1 <?xml version=
"1.0" encoding=
"utf-8"?>
2 <rss version='
2.0' xmlns:lj='http://www.livejournal.org/rss/lj/
1.0/' xmlns:
atom=
"http://www.w3.org/2005/Atom">
4 <title>Petter Reinholdtsen
</title>
5 <description></description>
6 <link>http://people.skolelinux.org/pere/blog/
</link>
7 <atom:link href=
"http://people.skolelinux.org/pere/blog/index.rss" rel=
"self" type=
"application/rss+xml" />
10 <title>jXplorer, a very nice LDAP GUI
</title>
11 <link>http://people.skolelinux.org/pere/blog/jXplorer__a_very_nice_LDAP_GUI.html
</link>
12 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/jXplorer__a_very_nice_LDAP_GUI.html
</guid>
13 <pubDate>Fri,
9 Jul
2010 12:
55:
00 +
0200</pubDate>
16 <a href=
"http://people.skolelinux.org/pere/blog/LUMA__a_very_nice_LDAP_GUI.html
">my
17 last post
</a
> about available LDAP tools in Debian, I was told about a
18 LDAP GUI that is even better than luma. The java application
19 <a href=
"http://jxplorer.org/
">jXplorer
</a
> is claimed to be capable of
20 moving LDAP objects and subtrees using drag-and-drop, and can
21 authenticate using Kerberos. I have only tested the Kerberos
22 authentication, but do not have a LDAP setup allowing me to rewrite
23 LDAP with my test user yet. It is
24 <a href=
"http://packages.qa.debian.org/j/jxplorer.html
">available in
25 Debian
</a
> testing and unstable at the moment. The only problem I
26 have with it is how it handle errors. If something go wrong, its
27 non-intuitive behaviour require me to go through some query work list
28 and remove the failing query. Nothing big, but very annoying.
</p
>
33 <title>MS Word krøller det til for politiet?
</title>
34 <link>http://people.skolelinux.org/pere/blog/MS_Word_kr__ller_det_til_for_politiet_.html
</link>
35 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/MS_Word_kr__ller_det_til_for_politiet_.html
</guid>
36 <pubDate>Thu,
8 Jul
2010 14:
00:
00 +
0200</pubDate>
38 <p
>De siste dagene har Aftenposten
39 <a href=
"http://www.aftenposten.no/nyheter/iriks/article3718597.ece
">fortalt
</a
>
40 <a href=
"http://www.aftenposten.no/nyheter/iriks/article3724249.ece
">hvordan
</a
>
41 politet har brukt skriveverktøy som ikke håndterer arabisk tekst og
42 tekst som skal skrives fra høyre mot venstre når de har laget
43 løpeseddel for å be om informasjon fra publikum. Resultatet har vært
44 en uleselig arabisk-bit på løpeseddelen. Feilen har oppstått når
45 teksten har blitt
"kopiert inn i programvare som ikke har støtte for
46 språk som skrives fra høyre mot venstre
", og jeg er ganske sikker på
47 at det er snakk om Microsoft Office i dette tilfellet. Er det slik at
48 MS Office i norsk språkdrakt ikke har støtte for tekst som skal
49 skrives fra høyre mot venstre? Jeg tror alle utgaver av
50 OpenOffice.org har slik støtte, og det er jo ikke veldig vanskelig å
51 la slik støtte finnes i alle utgaver av et program hvis støtten først
52 er utviklet. Aftenpostens melding får meg til å undre om problemet
53 ville vært unngått hvis politiet brukte OpenOffice.org i stedet for MS
56 <p
>Mon tro om det er flere eksempler på at MS Office har ødelagt for
57 offentlig myndighet?
</p
>
62 <title>Lenny-
>Squeeze upgrades, apt vs aptitude with the Gnome desktop
</title>
63 <link>http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__apt_vs_aptitude_with_the_Gnome_desktop.html
</link>
64 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__apt_vs_aptitude_with_the_Gnome_desktop.html
</guid>
65 <pubDate>Sat,
3 Jul
2010 23:
55:
00 +
0200</pubDate>
67 <p
>Here is a short update on my
<a
68 href=
"http://people.skolelinux.org/~pere/debian-upgrade-testing/
">my
69 Debian Lenny-
>Squeeze upgrade testing
</a
>. Here is a summary of the
70 difference for Gnome when it is upgraded by apt-get and aptitude. I
'm
71 not reporting the status for KDE, because the upgrade crashes when
72 aptitude try because of missing conflicts
73 (
<a href=
"http://bugs.debian.org/
584861">#
584861</a
> and
74 <a href=
"http://bugs.debian.org/
585716">#
585716</a
>).
</p
>
76 <p
>At the end of the upgrade test script, dpkg -l is executed to get a
77 complete list of the installed packages. Based on this I see these
78 differences when I did a test run today. As usual, I do not really
79 know what the correct set of packages would be, but thought it best to
80 publish the difference.
