Changing date format in /usr/bin/last

2004-11-15 Thread Ralph Aichinger
Hello! I had the problem today that I wanted to get some information out of my wtmp file about system usage, and I needed logins categorized by year. In Debian, "last" gives output like ralphpts/1monk Mon Nov 15 14:32 still logged in ralphpts/0monk

Suggested way to ssh into obsolete devices (with old ssh crypto)?

2021-07-06 Thread Ralph Aichinger
Hi, everybody, as a bullseye user I am seeing messages like | Unable to negotiate with 10.0.17.52 port 22: no matching | key exchange method found. Their offer: diffie-hellman-group1-sha1 with increasing frequency, especially when trying to ssh into proprietary, obsolete stuff. Above comes from

The state of IPSec in Debian

2019-10-24 Thread Ralph Aichinger
Hi! I am not a completely unexperienced user of Debian, but sometimes certain subsystems and choices still puzzle me. Right now this is IPSec. There used to be several implementations, but am I right that the only sensible one right now is Strongswan? https://wiki.debian.org/IPsec goes on about

Re: The state of IPSec in Debian

2019-10-24 Thread Ralph Aichinger
On Thu, Oct 24, 2019 at 05:32:51PM +0200, deb...@jherrero.org wrote: > El jue, 24-10-2019 a las 16:27 +0200, Ralph Aichinger escribió: > > Or am I completely wrong and should I use some other implementation? > > from > > https://www.debian.org/releases/stable/a

Re: The state of IPSec in Debian

2019-10-24 Thread Ralph Aichinger
On Thu, Oct 24, 2019 at 02:01:25PM -0400, Dan Ritter wrote: > StrongSwan used to be the best supported, but LibreSwan is now. > Things change. Thanks! This is the kind of information I was hoping for. > If you need solid VPN support and control all the endpoints, > Wireguard may be an even bette

Doubt about the release-fitness of a package (gfax)

2014-11-09 Thread Ralph Aichinger
I just tried to install gfax (in sid), and it crashed on me just as described in bug 651160. This has been reported in 2011, is tagged "help", and seems to go nowhere. What is the right way to suggest that this package is not ready for release (I do think if I am not the only one experiencing th

Bareos, dbconfig-common, PostgreSQL and PAM: no module specific data

2015-01-03 Thread Ralph Aichinger
(Sorry if this is a duplicate message, I tried to post this an hour or so ago, but saw nothing on the list.) I want to install bareos, the bacula derived backup software with a PostgreSQL/dbconfig setup on a sid/amd64 system. I am stuck at the following error: An error occurred while installing t

Status of ISC Stork (monitoring daemon to ISC Kea) in Debian

2024-01-06 Thread Ralph Aichinger
? Liebe Grüße, Ralph Aichinger

nftables firewall question: matching udp in ipv6

2024-01-12 Thread Ralph Aichinger
Hello! I am currently fighting with the following problem: I've got a system that has 3 relevant interfaces: ppp0, en0 and en2, for external, internal and dmz respectively. The dmz is IPv6 only, a homelab testbed more or less. I've got the follwing rules in /etc/nftables.conf for ipv6 (i am abr

Re: nftables firewall question: matching udp in ipv6

2024-01-12 Thread Ralph Aichinger
On Fri, Jan 12, 2024 at 03:52:46PM +, Tom Furie wrote: > Where is the DNS server the dmz host is resolving against? In your dmz, > your internal network, on the firewall machine, outside? You may have > other input/output rules that are interfering, but since you've abridged > your ruleset we h

Re: nftables firewall question: matching udp in ipv6

2024-01-12 Thread Ralph Aichinger
On Fri, Jan 12, 2024 at 03:52:46PM +, Tom Furie wrote: > other input/output rules that are interfering, but since you've abridged > your ruleset we have no way of knowing. Sorry, wanted to include the full rulest an forgot. I've still have left off the "table ip nat" and "table ip filter" chai

Re: nftables firewall question: matching udp in ipv6

2024-01-12 Thread Ralph Aichinger
On Fri, Jan 12, 2024 at 05:26:57PM +, Michael Kjörling wrote: > My suggestion would be to insert a "udp log" rule. (Pretty sure you > only need "udp", not "meta l4proto udp".) Thanks, I will try that. Yes "meta l4proto udp" might be cargo cult configuration ;) > That will give you a fireh

