blog/archive/2014/03/index.html

   1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
   2           "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
   3 <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr">
   4   <head>
   5     <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
   6     <title>Petter Reinholdtsen: entries from March 2014</title>
   7     <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css" />
   8     <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/vim.css" />
   9     <link rel="alternate" title="RSS Feed" href="03.rss" type="application/rss+xml" />
  10   </head>
  11   <body>
  12     <!-- XML FEED -->
  13     <div class="title">
  14  <h1>
  15      <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
  16
  17  </h1>
  18
  19 </div>
  20
  21
  22     <h3>Entries from March 2014.</h3>
  23
  24     <div class="entry">
  25       <div class="title">
  26         <a href="http://people.skolelinux.org/pere/blog/Dokumentaren_om_Datalagringsdirektivet_sendes_endelig_p__NRK.html">Dokumentaren om Datalagringsdirektivet sendes endelig på NRK</a>
  27       </div>
  28       <div class="date">
  29         26th March 2014
  30       </div>
  31       <div class="body">
  32         <p><a href="http://www.nuug.no/">Foreningen NUUG</a> melder i natt at
  33 NRK nå har bestemt seg for
  34 <a href="http://www.nuug.no/news/NRK_viser_filmen_om_Datalagringsdirektivet_f_rste_gang_2014_03_31.shtml">når
  35 den norske dokumentarfilmen om datalagringsdirektivet skal
  36 sendes</a> (se <a href="http://www.imdb.com/title/tt2832844/">IMDB</a>
  37 for detaljer om filmen) . Første visning blir på NRK2 mandag
  38 2014-03-31 kl. 19:50, og deretter visninger onsdag 2014-04-02
  39 kl. 12:30, fredag 2014-04-04 kl. 19:40 og søndag 2014-04-06 kl. 15:10.
  40 Jeg har sett dokumentaren, og jeg anbefaler enhver å se den selv.  Som
  41 oppvarming mens vi venter anbefaler jeg Bjørn Stærks kronikk i
  42 Aftenposten fra i går,
  43 <a href="http://www.aftenposten.no/meninger/kronikker/Autoritar-gjokunge-7514915.html">Autoritær
  44 gjøkunge</a>, der han gir en grei skisse av hvor ille det står til med
  45 retten til privatliv og beskyttelsen av demokrati i Norge og resten
  46 verden, og helt riktig slår fast at det er vi i databransjen som
  47 sitter med nøkkelen til å gjøre noe med dette.  Jeg har involvert meg
  48 i prosjektene <a href="http://www.dugnadsnett.no/">dugnadsnett.no</a>
  49 og <a href="https://wiki.debian.org/FreedomBox">FreedomBox</a> for å
  50 forsøke å gjøre litt selv for å bedre situasjonen, men det er mye
  51 hardt arbeid fra mange flere enn meg som gjenstår før vi kan sies å ha
  52 gjenopprettet balansen.</p>
  53
  54 <p>Jeg regner med at nettutgaven dukker opp på
  55 <a href="http://tv.nrk.no/program/koid75005313/tema-dine-digitale-spor-datalagringsdirektivet">NRKs
  56 side om filmen om datalagringsdirektivet</a> om frem dager.  Hold et
  57 øye med siden, og tips venner og slekt om at de også bør se den.</p>
  58
  59       </div>
  60       <div class="tags">
  61
  62
  63         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance</a>.
  64
  65
  66       </div>
  67     </div>
  68     <div class="padding"></div>
  69
  70     <div class="entry">
  71       <div class="title">
  72         <a href="http://people.skolelinux.org/pere/blog/Public_Trusted_Timestamping_services_for_everyone.html">Public Trusted Timestamping services for everyone</a>
  73       </div>
  74       <div class="date">
  75         25th March 2014
  76       </div>
  77       <div class="body">
  78         <p>Did you ever need to store logs or other files in a way that would
  79 allow it to be used as evidence in court, and needed a way to
  80 demonstrate without reasonable doubt that the file had not been
  81 changed since it was created?  Or, did you ever need to document that
  82 a given document was received at some point in time, like some
  83 archived document or the answer to an exam, and not changed after it
  84 was received?  The problem in these settings is to remove the need to
  85 trust yourself and your computers, while still being able to prove
  86 that a file is the same as it was at some given time in the past.</p>
  87
  88 <p>A solution to these problems is to have a trusted third party
  89 "stamp" the document and verify that at some given time the document
  90 looked a given way.  Such
  91 <a href="https://en.wikipedia.org/wiki/Notarius">notarius</a> service
  92 have been around for thousands of years, and its digital equivalent is
  93 called a
  94 <a href="http://en.wikipedia.org/wiki/Trusted_timestamping">trusted
  95 timestamping service</a>.  <a href="http://www.ietf.org/">The Internet
  96 Engineering Task Force</a> standardised how such service could work a
  97 few years ago as <a href="http://tools.ietf.org/html/rfc3161">RFC
  98 3161</a>.  The mechanism is simple.  Create a hash of the file in
  99 question, send it to a trusted third party which add a time stamp to
 100 the hash and sign the result with its private key, and send back the
 101 signed hash + timestamp.  Both email, FTP and HTTP can be used to
 102 request such signature, depending on what is provided by the service
 103 used. Anyone with the document and the signature can then verify that
 104 the document matches the signature by creating their own hash and
 105 checking the signature using the trusted third party public key.
