diff --git a/blog/After_6_years_of_waiting__the_Xreset_d_feature_is_implemented.html b/blog/After_6_years_of_waiting__the_Xreset_d_feature_is_implemented.html
index 415140e918..58ef483a22 100644
--- a/blog/After_6_years_of_waiting__the_Xreset_d_feature_is_implemented.html
+++ b/blog/After_6_years_of_waiting__the_Xreset_d_feature_is_implemented.html
@@ -63,6 +63,8 @@ similar to how they use the Xsession.d framework today.
diff --git a/blog/Automatic_Munin_and_Nagios_configuration.html b/blog/Automatic_Munin_and_Nagios_configuration.html
index 8dbac7c1e0..0d785ec9d0 100644
--- a/blog/Automatic_Munin_and_Nagios_configuration.html
+++ b/blog/Automatic_Munin_and_Nagios_configuration.html
@@ -90,6 +90,8 @@ everything is taken care of.
diff --git a/blog/Avisene_i_endring.html b/blog/Avisene_i_endring.html
index e3bd3d44f5..bdb6de6bc9 100644
--- a/blog/Avisene_i_endring.html
+++ b/blog/Avisene_i_endring.html
@@ -51,6 +51,8 @@ eksisterer. Det blir spennende å se hva vi ender opp med.
diff --git a/blog/Debian_Edu___Skolelinux_based_on_Lenny_released__work_continues.html b/blog/Debian_Edu___Skolelinux_based_on_Lenny_released__work_continues.html
index 986b2a5c5f..9b74d06b0f 100644
--- a/blog/Debian_Edu___Skolelinux_based_on_Lenny_released__work_continues.html
+++ b/blog/Debian_Edu___Skolelinux_based_on_Lenny_released__work_continues.html
@@ -59,6 +59,8 @@ and have just a few weeks or months to make it happen.
diff --git a/blog/Debian_boots_quicker_and_quicker.html b/blog/Debian_boots_quicker_and_quicker.html
index c0c9a12631..004b4c7445 100644
--- a/blog/Debian_boots_quicker_and_quicker.html
+++ b/blog/Debian_boots_quicker_and_quicker.html
@@ -91,6 +91,8 @@ insserv'. Will need to test if that work. :)
diff --git a/blog/Digitale_b__ker_uten_digitale_restriksjonsmekanismer__DRM__b__r_f___mva_fritak.html b/blog/Digitale_b__ker_uten_digitale_restriksjonsmekanismer__DRM__b__r_f___mva_fritak.html
index 9e406130b0..9fcf2973e2 100644
--- a/blog/Digitale_b__ker_uten_digitale_restriksjonsmekanismer__DRM__b__r_f___mva_fritak.html
+++ b/blog/Digitale_b__ker_uten_digitale_restriksjonsmekanismer__DRM__b__r_f___mva_fritak.html
@@ -76,6 +76,8 @@ der for å se hva de har.
diff --git a/blog/FAD_lanserer_reiseregningsskjema_som_fri_programvare.html b/blog/FAD_lanserer_reiseregningsskjema_som_fri_programvare.html
index 95ee267d40..37609af293 100644
--- a/blog/FAD_lanserer_reiseregningsskjema_som_fri_programvare.html
+++ b/blog/FAD_lanserer_reiseregningsskjema_som_fri_programvare.html
@@ -122,6 +122,8 @@ gjorde det litt vanskeligere for brukeren.
diff --git a/blog/F__rste_NUUG_fordrag_sendt_p___TV.html b/blog/F__rste_NUUG_fordrag_sendt_p___TV.html
index 3aed3950d8..8449bcc4bc 100644
--- a/blog/F__rste_NUUG_fordrag_sendt_p___TV.html
+++ b/blog/F__rste_NUUG_fordrag_sendt_p___TV.html
@@ -62,6 +62,8 @@ meg, Tollef og alle andre de som deltok på møtet på TV.
diff --git a/blog/Fiksgatami_begynner____ta_form.html b/blog/Fiksgatami_begynner____ta_form.html
index 0fd14e0a72..9333fb0bd9 100644
--- a/blog/Fiksgatami_begynner____ta_form.html
+++ b/blog/Fiksgatami_begynner____ta_form.html
@@ -63,6 +63,8 @@ med dem. Dette blir bra.
diff --git a/blog/Fildeling_er_lovlig___ulovlig_fildeling_er_ulovlig.html b/blog/Fildeling_er_lovlig___ulovlig_fildeling_er_ulovlig.html
index 8fa8466814..82d2aac090 100644
--- a/blog/Fildeling_er_lovlig___ulovlig_fildeling_er_ulovlig.html
+++ b/blog/Fildeling_er_lovlig___ulovlig_fildeling_er_ulovlig.html
@@ -61,6 +61,8 @@ og fildeling av slike filer er fullt ut lovlig.
diff --git a/blog/Frikanalen_og_jul_i_studentr__det.html b/blog/Frikanalen_og_jul_i_studentr__det.html
index c7282b761e..bb5a2d8c99 100644
--- a/blog/Frikanalen_og_jul_i_studentr__det.html
+++ b/blog/Frikanalen_og_jul_i_studentr__det.html
@@ -84,6 +84,8 @@ NUUG lykkes med å få ut sine opptak med like stor suksess.
diff --git a/blog/Hva_er_egentlig_en___pen_standard_.html b/blog/Hva_er_egentlig_en___pen_standard_.html
index 2b03601acc..33fb299e9c 100644
--- a/blog/Hva_er_egentlig_en___pen_standard_.html
+++ b/blog/Hva_er_egentlig_en___pen_standard_.html
@@ -143,6 +143,8 @@ av en standard for at en standard skal kunne kalles fri og åpen.
