| kgoetz | has someone gone and run s/Debian/Ubuntu in the libpam-ldap and libnss-ldap README.Debian files? is there any particular reason to have done so? | 00:52 |
|---|---|---|
| ScottK | Cool. I can requeue messages without super user priviledges now in Postfix. One less reason to be root. | 02:00 |
| lamont | ScottK: which version? | 02:00 |
| lamont | or is it just having write access to deferred and friends? | 02:01 |
| ScottK | postqueue -i in 2.4 | 02:01 |
| * ScottK hadn't read the postqueue man page in a while. | 02:01 | |
| * lamont needs to read the nmap man page this week | 02:01 | |
| * ScottK had been using postsuper -r. | 02:01 | |
| Burgundavia | dendrobates: you need to email fridge-devel to get your meetings listed on the fridge | 02:07 |
| ScottK | lamont: Speaking of which, Debian Bug# 453238 does not sound like a smart idea to me. | 03:33 |
| kgoetz | hi all. i'm wondering if someone can recomend a log level for openldap (slapd) to help debug a libpam_ldap problem. level 256 doesnt seem to help me much. help with libpam_ldap /libnss_ldap would be apreciated too :/ | 03:38 |
| sommer | kgoetz: -1 will give you all available output. | 03:47 |
| kgoetz | -1 where? slapd? | 03:48 |
| sommer | kgoetz: /etc/default/slapd there's a SLAPD_OPTIONS="" try -d -1. then restart slapd | 03:49 |
| sommer | so you'll have SLAPD_OPTIONS="-d -1" | 03:49 |
| kgoetz | sommer: should i remove th debuglevel 256 from the slapd.conf? | 03:52 |
| kgoetz | *loglevel | 03:52 |
| * kgoetz sets to 0 | 03:52 | |
| sommer | actually I've never used the loglevel option | 03:54 |
| kgoetz | mm ok. i'll disable it entirely | 03:54 |
| sommer | when debugging a big issue I start slapd in a terminal with these options slapd -d -1 -h "ldap:/// ldaps:///" -f /etc/ldap/slapd.conf | 03:55 |
| sommer | you'll get all the output to the console... usually a lot of output. | 03:55 |
| kgoetz | slapd doesnt seem to be restartin, shoudl i expect it to run in the forground now? | 03:58 |
| sommer | kgoetz: I may have been wrong about the SLAPD_OPTIONS="-d -1"... try setting them back to "" | 03:59 |
| sommer | kgoetz: I thought that would work | 04:01 |
| sommer | are you getting Starting OpenLDAP: slapd and it's just kind of hanging there | 04:01 |
| kgoetz | sommer: slapd's running and i'm gettin debug to syslog, i'm just supprised it didnt background | 04:01 |
| kgoetz | esp. as theres nothing going to stdout | 04:01 |
| sommer | did you start slapd in a console with the options I posted? | 04:02 |
| kgoetz | i added '-d -1' to the /etc/default/slapd file. whenever i run slapd in a console it chowns the database to root | 04:03 |
| sommer | apologies I may have been wrong about that file... you might try just running slapd from console | 04:05 |
| kgoetz | your right in a much as it is debugging, but i'm bemused its still forgrounded - if its loggingn to syslog theres no reason for it to hold the terminal | 04:06 |
| sommer | ya that's strange does ctrl+c work? | 04:08 |
| kgoetz | ^C kills the daemon | 04:08 |
| sommer | mmmm... I'd just start slapd from console until you've figured out the issue then (it just feels cleaner) | 04:10 |
| kgoetz | hm. | 04:12 |
| kgoetz | hate softwar with no clear debugging options. pam is inn that catagory :( | 04:56 |
| kgoetz | now i see some pam_debug module ... yay, another module to load and confuse :S | 04:56 |
| vetri | which gui best for iptables | 05:02 |
| ScottK | vetri: vim | 05:04 |
| mralphabet | gui? for a text file? | 05:16 |
| sommer | in DNS terms you have reverse zone files... is it correct to call the regular zone file a forward zone file? | 05:56 |
| * ScottK has heard of reverse lookups, but never reverse zone files. | 05:57 | |
| kgoetz | afaik so | 05:57 |
| ScottK | But /me knows more about DNS protocol than admining DNS servers. | 05:57 |
| sommer | cool just wondering | 05:58 |
| sommer | the data for reverse lookups is stored in a reverse zone... a file in bind9 terms | 05:59 |
| sommer | not sure about MS dns... reverse zones are configured in gui mode | 06:00 |
| _ruben | forward and reverse zones arent really that different from eachother .. except that one (reverse) has entries below in-addr.arpa. and uses PTR records, and the other (forward) has entries below . and uses A/CNAME/MX/etc records :p | 07:55 |
| tjaalton | uh, is the mount.nfs4 braindead or what.. it does a readlink() in the current directory, and when the server path doesn't exist there it fails | 08:04 |
| tjaalton | this is on hardy | 08:04 |
| tjaalton | anyone here using nfs/nfs4 mounts on hardy? | 08:05 |
| avatar_ | hardy? maybe try #ubuntu+1 | 08:05 |
| tjaalton | avatar_: nope, I'll try linux-nfs@ instead | 08:06 |
| avatar_ | hardy is atm alpha quality and not production ready | 08:06 |
| kraut | moin | 08:06 |
| tjaalton | avatar_: I'm core-dev, I know ;) | 08:06 |
| avatar_ | ah, okay :) | 08:07 |
| _ruben | heh | 08:08 |
| tjaalton | it wouldn't matter to me unless braindead software didn't insist on having $HOME (Mathematica) | 08:08 |
| _ruben | bugger .. time to investigate pf_ring on short term i guess .. | 08:10 |
| _ruben | Nov 28 06:41:25 ismlnx-fw07 pmacctd[7790]: wan0: (1196228485) 962816 packets received by filter | 08:10 |
| _ruben | Nov 28 06:41:25 ismlnx-fw07 pmacctd[7790]: wan0: (1196228485) 0 packets dropped by kernel | 08:10 |
| _ruben | Nov 28 06:56:25 ismlnx-fw07 pmacctd[7790]: wan0: (1196229385) 1032605 packets received by filter | 08:10 |
| _ruben | Nov 28 06:56:25 ismlnx-fw07 pmacctd[7790]: wan0: (1196229385) 13239 packets dropped by kernel | 08:10 |
| ivoks | hi | 08:57 |
| _ruben | g'day | 08:58 |
| Steve_____ | hello - Have installed JBoss on Ubuntu server 7.04. Works fine from localhost but when I try to hit a page remotely I get "The connection was reset". Any ideas? | 09:26 |
| nijaba | Steve_____: isn't there a rule in JBoss that by default only allows connections from localhost? | 09:28 |
| Steve_____ | Didn't think of that. Will try to find out - Currently running a slightly different version of jboss on ubuntu desktop 6.10 without problems | 09:29 |
| nijaba | Steve_____: I am no JBoss specialist, but google points to /usr/local/jboss/run.conf | 09:30 |
| Steve_____ | thanks nijaba. Will feedback if I get anywhere with that | 09:33 |
| === ivoks_ is now known as ivoks | ||
| Steve_____ | How can I tell whether ubuntu is preventing access from remote machines to port 8080? | 11:26 |
| ivoks | iptables -L | 11:27 |
| avatar_ | sudo lsof -i |grpe 8080 | 11:30 |
| avatar_ | sudo lsof -i |grep 8080 | 11:30 |
| avatar_ | on wich interface is your daemon listening? | 11:30 |
