date:20150407

On a Debian/stable machine:

cassis:~> strace -o str.out telnet -6 www.vinc17.net 80
Trying 2001:4b98:dc0:45:216:3eff:fe9b:eb2f...
telnet: Unable to connect to remote host: Network is unreachable
zsh: exit 1 strace -o str.out telnet -6 www.vinc17.net 80

which is OK since IPv6 doesn't work here, and str.out contains:

[...]
socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
setsockopt(3, SOL_IP, IP_TOS, [16], 4)  = 0
connect(3, {sa_family=AF_INET6, sin6_port=htons(80), inet_pton(AF_INET6, 
"2001:4b98:dc0:45:216:3eff:fe9b:eb2f", &sin6_addr), sin6_flowinfo=0, 
sin6_scope_id=0}, 28) = -1 ENETUNREACH (Network is unreachable)
[...]

But on my Debian/unstable machine on the same network, the "telnet"
freezes and I need to type Ctrl-C:

ypig:~> strace -o str.out telnet -6 www.vinc17.net 80
Trying 2001:4b98:dc0:45:216:3eff:fe9b:eb2f...
^C
zsh: interrupt  strace -o str.out telnet -6 www.vinc17.net 80

while I also expected a ENETUNREACH error. The str.out file contains:

[...]
socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
setsockopt(3, SOL_IP, IP_TOS, [16], 4)  = 0
connect(3, {sa_family=AF_INET6, sin6_port=htons(80), inet_pton(AF_INET6, 
"2001:4b98:dc0:45:216:3eff:fe9b:eb2f", &sin6_addr), sin6_flowinfo=0, 
sin6_scope_id=0}, 28) = ? ERESTARTSYS (To be restarted if SA_RESTART is set)
[...]

(the ERESTARTSYS is due to the Ctrl-C, otherwise the connect()
system call freezes). Where does the problem come from?

The www.vinc17.net is just an example. Same problem with the Debian
mirrors, for instance. This is really annoying as this introduces a
huge timeout for apt-get.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407104218.ga9...@ypig.lip.ens-lyon.fr

Re: sshfs: problem with rsync

On 2015-04-05 21:57:36 +0200, Pierre Frenkiel wrote:
>   my Android ssh server uses the port 2223, and I could not find how to
>   force rsync to use this port.

The port is a SSH parameter, not a rsync option. So, use .ssh/config
for that.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407104932.gb9...@ypig.lip.ens-lyon.fr

Re: sshfs: problem with rsync

2015-04-07 Thread Markus Schönhaber

Am 07.04.2015 um 12:49 CEST Vincent Lefevre:

> On 2015-04-05 21:57:36 +0200, Pierre Frenkiel wrote:
>>   my Android ssh server uses the port 2223, and I could not find how to
>>   force rsync to use this port.
> 
> The port is a SSH parameter, not a rsync option. So, use .ssh/config
> for that.

Or use rsync's --rsh option, like
rsync --rsh "ssh -p 2223" ...

-- 
Regards
  mks



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/5523b788.1070...@list-post.mks-mail.de

Re: Debian and FQDN lookup

On 2015-04-04 10:02:22 +0100, Joe wrote:
> On Fri, 3 Apr 2015 20:39:26 -0500
> David Wright  wrote:
> > I think I/we ought to be using .local
> > http://tools.ietf.org/html/rfc6762
> > because this won't get onto the Internet.
> 
> Really? I've seen an Exchange Server refuse mail from a BT server

for this connection, the "BT server" is actually the client.

> because the latter identified itself with .local as tld in the HELO.
> BT knows nothing about email.

I doubt this has anything to do with BT. MTA's will generally provide
the FQDN as the HELO name (as described in the corresponding RFC), and
if the FQDN has been chosen to end with .local then you'll get that in
the HELO. Anyway the HELO should really be ignored in practice as it
provides no useful information for the recipient.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407112333.gc9...@ypig.lip.ens-lyon.fr

Re: sshfs: problem with rsync

On 2015-04-07 12:55:04 +0200, Markus Schönhaber wrote:
> Am 07.04.2015 um 12:49 CEST Vincent Lefevre:
> 
> > On 2015-04-05 21:57:36 +0200, Pierre Frenkiel wrote:
> >>   my Android ssh server uses the port 2223, and I could not find
> >>   how to force rsync to use this port.
> > 
> > The port is a SSH parameter, not a rsync option. So, use .ssh/config
> > for that.
> 
> Or use rsync's --rsh option, like
> rsync --rsh "ssh -p 2223" ...

The advantage of using .ssh/config is that it will work for any
SSH-based command, not just rsync. And you don't have to remember
to use the --rsh option.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407114113.gd9...@ypig.lip.ens-lyon.fr

Re: Xorg -configure fails with "created screens does not match number of detected devices"

2015-04-07 Thread venkat


On 05-04-2015 00:08, Ric Moore wrote:

On 04/03/2015 09:34 AM, David Wright wrote:

Quoting venkat (venka...@vortexindia.co.in):

Tried various options today and finally modified xorg.conf with 
below settings

made my X server start with multiple displays enabled.


Section "Device"
   Identifier "Intel GMA3600"
   Driver "modesetting"
   BusID "PCI: 0: 2: 0
   Option "Monitor-DVI-0" "DVI screen"
   Option "Monitor-VGA-0" "VGA screen"
EndSection
Section "Monitor"
   Identifier "DVI screen"
EndSection
Section "Monitor"
   Identifier "VGA screen"
EndSection


Good.

However, i notice that the display is not smooth. Even, when i 
traverse to from

one menu to other i see it so shaky. Right now fighting to fix that.
  Need some guidance


I typed   gma3600 jerky   into google. The second hit contains:

"The new D2700 does have integrated HD video encoding and it works as
promised for the most part. Both 720p and 1080p HD video can be played
as long as its either MPEG2 or H.264, although 1080p can be a bit
jerky at times. It's not a slideshow, but it's also not completely
smooth. Especially when the bitrate is a bit higher, it starts to
struggle. This likely has to do with Intel's GMA3600 video drivers
that the manufacturer has been struggling with since launching the new
Atom platform in late 2011."

I know nothing about this hardware but I know a man who does. :)


On my old Thinkpad, I had to reduce the color depth in xorg.conf. 
Worked a charm. Ric





Thanks, guys for the help that you have provided with Wheezy + 3.4 kernel.
Although with 3.4 kernel the display control worked with DVI & LVD. Saw 
great amount of latency in UI.


Installed Jessie in N2600 board.

After installation noticed that system freeze during boot @ ata6: sata 
max udma/133 ABAR M512@


Googling  resulted in adding "nolapic" to kernel parameter in boot 
solved the issue. Still, need to check the cons of doing it.


After boot Diisplay worked charm... Both UI & Dual display (LVDS + HDMI) 
worked as expected.


In BIOS enabled CRT + HDMI and booted the system. After boot HDMI is 
working .But, no output found for VGA.


Xrandr reports VGA-0 device connected.

--
Regards
Venkat.S

gnome-settings-daemon, dbus about %80 of CPU

2015-04-07 Thread Magdi Mahmoud

Hi All,

I have a problem with rel. 8.0 testing  since installed  sometimes randomly  
getting about %80  of CPU busy and X-Win doesn't responding
gnome-settings-daemon, dbus   daemon utilise  about %70-%80.

