/srv/irclogs.ubuntu.com/2008/05/02/#ubuntu-server.txt

telexiconshould the entries for /etc/event.d/tty1 really be 'start on stopped rc2' ?00:10
sorenYes?00:21
telexiconok, well still, /bin/login isn't coming up00:23
jiqirenTakahito's kernel worked for me00:23
jiqirenI can ssh into a xen vm no problem00:24
AtomicSparktell me something interesting you have done with a ubuntu server00:25
sorentelexicon: I don't know how Xen handles terminals :/00:25
telexiconAtomicSpark, im running an ejabberd xmpp server on one00:26
telexicona postgres database on another00:26
telexiconone of them is acting as an nfs gateway to our SAN00:26
telexiconanother one is running apt-proxy to speed up updates for our workstation deployments00:26
AtomicSparki just have a unused hp netserver 4 at home (duel p2 someghz 256MB pc100), just getting ideas for it. :P00:27
telexiconone of them is running squid + dansguardian00:27
telexiconim trying to set up one now, to test java web app frameworks00:27
AtomicSparkafter you set up a squid proxy server, do you have to set clients to use that as their proxy server or is it automatic?00:28
telexiconwe want it to be transparent00:28
telexiconbut the cisco ASA is making that unnecessarily difficult00:29
AtomicSparkyes. transparent would be best. :P00:29
AtomicSparkcisco makes everything difficult imo00:29
telexiconits certainly doable, i have the squid side all set up properly00:29
telexiconbut the cisco asa wont cooperate00:29
AtomicSparkwhat is the asa for? i'm reading the cisco page but it doesn't really explain much00:32
telexiconits a firewall, nat, VPN.. thing00:32
AtomicSparkah kindof an all-in-one00:33
telexiconsure00:33
telexiconbut i dont see whats so special about it00:33
AtomicSparkwell they like making themselves feel special. trust me. i tried to get certified. haha.00:34
telexiconi dont like this :-/00:36
telexiconssh is letting me login without a password00:36
telexiconand sudo doesnt work and login doesnt work00:36
telexiconi think pam is broken00:36
* telexicon sighs00:36
AtomicSparkthat is very interesting. i'm doing a little side research myself.00:39
telexiconoh nevermind, doh00:39
telexiconi forgot i put my pubkey in the image00:39
telexiconhehe ok that one was my fault00:39
AtomicSparkit happens. i love when you reinstall a server and can't ssh into that machine anymore lol.00:45
AtomicSparki suppose it's nice for security. no man-in-the middle attacks.00:45
telexiconeh00:46
telexiconbut it limits usefulness00:46
AtomicSparkneed a better way to remove the server from the .ssh file. i suppose you could just comment out the line. i usually just end up deleting the file.00:48
nealmcbsommer: on that ebox url, I was trusting the official ebox documentation, and a hint of a problem from a forum post, but someone in #ebox folks say it is  https://yourserver/ebox not  https://yourserver/eBox but hasn't responded with a clarification - huh....  anyone have ebox installed?  I don't want to reboot to get it up and lose all my web page context....00:53
sommernealmcb: I think it's /ebox, but I don't have it installed any longer00:58
AtomicSparkhaha. firedrill. i took my laptop with00:59
nealmcbsommer: my firefox url memory concurs.  too bad that their doc doesn't....00:59
sorenAtomicSpark: Remove the file?!?01:01
AtomicSparkyes? it clears your stored keys01:01
sorenAtomicSpark: I usually just remove the line manually, but ssh-keygen can do it for you, too.01:01
sorenAtomicSpark: Yeah. That's a bad plan.01:01
AtomicSparkah. well i usually do bad things. ill try ssh-keygen next time.01:02
sorenThere's a reason it stores them :)01:02
AtomicSparktrue. which is why i said there should be a better way then just removing the file.01:04
nealmcbsoren: thanks for the tip on ssh-keygen - that is always a pain.  good procedures (e.g. when building virtual machines) to just keep the original host key would be even better01:27
HS-Lhow can i keep the time on my 6.06 LTS server up to date? every few weeks the time is off.01:40
infinityHS-L: Install ntp.01:41
HS-Lis already installed.. :/01:41
AtomicSparkyou manually installed ntp? only ntpdate is installed by default.01:44
AtomicSparkyou could try adding another time server if ubuntu.com gets off once in awhile. i never really checked after i insatlled it.01:44
domare<--nub03:41
domareneed some help03:41
domarei have setup server.  with ebox.    i have server running and can connect from other pc.03:42
domarenow i need to set some shares.03:42
domareanybody have a link or command to start me off?03:42
domareanybody know where i can find info on setting up shares for samba03:46
domare?03:46
gregbradyI have a wonderful system setup here for ssh access to my server, my question is how do I setup a dual boot thin client for a remote X session?03:47
gregbradydomare, I gave up on samba and now use ssh....no problems ther03:48
domareand your shares are win systems?03:48
gregbradyNo, I had problems between two linux systems.03:49
gregbradysorry03:49
domareah.. yeah im trying to use this as a media server for my home pcs.03:49
domarei need to get it running here before i think of trying at my biz03:49
gregbradydomare, I got your idea.....I am kind of doing the same except with all ubuntu systems03:50
domareyeah, i can connect to my fileserver.. but i have no shares setup!03:51
domarei also have ebox running for web administration03:51
gregbradyYeah, I tried that route before.....to no good end03:52
gregbradyssh was my solution03:52
domarethat seems a more solid way to do things with this.. i should try that03:52
gregbradydomare, I think so!  I use it over the internet with no issues as well.03:53
domaredo u have a link to some instructions?03:53
gregbradyhmmm.....geeze. I forget now, let me review my notes03:53
domarehave u thought about trying VMware for you needs?03:54
gregbradyI don't use windows anymore....I just need to remotely run X windows sessions.03:54
domaremaybe you could load whatever it is your trying to duel boot03:55
gregbradyI finally kicked the windows habit as of yesterday03:55
gregbradyAh, I want my thin clients to have the option to run a local version of ubuntu with ssh, or a remote X session.03:55
gregbradyGet the idea?03:56
domareyeah, similar to what im thinking in the end03:57
domarei would like to try some different setups in VMs also.. not sure if i can do that from server though03:57
domarelike a terminal server in one.. file in another03:58
erimar77im getting the "following features not present on the CPU" after the server install03:59
erimar77i know i need a generic kernel03:59
erimar77network is not linking up from rescue mode, any ideas?03:59
domarei think everybody here is asleep here man04:00
erimar77ha, good stuff04:00
gregbradydomare, you could be right.04:01
domareheres somebody who got VMware up.. http://www.bauer-power.net/2008/04/installing-vmware-server-on-ubuntu-804.html04:01
{Roger}vmware server is sweet04:02
domareunder xp i have small business server and some other VMs running nicely.   Im kinda trying to replicate that with better performance results04:02
erimar77i can get it working in parallels and vmware, the laptop i'm doing this on won't connect with the network, so i need different options04:02
domareyeah... fun stuff04:02
gregbradyI guess I just don't understand how vmare would help my application out04:02
erimar77moving from the virtual environment to the real thing04:02
erimar77oh, not me.. nevermind04:03
domareu guys seen the new cisco modules that u can install linux on..04:04
domareruns on the backbone of your network04:04
erimar77yeah, for like a million dollars04:05
domareyeah.. heh..   but the network virtualization is very coo.04:05
erimar77i just got a quote for two 48port switches with 10GbE uplinks, $25k04:05
domaredamn04:06
erimar77probably the cx4 modules that threw it over the top04:06
domarethis is a good read for some 101 network virtualization info04:12
domarehttp://www.petri.co.il/server-virtualization-network-virtualization-storage-virtualization.htm04:12
domarei guess 3com already has some modules that run a linux system.. u can set sniffers and whatnot right on backbone04:13
sorennealmcb: "the original host key"?07:49
Viper111i connect to my ubuntu server through VPN since connection is established i loose route to internet to everyhting, anybody can help in soloving such  prob08:07
torbenI'm having some trouble with 'automiunt' during reboot. I have checked my /dev/fstab file, but it all looks fine (except from all the encrypted shit concerning the /boot partition etc. ). Should I look anywhere else ?!08:15
sorentorben: You could perhaps explain what your problem is..08:18
sorenYou fix "some trouble" by "changing some stuff".08:18
sorenIf the problem description becomes more clear, the solution can too.08:19
torbensoren : *Cough*, well... It seems that wen I reboot my box it automounts two partitions 'on top' of each other. Very annoying !?...08:20
torben... It does run 24/7 as a server, and I can offcourse manually unmount the stuff etc., but it would be nice if I could 'just' reboot and have a working system :D08:21
