[00:02] hey guys, I'm running 8.04 on a server, fresh install, I can't sudo or su, it just stalls any ideas? === ing_contrib_lpic is now known as gatewayer [00:04] anyone? [00:05] is anyone here well-versed in the ways of imap maildir structure? [00:05] mac: url of the issue? (sorry, missed your question) [00:06] teamcobra: do you mean me? [00:06] yes [00:06] oh, ok :). I have a clean 8.04 install on a server, sudo nor su will work [00:06] did something change in 8.04? [00:07] woah... [00:07] I remember it working in the previous versions... [00:07] no, sudo should work... only for the first user you create [00:07] the others won't be in the sudoers list [00:07] yep, well I am the only user on the machine [00:07] created at install [00:07] su won't work until you assign a root passwd w/ sudo passwd (not recommended) [00:07] hrmmmm..... [00:08] could it be because of the hostname? [00:08] kind of a pickle, because you need to be root to edit /etc/sudoers ;p [00:08] yeah, pretty much [00:08] possibly, but that really shouldn't be happening [00:08] I can't even cat it or something [00:08] reboot? [00:09] yeh, looks almost like a reinstall :/ [00:09] crap, root as well [00:09] hmmm, ok, something must have gotten screwed then [00:09] cheers anyways :) [00:09] yea, check the install media too [00:10] teamcobra: that's an iso [00:10] a server-only image [00:10] will double-check [00:18] nagios or zabbix? which is the bigger pain in the rear to deal with? [00:34] can someone help me with cryptsetup... i created two keys for this device, one using a passphrase and one using a keyfile. i want to delete the passphrase key slot 0. when i run 'cryptsetup luksDelKey /dev/sda1 0' it asks me to 'Enter any remaining LUKS passphrase:' what passphrase should i enter here? [00:37] mindframe: Is slot 0 your passphrase or the keyfile? [00:37] mindframe: reading closer, looks like you're saying it's your passphrase. [00:37] erichammond, i used luksformat to create it with a passphrase so i assume 0 is the passphrase [00:38] mindframe: Try using this option: cryptsetup luksDelKey --key-file KEYFILE ... [00:38] erichammond, i used the same passphrase when i added the key... so could that cause problem? [00:38] erichammond, where is the keyfile located for the passphrase? [00:39] i assume there isnt one [00:39] *added the keyfile [00:40] i wish luksformat would let me specify a keyfile instead of passphrase [00:41] mindframe: I hate to hear "assume" when dealing with encrypted data :) Try using luksDump to see if it gives you info. [00:41] it shows two enabled keys [00:41] 0 and 1 [00:41] slot 1 shows Key material offset: 264 [00:41] so i think thats the keyfile [00:42] ok im going to start over [00:42] mindframe: According to the cryptsetup manpage it does support a key file in luksFormat, just using a different calling method [00:42] yeah i just saw that [00:42] heh [00:43] thanks [00:43] mindframe: When you want to remove a slot, you need to authenticate with a *different* slot so that it knows you will still have access to the encrypted data. [00:44] thats what i thought... so i thought it wanted the passphrase i used when creating that keyfile [00:44] but it said there were no remaining keys that would use that passphrase [00:44] mindframe: cryptsetup luksDelKey --key-file YOURKEYFILEFROMSLOT1 /dev/sda1 0 [00:44] but i want to delete 0 and keep 1 [00:45] hrmm next problem, i dont see a way to specify FS type with cryptsetup luksFormat [00:46] mindframe: RIght, You're deleting 0 and telling it you'll still have access with keyfile from 1. Worth trying if you're going to throw it away anyway. [00:46] ah okay [00:46] You can use a different command: luksformat -t FSTYPE /dev/... [00:47] how do i specify keyfile with that one? [00:47] --key-file still? [00:47] mindframe: dunno [00:52] anybody know which package jarsigner is part of? [00:55] i'm trying to build an i386 package on a amd64 system [00:55] i use dpkg-buildpackage -ai386 but it still builds a 64 bit package [00:55] any tricks i'm missing here? [00:57] a13x: In Ubuntu 8.04 Hardy, jarsigner appears to be part of openjdk-6-jdk [00:57] a13x: Here's how I found it: sudo apt-get install -y apt-file; sudo apt-file update; apt-file search jarsigner [00:59] a13x: jarsigner is also in sun-java5-jdk and sun-java6-jdk [01:01] thanks a lot, forgot to restart shell after installation [02:10] Anyone know which package vim PHP syntax highlighting is contained in? [02:15] do you have syntax on ?? [02:22] leonel: That was indeed the fix :) [02:22] leonel: Thanks [02:22] chmac: set that in /etc/vim/vimrc [02:23] leonel: I added it to ~/.vimrc which also works [02:23] leonel: It seems like a sensible default, but whatever, it's on now :) === jjesse_ is now known as jjesse [02:49] cxo, (if you are still there) i think i set up the raid that i was talking [02:49] *about [02:50] however, when i disconnect one of the drives it freezes kernel until i reconnect and there is some file system corruption [03:00] is fakeraid hot-swappable? [03:13] I have a strange problem. [03:14] 2 ethernet interfaces, eth0 and eth2. Both DHCP. One internet facing, one facing a private chunk of LAN (Not internet facing). Bringing up both eth0 and eth2 results in 2 "default" linus in the 'route' command, and connectivity is...weird at best. Anyone got clues as to how to fix this? [03:14] My current fix is "route del default" and hope it whacks the right one [03:19] is there a dhcp server on the LAN? [03:20] There's DHCP on both sides [03:20] I suspect what is happening is both dhcp servers give the thing a default gateway and it gets confused... [03:21] set static ip on lan side [03:22] you will also have to set the lan dhcp server to give out that static ip as the gateway [03:23] and you will also have to set ipv6_forward to 1 [03:23] Any way to make that persist across reboots? (The ipv6 forward stuff) [03:23] and i if am not wrong you will have to set up nat rules in ip tables [03:23] yuck :< [03:23] only 3 rules [03:24] very simple [03:24] although, one ftp mode will not work [03:24] I've not got an ftpd running [03:24] commercial routers mangle with ftp traffic [03:24] i am not sure if those rules will take care of ftp [03:25] hmm, I wonder if it'd be easier to give the LAN a net connection. [03:25] its not that bad, i've done it [03:25] Then I could have a default gateway on both interfaces, but it might get even more confused! [03:25] plus, if you install squid transparent proxy you can do all kinds of fun things [03:26] Upsidedownternet? ;) [03:26] maybe [03:28] well, cheers - I will try fiddling with a static IP :) [04:13] hi [04:13] im in some serious need of help [04:13] my IRC server wont allow clients to connect [04:13] im using IRCd-Hybrid [04:13] heres my configureation file [04:14] http://pastebin.com/dbe551e5 [04:14] im desperate for help === freeflyi1g is now known as freeflying [08:47] moin [10:01] hello all, any idea to make a copy of my ubuntu server Hardy, as a backup, I mean a full copy of the file system and it's packages and configs [10:01] dd [10:01] dd into an image [10:01] hmm ? [10:02] dd if=/dev/yourpartition of=/mnt/other_disk/backup.iso [10:02] is it restore-able easily ? [10:02] dd if=/mnt/other_disk/backup.iso of=/dev/yourpartition [10:02] :D [10:03] haha [10:03] this probably isn't what you are looking for [10:03] exot: What Raid are you using? [10:03] no raid [10:03] Never mind then... [10:04] okay great .. but is it possible to copy the partition while the server is up ? [10:06] why noy? you are reading it... i've never tried, tough... [10:06] It will slow things horribly. [10:07] exot: Are you using LVM? [10:07] no I don't use LVM [10:07] you should :D [10:08] yeah .. it's late now :) [10:08] fwiw, i never do bit-for-bit copies of data [10:08] i always do logic backup; list of installed packages, dumps of databases and ldifs and configuration [10:08] hmm.. I started to be worry [10:08] that would make things easy. Just make a snapshot. raid 1 also makes things eay. Just replace the hdd every now and again. [10:09] argghhhh dbmail is crap [10:09] is it possible to use the zip utility to create a zip file where the paths inside the zip file are different than what they were in the file system? [10:10] For example zip a deep list of files to a flat structure in the zip file? [10:12] CrummyGummy, ivoks when restoring the image, is it possible to restore while the another machine is up ? [10:13] I mean the destination machine [10:14] you would restore it from live cd [10:14] cause image would contain partition table, and everything [10:14] yeah .. I see [10:14] hmm .. another question please [10:14] so, you have to restore on to exactly the same hard disk [10:14] is it possible to use dd for incremental backup ? [10:14] no [10:14] dd isn't a backup tool [10:15] yes I know [10:15] it was a smart-ass suggestion :D [10:15] just a stupid question ;) [10:15] lol [10:16] so .. any suggestions ? [10:21] you want bare metal restore? [10:21] I'm sorry, I don't understand ,, what bare metal ? [10:22] run backuppc. [10:22] bare metal restore means - my server died and i have blank hard disks, i'll just