[00:24] so i have a directory that several users access to share files... the dirs have perms drwxrws--- and files have perms -rw-r-----, yet for some reason i'm still able to delete files that aren't owned by me... how can i change this? [00:34] is there a reason the directory has the setgid bit set? [00:35] (the s in the perms) [00:36] um [00:36] faulkes-: i used to think s was sticky [00:37] but recently found out it's t [00:37] i really need some help organizing this directory structure -- if you don't mind, faulkes- [00:37] at least to get in the right direction [00:37] why do you need the sticky bit? [00:38] its a directory that many people will be accessing [00:38] to share music [00:38] and i dont want people to be able to modify or delete anything that isn't owned by them [00:38] and i've been messing with permissions and stuff but i can't seem to get it just right [00:39] well, start by setting the sticky bit then [00:39] well, probably remove the setgid bit, then apply the stick bit [00:39] right, but the sticky bit does not inherit [00:40] which kind of makes it a problem [00:41] so, if someone were to add a new directory, lets say its a new album [00:41] none of that new stuff will be stickied [00:42] faulkes-: is there any way to get around that? maybe a daily cron script or something... [00:42] cron may be an option, I'm not sure about what value selinux would provide, although that may be an option [00:43] hmm [00:43] now, is there anything else i should do in terms of permissions on directories and regular files [00:43] like for the samba config, theres a create mask for them [00:44] umask is set usually upon login [00:44] depending on the shell [00:44] well [00:44] i have no idea what that is [00:44] i was talking about samba's configuration [00:44] create mask = 0640 [00:44] directory mask = 0770 [00:44] umask is the default permissions a file/dir is created with [00:45] oh [00:45] how do i edit those? [00:46] it is typically set upon login by the default shell startup files [00:46] oh [00:46] so it's user-specific [00:46] i.e. either .bash_profile, .bashrc or /etc/bashrc (/etc/bash.bashrc on ubuntu usually) [00:47] i dont think thats a viable solution for me [00:47] the . files being user specific settings, the /etc/ generally being the defaults [00:47] since i'd have to configure it for each user [00:54] faulkes-: i think i found a solution [00:54] i'll do a sticky on the parent dir [00:54] and use a directory mask of 0750 [00:55] so if they dont own the directory, they cant fuck with any of the files within, even if it's not sticky [00:56] sounds good, test it out [01:21] I am getting ready to do a network install of 7.10 on a handfull of machines. I copied the cd to /var/www/ubuntu, created a kickstart file, setup PXE, and am running into one minor problem. The machines PXE boot correctly, download the kickstart, and begin retrieving some of the installer files via HTTP...but at one point it says that downloading a file failed. The file is ... [01:21] ... /ubuntu/pool/main/e/e2fsprogs/e2fsprogs-udeb.... I look in that folder and I find an older version of e2fsprogs. Why is it trying to download a newer version? [01:22] I have even tried symlinking /var/www/ubuntu to my local copy of archive.ubuntu.com and I run into the same issue--except with different files. [01:23] darkpixel: because the package lists your using point to that file [01:25] That's the part that confuses me. If I'm doing an apt-mirror, shouldn't I have the correct package lists? If I instead make a copy of the CD and try to install from that, how would I suddenly end up with a bad package list? [01:25] not sure, i havent tried netinstalling yet (but i'd be interested in any guides you have, i'll be doing it soon) [01:26] i have full mirrors at home, so i dont have that issue [01:26] Here are two from the ubuntu wiki: ectory under your freshly installed apache's document root and copy all of the contents of the Ubuntu Alternate CD to that directory [01:26] Here are two from the ubuntu wiki: https://help.ubuntu.com/community/PXEInstallServer [01:26] Darn copy/paste bug [01:26] https://help.ubuntu.com/community/Installation/QuickNetboot [01:27] copy/paste bug? [01:29] I've noticed there appears to be a difference between Edit->Paste/Right-Click->Paste and Shift+Insert. And occasionally when you have text selected in firefox and then right-click the address bar and hit copy you may get the text you selected. [01:30] I've never really dug into the issue too much. It happens on just about every linux platform I've used. [01:54] im installing samba, what's smbpasswd for? [01:54] do i have to make an account for it first? [01:54] ohh right nvm [03:05] um... can someone try and install 'tofrodos'? launchpad lists it as available in gutsy, but i cant install it (package not found) [03:05] hm. updating my package lists fixed it. [04:17] anyone know how i can make my apache alias show up as a directory tree instead of 403 forbidden? [04:24] joycetick: can you explain a bit more? [04:24] * kgoetz has a question about mysql :/ [04:24] specifically: is there a way to read a file in mysql syntax, and verify the file without loading it into hte database? [04:29] kgoetz: i have a website in /home/web/public_html, so http://localhost shows me that folder in a directory tree because theres no index.php/htm file, now i want localhost/files to show /home/user/files in a directory tree but it just shows 403 forbidden :( (but i can still access the files in there if i type out the name in the address bar) [04:32] check the perms on the folders [04:33] your setup seems strangely complex though [04:33] their 755.. does it? :S [04:34] i just made another website for the /home/user/files and now it works [04:34] ..but the root folder isnt the original website anymore, im not sure how to change that :$ [04:35] so now going to localhost or localhost/files goes to /home/user/files :S [04:35] are you editing sites-available/default ? [04:36] i copied it [04:37] so i have 3 files, default, web and files [04:37] and they are all enabled? [04:37] not sure if thats how your supposed to do it? [04:37] default is disabled [04:37] web and files are enabled [04:37] can you pastebin your files please [04:37] !pastebin | joycetick [04:37] joycetick: pastebin is a service to post large texts so you don't flood the channel. The Ubuntu pastebin is at http://paste.ubuntu-nl.org (make sure you give us the URL for your paste - see also the #ubuntu channel topic) [04:39] ok, will just one be fine because the only difference is the directory in 2 of the lines? [04:41] http://paste.ubuntu-nl.org/55568/ [05:16] joycetick: sorry, i've been doing work (i'm at work currently) :/ try #apache if you havent already, hopefully people there will have time to help out [05:17] kgoetz: yeah np thanks [07:05] hello [07:06] is it possible to have the server version with GUI ? [07:06] i'm trying to acheave a secure noob phpbb server :) [07:06] you can install the desktop (or install a desktop on teh server) [07:06] and not lose the GUI :) [07:07] well i installed LAMP with Synaptic but it didn't work ... php pages were downloaded instead of opened, now i have installed xamp over it and i think i made a bih mess :) altho php works and i have installed phpbb [07:07] Dimitree: from memory "sudo apt-get install ubuntu-desktop" [07:08] *big [07:08] not that i'd ever do such an evil thing ;) [07:08] haha :) [07:08] i'm noob :) i need the GUI but i also want it to be at least secure to some point :) [07:09] i tryed Fedore and installed apache and php and mysql and i got hacked after 5 mins in irc in the Fedora chan [07:09] so if there is a way to avoid such incidents and still run a web noobish server with only one forum ill be very very happy :) [07:10] I don't run gui's on my servers. I'd read up on and install shorewall though (firewall software). (apt-get install shorewall) [07:10] there's a shorewall channel on freenode [07:13] can someone try to hack me :D [07:14] please ? =) [07:17] nevermind :) [07:18] i readed the server webpage and i think its what ill go for :) [07:18] after apt-get install ubuntu-desktop do i have to do anything + to make the gui autoload ? [07:26] ou one more