/srv/irclogs.ubuntu.com/2007/10/24/#ubuntu-server.txt

=== chuck is now known as zul
storkmmkay00:43
storki managed to lock myself out of my own server00:43
storkaccidently removed my user from the sudoers group00:43
close2__do you have physical access to your server?00:44
storknevermind, i had an admin account :)00:45
kjcoleCan't boot Gutsy with my LVM system any longer.  Was told -server might be a better place to ask.00:58
ZnuffHello. Is there a known issue about samba's slow performance under ubuntu 7.04?01:03
zylstra555Hello. I need to get an SMTP server going on my Ubuntu server so my forum can send out emails (like topic replys). Receiving emails back would be nice, but is not necessary. How do I do this?01:05
Znuffzylstra555, you should already have a smtp server set up01:06
zylstra555Znuff: How do I find out its settings and information?01:06
Znuffzylstra555, can't remember exactly what is the default smtp server on ubuntu, but I'm guessing it's either exim or postfix.01:07
Znuffzylstra555, so either /etc/exim or /etc/postfix01:07
zylstra555hmm01:07
zylstra555I will see01:07
ScottKZnuff: No MTA is installed by default, but Postfix is the preferred MTA in Ubuntu.01:09
zylstra555In the strange event that I just removed Postfix since I thought it was incorrectly installed (long story) what do I do?01:09
ZnuffScottK, on the server install there's no mta by default?01:09
ScottKThat's correct.01:09
Znuffzylstra555, just reinstall it01:09
zylstra555ScottK: How do you find the MTA settings?01:10
ScottKFor postfix, the settings are in /etc/postfix01:10
ZnuffI'm really annoyed. I can't get passed 40Mbit/sec on my samba01:11
zylstra555While I am waiting: I have an older hard drive in my computer, and this, obviously, concerns me  a little bit. Is it a bad thing if a hard drive stays on all the time?01:11
ScottKNot really.  Now old?01:14
zylstra555I am not sure. If it helps: Its (please dont laugh) a 3GB hard disk drive01:15
ScottKI'd replace it.01:15
zylstra555Somewheres around 1994-199701:15
ScottKMost hard drives have a 5 year design life.01:15
atouk_zugsome old drives (smaller capacities) are actually safer than new ones to keep on all the time because of the low bit densities01:15
ScottKYou're well past that.01:15
zylstra555Goody01:15
zylstra555<brb?01:16
atouk_zuganyone know a cli app to torture test01:17
zylstra555<back>01:27
Q_ContinuumAnyone here using debmirror and gutsy?  I can't seem to get it to pull down any packages.01:29
zylstra555Still cant send emails. I was using the server "localhost" and the user "server"01:31
zylstra555(my main account)01:31
zylstra555and I have tried with and without password01:31
ZnuffIs that PHP?01:31
zylstra555I have tried using the PHP mail option, that did not work either01:33
zylstra555Shall I try it again?01:33
zylstra555Does it make a difference that right now, I dont have a proper domain name?01:35
Znuffzylstra555, it shouldn't01:38
ZnuffDo you get any error when sending an email with php's mail() function?01:38
zylstra555Not in my web browser01:39
Znuffzylstra555, turn on display_errors01:51
zylstra555How do I do that?01:51
Znuffzylstra555, php.ini01:52
zylstra555(sorry for the delay, I had a severe foot cramp)01:52
zylstra555Where is the php.ini file?01:53
zylstra555(can you tell I dont know what I am doing? :) )01:54
Znuffprobably in /etc/php/apache2/php.ini01:56
zylstra555Display_errors = on already01:57
jrsuttonAnyone alive?02:09
kgoetz!ask02:10
ubotuDon't ask to ask a question. Just ask your question :)02:10
jrsutton:p I'm having a hard time loading Ubuntu 7.1.0 64 bit Server to load02:11
jrsuttonHow do I get to terminal from nearly the beginning?02:12
jrsuttonlike right after I put in the CD?02:12
kgoetzits 7.10 btw :)02:12
kgoetzyou have to start the installer first i thik (i havent used the 7.10 install images)02:13
jrsuttonwell I get to the splash screen02:14
jrsuttonbut can't seem to go further02:14
jrsuttonso I was wanting to drop into terminal and see if I could load some newer drivers and so forth02:15
kgoetzif the install cd has a 'advanced' or 'edit boot' option, turn off the splash screen. find out whts breaking02:16
* kgoetz mutters about splash on servers02:16
=== infinity2 is now known as infinity
osmosishow do I get the original  /etc/snmp/snmpd.conf  that came with snmpd ?03:16
Burgundaviaosmosis: it is probably in a  doc path03:17
Burgundavialook at the files in the package03:17
osmosisBurgundavia: i dont see it there.03:21
osmosishow do I get the original   /etc/snmp/snmpd.conf  back?  Do i need to dpkg-reconfigure snmp? or?03:24
kgoetzdownload the package again?03:25
ajmitchthat generally doesn't help03:26
osmosiskgoetz: already tried that.03:26
ajmitchpurging & reinstalling the package would, or with something like dpkg -i --force-confoverwrite (can't recall the exact option)03:26
kgoetzi'd "just" extract the file i want myself. if theres a better way i'm open to hear it03:27
ajmitchah, you could remove /etc/snmp/snmpd.conf & use dpkg -i --force-confmiss, if you really needed to03:27
kgoetzdpkg -x /var/cache/apt/archives/<file that contains snmpd.conf> /tmp/snmp && cp /tmp/snmp/etc/snmp/snmpd.conf ~03:29
ajmitchurgh03:29
kgoetzlol.03:29
wasabi--force-confmiss or missconf03:33
wasabiconfmiss i think03:33
jrsuttonHow do I get packages from the CD boot terminal?04:03
ScottKAnyone around with admin privs to the server-team ML'04:06
ScottKjrsutton: I'm not sure what you mean.04:06
jrsuttonHere is my pickle. I've booted from the CD, and can get to the splash screen04:07
jrsuttonafter that I start having problems04:07
ScottKOK.04:07
ScottKGet the alternate CD and use that.04:07
jrsuttonwell that sorta works04:07
jrsuttonbut not exactly04:08
ScottKOK.04:08
jrsuttonI have software raid setup04:08
ScottKI'd focus on that.  You need the alternate for that anyway.04:08
ScottKIIRC04:08
jrsuttonwith existant data04:08
jrsuttonright, so I got the alternate CD04:08
jrsuttonand I can drop into terminal04:08
ScottKLinux software raid or Windows software rai?04:08
ScottKrai/raid04:09
