/srv/irclogs.ubuntu.com/2008/06/03/#ubuntu-server.txt

slimjim8094hey guys, quick question00:44
slimjim8094ehlo from slimjim809400:45
slimjim8094bah, say my name when (if) you come back00:45
InsomniaCitywhy not just ask the question?00:47
slimjim8094ok, fair enough00:47
InsomniaCitythen when they come back, they'll answer the question too00:47
slimjim8094ok - well i'm running bind9 and dhcp3-server00:47
slimjim8094on the same bodx00:47
slimjim8094box*00:47
slimjim8094i'm using this as a router/server/samba/nfs/squid/firewall/awesomebox00:47
slimjim8094and it's been working great00:48
slimjim8094but i haven't been able to get ddns-updates to work, from dhcp-server to bind900:48
slimjim8094my main question is - do I *need* security (key) if I don't want one?00:48
slimjim8094because i'd prefer to not use one... I trust my network00:48
InsomniaCityDeeps knows about dhcp+bind9, IIRC00:49
slimjim8094ok well holla if/when you come back00:50
slimjim8094my irc beeps at me if you say my name :)00:50
* kees ponders try to S-O-S slimjim8094's irc client. ;)00:51
kees*trying00:51
slimjim8094DoS? or SOS?00:51
keeslike, playing out "deet deet deet  deet   deet   deet   deet deet deet"00:52
slimjim8094rofl00:52
slimjim8094kees00:52
slimjim8094kees00:52
slimjim8094kees00:52
kees:)00:52
slimjim8094kees00:52
slimjim8094kees00:52
slimjim8094kees00:52
keesmine just highlights ;)00:52
slimjim8094kees00:52
slimjim8094kees00:52
slimjim8094kees00:52
slimjim8094how about that?00:52
slimjim8094oh00:52
slimjim8094mine does both XD00:52
ray_hi any one here01:41
ray_how you set up dns so i can use it with my routor and isp on my own on ubuntu 801:44
ray_?01:44
slimjim8094ray_02:01
slimjim8094oh02:01
slimjim8094well he's gone...02:01
=== RoAk is now known as RoAkSoAx
pteagueok, this isn't good...  i'm getting something like "no journal on filesystem md0"...  there should be, it's a 1.2tb with only about 100gb free04:17
mathiazdendrobates-: Could you modify https://blueprints.launchpad.net/ubuntu/+spec/easy-ldap-server to set me as the drafter ?04:24
* ajmitch wouldn't mind being removed as assignee from these as well04:27
ajmitchwhile I'm starting to get back into ubutnu development where possible, I don't think I'll be taking care of these specs04:28
mathiazajmitch: could you change that information ?04:31
pteaguehttp://pastebin.com/m715d8c4304:34
ajmitchmathiaz: no, I tried the other day04:38
* ajmitch will try again with this spec04:39
ajmitchnope, forbidden04:39
ajmitchdendrobates is a member of ubuntu-drivers, I'm not04:40
* ajmitch wishes he could help with that raid problem04:42
pteaguehttp://pastebin.com/m715d8c43 :(04:43
ajmitchyeah, I saw04:44
pteagueoops, sorry for repost... carrying on multiple convos in diff channels04:44
ajmitchdoes dumpe2fs tell you any thing useful?04:44
pteaguecan i run that directly on /dev/md0 cause it won't let me mount it at all04:45
ajmitchafik you can, and it shouldn't modify the filesystem on there that I'm aware of04:45
mathiazajmitch: ok - thanks - I'll ping dendrobates- about this spec.04:45
* ajmitch is glad to see things moving ahead with the server team though04:50
pteaguek, running dumpe2fs... it's a 1.2tb raid5 so may take a while... does it output to 1 or 2? i figured i'd dump the output to txt04:50
ajmitchso it's getting somewhere?04:51
pteagueseems to be... red light is blinking on the 1st drive04:52
* ajmitch probably isn't the best person to help with filesystem intricacies04:52
ajmitchsince for me, things generally just work & I don't dig deeper :)04:53
pteagueyeah, i usually don't have problems, but there was a power outage today... i shutdown the server, but i don't know if it finished shutting down before or after the ups went down04:54
pteaguethe output file is about 2.7mb & i couldn't paste the entire thing to pastebin so i just pasted a part of it - http://pastebin.com/m4f7e26fb05:00
ajmitchcertainly still looks like a valid FS with metadata05:01
pteaguesomebody in tulsa lug was able to help me out... after a bunch more debugging ended up having to run `tune2fs -j /dev/md0`06:02
ajmitcha bit painful06:03
ajmitchand surprising that the journal could just disappear06:04