 106 There are several commercial services around providing such
 107 timestamping.  A quick search for
 108 "<a href="https://duckduckgo.com/?q=rfc+3161+service">rfc 3161
 109 service</a>" pointed me to at least
 110 <a href="https://www.digistamp.com/technical/how-a-digital-time-stamp-works/">DigiStamp</a>,
 111 <a href="http://www.quovadisglobal.co.uk/CertificateServices/SigningServices/TimeStamp.aspx">Quo
 112 Vadis</a>,
 113 <a href="https://www.globalsign.com/timestamp-service/">Global Sign</a>
 114 and <a href="http://www.globaltrustfinder.com/TSADefault.aspx">Global
 115 Trust Finder</a>.  The system work as long as the private key of the
 116 trusted third party is not compromised.</p>
 117
 118 <p>But as far as I can tell, there are very few public trusted
 119 timestamp services available for everyone.  I've been looking for one
 120 for a while now. But yesterday I found one over at
 121 <a href="https://www.pki.dfn.de/zeitstempeldienst/">Deutches
 122 Forschungsnetz</a> mentioned in
 123 <a href="http://www.d-mueller.de/blog/dealing-with-trusted-timestamps-in-php-rfc-3161/">a
 124 blog by David Müller</a>.  I then found
 125 <a href="http://www.rz.uni-greifswald.de/support/dfn-pki-zertifikate/zeitstempeldienst.html">a
 126 good recipe on how to use the service</a> over at the University of
 127 Greifswald.</p>
 128
 129 <p><a href="http://www.openssl.org/">The OpenSSL library</a> contain
 130 both server and tools to use and set up your own signing service.  See
 131 the ts(1SSL), tsget(1SSL) manual pages for more details.  The
 132 following shell script demonstrate how to extract a signed timestamp
 133 for any file on the disk in a Debian environment:</p>
 134
 135 <p><blockquote><pre>
 136 #!/bin/sh
 137 set -e
 138 url="http://zeitstempel.dfn.de"
 139 caurl="https://pki.pca.dfn.de/global-services-ca/pub/cacert/chain.txt"
 140 reqfile=$(mktemp -t tmp.XXXXXXXXXX.tsq)
 141 resfile=$(mktemp -t tmp.XXXXXXXXXX.tsr)
 142 cafile=chain.txt
 143 if [ ! -f $cafile ] ; then
 144     wget -O $cafile "$caurl"
 145 fi
 146 openssl ts -query -data "$1" -cert | tee "$reqfile" \
 147     | /usr/lib/ssl/misc/tsget -h "$url" -o "$resfile"
 148 openssl ts -reply -in "$resfile" -text 1>&2
 149 openssl ts -verify -data "$1" -in "$resfile" -CAfile "$cafile" 1>&2
 150 base64 < "$resfile"
 151 rm "$reqfile" "$resfile"
 152 </pre></blockquote></p>
 153
 154 <p>The argument to the script is the file to timestamp, and the output
 155 is a base64 encoded version of the signature to STDOUT and details
 156 about the signature to STDERR.  Note that due to
 157 <a href="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742553">a bug
 158 in the tsget script</a>, you might need to modify the included script
 159 and remove the last line.  Or just write your own HTTP uploader using
 160 curl. :) Now you too can prove and verify that files have not been
 161 changed.</p>
 162
 163 <p>But the Internet need more public trusted timestamp services.
 164 Perhaps something for <a href="http://www.uninett.no/">Uninett</a> or
 165 my work place the <a href="http://www.uio.no/">University of Oslo</a>
 166 to set up?</p>
 167
 168       </div>
 169       <div class="tags">
 170
 171
 172         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>.
