=== Kalle [n=Kalle@157.230.95.91.static.ter-blg.siw.siwnet.net] has joined #Edubuntu === jack_wyt [n=jack@124.64.105.110] has joined #edubuntu === merriam [n=merriam@85-211-239-240.dyn.gotadsl.co.uk] has joined #edubuntu === effie_jayx [n=valles@ubuntu/member/effie-jayx] has joined #edubuntu === andrupal [n=chatzill@user-12ld7dv.cable.mindspring.com] has joined #edubuntu [03:14] anyone around who can provide some guidance through a fresh LDAP installation? I've been getting stuck and falling down rabbit holes in poorly written tutorials for the past week...I need a samba client authentication setup that will work with thin, thick and windows clients. [03:15] hello again [03:15] Howdy...perfect, it's you! [03:15] alright [03:16] I've got a clean server install, and have just done apt-get install slapd [03:17] ok [03:17] I began editing slapd.conf, changing the with the dc info [03:18] did debconf not ask you for basic information? [03:18] sudo dpkg-reconfigure slapd [03:18] try that [03:19] OK...I'm not omitting, Q1, correct? [03:19] q1? [03:19] It asks "Omit OpenLDAP server configuration?" I'm replying No [03:19] yes [03:20] no is the correct answer [03:20] geez, I need to setup this myself [03:20] it has been so long [03:21] it asks for DNS domain name and automatically fills in earthlink.net, my ISP...I assume I should change this to something else...in previous installs I've been using "example.net" since this is just a test server. [03:22] no, leave that [03:23] leave earthlink.net it says it will use this to construct the base DN of the LDAP directory. I want this called earthlink.net? [03:25] Hundreds of thousands of new yorkers have earthlink.net as their ISP...it seems odd to use this as my LDAP base DN... [03:29] no [03:29] let me run through the questions on my machine [03:30] It asks which database backend to use: BDB or HDB ...BDB is what I have done on previous installs. Ok I'll let you catch up. I recognize this is detailed stuff. [03:31] right, ok [03:31] so for the dns one, fill in example.net [03:31] for the org, fill in example [03:31] how can I go back? [03:32] I just ran dpkg again... [03:33] run it again [03:33] Do I want the database to be removed when purged? I'm saying yes, for now... [03:34] ALlow LDAPvs protocol. I've said no in previous installs... [03:34] say no [03:34] ldap v2 is dead [03:35] Unfortunately the first config process seems to have created a backup that prevents the old database from being moved...the process says "giving up" [03:35] Shall I delete the file that's getting in the way? [03:36] yep [03:38] you should now be up and running [03:38] rm -r removes a directory, no? [03:39] yes, but you should be very careful [03:39] might be better to purge slapd [03:39] how again? apt-get purge slapd [03:39] ? [03:40] --purge remove [03:43] same problem...old backup exists...process gives up === gnomefreak is now known as buttons [03:45] huh? [03:45] Ok I removed the directory that was giving the error and dpkg runs fine, with successful output [03:45] ok [03:45] slaptest succeeds [03:46] I've gotten this far before, however...we're not to the hard stuff yet. [03:46] well, now all you need to do is populate it [03:47] Ok how is this done? [03:47] ldap uses what is called an ldif file [03:47] https://help.ubuntu.com/community/OpenLDAPServer [03:47] I would just create one account via a text file as per that page and then slapadd it [03:48] I should use the dummy file provided? [03:50] OK I just used the dummy file and saved as init.ldif on my desktop === buttons is now known as gnomefreak [03:51] Shall I follow the instructions that follow the init.ldif file provided on the link you provided? [03:51] no, that is too much [03:51] just create a single user [03:52] So delete everything except one entry that has "ou=people" in it? [03:53] no, you need to add a single person [03:53] a person starts with the line: [03:53] dn: uid=lionel,ou=people,dc=example,dc=com [03:54] OK...so I'm deleting everything except this