blog/Caching_password__user_and_group_on_a_roaming_Debian_laptop.html

   1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
   2           "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
   3 <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr">
   4   <head>
   5     <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
   6     <title>Petter Reinholdtsen: Caching password, user and group on a roaming Debian laptop</title>
   7     <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css" />
   8     <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/vim.css" />
   9
  10
  11   </head>
  12   <body>
  13     <div class="title">
  14  <h1>
  15      <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
  16
  17  </h1>
  18
  19 </div>
  20
  21
  22     <div class="entry">
  23       <div class="title">Caching password, user and group on a roaming Debian laptop</div>
  24       <div class="date"> 1st July 2010</div>
  25       <div class="body"><p>For a laptop, centralized user directories and password checking is
  26 a bit troubling.  Laptops are typically used also when not connected
  27 to the network, and it is vital for a user to be able to log in or
  28 unlock the screen saver also when a central server is unavailable.
  29 This is possible by caching passwords and directory information (user
  30 and group attributes) locally, and the packages to do so are available
  31 in Debian.  Here follow two recipes to set this up in Debian/Squeeze.
  32 It is also possible to set up in Debian/Lenny, but require more manual
  33 setup there because pam-auth-update is missing in Lenny.</p>
  34
  35 <h2>LDAP/Kerberos + nscd + libpam-ccreds + libpam-mklocaluser/pam_mkhomedir</h2>
  36
  37 This is the traditional method with a twist.  The password caching is
  38 provided by libpam-ccreds (version 10-4 or later is needed on
  39 Squeeze), and the directory caching is done by nscd.  The directory
  40 lookup and password checking is done using LDAP.  If one want to use
  41 Kerberos for password checking the libpam-ldapd package can be
  42 replaced with libpam-krb5 or libpam-heimdal.  If one is happy having a
  43 local home directory with the path listed in LDAP, one can use the
  44 pam_mkhomedir module from pam-modules to make this happen instead of
  45 using libpam-mklocaluser.  A setup for pam-auth-update to enable
  46 pam_mkhomedir will have to be written until a fix for
  47 <a href="http://bugs.debian.org/568577">bug #568577</a> is in the
  48 archive.  Because I believe it is a bad idea to have local home
  49 directories using misleading paths like /site/server/partition/, I
  50 prefer to create a local user with the home directory in /home/.  This
  51 is done using the libpam-mklocaluser package.</p>
  52
  53 <p>These packages need to be installed and configured</p>
  54
  55 <blockquote><pre>
  56 libnss-ldapd libpam-ldapd nscd libpam-ccreds libpam-mklocaluser
  57 </pre></blockquote>
  58
  59 <p>The ldapd packages will ask for LDAP connection information, and
  60 one have to fill in the values that fits ones own site.  Make sure the
  61 PAM part uses encrypted connections, to make sure the password is not
  62 sent in clear text to the LDAP server.  I've been unable to get TLS
  63 certificate checking for a self signed certificate working, which make
  64 LDAP authentication unsafe for Debian Edu (nslcd is not checking if it
  65 is talking to the correct LDAP server), and very much welcome feedback
  66 on how to get this working.</p>
  67
  68 <p>Because nscd do not have a default configuration fit for offline
  69 caching until <a href="http://bugs.debian.org/485282">bug #485282</a>
  70 is fixed, this configuration should be used instead of the one
  71 currently in /etc/nscd.conf.  The changes are in the fields
  72 reload-count and positive-time-to-live, and is based on the
  73 instructions I found in the
  74 <a href="http://www.flyn.org/laptopldap/">LDAP for Mobile Laptops</a>
  75 instructions by Flyn Computing.</p>
  76
  77 <blockquote><pre>
  78         debug-level             0
  79         reload-count            unlimited
  80         paranoia                no
  81
  82         enable-cache            passwd          yes
  83         positive-time-to-live   passwd          2592000
  84         negative-time-to-live   passwd          20
  85         suggested-size          passwd          211
  86         check-files             passwd          yes