 173
 174
 175       </div>
 176     </div>
 177     <div class="padding"></div>
 178
 179     <div class="entry">
 180       <div class="title">
 181         <a href="http://people.skolelinux.org/pere/blog/Video_DVD_reader_library___python_dvdvideo___nice_free_software.html">Video DVD reader library / python-dvdvideo - nice free software</a>
 182       </div>
 183       <div class="date">
 184         21st March 2014
 185       </div>
 186       <div class="body">
 187         <p>Keeping your DVD collection safe from scratches and curious
 188 children fingers while still having it available when you want to see a
 189 movie is not straight forward.  My preferred method at the moment is
 190 to store a full copy of the ISO on a hard drive, and use VLC, Popcorn
 191 Hour or other useful players to view the resulting file.  This way the
 192 subtitles and bonus material are still available and using the ISO is
 193 just like inserting the original DVD record in the DVD player.</p>
 194
 195 <p>Earlier I used dd for taking security copies, but it do not handle
 196 DVDs giving read errors (which are quite a few of them).  I've also
 197 tried using
 198 <a href="http://people.skolelinux.org/pere/blog/Ripping_problematic_DVDs_using_dvdbackup_and_genisoimage.html">dvdbackup
 199 and genisoimage</a>, but these days I use the marvellous python library
 200 and program
 201 <a href="http://bblank.thinkmo.de/blog/new-software-python-dvdvideo">python-dvdvideo</a>
 202 written by Bastian Blank.  It is
 203 <a href="http://packages.qa.debian.org/p/python-dvdvideo.html">in Debian
 204 already</a> and the binary package name is python3-dvdvideo. Instead
 205 of trying to read every block from the DVD, it parses the file
 206 structure and figure out which block on the DVD is actually in used,
 207 and only read those blocks from the DVD.  This work surprisingly well,
 208 and I have been able to almost backup my entire DVD collection using
 209 this method.</p> So far, python-dvdvideo have failed on between 10 and
 210 20 DVDs, which is a small fraction of my collection.  The most common
 211 problem is
 212 <a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720831">DVDs
 213 using UTF-16 instead of UTF-8 characters</a>, which according to
 214 Bastian is against the DVD specification (and seem to cause some
 215 players to fail too).  A rarer problem is what seem to be inconsistent
 216 DVD structures, as the python library
 217 <a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=723079">claim
 218 there is a overlap between objects</a>.  An equally rare problem claim
 219 <a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741878">some
 220 value is out of range</a>.  No idea what is going on there.  I wish I
 221 knew enough about the DVD format to fix these, to ensure my movie
 222 collection will stay with me in the future.</p>
 223
 224 <p>So, if you need to keep your DVDs safe, back them up using
 225 python-dvdvideo. :)</p>
 226
 227       </div>
 228       <div class="tags">
 229
 230
 231         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia</a>, <a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett</a>, <a href="http://people.skolelinux.org/pere/blog/tags/video">video</a>.
 232
 233
 234       </div>
 235     </div>
 236     <div class="padding"></div>
 237
 238     <div class="entry">
 239       <div class="title">
 240         <a href="http://people.skolelinux.org/pere/blog/Norsk_utgave_av_Alaveteli___WhatDoTheyKnow_p__trappene.html">Norsk utgave av Alaveteli / WhatDoTheyKnow på trappene</a>
 241       </div>
 242       <div class="date">
 243         16th March 2014
 244       </div>
 245       <div class="body">
 246         <p>Det offentlige Norge har mye kunnskap og informasjon.  Men hvordan
 247 kan en få tilgang til den på en enkel måte?  Takket være et lite
 248 knippe lover og tilhørende forskrifter, blant annet
 249 <a href="http://lovdata.no/dokument/NL/lov/2006-05-19-16">offentlighetsloven</a>,
 250 <a href="http://lovdata.no/dokument/NL/lov/2003-05-09-31">miljøinformasjonsloven</a>
 251 og
 252 <a href="http://lovdata.no/dokument/NL/lov/1967-02-10/">forvaltningsloven</a>
 253 har en rett til å spørre det offentlige og få svar.  Men det finnes
 254 intet offentlig arkiv over hva andre har spurt om, og dermed risikerer en
 255 å måtte forstyrre myndighetene gang på gang for å få tak i samme
 256 informasjonen på nytt.  <a href="http://www.mysociety.org/">Britiske
 257 mySociety</a> har laget tjenesten
 258 <a href="http://www.whatdotheyknow.com/">WhatDoTheyKnow</a> som gjør
 259 noe med dette.  I Storbritannia blir WhatdoTheyKnow brukt i
 260 <a href="http://www.mysociety.org/2011/07/01/whatdotheyknows-share-of-central-government-foi-requests-q2-2011/">ca
 261 15% av alle innsynsforespørsler mot sentraladministrasjonen</a>.