| Steve_____ | iptables shows now rules (I tried iptables -F) | 11:30 |
| ivoks | -F je flush | 11:32 |
| ivoks | so if you had -P DROP, then -F would result in total jail of your system :) | 11:33 |
| ivoks | sorry... -F is flush | 11:33 |
| Steve_____ | iptables shows no rules | 11:33 |
| ivoks | then no one is blocking your ports | 11:33 |
| Steve_____ | lsof -i | grep 8080 gives nothing | 11:34 |
| ivoks | maybe your service isn't listening on 8080 | 11:34 |
| Steve_____ | I can telnet to 8080 from localhost and HEAD | 11:34 |
| ivoks | you can telnet to localhost, right? | 11:34 |
| Steve_____ | or wget localhost:8080 and wget a web page | 11:34 |
| Steve_____ | yes | 11:34 |
| ivoks | checkout netstat -an | grep 8080 | 11:34 |
| Steve_____ | How do I tell which interface the deamon is listening on | 11:35 |
| Steve_____ | tcp 0 0 127.0.0.1:8080 0.0.0.0:* LISTEN | 11:35 |
| ivoks | it listens only on localhost | 11:35 |
| Steve_____ | thanks | 11:36 |
| akincer | Has anyone seen instances where a NIC stops responding to external requests and only starts responding once you initiate a connection from that machine? | 14:05 |
| ivoks | yes | 14:06 |
| ivoks | you can achive that with firewall | 14:06 |
| akincer | That's the firewall? | 14:06 |
| ivoks | could be | 14:07 |
| ivoks | it could also be a broken nic | 14:07 |
| akincer | If so, that is a policy that redefines dumb | 14:07 |
| ivoks | akincer: dumb? | 14:07 |
| ivoks | akincer: well, who is the dumb one in this story? :) | 14:07 |
| akincer | dump, stupid, moronic | 14:08 |
| akincer | haha | 14:08 |
| akincer | not me | 14:08 |
| akincer | stock install | 14:08 |
| ivoks | then it's not firewall | 14:08 |
| akincer | On ifconfig, packets aren't even making it to the machine | 14:08 |
| akincer | although I can see where SOME data is coming in and out | 14:09 |
| ivoks | yesterday i saw a network setup where packages where coming in, but couldn't get out from server | 14:10 |
| ivoks | turns out that guy who is administrating network and servers doesn't have a clue about networking :) | 14:10 |
| akincer | haha, well I know enough about both to keep my sanity | 14:11 |
| akincer | I'm checking with the network guys to see if they can check the Catalyst for frame errors | 14:11 |
| ivoks | that guy's server didn't have a route to the rest of the network... | 14:11 |
| akincer | LOL | 14:11 |
| ivoks | maybe your machines don't have a route to your server/machine | 14:12 |
| akincer | If I walk into the server room and initiate a ping from the server to anything, it will start responding again | 14:12 |
| akincer | No, it does | 14:12 |
| akincer | same subnet | 14:12 |
| ivoks | intel nic? | 14:12 |
| ivoks | dapper? | 14:12 |
| akincer | I could have an invalid GW and it would still respond | 14:12 |
| akincer | Gutsy | 14:13 |
| akincer | Not sure about NIC. Onboard on a Dell | 14:13 |
| ivoks | lspci would give you a hint | 14:13 |
| akincer | Intel 82541GI | 14:14 |
| akincer | Let's see what Google says | 14:14 |
| ivoks | i put my money on broken network setup :) | 14:17 |
| akincer | Hmmm. I'll go check /etc/network/interfaces to see what it says. | 14:18 |
| ivoks | not on the server, but in network topology :) | 14:18 |
| ivoks | this sounds like all other machines don't have a clue about server's mac address | 14:18 |
| ivoks | and untill server broadcast it, they can't find it | 14:19 |
| ivoks | check arp table on clients, when your server is unavailable | 14:20 |
| akincer | I didn't configure the network, so I can't be sure. I am pretty sure there are issues though | 14:20 |
| akincer | Long story, but I don't have control over the network | 14:20 |
| akincer | I'm a one man IT shop, but the network is outsourced at the moment | 14:21 |
| akincer | Trying to get a response from the network folks about that. I'm betting you're right | 14:28 |
| ivoks | coffeedude: hi | 14:32 |
| methods | hey | 14:37 |
| methods | is there any console based tools for detecting wireless ap ? | 14:38 |
| methods | or picking any available without wep ? | 14:38 |
| ivoks | iwconfig | 14:38 |
| methods | yea but thats for setting statically | 14:38 |
| methods | i want something to display broadcasted networks | 14:38 |
| ivoks | iwlist | 14:38 |
| ivoks | iwlist interface scan | 14:38 |
| methods | oh cool! | 14:38 |
| methods | hm i got a blank essid from that | 14:39 |
| methods | hm cool! it didn't pick up on its own but a scan with a essid got it! | 14:46 |
| Gargoyle | What factors effect how long it takes for new software revisions to make it into the repos? | 15:24 |
| ivoks | mathiaz: i'll check out ucf thing; i was fully unaware of such a tool :D | 15:25 |
| ivoks | mathiaz: and... you said you have worked on ror implementation? | 15:26 |
| mathiaz | ivoks: s/implementation/design/ | 15:26 |
| ivoks | ok | 15:28 |
| ivoks | mathiaz: makefile is still broken :) | 15:30 |
| mathiaz | ivoks: you mean in tasksel ? | 15:31 |
| ivoks | yes | 15:31 |
| ivoks | it has hardcoded linking to desktop.preinst | 15:32 |
| ivoks | which is absurd... since it has : | 15:32 |
| ivoks | for script in info/*; do \ | 15:32 |
| methods | in gutsy can i use security as well as gutsy-security ? | 15:50 |
| ivoks | there's only gutsy-security | 15:51 |
| methods | so how do i get libgd2-dev then / | 15:51 |
| ivoks | there's no such package | 15:52 |
| ivoks | there are libgd2-noxpm-dev and libgd2-xpm-dev | 15:52 |
| methods | http://packages.ubuntu.com/dapper/oldlibs/libgd2-dev | 15:52 |
| methods | whats the difference in those packages ? | 15:53 |
| methods | im following the nagios ubuntu quickstart and its telling me to install this stuff | 15:53 |
| ivoks | you asked about gutsy and then pasting dapper links | 15:53 |
| methods | oh ... well i just did a google search sorry.. | 15:53 |
| ivoks | nagios quickstart in ubuntu is apt-get install angios | 15:53 |
| ivoks | nagios | 15:53 |
| methods | 6.10 is gutsy isn't i t? | 15:53 |
| ivoks | or nagios3 | 15:53 |
| ivoks | 6.10 is edgy | 15:53 |
| methods | hm | 15:54 |
| methods | the walk through is a bit oudated | 15:54 |
| ivoks | it will be obsolete in 5 months | 15:54 |
| methods | oh wow were on 7.10 right ? | 15:54 |
| ivoks | yes | 15:54 |
| methods | .10 ... thats why i thought i twas right | 15:54 |
| methods | ok well ill use the meta package | 15:55 |
| methods | but i wonder they didn't update this | 15:55 |
| methods | hm you meant nagios2 ? | 15:56 |
| ivoks | right | 15:56 |
| methods | hm see this is why i like ubuntu over pure debian | 15:57 |
