[00:44] hey guys, quick question [00:45] ehlo from slimjim8094 [00:45] bah, say my name when (if) you come back [00:47] why not just ask the question? [00:47] ok, fair enough [00:47] then when they come back, they'll answer the question too [00:47] ok - well i'm running bind9 and dhcp3-server [00:47] on the same bodx [00:47] box* [00:47] i'm using this as a router/server/samba/nfs/squid/firewall/awesomebox [00:48] and it's been working great [00:48] but i haven't been able to get ddns-updates to work, from dhcp-server to bind9 [00:48] my main question is - do I *need* security (key) if I don't want one? [00:48] because i'd prefer to not use one... I trust my network [00:49] Deeps knows about dhcp+bind9, IIRC [00:50] ok well holla if/when you come back [00:50] my irc beeps at me if you say my name :) [00:51] * kees ponders try to S-O-S slimjim8094's irc client. ;) [00:51] *trying [00:51] DoS? or SOS? [00:52] like, playing out "deet deet deet deet deet deet deet deet deet" [00:52] rofl [00:52] kees [00:52] kees [00:52] kees [00:52] :) [00:52] kees [00:52] kees [00:52] kees [00:52] mine just highlights ;) [00:52] kees [00:52] kees [00:52] kees [00:52] how about that? [00:52] oh [00:52] mine does both XD [01:41] hi any one here [01:44] how you set up dns so i can use it with my routor and isp on my own on ubuntu 8 [01:44] ? [02:01] ray_ [02:01] oh [02:01] well he's gone... === RoAk is now known as RoAkSoAx [04:17] ok, this isn't good... i'm getting something like "no journal on filesystem md0"... there should be, it's a 1.2tb with only about 100gb free [04:24] dendrobates-: Could you modify https://blueprints.launchpad.net/ubuntu/+spec/easy-ldap-server to set me as the drafter ? [04:27] * ajmitch wouldn't mind being removed as assignee from these as well [04:28] while I'm starting to get back into ubutnu development where possible, I don't think I'll be taking care of these specs [04:31] ajmitch: could you change that information ? [04:34] http://pastebin.com/m715d8c43 [04:38] mathiaz: no, I tried the other day [04:39] * ajmitch will try again with this spec [04:39] nope, forbidden [04:40] dendrobates is a member of ubuntu-drivers, I'm not [04:42] * ajmitch wishes he could help with that raid problem [04:43] http://pastebin.com/m715d8c43 :( [04:44] yeah, I saw [04:44] oops, sorry for repost... carrying on multiple convos in diff channels [04:44] does dumpe2fs tell you any thing useful? [04:45] can i run that directly on /dev/md0 cause it won't let me mount it at all [04:45] afik you can, and it shouldn't modify the filesystem on there that I'm aware of [04:45] ajmitch: ok - thanks - I'll ping dendrobates- about this spec. [04:50] * ajmitch is glad to see things moving ahead with the server team though [04:50] k, running dumpe2fs... it's a 1.2tb raid5 so may take a while... does it output to 1 or 2? i figured i'd dump the output to txt [04:51] so it's getting somewhere? [04:52] seems to be... red light is blinking on the 1st drive [04:52] * ajmitch probably isn't the best person to help with filesystem intricacies [04:53] since for me, things generally just work & I don't dig deeper :) [04:54] yeah, i usually don't have problems, but there was a power outage today... i shutdown the server, but i don't know if it finished shutting down before or after the ups went down [05:00] the output file is about 2.7mb & i couldn't paste the entire thing to pastebin so i just pasted a part of it - http://pastebin.com/m4f7e26fb [05:01] certainly still looks like a valid FS with metadata [06:02] somebody in tulsa lug was able to help me out... after a bunch more debugging ended up having to run `tune2fs -j /dev/md0` [06:03] a bit painful [06:04] and surprising that the journal could just disappear [06:04] yeah, i think what happened was ups died in the middle of shutdown earlier... had a tree fall on a power line 2 blocks south of here [06:59] hi all [06:59] I need some help with installing ubuntu 8.04 server [06:59] anyone there that can help [07:03] ca_dsl: That's hard to say. You haven't asked a question yet. [07:04] o right [07:04] trying to install ubuntu 8 on a hpt374 raid 5 array [07:05] but the partition manager won't see the array [07:05] it only sees the individual disks [07:05] I am sure I am missing something simple here [07:06] but I cant seem to find any info on the web on how to do this [07:06] any ideas? [07:07] Your raid-crontroller is probably not a "real" raid controller. It's quite