blog/tags/debian edu/index.html

   1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
   2         "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
   3 <html>
   4  <head>
   5   <title>Petter Reinholdtsen: Entries Tagged debian edu</title>
   6   <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css">
   7   <link rel="alternate" title="RSS Feed" href="debian edu.rss" type="application/rss+xml">
   8  </head>
   9  <body>
  10
  11  <div class="title">
  12   <h1>
  13        <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
  14
  15   </h1>
  16
  17  </div>
  18
  19  <p>Entries tagged "debian edu".</p>
  20
  21
  22
  23
  24 <div class="entry">
  25  <div class="title">
  26  <a href="http://people.skolelinux.org/pere/blog/The_sorry_state_of_multimedia_browser_plugins_in_Debian.html">The sorry state of multimedia browser plugins in Debian</a>
  27  </div>
  28  <div class="date">
  29   2008-11-25 00:10
  30  </div>
  31
  32  <div class="body">
  33
  34 <p>Recently I have spent some time evaluating the multimedia browser
  35 plugins available in Debian Lenny, to see which one we should use by
  36 default in Debian Edu.  We need an embedded video playing plugin with
  37 control buttons to pause or stop the video, and capable of streaming
  38 all the multimedia content available on the web.  The test results and
  39 notes are available on
  40 <a href="http://wiki.debian.org/DebianEdu/BrowserMultimedia">the
  41 Debian wiki</a>.  I was surprised how few of the plugins are able to
  42 fill this need.  My personal video player favorite, VLC, has a really
  43 bad plugin which fail on a lot of the test pages.  A lot of the MIME
  44 types I would expect to work with any free software player (like
  45 video/ogg), just do not work.  And simple formats like the
  46 audio/x-mplegurl format (m3u playlists), just isn't supported by the
  47 totem and vlc plugins.  I hope the situation will improve soon.  No
  48 wonder sites use the proprietary Adobe flash to play video.</p>
  49
  50 <p>For Lenny, we seem to end up with the mplayer plugin.  It seem to
  51 be the only one fitting our needs. :/</p>
  52
  53  </div>
  54  <div class="tags">
  55
  56
  57
  58   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web">web</a>.
  59
  60  </div>
  61 </div>
  62 <div class="padding"></div>
  63
  64 <div class="entry">
  65  <div class="title">
  66  <a href="http://people.skolelinux.org/pere/blog/Devcamp_brought_us_closer_to_the_Lenny_based_Debian_Edu_release.html">Devcamp brought us closer to the Lenny based Debian Edu release</a>
  67  </div>
  68  <div class="date">
  69   2008-12-07 12:00
  70  </div>
  71
  72  <div class="body">
  73
  74 <p>This weekend we had a small developer gathering for Debian Edu in
  75 Oslo.  Most of Saturday was used for the general assemly for the
  76 member organization, but the rest of the weekend I used to tune the
  77 LTSP installation.  LTSP now work out of the box on the 10-network.
  78 Acer Aspire One proved to be a very nice thin client, with both
  79 screen, mouse and keybard in a small box.  Was working on getting the
  80 diskless workstation setup configured out of the box, but did not
  81 finish it before the weekend was up.</p>
  82
  83 <p>Did not find time to look at the 4 VGA cards in one box we got from
  84 the Brazilian group, so that will have to wait for the next
  85 development gathering.  Would love to have the Debian Edu installer
  86 automatically detect and configure a multiseat setup when it find one
  87 of these cards.</p>
  88
  89  </div>
  90  <div class="tags">
  91
  92
  93
  94   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp</a>.
  95
  96  </div>
  97 </div>
  98 <div class="padding"></div>
  99
 100 <div class="entry">
 101  <div class="title">
 102  <a href="http://people.skolelinux.org/pere/blog/Endelig_norsk_stavekontroll_med_st__tte_for_ord_med_bindestrek.html">Endelig norsk stavekontroll med støtte for ord med bindestrek</a>
 103  </div>
 104  <div class="date">
 105   2008-12-26 11:00
 106  </div>
 107
 108  <div class="body">
 109
 110 <p>Etter flere års mislykkede forsøk på å skrive om byggesystemet for
 111 <a href="http://no.speling.org/">den norske stavekontrollen for bokmål
 112 og nynorsk</a> til å ikke bruke bindestrek som ordskillemarkør, lyktes jeg
 113 endelig første juledag.  Bruken av bindestrek som ordskillemarkør har
 114 gjort det umulig å få med ord med bindestrek i
 115 stavekontrolldatagrunnlaget, slik at ord som e-post og CD-spiller ikke
 116 kunne godtas av stavekontrollen.  Hadde litt tid til overs å bruke på
 117 stavekontrollen, og satte meg ned med to kopier av byggsystemet og en
 118 liten testdatafil, og byttet ut - med = på utvalgte steder i
 119 byggsystemet og datafilen helt til jeg fikk samme resultat med det
 120 gamle og det nye byggsystemet.  Dette tror jeg var forsøk 4, der de
 121 foregående har feilet uten at jeg klarte å forstå hvorfor.  Det sier
 122 kanskje litt om kompleksiteten i det originale byggsystemet som Rune
 123 Kleveland laget i sin tid.</p>
 124
 125 <p>Etter å ha endret byggsystemet, var neste steg å importere ordene
 126 med bindestrek.  Vi har en rekke slike i databasene for
 127 <a href="http://tyge.sslug.dk/~korsvoll/nb.speling.org/htdocs/">bokmål</a>
 128 og
 129 <a href="http://tyge.sslug.dk/~korsvoll/nn.speling.org/htdocs/">nynorsk</a>
 130 for korrektur av datagrunnlaget for stavekontrollen, og etter importen
 131 skulle nå 10350 nye ord bli godkjent som korrekt stavede ord av
 132 stavekontrollen.</p>
 133
 134  </div>
 135  <div class="tags">
 136
 137
 138
 139   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll</a>.
 140
 141  </div>
 142 </div>
 143 <div class="padding"></div>
 144
 145 <div class="entry">
 146  <div class="title">
 147  <a href="http://people.skolelinux.org/pere/blog/Endelig_er_Debian_Lenny_gitt_ut.html">Endelig er Debian Lenny gitt ut</a>
 148  </div>
 149  <div class="date">
 150   2009-02-15 11:50
 151  </div>
 152
 153  <div class="body">
 154
 155 <p>Endelig er <a href="http://www.debian.org/">Debian</a>
 156 <a href="http://www.debian.org/News/2009/20090214">Lenny</a> gitt ut.
 157 Et langt steg videre for Debian-prosjektet, og en rekke nye
 158 programpakker blir nå tilgjengelig for de av oss som bruker den
 159 stabile utgaven av Debian.  Neste steg er nå å få
 160 <a href="http://www.skolelinux.org/">Skolelinux</a> /
 161 <a href="http://wiki.debian.org/DebianEdu/">Debian Edu</a> ferdig
 162 oppdatert for den nye utgaven, slik at en oppdatert versjon kan
 163 slippes løs på skolene.  Takk til alle debian-utviklerne som har
 164 gjort dette mulig.  Endelig er f.eks. fungerende avhengighetsstyrt
 165 bootsekvens tilgjengelig i stabil utgave, vha pakken
 166 <tt>insserv</tt>.</p>
 167
 168  </div>
 169  <div class="tags">
 170
 171
 172
 173   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
 174
 175  </div>
 176 </div>
 177 <div class="padding"></div>
 178
 179 <div class="entry">
 180  <div class="title">
 181  <a href="http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html">Time for new  LDAP schemas replacing RFC 2307?</a>
 182  </div>
 183  <div class="date">
 184   2009-03-29 20:30
 185  </div>
 186
 187  <div class="body">
 188
 189 <p>The state of standardized LDAP schemas on Linux is far from
 190 optimal.  There is RFC 2307 documenting one way to store NIS maps in
 191 LDAP, and a modified version of this normally called RFC 2307bis, with
 192 some modifications to be compatible with Active Directory.  The RFC
 193 specification handle the content of a lot of system databases, but do
 194 not handle DNS zones and DHCP configuration.</p>
 195
 196 <p>In <a href="http://www.skolelinux.org/">Debian Edu/Skolelinux</a>,
 197 we would like to store information about users, SMB clients/hosts,
 198 filegroups, netgroups (users and hosts), DHCP and DNS configuration,
 199 and LTSP configuration in LDAP.  These objects have a lot in common,
 200 but with the current LDAP schemas it is not possible to have one
 201 object per entity.  For example, one need to have at least three LDAP
 202 objects for a given computer, one with the SMB related stuff, one with
 203 DNS information and another with DHCP information.  The schemas
 204 provided for DNS and DHCP are impossible to combine into one LDAP
 205 object.  In addition, it is impossible to implement quick queries for
 206 netgroup membership, because of the way NIS triples are implemented.
 207 It just do not scale.  I believe it is time for a few RFC
 208 specifications to cleam up this mess.</p>
 209
 210 <p>I would like to have one LDAP object representing each computer in
 211 the network, and this object can then keep the SMB (ie host key), DHCP
 212 (mac address/name) and DNS (name/IP address) settings in one place.
 213 It need to be efficently stored to make sure it scale well.</p>
 214
 215 <p>I would also like to have a quick way to map from a user or
 216 computer and to the net group this user or computer is a member.</p>
 217
 218 <p>Active Directory have done a better job than unix heads like myself
 219 in this regard, and the unix side need to catch up.  Time to start a
 220 new IETF work group?</p>
 221
 222  </div>
 223  <div class="tags">
 224
 225
 226
 227   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 228
 229  </div>
 230 </div>
 231 <div class="padding"></div>
 232
 233 <div class="entry">
 234  <div class="title">
 235  <a href="http://people.skolelinux.org/pere/blog/Returning_from_Skolelinux_developer_gathering.html">Returning from Skolelinux developer gathering</a>
 236  </div>
 237  <div class="date">
 238   2009-03-29 21:00
 239  </div>
 240
 241  <div class="body">
 242
 243 <p>I'm sitting on the train going home from this weekends Debian
 244 Edu/Skolelinux development gathering.  I got a bit done tuning the
 245 desktop, and looked into the dynamic service location protocol
 246 implementation avahi.  It look like it could be useful for us.  Almost
 247 30 people participated, and I believe it was a great environment to
 248 get to know the Skolelinux system.  Walter Bender, involved in the
 249 development of the Sugar educational platform, presented his stuff and
 250 also helped me improve my OLPC installation.  He also showed me that
 251 his Turtle Art application can be used in standalone mode, and we
 252 agreed that I would help getting it packaged for Debian.  As a
 253 standalone application it would be great for Debian Edu.  We also
 254 tried to get the video conferencing working with two OLPCs, but that
 255 proved to be too hard for us.  The application seem to need more work
 256 before it is ready for me.  I look forward to getting home and relax
 257 now. :)</p>
 258
 259  </div>
 260  <div class="tags">
 261
 262
 263
 264   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 265
 266  </div>
 267 </div>
 268 <div class="padding"></div>
 269
 270 <div class="entry">
 271  <div class="title">
 272  <a href="http://people.skolelinux.org/pere/blog/BSAs_p__stander_om_piratkopiering_m__ter_motstand.html">BSAs påstander om piratkopiering møter motstand</a>
 273  </div>
 274  <div class="date">
 275   2009-05-17 23:05
 276  </div>
 277
 278  <div class="body">
 279
 280 <p>Hvert år de siste årene har BSA, lobbyfronten til de store
 281 programvareselskapene som Microsoft og Apple, publisert en rapport der
 282 de gjetter på hvor mye piratkopiering påfører i tapte inntekter i
 283 ulike land rundt om i verden.  Resultatene er tendensiøse.  For noen
 284 dager siden kom
 285 <a href="http://global.bsa.org/globalpiracy2008/studies/globalpiracy2008.pdf">siste
 286 rapport</a>, og det er flere kritiske kommentarer publisert de siste
 287 dagene.  Et spesielt interessant kommentar fra Sverige,
 288 <a href="http://www.idg.se/2.1085/1.229795/bsa-hoftade-sverigesiffror">BSA
 289 höftade Sverigesiffror</a>, oppsummeres slik:</p>
 290
 291 <blockquote>
 292 I sin senaste rapport slår BSA fast att 25 procent av all mjukvara i
 293 Sverige är piratkopierad. Det utan att ha pratat med ett enda svenskt
 294 företag. "Man bör nog kanske inte se de här siffrorna som helt
 295 exakta", säger BSAs Sverigechef John Hugosson.
 296 </blockquote>
 297
 298 <p>Mon tro om de er like metodiske når de gjetter på andelen piratkopiering i Norge?  To andre kommentarer er <a
 299 href="http://www.vnunet.com/vnunet/comment/2242134/bsa-piracy-figures-shot-reality">BSA
 300 piracy figures need a shot of reality</a> og <a
 301 href="http://www.michaelgeist.ca/content/view/3958/125/">Does The WIPO
 302 Copyright Treaty Work?</a></p>
 303
 304 <p>Fant lenkene via <a
 305 href="http://tech.slashdot.org/article.pl?sid=09/05/17/1632242">oppslag
 306 på Slashdot</a>.</p>
 307
 308  </div>
 309  <div class="tags">
 310
 311
 312
 313   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>, <a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett</a>, <a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern</a>.
 314
 315  </div>
 316 </div>
 317 <div class="padding"></div>
 318
 319 <div class="entry">
 320  <div class="title">
 321  <a href="http://people.skolelinux.org/pere/blog/Endelig_operativt_webbasert_medlemsregister_for_Fri_programvare_i_skolen.html">Endelig operativt webbasert medlemsregister for Fri programvare i skolen</a>
 322  </div>
 323  <div class="date">
 324   2009-11-02 22:40
 325  </div>
 326
 327  <div class="body">
 328
 329 <p>Under helgens utviklersamling i
 330 <a href="http://www.skolelinux.no/">Skolelinux</a> fikk jeg endelig
 331 satt meg ned sammen med Ronny Aasen i styret for å få et webbasert
 332 medlemsregister tilbake på plass for foreningen som passer på
 333 skolelinuxprosjektet.  Etter flere års knot og problemer, er nå
 334 memberdb satt opp og klart til bruk.  Import av det gamle
 335 medlemsregisteret har vist seg vanskelig, så alle medlemmer bes om å
 336 registrere seg på nytt.  Hvis du støtter FRiSKs formål så er du
 337 hjertelig velkommen til
 338 <a href="http://medlem.friprogramvareiskolen.no/">å melde deg
 339 inn</a>. Formålet lyder:</p>
 340
 341 <blockquote>Linux i skolen skal tilrettelegge for og informere om bruk
 342 av fri programvare, i henhold til Debian Free Software Guidelines av
 343 2002-02-03, i den norske skolen, slik som f.eks. Linux og
 344 GNU.</blockquote>
 345
 346  </div>
 347  <div class="tags">
 348
 349
 350
 351   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
 352
 353  </div>
 354 </div>
 355 <div class="padding"></div>
 356
 357 <div class="entry">
 358  <div class="title">
 359  <a href="http://people.skolelinux.org/pere/blog/Opphavet_til_Skolelinux_prosjektet.html">Opphavet til Skolelinux-prosjektet</a>
 360  </div>
 361  <div class="date">
 362   2009-12-17 10:50
 363  </div>
 364
 365  <div class="body">
 366
 367 <p>De færreste er klar over at Skolelinux-prosjektet kom som et resultat
 368 av en avgjørelse på årsmøtet i
 369 <a href="http://www.nuug.no/">NUUG</a> i 2000-06-29, der Håkon Wium
 370 Lie, da varamedlem i styret, tok på seg oppdraget om å starte et
 371 initiativ kalt "Teach the Teacher", som skulle være et initiativ for
 372 å få fri programvare og unix-lignende operativsystemer inn i Skolen.
 373 Tanken var at en måtte starte med lærerne for at ungene skulle få
 374 mulighet til å møte en bedre IT-hverdag.  Jeg var tilstede på
 375 møtet, og hadde sans for ideen, men intet skjedde.  På vårparten
 376 2001 ble det arrangert en demonstrasjon i anledning at First Tuesday
 377 hadde invitert Microsoft til et møte for å fortelle om fremtidens
 378 Internet.  Dette provoserte endel av oss, og EFN og NUUG tok initiativ
 379 til å arrangere
 380 <a href="http://www.digi.no/60982/first-tuesday-mote-med-microsoft-protest">en
 381 demonstrasjon utenfor lokalene 2001-05-21</a>.  Blant de som sto bak
 382 demonstrasjonen var Vidar Bakke fra NUUG og Håkon W. Lie fra EFN.
 383 Etter demonstrasjonen arrangerte Håkon en fest hjemme hos seg der alle
 384 som hadde vært aktive i demonstrasjonsplanlegging og gjennomføringen
 385 deltok.  Før festen var jeg blitt lei av å vente på at Håkon skulle ta
 386 initiativ til "Teach the Teacher", og for å forsøke å få litt fremgang
 387 besteme jeg meg for å benytte anledningen hos Håkon til å snakke om
 388 behovet for å hjelpe skolene i gang med bedre datasystemer bestående
 389 av fri programvare og unix-lignende operativsystemer.  Flere var
 390 interessert, og Knut Yrvin tenkte på ideen.  Han
 391 <a href="http://developer.skolelinux.no/brev/2001-06-28-invitasjon-skolelinux.txt">ropte
 392 sammen</a> til et stiftelsesmøte i prosjektet i sin arbeidsgivers
 393 Objectwares lokaler ved Ullevål stadion 2001-07-02, og jeg ble med.
 394 Resten er historie. :)</p>
 395
 396  </div>
 397  <div class="tags">
 398
 399
 400
 401   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 402
 403  </div>
 404 </div>
 405 <div class="padding"></div>
 406
 407 <div class="entry">
 408  <div class="title">
 409  <a href="http://people.skolelinux.org/pere/blog/Automatic_Munin_and_Nagios_configuration.html">Automatic Munin and Nagios configuration</a>
 410  </div>
 411  <div class="date">
 412   2010-01-27 15:15
 413  </div>
 414
 415  <div class="body">
 416
 417 <p>One of the new features in the next Debian/Lenny based release of
 418 Debian Edu/Skolelinux, which is scheduled for release in the next few
 419 days, is automatic configuration of the service monitoring system
 420 Nagios.  The previous release had automatic configuration of trend
 421 analysis using Munin, and this Lenny based release take that a step
 422 further.</p>
 423
 424 <p>When installing a Debian Edu Main-server, it is automatically
 425 configured as a Munin and Nagios server.  In addition, it is
 426 configured to be a server for the
 427 <a href="http://wiki.debian.org/DebianEdu/HowTo/SiteSummary">SiteSummary
 428 system</a> I have written for use in Debian Edu.  The SiteSummary
 429 system is inspired by a system used by the University of Oslo where I
 430 work.  In short, the system provide a centralised collector of
 431 information about the computers on the network, and a client on each
 432 computer submitting information to this collector.  This allow for
 433 automatic information on which packages are installed on each machine,
 434 which kernel the machines are using, what kind of configuration the
 435 packages got etc.  This also allow us to automatically generate Munin
 436 and Nagios configuration.</p>
 437
 438 <p>All computers reporting to the sitesummary collector with the
 439 munin-node package installed is automatically enabled as a Munin
 440 client and graphs from the statistics collected from that machine show
 441 up automatically on http://www/munin/ on the Main-server.</p>
 442
 443 <p>All non-laptop computers reporting to the sitesummary collector are
 444 automatically monitored for network presence (ping and any network
 445 services detected).  In addition, all computers (also laptops) with
 446 the nagios-nrpe-server package installed and configured the way
 447 sitesummary would configure it, are monitored for full disks, software
 448 raid status, swap free and other checks that need to run locally on
 449 the machine.</p>
 450
 451 <p>The result is that the administrator on a school using Debian Edu
 452 based on Lenny will be able to check the health of his installation
 453 with one look at the Nagios settings, without having to spend any time
 454 keeping the Nagios configuration up-to-date.</p>
 455
 456 <p>The only configuration one need to do to get Nagios up and running
 457 is to set the password used to get access via HTTP.  The system
 458 administrator need to run "<tt>htpasswd /etc/nagios3/htpasswd.users
 459 nagiosadmin</tt>" to create a nagiosadmin user and set a password for
 460 it to be able to log into the Nagios web pages.  After that,
 461 everything is taken care of.</p>
 462
 463  </div>
 464  <div class="tags">
 465
 466
 467
 468   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary</a>.
 469
 470  </div>
 471 </div>
 472 <div class="padding"></div>
 473
 474 <div class="entry">
 475  <div class="title">
 476  <a href="http://people.skolelinux.org/pere/blog/Debian_Edu___Skolelinux_based_on_Lenny_released__work_continues.html">Debian Edu / Skolelinux based on Lenny released, work continues</a>
 477  </div>
 478  <div class="date">
 479   2010-02-11 17:15
 480  </div>
 481
 482  <div class="body">
 483
 484 <p>On Tuesday, the Debian/Lenny based version of
 485 <a href="http://www.skolelinux.org/">Skolelinux</a> was finally
 486 shipped.  This was a major leap forward for the project, and I am very
 487 pleased that we finally got the release wrapped up.  Work on the first
 488 point release starts imediately, as we plan to get that one out a
 489 month after the major release, to include all fixes for bugs we found
 490 and fixed too late in the release process to include last Tuesday.</p>
 491
 492 <p>Perhaps it even is time for some partying?</p>
 493
 494 <p>After this first point release, my plan is to focus again on the
 495 next major release, based on Squeeze.  We will try to get as many of
 496 the fixes we need into the official Debian packages before the freeze,
 497 and have just a few weeks or months to make it happen.</p>
 498
 499  </div>
 500  <div class="tags">
 501
 502
 503
 504   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 505
 506  </div>
 507 </div>
 508 <div class="padding"></div>
 509
 510 <div class="entry">
 511  <div class="title">
 512  <a href="http://people.skolelinux.org/pere/blog/After_6_years_of_waiting__the_Xreset_d_feature_is_implemented.html">After 6 years of waiting, the Xreset.d feature is implemented</a>
 513  </div>
 514  <div class="date">
 515   2010-03-06 18:15
 516  </div>
 517
 518  <div class="body">
 519
 520 <p>6 years ago, as part of the Debian Edu development I am involved
 521 in, I asked for a hook in the kdm and gdm setup to run scripts as root
 522 when the user log out.  A bug was submitted against the xfree86-common
 523 package in 2004 (<a href="http://bugs.debian.org/230422">#230422</a>),
 524 and revisited every time Debian Edu was working on a new release.
 525 Today, this finally paid off.</p>
 526
 527 <p>The framework for this feature was today commited to the git
 528 repositry for the xorg package, and the git repository for xdm has
 529 been updated to use this framework.  Next on my agenda is to make sure
 530 kdm and gdm also add code to use this framework.</p>
 531
 532 <p>In Debian Edu, we want to ability to run commands as root when the
 533 user log out, to get rid of runaway processes and do general cleanup
 534 after a user.  With this framework in place, we finally can do that in
 535 a generic way that work with all display managers using this
 536 framework.  My goal is to get all display managers in Debian use it,
 537 similar to how they use the Xsession.d framework today.<p>
 538
 539  </div>
 540  <div class="tags">
 541
 542
 543
 544   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 545
 546  </div>
 547 </div>
 548 <div class="padding"></div>
 549
 550 <div class="entry">
 551  <div class="title">
 552  <a href="http://people.skolelinux.org/pere/blog/Kerberos_for_Debian_Edu_Squeeze_.html">Kerberos for Debian Edu/Squeeze?</a>
 553  </div>
 554  <div class="date">
 555   2010-04-14 17:20
 556  </div>
 557
 558  <div class="body">
 559
 560 <p><a href="http://www.nuug.no/aktiviteter/20100413-kerberos/">Yesterdays
 561 NUUG presentation</a> about Kerberos was inspiring, and reminded me
 562 about the need to start using Kerberos in Skolelinux.  Setting up a
 563 Kerberos server seem to be straight forward, and if we get this in
 564 place a long time before the Squeeze version of Debian freezes, we
 565 have a chance to migrate Skolelinux away from NFSv3 for the home
 566 directories, and over to an architecture where the infrastructure do
 567 not have to trust IP addresses and machines, and instead can trust
 568 users and cryptographic keys instead.</p>
 569
 570 <p>A challenge will be integration and administration.  Is there a
 571 Kerberos implementation for Debian where one can control the
 572 administration access in Kerberos using LDAP groups?  With it, the
 573 school administration will have to maintain access control using flat
 574 files on the main server, which give a huge potential for errors.</p>
 575
 576 <p>A related question I would like to know is how well Kerberos and
 577 pam-ccreds (offline password check) work together.  Anyone know?</p>
 578
 579 <p>Next step will be to use Kerberos for access control in Lwat and
 580 Nagios.  I have no idea how much work that will be to implement.  We
 581 would also need to document how to integrate with Windows AD, as such
 582 shared network will require two Kerberos realms that need to cooperate
 583 to work properly.</p>
 584
 585 <p>I believe a good start would be to start using Kerberos on the
 586 skolelinux.no machines, and this way get ourselves experience with
 587 configuration and integration.  A natural starting point would be
 588 setting up ldap.skolelinux.no as the Kerberos server, and migrate the
 589 rest of the machines from PAM via LDAP to PAM via Kerberos one at the
 590 time.</p>
 591
 592 <p>If you would like to contribute to get this working in Skolelinux,
 593 I recommend you to see the video recording from yesterdays NUUG
 594 presentation, and start using Kerberos at home.  The video show show
 595 up in a few days.</p>
 596
 597  </div>
 598  <div class="tags">
 599
 600
 601
 602   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 603
 604  </div>
 605 </div>
 606 <div class="padding"></div>
 607
 608 <div class="entry">
 609  <div class="title">
 610  <a href="http://people.skolelinux.org/pere/blog/Thoughts_on_roaming_laptop_setup_for_Debian_Edu.html">Thoughts on roaming laptop setup for Debian Edu</a>
 611  </div>
 612  <div class="date">
 613   2010-04-28 20:40
 614  </div>
 615
 616  <div class="body">
 617
 618 <p>For some years now, I have wondered how we should handle laptops in
 619 Debian Edu.  The Debian Edu infrastructure is mostly designed to
 620 handle stationary computers, and less suited for computers that come
 621 and go.</p>
 622
 623 <p>Now I finally believe I have an sensible idea on how to adjust
 624 Debian Edu for laptops, by introducing a new profile for them, for
 625 example called Roaming Workstations.  Here are my thought on this.
 626 The setup would consist of the following:</p>
 627
 628 <ul>
 629
 630  <li>During installation, the user name of the owner / primary user of
 631    the laptop is requested and a local home directory is set up for
 632    the user, with uid and gid information fetched from the LDAP
 633    server.  This allow the user to work also when offline.  The
 634    central home directory can be available in a subdirectory on
 635    request, for example mounted via CIFS.  It could be mounted
 636    automatically when a user log in while on the Debian Edu network,
 637    and unmounted when the machine is taken away (network down,
 638    hibernate, etc), it can be set up to do automatic mounting on
 639    request (using autofs), or perhaps some GUI button on the desktop
 640    can be used to access it when needed.  Perhaps it is enough to use
 641    the fish protocol in KDE?</li>
 642
 643  <li>Password checking is set up to use LDAP or Kerberos
 644    authentication when the machine is on the Debian Edu network, and
 645    to cache the password for offline checking when the machine unable
 646    to reach the LDAP or Kerberos server.  This can be done using
 647    <a href="http://www.padl.com/OSS/pam_ccreds.html">libpam-ccreds</a>
 648    or the Fedora developed
 649    <a href="https://fedoraproject.org/wiki/Features/SSSD">System
 650    Security Services Daemon</a> packages.</li>
 651
 652  <li>File synchronisation with the central home directory is set up
 653    using a shared directory in both the local and the central home
 654    directory, using unison.</li>
 655
 656  <li>Printing should be set up to print to all printers broadcasting
 657    their existence on the local network, and should then work out of
 658    the box with CUPS.  For sites needing accurate printer quotas, some
 659    system with Kerberos authentication or printing via ssh could be
 660    implemented.</li>
 661
 662  <li>For users that should have local root access to their laptop,
 663    sudo should be used to allow this to the local user.</li>
 664
 665  <li>It would be nice if user and group information from LDAP is
 666    cached on the client, but given that there are entries for the
 667    local user and primary group in /etc/, it should not be needed.</li>
 668
 669 </ul>
 670
 671 <p>I believe all the pieces to implement this are in Debian/testing at
 672 the moment.  If we work quickly, we should be able to get this ready
 673 in time for the Squeeze release to freeze.  Some of the pieces need
 674 tweaking, like libpam-ccreds should get support for pam-auth-update
 675 (<a href="http://bugs.debian.org/566718">#566718</a>) and nslcd (or
 676 perhaps debian-edu-config) should get some integration code to stop
 677 its daemon when the LDAP server is unavailable to avoid long timeouts
 678 when disconnected from the net.  If we get Kerberos enabled, we need
 679 to make sure we avoid long timeouts there too.</p>
 680
 681 <p>If you want to help out with implementing this for Debian Edu,
 682 please contact us on debian-edu@lists.debian.org.</p>
 683
 684  </div>
 685  <div class="tags">
 686
 687
 688
 689   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 690
 691  </div>
 692 </div>
 693 <div class="padding"></div>
 694
 695 <div class="entry">
 696  <div class="title">
 697  <a href="http://people.skolelinux.org/pere/blog/Forcing_new_users_to_change_their_password_on_first_login.html">Forcing new users to change their password on first login</a>
 698  </div>
 699  <div class="date">
 700   2010-05-02 13:47
 701  </div>
 702
 703  <div class="body">
 704
 705 <p>One interesting feature in Active Directory, is the ability to
 706 create a new user with an expired password, and thus force the user to
 707 change the password on the first login attempt.</p>
 708
 709 <p>I'm not quite sure how to do that with the LDAP setup in Debian
 710 Edu, but did some initial testing with a local account.  The account
 711 and password aging information is available in /etc/shadow, but
 712 unfortunately, it is not possible to specify an expiration time for
 713 passwords, only a maximum age for passwords.</p>
 714
 715 <p>A freshly created account (using adduser test) will have these
 716 settings in /etc/shadow:</p>
 717
 718 <blockquote><pre>
 719 root@tjener:~# chage -l test
 720 Last password change                                    : May 02, 2010
 721 Password expires                                        : never
 722 Password inactive                                       : never
 723 Account expires                                         : never
 724 Minimum number of days between password change          : 0
 725 Maximum number of days between password change          : 99999
 726 Number of days of warning before password expires       : 7
 727 root@tjener:~#
 728 </pre></blockquote>
 729
 730 <p>The only way I could come up with to create a user with an expired
 731 account, is to change the date of the last password change to the
 732 lowest value possible (January 1th 1970), and the maximum password age
 733 to the difference in days between that date and today.  To make it
 734 simple, I went for 30 years (30 * 365 = 10950) and January 2th (to
 735 avoid testing if 0 is a valid value).</p>
 736
 737 <p>After using these commands to set it up, it seem to work as
 738 intended:</p>
 739
 740 <blockquote><pre>
 741 root@tjener:~# chage -d 1 test; chage -M 10950 test
 742 root@tjener:~# chage -l test
 743 Last password change                                    : Jan 02, 1970
 744 Password expires                                        : never
 745 Password inactive                                       : never
 746 Account expires                                         : never
 747 Minimum number of days between password change          : 0
 748 Maximum number of days between password change          : 10950
 749 Number of days of warning before password expires       : 7
 750 root@tjener:~#
 751 </pre></blockquote>
 752
 753 <p>So far I have tested this with ssh and console, and kdm (in
 754 Squeeze) login, and all ask for a new password before login in the
 755 user (with ssh, I was thrown out and had to log in again).</p>
 756
 757 <p>Perhaps we should set up something similar for Debian Edu, to make
 758 sure only the user itself have the account password?</p>
 759
 760 <p>If you want to comment on or help out with implementing this for
 761 Debian Edu, please contact us on debian-edu@lists.debian.org.</p>
 762
 763 <p>Update 2010-05-02 17:20: Paul Tötterman tells me on IRC that the
 764 shadow(8) page in Debian/testing now state that setting the date of
 765 last password change to zero (0) will force the password to be changed
 766 on the first login.  This was not mentioned in the manual in Lenny, so
 767 I did not notice this in my initial testing.  I have tested it on
 768 Squeeze, and '<tt>chage -d 0 username</tt>' do work there.  I have not
 769 tested it on Lenny yet.</p>
 770
 771 <p>Update 2010-05-02-19:05: Jim Paris tells me via email that an
 772 equivalent command to expire a password is '<tt>passwd -e
 773 username</tt>', which insert zero into the date of the last password
 774 change.</p>
 775
 776  </div>
 777  <div class="tags">
 778
 779
 780
 781   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>.
 782
 783  </div>
 784 </div>
 785 <div class="padding"></div>
 786
 787 <div class="entry">
 788  <div class="title">
 789  <a href="http://people.skolelinux.org/pere/blog/Sitesummary_tip__Listing_MAC_address_of_all_clients.html">Sitesummary tip: Listing MAC address of all clients</a>
 790  </div>
 791  <div class="date">
 792   2010-05-14 21:10
 793  </div>
 794
 795  <div class="body">
 796
 797 <p>In the recent Debian Edu versions, the
 798 <a href="http://wiki.debian.org/DebianEdu/HowTo/SiteSummary">sitesummary
 799 system</a> is used to keep track of the machines in the school
 800 network.  Each machine will automatically report its status to the
 801 central server after boot and once per night.  The network setup is
 802 also reported, and using this information it is possible to get the
 803 MAC address of all network interfaces in the machines.  This is useful
 804 to update the DHCP configuration.</p>
 805
 806 <p>To give some idea how to use sitesummary, here is a one-liner to
 807 ist all MAC addresses of all machines reporting to sitesummary.  Run
 808 this on the collector host:</p>
 809
 810 <blockquote><pre>
 811 perl -MSiteSummary -e 'for_all_hosts(sub { print join(" ", get_macaddresses(shift)), "\n"; });'
 812 </pre></blockquote>
 813
 814 <p>This will list all MAC addresses assosiated with all machine, one
 815 line per machine and with space between the MAC addresses.</p>
 816
 817 <p>To allow system administrators easier job at adding static DHCP
 818 addresses for hosts, it would be possible to extend this to fetch
 819 machine information from sitesummary and update the DHCP and DNS
 820 tables in LDAP using this information.  Such tool is unfortunately not
 821 written yet.</p>
 822
 823  </div>
 824  <div class="tags">
 825
 826
 827
 828   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary</a>.
 829
 830  </div>
 831 </div>
 832 <div class="padding"></div>
 833
 834 <div class="entry">
 835  <div class="title">
 836  <a href="http://people.skolelinux.org/pere/blog/Parallellized_boot_is_now_the_default_in_Debian_unstable.html">Parallellized boot is now the default in Debian/unstable</a>
 837  </div>
 838  <div class="date">
 839   2010-05-14 22:40
 840  </div>
 841
 842  <div class="body">
 843
 844 <p>Since this evening, parallel booting is the default in
 845 Debian/unstable for machines using dependency based boot sequencing.
 846 Apparently the testing of concurrent booting has been wider than
 847 expected, if I am to believe the
 848 <a href="http://lists.debian.org/debian-devel/2010/05/msg00122.html">input
 849 on debian-devel@</a>, and I concluded a few days ago to move forward
 850 with the feature this weekend, to give us some time to detect any
 851 remaining problems before Squeeze is frozen.  If serious problems are
 852 detected, it is simple to change the default back to sequential boot.