</p
>
82 <p
>Installed using apt-get, missing with aptitude
</p
>
84 <blockquote
><p
>
85 at-spi cpp-
4.3 finger gnome-spell gstreamer0.10-gnomevfs
86 libatspi1.0-
0 libcupsys2 libeel2-data libgail-common libgdl-
1-common
87 libgnomeprint2.2-data libgnomeprintui2.2-common libgnomevfs2-bin
88 libgtksourceview-common libpt-
1.10.10-plugins-alsa
89 libpt-
1.10.10-plugins-v4l libservlet2.4-java libxalan2-java
90 libxerces2-java openoffice.org-writer2latex openssl-blacklist p7zip
91 python-
4suite-xml python-eggtrayicon python-gtkhtml2
92 python-gtkmozembed svgalibg1 xserver-xephyr zip
93 </p
></blockquote
>
95 <p
>Installed using apt-get, removed with aptitude
</p
>
97 <blockquote
><p
>
98 bluez-utils dhcdbd djvulibre-desktop epiphany-gecko
99 gnome-app-install gnome-mount gnome-vfs-obexftp gnome-volume-manager
100 libao2 libavahi-compat-libdnssd1 libavahi-core5 libbind9-
50
101 libbluetooth2 libcamel1.2-
11 libcdio7 libcucul0 libcurl3
102 libdirectfb-
1.0-
0 libdvdread3 libedata-cal1.2-
6 libedataserver1.2-
9
103 libeel2-
2.20 libepc-
1.0-
1 libepc-ui-
1.0-
1 libexchange-storage1.2-
3
104 libfaad0 libgd2-noxpm libgda3-
3 libgda3-common libggz2 libggzcore9
105 libggzmod4 libgksu1.2-
0 libgksuui1.0-
1 libgmyth0 libgnome-desktop-
2
106 libgnome-pilot2 libgnomecups1.0-
1 libgnomeprint2.2-
0
107 libgnomeprintui2.2-
0 libgpod3 libgraphviz4 libgtkhtml2-
0
108 libgtksourceview1.0-
0 libgucharmap6 libhesiod0 libicu38 libisccc50
109 libisccfg50 libiw29 libkpathsea4 libltdl3 liblwres50 libmagick++
10
110 libmagick10 libmalaga7 libmtp7 libmysqlclient15off libnautilus-burn4
111 libneon27 libnm-glib0 libnm-util0 libopal-
2.2 libosp5
112 libparted1.8-
10 libpisock9 libpisync1 libpoppler-glib3 libpoppler3
113 libpt-
1.10.10 libraw1394-
8 libsensors3 libsmbios2 libsoup2.2-
8
114 libssh2-
1 libsuitesparse-
3.1.0 libswfdec-
0.6-
90 libtalloc1
115 libtotem-plparser10 libtrackerclient0 libvoikko1 libxalan2-java-gcj
116 libxerces2-java-gcj libxklavier12 libxtrap6 libxxf86misc1 libzephyr3
117 mysql-common swfdec-gnome totem-gstreamer wodim
118 </p
></blockquote
>
120 <p
>Installed using aptitude, missing with apt-get
</p
>
122 <blockquote
><p
>
123 gnome gnome-desktop-environment hamster-applet python-gnomeapplet
124 python-gnomekeyring python-wnck rhythmbox-plugins xorg
125 xserver-xorg-input-all xserver-xorg-input-evdev
126 xserver-xorg-input-kbd xserver-xorg-input-mouse
127 xserver-xorg-input-synaptics xserver-xorg-video-all
128 xserver-xorg-video-apm xserver-xorg-video-ark xserver-xorg-video-ati
129 xserver-xorg-video-chips xserver-xorg-video-cirrus
130 xserver-xorg-video-dummy xserver-xorg-video-fbdev
131 xserver-xorg-video-glint xserver-xorg-video-i128
132 xserver-xorg-video-i740 xserver-xorg-video-mach64
133 xserver-xorg-video-mga xserver-xorg-video-neomagic
134 xserver-xorg-video-nouveau xserver-xorg-video-nv
135 xserver-xorg-video-r128 xserver-xorg-video-radeon
136 xserver-xorg-video-radeonhd xserver-xorg-video-rendition
137 xserver-xorg-video-s3 xserver-xorg-video-s3virge
138 xserver-xorg-video-savage xserver-xorg-video-siliconmotion
139 xserver-xorg-video-sis xserver-xorg-video-sisusb
140 xserver-xorg-video-tdfx xserver-xorg-video-tga
141 xserver-xorg-video-trident xserver-xorg-video-tseng
142 xserver-xorg-video-vesa xserver-xorg-video-vmware
143 xserver-xorg-video-voodoo
144 </p
></blockquote
>
146 <p
>Installed using aptitude, removed with apt-get
</p
>
148 <blockquote
><p
>
149 deskbar-applet xserver-xorg xserver-xorg-core
150 xserver-xorg-input-wacom xserver-xorg-video-intel
151 xserver-xorg-video-openchrome
152 </p
></blockquote
>
154 <p
>I was told on IRC that the xorg-xserver package was
155 <a href=
"http://git.debian.org/?p=pkg-xorg/xserver/xorg-server.git;a=commit;h=
9c8080d06c457932d3bfec021c69ac000aa60120
">changed
156 in git
</a
> today to try to get apt-get to not remove xorg completely.
157 No idea when it hits Squeeze, but when it does I hope it will reduce
158 the difference somewhat.