sorenWhen you say "automounts"... Are you talking about nfs automounting or just regular mounting done at boot?08:21
torbenHrm... Good question !?.08:22
sorenIf you don't know, then it's not about the nfs things.08:22
torben... I'll just check dmesg...08:22
sorenYou don't accidentally set up nfs automounting. Really.08:22
sorenWhat do you mean by "'on top' of each other"? Can you put your fstab somewhere?08:23
soren!pastebin08:23
ubottupastebin is a service to post multiple-lined texts so you don't flood the channel. The Ubuntu pastebin is at http://paste.ubuntu.com (make sure you give us the URL for your paste - see also the channel topic)08:23
torbensoren, Well, thanx a bunch... I am bit of a noob on IRC (as you probably guessed)... The link is : http://paste.ubuntu.com/9413/08:26
torbenHm... nfs... ?!08:27
sorenAnd what seems to be the problem, exactly?08:28
soren...and you really should be using UUID's for the last filesystems, too.08:28
torbenWell, the problem is that hda1 is mounted in /home/apach2/domains, and not /home /ftp/data/webservices...08:30
sorentorben: How is that "'on top' of each other"?08:31
torbenHeh, my To-do list regarding Linux, and my server is really full ;o)08:31
Viper111when i connect to my server through VPn i loose connection can anybody guide me08:34
jay2hmmm08:34
torbensoren, Well, I run Ubuntu server from a USB-stick08:37
sorenOk..08:37
torben... On the stick I have a directory for Apache, containing the simple (and small) parts of a website08:38
torben... I also have a IDE-HD containing some ftp stuff etc, and experimental websites... When I boot the server mounts my 'ftp-directory' (on the IDE drive) on top of my 'Apache-directory' (on the stick)08:40
sorenThat makes no sense. Your fstab doesn't even mention the apache directory.08:40
sorenYou say you can fix this by running some command.. Which one is that?08:40
torbensoren, that's what puzzles me08:40
torben'umount /home/apache2/domains'08:41
torbenoffcourse that removes my 'ftp-directory' from the mountpoint at my stick....08:42
torben... Revealing the underlying 'domains'-directory'...08:42
torben... It's not a real 'big' problem... But had to reboot a couple of times yesterday, and it began to bother me alot :)08:43
_rubeni'd check if thre's a boot script that does the mounting .. grep mount /etc/init.d/* or so :)08:47
sorentorben: So your ftp directory is mounted twice, then? Once on /home/apache2/domains and once somewhere else?08:48
torben_ruben, Hm... Actually U might be ritht there...08:52
torbensoren : Exactly :)08:53
torben_ruben, well there it was :o)... ThanX a bunch08:55
owhI've just logged into a VPS with Ubuntu for the first time. For starters it's running with a root account. How do I find out how else this "virgin install" differs from a standard ubuntu-server installation?08:56
owhOther non-standard things are that it's running ReiserFS, has wifi tools installed etc.08:57
_rubenwifi is standard i think08:58
_rubentorben: glad to have helped :)08:58
owh_ruben: Not on the hardy install on my local vmware instance.08:58
jay2hello _ruben08:59
owhThis VPS also has x11-common marked as 'rc' and comes with things like make etc.08:59
_rubenowh: well, atleast the wpa_* tools are standard09:00
_rubenowh: they probably tried to make things easy for their customers by providing extra stuff by default09:01
owhSo, back to the original question, how do I actually compare it with a ubuntu-server install, or can I "install" ubuntu-server and remove all the rest in some sane way?09:01
_rubentake "dpkg -l" from the vps and from a clean install and run diff over it .. probably requires some extra scripting to "ignore" the versions09:02
_rubendont think there's a "remove all but the core" option :)09:03
owh_ruben: Yeah, but that won't catch any "manual" editing.09:03
_rubenas that would kill ssh and stuff as well09:03
_rubenowh: to cactch manual editing you'd first have to get a reference system with the exact same versions installed .. and then diff/md5sum each file to see if it has been changed .. not that easy ;)09:04
owh_ruben: Wonderful. Just what I didn't need today.09:04
_rubenowh: depending on the disk layout .. you *could* debootstrap a clean install on it :p09:05
owh_ruben: Yeah, but that really feels like a scary option :)09:05
sorenowh: That's what I've done with all my colocated servers.09:06
owhsoren: The last time I did a debootstrap it ended in tears.09:06
owhI suppose the out I have here is that I can just reinstall another OS over the top if I'm lucky. I suppose I could try that before I really break it :)09:07
owhIs there a way, like lsb_release, that would show me which installation was completed?09:14
owhAs in, Ubuntu Server, Desktop, Alternate, JEOS, etc?09:15
_rubenthere might be some hints in /var/log/installer09:20
owhBloody good idea, tah.09:20
owh_ruben: Crap, no longer exists.09:21
omnz0rHi guys, maybe this is a silly question, but here it is anyways. Can a (d)dos attack cause a server to reboot?09:21
owh_ruben: And dpkg.loh is empty, yay :|09:21
owhomnz0r: Well, it is possible.09:22
omnz0rowh: Do you know of any "documentation" or examples of this, that is accessible via web?09:22
_rubendos is denial of service .. so getting a box to crash sure qualifies as being a dos09:23
owhomnz0r: Not specifically no, but a ddos could cause all manner of issues, caches filling, drives filling, memory filling, network services crashing, each of those could cause a reboot in itself.09:24
omnz0r_ruben: sure :) The question was not what a dos attack is, but more what a dos attack can cause :)09:24
omnz0rowh: thank you very much, it seems intuitive when you put it that way :)09:25
owhIn this VPS I need to receive small emails that are sent to a single account where a .forward file pipes the email to a script. What email package is likely best suited - probably in memory footprint more than anything - to achieve this?09:28
_rubenowh: i think i'd just go for the default: postfix09:29
_rubenthen again, smtp is rather simple, could write your own daemon for it ;)09:30
owh_ruben: I'm canny, but not stupid :)09:30
_rubenhehe09:32
owh_ruben: Next you'll be suggesting that I get out the soldering iron and the magnifying glasses to repair any broken memory cores :)09:32
ewookyou'll need a spare core for that ;)09:33
owhewook: You raise a valid point, spares for that would be hard to come by :)09:34
owhewook: Mind you, finding the diagrams and the actual board would be probably just as complicated >:-)09:36
ewookowh: true enough =o).09:38
_rubenhehe09:39
owhDoes apt support wild-cards, like apt-get --purge remove *mysql* ?09:43
owhIn case anyone else was wondering, not as far as I can tell.09:45
owhWorkaround: apt-get --purge remove mysql-common09:48
jay2mysql I am really interested in learning that owh!09:58
\showh, apt should support regexp...apt-get install ^claws-mail e.g. works10:01
Payogood morning10:11
_rubeng'day10:13
Payohi _ruben10:13
Payoquick question:10:13
Payoi was wondering if there was an easy way to swap from the desktop version of ubuntu to the server version10:13
_rubenapt-get remove ubuntu-desktop ; apt-get install ubuntu-server .. might do the trick .. but doing a clean install sure is prefered10:14
_rubenwhat's the idea behind to move from dekstop to server?10:14
Payoi've been playing around with dekiwiki on my desktop ubuntu - and will shortly have a 64bit server free to move into production10:15
Payoi just wanted to have a look at the server version while waiting for the server to arrive10:16
Deepsapt-get install ubuntu-server, and shit+alt+f1 to switch to a console10:17
Payothanks Deeps10:19
_rubenPayo: i usualy use virtualization software (vmware/xen/kvm/vbox/etc) for that10:20
_rubenfor testriding software/os's that is10:21
Payoyeah - i should get to grips with virtualisation10:21
=== c1|freaky_ is now known as c1|freaky
Payowhich of those packages are open-source10:22
_rubenxen and kvm are afaik, vmware and vbox arent, but are free (depending on which exact product)10:22
_rubeni prefer vmware myself10:23
c1|freakyhi all. is someone familiar with openvpn? i own a dedicated server. it only has one ethernet card. can i still use ethernet bridging? the howto says i shouldnt use it with a normal ethernet card which is connected to the internet but we want to be able to play lan games and use windows filesharing and that's not really possible without the ethernet bridging as it wont send any broadcasts and stuff without ethernet bridging.10:27
Payomindtouch offer a vmware image of dekiwiki - time to start learning!10:29
_rubenc1|freaky: i am familiar with openvpn, but never tried it on a single homed machine10:31
_rubenor actually, i think i did10:31
c1|freakyit has 6 IP Addresses, - 6 virtual interfacces on eth0 but only one NIC10:32
c1|freaky(the server)10:32
c1|freakyclients should only connect to it and see each other10:32
c1|freakythere is no LAN behind the server only the vpn network10:32
_rubenc1|freaky: i think that should be doable, its unlike any setup i've done though10:33
