| owh | Running gutsy, trying to figure out why this morning I'm seeing "Cannot start TLS: handshake failure" in my mailq - there have been no changes on my end that I'm aware of - as in, I've not changed configs or updated any software. Of course 12 hours ago it was all working fine. Suggestions? | 00:12 |
|---|---|---|
| owh | Hmm, you should know that I'm connecting to smtp.gmail.com. | 00:12 |
| mathiaz | owh: there is an issue with gmail and an expired certificate | 00:13 |
| owh | Wonderful. | 00:13 |
| mathiaz | owh: http://groups.google.com/group/Gmail-Help-Announcements-and-Alerts-en/browse_thread/thread/0948f4f8b9ddb496/b7c9c363eecb3f32?show_docid=b7c9c363eecb3f32 | 00:13 |
| owh | Merci | 00:14 |
| owh | Hmm, that says that it's fixed :( | 00:14 |
| owh | Just in case anyone wondered if I fell off the planet. These meetings at 1500 UTC are waay past my bedtime. It's not that I've lost interest, far from it, but I cannot get there at that time. I'm not going to suggest that you move the meeting time, but I just thought you might be wondering. | 00:31 |
| thenewguy | do you guys know how i can change PHP settings on a per directory basis? | 01:28 |
| thenewguy | inst there a way to place local php.ini files | 01:28 |
| nxvl | kirkland: around? | 01:29 |
| tlsarles | I was wondering about the basics of clustering. Does this happen at the kernel level, or application? My goal is to have redundant apache servers for load balance and failover. Anyone got any pointers, or good articles on the basics of doing this? | 02:13 |
| === freaky[t] is now known as c1|freaky | ||
| === zachera is now known as zacheraa | ||
| === zacheraa is now known as zachera | ||
| compubomb | can ubuntu server install jfs as a default file system in it's file system manager app ? | 03:01 |
| === c1|freaky is now known as fReAkY[t] | ||
| hads | Haven't installed a server on bare metal for a while so I'm not sure but the desktop can so I don't see why not. | 03:06 |
| compubomb | an you use the desktop install for the server, then somehow change the apt-get source file ? | 03:08 |
| hads | You could if you really wanted to but you'd end up with a load of cruft. Wht not use the server CD? | 03:10 |
| jonesy | I'm sort of shopping for a project to contribute to. Is there an ubuntu server project that anyone knows of that is primarily written in Python? | 03:44 |
| jonesy | preferably one with mentorship available :) | 03:44 |
| sommer | jonesy: you might check out rapache: https://launchpad.net/rapache | 04:03 |
| jonesy | ok, thanks | 04:04 |
| deadlyallance691 | i am kind of a newb to linux and was thinking could i install the ubuntu server 64bit base system then add the dreamlinux repos and install the dreamlinux desktop environment so as to end up with a 64 bit dreamlinux? | 06:12 |
| kraut | moin | 09:22 |
| === backenfutter is now known as [backenfutter] | ||
| mdz | soren: does the server seed exist now? where can I find it? | 10:30 |
| soren | mdz: No, it's blocked on a tasksel bug, that I've not yet had time to look at. | 10:31 |
| * soren goes back to being on holiday | 10:39 | |
| compubomb | how do i get ipkungfu service to auto-load ? | 11:43 |
| _ruben | sudo update-rc.d ipkungfu defaults | 11:44 |
| compubomb | _ruben: it says already exists | 11:47 |
| compubomb | problem is, when i booted up my system, ip's were not being forwarded untill i ran ipkungfu --no-caching | 11:48 |
| _ruben | dunno then, never used ipkungfu | 11:49 |
| compubomb | _ruben: it's an awesome firewall | 11:49 |
| compubomb | _ruben: it's probably the easiest firewall ever to run :P | 11:50 |
| compubomb | you just set like 8 script variables and you are ready to go. | 11:50 |
| Deeps | frontend to iptables | 11:50 |
| * _ruben prefers to write his own frontends for iptables | 11:50 | |
| compubomb | anyways.. this is a bit frustrating | 11:52 |
| compubomb | btw, my ipkungfu script it not in rcS.d/ | 11:52 |
| compubomb | is that why ? | 11:53 |
| _ruben | it oughta be in /etc/init.d/ i'd say | 11:53 |
| compubomb | _ruben: it is. | 11:54 |
| compubomb | _ruben: but it didn't load up when i rebooted ubuntu. | 11:54 |
| compubomb | so you tell me. | 11:54 |
| compubomb | i haven't a clue. | 11:54 |
| Deeps | /etc/init.d/ipkungfu start | 11:54 |
| Deeps | if that doesn't do it, then the problem's in your configuration and/or it's init script | 11:54 |
| Deeps | becaue thats what's being run on reboot | 11:54 |
| compubomb | Deeps: that works. | 11:57 |
| compubomb | Deeps: the init.d script works | 11:57 |
| compubomb | but how come i had to rerun my inet script, i don't think it loaded. | 11:58 |
| compubomb | btw, how do you get ubuntu to boot up in verbose mode ? | 11:58 |
| === ogra_ is now known as ogra | ||
| uvirtbot | New bug: #253268 in suphp (main) "php5-cgi not working with suphp in Hardy " [Undecided,New] https://launchpad.net/bugs/253268 | 14:12 |
| EtienneG | any users of Likewise Open noticed that new group membership do not show up on the Ubuntu side until the winbind cache is refreshed with "lwimsg winbind brl-revalidate" ? | 14:20 |
| EtienneG | is that a known behavior ? (bug ?) | 14:20 |
| EtienneG | I am wondering if it is a problem in my setup ... doubtful, as it is pretty vanilla | 14:20 |
| sommer | EtienneG: new group as in new AD group? | 14:23 |
| sommer | EtienneG: does the winbind cache get refreshed when logging out and back in? | 14:24 |
| EtienneG | sommer, yeah, new group in AD | 14:26 |
| EtienneG | I will try logging out/in again, but I doubt this is related | 14:27 |
