| nealmcb | to respond to my question: is there a way to get the host command (or some other similar command) to search according to nsswitch.conf? i.e. to do mdns queries (and in particular ip address queries via mdns)? | 00:33 |
|---|---|---|
| nealmcb | getent hosts 192.168.1.18 works nicely | 00:33 |
| * kgoetz thinks canonical should employ someone to moderate the lists. | 00:56 | |
| ajmitch | er, why? | 00:57 |
| kgoetz | i keep sending from teh wrong account (so they go into the que (sp?)), and now and then they sit for 'a while'. | 00:58 |
| kgoetz | does depend which list | 00:58 |
| ajmitch | it's hardly something that needs a paid employee | 01:00 |
| kgoetz | i figure a gazillion lists. almost enough work *grin* | 01:01 |
| jkakar | So, I've just setup a new ubuntu-server (gutsy). I was happy that the installer asked me if I wanted LAMP, Samba, etc. | 01:09 |
| jkakar | During the process I check 'samba' but I now realize that I don't actually need it. Is there a recommended way to cleanly remove it? | 01:09 |
| jjesse | kgoetz: they need to hire another full time kde developer before they hire someone to monitor lists :) | 01:09 |
| fujin_ | jkakar: dpkg --purge samba | 01:12 |
| fujin_ | jkakar: you can actually probably do | 01:12 |
| fujin_ | sudo tasksel remove samba | 01:12 |
| fujin_ | sudo tasksel list | 01:12 |
| fujin_ | cancel that | 01:12 |
| fujin_ | can't do removal with tasksel | 01:12 |
| fujin_ | oh, yes you can | 01:13 |
| fujin_ | do tasksel --list-tasks, find the samba one, do tasksel remove <task> | 01:13 |
| fujin_ | sorry :P | 01:13 |
| jkakar | fujin_: Ah cool, thanks. | 01:14 |
| fujin_ | will remove everything that the tasksel did, afaik | 01:14 |
| jkakar | Ta. | 01:15 |
| jkakar | fujin_: Yeah, I guess you're right. I did 'apt-get remove samba-common --purge' and now tasksel reports 'samba' as being uninstalled. | 01:17 |
| jkakar | Thanks for the help. | 01:19 |
| kgoetz | jjesse: hehe. probably ture enough | 01:22 |
| macd | lionel, ping | 01:50 |
| kgoetz | wb | 03:19 |
| === paul____ is now known as pschulz01 | ||
| kgoetz | “C++ is an octopus made by nailing extra legs onto a dog.” —unknown | 03:27 |
| nealmcb | kgoetz: you could subscribe your other accounts also, and use the setting to avoid getting mail sent to the other ones | 03:37 |
| nealmcb | fujin_: it just isn't clear from the man page whether tasksel remove does a purge or not - I assume not | 03:41 |
| nealmcb | but I'm glad to learn that there is a remove option! | 03:42 |
| sahafeez | dumb question - how do i set a service (apache) in init.d not start on boot? do i just remove the file? | 04:10 |
| sahafeez | figured it out | 04:11 |
| mohan | hi...can any one tell me any GUI is there for DNS Server | 05:07 |
| mohan | plzz help me... | 05:07 |
| mohan | i want to configure DNS Server.... can anyone help me sir | 05:17 |
| c1|freaky | hi all | 06:44 |
| c1|freaky | i just installed mod music index and tried to restart apache2. but it can't restart apache2 because it says the address was allready in use. | 06:47 |
| c1|freaky | when i do ps aux | grep apache2 nothing shows up | 06:47 |
| c1|freaky | just the grep process | 06:47 |
| c1|freaky | and now i dont know what process is using port 80 | 06:47 |
| c1|freaky | how can i find out what process is using it? | 06:48 |
| avatar_ | c1|freaky: sudo fuser -u -v -n tcp 80 | 07:46 |
| c1|freaky | ok thank you :D | 07:46 |
| c1|freaky | is there anything like durep -w - a disc usage reporting tool which converts the reports into html format in soem way? | 07:58 |
| c1|freaky | i cant get durep to work | 07:58 |
| c1|freaky | oih | 07:59 |
| c1|freaky | i guess i found out what i was doing wrong | 07:59 |
| mohan | any GUI is there for DNS Server | 09:38 |