Can someone  advise please


Thank you

Mag



This email and any attachments may be confidential and/or legally privileged. 
If you have received this e-mail and you are not a named addressee, please 
inform the sender of this email by sending a return email to the address above 
and then delete the e-mail and your response from your system. If you are not a 
named addressee you must not use, disclose, distribute, copy, print or rely on 
this e-mail. Any views or opinions presented are solely those of the author. 
Any statements made, or intentions expressed in this communication may not 
necessarily reflect the view of Easynet. No content herein will bind Easynet or 
any associated company unless confirmed by the execution of a formal contract 
by Easynet. Any figures or amounts given in this email are quotations only and 
are subject to change. Although Easynet routinely screen for viruses, 
addressees should scan this e-mail and any attachments for viruses. Easynet 
make no representation or warranty as to the absence of viruses in this e-mail 
or any attachments. Please note that to ensure regulatory compliance and for 
the protection of our customers and business, we may monitor and read e-mails 
sent to and from our server(s). Easynet Limited (registered number 02954343) 
and Easynet Global Services Limited (registered number 08458875) are 
incorporated in England and Wales and share the same registered office at St. 
James House, Oldbury, Bracknell, Berkshire, RG12 8TH

Re: connect() with AF_INET6 freezes on some Debian/unstable machine

 Hi.

On Tue, Apr 07, 2015 at 12:42:18PM +0200, Vincent Lefevre wrote:
> On a Debian/stable machine:
> 
> cassis:~> strace -o str.out telnet -6 www.vinc17.net 80
> Trying 2001:4b98:dc0:45:216:3eff:fe9b:eb2f...
> telnet: Unable to connect to remote host: Network is unreachable
> zsh: exit 1 strace -o str.out telnet -6 www.vinc17.net 80
> 
> which is OK since IPv6 doesn't work here, and str.out contains:
> 
> [...]
> socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
> setsockopt(3, SOL_IP, IP_TOS, [16], 4)  = 0
> connect(3, {sa_family=AF_INET6, sin6_port=htons(80), inet_pton(AF_INET6, 
> "2001:4b98:dc0:45:216:3eff:fe9b:eb2f", &sin6_addr), sin6_flowinfo=0, 
> sin6_scope_id=0}, 28) = -1 ENETUNREACH (Network is unreachable)
> [...]
> 
> But on my Debian/unstable machine on the same network, the "telnet"
> freezes and I need to type Ctrl-C:
> 
> ypig:~> strace -o str.out telnet -6 www.vinc17.net 80
> Trying 2001:4b98:dc0:45:216:3eff:fe9b:eb2f...
> ^C
> zsh: interrupt  strace -o str.out telnet -6 www.vinc17.net 80
> 
> while I also expected a ENETUNREACH error. The str.out file contains:
> 
> [...]
> socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
> setsockopt(3, SOL_IP, IP_TOS, [16], 4)  = 0
> connect(3, {sa_family=AF_INET6, sin6_port=htons(80), inet_pton(AF_INET6, 
> "2001:4b98:dc0:45:216:3eff:fe9b:eb2f", &sin6_addr), sin6_flowinfo=0, 
> sin6_scope_id=0}, 28) = ? ERESTARTSYS (To be restarted if SA_RESTART is set)
> [...]
> 
> (the ERESTARTSYS is due to the Ctrl-C, otherwise the connect()
> system call freezes). Where does the problem come from?
> 
> The www.vinc17.net is just an example. Same problem with the Debian
> mirrors, for instance. This is really annoying as this introduces a
> huge timeout for apt-get.

What's the result of:

ip -6 ro get 2001:4b98:dc0:45:216:3eff:fe9b:eb2f

Is there anything meaningful shown in tcpdump?

Reco


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407125747.GA1917@x101h

Authentication breakdown

I'm having a perplexing problem around authentication on my home system.

It has been running 32 bit Debian for years, and up to date with Debian 7.

Nothing new had been installed or configured for months, only
aptitude update and aptitude safe-upgrade.

This morning, checking email, I found thunderbird could not login to dovecot.
Restarted dovecot and no difference.

SSH login failed from two different systems.

I checked that the firewall on Linux was off.
I checked last reports and there was no unusual access.
Tested with chkrootkit and nothing came up.
This system is normally protected by unusual ssh port
plus denyhosts against brute force login.

nsswitch.conf had compat for passwd, group and shadow,
and I switched it to "files", with no difference. Nothing
seemed odd under /etc/pam.d with the common-* files.

Console login as my user or as root failed.

dmesg didn't report anything unusual happened.

Tried a passwd refresh to a new password. That required
entering my existing password, and entering the existing
password worked. However it wouldn't allow ssh or console
login with the changed password. I changed it back
to the usual password, and again, it accepted the
old password when prompted.

Eventually I was locked out when the screen save came on
after leaving it alone for awhile. I rebooted, and the system still
has this wacky behaviour. In addition, the gdm screen
does not come up - displaying only an hourglass.
VT consoles do come up after reboot, but again,
console login as myself or root are failing,
and ssh login from remote as myself is failing.

I've never seen something like this fail before unless I had
been messing around with pam configuration files. I'm currently
unable to get into the system so I'll be getting a rescue CD
set up to use later today.

Anyone have suggestions on what could have happened?

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive:
https://lists.debian.org/ca+akb6h3d6bz-ot+2_khal3nqrryh1e8f2rqsizd0p_frcg...@mail.gmail.com

Re: connect() with AF_INET6 freezes on some Debian/unstable machine

On 2015-04-07 15:57:48 +0300, Reco wrote:
> On Tue, Apr 07, 2015 at 12:42:18PM +0200, Vincent Lefevre wrote:
> > But on my Debian/unstable machine on the same network, the "telnet"
> > freezes and I need to type Ctrl-C:
> > 
> > ypig:~> strace -o str.out telnet -6 www.vinc17.net 80
> > Trying 2001:4b98:dc0:45:216:3eff:fe9b:eb2f...
> > ^C
> > zsh: interrupt  strace -o str.out telnet -6 www.vinc17.net 80
> > 
> > while I also expected a ENETUNREACH error. The str.out file contains:
[...]

I now get a 3-second timeout (sometimes smaller), with a different
error:

ypig:~> time telnet -6 www.vinc17.net 80
Trying 2001:4b98:dc0:45:216:3eff:fe9b:eb2f...
telnet: Unable to connect to remote host: No route to host
zsh: exit 1 telnet -6 www.vinc17.net 80
telnet -6 www.vinc17.net 80  0.00s user 0.00s system 0% cpu 3.001 total

> What's the result of:
> 
> ip -6 ro get 2001:4b98:dc0:45:216:3eff:fe9b:eb2f

On the machines where I get the "Network is unreachable" error:

unreachable 2001:4b98:dc0:45:216:3eff:fe9b:eb2f from :: dev lo  table unspec  
proto kernel  src fe80::d6ae:52ff:fee5:7247  metric 4294967295  error -101

unreachable 2001:4b98:dc0:45:216:3eff:fe9b:eb2f from :: dev lo  table unspec  
proto kernel  src fe80::224:e8ff:fe97:5f73  metric 4294967295  error -101

On ypig (where I now get a 3-second timeout):

2001:4b98:dc0:45:216:3eff:fe9b:eb2f from :: via fe80::21d:9ff:feb3:1563 dev 
eth0  src 2001:1::21f:29ff:fe04:3efb  metric 0 
cache 

and I also get:

ypig:~> traceroute6 www.vinc17.net
traceroute to ioooi.vinc17.net (2001:4b98:dc0:45:216:3eff:fe9b:eb2f) from 
2001:1::21f:29ff:fe04:3efb, 30 hops max, 24 byte packets
 1  2001:1::21f:29ff:fe04:3efb (2001:1::21f:29ff:fe04:3efb)  2998.97 ms !H  
2999.32 ms !H  2999.7 ms !H

> Is there anything meaningful shown in tcpdump?