| methods | so v3 is still unstable ? | 15:59 |
| methods | do you recogmend i install 3 on my own or stick with 2 ? | 15:59 |
| ivoks | i would go with v2 | 16:02 |
| ivoks | and, fwiw, ubuntu nagios2 package is exactly the same as debian's | 16:03 |
| akincer | Methods, have you looked Zenoss as an alternative to Nagios? | 16:04 |
| ivoks | methods: if you haven't - don't :) | 16:04 |
| akincer | why? | 16:05 |
| ivoks | cuse it creates user | 16:06 |
| ivoks | cause | 16:06 |
| ivoks | and puts it in sudoers | 16:06 |
| ivoks | with NOPASSWD | 16:06 |
| ivoks | so, that user can wipe your entire system, and you have a web service running under it's privileges | 16:06 |
| ivoks | i can't thnik of worst security installation out there :) | 16:07 |
| methods | wtf is zenoss ? | 16:07 |
| ivoks | zenoss.com | 16:08 |
| methods | wahts fwiw ? | 16:08 |
| ivoks | good looking nagios :) | 16:08 |
| akincer | I don't remember it doing that. Haven't tried it in a while | 16:08 |
| ivoks | akincer: i wanted to package it... i gave up very soon | 16:08 |
| akincer | I remember a few things being a PITA for no apparent reason, but no more than Nagios | 16:08 |
| ivoks | maybe it changed in last couple of months | 16:09 |
| akincer | I loaded up a VM appliance, so I couldn't honestly tell you what it did under the hood | 16:09 |
| methods | so wahts zenoss ? | 16:10 |
| akincer | zenoss is to nagios what postfix is to sendmail (in function) | 16:10 |
| methods | a cheap alternative ? | 16:10 |
| methods | it appears to offer comercialized versions | 16:11 |
| methods | im looking to help open source movement for inteligent systems | 16:11 |
| methods | not p ropritized jerks | 16:11 |
| ivoks | another problem with zenoss is that it has files without copyright | 16:13 |
| ivoks | that, and nopasswd things are the reasons why zenoss packages were never introduced in debian | 16:13 |
| ivoks | on debian guy and i wanted to package it, but we gave up after 10 minutes with that software :) | 16:14 |
| ivoks | s/on/one | 16:14 |
| methods | this package gave me no information | 16:27 |
| methods | and appears to have an internal server error when i go to the web site | 16:28 |
| akincer | Gotcha. I need to pick Nagios back up. Last time I gave it a shot, I quit after becoming extremely annoyed at how unnecessarily difficult it seemed to be to configure | 16:31 |
| Innatech | Hello. Having a problem with OpenVPN setup. Running the vars script that does a bunch of export fails to set the environment vars, while setting them at the command line works, and they seem to work within the script @ runtime in its echo statements. What gives? | 17:12 |
| Innatech | This is on 7.10 server. | 17:13 |
| lousygarua | hello | 17:27 |
| lousygarua | did anyone every use w3m-img? | 17:27 |
| lousygarua | s/every/ever | 17:27 |
| === oly_ is now known as oly- | ||
| juliux | hi | 18:57 |
| juliux | does somebody knows how can i run more then one ssh server on a server? | 18:57 |
| lousygarua | juliux, hmm you can probaby run sshd with a different configuration file specifying a differnet listening port. | 18:58 |
| lousygarua | why would you want to run two ssh servers? | 18:58 |
| juliux | i want one for users and one for backuping | 18:59 |
| juliux | for the backuping i want to use sshkeys without a passwort | 18:59 |
| juliux | but this ssh server should only work on the ip of my vpn | 18:59 |
| lousygarua | i.e. users access from WAN and backupping is only from VPN? | 19:01 |
| juliux | lousygarua, yep | 19:21 |
| juliux | lousygarua, i have several servers and clients and they should automaticly backup via rsync and ssh over the vpn | 19:22 |
| lousygarua | juliux, i don't have much experience with SVN but shouldn't it be transparent to the SSH clients whether they connect an external or LAN/VPN IP? | 19:23 |
| lousygarua | or you want the backup ssh server to accept connection *only* from LAN VPN so it's more 'secure' | 19:23 |
| juliux | i want for the vpn clients ssh with sshkeys without any passwords | 19:23 |
| lousygarua | well setting up ssh key authentication is really easy i've once done it myself for backup purposes | 19:23 |
| juliux | i know | 19:23 |
| lousygarua | no passwords | 19:24 |
| juliux | i only want an extra ssh server for the vpn;) | 19:24 |
| mralphabet | and you want passwords for the vpn connections | 19:24 |
| mralphabet | can't you do both? | 19:24 |
| juliux | mralphabet, i have keys for the vpn | 19:24 |
| lousygarua | juliux, man sshd shows a `-f` option for specifying a differnet configuration file | 19:24 |
| lousygarua | but still i don't see the use for two separate ssh servers | 19:25 |
| juliux | i don't want ssh with keys on a ssh server that is reachable from the normal wan | 19:26 |
| lousygarua | but if the vpn clients are unreachable from WAN there's no chance their private key to be stolen somehow | 19:26 |
| lousygarua | and a hacker will find it very hard to create a clone private key for connecting your servers | 19:27 |
| juliux | hmmm | 19:27 |
| lousygarua | anyway, you can probably run an additional sshd server taht only listens on 192.168.xxx.yyy so it's only available to VPN hosts | 19:29 |
| zylmak | hello im trying to install ubuntu server and i need some help | 19:34 |
| lousygarua | zylmak, what help do you need :) be more specific | 19:34 |
| zylmak | the first thing i need to know is what im doing :) ... well what im trying to do is to ser a test server behind a router | 19:35 |
| zylmak | the server dosent need to be visible from outside the router | 19:36 |
| zylmak | so the first thing i need is to set my ip adress so it will be fix | 19:36 |
| zylmak | i found the file /etc/network/interface but dont know what is broadcast for | 19:37 |
| lousygarua | zylmak, broadcast is the ip address that all hosts will listen to, smt like 192.168.0.255 | 19:38 |
| lousygarua | zylmak, because it has 255 which is binary for all 1's then the network interface on each host knows it should process the message | 19:39 |
| lousygarua | it's like screaming "HELLO EVERYONE" in your lan | 19:39 |
| zylmak | ok | 19:40 |
| lousygarua | anyone knows of a CLI WebDaV client? | 19:41 |
| * lousygarua will be back soon | 19:42 | |
| zul | cadaver maybe? | 19:47 |
| proprietarysucks | how do I stop ubuntu from asking me to continue when it says it cannot verify the security (aka it can't access the internet) during a kickstart installation? | 20:11 |
| proprietarysucks | also what is the kickstart syntax for a swap partition for ubuntu? the 'regular' way isn't working | 20:11 |