163 <title>Caching password, user and group on a roaming Debian laptop
</title>
164 <link>http://people.skolelinux.org/pere/blog/Caching_password__user_and_group_on_a_roaming_Debian_laptop.html
</link>
165 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Caching_password__user_and_group_on_a_roaming_Debian_laptop.html
</guid>
166 <pubDate>Thu,
1 Jul
2010 11:
40:
00 +
0200</pubDate>
168 <p
>For a laptop, centralized user directories and password checking is
169 a bit troubling. Laptops are typically used also when not connected
170 to the network, and it is vital for a user to be able to log in or
171 unlock the screen saver also when a central server is unavailable.
172 This is possible by caching passwords and directory information (user
173 and group attributes) locally, and the packages to do so are available
174 in Debian. Here follow two recipes to set this up in Debian/Squeeze.
175 It is also possible to set up in Debian/Lenny, but require more manual
176 setup there because pam-auth-update is missing in Lenny.
</p
>
178 <h2
>LDAP/Kerberos + nscd + libpam-ccreds + libpam-mklocaluser/pam_mkhomedir
</h2
>
180 This is the traditional method with a twist. The password caching is
181 provided by libpam-ccreds (version
10-
4 or later is needed on
182 Squeeze), and the directory caching is done by nscd. The directory
183 lookup and password checking is done using LDAP. If one want to use
184 Kerberos for password checking the libpam-ldapd package can be
185 replaced with libpam-krb5 or libpam-heimdal. If one is happy having a
186 local home directory with the path listed in LDAP, one can use the
187 pam_mkhomedir module from pam-modules to make this happen instead of
188 using libpam-mklocaluser. A setup for pam-auth-update to enable
189 pam_mkhomedir will have to be written until a fix for
190 <a href=
"http://bugs.debian.org/
568577">bug #
568577</a
> is in the
191 archive. Because I believe it is a bad idea to have local home
192 directories using misleading paths like /site/server/partition/, I
193 prefer to create a local user with the home directory in /home/. This
194 is done using the libpam-mklocaluser package.
</p
>
196 <p
>These packages need to be installed and configured
</p
>
198 <blockquote
><pre
>
199 libnss-ldapd libpam-ldapd nscd libpam-ccreds libpam-mklocaluser
200 </pre
></blockquote
>
202 <p
>The ldapd packages will ask for LDAP connection information, and
203 one have to fill in the values that fits ones own site. Make sure the
204 PAM part uses encrypted connections, to make sure the password is not
205 sent in clear text to the LDAP server. I
've been unable to get TLS
206 certificate checking for a self signed certificate working, which make
207 LDAP authentication unsafe for Debian Edu (nslcd is not checking if it
208 is talking to the correct LDAP server), and very much welcome feedback
209 on how to get this working.
</p
>
211 <p
>Because nscd do not have a default configuration fit for offline
212 caching until
<a href=
"http://bugs.debian.org/
485282">bug #
485282</a
>
213 is fixed, this configuration should be used instead of the one
214 currently in /etc/nscd.conf. The changes are in the fields
215 reload-count and positive-time-to-live, and is based on the
216 instructions I found in the
217 <a href=
"http://www.flyn.org/laptopldap/
">LDAP for Mobile Laptops
</a
>
218 instructions by Flyn Computing.
</p
>
220 <blockquote
><pre
>
222 reload-count unlimited
225 enable-cache passwd yes
226 positive-time-to-live passwd
2592000
227 negative-time-to-live passwd
20
228 suggested-size passwd
211
229 check-files passwd yes
230 persistent passwd yes
232 max-db-size passwd
33554432
233 auto-propagate passwd yes
235 enable-cache group yes
236 positive-time-to-live group
2592000
237 negative-time-to-live group
20
238 suggested-size group
211
239 check-files group yes
242 max-db-size group
33554432
243 auto-propagate group yes
245 enable-cache hosts no
246 positive-time-to-live hosts
2592000
247 negative-time-to-live hosts
20
248 suggested-size hosts
211
249 check-files hosts yes
252 max-db-size hosts
33554432
254 enable-cache services yes
255 positive-time-to-live services
2592000
256 negative-time-to-live services
20
257 suggested-size services
211
258 check-files services yes
259 persistent services yes
261 max-db-size services
33554432
262 </pre
></blockquote
>
264 <p
>While we wait for a mechanism to update /etc/nsswitch.conf
265 automatically like the one provided in
266 <a href=
"http://bugs.debian.org/
496915">bug #
496915</a
>, the file
267 content need to be manually replaced to ensure LDAP is used as the
268 directory service on the machine. /etc/nsswitch.conf should normally
269 look like this:
</p
>
271 <blockquote
><pre
>
275 hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4
282 </pre
></blockquote
>
284 <p
>The important parts are that ldap is listed last for passwd, group,
285 shadow and netgroup.
</p
>
287 <p
>With these changes in place, any user in LDAP will be able to log
288 in locally on the machine using for example kdm, get a local home
289 directory created and have the password as well as user and group
292 <h2
>LDAP/Kerberos + nss-updatedb + libpam-ccreds +
293 libpam-mklocaluser/pam_mkhomedir
</h2
>
295 <p
>Because nscd have had its share of problems, and seem to have
296 problems doing proper caching, I
've seen suggestions and recipes to
297 use nss-updatedb to copy parts of the LDAP database locally when the
298 LDAP database is available. I have not tested such setup, because I
299 discovered sssd.
