/srv/irclogs.ubuntu.com/2007/11/07/#ubuntu-server.txt

=== chuck__ is now known as zul
=== sahafeez_ is now known as sahafeez
hatteri am having problems with slow samba responsiveness on two new 7.10 boxes,  both in different locations, when on debian they were fast, i cant see any differences in the smb.conf, anyone got any clues ?00:42
fujinso, I'm working on a ldap central authentication thingy, have installed sudo, but having this issue: sudo: uid 2000 does not exist in the passwd file00:47
fujinobviously the user is provided by sudo00:47
fujinand the uid is not in the passwd file at all00:47
=== tideline_ is now known as tideline
sommerfujin: you mith gry this: http://lists.freebsd.org/pipermail/freebsd-questions/2006-July/125900.html01:44
sommer*try01:44
ScottKsommer: Got a sec for Postfix docs?02:11
sommerScottK: sure02:19
ScottKOK.02:19
ScottKThe troubleshooting section is um, basic.02:19
sommertoo basic?02:19
ScottKIt's not really troublshooting, it's getting postfix out of the chroot.  That's often the first step, but it's not actually troublshooting.02:20
sommertrue... but I wasn't sure what other section to fit it in02:20
sommerwhat would you go with?02:21
ScottKsommer: Do you use Postfix?02:21
sommerScottK: I'm getting ready to implement it as a virus/spam scanner02:22
ScottKOK.02:22
ScottKWhat are you going to use?02:22
sommerAmavisd-new... I think you recommended it a couple of months ago02:23
sommeror I asked you what you recommend anyway02:23
sommercurrenlty I'm using MailScanner... Amavisd-new is quite better so far02:23
ScottKGah.  Stop.02:23
sommerMailScanner with sendmail I should say02:23
ScottKMailScanner on Postfix is evil.02:24
ScottKAh.02:24
ScottKDifferent story02:24
sommerI think the goal of the System Docs is to be as concise as possible without getting into too much detail...02:25
ScottKWhat you should do, I think, is write a more detailed doc as you go.02:25
sommeris there more to the Troubleshooting section I should add?02:25
ScottKYes, but it's hard to explain simply.02:26
sommerI submitted a pretty detailed patch to the PHP section a while back and ended up condensing the whole thing to one sentence02:26
sommerScottK: I totally agree... I'd like to see more detail in a lot of the chapters02:26
ScottKMaybe we need a meta discussion on server docs before we write stuff then.02:26
ScottKPersonally, I think there ought to be enough to get things running, troubleshoot basic problems, and ask intelligent questions when you get stuck.02:27
sommerya currently there's a lot of discussion going on about the Server Guide... not sure if you're on the Doc ML02:27
ScottKI'm not.  I'm on the server ML.02:27
sommerI think some threads have been on the server ML started by jjesse.02:28
ScottKYes, I've read those.02:28
ScottKThis Postfix server you're setting up, is it to both send and receive mail?02:29
sommeryep, then relays to the mail store server02:29
sommerin the past the it was all done on the same server, and there were times when MailScanner/spamassassin would kill access02:30
sahafeezokay, dumb question - how do i stop things from starting on boot02:30
sahafeezlike apache02:30
sommersahafeez: update-rc.d -f apache remove02:30
sahafeezokay, and same sorta thing to put it back02:30
sahafeezwhy every version of linux does it differently...02:31
sommersahafeez: update-rc.d apache defaults02:31
sahafeezcool thanks. i will look at the man for that - or the docs.02:31
sommersahafeez: np... the man page is probably your best bet02:32
sommerScottK: what else do you think we should add to the Postfix chapter?02:33
ScottKsommer: What I was thinking (if you'd be willing) would be to set up a complete Gutsy version of the nominal mail server config we will recommend for Hardy and then remove the MDA.02:33