jrsuttonwell NVIDIA raid04:09
jrsuttonwas going to use dmraid04:09
ScottKI don't know if that's supported or not in the kernel.04:09
* ScottK doesn't have it.04:09
jrsuttonbut from the CD terminal I cannot figure out how download it and install it04:09
jrsuttoncd terminal, meaning prior to installing Ubuntu04:10
ScottKI'm pretty sure that's not going to work, but that's not an area I'm an expert in.04:11
ScottKThis channel is much more active during the US/European business day.04:12
jrsuttonIt is possible to install something while running the liveCD right?04:12
jrsuttonaside from it not really saving anything04:12
ScottKYes, but the alternate isn't a live CD.04:12
ScottKIt's the standard Debian Installer04:13
jrsuttonright, just thought/hoped the terminal portion would work the same way04:13
jrsuttonso if the liveCD would work I could install dmraid04:13
jrsuttonin theory04:13
ScottKI don't know.04:14
tritiumHi.  I installed the mail-server task on a gutsy install, and I'm following https://help.ubuntu.com/community/Postfix, and I don't think this command is working: dpkg-statoverride --force --update --add root sasl 755 /var/spool/postfix/var/run/saslauthd04:14
ScottKWhat happens04:15
tritiumI get an error (which the doc says I should until I restart saslauthd), but I don't see any change even after starting saslauthd04:15
tritiumI also don't see 250-AUTH when I test it out.04:16
* ScottK looks at the docs04:16
tritiumThanks, ScottK :)04:16
tritiumI'd expect that after the dpkg-statoverride command and restarting saslauthd, I'd see a /var/spool/postfix/var directory, which I don't.04:17
ScottKFirst, do you have /var/run/saslauthd?04:17
tritiumyes04:18
ScottKOK.04:18
ScottKWhat I'd recommend is take Postfix out of the chroot and get it working without chroot first.  Do you know how to do that?04:18
tritiumNo, I don't.04:18
tritiumIs there something wrong with the postfix wiki doc?  Did anything significant change on gutsy?04:19
ScottKShouldn't have.04:20
ScottKBut postfix and saslauthd both have a lot of moving parts.  Hard to say what it is at this point.04:20
tritiumI see.04:21
ScottKTo unchroot postfix, make a copy of your master.cf (you'll want it later), and then go into whatever editor you use.04:21
sommertritium: you might also try this: https://help.ubuntu.com/7.04/server/C/postfix.html04:21
tritiumthanks, sommer04:21
tritiumokay, ScottK04:21
sommerhey ScottK: I'll add that wiki postfix page to my update list.04:22
ScottKBTW, I wouldn't do the rm -rf /var/run/saslauthd step in the doc sommer just pointed out.04:22
tritiumWhy is that?04:22
ScottKBecause then saslauthd won't work unchrooted.04:23
ScottKActually nevermind04:23
tritiumSo the doc is wrong?04:23
ScottKNo.04:23
* ScottK was misreading.04:23
sommerI think the doc recomends unchrooting.04:24
sommeror guides you through removing postfix from chroot rather04:24
ScottKSo once you have your master.cf open, you will see a column called "chroot" with a bunch of y or n below it.04:24
tritiumScottK: thanks for your help too.  Should I try to follow the official server doc at this point before doing anything else?04:24
ScottKIf you prefer.04:24
tritiumDo you believe it'll work?04:25
ScottKBut if you do need to unchroot, just change all the y to n in that column and restart postfix.04:25
ScottKtritium: Yes.  I don't use that exact config, so I can't say for sure.04:25
tritiumOkay, thank you very much!  :)04:25
sommerScottK: do you know when the 7.10 docs will be on the help.ubuntu.com site?04:26
* tritium 's first time trying to install a mail server04:26
sommerI figured they'd be there by now.04:27
ScottKNo I don't, but for Postfix it should be the same for 7.04/7.1004:27
tritiumGlad to hear that. ^^^04:27
tritiumHow can I undo the dpkg-statoverride command I ran?04:27
sommerya, the 7.10 has a few more details though04:27
sommertritium: if you're running 7.10 on a desktop the newest Postfix guide is in the help... fyi04:28
tritiumsommer: newest ubuntu server postfix guide?04:28
tritiumi.e., same help as what the server guide will give?04:29
sommerya, click on help -> advanced topics -> installling server applications -> postfix04:29
tritiumThanks, sommer04:29
ScottKdendrobates: Did you unsubscribe the person that started the 'interesting' ML thread?04:29
sommertritium: yep... I've had success with it.04:29
tritiumgood deal04:30
ScottKsommer: I think the official docs no longer suggest removing the chroot.04:32
ScottKsommer: If they do, I think it's a doc bug (we can work with lamont to get it right).04:32
tritiumsommer: I don't find it in yelp04:32
tritiumSorry, I'm a liar.04:33
sommertritium: it's a little buried.04:33
tritium;)04:33
nealmcbScottK: I thought the mailing list was open, just the team was approval-only.  wish those were linked better - I hear launchpad has some plans to support mailing lists better04:33
tritiumStep 4 is to turn off the chroot operation for SMTP server.04:34
sommerScottK: under the SMTP Auth section it has remove chroot04:34
sommerya, what tritium said... heh04:34
sommerI guess the question is, is it better to have postfix in a chroot or not?04:35
dendrobatesScottK: not yet, I want to give him the opportunity to repent.04:35
tritiumAm I able to undo that dpkg-statoverride command?04:35
sommertritium: I'm not sure you need to.04:36
tritiumsommer: okay, but that command is not part of this set of docs04:37
sommertritium: ya the wiki needs updated04:37
tritiumSo, since it's not necessary, I'd prefer to undo it.04:37
* tritium runs man dpkg-statoverride04:37
ScottKdendrobates: OK.  Your list.04:39
dendrobatesScottK: He will be banned tomorrow, when I have more rest, and am less angry.04:40
ScottKsommer: Lamont and Weistse disagree on this.  Lamont views chroot as a standard security tool that almost everyone should use.  Weistse Venema views it as an advanced configuration option that only experienced admins who need it should use.04:40
ScottKdendrobates: That's quite reasonable.04:40
* nealmcb nods04:40