| sommer | EtienneG: well I was thinking along the lines that if you join a new Linux group you need to log out and back in for the new permissions to work... or refresh your environmnet, but I always forget the commands | 14:28 |
| sommer | EtienneG: so basically I'd think the same would hold true for AD groups | 14:28 |
| EtienneG | sommer, I see, but that is not what i was thinking | 14:29 |
| EtienneG | basically, I am looged in as a local Unix user (from /etc/passwd), and doing groups/id/getent | 14:29 |
| sommer | EtienneG: even from a windows client don't you have to log out and back in for new groups? been a while since I've admined an AD domain | 14:29 |
| EtienneG | but now it seem to work without invalidating the winbind cache, so it must be good | 14:30 |
| sommer | heh, interesting | 14:31 |
| EtienneG | the problem was probably transient, maybe winbind need to be restarted/reloaded at least once after installation to work properly | 14:31 |
| sommer | maybe... windows clients need to restart after joining a domain :-) | 14:32 |
| EtienneG | ok, I have isolated the behavior to new AD group | 14:38 |
| EtienneG | 1. create new group, 2. add member to group, 3. id and groups user on the Ubuntu side do not show member to newgroup, but getent group newgroup do show user as member | 14:39 |
| EtienneG | even invalidating the winbind cache or restarting likewise-open does not work | 14:41 |
| * EtienneG scratch head | 14:42 | |
| ahasenack | EtienneG: nscd running? | 14:47 |
| EtienneG | ahasenack, this spawn of the devil? never! | 14:47 |
| ahasenack | :) | 14:47 |
| EtienneG | but good catch nonetheless, that's exactly the behavior i would have expected from nscd :) | 14:48 |
| ahasenack | EtienneG: id does enumerate all groups in order to find the members | 14:48 |
| ahasenack | EtienneG: I believe winbind has that disabled now (group and user enumeration) | 14:48 |
| EtienneG | ahasenack, which is probably the problem indeed | 14:48 |
| ahasenack | could that be it? | 14:48 |
| ahasenack | getent group <groupname> does a direct call, so it's no enumeration | 14:49 |
| EtienneG | let me check how it work if I log on as the user in question in question ... | 14:49 |
| ahasenack | groups also does enumeration | 14:49 |
| ahasenack | you can quickly check by enabling enumeration in smb.conf and retrying | 14:49 |
| EtienneG | (in question in question in question in question .... damn caffeine!) | 14:49 |
| EtienneG | I think it would need to be changed in /etc/samba/lwiauthd.conf instead, I do not have a smb.conf (yet) | 14:50 |
| ahasenack | hmm, whatever winbind is using | 14:50 |
| ahasenack | I never used likewise-open | 14:50 |
| EtienneG | ok, group membership show correctly when I log on as the user | 14:51 |
| EtienneG | I will brush it off then | 14:51 |
| emgent | soren: ping | 14:52 |
| ahasenack | I once patched id to use getgrouplist(3) instead of group enumeration to find the members, but never submitted it | 14:52 |
| ahasenack | shame on me | 14:52 |
| === fReAkY[t] is now known as freaky[t] | ||
| EtienneG | ahasenack, how does id do group enumeration? initgroup(), something else ... | 15:03 |
| ahasenack | EtienneG: setgrent(3), getgrent(3) in a loop for each group, and endgrent(3) at the end | 15:04 |
| ahasenack | EtienneG: it lists all groups and looks in each group if the user is a member | 15:04 |
| ahasenack | EtienneG: so, besides enumerating all groups, you also enumerate all members | 15:05 |
| EtienneG | ahasenack, basically, it walk trhough the entire group database, right ? | 15:05 |
| ahasenack | yes | 15:05 |
| ahasenack | recent nss_ldap even has a config option to not return the members in a getgrid() call, for example, to try to avoid that traffic if all you want is the group gid | 15:05 |
| EtienneG | ok, that is kinda good | 15:06 |
| ahasenack | and prone to break a lot of apps :) | 15:06 |
| ahasenack | samba has an option to bypass nss completely when used with ldap | 15:06 |
| EtienneG | ok, i see, indeed | 15:06 |
| EtienneG | I noticed such a problem recently, where dbus-daemon is calling initgroup() | 15:07 |
| EtienneG | if you have set nss_ldap to "bind_policy hard" (which is correct, IMHO), it will block at boot if the LDAP directory is unreachable | 15:08 |
| EtienneG | IIUC, that is what led to the nss_initgroups_minimumuid hackery right before release | 15:09 |
| EtienneG | in the use case I had, it was not possible to do, as there was many 10K users, and you cannot make the nss_initgroups_ignoreuid that long ... :( | 15:09 |
| zul | jdstrand: ping | 15:51 |
| jdstrand | zul: pong | 15:51 |
| zul | jdstrand: was mathiaz going to do the openldap sru upload or was i? | 15:52 |
| jdstrand | zul: you are doing SRU, mathiaz is doing intrepid | 15:52 |
| zul | jdstrand: ok :) | 15:52 |
| jdstrand | at least that was my understanding | 15:53 |
| zul | jdstrand: ill get to it this afternoon hopefully :) | 15:53 |
| jdstrand | EtienneG: you had 10K users that you wanted to ignore? | 15:54 |
| jdstrand | EtienneG: that option was really meant for system groups, and perhaps some admins with low uids | 15:55 |
| jdstrand | EtienneG: so the system would at least get to the login prompt. at that point, the admin can make some decisions about what to do for logins (eg, don't let 'em, use some sort of cache, ...) | 15:56 |
| EtienneG | jdstrand, that make sense indeed! | 15:56 |
| EtienneG | but no, I was not expecting to ignore a couple 10K users | 15:56 |
| jdstrand | :) | 15:56 |
| EtienneG | no worry! :) | 15:56 |
| zul | EtienneG: you ignore users? shame on you...:) | 15:57 |
| EtienneG | was someone talking to me? | 15:57 |
