=== chuck is now known as zul [00:43] mmkay [00:43] i managed to lock myself out of my own server [00:43] accidently removed my user from the sudoers group [00:44] do you have physical access to your server? [00:45] nevermind, i had an admin account :) [00:58] Can't boot Gutsy with my LVM system any longer. Was told -server might be a better place to ask. [01:03] Hello. Is there a known issue about samba's slow performance under ubuntu 7.04? [01:05] Hello. I need to get an SMTP server going on my Ubuntu server so my forum can send out emails (like topic replys). Receiving emails back would be nice, but is not necessary. How do I do this? [01:06] zylstra555, you should already have a smtp server set up [01:06] Znuff: How do I find out its settings and information? [01:07] zylstra555, can't remember exactly what is the default smtp server on ubuntu, but I'm guessing it's either exim or postfix. [01:07] zylstra555, so either /etc/exim or /etc/postfix [01:07] hmm [01:07] I will see [01:09] Znuff: No MTA is installed by default, but Postfix is the preferred MTA in Ubuntu. [01:09] In the strange event that I just removed Postfix since I thought it was incorrectly installed (long story) what do I do? [01:09] ScottK, on the server install there's no mta by default? [01:09] That's correct. [01:09] zylstra555, just reinstall it [01:10] ScottK: How do you find the MTA settings? [01:10] For postfix, the settings are in /etc/postfix [01:11] I'm really annoyed. I can't get passed 40Mbit/sec on my samba [01:11] While I am waiting: I have an older hard drive in my computer, and this, obviously, concerns me a little bit. Is it a bad thing if a hard drive stays on all the time? [01:14] Not really. Now old? [01:15] I am not sure. If it helps: Its (please dont laugh) a 3GB hard disk drive [01:15] I'd replace it. [01:15] Somewheres around 1994-1997 [01:15] Most hard drives have a 5 year design life. [01:15] some old drives (smaller capacities) are actually safer than new ones to keep on all the time because of the low bit densities [01:15] You're well past that. [01:15] Goody [01:16] anyone know a cli app to torture test [01:27] [01:29] Anyone here using debmirror and gutsy? I can't seem to get it to pull down any packages. [01:31] Still cant send emails. I was using the server "localhost" and the user "server" [01:31] (my main account) [01:31] and I have tried with and without password [01:31] Is that PHP? [01:33] I have tried using the PHP mail option, that did not work either [01:33] Shall I try it again? [01:35] Does it make a difference that right now, I dont have a proper domain name? [01:38] zylstra555, it shouldn't [01:38] Do you get any error when sending an email with php's mail() function? [01:39] Not in my web browser [01:51] zylstra555, turn on display_errors [01:51] How do I do that? [01:52] zylstra555, php.ini [01:52] (sorry for the delay, I had a severe foot cramp) [01:53] Where is the php.ini file? [01:54] (can you tell I dont know what I am doing? :) ) [01:56] probably in /etc/php/apache2/php.ini [01:57] Display_errors = on already [02:09] Anyone alive? [02:10] !ask [02:10] Don't ask to ask a question. Just ask your question :) [02:11] :p I'm having a hard time loading Ubuntu 7.1.0 64 bit Server to load [02:12] How do I get to terminal from nearly the beginning? [02:12] like right after I put in the CD? [02:12] its 7.10 btw :) [02:13] you have to start the installer first i thik (i havent used the 7.10 install images) [02:14] well I get to the splash screen [02:14] but can't seem to go further [02:15] so I was wanting to drop into terminal and see if I could load some newer drivers and so forth [02:16] if the install cd has a 'advanced' or 'edit boot' option, turn off the splash screen. find out whts breaking [02:16] * kgoetz mutters about splash on servers === infinity2 is now known as infinity [03:16] how do I get the original /etc/snmp/snmpd.conf that came with snmpd ? [03:17] osmosis: it is probably in a doc path [03:17] look at the files in the package [03:21] Burgundavia: i dont see it there. [03:24] how do I get the original /etc/snmp/snmpd.conf back? Do i need to dpkg-reconfigure snmp? or? [03:25] download the package again? [03:26] that generally doesn't help [03:26] kgoetz: already tried that. [03:26] purging & reinstalling the package would, or with something like dpkg -i --force-confoverwrite (can't recall the exact option) [03:27] i'd "just" extract the file i want myself. if theres a better way i'm open to hear it [03:27] ah, you could remove /etc/snmp/snmpd.conf & use dpkg -i --force-confmiss, if you really needed to [03:29] dpkg -x /var/cache/apt/archives/ /tmp/snmp && cp /tmp/snmp/etc/snmp/snmpd.conf ~ [03:29] urgh [03:29] lol. [03:33] --force-confmiss or missconf [03:33] confmiss i think [04:03] How do I get packages from the CD boot terminal? [04:06] Anyone around with admin privs to the server-team ML' [04:06] jrsutton: I'm not sure what you mean. [04:07] Here is my pickle. I've booted from the CD, and can get to the splash screen [04:07] after that I start having problems [04:07] OK. [04:07] Get the alternate CD and use that. [04:07] well that sorta works [04:08] but not exactly [04:08] OK. [04:08] I have software raid setup [04:08] I'd focus on that. You need the alternate for that anyway. [04:08] IIRC [04:08] with existant data [04:08] right, so I got the alternate CD [04:08] and I can drop into terminal [04:08] Linux software raid or Windows software rai? [04:09] rai/raid [04:09] well NVIDIA raid [04:09] was going to use dmraid [04:09] I don't know if that's supported or not in the kernel. [04:09] * ScottK doesn't have it. [04:09] but from the CD terminal I cannot figure out how download it and install