pteagueyeah, i think what happened was ups died in the middle of shutdown earlier... had a tree fall on a power line 2 blocks south of here06:04
ca_dslhi all06:59
ca_dslI need some help with installing ubuntu 8.04 server06:59
ca_dslanyone there that can help06:59
sorenca_dsl: That's hard to say. You haven't asked a question yet.07:03
ca_dslo right07:04
ca_dsltrying to install ubuntu 8 on a hpt374 raid 5 array07:04
ca_dslbut the partition manager won't see the array07:05
ca_dslit only sees the individual disks07:05
ca_dslI am sure I am missing something simple here07:05
ca_dslbut I cant seem to find any info on the web on how to do this07:06
ca_dslany ideas?07:06
sorenYour raid-crontroller is probably not a "real" raid controller. It's quite comon.07:07
sorencommon,even.07:07
ca_dslwhat do you mean by that?07:07
sorenIt just gives you a way to configure your raid arrays in a bios-ish configuration thing, and then the operating system is supposed to do software raid based on that information.07:08
ca_dslI don't think that is the case with the Hiphpoint Rocket Raif07:08
ca_dslerr raid cards07:09
ca_dslbut I honestly don't know07:09
ca_dslhow can one tell?07:09
sorenReal RAID card are *really* expensive.07:11
ca_dslnm I just googled it and it turns out it is indeed a "Bios assisted"07:11
ca_dslcard07:11
ca_dslthat explains why I see the individual drives07:11
ca_dslso how do I make them work as a RAID 5 on a cleam install?07:12
sorenActually... I'm not sure.07:14
ca_dslahh07:18
ca_dslapparently ubuntu is loading the standard hpt366 driver (standard ide)07:19
ca_dslso the question becomes how do I manually tell the installer to load a different driver for the hdd controller?07:20
sorenYou don't want to use a different driver.07:23
ca_dslapparently the propiertary driver will see the array07:24
ca_dslI found a howto on the install once the system is up and running07:24
Koonca_dsl: yes, Highpoint Rocket raid cards are usually hardware raid cards, so I think your problem is more that it's not properly recognized07:25
Koonca_dsl: which one is your model exactly ?07:25
ca_dslRocket Raid 45407:25
ca_dslw/ the HPT374 chip07:25
ca_dslKoon: any ideas then?07:28
ca_dslI tried hitting F6 but nothing happened *grins*07:28
Koonca_dsl: I'm looking... it should have loaded the right module07:28
ca_dslok07:29
=== fredrik is now known as frippz
Koonca_dsl: http://stefan.freyr.org/?page_id=607:29
Koonyou apparently aren't the first one07:29
ca_dslthats a change07:30
ca_dslnormally my problems get a response of "thats a first" or "no one else seems to have that problem"07:30
ca_dslo thats the howto I foind07:30
ca_dslerr found07:30
ca_dslit assumes a system is allready up and running07:31
* rgl waves07:31
ca_dsland is for x6407:31
ca_dslI am running the x86 version07:31
ca_dsland I am trying to install onto the array (no more space for extra drives)07:31
Koonca_dsl: yes, I'm not so sure how you can blacklist a module and load another one soon enough in the install07:32
ca_dslthe installer has a shell07:33
ca_dslbut darned if I know what to do with it07:33
ca_dslcould I use the shell and compile the driver for the install?07:34
Koonno, you'd need a more complete system to compile things07:34
ca_dslhmm07:36
ca_dslthere is no liveCD version of server is there?07:36
Koonca_dsl: no07:38
ca_dslhmm07:39
ca_dslyet another wall07:39
ca_dsli seem to have a nack with stumping the experts07:39
KoonI suppose you could compile the hpt374 module on another system, copy it somehow when you drop to the shell, rmmod hpt366 and insmod hpt374... but I couldn't tell you the exact steps07:40
Koonthe easiest would be to have one disk outside the array07:41
Kooninstall on it07:41
ca_dslyeah rmmod is not a shell command on the install07:41
ca_dslI am thinking you are right about using another disk07:41
ca_dslit would keep the system seperated from the data07:42
ca_dsland the howto would then work...07:42
* ca_dsl stares at the case and wonders how to install another drive07:43
* ca_dsl grabs hit hot glue and another drive07:43
Koonca_dsl: good luck !07:44
ca_dslthnx07:44
