/srv/irclogs.ubuntu.com/2008/07/14/#ubuntu-server.txt

NavopWhen asked for primary domaine, must it be a registered domaine, or anything (setting up server)?01:58
RoAkSoAxNavop: nope02:00
RoAkSoAxnot necessarely02:00
kgoetzhi all02:03
kgoetzi'm trying to use ufw on a gateway system, following the guide at https://help.ubuntu.com/8.04/serverguide/C/firewall.html (under ufw Masquerading). i get the following error when trying to run the http://paste.ubuntu.com/27192/ init script. any suggestions?02:12
NavopRoAkSoAx: but is it better being registered02:38
pschulz01G'day.. I have a Windows -> linux gateway routing problem.02:50
pschulz01Windows is reporting 'no route to host' messages from the gateway, but all my Linux boxes are able to ping through the gw just fine.. including a Linux client running in a VMWARE on Windows.02:51
pschulz01I wondering if it a icmp 'do not fragment' windows brain dead type of thing.02:52
kgoetzseems my iptables foo is weak :/ i cant even successfully copy+paste out of ahowto and have it work03:08
kgoetzi got it suss'ed, the doco isnt clear (imo :))03:41
levanderAnybody have a recommendation for a good backup program?  One that I can back up the server (which is on a VPS) and back a desktop machine remotely which I've got at home?05:51
kgoetzrsync?05:53
levanderI was hoping for something automated, that was just point and click.05:56
levanderLooks like bacula and amanda are the two go to packages...  Just gotta figure out which.06:10
=== arthurfurlan_ is now known as arthurfurlan
krautmoin07:54
uvirtbotNew bug: #248310 in postfix (main) "package postfix None [modified: /var/lib/dpkg/info/postfix.list] failed to install/upgrade: subprocess post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/24831008:06
=== jords__ is now known as jords
=== lexi_ is now known as alexcf
=== emgent_ is now known as emgent
BlinnyI have a backup script in /etc/cron.daily, and /etc/crontab is set to run-parts cron.daily at 1:39AM. However, my backup script isn't beginning until 7:30AM. How should I go about finding out what is causing the delay?13:03
_rubenBlinny: you changed that time yourself? since on the box i checked its listed as 6:25am13:25
yesudeepI'm getting this error on my ubuntu server installation.  http://pastebin.com/f60f7975313:27
Blinny_ruben: Yeah. I have staff coming in at 7AM so I wanted the backup to have a few hours to run before they arrived and needed bandwidth.13:27
yesudeep(Re)Installing locales and dpkg-reconfigure locales did not fix the problem.13:28
Blinny_ruben: I've manually run all the scripts in /etc/cron.daily, and the only one that doesn't execute quickly is 'apt', which seems to just hang. I'm not sure if it needs arguments.13:28
yesudeepHow does one fix this?13:29
_rubenBlinny: the apt script has a builtin (variable) sleep of ~30 mins13:37
_rubento spread the load on update servers a bit13:38
Blinny_ruben: That makes sense.13:38
yesudeepThe system is running Ubuntu 8.04 LTS13:39
BlinnyOnly files with mode +x are run in /etc/cron.* correct?13:39
_rubenguess so, never tried13:39
BlinnyI do have a set of rsync filters in a file in /etc/cron.daily, but it's chmod'd 60013:39
_rubenDESCRIPTION run-parts runs all the executable files named within constraints described below, found in directory directory.  Other files and directories are silently ignored.13:40
BlinnyRight on.13:40
Blinny_ruben: Any suggestions for how to figure this out? I thought about echo'ing out start and end times of every script in /etc/cron.daily so that I'd be emailed more debugging info13:41
_rubenBlinny: i'd just create a file in /etc/cron.d/ specifying which script to run at which time13:45
BlinnyI guess that's an easier way of addressing the symptom.13:46
_rubenthis way your script's execution time wont be affected by other scripts13:47