part of the ldif file. [03:54] sorry, have to run [03:54] look at how the ldif file is constructed and make a similar file [03:55] OK no problem...I'll continue with this tutorial...Thanks for your help! === jinty [n=jinty@25.Red-83-56-154.dynamicIP.rima-tde.net] has joined #edubuntu [03:56] don;t follow that wiki page exactly [03:56] after you have added somebody, try and setup a client to auth against the ldap server [03:57] The client needs configuration as well...no? Can you point to reliable documentation on this? [04:02] I'm getting an error using slapadd...value of naming attribute 'uid' is not present in entry. The init.ldif file has a uid, however... [04:09] ldapsearch returns ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1) === superseth [n=smarinel@adsl-75-15-114-199.dsl.snlo01.sbcglobal.net] has joined #edubuntu [04:17] ldapsearch returns "ldap_bind: Can't contact LDAP server (-1)" error...help anyone [04:18] Big topic you need help with there. [04:19] How about you tell me a little about what you've got set up? [04:20] Just went through a clean server install, clean slapd install. Ran dpkg. Attempted to populate using an ldif file...can't search LDAP [04:21] slaptest succeeds [04:22] tutorials all say different things about how to approach setup...I was following Burgundavia's lead but he had to go... [04:22] what does your /etc/ldap/ldap.conf file look like? [04:23] Paste it to the pastebin [04:23] Where's the pastebin? [04:23] !pastebin [04:23] pastebin is a service to post large texts so you don't flood the channel. The Ubuntu pastebin is at http://paste.ubuntu-nl.org (make sure you give us the URL for your paste - see also the #ubuntu channel topic) === jack_wyt [n=jack@124.64.105.110] has joined #edubuntu [04:25] Ok see http://paste.ubuntu-nl.org/26960/ [04:26] that's the slapd.conf [04:26] woops. [04:27] It's ok, we'll need it too :) [04:28] Ok see http://paste.ubuntu-nl.org/26961/ [04:28] I'm now seeing that example.com is an error...this should be example.net to match slapd.conf, no? [04:29] Should be NEITHER example.com or example.net. [04:29] Should be YOUR domain name :) [04:29] Yes, in this case I'm running a test server, example.net [04:30] You're talking the rootdn? [04:30] I guess...I've been consistently using example.net throughout LDAP setup...the machine name is UBUNTU, however...that's not the issue though, right? [04:31] In your ldap.conf, what's your URI set to? [04:32] It was ldap://ldap.example.com ldap://ldap-master.example.com:666 [04:32] now com = net [04:32] That's going to try to contact the host ldap.example.com [04:32] so I should take our ldap [04:32] out [04:34] Where's the ldap server running, on the same machine? [04:34] Yes [04:34] If so, you'll probably want a URI like ldap://localhost [04:35] why are there two entries? [04:35] should I remove the 2nd, with port? [04:35] Failover. If you have multiple ldap servers for redundancy, it will try one, then the other. [04:36] yes [04:36] since you've only got one ldap server [04:37] Ok with changes I'm still getting ldap_bind: Can't contact server (-1) [04:38] you still haven't actually pasted your ldap.conf file to the pastebin. [04:39] Oh, wait [04:39] you did, missed it. [04:39] It's different now... [04:39] They still got the # in front of URI and BASE? [04:40] Snikes! [04:41] Ok removed # [04:41] That should help somewhat [04:41] ;) [04:43] still getting the error [04:43] does slapd.conf need my password? [04:43] Can't contact server means it isn't even getting connected [04:44] Is slapd running? [04:44] ps -ef | grep slapd [04:44] should have probably 4 of them === Knightlust [n=Dax@ubuntu/member/knightlust] has joined #edubuntu [04:45] it outputs root 12445 9398 0 22:44 pts/0 00:00:00 grep slapd [04:46] So, your slapd isn't running [04:47] Yet I get no errors when I start it? [04:47] how are you starting it? [04:47] sbalneav: so what did you do to fix nbd? [04:47] LaserJock: Turned out to be easier than I thought. [04:48] it's prolly a 4 