ca_dslis 7 drives in a mid tower too many :D07:44
ca_dslfrankenserver, in fact I think that will be its name07:46
ca_dslwonder where I can hire an Igor07:48
soren:*)08:03
ca_dslkoon and soren thanks for the help08:04
sorennp :)08:04
* ca_dsl bows spins and is gone08:10
FuromDoes anyone in here comprehend how SMTP works? I need insight to this subject. For example, lets say that I have an SMTP server running, it should recieve emails from something like, ANYTHING@my.ip.ad.dre.ss, right? Or is there extra steps I have to take to make it work? My situation is, that I'm using a ruby server that I'm programming myself, to store text emails in mysql. I don't want an over complicated system that enables08:30
Furomtransfer of files and such. I just need to be able to receive emails.08:30
hadsFurom: It's not really #ubuntu-server related. Probably the best way would be to setup a standard MTA and have your mail delivered to your script via pipe.08:38
Furomhads: Ah, I figured it would be, since technically, it's an SMTP server setup that I'm trying to accomplish. Well, guess I better get back to googling.08:42
krautmoin09:37
daffyhi all09:44
daffysomebody use egroupware software ?09:44
daffyi've a problem with it :(09:44
soren!ask09:45
ubottuPlease don't ask to ask a question, ask the question (all on ONE line, so others can read and follow it easily). If anyone knows the answer they will most likely answer. :-)09:45
=== emgent_ is now known as emgent
daffyi use egroupware with ldap authentification, and "felamimail" don't use the correct user for connect to the imap server, egroupware use UID for authentification on egrouware and felamimail use this login but my configuration on ldap for mail adress is not the same as UID09:47
sorenWhu... PHP seriously doesn't have an execve function?10:21
daffythis is for me ?10:22
sorenNo.10:22
sorenFor me.10:22
daffyoki ^^10:22
=== mdz_ is now known as mdz
=== ogra_ is now known as ogra
sorenAnd presto! The first stab at a web-enabled version of ubuntu-vm-builder is now functional.12:21
frippzsoren: sounds cool. so where's the Sourceforge page? :D12:23
ograsourceforge ... pffft .... thats so 90s ...12:23
* soren shudders at the mere thought of dealing with sourceforge again.12:24
Kamping_Kaiserhehe12:24
frippzfine.... so what's the hot stuff these days? google code? :P12:24
sorenI liked their build farm, but the web interface? NEver again..12:25
sorenlaunchpad, dude!12:25
frippzof course... silly me :)12:25
sorenThat's where it's at. All the cool kids use it.12:25
Kamping_Kaiserfunny that :P12:25
frippzas soon as I can get my boss to hock up the €200 for a new rack server, I'll get into virtualization as well :)12:26
frippzand a web interface would be nice12:26
frippzheh, meant €200012:31
frippzI'd like to see the rack server you get for €20012:31
=== slimjim8094__ is now known as slimjim8094
dthackerwell the storm woke me up, I might as well go to work.12:42
pschulz01Kamping_Kaiser: ping13:23
Kamping_Kaiserpschulz01, pong13:24
pschulz01Kamping_Kaiser: We have some deadlines :-(13:24
pschulz01Kamping_Kaiser: re. bugzilla313:24
pschulz01Kamping_Kaiser: :-)13:24
zulmonkeys!13:25
Kamping_Kaiserpschulz01, :/ thats bad what sort of deadline?13:25
pschulz01Kamping_Kaiser: Friday week.. get everyone using new bugzilla (cutover).13:26
Kamping_Kaiserpschulz01, i might come in extra day/s next week then.13:27
sommermorning all13:27
pschulz01Kamping_Kaiser: I might just install it.. as we have it now.13:28
pschulz01Kamping_Kaiser: The we will have a week to sort out the data migration.13:29
pschulz01Kamping_Kaiser: SSL should just work (touch wood).13:29
Kamping_Kaiserpschulz01, i expect its close. i'll find out how its going thursday i guess ;)13:30
pschulz01Kamping_Kaiser: Ok.13:30
Kamping_Kaiserafk. sleep :)13:34
sommerjdstrand: I was playing with the smbd apparmor profile in the apparmor-profiles package, and I think there a couple more directories that should be added by default:13:59
sommer  /var/spool/samba/** rw,13:59
sommer  /var/run/utmp rwk,13:59
sommerjust an fyi :)13:59
Asad2005can someone help me set up my wireless NIC wlan0 as access point, my eth0 is currently set up as DHCP server hardy6413:59