c1|freaky_ruben: i have currently set up the server using tap but still using the normal server config directive and not the ethernet-bridging stuff10:34
c1|freakyit's working10:34
c1|freakybut it says i must use ethernet bridging not the server directive10:34
c1|freakyif i do that it wont work anymore10:34
c1|freakyso now i have no idea if i can put that bridge up on the interface or if i should because the howto says i'd open a security hole10:35
c1|freakyand in #openvpn noone answers10:35
_rubenthe mentioned security hole is probably that the clients can reach eachother, which is exactly what you're trying to achieve10:36
c1|freakyok thank you10:37
c1|freaky:D10:38
_rubenwonder if i shoudl create a ppa for my open-vm-tools packages for hardy/gutsy10:40
c1|freakyumm, if i just put a ethernet bridge on that interface, will it mean other clients from the internet can send netbios packages?10:42
c1|freakyand wont it take the interface down? oO10:43
c1|freaky_ruben ;D10:43
_rubenwouldnt dare to say, never worked with bridgin (other than with vmware) .. and a decent firewall should keep "the internet" out of your bridge10:43
_rubeni dont think you need to create a bridge though10:44
_rubensince you only want inter-client connectivity10:44
_rubenwhich is up to openvpn to take care of10:44
c1|freakyMake sure to use an interface which is private and which is connected to a LAN which is protected from the internet by a firewall. <-- this is waht the howto says, nothing applies to that ethernet card10:44
c1|freakyok and what's the bridge for then?10:45
c1|freakyi really need the tunnelling of bridging but it really works allready10:46
c1|freakyjust unsure what the bridge then does if it's usually required10:46
c1|freakyThis example will guide you in configuring an OpenVPN server-side ethernet bridge. Multiple clients will be able to connect to the bridge, and each client's TAP interface will be assigned an IP address that is part of the server's LAN. <-- maybe only for this then10:48
c1|freakybut as i have no lan behind the server only through openvpn10:48
c1|freakyi think it's ok to leave it like that10:48
c1|freakyi hope10:48
_rubenc1|freaky: i *think* so too, but dont know for sure, try and find out ;)10:49
c1|freakywhat should i try to find out? i've allready played lan games, used windows filesharing etc.10:50
jay2well I finally found information on how to set up a gui for ubuntu server edition10:50
c1|freakyso that's working10:50
jay2:)10:50
c1|freaky:)10:51
c1|freakyhow do i set up samba to not require user authentication - ill search google10:52
_rubenc1|freaky: if it was already working, then what was the problem? :P10:52
_rubengui on server .. yuck10:53
c1|freaky_ruben: the problem was, im using ethernet bridging, so i wondered why it works without the ethernet bridge. ive setup without the bridge before. i thought maybe it was using that interface in a completely wrong way10:53
_rubenah10:53
uvirtbotNew bug: #225608 in postfix (main) "Upgrade to 8.04" [Undecided,New] https://launchpad.net/bugs/22560810:57
_rubennice bug description10:57
c1|freakyhehe10:58
jay2well I like using a gui but also as well just the command line to comes in quite handy too there _ruben11:23
_rubengui's are a waste of resources on a server imo11:26
_rubennot to mention the security implications11:27
jay2true11:27
jay2resources is what alot of people need these days esspecally when it comes to demanding applications11:29
jay2there are always thouse ups and downs to things11:30
jay2I think I well have a better home for using ubuntu then microsoft there _ruben11:31
jay2:)11:32
ctx144khello all12:02
ctx144kiam searching a time-daemon, which willbe run as daemon, and willbe check and control time all view minuts with my own timeserver. which program should i use for that?12:03
_rubenctx144k: not really sure what you mean, but i think the answer is ntpd?12:05
lamont_ruben: apport is _so_ helpful sometimes, isn't it?12:06
ctx144k_ruben, ill look for it, thx12:08
_rubenhuh? .. ow that bugreport i guess, didnt look at it, so wouldnt know the 'source' either :)12:08
_rubenlamont: ^^12:09
lamont_ruben: yeah 225608 is a "upgrade failed, kthx" report.  of course, I haven't managed to duplicate it in my gutsy->hardy transitions, so the lack of information, mixed with the non-english error message makes it, uh, a conversation starter at best12:12
_rubenlamont: heh, indeed12:15
fisfiahello everybody =) now I successfully installed ubuntuserver because nothing else is working. but how do I get into X and xfce or something else? or is it only CLI?12:50
Deepsubuntu server doesn't feature a desktop component12:51
Deepsa GUI component, even12:51
Deepsapt-get install ubuntu-dektop if you want the standard ubuntu desktop environment12:51
Deepsubuntu-desktop even12:51
fisfiaok Ill try that thanx12:51
fisfiaeveryting I try with sudo apt-get is giving me "the package could not be found"12:55
fisfiamaybe I have no connection...?12:55
_rubentry sudo apt-get update13:02
fisfiaI did ifconfig and there is only info about lo nothing about eth013:05
_rubenand what does "ip addr" show? ifconfig is ancient13:06
fisfiaI have no ipaddress but now eth0 is shown in ifconfig13:14
dendrobatesmorning13:18
uvirtbotNew bug: #225661 in samba (main) "Typo in /etc/samba/smb.conf (nsuccessful)" [Undecided,New] https://launchpad.net/bugs/22566113:21
sommerdendrobates: morning13:26
nealmcbsoren: "original host key" - i.e. the problem is that people reinstall an os, use the same name for the machine, but don't save the old /etc/ssh/ssh_host_dsa_key and/or /etc/ssh/ssh_host_rsa_key and reuse that on the new os.  maybe ubuntu should make it easier to preserve these across reinstall.14:01
Fohdeeshalucent home?14:01
\shzul, ping bacula :)14:05
\shzul, could you add the drop-mysql-tables script from the bacula source to bacula-director-mysql ? it's missing somehow, but it would make sense, when we ship create-tables-mysql  script from the very same dir14:06
zul\sh: sure14:06
zulpatches also welcomed :)14:06
\shzul, I'm just on my way to a working build infra at home again ;)14:06
zulheh14:07
\shzul, another thing is, I'll try to fix the qt4 bacula console, too...it has some issues when editing the media files (e.g. it's not possible to set a file to max 100GB size, the input line has wrong max values somehow)14:08
zul\sh: thats weird can you open issues in launchpad so we can track them for a possible SRU as well14:08
\shzul, yes..I'm working on a fix, as said, I stepped upon this bug last week when I setup bacula for the company ;)14:09
zulok14:09
\shzul, manually editing the volmaxsize inside the db tables works :) but not from the qt4 console14:09
zulinteresting we will have to talk to upstream as well14:10
\shzul, for sure...when I have a patch ready for applying I'll push all the stuff towards debian+upstream14:11
zulthanks14:11
zulmathiaz: Ive added the dovecot bug to the stablereleasetracker wiki page14:28
mathiazzul: great - thanks14:31
nealmcbhmm - I hadn't seen this before:  https://help.ubuntu.com/community/WebMin   seems like some information on why it was dropped based on https://answers.edge.launchpad.net/ubuntu/+question/2873 would help, along with an ebox pointer14:39
nealmcb!ebox14:39
ubottuebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox14:39
nealmcb!webmin14:39
ubottuwebmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. See !ebox instead.14:39
* nealmcb starts taking a stab at it....14:41
nealmcbcomments welcomed on https://help.ubuntu.com/community/WebMin  and/or my post just now to the list, with more specifics on the config file issues requested15:03
Siph0nif I do a data dvd with gnomebaker, will that burn image files as an image? or just as data?15:07
* nealmcb also notes WebminWithoutARootAccount15:09
nealmcbhttps://help.ubuntu.com/community/WebminWithoutARootAccount15:09
mathiaznealmcb: are you hunting down all the webmin occurence on w.u.c ?15:12
mathiaznealmcb: and help.u.c15:12
mathiaznealmcb: ?15:12
nealmcbslowly....15:13
* mathiaz hugs nealmcb 15:13
nealmcb:-)15:14
nealmcbbut it would really help to have something more substantial to point at when folks talk of incompatibility with policy - I hate just passing on pretty vague complaints15:15
mathiaznealmcb: agreed15:17
mathiaznealmcb: you could do search on irclogs.ubuntu.com about webmin and #ubuntu-server15:17
mathiaznealmcb: sometime ago there was a discussion about it and IIRC infinity gave some reasons about the configuration files issues15:18
nealmcbmathiaz: that's a painful prospect....  much heat, little light15:18
mathiaznealmcb: I agree with you - we should really come up with a good answer on this one15:18
nealmcbif we collectively spent as much time actually improving ebox (or even fixing webmin) that we do complaining about webmin, we'd be much better off :-)   and have fewer complaints....15:20
* mathiaz nods15:21
zulnealmcb: eBox should be getting better since they are basing their stuff off of hardy starting their next development cycle15:23