it [04:10] cd terminal, meaning prior to installing Ubuntu [04:11] I'm pretty sure that's not going to work, but that's not an area I'm an expert in. [04:12] This channel is much more active during the US/European business day. [04:12] It is possible to install something while running the liveCD right? [04:12] aside from it not really saving anything [04:12] Yes, but the alternate isn't a live CD. [04:13] It's the standard Debian Installer [04:13] right, just thought/hoped the terminal portion would work the same way [04:13] so if the liveCD would work I could install dmraid [04:13] in theory [04:14] I don't know. [04:14] Hi. I installed the mail-server task on a gutsy install, and I'm following https://help.ubuntu.com/community/Postfix, and I don't think this command is working: dpkg-statoverride --force --update --add root sasl 755 /var/spool/postfix/var/run/saslauthd [04:15] What happens [04:15] I get an error (which the doc says I should until I restart saslauthd), but I don't see any change even after starting saslauthd [04:16] I also don't see 250-AUTH when I test it out. [04:16] * ScottK looks at the docs [04:16] Thanks, ScottK :) [04:17] I'd expect that after the dpkg-statoverride command and restarting saslauthd, I'd see a /var/spool/postfix/var directory, which I don't. [04:17] First, do you have /var/run/saslauthd? [04:18] yes [04:18] OK. [04:18] What I'd recommend is take Postfix out of the chroot and get it working without chroot first. Do you know how to do that? [04:18] No, I don't. [04:19] Is there something wrong with the postfix wiki doc? Did anything significant change on gutsy? [04:20] Shouldn't have. [04:20] But postfix and saslauthd both have a lot of moving parts. Hard to say what it is at this point. [04:21] I see. [04:21] To unchroot postfix, make a copy of your master.cf (you'll want it later), and then go into whatever editor you use. [04:21] tritium: you might also try this: https://help.ubuntu.com/7.04/server/C/postfix.html [04:21] thanks, sommer [04:21] okay, ScottK [04:22] hey ScottK: I'll add that wiki postfix page to my update list. [04:22] BTW, I wouldn't do the rm -rf /var/run/saslauthd step in the doc sommer just pointed out. [04:22] Why is that? [04:23] Because then saslauthd won't work unchrooted. [04:23] Actually nevermind [04:23] So the doc is wrong? [04:23] No. [04:23] * ScottK was misreading. [04:24] I think the doc recomends unchrooting. [04:24] or guides you through removing postfix from chroot rather [04:24] So once you have your master.cf open, you will see a column called "chroot" with a bunch of y or n below it. [04:24] ScottK: thanks for your help too. Should I try to follow the official server doc at this point before doing anything else? [04:24] If you prefer. [04:25] Do you believe it'll work? [04:25] But if you do need to unchroot, just change all the y to n in that column and restart postfix. [04:25] tritium: Yes. I don't use that exact config, so I can't say for sure. [04:25] Okay, thank you very much! :) [04:26] ScottK: do you know when the 7.10 docs will be on the help.ubuntu.com site? [04:26] * tritium 's first time trying to install a mail server [04:27] I figured they'd be there by now. [04:27] No I don't, but for Postfix it should be the same for 7.04/7.10 [04:27] Glad to hear that. ^^^ [04:27] How can I undo the dpkg-statoverride command I ran? [04:27] ya, the 7.10 has a few more details though [04:28] tritium: if you're running 7.10 on a desktop the newest Postfix guide is in the help... fyi [04:28] sommer: newest ubuntu server postfix guide? [04:29] i.e., same help as what the server guide will give? [04:29] ya, click on help -> advanced topics -> installling server applications -> postfix [04:29] Thanks, sommer [04:29] dendrobates: Did you unsubscribe the person that started the 'interesting' ML thread? [04:29] tritium: yep... I've had success with it. [04:30] good deal [04:32] sommer: I think the official docs no longer suggest removing the chroot. [04:32] sommer: If they do, I think it's a doc bug (we can work with lamont to get it right). [04:32] sommer: I don't find it in yelp [04:33] Sorry, I'm a liar. [04:33] tritium: it's a little buried. [04:33] ;) [04:33] ScottK: I thought the mailing list was open, just the team was approval-only. wish those were linked better - I hear launchpad has some plans to support mailing lists better [04:34] Step 4 is to turn off the chroot operation for SMTP server. [04:34] ScottK: under the SMTP Auth section it has remove chroot [04:34] ya, what tritium said... heh [04:35] I guess the question is, is it better to have postfix in a chroot or not? [04:35] ScottK: not yet, I want to give him the opportunity to repent. [04:35] Am I able to undo that dpkg-statoverride command? [04:36] tritium: I'm not sure you need to. [04:37] sommer: okay, but that command is not part of this set of docs [04:37] tritium: ya the wiki needs updated [04:37] So, since it's not necessary, I'd prefer to undo it. [04:37] * tritium runs man dpkg-statoverride [04:39] dendrobates: OK. Your list. [04:40] ScottK: He will be banned tomorrow, when I have more rest, and am less angry. [04:40] sommer: Lamont and Weistse disagree on this. Lamont views chroot as a standard security tool that almost everyone should use. Weistse Venema views it as an advanced configuration option that only experienced admins who need it should use. [04:40] dendrobates: That's quite reasonable. [04:40] * nealmcb nods [04:40] sommer: Since we use lamont's Postfix packages, we should try and use them the way he designed them. [04:41] ScottK: nice "other subject" :-) [04:41] nealmcb: Thanks. [04:41] ScootK: gotcha... I'll add the postfix guide to the list. [04:41] sommer: I