  87         persistent              passwd          yes
  88         shared                  passwd          yes
  89         max-db-size             passwd          33554432
  90         auto-propagate          passwd          yes
  91
  92         enable-cache            group           yes
  93         positive-time-to-live   group           2592000
  94         negative-time-to-live   group           20
  95         suggested-size          group           211
  96         check-files             group           yes
  97         persistent              group           yes
  98         shared                  group           yes
  99         max-db-size             group           33554432
 100         auto-propagate          group           yes
 101
 102         enable-cache            hosts           no
 103         positive-time-to-live   hosts           2592000
 104         negative-time-to-live   hosts           20
 105         suggested-size          hosts           211
 106         check-files             hosts           yes
 107         persistent              hosts           yes
 108         shared                  hosts           yes
 109         max-db-size             hosts           33554432
 110
 111         enable-cache            services        yes
 112         positive-time-to-live   services        2592000
 113         negative-time-to-live   services        20
 114         suggested-size          services        211
 115         check-files             services        yes
 116         persistent              services        yes
 117         shared                  services        yes
 118         max-db-size             services        33554432
 119 </pre></blockquote>
 120
 121 <p>While we wait for a mechanism to update /etc/nsswitch.conf
 122 automatically like the one provided in
 123 <a href="http://bugs.debian.org/496915">bug #496915</a>, the file
 124 content need to be manually replaced to ensure LDAP is used as the
 125 directory service on the machine.  /etc/nsswitch.conf should normally
 126 look like this:</p>
 127
 128 <blockquote><pre>
 129 passwd:         files ldap
 130 group:          files ldap
 131 shadow:         files ldap
 132 hosts:          files mdns4_minimal [NOTFOUND=return] dns mdns4
 133 networks:       files
 134 protocols:      files
 135 services:       files
 136 ethers:         files
 137 rpc:            files
 138 netgroup:       files ldap
 139 </pre></blockquote>
 140
 141 <p>The important parts are that ldap is listed last for passwd, group,
 142 shadow and netgroup.</p>
 143
 144 <p>With these changes in place, any user in LDAP will be able to log
 145 in locally on the machine using for example kdm, get a local home
 146 directory created and have the password as well as user and group
 147 attributes cached.
 148
 149 <h2>LDAP/Kerberos + nss-updatedb + libpam-ccreds +
 150   libpam-mklocaluser/pam_mkhomedir</h2>
 151
 152 <p>Because nscd have had its share of problems, and seem to have
 153 problems doing proper caching, I've seen suggestions and recipes to
 154 use nss-updatedb to copy parts of the LDAP database locally when the
 155 LDAP database is available.  I have not tested such setup, because I
 156 discovered sssd.</p>
 157
 158 <h2>LDAP/Kerberos + sssd + libpam-mklocaluser</h2>
 159
 160 <p>A more flexible and robust setup than the nscd combination
 161 mentioned earlier that has shown up recently, is the
 162 <a href="https://fedorahosted.org/sssd/">sssd</a> package from Redhat.
 163 It is part of the <a href="http://www.freeipa.org/">FreeIPA</A> project
 164 to provide a Active Directory like directory service for Linux
 165 machines.  The sssd system combines the caching of passwords and user
 166 information into one package, and remove the need for nscd and
 167 libpam-ccreds.  It support LDAP and Kerberos, but not NIS.  Version
 168 1.2 do not support netgroups, but it is said that it will support this
 169 in version 1.5 expected to show up later in 2010.  Because the
 170 <a href="http://packages.qa.debian.org/s/sssd.html">sssd package</a>
 171 was missing in Debian, I ended up co-maintaining it with Werner, and
 172 version 1.2 is now in testing.
 173
 174 <p>These packages need to be installed and configured to get the
 175 roaming setup I want</p>
 176
 177 <blockquote><pre>
 178 libpam-sss libnss-sss libpam-mklocaluser
 179 </pre></blockquote>
 180
 181 The complete setup of sssd is done by editing/creating
 182 <tt>/etc/sssd/sssd.conf</tt>.