Concerning IP6, I get messages like:

15:11:52.982097 IP6 2001:1::9150:1df3:522:6832 > ff02::1:ffb3:1563: ICMP6, 
neighbor solicitation, who has fe80::21d:9ff:feb3:1563, length 32
15:13:00.424531 IP6 2001:1::64fe:c2e2:1be5:f46d > ff02::1:ffb3:1563: ICMP6, 
neighbor solicitation, who has fe80::21d:9ff:feb3:1563, length 32


-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407131914.gc17...@ypig.lip.ens-lyon.fr

Re: connect() with AF_INET6 freezes on some Debian/unstable machine

I also notice that on the machine where I have the freeze/timeout
problems, "ip addr" gives a

  inet6 [...] scope global [...]

line for eth0, while on the other machines, there isn't such a line
(only the usual "inet6 [...] scope link" ones for inet6).

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407132601.ga20...@ypig.lip.ens-lyon.fr

Re: sshfs: problem with rsync

2015-04-07 Thread Pierre Frenkiel


On Tue, 7 Apr 2015, Vincent Lefevre wrote:


On 2015-04-07 12:55:04 +0200, Markus Schönhaber wrote:

Am 07.04.2015 um 12:49 CEST Vincent Lefevre:


On 2015-04-05 21:57:36 +0200, Pierre Frenkiel wrote:

  my Android ssh server uses the port 2223, and I could not find
  how to force rsync to use this port.


The port is a SSH parameter, not a rsync option. So, use .ssh/config
for that.


Or use rsync's --rsh option, like
rsync --rsh "ssh -p 2223" ...


The advantage of using .ssh/config is that it will work for any
SSH-based command, not just rsync. And you don't have to remember
to use the --rsh option.


   thank you guys for your suggestions..., but it seems you didn't
   read completely  my post: I said that the remote ssh server is on an
   Android device.
   "rsync is ssh based" means that it can use the remote ssh server,
   not the local ssh client.

   rsync can actually use ssh as a remote shell, as long as there such a thing
   on the remote side.
   But,as far as I know, there is no such thing on Android.
   the .ssh/config is for the ssh client. For example, if I put:
  match host gs2
  port 2223
   then, "ssh gs2" works, but not rsync.

  Anyway, I repeat that for me, sshfs is the perfect solution.

best regards,
--
Pierre Frenkiel

iptable's books and/or full tutorial

2015-04-07 Thread Pol Hallen


Hey all :-)

someone can advice me about a "best" books about iptables? (books and/or 
comprensive tutorial/howto).


I see "iptables pocket references" but I prefer something of more deep.

Any advice?

thanks!

Pol


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/5523ddc2.6090...@fuckaround.org

Re: sshfs: problem with rsync

On 2015-04-07 15:26:06 +0200, Pierre Frenkiel wrote:
> On Tue, 7 Apr 2015, Vincent Lefevre wrote:
> 
> >On 2015-04-07 12:55:04 +0200, Markus Schönhaber wrote:
> >>Am 07.04.2015 um 12:49 CEST Vincent Lefevre:
> >>
> >>>On 2015-04-05 21:57:36 +0200, Pierre Frenkiel wrote:
>   my Android ssh server uses the port 2223, and I could not find
>   how to force rsync to use this port.
> >>>
> >>>The port is a SSH parameter, not a rsync option. So, use .ssh/config
> >>>for that.
> >>
> >>Or use rsync's --rsh option, like
> >>rsync --rsh "ssh -p 2223" ...
> >
> >The advantage of using .ssh/config is that it will work for any
> >SSH-based command, not just rsync. And you don't have to remember
> >to use the --rsh option.
> 
>thank you guys for your suggestions..., but it seems you didn't
>read completely  my post: I said that the remote ssh server is on an
>Android device.
>"rsync is ssh based" means that it can use the remote ssh server,
>not the local ssh client.

I don't understand what you mean here. One generally uses rsync with
the local ssh client (which connects to the remote server), i.e. the
typical use is with something like:

  rsync --rsh=ssh

or equivalently

  rsync -e ssh

or equivalently just rsync with the RSYNC_RSH=ssh environment variable.

>rsync can actually use ssh as a remote shell, as long as there
>such a thing on the remote side.

You just need a ssh server on the remote side, and of course rsync
on the remote side as well (you possibly need to specify the full
pathname with the --rsync-path option[*]).

[*] When I was using rsync with my Galaxy Note 2, I had to use:
--rsync-path='/data/data/com.spartacusrex.spartacuside/files/system/bin/rsync'
but this depends on what Android application provides rsync.

>But,as far as I know, there is no such thing on Android.
>the .ssh/config is for the ssh client. For example, if I put:
>   match host gs2
>   port 2223
>then, "ssh gs2" works, but not rsync.

Possibly because rsync is not found on the Android side. You need
some application that provides it, and probably the --rsync-path
option because I doubt that the pathname to the rsync executable
will be a "standard" one (from $PATH).

>   Anyway, I repeat that for me, sshfs is the perfect solution.

With sshfs, you don't need a remote rsync because the rsync
synchronization is entirely done on the local side (sshfs does
the additional transfer to the remote side), but unless sshfs
has rsync like optimizations (I doubt), it will be much slower
because it will have to copy the whole files and not just the
changes. I've never compared, though.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407134900.gd17...@ypig.lip.ens-lyon.fr

apt stuck at "Reading database"

2015-04-07 Thread Luis Finotti

Dear all,

I had a power failure while I was away and when I came back the boot
failed, asking to run fsck manually, which I did.

*Many* errors where fixed and I could reboot to what it seems to be a
 normal session, except I cannot "dist-upgrade" or "upgrade" (I'm on
 sid, BTW):

-
[snip]
Extracting templates from packages: 100%
Preconfiguring packages ...
(Reading database ...

-

At this point, it gets stuck. I can see two processes running:


# psf apt
 3988 pts/5S+ 0:23 apt-get dist-upgrade
 4411 pts/14   Ss+0:00 /usr/bin/dpkg --status-fd 43 --unpack
--auto-deconfigure
/var/cache/apt/archives/bsdutils_1%3a2.25.2-6_amd64.deb

---

dpkg.log does not help:


---
# cat /var/log/dpkg.log
2015-04-06 02:55:55 startup archives unpack
2015-04-06 03:01:22 startup archives unpack

---

I could not find anything wrong in other logs.