diff --git a/blog/Hvorfor_jeg_ikke_bruker_eFaktura.html b/blog/Hvorfor_jeg_ikke_bruker_eFaktura.html
index 9db9fee407..36cb536f68 100644
--- a/blog/Hvorfor_jeg_ikke_bruker_eFaktura.html
+++ b/blog/Hvorfor_jeg_ikke_bruker_eFaktura.html
@@ -73,6 +73,8 @@ liker rett og slett ikke dagens faktureringsmodeller.
diff --git a/blog/IDG_mener_linux_i_servermarkedet_vil_vokse_med_21__i_2009.html b/blog/IDG_mener_linux_i_servermarkedet_vil_vokse_med_21__i_2009.html
index a3ba96d64e..a38d8452ed 100644
--- a/blog/IDG_mener_linux_i_servermarkedet_vil_vokse_med_21__i_2009.html
+++ b/blog/IDG_mener_linux_i_servermarkedet_vil_vokse_med_21__i_2009.html
@@ -53,6 +53,8 @@ bakgrunnskunnskapen kan jeg godt tro at IDG er inne på noe.
diff --git a/blog/Internet_leverand__rer_er_ikke_vokterne_av_sine_kunders_nettbruk.html b/blog/Internet_leverand__rer_er_ikke_vokterne_av_sine_kunders_nettbruk.html
index c9b5ff913b..39cde4b9a7 100644
--- a/blog/Internet_leverand__rer_er_ikke_vokterne_av_sine_kunders_nettbruk.html
+++ b/blog/Internet_leverand__rer_er_ikke_vokterne_av_sine_kunders_nettbruk.html
@@ -69,6 +69,8 @@ publiseres med mer brukervennlige vilkår, som CC-BY og lignende.
Yesterdays
+NUUG presentation about Kerberos was inspiring, and reminded me
+about the need to start using Kerberos in Skolelinux. Setting up a
+Kerberos server seem to be straight forward, and if we get this in
+place a long time before the Squeeze version of Debian freezes, we
+have a chance to migrate Skolelinux away from NFSv3 for the home
+directories, and over to an architecture where the infrastructure do
+not have to trust IP addresses and machines, and instead can trust
+users and cryptographic keys instead.
+
+
A challenge will be integration and administration. Is there a
+Kerberos implementation for Debian where one can control the
+administration access in Kerberos using LDAP groups? With it, the
+school administration will have to maintain access control using flat
+files on the main server, which give a huge potential for errors.
+
+
A related question I would like to know is how well Kerberos and
+pam-ccreds (offline password check) work together. Anyone know?
+
+
Next step will be to use Kerberos for access control in Lwat and
+Nagios. I have no idea how much work that will be to implement. We
+would also need to document how to integrate with Windows AD, as such
+shared network will require two Kerberos realms that need to cooperate
+to work properly.
+
+
I believe a good start would be to start using Kerberos on the
+skolelinux.no machines, and this way get ourselves experience with
+configuration and integration. A natural starting point would be
+setting up ldap.skolelinux.no as the Kerberos server, and migrate the
+rest of the machines from PAM via LDAP to PAM via Kerberos one at the
+time.
+
+
If you would like to contribute to get this working in Skolelinux,
+I recommend you to see the video recording from yesterdays NUUG
+presentation, and start using Kerberos at home. The video show show
+up in a few days.
diff --git a/blog/Litt_om_valgfusk_og_problemet_med_elektronisk_stemmegiving.html b/blog/Litt_om_valgfusk_og_problemet_med_elektronisk_stemmegiving.html
index c3281c286e..df82991874 100644
--- a/blog/Litt_om_valgfusk_og_problemet_med_elektronisk_stemmegiving.html
+++ b/blog/Litt_om_valgfusk_og_problemet_med_elektronisk_stemmegiving.html
@@ -74,6 +74,8 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?
diff --git a/blog/Norge_trenger_en_personvernforening.html b/blog/Norge_trenger_en_personvernforening.html
index 2eb5992500..48fcf6ae4c 100644
--- a/blog/Norge_trenger_en_personvernforening.html
+++ b/blog/Norge_trenger_en_personvernforening.html
@@ -58,6 +58,8 @@ nå får vi se om noen er enig.
diff --git a/blog/Opphavet_til_Skolelinux_prosjektet.html b/blog/Opphavet_til_Skolelinux_prosjektet.html
index cf6008007c..10f2e9f618 100644
--- a/blog/Opphavet_til_Skolelinux_prosjektet.html
+++ b/blog/Opphavet_til_Skolelinux_prosjektet.html
@@ -73,6 +73,8 @@ Resten er historie. :)
diff --git a/blog/Regjerningen_forlater_prinsippet_om_ingen_royalty_betaling_i_standardkatalogen_versjon_2.html b/blog/Regjerningen_forlater_prinsippet_om_ingen_royalty_betaling_i_standardkatalogen_versjon_2.html
index c78741b3ca..dd287d8cb4 100644
--- a/blog/Regjerningen_forlater_prinsippet_om_ingen_royalty_betaling_i_standardkatalogen_versjon_2.html
+++ b/blog/Regjerningen_forlater_prinsippet_om_ingen_royalty_betaling_i_standardkatalogen_versjon_2.html
@@ -74,6 +74,8 @@ høringsuttalelse, men ser ut til å ha blitt ignorert.