eghjayteeHello I am trying to use IP based hosting on apache2 but my DocumentRoot is not being used within the configuration file within sites-available, it is using the default path from the default site. Can anyonehelp me with this?15:25
eghjayteeexcuse me, I meant DocumentRoot15:26
_rubeneghjaytee: did you enable the site (symlink in sites-enabled)15:27
eghjaytee_ruben: yes I did15:27
eghjayteethis is so weird15:27
eghjayteethis is for a second apache instance15:27
eghjayteeI copied over the entire /etc/apache2 dir and changed the IPs15:27
_ruben2 instances on same host?15:27
eghjayteeno different hosts15:27
_rubenah ok15:27
eghjayteeload balanced15:27
mathiaznealmcb: it seems that the only reason why webmin was dropped was the lack of maintainers15:27
eghjaytee_ruben: can you thinkn of a reason why DocumentRoot would be picked up from within a VirtualHost conf file?15:28
_rubeneghjaytee: apparently apache thinks the default is the best match for the request .. no errors or wahtever in the logs? (during both restart/reload and request of the url)15:29
mathiaznealmcb: webmin upstream provide packages for debian/ubuntu - http://www.webmin.com/deb.html15:30
eghjaytee_ruben: no it is so weird, it is like the VirtualHost isn't being picked up15:30
nealmcbmathiaz: for debian that seems the reason.  for ubuntu it seems that some admins hated it with a passion.  but the concrete reasons for hating it are hard to find.15:30
eghjayteeand so it uses the default document root15:30
eghjayteeI will up the logging15:31
mathiaznealmcb: right - we'll wait for infinity to wake up and we'll know why ;)15:31
nealmcbmathiaz: yeah - that is the point of that wiki page on webmin.  I'd love for someone who knows debian policy to review the current webmin and point out some issues (or maybe they fixed them)15:31
CannibalMoh dear god, help!15:31
CannibalMI have a presentation in an hour or so,15:32
mathiaznealmcb: I'm not totally convinced by "webmin munges your config files"15:32
CannibalMand my linux server which was working fine when I left last night,15:32
nealmcbit is painful going thru the complaints here....  http://www.google.com/search?num=50&hl=en&safe=off&client=firefox-a&rls=com.ubuntu%3Aen-US%3Aofficial&hs=dUb&q=site%3Airclogs.ubuntu.com++webmin++%23ubuntu-server+infinity&btnG=Search15:32
CannibalMI come in and am able to connect to it through SSH but yet it cannot get any outside access.15:32
_rubeneghjaytee: try: apache2 -S15:32
CannibalMSo then I turn around and reboot the box,15:32
CannibalMand now it can't even see it's eth0 or IP!15:32
mathiaznealmcb: that's the role of webmin - editing configuration files15:32
mathiaznealmcb: I fail to see how ebox and webmin are different on this point15:33
mathiaznealmcb: expect that ebox takes care of not overwritting localy modified files15:33
CannibalMi can't even use webmin on mine as I cannot connect to it!15:33
Asad2005i have made a raid 5 of 3 disks and will soon expand to 6 (sata 3G), how can i tell if all disk working in 3GB or 1.5 GB i.e. Sata I or II15:33
nealmcbthe only specific I got was from ScottK:... There was a funny bit today about an Ubuntu user writing in with a Postfix problem that turned out to be webmin adding 'sudo' to their smtpd_recipient_restrictions. - http://archives.neohapsis.com/archives/postfix/2007-11/1330.html15:33
lamontheh15:34
nealmcbbut I don't know what that is about - lamont?15:34
ScottKI'm not sure why it added that, but fundamentally it corrupted the config file.15:35
uvirtbotNew bug: #225741 in mysql-dfsg-5.0 (main) "/usr/bin/mysql_config --libs_r reports incorrect link flags" [Undecided,New] https://launchpad.net/bugs/22574115:35
nealmcbScottK: can you clarify the implications of that a bit more?15:36
eghjaytee_ruben: hey man, I thought theat a2ensite created a link15:36
eghjayteethis is creating a file15:36
mathiazso it seems that webmin adds options when it modifies a configuration file15:36
eghjayteeman that is messed up15:36
ScottKnealmcb: Use webmin and eventually you will cry is my summary.15:36
mathiaznealmcb: you'd edit a service, and the generated configuration file ends up with non-viable options15:37
ScottKI've never used it, so I have no idea exactly how that happened, but it's consistent with the don't use it advice I've seen given.15:37
eghjayteejesus that was the problem15:37
mathiazScottK: right - that's what we've always heard -15:37
_rubeneghjaytee: my understanding is that a2ensite would create symlink as well..15:37
eghjayteethanks _ruben15:37
eghjayteeI dont knwo why it isnt linking15:37
eghjayteeI will look into it15:37
_rubeneghjaytee: heh, no problem :)15:37
mathiazScottK: I'd like to know what are the problems exactly - if this hasn't turned into an urban legend15:37
nealmcbi.e. postfix won't start up? or won't work?  remember we're trying to clarify this for the newbies, not hardened postfix wizards15:38
ScottKmathiaz: In that particular case it corrupted the postfix config file and broke Postfix.  I've no idea how or why.15:38
lamont"DO NOT USE WEBMIN"  there..  that's simple. :0)15:39
nealmcbI think webmin ensnares baby penguins and eats them also15:39
mathiazIf the postfix module in webmin generates a incorrect postfix configuration file, the postfix module in webmin should be fixed15:39
lamontmathiaz: sure.15:39
lamontbut that's not a postfix bug15:39
ScottKmathiaz: Sure.  Have fun with that.15:39
nealmcband it makes all the people who can help walk away from you15:39
nealmcbScottK: lamont: do you think ebox will be better?15:39
lamontnfc15:40
ScottKnealmcb: Same with me.  At least ebox are working with a Debian environment in mind.  Odds are better, but it's a hard problem.15:40
[LMJ]hi15:41
nealmcblamont: nfc?15:41
ScottKhi [LMJ].15:42
mathiazScottK: have fun with that -> do you suggest that the webmin code is of bad quality or hard to work with ?15:42
ScottKmathiaz: I'm suggesting it's not a problem I'm interested in solving.  I think it's better to invest time in documentation and training to make it easier for people to properly administer their systems.15:43
[LMJ]I'm really stuck right now : I can't find a way to see my 2 network card on my fresh Hardy server install : 1 eth is nvidia gigabit (forcedeth) onboard who works fine, the other one, an old 100Mbits D-link one is not seen by the kernel, nor during the boot or via lspci. I through the card was day, i've tried another one who I know it works, same issue, I can get this second eth card working please ?15:44
[LMJ]hi ScottK15:44
ScottKlamont: Any suggestions on what to ask for (in terms of more information) in Bug 225608?15:49
uvirtbotLaunchpad bug 225608 in postfix "Upgrade to 8.04" [Undecided,New] https://launchpad.net/bugs/22560815:49
nealmcbScottK: I encourage you to work on what you like, and that is the sort of thing I like too.  But I think documentation actually has limited impact on solving bug #1.  Microsoft didn't get where it is by having good documentation - they leveraged people's preference for guis.   I think it would be nice if we could expect that a significant fraction of the folks we want to be adopters of ubuntu server to read documentation and become wise in the 15:49
uvirtbotLaunchpad bug 1 in ubuntu "Microsoft has a majority market share" [Critical,Confirmed] https://launchpad.net/bugs/115:49
lamontnealmcb: nfc is short for "no clue"15:50
mathiaznealmcb: the problem with webmin may be that it gives to much power to the targeted audience15:50
nealmcblamont: Ahh :) :)15:50
lamontScottK: for starters "exactly how did it fail" :-)15:50
nealmcbmathiaz: good point15:50
ScottKlamont: Yeah.  I was hoping you might have some suspects I could point them at.15:51
mathiaznealmcb: if we assume that the target audience for a web interface is up to junior sysadmin, they should not be able to edit secondary dns zone in bind9 for example.15:51
nealmcblamont: nfc about what "smtpd_recipient_restrictions" are or what "sudo" would mean there?15:51
lamontScottK: well, a translation of the error message to something I know would be helpful15:52
ScottKlamont: OK.15:52
lamontnealmcb: about whether ebox would work better than webmin15:52
lamontas in "what's ebox?"15:52
ScottKnealmcb: If we replicate Windows sysadmin culture in Ubuntu, we won't have accomplished much.15:52
mathiazScottK: agreed.15:52
lamontnealmcb: while knowing enough of an answer to know that, like webmin, it assumes a level of clue on the part of the user that is not generally present in the target audience15:52
mathiaznealmcb: so we could say that standard tasks should be available through a web interface15:53
nealmcblamont: ok.  anyone care to help me flesh out that one reported webmin error I've heard about?  Is it a random thing to do, or does adding sudo make it insecure, or is it a syntax error?15:54
ScottKAny ace translators recognize what language "paketti postfix on jo asennettu ja konfiguroitu" is in?15:54
ScottKnealmcb: Syntax error.  Postfix will die, restart, and die without delivering mail (IIRC).15:54