don't know about using saslauthd with chroot. I use sasldb and I have to remember to copy one file into the chroot after I add/change/remove a user. [04:42] ScottK: I don't have that much experiece with sasl. [04:43] seems like copying file for every user change could be a pain though [04:43] Actually we should be moving people to dovecot and away from cyrus for SASL anyway. [04:43] sommer: You can script it. [04:43] heh... true that [04:44] ScottK: can't you use SASL for a plethora of other services though [04:44] Sure. [04:45] But in Main we primarily support Dovecot for a mail delivery agent, so it makes sense (to me anyway) to use it for SASL too (Postfix supports that since 2.3) and move towards deprecating Cyrus SASL. [04:46] In fact, now that I think of it, I wonder if getting Cyrus SASL demoted to Universe is doable in Hardy. I think all the other bits have been demoted already. [04:46] interesting mail on the -server list [04:47] That's one word for it. [04:47] a nice reply from dendrobates :) [04:48] ScottK: slight correction. Wietse views the chroot as something that causes lots of questions, and he doesn't want them from newbies. [04:49] lamont: Thanks. [04:50] lamont: Any thoughts on Dovecot versus Cyrus for SASL with Postfix? [04:50] uh... I think I'll cook dinner before the munchkins revolt. give me about 15 minutes [04:50] and no, not dodging the question. bbiab [04:51] lamont: I'll probably have gone to bed by then, but sommer please listen to what lamont has to say for getting the docs fixed up. [04:52] ScottK: sure thanks for your input [04:52] hey guys [04:52] waiting for stove to heat. [04:52] so. [04:53] I know this should be a simple enough answer but I need to ask anyways, I need to setup an ftp server where when I upload, rename or delete, these actions are replicates to two other ftp servers, any suggestions? [04:53] jetole: sftp: https://help.ubuntu.com/7.04/server/C/ftp-server.html [04:53] I expect that either works. the biggest issue is likely to be transition [04:54] ScottK: I'm almost certainly behind you in understanding the dovecot issues. [04:54] sommer: what does that have to do with what I asked? [04:54] * ScottK really didn't want to hear that. [04:54] actually, is sommer a bot? [04:54] jetole: not that I know of [04:55] so my main concern would be that (1) I don't want to fork postfix, so (a) cyrus needs to still work (at least in debian), and (b) I'd be happy to make it so that dovecot works too... [04:55] jetole: didn't you ask for instructions on setting up ftp? [04:55] jetole: rsync in a cronjob? [04:55] I asked for instructions on setting up an ftp load balancing type system [04:55] lamont, rsync can handle ftp? [04:56] lamont: Agreed. In Ubuntu the idea would be to drop Cyrus to Universe and have Dovecot supported/documented. [04:56] jetole: ah... apologies I misread [04:56] ok, no problem but because it seemed like a generic answer I thought you might be bot, my mistake [04:56] lamont: I probably need to switch my development server first and see where the "fun" points are. [04:56] ;) [04:56] ScottK, lamont: I think I'm confused when you say Cyrus do mean cyrus-imapd? [04:56] First I need my production servers upgraded as I use the development box. [04:57] sommer: Cyrus has lots of parts. There is Cyrus SASL (still in Main) that we mostly use for SASL. There are also other bits I"ve never used. [04:58] * ScottK really needs to head to bed. Good night all. [04:58] ScottK: thanks... have a good one [04:58] lamont: I don't think it can do ftp from what I just rtfm and one of the servers in the treo is a *grunts* windows machine [04:58] Good night, ScottK. Thanks again for the help. [04:59] huh, cool, irssi just made text in *bold* between * and * [04:59] yes, it does that [04:59] and it can _underline_ [04:59] new to me [05:00] I only started using irssi again back in feb, before that I have been using xchat since 2k and I used irssi back before that but it's been a while [05:06] huh, I just upgraded the ram in my desktop tonight from 2g to 4g... kinda depressing, I mean the ram guage on the taskbar just looks so... well calm [05:06] 4GB just isn't enough [05:06] well it is for now but I havn't really been busy tonight [05:07] I think it will be enough for me for a year or two [05:08] 4gb, geez [05:08] I survive with 1/2 gig [05:08] on your desktop? [05:08] Burgundavia: a day or so ago, my system was seriously thrashing for > 30 minutes due to using up all the RAM [05:08] must not be a multi tasker [05:09] my laptop, a 1.5 ghz celeron M [05:09] want to buy me a new laptop? [05:09] sure, once I'm rich & can afford to replace mine [05:09] are you going to UDS? [05:10] mine is a dual core AMD @ 1.6 w/ 2G or ram and 160GB HDD [05:10] ... sorry, you brought it up and I had to gloat [05:10] I hardly ever use mine [05:11] ajmitch, jetole funny that you're talking about irssi - I just started looking more seriously at it - seems very handy to use in in a screen when on the road [05:13] nealmcb_: yeah I know, I love that feature becuase on my desktop I have it run in a detached screen at boot with a unique name to the screen and then on my laptop I have a shell script that runs ssh with the screen and name command so I can always connect to the same session [05:13] nealmcb_: that's mostly how I use it [05:13] jetole: yeah, that's how I use mutt [05:13] only downside is getting notifications in your gui if someone triggers a filter or pm's you [05:13] jetole: well, clearly then you need to come to UDS and we can trade [05:13] nealmcb_: I run a imap server [05:14] whatis: UDS? [05:14] is there a good screen tutorial written by real people for real people? [05:14] and no [05:14] ie: not Stallman