diff --git a/blog/Reprap_bygging_i_p__sken.html b/blog/Reprap_bygging_i_p__sken.html
index aca18916d6..e2f716dbe0 100644
--- a/blog/Reprap_bygging_i_p__sken.html
+++ b/blog/Reprap_bygging_i_p__sken.html
@@ -98,6 +98,8 @@ kommer til å bruke denne plasttypen som håndterer temperaturer mellom
diff --git a/blog/Reprap_pakke_tapt_i_posten.html b/blog/Reprap_pakke_tapt_i_posten.html
index 958af82c0f..611383bbc9 100644
--- a/blog/Reprap_pakke_tapt_i_posten.html
+++ b/blog/Reprap_pakke_tapt_i_posten.html
@@ -54,6 +54,8 @@ lenge alt er klart til Go Open
diff --git a/blog/Sikkerhet_til_sj__s_trenger_sj__kart_uten_bruksbegresninger.html b/blog/Sikkerhet_til_sj__s_trenger_sj__kart_uten_bruksbegresninger.html
index 33b2724051..23a3148592 100644
--- a/blog/Sikkerhet_til_sj__s_trenger_sj__kart_uten_bruksbegresninger.html
+++ b/blog/Sikkerhet_til_sj__s_trenger_sj__kart_uten_bruksbegresninger.html
@@ -98,6 +98,8 @@ det viser at behovet for fribruks-sjøkart er til stedet.
diff --git a/blog/Standardize_on_protocols_and_formats__not_vendors_and_applications.html b/blog/Standardize_on_protocols_and_formats__not_vendors_and_applications.html
index 12a87741e4..5484ebd401 100644
--- a/blog/Standardize_on_protocols_and_formats__not_vendors_and_applications.html
+++ b/blog/Standardize_on_protocols_and_formats__not_vendors_and_applications.html
@@ -70,6 +70,8 @@ application that do not use open network protocol or open formats.
diff --git a/blog/Taking_over_sysvinit_development.html b/blog/Taking_over_sysvinit_development.html
index 3108724db2..d631031b28 100644
--- a/blog/Taking_over_sysvinit_development.html
+++ b/blog/Taking_over_sysvinit_development.html
@@ -67,6 +67,8 @@ distributions are moving to upstart as a syvinit replacement.
diff --git a/blog/The_sorry_state_of_multimedia_browser_plugins_in_Debian.html b/blog/The_sorry_state_of_multimedia_browser_plugins_in_Debian.html
index c973ba223b..db60b50d25 100644
--- a/blog/The_sorry_state_of_multimedia_browser_plugins_in_Debian.html
+++ b/blog/The_sorry_state_of_multimedia_browser_plugins_in_Debian.html
@@ -63,6 +63,8 @@ be the only one fitting our needs. :/
diff --git a/blog/Vitenskapens_dogmer___.html b/blog/Vitenskapens_dogmer___.html
index 8397b662d7..368fc0df57 100644
--- a/blog/Vitenskapens_dogmer___.html
+++ b/blog/Vitenskapens_dogmer___.html
@@ -113,6 +113,8 @@ skyskrapere. Takke meg til en tur til månen.
diff --git a/blog/When_web_browser_developers_make_a_video_player___.html b/blog/When_web_browser_developers_make_a_video_player___.html
index d7be70701f..992105cb1f 100644
--- a/blog/When_web_browser_developers_make_a_video_player___.html
+++ b/blog/When_web_browser_developers_make_a_video_player___.html
@@ -87,6 +87,8 @@ sure hope it was using the announced Ogg Theora support. :)
diff --git a/blog/archive/2008/11/index.html b/blog/archive/2008/11/index.html
index 598d7f92b9..8c0b4cb265 100644
--- a/blog/archive/2008/11/index.html
+++ b/blog/archive/2008/11/index.html
@@ -208,6 +208,8 @@ lenge alt er klart til Go Open
diff --git a/blog/archive/2009/03/index.html b/blog/archive/2009/03/index.html
index e70ba10944..e233d8f01e 100644
--- a/blog/archive/2009/03/index.html
+++ b/blog/archive/2009/03/index.html
@@ -708,6 +708,8 @@ application that do not use open network protocol or open formats.
diff --git a/blog/archive/2009/08/index.html b/blog/archive/2009/08/index.html
index 696f132912..e03894d3a8 100644
--- a/blog/archive/2009/08/index.html
+++ b/blog/archive/2009/08/index.html
@@ -221,6 +221,8 @@ det viser at behovet for fribruks-sjøkart er til stedet.
diff --git a/blog/archive/2010/02/index.html b/blog/archive/2010/02/index.html
index 0ad8387953..7957d06837 100644
--- a/blog/archive/2010/02/index.html
+++ b/blog/archive/2010/02/index.html
@@ -74,6 +74,8 @@ and have just a few weeks or months to make it happen.
diff --git a/blog/archive/2010/04/04.rss b/blog/archive/2010/04/04.rss
new file mode 100644
index 0000000000..8d9dbb8de9
--- /dev/null
+++ b/blog/archive/2010/04/04.rss
@@ -0,0 +1,55 @@
+
+
+
+ Petter Reinholdtsen - Entries from April 2010
+ Entries from April 2010
+ ../../../
+
+
+
+ Kerberos for Debian Edu/Squeeze?