 262 Prosjektet heter <a href="http://www.alaveteli.org/">Alaveteli</A>, og
 263 er takk i bruk en rekke steder etter at løsningen ble generalisert og
 264 gjort mulig å oversette.  Den hjelper borgerne med å be om innsyn,
 265 rådgir ved purringer og klager og lar alle se hvilke henvendelser som
 266 er sendt til det offentlige og hvilke svar som er kommet inn, i et
 267 søkpart arkiv.  Her i Norge holder vi i foreningen NUUG på å få opp en
 268 norsk utgave av Alaveteli, og her trenger vi din hjelp med
 269 oversettelsen.</p>
 270
 271 <p>Så langt er 76 % av Alaveteli oversatt til norsk bokmål, men vi
 272 skulle gjerne vært oppe i 100 % før lansering.  Oversettelsen gjøres
 273 på <a href="https://www.transifex.com/projects/p/alaveteli/">Transifex,
 274 der enhver som registrerer seg</a> og ber om tilgang til
 275 bokmålsoversettelsen får bidra.  Vi har satt opp en test av tjenesten
 276 (som ikke sender epost til det offentlige, kun til oss som holder på å
 277 sette opp tjenesten) på maskinen
 278 <a href="http://alaveteli-dev.nuug.no/">alaveteli-dev.nuug.no</a>, der
 279 en kan se hvordan de oversatte meldingen blir seende ut på nettsiden.
 280 Når tjenesten lanseres vil den hete
 281 <a href="https://www.mimesbrønn.no/">Mimes brønn</a>, etter
 282 visdomskilden som Odin måtte gi øyet sitt for å få drikke i.  Den
 283 nettsiden er er ennå ikke klar til bruk.</p>
 284
 285 <p>Hvis noen vil oversette til nynorsk også, så skal vi finne ut
 286 hvordan vi lager en flerspråklig tjeneste.  Men i første omgang er
 287 fokus på bokmålsoversettelsen, der vi selv har nok peiling til å ha
 288 fått oversatt 76%, men trenger hjelp for å komme helt i mål. :)</p>
 289
 290       </div>
 291       <div class="tags">
 292
 293
 294         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>, <a href="http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn</a>.
 295
 296
 297       </div>
 298     </div>
 299     <div class="padding"></div>
 300
 301     <div class="entry">
 302       <div class="title">
 303         <a href="http://people.skolelinux.org/pere/blog/Freedombox_on_Dreamplug__Raspberry_Pi_and_virtual_x86_machine.html">Freedombox on Dreamplug, Raspberry Pi and virtual x86 machine</a>
 304       </div>
 305       <div class="date">
 306         14th March 2014
 307       </div>
 308       <div class="body">
 309         <p>The <a href="https://wiki.debian.org/FreedomBox">Freedombox
 310 project</a> is working on providing the software and hardware for
 311 making it easy for non-technical people to host their data and
 312 communication at home, and being able to communicate with their
 313 friends and family encrypted and away from prying eyes.  It has been
 314 going on for a while, and is slowly progressing towards a new test
 315 release (0.2).</p>
 316
 317 <p>And what day could be better than the Pi day to announce that the
 318 new version will provide "hard drive" / SD card / USB stick images for
 319 Dreamplug, Raspberry Pi and VirtualBox (or any other virtualization
 320 system), and can also be installed using a Debian installer preseed
 321 file.  The Debian based Freedombox is now based on Debian Jessie,
 322 where most of the needed packages used are already present.  Only one,
 323 the freedombox-setup package, is missing.  To try to build your own
 324 boot image to test the current status, fetch the freedom-maker scripts
 325 and build using
 326 <a href="http://packages.qa.debian.org/vmdebootstrap">vmdebootstrap</a>
 327 with a user with sudo access to become root:
 328
 329 <pre>
 330 git clone http://anonscm.debian.org/git/freedombox/freedom-maker.git \
 331   freedom-maker
 332 sudo apt-get install git vmdebootstrap mercurial python-docutils \
 333   mktorrent extlinux virtualbox qemu-user-static binfmt-support \
 334   u-boot-tools
 335 make -C freedom-maker dreamplug-image raspberry-image virtualbox-image
 336 </pre>
 337
 338 <p>Root access is needed to run debootstrap and mount loopback
 339 devices.  See the README for more details on the build. If you do not
 340 want all three images, trim the make line.  But note that thanks to <a
 341 href="https://bugs.debian.org/741407">a race condition in
 342 vmdebootstrap</a>, the build might fail without the patch to the
 343 kpartx call.</p>
 344
 345 <p>If you instead want to install using a Debian CD and the preseed
 346 method, boot a Debian Wheezy ISO and use this boot argument to load
 347 the preseed values:</p>
 348
 349 <pre>
 350 url=<a href="http://www.reinholdtsen.name/freedombox/preseed-jessie.dat">http://www.reinholdtsen.name/freedombox/preseed-jessie.dat</a>
 351 </pre>
 352
 353 <p>But note that due to <a href="https://bugs.debian.org/740673">a
 354 recently introduced bug in apt in Jessie</a>, the installer will
 355 currently hang while setting up APT sources.  Killing the
 356 '<tt>apt-cdrom ident</tt>' process when it hang a few times during the
 357 installation will get the installation going.  This affect all
 358 installations in Jessie, and I expect it will be fixed soon.</p>
 359
 360 Give it a go and let us know how it goes on the mailing list, and help
 361 us get the new release published. :) Please join us on
 362 <a href="irc://irc.debian.org:6667/%23freedombox">IRC (#freedombox on
 363 irc.debian.org)</a> and
 364 <a href="http://lists.alioth.debian.org/mailman/listinfo/freedombox-discuss">the
 365 mailing list</a> if you want to help make this vision come true.</p>
 366
 367       </div>
 368       <div class="tags">
 369
 370
 371         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web">web</a>.
