sandman: same thing, its used |
| 19:51.14 | sandman | valdyn: It may be freed. |
| 19:51.34 | simonrvn | i don't know how many times i've heard that BS about "*BSD is dying"... |
| 19:51.38 | jelly-home | sandman: if you have non-ECC RAM, you can only detect the corruption after it happens. No way around it |
| 19:52.00 | *** mode/#debian [+l 903] by debhelper |
| 19:52.06 | *** join/#debian chomwitt (n=aliosa@ppp205-87.adsl.forthnet.gr) |
| 19:52.11 | valdyn | sandman: youre proposing some kind of software level ecc |
| 19:52.12 | madclicker | hi, is there a way to do "fallback =1" with grub(etch)? |
| 19:52.20 | valdyn | sandman: no one wants to implement that obviously |
| 19:52.23 | sandman | valdyn: Not really. |
| 19:52.29 | valdyn | sandman: yes you are |
| 19:52.36 | *** join/#debian khaleel5000 (n=khaleel@116.71.73.249) |
| 19:52.45 | sandman | valdyn: Nope. Just a memory-scanner that runs at the lowest possible priority when nothing else is going on. |
| 19:52.48 | simonrvn | that would be a massive waste of effort, and slow as fuck. |
| 19:52.48 | abrotman | valdyn: you act like it would be slow or something :) |
| 19:53.00 | chops | valdyn: He's proposing that the kernel randomly frees up sections of memory and runs a memtest on them constantly |
| 19:53.04 | valdyn | sandman: you dont detect bad ram just by scanning it |
| 19:53.12 | sandman | Nope, that's not at all what I'm proposing. |
| 19:53.16 | jelly-home | valdyn: it would be interesting, though. Also, I think I saw some SSD-like appliances that did exactly that |
| 19:53.17 | sandman | It's a userspace application actually. |
| 19:53.22 | bahadunn | BSD is dying? |
| 19:53.26 | sandman | valdyn: Did in my case. |
| 19:53.48 | jelly-home | raid5 ram! |
| 19:53.52 | simonrvn | bahadunn: no |
| 19:54.11 | sandman | jelly-home: That's an interesting concept. But wouldn't ECC do a better job? |
| 19:54.28 | jelly-home | sandman: so buy ECC! |
| 19:54.56 | sandman | jelly-home: I might later. But I think the prospect of a software solution is interesting |
| 19:55.00 | chops | sandman: Whether it goes in userspace or in the kernel is the least of the issues that must be resolved with the idea you propose :-). |
| 19:55.00 | stew | madclicker: /msg dpkg grub fallback |
| 19:55.28 | enouf | Buffered ftw |
| 19:55.28 | valdyn | there already is a userspace memory tester by the way |
| 19:55.52 | jelly-home | sandman: while interesting, it's a long way from an idea to a working implementation |
| 19:56.13 | *** join/#debian elegle (n=ocalme@91.146.48.106) |
| 19:56.20 | *** join/#debian joltcan (i=jolt@0x2a.se) |
| 19:56.29 | rwaite | i cant get opengl to work, when i run glxinfo i get this output: http://paste.debian.net/2978/ |
| 19:56.56 | abrotman | rwaite: card/driver/version of Debian ? |
| 19:56.58 | rwaite | i think the first few lines are pointing to my problem, but i dont know, google gives me a bunch of suse stuff |
| 19:57.16 | elegle | how do I connect bluetooth keyboard ? In gnome preferences/bluetooth I only see "audio devices" entry and nothing else, no input devices |
| 19:57.18 | abrotman | wonders if the client/server versions of GLX should match ... |
| 19:57.21 | rwaite | on lenny, intel driver, i dont know the card, its built into my mobo, a gma something or other |
| 19:57.31 | ericrw | sandman: actually, it would be interesting if something like Xen could provide a software-ram check... scrub/check the unallocated ram, and then remap the guest's ram to a new location... |
| 19:57.33 | rwaite | dual screen |
| 19:57.38 | abrotman | rwaite: lspci | grep VGA |
| 19:57.39 | *** join/#debian dmilith (i=dmilith@irc.drakor.eu) |
| 19:57.41 | dmilith | http://lists.debian.org/debian-security-announce/2008/msg00152.html |
| 19:57.50 | abrotman | dmilith: we're aware .. thanks |
| 19:57.52 | dmilith | does anybody knows anything about it? |
| 19:57.58 | jelly-home | rwaite: is your total horizontal > 2048 pixels? |
| 19:57.59 | abrotman | dmilith: /topic |
| 19:58.00 | rwaite | !lspci | grep VGA |
| 19:58.02 | dmilith | is it patched ? |
| 19:58.05 | rwaite | yes |
| 19:58.06 | abrotman | rwaite: on YOUR system |
| 19:58.06 | *** join/#debian disposable (i=disposab@blackhole.sk) |
| 19:58.07 | rwaite | 2800 |
| 19:58.11 | jelly-home | rwaite: no DRI, then |
| 19:58.14 | enouf | sandman: along your lines of ideas IINM see about fake-numa on 64bit http://kerneltrap.org/mailarchive/linux-kernel/2007/4/29/83517 |
| 19:58.22 | rwaite | :O why not |
| 19:58.48 | disposable | is there any difference between executing 'init 5' and 'telinit 5'? |
| 19:58.53 | jelly-home | rwaite: no idea, but that's what xorg guys said |
| 19:59.17 | jelly-home | video-intel doesn't do DRI in that case |
| 19:59.24 | enouf | disposable: using telinit instead allows for more options to be passed, IINM |
| 19:59.27 | rwaite | :( |
| 19:59.36 | enouf | disposable: it's a symlink |
| 19:59.40 | rwaite | and here i was so happy the intel drivers seemed to work great |
| 20:00.04 | jelly-home | rwaite: put the screens one above other, maybe |
| 20:00.09 | *** join/#debian zarnozC (n=linuxz@ti541110a080-0154.bb.online.no) |
| 20:00.14 | zarnozC | Hello |
| 20:00.26 | zarnozC | I updated SSH, now I cannot login. |
| 20:00.40 | zarnozC | What migth be the problem? My host is: ti541210a340-0212.bb.online.no |
| 20:00.43 | ericrw | disposable: init checks if it should function as 'telinit' or as 'init' based on its process id. If you run the 'init' command from a running system, it will function as telinit. |
| 20:01.05 | ericrw | disposable: (init works in 'init' mode only if it is pid 1) |
| 20:01.16 | disposable | ericrw: thanks |
| 20:01.34 | disposable | ericrw: so the answer to my question is 'no' |
| 20:01.59 | Bushmills | zarnozC: maybe if you try ti541210a340-0212.bb.online.yes instead :) |
| 20:02.16 | *** part/#debian dubd (n=elauria@201.163.21.248) |
| 20:02.23 | ericrw | disposable: more or less. there might be compatibility issues by running it as 'init 5', but on a modern debian system they're the same thing. |
| 20:02.25 | zarnozC | Bushmills: :P Any other sugestions? |
| 20:02.40 | zarnozC | I have webmin acces still... |
| 20:02.54 | Bushmills | you have a weak key, and it is blacklisted? |
| 20:03.42 | zarnozC | Bushmills: Do you get an unknown error when you try to connect? |
| 20:03.46 | jelly-home | zarnozC: is your client trying to use key-based auth? |
| 20:03.52 | Bushmills | i? no. |
| 20:04.02 | *** join/#debian _Petrov_ (n=Petrov@193.9-244-81.adsl-dyn.isp.belgacom.be) |
| 20:04.05 | Orion_X11 | zarnozC: I do |
| 20:04.08 | zarnozC | key-based auth? Like entering my password? |
| 20:04.28 | jelly-home | zarnozC: no, just the opposite |
| 20:04.37 | *** part/#debian dmilith (i=dmilith@irc.drakor.eu) |
| 20:04.39 | *** join/#debian akafurious (n=akafurio@gw1.pickeringcollege.on.ca) |
| 20:04.40 | zarnozC | How would that work? |
| 20:05.10 | jelly-home | zarnozC: never mind. pastebin the output of ssh -vvv servername |
| 20:05.14 | *** join/#debian Bloed (n=bloed@d54C58072.access.telenet.be) |
| 20:06.20 | *** join/#debian Maxt3r (n=Maxt3r@0x5550877d.adsl.cybercity.dk) |
| 20:06.57 | zarnozC | http://pastebin.ca/1018307 |
| 20:07.13 | zarnozC | jelly-home: SHould I replace servername with something? |
| 20:07.59 | enouf | sandman: once assigning a memory range to a cpu/core/set, you can then use cpu hotplug to take that cpu offline, i wonder if/how that also removes the memory that was allocated to said cpu/core/set . |
| 20:08.08 | *** join/#debian ninjaslim (n=sabeeh@ool-43544a41.dyn.optonline.net) |
| 20:08.37 | zarnozC | http://pastebin.ca/1018312 |
| 20:08.39 | zarnozC | There |
| 20:08.46 | *** join/#debian antgel (n=antony@pdpc/supporter/monthlybyte/antgel) |
| 20:08.55 | zarnozC | With my boxname instead of servername |
| 20:09.11 | ninjaslim | hi, my friend has been using Ubuntu, but is really fed up with it, he wants to run Debian on a HP dv6000 laptop, is anyone here running debian on one of these and with the intel 1345 wireless |
| 20:09.14 | enouf | ahh .. he found his way to ##kernel .. ;-) |
| 20:09.30 | *** join/#debian b0ha (n=boha@unaffiliated/b0ha) |
| 20:09.33 | Bushmills | zarnozC: dns problem |
| 20:09.59 | abrotman | !laptop |
| 20:09.59 | dpkg | well, laptop is All there is worth knowing about linux and laptops can be found at http://www.linux-laptop.net/ and http://tuxmobil.org/ and also ask me about <acpi> and <suspend>, or see the debian-laptop mailing list at http://lists.debian.org/debian-laptop/ For Thinkpads, ask me about <thinkpad> |
| 20:10.09 | abrotman | ninjaslim: you mean ipw3945 ? |
| 20:10.10 | zarnozC | Bushmills: On the last one? "No credentials cache found" it says! |
| 20:10.20 | antgel | i'm trying to get X to work with xrandr. i followed instructions at http://wiki.debian.org/XStrikeForce/HowToRandR12, and removed certain parts of my xorg.conf. however, it crashes, which should of course never happen. i'd appreciate a clue as to how to fix this. firstly, the log is http://wiki.debian.org/XStrikeForce/HowToRandR12, i'll provide a url for my xorg.conf in a second |
| 20:10.25 | ninjaslim | abrotman: yeah sorry that one |
| 20:10.34 | sandman | enouf: Well, I can tell you that memtest already detected an error in my memory. Just ran it for the heck of it, and it's not slowing down my system at all. Thought I'd add that. |
| 20:10.35 | abrotman | !tell ninjaslim about ipw3945 |
| 20:10.47 | Bushmills | zarnozC: was looking at the first link |
| 20:10.53 | jelly-home | zarnozC: no idea there |
| 20:11.10 | zarnozC | What is credentials cache? |
| 20:11.15 | enouf | sandman: compiling kernels will also do it ;-) |
| 20:11.16 | ericrw | sandman: an error in memory won't slow down your system, it will just make it unstable, and cause data corruption... |
| 20:11.33 | ninjaslim | abrotman: thanks for that, i assume after doing that he'll be able to connect to a network and all through command line right? |
| 20:11.54 | antgel | xorg.conf at http://pastebin.com/m5feddcc6 |
| 20:11.59 | enouf | sandman: i, like chops mentioned, only use memtest86+ as a boot into check - for completeness |
| 20:12.03 | abrotman | ninjaslim: i'd guess .. i don't have one |
| 20:12.04 | sandman | ericrw: Right, but the claim from before was that memtest would hurt performance terribly while running it |
| 20:12.31 | sandman | ericrw: I happen to be watching a flash video on YouTube while doing it, just for the heck of it. It doesn't slow things down at all with the proper nice value. That's all I was saying |
| 20:12.36 | *** part/#debian furicle (n=chatzill@pppoe-66-186-88-250.vianet.ca) |
| 20:13.03 | zarnozC | jelly-home: Can I regrett the upgrade and dist-upgrade? |
| 20:13.19 | ericrw | sandman: oh, well, depends on your system, and your load.. it could be taking a bunch of resources, but if you're got the unused horsepower, and a niceness level set.. you might not notice it. |
| 20:13.28 | sandman | enouf: I suppose. But memtest did detect the same error that memtest86+ did, except much sooner. I attribute this, though, to the simple fact that it started scanning right around where the error is, whereas memtest86+ started from the beginning |
| 20:13.53 | enouf | heh |
| 20:13.59 | jelly-home | zarnozC: if I were you, I'd clean ~/.ssh/id_* on the client first |
| 20:14.03 | *** join/#debian dFence_ (n=chatzill@ings-d93222ed.pool.mediaWays.net) |
| 20:14.27 | *** join/#debian gener1c (n=gagagugu@unaffiliated/gener1c) |
| 20:14.37 | zarnozC | The client? Not the server? |
| 20:14.53 | *** join/#debian jisatsu (n=leslie@jisatsusha.plus.com) |
| 20:15.33 | *** join/#debian ravil (n=sh0ck_fi@217.66.23.254) |
| 20:15.59 | *** join/#debian Hoxzer (n=dsadsad@dsl-hkigw7-fe1df900-39.dhcp.inet.fi) |
| 20:16.16 | ravil | hello2all. does anybody built atl2 module for the 2.6.18-4 kernel? |
| 20:16.38 | abrotman | your -4 kernel is very out of date |
| 20:16.39 | *** join/#debian tex (n=tex@p54A7EDED.dip.t-dialin.net) |
| 20:16.48 | *** join/#debian gener1c (n=gagagugu@unaffiliated/gener1c) |
| 20:16.49 | *** join/#debian dejones (n=donnie@157-236-210-63-arpa.cust.cinci.current.net) |
| 20:16.56 | abrotman | and vulnerable to the vmsplice exploit which is easily done |
| 20:17.31 | zarnozC | abrotman: why would ssh stop working after an update? |
| 20:18.11 | Eulex | zarnozC, /msg dpkg dsa1571 |
| 20:18.23 | *** join/#debian aplsin (i=ornge@unaffiliated/aplsin) |
| 20:18.34 | ravil | abrotman: i know. but without this module my etch will not see the Net... |
| 20:18.45 | abrotman | oh ok |
| 20:18.45 | Eulex | zarnozC, and dsa1576 _disabled_ authentication with weak keys from working. |
| 20:18.58 | zarnozC | How mean! |
| 20:19.05 | *** join/#debian GNU\tresh (n=tresh@62.178.230.100) |
| 20:19.26 | Eulex | no, it's for your own best. fix your keys. |
| 20:19.33 | zarnozC | So is there a single command to fix it? |
| 20:19.49 | stew | zarnozC: /msg dpkg dsa1571 |
| 20:19.53 | Eulex | no, regenerate your key(s) |
| 20:20.20 | *** join/#debian Killing_Frost (n=frost@69-44-252-62.mrc.clearwire-dns.net) |
| 20:20.23 | zarnozC | I never remember generating these keys in the first place! |
| 20:20.38 | stew | zarnozC: they were generated when you installed openssh-server |
| 20:20.49 | *** join/#debian gener1c (n=gagagugu@unaffiliated/gener1c) |
| 20:21.06 | zarnozC | So what command? |
| 20:21.16 | chops | zarnozC: /msg dpkg dsa1571 |
| 20:21.33 | stew | zarnozC: the wiki link in that factoid has the information you need |
| 20:21.39 | rawb | http://wiki.debian.org/SSLkeys |
| 20:21.42 | zarnozC | Ok |
| 20:21.55 | chops | rawb: You should have made him read his msgs :-) |
| 20:21.59 | *** join/#debian creitos (n=creitos@nat1.inalambrica.net) |
| 20:22.03 | sandman | enouf: So you're saying hotplug the CPU out, it's memory (hopefully), then memtest the related memory? |
| 20:22.28 | rawb | chops: he sounded as if he didn't know how to do that :p |
| 20:22.43 | chops | rawb: I think he just wanted someone to do it for him |
| 20:23.04 | zarnozC | debconf: DbDriver "config": /var/cache/debconf/config.dat is locked by another process |
| 20:23.20 | enouf | sandman: that's my idea ;-) i'm kind of a dreamer though ;-P |
| 20:23.31 | chops | zarnozC: Sounds like there's another dpkg process running, perhaps |
| 20:23.56 | madclicker | stew, I do everything according to GRUB howto "fallback" but "update-grub" rewrites it all. Do you know if that how to applies only to GRUB2 or all GRUb versions? |
| 20:23.58 | zarnozC | chops: In screen, witch I need SSH to acess! |
| 20:23.59 | Killing_Frost | Hello. I'm trying to call a single script from multiple different links so it operates differently based on the filename used. Tried $@, $0 thru $* and can't get to "see" the link name rather than what it's pointing to. Any ideas? |
