/srv/irclogs.ubuntu.com/2008/05/13/#ubuntu-server.txt

arooniwhen trying to set locales in ubuntu i fail hard:  http://pastie.caboo.se/195796  ... ideas?00:00
Mastacheatatonyyarusso - your server might have all of the new packages but none installed so you won't need to download the new ones but only install them. There was a dpkg parameter doing that. I forgot which, but you can find that yourself00:09
nealmcbI'm on my way to Prague - see you there!!00:20
sommernealmcb: party!00:22
tonyyarussoMastacheata: That sounds like it makes sense, since they would have all been downloaded into the apt cache for the mirror.  I suppose if I can't find the paramater, I could clear /var/cache/apt/ and that might short-circuit it eh?00:55
MastacheataMakes sense to me too00:56
MastacheataBut I'm just guessing, no real knowledge behind...00:57
tonyyarussoMastacheata: as far as this parameter you speak of, if it's a dpkg thing, how would I pass it to do-release-upgrade, or should I be using something else entirely?00:57
MastacheataI guess the problem is that dpkg has all of the packages but not installed so there must be a parameter for dpkg which makes it install the packages. I haven't thought to the point at which you select the packages to install, yet.01:00
sparky01anyone running Nexuiz server on Ubuntu server 8.0401:02
sparky01doesn't seem to work with the file from the repos or the binary from sourceforge01:04
sparky01video game servers are a mission critical app01:06
sparky01critical for slaking off01:06
sparky01=P01:06
sparky01ok01:08
sparky01i01:08
sparky01guess01:08
hadsarooni: locale-gen is in the package belocs-locales-bin01:11
xenocampanoliI hope someone is here.  I'm having trouble configuring ruby.  Apparently the "Action" directive is not available in Ubuntu's version of Apache2?01:47
xenocampanoliI hope someone is here.  I'm having trouble configuring eruby.  Apparently the "Action" directive is not available in Ubuntu's version of Apache2?01:54
xenocampanoliSorry, I meant "ERUBY".lc01:54
nxvl2 more days!!01:58
nxvlwohooo!!!01:58
emgentheya nxvl :)02:05
nxvlemgent: :D02:12
sparky01Anyone get Nexuiz server working/02:57
MacMattHello?03:02
MacMatt...anybody?03:02
RoAkSoAx!hello | MacMatt03:03
ubottuMacMatt: Hi! Welcome to #ubuntu-server!03:03
MacMattCan anyone here help setting up a LAN boot server?03:03
MacMattno...?03:05
MacMatta LAN Boot server?03:05
MacMattso, ... no one knows?03:08
MacMatt...no one can help?03:08
ScottKMacMatt: This is kind of a quiet time of day here.  You'll find more people active during the US/European business day.03:08
MacMattoh03:08
MacMattok03:08
MacMattthanks03:08
RoAkSoAxhas anyone installed csync2 in Ubuntu?03:22
NavopQuestion in the perfect server setup they install ProFTPD, do you really need a ftp04:28
ScottKNavop: Only if you're a fan of tranmitting unencrypted passwords on the internet.04:34
Navopty04:41
Navophow can i d/l ispconfig2.2.23 in console mode?04:55
ScottKJust download it or install it?04:57
NavopI need to d/l first the install it to server04:57
Navopcan u use apt-get install ispconfig2.2.23?04:59
ScottKWith sudo in front of it yes.  That'll download and install it.04:59
ScottKIt should just be sudo apt-get install ispconfig04:59
ScottKExcept that package doesn't seem to be in the Ubuntu repository.05:00
Navopyeah, wonder where i can get it from05:00
ScottKThey don't seem to host .deb's either.   Not sure what to tell you.05:01
Navopty for the help, will go and ask in ubuntu room05:02
pschulz01Greetings.. how do I install 'mono' under hardy? There doesn't seem to be any 'mono' package available.05:14
pschulz01mono-gmcs ?05:14
pschulz01Anyone here..?05:17
NavopScottK: got my answer :)05:18
Navopls05:19
=== antdedyet_ is now known as antdedyet
aroonihey folks!  when i do sudo crontab -e ... i'm not editing with vim.  how can i fix this?06:57
Jeeves_update-alternatives, afaik06:58
Jeeves_But I always forget how that works :)06:58
arooniJeeves_, is that for me?06:59
hadsor just export VISUAL=vim07:02
Jeeves_arooni: Yes07:02
Jeeves_hads: You could do that, but that only works once07:02
hadsWell yes, unless you put it in your .bashrc07:03
Jeeves_hads: That's true07:03
aroonihow do i make sure that mysql server, apache server comes back up automatically upon hardy server restart?07:04
hadsThey will by default07:04
aroonihow come 'reboot' doesn't cause mys erver to reboot07:04
arooniawesome!07:04
Jeeves_arooni: If you did an 'apt-get install', that automatically07:04
hadsyou'll need to sudo reboot07:05
aroonihow can i test to make sure mysql server and apache server came back up07:05
aroonii just did a reboot07:05
hadsUm... use them?07:05
arooniERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2)07:06
arooniubuntu /var/www: ps -lA | ack apache ... yields nothing07:06
arooniand yes i did install with sudo apt-get install07:06
aroonianyone know how to get the mysql server to load on ubuntu hardy server?  i run it:  but it gives me the error of  [ERROR] Can't start server: Bind on TCP/IP port: Cannot assign requested address; 080513  2:08:54 [ERROR] Do you already have another mysqld server running on port: 3306 ;   tried stopping it & running netstat -plon | grep 3306 with no results.   ... ideaz?07:18
AtomicSparkarooni, did you try installing it with tasksel? the LAMP option?07:19
arooniAtomicSpark, i dont recall;  i used linode.com;  who had their default ubuntu hardy install07:20
AtomicSparkoh. how did you install mysql then? or did they?07:21
arooniAtomicSpark, no i did;  i believe i ran sudo apt-get install mysql07:22