comon. [07:07] common,even. [07:07] what do you mean by that? [07:08] It just gives you a way to configure your raid arrays in a bios-ish configuration thing, and then the operating system is supposed to do software raid based on that information. [07:08] I don't think that is the case with the Hiphpoint Rocket Raif [07:09] err raid cards [07:09] but I honestly don't know [07:09] how can one tell? [07:11] Real RAID card are *really* expensive. [07:11] nm I just googled it and it turns out it is indeed a "Bios assisted" [07:11] card [07:11] that explains why I see the individual drives [07:12] so how do I make them work as a RAID 5 on a cleam install? [07:14] Actually... I'm not sure. [07:18] ahh [07:19] apparently ubuntu is loading the standard hpt366 driver (standard ide) [07:20] so the question becomes how do I manually tell the installer to load a different driver for the hdd controller? [07:23] You don't want to use a different driver. [07:24] apparently the propiertary driver will see the array [07:24] I found a howto on the install once the system is up and running [07:25] ca_dsl: yes, Highpoint Rocket raid cards are usually hardware raid cards, so I think your problem is more that it's not properly recognized [07:25] ca_dsl: which one is your model exactly ? [07:25] Rocket Raid 454 [07:25] w/ the HPT374 chip [07:28] Koon: any ideas then? [07:28] I tried hitting F6 but nothing happened *grins* [07:28] ca_dsl: I'm looking... it should have loaded the right module [07:29] ok === fredrik is now known as frippz [07:29] ca_dsl: http://stefan.freyr.org/?page_id=6 [07:29] you apparently aren't the first one [07:30] thats a change [07:30] normally my problems get a response of "thats a first" or "no one else seems to have that problem" [07:30] o thats the howto I foind [07:30] err found [07:31] it assumes a system is allready up and running [07:31] * rgl waves [07:31] and is for x64 [07:31] I am running the x86 version [07:31] and I am trying to install onto the array (no more space for extra drives) [07:32] ca_dsl: yes, I'm not so sure how you can blacklist a module and load another one soon enough in the install [07:33] the installer has a shell [07:33] but darned if I know what to do with it [07:34] could I use the shell and compile the driver for the install? [07:34] no, you'd need a more complete system to compile things [07:36] hmm [07:36] there is no liveCD version of server is there? [07:38] ca_dsl: no [07:39] hmm [07:39] yet another wall [07:39] i seem to have a nack with stumping the experts [07:40] I suppose you could compile the hpt374 module on another system, copy it somehow when you drop to the shell, rmmod hpt366 and insmod hpt374... but I couldn't tell you the exact steps [07:41] the easiest would be to have one disk outside the array [07:41] install on it [07:41] yeah rmmod is not a shell command on the install [07:41] I am thinking you are right about using another disk [07:42] it would keep the system seperated from the data [07:42] and the howto would then work... [07:43] * ca_dsl stares at the case and wonders how to install another drive [07:43] * ca_dsl grabs hit hot glue and another drive [07:44] ca_dsl: good luck ! [07:44] thnx [07:44] is 7 drives in a mid tower too many :D [07:46] frankenserver, in fact I think that will be its name [07:48] wonder where I can hire an Igor [08:03] :*) [08:04] koon and soren thanks for the help [08:04] np :) [08:10] * ca_dsl bows spins and is gone [08:30] Does anyone in here comprehend how SMTP works? I need insight to this subject. For example, lets say that I have an SMTP server running, it should recieve emails from something like, ANYTHING@my.ip.ad.dre.ss, right? Or is there extra steps I have to take to make it work? My situation is, that I'm using a ruby server that I'm programming myself, to store text emails in mysql. I don't want an over complicated system that enables [08:30] transfer of files and such. I just need to be able to receive emails. [08:38] Furom: It's not really #ubuntu-server related. Probably the best way would be to setup a standard MTA and have your mail delivered to your script via pipe. [08:42] hads: Ah, I figured it would be, since technically, it's an SMTP server setup that I'm trying to accomplish. Well, guess I better get back to googling. [09:37] moin [09:44] hi all [09:44] somebody use egroupware software ? [09:44] i've a problem with it :( [09:45] !ask [09:45] Please don't ask to ask a question, ask