or GNU [05:14] I think it's called the man page [05:14] Burgundavia: this tired old 2001 laptop has 256 MB. But my system76 darter will arrive tomorrow :-) [05:14] jetole: I mean, not written by Stallman or GNU [05:14] thats written for linux people who are real people [05:15] and I will be at UDS..... [05:15] Burgundavia: read the man page for bash [05:15] * ajmitch is glad that a few people will be there to contribute at UDS [05:16] what is UDS? [05:16] ubuntu developers summit [05:16] ah [05:16] in boston next week [05:17] hmmm, well I have a few things I would like to work on but frankly I just don't have the energy, when I get home from programming all day long.. well, I don't know, sometimes I want to but starting a project just doesn't seem right for me now [05:17] nealmcb_: do you have a few server specs ready to discuss? [05:18] I think I am gonna install xmpp at work though [05:19] there is some crap ass "effusia" server, some windows server based proprietary chat system that you have to pay per user to work and it doesn't even do that [05:20] ajmitch: I was just thinking a bit about some sort of central password/keystore proposal, having read the pidgin discussion of why they store passwords in the clear, and inspired by the infocard stuff also. but it seems like a stretch and I haven't looked at keystores in a long time [05:21] and I'm still wanting someone to run an AD test server so we can test ubuntu against it [05:21] good luck there [05:22] but I haven't even gotten my silly ubotu factoids done - keep getting distracted.... [05:22] nealmcb_: what about AD over xen/vmware? [05:22] you've achieved more than I have then :) [05:23] * ajmitch did have a very basic AD setup in vmware at one point [05:23] however it's something that should be done by someone with proper AD experience, to simulate a real network [05:24] jetole: I'm cheap - don't want to pay for AD or admin it - just want to bang on one from ubuntu. I don't have any windows boxes at all [05:24] nealmcb_: I used evaluation copies of windows 2003 server [05:24] legally downloaded for free from MS [05:24] huh - for some reason in irssi, the "***ajmitch" is completely invisible, like white on white [05:25] * ajmitch makes sure to use a black background, as irssi is highlighting in bright yellow [05:25] nealmcb_: I am cheap too, and I may or may not have, hypothetically speaking, have paid for windows server cd at home [05:26] I like white, and can see the bright yellow. [05:26] and with xen/vmware you don't need to run windows [05:26] you run windows in a window inside ubuntu [05:26] how many levels could you recurse? [05:26] Burgundavia: about 1, with pain [05:27] ajmitch: I am using irssi and I see * ajmitch did have a very... etc [05:27] * ajmitch tried to do some xen testing within vmware, it was painful [05:28] jetole: sure - that would be the way to do it. someone should just donate a windows server cd to someone willing to host it and keep restarting it when it gets pwn's [05:28] * jetole uses irssi on white on black terminal with default theme and transparent gnome-terminal background [05:28] nealmcb_: I would but I have no idea where my CD is and have a pile of other shit on a todo list to setup [05:29] * nealmcb_ switches to gaim to read who just wrote that.... [05:29] ! jetole ! [05:29] Sorry, I don't know anything about jetole ! - try searching on http://ubotu.ubuntu-nl.org/factoids.cgi [05:29] atm it is ftp replication and I think I found a solution [05:29] still reading the article [05:30] ahh - highlighting the text shows the hidden text [05:30] it is highlighting in white [05:30] how come I have never had that issue with irssi [05:30] even with different themes [05:32] I'm using the dyndns feature on my ADSL modem. I port-forward ssh, http, imaps through to my server at 192.168.1.100. Why doesn't my laptop resolve the dyndns fqdn to my server? I can only ssh to it using the local IP address. [05:33] because the adsl modem won't do the port forwarding from both directions [05:35] ajmitch: so, imap doesn't work either, and I'm trying to setup my laptop to reach the mail server from both home, and when on travel [05:35] at home, I could use the local IP, but not on travel [05:35] holy shit, someone try typing => apt-get install fam <= AND DO NOT INSTALL IT OR USE -Y, do this from a desktop machine though [05:36] tritium: bind with multiple views? :) [05:36] or use iptables on the mail server to DTRT [05:36] I like zoneedit, I can do updates to it via wget which is stored in a crontab [05:36] heh, you *lost* me ajmitch :) [05:37] * ajmitch just has a domain name for home [05:37] ajmitch: so, do you have a static IP? [05:37] yes [05:37] $$$$ [05:37] though my DSL provider conveniently supplied a dyndns service prior to that [05:37] which was updated automatically [05:38] nice, for my home machine static ip is only available through ADSL which I don't want [05:38] ajmitch: so, since I totally don't understand binding multiple views blah blah, I could just use local IP at home, and fqdn on travel, yes? [05:39] yes [05:39] bellsouth/att will wanna charge me a shitload for a phone line I wont use, 911 services, telecom charges etc etc etc and then limit me to 3/372 if I pay extra, comcast craps on torrents from what I have read but I have an 8/768 for a reasonable price [05:40] **3/384 [05:40] jetole: as I read your request, you want to have uploads replicated. my solution would require that there be one master which then mirrored to two other machines - probably not what you wanted. [05:40] Thanks, ajmitch! [05:40] not like I helped much :) [05:40] bbiab [05:40] the real issue is that you need to coordinate so that you know how to merge a