thing [07:27] will i be able to setup my network ip during install ? if nto what is the command to configure LAN ? [07:29] guys please ? :) [07:32] Of course you can set up your network during... [07:32] oh, he buggered off. [08:18] moin [09:27] hi [09:27] soren: you there? :) [09:28] I am. [09:28] cool [09:28] i was here last week because of a nss_ldap problem. I could need some help or hints ;) [09:28] Ah, right. [09:29] I'm sort of busy, but I'm sure someone in #ubuntu-motu could help you do the backport using your ppa. [09:29] if i comment out ldap from my group section in "/etc/nsswitch.conf" my vmware-server works fine [09:29] soren: okay. no problem. I am just not quite sure if backporting will solve this ;) [09:31] spiekey: Didn't you say the new libnss-ldap fixed it? [09:32] That's the last I remember. Sorry, if I missed something. [09:34] i hope it will fix it. [09:34] but it does not make sense to me since starting a vmware-child works if you press the start button a 2nd time after the error. [09:35] i would have expected it to either work or not work. But thats weird [09:40] spiekey: Well, it's hard to say if it remembers that the ldap lookup didn't work out. [10:03] Morning all [10:08] hi [10:09] soren: what tool would you use to draw the nss and ldap architecture for documentation purpose? [10:09] i would like to have a little diagramm to show what requires what [10:10] <_ruben> ScottK: got a few mail server/postfix q's for you: does postfix offer a method to remove certain headers from emails that are relayed through postfix, and im looking for some performance statistics (mails/hour etc) [10:17] spiekey: Depends on how masochistic I'm feeling. [10:19] spiekey: On a day like today, I'd probably be writing it in pic (using groff to turn it into something pretty). [10:47] soren: what the url of pic? [10:53] spiekey: Good question. [10:53] spiekey: ah. [10:54] spiekey: /usr/share/doc/groff/pic.yourpreferredformat.gz is a good primer. [10:54] spiekey: pic's a bit special. If you're on a tight deadline and never used it before, it might not be what you're looking for. [10:54] spiekey: graphviz might also be an option (depending on what exactly you're doing) [10:55] graphviz looks cool! ;) === AnRkey_ is now known as AnRkey === \sh_away is now known as \sh [12:25] morning [12:49] patching your kernels? :) [12:49] no because I let the security team do it for me :) [12:49] i don't see anyone commiting patches :/ [12:50] oh they are working on it...besides its not even 8am yet [12:50] it's 1:30PM here :) [12:50] i think people from security team should live all around the world :) [12:53] <_ruben> 1:30pm ? you live in a timezone with a 20minute offset? :P [12:55] 50 [12:55] 1:50 [12:55] <_ruben> figured as much :) [12:56] 11.30 here. i do have a 30 min offset ;) [12:56] <_ruben> Kamping_Kaiser: i know there's 30min offset timezones, wasnt aware of any 20minutes ones ;) [12:57] _ruben, i think theres a 45 minute one in AU too (it covers one town+ surounding area) [12:57] however - night al! [12:57] <_ruben> night? .. ah, 11:30am then i guess ;) [12:58] One city with its own timezone? That has urban legend written all over it. [12:58] <_ruben> erm .. pm [12:58] newfoundland is half hour ahead of everyone in canada [12:59] Madness. [13:00] <_ruben> 'everyone in canada' .. i'd say that'd cover several timezones .. newfoundland is 30mins ahead of all of those? :p [13:02] Wikipedia mentions the one in Australia. [13:03] Go figure. [13:03] Nepal has an .25 hour offset as well. [13:04] http://www.timetemperature.com/tzca/newfoundland_time_zone.shtml [13:06] * _ruben decides to go southpark-ish and "blames canada!" [14:12] how do I add a new user and make it have a home directory and all the stuff that the user created in setup has [in the sudoers file, etc.]