| Kamping_Kaiser | afaik not | 09:38 |
| mohan | any GUI is there for DHCP Server | 09:40 |
| Kamping_Kaiser | afaik not | 09:41 |
| Kamping_Kaiser | not in ubuntu at any rate | 09:42 |
| mohan | kamping_kaiser,thanks | 09:42 |
| Kamping_Kaiser | mohan, they are hoping for some in the next release. | 09:43 |
| Kamping_Kaiser | no probs. | 09:43 |
| mohan | thank u | 09:51 |
| coNP[uni] | Is there a way to tell grub what kind of filesystem resides on a given partition? | 10:01 |
| coNP[uni] | (It does not want to find /boot/grub/stage1 and I guess it might be because it does not know that this is an ext3 filesystem) | 10:01 |
| Kamping_Kaiser | it shouldnt care, as long as it can support the filesystem in question | 10:02 |
| coNP[uni] | it is an ext3 but has partition type ntfs | 10:12 |
| coNP[uni] | but I thought it should not be a problem | 10:12 |
| c1|freaky | how can i allow cgi scripts to be executed also from another path than /usr/lib/cgi-bin/ so i can password protect a cgi script and not all together | 10:12 |
| c1|freaky | ? | 10:12 |
| c1|freaky | im using apache2 | 10:12 |
| soren | coNP[uni]: stage1 is not read off of the disk at boot time, it gets.. Oh, he buggered off. | 10:23 |
| soren | meh | 10:23 |
| jgonzalez | hi there... I would like to use syslog-ng, but it seems that implies to uninstall ubuntu-minimal (https://bugs.launchpad.net/ubuntu/+source/syslog-ng/+bug/42555/)... I'm new to ubuntu, but I seem to recall that this may cause problems when upgrading between releases... any option? | 11:05 |
| ubotu | Launchpad bug 42555 in ubuntu-meta "ubuntu-minimal should support recommends (was: syslog-ng causes ubuntu-minimal to be removed.)" [Wishlist,Fix released] | 11:05 |
| svschwartz | hi everybody | 12:33 |
| svschwartz | can anybody suggest solution for creating drive images with MBR etc | 12:33 |
| svschwartz | ext2/ext3 partitions | 12:33 |
| lionel | macd: arround ? | 13:05 |
| lionel | hi mathiaz | 13:47 |
| mathiaz | hi lionel | 13:47 |
| macd | lionel, ping | 14:34 |
| lionel | \o/ | 14:35 |
| lionel | macd: did you see my comments on the ML ? | 14:35 |
| macd | sure, did and I just shot a reply | 14:35 |
| macd | so you should have that pretty soon | 14:36 |
| lionel | cool, reading now | 14:36 |
| lionel | well, ok. | 14:37 |
| lionel | my problem with mongrel is that you need to start a mongrel instance for each app no ? It does not support virtualhosting or similar. Correct me if I'm wrong | 14:38 |
| macd | Correct, each rails app needs one or more mongrel | 14:39 |
| lionel | so adding a new app means adding a new init.d :-( | 14:39 |
| macd | well, maybe | 14:40 |
| macd | There is a method to tell which mongrels to start on boot through mongrel, so just adding the init script would be a one time thing | 14:40 |
| macd | I see where your going with fcgid and mongrel, and it makes sense from a complications point of view why to stray from mongrel | 14:43 |
| macd | but mongrel is pretty much the defacto standard in the ror world these days | 14:44 |
| mathiaz | macd: I've just replied to your mail for RoR | 15:30 |
| mathiaz | macd: what's the issue with fcgid ? | 15:31 |
| macd | mathiaz, performance manly | 15:57 |
| mathiaz | hi ivoks ! | 16:03 |
| mathiaz | ivoks: you've popped in at the right time as we're disscussing mod_fcgid for Ruby On Rails. | 16:03 |
| mathiaz | macd: so you think that using apache2.2 as a reverse proxy for mongrel makes more sense. | 16:04 |
| mathiaz | macd: could you explain to me what mongrel is exactly ? | 16:04 |
| macd | mathiaz, yes@ apache+mongrel | 16:04 |
| macd | mongrel is a lightweight http/ruby server | 16:05 |
| mathiaz | macd: I have a vague idea about it, just want to make sure I understand it correctly. | 16:05 |