| zylmak | my next question is: do i need dhcp and bind, since my isp give the ip address to my rooter | 20:11 |
| zylmak | oups time to go to a reunion will come back later | 20:14 |
| ivoks | hello | 20:24 |
| ivoks | anyone has anything against maildir by default in mail-server task? | 20:25 |
| proprietarysucks | neverming I figured out the second question | 20:27 |
| proprietarysucks | man it's hard finding anyone in ubunut that actually KNOWS ubuntu | 20:28 |
| somerville32 | lol | 20:28 |
| ivoks | hm | 20:28 |
| mralphabet | and by ubuntu you mean kickstart | 20:28 |
| proprietarysucks | no I mean ubuntu | 20:31 |
| proprietarysucks | kickstart is the same protocol, ubuntu decided to accept or not accept various parameters | 20:32 |
| ivoks | kickstart isn't a protocol | 20:32 |
| proprietarysucks | for example in ubuntu server 6.10 you can't use --noipv6 | 20:32 |
| proprietarysucks | that's not kickstart, that's ubuntu | 20:32 |
| ivoks | i repeat, kickstart is not a protocol, it's a file | 20:32 |
| proprietarysucks | also you have to use part swap --size 2048 instead of part --fstype swap --size 2048 because of ubuntu | 20:33 |
| proprietarysucks | kickstart is a file that follows the kickstart protocol to feed selections to anaconda, the red hat installer | 20:33 |
| ivoks | kickstart is a file, used to load some settings into anaconda | 20:34 |
| ivoks | in ubuntu, sane people, use it just to get to preseeding | 20:34 |
| ivoks | preseeding, otoh, has much more power than kickstart | 20:35 |
| proprietarysucks | if an OS doesn't accept an option it's not because kickstart is somehow different for that OS, it's because that OS has arbitrarily changed their anaconda (or other) input mechanisms | 20:35 |
| proprietarysucks | therefore it's ubuntu not kickstart | 20:35 |
| ivoks | i'm not sure who told you that ubuntu supports all options in kickstart... | 20:35 |
| ivoks | but it doesn't | 20:35 |
| ivoks | and that's not a secret | 20:35 |
| spiekey | hi | 20:36 |
| spiekey | i can´t log into webmin as root anymore. | 20:36 |
| lousygarua | proprietarysucks, what is kickstart either way | 20:36 |
| proprietarysucks | all I asked was how to get ubuntu to stop the automatic installation to ask me a question | 20:36 |
| spiekey | i get: Nov 28 21:32:17 localhost webmin[7500]: Invalid login as root from 127.0.0.1 | 20:36 |
| proprietarysucks | I know ubuntu doesn't support all the optiosn | 20:36 |
| spiekey | i wonder why?! Since ssh works with root | 20:37 |
| zul | then why complain? | 20:37 |
| jjesse | spiekey: you mentioed anymore? does that mean at one time you were able to login as root? | 20:37 |
| jjesse | spiekey: so you enabled root? | 20:37 |
| spiekey | jjesse: for the last 2 years, yes | 20:37 |
| spiekey | oversudden it does not work anymore, and i dont think i updated the machines in the last few month either. | 20:37 |
| spiekey | webmin uses the pam infos (user/pass) to auth, right? | 20:38 |
| jjesse | that's wierd that all of the sudden it changed | 20:38 |
| jjesse | i think so, someone might be able to correct me | 20:38 |
| jjesse | been awile since i used webmin | 20:38 |
| spiekey | oh, he?! | 20:38 |
| proprietarysucks | I just installed ubuntu 6.10, using kickstart and it has stopped the automatic installation to ask me if it's ok to proceed after not being able to reach security.ubuntu.com. How do I automatically say yes here? It's not a kickstart question because red hat linux doesn't do this. It's a ubuntu question because it is obviously wanting some custom argument, and the ubuntu documentation on this particular issue is | 20:39 |
| spiekey | the old password works! | 20:39 |
| spiekey | jjesse: its the password from 2006! | 20:39 |
| spiekey | wtf?! | 20:39 |
| ivoks | proprietarysucks: preseeding | 20:39 |
| ivoks | look for debian preseeding | 20:39 |
| ivoks | learn it and then come back saying 'omg, i didn't know kickstart is so lame' | 20:40 |
| ivoks | :) | 20:40 |
| jjesse | spiekey: sorry, don't mean to be rude, but does google help? | 20:40 |
| spiekey | jjesse: not with the error messages i get in my logs | 20:41 |
| proprietarysucks | our system automatically detects and configures all configurations of hard drives, nics, packages and everything we need, not sure how much better it can be | 20:41 |
| proprietarysucks | the only thing that's not working right now is that ubuntu stops and complains about not being able to call home | 20:41 |
| spiekey | webmin must have its own passwd file or something..?! | 20:41 |
| ivoks | i give up | 20:41 |
| jjesse | spiekey: thats what i meant when i asked about google can you google webmin password file or something, sorry a little busy with work | 20:42 |
| proprietarysucks | anyone know someone who actually knows ubuntu | 20:42 |
| jjesse | i know ivoks | 20:42 |
| somerville32 | proprietarysucks, Whats the issue? | 20:43 |
| spiekey | jjesse: i feel so dumb now :-/ | 20:43 |
| jjesse | spiekey: did it? | 20:43 |
| proprietarysucks | I just want to know what kickstart option ubuntu is waiting for to allow it to not stop and ask if it's ok to proceed when it can't contact security.ubuntu.com | 20:43 |
| jjesse | spiekey: don't worry i do stupid things all the time | 20:43 |
| jjesse | or what i feel are stupid things | 20:44 |
| ivoks | proprietarysucks: kickstart doesn't support these things, preseed does | 20:44 |
| spiekey | jjesse: you are a sysadmin, right? :D | 20:44 |
| mralphabet | !webmin @ spiekey | 20:44 |
| ivoks | we don't support webmin | 20:44 |
| proprietarysucks | ivoks: kickstart is a text file, it supports anything you can type | 20:44 |
| mralphabet | bah | 20:45 |
| mralphabet | !webmin | 20:45 |
| ubotu | webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system | 20:45 |
| jjesse | spiekey: not right now, full time consultant but used to be a sys admin | 20:45 |
| ivoks | proprietarysucks: it doesn't support answering to questions, preseed does | 20:45 |
| ivoks | proprietarysucks: preseed will intercept question and provide an answer | 20:45 |
| ivoks | kickstart doesn't do that | 20:45 |
| proprietarysucks | kickstart doesn't do anything | 20:46 |
| ivoks | kickstart has limited number of functions | 20:46 |
| proprietarysucks | it's a text file | 20:46 |
| proprietarysucks | perhaps you are thinking of anaconda? | 20:46 |
| ivoks | preseed can be used to set up debconf entries | 20:46 |
| ivoks | we are not talking about anaconda here, since we don't use anaconda | 20:46 |
| proprietarysucks | you are a very confused person about this | 20:47 |
| proprietarysucks | kickstart is a text file, there's no functions | 20:47 |