diff [05:40] lamont: that is exactly what I want [05:41] then you want either rsync or ftpmirror [05:41] ftpmirror? that sounds good since you missed the part about one of the hosts being a windows machine [05:41] jetole: that's a correctable condition [05:42] not by me it isn't [05:42] hrm.. too lazy to go read the mailing list to find the answer.,.. can we upload to hardy yet? [05:42] I don't run that office and its in another state [05:42] and I am the relatively new guy on the block at this company [05:42] jetole: that does make it more complicated to fix, yes. [05:42] right, well I just downloaded ftpmirror to my home machine so I can rtfm [05:43] I need a shirt that says that [05:43] especially for my office [05:43] mirror is the more traditional package, fwiw. although that's perl [05:44] hrm, bad authentication response from the postfix server I just installed according the the instructions in yelp [05:44] s/the the/to the [05:46] last thing I want to ask before I go to bed [05:47] is there a way to monitor changes to any file in a directory? [05:47] jetole: no. I don' t have a shirt I can sell you [05:47] :-) [05:47] inotify would do that, I expect. [05:47] damn, I was gonna ask you that too [05:47] ok, cool [05:47] well I have more stuff to read now [05:47] as in the system call, not the package. [05:48] so apt-cache search inotify to see what packages might actually provide an app for doing that [05:48] likewise, nagios is good for monitoring _stuff_. [05:48] (where "stuff" could conceivably include file chages) [05:48] changes, even [05:48] yes I like nagios but I think it may not apply to what I need [05:49] do I need to change mechanism to shadow to authenticate with postfix server using system user/password? [05:49] It's set at pam, and is currently failing. [05:49] tritium: please don't confuse me with someone who actually knows how to use sasl... :-) [05:50] lamont: isn't this your package? ;) [05:50] yeah, I am with lemont on that one, I use postfix but not sasl [05:50] I made huge strides forward a few months back and actually configured TLS on my machines. [05:50] I know dovecot authenticates properly via pam [05:50] tritium: my package, not my lib. :-) [05:50] alright, I am off to bed [05:50] cheers [05:50] night, jetole [05:51] lamont: so you don't use sasl personally? [05:51] there's a reason that debian bug 330885 has been open since 2.2.4 [05:51] Debian bug 330885 in postfix "postfix: default configuration should enable use of TLS for stmp as default" [Wishlist,Open] http://bugs.debian.org/330885 [05:51] interesting... [05:51] tritium: haven't ever see a need to do so [05:51] well, I understand that there are situations that it very nicely addresses. [05:52] and none of those have yet matched my personal situation sufficiently to cause me to actually figure it out yet. [05:52] thanks, lamont. I only chose to use it since it's in the ubuntu server docs ;) [05:53] someone else wrote those docs... SASL is on my list of things to understand, just nowhere near the cutline yet [05:54] Well, I'll keep researching. Thanks! [06:04] dendrobates: there is a little intro to the screen program as part of http://f0rked.com/articles/irssi [06:05] screen is great program [06:06] all my ubuntu machines have it [06:06] oops - that bit on screen was for Burgundavia ....^ [06:10] thanks nealmcb === zobbo_ is now known as zobbo [07:24] hi, im trying to install a VPN on my ubuntu server [08:06] moin [08:08] <_ruben> g'day === stork_ is now known as stork === lionel_ is now known as lionel === flokuehn_ is now known as flokuehn === ajmitch_ is now known as ajmitch === Drazha[away] is now known as Drazha [11:49] hey folks. ive got a server that has been pre-configured by my host with 606, but I want to do a clean install so that I can set my raid up correctly. When I use the live cd, it doesnt detect my network. Is there someway I can "copy" the configuration thats already live on the system and copy it back over afterwards? Its currently a minimal installation - not even apache installed [11:50] is it feesable that I tar up everything in / and untar it back when the new server is installed? [11:51] <_ruben> tar/untar an old install over a new one pretty much erase the new install and restores the old install :-) [11:52] yes but it wont restore my partition setup - which is what i want to change. the host currently has a 230gig partiiton for home, and virtually nothing anywhere else - so I want to make a small /boot and have the rest as the install [11:53] <_ruben> and "doesnt detect my network" is a bit vague, and most network configs arent all that hard to do manually (or you could backup /etc/network/interfaces, but might not be enough) [11:54] <_ruben> oh ok, for some reason i thought you wanted to perform an upgrade as well in the process [11:54] well, the install cd says it cannot find my network card, but the preinstall lists it as some " Unknown device 8167 (rev 10)" [11:54] so they must have installed that manually (i guess) [11:54] <_ruben> ah [11:54] <_ruben> is it hard or software raid? [11:55] software [11:55] and the partitions need to be resized [11:55] hmmm i wonder if i could copy everything in / to /home and then remount /home to / [11:55] <_ruben> one (nasty) solution would be to break the mirror, repartion one drive, create raid on new drive, copy data, repartion 2nd drive, have raid rebuild itself [11:56] <_ruben> in theory that could work as well i think, would have to play with the bootloader in either scenario [11:57] is there no easy way of finding out what nic driver is being used, and supply that once the new install has been completed? [11:57] of course then i'd have to setup the net manually - something i want the installer to do ideally [11:58] <_ruben> lsmod might list an 'obvious' candidate [11:58] MikeDX, can you switch to Alt F2 during the install and do dmesg ? [11:58] <_ruben> or check the output of dmesg [11:58] <_ruben> heh [12:01] yeah let me just check [12:01] i'll have to run the installer [12:01] might take a while as its a remote control thing where i have to upload the cd image on the fly via a samba share [12:02] <_ruben> you should check it on the pre-inst system [12:02] <_ruben> that's the one that does load the driver [12:03] ok what am i looking for in dmesg on the working system [12:03] [17179574.288000] eth0: Identified chip type is 'RTL8169SC/8110SC'. [12:03] [17179574.288000] eth0: r10001.02, the Linux device driver for Realtek Ethernet Controllers at 0x4000, 00:30:05:ec:33:18, IRQ 193 [12:03] [17179574.288000] eth0: Auto-negotiation Enabled. [12:04] thats the rtl8169 driver [12:05] ok, but the install cd doesnt pick it up [12:06] is there a workaround to supply a driver at install time? [12:07] hrmm the install cd should pick it up [12:08] its 606.1 [12:08] I'm kinda stuck :( [12:09] <_ruben> the driver might not be present in a vanilla install .. it could have been inserted by the vendor [12:09] <_ruben> you could try to run gutsy's installer, newer kernel -> might detect the nic properly .. then again, since its 6.06 on it, i guess you'd want a LTS version working [12:09] the other server we have with them (that we had to do the same process with), everything was picked up straight away. this one has a different nic [12:10] well, thats the thing, i cant even try a newer one since we do want the LTS [12:11] <_ruben> wait 6 months ;) .. or do a data migration instead .. which is nasty thing to do remotely though [12:11] not going to happen really is it [12:11] whats gutsys support window? is it 2009? [12:11] <_ruben> now +18 months i think [12:12] <_ruben> with a new lts coming out in 6months [12:15] should i just tar up root then, repartition, reinstall and then untar again? [12:16] <_ruben> that's one way of doing it. breaking the mirror, etc, is another. there's probably other ways as well [12:17] <_ruben> then again, having a 200G / doesnt quality as A Good Thing To Do, imho ;) [12:17] no, im just doing what ive been told to do :) [12:17] which is to not have a 250gb /home [12:17] <_ruben> then mount it under /data/ instead ;) [12:18] <_ruben> or wherever you do need that ammount of space ;) [12:19] i'll mount it to /var/www ;) [12:21] <_ruben> for a webserver that should be a decent choice :) [12:23] how can i check the raid is actually working on this machine? is there a command to show the raid setup? [12:25] using softwareraid? cat /proc/mdstat [12:28] doesnt show anything in there :| [12:28] just "unused devices: none" [12:30] are you using hardwareraid? [13:11] hi all [13:11] can i use dapper on a dual quadcore xeon with 8gb ram? [13:13] uh, i suppose yes [13:13] though amd64 may be better for large amounts of ram [13:14] ok [13:29] to be honest I am not sure if it is hardware or software raid anymore :( [13:38] I just installed my first Gutsy server. One thing is wrong. vga=791 on the kernel options line in grub's configuration produces a blank screen. The video mode changes, the monitor says it does, but no text appears on the screen. [13:38] Any clues? [13:39] If it matters the server is a Dell Poweredge 1950. [13:41] Looks like it's a known bug in Gutsy. https://bugs.launchpad.net/ubuntu/+source/linux-source-2.6.22/+bug/135613 [13:42] Launchpad bug 135613 in linux-source-2.6.22 "Framebuffer consoles no not work in gutsy (dup-of: 129910)" [Undecided,Confirmed] [13:42] Launchpad bug 129910 in initramfs-tools "tty[1-6] are active but display nothing in Gutsy" [Critical,Triaged] [13:42] eill try that solution first. === zul_ is now known as zul [13:52] for those following my plight, i'm going to remount the large /home to /data as suggested.... wish me luck === dantalizing_ is now known as dantalizing [14:26] apache2.conf and no httpd.conf, is this only in ubuntu 6 server? [14:27] * Carry learns ubuntu-lamp... [14:27] httpd.conf is near empty on feisty installation with apache2 [14:28] avatar_: yes, ubuntu-way? or new apache-way? [14:28] hmm, might be debian/ubuntu way. [14:28] in ubuntu 6 server it is in apache2.conf [14:29] i'm only running debian/ubuntu servers with recent apache [14:29] avatar_: hmm, should i install all from source to get default? [14:29] and try to forget about slackware ... [14:29] Carry: do you need httpd.conf? [14:29] avatar_: than you've got httpd.conf, no apache2.conf? [14:30] avatar_: i have a book that says httpd.conf... [14:30] wonder if book is useless.. [14:30] slackware: hard? [14:30] perhaps that book is about apache1.3 ? [14:30] no, 2.0 ... [14:31] slackware has no decent packagemanagement [14:31] is Apache Server 2 Bible.. [14:31] so its hard to keep updated [14:31] tnx for warning :) [14:31] book = 2002, want to know if it's usefull... [14:32] books are outdated by the time they're in the bookshops :) [14:32] it kind of depends on who's done the installation of apache... i think wamp still uses httpd.conf ... most of the debian based distros use apache.conf ... i've not messed with any other distros in a while, last time i used mandrake (now mandriva) they used httpd.conf [14:33] pteague_work: tnx.. [14:33] when using ubuntu/debian i think its the best to keep it using the ubuntu way [14:33] so learn install from source.. [14:33] don't install from source [14:34] & i haven't installed apache from source off httpd.apache.org in a while either [14:34] package. [14:34] why bothter with security updates if someone already did that for you [14:34] realy, you don't want to go there [14:35] hmm, so debian is httpd.conf, ubuntu(my lamp) is apache2.conf [14:35] if you're just setting up apache as a dev machine & you want the experience install from source, otherwise it's not worth it unless you need a highly specialized install of apache [14:35] mean: debian also apache2.conf [14:35] last time i installed debian it was apache.conf [14:36] pteague_work: apache2.conf, with 2? [15:03] pteague_work: http://wiki.apache.org/httpd/DistrosDefaultLayout#head-b5762a3e9764f34f7587e35f4db9ff35d508ced1 [15:17] a2ensite a2enmod are debian/ubuntu scripts? not apache? [15:19] Carry: I believe that's correct [15:20] they create symlinks between sites-available and sites-enabled [15:20] ah.. [15:20] tnx [15:21] I think they're pretty handy, because they allow you to configure a site, but not enable it right away. [15:22] but I've also configured sites and forgot to enable them :-) === Drazha is now known as Drazha[away] [15:28] are these tools in the default installation of ubuntu-lamp? [15:31] Carry: apache2.2-common [15:31] ah.. [15:31] should get installed when installing apache though [15:32] * Carry has to check again later.... [15:36] soren: excellent un-bleeping reply :-) CoC in action! [15:37] nealmcb: :) I wasn't awake enough to be mad yet. [15:38] ScottK: the Thing is, that on the page, you recommended reading, you assume, that the postfix server serves "real" accounts. It is correct to strip the realm then. In my case I was using postfix-mysql and the username was "%u@%r" and sasl stripped the realm [15:39] and i needed it [15:40] so on http://postfix.wiki.xs4all.nl/index.php?title=Virtual_Users_and_Domains_with_Courier-IMAP_and_MySQL#SASL2_Install i found a little note which i must have overread while reading the manpage to saslauthd and found out, that appending "-r" did the trick for me [15:41] is that a bug? I dont think so, because the howto was written for a different audience or setup than mine [15:41] would it make sense to write a ubuntu postfix mysql howto? Answer -> hell yeah [15:41] * milestone hopes that there is no such howto :-) [15:42] milestone: Part of the reason I asked you over here is that we are doing a server documentation review [15:42] Not an ubuntu specific one, perhaps, but there is one. [15:42] ahh i see [15:42] i gained so much knowledge now [15:42] soren: I was just trying to help milestone on #postfix with a config issue. [15:43] I was hoping he'd be willing to help us document his situation so others might benifit [15:43] I see. That would rock! [15:43] would you guys like a postfix+mysql+courier ((imap|ssl)(pop3|ssl)) + sasl smtp auth howto [15:43] from the ground up? [15:43] I think there may be pieces of that on the wiki [15:43] * ScottK looks [15:45] I've used http://www.marlow.dk/site.php/tech/postfix before [15:45] This https://help.ubuntu.com/community/PostfixCompleteVirtualMailSystemHowto exists, but is by definition wrong since it mentions webmin [15:45] Erk... And it's even on h.u.c :( [15:45] soren: Yeah. Someone needs to go help "revise" that one. [15:46] milestone: Dovecot is the preferred MDA here, but I think that would be very useful even with Courier. [15:46] ok [15:46] so should i modify that page, or create a complete new one? [15:47] milestone: I'd create a new one. Otherwise you'll end up in a wiki war with whoever has been maintaining that one. [15:47] * ScottK thinks soren should go deal with it. [15:47] dovecot is really preferred (it's in main). [15:47] ....but dovecot is really the easiest part of that puzzl.e [15:47] soren ok [15:48] ScottK: Err? Deal with what? Having that page removed? [15:48] i will create it with courier, and once finished, you can decide what to do with it, ok? [15:48] soren: I was thinking more like educate the person that wrote it and get the webmin stuff removed. [15:48] soren: If that doesn't work, yeah, then have it deleted. [15:49] milestone: Sounds great. [15:49] milestone: You can always ask Ubuntu server questions here too. [15:49] ok [15:49] and thank you guys [15:49] i think it will take me until monday, then i will be back and tell you guys [15:51] milestone: Great. [15:51] ScottK: Hm... Yeah.. I have no clue who he is, though. https://wiki.ubuntu.com/ChinthakaDeshapriya === Drazha[away] is now known as Drazha [15:52] soren: Me neither. Have fun. [15:52] :p [15:52] ok got to go now, see you guys monday [15:53] See you. [15:53] soren: How was that for recruiting? Just started hanging out on #postfix. [15:54] ScottK: I've been hanging out in #dovecot for ages with no such luck. [15:55] I did have highlighting set on the word postfix. Now that I'm on that channel, I've turned it off ;-) [15:55] * ScottK probaby had beginner's luck. [15:55] ScottK: ah. yeah. that'd be a reason for me to not go there... [15:56] Heh. I've just tried it for the first time. I'm curious to see what the channel is like. [15:58] and yes, I highlight on postfix. tried highlighting on 'bind' once. bad plan [16:01] lamont: Yeah, I can imagine. That would hilight all sorts of questions about bind! [16:02] Oh, wait.. [16:03] soren: it's more the non-bind comments about bind(2) type stuff that I found to be the issue... [16:03] lamont: I really can't think of any other words that contain "bind". [16:03] lamont: Oh, right. [16:06] so not only did I get highlighted on ISC/bind stupid questions, I got highlighted by questions from people just learning about sockets. [16:36] anybody here using canonical landscape? [16:38] anyone using vmware-server on gutsy yet? [16:40] ScatterBrain: I am [16:41] Did you have trouble installing it? [16:42] nijaba: Did you have any trouble installing it? [16:42] nijaba: I can't