=== TQ_ [n=neron@87.120.64.44] has joined #ubuntu-server === Burgundavia [n=corey@ubuntu/member/burgundavia] has joined #ubuntu-server === dan325 [n=root@h-74-0-1-138.dllatx37.covad.net] has joined #ubuntu-server [01:12] My Ubuntu 6.06 server suddenly quit recognizing my usb printer. I am getting "usb 1-1: device descriptor read/64, error -110" messages in /var/log/syslog and the printer does not show up in lsusb. It was working just fine last week. [01:20] bad hw ? === mralphabet votes bad hardware === YourMomsHero [n=cirish@74.202.196.195] has joined #ubuntu-server === hyphenex [n=scott@60-241-114-45.tpgi.com.au] has joined #ubuntu-server [03:52] Where can I find a list of packages that are in the Ubuntu server? === Echoside [n=tylor@71-87-62-175.dhcp.stcd.mn.charter.com] has joined #ubuntu-server [03:55] I can't? === madman91 [n=greg@unaffiliated/madman91] has joined #ubuntu-server [04:05] Anyone know of any opensource streaming software? I want to start a internet radio stream but cant find any decent program. === Echoside [n=tylor@71-87-62-175.dhcp.stcd.mn.charter.com] has left #ubuntu-server ["Leaving"] === Felarin [n=sean@ntsvr1.abs.org.sg] has joined #Ubuntu-server === eljak [n=eljak@194.126.31.51] has joined #ubuntu-server === ivoks [n=ivoks@backup.grad.hr] has joined #ubuntu-server [09:07] hello === [miles] [n=miles@bcn1.entorno.es] has joined #ubuntu-server [09:14] morning, ivoks! === ||arifaX [n=||arifaX@inetpop1.witron.de] has joined #ubuntu-server [09:19] i'll try to join you on bugday, but i have exam tomorrow (and today), so i'm not sure how much i'll be able to do [09:21] Fair enough. Remember that bug day is all of wednesday in every timezone, so it actually starts in about 5 hours and ends 48 hours after that :) [09:22] ivoks: Good luck with your exams, though. [09:22] :) [09:22] thanks [09:23] ivoks: Anything interesting? [09:25] yeah, i just discovered vimperator plugin for firefox :) [09:25] makes firefox usable :) [09:25] I meant your exams :) [09:25] ah... roads crossings is one, and other is canals and sewage :) [09:26] Uh.. What are you studying? [09:26] civil engineering [09:26] I see. Heh.. I assumed some sort of computer science :) [09:27] hehe no, i 'middle school' was about electronics [09:27] that's where i discovered linux, back in '97. [09:30] what about you? except linux2go... [09:32] Finished high school in 2000, worked as developer/sysadmin for 5 years, university (math/computer science) for two years, and now Canonical. [09:32] Linux since... '96, I thin. [09:32] nice === stephanbuys [n=stephanb@gw.impilinux.co.za] has joined #ubuntu-server === coNP [n=conp@unaffiliated/conp] has joined #ubuntu-server === lionel_ [n=lionel@ip-211.net-81-220-127.rev.numericable.fr] has joined #ubuntu-server [10:22] Hiya, if I need to make changes to my my.cnf file should I put it in /etc/default/mysql? I remember Ivoks mentioning that the other day and I just want to confirm that it'll work. [10:24] If you want to change my.cnf, you should change my.cnf ? [10:25] crummygummy_: I guess you should [10:25] maybe keeping a backup copy is a good idea [10:26] Thanks, I'll give it a stab... === crummygummy_ is scared that playing around will break replication. [10:34] shawarma, So it won't work. I'm just looking at avoiding a few of the disasters I've had in the upgrade for future upgrades. It seems that keeping my changes in the /etc/default/* is the way to go. Is that right. Does that count for mysql? [10:35] Files in /etc/default/ are generally considered configuration files and hence will not be overwritten without your consent. [10:36] so mysql doesn't make use of this? [10:37] what? [10:37] I'm totally not understanding any of this. [10:37] :) === crummygummy_ reaches for his coffee. [10:38] You say that you want to change my.cnf, but put those changes into /etc/default/mysql... Next you say "So it won't work"...What won't work? Why do you want to any changes you want to do to file foo into file bar? [10:38] And what do you mean by "mysql doesn't make us of this"? Of what? [10:39] K, I'll try be more clear. [10:40] When you put changes into /etc/default/mdadm those changes get propogated through to /etc/mdadm/mdadm.conf. right? [10:42] I guess not [10:42] there are configuration options that can be edited in /etc/default/* and others that cannot [10:43] so there is no consistency [10:43] I'm just trying to find out if mysql is one of those packages. I pressed one wrong button in the upgrade and my configuration got over written. [10:44] is there no backup with a suffix that contains "dpkg"? [10:46] Yes there is but I didn't know to look for it so I copied the my.cnf from the slave and altered it. [10:48] Heres a quote from my irc log [10:48] Jun 13 18:07:47 CrummyGummy: great [10:48] Jun 13 18:07:59 CrummyGummy: just, don't add stuff to my.cnf [10:48] Jun 13 18:08:09 CrummyGummy: add it in files in /etc/mysql/conf.d/ [10:48] Jun 13 18:08:27 CrummyGummy: it makes upgrade of packages easier, *a lot* [10:48] I was just trying to confirm if this was correct. [10:50] I am not a mysql expert [10:50] but seems true [10:59] crummygummy_: It says "/etc/mysql/conf.d/" [10:59] crummygummy_: There's no mention of /etc/default anywhere. [11:04] stupid me.... So, I need to make a /etc/mysql/conf.d/my.cnf and put in all my changes? [11:05] Just /etc/mysql/conf.d/somenamethatmakessensetoyou [11:09] K, I'll try that. Thanks. === lionel [n=lionel@ip-211.net-81-220-127.rev.numericable.fr] has joined #ubuntu-server === stephanbuys [n=stephanb@gw.impilinux.co.za] has joined #ubuntu-server === Nicke_ [n=niclasa@ua-83-227-140-135.cust.bredbandsbolaget.se] has joined #ubuntu-server [11:42] shawarma, Sorry, stupid question. does the above somenamethatmakessensetoyou file get used on installation or is it sourced on startup? [11:43] crummygummy_: It's just like putting stuff into /etc/mysql/my.cnf [11:44] Awesome, thanks. [11:47] k, well that didn't work at all. [11:47] can there be multiple files there? [11:51] Sure. That's the entire point. [11:57] The perms are right and the file format looks right. Its still not working though. Where is the line that tells it to source this dir? [11:57] Last line of a /etc/mysql/my.cnf [11:57] !includedir /etc/mysql/conf.d/ [11:58] Which version are you on? [11:58] mysql-server/feisty uptodate 5.0.38-0ubuntu1 [11:59] But I prolly didn't let it over write my config because of my own stuff being there. [12:04] shawarma, How do I extract the default config? [12:06] crummygummy_: What are you looking for? [12:08] the default my.cnf. === lionel_ [n=lionel@ip-211.net-81-220-127.rev.numericable.fr] has joined #ubuntu-server === bje [n=bje@tsogang.networkgods.net] has joined #ubuntu-server [12:12] hi - anyone able to tell me what magic foo I need to do, to make a 2.6.20 (i386) kernel netbootable? I would like to install Dapper 6.06 LTS, but my LSI RAID controller is not supported in <2.6.20. I've tried mkinitramfs, and setting BOOT=nfs, and MODULES=netboot - am I on the right track? [12:14] <`6og> i dont understand the question [12:15] OK. I am trying to install Ubuntu Dapper. Because it's an LTS release. My RAID controller is not being picked up by the installation. [12:16] I found that Feisty's kernel (2.6.20) supports my RAID controller. I would like to now make a initrd.gz archive of the 2.6.20 kernel (that detects my hardware), so that I can use that for my kickstart installation. [12:18] <`6og> i dont know aobut building kernels, but i susepct you can find a good tute on the forums === directhex|work [n=jms@osc-bigmac.oerc.ox.ac.uk] has joined #ubuntu-server [12:36] shawarma, IMHO, what ubuntu server needs is a kernel that works on, well, servers. in the end I had to abandon a dapper deployment because it had no adequate support for the jan-2007 hardware we had bought [12:38] directhex|work: Yeah, that's a problem. We're aware of it. Of course it doesn't help you much but the next LTS will have infrastructure to take care of this (backporting of drivers for important