| proprietarysucks | the program, called anaconda, reads this file and interprets the info | 20:47 |
| ivoks | really? | 20:47 |
| ivoks | so... which anaconda reads that file in ubuntu? | 20:47 |
| ivoks | cause we don't have it | 20:47 |
| proprietarysucks | ubuntu also has decided to read these files, taking it's own CUSTOM text files | 20:47 |
| jjesse | so use preeseed | 20:47 |
| proprietarysucks | ubuntu also has decided to read these files, taking it's own CUSTOM text commands | 20:48 |
| ivoks | proprietarysucks: then use redhat, where's the problem? | 20:48 |
| proprietarysucks | such as this one, you may recall: user --disable | 20:48 |
| proprietarysucks | that's in the kickstart file and *ubuntu* recognizes it as meaning something | 20:48 |
| proprietarysucks | I'm asking if anyone anywhere knows what other custom commands like this ubuntu has applied to the normal kickstart template | 20:49 |
| ivoks | this guy reminds me on one my ex professors | 20:49 |
| ScottK | ivoks: I think maildir by default is an excellent plan. | 20:50 |
| ivoks | ScottK: i agree | 20:50 |
| ivoks | :) | 20:50 |
| ScottK | Just saying so if anyone complains you can say it wasn't just you deciding to do it. | 20:50 |
| ivoks | :) | 20:51 |
| ScottK | ivoks: I'm started on the amavisd-new MIR. While it's still in Universe and I can upload changes, is there anything else you think we should do to the package? | 20:52 |
| ivoks | hm... | 20:53 |
| ivoks | we could provide some stuff during tasksel install | 20:54 |
| ScottK | No rush. It'll be sometime next week before I get the MIR done. | 20:54 |
| ivoks | amavis has amavis.d, so that would be much easier than with dovecot :) | 20:54 |
| ivoks | we will just drop configs for mail-server task there, and that will be it | 20:55 |
| ScottK | Our diff from Debian is pretty small right now. If there's anything else we want to change, I'd like to send it all up to them at once. | 20:55 |
| ScottK | OK | 20:55 |
| ivoks | we will not change amavis package | 20:55 |
| ivoks | we will leave it default... | 20:55 |
| ivoks | mail server task from tasksel will drop special stuff we decide to have | 20:55 |
| ivoks | so... apt-get install postfix dovecot-imapd amavisd-new gives you default installation | 20:56 |
| ivoks | sudo tasksel install mail-server gives you all that + ubuntu server team goodies | 20:56 |
| proprietarysucks | Does anyone know the complete list of custom commands like user --disabled ubuntu has applied to the default kickstart template? | 20:56 |
| zul | proprietarysucks: maybe looking at the source might help | 20:57 |
| ivoks | ScottK: any objections to: | 21:07 |
| ivoks | smtpd_recipient_restrictions = reject_invalid_hostname, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated | 21:07 |
| ivoks | ? | 21:07 |
| ScottK | ivoks: reject_invalid_hostname should be reject_invalid_helo_hostname if we want it. | 21:11 |
| ScottK | The use case here is for an all in one mail server for sending and receiving mail for a domain, right? | 21:12 |
| ScottK | If that's the case then reject_invalid_hostname is something we don't want as MUAs often have a bogus HELO name. | 21:12 |
| ScottK | ivoks: Let me think about this one for a bit. | 21:13 |
| ivoks | well, bad clients would get 501 | 21:13 |
| ivoks | ok, maybe we shouldn't go so tight... | 21:14 |
| ScottK | What I'm thinking is we should have 465 (for smtps) and 587 enabled with the looser restrictions and keep port 25 tight for recieving mail. | 21:15 |
| ScottK | Gotta run out for a bit. | 21:16 |
| ivoks | oh, you would enable 587? | 21:21 |
| close2__ | hello, i have a script, which dd's a few bytes every 5 seconds from an external usb-disk and mounts and rsync every 15 minutes | 21:36 |
| close2__ | sometimes the mount -t ntfs-3g just hangs | 21:36 |
| close2__ | an strace -p ... shows that the mount tries to: read(4, <unfinished ...> | 21:37 |
| close2__ | do you have an idea, why this could happen? How to avoid it? | 21:37 |
| ivoks | check what file has an ID 4 | 21:37 |
| ivoks | and this is not server related question | 21:37 |
| ScottK | ivoks: Yes. If we're supporting sending and receiving. That's really how it ought to be done. There's even a recent RFC (BCP actually) about it. | 21:37 |
| close2__ | it's the server kernel, that's why i though i should ask here | 21:38 |
| ivoks | ScottK: then we should do that by default in postfix, right? | 21:38 |
| ScottK | ivoks: For an appropriate debconf choice, yes. | 21:39 |
| ivoks | close2__: look for open ("/some/file", O_RDONLY|)_RWRITE) = 4 | 21:39 |
| lamont | ScottK: MTAs also frequently have bogus hostnames | 21:39 |
| lamont | little companies like IBM, last I ran into it. | 21:40 |
| lamont | (the ehlo hostname resoves in their _INTERNAL_ dns...) | 21:40 |
| ScottK | lamont: Agreed. | 21:43 |
| ScottK | lamont: I'd have to look the name up but there's now a test you can do just for rDNS existance that I think is a reasonable default. | 21:44 |
| lamont | ok. the IBM host was NXDOMAIN... OTOH, that was a few years back, maybe they finally agreed that it was stupid | 21:45 |
| ScottK | IBM currently has PTR names like e1.ny.us.ibm.com. I don't have ready access to HELO names. | 21:46 |
| ScottK | AOL requires rDNS, so I think it's safe for our default to require it. | 21:46 |
| === MenZano is now known as MenZa | ||
| lamont | ok. | 21:48 |
| lamont | rDNS == reverse dns, yes? | 21:48 |
| ScottK | Yes | 21:48 |
| ScottK | As in PTR for the IP. | 21:48 |
| lamont | right | 21:48 |
| lamont | just making sure there wasn't some new TLA I was missing | 21:48 |
| * ScottK notes in passing that it had 4 letters ... | 21:48 | |
| lamont | yeah... but FLA isn't self-referencing | 21:49 |
| ScottK | But it sounds naughtier. | 21:49 |
| ivoks | ok, uploading new patch | 21:54 |
| ivoks | done | 21:55 |
| ivoks | please, do comment, suggest, etc... | 21:56 |
| lamont | patch to? | 21:56 |
| ivoks | bug 164837 | 21:56 |
| ubotu | Launchpad bug 164837 in dovecot "Dovecot SASL for postfix" [Low,In progress] https://launchpad.net/bugs/164837 | 21:56 |
| ivoks | patch for tasksel | 21:56 |
| lamont | through, for future ref | 21:57 |
| lamont | what more are we doing in postfix to finish lighting up sasl? | 21:58 |
| lamont | and where is it authenticating against? | 21:58 |
| ivoks | oh... | 21:58 |
| ivoks | sorry... damn | 21:58 |
| ivoks | forgot the first part :D | 21:58 |
| lamont | lmtp_sasl_type = cyrus | 21:58 |
| lamont | smtp_sasl_type = cyrus | 21:58 |
| lamont | smtpd_sasl_type = cyrus | 21:58 |
| lamont | and those prolly need to change, no? | 21:58 |