</p
>
301 <h2
>LDAP/Kerberos + sssd + libpam-mklocaluser
</h2
>
303 <p
>A more flexible and robust setup than the nscd combination
304 mentioned earlier that has shown up recently, is the
305 <a href=
"https://fedorahosted.org/sssd/
">sssd
</a
> package from Redhat.
306 It is part of the
<a href=
"http://www.freeipa.org/
">FreeIPA
</A
> project
307 to provide a Active Directory like directory service for Linux
308 machines. The sssd system combines the caching of passwords and user
309 information into one package, and remove the need for nscd and
310 libpam-ccreds. It support LDAP and Kerberos, but not NIS. Version
311 1.2 do not support netgroups, but it is said that it will support this
312 in version
1.5 expected to show up later in
2010. Because the
313 <a href=
"http://packages.qa.debian.org/s/sssd.html
">sssd package
</a
>
314 was missing in Debian, I ended up co-maintaining it with Werner, and
315 version
1.2 is now in testing.
317 <p
>These packages need to be installed and configured to get the
318 roaming setup I want
</p
>
320 <blockquote
><pre
>
321 libpam-sss libnss-sss libpam-mklocaluser
322 </pre
></blockquote
>
324 The complete setup of sssd is done by editing/creating
325 <tt
>/etc/sssd/sssd.conf
</tt
>.
327 <blockquote
><pre
>
329 config_file_version =
2
330 reconnection_retries =
3
338 reconnection_retries =
3
341 reconnection_retries =
3
345 cache_credentials = true
349 chpass_provider = ldap
351 ldap_uri = ldap://ldap
352 ldap_search_base = dc=skole,dc=skolelinux,dc=no
353 ldap_tls_reqcert = never
354 ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt
355 </pre
></blockquote
>
357 <p
>I got the same problem here with certificate checking. Had to set
358 "ldap_tls_reqcert = never
" to get it working.
</p
>
360 <p
>With the libnss-sss package in testing at the moment, the
361 nsswitch.conf file is update automatically, so there is no need to
362 modify it manually.
</p
>
364 <p
>If you want to help out with implementing this for Debian Edu,
365 please contact us on debian-edu@lists.debian.org.
</p
>
370 <title>LUMA, a very nice LDAP GUI
</title>
371 <link>http://people.skolelinux.org/pere/blog/LUMA__a_very_nice_LDAP_GUI.html
</link>
372 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/LUMA__a_very_nice_LDAP_GUI.html
</guid>
373 <pubDate>Mon,
28 Jun
2010 00:
30:
00 +
0200</pubDate>
375 <p
>The last few days I have been looking into the status of the LDAP
376 directory in Debian Edu, and in the process I started to miss a GUI
377 tool to browse the LDAP tree. The only one I was able to find in
378 Debian/Squeeze and Lenny is
379 <a href=
"http://luma.sourceforge.net/
">LUMA
</a
>, which has proved to
380 be a great tool to get a overview of the current LDAP directory
381 populated by default in Skolelinux. Thanks to it, I have been able to
382 find empty and obsolete subtrees, misplaced objects and duplicate
383 objects. It will be installed by default in Debian/Squeeze. If you
384 are working with LDAP, give it a go. :)
</p
>
386 <p
>I did notice one problem with it I have not had time to report to
387 the BTS yet. There is no .desktop file in the package, so the tool do
388 not show up in the Gnome and KDE menus, but only deep down in in the
389 Debian submenu in KDE. I hope that can be fixed before Squeeze is
392 <p
>I have not yet been able to get it to modify the tree yet. I would
393 like to move objects and remove subtrees directly in the GUI, but have
394 not found a way to do that with LUMA yet. So in the mean time, I use
395 <a href=
"http://www.lichteblau.com/ldapvi/
">ldapvi
</a
> for that.
</p
>
397 <p
>If you have tips on other GUI tools for LDAP that might be useful
398 in Debian Edu, please contact us on debian-edu@lists.debian.org.
</p
>
400 <p
>Update
2010-
06-
29: Ross Reedstrom tipped us about the
401 <a href=
"http://packages.qa.debian.org/g/gq.html
">gq
</a
> package as a
402 useful GUI alternative. It seem like a good tool, but is unmaintained
403 in Debian and got a RC bug keeping it out of Squeeze. Unless that
404 changes, it will not be an option for Debian Edu based on Squeeze.
</p
>
409 <title>Idea for a change to LDAP schemas allowing DNS and DHCP info to be combined into one object
</title>
410 <link>http://people.skolelinux.org/pere/blog/Idea_for_a_change_to_LDAP_schemas_allowing_DNS_and_DHCP_info_to_be_combined_into_one_object.html
</link>
411 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Idea_for_a_change_to_LDAP_schemas_allowing_DNS_and_DHCP_info_to_be_combined_into_one_object.html
</guid>
412 <pubDate>Thu,
24 Jun
2010 00:
35:
00 +
0200</pubDate>
414 <p
>A while back, I
415 <a href=
"http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html
">complained
416 about the fact
</a
> that it is not possible with the provided schemas
417 for storing DNS and DHCP information in LDAP to combine the two sets
418 of information into one LDAP object representing a computer.