jdstrandsommer: thanks! can you file a bug against apparmor-profiles?14:00
sommerjdstrand: sure will do14:00
=== dantaliz1ng is now known as dantalizing
emgentheya15:04
=== bamed|lunch is now known as bamed
cjsstablesMorning.  Have a problem with a user logging into ldap network server.  User can log in with a windows client but cannot log in with a linux client.  other users are not affected.  where do I begin my search to remedy this issue16:23
mathiazKoon: well - it's hard to find a time that would fit almost everyone.16:32
mathiazKoon: http://timeanddate.com/worldclock/meetingtime.html?month=6&day=4&year=2008&p1=196&p2=69&p3=43&p4=22416:33
Koonmathiaz: yes, looks like the less worse time on that table16:34
zulmathiaz: do you want to do the mysql merge?16:39
mathiazzul: Not in the next few hours - go ahead16:54
rglany of you guys using powerdns?17:40
=== jjesse_ is now known as jjesse
Asad2005can someone help me set up my wireless NIC wlan0 as access point, my eth0 is currently set up as DHCP server hardy6419:22
gladkAsad2005: what access point do zou have_19:26
gladk?19:26
gladksorry, Deutsch keyboard :19:26
gladk:)19:26
=== jjesse_ is now known as jjesse__
=== jjesse__ is now known as jjesse
slimjim8094sup20:05
slimjim8094listen - i have a question about ddns-updates20:05
slimjim8094can anyone give me a hand?20:06
mathiazjdstrand: ok - I'll join #ubuntu-meeting now - ping me when you're about to be up20:06
spiekey_hi20:10
mathiazsommer: is auth-client-config documented in the Server Guide ?20:13
sommermathiaz: I don't think so20:16
sommermathiaz: nopers, currently the serverguide covers setting up services, not necessarily configuring clients to use them20:18
sommermathiaz: that can be added though :-)20:18
mathiazsommer: right - it may be worth adding about a section about this20:18
mathiazsommer: or a section about how-to integrate your ubuntu server in an existing infrastructure20:19
sommermathiaz: sure, I'll add it to the list20:19
mathiazsommer: that would cover likewise-open, nss and pam20:19
mathiazsommer: I've just updated a spec about this topic - https://wiki.ubuntu.com/NameServicesIntegration20:20
=== ScottK-laptop is now known as ScottK2
sommermathiaz: just added a note to the serverguide spec as well: https://wiki.ubuntu.com/IntrepidServerGuide20:25
mathiazdendrobates: could you update this blueprint https://blueprints.launchpad.net/ubuntu/+spec/network-authentication ?20:26
mathiazdendrobates: and make me the drafter ?20:27
ledmushroomOk lets say that I have multi users on this pc ubuntu 8 and I was wondering is there away to limit there ability  to d/l anything with out a password, I mean let them on the net but no d/l of any kind. thats it20:32
ledmushroomOk lets say that I have multi users on this pc ubuntu 8 and I was wondering is there away to limit there ability  to d/l anything with out a password, I mean let them on the net but no d/l of any kind. thats it20:33
ledmushroomdont know what happened to the first post20:33
sorenWhat do you mean by "on the net but no d/l of any kind"?20:34
ledmushroomthey would be allowed to surf but not download anything with out a password or something20:36
sorenSurfing and downloading is the same thing.20:37
soren(in this context)20:37
Deepssounds like the guy wants a browser in kiosk mode20:38
nealmcbyeah - like it is hard to tell the difference between listening to music and recording it....  but tell that to the DRM fanatics20:38
ledmushroom so what you mean is no unless i take away the net all together20:38
nealmcbledmushroom: what do you want to prevent - changes to the system?20:39
ledmushroomright20:39
ledmushroomi guess20:39
nealmcblike a kiosk mode?20:39
Deeps20:38:31 < Deeps> sounds like the guy wants a browser in kiosk mode20:39
ledmushroomi guess if i knew what that was20:39
nealmcbDeeps: right - I was just doing it in conversational style :)20:39
Deepswhere you can surf the net, but not do anything else20:40
Deepslike at a cybercafe, or a internet point at an airport20:40
nealmcbkiosk mode == where the computer is supposed to remain the same for the next user - can't install programs or change preferences?20:40
