blog/tags/debian edu/index.html

   1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
   2         "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
   3 <html>
   4  <head>
   5   <title>Petter Reinholdtsen: Entries Tagged debian edu</title>
   6   <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css">
   7   <link rel="alternate" title="RSS Feed" href="debian edu.rss" type="application/rss+xml">
   8  </head>
   9  <body>
  10
  11  <div class="title">
  12   <h1>
  13        <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
  14
  15   </h1>
  16
  17  </div>
  18
  19  <p>Entries tagged "debian edu".</p>
  20
  21
  22
  23
  24 <div class="entry">
  25  <div class="title">
  26  <a href="http://people.skolelinux.org/pere/blog/The_sorry_state_of_multimedia_browser_plugins_in_Debian.html">The sorry state of multimedia browser plugins in Debian</a>
  27  </div>
  28  <div class="date">
  29   2008-11-25 00:10
  30  </div>
  31
  32  <div class="body">
  33
  34 <p>Recently I have spent some time evaluating the multimedia browser
  35 plugins available in Debian Lenny, to see which one we should use by
  36 default in Debian Edu.  We need an embedded video playing plugin with
  37 control buttons to pause or stop the video, and capable of streaming
  38 all the multimedia content available on the web.  The test results and
  39 notes are available on
  40 <a href="http://wiki.debian.org/DebianEdu/BrowserMultimedia">the
  41 Debian wiki</a>.  I was surprised how few of the plugins are able to
  42 fill this need.  My personal video player favorite, VLC, has a really
  43 bad plugin which fail on a lot of the test pages.  A lot of the MIME
  44 types I would expect to work with any free software player (like
  45 video/ogg), just do not work.  And simple formats like the
  46 audio/x-mplegurl format (m3u playlists), just isn't supported by the
  47 totem and vlc plugins.  I hope the situation will improve soon.  No
  48 wonder sites use the proprietary Adobe flash to play video.</p>
  49
  50 <p>For Lenny, we seem to end up with the mplayer plugin.  It seem to
  51 be the only one fitting our needs. :/</p>
  52
  53  </div>
  54  <div class="tags">
  55
  56
  57
  58   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web">web</a>.
  59
  60  </div>
  61 </div>
  62 <div class="padding"></div>
  63
  64 <div class="entry">
  65  <div class="title">
  66  <a href="http://people.skolelinux.org/pere/blog/Devcamp_brought_us_closer_to_the_Lenny_based_Debian_Edu_release.html">Devcamp brought us closer to the Lenny based Debian Edu release</a>
  67  </div>
  68  <div class="date">
  69   2008-12-07 12:00
  70  </div>
  71
  72  <div class="body">
  73
  74 <p>This weekend we had a small developer gathering for Debian Edu in
  75 Oslo.  Most of Saturday was used for the general assemly for the
  76 member organization, but the rest of the weekend I used to tune the
  77 LTSP installation.  LTSP now work out of the box on the 10-network.
  78 Acer Aspire One proved to be a very nice thin client, with both
  79 screen, mouse and keybard in a small box.  Was working on getting the
  80 diskless workstation setup configured out of the box, but did not
  81 finish it before the weekend was up.</p>
  82
  83 <p>Did not find time to look at the 4 VGA cards in one box we got from
  84 the Brazilian group, so that will have to wait for the next
  85 development gathering.  Would love to have the Debian Edu installer
  86 automatically detect and configure a multiseat setup when it find one
  87 of these cards.</p>
  88
  89  </div>
  90  <div class="tags">
  91
  92
  93
  94   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp</a>.
  95
  96  </div>
  97 </div>
  98 <div class="padding"></div>
  99
 100 <div class="entry">
 101  <div class="title">
 102  <a href="http://people.skolelinux.org/pere/blog/Endelig_norsk_stavekontroll_med_st__tte_for_ord_med_bindestrek.html">Endelig norsk stavekontroll med støtte for ord med bindestrek</a>
 103  </div>
 104  <div class="date">
 105   2008-12-26 11:00
 106  </div>
 107
 108  <div class="body">
 109
 110 <p>Etter flere års mislykkede forsøk på å skrive om byggesystemet for
 111 <a href="http://no.speling.org/">den norske stavekontrollen for bokmål
 112 og nynorsk</a> til å ikke bruke bindestrek som ordskillemarkør, lyktes jeg
 113 endelig første juledag.  Bruken av bindestrek som ordskillemarkør har
 114 gjort det umulig å få med ord med bindestrek i
 115 stavekontrolldatagrunnlaget, slik at ord som e-post og CD-spiller ikke
 116 kunne godtas av stavekontrollen.  Hadde litt tid til overs å bruke på
 117 stavekontrollen, og satte meg ned med to kopier av byggsystemet og en
 118 liten testdatafil, og byttet ut - med = på utvalgte steder i
 119 byggsystemet og datafilen helt til jeg fikk samme resultat med det
 120 gamle og det nye byggsystemet.  Dette tror jeg var forsøk 4, der de
 121 foregående har feilet uten at jeg klarte å forstå hvorfor.  Det sier
 122 kanskje litt om kompleksiteten i det originale byggsystemet som Rune
 123 Kleveland laget i sin tid.</p>
 124
 125 <p>Etter å ha endret byggsystemet, var neste steg å importere ordene
 126 med bindestrek.  Vi har en rekke slike i databasene for
 127 <a href="http://tyge.sslug.dk/~korsvoll/nb.speling.org/htdocs/">bokmål</a>
 128 og
 129 <a href="http://tyge.sslug.dk/~korsvoll/nn.speling.org/htdocs/">nynorsk</a>
 130 for korrektur av datagrunnlaget for stavekontrollen, og etter importen
 131 skulle nå 10350 nye ord bli godkjent som korrekt stavede ord av
 132 stavekontrollen.</p>
 133
 134  </div>
 135  <div class="tags">
 136
 137
 138
 139   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll</a>.
 140
 141  </div>
 142 </div>
 143 <div class="padding"></div>
 144
 145 <div class="entry">
 146  <div class="title">
 147  <a href="http://people.skolelinux.org/pere/blog/Endelig_er_Debian_Lenny_gitt_ut.html">Endelig er Debian Lenny gitt ut</a>
 148  </div>
 149  <div class="date">
 150   2009-02-15 11:50
 151  </div>
 152
 153  <div class="body">
 154
 155 <p>Endelig er <a href="http://www.debian.org/">Debian</a>
 156 <a href="http://www.debian.org/News/2009/20090214">Lenny</a> gitt ut.
 157 Et langt steg videre for Debian-prosjektet, og en rekke nye
 158 programpakker blir nå tilgjengelig for de av oss som bruker den
 159 stabile utgaven av Debian.  Neste steg er nå å få
 160 <a href="http://www.skolelinux.org/">Skolelinux</a> /
 161 <a href="http://wiki.debian.org/DebianEdu/">Debian Edu</a> ferdig
 162 oppdatert for den nye utgaven, slik at en oppdatert versjon kan
 163 slippes løs på skolene.  Takk til alle debian-utviklerne som har
 164 gjort dette mulig.  Endelig er f.eks. fungerende avhengighetsstyrt
 165 bootsekvens tilgjengelig i stabil utgave, vha pakken
 166 <tt>insserv</tt>.</p>
 167
 168  </div>
 169  <div class="tags">
 170
 171
 172
 173   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
 174
 175  </div>
 176 </div>
 177 <div class="padding"></div>
 178
 179 <div class="entry">
 180  <div class="title">
 181  <a href="http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html">Time for new  LDAP schemas replacing RFC 2307?</a>
 182  </div>
 183  <div class="date">
 184   2009-03-29 20:30
 185  </div>
 186
 187  <div class="body">
 188
 189 <p>The state of standardized LDAP schemas on Linux is far from
 190 optimal.  There is RFC 2307 documenting one way to store NIS maps in
 191 LDAP, and a modified version of this normally called RFC 2307bis, with
 192 some modifications to be compatible with Active Directory.  The RFC
 193 specification handle the content of a lot of system databases, but do
 194 not handle DNS zones and DHCP configuration.</p>
 195
 196 <p>In <a href="http://www.skolelinux.org/">Debian Edu/Skolelinux</a>,
 197 we would like to store information about users, SMB clients/hosts,
 198 filegroups, netgroups (users and hosts), DHCP and DNS configuration,
 199 and LTSP configuration in LDAP.  These objects have a lot in common,
 200 but with the current LDAP schemas it is not possible to have one
 201 object per entity.  For example, one need to have at least three LDAP
 202 objects for a given computer, one with the SMB related stuff, one with
 203 DNS information and another with DHCP information.  The schemas
 204 provided for DNS and DHCP are impossible to combine into one LDAP
 205 object.  In addition, it is impossible to implement quick queries for
 206 netgroup membership, because of the way NIS triples are implemented.
 207 It just do not scale.  I believe it is time for a few RFC
 208 specifications to cleam up this mess.</p>
 209
 210 <p>I would like to have one LDAP object representing each computer in
 211 the network, and this object can then keep the SMB (ie host key), DHCP
 212 (mac address/name) and DNS (name/IP address) settings in one place.