ScottKsommer: Since we use lamont's Postfix packages, we should try and use them the way he designed them.04:40
nealmcbScottK: nice "other subject" :-)04:41
ScottKnealmcb: Thanks.04:41
sommerScootK: gotcha... I'll add the postfix guide to the list.04:41
ScottKsommer: I don't know about using saslauthd with chroot.  I use sasldb and I have to remember to copy one file into the chroot after I add/change/remove a user.04:41
sommerScottK: I don't have that much experiece with sasl.04:42
sommerseems like copying file for every user change could be a pain though04:43
ScottKActually we should be moving people to dovecot and away from cyrus for SASL anyway.04:43
ScottKsommer: You can script it.04:43
sommerheh... true that04:43
sommerScottK: can't you use SASL for a plethora of other services though04:44
ScottKSure.04:44
ScottKBut in Main we primarily support Dovecot for a mail delivery agent, so it makes sense (to me anyway) to use it for SASL too (Postfix supports that since 2.3) and move towards deprecating Cyrus SASL.04:45
ScottKIn fact, now that I think of it, I wonder if getting Cyrus SASL demoted to Universe is doable in Hardy.  I think all the other bits have been demoted already.04:46
ajmitchinteresting mail on the -server list04:46
ScottKThat's one word for it.04:47
ajmitcha nice reply from dendrobates :)04:47
lamontScottK: slight correction.  Wietse views the chroot as something that causes lots of questions, and he doesn't want them from newbies.04:48
ScottKlamont: Thanks.04:49
ScottKlamont: Any thoughts on Dovecot versus Cyrus for SASL with Postfix?04:50
lamontuh... I think I'll cook dinner before the munchkins revolt.  give me about 15 minutes04:50
lamontand no, not dodging the question. bbiab04:50
ScottKlamont: I'll probably have gone to bed by then, but sommer please listen to what lamont has to say for getting the docs fixed up.04:51
sommerScottK: sure thanks for your input04:52
jetolehey guys04:52
lamontwaiting for stove to heat.04:52
lamontso.04:52
jetoleI know this should be a simple enough answer but I need to ask anyways, I need to setup an ftp server where when I upload, rename or delete, these actions are replicates to two other ftp servers, any suggestions?04:53
sommerjetole: sftp: https://help.ubuntu.com/7.04/server/C/ftp-server.html04:53
lamontI expect that either works. the biggest issue is likely to be transition04:53
lamontScottK: I'm almost certainly behind you in understanding the dovecot issues.04:54
jetolesommer: what does that have to do with what I asked?04:54
* ScottK really didn't want to hear that.04:54
jetoleactually, is sommer a bot?04:54
sommerjetole: not that I know of04:54
lamontso my main concern would be that (1) I don't want to fork postfix, so (a) cyrus needs to still work (at least in debian), and (b) I'd be happy to make it so that dovecot works too...04:55
sommerjetole: didn't you ask for instructions on setting up ftp?04:55
lamontjetole: rsync in a cronjob?04:55
jetoleI asked for instructions on setting up an ftp load balancing type system04:55
jetolelamont, rsync can handle ftp?04:55
ScottKlamont: Agreed.  In Ubuntu the idea would be to drop Cyrus to Universe and have Dovecot supported/documented.04:56
sommerjetole: ah... apologies I misread04:56
jetoleok, no problem but because it seemed like a generic answer I thought you might be bot, my mistake04:56
ScottKlamont: I probably need to switch my development server first and see where the "fun" points are.04:56
jetole;)04:56
sommerScottK, lamont: I think I'm confused when you say Cyrus do mean cyrus-imapd?04:56
ScottKFirst I need my production servers upgraded as I use the development box.04:56
ScottKsommer: Cyrus has lots of parts.  There is Cyrus SASL (still in Main) that we mostly use for SASL.  There are also other bits I"ve never used.04:57
* ScottK really needs to head to bed. Good night all.04:58
sommerScottK: thanks... have a good one04:58
jetolelamont: I don't think it can do ftp from what I just rtfm and one of the servers in the treo is a *grunts* windows machine04:58
tritiumGood night, ScottK.  Thanks again for the help.04:58
jetolehuh, cool, irssi just made text in *bold* between * and *04:59
ajmitchyes, it does that04:59
ajmitchand it can _underline_04:59
jetolenew to me04:59
jetoleI only started using irssi again back in feb, before that I have been using xchat since 2k and I used irssi back before that but it's been a while05:00
jetolehuh, I just upgraded the ram in my desktop tonight from 2g to 4g... kinda depressing, I mean the ram guage on the taskbar just looks so... well calm05:06
ajmitch4GB just isn't enough05:06
jetolewell it is for now but I havn't really been busy tonight05:06
jetoleI think it will be enough for me for a year or two05:07
Burgundavia4gb, geez05:08
BurgundaviaI survive with 1/2 gig05:08
jetoleon your desktop?05:08
ajmitchBurgundavia: a day or so ago, my system was seriously thrashing for > 30 minutes due to using up all the RAM05:08
jetolemust not be a multi tasker05:08
Burgundaviamy laptop, a 1.5 ghz celeron M05:09
Burgundaviawant to buy me a new laptop?05:09
ajmitchsure, once I'm rich & can afford to replace mine05:09
ajmitchare you going to UDS?05:09
jetolemine is a dual core AMD @ 1.6 w/ 2G or ram and 160GB HDD05:10
jetole... sorry, you brought it up and I had to gloat05:10
jetoleI hardly ever use mine05:10
nealmcb_ajmitch, jetole funny that you're talking about irssi - I just started looking more seriously at it - seems very handy to use in in a screen when on the road05:11
jetolenealmcb_: yeah I know, I love that feature becuase on my desktop I have it run in a detached screen at boot with a unique name to the screen and then on my laptop I have a shell script that runs ssh with the screen and name command so I can always connect to the same session05:13
ajmitchnealmcb_: that's mostly how I use it05:13
nealmcb_jetole: yeah, that's how I use mutt05:13
jetoleonly downside is getting notifications in your gui if someone triggers a filter or pm's you05:13
Burgundaviajetole: well, clearly then you need to come to UDS and we can trade05:13
