Re: Bug#437842: lists.debian.org: request creation of a debian-mediation mailing list

2008-09-01 Thread Lucas Nussbaum
Context: the creation of a debian-mediation@ mailing list is requested in #437842. I support the proposal. Such a mailing list could be helpful when dealing with complex conflicts with both technical and social aspects, like some conflicts which resulted in the expulsion of DDs, or the dpkg trigge

Re: people.debian.org to move to ravel

2008-09-01 Thread Peter Palfrader
On Mon, 01 Sep 2008, Lionel Elie Mamane wrote: > > It is. Limiting an attacker's ability to easily jump from one > > compromised box to another is something we really want to have. Not > > tomorrow, but eventually. > > I'm not sure the no-passwords policy helps much by itself; I get the > impre

Re: iceweasel: Kerberos authentication does not work

2008-09-01 Thread Lars-Johan Liman
[SOLVED! (see below) PLEASE CLOSE THIS BUG ID!] [EMAIL PROTECTED]: > I'm not sure what's wrong in that bug, but Kerberos authentication in > Iceweasel (3.0.1-1) is working fine for me. I'd notice immediately if it > stopped working. > I did notice that I had to restart Iceweasel after a dist-upg

Re: transfering files between *.debian.org hosts (was: people.debian.org to move to ravel)

2008-09-01 Thread Wouter Verhelst
On Sun, Aug 31, 2008 at 11:19:45AM +0200, Peter Palfrader wrote: > On Sat, 30 Aug 2008, Steve Langasek wrote: > > Well, the underlying premise here is, of course, that certain routinely > > useful capabilities need to be taken out of the hands of the users because > > they won't use them responsibl

Re: transfering files between *.debian.org hosts (was: people.debian.org to move to ravel)

2008-09-01 Thread Steve Langasek
On Mon, Sep 01, 2008 at 02:50:29PM +0200, Wouter Verhelst wrote: > By setting the "GSSAPICleanupCredentials" option in sshd_config, the > credentials cache is destroyed upon logout (this can also be done > through the session component of libpam_krb5.so). ... but pam_krb5.so shouldn't be used for

Re: transfering files between *.debian.org hosts (was: people.debian.org to move to ravel)

2008-09-01 Thread Charles Plessy
Le Mon, Sep 01, 2008 at 02:50:29PM +0200, Wouter Verhelst a écrit : > > This education could be done in two steps: first, create a policy and > link to it from debian-devel-announce; second, make this required > reading for the NM procedure (similar to the 'DMUP' and 'SC/DFSG' > questions that NMs

Re: iceweasel: Kerberos authentication does not work

2008-09-01 Thread Russ Allbery
Lars-Johan Liman <[EMAIL PROTECTED]> writes: > It turns out that there has been a microscopic change in the > interpretation of the > >network.negotiate-auth.trusted-uris > > key between Iceweasel 2.x and 3.x. In my version 2.0 config I had set > >network.negotiate-auth.trusted-uris htt

Re: transfering files between *.debian.org hosts

2008-09-01 Thread Russ Allbery
Steve Langasek <[EMAIL PROTECTED]> writes: > On Mon, Sep 01, 2008 at 02:50:29PM +0200, Wouter Verhelst wrote: >> By setting the "GSSAPICleanupCredentials" option in sshd_config, the >> credentials cache is destroyed upon logout (this can also be done >> through the session component of libpam_krb5

Re: transfering files between *.debian.org hosts

2008-09-01 Thread Tollef Fog Heen
]] Peter Palfrader | - install sendfile/saft on all machines so you can do | sendfile foo.tar.gz [EMAIL PROTECTED] | | Unfortunately sendfile doesn't use crypto, so who knows what happens | to the stuff you send. And it's yet another network facing server - I | don't know if anybody e