? [14:33] Clinteger: adduser for start and then you can add the user to the various groups after [14:39] _ruben: Yes. You can remove headers using header checks. There are add-ons for performance stats. [14:40] <_ruben> ScottK: g'day .. after browsing some more on the postfix site i did find the header removal option .. still looking for some real life benchmarks/comparisons .. but those seem to be non-existent :p === Clinteger is now known as tez [14:41] Ah. I thought you were looking for a package to check your own performance stats. I misunderstood your question. [14:42] <_ruben> ScottK: any thoughts for hardware to run a bulkmail server running postfix on? currently i have a quad core / 4 gig / hardware raid using sas disks on the to-order list [14:42] This kind of question does come up and it's difficult to have reliable, comparable benchmarks. [14:42] <_ruben> i know [14:42] postfix has an smtp-{source,sink} binary in it, iirc... good for comparisons [14:42] What are your message flow requirements? [14:43] <_ruben> there's a lot of variables involved [14:43] You'll be able to move a lot of mail with that. [14:43] <_ruben> ScottK: what do you mean by that? [14:43] what the hell O_O [14:43] <_ruben> it'll be a dedicated bulk mail server .. so lots of outbound and only bounces as inbound [14:43] How many messages do you need to be able to send (e.g. messages/minute or something) [14:44] <_ruben> ScottK: our current setup (using suse+qmail) varies between 60k and 120k per hour [14:44] so i have my server, right. and now everything is in capitals [as in BLAH LOGIN: PASSWORD: LOGIN INCORRECT] [14:44] okay now thats not there [14:44] idk :D [14:44] <_ruben> ScottK: we want to atleast have similar performance [14:45] In large volume deployments, disk I/O tends to be the bottleneck. Having a large cache battery backed up controller is good. [14:45] <_ruben> ScottK: figured as much .. the current mailservers all have software raid1 or raid5 .. switching to hardware raid should be a nice win i hope [14:46] For an outbound server that doesn't need a lot of spam scanning, virus scanning, etc, I would guess that's achievable. [14:46] <_ruben> ScottK: not too sure about the cache options, will ask around [14:46] <_ruben> ScottK: no spam/virus checking at all [14:46] meh so i think my .bashrc is screwed up, cause it only shows $ not name@location $, and I can delete the $ on the screen :}( [14:46] For reliability reasons Postfix always writes messages to a queue file, so that's why disk I/O can dominate. [14:47] <_ruben> that's similar to qmail i think [14:48] tez: if you give getty an uppercase login name, then it switches to believing that you're on a terminal from the 1970s that only does upper case, and downshifts everything you type, and upshifts everything it prints [14:48] ohh okay. [14:48] but what about the other part? you can't normally delete the $ :, [14:48] Every site is different, so I think you need to just first set it up and then work on tuning for your situation. Depending on what header checks you do, those can be pretty CPU intensive. [14:48] _ruben: you can tell the filesystem to not force the update (faster, introduces risk of lost mail), or just get a phat UPS and RAM and put /var/spool/postfix on a ramdisk. :) [14:49] _ruben: ^^^ lamont is the postfix maintainer for Debian and Ubuntu. [14:49] (RAM + ramdisk and no UPS? better be able to explain lost email......) [14:50] and then there's that whole what-happens-at-panic issue [14:50] Setting up tetex-bin (3.0-13ubuntu6.1) ... [14:50] Creating config file /etc/texmf/fmt.d/01tetex.cnf with new version [14:50] No alternatives for oxdvi.bin. [14:50] I hateseses tetex [14:52] <_ruben> lamont, ScottK : just asked my boss .. the machine (dell pe1950) will have a perc6/i controller which has 256MB battery backed raid controller [14:53] Dell 1950s work well with Ubuntu. I know a number of people that use them. [14:53] with ext3 you can generally feel good about turning off sync writes... in fact, I, um, think that might be the default... [14:55] <_ruben> nice [14:56] <_ruben> hmm .. the battery backed part is actually a bit vague on the dell site .. lets just hope we dont have too much crashes during mailings ;) [14:56] Default: false [14:57] _Description: Force synchronous updates on mail queue? [14:57] use ext3 [14:57] <_ruben> ext3 is what i use pretty much everywhere anyways [14:57] of course, by