</p
>
420 <p
>In the mean time, I discovered that a simple fix would be to make
421 the dhcpHost object class auxiliary, to allow it to be combined with
422 the dNSDomain object class, and thus forming one object for one
423 computer when storing both DHCP and DNS information in LDAP.
</p
>
425 <p
>If I understand this correctly, it is not safe to do this change
426 without also changing the assigned number for the object class, and I
427 do not know enough about LDAP schema design to do that properly for
428 Debian Edu.
</p
>
430 <p
>Anyway, for future reference, this is how I believe we could change
432 <a href=
"http://tools.ietf.org/html/draft-ietf-dhc-ldap-schema-
00">DHCP
433 schema
</a
> to solve at least part of the problem with the LDAP schemas
434 available today from IETF.
</p
>
437 --- dhcp.schema (revision
65192)
438 +++ dhcp.schema (working copy)
440 objectclass (
2.16.840.1.113719.1.203.6.6
441 NAME
'dhcpHost
'
442 DESC
'This represents information about a particular client
'
446 MAY (dhcpLeaseDN $ dhcpHWAddress $ dhcpOptionsDN $ dhcpStatements $ dhcpComments $ dhcpOption)
447 X-NDS_CONTAINMENT (
'dhcpService
' 'dhcpSubnet
' 'dhcpGroup
') )
450 <p
>I very much welcome clues on how to do this properly for Debian
451 Edu/Squeeze. We provide the DHCP schema in our debian-edu-config
452 package, and should thus be free to rewrite it as we see fit.
</p
>
454 <p
>If you want to help out with implementing this for Debian Edu,
455 please contact us on debian-edu@lists.debian.org.
</p
>
460 <title>Calling tasksel like the installer, while still getting useful output
</title>
461 <link>http://people.skolelinux.org/pere/blog/Calling_tasksel_like_the_installer__while_still_getting_useful_output.html
</link>
462 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Calling_tasksel_like_the_installer__while_still_getting_useful_output.html
</guid>
463 <pubDate>Wed,
16 Jun
2010 14:
55:
00 +
0200</pubDate>
465 <p
>A few times I have had the need to simulate the way tasksel
466 installs packages during the normal debian-installer run. Until now,
467 I have ended up letting tasksel do the work, with the annoying problem
468 of not getting any feedback at all when something fails (like a
469 conffile question from dpkg or a download that fails), using code like
472 <blockquote
><pre
>
473 export DEBIAN_FRONTEND=noninteractive
474 tasksel --new-install
475 </pre
></blockquote
>
477 This would invoke tasksel, let its automatic task selection pick the
478 tasks to install, and continue to install the requested tasks without
479 any output what so ever.
481 Recently I revisited this problem while working on the automatic
482 package upgrade testing, because tasksel would some times hang without
483 any useful feedback, and I want to see what is going on when it
484 happen. Then it occured to me, I can parse the output from tasksel
485 when asked to run in test mode, and use that aptitude command line
486 printed by tasksel then to simulate the tasksel run. I ended up using
489 <blockquote
><pre
>
490 export DEBIAN_FRONTEND=noninteractive
491 cmd=
"$(in_target tasksel -t --new-install | sed
's/debconf-apt-progress -- //
')
"
493 </pre
></blockquote
>
495 <p
>The content of $cmd is typically something like
"<tt
>aptitude -q
496 --without-recommends -o APT::Install-Recommends=no -y install
497 ~t^desktop$ ~t^gnome-desktop$ ~t^laptop$ ~pstandard ~prequired
498 ~pimportant
</tt
>", which will install the gnome desktop task, the
499 laptop task and all packages with priority standard , required and
500 important, just like tasksel would have done it during
501 installation.
</p
>
503 <p
>A better approach is probably to extend tasksel to be able to
504 install packages without using debconf-apt-progress, for use cases
510 <title>Vinmonopolet bryter loven åpenlyst - og flere planlegger å gjøre det samme
</title>
511 <link>http://people.skolelinux.org/pere/blog/Vinmonopolet_bryter_loven___penlyst___og_flere_planlegger____gj__re_det_samme.html
</link>
512 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Vinmonopolet_bryter_loven___penlyst___og_flere_planlegger____gj__re_det_samme.html
</guid>
513 <pubDate>Wed,
16 Jun
2010 11:
00:
00 +
0200</pubDate>
515 <p
><a href=
"http://www.dagbladet.no/
2010/
06/
16/nyheter/innenriks/streik/arbeidsliv/
12157858/
">Dagbladet
516 melder
</a
> at Vinmonopolet med bakgrunn i vekterstreiken som pågår i
517 Norge for tiden, har bestemt seg for med vitende og vilje å bryte
518 sentralbanklovens paragraf
14 ved å nekte folk å betale med
519 kontanter, og at flere butikker planlegger å følge deres eksempel.
520 Jeg synes det er hårreisende hvis de slipper unna med et slikt
521 soleklart lovbrudd, og lurer på hva slags muligheter jeg vil ha hvis
522 jeg blir nektet å handle med kontanter. Jeg handler i hovedsak med
523 kontanter selv, da jeg anser det som en borgerrett å kunne handle
524 anonymt uten at det blir registrert. For meg er det et angrep på mitt
525 personvern å nekte å ta imot kontant betaling.