seem to get the blasted thing to accept the serial numbers that VMware gave me. [16:42] ScatterBrain: I had to dig a bit in the forums... [16:43] ScatterBrain: there is a fix for that... let me check === Drazha is now known as Drazha[away] [16:46] ScatterBrain: http://blogs.techrepublic.com.com/howdoi/?p=152 point to a patch for this [16:52] nijaba: Did you get this?: http://pastebin.com/d770d8d61 [16:53] ScatterBrain: nope [16:53] nijaba: Are you running the 64 bit version of Gutsy? [16:53] yes [16:54] nijaba: that's the difference then. I'm running the 32 bit version. [16:54] possibly, but surprising [16:54] nijaba: I found a post that says to install ia32-libs, but I can't seem to find that. [16:55] apt-get ia32 ? [16:55] apt-get install ia32 ? [16:55] Couldn't find package ia32-libs [16:55] ia32-libs - is in universe [16:55] lamont: I've got that open. [16:55] and exists on amd64 [16:55] * ScatterBrain goes to double-check. [16:55] if you're running 32-bit, then you already have those libs... [16:56] (the package exists to deliver the 32-bit libs on 64-bit) [16:56] lamont: that's what I thought. But why do I still get the error that the 32-bit libs cuure? [16:56] *supposedly* cure. [16:56] nfc [16:57] vmware works for me. then again,I'm running -workstation [16:57] 5.5.5 + patches for 2.6.22 [16:58] df: `/': Function not implemented [16:58] mdadm: cannot open : No such file or directory [16:58] FTW! [16:58] * ScatterBrain goes to lunch to ponder the problem. [16:59] thanks for the help - maybe it'll come to me on a full stomach. [17:48] what's the best way to automatically install updates? [17:49] create a daily crontab with an appropriate apt-get line? or is there some package out there that does a better job? [17:55] imo automatic updates to a server is not a good idea - unless you can tolerate downtime if something goes wrong [17:57] well is there a way just to install security updates? [17:58] again automatic updates may not be the best way to handle this, you need to evaluate all possible changes to critical systems on an individual basis [17:58] and, I may be wrong, but I don't believe that fixes are tagged in any way as security etc. [17:58] this is true, but it's not really a critical system [17:59] tideline: well, stuff that comes from the -security pocket are security updates. You could disable the -updates pocket if you really only wanted security updates. [17:59] keescook, good point [18:01] keescook, would that be changed in the /etc/apt/apt.conf.d/50unattended-upgrades file? [18:02] I see, n mine at least Unattended-upgrades::Allowed-Origins with Ubuntu feisty-security in it [18:02] same here [18:03] im wondering about /etc/cron.daily/apt [18:03] tideline: honestly, I've never played with the unattented upgrades. :P [18:05] eval $(apt-config shell UnattendedUpgradeInterval APT::Periodic::Unattended-Upgrade) [18:06] perhaps setting the APT::Periodic::Unattended-Upgrade to something non-zero? [18:06] cat /usr/share/doc/unattended-upgrades/README [18:16] mindframe, also check https://wiki.ubuntu.com/AutomaticUpdates [19:16] why does iptables -L take so long :\ [20:18] I linked a shell script into /etc/cron.daily but it doesn't appear to be running. Is there something else I need to do to get it to run [20:18] ? [20:19] donspaulding: just a thought, but are the permissions correct on the script? [20:19] you mean +x ?? [20:19] donspaulding: yep, for owner group and world [20:19] lemme check [20:21] yeah, it's 755 [20:22] donspaulding: do you see any errors pertaining to your script if you do grep -i cron /var/log/syslog ? [20:24] yeah, Exec format error [20:24] exited with return code 1 [20:24] unless that rings any bells I'll go off to Google. [20:24] thanks for the tip! [20:25] not with me... probably something inside your script [20:25] donspaulding: np [20:27] it looks like run-parts needs a Shabang in it, according to the great Google of Oz [20:27] every few days is get an error like this: cannot open bayes databases /var/lib/amavis/.spamassassin/bayes_* R/O: tie failed: Permission denied. Any hits how to prevent this? [20:27] make that run-parts requires my script to have the shabang [20:28] donspaulding: heh sounds about right [20:28] sommer: it's always the little things. oh well, explicit is better than implicit. [20:39] varek: probably because it tries to resolve dns. try iptables -nL. [20:39] fantastic [20:39] thanks mathiaz [20:39] iptables > scriptkiddies with botnets [20:40] hey if i have a list of client that were being used to DoS attack me is there anywhere i can report them to ? [20:42] varek: you could try to report the problem to their ISP. [20:48] too much effort [20:49] there's like 15 clients [20:49] and isps don't care about this stuff [21:05] varek: Then no, not really. [21:06] varek: you can complain to your own ISP, they can filter those IP's out on their edge [21:16] iptraffic filters for me pretty well [21:17] the attack is an attempted syn flood - but i have tcp_syn_cookies enabled, so it's doing nothing except open+close ports === mathiaz is now known as mathiaz_ === mathiaz_ is now known as mathiaz [23:42] So if I understand correctly you can't use iptable commands in firehol? [23:49] Hello. [23:50] I am having issues with apache2 and mod_rewrite. I've changed allowoverride to all and mod_rewrite is enabled. [23:50] Yet it acts as though mod_rewrite is not even enabled. [23:51] PyroSama: did you restart apache2 ? [23:52] Yep. [23:52] I've been at this for 2 days now. [23:53] Attempted to place ifmodule in the .htaccess, apache2.conf, and even available-sites/default [23:54] Tried placing rewriteengine on in all three aswell and no combination of these seem to have any effect.