arooniro mysql-server; not sure which07:22
AtomicSparkhmm07:22
AtomicSparkare those dedicated servers? not bad for 20/mo07:23
aroonino they are vps07:23
AtomicSparkoh virtual.. hmm.07:23
AtomicSparkare you sure you didn't have mysql installed already? it's usually installed with LAMP07:23
arooninot sure;  i thought i needed to run sudo apt-get install07:26
aroonierrors:  http://pastie.caboo.se/19592507:26
AtomicSparkthat is very interesting07:27
AtomicSparkis this a production machine? hosts a website? don't want to tell you to try things :P07:29
aroonihosting a web app07:30
arooniits cool07:30
arooniwe can blow it up07:30
AtomicSparkwell first do this. run "sudo tasksel" you should get a blue screen. same as during install.07:30
AtomicSparktell me if LAMP option is checked07:30
AtomicSparkoh wait07:31
AtomicSparkthose errors are coming from mysqladmin. that's not mysql.07:31
AtomicSparkare those client or server errors?07:31
aroonii'm having problems with my locale that i can see:  perl: warning: Please check that your locale settings:07:31
arooni  LANGUAGE = (unset),07:31
arooni  LC_ALL = (unset),07:31
arooniLANG = "en_CA.UTF-8"07:31
arooni 07:31
aroonioops sorry for apstie07:31
arooniAtomicSpark, i'm trying to login to the the admin... but i really want the server to be up more than anything07:32
arooniit doesnt seem to be up07:32
AtomicSparkwell admin is pretty pointless unless you can run it from the server. which requires gui.07:33
AtomicSparkits for configuring the server part. you probably want the query browser to interact with databases07:33
arooniAtomicSpark, thats what i mean yes07:33
AtomicSparkhm.. not sure what to tell you. i'm sure the mysqld was installed when they installed the LAMP stack (not sure if proper term)07:35
AtomicSparkyou could always check if there is a mysqld or equivalent in /etc/init.d/07:37
aroonii think its a iptables thing07:38
AtomicSparkcould be. ubuntu does block everything by default. it should open up the ports as the programs are installed though.07:38
AtomicSparkyou could always re install. it wont remove config files unless you purge it.07:38
hadsAtomicSpark: mysqladmin is a CLI program provided to administer mysqld, also the default policy for iptables is allow.07:39
arooniok fixed it!07:40
aroonilooks like my locale isn't being set properly:  http://pastie.caboo.se/195926 ... on ubuntu hardy... any ideas on how to fix?07:40
AtomicSparkhads, i thought he was referring to the gui tools. :P and i thought i read that ubuntu blocks all unused ports? maybe they were just referring to the service isn't there, its not a security hole. lol.07:43
AtomicSparkarooni, i'm not familiar with perl. as far as system wide local setting. i'm not sure either. i've only chosen it during install.07:45
AtomicSparkhttp://blog.andrewbeacock.com/2007/01/how-to-change-your-default-locale-on.html ?07:46
krautmoin08:27
* delcoyote hi08:42
vagoth|friendQuelles différences y at-il dans ubuntu et debian serveur?09:12
vagoth|friendMitä erot ovat siellä ubuntu-palvelimeen ja Debian on?09:13
Jeeves_English might work better09:15
vagoth|friend09:15
vagoth|friendMitä?09:15
Jeeves_English09:16
Jeeves_You know, that other language :)09:17
vagoth|friendEn ymmärrä.09:18
Jeeves_vagoth|friend: Stop talking your own language, and try to talk english.09:19
c00l2svhi, did somebody succeed in configuring postfix with dkim-filter ? can that one help me too?09:26
AtomicSpark!english09:35
ubottuThe #ubuntu, #kubuntu and #xubuntu channels are English only. For a complete list of channels in other languages, please visit http://help.ubuntu.com/community/InternetRelayChat09:35
vagoth|friend?09:35
Kamping_Kaiservagoth|friend, where is vagoth?09:37
vagoth|friendu want spek with vagoth?09:38
Kamping_Kaiseryes09:38
vagoth|friendhe no here09:38
Kamping_Kaiservagoth|friend, what is your language?09:39
vagoth|friendPortuguese09:40
vagoth|friendman more too09:41
Kamping_Kaiservagoth|friend, try #ubuntu-pt09:42
AtomicSpark!portuguese09:42
ubottuPor favor use #ubuntu-br ou #ubuntu-pt para ajuda em português. Obrigado.09:42
AtomicSparkyes one of those :)09:42
vagoth|friendObrigado09:42
Kamping_Kaiser:)09:42
=== vagoth|friend is now known as vagothcpp
vagothcppoh god...09:45
vagothcppI need to refine my portuguese, I told him NOT to talk in irc...09:46
Kamping_Kaiserhehehe09:46
* vagothcpp apologizes for any agony my portuguese friend may have caused you.09:46
Kamping_Kaiserits ok. i'm more worried about him :)09:47
* Kamping_Kaiser noticed an australian hostmask, hence asking for you above :)09:47
vagothcppHehe, our university is doing an exchange program.09:48
* vagothcpp is the host family.09:48
Kamping_Kaiseroh, nice.09:48
Kamping_Kaiserhope he gets himself fixed up09:48
Kamping_Kaiser(irc wise)09:49
vagothcppI need to fix up my language skills first, I probably told him to try talk instead of don't talk.09:49
vagothcpphis been to all my channels.. alot of explaining to do.09:50
Kamping_Kaiserhis whois only shos 5... unless thats your usual amount09:51
vagothcppOn another server.09:52
vagothcppI gotta go help him with our "aussie" study's09:52
Kamping_Kaiser*grin*09:52
vagothcppYay. Involuntry work.09:52
vagothcppIt was that or go help homeless people in china *shudder*09:53
* Kamping_Kaiser wonders where he lives09:53
mathiaznijaba: what is the proper way to file bug against the ubuntu-server guide ?10:39
mathiaznijaba: is it against ubuntu-doc or is there another package ?10:39
nijabamathiaz: I think it is to file it against ubuntu-doc10:39