+ ../../../Kerberos_for_Debian_Edu_Squeeze_.html
+ ../../../Kerberos_for_Debian_Edu_Squeeze_.html
+ Wed, 14 Apr 2010 17:20:00 +0200
+
+<p><a href="http://www.nuug.no/aktiviteter/20100413-kerberos/">Yesterdays
+NUUG presentation</a> about Kerberos was inspiring, and reminded me
+about the need to start using Kerberos in Skolelinux. Setting up a
+Kerberos server seem to be straight forward, and if we get this in
+place a long time before the Squeeze version of Debian freezes, we
+have a chance to migrate Skolelinux away from NFSv3 for the home
+directories, and over to an architecture where the infrastructure do
+not have to trust IP addresses and machines, and instead can trust
+users and cryptographic keys instead.</p>
+
+<p>A challenge will be integration and administration. Is there a
+Kerberos implementation for Debian where one can control the
+administration access in Kerberos using LDAP groups? With it, the
+school administration will have to maintain access control using flat
+files on the main server, which give a huge potential for errors.</p>
+
+<p>A related question I would like to know is how well Kerberos and
+pam-ccreds (offline password check) work together. Anyone know?</p>
+
+<p>Next step will be to use Kerberos for access control in Lwat and
+Nagios. I have no idea how much work that will be to implement. We
+would also need to document how to integrate with Windows AD, as such
+shared network will require two Kerberos realms that need to cooperate
+to work properly.</p>
+
+<p>I believe a good start would be to start using Kerberos on the
+skolelinux.no machines, and this way get ourselves experience with
+configuration and integration. A natural starting point would be
+setting up ldap.skolelinux.no as the Kerberos server, and migrate the
+rest of the machines from PAM via LDAP to PAM via Kerberos one at the
+time.</p>
+
+<p>If you would like to contribute to get this working in Skolelinux,
+I recommend you to see the video recording from yesterdays NUUG
+presentation, and start using Kerberos at home. The video show show
+up in a few days.</p>
+
+
+
+
+
diff --git a/blog/archive/2010/04/index.html b/blog/archive/2010/04/index.html
new file mode 100644
index 0000000000..ef48bc016b
--- /dev/null
+++ b/blog/archive/2010/04/index.html
@@ -0,0 +1,200 @@
+
+
+
+ Petter Reinholdtsen: entries from April 2010
+
+
+
+
+
+
+
Yesterdays
+NUUG presentation about Kerberos was inspiring, and reminded me
+about the need to start using Kerberos in Skolelinux. Setting up a
+Kerberos server seem to be straight forward, and if we get this in
+place a long time before the Squeeze version of Debian freezes, we
+have a chance to migrate Skolelinux away from NFSv3 for the home
+directories, and over to an architecture where the infrastructure do
+not have to trust IP addresses and machines, and instead can trust
+users and cryptographic keys instead.
+
+
A challenge will be integration and administration. Is there a
+Kerberos implementation for Debian where one can control the
+administration access in Kerberos using LDAP groups? With it, the
+school administration will have to maintain access control using flat
+files on the main server, which give a huge potential for errors.
+
+
A related question I would like to know is how well Kerberos and
+pam-ccreds (offline password check) work together. Anyone know?
+
+
Next step will be to use Kerberos for access control in Lwat and
+Nagios. I have no idea how much work that will be to implement. We
+would also need to document how to integrate with Windows AD, as such
+shared network will require two Kerberos realms that need to cooperate
+to work properly.
+
+
I believe a good start would be to start using Kerberos on the
+skolelinux.no machines, and this way get ourselves experience with
+configuration and integration. A natural starting point would be
+setting up ldap.skolelinux.no as the Kerberos server, and migrate the
+rest of the machines from PAM via LDAP to PAM via Kerberos one at the
+time.
+
+
If you would like to contribute to get this working in Skolelinux,
+I recommend you to see the video recording from yesterdays NUUG
+presentation, and start using Kerberos at home. The video show show
+up in a few days.
If you would like to contribute to get this working in Skolelinux,
I recommend you to see the video recording from yesterdays NUUG
presentation, and start using Kerberos at home. The video show show
-up in a few days
+up in a few days.
diff --git a/blog/index.html b/blog/index.html
index 1278854bc4..9f9bcdb285 100644
--- a/blog/index.html
+++ b/blog/index.html
@@ -19,6 +19,57 @@
+
Yesterdays
+NUUG presentation about Kerberos was inspiring, and reminded me
+about the need to start using Kerberos in Skolelinux. Setting up a
+Kerberos server seem to be straight forward, and if we get this in
+place a long time before the Squeeze version of Debian freezes, we
+have a chance to migrate Skolelinux away from NFSv3 for the home
+directories, and over to an architecture where the infrastructure do
+not have to trust IP addresses and machines, and instead can trust
+users and cryptographic keys instead.
+
+
A challenge will be integration and administration. Is there a
+Kerberos implementation for Debian where one can control the
+administration access in Kerberos using LDAP groups? With it, the
+school administration will have to maintain access control using flat
+files on the main server, which give a huge potential for errors.
+
+
A related question I would like to know is how well Kerberos and
+pam-ccreds (offline password check) work together. Anyone know?
+
+
Next step will be to use Kerberos for access control in Lwat and
+Nagios. I have no idea how much work that will be to implement. We
+would also need to document how to integrate with Windows AD, as such
+shared network will require two Kerberos realms that need to cooperate
+to work properly.
+
+
I believe a good start would be to start using Kerberos on the
+skolelinux.no machines, and this way get ourselves experience with
+configuration and integration. A natural starting point would be
+setting up ldap.skolelinux.no as the Kerberos server, and migrate the
+rest of the machines from PAM via LDAP to PAM via Kerberos one at the
+time.
