1 <!DOCTYPE html PUBLIC
"-//W3C//DTD XHTML 1.0 Strict//EN"
2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
5 <title>Petter Reinholdtsen: Entries Tagged debian edu
</title>
6 <link rel=
"stylesheet" type=
"text/css" media=
"screen" href=
"http://people.skolelinux.org/pere/blog/style.css">
7 <link rel=
"alternate" title=
"RSS Feed" href=
"debian edu.rss" type=
"application/rss+xml">
13 <a href=
"http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen
</a>
19 <p>Entries tagged "debian edu".
</p>
26 <a href=
"http://people.skolelinux.org/pere/blog/The_sorry_state_of_multimedia_browser_plugins_in_Debian.html">The sorry state of multimedia browser plugins in Debian
</a>
34 <p>Recently I have spent some time evaluating the multimedia browser
35 plugins available in Debian Lenny, to see which one we should use by
36 default in Debian Edu. We need an embedded video playing plugin with
37 control buttons to pause or stop the video, and capable of streaming
38 all the multimedia content available on the web. The test results and
39 notes are available on
40 <a href=
"http://wiki.debian.org/DebianEdu/BrowserMultimedia">the
41 Debian wiki
</a>. I was surprised how few of the plugins are able to
42 fill this need. My personal video player favorite, VLC, has a really
43 bad plugin which fail on a lot of the test pages. A lot of the MIME
44 types I would expect to work with any free software player (like
45 video/ogg), just do not work. And simple formats like the
46 audio/x-mplegurl format (m3u playlists), just isn't supported by the
47 totem and vlc plugins. I hope the situation will improve soon. No
48 wonder sites use the proprietary Adobe flash to play video.
</p>
50 <p>For Lenny, we seem to end up with the mplayer plugin. It seem to
51 be the only one fitting our needs. :/
</p>
58 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/web">web
</a>.
62 <div class=
"padding"></div>
66 <a href=
"http://people.skolelinux.org/pere/blog/Devcamp_brought_us_closer_to_the_Lenny_based_Debian_Edu_release.html">Devcamp brought us closer to the Lenny based Debian Edu release
</a>
74 <p>This weekend we had a small developer gathering for Debian Edu in
75 Oslo. Most of Saturday was used for the general assemly for the
76 member organization, but the rest of the weekend I used to tune the
77 LTSP installation. LTSP now work out of the box on the
10-network.
78 Acer Aspire One proved to be a very nice thin client, with both
79 screen, mouse and keybard in a small box. Was working on getting the
80 diskless workstation setup configured out of the box, but did not
81 finish it before the weekend was up.
</p>
83 <p>Did not find time to look at the
4 VGA cards in one box we got from
84 the Brazilian group, so that will have to wait for the next
85 development gathering. Would love to have the Debian Edu installer
86 automatically detect and configure a multiseat setup when it find one
94 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp
</a>.
98 <div class=
"padding"></div>
102 <a href=
"http://people.skolelinux.org/pere/blog/Endelig_norsk_stavekontroll_med_st__tte_for_ord_med_bindestrek.html">Endelig norsk stavekontroll med støtte for ord med bindestrek
</a>
110 <p>Etter flere års mislykkede forsøk på å skrive om byggesystemet for
111 <a href=
"http://no.speling.org/">den norske stavekontrollen for bokmål
112 og nynorsk
</a> til å ikke bruke bindestrek som ordskillemarkør, lyktes jeg
113 endelig første juledag. Bruken av bindestrek som ordskillemarkør har
114 gjort det umulig å få med ord med bindestrek i
115 stavekontrolldatagrunnlaget, slik at ord som e-post og CD-spiller ikke
116 kunne godtas av stavekontrollen. Hadde litt tid til overs å bruke på
117 stavekontrollen, og satte meg ned med to kopier av byggsystemet og en
118 liten testdatafil, og byttet ut - med = på utvalgte steder i
119 byggsystemet og datafilen helt til jeg fikk samme resultat med det
120 gamle og det nye byggsystemet. Dette tror jeg var forsøk
4, der de
121 foregående har feilet uten at jeg klarte å forstå hvorfor. Det sier
122 kanskje litt om kompleksiteten i det originale byggsystemet som Rune
123 Kleveland laget i sin tid.
</p>
125 <p>Etter å ha endret byggsystemet, var neste steg å importere ordene
126 med bindestrek. Vi har en rekke slike i databasene for
127 <a href=
"http://tyge.sslug.dk/~korsvoll/nb.speling.org/htdocs/">bokmål
</a>
129 <a href=
"http://tyge.sslug.dk/~korsvoll/nn.speling.org/htdocs/">nynorsk
</a>
130 for korrektur av datagrunnlaget for stavekontrollen, og etter importen
131 skulle nå
10350 nye ord bli godkjent som korrekt stavede ord av
139 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll
</a>.
143 <div class=
"padding"></div>
147 <a href=
"http://people.skolelinux.org/pere/blog/Endelig_er_Debian_Lenny_gitt_ut.html">Endelig er Debian Lenny gitt ut
</a>
155 <p>Endelig er
<a href=
"http://www.debian.org/">Debian
</a>
156 <a href=
"http://www.debian.org/News/2009/20090214">Lenny
</a> gitt ut.
