blog/Caching_password__user_and_group_on_a_roaming_Debian_laptop.html

   1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
   2           "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
   3 <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr">
   4   <head>
   5     <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
   6     <title>Petter Reinholdtsen: Caching password, user and group on a roaming Debian laptop</title>
   7     <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css" />
   8     <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/vim.css" />
   9
  10
  11   </head>
  12   <body>
  13     <div class="title">
  14  <h1>
  15      <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
  16
  17  </h1>
  18
  19 </div>
  20
  21
  22     <div class="entry">
  23       <div class="title">Caching password, user and group on a roaming Debian laptop</div>
  24       <div class="date"> 1st July 2010</div>
  25       <div class="body"><p>For a laptop, centralized user directories and password checking is
  26 a bit troubling.  Laptops are typically used also when not connected
  27 to the network, and it is vital for a user to be able to log in or
  28 unlock the screen saver also when a central server is unavailable.
  29 This is possible by caching passwords and directory information (user
  30 and group attributes) locally, and the packages to do so are available
  31 in Debian.  Here follow two recipes to set this up in Debian/Squeeze.
  32 It is also possible to set up in Debian/Lenny, but require more manual
  33 setup there because pam-auth-update is missing in Lenny.</p>
  34
  35 <h2>LDAP/Kerberos + nscd + libpam-ccreds + libpam-mklocaluser/pam_mkhomedir</h2>
  36
  37 This is the traditional method with a twist.  The password caching is
  38 provided by libpam-ccreds (version 10-4 or later is needed on
  39 Squeeze), and the directory caching is done by nscd.  The directory
  40 lookup and password checking is done using LDAP.  If one want to use
  41 Kerberos for password checking the libpam-ldapd package can be
  42 replaced with libpam-krb5 or libpam-heimdal.  If one is happy having a
  43 local home directory with the path listed in LDAP, one can use the
  44 pam_mkhomedir module from pam-modules to make this happen instead of
  45 using libpam-mklocaluser.  A setup for pam-auth-update to enable
  46 pam_mkhomedir will have to be written until a fix for
  47 <a href="http://bugs.debian.org/568577">bug #568577</a> is in the
  48 archive.  Because I believe it is a bad idea to have local home
  49 directories using misleading paths like /site/server/partition/, I
  50 prefer to create a local user with the home directory in /home/.  This
  51 is done using the libpam-mklocaluser package.</p>
  52
  53 <p>These packages need to be installed and configured</p>
  54
  55 <blockquote><pre>
  56 libnss-ldapd libpam-ldapd nscd libpam-ccreds libpam-mklocaluser
  57 </pre></blockquote>
  58
  59 <p>The ldapd packages will ask for LDAP connection information, and
  60 one have to fill in the values that fits ones own site.  Make sure the
  61 PAM part uses encrypted connections, to make sure the password is not
  62 sent in clear text to the LDAP server.  I've been unable to get TLS
  63 certificate checking for a self signed certificate working, which make
  64 LDAP authentication unsafe for Debian Edu (nslcd is not checking if it
  65 is talking to the correct LDAP server), and very much welcome feedback
  66 on how to get this working.</p>
  67
  68 <p>Because nscd do not have a default configuration fit for offline
  69 caching until <a href="http://bugs.debian.org/485282">bug #485282</a>
  70 is fixed, this configuration should be used instead of the one
  71 currently in /etc/nscd.conf.  The changes are in the fields
  72 reload-count and positive-time-to-live, and is based on the
  73 instructions I found in the
  74 <a href="http://www.flyn.org/laptopldap/">LDAP for Mobile Laptops</a>
  75 instructions by Flyn Computing.</p>
  76
  77 <blockquote><pre>
  78         debug-level             0
  79         reload-count            unlimited
  80         paranoia                no
  81
  82         enable-cache            passwd          yes
  83         positive-time-to-live   passwd          2592000
  84         negative-time-to-live   passwd          20
  85         suggested-size          passwd          211
  86         check-files             passwd          yes
  87         persistent              passwd          yes
  88         shared                  passwd          yes
  89         max-db-size             passwd          33554432
  90         auto-propagate          passwd          yes
  91
  92         enable-cache            group           yes
  93         positive-time-to-live   group           2592000
  94         negative-time-to-live   group           20
  95         suggested-size          group           211
  96         check-files             group           yes
  97         persistent              group           yes
  98         shared                  group           yes
  99         max-db-size             group           33554432
 100         auto-propagate          group           yes
 101
 102         enable-cache            hosts           no
 103         positive-time-to-live   hosts           2592000
 104         negative-time-to-live   hosts           20
 105         suggested-size          hosts           211
 106         check-files             hosts           yes
 107         persistent              hosts           yes
 108         shared                  hosts           yes
 109         max-db-size             hosts           33554432
 110
 111         enable-cache            services        yes
 112         positive-time-to-live   services        2592000
 113         negative-time-to-live   services        20
 114         suggested-size          services        211
 115         check-files             services        yes
 116         persistent              services        yes
 117         shared                  services        yes
 118         max-db-size             services        33554432
 119 </pre></blockquote>
 120
 121 <p>While we wait for a mechanism to update /etc/nsswitch.conf
 122 automatically like the one provided in
 123 <a href="http://bugs.debian.org/496915">bug #496915</a>, the file
 124 content need to be manually replaced to ensure LDAP is used as the
 125 directory service on the machine.  /etc/nsswitch.conf should normally
 126 look like this:</p>
 127
 128 <blockquote><pre>
 129 passwd:         files ldap
 130 group:          files ldap
 131 shadow:         files ldap
 132 hosts:          files mdns4_minimal [NOTFOUND=return] dns mdns4
 133 networks:       files
 134 protocols:      files
 135 services:       files
 136 ethers:         files
 137 rpc:            files
 138 netgroup:       files ldap
 139 </pre></blockquote>
 140
 141 <p>The important parts are that ldap is listed last for passwd, group,
 142 shadow and netgroup.</p>
 143
 144 <p>With these changes in place, any user in LDAP will be able to log
 145 in locally on the machine using for example kdm, get a local home
 146 directory created and have the password as well as user and group
 147 attributes cached.
