[12:01] just did an upgrade. weather applet is b0rked. [12:01] and also the window that offers to "delete from panel" the applet. [12:07] wooo everybody notice the all new rocking weather applet? much more locations per each country! [12:08] rocking! [12:08] it also has indications now for day/night time [12:09] it's not b0rked btw, I just had to remove them and readd them === wasabi [~wasabi@c-24-1-67-127.client.comcast.net] has joined #Ubuntu-devel === lamont__r [~lamont@phantom.acmeps.com] has joined #ubuntu-devel [12:44] strange d-i ppc has no 2.6 supportC[C[C[C[C[C[C[C[C[C[C[C[C[C[C [12:45] [C ? [12:46] kapute umlauts :) [12:46] hehe [12:46] mine or yours ? [12:46] mine :) [12:48] there were several requests on helping out with kubuntu in #ubuntu last night.... are you the person to point to amu ? or is it haggai ? [12:48] well the liveCd for amd64 was done 2 min. i sit for ppc now 3h :) [12:49] heh, 64 bit... [12:49] ..ooo i just spend some time to boost it up :) help if i can, haggai manage it. [12:50] ok [12:52] echo "Kernel $(KERNELMAJOR) not supported yet" [12:52] :( [12:57] ogra: the new live looks cool, yesterday i builded a horay and with d-i X started :) found some problems with mouse sound and net, finally he hole thing looks smart. [12:58] sounds great ... :) [12:58] i got my screensaver hack working with xft and half way with utf8 now :) learned a lot the last week ... [12:59] it looks great :) as i said amd64 needs 2 minutes [12:59] d-i just works ? [01:00] yep [01:02] wow, kudos to kamion.....tell me if you need tests, got a mac here and plenty of intel machines [01:02] amu: and kudos to you as well indeed ;) [01:03] hmm utf-8, that could be the reason why the non-latin langs looks worse, guess i've to change it to utf-8 [01:04] i think its the policy for hoary to switch anything to utf8 [01:05] ogra: cool, the problem atm is most people are away :) a automatic xconfigurator is needed, have to wait for danielS [01:07] amu: xresprobe does it currently... it is called by the postinst script of the xserver package....not sure if this also applies to xorg, but i guess so [01:13] no prob, i use temp. the old mkxf86config [01:24] does anybody know how I can patch a .deb pacakge as a whole? I have a patch that spans both the changlog and a file inside the source package [01:24] is there a "debpatch" ? [01:28] dpkg-repack? [01:29] no [01:29] sivang: you want to patch the source package? [01:30] bob2: yes :) [01:31] bob2: like in , extracting it, apply the comprehensive patch, repackage. [01:32] the source, not the binary, right? [01:33] bob2: is there a possibility to patch the bin pkg also? [01:34] er, yeah, but why? [01:34] you patch the source, build it, install the new binary [01:42] Keybuk: btw, your mum got alsa-driver_1.0.7-2ubuntu1 way wrong, near as I can tell. [01:45] leave my mum out of it [01:45] heh [01:45] my mum is NOT part of Soyuz [01:45] cockfosters. [01:51] bob2: I would consider it a personal favour if you could get some new jokes by April [01:51] kthxbye :p [01:54] Keybuk: ok. === jamesh [~james@203-59-217-65.dyn.iinet.net.au] has joined #ubuntu-devel [02:46] Can someone migrate the python2.4-mysqldb from libmysqlclient10 to libmysqlclient14? [02:47] And besides, is librdf supposed to be based on libmysqlclient12? If not, y not make it base on libmysqlclient14? [02:48] UGH [02:48] UGH GUH GUH i dislike .udebs [02:49] fabbione: sorry to make u wait, I just fell sleep, is nvidia-glx working well rite now or not? some ppl said to me not, but it did work here, not really sure it's my mistake or still a bug [02:59] amu: d-i powerpc *defaults* to 2.6 :-) [02:59] amu: it definitely has 2.6 support, I did it and it was the second port after i386 to get it ... [02:59] wasabi: udebs are love [03:00] buh [03:00] d-i should support .debs [03:00] for those of us who have upgraded from floppy drives [03:00] All I need is curl. That's it. [03:00] 2 hours later I still haven't got it. [03:03] wasabi: *sigh* no, I read the conversation on #debian-boot and there were a hell of a lot of misunderstandings in there [03:03] note EXTRAFILES in the d-i build system for quick hacks like what you're trying to do [03:03] gah. [03:04] Well, actually, I was hoping it wouldn't be a "quick hack"... [03:04] and I could do it right. [03:04] For upstream acceptence. There will be a lot of situations (for sitations like mine), where preseeding,a s it is right