| 20:24.25 | sandman | enouf: I don't see why that wouldn't work. Given that memtest and memtest86+ perform the same tests, and also given that one has an SMP machine, perhaps it's usable. I'd have to read up more on the stuff before I could figure out how to make it work though |
| 20:24.29 | chops | zarnozC: Why do you need ssh to access screen? You don't need ssh to access a screen session. |
| 20:24.40 | Eulex | Killing_Frost, umh..... why? |
| 20:24.45 | *** join/#debian Kalli (n=Kalli@pD9E60DFE.dip.t-dialin.net) |
| 20:24.54 | zarnozC | chops: I dont? The computer is in another county. |
| 20:25.03 | stew | madclicker: that howto applies to grub. i'm using it. yes, you should expect update-grub to replace any entries in the automagic kernel section |
| 20:25.05 | zarnozC | chops: How do I acess screen? |
| 20:25.06 | *** join/#debian deriaN (n=nopron@90.185.61.198) |
| 20:25.16 | enouf | sandman: or, you might be able to assign (a) certain processe(s) to all numa-sets, leave the CPU (core/set) online, but only allow your memtest to run on each one over a given time, then round-robin the task ;-) |
| 20:25.40 | zarnozC | Without SSH. |
| 20:25.45 | chops | zarnozC: Let's start again. You're talking about GNU screen, right? And you're currently accessing the machine, because you have a session open to it that's giving you that error, right? |
| 20:25.53 | sandman | enouf: Hm. I can hear the arguments against this already. "Too much lag!" etc |
| 20:26.00 | sandman | enouf: Even if there wouldn't be any lag =) |
| 20:26.31 | madclicker | stew, how can i prevent it from overwriting the changes? |
| 20:26.32 | Killing_Frost | Why not? <grins Was trying to do a ren2lowercase, ren2unix, and re2uppercase functions in a single script, and just wanted it all in one script. |
| 20:26.44 | zarnozC | chops: I am talking about screen that aptitude gave me. I can only acess the machine through webmin. |
| 20:27.02 | *** join/#debian floppypond (n=floppypo@unaffiliated/floppypond) |
| 20:27.05 | grul | I'm not sure if this is the right place to ask, but is there any tool to generate a statistics page (in html) using apache2 logs? |
| 20:27.05 | stew | madclicker: what is the problem with them being ovewritten? |
| 20:27.15 | *** join/#debian Caelum (n=rkitover@gateway.walmart.com) |
| 20:27.24 | chops | zarnozC: Oh lord, webmin. |
| 20:27.24 | zarnozC | grul: Maybe #apache knows... |
| 20:27.35 | chops | grul: webalizer is the one I like |
| 20:27.44 | zarnozC | chops: When mean aptitude killed my SSH I had no choise... |
| 20:27.47 | grul | zarnozC, of course :) |
| 20:27.49 | grul | chops, thanks |
| 20:27.50 | petemc | grul: awstats, visitors |
| 20:27.51 | *** join/#debian binwiederhie1 (n=pheckel@p5B076038.dip.t-dialin.net) |
| 20:27.59 | enouf | sandman: well, no , b/c that CPU's assigned region would've already been rerserved for a specific task or tasks - same with anything, i'm just giving the extra option to 'partition out regions' (slices) of RAM - do whatever you like with them ;-) |
| 20:28.05 | madclicker | stew, i mean the fallback entries get wiped so a am back with one entry only for boot device (hd0,0) |
| 20:28.26 | chops | zarnozC: Why did aptitude kill your ssh? aptitude didn't kill SSH on any of the servers I remotely updated for the ssh vulnerability. Did your ssh session die partway through upgrading ssh, then? |
| 20:28.27 | stew | madclicker: can you show me menu.lst before and after update-grub? |
| 20:28.28 | *** join/#debian surgeon (n=surgeon@binford.kawo2.RWTH-Aachen.DE) |
| 20:29.00 | *** join/#debian Jobman (n=jobsanzl@dell4022.rz.ruhr-uni-bochum.de) |
| 20:29.20 | zarnozC | chops: No, I assumed everything was allrigth and went outside for a walk. Then after a few houres of walking I couldnt login. |
| 20:29.22 | enouf | sandman: the cpu hotplug stuff is pretty much working and stable - the fake-numa stuff and your BadRAM thing seems all experimental at this point |
| 20:29.40 | chops | zarnozC: You remotely updated ssh and went for a walk while it worked? |
| 20:29.58 | chops | zarnozC: "Doctor, it hurts when I do this..." |
| 20:30.06 | zarnozC | chops: And logged out, then went for a walk. With aptitude and everything in screen. |
| 20:30.15 | chops | zarnozC: What happens exactly when you try to ssh in, again? |
| 20:30.36 | chops | zarnozC: That was foolish. You should sit and watch remote ssh upgrades, not log out and trust that they'll complete successfully and atomically without any intervention. |
| 20:30.38 | sandman | enouf: I thought for a bit that BadRAM had been incorporated by upstream, but it hasn't. Only the memmap kernel parameter seems available at this time, which is just as usable. |
| 20:30.39 | zarnozC | "Server disconnected without sending an error message" |
| 20:30.44 | enouf | sandman: you realize FBDIMMs (newer) and older Registered/Buffered RAM already has it's own methods ;-) |
| 20:31.12 | zarnozC | chops: Debian is usually stable, and doesnt need me. |
| 20:31.14 | *** join/#debian davi_ (i=davi@57.Red-88-2-100.staticIP.rima-tde.net) |
| 20:31.30 | *** join/#debian Carry (i=u3br5n4x@xs6.xs4all.nl) |
| 20:32.16 | enouf | haha @ Patient; "Doctor, it hurts when I do this..." Doctor; "Well don't do that" :-p |
| 20:32.20 | jim | zarnozC: and you run the stable version of debian, yes? |
| 20:32.25 | *** join/#debian joltcan (i=jolt@0x2a.se) |
| 20:32.47 | chops | zarnozC: I know that Debian is usually stable. I also don't log out after starting a remote ssh upgrade, because that's just asking for trouble. I think the facts are strongly on my side that that was a bad idea. |
| 20:32.49 | zarnozC | jim: Etch, whatever version aptitude gave me a couplle of houres ago. |
| 20:33.12 | zarnozC | chops: But it was raindeers outside! |
| 20:33.16 | chops | zarnozC: I recommend getting access to that screen session and seeing if the ugprade is halfway completed and waiting for input (probably from debconf). I suspect that it is. |
| 20:33.40 | chops | zarnozC: How to do that is your problem. If webmin can't do it, you may have to visit the location or ask someone to go to the console and coach them through it over the phone. |
| 20:33.50 | enouf | !rheindeersmite zarnozC |
| 20:33.51 | sandman | enouf: I know now |
| 20:34.05 | zarnozC | rhein? |
| 20:34.09 | *** join/#debian behanw (n=behanw@S0106000f66915cc8.vc.shawcable.net) |
| 20:34.11 | sandman | But just surrendering and buying something would be so... unfun. |
| 20:34.14 | *** join/#debian faw (n=felipe@unaffiliated/faw) |
| 20:34.22 | chops | zarnozC: It's "reindeer", not "raindeers". |
| 20:34.26 | enouf | reigndeer :-P |
| 20:34.26 | sandman | Or should I say, double-minus-ungood or something |
| 20:34.52 | jim | trading places reference? |
| 20:35.00 | enouf | silent 'h', like slient 'u' in colour :-) |
| 20:35.14 | madclicker | stew, http://pastebin.ca/1018344 |
| 20:35.15 | zarnozC | chops: I can slay my user. Then run dpkg-reconfigure ssh-something? |
| 20:35.31 | *** join/#debian jamiejackson (n=jamiejac@unaffiliated/jamiejackson) |
| 20:35.51 | jamiejackson | is it possible to regenerate my distro's default smb.conf file? |
| 20:36.04 | sandman | jamiejackson: What's your distro |
| 20:36.04 | Eulex | !tell jamiejackson about confmiss |
| 20:36.07 | enouf | it would be openssh-server, i would think |
| 20:36.20 | x_link | enouf: Hello Mr.! |
| 20:36.22 | jamiejackson | sandman: ubuntu (latest) |
| 20:36.28 | Eulex | !ubuntu |
| 20:36.28 | dpkg | Ubuntu is based on Debian, but it is not Debian, and it is unlikely to live up to Debian's standards (see <Debian policy>). Only Debian is supported on #debian. Use #ubuntu (irc.freenode.net) instead. Even if the channel happens to be less helpful, support for distributions other than Debian is offtopic on #debian. See also <based on debian>. |
| 20:36.36 | zarnozC | enouf: Is there some closedssh-server I can use? |
| 20:36.37 | enouf | x_link: hola my son! ;-P |
| 20:36.45 | x_link | enouf: Sup? |
| 20:36.47 | enouf | zarnozC: ... |
| 20:36.49 | *** join/#debian Phase (i=phase@unaffiliated/phase) |
| 20:36.59 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 20:37.00 | Eulex | zarnozC, there is actually dropbear |
| 20:37.44 | chops | zarnozC: If you can't access screen, how will you run dpkg-reconfigure ssh-something? |
| 20:37.52 | *** join/#debian raz0 (n=user@port258.ds1-sl.adsl.cybercity.dk) |
| 20:38.07 | stew | madclicker: yeah, you should not be trying to change the automagic kernels list |
| 20:38.17 | chops | zarnozC: I would not recommend killing a half-completed ssh upgrade on a remote machine any more than I would recommend logging out halfway through an ssh upgrade on a remote machine. |
| 20:38.17 | cyboreal | I generated a PKI for use with OpenVPN with a versin of the weak OpenSSL libraries but when I run openvpn-vulnkey on them, the only key that is compromised is the tls-auth (ta.key). I would have expected all the keys to be compromised. Does that sound right? |
| 20:38.19 | stew | madclicker: and i dont' know that "savedefault fallback" is really necessary |
| 20:38.40 | stew | madclicker: oh, i see what you are trying to do |
| 20:38.56 | stew | madclicker: but yeah, you should be adding this kernel outside of the automagic section |
| 20:39.10 | *** part/#debian ravil (n=sh0ck_fi@217.66.23.254) |
| 20:39.12 | chops | zarnozC: I guess you could install telnetd via webmin, telnet in, connect to screen, finish the upgrade, and then remove telnetd and change your password |
| 20:39.41 | stew | madclicker: so, for instance, put the one you are adding above the automatic section, and make your fallback be 0 instead of 1 |
| 20:39.51 | chops | zarnozC: (I actually installed telnetd on one of my more tricky remote servers before doing the ssh upgrade, just for safety.) |
| 20:40.05 | stew | telnetd? |
| 20:40.07 | chops | zarnozC: (Just because it's Debian doesn't mean you can leave your brain at home and trust the system to protect you from yourself.) |
| 20:40.10 | chops | stew: telnetd |
| 20:40.26 | chops | stew: Just in case something went wrong with the ssh upgrade and left me unable to login |
| 20:40.27 | stew | chops: is there no way to copy files to the remote server? |
| 20:40.35 | zarnozC | chops: I cannot install, because dpkg is loocked |
| 20:40.40 | madclicker | stew, got it, thanks for your help |
| 20:40.45 | chops | zarnozC: Oh, right |
| 20:40.51 | chops | zarnozC: Well, good luck :-/ |
| 20:40.56 | chops | stew: ? |
| 20:40.58 | enouf | madclicker: i recall someone else with a similar issue, using multiple HDDs, each which grub installed - he kept editing the wrong menu.lst O_o |
| 20:41.03 | *** join/#debian sphenxes (n=sphenxes@85-127-213-249.dynamic.adsl-line.inode.at) |
| 20:41.07 | chops | stew: I would imagine that there is though webmin |
| 20:41.19 | chops | stew: Does copying files to the remote server help? |
| 20:41.25 | stew | zarnozC: do you have a way of executing commands on the remote box? |
| 20:41.33 | zarnozC | stew: Webmin |
| 20:41.55 | stew | chops: is the problem that ssh ins't configuring becuase the host keys are bad? |
| 20:41.58 | enouf | madclicker: but i guess, then , update-grub was teh issue (not doing anything) , or similar .. i forget now, and nm |
| 20:42.31 | chops | stew: The problem seems to be that he started an ssh upgrade in a screen session and then logged out, and now debconf is waiting for input and ssh is unusable, so he can't log back in and complete the upgrade |
| 20:42.33 | *** join/#debian joltcan_ (i=jolt@0x2a.se) |
| 20:42.39 | stew | zarnozC: replace /etc/ssh/ssh_host_* with good keys, and run "dpkg --configure -a" |
| 20:42.46 | enouf | madclicker: was just a possible sideways 'gotcha' to watch out for - but nm that, i guess |
| 20:42.52 | *** join/#debian lex_ (n=lex@c-98-212-229-220.hsd1.il.comcast.net) |
| 20:42.52 | chops | stew: I actually don't think it's directly related to the host keys problem |
| 20:43.06 | zarnozC | stew: The wiki told me to rm etc ssh ssh_host |
| 20:43.11 | cyboreal | nevermind... turns out that's what openssl-vulnkey is for |
| 20:43.12 | stew | zarnozC: if there is a aptitude/apt-get process that is stuck waiting for input, then kill those processes first |
| 20:43.15 | madclicker | enouf, i dont blame him, kind of sucks when a person follows the manuals and cant get to the other side, of you know what i mean |
| 20:43.39 | stew | zarnozC: then forget replacing the host keys, just run 'dpkg --configure -a' |
| 20:43.46 | enouf | madclicker: it drove the otherwise extremely intelligent person nuts for days :-P |
| 20:44.39 | rdz | how can i check, if a process with a certain pid is still running? |
| 20:44.48 | madclicker | enouf, did it with me for a few days, but stew made it clear, that update-grub must be fooled otherwise the fallback will not be saved |
| 20:44.57 | Eulex | rdz, ps aux|grep pid |
| 20:44.59 | asg | rdz: ps and grep |
| 20:45.02 | rawb | ps |
| 20:45.06 | rdz | thanks guys |
| 20:45.15 | asg | rdz: pgrep is another option |
| 20:45.22 | *** join/#debian kripton1x (n=mike@adsl-072-151-207-108.sip.mia.bellsouth.net) |
| 20:45.30 | enouf | madclicker: i also had that issue in the past, but a much much milder version, which i managed to sort out quickly - since i have 2HDDs on this system, each with separare OS installs and grub on each |
| 20:45.31 | kripton1x | getting a problem trying to set up zaptel, telling me no ncurses |
| 20:45.43 | rdz | asg, ah cool.that is probably easier to use within bash scripts |
| 20:45.45 | *** join/#debian LaTTiNo (n=ircap751@111.Red-88-0-203.dynamicIP.rima-tde.net) |
| 20:45.52 | dondelelcaro | rdz: kill -0 pid; is what you should be using. |
| 20:46.19 | dondelelcaro | checking for its existance in ps isn't good enough, because it may be in the process table but not running. |
| 20:46.24 | zarnozC | Me fixed it! |
| 20:46.42 | asg | dondelelcaro: good point |
| 20:46.43 | rdz | dondelelcaro, thanks. |
| 20:46.51 | zarnozC | I wont update untill 2020!! |
| 20:46.56 | enouf | madclicker: i think what threw that guy i mentioned for a real loop was the silly saveddefault file(?) that gets added/placed in /boot/grub, that i mentioned (real unspecific though) yesterday to you |
| 20:46.58 | rdz | dondelelcaro, it is even easier to use |
| 20:47.04 | *** join/#debian debian (n=debian@ti541210a340-0212.bb.online.no) |
| 20:47.19 | dondelelcaro | rdz: right; that's what the 0 signal is really for |
| 20:47.28 | dondelelcaro | "could I send a signal to this process" |
| 20:47.41 | rdz | dondelelcaro, thanks |
| 20:47.57 | *** join/#debian joltcan (i=jolt@0x2a.se) |
| 20:48.22 | DawnLight | sighs |