</p
>
527 <p
><a href=
"http://www.lovdata.no/all/tl-
19850524-
028-
003.html#
14">Paragrafen
528 i sentralbankloven
</a
> lyder:
</p
>
531 <p
>§
14. Tvungent betalingsmiddel
</p
>
533 <p
>Bankens sedler og mynter er tvungent betalingsmiddel i Norge. Ingen
534 er pliktig til i én betaling å ta imot mer enn femogtyve mynter av
535 hver enhet.
</p
>
537 <p
>Sterkt skadde sedler og mynter er ikke tvungent
538 betalingsmiddel. Banken gir nærmere forskrifter om erstatning for
539 bortkomne, brente eller skadde sedler og mynter.
</p
>
541 <p
>Selv om en avtale inneholder klausul om betaling av en
542 pengeforpliktelse i gullverdi, kan skyldneren frigjøre seg med tvungne
543 betalingsmidler uten hensyn til denne klausul.
</p
>
546 <p
>Det er med bakgrunn i denne lovet ikke tillatt å nekte å ta imot
547 kontakt betaling. Det er en lov jeg har sans for, og som jeg mener må
548 håndheves strengt.
</p
>
553 <title>Officeshots taking shape
</title>
554 <link>http://people.skolelinux.org/pere/blog/Officeshots_taking_shape.html
</link>
555 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Officeshots_taking_shape.html
</guid>
556 <pubDate>Sun,
13 Jun
2010 11:
40:
00 +
0200</pubDate>
558 <p
>For those of us caring about document exchange and
559 interoperability,
<a href=
"http://www.officeshots.org/
">OfficeShots
</a
>
560 is a great service. It is to ODF documents what
561 <a href=
"http://browsershots.org/
">BrowserShots
</a
> is for web
564 <p
>A while back, I was contacted by Knut Yrvin at the part of Nokia
565 that used to be Trolltech, who wanted to help the OfficeShots project
566 and wondered if the University of Oslo where I work would be
567 interested in supporting the project. I helped him to navigate his
568 request to the right people at work, and his request was answered with
569 a spot in the machine room with power and network connected, and Knut
570 arranged funding for a machine to fill the spot. The machine is
571 administrated by the OfficeShots people, so I do not have daily
572 contact with its progress, and thus from time to time check back to
573 see how the project is doing.
</p
>
575 <p
>Today I had a look, and was happy to see that the Dell box in our
576 machine room now is the host for several virtual machines running as
577 OfficeShots factories, and the project is able to render ODF documents
578 in
17 different document processing implementation on Linux and
579 Windows. This is great.
</p
>
584 <title>Lenny-
>Squeeze upgrades, removals by apt and aptitude
</title>
585 <link>http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__removals_by_apt_and_aptitude.html
</link>
586 <guid isPermaLink=
"true">http://people.skolelinux.org/pere/blog/Lenny__Squeeze_upgrades__removals_by_apt_and_aptitude.html
</guid>
587 <pubDate>Sun,
13 Jun
2010 09:
05:
00 +
0200</pubDate>
590 <a href=
"http://people.skolelinux.org/pere/blog/Automatic_upgrade_testing_from_Lenny_to_Squeeze.html
">testing
591 of Debian upgrades
</a
> from Lenny to Squeeze continues, and I
've
592 finally made the upgrade logs available from
593 <a href=
"http://people.skolelinux.org/pere/debian-upgrade-testing/
">http://people.skolelinux.org/pere/debian-upgrade-testing/
</a
>.
594 I am now testing dist-upgrade of Gnome and KDE in a chroot using both
595 apt and aptitude, and found their differences interesting. This time
596 I will only focus on their removal plans.
</p
>
598 <p
>After installing a Gnome desktop and the laptop task, apt-get wants
599 to remove
72 packages when dist-upgrading from Lenny to Squeeze. The
600 surprising part is that it want to remove xorg and all
601 xserver-xorg-video* drivers. Clearly not a good choice, but I am not
602 sure why. When asking aptitude to do the same, it want to remove
129
603 packages, but most of them are library packages I suspect are no
604 longer needed. Both of them want to remove bluetooth packages, which
605 I do not know. Perhaps these bluetooth packages are obsolete?
</p
>
607 <p
>For KDE, apt-get want to remove
82 packages, among them kdebase
608 which seem like a bad idea and xorg the same way as with Gnome. Asking
609 aptitude for the same, it wants to remove
192 packages, none which are
610 too surprising.