 853 The upload of the new sysvinit package also activate a new upstream
 854 version.</p>
 855
 856 More information about
 857 <a href="http://wiki.debian.org/LSBInitScripts/DependencyBasedBoot">dependency
 858 based boot sequencing</a> is available from the Debian wiki.  It is
 859 currently possible to disable parallel booting when one run into
 860 problems caused by it, by adding this line to /etc/default/rcS:</p>
 861
 862 <blockquote><pre>
 863 CONCURRENCY=none
 864 </pre></blockquote>
 865
 866 <p>If you report any problems with dependencies in init.d scripts to
 867 the BTS, please usertag the report to get it to show up at
 868 <a href="http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=initscripts-ng-devel@lists.alioth.debian.org">the
 869 list of usertagged bugs related to this</a>.</p>
 870
 871  </div>
 872  <div class="tags">
 873
 874
 875
 876   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
 877
 878  </div>
 879 </div>
 880 <div class="padding"></div>
 881
 882 <div class="entry">
 883  <div class="title">
 884  <a href="http://people.skolelinux.org/pere/blog/Pieces_of_the_roaming_laptop_puzzle_in_Debian.html">Pieces of the roaming laptop puzzle in Debian</a>
 885  </div>
 886  <div class="date">
 887   2010-05-19 19:00
 888  </div>
 889
 890  <div class="body">
 891
 892 <p>Today, the last piece of the puzzle for roaming laptops in Debian
 893 Edu finally entered the Debian archive.  Today, the new
 894 <a href="http://packages.qa.debian.org/libp/libpam-mklocaluser.html">libpam-mklocaluser</a>
 895 package was accepted.  Two days ago, two other pieces was accepted
 896 into unstable.  The
 897 <a href="http://packages.qa.debian.org/p/pam-python.html">pam-python</a>
 898 package needed by libpam-mklocaluser, and the
 899 <a href="http://packages.qa.debian.org/s/sssd.html">sssd</a> package
 900 passed NEW on Monday.  In addition, the
 901 <a href="http://packages.qa.debian.org/libp/libpam-ccreds.html">libpam-ccreds</a>
 902 package we need is in experimental (version 10-4) since Saturday, and
 903 hopefully will be moved to unstable soon.</p>
 904
 905 <p>This collection of packages allow for two different setups for
 906 roaming laptops.  The traditional setup would be using libpam-ccreds,
 907 nscd and libpam-mklocaluser with LDAP or Kerberos authentication,
 908 which should work out of the box if the configuration changes proposed
 909 for nscd in <a href="http://bugs.debian.org/485282">BTS report
 910 #485282</a> is implemented.  The alternative setup is to use sssd with
 911 libpam-mklocaluser to connect to LDAP or Kerberos and let sssd take
 912 care of the caching of passwords and group information.</p>
 913
 914 <p>I have so far been unable to get sssd to work with the LDAP server
 915 at the University, but suspect the issue is some SSL/GnuTLS related
 916 problem with the server certificate.  I plan to update the Debian
 917 package to version 1.2, which is scheduled for next week, and hope to
 918 find time to make sure the next release will include both the
 919 Debian/Ubuntu specific patches.  Upstream is friendly and responsive,
 920 and I am sure we will find a good solution.</p>
 921
 922 <p>The idea is to set up the roaming laptops to authenticate using
 923 LDAP or Kerberos and create a local user with home directory in /home/
 924 when a usre in LDAP logs in via KDM or GDM for the first time, and
 925 cache the password for offline checking, as well as caching group
 926 memberhips and other relevant LDAP information.  The
 927 libpam-mklocaluser package was created to make sure the local home
 928 directory is in /home/, instead of /site/server/directory/ which would
 929 be the home directory if pam_mkhomedir was used.  To avoid confusion
 930 with support requests and configuration, we do not want local laptops
 931 to have users in a path that is used for the same users home directory
 932 on the home directory servers.</p>
 933
 934 <p>One annoying problem with gdm is that it do not show the PAM
 935 message passed to the user from libpam-mklocaluser when the local user
 936 is created.  Instead gdm simply reject the login with some generic
 937 message.  The message is shown in kdm, ssh and login, so I guess it is
 938 a bug in gdm.  Have not investigated if there is some other message
 939 type that can be used instead to get gdm to also show the message.</p>
 940
 941 <p>If you want to help out with implementing this for Debian Edu,
 942 please contact us on debian-edu@lists.debian.org.</p>
 943
 944  </div>
 945  <div class="tags">
 946
 947
 948
 949   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 950
 951  </div>
 952 </div>
 953 <div class="padding"></div>
 954
 955 <div class="entry">
 956  <div class="title">
 957  <a href="http://people.skolelinux.org/pere/blog/More_flexible_firmware_handling_in_debian_installer.html">More flexible firmware handling in debian-installer</a>
 958  </div>
 959  <div class="date">
 960   2010-05-22 21:30
 961  </div>
 962
 963  <div class="body">
 964
 965 <p>After a long break from debian-installer development, I finally
 966 found time today to return to the project.  Having to spend less time
 967 working dependency based boot in debian, as it is almost complete now,
 968 definitely helped freeing some time.</p>
 969
 970 <p>A while back, I ran into a problem while working on Debian Edu.  We
 971 include some firmware packages on the Debian Edu CDs, those needed to
 972 get disk and network controllers working.  Without having these
 973 firmware packages available during installation, it is impossible to
 974 install Debian Edu on the given machine, and because our target group
 975 are non-technical people, asking them to provide firmware packages on
 976 an external medium is a support pain.  Initially, I expected it to be
 977 enough to include the firmware packages on the CD to get
 978 debian-installer to find and use them.  This proved to be wrong.
 979 Next, I hoped it was enough to symlink the relevant firmware packages
 980 to some useful location on the CD (tried /cdrom/ and
 981 /cdrom/firmware/).  This also proved to not work, and at this point I
 982 found time to look at the debian-installer code to figure out what was
 983 going to work.</p>
 984
 985 <p>The firmware loading code is in the hw-detect package, and a closer
 986 look revealed that it would only look for firmware packages outside
 987 the installation media, so the CD was never checked for firmware
 988 packages.  It would only check USB sticks, floppies and other
 989 "external" media devices.  Today I changed it to also look in the
 990 /cdrom/firmware/ directory on the mounted CD or DVD, which should
 991 solve the problem I ran into with Debian edu.  I also changed it to
 992 look in /firmware/, to make sure the installer also find firmware
 993 provided in the initrd when booting the installer via PXE, to allow us
 994 to provide the same feature in the PXE setup included in Debian
 995 Edu.</p>
 996
 997 <p>To make sure firmware deb packages with a license questions are not
 998 activated without asking if the license is accepted, I extended
 999 hw-detect to look for preinst scripts in the firmware packages, and
1000 run these before activating the firmware during installation.  The
1001 license question is asked using debconf in the preinst, so this should
1002 solve the issue for the firmware packages I have looked at so far.</p>
1003
1004 <p>If you want to discuss the details of these features, please
1005 contact us on debian-boot@lists.debian.org.</p>
1006
1007  </div>
1008  <div class="tags">
1009
1010
1011
1012   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
1013
1014  </div>
1015 </div>
1016 <div class="padding"></div>
1017
1018 <div class="entry">
1019  <div class="title">
1020  <a href="http://people.skolelinux.org/pere/blog/Parallellized_boot_seem_to_hold_up_well_in_Debian_testing.html">Parallellized boot seem to hold up well in Debian/testing</a>
1021  </div>
1022  <div class="date">
1023   2010-05-27 23:55
1024  </div>
1025
1026  <div class="body">
1027
1028 <p>A few days ago, parallel booting was enabled in Debian/testing.
1029 The feature seem to hold up pretty well, but three fairly serious
1030 issues are known and should be solved:
1031
1032 <p><ul>
1033
1034 <li>The wicd package seen to
1035 <a href="http://bugs.debian.org/508289">break NFS mounting</a> and
1036 <a href="http://bugs.debian.org/581586">network setup</a> when
1037 parallel booting is enabled.  No idea why, but the wicd maintainer
1038 seem to be on the case.</li>
1039
1040 <li>The nvidia X driver seem to
1041 <a href="http://bugs.debian.org/583312">have a race condition</a>
1042 triggered more easily when parallel booting is in effect.  The
1043 maintainer is on the case.</li>
1044
1045 <li>The sysv-rc package fail to properly enable dependency based boot
1046 sequencing (the shutdown is broken) when old file-rc users
1047 <a href="http://bugs.debian.org/575080">try to switch back</a> to
1048 sysv-rc.  One way to solve it would be for file-rc to create
1049 /etc/init.d/.legacy-bootordering, and another is to try to make
1050 sysv-rc more robust.  Will investigate some more and probably upload a
1051 workaround in sysv-rc to help those trying to move from file-rc to
1052 sysv-rc get a working shutdown.</li>
1053
1054 </ul></p>
1055
1056 <p>All in all not many surprising issues, and all of them seem
1057 solvable before Squeeze is released.  In addition to these there are
1058 some packages with bugs in their dependencies and run level settings,
1059 which I expect will be fixed in a reasonable time span.</p>
1060
1061 <p>If you report any problems with dependencies in init.d scripts to
1062 the BTS, please usertag the report to get it to show up at
1063 <a href="http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=initscripts-ng-devel@lists.alioth.debian.org">the
1064 list of usertagged bugs related to this</a>.</p>
1065
1066 <p>Update: Correct bug number to file-rc issue.</p>
1067
1068  </div>
1069  <div class="tags">
1070
1071
1072
1073   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
1074
1075  </div>
1076 </div>
1077 <div class="padding"></div>
1078
1079 <div class="entry">
1080  <div class="title">
1081  <a href="http://people.skolelinux.org/pere/blog/KDM_fail_at_boot_with_NVidia_cards___and_no_one_try_to_fix_it_.html">KDM fail at boot with NVidia cards - and no one try to fix it?</a>
1082  </div>
1083  <div class="date">
1084   2010-06-01 17:05
1085  </div>
1086
1087  <div class="body">
1088
1089 <p>It is strange to watch how a bug in Debian causing KDM to fail to
1090 start at boot when an NVidia video card is used is handled.  The
1091 problem seem to be that the nvidia X.org driver uses a long time to
1092 initialize, and this duration is longer than kdm is configured to
1093 wait.</p>
1094
1095 <p>I came across two bugs related to this issue,
1096 <a href="http://bugs.debian.org/583312">#583312</a> initially filed
1097 against initscripts and passed on to nvidia-glx when it became obvious
1098 that the nvidia drivers were involved, and
1099 <a href="http://bugs.debian.org/524751">#524751</a> initially filed against
1100 kdm and passed on to src:nvidia-graphics-drivers for unknown reasons.</p>
1101
1102 <p>To me, it seem that no-one is interested in actually solving the
1103 problem nvidia video card owners experience and make sure the Debian
1104 distribution work out of the box for these users.  The nvidia driver
1105 maintainers expect kdm to be set up to wait longer, while kdm expect
1106 the nvidia driver maintainers to fix the driver to start faster, and
1107 while they wait for each other I guess the users end up switching to a
1108 distribution that work for them.  I have no idea what the solution is,
1109 but I am pretty sure that waiting for each other is not it.</p>
1110
1111 <p>I wonder why we end up handling bugs this way.</p>
1112
1113  </div>
1114  <div class="tags">
1115
1116
1117
1118   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
1119
1120  </div>
1121 </div>
1122 <div class="padding"></div>
1123
1124 <div class="entry">
1125  <div class="title">
1126  <a href="http://people.skolelinux.org/pere/blog/Sitesummary_tip__Listing_computer_hardware_models_used_at_site.html">Sitesummary tip: Listing computer hardware models used at site</a>
1127  </div>
1128  <div class="date">
1129   2010-06-03 12:05
1130  </div>
1131
1132  <div class="body">
1133
1134 <p>When using sitesummary at a site to track machines, it is possible
1135 to get a list of the machine types in use thanks to the DMI
1136 information extracted from each machine.  The script to do so is
1137 included in the sitesummary package, and here is example output from
1138 the Skolelinux build servers:</p>
1139
1140 <blockquote><pre>
1141 maintainer:~# /usr/lib/sitesummary/hardware-model-summary
1142   vendor                    count
1143   Dell Computer Corporation     1
1144     PowerEdge 1750              1
1145   IBM                           1
1146     eserver xSeries 345 -[8670M1X]-     1
1147   Intel                         2
1148   [no-dmi-info]                 3
1149 maintainer:~#
1150 </pre></blockquote>
1151
1152 <p>The quality of the report depend on the quality of the DMI tables
1153 provided in each machine.  Here there are Intel machines without model
1154 information listed with Intel as vendor and mo model, and virtual Xen
1155 machines listed as [no-dmi-info].  One can add -l as a command line
1156 option to list the individual machines.</p>
1157
1158 <p>A larger list is
1159 <a href="http://narvikskolen.no/sitesummary/">available from the the
1160 city of Narvik</a>, which uses Skolelinux on all their shools and also
1161 provide the basic sitesummary report publicly.  In their report there
1162 are ~1400 machines. I know they use both Ubuntu and Skolelinux on
1163 their machines, and as sitesummary is available in both distributions,
1164 it is trivial to get all of them to report to the same central
1165 collector.</p>
1166
1167  </div>
1168  <div class="tags">
1169
1170
1171
1172   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary</a>.
1173
1174  </div>
1175 </div>
1176 <div class="padding"></div>
1177
1178 <div class="entry">
1179  <div class="title">
1180  <a href="http://people.skolelinux.org/pere/blog/A_manual_for_standards_wars___.html">A manual for standards wars...</a>
1181  </div>
1182  <div class="date">
1183   2010-06-06 14:15
1184  </div>
1185
1186  <div class="body">
1187
1188 <p>Via the
1189 <a href="http://feedproxy.google.com/~r/robweir/antic-atom/~3/QzU4RgoAGMg/weekly-links-10.html">blog
1190 of Rob Weir</a> I came across the very interesting essay named
1191 <a href="http://faculty.haas.berkeley.edu/shapiro/wars.pdf">The Art of
1192 Standards Wars</a> (PDF 25 pages).  I recommend it for everyone
1193 following the standards wars of today.</p>
1194
1195  </div>
1196  <div class="tags">
1197
1198
1199
1200   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/standard">standard</a>.
1201
1202  </div>
1203 </div>
1204 <div class="padding"></div>
1205
1206 <div class="entry">
1207  <div class="title">
1208  <a href="http://people.skolelinux.org/pere/blog/Skolelinux_er_laget_for_sentraldrifting__naturligvis.html">Skolelinux er laget for sentraldrifting, naturligvis</a>
1209  </div>
1210  <div class="date">
1211   2010-06-09 12:30
1212  </div>
1213
1214  <div class="body">
1215
1216 <p>Det er merkelig hvordan myter om Skolelinux overlever.  En slik
1217 myte er at Skolelinux ikke kan sentraldriftes og ha sentralt plasserte
1218 tjenermaskiner.  I siste Computerworld Norge er
1219 <a href="http://www.idg.no/computerworld/article169432.ece">IT-sjef
1220 Viggo Billdal i Steinkjer intervjuet</a>, og forteller uten
1221 blygsel:</p>
1222
1223 <blockquote><p>Vi hadde Skolelinux, men det har vi sluttet med. Vi testet
1224 om det lønte seg med Microsoft eller en åpen plattform. Vi fant ut at
1225 Microsoft egentlig var totalt sett bedre egnet. Det var store
1226 driftskostnader med Skolelinux, blant annet på grunn av
1227 desentraliserte servere. Det var komplisert, så vi gikk vekk fra det
1228 og bruker nå bare Windows.</p></blockquote>
1229
1230 <p>En <a
1231 href="https://init.linpro.no/pipermail/skolelinux.no/bruker/2010-June/009101.html">rask
1232 sjekk</a> mot den norske brukerlista i Skolelinuxprosjektet forteller
1233 at Steinkjers forsøk foregikk fram til 2004/2005, og at Røysing skole
1234 i Steinkjer skal ha vært svært fornøyd med Skolelinux men at kommunen
1235 overkjørte skolen og krevde at de gikk over til Windows.  Et søk på
1236 nettet sendte meg til
1237 <a href="http://www.dn.no/multimedia/archive/00090/Dagens_it_nr__18_90826a.pdf">Dagens
1238 IT nr. 18 2005</a> hvor en kan lese på side 18:</p>
1239
1240 <blockquote><p>Inge Tømmerås ved Røysing skole i Steinkjer kjører ennå
1241 Microsoft, men forteller at kompetanseutfordringen med Skolelinux ikke
1242 var så stor.   Jeg syntes Skolelinux var utrolig lett å drifte uten
1243 forkunnskaper. Men man må jo selvsagt ha tilgang på ekstern kompetanse
1244 til installasjoner og maskinvarefeil, sier Tømmerås.</p></blockquote>
1245
1246 <p>Som systemarkitekten bak Skolelinux, kan jeg bare riste på hodet
1247 over påstanden om at Skolelinux krever desentraliserte tjenere.
1248 Skolelinux-arkitekturen er laget for sentralisert drift og plassering
1249 av tjenerne lokalt eller sentralt alt etter behov og nettkapasitet.
1250 Den er modellert på nettverks- og tjenerløsningen som brukes på
1251 Universitetet i Tromsø og Oslo, der jeg jobber med utvikling av
1252 driftstjenester.  Dette er det heldigvis noen som har fått med seg, og
1253 jeg er glad for å kunne sitere fra en kommentar på den overnevnte
1254 artikkelen.  Min venn og gamle kollega Sturle Sunde forteller der:
1255
1256 <blockquote>
1257 <p>I Flora kommune køyrer vi Skulelinux på skular med alt frå 15 til
1258 meir enn 500 elevar. Dei store skulane har eigen tenar, for det er
1259 mest praktisk. Eg, som er driftsansvarleg for heile nettet, ser
1260 sjeldan dei tenarane fysisk, men at dei står der gjer skulane mindre
1261 avhengige av eksterne linjer som er trege eller dyre. Dei minste
1262 skulane har ikkje eigen tenar. Å bruke sentral tenar er heller ikkje
1263 noko problem. Småskulane klarar seg fint med 1 mbit-linje til ein
1264 sentral tenar eller tenaren på ein større skule.</p>
1265
1266 <p>Det beste med Skulelinux er halvtjukke klientar. Dei treng ikkje
1267 harddisk og brukar minimalt med ressursar på tenaren fordi dei køyrer
1268 programma lokalt. Eit klasserom med 30 sju-åtte år gamle maskiner har
1269 mykje meir CPU og RAM totalt enn nokon moderne tenar til under
1270 millionen. Det trengst to kommandoar på den sentrale tenaren for å
1271 oppdatere alle klientane, både tynne og halvtjukke. Vi har ingen
1272 problem med diskar som ryk heller, som var eit problem før fordi
1273 elevane sat og sparka i maskinene. Og dei krev lite bandbreidde i
1274 nettet, so det er fullt mogleg å køyre slike på småskular med trege
1275 linjer mot tenaren på ein større skule.</p>
1276
1277 <p>Flora kommune har nesten 800 Linux-maskiner i sitt skulenett, og
1278 ein person som tek seg av drift av heile nettet, inkludert tenarar,
1279 klientar, operativsystem, programvare, heimekontorløysing og
1280 administrasjon av brukarar.</p>
1281
1282 <p>No skal det seiast at vi ikkje køyrer rein Skulelinux ut av
1283 boksen. Vi har gjort ein del tilpassingar mot noko Novell-greier som
1284 var der frå før, og som har komplisert installasjonen vår. Etter at
1285 oppsettet var gjort har løysinga vore stabil og kravd minimalt med
1286 arbeid.</p>
1287 </blockquote>
1288
1289 <p>Jeg vet at Narvik, Harstad og Oslo er kommuner der Skolelinux
1290 sentraldriftes med sentrale tjenere.  Det forteller meg at Steinkjers
1291 IT-sjef neppe bør skylde på Skolelinux-løsningen for sine 5 år gamle
1292 minner.</p>
1293
1294  </div>
1295  <div class="tags">
1296
1297
1298
1299   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
1300
1301  </div>
1302 </div>
1303 <div class="padding"></div>
1304
1305 <div class="entry">
1306  <div class="title">
1307  <a href="http://people.skolelinux.org/pere/blog/Automatic_upgrade_testing_from_Lenny_to_Squeeze.html">Automatic upgrade testing from Lenny to Squeeze</a>
1308  </div>
1309  <div class="date">
1310   2010-06-11 22:50
1311  </div>
1312
1313  <div class="body">
1314
1315 <p>The last few days I have done some upgrade testing in Debian, to
1316 see if the upgrade from Lenny to Squeeze will go smoothly.  A few bugs
1317 have been discovered and reported in the process
1318 (<a href="http://bugs.debian.org/585410">#585410</a> in nagios3-cgi,
1319 <a href="http://bugs.debian.org/584879">#584879</a> already fixed in
1320 enscript and <a href="http://bugs.debian.org/584861">#584861</a> in
1321 kdebase-workspace-data), and to get a more regular testing going on, I
1322 am working on a script to automate the test.</p>
1323
1324 <p>The idea is to create a Lenny chroot and use tasksel to install a
1325 Gnome or KDE desktop installation inside the chroot before upgrading
1326 it.  To ensure no services are started in the chroot, a policy-rc.d
1327 script is inserted.  To make sure tasksel believe it is to install a
1328 desktop on a laptop, the tasksel tests are replaced in the chroot
1329 (only acceptable because this is a throw-away chroot).</p>
1330
1331 <p>A naive upgrade from Lenny to Squeeze using aptitude dist-upgrade
1332 currently always fail because udev refuses to upgrade with the kernel
1333 in Lenny, so to avoid that problem the file /etc/udev/kernel-upgrade
1334 is created.  The bug report
1335 <a href="http://bugs.debian.org/566000">#566000</a> make me suspect
1336 this problem do not trigger in a chroot, but I touch the file anyway
1337 to make sure the upgrade go well.  Testing on virtual and real
1338 hardware have failed me because of udev so far, and creating this file
1339 do the trick in such settings anyway.  This is a
1340 <a href="http://www.linuxquestions.org/questions/debian-26/failed-dist-upgrade-due-to-udev-config_sysfs_deprecated-nonsense-804130/">known
1341 issue</a> and the current udev behaviour is intended by the udev
1342 maintainer because he lack the resources to rewrite udev to keep
1343 working with old kernels or something like that.  I really wish the
1344 udev upstream would keep udev backwards compatible, to avoid such
1345 upgrade problem, but given that they fail to do so, I guess
1346 documenting the way out of this mess is the best option we got for
1347 Debian Squeeze.</p>
1348
1349 <p>Anyway, back to the task at hand, testing upgrades.  This test
1350 script, which I call <tt>upgrade-test</tt> for now, is doing the
1351 trick:</p>
1352
1353 <blockquote><pre>
1354 #!/bin/sh
1355 set -ex
1356
1357 if [ "$1" ] ; then
1358     desktop=$1
1359 else
1360     desktop=gnome
1361 fi
1362
1363 from=lenny
1364 to=squeeze
1365
1366 exec &lt; /dev/null
1367 unset LANG
1368 mirror=http://ftp.skolelinux.org/debian
1369 tmpdir=chroot-$from-upgrade-$to-$desktop
1370 fuser -mv .
1371 debootstrap $from $tmpdir $mirror
1372 chroot $tmpdir aptitude update
1373 cat > $tmpdir/usr/sbin/policy-rc.d &lt;&lt;EOF
1374 #!/bin/sh
1375 exit 101
1376 EOF
1377 chmod a+rx $tmpdir/usr/sbin/policy-rc.d
1378 exit_cleanup() {
1379     umount $tmpdir/proc
1380 }
1381 mount -t proc proc $tmpdir/proc
1382 # Make sure proc is unmounted also on failure
1383 trap exit_cleanup EXIT INT
1384
1385 chroot $tmpdir aptitude -y install debconf-utils
1386
1387 # Make sure tasksel autoselection trigger.  It need the test scripts
1388 # to return the correct answers.
1389 echo tasksel tasksel/desktop multiselect $desktop | \
1390     chroot $tmpdir debconf-set-selections
1391
1392 # Include the desktop and laptop task
1393 for test in desktop laptop ; do
1394     echo > $tmpdir/usr/lib/tasksel/tests/$test &lt;&lt;EOF
1395 #!/bin/sh
1396 exit 2
1397 EOF
1398     chmod a+rx $tmpdir/usr/lib/tasksel/tests/$test
1399 done
1400
1401 DEBIAN_FRONTEND=noninteractive
1402 DEBIAN_PRIORITY=critical
1403 export DEBIAN_FRONTEND DEBIAN_PRIORITY
1404 chroot $tmpdir tasksel --new-install
1405
1406 echo deb $mirror $to main > $tmpdir/etc/apt/sources.list
1407 chroot $tmpdir aptitude update
1408 touch $tmpdir/etc/udev/kernel-upgrade
1409 chroot $tmpdir aptitude -y dist-upgrade
1410 fuser -mv
1411 </pre></blockquote>
1412
1413 <p>I suspect it would be useful to test upgrades with both apt-get and
1414 with aptitude, but I have not had time to look at how they behave
1415 differently so far.  I hope to get a cron job running to do the test
1416 regularly and post the result on the web.  The Gnome upgrade currently
1417 work, while the KDE upgrade fail because of the bug in
1418 kdebase-workspace-data</p>
1419
1420 <p>I am not quite sure what kind of extract from the huge upgrade logs
1421 (KDE 167 KiB, Gnome 516 KiB) it make sense to include in this blog
1422 post, so I will refrain from trying.  I can report that for Gnome,
1423 aptitude report 760 packages upgraded, 448 newly installed, 129 to
1424 remove and 1 not upgraded and 1024MB need to be downloaded while for
1425 KDE the same numbers are 702 packages upgraded, 507 newly installed,
1426 193 to remove and 0 not upgraded and 1117MB need to be downloaded</p>
1427
1428 <p>I am very happy to notice that the Gnome desktop + laptop upgrade
1429 is able to migrate to dependency based boot sequencing and parallel
1430 booting without a hitch.  Was unsure if there were still bugs with
1431 packages failing to clean up their obsolete init.d script during
1432 upgrades, and no such problem seem to affect the Gnome desktop+laptop
1433 packages.</p>
1434
1435  </div>
1436  <div class="tags">
1437
1438
1439
1440   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
1441
1442  </div>
1443 </div>
1444 <div class="padding"></div>
1445
1446 <div class="entry">
1447  <div class="title">
1448  <a href="http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__removals_by_apt_and_aptitude.html">Lenny->Squeeze upgrades, removals by apt and aptitude</a>
1449  </div>
1450  <div class="date">
1451   2010-06-13 09:05
1452  </div>
1453
1454  <div class="body">
1455
1456 <p>My
1457 <a href="http://people.skolelinux.org/pere/blog/Automatic_upgrade_testing_from_Lenny_to_Squeeze.html">testing
1458 of Debian upgrades</a> from Lenny to Squeeze continues, and I've
1459 finally made the upgrade logs available from
1460 <a href="http://people.skolelinux.org/pere/debian-upgrade-testing/">http://people.skolelinux.org/pere/debian-upgrade-testing/</a>.
1461 I am now testing dist-upgrade of Gnome and KDE in a chroot using both
1462 apt and aptitude, and found their differences interesting.  This time
1463 I will only focus on their removal plans.</p>
1464
1465 <p>After installing a Gnome desktop and the laptop task, apt-get wants
1466 to remove 72 packages when dist-upgrading from Lenny to Squeeze.  The
1467 surprising part is that it want to remove xorg and all
1468 xserver-xorg-video* drivers.  Clearly not a good choice, but I am not
1469 sure why.  When asking aptitude to do the same, it want to remove 129
1470 packages, but most of them are library packages I suspect are no
1471 longer needed.  Both of them want to remove bluetooth packages, which
1472 I do not know.  Perhaps these bluetooth packages are obsolete?</p>
1473
1474 <p>For KDE, apt-get want to remove 82 packages, among them kdebase
1475 which seem like a bad idea and xorg the same way as with Gnome. Asking
1476 aptitude for the same, it wants to remove 192 packages, none which are
1477 too surprising.</p>
1478
1479 <p>I guess the removal of xorg during upgrades should be investigated
1480 and avoided, and perhaps others as well.  Here are the complete list
1481 of planned removals.  The complete logs is available from the URL
1482 above.  Note if you want to repeat these tests, that the upgrade test
1483 for kde+apt-get hung in the tasksel setup because of dpkg asking
1484 conffile questions.  No idea why.  I worked around it by using
1485 '<tt>echo >> /proc/<em>pidofdpkg</em>/fd/0</tt>' to tell dpkg to
1486 continue.</p>
1487
1488 <p><b>apt-get gnome 72</b>
1489 <br>bluez-gnome cupsddk-drivers deskbar-applet gnome
1490   gnome-desktop-environment gnome-network-admin gtkhtml3.14
1491   iceweasel-gnome-support libavcodec51 libdatrie0 libgdl-1-0
1492   libgnomekbd2 libgnomekbdui2 libmetacity0 libslab0 libxcb-xlib0
1493   nautilus-cd-burner python-gnome2-desktop python-gnome2-extras
1494   serpentine swfdec-mozilla update-manager xorg xserver-xorg
1495   xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
1496   xserver-xorg-input-kbd xserver-xorg-input-mouse
1497   xserver-xorg-input-synaptics xserver-xorg-input-wacom
1498   xserver-xorg-video-all xserver-xorg-video-apm xserver-xorg-video-ark
1499   xserver-xorg-video-ati xserver-xorg-video-chips
1500   xserver-xorg-video-cirrus xserver-xorg-video-cyrix
1501   xserver-xorg-video-dummy xserver-xorg-video-fbdev
1502   xserver-xorg-video-glint xserver-xorg-video-i128
1503   xserver-xorg-video-i740 xserver-xorg-video-imstt
1504   xserver-xorg-video-intel xserver-xorg-video-mach64
1505   xserver-xorg-video-mga xserver-xorg-video-neomagic
1506   xserver-xorg-video-nsc xserver-xorg-video-nv
1507   xserver-xorg-video-openchrome xserver-xorg-video-r128
1508   xserver-xorg-video-radeon xserver-xorg-video-radeonhd
1509   xserver-xorg-video-rendition xserver-xorg-video-s3
1510   xserver-xorg-video-s3virge xserver-xorg-video-savage
1511   xserver-xorg-video-siliconmotion xserver-xorg-video-sis
1512   xserver-xorg-video-sisusb xserver-xorg-video-tdfx
1513   xserver-xorg-video-tga xserver-xorg-video-trident
1514   xserver-xorg-video-tseng xserver-xorg-video-v4l
1515   xserver-xorg-video-vesa xserver-xorg-video-vga
1516   xserver-xorg-video-vmware xserver-xorg-video-voodoo xulrunner-1.9
1517   xulrunner-1.9-gnome-support</p>
1518
1519 <p><b>aptitude gnome 129</b>
1520
1521 <br>bluez-gnome bluez-utils cpp-4.3 cupsddk-drivers dhcdbd
1522   djvulibre-desktop finger gnome-app-install gnome-mount
1523   gnome-network-admin gnome-spell gnome-vfs-obexftp
1524   gnome-volume-manager gstreamer0.10-gnomevfs gtkhtml3.14 libao2
1525   libavahi-compat-libdnssd1 libavahi-core5 libavcodec51 libbluetooth2
1526   libcamel1.2-11 libcdio7 libcucul0 libcupsys2 libcurl3 libdatrie0
1527   libdirectfb-1.0-0 libdvdread3 libedataserver1.2-9 libeel2-2.20
1528   libeel2-data libepc-1.0-1 libepc-ui-1.0-1 libfaad0 libgail-common
1529   libgd2-noxpm libgda3-3 libgda3-common libgdl-1-0 libgdl-1-common
1530   libggz2 libggzcore9 libggzmod4 libgksu1.2-0 libgksuui1.0-1 libgmyth0
1531   libgnomecups1.0-1 libgnomekbd2 libgnomekbdui2 libgnomeprint2.2-0
1532   libgnomeprint2.2-data libgnomeprintui2.2-0 libgnomeprintui2.2-common
1533   libgnomevfs2-bin libgpod3 libgraphviz4 libgtkhtml2-0
1534   libgtksourceview-common libgtksourceview1.0-0 libgucharmap6
1535   libhesiod0 libicu38 libiw29 libkpathsea4 libltdl3 libmagick++10
1536   libmagick10 libmalaga7 libmetacity0 libmtp7 libmysqlclient15off
1537   libnautilus-burn4 libneon27 libnm-glib0 libnm-util0 libopal-2.2
1538   libosp5 libparted1.8-10 libpoppler-glib3 libpoppler3 libpt-1.10.10
1539   libpt-1.10.10-plugins-alsa libpt-1.10.10-plugins-v4l libraw1394-8
1540   libsensors3 libslab0 libsmbios2 libsoup2.2-8 libssh2-1
1541   libsuitesparse-3.1.0 libswfdec-0.6-90 libtalloc1 libtotem-plparser10
1542   libtrackerclient0 libxalan2-java libxalan2-java-gcj libxcb-xlib0
1543   libxerces2-java libxerces2-java-gcj libxklavier12 libxtrap6
1544   libxxf86misc1 libzephyr3 mysql-common nautilus-cd-burner
1545   openoffice.org-writer2latex openssl-blacklist p7zip
1546   python-4suite-xml python-eggtrayicon python-gnome2-desktop
1547   python-gnome2-extras python-gtkhtml2 python-gtkmozembed
1548   python-numeric python-sexy serpentine svgalibg1 swfdec-gnome
1549   swfdec-mozilla totem-gstreamer update-manager wodim
1550   xserver-xorg-video-cyrix xserver-xorg-video-imstt
1551   xserver-xorg-video-nsc xserver-xorg-video-v4l xserver-xorg-video-vga
1552   zip</p>
1553
1554 <p><b>apt-get kde 82</b>
1555
1556 <br>cupsddk-drivers karm kaudiocreator kcoloredit kcontrol kde kde-core
1557   kdeaddons kdeartwork kdebase kdebase-bin kdebase-bin-kde3
1558   kdebase-kio-plugins kdesktop kdeutils khelpcenter kicker
1559   kicker-applets knewsticker kolourpaint konq-plugins konqueror korn
1560   kpersonalizer kscreensaver ksplash libavcodec51 libdatrie0 libkiten1
1561   libxcb-xlib0 quanta superkaramba texlive-base-bin xorg xserver-xorg
1562   xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
1563   xserver-xorg-input-kbd xserver-xorg-input-mouse
1564   xserver-xorg-input-synaptics xserver-xorg-input-wacom
1565   xserver-xorg-video-all xserver-xorg-video-apm xserver-xorg-video-ark
1566   xserver-xorg-video-ati xserver-xorg-video-chips
1567   xserver-xorg-video-cirrus xserver-xorg-video-cyrix
1568   xserver-xorg-video-dummy xserver-xorg-video-fbdev
1569   xserver-xorg-video-glint xserver-xorg-video-i128
1570   xserver-xorg-video-i740 xserver-xorg-video-imstt
1571   xserver-xorg-video-intel xserver-xorg-video-mach64
1572   xserver-xorg-video-mga xserver-xorg-video-neomagic
1573   xserver-xorg-video-nsc xserver-xorg-video-nv
1574   xserver-xorg-video-openchrome xserver-xorg-video-r128
1575   xserver-xorg-video-radeon xserver-xorg-video-radeonhd
1576   xserver-xorg-video-rendition xserver-xorg-video-s3
1577   xserver-xorg-video-s3virge xserver-xorg-video-savage
1578   xserver-xorg-video-siliconmotion xserver-xorg-video-sis
1579   xserver-xorg-video-sisusb xserver-xorg-video-tdfx
1580   xserver-xorg-video-tga xserver-xorg-video-trident
1581   xserver-xorg-video-tseng xserver-xorg-video-v4l
1582   xserver-xorg-video-vesa xserver-xorg-video-vga
1583   xserver-xorg-video-vmware xserver-xorg-video-voodoo xulrunner-1.9</p>
1584
1585 <p><b>aptitude kde 192</b>
1586 <br>bluez-utils cpp-4.3 cupsddk-drivers cvs dcoprss dhcdbd
1587   djvulibre-desktop dosfstools eyesapplet fifteenapplet finger gettext
1588   ghostscript-x imlib-base imlib11 indi kandy karm kasteroids
1589   kaudiocreator kbackgammon kbstate kcoloredit kcontrol kcron kdat
1590   kdeadmin-kfile-plugins kdeartwork-misc kdeartwork-theme-window
1591   kdebase-bin-kde3 kdebase-kio-plugins kdeedu-data
1592   kdegraphics-kfile-plugins kdelirc kdemultimedia-kappfinder-data
1593   kdemultimedia-kfile-plugins kdenetwork-kfile-plugins
1594   kdepim-kfile-plugins kdepim-kio-plugins kdeprint kdesktop kdessh
1595   kdict kdnssd kdvi kedit keduca kenolaba kfax kfaxview kfouleggs
1596   kghostview khelpcenter khexedit kiconedit kitchensync klatin
1597   klickety kmailcvt kmenuedit kmid kmilo kmoon kmrml kodo kolourpaint
1598   kooka korn kpager kpdf kpercentage kpf kpilot kpoker kpovmodeler
1599   krec kregexpeditor ksayit ksim ksirc ksirtet ksmiletris ksmserver
1600   ksnake ksokoban ksplash ksvg ksysv ktip ktnef kuickshow kverbos
1601   kview kviewshell kvoctrain kwifimanager kwin kwin4 kworldclock
1602   kxsldbg libakode2 libao2 libarts1-akode libarts1-audiofile
1603   libarts1-mpeglib libarts1-xine libavahi-compat-libdnssd1
1604   libavahi-core5 libavc1394-0 libavcodec51 libbluetooth2
1605   libboost-python1.34.1 libcucul0 libcurl3 libcvsservice0 libdatrie0
1606   libdirectfb-1.0-0 libdjvulibre21 libdvdread3 libfaad0 libfreebob0
1607   libgail-common libgd2-noxpm libgraphviz4 libgsmme1c2a libgtkhtml2-0
1608   libicu38 libiec61883-0 libindex0 libiw29 libk3b3 libkcal2b libkcddb1
1609   libkdeedu3 libkdepim1a libkgantt0 libkiten1 libkleopatra1 libkmime2
1610   libkpathsea4 libkpimexchange1 libkpimidentities1 libkscan1
1611   libksieve0 libktnef1 liblockdev1 libltdl3 libmagick10 libmimelib1c2a
1612   libmozjs1d libmpcdec3 libneon27 libnm-util0 libopensync0 libpisock9
1613   libpoppler-glib3 libpoppler-qt2 libpoppler3 libraw1394-8 libsmbios2
1614   libssh2-1 libsuitesparse-3.1.0 libtalloc1 libtiff-tools
1615   libxalan2-java libxalan2-java-gcj libxcb-xlib0 libxerces2-java
1616   libxerces2-java-gcj libxtrap6 mpeglib networkstatus
1617   openoffice.org-writer2latex pmount poster psutils quanta quanta-data
1618   superkaramba svgalibg1 tex-common texlive-base texlive-base-bin
1619   texlive-common texlive-doc-base texlive-fonts-recommended
1620   xserver-xorg-video-cyrix xserver-xorg-video-imstt
1621   xserver-xorg-video-nsc xserver-xorg-video-v4l xserver-xorg-video-vga
1622   xulrunner-1.9</p>
1623
1624
1625  </div>
1626  <div class="tags">
1627
1628
1629
1630   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
1631
1632  </div>
1633 </div>
1634 <div class="padding"></div>
1635
1636 <div class="entry">
1637  <div class="title">
1638  <a href="http://people.skolelinux.org/pere/blog/Idea_for_a_change_to_LDAP_schemas_allowing_DNS_and_DHCP_info_to_be_combined_into_one_object.html">Idea for a change to LDAP schemas allowing DNS and DHCP info to be combined into one object</a>
1639  </div>
1640  <div class="date">
1641   2010-06-24 00:35
1642  </div>
1643
1644  <div class="body">
1645
1646 <p>A while back, I
1647 <a href="http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html">complained
1648 about the fact</a> that it is not possible with the provided schemas
1649 for storing DNS and DHCP information in LDAP to combine the two sets
1650 of information into one LDAP object representing a computer.</p>
1651
1652 <p>In the mean time, I discovered that a simple fix would be to make
1653 the dhcpHost object class auxiliary, to allow it to be combined with
1654 the dNSDomain object class, and thus forming one object for one
1655 computer when storing both DHCP and DNS information in LDAP.</p>
1656
1657 <p>If I understand this correctly, it is not safe to do this change
1658 without also changing the assigned number for the object class, and I
1659 do not know enough about LDAP schema design to do that properly for
1660 Debian Edu.</p>
1661
1662 <p>Anyway, for future reference, this is how I believe we could change
1663 the
1664 <a href="http://tools.ietf.org/html/draft-ietf-dhc-ldap-schema-00">DHCP
1665 schema</a> to solve at least part of the problem with the LDAP schemas
1666 available today from IETF.</p>
1667
1668 <pre>
1669 --- dhcp.schema    (revision 65192)
1670 +++ dhcp.schema    (working copy)
1671 @@ -376,7 +376,7 @@
1672  objectclass ( 2.16.840.1.113719.1.203.6.6
1673         NAME 'dhcpHost'
1674         DESC 'This represents information about a particular client'
1675 -       SUP top
1676 +       SUP top AUXILIARY
1677         MUST cn
1678         MAY  (dhcpLeaseDN $ dhcpHWAddress $ dhcpOptionsDN $ dhcpStatements $ dhcpComments $ dhcpOption)
1679         X-NDS_CONTAINMENT ('dhcpService' 'dhcpSubnet' 'dhcpGroup') )
1680 </pre>
1681
1682 <p>I very much welcome clues on how to do this properly for Debian
1683 Edu/Squeeze.  We provide the DHCP schema in our debian-edu-config
1684 package, and should thus be free to rewrite it as we see fit.</p>
1685
1686 <p>If you want to help out with implementing this for Debian Edu,
1687 please contact us on debian-edu@lists.debian.org.</p>
1688
1689  </div>
1690  <div class="tags">
1691
1692
1693
1694   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
1695
1696  </div>
1697 </div>
1698 <div class="padding"></div>
1699
1700 <div class="entry">
1701  <div class="title">
1702  <a href="http://people.skolelinux.org/pere/blog/LUMA__a_very_nice_LDAP_GUI.html">LUMA, a very nice LDAP GUI</a>
1703  </div>
1704  <div class="date">
1705   2010-06-28 00:30
1706  </div>
1707
1708  <div class="body">
1709
1710 <p>The last few days I have been looking into the status of the LDAP
1711 directory in Debian Edu, and in the process I started to miss a GUI
1712 tool to browse the LDAP tree.  The only one I was able to find in
1713 Debian/Squeeze and Lenny is
1714 <a href="http://luma.sourceforge.net/">LUMA</a>, which has proved to
1715 be a great tool to get a overview of the current LDAP directory
1716 populated by default in Skolelinux.  Thanks to it, I have been able to
1717 find empty and obsolete subtrees, misplaced objects and duplicate
1718 objects.  It will be installed by default in Debian/Squeeze.  If you
1719 are working with LDAP, give it a go. :)</p>
1720
1721 <p>I did notice one problem with it I have not had time to report to
1722 the BTS yet.  There is no .desktop file in the package, so the tool do
1723 not show up in the Gnome and KDE menus, but only deep down in in the
1724 Debian submenu in KDE.  I hope that can be fixed before Squeeze is
1725 released.</p>
1726
1727 <p>I have not yet been able to get it to modify the tree yet.  I would
1728 like to move objects and remove subtrees directly in the GUI, but have
1729 not found a way to do that with LUMA yet.  So in the mean time, I use
1730 <a href="http://www.lichteblau.com/ldapvi/">ldapvi</a> for that.</p>
1731
1732 <p>If you have tips on other GUI tools for LDAP that might be useful
1733 in Debian Edu, please contact us on debian-edu@lists.debian.org.</p>
1734
1735 <p>Update 2010-06-29: Ross Reedstrom tipped us about the
1736 <a href="http://packages.qa.debian.org/g/gq.html">gq</a> package as a
1737 useful GUI alternative.  It seem like a good tool, but is unmaintained
1738 in Debian and got a RC bug keeping it out of Squeeze.  Unless that
1739 changes, it will not be an option for Debian Edu based on Squeeze.</p>
1740
1741  </div>
1742  <div class="tags">
1743
1744
1745
1746   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
1747
1748  </div>
1749 </div>
1750 <div class="padding"></div>
1751
1752 <div class="entry">
1753  <div class="title">
1754  <a href="http://people.skolelinux.org/pere/blog/Caching_password__user_and_group_on_a_roaming_Debian_laptop.html">Caching password, user and group on a roaming Debian laptop</a>
1755  </div>
1756  <div class="date">
1757   2010-07-01 11:40
1758  </div>
1759
1760  <div class="body">
1761
1762 <p>For a laptop, centralized user directories and password checking is
1763 a bit troubling.  Laptops are typically used also when not connected
1764 to the network, and it is vital for a user to be able to log in or
1765 unlock the screen saver also when a central server is unavailable.