the question (all on ONE line, so others can read and follow it easily). If anyone knows the answer they will most likely answer. :-) === emgent_ is now known as emgent [09:47] i use egroupware with ldap authentification, and "felamimail" don't use the correct user for connect to the imap server, egroupware use UID for authentification on egrouware and felamimail use this login but my configuration on ldap for mail adress is not the same as UID [10:21] Whu... PHP seriously doesn't have an execve function? [10:22] this is for me ? [10:22] No. [10:22] For me. [10:22] oki ^^ === mdz_ is now known as mdz === ogra_ is now known as ogra [12:21] And presto! The first stab at a web-enabled version of ubuntu-vm-builder is now functional. [12:23] soren: sounds cool. so where's the Sourceforge page? :D [12:23] sourceforge ... pffft .... thats so 90s ... [12:24] * soren shudders at the mere thought of dealing with sourceforge again. [12:24] hehe [12:24] fine.... so what's the hot stuff these days? google code? :P [12:25] I liked their build farm, but the web interface? NEver again.. [12:25] launchpad, dude! [12:25] of course... silly me :) [12:25] That's where it's at. All the cool kids use it. [12:25] funny that :P [12:26] as soon as I can get my boss to hock up the €200 for a new rack server, I'll get into virtualization as well :) [12:26] and a web interface would be nice [12:31] heh, meant €2000 [12:31] I'd like to see the rack server you get for €200 === slimjim8094__ is now known as slimjim8094 [12:42] well the storm woke me up, I might as well go to work. [13:23] Kamping_Kaiser: ping [13:24] pschulz01, pong [13:24] Kamping_Kaiser: We have some deadlines :-( [13:24] Kamping_Kaiser: re. bugzilla3 [13:24] Kamping_Kaiser: :-) [13:25] monkeys! [13:25] pschulz01, :/ thats bad what sort of deadline? [13:26] Kamping_Kaiser: Friday week.. get everyone using new bugzilla (cutover). [13:27] pschulz01, i might come in extra day/s next week then. [13:27] morning all [13:28] Kamping_Kaiser: I might just install it.. as we have it now. [13:29] Kamping_Kaiser: The we will have a week to sort out the data migration. [13:29] Kamping_Kaiser: SSL should just work (touch wood). [13:30] pschulz01, i expect its close. i'll find out how its going thursday i guess ;) [13:30] Kamping_Kaiser: Ok. [13:34] afk. sleep :) [13:59] jdstrand: I was playing with the smbd apparmor profile in the apparmor-profiles package, and I think there a couple more directories that should be added by default: [13:59] /var/spool/samba/** rw, [13:59] /var/run/utmp rwk, [13:59] just an fyi :) [13:59] can someone help me set up my wireless NIC wlan0 as access point, my eth0 is currently set up as DHCP server hardy64 [14:00] sommer: thanks! can you file a bug against apparmor-profiles? [14:00] jdstrand: sure will do === dantaliz1ng is now known as dantalizing [15:04] heya === bamed|lunch is now known as bamed [16:23] Morning. Have a problem with a user logging into ldap network server. User can log in with a windows client but cannot log in with a linux client. other users are not affected. where do I begin my search to remedy this issue [16:32] Koon: well - it's hard to find a time that would fit almost everyone. [16:33] Koon: http://timeanddate.com/worldclock/meetingtime.html?month=6&day=4&year=2008&p1=196&p2=69&p3=43&p4=224 [16:34] mathiaz: yes, looks like the less worse time on that table [16:39] mathiaz: do you want to do the mysql merge? [16:54] zul: Not in the next few hours - go ahead [17:40] any of you guys using powerdns? === jjesse_ is now known as jjesse [19:22] can someone help me set up my wireless NIC wlan0 as access point, my eth0 is currently set up as DHCP server hardy64 [19:26] Asad2005: what access point do zou have_ [19:26] ? [19:26] sorry, Deutsch keyboard : [19:26] :) === jjesse_ is now known as jjesse__ === jjesse__ is now known as jjesse [20:05] sup [20:05] listen - i have a question about ddns-updates [20:06] can anyone give me a hand? [20:06] jdstrand: ok - I'll join #ubuntu-meeting now - ping me when you're about to be up [20:10] hi [20:13] sommer: is auth-client-config documented in the Server Guide ? [20:16] mathiaz: I don't think so [20:18] mathiaz: nopers, currently the serverguide covers setting up services, not necessarily configuring clients to use them [20:18] mathiaz: that can be added though :-) [20:18] sommer: right - it may be worth adding about a section about this [20:19] sommer: or a section about