=== ealden [n=ealden@203.76.212.103] has joined #ubuntu-server === spike_ [n=spike@217.201.132.99] has joined #ubuntu-server === spike_ is now known as spike [03:40] infinity, when you come back please let me know [03:50] I'm here. [03:50] (more or less) [03:57] when you find some time, could you please check https://opensvn.csie.org/traccgi/nwu/trac.cgi/wiki (NetworkWideUpdates)? milestone 1 is on the way [04:00] Is there meant to be more to the IRC quote in "other references"? :) [04:00] The dangling "mvo" is a bit.. Odd [04:01] ah, that was "remember the nick of Michael Vogt" hehe === infinity laughs. [04:05] Which xmlrpc/soap implementation were you planning on using? [04:05] currently it can trigger the clients to run the following tasks: cache update (apt-get update), package installation (apt-get install , list repositories and, the best part, list update candidates. [04:05] If it's generally considered mature (and well maintained upstream), the fact that it's currently in universe is no big deal. We can promote it if/when nwu is ready to be supported. [04:06] I also find it reasonably entertaining that we don't have a python xmrpc/soap extension in main, since we have the python kitchen sink in mian... [04:06] s/mian/main/ [04:06] currently it uses SOAPpy and M2Crypto, both of which are in universe. I can remove m2crypto, maybe. [04:07] indeed hehe. I spent the whole aftertoon asking me why there is no python soap in main hehe [04:07] and asking in #ubuntu-* too =] [04:07] python-soappy is not only in main, it's in the default desktop. [04:07] hmm [04:08] by the way, is packages.ubuntu.com supposed to not accept multiple keys in the packages search form? [04:08] i could not search after, say, python soap [04:08] As for crypto, python-pyopenssl (also in the default desktop) may work for you. [04:09] I dunno, I use "apt-cache search" for multiple key searches. [04:09] I needed that to find dapper packages.. [04:09] I only find packages.ubuntu.com handy to check versions of each package in each dist. [04:10] yes, removing migrating from m2crypto to pyopenssl is in the todo list [04:13] we would need to get python-sysinfo to main also.. [04:14] yeah, but it's not strictly needed for milestone1 [04:14] infinity, MarioMeyer, check out the "manager cli" working: http://paste.ubuntubrasil.org/11 [04:15] this will be great to use on server farms... :P [04:16] I hope so [04:16] nictuku: Oh, and the reason you couldn't find an xmlrpc extension is because xmlrpclib is included in the main python package. [04:17] hmm [04:17] So, if you'd prefer to use basic xmlrpc instead of soap, that kills another dependency. [04:18] that would be better [04:18] I've never been a big fan of SOAP anyway. Too bloated for anything I've ever needed xmlrpc for. [04:18] To each their own, though. [04:20] well, I'll confess. python-soappy had a nice "/usr/share/doc/python-soappy/GettingStarted.txt.gz". That's why I used it in the first place hehe [04:21] if you know of a sample code of xmlrpc + pyopenssl, I'd be interested [04:21] Heh. Well, I don't mind either way. I'll admit that I've done very little xmlrpc with python, so I have no strong opinions. [04:39] ah, it would be great if someone more experienced than me reviewed the architecture and security "features". MarioMeyer had made some interesting notes and I need more of that [04:41] MarioMeyer, I'll pay your honoraries when I get rich [04:41] haha [04:42] just pay a beer on FISL [04:42] :P [04:42] :-) [04:47] infinity, http://paste.ubuntubrasil.org/12 [04:47] agent running on a machine ;P [04:50] MarioMeyer, I updated it with the nwu list update-candidates |wc result hehe [04:50] niiiice === ajmitch__ [i=ajmitch@port169-55.ubs.maxnet.net.nz] has joined #ubuntu-server === oliver_savage [n=oliver_s@64.13.124.16] has joined #ubuntu-server [06:24] Hey everyone, I just got a VPS with ubuntu running apache2, and just installed mod_python. I'm going to install postgresql shortly, are there any gotchas I should be aware of? [07:40] anyone here using apache2? [07:42] Yes. === lbm [n=lbm@cpe.atm4-0-1301006.0x50a0824e.vgnxx6.customer.tele.dk] has joined #ubuntu-server [08:08] i've only used apach1.3 and just started using apache2, this site-enabled and sites-available directories of doing things, is it required? Is it worth using? [08:09] er "way of doing things"... [08:24] It's not "required", if you want to replace /etc/apache2 with your own configs completely, but it's definitely recommended, and makes a fair bit of sense once you get used to it. [08:24] (My old apache 1.3 config was pretty similar, though, with an /etc/apache/virtual directory for vhosting config snippets) [08:33] Oh, ok I was used to just defining all the virtual hosts in the httpd.conf file, I'd only ever configured one internet facing server before. I'm sniffing through the docs now. Thanks === ubijtsa2 [n=anders@213.208.70.155] has joined #ubuntu-server === await [n=Alexande@adsl-70-137-160-236.dsl.snfc21.sbcglobal.net] has joined #ubuntu-server [09:09] waves to all! [09:15] waves back === irvin [n=irvin@ubuntu/member/irvin] has joined #ubuntu-server [09:30] This document; http://doc.ubuntu.com/ubuntu/serverguide/C/ch04s10.html, is well done. === lionelp [n=lionel@10.21.96-84.rev.gaoland.net] has joined #ubuntu-server [09:38] can anyone recommend, from experience, a fairly easy to admin, lightweight mail server for a server with no xwindows? [09:47] postfix [09:49] thank you fabbione [09:56] I'm putting together a step-by-step documentation for ubuntu 5.10 server on a VPS. Using apache2, mod_python, mail-server, multiple domains, most fun I've had all week. [10:00] nice idea === ubijtsa2 read something *very* nice on LKML last night [10:05] libata will take over and drivers/ide will go away.. :) [10:05] *woohoo* [10:08] now if just those sata drivers beside 3ware would become stable and trouble-free. [10:09] maswan: in the Dell GX280 *spit* the sata (libata) drivers work fine [10:10] ubijtsa2: Well, I've been running into evil corner cases with sata_sil lately. Onboard stuff seems fine, but you're screwed if you want pci cards for a few (>4) extra ports. [10:11] maswan: ah. sorry to hear that [10:12] Well, my current workstation needed 2.6.15 to support the sata_sis chip, but that was doable, if slightly inconvenient with breezy. === ubijtsa2 was running a custom 2.6.15 for a good while [10:24] mostly statically compiled to avoid requiring initrd [10:26] if the "libata drives all ?ATA" patch hits 2.6.16, I'll compile it myself for Dapper & Breezy [10:26] I aint gonna wait for Dapper+1 for that beauty [10:28] If it actually works, we may be able to convince mdz to let it into our 2.6.15... It would solve a LOT of corner cases we have in udev and initramfs and such. [10:29] not to mention that all disk devices become /dev/sd* === infinity nods. [10:30] I'd welcome such a patch if it actually works, and if all the ide drivers are properly replaced and working. [10:30] even if mdz says no, I reckon many that know how to, will be running a kernel with that patch before long. [10:31] Oh, I'm sure they will, I mean I'd like it in the default kernels to remove some of my headaches in some complex packages. [10:31] it's Alan Cox that is working on it, so when it is ready, it will be working.. [10:32] I have lots of confidence in him :) [10:34] if all disks will become /dev/sd* it's really unlikely it will make dapper [10:35] upgrade from breezy will be hell [10:36] fabbione: fstab will be a bit af a pain yeah [10:37] it's