 213 It need to be efficently stored to make sure it scale well.</p>
 214
 215 <p>I would also like to have a quick way to map from a user or
 216 computer and to the net group this user or computer is a member.</p>
 217
 218 <p>Active Directory have done a better job than unix heads like myself
 219 in this regard, and the unix side need to catch up.  Time to start a
 220 new IETF work group?</p>
 221
 222  </div>
 223  <div class="tags">
 224
 225
 226
 227   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 228
 229  </div>
 230 </div>
 231 <div class="padding"></div>
 232
 233 <div class="entry">
 234  <div class="title">
 235  <a href="http://people.skolelinux.org/pere/blog/Returning_from_Skolelinux_developer_gathering.html">Returning from Skolelinux developer gathering</a>
 236  </div>
 237  <div class="date">
 238   2009-03-29 21:00
 239  </div>
 240
 241  <div class="body">
 242
 243 <p>I'm sitting on the train going home from this weekends Debian
 244 Edu/Skolelinux development gathering.  I got a bit done tuning the
 245 desktop, and looked into the dynamic service location protocol
 246 implementation avahi.  It look like it could be useful for us.  Almost
 247 30 people participated, and I believe it was a great environment to
 248 get to know the Skolelinux system.  Walter Bender, involved in the
 249 development of the Sugar educational platform, presented his stuff and
 250 also helped me improve my OLPC installation.  He also showed me that
 251 his Turtle Art application can be used in standalone mode, and we
 252 agreed that I would help getting it packaged for Debian.  As a
 253 standalone application it would be great for Debian Edu.  We also
 254 tried to get the video conferencing working with two OLPCs, but that
 255 proved to be too hard for us.  The application seem to need more work
 256 before it is ready for me.  I look forward to getting home and relax
 257 now. :)</p>
 258
 259  </div>
 260  <div class="tags">
 261
 262
 263
 264   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 265
 266  </div>
 267 </div>
 268 <div class="padding"></div>
 269
 270 <div class="entry">
 271  <div class="title">
 272  <a href="http://people.skolelinux.org/pere/blog/BSAs_p__stander_om_piratkopiering_m__ter_motstand.html">BSAs påstander om piratkopiering møter motstand</a>
 273  </div>
 274  <div class="date">
 275   2009-05-17 23:05
 276  </div>
 277
 278  <div class="body">
 279
 280 <p>Hvert år de siste årene har BSA, lobbyfronten til de store
 281 programvareselskapene som Microsoft og Apple, publisert en rapport der
 282 de gjetter på hvor mye piratkopiering påfører i tapte inntekter i
 283 ulike land rundt om i verden.  Resultatene er tendensiøse.  For noen
 284 dager siden kom
 285 <a href="http://global.bsa.org/globalpiracy2008/studies/globalpiracy2008.pdf">siste
 286 rapport</a>, og det er flere kritiske kommentarer publisert de siste
 287 dagene.  Et spesielt interessant kommentar fra Sverige,
 288 <a href="http://www.idg.se/2.1085/1.229795/bsa-hoftade-sverigesiffror">BSA
 289 höftade Sverigesiffror</a>, oppsummeres slik:</p>
 290
 291 <blockquote>
 292 I sin senaste rapport slår BSA fast att 25 procent av all mjukvara i
 293 Sverige är piratkopierad. Det utan att ha pratat med ett enda svenskt
 294 företag. "Man bör nog kanske inte se de här siffrorna som helt
 295 exakta", säger BSAs Sverigechef John Hugosson.
 296 </blockquote>
 297
 298 <p>Mon tro om de er like metodiske når de gjetter på andelen piratkopiering i Norge?  To andre kommentarer er <a
 299 href="http://www.vnunet.com/vnunet/comment/2242134/bsa-piracy-figures-shot-reality">BSA
 300 piracy figures need a shot of reality</a> og <a
 301 href="http://www.michaelgeist.ca/content/view/3958/125/">Does The WIPO
 302 Copyright Treaty Work?</a></p>
 303
 304 <p>Fant lenkene via <a
 305 href="http://tech.slashdot.org/article.pl?sid=09/05/17/1632242">oppslag
 306 på Slashdot</a>.</p>
 307
 308  </div>
 309  <div class="tags">
 310
 311
 312
 313   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>, <a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett</a>, <a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern</a>.
 314
 315  </div>
 316 </div>
 317 <div class="padding"></div>
 318
 319 <div class="entry">
 320  <div class="title">
 321  <a href="http://people.skolelinux.org/pere/blog/Endelig_operativt_webbasert_medlemsregister_for_Fri_programvare_i_skolen.html">Endelig operativt webbasert medlemsregister for Fri programvare i skolen</a>
 322  </div>
 323  <div class="date">
 324   2009-11-02 22:40
 325  </div>
 326
 327  <div class="body">
 328
 329 <p>Under helgens utviklersamling i
 330 <a href="http://www.skolelinux.no/">Skolelinux</a> fikk jeg endelig
 331 satt meg ned sammen med Ronny Aasen i styret for å få et webbasert
 332 medlemsregister tilbake på plass for foreningen som passer på
 333 skolelinuxprosjektet.  Etter flere års knot og problemer, er nå
 334 memberdb satt opp og klart til bruk.  Import av det gamle
 335 medlemsregisteret har vist seg vanskelig, så alle medlemmer bes om å
 336 registrere seg på nytt.  Hvis du støtter FRiSKs formål så er du
 337 hjertelig velkommen til
 338 <a href="http://medlem.friprogramvareiskolen.no/">å melde deg
 339 inn</a>. Formålet lyder:</p>
 340
 341 <blockquote>Linux i skolen skal tilrettelegge for og informere om bruk
 342 av fri programvare, i henhold til Debian Free Software Guidelines av
 343 2002-02-03, i den norske skolen, slik som f.eks. Linux og
 344 GNU.</blockquote>
 345
 346  </div>
 347  <div class="tags">
 348
 349
 350
 351   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
 352
 353  </div>
 354 </div>
 355 <div class="padding"></div>
 356
 357 <div class="entry">
 358  <div class="title">
 359  <a href="http://people.skolelinux.org/pere/blog/Opphavet_til_Skolelinux_prosjektet.html">Opphavet til Skolelinux-prosjektet</a>
 360  </div>
 361  <div class="date">
 362   2009-12-17 10:50
 363  </div>
 364
 365  <div class="body">
 366
 367 <p>De færreste er klar over at Skolelinux-prosjektet kom som et resultat
 368 av en avgjørelse på årsmøtet i
 369 <a href="http://www.nuug.no/">NUUG</a> i 2000-06-29, der Håkon Wium
 370 Lie, da varamedlem i styret, tok på seg oppdraget om å starte et
 371 initiativ kalt "Teach the Teacher", som skulle være et initiativ for
 372 å få fri programvare og unix-lignende operativsystemer inn i Skolen.
 373 Tanken var at en måtte starte med lærerne for at ungene skulle få
 374 mulighet til å møte en bedre IT-hverdag.  Jeg var tilstede på
 375 møtet, og hadde sans for ideen, men intet skjedde.  På vårparten
 376 2001 ble det arrangert en demonstrasjon i anledning at First Tuesday
 377 hadde invitert Microsoft til et møte for å fortelle om fremtidens
 378 Internet.  Dette provoserte endel av oss, og EFN og NUUG tok initiativ
 379 til å arrangere
 380 <a href="http://www.digi.no/60982/first-tuesday-mote-med-microsoft-protest">en
 381 demonstrasjon utenfor lokalene 2001-05-21</a>.  Blant de som sto bak
 382 demonstrasjonen var Vidar Bakke fra NUUG og Håkon W. Lie fra EFN.
 383 Etter demonstrasjonen arrangerte Håkon en fest hjemme hos seg der alle
 384 som hadde vært aktive i demonstrasjonsplanlegging og gjennomføringen
 385 deltok.  Før festen var jeg blitt lei av å vente på at Håkon skulle ta
 386 initiativ til "Teach the Teacher", og for å forsøke å få litt fremgang
 387 besteme jeg meg for å benytte anledningen hos Håkon til å snakke om
 388 behovet for å hjelpe skolene i gang med bedre datasystemer bestående
 389 av fri programvare og unix-lignende operativsystemer.  Flere var
 390 interessert, og Knut Yrvin tenkte på ideen.  Han
 391 <a href="http://developer.skolelinux.no/brev/2001-06-28-invitasjon-skolelinux.txt">ropte
 392 sammen</a> til et stiftelsesmøte i prosjektet i sin arbeidsgivers
 393 Objectwares lokaler ved Ullevål stadion 2001-07-02, og jeg ble med.
 394 Resten er historie. :)</p>
 395
 396  </div>
 397  <div class="tags">
 398
 399
 400
 401   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 402
 403  </div>
 404 </div>
 405 <div class="padding"></div>
 406
 407 <div class="entry">
 408  <div class="title">
 409  <a href="http://people.skolelinux.org/pere/blog/Automatic_Munin_and_Nagios_configuration.html">Automatic Munin and Nagios configuration</a>
 410  </div>
 411  <div class="date">
 412   2010-01-27 15:15
 413  </div>
 414
 415  <div class="body">
 416
 417 <p>One of the new features in the next Debian/Lenny based release of
 418 Debian Edu/Skolelinux, which is scheduled for release in the next few
 419 days, is automatic configuration of the service monitoring system
 420 Nagios.  The previous release had automatic configuration of trend
 421 analysis using Munin, and this Lenny based release take that a step
 422 further.</p>
 423
 424 <p>When installing a Debian Edu Main-server, it is automatically
 425 configured as a Munin and Nagios server.  In addition, it is
 426 configured to be a server for the
 427 <a href="http://wiki.debian.org/DebianEdu/HowTo/SiteSummary">SiteSummary
 428 system</a> I have written for use in Debian Edu.  The SiteSummary
 429 system is inspired by a system used by the University of Oslo where I
 430 work.  In short, the system provide a centralised collector of
 431 information about the computers on the network, and a client on each
 432 computer submitting information to this collector.  This allow for
 433 automatic information on which packages are installed on each machine,
 434 which kernel the machines are using, what kind of configuration the
 435 packages got etc.  This also allow us to automatically generate Munin
 436 and Nagios configuration.</p>
 437
 438 <p>All computers reporting to the sitesummary collector with the
 439 munin-node package installed is automatically enabled as a Munin
 440 client and graphs from the statistics collected from that machine show
 441 up automatically on http://www/munin/ on the Main-server.</p>
 442
 443 <p>All non-laptop computers reporting to the sitesummary collector are
 444 automatically monitored for network presence (ping and any network
 445 services detected).  In addition, all computers (also laptops) with
 446 the nagios-nrpe-server package installed and configured the way
 447 sitesummary would configure it, are monitored for full disks, software
 448 raid status, swap free and other checks that need to run locally on
 449 the machine.</p>
 450
 451 <p>The result is that the administrator on a school using Debian Edu
 452 based on Lenny will be able to check the health of his installation
 453 with one look at the Nagios settings, without having to spend any time
 454 keeping the Nagios configuration up-to-date.</p>
 455
 456 <p>The only configuration one need to do to get Nagios up and running
 457 is to set the password used to get access via HTTP.  The system
 458 administrator need to run "<tt>htpasswd /etc/nagios3/htpasswd.users
 459 nagiosadmin</tt>" to create a nagiosadmin user and set a password for
 460 it to be able to log into the Nagios web pages.  After that,
 461 everything is taken care of.</p>
 462
 463  </div>
 464  <div class="tags">
 465
 466
 467
 468   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary</a>.