Re: nftables firewall question: matching udp in ipv6

2024-01-12 Thread Ralph Aichinger
On Fri, Jan 12, 2024 at 07:35:14PM +0100, Michel Verdier wrote: > meta l4proto udp log level info prefix "udp" accept Thanks for that, and thanks to Michael Kjörling, your replies really helped. I found log lines similar to: 2024-01-12T19:51:32.999346+01:00 pi kernel: [3401524.305759] ralphfi

nftables: Clamping mss size to lower mtu (on PPPoE connection does not work)

2024-01-18 Thread Ralph Aichinger
Hello everybody, related question to what I asked a few days ago: Since I touched my /etc/nftables.conf rules a few days ago to enable IPv6 I've got IPv6 working completely (thanks again for your help with suggesting logging packets), but I seemingly broke mss clamping for IPv4 in doing so (or may

Re: rsync --delete vs rsync --delete-after

2024-01-18 Thread Ralph Aichinger
Hello fellow Debian users, On Thu, 2024-01-18 at 12:18 +0100, hw wrote: > Always use an UPS. Here I have a somewhat contrarian view, I hope not to offend too much: For countries with stable electricity supplies (like Austria where I live) having a small UPS might actually lead to more problems

Re: nftables: Clamping mss size to lower mtu (on PPPoE connection does not work)

2024-01-18 Thread Ralph Aichinger
On Thu, 2024-01-18 at 12:51 +, Tixy wrote: > > I have the same options in the forward chain except that I haven't > qualified them with an interface name. Didn't occur to me that I > would > need to do that as there are only two networks my LAN and 'the > internet'. You probably don't need to

Re: rsync --delete vs rsync --delete-after

2024-01-18 Thread Ralph Aichinger
On Thu, 2024-01-18 at 13:09 +, Michael Kjörling wrote: > > Definitely agree that a solid backup regimen (including regular > automated backups; at least one off-site copy _at least_ of critical, > hot data; and planning for the contingency that you need to restore > that backup onto a brand ne

Re: rsync --delete vs rsync --delete-after

2024-01-27 Thread Ralph Aichinger
On Fri, 2024-01-26 at 16:11 +0100, hw wrote: > I've never had issues with any UPS due to self tests.  The batteries > need to be replaced when they are worn out.  How often that is > required depends on the UPS and the conditions it is working in, > usually every 3--5 years. It was with some small

IPv6, ip token, NetworkManager and accept_ra

2024-02-02 Thread Ralph Aichinger
Hi fellow Debian users! In my quest to advance the IPv6 preparedness of my home LAN I want to find a solution to use IP tokens on all my clients. IP tokens (keeping the host part of the IPv6 address static while getting the subnet part by SLAAC) seem very elegant to me, because it avoids DHCPv6 co

Re: IPv6, ip token, NetworkManager and accept_ra

2024-02-02 Thread Ralph Aichinger
On Fri, 2024-02-02 at 14:28 +0100, Marco Moock wrote: > In the past the default was to use EUI-64 and have the MAC address in > the address. If that is suitable for you (privacy!), use that. I basically don't care about the privacy aspect for now (it is more of a lab setup, and my IPv4 address is

Re: IPv6, ip token, NetworkManager and accept_ra

2024-02-02 Thread Ralph Aichinger
On Fri, 2024-02-02 at 15:31 +0100, Marco Moock wrote: > It should be if you enter "save" in the nmcli. Thanks, I did not realize this was possible. I probably will use nmcli more often in the future. Ralph

Re: what keyboard do you use?

2024-02-02 Thread Ralph Aichinger
On Fri, 2024-02-02 at 20:25 -0500, Lee wrote: > I figure there's a high percentage of keyboard jockeys here so .. > which keyboard do you like and why? I like the flat style similar to what is in many notebooks. Current favourites are the Apple keyboards (expensive though, for what they are), the

Re: install Kernel and GRUB in chroot.

2024-02-05 Thread Ralph Aichinger
On Mon, 2024-02-05 at 17:40 +0700, Dmitry wrote: > > But secure boot is usually turned off. It is a standard advice during > Linux > installation. > Will probably be increasingly common though, I've got a Microsoft Surface Laptop that works fine with Debian, but if you switch off secure boot, it

Re: How can we change the keyboard layout? (was: what keyboard do you use?)

