Re: RedHat to Debian migration

[nate]

Rahmat M. Samik-Ibrahim said:
> Hello:
>
> Someone asked me about potential problems of migrating
> from RedHat to Debian, especially for script applications.
>
> Based on my own experience, I had some problems with the
> default "vi" (nvi) and "awk" (mawk). Both problems can
> by solved through /etc/alternatives.
>
> Is there any serious thing that I have missed?

yeah get ready to be replaced  once they realize
how much more stable debian is then redhat they won't
need anyone to monitor the servers anymore. i migrated
a network of about 25 redhat systems(various versions)
to debian 2.2 over the past year or so. before we
started i swear i had never seen a linux system that
would cease functioning(network wise) until it was
rebooted. or have the SMTP server(qmail) just stop
accepting connections(even though it's running),
or have sshd just die without warning. it was amazing.
it was my first real exposure to redhat in production.
pretty scary. my ex-boss helped me move my servers to
a new office about 7 months ago, when we were booting
them back up, a few were still redhat, i loved his
remark..

him: "whats that?"
me: "redhat"
him: "screw that...[long pause] everything should be debian"

ive NEVER had a MTA die on me or ssh or networking
in general. never ever..

Re: routing question

[Michael Heldebrant]

On Tue, 2001-11-27 at 23:39, shock wrote:
> * nate ([EMAIL PROTECTED]) spake thusly:
> >
> > from the looks of the info you gave machine A and E are on
> > the same hub..the cables seem to work as they can both get to
> > the dsl..so my guess would be theres a incorrect netmask or
> > broadcast address set on either A or E, and the DSL gateway
> > doesn't seem to care. since machine A and E are on the same subnet
> > and on the same hub theres no routing involved ..its just "there".
>  
> here's the /etc/network/interfaces for machine e (debian woody):
>   
> iface eth0 inet static
>   address 192.168.1.99
>   netmask 255.255.255.0
>   network 192.168.1.0
>   broadcast 192.168.1.255
>   gateway 192.168.1.254
>
> machine a (RH6.2) fires up eth0 and eth1 via /etc/rc.d/rc.local with the
> following statements:
> 
> ifconfig eth1 192.168.2.1 netmask 255.255.255.0 broadcase 192.168.2.255 up
> ifconfig eth0 192.168.1.10 netmask 255.255.255.0 broadcast 192.168.1.255 up
> route add -net 192.168.2.0 netmask 255.255.255.0 eth1 
> route add -net 192.168.1.0 netmask 255.255.255.0 eth0
>  
> the broadcast / netmask scenario you described (while potentially
> problematic) seems to be okay.  unless i'm overlooking the obvious.
>   
> > either that or you may have
> > firewall rules on one or the other
> > that could be blocking traffic. my
> > guess would be bad broadcast
> > somewhere tho ive had similar
> > problems.
>
> machine e has no firewall.  machine a contains the following:
> 
> /sbin/ipchains -A input -j ACCEPT -i eth0 -s 0/0 67 -d 0/0 68 -p udp
> /sbin/ipchains -P forward DENY 
> /sbin/ipchains -A forward -s 192.168.2.0/24 -j MASQ
>  
> as further background, i can ssh from a machine on the internet to
> machine a.  also, i can ssh from machines on the 192.168.2.x to
> machine a.  it seems that only machine e (192.168.1.99) can't
> successfully get to (or see) machine a.

What is the default policy for the input and output chains on "a". 
ipchains -L -v -n output will show this.  The output of netstat -atp on
"a" would also be helpfull along with the route output from both
machines.  I assume the "broadcase" above for eth1 is a typo and not the
actual command right?  Are you using some sort of dhcp on "a" with pump?

--mike 

Potato->Woody (Packages mix-up)

[Alec]

Hi

I recently upgraded from potato to woody and I'm wondering why

dpkg -l | grep potato
gives a bunch of matches (see them at the end of this message), even though 
there's no "potato" or  "stable" in /etc/apt/sources.list
Thanks

Alec
P.S. I used to have KDE2 on potato, but now I removed it, as well as the 
corresponding lines in sources.list and ran "apt-get clean" and "apt-get 
autoclean"
-

rc  abbrowser  2.1.1-0.potato Address book reader
rc  aktion 2.1.1-0.potato xanim frontend for KDE
rc  ark2.1.1-0.potato An archiver for KDE
rc  kab2.1.1-0.potato An addressbook for KDE
rc  karm   2.1.1-0.potato A time tracker for KDE
rc  kcharselect2.1.1-0.potato A Character set selector for KDE
rc  kcron  2.1.1-0.potato Crontab editor for KDE
rc  kdepasswd  2.1.1-0.potato A Password changer frontend for KDE
rc  kdf2.1.1-0.potato Disk space GUI for KDE
rc  kedit  2.1.1-0.potato A simple text editor for KDE
rc  kernel-package 7.04.potato.3  Debian Linux kernel package build scripts.
rc  kfind  2.1.1-0.potato A KDE based file finder
rc  kghostview 2.1.1-0.potato PostScript viewer for KDE.
rc  khexedit   2.1.1-0.potato A hex editor for KDE
rc  kiconedit  2.1.1-0.potato An icon editor for creating KDE icons
rc  kjots  2.1.1-0.potato A small note taker program for KDE
rc  kmix   2.1.1-0.potato KDE based mixer app
rc  knotes 2.1.1-0.potato Sticky notes for KDE
rc  korganizer 2.1.1-0.potato Personal organizer based on QT and KDE
rc  korn   2.1.1-1.potato Mail notifier for KDE
rc  kpackage   2.1.1-0.potato Software package tool for KDE
rc  kpaint 2.1.1-0.potato A Simple Paint Program for KDE
rc  kpm2.1.1-0.potato Process manager for KDE
rc  ksysctrl   2.1.1-0.potato Hardware configuration tool for KDE
rc  ksysv  2.1.1-0.potato SysV-style init configuration editor
rc  kuser  2.1.1-0.potato A user/group administration tool for KDE
rc  kview  2.1.1-0.potato A simple image viewer/converter for KDE.
rc  pixie  2.1.1-0.potato Image Management System for KDE
rc  rstartd3.3.6-11potato remote application start daemon
rc  secpolicy  2.1.1-0.potato PAM security policy configuration tool
rc  xf86setup  3.3.6-11potato X server configuration tools
rc  xproxy 3.3.6-11potato X proxy services
rc  xsm3.3.6-11potato X session manager
-

_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

netatalk password encrypt question

[Mike Egglestone]

Hi all,

To establish a netatalk server (Woody) with encrypted passwords,
would I do this:

apt-get install netatalk
apt-get install libssl09

or is there more to setup?
The workstations are OS 9 or higher.

Thanks in advance!!

Mike

keyboard (alt gr function) problem after upgrade ...

[Do-Risika RAFIEFERANTSIARONJY]

Hi all,

After an upgrade (on a testing version), my 'alt gr' function does not
work anymore on X.

I had already a testing version with xfree86 4 before the upgrade, and
there was no change in my XF86Config-4 file, here is my keyboard info :

Section "InputDevice"
Identifier  "Generic Keyboard"
Driver  "keyboard"
Option  "CoreKeyboard"
Option  "XkbRules"  "xfree86"
Option  "XkbModel"  "pc105"
Option  "XkbLayout" "fr"
EndSection


I have the error below in my /var/log/XFree86.0.log file :

Couldn't load XKB keymap, falling back to pre-XKB keymap


Does anybody have an idea on how to resolve this ?

Any help would be appreciated,

Thanx,

@+
-- 
Do-Risika RAFIEFERANTSIARONJY
mailto:[EMAIL PROTECTED]

Simicro Internet, mailto:[EMAIL PROTECTED], http://internet.simicro.mg
Tel : (+261) 20 22 648 83 (GMT +3), Fax : (+261) 20 22 661 83

Printer:fixed (?)... /dev/hdc unrecognised

[Adam Bogacki]

Sorry, I'd like to take back the last message. It has just printed the
CUPS 'Printer Test Page' successfully. I was impressed at how easy it
was to install. I was wrestling with an altogether different problem
and tried it as a diversion - and it worked.

That problem, BTW, is that I am trying to install 2.2r4 onto a removable
40Gb drive in a system which already has a 20Gb Win 98 drive and a 10Gb
2.2r2 unstable installation, in other words /dev/hda and /dev/hdb.

I had no similar problem installing /dev/hdb which - from memory - was
auto-recognised by the system. The same is not happening to what should
be /dev/hdc ...

What am I missing here ?

Adam Bogacki,
[EMAIL PROTECTED]

Re: OpenSSH & Mozilla & Woody

[Colin Watson]

On Tue, Nov 27, 2001 at 08:50:36PM -0800, Dmitriy wrote:
> Any news of OpenSSH 3 ? (don't want to bug maintainer with useless
> questions ;-) )

Yeah, I spoke to the maintainer on Monday evening. Give it a week or so.

-- 
Colin Watson  [EMAIL PROTECTED]

Non-interactive password check

[Alexander Steinert]

Currently I'm building a web application using python. The database only
stores a login name and an account name (e.g. 'john' and
'[EMAIL PROTECTED]') but no password. (This is
invariant.)

On session start the user sends his login name and the password for the
remote account. I want to check the authenticity by something like
trying to ssh into the remote account and immediately logout again.  The
unix user doing this is the owner of the apache process.

Unfortunately this approach needs interaction (enter the password,
logout). I was not surprised to find no option in ssh's man page to give
the password on the command line.

Do you know any way to make ssh less interactive?

Stony

Re: Non-interactive password check

[Nick Hastings]

Hi,

* Alexander Steinert <[EMAIL PROTECTED]> [011128 18:36]:
> 
> Do you know any way to make ssh less interactive?
>

Look at the man pages for ssh-agent and ssh-add. 

Nick.

----
 _   
 Nick Hastings /_/  ..   
 School of Physics, :O(_ ...'  _   `..   
 The University of Melbourne   \_\/_/ `...   
 VIC, 3010 Australia.   .   _  .'''  
 [EMAIL PROTECTED]   .   (_) ))) ...'  
 Phone: +61 3 8344 5075   0  _   B decay 
 Fax:   +61 3 9347 4783 \_\  


 
 
  

 
 

 

Fetchmail trouble

[Sridhar M.A.]

Hi,

Yesterday I upgraded my debian to testing. I am now facing problems with
picking the mails using fetchmail. Fetchmail keeps on telling that I do
not have any messages whereas some other client like poppy shows
otherwise. I have attached a session script below:



  [EMAIL PROTECTED]:/etc$ fetchmail
  fetchmail: terminated with signal 2
  [EMAIL PROTECTED]:/etc$ fetchmail -v
  fetchmail: 5.9.3 querying pop.net4india.com (protocol POP3) at Wed Nov
  28 18:52:41 2001: poll started
  fetchmail: POP3< +OK Cubic Circle's v1.31 1998/05/13 POP3 ready
  <[EMAIL PROTECTED]>
  fetchmail: POP3> CAPA
  fetchmail: POP3< -ERR Invalid command, try one of: USER name, PASS
  string, QUIT
  fetchmail: Invalid command, try one of: USER name, PASS string, QUIT
  fetchmail: POP3> USER z1585531-001
  fetchmail: POP3< +OK z1585531-001 selected
  fetchmail: POP3> PASS *
  fetchmail: POP3< +OK Congratulations!
  fetchmail: POP3> STAT
  fetchmail: POP3< +OK 0 0
  fetchmail: No mail for z1585531-001 at pop.net4india.com
  fetchmail: POP3> QUIT
  fetchmail: POP3< +OK Was it as good for you, as it was for me?  (clean
  as a baby)
  fetchmail: 5.9.3 querying pop.net4india.com (protocol POP3) at Wed Nov
  28 18:52:49 2001: poll completed
  fetchmail: normal termination, status 1
  [EMAIL PROTECTED]:/etc$ poppy

  poppy 3.1 - by Chris Bagwell <[EMAIL PROTECTED]>

  Mail password for [EMAIL PROTECTED]:
  Connecting to POP3 account [EMAIL PROTECTED]

  209 total messages containing 713K bytes.

From: =?iso-8859-1?Q?Fran=E7ois_THOMAS?= <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: 
Subject: RE: switching to maildir from mbox
Date: Tue, 27 Nov 2001 13:06:23 +0100
Size: 4K bytes

[Msg 1 of 209]  |=pipe !=shell [R]eply, [N]ext, [P]revious 
[V]iew, [T]op, [D]elete, [S]ave, [G]o, [A]bort, [Q]uit, or [H]elp:



What is the problem? I said no to start fetchmail as root. There is no
/etc/fetchmailrc. But I have on in my $HOME. The above session is with
that file. 

Can somebody tell me where I am erring? Thanks for any help/pointers.
I have a couple of more problems after the upgrade and will be back with
them, but _only after_ I get the fetchmail issue sorted out.

-- 
Sridhar M.A. [EMAIL PROTECTED]

The scum also rises.
-- Dr. Hunter S. Thompson

Newbie installation: any autodetection of devices?

[Johann Spies]

I am working at the Information Technology department of our university.
The mangement has invited me introduce them to Linux.  They are Windows
users and knows computers very well.

So I decided to let them install Debian from our local ftp-server for a
start.  I am preparing for this, but find it not so easy to do.

Last year or early this year I installed Stormix and was impressed with
the ease of installation.  It was about the easiest installation of any
operating system I have done - MSDOS excluded.  I thought that Debian
might follow the same approach, but do not see any of this in the
installation process from woody's base disks.

A few remarks and questions:

1. There was no detection of the network card as I had with the Stormix
installation.  Is there some way to autodetect the network card?

2. Stormix could detect my mouse.  During the Debian's gpm and X11
installation I have to supply the device and mouse type.  Difficult for
newbies coming from a Windows environment.  