| macd | but it really doesnt excel at serving static content, so thats where apache fits in | 16:05 |
| mathiaz | macd: can it run under a different user than apache2 ? | 16:05 |
| macd | mathiaz, yes or no, its all spec'd in the mongrel config | 16:06 |
| mathiaz | macd: ok. One of the main reason fcgid is interesting is from a security point of view | 16:06 |
| ivoks | hi | 16:06 |
| mathiaz | macd: as the scripts don't run in the same address space as the web server | 16:06 |
| ivoks | (let me just catch up with the conversation) | 16:07 |
| mathiaz | ivoks: correct me if I'm wrong on the fcgid thing. | 16:07 |
| mathiaz | macd: IIUC using mongrel would provide the same level of security ? | 16:07 |
| ivoks | i was just reading mail post on list and had plan to respond | 16:08 |
| MatBoy | I'm having the following problem that I can't get fixed with apt-get -f install or anyway to force stuff http://www.pastebin.ca/793761 | 16:08 |
| ivoks | macd: you're Mamading? | 16:08 |
| macd | mathiaz, the dispatch cgi for the rails app lives in a public directory, but is only read by mongrel | 16:09 |
| macd | and the rails framework "routes" get/post requests via the app, so you could say it lives in a seperate place | 16:10 |
| lamont | MatBoy: the joys of using backports, eh? | 16:10 |
| macd | ivoks, no, I'm David P. | 16:10 |
| ivoks | oh, sorry | 16:10 |
| lamont | purge all of the relevant packages and then install | 16:10 |
| lamont | MatBoy: specifically all of the packages mentioned in : which is also in package ruby-net-ssh and such | 16:10 |
| MatBoy | lamont, hehe, yeah indeed... uhm with what option ? because I'm quite stuck for the first time | 16:11 |
| lamont | apt-get remove --purge | 16:11 |
| ivoks | apache+fcgid would help us with lots of current problems | 16:11 |
| mathiaz | ivoks: right.. but that is mainly for php scripts. | 16:11 |
| ivoks | no | 16:11 |
| ivoks | fcgid is mainly used for ruby | 16:11 |
| ivoks | but can (and should) also be used for php | 16:11 |
| MatBoy | lamont, because using apt-get remove --purge will give me the -f install message again | 16:11 |
| mathiaz | ivoks: mongrel already provides the separation from the http server | 16:11 |
| ivoks | and python and perl... | 16:12 |
| ivoks | i see | 16:12 |
| lamont | MatBoy: dpkg --purge --force-depends for the truly brave | 16:12 |
| macd | Alot of the RoR world just doesnt like fcgid, and its mainly due to performance | 16:12 |
| lamont | MatBoy: and you need to purge both the 1.8 and non-1.8 versions of the packages as mentioned in all your errors. | 16:12 |
| lamont | then apt-get -f install stands a chance of fixing the depends that you've broken with the dpkg --purge --force-depends | 16:13 |
| ivoks | macd: fcgid with any web server or fcgid with apache? | 16:13 |
| lamont | MatBoy: and if apt ever tells you to type 'Yes, do as I say!", don't. | 16:13 |
| MatBoy | lamont, hehe indeed | 16:13 |
| lamont | s/as/what/ | 16:13 |
| lamont | sigh | 16:13 |
| lamont | it's been too long | 16:13 |
| macd | ivoks, I'd venture to say any web server, over the past year or so RoR community has gone through numerous "the right stuff" setups, and its finally settled on Apache+Mongrel for the past 6 or so months | 16:14 |
| MatBoy | lamont, ok, I was playing with the force things btw, thanks ! | 16:14 |
| lamont | it's very very very rare that saying that is the right answer. | 16:14 |
| macd | Some people are also touting nginx, personally I thinks its inferior to apache | 16:14 |
| ivoks | macd: ok, i have to admit i've never hard about mongrel | 16:14 |
| ivoks | i'm just not into ror stuff | 16:14 |
| ivoks | what i do know is that people often misconfigure apache :) | 16:14 |
| ivoks | or are unaware or MPMs in it | 16:14 |
