[02:17] <osmosis> how can I get LWP::UserAgent  in dapper?
[04:05] <nealmcb> soren, sommer: some questions are http://www.linux-mag.com/id/4829#comments - is anyone monitoring that?
[04:06] <nealmcb> s/are/are cropping up at the jeos article - /
[13:17] <faulkes->            ~.
[13:19]  * kraut gives faulkes- a terminal
[13:39] <faulkes-> yes, luckily however I keep this screened ;)
[13:47] <XiXaQ> does anyone know if I'll be able to test out hardys KVM-stuff in a VMWare guest?
[13:47] <avatar_> jdstrand: i installed ufw, enabled and all my ssh sessions died
[13:47] <avatar_> jdstrand: default ipv6 policy seems to be BLOCK
[13:47] <jdstrand> avatar_: it will flush the policy
[13:47] <jdstrand> avatar_: flush the rules
[13:48] <jdstrand> avatar_: only on startup vi initscript or 'enable'
[13:48] <jdstrand> avatar_: once enabled, it will insert the rules (eg shen using allow|deny)
[13:48] <jdstrand> avatar_: wrt ipv6, you are correct
[13:49] <jdstrand> avatar_: next version will have ipv6 support
[13:49] <jdstrand> (started it today)
[13:50] <avatar_> at work where are using ipv6 for al of our services :)
[13:50] <jdstrand> avatar_: ipv6 will be on par with ipv4 when I am done
[13:50] <jdstrand> avatar_: I will also add a note about ssh to the wiki
[13:50] <jdstrand> (and README)
[13:51] <jdstrand> avatar_: I have to flush the rules on enable and startup to make sure the tables are in a consistent state
[13:51] <avatar_> okay, i already filed an bug (188934) before looking around on irc
[13:51] <jdstrand> avatar_: ok cool.  thanks for testing it out! :)
[13:52] <avatar_> i really like the simple pf style syntax
[13:52] <jdstrand> avatar_: fyi-- you can add rules to ufw before running enable, so this can help in the future
[13:53] <jdstrand> avatar_: eg 'ufw allow 22 && ufw enable'
[13:53] <avatar_> i found the before.rules and after.rules
[13:53] <jdstrand> avatar_: the chains are still flushed, but the port ends up being open
[14:01] <soren> XiXaQ: What do you mean?
[14:01] <soren> ivoks: I've got a plan.
[14:03] <XiXaQ> soren, I'd like to see how hardys new virtualization stuff works in practice, but I don't want to replace gutsy as my os yet.
[14:03] <soren> XiXaQ: So you want to run kvm inside of vmware?
[14:03] <ivoks> soren: yes?
[14:04] <soren> ivoks: It's a plan for how to do things like dovecot+postfix integration in hardy+1.
[14:04] <XiXaQ> soren, right.
[14:04] <soren> XiXaQ: I doubt that'll work.
[14:04] <XiXaQ> me too.. It's worth a shot though. :)
[14:04] <lamont> soren: if it's a plan that calls for init.d scripts to modify config files, it's not the best of plans...
[14:04] <soren> XiXaQ: You're welcome to try, but don't expect much :)
[14:05] <zul> XiXaQ: it probably wont work
[14:05] <soren> lamont: It's not :)
[14:05] <soren> XiXaQ: Actually, I wouldnt' even bother trying :)
[14:06] <ivoks> soren: atm i'm kind of blocked and can't access launchpad :)
[14:06] <lamont> soren: good
[14:06] <soren> ivoks: No worries. I havent' written the spec yet or filed a blueprint.
[14:06] <XiXaQ> didn't work.. :>
[14:07] <soren> XiXaQ: I'm guessing the vm presented by vmware doesn't expose svm or vmx?
[14:08] <XiXaQ> right.
[14:10] <soren> lamont, ivoks: It's something that'll get triggered after dpkg has installed a stack of new packages. You can add rules to it and tell it what to do.. E.g. if a condition like (postfix is installed && dovecot-common is installed) is true and it wasn't the last time we ran, it'll ask you if you'd like to set up the SASL stuff.
[14:11] <lamont> cool.  that has good potential
[14:12] <soren> Yeah, that's what I thought. There are a stack of details I need to think through, but that's the gist of it.
[14:23] <ochoo> hello all, I'm having problem installing pure-ftpd on gutsy
[14:24] <ochoo> pure-ftpd exiting with error code 252
[14:28] <lamont> soren: any chance you'll accept that -backport of postfix 2.4.7-1?
[14:28] <lamont> (and will launchpad even let you?)
[14:28] <soren> bug #?