3. The configuration of X11 is a nightmare on the Woody installation
process.  Again there was no autodetection of the hardware.  I see in
Dwarfs-debian-guide he refers to anXious, but I could not find any
program or file with that name in Woody.  Again Stormix could do the
detection of the video card and list options for different monitors in
the installation process.  I have not seen this with the woody
installation. 

  I know I can go and edit the configuration files in /etc/X11/  (and
  experiment with different configurations for a few hours) but how
  will I convince a Windows user about Debian when in my tutorial they
  have to do all this?  Especially as some of them have already
  experimented with Mandrake which does all this with the ease of
  Windows.

So my question about the installation of X11 for newbies: Is there an
easy way of doing it - like the autodetection of the video card and a
list of monitors to choose from?

4. The installation of Woody up to the tasksel screen is quite easy and
I want to congratulate the people who developed the installation disks.
Debian's apt-get is the man reason why I use Debian and want to show
Debian to the other people.  

5. I have 5 x 3 hour sessions to introduce them to Linux.  I would like to
hear from the people on this list on what they think are te most
important things to give attention to.

Regards.

Johann.
-- 
Johann Spies  Telefoon: 021-808 4036
Informasietegnologie, Universiteit van Stellenbosch

 "The earth is the LORD'S, and the fullness thereof; the
  world, and they that dwell therein."   Psalms 24:1

Re: sid - new lilo installed and boot error - SOLUTION?

[Eric Smith]

Could some one please advise whether this is the best / safest
way to recover a bootable system?

backup the / partition.
reinstall a base system - upgrade this to sid - copy back 
the / omitting /boot (I actually have /boot on another partition).

Thanks for an answer.


According to Eric Smith on Wed, Nov 28, 2001 at 01:01:34AM +0100:
> I installed the new lilo and let debconf create a new
> lilo.conf and add a boot sector.  Before restarting,
> however I added an entry for Windows, then /sbin/lilo -v
> which reported nothing abnormal.
> 
> However when i tried to reboot, I get:
> 
> unable to mount root fs
> add a root= entry (or something to that effect)
> 
> enclosed is the relevant lilo.conf which does show the root fs
> pointing to /dev/hda3, which is correct (as per original
> lilo.conf.
> 
> Here are the contents of the /boot - however I must admit that i
> seem to have lost the map file while trying to correct the
> problem :(
> 
> Is it possible to copy the files I need to the /boot directory
> and recover the boot?
> 
> Thanx
> 
> total 5656
> -rwxr-xr-x   1 root root  1001473 Oct 25 03:31 vmlinuz-2.2.19pre17
> -rw-r--r--   1 root root   272592 Oct 25 03:31 System.map-2.2.19pre17
> -rw-r--r--   1 root root14685 Oct 25 03:31 config-2.2.19pre17
> -rw-r--r--   1 root root  512 Oct 25 03:38 boot.0300
> -rw-r--r--   1 root root33506 Nov  9 10:20 config-2.4.14-586
> -rw-r--r--   1 root root   382516 Nov  9 13:36 System.map-2.4.14-586
> -rw-r--r--   1 root root   587996 Nov  9 13:36 vmlinuz-2.4.14-586
> lrwxrwxrwx   1 root root   17 Nov 13 10:55 boot.b -> 
> /boot/boot-menu.b
> -rw-r--r--   1 root root  3407872 Nov 17 21:38 initrd-2.4.14-586
> lrwxrwxrwx   1 root root   23 Nov 17 21:38 initrd -> 
> /boot/initrd-2.4.14-586
> -rw-r--r--   1 root root 7708 Nov 20 00:30 boot-bmp.b
> -rw-r--r--   1 root root 7680 Nov 20 00:30 boot-menu.b
> -rw-r--r--   1 root root 5920 Nov 20 00:30 boot-text.b
> -rw-r--r--   1 root root 5920 Nov 20 00:30 boot-compat.b
> -rw-r--r--   1 root root  656 Nov 20 00:30 os2_d.b
> -rw-r--r--   1 root root  728 Nov 20 00:30 chain.b
> -rw-rw-r--   1 root root0 Nov 27 22:31 bootmess.txt
> -rw---   1 root root  512 Nov 27 22:47 boot.0303
> -rw---   1 root root 6656 Nov 27 22:49 map
> 
> -- 
> Eric Smith

> lba32
> # Generated by liloconfig
> 
> # Specifies the boot device
> boot=/dev/hda3
> 
> # Specifies the device that should be mounted as root.
> # If the special name CURRENT is used, the root device is set to the
> # device on which the root file system is currently mounted. If the root
> # has been changed with  -r , the respective device is used. If the
> # variable ROOT is omitted, the root device setting contained in the
> # kernel image is used. It can be changed with the rdev program.
> root=/dev/hda3
> 
> # Enables map compaction:
> # Tries to merge read requests for adjacent sectors into a single
> # read request. This drastically reduces load time and keeps the map
> # smaller. Using COMPACT is especially recommended when booting from a
> # floppy disk.
> compact
> 
> # Install the specified file as the new boot sector.
> # If INSTALL is omitted, /boot/boot.b is used as the default.
> install=/boot/boot.b
> 
> # Specifies the number of _tenths_ of a second LILO should
> # wait before booting the first image.  LILO
> # doesn't wait if DELAY is omitted or if DELAY is set to zero.
> delay=60
> 
> # Specifies the location of the map file. If MAP is
> # omitted, a file /boot/map is used.
> 
> map=/boot/map
> 
> # Specifies the VGA text mode that should be selected when
> # booting. The following values are recognized (case is ignored):
> #   NORMAL  select normal 80x25 text mode.
> #   EXTENDED  select 80x50 text mode. The word EXTENDED can be
> # abbreviated to EXT.
> #   ASK  stop and ask for user input (at boot time).
> # use the corresponding text mode. A list of available modes
> # can be obtained by booting with  vga=ask  and pressing [Enter].
> vga=ask
> 
> image=/vmlinuz
>   label=Linux
>   read-only
> 
> image=/dev/hdc1
>   label=Windows
> 
> # If you have another OS on this machine (say DOS),
> # you can boot if by uncommenting the following lines
> # (Of course, change /dev/hda2 to wherever your DOS partition is.)
> # other=/dev/hda2
> #   label=dos
> 


-- 
Eric Smith
Fruitcom.com Benelux
Phone: +31 70 313 0240
Mobile:+31 6 551 76300

Re: Non-interactive password check

[David Wright]

On session start the user sends his login name and the password for the
remote account. I want to check the authenticity by something like
trying to ssh into the remote account and immediately logout again.  The
unix user doing this is the owner of the apache process.



If this is the only time you'll ever want to authenticate users outside 
of account login, this hack will work. If you want a solution that 
scales (so that one day your users can be authenticated by mail and web 
servers, web applications, anything...), use LDAP.

Re: Newbie installation: any autodetection of devices?

[David Wright]

So I decided to let them install Debian from our local ftp-server for a
start.  I am preparing for this, but find it not so easy to do.



I use and apprecite Debian daily, so I hate to say this, but it's true: 
if you want to impress them with an easy Linux installation, don't use 
Debian! Grab a Red Hat or SUSE install disk and the process will look as 
easy as it does for Windows.

Re: How do I make my machine able to receive dial-ups ?

[Oki DZ]

On Tue, 27 Nov 2001, Kent West wrote:
> [EMAIL PROTECTED] wrote:
> >c) The software level
> >
> Edit /etc/inittab. At the bottom you'll see a line about putting a getty 
> on a modem line. Uncomment that line and change the /dev/ttyS3 part to 
> whatever port your modem is on. You'll probably also want to change the 
> T3 part at the beginning of the line to match the number of your port 
> (if modem is on /dev/ttyS0, change T3 to T0).

You might need mgetty package installed too.

Oki

Re: Potato system (Re: Help with X (after upgrade to Woody))

[Oki DZ]

On Wed, 28 Nov 2001, Andrew Sione Taumoefolau wrote:
> It sounds like you've just been unstable for a long long time, which
> would mean Potato and Woody packages would've at one time been installed
> on your system, but that you've been using Sid the whole time :).

I believe that I've been using Potato; at least, I did an apt-get
dist-upgrade on it (on my system).

Anyway, what is the right sequence?
Potato - Sid - Woody?
Sid - Potato - Woody?
or
Potato - Woody - Sid?

TIA,
Oki

Re: Help with X (after upgrade to Woody)

[Oki DZ]

On Tue, 27 Nov 2001, jennyw wrote:
> I start X using /etc/init.d/gdm start.  The screen blinks for a bit, then it
> stops, then it blinks for a bit more, then it stops, then it does it again.

You didn't tell that it stopped eventually by itself.
How did you stop it?

> I assume it's trying the three video modes (640x480, 800x600 and 1024x768)
> that I selected, and is finding that none of them works. By the way, my
> system apparently has no startx.

You may need the modeline calculator.
BTW, you can start X 4.1.x directly by:
/usr/X11R6/bin/X vt :7 -depth  -xf86config 
You can also test it first by:
/usr/X11R6/bin/X vt :7 -depth 24 -xf86config 
-probeonly
So that you can see the output whether the configuration would work or
not (it should mention the working resolutions).

Oki

Re: pppd Doing Nothing!

[Oki DZ]

On Tue, 27 Nov 2001, Ben Hill wrote:
> I have managed to get ppp compiled and installed with the kernel
> modules, however, when I run pppd nothing happens! I have got it
> installed (so I think) and there is nothing being written to
> /var/log/messages. 

You are supposed to run it via pon/poff. 
Then you'd need pppconfig.
 
> Firstly I build and compiled the kernel with ppp support and booted 
> it. I then set up PPP from the tarball, then:
> 
> /configure
> make
> make install

An inquiring mind wants to know, why did you take the hard way...?
 
> 
> I have then done a:
> 
> mknod /dev/ppp c 180 0

I believe you wouldn't need this; depends on the tty number used, pppd
will automagically setup ppp device.

> I have also edited my /etc/ppp/options file and edited my /etc/ppp/chap-
> secrets and /etc/ppp/pap-secrets

Use pppconfig, it's the right way, I believe.

Oki

Re: Newbie installation: any autodetection of devices?

[Brian Nelson]

David Wright <[EMAIL PROTECTED]> writes:

> > So I decided to let them install Debian from our local ftp-server for a
> > start.  I am preparing for this, but find it not so easy to do.
> 
> 
> I use and apprecite Debian daily, so I hate to say this, but it's
> true: if you want to impress them with an easy Linux installation,
> don't use Debian! Grab a Red Hat or SUSE install disk and the process
> will look as easy as it does for Windows.

Nah, just stick with Debian and laugh at every time "it's that time of
the month again" when they have to reinstall Windows with that pretty
installer.  I barely even remember what the Debian installer looks
like.

-- 
Brian Nelson <[EMAIL PROTECTED]>
[EMAIL PROTECTED]
http://bignachos.com

Re: Non-interactive password check

[Tony Green]

* This one time, at band camp, Nick Hastings said:
> 
> Hi,
> 
> * Alexander Steinert <[EMAIL PROTECTED]> [011128 18:36]:
> > 
> > Do you know any way to make ssh less interactive?
> >
> 
> Look at the man pages for ssh-agent and ssh-add. 
> 

ssh-agent/add will not accomplish what the Alexander was after though,
because they use keys - and you still have to put the passphrase in for
the key (or have a key that is phraseless which defeats the intended
security purpose in this instance)

I would suggest looking into PAM or SASL both of which can be used to
authenticate users.  Other possible solutions depending on the scale of
the application are htpasswd, LDAP or a custom authentication system.

I would certainly NOT recommend the use of a script to ssh into a remote
box in order to test the users password.

HTH

Greeno
-- 
Greeno <[EMAIL PROTECTED]>
GnuPG Key :  1024D/B5657C8B 
Key fingerprint = 9ED8 59CC C161 B857 462E  51E6 7DFB 465B B565 7C8B

Imagine working in a secure environment and finding the string 
_NSAKEY in the OS binaries without a good explanation
-Alan Cox 04/05/2001

Re: Newbie installation: any autodetection of devices?

[Oki DZ]

On Wed, 28 Nov 2001, David Wright wrote:
> I use and apprecite Debian daily, so I hate to say this, but it's true: 
> if you want to impress them with an easy Linux installation, don't use 
> Debian! Grab a Red Hat or SUSE install disk and the process will look as 
> easy as it does for Windows.

To get into X Window, RedHat would be better than Debian.
But for installing individual packages, I think .deb is better than .rpm.
Well, it's due to apt-get, I believe.

Oki

my SCSI detection is scuzzy

[Robert Storey]

Dear All,

I just today installed Debian for the first time
(Yeah!), and it mostly went OK. But on bootup,
there is a major annoyance when it gets to
detecting my scsi devices. Debian does correctly
identify my scsi card (Advansys) but then it
takes FOREVER to test for connected scsi
devices. Each test results in a timeout error,
and this increases bootup time long enough to
brew a cup of coffee. This whole scuzzy scsi
detection procedure generates quite a few
messages, which I've included below. On this same
machine I have SuSE installed, and it doesn't
produce all these error messages, so I'm
wondering if there is a way to bypass all this
nonsense? Of course, I DO want it to be able to detect
a connected scsi device when one is present. Any ideas
would be greatly appreciated. I'm running testing.