BlinnyRight.13:48
BlinnyOkay, thank you. I'll keep digging for the cause.13:48
sommeryesudeep: try: sudo locale-gen en_US.UTF-813:49
ScottKsommer: These Ubuntu Server book people on the server ML should be hiring you.13:51
yesudeepsommer: Awesome.  Thanks :-)13:51
sommerScottK: heh, I like money13:52
sommeryesudeep: you're welcome13:52
ScottKsommer: Not kidding.13:52
ScottKYou might even suggest it to one of them.13:53
sommerScottK: ya I'm not against that idea, but I really don't think of myself as a writer :)13:53
ScottKWell you would be hugely helpful as a source of relevant and correct facts.  Let the writer make them sound pretty.13:55
sommerScottK: interesting idea, hadn't really thought of something like that... maybe I will send em an email, thanks man13:58
=== dantalizing_ is now known as dantalizing_work
trakinashi guys. im having  troubles with ssh2 not being able to detect and load my keys.14:29
=== jjesse_ is now known as jjesse
jdstrandmathiaz: re bug #24758314:44
uvirtbotLaunchpad bug 247583 in libvirt "add option to start dnsmasq with a custom configuration file" [Wishlist,New] https://launchpad.net/bugs/24758314:44
jdstrandmathiaz: oh, nevermind-- I was thinking you said you wanted hostname, you siad domain name-- nm14:45
venilhi, newly installed 8.04 does not respond on ping by its public IP, though is perfectly pingable by local ip;  restart helps for hour or two, but than it stops responding again, any ideas?15:49
=== chuck_ is now known as zul
kirklandjdstrand: bug #24842015:50
uvirtbotLaunchpad bug 248420 in ecryptfs-utils "please merge ecryptfs-utils_50-3" [Undecided,New] https://launchpad.net/bugs/24842015:50
kirklandzul: ^^^15:50
venilanyone? i'm new to linux16:00
kirklandzul: http://people.ubuntu.com/~kirkland/ecryptfs-utils/16:03
kirklandthat what you need?16:05
emgentkirkland: if you like a can take a look and sponsor it.16:15
jdstrandkirkland: ok16:16
kirklandemgent: thanks, i think zul had volunteered?16:17
zulkirkland: done16:17
emgentnice16:17
emgent:)16:17
kirklandemgent: thanks for the offer!16:17
emgentnp16:17
keesjdstrand: intrepid's vte is here: http://people.ubuntu.com/~kees/intrepid/16:18
keesjdstrand: hardy debdiff is: http://people.ubuntu.com/~kees/vte-bold.debdiff16:18
jdstrandkees: you're *awesome* :)16:19
jdstrandkees: it'll be a few minutes to test intrepid16:19
keesjdstrand: heh.  perhaps "nearly-fatally-bored-while-in-chicago"16:19
jdstrandkees: isn't that one of the alternate definitions for awesome?16:20
zuljdstrand: no its timbuktu16:33
jdstrandkirkland: merged16:44
kirklandjdstrand: cool, i think zul did it too?16:46
zulsoren: ec2 domU kernel building for i386 now16:54
nixternalany plans on releasing JeOS with a kernel other than the one optimized for VMs?16:58
delly84does anyone know anything about client authenticating via ldap?17:23
delly84my client authenticates via ldap (i think) and then switches users17:23
delly84or maybe logs in as the wrong user17:24
delly84i am not sure17:24
delly84i have a rather complicated setup, so this might not be the place to ask this sort of question17:25
delly84for instance i login via juser and then i end up as kuser in /home/juser17:26
delly84for reference kuser is local and juser is a remote user17:26
delly84any help would be appreciated17:27
sommerdelly84: what's the LDAP homeDirectory attribute of juser, and what's the a home directory set to in /etc/passwd for juser?17:28
delly84/home/juser17:31
delly84yes the homeDirectory attribute is definitely set to /home/juser17:32
delly84when i login as juser i end up as kuser in juser's home directory17:32
sommeris it correct for both /etc/passwd and ldap?17:33
sommeralso maybe double check the uid attribute in ldap17:33
delly84yeah, i think i messed up the uids17:33
delly84hmmm17:34