ledmushroomi guess but havent been to any of those i suppose so20:40
ledmushroomhehe20:40
Deepsor download files20:40
ledmushroomyes20:40
nealmcbwell, "download" is too overloaded in meaning to make much sense here20:41
Deepswrite files to disk and/or run random applications20:41
CyberKingquestion: can i install ubuntu server in GUI mode?20:41
nealmcbis it a server or a desktop with a gui?20:42
ledmushroomyes deeps20:42
nealmcb(my question was for ledmushroom...)20:42
nealmcb!servergui | CyberKing20:42
ubottuCyberKing: Ubuntu server does not install a desktop environment or X11 by default in order to enhance security, efficiency and performance.  !eBox provides a GUI system management option via a web interface.  See https://help.ubuntu.com/community/ServerGUI for more background and options.20:42
ledmushroomdesktop20:43
ledmushroomsorry was lost for a min20:43
nealmcbledmushroom: then you'll probably get better help in #ubuntu or another channel - the folks here don't do much with guis20:43
Deepsalthough if you insist on a gui, installing ubuntu desktop and tasksel -i ubuntu-server would be the same as installing ubuntu server and tasksel -i ubuntu-desktop20:43
ledmushroom they told me to ask in here20:44
ledmushroomlol20:44
nealmcbDeeps: well, you'd have a slightly different kernel, but yeah20:44
Deepspoint20:44
CyberKingthanks, nealmcb20:44
nealmcb:)20:44
nealmcbledmushroom: this is dated, but may give some ideas: http://ubuntuforums.org/showthread.php?t=338980&highlight=kiosk+cafe20:45
ledmushroomty20:45
CyberKingnealmcb, so when i install it, it'll be all text mode too, right?20:46
nealmcbCyberKing: installing ubuntu-server provides a command-line interface.  ebox provides a web gui interface20:49
nealmcb..as noted in that page...20:49
CyberKinggot it now... thanks again nealmcb20:50
=== slimjim8094__ is now known as slimjim8094
slimjim8094ehlo from slimjim809420:55
slimjim8094anyone know anything about BIND + dhcp-server ddns?20:56
sergevnuntil when are there updates for gutsy server?20:56
nealmcbgutsy is supported for 18 months - until next spring20:56
sergevnnealmcb: ok cool thx :)20:57
sergevnI have my production server running on gutsy ( i know bad idea )20:57
sergevnI dont know if it's safe to upgrade to hardy on the fly?20:57
nealmcbnot necessarily a bad idea - there are lots of scenarios out there...20:57
sergevnonly running apache, php, mysql, postfix, dovecot20:57
nealmcbwell, "safe" as in "no one will die", but most folks test the upgrade on a non-production box first....20:59
* nealmcb considers heart attacks and revises his answer....20:59
ph4mp573rhey, I keep getting a "file to large" bounce back on email. I checked /etc/postfix/main.cf & master.cf and couldn't find a size limit. Any ideas? Ubuntu Server 8.04 LTS21:00
sergevnnealmcb: hehe :), well postfix en dovecot depend on mysql21:00
sergevnnealmcb: im not worrying about apache, but about dovecot/postfix21:00
nealmcbph4mp573r: you're running the server that is sending the bounce message?21:01
ph4mp573ryes21:01
* soren hugs jdstrand 21:02
sorenjdstrand: Congratulations, dude!21:02
ph4mp573rany idea where the size limit is set?21:02
nealmcbwhat does this say:  postconf -d21:03
nealmcbcheers for jdstrand - new core-dev:  https://lists.ubuntu.com/archives/motu-council/2008-May/001101.html21:05
jdstrandthanks nealmcb!21:07
ph4mp573rbounce_size_limit = 5000021:07
ph4mp573rbounce_size_limit = 5000021:07
ph4mp573rit says bounce_size_limit = 5000021:07
ph4mp573rwhere is that set?21:07
JanCsergevn: just try the upgrade in a virtual machine21:07
ScottKnealmcb: Not yet.  He still has to go in front of the tech board.21:07
nealmcbScottK - this was from #ubuntu-meeting - but maybe I missed something - cc meeting now?21:08
JanCmake sure that you have the same software running in the VM before you start upgrading in it21:08
ScottKAh21:08
* ScottK was reading the mail, not the IRC channel.21:08
Deepsor just use something like partimage to copy your current machine to a virtual disk and do the upgrade that way21:08
Deeps(in the vm)21:08