 372
 373
 374       </div>
 375     </div>
 376     <div class="padding"></div>
 377
 378     <div class="entry">
 379       <div class="title">
 380         <a href="http://people.skolelinux.org/pere/blog/How_to_add_extra_storage_servers_in_Debian_Edu___Skolelinux.html">How to add extra storage servers in Debian Edu / Skolelinux</a>
 381       </div>
 382       <div class="date">
 383         12th March 2014
 384       </div>
 385       <div class="body">
 386         <p>On larger sites, it is useful to use a dedicated storage server for
 387 storing user home directories and data.  The design for handling this
 388 in <a href="http://www.skolelinux.org/">Debian Edu / Skolelinux</a>, is
 389 to update the automount rules in LDAP and let the automount daemon on
 390 the clients take care of the rest.  I was reminded about the need to
 391 document this better when one of the customers of
 392 <a href="http://www.slxdrift.no/">Skolelinux Drift AS</a>, where I am
 393 on the board of directors, asked about how to do this.  The steps to
 394 get this working are the following:</p>
 395
 396 <p><ol>
 397
 398 <li>Add new storage server in DNS.  I use nas-server.intern as the
 399 example host here.</li>
 400
 401 <li>Add automoun LDAP information about this server in LDAP, to allow
 402 all clients to automatically mount it on reqeust.</li>
 403
 404 <li>Add the relevant entries in tjener.intern:/etc/fstab, because
 405 tjener.intern do not use automount to avoid mounting loops.</li>
 406
 407 </ol></p>
 408
 409 <p>DNS entries are added in GOsa², and not described here.  Follow the
 410 <a href="https://wiki.debian.org/DebianEdu/Documentation/Wheezy/GettingStarted">instructions
 411 in the manual</a> (Machine Management with GOsa² in section Getting
 412 started).</p>
 413
 414 <p>Ensure that the NFS export points on the server are exported to the
 415 relevant subnets or machines:</p>
 416
 417 <p><blockquote><pre>
 418 root@tjener:~# showmount -e nas-server
 419 Export list for nas-server:
 420 /storage         10.0.0.0/8
 421 root@tjener:~#
 422 </pre></blockquote></p>
 423
 424 <p>Here everything on the backbone network is granted access to the
 425 /storage export.  With NFSv3 it is slightly better to limit it to
 426 netgroup membership or single IP addresses to have some limits on the
 427 NFS access.</p>
 428
 429 <p>The next step is to update LDAP.  This can not be done using GOsa²,
 430 because it lack a module for automount.  Instead, use ldapvi and add
 431 the required LDAP objects using an editor.</p>
 432
 433 <p><blockquote><pre>
 434 ldapvi --ldap-conf -ZD '(cn=admin)' -b ou=automount,dc=skole,dc=skolelinux,dc=no
 435 </pre></blockquote></p>
 436
 437 <p>When the editor show up, add the following LDAP objects at the
 438 bottom of the document.  The "/&" part in the last LDAP object is a
 439 wild card matching everything the nas-server exports, removing the
 440 need to list individual mount points in LDAP.</p>
 441
 442 <p><blockquote><pre>
 443 add cn=nas-server,ou=auto.skole,ou=automount,dc=skole,dc=skolelinux,dc=no
 444 objectClass: automount
 445 cn: nas-server
 446 automountInformation: -fstype=autofs --timeout=60 ldap:ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
 447
 448 add ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
 449 objectClass: top
 450 objectClass: automountMap
 451 ou: auto.nas-server
 452
 453 add cn=/,ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
 454 objectClass: automount
 455 cn: /
 456 automountInformation: -fstype=nfs,tcp,rsize=32768,wsize=32768,rw,intr,hard,nodev,nosuid,noatime nas-server.intern:/&
 457 </pre></blockquote></p>
 458
 459 <p>The last step to remember is to mount the relevant mount points in
 460 tjener.intern by adding them to /etc/fstab, creating the mount
 461 directories using mkdir and running "mount -a" to mount them.</p>
 462
 463 <p>When this is done, your users should be able to access the files on
 464 the storage server directly by just visiting the
 465 /tjener/nas-server/storage/ directory using any application on any
 466 workstation, LTSP client or LTSP server.</p>
 467
 468       </div>
 469       <div class="tags">
 470
 471
 472         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>.
