[01:58] <Navop> When asked for primary domaine, must it be a registered domaine, or anything (setting up server)?
[02:00] <RoAkSoAx> Navop: nope
[02:00] <RoAkSoAx> not necessarely
[02:03] <kgoetz> hi all
[02:12] <kgoetz> i'm trying to use ufw on a gateway system, following the guide at https://help.ubuntu.com/8.04/serverguide/C/firewall.html (under ufw Masquerading). i get the following error when trying to run the http://paste.ubuntu.com/27192/ init script. any suggestions?
[02:38] <Navop> RoAkSoAx: but is it better being registered
[02:50] <pschulz01> G'day.. I have a Windows -> linux gateway routing problem.
[02:51] <pschulz01> Windows is reporting 'no route to host' messages from the gateway, but all my Linux boxes are able to ping through the gw just fine.. including a Linux client running in a VMWARE on Windows.
[02:52] <pschulz01> I wondering if it a icmp 'do not fragment' windows brain dead type of thing.
[03:08] <kgoetz> seems my iptables foo is weak :/ i cant even successfully copy+paste out of ahowto and have it work
[03:41] <kgoetz> i got it suss'ed, the doco isnt clear (imo :))
[05:51] <levander> Anybody have a recommendation for a good backup program?  One that I can back up the server (which is on a VPS) and back a desktop machine remotely which I've got at home?
[05:53] <kgoetz> rsync?
[05:56] <levander> I was hoping for something automated, that was just point and click.
[06:10] <levander> Looks like bacula and amanda are the two go to packages...  Just gotta figure out which.
[07:54] <kraut> moin
[13:03] <Blinny> I have a backup script in /etc/cron.daily, and /etc/crontab is set to run-parts cron.daily at 1:39AM. However, my backup script isn't beginning until 7:30AM. How should I go about finding out what is causing the delay?
[13:25] <_ruben> Blinny: you changed that time yourself? since on the box i checked its listed as 6:25am
[13:27] <yesudeep> I'm getting this error on my ubuntu server installation.  http://pastebin.com/f60f79753
[13:27] <Blinny> _ruben: Yeah. I have staff coming in at 7AM so I wanted the backup to have a few hours to run before they arrived and needed bandwidth.
[13:28] <yesudeep> (Re)Installing locales and dpkg-reconfigure locales did not fix the problem.
[13:28] <Blinny> _ruben: I've manually run all the scripts in /etc/cron.daily, and the only one that doesn't execute quickly is 'apt', which seems to just hang. I'm not sure if it needs arguments.
[13:29] <yesudeep> How does one fix this?
[13:37] <_ruben> Blinny: the apt script has a builtin (variable) sleep of ~30 mins
[13:38] <_ruben> to spread the load on update servers a bit
[13:38] <Blinny> _ruben: That makes sense.
[13:39] <yesudeep> The system is running Ubuntu 8.04 LTS
[13:39] <Blinny> Only files with mode +x are run in /etc/cron.* correct?
[13:39] <_ruben> guess so, never tried
[13:39] <Blinny> I do have a set of rsync filters in a file in /etc/cron.daily, but it's chmod'd 600
[13:40] <_ruben> DESCRIPTION run-parts runs all the executable files named within constraints described below, found in directory directory.  Other files and directories are silently ignored.
[13:40] <Blinny> Right on.
[13:41] <Blinny> _ruben: Any suggestions for how to figure this out? I thought about echo'ing out start and end times of every script in /etc/cron.daily so that I'd be emailed more debugging info
[13:45] <_ruben> Blinny: i'd just create a file in /etc/cron.d/ specifying which script to run at which time
[13:46] <Blinny> I guess that's an easier way of addressing the symptom.
[13:47] <_ruben> this way your script's execution time wont be affected by other scripts
[13:48] <Blinny> Right.
[13:48] <Blinny> Okay, thank you. I'll keep digging for the cause.
[13:49] <sommer> yesudeep: try: sudo locale-gen en_US.UTF-8
[13:51] <ScottK> sommer: These Ubuntu Server book people on the server ML should be hiring you.