nealmcbScottK - yeah - I meant to also reference the meeting channel - but I haven't read all of what is going on...21:09
nealmcbScottK - can you answer ph4mp573r's question on setting size limits?  ^^21:09
ScottKYes.21:09
ScottKBounce size limit isn't it.  Give me a sec.21:10
ph4mp573rk thank you21:10
sparky01I have a question about the recent kernel patch...21:11
ScottKph4mp573r:21:11
sergevnJanC: yes ill try this next week, thanks21:11
ScottKph4mp573r: What does postconf | grep message_size_limit produce?21:11
sparky01why would it not download and install on server. It says packages held back... ?21:11
sergevnDoes this also count for security updates? the support limit of next spring?21:11
ScottKsergevn: Yes.21:12
ph4mp573r1024000021:12
ph4mp573rScottk: 1024000021:12
ScottKph4mp573r: That's the default.21:12
ScottK~ 10MB21:12
ScottKph4mp573r: How big a message do you want to send?21:12
ph4mp573ryeah, the emails that he's complaining on bouncing are each 10.1MB lol.21:12
sparky01why would the server report that it kept back server security patches?21:12
ScottKAlso don't forget to allow some extra for 8 bit / 7 bit conversion.21:13
ScottKsparky01: It's the same as for any new kernel update.21:13
sparky01?21:13
ph4mp573rso where is the size limit set Scott?21:13
nealmcbsparky01: perhaps you need to dist-upgrade?21:13
ScottKph4mp573r: Add something like message_size_limit = 15360000 in main.cf and then reload postfix.21:13
sparky01ScottK, are they kept back until they are more fully tested or something?  please help me understand21:14
ScottKsparky01: Every kernel upgrade has a new package with is so you have to dist-upgrade to get it.  The fact that it's from security is no different.21:14
sparky01ScottK, thanks so much. i got it21:14
ScottKIf you dist-upgrade and it's still held back, it means not all the packages are published yet and you should wait.21:14
ph4mp573rScottK: so I just have to add it, even if it's not there?21:15
ScottKYes.  The default, message_size_limit = 10240000, is implicitly there.21:15
mathiazogra: is there reason to use nss_ldap in an LTSP infrastructure ?21:16
ph4mp573rthanks ScottK that worked21:23
karlito anyone got experience setting Bind9 : I got everything set for my local network. I can dig, ntlookup and ping. but where do I set the address seen from the outside world. my static ip given by my ISP. Any doc ?21:30
sommerkarlito: check out the DNS section of the server guide: https://help.ubuntu.com/8.04/serverguide/C/dns-configuration.html#dns-caching-configuration21:31
=== danshearer1 is now known as danshearer
karlitothe guide use private address that are not routable over the internet, but for my need I should substitute those address for one given by my ISP ? thank for the link.21:40
sommerkarlito: correct you'll want the fowarder addresses to be the ones from your ISP21:41
karlitowhy the guide do not include real life exemple ? got any idea ?21:42
Deepsbecause everyone can use those private ips, if it uses public ips it'll be specific to one person's configuration only21:42
sommeryep yep21:42
karlitogot it. thank21:44
sommernp21:44
maw_has anyone successfully install VMware tools on 8.04 guest?22:13
x0r-Anyone familiar with OpenLDAP and StartTLS? I have an issue starting TLS * TLS: warning: cacertdir not implemented for gnutls *22:15
OverandThesse days, should I be doing apt-get upgrade or aptitude upgrade?22:34
maw_I was just reading the man about that, apparently apt-get is the quick method and not dependancy friendly22:38
maw_quote from man:  under no circumstances are currently installed packages removed, or packages not already installed retrieved and installed22:38
kirkland zul: a bunch of people are asking for php5-5.2.6 to be backported to Hardy, citing the unusually high number of security fixes (kees, ding ding) in the release22:38
kirklandzul: see Bug #22746422:39
uvirtbotLaunchpad bug 227464 in php5 "PHP 5.2.6 fixes important security bugs" [Undecided,Fix released] https://launchpad.net/bugs/22746422:39
maw_Overand: it seems apt-get dist-upgrade is best suited to handle current packages and any dependencies22:39
hadsapt-get or aptitude will be fine.22:40