 469
 470  </div>
 471 </div>
 472 <div class="padding"></div>
 473
 474 <div class="entry">
 475  <div class="title">
 476  <a href="http://people.skolelinux.org/pere/blog/Debian_Edu___Skolelinux_based_on_Lenny_released__work_continues.html">Debian Edu / Skolelinux based on Lenny released, work continues</a>
 477  </div>
 478  <div class="date">
 479   2010-02-11 17:15
 480  </div>
 481
 482  <div class="body">
 483
 484 <p>On Tuesday, the Debian/Lenny based version of
 485 <a href="http://www.skolelinux.org/">Skolelinux</a> was finally
 486 shipped.  This was a major leap forward for the project, and I am very
 487 pleased that we finally got the release wrapped up.  Work on the first
 488 point release starts imediately, as we plan to get that one out a
 489 month after the major release, to include all fixes for bugs we found
 490 and fixed too late in the release process to include last Tuesday.</p>
 491
 492 <p>Perhaps it even is time for some partying?</p>
 493
 494 <p>After this first point release, my plan is to focus again on the
 495 next major release, based on Squeeze.  We will try to get as many of
 496 the fixes we need into the official Debian packages before the freeze,
 497 and have just a few weeks or months to make it happen.</p>
 498
 499  </div>
 500  <div class="tags">
 501
 502
 503
 504   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 505
 506  </div>
 507 </div>
 508 <div class="padding"></div>
 509
 510 <div class="entry">
 511  <div class="title">
 512  <a href="http://people.skolelinux.org/pere/blog/After_6_years_of_waiting__the_Xreset_d_feature_is_implemented.html">After 6 years of waiting, the Xreset.d feature is implemented</a>
 513  </div>
 514  <div class="date">
 515   2010-03-06 18:15
 516  </div>
 517
 518  <div class="body">
 519
 520 <p>6 years ago, as part of the Debian Edu development I am involved
 521 in, I asked for a hook in the kdm and gdm setup to run scripts as root
 522 when the user log out.  A bug was submitted against the xfree86-common
 523 package in 2004 (<a href="http://bugs.debian.org/230422">#230422</a>),
 524 and revisited every time Debian Edu was working on a new release.
 525 Today, this finally paid off.</p>
 526
 527 <p>The framework for this feature was today commited to the git
 528 repositry for the xorg package, and the git repository for xdm has
 529 been updated to use this framework.  Next on my agenda is to make sure
 530 kdm and gdm also add code to use this framework.</p>
 531
 532 <p>In Debian Edu, we want to ability to run commands as root when the
 533 user log out, to get rid of runaway processes and do general cleanup
 534 after a user.  With this framework in place, we finally can do that in
 535 a generic way that work with all display managers using this
 536 framework.  My goal is to get all display managers in Debian use it,
 537 similar to how they use the Xsession.d framework today.<p>
 538
 539  </div>
 540  <div class="tags">
 541
 542
 543
 544   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 545
 546  </div>
 547 </div>
 548 <div class="padding"></div>
 549
 550 <div class="entry">
 551  <div class="title">
 552  <a href="http://people.skolelinux.org/pere/blog/Kerberos_for_Debian_Edu_Squeeze_.html">Kerberos for Debian Edu/Squeeze?</a>
 553  </div>
 554  <div class="date">
 555   2010-04-14 17:20
 556  </div>
 557
 558  <div class="body">
 559
 560 <p><a href="http://www.nuug.no/aktiviteter/20100413-kerberos/">Yesterdays
 561 NUUG presentation</a> about Kerberos was inspiring, and reminded me
 562 about the need to start using Kerberos in Skolelinux.  Setting up a
 563 Kerberos server seem to be straight forward, and if we get this in
 564 place a long time before the Squeeze version of Debian freezes, we
 565 have a chance to migrate Skolelinux away from NFSv3 for the home
 566 directories, and over to an architecture where the infrastructure do
 567 not have to trust IP addresses and machines, and instead can trust
 568 users and cryptographic keys instead.</p>
 569
 570 <p>A challenge will be integration and administration.  Is there a
 571 Kerberos implementation for Debian where one can control the
 572 administration access in Kerberos using LDAP groups?  With it, the
 573 school administration will have to maintain access control using flat
 574 files on the main server, which give a huge potential for errors.</p>
 575
 576 <p>A related question I would like to know is how well Kerberos and
 577 pam-ccreds (offline password check) work together.  Anyone know?</p>
 578
 579 <p>Next step will be to use Kerberos for access control in Lwat and
 580 Nagios.  I have no idea how much work that will be to implement.  We
 581 would also need to document how to integrate with Windows AD, as such
 582 shared network will require two Kerberos realms that need to cooperate
 583 to work properly.</p>
 584
 585 <p>I believe a good start would be to start using Kerberos on the
 586 skolelinux.no machines, and this way get ourselves experience with
 587 configuration and integration.  A natural starting point would be
 588 setting up ldap.skolelinux.no as the Kerberos server, and migrate the
 589 rest of the machines from PAM via LDAP to PAM via Kerberos one at the
 590 time.</p>
 591
 592 <p>If you would like to contribute to get this working in Skolelinux,
 593 I recommend you to see the video recording from yesterdays NUUG
 594 presentation, and start using Kerberos at home.  The video show show
 595 up in a few days.</p>
 596
 597  </div>
 598  <div class="tags">
 599
 600
 601
 602   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 603
 604  </div>
 605 </div>
 606 <div class="padding"></div>
 607
 608 <div class="entry">
 609  <div class="title">
 610  <a href="http://people.skolelinux.org/pere/blog/Thoughts_on_roaming_laptop_setup_for_Debian_Edu.html">Thoughts on roaming laptop setup for Debian Edu</a>
 611  </div>
 612  <div class="date">
 613   2010-04-28 20:40
 614  </div>
 615
 616  <div class="body">
 617
 618 <p>For some years now, I have wondered how we should handle laptops in
 619 Debian Edu.  The Debian Edu infrastructure is mostly designed to
 620 handle stationary computers, and less suited for computers that come
 621 and go.</p>
 622
 623 <p>Now I finally believe I have an sensible idea on how to adjust
 624 Debian Edu for laptops, by introducing a new profile for them, for
 625 example called Roaming Workstations.  Here are my thought on this.
 626 The setup would consist of the following:</p>
 627
 628 <ul>
 629
 630  <li>During installation, the user name of the owner / primary user of
 631    the laptop is requested and a local home directory is set up for
 632    the user, with uid and gid information fetched from the LDAP
 633    server.  This allow the user to work also when offline.  The
 634    central home directory can be available in a subdirectory on
 635    request, for example mounted via CIFS.  It could be mounted
 636    automatically when a user log in while on the Debian Edu network,
 637    and unmounted when the machine is taken away (network down,
 638    hibernate, etc), it can be set up to do automatic mounting on
 639    request (using autofs), or perhaps some GUI button on the desktop
 640    can be used to access it when needed.  Perhaps it is enough to use
 641    the fish protocol in KDE?</li>
 642
 643  <li>Password checking is set up to use LDAP or Kerberos
 644    authentication when the machine is on the Debian Edu network, and
 645    to cache the password for offline checking when the machine unable
 646    to reach the LDAP or Kerberos server.  This can be done using
 647    <a href="http://www.padl.com/OSS/pam_ccreds.html">libpam-ccreds</a>
 648    or the Fedora developed
 649    <a href="https://fedoraproject.org/wiki/Features/SSSD">System
 650    Security Services Daemon</a> packages.</li>
 651
 652  <li>File synchronisation with the central home directory is set up
 653    using a shared directory in both the local and the central home
 654    directory, using unison.</li>
 655
 656  <li>Printing should be set up to print to all printers broadcasting
 657    their existence on the local network, and should then work out of
 658    the box with CUPS.  For sites needing accurate printer quotas, some
 659    system with Kerberos authentication or printing via ssh could be
 660    implemented.</li>
 661
 662  <li>For users that should have local root access to their laptop,
 663    sudo should be used to allow this to the local user.</li>
 664
 665  <li>It would be nice if user and group information from LDAP is
 666    cached on the client, but given that there are entries for the
 667    local user and primary group in /etc/, it should not be needed.</li>
 668
 669 </ul>
 670
 671 <p>I believe all the pieces to implement this are in Debian/testing at
 672 the moment.  If we work quickly, we should be able to get this ready
 673 in time for the Squeeze release to freeze.  Some of the pieces need
 674 tweaking, like libpam-ccreds should get support for pam-auth-update
 675 (<a href="http://bugs.debian.org/566718">#566718</a>) and nslcd (or
 676 perhaps debian-edu-config) should get some integration code to stop
 677 its daemon when the LDAP server is unavailable to avoid long timeouts
 678 when disconnected from the net.  If we get Kerberos enabled, we need
 679 to make sure we avoid long timeouts there too.</p>
 680
 681 <p>If you want to help out with implementing this for Debian Edu,
 682 please contact us on debian-edu@lists.debian.org.</p>
 683
 684  </div>
 685  <div class="tags">
 686
 687
 688
 689   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 690
 691  </div>
 692 </div>
 693 <div class="padding"></div>
 694
 695 <div class="entry">
 696  <div class="title">
 697  <a href="http://people.skolelinux.org/pere/blog/Forcing_new_users_to_change_their_password_on_first_login.html">Forcing new users to change their password on first login</a>
 698  </div>
 699  <div class="date">
 700   2010-05-02 13:47
 701  </div>
 702
 703  <div class="body">
 704
 705 <p>One interesting feature in Active Directory, is the ability to
 706 create a new user with an expired password, and thus force the user to
 707 change the password on the first login attempt.</p>
 708
 709 <p>I'm not quite sure how to do that with the LDAP setup in Debian
 710 Edu, but did some initial testing with a local account.  The account
 711 and password aging information is available in /etc/shadow, but
 712 unfortunately, it is not possible to specify an expiration time for
 713 passwords, only a maximum age for passwords.</p>
 714
 715 <p>A freshly created account (using adduser test) will have these
 716 settings in /etc/shadow:</p>
 717
 718 <blockquote><pre>
 719 root@tjener:~# chage -l test
 720 Last password change                                    : May 02, 2010
 721 Password expires                                        : never
 722 Password inactive                                       : never
 723 Account expires                                         : never
 724 Minimum number of days between password change          : 0
 725 Maximum number of days between password change          : 99999
 726 Number of days of warning before password expires       : 7
 727 root@tjener:~#
 728 </pre></blockquote>
 729
 730 <p>The only way I could come up with to create a user with an expired
 731 account, is to change the date of the last password change to the
 732 lowest value possible (January 1th 1970), and the maximum password age
 733 to the difference in days between that date and today.  To make it
 734 simple, I went for 30 years (30 * 365 = 10950) and January 2th (to
 735 avoid testing if 0 is a valid value).</p>
 736
 737 <p>After using these commands to set it up, it seem to work as
 738 intended:</p>
 739
 740 <blockquote><pre>
 741 root@tjener:~# chage -d 1 test; chage -M 10950 test
 742 root@tjener:~# chage -l test
 743 Last password change                                    : Jan 02, 1970
 744 Password expires                                        : never
 745 Password inactive                                       : never
 746 Account expires                                         : never
 747 Minimum number of days between password change          : 0
 748 Maximum number of days between password change          : 10950
 749 Number of days of warning before password expires       : 7
 750 root@tjener:~#
 751 </pre></blockquote>
 752
 753 <p>So far I have tested this with ssh and console, and kdm (in
 754 Squeeze) login, and all ask for a new password before login in the
 755 user (with ssh, I was thrown out and had to log in again).</p>
 756
 757 <p>Perhaps we should set up something similar for Debian Edu, to make
 758 sure only the user itself have the account password?</p>
 759
 760 <p>If you want to comment on or help out with implementing this for
 761 Debian Edu, please contact us on debian-edu@lists.debian.org.</p>
 762
 763 <p>Update 2010-05-02 17:20: Paul Tötterman tells me on IRC that the
 764 shadow(8) page in Debian/testing now state that setting the date of
 765 last password change to zero (0) will force the password to be changed
 766 on the first login.  This was not mentioned in the manual in Lenny, so
 767 I did not notice this in my initial testing.  I have tested it on
 768 Squeeze, and '<tt>chage -d 0 username</tt>' do work there.  I have not
 769 tested it on Lenny yet.</p>
 770
 771 <p>Update 2010-05-02-19:05: Jim Paris tells me via email that an
 772 equivalent command to expire a password is '<tt>passwd -e
 773 username</tt>', which insert zero into the date of the last password
 774 change.</p>
 775
 776  </div>
 777  <div class="tags">
 778
 779
 780
 781   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>.