how-to integrate your ubuntu server in an existing infrastructure [20:19] mathiaz: sure, I'll add it to the list [20:19] sommer: that would cover likewise-open, nss and pam [20:20] sommer: I've just updated a spec about this topic - https://wiki.ubuntu.com/NameServicesIntegration === ScottK-laptop is now known as ScottK2 [20:25] mathiaz: just added a note to the serverguide spec as well: https://wiki.ubuntu.com/IntrepidServerGuide [20:26] dendrobates: could you update this blueprint https://blueprints.launchpad.net/ubuntu/+spec/network-authentication ? [20:27] dendrobates: and make me the drafter ? [20:32] Ok lets say that I have multi users on this pc ubuntu 8 and I was wondering is there away to limit there ability to d/l anything with out a password, I mean let them on the net but no d/l of any kind. thats it [20:33] Ok lets say that I have multi users on this pc ubuntu 8 and I was wondering is there away to limit there ability to d/l anything with out a password, I mean let them on the net but no d/l of any kind. thats it [20:33] dont know what happened to the first post [20:34] What do you mean by "on the net but no d/l of any kind"? [20:36] they would be allowed to surf but not download anything with out a password or something [20:37] Surfing and downloading is the same thing. [20:37] (in this context) [20:38] sounds like the guy wants a browser in kiosk mode [20:38] yeah - like it is hard to tell the difference between listening to music and recording it.... but tell that to the DRM fanatics [20:38] so what you mean is no unless i take away the net all together [20:39] ledmushroom: what do you want to prevent - changes to the system? [20:39] right [20:39] i guess [20:39] like a kiosk mode? [20:39] 20:38:31 < Deeps> sounds like the guy wants a browser in kiosk mode [20:39] i guess if i knew what that was [20:39] Deeps: right - I was just doing it in conversational style :) [20:40] where you can surf the net, but not do anything else [20:40] like at a cybercafe, or a internet point at an airport [20:40] kiosk mode == where the computer is supposed to remain the same for the next user - can't install programs or change preferences? [20:40] i guess but havent been to any of those i suppose so [20:40] hehe [20:40] or download files [20:40] yes [20:41] well, "download" is too overloaded in meaning to make much sense here [20:41] write files to disk and/or run random applications [20:41] question: can i install ubuntu server in GUI mode? [20:42] is it a server or a desktop with a gui? [20:42] yes deeps [20:42] (my question was for ledmushroom...) [20:42] !servergui | CyberKing [20:42] CyberKing: Ubuntu server does not install a desktop environment or X11 by default in order to enhance security, efficiency and performance. !eBox provides a GUI system management option via a web interface. See https://help.ubuntu.com/community/ServerGUI for more background and options. [20:43] desktop [20:43] sorry was lost for a min [20:43] ledmushroom: then you'll probably get better help in #ubuntu or another channel - the folks here don't do much with guis [20:43] although if you insist on a gui, installing ubuntu desktop and tasksel -i ubuntu-server would be the same as installing ubuntu server and tasksel -i ubuntu-desktop [20:44] they told me to ask in here [20:44] lol [20:44] Deeps: well, you'd have a slightly different kernel, but yeah [20:44] point [20:44] thanks, nealmcb [20:44] :) [20:45] ledmushroom: this is dated, but may give some ideas: http://ubuntuforums.org/showthread.php?t=338980&highlight=kiosk+cafe [20:45] ty [20:46] nealmcb, so when i install it, it'll be all text mode too, right? [20:49] CyberKing: installing ubuntu-server provides a command-line interface. ebox provides a web gui interface [20:49] ..as noted in that page... [20:50] got it now... thanks again nealmcb === slimjim8094__ is now known as slimjim8094 [20:55] ehlo from slimjim8094 [20:56] anyone know anything about BIND + dhcp-server ddns? [20:56] until when are there updates for gutsy server? [20:56] gutsy is supported for 18 months - until next spring [20:57] nealmcb: ok cool thx :) [20:57] I have my production server running on gutsy ( i know bad idea ) [20:57] I dont know if it's safe to upgrade to hardy on the fly? [20:57] not necessarily a bad idea - there are lots of scenarios out there... [20:57] only running apache, php, mysql, postfix, dovecot [20:59] well, "safe" as in "no one will die", but most folks test