 473
 474
 475       </div>
 476     </div>
 477     <div class="padding"></div>
 478
 479     <div class="entry">
 480       <div class="title">
 481         <a href="http://people.skolelinux.org/pere/blog/Hvordan_b_r_RFC_822_formattert_epost_lagres_i_en_NOARK5_database_.html">Hvordan bør RFC 822-formattert epost lagres i en NOARK5-database?</a>
 482       </div>
 483       <div class="date">
 484          7th March 2014
 485       </div>
 486       <div class="body">
 487         <p>For noen uker siden ble NXCs fri programvarelisenserte
 488 NOARK5-løsning
 489 <a href="http://www.nuug.no/aktiviteter/20140211-noark/">presentert hos
 490 NUUG</a> (video
 491 <a href="https://www.youtube.com/watch?v=JCb_dNS3MHQ">på youtube
 492 foreløbig</a>), og det fikk meg til å titte litt mer på NOARK5,
 493 standarden for arkivhåndtering i det offentlige Norge.  Jeg lurer på
 494 om denne kjernen kan være nyttig i et par av mine prosjekter, og for ett
 495 av dem er det mest aktuelt å lagre epost.  Jeg klarte ikke finne noen
 496 anbefaling om hvordan RFC 822-formattert epost (aka Internett-epost)
 497 burde lagres i NOARK5, selv om jeg vet at noen arkiver tar
 498 PDF-utskrift av eposten med sitt epostprogram og så arkiverer PDF-en
 499 (eller enda værre, tar papirutskrift og lagrer bildet av eposten som
 500 PDF i arkivet).</p>
 501
 502 <p>Det er ikke så mange formater som er akseptert av riksarkivet til
 503 langtidsoppbevaring av offentlige arkiver, og PDF og XML er de mest
 504 aktuelle i så måte.  Det slo meg at det måtte da finnes en eller annen
 505 egnet XML-representasjon og at det kanskje var enighet om hvilken som
 506 burde brukes, så jeg tok mot til meg og spurte
 507 <a href="http://samdok.com/">SAMDOK</a>, en gruppe tilknyttet
 508 arkivverket som ser ut til å jobbe med NOARK-samhandling, om de hadde
 509 noen anbefalinger:
 510
 511 <p><blockquote>
 512 <p>Hei.</p>
 513
 514 <p>Usikker på om dette er riktig forum å ta opp mitt spørsmål, men jeg
 515 lurer på om det er definert en anbefaling om hvordan RFC
 516 822-formatterte epost (aka vanlig Internet-epost) bør lages håndteres
 517 i NOARK5, slik at en bevarer all informasjon i eposten
 518 (f.eks. Received-linjer).  Finnes det en anbefalt XML-mapping ala den
 519 som beskrives på
 520 &lt;URL: <a href="https://www.informit.com/articles/article.aspx?p=32074">https://www.informit.com/articles/article.aspx?p=32074</a> &gt;?  Mitt
 521 mål er at det skal være mulig å lagre eposten i en NOARK5-kjerne og
 522 kunne få ut en identisk formattert kopi av opprinnelig epost ved
 523 behov.</p>
 524 </blockquote></p>
 525
 526 <p>Postmottaker hos SAMDOK mente spørsmålet heller burde stilles
 527 direkte til riksarkivet, og jeg fikk i dag svar derfra formulert av
 528 seniorrådgiver Geir Ivar Tungesvik:</p>
 529
 530 <p><blockquote>
 531 <p>Riksarkivet har ingen anbefalinger når det gjelder konvertering fra
 532 e-post til XML.  Det står arkivskaper fritt å eventuelt definere/bruke
 533 eget format.  Inklusive da - som det spørres om - et format der det er
 534 mulig å re-etablere e-post format ut fra XML-en.  XML (e-post)
 535 dokumenter må være referert i arkivstrukturen, og det må vedlegges et
 536 gyldig XML skjema (.xsd) for XML-filene. Arkivskaper står altså fritt
 537 til å gjøre hva de vil, bare det dokumenteres og det kan dannes et
 538 utrekk ved avlevering til depot.</p>
 539
 540 <p>De obligatoriske kravene i Noark 5 standarden må altså oppfylles -
 541 etter dialog med Riksarkivet i forbindelse med godkjenning. For
 542 offentlige arkiv er det særlig viktig med filene loependeJournal.xml
 543 og offentligJournal.xml. Private arkiv som vil forholde seg til Noark
 544 5 standarden er selvsagt frie til å bruke det som er relevant for dem
 545 av obligatoriske krav.</p>
 546 </blockquote></p>
 547
 548 <p>Det ser dermed ut for meg som om det er et lite behov for å
 549 standardisere XML-lagring av RFC-822-formatterte meldinger.  Noen som
 550 vet om god spesifikasjon i så måte?  I tillegg til den omtalt over,
 551 har jeg kommet over flere aktuelle beskrivelser (søk på "rfc 822
 552 xml", så finner du aktuelle alternativer).</p>
 553
 554 <ul>
 555
 556 <li><a href="http://www.openhealth.org/xmtp/">XML MIME Transformation
 557 protocol (XMTP)</a> fra OpenHealth, sist oppdatert 2001.</li>
 558
 559 <li><a href="https://tools.ietf.org/html/draft-klyne-message-rfc822-xml-03">An
 560 XML format for mail and other messages</a> utkast fra IETF datert
 561 2001.</li>
 562
 563 <li><a href="http://www.informit.com/articles/article.aspx?p=32074">xMail:
 564 E-mail as XML</a> en artikkel fra 2003 som beskriver python-modulen
 565 rfc822 som gir ut XML-representasjon av en RFC 822-formattert epost.</li>
 566
 567 </ul>
 568
 569 <p>Finnes det andre og bedre spesifikasjoner for slik lagring?  Send
 570 meg en epost hvis du har innspill.</p>
 571
 572       </div>
 573       <div class="tags">
 574
 575
 576         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn</a>.
 577
 578
 579       </div>
 580     </div>
 581     <div class="padding"></div>
 582
 583     <p style="text-align: right;"><a href="03.rss"><img src="http://people.skolelinux.org/pere/blog/xml.gif" alt="RSS Feed" width="36" height="14" /></a></p>