jetolenealmcb_: I run a imap server05:13
jetolewhatis: UDS?05:14
Burgundaviais there a good screen tutorial written by real people for real people?05:14
jetoleand no05:14
Burgundaviaie: not Stallman or GNU05:14
jetoleI think it's called the man page05:14
nealmcb_Burgundavia: this tired old 2001 laptop has 256 MB.  But my system76 darter will arrive tomorrow :-)05:14
Burgundaviajetole: I mean, not written by Stallman or GNU05:14
jetolethats written for linux people who are real people05:14
nealmcb_and I will be at UDS.....05:15
jetoleBurgundavia: read the man page for bash05:15
* ajmitch is glad that a few people will be there to contribute at UDS05:15
jetolewhat is UDS?05:16
ajmitchubuntu developers summit05:16
jetoleah05:16
nealmcb_in boston next week05:16
jetolehmmm, well I have a few things I would like to work on but frankly I just don't have the energy, when I get home from programming all day long.. well, I don't know, sometimes I want to but starting a project just doesn't seem right for me now05:17
ajmitchnealmcb_: do you have a few server specs ready to discuss?05:17
jetoleI think I am gonna install xmpp at work though05:18
jetolethere is some crap ass "effusia" server, some windows server based proprietary chat system that you have to pay per user to work and it doesn't even do that05:19
nealmcb_ajmitch: I was just thinking a bit about some sort of central password/keystore proposal, having read the pidgin discussion of why they store passwords in the clear, and inspired by the infocard stuff also.  but it seems like a stretch and I haven't looked at keystores in a long time05:20
nealmcb_and I'm still wanting someone to run an AD test server so we can test ubuntu against it05:21
ajmitchgood luck there05:21
nealmcb_but I haven't even gotten my silly ubotu factoids done - keep getting distracted....05:22
jetolenealmcb_: what about AD over xen/vmware?05:22
ajmitchyou've achieved more than I have then :)05:22
* ajmitch did have a very basic AD setup in vmware at one point05:23
ajmitchhowever it's something that should be done by someone with proper AD experience, to simulate a real network05:23
nealmcb_jetole: I'm cheap - don't want to pay for AD or admin it - just want to bang on one from ubuntu.  I don't have any windows boxes at all05:24
ajmitchnealmcb_: I used evaluation copies of windows 2003 server05:24
ajmitchlegally downloaded for free from MS05:24
nealmcb_huh - for some reason in irssi, the "***ajmitch" is completely invisible, like white on white05:24
* ajmitch makes sure to use a black background, as irssi is highlighting in bright yellow05:25
jetolenealmcb_: I am cheap too, and I may or may not have, hypothetically speaking, have paid for windows server cd at home05:25
nealmcb_I like white, and can see the bright yellow.05:26
jetoleand with xen/vmware you don't need to run windows05:26
jetoleyou run windows in a window inside ubuntu05:26
Burgundaviahow many levels could you recurse?05:26
ajmitchBurgundavia: about 1, with pain05:26
jetoleajmitch: I am using irssi and I see * ajmitch did have a very... etc05:27
* ajmitch tried to do some xen testing within vmware, it was painful05:27
nealmcb_jetole: sure - that would be the way to do it.  someone should just donate a windows server cd to someone willing to host it and keep restarting it when it gets pwn's05:28
* jetole uses irssi on white on black terminal with default theme and transparent gnome-terminal background05:28
jetolenealmcb_: I would but I have no idea where my CD is and have a pile of other shit on a todo list to setup05:28
* nealmcb_ switches to gaim to read who just wrote that....05:29
nealmcb_! jetole !05:29
ubotuSorry, I don't know anything about jetole ! - try searching on http://ubotu.ubuntu-nl.org/factoids.cgi05:29
jetoleatm it is ftp replication and I think I found a solution05:29
jetolestill reading the article05:29
nealmcb_ahh - highlighting the text shows the hidden text05:30
nealmcb_it is highlighting in white05:30
jetolehow come I have never had that issue with irssi05:30
jetoleeven with different themes05:30
tritiumI'm using the dyndns feature on my ADSL modem.  I port-forward ssh, http, imaps through to my server at 192.168.1.100.  Why doesn't my laptop resolve the dyndns fqdn to my server?  I can only ssh to it using the local IP address.05:32
ajmitchbecause the adsl modem won't do the port forwarding from both directions05:33
tritiumajmitch: so, imap doesn't work either, and I'm trying to setup my laptop to reach the mail server from both home, and when on travel05:35
tritiumat home, I could use the local IP, but not on travel05:35
jetoleholy shit, someone try typing => apt-get install fam <= AND DO NOT INSTALL IT OR USE -Y, do this from a desktop machine though05:35
ajmitchtritium: bind with multiple views? :)05:36
ajmitchor use iptables on the mail server to DTRT05:36
jetoleI like zoneedit, I can do updates to it via wget which is stored in a crontab05:36
tritiumheh, you *lost* me ajmitch :)05:36
* ajmitch just has a domain name for home05:37
tritiumajmitch: so, do you have a static IP?05:37
ajmitchyes05:37
tritium$$$$05:37
ajmitchthough my DSL provider conveniently supplied a dyndns service prior to that05:37
ajmitchwhich was updated automatically05:37
jetolenice, for my home machine static ip is only available through ADSL which I don't want05:38
tritiumajmitch: so, since I totally don't understand binding multiple views blah blah, I could just use local IP at home, and fqdn on travel, yes?05:38
ajmitchyes05:39
jetolebellsouth/att will wanna charge me a shitload for a phone line I wont use, 911 services, telecom charges etc etc etc and then limit me to 3/372 if I pay extra, comcast craps on torrents from what I have read but I have an 8/768 for a reasonable price05:39
jetole**3/38405:40
lamontjetole: as I read your request, you want to have uploads replicated.  my solution would require that there be one master which then mirrored to two other machines - probably not what you wanted.05:40
tritiumThanks, ajmitch!05:40
ajmitchnot like I helped much :)05:40