sommerScottK: sure I'm willing... I'm fuzzy about what you mean by "nominal mail server" though02:34
sommerthere's just so many ways to setup a mail server... heh02:34
ScottKI think it's Postfix + Dovecot SASL, Dovecot for MDA, Amavisd-new + SpamAssassin/Clamav02:35
ScottKSo for your config you'd need all that except the Dovecot MDA02:35
ScottKRight, so we want to get complete instructions on ONE way to do it that works.  People are free to do others.02:35
jjesseevening02:36
ScottKEvening.02:36
sommerI'm with ya... I wrote up a Dovecot SASL guide a while back: https://help.ubuntu.com/community/PostfixDovecotSASL02:36
sommerjjesse: sup02:36
ScottKsommer: The reason I suggest this approach is the person who's new to it is the person that needs to do the docs.02:36
sommerScottK: totally02:36
jjessesommer: just packing for next business trip02:36
jjessewhats the topic?02:37
ScottKMail server docs02:37
sommerjjesse: if you're not aware ScottK is a Postfix guru02:37
ScottKsommer: You should also cover setting up TLS, including rolling your own certs.02:37
ScottKGuru is putting it to strongly.  I'm a moderately advanced user.02:37
sommersure... I believe that's already covered.02:37
sommerheh... more guru than me02:38
sommerself signed certs anyway02:38
ScottKThat's all you really need.02:38
jjesseScottK: wasn't aware of that02:38
ScottKjjesse: Which?02:38
jjesseyour a postfix guru :)02:38
sommerso I think the major section to add is Amavisd-new + SpamAssassin/Clamav02:39
sommerand Dovecot SASL... that also clears up the possible saslauthd chroot issue02:39
ScottKsommer: Yes.02:39
ScottKsommer: I'd also do a section on supporting E-mail authentication technologies (I'm thinking SPF and DKIM - I've done the SPF bit and made sure the DKIM milter is packaged well).02:40
sommerI was wondering for a program to use Cyrus SASL or Dovecot SASL it needs to link to the libraries during compile time doesn't it?02:40
ScottKPostfix should be configured to work with either.  If it isn't, that's a bug in the Debian package.  Upstream supports it.02:41
sommerScottK: Postfix is since Dapper at least02:41
ScottKOK.02:42
ScottKI've not tried Dovecot SASL yet, so I didn't know.02:42
sommerI don't think that many programs are capable of using Dovecot SASL02:42
sommerpostconf -a is the command I came accross02:43
ScottKSure enough.02:43
ScottKsommer: I think we should pick one SASL as the one we document.  If it's reasonable, I think it should be dovecot since that's the supported MDA.02:44
sommerScottK: I agree02:45
sommerI'll start reworking the Postfix section... maybe we add the SASL discussion to the next server team meeting agenda02:46
sommerget more opinions anyway02:46
ScottKWe discussed it a little at UDS.02:46
sommeroh ya... I was listening in.02:46
ScottKWe also discussed promoting amavisd-new to Main for Hardy.02:46
ScottKThat was me you heard whining about that then.02:46
ScottKNow you know what I sound like.02:47
sommerheh... that discussion was a little in and out I think... wasn't it toward the beginning of the weak?02:47
ScottKYes.  I was just there Mon/Tues.02:47
sommerthe sound got better around Wed02:47
ScottKFigures02:48
sommerheh... I'll start working on the Postfix section and add a "mail hardening" section02:48
ScottKOK.02:48
jjessesommer: two questions 1. Do you have the bzr branch downloaded 2. do you have commit rights?02:49
ScottKYou might look at the postfix mailing list before you post ... instructions for stuff to put into troubleshooting.02:49
sommerjjesse: yep I've downloaded, but I don't have commit rights02:49
jjessesommer: ok we can work on that, i can commit the diff02:49
sommerjjesse: cool02:49
jjessejjesse at ubuntu dot com02:50
sommerScottK: sure, is there any troubleshooting tips you use often?02:50
ScottKRead your logs and find the first sign of trouble, not the last is the first thing.02:51