 148
 149 <h2>LDAP/Kerberos + nss-updatedb + libpam-ccreds +
 150   libpam-mklocaluser/pam_mkhomedir</h2>
 151
 152 <p>Because nscd have had its share of problems, and seem to have
 153 problems doing proper caching, I've seen suggestions and recipes to
 154 use nss-updatedb to copy parts of the LDAP database locally when the
 155 LDAP database is available.  I have not tested such setup, because I
 156 discovered sssd.</p>
 157
 158 <h2>LDAP/Kerberos + sssd + libpam-mklocaluser</h2>
 159
 160 <p>A more flexible and robust setup than the nscd combination
 161 mentioned earlier that has shown up recently, is the
 162 <a href="https://fedorahosted.org/sssd/">sssd</a> package from Redhat.
 163 It is part of the <a href="http://www.freeipa.org/">FreeIPA</A> project
 164 to provide a Active Directory like directory service for Linux
 165 machines.  The sssd system combines the caching of passwords and user
 166 information into one package, and remove the need for nscd and
 167 libpam-ccreds.  It support LDAP and Kerberos, but not NIS.  Version
 168 1.2 do not support netgroups, but it is said that it will support this
 169 in version 1.5 expected to show up later in 2010.  Because the
 170 <a href="http://packages.qa.debian.org/s/sssd.html">sssd package</a>
 171 was missing in Debian, I ended up co-maintaining it with Werner, and
 172 version 1.2 is now in testing.
 173
 174 <p>These packages need to be installed and configured to get the
 175 roaming setup I want</p>
 176
 177 <blockquote><pre>
 178 libpam-sss libnss-sss libpam-mklocaluser
 179 </pre></blockquote>
 180
 181 The complete setup of sssd is done by editing/creating
 182 <tt>/etc/sssd/sssd.conf</tt>.
 183
 184 <blockquote><pre>
 185 [sssd]
 186 config_file_version = 2
 187 reconnection_retries = 3
 188 sbus_timeout = 30
 189 services = nss, pam
 190 domains = INTERN
 191
 192 [nss]
 193 filter_groups = root
 194 filter_users = root
 195 reconnection_retries = 3
 196
 197 [pam]
 198 reconnection_retries = 3
 199
 200 [domain/INTERN]
 201 enumerate = false
 202 cache_credentials = true
 203
 204 id_provider = ldap
 205 auth_provider = ldap
 206 chpass_provider = ldap
 207
 208 ldap_uri = ldap://ldap
 209 ldap_search_base = dc=skole,dc=skolelinux,dc=no
 210 ldap_tls_reqcert = never
 211 ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt
 212 </pre></blockquote>
 213
 214 <p>I got the same problem here with certificate checking.  Had to set
 215 "ldap_tls_reqcert = never" to get it working.</p>
 216
 217 <p>With the libnss-sss package in testing at the moment, the
 218 nsswitch.conf file is update automatically, so there is no need to
 219 modify it manually.</p>
 220
 221 <p>If you want to help out with implementing this for Debian Edu,
 222 please contact us on debian-edu@lists.debian.org.</p>
 223 </div>
 224
 225       <div class="tags">Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.</div>
 226
 227
 228     </div>
 229
 230
 231
 232
 233     <div id="sidebar">
 234
 235
 236
 237 <h2>Archive</h2>
 238 <ul>
 239
 240 <li>2016
 241 <ul>
 242
 243 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/01/">January (3)</a></li>
 244
 245 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/02/">February (2)</a></li>
 246
 247 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/03/">March (3)</a></li>
 248
 249 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/04/">April (3)</a></li>
 250
 251 </ul></li>
 252
 253 <li>2015
 254 <ul>
 255
 256 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/01/">January (7)</a></li>
 257
 258 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/02/">February (6)</a></li>
 259
 260 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/03/">March (1)</a></li>
 261
 262 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/04/">April (4)</a></li>
 263
 264 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/05/">May (3)</a></li>
 265
 266 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/06/">June (4)</a></li>
 267
 268 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/07/">July (6)</a></li>
 269
 270 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/08/">August (2)</a></li>
 271
 272 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/09/">September (2)</a></li>
 273
 274 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/10/">October (9)</a></li>
 275
 276 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/11/">November (6)</a></li>
 277
 278 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/12/">December (3)</a></li>
 279
 280 </ul></li>
 281
 282 <li>2014
 283 <ul>
 284
 285 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/01/">January (2)</a></li>
 286
 287 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/02/">February (3)</a></li>
 288
 289 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/03/">March (8)</a></li>
 290
 291 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/04/">April (7)</a></li>
 292
 293 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/05/">May (1)</a></li>
 294
 295 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/06/">June (2)</a></li>
 296
 297 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/07/">July (2)</a></li>
 298
 299 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/08/">August (2)</a></li>
 300
 301 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/09/">September (5)</a></li>
 302
 303 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/10/">October (6)</a></li>