 584     <div id="sidebar">
 585
 586
 587
 588 <h2>Archive</h2>
 589 <ul>
 590
 591 <li>2014
 592 <ul>
 593
 594 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/01/">January (2)</a></li>
 595
 596 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/02/">February (3)</a></li>
 597
 598 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/03/">March (7)</a></li>
 599
 600 </ul></li>
 601
 602 <li>2013
 603 <ul>
 604
 605 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/01/">January (11)</a></li>
 606
 607 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/02/">February (9)</a></li>
 608
 609 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/03/">March (9)</a></li>
 610
 611 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/04/">April (6)</a></li>
 612
 613 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/05/">May (9)</a></li>
 614
 615 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/06/">June (10)</a></li>
 616
 617 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/07/">July (7)</a></li>
 618
 619 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/08/">August (3)</a></li>
 620
 621 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/09/">September (5)</a></li>
 622
 623 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/10/">October (7)</a></li>
 624
 625 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/11/">November (9)</a></li>
 626
 627 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/12/">December (3)</a></li>
 628
 629 </ul></li>
 630
 631 <li>2012
 632 <ul>
 633
 634 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/01/">January (7)</a></li>
 635
 636 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/02/">February (10)</a></li>
 637
 638 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/03/">March (17)</a></li>
 639
 640 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/04/">April (12)</a></li>
 641
 642 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/05/">May (12)</a></li>
 643
 644 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/06/">June (20)</a></li>
 645
 646 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/07/">July (17)</a></li>
 647
 648 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/08/">August (6)</a></li>
 649
 650 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/09/">September (9)</a></li>
 651
 652 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/10/">October (17)</a></li>
 653
 654 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/11/">November (10)</a></li>
 655
 656 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/12/">December (7)</a></li>
 657
 658 </ul></li>
 659
 660 <li>2011
 661 <ul>
 662
 663 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/01/">January (16)</a></li>
 664
 665 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/02/">February (6)</a></li>
 666
 667 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/03/">March (6)</a></li>
 668
 669 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/04/">April (7)</a></li>
 670
 671 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/05/">May (3)</a></li>
 672
 673 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/06/">June (2)</a></li>
 674
 675 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/07/">July (7)</a></li>
 676
 677 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/08/">August (6)</a></li>
 678
 679 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/09/">September (4)</a></li>
 680
 681 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/10/">October (2)</a></li>
 682
 683 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/11/">November (3)</a></li>
 684
 685 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/12/">December (1)</a></li>
 686
 687 </ul></li>
 688
 689 <li>2010
 690 <ul>
 691
 692 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
 693
 694 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
 695
 696 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
 697
 698 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
 699
 700 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
 701
 702 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
 703
 704 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (12)</a></li>
 705
 706 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/08/">August (13)</a></li>
 707
 708 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/09/">September (7)</a></li>
 709
 710 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/10/">October (9)</a></li>
 711
 712 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/11/">November (13)</a></li>
 713
 714 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/12/">December (12)</a></li>
 715
 716 </ul></li>
 717
 718 <li>2009
 719 <ul>
 720
 721 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
 722
 723 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
 724
 725 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
 726
 727 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
 728
 729 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
 730
 731 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
 732
 733 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
 734