+
+
If you would like to contribute to get this working in Skolelinux,
+I recommend you to see the video recording from yesterdays NUUG
+presentation, and start using Kerberos at home. The video show show
+up in a few days.
Dagens
-kartnyhet
-er at kartverket gir ikke-kommersiell tilgang til
-en WMS-tjeneste der en til privat bruk kan hente ut bilder av
-kartutsnitt så lenge disse ikke lagres lokalt, brukes i begrenset
-oppløsning og ikke skader kartverket og rettighetshavernes omdømme og
-interesse.
-
-
I går publiserte Ivan Sanchez
-kaketesten
-som et forslag til en (av forhåpentligvis flere) måter å teste om kart
-eller kartdata er fritt tilgjengelige på. Testen er enkel, og sier
-enkelt (oversatt av meg): Et sett med geodata, eller en kart, er kun
-fritt tilgjengelig hvis noen kan gi deg en kake med det kartet på
-toppen, som en gave. Kartverkets publisering av kart feiler så vidt
-jeg kan se denne testen fullstendig. En kan slik jeg leser vilkårene
-ikke be en konditor om å lage en kake (brudd på kravet om
-ikke-kommersiell bruk) med kartverkets kart.
-
-
De som vil lage karttjenester basert på denne nye tjenesten fra
-kartverket vil gjøre det på kartverkets nåde og med sterke bindinger
-og begresninger. Det blir dermed helt uinteressant for meg. Jeg vil
-nok fortsette å bruke data fra
-OpenStreetmap.org, der jeg
-har kontrollen med tilgang til kartdataene, og kan endre på de
-underliggende dataene som jeg ønsker.
-
-
Som et eksempel, så trenger vi til en norsk
-FixMyStreet-installasjon
-tilgang til vektorutgaven av kommunegrensene. Denne nye karttjenesten
-er ubrukelig til dette.
diff --git a/blog/index.rss b/blog/index.rss
index c38b917f7b..852f53d246 100644
--- a/blog/index.rss
+++ b/blog/index.rss
@@ -6,6 +6,51 @@
+
+ Kerberos for Debian Edu/Squeeze?
+ Kerberos_for_Debian_Edu_Squeeze_.html
+ Kerberos_for_Debian_Edu_Squeeze_.html
+ Wed, 14 Apr 2010 17:20:00 +0200
+
+<p><a href="http://www.nuug.no/aktiviteter/20100413-kerberos/">Yesterdays
+NUUG presentation</a> about Kerberos was inspiring, and reminded me
+about the need to start using Kerberos in Skolelinux. Setting up a
+Kerberos server seem to be straight forward, and if we get this in
+place a long time before the Squeeze version of Debian freezes, we
+have a chance to migrate Skolelinux away from NFSv3 for the home
+directories, and over to an architecture where the infrastructure do
+not have to trust IP addresses and machines, and instead can trust
+users and cryptographic keys instead.</p>
+
+<p>A challenge will be integration and administration. Is there a
+Kerberos implementation for Debian where one can control the
+administration access in Kerberos using LDAP groups? With it, the
+school administration will have to maintain access control using flat
+files on the main server, which give a huge potential for errors.</p>
+
+<p>A related question I would like to know is how well Kerberos and
+pam-ccreds (offline password check) work together. Anyone know?</p>
+
+<p>Next step will be to use Kerberos for access control in Lwat and
+Nagios. I have no idea how much work that will be to implement. We
+would also need to document how to integrate with Windows AD, as such
+shared network will require two Kerberos realms that need to cooperate
+to work properly.</p>
+
+<p>I believe a good start would be to start using Kerberos on the
+skolelinux.no machines, and this way get ourselves experience with
+configuration and integration. A natural starting point would be
+setting up ldap.skolelinux.no as the Kerberos server, and migrate the
+rest of the machines from PAM via LDAP to PAM via Kerberos one at the
+time.</p>
+
+<p>If you would like to contribute to get this working in Skolelinux,
+I recommend you to see the video recording from yesterdays NUUG
+presentation, and start using Kerberos at home. The video show show
+up in a few days.</p>
+
+
+
PÃ¥ vegne av vanvitting mange, Aftenposten!