ajmitchbbiab05:40
lamontthe real issue is that you need to coordinate so that you know how to merge a diff05:40
jetolelamont: that is exactly what I want05:40
lamontthen you want either rsync or ftpmirror05:41
jetoleftpmirror? that sounds good since you missed the part about one of the hosts being a windows machine05:41
lamontjetole: that's a correctable condition05:41
jetolenot by me it isn't05:42
lamonthrm.. too lazy to go read the mailing list to find the answer.,.. can we upload to hardy yet?05:42
jetoleI don't run that office and its in another state05:42
jetoleand I am the relatively new guy on the block at this company05:42
lamontjetole: that does make it more complicated to fix, yes.05:42
jetoleright, well I just downloaded ftpmirror to my home machine so I can rtfm05:42
jetoleI need a shirt that says that05:43
jetoleespecially for my office05:43
lamontmirror is the more traditional package, fwiw.  although that's perl05:43
tritiumhrm, bad authentication response from the postfix server I just installed according the the instructions in yelp05:44
tritiums/the the/to the05:44
jetolelast thing I want to ask before I go to bed05:46
jetoleis there a way to monitor changes to any file in a directory?05:47
lamontjetole: no.  I don' t have a shirt I can sell you05:47
lamont:-)05:47
lamontinotify would do that, I expect.05:47
jetoledamn, I was gonna ask you that too05:47
jetoleok, cool05:47
jetolewell I have more stuff to read now05:47
lamontas in the system call, not the package.05:47
lamontso apt-cache search inotify to see what packages might actually provide an app for doing that05:48
lamontlikewise, nagios is good for monitoring _stuff_.05:48
lamont(where "stuff" could conceivably include file chages)05:48
lamontchanges, even05:48
jetoleyes I like nagios but I think it may not apply to what I need05:48
tritiumdo I need to change mechanism to shadow to authenticate with postfix server using system user/password?05:49
tritiumIt's set at pam, and is currently failing.05:49
lamonttritium: please don't confuse me with someone who actually knows how to use sasl... :-)05:49
tritiumlamont: isn't this your package?  ;)05:50
jetoleyeah, I am with lemont on that one, I use postfix but not sasl05:50
lamontI made huge strides forward a few months back and actually configured TLS on my machines.05:50
jetoleI know dovecot authenticates properly via pam05:50
lamonttritium: my package, not my lib. :-)05:50
jetolealright, I am off to bed05:50
jetolecheers05:50
tritiumnight, jetole05:50
tritiumlamont: so you don't use sasl personally?05:51
lamontthere's a reason that debian bug 330885 has been open since 2.2.405:51
ubotuDebian bug 330885 in postfix "postfix: default configuration should enable use of TLS for stmp as default" [Wishlist,Open] http://bugs.debian.org/33088505:51
tritiuminteresting...05:51
lamonttritium: haven't ever see a need to do so05:51
lamontwell, I understand that there are situations that it very nicely addresses.05:51
lamontand none of those have yet matched my personal situation sufficiently to cause me to actually figure it out yet.05:52
tritiumthanks, lamont.  I only chose to use it since it's in the ubuntu server docs ;)05:52
lamontsomeone else wrote those docs...  SASL is on my list of things to understand, just nowhere near the cutline yet05:53
tritiumWell, I'll keep researching.  Thanks!05:54
nealmcb_dendrobates: there is a little intro to the screen program as part of http://f0rked.com/articles/irssi06:04
PanzerMKZ_screen is great program06:05
PanzerMKZ_all my ubuntu machines have it06:06
nealmcb_oops - that bit on screen was for Burgundavia ....^06:06
Burgundaviathanks nealmcb06:10
=== zobbo_ is now known as zobbo
maethhi, im trying to install a VPN on my ubuntu server07:24
krautmoin08:06
_rubeng'day08:08
=== stork_ is now known as stork
=== lionel_ is now known as lionel
=== flokuehn_ is now known as flokuehn
=== ajmitch_ is now known as ajmitch
=== Drazha[away] is now known as Drazha
MikeDXhey folks. ive got a server that has been pre-configured by my host with 606, but I want to do a clean install so that I can set my raid up correctly. When I use the live cd, it doesnt detect my network. Is there someway I can "copy" the configuration thats already live on the system and copy it back over afterwards? Its currently a minimal installation - not even apache installed11:49
MikeDXis it feesable that I tar up everything in / and untar it back when the new server is installed?11:50
_rubentar/untar an old install over a new one pretty much erase the new install and restores the old install :-)11:51
MikeDXyes but it wont restore my partition setup - which is what i want to change. the host currently has a 230gig partiiton for home, and virtually nothing anywhere else - so I want to make a small /boot and have the rest as the install11:52
_rubenand "doesnt detect my network" is a bit vague, and most network configs arent all that hard to do manually (or you could backup /etc/network/interfaces, but might not be enough)11:53
_rubenoh ok, for some reason i thought you wanted to perform an upgrade as well in the process11:54
MikeDXwell, the install cd says it cannot find my network card, but the preinstall lists it as some " Unknown device 8167 (rev 10)"11:54
MikeDXso they must have installed that manually (i guess)11:54
_rubenah11:54
_rubenis it hard or software raid?11:54
MikeDXsoftware11:55
MikeDXand the partitions need to be resized11:55
MikeDXhmmm i wonder if i could copy everything in / to /home and then remount /home to /11:55
_rubenone (nasty) solution would be to break the mirror, repartion one drive, create raid on new drive, copy data, repartion 2nd drive, have raid rebuild itself11:55
_rubenin theory that could work as well i think, would have to play with the bootloader in either scenario11:56
MikeDXis there no easy way of finding out what nic driver is being used, and supply that once the new install has been completed?11:57
MikeDXof course then i'd have to setup the net manually - something i want the installer to do ideally11:57