 782
 783  </div>
 784 </div>
 785 <div class="padding"></div>
 786
 787 <div class="entry">
 788  <div class="title">
 789  <a href="http://people.skolelinux.org/pere/blog/Sitesummary_tip__Listing_MAC_address_of_all_clients.html">Sitesummary tip: Listing MAC address of all clients</a>
 790  </div>
 791  <div class="date">
 792   2010-05-14 21:10
 793  </div>
 794
 795  <div class="body">
 796
 797 <p>In the recent Debian Edu versions, the
 798 <a href="http://wiki.debian.org/DebianEdu/HowTo/SiteSummary">sitesummary
 799 system</a> is used to keep track of the machines in the school
 800 network.  Each machine will automatically report its status to the
 801 central server after boot and once per night.  The network setup is
 802 also reported, and using this information it is possible to get the
 803 MAC address of all network interfaces in the machines.  This is useful
 804 to update the DHCP configuration.</p>
 805
 806 <p>To give some idea how to use sitesummary, here is a one-liner to
 807 ist all MAC addresses of all machines reporting to sitesummary.  Run
 808 this on the collector host:</p>
 809
 810 <blockquote><pre>
 811 perl -MSiteSummary -e 'for_all_hosts(sub { print join(" ", get_macaddresses(shift)), "\n"; });'
 812 </pre></blockquote>
 813
 814 <p>This will list all MAC addresses assosiated with all machine, one
 815 line per machine and with space between the MAC addresses.</p>
 816
 817 <p>To allow system administrators easier job at adding static DHCP
 818 addresses for hosts, it would be possible to extend this to fetch
 819 machine information from sitesummary and update the DHCP and DNS
 820 tables in LDAP using this information.  Such tool is unfortunately not
 821 written yet.</p>
 822
 823  </div>
 824  <div class="tags">
 825
 826
 827
 828   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary</a>.
 829
 830  </div>
 831 </div>
 832 <div class="padding"></div>
 833
 834 <div class="entry">
 835  <div class="title">
 836  <a href="http://people.skolelinux.org/pere/blog/Parallellized_boot_is_now_the_default_in_Debian_unstable.html">Parallellized boot is now the default in Debian/unstable</a>
 837  </div>
 838  <div class="date">
 839   2010-05-14 22:40
 840  </div>
 841
 842  <div class="body">
 843
 844 <p>Since this evening, parallel booting is the default in
 845 Debian/unstable for machines using dependency based boot sequencing.
 846 Apparently the testing of concurrent booting has been wider than
 847 expected, if I am to believe the
 848 <a href="http://lists.debian.org/debian-devel/2010/05/msg00122.html">input
 849 on debian-devel@</a>, and I concluded a few days ago to move forward
 850 with the feature this weekend, to give us some time to detect any
 851 remaining problems before Squeeze is frozen.  If serious problems are
 852 detected, it is simple to change the default back to sequential boot.
 853 The upload of the new sysvinit package also activate a new upstream
 854 version.</p>
 855
 856 More information about
 857 <a href="http://wiki.debian.org/LSBInitScripts/DependencyBasedBoot">dependency
 858 based boot sequencing</a> is available from the Debian wiki.  It is
 859 currently possible to disable parallel booting when one run into
 860 problems caused by it, by adding this line to /etc/default/rcS:</p>
 861
 862 <blockquote><pre>
 863 CONCURRENCY=none
 864 </pre></blockquote>
 865
 866 <p>If you report any problems with dependencies in init.d scripts to
 867 the BTS, please usertag the report to get it to show up at
 868 <a href="http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=initscripts-ng-devel@lists.alioth.debian.org">the
 869 list of usertagged bugs related to this</a>.</p>
 870
 871  </div>
 872  <div class="tags">
 873
 874
 875
 876   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
 877
 878  </div>
 879 </div>
 880 <div class="padding"></div>
 881
 882 <div class="entry">
 883  <div class="title">
 884  <a href="http://people.skolelinux.org/pere/blog/Pieces_of_the_roaming_laptop_puzzle_in_Debian.html">Pieces of the roaming laptop puzzle in Debian</a>
 885  </div>
 886  <div class="date">
 887   2010-05-19 19:00
 888  </div>
 889
 890  <div class="body">
 891
 892 <p>Today, the last piece of the puzzle for roaming laptops in Debian
 893 Edu finally entered the Debian archive.  Today, the new
 894 <a href="http://packages.qa.debian.org/libp/libpam-mklocaluser.html">libpam-mklocaluser</a>
 895 package was accepted.  Two days ago, two other pieces was accepted
 896 into unstable.  The
 897 <a href="http://packages.qa.debian.org/p/pam-python.html">pam-python</a>
 898 package needed by libpam-mklocaluser, and the
 899 <a href="http://packages.qa.debian.org/s/sssd.html">sssd</a> package
 900 passed NEW on Monday.  In addition, the
 901 <a href="http://packages.qa.debian.org/libp/libpam-ccreds.html">libpam-ccreds</a>
 902 package we need is in experimental (version 10-4) since Saturday, and
 903 hopefully will be moved to unstable soon.</p>
 904
 905 <p>This collection of packages allow for two different setups for
 906 roaming laptops.  The traditional setup would be using libpam-ccreds,
 907 nscd and libpam-mklocaluser with LDAP or Kerberos authentication,
 908 which should work out of the box if the configuration changes proposed
 909 for nscd in <a href="http://bugs.debian.org/485282">BTS report
 910 #485282</a> is implemented.  The alternative setup is to use sssd with
 911 libpam-mklocaluser to connect to LDAP or Kerberos and let sssd take
 912 care of the caching of passwords and group information.</p>
 913
 914 <p>I have so far been unable to get sssd to work with the LDAP server
 915 at the University, but suspect the issue is some SSL/GnuTLS related
 916 problem with the server certificate.  I plan to update the Debian
 917 package to version 1.2, which is scheduled for next week, and hope to
 918 find time to make sure the next release will include both the
 919 Debian/Ubuntu specific patches.  Upstream is friendly and responsive,
 920 and I am sure we will find a good solution.</p>
 921
 922 <p>The idea is to set up the roaming laptops to authenticate using
 923 LDAP or Kerberos and create a local user with home directory in /home/
 924 when a usre in LDAP logs in via KDM or GDM for the first time, and
 925 cache the password for offline checking, as well as caching group
 926 memberhips and other relevant LDAP information.  The
 927 libpam-mklocaluser package was created to make sure the local home
 928 directory is in /home/, instead of /site/server/directory/ which would
 929 be the home directory if pam_mkhomedir was used.  To avoid confusion
 930 with support requests and configuration, we do not want local laptops
 931 to have users in a path that is used for the same users home directory
 932 on the home directory servers.</p>
 933
 934 <p>One annoying problem with gdm is that it do not show the PAM
 935 message passed to the user from libpam-mklocaluser when the local user
 936 is created.  Instead gdm simply reject the login with some generic
 937 message.  The message is shown in kdm, ssh and login, so I guess it is
 938 a bug in gdm.  Have not investigated if there is some other message
 939 type that can be used instead to get gdm to also show the message.</p>
 940
 941 <p>If you want to help out with implementing this for Debian Edu,
 942 please contact us on debian-edu@lists.debian.org.</p>
 943
 944  </div>
 945  <div class="tags">
 946
 947
 948
 949   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 950
 951  </div>
 952 </div>
 953 <div class="padding"></div>
 954
 955 <div class="entry">
 956  <div class="title">
 957  <a href="http://people.skolelinux.org/pere/blog/More_flexible_firmware_handling_in_debian_installer.html">More flexible firmware handling in debian-installer</a>
 958  </div>
 959  <div class="date">
 960   2010-05-22 21:30
 961  </div>
 962
 963  <div class="body">
 964
 965 <p>After a long break from debian-installer development, I finally
 966 found time today to return to the project.  Having to spend less time
 967 working dependency based boot in debian, as it is almost complete now,
 968 definitely helped freeing some time.</p>
 969
 970 <p>A while back, I ran into a problem while working on Debian Edu.  We
 971 include some firmware packages on the Debian Edu CDs, those needed to
 972 get disk and network controllers working.  Without having these
 973 firmware packages available during installation, it is impossible to
 974 install Debian Edu on the given machine, and because our target group
 975 are non-technical people, asking them to provide firmware packages on
 976 an external medium is a support pain.  Initially, I expected it to be
 977 enough to include the firmware packages on the CD to get
 978 debian-installer to find and use them.  This proved to be wrong.