1766 This is possible by caching passwords and directory information (user
1767 and group attributes) locally, and the packages to do so are available
1768 in Debian.  Here follow two recipes to set this up in Debian/Squeeze.
1769 It is also possible to set up in Debian/Lenny, but require more manual
1770 setup there because pam-auth-update is missing in Lenny.</p>
1771
1772 <h2>LDAP/Kerberos + nscd + libpam-ccreds + libpam-mklocaluser/pam_mkhomedir</h2>
1773
1774 This is the traditional method with a twist.  The password caching is
1775 provided by libpam-ccreds (version 10-4 or later is needed on
1776 Squeeze), and the directory caching is done by nscd.  The directory
1777 lookup and password checking is done using LDAP.  If one want to use
1778 Kerberos for password checking the libpam-ldapd package can be
1779 replaced with libpam-krb5 or libpam-heimdal.  If one is happy having a
1780 local home directory with the path listed in LDAP, one can use the
1781 pam_mkhomedir module from pam-modules to make this happen instead of
1782 using libpam-mklocaluser.  A setup for pam-auth-update to enable
1783 pam_mkhomedir will have to be written until a fix for
1784 <a href="http://bugs.debian.org/568577">bug #568577</a> is in the
1785 archive.  Because I believe it is a bad idea to have local home
1786 directories using misleading paths like /site/server/partition/, I
1787 prefer to create a local user with the home directory in /home/.  This
1788 is done using the libpam-mklocaluser package.</p>
1789
1790 <p>These packages need to be installed and configured</p>
1791
1792 <blockquote><pre>
1793 libnss-ldapd libpam-ldapd nscd libpam-ccreds libpam-mklocaluser
1794 </pre></blockquote>
1795
1796 <p>The ldapd packages will ask for LDAP connection information, and
1797 one have to fill in the values that fits ones own site.  Make sure the
1798 PAM part uses encrypted connections, to make sure the password is not
1799 sent in clear text to the LDAP server.  I've been unable to get TLS
1800 certificate checking for a self signed certificate working, which make
1801 LDAP authentication unsafe for Debian Edu (nslcd is not checking if it
1802 is talking to the correct LDAP server), and very much welcome feedback
1803 on how to get this working.</p>
1804
1805 <p>Because nscd do not have a default configuration fit for offline
1806 caching until <a href="http://bugs.debian.org/485282">bug #485282</a>
1807 is fixed, this configuration should be used instead of the one
1808 currently in /etc/nscd.conf.  The changes are in the fields
1809 reload-count and positive-time-to-live, and is based on the
1810 instructions I found in the
1811 <a href="http://www.flyn.org/laptopldap/">LDAP for Mobile Laptops</a>
1812 instructions by Flyn Computing.</p>
1813
1814 <blockquote><pre>
1815         debug-level             0
1816         reload-count            unlimited
1817         paranoia                no
1818
1819         enable-cache            passwd          yes
1820         positive-time-to-live   passwd          2592000
1821         negative-time-to-live   passwd          20
1822         suggested-size          passwd          211
1823         check-files             passwd          yes
1824         persistent              passwd          yes
1825         shared                  passwd          yes
1826         max-db-size             passwd          33554432
1827         auto-propagate          passwd          yes
1828
1829         enable-cache            group           yes
1830         positive-time-to-live   group           2592000
1831         negative-time-to-live   group           20
1832         suggested-size          group           211
1833         check-files             group           yes
1834         persistent              group           yes
1835         shared                  group           yes
1836         max-db-size             group           33554432
1837         auto-propagate          group           yes
1838
1839         enable-cache            hosts           no
1840         positive-time-to-live   hosts           2592000
1841         negative-time-to-live   hosts           20
1842         suggested-size          hosts           211
1843         check-files             hosts           yes
1844         persistent              hosts           yes
1845         shared                  hosts           yes
1846         max-db-size             hosts           33554432
1847
1848         enable-cache            services        yes
1849         positive-time-to-live   services        2592000
1850         negative-time-to-live   services        20
1851         suggested-size          services        211
1852         check-files             services        yes
1853         persistent              services        yes
1854         shared                  services        yes
1855         max-db-size             services        33554432
1856 </pre></blockquote>
1857
1858 <p>While we wait for a mechanism to update /etc/nsswitch.conf
1859 automatically like the one provided in
1860 <a href="http://bugs.debian.org/496915">bug #496915</a>, the file
1861 content need to be manually replaced to ensure LDAP is used as the
1862 directory service on the machine.  /etc/nsswitch.conf should normally
1863 look like this:</p>
1864
1865 <blockquote><pre>
1866 passwd:         files ldap
1867 group:          files ldap
1868 shadow:         files ldap
1869 hosts:          files mdns4_minimal [NOTFOUND=return] dns mdns4
1870 networks:       files
1871 protocols:      files
1872 services:       files
1873 ethers:         files
1874 rpc:            files
1875 netgroup:       files ldap
1876 </pre></blockquote>
1877
1878 <p>The important parts are that ldap is listed last for passwd, group,
1879 shadow and netgroup.</p>
1880
1881 <p>With these changes in place, any user in LDAP will be able to log
1882 in locally on the machine using for example kdm, get a local home
1883 directory created and have the password as well as user and group
1884 attributes cached.
1885
1886 <h2>LDAP/Kerberos + nss-updatedb + libpam-ccreds +
1887   libpam-mklocaluser/pam_mkhomedir</h2>
1888
1889 <p>Because nscd have had its share of problems, and seem to have
1890 problems doing proper caching, I've seen suggestions and recipes to
1891 use nss-updatedb to copy parts of the LDAP database locally when the
1892 LDAP database is available.  I have not tested such setup, because I
1893 discovered sssd.</p>
1894
1895 <h2>LDAP/Kerberos + sssd + libpam-mklocaluser</h2>
1896
1897 <p>A more flexible and robust setup than the nscd combination
1898 mentioned earlier that has shown up recently, is the
1899 <a href="https://fedorahosted.org/sssd/">sssd</a> package from Redhat.
1900 It is part of the <a href="http://www.freeipa.org/">FreeIPA</A> project
1901 to provide a Active Directory like directory service for Linux
1902 machines.  The sssd system combines the caching of passwords and user
1903 information into one package, and remove the need for nscd and
1904 libpam-ccreds.  It support LDAP and Kerberos, but not NIS.  Version
1905 1.2 do not support netgroups, but it is said that it will support this
1906 in version 1.5 expected to show up later in 2010.  Because the
1907 <a href="http://packages.qa.debian.org/s/sssd.html">sssd package</a>
1908 was missing in Debian, I ended up co-maintaining it with Werner, and
1909 version 1.2 is now in testing.
1910
1911 <p>These packages need to be installed and configured to get the
1912 roaming setup I want</p>
1913
1914 <blockquote><pre>
1915 libpam-sss libnss-sss libpam-mklocaluser
1916 </pre></blockquote>
1917
1918 The complete setup of sssd is done by editing/creating
1919 <tt>/etc/sssd/sssd.conf</tt>.
1920
1921 <blockquote><pre>
1922 [sssd]
1923 config_file_version = 2
1924 reconnection_retries = 3
1925 sbus_timeout = 30
1926 services = nss, pam
1927 domains = INTERN
1928
1929 [nss]
1930 filter_groups = root
1931 filter_users = root
1932 reconnection_retries = 3
1933
1934 [pam]
1935 reconnection_retries = 3
1936
1937 [domain/INTERN]
1938 enumerate = false
1939 cache_credentials = true
1940
1941 id_provider = ldap
1942 auth_provider = ldap
1943 chpass_provider = ldap
1944
1945 ldap_uri = ldap://ldap
1946 ldap_search_base = dc=skole,dc=skolelinux,dc=no
1947 ldap_tls_reqcert = never
1948 ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt
1949 </pre></blockquote>
1950
1951 <p>I got the same problem here with certificate checking.  Had to set
1952 "ldap_tls_reqcert = never" to get it working.</p>
1953
1954 <p>With the libnss-sss package in testing at the moment, the
1955 nsswitch.conf file is update automatically, so there is no need to
1956 modify it manually.</p>
1957
1958 <p>If you want to help out with implementing this for Debian Edu,
1959 please contact us on debian-edu@lists.debian.org.</p>
1960
1961  </div>
1962  <div class="tags">
1963
1964
1965
1966   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
1967
1968  </div>
1969 </div>
1970 <div class="padding"></div>
1971
1972 <div class="entry">
1973  <div class="title">
1974  <a href="http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__apt_vs_aptitude_with_the_Gnome_desktop.html">Lenny->Squeeze upgrades, apt vs aptitude with the Gnome desktop</a>
1975  </div>
1976  <div class="date">
1977   2010-07-03 23:55
1978  </div>
1979
1980  <div class="body">
1981
1982 <p>Here is a short update on my <a
1983 href="http://people.skolelinux.org/~pere/debian-upgrade-testing/">my
1984 Debian Lenny->Squeeze upgrade testing</a>.  Here is a summary of the
1985 difference for Gnome when it is upgraded by apt-get and aptitude.  I'm
1986 not reporting the status for KDE, because the upgrade crashes when
1987 aptitude try because of missing conflicts
1988 (<a href="http://bugs.debian.org/584861">#584861</a> and
1989 <a href="http://bugs.debian.org/585716">#585716</a>).</p>
1990
1991 <p>At the end of the upgrade test script, dpkg -l is executed to get a
1992 complete list of the installed packages.  Based on this I see these
1993 differences when I did a test run today.  As usual, I do not really
1994 know what the correct set of packages would be, but thought it best to
1995 publish the difference.</p>
1996
1997 <p>Installed using apt-get, missing with aptitude</p>
1998
1999 <blockquote><p>
2000   at-spi cpp-4.3 finger gnome-spell gstreamer0.10-gnomevfs
2001   libatspi1.0-0 libcupsys2 libeel2-data libgail-common libgdl-1-common
2002   libgnomeprint2.2-data libgnomeprintui2.2-common libgnomevfs2-bin
2003   libgtksourceview-common libpt-1.10.10-plugins-alsa
2004   libpt-1.10.10-plugins-v4l libservlet2.4-java libxalan2-java
2005   libxerces2-java openoffice.org-writer2latex openssl-blacklist p7zip
2006   python-4suite-xml python-eggtrayicon python-gtkhtml2
2007   python-gtkmozembed svgalibg1 xserver-xephyr zip
2008 </p></blockquote>
2009
2010 <p>Installed using apt-get, removed with aptitude</p>
2011
2012 <blockquote><p>
2013   bluez-utils dhcdbd djvulibre-desktop epiphany-gecko
2014   gnome-app-install gnome-mount gnome-vfs-obexftp gnome-volume-manager
2015   libao2 libavahi-compat-libdnssd1 libavahi-core5 libbind9-50
2016   libbluetooth2 libcamel1.2-11 libcdio7 libcucul0 libcurl3
2017   libdirectfb-1.0-0 libdvdread3 libedata-cal1.2-6 libedataserver1.2-9
2018   libeel2-2.20 libepc-1.0-1 libepc-ui-1.0-1 libexchange-storage1.2-3
2019   libfaad0 libgd2-noxpm libgda3-3 libgda3-common libggz2 libggzcore9
2020   libggzmod4 libgksu1.2-0 libgksuui1.0-1 libgmyth0 libgnome-desktop-2
2021   libgnome-pilot2 libgnomecups1.0-1 libgnomeprint2.2-0
2022   libgnomeprintui2.2-0 libgpod3 libgraphviz4 libgtkhtml2-0
2023   libgtksourceview1.0-0 libgucharmap6 libhesiod0 libicu38 libisccc50
2024   libisccfg50 libiw29 libkpathsea4 libltdl3 liblwres50 libmagick++10
2025   libmagick10 libmalaga7 libmtp7 libmysqlclient15off libnautilus-burn4
2026   libneon27 libnm-glib0 libnm-util0 libopal-2.2 libosp5
2027   libparted1.8-10 libpisock9 libpisync1 libpoppler-glib3 libpoppler3
2028   libpt-1.10.10 libraw1394-8 libsensors3 libsmbios2 libsoup2.2-8
2029   libssh2-1 libsuitesparse-3.1.0 libswfdec-0.6-90 libtalloc1
2030   libtotem-plparser10 libtrackerclient0 libvoikko1 libxalan2-java-gcj
2031   libxerces2-java-gcj libxklavier12 libxtrap6 libxxf86misc1 libzephyr3
2032   mysql-common swfdec-gnome totem-gstreamer wodim
2033 </p></blockquote>
2034
2035 <p>Installed using aptitude, missing with apt-get</p>
2036
2037 <blockquote><p>
2038   gnome gnome-desktop-environment hamster-applet python-gnomeapplet
2039   python-gnomekeyring python-wnck rhythmbox-plugins xorg
2040   xserver-xorg-input-all xserver-xorg-input-evdev
2041   xserver-xorg-input-kbd xserver-xorg-input-mouse
2042   xserver-xorg-input-synaptics xserver-xorg-video-all
2043   xserver-xorg-video-apm xserver-xorg-video-ark xserver-xorg-video-ati
2044   xserver-xorg-video-chips xserver-xorg-video-cirrus
2045   xserver-xorg-video-dummy xserver-xorg-video-fbdev
2046   xserver-xorg-video-glint xserver-xorg-video-i128
2047   xserver-xorg-video-i740 xserver-xorg-video-mach64
2048   xserver-xorg-video-mga xserver-xorg-video-neomagic
2049   xserver-xorg-video-nouveau xserver-xorg-video-nv
2050   xserver-xorg-video-r128 xserver-xorg-video-radeon
2051   xserver-xorg-video-radeonhd xserver-xorg-video-rendition
2052   xserver-xorg-video-s3 xserver-xorg-video-s3virge
2053   xserver-xorg-video-savage xserver-xorg-video-siliconmotion
2054   xserver-xorg-video-sis xserver-xorg-video-sisusb
2055   xserver-xorg-video-tdfx xserver-xorg-video-tga
2056   xserver-xorg-video-trident xserver-xorg-video-tseng
2057   xserver-xorg-video-vesa xserver-xorg-video-vmware
2058   xserver-xorg-video-voodoo
2059 </p></blockquote>
2060
2061 <p>Installed using aptitude, removed with apt-get</p>
2062
2063 <blockquote><p>
2064   deskbar-applet xserver-xorg xserver-xorg-core
2065   xserver-xorg-input-wacom xserver-xorg-video-intel
2066   xserver-xorg-video-openchrome
2067 </p></blockquote>
2068
2069 <p>I was told on IRC that the xorg-xserver package was
2070 <a href="http://git.debian.org/?p=pkg-xorg/xserver/xorg-server.git;a=commit;h=9c8080d06c457932d3bfec021c69ac000aa60120">changed
2071 in git</a> today to try to get apt-get to not remove xorg completely.
2072 No idea when it hits Squeeze, but when it does I hope it will reduce
2073 the difference somewhat.
2074
2075  </div>
2076  <div class="tags">
2077
2078
2079
2080   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
2081
2082  </div>
2083 </div>
2084 <div class="padding"></div>
2085
2086 <div class="entry">
2087  <div class="title">
2088  <a href="http://people.skolelinux.org/pere/blog/jXplorer__a_very_nice_LDAP_GUI.html">jXplorer, a very nice LDAP GUI</a>
2089  </div>
2090  <div class="date">
2091   2010-07-09 12:55
2092  </div>
2093
2094  <div class="body">
2095
2096 <p>Since
2097 <a href="http://people.skolelinux.org/pere/blog/LUMA__a_very_nice_LDAP_GUI.html">my
2098 last post</a> about available LDAP tools in Debian, I was told about a
2099 LDAP GUI that is even better than luma.  The java application
2100 <a href="http://jxplorer.org/">jXplorer</a> is claimed to be capable of
2101 moving LDAP objects and subtrees using drag-and-drop, and can
2102 authenticate using Kerberos.  I have only tested the Kerberos
2103 authentication, but do not have a LDAP setup allowing me to rewrite
2104 LDAP with my test user yet.  It is
2105 <a href="http://packages.qa.debian.org/j/jxplorer.html">available in
2106 Debian</a> testing and unstable at the moment.  The only problem I
2107 have with it is how it handle errors.  If something go wrong, its
2108 non-intuitive behaviour require me to go through some query work list
2109 and remove the failing query.  Nothing big, but very annoying.</p>
2110
2111  </div>
2112  <div class="tags">
2113
2114
2115
2116   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
2117
2118  </div>
2119 </div>
2120 <div class="padding"></div>
2121
2122 <div class="entry">
2123  <div class="title">
2124  <a href="http://people.skolelinux.org/pere/blog/Idea_for_storing_LTSP_configuration_in_LDAP.html">Idea for storing LTSP configuration in LDAP</a>
2125  </div>
2126  <div class="date">
2127   2010-07-11 22:00
2128  </div>
2129
2130  <div class="body">
2131
2132 <p>Vagrant mentioned on IRC today that ltsp_config now support
2133 sourcing files from /usr/share/ltsp/ltsp_config.d/ on the thin
2134 clients, and that this can be used to fetch configuration from LDAP if
2135 Debian Edu choose to store configuration there.</p>
2136
2137 <p>Armed with this information, I got inspired and wrote a test module
2138 to get configuration from LDAP.  The idea is to look up the MAC
2139 address of the client in LDAP, and look for attributes on the form
2140 ltspconfigsetting=value, and use this to export SETTING=value to the
2141 LTSP clients.</p>
2142
2143 <p>The goal is to be able to store the LTSP configuration attributes
2144 in a "computer" LDAP object used by both DNS and DHCP, and thus
2145 allowing us to store all information about a computer in one place.</p>
2146
2147 <p>This is a untested draft implementation, and I welcome feedback on
2148 this approach.  A real LDAP schema for the ltspClientAux objectclass
2149 need to be written.  Comments, suggestions, etc?</p>
2150
2151 <blockquote><pre>
2152 # Store in /opt/ltsp/$arch/usr/share/ltsp/ltsp_config.d/ldap-config
2153 #
2154 # Fetch LTSP client settings from LDAP based on MAC address
2155 #
2156 # Uses ethernet address as stored in the dhcpHost objectclass using
2157 # the dhcpHWAddress attribute or ethernet address stored in the
2158 # ieee802Device objectclass with the macAddress attribute.
2159 #
2160 # This module is written to be schema agnostic, and only depend on the
2161 # existence of attribute names.
2162 #
2163 # The LTSP configuration variables are saved directly using a
2164 # ltspConfig prefix and uppercasing the rest of the attribute name.
2165 # To set the SERVER variable, set the ltspConfigServer attribute.
2166 #
2167 # Some LDAP schema should be created with all the relevant
2168 # configuration settings.  Something like this should work:
2169 #
2170 # objectclass ( 1.1.2.2 NAME 'ltspClientAux'
2171 #     SUP top
2172 #     AUXILIARY
2173 #     MAY ( ltspConfigServer $ ltsConfigSound $ ... )
2174
2175 LDAPSERVER=$(debian-edu-ldapserver)
2176 if [ "$LDAPSERVER" ] ; then
2177     LDAPBASE=$(debian-edu-ldapserver -b)
2178     for MAC in $(LANG=C ifconfig |grep -i hwaddr| awk '{print $5}'|sort -u) ; do
2179         filter="(|(dhcpHWAddress=ethernet $MAC)(macAddress=$MAC))"
2180         ldapsearch -h "$LDAPSERVER" -b "$LDAPBASE" -v -x "$filter" | \
2181             grep '^ltspConfig' | while read attr value ; do
2182             # Remove prefix and convert to upper case
2183             attr=$(echo $attr | sed 's/^ltspConfig//i' | tr a-z A-Z)
2184             # bass value on to clients
2185             eval "$attr=$value; export $attr"
2186         done
2187     done
2188 fi
2189 </pre></blockquote>
2190
2191 <p>I'm not sure this shell construction will work, because I suspect
2192 the while block might end up in a subshell causing the variables set
2193 there to not show up in ltsp-config, but if that is the case I am sure
2194 the code can be restructured to make sure the variables are passed on.
2195 I expect that can be solved with some testing. :)</p>
2196
2197 <p>If you want to help out with implementing this for Debian Edu,
2198 please contact us on debian-edu@lists.debian.org.</p>
2199
2200 <p>Update 2010-07-17: I am aware of another effort to store LTSP
2201 configuration in LDAP that was created around year 2000 by
2202 <a href="http://www.pcxperience.com/thinclient/documentation/ldap.html">PC
2203 Xperience, Inc., 2000</a>.  I found its
2204 <a href="http://people.redhat.com/alikins/ltsp/ldap/">files</a> on a
2205 personal home page over at redhat.com.</p>
2206
2207  </div>
2208  <div class="tags">
2209
2210
2211
2212   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
2213
2214  </div>
2215 </div>
2216 <div class="padding"></div>
2217
2218 <div class="entry">
2219  <div class="title">
2220  <a href="http://people.skolelinux.org/pere/blog/Combining_PowerDNS_and_ISC_DHCP_LDAP_objects.html">Combining PowerDNS and ISC DHCP LDAP objects</a>
2221  </div>
2222  <div class="date">
2223   2010-07-14 23:45
2224  </div>
2225
2226  <div class="body">
2227
2228 <p>For a while now, I have wanted to find a way to change the DNS and
2229 DHCP services in Debian Edu to use the same LDAP objects for a given
2230 computer, to avoid the possibility of having a inconsistent state for
2231 a computer in LDAP (as in DHCP but no DNS entry or the other way
2232 around) and make it easier to add computers to LDAP.</p>
2233
2234 <p>I've looked at how powerdns and dhcpd is using LDAP, and using this
2235 information finally found a solution that seem to work.</p>
2236
2237 <p>The old setup required three LDAP objects for a given computer.
2238 One forward DNS entry, one reverse DNS entry and one DHCP entry.  If
2239 we switch powerdns to use its strict LDAP method (ldap-method=strict
2240 in pdns-debian-edu.conf), the forward and reverse DNS entries are
2241 merged into one while making it impossible to transfer the reverse map
2242 to a slave DNS server.</p>
2243
2244 <p>If we also replace the object class used to get the DNS related
2245 attributes to one allowing these attributes to be combined with the
2246 dhcphost object class, we can merge the DNS and DHCP entries into one.
2247 I've written such object class in the dnsdomainaux.schema file (need
2248 proper OIDs, but that is a minor issue), and tested the setup.  It
2249 seem to work.</p>
2250
2251 <p>With this test setup in place, we can get away with one LDAP object
2252 for both DNS and DHCP, and even the LTSP configuration I suggested in
2253 an earlier email.  The combined LDAP object will look something like
2254 this:</p>
2255
2256 <blockquote><pre>
2257   dn: cn=hostname,cn=group1,cn=THINCLIENTS,cn=DHCP Config,dc=skole,dc=skolelinux,dc=no
2258   cn: hostname
2259   objectClass: dhcphost
2260   objectclass: domainrelatedobject
2261   objectclass: dnsdomainaux
2262   associateddomain: hostname.intern
2263   arecord: 10.11.12.13
2264   dhcphwaddress: ethernet 00:00:00:00:00:00
2265   dhcpstatements: fixed-address hostname
2266   ldapconfigsound: Y
2267 </pre></blockquote>
2268
2269 <p>The DNS server uses the associateddomain and arecord entries, while
2270 the DHCP server uses the dhcphwaddress and dhcpstatements entries
2271 before asking DNS to resolve the fixed-adddress.  LTSP will use
2272 dhcphwaddress or associateddomain and the ldapconfig* attributes.</p>
2273
2274 <p>I am not yet sure if I can get the DHCP server to look for its
2275 dhcphost in a different location, to allow us to put the objects
2276 outside the "DHCP Config" subtree, but hope to figure out a way to do
2277 that.  If I can't figure out a way to do that, we can still get rid of
2278 the hosts subtree and move all its content into the DHCP Config tree
2279 (which probably should be renamed to be more related to the new
2280 content.  I suspect cn=dnsdhcp,ou=services or something like that
2281 might be a good place to put it.</p>
2282
2283 <p>If you want to help out with implementing this for Debian Edu,
2284 please contact us on debian-edu@lists.debian.org.</p>
2285
2286  </div>
2287  <div class="tags">
2288
2289
2290
2291   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
2292
2293  </div>
2294 </div>
2295 <div class="padding"></div>
2296
2297 <div class="entry">
2298  <div class="title">
2299  <a href="http://people.skolelinux.org/pere/blog/What_are_they_searching_for___PowerDNS_and_ISC_DHCP_in_LDAP.html">What are they searching for - PowerDNS and ISC DHCP in LDAP</a>
2300  </div>
2301  <div class="date">
2302   2010-07-17 21:00
2303  </div>
2304
2305  <div class="body">
2306
2307 <p>This is a
2308 <a href="http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html">followup</a>
2309 on my
2310 <a href="http://people.skolelinux.org/pere/blog/Idea_for_a_change_to_LDAP_schemas_allowing_DNS_and_DHCP_info_to_be_combined_into_one_object.html">previous
2311 work</a> on
2312 <a href="http://people.skolelinux.org/pere/blog/Combining_PowerDNS_and_ISC_DHCP_LDAP_objects.html">merging
2313 all</a> the computer related LDAP objects in Debian Edu.</p>
2314
2315 <p>As a step to try to see if it possible to merge the DNS and DHCP
2316 LDAP objects, I have had a look at how the packages pdns-backend-ldap
2317 and dhcp3-server-ldap in Debian use the LDAP server.  The two
2318 implementations are quite different in how they use LDAP.</p>
2319
2320 To get this information, I started slapd with debugging enabled and
2321 dumped the debug output to a file to get the LDAP searches performed
2322 on a Debian Edu main-server.  Here is a summary.
2323
2324 <p><strong>powerdns</strong></p>
2325
2326 <a href="http://www.linuxnetworks.de/doc/index.php/PowerDNS_LDAP_Backend">Clues
2327 on how to</a> set up PowerDNS to use a LDAP backend is available on
2328 the web.
2329
2330 <p>PowerDNS have two modes of operation using LDAP as its backend.