| zul | EtienneG: never mind :) | 15:58 |
| EtienneG | :D | 15:59 |
| === freaky[t] is now known as fReAkY[t] | ||
| jordancason | hay guys im trying to password protect my server and i have a problem with spaces in the dir so how do i go about doing this <Directory /var/www/this dir has spaces> | 16:22 |
| sysdef | ls /var/www/this\ dir\ has\ spaces | 16:23 |
| sysdef | ls "/var/www/this dir has spaces" | 16:24 |
| zul | mathiaz: there is a new openldap sitting on MoM waiting for so summer lovin' | 16:28 |
| mathiaz | zul: right - IIRC the changelog is not so big | 16:29 |
| zul | man now I have that song in my head | 16:29 |
| mathiaz | zul: and there will be another upload with cn=config support | 16:29 |
| jordancason | thanks but that does not work within the diretory tab <Directory /var/www/this dir has spaces > </Directory> | 16:29 |
| mathiaz | zul: so there is no point in merging this version | 16:29 |
| zul | mathiaz: nifty | 16:30 |
| zul | also can we merge the bugs for openldap2.3 and openldap? | 16:30 |
| mathiaz | zul: yes - I started to work on that too | 16:32 |
| mathiaz | zul: all of the openldap2.2 (dapper) bugs have been done | 16:32 |
| zul | cool | 16:32 |
| mathiaz | zul: openldap2.3 may require to be copied (instead of moved) to openldap as it may still affect hardy | 16:32 |
| mathiaz | zul: OTOH some of them may be close for openldap2.3 as they won't be included in an SRU | 16:33 |
| kirkland | dendrobates: mathiaz: looks like we're going to need an open-iscsi udeb package for the installer | 16:49 |
| mathiaz | kirkland: isn't there such a package already ? | 16:49 |
| mathiaz | kirkland: I remember seing an entry in the changelog refering to a udeb | 16:50 |
| * kirkland checks | 16:50 | |
| kirkland | mathiaz: damn, you're right again :-) | 16:51 |
| === RoAk is now known as RoAkSoAx | ||
| kirkland | mathiaz: another question about lsb-base:status_of_proc() .... could that go into hardy-backports? another question from superm1 | 16:56 |
| mathiaz | kirkland: I don't think so - It doesn't really fit the SRU critiria | 16:56 |
| ogra | kirkland, -backports isnt really tied to the distro | 16:57 |
| mathiaz | kirkland: oh - -backports | 16:57 |
| ogra | so usually everything that builds can go in there | 16:57 |
| mathiaz | kirkland: yes - it can go there | 16:57 |
| mathiaz | kirkland: I'm not sure if it's worth doing it though | 16:58 |
| ogra | you would need the backports team to approve it ... ScottK is on that team afaik | 16:58 |
| kirkland | mathiaz: okay, thanks.... he was willing to take the init script patches for mythtv* only *IF* he could make it backport available | 16:58 |
| kirkland | ogra: cool, thanks for the pointer | 16:58 |
| mathiaz | kirkland: well - if he wants to do the -backport procedure, that's great | 16:58 |
| ScottK | kirkland: File a bug in hardy-backports (I assume we're discussing Hardy) and ping me. | 16:58 |
| kirkland | ScottK: yes, hardy, thanks, will do. | 16:59 |
| mathiaz | kirkland: I don't see why taking the init script patches in intrepid is tied to accepting a hardy backport | 16:59 |
| mathiaz | Koon: wrt to bug 253032 - you may wanna checkout the Gnome User Interface guide | 17:10 |
| uvirtbot | Launchpad bug 253032 in likewise-open "likewise-open-gui needs a better menu item name" [Low,Confirmed] https://launchpad.net/bugs/253032 | 17:10 |
| mathiaz | Koon: or one of the debian manuals - IIRC there is a section about naming entries in the menu | 17:11 |
| * delcoyote hi | 17:16 | |
| jmazaredo | are there like audit software for email to see what text, attachment, date it was sent server side | 17:21 |
| nandersson | Which is the best webmail found in Ubuntu main? Is squirrelmail the only way to go or is there a better solution? | 17:26 |
| jmazaredo | fastest and easy i think | 17:27 |
| jmazaredo | for noob like me ;) | 17:27 |
| Nafallo | nandersson: none? :-) | 17:29 |
| Nafallo | we don't have webmail in main | 17:29 |
| Nafallo | at least not as far as I'm aware. | 17:29 |
| nandersson | Nafallo, my bad - I meant in universe | 17:29 |
| nandersson | I've used Squirrelmail this far, but I wanted to know if there where any other options I was not aware about | 17:30 |
| Nafallo | nandersson: roundcube? | 17:30 |
| jmazaredo | can i log "all" things that happen mail server? including all messages and attachments that will be stored in a folder for future reference? | 17:30 |
| nandersson | Nafallo, That looked quite neat :) | 17:32 |
| Koon | mathiaz: ok, thx for the pointer | 17:32 |
| sommer | jdstrand: just pinged slangasek about kerberos_example auth-client-config profile, and this one worked great: http://paste.ubuntu.com/32255/ | 17:35 |
| sommer | jdstrand: a system user can have the same password as the kerberos principal and receive a ticket | 17:36 |
| sommer | jdstrand: and the ccreds work as well | 17:36 |
| eikke | does anyone happen to have a build of dovecot-antispam for x86_64? | 18:02 |
| eikke | or does anyone have a 64bit machine where it could be built? :) | 18:04 |
| gouki | Any ideas of an appliance to create a centralized address book with support to a web interface? (ldap powered) | 18:04 |
| ivoks | sommer: can i add some additional chapters to guide? | 18:18 |
| sommer | ivoks: absolutely | 18:19 |
| sommer | what did you have in mine? | 18:19 |
| sommer | er mind | 18:19 |
| ivoks | sommer: and, forgive me cause i'm clueless, how do i edit this files? :D | 18:20 |
| ivoks | redhat-cluster-suite | 18:20 |
| sommer | ivoks: mathiaz wrote up a great guide to getting started with the serverguide: https://wiki.ubuntu.com/ServerTeam/KnowledgeBase#head-0ae127e06ffba31c94b458fbef6eb033e5d8461e | 18:21 |