| macd | isnt that the truth ;) | 16:14 |
| mathiaz | macd mentionned in the spec to use the worker MPM | 16:15 |
| macd | mod_proxy used to remove mpm-perchild and install mpm-prefork, that was horrible. | 16:15 |
| ivoks | apache-worker+fcgid does provide really impressive results | 16:15 |
| ivoks | macd: have you worked with worker? | 16:16 |
| macd | Yeah, we deployed ror stacks in alot of configurations in the past | 16:17 |
| ivoks | all my experinece is based on PHP... | 16:17 |
| ivoks | macd: and, what's your view on mpm-worker+fcgid? | 16:17 |
| MatBoy | lamont, is there no way to do a sudo dpkg --purge --force-depends ruby* ? | 16:18 |
| macd | mpm-worker+fcgid from a setup perspective, easy. | 16:19 |
| macd | performance, you just can't beat mongrel | 16:19 |
| ivoks | ok, i understand that | 16:19 |
| ivoks | sec phone | 16:19 |
| mathiaz | macd: If the consensus in the RoR community is to use a mod_proxy+mongrel setup, we should go for this solution. | 16:21 |
| macd | mathiaz, thats exactly how I feel, giving the people what they want is what ubuntu is about | 16:21 |
| ivoks | ok... so we would provide support for ror ouside of worker+fcgid idea | 16:22 |
| lamont | MatBoy: I use vi, and my mouse to assemble that list usually | 16:22 |
| ivoks | mathiaz: i don't mind that... but we should take a look at mongrel | 16:22 |
| MatBoy | lamont, I removed the packages, did an autoremove | 16:22 |
| MatBoy | and will install again :) | 16:22 |
| mathiaz | ivoks: the idea is to provide an task equivalent to the LAMP task. | 16:23 |
| ivoks | yeah... | 16:23 |
| ivoks | if worker+fsgid is realld that worse than mongrel... | 16:23 |
| ivoks | with worker+fcgid, we could have easy plug and play support for different languages | 16:23 |
| ivoks | man, lots of typos :) | 16:24 |
| mathiaz | ivoks: right. OTOH if it's not a standard practice in the RoR community it may not be the best option. | 16:24 |
| ivoks | right | 16:24 |
| ivoks | macd: do you have any info about security issues with mongrel? | 16:25 |
| ivoks | CVE-2006-5467 | 16:26 |
| ubotu | The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contains an inconsistent ID. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5467) | 16:26 |
| ivoks | i found only one CVE | 16:27 |
| macd | yeah, mongrel is pure ruby, so anything ruby may affect it | 16:27 |
| macd | Mongrel is @ http://mongrel.rubyforge.org/ | 16:27 |
| macd | Mongrel has a fix for the CGI issue in Ruby, so that systems running older Ruby dont have an issue | 16:27 |
| ivoks | ok, this CVE is not a mongrel issue | 16:28 |
| macd | http://rubyforge.org/pipermail/mongrel-users/2006-October/001946.html | 16:28 |
| ivoks | mathiaz: so, we should look at including it in main? | 16:28 |
| macd | It kind of is | 16:28 |
| mathiaz | ivoks: that would be one the goal of the spec. | 16:29 |
| ivoks | ok... http://mongrel.rubyforge.org/docs/apache.html | 16:30 |
| ivoks | this is very easy :) | 16:30 |
| ivoks | macd: would you be interested in testing some setups we create? | 16:31 |
| macd | yeah, no problem | 16:31 |
| ivoks | in about a month or so... | 16:31 |
| ivoks | when i finish mail stuff :) | 16:31 |
| mathiaz | ivoks: hum... there is a caveat section at the very bottom of the page | 16:32 |
| mathiaz | ivoks: So yes the net result is that you can really only put a couple of mongrels behind apache’s proxy engine (about 2 “hello world” rails mongrels). | 16:32 |
| mathiaz | ivoks: that's not very encouraging... :/ | 16:32 |
| macd | and I just saw the newer mongrel can run multiple rails apps | 16:32 |
| macd | I dont think that caveat is completely right | 16:33 |
| macd | we run modest hardware with a few dozen mongrels behind a single apache | 16:33 |