2024-02-05 Thread Ralph Aichinger
On Mon, 2024-02-05 at 21:06 +0100, hw wrote: > And what the hell is 'Strg' supposed to mean? "Strg" is short for "Steuerung", just the literal translation of "control". /ralph

Re: Copy from Firefox and paste into Terminal with Vim

2024-02-06 Thread Ralph Aichinger
On Mon, 2024-02-05 at 15:14 -0800, David Christensen wrote: > I am unable to determine if the problem is Firefox, Vim, or something > else. > > Comments or suggestions? As others have written, vim has changed copy+paste defaults some time ago. Some even call this changing defaults "they broke cop

Re: Copy from Firefox and paste into Terminal with Vim

2024-02-06 Thread Ralph Aichinger
On Tue, 2024-02-06 at 21:31 +0700, Max Nikulin wrote: > is active in terminal, it is possible to hold [Shift] to get mouse > events handled by terminal instead of Vim or another application > running in terminal. I think pressing shift does not work here in e.g. gnome-terminal, because there past

Re: Things I don't touch with a 3.048m barge pole: USB storage (Was Re: Unidentified subject!)

2024-02-08 Thread Ralph Aichinger
On Thu, 2024-02-08 at 15:36 +, Andy Smith wrote: > USB storage is for phones and cameras etc, not for serious > computing. Many people will disagree with that statement and say > they use it all the time and it is fine.  I am clearly in the latter camp. This mail is delivered via a Raspberry P

Using a Python script as a login shell

2024-02-16 Thread Ralph Aichinger
Hello fellow Debianites! I want do do a custom CLI for a project, and I am quite happy with the Python cmd module. Aside from having a practically un-googleable name it is very nice, and does a lot with very little code. So far, so good. But: If I write a Python script with this module, and expos

Re: Package Identification Assistance

2024-02-16 Thread Ralph Aichinger
On Thu, 2024-02-15 at 20:33 -0500, Neal Heinecke wrote: > I need to identify the package responsible for creating the software > sources window. There is a minor bug/typo where the first tab reads > "Ubuntu Software" This could be synaptic? https://help.ubuntu.com/community/SynapticHowto Does th

Inclusive terminology (instead of master/slave) for network bonding/LACP

2024-02-22 Thread Ralph Aichinger
Hello! I know this is a loaded topic. I really don't want to discuss the political aspects of the "why", but just want to know the facts, i.e. how far this has been progressed in Debian. Is there anything planned to get "master/slave" terminology out of network bonding/LACP in Debian (or Linux ke

Re: Inclusive terminology (instead of master/slave) for network bonding/LACP

2024-02-23 Thread Ralph Aichinger
On Fri, 2024-02-23 at 11:07 +0100, Marco Moock wrote: > > Debian is mostly a collection of many packages that are packed in the > repo.Such changes are normally done upstream. I found e.g. this on upstream work on that topic: https://lore.kernel.org/netdev/e515b840-c6f1-bc07-9369-c95e35257...@so

Re: Inclusive terminology (instead of master/slave) for network bonding/LACP

2024-02-23 Thread Ralph Aichinger
On Fri, 2024-02-23 at 18:13 +0100, Mariusz Gronczewski wrote: > "Do what I say, discussion is not allowed because I don't want to > make a sensible arguments!" This certainly is not my position. I have no problem arguing this question, and I've got an opinion on it. I just think this mailing l

Re: Inclusive terminology (instead of master/slave) for network bonding/LACP

2024-02-23 Thread Ralph Aichinger
On Fri, 2024-02-23 at 20:10 +, Andy Smith wrote: > One more time: a successor to the Ethernet bonding driver already > exists and has for more than 10 years. That is the other thing I wanted to ask here, I have configured a LACP link aggregating interface more or less similar to what is descri

Commandline client to lookup MAC vendor

2024-03-07 Thread Ralph Aichinger
Hi! Several packages in Debian can somehow (either by embedding it or querying it from some common database) display the MAC Vendor information of network adapters (derived from hardware addresses). One example is nmap, that displays the device vendor when scanning. Is there some commandline to

Re: Commandline client to lookup MAC vendor

2024-03-07 Thread Ralph Aichinger
On Thu, 2024-03-07 at 09:52 +, Thomas Pircher wrote: > On 2024-03-07 09:37, Jonathan Dowland wrote: > >     $ grep -i ^9009df /usr/share/nmap/nmap-mac-prefixes > >     9009DF Intel Corporate > > Alternatively, the ieee-data package also contains the OUI database: > > $ grep -i ^9009df /u

Re: very poor nfs performance

2024-03-07 Thread Ralph Aichinger
On Thu, 2024-03-07 at 10:13 +0100, Stefan K wrote: > Hello guys, > > I hope someone can help me with my problem. > Our NFS performance ist very bad, like ~20MB/s, mountoption looks > like that: Are both sides agreeing on MTU (using Jumbo frames or not)? Have you tested the network with iperf (or