not the only thing [10:37] a lot of tools have /dev/hd* hardencoded [10:37] to do some really stupid tests [10:37] it's not a transition i wish to see in Dapper [10:38] yeah... but on the good side, getting shot of drivers/ide is a "Good Thing" [10:38] probably [10:38] anywya it's not up to me [10:38] To be honest, I didn't think it'd make it into Dapper [10:39] 2.6.16 is to late to make the cut, and a backport into 2.6.15 will most likely be painful === oliver_savage [n=oliver_s@64.13.124.16] has left #ubuntu-server ["Leaving"] === oliver_savage [n=oliver_s@64.13.124.16] has joined #ubuntu-server === bustacap [n=bustacap@ubuntu/member/bustacap] has joined #ubuntu-server === spike [n=spike@unaffiliated/spike] has joined #ubuntu-server === allee [n=ach@allee.exgal.mpe.mpg.de] has joined #ubuntu-server [11:45] anybody would be able to comment what's wrong with fuse that encfs inclusion has been refused? [11:46] I cant remember the url, could google it out if necessary, but I read a page where they said that, without additional details or anything === MarioMeyer [n=meyer@ubuntu/member/mariomeyer] has joined #ubuntu-server [12:27] 2~ [12:31] Tonio_: Why is there DB on the debian-file-icon? [12:32] Sorry, wrong channel again! === lapo [n=bat@host166-243.pool8546.interbusiness.it] has joined #ubuntu-server [01:05] hi [01:11] lo interface won't came up on boot here, I have an all lvm setup with a /var on an lv, since I think /var is not mounted afterI have a [01:12] sorry [01:12] I think /var is not mounted early enough, I can see ifupdown complaining that there is not /var/run [01:13] lapo: file a but http://launchpad.net/malone/ [01:13] fabbione, against what I should file the bug? init? [01:15] ifupdown [01:15] k, tnx === allee [n=ach@allee.exgal.mpe.mpg.de] has joined #ubuntu-server === mgalvin [n=mgalvin@ubuntu/member/mgalvin] has joined #ubuntu-server === ubijtsa_ [n=ubijtsa@karlsson.force9.co.uk] has joined #ubuntu-server === spike [n=spike@unaffiliated/spike] has joined #ubuntu-server === ubuntulog [i=ubuntulo@trider-g7.fabbione.net] has joined #ubuntu-server === Topic for #ubuntu-server: ubuntu-server discussions and support | for general support see #ubuntu | U. S. (stable) at http://tinyurl.com/b3jek | U. S. (Devel) at http://tinyurl.com/cllfu | U. S. dapper specs: http://tinyurl.com/aen9b | U. S. forums at http://tinyurl.com/b77qg | ubuntu-server@lists.u.c is up and running | searchable packages list: http://packages.ubuntu.com === Topic (#ubuntu-server): set by spike at Thu Jan 5 05:24:37 2006 === spike [n=spike@unaffiliated/spike] has joined #ubuntu-server === spike [n=spike@unaffiliated/spike] has joined #ubuntu-server === spike [n=spike@unaffiliated/spike] has joined #ubuntu-server === christl [n=chris@chello212186104043.37.11.vie.surfer.at] has joined #ubuntu-server === christl [n=chris@chello212186104043.37.11.vie.surfer.at] has joined #ubuntu-server [07:02] anyone here using clamav? [07:06] yep [07:11] one question: is under ubuntu something similar to the debian-volatile repository? [07:12] so, that the signatures/engine are always up-to-date [07:12] to my knowledge, the answer is no [07:12] signatures are idependant, with freshclam you can get new signatures everyday [07:13] that is not the case for the engine, ok [07:13] it would be a good idea... I do not know if it is planned... [07:14] have you ever tried the debian-repository? (with pinning .. only for clamav) [07:14] i have not tried === lionelp [n=lionel@ip-128.net-82-216-65.rev.numericable.fr] has joined #ubuntu-server === spike [n=spike@81-208-83-227.fastres.net] has joined #ubuntu-server [08:24] fabbione ping === mkrufky [n=mk@68.160.103.77] has joined #ubuntu-server [09:00] im trying to set up apache2 using php to access a