| 20:48.29 | chops | zarnozC: No, you should update. Wait a few days on most updates to see if they introduced a regression (in which case a second advisory will follow soon after), and don't walk away from remote updates; watch and make sure they complete properly (_especially_ things like ssh that are related to your ability to log into the machine). If you react to this experience by no longer upgrading, you'll just come back to #debian asking why you have a /tmp/.rootkit.a |
| 20:48.31 | *** join/#debian dpm_ (n=dpm@p54A114BB.dip0.t-ipconnect.de) |
| 20:48.38 | *** join/#debian BOSPUS2 (n=BostjanP@89-212-197-217.dynamic.dsl.t-2.net) |
| 20:48.38 | DawnLight | alright... what am i supposed to do with this openssl problem |
| 20:48.41 | BOSPUS2 | hi |
| 20:48.42 | *** part/#debian debian2_6_24_1am (n=user@12-210-55-82.client.mchsi.com) |
| 20:48.43 | *** join/#debian gladideg (n=nnscript@unaffiliated/gladideg) |
| 20:49.04 | BOSPUS2 | i need to make connection to net on debian linux |
| 20:49.10 | zarnozC | chops: What is a /tmp/.rootkit.a? |
| 20:49.12 | DawnLight | i understand there's a thing that checks whether my .pub is guessable? |
| 20:49.18 | BOSPUS2 | eth0 or somethin + ips i need to put in |
| 20:49.20 | enouf | madclicker: for ex; all i'd have to do to see the OTHER menu.lst residing on the OTHER 2nd HDD at boot is swap the HDD Boot Order priority in the BIOS ;-) |
| 20:49.27 | antgel | i'm trying to get xorg to work with xrandr so as per http://wiki.debian.org/XStrikeForce/HowToRandR12 i have deleted some of my second screen config. however it crashes. xorg.conf at http://pastebin.com/m5feddcc6 and log at http://pastebin.com/m71543066. would appreciate a clue. |
| 20:49.37 | antgel | !seen gravity |
| 20:49.37 | dpkg | gravity <~david@dsl092-079-075.bos1.dsl.speakeasy.net> was last seen on IRC in channel #debian, 20h 22m 32s ago, saying: 'meisteris: No problem'. |
| 20:49.48 | zarnozC | !seen debian |
| 20:49.48 | dpkg | debian is currently on #debian (2m 44s), last said: 'jelly-home: Does it do annything? Does it use my ram? Like gnome.'. |
| 20:49.53 | gladideg | my vps server is named "vps3", instead of the outside ip. So when setting serverip on a program called Beowulf Job Manager, I have to set VPS3 to make it validate, but it can't connect to vps3 as a IP. Any idea how to change vps3 to the ip? |
| 20:50.04 | chops | zarnozC: You're not going to get away from the need to pay attention to what you're doing and not cause problems for yourself -- in Debian or in life :-). |
| 20:50.35 | enouf | madclicker: i had orig done so in some 'clean house' phase i was doing, which left me perplexed at that time - then i recalled i had changed the BIOS eventually, went in, changed it back - all better ;-) |
| 20:51.02 | zarnozC | chops: If I buy/borrow/recive a new ssh box, can I make this one accesible from the internet, and then forward stuff to the one inside the local network? |
| 20:51.27 | chops | zarnozC: Sure |
| 20:51.27 | zarnozC | So if it is user1 loggin in, he goes to box1, and if user2 logs in he goes to box2? |
| 20:51.58 | zarnozC | How? |
| 20:52.02 | chops | zarnozC: Oh, not sure about that. It's probably possible by setting user2's shell on box1 to 'ssh user@host2' with host keys or some such technique. |
| 20:52.54 | *** join/#debian `celerkiller (i=user-lin@host71-178-static.104-80-b.business.telecomitalia.it) |
| 20:53.11 | *** join/#debian Firestarter- (n=Firestar@cpe-72-226-14-251.nycap.res.rr.com) |
| 20:53.12 | *** join/#debian guk (i=chris@cable-63-135-2-91.dyn.personainc.net) |
| 20:53.15 | zarnozC | A cluster then, wher user1's programs goes on box1 |
| 20:53.37 | zarnozC | is that possible? |
| 20:54.04 | zarnozC | I really want a cluster... |
| 20:54.13 | jim | almond cluster? |
| 20:54.22 | jim | because |
| 20:54.29 | jim | sometimes you feel like a nut... |
| 20:54.38 | jim | sometimes you don't! |
| 20:54.43 | *** part/#debian `celerkiller (i=user-lin@host71-178-static.104-80-b.business.telecomitalia.it) |
| 20:55.04 | *** part/#debian DaveDorm (n=dave@pool-71-100-16-226.tampfl.dsl-w.verizon.net) |
| 20:55.15 | zarnozC | Can I aptitude install a cluster? |
| 20:55.20 | *** join/#debian Maxt3r (n=Maxt3r@0x5550877d.adsl.cybercity.dk) |
| 20:55.30 | valdyn | zarnozC: no |
| 20:55.34 | *** join/#debian mag_mor (n=blob@vpn-1583.swh.uni-giessen.de) |
| 20:55.47 | zarnozC | Not? None in the respos? |
| 20:55.54 | jim | there's not anything specific that does clustering |
| 20:56.02 | valdyn | zarnozC: do you understand what a cluster is? |
| 20:56.04 | Fah | that repos is off line. along with the ram repos and hdd repos |
| 20:56.40 | valdyn | zarnozC: you likely dont want a cluster, you only want what you think a cluster will do for you |
| 20:56.41 | *** part/#debian binwiederhie1 (n=pheckel@p5B076038.dip.t-dialin.net) |
| 20:56.45 | zarnozC | valdyn: A lot of computers doing what I want them to. |
| 20:57.00 | valdyn | zarnozC: that was my point, yes |
| 20:57.06 | Fah | zarnozC: have you looked at mosix? |
| 20:57.09 | valdyn | zarnozC: cluster dont read minds, they dont do this |
| 20:57.57 | NiLon | is there somekind changelog in packets that can be viewed via apt? |
| 20:58.11 | jim | you're looking at minimum at making sure hardware is set up properly, building kernels and userland sources in support of what you're interested in |
| 20:58.34 | *** join/#debian ErikRose (n=grinch@PollockMega-Mobile253.cac-labs.psu.edu) |
| 20:58.38 | valdyn | NiLon: zmore /usr/share/doc/<packagename>/[cC]hangelog.gz |
| 20:58.42 | ErikRose | Does dh_lintian [still] exist? |
| 20:58.45 | zarnozC | Mosix looks cool. |
| 20:59.24 | NiLon | valdyn that will do, thanks |
| 20:59.43 | Fah | mosix and beowulf come to mind for clustering, depending on what your goals are |
| 20:59.43 | zarnozC | Fah: Is it a loot of work= |
| 20:59.45 | zarnozC | ? |
| 20:59.54 | Fah | yes, but all grid computing is |
| 20:59.57 | valdyn | NiLon: it might not always be gzipped, but a changelog is in every package |
| 21:00.15 | *** join/#debian kyncani_ (n=kyncani@bro29-1-82-245-180-190.fbx.proxad.net) |
| 21:00.17 | NiLon | valdyn that's not problem :) |
| 21:00.28 | Fah | then again, if you need a grid, you probably have an interesting problem to solve |
| 21:00.35 | Fah | or at least a complex one |
| 21:00.36 | valdyn | zarnozC: much less work than writing your custom code to actually do the number crunching |
| 21:00.49 | Fah | valdyn: quite so |
| 21:01.04 | enouf | dondelelcaro: so if kill -0 $PID returns nothing, the process exists in the process table? and if the $PID doesn;t exist, only then will an error such as; "bash: kill: (55125) - No such process" appear? |
| 21:01.16 | *** join/#debian reverseblade (n=onur@85.105.19.139) |
| 21:01.32 | zarnozC | valdyn: Like 30 minutes and then I have a cluster? |
| 21:01.43 | Fah | depending on what you're after hadoop might be useful too. Especially if you have tons of data to work with |
| 21:01.57 | peterS | enouf: kill -0 verifies that (a) the process exists, and (b) you have sufficient permission to send it a signal. It does not, of course, verify that (c) the process will still exist when you try a real kill |
| 21:02.00 | *** mode/#debian [+l 893] by debhelper |
| 21:02.17 | disposable | i'm mounting my home partition with these options in fstab: defaults,exec,users,auto yet, when i do mount, i get: rw,noexec,nosuid,nodev. why do i get noexec in mount? |
| 21:02.23 | valdyn | zarnozC: this is a silly talk really, if you have to ask these questions, you are nowere near writing custom code for your cluster |
| 21:02.31 | valdyn | zarnozC: but yes, 30 minutes |
| 21:02.36 | *** part/#debian schmidtsmikey (n=schmidts@port-92-195-63-88.dynamic.qsc.de) |
| 21:02.40 | *** join/#debian xlotlu (n=john@89.32.212.250) |
| 21:02.51 | enouf | dondelelcaro: i also get confused sometimes (ok, many times) between kill (bash builtin) vs /bin/kill (binary - seldom used) |
| 21:02.58 | enouf | peterS: thank you |
| 21:03.09 | pinto3 | maybe those are the defaults |
| 21:03.11 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 21:03.20 | Fah | why are you creating a cluster? I wasn't really paying attention |
| 21:03.36 | peterS | they shouldn't be the defaults on Debian |
| 21:03.46 | zarnozC | Fah: Just for fun, to make my sshing faster. |
| 21:03.52 | enouf | peterS: i do realize 'help kill' and 'man bash{-builtins}' is for bash kill - but which is 'man kill' meant for? |
| 21:04.10 | Fah | uh, oh. that really isn't going to do what you think, but ok. |
| 21:04.12 | zarnozC | What is the name of the genious linux firewall? Busybox? |
| 21:04.30 | valdyn | !busybox |
| 21:04.34 | enouf | iptables? |
| 21:04.40 | valdyn | !info busybox |
| 21:04.45 | zarnozC | Fah: I wont be able to run apache, php, and such split on diffrent computers? |
| 21:04.56 | *** join/#debian bullgard4 (n=detlef@p5B258F0B.dip0.t-ipconnect.de) |
| 21:05.03 | antgel | zarnozC: you might think your trolling is clever. i think differently |
| 21:05.04 | dpkg | busybox: (Tiny utilities for small and embedded systems), section utils, is optional. Version: 1:1.9.2-3 (sid), Packaged size: 281 kB, Installed size: 424 kB |
| 21:05.31 | Fah | zarnozC: you dont need a cluster for that |
| 21:05.40 | Fah | zarnozC: you just need different hosts. |
| 21:05.44 | antgel | zarnozC: you need to cluster your nuts |
| 21:05.49 | zarnozC | antgel: ?? |
| 21:06.20 | enouf | disposable: i get oddities like that too on my reiserfs partition, so i altered my mount options |
| 21:06.25 | *** join/#debian billybob (n=billybob@75.30.163.165) |
| 21:06.26 | Fah | zarnozC: if you want it to be 'transparent' install a proxy on the public facing machine and reverse proxy to other services or something |
| 21:06.30 | Fah | all that is easily done |
| 21:06.32 | *** join/#debian assasukasse (n=agostino@host-84-222-168-189.cust-adsl.tiscali.it) |
| 21:06.35 | zarnozC | I know my friends was talking about setting up a firewall, that could limit connections, and forward stuff, and block websites/ips |
| 21:06.47 | enouf | disposable: also compare mtab with /proc/mounts |
| 21:07.08 | Fah | yeah, all that's in the howtos and man pages. you'll be fine |
| 21:07.46 | BOSPUS2 | i need some help |
| 21:07.46 | zarnozC | Fah: mosix would fix it for me! |
| 21:07.58 | BOSPUS2 | my connection does not work |
| 21:08.15 | enouf | disposable: but, also, IINM defaults implies some of your later options listed |
| 21:08.46 | Fah | zarnozC: mosix is probably overkill for what you're describing. good luck |
| 21:08.47 | enouf | disposable: or perhaps one later option conflicts with teh defaults |
| 21:09.07 | *** join/#debian DrthHmstr (n=HMSTR@82-71-1-140.dsl.in-addr.zen.co.uk) |
| 21:09.14 | zarnozC | Fah: I can run game servers, like CS servers. |
| 21:09.21 | disposable | enouf: i don't really know what defaults means, but i was under teh impression that the options following will override whatever 'defaults' sets |
| 21:09.41 | disposable | s/means/entails |
| 21:09.51 | disposable | s/teh/the |
| 21:10.00 | BOSPUS2 | how i log out from root ? |
| 21:10.10 | disposable | BOSPUS2: exit |
| 21:10.28 | *** join/#debian slackd00d (n=jason@unaffiliated/slackd00d) |
| 21:10.38 | disposable | BOSPUS2: or Ctrl+d |
| 21:11.09 | enouf | disposable: i would think if they conflict, the latter options would - like you say, but i can't say for certain - man mount show what the 'defaults' option does |
| 21:11.15 | enouf | shows* |
| 21:11.30 | *** join/#debian xushi (n=xushi@unaffiliated/xushi) |
| 21:11.36 | *** join/#debian azaze[l] (n=azazel@200.77.109.244) |
| 21:11.52 | enouf | s/latter options would override the defaults/ |
| 21:12.07 | azaze[l] | good afternoon :) |
| 21:12.09 | *** part/#debian Fah (i=cynic@paranoia.neverlight.com) |
| 21:12.11 | *** join/#debian cyboreal_ (n=tajore@s1-101-rb4.ka.centurytel.net) |
| 21:12.22 | *** join/#debian wam (n=wam@p5B2FE444.dip.t-dialin.net) |
| 21:12.24 | enouf | the truman show? |
| 21:12.26 | azaze[l] | sorry...but i have some problems with conky...someone here can i help me? o.O |
| 21:12.39 | disposable | enouf: defaults should have already set the exec option. weird.. |
| 21:12.45 | azaze[l] | can you... xD |
| 21:12.48 | enouf | disposable: right |
| 21:12.54 | wam | Hi, it's not enough to change the host ssh keys, correct? I also must recreate every user's keys in .ssh? |
| 21:12.56 | enouf | disposable: what FStype ? |
| 21:13.05 | disposable | enouf: ext3 |
| 21:13.07 | *** join/#debian Fah (i=cynic@paranoia.neverlight.com) |
| 21:13.20 | Fah | oops. killed the wrong buffer |
| 21:13.44 | BOSPUS2 | k |
| 21:13.51 | BOSPUS2 | my connecton notworking |
| 21:13.57 | BOSPUS2 | i have this in interfaces |
| 21:14.07 | BOSPUS2 | auto eth0 |
| 21:14.11 | *** join/#debian varney (i=varney@dsl-035-051.cust.imagine.ie) |
| 21:14.16 | BOSPUS2 | iface eth0 inet static |
| 21:14.30 | *** join/#debian herd (n=herd@dslb-084-058-098-199.pools.arcor-ip.net) |
| 21:14.34 | BOSPUS2 | ipaddr=192.168.0.3 |
| 21:14.48 | BOSPUS2 | netmask=255.255.255.0 |
| 21:14.57 | enouf | disposable: ~$ stat `which mount` | grep Uid |
| 21:14.58 | rahul | BOSPUS2: it would help if you actually read the docs |
| 21:15.00 | *** join/#debian MetalWolf (n=metalwol@92-236-122-246.cable.ubr06.linl.blueyonder.co.uk) |
| 21:15.04 | BOSPUS2 | gateway=192.168.0.1 |
| 21:15.05 | rahul | BOSPUS2: man 5 interfaces |
| 21:15.08 | varney | hi all. does anyone here know what the numbers in parentheses mean next to the domain on mod_cband? eg mydomain.com:0:(1)? |
| 21:15.09 | azaze[l] | :( anyone know about conky? |
| 21:15.10 | BOSPUS2 | im tired |
| 21:15.18 | rahul | BOSPUS2: then get some sleep |
| 21:15.54 | *** join/#debian tyrion-mx (n=tyrion@89-97-102-214.ip17.fastwebnet.it) |
| 21:16.04 | *** join/#debian Hoxzer (n=dsadsad@dsl-hkigw7-fe1df900-39.dhcp.inet.fi) |
| 21:16.10 | BOSPUS2 | itworked when i had iface eth0 inet dhcp |
| 21:16.20 | rahul | your point being? |
| 21:16.21 | disposable | enouf: it's all right. i've just moved the exec to the end of those options, remounted and it works... |
| 21:16.29 | BOSPUS2 | but i need to asssign an ip coz i need to forward some ports |
| 21:16.30 | rahul | that you didn't read the docs for now to set up a static ip? |
| 21:16.34 | tyrion-mx | hello, where can I find the "all-in-one hd-media/boot.img.gz"? |
| 21:16.36 | rahul | s/now/how/ |
| 21:16.41 | tyrion-mx | I read it on http://www.debian.org/releases/stable/amd64/ch04s03.html.en |
| 21:16.52 | varney | i am trying to setup mod_cband for an ip-based host that has directives for port 80, and port 443, but i notice it has added the mod_cband directives to both sections, leaving me with one of them as (1) and the other as (22) when i look at the bandwidth for the site |