ScottKmaw_: dist-upgrade is only needed if a new package is pulled in (as is normally the case for kernel updates).22:41
keeskirkland: I'd like to get those fixed backported to all the stable releases... just haven't had time yet.22:41
kirklandkees: backport of each patch is preferred over a merge of 5.2.6 ?22:42
kirklandkees: one user is reporting that his schools network is blocking servers running php < 5.2.622:42
keeswe don't do version bumps for PHP -- we backport fixes.22:43
keesit's not a "merge" if it's to hardy.  :)22:43
kirklandgotcha.22:44
kirklandkees: well, at first glance, it looks like a *sizable* debdiff.......22:44
kirkland(by my nascent standards)22:44
Overandwow.  go 7zip - 9600megs of log files down to 145megs, heh22:44
keeskirkland: well, you already found all the security bug fixes.  that'll be small.  It just needs some time and attention.22:45
kirklandkees: ah, right, that detective work you sent me on a few weeks ago.... i hadn't made the connection until now  (light bulb)22:46
kees:)22:46
maw_ScottK: I was making my comment based on 'man apt-get' which defines upgrade as not being dependency friendly and dist-upgrade resolving dependency issues22:46
mathiazkees: pam modules are related to authentication - how would call the general domain that nss deals with ? authorization ?23:04
keesmathiaz: hmm23:07
keesmathiaz: they're really just directory lookup systems.23:08
keeslooking up lists of hosts, people, groups, etc.23:08
mathiazkees: right - I'm trying to find a good term for that role, but haven't got one yet23:09
mindframe- is there anything that should be backed up in /var/ besides /var/log?23:10
ScottKmaw_: The practical distinction is will install a new package if needed23:10
mindframe-this would be for a system restore situation23:10
keesmindframe-: everything in /var is important.  :P23:10
nijabamindframe-: quite a bit, yes23:10
=== henri is now known as ph8
keesmathiaz: "name service", though that's confusing with DNS23:11
keesdirectory service?23:11
keesthat's confusing for LDAP23:11
ph8Hi all, i'm trying to find a way of replicating filesystems across machines, for redundancy/resilience - i want to have two machines in failover and the files on each should match exactly if possible - is there a better way than an rsync crontab'ed every minute? Seems a bit messy23:12
nijabamathiaz: what are you trying to name?23:12
keesnijaba: the role that nss fills23:12
mathiaznijaba: pam -> authentication; nss -> ?23:12
ScottKph8: If you want bi-directional replication you might want to look at unison23:12
nijabamathiaz: directory lookup service is what comes to my mind23:13
nijabaph8: what about a shared block device such as DRBD?23:14
keesin addition to drbd, there's also clustered file systems, but I've never worked with them.23:15
slimjim8094hey guys - trying to do a ddns-update  between my dhcp-server and bind (same box)23:15
keesdoing a md raid1 on top of physical + drbd was what I wanted to try, but it required that the machines never mounted it at the same time.23:15
slimjim8094it's not working - anybody know what's up?23:16
keesslimjim8094: I'm not much help, I haven't used ddns :(23:16
slimjim8094i think i get errors...23:17
slimjim8094i was just about to muck around with it for a bit more23:17
ph8sounds ideal nijaba and ScottK, i'll probably try DRBD, thanks23:19
mathiaznijaba: what do you think about this: http://people.ubuntu.com/~mathiaz/network_auth_integration.png ?23:22
* nijaba looking23:22
mathiaznijaba: I've tried to summarize the option for network authentication scenarii23:22
nijabamathiaz: I think you summarized quite well the options we cant to cover for interepid :)23:24
mathiaznijaba: cant ?23:24
nijabaerrr. s/cant/can23:24
nijabaerrr... x 2 s/cant/want23:25
nijabaduh23:25
mathiaznijaba: I was asking about the nss role in order to qualify the components in blue23:26
mathiaznijaba: the components in red deal with authentication, the blue deal with ?23:26
nijabamathiaz: so that's what I call the directory lookup phase23:26
mathiaznijaba: right - often this is part of the authorization phase23:26