_rubenlsmod might list an 'obvious' candidate11:58
davekempeMikeDX, can you switch to Alt F2 during the install and do dmesg ?11:58
_rubenor check the output of dmesg11:58
_rubenheh11:58
MikeDXyeah let me just check12:01
MikeDXi'll have to run the installer12:01
MikeDXmight take a while as its a remote control thing where i have to upload the cd image on the fly via a samba share12:01
_rubenyou should check it on the pre-inst system12:02
_rubenthat's the one that does load the driver12:02
MikeDXok what am i looking for in dmesg on the working system12:03
MikeDX[17179574.288000] eth0: Identified chip type is 'RTL8169SC/8110SC'.12:03
MikeDX[17179574.288000] eth0: r10001.02, the Linux device driver for Realtek Ethernet Controllers at 0x4000, 00:30:05:ec:33:18, IRQ 19312:03
MikeDX[17179574.288000] eth0: Auto-negotiation Enabled.12:03
davekempethats the rtl8169 driver12:04
MikeDXok, but the install cd doesnt pick it up12:05
MikeDXis there a workaround to supply a driver at install time?12:06
davekempehrmm the install cd should pick it up12:07
MikeDXits 606.112:08
MikeDXI'm kinda stuck :(12:08
_rubenthe driver might not be present in a vanilla install .. it could have been inserted by the vendor12:09
_rubenyou could try to run gutsy's installer, newer kernel -> might detect the nic properly .. then again, since its 6.06 on it, i guess you'd want a LTS version working12:09
MikeDXthe other server we have with them (that we had to do the same process with), everything was picked up straight away. this one has a different nic12:09
MikeDXwell, thats the thing, i cant even try a newer one since we do want the LTS12:10
_rubenwait 6 months ;) .. or do a data migration instead .. which is nasty thing to do remotely though12:11
MikeDXnot going to happen really is it12:11
MikeDXwhats gutsys support window? is it 2009?12:11
_rubennow +18 months i think12:11
_rubenwith a new lts coming out in 6months12:12
MikeDXshould i just tar up root then, repartition, reinstall and then untar again?12:15
_rubenthat's one way of doing it. breaking the mirror, etc, is another. there's probably other ways as well12:16
_rubenthen again, having a 200G / doesnt quality as A Good Thing To Do, imho ;)12:17
MikeDXno, im just doing what ive been told to do :)12:17
MikeDXwhich is to not have a 250gb /home12:17
_rubenthen mount it under /data/ instead ;)12:17
_rubenor wherever you do need that ammount of space ;)12:18
MikeDXi'll mount it to /var/www ;)12:19
_rubenfor a webserver that should be a decent choice :)12:21
MikeDXhow can i check the raid is actually working on this machine? is there a command to show the raid setup?12:23
avatar_using softwareraid? cat /proc/mdstat12:25
MikeDXdoesnt show anything in there :|12:28
MikeDXjust "unused devices: none"12:28
avatar_are you using hardwareraid?12:30
juliuxhi all13:11
juliuxcan i use dapper on a dual quadcore xeon with 8gb ram?13:11
avatar_uh, i suppose yes13:13
avatar_though amd64 may be better for large amounts of ram13:13
juliuxok13:14
MikeDXto be honest I am not sure if it is hardware or software raid anymore :(13:29
ScatterBrainI just installed my first Gutsy server.  One thing is wrong.  vga=791 on the kernel options line in grub's configuration produces a blank screen.  The video mode changes, the monitor says it does, but no text appears on the screen.13:38
ScatterBrainAny clues?13:38
ScatterBrainIf it matters the server is a Dell Poweredge 1950.13:39
ScatterBrainLooks like it's a known bug in Gutsy.  https://bugs.launchpad.net/ubuntu/+source/linux-source-2.6.22/+bug/13561313:41
ubotuLaunchpad bug 135613 in linux-source-2.6.22 "Framebuffer consoles no not work in gutsy (dup-of: 129910)" [Undecided,Confirmed]13:42
ubotuLaunchpad bug 129910 in initramfs-tools "tty[1-6] are active but display nothing in Gutsy" [Critical,Triaged]13:42
ScatterBraineill try that solution first.13:42
=== zul_ is now known as zul
MikeDXfor those following my plight, i'm going to remount the large /home to /data as suggested.... wish me luck13:52
=== dantalizing_ is now known as dantalizing
Carryapache2.conf and no httpd.conf, is this only in ubuntu 6 server?14:26
* Carry learns ubuntu-lamp...14:27
avatar_httpd.conf is near empty on feisty installation with apache214:27
Carryavatar_: yes, ubuntu-way? or new apache-way?14:28
avatar_hmm, might be debian/ubuntu way.14:28
Carryin ubuntu 6 server it is in apache2.conf14:28
avatar_i'm only running debian/ubuntu servers with recent apache14:29
Carryavatar_: hmm, should i install all from source to get default?14:29
avatar_and try to forget about slackware ...14:29
avatar_Carry: do you need httpd.conf?14:29
Carryavatar_: than you've got httpd.conf, no apache2.conf?14:29
Carryavatar_: i have a book that says httpd.conf...14:30
Carrywonder if book is useless..14:30
Carryslackware: hard?14:30
avatar_perhaps that book is about apache1.3 ?14:30
Carryno, 2.0 ...14:30
avatar_slackware has no decent packagemanagement14:31
Carryis Apache Server 2 Bible..14:31
avatar_so its hard to keep updated14:31
Carrytnx for warning :)14:31
Carrybook = 2002, want to know if it's usefull...14:31
avatar_books are outdated by the time they're in the bookshops :)14:32
pteague_workit kind of depends on who's done the installation of apache... i think wamp still uses httpd.conf ... most of the debian based distros use apache.conf ...  i've not messed with any other distros in a while, last time i used mandrake (now mandriva) they used httpd.conf14:32
Carrypteague_work: tnx..14:33
avatar_when using ubuntu/debian i think its the best to keep it using the ubuntu way14:33
Carryso learn install from source..14:33
avatar_don't install from source14:33
pteague_work& i haven't installed apache from source off httpd.apache.org in a while either14:34
Carrypackage.14:34
avatar_why bothter with security updates if someone already did that for you14:34
avatar_realy, you don't want to go there14:34
Carryhmm, so debian is httpd.conf, ubuntu(my lamp) is apache2.conf14:35