hardware). [12:39] shawarma, and #98979 ? [12:39] directhex|work: In gutsy there's already a linux-backport-modules-kernelversion-abi-flavour [12:40] Fixed. [12:40] Well, not in dapper. [12:40] I remember talking to the kernel dudes about it a while ago. I don't exactly remember the outcome, though. [12:40] shawarma, as you say, a little late for us. the irony is i started this project building on top of sarge, then moved to dapper for exactly the same reason we dumped it [12:40] Since edgy, we include *all* block device drivers in the initrd. [12:41] hence using etch. it's all about the hardware support [12:42] Yeah. Without hardware support, the software doesn't matter much. [12:43] why was the linux-image-2.6.15-50-foo kernel abandoned? it was an improvement [12:43] at least it contained a working megaraid_sas.ko and bnx2.ko [12:43] -50 ? [12:43] it's super secret! [12:44] It must be :) [12:44] I don't track git, but the most recent uploaded version has ABI version 28. [12:44] https://launchpad.net/ubuntu/+source/linux-source-2.6.15/2.6.15-50.61 [12:44] Anyhow, /me -> lunch. [12:44] uploaded 2007-01-23 [12:45] What the... [12:45] t'is abandoned, as far as i can tell. it worked with modern hardware, but someone got bored & went home [12:45] Ah, yes, there it is. [12:45] It's still in proposed. It probably lacks testing. [12:46] there have been three subsequent security updates. and since nobody bothered with -restricted-modules for it, it's non-trivial for many people to test [12:47] You need restricted drivers on your servers? [12:48] directhex|work: The kernel guys are on US time, so you can ask them in #ubuntu-kernel in about 5-6 hour's time if you care enough. :) I'll probably poke them about it too. [12:48] no. but without restricted being available, linux-meta gets confused, and it starts getting rather painful to make an installer out of the thing [12:48] directhex|work: Ah, right. [12:48] you're also rather restricted on the number of people who can test your kernel if you restrict it to server-only === shawarma really goes to lunch now. [12:48] directhex|work: Sure, good point. [12:48] ignore me! go eat lunch! [01:04] hah, explains pretty much the shit I'm having right now. [01:04] *sigh* === TeTeT [n=spindler@modemcable178.77-70-69.static.videotron.ca] has joined #ubuntu-server === EtienneG [n=etienne@ubuntu/member/EtienneG] has joined #ubuntu-server === dendrobates [n=rclark@adsl-065-005-186-012.sip.asm.bellsouth.net] has joined #ubuntu-server === `6og [n=kgoetz@gnewsense/friend/kgoetz] has joined #ubuntu-server === fabbione [i=fabbione@gordian.fabbione.net] has joined #ubuntu-server === lionel_ [n=lionel@ip-211.net-81-220-127.rev.numericable.fr] has joined #ubuntu-server === sommer [n=sommer@cpe-075-183-108-021.triad.res.rr.com] has joined #ubuntu-server === gissi [n=silvio@32.104.18.240] has joined #ubuntu-server === stratus [n=stratus@201.53.55.52] has joined #ubuntu-server === jdstrand [n=james@mail.strandboge.com] has joined #ubuntu-server === mathiaz [n=mathiaz@bas14-montrealak-1177841807.dsl.bell.ca] has joined #ubuntu-server === kupesoft [n=dave@red-gw.cs.toronto.edu] has joined #ubuntu-server === mossholderm [i=c09a5be1@gateway/web/cgi-irc/ircatwork.com/x-bbefde817e1ce3b7] has joined #ubuntu-server [04:00] Hey... I have a bug that might be worth looking at for the bug day... it is currently misfiled under heimdal... Bug #99795 [04:01] Bascially , the libldap2 package points to a different ldapi socket than libldap-2.3.0 [04:03] Right. [04:03] Can we get it moved under openldap, rathern than heimdal, so that it gets noticed? === Burgundavia [n=corey@ubuntu/member/burgundavia] has joined #ubuntu-server === Felarin [n=sean@cm33.sigma192.maxonline.com.sg] has joined #Ubuntu-server === EtienneG [n=etienne@ubuntu/member/EtienneG] has joined #ubuntu-server === crummygummy_ [n=CrummyGu@dsl-242-21-182.telkomadsl.co.za] has joined #ubuntu-server === Felarin [n=sean@cm33.sigma192.maxonline.com.sg] has joined #Ubuntu-server [05:04] Other than