ScottKParticularly mail.err and mail.warning.02:51
sommerheh... logs I'll definitely note that02:51
ScottKTake it out of the chroot is antoher good thing to do.02:51
ScottKsommer: Postfix is very meticulous about logging.  If it's not logged, you can be pretty sure it didn't happen.02:51
sommerjjesse: I submitted a patch with updates to the Mail chapter yesterday... if you want to review that02:52
ScottKWhere to go for help is another thing to include.02:52
sommerScottK: is there any special Ubuntu channels or ML for Postfix?02:53
ScottKHere and the server ML.02:53
sommerah, sure02:53
sommerwill include those, good pint02:53
sommer* point02:53
ScottKSince Wietse and Lamont have some agree to disagree points about how Postfix is packaged, it's important to come here for help first.02:54
sommerheh... it's pretty cool to have someone so involved with Postfix also involved with Ubuntu02:55
ScottKOne of the big points why Ubuntu is my distro is that Postfix is the MTA of choice.02:56
sommerI like it better than Sendmail daily!02:57
sommerScottK: I appreciate your input, stand by for updates.  I can probably have something worth more review by this weekend.02:59
sommerjjesse: I'll send you a diff as well03:00
ScottKIt'll grow on you even more.03:00
ScottKsommer: I strongly recommend "The Book of Postfix" is you don't have it.03:00
sommeryep, I think I've seen you recommend it before so I picked it up... the SMTP AUTH chapter really helped me understand how SASL fits into Postfix03:01
ScottKI was had a lot of trouble until I had that.03:02
ScottKJust imagine the last line is correct English please.03:02
sommerheh... I got your meaning03:02
sommerjjesse: are we commiting to the bzr branch now?03:05
jjessesommer:  yes sir03:08
jjessewow laughing at SMTP AUTHO and SASL and Postfix all in one sentence03:08
sommerstrong work, huh03:09
Bambi_BOFHhi all. anyone here familar with dspam configuration?03:10
sommerBambi_BOFH: not I... sorry03:16
Bambi_BOFHnp. i'll hope #dspam comes to life03:16
fujinsmtpauth/sasl/postfix is ez03:19
* lamont waves03:27
ScottKHeya lamont.03:27
=== _yam is now known as yam
manchicken_Anybody know if the default mysql-server package is compiled with --with-innodb?03:58
somerville32I'd suggest #ubuntu-devel03:58
ScottKHeh.03:59
lamontactually, I'd go look at the build log... :0)03:59
ajmitchhehe03:59
ajmitchconsidering that I use innodb tables all the time on ubuntu, I'd be surprised04:00
manchicken_heh04:03
manchicken_ajmitch: Okay, so how do I configure innodb to be my default?04:03
manchicken_My client is using innodb and it looks like Rose::DB is barfing as a result of this not being a Rose setup.04:04
manchicken_Err, innodb setup.04:04
manchicken_(client meaning business client, not mysql client)04:04
* ajmitch does not know what that Rose::DB is checking for04:05
manchicken_It looks like it's looking for some .frm file.04:05
manchicken_Does that sound like something that would be innodb specific?04:07
manchicken_Ooh, it looks like it might be04:07
manchicken_That's it alright.04:07
manchicken_So, ajmitch, how do I make innodb the default engine?04:08
manchicken_https://help.ubuntu.com/community/InnoDBUnderUbuntu <-- that looks like I'm not the only one having this problem...04:09
* ajmitch has always just specified table type at creation04:11
ajmitchso, that's saying it's a config issue04:11
ajmitchI admittedly don't have a default config here04:11
manchicken_Yeah...04:13
manchicken_but can you help me config it?  Pwetty pweez?04:13
ajmitchdidn't that page answer it?04:15
ajmitchcomment out skip-innodb iff it's there04:15
manchicken_Hmm...04:15
manchicken_that's commented out in my my.cnf...04:15
ajmitchand you created tables with the innodb option set?04:18