line patch. [04:48] oh, nice [04:48] What's the BEST way to produce a patch to send to you? [04:48] sbalneav: debdiff is nice [04:49] Keeping in mind that I'm good at coding, but NOT good at packaging things, how would I go about doing that? [04:49] :) [04:49] heh [04:50] I'm sure my motu-and-main-friend can gimme a quick pointer :) [04:50] andrupal: How are you starting slapd? [04:51] using init.d [04:51] Try this: [04:51] invoke-rc.d slapd start [04:52] sbalneav: quick version: get source packge, make changes, add changelog entry with dch -i, then debuild -S to create new source package [04:52] ok [04:52] version should be 1:2.9.3-3ubuntu1 and gutsy the release in the changelog [04:52] I gotta run an errand [04:52] I'll be back in a little bit [04:53] sbalneav: tried it, no difference in grep results [04:54] LaserJock: ok [04:54] ping me [04:54] andrupal: ok, so, something's not kosher with your slapd setup. [04:54] First, go have a look in either /var/log/messages, or /var/log/daemon.log [04:55] if slapd's unhappy with something, it should be in there. [04:56] neither log shows anything recent... [04:58] should I purge and reinstall slapd? === effie_jayx [n=valles@ubuntu/member/effie-jayx] has joined #edubuntu [04:59] No [04:59] Hmm [04:59] take a look in /var/log/syslog [04:59] Ok there it is... [05:00] Hang on...I need to log into chat on the same machine... === andrew____ [n=chatzill@user-12ld7dv.cable.mindspring.com] has joined #edubuntu [05:02] Andrew is same as andrupal [05:03] Here's the log message: Jun 23 22:51:55 ubuntu slapd[12665] : @(#) $OpenLDAP: slapd 2.3.30 (Dec 13 2006 15:54:43) $ ^Ibuildd@palmer:/build/buildd/openldap2.3-2.3.30/debian/build/servers/slapd [05:03] Nothing else shows up relevant to ldap [05:06] anything in /var/lib/ldap? [05:07] it's a directory full of files [05:10] Did you do an initial slapadd? [05:10] Yes, using an ldiff file..I think some of them took, though there were errors... [05:12] ok [05:12] blow away everything in /var/lib/ldap [05:12] re-run the slapadd [05:12] and paste me the errors you get. [05:13] yay for ldap [05:16] #/etc/ldap/slapd.conf: line 102: rootdn is always granted unlimited privileges. [05:16] #/etc/ldap/slapd.conf: line 119: rootdn is always granted unlimited privileges. [05:16] #Error, entries missing! [05:16] # entry 1: dc=example,dc=net [05:18] Ok fixed slapd.conf [05:18] Hmmm, big thunderstorm going on here. [05:18] If I drop offline, that's what it is. [05:19] see http://paste.ubuntu-nl.org/26966/ for new errors [05:22] OK having deleted all from /var/lib/ldap, the only error I get is Error, entries missing! [05:22] entry 1: dc=example,dc=net [05:24] You have to re-blow away everything in /var/lib/ldap again [05:24] OK I got ldapadd to run without error...now an ldapsearch for one of these users yeilds same ldap_bind: Can't contact LDAP server [05:25] is slapd running? [05:25] No, grep gives same as before [05:26] Have you tried to re-start it? [05:26] just did [05:26] So, it's still not running. [05:26] until you get that fixed, ldap search is not going to work [05:27] no...but also no error upon restart [05:27] What's in /etc/default/slapd? [05:28] See http://paste.ubuntu-nl.org/26967/ [05:31] Do this: which slapd [05:32] returns # /usr/sbin/slapd [05:32] k [05:32] /usr/sbin/slapd [05:32] we'll run it directly from the command line [05:32] What does that do? [05:33] root 13972 1 0 23:33 ? 00:00:00 /usr/sbin/slapd [05:33] root 13977 9398 0 23:33 pts/0 00:00:00 grep slapd [05:33] ok [05:34] is what grep returns [05:34] so, now you got a running slapd [05:34] whew...what a grunt. [05:34] Lets leave the fact that there's something wrong with your init script [05:34] and see if your ldapsearch runs now [05:35] yippee...searching my name gives me back my info! [05:35] Well, we've still got the problem of why your slapd isn't working [05:35] properly [05:36] (aside: Is there something wrong only with MY init script, or is this a bug, perhaps...? ) [05:36] Now what? [05:36] I doubt it's a but [05:36] bug [05:36] probably a step that got missed somewhere [05:36] lets do this [05:36] pkill slapd [05:37] then edit /etc/default/slapd [05:37] edit the line that says: SLAPD_USER="openldap" [05:37] make it look like: [05:37] SLAPD_USER="" [05:37] then lets see if you can start it with invoke-rc.d slapd start [05:38] ok, done [05:38] grep gives [05:38] root 14126 1 0 23:38 ? 