[14:28] <lamont> (gutsy-backports)
[14:28] <lamont> ah, yes.
[14:28] <lamont> ScottK: bug number?
[14:28] <soren> (and why don't you do it yourself?)
[14:29] <lamont> soren: I prefer to avoid abusing the duck
[14:29] <soren> meh
[14:29] <lamont> mostly so that you remind me about bug reports and such... :-)
[14:30] <lamont> soren: I'm not even sure that LP will accept it, since it's newer-than-hardy
[14:30] <soren> I didn't know Launchpad even had special logic for backports.
[14:31] <lamont> it may or may not...
[14:32] <soren> Is it a gutsy backport?
[14:32] <soren> I can't seem to find it..
[14:32] <lamont> yeah
[14:32] <lamont> 2.4.7-1~gutsy1
[14:32] <lamont> in theory
[14:32] <lamont> it might have gotten tossed.
[14:33] <mathiaz> soren: did you package cobbler for hardy ?
[14:33] <soren> mathiaz: Not entirely, no.
[14:33] <mathiaz> soren: do you think you'll make it before FF ?
[14:34] <soren> No... Should I?
[14:34] <lamont> soren: no worries - I'll upload 2.5.1 this week (I hope...  iz RC1 now) and then do the spate of backports
[14:34] <soren> I believe the conclusion at the sprint was that I wasn't going to need it anyway, so if you and Marc needed it for se, I could send the current stuff to you.
[14:49] <mathiaz> soren: about bug 32067
[14:49] <ubotu> Launchpad bug 32067 in samba "the security parameter must be set to share, not user, in smb.conf - Smb/Gnome sharing broken" [High,In progress] https://launchpad.net/bugs/32067
[14:50] <mathiaz> soren: what do you think about setting the status to Won't Fix with a comment like: this issue should be fixed in nautilus-share rather than samba itself
[14:51] <mathiaz> soren: as samba has a more general audience than the desktop use case referred to this bug.
[14:51] <mathiaz> soren: this is the approach taken by the EasyFileSharing Spec.
[14:51] <mathiaz> soren: WDYT ?
[14:53] <soren> mathiaz: I think that's the sane solution. However, that bug has way too much of an angry mob written all over it.. Just marking it as won't fix will tick them off big time, and it has got my name on it, so I'll be on the receiving end of the hate mails.
[14:54] <zul> soren: just take one for the team ;)
[15:19] <soren> Is anyone by any chance have Microsoft Virtual PC running somewhere?
[15:19] <mathiaz> zul: about bug 185139
[15:19] <ubotu> Launchpad bug 185139 in mysql-dfsg-5.0 "Default installation does not log to /var/log/mysql.err or mysql.log" [Undecided,Incomplete] https://launchpad.net/bugs/185139
[15:19] <soren> </longshot>
[15:20] <zul> mathiaz: yep
[15:20] <soren> s/Is/Does/
[15:20] <mathiaz> zul: I'd mark it as Won't Fix
[15:20] <zul> ok will do
[15:20] <mathiaz> zul: I think the current situation is ok. The message should be found in /var/log/daemon.log. WDYT ?
[15:21] <zul> i think 5.1 is doing that now as well, im a bit more of a traditionalist when i like to look for things in /var/log/mysql.* but i dont mind it
[15:21] <ochoo> about bug 185139
[15:21] <ubotu> Launchpad bug 185139 in mysql-dfsg-5.0 "Default installation does not log to /var/log/mysql.err or mysql.log" [Undecided,Incomplete] https://launchpad.net/bugs/185139
[15:22] <zul> mathiaz: its my mysql bug day :)
[15:23] <mathiaz> zul: are you working on packaging the fixes or just bug triagging ?
[15:23] <zul> both
[15:24] <mathiaz> zul: I've uploaded a merge of mysql 5.0.51 and soren should have reviewed it.
[15:24] <zul> oh?
[15:24] <mathiaz> zul: may be you can base your work on my merge and upload it once it's all good
[15:24] <zul> sure...where is it?
[15:24] <mathiaz> zul: http://people.ubuntu.com/~mathiaz/packages/
[15:25] <zul> will do
[15:29] <zul> mathiaz: what about the mysql-doc thats there?
[15:39] <mathiaz> zul: it needs to be uploaded at the same time as mysql-dfsg.
[15:39] <zul> mathiaz: ok
[15:39] <zul> Im just adding my stuff and ill do a test build as well
[15:39] <zul> and test run, etc
[15:40] <mathiaz> zul: the current version in restricted has the manual and the man pages, because the man page were not GPL'ed until August.