</p
>
612 <p
>I guess the removal of xorg during upgrades should be investigated
613 and avoided, and perhaps others as well. Here are the complete list
614 of planned removals. The complete logs is available from the URL
615 above. Note if you want to repeat these tests, that the upgrade test
616 for kde+apt-get hung in the tasksel setup because of dpkg asking
617 conffile questions. No idea why. I worked around it by using
618 '<tt
>echo
>> /proc/
<em
>pidofdpkg
</em
>/fd/
0</tt
>' to tell dpkg to
621 <p
><b
>apt-get gnome
72</b
>
622 <br
>bluez-gnome cupsddk-drivers deskbar-applet gnome
623 gnome-desktop-environment gnome-network-admin gtkhtml3.14
624 iceweasel-gnome-support libavcodec51 libdatrie0 libgdl-
1-
0
625 libgnomekbd2 libgnomekbdui2 libmetacity0 libslab0 libxcb-xlib0
626 nautilus-cd-burner python-gnome2-desktop python-gnome2-extras
627 serpentine swfdec-mozilla update-manager xorg xserver-xorg
628 xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
629 xserver-xorg-input-kbd xserver-xorg-input-mouse
630 xserver-xorg-input-synaptics xserver-xorg-input-wacom
631 xserver-xorg-video-all xserver-xorg-video-apm xserver-xorg-video-ark
632 xserver-xorg-video-ati xserver-xorg-video-chips
633 xserver-xorg-video-cirrus xserver-xorg-video-cyrix
634 xserver-xorg-video-dummy xserver-xorg-video-fbdev
635 xserver-xorg-video-glint xserver-xorg-video-i128
636 xserver-xorg-video-i740 xserver-xorg-video-imstt
637 xserver-xorg-video-intel xserver-xorg-video-mach64
638 xserver-xorg-video-mga xserver-xorg-video-neomagic
639 xserver-xorg-video-nsc xserver-xorg-video-nv
640 xserver-xorg-video-openchrome xserver-xorg-video-r128
641 xserver-xorg-video-radeon xserver-xorg-video-radeonhd
642 xserver-xorg-video-rendition xserver-xorg-video-s3
643 xserver-xorg-video-s3virge xserver-xorg-video-savage
644 xserver-xorg-video-siliconmotion xserver-xorg-video-sis
645 xserver-xorg-video-sisusb xserver-xorg-video-tdfx
646 xserver-xorg-video-tga xserver-xorg-video-trident
647 xserver-xorg-video-tseng xserver-xorg-video-v4l
648 xserver-xorg-video-vesa xserver-xorg-video-vga
649 xserver-xorg-video-vmware xserver-xorg-video-voodoo xulrunner-
1.9
650 xulrunner-
1.9-gnome-support
</p
>
652 <p
><b
>aptitude gnome
129</b
>
654 <br
>bluez-gnome bluez-utils cpp-
4.3 cupsddk-drivers dhcdbd
655 djvulibre-desktop finger gnome-app-install gnome-mount
656 gnome-network-admin gnome-spell gnome-vfs-obexftp
657 gnome-volume-manager gstreamer0.10-gnomevfs gtkhtml3.14 libao2
658 libavahi-compat-libdnssd1 libavahi-core5 libavcodec51 libbluetooth2
659 libcamel1.2-
11 libcdio7 libcucul0 libcupsys2 libcurl3 libdatrie0
660 libdirectfb-
1.0-
0 libdvdread3 libedataserver1.2-
9 libeel2-
2.20
661 libeel2-data libepc-
1.0-
1 libepc-ui-
1.0-
1 libfaad0 libgail-common
662 libgd2-noxpm libgda3-
3 libgda3-common libgdl-
1-
0 libgdl-
1-common
663 libggz2 libggzcore9 libggzmod4 libgksu1.2-
0 libgksuui1.0-
1 libgmyth0
664 libgnomecups1.0-
1 libgnomekbd2 libgnomekbdui2 libgnomeprint2.2-
0
665 libgnomeprint2.2-data libgnomeprintui2.2-
0 libgnomeprintui2.2-common
666 libgnomevfs2-bin libgpod3 libgraphviz4 libgtkhtml2-
0
667 libgtksourceview-common libgtksourceview1.0-
0 libgucharmap6
668 libhesiod0 libicu38 libiw29 libkpathsea4 libltdl3 libmagick++
10
669 libmagick10 libmalaga7 libmetacity0 libmtp7 libmysqlclient15off
670 libnautilus-burn4 libneon27 libnm-glib0 libnm-util0 libopal-
2.2
671 libosp5 libparted1.8-
10 libpoppler-glib3 libpoppler3 libpt-
1.10.10
672 libpt-
1.10.10-plugins-alsa libpt-
1.10.10-plugins-v4l libraw1394-
8
673 libsensors3 libslab0 libsmbios2 libsoup2.2-
8 libssh2-
1
674 libsuitesparse-
3.1.0 libswfdec-
0.6-
90 libtalloc1 libtotem-plparser10
675 libtrackerclient0 libxalan2-java libxalan2-java-gcj libxcb-xlib0
676 libxerces2-java libxerces2-java-gcj libxklavier12 libxtrap6
677 libxxf86misc1 libzephyr3 mysql-common nautilus-cd-burner
678 openoffice.org-writer2latex openssl-blacklist p7zip
679 python-
4suite-xml python-eggtrayicon python-gnome2-desktop
680 python-gnome2-extras python-gtkhtml2 python-gtkmozembed
681 python-numeric python-sexy serpentine svgalibg1 swfdec-gnome
682 swfdec-mozilla totem-gstreamer update-manager wodim
683 xserver-xorg-video-cyrix xserver-xorg-video-imstt
