Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Marc Haber
On Thu, Mar 02, 2006 at 11:09:28PM +0100, Florian Weimer wrote: > * Marc Haber: > > How would you implement the automatism to trigger the update on the > > incoming e-mail? > > I typically use an Exim .forward file which invokes a special script > using "pipe". The script creates a file, and a cr

Re: Password authentication with LDAP and SSH

2006-03-02 Thread Marcos S. Trazzini
Historiadores acreditam que em Quarta 01 Fevereiro 2006 04:07, Jonas Liljenfeldt escreveu: > Hello all, > > I run Debian Sarge and I have a problem with my SSH server (in > combination with password authentication and LDAP). It doesn't work > well with password authentication when I try to login a

Re: Password authentication with LDAP and SSH

2006-03-02 Thread Nicolas François
hello, There is an open bug on login regarding LDAP (http://bugs.debian.org/277767). It may (maybe not) be related. In any case, it would be nice if somebody could have a look at it, or at least indicate if it can be reproduced or not on your environment. The Shadow maintainers lack resources to

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Steve Kemp
On Thu, Mar 02, 2006 at 10:36:16PM +0100, Marc Haber wrote: > How would you implement the automatism to trigger the update on the > incoming e-mail? procmail, matching on new mails to the debian-security-announce mailing list .. Steve -- Debian GNU/Linux System Administration http://www.debi

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Horst Pflugstaedt
On Thu, Mar 02, 2006 at 10:36:16PM +0100, Marc Haber wrote: > On Thu, Mar 02, 2006 at 08:06:48PM +0100, Florian Weimer wrote: > > * Geoff Crompton: > > > I'm also wondering if security.debian.org has enough resources for every > > > single debian box on the planet checking it every X minutes. > >

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Florian Weimer
* Marc Haber: > On Thu, Mar 02, 2006 at 08:06:48PM +0100, Florian Weimer wrote: >> * Geoff Crompton: >> > I'm also wondering if security.debian.org has enough resources for every >> > single debian box on the planet checking it every X minutes. >> >> You can use the DSA posting as a trigger. > >

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Marc Haber
On Thu, Mar 02, 2006 at 08:06:48PM +0100, Florian Weimer wrote: > * Geoff Crompton: > > I'm also wondering if security.debian.org has enough resources for every > > single debian box on the planet checking it every X minutes. > > You can use the DSA posting as a trigger. Usually, cron-apt has alr

Re: avahi-daemon

2006-03-02 Thread Loïc Minier
Hi, On Thu, Feb 23, 2006, Javier Fernández-Sanguino Peña wrote: > IMHO the problem here is having a music program (as rhythmbox) Recommends: > avahi-daemon, when IMHO it should be Suggests: . The functionality > provided by avahi-daemon (a network service for sharing music) is not > somet

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread martin f krafft
also sprach Michael Stone <[EMAIL PROTECTED]> [2006.03.02.2032 +0100]: > The explanation is far simpler--debian *does* have mirrors of > security.debian.org. At the moment I see three hosts in the rotation. Yeah, push, not pull mirrors. -- Please do not send copies of list mail to me; I read t

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread martin f krafft
also sprach Florian Weimer <[EMAIL PROTECTED]> [2006.03.02.2006 +0100]: > By default, package authenticity is not validated in sarge and > earlier releases. From a security POV, it's better to download > those updates from a limited set of well-maintained servers. It > reduces the attack surface s

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Michael Stone
On Thu, Mar 02, 2006 at 08:06:07PM +0100, Florian Weimer wrote: * martin f. krafft: Why then do you think security.d.o is not mirrored by Debian? Our mirror network is not actually well-known for its integrity (think The explanation is far simpler--debian *does* have mirrors of security.deb

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Florian Weimer
* Geoff Crompton: > I'm also wondering if security.debian.org has enough resources for every > single debian box on the planet checking it every X minutes. You can use the DSA posting as a trigger. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact

Re: first A record of security.debian.org extremely slow

2006-03-02 Thread Florian Weimer
* martin f. krafft: >> One day more or less doesn't really matter. So far, Debian security >> updates predated widespread (semi-)automated exploits by weeks. > > Why then do you think security.d.o is not mirrored by Debian? Our mirror network is not actually well-known for its integrity (think p

Re: Password authentication with LDAP and SSH

2006-03-02 Thread Martijn Marsman
Same here, can do anythin, except ssh :/ tijn aflorent wrote: hello i've got exactly the same problem if no objectClass : shadowAccount in ldap database, i get Could not get shadow information for user if i add objectClass : shadowAccount, i get Failed password for user, and getent shad