| sommer | basically the serverguide is DocBook xml files, so once you check them out of bzr you can edit them, then make a diff and send it to the doc ml | 18:22 |
| ivoks | right... with vim? :) | 18:22 |
| ivoks | i hate xml :/ | 18:22 |
| sommer | vim works, but the spelling didn't work so great for me so I switched to gedit | 18:23 |
| sommer | basically whatever your comfortable with | 18:23 |
| ivoks | ok, i tought i need some special editor | 18:23 |
| ivoks | like conglomerate | 18:23 |
| sommer | ya xml isn't the greatest, but there really isn't that many tags | 18:23 |
| ivoks | ok... i'll try and see how it goes | 18:24 |
| ivoks | thanks | 18:24 |
| sommer | ivoks: that's awesome, if you have any questions just let me know | 18:24 |
| arakthor | There are some messages appearing in message kern.log syslog that I don't understand - would anyone be able to take a quick peek at it? http://www.pastebin.ca/1087362 | 18:33 |
| jdstrand | sommer: awesome-- I'll update the file and push it out | 18:36 |
| jdstrand | sommer: thanks! :) | 18:36 |
| sommer | jdstrand: welcome, and thank you | 18:36 |
| sommer | auth-client-config is a great tool :) | 18:37 |
| jdstrand | sommer: glad you like it :) | 18:37 |
| jdstrand | sommer: are you using libpam-krb5 or libpam-heimdal (I assume the former) | 18:40 |
| jdstrand | ? | 18:40 |
| sommer | jdstrand: yes libpam-krb5 | 18:41 |
| sommer | since it's in main | 18:41 |
| sommer | or mit kerberos is in main | 18:41 |
| jdstrand | sommer: right-- I found it interesting that the options you used are all the same (the one in acc was actually tested with heimdal) | 18:44 |
| jdstrand | sommer: so it's good to know that it'll work either way :) | 18:45 |
| sommer | cool, I actually started with heimdal and it's somewhat easier to work with IMHO | 18:46 |
| sommer | mit isn't that bad though | 18:46 |
| sommer | jdstrand: so are you going to rename it from "kerberos_example" ? | 18:47 |
| jdstrand | sommer: well, I wasn't planning on it... I suppose I could. I'd like to see what happens with the 'uncomplicated directory services' stuff that's going on... | 18:48 |
| sommer | jdstrand: sure that makes sense, I was just thinking of the lac_ldap profile | 18:49 |
| jdstrand | sommer: yes-- but that is supplied by ldap-auth-config | 18:50 |
| sommer | I guess "example" kind of gives the impression that it may not work as you'd expect | 18:50 |
| sommer | either way, not a big deal | 18:50 |
| jdstrand | acc doesn't really dictate policy-- just a way to switch stuff around | 18:50 |
| jdstrand | sommer: I figure once the directory services is worked out, a profile could be provided be one of those packages | 18:51 |
| jdstrand | s/be/by/ | 18:51 |
| jonesy | score 1 for ubuntu-server. I just booted it for the first time ever and it doesn't launch a gui. | 18:51 |
| jonesy | ubuntu-server++ | 18:51 |
| sommer | jdstrand: so is 'uncomplicated directory services' going to be a utility like ufw? | 18:52 |
| sommer | jdstrand: or is it more of a project codename for all the ldap integration stuff | 18:52 |
| Fenix|work | Greetings | 18:52 |
| jonesy | I have some directory services ideas based on an Ubuntu talk I heard at oscon, but I'm not sure how far they'll get. | 18:52 |
| Fenix|work | I'm looking for a RAID driver for a PERC/CERC ATA100/4ch card | 18:52 |
| jdstrand | sommer: it was something soren coined-- it's not official or anything-- but it's all based on what we talked about at UDS | 18:53 |
| Fenix|work | lspci shows the card as :: RAID bus controller: American Megatrends Inc. MegaRAID (rev02) | 18:53 |
| Fenix|work | but megaraid doesn't work | 18:53 |
| Fenix|work | any suggestions (besides not using a Dell box) :) | 18:53 |
| jdstrand | sommer: basically, deploying a directory server should be as simple as a LAMP stack, and then make client configuration just as easy | 18:53 |
| sommer | jdstrand: awesome, I totally agree... I think that could be the 'killer app' for ubuntu server | 18:54 |
| sommer | or the app that becomes the reason to deploy an ubuntu server on your network | 18:54 |
| jdstrand | sommer: me too-- it's been a long time coming in the free software world | 18:55 |
| jonesy | jdstrand++ I'd love to see some kind of DS subsystem pre-installed. Admins new to it would be able to get up to speed if they had something preinstalled they could interact with and poke at. | 18:55 |
| jdstrand | there's a blueprint somewhere-- I think mathiaz is heading it up | 18:55 |
| jonesy | It should be in the installer next to "DNS Server" and "LAMP Server" | 18:56 |
| jonesy | this way you don't have it installed on every box -- just the one acting as the directory server. | 18:56 |
| jdstrand | jonesy: I think that's the plan, or at least a very similar experience | 18:56 |
| jonesy | that'd be nice. What's the DS philosophy in ubuntu? Is it strict kerberos/ldap, or can you say "I want NIS"? | 18:57 |
| * jonesy doesn't want nis, for the record | 18:57 | |
| jdstrand | jonesy: I'm most confident we won't have NIS, but I think the plan is to support ldap for both authorization and authentication, and also kerberos authentication with ldap authorization | 18:58 |
| jonesy | just so I understand, if ubuntu were to create, say, a stupid-easy interface for setting up and managing ldap services (perhaps even federated, remote servers), would that be submitted upstream for use by the rest of the open source community? | 18:58 |
| jdstrand | jonesy: it's all open source, so anyone can grub it and use it | 18:59 |