157 Et langt steg videre for Debian-prosjektet, og en rekke nye
158 programpakker blir nå tilgjengelig for de av oss som bruker den
159 stabile utgaven av Debian. Neste steg er nå å få
160 <a href=
"http://www.skolelinux.org/">Skolelinux
</a> /
161 <a href=
"http://wiki.debian.org/DebianEdu/">Debian Edu
</a> ferdig
162 oppdatert for den nye utgaven, slik at en oppdatert versjon kan
163 slippes løs på skolene. Takk til alle debian-utviklerne som har
164 gjort dette mulig. Endelig er f.eks. fungerende avhengighetsstyrt
165 bootsekvens tilgjengelig i stabil utgave, vha pakken
166 <tt>insserv
</tt>.
</p>
173 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>.
177 <div class=
"padding"></div>
181 <a href=
"http://people.skolelinux.org/pere/blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html">Time for new LDAP schemas replacing RFC
2307?
</a>
189 <p>The state of standardized LDAP schemas on Linux is far from
190 optimal. There is RFC
2307 documenting one way to store NIS maps in
191 LDAP, and a modified version of this normally called RFC
2307bis, with
192 some modifications to be compatible with Active Directory. The RFC
193 specification handle the content of a lot of system databases, but do
194 not handle DNS zones and DHCP configuration.
</p>
196 <p>In
<a href=
"http://www.skolelinux.org/">Debian Edu/Skolelinux
</a>,
197 we would like to store information about users, SMB clients/hosts,
198 filegroups, netgroups (users and hosts), DHCP and DNS configuration,
199 and LTSP configuration in LDAP. These objects have a lot in common,
200 but with the current LDAP schemas it is not possible to have one
201 object per entity. For example, one need to have at least three LDAP
202 objects for a given computer, one with the SMB related stuff, one with
203 DNS information and another with DHCP information. The schemas
204 provided for DNS and DHCP are impossible to combine into one LDAP
205 object. In addition, it is impossible to implement quick queries for
206 netgroup membership, because of the way NIS triples are implemented.
207 It just do not scale. I believe it is time for a few RFC
208 specifications to cleam up this mess.
</p>
210 <p>I would like to have one LDAP object representing each computer in
211 the network, and this object can then keep the SMB (ie host key), DHCP
212 (mac address/name) and DNS (name/IP address) settings in one place.
213 It need to be efficently stored to make sure it scale well.
</p>
215 <p>I would also like to have a quick way to map from a user or
216 computer and to the net group this user or computer is a member.
</p>
218 <p>Active Directory have done a better job than unix heads like myself
219 in this regard, and the unix side need to catch up. Time to start a
220 new IETF work group?
</p>
227 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
231 <div class=
"padding"></div>
235 <a href=
"http://people.skolelinux.org/pere/blog/Returning_from_Skolelinux_developer_gathering.html">Returning from Skolelinux developer gathering
</a>
243 <p>I'm sitting on the train going home from this weekends Debian
244 Edu/Skolelinux development gathering. I got a bit done tuning the
245 desktop, and looked into the dynamic service location protocol
246 implementation avahi. It look like it could be useful for us. Almost
247 30 people participated, and I believe it was a great environment to
248 get to know the Skolelinux system. Walter Bender, involved in the
249 development of the Sugar educational platform, presented his stuff and
250 also helped me improve my OLPC installation. He also showed me that
251 his Turtle Art application can be used in standalone mode, and we
252 agreed that I would help getting it packaged for Debian. As a
253 standalone application it would be great for Debian Edu. We also
254 tried to get the video conferencing working with two OLPCs, but that
255 proved to be too hard for us. The application seem to need more work
256 before it is ready for me. I look forward to getting home and relax
264 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
268 <div class=
"padding"></div>
272 <a href=
"http://people.skolelinux.org/pere/blog/BSAs_p__stander_om_piratkopiering_m__ter_motstand.html">BSAs påstander om piratkopiering møter motstand
</a>
280 <p>Hvert år de siste årene har BSA, lobbyfronten til de store
281 programvareselskapene som Microsoft og Apple, publisert en rapport der
282 de gjetter på hvor mye piratkopiering påfører i tapte inntekter i
283 ulike land rundt om i verden. Resultatene er tendensiøse. For noen
285 <a href=
"http://global.bsa.org/globalpiracy2008/studies/globalpiracy2008.pdf">siste
286 rapport
</a>, og det er flere kritiske kommentarer publisert de siste
287 dagene. Et spesielt interessant kommentar fra Sverige,
288 <a href=
"http://www.idg.se/2.1085/1.229795/bsa-hoftade-sverigesiffror">BSA
289 höftade Sverigesiffror
</a>, oppsummeres slik:
</p>
292 I sin senaste rapport slår BSA fast att
25 procent av all mjukvara i
293 Sverige är piratkopierad. Det utan att ha pratat med ett enda svenskt
294 företag. "Man bör nog kanske inte se de här siffrorna som helt
295 exakta", säger BSAs Sverigechef John Hugosson.