pteague_workif you're just setting up apache as a dev machine & you want the experience install from source, otherwise it's not worth it unless you need a highly specialized install of apache14:35
Carrymean: debian also apache2.conf14:35
pteague_worklast time i installed debian it was apache.conf14:35
Carrypteague_work: apache2.conf, with 2?14:36
Carrypteague_work: http://wiki.apache.org/httpd/DistrosDefaultLayout#head-b5762a3e9764f34f7587e35f4db9ff35d508ced115:03
Carrya2ensite  a2enmod are debian/ubuntu scripts? not apache?15:17
sommer Carry: I believe that's correct15:19
sommerthey create symlinks between sites-available and sites-enabled15:20
Carryah..15:20
Carrytnx15:20
sommerI think they're pretty handy, because they allow you to configure a site, but not enable it right away.15:21
sommerbut I've also configured sites and forgot to enable them :-)15:22
=== Drazha is now known as Drazha[away]
Carryare these tools in the default installation of ubuntu-lamp?15:28
sommerCarry: apache2.2-common15:31
Carryah..15:31
sommershould get installed when installing apache though15:31
* Carry has to check again later....15:32
nealmcbsoren: excellent un-bleeping reply :-)  CoC in action!15:36
sorennealmcb: :) I wasn't awake enough to be mad yet.15:37
milestoneScottK: the Thing is, that on the page, you recommended reading, you assume, that the postfix server serves "real" accounts. It is correct to strip the realm then. In my case I was using postfix-mysql and the username was "%u@%r" and sasl stripped the realm15:38
milestoneand i needed it15:39
milestoneso on http://postfix.wiki.xs4all.nl/index.php?title=Virtual_Users_and_Domains_with_Courier-IMAP_and_MySQL#SASL2_Install i found a little note which i must have overread while reading the manpage to saslauthd and found out, that appending "-r" did the trick for me15:40
milestoneis that a bug? I dont think so, because the howto was written for a different audience or setup than mine15:41
milestonewould it make sense to write a ubuntu postfix mysql howto? Answer -> hell yeah15:41
* milestone hopes that there is no such howto :-)15:41
ScottKmilestone: Part of the reason I asked you over here is that we are doing a server documentation review15:42
sorenNot an ubuntu specific one, perhaps, but there is one.15:42
milestoneahh i see15:42
milestonei gained so much knowledge now15:42
ScottKsoren: I was just trying to help milestone on #postfix with a config issue.15:42
ScottKI was hoping he'd be willing to help us document his situation so others might benifit15:43
sorenI see. That would rock!15:43
milestonewould you guys like a postfix+mysql+courier ((imap|ssl)(pop3|ssl)) + sasl smtp auth  howto15:43
milestonefrom the ground up?15:43
ScottKI think there may be pieces of that on the wiki15:43
* ScottK looks15:43
sorenI've used http://www.marlow.dk/site.php/tech/postfix before15:45
ScottKThis https://help.ubuntu.com/community/PostfixCompleteVirtualMailSystemHowto exists, but is by definition wrong since it mentions webmin15:45
sorenErk... And it's even on h.u.c :(15:45
ScottKsoren: Yeah.  Someone needs to go help "revise" that one.15:45
ScottKmilestone: Dovecot is the preferred MDA here, but I think that would be very useful even with Courier.15:46
milestoneok15:46
milestoneso should i modify that page, or create a complete new one?15:46
ScottKmilestone: I'd create a new one.  Otherwise you'll end up in a wiki war with whoever has been maintaining that one.15:47
* ScottK thinks soren should go deal with it.15:47
sorendovecot is really preferred (it's in main).15:47
soren....but dovecot is really the easiest part of that puzzl.e15:47
milestonesoren ok15:47
sorenScottK: Err? Deal with what? Having that page removed?15:48
milestonei will create it with courier, and once finished, you can decide what to do with it, ok?15:48
ScottKsoren: I was thinking more like educate the person that wrote it and get the webmin stuff removed.15:48
ScottKsoren: If that doesn't work, yeah, then have it deleted.15:48
ScottKmilestone: Sounds great.15:49
ScottKmilestone: You can always ask Ubuntu server questions here too.15:49
milestoneok15:49
milestoneand thank you guys15:49
milestonei think it will take me until monday, then i will be back and tell you guys15:49
ScottKmilestone: Great.15:51
sorenScottK: Hm... Yeah.. I have no clue who he is, though. https://wiki.ubuntu.com/ChinthakaDeshapriya15:51
=== Drazha[away] is now known as Drazha
ScottKsoren: Me neither.  Have fun.15:52
soren:p15:52
milestoneok got to go now, see you guys monday15:52
ScottKSee you.15:53
ScottKsoren: How was that for recruiting?  Just started hanging out on #postfix.15:53
sorenScottK: I've been hanging out in #dovecot for ages with no such luck.15:54
ScottKI did have highlighting set on the word postfix.  Now that I'm on that channel, I've turned it off ;-)15:55
* ScottK probaby had beginner's luck.15:55
lamontScottK: ah. yeah.  that'd be a reason for me to not go there...15:55
ScottKHeh.  I've just tried it for the first time.  I'm curious to see what the channel is like.15:56
lamontand yes, I highlight on postfix.  tried highlighting on 'bind' once.  bad plan15:58
sorenlamont: Yeah, I can imagine. That would hilight all sorts of questions about bind!16:01
sorenOh, wait..16:02
lamontsoren: it's more the non-bind comments about bind(2) type stuff that I found to be the issue...16:03
sorenlamont: I really can't think of any other words that contain "bind".16:03
sorenlamont: Oh, right.16:03
lamontso not only did I get highlighted on ISC/bind stupid questions, I got highlighted by questions from people just learning about sockets.16:06
avatar_anybody here using canonical landscape?16:36
ScatterBrainanyone using vmware-server on gutsy yet?16:38
nijabaScatterBrain: I am16:40
ScatterBrainDid you have trouble installing it?16:41
ScatterBrainnijaba: Did you have any trouble installing it?16:42
ScatterBrainnijaba: I can't seem to get the blasted thing to accept the serial numbers that VMware gave me.16:42
nijabaScatterBrain: I had to dig a bit in the forums...16:42
nijabaScatterBrain: there is a fix for that... let me check16:43