mathiaznijaba: thks.10:40
nijabamathiaz: subscribe sommer to it won't hurt as well10:40
Kamping_Kaiserany idea when we would expect the .1 update? are we thinking 6 months? 12 months?11:15
hads"These will start three months after the LTS, and be repeated every six months until the next LTS is out."11:16
Kamping_Kaiserhm.11:16
hadsSpeaking of point releases, from;  http://www.markshuttleworth.com/archives/14611:16
Kamping_Kaiserhmm... hope desktop gets point updates with 8.04 :/11:19
hadsThat's exactly what that quote is discussing.11:20
Kamping_Kaiserthen its not clear :)11:21
* Kamping_Kaiser laughs at the thought of debian delivering to within a month of an eta11:22
Deepsit suggests that the desktop will get point releases too11:23
hadsSeems pretty clear; "We also committed, for the first time, to a regular set of point releases for 8.04 LTS. These will start three months after the LTS, and be repeated every six months until the next LTS is out."11:23
Deepspoint releases being for LTS desktop + server, not just LTS server, based on the colouring11:23
Deepshads: yes, but the last LTS had a point release /only/ on the server11:23
Kamping_KaiserDeeps, thanks... beat me to it11:23
Deepsit doesn't explicitly say that the desktop edition will get the same point release too11:24
Deepshowever, the graph suggests that it will11:24
Kamping_Kaiseri had assumed 6.06 lts would as well, and i was wrong :)11:25
* Kamping_Kaiser thinks its a pity the point updates are only for the first half, but i do understand the work involved problem11:25
Deepsyeah well, one would hope that given that ubuntu's strength lies in it's desktop offering, that the desktop would get the attention it needs11:26
Kamping_Kaiseryeah11:27
Kamping_Kaiserhas anyone else found building/updating ubuntu mirrors to be *very* painful recently? all the mirrors i'm trying are missing bits (mostly in the debian-installer section)12:10
tritonxAnyone has setup a Raid1 with 8.04, I'd like to know how you did it12:10
emjaWhat is the commonly used tool for automating the build process of servers? My company has previously been selling RH-based servers, built with kixtart (mindnumbingly ugly). The RH solution has not been sustainable or maintainable, so we want to move to Ubuntu. The only concern is our custom configs (smb.conf parameters, etc).12:50
\shemja: you can still go with kickstart, or much nicer but more time to setup: FAI (Fully Automatic Installation)12:53
\shemja: FAI is a debian project and follows some principals of Jumpstart (Solaris)12:54
emjarighto12:54
* \sh would run now, when MrFAI would be here ;)12:54
emjacan you tell me how it handles incorporating config options in, say, smb.conf? do I need to overwrite the whole darn thing (trashing what is already there) or can I inject my changes?12:55
emjaie; WORKGROUP=office12:55
ograthere is as well a kickstart wrapper for preseeding if you want to use a more commercially supported method12:55
emjathe problem with our current system is that kickstart takes a modified config file from our directory tree, and plonks it on top of the base build - thereby overwriting the equivalent config file from the package12:58
ogra(preseeding is the officially supported method to set custom configs on debian based systems)12:58
emjaI have been told by a couple of my engineers that puppet is the preferred strategy, although it will take a reasonable amount of development to setup12:59
ograthats essentially what FAI does as well (using cfengine) but that leads to lots of questions from the package management on upgrades/updates12:59
emjaahh, cfengine12:59
emjaI may have not made myself clear; I'm not supporting a bunch of different server configs, but rather trying to create a consistent build process for entry-level servers (ala MS-SBS) being sold to SMB businesses.13:01
* ogra would go with preseeding, but then i'm not a big FAI fan anyway and prefer the supported distro solutions, FAI is great for mass installs though, but he use of cfengine has its own probs 13:03
Kamping_Kaiserpre seeding sounds like it. esp. as you can probably keep your kickstarts13:03
ogras/he/the/13:04
emjaAm I able to end up with an unattended install process? I want to ensure that the servers are pretty close to consistent13:04
mathiazemja: if you want to modify the configuration of packages, you should opt for preseeding.13:06
emjaok13:06
zulmathiaz: is there a reason why apache is not following the ubuntu version numbering schee?13:06
emjamany thanks for the advice guys/gals/etc13:07
mathiazemja: you can preseed answer to any question asked by debconf during an install13:07
emjamathiaz: err, what if the option I want to change is not actually asked by debconf?13:07
mathiazemja: ex there is a debconf question for the samba workgroup - so you can put the workgroup in your preseed file.13:07
emjaie; who can login via ssh (configued in sshd_conf)13:07
mathiazemja: then you'd have to use a late_command13:07
emjathat's a preseed thing?13:08
mathiazemja: which goes back to your kickstart way of doing things to customize your install13:08
emjaoverwriting the entire config file?13:08
emjathe inconsistency of the various config files' formats is what is biting me in the ass here. ;-)13:09
\shogra: fai doesn't use cfengine13:14
\shogra: it can, for sure, but it's not relying on it13:14
\shfai comes with its own set of configuration management for rollout processes...no need for cfengine13:14
ogra\sh, well, it doesnt use debconf i guess which is the main problem here13:14