| 21:16.54 | tyrion-mx | I need it to prepare my USB installation |
| 21:16.55 | dondelelcaro | tyrion-mx: any full mirror has it. |
| 21:17.12 | enouf | disposable: you mean "defaults,exec,users,auto" doesn't work and "defaults,users,auto,exec" does as expected? |
| 21:17.19 | dondelelcaro | enouf: you'd use the exit status of kill -0 |
| 21:17.31 | varney | is this normal, or does having the directives only under port 80 mean it records 443 also? |
| 21:17.38 | disposable | enouf: strangely enough, yes |
| 21:17.38 | BOSPUS2 | auto eth0, iface eth0 inet static <- is something wrong here ? |
| 21:17.45 | dondelelcaro | enouf: and usually you'd >/dev/null 2>&1 or somilar |
| 21:17.50 | rahul | BOSPUS2: do the docs say that's ok? |
| 21:17.52 | enouf | disposable: can you show me now what mount output shows? (once mounted correctly) |
| 21:18.14 | *** join/#debian Geru (n=Geru@38.Red-88-15-210.dynamicIP.rima-tde.net) |
| 21:18.23 | *** part/#debian Geru (n=Geru@38.Red-88-15-210.dynamicIP.rima-tde.net) |
| 21:18.27 | disposable | /dev/sda3 on /home type ext3 (rw,nosuid,nodev,acl,user_xattr,quota) |
| 21:18.33 | tyrion-mx | dondelelcaro, I searched on the mirror located in Germany and Italy ... |
| 21:18.38 | BOSPUS2 | i hate going through piles ofdocuments idont need atm .. just need the connection |
| 21:18.52 | tyrion-mx | Found it |
| 21:18.54 | rahul | BOSPUS2: then go through the docs you DO need |
| 21:18.56 | *** part/#debian herd (n=herd@dslb-084-058-098-199.pools.arcor-ip.net) |
| 21:19.13 | enouf | dondelelcaro: ahh .. hrm, but when i did "kill -0 28764" (on cron), it just returned to newline prompt, such like a successful modprobe does - meaning exut status was 0 then? |
| 21:19.53 | enouf | dondelelcaro: meaning, 28764 happens to be my cron PID |
| 21:20.01 | dondelelcaro | enouf: depends; if you really want to know, you do kill -0 28764 && echo "yes it's running"; or similar. |
| 21:20.33 | enouf | dondelelcaro: ok thanks |
| 21:20.33 | *** join/#debian mick_home (n=clamwin@h-74-2-196-226.miatflad.covad.net) |
| 21:20.33 | dondelelcaro | enouf: since almost always you'd be using kill -0 to figure out if something is running or not, and do something if it is (or do something if it isn't) |
| 21:20.48 | enouf | right |
| 21:21.13 | enouf | gotcha |
| 21:21.17 | *** join/#debian tomaw_ (i=tom@freenode/staff/tomaw) |
| 21:21.18 | tyrion-mx | ok, but it isn't the "syslinux.cfg" file |
| 21:21.31 | tyrion-mx | (looking at: http://ftp.uk.debian.org/debian/dists/lenny/main/installer-amd64/current/images/netboot/debian-installer/amd64/ ) |
| 21:21.34 | enouf | && won't complete/run unless the 1st command was successful |
| 21:21.52 | BOSPUS2 | any linux help channel ? |
| 21:22.11 | rahul | BOSPUS2: this is the right channel |
| 21:22.15 | enouf | (or returned a proper exit code status - but 0 is considered 'true' for almost everything, yes?) |
| 21:22.18 | rahul | BOSPUS2: there is no babysitting channel, tho |
| 21:23.06 | *** join/#debian m4ggus (n=marcus@p5B036103.dip.t-dialin.net) |
| 21:23.11 | *** join/#debian cbkm` (n=kenny@87-194-135-62.bethere.co.uk) |
| 21:24.00 | cbkm` | Hi guys, is anyone able to answer a quick question about the recent openssl vulnerability? The question is: Is the output of openssl rand -out ... etc also affected? Or just certificates? - Thanks :) |
| 21:24.34 | BOSPUS2 | found it |
| 21:24.38 | stew | BOSPUS2: show us the contents of /etc/network/interfaces ; use a pastebin: /msg dpkg pastebin |
| 21:24.43 | Spec | Can I make updatedb(slocate) index NFS filesystems (that are currently mounted) |
| 21:24.51 | rahul | stew: he already pasted it into the channel... |
| 21:24.56 | stew | cbkm`: openssl rand was affected |
| 21:25.04 | rahul | stew: he's just not following the syntax in the man page |
| 21:25.25 | enouf | dondelelcaro: thanks for all that - i'm more concerned about which documentation to refer to when inquiring about the bash-builtin kill .. does man kill apply there? or to only the /bin/kill ? and .. are they that different? |
| 21:25.27 | *** join/#debian xbaez (n=xbaez@189.152.77.104) |
| 21:25.32 | *** join/#debian tomaw_ (i=tom@freenode/staff/tomaw) |
| 21:25.33 | jelly-home | Spec: look at the contents of /etc/updatedb.conf, is there a NETPATHS variable? |
| 21:25.36 | *** join/#debian derchris (n=derchris@87-194-89-163.bethere.co.uk) |
| 21:25.39 | *** join/#debian jns (i=jens@vd130016.korypet-solutions.com) |
| 21:25.43 | disposable | Spec: yes, nfs mounts are transparent |
| 21:25.48 | enouf | dondelelcaro: say like echo and /bin/echo are? |
| 21:25.54 | stew | enouf: if you are looking for help with a bash-builtin, use "help foo" not "man foo" |
| 21:25.57 | *** join/#debian Neo_The_User (n=neo@c-24-12-190-159.hsd1.il.comcast.net) |
| 21:26.05 | Spec | well, currently it doesn't, and i've never had to touch updatedb.conf (didn't even know it existed), let me read up on man pages before i speak again -.- |
| 21:26.10 | Neo_The_User | ubottu debian |
| 21:26.22 | jelly-home | disposable: nfs mount points are excluded from updatedb by default |
| 21:26.24 | enouf | stew: right, but 'help kill' is a bit lacking, and man bash-builtins is huge ;-) |
| 21:26.27 | Neo_The_User | ubottu debian |
| 21:26.35 | Neo_The_User | !botabuse |
| 21:26.36 | dpkg | lay off me you buggerererers!!11! |
| 21:26.36 | stew | Neo_The_User: what are you trying to do? |
| 21:26.46 | stew | Neo_The_User: do you have a debian related question? |
| 21:26.50 | Neo_The_User | yes |
| 21:26.50 | BOSPUS2 | this is in interfaces |
| 21:26.55 | Neo_The_User | a general one |
| 21:26.56 | BOSPUS2 | auto eth0 |
| 21:26.57 | BOSPUS2 | iface eth0 inet static |
| 21:26.57 | Spec | jelly-home: ah, PRUNEFS=blahblahblah, so i take it i wanna just delete the "NFS nfs nfs4" part |
| 21:26.59 | stew | BOSPUS2: don't paste here, use a pastebin |
| 21:27.11 | Spec | what are NETPATHS? explicit paths? i wanna index all nfs volumes mounted. |
| 21:27.14 | Neo_The_User | stew he said 2 lines |
| 21:27.17 | enouf | stew: thanks, and fwiw, i did mention earlier; 17:02:53] <enouf> peterS: i do realize 'help kill' and 'man bash{-builtins}' is for bash kill - but which is 'man kill' meant for? |
| 21:27.18 | enouf | [17:03:12] <Fah> uh, oh. that really isn't going to do what you think, but ok. |
| 21:27.21 | disposable | jelly-home: i've just realised that i changed it manually, my bad |
| 21:27.22 | enouf | gah |
| 21:27.24 | *** join/#debian PriceChild (i=pricechi@freenode/staff/ubuntu.member.pricechild) |
| 21:27.29 | enouf | sorry for the flood folks |
| 21:27.34 | Neo_The_User | stew, LIBILOW LIBILOW TIMMAY!!! |
| 21:27.35 | jelly-home | Spec: oh, in that case do what you suggested |
| 21:27.38 | cbkm` | stew: Ah damn, thanks though ;) |
| 21:27.39 | Spec | hmm |
| 21:27.41 | *** part/#debian bahadunn (n=bahadunn@24.244.172.71) |
| 21:27.42 | Neo_The_User | !botabuse |
| 21:27.43 | dpkg | lay off me you buggerererers!!11! |
| 21:27.45 | jelly-home | stew: silence it |
| 21:27.46 | *** mode/#debian [+o stew] by ChanServ |
| 21:27.47 | hilikus` | how can i display what package version is the latest and what version i have installed? |
| 21:27.48 | *** mode/#debian [+b %*!*@c-24-12-190-159.hsd1.il.comcast.net] by stew |
| 21:27.48 | *** mode/#debian [-o stew] by stew |
| 21:27.54 | stew | Neo_The_User: you've been silenced for 10 minutes |
| 21:28.04 | *** part/#debian Neo_The_User (n=neo@c-24-12-190-159.hsd1.il.comcast.net) |
| 21:28.05 | jelly-home | !stew++ |
| 21:28.14 | Spec | jelly-home: one more problem, my NFS is a netapp which keeps a ".snapshot" volume, which has hours and hours/days and days worth of backups, which i do *not* want to index, can i use wildcards/regexps in the "PRUNEPATHS" option? |
| 21:28.29 | dondelelcaro | hilikus`: apt-cache show foopkg; or similar. |
| 21:28.30 | *** join/#debian Winkie (n=urmom@ur.fa.gs) |
| 21:28.30 | Spec | like, */.snapshot/* |
| 21:28.34 | jelly-home | Spec: I don't think so. |
| 21:28.40 | Spec | hmm. |
| 21:28.45 | *** join/#debian alturiak (i=mg@tyrael.eu) |
| 21:28.46 | *** join/#debian |inuxmath (n=mike@198.188-224-87.telenet.ru) |
| 21:28.48 | enouf | wow - i have impeccable timing .. heh |
| 21:28.50 | dondelelcaro | hilikus`: or apt-cache policy foopkg; may also be useful |
| 21:28.56 | hilikus` | thank you |
| 21:29.17 | *** part/#debian varney (i=varney@dsl-035-051.cust.imagine.ie) |
| 21:29.44 | enouf | this makes rading backscroll and replying later that much more fun :-P |
| 21:29.49 | enouf | erm reading* |
| 21:29.53 | Spec | hmm, that didn't work...no nfs in PRUNEFS, but it still doesn't index it |
| 21:30.03 | *** join/#debian Skaag (n=lunix@77.127.217.13) |
| 21:30.25 | jelly-home | Spec: how do you know? :-) |
| 21:30.27 | Skaag | can I install just mysql-server-5.1 on my Etch from the experimental branch? |
| 21:30.48 | Spec | jelly-home: ran updatedb and did 'locate resin', and it didn't find the file under the nfs mount |
| 21:30.54 | *** join/#debian telexicon (n=will@unaffiliated/chowmeined) |
| 21:31.47 | stew | Skaag: no, its compiled aginast sid libraries |
| 21:31.54 | *** join/#debian BeerSerc (n=dries@mail.psioc.net) |
| 21:31.56 | *** join/#debian rabidsnail (n=rabidsna@unaffiliated/cmdrbatguano) |
| 21:32.01 | *** join/#debian kloeri (i=kloeri@freenode/staff/kloeri) |
| 21:32.01 | *** mode/#debian [+l 885] by debhelper |
| 21:32.29 | Skaag | how about if I bring the source, can I do a backport in some manner? |
| 21:32.37 | jelly-home | Spec: fair enough |
| 21:32.48 | jelly-home | Skaag: /msg dpkg ssb |
| 21:32.56 | Spec | jelly-home: it's almost like updatedb doesn't respect /etc/updatedb.conf |
| 21:33.05 | Spec | jelly-home: if i source the file before executing updatedb, different behavior occurs. |
| 21:33.19 | *** join/#debian phaidros (n=phaidros@daddl.fdmbx.net) |
| 21:33.21 | *** join/#debian zarnozC_ (n=linuxz@ti541110a080-0154.bb.online.no) |
| 21:33.31 | neoark | is it possible to change screen resolution when ur running w/o daemon |
| 21:33.32 | *** join/#debian criciuma (i=criciuma@server1.bshellz.net) |
| 21:33.46 | jelly-home | Spec: the old locate cron job was in /etc/cron.daily/find; maybe it does something other than just updatedb. |
| 21:33.46 | *** part/#debian tomaw_ (i=tom@freenode/staff/tomaw) |
| 21:33.53 | Spec | let me check then. |
| 21:34.07 | Spec | oh -.- |
| 21:34.30 | *** join/#debian Neo_The_User (n=neo@c-24-12-190-159.hsd1.il.comcast.net) |
| 21:35.44 | Spec | jelly-home: so, updatedb doesn't respect the .conf file, it's just sourced by the cron job before updatedb is ran. makes sense. |
| 21:36.06 | jelly-home | Spec: I guess it's easier to just run /etc/cron.d/whatever & instead of updatedb |
| 21:36.26 | jelly-home | er, /etc/cron.daily/... |
| 21:37.01 | *** join/#debian arlinja (n=arm9cl@athedsl-185642.home.otenet.gr) |
| 21:37.18 | Spec | meh, it's still going for .snapshot, even though that's in PRUNEPATHS |
| 21:37.19 | enouf | right |
| 21:37.38 | Spec | oh, i'm an idiot. |
| 21:37.52 | *** mode/#debian [+o stew] by ChanServ |
| 21:37.53 | *** mode/#debian [-b %*!*@c-24-12-190-159.hsd1.il.comcast.net] by stew |
| 21:37.53 | *** mode/#debian [-o stew] by stew |
| 21:38.21 | *** join/#debian Neo_The_User (n=neo@c-24-12-190-159.hsd1.il.comcast.net) |
| 21:38.32 | Spec | jelly-home: heh, thanks a lot. ;) |
| 21:39.30 | Neo_The_User | msg NickServ IDENTIFY <mtrx43> |
| 21:39.33 | Neo_The_User | msg NickServ IDENTIFY <mtrx43> |
| 21:39.39 | *** join/#debian lunaphyte_ (n=lunaphyt@unaffiliated/lunaphyte) |
| 21:39.40 | neoark | fail |
| 21:39.43 | *** join/#debian poseidon (n=joe@ip70-161-211-76.hr.hr.cox.net) |
| 21:40.01 | Neo_The_User | msg NickServ IDENTIFY <mtrx43> |
| 21:40.01 | enouf | Spec: i doubt this applies to your situation, but 'update-dlocatedb' is nice if dlocate is installed/used ;-) |
| 21:40.14 | stew | Neo_The_User: stop. do you have a debian related question or not? |
| 21:40.18 | Neo_The_User | yes |
| 21:40.24 | stew | Neo_The_User: ask it |
| 21:40.30 | Neo_The_User | stew stop stalking me |
| 21:40.31 | enouf | <PROTECTED> |
| 21:40.51 | poseidon | When do you think an iceweasel 3 will be released? How long after the ff3? |
| 21:41.07 | Spec | enouf: dlocatedb? |
| 21:41.09 | *** join/#debian mengoshmink (n=mengoshm@82-70-91-1.dsl.in-addr.zen.co.uk) |
| 21:41.26 | enouf | Spec: si, "man update-dlocatedb" ;-) |
| 21:41.51 | Spec | no existy |
| 21:41.54 | enouf | Spec: man update-<tab><tab> and watch the fireworks :-P |
| 21:42.01 | Sebboh | how many logical partitions can I have? |
| 21:42.02 | enouf | Spec: tehn dlocate isn't installed |
| 21:42.13 | Spec | that's probably true =P |
| 21:42.20 | *** join/#debian Neo_The_User (n=neo@c-24-12-190-159.hsd1.il.comcast.net) |
| 21:42.30 | Entr4nced | I would change that password if I were he lol |
| 21:42.33 | enouf | heh - it's useful for me many times; apt-cache show dlocate |
| 21:42.44 | Spec | how's it better than normal locate? |
| 21:42.52 | enouf | Spec: ^^^ |
| 21:43.03 | *** join/#debian BOSPUS2 (n=BostjanP@89-212-197-217.dynamic.dsl.t-2.net) |
| 21:43.03 | Spec | oh, it's for packages |
| 21:43.04 | wam | Does Luks use openssl for encryption? |
| 21:43.12 | BOSPUS2 | i found that document |
| 21:43.51 | BOSPUS2 | i write this too ? |
| 21:43.51 | BOSPUS2 | auto lo |
| 21:43.52 | BOSPUS2 | iface lo inet loopback |
| 21:44.04 | Neo_The_User | Talon 3, leave me alone -Stealth 2005 |
| 21:44.08 | *** mode/#debian [+o stew] by ChanServ |
| 21:44.10 | *** mode/#debian [+b %*!*@c-24-12-190-159.hsd1.il.comcast.net] by stew |
| 21:44.10 | *** mode/#debian [-o stew] by stew |
| 21:44.16 | *** join/#debian grand_grunt (n=remi@bel42-3-88-175-80-11.fbx.proxad.net) |
| 21:44.29 | enouf | Spec: aye ;-) does like dpkg -L <pkgname> , but much faster, and also operates on <keywords> like locate does, downside, update-dlocatedb needs to be run if install of pkg occured before last cron.whatever ran |
| 21:44.33 | *** part/#debian Neo_The_User (n=neo@c-24-12-190-159.hsd1.il.comcast.net) |
| 21:45.11 | enouf | Spec: aye, i have a /etc/cron.daily/dlocate file |
| 21:46.14 | Spec | stew: i was wondering how long it was gonna take ya ;) |
| 21:46.50 | enouf | Spec: apt-file is another champ ;-) do "/msg dpkg apt-file" and might as well "/msg dpkg grounding" while you're at it ;-) |
| 21:46.59 | BOSPUS2 | do i haveto specifiy broadcast and network too ? |
| 21:47.22 | enouf | BOSPUS2: /msg dpkg interfaces |
| 21:47.31 | Spec | enouf: i use apt-file a bit ;) |
| 21:47.36 | enouf | \o/ |
| 21:47.52 | Spec | when i came across apt-file, it made finding weird libraries a breeze. ;) |
| 21:48.38 | *** join/#debian koeppea (n=koeppea@p57A71C35.dip0.t-ipconnect.de) |
| 21:48.40 | enouf | Spec: psst .. betcha didn't know about the 'configure-debian' pkg ;-) |