Thanks in advance,
Robert Storey 

from dmesg:

scsi:  Detection failed (no card)
NCR53c406a: no available ports found
sym53c416.c: Version 1.0.0
Failed initialization of WD-7000 SCSI card!
IBM MCA SCSI: Version 3.2
IBM MCA SCSI: No Microchannel-bus present -->
Aborting.
  This machine does not have any IBM
MCA-bus
  or the MCA-Kernel-support is not
enabled!
megaraid: v1.11 (Aug 23, 2000)
aec671x_detect: 
3w-: tw_findcards(): No cards found.
scsi0 : AdvanSys SCSI 3.3D: PCI Ultra 16 CDB: IO
D800/F, IRQ 10
scsi : 1 host.
scsi : aborting command due to timeout : pid 0, scsi0,
channel 0, id 0, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : aborting command due to timeout : pid 0, scsi0,
channel 0, id 0, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : aborting command due to timeout : pid 1, scsi0,
channel 0, id 1, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : aborting command due to timeout : pid 1, scsi0,
channel 0, id 1, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : aborting command due to timeout : pid 2, scsi0,
channel 0, id 2, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : aborting command due to timeout : pid 2, scsi0,
channel 0, id 2, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : aborting command due to timeout : pid 3, scsi0,
channel 0, id 3, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : aborting command due to timeout : pid 3, scsi0,
channel 0, id 3, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : aborting command due to timeout : pid 4, scsi0,
channel 0, id 4, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : aborting command due to timeout : pid 4, scsi0,
channel 0, id 4, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : aborting command due to timeout : pid 5, scsi0,
channel 0, id 5, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : aborting command due to timeout : pid 5, scsi0,
channel 0, id 5, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : aborting command due to timeout : pid 6, scsi0,
channel 0, id 6, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : aborting command due to timeout : pid 6, scsi0,
channel 0, id 6, lun 0 Test Unit Ready 00 00 00 00 00 
scsi : detected total.


__
Do You Yahoo!?
Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
http://geocities.yahoo.com/ps/info1

Re: new lilo installed and boot error

[Donald R. Spoon]

See comments in your text copied below.

Cheers,
-Don Spoon-

Eric Smith <[EMAIL PROTECTED]>  wrote:
 
> I installed the new lilo and let debconf create a new
> lilo.conf and add a boot sector.  Before restarting,
> however I added an entry for Windows, then /sbin/lilo -v
> which reported nothing abnormal.
> 
> However when i tried to reboot, I get:
> 
> unable to mount root fs
> add a root= entry (or something to that effect)

See my comment on /etc/lilo.conf "boot" command below
 
> enclosed is the relevant lilo.conf which does show the root fs
> pointing to /dev/hda3, which is correct (as per original
> lilo.conf.
> 
> Here are the contents of the /boot - however I must admit that i
> seem to have lost the map file while trying to correct the
> problem :(
> 

It isn't lost...you still seem to have it listed.  Is it the wrong "map"
file??

> Is it possible to copy the files I need to the /boot directory
> and recover the boot?
> 

Yes.  You will have to boot up using a "rescue" disk, mount /dev/hda3
and "chroot" to that mounted directory.  You can then edit your
/etc/lilo.conf and re-run lilo to install the new (modified per below)
lilo to the MBR.  Be careful... your paths will be all screwed up, so
use the FULL path to the file you want to run.  This mainly applies to
running /sbin/lilo.  Also, you may have limited choice of editors
available...hope you can run vi .


> Thanx
> 
> total 5656
> -rwxr-xr-x   1 root root  1001473 Oct 25 03:31 vmlinuz-2.2.19pre17
> -rw-r--r--   1 root root   272592 Oct 25 03:31 System.map-2.2.19pre17
> -rw-r--r--   1 root root14685 Oct 25 03:31 config-2.2.19pre17
> -rw-r--r--   1 root root  512 Oct 25 03:38 boot.0300
> -rw-r--r--   1 root root33506 Nov  9 10:20 config-2.4.14-586
> -rw-r--r--   1 root root   382516 Nov  9 13:36 System.map-2.4.14-586

The above is your "map" file for your new 2.4.14 kernel.  You can edit
your /lilo.conf file to point to this file or just create a symlink in
this directory to /boot/map or just copy this file to "/boot/map".  I
notice that a "map" file already exists further below in this
listingI wouldn't touch anything here until you get some complaints
about it on bootup.

> -rw-r--r--   1 root root   587996 Nov  9 13:36 vmlinuz-2.4.14-586

Do you have a symlink in your root directory to the above kernel??  (The
new one).  A "ls -l" should show "vmlinuz -->
/boot/vmlinuz-2.4.14-596".  This symlink MUST exist because that is
where the "root=/dev/hda3" command in /etc/lilo.conf is saying a kernel
resides.

> lrwxrwxrwx   1 root root   17 Nov 13 10:55 boot.b -> 
> /boot/boot-menu.b
> -rw-r--r--   1 root root  3407872 Nov 17 21:38 initrd-2.4.14-586
> lrwxrwxrwx   1 root root   23 Nov 17 21:38 initrd -> 
> /boot/initrd-2.4.14-586
> -rw-r--r--   1 root root 7708 Nov 20 00:30 boot-bmp.b
> -rw-r--r--   1 root root 7680 Nov 20 00:30 boot-menu.b
> -rw-r--r--   1 root root 5920 Nov 20 00:30 boot-text.b
> -rw-r--r--   1 root root 5920 Nov 20 00:30 boot-compat.b
> -rw-r--r--   1 root root  656 Nov 20 00:30 os2_d.b
> -rw-r--r--   1 root root  728 Nov 20 00:30 chain.b
> -rw-rw-r--   1 root root0 Nov 27 22:31 bootmess.txt
> -rw---   1 root root  512 Nov 27 22:47 boot.0303
> -rw---   1 root root 6656 Nov 27 22:49 map

This is the "/boot/map" I was talking about above.   
> 
> -- 
> Eric Smith
> 
> lba32
> # Generated by liloconfig
> 
> # Specifies the boot device
> boot=/dev/hda3

This command puts the lilo boot-loader info on the "Superblock" of
hda3.  I does NOT put it into the MBR.  There are occasions (few) where
you would want to do this... essentially if you are using another
boot-loader and want to call lilo for some reason.

On my machine this line reads: "boot=/dev/hda".

> --snip-- < 
> image=/vmlinuz
> label=Linux
> read-only
> 
> image=/dev/hdc1
> label=Windows

I suggest you get rid of the second "image" stanza for Windows and use
the notation below...i.e. uncomment the "other" line and make the
appropriate edits for the HD used and the "label" you want.

> 
> # If you have another OS on this machine (say DOS),
> # you can boot if by uncommenting the following lines
> # (Of course, change /dev/hda2 to wherever your DOS partition is.)
> # other=/dev/hda2
> #   label=dos

Exim problem

[Agics Balazs]

Hi all,

I want to compile exom 3.33 on my Debian (Woddy) box, but it fails. The message 
is:

/usr/bin/ld: cannot find -ldb
collect 2: ld returned 1 exit status
make[1]: *** [exim_dmbuild] Error 1

Please help me!

Thanks!

Balazs

Re: Don't use kernel 2.4.15/2.5.0 (fs corruption)

[Adam Warner]

On Sun, 2001-11-25 at 12:18, Craig Dickson wrote:
> Adam Warner wrote:
> 
> > I had rebooted multiple times trying to fix a halt problem. Everything
> > seems OK but it looks like I can't risk running reiserfsck anyway. I'm
> > probably going to have to wait until reiserfsck is improved.
> 
> Which sounds to me like a superb argument against using reiserfs...
> the tools just aren't mature yet.

I've just run reisferfsck 3.x.0k-pre10 (latest pre-release version
available) on all my reiserfs partitions. My home partition had zero
corruptions. That's impressive for solid use over many months.

I compiled a static version of reiserfsck to run from floppy (it links
to libc6 otherwise). I then checked my root partition. Running --check I
was told there were 3210 corruptions which can be fixed with
--fix-fixable. That might sound bad but they appeared to be mainly due
to an obsolete format that needed upgrading. Running --fix-fixable
indeed fixed everything.

It's impressive that reiserfsck was able to diagnose what switch should
solve any errors. A lengthy -rebuild-tree was not even necessary.

So the reiserfs tools are progressing well.

Regards,
Adam

Re: Exim problem

[Tony Green]

* This one time, at band camp, Agics Balazs said:
> Hi all,
> 
> I want to compile exom 3.33 on my Debian (Woddy) box, but it fails. The 
> message is:
> 
> /usr/bin/ld: cannot find -ldb
> collect 2: ld returned 1 exit status
> make[1]: *** [exim_dmbuild] Error 1
> 
> Please help me!
> 

I would suggest you look at getting the package libdb2 and libdb2-dev 
(Berkeley v2 Database Libraries) which exim needs (note you may need V3
for exim 3.33 - I don't know...)

I'm assuming you have a reason for not wanting to use the precomiled
packages (since you've gone for 3.33 and SID is only at 3.22)

HTH

Greeno
-- 
Greeno <[EMAIL PROTECTED]>
GnuPG Key :  1024D/B5657C8B 
Key fingerprint = 9ED8 59CC C161 B857 462E  51E6 7DFB 465B B565 7C8B

Imagine working in a secure environment and finding the string 
_NSAKEY in the OS binaries without a good explanation
-Alan Cox 04/05/2001

Re: Squid in a school - problems with https

[martin f krafft]

* Tom Allison <[EMAIL PROTECTED]> [2001.11.27 20:12:15-0500]:
> You don't typically want to cache https pages.

you *can't*!

-- 
martin;  (greetings from the heart of the sun.)
  \ echo mailto: !#^."<*>"|tr "<*> mailto:"; [EMAIL PROTECTED]
  
at the turn of the century in vienna,
the schoenberg food factory stopped making tonic,
and started making cereal instead.
   -- hofstadter's geb


pgp0juCk8tKML.pgp
Description: PGP signature

Re: cvs security - ssh vs pserver?

[martin f krafft]

* Eric G. Miller  [2001.11.27 19:41:23-0800]:
> Don't you mean the *public* key?  In fact, don't you want
> the server to have the public key of the user, and then that
> user has to use their private key and their passphrase to
> authenticate themselves to the CVS server via ssh?  I'm on
> the user end of such a setup, and I don't have any key for
> the server but it does have my public key.  Use ssh-agent
> to manage authentication/passphrase...

that's a good point. you can either generate a keypair on the server
and distribute the private key to multiple people, or you can create a
keypair per user and add all those public keys to authorized_keys(2).
there is no question that the second method is better. in fact, the
first one SUCKS and should not be used. with the second method, you
have more administrative overhead, but you can also just simply take
privileges away from a single user without anyone else having to worry
or changing passwords or getting a new identity or this or that.

-- 
martin;  (greetings from the heart of the sun.)
  \ echo mailto: !#^."<*>"|tr "<*> mailto:"; [EMAIL PROTECTED]
  
stay the patient course.
of little worth is your ire.
the network is down.


pgpqT7eCMW4F7.pgp
Description: PGP signature

apt, dselect problem!

[tripz]

Hello!

I have a problem! I did "By Mistake" (C) select a few packages with dselect
and they depended on a bunch of other packages.. so now dselect wants to
install all those packages, and i dont i dont want to install ANY of the
packages that i selected.. how can i "undo" those selections?

/TRiPZ




Ladda ner det senaste från Passagens Filarkiv http://tucows.passagen.se/

Re: Ogg Vorbis (was Re: mp3 encoding)

[J.A. de Vries]

On Tue, 27 Nov 2001, jennyw wrote:

> Are there any Ogg Vorbis portable players? Or support for Mac OS X? Playing
> music on Linux and Windows is cool, but mp3s run everywhere. Of course, I
> may try it anyway since I don't currently have a portable player. It looks
> like a great project.

Hi,

The RioVolt Blue has the ability to play multiple soundformats. At the
moment they support not only mp3, but also wmf for example. I'm not sure
if they do support ogg though. I guess you'll be able to find out on their
site. At least they should be able to, since this device has the ability to
"learn" by upgrading it's firmware. Now someone has to write the support for
it (if it's not there yet). On all other counts this is a great portable.

Grx HdV

-- 
Last night as I lay in bed looking at the stars I thought
'Where the hell is the ceiling?'

J.A. de Vries aka HdV
Delft University of Technology
Computing Centre

Email: [EMAIL PROTECTED]
Email: [EMAIL PROTECTED]

Re: Potato system (Re: Help with X (after upgrade to Woody))

[Andrew Sione Taumoefolau]

On Wed, Nov 28, 2001 at 12:28:25PM +0700, Oki DZ wrote:
> I believe that I've been using Potato; at least, I did an apt-get
> dist-upgrade on it (on my system).
> 
> Anyway, what is the right sequence?
> Potato - Sid - Woody?
> Sid - Potato - Woody?
> or
> Potato - Woody - Sid?

The last one is the closest -- Potato (stable, version 2.2), Woody (testing,
version 3.0?) and then Sid, which is permanently unstable. So when Woody
is released, it'll be Woody (stable), some other Toy Story name
(testing), and Sid again.

Hope this helps :).

-- 

Andrew Sione Taumoefolau
[EMAIL PROTECTED]
http://www.midspark.net/shazbot/

Kernel modules and usb

[Jesper Holmberg]

Hi all,

I have my USB mouse working fine by manually modprobing usb-uhci and
usbmouse, but I have two questions:

1. How do I make these modules automatically probed when I startup? The
file /etc/modules.conf should not be touched, it says.

2. Even better, would it be possible to have these modules probed when a
usb mouse is detected?

TIA,

Jesper

-- 
  Jesper Holmberg|"But how can |
  [EMAIL PROTECTED]   | one be warm |
ENST Br, BP 832, 29285 Brest, FRANCE | alone?" |

Re: Newbie installation: any autodetection of devices?

[Andrew Sione Taumoefolau]

On Wed, Nov 28, 2001 at 04:07:22PM +0700, Oki DZ wrote:
> To get into X Window, RedHat would be better than Debian.

Yup. Or, better yet, Mandrake! Then move them on to Debian after a
couple of months, when they're a bit more world wise :).

> But for installing individual packages, I think .deb is better than .rpm.
> Well, it's due to apt-get, I believe.

Yes! But also, and a lot of people who only really glance at Debian
before installing Red Hat or similar, is the fact that Debian packages
are generally of a very very high quality. Packages are maintained by
people that care about the software they're packaging and (generally)
understand the Debian system very well. And when there's something wrong
with a package, bugs are filed and generally stomped on quick-smart. I
recall Red Hat packages varying pretty wildly in quality when I last
played around with a Red Hat system.