ScottKThe issue isn't that it's sudo, but that it's some unrecognized restriction.15:55
zulScottK: finish maybe?15:55
ScottKIf it had been 'bob' it would fail the same way.15:55
mathiaznealmcb: for this particular bug, the webmin module generated a wrong configuration file15:55
mathiaznealmcb: I don't think it's a good example why webmin is bad - ebox could lead to the same error, or a any other document15:56
_rubenindonesian and the likes are an option as well i think :p15:56
kirklandScottK: google concurs with zul, Finnish15:56
nealmcbScottK: thanks!  ouch!!15:56
CannibalMseriously, I need help. I just went through a rescue mode boot and could get it working,15:56
nealmcbmathiaz: right15:56
CannibalMbut when finished and rebooted it stops functioning again.15:56
ScottKkirkland: Thanks.15:56
CannibalMWhen I ifconfig I am getting hex, NOip15:56
CannibalMif I check the interfaces file, it shows everythign fine.15:56
ScottKlamont: That's the reporters first Ubuntu bug report ever, so I don't hold out a lot of hope.15:57
CannibalMI cannot get an IP through DHCP so I must set it by hand which it works fine.15:57
CannibalMhowever after reboot, nothing.15:57
CannibalMAnyone, for the love of god.15:57
_rubenCannibalM: probably an error in the interfaces file .. no errors on sudo invoke-rc.d networking restart ?15:57
lamontScottK: atm, it's +moreinfo :-(15:57
lamontdear oo.o  why do you take focus?15:57
lamontI didn't put my mouse in your window15:57
CannibalM_ruben, the interface file is mint, even checked it against three other systems. no issues, the networking restart never gets an IP, just loops forever. Can't even break it.15:58
_rubenloops ? put the output on a pastebin15:59
CannibalMcan't copy and paste.16:01
CannibalMlol no net16:01
ScottKlamont: The error message translates at "the package postfix is already installed and configured".16:01
_rubenCannibalM: then describe in what way it's looping16:02
ScottKzul and kirkland: Thanks.  Finnish it is.16:02
ScottKlamont: Does that mean it's update-manager and we shift the blame to mvo?16:03
rhineheart_mhello. how's hardy doing in server deployment? anybody has a feedback?16:04
Asad2005How can i tell if disks  working in 3GB or 1.5 GB i.e. Sata I or II16:05
uvirtbotNew bug: #225600 in php5 (main) "[Hardy][Regression] PHP 5.2.4 symlink bug breaks TYPO3 default setup" [Medium,Confirmed] https://launchpad.net/bugs/22560016:05
_rubenAsad2005: check output of dmesg .. there should smth like: [   19.298661] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)16:09
_rubenmight depend on driver tho16:09
Asad2005_ruben, and if it is showing 1.5 while drive and controller is 3 GB is there away to alter it from linux or bios16:11
_rubenAsad2005: i know certain maxtor drives have a jumper for sata1/sata2 mode16:12
_rubenother than that i dunno16:12
CannibalMServer deployment = the suxor.16:12
CannibalManger comes from it when networking randomly works16:13
CannibalMgrrrrrr16:13
* _ruben uses his psychic powers to see which errors CannibalM is getting16:13
CannibalMlol16:14
CannibalMin short, DHCP never can pull an IP while everything else can, this is on most hardware we have tried and trialed the software on.16:14
CannibalMso setting by static it works,16:14
CannibalMworked beautifully, came in this morning and went to update repos and download a tarball onto the system through webmin,16:15
CannibalMno access to the net.16:15
CannibalMthe internal network, no problem.16:15
CannibalMwtf? So I check the interfaces file, check ifconfig etc etc.16:15
CannibalMall looks fine.16:15
CannibalMI reboot, and now no network found16:15
lamontScottK: heh16:15
CannibalMIhave to use rescue mode and hand configure the info,16:15
CannibalM(Which matches the interfaces file EXACTLY)16:16
ScottKlamont: I don't think Postfix can make that error.16:16
lamontScottK: ok.  so what exactly did it didn't do?16:16
* nealmcb doesn't need psychic powers to guess what the reaction here will be to the mention of webmin and random networking problems....16:16
ScottKDunno.16:16
CannibalMand then start all the services through the shell loaded through the rescue boot.16:16
_rubeni have no idea what you mean by : DHCP never can pull an IP while everything else can, this is on most hardware we have tried and trialed the software on.16:16
CannibalMWebmin has been great for me.16:16
CannibalMWell, we use a DHCP network here for most items,16:16
CannibalMfrom there we set all static IP's on the reserved IP's for servers etc.16:17
CannibalMwell, with Ubuntu, it can never get an IP16:17
CannibalMever.16:17
lamontI use DHCP almost exclusively on the network I'm sitting on, with no issues.16:17
CannibalMI have to always set it by hand.16:17
lamontbut only since warty16:17
_rubendhcp works like a charm here as well16:17
CannibalMYeah, its really wierd because I have used a couple different ubuntu releases,16:17
CannibalMon other machines with no issues at all.16:17
CannibalMbut for the last two,16:17
CannibalMeven desktop machines can't get it.16:17
lamontCannibalM: I've been using ubuntu with dhcp since before it released.16:18
lamontboth upgraded and freshly installed machines for feisty/gutsy/hardy, and probably earlier16:18
Kamping_KaiserCannibalM, i've been having issues with a hardy system and dhcp too16:18
CannibalMits wierd, just the last two releases. Our servers, ranging from old DL350's up through new dual quad cores.16:19
CannibalMI'm starting to think its our DHCP server.16:19
CannibalMbut everything else works mint so I'm boggled.16:19
* Kamping_Kaiser blames nm, just because16:19
rhineheart_mKamping_Kaiser, I took your advice before not to do with hardy yet :)16:19
CannibalMand at the same time, the desktop's for dev work with the desktop edition,16:20
CannibalMsame thing.16:20
CannibalMWell, through rescue boot I got apache and everything else running with the network functioning again, so I'm gonna do a drop of all my files onto something else,16:20
Kamping_Kaiserrhineheart_m, :) hopefully its going to be helpful advice16:20
CannibalMthen do a full wipe and see if the last LTS server can handle the task of holding a network interface and IP to function properly.16:20
Kamping_Kaiserit was 8.04-server that wasnt working. my 8.04 laptop is fine16:21
CannibalMOh,16:21
* Kamping_Kaiser has had issues with 8.04 on both server installs hes done16:21
CannibalMand any other early adopters download the desktop version of 8 and have it not be a bootable disk?16:21
rhineheart_mKamping_Kaiser, yeah.. I just play around with debian etch.. to tell you honestly.. ubuntu helped me a lot to learn the debian way :)16:21
CannibalMyea, I was thinking of Debian, not sure what would be the best distro for a server setup16:21
CannibalMI would hate to move to RH16:21
* ScottK has done one fresh install of 8.04 and several upgrades without problems.16:22
CannibalMalthought we already have an enterprise boc going.16:22
CannibalM*box16:22
Kamping_KaiserScottK, oh good, it works for someone then ;)16:22
ScottKI suspect it works for almost everybody.16:22
CannibalMgreat OS, amazing distro, just small things that happen.16:22
Kamping_Kaiserme to. but for once i'm the one with problems, so i get to be the whiny one16:23
rhineheart_mmmm.. I'm running virtualmin on a fresh debian box... and so far it works like a charm! I love it! :)16:23
CannibalMI just can't have somehting go wrong at random times,16:23
CannibalMits a test box and I can't be ready to have a presentation and have something randomly go out on me.16:23
Kamping_KaiserScottK, is network manager installed on server, or just desktop?16:24
ScottKJust desktop.16:24
ScottKI'm pretty sure.16:24
ScottKAll my servers are on static IP, so I don't use dhcp on servers.16:24
Kamping_Kaiserthats what i thought.16:24
Kamping_Kaiseri've tried one dhcp system (because its on a desk next to me if stuff breaks), and one static. i should really get the hdd from the "doent work" install and file bugs16:25
rhineheart_mcan you then say that the release of hardy is premature?16:25
ScottKrhineheart_m: Anyone who wants to can say that.  I think they'd be wrong, but they can say it.16:26
nealmcb!ldap16:26
ubottuLDAP is the Lightweight Directory Access Protocol. For more information and installation instructions, see https://help.ubuntu.com/community/OpenLDAPServer16:26
* Kamping_Kaiser says it (wrongly :P)16:26
nealmcbsomeone want to comment on this *cough* old page and how it relates to the latest mail advice?  https://help.ubuntu.com/community/MailScanner16:33
ScottKnealmcb: I suggest just delete the page.16:34
ScottKMailScanner is defective by design when integrated with Postfix.16:35
nealmcbScottK: what part of the design are you referring to?16:41
ScottKThe part where it integrates with postfix via unpublished postfix internal interfaces (queue file format) and so each time postfix makes internal changes, it has to be updated, but will lose mail in the mean time.16:42
lamontScottK: Total H916:42
ScottKIntegrating via public documented interfaces is a pretty fundamental software engineering priciniple.16:42