 735 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
 736
 737 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
 738
 739 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
 740
 741 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
 742
 743 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
 744
 745 </ul></li>
 746
 747 <li>2008
 748 <ul>
 749
 750 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
 751
 752 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
 753
 754 </ul></li>
 755
 756 </ul>
 757
 758
 759
 760 <h2>Tags</h2>
 761 <ul>
 762
 763  <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (13)</a></li>
 764
 765  <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
 766
 767  <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
 768
 769  <li><a href="http://people.skolelinux.org/pere/blog/tags/bankid">bankid (4)</a></li>
 770
 771  <li><a href="http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (8)</a></li>
 772
 773  <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (14)</a></li>
 774
 775  <li><a href="http://people.skolelinux.org/pere/blog/tags/bsa">bsa (2)</a></li>
 776
 777  <li><a href="http://people.skolelinux.org/pere/blog/tags/chrpath">chrpath (2)</a></li>
 778
 779  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (95)</a></li>
 780
 781  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (145)</a></li>
 782
 783  <li><a href="http://people.skolelinux.org/pere/blog/tags/digistan">digistan (10)</a></li>
 784
 785  <li><a href="http://people.skolelinux.org/pere/blog/tags/docbook">docbook (10)</a></li>
 786
 787  <li><a href="http://people.skolelinux.org/pere/blog/tags/drivstoffpriser">drivstoffpriser (4)</a></li>
 788
 789  <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (240)</a></li>
 790
 791  <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (21)</a></li>
 792
 793  <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (12)</a></li>
 794
 795  <li><a href="http://people.skolelinux.org/pere/blog/tags/freeculture">freeculture (12)</a></li>
 796
 797  <li><a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox (7)</a></li>
 798
 799  <li><a href="http://people.skolelinux.org/pere/blog/tags/frikanalen">frikanalen (11)</a></li>
 800
 801  <li><a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju (39)</a></li>
 802
 803  <li><a href="http://people.skolelinux.org/pere/blog/tags/isenkram">isenkram (7)</a></li>
 804
 805  <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (18)</a></li>
 806
 807  <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (9)</a></li>
 808
 809  <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (7)</a></li>
 810
 811  <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
 812
 813  <li><a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network (8)</a></li>
 814
 815  <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (26)</a></li>
 816
 817  <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (243)</a></li>
 818
 819  <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (162)</a></li>
 820
 821  <li><a href="http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn (11)</a></li>
 822
 823  <li><a href="http://people.skolelinux.org/pere/blog/tags/open311">open311 (2)</a></li>
 824
 825  <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (46)</a></li>
 826
 827  <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (70)</a></li>
 828
 829  <li><a href="http://people.skolelinux.org/pere/blog/tags/raid">raid (1)</a></li>
 830
 831  <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (11)</a></li>
 832
 833  <li><a href="http://people.skolelinux.org/pere/blog/tags/rfid">rfid (2)</a></li>
 834
 835  <li><a href="http://people.skolelinux.org/pere/blog/tags/robot">robot (9)</a></li>
 836
 837  <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
 838
 839  <li><a href="http://people.skolelinux.org/pere/blog/tags/ruter">ruter (4)</a></li>
 840
 841  <li><a href="http://people.skolelinux.org/pere/blog/tags/scraperwiki">scraperwiki (2)</a></li>
 842
 843  <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (37)</a></li>
 844
 845  <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (4)</a></li>
 846
 847  <li><a href="http://people.skolelinux.org/pere/blog/tags/skepsis">skepsis (4)</a></li>
 848
 849  <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (44)</a></li>
 850
 851  <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (3)</a></li>
 852
 853  <li><a href="http://people.skolelinux.org/pere/blog/tags/stortinget">stortinget (9)</a></li>
 854
 855  <li><a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (23)</a></li>
 856
 857  <li><a href="http://people.skolelinux.org/pere/blog/tags/sysadmin">sysadmin (1)</a></li>
 858
 859  <li><a href="http://people.skolelinux.org/pere/blog/tags/valg">valg (8)</a></li>
 860
 861  <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (40)</a></li>
 862
 863  <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (4)</a></li>
 864
 865  <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (29)</a></li>
 866
 867 </ul>
 868
 869
 870     </div>
 871     <p style="text-align: right">
 872  Created by <a href="http://steve.org.uk/Software/chronicle">Chronicle v4.6</a>
 873 </p>
 874
 875   </body>
 876 </html>