-- 

Andrew Sione Taumoefolau
[EMAIL PROTECTED]
http://www.midspark.net/shazbot/

Re: apt, dselect problem!

[Vaclav Hula]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Dne st 28. listopad 2001 12:00 [EMAIL PROTECTED] napsal(a):
> Hello!
>
> I have a problem! I did "By Mistake" (C) select a few packages with
> dselect and they depended on a bunch of other packages.. so now dselect
> wants to install all those packages, and i dont i dont want to install
> ANY of the packages that i selected.. how can i "undo" those selections?

Shift-R in the subscreen with unsorted dependencies, or, if you finished 
the Select stage, return to Select stage, find line that reads  
??? Available packages (not currently installed) ???
(just below last installed package) and press underscore(_) on it. 

>
> /TRiPZ
>
>
>
> 
> Ladda ner det senaste frĺn Passagens Filarkiv http://tucows.passagen.se/

- -- 
S pozdravem
Vaclav Hula  [EMAIL PROTECTED]
Capitol Internet Publisher, Korunovacni 6, 170 00 Prague 7, Czech Republic
tel.: ++420 2 3337 1113, fax:  ++420 2 3337 1112

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8BMdsvYCMyWSPsqkRAmPPAKDYJnjqIhCZmxohcVrCWfMkwaF/dACgmCkb
w1kGMXs8SvuTziggiDa9T+Y=
=q4nY
-END PGP SIGNATURE-

Re: switching to maildir from mbox

[Dragos]

On Tuesday 27 November 2001 05:39 pm, Dragos wrote:
...
> thanks, Martin (or should I say madduck?)
> I think I'm a bit exhausted, and I don't see clearly enough...
> anyway, I think I got it right: made a ~/.procmailrc which contains
> MAILDIR=$HOME/Maildir
> DEFAULT=$MAILDIR/
> and that's about it!
> I still have to look why for every mail I send (locally, that is), the same
> mail gets sent to the procmail user...but, again, as you pointed out, it's
> just RTFM procmail{rc|ex}. that's enough for now, I'll do this first time
> tomorrow morning, and post my findings on the list, as there are others
> that expressed their interest about this setup.
>
> thanks again, dragos
ok now I have a working configuration for postfix+procmail+maildir:
for postfix, in main.cf:
mailbox_command = /usr/bin/procmail -a "$EXTENSION"
it tells postfix not to worry about local delivery, just give it to procmail
for procmail, in ~/.procmailrc:
PATH=/usr/local/bin:/usr/bin:/bin
MAILDIR=$HOME/Maildir
DEFAULT=$MAILDIR/
LOGFILE=$MAILDIR/procmail.log
LOCKFILE=$HOME/.lockmail
VERBOSE=off
LOGABSTRACT=off
I'll put .procmailrc in /etc/skel before I start creating users.
The next step for me is to install amavis-perl/amavisd, make postfix deliver 
to amavis (mailbox_command = /usr/bin/amavis, or something alike), scan mails 
for viruses, and deliver via procmail to maildir.
you can see that I'm not (yet) using procmail to filter mails.
thanks to everyone who helped me.
I'll also have to find an pop3 server who can read maildirs...

cheers, dragos

Re: Non-interactive password check

[Alexander Steinert]

> > On session start the user sends his login name and the password for the
> > remote account. I want to check the authenticity by something like
> > trying to ssh into the remote account and immediately logout again.  The
> > unix user doing this is the owner of the apache process.
> 
> 
> If this is the only time you'll ever want to authenticate users outside 
> of account login, this hack will work. If you want a solution that 
> scales (so that one day your users can be authenticated by mail and web 
> servers, web applications, anything...), use LDAP.

Thanx for your answers so far.

I have to specify my situation more precisely:

Working in the student represention of a university I'm implementing a
printing service (a student make a selection of old exams and the like
that will be treated as an order and printed out). Since all our
students have a UNIX account in the university network we decided to not
maintain user passwords on _our_ server but use the existing university
accounts and "connect" them with our users. (The users don't have to
remember one more password (for a relatively rarely used service) and we
don't have to bother with the inevitable "I forgot my password.")

Since I have no administrative access to the university servers LDAP
doesn't seem to be an alternative. Given that ssh is the only access
method in question is there any way (or ssh'ish program) to avoid the
use of something like ExpectPy (expectpy.sourceforge.net)?

Stony

Re: switching to maildir from mbox

[Martin F Krafft]

* Dragos <[EMAIL PROTECTED]> [2001.11.28 13:43:56+0200]:
> LOCKFILE=$HOME/.lockmail

you don't need that. Maildir needs no lockfiles.

> I'll put .procmailrc in /etc/skel before I start creating users.

now you need to worry about your users and prevent them from changing
that. if they don't know what they are doing, they could destroy their
own mail delivery and cause a DoS on your mail server.

> The next step for me is to install amavis-perl/amavisd, make postfix
> deliver to amavis (mailbox_command = /usr/bin/amavis, or something
> alike), scan mails 

/usr/bin/scanmails

> for viruses, and deliver via procmail to maildir.

i think it does that automagically.

> I'll also have to find an pop3 server who can read maildirs...

spop3d (solid-pop3d) is what i use and it's fair.
courier-pop3 is definitely better, but available only in woody and up.

\so long

Martin F. Krafft 
AERAsec Network Services and Security GmbH
-- 
mailto:[EMAIL PROTECTED]  |  Wagenberger Strasse 1
http://www.aerasec.de/  |  85662 Hohenbrunn (DE)
t: +49.(0)8102.89519-0  |  f: +49.(0)8102.89519-9


pgpaVpID4Xcc3.pgp
Description: PGP signature

Re: cvs security - ssh vs pserver?

[Tommi Komulainen]

On Tue, Nov 27, 2001 at 10:08:57AM -0800, Peter Jay Salzman wrote:
>  
> joey, i have no problem with plain text passwords.
> 
> just as long as they can't get _shell access_ with that password.

Hi,

I'd just like to point out one thing that I didn't see in this thread
earlier:  if you have write access to the CVS repository, it is possible
to get shell access also.

Ok, it is not exactly that simple, I think it required write access to
the files in the CVSROOT-directory (commitinfo, etc.)  You could then
modify those files so that, for example, whenever you commit a file, a
command "xterm -display :0" would be run on the server.

However, there is a simple fix.  Just don't let the users touch the
files in the CVSROOT directory.  Use another group for the CVSROOT, say
use group 'prj' for repository users who are allowed to commit changes
but not run shells, and 'prj-adm' for users who are allowed to modify
files in CVSROOT (and potentially run a shell.)

Unfortunately, I can't remember the details exactly and I don't have a
link at hand, so better read this message again with extreme prejudice.


-- 
Tommi Komulainen [EMAIL PROTECTED]
GPG 1024D/68388EE66FD6 DD79 EB38 BF6F 3533  09C0 04A8 9871 6838 8EE6


pgpr8cEzSgITw.pgp
Description: PGP signature

do a fake package

[Raffaele Sandrini]

Hi,

I'd like to install some paxckages wich depends on ALSA. I have installed and 
compiled ALSA by myself and i don't want to change that.

So is there a possibility to tell dpkg that the specific ALSA package is 
installed? I don't want to make that with a -nodeps (or something) option 
because thats ending in a mess soon or later. And i also wont use the CTRL-Q 
command at dselect to overrun it because its askin me every time then. I need 
a simple command (perhapps) to force a package to be installed.

cheers,
Raffaele

-- 
Raffaele Sandrini <[EMAIL PROTECTED]>
For encrypted Mail get my Public Key from "search.keyserver.net"
ID: 0xEC4950E9

Re: Latest Galeon? will it work on potato?

[Erik van der Meulen]

On Tue, Nov 27, 2001 at 08:47:25 +, Frank Copeland wrote:

> Galeon is a bleeding edge Gnome program, so you need to have Gnome 1.4
> installed. The best bet if you wish to keep your system basically
> 'potato' is to install Ximian's gnome packages. I'm running galeon
> 0.12.1 on a potato + ximian system.

Hi - I would like to know how you have managed to get that working.
I have a Potato system with Ximian Gnome and if I do:

  apt-get install galeon

it cannot find the package.
I have the stable Ximian branch in my sources list, maybe I need
something other than that? If so, do I run a risk of messing up other
things at the same time?

Thanks a lot for any further suggestion!

--
  Erik van der Meulen <[EMAIL PROTECTED]>

Re: Fetchmail trouble

[Henrique de Moraes Holschuh]

On Wed, 28 Nov 2001, Sridhar M.A. wrote:
>   fetchmail: POP3< +OK Congratulations!
>   fetchmail: POP3> STAT
>   fetchmail: POP3< +OK 0 0
>   fetchmail: No mail for z1585531-001 at pop.net4india.com

Your server just told fetchmail that there are no messages to be
downloaded...

Try enabling the fetchall option (see fetchmail manpage). But it is a broken
server, I do not know if that will help you.

See RFC 1939 for details.

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh

Re: switching to maildir from mbox

[Dragos]

On Wednesday 28 November 2001 01:39 pm, Martin F Krafft wrote:
> * Dragos <[EMAIL PROTECTED]> [2001.11.28 13:43:56+0200]:
> > LOCKFILE=$HOME/.lockmail
>
> you don't need that. Maildir needs no lockfiles.
point taken
>
> > I'll put .procmailrc in /etc/skel before I start creating users.
>
> now you need to worry about your users and prevent them from changing
> that. if they don't know what they are doing, they could destroy their
> own mail delivery and cause a DoS on your mail server.
that could be a problem, I can't just change shell to /bin/false because of 
procmail;
anyway, the users won't have acces to the shell; they're just winozers; I'll 
let sshd connect only those approved be me. (which it would be me - how 
selfish-)
>
> > The next step for me is to install amavis-perl/amavisd, make postfix
> > deliver to amavis (mailbox_command = /usr/bin/amavis, or something
> > alike), scan mails
>
> /usr/bin/scanmails
I have no ideea what you're talking about
>
> > for viruses, and deliver via procmail to maildir.
>
> i think it does that automagically.
amavisd delivers scanned mail to procmail; I'm pretty sure about it
>
> > I'll also have to find an pop3 server who can read maildirs...
>
> spop3d (solid-pop3d) is what i use and it's fair.
> courier-pop3 is definitely better, but available only in woody and up.
I'll give it a try
>
> \so long
thanks, dragos
>
> Martin F. Krafft 
> AERAsec Network Services and Security GmbH

Compiling PHP4 on potato

[George Karaolides]

Hi,

I'm trying to compile PHP4 on potato.

I know very little about handling Debian source packages; in fact nothing
beyond what I could find in the Debian FAQ (pointers to TFM's I could R
very welcome).

I need to compile PHP with Sybase support, but how do I pass configuration
options (e.g. --with-sybase=/opt/sybase)?

Best regards,

George Karaolides   8, Costakis Pantelides St.,
tel:   +35 79 68 08 86   Strovolos,
email: [EMAIL PROTECTED]   Nicosia CY 2057,
web:   www.karaolides.com  Republic  of Cyprus

Re: switching to maildir from mbox

[Martin F Krafft]

* Dragos <[EMAIL PROTECTED]> [2001.11.28 14:21:14+0200]:
> that could be a problem, I can't just change shell to /bin/false because of 
> procmail;
> anyway, the users won't have acces to the shell; they're just winozers; I'll 
> let sshd connect only those approved be me. (which it would be me - how 
> selfish-)

or you make the .procmailrc file owned by root and readonly to them.
in addition, chattr +i it and they can't delete it.

> > /usr/bin/scanmails
> I have no ideea what you're talking about

that's amavis...

> > > for viruses, and deliver via procmail to maildir.
> >
> > i think it does that automagically.
> amavisd delivers scanned mail to procmail; I'm pretty sure about it

exactly.

Martin F. Krafft 
AERAsec Network Services and Security GmbH
-- 
mailto:[EMAIL PROTECTED]  |  Wagenberger Strasse 1
http://www.aerasec.de/  |  85662 Hohenbrunn (DE)
t: +49.(0)8102.89519-0  |  f: +49.(0)8102.89519-9


pgpxJloPORujx.pgp
Description: PGP signature

PHP4 problem

[Agics Balazs]

Hi,

A want to open flash file from a PHP file. I use swf_openfile() but the 
function not exists. What should I do? Recompile PHP, or install some packages? 
I installed all the PHP4 packages!

I run potato r4

Thanks for help!

Balazs

Re: do a fake package

[Colin Watson]

On Wed, Nov 28, 2001 at 01:00:31PM +0100, Raffaele Sandrini wrote:
> I'd like to install some paxckages wich depends on ALSA. I have installed and 
> compiled ALSA by myself and i don't want to change that.

See the equivs package.

-- 
Colin Watson  [EMAIL PROTECTED]

Re: Potato->Woody (Packages mix-up)

[Colin Watson]

On Wed, Nov 28, 2001 at 01:07:59AM -0500, Alec wrote:
> I recently upgraded from potato to woody and I'm wondering why
> 
> dpkg -l | grep potato
> gives a bunch of matches (see them at the end of this message), even though 
> there's no "potato" or  "stable" in /etc/apt/sources.list

The packages you list are in the 'rc' state, i.e. removed but with
configuration files still present. They have therefore not been
upgraded. If you decide you won't need those configuration files again
(use 'dpkg -s' to find out what they are), you can remove those packages
with 'dpkg --purge'.

-- 
Colin Watson  [EMAIL PROTECTED]

New bash and tab completion

[Norman Walsh]

Not strictly speaking a debian question, I suppose, but...

The last apt-get upgrade that I performed installed a new version of
bash (2.05a.0(1)-release). Since this upgrade, I've discovered that
tab completion of a symbolic link that points to a directory no longer
automatically includes the trailing slash.

For example, on my disk /sourceforge -> /projects/sourceforge so if I
type "/pro[tab]", I get "/projects/", but if I type "/sour[tab]", I
get "/sourceforge" (without the trialing slash). If I type tab again,
I get the trailing slash. (There's no file called sourceforge in /).