default, ext3 just does metadata, not actuall datadata [14:58] <_ruben> i really should find me some time to dive into filesystem optimization possibilities and such [14:58] <_ruben> just far too many things on my to-do & wish list .. tho i recon thats a far too common issue around here ;) [15:01] in ubuntu, for root and the default created user it shows name@comp:location$ but for the account I created myself it only shows $, i can't use the up arrow to go to previous commands, I can delete everything in the terminal, etc. -- how can i change this? [15:04] tez: double check the user's default shell in /etc/passwd... you probably meant it to be /bin/bash [15:05] ahh thanks so much! [15:05] np [15:09] <_ruben> lamont: last quick q before i head out .. concerning the performance .. given a dell 1950 (quad core / 4 gb / hw raid) on a gigabit uplink without any spam/virus checking .. does 100k mails per hour sound fair ? [15:10] _ruben: others would be better for that question... although I once moved >30000 emails in far less than an hour in 1997, with no tuning. I know it's come a long way since that evening. [15:11] <_ruben> ah ok .. thanks for the pointers so far :) [15:11] amusingly, that was the evening that my patch introducing header_checks was accepted. [15:11] <_ruben> heheh [15:12] <_ruben> gotta go now .. be back tomorow (that is in about 16 hrs) === nxvl_work_ is now known as nxvl_work [15:48] hi all! [15:48] how do i install a package to use while installing ubuntu server? i need to install the dmraid package. [16:36] hrmmm, next week is gonna be a whole lot of busy afternoons with UDW for me [16:37] * faulkes- expects to learn a lot [16:39] roote: Which Ubuntu version? [16:47] wohoo :) successfuly installed server and desktop :) and it works ! === livingwater is now known as Dimitree [16:47] is there some way to check if my installation is secure ? [16:50] hi. I'm not sure if its a grub error or ubuntu, but I'm just starting ubuntu server [recovery mode] and it gets stuck at Starting up... after that. Nothing at all, no errors, shows === \sh is now known as \sh_away [17:35] Hi! I'm wondering if it's possible to install dmraid using the gutsy server CD. I'm trying to get it to pick up a promise raid controller. Many thanks. [17:43] soren: ubuntu server 7.10 [18:04] Dimitree: that is a hugely scoped question, re: security, try to define it a little more [18:05] tez: is there a reason you are starting in recovery mode? (granted you seem to be having issues) [18:09] faulkes-, i want to know if my system is secure enough so that a "l33t" person can not hack it in 5 minutes :) [18:09] i have installed LAMP and phpbb3 [18:10] i don't want someone to just try and due to my not knowing anything be able to destroy everything in 5 inutes [18:10] can someone intentionaly try hacking my pc ? [18:10] please don't do damage :) [18:11] unfortunately that isn't something I would do, I would recommend though reading up on security, especially as it relates to phpbb3 [18:12] follow any phpbb3 best practices for security, etc.. [18:13] in general, LAMP is fairly secure, but when you add php code (such as phpbb3) that is where security becomes an issue [18:14] any chance to referance me to a good guide ? I don't know what is good and what's not :) [18:16] I would start with the phpbb3 homepage [18:16] you can google that up fairly easily [18:17] phpbb has been around for quite awhile, so starting at the sites page is most likely to provide you with up to date information [18:17] ok thank you [18:32] Hey guys I'm still new to Linux command lines, can I get Ubuntu Server up in a GUI? [18:33] I don't really have a purpose for it yet just exploring the OS. I was reading somewhere it might be best to just install ubuntuX instead if I wanted GUI [18:33] jlong_: for minimal gui i usually use server install then grab xserver-xorg and fluxbox [18:34] * pepperjack shrugs [18:34] sudo apt-get install ubuntu-desktop [18:34] would probably be the simplest way [18:35] although the gui is not a garrauntee of making things easier ;) [18:35] heh, yeah figures [18:36] So with server