keesjdstrand: success: http://people.ubuntu.com/~kees/intrepid/vte_0.16.14-1ubuntu2.debdiff17:52
delly84sommer: thanks for the help, that was the problem18:11
sommerdelly84: np18:15
* delcoyote hi18:34
jdstrandmathiaz: here are my personal notes for using kqemu: http://paste.ubuntu.com/27322/19:01
jdstrandmathiaz: the wrapper script is obviously a hack, but I tlaked to soren and there may be something better we can do in the future.  that said, it works19:03
mathiazjdstrand: great - I'll look into that19:03
mathiazjdstrand: about bug 130238 - should it be close now that there is an apparmor profile ?19:13
uvirtbotLaunchpad bug 130238 in openldap2 "OpenLDAP chroot by default" [Undecided,New] https://launchpad.net/bugs/13023819:13
keesjdstrand: kqemu rocks19:14
jdstrandmathiaz: I believe so, yes. apparmor effectively isolates the process much like a chroot19:19
jdstrandkees: :)19:19
keeskirkland: the "no-degraded" option should maybe be called "no-unexpected-states"19:26
kirklandkees: i can see that19:26
jdstrandKoon: do you need me to sponsor the intrepid dnsmasq?19:28
Koonjdstrand: I need someone... mathiaz proposed to look at it, so sync with him19:30
mathiazjdstrand: you can go ahead with sponsoring19:30
duiuI am currently (as in right now) installing Ubuntu Server. I have an 8.7gb IDE install drive, and then two SATA 1 TB drives. I am planning on backuping up the first SATA drive onto the other by doing a clone with 'dd' and then using rsync in cron. The first SATA 1 TB drive I setting the mount point to /srv because it will be used as a fileserver.  What should I mount the second SATA 1 TB drive to?19:31
duiuShould I just use any folder (such as /media/1TBbackup)?19:36
kirklandduiu: I use /backup19:36
duiuok19:37
duiubut I can use anyfolder? I shouldn't mount both to /srv or not mount one at all?19:37
kirklandduiu: i'd use a RAID1, personally19:37
duiumy processor's not good enough :(19:37
duiu1.9ghz AMD Semperon single core19:38
kirklandduiu: ?  for RAID1?  there's very little processor overhead for RAID119:38
duiureally?19:38
kirklandduiu: I used an P3-800MHz for a 1TB RAID5 for years19:38
duiuoh19:38
duiuI was told by someone on the forum my hardware wasn't good enough.19:39
kirklandduiu: their on crack19:39
duiuhah19:39
duiuis there a ubuntu wiki on how to do this?19:40
kirklandduiu: not sure... the mdadm man page is pretty good19:40
duiuso I'd set the 1TB drives to "use a physical volume for RAID" and configure mdadm after the install?19:41
jdstrandKoon: the debdiff for bug #247598 looks good but needs some whitespace adjustments in debian/changelog. can you fix it up and ping me when ready?19:41
uvirtbotLaunchpad bug 247598 in dnsmasq "dnsmasq might be vulnerable to recent DNS spoofing issue" [Unknown,Fix released] https://launchpad.net/bugs/24759819:41
kirklandduiu: are both 1TB drives empty right now?19:42
duiuyep19:42
kirklandduiu: good, then this is simple19:42
Koonjdstrand: sure19:42
duiuwait19:42
jdstrandKoon: thanks!19:42
kirklandduiu: if you use the alternate install, you can setup the raid during the installation19:42
duiuthey're currently partioned as "use as physical volume for LVM"19:42
duiuI'm stil in the install19:42
kirklandduiu: mark them as file type Linux Software Raid19:43
kirklandduiu: then create an MD device19:43
kirklandduiu: then use that as a device for a filesystem, choose your fs type, and mount point19:44
keesis there something like update-manager's applet for the server?  some kind of daily email?19:44
maswankees: apticron gives you a useful daily email19:44
maswanor, well, daily nags if there are updates19:44
maswanit keeps quiet if there is nothing pending. :)19:45
keesmaswan: ah! perfect.19:45
duiukirkland: how do I mark them as type Linux Software RAID19:45