now, isn't usable. [03:04] preseed/url is fairly insecure. ;0 [03:05] where "lot" is ~= "few" [03:06] udebs are really easy to produce. XC-Package-Type: udeb in the control file, build-dep on debhelper (>= 4.2), install stuff into the curl-udeb temporary build tree like you would do for any standard multi-binary package [03:06] Kamion, I tried that... dh_* broke because i think it moved hte files, instead of copying them [03:06] what's wrong with wget though? [03:06] wget doesn't do CA validation [03:06] for SSL. === rolfzor [~rolf@c-891072d5.02-118-73746f22.cust.bredbandsbolaget.se] has joined #ubuntu-devel [03:06] read the relevant dh_* documentation, it goes into this in a lot of detail [03:06] Our deployment scenario: for windows. [03:07] perhaps you're using dh_movefiles rather than dh_install [03:07] We distribute CD's. The CD's have a pub cert on them. [03:07] Kamion: this is available on debhelpers main docs? [03:07] sivang: man pages [03:07] Different departments boot the CD, which uses DHCP to find a local isntallation server. [03:07] Kamion: k,tnx [03:08] The installation server is verified against the cert and encrypted, just basic SSL. preseeding file is copied over. [03:08] no particular reason why you couldn't convince the d-i build process to accept a .deb though [03:08] User is asked for his kerberos username/password. [03:08] it would just, well, suck [03:08] well it would suck if you were trying to build floppies. [03:08] perhaps busybox wget should be enhanced to support SSL then [03:08] But, i'd venture to say, nobody that uses ubuntu does that. [03:08] *ahem* you don't read my e-mail :P [03:08] normal wget doesn't support ca cerification. [03:08] heh [03:08] I have a lot of requests for floppy support. [03:09] with good reasons. [03:09] crazy. [03:09] the only reason we don't do it is that I haven't persuaded the 2.6 kernel to fit onto a floppy yet [03:09] well, MS dropped it, and it works for them. And that's the market I'm in. [03:09] ok, but MS drop old hardware much more readily than I'm willing to. [03:09] yeah. [03:09] no, i follow you, it's great that it is floppiable. [03:10] But, for me, I really just want to Get It Done, without concerning myself with that. [03:10] Since it has no bearing on my situation at all. [03:10] sure. [03:10] but it should be a very trivial hack in the build system. [03:10] I was just lookingn around d-i for the dpkg stuff to persuade it to do a .deb. And pointers? [03:10] s/and/any/ [03:10] look at build/Makefile and build/get-packages I guess, to start with === lordan [~lordan@205.177.65.128] has joined #ubuntu-devel [03:11] I mean, it just uses dpkg to unpack the packages === moyogo [~moyogo@Toronto-HSE-ppp3718050.sympatico.ca] has joined #ubuntu-devel [03:11] It seems to rename the .deb's to .udeb.... and then install them [03:11] and then promptly try to chroot [03:11] do the build as root [03:11] did. [03:11] fakechroot is a hideous hack and is unlikely to help you [03:11] still no go... slightly different error. let me find it. [03:11] what target were you building? [03:12] rebuild_* is usual [03:12] build_netboot [03:12] ok [03:13] AFAIK the only things that try to chroot are the demo and shell targets [03:13] dpkg (subprocess): unable to execute new pre-installation script: No such file or directory [03:13] dpkg: error processing udebs/zlib1g.udeb (--unpack): [03:13] subprocess pre-installation script returned error exit status 2 [03:13] Errors were encountered while processing: [03:13] udebs/zlib1g.udeb [03:13] same error, but let me switch zlib1g to -udeb === mdz [~mdz@69-167-148-207.vnnyca.adelphia.net] has joined #ubuntu-devel [03:13] oh wait, can't do that. Provides doesn't support versioned stuff. [03:14] So, zlib1g it is. [03:14] provides do in d-i, you were misinformed. [03:14] heh. === AndyFitz [~andy@220-245-97-227-qld-pppoe.tpgi.com.au] has joined #ubuntu-devel [03:14] anna totally ignores versioning on provides [03:15] although whether the build system will cope, I'm not sure [03:15] well with -udeb it fails because of deps [03:15] The following packages have unmet dependencies: [03:15] curl: Depends: zlib1g (>= 1:1.2.1) [03:15] blah blah blah [03:15] why don't I just put together a curl-udeb for you? it would be far easier [03:16] That would be super. As long as it makes it upstream. THe idea of using the .deb was to avoid maintaining my own curl package. [03:16] I dont want to maintain