nijabaauthentication has 2 phase: directory lookup and credential checking23:27
nijabaauthorization has 2 phases: directory lookup and right computation23:27
nijabanote that in order to authenticate someone using only its cn, for example, you will first need to search for it's dn, this is what the directory lookup stands for23:29
nijabain the authorization phase, you will do a directory lookup to see what objects are linked to your dn and acculate right inherited by it23:30
nijabayou then check it against your rules to see if anything matches (or not)23:30
nijabamathiaz: does this help?23:31
mathiaznijaba: yes - thnaks23:36
ph8If i read 'failover to seperate location over fiber-optic ring' - does the fibre-optic mean anything? Should i just approach the application like it's got a normal internet connection or is there some super-secret ring language i'm likely to need to talk? (i.e. making a pair of failover machines, i'd probably have them act as primary+secondary NSes, so if one fails - the other is active)23:40
nijabaph8: where is this sentence coming from?23:42
nijabaph8: I would say that it just means that if you want to have two systems in failover that are not within Ethernet reach, a fiber optic link is highly recommended to avoid latency problems23:43
ph8It's what I was told to design, a 'resilient FTP cluster of two machines' with Fail-over to separate location over fibre-optic ring23:43
ph8ah i see, so the machine would have two connected ethernet ports essentially23:44
ph8and i'd somehow have to confirm DRBD to use the fibre23:44
nijabaph8: so the 2 machines are not in the same location?  or the separate location has another set of machines?23:44
infinityNot ethernet, FDDI.23:44
ph8since that's uber-fast23:44
ph8one machine in each DC yep23:44
infinity(There are differences...)23:44
ph8oo neve rheard of one of those23:45
ph8thanks23:45
infinityBut, I suppose, for a point-to-point connection, the differences are meaningless to most people. :)23:45
infinityA "ring" of two machines isn't much of a ring.23:45
ph8indeed :p23:45
hadsheh23:45
ph8ok so that's not actually too complicated23:46
nijabainfinity: one could argue that the minimal expression of a ring23:46
ph8that's good23:46
ph8(or is it? :p)23:46
infinitynijaba: Well, it's still technically a token ring network.  The "token" bit being the key here.  But I might argue the "ring" aspect a bit. :)23:46
nijabainfinity: you win ;)23:47
infinity(And the practical differences between token ring and carrier detect/select are miniman when it's a point-to-point connection)23:47
infinityminimal, too.23:47
nijabaph8: people that have experience building such architecture are generally well paid, if that helps define "complicated"23:49
infinityNeat, I'm well-paid.23:49
nijabaI would hope you are, infinity23:50
RoAkSoAxlol.. i wanna be well paid when i start working :P23:50
infinitynijaba: If you could be so kind as to convey this information to my bank account, I'd appreciate it.23:50
* nijaba googling for your bank acount number :P23:51
* nijaba talk to him -> said to see with your employer ;)23:53
nijabaok, enough fun for tonight, time to go to bed23:54
infinityG'night. :)23:55
* RoAkSoAx has to wait like 6 more hours to go to bed :P23:55
ph8I think i'm getting the architecture, just got to make the machines :-)23:56
ph8Should be a good summer project23:56
RoAkSoAxph8: what's your summer project?23:56
ph8see above23:57
ph8nn23:57
LeChacalhello, with the new kernel update that came out i for the desktop was going to upgrade my server but i only have remote access right now and i was wondering if it would be smart to update remotely and if i can how should i do it? because will take about 20+ min to download the update and by that time my ssh session will have timed out does that matter?23:58
RoAkSoAxa ftp server in master/slave with DRBD data replication?23:58
hadsLeChacal: Use screen23:59
LeChacalhads: that is what i was going to do but wondered if that was a safe thing to do23:59
hadsand your server must have a really slow connection.23:59
LeChacalhads: thank you i will do that23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!