I've also tried "apt-get clean", to redownload the files, as well as
things like "apt-get -f install/dist-upgrade", "dpkg --configure -a",
moving /var/lib/apt/lists/ and /var/lib/dpkg/status. Nothing has
worked so far.


Any help would be greatly appreciated.

Best to all,

Luis


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAMo809Whz_V=qvvypE2RBef3ZrAQm0f_x=m724pxjcopovo...@mail.gmail.com

Re: connect() with AF_INET6 freezes on some Debian/unstable machine

 Hi.

On Tue, Apr 07, 2015 at 03:19:14PM +0200, Vincent Lefevre wrote:
> On 2015-04-07 15:57:48 +0300, Reco wrote:
> I now get a 3-second timeout (sometimes smaller), with a different
> error:
> 
> ypig:~> time telnet -6 www.vinc17.net 80
> Trying 2001:4b98:dc0:45:216:3eff:fe9b:eb2f...
> telnet: Unable to connect to remote host: No route to host
> zsh: exit 1 telnet -6 www.vinc17.net 80
> telnet -6 www.vinc17.net 80  0.00s user 0.00s system 0% cpu 3.001 total
> 
> > What's the result of:
> > 
> > ip -6 ro get 2001:4b98:dc0:45:216:3eff:fe9b:eb2f
> 
> On the machines where I get the "Network is unreachable" error:
> 
> unreachable 2001:4b98:dc0:45:216:3eff:fe9b:eb2f from :: dev lo  table unspec  
> proto kernel  src fe80::d6ae:52ff:fee5:7247  metric 4294967295  error -101
> 
> unreachable 2001:4b98:dc0:45:216:3eff:fe9b:eb2f from :: dev lo  table unspec  
> proto kernel  src fe80::224:e8ff:fe97:5f73  metric 4294967295  error -101

The way it should be.

> 
> On ypig (where I now get a 3-second timeout):
> 
> 2001:4b98:dc0:45:216:3eff:fe9b:eb2f from :: via fe80::21d:9ff:feb3:1563 dev 
> eth0  src 2001:1::21f:29ff:fe04:3efb  metric 0 
> cache 

So, the kernel tries to route your request via the link-local address. That's 
weird, I'd expect such behavior if your host accepted Routing Advertisement, 
but you say that all you have is 'scope global' (RA-assigned addresses are 
'scope tentative').

Can I see the output of the following, please:

ip -6 a l dev eth0

ip -6 ro l


A quick fix to the problem should be

ip -6 ro a unreachable 2001::/96

but that's a really nasty hack. I'd like to investigate the problem further.

Reco


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407142241.GA4148@x101h

RE: gnome-settings-daemon, dbus about %80 of CPU

2015-04-07 Thread Magdi Mahmoud


Hi All,

I have a problem with rel. 8.0 testing  since installed  sometimes randomly  
getting about %80  of CPU busy and X-Win doesn't responding
gnome-settings-daemon, dbus   daemon utilise  about %70-%80.

Can someone  advise please


Thank you

Mag

Re: A question about deleting a big file structure from a big disk in Jessie: Why does this work? I'm really worried.

2015-04-07 Thread Curt

On 2015-04-06, Bob Proulx  wrote:
>
> HOWEVER!  It is a big however.  I can't find any _new_ eSATA
> enclosures that are not also USB enclosures and do not now include
> active electronics in the connection between the eSATA and the drive.
> That's bad IMNHO.  It introduces cheap electronics in the disk path
> that is unwanted and unneeded.
>

I'm looking at this:

http://www.amazon.co.uk/Akasa-AK-CBSA03-80BK-Flexstor-eSATA-Cable/dp/B005GNP72M

+ caddy (let's say).

Would this suffer from the fragility you're talking about?  


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnmi819f.2bs.cu...@einstein.electron.org

Re: Debian Jessie, gnome-panel no menu.

2015-04-07 Thread nutrinfnon

cutted from 
http://askubuntu.com/questions/149691/how-to-put-gnome-panel-like-icons-in-gnome-3:


 start cut
Whether you are using Unity or you have switched to gnome-shell, the 
launcher icons on your old gnome-panel have now been replaced by icons 
on a panel along the left hand side, known as the "launcher".


...

Unfortunately, it is not possible to add application launcher icons to 
the top panel, nor is it possible to change the position or appearance 
of the launcher panel that appears on the left (or, at least, not much).

 end cut


Is It true? Gnome-shell as Unity does not allow launcher icons on top bar?

Gnome-classic permits?





Thanks


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/5524067b.8090...@gmx.com

Re: Strange kernel error when doing "make modules_install"

2015-04-07 Thread Henrique de Moraes Holschuh

On Mon, Mar 23, 2015, at 06:15, Marko Randjelovic wrote:
> I use Debian 7.8 with vanilla kernel 3.14 and grsecurity and when rebuildgin 
> kernel in order to resolve problem from my previous post, I noticed this in 
> syslog:

>  Mar 23 09:48:24 wrk kernel: [ 2323.105178] Hardware name: MSI 
> MS-7721/A55M-E33 (MS-7721), BIOS V32.0 11/14/2013

You're using an outdated bios.  The latest BIOS for your MB seems to be v32.5:
http://www.msi-bios.com/msi-bios-for-A55M-E33-with-MS-7721-and-version-32.html

> What could be wrong?

I'd update the BIOS and make sure to have the amd64-microcode package (from 
non-free) installed for good measure.  If you're very, very lucky, that will 
fix it.

If not, the most probable cause is bad interaction between the grsecurity 
patches and the base kernel.  Get in touch with the people responsible for the 
grsecurity patch and kernel you're using...  and BTW, I sure hope that by 
vanilla 3.14 you meant 3.14.37.

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique de Moraes Holschuh 

-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/1428429131.1688031.250365141.360da...@webmail.messagingengine.com

Re: A question about deleting a big file structure from a big disk in Jessie: Why does this work? I'm really worried.

2015-04-07 Thread Bob Proulx

Curt wrote:
> Bob Proulx wrote:
> > HOWEVER!  It is a big however.  I can't find any _new_ eSATA
> > enclosures that are not also USB enclosures and do not now include
> > active electronics in the connection between the eSATA and the drive.
> > That's bad IMNHO.  It introduces cheap electronics in the disk path
> > that is unwanted and unneeded.
> 
> I'm looking at this:
> http://www.amazon.co.uk/Akasa-AK-CBSA03-80BK-Flexstor-eSATA-Cable/dp/B005GNP72M
> + caddy (let's say).
> 
> Would this suffer from the fragility you're talking about?  

First I must say that I don't know anything specific about that
particular adapter.  Buyer beware.  However looking at it and reading
the reviews leads me to believe that it is a pure adapter and no
active electronics in it.  Looks good to me!  I would use it.  Should
work nicely.  Looks to be just an eSATA cable.  That is what you want.
(It isn't an enclosure however.)

My only concern would be providing enough power through the USB.  It
looks to use a single USB connector to obtain up to 0.5A.  That is
enough for an SSD.  It is likely enough for a low power laptop 2.5
inch spinning hard drive.  Although usually those use two USBs to get
up to 1A.  It would not be enough for a 3.5 inch desktop spinning hard
drive.  It would be too power hungry.