| ivoks | yeah.. if this is ture, and mongrel is bet tool, then we should drop ror :D | 16:34 |
| ivoks | s/bet/best/ | 16:34 |
| ivoks | i'll investigate it | 16:34 |
| macd | yeah, who in their right mind would use a web framework that a server could only run 1 or 2 instances of ;P | 16:34 |
| macd | Jason Hoffman must have a 486 ;) | 16:35 |
| mathiaz | hum.. it seems that there is two options here. More research may need to be done then. | 16:35 |
| ivoks | iirc, we don't even have mod_proxy_balancer | 16:36 |
| macd | its in mod_proxy I _think_ | 16:36 |
| ivoks | right, it is | 16:36 |
| macd | on gutsy just doing a2enmod proxy allows you to use balancer | 16:36 |
| macd | s/gutsy/hardy | 16:37 |
| ivoks | ok, i'll investigate it | 16:37 |
| macd | I have a hardy vm I setup last night with the RoR stack configured I could snapshot for you | 16:37 |
| ivoks | mathiaz: i should finish mail stuff by the end of the week, so there'll be time for this... | 16:37 |
| ivoks | that would be great! | 16:37 |
| macd | It's in virtualbox format, would that be ok? | 16:39 |
| ivoks | am... | 16:39 |
| ivoks | well, ok | 16:39 |
| macd | actually | 16:39 |
| macd | Im thinking I could just run a diff on everything modified | 16:39 |
| macd | include the new files added also | 16:39 |
| macd | that might be easier than me trying to upload a few hundred megs | 16:40 |
| ivoks | macd: you could send me output of dpkg --get-selections | 16:40 |
| ivoks | and configuration files | 16:40 |
| ivoks | macd: send it to ivoks@ubuntu.com | 16:41 |
| mathiaz | macd: what's mongrel_cluster ? | 16:41 |
| macd | I can get that together in a day or so, I've got some stuff on my plate atm | 16:41 |
| ivoks | i'll have to say bye now... | 16:41 |
| macd | see ya ivoks | 16:41 |
| macd | mathiaz, mongrel_cluster is a script that facilitates starting multiple mongrels | 16:41 |
| macd | mathiaz, I should also mention its a few ruby files | 16:42 |
| macd | + an init script | 16:42 |
| mathiaz | macd: does this start apache2 ? | 16:43 |
| ivoks | no | 16:43 |
| ivoks | just coupld of mongrels, right? | 16:44 |
| macd | mathiaz, no, apache is still started through its own init | 16:44 |
| ivoks | bye | 16:44 |
| macd | mathiaz, on startup apache checks the status of the mongrels and will give an error/take them out of the balancer if they arent available | 16:44 |
| macd | [Thu Nov 22 04:34:23 2007] [debug] proxy_util.c(1610): proxy: worker http://172.17.129.167:8004 already initialized | 16:45 |
| macd | something like that | 16:45 |
| mathiaz | macd: ok. | 16:46 |
| mathiaz | macd: what's needed to configure on the DB side ? | 16:46 |
| mathiaz | macd: you mentionned in the spec that you need to create a user and a db for rails. | 16:47 |
| macd | mathiaz, yes, assuming we have some sort of sample app installed | 16:47 |
| mathiaz | macd: so you need to create databases for each rail apps installed. | 16:48 |
| macd | mathiaz, the rails app needs to know the db connection info, i.e. socket/pipe, and a user:pass for it. | 16:48 |
| mathiaz | macd: but rails, the framework, doesn't need it's own db ? | 16:48 |
| macd | mathiaz, correct, it does not | 16:48 |
| mathiaz | macd: ok. | 16:48 |
| macd | mathiaz, this is where RoR gets wierd, without a sample app, theres no configuration to be done on mongrel, apache, or mysql | 16:49 |
| macd | which could be as simple as the default rails app created with "rails newapp" | 16:49 |
| mathiaz | macd: right... There is still some work to be done so that when the first apps is depoloyed you don't need to setup everythin. | 16:50 |
| mathiaz | macd: I've edited the spec (https://wiki.ubuntu.com/RubyOnRailsStack#preview) | 16:50 |
| mathiaz | macd: could you have a look over it ? | 16:51 |
| macd | mathiaz, looking now | 16:51 |