2331 One "strict" mode where the forward and reverse DNS lookups are done
2332 using the same LDAP objects, and a "tree" mode where the forward and
2333 reverse entries are in two different subtrees in LDAP with a structure
2334 based on the DNS names, as in tjener.intern and
2335 2.2.0.10.in-addr.arpa.</p>
2336
2337 <p>In tree mode, the server is set up to use a LDAP subtree as its
2338 base, and uses a "base" scoped search for the DNS name by adding
2339 "dc=tjener,dc=intern," to the base with a filter for
2340 "(associateddomain=tjener.intern)" for the forward entry and
2341 "dc=2,dc=2,dc=0,dc=10,dc=in-addr,dc=arpa," with a filter for
2342 "(associateddomain=2.2.0.10.in-addr.arpa)" for the reverse entry.  For
2343 forward entries, it is looking for attributes named dnsttl, arecord,
2344 nsrecord, cnamerecord, soarecord, ptrrecord, hinforecord, mxrecord,
2345 txtrecord, rprecord, afsdbrecord, keyrecord, aaaarecord, locrecord,
2346 srvrecord, naptrrecord, kxrecord, certrecord, dsrecord, sshfprecord,
2347 ipseckeyrecord, rrsigrecord, nsecrecord, dnskeyrecord, dhcidrecord,
2348 spfrecord and modifytimestamp.  For reverse entries it is looking for
2349 the attributes dnsttl, arecord, nsrecord, cnamerecord, soarecord,
2350 ptrrecord, hinforecord, mxrecord, txtrecord, rprecord, aaaarecord,
2351 locrecord, srvrecord, naptrrecord and modifytimestamp.  The equivalent
2352 ldapsearch commands could look like this:</p>
2353
2354 <blockquote><pre>
2355 ldapsearch -h ldap \
2356   -b dc=tjener,dc=intern,ou=hosts,dc=skole,dc=skolelinux,dc=no \
2357   -s base -x '(associateddomain=tjener.intern)' dNSTTL aRecord nSRecord \
2358   cNAMERecord sOARecord pTRRecord hInfoRecord mXRecord tXTRecord \
2359   rPRecord aFSDBRecord KeyRecord aAAARecord lOCRecord sRVRecord \
2360   nAPTRRecord kXRecord certRecord dSRecord sSHFPRecord iPSecKeyRecord \
2361   rRSIGRecord nSECRecord dNSKeyRecord dHCIDRecord sPFRecord modifyTimestamp
2362
2363 ldapsearch -h ldap \
2364   -b dc=2,dc=2,dc=0,dc=10,dc=in-addr,dc=arpa,ou=hosts,dc=skole,dc=skolelinux,dc=no \
2365   -s base -x '(associateddomain=2.2.0.10.in-addr.arpa)'
2366   dnsttl, arecord, nsrecord, cnamerecord soarecord ptrrecord \
2367   hinforecord mxrecord txtrecord rprecord aaaarecord locrecord \
2368   srvrecord naptrrecord modifytimestamp
2369 </pre></blockquote>
2370
2371 <p>In Debian Edu/Lenny, the PowerDNS tree mode is used with
2372 ou=hosts,dc=skole,dc=skolelinux,dc=no as the base, and these are two
2373 example LDAP objects used there.  In addition to these objects, the
2374 parent objects all th way up to ou=hosts,dc=skole,dc=skolelinux,dc=no
2375 also exist.</p>
2376
2377 <blockquote><pre>
2378 dn: dc=tjener,dc=intern,ou=hosts,dc=skole,dc=skolelinux,dc=no
2379 objectclass: top
2380 objectclass: dnsdomain
2381 objectclass: domainrelatedobject
2382 dc: tjener
2383 arecord: 10.0.2.2
2384 associateddomain: tjener.intern
2385
2386 dn: dc=2,dc=2,dc=0,dc=10,dc=in-addr,dc=arpa,ou=hosts,dc=skole,dc=skolelinux,dc=no
2387 objectclass: top
2388 objectclass: dnsdomain2
2389 objectclass: domainrelatedobject
2390 dc: 2
2391 ptrrecord: tjener.intern
2392 associateddomain: 2.2.0.10.in-addr.arpa
2393 </pre></blockquote>
2394
2395 <p>In strict mode, the server behaves differently.  When looking for
2396 forward DNS entries, it is doing a "subtree" scoped search with the
2397 same base as in the tree mode for a object with filter
2398 "(associateddomain=tjener.intern)" and requests the attributes dnsttl,
2399 arecord, nsrecord, cnamerecord, soarecord, ptrrecord, hinforecord,
2400 mxrecord, txtrecord, rprecord, aaaarecord, locrecord, srvrecord,
2401 naptrrecord and modifytimestamp.  For reverse entires it also do a
2402 subtree scoped search but this time the filter is "(arecord=10.0.2.2)"
2403 and the requested attributes are associateddomain, dnsttl and
2404 modifytimestamp.  In short, in strict mode the objects with ptrrecord
2405 go away, and the arecord attribute in the forward object is used
2406 instead.</p>
2407
2408 <p>The forward and reverse searches can be simulated using ldapsearch
2409 like this:</p>
2410
2411 <blockquote><pre>
2412 ldapsearch -h ldap -b ou=hosts,dc=skole,dc=skolelinux,dc=no -s sub -x \
2413   '(associateddomain=tjener.intern)' dNSTTL aRecord nSRecord \
2414   cNAMERecord sOARecord pTRRecord hInfoRecord mXRecord tXTRecord \
2415   rPRecord aFSDBRecord KeyRecord aAAARecord lOCRecord sRVRecord \
2416   nAPTRRecord kXRecord certRecord dSRecord sSHFPRecord iPSecKeyRecord \
2417   rRSIGRecord nSECRecord dNSKeyRecord dHCIDRecord sPFRecord modifyTimestamp
2418
2419 ldapsearch -h ldap -b ou=hosts,dc=skole,dc=skolelinux,dc=no -s sub -x \
2420   '(arecord=10.0.2.2)' associateddomain dnsttl modifytimestamp
2421 </pre></blockquote>
2422
2423 <p>In addition to the forward and reverse searches , there is also a
2424 search for SOA records, which behave similar to the forward and
2425 reverse lookups.</p>
2426
2427 <p>A thing to note with the PowerDNS behaviour is that it do not
2428 specify any objectclass names, and instead look for the attributes it
2429 need to generate a DNS reply.  This make it able to work with any
2430 objectclass that provide the needed attributes.</p>
2431
2432 <p>The attributes are normally provided in the cosine (RFC 1274) and
2433 dnsdomain2 schemas.  The latter is used for reverse entries like
2434 ptrrecord and recent DNS additions like aaaarecord and srvrecord.</p>
2435
2436 <p>In Debian Edu, we have created DNS objects using the object classes
2437 dcobject (for dc), dnsdomain or dnsdomain2 (structural, for the DNS
2438 attributes) and domainrelatedobject (for associatedDomain).  The use
2439 of structural object classes make it impossible to combine these
2440 classes with the object classes used by DHCP.</p>
2441
2442 <p>There are other schemas that could be used too, for example the
2443 dnszone structural object class used by Gosa and bind-sdb for the DNS
2444 attributes combined with the domainrelatedobject object class, but in
2445 this case some unused attributes would have to be included as well
2446 (zonename and relativedomainname).</p>
2447
2448 <p>My proposal for Debian Edu would be to switch PowerDNS to strict
2449 mode and not use any of the existing objectclasses (dnsdomain,
2450 dnsdomain2 and dnszone) when one want to combine the DNS information
2451 with DHCP information, and instead create a auxiliary object class
2452 defined something like this (using the attributes defined for
2453 dnsdomain and dnsdomain2 or dnszone):</p>
2454
2455 <blockquote><pre>
2456 objectclass ( some-oid NAME 'dnsDomainAux'
2457     SUP top
2458     AUXILIARY
2459     MAY ( ARecord $ MDRecord $ MXRecord $ NSRecord $ SOARecord $ CNAMERecord $
2460           DNSTTL $ DNSClass $ PTRRecord $ HINFORecord $ MINFORecord $
2461           TXTRecord $ SIGRecord $ KEYRecord $ AAAARecord $ LOCRecord $
2462           NXTRecord $ SRVRecord $ NAPTRRecord $ KXRecord $ CERTRecord $
2463           A6Record $ DNAMERecord
2464     ))
2465 </pre></blockquote>
2466
2467 <p>This will allow any object to become a DNS entry when combined with
2468 the domainrelatedobject object class, and allow any entity to include
2469 all the attributes PowerDNS wants.  I've sent an email to the PowerDNS
2470 developers asking for their view on this schema and if they are
2471 interested in providing such schema with PowerDNS, and I hope my
2472 message will be accepted into their mailing list soon.</p>
2473
2474 <p><strong>ISC dhcp</strong></p>
2475
2476 <p>The DHCP server searches for specific objectclass and requests all
2477 the object attributes, and then uses the attributes it want.  This
2478 make it harder to figure out exactly what attributes are used, but
2479 thanks to the working example in Debian Edu I can at least get an idea
2480 what is needed without having to read the source code.</p>
2481
2482 <p>In the DHCP server configuration, the LDAP base to use and the
2483 search filter to use to locate the correct dhcpServer entity is
2484 stored.  These are the relevant entries from
2485 /etc/dhcp3/dhcpd.conf:</p>
2486
2487 <blockquote><pre>
2488 ldap-base-dn "dc=skole,dc=skolelinux,dc=no";
2489 ldap-dhcp-server-cn "dhcp";
2490 </pre></blockquote>
2491
2492 <p>The DHCP server uses this information to nest all the DHCP
2493 configuration it need.  The cn "dhcp" is located using the given LDAP
2494 base and the filter "(&(objectClass=dhcpServer)(cn=dhcp))".  The
2495 search result is this entry:</p>
2496
2497 <blockquote><pre>
2498 dn: cn=dhcp,dc=skole,dc=skolelinux,dc=no
2499 cn: dhcp
2500 objectClass: top
2501 objectClass: dhcpServer
2502 dhcpServiceDN: cn=DHCP Config,dc=skole,dc=skolelinux,dc=no
2503 </pre></blockquote>
2504
2505 <p>The content of the dhcpServiceDN attribute is next used to locate the
2506 subtree with DHCP configuration.  The DHCP configuration subtree base
2507 is located using a base scope search with base "cn=DHCP
2508 Config,dc=skole,dc=skolelinux,dc=no" and filter
2509 "(&(objectClass=dhcpService)(|(dhcpPrimaryDN=cn=dhcp,dc=skole,dc=skolelinux,dc=no)(dhcpSecondaryDN=cn=dhcp,dc=skole,dc=skolelinux,dc=no)))".
2510 The search result is this entry:</p>
2511
2512 <blockquote><pre>
2513 dn: cn=DHCP Config,dc=skole,dc=skolelinux,dc=no
2514 cn: DHCP Config
2515 objectClass: top
2516 objectClass: dhcpService
2517 objectClass: dhcpOptions
2518 dhcpPrimaryDN: cn=dhcp, dc=skole,dc=skolelinux,dc=no
2519 dhcpStatements: ddns-update-style none
2520 dhcpStatements: authoritative
2521 dhcpOption: smtp-server code 69 = array of ip-address
2522 dhcpOption: www-server code 72 = array of ip-address
2523 dhcpOption: wpad-url code 252 = text
2524 </pre></blockquote>
2525
2526 <p>Next, the entire subtree is processed, one level at the time.  When
2527 all the DHCP configuration is loaded, it is ready to receive requests.
2528 The subtree in Debian Edu contain objects with object classes
2529 top/dhcpService/dhcpOptions, top/dhcpSharedNetwork/dhcpOptions,
2530 top/dhcpSubnet, top/dhcpGroup and top/dhcpHost.  These provide options
2531 and information about netmasks, dynamic range etc.  Leaving out the
2532 details here because it is not relevant for the focus of my
2533 investigation, which is to see if it is possible to merge dns and dhcp
2534 related computer objects.</p>
2535
2536 <p>When a DHCP request come in, LDAP is searched for the MAC address
2537 of the client (00:00:00:00:00:00 in this example), using a subtree
2538 scoped search with "cn=DHCP Config,dc=skole,dc=skolelinux,dc=no" as
2539 the base and "(&(objectClass=dhcpHost)(dhcpHWAddress=ethernet
2540 00:00:00:00:00:00))" as the filter.  This is what a host object look
2541 like:</p>
2542
2543 <blockquote><pre>
2544 dn: cn=hostname,cn=group1,cn=THINCLIENTS,cn=DHCP Config,dc=skole,dc=skolelinux,dc=no
2545 cn: hostname
2546 objectClass: top
2547 objectClass: dhcpHost
2548 dhcpHWAddress: ethernet 00:00:00:00:00:00
2549 dhcpStatements: fixed-address hostname
2550 </pre></blockquote>
2551
2552 <p>There is less flexiblity in the way LDAP searches are done here.
2553 The object classes need to have fixed names, and the configuration
2554 need to be stored in a fairly specific LDAP structure.  On the
2555 positive side, the invidiual dhcpHost entires can be anywhere without
2556 the DN pointed to by the dhcpServer entries.  The latter should make
2557 it possible to group all host entries in a subtree next to the
2558 configuration entries, and this subtree can also be shared with the
2559 DNS server if the schema proposed above is combined with the dhcpHost
2560 structural object class.
2561
2562 <p><strong>Conclusion</strong></p>
2563
2564 <p>The PowerDNS implementation seem to be very flexible when it come
2565 to which LDAP schemas to use.  While its "tree" mode is rigid when it
2566 come to the the LDAP structure, the "strict" mode is very flexible,
2567 allowing DNS objects to be stored anywhere under the base cn specified
2568 in the configuration.</p>
2569
2570 <p>The DHCP implementation on the other hand is very inflexible, both
2571 regarding which LDAP schemas to use and which LDAP structure to use.
2572 I guess one could implement ones own schema, as long as the
2573 objectclasses and attributes have the names used, but this do not
2574 really help when the DHCP subtree need to have a fairly fixed
2575 structure.</p>
2576
2577 <p>Based on the observed behaviour, I suspect a LDAP structure like
2578 this might work for Debian Edu:</p>
2579
2580 <blockquote><pre>
2581 ou=services
2582   cn=machine-info (dhcpService) - dhcpServiceDN points here
2583     cn=dhcp (dhcpServer)
2584     cn=dhcp-internal (dhcpSharedNetwork/dhcpOptions)
2585       cn=10.0.2.0 (dhcpSubnet)
2586         cn=group1 (dhcpGroup/dhcpOptions)
2587     cn=dhcp-thinclients (dhcpSharedNetwork/dhcpOptions)
2588       cn=192.168.0.0 (dhcpSubnet)
2589         cn=group1 (dhcpGroup/dhcpOptions)
2590     ou=machines - PowerDNS base points here
2591       cn=hostname (dhcpHost/domainrelatedobject/dnsDomainAux)
2592 </pre></blockquote>
2593
2594 <P>This is not tested yet.  If the DHCP server require the dhcpHost
2595 entries to be in the dhcpGroup subtrees, the entries can be stored
2596 there instead of a common machines subtree, and the PowerDNS base
2597 would have to be moved one level up to the machine-info subtree.</p>
2598
2599 <p>The combined object under the machines subtree would look something
2600 like this:</p>
2601
2602 <blockquote><pre>
2603 dn: dc=hostname,ou=machines,cn=machine-info,dc=skole,dc=skolelinux,dc=no
2604 dc: hostname
2605 objectClass: top
2606 objectClass: dhcpHost
2607 objectclass: domainrelatedobject
2608 objectclass: dnsDomainAux
2609 associateddomain: hostname.intern
2610 arecord: 10.11.12.13
2611 dhcpHWAddress: ethernet 00:00:00:00:00:00
2612 dhcpStatements: fixed-address hostname.intern
2613 </pre></blockquote>
2614
2615 </p>One could even add the LTSP configuration associated with a given
2616 machine, as long as the required attributes are available in a
2617 auxiliary object class.</p>
2618
2619  </div>
2620  <div class="tags">
2621
2622
2623
2624   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
2625
2626  </div>
2627 </div>
2628 <div class="padding"></div>
2629
2630 <div class="entry">
2631  <div class="title">
2632  <a href="http://people.skolelinux.org/pere/blog/One_step_closer_to_single_signon_in_Debian_Edu.html">One step closer to single signon in Debian Edu</a>
2633  </div>
2634  <div class="date">
2635   2010-07-25 10:00
2636  </div>
2637
2638  <div class="body">
2639
2640 <p>The last few months me and the other Debian Edu developers have
2641 been working hard to get the Debian/Squeeze based version of Debian
2642 Edu/Skolelinux into shape.  This future version will use Kerberos for
2643 authentication, and services are slowly migrated to single signon,
2644 getting rid of password questions one at the time.</p>
2645
2646 <p>It will also feature a roaming workstation profile with local home
2647 directory, for laptops that are only some times on the Skolelinux
2648 network, and for this profile a shortcut is created in Gnome and KDE
2649 to gain access to the users home directory on the file server.  This
2650 shortcut uses SMB at the moment, and yesterday I had time to test if
2651 SMB mounting had started working in KDE after we added the cifs-utils
2652 package.  I was pleasantly surprised how well it worked.</p>
2653
2654 <p>Thanks to the recent changes to our samba configuration to get it
2655 to use Kerberos for authentication, there were no question about user
2656 password when mounting the SMB volume.  A simple click on the shortcut
2657 in the KDE menu, and a window with the home directory popped
2658 up. :)</p>
2659
2660 <p>One step closer to a single signon solution out of the box in
2661 Debian Edu.  We already had PAM, LDAP, IMAP and SMTP in place, and now
2662 also Samba.  Next step is Cups and hopefully also NFS.</p>
2663
2664 <p>We had planned a alpha0 release of Debian Edu for today, but thanks
2665 to the autobuilder administrators for some architectures being slow to
2666 sign packages, we are still missing the fixed LTSP package we need for
2667 the release.  It was uploaded three days ago with urgency=high, and if
2668 it had entered testing yesterday we would have been able to test it in
2669 time for a alpha0 release today.  As the binaries for ia64 and powerpc
2670 still not uploaded to the Debian archive, we need to delay the alpha
2671 release another day.</p>
2672
2673 <p>If you want to help out with implementing Kerberos for Debian Edu,
2674 please contact us on debian-edu@lists.debian.org.</p>
2675
2676  </div>
2677  <div class="tags">
2678
2679
2680
2681   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>.
2682
2683  </div>
2684 </div>
2685 <div class="padding"></div>
2686
2687 <div class="entry">
2688  <div class="title">
2689  <a href="http://people.skolelinux.org/pere/blog/First_Debian_Edu_test_release__alpha0__based_on_Squeeze_is_released.html">First Debian Edu test release (alpha0) based on Squeeze is released</a>
2690  </div>
2691  <div class="date">
2692   2010-07-27 17:45
2693  </div>
2694
2695  <div class="body">
2696
2697 <p>I just posted this announcement culminating several months of work
2698 with the next Debian Edu release.  Not nearly done, but one major step
2699 completed.</p>
2700
2701 <blockquote>
2702 <p>This is the first test release based on Squeeze. The focus of this
2703 release is to test the user application selection. To have a look,
2704 install the standalone profile and let the developers know if the set
2705 of installed packages i.e. applications should be modified. If some
2706 user application is missing, or if there are some applications that no
2707 longer make sense to be included in Debian Edu, please let us know.
2708 Also, if a useful application is missing the translation for your
2709 language of choice, please let us know too.</p>
2710
2711 <p>In addition, feedback and help to polish the desktop (menus,
2712 artwork, starters, etc.) is appreciated. We would like to ship a nice
2713 and handy KDE4 desktop targeted for schools out of the box.</p>
2714
2715 <p>The other profiles should be installable, but there is a lot more
2716 work left to be done before they are ready, so do not expect to
2717 much.</p>
2718
2719 <p>Changes compared to the lenny based version</p>
2720
2721 <ul>
2722 <li>Everything from Debian Squeeze
2723 <ul>
2724   <li>Desktop environment KDE 4.4 => the new KDE desktop in
2725          combination with some new artwork
2726   <li>Web browser Iceweasel 3.5
2727   <li>OpenOffice.org 3.2
2728   <li>Educational toolbox GCompris 9.3
2729   <li>Music creator Rosegarden 10.04.2
2730   <li>Image editor Gimp 2.6.10
2731   <li>Virtual universe Celestia 1.6.0
2732   <li>Virtual stargazer Stellarium 0.10.4
2733   <li>3D modeler Blender 2.49.2 (new application)
2734   <li>Video editor Kdenlive 0.7.7 (new application)
2735 </ul></li>
2736 <li>Now using Kerberos for password checking (migration not finished).
2737     Enabled for:
2738 <ul>
2739   <li>PAM
2740   <li>LDAP
2741   <li>IMAP
2742   <li>SMTP (sender verification)
2743 </ul>
2744 </li>
2745 <li>New experimental roaming workstation profile for laptops.</li>
2746 <li>Show welcome page to users when they first log in. The URL is
2747     fetched from LDAP.</li>
2748 <li>New LXDE desktop option, in addition to KDE (default) and Gnome.</li>
2749 <li>General cleanup (not finished)</li>
2750 </ul>
2751 <p>The following features are not working as they should</p>
2752
2753 <ul>
2754 <li>No web based administration tool for creating users and groups. The
2755     scripts ldap-createuser-krb and ldap-add-user-to-group can be used
2756     for testing.</li>
2757 <li>DVD installs are missing debian-installer images for the PXE boot,
2758     and do not set up the PXE menu on eth0 because of this. LTSP
2759     clients should still boot from eth1 on thin client servers.</li>
2760 <li>The restructured KDE menu is not implemented.</li>
2761 <li>The LDAP server setup need to be reviewed for security.</li>
2762 <li>The LDAP directory structure need to be reworked.</li>
2763 <li>Different sets of packages are installed when using the DVD and the
2764     netinst CD. More packages are installed using the netinst CD.</li>
2765 <li>The jackd package fail to install. This is believed to be caused by
2766     some ongoing transition, and hopefully should be solved soon. The
2767     jackd1 package can be installed manually for those that need it.</li>
2768 <li>Some packages lack translations. See
2769     http://wiki.debian.org/DebianEdu/Status/Squeeze for updated status,
2770     and help out with translations.</li>
2771 </ul>
2772
2773 <p>To download this multiarch netinstall release you can use</p>
2774
2775 <ul>
2776 <li><a href="ftp://ftp.skolelinux.org/skolelinux-cd/squeeze-alpha/debian-edu-6.0.0+edua0-CD.iso">ftp://ftp.skolelinux.org/skolelinux-cd/squeeze-alpha/debian-edu-6.0.0+edua0-CD.iso</a></li>
2777 <li><a href="http://ftp.skolelinux.org/skolelinux-cd/squeeze-alpha/debian-edu-6.0.0+edua0-CD.iso">http://ftp.skolelinux.org/skolelinux-cd/squeeze-alpha/debian-edu-6.0.0+edua0-CD.iso</a></li>
2778 <li>rsync -avzP ftp.skolelinux.org::skolelinux-cd/squeeze-alpha/debian-edu-6.0.0+edua0-CD.iso</li>
2779 </ul>
2780 <p>To download this multiarch dvd release you can use</p>
2781
2782 <ul>
2783 <li><a href="ftp://ftp.skolelinux.org/skolelinux-cd/squeeze-alpha/debian-edu-6.0.0+edua0-DVD.iso">ftp://ftp.skolelinux.org/skolelinux-cd/squeeze-alpha/debian-edu-6.0.0+edua0-DVD.iso</a></li>
2784 <li><a href="http://ftp.skolelinux.org/skolelinux-cd/squeeze-alpha/debian-edu-6.0.0+edua0-DVD.iso">http://ftp.skolelinux.org/skolelinux-cd/squeeze-alpha/debian-edu-6.0.0+edua0-DVD.iso</a></li>
2785 <li>rsync -avzP ftp.skolelinux.org::skolelinux-cd/squeeze-alpha/debian-edu-6.0.0+edua0-DVD.iso</li>
2786 </ul>
2787
2788 <p>There is no source DVD available yet. It will be prepared when we
2789 get closer to the final release.</p>
2790
2791 <p>The MD5SUM of these images are</p>
2792
2793 <ul>
2794 <li>3dbf45d59f42a53518b6e3c9ec3b5eb6 debian-edu-6.0.0+edua0-CD.iso</li>
2795 <li>22f2cbfce281d1c6e478be452638675d debian-edu-6.0.0+edua0-DVD.iso</li>
2796 </ul>
2797
2798 <p>The SHA1SUM of these images are</p>
2799 <ul>
2800 <li>c53d1b69b40cf37cd27aefaf33f6f6a3821bedf0 debian-edu-6.0.0+edua0-CD.iso</li>
2801 <li>2ec29d7db676d59d32197b05c277ffe16348376c debian-edu-6.0.0+edua0-DVD.iso</li>
2802 </ul>
2803 <p>How to report bugs:
2804 http://wiki.debian.org/DebianEdu/HowTo/ReportBugsInBugzilla</p>
2805
2806 <p>Please direct replies to debian-edu@lists.debian.org</p>
2807 </blockquote>
2808
2809  </div>
2810  <div class="tags">
2811
2812
2813
2814   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
2815
2816  </div>
2817 </div>
2818 <div class="padding"></div>
2819
2820 <div class="entry">
2821  <div class="title">
2822  <a href="http://people.skolelinux.org/pere/blog/Debian_Edu_roaming_workstation___at_the_university_of_Oslo.html">Debian Edu roaming workstation - at the university of Oslo</a>
2823  </div>
2824  <div class="date">
2825   2010-08-03 23:30
2826  </div>
2827
2828  <div class="body">
2829
2830 <p>The new roaming workstation profile in Debian Edu/Squeeze is fairly
2831 similar to the laptop setup am I working on using Ubuntu for the
2832 University of Oslo, and just for the heck of it, I tested today how
2833 hard it would be to integrate that profile into the university
2834 infrastructure.  In this case, it is the university LDAP server,
2835 Active Directory Kerberos server and SMB mounting from the Netapp file
2836 servers.</p>
2837
2838 <p>I was pleasantly surprised that the only three files needed to be
2839 changed (/etc/sssd/sssd.conf, /etc/ldap.conf and
2840 /etc/mklocaluser.d/20-debian-edu-config) and one file had to be added
2841 (/usr/share/perl5/Debian/Edu_Local.pm), to get the client working.
2842 Most of the changes were to get the client to use the university LDAP
2843 for NSS and Kerberos server for PAM, but one was to change a hard
2844 coded DNS domain name in the mklocaluser hook from .intern to
2845 .uio.no.</p>
2846
2847 <p>This testing was so encouraging, that I went ahead and adjusted the
2848 Debian Edu scripts and setup in subversion to centralise the roaming
2849 workstation setup a bit more and avoid the hardcoded DNS domain name,
2850 so that when I test this tomorrow, I expect to get away with modifying
2851 only /etc/sssd/sssd.conf and /etc/ldap.conf to get it to use the
2852 university servers.</p>
2853
2854 <p>My goal is to get the clients to have no hardcoded settings and
2855 fetch all their initial setup during installation and first boot, to
2856 allow them to be inserted also into environments where the default
2857 setup in Debian Edu has been changed or as with the university, where
2858 the environment is different but provides the protocols Debian Edu
2859 uses.</p>
2860
2861  </div>
2862  <div class="tags">
2863
2864
2865
2866   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
2867
2868  </div>
2869 </div>
2870 <div class="padding"></div>
2871
2872 <div class="entry">
2873  <div class="title">
2874  <a href="http://people.skolelinux.org/pere/blog/Autodetecting_Client_setup_for_roaming_workstations_in_Debian_Edu.html">Autodetecting Client setup for roaming workstations in Debian Edu</a>
2875  </div>
2876  <div class="date">
2877   2010-08-07 14:45
2878  </div>
2879
2880  <div class="body">
2881
2882 <p>A few days ago, I
2883 <a href="http://people.skolelinux.org/pere/blog/Debian_Edu_roaming_workstation___at_the_university_of_Oslo.html">tried
2884 to install</a> a Roaming workation profile from Debian Edu/Squeeze
2885 while on the university network here at the University of Oslo, and
2886 noticed how much had to change to get it operational using the
2887 university infrastructure.  It was fairly easy, but it occured to me
2888 that Debian Edu would improve a lot if I could get the client to
2889 connect without any changes at all, and thus let the client configure
2890 itself during installation and first boot to use the infrastructure
2891 around it.  Now I am a huge step further along that road.</p>
2892
2893 <p>With our current squeeze-test packages, I can select the roaming
2894 workstation profile and get a working laptop connecting to the
2895 university LDAP server for user and group and our active directory
2896 servers for Kerberos authentication.  All this without any
2897 configuration at all during installation.  My users home directory got
2898 a bookmark in the KDE menu to mount it via SMB, with the correct URL.
2899 In short, openldap and sssd is correctly configured.  In addition to
2900 this, the client look for http://wpad/wpad.dat to configure a web
2901 proxy, and when it fail to find it no proxy settings are stored in
2902 /etc/environment and /etc/apt/apt.conf.  Iceweasel and KDE is
2903 configured to look for the same wpad configuration and also do not use
2904 a proxy when at the university network.  If the machine is moved to a
2905 network with such wpad setup, it would automatically use it when DHCP
2906 gave it a IP address.</p>
2907
2908 <p>The LDAP server is located using DNS, by first looking for the DNS
2909 entry ldap.$domain.  If this do not exist, it look for the
2910 _ldap._tcp.$domain SRV records and use the first one as the LDAP
2911 server.  Next, it connects to the LDAP server and search all
2912 namingContexts entries for posixAccount or posixGroup objects, and
2913 pick the first one as the LDAP base.  For Kerberos, a similar
2914 algorithm is used to locate the LDAP server, and the realm is the
2915 uppercase version of $domain.</p>
2916
2917 <p>So, what is not working, you might ask.  SMB mounting my home
2918 directory do not work.  No idea why, but suspected the incorrect
2919 Kerberos settings in /etc/krb5.conf and /etc/samba/smb.conf might be
2920 the cause.  These are not properly configured during installation, and
2921 had to be hand-edited to get the correct Kerberos realm and server,
2922 but SMB mounting still do not work. :(</p>
2923
2924 <p>With this automatic configuration in place, I expect a Debian Edu
2925 roaming profile installation would be able to automatically detect and
2926 connect to any site using LDAP and Kerberos for NSS directory and PAM
2927 authentication.  It should also work out of the box in a Active
2928 Directory environment providing posixAccount and posixGroup objects
2929 with UID and GID values.</p>
2930
2931 <p>If you want to help out with implementing these things for Debian
2932 Edu, please contact us on debian-edu@lists.debian.org.</p>
2933
2934  </div>
2935  <div class="tags">
2936
2937
2938
2939   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
2940
2941  </div>
2942 </div>
2943 <div class="padding"></div>
2944
2945 <div class="entry">
2946  <div class="title">
2947  <a href="http://people.skolelinux.org/pere/blog/Testing_if_a_file_system_can_be_used_for_home_directories___.html">Testing if a file system can be used for home directories...</a>
2948  </div>
2949  <div class="date">
2950   2010-08-08 21:20
2951  </div>
2952
2953  <div class="body">
2954
2955 <p>A few years ago, I was involved in a project planning to use
2956 Windows file servers as home directory servers for Debian
2957 Edu/Skolelinux machines.  This was thought to be no problem, as the
2958 access would be through the SMB network file system protocol, and we
2959 knew other sites used SMB with unix and samba as the file server to
2960 mount home directories without any problems.  But, after months of
2961 struggling, we had to conclude that our goal was impossible.</p>
2962
2963 <p>The reason is simply that while SMB can be used for home
2964 directories when the file server is Samba running on Unix, this only
2965 work because of Samba have some extensions and the fact that the
2966 underlying file system is a unix file system.  When using a Windows
2967 file server, the underlying file system do not have POSIX semantics,
2968 and several programs will fail if the users home directory where they
2969 want to store their configuration lack POSIX semantics.</p>
2970
2971 <p>As part of this work, I wrote a small C program I want to share
2972 with you all, to replicate a few of the problematic applications (like
2973 OpenOffice.org and GCompris) and see if the file system was working as
2974 it should.  If you find yourself in spooky file system land, it might
2975 help you find your way out again.  This is the fs-test.c source:</p>
2976
2977 <pre>
2978 /*
2979  * Some tests to check the file system sematics.  Used to verify that
2980  * CIFS from a windows server do not work properly as a linux home
2981  * directory.
2982  * License: GPL v2 or later
2983  *
2984  * needs libsqlite3-dev and build-essential installed
2985  * compile with: gcc -Wall -lsqlite3 -DTEST_SQLITE fs-test.c -o fs-test
2986 */
2987
2988 #define _FILE_OFFSET_BITS 64
2989 #define _LARGEFILE_SOURCE 1
2990 #define _LARGEFILE64_SOURCE 1
2991
2992 #define _GNU_SOURCE /* for asprintf() */
2993
2994 #include &lt;errno.h>
2995 #include &lt;fcntl.h>
2996 #include &lt;stdio.h>
2997 #include &lt;string.h>
2998 #include &lt;stdlib.h>
2999 #include &lt;sys/file.h>
3000 #include &lt;sys/stat.h>
3001 #include &lt;sys/types.h>
3002 #include &lt;unistd.h>
3003
3004 #ifdef TEST_SQLITE
3005 /*
3006  * Test sqlite open, as done by gcompris require the libsqlite3-dev
3007  * package and linking with -lsqlite3.  A more low level test is
3008  * below.
3009  * See also &lt;URL: http://www.sqlite.org./faq.html#q5 >.
3010  */
3011 #include &lt;sqlite3.h>
3012 #define CREATE_TABLE_USERS                                              \
3013   "CREATE TABLE users (user_id INT UNIQUE, login TEXT, lastname TEXT, firstname TEXT, birthdate TEXT, class_id INT ); "
3014 int test_sqlite_open(void) {
3015   char *zErrMsg;
3016   char *name = "testsqlite.db";
3017   sqlite3 *db=NULL;
3018   unlink(name);
3019   int rc = sqlite3_open(name, &db);
3020   if( rc ){
3021     printf("error: sqlite open of %s failed: %s\n", name, sqlite3_errmsg(db));
3022     sqlite3_close(db);
3023     return -1;
3024   }
3025
3026   /* create tables */
3027   rc = sqlite3_exec(db,CREATE_TABLE_USERS, NULL,  0, &zErrMsg);
3028   if( rc != SQLITE_OK ){
3029     printf("error: sqlite table create failed: %s\n", zErrMsg);
3030     sqlite3_close(db);
3031     return -1;
3032   }
3033   printf("info: sqlite worked\n");
3034   sqlite3_close(db);
3035   return 0;
3036 }
3037 #endif /* TEST_SQLITE */
3038
3039 /*
3040  * Demonstrate locking issue found in gcompris using sqlite3.  This
3041  * work with ext3, but not with cifs server on Windows 2003.  This is
3042  * done in the sqlite3 library.
3043  * See also
3044  * &lt;URL:http://www.cygwin.com/ml/cygwin/2001-08/msg00854.html> and the
3045  * POSIX specification
3046  * &lt;URL:http://www.opengroup.org/onlinepubs/009695399/functions/fcntl.html>.
3047  */
3048 int test_gcompris_locking(void) {
3049   struct flock fl;
3050   char *name = "testsqlite.db";
3051   unlink(name);
3052   int fd = open(name, O_RDWR|O_CREAT|O_LARGEFILE, 0644);
3053   printf("info: testing fcntl locking\n");
3054
3055   fl.l_whence = SEEK_SET;
3056   fl.l_pid    = getpid();
3057   printf("  Read-locking 1 byte from 1073741824");
3058   fl.l_start  = 1073741824;
3059   fl.l_len    = 1;
3060   fl.l_type   = F_RDLCK;
3061   if (0 != fcntl(fd, F_SETLK, &fl) ) printf(" - error!\n"); else printf("\n");
3062
3063   printf("  Read-locking 510 byte from 1073741826");
3064   fl.l_start  = 1073741826;
3065   fl.l_len    = 510;
3066   fl.l_type   = F_RDLCK;
3067   if (0 != fcntl(fd, F_SETLK, &fl) ) printf(" - error!\n"); else printf("\n");
3068
3069   printf("  Unlocking 1 byte from 1073741824");
3070   fl.l_start  = 1073741824;
3071   fl.l_len    = 1;
3072   fl.l_type   = F_UNLCK;
3073   if (0 != fcntl(fd, F_SETLK, &fl) ) printf(" - error!\n"); else printf("\n");
3074
3075   printf("  Write-locking 1 byte from 1073741824");
3076   fl.l_start  = 1073741824;
3077   fl.l_len    = 1;
3078   fl.l_type   = F_WRLCK;
3079   if (0 != fcntl(fd, F_SETLK, &fl) ) printf(" - error!\n"); else printf("\n");
3080
3081   printf("  Write-locking 510 byte from 1073741826");
3082   fl.l_start  = 1073741826;
3083   fl.l_len    = 510;
3084   if (0 != fcntl(fd, F_SETLK, &fl) ) printf(" - error!\n"); else printf("\n");
3085
3086   printf("  Unlocking 2 byte from 1073741824");
3087   fl.l_start  = 1073741824;
3088   fl.l_len    = 2;
3089   fl.l_type   = F_UNLCK;
3090   if (0 != fcntl(fd, F_SETLK, &fl) ) printf(" - error!\n"); else printf("\n");
3091
3092   close(fd);
3093   return 0;
3094 }
3095
3096 /*
3097  * Test if permissions of freshly created directories allow entries
3098  * below them.  This was a problem with OpenOffice.org and gcompris.
