| emgent | kirkland: ok ecryptfs sounds good, the only problem in ubuntu is if the X user change system password, true ? | 01:06 |
|---|---|---|
| kirkland | emgent: nope | 01:07 |
| kirkland | cat /etc/pam.d/common-password | 01:07 |
| emgent | oh true.. | 01:07 |
| kirkland | emgent: ;-) | 01:07 |
| emgent | password optionalpam_ecryptfs.so | 01:07 |
| emgent | hahah it`s perfect :) | 01:07 |
| kirkland | emgent: however, it is currently not very easy to change the underlying mount passphrase | 01:07 |
| kirkland | emgent: you'd have to mount two different directories, one with the existing data and existing password | 01:08 |
| kirkland | emgent: and a second one with the new password | 01:08 |
| kirkland | emgent: and copy the data from the old to the new | 01:08 |
| kirkland | emgent: and then remove the old | 01:08 |
| emgent | nods nods | 01:08 |
| kirkland | emgent: that's not ideal.... | 01:08 |
| kirkland | emgent: but that's low on the priority list | 01:08 |
| emgent | ok understand. nice :) | 01:11 |
| tacone | hello, is there any standard location to store ssl certs to be used with apache2+ssl ? | 02:21 |
| nxvl | tacone: https://help.ubuntu.com/8.04/serverguide/C/index.html | 02:23 |
| ScottK | lamont: Thanks. I'm back online now. | 02:24 |
| nxvl | ScottK: you haven't been here all day? | 02:24 |
| tacone | nxvl: what specifically ? etc/ssl ? | 02:24 |
| nxvl | tacone: https://help.ubuntu.com/8.04/serverguide/C/httpd.html | 02:24 |
| ScottK | nxvl: Nope. Left about 14 hours ago. | 02:25 |
| nxvl | at the bottom of the guide | 02:25 |
| tacone | nxvl: I am already there. | 02:25 |
| tacone | nxvl: is there any policy I can read ? would subdirectories tollerated for /etc/ssl ? | 02:25 |
| nxvl | tacone: not that i know, but that's the official ubuntu server guide | 02:25 |
| nxvl | ScottK: mmm enought time to don't know about what i was asking | 02:26 |
| nxvl | ScottK: i will wait until you get to it | 02:26 |
| nxvl | :D | 02:26 |
| tacone | nxvl: I am asking because we are putting in place a wizard to set SSL certs on apache2 in our software. that's why I need feedback on which solution would be optimal | 02:27 |
| nxvl | tacone: that's what i thought | 02:28 |
| tacone | ok | 02:28 |
| nxvl | tacone: i would find a good way to do it putting them into private/ and certs/ naming the certificates with the hostname or some part of it | 02:29 |
| tacone | nxvl: the help page miss an useful information. I'd add it but seems non-editable | 02:29 |
| nxvl | tacone: talk to sommer | 02:30 |
| nxvl | tacone: he's our documentation leader | 02:30 |
| tacone | nxvl: do you have his email ? | 02:31 |
| nxvl | sommer: ping | 02:31 |
| nxvl | tacone: https://edge.launchpad.net/~asommer | 02:31 |
| ScottK | Yeah! Only 280 new emails since I was last at my desk. | 02:32 |
| ScottK | Almost forgot ... | 02:34 |
| nxvl | ScottK: i can't imagine dholbach's inbox after his 3 week holidays | 02:34 |
| ScottK | nxvl: Congratulations. | 02:34 |
| nxvl | ScottK: thank you! | 02:34 |
| nxvl | you get into it! | 02:34 |
| nxvl | :D | 02:34 |
| nxvl | got* | 02:34 |
| tacone | thanks nxvl, ~sommer doesn't seemed to be the right username :) | 02:35 |
| sommer | nxvl: yo | 02:39 |
| * sommer reading backlog | 02:39 | |
| sommer | tacone: you wanted to add something to the docs? | 02:40 |
| tacone | yes | 02:41 |
| tacone | I was about to write you a mail | 02:41 |
| tacone | there's a missing note for ssl config. | 02:41 |
| sommer | for apache? | 02:42 |
| tacone | https://help.ubuntu.com/8.04/serverguide/C/httpd.html | 02:42 |
| sommer | what's missing? | 02:43 |
| tacone | you need to convert NameVirtualHost to *.80 (not just *) and then convert any <virtualhost> to use port 80. | 02:43 |
| tacone | surprisingly seems like even the default config (no user defined vhosts around) won't work with that. | 02:43 |
| sommer | ah, ya that section needs some other updates... I'll add something about that | 02:44 |
| tacone | sommer: that's valid only for hardy, not intrepid. intrepid shuold just work (haven't tried, but they seem to have adjusted) | 02:44 |
| tacone | ok thanks | 02:44 |
| sommer | tacone: ya, intrepid should have ssl by default | 02:44 |