| 21:48.43 | stew | BOSPUS2: don't specify network or broadcast |
| 21:48.47 | *** join/#debian vraa (n=vraa@h203.180.213.151.ip.alltel.net) |
| 21:49.17 | *** join/#debian joltcan_ (i=jolt@0x2a.se) |
| 21:49.43 | *** join/#debian Avernos (n=jose@238.Red-80-59-106.staticIP.rima-tde.net) |
| 21:49.56 | Spec | enouf: nope :p |
| 21:50.07 | Spec | enouf: but you could always just extract the pre-scripts and run them again, right? =P |
| 21:50.25 | enouf | er .postinst .. but not all have them :-P |
| 21:51.13 | *** join/#debian smallGnome (n=Administ@bolt.funcom.com) |
| 21:51.17 | *** part/#debian smallGnome (n=Administ@bolt.funcom.com) |
| 21:52.00 | enouf | Spec: list for me which pkgs apply - right now .. quick! O_o |
| 21:52.01 | *** mode/#debian [+l 877] by debhelper |
| 21:52.15 | *** join/#debian ColdFyre (n=coldfyre@c-24-130-214-62.hsd1.ca.comcast.net) |
| 21:52.21 | Spec | enouf: apache2! |
| 21:52.28 | Spec | -mpm-worker. |
| 21:52.56 | enouf | haha - i mean ALL of them, and no mistakes mate ;-) |
| 21:53.04 | Spec | damn, that was a random guess, too. |
| 21:53.54 | *** join/#debian lobao (i=humberto@189.34.67.58) |
| 21:54.25 | *** join/#debian mick_home (n=clamwin@h-74-2-196-226.miatflad.covad.net) |
| 21:55.09 | enouf | well, apache and/or apache-common is correct :-P but i don't have apache2 installed, so cannot really say if one of those takes it's place |
| 21:55.27 | *** join/#debian gm152 (n=gm@d150-14-63.home.cgocable.net) |
| 21:56.14 | neoark | is there a way to disable iptables in debian |
| 21:56.24 | neoark | seems its in kernel and not run as service |
| 21:56.32 | hilikus` | remove the package |
| 21:56.43 | *** join/#debian joltcan (i=jolt@0x2a.se) |
| 21:56.49 | enouf | wtf is kind of mnemonic is "-mpm-worker" when discussing dpkg-reconfgure? :-P |
| 21:56.55 | *** join/#debian matabares (n=matabare@static-adsl190-7-151-182.epm.net.co) |
| 21:57.27 | enouf | neoark: it's not enabled by default |
| 21:57.32 | Spec | apache2 comes in flavours |
| 21:57.40 | enouf | neoark: iptables -L |
| 21:57.41 | *** join/#debian amagalma (n=amagalma@ppp63-192.adsl.forthnet.gr) |
| 21:57.45 | neoark | ah k |
| 21:57.46 | Spec | apache2-mpm-event, apache2-mpm-itk, apache2-mpm-perchild, apache2-mpm-prefork, apache2-mpm-worker |
| 21:57.52 | Spec | and apache2-mpm-threadpool |
| 21:58.04 | BOSPUS2 | bah |
| 21:58.17 | *** part/#debian slackd00d (n=jason@unaffiliated/slackd00d) |
| 21:59.03 | BOSPUS2 | ./etc/resolv.conf |
| 21:59.11 | BOSPUS2 | do i write anything here ? |
| 21:59.16 | *** join/#debian penguim (n=penguim@ubuntu/member/linuxba) |
| 21:59.17 | enouf | i knew it |
| 21:59.31 | *** join/#debian NickBurnsSNL (n=NickBurn@adsl-75-18-84-118.dsl.chcgil.sbcglobal.net) |
| 21:59.47 | enouf | well your ISP Nameservers should be listed - man resolv.conf |
| 22:00.03 | Spec | echo "nameserver 4.2.2.1" > /etc/resolv.conf |
| 22:00.05 | Spec | *innocent* |
| 22:00.08 | enouf | or, whatever DNS you're using, maybe bind |
| 22:00.18 | kombucha | i dont know enough math to understand how the openssl bug thingie works |
| 22:00.42 | *** join/#debian tolecnal_ (n=tolecnal@215.80-203-134.nextgentel.com) |
| 22:01.17 | BOSPUS2 | iwrite gateway i mean ip adress of router or isp dns in /etc/resolv.conf ? |
| 22:01.29 | Spec | kombucha: it's not too hard -- openssl relied on a pool of uninitialized memory for randomness, and debian patched it to "fix" the uninitialized memory. this made the pool of possibleness very, very small. |
| 22:01.48 | Spec | that's the one case where uninitialized memory is actually a good thing. (usually it's not a good thing.) |
| 22:02.21 | *** join/#debian xanaxfoo (n=jason@unaffiliated/slackd00d) |
| 22:02.22 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 22:02.52 | enouf | kombucha: the 'fix' Spec mentiuoned was done to suppress annoying Valgrind messages - however, it also caused this issue to occur |
| 22:02.53 | *** part/#debian joebrunner (n=joe@206.81.49.171) |
| 22:03.21 | jelly-home | Spec: 4.2.2.1 is an open recursor? |
| 22:03.22 | Spec | right, valgrind is used to check for uninit'd memory and memory leaks, and is good practice to adhere to. |
| 22:03.27 | *** join/#debian schallstrom (n=schallst@p57A2490F.dip.t-dialin.net) |
| 22:03.32 | Spec | it's a top level dns server, if that's what you mean |
| 22:03.34 | Spec | i think verizon runs it |
| 22:03.39 | jelly-home | no |
| 22:03.43 | Spec | no? |
| 22:04.05 | *** join/#debian binwiederhie1 (n=pheckel@p5B076038.dip.t-dialin.net) |
| 22:04.13 | jelly-home | if it's one of the root-servers.net, it's not useful for resolv.conf |
| 22:04.54 | Spec | sorry. |
| 22:04.55 | Spec | 4.2.2.1, 4.2.2.2, 4.2.2.3, 4.2.2.4, 4.2.2.5 belong to Level3, a CLEC are are available for anyone to use. |
| 22:04.57 | hilikus` | http://metasploit.com/users/hdm/tools/debian-openssl/ |
| 22:04.57 | hilikus` | ^^ |
| 22:05.06 | enouf | BOSPUS2: isp dns |
| 22:05.18 | Tramp | Spec: openssl did not rely on uninitialized memory. It was used but this was not the critical point. The problem was a second line of code, which looked exactly the same and which was not about uninitialized memory - and which was commented out as well |
| 22:05.26 | jelly-home | Spec: recursor dns = one that answers all the queries for you (not just the top level domain ones like root servers do) |
| 22:05.32 | Spec | Tramp: ah, my mistake. |
| 22:05.35 | *** join/#debian stieno (n=dave@ora600.plus.com) |
| 22:05.36 | enouf | BOSPUS2: '/sbin/route' should show your router as default gw |
| 22:05.42 | *** join/#debian SlackDeb_ (n=fede@201.254.118.95) |
| 22:06.10 | Spec | jelly-home: oh, i'm not sure about that then. ;), i just know it's always up and working. |
| 22:06.18 | *** join/#debian S1ackDeb (n=fperetti@201.254.118.95) |
| 22:06.46 | jelly-home | Spec: if it's usable in /etc/resolv.conf, it means it really does recursion |
| 22:06.47 | Spec | i mean, it resolves everything i've ever tried to resolve from it, so i assume it's recursor dns? |
| 22:06.51 | jelly-home | yep |
| 22:07.05 | Spec | so top level ones only resolve domains, and not subdomains, is that right? |
| 22:07.09 | jelly-home | right |
| 22:07.39 | Spec | oh, jelly-home, i fabricated a neat oneline for my updatedb.conf to dynamically get the nfs volumes, and not back up the .snapshot directory |
| 22:07.54 | Spec | this is appended to PRUNEPATH |
| 22:07.57 | Spec | NFSPATHS=$(for i in $(mount|grep nfs|awk {'print $3'}); do echo -n "$i/.snapshot "; done; echo '') |
| 22:08.03 | jelly-home | Spec: even more, they only resolve .tlds (com., net., us., etc) |
| 22:08.16 | jelly-home | good thing it's a shell script |
| 22:08.24 | *** join/#debian |inuxmath (n=mike@198.188-224-87.telenet.ru) |
| 22:08.25 | Spec | yeap, it's sourced, it's not a config file :p |
| 22:08.54 | BOSPUS2 | enouf when isp servers are already in there |
| 22:09.02 | *** join/#debian jpin (n=jpinto@duonghome.NMSU.Edu) |
| 22:09.07 | BOSPUS2 | in resolv.conf |
| 22:09.18 | enouf | when? |
| 22:09.26 | jelly-home | Spec: if you ever install another locate alternative, look out. mlocate uses it as a config file (and is very limited in what accepts) |
| 22:09.33 | jberg | does anyone have experience with wireless network cards for laptops and ndiswrapper? i have a broadcom chipset and have the windows drivers for it. it works to insert it with ndiswrapper, but when i do ndiswrapper -l to list it says "alternate driver ssb", so i need to unload the module or something |
| 22:09.44 | jberg | i have tried to blacklist the ssb module and rmmod ssb |
| 22:09.47 | Spec | jelly-home: good to keep in mind, highly unlikely though =p |
| 22:09.51 | jberg | but it still says alternate driver ssb |
| 22:10.03 | jelly-home | Spec: I do "stat /path/handled/by/automounter" in mine ;-) |
| 22:10.24 | Spec | eh? stat? |
| 22:10.29 | BOSPUS2 | scratch when |
| 22:10.36 | Spec | wow, neat. never knew about stat. |
| 22:10.52 | Sebboh | so I can grow a volume group later by adding more physical volumes, eh? |
| 22:10.57 | jelly-home | Spec: simple wrapper for stat(3) |
| 22:11.07 | Spec | man 3i do not have man 3 stat |
| 22:11.19 | enouf | manpages-dev |
| 22:11.21 | *** join/#debian konadr_ (n=Kon@unaffiliated/konadr) |
| 22:11.22 | jelly-home | install manpages-dev, I guess |
| 22:11.37 | Spec | i have it |
| 22:11.42 | jelly-home | !find man3/stat |
| 22:11.51 | enouf | ooops not in manpages-dev |
| 22:11.52 | pinto3 | stat's a system call isn't it? |
| 22:11.53 | Spec | i've got man 2 stat |
| 22:11.58 | *** join/#debian shellito (n=shellito@sistemas.uis.edu.co) |
| 22:12.01 | enouf | thus is where dlocate shines ;-) |
| 22:12.10 | enouf | whomever has it installed |
| 22:12.23 | Spec | looks like man 2 stat is the sys call man page? |
| 22:12.30 | dpkg | Debian Package/File/Desc Search of 'man3/stat' returned no results. |
| 22:12.35 | jelly-home | it is, but man 3 stat works on my lenny as well |
| 22:12.47 | *** join/#debian magmaniac (n=nobody@p4FDB2992.dip0.t-ipconnect.de) |
| 22:12.52 | Spec | i'm not on lenny |
| 22:12.57 | jelly-home | whatever, stat(1) is a wrapper for stat(2) then |
| 22:13.06 | Spec | :p |
| 22:13.19 | Sebboh | that's a no go for man 3 stat here, too. Lenny. |
| 22:13.24 | enouf | nfs-common: /usr/share/man/man8/statd.8.gz O_o |
| 22:13.34 | pinto3 | if it doesn't dereference symlinks it's a wrapper for lstat |
| 22:13.47 | Sebboh | heh enouf. |
| 22:14.18 | Spec | pinto3: -L makes it dereference |
| 22:14.36 | pinto3 | ah, if it does file descriptors too, then it's fstat as well |
| 22:14.55 | pinto3 | stat 5 5</etc/passwd |
| 22:14.58 | linkslice | I need help figuring out which version of Debian this system is dmesg | head shows: Linux version 2.6.18-4-686 (Debian 2.6.18.dfsg.1-12etch2) (dannf@debian.org) (gcc version 4.1.2 20061115 (prerelease) (Debian 4.1.1-21)) #1 SMP Wed May 9 23:03:12 UTC 2007 |
| 22:15.00 | linkslice | but |
| 22:15.03 | magmaniac | hello. does somebody know if fail2ban can be configured in such a way that it will also notice failed logins via ssh-keys? it seems by default it only notices failed passwords. Using "ssh -o PasswordAuthentication=no" one could avoid this password failure, and try by brute-force a certain set of SSH keys... |
| 22:15.13 | *** join/#debian Bac0n (i=bCn@esk-138-64-233-83.3.cust.bredband2.com) |
| 22:15.14 | linkslice | /etc/debian_version shows 3.1 |
| 22:15.21 | Spec | linkslice: what about /etc/issue? |
| 22:15.41 | linkslice | Spec, Debian GNU/Linux 3.1 |
| 22:15.57 | dondelelcaro | magmaniac: I don't know what gets put into authlog for failed ssh-keys, but you can easily modify the regex used |
| 22:16.27 | *** join/#debian Hoxzer (n=dsadsad@dsl-hkigw7-fe1df900-39.dhcp.inet.fi) |
| 22:16.36 | linkslice | Spec, weird huh? |
| 22:16.37 | enouf | linkslice: Sarge with an Etch kernel ;-) |
| 22:16.45 | Spec | linkslice: yeap |
| 22:16.53 | Spec | i think it's a ...whatchmacallit |
| 22:16.57 | linkslice | so you think sarge userland? |
| 22:17.01 | enouf | linkslice: uname -r |
| 22:17.03 | Spec | a chimaera! |
| 22:17.04 | BOSPUS2 | do letters like ipaddr need to be written with capital letters ? |
| 22:17.15 | linkslice | enouf, 2.6.18-4-686 |
| 22:17.23 | magmaniac | dondelelcaro: it gives "Failed none..." which also appears for successful logins. |
| 22:17.24 | *** join/#debian krlos (n=krlos@200.60.38.185) |
| 22:17.35 | *** join/#debian LukeL_ (n=Luke@unaffiliated/lukel) |
| 22:17.39 | enouf | linkslice: your sources.list says? but libc6 version will tell ya |
| 22:17.42 | BOSPUS2 | err words like ipaddr need to be written with capital letters ? |
| 22:18.04 | enouf | linkslice: dpkg -l libc6 | tail -n 1 |
| 22:18.08 | linkslice | sources.list is what started confusing me because I thought it was an etch system, sources.list says sarge |
| 22:18.12 | *** join/#debian mirezwer (n=mirezwer@36-175-222-85.adsl.verat.net) |
| 22:18.26 | disposable | !repeat |
| 22:18.26 | dpkg | Please don't immediately repeat your question if no one answers it. If no one answers, that means that either no one knows the answer to your question, no one is willing to answer it, or you haven't provided enough information. Ask me about <ask> or <sicco> if you need help phrasing your question. If you don't get an answer here, go ahead and try asking your question on debian-user@lists.debian.org |
| 22:18.29 | linkslice | enouf, ii libc6 2.3.6.ds1-13 GNU C Library: Shared libraries |
| 22:18.51 | *** join/#debian ricosecada (n=ricoseca@85.233.228.239) |
| 22:18.54 | enouf | eww ;-) |
| 22:19.14 | magmaniac | dondelelcaro: I could filter for that, but it could have the side-effect of banning users who successfully open several shells in quick succession (yeah I should teach them about screen) |
| 22:19.17 | ricosecada | What is the point of forced fsck check on 30 mounts, since if errors are found on the file system, fsck will run no matter what? |
| 22:19.51 | poseidon | Whats better for playing dvd's, mplayer or vlc? |
| 22:19.52 | *** part/#debian BOSPUS2 (n=BostjanP@89-212-197-217.dynamic.dsl.t-2.net) |
| 22:20.01 | linkslice | enouf, ? |
| 22:20.08 | jelly-home | ricosecada: catching up on something missed before. Bit rot, random corruptions... |
| 22:20.11 | ricosecada | poseidon, both are good |
| 22:20.35 | linkslice | poseidon, I like panasonic ;) |
| 22:20.37 | ricosecada | jelly-home, they only get caught on forced checks? |
| 22:20.53 | poseidon | ricosecada, vlc isn't seeming to work for me right now. Is there some sort of codec pack I can install to get dvd's to work with it? |
| 22:21.06 | poseidon | linkslice, I have a viewSonic :) |
| 22:21.16 | jelly-home | ricosecada: right. If you never access a file that's corrupted, you won't know |
| 22:21.20 | enouf | linkslice: well, yep, i would've expected that with installing an etcg kernel |
| 22:21.25 | disposable | BOSPUS2: usually not. i.e. ifconfig displays them small, macchanger accepts them small. what do you need it for? |
| 22:21.26 | linkslice | ricosecada, if there's errors on the disk but the disk was unmounted cleanly what would know about the corruptions? |
| 22:21.32 | ricosecada | poseidon, I personally use mplayer and really like it. I have used vlc also, but I don't know. |
| 22:21.48 | linkslice | enouf, so basically it's sarge but someone along the way installed an etch kernel? |
| 22:22.01 | *** mode/#debian [+l 868] by debhelper |
| 22:22.03 | Spec | alright, it's been fun, i'm gone. ;) |
| 22:22.05 | enouf | linkslice: you likely need/want to upgrade to etch - /msg dpkg sarge->etch |
| 22:22.15 | enouf | linkslice: seems so |
| 22:22.19 | ricosecada | poseidon, I haven't found anything mplayer wouldn't play. |
| 22:22.21 | *** join/#debian RaceCondition (n=RaceCond@80-235-42-57-dsl.mus.estpak.ee) |