nealmcbgreat- for now I'll just say that - I think page deletion should get some wiki review16:42
ScottKnealmcb: To go with it, the Postfix upstream strongly recommends against using Mailscanner with Postfix.  It's not just us.16:43
lamont"dear crackheads.  die. kthx"16:43
lamontok, I'll admit that Wietse would never say it in quite those words.16:44
ScottKnealmcb: If you aren't frightened enough, the MailScanner developers describe this as a "Political" problem.16:45
ScottKnealmcb: If they believe that, I'm not using their software.16:46
* nealmcb nods16:46
lamontScottK: rotfl16:47
ScottKleonel: You can stop working on Dapper clamav debdiffs.  pitti just copied clamav 0.92.1 from dapper-backports to dapper-updates.16:56
ScottKjdstrand: ^^^ Thanks for looking into it.16:56
jdstrand\o/16:57
jdstrandScottK: thanks for doing it :)16:57
leonelScottK: stopped since  wednesday  when we talked about it   yesterday I was  out all day  and  today afternoon  I resume the gutsy / feisty patches16:58
ScottKGreat.16:58
ScottKjdstrand or kees: Now that pitti has copied clamav from dapper-backports to dapper-updates, would one of you do dapper-security (there are security fixes in there)?17:12
ScottKI'd hate to see someone who has security, but not updates not get the security fixes.17:12
jdstrandScottK, kees: I'll do it17:12
ScottKjdstrand: Thanks.17:12
ScottKjdstrand: One lingering clamav concern I have is that you can't currently build clamav on hppa for Gutsy.  Apparently sendmail existed for a while and then vanished, so clamav will always FTBFS on hppa in Gutsy.  Not sure what the best thing to do is to deal with the security issues in that package.17:15
jdstrandScottK: ok-- I'll talk to the archive admin and get some more info17:19
ScottKjdstrand: Thanks.17:19
keesmissing hppa shouldn't block us from updating the other archs.17:21
ScottKAgreed, but the lack of libmilter-dev in hppa means you can't build a fixed version for hppa.17:22
ScottKPersonally I'd suggest removing all the clamav binaries for hppa in gutsy, but that's just me.17:22
ScottKActually, now that I think more about it ...17:23
ScottKkees: You still build security updates on a separate dak instance, right?17:24
keesScottK: unfortunately17:24
ScottKkees: Would you check and see if perhaps dak magically still has sendmail for gutsy/hppa?17:24
ScottKWe've done gutsy security updates before and IIRC they built for hppa.17:25
ScottKkees: Nevermind.  The security updates FTBFS too.17:26
* ScottK sticks with the remove it it can't be supported vote.17:27
OrbixxDoes anyone have a Directadmin lifetime licence for sale?17:56
DBAmethystok I don't know if to put this in #ubuntu or here.  But I am doing an installfest and I have to have a server as a router.18:45
uvirtbotNew bug: #225818 in php5 (main) "PHP/5.2.4-2ubuntu5 + xdebug" [Undecided,New] https://launchpad.net/bugs/22581818:45
ScottKDBAmethyst: Server setup questions are on topic here.18:47
DBAmethystok18:52
DBAmethystwell just asking for help.  need some dns and some dhcp help18:53
DBAmethystas I have never done this to a box.  normally use a wrt54gl18:53
sommerScottK: I played around with clamtk early this morning, and was able to build it after setting (>=0.93) in the deps18:56
=== bmckee is now known as furicle
=== furicle is now known as bmckee
ScottKGreat.  sommer: See the mail I just sent to the motu ML.18:57
=== bmckee is now known as furicle
sommeryep, I wanted to double check that is the correct way to update the package?18:58
gregbradyis it possible to run a ssh -X session but have the sound play locally?18:58
ScottKsommer: Did you add the PPA to your sources.list so it would have clamav 0.93 to build against?18:59
sommerScottK: yeppers, even built and scanned a virus successfully18:59
ScottKYes.  Then that'll do it.  You didn't actually need to bump the depends.  Just build it and run it with 0.93.19:00
sommerheh, gotcha should I change it back?19:00
ogragregbrady, read up about pulseaudio TCP forwarding ... its pretty easy to set up19:01
ScottKNo need.  What that says is that we don't need to do anything special with clamtk.19:01
ScottKsommer: Just update the wiki.19:01
gregbradyogra, thanks.19:01
sommercool, will do19:01
=== `6og is now known as Kamping_Kaiser
ScottKsommer: FYI, you can upload stuff to the PPA since you are a team member.19:05
sommerScottK: ya, I was wondering about that... I upload the .changes file correct?19:05
ScottKYes.19:06
sommercool, just need to configure dput :)19:06
ScottKI don't think uploading clamtk is needed, but if you get a package that needs changing, feel free.19:06
gregbradyhmmm, I can't seem to find anything about forwarding on the pulseaudio website19:07
* delcoyote hi19:08
ogragregbrady, google for puseaudio and module-native-protocol-tcp or module-esound-protocol-tcp19:11
gregbradyogra, thanks but the returns are way above my level of understanding.19:13
sommerScottK: hrmm... fedora doesn't seem to have a pyclamav package19:16
sommerScottK: I also attempted to build that package, but it kept wanting to use clamav-0.9219:17
ScottKOdd.19:17
ScottKsommer: They may call it something different.19:18
ScottKOther distros may have patches too.19:18
furicleFrom what I can tell KVM is Ubuntu's 'preferred' virtualization choice - right?   I see lots of people talking about Xen, is anybody *using* KVM in production?19:24
=== gouki_ is now known as gouki
gregbradyogra, I ended up searching by "ssh" and "local sound" and it according to the returns, it does not appear to be all that easy and requires that each program be setup individually.19:26
ogragregbrady, essentially you only need to set pulse locally to listen to tcp ... and then set PULSE_SERVER or ESPEAKER in your ssh session pointing to the local pulse19:27
furicleand by production I mean people get fired if it dies too often :-)19:28
* ScottK notes http://archives.neohapsis.com/archives/postfix/2008-05/0080.html and suggests that packaging the additional clamav signatures might be a useful thing for someone interested in getting involved in packaging for Ubuntu to do.19:32
seanyis there a good write up some where about raid performance tuning, as far as best practices go?19:33
sommerScottK: sure, I'll give it a try :)19:33
nealmcbfuricle: you can also try #ubuntu-virt19:35
furicleAh - ok - didn't know about that one....  I'll take a wander.19:36
nealmcbfuricle: what sort of use case are you looking at?  production means different thing19:36
nealmcb*things19:36
gregbradyogra, thanks for the tips but it appears as though I have a ton of research to do before I understand this stuff.19:43
seanydoes anyone know anything about raid performance tuning? or best practice methods for bottleneck tracking?20:09
jackfruithi guys, has anyone got a problem with ssh frozen in hardy ?20:14
jackfruiti would connect to the remote box, do things for about 10 secs, and it would be frozen20:15
faulkes-_ssh only or the entire box?20:16
ScottKjackfruit: Wired or wireless network?20:16
jackfruitjackfruit: from laptop to wired remote box20:16
jackfruitfaulkes-_: what do you mean ?20:16
jackfruitfaulkes-_: the only thing i run on the box now is ssh20:17
faulkes-_I mean if you try to reconnect, does it allow you20:17
jackfruityes it does20:17
ScottKjackfruit: I experience periodic networking freezes on my laptop that sound like what you are experiencing.20:17
jackfruitand i'm in, i can run commands20:17
jackfruit10 secs, boom, frozen20:17
ScottKDoes it come back if you wait?20:18
jiqirenseany: make sure your think about blocksize / etc when creating filesystem on raid20:18
jackfruitScottK: i waited for about 2 -3 ' w/o anything so i break the connection20:18
seanyjiqiren: in so far as matching up raid blocks with FS blocks in relation to the files being created?20:18
jackfruitScottK: weird thing is i've used ssh on my laptop before w/o any problems20:19
ScottKThat's not the same problem I'm having.20:19
jackfruitwireless20:20
zulmathiaz: does the open-iscsi bug about sysfs deserve an SRU? im thinking about it and no20:21
jiqirenseany: what i mean is when you create your filesystem, make sure the stripe size (raid) and stride size (ext3 or whatever) match20:21
seanyjiqiren: right20:22
jackfruitScottK: it's bugging the crap out of me, since i cannot do anything w/o ssh20:23
jiqirenseany: so if you have raid with 64k stripe, you'd pass this to make a fs (ext3): -E stride=1620:24
ScottKI'd suggest trying plugging the laptop into a wired network and see if that makes a difference.20:24
jiqiren(assuming your blocksize is 4096)20:24
ScottKjackfruit: ^^20:24
nikolajDo anyone knows why wvdial is not on ubuntu 8.04 server? or am I doing something wrong?20:24
jiqirenseany: are you using ext3 or something else?20:25
jackfruitScottK: i mean i'm talking on here right, and irc time out is what, 120 sec ?20:25
seanyjiqiren: right now i'm just playing around :). ext3 and NTFS over iscsi20:25
jackfruithmm is there a timeout value in ssh20:25
ScottKjackfruit: Yes, but ssh is a different protocol with different sensitivities.  I'd suggest try it.20:25