298 <p>Mon tro om de er like metodiske når de gjetter på andelen piratkopiering i Norge? To andre kommentarer er
<a
299 href=
"http://www.vnunet.com/vnunet/comment/2242134/bsa-piracy-figures-shot-reality">BSA
300 piracy figures need a shot of reality
</a> og
<a
301 href=
"http://www.michaelgeist.ca/content/view/3958/125/">Does The WIPO
302 Copyright Treaty Work?
</a></p>
304 <p>Fant lenkene via
<a
305 href=
"http://tech.slashdot.org/article.pl?sid=09/05/17/1632242">oppslag
313 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/personvern">personvern
</a>.
317 <div class=
"padding"></div>
321 <a href=
"http://people.skolelinux.org/pere/blog/Endelig_operativt_webbasert_medlemsregister_for_Fri_programvare_i_skolen.html">Endelig operativt webbasert medlemsregister for Fri programvare i skolen
</a>
329 <p>Under helgens utviklersamling i
330 <a href=
"http://www.skolelinux.no/">Skolelinux
</a> fikk jeg endelig
331 satt meg ned sammen med Ronny Aasen i styret for å få et webbasert
332 medlemsregister tilbake på plass for foreningen som passer på
333 skolelinuxprosjektet. Etter flere års knot og problemer, er nå
334 memberdb satt opp og klart til bruk. Import av det gamle
335 medlemsregisteret har vist seg vanskelig, så alle medlemmer bes om å
336 registrere seg på nytt. Hvis du støtter FRiSKs formål så er du
337 hjertelig velkommen til
338 <a href=
"http://medlem.friprogramvareiskolen.no/">å melde deg
339 inn
</a>. Formålet lyder:
</p>
341 <blockquote>Linux i skolen skal tilrettelegge for og informere om bruk
342 av fri programvare, i henhold til Debian Free Software Guidelines av
343 2002-
02-
03, i den norske skolen, slik som f.eks. Linux og
351 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>.
355 <div class=
"padding"></div>
359 <a href=
"http://people.skolelinux.org/pere/blog/Opphavet_til_Skolelinux_prosjektet.html">Opphavet til Skolelinux-prosjektet
</a>
367 <p>De færreste er klar over at Skolelinux-prosjektet kom som et resultat
368 av en avgjørelse på årsmøtet i
369 <a href=
"http://www.nuug.no/">NUUG
</a> i
2000-
06-
29, der Håkon Wium
370 Lie, da varamedlem i styret, tok på seg oppdraget om å starte et
371 initiativ kalt "Teach the Teacher", som skulle være et initiativ for
372 å få fri programvare og unix-lignende operativsystemer inn i Skolen.
373 Tanken var at en måtte starte med lærerne for at ungene skulle få
374 mulighet til å møte en bedre IT-hverdag. Jeg var tilstede på
375 møtet, og hadde sans for ideen, men intet skjedde. På vårparten
376 2001 ble det arrangert en demonstrasjon i anledning at First Tuesday
377 hadde invitert Microsoft til et møte for å fortelle om fremtidens
378 Internet. Dette provoserte endel av oss, og EFN og NUUG tok initiativ
380 <a href=
"http://www.digi.no/60982/first-tuesday-mote-med-microsoft-protest">en
381 demonstrasjon utenfor lokalene
2001-
05-
21</a>. Blant de som sto bak
382 demonstrasjonen var Vidar Bakke fra NUUG og Håkon W. Lie fra EFN.
383 Etter demonstrasjonen arrangerte Håkon en fest hjemme hos seg der alle
384 som hadde vært aktive i demonstrasjonsplanlegging og gjennomføringen
385 deltok. Før festen var jeg blitt lei av å vente på at Håkon skulle ta
386 initiativ til "Teach the Teacher", og for å forsøke å få litt fremgang
387 besteme jeg meg for å benytte anledningen hos Håkon til å snakke om
388 behovet for å hjelpe skolene i gang med bedre datasystemer bestående
389 av fri programvare og unix-lignende operativsystemer. Flere var
390 interessert, og Knut Yrvin tenkte på ideen. Han
391 <a href=
"http://developer.skolelinux.no/brev/2001-06-28-invitasjon-skolelinux.txt">ropte
392 sammen
</a> til et stiftelsesmøte i prosjektet i sin arbeidsgivers
393 Objectwares lokaler ved Ullevål stadion
2001-
07-
02, og jeg ble med.
394 Resten er historie. :)
</p>
401 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
405 <div class=
"padding"></div>
409 <a href=
"http://people.skolelinux.org/pere/blog/Automatic_Munin_and_Nagios_configuration.html">Automatic Munin and Nagios configuration
</a>
417 <p>One of the new features in the next Debian/Lenny based release of
418 Debian Edu/Skolelinux, which is scheduled for release in the next few
419 days, is automatic configuration of the service monitoring system
420 Nagios. The previous release had automatic configuration of trend
421 analysis using Munin, and this Lenny based release take that a step
424 <p>When installing a Debian Edu Main-server, it is automatically
425 configured as a Munin and Nagios server. In addition, it is
426 configured to be a server for the
427 <a href=
"http://wiki.debian.org/DebianEdu/HowTo/SiteSummary">SiteSummary
428 system
</a> I have written for use in Debian Edu. The SiteSummary
429 system is inspired by a system used by the University of Oslo where I
430 work. In short, the system provide a centralised collector of
431 information about the computers on the network, and a client on each
432 computer submitting information to this collector. This allow for
433 automatic information on which packages are installed on each machine,
434 which kernel the machines are using, what kind of configuration the
435 packages got etc. This also allow us to automatically generate Munin
436 and Nagios configuration.