anything except a config file. ;) [03:16] And I'd like to venture most company's who would like to do this would think the same. [03:16] I'm not in the business of making promises about other people's packages; you get to submit it [03:17] ayup [03:17] will do then [03:17] im a bit confused where I went wrong. [03:18] I don't really see why EXTRAFILES is unacceptable though [03:18] curl will not be accepted into mainstream d-i, I suspect [03:18] it probably is, i just didn't know about it. [03:18] since it duplicates wget, and busybox wget should just be fixed [03:19] well, mainstream wget doesn' do ca validation either. [03:19] So, any preseed/url is inherentily insecure. [03:19] sure, no reason why that feature could not be added though [03:19] true. [03:19] apart from space, certainly [03:19] but it could be optional in some way [03:19] surely a big company doing a big deployment can just use preseed/file and do customised media? [03:20] That was where I started. [03:20] Then I realized I might have to change the preseed file later. [03:20] And redistributing CD's is... a big task. [03:20] Well, a bigger task than currently done for windows, at least. [03:20] Somehow I'm supposed to shoehorn kerberos into this too... but that's for another day. [03:21] This will be really slick when it's done, regardless. [03:22] sigh, curl does use dh_movefiles [03:22] OTOH there should be a second build for the udeb anyway [03:22] i'll try extrawhatever [03:22] (gcc -Os etc.) [03:22] see build/config/local for that, it has a commented-out example [03:22] ahh okay [03:22] soon as this works, im making a packages/kerberos-auth or some such. [03:24] cool [03:26] morning [03:26] basic procedure will be, user boots, system does auto detection stuff, dhcp. kerberos-auth fires up, auths to realm... stores in a key cache. preseed retreves it's file, authenticating using the ticket, sometime during setup it uses the admin interface to create a new principal on the server... [03:26] not sure how I want to go about that one. Running base-config during the first boot would make it more seamless. [03:26] what, pre-reboot? [03:26] Otherwise... I've gotta hide the ticket away someplace dangerous during the reboot. [03:27] Yeah. [03:27] hm. be warned, baseconfig-udeb does not work all that smoothly [03:27] there are lots of difficult-to-solve problems there [03:27] Yeah. [03:27] So, just not sure how I wnat to deal with it. A ticket might survive a reboot, just gotta put it someplace other than /tmp. [03:28] Basically the user should only be asked for password (or creds... someday smart card) once, and creds should be stored for the duration of the process. [03:29] incidentally, how do you know that there isn't a trojan DHCP server on the network? [03:29] That's why I have to do CA validation on the preseed file. [03:29] fair enough, yeah [03:29] The CA is stored on the CD. === Kamion is half asleep [03:29] an alternative might be to use apt's authentication support somehow [03:29] yeah, I will have to use that too. [03:30] (although of course that isn't implemented in d-i yet) [03:30] a rogue package sounds makes the entire thing pointless. [03:30] s/sounds/source/ [03:30] well, guess I'll have ot wait for it then. [03:30] or help if I ever get a clue. :) [03:30] anna would be the place to start there [03:31] you'd have to put the key in the initrd, of course [03:31] Yeah, It would be built with the image. [03:31] doesn't work for netboot though, fundamentally you have to trust something [03:31] cert revocation will have to be considered at some point too [03:31] on the CD, you could just ignore the problem, since all the udebs are there anyway [03:31] but I don't want to thinka bout that just yet [03:32] the udebs are exactly as trustworthy as the initrd [03:32] Yeah. I trust the CD. [03:32] THe CD extends trust to the network. [03:32] And the network only trusts kerberos. [03:33] there are nifty commercial apps for windows that do all this with 2 clicks. [03:33] that's what im competing with basically. [03:33] generate a Windows installer that uses kerberos auth, you mean? [03:33] "please insert your windows key" *copying files* "choose your deployment server from the list" [03:33] Yeah. [03:33] A boot CD for net installs. [03:33] That does all the stuff just mentioned. === Kamion nods [03:34] You click a button, and it pops out a CD image. [03:37] Hopefully this works out as I envisage