 979 Next, I hoped it was enough to symlink the relevant firmware packages
 980 to some useful location on the CD (tried /cdrom/ and
 981 /cdrom/firmware/).  This also proved to not work, and at this point I
 982 found time to look at the debian-installer code to figure out what was
 983 going to work.</p>
 984
 985 <p>The firmware loading code is in the hw-detect package, and a closer
 986 look revealed that it would only look for firmware packages outside
 987 the installation media, so the CD was never checked for firmware
 988 packages.  It would only check USB sticks, floppies and other
 989 "external" media devices.  Today I changed it to also look in the
 990 /cdrom/firmware/ directory on the mounted CD or DVD, which should
 991 solve the problem I ran into with Debian edu.  I also changed it to
 992 look in /firmware/, to make sure the installer also find firmware
 993 provided in the initrd when booting the installer via PXE, to allow us
 994 to provide the same feature in the PXE setup included in Debian
 995 Edu.</p>
 996
 997 <p>To make sure firmware deb packages with a license questions are not
 998 activated without asking if the license is accepted, I extended
 999 hw-detect to look for preinst scripts in the firmware packages, and
1000 run these before activating the firmware during installation.  The
1001 license question is asked using debconf in the preinst, so this should
1002 solve the issue for the firmware packages I have looked at so far.</p>
1003
1004 <p>If you want to discuss the details of these features, please
1005 contact us on debian-boot@lists.debian.org.</p>
1006
1007  </div>
1008  <div class="tags">
1009
1010
1011
1012   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
1013
1014  </div>
1015 </div>
1016 <div class="padding"></div>
1017
1018 <div class="entry">
1019  <div class="title">
1020  <a href="http://people.skolelinux.org/pere/blog/Parallellized_boot_seem_to_hold_up_well_in_Debian_testing.html">Parallellized boot seem to hold up well in Debian/testing</a>
1021  </div>
1022  <div class="date">
1023   2010-05-27 23:55
1024  </div>
1025
1026  <div class="body">
1027
1028 <p>A few days ago, parallel booting was enabled in Debian/testing.
1029 The feature seem to hold up pretty well, but three fairly serious
1030 issues are known and should be solved:
1031
1032 <p><ul>
1033
1034 <li>The wicd package seen to
1035 <a href="http://bugs.debian.org/508289">break NFS mounting</a> and
1036 <a href="http://bugs.debian.org/581586">network setup</a> when
1037 parallel booting is enabled.  No idea why, but the wicd maintainer
1038 seem to be on the case.</li>
1039
1040 <li>The nvidia X driver seem to
1041 <a href="http://bugs.debian.org/583312">have a race condition</a>
1042 triggered more easily when parallel booting is in effect.  The
1043 maintainer is on the case.</li>
1044
1045 <li>The sysv-rc package fail to properly enable dependency based boot
1046 sequencing (the shutdown is broken) when old file-rc users
1047 <a href="http://bugs.debian.org/575080">try to switch back</a> to
1048 sysv-rc.  One way to solve it would be for file-rc to create
1049 /etc/init.d/.legacy-bootordering, and another is to try to make
1050 sysv-rc more robust.  Will investigate some more and probably upload a
1051 workaround in sysv-rc to help those trying to move from file-rc to
1052 sysv-rc get a working shutdown.</li>
1053
1054 </ul></p>
1055
1056 <p>All in all not many surprising issues, and all of them seem
1057 solvable before Squeeze is released.  In addition to these there are
1058 some packages with bugs in their dependencies and run level settings,
1059 which I expect will be fixed in a reasonable time span.</p>
1060
1061 <p>If you report any problems with dependencies in init.d scripts to
1062 the BTS, please usertag the report to get it to show up at
1063 <a href="http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=initscripts-ng-devel@lists.alioth.debian.org">the
1064 list of usertagged bugs related to this</a>.</p>
1065
1066 <p>Update: Correct bug number to file-rc issue.</p>
1067
1068  </div>
1069  <div class="tags">
1070
1071
1072
1073   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
1074
1075  </div>
1076 </div>
1077 <div class="padding"></div>
1078
1079 <div class="entry">
1080  <div class="title">
1081  <a href="http://people.skolelinux.org/pere/blog/KDM_fail_at_boot_with_NVidia_cards___and_no_one_try_to_fix_it_.html">KDM fail at boot with NVidia cards - and no one try to fix it?</a>
1082  </div>
1083  <div class="date">
1084   2010-06-01 17:05
1085  </div>
1086
1087  <div class="body">
1088
1089 <p>It is strange to watch how a bug in Debian causing KDM to fail to
1090 start at boot when an NVidia video card is used is handled.  The
1091 problem seem to be that the nvidia X.org driver uses a long time to
1092 initialize, and this duration is longer than kdm is configured to
1093 wait.</p>
1094
1095 <p>I came across two bugs related to this issue,
1096 <a href="http://bugs.debian.org/583312">#583312</a> initially filed
1097 against initscripts and passed on to nvidia-glx when it became obvious
1098 that the nvidia drivers were involved, and
1099 <a href="http://bugs.debian.org/524751">#524751</a> initially filed against
1100 kdm and passed on to src:nvidia-graphics-drivers for unknown reasons.</p>
1101
1102 <p>To me, it seem that no-one is interested in actually solving the
1103 problem nvidia video card owners experience and make sure the Debian
1104 distribution work out of the box for these users.  The nvidia driver
1105 maintainers expect kdm to be set up to wait longer, while kdm expect
1106 the nvidia driver maintainers to fix the driver to start faster, and
1107 while they wait for each other I guess the users end up switching to a
1108 distribution that work for them.  I have no idea what the solution is,
1109 but I am pretty sure that waiting for each other is not it.</p>
1110
1111 <p>I wonder why we end up handling bugs this way.</p>
1112
1113  </div>
1114  <div class="tags">
1115
1116
1117
1118   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
1119
1120  </div>
1121 </div>
1122 <div class="padding"></div>
1123
1124 <div class="entry">
1125  <div class="title">
1126  <a href="http://people.skolelinux.org/pere/blog/Sitesummary_tip__Listing_computer_hardware_models_used_at_site.html">Sitesummary tip: Listing computer hardware models used at site</a>
1127  </div>
1128  <div class="date">
1129   2010-06-03 12:05
1130  </div>
1131
1132  <div class="body">
1133
1134 <p>When using sitesummary at a site to track machines, it is possible
1135 to get a list of the machine types in use thanks to the DMI
1136 information extracted from each machine.  The script to do so is
1137 included in the sitesummary package, and here is example output from
1138 the Skolelinux build servers:</p>
1139
1140 <blockquote><pre>
1141 maintainer:~# /usr/lib/sitesummary/hardware-model-summary
1142   vendor                    count
1143   Dell Computer Corporation     1
1144     PowerEdge 1750              1
1145   IBM                           1
1146     eserver xSeries 345 -[8670M1X]-     1
1147   Intel                         2
1148   [no-dmi-info]                 3
1149 maintainer:~#
1150 </pre></blockquote>
1151
1152 <p>The quality of the report depend on the quality of the DMI tables
1153 provided in each machine.  Here there are Intel machines without model
1154 information listed with Intel as vendor and mo model, and virtual Xen
1155 machines listed as [no-dmi-info].  One can add -l as a command line
1156 option to list the individual machines.</p>
1157
1158 <p>A larger list is
1159 <a href="http://narvikskolen.no/sitesummary/">available from the the
1160 city of Narvik</a>, which uses Skolelinux on all their shools and also
1161 provide the basic sitesummary report publicly.  In their report there
1162 are ~1400 machines. I know they use both Ubuntu and Skolelinux on
1163 their machines, and as sitesummary is available in both distributions,
1164 it is trivial to get all of them to report to the same central
1165 collector.</p>
1166
1167  </div>
1168  <div class="tags">
1169
1170
1171
1172   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary</a>.
1173
1174  </div>
1175 </div>
1176 <div class="padding"></div>
1177
1178 <div class="entry">
1179  <div class="title">
1180  <a href="http://people.skolelinux.org/pere/blog/A_manual_for_standards_wars___.html">A manual for standards wars...</a>
1181  </div>
1182  <div class="date">
1183   2010-06-06 14:15
1184  </div>
1185
1186  <div class="body">
1187
1188 <p>Via the
1189 <a href="http://feedproxy.google.com/~r/robweir/antic-atom/~3/QzU4RgoAGMg/weekly-links-10.html">blog
1190 of Rob Weir</a> I came across the very interesting essay named
1191 <a href="http://faculty.haas.berkeley.edu/shapiro/wars.pdf">The Art of
1192 Standards Wars</a> (PDF 25 pages).  I recommend it for everyone
1193 following the standards wars of today.</p>
1194
1195  </div>
1196  <div class="tags">
1197
1198
1199
1200   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/standard">standard</a>.
1201
1202  </div>
1203 </div>
1204 <div class="padding"></div>
1205
1206 <div class="entry">
1207  <div class="title">
1208  <a href="http://people.skolelinux.org/pere/blog/Skolelinux_er_laget_for_sentraldrifting__naturligvis.html">Skolelinux er laget for sentraldrifting, naturligvis</a>
1209  </div>
1210  <div class="date">
1211   2010-06-09 12:30
1212  </div>
1213
1214  <div class="body">
1215
1216 <p>Det er merkelig hvordan myter om Skolelinux overlever.  En slik
1217 myte er at Skolelinux ikke kan sentraldriftes og ha sentralt plasserte
1218 tjenermaskiner.  I siste Computerworld Norge er
1219 <a href="http://www.idg.no/computerworld/article169432.ece">IT-sjef
1220 Viggo Billdal i Steinkjer intervjuet</a>, og forteller uten
1221 blygsel:</p>
1222
1223 <blockquote><p>Vi hadde Skolelinux, men det har vi sluttet med. Vi testet
1224 om det lønte seg med Microsoft eller en åpen plattform. Vi fant ut at
1225 Microsoft egentlig var totalt sett bedre egnet. Det var store
1226 driftskostnader med Skolelinux, blant annet på grunn av
1227 desentraliserte servere. Det var komplisert, så vi gikk vekk fra det
1228 og bruker nå bare Windows.</p></blockquote>
1229
1230 <p>En <a
1231 href="https://init.linpro.no/pipermail/skolelinux.no/bruker/2010-June/009101.html">rask
1232 sjekk</a> mot den norske brukerlista i Skolelinuxprosjektet forteller
1233 at Steinkjers forsøk foregikk fram til 2004/2005, og at Røysing skole
1234 i Steinkjer skal ha vært svært fornøyd med Skolelinux men at kommunen
1235 overkjørte skolen og krevde at de gikk over til Windows.  Et søk på
1236 nettet sendte meg til
1237 <a href="http://www.dn.no/multimedia/archive/00090/Dagens_it_nr__18_90826a.pdf">Dagens
1238 IT nr. 18 2005</a> hvor en kan lese på side 18:</p>
1239
1240 <blockquote><p>Inge Tømmerås ved Røysing skole i Steinkjer kjører ennå
1241 Microsoft, men forteller at kompetanseutfordringen med Skolelinux ikke
1242 var så stor.   Jeg syntes Skolelinux var utrolig lett å drifte uten
1243 forkunnskaper. Men man må jo selvsagt ha tilgang på ekstern kompetanse
1244 til installasjoner og maskinvarefeil, sier Tømmerås.</p></blockquote>
1245
1246 <p>Som systemarkitekten bak Skolelinux, kan jeg bare riste på hodet
1247 over påstanden om at Skolelinux krever desentraliserte tjenere.