3099  * Mounting with option 'sync' seem to solve this problem while
3100  * slowing down file operations.
3101  */
3102 int test_subdirectory_creation(void) {
3103 #define LEVELS 5
3104   char *path = strdup("test");
3105   char *dirs[LEVELS];
3106   int level;
3107   printf("info: testing subdirectory creation\n");
3108   for (level = 0; level &lt; LEVELS; level++) {
3109     char *newpath = NULL;
3110     if (-1 == mkdir(path, 0777)) {
3111       printf("  error: Unable to create directory '%s': %s\n",
3112              path, strerror(errno));
3113       break;
3114     }
3115     asprintf(&newpath, "%s/%s", path, "test");
3116     free(path);
3117     path = newpath;
3118   }
3119   return 0;
3120 }
3121
3122 /*
3123  * Test if symlinks can be created.  This was a problem detected with
3124  * KDE.
3125  */
3126 int test_symlinks(void) {
3127   printf("info: testing symlink creation\n");
3128   unlink("symlink");
3129   if (-1 == symlink("file", "symlink"))
3130     printf("  error: Unable to create symlink\n");
3131   return 0;
3132 }
3133
3134 int main(int argc, char **argv) {
3135   printf("Testing POSIX/Unix sematics on file system\n");
3136   test_symlinks();
3137   test_subdirectory_creation();
3138 #ifdef TEST_SQLITE
3139   test_sqlite_open();
3140 #endif /* TEST_SQLITE */
3141   test_gcompris_locking();
3142   return 0;
3143 }
3144 </pre>
3145
3146 <p>When everything is working, it should print something like
3147 this:</p>
3148
3149 <pre>
3150 Testing POSIX/Unix sematics on file system
3151 info: testing symlink creation
3152 info: testing subdirectory creation
3153 info: sqlite worked
3154 info: testing fcntl locking
3155   Read-locking 1 byte from 1073741824
3156   Read-locking 510 byte from 1073741826
3157   Unlocking 1 byte from 1073741824
3158   Write-locking 1 byte from 1073741824
3159   Write-locking 510 byte from 1073741826
3160   Unlocking 2 byte from 1073741824
3161 </pre>
3162
3163 <p>I do not remember the exact details of the problems we saw, but one
3164 of them was with locking, where if I remember correctly, POSIX allow a
3165 read-only lock to be upgraded to a read-write lock without unlocking
3166 the read-only lock (while Windows do not).  Another was a bug in the
3167 CIFS/SMB client implementation in the Linux kernel where directory
3168 meta information would be wrong for a fraction of a second, making
3169 OpenOffice.org fail to create its deep directory tree because it was
3170 not allowed to create files in its freshly created directory.</p>
3171
3172 <p>Anyway, here is a nice tool for your tool box, might you never need
3173 it. :)</p>
3174
3175 <p>Update 2010-08-27: Michael Gebetsroither report that he found the
3176 script so useful that he created a GIT repository and stored it in
3177 <a href="http://github.com/gebi/fs-test">http://github.com/gebi/fs-test</a>.</p>
3178
3179  </div>
3180  <div class="tags">
3181
3182
3183
3184   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
3185
3186  </div>
3187 </div>
3188 <div class="padding"></div>
3189
3190 <div class="entry">
3191  <div class="title">
3192  <a href="http://people.skolelinux.org/pere/blog/No_hardcoded_config_on_Debian_Edu_clients.html">No hardcoded config on Debian Edu clients</a>
3193  </div>
3194  <div class="date">
3195   2010-08-09 20:15
3196  </div>
3197
3198  <div class="body">
3199
3200 <p>As reported earlier, the last few days I have looked at how Debian
3201 Edu clients are configured, and tried to get rid of all hardcoded
3202 configuration settings on the clients.  I believe the work to be
3203 mostly done, and the clients seem to work just fine with dynamically
3204 generated configuration.</p>
3205
3206 <p>What is the point, you might ask?  The point is to allow a Debian
3207 Edu desktop to integrate into an existing network infrastructure
3208 without any manual configuration.</p>
3209
3210 <p>This is what happens when installing a Debian Edu client here at
3211 the University of Oslo using PXE.  With the PXE installation, I am
3212 asked for language (Norwegian Bokmål), locality (Norway) and keyboard
3213 layout (no-latin1), Debian Edu profile (Roaming Workstation), if I
3214 accept to reformat the hard drive (yes), if I want to submit info to
3215 popcon.debian.org (no) and root password (secret).  After answering
3216 these questions, the installer goes ahead and does its thing, and
3217 after around 50 minutes it is done.  I press enter to finish the
3218 installation, and the machine reboots into KDE.  When the machine is
3219 ready and kdm asks for login information, I enter my university
3220 username and password, am told by kdm that a local home directory has
3221 been created and that I must log in again, and finally log in with the
3222 same username and password to the KDE 4.4 desktop.  At no point during
3223 this process did it ask for university specific settings, and all the
3224 required configuration was dynamically detected using information
3225 fetched via DHCP and DNS.  The roaming workstation is now ready for
3226 use.</p>
3227
3228 <p>How was this done, you might wonder?  First of all, here is the
3229 list of things that need to be configured on the client to get it
3230 working properly out of the box:</p>
3231
3232 <ul>
3233 <li>IP address/netmask and DNS server.</li>
3234 <li>Web proxy URL.</li>
3235 <li>LDAP server for NSS directory information (user, group, etc).</li>
3236 <li>Kerberos server for PAM password checking.</li>
3237 <li>SMB mount point to access the network home directory. (*)</li>
3238 <li>Central syslog server to send syslog messages to. (*)</li>
3239 <li>Sitesummary collector URL to submit info to central server. (*)</li>
3240 </ul>
3241
3242 <p>(Hm, did I forget anything?  Let me knew if I did.)</p>
3243
3244 <p>The points marked (*) are not required to be able to use the
3245 machine, but needed to provide central storage and allowing system
3246 administrators to track their machines.  Since yesterday, everything
3247 but the sitesummary collector URL is dynamically discovered at boot
3248 and installation time in the svn version of Debian Edu.</p>
3249
3250 <p>The IP and DNS setup is fetched during boot using DHCP as usual.
3251 When a DHCP update arrives, the proxy setup is updated by looking for
3252 http://wpat/wpad.dat and using the content of this WPAD file to
3253 configure the http and ftp proxy in /etc/environment and
3254 /etc/apt/apt.conf.  I decided to update the proxy setup using a DHCP
3255 hook to ensure that the client stops using the Debian Edu proxy when
3256 it is moved outside the Debian Edu network, and instead uses any local
3257 proxy present on the new network when it moves around.</p>
3258
3259 <p>The DNS names of the LDAP, Kerberos and syslog server and related
3260 configuration are generated using DNS information at boot.  First the
3261 installer looks for a host named ldap in the current DNS domain.  If
3262 not found, it looks for _ldap._tcp SRV records in DNS instead.  If an
3263 LDAP server is found, its root DSE entry is requested and the
3264 attributes namingContexts and defaultNamingContext are used to
3265 determine which LDAP base to use for NSS.  If there are several
3266 namingContexts attibutes and the defaultNamingContext is present, that
3267 LDAP subtree is used as the base.  If defaultNamingContext is missing,
3268 the subtrees listed as namingContexts are searched in sequence for any
3269 object with class posixAccount or posixGroup, and the first one with
3270 such an object is used as the LDAP base.  For Kerberos, a similar
3271 search is done by first looking for a host named kerberos, and then
3272 for the _kerberos._tcp SRV record.  I've been unable to find a way to
3273 look up the Kerberos realm, so for this the upper case string of the
3274 current DNS domain is used.</p>
3275
3276 <p>For the syslog server, the hosts syslog and loghost are searched
3277 for, and the _syslog._udp SRV record is consulted if no such host is
3278 found.  This algorithm works for both Debian Edu and the University of
3279 Oslo.  A similar strategy would work for locating the sitesummary
3280 server, but have not been implemented yet.  I decided to fetch and
3281 save these settings during installation, to make sure moving to a
3282 different network does not change the set of users being allowed to
3283 log in nor the passwords required to log in.  Usernames and passwords
3284 will be cached by sssd when the user logs in on the Debian Edu
3285 network, and will not change as the laptop move around.  For a
3286 non-roaming machine, there is no caching, but given that it is
3287 supposed to stay in place it should not matter much.  Perhaps we
3288 should switch those to use sssd too?</p>
3289
3290 <p>The user's SMB mount point for the network home directory is
3291 located when the user logs in for the first time.  The LDAP server is
3292 consulted to look for the user's LDAP object and the sambaHomePath
3293 attribute is used if found.  If it isn't found, the home directory
3294 path fetched from NSS is used instead.  Assuming the path is of the
3295 form /site/server/directory/username, the second part is looked up in
3296 DNS and used to generate a SMB URL of the form
3297 smb://server.domain/username.  This algorithm works for both Debian
3298 edu and the University of Oslo.  Perhaps there are better attributes
3299 to use or a better algorithm that works for more sites, but this will
3300 do for now. :)</p>
3301
3302 <p>This work should make it easier to integrate the Debian Edu clients
3303 into any LDAP/Kerberos infrastructure, and make the current setup even
3304 more flexible than before.  I suspect it will also work for thin
3305 client servers, allowing one to easily set up LTSP and hook it into a
3306 existing network infrastructure, but I have not had time to test this
3307 yet.</p>
3308
3309 <p>If you want to help out with implementing these things for Debian
3310 Edu, please contact us on debian-edu@lists.debian.org.</p>
3311
3312 <p>Update 2010-08-09: Simon Farnsworth gave me a heads-up on how to
3313 detect Kerberos realm from DNS, by looking for _kerberos TXT entries
3314 before falling back to the upper case DNS domain name.  Will have to
3315 implement it for Debian Edu. :)</p>
3316
3317  </div>
3318  <div class="tags">
3319
3320
3321
3322   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
3323
3324  </div>
3325 </div>
3326 <div class="padding"></div>
3327
3328 <div class="entry">
3329  <div class="title">
3330  <a href="http://people.skolelinux.org/pere/blog/Broken_umask_handling_with_sshfs.html">Broken umask handling with sshfs</a>
3331  </div>
3332  <div class="date">
3333   2010-08-26 13:30
3334  </div>
3335
3336  <div class="body">
3337
3338 <p>My file system sematics program
3339 <a href="http://people.skolelinux.org/pere/blog/Testing_if_a_file_system_can_be_used_for_home_directories___.html">presented
3340 a few days ago</a> is very useful to verify that a file system can
3341 work as a unix home directory,and today I had to extend it a bit.  I'm
3342 looking into alternatives for home directory access here at the
3343 University of Oslo, and one of the options is sshfs.  My friend
3344 Finn-Arne mentioned a while back that they had used sshfs with Debian
3345 Edu, but stopped because of problems.  I asked today what the problems
3346 where, and he mentioned that sshfs failed to handle umask properly.
3347 Trying to detect the problem I wrote this addition to my fs testing
3348 script:</p>
3349
3350 <pre>
3351 mode_t touch_get_mode(const char *name, mode_t mode) {
3352   mode_t retval = 0;
3353   int fd = open(name, O_RDWR|O_CREAT|O_LARGEFILE, mode);
3354   if (-1 != fd) {
3355     unlink(name);
3356     struct stat statbuf;
3357     if (-1 != fstat(fd, &statbuf)) {
3358       retval = statbuf.st_mode & 0x1ff;
3359     }
3360     close(fd);
3361   }
3362   return retval;
3363 }
3364
3365 /* Try to detect problem discovered using sshfs */
3366 int test_umask(void) {
3367   printf("info: testing umask effect on file creation\n");
3368
3369   mode_t orig_umask = umask(000);
3370   mode_t newmode;
3371   if (0666 != (newmode = touch_get_mode("foobar", 0666))) {
3372     printf("  error: Wrong file mode %o when creating using mode 666 and umask 000\n",
3373            newmode);
3374   }
3375   umask(007);
3376   if (0660 != (newmode = touch_get_mode("foobar", 0666))) {
3377     printf("  error: Wrong file mode %o when creating using mode 666 and umask 007\n",
3378            newmode);
3379   }
3380
3381   umask (orig_umask);
3382   return 0;
3383 }
3384
3385 int main(int argc, char **argv) {
3386   [...]
3387   test_umask();
3388   return 0;
3389 }
3390 </pre>
3391
3392 <p>Sure enough.  On NFS to a netapp, I get this result:</p>
3393
3394 <pre>
3395 Testing POSIX/Unix sematics on file system
3396 info: testing symlink creation
3397 info: testing subdirectory creation
3398 info: testing fcntl locking
3399   Read-locking 1 byte from 1073741824
3400   Read-locking 510 byte from 1073741826
3401   Unlocking 1 byte from 1073741824
3402   Write-locking 1 byte from 1073741824
3403   Write-locking 510 byte from 1073741826
3404   Unlocking 2 byte from 1073741824
3405 info: testing umask effect on file creation
3406 </pre>
3407
3408 <p>When mounting the same directory using sshfs, I get this
3409 result:</p>
3410
3411 <pre>
3412 Testing POSIX/Unix sematics on file system
3413 info: testing symlink creation
3414 info: testing subdirectory creation
3415 info: testing fcntl locking
3416   Read-locking 1 byte from 1073741824
3417   Read-locking 510 byte from 1073741826
3418   Unlocking 1 byte from 1073741824
3419   Write-locking 1 byte from 1073741824
3420   Write-locking 510 byte from 1073741826
3421   Unlocking 2 byte from 1073741824
3422 info: testing umask effect on file creation
3423   error: Wrong file mode 644 when creating using mode 666 and umask 000
3424   error: Wrong file mode 640 when creating using mode 666 and umask 007
3425 </pre>
3426
3427 <p>So, I can conclude that sshfs is better than smb to a Netapp or a
3428 Windows server, but not good enough to be used as a home
3429 directory.</p>
3430
3431 <p>Update 2010-08-26: Reported the issue in
3432 <a href="http://bugs.debian.org/594498">BTS report #594498</a></p>
3433
3434 <p>Update 2010-08-27: Michael Gebetsroither report that he found the
3435 script so useful that he created a GIT repository and stored it in
3436 <a href="http://github.com/gebi/fs-test">http://github.com/gebi/fs-test</a>.</p>
3437
3438  </div>
3439  <div class="tags">
3440
3441
3442
3443   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
3444
3445  </div>
3446 </div>
3447 <div class="padding"></div>
3448
3449 <div class="entry">
3450  <div class="title">
3451  <a href="http://people.skolelinux.org/pere/blog/Skolelinux_i_Osloskolen.html">Skolelinux i Osloskolen</a>
3452  </div>
3453  <div class="date">
3454   2010-08-26 22:25
3455  </div>
3456
3457  <div class="body">
3458
3459 <p>Denne høsten skal endelig alle Osloskolene få mulighet til å bruke
3460 <a href="http://www.skolelinux.org/">Skolelinux</a>.  Ny IT-løsning
3461 har vært rullet ut i noen måneder nå, og så vidt jeg fikk vite før
3462 sommeren skulle alle skoler ha nytt opplegg på plass før oppstart nå i
3463 høst.  På alle skolene skal en kunne velge ved installasjon om en skal
3464 ha Windows eller Skolelinux på maskinene, og en kan i tillegg
3465 PXE-boote maskinene over nett som tynne klienter eller diskløse
3466 arbeidsstasjoner. Jeg er spent på hvor mange skoler som velger å ta i
3467 bruk Skolelinux, og gleder meg til å se hvordan dette utvikler seg.
3468 Løsningen leveres av
3469 <a href="http://www.logica.no/">Logica</a> med
3470 <a href="http://www.slxdrift.no/">Skolelinux Drift AS</a> som
3471 underleverandør, og jeg har vært involvert i utviklingen av løsningen
3472 via Skolelinux Drift AS siden prosjektet starter.  Jeg synes det er
3473 fantastisk at Skolelinux er kommet så langt siden vi startet i 2001 at
3474 alle elevene i Osloskolene nå skal få mulighet til å bruke
3475 løsningen.  Jeg håper de vil sette pris på alle de
3476 <a href="http://www.skolelinux.no/linux-signpost/">fantastiske
3477 brukerprogrammene</a> som er tilgjengelig i Skolelinux.</p>
3478
3479  </div>
3480  <div class="tags">
3481
3482
3483
3484   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
3485
3486  </div>
3487 </div>
3488 <div class="padding"></div>
3489
3490 <div class="entry">
3491  <div class="title">
3492  <a href="http://people.skolelinux.org/pere/blog/Broken_hard_link_handling_with_sshfs.html">Broken hard link handling with sshfs</a>
3493  </div>
3494  <div class="date">
3495   2010-08-30 19:30
3496  </div>
3497
3498  <div class="body">
3499
3500 <p>Just got an email from Tobias Gruetzmacher as a followup on my
3501 <a href="http://people.skolelinux.org/pere/blog/Broken_umask_handling_with_sshfs.html">previous
3502 post about sshfs</a>.  He reported another problem with sshfs.  It
3503 fail to handle hard links properly.  A simple way to spot this is to
3504 look at the . and .. entries in the directory tree.  These should have
3505 a link count >1, but on sshfs the count is 1.  I just tested to see
3506 what happen when trying to hardlink, and this fail as well:</p>
3507
3508 <pre>
3509 % ln foo bar
3510 ln: creating hard link `bar' => `foo': Function not implemented
3511 %
3512 </pre>
3513
3514 <p>I have not yet found time to implement a test for this in my file
3515 system test code, but believe having working hard links is useful to
3516 avoid surprised unix programs.  Not as useful as working file locking
3517 and symlinks, which are required to get a working desktop, but useful
3518 nevertheless. :)</p>
3519
3520 <p>The latest version of the file system test code is available via
3521 git from
3522 <a href="http://github.com/gebi/fs-test">http://github.com/gebi/fs-test</a></p>
3523
3524  </div>
3525  <div class="tags">
3526
3527
3528
3529   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
3530
3531  </div>
3532 </div>
3533 <div class="padding"></div>
3534
3535 <div class="entry">
3536  <div class="title">
3537  <a href="http://people.skolelinux.org/pere/blog/Some_notes_on_Flash_in_Debian_and_Debian_Edu.html">Some notes on Flash in Debian and Debian Edu</a>
3538  </div>
3539  <div class="date">
3540   2010-09-04 10:10
3541  </div>
3542
3543  <div class="body">
3544
3545 <p>In the <a href="http://popcon.debian.org/unknown/by_vote">Debian
3546 popularity-contest numbers</a>, the adobe-flashplugin package the
3547 second most popular used package that is missing in Debian.  The sixth
3548 most popular is flashplayer-mozilla.  This is a clear indication that
3549 working flash is important for Debian users.  Around 10 percent of the
3550 users submitting data to popcon.debian.org have this package
3551 installed.</p>
3552
3553 <p>In the report written by Lars Risan in August 2008
3554 («<a href="http://wiki.skolelinux.no/Dokumentasjon/Rapporter?action=AttachFile&do=view&target=Skolelinux_i_bruk_rapport_1.0.pdf">Skolelinux
3555 i bruk – Rapport for Hurum kommune, Universitetet i Agder og
3556 stiftelsen SLX Debian Labs</a>»), one of the most important problems
3557 schools experienced with <a href="http://www.skolelinux.org/">Debian
3558 Edu/Skolelinux</a> was the lack of working Flash.  A lot of educational
3559 web sites require Flash to work, and lacking working Flash support in
3560 the web browser and the problems with installing it was perceived as a
3561 good reason to stay with Windows.</p>
3562
3563 <p>I once saw a funny and sad comment in a web forum, where Linux was
3564 said to be the retarded cousin that did not really understand
3565 everything you told him but could work fairly well.  This was a
3566 comment regarding the problems Linux have with proprietary formats and
3567 non-standard web pages, and is sad because it exposes a fairly common
3568 understanding of whose fault it is if web pages that only work in for
3569 example Internet Explorer 6 fail to work on Firefox, and funny because
3570 it explain very well how annoying it is for users when Linux
3571 distributions do not work with the documents they receive or the web
3572 pages they want to visit.</p>
3573
3574 <p>This is part of the reason why I believe it is important for Debian
3575 and Debian Edu to have a well working Flash implementation in the
3576 distribution, to get at least popular sites as Youtube and Google
3577 Video to working out of the box.  For Squeeze, Debian have the chance
3578 to include the latest version of Gnash that will make this happen, as
3579 the new release 0.8.8 was published a few weeks ago and is resting in
3580 unstable.  The new version work with more sites that version 0.8.7.
3581 The Gnash maintainers have asked for a freeze exception, but the
3582 release team have not had time to reply to it yet.  I hope they agree
3583 with me that Flash is important for the Debian desktop users, and thus
3584 accept the new package into Squeeze.</p>
3585
3586  </div>
3587  <div class="tags">
3588
3589
3590
3591   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia</a>, <a href="http://people.skolelinux.org/pere/blog/tags/video">video</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web">web</a>.
3592
3593  </div>
3594 </div>
3595 <div class="padding"></div>
3596
3597 <div class="entry">
3598  <div class="title">
3599  <a href="http://people.skolelinux.org/pere/blog/Software_updates_2010_10_24.html">Software updates 2010-10-24</a>
3600  </div>
3601  <div class="date">
3602   2010-10-24 22:45
3603  </div>
3604
3605  <div class="body">
3606
3607 <p>Some updates.</p>
3608
3609 <p>My <a href="http://pledgebank.com/gnash-avm2">gnash pledge</a> to
3610 raise money for the project is going well.  The lower limit of 10
3611 signers was reached in 24 hours, and so far 13 people have signed it.
3612 More signers and more funding is most welcome, and I am really curious
3613 how far we can get before the time limit of December 24 is reached.
3614 :)</p>
3615
3616 <p>On the #gnash IRC channel on irc.freenode.net, I was just tipped
3617 about what appear to be a great code coverage tool capable of
3618 generating code coverage stats without any changes to the source code.
3619 It is called
3620 <a href="http://simonkagstrom.github.com/kcov/index.html">kcov</a>,
3621 and can be used using <tt>kcov &lt;directory&gt; &lt;binary&gt;</tt>.
3622 It is missing in Debian, but the git source built just fine in Squeeze
3623 after I installed libelf-dev, libdwarf-dev, pkg-config and
3624 libglib2.0-dev.  Failed to build in Lenny, but suspect that is
3625 solvable.  I hope kcov make it into Debian soon.</p>
3626
3627 <p>Finally found time to wrap up the release notes for <a
3628 href="http://lists.debian.org/debian-edu-announce/2010/10/msg00002.html">a
3629 new alpha release of Debian Edu</a>, and just published the second
3630 alpha test release of the Squeeze based Debian Edu /
3631 <a href="http://www.skolelinux.org/">Skolelinux</a>
3632 release.  Give it a try if you need a complete linux solution for your
3633 school, including central infrastructure server, workstations, thin
3634 client servers and diskless workstations.  A nice touch added
3635 yesterday is RDP support on the thin client servers, for windows
3636 clients to get a Linux desktop on request.</p>
3637
3638  </div>
3639  <div class="tags">
3640
3641
3642
3643   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia</a>.
3644
3645  </div>
3646 </div>
3647 <div class="padding"></div>
3648
3649 <div class="entry">
3650  <div class="title">
3651  <a href="http://people.skolelinux.org/pere/blog/Making_room_on_the_Debian_Edu_Sqeeze_DVD.html">Making room on the Debian Edu/Sqeeze DVD</a>
3652  </div>
3653  <div class="date">
3654   2010-11-07 11:45
3655  </div>
3656
3657  <div class="body">
3658
3659 <p>Prioritising packages for the Debian Edu /
3660 <a href="http://www.skolelinux.org/">Skolelinux</a> DVD, which is
3661 supposed provide a school with all the services and user applications
3662 needed on the pupils computer network has always been hard.  Even
3663 schools without Internet connections should be able to get Debian Edu
3664 working using this DVD.</p>
3665
3666 <p>The job became a lot harder when apt and aptitude started
3667 installing recommended packages by default.  We want the same set of
3668 packages to be installed when using the DVD and the netinst CD, and
3669 that means all recommended packages need to be on the DVD.  I created
3670 a patch for debian-cd in <a href="http://bugs.debian.org/601203">BTS
3671 report #601203</a> to do this, and since this change was applied to
3672 the Debian Edu DVD build, we have been seriously short on space.</p>
3673
3674 <p>A few days ago we decided to drop blender, wxmaxima and kicad from
3675 the default installation to save space on the DVD, believing that
3676 those needing these applications are few and can get them from the
3677 Debian archive.</p>
3678
3679 <p>Yesterday, I had a look what source packages to see which packages
3680 were using most space.  A few large packages are well know;
3681 openoffice.org, openclipart and fluid-soundfont.  But I also
3682 discovered that lilypond used 106 MiB and fglrx-driver used 53 MiB.
3683 The lilypond package is pulled in as a dependency for rosegarden, and
3684 when looking a bit closer I discovered that 99 MiB of the 106 MiB were
3685 the documentation package, which is recommended by the binary package.