| sommer | tacone: thank you | 02:44 |
| tacone | np | 02:45 |
| === PrivateVoid_ is now known as PrivateVoid | ||
| abaqueiro | hello, I have this problem: I installed Ubuntu Server for sparc, I have 2 disk (hda, hdd) both with four partitions, the partitions 1º are only unused 8 Mb partitions, the partitions 2º are about 512 Mb, and I created a Raid1 device for the swap, the partitions 4º about 19Gb in both disk are for a RAID1 device, wich contain a ext3 filesystem (including /boot), ubuntu instalation was ok, until the instalation of silo, where it says there was an | 05:12 |
| abaqueiro | [S] instead of the [U_] that I expected | 05:12 |
| abaqueiro | in the boot messages it says something about md0 stopped and md1 stopped and something about bind hda4 | 05:13 |
| abaqueiro | does anyone have and idea what can be happening??? | 05:17 |
| joebob777as7 | i'm having some pretty poor network performance can someone give me a hand? it's about 1/10th the speed it runs in vista... | 05:47 |
| abaqueiro | wireless? | 05:49 |
| joebob777as7 | sending a 3GB file only runs between 2 and 5mbps... and on vista it's over 20mbps | 05:49 |
| joebob777as7 | abaqueiro, wired | 05:49 |
| joebob777as7 | abaqueiro, i'm trying to stream some movies and they aren't working :( | 05:51 |
| abaqueiro | could be the wireless driver, or the protocol you are using to transfer the movies | 05:51 |
| joebob777as7 | abaqueiro, it's wired | 05:52 |
| joebob777as7 | samba | 05:52 |
| jmedina | joebob777as7: check the mode | 05:52 |
| jmedina | ethtool eth0 | 05:52 |
| jmedina | for example | 05:52 |
| joebob777as7 | jmedina, http://pastebin.ca/1172438 | 05:53 |
| joebob777as7 | jmedina, peaks at about 6 mbps | 05:54 |
| jmedina | it is Half | 05:54 |
| jmedina | # | 05:54 |
| jmedina | Speed: 100Mb/s | 05:54 |
| jmedina | # | 05:54 |
| jmedina | Duplex: Half | 05:54 |
| joebob777as7 | jmedina, how can I make it full? | 05:54 |
| jmedina | try to change it to full | 05:55 |
| jmedina | man ethtool | 05:55 |
| jmedina | dont remember the param, but it is in the manpage | 05:55 |
| joebob777as7 | jmedina, will it interrupt my transfer if I try it now? | 05:56 |
| jmedina | joebob777as7: :S | 05:58 |
| joebob777as7 | jmedina, so I ran this: sudo ethtool -s eth1 duplex full speed 1000 | 06:00 |
| joebob777as7 | and it is still half... :( | 06:00 |
| jmedina | mmm what about the other side? | 06:00 |
| jmedina | is there more hosts? | 06:00 |
| jmedina | are | 06:00 |
| joebob777as7 | the other side is fine it's been tested in vista... | 06:01 |
| jmedina | full speed 1000? | 06:01 |
| joebob777as7 | jmedina, well no it's only 100 but full 100 | 06:01 |
| jmedina | but did you type 1000 in the prompt? | 06:02 |
| joebob777as7 | yes | 06:02 |
| joebob777as7 | do I need to set it while it's running? | 06:02 |
| joebob777as7 | or before I start the transfer? | 06:04 |
| jmedina | not sure | 06:04 |
| jmedina | its been a long time since I used | 06:04 |
| joebob777as7 | jmedina, ok thx for pointing me in the right direction. | 06:06 |
| jmedina | you can also try with mii-tool | 06:07 |
| jmedina | joebob777as7: try this | 06:12 |
| jmedina | ethtool -s eth0 speed 100 duplex full autoneg off | 06:12 |
| kraut | moin | 09:16 |
| mdz | I'm seeing an apparent deadlock between mutt and dovecot on Intrepid, which was working great until recently | 11:42 |
| mdz | mutt is blocked reading from dovecot, and dovecot is just polling waiting for something to happen | 11:42 |
| mdz | neither of them has changed recently, though | 11:42 |
| mok0 | mdz: ... rebooting doesn't help? | 11:43 |
| mdz | mok0: I haven't tried rebooting, why? | 11:43 |
| mdz | disconnecting from dovecot and reconnecting gets it working again for a while, then it gets stuck again | 11:44 |
| mok0 | Because it would remove zombie processes, dead socket files etc | 11:44 |
| mok0 | mdz: is dovecot running on a remote server? | 11:44 |
| mdz | mok0: no, locally via a pipe (mutt's "set tunnel") | 11:44 |
| mdz | and dovecot --exec-mail imap | 11:45 |
| mok0 | Hmm | 11:45 |
| mdz | I'm going to try to get a trace of the imap conversation and see what's going wrong | 11:46 |