it. There isn't a whole lot in the way. d-i provides most of the tools. [03:37] Debian provides the rest (if I could just use .debs!) [03:37] of course the other option is a gpg-signed preseed file [03:37] which would allow you to defer many of the problems to the second stage === tuo2 [~foo@adsl-36-114.swiftdsl.com.au] has joined #ubuntu-devel [03:38] preseed file has to be encrypted too. [03:38] can't move it across the network in clear text at least. [03:38] ok [03:38] but still, all you need is gpg [03:38] hmm. perhaps. [03:38] it might well be worth avoiding the complexity of kerberos in the first stage [03:38] Oh definatly. Each peice of this is going to be a seperate d-i module. [03:38] also gpg-signed preseed files are much more likely to be officially supported :) === tuo2 [~foo@adsl-36-114.swiftdsl.com.au] has joined #ubuntu-devel [03:39] since they're much more generally applicable [03:39] Hmm. [03:39] That might remove the ssl requirement totally. [03:39] just gpg encrypt it and be done [03:39] elmo's away at the moment, but I'm sure he'd be amenable to a gnupg-udeb [03:40] Hmm... okay. Here's one requirement... im not familiar enough for gpg to know if it's doable. [03:40] The preseed file that is retrieved, must only be readable by somebody with a username/password, which is configurable remotely. [03:41] not just anyone with the CD? [03:41] Somebody can't steal a CD to get the admin passes [03:41] correct [03:41] That's where the kerberos came in. [03:41] so just put a passphrase on the key? [03:41] (gpg) [03:41] that can change. [03:41] that seems pretty straightforward [03:41] In the organization, there are many levels of IT... across the country. [03:41] Many usere accounts. [03:42] Everybody designated by the server should be able to install systems. [03:42] you can encrypt something to lots of keys [03:42] And that list of people changes frequently. [03:42] As people come and go, etc. [03:42] Yeah yeah. It does move the preseed encryption to some process on the server, not just a one time thing. [03:42] curl lets you use gssapi auth to retrieve from http. [03:42] the encrypted blob itself has no value ... it's only valuable with the passphrase, and the "username" could just be used to figure out where to get the blob from [03:43] So, simple kerberos auth, combined with ssl, takes care of both the problems... which is why I was heading in that direction. [03:43] right, but since it's a more specialised solution it makes it more likely that you'll have to maintain it yourself :-) [03:43] I'm trying to think of more generalisable solutions. [03:43] The server process could update the preseed file as new people get the ability to use it. [03:43] gpg doesn't have any group concept, does it? [03:44] like, encrypt something with a "group" key, added to each user's key. [03:44] Sounds very ungpg like [03:44] um ... that's not meaningful [03:44] but I'm not too familiar with it [03:44] you can have a keyring, not just a single key [03:44] if you want a group key, just add that key to everybody's keyring in the group [03:44] or encrypt a secret key with a user's key and send that secret key to them [03:45] Protecting the preseed file with apache based on a ldap group membership is fairly straightforward. Not sure how that would work in a gpg situation. [03:45] it's orthogonal to gpg. [03:45] Doesn't deal with revocation though does it? [03:45] don't try to think of access control on downloads in the same context as gpg. [03:46] wasabi: how about HTTP basic auth to access the repository? [03:46] jamesh, I dont have a clear text password. [03:46] if you want to revoke an encrypted blob and you've already given out the key, the only possible answer is to not give out the encrypted blob [03:47] Well, I would if I kept it around. [03:47] a multi-level key setup could fix that though [03:47] wasabi: well, basic auth over SSL is not too bad, and gives you a lot of flexibility at the server end ... [03:47] i.e. don't give out the key, just give out the key used to encrypt a session key and decide whether to give out the session key on the fly [03:48] jamesh, makes future movement into the realm of smart cards hard too. [03:48] in fact, so does gpg. =/ [03:48] several hardware crypto vendors support gpg [03:48] I used to work for one such [03:49] I think the samba guys are working on implementing MS's kerberos extensions to support ticket authentication