ubuntu-server@lists.ubuntu.com, what's another good list to post server related questions to? [05:07] development or help? === lcdd [n=lucid@a88-114-49-98.elisa-laajakaista.fi] has joined #ubuntu-server [05:11] mossholderm: I think the latest version of the ldap package has a fix for the bug. [05:13] Burgundavia: help [05:13] -users can sometimes [05:17] mathiaz - latest for feisty, or do you mean in gutsy? [05:19] mossholderm: in gutsy [05:19] 'k, thanks! === leonel [n=leonel@189.155.105.203] has joined #ubuntu-server === Bambi_BOFH [n=kgoetz@gnewsense/friend/kgoetz] has joined #ubuntu-server === gissi [n=silvio@32.104.18.240] has joined #ubuntu-server === lbm [n=lbm@0x555373ab.adsl.cybercity.dk] has joined #ubuntu-server === leonel [n=leonel@189.155.105.203] has joined #ubuntu-server === YourMomsHero [n=cirish@74.202.196.195] has joined #ubuntu-server === sacater [n=sacater@ubuntu/member/colchester-lug.sacater] has joined #ubuntu-server === roottoor [n=ubuntu@c-69-252-204-207.hsd1.nm.comcast.net] has joined #ubuntu-server [07:06] Hi all === sahafeez [n=sahafeez@67.109.14.227.ptr.us.xo.net] has joined #ubuntu-server [07:11] Any one here know ho I can setup my server to email me logs to like a gmail account [07:11] so i can monitor them ? [07:15] roottoor: try to install logwatch a / o logcheck [07:15] roottoor: install logcheck and setup your mailserver to forward to a smarthost [07:15] roottoor: by s/mailserver/server/ [07:16] there is no need for a smarthost, it is enough either to setup logcheck or to edit /etc/aliases [07:17] hmm... I remember having to tweak exim in order to get it to work, maybe I am remembering wrong [07:18] So than I have to have a mail server setup to do that ? [07:18] you can edit SENDMAILTO="root" line in /etc/logcheck/logcheck.conf [07:19] oh you are right, you need an smtp server [07:19] but I guess exim is installed by default [07:20] roottoor: it doesn't have to be a full on mail server that sends and receives mail, just one capable of forwarding email to your ISP or gmail account [07:20] ok so I need a smtp server. Postfix or sendmail will do that will it not ? [07:21] absolutely. If all you want to do is forward, you may want to try ssmtp. [07:21] ssmtp ? [07:22] apt-get install ssmtp (its in universe) [07:22] ok thats done [07:23] Now do I install postfix or sendmail or both ? [07:24] neither. man ssmtp [07:24] it will simply get mail off this system and send it to a system that knows how to take care of it. [07:25] ok [07:26] now all I do is set a cron for the logs ? [07:26] if you are using logcheck, that will happen automatically [07:26] they work together ? === Burgundavia [n=corey@ubuntu/member/burgundavia] has joined #ubuntu-server [07:27] yes logcheck has also a cron entry that checks for logs and sends email about the most relevant parts [07:27] needs an smtp server to work, and ssmtp fits the bill === Burgundavia_ [n=corey@ubuntu/member/burgundavia] has joined #ubuntu-server [07:28] ok [07:28] I think I understand now [07:29] so now i have to edit the confige file of logcheck correct ? [07:29] yes [07:29] not necessarily [07:29] well-- that or aliases [07:30] it might be a good idea to forward all mail that your root receives to a mailbox you will actually read [07:30] /etc/aliases ? [07:30] that can be done with and appropriate /etc/aliases entry [07:30] ok [07:31] what exactly do I enter i have that file open now [07:32] something along the lines of: [07:32] root: username,someone@isp.com [07:32] then run newaliases [07:33] will go to local mailbox for username as well as being sent off to someone@isp.com [07:34] when I run sudo -u logcheck logcheck it tells me "Can't send mail: sendmail process failed with error code 1" [07:34] also when i ran "newaliases" it told me "newaliases: Aliases are not used in sSMTP" === Burgundavia [n=corey@ubuntu/member/burgundavia] has joined #ubuntu-server [07:38] ah-- that's right-- ssmtp doesn't do aliasing. sorry. Let me look at something... [07:39] k [07:39] no worries === Burgundavia [n=corey@ubuntu/member/burgundavia] has joined #ubuntu-server [07:44] mathiaz: I've had an idea how we can handle the configuration files really easily with ebox.. [07:45] ssmtp: Cannot open mail:25 [07:45] thats the error i get now [07:45] 'mail' needs to be a resolvable hostname [07:46] oh [07:46] mathiaz: In a perfect world, the admin should be able to edit the config files and have ebox gracefully handle that (some sort of config file merging of sorts).. [07:47] mathiaz: In the almost-perfect world (this one) we'll just put in a HUGE comment at the top that "THIS FILE WAS AUTOGENERATED. IF YOU EDIT IT, YOUR CHANGES *WILL* BE LOST. INSTEAD PUT YOUR CHANGES INTO !" [07:48] mathiaz: Now I just have to figure out how we handle it if the user changes the templates and the templates are changed on an upgrade of ebox.. [07:49] mathiaz: But I think the reference to templates will fulfill almost every need. We could even move the templates into /etc with a .tmpl suffix so they're even more obvious. [07:49] from an admins perspective, that makes sense [07:49] I am so clever. [07:49] I bite my tongue [07:49] On purpose? [07:49] That's just silly. [07:50] yes, on purpose [07:50] Was it all you hoped it would be? === nealmcb LOL [07:51] it was bloody and slightly salty [07:51] although almost, but nothing like a real meal [07:51] shawarma: the user would also be warned on upgrade about template changes, assuming they are marked as config files, right? [07:51] nealmcb: Yes. [07:52] Burgundavia: yeah - in that case you have to calculate _net_ calories... [07:52] nealmcb: It it were me (and it's going to be) I'd be annoyed, but I guess it's manageable. [07:52] nealmcb: thankfully, I am not on a diet [07:52] anyway, back in flash, kernel reboot [07:52] Only kernel? [07:52] Spiffy. [07:53] shawarma: it's only a reboot of the flash kernel :-) [07:53] Ah. [07:53] roottoor: make sure you have /etc/ssmtp/ssmtp.conf setup correctly. Then do 'echo test | mail -s test1 someone@isp.com' (where someone@isp.com is your email address), then check /var/log/mail.log for success or not. [07:54] roottoor: once you have that going, you can modify logcheck.conf to use that email address. [07:54] ok ill check it now [07:55] roottoor: this is working fine here. You might try this for using with gmail: http://forums.gentoo.org/viewtopic-t-412468.html [07:55] roottoor: don't have a gmail account [07:59] ok i followed that [08:00] now to test it do I run echo test | mail -s test1 someone@isp.com' [08:00] yep-- where someone@isp.com is probably your gmail account === TQ_ [n=neron@87.120.64.240] has joined #ubuntu-server === Burgundavia [n=corey@ubuntu/member/burgundavia] has joined #ubuntu-server [08:05] it works !! [08:05] now [08:05] I got a email from logcheck [08:05] but than it sent anothe email right from the mailer deamon === Burgundavia [n=corey@ubuntu/member/burgundavia] has joined #ubuntu-server [08:06] Delivery to the following recipient failed permanently: [08:06] postmaster@static.belkin [08:06] Technical details of permanent failure: [08:06] PERM_FAILURE: DNS Error: Domain name not found [08:06] I dont know what is wrong [08:06] roottoor: are you saying that the echo worked but the logcheck didn't? [08:07] no it did [08:07] I got the log [08:07] but I got a email from the mailerdeamon at the same time I recived the log check === ivoks [n=ivoks@3-147.dsl.iskon.hr] has joined #ubuntu-server [08:08] roottoor: you had previously had ssmtp setup incorrectly with gmail-- when you were testing ssmtp to get it to work right, those things got logged. logcheck ran, and told you about it. check the timestamps. It should verify what I am saying. [08:08] ok [08:08] let me loog === Burgundavia [n=corey@ubuntu/member/burgundavia] has joined #ubuntu-server [08:09] logcheck reports any anomolies it finds since the last time it ran [08:09] anomalies [08:09] ok, I hate NM right now [08:14] roottoor: keep in mind, coNP was right about it being useful to have local mail go to a