[15:40] <zul> oh I see
[15:40] <mathiaz> zul: the new version of mysql-dfsg has the man page included (they were GPL'ed in August)
[15:41] <mathiaz> zul: so mysql-doc had to be updated to ship only the manual (which we're allowed to do in the restricted repository)
[15:41] <mathiaz> zul: I've clarified the issue with MySQL Documentation team
[15:41] <zul> good thank you :)
[15:42] <mathiaz> zul: the build takes time now, as it will run all the tests.
[15:42] <zul> no problem Ill do other things while im waiting
[15:42] <mathiaz> zul: I've added support for nockech option to skipp the tests at build time.
[15:48] <sommer> mathiaz: hello, can you give me an example of why do-release-upgrade is best?
[15:49] <sommer> mathiaz: I seem to remember you mentioning the sysvinit to upstart, but can't seem to find the details
[15:50] <mathiaz> sommer: do-release-upgrade does more things than dist-upgrade
[15:50] <mathiaz> sommer: for example, it will take care of removing evms when you upgrade to gutsy
[15:51] <mathiaz> sommer: that cannot be done using apt-get dist-upgrade
[15:51] <sommer> mathiaz: ahhh... that's the one I was thinking of evms
[15:51] <sommer> wasn't evms replaced with something else?
[15:51] <mathiaz> sommer: yep - I think that's the main issue you have when upgrading a server.
[15:51] <mathiaz> sommer: I don't think it was replaced. lvm can do pretty much everything evms ca do.
[15:52] <sommer> gotcha, but there was a boot issue if emvs wasn't removed?
[15:52] <mathiaz> sommer: correct.
[15:52] <mathiaz> sommer: I think that's the problem the sender had.
[15:53] <sommer> cool, I'm working on a upgrade section for the guide, and needed an example of why do-release-upgrade is preferred
[15:54] <mathiaz> zul: can you make sure that bug 33940 is fixed ?
[15:54] <ubotu> Launchpad bug 33940 in mysql-dfsg-5.0 "mysql_setpermission broken" [Low,In progress] https://launchpad.net/bugs/33940
[15:54] <tjaalton> any comments on the libpam-ldap patch?
[15:54] <zul> mathiaz: it has
[15:54] <zul> i dropped it for 5.0.51
[15:54] <mathiaz> zul: could you also take care of bug 153868 ?
[15:55] <ubotu> Launchpad bug 153868 in mysql-dfsg-5.0 "package mysql-server-5.0 5.0.45-1ubuntu2 failed to install/upgrade -  Access denied for user 'debian-sys-maint'@'localhost'" [Medium,Triaged] https://launchpad.net/bugs/153868
[15:55] <mathiaz> zul: cool - could you add a comment in the changelog then ?
[15:55] <mathiaz> zul: I've forgot to mark it as fixed in the merge entry.
[16:00] <zul> done
[16:15] <zul> mathiaz: ok doing a test build now
[16:16] <mathiaz> zul: great - should be ready in an hour (depending on how powerfull your computer is :) )
[16:17] <ScottK> lamont: I'm here now.  It's pretty much a rule it has to be in a developmental release before we can backport it.
[16:21] <lamont> ScottK: piffle
[16:21] <lamont> :-)
[16:21] <lamont> so I need to upload 2.4.7-1 to hardy, do the backports (you wanna file the bugs for me??) and then I can upload 2.5.1?
[16:21] <ScottK> Yeah
[16:21] <ScottK> I'll take care of filing the backport bugs.
[16:22] <ScottK> For the source backports (which we'll need for dapper - feisty) it doesn't actually have to still be there.  Gutsy is the only one that needs to get executed before you upload 2.5
[16:24] <mathiaz> zul: for bug 185139, I usually add a comment about the reason why I mark the bug as Won't Fix.
[16:25] <ubotu> Launchpad bug 185139 in mysql-dfsg-5.0 "Default installation does not log to /var/log/mysql.err or mysql.log" [Undecided,Won't fix] https://launchpad.net/bugs/185139
[16:25] <mathiaz> zul: It'd help me if I need to revisit the state of the bug.
[16:26] <zul> sorry about that
[16:58] <ivoks> lamont: ping
[16:59] <lamont> ivoks: ack
[16:59] <ivoks> ivoks: any comments on bug #164837?
[16:59] <ubotu> Launchpad bug 164837 in dovecot "Dovecot SASL for postfix" [Low,In progress] https://launchpad.net/bugs/164837
[16:59] <ivoks> er... lamont :)
[17:00] <zul> mathiaz: it built
[17:01]  * lamont stabs at his laggy internet connection this morning
[17:02] <mathiaz> zul: great :)
[17:03] <lamont> ivoks: the final debdiff doesn't look tragically wrong, assuming it works.  modifying config files in init.d would be a far more ugly and objectionable approach.
