[02:01] okay. I'm planning on making a ftp/php/sql/ssh server. However, the only disk I have handy is a ubuntu 7.10 desktop install disk. Can I convince it to do a server install, or do I have to wait till I can find another burner? [02:06] You have to install the Desktop, but you can then convince it to transform itself. [02:08] how would I go about doing so, then? (I was planning to reinstall it, it's currently an ubuntu desktop, but I'd like to change it to a server) [02:10] sudo apt-get remove ubunt-desktop [02:10] sudo apt-get install (I think) ubuntu-server [02:10] sudo apt-get autoremove [02:10] Should get you in the ball park [02:11] hopefully. I'll double-check the packages before I get going. Thank you. [02:11] If you really want ubuntu-server you'll need to install the -server kernel, but that probably won't make a significant difference [02:12] nah. If I was gonna go that far, I'd just compile my own. [02:14] hm. here's one more interesting one. Any good ideas for rotating the display of the CLI 180 degrees? [02:14] No. Sorry. [02:16] thought not, but thought I'd try. Thank you for everything. [02:18] ubuntu-server isn't a package. there's ubuntu-minimal and -serverguide... and -standard. [02:20] Then skip that step [03:01] Hiya, I've created a patch to ubuntu-jeos-builder to add --user, --name, --pass options. The patch was made against the version from nijaba. How do I give it to someone so it can be used? [03:08] Assuming someone else also thinks those options are useful :) [03:10] owh: not sure who to aask about that [03:11] I'm not sure my little patch justifies registering another branch, nor do I understand really how launchpad deals with code - trying to figure out who did what seems pretty complicated. [03:12] I suppose I could just email the patch to soren? [03:12] * kgoetz has no idea bout LP and source stuff [03:13] That makes two of us then :) [03:13] hehe :) [03:13] Any idea which TZ Soren is in? [03:14] +1.5 iirc (EU) [03:15] Yeah, just found it. [03:15] Another four hours or so. I'll give him a tag. [03:15] Thanks kgoetz. [03:16] np [03:24] can someone help me with my apache2 server? [03:30] thomas_newbie__: Depends on what your actual problem is. [03:31] I changed my default location /var/www/ folder to /home/username/public_html/ in my config file. I am getting an error whenever trying to connect. 403 forbidden to access / [03:31] What are the permissions on that directory? [03:31] Apache runs under a different user. [03:31] If it cannot read your directory, it cannot server a page. [03:32] apache runs under root? [03:32] how can I make it work? [03:32] Type this in: cd /home/username ; ls -l public_html [03:33] Tell us what it says. [03:34] owh: well it gives me the 2 pages i have [03:34] permissions set to: 755 [03:34] uh, sorry, ls -ld public_html [03:36] What we're trying to determine is if apache can read your public_html directory [03:37] * dthacker suspects that apache runs as www-data [03:37] Very likely, but at the moment we cannot tell if it is able to actually read the directory. [03:37] * owh suspects it's only readable to the user. [03:38] * dthacker nods [03:38] ok one sec [03:46] so what am I suppost to see? [03:46] owh: [03:47] Yes [03:47] what am I suppost to see? [03:47] One mo. [03:48] thomas_newbie__: Copy the line it outputs and paste it here, there should only be one line. [03:48] drwxr-xr-x 2 thomas thomas 4096 2008-01-09 01:02 public_html [03:49] So, that's world readable. [03:49] Hmm [03:49] Did you restart apache after you changed the config? [03:50] yea... [03:50] any other ideas [03:50] Ok, lets see, we'll start with checking out what apache is doing. [03:50] thanks I'm totally following you [03:50] First: ps -eal | grep apache, tell us which group it is. [03:50] It should be www-data [03:51] it says no file or directory [03:51] thomas_newbie__: I see you are getting some help hardening your server, good :) [03:51] No, the command is "ps -eal | grep apache" [03:51] lol nm [03:51] The "|" is a pipe. [03:51] haha yea my mistake [03:51] genii: That's later, you can help :) [03:52] owh: I need to leave for sleep, crawling onto midnight here [03:52] genii: This is just serving a page from a home dir :( [03:52] Just gone noon here, sleep tight, [03:52] gnight man [03:52] noon + 1 to be exact :) [03:52] Well, good night all... good luck thomas_newbie__ [03:53] thomas_newbie__: I'm busy on another screen, preface your comments to me with my name, otherwise I won't respond. [03:53] /my IRC will beep :) [03:53] owh: i pmed u [03:53] That won't help. Keep it here. [03:54] Ah, I see, the paste. That's not what I wanted to see, one mo. [03:55] Hmm, change it to "ps -ef | grep apache" [03:58] owh: PM [03:58] Right, so, that's www-data, as we expected. Good. Next... [03:58] sudo bash [03:58] This will make you root for a moment. [03:58] Then su - www-data [03:59] This will make you the apache user. [03:59] Then we see what it sees. [03:59] cd /home/username/public_html [03:59] Tell us what it does. [03:59] su - www-data the dash? [04:00] Just a minus on its own. [04:00] BRB [04:01] owh: cd: 1: can't cd to /home/thomas/public_html [04:01] perhaps you should set ownership to thomas:www-data ? [04:02] I'm back [04:02] look up [04:02] XiXaQ: Well, if it's world readable, then it should be readable by the www-data user. [04:02] So, thomas_newbie__, what does it do when you run the cd command? [04:02] cd: 1: can't cd to /home/thomas/public_html [04:03] What does it say? [04:03] owh: thats all it gives me [04:03] ls /home/thomas/public_html [04:03] owh: firstly after the su - www-data i get a $ sign [04:03] Yes [04:04] You are then the www-data user. [04:04] (The same as the apache process) [04:04] owh: permission denied [04:04] Crap [04:04] ok [04:04] ls -l /home/thomas [04:04] No [04:04] ls -ld /home/thomas [04:05] done [04:05] you mean /home/thomas/public_html? [04:05] drwxr-x--- [04:05] No, we already know it's world readable. [04:05] Yeah, I thought it might be :) [04:05] Ok, you'll need to do a few things. [04:05] but um I dont want everyone to be able to reach my username [04:05] I'll let you know the process first, then the steps. [04:06] I know, hang on. [04:06] alright I'm glad your so helpfull :) [04:06] We're going to change the group for the public_html directory to www-data, then add your user to that group as well, then re-login, and all should be good. [04:06] if the point is having apache share the folder, then why not just set ownership to thomas:www-data? [04:07] right :) [04:07] XiXaQ: Yes, but the thomas user will also need to be in that group, otherwise you could just leave the data in /var/www [04:08] sigh....let me try to understand [04:08] uh? He's the owner... Does he have to be in the group too? [04:08] The only thing I'm wondering is if apache can pass through the tree if its shared properly. I mean, the /home/thomas user isn't owned by www-data. [04:08] XiXaQ: That's a fair point. [04:08] XiXaQ: No he won't. [04:08] I'm not even sure that he should. [04:09] Ok, first things first. [04:09] what is www-data [04:09] thomas_newbie__: Type ctrl-d twice, once to leave the www-data user, once to leave the root user shell. [04:09] it's ok to have apache share ~/public_html even if it doesn't have any access to ~ [04:09] thomas_newbie__: It's the name of the user that is running apache. [04:09] owh: i see [04:09] user and group [04:09] thomas_newbie__: It's also the name of the group that that user is part of. [04:10] :) [04:10] owh: that helps [04:10] thomas_newbie__: Ok, so are you back to a normal $ prompt? [04:10] thomas_newbie__: Type whoami [04:10] yes sir [04:10] owh: ready for next step [04:10] btw I am Thomas :) [04:11] sudo chown thomas:www-data /home/thomas/public_html [04:11] thomas_newbie__: I thought you may be, but in this game we never assume :) [04:11] hehe [04:11] yea [04:12] owh: can i ask you a question will this take long...not that I don't really value your time...its that I have to get up early...just wondering [04:12] thomas_newbie__: Fire away, all that might happen is that your ethernet connection blows up :) [04:12] owh: what!? [04:12] Oh, you mean, you don't have a new question. No, the command should fix it. [04:13] sudo chown thomas:www-data /home/thomas/public_html [04:13] thomas_newbie__, do you have files and subfolders