| jonesy | because I've used both openldap and FDS extensively, and I'd love to see an optional GUI on top of openldap while still maintaining the CLI interface. | 18:59 |
| jdstrand | grab it | 18:59 |
| jonesy | grab, grub, what's the difference, really. We're all digital hippies here. | 18:59 |
| jonesy | ;-P | 18:59 |
| jdstrand | jonesy: keep in mind, all this is in the planning stages with some backend work happening as well | 19:00 |
| jonesy | really? Where? Maybe some of my ideas can still be heard! | 19:00 |
| jdstrand | jonesy: but I believe the first steps are to get a good CLI experience, maybe with good integration with 'adduser' and friends | 19:00 |
| jonesy | yeah, that'd be nice too. | 19:01 |
| jdstrand | jonesy: then look at integrating some sort of gui-- I know the FDS frontend has been looked at, but don't know the status | 19:01 |
| jonesy | I've used it. I'm not a fan, really. | 19:01 |
| jdstrand | jonesy: IIRC, it's fairly tied to the FDS backend, but I haven't looked at it | 19:02 |
| jonesy | the features of it are actually nice, but it's all java, and so it's kinda flaky and slow (last I used it), and it was impossible to launch using, say, 'ssh -Y' | 19:02 |
| jdstrand | it may be able to be decoupled | 19:02 |
| jonesy | really? I thought it was going to use openldap! Interesting news! | 19:02 |
| jdstrand | jonesy: hence the 'good CLI experience' :) | 19:02 |
| jonesy | I'm agnostic. I hate the openldap community, but I like the tool, and I hate the FDS monstrosity, but love their community. | 19:03 |
| jdstrand | jonesy: I think you misunderstood | 19:03 |
| jdstrand | jonesy: Ubuntu will use openldap | 19:03 |
| jonesy | whoops | 19:03 |
| jonesy | oh | 19:03 |
| jdstrand | FDS gui is fairly tightly integrated with the FDS backend-- I was saying it might be possible to decouple it | 19:03 |
| jonesy | oh. | 19:03 |
| jonesy | wow. | 19:04 |
| jdstrand | but I am only on the periphery of these discussions, so I may not have the most up to date information :) | 19:04 |
| jonesy | Might be easier to write a new one, to be honest. The GUI in FDS, iirc, is integrated not only with the "backend" (a nebulous concept in FDS by itself), but also the web-based org trees and some other stuff. | 19:04 |
| jonesy | it also uses the mozilla certdb rather than simple flat files referenced in the config like in openldap | 19:05 |
| jonesy | and... did I mention it's java, and slow and flaky? ;-P | 19:05 |
| jdstrand | like, I said, it was looked at as on option-- so was developing a gui | 19:05 |
| jonesy | no offense to java gui developers. | 19:05 |
| jonesy | gotcha | 19:06 |
| jdstrand | I don't think any decisions have been made on that front | 19:06 |
| jonesy | can I join some list or chan about this stuff? | 19:06 |
| jdstrand | jonesy: have you participated in the ubuntu-server meetings? | 19:06 |
| jonesy | no, I'm completely new to ubuntu-server, though not unix/linux. | 19:06 |
| jonesy | I heard some things that got me interested at oscon. | 19:06 |
| jdstrand | jonesy: the mailing list is ubuntu-server (https://lists.ubuntu.com/) | 19:07 |
| jonesy | ...where the linux track should've really just been called the ubuntu track. | 19:07 |
| jdstrand | jonesy: I recommend you look at https://wiki.ubuntu.com/ServerTeam | 19:07 |
| jonesy | oh, ok. I thought all this stuff would be a subproject with its own list. I'll join the ubuntu-server list. Thanks. | 19:07 |
| jonesy | I believe I looked at that, but will look again. | 19:07 |
| jdstrand | there's all kinds of info, including the next meeting and agenda | 19:08 |
| jonesy | yeah, this is not what I saw. Reading now. | 19:09 |
| jonesy | thanks | 19:09 |
| jdstrand | np | 19:09 |
| jonesy | what does "ubuntu server team LP" mean? | 19:09 |
| jonesy | from here --> https://wiki.ubuntu.com/ServerTeam/GettingInvolved | 19:10 |
| sommer | jonesy: that's the ubuntu server Launch Pad team | 19:10 |
| jonesy | acronyms should be defined before use. My $.02 | 19:10 |
| jonesy | thanks! | 19:10 |
| jonesy | er... I'll figure out what that is later I guess. | 19:10 |
| jonesy | ;-P | 19:10 |
| * EtienneG grumble | 19:12 | |
| EtienneG | is there a public bug tracker for Likewise Open? I mean, the project, not the Ubuntu package | 19:13 |
| EtienneG | I also cannot seem to find the changelog for 4.1.0 (I would hate to report bugs to LP that are fixed upstream already) | 19:13 |
| EtienneG | and while i am there ... do they have a public IRC channel somewhere? | 19:14 |
| ScottK | I think it's got a separate project in Launchpad, but I'm not certain. | 19:14 |
| EtienneG | ScottK, LP says: 0 projects found matching “likewise” | 19:15 |
| EtienneG | :( | 19:15 |
| ScottK | So either it's not there or Launchpad search is buggy. | 19:16 |
| ScottK | Not sure which is more likely. | 19:16 |
| EtienneG | how dare you suggest Launchpad is BUGGY!!!11 | 19:16 |
| * EtienneG is just joking | 19:16 | |
| ScottK | I do it routinely. | 19:16 |
| EtienneG | ho well, I will report my bugs against the Ubuntu package then | 19:17 |
| jdstrand | sommer: committed your profile to bzr, will upload package soonish | 19:19 |
| EtienneG | #253394 | 19:20 |
| sommer | jdstrand: coolness | 19:20 |
| EtienneG | shortest bug report evar | 19:20 |
| mathiaz | EtienneG: http://lobugs.likewisesoftware.com/ | 19:23 |
| mathiaz | EtienneG: ^^ upstream likewise-open bugzilla | 19:23 |
| EtienneG | mathiaz, thanks a bunch, matey | 19:23 |
| lukehasnoname | bug #253394 | 19:23 |