=== Drazha is now known as Drazha[away]
nijabaScatterBrain: http://blogs.techrepublic.com.com/howdoi/?p=152 point to a patch for this16:46
ScatterBrainnijaba: Did you get this?: http://pastebin.com/d770d8d6116:52
nijabaScatterBrain: nope16:53
ScatterBrainnijaba: Are you running the 64 bit version of Gutsy?16:53
nijabayes16:53
ScatterBrainnijaba: that's the difference then.  I'm running the 32 bit version.16:54
nijabapossibly, but surprising16:54
ScatterBrainnijaba: I found a post that says to install ia32-libs, but I can't seem to find that.16:54
nijabaapt-get ia32 ?16:55
nijabaapt-get install ia32 ?16:55
ScatterBrain Couldn't find package ia32-libs16:55
lamontia32-libs - is in universe16:55
ScatterBrainlamont: I've got that open.16:55
lamontand exists on amd6416:55
* ScatterBrain goes to double-check.16:55
lamontif you're running 32-bit, then you already have those libs...16:55
lamont(the package exists to deliver the 32-bit libs on 64-bit)16:56
ScatterBrainlamont: that's what I thought.  But why do I still get the error that the 32-bit libs cuure?16:56
ScatterBrain*supposedly* cure.16:56
lamontnfc16:56
lamontvmware works for me.  then again,I'm running -workstation16:57
lamont5.5.5 + patches for 2.6.2216:57
lamontdf: `/': Function not implemented16:58
lamontmdadm: cannot open : No such file or directory16:58
lamontFTW!16:58
* ScatterBrain goes to lunch to ponder the problem.16:58
ScatterBrainthanks for the help - maybe it'll come to me on a full stomach.16:59
mindframe-what's the best way to automatically install updates?17:48
mindframe-create a daily crontab with an appropriate apt-get line?  or is there some package out there that does a better job?17:49
tidelineimo automatic updates to a server is not a good idea - unless you can tolerate downtime if something goes wrong17:55
mindframe-well is there a way just to install security updates?17:57
tidelineagain automatic updates may not be the best way to handle this, you need to evaluate all possible changes to critical systems on an individual basis17:58
tidelineand, I may be wrong, but I don't believe that fixes are tagged in any way as security etc.17:58
mindframe-this is true, but it's not really a critical system17:58
keescooktideline: well, stuff that comes from the -security pocket are security updates.  You could disable the -updates pocket if you really only wanted security updates.17:59
tidelinekeescook, good point17:59
tidelinekeescook, would that be changed in the /etc/apt/apt.conf.d/50unattended-upgrades file?18:01
tidelineI see, n mine at least Unattended-upgrades::Allowed-Origins with Ubuntu feisty-security in it18:02
mindframe-same here18:02
mindframe-im wondering about /etc/cron.daily/apt18:03
keescooktideline: honestly, I've never played with the unattented upgrades.  :P18:03
keescookeval $(apt-config shell UnattendedUpgradeInterval APT::Periodic::Unattended-Upgrade)18:05
keescookperhaps setting the APT::Periodic::Unattended-Upgrade to something non-zero?18:06
keescookcat /usr/share/doc/unattended-upgrades/README18:06
tidelinemindframe, also check https://wiki.ubuntu.com/AutomaticUpdates18:16
varekwhy does iptables -L take so long :\19:16
donspauldingI linked a shell script into /etc/cron.daily but it doesn't appear to be running.  Is there something else I need to do to get it to run20:18
donspaulding?20:18
sommerdonspaulding: just a thought, but are the permissions correct on the script?20:19
donspauldingyou mean +x  ??20:19
sommerdonspaulding: yep, for owner group and world20:19
donspauldinglemme check20:19
donspauldingyeah, it's 75520:21
sommerdonspaulding: do you see any errors pertaining to your script if you do grep -i cron /var/log/syslog ?20:22
donspauldingyeah, Exec format error20:24
donspauldingexited with return code 120:24
donspauldingunless that rings any bells I'll go off to Google.20:24
donspauldingthanks for the tip!20:24
sommernot with me... probably something inside your script20:25
sommerdonspaulding: np20:25
donspauldingit looks like run-parts needs a Shabang in it, according to the great Google of Oz20:27
rbrunhuber8995every few days is get an error like this: cannot open bayes databases /var/lib/amavis/.spamassassin/bayes_* R/O: tie failed: Permission denied. Any hits how to prevent this?20:27
donspauldingmake that run-parts requires my script to have the shabang20:27
sommerdonspaulding: heh sounds about right20:28
donspauldingsommer: it's always the little things.  oh well, explicit is better than implicit.20:28
mathiazvarek: probably because it tries to resolve dns. try iptables -nL.20:39
varekfantastic20:39
varekthanks mathiaz20:39
varekiptables > scriptkiddies with botnets20:39
varekhey if i have a list of client that were being used to DoS attack me is there anywhere i can report them to ?20:40
mathiazvarek: you could try to report the problem to their ISP.20:42
varektoo much effort20:48
varekthere's like 15 clients20:49
varekand isps don't care about this stuff20:49
ScottKvarek: Then no, not really.21:05
mralphabetvarek: you can complain to your own ISP, they can filter those IP's out on their edge21:06
varekiptraffic filters for me pretty well21:16
varekthe attack is an attempted syn flood - but i have tcp_syn_cookies enabled, so it's doing nothing except open+close ports21:17
=== mathiaz is now known as mathiaz_
=== mathiaz_ is now known as mathiaz
Centaur5So if I understand correctly you can't use iptable commands in firehol?23:42
PyroSamaHello.23:49
PyroSamaI am having issues with apache2 and mod_rewrite. I've changed allowoverride to all and mod_rewrite is enabled.23:50
PyroSamaYet it acts as though mod_rewrite is not even enabled.23:50
mathiazPyroSama: did you restart apache2 ?23:51
PyroSamaYep.23:52
PyroSamaI've been at this for 2 days now.23:52
PyroSamaAttempted to place ifmodule in the .htaccess, apache2.conf, and even available-sites/default23:53
PyroSamaTried placing rewriteengine on in all three aswell and no combination of these seem to have any effect.23:54

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!