</p>
438 <p>All computers reporting to the sitesummary collector with the
439 munin-node package installed is automatically enabled as a Munin
440 client and graphs from the statistics collected from that machine show
441 up automatically on http://www/munin/ on the Main-server.
</p>
443 <p>All non-laptop computers reporting to the sitesummary collector are
444 automatically monitored for network presence (ping and any network
445 services detected). In addition, all computers (also laptops) with
446 the nagios-nrpe-server package installed and configured the way
447 sitesummary would configure it, are monitored for full disks, software
448 raid status, swap free and other checks that need to run locally on
451 <p>The result is that the administrator on a school using Debian Edu
452 based on Lenny will be able to check the health of his installation
453 with one look at the Nagios settings, without having to spend any time
454 keeping the Nagios configuration up-to-date.
</p>
456 <p>The only configuration one need to do to get Nagios up and running
457 is to set the password used to get access via HTTP. The system
458 administrator need to run "
<tt>htpasswd /etc/nagios3/htpasswd.users
459 nagiosadmin
</tt>" to create a nagiosadmin user and set a password for
460 it to be able to log into the Nagios web pages. After that,
461 everything is taken care of.</p>
468 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu
">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug
">nuug</a>.
472 <div class="padding
"></div>
476 <a href="http://people.skolelinux.org/pere/blog/Debian_Edu___Skolelinux_based_on_Lenny_released__work_continues.html
">Debian Edu / Skolelinux based on Lenny released, work continues</a>
484 <p>On Tuesday, the Debian/Lenny based version of
485 <a href="http://www.skolelinux.org/
">Skolelinux</a> was finally
486 shipped. This was a major leap forward for the project, and I am very
487 pleased that we finally got the release wrapped up. Work on the first
488 point release starts imediately, as we plan to get that one out a
489 month after the major release, to include all fixes for bugs we found
490 and fixed too late in the release process to include last Tuesday.</p>
492 <p>Perhaps it even is time for some partying?</p>
494 <p>After this first point release, my plan is to focus again on the
495 next major release, based on Squeeze. We will try to get as many of
496 the fixes we need into the official Debian packages before the freeze,
497 and have just a few weeks or months to make it happen.</p>
504 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu
">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug
">nuug</a>.
508 <div class="padding
"></div>
512 <a href="http://people.skolelinux.org/pere/blog/After_6_years_of_waiting__the_Xreset_d_feature_is_implemented.html
">After 6 years of waiting, the Xreset.d feature is implemented</a>
520 <p>6 years ago, as part of the Debian Edu development I am involved
521 in, I asked for a hook in the kdm and gdm setup to run scripts as root
522 when the user log out. A bug was submitted against the xfree86-common
523 package in 2004 (<a href="http://bugs.debian.org/
230422">#230422</a>),
524 and revisited every time Debian Edu was working on a new release.
525 Today, this finally paid off.</p>
527 <p>The framework for this feature was today commited to the git
528 repositry for the xorg package, and the git repository for xdm has
529 been updated to use this framework. Next on my agenda is to make sure
530 kdm and gdm also add code to use this framework.</p>
532 <p>In Debian Edu, we want to ability to run commands as root when the
533 user log out, to get rid of runaway processes and do general cleanup
534 after a user. With this framework in place, we finally can do that in
535 a generic way that work with all display managers using this
536 framework. My goal is to get all display managers in Debian use it,
537 similar to how they use the Xsession.d framework today.<p>
544 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu
">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug
">nuug</a>.
548 <div class="padding
"></div>
552 <a href="http://people.skolelinux.org/pere/blog/Kerberos_for_Debian_Edu_Squeeze_.html
">Kerberos for Debian Edu/Squeeze?</a>
560 <p><a href="http://www.nuug.no/aktiviteter/
20100413-kerberos/
">Yesterdays
561 NUUG presentation</a> about Kerberos was inspiring, and reminded me
562 about the need to start using Kerberos in Skolelinux. Setting up a
563 Kerberos server seem to be straight forward, and if we get this in
564 place a long time before the Squeeze version of Debian freezes, we
565 have a chance to migrate Skolelinux away from NFSv3 for the home
566 directories, and over to an architecture where the infrastructure do
567 not have to trust IP addresses and machines, and instead can trust
568 users and cryptographic keys instead.</p>
570 <p>A challenge will be integration and administration. Is there a
571 Kerberos implementation for Debian where one can control the
572 administration access in Kerberos using LDAP groups? With it, the
573 school administration will have to maintain access control using flat
574 files on the main server, which give a huge potential for errors.</p>
576 <p>A related question I would like to know is how well Kerberos and
577 pam-ccreds (offline password check) work together. Anyone know?</p>
579 <p>Next step will be to use Kerberos for access control in Lwat and
580 Nagios. I have no idea how much work that will be to implement. We
581 would also need to document how to integrate with Windows AD, as such
582 shared network will require two Kerberos realms that need to cooperate
583 to work properly.</p>
585 <p>I believe a good start would be to start using Kerberos on the
586 skolelinux.no machines, and this way get ourselves experience with
587 configuration and integration. A natural starting point would be
588 setting up ldap.skolelinux.no as the Kerberos server, and migrate the
589 rest of the machines from PAM via LDAP to PAM via Kerberos one at the
592 <p>If you would like to contribute to get this working in Skolelinux,
593 I recommend you to see the video recording from yesterdays NUUG
594 presentation, and start using Kerberos at home. The video show show
595 up in a few days.</p>
602 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu
">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug
">nuug</a>.