Just beware of the power drain of the device.  The USB power limit on
a power hungry device could probably be mitigated by using a suitable
power charger USB socket.  Probably using a mobile cell phone charger
USB socket instead of the computer USB would be sufficient on
something marginal.  Or one of the USB power adapters designed for the
Raspberry Pi would supply even a hungry spinning desktop drive.  I
would take a try it and see attitude.  If it all works well then it
works well.  Stop analyzing it and simply use it.  Looks good to me.

Bob

signature.asc
Description: Digital signature

Re: Debian and FQDN lookup

2015-04-07 Thread Joe

On Tue, 7 Apr 2015 13:23:33 +0200
Vincent Lefevre  wrote:

> On 2015-04-04 10:02:22 +0100, Joe wrote:
> > On Fri, 3 Apr 2015 20:39:26 -0500
> > David Wright  wrote:
> > > I think I/we ought to be using .local
> > > http://tools.ietf.org/html/rfc6762
> > > because this won't get onto the Internet.
> > 
> > Really? I've seen an Exchange Server refuse mail from a BT server
> 
> for this connection, the "BT server" is actually the client.
> 
> > because the latter identified itself with .local as tld in the HELO.
> 
> I doubt this has anything to do with BT. MTA's will generally provide
> the FQDN as the HELO name (as described in the corresponding RFC), and
> if the FQDN has been chosen to end with .local then you'll get that in
> the HELO.

My point was that the default is only of use for a machine directly
exposed to the Net, with a hostname resolvable in public DNS. This one
clearly wasn't, and its admin should have overridden the default. And
should have *known* that it was something he/she needed to fix.

> Anyway the HELO should really be ignored in practice as it
> provides no useful information for the recipient.
> 

Possibly so, but it is currently an integral part of the SMTP
transaction, and it is a common requirement of a receiving mail server
that the sender's HELO be resolvable in public DNS. It's one of the
common options offered by exim4, though not the default.

-- 
Joe

-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407192020.3e070...@jresid.jretrading.com

Re: sshfs: problem with rsync

2015-04-07 Thread Pierre Frenkiel


On Tue, 7 Apr 2015, Vincent Lefevre wrote:


I don't understand what you mean here. One generally uses rsync with
the local ssh client (which connects to the remote server), i.e. the
typical use is with something like:

 rsync --rsh=ssh

or equivalently

 rsync -e ssh


   I already tried that, but as I always used rsync on Unix machines, I
   never noticed that it needs to be installed on both local and remote sides.
   Installing an rsync appli on Android is not really straightforward. As
   the available memory is not so big, and as I don't really need it, I'll
   not intall it and continue to use sshfs.


With sshfs, you don't need a remote rsync because the rsync
synchronization is entirely done on the local side (sshfs does
the additional transfer to the remote side), but unless sshfs
has rsync like optimizations (I doubt), it will be much slower
because it will have to copy the whole files and not just the
changes. I've never compared, though.


  I thought that copying to a mounted file system is equivalent to copying
  on a local one, so that rsync worked the same way in both cases.
  I'll check that when I have some time.

best regards,
--
Pierre Frenkiel


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: 
https://lists.debian.org/alpine.deb.2.11.1504072213300.6...@pfr2.frenkiel-hure.net

Re: Authentication breakdown

On Tue, Apr 7, 2015 at 10:02 AM, francis picabia  wrote:
> I'm having a perplexing problem around authentication on my home system.
>
> It has been running 32 bit Debian for years, and up to date with Debian 7.
>
> Nothing new had been installed or configured for months, only
> aptitude update and aptitude safe-upgrade.
>
> This morning, checking email, I found thunderbird could not login to dovecot.
> Restarted dovecot and no difference.
>
> SSH login failed from two different systems.
>
> I checked that the firewall on Linux was off.
> I checked last reports and there was no unusual access.
> Tested with chkrootkit and nothing came up.
> This system is normally protected by unusual ssh port
> plus denyhosts against brute force login.
>
> nsswitch.conf had compat for passwd, group and shadow,
> and I switched it to "files", with no difference.  Nothing
> seemed odd under /etc/pam.d with the common-* files.
>
> Console login as my user or as root failed.
>
> dmesg didn't report anything unusual happened.
>
> Tried a passwd refresh to a new password.  That required
> entering my existing password, and entering the existing
> password worked.  However it wouldn't allow ssh or console
> login with the changed password.  I changed it back
> to the usual password, and again, it accepted the
> old password when prompted.
>
> Eventually I was locked out when the screen save came on
> after leaving it alone for awhile.  I rebooted, and the system still
> has this wacky behaviour.  In addition, the gdm screen
> does not come up - displaying only an hourglass.
> VT consoles do come up after reboot, but again,
> console login as myself or root are failing,
> and ssh login from remote as myself is failing.
>
> I've never seen something like this fail before unless I had
> been messing around with pam configuration files.  I'm currently
> unable to get into the system so I'll be getting a rescue CD
> set up to use later today.
>
> Anyone have suggestions on what could have happened?

Working on this some more...

On a single user login I can login as root, but not once it starts
services.  I've attempted to trim back inits, but so far no difference
once it comes up after single user mode.

In single user mode I can run debsums -cs and it doesn't discover
anything corrupted other than something I know about, like flashplayer.
/etc/inittab has the expected getty services, and lsattr doesn't
show anything odd about /sbin/getty.

I'd like to see something that describes the bare minimum to get
Debian to boot multiuser - looking at rcconf there are several I'm
not sure I can do without.  It is a system that has come from Debian 5
to 6 to 7 so there are possibly left overs.  But again, this is nothing
new and has not impacted anything before.  The system had been
rebooted about a month before.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/ca+akb6ggejy2qsfursle6rpddttjgnyxqdtbjnwlkwgawzu...@mail.gmail.com

Re: Authentication breakdown

2015-04-07 Thread Karl E. Jorgensen

Hi

On Tue, 2015-04-07 at 10:02 -0300, francis picabia wrote:
> I'm having a perplexing problem around authentication on my home system.
> 
> It has been running 32 bit Debian for years, and up to date with Debian 7.
> 
> Nothing new had been installed or configured for months, only
> aptitude update and aptitude safe-upgrade.
> 
> This morning, checking email, I found thunderbird could not login to dovecot.
> Restarted dovecot and no difference.
> 
> SSH login failed from two different systems.
> 
> I checked that the firewall on Linux was off.
> I checked last reports and there was no unusual access.
> Tested with chkrootkit and nothing came up.
> This system is normally protected by unusual ssh port
> plus denyhosts against brute force login.
> 
> nsswitch.conf had compat for passwd, group and shadow,
> and I switched it to "files", with no difference.  Nothing
> seemed odd under /etc/pam.d with the common-* files.
> 
> Console login as my user or as root failed.
> 
> dmesg didn't report anything unusual happened.
> 
> Tried a passwd refresh to a new password.  That required
> entering my existing password, and entering the existing
> password worked.  However it wouldn't allow ssh or console
> login with the changed password.  I changed it back
> to the usual password, and again, it accepted the
> old password when prompted.

If logins via both console and ssh failed (as both yourself and root),
how did you get in?

Once logged in, I would suggest that you study the log files before
trying to change things.  The log files are usually a much faster route
to the underlying cause...