manchicken_It said it was disabled... but that was after I tried installing this enterprise version that my client gave me.04:18
manchicken_I'm trying to wipe it out and put on the default version again.04:19
ajmitchgood luck04:19
manchicken_Why can't people make deb packages for stuff?04:20
manchicken_It's really not that hard.04:21
manchicken_And it looks like MySQL's enterprise tarball was configured to work with a debian build, they just had some weird stuff in their ./debian/rules file.04:21
ajmitchenterprise tarball?04:23
ajmitchI thought you were using the default ubuntu setup04:23
manchicken_I'm going back there.  My client is trying to talk me into using the enterprise thing.04:23
manchicken_They're on redhat, which is MySQL has an rpm for.04:23
manchicken_I'm trying to figure out how to make innodb the default now...04:25
somerville32Do you need postfix to send mail?04:29
somerville32Or is there something simpler I can install?04:29
sommersomerville32: I use ssmtp with mutt for that purpose04:30
sommeractually wrote a short guide about it today: https://help.ubuntu.com/community/mutt04:31
sommerheh04:31
somerville32This is on... hoary04:31
somerville32lol04:32
somerville32I'm trying to remove postfix and it wants to remove:04:32
somerville32anacron at lsb mailx mutt postfix postfix-tls ubuntu-base04:32
sommermmmm... you could also try msmtp04:32
lamontsomerville32: hoary support ended a year ago...04:32
* manchicken_ curses loudly.04:33
lamontall of those packages Depend: mail-transport-agent04:33
* lamont wanders04:33
pschulz01sommer: Does ssmtp support any DEBCONF options?04:33
manchicken_I just learned a very valuable lesson on how to ignore a client when they tell me that I have to install a certain version of a program without knowing why it's better than the default Ubuntu one.04:34
somerville32I can't install ssmtp :/04:34
* somerville32 installs exim04:35
sommerpschulz01: I'm not sure... probably not04:36
sommerpschulz01: as in dpkg-configure?04:36
pschulz01sommer: Yes..04:36
* sommer checking04:37
pschulz01sommer: Would mean that it can be 'pre-seeded'04:37
sommerpschulz01: actually I think it does... dpkg-reconfigure worked04:38
sommernice04:38
pschulz01sommer: I'm getting rejections from my 'hub' as it expects the sender to be fully qualified.. eg root@hostname doesn't work.04:44
sommerpschulz01: did you set the hostname setting in /etc/ssmtp/ssmtp.conf?04:47
sommerdoes the mailhub require a correct fqdn?04:48
pschulz01sommer: yes.04:48
pschulz01sommer: (To your second question)04:48
sommercan you use SMTP AUTH with the hub?04:49
pschulz01sommer: OK.. I set FromLineOverride=YES04:49
pschulz01sommer: This caused the From line NOT to be overwritten..04:49
sommerthat works too... heh04:50
sommerwell I'm going to cash in for the night... later all04:51
pschulz01sommer: Goodnight.. noice doco :-)04:51
Bambi_BOFHlater mate04:52
Bambi_BOFH    exec 1>/etc/ssmtp/ssmtp.conf05:36
Bambi_BOFHthat looks a really odd way to create a file, but seems to work :) never sen that done before05:36
=== yam716 is now known as yam
=== yam978 is now known as yam
=== yam817 is now known as yam
krautmoin07:55
CyberMadi want to create document storage with folder permission.. i did this on microsoft windows 2003 server on my company and i want replace it with Ubuntu, well i want user can access through samba, example: use map network drive and must enter their username & password, if not.. only have access as guest.  I want the folder permission is inheritance to its subfolder, but i can set individual permission on its subfolder. How to do that? I want to manage07:56
CyberMaddoes OpenLDAP suitable to my need?07:56
CyberMador just SAMBA ?07:56
=== oly_mk3 is now known as oly-
oly-CyberMad, its far simpler to just use samba, if your just doing file sharing09:54
newbie23hi there :-)10:09
newbie23can somebody please tell me:10:09