606 <div class="padding
"></div>
610 <a href="http://people.skolelinux.org/pere/blog/Thoughts_on_roaming_laptop_setup_for_Debian_Edu.html
">Thoughts on roaming laptop setup for Debian Edu</a>
618 <p>For some years now, I have wondered how we should handle laptops in
619 Debian Edu. The Debian Edu infrastructure is mostly designed to
620 handle stationary computers, and less suited for computers that come
623 <p>Now I finally believe I have an sensible idea on how to adjust
624 Debian Edu for laptops, by introducing a new profile for them, for
625 example called Roaming Workstations. Here are my thought on this.
626 The setup would consist of the following:</p>
630 <li>During installation, the user name of the owner / primary user of
631 the laptop is requested and a local home directory is set up for
632 the user, with uid and gid information fetched from the LDAP
633 server. This allow the user to work also when offline. The
634 central home directory can be available in a subdirectory on
635 request, for example mounted via CIFS. It could be mounted
636 automatically when a user log in while on the Debian Edu network,
637 and unmounted when the machine is taken away (network down,
638 hibernate, etc), it can be set up to do automatic mounting on
639 request (using autofs), or perhaps some GUI button on the desktop
640 can be used to access it when needed. Perhaps it is enough to use
641 the fish protocol in KDE?</li>
643 <li>Password checking is set up to use LDAP or Kerberos
644 authentication when the machine is on the Debian Edu network, and
645 to cache the password for offline checking when the machine unable
646 to reach the LDAP or Kerberos server. This can be done using
647 <a href="http://www.padl.com/OSS/pam_ccreds.html
">libpam-ccreds</a>
648 or the Fedora developed
649 <a href="https://fedoraproject.org/wiki/Features/SSSD
">System
650 Security Services Daemon</a> packages.</li>
652 <li>File synchronisation with the central home directory is set up
653 using a shared directory in both the local and the central home
654 directory, using unison.</li>
656 <li>Printing should be set up to print to all printers broadcasting
657 their existence on the local network, and should then work out of
658 the box with CUPS. For sites needing accurate printer quotas, some
659 system with Kerberos authentication or printing via ssh could be
662 <li>For users that should have local root access to their laptop,
663 sudo should be used to allow this to the local user.</li>
665 <li>It would be nice if user and group information from LDAP is
666 cached on the client, but given that there are entries for the
667 local user and primary group in /etc/, it should not be needed.</li>
671 <p>I believe all the pieces to implement this are in Debian/testing at
672 the moment. If we work quickly, we should be able to get this ready
673 in time for the Squeeze release to freeze. Some of the pieces need
674 tweaking, like libpam-ccreds should get support for pam-auth-update
675 (<a href="http://bugs.debian.org/
566718">#566718</a>) and nslcd (or
676 perhaps debian-edu-config) should get some integration code to stop
677 its daemon when the LDAP server is unavailable to avoid long timeouts
678 when disconnected from the net. If we get Kerberos enabled, we need
679 to make sure we avoid long timeouts there too.</p>
681 <p>If you want to help out with implementing this for Debian Edu,
682 please contact us on debian-edu@lists.debian.org.</p>
689 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu
">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug
">nuug</a>.
693 <div class="padding
"></div>
697 <a href="http://people.skolelinux.org/pere/blog/Forcing_new_users_to_change_their_password_on_first_login.html
">Forcing new users to change their password on first login</a>
705 <p>One interesting feature in Active Directory, is the ability to
706 create a new user with an expired password, and thus force the user to
707 change the password on the first login attempt.</p>
709 <p>I'm not quite sure how to do that with the LDAP setup in Debian
710 Edu, but did some initial testing with a local account. The account
711 and password aging information is available in /etc/shadow, but
712 unfortunately, it is not possible to specify an expiration time for
713 passwords, only a maximum age for passwords.</p>
715 <p>A freshly created account (using adduser test) will have these
716 settings in /etc/shadow:</p>
719 root@tjener:~# chage -l test
720 Last password change : May 02, 2010
721 Password expires : never
722 Password inactive : never
723 Account expires : never
724 Minimum number of days between password change : 0
725 Maximum number of days between password change : 99999
726 Number of days of warning before password expires : 7
730 <p>The only way I could come up with to create a user with an expired
731 account, is to change the date of the last password change to the
732 lowest value possible (January 1th 1970), and the maximum password age
733 to the difference in days between that date and today. To make it
734 simple, I went for 30 years (30 * 365 = 10950) and January 2th (to
735 avoid testing if 0 is a valid value).</p>
737 <p>After using these commands to set it up, it seem to work as
741 root@tjener:~# chage -d 1 test; chage -M 10950 test
742 root@tjener:~# chage -l test
743 Last password change : Jan 02, 1970
744 Password expires : never
745 Password inactive : never
746 Account expires : never
747 Minimum number of days between password change : 0
748 Maximum number of days between password change : 10950
749 Number of days of warning before password expires : 7
753 <p>So far I have tested this with ssh and console, and kdm (in
754 Squeeze) login, and all ask for a new password before login in the
755 user (with ssh, I was thrown out and had to log in again).</p>
757 <p>Perhaps we should set up something similar for Debian Edu, to make
758 sure only the user itself have the account password?</p>
760 <p>If you want to comment on or help out with implementing this for
761 Debian Edu, please contact us on debian-edu@lists.debian.org.</p>
763 <p>Update 2010-05-02 17:20: Paul Tötterman tells me on IRC that the
764 shadow(8) page in Debian/testing now state that setting the date of
765 last password change to zero (0) will force the password to be changed
766 on the first login. This was not mentioned in the manual in Lenny, so
767 I did not notice this in my initial testing. I have tested it on
768 Squeeze, and '<tt>chage -d 0 username</tt>' do work there. I have not
769 tested it on Lenny yet.</p>
771 <p>Update 2010-05-02-19:05: Jim Paris tells me via email that an
772 equivalent command to expire a password is '<tt>passwd -e
773 username</tt>', which insert zero into the date of the last password
781 Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian edu
">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english
">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug
">nuug</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet
">sikkerhet</a>.