would I be able to setup something like Active Directory or is it called something else? [18:36] 99% of the server stuff I do is all command line [18:37] ldap + samba [18:37] jlong_: ldap is... an adventure ive heard. ive not tackled it yet [18:37] would be the equivalent of an AD PDC [19:12] there isnt and gconfd on the server is there? [19:29] zul: nope [19:36] hello [19:36] hi tez [19:36] I'm having trouble installing Ubuntu Server 7.10 because it stalls at "Trying to enable framebuffer..." installing it [19:38] mathiaz: see my emails when you have a moment [19:38] what type of fb and hardware? [19:39] uhmm its just an old computer, some compaq something or other [19:39] From the wiki: When installing your Ubuntu system, you can tell the Ubuntu installer not to use the framebuffer. How to do that is not covered in this wiki. [19:39] I'm not sure how to do that [19:40] tez: check out https://help.ubuntu.com/community/BootOptions [19:40] iirc it's a boot option, sec [19:42] okay. [19:42] sorry bout that. [19:42] I think I want vga=771 as that would be 800x600, 256colors [19:42] correct? [19:42] that sounds reasonable [19:42] * faulkes- nods [19:43] ok [19:43] now it went Starting... Loading Linux Kernel, went to 100% then the 100% went away O_O [19:44] perhaps I'll try 769 [19:45] if it's old hardware, you may have to be patient for it to boot [19:45] nope. [19:45] okay [19:45] now its asking for COLSxROWS [19:46] 80x25 is default iirc [19:46] okay there. [19:46] now its just a blinking _ [19:46] describe "blinking" [19:46] oh, the cursor [19:46] yeah lol [19:47] hrmmm, have some patience [19:48] blah earlier when i had patience i spent a couple hours because of a problem where it just sat and was blinking just after grub loaded the kernel and there weren't any errors or anything [19:48] maybe the kernel doesnt like this computer [19:48] without exact knowledge of what hardware is there, it's entirely possible [19:49] hmm [19:50] is the cd at least still spinning? [19:50] lights not on :| [19:50] no noticeable movements or sound [19:51] ok i have the model of craputer. [19:52] compaq presario 5003us. [19:52] https://bugs.launchpad.net/ubuntu/+source/casper/+bug/82014 [19:52] Launchpad bug 82014 in casper "can't start ubuntu or kubuntu from cd" [Undecided,Invalid] [19:52] im not the only one [19:54] gcleric, faulkes-, any ideas? [19:55] it seems this computer isnt compatible with the kernel. both the install disc and current install [installed through VirtualBox onto the hard drive] hang loading the kernel with a blinking _ and nothing else [19:56] ... [19:56] follow the bug link you listed and follow the advice for the f6 to remove quiet and splash and report what it says [19:56] it's entirely possible the cdrom doesn't like a burned cd [19:56] it does. [19:57] i pulled it out of a new desktop [19:57] ok [19:57] which version of Ubuntu are you installing? [19:57] Server or Desktop? [19:57] server [19:57] which is why i'm in #ubuntu-server lol [19:57] 7.10? [19:57] yeah [19:57] do I need to go lower? [19:58] you can create a server from the desktop live cd.. [19:58] again, follow the instructions on the second last post of the bug youlinked [19:58] faulkes-: in the process of doing that [19:58] ok [19:58] blinking cursor. [19:58] nothing. [19:58] which is what it did after grub loaded on the hard drive [19:59] \i'm trying to reinstall incase the virtual->native intstallation didnt work === \sh_away is now known as \sh [19:59] http://ubuntuforums.org/showthread.php?t=462688 shows that someone installed 7.04 on it successfully [20:00] ok [20:00] that forum post is about envy and nvidia cards [20:00] yeah [20:01] but that means they got ubuntu installed [20:01] but they're using 7.04 [20:01] but how does it relate to your compaq? [20:01] because I can't get the isntaller to work [20:01] they obviously did [20:01] so theres something new in 7.10 from 7.04 that is different === jmtt__ is now known as jmtt [20:03] i'm going to try 6.06lts [20:05] <\sh> tez, how are you trying to install you 7.04/7.10? via IlO 2? [20:05] iio? [20:05] <\sh> ilo ;) [20:06] oh lol [20:06] <\sh> the remote insight board of the hps [20:06] im not sure what you mean :S [20:07] <\sh> tez, are you sitting in front of your server with a CD or are you trying to install it via the remote insight board? [20:07] its not a serveh [20:07] its just some old computah [20:08] and sitting here with a cd [20:08] <\sh> I see...I thought you are talking about hp/compaq servers [20:09] nope, sorry [20:09] lol i feel bad for anyone that has a compaq server [20:09] <\sh> tez, why? it works :) [20:09] idk, compaq sucks :p [20:09] im not sure they make servers, aren't they all hp branded? [20:10] <\sh> tez, compaq is only still valid for old hardware...the newer "compaqs" are all named "hp"..even the alpha ones ;) [20:10] ohh okay. [20:10] k well that computer isnt getting anywhere [20:10] been loading for ahiwle now [20:10] a while* [20:11] <\sh> broken cd? [20:11] nope [20:11] the kernel doesn't like this computer at all [20:11] <\sh> acpi=off apic=off? [20:11] see i have an install on a partition on the hard drive thats flagged bootable, but past grub, it does the same thing as the installer does. nothing, exxcept sit with a blinking curser [20:13] ok just tried taht [20:13] stuck at blinking cursor, cdrom isnt flashing [20:14] <\sh> while booting the install cd? I would say a broken cdrom, likely not burned <=10 speed...I have this problem always, when I do 52 speed burning with boot cds [20:14] nope i've confirmed the cd boots [20:14] <\sh> hard to debug when I don't sit in front of the bugger ;) [20:14] especially since this problem also happens on the hard drive where ubuntu server is installed [20:14] yeah :p [20:15] see i installed ubuntu server to a partition on the hard drive through a virtual [really the raw] hard disk in VirtualBox and it works fine there [20:16] anyway im going to install 6.06 see if that works because I know someone got 7.04 installed on the same computer [20:17] well same model [20:17] * \sh thinks a strange kernel setting which can be disabled via grub/selinux boot [20:17] nope. at least I don't think so [20:19] problems? [20:19] ivoks: you're having problems [20:19] ?? [20:19] never [20:20] k then I don't know what you're talkng about :p [20:20] anyway, I'm going to go piece together my desktop and i'll throw the server in the basement for the time === \sh is now known as \sh_away [20:50] Any ubuntu Log Viewer/monitor for Apache ? i can't find one with the Add/Remove ? [20:55] Dimitree, try tail, multitail [20:56] so 'multitail -f /var/www/apache2/access.log /var/www/apache2/error.log' [20:57] with ubuntu you get tail for free! [20:57] :) [20:58] :D [20:58] heya ivoks [20:58] hello ivoks ! :) [20:58] hi [20:59] i have a solution for bacula problems [20:59] i've worked on it with upstream [21:00] we will just ship our make_catalog_backup script which will read database config from director config [21:00] and... that's it [21:00] no command line arguments except names of catalogs which are getting backed up [21:01] downside is that i'll introduce new dependency for bacula [21:01] python [21:01] :D [21:01] In Ubuntu, I think that's not a problem. [21:01] * pepperjack smacks ivoks [21:01] awesome macd :) thank you [21:02] hopefully, i'll upload changes tomorrow [21:02] pepperjack: We like Python here. [21:02] ScottK: we do, but introducing delta with debian isn't welcome :( [21:03] ivoks: have you contacted the Debian maintainer ? [21:03] i've sent an email to dd [21:03] i will fight you all if i have to [21:03] but he never responded :/ [21:03] True, but that was coming regardless. [21:03] ivoks: ok. It may take a while. [21:03] mathiaz: i know; but we don't have time :) [21:03] we have scheduled releases :D [21:03] ivoks: so you rewrote the make_catalog_backup script ? [21:03] mathiaz: yes, in python [21:04] ivoks: that's an upstream script ? [21:04] no [21:04] upstream said it's ok and helped me with it, but they'll continue shipping old shell script for now [21:04] i planed naming this script make_backap_catalog.py [21:05] ivoks: ok. And it wasn't possible to fix their script ? [21:05] or something, just to to be clear