1248 Skolelinux-arkitekturen er laget for sentralisert drift og plassering
1249 av tjenerne lokalt eller sentralt alt etter behov og nettkapasitet.
1250 Den er modellert på nettverks- og tjenerløsningen som brukes på
1251 Universitetet i Tromsø og Oslo, der jeg jobber med utvikling av
1252 driftstjenester.  Dette er det heldigvis noen som har fått med seg, og
1253 jeg er glad for å kunne sitere fra en kommentar på den overnevnte
1254 artikkelen.  Min venn og gamle kollega Sturle Sunde forteller der:
1255
1256 <blockquote>
1257 <p>I Flora kommune køyrer vi Skulelinux på skular med alt frå 15 til
1258 meir enn 500 elevar. Dei store skulane har eigen tenar, for det er
1259 mest praktisk. Eg, som er driftsansvarleg for heile nettet, ser
1260 sjeldan dei tenarane fysisk, men at dei står der gjer skulane mindre
1261 avhengige av eksterne linjer som er trege eller dyre. Dei minste
1262 skulane har ikkje eigen tenar. Å bruke sentral tenar er heller ikkje
1263 noko problem. Småskulane klarar seg fint med 1 mbit-linje til ein
1264 sentral tenar eller tenaren på ein større skule.</p>
1265
1266 <p>Det beste med Skulelinux er halvtjukke klientar. Dei treng ikkje
1267 harddisk og brukar minimalt med ressursar på tenaren fordi dei køyrer
1268 programma lokalt. Eit klasserom med 30 sju-åtte år gamle maskiner har
1269 mykje meir CPU og RAM totalt enn nokon moderne tenar til under
1270 millionen. Det trengst to kommandoar på den sentrale tenaren for å
1271 oppdatere alle klientane, både tynne og halvtjukke. Vi har ingen
1272 problem med diskar som ryk heller, som var eit problem før fordi
1273 elevane sat og sparka i maskinene. Og dei krev lite bandbreidde i
1274 nettet, so det er fullt mogleg å køyre slike på småskular med trege
1275 linjer mot tenaren på ein større skule.</p>
1276
1277 <p>Flora kommune har nesten 800 Linux-maskiner i sitt skulenett, og
1278 ein person som tek seg av drift av heile nettet, inkludert tenarar,
1279 klientar, operativsystem, programvare, heimekontorløysing og
1280 administrasjon av brukarar.</p>
1281
1282 <p>No skal det seiast at vi ikkje køyrer rein Skulelinux ut av
1283 boksen. Vi har gjort ein del tilpassingar mot noko Novell-greier som
1284 var der frå før, og som har komplisert installasjonen vår. Etter at
1285 oppsettet var gjort har løysinga vore stabil og kravd minimalt med
1286 arbeid.</p>
1287 </blockquote>
1288
1289 <p>Jeg vet at Narvik, Harstad og Oslo er kommuner der Skolelinux
1290 sentraldriftes med sentrale tjenere.  Det forteller meg at Steinkjers
1291 IT-sjef neppe bør skylde på Skolelinux-løsningen for sine 5 år gamle
1292 minner.</p>
1293
1294  </div>
1295  <div class="tags">
1296
1297
1298
1299   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
1300
1301  </div>
1302 </div>
1303 <div class="padding"></div>
1304
1305 <div class="entry">
1306  <div class="title">
1307  <a href="http://people.skolelinux.org/pere/blog/Automatic_upgrade_testing_from_Lenny_to_Squeeze.html">Automatic upgrade testing from Lenny to Squeeze</a>
1308  </div>
1309  <div class="date">
1310   2010-06-11 22:50
1311  </div>
1312
1313  <div class="body">
1314
1315 <p>The last few days I have done some upgrade testing in Debian, to
1316 see if the upgrade from Lenny to Squeeze will go smoothly.  A few bugs
1317 have been discovered and reported in the process
1318 (<a href="http://bugs.debian.org/585410">#585410</a> in nagios3-cgi,
1319 <a href="http://bugs.debian.org/584879">#584879</a> already fixed in
1320 enscript and <a href="http://bugs.debian.org/584861">#584861</a> in
1321 kdebase-workspace-data), and to get a more regular testing going on, I
1322 am working on a script to automate the test.</p>
1323
1324 <p>The idea is to create a Lenny chroot and use tasksel to install a
1325 Gnome or KDE desktop installation inside the chroot before upgrading
1326 it.  To ensure no services are started in the chroot, a policy-rc.d
1327 script is inserted.  To make sure tasksel believe it is to install a
1328 desktop on a laptop, the tasksel tests are replaced in the chroot
1329 (only acceptable because this is a throw-away chroot).</p>
1330
1331 <p>A naive upgrade from Lenny to Squeeze using aptitude dist-upgrade
1332 currently always fail because udev refuses to upgrade with the kernel
1333 in Lenny, so to avoid that problem the file /etc/udev/kernel-upgrade
1334 is created.  The bug report
1335 <a href="http://bugs.debian.org/566000">#566000</a> make me suspect
1336 this problem do not trigger in a chroot, but I touch the file anyway
1337 to make sure the upgrade go well.  Testing on virtual and real
1338 hardware have failed me because of udev so far, and creating this file
1339 do the trick in such settings anyway.  This is a
1340 <a href="http://www.linuxquestions.org/questions/debian-26/failed-dist-upgrade-due-to-udev-config_sysfs_deprecated-nonsense-804130/">known
1341 issue</a> and the current udev behaviour is intended by the udev
1342 maintainer because he lack the resources to rewrite udev to keep
1343 working with old kernels or something like that.  I really wish the
1344 udev upstream would keep udev backwards compatible, to avoid such
1345 upgrade problem, but given that they fail to do so, I guess
1346 documenting the way out of this mess is the best option we got for
1347 Debian Squeeze.</p>
1348
1349 <p>Anyway, back to the task at hand, testing upgrades.  This test
1350 script, which I call <tt>upgrade-test</tt> for now, is doing the
1351 trick:</p>
1352
1353 <blockquote><pre>
1354 #!/bin/sh
1355 set -ex
1356
1357 if [ "$1" ] ; then
1358     desktop=$1
1359 else
1360     desktop=gnome
1361 fi
1362
1363 from=lenny
1364 to=squeeze
1365
1366 exec &lt; /dev/null
1367 unset LANG
1368 mirror=http://ftp.skolelinux.org/debian
1369 tmpdir=chroot-$from-upgrade-$to-$desktop
1370 fuser -mv .
1371 debootstrap $from $tmpdir $mirror
1372 chroot $tmpdir aptitude update
1373 cat > $tmpdir/usr/sbin/policy-rc.d &lt;&lt;EOF
1374 #!/bin/sh
1375 exit 101
1376 EOF
1377 chmod a+rx $tmpdir/usr/sbin/policy-rc.d
1378 exit_cleanup() {
1379     umount $tmpdir/proc
1380 }
1381 mount -t proc proc $tmpdir/proc
1382 # Make sure proc is unmounted also on failure
1383 trap exit_cleanup EXIT INT
1384
1385 chroot $tmpdir aptitude -y install debconf-utils
1386
1387 # Make sure tasksel autoselection trigger.  It need the test scripts
1388 # to return the correct answers.
1389 echo tasksel tasksel/desktop multiselect $desktop | \
1390     chroot $tmpdir debconf-set-selections
1391
1392 # Include the desktop and laptop task
1393 for test in desktop laptop ; do
1394     echo > $tmpdir/usr/lib/tasksel/tests/$test &lt;&lt;EOF
1395 #!/bin/sh
1396 exit 2
1397 EOF
1398     chmod a+rx $tmpdir/usr/lib/tasksel/tests/$test
1399 done
1400
1401 DEBIAN_FRONTEND=noninteractive
1402 DEBIAN_PRIORITY=critical
1403 export DEBIAN_FRONTEND DEBIAN_PRIORITY
1404 chroot $tmpdir tasksel --new-install
1405
1406 echo deb $mirror $to main > $tmpdir/etc/apt/sources.list
1407 chroot $tmpdir aptitude update
1408 touch $tmpdir/etc/udev/kernel-upgrade
1409 chroot $tmpdir aptitude -y dist-upgrade
1410 fuser -mv
1411 </pre></blockquote>
1412
1413 <p>I suspect it would be useful to test upgrades with both apt-get and
1414 with aptitude, but I have not had time to look at how they behave
1415 differently so far.  I hope to get a cron job running to do the test
1416 regularly and post the result on the web.  The Gnome upgrade currently
1417 work, while the KDE upgrade fail because of the bug in
1418 kdebase-workspace-data</p>
1419
1420 <p>I am not quite sure what kind of extract from the huge upgrade logs
1421 (KDE 167 KiB, Gnome 516 KiB) it make sense to include in this blog
1422 post, so I will refrain from trying.  I can report that for Gnome,
1423 aptitude report 760 packages upgraded, 448 newly installed, 129 to
1424 remove and 1 not upgraded and 1024MB need to be downloaded while for
1425 KDE the same numbers are 702 packages upgraded, 507 newly installed,
1426 193 to remove and 0 not upgraded and 1117MB need to be downloaded</p>
1427
1428 <p>I am very happy to notice that the Gnome desktop + laptop upgrade
1429 is able to migrate to dependency based boot sequencing and parallel
1430 booting without a hitch.  Was unsure if there were still bugs with
1431 packages failing to clean up their obsolete init.d script during
1432 upgrades, and no such problem seem to affect the Gnome desktop+laptop
1433 packages.</p>
1434
1435  </div>
1436  <div class="tags">
1437
1438
1439
1440   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
1441
1442  </div>
1443 </div>
1444 <div class="padding"></div>
1445
1446 <div class="entry">
1447  <div class="title">
1448  <a href="http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__removals_by_apt_and_aptitude.html">Lenny->Squeeze upgrades, removals by apt and aptitude</a>
1449  </div>
1450  <div class="date">
1451   2010-06-13 09:05
1452  </div>
1453
1454  <div class="body">
1455
1456 <p>My
1457 <a href="http://people.skolelinux.org/pere/blog/Automatic_upgrade_testing_from_Lenny_to_Squeeze.html">testing
1458 of Debian upgrades</a> from Lenny to Squeeze continues, and I've
1459 finally made the upgrade logs available from
1460 <a href="http://people.skolelinux.org/pere/debian-upgrade-testing/">http://people.skolelinux.org/pere/debian-upgrade-testing/</a>.