P___vegne_av_vanvitting_mange__Aftenposten_.html
@@ -277,45 +322,5 @@ meg, Tollef og alle andre de som deltok på møtet på TV.<p>
-
- Kartverket "frigjør" data men er fortsatt ikke interessante
- Kartverket__frigj__r__data_men_er_fortsatt_ikke_interessante.html
- Kartverket__frigj__r__data_men_er_fortsatt_ikke_interessante.html
- Thu, 12 Nov 2009 10:10:00 +0100
-
-<p>Dagens
-<a href="http://www.statkart.no/Gratis+karttjenester.d25-SwJfY1-.ips">kartnyhet</a>
-er at kartverket gir ikke-kommersiell tilgang til
-en WMS-tjeneste der en til privat bruk kan hente ut bilder av
-kartutsnitt så lenge disse ikke lagres lokalt, brukes i begrenset
-oppløsning og ikke skader kartverket og rettighetshavernes omdømme og
-interesse.</p>
-
-<p>I går publiserte Ivan Sanchez
-<a href="http://www.opengeodata.org/2009/11/11/921/">kaketesten</a>
-som et forslag til en (av forhåpentligvis flere) måter å teste om kart
-eller kartdata er fritt tilgjengelige på. Testen er enkel, og sier
-enkelt (oversatt av meg): Et sett med geodata, eller en kart, er kun
-fritt tilgjengelig hvis noen kan gi deg en kake med det kartet på
-toppen, som en gave. Kartverkets publisering av kart feiler så vidt
-jeg kan se denne testen fullstendig. En kan slik jeg leser vilkårene
-ikke be en konditor om å lage en kake (brudd på kravet om
-ikke-kommersiell bruk) med kartverkets kart.</p>
-
-<p>De som vil lage karttjenester basert på denne nye tjenesten fra
-kartverket vil gjøre det på kartverkets nåde og med sterke bindinger
-og begresninger. Det blir dermed helt uinteressant for meg. Jeg vil
-nok fortsette å bruke data fra
-<a href="http://www.openstreetmap.org">OpenStreetmap.org</a>, der jeg
-har kontrollen med tilgang til kartdataene, og kan endre på de
-underliggende dataene som jeg ønsker.</p>
-
-<p>Som et eksempel, så trenger vi til en norsk
-<a href="http://www.fixmystreet.com/">FixMyStreet-installasjon</a>
-tilgang til vektorutgaven av kommunegrensene. Denne nye karttjenesten
-er ubrukelig til dette.</p>
-
-
-
diff --git a/blog/sitemap.xml b/blog/sitemap.xml
index 55bee1d6d9..21cdd96627 100644
--- a/blog/sitemap.xml
+++ b/blog/sitemap.xml
@@ -225,6 +225,11 @@
0.50weekly
+
+ Kerberos_for_Debian_Edu_Squeeze_.html
+ 0.50
+ weekly
+ Korrupsjon_p___h__yeste_niv___.html0.50
diff --git a/blog/tags/3d-printer/index.html b/blog/tags/3d-printer/index.html
index 1a4c194f0a..d10a15dad6 100644
--- a/blog/tags/3d-printer/index.html
+++ b/blog/tags/3d-printer/index.html
@@ -572,6 +572,8 @@ massemarkedet.
diff --git a/blog/tags/debian edu/debian edu.rss b/blog/tags/debian edu/debian edu.rss
index ef1eec7593..9ea258f1ac 100644
--- a/blog/tags/debian edu/debian edu.rss
+++ b/blog/tags/debian edu/debian edu.rss
@@ -376,5 +376,50 @@ similar to how they use the Xsession.d framework today.<p>
+
+ Kerberos for Debian Edu/Squeeze?
+ ../../Kerberos_for_Debian_Edu_Squeeze_.html
+ ../../Kerberos_for_Debian_Edu_Squeeze_.html
+ Wed, 14 Apr 2010 17:20:00 +0200
+
+<p><a href="http://www.nuug.no/aktiviteter/20100413-kerberos/">Yesterdays
+NUUG presentation</a> about Kerberos was inspiring, and reminded me
+about the need to start using Kerberos in Skolelinux. Setting up a
+Kerberos server seem to be straight forward, and if we get this in
+place a long time before the Squeeze version of Debian freezes, we
+have a chance to migrate Skolelinux away from NFSv3 for the home
+directories, and over to an architecture where the infrastructure do
+not have to trust IP addresses and machines, and instead can trust
+users and cryptographic keys instead.</p>
+
+<p>A challenge will be integration and administration. Is there a
+Kerberos implementation for Debian where one can control the
+administration access in Kerberos using LDAP groups? With it, the
+school administration will have to maintain access control using flat
+files on the main server, which give a huge potential for errors.</p>
+
+<p>A related question I would like to know is how well Kerberos and
+pam-ccreds (offline password check) work together. Anyone know?</p>
+
+<p>Next step will be to use Kerberos for access control in Lwat and
+Nagios. I have no idea how much work that will be to implement. We
+would also need to document how to integrate with Windows AD, as such
+shared network will require two Kerberos realms that need to cooperate
+to work properly.</p>
+
+<p>I believe a good start would be to start using Kerberos on the
+skolelinux.no machines, and this way get ourselves experience with
+configuration and integration. A natural starting point would be
+setting up ldap.skolelinux.no as the Kerberos server, and migrate the
+rest of the machines from PAM via LDAP to PAM via Kerberos one at the
+time.</p>
+
+<p>If you would like to contribute to get this working in Skolelinux,
+I recommend you to see the video recording from yesterdays NUUG
+presentation, and start using Kerberos at home. The video show show
+up in a few days.</p>
+
+
+
diff --git a/blog/tags/debian edu/index.html b/blog/tags/debian edu/index.html
index 476021bf90..71e775c6d5 100644
--- a/blog/tags/debian edu/index.html
+++ b/blog/tags/debian edu/index.html
@@ -541,6 +541,64 @@ similar to how they use the Xsession.d framework today.
Yesterdays
+NUUG presentation about Kerberos was inspiring, and reminded me
+about the need to start using Kerberos in Skolelinux. Setting up a
+Kerberos server seem to be straight forward, and if we get this in
+place a long time before the Squeeze version of Debian freezes, we
+have a chance to migrate Skolelinux away from NFSv3 for the home
+directories, and over to an architecture where the infrastructure do
+not have to trust IP addresses and machines, and instead can trust
+users and cryptographic keys instead.
+
+
A challenge will be integration and administration. Is there a
+Kerberos implementation for Debian where one can control the
+administration access in Kerberos using LDAP groups? With it, the
+school administration will have to maintain access control using flat
+files on the main server, which give a huge potential for errors.
+
+
A related question I would like to know is how well Kerberos and
+pam-ccreds (offline password check) work together. Anyone know?
+
+
Next step will be to use Kerberos for access control in Lwat and
+Nagios. I have no idea how much work that will be to implement. We
+would also need to document how to integrate with Windows AD, as such
+shared network will require two Kerberos realms that need to cooperate
+to work properly.