OliberGFS question: i'm looking at running GFS under VMware (Ubunto GeOS, or Server), would it be acceptable to use a RDM (so the disk appears as another SCSI disk) as normal GFS mount point, i presume there is nothing different about this configuration, rather than using a software iSCSI client in the guest19:45
duiukirkland: do you mean as "physical volume for RAID"19:46
kirklandduiu: no19:46
maswankirkland: actually, you don't want to change the partition type to that, since then the linux kernel might try to do it's broken autodetect stuff. mdadm is much cleverer.19:47
duiukirkland: or maswan so what should I format my drives as during the partioning?19:48
maswanduiu: either "linux" or "other non-filesystem usage", I think the consensus was. not many things care about the partition flag though.19:48
kirklandduiu: hang on a second... i'm booting a VM19:49
duiupartition flag? I thought we were talking about filesystem19:49
kirklandduiu: filesystem, yes19:49
maswanI thought you were talking about partitioning, not filesystem creation.19:50
maswanoh, we're in the installer. sorry, I was not in context.19:50
kirklandmaswan: do you have a partition table on your TB drives?19:50
kirklandduiu: ^19:51
kirklandduiu: if not, select the "free space" in the installer19:51
duiuk19:51
kirklandduiu: you're going to do this twice, once for each drive19:51
duiuk19:51
kirklandduiu: use the free space to create a new partition19:51
maswanIf you just want to use them as raid volumes, there's actually no need for a partition table.19:51
kirklandUse as: ......19:51
maswanthe whole drives that is. but I guess it might make the installer happier, or something.19:51
duiukirkland: ok19:52
kirklandUse as: physical volume for RAID19:52
duiuk19:52
duiuthat's what I was referenceing earlier19:52
duiuthen configure the softRAID later?19:52
kirklandduiu: once you have 2 of those, you'll get a new option19:55
kirklandduiu: "Configure Software RAID"19:56
duiuhave it20:01
duiukirkland: SoftwareRAID doesn't require APIC does it? Because I have to turn that off with my mobo to get Ubuntu to boot.20:02
duiuapic=advanced program interupt control20:02
kirklandduiu: no20:03
kirklandduiu: not that i know of20:03
duiukirkland: then set one of them as active, one as inactive?20:04
duiuor both as active?20:09
duiuboth active20:18
duiu:O)20:18
=== hessml is now known as hessml|away
=== hessml|away is now known as hessml
sourcemakeris there a known bug regarding the sendmail... I have the following critical problem with sendmail: System stalling on Mail Transport Agent (MTA)20:57
sourcemakerbut I can reproduce the problem...20:57
sourcemakersorry... can not reproduce the problem20:57
ScottKsourcemaker: Sendmail is not a primary MTA package in Ubuntu.  Mostly it's Postfix and some Exim.21:03
=== melter_ is now known as melter
sourcemakerwhich package is easier to install?21:03
sourcemakerI only need a software for sending emails... not more21:03
ScottKI've only ever used Postfix, so I can't give you a comparison.21:03
sourcemaker!postfix21:04
ubottupostfix is the default !MTA and !MDA on Ubuntu. For help, read https://help.ubuntu.com/community/Postfix and https://help.ubuntu.com/community/PostfixBasicSetupHowto - See also !MailServer21:04
sourcemakerScottK: I only install postfix and thatÄs it?21:04
sourcemakerand I can send mails via php?21:05
lamontsourcemaker: it's gonna need some php-thingy to generate those. postfix is an MTA21:06
ScottKI'd guess you may need some PHP bits too, but I'm not a PHP person.21:06
ScottK;-)21:06
ScottKlamont: Speaking of Postfix and scripts...  Did you get a chance to look at mine yet?21:06
lamontScottK: :-(21:07
lamontand tonight's not looking particularly promising.  some other non-work stuff that's really piled up and needs some love tonight21:07
ScottKIs that "No, I haven't looked at it" or "Yes, I looked at it and it sucked."?21:07