seanyjiqiren: i've got 9 250g disks in a raid6 vg at the moment20:26
jiqirenseany: in that case you might want to make sure the vg/lv layer is also using correct matching sizes (I assume you are using software raid in linux then lvm on top?)20:28
seanyjiqiren, yes20:29
seanyjiqiren: are there any good docs about this online some where?20:33
seanyjiqiren: there's lots of stuff about raid config, but not alot about performance20:33
jackfruit_ScottK: i'm wired up, still not letting me connect20:33
jackfruit_now it's not letting me connect instead of letting me in for 10 sec20:33
jackfruit_:))20:34
ScottKOK. Not sure what to tell you then.20:34
jiqirenseany: I don't think so... in the end default values are not that bad - software is getting better about already taking care of things like this20:34
jackfruit_this is weird as crap20:34
furiclejackfruit:   any chance of duplicate IP numbers on that LAN?20:34
jackfruit_furicle: on my local one or remote one ?20:35
furiclejackfruit_:   your laptop....20:35
jackfruit_nope, i'm pluged into directly to the modem20:36
furicleso much for that brainwave :-(20:36
seanyjiqiren: have you heard anything about iscsi performance numbers? vs nfs/local ?20:37
jiqirenjiqiren: back when I was cursed with taking care of exchange, iscsi sucked - there would always be timeouts long enough to force a failover with an active/standby config of exchange20:38
jiqirenhehe... i mean seany20:39
jiqirenseany: typically happened when everyone in the office checked their mail at the same time20:39
seanyjiqiren: what was your storage sitting on?20:39
jiqirenseany: but this was MS, I've never used iscsi on anything else20:39
jiqirenit was a dediated iscsi nas20:40
_rubenMS's iscsi initiator is actually quite decent these days20:40
_ruben"too bad" its even better than vmware esx's initiator20:40
seany_ruben:  i havn't had too many problems with it20:40
seanythe ms one, haven't had a chance to play with iscsi as a back end for esx20:41
seanyseems like using NFS is "all the rage" :-p20:41
seany:( my last bonnie test segfaulted20:43
jackfruit_ahh it is my laptop connection after all20:46
jackfruit_this is weird20:46
jackfruit_i've had had problem with it before20:47
_rubeni kinda prefer iscsi over nfs (block device versus directory sharing) .. then again, dont have much experience with either, yet20:47
seany_ruben: well you have obvious issues pushing block devices around when you're trying to do something shared (clusting)20:57
seanyhence the plug for NFS in some instances20:58
_rubenseany: true20:59
hollmanhello, how cant i upgrade my ubuntu 7.10 to 8.04 ???21:00
Nafallohollman: do-release-upgrade21:03
hollmanNafallo: thnaks, now... they say me that it's not recomendable upgrade in a session of ssh21:04
Nafallooh? well. I thought it had magic for that stuff.21:05
Nafallodunno then.21:05
Deepshollman: it's not, you should connect to the machine locally and/or using an IP KVM / terminal server21:05
hollmanDeeps: thanks21:07
hollmanupgrading... :P21:07
mathiazzul: which open-iscsi bug ?21:11
* faulkes-_ is loving iscsi21:15
KL3B3R_Brazilhi all21:21
KL3B3R_BrazilI have just installed Ubuntu 8.04 (desktop) on a 4GB RAM based computer. Do you guys know how can I install (apt-get) a "server" kernel for PAE support ?21:22
KL3B3R_Brazil/ping $m21:23
KL3B3R_Brazil/ping $me21:23
KL3B3R_BrazilNo one?21:23
KL3B3R_Brazilso, goodbay21:26
nealmcbdamn - cupsd apparmor problem: audit(1209761208.193:16):  type=1502 operation="inode_permission" requested_mask="rw" denied_mask="rw" name="/dev/tty" pid=6667 profile="/usr/sbin/cupsd"21:49
nealmcbno files in /var/log/apparmor ...21:50
mathiaznealmcb: http://www.mail-archive.com/cooker@linux-mandrake.com/msg107191.html21:56
nealmcbhappens every time I try to print a particular document from evince, but not a different one21:56
mathiaznealmcb: webmin is mentionned21:56
mathiaznealmcb: the first paragraph is a good summary21:57
mathiaznealmcb: The reason they all suck worse than vi is because they all aim far too21:57
mathiaznealmcb: low21:57
mathiaznealmcb: that goes back to the argument of webmin gives to much power to the targeted users21:58
nealmcbwell, it is still less power than a shell, which they know less about and can do more damage with.  does ebox keep a change history?21:59
* nealmcb continues to read21:59
mathiaznealmcb: not yet - there is a save change  button - but you cannot review the change21:59
mathiaznealmcb: this is the thing I like about xwrt22:00
mathiaznealmcb: I can review the changes to be made before applying them.22:00
* nealmcb just puts all of /etc under bzr22:00
mathiaznealmcb: I've downloaded the latest version of webmin fron webmin.com and poked around22:01
nealmcbdoes bzr have a perl api ( !! )22:01
nealmcbmathiaz: in a virtual machine I bet :-)22:01
mathiaznealmcb: I only use virtual machines ;)22:01
mathiaznealmcb: For example, I went to the ssh server module, didn't make any change and saved22:02
mathiaznealmcb: the result was that sshd_config was modified22:02
nealmcbdid it ask or warn?22:02
mathiaznealmcb: since webmin deals with config files, that could you lead to configuration prompts during a package upgrade22:02
mathiaznealmcb: no22:03
mathiaznealmcb: considering the target audience of webmin it isn't the best thing to do22:03
mathiaznealmcb: if you use webmin, that you'd be ask for configuration prompts on package upgrades22:04
mathiaznealmcb: the other issue with that is that there are now 2 package on the system that have different ideas about what at configuration file should look like22:05
nealmcbthat is a good point.  will we get any advice from ebox before doing an upgrade (say yes to xyz, and no to def)22:05
mathiaznealmcb: the package version and the webmin version22:05
mathiaznealmcb: in the ssh example, webmin thinks that 'IgnoreUserKnownHosts no' should be part of the default sshd_config22:06
mathiaznealmcb: whereas the default sshd_config doesn't have the option set (which default to no)22:06
mathiaznealmcb: so although webmin reads the configuration files, it adds default values in the process, which are written back to the configuration file22:07
mathiaznealmcb: you still need to have defaults set somewhere, but they shouldn't be imposed on the configuration file22:07
mathiaz!webmin22:08
ubottuwebmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. See !ebox instead.22:08
foolanoguys, regarding the change history in eBox, we have almost implemented the "log admin" module, which will tell you before saving all the changes you have done22:08
foolanoyou will see a list of the modules changed and what has been changed22:08
mathiaznealmcb: this may be the reason behind the statement: It is not compatible with the way that Ubuntu packages handle configuration files,22:08
foolanostuff like: module firewall -> added rule to output table, module network -> change configuration in interface eth0 from static to dhcp22:09
mathiazfoolano: great - so you'll be able to review which changes are going to be applied ?22:09
foolanoexactly22:09
foolanoand that's something we want to add by default in the framework, so the module developer doesn't have to worry about it22:10
nealmcbfoolano: how about keeping actual diffs?  helpful at upgrade time or for invoking help from better admins22:10
mathiazfoolano: agreed. that should be part of the framework.22:11
mathiaznealmcb: you mean something like rollback option ?22:11
foolanonealmcb: what do you mean exactly by keeping diffs22:12
foolano?22:12
mathiazhm.. rollback is probably more complicated than just a diff22:12
nealmcbwell rollback would be nice also, but detailed info on what it did is a prerequisite for any sort of troubleshooting or getting assistance22:12
mathiazfoolano: if you're updating a list of files, you could keep a diff between the file before and after the update22:12
nealmcbI want ebox to keep a log of all changes to any config file (especially those which aren't internal to ebox)22:12
mathiazfoolano: you know which files are going to be rewritten, so you can generate the diff22:12
nealmcbat a level of detail that allows rollback at least outside ebox if not within it22:13
foolanoi c, that would be very easy to implement if you find it useful22:13
mathiaznealmcb: right22:13
* nealmcb is on the phone now22:13
mathiazfoolano: yeah - nealmcb use cases is much better than a rollback22:13
mathiazfoolano: knowing what happened to your system makes troubleshooting much easier22:14
mathiazfoolano: having a log of which action has been done on the system is great22:14
* nealmcb ... and will be for 30 min or so....22:14
mathiazfoolano: having a diff of the actual changes in the configuration file is even better :)22:15
foolanocoming up for the next release :)22:15
mathiaz!ebox22:16
ubottuebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox22:16
foolanothe "admin log" was scheduled for release 0.12. We already had some parts of eBox using it, but we disabled it for 0.11.99 because there were some modules which needed to be slighltly  modify in order to use it22:16