| 22:22.29 | *** join/#debian SlimG (n=SlimG@84.205.58.242) |
| 22:22.33 | ricosecada | jelly-home, thanks |
| 22:22.42 | enouf | linkslice: selective upgrading - maybe done to sypport New Hardware |
| 22:23.02 | linkslice | enouf, yeah but that's frustrating |
| 22:23.05 | enouf | linkslice: cat /etc/debian_version |
| 22:23.07 | *** join/#debian spx2 (n=spx2@89.37.70.170) |
| 22:23.12 | linkslice | enouf, that says 3.1 |
| 22:23.25 | *** join/#debian joltcan (i=jolt@0x2a.se) |
| 22:23.40 | enouf | linkslice: well, your kernel and libc6 aree already Etch-ish, so |
| 22:24.05 | poseidon | What are dvd drives mounted under by defualt in debian etch? |
| 22:24.22 | enouf | linkslice: just like now, many with brand new hardware can't install Etch without a Backported/Kmuto kernel |
| 22:24.35 | ribasushi | ok... apache/vsftpd keys are regened, dk/dkim keys, the openvpn stuff too |
| 22:24.36 | enouf | linkslice: but Etch+Half is addressing that |
| 22:24.42 | ribasushi | anything else left besides ssh? |
| 22:24.51 | enouf | linkslice: and in the works - around 4.0r4, iinm |
| 22:25.10 | linkslice | enouf, *sigh* ok |
| 22:25.21 | linkslice | well that clears things up for me at least |
| 22:25.28 | enouf | linkslice: i think i missed the original problem though ;-) |
| 22:25.51 | poseidon | I tried to use viewDVD with mplayer, but that crashed it |
| 22:26.02 | disposable | enouf: wtf iinm? |
| 22:26.04 | enouf | linkslice: many people mix releases, however many also do it unknowingly and are moronic about it ;-) |
| 22:26.09 | enouf | !iinm |
| 22:26.09 | dpkg | from memory, iinm is If I'm Not Mistaken |
| 22:26.22 | disposable | enouf: aah :) |
| 22:26.35 | linkslice | enouf, I was going to install the nagios-snmp plugins from etch backports, so I went to add it to sources.list and it said sarge, and was like 'wtf' so starting looking around at other things and realized I had some weird hybrid |
| 22:26.55 | enouf | dpkg iinm =~ s/If I'm Not Mistaken/"If I'm Not Mistaken"/ |
| 22:26.55 | dpkg | enouf: OK |
| 22:27.14 | *** join/#debian craigevil (n=craigevi@114.64.205.68.cfl.res.rr.com) |
| 22:27.19 | enouf | linkslice: bingo |
| 22:27.26 | V4Nelle_ | guys apt-get upgrade told me that mplayer can't be upgraded and if i want to do that i must do dist-upgrade......there is a bug? |
| 22:28.03 | enouf | linkslice: if 'stable' was there, instead of release-NAME (sarge/etch/lenny) .. then it would have upgraded gracefully ;-) |
| 22:28.10 | enouf | linkslice: in most cases, that is |
| 22:28.47 | linkslice | enouf, yeah it's a webhosting server with dozens of domains hosted on it with mysql, so this client tends to upgrade slowly |
| 22:29.03 | enouf | V4Nelle_: it means some dependent software must also be removed/upgraded and new versions installed |
| 22:29.16 | linkslice | enouf, the potential for mysql corruptions is scary |
| 22:29.24 | enouf | V4Nelle_: use apt-get -s dist-upgrade to seee what WOULD occur |
| 22:29.29 | enouf | V4Nelle_: after an update |
| 22:30.19 | enouf | linkslice: "i see nothing, i know nothing" :-) |
| 22:30.28 | *** join/#debian minus198_ (n=asdf@c83-250-74-212.bredband.comhem.se) |
| 22:30.50 | linkslice | V4Nelle_, sounds like the wetware doesn't know what's going on, possibly a faulty keyboard to chair adapter |
| 22:31.00 | *** join/#debian litlebuda (n=litlebud@87-196-154-164.net.novis.pt) |
| 22:31.06 | linkslice | ;) |
| 22:31.22 | *** join/#debian jelly-home (n=jelly@islands.iskon.hr) |
| 22:31.58 | *** join/#debian piwok (n=mazevedo@189.25.11.163) |
| 22:32.23 | *** join/#debian Teltariat (n=tekron@pool-71-249-46-10.nycmny.east.verizon.net) |
| 22:32.26 | Teltariat | What are good graphical term apps besides konsole and gnome-terminal? I need something with the speed of xterm, and slightly less footprint than either konsole or gnome-terminal. Suggestions? |
| 22:32.27 | n3kl | I have a PS2 keyboard that has a usb converter on it and for whatever reason, linux is not detecting it. I have tried several different converters, different make and types and also several keyboards. Is this a lost cause? |
| 22:33.01 | n3kl | Teltariat: I think aterm is the lightest. |
| 22:33.37 | Teltariat | Thanks n3kl. Any other suggestions? Does aterm make it easy to grow and shrink the term font? |
| 22:34.40 | n3kl | Yeah, you hold shift and press the + or -. |
| 22:34.57 | n3kl | Teltariat: another popular one is eterm. |
| 22:36.29 | enouf | rxvt-unicode ? |
| 22:37.01 | enouf | n3kl: hey, i love my usb keyboard using a ps/2 converter ;-) |
| 22:37.03 | *** join/#debian arlinja (n=arm9cl@athedsl-185642.home.otenet.gr) |
| 22:37.19 | enouf | n3kl: you're doing it backwards ;-) |
| 22:37.36 | enouf | n3kl: what's wrong with ps/2 ? usb sucks donkey gonads |
| 22:38.15 | *** join/#debian hugyup (n=unk@124.80.83.36) |
| 22:38.21 | n3kl | enouf: the machine I am using does not have ps2 |
| 22:38.27 | n3kl | and all I have are ps2 keyboards |
| 22:38.35 | enouf | n3kl: either your adapter/converter is bad, or you need some usb modules loaded, like say 'usbhid' and maybe xorg 'evdev' ? |
| 22:38.50 | *** join/#debian hilikus (n=hacknake@c-98-208-89-53.hsd1.ca.comcast.net) |
| 22:39.05 | pflanze | How do you check an ssl (not ssh) key for vulnerability? How do you get the fingerprint of one? |
| 22:39.14 | enouf | pflanze: see /topic |
| 22:39.59 | *** join/#debian netdaemon (n=netdaemo@tuxhacker/netdaemon) |
| 22:39.59 | enouf | oh, hrm .. my fingerprints were shown upon ssh-keygen -t <type> |
| 22:40.41 | enouf | i'm sure you can parse, maybe ssh-keyscan - i know you're saying ssl, not ssh, but .. see man openssl ? |
| 22:41.09 | *** join/#debian blueyed (n=daniel@pdpc/supporter/active/blueyed) |
| 22:41.49 | i_am_ed | I updated openssh 24 hours ago to fix the vulnerability but now there's another update available, where can i find information about the new update? (I've been to http://wiki.debian.org/SSLkeys but doesn't seem to have the info I want) |
| 22:42.31 | enouf | pflanze: man ciphers |
| 22:44.04 | *** join/#debian holycow (n=new@mail.wjsgroup.com) |
| 22:44.51 | *** part/#debian _bernie (n=bernie@217-133-10-139.b2b.tiscali.it) |
| 22:45.07 | dondelelcaro | i_am_ed: you updated openssl, not openssh. |
| 22:45.23 | enouf | man i suck - sorry pflanze |
| 22:45.31 | *** join/#debian magmaniac (n=nobody@p4FDB2992.dip0.t-ipconnect.de) |
| 22:45.35 | dondelelcaro | i_am_ed: the new update specifically addresses ssh, and most importantly, addresses the weak keys correclty. |
| 22:45.49 | pflanze | enouf: well, np :) |
| 22:46.26 | pflanze | Hell does anyone understand the openssl tool interface? |
| 22:46.32 | *** join/#debian |inuxmath (n=mike@198.188-224-87.telenet.ru) |
| 22:46.35 | dondelelcaro | pflanze: yes. |
| 22:47.04 | *** join/#debian Genghis|B (n=Genghis@got.debian-inside.com) |
| 22:47.10 | pflanze | ok so how do you get a fingerprint displayed for a .pem file? |
| 22:47.20 | dondelelcaro | pflanze: as far as checking a key for vulnerability, if it was made by openssl on Debian between the times indicated, it's broken. |
| 22:47.23 | *** join/#debian HockeyInJune (i=HockeyIn@pool-71-247-1-229.nycmny.east.verizon.net) |
| 22:48.00 | *** join/#debian markybob (i=markybob@unaffiliated/markybob) |
| 22:48.06 | dondelelcaro | pflanze: man x509, read about the -fingerprint option |
| 22:48.12 | enouf | pflanze: i do know pem files are also affected |
| 22:48.21 | magmaniac | can somebody give advice how keys which are reported as "no blacklist information" should be treated? |
| 22:48.48 | i_am_ed | dondelelcaro: ah, thanks for clearing up my confusion |
| 22:49.08 | enouf | dondelelcaro: nice, man -k fingerprint shows crap :-P |
| 22:49.17 | pflanze | magmaniac: I got this for ancient keys only iirc; so they are probably not affected if they are really old. |
| 22:49.37 | *** join/#debian root__ (n=forrestv@c-66-176-158-112.hsd1.fl.comcast.net) |
| 22:49.45 | pflanze | magmaniac: otoh who knows how much worth such old keys are nowadays? |
| 22:49.55 | magmaniac | pflanze: I got it for one which was almost certainly created recently, though probably not on a debian system |
| 22:50.09 | pflanze | ok then I don't know |
| 22:50.29 | dondelelcaro | magmaniac: if it wasn't created on a Debian (or Debian-based) system, it's probably ok. However, you should probably remake them anyway. |
| 22:50.58 | magmaniac | I'll take the safe route and will disable those users' keys, at least temporarily. thanks. |
| 22:51.14 | dondelelcaro | definetly disable them if they are DSA keys. |
| 22:51.41 | pflanze | dondelelcaro: why this? |
| 22:52.00 | dondelelcaro | pflanze: because DSA keys can be compromised if they are ever used on a machine with a weak RNG> |
| 22:52.06 | *** part/#debian matabares (n=matabare@static-adsl190-7-151-182.epm.net.co) |
| 22:52.25 | *** join/#debian Mamanga (n=Carlo@190.189.26.220) |
| 22:52.31 | pflanze | hm. Wouldn't then the ssh-vulnkey tool see it as a weak key? |
| 22:52.42 | dondelelcaro | pflanze: no. |
| 22:52.44 | jberg | does anyone have experience with getting a wireless network card with a broadcom chipset working? |
| 22:53.01 | markybob | jberg, depends which chipset. be specific |
| 22:53.14 | dondelelcaro | pflanze: the key could have 1024 bits of entropy, and still be broken if used on a machine with a weak RNG. |
| 22:53.26 | pflanze | and how can this be if mtime of .ssh/authorized_keys and .ssh/id_dsa* are never updated? |
| 22:53.56 | dondelelcaro | pflanze: uh.. because someone would know what the key actually is if you were using a weak RNG? |
| 22:54.02 | *** join/#debian Mamanga (n=Carlo@190.189.26.220) |
| 22:54.06 | *** join/#debian antgel_ (n=antony@82-68-107-174.dsl.in-addr.zen.co.uk) |
| 22:54.15 | jberg | markybob: BCM95311MCG wlan mini-PCI |
| 22:54.15 | pflanze | but in this case dsa keys are not at all different from rsa key, no? |
| 22:54.32 | dondelelcaro | pflanze: they are, because of the dsa algorithm. |
| 22:54.54 | zinx | no one should be using dsa anyway |
| 22:54.55 | markybob | jberg, yes, i have that. what's your question? |
| 22:55.15 | pflanze | hm, do you mean, ssh connections which were using a dsa key were broken? whereas ssh connection on Debian systems when used with a proper rsa key weren't broken? |
| 22:55.23 | *** join/#debian vorpal (n=rhunter@pdpc/supporter/student/vorpal) |
| 22:55.45 | dondelelcaro | pflanze: the dsa private key has the potential to be recovarable from a large enough stream of data given a weak RNG. |
| 22:55.48 | jberg | markybob: well ive tried a couple of things. ndiswrapper and bcm43xx-fwcutter, but it doesnt work |
| 22:55.57 | jberg | markybob: how did you do it? |
| 22:56.23 | markybob | jberg, bcm43xx is legacy. you want b43 instead. also, native support is only good on 2.6.25 kernel. |
| 22:56.29 | *** join/#debian Kalli (n=Kalli@pD9E60DFE.dip.t-dialin.net) |
| 22:57.37 | *** join/#debian faux (n=user@1-1-4-21a.gkp.gbg.bostream.se) |
| 22:57.41 | pflanze | dondelelcaro: but why would this not also be the case for rsa keys? dsa private keys should be safe whatever happens with dsa public keys or when connecting to compromised systems, so why should it be exposed? |
| 22:57.47 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 22:58.09 | jberg | markybob: i have a b43 module running, but its not working |
| 22:58.13 | *** join/#debian anom01y (n=lsemple@d75-157-17-185.bchsia.telus.net) |
| 22:58.29 | markybob | jberg, but do you have bcm43xx-fwcutter like you said, or b43-fwcutter? |
| 22:59.44 | anom01y | how can I convert a sid debian package to etch ? |
| 22:59.50 | markybob | !ssb |
| 22:59.50 | dpkg | First: See if the package has already been backported. Ask me about <backports>. If it hasn't, 1) Add a deb-src line for sid to your sources.list. 2) apt-get update 3) apt-get install build-essential; apt-get build-dep packagename;apt-get -b source packagename; 4) install the resultant debs. |
| 23:00.17 | *** join/#debian xlotlu (n=john@79.114.167.28) |
| 23:00.44 | jberg | markybob: oh bcm43xx-fwcutter |
| 23:00.51 | jberg | maybe i should get the other one |
| 23:01.13 | jberg | markybob: anyways, what did you do after that? did it just work automatically or do i have to do something? |
| 23:01.15 | dondelelcaro | pflanze: you need to understand how DSA and RSA actually works first, before talking about it. |
| 23:01.51 | dondelelcaro | pflanze: see http://blog.sesse.net/blog/tech/2008-05-14-17-21_some_maths.html for starters |
| 23:01.52 | markybob | jberg, b43 and 2.6.25 works automagically. be sure to rmmod and modprobe it again after installing the new fwcutter |
| 23:02.00 | *** mode/#debian [+l 861] by debhelper |
| 23:02.02 | V4Nelle_ | guys after format on my / my trashbin has the deleted files which were on usb stick before delete......is normal? |
| 23:02.15 | *** join/#debian WormFood (n=wormfood@219.133.100.2) |
| 23:02.48 | jberg | markybob: hm ok. can i get 2.6.25 with the package system in ubuntu or do i need to compile my own kernel? |
| 23:03.00 | *** join/#debian Bravewolf (n=wolf@78.13.84.41) |
| 23:03.03 | markybob | dude, this is #debian |
| 23:03.07 | enouf | ubuntu? |
| 23:03.15 | root__ | how secure is debian? |
| 23:03.45 | jberg | oh sorry |
| 23:03.55 | antgel_ | root__: yes |
| 23:04.25 | jberg | markybob: do you have a link to the b43-cutter? |
| 23:04.25 | root__ | antgel, but is it secure if i use irc as root? |
| 23:04.36 | pythonic | bad idea |
| 23:04.39 | antgel_ | root__: please troll elsewhere |
| 23:04.44 | markybob | jberg, it's b43-fwcutter, like i said. and it's in debian sid |
| 23:05.02 | *** mode/#debian [+o dondelelcaro] by ChanServ |
| 23:05.03 | *** mode/#debian [+b %*!*@c-66-176-158-112.hsd1.fl.comcast.net] by dondelelcaro |
| 23:05.03 | *** mode/#debian [-o dondelelcaro] by dondelelcaro |
| 23:05.16 | pythonic | bcm43xx-fwcutter |
| 23:05.23 | markybob | pythonic, no, stop. |
| 23:05.24 | pythonic | oh, that one |
| 23:05.47 | *** join/#debian zepp_ (n=fedora@226-133.surfsnel.dsl.internl.net) |
| 23:05.50 | pflanze | dondelelcaro: hm I guess the point is: the system which has the private key, in this case the ssh client, does need a proper rng. So if the client was not Debian, all should be fine. |
| 23:06.13 | dondelelcaro | pflanze: both sides do, actually. |
| 23:06.29 | *** join/#debian versuchsanstalt (n=versuchs@p54857AC5.dip.t-dialin.net) |
| 23:06.40 | *** part/#debian root__ (n=forrestv@c-66-176-158-112.hsd1.fl.comcast.net) |
| 23:06.42 | antgel_ | dondelelcaro: /msg? |
| 23:06.48 | pflanze | but that cannot be, or dsa keys wouldn't protect you from hacked systems, which would be very bad anyway. |
| 23:07.16 | dondelelcaro | pflanze: both sides have to, because you use dsa keys on the server too. |