785 <div class="padding
"></div>
789 <a href="http://people.skolelinux.org/pere/blog/Sitesummary_tip__Listing_MAC_address_of_all_clients.html
">Sitesummary tip: Listing MAC address of all clients</a>
797 <p>In the recent Debian Edu versions, the
798 <a href="http://wiki.debian.org/DebianEdu/HowTo/SiteSummary
">sitesummary
799 system</a> is used to keep track of the machines in the school
800 network. Each machine will automatically report its status to the
801 central server after boot and once per night. The network setup is
802 also reported, and using this information it is possible to get the
803 MAC address of all network interfaces in the machines. This is useful
804 to update the DHCP configuration.</p>
806 <p>To give some idea how to use sitesummary, here is a one-liner to
807 ist all MAC addresses of all machines reporting to sitesummary. Run
808 this on the collector host:</p>
811 perl -MSiteSummary -e 'for_all_hosts(sub { print join(" ", get_macaddresses(shift)), "\n"; });'
814 <p>This will list all MAC addresses assosiated with all machine, one
815 line per machine and with space between the MAC addresses.
</p>
817 <p>To allow system administrators easier job at adding static DHCP
818 addresses for hosts, it would be possible to extend this to fetch
819 machine information from sitesummary and update the DHCP and DNS
820 tables in LDAP using this information. Such tool is unfortunately not
828 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary
</a>.
832 <div class=
"padding"></div>
836 <a href=
"http://people.skolelinux.org/pere/blog/Parallellized_boot_is_now_the_default_in_Debian_unstable.html">Parallellized boot is now the default in Debian/unstable
</a>
844 <p>Since this evening, parallel booting is the default in
845 Debian/unstable for machines using dependency based boot sequencing.
846 Apparently the testing of concurrent booting has been wider than
847 expected, if I am to believe the
848 <a href=
"http://lists.debian.org/debian-devel/2010/05/msg00122.html">input
849 on debian-devel@
</a>, and I concluded a few days ago to move forward
850 with the feature this weekend, to give us some time to detect any
851 remaining problems before Squeeze is frozen. If serious problems are
852 detected, it is simple to change the default back to sequential boot.
853 The upload of the new sysvinit package also activate a new upstream
856 More information about
857 <a href=
"http://wiki.debian.org/LSBInitScripts/DependencyBasedBoot">dependency
858 based boot sequencing
</a> is available from the Debian wiki. It is
859 currently possible to disable parallel booting when one run into
860 problems caused by it, by adding this line to /etc/default/rcS:
</p>
866 <p>If you report any problems with dependencies in init.d scripts to
867 the BTS, please usertag the report to get it to show up at
868 <a href=
"http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=initscripts-ng-devel@lists.alioth.debian.org">the
869 list of usertagged bugs related to this
</a>.
</p>
876 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
880 <div class=
"padding"></div>
884 <a href=
"http://people.skolelinux.org/pere/blog/Pieces_of_the_roaming_laptop_puzzle_in_Debian.html">Pieces of the roaming laptop puzzle in Debian
</a>
892 <p>Today, the last piece of the puzzle for roaming laptops in Debian
893 Edu finally entered the Debian archive. Today, the new
894 <a href=
"http://packages.qa.debian.org/libp/libpam-mklocaluser.html">libpam-mklocaluser
</a>
895 package was accepted. Two days ago, two other pieces was accepted
897 <a href=
"http://packages.qa.debian.org/p/pam-python.html">pam-python
</a>
898 package needed by libpam-mklocaluser, and the
899 <a href=
"http://packages.qa.debian.org/s/sssd.html">sssd
</a> package
900 passed NEW on Monday. In addition, the
901 <a href=
"http://packages.qa.debian.org/libp/libpam-ccreds.html">libpam-ccreds
</a>
902 package we need is in experimental (version
10-
4) since Saturday, and
903 hopefully will be moved to unstable soon.