the upgrade on a non-production box first.... [20:59] * nealmcb considers heart attacks and revises his answer.... [21:00] hey, I keep getting a "file to large" bounce back on email. I checked /etc/postfix/main.cf & master.cf and couldn't find a size limit. Any ideas? Ubuntu Server 8.04 LTS [21:00] nealmcb: hehe :), well postfix en dovecot depend on mysql [21:00] nealmcb: im not worrying about apache, but about dovecot/postfix [21:01] ph4mp573r: you're running the server that is sending the bounce message? [21:01] yes [21:02] * soren hugs jdstrand [21:02] jdstrand: Congratulations, dude! [21:02] any idea where the size limit is set? [21:03] what does this say: postconf -d [21:05] cheers for jdstrand - new core-dev: https://lists.ubuntu.com/archives/motu-council/2008-May/001101.html [21:07] thanks nealmcb! [21:07] bounce_size_limit = 50000 [21:07] bounce_size_limit = 50000 [21:07] it says bounce_size_limit = 50000 [21:07] where is that set? [21:07] sergevn: just try the upgrade in a virtual machine [21:07] nealmcb: Not yet. He still has to go in front of the tech board. [21:08] ScottK - this was from #ubuntu-meeting - but maybe I missed something - cc meeting now? [21:08] make sure that you have the same software running in the VM before you start upgrading in it [21:08] Ah [21:08] * ScottK was reading the mail, not the IRC channel. [21:08] or just use something like partimage to copy your current machine to a virtual disk and do the upgrade that way [21:08] (in the vm) [21:09] ScottK - yeah - I meant to also reference the meeting channel - but I haven't read all of what is going on... [21:09] ScottK - can you answer ph4mp573r's question on setting size limits? ^^ [21:09] Yes. [21:10] Bounce size limit isn't it. Give me a sec. [21:10] k thank you [21:11] I have a question about the recent kernel patch... [21:11] ph4mp573r: [21:11] JanC: yes ill try this next week, thanks [21:11] ph4mp573r: What does postconf | grep message_size_limit produce? [21:11] why would it not download and install on server. It says packages held back... ? [21:11] Does this also count for security updates? the support limit of next spring? [21:12] sergevn: Yes. [21:12] 10240000 [21:12] Scottk: 10240000 [21:12] ph4mp573r: That's the default. [21:12] ~ 10MB [21:12] ph4mp573r: How big a message do you want to send? [21:12] yeah, the emails that he's complaining on bouncing are each 10.1MB lol. [21:12] why would the server report that it kept back server security patches? [21:13] Also don't forget to allow some extra for 8 bit / 7 bit conversion. [21:13] sparky01: It's the same as for any new kernel update. [21:13] ? [21:13] so where is the size limit set Scott? [21:13] sparky01: perhaps you need to dist-upgrade? [21:13] ph4mp573r: Add something like message_size_limit = 15360000 in main.cf and then reload postfix. [21:14] ScottK, are they kept back until they are more fully tested or something? please help me understand [21:14] sparky01: Every kernel upgrade has a new package with is so you have to dist-upgrade to get it. The fact that it's from security is no different. [21:14] ScottK, thanks so much. i got it [21:14] If you dist-upgrade and it's still held back, it means not all the packages are published yet and you should wait. [21:15] ScottK: so I just have to add it, even if it's not there? [21:15] Yes. The default, message_size_limit = 10240000, is implicitly there. [21:16] ogra: is there reason to use nss_ldap in an LTSP infrastructure ? [21:23] thanks ScottK that worked [21:30] anyone got experience setting Bind9 : I got everything set for my local network. I can dig, ntlookup and ping. but where do I set the address seen from the outside world. my static ip given by my ISP. Any doc ? [21:31] karlito: check out the DNS section of the server guide: https://help.ubuntu.com/8.04/serverguide/C/dns-configuration.html#dns-caching-configuration === danshearer1 is now known as danshearer [21:40] the guide use private address that are not routable over the internet, but for my need I should substitute those address for one given by my ISP ? thank for the link. [21:41] karlito: correct you'll want the fowarder addresses to be the ones from your ISP [21:42] why the guide do not include real life exemple ? got any idea ? [21:42] because everyone can use those private ips, if it uses public ips it'll be specific to one person's configuration only [21:42] yep yep [21:44] got it. thank [21:44] np [22:13] has anyone