using a smart card... I doubt the same thing would work with gpg. [03:49] apples don't work with oranges either :) [03:49] and the aim is to displace what exists currently, which means i am a bit limited. ;) [03:50] also have to fit into the existing infrastructure as much as possible. [03:50] you just need to make it look the same, it surely doesn't matter exactly how it works under the hood [03:50] if the Windows GUI is a two-click thing it can't expose much of the implementation [03:50] generating a key and sticking it in the right places could be entirely automated [03:51] anyway, as it happens, you could certainly put a key on a smart card and have gpg use it, which is equivalent to ticket auth using a smart card, if done right [03:51] well, just thinking of my experiences, and the best way to capture the market. [03:52] Because that's my goal afterall, to see Ubuntu on every desktop. ;) [03:53] it's all crypto. the protocol matters more than the implementation as far as making it work securely is concerned, so you're free to choose an implementation which is easiest to integrate with the software [03:54] of course, when multiple different software stacks are concerned, this can get amusing [03:54] It's just that the existing software stack on the server side is already decided and unchangable. [03:54] and I happen to like it too. ;) [03:54] only on *your* server side; other people have totally different server sides which are also decided and unchangeable in exactly the same way [03:55] which makes a solution tailored to your server side a poor option for general-purpose implementation [03:55] Kamion, well, those who use Windows to do this, all do it the same way. ;) [03:55] with respect, I doubt that :) [03:55] Well, other than Novell Netware, there is no other player in the market. [03:55] Active Directory. [03:56] my housemate's a Windows sysadmin for a university, I don't believe he uses Kerberos at all [03:56] Does he use Active Directory? [03:56] no idea [03:56] Because if he doesn't, he uses either Samba or Netware. :0 [03:56] I'm not an expert in the field, I'm just extremely sceptical that the market is that limited [03:56] Welcome to MS-land. [03:56] Samba seems more likely [03:57] proprietary software is anything but single-player, even in MS-land [03:57] and anyway, Ubuntu deployments are not just about Windows replacements [03:57] we support Macs too, remember [03:57] OpenDirectory [03:57] Kerberos and LDAP. [03:58] ActiveDirectory, Kerberos and LDAP. [03:58] same tune differnet name. [03:58] ok, whatever, I need sleep [03:58] night. Thanks for your help. :0 [03:58] I remain unconvinced that that's the right approach for preseeding [03:58] Me too. Which is why we had this convo [03:58] primarily because it's a huge sledgehammer to crack a very small nut :) [03:59] which is ALWAYS a bad idea where secure protocol design is concerned. [03:59] Well, that's the thing. The protocols are already in place. I just want to use them. [03:59] anyways. im going to get cocoa. mmm [04:04] wasabi: (mind you, I realise that doing the download of the preseed blob using SSL gives you protection against replay attacks more or less for free, assuming you believe in SSL. hmm.) === mojo [~mojo@220-244-212-78-vic.tpgi.com.au] has joined #ubuntu-devel [04:10] I have installed libneon24, but how come all OOo still base on the old version libneon23? Can someone confirm? Or is it my mistake? [04:39] mojo: Depends: libneon23 === Crushed_Cigar [~zinc@ACA61F85.ipt.aol.com] has joined #ubuntu-devel [05:28] Kamion: are the 20041222 daily CD's worth testing on ia64 and ppc? [05:28] s/testing/trying to use/ === lamont sleeps === wasabi [~wasabi@c-24-1-67-127.client.comcast.net] has joined #ubuntu-devel === ironwolf [~ironwolf@c-24-6-169-124.client.comcast.net] has joined #ubuntu-devel [06:30] morning === ironwolf [~ironwolf@c-24-6-169-124.client.comcast.net] has joined #ubuntu-devel === enrico [~enrico@enrico.developer.debian] has joined #ubuntu-devel === pitti [~martin@195.227.105.180] has joined #ubuntu-devel [07:37] Morning === pitti yawns [07:39] hey pitti [07:39] Hi fabbione [07:39] Had a good night? [07:40] pitti: almost [07:40] I was awake half of the night :-( [07:40] jdub: 2155 IS NOT A KERNEL PROBLEM [07:41] fabbione: THANKS, LET ME KNOW WHAT WE CAN DO WITH IT [07:41] WHY ARE WE SHOUTING? [07:42] jdub: BECAUSE YOU ARE ON THE OTHER SIDE OF THE WORLD AND I WANT YOU TO