Assuming you have a default(ish) syslog config, the first log file I'd
look at is /var/log/auth.log. Then /var/log/kern.log and the remaining
log files.

> Eventually I was locked out when the screen save came on
> after leaving it alone for awhile.  I rebooted, and the system still
> has this wacky behaviour. 

Ah - a graphical login!

I'd recommend staying with the console (text-only) login whilst
diagnosing this. It's simpler software, and should thus be simpler to
debug.  And it is plausible that your gdm greeter is suffering from the
same underlying cause...


> 
> In addition, the gdm screen
> does not come up - displaying only an hourglass.
> VT consoles do come up after reboot, but again,
> console login as myself or root are failing,
> and ssh login from remote as myself is failing.
> 
> I've never seen something like this fail before unless I had
> been messing around with pam configuration files.  I'm currently
> unable to get into the system so I'll be getting a rescue CD
> set up to use later today.

Well - it is theoretically possible that a disk corruption has done
something to your pam configuration.   Hopefully the log files will
contain clues so you don't have to rely on such wild unsubstantiated
guesses...

Hope this helps
-- 
Karl E. Jorgensen 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/1428443299.4670.13.ca...@jorgensen.org.uk

Re: connect() with AF_INET6 freezes on some Debian/unstable machine

On 2015-04-07 17:22:42 +0300, Reco wrote:
> On Tue, Apr 07, 2015 at 03:19:14PM +0200, Vincent Lefevre wrote:
> > > What's the result of:
> > > 
> > > ip -6 ro get 2001:4b98:dc0:45:216:3eff:fe9b:eb2f
> > 
> > On the machines where I get the "Network is unreachable" error:
> > 
> > unreachable 2001:4b98:dc0:45:216:3eff:fe9b:eb2f from :: dev lo  table 
> > unspec  proto kernel  src fe80::d6ae:52ff:fee5:7247  metric 4294967295  
> > error -101
> > 
> > unreachable 2001:4b98:dc0:45:216:3eff:fe9b:eb2f from :: dev lo  table 
> > unspec  proto kernel  src fe80::224:e8ff:fe97:5f73  metric 4294967295  
> > error -101
> 
> The way it should be.
> 
> > 
> > On ypig (where I now get a 3-second timeout):
> > 
> > 2001:4b98:dc0:45:216:3eff:fe9b:eb2f from :: via fe80::21d:9ff:feb3:1563 dev 
> > eth0  src 2001:1::21f:29ff:fe04:3efb  metric 0 
> > cache 

I now get:

unreachable 2001:4b98:dc0:45:216:3eff:fe9b:eb2f from :: dev lo  table unspec  
proto kernel  src 2001:1::21f:29ff:fe04:3efb  metric 4294967295  error -101

like on the other machines, i.e. the problem has disappeared without
doing anything special.

> So, the kernel tries to route your request via the link-local
> address. That's weird, I'd expect such behavior if your host
> accepted Routing Advertisement, but you say that all you have is
> 'scope global' (RA-assigned addresses are 'scope tentative').

I also have the usual "scope link" one. What I've said is that's the
only machine where I have a "scope global" address (but I can now see
that this isn't the cause of the problem). Another machine on the same
network (but under Debian/stable and with a different config) doesn't
have such a "scope global" address; so, I was wondering whether this
was expected.

> Can I see the output of the following, please:
> 
> ip -6 a l dev eth0

ypig:~> ip -6 a l dev eth0
2: eth0:  mtu 1500 qlen 1000
inet6 2001:1::21f:29ff:fe04:3efb/64 scope global mngtmpaddr dynamic 
   valid_lft 2557017sec preferred_lft 569817sec
inet6 fe80::21f:29ff:fe04:3efb/64 scope link 
   valid_lft forever preferred_lft forever

> ip -6 ro l

ypig:~> ip -6 ro l
2001:1::/64 dev eth0  proto kernel  metric 256  expires 2556778sec
fe80::/64 dev eth0  proto kernel  metric 256 

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407220059.ga22...@xvii.vinc17.org

Re: Authentication breakdown

On Tue, Apr 7, 2015 at 6:30 PM, francis picabia  wrote:
> On Tue, Apr 7, 2015 at 10:02 AM, francis picabia  wrote:
>> I'm having a perplexing problem around authentication on my home system.
>>
>> It has been running 32 bit Debian for years, and up to date with Debian 7.
>>
>> Nothing new had been installed or configured for months, only
>> aptitude update and aptitude safe-upgrade.
>>
>> This morning, checking email, I found thunderbird could not login to dovecot.
>> Restarted dovecot and no difference.
>>
>> SSH login failed from two different systems.
>>
>> I checked that the firewall on Linux was off.
>> I checked last reports and there was no unusual access.
>> Tested with chkrootkit and nothing came up.
>> This system is normally protected by unusual ssh port
>> plus denyhosts against brute force login.
>>
>> nsswitch.conf had compat for passwd, group and shadow,
>> and I switched it to "files", with no difference.  Nothing
>> seemed odd under /etc/pam.d with the common-* files.
>>
>> Console login as my user or as root failed.
>>
>> dmesg didn't report anything unusual happened.
>>
>> Tried a passwd refresh to a new password.  That required
>> entering my existing password, and entering the existing
>> password worked.  However it wouldn't allow ssh or console
>> login with the changed password.  I changed it back
>> to the usual password, and again, it accepted the
>> old password when prompted.
>>
>> Eventually I was locked out when the screen save came on
>> after leaving it alone for awhile.  I rebooted, and the system still
>> has this wacky behaviour.  In addition, the gdm screen
>> does not come up - displaying only an hourglass.
>> VT consoles do come up after reboot, but again,
>> console login as myself or root are failing,
>> and ssh login from remote as myself is failing.
>>
>> I've never seen something like this fail before unless I had
>> been messing around with pam configuration files.  I'm currently
>> unable to get into the system so I'll be getting a rescue CD
>> set up to use later today.
>>
>> Anyone have suggestions on what could have happened?
>
> Working on this some more...
>
> On a single user login I can login as root, but not once it starts
> services.  I've attempted to trim back inits, but so far no difference
> once it comes up after single user mode.
>
> In single user mode I can run debsums -cs and it doesn't discover
> anything corrupted other than something I know about, like flashplayer.
> /etc/inittab has the expected getty services, and lsattr doesn't
> show anything odd about /sbin/getty.
>
> I'd like to see something that describes the bare minimum to get
> Debian to boot multiuser - looking at rcconf there are several I'm
> not sure I can do without.  It is a system that has come from Debian 5
> to 6 to 7 so there are possibly left overs.  But again, this is nothing
> new and has not impacted anything before.  The system had been
> rebooted about a month before.

Problem resolved...

I decided to redo pam-auth-update with --force
That was interesting as it showed stuff not in the common-*
group:

 [*] Cracklib password strength checking
 [*] Unix authentication
 [ ] Winbind NT/Active Directory authentication
 [ ] GNOME Keyring Daemon - Login keyring management
 [ ] ConsoleKit Session Management

I had checks in GNOME and ConsoleKit somehow.  When those were removed
then all authentication worked again.