newbie23a. how I change the resolution of the terminal which is 80x25 to something like 132xxx using no gui10:09
newbie23b. is it possible to add more consoles as it is under suse using ALT-1 to ALT-610:09
newbie23thanx10:09
MekApelsinwhat's the system requirements for gutsy-server? Shortly, what's the worst machine it will install on?10:17
MekApelsinespecially interrested in ram use...10:17
newbie23I just installed it on a 200mmx 64MBram10:17
MekApelsinsounds nice10:20
MekApelsinthanks10:20
MekApelsintinking about a 300mmx 64mb :D10:21
newbie23I just started it day before yesterday with minimal setup and now I have apache (without php mysql) and a torrent client running10:23
newbie23next I will try is seting up mysql and php (but I dont expect to much10:23
MekApelsinso the server install let you choose between ubuntu-standard or ubuntu-minimal as the metapackage?10:24
newbie23no it installs just the basic system almost by itself then after rebooting you just use the installmanager and add the progs you want10:26
CyberMadoly- are you there?10:28
CyberMadso what OpenLDAP suits to?10:29
MekApelsinnewbie23: does it install the metapackage ubuntu-standard and ubuntu-minimal or only ubuntu-minimal?10:30
newbie23I think its minimal10:30
MekApelsinnewbie23: you can check by running aptitude search ubuntu-standard10:32
MekApelsinif there is an i at the start of the line it is installed (you probably know that already, but anyway :D )10:33
newbie23i dont know how to search in apti10:33
MekApelsinit is easy, you just write " aptitude search ubuntu-standard " in a terminal10:34
MekApelsinit include stuff like iptables10:34
oly-CyberMad, ldap is basically a database, its good for large networks and for authenticating other services10:35
oly-a lot of web apps will tie in with ldap, so you manage all your users in one place,10:35
MekApelsinyou got wget, iptables, nano and file in ubuntu-standard10:35
oly-active directory uses ldap to store its users and groups10:36
newbie23just found out yupp its standard10:36
oly-samba is far easier to use with out it, especially if you do not know ldap10:36
MekApelsinnewbie23: thanks for checking it out for me :D10:37
newbie23your wellcome :-)10:37
newbie23have a nice day10:37
newbie23can somebody please tell me:10:47
newbie23a. how I change the resolution of the terminal which is 80x25 to something like 132xxx using no gui10:47
newbie23b. is it possible to add more consoles as it is under suse using ALT-1 to ALT-610:47
newbie23thanx10:47
somerville32newbie23,10:52
somerville32ctrl + alt + F#10:53
newbie23thx my keyboard sucks with the left strg so it didn't work can I change it to only use alt instead10:55
=== newbie23_ is now known as newbie23
=== penguim is now known as penguim_away
=== zul_ is now known as zul
zulyay i have xen-3.2 packaged for hardy14:45
Nafallowoha14:58
Nafallokewl14:58
Runithad_mmmmmmmm15:01
Runithad_xen15:01
ScottKlamont: Is there any reason not to go ahead and sync postfix from Debian?15:21
juliuxdoes somebody knows how i can send mail that matched a maildrop filterule to an other mailaddress?16:02
=== gamble6x is now known as gamble|fudes
stiVhi everyone! i have a small problem w. aptitude. i have my own mirror for many servers with many of my own packages and many adapted packages (this works fine!). there are many machines using that server to keep up-to-date by issuing "aptitude -y dist-upgrade" in a cronjob. i test everything thourougly (man how is that word written right? sry, i'm native german), so i do know this command is dangerous, but i need it that way18:31
stiVConfiguration file `WHATEVER/WHEREEVER'18:32
stiV ==> File on system created by you or by a script.18:32
stiV ==> File also in package provided by package maintainer.18:32
stiV   What would you like to do about it ?  Your options are:18:32