[13:51] <yesudeep> sommer: Awesome.  Thanks :-)
[13:52] <sommer> ScottK: heh, I like money
[13:52] <sommer> yesudeep: you're welcome
[13:52] <ScottK> sommer: Not kidding.
[13:53] <ScottK> You might even suggest it to one of them.
[13:53] <sommer> ScottK: ya I'm not against that idea, but I really don't think of myself as a writer :)
[13:55] <ScottK> Well you would be hugely helpful as a source of relevant and correct facts.  Let the writer make them sound pretty.
[13:58] <sommer> ScottK: interesting idea, hadn't really thought of something like that... maybe I will send em an email, thanks man
[14:29] <trakinas> hi guys. im having  troubles with ssh2 not being able to detect and load my keys.
[14:44] <jdstrand> mathiaz: re bug #247583
[14:45] <jdstrand> mathiaz: oh, nevermind-- I was thinking you said you wanted hostname, you siad domain name-- nm
[15:49] <venil> hi, newly installed 8.04 does not respond on ping by its public IP, though is perfectly pingable by local ip;  restart helps for hour or two, but than it stops responding again, any ideas?
[15:50] <kirkland> jdstrand: bug #248420
[15:50] <kirkland> zul: ^^^
[16:00] <venil> anyone? i'm new to linux
[16:03] <kirkland> zul: http://people.ubuntu.com/~kirkland/ecryptfs-utils/
[16:05] <kirkland> that what you need?
[16:15] <emgent> kirkland: if you like a can take a look and sponsor it.
[16:16] <jdstrand> kirkland: ok
[16:17] <kirkland> emgent: thanks, i think zul had volunteered?
[16:17] <zul> kirkland: done
[16:17] <emgent> nice
[16:17] <emgent> :)
[16:17] <kirkland> emgent: thanks for the offer!
[16:17] <emgent> np
[16:18] <kees> jdstrand: intrepid's vte is here: http://people.ubuntu.com/~kees/intrepid/
[16:18] <kees> jdstrand: hardy debdiff is: http://people.ubuntu.com/~kees/vte-bold.debdiff
[16:19] <jdstrand> kees: you're *awesome* :)
[16:19] <jdstrand> kees: it'll be a few minutes to test intrepid
[16:19] <kees> jdstrand: heh.  perhaps "nearly-fatally-bored-while-in-chicago"
[16:20] <jdstrand> kees: isn't that one of the alternate definitions for awesome?
[16:33] <zul> jdstrand: no its timbuktu
[16:44] <jdstrand> kirkland: merged
[16:46] <kirkland> jdstrand: cool, i think zul did it too?
[16:54] <zul> soren: ec2 domU kernel building for i386 now
[16:58] <nixternal> any plans on releasing JeOS with a kernel other than the one optimized for VMs?
[17:23] <delly84> does anyone know anything about client authenticating via ldap?
[17:23] <delly84> my client authenticates via ldap (i think) and then switches users
[17:24] <delly84> or maybe logs in as the wrong user
[17:24] <delly84> i am not sure
[17:25] <delly84> i have a rather complicated setup, so this might not be the place to ask this sort of question
[17:26] <delly84> for instance i login via juser and then i end up as kuser in /home/juser
[17:26] <delly84> for reference kuser is local and juser is a remote user
[17:27] <delly84> any help would be appreciated
[17:28] <sommer> delly84: what's the LDAP homeDirectory attribute of juser, and what's the a home directory set to in /etc/passwd for juser?
[17:31] <delly84> /home/juser
[17:32] <delly84> yes the homeDirectory attribute is definitely set to /home/juser
[17:32] <delly84> when i login as juser i end up as kuser in juser's home directory
[17:33] <sommer> is it correct for both /etc/passwd and ldap?
[17:33] <sommer> also maybe double check the uid attribute in ldap
[17:33] <delly84> yeah, i think i messed up the uids
[17:34] <delly84> hmmm
[17:52] <kees> jdstrand: success: http://people.ubuntu.com/~kees/intrepid/vte_0.16.14-1ubuntu2.debdiff
[18:11] <delly84> sommer: thanks for the help, that was the problem
[18:15] <sommer> delly84: np
[18:34]  * delcoyote hi
[19:01] <jdstrand> mathiaz: here are my personal notes for using kqemu: http://paste.ubuntu.com/27322/
[19:03] <jdstrand> mathiaz: the wrapper script is obviously a hack, but I tlaked to soren and there may be something better we can do in the future.  that said, it works
[19:03] <mathiaz> jdstrand: great - I'll look into that
[19:13] <mathiaz> jdstrand: about bug 130238 - should it be close now that there is an apparmor profile ?