 183
 184 <blockquote><pre>
 185 [sssd]
 186 config_file_version = 2
 187 reconnection_retries = 3
 188 sbus_timeout = 30
 189 services = nss, pam
 190 domains = INTERN
 191
 192 [nss]
 193 filter_groups = root
 194 filter_users = root
 195 reconnection_retries = 3
 196
 197 [pam]
 198 reconnection_retries = 3
 199
 200 [domain/INTERN]
 201 enumerate = false
 202 cache_credentials = true
 203
 204 id_provider = ldap
 205 auth_provider = ldap
 206 chpass_provider = ldap
 207
 208 ldap_uri = ldap://ldap
 209 ldap_search_base = dc=skole,dc=skolelinux,dc=no
 210 ldap_tls_reqcert = never
 211 ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt
 212 </pre></blockquote>
 213
 214 <p>I got the same problem here with certificate checking.  Had to set
 215 "ldap_tls_reqcert = never" to get it working.</p>
 216
 217 <p>With the libnss-sss package in testing at the moment, the
 218 nsswitch.conf file is update automatically, so there is no need to
 219 modify it manually.</p>
 220
 221 <p>If you want to help out with implementing this for Debian Edu,
 222 please contact us on debian-edu@lists.debian.org.</p>
 223 </div>
 224
 225       <div class="tags">Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.</div>
 226
 227
 228     </div>
 229
 230
 231
 232
 233     <div id="sidebar">
 234
 235
 236
 237 <h2>Archive</h2>
 238 <ul>
 239
 240 <li>2015
 241 <ul>
 242
 243 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/01/">January (7)</a></li>
 244
 245 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/02/">February (6)</a></li>
 246
 247 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/03/">March (1)</a></li>
 248
 249 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/04/">April (4)</a></li>
 250
 251 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/05/">May (3)</a></li>
 252
 253 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/06/">June (3)</a></li>
 254
 255 </ul></li>
 256
 257 <li>2014
 258 <ul>
 259
 260 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/01/">January (2)</a></li>
 261
 262 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/02/">February (3)</a></li>
 263
 264 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/03/">March (8)</a></li>
 265
 266 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/04/">April (7)</a></li>
 267
 268 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/05/">May (1)</a></li>
 269
 270 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/06/">June (2)</a></li>
 271
 272 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/07/">July (2)</a></li>
 273
 274 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/08/">August (2)</a></li>
 275
 276 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/09/">September (5)</a></li>
 277
 278 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/10/">October (6)</a></li>
 279
 280 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/11/">November (3)</a></li>
 281
 282 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/12/">December (5)</a></li>
 283
 284 </ul></li>
 285
 286 <li>2013
 287 <ul>
 288
 289 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/01/">January (11)</a></li>
 290
 291 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/02/">February (9)</a></li>
 292
 293 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/03/">March (9)</a></li>
 294
 295 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/04/">April (6)</a></li>
 296
 297 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/05/">May (9)</a></li>
 298
 299 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/06/">June (10)</a></li>
 300
 301 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/07/">July (7)</a></li>
 302
 303 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/08/">August (3)</a></li>
 304
 305 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/09/">September (5)</a></li>
 306
 307 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/10/">October (7)</a></li>
 308
 309 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/11/">November (9)</a></li>
 310
 311 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/12/">December (3)</a></li>
 312
 313 </ul></li>
 314
 315 <li>2012
 316 <ul>
 317
 318 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/01/">January (7)</a></li>
 319
 320 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/02/">February (10)</a></li>
 321
 322 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/03/">March (17)</a></li>
 323
 324 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/04/">April (12)</a></li>
 325
 326 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/05/">May (12)</a></li>
 327
 328 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/06/">June (20)</a></li>
 329
 330 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/07/">July (17)</a></li>
 331
 332 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/08/">August (6)</a></li>
 333
 334 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/09/">September (9)</a></li>
 335
 336 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/10/">October (17)</a></li>
 337
 338 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/11/">November (10)</a></li>
 339
 340 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/12/">December (7)</a></li>
 341
 342 </ul></li>
 343
 344 <li>2011
 345 <ul>
 346
 347 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/01/">January (16)</a></li>
 348
 349 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/02/">February (6)</a></li>
 350
 351 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/03/">March (6)</a></li>
 352
 353 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/04/">April (7)</a></li>
 354
 355 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/05/">May (3)</a></li>
 356
 357 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/06/">June (2)</a></li>
 358
 359 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/07/">July (7)</a></li>
 360
 361 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/08/">August (6)</a></li>
 362
 363 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/09/">September (4)</a></li>
 364
 365 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/10/">October (2)</a></li>
 366
 367 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/11/">November (3)</a></li>
 368
 369 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/12/">December (1)</a></li>
 370
 371 </ul></li>
 372
 373 <li>2010
 374 <ul>
 375
 376 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
 377
 378 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
 379
 380 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
 381
 382 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
 383
 384 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
 385
 386 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