plug the power cord, put this CD in it and wait untill everything restore [10:22] on a seperate server. It [10:22] if you want that, check out mondo [10:23] yeah yeah [10:23] thaaaaaanks! [10:23] backuppc is normal backup [10:23] exot: i don't think mondo support incremental backup [10:24] ops! [10:24] there's always bacula [10:24] ahm .. googling [10:24] full enterprise solution, has incremental backup, supports bare metal restora [10:24] restore [10:24] but... it's very hard to setup :) [10:25] damit .. nothing in free! [10:25] bacula is free [10:25] free in efforts [10:25] eh... no pain no gain [10:25] hehe [10:25] you can't have flexibile solution without interaction [10:25] okay [10:26] then I have dd of full image backup [10:26] and then I will run bacula [10:26] I don't have time! [10:26] pay someone to do it [10:27] yeah ... thanks for the advice [11:16] hi there, i write from Italy. I've create on my ubuntu a little ftp where anonymous can download files. I try to test it but my friends say that it doesn't work.. is there someone that can help me to test it? [11:17] i use vsftpd [11:19] noone? [11:21] ?? [11:22] it doesn't work? [11:22] more details? [11:22] yeh, friends say that they can't view any files.. [11:22] this is my ip and ftp is active now.. [11:22] 151.59.83.74 [11:22] i've got a file pdf for test..do you see? [11:22] i can't even connect to it [11:23] where did you put that file on your filesystem? [11:23] how to fix dbmail memory leak: [11:23] i put on the directory create with vsftpd that is located uder the home [11:23] */10 ** * *root/etc/init.d/dbmail-imapd stop ; sleep 1 ; killall -9 dbmail-imapd ;sleep 1 ; /etc/init.d/dbmail-imapd start [11:24] blackdiamond: could you just paste that path, i didn't understand you quite well... [11:25] in the filesystem i got /home/ftp (was created by default installing vsftpd) [11:25] right [11:25] ok [11:25] now i see it... [11:26] what do you see? i0ve got two files [11:26] i don't see files, but it did connect [11:27] yeh, same of my friends, but as you they see nothing..but i don't know where is the problem [11:27] it should work [11:27] in vsftpd.conf i put anonymous , and only download parameter [11:29] do 'sudo touch /home/ftp/test' [11:30] wait [11:30] ok..it give me nothing [11:32] tail -f /var/log/vsftpd.log [11:32] and check if anyone is connecting [11:32] from root? [11:32] as root, yes [11:32] sprry for the stupid question [11:32] ok [11:33] tail: cannot open `/var/log/vsftpd.log' for reading: No such file or directory [11:33] tail: no files remaining [11:34] so, you don't have vsftpd? [11:34] yeh i have it [11:34] then there should be that file [11:36] maybe i have to create that log file configuring some parameters on vsftpd.conf? [11:36] installation of package creates it [11:36] which ubuntu you have? [11:36] i have installed it on intrepid testing [11:37] ... [11:37] intrepid is work in progress [11:37] so think that is this the problem? [11:37] you shouldn't use it if you aren'y very familliar with linux [11:37] aren't even [11:38] personally i test also hardy from the beginning.. [11:38] so i'll try to install it on my hardy.. [11:38] if you think it's a bug in intrepid, do report it [11:38] i still don't have intrepid, so i can't test it [11:38] and.. do you think it is? [11:39] now i'll take a look at the launchpad.. [11:41] i don't know; i can't test it... report it and someone will take a look at it [11:43] yeh.. now i find out that there are no bug report yet for this package.. thanks you very much man!!! really thanks [11:44] but i'm quite sure that it isn't a bug... [11:45] someone would notice such huge bug in debian [11:45] if you want i cant post my vsftpd.conf if you want to see what i get.. [11:45] if not don't worry man [11:46] you can, on pastebin.ubuntu.com [11:46] not here [11:47] that's it http://pastebin.ubuntu.com/20826/ [11:50] i guess you noticed that file is... strange [11:50] it starts with: [11:50] # has an effect if the above global write enable is activated. [11:50] you are missing 35 lines from the begining of the file [11:51] and download_enable doesn't exist on hardy [11:52] download_enable and anon_max_rate=0 i find that values using a guide.. [11:54] mmm.. i think that i have to read more about that... [11:55] now it must be complete, sorry man http://pastebin.ubuntu.com/20829/ [11:57] ok... so loging is enabled [11:57] and there should be a log [12:02] so? [12:09] ls -dl /var/log/vsftp* [12:09] this results with nothing? [12:10] do you mean /var/log/vsftpd? [12:11] it say me "no such file or