[19:14] <kees> jdstrand: kqemu rocks
[19:19] <jdstrand> mathiaz: I believe so, yes. apparmor effectively isolates the process much like a chroot
[19:19] <jdstrand> kees: :)
[19:26] <kees> kirkland: the "no-degraded" option should maybe be called "no-unexpected-states"
[19:26] <kirkland> kees: i can see that
[19:28] <jdstrand> Koon: do you need me to sponsor the intrepid dnsmasq?
[19:30] <Koon> jdstrand: I need someone... mathiaz proposed to look at it, so sync with him
[19:30] <mathiaz> jdstrand: you can go ahead with sponsoring
[19:31] <duiu> I am currently (as in right now) installing Ubuntu Server. I have an 8.7gb IDE install drive, and then two SATA 1 TB drives. I am planning on backuping up the first SATA drive onto the other by doing a clone with 'dd' and then using rsync in cron. The first SATA 1 TB drive I setting the mount point to /srv because it will be used as a fileserver.  What should I mount the second SATA 1 TB drive to?
[19:36] <duiu> Should I just use any folder (such as /media/1TBbackup)?
[19:36] <kirkland> duiu: I use /backup
[19:37] <duiu> ok
[19:37] <duiu> but I can use anyfolder? I shouldn't mount both to /srv or not mount one at all?
[19:37] <kirkland> duiu: i'd use a RAID1, personally
[19:37] <duiu> my processor's not good enough :(
[19:38] <duiu> 1.9ghz AMD Semperon single core
[19:38] <kirkland> duiu: ?  for RAID1?  there's very little processor overhead for RAID1
[19:38] <duiu> really?
[19:38] <kirkland> duiu: I used an P3-800MHz for a 1TB RAID5 for years
[19:38] <duiu> oh
[19:39] <duiu> I was told by someone on the forum my hardware wasn't good enough.
[19:39] <kirkland> duiu: their on crack
[19:39] <duiu> hah
[19:40] <duiu> is there a ubuntu wiki on how to do this?
[19:40] <kirkland> duiu: not sure... the mdadm man page is pretty good
[19:41] <duiu> so I'd set the 1TB drives to "use a physical volume for RAID" and configure mdadm after the install?
[19:41] <jdstrand> Koon: the debdiff for bug #247598 looks good but needs some whitespace adjustments in debian/changelog. can you fix it up and ping me when ready?
[19:42] <kirkland> duiu: are both 1TB drives empty right now?
[19:42] <duiu> yep
[19:42] <kirkland> duiu: good, then this is simple
[19:42] <Koon> jdstrand: sure
[19:42] <duiu> wait
[19:42] <jdstrand> Koon: thanks!
[19:42] <kirkland> duiu: if you use the alternate install, you can setup the raid during the installation
[19:42] <duiu> they're currently partioned as "use as physical volume for LVM"
[19:42] <duiu> I'm stil in the install
[19:43] <kirkland> duiu: mark them as file type Linux Software Raid
[19:43] <kirkland> duiu: then create an MD device
[19:44] <kirkland> duiu: then use that as a device for a filesystem, choose your fs type, and mount point
[19:44] <kees> is there something like update-manager's applet for the server?  some kind of daily email?
[19:44] <maswan> kees: apticron gives you a useful daily email
[19:44] <maswan> or, well, daily nags if there are updates
[19:45] <maswan> it keeps quiet if there is nothing pending. :)
[19:45] <kees> maswan: ah! perfect.
[19:45] <duiu> kirkland: how do I mark them as type Linux Software RAID
[19:45] <Oliber> GFS question: i'm looking at running GFS under VMware (Ubunto GeOS, or Server), would it be acceptable to use a RDM (so the disk appears as another SCSI disk) as normal GFS mount point, i presume there is nothing different about this configuration, rather than using a software iSCSI client in the guest
[19:46] <duiu> kirkland: do you mean as "physical volume for RAID"
[19:46] <kirkland> duiu: no
[19:47] <maswan> kirkland: actually, you don't want to change the partition type to that, since then the linux kernel might try to do it's broken autodetect stuff. mdadm is much cleverer.