| mathiaz | macd: in the implentation section, there is the tasksel task section and the documentation section | 16:52 |
| mathiaz | macd: the tasksel section is where we can automate everything. | 16:52 |
| mathiaz | macd: the documentation is about how to deployed a rail application. | 16:52 |
| macd | mathiaz, yeah I wanted to ask about tasksel, is that part of the installer? | 16:52 |
| mathiaz | macd: it should boiled down to: where you should put your apps, how to configure your db access and on which host you wanna run it. | 16:53 |
| mathiaz | macd: tasksel is used in the installer | 16:53 |
| mathiaz | macd: but you can also run afterwards. | 16:53 |
| macd | mathiaz, exactly, we should ask the user those 3 things | 16:53 |
| mathiaz | soren: they're dummy man pages in debian. | 16:54 |
| macd | mathiaz, possibly how many mongrels they want | 16:54 |
| mathiaz | soren: because there is some issue with mysql man pages. | 16:54 |
| soren | mathiaz: And Debian doesn't have the mysql-doc-5.0 package? | 16:54 |
| macd | and then we can just generate the configurations for that ( I assume thats past of what tasksel does) | 16:54 |
| mathiaz | soren: nope. | 16:54 |
| soren | mathiaz: Alright. | 16:54 |
| mathiaz | soren: I'm currently discussing the issue with one of the DD and MySQL documentation team. | 16:55 |
| soren | mathiaz: ...so if people install mysql-server-5.0 on Ubuntu they just get no man pages at all? | 16:55 |
| mathiaz | soren: yes. They don't get mysql for ex. | 16:55 |
| soren | mathiaz: erk. | 16:55 |
| mathiaz | soren: mysql-doc-5.0 is a suggestion. | 16:56 |
| mathiaz | soren: well. the debian man page for mysql just states that the manual is not free. | 16:56 |
| mathiaz | soren: it doesn't give more information about the actual program. | 16:56 |
| mathiaz | macd: correct. tasksel is just about installing the framework. | 16:56 |
| mathiaz | macd: and making some necessary configuration so that things work out of the box once the apps is deployed. | 16:57 |
| mathiaz | macd: what's the reason for having more than one mongrel for an app ? | 16:57 |
| macd | mathiaz, some RoR apps have to have more than 1 to run, others just need it for performance | 16:58 |
| mathiaz | macd: you mentionned that httpd.conf needs to be edited if the rails app wants to use more than a single mongrel instance. why is this needed in httpd.conf ? | 17:00 |
| mathiaz | macd: actually it's apache2.conf in Ubuntu nowadays | 17:00 |
| macd | mathiaz, yeah Im not sure why I chose httpd.conf over apache2.conf | 17:01 |
| macd | mathiaz, I believe I couldnt make it work by adding the stuff into apache2.conf, but since apache is modular now, we could use that to our advantage | 17:01 |
| mathiaz | macd: if some modifications needs to be done in apache2.conf, it means it should go in tasksel | 17:01 |
| mathiaz | macd: and to be exact, not in apache2.conf, but in the .load file of rails. | 17:02 |
| mathiaz | macd: or something like that. | 17:02 |
| macd | mathiaz, When I get all the files together for ivoks, I'll try to see if I can stick the directives in apache2.conf rather than httpd.conf | 17:02 |
| soren | macd: /etc/apache2/conf.d probably | 17:03 |
| macd | .load? are you referring to the files living in /etc/apache2/mods-available ? | 17:03 |
| mathiaz | macd: hum... I think it would be more intersting if you can figure out which directives are relevant for a vhost and which ones should be applied to the common apache configuration | 17:04 |
| mathiaz | macd: yes. but I think soren gave the right answer. | 17:04 |
| macd | All the vhost specific configs live in /etc/apache2/sites-available | 17:04 |
| mathiaz | macd: yes. That would be up to the sysadmin to modify when deploying a web apps. | 17:05 |