3686 I decided to drop this documentation package from our DVD, as most of
3687 our users will use the GUI front-ends and do not need the lilypond
3688 documentation.  Similarly, I dropped the non-free fglrx-driver package
3689 which might be installed by d-i when its hardware is detected, as the
3690 free X driver should work.</p>
3691
3692 <p>With this change, we finally got space for the LXDE and Gnome
3693 desktop packages as well as the language specific packages making the
3694 DVD more useful again.</p>
3695
3696  </div>
3697  <div class="tags">
3698
3699
3700
3701   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
3702
3703  </div>
3704 </div>
3705 <div class="padding"></div>
3706
3707 <div class="entry">
3708  <div class="title">
3709  <a href="http://people.skolelinux.org/pere/blog/Gnash_buildbot_slave_and_Debian_kfreebsd.html">Gnash buildbot slave and Debian kfreebsd</a>
3710  </div>
3711  <div class="date">
3712   2010-11-20 07:20
3713  </div>
3714
3715  <div class="body">
3716
3717 <p>Answering
3718 <a href="http://www.listware.net/201011/gnash-dev/67431-gnash-dev-buildbot-looking-for-slaves.html">the
3719 call from the Gnash project</a> for
3720 <a href="http://www.gnashdev.org:8010">buildbot</a> slaves to test the
3721 current source, I have set up a virtual KVM machine on the Debian
3722 Edu/Skolelinux virtualization host to test the git source on
3723 Debian/Squeeze.  I hope this can help the developers in getting new
3724 releases out more often.</p>
3725
3726 <p>As the developers want less main-stream build platforms tested to,
3727 I have considered setting up a <a
3728 href="http://www.debian.org/ports/kfreebsd-gnu/">Debian/kfreebsd</a>
3729 machine as well.  I have also considered using the kfreebsd
3730 architecture in Debian as a file server in NUUG to get access to the 5
3731 TB zfs volume we currently use to store DV video.  Because of this, I
3732 finally got around to do a test installation of Debian/Squeeze with
3733 kfreebsd.  Installation went fairly smooth, thought I noticed some
3734 visual glitches in the cdebconf dialogs (black cursor left on the
3735 screen at random locations).  Have not gotten very far with the
3736 testing.  Noticed cfdisk did not work, but fdisk did so it was not a
3737 fatal problem.  Have to spend some more time on it to see if it is
3738 useful as a file server for NUUG.  Will try to find time to set up a
3739 gnash buildbot slave on the Debian Edu/Skolelinux this weekend.</p>
3740
3741  </div>
3742  <div class="tags">
3743
3744
3745
3746   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
3747
3748  </div>
3749 </div>
3750 <div class="padding"></div>
3751
3752 <div class="entry">
3753  <div class="title">
3754  <a href="http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__apt_vs_aptitude_with_the_Gnome_and_KDE_desktop.html">Lenny->Squeeze upgrades, apt vs aptitude with the Gnome and KDE desktop</a>
3755  </div>
3756  <div class="date">
3757   2010-11-20 22:50
3758  </div>
3759
3760  <div class="body">
3761
3762 <p>I'm still running upgrade testing of the
3763 <a href="http://people.skolelinux.org/~pere/debian-upgrade-testing/">Lenny
3764 Gnome and KDE Desktop</a>, but have not had time to spend on reporting the
3765 status.  Here is a short update based on a test I ran 20101118.</p>
3766
3767 <p>I still do not know what a correct migration should look like, so I
3768 report any differences between apt and aptitude and hope someone else
3769 can see if anything should be changed.</p>
3770
3771 <p>This is for Gnome:</p>
3772
3773 <p>Installed using apt-get, missing with aptitude</p>
3774
3775 <blockquote><p>
3776   apache2.2-bin aptdaemon at-spi baobab binfmt-support
3777   browser-plugin-gnash cheese-common cli-common cpp-4.3 cups-pk-helper
3778   dmz-cursor-theme empathy empathy-common finger
3779   freedesktop-sound-theme freeglut3 gconf-defaults-service gdm-themes
3780   gedit-plugins geoclue geoclue-hostip geoclue-localnet geoclue-manual
3781   geoclue-yahoo gnash gnash-common gnome gnome-backgrounds
3782   gnome-cards-data gnome-codec-install gnome-core
3783   gnome-desktop-environment gnome-disk-utility gnome-screenshot
3784   gnome-search-tool gnome-session-canberra gnome-spell
3785   gnome-system-log gnome-themes-extras gnome-themes-more
3786   gnome-user-share gs-common gstreamer0.10-fluendo-mp3
3787   gstreamer0.10-tools gtk2-engines gtk2-engines-pixbuf
3788   gtk2-engines-smooth hal-info hamster-applet libapache2-mod-dnssd
3789   libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap
3790   libart2.0-cil libatspi1.0-0 libboost-date-time1.42.0
3791   libboost-python1.42.0 libboost-thread1.42.0 libchamplain-0.4-0
3792   libchamplain-gtk-0.4-0 libcheese-gtk18 libclutter-gtk-0.10-0
3793   libcryptui0 libcupsys2 libdiscid0 libeel2-data libelf1 libepc-1.0-2
3794   libepc-common libepc-ui-1.0-2 libfreerdp-plugins-standard
3795   libfreerdp0 libgail-common libgconf2.0-cil libgdata-common libgdata7
3796   libgdl-1-common libgdu-gtk0 libgee2 libgeoclue0 libgexiv2-0 libgif4
3797   libglade2.0-cil libglib2.0-cil libgmime2.4-cil libgnome-vfs2.0-cil
3798   libgnome2.24-cil libgnomepanel2.24-cil libgnomeprint2.2-data
3799   libgnomeprintui2.2-common libgnomevfs2-bin libgpod-common libgpod4
3800   libgtk2.0-cil libgtkglext1 libgtksourceview-common
3801   libgtksourceview2.0-common libmono-addins-gui0.2-cil
3802   libmono-addins0.2-cil libmono-cairo2.0-cil libmono-corlib2.0-cil
3803   libmono-i18n-west2.0-cil libmono-posix2.0-cil
3804   libmono-security2.0-cil libmono-sharpzip2.84-cil
3805   libmono-system2.0-cil libmtp8 libmusicbrainz3-6
3806   libndesk-dbus-glib1.0-cil libndesk-dbus1.0-cil libopal3.6.8
3807   libpolkit-gtk-1-0 libpt-1.10.10-plugins-alsa
3808   libpt-1.10.10-plugins-v4l libpt2.6.7 libpython2.6 librpm1 librpmio1
3809   libsdl1.2debian libservlet2.4-java libsrtp0 libssh-4
3810   libtelepathy-farsight0 libtelepathy-glib0 libtidy-0.99-0
3811   libxalan2-java libxerces2-java media-player-info mesa-utils
3812   mono-2.0-gac mono-gac mono-runtime nautilus-sendto
3813   nautilus-sendto-empathy openoffice.org-writer2latex
3814   openssl-blacklist p7zip p7zip-full pkg-config python-4suite-xml
3815   python-aptdaemon python-aptdaemon-gtk python-axiom
3816   python-beautifulsoup python-bugbuddy python-clientform
3817   python-coherence python-configobj python-crypto python-cupshelpers
3818   python-cupsutils python-eggtrayicon python-elementtree
3819   python-epsilon python-evolution python-feedparser python-gdata
3820   python-gdbm python-gst0.10 python-gtkglext1 python-gtkmozembed
3821   python-gtksourceview2 python-httplib2 python-louie python-mako
3822   python-markupsafe python-mechanize python-nevow python-notify
3823   python-opengl python-openssl python-pam python-pkg-resources
3824   python-pyasn1 python-pysqlite2 python-rdflib python-serial
3825   python-tagpy python-twisted-bin python-twisted-conch
3826   python-twisted-core python-twisted-web python-utidylib python-webkit
3827   python-xdg python-zope.interface remmina remmina-plugin-data
3828   remmina-plugin-rdp remmina-plugin-vnc rhythmbox-plugin-cdrecorder
3829   rhythmbox-plugins rpm-common rpm2cpio seahorse-plugins shotwell
3830   software-center svgalibg1 system-config-printer-udev
3831   telepathy-gabble telepathy-mission-control-5 telepathy-salut tomboy
3832   totem totem-coherence totem-mozilla totem-plugins
3833   transmission-common xdg-user-dirs xdg-user-dirs-gtk xserver-xephyr
3834   zip
3835 </p></blockquote>
3836
3837 Installed using apt-get, removed with aptitude
3838
3839 <blockquote><p>
3840   arj bluez-utils cheese dhcdbd djvulibre-desktop ekiga eog
3841   epiphany-extensions epiphany-gecko evolution-exchange
3842   fast-user-switch-applet file-roller gcalctool gconf-editor gdm gedit
3843   gedit-common gnome-app-install gnome-games gnome-games-data
3844   gnome-nettool gnome-system-tools gnome-themes gnome-utils
3845   gnome-vfs-obexftp gnome-volume-manager gnuchess gucharmap
3846   guile-1.8-libs hal libavahi-compat-libdnssd1 libavahi-core5
3847   libavahi-ui0 libbind9-50 libbluetooth2 libcamel1.2-11 libcdio7
3848   libcucul0 libcurl3 libdirectfb-1.0-0 libdmx1 libdvdread3
3849   libedata-cal1.2-6 libedataserver1.2-9 libeel2-2.20 libepc-1.0-1
3850   libepc-ui-1.0-1 libexchange-storage1.2-3 libfaad0 libgadu3
3851   libgalago3 libgd2-noxpm libgda3-3 libgda3-common libggz2 libggzcore9
3852   libggzmod4 libgksu1.2-0 libgksuui1.0-1 libgmyth0 libgnome-desktop-2
3853   libgnome-pilot2 libgnomecups1.0-1 libgnomeprint2.2-0
3854   libgnomeprintui2.2-0 libgpod3 libgraphviz4 libgtk-vnc-1.0-0
3855   libgtkhtml2-0 libgtksourceview1.0-0 libgtksourceview2.0-0
3856   libgucharmap6 libhesiod0 libicu38 libisccc50 libisccfg50 libiw29
3857   libjaxp1.3-java-gcj libkpathsea4 liblircclient0 libltdl3 liblwres50
3858   libmagick++10 libmagick10 libmalaga7 libmozjs1d libmpfr1ldbl libmtp7
3859   libmysqlclient15off libnautilus-burn4 libneon27 libnm-glib0
3860   libnm-util0 libopal-2.2 libosp5 libparted1.8-10 libpisock9
3861   libpisync1 libpoppler-glib3 libpoppler3 libpt-1.10.10 libraw1394-8
3862   libsdl1.2debian-alsa libsensors3 libsexy2 libsmbios2 libsoup2.2-8
3863   libspeexdsp1 libssh2-1 libsuitesparse-3.1.0 libsvga1
3864   libswfdec-0.6-90 libtalloc1 libtotem-plparser10 libtrackerclient0
3865   libvoikko1 libxalan2-java-gcj libxerces2-java-gcj libxklavier12
3866   libxtrap6 libxxf86misc1 libzephyr3 mysql-common rhythmbox seahorse
3867   sound-juicer swfdec-gnome system-config-printer totem-common
3868   totem-gstreamer transmission-gtk vinagre vino w3c-dtd-xhtml wodim
3869 </p></blockquote>
3870
3871 <p>Installed using aptitude, missing with apt-get</p>
3872
3873 <blockquote><p>
3874   gstreamer0.10-gnomevfs
3875 </p></blockquote>
3876
3877 <p>Installed using aptitude, removed with apt-get</p>
3878
3879 <blockquote><p>
3880 [nothing]
3881 </p></blockquote>
3882
3883 <p>This is for KDE:</p>
3884
3885 <p>Installed using apt-get, missing with aptitude</p>
3886
3887 <blockquote><p>
3888   autopoint bomber bovo cantor cantor-backend-kalgebra cpp-4.3 dcoprss
3889   edict espeak espeak-data eyesapplet fifteenapplet finger gettext
3890   ghostscript-x git gnome-audio gnugo granatier gs-common
3891   gstreamer0.10-pulseaudio indi kaddressbook-plugins kalgebra
3892   kalzium-data kanjidic kapman kate-plugins kblocks kbreakout kbstate
3893   kde-icons-mono kdeaccessibility kdeaddons-kfile-plugins
3894   kdeadmin-kfile-plugins kdeartwork-misc kdeartwork-theme-window
3895   kdeedu kdeedu-data kdeedu-kvtml-data kdegames kdegames-card-data
3896   kdegames-mahjongg-data kdegraphics-kfile-plugins kdelirc
3897   kdemultimedia-kfile-plugins kdenetwork-kfile-plugins
3898   kdepim-kfile-plugins kdepim-kio-plugins kdessh kdetoys kdewebdev
3899   kdiamond kdnssd kfilereplace kfourinline kgeography-data kigo
3900   killbots kiriki klettres-data kmoon kmrml knewsticker-scripts
3901   kollision kpf krosspython ksirk ksmserver ksquares kstars-data
3902   ksudoku kubrick kweather libasound2-plugins libboost-python1.42.0
3903   libcfitsio3 libconvert-binhex-perl libcrypt-ssleay-perl libdb4.6++
3904   libdjvulibre-text libdotconf1.0 liberror-perl libespeak1
3905   libfinance-quote-perl libgail-common libgsl0ldbl libhtml-parser-perl
3906   libhtml-tableextract-perl libhtml-tagset-perl libhtml-tree-perl
3907   libio-stringy-perl libkdeedu4 libkdegames5 libkiten4 libkpathsea5
3908   libkrossui4 libmailtools-perl libmime-tools-perl
3909   libnews-nntpclient-perl libopenbabel3 libportaudio2 libpulse-browse0
3910   libservlet2.4-java libspeechd2 libtiff-tools libtimedate-perl
3911   libunistring0 liburi-perl libwww-perl libxalan2-java libxerces2-java
3912   lirc luatex marble networkstatus noatun-plugins
3913   openoffice.org-writer2latex palapeli palapeli-data parley
3914   parley-data poster psutils pulseaudio pulseaudio-esound-compat
3915   pulseaudio-module-x11 pulseaudio-utils quanta-data rocs rsync
3916   speech-dispatcher step svgalibg1 texlive-binaries texlive-luatex
3917   ttf-sazanami-gothic
3918 </p></blockquote>
3919
3920 <p>Installed using apt-get, removed with aptitude</p>
3921
3922 <blockquote><p>
3923   amor artsbuilder atlantik atlantikdesigner blinken bluez-utils cvs
3924   dhcdbd djvulibre-desktop imlib-base imlib11 kalzium kanagram kandy
3925   kasteroids katomic kbackgammon kbattleship kblackbox kbounce kbruch
3926   kcron kdat kdemultimedia-kappfinder-data kdeprint kdict kdvi kedit
3927   keduca kenolaba kfax kfaxview kfouleggs kgeography kghostview
3928   kgoldrunner khangman khexedit kiconedit kig kimagemapeditor
3929   kitchensync kiten kjumpingcube klatin klettres klickety klines
3930   klinkstatus kmag kmahjongg kmailcvt kmenuedit kmid kmilo kmines
3931   kmousetool kmouth kmplot knetwalk kodo kolf kommander konquest kooka
3932   kpager kpat kpdf kpercentage kpilot kpoker kpovmodeler krec
3933   kregexpeditor kreversi ksame ksayit kshisen ksig ksim ksirc ksirtet
3934   ksmiletris ksnake ksokoban kspaceduel kstars ksvg ksysv kteatime
3935   ktip ktnef ktouch ktron kttsd ktuberling kturtle ktux kuickshow
3936   kverbos kview kviewshell kvoctrain kwifimanager kwin kwin4 kwordquiz
3937   kworldclock kxsldbg libakode2 libarts1-akode libarts1-audiofile
3938   libarts1-mpeglib libarts1-xine libavahi-compat-libdnssd1
3939   libavahi-core5 libavc1394-0 libbind9-50 libbluetooth2
3940   libboost-python1.34.1 libcucul0 libcurl3 libcvsservice0
3941   libdirectfb-1.0-0 libdjvulibre21 libdvdread3 libfaad0 libfreebob0
3942   libgd2-noxpm libgraphviz4 libgsmme1c2a libgtkhtml2-0 libicu38
3943   libiec61883-0 libindex0 libisccc50 libisccfg50 libiw29
3944   libjaxp1.3-java-gcj libk3b3 libkcal2b libkcddb1 libkdeedu3
3945   libkdegames1 libkdepim1a libkgantt0 libkleopatra1 libkmime2
3946   libkpathsea4 libkpimexchange1 libkpimidentities1 libkscan1
3947   libksieve0 libktnef1 liblockdev1 libltdl3 liblwres50 libmagick10
3948   libmimelib1c2a libmodplug0c2 libmozjs1d libmpcdec3 libmpfr1ldbl
3949   libneon27 libnm-util0 libopensync0 libpisock9 libpoppler-glib3
3950   libpoppler-qt2 libpoppler3 libraw1394-8 librss1 libsensors3
3951   libsmbios2 libssh2-1 libsuitesparse-3.1.0 libswfdec-0.6-90
3952   libtalloc1 libxalan2-java-gcj libxerces2-java-gcj libxtrap6 lskat
3953   mpeglib network-manager-kde noatun pmount tex-common texlive-base
3954   texlive-common texlive-doc-base texlive-fonts-recommended tidy
3955   ttf-dustin ttf-kochi-gothic ttf-sjfonts
3956 </p></blockquote>
3957
3958 <p>Installed using aptitude, missing with apt-get</p>
3959
3960 <blockquote><p>
3961   dolphin kde-core kde-plasma-desktop kde-standard kde-window-manager
3962   kdeartwork kdebase kdebase-apps kdebase-workspace
3963   kdebase-workspace-bin kdebase-workspace-data kdeutils kscreensaver
3964   kscreensaver-xsavers libgle3 libkonq5 libkonq5-templates libnetpbm10
3965   netpbm plasma-widget-folderview plasma-widget-networkmanagement
3966   xscreensaver-data-extra xscreensaver-gl xscreensaver-gl-extra
3967   xscreensaver-screensaver-bsod
3968 </p></blockquote>
3969
3970 <p>Installed using aptitude, removed with apt-get</p>
3971
3972 <blockquote><p>
3973   kdebase-bin konq-plugins konqueror
3974 </p></blockquote>
3975
3976  </div>
3977  <div class="tags">
3978
3979
3980
3981   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
3982
3983  </div>
3984 </div>
3985 <div class="padding"></div>
3986
3987 <div class="entry">
3988  <div class="title">
3989  <a href="http://people.skolelinux.org/pere/blog/Migrating_Xen_virtual_machines_using_LVM_to_KVM_using_disk_images.html">Migrating Xen virtual machines using LVM to KVM using disk images</a>
3990  </div>
3991  <div class="date">
3992   2010-11-22 11:20
3993  </div>
3994
3995  <div class="body">
3996
3997 <p>Most of the computers in use by the
3998 <a href="http://www.skolelinux.org/">Debian Edu/Skolelinux project</a>
3999 are virtual machines.  And they have been Xen machines running on a
4000 fairly old IBM eserver xseries 345 machine, and we wanted to migrate
4001 them to KVM on a newer Dell PowerEdge 2950 host machine.  This was a
4002 bit harder that it could have been, because we set up the Xen virtual
4003 machines to get the virtual partitions from LVM, which as far as I
4004 know is not supported by KVM.  So to migrate, we had to convert
4005 several LVM logical volumes to partitions on a virtual disk file.</p>
4006
4007 <p>I found
4008 <a href="http://searchnetworking.techtarget.com.au/articles/35011-Six-steps-for-migrating-Xen-virtual-machines-to-KVM">a
4009 nice recipe</a> to do this, and wrote the following script to do the
4010 migration.  It uses qemu-img from the qemu package to make the disk
4011 image, parted to partition it, losetup and kpartx to present the disk
4012 image partions as devices, and dd to copy the data.  I NFS mounted the
4013 new servers storage area on the old server to do the migration.</p>
4014
4015 <pre>
4016 #!/bin/sh
4017
4018 # Based on
4019 # http://searchnetworking.techtarget.com.au/articles/35011-Six-steps-for-migrating-Xen-virtual-machines-to-KVM
4020
4021 set -e
4022 set -x
4023
4024 if [ -z "$1" ] ; then
4025     echo "Usage: $0 &lt;hostname&gt;"
4026     exit 1
4027 else
4028     host="$1"
4029 fi
4030
4031 if [ ! -e /dev/vg_data/$host-disk ] ; then
4032     echo "error: unable to find LVM volume for $host"
4033     exit 1
4034 fi
4035
4036 # Partitions need to be a bit bigger than the LVM LVs.  not sure why.
4037 disksize=$( lvs --units m | grep $host-disk | awk '{sum = sum + $4} END { print int(sum * 1.05) }')
4038 swapsize=$( lvs --units m | grep $host-swap | awk '{sum = sum + $4} END { print int(sum * 1.05) }')
4039 totalsize=$(( ( $disksize + $swapsize ) ))
4040
4041 img=$host.img
4042 #dd if=/dev/zero of=$img bs=1M count=$(( $disksize + $swapsize ))
4043 qemu-img create $img ${totalsize}MMaking room on the Debian Edu/Sqeeze DVD
4044
4045 parted $img mklabel msdos
4046 parted $img mkpart primary linux-swap 0 $disksize
4047 parted $img mkpart primary ext2 $disksize $totalsize
4048 parted $img set 1 boot on
4049
4050 modprobe dm-mod
4051 losetup /dev/loop0 $img
4052 kpartx -a /dev/loop0
4053
4054 dd if=/dev/vg_data/$host-disk of=/dev/mapper/loop0p1 bs=1M
4055 fsck.ext3 -f /dev/mapper/loop0p1 || true
4056 mkswap /dev/mapper/loop0p2
4057
4058 kpartx -d /dev/loop0
4059 losetup -d /dev/loop0
4060 </pre>
4061
4062 <p>The script is perhaps so simple that it is not copyrightable, but
4063 if it is, it is licenced using GPL v2 or later at your discretion.</p>
4064
4065 <p>After doing this, I booted a Debian CD in rescue mode in KVM with
4066 the new disk image attached, installed grub-pc and linux-image-686 and
4067 set up grub to boot from the disk image.  After this, the KVM machines
4068 seem to work just fine.</p>
4069
4070  </div>
4071  <div class="tags">
4072
4073
4074
4075   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
4076
4077  </div>
4078 </div>
4079 <div class="padding"></div>
4080
4081 <div class="entry">
4082  <div class="title">
4083  <a href="http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades_of_the_Gnome_and_KDE_desktop__now_with_apt_get_autoremove.html">Lenny->Squeeze upgrades of the Gnome and KDE desktop, now with apt-get autoremove</a>
4084  </div>
4085  <div class="date">
4086   2010-11-22 14:15
4087  </div>
4088
4089  <div class="body">
4090
4091 <p>Michael Biebl suggested to me on IRC, that I changed my automated
4092 upgrade testing of the
4093 <a href="http://people.skolelinux.org/~pere/debian-upgrade-testing/">Lenny
4094 Gnome and KDE Desktop</a> to do <tt>apt-get autoremove</tt> when using apt-get.
4095 This seem like a very good idea, so I adjusted by test scripts and
4096 can now present the updated result from today:</p>
4097
4098 <p>This is for Gnome:</p>
4099
4100 <p>Installed using apt-get, missing with aptitude</p>
4101
4102 <blockquote><p>
4103   apache2.2-bin
4104   aptdaemon
4105   baobab
4106   binfmt-support
4107   browser-plugin-gnash
4108   cheese-common
4109   cli-common
4110   cups-pk-helper
4111   dmz-cursor-theme
4112   empathy
4113   empathy-common
4114   freedesktop-sound-theme
4115   freeglut3
4116   gconf-defaults-service
4117   gdm-themes
4118   gedit-plugins
4119   geoclue
4120   geoclue-hostip
4121   geoclue-localnet
4122   geoclue-manual
4123   geoclue-yahoo
4124   gnash
4125   gnash-common
4126   gnome
4127   gnome-backgrounds
4128   gnome-cards-data
4129   gnome-codec-install
4130   gnome-core
4131   gnome-desktop-environment
4132   gnome-disk-utility
4133   gnome-screenshot
4134   gnome-search-tool
4135   gnome-session-canberra
4136   gnome-system-log
4137   gnome-themes-extras
4138   gnome-themes-more
4139   gnome-user-share
4140   gstreamer0.10-fluendo-mp3
4141   gstreamer0.10-tools
4142   gtk2-engines
4143   gtk2-engines-pixbuf
4144   gtk2-engines-smooth
4145   hamster-applet
4146   libapache2-mod-dnssd
4147   libapr1
4148   libaprutil1
4149   libaprutil1-dbd-sqlite3
4150   libaprutil1-ldap
4151   libart2.0-cil
4152   libboost-date-time1.42.0
4153   libboost-python1.42.0
4154   libboost-thread1.42.0
4155   libchamplain-0.4-0
4156   libchamplain-gtk-0.4-0
4157   libcheese-gtk18
4158   libclutter-gtk-0.10-0
4159   libcryptui0
4160   libdiscid0
4161   libelf1
4162   libepc-1.0-2
4163   libepc-common
4164   libepc-ui-1.0-2
4165   libfreerdp-plugins-standard
4166   libfreerdp0
4167   libgconf2.0-cil
4168   libgdata-common
4169   libgdata7
4170   libgdu-gtk0
4171   libgee2
4172   libgeoclue0
4173   libgexiv2-0
4174   libgif4
4175   libglade2.0-cil
4176   libglib2.0-cil
4177   libgmime2.4-cil
4178   libgnome-vfs2.0-cil
4179   libgnome2.24-cil
4180   libgnomepanel2.24-cil
4181   libgpod-common
4182   libgpod4
4183   libgtk2.0-cil
4184   libgtkglext1
4185   libgtksourceview2.0-common
4186   libmono-addins-gui0.2-cil
4187   libmono-addins0.2-cil
4188   libmono-cairo2.0-cil
4189   libmono-corlib2.0-cil
4190   libmono-i18n-west2.0-cil
4191   libmono-posix2.0-cil
4192   libmono-security2.0-cil
4193   libmono-sharpzip2.84-cil
4194   libmono-system2.0-cil
4195   libmtp8
4196   libmusicbrainz3-6
4197   libndesk-dbus-glib1.0-cil
4198   libndesk-dbus1.0-cil
4199   libopal3.6.8
4200   libpolkit-gtk-1-0
4201   libpt2.6.7
4202   libpython2.6
4203   librpm1
4204   librpmio1
4205   libsdl1.2debian
4206   libsrtp0
4207   libssh-4
4208   libtelepathy-farsight0
4209   libtelepathy-glib0
4210   libtidy-0.99-0
4211   media-player-info
4212   mesa-utils
4213   mono-2.0-gac
4214   mono-gac
4215   mono-runtime
4216   nautilus-sendto
4217   nautilus-sendto-empathy
4218   p7zip-full
4219   pkg-config
4220   python-aptdaemon
4221   python-aptdaemon-gtk
4222   python-axiom
4223   python-beautifulsoup
4224   python-bugbuddy
4225   python-clientform
4226   python-coherence
4227   python-configobj
4228   python-crypto
4229   python-cupshelpers
4230   python-elementtree
4231   python-epsilon
4232   python-evolution
4233   python-feedparser
4234   python-gdata
4235   python-gdbm
4236   python-gst0.10
4237   python-gtkglext1
4238   python-gtksourceview2
4239   python-httplib2
4240   python-louie
4241   python-mako
4242   python-markupsafe
4243   python-mechanize
4244   python-nevow
4245   python-notify
4246   python-opengl
4247   python-openssl
4248   python-pam
4249   python-pkg-resources
4250   python-pyasn1
4251   python-pysqlite2
4252   python-rdflib
4253   python-serial
4254   python-tagpy
4255   python-twisted-bin
4256   python-twisted-conch
4257   python-twisted-core
4258   python-twisted-web
4259   python-utidylib
4260   python-webkit
4261   python-xdg
4262   python-zope.interface
4263   remmina
4264   remmina-plugin-data
4265   remmina-plugin-rdp
4266   remmina-plugin-vnc
4267   rhythmbox-plugin-cdrecorder
4268   rhythmbox-plugins
4269   rpm-common
4270   rpm2cpio
4271   seahorse-plugins
4272   shotwell
4273   software-center
4274   system-config-printer-udev
4275   telepathy-gabble
4276   telepathy-mission-control-5
4277   telepathy-salut
4278   tomboy
4279   totem
4280   totem-coherence
4281   totem-mozilla
4282   totem-plugins
4283   transmission-common
4284   xdg-user-dirs
4285   xdg-user-dirs-gtk
4286   xserver-xephyr
4287 </p></blockquote>
4288
4289 <p>Installed using apt-get, removed with aptitude</p>
4290
4291 <blockquote><p>
4292   cheese
4293   ekiga
4294   eog
4295   epiphany-extensions
4296   evolution-exchange
4297   fast-user-switch-applet
4298   file-roller
4299   gcalctool
4300   gconf-editor
4301   gdm
4302   gedit
4303   gedit-common
4304   gnome-games
4305   gnome-games-data
4306   gnome-nettool
4307   gnome-system-tools
4308   gnome-themes
4309   gnuchess
4310   gucharmap
4311   guile-1.8-libs
4312   libavahi-ui0
4313   libdmx1
4314   libgalago3
4315   libgtk-vnc-1.0-0
4316   libgtksourceview2.0-0
4317   liblircclient0
4318   libsdl1.2debian-alsa
4319   libspeexdsp1
4320   libsvga1
4321   rhythmbox
4322   seahorse
4323   sound-juicer
4324   system-config-printer
4325   totem-common
4326   transmission-gtk
4327   vinagre
4328   vino
4329 </p></blockquote>
4330
4331 <p>Installed using aptitude, missing with apt-get</p>
4332
4333 <blockquote><p>
4334   gstreamer0.10-gnomevfs
4335 </p></blockquote>
4336
4337 <p>Installed using aptitude, removed with apt-get</p>
4338
4339 <blockquote><p>
4340 [nothing]
4341 </p></blockquote>
4342
4343 <p>This is for KDE:</p>
4344
4345 <p>Installed using apt-get, missing with aptitude</p>
4346
4347 <blockquote><p>
4348   ksmserver
4349 </p></blockquote>
4350
4351 <p>Installed using apt-get, removed with aptitude</p>
4352
4353 <blockquote><p>
4354   kwin
4355   network-manager-kde
4356 </p></blockquote>
4357
4358 <p>Installed using aptitude, missing with apt-get</p>
4359
4360 <blockquote><p>
4361   arts
4362   dolphin
4363   freespacenotifier
4364   google-gadgets-gst
4365   google-gadgets-xul
4366   kappfinder
4367   kcalc
4368   kcharselect
4369   kde-core
4370   kde-plasma-desktop
4371   kde-standard
4372   kde-window-manager
4373   kdeartwork
4374   kdeartwork-emoticons
4375   kdeartwork-style
4376   kdeartwork-theme-icon
4377   kdebase
4378   kdebase-apps
4379   kdebase-workspace
4380   kdebase-workspace-bin
4381   kdebase-workspace-data
4382   kdeeject
4383   kdelibs
4384   kdeplasma-addons
4385   kdeutils
4386   kdewallpapers
4387   kdf
4388   kfloppy
4389   kgpg
4390   khelpcenter4
4391   kinfocenter
4392   konq-plugins-l10n
4393   konqueror-nsplugins
4394   kscreensaver
4395   kscreensaver-xsavers
4396   ktimer
4397   kwrite
4398   libgle3
4399   libkde4-ruby1.8
4400   libkonq5
4401   libkonq5-templates
4402   libnetpbm10
4403   libplasma-ruby
4404   libplasma-ruby1.8
4405   libqt4-ruby1.8
4406   marble-data
4407   marble-plugins
4408   netpbm
4409   nuvola-icon-theme
4410   plasma-dataengines-workspace
4411   plasma-desktop
4412   plasma-desktopthemes-artwork
4413   plasma-runners-addons
4414   plasma-scriptengine-googlegadgets
4415   plasma-scriptengine-python
4416   plasma-scriptengine-qedje
4417   plasma-scriptengine-ruby
4418   plasma-scriptengine-webkit
4419   plasma-scriptengines
4420   plasma-wallpapers-addons
4421   plasma-widget-folderview
4422   plasma-widget-networkmanagement
4423   ruby
4424   sweeper
4425   update-notifier-kde
4426   xscreensaver-data-extra
4427   xscreensaver-gl
4428   xscreensaver-gl-extra
4429   xscreensaver-screensaver-bsod
4430 </p></blockquote>
4431
4432 <p>Installed using aptitude, removed with apt-get</p>
4433
4434 <blockquote><p>
4435   ark
4436   google-gadgets-common
4437   google-gadgets-qt
4438   htdig
4439   kate
4440   kdebase-bin
4441   kdebase-data
4442   kdepasswd
4443   kfind
4444   klipper
4445   konq-plugins
4446   konqueror
4447   ksysguard
4448   ksysguardd
4449   libarchive1
4450   libcln6
4451   libeet1
4452   libeina-svn-06
4453   libggadget-1.0-0b
4454   libggadget-qt-1.0-0b
4455   libgps19
4456   libkdecorations4
4457   libkephal4
4458   libkonq4
4459   libkonqsidebarplugin4a
4460   libkscreensaver5
4461   libksgrd4
4462   libksignalplotter4
4463   libkunitconversion4
4464   libkwineffects1a
4465   libmarblewidget4
4466   libntrack-qt4-1
4467   libntrack0
4468   libplasma-geolocation-interface4
4469   libplasmaclock4a
4470   libplasmagenericshell4
4471   libprocesscore4a
4472   libprocessui4a
4473   libqalculate5
4474   libqedje0a
4475   libqtruby4shared2
4476   libqzion0a
4477   libruby1.8
4478   libscim8c2a
4479   libsmokekdecore4-3
4480   libsmokekdeui4-3
4481   libsmokekfile3
4482   libsmokekhtml3
4483   libsmokekio3
4484   libsmokeknewstuff2-3
4485   libsmokeknewstuff3-3
4486   libsmokekparts3
4487   libsmokektexteditor3
4488   libsmokekutils3
4489   libsmokenepomuk3
4490   libsmokephonon3
4491   libsmokeplasma3
4492   libsmokeqtcore4-3
4493   libsmokeqtdbus4-3
4494   libsmokeqtgui4-3
4495   libsmokeqtnetwork4-3
4496   libsmokeqtopengl4-3
4497   libsmokeqtscript4-3
4498   libsmokeqtsql4-3
4499   libsmokeqtsvg4-3
4500   libsmokeqttest4-3
4501   libsmokeqtuitools4-3
4502   libsmokeqtwebkit4-3
4503   libsmokeqtxml4-3
4504   libsmokesolid3
4505   libsmokesoprano3
4506   libtaskmanager4a
4507   libtidy-0.99-0
4508   libweather-ion4a
4509   libxklavier16
4510   libxxf86misc1
4511   okteta
4512   oxygencursors
4513   plasma-dataengines-addons
4514   plasma-scriptengine-superkaramba
4515   plasma-widget-lancelot
4516   plasma-widgets-addons
4517   plasma-widgets-workspace
4518   polkit-kde-1
4519   ruby1.8
4520   systemsettings
4521   update-notifier-common
4522 </p></blockquote>
4523
4524 <p>Running apt-get autoremove made the results using apt-get and
4525 aptitude a bit more similar, but there are still quite a lott of
4526 differences.  I have no idea what packages should be installed after
4527 the upgrade, but hope those that do can have a look.</p>
4528
4529  </div>
4530  <div class="tags">
4531
4532
4533
4534   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
4535
4536  </div>
4537 </div>
4538 <div class="padding"></div>
4539
4540 <div class="entry">
4541  <div class="title">
4542  <a href="http://people.skolelinux.org/pere/blog/Why_isn_t_Debian_Edu_using_VLC_.html">Why isn't Debian Edu using VLC?</a>
4543  </div>
4544  <div class="date">
4545   2010-11-27 11:30
4546  </div>
4547
4548  <div class="body">
4549
4550 <p>In the latest issue of Linux Journal, the readers choices were
4551 presented, and the winner among the multimedia player were VLC.
4552 Personally, I like VLC, and it is my player of choice when I first try
4553 to play a video file or stream.  Only if VLC fail will I drag out
4554 gmplayer to see if it can do better.  The reason is mostly the failure
4555 model and trust.  When VLC fail, it normally pop up a error message
4556 reporting the problem.  When mplayer fail, it normally segfault or
4557 just hangs.  The latter failure mode drain my trust in the program.<p>
4558
4559 <p>But even if VLC is my player of choice, we have choosen to use
4560 mplayer in <a href="http://www.skolelinux.org/">Debian
4561 Edu/Skolelinux</a>.  The reason is simple.  We need a good browser
4562 plugin to play web videos seamlessly, and the VLC browser plugin is
4563 not very good.  For example, it lack in-line control buttons, so there
4564 is no way for the user to pause the video.  Also, when I
4565 <a href="http://wiki.debian.org/DebianEdu/BrowserMultimedia">last
4566 tested the browser plugins</a> available in Debian, the VLC plugin
4567 failed on several video pages where mplayer based plugins worked.  If
4568 the browser plugin for VLC was as good as the gecko-mediaplayer
4569 package (which uses mplayer), we would switch.</P>
4570
4571 <p>While VLC is a good player, its user interface is slightly
4572 annoying.  The most annoying feature is its inconsistent use of
4573 keyboard shortcuts.  When the player is in full screen mode, its
4574 shortcuts are different from when it is playing the video in a window.
4575 For example, space only work as pause when in full screen mode.  I
4576 wish it had consisten shortcuts and that space also would work when in
4577 window mode.  Another nice shortcut in gmplayer is [enter] to restart
4578 the current video.  It is very nice when playing short videos from the
4579 web and want to restart it when new people arrive to have a look at
4580 what is going on.</p>
4581
4582  </div>
4583  <div class="tags">
4584
4585
4586
4587   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia</a>, <a href="http://people.skolelinux.org/pere/blog/tags/video">video</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web">web</a>.
4588
4589  </div>
4590 </div>
4591 <div class="padding"></div>
4592
4593 <div class="entry">
4594  <div class="title">
4595  <a href="http://people.skolelinux.org/pere/blog/Debian_Edu_development_gathering_and_General_Assembly_for_FRiSK.html">Debian Edu development gathering and General Assembly for FRiSK</a>
4596  </div>
4597  <div class="date">
4598   2010-11-29 18:40
4599  </div>
4600
4601  <div class="body">
4602
4603 <p>On friday, the first Debian Edu / Skolelinux
4604 <a href="http://www.friprogramvareiskolen.no/Gathering/2010-12-03-05-Oslo">development
4605 gathering</a> in a long time take place here in Oslo, Norway.  I
4606 really look forward to seeing all the good people working on the
4607 Squeeze release.  The gathering is open for everyone interested in
4608 learning more about Debian Edu / Skolelinux.</p>
4609
4610 <p>On Saturday, the Norwegian member organization taking care of
4611 organizing these development gatherings, Fri Programvare i Skolen,
4612 will hold its
4613 <a href="http://friprogramvareiskolen.no/Genfors/2010">General Assembly
4614 for 2010</a>.  Membership is open for all, and currently there are 388
4615 people registered as members.  Last year 32 members cast their vote in
4616 the memberdb based election system.  I hope more people find time to
4617 vote this year.</p>
4618
4619  </div>
4620  <div class="tags">
4621
4622
4623
4624   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
4625
4626  </div>
4627 </div>
4628 <div class="padding"></div>
4629
4630 <div class="entry">
4631  <div class="title">
4632  <a href="http://people.skolelinux.org/pere/blog/How_to_test_if_a_laptop_is_working_with_Linux.html">How to test if a laptop is working with Linux</a>
4633  </div>
4634  <div class="date">
4635   2010-12-22 14:55
4636  </div>
4637
4638  <div class="body">
4639
4640 <p>The last few days I have spent at work here at the <a
4641 href="http://www.uio.no/">University of oslo</a> testing if the new
4642 batch of computers will work with Linux.  Every year for the last few
4643 years the university have organized shared bid of a few thousand
4644 computers, and this year HP won the bid.  Two different desktops and
4645 five different laptops are on the list this year.  We in the UNIX
4646 group want to know which one of these computers work well with RHEL
4647 and Ubuntu, the two Linux distributions we currently handle at the
4648 university.</p>
4649
4650 <p>My test method is simple, and I share it here to get feedback and
4651 perhaps inspire others to test hardware as well.  To test, I PXE
4652 install the OS version of choice, and log in as my normal user and run
4653 a few applications and plug in selected pieces of hardware.  When
4654 something fail, I make a note about this in the test matrix and move
4655 on.  If I have some spare time I try to report the bug to the OS
4656 vendor, but as I only have the machines for a short time, I rarely
4657 have the time to do this for all the problems I find.</p>
4658
4659 <p>Anyway, to get to the point of this post.  Here is the simple tests
4660 I perform on a new model.</p>
4661
4662 <ul>
4663
4664 <li>Is PXE installation working?  I'm testing with RHEL6, Ubuntu Lucid
4665 and Ubuntu Maverik at the moment.  If I feel like it, I also test with
4666 RHEL5 and Debian Edu/Squeeze.</li>
4667
4668 <li>Is X.org working?  If the graphical login screen show up after
4669 installation, X.org is working.</li>
4670
4671 <li>Is hardware accelerated OpenGL working?  Running glxgears (in
4672 package mesa-utils on Ubuntu) and writing down the frames per second
4673 reported by the program.</li>
4674
4675 <li>Is sound working?  With Gnome and KDE, a sound is played when
4676 logging in, and if I can hear this the test is successful.  If there
4677 are several audio exits on the machine, I try them all and check if
4678 the Gnome/KDE audio mixer can control where to send the sound.  I
4679 normally test this by playing
4680 <a href="http://www.nuug.no/aktiviteter/20101012-chef/ ">a HTML5
4681 video</a> in Firefox/Iceweasel.</li>
4682
4683 <li>Is the USB subsystem working?  I test this by plugging in a USB
4684 memory stick and see if Gnome/KDE notices this.</li>
4685
4686 <li>Is the CD/DVD player working?  I test this by inserting any CD/DVD
4687 I have lying around, and see if Gnome/KDE notices this.</li>
4688
4689 <li>Is any built in camera working?  Test using cheese, and see if a
4690 picture from the v4l device show up.</li>
4691
4692 <li>Is bluetooth working?  Use the Gnome/KDE browsing tool to see if
4693 any bluetooth devices are discovered.  In my office, I normally see a
4694 few.</li>
4695
4696 <li>For laptops, is the SD or Compaq Flash reader working.  I have
4697 memory modules lying around, and stick them in and see if Gnome/KDE
4698 notice this.</li>
4699
4700 <li>For laptops, is suspecd/hibernate working?  I'm testing if the
4701 special button work, and if the laptop continue to work after
4702 resume.</li>
4703
4704 <li>For laptops, is the extra buttons working, like audio level,
4705 adjusting background light, switching on/off external video output,
4706 switching on/off wifi, bluetooth, etc?  The set of buttons differ from
4707 laptop to laptop, so I just write down which are working and which are
4708 not.</li>
4709
4710 <li>Some laptops have smart card readers, finger print readers,
4711 acceleration sensors etc.  I rarely test these, as I do not know how
4712 to quickly test if they are working or not, so I only document their
4713 existence.</li>
4714
4715 </ul>
4716
4717 <p>By now I suspect you are really curious what the test results are
4718 for the HP machines I am testing.  I'm not done yet, so I will report
4719 the test results later.  For now I can report that HP 8100 Elite work
4720 fine, and hibernation fail with HP EliteBook 8440p on Ubuntu Lucid,
4721 and audio fail on RHEL6.  Ubuntu Maverik worked with 8440p.  As you
4722 can see, I have most machines left to test.  One interesting
4723 observation is that Ubuntu Lucid has almost twice the framerate than
4724 RHEL6 with glxgears.  No idea why.</p>
4725
4726  </div>
4727  <div class="tags">
4728
4729
4730
4731   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>.