I don't know what change had recently crept up, but I can remember
I was getting annoyed with a browser pop up about key rings, and
I had done something which I had hoped would eliminate that.  Perhaps
that crippled this PAM plugin.  Any I don't need it, so it is
unchecked and I'm fine now.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/ca+akb6fqhwj3pdzomvj0um0c0hbvxyhybhxag6dpogrbbee...@mail.gmail.com

Re: Authentication breakdown

On Tue, Apr 7, 2015 at 6:48 PM, Karl E. Jorgensen  wrote:
> Hi
>
> On Tue, 2015-04-07 at 10:02 -0300, francis picabia wrote:
>> I'm having a perplexing problem around authentication on my home system.
>>
>> It has been running 32 bit Debian for years, and up to date with Debian 7.
>>
>> Nothing new had been installed or configured for months, only
>> aptitude update and aptitude safe-upgrade.
>>
>> This morning, checking email, I found thunderbird could not login to dovecot.
>> Restarted dovecot and no difference.
>>
>> SSH login failed from two different systems.
>>
>> I checked that the firewall on Linux was off.
>> I checked last reports and there was no unusual access.
>> Tested with chkrootkit and nothing came up.
>> This system is normally protected by unusual ssh port
>> plus denyhosts against brute force login.
>>
>> nsswitch.conf had compat for passwd, group and shadow,
>> and I switched it to "files", with no difference.  Nothing
>> seemed odd under /etc/pam.d with the common-* files.
>>
>> Console login as my user or as root failed.
>>
>> dmesg didn't report anything unusual happened.
>>
>> Tried a passwd refresh to a new password.  That required
>> entering my existing password, and entering the existing
>> password worked.  However it wouldn't allow ssh or console
>> login with the changed password.  I changed it back
>> to the usual password, and again, it accepted the
>> old password when prompted.
>
> If logins via both console and ssh failed (as both yourself and root),
> how did you get in?

Login with Recovery kernel option ('single' in the kernel options) worked.
But once the system was fully up, neither console (VT 1) nor ssh nor any
authenticating service would work.

> Once logged in, I would suggest that you study the log files before
> trying to change things.  The log files are usually a much faster route
> to the underlying cause...
>
> Assuming you have a default(ish) syslog config, the first log file I'd
> look at is /var/log/auth.log. Then /var/log/kern.log and the remaining
> log files.

Yeah, I checked the auth.log and it didn't have details about
how/why it failed.

Anyhow, as I posted in another follow up, pam-auth-update
was able to clear the authentication pieces out I don't need.
That was the solution.

Thanks for the follow up...


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/ca+akb6eiu9297_vunmaxfrtvxznqcgorg7vjq3xtfhiuknh...@mail.gmail.com

Re: sshfs: problem with rsync

On 2015-04-07 22:34:32 +0200, Pierre Frenkiel wrote:
> On Tue, 7 Apr 2015, Vincent Lefevre wrote:
> >With sshfs, you don't need a remote rsync because the rsync
> >synchronization is entirely done on the local side (sshfs does
> >the additional transfer to the remote side), but unless sshfs
> >has rsync like optimizations (I doubt), it will be much slower
> >because it will have to copy the whole files and not just the
> >changes. I've never compared, though.
> 
>   I thought that copying to a mounted file system is equivalent to copying
>   on a local one, so that rsync worked the same way in both cases.
>   I'll check that when I have some time.

Let's take an example. Suppose that, after a rsync, you have a big
file named "bigfile", and you add a character at the beginning of
this file on the local side. When you use rsync, it will detect
that you just added a character so that it will transfer very few
data to the server rsync.

What the server rsync must do here is something like:
  1. Create a new file "bigfile.tmp" (I don't know the exact filename,
 it doesn't matter) containing the contents of the new file.
  2. Remove "bigfile".
  3. Rename "bigfile.tmp" to "bigfile".
The reason is that there's no system call to shift data in a file.
Hence the need for a temporary file[*]. So, you'll have much disk
activity on the remote side. But the point is that between the
client rsync and the server rsync, very few data are transferred.

[*] One could also overwrite "bigfile", with the drawback of possible
data loss in case of failure. But the performance behavior would be
the same anyway.

Now, consider your case where the server rsync is also on the local
side, but the transfer to the remote machine is done via sshfs. So,
the sshfs will see the following operations:
  1. Create a new file "bigfile.tmp" (I don't know the exact filename,
 it doesn't matter) containing the contents of the new file.
  2. Remove "bigfile".
  3. Rename "bigfile.tmp" to "bigfile".
and will propagate these operations to the remote machine. So, unless
there's something I'm missing (specific optimization, but I don't see
how), many data will be transferred due to Step 1.

Note: if you do some test, make sure that "bigfile" has data that
cannot be compressed (or very little).

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407223225.gb22...@xvii.vinc17.org

Re: connect() with AF_INET6 freezes on some Debian/unstable machine

 Hi.

On Wed, Apr 08, 2015 at 12:00:59AM +0200, Vincent Lefevre wrote:
> 
> I now get:
> 
> unreachable 2001:4b98:dc0:45:216:3eff:fe9b:eb2f from :: dev lo  table unspec  
> proto kernel  src 2001:1::21f:29ff:fe04:3efb  metric 4294967295  error -101
> 
> like on the other machines, i.e. the problem has disappeared without
> doing anything special.

No. There was special part (see below).


> > So, the kernel tries to route your request via the link-local
> > address. That's weird, I'd expect such behavior if your host
> > accepted Routing Advertisement, but you say that all you have is
> > 'scope global' (RA-assigned addresses are 'scope tentative').
> 
> I also have the usual "scope link" one. What I've said is that's the
> only machine where I have a "scope global" address (but I can now see
> that this isn't the cause of the problem). Another machine on the same
> network (but under Debian/stable and with a different config) doesn't
> have such a "scope global" address; so, I was wondering whether this
> was expected.

I was wrong above then. You experienced Router Advertisement aka SLAAC
(Stateless address autoconfiguration).


> > Can I see the output of the following, please:
> > 
> > ip -6 a l dev eth0
> 
> ypig:~> ip -6 a l dev eth0
> 2: eth0:  mtu 1500 qlen 1000
> inet6 2001:1::21f:29ff:fe04:3efb/64 scope global mngtmpaddr dynamic 
>valid_lft 2557017sec preferred_lft 569817sec

This. Every time you see this - that means your host received an advice
to configure IPv6 address from an advertised network and to use the
sender as a router. Your host's routing table shows exactly the same.

SLAAC is a good thing if the host that advertises RA is an actual
router. If it is not - you get exactly the behavior you got.

The correct way to deal with this then is to disable accepting RAs on
your host:

echo 1 > /proc/sys/net/ipv6/conf/all/accept_ra

Reco


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407224157.GA32441@x101h

Q: 'df' reports partition is full but 'du' shows not full partition -- how to find where the problem

2015-04-07 Thread Snow Leopard


Hello,

what would be a best approach for the following situation:

You have a web server and monitoring system reports that you short on 
disk space. You login into web server computer and command 'df' indeed 
shows that some partition is almost full.


How would you resolve the issue if 'du' does not confirm that disk is full.
You 'du' all directories in the root of the partition but sum does not 
adds up to match 'Use%' reported by 'df'.


For such situation I would assume that some process holds huge open file 
which was deleted (for example your web server was compromised).


Question: how would you find the process which holds 'deleted' file?