particular user. If the network connection is down, then you lose that mail. [08:14] roottoor: ssmtp can be very useful, but know that it has limitations. [08:15] the first line in ssmtp.conf says "The person who gets all mail for userids < 1000 [08:15] # Make this empty to disable rewriting." [08:15] do I make that my gmail email or a name ? [08:16] "root=blah@gmail.com" [08:16] or just make it a name like "root=blah [08:18] alos [08:19] where do i add my eamil in logcheck.conf there isnt a line for it [08:19] nvm [08:19] i found it [08:19] :) [08:21] Ok [08:21] shawarma: shiny with the ebox stuff [08:21] Is there a way to gen a report about the logs now to test it [08:22] Burgundavia: The config handling bit? [08:22] everything [08:22] it is all very shiny === sacater [n=sacater@ubuntu/member/colchester-lug.sacater] has joined #ubuntu-server [08:22] and now I need to go to lunch [08:22] Burgundavia: Alright. ttyl [08:22] roottoor: sudo /etc/cron.d/logcheck === TQ__ [n=neron@87.120.64.86] has joined #ubuntu-server [08:28] says command not found [08:30] sudo? [08:30] roottoor: sorry /etc/cron.daily/logcheck [08:31] roottoor: no it is /etc/cron.d/logcheck [08:32] jdstrand: hrmm... [08:33] sudo -u logcheck /usr/sbin/logcheck -R [08:33] doing too many things at once... [08:34] shawarma: for the configuration file in ebox: it seems a good idea to me. [08:35] shawarma: I think ipcop does the same way. As long as the pointer to the template is kept up-to-date, it should be good. [08:35] shawarma: how are the template written ? [08:36] mathiaz: Magically. [08:37] shawarma: what's the template engine used ? [08:37] shawarma: I think it was perl-template [08:37] Mason [08:37] shawarma: is it intrusive ? the template file should be really close to the orginal file. [08:38] that last command worked [08:38] It is *very* close. [08:38] sudo -u logcheck /usr/sbin/logcheck -R [08:38] shawarma: so that sysadmin to have to learn yet another config langage [08:38] It has a header that declares the variables, and then it's just a matter of putting something like <% Port %> in where you want the value of the port attribute. [08:39] now does that mean that it is inthe cron for daliy ? or horly or is it not in there at all [08:39] mathiaz: I think it's very, very straightforward. [08:39] shawarma: and what if the sysadmin still change the config file ? [08:40] shawarma: eg, he could follow a tutorial [08:40] shawarma: and copy files around. [08:40] shawarma: and when ebox is run, it overrides everything. [08:40] shawarma: I still think ebox should warn if the target configuration files has some modifications. [08:41] shawarma: but there is no point in trying to merge things automatically. [08:42] jdstrand: now how do I add it to the cron [08:42] shawarma: for the case of an upgrade of ebox, well it's exactly the same problem. [08:43] shawarma: instead of using to ebox to handle local modifications, the debian packager is responsible for handling local modifications [08:43] roottoor: it is already there [08:43] oh [08:44] look in /etc/cron.d/logcheck to prove it to yourself [08:44] shawarma: the difference between the two is that the debian packager already has the infrastructure to handle local modifications of configuration files. [08:44] now is this just sending me the auth log or syslog ? [08:45] man logcheck [08:45] /etc/logcheck/logcheck.logfiles is the list of files to monitor [08:47] mathiaz: Sure. I've just never found that particular solution very elegant. I haven't got a better idea, it just always felt kind of kludgy. [08:47] mathiaz: wrt to the admin following a tutorial: [08:48] Cool [08:48] mathiaz: I think that ebox itself removes the need for most tutorials. [08:48] Thanks to all [08:49] mathiaz: So.. Well, I don't think the problem will be very big. [08:49] roottoor: np [08:49] shawarma: It's true that ebox is supposed to handle most of the situation. [08:49] shawarma - just curios... are you talking about this ebox? -> http://ebox-platform.com/ [08:49] mossholderm: yes [08:50] mossholderm: Yes. [08:50] shawarma: if ebox cannot be used to configure a specific aspect of the system [08:50] but still be used for another aspet [08:51] it would be great to support that scenario. [08:51] Example: ebox can manage ldap user accounts and information. [08:51] and the end user wants to use it because it does the job. [08:52] but the ldap server requires the usage of ssl. [08:52] so an experience sysdamin changes the configuration file on the server to support secured ldap, but the end user still wants to use ebox to manager user accounts [08:53] ebox should be able to handle that kind of scenario. [08:53] mathiaz: end user == admin [08:54] shawarma: yes and no. [08:54] shawarma: in the above scenario, the end user is a junior admin [08:54] shawarma: he asks/hires a more experienced admin to make his server work [08:55] shawarma: once the server works in the environemnt there is no need to have the experienced sysadmin around [08:55] shawarma: the junior admin/end user uses ebox for his day-to-day management [08:56] shawarma: that is a very common use case, a "unix engineer" configures the box, but the access control team adds and removes users. [08:56] right, i get those kind of request every day :/ [08:56] I used the ldap example because I had to deal with that [08:57] there is no good ldap admin tool to manage users. [08:57] same is with mail; set up a mail server and end-user wants to add/remove users [08:57] but that leans more towards role-based access control. [08:57] but samba could be use as another example [08:58] Um.. I'm not entirely sure that fits in our use case anyway. [08:58] A user should have certain privileges based on that users role. be it system admin or operator, or auditor. [08:58] We're providing this for small businesses mostly. [08:59] shawarma: that is what I am saying, that belongs as apart of a larger initiative later, if we do role based access, which I hope we do. [09:00] Besides, if the use case, you're suggesting is "some more knowledgeable dude stops by and sets new, shiny stuff up", then he should be able to spot the huge warning about the config file getting overwritten. [09:00] If not, he should at least notice during his testing. [09:00] It's next to impossible to safe guard against knowledgeable, but ignorant users. Especially those with the root password. [09:00] shawarma: that's right. I agree that the warning in the configuration file and the pointer to the template file may be enough [09:01] s/ignorant/unattentive/ [09:01] dendrobates: ebox will learn role based access stuff relatively soon. [09:01] dendrobates: If not for gutsy, then at least for gutsy+1. [09:02] shawarma: but I still think that ebox should not overwrite files that have local modification without warning the user [09:02] shawarma: shawarma: s/knowledgeable/privileged/ [09:03] mat.. [09:03] oh. [09:03] shawarma: is ebox at a state where I can look at it? [09:04] dendrobates: Almost, but not quite. I'll demo it at the sprint next week. [09:04] dendrobates: You may be able to get a sneak preview before then. [09:04] this ebox seems much like webmin [09:05] shawarma: is it this? http://ebox-platform.com/ [09:05] dendrobates: I'll upload some new packages to my ppa later tonight, I think. You can grab them from there, but (standard disclaimer) DO NOT INSTALL IT ON A SYSTEM YOU CARE ABOUT. IT *WILL* EAT YOUR DATA. [09:05] dendrobates: Sure is. [09:05] dendrobates: Shiny, huh? :) [09:06] shawarma: I don't care about any of my systems. Bring it on. ;) [09:06] looks very nice (much better than webmin :) [09:06] webmin, how I loathe thee. [09:06] we all do [09:07] i've never heard or seen anyone actually use webmin, even though it has been around for a while === mralphabet used it on slackware [09:08] There have been major security issues with webmin, I would be afraid to touch it. [09:08] mralphabet: I think that's were I used it too. That's double pain! [09:08] dendrobates: ..except with an axe or a huge magnet, of