\shogra: nope...13:14
\shogra: you generate the configs beforehand, and push them during the installation to the target...13:15
\shit's role based13:15
ogra(no matter how you overwrite configs, if they are not done in debconf upgrades wil ask questions)13:15
\shogra: debconf is being used in force mode, with the simplest config rollout...13:15
\shogra: really...people are deploying hundreds of thousands of servers with it...13:16
\shogra: and when you need debconf prefilled...you deploy the necessary files during the first deployment :)13:18
ogra\sh, what for do i need fai then if i already have preseed files that set all confgs ?13:19
\shogra: it's for unattended deployment...you can have several roles of machine, where you tweak e.g. only a bit of the config, but you need to rollout 1k Servers with the very same config...13:22
\shogra: you can, not only deploy with FAI debian/ubuntu machines, but also RHEL, SLES, whatever linux you want13:23
ograright13:23
\shogra: a standard debian install with FAI <= 6Mins on a simple hp pizza box or blade13:23
ograbut if i only have one ubuntu server setup to deploy (or even two) i wont need fai13:23
ograbut just two different preseed files13:23
\shdeploying SLES without autoyast, means: get the sles machine ready in less then 10 mins, while you need for the same setup with autoyast 30 mins13:23
\shogra: yes...but with FAI it's just a simple role...on the very same server, no need for different preseeding files :)13:24
\shit's centralized, it's fast...and it complies with other deployment tools....e.g. jumpstart....but yes, preseeding is easier...but doesn't work out in bigger environments where you do more with FAI then only deployment (think of 1&1 and rescuesystems...)13:25
ograyes, and you blindly overwrite files that are marked as conffiles which will bite you on upgrades13:25
\shogra: no13:25
ograhow do you make sure the md5sums match then ?13:26
ograucf wll kick in if it doesnt have the packaging backing debconf gives you13:26
ograwhich means lots of questions13:27
\shhow do you do upgrades today? when you tell debconf not to touch conffiles, it never touch them...13:27
\shogra: I'll show you at linuxtag :)13:27
ogra\sh, i know how fai works but i cant imagine a sane way to quiten down ucf without using debconf preseeding13:27
ograthe ackages know the md5sume and rewrite them on debconf changes which doesnt happen with any other mechanism i know, which in turn means you break the conffile watching mechanism of dpkg13:29
\shogra: for FAI you can do two ways for upgrades: the standard way, where debconf is asking you every time, or tell debconf by default not to touch anything and shut up debconf...or you use an update tool of fai, which follows FAIs way to deal with upgrades...actually, when people in DCs are dealing with mass configuration, they don't want debconf to touch anything of the stuff they do...at least for the more bigger DCs...13:30
ograwell, the first one sounds just plainly broken ... teling a security mechanism to "just shut up" seems not the fine english way13:31
ograand the second one indeed binds you to FAI eternally13:32
ogra(which is fine if you want that indeed)13:32
\shogra: yes...as I said, it's possible..if it's ok for the admin team, and yes, if you use FAI, you sold your soul ;)13:33
\shkickstart, preseeding and fai or jumpstart or whatever deploy system you use, everything has a special usecase and flaws...for your DC you need to find the right one, and stick to it...13:34
\shthere is no "right way"...as always :)13:34
ograsurely depends on the usecase13:35
\shfun part, about FAI is, it sticks to ITIL ... and the combination of FAI as deployment tool/automation tool and ITIL with automatic collection of CMDB data is rocking...13:35
\shbut don't tell that now to your manager...because you will get an increase of your salary, a contract for staying with your company until you die, and you will hopefully have a nice dinner with the assistance of your boss ... you will be famous ;)13:39
\sh(that was a joke !:)13:40
ogra*my* manager wouldnt give me a salary raise for promoting FAI ;) be sure :)13:40
* ogra is in cjwatsons team :)13:41
\shogra: hmmm.....that's really a problem ;)13:41
ogranah, not for me ;)13:42
faulkes-dunno, I'm all about the dinner with my bosses assistant, she's 25 and hot and loves bikini's13:42
zulogra: sure sure13:42
\shogra: well, but you are already famous because of edubuntu...so no need for more glamour ;)13:42
ografaulkes-, if you cant do it, i'm sure \sh would step in :)13:43
\shogra: nope....I'm occupied :)13:43
ograpfft13:43
ograyou dont know the bikini yet13:43
faulkes-sorry, nobody gets her but me13:43
faulkes-I'll cut you13:43
* faulkes- whistles innocently13:43
\shogra: na..25 is too young for me ;)13:43
faulkes-dunno, I'm still dating 18yr old's so13:44
faulkes-but I'm a dirty old man13:44
\shbut we are getting offtopic now ;)13:44
faulkes-aye13:44
\shwe will get problems with our ubuntu police squad...they will shut down #ubuntu-server ;)13:44
zuloooookay...13:45
Deepshttp://lists.debian.org/debian-security-announce/2008/msg00152.html this affect ubuntu as well?13:45
faulkes-yep, black helicopters swooping in, all that13:46
faulkes-morning zul13:46
zulhi faulkes-13:46
\shback to topic. I'm really seeing into installing hardy on my new dual quad core amd machine13:46
faulkes-Deeps: it says debian related systems, so I would hazard a guess that yes, it does affect ubuntu13:47
\shand imho is kees or jd already on it13:47