This behavior is consistent on all symlinks to directories, and I find
it exceptionally annoying. A quick scan of the man page doesn't reveal
any option that obviously would effect this behavior (and why doesn't
bash_2.05a-2_i386.deb include an info page, no, that's a separate
issue :-)

Is there a setting to "fix" this behavior?

Be seeing you,
  norm

-- 
Norman Walsh <[EMAIL PROTECTED]> | It is important what a man still plans
http://nwalsh.com/| at the end. It shows the measure of
  | injustice in his death.--Elias Canetti

Re: Kernel modules and usb

[Paolo Falcone]

Jesper Holmberg wrote:

>Hi all,
>
>I have my USB mouse working fine by manually modprobing usb-uhci and
>usbmouse, but I have two questions:
>
>1. How do I make these modules automatically probed when I startup? >The file 
>/etc/modules.conf should not be touched, it says.

You can modify it. But I won't recommend it either. The best (the
Debian) way of doing such is running the modconf program as root.
It will edit the /etc/modules file that comes with Debian, as well
as automagically configure /etc/modules.conf to its proper settings.
You can choose the modules you'd want to load.

>2. Even better, would it be possible to have these modules probed >when a usb 
>mouse is detected?

After you've done modconf, the new /etc/modules that modconf did
would state the modules that would be loaded upon startup. Kinda
cool.


Paolo Falcone

__
www.edsamail.com

Re: Potato system (Re: Help with X (after upgrade to Woody))

[Paolo Falcone]

On Wed, Nov 28, 2001 at 12:28:25PM +0700, Oki DZ wrote:
> I believe that I've been using Potato; at least, I did an apt-get
> dist-upgrade on it (on my system).
 
> Anyway, what is the right sequence?
> Potato - Sid - Woody?
> Sid - Potato - Woody?
> or
> Potato - Woody - Sid?

A normal apt-get dist-upgrade without modifying /etc/apt/sources.list
would upgrade your release to the next Debian release (ex. if you're
using 2.2r3 and do a dist-upgrade, you'll get 2.2r4). To be sure,
check the /etc/debian_version file if it states 2.2 or otherwise.
I'd usually modify the apt sources file first before committing to
an apt-get dist-upgrade with my woody and sid boxes at the office.

Modifying the apt sources file with references to stable and change
them to testing to upgrade from potato to woody, or to unstable to
upgrade to sid.

In terms of stability, from highest to lowest, the rank is Potato
(the current stable release 2.2, now at rev4), followed by Woody
(testing) then Sid (unstable). In terms of fast upgrades, Sid wins
in speed of upgrades, followed by Woody. Packages or fixes in Sid are 
usually backported to Potato if it's a serious security concern.

Some say that if stability is concerned, it's Potato-Sid-Woody, 
since unstable iterates faster than the testing release. [but I'd
go for the more-accepted norm.]


Paolo Falcone

__
www.edsamail.com

Pop3 server + STARTTLS

[list1]

Hi.

I am looking for a good feature-loaded pop3 server that has TLS encryption 
built-in.
My current gnu-pop3 just does not cut it for me anymore :(

Any suggestions ?

help

[Fenix]

Hi

I've Debian Potato 2.2r4
I've upgraded kernel to 2.2r4 and when I want to ping myself (or connect via 
ftp)
I'm gettingt following message:

ping xx.xx.xx.73
ping: sendto: Invalid argument
ping: wrote meridian 64 chars, ret=-1

so I upgraded glibc from 2.1 to 2.2.4 
and kernel to 2.2.20
now I have following message:
PING meridian (xxx.xxx.xxx.73): 56 data bytes
ping: sendto: No buffer space available
ping: wrote meridian 64 chars, ret=-1
ping: sendto: No buffer space available
ping: wrote meridian 64 chars, ret=-1


what is wrong ??

please help

fnx

Re: Xine-dvdnav skipping problems

[Mart van de Wege]

On Tue, 2001-11-27 at 15:22, Mike McGuire wrote:
> On Mon, Nov 26, 2001 at 10:41:33PM +0100, Romain Lerallut wrote:
> > Thus spake Mart van de Wege on Mon, Nov 26, 2001 at 08:32:47PM +0100:
> > > 
> > > Using the dvdnav plugin for Xine, dvd playback skips a lot. It will play
> > > a few scenes, the drive light goes on for more data, and at that moment
> > > playback halts for a couple of seconds. All it does is print the
> > > following message to the console: '406 frames delivered, 1 frames
> > > skipped, 367 frames discarded'.
> > > 
> > > ...
> > 
> > I've got the same thing, mostly with dvdnav (can stop for 30sec
> > sometimes) and slightly with dvdnav (stop for 1/2 seconds).
> > This is with kernel 2.4.10 and 2.4.14, however it works used to work 
> > lawlessly with kernel 2.4.3 (at least nothing noticeable).
> > (xine* 0.9.4 on Duron 700, Via chipset, GeForce 2MX)
> > 
> > I can possibly run a few tests if someone needs it, including
> > reviving my old 2.4.3. Anyway, if somebody has a fix, cc: to me,
> > please.
> 
> eh. Just an thought, but since you asked:
> If it worked in 2.4.3 and doesn't work in the later kernel versions, 
> it could be an issue with the VM. (heh. I don't even know quite what 
> that means. :)  I do know it deals with I/O, and from the description 
> of it, the dvdnav plugin sounds like it does some (non-sequential) 
> reads from the DVD to get the info for the navigation stuff. ...and 
> all sorts of I/O related pauses and outright hangs have been blamed 
> on the VM lately. It might be fixed soon- from my occasional look at 
> the LKML archive just yesterday there was some discussion on it. You 
> could try waiting a week or two and then get the latest kernel that 
> doesn't have any known severe bugs (like fs corruption, that'd be 
> bad...)
> 
Ok,

(not snipping for full context)

It might be indeed a VM problem. I have noticed that Xine claims an
awful lot of memory (after quitting, some 75% of my 256M is freed up)
and playing a DVD also seems to claim a lot of swap.

Another thing might be the DeCSS plugin used. I've seen some skipping in
normal playback too using the d4d plugin. I just switched to the dmd
plugin from the VideoLAN site, and that appears to play a lot better
(currently watching 'Das Boot' which used to skip with the d4d plugin,
now it plays a lot better).

Anyone see comparable behaviour under recent kernels? I'm now running
2.4.16, and everything appears normal, except the dvdnav plugin still
causes skipping.

Mart

-- 
A dirty mind is a joy forever,
Its sleaziness will never cease.

Re: Latest Galeon? will it work on potato?

[Cyril Lacoux]

le mer 28-11-2001 à 12:57, Erik van der Meulen a écrit :
> On Tue, Nov 27, 2001 at 08:47:25 +, Frank Copeland wrote:
> 
> > Galeon is a bleeding edge Gnome program, so you need to have Gnome 1.4
> > installed. The best bet if you wish to keep your system basically
> > 'potato' is to install Ximian's gnome packages. I'm running galeon
> > 0.12.1 on a potato + ximian system.
> 
> Hi - I would like to know how you have managed to get that working.
> I have a Potato system with Ximian Gnome and if I do:
> 
>   apt-get install galeon
> 
> it cannot find the package.
> I have the stable Ximian branch in my sources list, maybe I need
> something other than that? If so, do I run a risk of messing up other
> things at the same time?
> 
> Thanks a lot for any further suggestion!

I put galeon 0.12.8 on my homepage.

deb http://people.easter-eggs.org/~yack/debian/ potato main
 

Regards,
Cyril Lacoux.
-- 
Cyril Lacoux / Easter-Eggs   Spécialiste GNU/Linux
44-46 rue de l'Ouest  -  75014 Paris  -  France -  Métro Gaité
Phone: +33 (0) 1 43 35 00 37-   Fax: +33 (0) 1 43 35 00 76
mailto:[EMAIL PROTECTED]   -  http://www.easter-eggs.com
B81AD6A6 -  638E A25A C5A4 C81A 4B98  CCC6 AFF7 FD7A B81A D6A6


pgpOZRQcd7S4h.pgp
Description: PGP signature

OT: ascii starwars

[Michael P. Soulier]

If you haven't seen this already, telnet to towel.blinkenlights.nl,
and sit back with some popcorn. ;-)

Mike

-- 
Michael P. Soulier <[EMAIL PROTECTED]>, GnuPG pub key: 5BC8BE08
"...the word HACK is used as a verb to indicate a massive amount
of nerd-like effort."  -Harley Hahn, A Student's Guide to Unix


pgpT7CWWEGeGE.pgp
Description: PGP signature

Re: Non-interactive password check

[Shaya Potter]

On Wed, 2001-11-28 at 06:37, Alexander Steinert wrote:
> > > On session start the user sends his login name and the password for the
> > > remote account. I want to check the authenticity by something like
> > > trying to ssh into the remote account and immediately logout again.  The
> > > unix user doing this is the owner of the apache process.
> > 

ssh is an ugly solution, as the user will have a login for his account,
which can make them weirded out.

try logging in over pop or imap instead.  You can 

use IO::Socket;
my $socket=IO::Socket::INET->new(PeerAddr => $host,
 PeerPort => 'pop3(110)',
 Proto=> 'tcp');
unless ($socket and (<$socket>=~/^\+OK/)) {
restrict_err("Couldn't connect to $host")
}
print $socket "USER ", $cgi->param('login'), "\r\n";
unless (<$socket>=~/^\+OK/) {
restrict_err("Couldn't login to $host")
}
print $socket "PASS ", $cgi->param('pass'), "\r\n";
my $message = <$socket>;
print $socket "QUIT\r\n";
$socket->close;
if ($message=~/^\+OK/) {
return 1;
}
return 0; 

i.e. failed b/c fell off

Re: OT: ascii starwars

[J.A.Serralheiro]

awsome...


On Wed, 28 Nov 2001, Michael P. Soulier wrote:

> If you haven't seen this already, telnet to towel.blinkenlights.nl,
> and sit back with some popcorn. ;-)
> 
> Mike
> 
> -- 
> Michael P. Soulier <[EMAIL PROTECTED]>, GnuPG pub key: 5BC8BE08
> "...the word HACK is used as a verb to indicate a massive amount
> of nerd-like effort."  -Harley Hahn, A Student's Guide to Unix
> 

I've screwed something up - big time.

[Craig W]

Hi,

I recently had an issue installing php-nuke on my web-site, when installing
it came up with an error relating to MySql , so me thinking I would be smart
added the lines in the sources.list to access the "testing" packages,
updated the available file & installed the latest MySQL in testing. Lo &
behold this didn't correct the issue. So I thought I'd simply remove it,
comment out the testing lines in my sources.list, update & then re-install
the version from stable. Bad move. Not only did MySQL remove itself, it took
out Apache, Perl, Proftpd, PHP,etc. basically left me with a bare box. Ok, I
thought & tried to re-install these using apt, now all I get are errors
stating that Perl needs to be installed before I can install anything else,
yet when trying to install Perl I get the following error;


 apt-get install perl-5.004
Reading Package Lists... Done
Building Dependency Tree... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.

Since you only requested a single operation it is extremely likely that
the package is simply not installable and a bug report against
that package should be filed.
The following information may help to resolve the situation:

Sorry, but the following packages have unmet dependencies:
  perl-5.004: Depends: perl-5.004-base (= 5.004.05-6) but 6.3 is to be
installed
E: Sorry, broken packages


I tried to install perl-5.004-base, but it tells me it is already the latest
version?

Can someone advise on a quick solution (I can pull them down from source,
compile,etc., but I need the server back up asap, asignment due).

I would hate to have the RH box I have acting as a webserver, it is only for
testing other distro's & isn't really powerful enough to cope with the
rigours of a web server.

Is there something I missed?
Is there someway to manually edit the list of installed packages to kick it
into re-installing perl (& what is the filename of said file?)?

Regards,

Craig.

Mouse freeze -- Debian 2.2r4 PPC

[Marc Stergionis]

Just installed 2.2r4  on a PM 8600. However the mouse is frozen on 
screen and clicks do nothing, which wouldn't matter much since t 
can't move anyway.


The mouse actually worked fine in a recent install of Potato 2.2  on 
the same machine. Just lost it on this reinstall.


The mouse also works fine in Mac OS9.1

Trying to run mouse config, xconfig or xconfigurator  results in 
"command not found." How do I get this back?


-ms
--
Many have Montana envy ... the lucky get to live here!
Marc Stergionis
Community Relations & website author
Benefis Healthcare -- http://www.benefis.org
"Opinions expressed are not necessarily those of my employer"

Re: pppd Doing Nothing!

[Ben Hill]

Hi,

- Original Message -
From: "Oki DZ" <[EMAIL PROTECTED]>
To: "Ben Hill" <[EMAIL PROTECTED]>
Cc: 
Sent: Wednesday, November 28, 2001 5:16 AM
Subject: Re: pppd Doing Nothing!


> On Tue, 27 Nov 2001, Ben Hill wrote:
> > I have managed to get ppp compiled and installed with the kernel
> > modules, however, when I run pppd nothing happens! I have got it
> > installed (so I think) and there is nothing being written to
> > /var/log/messages.
>
> You are supposed to run it via pon/poff.
> Then you'd need pppconfig.
>
> > Firstly I build and compiled the kernel with ppp support and booted
> > it. I then set up PPP from the tarball, then:
> >
> > /configure
> > make
> > make install
>
> An inquiring mind wants to know, why did you take the hard way...?

I installed ppp via the debian package and when I ran it it griped about the
kernel not having support for it, although I did build the kernel with ppp
in it!

>
> >
> > I have then done a:
> >
> > mknod /dev/ppp c 180 0
>
> I believe you wouldn't need this; depends on the tty number used, pppd
> will automagically setup ppp device.

This was part of the HOWTO setup for my Alcatel SpeedTouch USB modem

>
> > I have also edited my /etc/ppp/options file and edited my /etc/ppp/chap-
> > secrets and /etc/ppp/pap-secrets
>
> Use pppconfig, it's the right way, I believe.