 304
 305 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/11/">November (3)</a></li>
 306
 307 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/12/">December (5)</a></li>
 308
 309 </ul></li>
 310
 311 <li>2013
 312 <ul>
 313
 314 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/01/">January (11)</a></li>
 315
 316 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/02/">February (9)</a></li>
 317
 318 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/03/">March (9)</a></li>
 319
 320 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/04/">April (6)</a></li>
 321
 322 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/05/">May (9)</a></li>
 323
 324 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/06/">June (10)</a></li>
 325
 326 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/07/">July (7)</a></li>
 327
 328 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/08/">August (3)</a></li>
 329
 330 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/09/">September (5)</a></li>
 331
 332 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/10/">October (7)</a></li>
 333
 334 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/11/">November (9)</a></li>
 335
 336 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/12/">December (3)</a></li>
 337
 338 </ul></li>
 339
 340 <li>2012
 341 <ul>
 342
 343 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/01/">January (7)</a></li>
 344
 345 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/02/">February (10)</a></li>
 346
 347 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/03/">March (17)</a></li>
 348
 349 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/04/">April (12)</a></li>
 350
 351 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/05/">May (12)</a></li>
 352
 353 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/06/">June (20)</a></li>
 354
 355 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/07/">July (17)</a></li>
 356
 357 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/08/">August (6)</a></li>
 358
 359 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/09/">September (9)</a></li>
 360
 361 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/10/">October (17)</a></li>
 362
 363 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/11/">November (10)</a></li>
 364
 365 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/12/">December (7)</a></li>
 366
 367 </ul></li>
 368
 369 <li>2011
 370 <ul>
 371
 372 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/01/">January (16)</a></li>
 373
 374 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/02/">February (6)</a></li>
 375
 376 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/03/">March (6)</a></li>
 377
 378 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/04/">April (7)</a></li>
 379
 380 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/05/">May (3)</a></li>
 381
 382 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/06/">June (2)</a></li>
 383
 384 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/07/">July (7)</a></li>
 385
 386 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/08/">August (6)</a></li>
 387
 388 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/09/">September (4)</a></li>
 389
 390 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/10/">October (2)</a></li>
 391
 392 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/11/">November (3)</a></li>
 393
 394 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/12/">December (1)</a></li>
 395
 396 </ul></li>
 397
 398 <li>2010
 399 <ul>
 400
 401 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
 402
 403 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
 404
 405 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
 406
 407 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
 408
 409 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
 410
 411 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
 412
 413 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (12)</a></li>
 414
 415 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/08/">August (13)</a></li>
 416
 417 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/09/">September (7)</a></li>
 418
 419 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/10/">October (9)</a></li>
 420
 421 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/11/">November (13)</a></li>
 422
 423 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/12/">December (12)</a></li>
 424
 425 </ul></li>
 426
 427 <li>2009
 428 <ul>
 429
 430 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
 431
 432 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
 433
 434 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
 435
 436 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
 437
 438 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
 439
 440 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
 441
 442 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
 443
 444 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
 445
 446 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
 447
 448 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
 449
 450 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
 451
 452 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
 453
 454 </ul></li>
 455
 456 <li>2008
 457 <ul>
 458
 459 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