00:00:00 /usr/sbin/slapd -g openldap [05:38] root 14137 9398 0 23:38 pts/0 00:00:00 grep slapd [05:39] try your ldapsearch now [05:39] works [05:39] ok [05:39] congrats, you're working [05:39] !! [05:40] This is a huge help...as far as a roadmap for setting up samba, I've seen a few tutorials around...does Ubuntu have anything worth following? [05:41] Off the top of my head, I dont know [05:41] Google is your friend. [05:42] Yes...I thought so...but then I spent a week following tutorials that didn't work [05:42] There's lots of good info out there, but every ldap setup's slightly different. [05:43] There's no "do this and everything will work" tutorial out there, that I've ever seen. [05:43] Single sign-on's a big, complicated topic :() [05:43] Yes...it doesn't help that I'm totally new to Linux...a bit kamikaze...I'm fumbling around in the dark and learning quite a lot as I go...but not gracefully! [05:44] You're doing thin client as well? [05:44] That's the hope. I've had that working on its own...but I'll need to authenticate it against LDAP [05:45] So, lemme get this straight, you're new to linux, and decided to pick arguably the two most COMPLICATED end user tasks, thin client and ldap, to do first? :) [05:46] Dude, run it as a desktop for a few months, at least, get your feet wet :) [05:46] No rush, we'll still be here :) [05:46] That's what the job calls for...it's a school network and I've got to make some decisions about whether to really try going for Open Source or stick to the safety of Windows GUIs [05:48] This is a big test to see how feasible it all is...I'm taking the summer to backtrack and really learn what the hell I'm doing... [05:48] I converted my organization 7 years ago to Linux on the desktop. Trust me, it's feasible :) [05:49] We use ldap [05:49] Do you have Active Directory now? [05:49] ldap has a nasty learning curve [05:49] it does [05:49] No infrastructure at all...actually. We're just starting up. [05:50] where do you live? [05:50] Ah, well then, if you're just starting up, and don't have any windows boxen, then you won't need samba [05:50] How many desktops are you planning on supporting? [05:51] 45 thin clients, 15 laptops, 10 desktops [05:51] I'm inside the NYCDOE and the larger network is Windows centric...we can't even buy machines without it pre-installed! [05:52] Well, for thin clients, you won't need to buy new [05:52] Betcha the school division has a "used computer" reclaimation centre? [05:53] we've already got some great Optiplex G270s being donated by Columbia... [05:53] What are they, pentium II's? [05:53] Pentium 4! Is this a waste of a machine? [05:54] Um, yeah :) [05:54] I got 165 desktops that are 500mhz celeron-equiv [05:54] So we should run these as thick clients instead? [05:54] they're via edens. [05:55] Well, if that's what you got, they'll make great thin clients. The REAL savings with a thin client's in the lack of management. [05:55] But you can get away with a lot less. [05:55] Anything Pentium II 600 or better is going to do great. [05:56] Yes, that was the draw for me...that and the centralized desktop control in the classroom...being a teacher. [05:56] These puppies even have gigabit ethernet. [05:57] I guess what I'm saying is, if it's a case of getting 20 of the P4's or a 100 of a PII, go for the 100 :) [05:57] Right...I don't think we have those choices...but I love the idea of working with students to refurbish and recycle old machines. [05:57] LaserJock: back from your errand? [05:57] this is a math, science, and eng school. [05:58] Ah, lots of good stuff for you then. What the heck's the name