directory" [12:19] sudo apt-get --reinstall install vsftpd [12:21] ok done [12:21] now check if file is there [12:22] no [12:22] :-( [12:22] report a bug [12:25] so the bug reporting is that "there is no /var/log/vsftpd.log by default? [12:25] after installing it.. [12:25] no [12:25] opsss [12:25] bug is 'vsftpd doesn't work' [12:25] ah oh yes [12:26] but the think that is strange is that there is the log file right? [12:26] i mean that [12:26] there isnt' the log file sorry for my englis language [12:28] i'm not convinced [12:28] the same package is in hardy [12:28] hardy and intrepid have the same packages [12:29] yeh [12:30] how about leaving the default file? [12:30] the default configuration file is configured for anonymous read-only [12:31] i chose that configuration to let me people download linux pakages and so on without uploading any files [12:31] that's the default configuration [12:32] so i should be work [12:32] if you don't touch it, yes [12:32] yeh [12:33] so, for start, purge vsftpd [12:33] apt-get --purge remove vsftpd [12:34] yeh think to do the same [12:34] man, thank you very much for your patience [12:34] really geltle [12:34] gentle [12:35] if you are here next days i'll let you know something if you want, now i'll go out to do some stuffs.. [12:35] thank you very much! [12:37] np [12:37] bye [13:26] morning all [13:27] morning sommer_ [13:32] hi sommer_ [14:04] Koon: ping [14:04] zul: pong [14:05] Koon: need a sponsor to upload your dnsmasq fix? [14:06] zul: for bug 235868 ? [14:06] yep [14:06] er...239404 [14:07] zul: ah, the merge one. Yes, but mathiaz hs already looked at it [14:07] what about 235868 [14:08] for that one I sshould have an SRU ack first, I suppose [14:10] I just upload it and wait for an accepted [14:11] the patch is a no-brainer anyway, just fixing soren's typo :) [14:14] yep Ill upload it for you [14:15] done === jjesse_ is now known as jjesse [14:41] !packaging [14:41] The packaging guide is at http://wiki.ubuntu.com/PackagingGuide - See https://wiki.ubuntu.com/UbuntuDevelopment/NewPackages for information on getting a package integrated into Ubuntu - Other developer resources are at https://wiki.ubuntu.com/UbuntuDevelopment - See also !backports [14:58] hello, I have installed DNS server and configured zones correctly, but the server doesn't resolve internet domains. only mine, any ideas ? [14:59] exot: did you setup a forward to an outside dns server? usually your ISPs [15:00] sommer_, I set the forwarders is my local router address [15:01] exot: and your local router can forward? most can... did you change /etc/resolv.conf? [15:01] yes it can [15:01] if I set the dhcp.conf to give only ther router, it can resolve [15:02] any errors in /var/log/syslog from named? [15:02] no [15:03] you might try setting the forwarder to you ISPs DNS and see if that helps [15:04] hmm .. okay [15:05] I will try [15:07] sommer_, it does .. but very very slow [15:07] is there any idea if we can make to DNS servers, my local and the router ? [15:08] two* [15:11] exot: you mean in your dhcp? if so then yes you can [15:20] sommer_, yes [15:20] I added them both [15:20] but if I set the router's first, the browser forwards to google search, if I set the loca dns, it's very slow [15:22] exot: you might try upping the logging, there are some details here: https://help.ubuntu.com/8.04/serverguide/C/dns.html [15:23] that's strange that its slower than the router [15:23] hmm .. yes, it's very quick if the router is the only dns server [15:50] Koon: re bug 206763 - ubuntu-vm-builder is maintained in a bzr branch [15:51] Koon: so I'd suggest that you branch ubuntu-vm-builder, make your modification and submit your branch for merging with a reference to the bug [15:53] mathiaz: ok, I already maintain my changes in a branch, I just have to figure out how to "submit my branch for merging" [15:54] Koon: well - in the bug view, there is a link on the left that says - link to a branch [15:54] Koon: or something like that [15:54] Koon: you can use that instead of attaching a patch [15:55] Koon: as for proposing your branch, you first need to push your branch to LP [15:56] mathiaz: that was the missing step ;) [15:56] Koon: once there, when you select your branch in your code view, there is a link that says Propose for merging [15:57] Koon: ask nijaba about it - he's been doing that a lot lately :) [16:00] mathiaz: I love gaining karma in LP ;) [16:44] Any thoughts on how to go about mirroring an APT repository without using apt-mirror? [16:45] Compile apt-mirror on RHEL and use apt-mirror [16:45] >_> [16:46] Can