Re: Debian: LDAP migration

2021-08-26 Thread Bastien Durel
Le jeudi 26 août 2021 à 16:02 +0200, Dieter Heußner a écrit : > My aim is that the LDAP server runs on a supported Debian version > (v10 or > v11). As far as I understand the IT situation with respect to LDAP > server, > there are two alternatives: > 1. Upgrade LDAP server from Debian v6.0.4 to v

Re: Debian: LDAP migration

2021-08-26 Thread Bastien Durel
Le jeudi 26 août 2021 à 17:54 +0300, IL Ka a écrit : > 1. Export your data to LDIF using `slapcat` > https://www.openldap.org/software/man.cgi?query=slapcat > > 2. Install Debian 11 with OpenLDAP on some test machine > 3. import LDIF using `ldapadd` or `ldapmodify` and see if it works > https://ww

Re: dbus-deamon avoiding reboot after upgrade

2019-08-19 Thread Bastien Durel
Le lundi 19 août 2019 à 10:37 +0300, Reco a écrit : > > $ apt purge dbus -s > <...> > >dbus* libpam-systemd* > > So, dbus is not needed there. Hello. Same here, but with dbus removed, my jobs using systemd-nspawn fails with: Failed to open system bus: Connection refused So testing your syst

Re: dbus-deamon avoiding reboot after upgrade

2019-08-19 Thread Bastien Durel
Le lundi 19 août 2019 à 11:54 +0300, Reco a écrit : > Hi. > > On Mon, Aug 19, 2019 at 10:23:54AM +0200, Bastien Durel wrote: > > Le lundi 19 août 2019 à 10:37 +0300, Reco a écrit : > > > > $ apt purge dbus -s > > > <...> > > > >dbu

Re: dbus-deamon avoiding reboot after upgrade

2019-08-19 Thread Bastien Durel
Le lundi 19 août 2019 à 10:15 -0400, Greg Wooledge a écrit : > On Mon, Aug 19, 2019 at 11:41:33AM +0200, Bastien Durel wrote: > > Ok, there muste have been an error somewhere ... > > > > root@corrin-2:~# apt-cache policy systemd-container > > systemd-contai

Kernel hang in Xen (4.9)

2018-08-20 Thread Bastien Durel
Hello, I have a xen guest that hangs after a while if running 4.9 kernel (since upgrade to stretch) I get theses messages in console, then I cannot do anything. I get a login prompt on console, but do not get shell prompt; SSH connexion is established, I get my motd (even with updated last login t

Re: Kernel hang in Xen (4.9)

2018-08-20 Thread Bastien Durel
Le 20/08/2018 à 11:58, Steve Kemp a écrit : I have a xen guest that hangs after a while if running 4.9 kernel (since upgrade to stretch) You might try the 4.9.110-3 kernel from stretch-proposed-updates, which I noticed is required to fix a reboot-loop on stretch: https://bugs.debian.

Re: Passwords

2023-01-17 Thread Bastien Durel
Le mardi 17 janvier 2023 à 09:51 +0100, DdB a écrit : > Am 17.01.2023 um 07:14 schrieb Stanislav Vlasov: > Everyone (and their friend) seem to know, how to work around this, > which > apparently is common debian knowledge (which is nice). > > But somehow, i feel there could be more caring about av

Re: certbot options

2018-11-28 Thread Bastien Durel
Le mercredi 28 novembre 2018 à 13:29 +, Michael Grant a écrit : > In /lib/systemd/system/certbot.service > > The line to start certbot is: > ExecStart=/usr/bin/certbot -q renew > > If I modify this file by hand: > > ExecStart=/usr/bin/certbot -q --pre-hook /usr/local/bin/certbot- > prehoo

Re: Permanent Use of IPv4

2019-02-15 Thread Bastien Durel
Le vendredi 15 février 2019 à 10:12 -0500, Stephen P. Molnar a écrit : > Thanks for help from this gropup I can force the use of IPv4 by > running: sysctl -w net.ipv6.conf.all.disable_ipv6=1. > > For a number of reasons I have just done a fresh install of Stretch, > hoping that the installer wo

Re: Unusual LUKS setup

2017-08-14 Thread Bastien Durel
Le lundi 14 août 2017 à 16:17 +0200, Nicolas George a écrit : > - If you use SSH, you have to adjust /etc/ssh/sshd_config like this: > > UsePAM yes > UsePrivilegeSeparation no > ChallengeResponseAuthentication no > PasswordAuthentication yes You don't. pam_mount will ask you for your pass

Re: Unusual LUKS setup

2017-08-16 Thread Bastien Durel
Le lundi 14 août 2017 à 17:35 +0200, Nicolas George a écrit : > Le septidi 27 thermidor, an CCXXV, Bastien Durel a écrit : > > You don't. pam_mount will ask you for your password (after ssh > > authentication) if you didn't provided one > > Thanks for the clarificat

Re: java, javac versions not the same, apt-get doesn't help ...

2018-01-12 Thread Bastien Durel
Le vendredi 12 janvier 2018 à 04:20 -0500, Albretch Mueller a écrit : > java gives you error messages when you compile and run code with > different versions of the JVM > > while trying to update my box using apt-get I am getting: > "openjdk-8-jdk is already the newest version." > > How do you ma

Re: Kernel for Spectre and Meltdown

2018-01-29 Thread Bastien Durel
It supports both privileged (dom0) and unprivileged (domU) operation. Homepage: https://www.kernel.org/ As you can see, linux-image-4.9.0-5-amd64 is kernel 4.9.65 -- Bastien Durel

Re: Apache oddness on jessie => stretch upgrade

2017-08-22 Thread Bastien Durel
Le mardi 22 août 2017 à 03:58 -0500, Dave Sherohman a écrit : > [...] > Also, side question: I'm also manually running `systemctl enable > apache2` after upgrading. How can you tell whether something is > enabled > or not in systemd? `systemctl status` will tell you whether it's > currently runn

Re: IPv6 and DNS

2011-07-13 Thread Bastien Durel
ou need to accept some icmpv6 packets, then we need another rule ;) If ISPs sent their modem/box/router/whatever properly configured (default configuration disallowing incoming connections), there is no more security issues than with the ipv4/NAT setup. -- Bastien Durel -- To U

Bookworm upgrade, usrmerge failure

2023-06-12 Thread Bastien Durel
Hello, During bookworm upgrade, I ran into some usrmerge failures, which led to an hard-to-fix situation Paramétrage de usrmerge (35) ... FATAL ERROR: Both /lib/x86_64-linux-gnu/libidn.so.11 and /usr/lib/x86_64-linux-gnu/libidn.so.11 exist. You can try correcting the errors reported and runnin

Re: Bookworm upgrade, usrmerge failure

2023-06-13 Thread Bastien Durel
Le lundi 12 juin 2023 à 14:02 -0400, Jeffrey Walton a écrit : > On Mon, Jun 12, 2023 at 5:48 AM Bastien Durel > wrote: > > > > Hello, > > > > During bookworm upgrade, I ran into some usrmerge failures, which > > led > > to an hard-to-fix situ