HEAR ME! [07:42] hahahhaha [07:42] oh you dint hear me HAHAHAHAHHAHAHAHAHHAHAHA [07:42] jdub: i need you to check the hotplug / udev events and see why the device is not created. [07:43] jdub: the kernel is not is charge to do such task [07:57] fabbione: #ubuntu-doc mail arrived perfectly, thanks! [07:58] enrico: cool [07:59] enrico: do you need the backlogs? [07:59] enrico: they are on my ~ on people [07:59] fabbione: you mean the previous days? No, no need to, thanks [07:59] goody [08:00] fabbione: (for the records, however, I don't have an account on people.ubuntu) [08:00] enrico: no need to have on.e [08:00] ah, ok [08:00] ever heard of that protocol that shares info on port 80? ;) [08:11] fabbione: oh... that subversive protocol invented some time ago by those swiss terrorists that are trying to develop nuclear technology? [08:12] no.. i mean that protocol that is sucking all the internet bandwith in place of ftp, slowing down all my porn downloads [08:13] fabbione: just download port from port 80 :) [08:36] Who should I talk with to have something like a baz sandbox that we docteam could experiment and play with? [08:37] mdz: still awake? [08:38] Keybuk, Kamion, jdub: anybody out there? [08:38] i am for a moment [08:39] jdub: I /msg you [09:05] haggai, amu: ping === winkle_ [~winkle@lgh3814234.vittran.norrnod.se] has joined #ubuntu-devel === cenerentola [~cenerento@84.222.38.88] has joined #ubuntu-devel === mvo [~Michael@ip181.135.1511I-CUD12K-01.ish.de] has joined #ubuntu-devel [10:29] Moin mvo [10:34] hi pitti === ogra [~ogra@pD95F81E4.dip.t-dialin.net] has joined #ubuntu-devel === seb128 [~seb128@ANancy-151-1-50-81.w83-196.abo.wanadoo.fr] has joined #ubuntu-devel [11:09] Hi seb128 [11:09] hey pitti [11:10] how is the security stack going ? [11:10] seb128: today, downwards [11:11] seb128: yesterday I got two new mails for each processed one [11:11] :( [11:11] people spend the chrismast holidays to find security problems or what ? [11:12] christmas even [11:12] seems so [11:16] pitti: quite a pile to get through then? [11:17] ajmitch_: yes, still === Ygster [~ygster@marriere-1-82-67-136-38.fbx.proxad.net] has joined #ubuntu-devel [12:00] Kamion, Keybuk, jdub: anybody here? I need a native English speaker again... [12:00] I'm not a native speaker, but shout :) [12:02] pitti: yep === trulux [~lorenzo@67.Red-80-25-56.pooles.rima-tde.net] has joined #ubuntu-devel === herzi [~herzi@d021171.adsl.hansenet.de] has joined #ubuntu-devel === Ygster [~ygster@marriere-1-82-67-136-38.fbx.proxad.net] has joined #ubuntu-devel === rburton [~ross@82-133-111-179.dyn.gotadsl.co.uk] has joined #ubuntu-devel === trulux_ghost [~lorenzo@67.Red-80-25-56.pooles.rima-tde.net] has joined #ubuntu-devel === mojo [~mojo@220-244-212-78-vic.tpgi.com.au] has joined #ubuntu-devel [01:49] Mithrandir: ping === trulux_ghost is now known as trulux [02:04] haggai: ping [02:08] pitti: morning! [02:08] Hi sivang! [02:08] pitti: oops, g'afternoon :) === Ygster [~ygster@marriere-1-82-67-136-38.fbx.proxad.net] has joined #ubuntu-devel [02:09] mvo: there was a point to sync ncb with debian ? I thought we had all the debian changes ... [02:09] mvo: duuuude [02:09] mvo: I am killing you. KILLING YOUUUUUUU. [02:10] jordi: arrggg === jordi sharpens knives. [02:10] what did I do? === jordi gets stones. === pitti gets out of the way [02:10] jordi: don't kill me! === Treenaks puts up blood-proof transparent divisions [02:10] mvo: btw, can you sync packages yourself? [02:10] mvo: duuuude, you imported synaptic's pot to rosetta, but not the zillion existing translations, so random people are re-translating it now, apparently. [02:11] mvo: I'm getting a brand new, not-so-good translation in Catalan :) [02:12] jordi: argggsss ... sorry. I'll fix this [02:12] mvo: same with Dutch [02:12] jordi: also with lots of other programs in rosetta (gconf..) [02:12] seb128: I think there where some "README.debian" updates in the upload I did [02:12] mvo: ok [02:13] Treenaks: yeh :( [02:14] daf: around? [02:35] pitti: pong [02:36] Mithrandir: just sent you a mail, regarding a mailman security issue [02:36] pitti: ok, will look at it. [02:36] Mithrandir: thanks [02:57] pitti, where cracklib looks for dicts in Ubuntu? i'm trying to build PAM with updated sleinux support and it says none found [02:58] but already there's a one at /etc/dict.../words [03:00] trulux: you need to install a package that provides 'wordlist' [03:00]