I have tried pppconfig, but to no avail!

>
> Oki
>
>
>

Cheers,

Ben

Re: Mouse freeze -- Debian 2.2r4 PPC

[Kent West]

Marc Stergionis wrote:

Just installed 2.2r4  on a PM 8600. However the mouse is frozen on 
screen and clicks do nothing, which wouldn't matter much since t can't 
move anyway.


The mouse actually worked fine in a recent install of Potato 2.2  on the 
same machine. Just lost it on this reinstall.


The mouse also works fine in Mac OS9.1

Trying to run mouse config, xconfig or xconfigurator  results in 
"command not found." How do I get this back?


-ms


Depends on if you're running gpm (the console mouse driver) or not. Do a 
"ps ax|grep gpm". If you see something like:


  180 ?S  1:40 /usr/sbin/gpm -m /dev/psaux -t imps2 -Rraw
32483 pts/0S  0:00 grep gpm

then yes, you are running gpm. If you only see the "grep gpm" line, then 
no, you are not running gpm.


If you are running gpm, make sure the mouse works properly in the 
console (Ctrl-Alt-F1 and move the mouse). If it works, great. If not, 
run "gpmconfig". The device should probably be /dev/psaux (or 
/dev/ttyS0../dev/ttyS3 for a serial mouse), the protocol is probably 
going to be "ps2" or "imps2" (for a standard wheel mouse), and the 
repeat type should probably be "raw".


Once that's correct, or if you're not running gpm, edit the 
/etc/X11/XF86Config[-4] file, and look for the mouse section. The 
protocol should be the same as what you set for gpm, and the device 
should either be what you'd set in gpm, but only if you're not running 
gpm, or /dev/gpmdata, if you are running gpm.


gpm reads the mouse and repeats the data to the device /dev/gpmdata so 
that both the console mouse and the X mouse work. If you don't run gpm, 
you need to set X to use the actual device that gpm would use if you 
were running gpm.


Clear as mud?

Kent

Re: pppd Doing Nothing!

[Kent West]

Ben Hill wrote:


Firstly I build and compiled the kernel with ppp support and booted
it. I then set up PPP from the tarball, then:

/configure
make
make install


I installed ppp via the debian package and when I ran it it griped about the
kernel not having support for it, although I did build the kernel with ppp
in it!


I have tried pppconfig, but to no avail!

Ben



I'm thinking you don't actually have ppp configured properly in the 
kernel. You don't say what kernel version you have, but in looking at 
the options in "make menuconfig" for kernel 2.4.10, in the Network 
Device Support area, I needed to Y/M the following:

PPP (point-to-point protocol support)
PPP support for async serial ports (this is for normal modems, not DSL, 
etc)

But you mention that your modem is a USB device, and I've never played 
with those, so I can't really give you any direction, except to repeat 
once again that I don't think you've got the kernel quite right yet.


Kent

Re: compiling .debs for potato on woody

[David Roundy]

On Wed, Nov 28, 2001 at 02:22:22AM +0200, Shaul Karl wrote:
> As a last resort you can make a chroot environment on the woody machine 
> on which you will install whatever is needed to build the deb in 
> question. With this you'll have a potato environment on which you can 
> make the potato deb.
> 
> Hopefully there are automatic tools for the job and/or simpler 
> solutions.

There is: pbuilder.  It sets up a chroot build environment in which it
compiles a package.
-- 
David Roundy
http://civet.berkeley.edu/droundy/


pgpcfpQVAf2LV.pgp
Description: PGP signature

mutt index_format and size of messages

[martin f krafft]

by default, mutt displays the lines count in the index listing. the %c
format option allows the display of the size in bytes. is there anyway
to have mutt display size in kb, possibly rounded to 2 significant
figures, or an accuracy of 0.1?

mutt-users, please CC me on the reply.

thanks,

-- 
martin;  (greetings from the heart of the sun.)
  \ echo mailto: !#^."<*>"|tr "<*> mailto:"; [EMAIL PROTECTED]
  
i took an iq test and the results were negative.

kernel won't boot on a smp machine

[Dragos]

hello,
the subject is a little misleading, it boots, but the keyboard wont work.
let me tell you the story...
assembled a dual machine PIII500/i440bx; took a disk from another machine 
(debian woody) to test if it comes up (the dual machine doesn't have it's own 
disk yet); the POST is ok, I can enter the BIOS, make changes, etc...; 
however, at some point during booting, the keyboard stops working, so I 
cannot login; it was a kernel compiled by me (2.4.10), so I thought it was my 
mistake; ok, booted 2.4.9-686 (debian), same behaviour; if I boot in single 
user mode, it suddenly works! withn every kernel! the keyboard is ok (it's 
the one that I use now), the other system which the disk was taken from is an 
mendocino 633 with the same chipset, i440bx, except is uniprocessor.
I do not have a clue about this, it's like the kernel has no driver compiled 
for the keyboard. Oh, and I forgot to mention, the kernels boots on their 
system, and the keyboard is standard (PS2).
Anybody on this?

dragos

Re: mutt index_format and size of messages

[Justin R. Miller]

Thus spake martin f krafft ([EMAIL PROTECTED]):

> by default, mutt displays the lines count in the index listing. the %c
> format option allows the display of the size in bytes. is there anyway
> to have mutt display size in kb, possibly rounded to 2 significant
> figures, or an accuracy of 0.1?

Mine shows KB, and I got it from mutt-users a while back.  Don't have
time to decode which letter it is now, but here's mine: 

set index_format="%4C %Z %{%b %d} %-15.15F (%4c) %s"

Hope it helps.

-- 
Justin R. Miller <[EMAIL PROTECTED]>
PGP/GnuPG Key ID 0xC9C40C31 (preferred)


pgpKRNmzxgMBs.pgp
Description: PGP signature

Re: mutt index_format and size of messages

[martin f krafft]

* Justin R. Miller <[EMAIL PROTECTED]> [2001.11.28 10:28:34-0500]:
> Thus spake martin f krafft ([EMAIL PROTECTED]):

this on the personal side... why not make it

"Also sprach martin f krafft"

after all, the original was german...

> Mine shows KB, and I got it from mutt-users a while back.  Don't have
> time to decode which letter it is now, but here's mine: 
> 
>   set index_format="%4C %Z %{%b %d} %-15.15F (%4c) %s"

you rock! i saw %c and tried it, but it wouldn't succeed. i mean, it
did work, but i had hooks overriding it. so now it's beautuitous!

-- 
martin;  (greetings from the heart of the sun.)
  \ echo mailto: !#^."<*>"|tr "<*> mailto:"; [EMAIL PROTECTED]
  
a good scapegoat is nearly as welcome as a solution to the problem.

Installing squidGuard package

[Nigel Pauli]

I am just about to install squidGuard from testing. I've done 'apt-get 
install squidguard' and in the list of new packages that will be 
installed is squid - which I already have installed and running.

Will apt-get realise this and work around or is it rather risky for me 
to continue at this stage?

TIA for any advice.
Nigel
-- 
Nigel Pauli - I.T. Manager
St. John's School, Northwood, U.K.
http://www.st-johns.org.uk/

Re: VIA sound chipset

[Nikolai Hlubek]

On Tue, Nov 27, 2001 at 04:25:08PM -0200, francisco m neto wrote:
>   I'm having some problems trying to have sound working on some 
> machines which have the via89xxx chipset. When using kernel 2.2.x, mpg123, 
> for example, will play a mp3 file at a higher rate than the normal, i.e., it 
> will sound "faster". When using kernel 2.4.x, it won't even play the file, 
> complaining about "not finding any supported rates". Does anyone have some 
> experience with this chipset?


Greetings

Some of the 2.4.* kernels have a bug in downsampling. 
2.4.3 works for me. 2.4.6 / 2.4.9 gave me the same problems you report. 
So I would recommend using the latest version like Peter De Wachter
suggested or if stablity is a problem use 2.4.3. 

Regards,
Nikolai 

-- 
|  apt-get   |   Debian GNU/Linux
|  into it   |   http://www.debian.org

Re: kernel won't boot on a smp machine

[Dragos]

On Wednesday 28 November 2001 05:33 pm, Dragos wrote:
> hello,
> the subject is a little misleading, it boots, but the keyboard wont work.
> let me tell you the story...
> assembled a dual machine PIII500/i440bx; took a disk from another machine
> (debian woody) to test if it comes up (the dual machine doesn't have it's
> own disk yet); the POST is ok, I can enter the BIOS, make changes, etc...;
> however, at some point during booting, the keyboard stops working, so I
> cannot login; it was a kernel compiled by me (2.4.10), so I thought it was
> my mistake; ok, booted 2.4.9-686 (debian), same behaviour; if I boot in
> single user mode, it suddenly works! withn every kernel! the keyboard is ok
> (it's the one that I use now), the other system which the disk was taken
> from is an mendocino 633 with the same chipset, i440bx, except is
> uniprocessor. I do not have a clue about this, it's like the kernel has no
> driver compiled for the keyboard. Oh, and I forgot to mention, the kernels
> boots on their system, and the keyboard is standard (PS2).
> Anybody on this?
>
> dragos

arghhh, forget it...it was gpm! it was starting in runlevel2 and I didn't 
had a mouse...
damn it

cheers, dragos

Re: Fetchmail trouble

[Sridhar M.A.]

On Wed, Nov 28, 2001 at 10:08:07AM -0200, Henrique de Moraes Holschuh wrote:
  > 
   > Your server just told fetchmail that there are no messages to be
   > downloaded...
   > 
   > Try enabling the fetchall option (see fetchmail manpage). But it is a 
broken
   > server, I do not know if that will help you.
   > 
   > See RFC 1939 for details.
   > 

I don't know for sure. 


On a hunch downgraded fetchmail. Problem solved. What led me to it was
the identical behaviour of fetchmail under debian and slackware. So, I
suspected it to be a version problem and reinstalled fetchmail 5.5.6
(earlier it was 5.9.3). As the session below shows, it is working again.

  [EMAIL PROTECTED]:~$ fetchmail -v -k
  fetchmail: 5.5.6 querying pop.net4india.com (protocol POP3) at Thu Nov 29 
03:00:17 2001
  fetchmail: POP3< +OK Cubic Circle's v1.31 1998/05/13 POP3 ready <[EMAIL 
PROTECTED]>
  fetchmail: POP3> USER z1585531-001
  fetchmail: POP3< +OK z1585531-001 selected
  fetchmail: POP3> PASS *
  fetchmail: POP3< +OK Congratulations!
  fetchmail: POP3> STAT
  fetchmail: POP3< +OK 3 9149
  3 messages for z1585531-001 at pop.net4india.com (9149 octets).
  fetchmail: POP3> LIST
  fetchmail: POP3< +OK 3 messages (9149 octets)
  fetchmail: POP3< 1 2447
  fetchmail: POP3< 2 3268
  fetchmail: POP3< 3 3434
  fetchmail: POP3< .
  fetchmail: POP3> RETR 1
  fetchmail: POP3< +OK 2447 octets
  reading message 1 of 3 (2447 octets)
  ..

So, is this a bug? If the gurus feel so, should I file a bug report? How
do I go about it?

-- 
Sridhar M.A. [EMAIL PROTECTED]

Women, when they have made a sheep of a man, always tell him that he is a
lion with a will of iron.
-- Honor'e de Balzac

Re: Latest Galeon? will it work on potato?

[Erik van der Meulen]

On Wed, Nov 28, 2001 at 14:32:16 +0100, Cyril Lacoux wrote:

> I put galeon 0.12.8 on my homepage.
> 
> deb http://people.easter-eggs.org/~yack/debian/ potato main
>  

Thanks for that. I have added the above to my sources list, but
if I apt-get galeon, things go wrong. I get:

  Unpacking galeon (from .../galeon_0.12.8-1-yack1_i386.deb) ...
  Errors were encountered while processing:
  /var/cache/apt/archives/mozilla-browser_2%3a0.9.6-3-yack1_i386.deb
  E: Sub-process /usr/bin/dpkg returned an error code (1)

After that, my Mozilla is still 0.95, while I was expecting 0.9.6
to have been installed, and starting Galeon gives:

  /usr/bin/galeon-bin: error while loading shared libraries:
  /usr/bin/galeon-bin: undefined symbol:
  Length__C24nsASingleFragmentCString

Any idea what might have happened?

Much appreciated.

--
  Erik van der Meulen <[EMAIL PROTECTED]>

Gnus and IMAP on Debian?

[Michael A. Miller]

I'd like to use Gnus (gnus_5.8.8-4 and emacs20_20.7-10.1) to
extract mail from an IMAP server.  I can check my mail with
fetchmail (popclient) with no trouble, but when I try with
gnus-secondary-select-methods, as in
 
(setq gnus-select-method '(nntp "news.iupui.edu"))
(add-to-list 'gnus-secondary-select-methods '(nnml ""))
(add-to-list 'gnus-secondary-select-methods
  '(nnimap "imap1.iupui.edu"))

I'm told (in *Messages*) that:

Opening nnimap server on imap1.iupui.edu.edu...
Denied server

If I try using mail-sources instead, as I've seen in some posts
here, like this (with xxx replaced with the correct
password):

(setq mail-sources
  '((imap :server "imap1.iupui.edu"
  :user "mmiller3"
  :password ""
  )))
 
I get this:

nnml: Reading incoming mail from imap...
Loading imap...
Loading imap...done
imap: Connecting to imap1.iupui.edu...
Waiting for response from imap1.iupui.edu...done
imap: Connecting to imap1.iupui.edu...done
  
imap: Reconnecting with stream `kerberos4'...
  