Deepsfaulkes-: Ta, I'm good at guessing too though ;) nm13:47
ScottKDeeps: Our openssl packages are very similar to Debian's.  Based on the versions in the Debian announcement it would be very suprising if Feisty through Intrepid weren't affected.  As \sh says though, I'm confident that kees or jdstrand are working on it.  They collaborate closely with the Debian security team.13:53
ograits in progress13:53
ScottKActually not intrepid.  That's got the fixed version.13:55
ograbut who in the world would actually use intrepid anyway13:55
DeepsI'm struggling to find anything online that suggests that, which is annoying13:55
ScottKAgreed.  Just trying to be complete/correct.13:56
ScottKNote that the DTLS issue that Debian also fixed in that upload is already fixed in all Ubuntu releases.13:56
ScottKDeeps: Suggests what?13:56
DeepsSuggests that anyone at Ubuntu is aware and/or working on resolving this if Ubuntu is actually affected13:56
ScottKDeeps: It's being discussed on #ubuntu-devel and the people who are saying it's being worked on are ones who would know.13:57
ScottKDeeps: If you know the package, it'd be stunning if Ubuntu wasn't affected.13:58
DeepsScottK: I'm sure they are, but I'm not in #ubuntu-XYZ and was searching the web for information ;-)13:59
DeepsScottK: True, I try to think of ubuntu as stunning though :)13:59
ScottKDeeps: Right.  That's why I'm telling you.  Generally Ubuntu security people don't keep a web site listing the stuff they're working on.14:00
ograthere the upload hits the buildds :)14:00
ogragutsy-, feisty- and hary security should have it RSN14:00
ogra*hardy14:00
DeepsScottK: Security through obscurity? :)14:01
ograif it has built there will be an USN note14:01
ScottKDeeps: No.  Just they don't mark it up.14:01
DeepsFair enough14:01
ScottKThe policy is that public security vulnerabilities have public bugs.  Given that Debian just announced this, I'm guessing no one has bothered to take the private flag off the bug yet.14:02
zulor it was private and someone screwed up :)14:03
ScottKInterestingly the fixed openssl package shows up in hardy-changes, but LP appears not to know about it yet.14:44
ScottKOK.  That or I had the url wrong ....14:45
* CrummyGummy holds thumbs and updates to Heron.14:47
CrummyGummyHiya, that was pretty successful. Just one issue.15:04
CrummyGummy /sbin/apparmor_parser: Unable to replace "/usr/sbin/mysqld".  Profile doesn't conform to protocol15:04
CrummyGummyIs that something to worry about?15:04
CrummyGummyNever mind. it doesn't seem to be an issue.15:06
* CrummyGummy modified his search criteris.15:06
zulmathiaz: ping im curious how is apache2 handle at the begining of the release cycle15:14
ScottKNew openssl package for Hardy has hit the security repository.15:18
Deepsnice15:19
* ScottK is going to have to regenerate all the dkim keys too. Ugh.15:19
* CrummyGummy gets that sinking feeling that his server isn't coming back up.15:22
ScottKGutsy too (openssl).15:22
ograhttp://www.ubuntu.com/usn/usn-612-115:26
NavopCan someone tell me what went wrong on this installation of ISPCONFIG--->   http://pastebin.com/db8f035015:42
\shNavop: commercial tool?15:46
Navop\sh: not as i know of15:48
\shNavop: I would say it's a ispconfig problem regarding the last line of the paste...15:48
\shnot ubuntus15:48
Navopk thanks15:49
\shand seeing that it ships its own openssl lib ... I don't think it's a good tool...similar to confixx I think15:49
\shwhich was broken by default15:49
Navopwhat is a good tool to use?15:50
Navopnewbie, on server side15:50
\sha good tool? leatherman and a good admin :)15:50
NavopWhat is leatherman15:51
Navopnm15:51
\shNavop: a good tool...serious...don't use those tools when you don't know anything about server administration....learn to admin a server from scratch read some books about apache+php+mysql etc. but don't trust those tools in the first place...15:52
\shthose "isp apps" are doing things on your system, you don't see or know...(like shipping selfmade and insecure openssl libs, see security announcement from today for openssl)...15:53
\shit's dangerous to use them without any clue what those apps are doing in the first place...15:54
Navopk thanks for info15:56
=== bamed is now known as bamed|away
Kl4mthis install a whole lot of software out of package management as I see16:01
ograyeah, looks pretty messed up16:02
Kl4mI don't want to judge too quickly, but it's very automatix-like from what I see16:02
DeepsNavop: a leatherman is like a swiss army knife (if you know what those are)16:03
* Deeps pats his16:03
* ogra prefers the swiss variant :)16:03
* ogra pats his pocket16:03
Navopthanks, good army knife16:03
=== mathiaz_ is now known as mathiaz
Jeeves_Will rsync 3.0 be included in 8.04.1 ?16:33
Jeeves_Or does someone know who I should poke for that to happen? :)16:34
Wicky656Could someone point me in the right direction for what my options are for monitoring hardware for failures with server? SNMP gets me stats but i need to be alerted is something outright breaks.16:46
mathiazJeeves_: rsync 3.0 probably not - it's a new upstream revision. It won't go into 8.04.1.16:47
Jeeves_mathiaz: Ubuntu distributes a beta firefox for the whole world in a LTS version, but no rsync 3.0 ?16:48
Jeeves_Strange world, we live in...16:48
ograJeeves_, ff 2.0 isnt supportable for 3 years16:50
Jeeves_ogra: A beta isn't supportable at all16:50
ograupstream wont support it that long16:50
ograit will be final for 8.04.116:50
Jeeves_ogra: Sure it will.16:51
Jeeves_I don't doubt that16:51