mssql database, and i get this error: Fatal error: Call to undefined function mssql_connect() -- all resources tell me that i must recompile php with freetds support, but I was under the impresseion that Ubuntu Just Works (tm) ... I already have dev-freetds and sqlrelay-freetds packages installed [09:01] what is my next step? === christ1 [n=chris@chello212186104043.37.11.vie.surfer.at] has joined #ubuntu-server === ajmitch_ [i=ajmitch@port163-136.ubs.maxnet.co.nz] has joined #ubuntu-server === zenrox [n=zenrox@71.115.198.118] has joined #ubuntu-server === christ1 [n=chris@chello212186104043.37.11.vie.surfer.at] has left #ubuntu-server [] === allee [n=ach@allee.exgal.mpe.mpg.de] has left #ubuntu-server ["Konversation] === nictuku [n=yves@200.163.22.112] has joined #ubuntu-server === bert_ [n=bert@c529def15.cable.wanadoo.nl] has joined #ubuntu-server === tiris [n=tiris@cowbell.kne.com] has joined #ubuntu-server === mkrufky [n=mk@68.160.103.77] has left #ubuntu-server [] [11:31] anyone home? [11:33] I have a quick question about ubuntu server (not sure if this is the place to get it answered). [11:34] tiris: go on [11:35] okay, I have installed a server and was going to use it for a fileserver...I also want to access it from outside the LAN...like at work. === Pygi [n=mario@83-131-241-74.adsl.net.t-com.hr] has joined #ubuntu-server [11:36] but I am afraid of connecting it to the internet because I know nothing about security [11:36] fabbione: ping === lbm [n=lbm@x1-6-00-13-10-7a-d1-e4.k233.webspeed.dk] has joined #ubuntu-server [11:37] tiris: what's the prob? [11:37] any suggestions for quick reading material on tools and practices for server security for ubuntu? [11:39] keep in mind that I am really new to the linux jive and really, really new to the linux-server jive [11:44] tiris: then dont really expose a box to the net [11:45] tiris: there's not quick reading. u can start with the debian security howto, that will apply to ubuntu as well [11:45] I want to learn how to safely expose the box to the net. [11:45] I would like to be able to access my files from work. [11:46] tiris: sshfs sounds like ur best bet judging from what u're saying [11:46] it's fairly easy to secure ssh, and it seems the file sharing is limited to you [11:46] ssh daemon* [11:48] I am a little familiar with ssh. I know how to use it and set it up, but what vonerabilities am I opening myself to when I connect to the Internet...how easy is it for someone to get access when they are not supposed to? [11:50] tiris: either an ssh bug, and let's say it's quite unsual, or a weak password. ssh bruteforcing is *very* common, and weak password is they way they go [11:51] how do I know when an unauthorized attempt was made? [11:51] how do I know when an unauthorized attempt was made and succeeded and what the user did while having access? [11:53] tiris: what u can do is employ an ssh keys solution, that will prevent pwd bruteforcing totally disabling pwd based access [11:53] tiris: /var/log/auth.log and lastlog command [11:55] can you point me to a good HOWTO on this ssh keys setup? [11:56] tiris: http://www-128.ibm.com/developerworks/library/l-keyc.html [11:56] as the big black line at the beginning says, it's a 3 part tutorial, read all of them, not just that one [11:57] at least part 1 and 2, u dont need 3 at this stage [11:57] okay. Thanks this should get me started. Thanks again. [11:58] tiris: read the secure debian howto too please [11:58] what is the url? [11:59] u can find it urself, it's not hard [11:59] check out the documentation section on debian.org, it's there [11:59] is it an official howto from debian? [11:59] yes [11:59] okay thanks [12:00] one of the good tutorials for unixes/linuxes in general is also a freebsd documentation