| ivoks | yeah... | 21:59 |
| ScottK | lamont: The immediate question was do we enable port 587 by default for submission (I'd say yes for any debconf option that supports internet submission). | 21:59 |
| ScottK | lamont: Details. | 21:59 |
| soren | ivoks: Are there any reasons why those settings shouldn't be the default? | 21:59 |
| lamont | because, ideally, I'd like to just have sasl configured by default in postfix (modulo debconf, of course) | 22:00 |
| soren | ivoks: Most (all?) of the settings in dovcecot.conf look sane even outside of the postfix sasl stuff. | 22:00 |
| soren | ivoks: All the more reason to make it the *actual* default, and not only the default when you've installed dovecot in a particular way. | 22:01 |
| lamont | ScottK: I'm OK with enabling 587 by default any time postfix is listening on port 25 | 22:01 |
| * lamont reviews his templates | 22:01 | |
| ScottK | lamont: How about 465 for smtps too then? | 22:01 |
| lamont | ScottK: any time that we turn on ssl, yes. | 22:02 |
| lamont | :-) | 22:02 |
| ScottK | It's needed for non-starttls MUAs (notably Outlook Express and Outlook < 2007) | 22:02 |
| ScottK | OK | 22:02 |
| ivoks | soren: no sane reasons :) | 22:02 |
| ivoks | i would be happier to do this by default | 22:02 |
| ScottK | lamont: Are you good with that for Debian too? | 22:02 |
| soren | ivoks: I'd much prefer that to any post-installation rewriting of config files. If there are saner defaults, we should apply them globally. | 22:03 |
| lamont | ScottK: there is only one postfix. :0 | 22:03 |
| ScottK | lamont: Good. Just making sure we stay that way. | 22:03 |
| lamont | I only have one forked package (util-linux), and that's purely because of build-deps | 22:04 |
| lamont | which I can't do at run time | 22:04 |
| ivoks | we went with tasksel cause we don't want to override stuff for old users | 22:04 |
| soren | ivoks: Well just have to deal with that some other way. | 22:05 |
| lamont | ivoks: I need to not muck with conffiles except as I get told by new debconf answers. | 22:05 |
| lamont | and make the default install do the right hting | 22:05 |
| soren | ivoks: Apart from the Maildir change, all the settings could be (relatively) safely applied to existing configurations. | 22:05 |
| soren | lamont: it's not a conffile (in the dpkg sense) | 22:05 |
| ivoks | i'm trying to recall why we wanted to do it this way... | 22:06 |
| soren | lamont: and even if it were, it wouldn't be kosher to fiddle with it regardless of debconf. | 22:06 |
| lamont | soren: there are nuances. | 22:06 |
| ivoks | anyway... doing it by default is what i prefere... | 22:07 |
| lamont | postfix doesn't list master.cf and main.cf as conffiles simply because the questions from dpkg about who wins, me or the admin, are confusing to most endusers. | 22:07 |
| lamont | aka admins | 22:07 |
| ivoks | ah, i know! | 22:07 |
| lamont | when postfix asks a question in debconf, it has met the policy requirement of getting permission before mucking. When it's required to muck, preinst does the asking, and aborts the upgrade if you say 'no'. | 22:08 |
| ivoks | it's because we can't force these changes into debian, and we would like delta to be as small as it can | 22:08 |
| lamont | adding a new question for home_mailbox kinda needs can do interesting things with the defaults based on existing/not-existing configs, but ultimately, changing it from upstream's default means that I need to make it at least medium pri | 22:09 |
| ivoks | cause they don't prefere postfix over exim, and/or dovecot over cyrus | 22:09 |
| soren | ivoks: I'd much rather maintain a delta in the default config file than the tasksel change. | 22:09 |
| lamont | ivoks: I think we're going to upload a default-mail-transport-agent package to debian, and then start the discussion about having people start Depending on that.... | 22:09 |
| lamont | ivoks: having the default be different between debian/ubuntu is not an issue... postfix already knows what it's building for... | 22:10 |
| soren | lamont: I've got that packaga on my laptop, by the way. I just need to extract it and send it your way. | 22:10 |
| lamont | soren: please | 22:10 |
| lamont | soren: if we're going to do it as a debian package, how do you feel about housing it in git.debian.org? | 22:11 |
| soren | lamont: git and I are not friends. | 22:11 |
| lamont | soren: git 1.5? or unusably ancient 1.4? | 22:12 |
| soren | lamont: But... um.. certain other things force me to use git real soon anyway, so I might as well. | 22:12 |
| soren | lamont: No idea. | 22:12 |
| ivoks | so... we are giving up on tasksel? :) | 22:12 |
| lamont | soren: go to git.debian.org and create yourself a guest account... then let me know I'll see about getting us a joint-development gid to assign so that we can share one repo instead of two. | 22:13 |
| soren | ivoks: If we implement your postconf changes from that patch into default postfix, and there's dovecot around, what will happen? | 22:13 |
| lamont | ivoks: tasksel probably still has _some_ work to do. | 22:13 |
| ivoks | that's not an issue... | 22:13 |
| ivoks | issue is if someone has saslauthd | 22:13 |
| soren | lamont: Like what? | 22:14 |
| soren | ivoks: What will happen then? | 22:14 |
| lamont | I expect that the change will wind up being that postfix will Recommend cyrus (debian) or dovecot (ubuntu), and then set things up if it's a fresh install | 22:14 |
| ivoks | soren: we are binding postfix to dovecot here, but not everybody has dovecot for imap/pop | 22:15 |
| lamont | tasksel needs to at least pull in dovecot... I think it wants to be a suggests maybe? | 22:15 |
| lamont | for postfix, that is | 22:15 |
| ivoks | well... wais a sec... | 22:15 |
| ivoks | wait... | 22:15 |
| ivoks | dovecot-common isn't imap/pop | 22:15 |
| lamont | ivoks: what I was hoping to do for postfix was to ... | 22:15 |
| soren | ivoks: Precisely. | 22:15 |
| ivoks | so we can have dovecot-common and cyrus at the same time | 22:16 |
| soren | brb | 22:16 |
| lamont | at postfix configure time, if we haven't done it before, ask the admin if he wants to set up sasl, pointing at dovecot or cyrus as appropriate (depending on what's installed, maybe). | 22:16 |
| lamont | the default answer would be where we'd bind postfix to $SASL | 22:16 |
| ivoks | right | 22:16 |
| lamont | which could vary between distros | 22:16 |
| lamont | +postconf -e "broken_sasl_auth_clients = yes" | 22:17 |
| lamont | ew | 22:17 |
| ivoks | could we 'preseed' debconf value for that question in ubuntu? | 22:17 |