foolanomodified22:17
foolano*22:17
foolanothe only thing is there are some actions that, with the current design, take action immediataly, things like changing the password for a user within ldap is done immdiataly22:19
mathiazfoolano: the ebox factoids states  "It is designed to work with Ubuntu/Debian style configuration management" - could you elaborate on that ?22:19
mathiazfoolano: I know you haven't written the ebox factoids22:20
foolanoi think what that means is we have tried to stick to the debian policy when it comes to modifying configuration files22:20
foolanostuff like asking the user beforing overwriting a conf file if it has been modified by him and so on22:21
foolanobefore*22:21
foolanoand there's also a software module to install system packages which is based on apt22:22
mathiazfoolano: right - I've seen that in webmin too.22:22
mathiazfoolano: how do you handle debconf questions ?22:22
foolanoright now, we don't manage them, we install packages with DEBIAN_FRONTEND=noninteractive22:23
mathiazfoolano: ok22:24
foolanoby the way, do you guys think that openldap in ubuntu will ever use the new configuration schema?22:26
mathiazfoolano: are you refering to the config backend 2.4 ?22:27
foolanomathiaz: exactly22:27
mathiazfoolano: probably - that should be discussed at UDS :)22:27
foolanowe sent this email: https://lists.ubuntu.com/archives/ubuntu-server/2008-February/001141.html22:27
foolanomathiaz: hehehe, alright. It would be nice to have that by default, although i dunno how many things it could break :)22:28
foolanoi mean, how-to's and stuff which expects the old-fashioned config backend22:29
mathiazfoolano: we'll probably have a discussion about openldap during UDS - your request is not the only one22:29
mathiazfoolano: having a way to insert schemas in a ldap tree could be useful to any application22:29
mathiazfoolano: re debian policy and configuration files, I'm not sure how ebox isn't compliant22:30
mathiazIIUC the sections about configuration files in the debian policy define how packages and maintainer scripts should behave22:31
mathiazit doesn't apply to application22:31
foolanomathiaz: i thought so too22:31
mathiazotherwise any text editor would be subjected to the same policy22:32
foolanoyeah, exactly what it states is you cant mess around other config file in maintainer scripts22:32
foolanobut it doesn't say anything about upstream itself22:32
mathiazfoolano: as the purpose of ebox is to modify the configuration files, it can do it whithout being non-policy compliant22:32
foolanomathiaz: i agree on that22:33
foolanobut i also think it's nicer to warn the user if it's going to overwrite stuff modified by him22:33
mathiazfoolano: yes - I totally agree with that22:34
mathiazfoolano: there are some ideas that can be taken from the debian policy and tried to adapted to ebox22:34
foolanomathiaz: i hope that the time i spent modifiying that is worh it :P22:34
foolanoi would be pleased to discuss them :)22:35
mathiazfoolano: are you coming to UDS ?22:35
foolanoyeah, but just a couple of days22:35
mathiazfoolano: great - we'll meet there and discuss it then.22:35
mathiazfoolano: when will you be there ?22:36
foolanoi haven't booked my ticket yet, i was waiting to see when it would be better if you guys wanna talk about ebox22:36
mathiazfoolano: how long do you plan to be in Prague ? one day ?22:39
foolanomathiaz: two days22:39
foolanoplus one for my journey22:40
mathiazfoolano: as you may know, there are two events: one is FOSSCAMP and then UDS22:41
mathiazfoolano: FOOSCAMP is more for upstream talking to us22:41
mathiazfoolano: UDS is more contrained in terms of time available22:41
mathiazfoolano: we have one hour sessions to talk about topics22:42
foolanoyep, i attended the last FOSSCAMP22:42
mathiazfoolano: ok - did you see parts of UDS ?22:42
foolanonope, i couldn't cuz i had to catch my plane on monday22:43
mathiazfoolano: right - I remember now22:43
foolanomy bloody plane was rescheduled and i had to leave earlier22:43
mathiazfoolano: so FOSSCAMP has less time constraint22:43
mathiazfoolano: we're busier during UDS as we focus on what we want to achieve for intrepid22:44
foolanoi c22:44
mathiazfoolano: did you like the session you had at FOSSCAMP ?22:44
foolanoso it's better if i go during the fosscamp?22:44
foolanomathiaz: yeah, it was  useful22:44
mathiazfoolano: yeah - it may be better for you to target FOSSCAMP then.22:45
ScottKfoolano: If you want to be there to have influence over what's planned for Intrepid, you ought to be there for at least part of UDS.22:45
mathiazfoolano: well - you'd only be interested in one topic22:46
mathiazfoolano: or session22:46
mathiazfoolano: OTOH if you plan to base your work on ubuntu, it's better if you can be at UDS22:46
foolanook, understood22:47
* nealmcb returns22:47
mathiazfoolano: also, FOSSCAMP is friday and saturday - UDS is monday to friday the following week22:48
paneoHi, I instaled ubuntu server 8.04 on virtual pc. But I don't know how to configure internet.22:48
foolanomathiaz: i'll check if i can extend a little bit my days in Prague22:48
foolanoi can't i guess i'll attend FOSSCAMP for sure22:49
foolanoif*22:49
mathiazfoolano: there will probably a session about system administration from a GUI/web interface22:50
mathiazfoolano: during UDS - that would be relevant to ebox22:50
foolanodo you know when the schedule will  be published?22:50
mathiazfoolano: it's the number one feature asked on brainstorm.ubuntu.com22:50
mathiazfoolano: nope22:50
mathiazfoolano: however since you're relevant to the topic, we could make sure that the session is schedule while you're available22:51
foolanothat would be perfect22:51
hangthedjI have an Ubuntu 8.04 Server, is it possible to take the hard drive out and move it to a different server?22:53
Nafalloyes22:53
hangthedjThanks22:53
foolanomathiaz:  i think I could be in Prague from saturday to monday, so we could have a session in FOSSCAMP, and I could attend UDS on monday22:54
foolanomathiaz: anyway, i'll see if i can attend more days so you dont have to reschedule based on my attendance22:55
mathiazfoolano: I think saturday to monday would be the best option22:58
foolanocool, i'll try that22:59
VletHey, is it possible to set up software raid on a device without booting off the CD?23:21
Vletin other words, on a live system23:21
sommerVlet: I'd think so as long as you're not wanting to make / part of the raid23:22
Vletsommer: nope, just storage... how would I go about doing so? what do I look into?23:23
Vletsommer: I've only done it from the installer, so I'm not sure what to look into :)23:23
sommergoogle, linux raid howto23:23
Vletduh :)23:24
Vletsommer: thankya23:24
sommeralso, you might try raid+lvm linux23:24
sommerVlet: np23:24
ScottKdendrobates: Congratulations.23:31
cpareHello all23:33
dendrobatesScottK: thanks.23:34
cparetrying to install 8.04 64 bit, and finding the install is unable to mount the CDROM23:34
cpareany suggestions?23:34
cpareThis is a T-105 Dell Server23:34
cparehas anyone reported problems with this, I seemed to read something about the 64bit having this, and the 32 not23:35
cparecan anyone verify?23:36
* nealmcb cheers for dendrobates23:37
sommercpare: does it boot from the cdrom?23:37
sommerdendrobates: congrats from me as well :)23:38
Nafallo?23:38
cparesommer - it does boot from the cd without issue23:38
cpareonly one CD-Rom drive23:38
Nafallodendrobates: what did you do now? :-)23:38
cpareI tried to check the disk, but it needs to mount there as well23:39
dendrobatesNafallo: finally became MOTU.23:39
sommercpare: is there any errors23:39
Nafallodendrobates: ah! good to have you onboard :-)23:39
cpareif I hit the space bar rapidly, I can see soemthing about Invalid Parameter23:39
sommercpare: if you hit alt+f2 you'll get a console, and alt+f4 is the installer output, is there anything there?23:40
sommercpare: also, have you tried a different CD?  maybe it's just a bad disc?23:40
sorensoren 1, iptables 0.23:43
soren\o/23:43
matt____does anyone know about setting up mysql server with jdbc?23:44
sommerheh, did you play table tennis agains iptables?23:44
sorensommer: I'm not sure what kind of games iptables thought we were playing.23:44
cpareI am getting ready to burn the Desktop 64bit, then convert to server23:44
sorenI won. That's what matters :)23:44
cpareand see if that helps23:45
sommerheh, iptables plays for keeps!23:45
cpareit could be a bad disk23:45
sommercpare: ya, I'd give it a try at any rate23:45
cparethere were threads about that online, but it seemed bunk23:45
cparewill do, thanks!23:45
sommercpare: welcome23:45
matt____does anyone know about setting up mysql server with jdbc?23:56
sommermatt____: I've done it once... if I remember correctly23:56
sommermatt____: are you getting a specific error?23:57
matt____sommer: if by specific, here one is...23:57
matt____sommer: *recreates error23:57
matt____when using openoffice to try and connect to it, i get "unexpected exception encountered during query"23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!