Opening Kerberos 4 IMAP connection with `imtest -m kerberos_v4
   -u %l -p %p %s'... 
Opening Kerberos 4 IMAP connection with `imtest -m kerberos_v4
   -u %l -p %p %s'...failed 
Opening Kerberos 4 IMAP connection with `imtest -kp %s %p'...
Opening Kerberos 4 IMAP connection with `imtest -kp %s %p'...failed
imap: Reconnecting with stream `kerberos4'...failed


This looks like it is exposing a bug - a dependency on
cyrus-imapd, which contains imtest.  Would someone who has used
the Debian Gnus/Emacs packages to read an IMAP server help me
sort this out before I send in a bug report?

Mike
'

Nokia PCMCIA Card Phone

[techlists]

Has anyone tried the Nokia PCMCIA Card Cell Phone?  I'm considering buying one 
and was wondering if it would run on My Laptop.(Debian/woody/2.4.3)

For those of you who don't know it's a pcmcia cell phone.


Wayne

howto have konquerer directory view look more like netscape, i.e.

[Walter Tautz]

without all these annoying folders. There doesn't appear to be
an obvious place under setting to accomplish this. File associations
would have been my first guess.

-walter

Re: cvs security - ssh vs pserver?

[Dimitri Maziuk]

* Eric G. Miller (egm2@jps.net) spake thusly:
> On Tue, 27 Nov 2001 10:14:21 -0600
> Dimitri Maziuk <[EMAIL PROTECTED]> wrote:
> [snip]
> > Yes, pswerver sends everything in the clear and all that.
> > Edit /etc/shadow and set your cvsuser's password to NP 
> > (or whatever Debian uses to disable logins). Let your
> > users download the *private* key of cvsuser. Set up cvsuser
> > account so that ssh logins can only run cvs.
> 
> Don't you mean the *public* key?  In fact, don't you want
> the server to have the public key of the user, and then that
> user has to use their private key and their passphrase to
> authenticate themselves to the CVS server via ssh?  I'm on
> the user end of such a setup, and I don't have any key for
> the server but it does have my public key.  Use ssh-agent
> to manage authentication/passphrase...

I meant what I said: private key. If you want joe to login 
to cvsuser acct. via ssh with key-based auth., cvsuser must 
have joe's public key in his authorized_keys[2] file.

One way of doing that is to add *a* public key to cvsuser's 
authorized_keys, and to let joe download corresp. *private* 
key (& use that to login).
Another way is to get joe's public key and add it to cvsuser's
authorized_keys. 

We do the latter because we want to be able to cut people off
(by removing their key from authorized_keys). This way requires
a bit more administration, and is not truly anonymous.

The former method is anonymous (everyone uses the same key),
and is a bit less hassle: you don't have to collect users'
keys & add them to authorized_keys (that can be a PITA if
you have hundreds of users).

Dima
-- 
The wombat is a mixture of chalk and clay used for respiration.  -- MegaHal

MRTG

[Matthew Daubenspeck]

I already have MRTG installed on a potato box, and polling a few other 
devices on my LAN. So far it works perfectly.


I would like to add the potato box to the list of hosts checked, but am 
unsure which SNMP packages I should install.


Any ideas?

Re: pppd Doing Nothing!

[John Hasler]

Ben Hill wrote:
> I installed ppp via the debian package and when I ran it it griped about
> the kernel not having support for it, although I did build the kernel
> with ppp in it!

Pppd sometimes produces this misleading message when the actual problem has
to do with permissions.  It's a know bug.  What, _exactly_ did you do?

> This was part of the HOWTO setup for my Alcatel SpeedTouch USB modem

Where did you get that HOWTO?

> I have tried pppconfig, but to no avail!

_Exactly_ what did you do, and _exactly_ what happened?  Be verbose, and
post copies of /etc/chatscripts/provider, /etc/ppp/peers/provider, and the
output of the 'plog' command.
-- 
John Hasler
[EMAIL PROTECTED] (John Hasler)
Dancing Horse Hill
Elmwood, WI

Re: Latest Galeon? will it work on potato?

[Cyril Lacoux]

le mer 28-11-2001 à 16:59, Erik van der Meulen a écrit :
> 
> Thanks for that. I have added the above to my sources list, but
> if I apt-get galeon, things go wrong. I get:
> 
>   Unpacking galeon (from .../galeon_0.12.8-1-yack1_i386.deb) ...
>   Errors were encountered while processing:
>   /var/cache/apt/archives/mozilla-browser_2%3a0.9.6-3-yack1_i386.deb
>   E: Sub-process /usr/bin/dpkg returned an error code (1)
sorry, don't know what happened. I installed it on 3 differents machines
without any problem...
is it during preconfiguring, installing or configuring ?

Depends for this packages are :
libc6 (>= 2.1.2), libglib1.2 (>= 1.2.0), libgtk1.2 (>= 1.2.0),
libjpeg62, libstdc++2.10, libz1, xlib6g (>= 3.3.6-4), libnspr4 (=
2:0.9.6-3-yack1)
are you sure it's right for you ?

> 
> After that, my Mozilla is still 0.95, while I was expecting 0.9.6
> to have been installed, and starting Galeon gives:
> 
>   /usr/bin/galeon-bin: error while loading shared libraries:
>   /usr/bin/galeon-bin: undefined symbol:
>   Length__C24nsASingleFragmentCString

probably due to mozilla problem ...

Regards,
Cyril Lacoux.
 
-- 
Cyril Lacoux / Easter-Eggs   Spécialiste GNU/Linux
44-46 rue de l'Ouest  -  75014 Paris  -  France -  Métro Gaité
Phone: +33 (0) 1 43 35 00 37-   Fax: +33 (0) 1 43 35 00 76
mailto:[EMAIL PROTECTED]   -  http://www.easter-eggs.com
B81AD6A6 -  638E A25A C5A4 C81A 4B98  CCC6 AFF7 FD7A B81A D6A6


pgptincP7o9TS.pgp
Description: PGP signature

Re: Kernel modules and usb

[Dave Carrigan]

Jesper Holmberg <[EMAIL PROTECTED]> writes:

> 1. How do I make these modules automatically probed when I startup? The
> file /etc/modules.conf should not be touched, it says.

You can put the module names into /etc/modules.

> 2. Even better, would it be possible to have these modules probed when a
> usb mouse is detected?

apt-get install hotplug

-- 
Dave Carrigan ([EMAIL PROTECTED])| Yow!  I just went below the
UNIX-Apache-Perl-Linux-Firewalls-LDAP-C-DNS | poverty line!
Seattle, WA, USA| 
http://www.rudedog.org/ | 

Re: pppd Doing Nothing!

[John Hasler]

Kent West writes:
> I'm thinking you don't actually have ppp configured properly in the
> kernel.

I think ppp is fine but he may need some USB related options.  I know
nothing about USB either.  Would someone who does please speak up?
-- 
John Hasler
[EMAIL PROTECTED] (John Hasler)
Dancing Horse Hill
Elmwood, WI

Re: cvs security - ssh vs pserver?

[Dimitri Maziuk]

* martin f krafft ([EMAIL PROTECTED]) spake thusly:
...
> that's a good point. you can either generate a keypair on the server
> and distribute the private key to multiple people, or you can create a
> keypair per user and add all those public keys to authorized_keys(2).
> there is no question that the second method is better. in fact, the
> first one SUCKS and should not be used. 

Bull. Give me one reason why it sucks. It's the way of giving them
anonymous cvs access without too much hassle. Or do you believe
that letting them have *a private key* is bad because it's called
"private"? It's just a word, you know...

...with the second method, you
> have more administrative overhead, but you can also just simply take
> privileges away from a single user without anyone else having to worry
> or changing passwords or getting a new identity or this or that.

Yes, and you also have one to one key->user map, so the setup is
not anonymous. Which may not be a good thing.

Dima
-- 
The wombat is a mixture of chalk and clay used for respiration.  -- MegaHal

Re: howto have konquerer directory view look more like netscape, i.e.

[Justin R. Miller]

Thus spake Walter Tautz ([EMAIL PROTECTED]):

> without all these annoying folders. There doesn't appear to be an
> obvious place under setting to accomplish this. File associations
> would have been my first guess.

I think that you'd want to click the top-right button on the toolbar and
use the "Text View" option for a listing.  

-- 
Justin R. Miller <[EMAIL PROTECTED]>
PGP/GnuPG Key ID 0xC9C40C31 (preferred)


pgpdAHFT9gAgg.pgp
Description: PGP signature

VPN software

[Andrew Pritchard]

Is there a Debian package to set up a VPN? Or am I going to have to go down the 
Free SWAN route?

Cheers,

Andrew

"I do not agree with what you say,
but I will defend to the death your right to say it." 
Francois Marie Arouet Voltaire (1694-1778)

Re: routing question

[shock]

* Michael Heldebrant ([EMAIL PROTECTED]) spake thusly:
>
> What is the default policy for the input and output chains on "a". 
> ipchains -L -v -n output will show this.  

[EMAIL PROTECTED] stephen]# /sbin/ipchains -L -v -n
Chain input (policy ACCEPT: 3466 packets, 774392 bytes):
pkts bytes target prot opttosa tosx  ifname mark outsize  source
destination   ports
0 0 ACCEPT udp  -- 0xFF 0x00  eth0 0.0.0.0/00.0.0.0/0   
  67 ->   68
Chain forward (policy DENY: 0 packets, 0 bytes):
pkts bytes target prot opttosa tosx  ifname mark outsize  source
destination   ports
1206 76677 MASQ   all  -- 0xFF 0x00  * 192.168.2.0/24   0.0.0.0/0   
  n/a
Chain output (policy ACCEPT: 3294 packets, 806120 bytes):

> The output of netstat -atp on
> "a" would also be helpfull along with the route output from both
> machines.  

[EMAIL PROTECTED] stephen]# netstat -atp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address   Foreign Address State   
PID/Program name
tcp0  0 pappy.exitwound.o:pop-3 calypso.exitwound:44919 TIME_WAIT   
-
tcp0  0 192.168.1.10:pop-3  calypso.exitwound:44918 TIME_WAIT   
-
tcp0  0 *:6010  *:* LISTEN  607/sshd2
tcp0232 pappy.exitwound.org:ssh calypso.exitwound:44912 ESTABLISHED 
607/sshd2
tcp0  0 *:smtp  *:* LISTEN  409/sendmail: accep
tcp0  0 192.168.1.10:www*:* LISTEN  363/httpd
tcp0  0 *:mysql *:* LISTEN  359/mysqld
tcp0  0 *:ssh   *:* LISTEN  291/sshd2
tcp0  0 *:pop-3 *:* LISTEN  282/inetd
tcp0  0 *:pop-2 *:* LISTEN  282/inetd

> I assume the "broadcase" above for eth1 is a typo and not the
> actual command right?  

actually, that wasn't a typo.  it's been corrected.  thanks.

>Are you using some sort of dhcp on "a" with pump?

Nope.  All of that is handled through the DSL modem/router.  I just
simply set the default gateway to point to it.
-- 
 ) ,_),_)
(-(__  |_  _  _ |/
 ) | |(_)(_ |\
( \_,
 ___
| http://www.exitwound.org : hard to find   |
 ___
 -BEGIN GEEK CODE BLOCK-
| Version: 3.1  |
| GJ/IT d- s: a C+++>$ UL P+++ L+++ E--- W++| 
| N+@ o K- w O- M- V PS+ PE Y+ PGP++ t+@ 5@ X++ |
| R tv+@ b+ DI D+ G++ e h r+++ y+++ |
 --END GEEK CODE BLOCK--

doc-central not working

[Stan Brown]

Browsing trhough dselect I discovered a neat package called doc central. It
is supposed to let you access all the .usr/share/doc useful inof from a web
browser. neat idea!

Unfortunatley, when I try to sue it, I can get as far as the indexes, but
any atempt access actual documentation results in a "Forbiden" error from
Apache.

What do I need to do to fix this?

The system is potato + Progeny + 2.4 kernel.



-- 
Stan Brown [EMAIL PROTECTED]843-745-3154
Charleston SC.
-- 
Windows 98: n.
useless extension to a minor patch release for 32-bit extensions and
a graphical shell for a 16-bit patch to an 8-bit operating system
originally coded for a 4-bit microprocessor, written by a 2-bit 
company that can't stand for 1 bit of competition.
-
(c) 2000 Stan Brown.  Redistribution via the Microsoft Network is prohibited.

Re: MRTG

[Jason M. Harvey]

On Wed, Nov 28, 2001 at 11:30:07AM -0500, Matthew Daubenspeck wrote:
> I already have MRTG installed on a potato box, and polling a few other 
> devices on my LAN. So far it works perfectly.
> 
> I would like to add the potato box to the list of hosts checked, but am 
> unsure which SNMP packages I should install.
> 
> Any ideas?
> 

hello,

i have mrtg running on my potato box with snmpd. you should be able to
just
apt-get install snmpd

then afterwards, you may have to edit your

/etc/snmp/snmpd.conf

the help/example docs that come with mrtg should be able to help you...
if not, let me know and i can send some of my settings.

good luck,
jason

-- 
registered linux user #202942
http://counter.li.org/

http://www.theigloo.dhs.org

Re: [LIH] Re: Fetchmail problems

[Raghavendra Bhat]

[Thu, Nov 29, 2001 at 03:03:03AM +0530] Sridhar M.A. :

> should I file a bug report ? How do I go about it ?

This bug might have already  been reported.  There is this nifty utility
based on Python  called as 'reportbug'.  It does what  it says and helps
you  find out  whether the  'bug' has  already been  reported. If  so it
returns the  allocated bug  no./nos.  It  is one great  help and  a very
small package.

Do an 'apt-get install reportbug'.  

Enjoy.

-- 
ragOO, VU2RGU<->http://gnuhead.dyndns.org/<->GPG: 1024D/F1624A6E 
   Helping to keep the  Air-Waves FREE Amateur Radio 
   Helping to keep your Software  FREE   the GNU Project
   Helping to keep the  W W W FREE  Debian GNU/${kernel}

scsi controller or kernel failure?