ograand since we dont change upstream versions in a release it had to be 3.0beta16:51
ogra;)16:51
ScottKWe will this time.  There are exceptions.16:52
ograwell, but not just for new shoeshine :)16:52
Jeeves_I just don't get why it is not ok to include rsync 3.0 ( or why it hasn't been done allready)16:53
ograi'm sure the backport guys wont complain to provide a package16:53
Jeeves_ogra: I can provide my own16:54
Jeeves_That's not the problem :)16:55
Jeeves_It would be nice if the canonical mirrors would use rsync 3.0 as well16:55
Jeeves_for syncing the archives16:55
uvirtbotNew bug: #230003 in openssh (main) "openssh-server: regression: won't install due to debconf error" [Undecided,New] https://launchpad.net/bugs/23000317:18
=== bamed|away is now known as bamed
zulmathiaz: ping https://bugzilla.samba.org/show_bug.cgi?id=543617:39
uvirtbotbugzilla.samba.org bug 5436 in Client tools "Reports "Server packet had invalid SMB signature" with some Win2K servers" [Blocker,Resolved: fixed]17:39
zulI think there are a couple of bug reports in hardy about that17:40
mathiazzul: right - some bug reports mention this - however it's not always with Win2K17:44
zultrue doesnt hurt for them to try though17:45
mok0Hmm, I uploaded torque_2.1.8+dfsg-0ubuntu2 to intrepid ~2hrs ago, but I can find no trace of it. Neither in the queue, builds or any reject mails. What can have happened?17:47
giovaniI'm getting an error: "Template #4 in /tmp/openssh-server.template.152690 has a duplicate field "template" with new value "ssh/vulnerable_host_keys". Probably two templates are not properly separated by a lone newline." when I try and install the updates for openssh-server17:47
giovanion gutsy server17:48
mathiazgiovani: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/23000317:48
uvirtbotLaunchpad bug 230003 in openssh "gutsy: openssh-server won't install or upgrade: debconf error - /var/lib/dpkg/tmp.ci/templates has a duplicate field "template"" [Undecided,New]17:48
mathiazgiovani: known, worked on - fix should be ready17:48
mathiazgiovani: soon17:48
giovanimathiaz: alright, thank you very much17:48
SuperLagAre there any packages that you can use to document any/all changes made to server configuration, and installed packages?17:49
bipolarDoes anyone know how to setup ldap authentication on the client side so that it only shows users inside a specific DN? Everything has changed so much with hardy that I can't get it to work.18:04
bipolarI tried adding "nss_base_passwd         ou=users,dc=example,dc=com?one" to /etc/ldap.conf but no dice18:05
=== bamed is now known as bamed|lunch
bipolarhere's another one... how the hell can I log into this box with an LDAP user when NOTHING in pam is configured for ldap?18:23
bipolarover ssh even!18:23
* bipolar sacrifices a chicken18:38
Lyaahya18:43
Lyaahas anyone installed a system using a rescue-Image via PXE and using debootstrap?18:44
Wicky656fdisk -l shows nothing with sda devices. how can I view my partition table? fdisk -l sda and fdisk -l sda1 respond with can't open device18:46
blue-frogWicky656: cat /proc/diskstats gives you something about your HDD?18:48
Wicky656blue-frog: first it pukes on /dev/sda and then midway down gives some numbers18:49
blue-frogpukes? says what exactly?  sdaxx or hdaxx?18:50
Wicky656blue-frog: it's an IBM raid array18:50
blue-frogah18:50
Wicky656blue-frog:  Cannot open /dev/sda18:50
blue-frogsry can't help you don't have raid. but if it's something similar to lvm, you might have it somewhere in /dev/mapper maybe?18:51
Wicky656nope Iturned off lvm to try get out monitoing system to read disk stats correctly18:52
Wicky656My real issue is "is it work the effort to rebuild with xfs for hadoop machines?"18:53
xenocampanoliStill looking to figure out eruby on Ubuntu.  I've seen a lot of stuff on the net complaining about no answer, and no answer.  A key to my problem may be getting the 'Action' directive to work.18:59
xenocampanoliI wonder if there is a specific ubuntu/apache forum...?19:00
MattJHi, is ssh-vulnkey Ubuntu specific, does anyone know? or is it (or will it be) in Debian too?19:06
ograubuntu819:07
ograspecific19:07
ogra(sorry for the wrap)19:07
MattJHeh, np19:08
MattJThanks19:08
giovaniMattJ yeah, debian released their own tool19:10
giovanidowkd.pl19:10
MattJAh yes, I used that this morning before the Ubuntu updates19:10
MattJssh-vulnkey is more user-friendly :)19:10
bipolarno matter what I do, I can't get my ldap nss client (getent passwd) to only show users in a specific ldap dn. I used to be able to use the nss_base_passwd option in libnss-ldap.conf to do this, but now nothing works to solve this issue. I get every user in the entire ldap server when I run 'getent passwd'19:10
giovaniindeed19:10
bipolardoes anyone know what voodo is required to get this working right?19:11
giovaniMattJ: but it doesn't check remote keys19:12
MattJgiovani: Which?19:13
giovanissh-vulnkey19:13
MattJssh-vulnkey checks authorized_keys19:13
giovanithat's not remote keys19:13
MattJWhich remote keys?19:13
giovanidowkd.pl checks remote servers and their fingerprints19:13
giovanifor any given server19:13
xenocampanoliI wonder if there is a specific ubuntu/apache forum...?19:13
MattJgiovani: Oh, I see what you mean19:15
cyris|How can I go about starting slapd on port 389 and port 636?19:23
cyris|slapd -h ldap://localhost -h ldaps:/// seems to only starts listening on 389, or if I flip the order it only starts listening on 62619:24
xenocampanoliHere is my answer:  http://ubuntuforums.org/archive/index.php/t-356350.html19:26