successfully install VMware tools on 8.04 guest? [22:15] Anyone familiar with OpenLDAP and StartTLS? I have an issue starting TLS * TLS: warning: cacertdir not implemented for gnutls * [22:34] Thesse days, should I be doing apt-get upgrade or aptitude upgrade? [22:38] I was just reading the man about that, apparently apt-get is the quick method and not dependancy friendly [22:38] quote from man: under no circumstances are currently installed packages removed, or packages not already installed retrieved and installed [22:38] zul: a bunch of people are asking for php5-5.2.6 to be backported to Hardy, citing the unusually high number of security fixes (kees, ding ding) in the release [22:39] zul: see Bug #227464 [22:39] Launchpad bug 227464 in php5 "PHP 5.2.6 fixes important security bugs" [Undecided,Fix released] https://launchpad.net/bugs/227464 [22:39] Overand: it seems apt-get dist-upgrade is best suited to handle current packages and any dependencies [22:40] apt-get or aptitude will be fine. [22:41] maw_: dist-upgrade is only needed if a new package is pulled in (as is normally the case for kernel updates). [22:41] kirkland: I'd like to get those fixed backported to all the stable releases... just haven't had time yet. [22:42] kees: backport of each patch is preferred over a merge of 5.2.6 ? [22:42] kees: one user is reporting that his schools network is blocking servers running php < 5.2.6 [22:43] we don't do version bumps for PHP -- we backport fixes. [22:43] it's not a "merge" if it's to hardy. :) [22:44] gotcha. [22:44] kees: well, at first glance, it looks like a *sizable* debdiff....... [22:44] (by my nascent standards) [22:44] wow. go 7zip - 9600megs of log files down to 145megs, heh [22:45] kirkland: well, you already found all the security bug fixes. that'll be small. It just needs some time and attention. [22:46] kees: ah, right, that detective work you sent me on a few weeks ago.... i hadn't made the connection until now (light bulb) [22:46] :) [22:46] ScottK: I was making my comment based on 'man apt-get' which defines upgrade as not being dependency friendly and dist-upgrade resolving dependency issues [23:04] kees: pam modules are related to authentication - how would call the general domain that nss deals with ? authorization ? [23:07] mathiaz: hmm [23:08] mathiaz: they're really just directory lookup systems. [23:08] looking up lists of hosts, people, groups, etc. [23:09] kees: right - I'm trying to find a good term for that role, but haven't got one yet [23:10] is there anything that should be backed up in /var/ besides /var/log? [23:10] maw_: The practical distinction is will install a new package if needed [23:10] this would be for a system restore situation [23:10] mindframe-: everything in /var is important. :P [23:10] mindframe-: quite a bit, yes === henri is now known as ph8 [23:11] mathiaz: "name service", though that's confusing with DNS [23:11] directory service? [23:11] that's confusing for LDAP [23:12] Hi all, i'm trying to find a way of replicating filesystems across machines, for redundancy/resilience - i want to have two machines in failover and the files on each should match exactly if possible - is there a better way than an rsync crontab'ed every minute? Seems a bit messy [23:12] mathiaz: what are you trying to name? [23:12] nijaba: the role that nss fills [23:12] nijaba: pam -> authentication; nss -> ? [23:12] ph8: If you want bi-directional replication you might want to look at unison [23:13] mathiaz: directory lookup service is what comes to my mind [23:14] ph8: what about a shared block device such as DRBD? [23:15] in addition to drbd, there's also clustered file systems, but I've never worked with them. [23:15] hey guys - trying to do a ddns-update between my dhcp-server and bind (same box) [23:15] doing a md raid1 on top of physical + drbd was what I wanted to try, but it required that the machines never mounted it at the same time. [23:16] it's not working - anybody know what's up? [23:16] slimjim8094: I'm not much help, I haven't used ddns :( [23:17] i think i get errors... [23:17] i was just about to muck around with it for a bit more [23:19] sounds ideal nijaba and ScottK, i'll probably try DRBD, thanks [23:22] nijaba: what do you think about this: http://people.ubuntu.com/~mathiaz/network_auth_integration.png ? [23:22] * nijaba looking [23:22] nijaba: I've tried to summarize the option for network authentication scenarii [23:24] mathiaz: I think