ScottKAh.21:07
lamontso... 1) I'll make it inplan for tuesday, poke me tomorrow evening?21:07
lamontthat's a "lamont sucks"21:08
lamontI expect that the code is fine - I looked at it long enough to see the large smtp blocks at the top, and not enough to see why they were there.21:08
ScottKK21:10
ScottKI cribbed the setup straight from the amavisd-new docs modulo we use a chroot.21:11
sourcemakerScottK: now I have installed postfix21:29
sourcemakerI am not sure... but I think apt-get purge sendmail did not remove sendmail at all... there is a startup entry /etc/init.d/sendmail... how can I remove this?21:30
Koonjdstrand: fixed (hopefully)21:32
ScottKsourcemaker: There may have been some Sendmail bits left behind (shouldn't be, but could be), but Postfix and Sendmail conflict.  You can't have both installed at the same time.21:34
jdstrandKoon: ok, look at it in a bit-- thanks :)21:37
jdstrandKoon: dnsmasq pushed for intrepid. great job! :)22:00
Koonhit me so that I don't fall asleep22:01
jotil i am trying to install SELinux on my box but there is problem booting. i get the initramfs prompt when i change the grub kernel options to "selinux=1 enforcing=1"22:08
jotili removed upstart and installed sysvinit22:09
jotilselecting selinux-basic removed apparmor22:09
jotilany idea what is going on?22:09
ScottKjotil: Shuffling major pieces of infrastructure is not the path to happiness (upstart removal).22:10
jotilScottK: but i can boot with sysvinit. nothing is wrong. just that when i try enforcing selinux, it doesn't load beyond initramfs22:12
ScottKjotil: What release on you using?22:12
Oliberi don't suppose anyone has a package list for running GFS/heartbeat on 8.04?22:12
jotilScottK: hardy22:12
ScottKThe hardy selinux packages work with upstart.22:12
ScottKThe selinux upstream was involved in packaging them.22:13
ScottKSo I think you're barking up the wrong tree.22:13
* ScottK doesn't use selinux, so I don't have more specific advice.22:13
jotiloh boy! i read somewhere in the wiki ubuntu that i need to install sysvinit22:15
jotilwait, let me find it22:15
jotilhttps://help.ubuntu.com/community/SELinux22:18
ScottKkees: We don't require people to switch back to sysv-init to use selinux do we?22:18
jotil:/22:18
jotilit says: 6.Finally, upstart's /bin/init isn't SELinux-enabled. So, you want to aptitude get install sysvinit - at this point, you should reboot...22:19
ScottKjotil: That page was written in October 2007 and has not been updated for Hardy.22:20
ScottKI don't know if that's changed or not.22:20
ScottKHopefully kees will give us a response.22:20
jotilcool. thanks for your support though....22:21
jotilbut should i wait for kees or reinstall upstart?22:21
ScottKUp to you.22:21
ScottKI'd suggest reinstall upstart since that's the normal Ubuntu configuration.22:22
jotilok boss... off to reinstalling upstart then...22:22
keesScottK: no, the "selinux" package should handle that correctly.22:23
keesall the old stuff about selinux not working is wrong.  Hardy works correctly.22:23
ScottKjotil: ^^^22:23
keesjotil: prior to hardy, it was very fragile, as you're finding.  :P22:24
jotilkees: thanks. i'll revert my box back to upstart then...22:24
* kees nods22:24
jotiland i actually found the Hardy SELinux docs right now... :$22:24
keesjotil: to get selinux installed, you should just have to do "apt-get install selinux"22:24
jotilrofl22:25
keesjotil: heh22:25
jotilyeah i just saw...22:25
jotilthanks dude22:25
* ScottK just added a warning to that page.22:25
* jotil hands ScottK the "lion heart of the day" award for being so thoughtful.. haha22:26
LieZ^hi my FTP server running on a remote box caps out at 32KB/s what could be wrong?23:54
nxvldendrobates: hi~23:54

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!