 387
 388 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (12)</a></li>
 389
 390 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/08/">August (13)</a></li>
 391
 392 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/09/">September (7)</a></li>
 393
 394 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/10/">October (9)</a></li>
 395
 396 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/11/">November (13)</a></li>
 397
 398 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/12/">December (12)</a></li>
 399
 400 </ul></li>
 401
 402 <li>2009
 403 <ul>
 404
 405 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
 406
 407 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
 408
 409 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
 410
 411 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
 412
 413 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
 414
 415 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
 416
 417 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
 418
 419 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
 420
 421 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
 422
 423 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
 424
 425 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
 426
 427 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
 428
 429 </ul></li>
 430
 431 <li>2008
 432 <ul>
 433
 434 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
 435
 436 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
 437
 438 </ul></li>
 439
 440 </ul>
 441
 442
 443
 444 <h2>Tags</h2>
 445 <ul>
 446
 447  <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (13)</a></li>
 448
 449  <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
 450
 451  <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
 452
 453  <li><a href="http://people.skolelinux.org/pere/blog/tags/bankid">bankid (4)</a></li>
 454
 455  <li><a href="http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (8)</a></li>
 456
 457  <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (15)</a></li>
 458
 459  <li><a href="http://people.skolelinux.org/pere/blog/tags/bsa">bsa (2)</a></li>
 460
 461  <li><a href="http://people.skolelinux.org/pere/blog/tags/chrpath">chrpath (2)</a></li>
 462
 463  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (109)</a></li>
 464
 465  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (153)</a></li>
 466
 467  <li><a href="http://people.skolelinux.org/pere/blog/tags/digistan">digistan (10)</a></li>
 468
 469  <li><a href="http://people.skolelinux.org/pere/blog/tags/dld">dld (15)</a></li>
 470
 471  <li><a href="http://people.skolelinux.org/pere/blog/tags/docbook">docbook (13)</a></li>
 472
 473  <li><a href="http://people.skolelinux.org/pere/blog/tags/drivstoffpriser">drivstoffpriser (4)</a></li>
 474
 475  <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (279)</a></li>
 476
 477  <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (23)</a></li>
 478
 479  <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (12)</a></li>
 480
 481  <li><a href="http://people.skolelinux.org/pere/blog/tags/freeculture">freeculture (15)</a></li>
 482
 483  <li><a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox (9)</a></li>
 484
 485  <li><a href="http://people.skolelinux.org/pere/blog/tags/frikanalen">frikanalen (15)</a></li>
 486
 487  <li><a href="http://people.skolelinux.org/pere/blog/tags/h264">h264 (19)</a></li>
 488
 489  <li><a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju (42)</a></li>
 490
 491  <li><a href="http://people.skolelinux.org/pere/blog/tags/isenkram">isenkram (10)</a></li>
 492
 493  <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (19)</a></li>
 494
 495  <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (9)</a></li>
 496
 497  <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (8)</a></li>
 498
 499  <li><a href="http://people.skolelinux.org/pere/blog/tags/lsdvd">lsdvd (2)</a></li>
 500
 501  <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
 502
 503  <li><a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network (8)</a></li>
 504
 505  <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (34)</a></li>
 506
 507  <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (262)</a></li>
 508
 509  <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (176)</a></li>
 510
 511  <li><a href="http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn (17)</a></li>
 512
 513  <li><a href="http://people.skolelinux.org/pere/blog/tags/open311">open311 (2)</a></li>
 514
 515  <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (52)</a></li>
 516
 517  <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (86)</a></li>
 518
 519  <li><a href="http://people.skolelinux.org/pere/blog/tags/raid">raid (1)</a></li>
 520
 521  <li><a href="http://people.skolelinux.org/pere/blog/tags/reactos">reactos (1)</a></li>
 522
 523  <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (11)</a></li>
 524
 525  <li><a href="http://people.skolelinux.org/pere/blog/tags/rfid">rfid (3)</a></li>
 526
 527  <li><a href="http://people.skolelinux.org/pere/blog/tags/robot">robot (9)</a></li>
 528
 529  <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
 530
 531  <li><a href="http://people.skolelinux.org/pere/blog/tags/ruter">ruter (4)</a></li>
 532
 533  <li><a href="http://people.skolelinux.org/pere/blog/tags/scraperwiki">scraperwiki (2)</a></li>
 534
 535  <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (41)</a></li>
 536
 537  <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (4)</a></li>
 538
 539  <li><a href="http://people.skolelinux.org/pere/blog/tags/skepsis">skepsis (4)</a></li>
 540
 541  <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (47)</a></li>
 542
 543  <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (3)</a></li>
 544
 545  <li><a href="http://people.skolelinux.org/pere/blog/tags/stortinget">stortinget (9)</a></li>
 546
 547  <li><a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (33)</a></li>
 548
 549  <li><a href="http://people.skolelinux.org/pere/blog/tags/sysadmin">sysadmin (2)</a></li>
 550
 551  <li><a href="http://people.skolelinux.org/pere/blog/tags/usenix">usenix (2)</a></li>
 552
 553  <li><a href="http://people.skolelinux.org/pere/blog/tags/valg">valg (8)</a></li>
 554
 555  <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (52)</a></li>
 556
 557  <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (4)</a></li>
 558
 559  <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (36)</a></li>
 560
 561 </ul>
 562
 563
 564     </div>
 565     <p style="text-align: right">
 566  Created by <a href="http://steve.org.uk/Software/chronicle">Chronicle v4.6</a>
 567 </p>
 568
 569   </body>
 570 </html>