xenocampanoliIn case anyone was already looking.19:26
=== bamed|lunch is now known as bamed
bipolarkirkland: are you at the keyboard?19:42
kirklandbipolar: yes19:42
* ScottK was waiting for you to answer no.19:43
bipolarkirkland: I'm in a bit of a bind here with my hardy ldap client config. I'm hoping you have a min to perhaps help me out19:43
bipolarthe new config has really gotten me confused19:44
bipolarI've been at this one problem all day19:44
kirklandbipolar: okay, i'll do what i can19:44
bipolarthe short story is that I can't figure out how to narrow the list of users visable on the client to a specific dn.19:44
bipolarI used to be able to set nss_base_* in /etc/libnss-ldap.conf to do it19:45
bipolarbut those options seem to have no effect no matter what file I put them in.19:45
bipolarI've tried /etc/ldap.con /etc/ldap/ldap.conf /etc/libnss-ldap.conf19:46
kirklandbipolar: please define "visible on the client"19:46
bipolarI see my samba workstation 'users' when i run 'getent passwd'19:46
bipolarthey are in ou=workstaions,dc=domain,dc=com19:47
bipolarmy real users are in ou=users,dc=domain,dc=com19:48
bipolarand my groups are ou=groups,dc=domain,dc=com19:48
kirklandbipolar: okay, so /etc/ldap/ldap.conf is what's used if you're running command line ldap queries19:49
bipolarso i set nss_base_(passwd|shadow) to ou=users,... and nss_base_groups to ou=groups,....19:49
kirklandbipolar: and /etc/libnss-ldap.conf is for nss/pam logins19:49
bipolarthe only thing in /etc/ldap/ldap.conf is TLS key config. thats all. 3 lines.19:49
bipolarlibnss-ldap.conf does not exist... I only created it to test out if thats where it would look for the nss_base_* lines. everything is in /etc/ldap.conf19:50
bipolarwhich is where debconf put them19:50
bipolarbut 'getent passwd' shows all the users under my basedn19:50
kirklandbipolar: right, so a /etc/libnss-ldap.conf is owned by package libnss-ldap19:51
kirklandbipolar: what owns /etc/ldap.conf ?  that doesn't seem right for hardy....19:52
bipolarum... I don't think so... I had to create that file by hand19:52
bipolar /etc/libnss-ldap.conf that is19:52
* kirkland goes play with a virtual machine....19:53
bipolarbtw... loggin in, pam, X, ssh, everything works.19:53
bipolarwith the ldap users19:53
bipolarwhen I run 'apt-get install libpam-ldap libnss-ldap nss-updatedb' I answer the questions debconf asks me, and it creates /etc/ldap.conf and everything worked.19:55
kirklandbipolar: and the problem is that you want to narrow the list of users who can legally login to this computer?19:55
bipolarto those in a dm, yes. actualy, they are all samba workstation accounts, so they couldn't log in anyway (no set password), but the result is the same.19:56
kirklandbipolar: when installing libnss-ldap, debconf asks for the ldap search dn19:58
kirklandbipolar: and I stand corrected....19:58
kirklandbipolar: that writes to /etc/ldap.conf19:59
kirklandmy bad19:59
bipolarkirkland: confusing, isn't it.... :)19:59
kirklandbipolar: yeah19:59
kirklandbipolar: in /etc/ldap.conf, i'd think you'd want to customize the "base ...." line20:00
bipolarkirkland: ok. the problem is that groups and users are on the same level in the ldap database. ou=groups,dc=domain,dc=com and ou=users,dc=domain,dc=com20:00
bipolarso currently my basedn is dc=domain,dc=com20:01
bipolarbut then it picks up ou=workstations,dc=domain,dc=com20:01
bipolarin feisty and debian I used the nss_base_passwd/shadow options to restrict users to that user dn20:02
bipolarand nss_base_group to the group dn. it worked wonderfuly.20:02
bipolarnow that option, even though it's listed, explained, and commented out in /etc/ldap.conf, does not work.20:03
* kirkland sees it there20:03
bipolarI keep hoping that it mearly needs to be moved into a diffrent config file. :(20:05
* bipolar sacrifices a small goat20:05
kirklandbipolar: to be honest, i'm not intimately familiar with these options.  if they're not working for you, i'd file a bug, if i were you.  if this is a regression since feisty, please note that, as it'll help us track down the root cause.20:06
kirklandbipolar: you're welcome to subscribe me to the bug20:06
bipolarok20:08
ograbipolar, hey, nobody has cleaned up the chicken yet. please only one animal a day per channel20:08
bipolarI left it there for the voodo god who handles these things20:08
ogra:)20:09
bipolarkirkland: ok. I'll post it.20:09
kirklandbipolar: any idea if it worked in Gutsy?20:09
giovaniis he different from the voodoo god?20:09
bipolarnot really...20:09
kirklandbipolar: file it against libnss-ldap20:09
bipolarok20:09
bipolargiovani: I don't care who he is... I just need this to work.20:09
bipolar:)20:10
bipolarkirkland: thank you very much for your time. I really apreciate it ;)20:14
kirklandbipolar: no problem, i'm sorry i'm not of more use at the moment20:15
kirklandbipolar: but i will look into it20:15
kirklandit's a bit of a busy day ;-)20:15
bipolarkirkland: https://bugs.launchpad.net/ubuntu/+source/libnss-ldap/+bug/23006520:28
uvirtbotLaunchpad bug 230065 in libnss-ldap "nss_base_XXX options being ignored in /etc/ldap.conf" [Undecided,New]20:28
bipolarhaha20:28
bipolargood bot20:28
ericvwwhat is the keyboard cmd or shortcut to scroll back through a terminal buffer?20:39
Jeeves_shift-page up20:42
uvirtbotNew bug: #230029 in openssh (main) "ssh-vulnkey overlooks keys which have options in authorized_keys" [High,Triaged] https://launchpad.net/bugs/23002920:50
Lyaashould there be still an /etc/inittab on Hardy? or is that nit required with upstart?21:09