[19:48] <duiu> kirkland: or maswan so what should I format my drives as during the partioning?
[19:48] <maswan> duiu: either "linux" or "other non-filesystem usage", I think the consensus was. not many things care about the partition flag though.
[19:49] <kirkland> duiu: hang on a second... i'm booting a VM
[19:49] <duiu> partition flag? I thought we were talking about filesystem
[19:49] <kirkland> duiu: filesystem, yes
[19:50] <maswan> I thought you were talking about partitioning, not filesystem creation.
[19:50] <maswan> oh, we're in the installer. sorry, I was not in context.
[19:50] <kirkland> maswan: do you have a partition table on your TB drives?
[19:51] <kirkland> duiu: ^
[19:51] <kirkland> duiu: if not, select the "free space" in the installer
[19:51] <duiu> k
[19:51] <kirkland> duiu: you're going to do this twice, once for each drive
[19:51] <duiu> k
[19:51] <kirkland> duiu: use the free space to create a new partition
[19:51] <maswan> If you just want to use them as raid volumes, there's actually no need for a partition table.
[19:51] <kirkland> Use as: ......
[19:51] <maswan> the whole drives that is. but I guess it might make the installer happier, or something.
[19:52] <duiu> kirkland: ok
[19:52] <kirkland> Use as: physical volume for RAID
[19:52] <duiu> k
[19:52] <duiu> that's what I was referenceing earlier
[19:52] <duiu> then configure the softRAID later?
[19:55] <kirkland> duiu: once you have 2 of those, you'll get a new option
[19:56] <kirkland> duiu: "Configure Software RAID"
[20:01] <duiu> have it
[20:02] <duiu> kirkland: SoftwareRAID doesn't require APIC does it? Because I have to turn that off with my mobo to get Ubuntu to boot.
[20:02] <duiu> apic=advanced program interupt control
[20:03] <kirkland> duiu: no
[20:03] <kirkland> duiu: not that i know of
[20:04] <duiu> kirkland: then set one of them as active, one as inactive?
[20:09] <duiu> or both as active?
[20:18] <duiu> both active
[20:18] <duiu> :O)
[20:57] <sourcemaker> is there a known bug regarding the sendmail... I have the following critical problem with sendmail: System stalling on Mail Transport Agent (MTA)
[20:57] <sourcemaker> but I can reproduce the problem...
[20:57] <sourcemaker> sorry... can not reproduce the problem
[21:03] <ScottK> sourcemaker: Sendmail is not a primary MTA package in Ubuntu.  Mostly it's Postfix and some Exim.
[21:03] <sourcemaker> which package is easier to install?
[21:03] <sourcemaker> I only need a software for sending emails... not more
[21:03] <ScottK> I've only ever used Postfix, so I can't give you a comparison.
[21:04] <sourcemaker> !postfix
[21:04] <sourcemaker> ScottK: I only install postfix and thatÄs it?
[21:05] <sourcemaker> and I can send mails via php?
[21:06] <lamont> sourcemaker: it's gonna need some php-thingy to generate those. postfix is an MTA
[21:06] <ScottK> I'd guess you may need some PHP bits too, but I'm not a PHP person.
[21:06] <ScottK> ;-)
[21:06] <ScottK> lamont: Speaking of Postfix and scripts...  Did you get a chance to look at mine yet?
[21:07] <lamont> ScottK: :-(
[21:07] <lamont> and tonight's not looking particularly promising.  some other non-work stuff that's really piled up and needs some love tonight
[21:07] <ScottK> Is that "No, I haven't looked at it" or "Yes, I looked at it and it sucked."?
[21:07] <ScottK> Ah.
[21:07] <lamont> so... 1) I'll make it inplan for tuesday, poke me tomorrow evening?
[21:08] <lamont> that's a "lamont sucks"
[21:08] <lamont> I expect that the code is fine - I looked at it long enough to see the large smtp blocks at the top, and not enough to see why they were there.