| uvirtbot | Launchpad bug 253394 in likewise-open "Typo in Likewise Open GUI (misspelled "privileges")" [Undecided,New] https://launchpad.net/bugs/253394 | 19:23 |
| EtienneG | mathiaz, would they have a code repository somewhere by any chance (so we can browse code and see history) ? | 19:24 |
| mathiaz | EtienneG: I think they're using git - but I don't know if they have an public repository | 19:24 |
| EtienneG | git? sacrilege! | 19:25 |
| EtienneG | too bad, they have an annoying form to enter to download lw-open from their web site | 19:25 |
| ScottK | No, git, used places other than Ubuntu. | 19:25 |
| ScottK | I know bazaar is used other places than Ubuntu, just none that I've ever encountered personally. | 19:26 |
| uvirtbot | New bug: #253394 in likewise-open (main) "Typo in Likewise Open GUI (misspelled "privileges")" [Undecided,New] https://launchpad.net/bugs/253394 | 19:26 |
| sommer | ScottK: I'll bet that may increas once LP is open sourced :) | 19:26 |
| EtienneG | I guess I will have fill the form ... | 19:26 |
| sommer | didn't mysql switch to bzr? | 19:26 |
| EtienneG | ScottK, again, I was just joking (i love playing the zealot on the intarweb) | 19:27 |
| EtienneG | sommer, right, they did | 19:27 |
| EtienneG | and it is a fairly huge codebase at that | 19:27 |
| EtienneG | gosh, i hate bugzilla | 19:28 |
| jonesy | me too | 19:28 |
| jonesy | I wish it would die. | 19:28 |
| ScottK | I'll be sacraligeous and say I like it better than Launchpad. | 19:29 |
| ScottK | At least it supports basic functions like having bugs block other bugs. | 19:29 |
| jonesy | mathiaz: you're doing the openldap cn=config migration and user/group DIT? | 19:29 |
| jonesy | launchpad is a little confusing. Is there some link I'm missing to get from a blueprint to the defined tasks to make them reality, so you can see which tasks aren't assigned, and then use that to figure out where one might fit in? | 19:32 |
| ScottK | jonesy: I don't think such a thing exists. | 19:34 |
| jonesy | ok, thanks. Not surprising. I find that all of the tools similar to this have problems integrating with.... themselves :) | 19:34 |
| jonesy | so, is there another tool, or some place I can figure out what tasks have been defined for a blueprint so I can figure out how to help out (if I can)? | 19:35 |
| ScottK | jonesy: Generally they are written in the spec or on the associated wiki page if anywhere. | 19:36 |
| jonesy | clearly projects can't just fall from the ether complete with team members. | 19:36 |
| jonesy | ok, I guess I'll sift. I'm really surprised that this isn't easier given Ubuntu's success at attracting new developers. | 19:36 |
| ScottK | jonesy: Here's an example of one (that happens to need help) https://wiki.ubuntu.com/ClamavSpamassassinInMain | 19:36 |
| kirkland | mathiaz: hey, can you help me get open-iscsi into the server installer seed? | 19:37 |
| kirkland | mathiaz: or point me in the right direction? | 19:37 |
| mathiaz | kirkland: hm - I can point you to #ubuntu-installer | 19:38 |
| mathiaz | kirkland: I'm not sure exactly what you want to do | 19:38 |
| mathiaz | jonesy: yes | 19:38 |
| kirkland | mathiaz: okay, thanks, i'm there. | 19:38 |
| ScottK | Do we have an explicit server seed yet? | 19:38 |
| mathiaz | kirkland: I guess you want to make sure that the deb and udeb are on the cd | 19:39 |
| mathiaz | kirkland: to do that I can help | 19:39 |
| kirkland | mathiaz: yes, that's what i need | 19:39 |
| mathiaz | kirkland: it's a matter of adding the deb to the server-ship seed | 19:39 |
| jonesy | mathiaz: well, I'd love to help out, so if there's something I should do or a link besides the blueprints I should see, let me know. The problem is one that interests me, but I don't have a PHd in Launchpad. | 19:39 |
| kirkland | mathiaz: cool, pointers? | 19:39 |
| ScottK | jonesy: The MIR work needed for the spec I linked you is a good way to learn some things about package and how Ubuntu works. If you're interested, I can help you. | 19:41 |
| mathiaz | kirkland: https://wiki.ubuntu.com/SeedManagement | 19:41 |
| mathiaz | kirkland: there is a section about changing the seeds | 19:41 |
| kirkland | mathiaz: thanks, i'll go read | 19:41 |
| jonesy | ScottK: clamav and spamassassin are really both outside my area of expertise. I only have an end-user familiarity with spamassassin, and have never touched clamav. In general, the further away from email I can be, the better (where servers are concerned). | 19:42 |
| mathiaz | kirkland: and the bzr branch you're looking at is https://code.launchpad.net/~ubuntu-core-dev/ubuntu-seeds/ubuntu.intrepid | 19:42 |
| jonesy | no offense, of course. | 19:42 |
| mathiaz | kirkland: probably the server-ship file | 19:43 |
| mathiaz | jonesy: great - I'm about to upload a new package with cn=config migration code enabled - once there I'll send out a call for testing | 19:43 |
| mathiaz | jonesy: probably on the ubuntu-server mailing list and the ubuntuserver blog | 19:44 |
| jonesy | ok, thanks | 19:44 |
| ScottK | jonesy: Know anything about Perl? | 19:44 |
| jonesy | so, it's just a one-man dev team? | 19:44 |
| ScottK | Most of the stuff needs doing in perl packages. | 19:44 |
| jonesy | ScottK: yes. Plenty. It's the reason I use Python! ;-P | 19:44 |
| ScottK | ;-) | 19:44 |
| jonesy | but seriously, I've been doing admin stuff for like 10+ years, and used perl up until about a year or so ago | 19:45 |
| jonesy | then I created Python Magazine. It's all downhill from there. | 19:45 |
| jonesy | ;-P | 19:45 |
| ScottK | If you're interested in learning more about how Perl is packaged in Debian/Ubuntu, some of the SpamAssassin related MIR could be interesting. | 19:45 |