stiV[options, y i n o d z]18:32
stiV The default action is to keep your current version.18:32
stiV[WHICH I DONT NEED!]18:32
stiV*** ttyS0 (Y/I/N/O/D/Z) [default=N] ?18:32
stiVis there a way to get this to default with Y and continue without interaction?18:33
stiV[interaction is not possible, since this is called via cron]18:34
stiVthe command is called w. DEBCONF_FRONTEND=noninteractive DEBIAN_FRONTEND=noninteractive, but that doesn't help18:34
stiVi would really appreciate any idea ... i'm running out :-|18:35
ivoksit's insane to do this automaticaly18:35
ivoksreally insane18:35
ivokslook at apt options, maybe there is some switch to make it automatic18:36
ivoksi've never think about doing it automatically18:36
stiVi know, but ALL the servers are installed the SAME way, and as i said - i test everything before deploying18:36
ivoksdo you know what it asks you?18:36
ivoksit says 'you configured your stuff like this, but there is a change in configuration'18:37
ivoksand you want to overwrite your changes?18:37
ivoksor maybe leave your changes and possibly make service unavailable18:37
ivokscheck apt_preferences or apt.config18:37
ivoksor something...18:38
ivoksbye18:38
stiVi always put the config files preconfigured in the package, since ALL the machines have the same config files. the settings that need to be adapted are always being adapted by some other systems that create them for me --- so i don't care whats there in the first place, since it has to be created a few seconds later ...18:39
stiVthanks i'll have a look18:39
stiVi'm using aptitude ... not apt-get18:41
stiVi found it ... dpkg has an option "--force-confnew"18:46
=== gamble|fudes is now known as gamble6x
=== mdz__ is now known as mdz
^robertjI've been told I need to change the type on my gpt legacy container before I can run grub, but changing it makes it unmountable so that I cant mount the thing to install grub20:35
=== penguim_away is now known as penguim
lamontScottK: no reason not to sync postfix20:38
fujinso, anyone an iptables expert?20:53
fujinI've got correct accept lines, but it's getting down to my log/drop at the bottom20:53
fujinusing state20:53
ScottKlamont: Would you please ack Bug #160830 and subscribe ubuntu-archive?21:51
ubotuLaunchpad bug 160830 in postfix "Please sync Postfix from Debian Unstable (Main)" [Undecided,New] https://launchpad.net/bugs/16083021:51
lamontScottK: ok21:51
lamontScottK: and done21:55
ScottKlamont: Thanks.21:55
lamontScottK: bug 127555: stopping twice is fine. :-)22:18
ubotuLaunchpad bug 127555 in postfix "package postfix 2.4.3-1ubuntu1 failed to install/upgrade: subprocess post-installation script returned error exit status 1" [Undecided,Incomplete] https://launchpad.net/bugs/12755522:18
lamontI think we can call that one fixed.22:18
* ScottK looks22:18
lamont2.4.6-2 will have 35329 and 135851 fixed as well22:18
ScottKGreat.22:19
lamontoops.  maybe I was unkind on bug 16017622:21
ubotuLaunchpad bug 160176 in bind9 "L.ROOT-SERVERS.NET record needs an update" [Low,Fix committed] https://launchpad.net/bugs/16017622:21
=== newbie23_ is now known as newbie23
newbie23now I wanted to restrict the access by putting a .htaccess file in the www directory same as I found it in my xamp installation on windows (Auth Basic etc),  created the passwordfile with htpasswd, changed the AllowOveride from None to All in /etc/apache2/sites-available/default, restarted apache accessed the side and got a 500 err, I read the apache docs at least I tried to understand but...23:30
newbie23I installed the apache-worker and it works fine,23:30
newbie23...it seams I can not wrapp my brain around it successfully :-(23:30
newbie23any pep-talk available?23:30
maffanyone doing clustering with 7.10?23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!