[21:10] <ScottK> K
[21:11] <ScottK> I cribbed the setup straight from the amavisd-new docs modulo we use a chroot.
[21:29] <sourcemaker> ScottK: now I have installed postfix
[21:30] <sourcemaker> I am not sure... but I think apt-get purge sendmail did not remove sendmail at all... there is a startup entry /etc/init.d/sendmail... how can I remove this?
[21:32] <Koon> jdstrand: fixed (hopefully)
[21:34] <ScottK> sourcemaker: There may have been some Sendmail bits left behind (shouldn't be, but could be), but Postfix and Sendmail conflict.  You can't have both installed at the same time.
[21:37] <jdstrand> Koon: ok, look at it in a bit-- thanks :)
[22:00] <jdstrand> Koon: dnsmasq pushed for intrepid. great job! :)
[22:01] <Koon> hit me so that I don't fall asleep
[22:08] <jotil>  i am trying to install SELinux on my box but there is problem booting. i get the initramfs prompt when i change the grub kernel options to "selinux=1 enforcing=1"
[22:09] <jotil> i removed upstart and installed sysvinit
[22:09] <jotil> selecting selinux-basic removed apparmor
[22:09] <jotil> any idea what is going on?
[22:10] <ScottK> jotil: Shuffling major pieces of infrastructure is not the path to happiness (upstart removal).
[22:12] <jotil> ScottK: but i can boot with sysvinit. nothing is wrong. just that when i try enforcing selinux, it doesn't load beyond initramfs
[22:12] <ScottK> jotil: What release on you using?
[22:12] <Oliber> i don't suppose anyone has a package list for running GFS/heartbeat on 8.04?
[22:12] <jotil> ScottK: hardy
[22:12] <ScottK> The hardy selinux packages work with upstart.
[22:13] <ScottK> The selinux upstream was involved in packaging them.
[22:13] <ScottK> So I think you're barking up the wrong tree.
[22:13]  * ScottK doesn't use selinux, so I don't have more specific advice.
[22:15] <jotil> oh boy! i read somewhere in the wiki ubuntu that i need to install sysvinit
[22:15] <jotil> wait, let me find it
[22:18] <jotil> https://help.ubuntu.com/community/SELinux
[22:18] <ScottK> kees: We don't require people to switch back to sysv-init to use selinux do we?
[22:18] <jotil> :/
[22:19] <jotil> it says: 6.Finally, upstart's /bin/init isn't SELinux-enabled. So, you want to aptitude get install sysvinit - at this point, you should reboot...
[22:20] <ScottK> jotil: That page was written in October 2007 and has not been updated for Hardy.
[22:20] <ScottK> I don't know if that's changed or not.
[22:20] <ScottK> Hopefully kees will give us a response.
[22:21] <jotil> cool. thanks for your support though....
[22:21] <jotil> but should i wait for kees or reinstall upstart?
[22:21] <ScottK> Up to you.
[22:22] <ScottK> I'd suggest reinstall upstart since that's the normal Ubuntu configuration.
[22:22] <jotil> ok boss... off to reinstalling upstart then...
[22:23] <kees> ScottK: no, the "selinux" package should handle that correctly.
[22:23] <kees> all the old stuff about selinux not working is wrong.  Hardy works correctly.
[22:23] <ScottK> jotil: ^^^
[22:24] <kees> jotil: prior to hardy, it was very fragile, as you're finding.  :P
[22:24] <jotil> kees: thanks. i'll revert my box back to upstart then...
[22:24]  * kees nods
[22:24] <jotil> and i actually found the Hardy SELinux docs right now... :$
[22:24] <kees> jotil: to get selinux installed, you should just have to do "apt-get install selinux"
[22:25] <jotil> rofl
[22:25] <kees> jotil: heh
[22:25] <jotil> yeah i just saw...
[22:25] <jotil> thanks dude
[22:25]  * ScottK just added a warning to that page.
[22:26]  * jotil hands ScottK the "lion heart of the day" award for being so thoughtful.. haha
[23:54] <LieZ^> hi my FTP server running on a remote box caps out at 32KB/s what could be wrong?
[23:54] <nxvl> dendrobates: hi~