you summarized quite well the options we cant to cover for interepid :) [23:24] nijaba: cant ? [23:24] errr. s/cant/can [23:25] errr... x 2 s/cant/want [23:25] duh [23:26] nijaba: I was asking about the nss role in order to qualify the components in blue [23:26] nijaba: the components in red deal with authentication, the blue deal with ? [23:26] mathiaz: so that's what I call the directory lookup phase [23:26] nijaba: right - often this is part of the authorization phase [23:27] authentication has 2 phase: directory lookup and credential checking [23:27] authorization has 2 phases: directory lookup and right computation [23:29] note that in order to authenticate someone using only its cn, for example, you will first need to search for it's dn, this is what the directory lookup stands for [23:30] in the authorization phase, you will do a directory lookup to see what objects are linked to your dn and acculate right inherited by it [23:30] you then check it against your rules to see if anything matches (or not) [23:31] mathiaz: does this help? [23:36] nijaba: yes - thnaks [23:40] If i read 'failover to seperate location over fiber-optic ring' - does the fibre-optic mean anything? Should i just approach the application like it's got a normal internet connection or is there some super-secret ring language i'm likely to need to talk? (i.e. making a pair of failover machines, i'd probably have them act as primary+secondary NSes, so if one fails - the other is active) [23:42] ph8: where is this sentence coming from? [23:43] ph8: I would say that it just means that if you want to have two systems in failover that are not within Ethernet reach, a fiber optic link is highly recommended to avoid latency problems [23:43] It's what I was told to design, a 'resilient FTP cluster of two machines' with Fail-over to separate location over fibre-optic ring [23:44] ah i see, so the machine would have two connected ethernet ports essentially [23:44] and i'd somehow have to confirm DRBD to use the fibre [23:44] ph8: so the 2 machines are not in the same location? or the separate location has another set of machines? [23:44] Not ethernet, FDDI. [23:44] since that's uber-fast [23:44] one machine in each DC yep [23:44] (There are differences...) [23:45] oo neve rheard of one of those [23:45] thanks [23:45] But, I suppose, for a point-to-point connection, the differences are meaningless to most people. :) [23:45] A "ring" of two machines isn't much of a ring. [23:45] indeed :p [23:45] heh [23:46] ok so that's not actually too complicated [23:46] infinity: one could argue that the minimal expression of a ring [23:46] that's good [23:46] (or is it? :p) [23:46] nijaba: Well, it's still technically a token ring network. The "token" bit being the key here. But I might argue the "ring" aspect a bit. :) [23:47] infinity: you win ;) [23:47] (And the practical differences between token ring and carrier detect/select are miniman when it's a point-to-point connection) [23:47] minimal, too. [23:49] ph8: people that have experience building such architecture are generally well paid, if that helps define "complicated" [23:49] Neat, I'm well-paid. [23:50] I would hope you are, infinity [23:50] lol.. i wanna be well paid when i start working :P [23:50] nijaba: If you could be so kind as to convey this information to my bank account, I'd appreciate it. [23:51] * nijaba googling for your bank acount number :P [23:53] * nijaba talk to him -> said to see with your employer ;) [23:54] ok, enough fun for tonight, time to go to bed [23:55] G'night. :) [23:55] * RoAkSoAx has to wait like 6 more hours to go to bed :P [23:56] I think i'm getting the architecture, just got to make the machines :-) [23:56] Should be a good summer project [23:56] ph8: what's your summer project? [23:57] see above [23:57] nn [23:58] hello, with the new kernel update that came out i for the desktop was going to upgrade my server but i only have remote access right now and i was wondering if it would be smart to update remotely and if i can how should i do it? because will take about 20+ min to download the update and by that time my ssh session will have timed out does that matter? [23:58] a ftp server in master/slave with DRBD data replication? [23:59] LeChacal: Use screen [23:59] hads: that is what i was going to do but wondered if that was a safe thing to do [23:59] and your server must have a really slow connection. [23:59] hads: thank you i will do that