in /home/thomas/public_html? [04:13] isn't it chmod [04:13] This asks you as a root user to change the ownership of that directory. [04:13] No, not the privileges, the ownership. [04:13] perhaps it would be smart to make that a recursive chmod? [04:13] XiXaQ: i have 2 files no subfoleers [04:14] XiXaQ: There are two files in it, I suppose that's fair. [04:14] sudo chown -R thomas:www-data /home/thomas/public_html [04:14] The '-R' makes it recursive. [04:14] k one sec [04:14] XiXaQ: Of course we could have just added thomas to the www-data group and put apache back to /var/www :) [04:15] done [04:15] Now try your browser again. [04:15] owh: restart apache? [04:15] owh, I think that's ugly. [04:15] Not needed. [04:15] thomas_newbie__, not necessary. [04:15] XiXaQ: This is a server, seeing that we're in the ubuntu-server group, so that would be more logical :) [04:16] If this isn't a server, then why are we talking here :) [04:16] owh: no not working :( [04:16] thomas_newbie__: What does it say? [04:16] owh: You don't have permission to access / on this server. [04:17] thomas_newbie__: Can you visit one of the files directly? [04:17] owh, I don't understand that argument. It'd still be ugly. What when there is more users? They should have their stuff in their homes, not in yet another set of usernames in /var/www [04:17] XiXaQ: Are you sure that the path *to* the webroot doesn't need to be readable by the www-data user? [04:17] yes. [04:17] owh: no i cannot [04:17] thomas_newbie__: Same error? [04:17] yes [04:18] * owh wonders if this is a different problem. One mo. [04:18] cd /var/www/apache* [04:18] thomas_newbie__, what are you trying to access? [04:18] owh: k [04:18] The directory in /home/thomas/public_html as the web root [04:18] XiXaQ: my homepage... [04:18] thomas_newbie__, what url do you use? [04:19] XiXaQ: nothing error 403 [04:19] thomas_newbie__, what are you _trying_ to access? [04:19] thomas_newbie__: tail /var/log/apache2/error.log [04:19] thomas_newbie__, http://servername/~thomas? [04:19] * owh wonders if it's pointing to the correct directory. [04:19] XiXaQ: no servername/index.html [04:20] thomas_newbie__, have you set up and enabled a site config for that? [04:20] thomas_newbie__, try http://servername/~thomas. That should work. If it does, then you need to add en entry to sites-available and run a2ensite [04:20] XiXaQ: i have done configurations such as Documentroot yes [04:21] does it work with ~thomas/? [04:21] owh: ok i did it now? [04:21] thomas_newbie__: Please run the tail command. [04:21] owh: done [04:21] owh: need something? [04:21] Are there any errors? [04:21] owh: yes [04:21] thomas_newbie__: What is the *last* line? [04:22] Actually PM me the last 10. [04:22] [Wed Jan 09 23:17:48 2008] [error] [client 127.0.0.1] (13)Permission denied: access to /index3.html denied [04:22] thomas_newbie__, you've probably used a virtual server name? Connect to that instead. [04:23] or better, paste the site config somewhere and let us have a look at it. [04:23] thomas_newbie__: How did you set the document root? [04:23] also, have you enabled the site? [04:23] thomas_newbie__: Yes, I agree with XiXaQ [04:23] ok hold on guys [04:24] http://paste.ubuntu-nl.org/51419/ [04:24] Meanwhile I'm trying to figure out how to configure a remote server running vmware-server and a guest running dhcp to configure another guest via dhcp, all while a local dhcp server is running ;) [04:25] thomas_newbie__, what did you do after editing that file? [04:25] huh? [04:25] saved it restarted [04:25] ok. [04:26] XiXaQ: That documentroot directive looks wrong to me, /me checks [04:27] thomas_newbie__, you never answered my question. Does http://servername/~thomas work? [04:27] XiXaQ: no [04:27] XiXaQ: Do you recall if it is case sensitive? [04:27] it is. [04:28] well. I think it is. It _should_ be, anyway. :) [04:28] For me with a standard install, it's in sites-available/default [04:28] owh: the default file yes [04:28] thomas_newbie__: Which file did you show us? [04:28] owh: the config file yes [04:29] Which path? [04:29] owh:/etc/apache2/sites-available/ [04:29] owh: default [04:30] Ok, just for fun, sudo chmod 777 /home/thomas [04:30] Then try your browser again. [04:31] * kgoetz reads up [04:31] IT WORKS! [04:31] i just saw chmod 777 someones home [04:31] *never* *ever* do that [04:31] kgoetz: You did, I'm not finished yet. [04:31] if apache needs access, make it 7.01 [04:31] owh: but of course I dont want people access to that [04:31] kgoetz: I was confirming that apache was in fact pointing in the correct directory. [04:31] thomas_newbie__: Now change it back. [04:31] and since it'll share /home/thomas/public, that last change wouldn't do any good. [04:31] owh: to [04:32] owh: not really an excuse to give word write to a home directory [04:32] rwx------? [04:32] what pemissions? [04:32] thomas_newbie__: You had it at 750 [04:32] thomas_newbie__, that means apache doesn't have any permissions to the folder. Was that /home/thomas or /home/thomas/public_html? [04:33] /home/thomas [04:33] yes, you want /home/thomas/public_html [04:33] XiXaQ: It is already thomas:www-data 755 [04:33] and it should be drwxr-x--, I think. [04:33] The problem is that apache cannot *get* to the directory. [04:33] home/thomas/ has to be chmod 701~, /home/thomas/public_html has to be xx5 [04:34] kgoetz: Uhm, no, 750 [04:34] should i change /home/thomas to 701? [04:34] owh: uhm no [04:34] thomas_newbie__: Hold on a tick. [04:34] owh: hey guys I'm gonna take a piss BE RIIIGHT BACK OK [04:35] kgoetz: Lets just get our bits right, The public_html directory is owned by thomas:www-data [04:35] thomas_newbie__: "i'm going afk" is enough info [04:35] kgoetz: The permissions are 755 [04:35] owh: ah right. in that case 7x0 is right :) (i hadnt read up far) [04:36] See :) [04:36] :) [04:36] So, the /home/thomas directory should be 750 [04:36] no. [04:36] ? [04:36] apache should only be able to share /home/thomas/public_html [04:37] XiXaQ: It needs x to be able to traverse the tree. [04:37] it doesn't need read permissions for the directory. [04:37] XiXaQ: No, x, execute, for a directory means that you can see the directories below it. [04:37] Doh, [04:37] 710 [04:37] yes. [04:37] owh: k [04:37] XiXaQ: Yes, you are right. [04:38] L) [04:38] and 750 for public_html [04:38] sudo chmod 710 /home/thomas [04:38] sudo chmod 750 /home/thomas/public_html [04:38] why is $HOME chgrop www-data? [04:38] Then try your browser again. [04:38] It isn't. [04:38] kgoetz: public_html is. [04:38] then you need 701 for home [04:39] Hmm, [04:39] lol omg so what do i set [04:39] kgoetz: You are a smarty pants :) [04:39] thomas_newbie__: That's correct sudo chmod 751 /home/thomas [04:39] owh: ;) [04:39] sudo chmod 710 /home/thomas? [04:39] No [04:40] sudo chmod 751 /home/thomas [04:40] or 701 [04:40] omg [04:40] which [04:40] i did 751 [04:40] kgoetz: Well, the standard install is 750 [04:40] thomas_newbie__: That's fine. [04:40] kgoetz: So the thomas group can see its own directory :) [04:40] owh: i think of that as a bug, not a feature [04:41] so i did that and [04:41] kgoetz: I'm not going to change the default install :) [04:41] kgoetz: Personally I leave the web root at /var/www :) [04:42] kgoetz: If I'm feeling particularly adventurous I'll symlink it somewhere else :) [04:42] owh: ditto. personal root is usually public_html though :) [04:42] i dont see a reason to move web root [04:42] :) [04:42] guys where do i go from here [04:42] thomas_newbie__: It should be working. [04:42] owh: wow why is it working [04:43] owh: so hold on.....didn't I just give more permissions to more people....to my home directory [04:43] thomas_newbie__: ls -ld /home/thomas /home/thomas/public_html [04:43] thomas_newbie__: This will show you. [04:43] s/This/That/ [04:44] so when people connect to my server people are part of group or other? [04:44] their not. its apache who is part of groups (or not) [04:44] thomas_newbie__: Technically you've given the world permission to see the names of the files in your home directory. Bear in mind that "world" refers to actual users on your server. [04:45] users/services [04:45] yea [04:45] owh: meaning accounts i have on this machine [04:45] BRB - phone [04:45] not say if you want to connect [04:46] it doesnt refer to me, no [04:47] hey so i just changed /home/thomas to chmod 701 and it still works [04:48] :) [04:51] kgoetz: so people connecting to me are entering as "OTHER" not group [04:51] thomas_newbie__: no, thier not doing either. [04:52] *apache* is running as something. their connection *to* appache is totally different to what aache runs ats [04:52] *apache runs as [04:53] kgoetz: i see [04:54] Well I wanna just thank you all for your help I'm so glad that I got this working. Thank you owh and kgoetz. I will be around this channel more often :) [04:54] I'm baaack. Did I miss anything? [04:55] owh: thomas_newbie__ having the revelation about priviledge seperation ;) [04:55] thomas_newbie__: Here's how it breaks down: [04:56] The apache process runs as www-data which has permission to scan your home dir file names thanks to the 1 in the 701 permissions. It also has permission to access the files in /home/thomas/public_html thanks to the 750 permissions. [04:56] kgoetz: I gathered :) [04:56] A web visitor accesses the apache process which then gets the file. [04:56] So basically it was a permission problem? with the /home/thomas/public_html directory?? I swear though I checked it and it was set to rwx [04:56] Yes [04:57] That doesn't help. [04:57] owh: omg so what we did was change the grooup to www-data [04:57] owh: was that it? [04:57] thomas_newbie__: sounds like it was a problem with your $HOME dir [04:57] thomas_newbie__: The problem was that the apache process could not see the public_html directory to access it. [04:57] thomas_newbie__: You had two problems, both called privileges :) [04:57] kgoetz: It was :) [04:58] Can I go back to work again now? [04:58] * owh pings soren [04:58] owh: yes you can :) [04:58] owh: LMAO i noticed though I had to change the public_html directory to group www-data it was set to thomas [04:58] kgoetz: I figure I'll get the other thing done as well :) [04:58] owh: thank you, you have been very helpfull buddy [04:59] owh: soren is asleep, its kind of late on europe [04:59] thomas_newbie__: My pleasure. kgoetz and XiXaQ kept me honest. [04:59] owh: if you need help with your thing i'll direct you what to do [04:59] :) [04:59] owh: i'm also linux pro [04:59] Uh, it's 5:59 am at the moment in Berlin :) [04:59] owh: i was born in berlin no joke [05:00] thomas_newbie__: I need to know who to give a patch to ubuntu-jeos-builder to. [05:00] owh: sure i'll help you with that [05:00] owh: lets see [05:00] um.. [05:00] I dont know LOL [05:01] :) [05:01] owh: i wish i had the brains and the smarts [05:01] thomas_newbie__: I've been at this for a while, 26 years or so, give it time :) [05:01] you must be a mature guy [05:01] owh: presumably not using gnu/linux the whole time ;) [05:02] heh, no, that would be impressive :) [05:02] kgoetz: No, started with a Vic20 a while ago :) [05:02] :) [05:02] * owh was the first in school to own their own computer :) [05:03] Then onto Apple ][, Vaxen etc... [05:03] mmm. vax [05:03] APPLE 1 FTW [05:03] Played a bit with Spectrum, ZX80, solaris, you know the general stuff :) [05:04] goodnight guys [05:05] * owh is currently playing with embedded hardware on satellite trackers and vmware :) [05:05] thomas_newbie__: Night. [05:06] thomas_newbie__: later mate [05:07] kgoetz: AU ? [05:08] * owh suspects Australians around with "mate" :) [05:09] owh: yeah, au :) [05:09] * owh in WA :) [05:10] * kgoetz in SA [05:10] I'm about to mail a satellite tracker to someone in your state :) [05:10] cool :) sounds leet, whatever it is :p [05:10] I was there a few months back for the WSC :) [05:11] World Solar Challenge. [05:11] * owh ran the website. [05:11] didnt get to see any of that this year :( [05:11] It was fun, 'specially with the server falling over under load :) [05:11] s/:)/:|/ [05:12] hehe. thats a good thing, surely? [05:13] If you're the administrator it means you get to work while the marketing department yells at you :) [05:13] there is that i suppose. it also means its worth visiting :) [05:14] ROTFL :) [05:14] We all had fun :) [05:14] hehe [05:14] Anyway, at the mo, I need to get my vmware server sorted out. onno@itmaze.com.au if you need to get in touch. [05:15] catch you mate :) [05:15]