1461 I am now testing dist-upgrade of Gnome and KDE in a chroot using both
1462 apt and aptitude, and found their differences interesting.  This time
1463 I will only focus on their removal plans.</p>
1464
1465 <p>After installing a Gnome desktop and the laptop task, apt-get wants
1466 to remove 72 packages when dist-upgrading from Lenny to Squeeze.  The
1467 surprising part is that it want to remove xorg and all
1468 xserver-xorg-video* drivers.  Clearly not a good choice, but I am not
1469 sure why.  When asking aptitude to do the same, it want to remove 129
1470 packages, but most of them are library packages I suspect are no
1471 longer needed.  Both of them want to remove bluetooth packages, which
1472 I do not know.  Perhaps these bluetooth packages are obsolete?</p>
1473
1474 <p>For KDE, apt-get want to remove 82 packages, among them kdebase
1475 which seem like a bad idea and xorg the same way as with Gnome. Asking
1476 aptitude for the same, it wants to remove 192 packages, none which are
1477 too surprising.</p>
1478
1479 <p>I guess the removal of xorg during upgrades should be investigated
1480 and avoided, and perhaps others as well.  Here are the complete list
1481 of planned removals.  The complete logs is available from the URL
1482 above.  Note if you want to repeat these tests, that the upgrade test
1483 for kde+apt-get hung in the tasksel setup because of dpkg asking
1484 conffile questions.  No idea why.  I worked around it by using
1485 '<tt>echo >> /proc/<em>pidofdpkg</em>/fd/0</tt>' to tell dpkg to
1486 continue.</p>
1487
1488 <p><b>apt-get gnome 72</b>
1489 <br>bluez-gnome cupsddk-drivers deskbar-applet gnome
1490   gnome-desktop-environment gnome-network-admin gtkhtml3.14
1491   iceweasel-gnome-support libavcodec51 libdatrie0 libgdl-1-0
1492   libgnomekbd2 libgnomekbdui2 libmetacity0 libslab0 libxcb-xlib0
1493   nautilus-cd-burner python-gnome2-desktop python-gnome2-extras
1494   serpentine swfdec-mozilla update-manager xorg xserver-xorg
1495   xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
1496   xserver-xorg-input-kbd xserver-xorg-input-mouse
1497   xserver-xorg-input-synaptics xserver-xorg-input-wacom
1498   xserver-xorg-video-all xserver-xorg-video-apm xserver-xorg-video-ark
1499   xserver-xorg-video-ati xserver-xorg-video-chips
1500   xserver-xorg-video-cirrus xserver-xorg-video-cyrix
1501   xserver-xorg-video-dummy xserver-xorg-video-fbdev
1502   xserver-xorg-video-glint xserver-xorg-video-i128
1503   xserver-xorg-video-i740 xserver-xorg-video-imstt
1504   xserver-xorg-video-intel xserver-xorg-video-mach64
1505   xserver-xorg-video-mga xserver-xorg-video-neomagic
1506   xserver-xorg-video-nsc xserver-xorg-video-nv
1507   xserver-xorg-video-openchrome xserver-xorg-video-r128
1508   xserver-xorg-video-radeon xserver-xorg-video-radeonhd
1509   xserver-xorg-video-rendition xserver-xorg-video-s3
1510   xserver-xorg-video-s3virge xserver-xorg-video-savage
1511   xserver-xorg-video-siliconmotion xserver-xorg-video-sis
1512   xserver-xorg-video-sisusb xserver-xorg-video-tdfx
1513   xserver-xorg-video-tga xserver-xorg-video-trident
1514   xserver-xorg-video-tseng xserver-xorg-video-v4l
1515   xserver-xorg-video-vesa xserver-xorg-video-vga
1516   xserver-xorg-video-vmware xserver-xorg-video-voodoo xulrunner-1.9
1517   xulrunner-1.9-gnome-support</p>
1518
1519 <p><b>aptitude gnome 129</b>
1520
1521 <br>bluez-gnome bluez-utils cpp-4.3 cupsddk-drivers dhcdbd
1522   djvulibre-desktop finger gnome-app-install gnome-mount
1523   gnome-network-admin gnome-spell gnome-vfs-obexftp
1524   gnome-volume-manager gstreamer0.10-gnomevfs gtkhtml3.14 libao2
1525   libavahi-compat-libdnssd1 libavahi-core5 libavcodec51 libbluetooth2
1526   libcamel1.2-11 libcdio7 libcucul0 libcupsys2 libcurl3 libdatrie0
1527   libdirectfb-1.0-0 libdvdread3 libedataserver1.2-9 libeel2-2.20
1528   libeel2-data libepc-1.0-1 libepc-ui-1.0-1 libfaad0 libgail-common
1529   libgd2-noxpm libgda3-3 libgda3-common libgdl-1-0 libgdl-1-common
1530   libggz2 libggzcore9 libggzmod4 libgksu1.2-0 libgksuui1.0-1 libgmyth0
1531   libgnomecups1.0-1 libgnomekbd2 libgnomekbdui2 libgnomeprint2.2-0
1532   libgnomeprint2.2-data libgnomeprintui2.2-0 libgnomeprintui2.2-common
1533   libgnomevfs2-bin libgpod3 libgraphviz4 libgtkhtml2-0
1534   libgtksourceview-common libgtksourceview1.0-0 libgucharmap6
1535   libhesiod0 libicu38 libiw29 libkpathsea4 libltdl3 libmagick++10
1536   libmagick10 libmalaga7 libmetacity0 libmtp7 libmysqlclient15off
1537   libnautilus-burn4 libneon27 libnm-glib0 libnm-util0 libopal-2.2
1538   libosp5 libparted1.8-10 libpoppler-glib3 libpoppler3 libpt-1.10.10
1539   libpt-1.10.10-plugins-alsa libpt-1.10.10-plugins-v4l libraw1394-8
1540   libsensors3 libslab0 libsmbios2 libsoup2.2-8 libssh2-1
1541   libsuitesparse-3.1.0 libswfdec-0.6-90 libtalloc1 libtotem-plparser10
1542   libtrackerclient0 libxalan2-java libxalan2-java-gcj libxcb-xlib0
1543   libxerces2-java libxerces2-java-gcj libxklavier12 libxtrap6
1544   libxxf86misc1 libzephyr3 mysql-common nautilus-cd-burner
1545   openoffice.org-writer2latex openssl-blacklist p7zip
1546   python-4suite-xml python-eggtrayicon python-gnome2-desktop
1547   python-gnome2-extras python-gtkhtml2 python-gtkmozembed
1548   python-numeric python-sexy serpentine svgalibg1 swfdec-gnome
1549   swfdec-mozilla totem-gstreamer update-manager wodim
1550   xserver-xorg-video-cyrix xserver-xorg-video-imstt
1551   xserver-xorg-video-nsc xserver-xorg-video-v4l xserver-xorg-video-vga
1552   zip</p>
1553
1554 <p><b>apt-get kde 82</b>
1555
1556 <br>cupsddk-drivers karm kaudiocreator kcoloredit kcontrol kde kde-core
1557   kdeaddons kdeartwork kdebase kdebase-bin kdebase-bin-kde3
1558   kdebase-kio-plugins kdesktop kdeutils khelpcenter kicker
1559   kicker-applets knewsticker kolourpaint konq-plugins konqueror korn
1560   kpersonalizer kscreensaver ksplash libavcodec51 libdatrie0 libkiten1
1561   libxcb-xlib0 quanta superkaramba texlive-base-bin xorg xserver-xorg
1562   xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
1563   xserver-xorg-input-kbd xserver-xorg-input-mouse
1564   xserver-xorg-input-synaptics xserver-xorg-input-wacom
1565   xserver-xorg-video-all xserver-xorg-video-apm xserver-xorg-video-ark
1566   xserver-xorg-video-ati xserver-xorg-video-chips
1567   xserver-xorg-video-cirrus xserver-xorg-video-cyrix
1568   xserver-xorg-video-dummy xserver-xorg-video-fbdev
1569   xserver-xorg-video-glint xserver-xorg-video-i128
1570   xserver-xorg-video-i740 xserver-xorg-video-imstt
1571   xserver-xorg-video-intel xserver-xorg-video-mach64
1572   xserver-xorg-video-mga xserver-xorg-video-neomagic
1573   xserver-xorg-video-nsc xserver-xorg-video-nv
1574   xserver-xorg-video-openchrome xserver-xorg-video-r128
1575   xserver-xorg-video-radeon xserver-xorg-video-radeonhd
1576   xserver-xorg-video-rendition xserver-xorg-video-s3
1577   xserver-xorg-video-s3virge xserver-xorg-video-savage
1578   xserver-xorg-video-siliconmotion xserver-xorg-video-sis
1579   xserver-xorg-video-sisusb xserver-xorg-video-tdfx
1580   xserver-xorg-video-tga xserver-xorg-video-trident
1581   xserver-xorg-video-tseng xserver-xorg-video-v4l
1582   xserver-xorg-video-vesa xserver-xorg-video-vga
1583   xserver-xorg-video-vmware xserver-xorg-video-voodoo xulrunner-1.9</p>
1584
1585 <p><b>aptitude kde 192</b>
1586 <br>bluez-utils cpp-4.3 cupsddk-drivers cvs dcoprss dhcdbd
1587   djvulibre-desktop dosfstools eyesapplet fifteenapplet finger gettext
1588   ghostscript-x imlib-base imlib11 indi kandy karm kasteroids
1589   kaudiocreator kbackgammon kbstate kcoloredit kcontrol kcron kdat
1590   kdeadmin-kfile-plugins kdeartwork-misc kdeartwork-theme-window
1591   kdebase-bin-kde3 kdebase-kio-plugins kdeedu-data
1592   kdegraphics-kfile-plugins kdelirc kdemultimedia-kappfinder-data
1593   kdemultimedia-kfile-plugins kdenetwork-kfile-plugins
1594   kdepim-kfile-plugins kdepim-kio-plugins kdeprint kdesktop kdessh
1595   kdict kdnssd kdvi kedit keduca kenolaba kfax kfaxview kfouleggs
1596   kghostview khelpcenter khexedit kiconedit kitchensync klatin
1597   klickety kmailcvt kmenuedit kmid kmilo kmoon kmrml kodo kolourpaint
1598   kooka korn kpager kpdf kpercentage kpf kpilot kpoker kpovmodeler
1599   krec kregexpeditor ksayit ksim ksirc ksirtet ksmiletris ksmserver
1600   ksnake ksokoban ksplash ksvg ksysv ktip ktnef kuickshow kverbos
1601   kview kviewshell kvoctrain kwifimanager kwin kwin4 kworldclock
1602   kxsldbg libakode2 libao2 libarts1-akode libarts1-audiofile
1603   libarts1-mpeglib libarts1-xine libavahi-compat-libdnssd1
1604   libavahi-core5 libavc1394-0 libavcodec51 libbluetooth2
1605   libboost-python1.34.1 libcucul0 libcurl3 libcvsservice0 libdatrie0
1606   libdirectfb-1.0-0 libdjvulibre21 libdvdread3 libfaad0 libfreebob0
1607   libgail-common libgd2-noxpm libgraphviz4 libgsmme1c2a libgtkhtml2-0
1608   libicu38 libiec61883-0 libindex0 libiw29 libk3b3 libkcal2b libkcddb1
1609   libkdeedu3 libkdepim1a libkgantt0 libkiten1 libkleopatra1 libkmime2
1610   libkpathsea4 libkpimexchange1 libkpimidentities1 libkscan1
1611   libksieve0 libktnef1 liblockdev1 libltdl3 libmagick10 libmimelib1c2a
1612   libmozjs1d libmpcdec3 libneon27 libnm-util0 libopensync0 libpisock9