Thanks,
Andy


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/55245e8f.7000...@gmail.com

Re: Webcam device `not found'

2015-04-07 Thread Liam O'Toole

On 2015-03-31, Rodolfo Medina  wrote:
> Hi all.
>
> On my Acer Aspire One netbook, when I launch cheese, it complain that the
> device is `not found'.  Googling around I've found many similar issues but no
> solution.  Please help whoever can.  I have Sid.
>
> Thanks,
>
> Rodolfo
>
>

I have an Aspire One running wheezy and GNOME 3.4.2. The webcam "just
works". What Debian release are you using?

-- 

Liam



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnmi8qa2.cb.liam.p.otoole@dipsy.tubbynet

Re: connect() with AF_INET6 freezes on some Debian/unstable machine

On 2015-04-08 01:41:58 +0300, Reco wrote:
> On Wed, Apr 08, 2015 at 12:00:59AM +0200, Vincent Lefevre wrote:
> > > Can I see the output of the following, please:
> > > 
> > > ip -6 a l dev eth0
> > 
> > ypig:~> ip -6 a l dev eth0
> > 2: eth0:  mtu 1500 qlen 1000
> > inet6 2001:1::21f:29ff:fe04:3efb/64 scope global mngtmpaddr dynamic 
> >valid_lft 2557017sec preferred_lft 569817sec
> 
> This. Every time you see this - that means your host received an advice
> to configure IPv6 address from an advertised network and to use the
> sender as a router. Your host's routing table shows exactly the same.
> 
> SLAAC is a good thing if the host that advertises RA is an actual
> router. If it is not - you get exactly the behavior you got.

Thanks for the information. Do you mean that random machines on
the network can send fake advertising? Otherwise how is "the host
that advertises RA" determined?

If SLAAC can be a bad thing on arbitrary networks, why is it enabled
by default? (IMHO, the default should be the safest.)

> The correct way to deal with this then is to disable accepting RAs on
> your host:
> 
> echo 1 > /proc/sys/net/ipv6/conf/all/accept_ra

I did *not* do that yet, but I can see:

ypig:~> cat /proc/sys/net/ipv6/conf/all/accept_ra
1

i.e. it is already 1 (ditto for /proc/sys/net/ipv6/conf/eth0/accept_ra).
Or do you mean 0?

But on the other machine that doesn't have this "scope global",
/proc/sys/net/ipv6/conf/*/accept_ra is also 1, so that I'm confused.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150407233544.ga26...@xvii.vinc17.org

Re: Q: 'df' reports partition is full but 'du' shows not full partition -- how to find where the problem

2015-04-07 Thread ~Stack~

On 04/07/2015 05:47 PM, Snow Leopard wrote:
> Hello,
> 
> what would be a best approach for the following situation:
> 
> You have a web server and monitoring system reports that you short on
> disk space. You login into web server computer and command 'df' indeed
> shows that some partition is almost full.
> 
> How would you resolve the issue if 'du' does not confirm that disk is full.
> You 'du' all directories in the root of the partition but sum does not
> adds up to match 'Use%' reported by 'df'.
> 
> For such situation I would assume that some process holds huge open file
> which was deleted (for example your web server was compromised).
> 
> Question: how would you find the process which holds 'deleted' file?

Greetings,

I normally start looking for those deleted files by doing this:

$ lsof | grep -i deleted

Pass the partition into lsof to narrow the scope.

Hope that helps!
~Stack~





signature.asc
Description: OpenPGP digital signature

Re: free cloud

2015-04-07 Thread Joris Bolsens

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256



On 04/02/2015 03:58 PM, Bernd Naumann wrote:

> But the downside on all these 'cheep vps provider' I'm aware off,
> is that they don't offer any useful amount of storage space. So
> maybe find a friend or too, and invest in a monthly rent of a 
> bare-metal-server ;)
> 

honestly some of the cheaper dedi's aren't even that expensive
anymore. For instance, soyoustart (OVH) has a dedi with 32gb ram & a
xeon E3 w/ 2x2tb SATA for only $56/month.
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=FeK5
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/55247009.40...@gmail.com

Re: Q: 'df' reports partition is full but 'du' shows not full partition -- how to find where the problem

2015-04-07 Thread Bob Proulx

Snow Leopard wrote:
> You have a web server and monitoring system reports that you short on disk
> space. You login into web server computer and command 'df' indeed shows that
> some partition is almost full.
> 
> How would you resolve the issue if 'du' does not confirm that disk is full.
> You 'du' all directories in the root of the partition but sum does not adds
> up to match 'Use%' reported by 'df'.

I read your case and it reminds me immediately of many questions that
often get asked on the coreutils mailing list.  This is one of the
FAQs there.  Review this entry and the next one after it and verify
that neither case applies to your case.

http://www.gnu.org/software/coreutils/faq/coreutils-faq.html#df-and-du-report-different-information

> For such situation I would assume that some process holds huge open file
> which was deleted (for example your web server was compromised).

Hmm...  Possible.  But I think less likely.  If your web server is
running as www-data then it is non-priviledged and the attack will be
limited in what it can do.  Removing a file it has permissions to
remove is one but I think it unlikely this to be large enough to be a
problem.  I am often wrong but I think this is unlikely.

The most often problem with deleted large files still holding disk
space are log files.  A process writes a log file.  The admin has
configured it to be in a custom location and has forgotten to set up a
lotrotate rule for it.  The log file grows and grows.  The local admin
then sees this and thinks, aha, there is the disk space, and uses 'rm'
to remove the file not realizing that the program is still writing the
file and will continue to do so.  In hindsight the admin should
truncate the file first to force the disk space to be freed
immediately.

  # > /var/log/largelogfile

By truncating the large file it doesn't matter if it is open and being
written to by other processes.  The open(2) with O_TRUNC will zero it
immediately.

And of course to keep this from happening again something like
logrotate or savelog needs to be set up for routine rotation of the
log file.

> Question: how would you find the process which holds 'deleted' file?

As Stack suggested lsof works well.

Bob

signature.asc
Description: Digital signature

Re: Webcam device `not found'

2015-04-07 Thread Bret Busby

On 08/04/2015, Liam O'Toole  wrote:
> On 2015-03-31, Rodolfo Medina  wrote:
>> Hi all.
>>
>> On my Acer Aspire One netbook, when I launch cheese, it complain that the
>> device is `not found'.  Googling around I've found many similar issues but
>> no
>> solution.  Please help whoever can.  I have Sid.
>>
>> Thanks,
>>
>> Rodolfo
>>
>>
>
> I have an Aspire One running wheezy and GNOME 3.4.2. The webcam "just
> works". What Debian release are you using?
>
> --
>
> Liam
>
>
>

Last sentence of original post - "I have Sid."

-- 
Bret Busby
Armadale
West Australia
..

"So once you do know what the question actually is,
 you'll know what the answer means."
- Deep Thought,
 Chapter 28 of Book 1 of
 "The Hitchhiker's Guide to the Galaxy:
 A Trilogy In Four Parts",
 written by Douglas Adams,
 published by Pan Books, 1992




-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/cacx6j8naqaatb1_kiouvwuhtdras1d1vcqjnf6ala5fewpt...@mail.gmail.com

Re: connect() with AF_INET6 freezes on some Debian/unstable machine