684 xserver-xorg-video-nsc xserver-xorg-video-v4l xserver-xorg-video-vga
687 <p
><b
>apt-get kde
82</b
>
689 <br
>cupsddk-drivers karm kaudiocreator kcoloredit kcontrol kde kde-core
690 kdeaddons kdeartwork kdebase kdebase-bin kdebase-bin-kde3
691 kdebase-kio-plugins kdesktop kdeutils khelpcenter kicker
692 kicker-applets knewsticker kolourpaint konq-plugins konqueror korn
693 kpersonalizer kscreensaver ksplash libavcodec51 libdatrie0 libkiten1
694 libxcb-xlib0 quanta superkaramba texlive-base-bin xorg xserver-xorg
695 xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
696 xserver-xorg-input-kbd xserver-xorg-input-mouse
697 xserver-xorg-input-synaptics xserver-xorg-input-wacom
698 xserver-xorg-video-all xserver-xorg-video-apm xserver-xorg-video-ark
699 xserver-xorg-video-ati xserver-xorg-video-chips
700 xserver-xorg-video-cirrus xserver-xorg-video-cyrix
701 xserver-xorg-video-dummy xserver-xorg-video-fbdev
702 xserver-xorg-video-glint xserver-xorg-video-i128
703 xserver-xorg-video-i740 xserver-xorg-video-imstt
704 xserver-xorg-video-intel xserver-xorg-video-mach64
705 xserver-xorg-video-mga xserver-xorg-video-neomagic
706 xserver-xorg-video-nsc xserver-xorg-video-nv
707 xserver-xorg-video-openchrome xserver-xorg-video-r128
708 xserver-xorg-video-radeon xserver-xorg-video-radeonhd
709 xserver-xorg-video-rendition xserver-xorg-video-s3
710 xserver-xorg-video-s3virge xserver-xorg-video-savage
711 xserver-xorg-video-siliconmotion xserver-xorg-video-sis
712 xserver-xorg-video-sisusb xserver-xorg-video-tdfx
713 xserver-xorg-video-tga xserver-xorg-video-trident
714 xserver-xorg-video-tseng xserver-xorg-video-v4l
715 xserver-xorg-video-vesa xserver-xorg-video-vga
716 xserver-xorg-video-vmware xserver-xorg-video-voodoo xulrunner-
1.9</p
>
718 <p
><b
>aptitude kde
192</b
>
719 <br
>bluez-utils cpp-
4.3 cupsddk-drivers cvs dcoprss dhcdbd
720 djvulibre-desktop dosfstools eyesapplet fifteenapplet finger gettext
721 ghostscript-x imlib-base imlib11 indi kandy karm kasteroids
722 kaudiocreator kbackgammon kbstate kcoloredit kcontrol kcron kdat
723 kdeadmin-kfile-plugins kdeartwork-misc kdeartwork-theme-window
724 kdebase-bin-kde3 kdebase-kio-plugins kdeedu-data
725 kdegraphics-kfile-plugins kdelirc kdemultimedia-kappfinder-data
726 kdemultimedia-kfile-plugins kdenetwork-kfile-plugins
727 kdepim-kfile-plugins kdepim-kio-plugins kdeprint kdesktop kdessh
728 kdict kdnssd kdvi kedit keduca kenolaba kfax kfaxview kfouleggs
729 kghostview khelpcenter khexedit kiconedit kitchensync klatin
730 klickety kmailcvt kmenuedit kmid kmilo kmoon kmrml kodo kolourpaint
731 kooka korn kpager kpdf kpercentage kpf kpilot kpoker kpovmodeler
732 krec kregexpeditor ksayit ksim ksirc ksirtet ksmiletris ksmserver
733 ksnake ksokoban ksplash ksvg ksysv ktip ktnef kuickshow kverbos
734 kview kviewshell kvoctrain kwifimanager kwin kwin4 kworldclock
735 kxsldbg libakode2 libao2 libarts1-akode libarts1-audiofile
736 libarts1-mpeglib libarts1-xine libavahi-compat-libdnssd1
737 libavahi-core5 libavc1394-
0 libavcodec51 libbluetooth2
738 libboost-python1.34
.1 libcucul0 libcurl3 libcvsservice0 libdatrie0
739 libdirectfb-
1.0-
0 libdjvulibre21 libdvdread3 libfaad0 libfreebob0
740 libgail-common libgd2-noxpm libgraphviz4 libgsmme1c2a libgtkhtml2-
0
741 libicu38 libiec61883-
0 libindex0 libiw29 libk3b3 libkcal2b libkcddb1
742 libkdeedu3 libkdepim1a libkgantt0 libkiten1 libkleopatra1 libkmime2
743 libkpathsea4 libkpimexchange1 libkpimidentities1 libkscan1
744 libksieve0 libktnef1 liblockdev1 libltdl3 libmagick10 libmimelib1c2a
745 libmozjs1d libmpcdec3 libneon27 libnm-util0 libopensync0 libpisock9
746 libpoppler-glib3 libpoppler-qt2 libpoppler3 libraw1394-
8 libsmbios2
747 libssh2-
1 libsuitesparse-
3.1.0 libtalloc1 libtiff-tools
748 libxalan2-java libxalan2-java-gcj libxcb-xlib0 libxerces2-java
749 libxerces2-java-gcj libxtrap6 mpeglib networkstatus
750 openoffice.org-writer2latex pmount poster psutils quanta quanta-data
751 superkaramba svgalibg1 tex-common texlive-base texlive-base-bin
752 texlive-common texlive-doc-base texlive-fonts-recommended
753 xserver-xorg-video-cyrix xserver-xorg-video-imstt
754 xserver-xorg-video-nsc xserver-xorg-video-v4l xserver-xorg-video-vga
755 xulrunner-
1.9</p
>
projects / homepage.git / blob