| 23:08.03 | pflanze | yes, my point is: if the client does have a proper openssl installation and a proper key, and then you're connecting to a system which has been hacked (where the cracker has full control), |
| 23:08.14 | pflanze | he could do things like install the Debian openssl versions, |
| 23:08.22 | pflanze | and if this allows him to revocer my private key, |
| 23:08.27 | pflanze | he could then log in to other systems as well. |
| 23:08.31 | jberg | markybob: oh wow! i did apt-get install b43-fwcutter, then apt crashed. then i did it again and it didnt crash. then i did rmmod b43 and modprobe b43 and now it fucking works!! |
| 23:08.34 | jberg | thanks a lot |
| 23:08.35 | pflanze | and this cannot be true or it would be horrible. |
| 23:08.43 | jberg | i have spent a LOT of time trying to get this to work |
| 23:08.46 | markybob | np |
| 23:08.55 | jberg | and i still have a 2.6.24 kernel :) |
| 23:08.57 | *** join/#debian someonewatchingy (n=shane@72.170.114.188) |
| 23:09.15 | markybob | jberg, you'll have problems. a lot of transfer errors |
| 23:09.24 | jberg | ah damn |
| 23:09.39 | jberg | so i need to compile 2.6.25 then? |
| 23:09.41 | dondelelcaro | pflanze: yes, but my point is that if the server has a broken implementation, anything sent over that connection is suspect, too. |
| 23:10.00 | pflanze | dondelelcaro: yes, that's what I suggested initially and this will well be true |
| 23:10.00 | markybob | jberg, or install from sid, yes. |
| 23:10.12 | pflanze | dondelelcaro: but I suspect this will also be true for rsa keys. |
| 23:10.28 | dondelelcaro | pflanze: no, because the algorithms are different. |
| 23:10.37 | jberg | markybob: hm i have ubuntu. can i install from sid with ubuntu? :) |
| 23:10.42 | pflanze | dondelelcaro: I think the difference may be that an *rsa* key which has been used from a broken client may not have been exposed. |
| 23:10.45 | *** join/#debian m4ggus (n=marcus@p5B036103.dip.t-dialin.net) |
| 23:10.47 | markybob | jberg, dont know. ask in #ubuntu |
| 23:10.58 | pflanze | dondelelcaro: you're running in circles |
| 23:11.56 | pflanze | so I guess: if you were using Debian on the client, even with an old dsa private key, this key must be considered broken too. |
| 23:12.04 | jberg | ok |
| 23:12.08 | dondelelcaro | pflanze: any DSA key used on a machine with a bad RNG is broken. RSA is fine, so long as it was generated on a machine with a good RNG. |
| 23:12.09 | pflanze | but if you're not, then you should be fine. |
| 23:12.23 | antgel_ | xrandr reports: "current 2560 x 1050, maximum 2960 x 1050", but i have specified Virtual 2960 1050 in xorg.conf. how do i get current resolution to go to maximum? |
| 23:12.50 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 23:13.11 | pflanze | dondelelcaro: you don't say whether you're talking about a private or public key been used |
| 23:13.38 | dondelelcaro | pflanze: it doesn't matter |
| 23:13.42 | *** join/#debian gravity (n=david@dsl092-079-075.bos1.dsl.speakeasy.net) |
| 23:13.48 | pflanze | dondelelcaro: the private key is what I care about; and if the private key has only been used on machines with a proper openssl implementation then it's ok. |
| 23:13.58 | dondelelcaro | pflanze: normally the public key is already public, so you don't care |
| 23:14.05 | pflanze | exactly |
| 23:14.16 | dondelelcaro | pflanze: which is why I don't distinguish between the keys. |
| 23:14.24 | pflanze | you're running circles |
| 23:14.38 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 23:15.08 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 23:15.11 | dFence_ | heyyy... does exim keep any logs of the raw data it recieves over the smtp-port? i need to track down the mime-type it gets when it's supposed get a html-mail with inline-graphics |
| 23:15.16 | dondelelcaro | uh... hardly; I've actually spent the time in the last 36 hours to understand *why* DSA is vulnerable; if you want to argue with me, you could at least look at the mathematics behind why it's vulnerable, and why RSA isn't, first. |
| 23:15.21 | dondelelcaro | dFence_: no |
| 23:15.39 | dFence_ | dondelelcaro: other approach: what's the mime-type of mixed emails? |
| 23:16.12 | jim | multipart/mixed? |
| 23:16.21 | *** join/#debian reZo (n=reZo@203-184-20-243.jetbuster.co.nz) |
| 23:16.27 | *** join/#debian arlinja (n=arm9cl@athedsl-185642.home.otenet.gr) |
| 23:16.36 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 23:16.41 | dFence_ | thx |
| 23:16.46 | *** join/#debian astro76 (n=jtaji@unaffiliated/astro76) |
| 23:16.50 | jim | not sure thats it |
| 23:16.51 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 23:17.02 | *** join/#debian mythomaniac (n=Star@c-98-240-184-156.hsd1.mn.comcast.net) |
| 23:17.08 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 23:17.10 | dondelelcaro | dFence_: I think it's multipart/alternative, but if you want to know for debugging purposes, you can run tcpdump with appropriate options on port 25. |
| 23:17.39 | *** join/#debian ixx (i=foobar@70.114.158.238) |
| 23:17.55 | jim | there's also multipart/alternative, but that's for having the same content represented in several forms (like html and plain text) |
| 23:18.08 | dFence_ | dondelelcaro: just gonna play around with the multipart-stuff, think i'm faster that way :) |
| 23:18.10 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 23:18.17 | dondelelcaro | ah; yeah, it is multipart/mixed |
| 23:18.20 | dondelelcaro | hates mime |
| 23:18.21 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 23:18.40 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 23:18.47 | enouf | jberg: use modprobe -r, not rmmod |
| 23:18.53 | *** join/#debian vort3x (n=vortex@unaffiliated/dfa001) |
| 23:19.08 | jberg | enouf: okay. too late now but will remember it :) |
| 23:19.28 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 23:19.29 | jim | unless you want to take care of dependencies yourself |
| 23:19.32 | enouf | jberg: yes, modprobe handles dependencies, rmmod not |
| 23:19.36 | *** join/#debian vorpal (n=rhunter@pdpc/supporter/student/vorpal) |
| 23:19.55 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 23:19.56 | enouf | jim: and in that case, order counts ;-) |
| 23:20.02 | jim | yep |
| 23:20.05 | *** join/#debian Mamanga (n=Carlo@190.189.26.220) |
| 23:20.11 | Sebboh | 32k seed values, right? From the PID.. Btw I'm sure that others have already noticed this, but... :D The initial ssh key generation probably often occurs around the same time in the install process.. Depending on the user's tasksel selection! So, the distribution of PIDs used as initial seeds is not flat.. :D |
| 23:20.17 | jim | you have to do it in order or weird things can happen :) |
| 23:20.18 | jberg | enouf: yep i know. i just forget it :) |
| 23:20.21 | *** join/#debian oon-exiny_ (n=pekka@81-233-115-239-no78.tbcn.telia.com) |
| 23:20.41 | enouf | jim: i've seen 1st hand - that's how i remember ;-) |
| 23:21.00 | *** join/#debian messju (n=messju@unaffiliated/messju) |
| 23:21.09 | enouf | jberg: ok, now, no more ubuntu questions - install debian, and we'll be all over ya :-P |
| 23:21.26 | *** join/#debian ninjaslim (n=sabeeh@ool-43544a41.dyn.optonline.net) |
| 23:21.32 | jim | what's one time that happened? |
| 23:21.34 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 23:21.41 | jberg | yes im sorry. i have debian on my own computer. but my work wanted me to use ubuntu on my work computer :) |
| 23:21.52 | jberg | my job maybe |
| 23:22.00 | enouf | jim: many psmouse/mousedev situations ;-) |
| 23:22.30 | jim | so a module was removed, and another was inserted but hanging? |
| 23:22.42 | enouf | jberg: no prob, when you have trouble with your own pc, ring us up ;-) |
| 23:22.56 | jberg | will do |
| 23:23.13 | *** join/#debian amine (n=amine@unaffiliated/amine) |
| 23:23.29 | enouf | jim: well, let's put it this way, the mouse just died, out of nowhere, what to do? |
| 23:23.32 | *** join/#debian criciuma_ (i=criciuma@server1.bshellz.net) |
| 23:23.34 | amine | hi, can I remote admin aptitude via some gui on a dedicated machine with no DE? |
| 23:23.50 | enouf | jim: happens a few times with me - but i got the fix down pat now |
| 23:24.05 | V4Nelle_ | any help about that? http://pastebin.com/d2ce31b98 |
| 23:24.06 | amine | and if not, how can I get a list of packages that are installed but excluding dependencies (as in packages I actually did aptitude install [package]) |
| 23:24.17 | enouf | jim: how's your /dev/cdrom thing? |
| 23:24.21 | *** join/#debian ColdFyre (n=coldfyre@c-24-130-214-62.hsd1.ca.comcast.net) |
| 23:24.50 | stew | amine: aptitude search '~i!~M' |
| 23:25.06 | *** join/#debian EtherNet_ (n=ethernet@200.117.83.18) |
| 23:25.11 | stew | amine: and yes, if you type just "aptitude" on a remote machine, you'll get a ncurses gui |
| 23:25.31 | *** join/#debian SR71-Blackbird (n=nirvana@unaffiliated/sr71-blackbird) |
| 23:25.49 | *** join/#debian _criciuma (i=criciuma@server1.bshellz.net) |
| 23:26.00 | EtherNet_ | hello guys, I run a kernel 2.6.X-k7 provided by apt-get, I want to upgrade to 2.6.25 but there is no "k7" version, only 386, 686, amd64, and so on... is is the same if I install 686 version ? |
| 23:26.20 | Hydroxide | EtherNet_: yes |
| 23:26.25 | *** join/#debian felix_da_catz (i=HydraIRC@64.244.168.222) |
| 23:26.27 | stew | EtherNet_: use the 686 version |
| 23:26.34 | EtherNet_ | Hydroxide, excellent. I'm gonna upgrade then |
| 23:26.36 | EtherNet_ | stew, thanks you too |
| 23:27.10 | peterS | amine: aptitude search '~i !~M' |
| 23:27.11 | *** join/#debian beginner (n=assil@41.201.255.77) |
| 23:27.15 | amine | stew: you know.. I've had this machine for over 2 years and this is the first time I know about this ncurse gui |
| 23:27.17 | *** join/#debian \amethyst (n=neil@74-140-161-210.dhcp.insightbb.com) |
| 23:27.32 | peterS | amine: that's command-line for "show me installed packages that do not have the auto flag' |
| 23:27.40 | amine | peterS: thank you |
| 23:27.44 | jim | enouf: finally I have one... story: |
| 23:27.47 | Nyle | good evening |
| 23:27.51 | *** join/#debian Tomas (i=tomas@charizard.olf.sgsnet.se) |
| 23:27.59 | Tomas | how can I check what version of debian Im running? |
| 23:28.08 | peterS | Tomas: cat /etc/debian_version |
| 23:28.12 | Tomas | thanks |
| 23:28.22 | enouf | jim: and the steps are basically; drop to tty, login as root; modprobe -r psmouse; modprobe -r mousedev; physically unplug ps/2 mouse, reinsert ps/2 physical mouse; modprobe mousdev; modprobe psmouse ;-) |
| 23:28.27 | jim | so I edited that rules file as you suggested, taking out one set of cdrom settings... but when I restarted udevd, they came back... |
| 23:28.31 | *** join/#debian dansushi (n=dan@pool-71-184-141-74.bstnma.fios.verizon.net) |
| 23:28.43 | Nyle | peterS, I'm going to take this LCD back... 2" down, 1" in, there is a green pixel that just stays green.. (dead?) |
| 23:29.10 | peterS | enouf: fortunately mousedev is compiled in in recent debian kernels, so it's only psmouse you have to worry about |
| 23:29.19 | Nyle | peterS, there was some application claiming to fix dead pixels by stressing the lcd with all the colors etc. rapidly for 20 minutes but it didn't help |
| 23:29.24 | properzel | how many bits should i create a ssh key with? |
| 23:29.36 | *** part/#debian beginner (n=assil@41.201.255.77) |
| 23:29.45 | jim | so, after thinking for a moment, I emptied the whole file and restarted again, I then had only one cdrom in /dev |
| 23:29.49 | markybob | 235 billion bits |
| 23:30.03 | properzel | how long will it take to generate? |
| 23:30.10 | peterS | properzel: I would go with the default for ssh-keygen. i.e., don't specify. |
| 23:30.11 | markybob | 300 years |
| 23:30.11 | Nyle | ... |
| 23:30.17 | *** join/#debian fisxoj (n=fisxoj@ool-4356ce50.dyn.optonline.net) |
| 23:30.22 | properzel | markybob: cool |
| 23:30.26 | Nyle | just hit enter until it prompts for a passphrase |
| 23:30.28 | Nyle | :/ |
| 23:30.30 | properzel | peterS: sounds week to me? |
| 23:30.39 | Nyle | weak? |
| 23:30.42 | properzel | s/week/weak |
| 23:30.43 | amine | With aptitude search '~i!~M' I still get a list of packages that I never installed that look like dependencies, like libsasl2, libsdl-console, libselinux1, libsemanage1, etc |
| 23:30.46 | properzel | Nyle: ta |
| 23:30.47 | jim | how bout next week? |
| 23:30.47 | peterS | properzel: why do you say that? do you know what the default is? |
| 23:30.51 | Nyle | yup |
| 23:30.53 | fisxoj | hello, gdm doesn't seem to start on boot anymore, and I keep having to log in as root and run it, which isn't so secure, not to mention annoying... any ideas how to fix it? |
| 23:31.12 | properzel | peterS: depends if you create a RSA or DSA i think |
| 23:31.13 | peterS | amine: yeah, some of the initial system install procedures don't set the auto flag for those packages like they should. I think this will be fixed in lenny. |
| 23:31.14 | *** join/#debian reffle_ (n=reffle@cpc2-amer1-0-0-cust67.watf.cable.ntl.com) |
| 23:31.17 | properzel | default would be 1024? |
| 23:31.22 | dFence_ | hm....... |
| 23:31.25 | stew | amine: they might have been installed with apt-get older than .7 or some other tool |
| 23:31.27 | markybob | fisxoj, running gdm as root is the same as having the system start gdm by itself |
| 23:31.31 | amine | ok thanks |
| 23:31.33 | enouf | peterS: ~$ grep MOUSE /boot/config-2.6.16-2-686 |
| 23:31.33 | enouf | CONFIG_INPUT_MOUSEDEV=m |
| 23:31.35 | enouf | ;-) |
| 23:31.37 | peterS | properzel: well, the DSA algorithm doesn't support anything other than 1024 bits, but the DSA algorithm also isn't the default algorithm |
| 23:31.47 | markybob | fisxoj, it's not less "secure"...not like gdm is meant to be secure anyway |
| 23:31.50 | peterS | enouf: I don't consider 2.6.16 to be "recent" |
| 23:31.51 | properzel | RSA is default? |
| 23:31.52 | *** join/#debian Holborn (n=holborn@unaffiliated/holborn) |
| 23:31.55 | stew | amine: if you which you can mark as auto installed them with "aptitude markauto packagename" |
| 23:31.55 | *** part/#debian sm (n=sm@pool-71-107-252-2.lsanca.dsl-w.verizon.net) |
| 23:31.55 | properzel | peterS: ^^ |
| 23:32.01 | peterS | properzel: yes |
| 23:32.03 | enouf | peterS: i know - just explaining ;-) |
| 23:32.11 | properzel | peterS: cool so 2048? |
| 23:32.13 | peterS | properzel: if you don't specify -b (number of bits) or -t (key type), you get RSA 2048 bit |
| 23:32.21 | properzel | right |
| 23:32.24 | amine | stew: nah its ok, I'll reinstall it instead |
| 23:32.30 | peterS | properzel: which is probably a good default |
| 23:32.35 | Nyle | markybob, you should instead start it like this, *if you have to manually* through sudo. sudo /etc/init.d/gdm start.. no need to login as root to start gdm. |