4732
4733  </div>
4734 </div>
4735 <div class="padding"></div>
4736
4737 <div class="entry">
4738  <div class="title">
4739  <a href="http://people.skolelinux.org/pere/blog/Inspirerende_fra_en_ukjent_Skolelinux_skole.html">Inspirerende fra en ukjent Skolelinux-skole</a>
4740  </div>
4741  <div class="date">
4742   2011-01-04 07:50
4743  </div>
4744
4745  <div class="body">
4746
4747 <p>Følgende inspirerende historie fant jeg i
4748 <a href="http://www.digi.no/php/ny_debatt.php?id=858869#innlegg_770926">kommentarfeltet
4749 hos digi.no</a> i forbindelse med en trist sak om hvordan
4750 <a href="http://www.digi.no/858869/datakaos-etter-linux-satsing">skolen
4751 i Hemsedal har fått ødelagt</a> sin Skolelinux-installasjon.  Jeg har
4752 fikset endel åpenbare skrivefeil for lesbarhetens skyld.</p>
4753
4754 <blockquote>
4755 <p><strong>Lignende situasjon i annen kommune, se bare her:</strong>
4756 <br>av Inspektør Siri (gjest)
4757
4758 <p>Kommunen min har to omtrent jevnstore tettsteder, og en
4759 ungdomsskole i hvert av tettstedene. Den minste av disse har ca 300
4760 elever og til denne sogner det 3 barneskoler. Den største har ca 350
4761 elever og til denne sogner det 4 barneskoler.</p>
4762
4763 <ul>
4764
4765 <li>Kommunen har i veldig lang tid forsømt IKT i skolen, og det har
4766 bare blitt gitt smuler i ny og ne. Det er kun den største av
4767 ungdomsskolene som har hatt en skikkelig datapark, og dette takket
4768 være en naturfaglærer som ble lei av å vente på kommunen. Det gjorde
4769 at vi bestemte oss for å ta ting i egne hender, og da vha
4770 skolelinux. En testinstallasjon med 10 gamle PCer ble gjort, og vi så
4771 raskt at dette var veldig lovende. Neste etappe var å gi alle lærere
4772 egen PC på arbeidsplassene sine (2004), og så sette opp 16 PCer på to
4773 datarom. Vi har kun basert oss på å kjøpe inn brukte maskiner, og
4774 aldri dyrere enn 1000 kr pr klient. For to år siden så hadde vi
4775 klienter i alle klasserom, og totalt hadde vi da rundt 250 stk. Rundt
4776 40 klienter brukes av lærerne og kjører på en egen server. Elvene har
4777 resten, og kjører også en egen server. Servere har vi også kjøpt
4778 brukt, 2 år gamle servere koster 6-7000 kroner.</li>
4779
4780 <li>Skolen vår er et relativt gammelt bygg, men en meget dyktig
4781 vaktmester har sammen med IKT-ansvarlig/Naturfaglærer lagt kabler til alle
4782 rom. Gradvis har vi byttet ut billige svitsjer med mer solide saker
4783 som er mulig å fjernstyre.</li>
4784
4785 <li>Vi har i all hovedsak greid å få dette til over eget budsjett, men
4786 vi har også passet på å få penger når de andre skolene har fått
4787 bærbare PCer til lærere osv.</li>
4788
4789 <li>Vår IKT-ansvarlig har gjort (og gjør) en fenomenal jobb, og vi har
4790 en maskinpark som de andre av kommunens skoler bare kan drømme
4791 om.</li>
4792
4793 </ul>
4794
4795 <p>Så skjer det som ofte skjer. Det kommer en eller annen
4796 selger/blåruss og skal fikse ALT. I vårt tilfelle betyr dette også
4797 sentralisering av drift. Den ny-ansatte på kommunens IT-avdelingen
4798 skal også ha jobb, og ser for seg å ta over skoledriften. Kommunen
4799 kjøper inn eksterne driftstjenester, og nekter i samme slengen å ta
4800 hensyn til skolen vår. Dette til tross for at vi alene har like mange
4801 datamaskiner som de andre til sammen. </p>
4802
4803 <ul>
4804
4805 <li>Det blir krevd at vi skal innlemmes i de kommunale systemet, og
4806 det er VI som får ansvar for at dette kommer på plass. Og det er her
4807 de horrible tingene begynner å skje. </li>
4808
4809 <li>Det settes opp en lukket Exchange server som gjør av vi ikke kan
4810 hente epost for våre ansatte. Og det kreves at vi finner løsning på
4811 dette.</li>
4812
4813 <li>Det velges sak arkivsystem som vi pålegges å bruke, noe som gjør
4814 at vi må bruke en terminalløsning mot kommunal server. Ikke i seg selv
4815 et problem i følge IKT-ansvarlig hos oss. Men kommunens IT-avd nektet
4816 faktisk å åpne de porter OSV som vi måtte bruke.</li>
4817
4818 <li>Vi blir pålagt å flytte på innsiden av det kommunale
4819 nettverket. Dette gjorde at vi mistet hjemmekontor for lærere og
4820 elever. Å få åpnet porter i kommunal brannmur var ikke
4821 aktuelt. Mulighet for fjerndrift ble også vekk i samme slengen. </li>
4822
4823 <li>Vår LMS Moodle er ikke mulig å nå for elevene og lærerne.
4824
4825 </ul>
4826
4827 <p>Den andre ungdomsskolen i kommunen begynner så å kreve at de skal
4828 få bedre datatetthet, og komme opp på et nivå som ligner det vi
4829 har. De ser at vi kan avholde eksamen hvor alle 10. klassingene får
4830 sitte ved hver sin PC. Og de har fått tilbakemelding (klager) fra VGS
4831 om manglende datakompetanse på elevene som kommer fra dem. Dette fører
4832 videre til at kommunen endelig innser at de må ta grep. </p>
4833
4834 <p>Grepet betyr sentralisering, og farvel til vår plattform får vi
4835 høre. Det blir gjort en rekke bestemmelser og vedtak som vi ikke får
4836 være en del av. Det blir helt klart at vi må redusere antall maskiner,
4837 og det skal satses på bærbare maskiner. Siden vi ikke har fått tatt
4838 del i prosessene som angår oss, så bruker vi fagforening. Vi har ikke
4839 blitt hørt i forbindelse med endringer som er betydelig for vår
4840 hverdag, og greier å stoppe omlegging. I tillegg så har vi et politisk
4841 vedtak i kommunen på at vi skal kjøre Linux på elevnett, og dette
4842 vedtaket kan ikke administrasjonen i kommunene helt uten videre
4843 tilsidesette. </p>
4844
4845 <p>I sum har dette gjort at vi har fått jobbe videre i fred. Og en del
4846 runder i kommunens kontrollutvalg har gjort det tydelig at vi har blitt
4847 systematisk motarbeidet. </p>
4848
4849 <p>I dag har de andre skolene fått sine bærbare maskiner til elever og
4850 lærere, men etter 2 år med innkjøring er det fremdeles problemer
4851 her. </p>
4852
4853 <ul>
4854
4855 <li>Ungdomsskolen med windows kan ikke kjøre eksamen med sine bærbare,
4856 det er for mye arbeid å renske disse for innhold slik at juks ikke er
4857 mulig.</li>
4858
4859 <li>Utskrift er et mareritt, etter sigende pga at utskrift først
4860 sendes til sentral server, og så sendes ut til rett skriver. I snitt
4861 så tar det 7-8 minutter før utskrift starter på enkelte av
4862 skolene.</li>
4863
4864 <li>Trådløst skaper store problemer, og det er i perioder helt umulig
4865 å komme seg på nett. Og lagring på felles server er bare å glemme i
4866 perioder.</li>
4867
4868 </ul>
4869
4870 <p>Vi har slitt mye, kranglet og sloss. Ikke med tekniske problemer,
4871 men med omgivelsene rundt som vil oss til livs. Men det har vært verdt
4872 hver dråpe med svette, og timer med irritasjon. Men vi har begynt å få
4873 rutine her nå. </p>
4874
4875 <ul>
4876
4877 <li>Vi har fremdeles et system som vi styrer helt selv. </li>
4878 <li>Vi har vist at argumentet med at vår IKT-ansvarlig kan finne seg annen jobb ikke holder mål. Vi har kjøpt driftskonto hos et firma i tilfelle krise, og vi har kjørt opplæring på flere av de yngre lærerne. </li>
4879 <li>Vi har til enhver tid en lærling IKT driftsfag, og velger selvsagt ut dem som satser på Linux. Vi har nå begynt å få tilbake av våre tidligere elever som vil til oss nettopp fordi vi har Linux.</li>
4880 <li>Vi har vist at vi greier å opprettholde en dobbelt så stor datapark som naboskolen, og det til en billigere penge. </li>
4881 <li>Vi har datastøtte og support på huset, ALLTID tilgjengelig. De andre skolene må vente flere dager hvis det ikke er noe kritisk. </li>
4882 <li>Vår IKT-ansvarlig har 50% stilling som lærer og 50% som IKT-ansvarlig. </li>
4883 <li>Vi har en lærer på hvert trinn som har 3 timer i uka til å drive support/støtte til de andre lærerne. </li>
4884 <li>Vi opplever at de yngste lærerne ved den andre ungdomsskolen ønsker seg over til oss. </li>
4885
4886 </ul>
4887
4888 <p>Vi skal i løpet av året starte prosess med å planlegge ny skole, og vi har fått gjennomslag for at jeg (inspektør) og IKT-ansvarlig skal ha det fulle og hele ansvar for IKT/Infrastruktur. Begrunnelsen vår som ble avgjørende her, var at IT-avd i kommunen ikke kan noe om data i skolen. </p>
4889
4890 <p>Beklager hvis dette ble litt usammenhengende, men det ble tastet i
4891 fei, og jeg har ikke lest gjennom</p>
4892 </blockquote>
4893
4894 <p>Det kom raskt et lite svar:</p>
4895
4896 <blockquote>
4897 <p><strong>SV: Lignende situasjon i annen kommune, se bare her:</strong>
4898 <br>av captain_obvious</p>
4899
4900 <p>Inspirerende å lese. Har dere gjort noe for å fortelle denne
4901 historien videre?</p>
4902
4903 <p>Hadde vært svært interessant om dere tok kontakt med dokument 2 eller
4904 lignende for å fortelle hvordan det egentlig står til med
4905 IT-satsningen i kommune-Norge. Om ikke annet kan du begynner med å
4906 raffinere innlegget ditt og få en gjesteartikkel på digi.no</p>
4907 </blockquote>
4908
4909 <p>Og deretter en lengre oppfølging.</p>
4910
4911 <blockquote>
4912 <p><strong>SV: Lignende situasjon i annen kommune, se bare her:</strong>
4913 <br>av Inspektør Siri (gjest)
4914
4915 <p>Joda, vi har lekt med tanken, og vi har t.o.m skrevet flere lengre
4916 leserinnlegg myntet på aviser. Disse er ikke sendt til aviser, men
4917 brukt internt i forbindelse med møter med kommune. Vår IKT-ansvarlig
4918 har også truet med å si opp jobben sin hvis det ikke ble tatt hensyn i
4919 større grad enn hva som har vært tilfelle. VI kan også dokumentere
4920 flere brudd på anbudsregler, og vi kjenner til at relativt store
4921 IT-leverandører som ikke har fått tatt del i disse anbudene, rett og
4922 slett ikke tør melde fra av redsel for å få et dårlig rykte. </p>
4923
4924 <p>Alt ser ut til å roe seg ned, og vi har fått opp øynene på
4925 politikerne. I sum gjør dette at vi ikke ønsker for mye publisitet nå,
4926 det vil bare rote til igjen. </p>
4927
4928 <p>Jeg glemte å nevne at vi nå nesten ikke bruker tid på å drifte
4929 systemet vårt, noe som gjør at det aller meste av tid blir brukt til å
4930 støtte lærerne og elevene. F.eks så bruker vår IKT-ansvarlig den
4931 første timen på jobb, 0730-0830 kun til å gå ute på arbeidsplassene
4932 til læreren. Dette for å kunne svare på små og store problem, gi tips
4933 og råd, eller bare for å plukke opp hva som er behovet ute i
4934 undervisningsarealene. Det er dessverre ikke slik at alle lærerne har
4935 nok digital kompetanse til å kunne formulere alle spørsmålene de har,
4936 men ved å kunne få vise eller lufte tanker med IKT-ansvarlig så er det
4937 utrolig hva som kommer fram. </p>
4938
4939 <ul>
4940
4941 <li>Jeg ser at mange bruker økonomi som argument i forhold til å bruke
4942 SkoleLinux, og jeg skal ikke legge skjul på at det var dette som i
4943 utgangspunktet var årsaken til vårt valg. Men diskusjonene og kampen
4944 med kommunens IT-avdeling har gjort at vi har fått et noe annet
4945 fokus. Fordelene med drift og stabilitet, gjør at vi ville ha valgt
4946 samme løsning selv om den var dyrere. At vi slipper langt billigere
4947 unna, som følge av 0,- lisenskostnader og lave maskinvarekostnader, er
4948 bare en bonus. </li>
4949
4950 <li>Etter å ha kranglet oss til å få skikkelig oversikt over hva de
4951 andre skolene i kommunen bruker på IT, så har vi fått gehør for å få
4952 samme midler til innkjøp. Dette har gjort at vi nå kan kjøpe inn
4953 utstyr som de andre skolene bare kan se langt etter. Vi har nettopp
4954 kjøpt inn 3 videokamera i semiproff-klassen for å kunne lage film,
4955 samt sende live fra skoleteater/konserter. Vi har kjøpt inn digitale
4956 kompaktkamera til alle klassene. Vi har et team av lærere som skal i
4957 gang med å teste ut tablets på svake elever. Håpet et at teknologien
4958 kan være med på å gi noen av elevene litt mer motivasjon. Vi har kjøpt
4959 inn et halvt klassesett med pulsklokker, noe som har vist seg å være
4960 overraskende inspirerende for en del av elevene. Vi har også oss på
4961 fag på en høyskole litt lengre sør for oss, slik at 3 av oss nå skal
4962 ta faget "Linux tjenestedrift". Som inspektør og en del av skolens
4963 administrasjon er det veldig praktisk å kunne trå til hvis det
4964 kniper. Men IKT-ansvarlig har vært UTROLIG flink til å lage rene
4965 smørbrødlister for hvordan de mest vanlige driftsproblem løses, så det
4966 er lett for flere av oss å ta del i den daglige driften. Vi har svært
4967 stor nytte av lærling (som også hjelper to av naboskolene), men det er
4968 nesten blitt slik at det er om å gjøre å komme til først for å få løse
4969 problem. Det å få fingrene på problem og utfordringer er den aller
4970 beste læremester. </li>
4971
4972 </ul>
4973
4974 <p>Når vi nå tar til med planlegging av ny skole, så vil det være med
4975 tanke på at det skal være mulig med datautstyr på alle plasser. Vi
4976 kommer i all hovedsak til å legge kabel til alle tenkelige og
4977 utenkelige plasser. WiFi koster tilnærmet NULL å sette opp i
4978 ettertid.</p>
4979
4980 <p>Vi har ikke vært noe flink til å bidra til SkoleLinux-prosjektet,
4981 vi har rett og slett vært for opptatt med vår egen kamp. Vi har hentet
4982 mye inspirasjon fra diskusjoner som har gått i det miljøet, og vi
4983 håper at vi nå framover kan få tid til å bidra. Vi er i ferd med å
4984 bytte ut en av serverne våre, og da vil denne trolig bli satt opp som
4985 testserver for neste versjon av Skolelinux. På den måten vil vi i alle
4986 fall kunne gi tilbakemeldinger og rapportere feil. I tillegg så vil
4987 det kanskje gi oss noen nye utfordringer, for som lærlingen vår sier:
4988 "Skolelinux er noe herk, det skjer jo ikke noe galt og hvordan skal
4989 jeg da lære?"</p>
4990
4991 </blockquote>
4992
4993 <p>Det er veldig hyggelig å høre at
4994 <a href="http://www.skolelinux.org/">Skolelinux</a> fungerer så bra i
4995 skoleverdagen etter å ha jobbet med det i 10 år.</p>
4996
4997  </div>
4998  <div class="tags">
4999
5000
5001
5002   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
5003
5004  </div>
5005 </div>
5006 <div class="padding"></div>
5007
5008 <div class="entry">
5009  <div class="title">
5010  <a href="http://people.skolelinux.org/pere/blog/Skolelinux_intervju__Arnt_Ove_Gregersen.html">Skolelinux-intervju: Arnt Ove Gregersen</a>
5011  </div>
5012  <div class="date">
5013   2011-01-09 12:00
5014  </div>
5015
5016  <div class="body">
5017
5018 <p>Inspirert av
5019 <a href="http://raphaelhertzog.com/tag/interview/">intervjurunden</a>
5020 som Raphael Hertzog har startet med folk i Debianprosjektet, fikk jeg
5021 lyst til å gjøre det samme med folk i
5022 <a href="http://www.skolelinux.org/">Skolelinuxprosjektet</a>.  Håpet
5023 er at de som til daglig bidrar til å fremme fri programvare i
5024 skoleverket og utvikler en linux-distribusjon spesiallaget for
5025 skolebruk kan bli bedre kjent og kanskje inspirere flere til å bidra
5026 til Skolelinux-prosjektet.</p>
5027
5028 <p>Først ut er nyvalgt leder i
5029 <a href="http://www.friprogramvareiskolen.no/">foreningen FRISK</a> som
5030 organiserer utviklingen av Skolelinux-distribusjonen.  FRISK trenger
5031 alltid flere medlemmer, så
5032 <a href="http://medlem.friprogramvareiskolen.no/index.php?page=signup">meld
5033 deg gjerne inn</a> hvis du vil støtte oss.</p>
5034
5035 <p><strong>Hvem er du, og hva driver du med til daglig?</strong></p>
5036
5037 <p>Mitt navn er Arnt Ove Gregersen, jeg er en småbarnfar på 32 år som
5038 for tiden bor Trondheim. Her jobber jeg som systemutvikler i et firma
5039 som heter <a href="http://www.geomatikk-ikt.no/">Geomatikk IKT AS</a>,
5040 hvor jeg er på et Vegmeldings-prosjekt for Statens Vegvesen. På
5041 fritiden er jeg styreleder i FRISK (Fri programvare i skolen) og
5042 bidrar til bl.a. Skolelinux-prosjektet når jeg får tid til det. Det er
5043 primært hjemmesiden til Skolelinux-prosjektet og
5044 <a href="http://linuxveiviseren.no/">Linux-veiviseren</a> jeg har
5045 jobbet med her, men jeg har også gjort en del arbeid i forhold til
5046 FRISK sin hjemmeside.</p>
5047
5048 <p><strong>Hvordan kom du i kontakt med Skolelinux-prosjektet?</strong></p>
5049
5050 <p>Jeg var på en presentasjon av prosjektet i regi av Knut Yrvin på
5051 Gløshaugen i Trondheim, hvor jeg fattet stor interesse for prosjektet
5052 og ville hjelpe til så godt jeg kunne.  Dette var vel i 2002 eller
5053 2003.</p>
5054
5055 <p>Jeg hadde fra før hørt om prosjektet fra før og syntes tanken bak var
5056 ganske fin, men hadde ikke noen interesse av bruke min egen fritid på
5057 det selv.</p>
5058
5059 <p>I etterkant av presentasjonen startet jeg og noen andre fra
5060 Trondheim "Skolelinux-prosjektet i Sør-Trøndelag" . Hvor vi var med å
5061 bidra til at Trondheim kommune satte igang Selsbakk ungdomskole som et
5062 pilotprosjekt med Skolelinux, som egentlig var og er en stor suksess,
5063 men det virker ut som det ikke skjer noe mer på. I tillegg var vi med
5064 på dugnad på Brundalen videregående skole hvor vi installerte
5065 Skolelinux som såvidt jeg vet fortsatt kjører på Skolelinux.</p>
5066
5067 <p><strong>Hva er fordelene med Skolelinux slik du ser det?</strong></p>
5068
5069 <p>Det bygger på fri programvare og har lav kostnad i forhold til
5070 nytteverdien. Dette fordi det har forholdsvis lav inngangsum og bruker
5071 en arkitektur med sentral-drift som gir mange driftfordeler.  I
5072 tillegg vil det kunne frigjøre kostnader for skolene slik at de kan
5073 bruke dem til å ansette f,eks flere lærere om det er ønskelig.</p>
5074
5075 <p><strong>Hva er ulempene med Skolelinux slik du ser det?</strong></p>
5076
5077 <P>Ikke all pedagogisk programvare er tilgjengelig der, som f.eks
5078 Drillpro om jeg ikke husker feil.</p>
5079
5080 <p><strong>Hvilken fri programvare bruker du til daglig?</strong></p>
5081
5082 <p>Til utvikling av Java-applikasjoner og Android bruker jeg Eclipse og
5083 Quanta til web-utvikling via php. For all bildebehandling bruker jeg
5084 GIMP og Blender til 3d-modellering . Dessverre har Blender en bratt
5085 læringskurve i starten, men det er absolutt verdt det.
5086
5087 <p>Til musikk bruker jeg stort Rhytmbox. Firefox til surfing på nettet og
5088 Thunderbird og Evolution til e-post,
5089
5090 <p>På database-siden bruker jeg PostgreSQL, Postgis og av og til Mysql.
5091
5092 <p>Når jeg får tid til å spille bruker jeg som regel et strategi-spill
5093 som er basert på TA Spring-motoren (springrts.com), her er det et
5094 veldig bra utvalg av gratis spill som er av høy kvalitet. Veldig lett
5095 å bli hektet :)</p>
5096
5097  </div>
5098  <div class="tags">
5099
5100
5101
5102   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
5103
5104  </div>
5105 </div>
5106 <div class="padding"></div>
5107
5108 <div class="entry">
5109  <div class="title">
5110  <a href="http://people.skolelinux.org/pere/blog/Skolelinux_intervju__Viggo_Fedreheim.html">Skolelinux-intervju: Viggo Fedreheim</a>
5111  </div>
5112  <div class="date">
5113   2011-01-12 12:00
5114  </div>
5115
5116  <div class="body">
5117
5118 <p>Jeg fortsetter min intervjuserie med folk i
5119 <a href="http://www.skolelinux.org/">Skolelinuxprosjektet</a>.  Denne
5120 gang er det en av folkene som har vært med lenge og som har tatt i
5121 bruk Skolelinux på alle skolene i Narvik kommune som skal i ilden.
5122 Han er styremedlem i
5123 <a href="http://www.friprogramvareiskolen.no/">foreningen
5124 FRISK</a>.</p>
5125
5126 <p><strong>Hvem er du, og hva driver du med til daglig?</strong></p>
5127
5128 <p>Mitt navn er Viggo Fedreheim, og jeg er pedagogisk og teknisk
5129 IKT-veileder for alle skoler i Narvik kommune.  Jeg drifter totalt 17
5130 servere basert på Skolelinux og Debian. Jeg holder i tillegg noen kurs
5131 mellom all driftingen. For tiden arbeider jeg med en sentral
5132 LDAP-tjener for alle skoleservere samt våre Moodle- og
5133 Joomla-installasjoner.</p>
5134
5135 <p><strong>Hvordan kom du i kontakt med Skolelinux-prosjektet?</strong></p>
5136
5137 <p>Gjennom en eller annen nettavis i 2001 der var det skrevet om
5138 Skolelinux.  Artikkelen ga meg lyst til å prøve ut systemet.</p>
5139
5140 <p>Det startet i 2002 ved at jeg installerte en av de første utgavene
5141 av Skolelinux på en standard pc på Solneset skole i Tromsø.  Denne var
5142 oppe fram til desember 2003 da jeg sluttet på den skolen og begynte i
5143 ny jobb i Narvik kommune.</p>
5144
5145 <p> I Narvik kommune var det i 2004 kun 2 servere på da totalt 15
5146 skoler. Disse var Windows NT baserte. På disse to skolene var det lite
5147 med maskiner.  Jobben med å få Narvik Kommune opp på akseptabelt nivå
5148 virket å være formidabel.  Men med hjelp av gode kollegaer og leder
5149 skrev jeg en IKT plan for Narvik kommune som ble vedtatt av politikere
5150 i august 2004. I denne planen ble det bestemt at Narvik kommune skulle
5151 bruke Skolelinux.  Her ble det også satt av midler til kabling av god
5152 infrastruktur på alle skoler samt innkjøp av nye datamaskiner.  Så i
5153 dag har vi 17 servere hvorav 13 er på Skolelinux, med ca 1500 klienter
5154 basert på tynne, "halvtykke" og et stort antall bærbare pcer basert på
5155 Kubuntu.</p>
5156
5157 <p><strong>Hva er fordelene med Skolelinux slik du ser det?</strong></p>
5158
5159 <p>Lisenskostnader, driftkostnader og hardwarekrav som er mye lavere
5160 enn for andre systemer.</p>
5161
5162 <p><strong>Hva er ulempene med Skolelinux slik du ser det?</strong></p>
5163
5164 <p>Pedagogiske programvare som ikke fungerer mot Linux. En Stoooor
5165 flaskehals og som gjør at Linux kanskje ikke blir valgt andre
5166 plasser.</p>
5167
5168 <p>Eksempler er Relemo, Lindys (lingit sine programmer), 5plus
5169 (matematikk).  Disse er programmer som ikke lar seg kjøre i Linux.</p>
5170
5171 <p> Men det ser ut for at mange leverandører går over til mer
5172 nettbaserte programmer istedet for å installere lokalt.  Dette med
5173 enkelte leverandører som ikke kan levere programmer til Linux er et
5174 lite problem og over tid tror jeg at denne barrieren er borte.</p>
5175
5176 <p><strong>Hvilken fri programvare bruker du til daglig?</strong></p>
5177
5178 <p>Kjører Kubuntu på laptoper, Debian squeeze på stasjonær
5179 kontorpc. Ut over dette arbeder jeg svært mye via konsoll mot andre
5180 servere.</p>
5181
5182  </div>
5183  <div class="tags">
5184
5185
5186
5187   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
5188
5189  </div>
5190 </div>
5191 <div class="padding"></div>
5192
5193 <div class="entry">
5194  <div class="title">
5195  <a href="http://people.skolelinux.org/pere/blog/Skolelinux_intervju__Embrik_Kaslegard.html">Skolelinux-intervju: Embrik Kaslegard</a>
5196  </div>
5197  <div class="date">
5198   2011-01-16 12:00
5199  </div>
5200
5201  <div class="body">
5202
5203 <p>Neste ut i min intervjuserie med folk i
5204 <a href="http://www.skolelinux.org/">Skolelinuxprosjektet</a> er
5205 lærer, mangeårig bidragsyter på epostlistene og tidligere
5206 Skolelinux-administrator på en skole i Hemsedal.</p>
5207
5208 <p><strong>Hvem er du, og hva driver du med til daglig?</strong></p>
5209
5210 <p>Embrik Kaslegard, 1964-modell, fire barn (7-20 år). Begynte som
5211 lærer i 1989 - har hatt IKT-ansvar siden første året i jobb. Har
5212 jobbet som lærer/IKT-ansvarlig uavbrutt siden 1989. Jobbet med
5213 Skolelinux fra 2004 til 2010. Nå har jeg fått ny arbeidsplass og er
5214 40% lærer og 60% IKT med Windows XP, Win2003 server og et regionalt
5215 IKT-regime som legger premissene og begrensingene for hva vi kan gjøre
5216 på skolen.</p>
5217
5218 <p><strong>Hvordan kom du i kontakt med Skolelinux-prosjektet?</strong></p>
5219
5220 <p>Jeg leste en artikkel om en dugnadsinstallasjon av Skolelinux på en
5221 skole på Jæren et sted. Tanken om dugnad og frihet appellerte til
5222 meg. Da vi skulle bygge ny skole var det en del vi måtte spare på,
5223 fordi vi beveget oss mot en kostnadssprekk. Kabling og investering i
5224 PC-er var en av tingene vi sparte på. Derfor kjøpe vi 72 pc-er for 390
5225 pr stk. En filtjener og en applikasjonsserver.</p>
5226
5227 <p><strong>Hva er fordelene med Skolelinux slik du ser det?</strong></p>
5228
5229 <p>Fordelen er at så mye er satt opp fra starten. I tillegg er det
5230 tydelig at pakka er laga for skoleverket. Brukerne har egne
5231 skrivebord, tilgang på mange gode verktøyprogrammer. Vi slipper å
5232 tenke på virus. Brukerne har ikke mulighet til å ødelegge
5233 klientoppsett, men har gode muligheter til å endre eget oppsett. Dette
5234 tror jeg er inspirerende og kjekt for mange brukere.  Mappestrukturen
5235 er ferdig og det er "enkelt" å designe lokale mappestrukturer via
5236 skeleton.  Noen av oss i skoleverket mener skolen skal være en
5237 "mot-kultur". Da er Skolelinux et av valgene man kan ta. Et annet er å
5238 spise på indisk restaurant i stedet for Mc Donald's når vi er på bytur
5239 osv.. Ordene deling, frihet, dugnad osv er positive ord i
5240 skoleverket. Det er viktig at elevene blir bevisst dette.</p>
5241
5242 <p><strong>Hva er ulempene med Skolelinux slik du ser det?</strong></p>
5243
5244 <p>Kompabiliteten er selvsagt et problem, selv om det er mindre nå enn
5245 før.  For IKT-personer på skolene som skal drifte dette er det
5246 problematisk med kommandoer i terminalen.  I tillegg er det alt for
5247 mange programmer i Skolelinux som ikke blir brukt.  Jeg tror
5248 Skolelinux er tjent med å tone ned begrepet pedagogisk programvare.
5249 Slik jeg ser det finnes ikke denne kategorien programmer lengre slik
5250 de gjorde før, som frittsående programmer som installeres på en
5251 datamaskin eller på serveren.  Det finnes en del spesialpedagogiske
5252 programmer, som Textpilot, LingDys, LingRight, AskiRaski, Ny i Norge
5253 osv.  Men dette er programmer for enkelt-elever eller små grupper av
5254 elever.  Det som bør være fokus er at alle undervisningsressurser som
5255 lages for nettet skal være nettleseruavhengig.</p>
5256
5257 <p><strong>Hvilken fri programvare bruker du til daglig?</strong></p>
5258
5259 <p>OpenOffice bruker jeg til vanlig kontorarbeide.  VLC bruker jeg som
5260 videoavspiller og av og til streaming av film.  Gimp bruker jeg i
5261 undervisningen til bildemanipulering. Firefox og Chrome er mine
5262 favoritt-nettlesere.  Firefox har lenge vært førstevalget mitt, nå
5263 bruker jeg mest Chrome.  Opplever den som raskere og smidigere enn
5264 Firefox.  Ubuntu bruker jeg som dualboot på jobb-maskinen min i
5265 tillegg til at alle PCer hjemme har en eller annen Ubuntu-distribusjon
5266 installert.  Jeg bruker Clonezilla på Ubuntu 10.04 til kloning av
5267 datamaskiner på jobb.  Det er selvsagt en haug andre frie programmer
5268 jeg bruker men jeg bruker dem ikke daglig.  Jeg kan ramse opp:
5269 recordmydesktop, cinelerra, acidrip, soundjuicer, audacity, NX
5270 (no-machine), Kino, Rythmbox...</p>
5271
5272 <p><strong>Hvilken strategi tror du er den rette å bruke for å få
5273 skoler til å ta i bruk fri programvare?</strong></p>
5274
5275 <p>Jeg tror oppsøkende virksomhet er den rette strategien.
5276 Ressurspersoner gjør avtaler med rådmenn, skolesjefer, rektorer.  Det
5277 er slik konkurrentene gjør det.  Fokuset i slike samtaler bør være
5278 kost-nytte.  Dersom personer med økonomisk ansvar ser at de kan få
5279 like godt tilbud til mindre utgifter, tror jeg det er mulighet til å
5280 få innpass.  Dersom de også kan få konkrete tilbud på drift i slike
5281 samtaler, vil de kanskje bli litt mer interesserte i hvor mye penger
5282 som faktisk går til IKT i skolene.  Det er også viktig at vi ikke
5283 firer for mye på krav til datamaskiner.  Det er flott at Skolelinux
5284 går på "utrangert" utstyr, men dette bør bare presenteres som et
5285 alternativ.  Skolelinux-installasjoner med utrangert utstyr er ikke å
5286 foretrekke dersom man kan unngå det. Det skaper ikke entusiasme hos
5287 brukerne (elever og lærere) når de bruker gamle datamaskiner som går
5288 tregt.  Det er kjempefint med skoler som har kommet seg frem til
5289 Skolelinux og fri programvare av seg selv, men de lever på nåde.
5290 Slike valg må fundamenteres hos skoleeier.</p>
5291
5292 <p>Oppdatering 2011-01-16 22:40: Oppdatert svarene for de tre siste
5293 spørsmålene litt mer tekst fra Embrik.</p>
5294
5295  </div>
5296  <div class="tags">
5297
5298
5299
5300   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
5301
5302  </div>
5303 </div>
5304 <div class="padding"></div>
5305
5306 <div class="entry">
5307  <div class="title">
5308  <a href="http://people.skolelinux.org/pere/blog/Skolelinux_intervju__Sturle_Sunde.html">Skolelinux-intervju: Sturle Sunde</a>
5309  </div>
5310  <div class="date">
5311   2011-01-19 12:00
5312  </div>
5313
5314  <div class="body">
5315
5316 <p>Denne gang har jeg fått tak i en mangeårig unix-mann som etter
5317 mange år ved Universitetet i Oslo, der jeg først traff ham, har
5318 flyttet tilbake til vestlandet, og der bidratt til å revitalisere
5319 <a href="http://www.skolelinux.org/">Skolelinux</a>-oppsettet i
5320 Florø.</p>
5321
5322 <p><strong>Hvem er du, og hva driver du med til daglig?</strong></p>
5323
5324 <p>Sturle Sunde, ansvarleg for skulenettet i Flora kommune.  Eg driv,
5325 vidareutviklar og er andrelinje brukarstøtte for datanettet ved
5326 skulane i Flora kommune.  10 skular og meir enn 700 maskiner med
5327 Linux, medrekna tynnklientar.  Tidlegare jobba eg i mange år med
5328 unix-drift ved Universitetets senter for informasjonsteknologi ved
5329 Universitetet i Oslo.</p>
5330
5331 <p><strong>Hvordan kom du i kontakt med Skolelinux-prosjektet?</strong></p>
5332
5333 <p>Det er vanskeleg å svare konkret på.  Eg har drive med Unix og Linux i
5334 alle år, og Skulelinux er eit godt kjent prosjekt i miljøet.  Det var
5335 først i 2008, då eg tok til i min noverande jobb, at eg fekk bruk for
5336 Skulelinux for alvor.</p>
5337
5338 <p>Jobben min skulle vere drift av eit nytt skulenett i Flora kommune,
5339 levert av eit firma eg ikkje vil reklamere for.  Systemet skulle vere
5340 ferdig levert i september året før.  Dette viste seg å ta mykje lenger
5341 tid, og i haustferien 2008 hadde dei endå ikkje klart å få opp ei
5342 fungerande løysing.  Situasjonen var prekær for den største skulen i
5343 kommunen med meir enn 500 elevar på ungdomssteget.  Skulen hadde brukt
5344 Skulelinux før, og var tilfredse med det.  No hadde dei vore utan
5345 fungerande datasystem i nesten eit år.  Difor fekk eg opp ein ny tenar
5346 utanfor prosjektet og installerte Skulelinux på den.  Etter litt
5347 justering av konfigurasjonen med god hjelp av #skolelinux på IRC, var
5348 den nye tenaren oppe og gjekk med både tynne og halv-tjukke klientar.
5349 Autentisering gjekk mot det nye systemet, slik at elevar og lærarar
5350 framleis har same brukarnamn og passord over alt.  Dette berre
5351 fungerte, og vi bestemte oss for å erstatte delar av løysinga vi
5352 skulle få levert med Skulelinux.</p>
5353
5354 <p>Det høyrer med til historia at det nye systemet eg skulle drive frå
5355 januar 2008 endå ikkje er ferdig levert.  Dei jobbar med saka, seier
5356 dei, og har von om å fullføre leveransen i løpet av 2011.</p>
5357
5358 <p><strong>Hva er fordelene med Skolelinux slik du ser det?</strong></p>
5359
5360 <p>Det er veldig mange.  Eg skal ta nokre få.</p>
5361
5362 <p>Den viktigaste fordelen er at det igrunn berre er ei maskin å passe
5363 på, og det er tenaren.  Med andre løysingar har ein gjerne programvare
5364 og anna som skal vedlikehaldast på kvar enkelt maskin.  Med Skulelinux
5365 kan alle feil rettast og alle program oppgraderast på alle maskiner
5366 samstundes ved å gjere endringa som må til på tenaren.  Eg kan sitje
5367 på kontoret og passe på alle tenarane i kommunen derifrå.</p>
5368
5369 <ul>
5370
5371 <li>Tynne klientar gjer det mogleg å bruke eldre utstyr lenge, so lenge
5372 tenaren er sterk nok.  Ein liten tenar med eit par halv-moderne CPUar
5373 og 2 GiB RAM held lenge for eit typisk klasserom med 30 tynnklientar,
5374 og det er lett å utvide med fleire.
5375
5376 <li>Halvtjukke klientar gjer det mogleg å utnytte kapasiteten i litt
5377 nyare maskiner betre, og avlaste tenaren.  Ingenting vert installert
5378 lokalt på desse heller, og harddisken kan gjerne koblast frå.  Gode
5379 halvtjukke klientar kan kjøpast brukt for under 1000-lappen, og det er
5380 heile kostnaden.  Ingen lisensar eller anna på toppen, og det er ikkje
5381 krav til kraftigare tenar heller.