Re: very poor nfs performance

2024-03-09 Thread Ralph Aichinger
On Sat, 2024-03-09 at 13:54 +0100, hw wrote: > > NFS can be hard on network card drivers > IPv6 may be faster than IPv4 > the network cable might suck > the switch might suck or block stuff As iperf and other network protocols were confirmed to be fast by the OP it is very unlikely that it is a s

Re: finger causing kernel seg fault

2024-03-15 Thread Ralph Aichinger
On Fri, 2024-03-15 at 09:12 +, Michael Grant wrote: > I use tmux on my server.  tmux creates multiple pttys.  When I run > finger, I see an error like this: > > $ finger > finger: /dev//pts/6: No such file or directory > > and in the log, I see: > > /var/log/syslog:Mar 15 05:06:18 strange ke

Re: making Debian secure by default

2024-03-29 Thread Ralph Aichinger
On Thu, 2024-03-28 at 14:12 -0400, Lee wrote: > > Yes, it does.  I was hoping for something simple but it's becoming > clear to me that there's no simple "make Debian secure for dummies" > checklist to follow. Making "Debian secure for dummies" and having a multi-user system at the same time doe

Re: CUPS vulnerability (CVE2024-47176 and related ones)

2024-09-27 Thread Ralph Aichinger
On Fri, Sep 27, 2024 at 01:16:07PM +, Andy Smith wrote: > I put "CVE-2024-47176" in to that and the first result was: > > https://security-tracker.debian.org/tracker/CVE-2024-47176 Thanks, Andy. Not quite the information i had hoped for (that stuff not being relevant for Debian ;), but oh

CUPS vulnerability (CVE2024-47176 and related ones)

2024-09-27 Thread Ralph Aichinger
Hi, everybody. Is there some place tracking CVE 2024-47176 and related ones in Debian? https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/ https://www.theregister.com/2024/09/26/cups_linux_rce_disclosed/ /ralph

Preseed install, Selection of Language/Country/Keyboard and Desktop Environment

2024-12-04 Thread Ralph Aichinger
Hi fellow Debian Users I am currently trying to build an USB stick that does a scripted install of Debian. This works very well, and much much easier with UEFI, where you can just edit the preseed.cfg file instead of rebuilding an ISO every time you make a change. But: I am stuck with getting rid

Re: Preseed install, Selection of Language/Country/Keyboard and Desktop Environment

2024-12-04 Thread Ralph Aichinger
On Wed, Dec 04, 2024 at 04:03:38PM +0100, john doe wrote: > > d-i debian-installer/locale string de_AT > > The "local" is less "flexible". > Look at [1], the first few lines > > > Similar with the menu where the desktop environment is selected. > > I want LXDE and "SSH Server". I always drop back

Re: Preseed install, Selection of Language/Country/Keyboard and Desktop Environment

2024-12-04 Thread Ralph Aichinger
Hello Michael, thanks for your reply On Wed, Dec 04, 2024 at 02:38:29PM +, Michael Kjörling wrote: > Compare https://michael.kjorling.se/debian-12-bookworm-preseed/ under > the B.4.1 heading about half way down the page. Actually right after my mail to this list I found your site by googling,

Re: Preseed install, Selection of Language/Country/Keyboard and Desktop Environment

2024-12-04 Thread Ralph Aichinger
On Wed, Dec 04, 2024 at 03:00:17PM +0100, poc...@homemail.com wrote: > I do an install to a hard drive and when I get it configured to what I > want i copy to an USB drive. > > Then any time I need to do a install I simply partition a drive, > create the filesystems mount the drive and the USB d

Re: Best terminology to distiguish groups such as "debian-user" from webmail whatevers

2025-02-26 Thread Ralph Aichinger
On Wed, Feb 26, 2025 at 09:59:01AM -0600, Richard Owlett wrote: > I'm communicating with a state level peer-to-peer support group. > The national organization has a peer-to-peer "mailing list" built around > webmail as a complement/alternative to their sponsored social media groups. > I find the we

Re: laptop options

2025-03-24 Thread Ralph Aichinger
On Sun, Mar 23, 2025 at 08:37:58AM +0100, lina wrote: > Which laptop option is friendly with Debian, > The purpose is related to work, not game. > > Mainly for computation, R and some bioinformatic analysis, > > Ideally at least > 16 cores, decent memory. At work we use both Tuxedo laptops, as w