of the OSS program that's like Mathematica? Hmmm. [05:58] There's also a GNU stats pack program [06:00] I'll keep poking around...I've been playing with much of the ed freeware, and thus far it seems kind of hit or miss...to be expected I guess. I'm interested in TI Labview but they make you pay gads for it, even the Linux version... [06:01] I need to go to bed, but I thank you profusely for your help...great to have this channel! Will definitely be back..hopefully I'll help another...far in the future. [06:02] No problem. [06:02] Cheers! [06:02] You'll find me here and in #ltsp [06:02] cheers === andrew____ [n=chatzill@user-12ld7dv.cable.mindspring.com] has left #edubuntu [] === sbalneav [n=sbalneav@S0106000b6a5631f9.wp.shawcable.net] has joined #edubuntu [06:37] sbalneav: I am for a sec [06:37] hey hey [06:38] were you able to get a debdiff [06:38] ok, I did the debbuild -uc -us -S [06:38] k [06:38] What next [06:39] debuild .dsc .dsc [06:39] sorry, debdiff [06:40] Puuurty [06:40] Mail that to you? [06:41] yep [06:41] addy? [06:41] mantha at ubuntu.com [06:41] brb [06:44] sent [06:52] http://education.zdnet.com/?p=1118 [07:00] Well, it's been a long day weeding the garden, and fixing nbd [07:00] night all [07:02] bah, just missed him [07:03] hmm, Userful finally turned off my email and remote access [07:04] Burgundavia: what do you make of that zdnet article? [07:04] somebody got sucked in to test stuff [07:04] nothing much === Knightlust [n=Dax@ubuntu/member/knightlust] has joined #edubuntu === jbrefort [n=jean@pot44-1-88-172-65-1.fbx.proxad.net] has joined #edubuntu === Burgundavia [n=corey@ubuntu/member/burgundavia] has joined #edubuntu === jsgotangco [n=jsg123@ubuntu/member/jsgotangco] has joined #edubuntu === sc0tt_ [n=sc0tt@cpc1-stok5-0-0-cust150.bagu.cable.ntl.com] has joined #edubuntu === sc0tt_ is now known as sc0tt === jinty [n=jinty@25.Red-83-56-154.dynamicIP.rima-tde.net] has joined #edubuntu === Castigador [n=Alfredo@88.Red-80-38-9.staticIP.rima-tde.net] has joined #edubuntu === juliux [n=juliux@ubuntu/member/juliux] has joined #edubuntu === ludoRA [n=Ludovic@121.10.101-84.rev.gaoland.net] has joined #Edubuntu === bdoin [n=coudoin@home.gcompris.net] has joined #edubuntu === effie_jayx [n=valles@ubuntu/member/effie-jayx] has joined #edubuntu === effie_jayx [n=valles@ubuntu/member/effie-jayx] has joined #edubuntu === pauljw [n=paul@pool181.dial1-clec.newalb.win.net] has joined #edubuntu === pauljw [n=paul@pool181.dial1-clec.newalb.win.net] has joined #edubuntu === ogra_ smiles http://people.ubuntu.com/~ogra/ltspfs-hal-root.png === ogra_ is now known as ogra === sbalneav [n=sbalneav@S0106000b6a5631f9.wp.shawcable.net] has joined #edubuntu [04:54] Morning [04:54] ogra: ping [04:54] http://people.ubuntu.com/~ogra/ltspfs-hal-root.png [04:54] sbalneav, hey hey :) [04:54] any news on the nbd front ? [04:54] Fixed [04:55] really ?? o_O [04:55] woah [04:55] Sent off a debdiff to LaserJock last night === Mez [n=Mez@ubuntu/member/mez] has joined #edubuntu [04:55] But I forgot something [04:55] hmm, no upload [04:55] In nbdrootd [04:55] you need to change the nbd-server line to: [04:55] thats ltsp side [04:55] right [04:56] nbd-server 0 $1 -C /dev/null > /dev/null 2>&1 [04:56] the -C /dev/null is to give it an empty config file === happywithed [n=administ@210.81.218.130] has joined #edubuntu [04:57] the redirect to /dev/null's because then it barfs out a glib "WARNING: empty config file bla blah" [04:57] Hello there [04:58] since inetd just uses socket 0 (stdin) and internally, the program closes stdou, and stderr, you can just ignore the warings. [04:58] that fixes the problem. [04:58] And Wouter's off my christmas card list this year :) [04:59] Is it possible to connect an edubuntu desktop with the NFS and LDAP installed in the classroom server? [04:59] Yes [05:00] ogra: Cool on the hal! What'd you have to do for that? [05:00] sbalneav, well, if he adds it upstream you can add him back ;) [05:00] sbalneav, http://paste.ubuntu-nl.org/27019/ [05:00] I have a classroom setup with 15 light clients, but would like to connect an additional edubuntu desktop [05:00] sbalneav: how do I do that? [05:01] I am running Feisty Fawn on both the classroom server and the desktop [05:02] sbalneav, if hal wouldnt be so ugly to have on clients, we could just punt the output of lshal from the client through the tunnel into the servers hal ... and omit the /dev and sysfs entries, that way we have access to all info [05:02] happywithed: https://help.ubuntu.com/community/LDAPClientAuthentication should get you started [05:03] ogra: Yeah, we'll need to properly get HAL going on the clients eventually. [05:03] thats no prob [05:03] just install it :) [05:03] sbalneav: thanks, I'll check it out. How about the NFS? Any pointers there? [05:03] with the unionfs it will run like a charm [05:03] but its eating ram :/ [05:04] happywithed: Google is your friend. Add you /home dir to /etc/exports on the server, then an fstab entry on the "client" to mount it. [05:04] I'm pretty happy with the nbd thing. [05:04] its tempting to be able to just move all info 1:1 into the sessions hal... [05:05] yeah [05:05] sbalneav: thanks [05:06] Hopefully, we should be able to make tribe 2 [05:06] sbalneav, so why hasnt the debdiff been uploaded ? [05:07] Dunno, I sent it to LaserJock late last night [05:07] want me to send it to you now? [05:07] yeah [05:07] we need it fixed for the tribe cd [05:07] k [05:07] BTW, is it possible to completely take out the LDAP server from the Classroom client to place it in its own dedicated physical server? That way I can use the LDAP server for other classrooms. [05:07] gimme 2 seconds [05:08] freeze is ahead, i dont want to have endless discussions about the patch because i upload during a freeze... [05:08] happywithed: have a separate sever for ldap? Easy enough, but with only a few clients, ldap's not going to overload anything === sbalneav_ [n=sbalneav@S0106000b6a5631f9.wp.shawcable.net] has joined #edubuntu [05:10] ogra: when is the freeze ? Monday, Tuesday ? [05:10] sbalneav: Yes, you are right, but my server is not powerful enough to handle another classroom. So I am going to setup another server for the second classroom and would like both servers to share the same LDAP server. [05:10] Monday i think [05:10] Evil me [05:10] I also think so as henrik asked me to have a working tracker by Monday :) [05:10] we should see that we have the big chunk of chages in before .. [05:11] small changes to fix bugs we find are no problem during freezes [05:11] but adding 500 lines or so is a prob [05:11] Sorry, that line should be: [05:11] /bin/nbd-server 0 $1 -r -C /dev/null > /dev/null 2>&1 [05:11] yep [05:12] forgot the -r [05:12] i understand ... i already changed it locally while trying to get 2.9 running [05:12] indeed it didnt help :) [05:12] Check your mail there, ogra [05:13] sbalneav: Mind sending me a copy of the debdiff ? so I can play with it here :) [05:13] err [05:13] thats all ??? [05:13] I did have an email from LaserJock, saidhe got into a discussion and couldn't get it uploaded. Said the email should be changed so that I get credit for the fix. I couldn't care less about that, just do the fix as yourself ogra. [05:13] yeah [05:14] Turned out to be easier than I thought [05:14] lol [05:14] took me 3 hours of tracing to come up with that, though :) [05:14] 1h for every added line [05:14] One wonders WHY he took it out. [05:15] since it's SO F****** SIMPLE to leave in [05:15] stgraber: Sure, what's yer addy? [05:15] stgraber@ubuntu.com [05:15] 1 sec [05:16] sent [05:17] make sure you patch your nbdrootd in /usr/sbin as well with that line I pasted. === Mirrakor [n=michael@p57B2FA88.dip.t-dialin.net] has joined #edubuntu === stgraber loves that kind of patch :) [05:23] ogra: tried it yet? [05:24] building the package [05:28] perfect ! [05:29] uploaded [05:31] It work? === sbalneav crosses fingers === bluekuja [n=andrea@ubuntu/member/bluekuja] has joined #edubuntu [05:33] sure [05:33]