| mathiaz | macd: if there are some other directives that are needed to make RoR apps working for every vhost, they should be added at install time. | 17:05 |
| macd | mathiaz, I see why I have the proxy_balance stuff in httpd.conf, I use a old apxs module and it loads in httpd.conf, so I just stuck that in there too, but it works in apache2.conf | 17:05 |
| mathiaz | macd: ok. It seems that proxy_balance configuration is not something specific to a rail apps or a vhost | 17:06 |
| soren | macd: httpd.conf and apache2.conf are completely equivalent. One includes the other. | 17:06 |
| soren | macd: It doesn't matter which of those you put something in. | 17:07 |
| soren | macd: ...but if a package wants to add stuff to the apache configuration, that's what /etc/apache2/conf.d is for. | 17:07 |
| mathiaz | soren: apache2.conf is the suggested file. | 17:07 |
| soren | mathiaz: Right. | 17:07 |
| mathiaz | soren: httpd.conf is deprecated IIRC | 17:07 |
| soren | mathiaz: Sounds right. | 17:07 |
| soren | ...but there's no functional difference between the two. | 17:07 |
| macd | inside httpd.conf they mention using it specifically to load older and 3rd party modules | 17:08 |
| soren | Whatever you can put in one, you can put in the other, and nothing will have changed. | 17:08 |
| macd | but yeah, it shouldnt matter which one, it should work either way | 17:08 |
| soren | macd: No... httpd.conf is empty by default. | 17:08 |
| macd | since apache2.conf has a include directive for httpd.conf | 17:08 |
| macd | soren, it isnt on hardy? | 17:08 |
| mathiaz | macd: yes. It's there for historical reasons. | 17:09 |
| mathiaz | macd: httpd.conf was the default configuration file in Debian for a while. | 17:09 |
| mathiaz | macd: Debian moved to apache2.conf, which is the same as upstream. | 17:10 |
| soren | macd: Yes, it is. | 17:10 |
| macd | wth, why does mine have something in it :/ | 17:10 |
| macd | nvm, I know.... yeah it is blank on hardy, gutsy has some commented stuff in it | 17:11 |
| soren | macd: You put it there or some app you installed did. If the latter, please file a bug against it. | 17:11 |
| macd | soren, it should be present, just empty correct? | 17:11 |
| soren | macd: Yes. | 17:12 |
| soren | macd: I'm quite sure it's the same on gutys. | 17:12 |
| soren | gutsy, even. | 17:12 |
| soren | Yup. | 17:12 |
| soren | It is. | 17:13 |
| macd | http://pastie.caboo.se/120942 thats what I have on a fresh gutsy install | 17:13 |
| soren | I find that quite hard to belive. I've just grepped the entire source code for "This is here for backwards compatability reasons" and there's no such thing anywhere. | 17:14 |
| soren | Same for feisty. | 17:15 |
| * macd has no idea where it came from then | 17:15 | |
| soren | macd: Dapper looked that way, it seems. | 17:17 |
| macd | I thought my gutsy was fresh, but it may be an upgrade from dapper, that would explain the file at the least | 17:18 |
| soren | edgy, too. | 17:18 |
| soren | Feisty and onwards: empty. | 17:19 |
| mathiaz | macd: which mpm should be used in the apache2+mod_proxy configuration ? | 17:20 |
| macd | Looks like its time for me to stuff my face, I'll get the rest of the specifics regarding which config files need to be touched and how and stick it on the wiki | 17:20 |
| macd | mathiaz, perchild | 17:21 |
| macd | err | 17:21 |
| macd | my mistake, worker | 17:21 |
| mathiaz | macd: right. | 17:22 |
| macd | forgot something, mathiaz are you subscribed to the wiki page, or do you want me to shoot you a email when the other info is up? | 17:22 |
| mathiaz | macd: I'll subscribe to the wiki page | 17:25 |