['cduck' Chris Grierson]

i have received the following message(s) several times now, and once it
happens, i have no choice but to reboot.  i had to manually reboot once
before because i didn't have the SysRq magic built in my kernel, and
severe filesystem damage (irreparable for the existing system) was
sustained forcing me to reinstall.

scsi0: PCI error Interrupt at seqaddr = 0x180
scsi0: Received Target Abort

(that 0x180 may have been something else, unfortunately)

the reinstall was on a smaller disk of the same series as the original
(Quantum Atlas 10k).  unfortunately, it happened again, but thankfully
i could sync the disk (not that i know that actually did anything
useful, since the low-level SCSI layer was freaking out), and e2fsck
managed to fix the filesystem problems on reboot.  this recoverable
lockup has happened several times now, and i don't think it is going
to stop.  has anyone had this and/or know what to do about it?  is it
more likely to be a kernel (software) issue, or a SCSI controller
issue (or the PCI controller!?) ?  the scsi controller is a Adaptec
7890, using the AIC7xxx kernel config option.

also, eth0 was complaining (immediately after the scsi problem, and at
no other time), but some google searching has me under the impression
that it was related to some interrupt sharing that had gone awry since
scsi0 was freaking out.

-c

[ Structural Informatics Group  ]
[ Dept. of Biological Structure ]
[ University of Washington  ]

[ 206.616.7356:office ]
[ 206.795.4998:cell   ]

Kmail problems - please reply offlist

[Gordon Paynter]

Hi all, I have a serious problem with KMail.  If anyone can help could
you CC me personally as I have had to unsubscribe from the list.
Thanks.

I use Kmail with windowmaker on woody, x86 platform.

A little over a week ago (when, I think, the KDE upgrades were
entering woody) I had a lot of problems with KMail.

The first was that KMail was not retrieving mail because it couldn't
access something called "klauncher".  I tracked this down via the list
as meaning I had to restart kdeinit.

The second was that hen I fixed this I had 600-1000 messages and KMail
crashed when it downloaded them.  This bug has already been reported
on kmail.kde.org.

The third problem was with filtering (I deleted some folders, thus
breaking the filters) - but I fixed that.

The fourth, problem and the one I want help with now, is that when I
pop (pop3) messages from our mail server, the downloaded messages
appear to have two carriage returns inserted into them at 0 or more
random points.  This is a BIG problem because when you get two
carriage returns in the headers, KMail (and the filters) take this as
meaning that the headers are over, thus you cannot filter these
messages by any of the herader fields.  So I wound up with 600
messages in a folder, 95% of which were from debian-user and mysql
mailing lists, and two or three which were urgent or important, almost
all with From, To, and Subject fields set to "Nobody" or "Nothing".

This is still happening to some of the messages I download: every so
often, a couple of carriage returns appear to be inserted, which is
annoying for most messages and plain anti-productive when it
interferes with filters.  


If you have any idea what might be wrong, please mail me.  Thanks.

Gordon

Re: scsi controller or kernel failure?

[Jeffrey W. Baker]

On Wed, 2001-11-28 at 10:03, 'cduck' Chris Grierson wrote:
> i have received the following message(s) several times now, and once it
> happens, i have no choice but to reboot.  i had to manually reboot once
> before because i didn't have the SysRq magic built in my kernel, and
> severe filesystem damage (irreparable for the existing system) was
> sustained forcing me to reinstall.
> 
> scsi0: PCI error Interrupt at seqaddr = 0x180
> scsi0: Received Target Abort
> 
> (that 0x180 may have been something else, unfortunately)
> 
> the reinstall was on a smaller disk of the same series as the original
> (Quantum Atlas 10k).  unfortunately, it happened again, but thankfully
> i could sync the disk (not that i know that actually did anything
> useful, since the low-level SCSI layer was freaking out), and e2fsck
> managed to fix the filesystem problems on reboot.  this recoverable
> lockup has happened several times now, and i don't think it is going
> to stop.  has anyone had this and/or know what to do about it?  is it
> more likely to be a kernel (software) issue, or a SCSI controller
> issue (or the PCI controller!?) ?  the scsi controller is a Adaptec
> 7890, using the AIC7xxx kernel config option.

Built in to your motherboard then?

> also, eth0 was complaining (immediately after the scsi problem, and at
> no other time), but some google searching has me under the impression
> that it was related to some interrupt sharing that had gone awry since
> scsi0 was freaking out.

Perhaps this interupt sharing is the problem.  Try putting your SCSI
controller and your ethernet controller on different interrupts.  Since
these are your two most frequent interrupt sources, they really don't
belong on the same interrupt anyway.

-jwb

Re: trouble using Staroffice 6

[Kent West]

Marsha Petry wrote:




Using KDE; using unstable on an IBM Thinkpad T20 (been using Debian for about a
month only, sorry).  Everything else seems to work pretty good, though I have
some minor problems with other apps (On some applications - like Mozilla - menu
fonts are huge).  Am I missing a critcical piece of the X server perhaps?


Two things I'd do to gather more clues:

   1) Use a simpler X environment, such as no ICEWM or XFCE or TWM 
instead of KDE/Gnome, just long enough to see if the problem goes away 
or not.


   2) Make sure you've got xfonts-75dpi, xfonts-100dpi, xfonts-base, 
and xfonts-.scalable installed. In my experience these seem to pretty 
much be the base set of fonts needed.


Other possible culprits might be the order in which the fonts are 
loading (/etc/X11/XF86Config[-4]), issues with xfs and/or xfstt (font 
server and truetype font server), weird settings in your Moz prefs (exit 
Moz and then rename your .mozilla directory to see if that affects 
anything). Of course, this list is not exhaustive, but it's where I'd start.


Kent

Re: VPN software

[Paul Smith]

%% Andrew Pritchard <[EMAIL PROTECTED]> writes:

  ap> Is there a Debian package to set up a VPN? Or am I going to have
  ap> to go down the Free SWAN route?

This is on a box set to Woody:

  $ apt-cache search vpn
  pptpd - PoPToP Point to Point Tunneling Server
  cipe-common - Common files for CIPE VPN software
  cipe-source - Encrypted IP tunnels over UDP (source)
  freeswan - IPSEC utilities for FreeSWan
  kernel-patch-mppe - ppp_mppe module for pppd
  secvpn - Secure Virtual Private Network (secvpn)
  tinc - Virtual Private Network daemon
  tunnelv - Encrypted network connection within a TCP/IP connection
  vpnd - Virtual Private Network Daemon

-- 
---
 Paul D. Smith <[EMAIL PROTECTED]> HASMAT--HA Software Mthds & Tools
 "Please remain calm...I may be mad, but I am a professional." --Mad Scientist
---
   These are my opinions---Nortel Networks takes no responsibility for them.

Promise Fasttrak 100 RAID controller

[Peter]

Hi,I want to install potato on a box using 
the Fasttrak RAID controller withtwo HD's mirrored. Is the controller 
supported by potato? If not wichversion do I have to 
install?thanks,Peter

Re: I've screwed something up - big time.

[Colin Watson]

On Thu, Nov 29, 2001 at 01:26:47AM +1100, Craig W wrote:
> Sorry, but the following packages have unmet dependencies:
>   perl-5.004: Depends: perl-5.004-base (= 5.004.05-6) but 6.3 is to be
> installed

(Why not perl-5.005?)

You need to downgrade the existing perl-5.00[45]-base packages; the ones
you have installed are transitional packages. Downgrades aren't very
well supported, as you've discovered, but you should be able to either:

  * remove perl-5.004-base and then use apt-get to reinstall the version
from stable, provided there's nothing left that depends on it;

  * download the perl-5.004-base .deb and install it with 'dpkg -i';

  * if you happen to have the apt from testing installed, 'apt-get
install perl-5.004-base=5.004.05-6'.

You can use the apt from testing to do a mass downgrade if you're
careful, for which see the apt_preferences(5) man page. The way to do a
downgrade is generally to let dpkg or newer versions of apt do it, not
to attempt to remove and reinstall.

> Is there someway to manually edit the list of installed packages to kick it
> into re-installing perl (& what is the filename of said file?)?

Do everything you can to avoid having to do this, as it has a good
chance of confusing the packaging system beyond unskilled repair.
(Anything's possible - /var/lib/dpkg/status, for reference - but
particularly in the case of perl it's a bad idea.)

Cheers,

-- 
Colin Watson  [EMAIL PROTECTED]

klogd

[Gabor Gludovatz]

Hi,

could someone please tell me how could I get klogd not to log every event
to the console as well? syslog logging would be enough, but I haven't
found any switch or configuration parameter...
syslog.conf is set up correctly and if I kill klogd, there are no kernel
messages on the console.. and no kernel messages in the syslog either :)
help! :)

-- 
 Gabor Gludovatz <[EMAIL PROTECTED]> http://www.sopron.hu/~ggabor/

Re: Fetchmail trouble

[Henrique de Moraes Holschuh]

On Thu, 29 Nov 2001, Sridhar M.A. wrote:
> On Wed, Nov 28, 2001 at 10:08:07AM -0200, Henrique de Moraes Holschuh wrote:
>   > 
>> Your server just told fetchmail that there are no messages to be
>> downloaded...
>> 
>> Try enabling the fetchall option (see fetchmail manpage). But it is a 
> broken
>> server, I do not know if that will help you.
>> 
>> See RFC 1939 for details.
>> 
> 
> I don't know for sure. 

Well, I do :P

> On a hunch downgraded fetchmail. Problem solved. What led me to it was

Hmm...

>   fetchmail: POP3< +OK Cubic Circle's v1.31 1998/05/13 POP3 ready <[EMAIL 
> PROTECTED]>
>   fetchmail: POP3> USER z1585531-001
>   fetchmail: POP3< +OK z1585531-001 selected
>   fetchmail: POP3> PASS *
>   fetchmail: POP3< +OK Congratulations!
>   fetchmail: POP3> STAT
>   fetchmail: POP3< +OK 3 9149

Where one can clearly see that this time the server did not lie. Talk about
broken behaviour...

Tell your ISP to change that thing to something that actually works as per
the RFCs, maybe a new version of the pop server, or of whatever they run the
server with. 

Meanwhile, I think you can explicitly tell fetchmail to use USER+PASS, and
it will not try to autodetect anything in that case. That might avoid
annoying that sensitive pop3 server of your ISP.

To do that, use the protocol pop3 (do not let fetchmail try to autodetect
it), and tell it to use "auth password".

Here is what the fetchmailconf BadCrap database has to say on the issue:
---8<---
# Steve VanDevender <[EMAIL PROTECTED]> writes:
# The only system I have seen this happen with is cucipop-1.31
# under SunOS 4.1.4.  cucipop-1.31 runs fine on at least Solaris
# 2.x and probably quite a few other systems.  It appears to be a
# bug or bad interaction with the SunOS realloc() -- it turns out
# that internally cucipop does allocate a certain data structure in
# multiples of 16, using realloc() to bump it up to the next
# multiple if it needs more.
#
# The distinctive symptom is that when there are 16 messages in the
# inbox, you can RETR and DELE all 16 messages successfully, but on
# QUIT cucipop returns something like "-ERR Error locking your
# mailbox" and aborts without updating it.
#
# The cucipop banner looks like:
#
# +OK Cubic Circle's v1.31 1998/05/13 POP3 ready <[EMAIL PROTECTED]>
#   
I see your server is running cucipop.  Better make sure the server box
isn't a SunOS 4.1.4 machine; cucipop tickles a bug in SunOS realloc()
under that version, and doesn't cope with the result gracefully.  Newer
SunOS and Solaris machines run cucipop OK.

Also, some versions of cucipop don't assert an exclusive lock on your
mailbox when it's being queried.  This means that if you have more than
one fetchmail query running against the same mailbox, bad things can happen.
---8<---

> So, is this a bug? If the gurus feel so, should I file a bug report? How

Don't bother, I am the fetchmail maintainer :)  File a bug on your ISP, tell
them to run Debian instead of whatever they use there, and a True pop3
server, such as the one in Cyrus ;-)

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh

Problems with Samba

[jennyw]

After upgrading to Woody, Samba is no longer playing nice with Windows 2000.
I can use smbclient on the samba machine to connect to itself, so at least
that's working. The error from Windows is: "The semaphore timeout period has
expired.".

I deleted the smb.log file at one point in an effort to reset it.  I figured
it'd be created again but I haven't seen it ... This is even after removing
and re-installing Samba.  How do I get this back?  There are files in
/var/log/samba, though, for smbd and nmbd.log. The file log.smbd contains
these errors which might be related to the problem:

[2001/11/28 10:41:03, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by peer
[2001/11/28 10:44:18, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by peer
[2001/11/28 10:44:27, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by peer
[2001/11/28 10:48:33, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by peer
[2001/11/28 10:48:43, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by peer

Any suggestions?

Thanks!

Jen

upgrading unstable -- 44 packages held back?

[Kurt Lieber]

I'm running unstable and when I do an apt-get upgrade, it tells me it's 
holding back 44 packages. (a lot of which are related to kde, which I'm 
assuming is because I'm still running 2.2.1)

If I do dpkg --get-selections |grep hold, I see the only thing with a hold on 
it is my kernel-image.

So, I'm assuming this is expected behavior, but can anyone explain how the 
determination is made to hold back certain packages?  If it's not the hold 
flag, what else does it look for? 

Also, how do I upgrade those packages?

Thanks.

Re: upgrading unstable -- 44 packages held back?

[Dave Sherohman]

On Wed, Nov 28, 2001 at 11:25:47AM -0800, Kurt Lieber wrote:
> So, I'm assuming this is expected behavior, but can anyone explain how the 
> determination is made to hold back certain packages?  If it's not the hold 
> flag, what else does it look for? 

apt-get upgrade will refuse to add any new packages or delete any
existing ones.  If packages have been split or become obsolete (or
depend on any split/obsolete packages), it won't touch them.

> Also, how do I upgrade those packages?

apt-get dist-upgrade

-- 
When we reduce our own liberties to stop terrorism, the terrorists
have already won. - reverius

Innocence is no protection when governments go bad. - Tom Swiss