course. [09:09] shawarma: I enjoyed slackware, nice and straightforward most of the time [09:10] shawarma: were you working on ebox before you started at canonical? [09:10] mralphabet: Yeah. Just like a rusty spear coming right at you. [09:10] shawarma - I have been working on integrating a few of the same components into a feisty derivative , but am not nearly as far along as ebox... one thing I came across that was useful was using heimdal-kdc, in addition to openldap, with the smbk5pwd openldap module to get single-signon working [09:10] dendrobates: Nope. [09:10] shawarma: hah [09:11] mossholderm: Yeah. I'm hoping to add kerberos support, too. [09:12] We need to do alot of kerberos/auth type of work. [09:12] It's the area that Ubuntu is really lacking. [09:12] I'll send you a link to my notes, there are a couple of things that take some beating to get working [09:12] shawarma: is the plan to have ebox be a part of ubuntu server? [09:13] jdstrand: optional part, of course, but yes. [09:13] shawarma: and this is webmin-like in that it runs on a webserver? [09:13] jdstrand: You're not going to get it if you don't want it. [09:13] jdstrand: Yes. [09:13] e.g. the bug I asked about earlier, and the bug in heimdal-kdc that makes password changes not work when the account is also a samba account [09:14] shawarma: i understand-- I was just trying to see what it does because I haven't seen it before. So it does modifications to the local machine only? [09:14] jdstrand: Currently, yes. [09:14] jdstrand: There's multi-server support on the roadmap somewhere. === sacater [n=sacater@ubuntu/member/colchester-lug.sacater] has joined #ubuntu-server [09:15] shawarma: how many canonical employees are working on it? [09:15] jdstrand: Just one. [09:15] jdstrand: At the moment. [09:15] jdstrand: I can manage it. === mathiaz [n=mathiaz@bas14-montrealak-1177841807.dsl.bell.ca] has joined #ubuntu-server [09:16] jdstrand: I see. I ask all this because I was thinking about a system that would make it easier for users to administer their servers, but it takes a different approach. [09:16] jdstrand: Do tell. [09:17] shawarma: well, right now I just have the building blocks in place, with one example module/plugin for bind authoritative zones. [09:18] jdstrand: Alright. That sounds like a different niche. [09:18] the idea is that it can read configuration files and such, but only touches the parts it knows about, and won't overwrite other changes. It might rearrange things, but won't remove anything (kind like the samba configurator). [09:19] shawarma: how are the upstream developers, easy to work with? [09:19] dendrobates: *very* [09:19] shawarma: it doesn't run in a webserver, but instead will work with whatever file you give it. [09:19] dendrobates: Extremely friendly and helpful. [09:20] shawarma: it leaves the deployment of the config up to the administrator. So he/she can use rsync, ssh, cfengine, whatever. [09:20] dendrobates: They made my "people I should buy beer" list at first encounter. [09:20] jdstrand: that means your framework knows about configuration file format [09:20] jdstrand: I see. [09:20] shawarma: it will allow for cli and gui configuration of these parts. [09:20] shawarma: yes-- intimately. [09:20] shawarma: but it uses a plugin architecture, so it doesn't get all messy [09:21] shawarma: btw, we need to all spend some time at some pubs in London. [09:21] dendrobates: That does without saying. [09:21] dendrobates: right on about the kerberos outages. E.g. I don't see how to even install it on dapper now, due to some package dependency changes: https://bugs.launchpad.net/bugs/121923 === coNP [n=conp@unaffiliated/conp] has joined #ubuntu-server [09:21] dendrobates: s/does/goes/ [09:21] it is in the beginning stages, but it can do the SOA, CNAME, A, NS, PTR and MX for bind authoritative zones. [09:22] mathiaz: that 'yes intimately' was meant for you [09:22] dendrobates: It's going to be fun, I think. [09:22] jdstrand: in which langage is it written ? [09:22]