| ScottK | If not, then not so much. | 19:46 |
| === servidorespillo is now known as servidorespillo[ | ||
| jonesy | it's just not an area I have much interest in, to be honest. But if all I can do to contribute to the DS-related stuff is test, I might ping you later :) | 19:47 |
| ScottK | OK. | 19:47 |
| jonesy | I'm sure I just don't understand the development process in use at ubuntu-server. Is there some high-level description of the flow somewhere? | 19:48 |
| ScottK | Probably. | 19:48 |
| ScottK | Not sure where. | 19:48 |
| jonesy | I'm kinda used to just downloading a package, seeing b0rk3dness, fixing it, submitting a patch... this is a whole distro though :) | 19:48 |
| ScottK | Right. | 19:48 |
| jonesy | maybe I can work on something called "making it stupid-easy for new developers to be productive quickly" | 19:49 |
| jonesy | it could probably be a wiki page, if it isn't already. | 19:49 |
| ScottK | The basic idea is: Have a developer summit (UDS) - 1 week face to face make a plan, write specs to document the bits of the plan, get them approved, go implement, test, release. | 19:49 |
| mathiaz | jonesy: well - it works the same way - you download a package, come across a bug, fix it and submit a patch | 19:49 |
| jonesy | oh | 19:49 |
| jonesy | does the same go for new features? | 19:50 |
| mathiaz | jonesy: you may wanna check out https://wiki.ubuntu.com/MOTU/GettingStarted | 19:50 |
| ScottK | Features it depends. You can write a spec and get it approved (you don't actually have to go to UDS). | 19:50 |
| mathiaz | jonesy: and https://wiki.ubuntu.com/UbuntuDevelopers for a better understanding of how the dev community is structured | 19:50 |
| Koon | EtienneG: LW git tree : http://git.likewisesoftware.com/?p=likewise-open.git | 19:51 |
| ScottK | In general, particularly once you are a developer, if you can do it yourself, you can just do it. | 19:51 |
| Koon | EtienneG: also you can download sources at http://archives.likewisesoftware.com/likewise-open/src/ | 19:52 |
| EtienneG | Koon, thanks a lot, I got the released source tarball | 19:55 |
| EtienneG | but i will sure keep the git tree URL handy for future reference | 19:55 |
| Koon | EtienneG: you're welcome. Their "community" pages aren't so good as pointers for useful info. | 19:56 |
| Fenix|work | Greetings... I need some help in transposing CentOS package names unto Ubuntu names | 20:29 |
| Fenix|work | anyone willing to give it a try? | 20:29 |
| Fenix|work | httpd-devel, apr-devel and apr-util-devel | 20:29 |
| kirkland | Fenix|work: httpd -> apache2 | 20:29 |
| Fenix|work | expat-devel, krb5-devel, mysql-devel rpm-devel | 20:29 |
| kirkland | zul: you still around? | 20:30 |
| Fenix|work | what about the apr stuff? | 20:31 |
| kirkland | Fenix|work: apt-cache search apr | grep dev | 20:31 |
| kirkland | libapr1-dev - The Apache Portable Runtime Library - Development Headers | 20:31 |
| Fenix|work | yeah, just remembered cache :) | 20:31 |
| kirkland | mathiaz: http://bazaar.launchpad.net/~kirkland/ubuntu-seeds/ubuntu-seeds.intrepid-iscsi/revision/1304 | 20:33 |
| kirkland | mathiaz: can you merge that into the server-ship seed? | 20:33 |
| kirkland | zul: perhaps you could merge that server-ship seed addition for me? | 20:36 |
| backenfutter | hey folks... could somebody tell me why this .htaccess just won let me login? I played around with it a bit, but just wont work... http://paste.ubuntuusers.de/391053/ | 20:37 |
| kirkland | backenfutter: perms on /var/secret/.htusers | 20:38 |
| kirkland | ? | 20:38 |
| backenfutter | 644 root:root | 20:39 |
| backenfutter | 755? | 20:39 |
| zul | kirkland: who do what now? | 20:39 |
| backenfutter | kirkland: god damn... that was it... thx so much kirkland | 20:40 |
| backenfutter | got it | 20:40 |
| backenfutter | 755 brainiac:www-data | 20:40 |
| zul | merge the open-iscsi into the seed? | 20:40 |
| zul | chuck@krusty:~/work/server/seeds/ubuntu.intrepid$ grep iscsi * | 20:42 |
| zul | server-ship: * open-iscsi # ChuckShort | 20:42 |
| zul | server-ship: * open-iscsi-udeb # SorenHansen | 20:42 |
| kirkland | zul: hmm | 20:43 |
| zul | kirkland: what problem are you having? | 20:44 |
| kirkland | zul: hmm, let me start an install from scratch | 20:45 |
| kirkland | zul: look at that.... | 20:47 |
| kirkland | zul: okay, yeah, that worked now.... anna-install open-iscsi-udeb | 20:47 |
| kirkland | zul: i was missing the -udeb | 20:48 |
| zul | kirkland: ah | 20:48 |
| zul | bbiab | 20:48 |
| ivoks | kirkland: ping | 20:58 |
| ivoks | ah, never mind :) | 20:59 |
| kirkland | jdstrand: kees: either of you guys (or anyone else) an "nc" expert? | 23:23 |
| kirkland | actually, i don't really even need an expert.... | 23:23 |
| kirkland | how can i use it to see if a given ip/port is open on a remote machine | 23:23 |
| kees | kirkland: simplest way would be with nc -v -v -v HOST PORT. if it connects, it's open. | 23:24 |
| kirkland | kees: thx | 23:24 |
| kees | kirkland: np | 23:24 |
| kirkland | kees: hmm, no -v option in the busybox nc ;-) | 23:25 |
| kees | heh -- dunno if you're limited to busy box. check the klibc toolset? | 23:26 |
| kirkland | kees: i'm in the installer shell | 23:26 |
| kees | kirkland: iscsi madness? | 23:27 |
| kirkland | kees: yeah, i'm getting an ECONNREFUSED | 23:27 |
| kees | then it's not listening. ;) | 23:27 |
| kirkland | kees: i'm wondering if the tcp stack in the installer is incomplete? | 23:27 |
| kirkland | kees: but it is listening, at least from other clients | 23:28 |
| kees | kirkland: what's returning ECONNREFUSED? | 23:28 |