a transparent mirror be created? [16:47] like you throw in a rule/script to catch any request for a mirror index file (not sure what its called in ubuntu, its file.xml or something on fedora) and then dnat traffic for that host to your server untill the connection drops or something [16:52] I'm just not sure how well cobbler will work with apt-mirror. [17:12] mathiaz: so just to bug you the idea behind the ppa would be here is an unoffical fix for you bug can you add the server team ppa to try it out [17:14] zul: wouldn't you use your ppa for that ? [17:15] mathiaz: true but if it comes from the server team it would probably be percieved as more official then me [17:15] zul: well - there won't be an official review or something like that [17:15] kernel team does it now I believe as well [17:16] So, any thoughts on using dpkg-reconfigure as a management backend, rather than Augeas? [17:16] mathiaz: of course [17:16] zul: I'm not sure that having ubuntu-server in the URL would help [17:16] zul: for the kernel team, they only have a small set of packages [17:16] I think nealmcb did have a good point in that contributing to something that is cross-distro would be better [17:17] zul: it may fit in their workflow - we could ask them why and how they're using their ppa [17:17] mathiaz: sure Ill ask [17:17] zul: I think not being perceived as official is a feature, not a bug. [17:17] zul: but I'm not convinced of the value of having yet another location to look for packages [17:18] mathiaz: lemme think about it a bit more [17:18] zul: if you come accross a package that would fit in the new scheme, let me know [17:19] I will oh and that samba and suspending your laptop bug is fixed now [17:20] zul: awesome [17:20] Ill file an SRU for it after I grab some lunch [17:20] zul: would it make sense to do a SRU for hardy for samba and upload 3.0.30 ? [17:21] probably not right now since we are gettng closer to 8.04.1 [17:21] Brazen: yeah - I can imagine lots of different aspects to choosing a backend.... a big discussion - would be nice to have someone who has looked a lot at the different options lay out some useful comparisons [17:21] zul: oh I don't think about 8.04.1 [17:21] zul: just to get 3.0.30 in hardy at some point [17:21] mathiaz: I do :) [17:21] mathiaz: yeah that would be fine but at some point :) [17:23] but this would be a good case for the ppa then here is a backport that we want users to test before uploading to -proposed [17:23] nealmcb: it was really just something that popped into my head. I typically prefer to edit config files, but sometimes, like if I don't really care to learn the config file :D, then I just use dpkg-reconfigure, which really is already the gui-frontend we've been talking about [17:24] On a package specifc basis, yes. [17:24] That requires the maintainer to have set up debconf questions. [17:24] A lot of packages provide a sane default and then expect you to edit the config file. [17:25] true, just wondering if maybe it would be easier to expand on that, than start over [17:26] I can see some advantages to the debconf way, too (as there are indeed disadvantages) [17:27] such as each packages maintainer being responsible for making sure config file changes are updated in the debconf questions [17:28] Setting up debconf is non-trivial. [17:28] If you want to require it for all server packages, there will be a lot fewer of them. [17:29] For admin changes that require config changes to multiple packages I can imagine a system that coordinates them and uses dpkg-reconfigure to implement them. but I have a fertile and sometimes inconsistent imagination :) [17:29] Is creating and maintaining a whole nuther application to do this trivial? [17:30] I don't think it's a great epiphany or anything, just thought it might something worth mulling over. [17:31] I do like the idea of pushing some of the config stuff back upstream, and wonder if augeas is doing that in any way [17:31] Besides, I'm a sysadmin, not a developer, and this is probably more a question of which is going to be easier on the developers. [17:32] Personally I like stuff like postconf in postfix. I'd much rather use that than dpkg-reconfigure. [17:32] well, I think we need a lot of savvy sysadmin input - they are the customers. it has to work for both developers and admins [17:32] I think it packages want to be generally externally configurable, then they ought to provide a good mechanism like that. [17:33] Funny you should bring up postfix, that's the only think I can think of that I ever use dpkg-reconfigure for :D [17:34]