this isn't the same script [21:05] mok0: will you do the dbmail merge ? [21:05] we should ship both [21:05] mathiaz: it is possible, but i'm not so much familliar with awk (and awk is the only solution for this) [21:06] some really serious parsing is needed :/ [21:06] ivoks: right. So this was needed to fix a CVE ? [21:06] yes [21:06] i think there's no point in CVE [21:06] ivoks: IIRC the configuration is well structured [21:06] make_catalog_backup is just an example script [21:07] ivoks: or at least a security concerns [21:07] ivoks: something like password on the command line [21:07] it's up to user to decide to use it or not... [21:07] i know what's the problem [21:07] i just don't think that example script deservs a CVE :D [21:07] ivoks: do you have a link to the debian bug ? [21:08] ivoks: correct. I'm not familiar with the actual bug. [21:08] http://www.mail-archive.com/debian-bugs-closed@lists.debian.org/msg160720.html [21:08] meh... [21:08] mailing list [21:09] hm [21:10] debian has an interesting fix [21:12] i don't know... [21:13] i'll propose solution; which *isn't* backward compatible [21:13] it can't be, cause atm, password is an argument [21:15] ivoks: right. [21:15] ivoks: you could add some code that checks if there is a third argument and warn the user if so [21:15] this should be done during upgrade of package [21:16] ivoks: correct. [21:16] cause some of the users don't check status of catalog backup [21:16] ivoks: is this just an issue with mysql ? [21:16] no, it's also a postgre issue [21:16] but my scripts solves both [21:17] ivoks: right - because you extract the information from the bacula configuration files. [21:17] IMHO it's the best way to do i. [21:17] it basicaly parses configuration, creates my.cnf and connects to mysql with it [21:17] s/i/it/. [21:17] ivoks: do you have a reference to the discussion you had with upstream dev ? [21:17] just emails [21:18] ivoks: private emails I guess. [21:18] yes [21:19] i'll talk with the dev about making a 'public statement' :) [21:19] something like 'ubuntu rulez, they solved our long lasting CVE' :) [21:19] ivoks: well - I'd rather make sure they'd accept our patches. [21:20] as i said, this is an example script [21:20] ivoks: that's why I'm not so sure about shipping a python script it upstream doesn't think it's a good idea [21:20] it's like udev rules [21:20] * mathiaz install bacula-directory to understand this situation better [21:20] we don't change a code [21:21] you have a backup procedure which can run a job before backup [21:21] so you could dump database to a file and then backup it [21:21] i do that with oracle, mysql, etc... [21:21] ivoks: yes - I'm familiar with that. [21:21] so, baculva provided a example script how to dump sqlite, mysql and pgsql [21:22] where you provide a dbname, username and password [21:22] people you this script to dump bacula's database [21:22] which is silly [21:22] ivoks: ok. [21:23] i don't know one would create special program to dump my_secret_db, but then not use the same program for bacula's db [21:23] s/know one/know why someone/ [21:24] jesus, how many typos [21:24] i should take typing lesons... [21:24] or buy a bigger laptop, with normal keyboard :D [21:27] hi. any word on when new kernels will be coming out for feisty/gutsy? [21:28] :( [21:28] we are probably to slow regarding this problem [21:29] what's holding it up? anything i can do to help as far as testing? [21:31] there's nothing to test [21:31] bah, you should trust your users anyway [21:31] problem is a known thing and patched kernels are probably already buildin [21:31] leonel: yes [21:36] bye [21:44] hmm [21:50] pepper: you did not actually just suggest an admin trust a user did you ;) === jmtt___ is now known as jmtt [22:40] wow O_O anyine seen "The hills have eyes" movie ? its just starting but it shows some shocking images lol o-o [22:40] !ot > Dimitree [22:41] ??? [22:43] Movie reviews are a bit off topic for this channel. [22:44] ok i'm sorry [22:44] very strict rules around here : ) [22:57] wait we do ontopic chat here? [23:21] off topic can be found at #ubuntu-offtopic