</p>
905 <p>This collection of packages allow for two different setups for
906 roaming laptops. The traditional setup would be using libpam-ccreds,
907 nscd and libpam-mklocaluser with LDAP or Kerberos authentication,
908 which should work out of the box if the configuration changes proposed
909 for nscd in
<a href=
"http://bugs.debian.org/485282">BTS report
910 #
485282</a> is implemented. The alternative setup is to use sssd with
911 libpam-mklocaluser to connect to LDAP or Kerberos and let sssd take
912 care of the caching of passwords and group information.
</p>
914 <p>I have so far been unable to get sssd to work with the LDAP server
915 at the University, but suspect the issue is some SSL/GnuTLS related
916 problem with the server certificate. I plan to update the Debian
917 package to version
1.2, which is scheduled for next week, and hope to
918 find time to make sure the next release will include both the
919 Debian/Ubuntu specific patches. Upstream is friendly and responsive,
920 and I am sure we will find a good solution.
</p>
922 <p>The idea is to set up the roaming laptops to authenticate using
923 LDAP or Kerberos and create a local user with home directory in /home/
924 when a usre in LDAP logs in via KDM or GDM for the first time, and
925 cache the password for offline checking, as well as caching group
926 memberhips and other relevant LDAP information. The
927 libpam-mklocaluser package was created to make sure the local home
928 directory is in /home/, instead of /site/server/directory/ which would
929 be the home directory if pam_mkhomedir was used. To avoid confusion
930 with support requests and configuration, we do not want local laptops
931 to have users in a path that is used for the same users home directory
932 on the home directory servers.
</p>
934 <p>One annoying problem with gdm is that it do not show the PAM
935 message passed to the user from libpam-mklocaluser when the local user
936 is created. Instead gdm simply reject the login with some generic
937 message. The message is shown in kdm, ssh and login, so I guess it is
938 a bug in gdm. Have not investigated if there is some other message
939 type that can be used instead to get gdm to also show the message.
</p>
941 <p>If you want to help out with implementing this for Debian Edu,
942 please contact us on debian-edu@lists.debian.org.
</p>
949 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug
</a>.
953 <div class=
"padding"></div>
957 <a href=
"http://people.skolelinux.org/pere/blog/More_flexible_firmware_handling_in_debian_installer.html">More flexible firmware handling in debian-installer
</a>
965 <p>After a long break from debian-installer development, I finally
966 found time today to return to the project. Having to spend less time
967 working dependency based boot in debian, as it is almost complete now,
968 definitely helped freeing some time.
</p>
970 <p>A while back, I ran into a problem while working on Debian Edu. We
971 include some firmware packages on the Debian Edu CDs, those needed to
972 get disk and network controllers working. Without having these
973 firmware packages available during installation, it is impossible to
974 install Debian Edu on the given machine, and because our target group
975 are non-technical people, asking them to provide firmware packages on
976 an external medium is a support pain. Initially, I expected it to be
977 enough to include the firmware packages on the CD to get
978 debian-installer to find and use them. This proved to be wrong.
979 Next, I hoped it was enough to symlink the relevant firmware packages
980 to some useful location on the CD (tried /cdrom/ and
981 /cdrom/firmware/). This also proved to not work, and at this point I
982 found time to look at the debian-installer code to figure out what was
985 <p>The firmware loading code is in the hw-detect package, and a closer
986 look revealed that it would only look for firmware packages outside
987 the installation media, so the CD was never checked for firmware
988 packages. It would only check USB sticks, floppies and other
989 "external" media devices. Today I changed it to also look in the
990 /cdrom/firmware/ directory on the mounted CD or DVD, which should
991 solve the problem I ran into with Debian edu. I also changed it to
992 look in /firmware/, to make sure the installer also find firmware
993 provided in the initrd when booting the installer via PXE, to allow us
994 to provide the same feature in the PXE setup included in Debian
997 <p>To make sure firmware deb packages with a license questions are not
998 activated without asking if the license is accepted, I extended
999 hw-detect to look for preinst scripts in the firmware packages, and
1000 run these before activating the firmware during installation. The
1001 license question is asked using debconf in the preinst, so this should
1002 solve the issue for the firmware packages I have looked at so far.
</p>
1004 <p>If you want to discuss the details of these features, please
1005 contact us on debian-boot@lists.debian.org.
</p>
1012 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
1016 <div class=
"padding"></div>
1020 <a href=
"http://people.skolelinux.org/pere/blog/Parallellized_boot_seem_to_hold_up_well_in_Debian_testing.html">Parallellized boot seem to hold up well in Debian/testing
</a>
1028 <p>A few days ago, parallel booting was enabled in Debian/testing.
1029 The feature seem to hold up pretty well, but three fairly serious
1030 issues are known and should be solved:
1034 <li>The wicd package seen to
1035 <a href=
"http://bugs.debian.org/508289">break NFS mounting
</a> and
1036 <a href=
"http://bugs.debian.org/581586">network setup
</a> when
1037 parallel booting is enabled. No idea why, but the wicd maintainer
1038 seem to be on the case.
</li>
1040 <li>The nvidia X driver seem to
1041 <a href=
"http://bugs.debian.org/583312">have a race condition
</a>
1042 triggered more easily when parallel booting is in effect. The
1043 maintainer is on the case.