 460
 461 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
 462
 463 </ul></li>
 464
 465 </ul>
 466
 467
 468
 469 <h2>Tags</h2>
 470 <ul>
 471
 472  <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (13)</a></li>
 473
 474  <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
 475
 476  <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
 477
 478  <li><a href="http://people.skolelinux.org/pere/blog/tags/bankid">bankid (4)</a></li>
 479
 480  <li><a href="http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (9)</a></li>
 481
 482  <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (15)</a></li>
 483
 484  <li><a href="http://people.skolelinux.org/pere/blog/tags/bsa">bsa (2)</a></li>
 485
 486  <li><a href="http://people.skolelinux.org/pere/blog/tags/chrpath">chrpath (2)</a></li>
 487
 488  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (123)</a></li>
 489
 490  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (154)</a></li>
 491
 492  <li><a href="http://people.skolelinux.org/pere/blog/tags/digistan">digistan (10)</a></li>
 493
 494  <li><a href="http://people.skolelinux.org/pere/blog/tags/dld">dld (15)</a></li>
 495
 496  <li><a href="http://people.skolelinux.org/pere/blog/tags/docbook">docbook (20)</a></li>
 497
 498  <li><a href="http://people.skolelinux.org/pere/blog/tags/drivstoffpriser">drivstoffpriser (4)</a></li>
 499
 500  <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (307)</a></li>
 501
 502  <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (23)</a></li>
 503
 504  <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (12)</a></li>
 505
 506  <li><a href="http://people.skolelinux.org/pere/blog/tags/freeculture">freeculture (25)</a></li>
 507
 508  <li><a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox (9)</a></li>
 509
 510  <li><a href="http://people.skolelinux.org/pere/blog/tags/frikanalen">frikanalen (16)</a></li>
 511
 512  <li><a href="http://people.skolelinux.org/pere/blog/tags/h264">h264 (20)</a></li>
 513
 514  <li><a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju (42)</a></li>
 515
 516  <li><a href="http://people.skolelinux.org/pere/blog/tags/isenkram">isenkram (11)</a></li>
 517
 518  <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (19)</a></li>
 519
 520  <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (9)</a></li>
 521
 522  <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (8)</a></li>
 523
 524  <li><a href="http://people.skolelinux.org/pere/blog/tags/lsdvd">lsdvd (2)</a></li>
 525
 526  <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
 527
 528  <li><a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network (8)</a></li>
 529
 530  <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (37)</a></li>
 531
 532  <li><a href="http://people.skolelinux.org/pere/blog/tags/nice free software">nice free software (7)</a></li>
 533
 534  <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (274)</a></li>
 535
 536  <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (178)</a></li>
 537
 538  <li><a href="http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn (23)</a></li>
 539
 540  <li><a href="http://people.skolelinux.org/pere/blog/tags/open311">open311 (2)</a></li>
 541
 542  <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (58)</a></li>
 543
 544  <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (92)</a></li>
 545
 546  <li><a href="http://people.skolelinux.org/pere/blog/tags/raid">raid (1)</a></li>
 547
 548  <li><a href="http://people.skolelinux.org/pere/blog/tags/reactos">reactos (1)</a></li>
 549
 550  <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (11)</a></li>
 551
 552  <li><a href="http://people.skolelinux.org/pere/blog/tags/rfid">rfid (3)</a></li>
 553
 554  <li><a href="http://people.skolelinux.org/pere/blog/tags/robot">robot (9)</a></li>
 555
 556  <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
 557
 558  <li><a href="http://people.skolelinux.org/pere/blog/tags/ruter">ruter (4)</a></li>
 559
 560  <li><a href="http://people.skolelinux.org/pere/blog/tags/scraperwiki">scraperwiki (2)</a></li>
 561
 562  <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (46)</a></li>
 563
 564  <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (4)</a></li>
 565
 566  <li><a href="http://people.skolelinux.org/pere/blog/tags/skepsis">skepsis (4)</a></li>
 567
 568  <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (49)</a></li>
 569
 570  <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (3)</a></li>
 571
 572  <li><a href="http://people.skolelinux.org/pere/blog/tags/stortinget">stortinget (10)</a></li>
 573
 574  <li><a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (36)</a></li>
 575
 576  <li><a href="http://people.skolelinux.org/pere/blog/tags/sysadmin">sysadmin (2)</a></li>
 577
 578  <li><a href="http://people.skolelinux.org/pere/blog/tags/usenix">usenix (2)</a></li>
 579
 580  <li><a href="http://people.skolelinux.org/pere/blog/tags/valg">valg (8)</a></li>
 581
 582  <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (55)</a></li>
 583
 584  <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (4)</a></li>
 585
 586  <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (38)</a></li>
 587
 588 </ul>
 589
 590
 591     </div>
 592     <p style="text-align: right">
 593  Created by <a href="http://steve.org.uk/Software/chronicle">Chronicle v4.6</a>
 594 </p>
 595
 596   </body>
 597 </html>