Lyaas/nit/not/21:09
melterwhen i do an upgrade, why are openssh-client and openssh-server "kept back"?21:35
giovanimelter: probably because they force a regen of your server keys, and that may want to be a planned upgrade/change21:36
Nafallomelter: wasn't on any of my systems. was that upgrade or dist-upgrade?21:37
giovaniNafallo: it was on my feisty box just an hour or so ago -- on a regular upgrade21:38
Nafallomelter: in case of upgrade they are held because they want to install an additional package.21:38
melterNafallo, "upgrade"21:41
Nafallothere we go then21:41
melterso what do i do? i had to regenerate new keys on my desktop system21:41
giovaniyou need to regenerate all keys you generated with the bad copy of openssl21:42
melteropenssh-server generates its own keys, so can i just delete the old ones?21:43
infinitymelter: You need to dist-upgrade, not upgrade, since openssh-server grew a new dependency.21:44
giovaniit should overwrite the old ones when you do an upgrade21:44
infinitymelter: "upgrade" will never add/remove packages, only upgrade existing ones.21:44
giovanibut if you've generated keys and placed copies on other remote systems ... you'll want to revoke/regenerate those21:45
melterisn't dist-upgrade the same command for upgrading, say, 7.10 to 8.04?21:46
infinitymelter: "dist-upgrade" isn't for "upgrading between dists" (though you can use it for that), it's just for doing any "complex upgrade" (anything that adds or removes packages).21:47
infinitymelter: dist-upgrade won't switch you to another release or anything, you'd need to manually edit sources.list for that. :)21:47
melterinfinity, thanks, that addresses my concern :)21:48
bipolarkirkland: OMG... I'm so damned embarresed. I had the option for the workstation accounts REPEATED at the end of the file. I didn't even notice it.21:49
=== joerlend_ is now known as XiXaQ
Nafallohmm22:08
* Nafallo gives infinity do-release-upgrade ;-)22:08
LiENUSis ubuntu 6.06 LTS affected by the debian openssl bug?22:33
ScottKLiENUS: No.22:34
lucasv3Hi, I have just tried to upgrade my server. apt-get upgrade, then apt-get dist-upgrade. (from dapper to hardy). apache is not starting anymore and dpkg is segfaulting22:59
Deepsyou're not supposed to dist-upgrade, as it can cause stuff to break (like this)23:00
lucasv3Deeps: so what's the normal procedure?23:01
Deepsupgrade instructions point to upgrade manager / do-release-upgrade23:01
Deepsnot sure how to go about fixing it now mind, ubuntuforums might have someone else who tried this and encountered similar problems23:02
JanCdpkg segfaulting is weird anyway?23:03
lucasv3JanC: Setting up mime-support (3.39-1ubuntu1) ...23:07
lucasv3Segmentation fault23:07
=== JaxxMaxx__ is now known as JaxxMaxx_
lucasv3JanC: it might be the package that's causing it23:08
JanCyeah23:08
JanCI didn't test dapper → hardy upgrades myself  :-/23:09
lucasv3JanC: http://pastebin.com/m392e5b2023:11
lucasv3not really23:11
lucasv3:(23:11
lucasv3/usr/sbin/apache2ctl: 124: /usr/sbin/apache2: Permission denied23:11
JanCLooking for keymap to install:23:12
JanCNONE23:12
Deepsnot to be one to shy away from a challenge, but i'd reckon it'd be easier for you at this stage to install from scratch23:12
lucasv3Deeps: well, it's a dedicated server23:12
JanC&dpkg: error processing console-common (--configure):23:12
JanC subprocess post-installation script returned error exit status 13923:12
JanCSetting up mime-support (3.39-1ubuntu1) ...23:12
JanCSegmentation fault23:12
Deepsno terminal server / ip kvm?23:13
lucasv3no23:13
DeepsJanC: nice, defeating the point of a pastebin? ;)23:13
Konamcan you define more than one subnet with just one router (or device to which several computers are connected)?23:13
JanCsounds like an issue with the console/terminal ?23:13
JanCDeeps: who cares about 2-4 lines  ;)23:14
lucasv3JanC: after that, it just lists the packages which weren't configured because of dependency problems caused by the first few errors.23:14
JanCKonam: of course23:14
lucasv3Deeps: I wouldn't mind reinstalling23:15
KonamJanC but how will the client identify that he is on a different subnet?23:15
JanCKonam: the same way it does in all other cases?23:16
JanC(things like the subnet mask & the routing table are relevant)23:17
DeepsKonam: can I ask why you're wanting to have different subnets for different devices all connected to a single interface?23:18
KonamDeeps I'm just reading the dhcpd.conf man page and was curious about that, but I still don't get how the client will realize that it is on a different subnet :/23:20
Deepsit wont unles you have it running off different physical wires, or have vlans23:21
Deepswell, i say different wires, i mean different interfaces on your router23:21
Konamthat's more understandable23:23
Deepsif you have a vlan aware switch, then you can 'cheat'23:23
Konambut JanC suggested that it will like it does in any other case, I didn't get that.23:23
Deepsit will in the sense that you can have statically assigned addresses + subnets all running over the same physical network without any vlans23:24
Deepsbut that'll be subnets in name only, as you loose most of the point of having subnets doing it that way23:24
Konamoh, maybe I left the DHCP part then23:24
Konamall the clients are getting their configuration through dhcp23:25
Deepsthrough dhcp you cant, unless you have different physical interfaces from your dhcp server, or virtual interfaces + vlan aware network23:25
Konamthat's what I thought23:26

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!