| 23:32.36 | properzel | peterS: cool |
| 23:32.37 | fisxoj | markybob: I'd rather it start on its own, and also not have a root terminal open on console 1 |
| 23:32.50 | jim | what's the latest xen that any debian-supplied kernel is built with, and what version of the kernel is that? |
| 23:32.56 | fisxoj | also, /etc/init.d/gdm doesn't work to start it |
| 23:32.57 | peterS | amine: you can run aptitude and get the curses ui and in there you can set / clear the "auto" flag with the M and m keys |
| 23:33.14 | properzel | peterS: ill go for 8192 anyway .. just for funsies.. ta all! |
| 23:33.15 | markybob | fisxoj, probably update-rc.d gdm defaults |
| 23:33.16 | peterS | amine: I often do this on debian systems because it annoys me that those library packages weren't marked as auto originally |
| 23:33.18 | *** join/#debian m4ggus_ (n=marcus@p5B03739A.dip.t-dialin.net) |
| 23:33.33 | amine | peterS: when is lenny due out? |
| 23:33.35 | enouf | jim: 1stly, when you don't use my nick, finding your comments to me sucks ;-P , 2nd you never mentioned which kernel, who built it, which version, etc |
| 23:33.41 | properzel | amine: end of this year |
| 23:33.45 | peterS | amine: I think 3Q, possibly 4Q |
| 23:33.56 | jim | enouf: sorry |
| 23:33.58 | peterS | which to the cynics means early 2010 |
| 23:34.03 | enouf | jim: if /etc/blkid.tab has stale entries, wipe it or mv it |
| 23:34.14 | Nyle | fisxoj, you should instead start it like this, *if you have to manually* through sudo. sudo /etc/init.d/gdm start.. no need to login as root to start gdm. |
| 23:34.15 | *** join/#debian nolimitsoya (n=nolimits@176.139.216.81.static.vhe.siw.siwnet.net) |
| 23:34.55 | *** join/#debian braydon (n=braydon@68-190-217-86.dhcp.psdn.ca.charter.com) |
| 23:34.58 | jim | enouf you mean in regards to udev and the kernel I'm running now? |
| 23:35.11 | enouf | jim: does cd burning software work? does wodim -scanbus see your drives?, does either cat /proc/sys/dev/cdrom/info -or- cat /proc/scsi/scsi show them? |
| 23:35.12 | peterS | gdm has a funny name. as in "WTF, I have to go start the GDM X server again?" |
| 23:35.21 | fisxoj | Nyle: /etc/init.d/gdm doesn't start gdm, when I've run it as root |
| 23:35.22 | jim | enouf: yes it does |
| 23:35.30 | *** join/#debian |inuxmath (n=mike@198.188-224-87.telenet.ru) |
| 23:35.33 | enouf | jim: in regards to whichever one is giving you trouble ;-) |
| 23:35.39 | jim | let me check wodim |
| 23:36.19 | enouf | if cdrdao is installed, try also cdrdao scanbus |
| 23:36.27 | *** join/#debian simbioz (n=shu4l0@pc-123-172-83-200.cm.vtr.net) |
| 23:36.33 | peterS | jim, enouf: wodim --devices is better than wodim -scanbus, generally |
| 23:36.45 | Nyle | fisxoj, it does |
| 23:36.46 | enouf | pastebin output of ls -l /dev/disk/* |
| 23:36.52 | peterS | though they usually both work, in truth |
| 23:36.56 | enouf | peterS: hrm, duly noted, thanks |
| 23:36.56 | *** join/#debian Paddy_EIRE (n=patrick@78.148.111.22) |
| 23:37.09 | Nyle | fisxoj, "sudo /etc/init.d/gdm start" |
| 23:37.09 | fisxoj | Nyle, I know it's supposed to, but it doesn't |
| 23:37.26 | Nyle | fisxoj, are you using stable? |
| 23:37.27 | jim | it wants to open scsi driver,,, I don't have scsi devices now... the scsi card is packed away |
| 23:37.32 | enouf | jim: oops, i left off your nick this time - which kernel? do tell |
| 23:37.39 | *** join/#debian elements (i=elements@hh.holmboe.se) |
| 23:37.40 | *** join/#debian sodio (n=sodio@va-71-1-140-171.sta.embarqhsd.net) |
| 23:37.44 | enouf | omg |
| 23:37.56 | Nyle | enouf, token? |
| 23:37.59 | peterS | --devices has the advantage of actually telling you the appropriate dev= syntax. although that too is usually not needed, it will default to the first CDRW or DVDR* it can find that can write the needed capacity |
| 23:38.00 | enouf | you cannot remove ALL scsi support like that ;-) |
| 23:38.04 | *** join/#debian oshiii-_^ (n=oshiii@unaffiliated/oshiii/x-3278) |
| 23:38.14 | enouf | Nyle: erm, snortin' ;-) |
| 23:38.20 | peterS | sure you can, unless you use scsi or sata or fc or similar |
| 23:38.25 | peterS | wodim doesn't need scsi |
| 23:38.45 | *** join/#debian S1ackDeb (n=fperetti@200.16.24.132) |
| 23:38.49 | enouf | peterS: he seems to not be avble to generate a "/dev/cdrom" .. only cdrom1, etc |
| 23:38.50 | fisxoj | Nyle: no, sid |
| 23:38.57 | Nyle | fisxoj, check bts |
| 23:38.58 | fisxoj | it broke recently, and I can't figure out how to fix it |
| 23:39.03 | fisxoj | I did |
| 23:39.08 | Nyle | fisxoj, then don't use sid. |
| 23:39.18 | jim | I wanna get that perlpaste going again |
| 23:39.20 | Nyle | !sid faq |
| 23:39.20 | dpkg | http://wooledge.org/~greg/sidfaq.html or http://weda.mine.nu/sidfaq.html (backup) |
| 23:39.27 | peterS | enouf: your advice to check /proc/sys/dev/cdrom/info is good. that is in fact what wodim does when you don't specify a dev= |
| 23:39.27 | enouf | peterS: doesn't libata use scsi? even for IDE devices? like erm, ATAPI ? |
| 23:39.28 | fisxoj | that's incredibly helpful... |
| 23:39.40 | *** part/#debian ixx (i=foobar@70.114.158.238) |
| 23:39.48 | peterS | enouf: yes, libata does, but you don't need libata unless you have devices that aren't supported by the IDE layer. like, well, SATA |
| 23:40.00 | jim | !paste |
| 23:40.00 | dpkg | Do not paste more than 3 lines to this channel. Instead, use: http://channels.debian.net/paste/ or http://rafb.net/paste/ or http://picpaste.com for pics. Remember to tell us the URL of your paste! |
| 23:40.05 | enouf | peterS: well, thanks - just thought if they were SATA, or SCSI or even Exteral USB drives, they might not show up there |
| 23:40.16 | *** join/#debian sodio (n=sodio@va-71-1-140-171.sta.embarqhsd.net) |
| 23:40.21 | jim | !pastebin |
| 23:40.22 | dpkg | Please don't paste anything into the channel; use a paste site instead, like: http://paste.lisp.org, http://rafb.net/paste/, http://pastebin.ca/, http://picpaste.com for pics. --- Also ask me: <pastebin pipe> |
| 23:40.27 | enouf | BUT, it is not /proc/ide/.. .. so you have a point |
| 23:40.28 | jim | there it is |
| 23:40.36 | jim | !pastebin pipe |
| 23:40.36 | dpkg | Download http://pastebin.ca/download/paste2pastebin.pl and install libwww-mechanize-perl. Then pipe your output to perl paste2pastebin.pl. |
| 23:40.56 | *** join/#debian rats (n=rats@cpe-24-165-160-245.neo.res.rr.com) |
| 23:40.57 | peterS | jim: if you're going to have long conversations with dpkg, please use /query |
| 23:41.07 | enouf | peterS: ok, but using libata, one must also enable some scsi, yes? |
| 23:41.09 | jim | all done |
| 23:41.29 | enouf | peterS: and AFAICT, it's the Config CHAR_SG_DEV that's crucial |
| 23:41.32 | jim | I didn't know it was going to be that long when I started |
| 23:41.39 | peterS | enouf: right, you can't even build libata without it enabling the scsi core. and it isn't very useful if you don't also enable scsi disk / scsi cdrom support (depending on what devices you have) |
| 23:41.47 | Nyle | fisxoj, bts reports nothing |
| 23:42.04 | peterS | enouf: I don't think sg is needed though, I think wodim and other apps can all use the regular scsi cdrom driver (sr_mod) |
| 23:42.39 | fisxoj | Nyle: I know, it's rather frustrating... gdm starts when I run the command explicitly, but, the script in /etc/init.d/gdm seems to not be running it |
| 23:43.16 | fisxoj | I'm going to reboot, see if I fixed anything |
| 23:43.59 | enouf | peterS: my bad, it's called actually; config CHR_DEV_SG |
| 23:44.28 | peterS | enouf: regardless. in the old days, cdrecord required the sg driver, but nowadays I'm pretty sure it can just use the normal scsi cdrom driver instead. |
| 23:44.38 | enouf | peterS: ahh .. ok, well, sr_mod usually people know as support for USB and External OPticals |
| 23:44.51 | enouf | peterS: so they don't enable it or modprobe it |
| 23:45.06 | peterS | enouf: sr_mod is for any cdrom over any scsi-like bus, notably including anything driven by libata |
| 23:45.13 | enouf | peterS: though i do notice sr0 symlink being given to /dev/scd0 block devices |
| 23:45.28 | enouf | peterS: modingo sr_mod needs an update ;-) |
| 23:45.29 | *** join/#debian moyix (n=moyix@static-72-93-243-42.bstnma.fios.verizon.net) |
| 23:45.33 | peterS | yeah, srN and scdN have been aliases for each other for a really long time now. I forget which one is "official"> |
| 23:45.34 | enouf | peterS: modinfo sr_mod needs an update ;-) |
| 23:45.36 | *** join/#debian humbolto (n=elias@213-147-185-150.adsl.ycn.com) |
| 23:45.38 | *** join/#debian Baloo (n=baloo@71-215-134-31.ptld.qwest.net) |
| 23:45.52 | enouf | peterS: scd0 is the /sys/block/name |
| 23:46.01 | Baloo | What's the easiest MTA to set up ASMTP authenticating against PAM? |
| 23:46.02 | peterS | enouf: no more so than modinfo sd_mod |
| 23:46.04 | jpin | is it bad to: std::vector a; (...); b = &a[a.size()-1]; ? |
| 23:46.16 | enouf | peterS: kill two birds? |
| 23:46.18 | enouf | :-P |
| 23:46.25 | peterS | jpin: #C++ is --> over there |
| 23:46.35 | enouf | peterS: udevinfo -q all -p /dev/scd0 will show all that |
| 23:46.46 | jpin | ah... oopps :P (thanks peterS) |
| 23:47.04 | enouf | (block device names vs symlinks) |
| 23:47.41 | *** join/#debian derchris^ (n=derchris@87-194-89-163.bethere.co.uk) |
| 23:48.10 | *** join/#debian ninjaslim (n=sabeeh@ool-43544a41.dyn.optonline.net) |
| 23:48.19 | peterS | enouf: aha, there it is. from the kernel Documentation/devices.txt: "The prefix /dev/sr (instead of /dev/scd) has been deprecated." |
| 23:49.03 | jim | enouf: http://pastebin.ca/1018512 |
| 23:49.30 | *** join/#debian juanra (n=juanra@84.77.18.249) |
| 23:49.35 | enouf | peterS: yes, i was going to start digging and referencing those ;-) |
| 23:49.56 | enouf | peterS: as we know though, kernel versions matter |
| 23:50.08 | enouf | jim: k |
| 23:50.15 | *** join/#debian duns_s (n=duns_s@mnhm-590e0415.pool.einsundeins.de) |
| 23:50.29 | peterS | enouf: hmmm. 2.2.x and 2.4.x give the device name as sr0 and say "The prefix /dev/scd instead of /dev/sr has been used as well, and might make more sense." |
| 23:51.02 | enouf | peterS: i have much more about all this to discuss, especially concerning wodim - and i tried a few times in #cdrkit over on OFTC, but no reply - maybe i'll visit again soon - look out for me ;-) |
| 23:51.31 | peterS | enouf: I try to monitor that channel but all of us there have a lot of other stuff going on in life. permanently I mean. |
| 23:51.59 | jim | one line from wodim --devices output: |
| 23:52.03 | jim | 0 dev='/dev/hdc' rwrw-- : 'Memorex' 'DVD+-RAM 530L v1' |
| 23:52.13 | enouf | peterS: i understand |
| 23:52.50 | peterS | enouf: aha. devices.txt changed from sr0 to scd0 in kernel 2.6.5. (both names have been mentioned all along, but as of 2.6.5 scd0 is the official name) |
| 23:53.03 | *** part/#debian Violetbass (i=Violetba@server1.unitedservers.de) |
| 23:53.12 | enouf | jim: well, from this lrwxrwxrwx 1 root root 9 2008-05-14 04:11 pci-0000:00:0d.0-ide-1:0 -> ../../hdc |
| 23:53.18 | enouf | looks like no libata |
| 23:53.21 | *** part/#debian joshteam (n=joshteam@adsl-66-140-44-63.dsl.rcsntx.swbell.net) |
| 23:53.22 | peterS | jim: is that correct then? an IDE bus connected DVD+-RAM drive and no other optical drives? |
| 23:53.31 | jim | yes |
| 23:53.34 | enouf | those look like this lrwxrwxrwx 1 root root 9 2008-05-14 04:11 pci-0000:00:0b.1-usb-0:6:1.0-scsi-0:0:0:3 -> ../../sde |
| 23:53.37 | *** join/#debian alegoodpharm (n=alegoodp@72.186.75.28) |
| 23:53.40 | enouf | sorry |
| 23:53.42 | jim | err peters: yes |
| 23:53.42 | *** join/#debian path_ (n=path@pc-168-207-46-190.cm.vtr.net) |
| 23:53.45 | enouf | the scsi part |
| 23:54.10 | jim | enouf: no libata, is that bad? |
| 23:54.19 | *** join/#debian Violetbass (i=Violetba@server1.unitedservers.de) |
| 23:54.28 | enouf | GAH, peterS i've seen NOTHING but trouble with DVD-RAM drives, and mainly these - # HL-DT-ST_DVDRAM_GSA-4167B (pci-0000:00:1f.1-ide-0:1) |
| 23:54.45 | enouf | jim: well, no - depending |
| 23:54.49 | *** join/#debian namit (n=christia@83-70-241-72.b-ras1.prp.dublin.eircom.net) |
| 23:55.04 | peterS | enouf: see I have no idea, I got my first DVD writer less than a month ago, and have never actually used it to write anything |
| 23:55.06 | *** join/#debian MrNaz (n=MrNaz@ppp59-167-161-172.lns1.mel4.internode.on.net) |
| 23:55.10 | enouf | jim: no SATA nor SCSI drives in system ? |
| 23:55.22 | jim | there is a sata hd |
| 23:55.37 | peterS | enouf: you'd think as a cdrkit maintainer I'd be more on top of things, but alas..... |
| 23:55.41 | jim | erp |
| 23:55.46 | enouf | peterS: i too never used -RAM, however that's almost ALL the ones i see complaints about in recent kernels |
| 23:55.47 | jim | enouf: there is a sata hd |
| 23:55.52 | enouf | jim: AHA! |
| 23:56.01 | enouf | jim: so - how no libata? |
| 23:56.01 | jim | oho? |
| 23:56.13 | simonrvn | ihi!? |
| 23:56.14 | enouf | peterS: ;-) |
| 23:56.22 | *** part/#debian alegoodpharm (n=alegoodp@72.186.75.28) |
| 23:56.35 | enouf | peterS: you are very helpful all around - so stop that alas crap |
| 23:56.48 | simonrvn | @comfort peterS |
| 23:56.49 | ravenbird | There, there, peterS. It's OK. I'm here for you. |
| 23:57.03 | peterS | not too helpful when people ask cdrkit questions though. all the hard ones, I just have to let them fly by. |
| 23:57.05 | enouf | jim: did you EVER friggin tell me the Kernel Versions ? |
| 23:57.14 | simonrvn | *whoosh* |
| 23:57.19 | peterS | yes, *whoosh* |
| 23:57.22 | jim | no not yet, I built it I think |
| 23:57.26 | enouf | jim: i'm going to go out on a limb and guess that "you" built them :-P |
| 23:57.29 | peterS | just like a deadline |
| 23:57.39 | simonrvn | <-- needs water and coffee |
| 23:57.54 | jim | enouf: you'd be going out on a limb? :) |
| 23:57.56 | enouf | jim: will you just friggin install and try a debian kernel? |
| 23:57.57 | xingu | enouf: fyi: the ide ich/piix drivers _still_ bind at higher precedence to the ata drivers for same (all else being equal) if memory serves |
| 23:58.14 | enouf | jim: </sarcasm> ;-P |
| 23:58.38 | enouf | xingu: point, however, he's using a SATA HDD, and claiming no libata support |
| 23:58.43 | *** join/#debian mtn (n=mtn@dpc6746233034.direcpc.com) |
| 23:59.09 | enouf | xingu: yet. he could be talking about 2.2.27 for all i know :-P |
| 23:59.13 | xingu | enouf: could easily be ich running in ide/compat mode |
| 23:59.18 | enouf | erm 2.4.27 i meant |
| 23:59.34 | simonrvn | summer's getting closer, heh |
| 23:59.39 | enouf | xingu: gah ,, no .. erm, |
| 23:59.41 | dFence_ | need some help with basic bashing: the line if [ -n $SOMEVAR] then ... does _whut_? |
| 23:59.55 | enouf | xingu: ytou mean scsi emulation mode? |