| appellation | While trying to login to my server from my main computer via ssh, I received a message suggesting that someone may be attempting a man-in-the-middle attack. I have restarted the server. Does anyone have any other suggestions? | 19:18 |
| appellation | I think I was also successful in putting the IP behind the firewall temporarily... | 19:21 |
| appellation | And Happy Thanksgiving, all. | 19:22 |
| somerville32 | What is the config file for the firewall? | 19:34 |
| somerville32 | ie. Where | 19:34 |
| appellation | The LAN firewall is actually run via the control panel for a Belkin Wireless Router. | 19:36 |
| appellation | Or, rather, it is configured via the control panel, not "run." | 19:36 |
| somerville32 | appellation, Are you talking to me? | 19:39 |
| appellation | somerville32: yeah. | 19:39 |
| somerville32 | appellation, I'm pretty sure this ubuntu box isn't a Belkin Wireless Router. | 19:40 |
| somerville32 | :] | 19:41 |
| appellation | somerville32: Ha ha. No. The Router has it's own firewall, while I can use to hide behind if the LAN gets compromised. Only one IP address on this LAN can be public, and I can disable that option via the control panel. | 19:42 |
| somerville32 | I was talking about me, not you :P | 19:43 |
| somerville32 | I want to know where the config file for the linux firewall is | 19:43 |
| appellation | somerville32: The box is a converted iBook, connected to the router, which I'm hoping is fending off the nasties. | 19:43 |
| * somerville32 blinks. | 19:43 | |
| appellation | somerville32: Gotcha. I'm...not sure. | 19:43 |
| appellation | Searching... | 19:44 |
| somerville32 | The man in the middle attack might be because the ip address/domain name you're using is now connecting to another box | 19:44 |
| zul | if you re-installed it then the ssh-key might have changed | 19:44 |
| appellation | It appears this issue was dealt with on the forums a few weeks ago: http://ubuntuforums.org/showthread.php?p=3675239#post3675239 | 19:44 |
| appellation | zul: Possible, but I don't think I did. | 19:45 |
| zul | well the keys arent matching up so thats why you are getting that error | 19:46 |
| appellation | somerville32: Yeah, that occurred to me. It's just that I like to ask the chatrooms when these things come up. I don't really understand the nature of the attack, so I couldn't be sure whether I was covering my bases properly. | 19:46 |
| appellation | zul: Yeah. I think it's going to be fine, but I wasn't clear on the procedure for handling it. | 19:47 |
| somerville32 | zul, Where is the text config file for the firewall? | 19:47 |
| zul | somerville32: what firewall? | 19:50 |
| somerville32 | Isn't there a default one? | 19:51 |
| zul | nothing to do with the firewall its the .ssh/known_hosts file get rid of the offending key and you should be ok | 19:51 |
| somerville32 | ... | 19:53 |
| somerville32 | Okay, I have a server with firestarter installed | 19:53 |
| somerville32 | It is blocking VNC at the moment (or I suspect) and I since it is I can't use the nice GUI | 19:53 |
| somerville32 | I'm looking for the file location of the text config file | 19:54 |
| appellation | zul: Cleared the known_hosts on this computer, the one attempting to login to the server over the network. That's the file you're talking about, right? | 19:55 |
| zul | yep | 19:56 |
| centaur5 | Is it possible to connect to the internet via pppoe during a text install? | 21:18 |
| somerville32 | How do I get vnc4server to run for the main display? | 21:44 |
| spike | hi there | 23:24 |
| spike | I'm looking at using ubuntu-server to build an AP. has anybody done anything like this before? | 23:24 |
| spike | I've got a ralink card that can work in master mode and I've been looking at hostapd but I'm not sure how that fits in | 23:25 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!