1613   libpoppler-glib3 libpoppler-qt2 libpoppler3 libraw1394-8 libsmbios2
1614   libssh2-1 libsuitesparse-3.1.0 libtalloc1 libtiff-tools
1615   libxalan2-java libxalan2-java-gcj libxcb-xlib0 libxerces2-java
1616   libxerces2-java-gcj libxtrap6 mpeglib networkstatus
1617   openoffice.org-writer2latex pmount poster psutils quanta quanta-data
1618   superkaramba svgalibg1 tex-common texlive-base texlive-base-bin
1619   texlive-common texlive-doc-base texlive-fonts-recommended
1620   xserver-xorg-video-cyrix xserver-xorg-video-imstt
1621   xserver-xorg-video-nsc xserver-xorg-video-v4l xserver-xorg-video-vga
1622   xulrunner-1.9</p>
1623
1624
1625  </div>
1626  <div class="tags">
1627
1628
1629
1630   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
1631
1632  </div>
1633 </div>
1634 <div class="padding"></div>
1635
1636 <div class="entry">
1637  <div class="title">
1638  <a href="http://people.skolelinux.org/pere/blog/Idea_for_a_change_to_LDAP_schemas_allowing_DNS_and_DHCP_info_to_be_combined_into_one_object.html">Idea for a change to LDAP schemas allowing DNS and DHCP info to be combined into one object</a>
1639  </div>
1640  <div class="date">
1641   2010-06-24 00:35
1642  </div>
1643
1644  <div class="body">
1645
1646 <p>A while back, I
1647 <a href="http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html">complained
1648 about the fact</a> that it is not possible with the provided schemas
1649 for storing DNS and DHCP information in LDAP to combine the two sets
1650 of information into one LDAP object representing a computer.</p>
1651
1652 <p>In the mean time, I discovered that a simple fix would be to make
1653 the dhcpHost object class auxiliary, to allow it to be combined with
1654 the dNSDomain object class, and thus forming one object for one
1655 computer when storing both DHCP and DNS information in LDAP.</p>
1656
1657 <p>If I understand this correctly, it is not safe to do this change
1658 without also changing the assigned number for the object class, and I
1659 do not know enough about LDAP schema design to do that properly for
1660 Debian Edu.</p>
1661
1662 <p>Anyway, for future reference, this is how I believe we could change
1663 the
1664 <a href="http://tools.ietf.org/html/draft-ietf-dhc-ldap-schema-00">DHCP
1665 schema</a> to solve at least part of the problem with the LDAP schemas
1666 available today from IETF.</p>
1667
1668 <pre>
1669 --- dhcp.schema    (revision 65192)
1670 +++ dhcp.schema    (working copy)
1671 @@ -376,7 +376,7 @@
1672  objectclass ( 2.16.840.1.113719.1.203.6.6
1673         NAME 'dhcpHost'
1674         DESC 'This represents information about a particular client'
1675 -       SUP top
1676 +       SUP top AUXILIARY
1677         MUST cn
1678         MAY  (dhcpLeaseDN $ dhcpHWAddress $ dhcpOptionsDN $ dhcpStatements $ dhcpComments $ dhcpOption)
1679         X-NDS_CONTAINMENT ('dhcpService' 'dhcpSubnet' 'dhcpGroup') )
1680 </pre>
1681
1682 <p>I very much welcome clues on how to do this properly for Debian
1683 Edu/Squeeze.  We provide the DHCP schema in our debian-edu-config
1684 package, and should thus be free to rewrite it as we see fit.</p>
1685
1686 <p>If you want to help out with implementing this for Debian Edu,
1687 please contact us on debian-edu@lists.debian.org.</p>
1688
1689  </div>
1690  <div class="tags">
1691
1692
1693
1694   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
1695
1696  </div>
1697 </div>
1698 <div class="padding"></div>
1699
1700 <div class="entry">
1701  <div class="title">
1702  <a href="http://people.skolelinux.org/pere/blog/LUMA__a_very_nice_LDAP_GUI.html">LUMA, a very nice LDAP GUI</a>
1703  </div>
1704  <div class="date">
1705   2010-06-28 00:30
1706  </div>
1707
1708  <div class="body">
1709
1710 <p>The last few days I have been looking into the status of the LDAP
1711 directory in Debian Edu, and in the process I started to miss a GUI
1712 tool to browse the LDAP tree.  The only one I was able to find in
1713 Debian/Squeeze and Lenny is
1714 <a href="http://luma.sourceforge.net/">LUMA</a>, which has proved to
1715 be a great tool to get a overview of the current LDAP directory
1716 populated by default in Skolelinux.  Thanks to it, I have been able to
1717 find empty and obsolete subtrees, misplaced objects and duplicate
1718 objects.  It will be installed by default in Debian/Squeeze.  If you
1719 are working with LDAP, give it a go. :)</p>
1720
1721 <p>I did notice one problem with it I have not had time to report to
1722 the BTS yet.  There is no .desktop file in the package, so the tool do
1723 not show up in the Gnome and KDE menus, but only deep down in in the
1724 Debian submenu in KDE.  I hope that can be fixed before Squeeze is
1725 released.</p>
1726
1727 <p>I have not yet been able to get it to modify the tree yet.  I would
1728 like to move objects and remove subtrees directly in the GUI, but have
1729 not found a way to do that with LUMA yet.  So in the mean time, I use
1730 <a href="http://www.lichteblau.com/ldapvi/">ldapvi</a> for that.</p>
1731
1732 <p>If you have tips on other GUI tools for LDAP that might be useful
1733 in Debian Edu, please contact us on debian-edu@lists.debian.org.</p>
1734
1735  </div>
1736  <div class="tags">
1737
1738
1739
1740   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
1741
1742  </div>
1743 </div>
1744 <div class="padding"></div>
1745
1746  <p style="text-align: right;"><a href="debian edu.rss"><img src="http://people.skolelinux.org/pere/blog/xml.gif" alt="RSS Feed" width="36" height="14"></a></p>
1747
1748
1749
1750
1751 <div id="sidebar">
1752
1753 <h2>Archive</h2>
1754 <ul>
1755
1756 <li>2010
1757 <ul>
1758
1759 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
1760
1761 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
1762
1763 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
1764
1765 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
1766
1767 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
1768
1769 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
1770
1771 </ul></li>
1772
1773 <li>2009
1774 <ul>
1775
1776 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
1777
1778 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
1779
1780 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
1781
1782 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
1783
1784 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
1785
1786 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
1787
1788 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
1789
1790 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
1791
1792 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
1793
1794 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
1795
1796 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
1797
1798 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
1799
1800 </ul></li>
1801
1802 <li>2008
1803 <ul>
1804
1805 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
1806
1807 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
1808
1809 </ul></li>
1810
1811 </ul>
1812
1813
1814
1815 <h2>Tags</h2>
1816 <ul>
1817
1818  <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (11)</a></li>
1819
1820  <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
1821
1822  <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
1823
1824  <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (10)</a></li>
1825
1826  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (29)</a></li>
1827
1828  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (28)</a></li>
1829
1830  <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (41)</a></li>
1831
1832  <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (1)</a></li>
1833
1834  <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (7)</a></li>
1835
1836  <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (2)</a></li>
1837
1838  <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (3)</a></li>
1839
1840  <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (1)</a></li>
1841
1842  <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
1843
1844  <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (5)</a></li>
1845
1846  <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (69)</a></li>
1847
1848  <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (79)</a></li>
1849
1850  <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (13)</a></li>
1851
1852  <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (13)</a></li>
1853
1854  <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (10)</a></li>
1855
1856  <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
1857
1858  <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (9)</a></li>
1859
1860  <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (3)</a></li>
1861
1862  <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (13)</a></li>
1863
1864  <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (1)</a></li>
1865
1866  <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (10)</a></li>
1867
1868  <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (1)</a></li>
1869
1870  <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (6)</a></li>
1871
1872 </ul>
1873
1874 </div>
1875 </body>
1876 </html>