+
+
I believe a good start would be to start using Kerberos on the
+skolelinux.no machines, and this way get ourselves experience with
+configuration and integration. A natural starting point would be
+setting up ldap.skolelinux.no as the Kerberos server, and migrate the
+rest of the machines from PAM via LDAP to PAM via Kerberos one at the
+time.
+
+
If you would like to contribute to get this working in Skolelinux,
+I recommend you to see the video recording from yesterdays NUUG
+presentation, and start using Kerberos at home. The video show show
+up in a few days.
diff --git a/blog/tags/english/english.rss b/blog/tags/english/english.rss
index bea4569f72..08aa51c889 100644
--- a/blog/tags/english/english.rss
+++ b/blog/tags/english/english.rss
@@ -857,5 +857,50 @@ similar to how they use the Xsession.d framework today.<p>
+
+ Kerberos for Debian Edu/Squeeze?
+ ../../Kerberos_for_Debian_Edu_Squeeze_.html
+ ../../Kerberos_for_Debian_Edu_Squeeze_.html
+ Wed, 14 Apr 2010 17:20:00 +0200
+
+<p><a href="http://www.nuug.no/aktiviteter/20100413-kerberos/">Yesterdays
+NUUG presentation</a> about Kerberos was inspiring, and reminded me
+about the need to start using Kerberos in Skolelinux. Setting up a
+Kerberos server seem to be straight forward, and if we get this in
+place a long time before the Squeeze version of Debian freezes, we
+have a chance to migrate Skolelinux away from NFSv3 for the home
+directories, and over to an architecture where the infrastructure do
+not have to trust IP addresses and machines, and instead can trust
+users and cryptographic keys instead.</p>
+
+<p>A challenge will be integration and administration. Is there a
+Kerberos implementation for Debian where one can control the
+administration access in Kerberos using LDAP groups? With it, the
+school administration will have to maintain access control using flat
+files on the main server, which give a huge potential for errors.</p>
+
+<p>A related question I would like to know is how well Kerberos and
+pam-ccreds (offline password check) work together. Anyone know?</p>
+
+<p>Next step will be to use Kerberos for access control in Lwat and
+Nagios. I have no idea how much work that will be to implement. We
+would also need to document how to integrate with Windows AD, as such
+shared network will require two Kerberos realms that need to cooperate
+to work properly.</p>
+
+<p>I believe a good start would be to start using Kerberos on the
+skolelinux.no machines, and this way get ourselves experience with
+configuration and integration. A natural starting point would be
+setting up ldap.skolelinux.no as the Kerberos server, and migrate the
+rest of the machines from PAM via LDAP to PAM via Kerberos one at the
+time.</p>
+
+<p>If you would like to contribute to get this working in Skolelinux,
+I recommend you to see the video recording from yesterdays NUUG
+presentation, and start using Kerberos at home. The video show show
+up in a few days.</p>
+
+
+
diff --git a/blog/tags/english/index.html b/blog/tags/english/index.html
index b917fb1673..ea30ab3be3 100644
--- a/blog/tags/english/index.html
+++ b/blog/tags/english/index.html
@@ -1126,6 +1126,64 @@ similar to how they use the Xsession.d framework today.
Yesterdays
+NUUG presentation about Kerberos was inspiring, and reminded me
+about the need to start using Kerberos in Skolelinux. Setting up a
+Kerberos server seem to be straight forward, and if we get this in
+place a long time before the Squeeze version of Debian freezes, we
+have a chance to migrate Skolelinux away from NFSv3 for the home
+directories, and over to an architecture where the infrastructure do
+not have to trust IP addresses and machines, and instead can trust
+users and cryptographic keys instead.
+
+
A challenge will be integration and administration. Is there a
+Kerberos implementation for Debian where one can control the
+administration access in Kerberos using LDAP groups? With it, the
+school administration will have to maintain access control using flat
+files on the main server, which give a huge potential for errors.
+
+
A related question I would like to know is how well Kerberos and
+pam-ccreds (offline password check) work together. Anyone know?
+
+
Next step will be to use Kerberos for access control in Lwat and
+Nagios. I have no idea how much work that will be to implement. We
+would also need to document how to integrate with Windows AD, as such
+shared network will require two Kerberos realms that need to cooperate
+to work properly.
+
+
I believe a good start would be to start using Kerberos on the
+skolelinux.no machines, and this way get ourselves experience with
+configuration and integration. A natural starting point would be
+setting up ldap.skolelinux.no as the Kerberos server, and migrate the
+rest of the machines from PAM via LDAP to PAM via Kerberos one at the
+time.
+
+
If you would like to contribute to get this working in Skolelinux,
+I recommend you to see the video recording from yesterdays NUUG
+presentation, and start using Kerberos at home. The video show show
+up in a few days.
diff --git a/blog/tags/fiksgatami/index.html b/blog/tags/fiksgatami/index.html
index 24ecd534ad..300ae131ac 100644
--- a/blog/tags/fiksgatami/index.html
+++ b/blog/tags/fiksgatami/index.html
@@ -80,6 +80,8 @@ med dem. Dette blir bra.
diff --git a/blog/tags/fildeling/index.html b/blog/tags/fildeling/index.html
index 4cfc025a4a..0e1586db19 100644
--- a/blog/tags/fildeling/index.html
+++ b/blog/tags/fildeling/index.html
@@ -268,6 +268,8 @@ publiseres med mer brukervennlige vilkår, som CC-BY og lignende.
diff --git a/blog/tags/nuug/index.html b/blog/tags/nuug/index.html
index b4adb0d135..e91824a42e 100644
--- a/blog/tags/nuug/index.html
+++ b/blog/tags/nuug/index.html
@@ -3480,6 +3480,64 @@ similar to how they use the Xsession.d framework today.