[17:03] <lamont> tasksel may make the most sense for hardyt
[17:03] <lamont> and see also the ucf comments
[17:03] <ivoks> i'm also against modifying init script
[17:04] <lamont> yeah!!!
[17:04] <ivoks> lamont: so, green light from you for tasksel diff? :)
[17:04] <lamont> and I do need to run for a few hours - able to actually look at this in more depth in about 5 hours or so.
[17:04] <ivoks> ok, could you add comment there?
[17:05] <lamont> if it works.  and make sure that ucf/dovecot gets tested, too.
[17:05] <lamont> I suppose
[17:05] <ivoks> so we could finish this; it's about time.. :)
[17:05] <lamont> heh
[17:05] <lamont> opk
[17:05] <ivoks> thanks
[17:05] <ivoks> see you later
[18:06] <soren> mathiaz: Oh.. I created a branch of my review queue on my laptop when we were at the sprint. I forgot to merge them when I got home, so I haven't done the mysql merge review. Crap.
[18:09] <mathiaz> soren: np. zul is doing it.
[18:09] <mathiaz> soren: but your comments are welcomed of course
[18:52] <zul> lamont: ping
[19:40] <lamont> zul: sorta here
[19:40] <zul> lamont: damn it I forgot the question now
[19:40] <lamont> that's why we just ask....
[19:42] <zul> oh yeah for hppa do you actually care if mysql builds on it?
[19:42] <lamont> sometimes
[19:43] <zul> ok Ill leave it alone then
[19:43] <lamont> I'd have to put on my hppa-porter-team-lead for that, and that's not for another 2-3 hours yet.
[19:43] <zul> heh..
[19:43] <lamont> hrm... 'hat' goes in there somewhere
[20:01] <zul> mathiaz: ping
[20:01] <mathiaz> zul: doiiinggg
[20:02] <zul> What do you think of this? Server version: 5.0.51-3ubuntu1 (Ubuntu)
[20:02] <zul> Should it Ubuntu/Hardy or just leave it as it is
[20:04] <mathiaz> zul: I think Ubuntu is enough
[20:04] <zul> good for me
[20:04] <mathiaz> zul: it's Debian in debian ?
[20:04] <zul> correct
[20:04] <mathiaz> zul: there is the version number in the message also
[20:05] <zul> correct..its generated when ./configure is run
[20:17] <zul> mathiaz: its looks ok to me
[20:33] <ivoks> lamont: here? :)
[20:37] <ScottK> leonel: If you're up for doing some research, it would be very useful for me to have a list of all the CVEs open against the released (not backports) version of clamav in Dapper.
[20:39] <ivoks> anyone has an idea how to setup postfix to verify recipient address on another smtp server (that part i know) and if the recipient doesn't exist, relay that mail to another smtp server (this is a problem)?
[20:39] <ScottK> ivoks: I suspect you'd need a policy server for that, but I'm not certain.
[20:40] <ScottK> I think vrfy will just reject it if it doesn't exist.
[20:40] <leonel> ScottK:   queued ..
[20:40] <lamont> ivoks: you might have to resort to using the big hammer for that one
[20:40] <lamont> (aka pipe mailer)
[20:40] <ScottK> I think it's doable with restriction classes and a policy server.
[20:40] <ScottK> leonel: Thanks.
[20:41] <ivoks> hm... any documenation on that?
[20:41] <ivoks> ah, never mind, i'll look for it
[20:42] <ScottK> ivoks: http://www.postfix.org/SMTPD_POLICY_README.html for policy servers and if you look in the docs for pypolicyd-spf (source package name) there's a readme on using restriction classes to process mail differently with different policy server results.
[20:42] <ScottK> Between those two, I think you'll be able so sort it.
[20:43] <ivoks> i'm looking at that one right now, thanks
[20:49] <ivoks> thanks for help
[20:49] <ivoks> see you tomorrow
=== _emgent is now known as emgent
[21:45] <mathiaz> zul: isn't bug 186978 fixed in the mysql-dfsg package you've just uploaded ?
[21:45] <ubotu> Launchpad bug 186978 in mysql-dfsg-5.0 "[mysql] [CVE-2008-0226] [CVE-2008-0227] buffer overflows in YaSSL" [Undecided,Confirmed] https://launchpad.net/bugs/186978
[22:43] <CarlFK> what is the name of the  kernel package that u-server uses?
=== leonel_ is now known as leonel