| lamont | I suppose, thouhg. | 22:17 |
| soren | Can't we just make all the saslauth provides put their socket in the same place and not care? | 22:17 |
| lamont | ivoks: we already have places where the source conditionally compiles around ubuntu vs debian... no need to go playing with preseeds... :0) | 22:18 |
| soren | We have a lower default priority for debconf questions. | 22:18 |
| ScottK | soren: No. I really don't think so. | 22:18 |
| soren | ScottK: Because? | 22:18 |
| ScottK | Because they work differently. | 22:18 |
| lamont | soren: and the port25 banner is different | 22:18 |
| lamont | we have to know which it is. | 22:18 |
| ScottK | Even in Cyrus you have to decide on sasldb versus auxprop and that affect a bunch of stuff. | 22:19 |
| lamont | and the options are "cyrus" "dovecot" and "die, hellspawn" | 22:19 |
| lamont | er, "no' | 22:19 |
| lamont | :-) | 22:19 |
| * ScottK will review the source before trying that last one. | 22:19 | |
| soren | Ok, I wasn't aware. | 22:19 |
| soren | i though they had some sort of well defined protocol. | 22:19 |
| lamont | soren: this conversation is teaching me much wrt SASL... | 22:19 |
| soren | Man, typing is hard! | 22:19 |
| lamont | it's been on my "I should figure this out sometime" list for about 5 years or so now. | 22:20 |
| ivoks | soren: i gave up on typing... it's 23:30 :) | 22:20 |
| lamont | and hardy is a perfect time to fix it. | 22:20 |
| soren | lamont: So the protocol with which you communicate is dependant on the server at the other end? | 22:20 |
| lamont | yes | 22:20 |
| ivoks | yes | 22:20 |
| ivoks | postfix supports two | 22:20 |
| soren | craptastic | 22:20 |
| ivoks | dovecot and cyrus | 22:20 |
| ivoks | iirc | 22:20 |
| lamont | soren: hence the *_sasl_type variables | 22:21 |
| soren | Like completely different as in there's no specification or are people just interpreting them in different ways? | 22:21 |
| ivoks | like dbus and dcop :) | 22:21 |
| lamont | two separate implementations of two separate designs. | 22:21 |
| lamont | no common spec. | 22:21 |
| soren | Fantastic. | 22:21 |
| ivoks | there's no 'standard' | 22:21 |
| soren | brb | 22:22 |
| lamont | soren: think windoze vs linux. :-) | 22:22 |
| lamont | only this time both suck. differently. | 22:22 |
| lamont | ivoks: btw, good to run into you again - haven't had any good chance to chat since Mataro, wasn't it? | 22:22 |
| ivoks | mataro? | 22:23 |
| ScottK | soren: SASL is defined, but that's on the wire. The MTA to SASL implementation API is implementation specific | 22:23 |
| * ivoks is kind of slow atm | 22:23 | |
| lamont | ivoks: I somehow got the impression that we'd maybe met in Mataro. | 22:23 |
| lamont | @UDS | 22:23 |
| ivoks | i was only on last uds at cambridge | 22:24 |
| ivoks | mataro sounds spanish :) | 22:24 |
| lamont | ah. I guess more than one person lives in .hr :) | 22:24 |
| ivoks | :) | 22:24 |
| lamont | ivoks: that's because it's in spain. :) | 22:24 |
| ivoks | i don't know who else would be there from .hr... | 22:25 |
| somerville32 | I'd like to go to the next UDS or the next one after that | 22:25 |
| ScottK | lamont was at the last UDS too, so maybe you two actually did meet there. | 22:25 |
| ivoks | hm... maybe :) | 22:25 |
| lamont | quite possibl | 22:25 |
| lamont | e | 22:25 |
| * ScottK recalls meeting both of you. | 22:26 | |
| kgoetz | hi all... anyone willing to look at some openldap debuging output? http://pastebin.ca/801011 i have two users in ldap, i belive both have valid passwords. on user (kgoetz) has a local account as well. only kgoetz can log in, the other (kim) cops an error. suggestions about how to go about debuggin this woul be good too :/ | 22:26 |
| ivoks | ScottK: i remembre you on package review session; we agreed on amavis :) | 22:27 |
| ScottK | Yep. | 22:28 |
| ivoks | typos... | 22:28 |
| lamont | kgoetz: does ldapsearch find the user? and what about when you bind with the rootdn? | 22:28 |
| ivoks | so, postfix preinst should check sasl method and then, if none, set dovecot :) | 22:29 |
| ivoks | if there is /etc/dovecot/dovecot.conf :) | 22:29 |
| lamont | ivoks: I don't think setting type hurts us in any case... | 22:29 |
| lamont | and it'd be postinst that did it. config that decided the default.. | 22:30 |
| ivoks | right, not preinst... | 22:30 |
| ivoks | i know that dovecot will not start if /var/spool/postfix/private/auth doesn't exist | 22:31 |
| ivoks | so, postfix must be installed before dovecot-common | 22:31 |
| ivoks | this is why it's so easy to do it in tasksel.postinst :) | 22:31 |
| kgoetz | lamont: just checking | 22:32 |
| kgoetz | ldapsearch is whining about sasl :\ | 22:32 |
| lamont | kgoetz: I have to go fetch kids, but I have a mixed local and ldap world that I can help walk you through fixing your issue once I get back online... what TZ are you? | 22:32 |
| lamont | ah. | 22:32 |
| lamont | trivia.l | 22:32 |
| kgoetz | lamont: AUS, ~+10.30. its 9am atm. | 22:33 |
| lamont | does ldapsearch -x work? | 22:33 |
| lamont | cat <<EOF>>/etc/ldap.conf | 22:33 |
| lamont | use_sasl no | 22:33 |
| lamont | rootuse_sasl no | 22:33 |
| lamont | EOF | 22:33 |
| lamont | and no, that's not documented anywhere I could find | 22:33 |
| kgoetz | ah. -x | 22:33 |
| lamont | s/that's/that was/ | 22:33 |
| lamont | ok. 'twould suck more if you were in europe somewhere... it'll take me somewhere around 1.5-2 hours before I'll be back online, once I leave in < 5 min | 22:34 |
| kgoetz | thanks for the poiter, i'll have a hack | 22:34 |
| kgoetz | np. | 22:34 |
| lamont | and I'm gone | 22:40 |
| kgoetz | later | 22:41 |
| ivoks | bye | 22:41 |
| ivoks | 'night all | 22:41 |
| ivoks | :) | 22:41 |
| === Drazha130 is now known as Drazha | ||
| phaidros | hi, I have a problem with apt. http://pastebin.ca/801042 | 22:51 |
| phaidros | I have xen-common installed, and can neither update, remove nor reinstall it :( | 22:52 |
| phaidros | any ideas? | 22:52 |
| kgoetz | are you root? (did you run it with sudo?) | 22:53 |
| phaidros | I am root | 22:54 |
| phaidros | hi kgoetz :) I ve seen your name in the gobuntu list alot | 22:54 |
| kgoetz | ah oh :) | 22:55 |
| phaidros | I am root with sudo -s | 22:55 |
| kgoetz | try running `apt-get -f install` | 22:55 |
| phaidros | E: The package xen-utils-3.0 needs to be reinstalled, but I can't find an archive for it. | 22:56 |
| phaidros | I'll put it in /var/cache/apt/.. but I believe its the same then like dpkg .. | 22:56 |
| phaidros | it even doesn't recongnize the package in /var/cache/apt/archives | 22:57 |
| === paul____ is now known as pschulz01 | ||