</li>
1045 <li>The sysv-rc package fail to properly enable dependency based boot
1046 sequencing (the shutdown is broken) when old file-rc users
1047 <a href=
"http://bugs.debian.org/575080">try to switch back
</a> to
1048 sysv-rc. One way to solve it would be for file-rc to create
1049 /etc/init.d/.legacy-bootordering, and another is to try to make
1050 sysv-rc more robust. Will investigate some more and probably upload a
1051 workaround in sysv-rc to help those trying to move from file-rc to
1052 sysv-rc get a working shutdown.
</li>
1056 <p>All in all not many surprising issues, and all of them seem
1057 solvable before Squeeze is released. In addition to these there are
1058 some packages with bugs in their dependencies and run level settings,
1059 which I expect will be fixed in a reasonable time span.
</p>
1061 <p>If you report any problems with dependencies in init.d scripts to
1062 the BTS, please usertag the report to get it to show up at
1063 <a href=
"http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=initscripts-ng-devel@lists.alioth.debian.org">the
1064 list of usertagged bugs related to this
</a>.
</p>
1066 <p>Update: Correct bug number to file-rc issue.
</p>
1073 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
1077 <div class=
"padding"></div>
1081 <a href=
"http://people.skolelinux.org/pere/blog/KDM_fail_at_boot_with_NVidia_cards___and_no_one_try_to_fix_it_.html">KDM fail at boot with NVidia cards - and no one try to fix it?
</a>
1089 <p>It is strange to watch how a bug in Debian causing KDM to fail to
1090 start at boot when an NVidia video card is used. The problem seem to
1091 be that the nvidia X.org driver uses a long time to initialize, and
1092 this duration is longer than kdm is configured to wait.
</p>
1094 <p>I came across two bugs related to this issue,
1095 <a href=
"http://bugs.debian.org/583312">#
583312</a> initially filed
1096 against initscripts and passed on to nvidia-glx when it became obvious
1097 that the nvidia drivers were involved, and
1098 <a href=
"http://bugs.debian.org/524751">#
524751</a> initially filed against
1099 kdm and passed on to src:nvidia-graphics-drivers for unknown reasons.
</p>
1101 <p>To me, it seem that no-one is interested in actually solving the
1102 problem nvidia video card owners experience and make sure the Debian
1103 distribution work out of the box for these users. The nvidia driver
1104 maintainers expect kdm to be set up to wait longer, while kdm expect
1105 the nvidia driver maintainers to fix the driver start faster, and
1106 while they wait for each other I guess the users end up switching to a
1107 distribution that work for them. I have no idea what the solution is,
1108 but I am pretty sure that waiting for each other is not it.
</p>
1110 <p>I wonder why we end up handling bugs this way.
</p>
1117 Tags:
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu
</a>,
<a href=
"http://people.skolelinux.org/pere/blog/tags/english">english
</a>.
1121 <div class=
"padding"></div>
1123 <p style=
"text-align: right;"><a href=
"debian edu.rss"><img src=
"http://people.skolelinux.org/pere/blog/xml.gif" alt=
"RSS Feed" width=
"36" height=
"14"></a></p>
1136 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/01/">January (
2)
</a></li>
1138 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/02/">February (
1)
</a></li>
1140 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/03/">March (
3)
</a></li>
1142 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/04/">April (
3)
</a></li>
1144 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/05/">May (
9)
</a></li>
1146 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2010/06/">June (
1)
</a></li>
1153 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/01/">January (
8)
</a></li>
1155 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/02/">February (
8)
</a></li>
1157 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/03/">March (
12)
</a></li>
1159 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/04/">April (
10)
</a></li>
1161 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/05/">May (
9)
</a></li>
1163 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/06/">June (
3)
</a></li>
1165 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/07/">July (
4)
</a></li>
1167 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/08/">August (
3)
</a></li>
1169 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/09/">September (
1)
</a></li>
1171 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/10/">October (
2)
</a></li>
1173 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/11/">November (
3)
</a></li>
1175 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2009/12/">December (
3)
</a></li>
1182 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2008/11/">November (
5)
</a></li>
1184 <li><a href=
"http://people.skolelinux.org/pere/blog/archive/2008/12/">December (
7)
</a></li>
1195 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (
11)
</a></li>
1197 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/amiga">amiga (
1)
</a></li>
1199 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/aros">aros (
1)
</a></li>
1201 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/debian">debian (
21)
</a></li>
1203 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (
21)
</a></li>
1205 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/english">english (
32)
</a></li>
1207 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (
1)
</a></li>
1209 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (
6)
</a></li>
1211 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/kart">kart (
2)
</a></li>
1213 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/lenker">lenker (
1)
</a></li>
1215 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (
1)
</a></li>
1217 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (
5)
</a></li>
1219 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/norsk">norsk (
65)
</a></li>
1221 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/nuug">nuug (
74)
</a></li>
1223 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (
12)
</a></li>
1225 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/personvern">personvern (
11)
</a></li>
1227 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/reprap">reprap (
10)
</a></li>
1229 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/rss">rss (
1)
</a></li>
1231 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (
8)
</a></li>
1233 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (
1)
</a></li>
1235 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/standard">standard (
11)
</a></li>
1237 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (
1)
</a></li>
1239 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/video">video (
10)
</a></li>
1241 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (
1)
</a></li>
1243 <li><a href=
"http://people.skolelinux.org/pere/blog/tags/web">web (
6)
</a></li>