| kirkland | kees: at first, iscsiadm, but now, also nc -p 3260 192.168.122.34 | 23:28 |
| juris | using 8.04 server edition. after apt-get upgrade it seems to upgrade kernel and after restart I have kernel panic. any solution? thanks :) | 23:29 |
| kirkland | kees: it appears that the machine in the installer has IP address 192.168.122.254... I wonder if that would present a problem somehow as a client? | 23:29 |
| kees | juris: that's a pretty broad problem. anyone helping to solve that would need to know specifically what the panic reported, then check for bug reports, etc. | 23:29 |
| kirkland | that's not a reserved IP, as far as I'm aware | 23:30 |
| kees | kirkland: you sure you want -p ? that's usally the local port not remote port. | 23:30 |
| juris | how can I give You more information? What logs should I give? Do i have write all what I see in boot screen? Can I get back my old kernel? :) | 23:31 |
| kirkland | kees: okay, good call, now: "nc 192.168.122.34 3260", just sort of hangs, like it's listening, rather than throwing ECONNREFUSED | 23:32 |
| kees | kirkland: what's returning ECONNREFUSED?https://wiki.ubuntu.com/DebuggingKernelOops | 23:32 |
| kees | kirkland: right, it was trying to connect on the telnet port. :) | 23:32 |
| kees | juris: I personally probably can't help. I was just saying in generally, if someone can help, they'll need a lot more information. See https://wiki.ubuntu.com/DebuggingKernelOops | 23:33 |
| kirkland | kees: 3260 is a telnet port? | 23:33 |
| kirkland | kees: i thought that's an iscsi port | 23:33 |
| kees | kirkland: no, you did'nt specify a port, so nc used 23. (3260 was the _local_ port) | 23:33 |
| juris | thanks for link! | 23:33 |
| kirkland | kees: connect(3, .....) is returning -1, ECONNREFUSED | 23:33 |
| kirkland | kees: according to the strace | 23:34 |
| kees | kirkland: right, sorry, I had accidentally scrolled up while pasting the debug link | 23:34 |
| kirkland | kees: so I have two different vm's.... one a running intrepid instance, the other, in a shell in the installer | 23:35 |
| kees | kirkland: okay | 23:35 |
| kirkland | kees: the full os intrepid can lists the iscsi shares just fine | 23:35 |
| kirkland | kees: the installer one gets the ECONNREFUSED | 23:35 |
| kirkland | kees: i'm looking at each one's strace output | 23:35 |
| kees | what is the command that does the iscsi share-looking? | 23:36 |
| kirkland | kees: iscsiadm -m discovery -t st -p IP_OF_ISCSI_TARGET | 23:36 |
| kees | compare ifconfig -a output? maybe network mask is hosed? | 23:37 |
| kirkland | kees: no ifconfig in the installer ;-) | 23:38 |
| kirkland | kees: and I don't see a udeb for net-tools | 23:38 |
| juris | OK. It seems it is big problem to debug kernel oops for average Ubuntu users but I am newbie. Can I just use previous kernel? I installed Ubuntu yesterday but I have already configured Virtualmin and uploaded files and I don't want to start from ebginning? I burned fresh .iso file 2 days ago. | 23:38 |
| kees | juris: when you boot, grub should give you the option of several kernels. | 23:39 |
| juris | LILO :P | 23:39 |
| juris | I can't select kernel... | 23:39 |
| juris | LILO autoamticaly launches this bad kernel | 23:40 |
| kees | lilo? that's not a very standard install :) | 23:40 |
| kirkland | juris: i'd say grub would be recommended for a self-proclaimed 'newbie' :-) | 23:40 |
| juris | Yes, I knew but I have some trouble in GRUB and I don''t know how to delete this... I have maaany kernels in it because of this kernel oops | 23:41 |
| juris | I figured to install lilo and it was fine for some hours :) | 23:41 |
| kees | juris: I would recommend installing grub. | 23:42 |
| juris | apt-get install grub? | 23:42 |
| kees | juris: if this is an otherwise stock machine, sudo grub-install; sudo update-grub should work. however, I can't promise anything, so be careful. | 23:42 |
| kees | juris: you should see your available kernels in /boot/vmlinuz* | 23:43 |
| juris | I use Windows XP now :D I have only 1 SATA cable and I need to turn off computer to boot in linux (recovery mode?) maybe You think it's little bit strange but i wiil use this server in data center but I will keep one Hard Disk for my new home PC. Do I need to install Other Ubuntu? | 23:46 |
| juris | Maybe there is Live CD to fix GRUB? | 23:48 |
| juris | small, simple live cd for me :) | 23:48 |
| kirkland | kees: funny thing is that i can ping the same host | 23:49 |
| kirkland | kees: makes me think it's a problem in the tcp stack | 23:50 |
| kees | juris: I really don't know what to say -- you have a very unusual configuration. perhaps use the Launchpad Answers section? | 23:50 |
| kees | kirkland: the kernel is the kernel so probably not the stack. I would guess misconfigured network settings. Does the "ip" command exist? | 23:50 |
| kirkland | kees: yeah | 23:50 |
| kirkland | kees: i'm looking at the busybox manpage now for "ip" info | 23:51 |
| kees | kirkland: ip addr show | 23:51 |
| kirkland | kees: inet 192.168.122.254/24 brd 192.168.122.255 scope global eth0 | 23:52 |
| kees | kirkland: and that matches the other vm? | 23:53 |
| kirkland | kees: the other vm has a "LOWER_UP" flag | 23:54 |
| kirkland | kees: and an inet6 stack, but otherwise, okay | 23:54 |
| kees | try other stuff to the target machine, like starting a "nc -l -p 8080 -v -v -v" and seeing if you can connect to it, etc. | 23:55 |
| juris | Yes, my situation is little bit strange. Google have many links to "fix GRUB" :) It's late. I better go to bed now :D | 23:57 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!