| kgoetz | phaidros: try `apt-get update` then `apt-get install --reinstall <yourpackag>` | 22:58 |
| kgoetz | or whatever the aptitude equivilent is :) | 22:58 |
| phaidros | aptitude samesame apt-get (usually) | 22:59 |
| kgoetz | i know aptitude has a 'reinstall' instead of 'install --reinstall' *wants apt to not need stupid extra switch* | 23:00 |
| phaidros | no way. ok further the problem it, that I am currently trying to dist-upgrade, therefor there shouldn't be the same version in the tree. | 23:01 |
| phaidros | but even if I put the package with the same version in /var/cache/apt/archives/ it doens't fly :/ | 23:01 |
| kgoetz | did you download the package seperately? | 23:02 |
| phaidros | yes. | 23:02 |
| phaidros | it is an edgy install, trying to upgrade to feisty / gutsy (tried both) | 23:02 |
| phaidros | got the edgy packages. the dist-upgrade got the feisty (and gutsy) package already as well .. | 23:03 |
| kgoetz | ah... this could get interesting. | 23:03 |
| kgoetz | but brb | 23:03 |
| phaidros | ok | 23:03 |
| phaidros | kgoetz: force might be the only way .. | 23:08 |
| kgoetz | phaidros: yes, forcing will be required. | 23:11 |
| phaidros | even --force-remove-reinstreq doesn't solve :( | 23:11 |
| kgoetz | phaidros: you'll have to try to go from whatever state your system is in now, to a feisty system. | 23:11 |
| kgoetz | then move from there. | 23:11 |
| phaidros | how? | 23:11 |
| phaidros | I am blocked :) | 23:11 |
| phaidros | maybe force-all .. which I generally try to avoid | 23:12 |
| kgoetz | change sources list, update, try to dist-upgrade, see where it bails. force packages to install as needed | 23:12 |
| phaidros | well, thats were I hang .. exactly the xen-utils .. I found no way around that yet. | 23:13 |
| phaidros | all apt-get / aptitude / dpkg fail on that package .. I'll have a look in the var/lib/dpkg/info/xen-utils-3.0.postinst | 23:14 |
| kgoetz | find the package this is in xen.xend.server (and by extentio the file), make sure its tehre | 23:14 |
| phaidros | sry, extentio ? | 23:16 |
| kgoetz | *extention | 23:16 |
| phaidros | which dpkg switch helps me finding that package? | 23:18 |
| kgoetz | -S | 23:18 |
| kgoetz | iirc | 23:18 |
| phaidros | no way to fing :/ | 23:23 |
| phaidros | find | 23:23 |
| soren | What's the problem? | 23:24 |
| phaidros | xen-utils cannot get updated, removed, reinstalled .. tried all common tricks (force-all, apt-get install -f) | 23:25 |
| phaidros | http://pastebin.ca/801042 | 23:25 |
| === Drazha436 is now known as Drazha | ||
| soren | sudo dpkg -P --force-remove-reinstreq xen-utils-3.0 = | 23:25 |
| soren | Er.. no "=" at the end. | 23:25 |
| soren | Or -r if you don't want to purge the config files. | 23:26 |
| phaidros | samesame .. http://pastebin.ca/801064 | 23:26 |
| phaidros | yeah, and thats the tricky part now :) | 23:26 |
| phaidros | any ideas where to tinker? | 23:28 |
| soren | Yes, I'm just trying to find the cleanest way. | 23:29 |
| soren | phaidros: Not to worry, we'll get it removed in a minute. | 23:30 |
| phaidros | hehe, I got it: replacing /usr/bin/xend with a bashscript saying only "exit 0" helped!! | 23:31 |
| soren | Well, somethings clearly botched, so if you can live with it might not cleaning up a conffile here or there... | 23:31 |
| soren | Yes, that's one way. :) | 23:31 |
| phaidros | what would have been an alternative? | 23:31 |
| soren | Something along the same lines. | 23:31 |
| * phaidros proud | 23:31 | |
| soren | I'd have edited the preinst script, but the effect would be precisely the same. | 23:31 |
| phaidros | :) | 23:31 |
| phaidros | cool! | 23:31 |
| phaidros | thanx alot soren & kgoetz ! | 23:32 |
| soren | It's really not the right way to go about it, but.. yeah, well. | 23:32 |
| phaidros | yeah, but if any standard ways fail .. well, no options given the crude way wins the beauty contest | 23:33 |
| phaidros | :) | 23:33 |
| phaidros | ah something else: how to blacklist packages (eg all xserver related on a server) | 23:34 |
| phaidros | (because I finally got X packages in on one machine, and cannot see which dependency might have caused this) | 23:35 |
| soren | phaidros: If you try to remove them with apt-get, any package that depends on them will be removed. | 23:35 |
| soren | phaidros: ...so you can see if anything looks familiar. | 23:36 |
| phaidros | yeah I believe it is some gdlib or graphviz or such for php | 23:36 |
| phaidros | but anyhow, is there a clean way to block a group of packages under any circumstances/ | 23:37 |
| phaidros | ? | 23:37 |
| soren | Well, yes, but it really shouldn't be necessary. | 23:37 |
| phaidros | hehe, not in an ideal world ;) | 23:38 |
| soren | If you install a package that needs some x libraries, well... it needs some x libraries. | 23:38 |
| phaidros | but as we've just seen .. world tends to non-idealism. I usually call that an entropic issue | 23:38 |
| soren | phaidros: Can you give me a use case for it? | 23:38 |
| phaidros | uhm, I need a package like imagemagick for php or cli/scripting purposes on my server, and that package depends somehow (because it is mainly a desktop distro) on X .. I don't want X on a server | 23:39 |
| soren | Well, do you need imagemagick or don't you? | 23:40 |
| phaidros | I do, but no X | 23:40 |
| soren | It's not installing X. | 23:40 |
| soren | It's probably installing a few x libraries. | 23:40 |
| phaidros | yeah, it was in old debian days. and there are surely packages around which have same strange dependencies nowadays | 23:41 |
| soren | Seriously.. If a package in Ubuntu depends on another package... It *really* depends on it. It won't work without it. | 23:41 |
| phaidros | oh, ok | 23:41 |
| soren | And installing imagemagick won't install an X server. | 23:41 |
| phaidros | so, as soon as my xen instance is back alie i can go and check which dependency caused this | 23:41 |
| phaidros | alive | 23:42 |
| soren | X libraries are not uncommon on servers, I believe. | 23:42 |
| phaidros | really? I have always a strange feeling if I see X packages on servers | 23:42 |
| phaidros | thats imho a bad redhat&friends habit | 23:43 |
| phaidros | uh oh, now I get segfaults on dist upgrade edgy->gutsy | 23:44 |
| phaidros | is it save to reboot if module-init-tools are not installed properly (there is the segfault) | 23:46 |
| phaidros | ? | 23:46 |
| phaidros | it is | 23:50 |
| phaidros | ok, libc6-xen is the solution for the segfaulting upgrade | 23:55 |
| kgoetz | edgy -> gutsy == bad upgrade path | 23:57 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!