5382
5383 <li>Det er Linux.  Vi har ikkje noko kluss med drivarar, dei berre er
5384 der.  Heller ikkje med virus, dei finst i realiteten ikkje.  Eller med
5385 elevar som klussar med installert programvare, for dei klarar ikkje å
5386 øydeleggje for nokon andre enn seg sjølve.
5387
5388 </ul>
5389
5390 <p>Skulelinux er lagt opp til å vere veldig lett å installere rett ut
5391 av boksen på ein heil skule av ein interessert lærar.  Det er ofte ei
5392 god løysing for skulen.  Å ha nokon til stades som kjenner systemet og
5393 kan forklare enkle ting eller løyse problem der og då, er uvurderleg
5394 viktig for ein stressa lærar fem minutt før det ringer inn.</p>
5395
5396 <p><strong>Hva er ulempene med Skolelinux slik du ser det?</strong></p>
5397
5398 <p>All den ferdige konfigurasjonen gjer det tungvint å tilpasse
5399 Skulelinux til eit system som skal fungere saman med mange andre
5400 installasjonar i eit felles datanett for skulane i ein kommune.  Det
5401 heile er prekonfigurert for ein skule, og utviding til mange skular
5402 med eigne tenarar er ikkje berre enkelt.</p>
5403
5404 <p><strong>Hvilken fri programvare bruker du til daglig?</strong></p>
5405
5406 <p>Eg brukar mest alle små hjelpeprogram som føl med operativsystemet,
5407 samt scriptspråket perl.  Elles er Firefox/Iceweasel, Gnome-terminal
5408 og ssh i kontinuerleg bruk.  Av Linux-distribusjonar brukar eg både
5409 Debian, Ubuntu, SuSE og RedHat dagleg.  Eg prøvar å finne det verktyet
5410 som passar best til kvar del av jobben.</p>
5411
5412 <p><strong>Hvilken strategi tror du er den rette å bruke for å få
5413 skoler til å ta i bruk fri programvare?</strong></p>
5414
5415 <p>Det er to målgrupper ein må sikte mot.  Det eine er alle skulane som
5416 manglar eller har eit lite tilfredsstillande opplegg i dag, og ikkje
5417 har råd til å kjøpe noko nytt og blankpussa opplegg.  Der er det om å
5418 gjere å gjere det enkelt for skulane å finne Skulelinux, og gjere det
5419 enkelt for dei å få hjelp til installasjon på skulen.  Gjerne med
5420 lokale kontaktpersonar.  Her er det dugnadsinnsats som må til, for
5421 desse skulane har ikkje råd til å betale for dette.</p>
5422
5423 <p>Den andre og kanskje viktigare målgruppa er dei meir eller mindre
5424 profesjonelle kundane.  Alle store offentlege innkjøp, inkludert
5425 innkjøp av nytt datasystem for skular, må ut på offentleg anbod.
5426 Offentlege anbod er mykje meir lukka enn dei gjev inntrykk av, og både
5427 regelboka og boka med triks for å sminke tilbodet er tjukk.  Det er
5428 vanskeleg å komme inn utan eit solid salsapparat i ryggen.  Kanskje
5429 Skulelinux skulle prøve aktivt å få seg eit partnarskap med eit av dei
5430 store som gjerne vil sterkare inn på den offentlege IT-marknaden?
5431 Nokon som kjenner triksa og har krefter til å ta opp kampen mot både
5432 dårlege anbod og Rudolf Blostrupmoen IT AS.  Leveranse til skulane i
5433 ein kommune er ein god måte å få ein fot inn døra som leverandør til
5434 ein lukrativ kommunemarknad som kjøper alle tenester.  Ta kontakt med
5435 nokon som er passeleg store og ikkje er Microsoft-partnar, og fortell:
5436 «Vi har eit ferdig produkt som du kan selje.  Nei vi skal ikkje ha for
5437 det.  Du kan gjerne gjere kva du vil med det, berre vi får lov til å
5438 hjelpe deg.  Målgruppa er alle kommunar, og det er noko dei vil ha.
5439 Det er eit godt produkt, brukt av mange og godt likt.»</p>
5440
5441  </div>
5442  <div class="tags">
5443
5444
5445
5446   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
5447
5448  </div>
5449 </div>
5450 <div class="padding"></div>
5451
5452 <div class="entry">
5453  <div class="title">
5454  <a href="http://people.skolelinux.org/pere/blog/Skolelinux_intervju__Morten_Amundsen.html">Skolelinux-intervju: Morten Amundsen</a>
5455  </div>
5456  <div class="date">
5457   2011-01-23 12:00
5458  </div>
5459
5460  <div class="body">
5461
5462 <p>Denne gangen er det Tromsøkontoret til Friprog-senteret, og nyvalgt
5463 styremedlem i <a href="http://www.friprogramvareiskolen.no/">foreningen
5464 FRISK</a> jeg har fått i tale i min intervjuserie med
5465 <a href="http://www.skolelinux.org/">Skolelinux</a>-folk.</p>
5466
5467 <p><strong>Hvem er du, og hva driver du med til daglig?</strong></p>
5468
5469 <p>Jeg heter Morten Amundsen og jobber i
5470 <a href="http://www.friprog.no/">Friprog.no</a>, men er for tiden leid
5471 ut til <a href="http://www.bredbandsfylket.no/">Bredbåndsfylket
5472 Troms</a> der jeg jobber med ett prosjekt som heter
5473 "<a href="http://www.bredbandsfylket.no/skolefjoela.157417.no.html">Skolefjøla</a>"
5474 Vi ser på en åpen løsning som integrerer eksisterende lukkete
5475 løsninger sammen med fri programvare. Målet er å gi elever og lærere
5476 en plattform som de kan tilpasse utfra behov.</p>
5477
5478 <p><strong>Hvordan kom du i kontakt med Skolelinux-prosjektet?</strong></p>
5479
5480 <p>Skolelinux har jeg møtt ved flere anledninger opp gjennom åra, både gjennom
5481 entusiastiske skolelinuxbrukere og skeptiske "forståsegpåere" :-)</p>
5482
5483 <p>Jeg husker en leverandør av et stort OS for noen år siden mente at
5484 Skolelinux var kun for hackere og nerder og at ingen seriøse skoler
5485 kunne ta dette i bruk.  Heldigvis er kunnskapen større nå og
5486 skikkelige "IT-folk" søker alltid å utvide sin kunnskap.
5487
5488 <p><strong>Hva er fordelene med Skolelinux slik du ser det?</strong></p>
5489
5490 <p>Ja det er mange fordeler. Uavhengighet, stabilitet, åpenhet, standarder
5491 osv. Tror det er viktig at man ikke begrenser mulighetene på den plattformen
5492 elevene skal jobbe.</p>
5493
5494 <p><strong>Hva er ulempene med Skolelinux slik du ser det?</strong></p>
5495
5496 <p>Det største hinderet er det vi opplever på andre områder rundt
5497 fri programvare, nemlig kunnskap. For mange er det trygt å velge det vi
5498 alltid har valgt. Fordi leverandørene rundt oss sitter på den kunnskapen og
5499 de vi støtter oss på har den samme.  Hvis vi klarer å riste løs litt og
5500 glemme gamle kriger mellom operativsystemer og  leverandører, men sette ned
5501 hva som er viktig og velge ut fra det, så hadde man kanskje kommet ut med
5502 litt andre resultat. Jeg tror IT-folk er konservative og velger tradisjonelt
5503 og det er synd.</p>
5504
5505 <p><strong>Hvilken fri programvare bruker du til daglig?</strong></p>
5506
5507 <p>Jeg bruker Ubuntu, Android, Jolicloud, Open Office, Zimbra, Picasa
5508 og Firefox samt en bråte med tjenester som er webbasert. Det eneste
5509 som er betalingslisens for er OSX.  Ser at jeg jobber mer og mer i
5510 skyen og setter pris på alt jeg slipper egen klient til.  Derfor er
5511 jeg veldig sjarmert av små kjappe operativsystemer som krever minimalt
5512 av maskinvaren.</p>
5513
5514 <p><strong>Hvilken strategi tror du er den rette å bruke for å få
5515 skoler til å ta i bruk fri programvare?</strong></p>
5516
5517 <p>Tror en blanding av krav og informasjon er veien å gå. Krav om
5518 sikkerhet, oppetid og åpne standarder.  Informasjon om muligheter og
5519 alternativer. Her har leverandører, IT-avdelinger og pedagoger en vei
5520 å gå sammen. Det er til slutt LÆRING det dreier seg om, og da må man
5521 få mest mulig læring for pengene man har.</p>
5522
5523  </div>
5524  <div class="tags">
5525
5526
5527
5528   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
5529
5530  </div>
5531 </div>
5532 <div class="padding"></div>
5533
5534 <div class="entry">
5535  <div class="title">
5536  <a href="http://people.skolelinux.org/pere/blog/Skolelinux_intervju__Rub__n_Romero_y_Cordero.html">Skolelinux-intervju: Rubén Romero y Cordero</a>
5537  </div>
5538  <div class="date">
5539   2011-02-16 12:00
5540  </div>
5541
5542  <div class="body">
5543
5544 <p>Styret i foreningen som organiserer skolelinux-utviklersamlinger,
5545 <a href="http://www.friprogramvareiskolen.no/">FRISK</a>, er fullt av
5546 flinke folk.  Denne gangen har jeg fått et ferskt styremedlem som
5547 kommer fra Ubuntu-miljøet i tale.</p>
5548
5549 <p><strong>Hvem er du, og hva driver du med til daglig?</strong></p>
5550
5551 <p>Rubén Romero y Cordero, 81-modell, deltidspappa (50%) for en jente
5552 på 6 år. Jobber i Oslo som Global Sales Executive hos Varnish Software
5553 og til daglig har jeg kontakt med kunder fra hele verden. Min
5554 forkjærlighet for fri programvare har gjort at jeg har nå flere års
5555 erfaring med salg av slike løsninger (bl.a. fra Redpill Linpro og
5556 Freecode) og mye innsikt og kunnskap om det globale IT-markedet.
5557 Ellers er jeg involvert i flere prosjekter bl.a. er jeg Ubuntu
5558 Community medlem, kontaktpersonen for Ubuntu Norge og driveren av
5559 SpreadUbuntu marketing prosjektet og nå fersk styremedlem i FRISK. Jeg
5560 har brukt GNU/Linux siden 1997.</p>
5561
5562 <p><strong>Hvordan kom du i kontakt med Skolelinux-prosjektet?</strong></p>
5563
5564 <p>Som Debian bruker siden slutten av 90-tallet var det uunngåelig å
5565 ikke komme bort i Skolelinux. Dette var vel i slutten av 2001 når jeg
5566 var student ved UiO. Flere år senere fikk jeg lastet og testet Venus
5567 (Skolelinux 1.0) på release dagen.</p>
5568
5569 <p><strong>Hva er fordelene med Skolelinux slik du ser det?</strong></p>
5570
5571 <p>Fri programvare bygges sten for sten i det åpne, slik at koden og
5572 prosessen den lages på kan gjennomskues av andre enn de som har laget
5573 det. Det er et vitenskapelig og gjennomsiktig måte å lage programvare
5574 på.</p>
5575
5576 <p>Skoler i vårt samfunn skal være steder hvor vitenskapelig kunnskap
5577 deles til alle.  I dag har vi ikke et vitenskapelig tilnærming til
5578 hvordan programvaren som brukes på skolen lages. Skolelinux bringer
5579 inn at slik tilnærming i skoleverkets klasserom, siden
5580 operativsystemet er en åpent platform som gir skolene muligheten til å
5581 dra nytte av programvare som er laget av tusenvis av mennesker verden
5582 rundt og som gir elevene så vel som lærerne muligheten til å bruke,
5583 dele, forandre og forbedre OSet sitt uten begrensninger. I den
5584 forbindelsen representerer Skolelinux også konkrete resultater utfra
5585 samhandling på tvers av grenser.</p>
5586
5587 <p>Når det gjelder de tekniske fordelene av Skolelinux er jeg sikker
5588 på at andre enn meg har allerede beskrevet disse bedre enn det jeg
5589 kan.  Men jeg kan likevel tilføye noe: Skolelinux som sådan er en
5590 community-drevet operativsystemplatform. Som i ethvert
5591 community-prosjekt har alle Skolelinux brukere muligheten til å
5592 påvirke retning av prosjektet og resultatet som gjenspeiles i
5593 programvaren. Dette kommer sjeldent frem og jeg mener at det er noe
5594 som burde fokuseres mer på.</p>
5595
5596 <p><strong>Hva er ulempene med Skolelinux slik du ser det?</strong></p>
5597
5598 <p>De største ulempene er:</p>
5599
5600 <ul>
5601 <li>Mangel på kompetanse</li>
5602 <li>Mangel av administrative verktøy som kunne hjelpe lokale IT
5603   avdelinger å bruke Skolelinux til mer enn bare en tjener for
5604   terminalklienter. Et eksempel: Zentyal sin web-dashboard.</li>
5605 </ul>
5606
5607 <p>Bedre og mer intuitive administrative verktøy kunne løst deler av
5608 problemet, men det er unektelig at ved bruk av Skolelinux må
5609 IT-personalet vite hva de gjør for å få ting gjort riktig, eller i det
5610 hele tatt. Med andre platformer er kompetansen enklere tilgjengelig og
5611 løsningene kan fungere på en tilfredstillende, om ikke riktig
5612 måte.</p>
5613
5614 <p><strong>Hvilken fri programvare bruker du til daglig?</strong></p>
5615
5616 <p>Har brukt GNU/Linux utelukkende sommitt skrivebord OS siden 2000. I
5617 dag bruker jeg Ubuntu og gjør det meste med friprogramvare verktøyene
5618 som er tilgjengelige der. Med over 20.000 programmer å velge mellom er
5619 dette mer enn nok for de fleste brukerne.</p>
5620
5621 <p><strong>Hvilken strategi tror du er den rette å bruke for å få
5622 skoler til å ta i bruk fri programvare?</strong></p>
5623
5624 <p>Opplysning og pragmatikk.  Vi prøver å løse problemer med bruk av
5625 programvare. De fleste utfordringene skolene har på IKT-siden kan
5626 løses ved hjelp av friprogramvareverktøy i dag. Det som trenges er
5627 opplysning, kunnskap og kompetanse.</p>
5628
5629  </div>
5630  <div class="tags">
5631
5632
5633
5634   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
5635
5636  </div>
5637 </div>
5638 <div class="padding"></div>
5639
5640 <div class="entry">
5641  <div class="title">
5642  <a href="http://people.skolelinux.org/pere/blog/Skolelinux_intervju__Astri_Sletteng.html">Skolelinux-intervju: Astri Sletteng</a>
5643  </div>
5644  <div class="date">
5645   2011-02-27 12:50
5646  </div>
5647
5648  <div class="body">
5649
5650 <p>En dame som har bidratt lenge til fri programvare i skoleverket og
5651 i foreningen som organiserer skolelinux-utviklersamlinger,
5652 <a href="http://www.friprogramvareiskolen.no/">FRISK</a>, er neste
5653 intervjuoffer.  Det er en glede å her presentere en lærer fra Håkvik.</p>
5654
5655 <p><strong>Hvem er du, og hva driver du med til daglig?</strong></p>
5656
5657 <p>Jeg heter Astri Sletteng. Jeg er lærer og IKT veileder ved Håkvik
5658 skole i Narvik kommune.  Min bakgrunn når det gjelder IKT: Av formell
5659 utdannelse har jeg lærerutdanning, Master i skoleledelse og IKT for
5660 lærere. Har jobba som IKT veileder siden 2002.</p>
5661
5662 <p>Det viktigste for meg som IKT veileder er å få fundamentert den
5663 5. basisferdigheten, digital kompetanse ved skolen min på en god måte
5664 slik at hele skolesamfunnet tar i bruk IKT i alle fag. Dette arbeidet
5665 gjøres i nært samarbeid med skolens ledelse.</p>
5666
5667 <p>Min viktigste jobb som IKT veileder er å være motivator og pådriver
5668 i IKT arbeidet ved skolen.</p>
5669
5670 <p><strong>Hvordan kom du i kontakt med Skolelinux-prosjektet?</strong></p>
5671
5672 <p>Jobber i en kommune hvor vi satser på Fri programvare. I 2004 ble
5673 det gjort et politisk vedtak om at vi skulle innføre Skolelinux ved
5674 alle skolene i kommunen. Jeg har dermed en god del erfaring med
5675 Skolelinux, samt annen fri programvare som Open Office, Joomla, Moodle
5676 etc.</p>
5677
5678 <p><strong>Hva er fordelene med Skolelinux slik du ser det?</strong></p>
5679
5680 <p>Siden vi jobber med åpen kildekode kan vi få programmene og
5681 produktene tilpasset vår bruk. Det er jo heller ikke en ulempe at
5682 skolen kommer bedre ut økonomisk, men først og fremst er det viktig
5683 for oss at vi har digitale systemer som gjør at vi kan følge
5684 læreplanen i alle fag. Det syns jeg at vi kan gjøre gjennom
5685 Skolelinux.</p>
5686
5687 <p><strong>Hva er ulempene med Skolelinux slik du ser det?</strong></p>
5688
5689 <p>Skolen er avhengige av å ha folk på IT avdelinga i kommunen som kan
5690 drive support, og være tilgjengelige når vi trenger hjelp. Det er en
5691 ulempe at ikke alle på denne avdelingen nødvendigvis er god på
5692 Linux.</p>
5693
5694 <p>Vi har også noen utfordringer når det kommer til spesielle
5695 programmer som enkelte elever er avhengige av ? og som ikke er
5696 plattform uavhengige. Her har vi i Friprog-verden, men også
5697 departement en jobb å gjøre.</p>
5698
5699 <p><strong>Hvilken fri programvare bruker du til daglig?</strong></p>
5700
5701 <p>Skolen vår bruker Skolelinux, Open Office, Iceweazel (Mozilla),
5702 VLC, Tux paint, Scribus, FreeMind, GIMP, digiKam, Ksnapshot, GeoGebra,
5703 Moodle (innført på alle klassetrinn + som et administrativt verktøy)
5704 og Joomla som hjemmeside.<p>
5705
5706 <p>Det er de jeg kommer på i farten. I tillegg har vi Smartboard
5707 installert på server, men det regnes vel ikke som fri programvare?</p>
5708
5709 <p><strong>Hvilken strategi tror du er den rette å bruke for å få
5710 skoler til å ta i bruk fri programvare?</strong></p>
5711
5712 <p>Først og fremst trenger skolen oppetider på sine datasystemer. Syns
5713 også at det at vi kan få tilpasset plattform og systemer til vår bruk
5714 er en god strategi å bruke.</p>
5715
5716  </div>
5717  <div class="tags">
5718
5719
5720
5721   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
5722
5723  </div>
5724 </div>
5725 <div class="padding"></div>
5726
5727 <div class="entry">
5728  <div class="title">
5729  <a href="http://people.skolelinux.org/pere/blog/Skolelinux_intervju__Odin_Hetland_N__sen.html">Skolelinux-intervju: Odin Hetland Nøsen</a>
5730  </div>
5731  <div class="date">
5732   2011-03-28 13:30
5733  </div>
5734
5735  <div class="body">
5736
5737 <p>Mine bloggposter om Linux i skolene i Norge førte til at inspektør
5738 og ildsjel på Harestad skole tok kontakt og fortalte at de bruker
5739 Linux på sin skole, og lurte på om de kunne bidra til å gjøre
5740 fordelene kjent.  Riktig nok bruker de ikke
5741 <a href="http://www.skolelinux.org/">Skolelinux</a> på denne skolen,
5742 men jeg synes dette er en god anledning til å gjøre flere fasetter
5743 rundt Linux-økosystemet kjent, og tok et lite intervju.</p>
5744
5745 <p><strong>Hvem er du, og hva driver du med til daglig?</strong></p>
5746
5747 <p>Mitt navn er Odin Hetland Nøsen og er en 70-modell. Jeg er bosatt i
5748 Stavanger og jobber nå på 9. året som undervisninginspektør på
5749 Harestad skole i Randaberg kommune (nabokommune til Stavanger).</p>
5750
5751 <p><strong>Hvordan kom du i kontakt med Skolelinux-prosjektet?</strong></p>
5752
5753 <p>I 2002 begynte daværende IKT-ansvarlige og jeg et arbeid på skolen
5754 med å gå over fra Win98 til... noe annet. Vi testet en rekke
5755 forskjellige løsninger, deriblant Skolelinux, men endte opp med
5756 RedHat. Skolelinux var den gang ikke modent for det vi ville ha.  Jeg
5757 har siden fulgt jevnlig med på hva skolelinux holder på med, men har
5758 hele tiden vært bedre fornøyd med vår egen "standardiserte" løsning på
5759 RedHat/CentOS og Fedora. Vi snuser for tiden på Ubuntu som løsning på
5760 klientsiden.</p>
5761
5762 <p>I dag har vi på skolen vår en større linux-løsning med 400 klienter
5763 som kjører en blanding av LTSP (tynnklient) og DRBL (tykk klient uten
5764 harddisk) med en masse tjenere på serverrommet. Vi drifter hele
5765 sulamitten selv med webtjener, eposttjener, webmail, filtjenere,
5766 virtuelle tjenere osv.  Og IT-ansvarlig har en 80% stilling som
5767 IT-ansvarlig - og så er han KoH-lærer i de resterende 20% :-)</p>
5768
5769 <p>Du kan få en ide om hva vi holder på med om du går inn på
5770 <a href="http://www.gnuskole.no/">http://www.gnuskole.no/</a>.</p>
5771
5772 <p>For å ta brodden av frykten for at ildsjeler gjør skolen sårbar om
5773 ildsjelene falle fra, har jeg forsikret kommunen og skolesjefen i
5774 Randaberg om at det finnes godt kommersielle tjenester vi kan benytte
5775 oss av - om det skulle bli nødvendig. Vi er tre stykker i kommunen som
5776 nå har <strong>god</strong> linux-kompetanse ift. å drifte et større
5777 system.  IT-avdelingen i kommunen vil ikke ta på oss med ildtang -
5778 selv om vi nok har større IT-kompetanse mot linux enn det de selv har
5779 mot windows (de kjøper en <strong>masse</strong> konsulenttjenester
5780 fra ErgoGroup).</p>
5781
5782 <p>I kvantitet er Harestad og Grødem skole tilsammen et større
5783 IT-system enn resten av Randaberg kommune + Kvitsøy og Rennesøy, som
5784 kommunen også har driftsansvar for.  Vi har som sagt rundt 800
5785 maskiner, mens kommunen med sitt driftsansvar har ansvar for rundt 500
5786 maskiner. Det er selvfølgelig litt forskjell i hvor kritiske
5787 tjenestene våre er, men det gir allikevel et litt rart bilde når
5788 IT-avdelingen overhode ikke er interessert i å snakke med oss om
5789 hvordan vi gjør ting :-)</p>
5790
5791 <p><strong>Hva er fordelene med Skolelinux slik du ser det?</strong></p>
5792
5793 <p>Fra linux-perspektivet (ikke bare Skolelinux) er det en fordel av
5794 systemet er basert på fri programvare - og dermed fritt i ordets mange
5795 betydninger. Det er alt vi trenger: stabilt, relativt enkelt å drifte
5796 (tross alt - et større windowssystem er ikke enkelt å holde live det
5797 heller), rimelig i innkjøp og drift, og sist, men ikke minst, det er
5798 moderne for sluttbruker! Linux, i sine mange varianter,
5799 <strong>ser</strong> nytt ut, fordi det hele tiden blir
5800 oppdatert. Derfor lever systemet opp til hvordan elever forventer at
5801 et moderne GUI skal være (i motsetning til WinXP :-).</p>
5802
5803 <p>Vi var veldig pragmatiske da vi begynte med linux i skolen. Det var
5804 billig, det fungerte og kunne bruke alle de gamle windows-maskinene
5805 som "nye" tynne klienter.  I dag er vi mer bevisste fri
5806 programvare-tilhengere.  Vi har oppdaget hva det er - og vi liker
5807 det!</p>
5808
5809 <p>En av de <strong>store</strong> fordelene med fri programvare er at
5810 vi kan installere tjenester vi ønsker å tilby brukerne våre - uten å
5811 måtte tenke på om vi har råd til lisensene (fordi det er ingen). Alt
5812 vi setter i produksjon er ut i fra brukernes behov og vår kapasitet
5813 til å drifte dem. Vi skreddersyr tjenestene etter behovet og dermed
5814 trenger vi ikke ende opp med å kjøpe en pakke der vi egentlig bare var
5815 interessert i en liten del av den.</p>
5816
5817 <p>Bruk av linux frigjør ikke økonomiske midler, fordi midlene til IKT
5818 i skole er for få i utgangspunktet - men vi får så
5819 <strong>mye</strong> mer igjen for dem når vi bruker en linux-løsning
5820 fremfor en windows-løsning. I praksis ser vi at vi måtte ut med det
5821 dobbelte på budsjettet vårt om vi skulle hatt en tilsvarende
5822 windows-løsning, som det vi i dag drifter med linux.</p>
5823
5824 <p><strong>Hva er ulempene med Skolelinux slik du ser det?</strong></p>
5825
5826 <p>Ikke all pedagogisk programvare er tilgjengelig. Det er en del
5827 programvare i skolen som er laget med utviklerverktøy som bare virker
5828 i windows, f.eks. Drillpro, LingDys/LingWrite. Det er også
5829 "programmer" som bare virker om du har tilgang til Microsoft Office,
5830 f.eks. AskiRaski.</p>
5831
5832 <p>Vi sliter også litt med at video-codecer ikke alltid er like lett å
5833 få opp å gå på klientene. Det er alltid en eller annen videosnutt fra
5834 nrk.no som ikke er så samarbeidsvillig, uansett mediaplayer.</p>
5835
5836 <p><strong>Hvilken fri programvare bruker du til daglig?</strong></p>
5837
5838 <p>Alt :-) På skolen bruker vi det som finnes og som er nyttig. Det vi
5839 bruker mest er Firefox (jobber med Chrome, fordi det er
5840 <strong>mye</strong> raskere med Flash enn Firefox), OpenOffice (skal
5841 over til LibreOffice), GIMP osv. Standardpakken av
5842 sluttbrukerprogrammer.</p>
5843
5844 <p>På tjenernivå bruker vi OpenWebMail (skal over til Zimbra), Exim
5845 osv.</p>
5846
5847 <p>Personlig bruker jeg de fleste programmer over flere plattformer,
5848 men jeg har lagt meg til en vane å prioritere bruken av fri
5849 programvare også i Windows 7 og OSX.</p>
5850
5851 <p><strong>Hvilken strategi tror du er den rette å bruke for å få
5852 skoler til å ta i bruk fri programvare?</strong></p>
5853
5854 <p>Jeg er langt i fra sikker. For det første handler det mye om at
5855 IKT-avdelingen i kommunen ofte er de som styrer hva som er IKT på
5856 skolene - og de liker å bruke avtalene med Microsoft, som de garantert
5857 har fra før.  Dessuten - Select 6-avtalen til skolene gjør Microsoft
5858 skvettbillig.</p>
5859
5860 <p>Vi la vekt på effektiv drift av systemet - og at vi kunne øke
5861 antall maskiner uten å måtte øke budsjett for utstyr eller personell
5862 særlig mye, enn om vi hadde gått for en Microsoft-løsning. I praksis
5863 ser vi at en ren linux-installasjon driftes til halve prisen av en
5864 Microsoft-løsning.</p>
5865
5866 <p>Vi har i praksis også sett at det lærerne (og elevene) liker er at
5867 vi tilbyr <strong>veldig</strong> mange tjenester som ikke er så
5868 vanlige i en Microsoft-løsning. Det er ikke så vanlig at
5869 <strong>elevene</strong> også har epost, hjemmekontor osv. Det har vi
5870 også brukt som et vellykket argument mot Microsoft.</p>
5871
5872 <p>Den beste måten er selvfølgelig at noen bare bestemmer
5873 det. Problemet er å få dem som har makt til å bestemme det til faktisk
5874 å gjøre det ;-)</p>
5875
5876  </div>
5877  <div class="tags">
5878
5879
5880
5881   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
5882
5883  </div>
5884 </div>
5885 <div class="padding"></div>
5886
5887 <div class="entry">
5888  <div class="title">
5889  <a href="http://people.skolelinux.org/pere/blog/Skolelinux_intervju__Marius_Kotsbak.html">Skolelinux-intervju: Marius Kotsbak</a>
5890  </div>
5891  <div class="date">
5892   2011-04-10 11:00
5893  </div>
5894
5895  <div class="body">
5896
5897 <p>Neste mann ut er Marius Kotsbak, styremedlem i
5898 <a href="http://www.friprogramvareiskolen.no/">FRISK</a> og mangeårig
5899 bidragsyter i
5900 <a href="http://www.skolelinux.org/">Skolelinux</a>-prosjektet.</p>
5901
5902 <p><strong>Hvem er du, og hva driver du med til daglig?</strong></p>
5903
5904 <p>Jeg er en systemutvikler/kybernetiker og jobber med dette til
5905 daglig. På fritiden tester jeg ut/bruker mye fri programvare, og
5906 bidrar med testing og utvikling når jeg ser stort nok behov for det og
5907 jeg har noe å bidra med.</p>
5908
5909 <p><strong>Hvordan kom du i kontakt med Skolelinux-prosjektet?</strong></p>
5910
5911 <p>Hmm, det er lenge siden, så det er nesten så jeg ikke husker. Jeg
5912 hadde vel hørt om prosjektet i media før en gjeng i Trondheim startet
5913 opp SPIST, Skolelinux-prosjektet i Sør-Trøndelag, hvor vi hjalp noen
5914 skoler i nærområdet med å installere Skolelinux og finne brukt
5915 IT-utstyr til disse. Det var moro å gjøre noe praktisk for å spre
5916 Skolelinux, og å se hvor fort gjort det var å sette opp utrangerte
5917 klientmaskiner og få disse opp som tynnklienter på helt nye datasaler
5918 på skolene, kun med kostnaden til servere.</p>
5919
5920 <p><strong>Hva er fordelene med Skolelinux slik du ser det?</strong></p>
5921
5922 <p>Det er et system spesielt skreddersydd for drift av et stort antall
5923 klienter mot servere, og da spesielt i henhold til skolers behov.  Det
5924 er enkelt og billig å installere og drifte, og det trenger ikke ny
5925 maskinvare for god ytelse.</p>
5926
5927 <p><strong>Hva er ulempene med Skolelinux slik du ser det?</strong></p>
5928
5929 <p>Hardwarestøtten kunne vært bedre og i enda større grad
5930 installerbart rett ut av boksen.  Distribusjonen har til tider hatt
5931 litt gammel programvare pga. at den følger Debian sine utgivelser.
5932 Kanskje man skulle vurdert en versjon basert på Ubuntu eller andre
5933 distribusjoner i tillegg?</p>
5934
5935 <p><strong>Hvilken fri programvare bruker du til daglig?</strong></p>
5936
5937 <p>Oi, det er ikke lite. Her er det jeg kommer på i farta.  Jeg bruker
5938 Linux og Ubuntu, og på Ubuntu programene Firefox, Thunderbird,
5939 Chromium, Pidgin, Digikam, OpenOffice, Wireshark, git og irssi.
5940 Telefonen min er en Android, og der bruker jeg programmene K-9 Mail,
5941 OI Shopping list, Shuffle, ZXing, OI Notepad og ADW Desktop.  På jobb
5942 bruker jeg JBoss, Eclipse, uCLinux for Blackfin, RCF, Qt, Maven, og
5943 boost-bibliotekene for C++.</p>
5944
5945 <p><strong>Hvilken strategi tror du er den rette å bruke for å få
5946 skoler til å ta i bruk fri programvare?</strong></p>
5947
5948 <p>En bør fokusere på totalkostnader inkludert driftsbehov,
5949 fleksibilitet, åpenhet og ikke låsing til en leverandør framfor sparte
5950 lisenskostnader, samt programvarens kvalitet og fortrinn, og at den
5951 fritt kan brukes på et ubegrenset antall PC-er, også hjemme hos
5952 elevene.  En bør også forbedre den fri programvaren ved testing,
5953 bugrapportering og kodebidrag om man kan, og ikke anbefale programvare
5954 uten at man har forsikret seg at den har tilstrekkelig kvalitet,
5955 ellers kan man lett oppnå det motsatte.  Tror en bør selge inn
5956 konseptet til fylkes-/statsnivå, kanskje med bidrag til
5957 utviklingsarbeid fra disse som alle landets skoler kan få glede
5958 av.</p>
5959
5960  </div>
5961  <div class="tags">
5962
5963
5964
5965   Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>.
5966
5967  </div>
5968 </div>
5969 <div class="padding"></div>
5970
5971  <p style="text-align: right;"><a href="debian edu.rss"><img src="http://people.skolelinux.org/pere/blog/xml.gif" alt="RSS Feed" width="36" height="14"></a></p>
5972
5973
5974
5975
5976 <div id="sidebar">
5977
5978 <h2>Archive</h2>
5979 <ul>
5980
5981 <li>2011
5982 <ul>
5983
5984 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/01/">January (16)</a></li>
5985
5986 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/02/">February (6)</a></li>
5987
5988 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/03/">March (6)</a></li>
5989
5990 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/04/">April (4)</a></li>
5991
5992 </ul></li>
5993
5994 <li>2010
5995 <ul>
5996
5997 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
5998
5999 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
6000
6001 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
6002
6003 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
6004
6005 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
6006
6007 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
6008
6009 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (12)</a></li>
6010
6011 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/08/">August (13)</a></li>
6012
6013 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/09/">September (7)</a></li>
6014
6015 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/10/">October (9)</a></li>
6016
6017 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/11/">November (13)</a></li>
6018
6019 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/12/">December (12)</a></li>
6020
6021 </ul></li>
6022
6023 <li>2009
6024 <ul>
6025
6026 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
6027
6028 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
6029
6030 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
6031
6032 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
6033
6034 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
6035
6036 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
6037
6038 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
6039
6040 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
6041
6042 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
6043
6044 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
6045
6046 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
6047
6048 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
6049
6050 </ul></li>
6051
6052 <li>2008
6053 <ul>
6054
6055 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
6056
6057 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
6058
6059 </ul></li>
6060
6061 </ul>
6062
6063
6064
6065 <h2>Tags</h2>
6066 <ul>
6067
6068  <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (13)</a></li>
6069
6070  <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
6071
6072  <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
6073
6074  <li><a href="http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (2)</a></li>
6075
6076  <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (10)</a></li>
6077
6078  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (49)</a></li>
6079
6080  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (63)</a></li>
6081
6082  <li><a href="http://people.skolelinux.org/pere/blog/tags/digistan">digistan (7)</a></li>
6083
6084  <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (88)</a></li>
6085
6086  <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (7)</a></li>
6087
6088  <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (11)</a></li>
6089
6090  <li><a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju (9)</a></li>
6091
6092  <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (13)</a></li>
6093
6094  <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (8)</a></li>
6095
6096  <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (4)</a></li>
6097
6098  <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
6099
6100  <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (12)</a></li>
6101
6102  <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (120)</a></li>
6103
6104  <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (116)</a></li>
6105
6106  <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (20)</a></li>
6107
6108  <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (38)</a></li>
6109
6110  <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (11)</a></li>
6111
6112  <li><a href="http://people.skolelinux.org/pere/blog/tags/rfid">rfid (2)</a></li>
6113
6114  <li><a href="http://people.skolelinux.org/pere/blog/tags/robot">robot (4)</a></li>
6115
6116  <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
6117
6118  <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (23)</a></li>
6119
6120  <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (3)</a></li>
6121
6122  <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (24)</a></li>
6123
6124  <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (1)</a></li>
6125
6126  <li><a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (8)</a></li>
6127
6128  <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (20)</a></li>
6129
6130  <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (1)</a></li>
6131
6132  <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (15)</a></li>
6133
6134 </ul>
6135
6136 </div>
6137 </body>
6138 </html>