Yesterdays
+NUUG presentation about Kerberos was inspiring, and reminded me
+about the need to start using Kerberos in Skolelinux. Setting up a
+Kerberos server seem to be straight forward, and if we get this in
+place a long time before the Squeeze version of Debian freezes, we
+have a chance to migrate Skolelinux away from NFSv3 for the home
+directories, and over to an architecture where the infrastructure do
+not have to trust IP addresses and machines, and instead can trust
+users and cryptographic keys instead.
+
+
A challenge will be integration and administration. Is there a
+Kerberos implementation for Debian where one can control the
+administration access in Kerberos using LDAP groups? With it, the
+school administration will have to maintain access control using flat
+files on the main server, which give a huge potential for errors.
+
+
A related question I would like to know is how well Kerberos and
+pam-ccreds (offline password check) work together. Anyone know?
+
+
Next step will be to use Kerberos for access control in Lwat and
+Nagios. I have no idea how much work that will be to implement. We
+would also need to document how to integrate with Windows AD, as such
+shared network will require two Kerberos realms that need to cooperate
+to work properly.
+
+
I believe a good start would be to start using Kerberos on the
+skolelinux.no machines, and this way get ourselves experience with
+configuration and integration. A natural starting point would be
+setting up ldap.skolelinux.no as the Kerberos server, and migrate the
+rest of the machines from PAM via LDAP to PAM via Kerberos one at the
+time.
+
+
If you would like to contribute to get this working in Skolelinux,
+I recommend you to see the video recording from yesterdays NUUG
+presentation, and start using Kerberos at home. The video show show
+up in a few days.
diff --git a/blog/tags/nuug/nuug.rss b/blog/tags/nuug/nuug.rss
index 5317eb3b68..e5091ffb71 100644
--- a/blog/tags/nuug/nuug.rss
+++ b/blog/tags/nuug/nuug.rss
@@ -2600,5 +2600,50 @@ similar to how they use the Xsession.d framework today.<p>
+
+ Kerberos for Debian Edu/Squeeze?
+ ../../Kerberos_for_Debian_Edu_Squeeze_.html
+ ../../Kerberos_for_Debian_Edu_Squeeze_.html
+ Wed, 14 Apr 2010 17:20:00 +0200
+
+<p><a href="http://www.nuug.no/aktiviteter/20100413-kerberos/">Yesterdays
+NUUG presentation</a> about Kerberos was inspiring, and reminded me
+about the need to start using Kerberos in Skolelinux. Setting up a
+Kerberos server seem to be straight forward, and if we get this in
+place a long time before the Squeeze version of Debian freezes, we
+have a chance to migrate Skolelinux away from NFSv3 for the home
+directories, and over to an architecture where the infrastructure do
+not have to trust IP addresses and machines, and instead can trust
+users and cryptographic keys instead.</p>
+
+<p>A challenge will be integration and administration. Is there a
+Kerberos implementation for Debian where one can control the
+administration access in Kerberos using LDAP groups? With it, the
+school administration will have to maintain access control using flat
+files on the main server, which give a huge potential for errors.</p>
+
+<p>A related question I would like to know is how well Kerberos and
+pam-ccreds (offline password check) work together. Anyone know?</p>
+
+<p>Next step will be to use Kerberos for access control in Lwat and
+Nagios. I have no idea how much work that will be to implement. We
+would also need to document how to integrate with Windows AD, as such
+shared network will require two Kerberos realms that need to cooperate
+to work properly.</p>
+
+<p>I believe a good start would be to start using Kerberos on the
+skolelinux.no machines, and this way get ourselves experience with
+configuration and integration. A natural starting point would be
+setting up ldap.skolelinux.no as the Kerberos server, and migrate the
+rest of the machines from PAM via LDAP to PAM via Kerberos one at the
+time.</p>
+
+<p>If you would like to contribute to get this working in Skolelinux,
+I recommend you to see the video recording from yesterdays NUUG
+presentation, and start using Kerberos at home. The video show show
+up in a few days.</p>
+
+
+
diff --git a/blog/tags/opphavsrett/index.html b/blog/tags/opphavsrett/index.html
index 449b0125df..35f01d22f6 100644
--- a/blog/tags/opphavsrett/index.html
+++ b/blog/tags/opphavsrett/index.html
@@ -648,6 +648,8 @@ der for å se hva de har.
diff --git a/blog/tags/reprap/index.html b/blog/tags/reprap/index.html
index 304603bf48..70f44a08d5 100644
--- a/blog/tags/reprap/index.html
+++ b/blog/tags/reprap/index.html
@@ -517,6 +517,8 @@ kommer til å bruke denne plasttypen som håndterer temperaturer mellom
diff --git a/blog/tags/video/index.html b/blog/tags/video/index.html
index ad7b900300..648397200f 100644
--- a/blog/tags/video/index.html
+++ b/blog/tags/video/index.html
@@ -528,6 +528,8 @@ meg, Tollef og alle andre de som deltok på møtet på TV.
diff --git a/blog/tags/vitenskap/index.html b/blog/tags/vitenskap/index.html
index 48a4ec6874..12a81b26aa 100644
--- a/blog/tags/vitenskap/index.html
+++ b/blog/tags/vitenskap/index.html
@@ -130,6 +130,8 @@ skyskrapere. Takke meg til en tur til månen.