| mok0 | I stopped using mutt when we introduced dovecot... | 11:46 |
| mok0 | mutt sucks at imap | 11:46 |
| mdz | mok0: what did you switch to? | 11:46 |
| mok0 | kmail | 11:46 |
| mdz | it does a bit | 11:46 |
| ivoks | mok0: fetch your mail with fetchmail then :) | 11:46 |
| mok0 | I used thunderbird for a while, but I prefer kmail | 11:46 |
| mdz | it's very good at a number of other things, though | 11:46 |
| mdz | I'm told thunderbird has good keyboard navigation now | 11:47 |
| mok0 | ivoks: I'm not that enamoured with mutt. I used it when I needed a local mail reader on the mail host. | 11:47 |
| ivoks | as for GUI clients, claws just rules all of them | 11:48 |
| mok0 | ivoks: I run kubuntu, don't like the looks of GTK | 11:48 |
| mok0 | anyways, we're getting OT | 11:49 |
| ivoks | right | 11:49 |
| ivoks | mdz: have you tried with other clients? | 11:50 |
| ivoks | telneting to port 143 would be enough... | 11:50 |
| mdz | ivoks: I have run dovecot --exec-imap locally, and it talks to me | 11:51 |
| mdz | it talks to mutt, too, until it goes bad | 11:51 |
| mdz | it gets hung up immediately after mutt has saved a message to my sent folder | 11:51 |
| mdz | mutt blocks there and never actually gives the message to sendmail to send it out | 11:51 |
| mdz | I sent probably 50 messages through this same setup yesterday | 11:51 |
| ivoks | sent folder is imap folder or local folder? | 11:53 |
| mdz | ivoks: imap | 11:54 |
| ivoks | you don't have access to dovecot's logs? | 11:56 |
| ivoks | or even better, dovecot's configuration... it can provide very nice debuging logs | 11:57 |
| zul | morning | 12:40 |
| foolano | hi there | 12:41 |
| michaelmon | hi guys! need help on this. were you able to set up raid 0 on three disks? | 13:14 |
| michaelmon | thanks a lot! | 13:14 |
| _ruben | raid0 .. yuck! | 13:46 |
| === ahasenack is now known as ahasenack-flying | ||
| Gothfunc | hi. how do i make files and dirs created inherit the parent dir's group and permissions? | 14:11 |
| sommer | Gothfunc: I believe the umask command may be what you're looking for | 14:13 |
| sommer | Gothfunc: http://www.lockergnome.com/linux/2002/08/29/the-users-mask/ may be of help | 14:14 |
| Gothfunc | i have that command in mind, but it seems to only affect the shell session. reading the link now | 14:15 |
| Gothfunc | sommer: if i wanted to apply that to any session for any user, how might i do that? | 14:17 |
| sommer | Gothfunc: I think if you change the setting in /etc/skel/.profile it will be set for each session | 14:17 |
| Gothfunc | gotcha | 14:17 |
| * Gothfunc looks | 14:17 | |
| sommer | Gothfunc: at least there's an entry at the top :) | 14:17 |
| Gothfunc | awesome, thanks sommer :) | 14:18 |
| sommer | Gothfunc: np, it actually mentions the /etc/profile, you might want to take a look at that as weel | 14:19 |
| sommer | /weel/well/g | 14:19 |
| Gothfunc | ok | 14:20 |
| Gothfunc | ok that works, with /etc/profile | 14:23 |
| Gothfunc | but still lacking group inheritance | 14:23 |
| Gothfunc | (with directories that are actually g+s) | 14:24 |
| Gothfunc | it just assigns the group equal to the user | 14:24 |
| Gothfunc | gothfunc/gothfunc | 14:24 |
| Gothfunc | nevermind, got it | 14:26 |
| Gothfunc | :P | 14:26 |
| === ahasenack-flying is now known as ahasenack | ||
| juannicolas | Hi, i don't know if my problems actually is ubuntu or my proftpd server, I need to transfer files that are more than 2 gigs and it would not let me. | 15:00 |
| _ruben | juannicolas: could be a filesystem problem | 15:13 |
| _ruben | but proftpd might be the prob too, if its not compiled with large file support | 15:14 |
| juannicolas | _ruben Im trying to transfer files more than 2 gig size between mandrake to ubuntu | 15:14 |
| uvirtbot` | New bug: #258162 in postfix (main) "Postfix local privilege escalation via hardlinked symlinks" [Undecided,New] https://launchpad.net/bugs/258162 | 15:39 |
| lamont | I love people filing bugs that are fixed. or have we not quite published it for -security, I wonder | 15:41 |
| zul | lamont: its so much fun | 15:43 |
| ScottK | lamont: I commented to that effect | 15:45 |
| zul | lamont: kees is at debconf and jamie is on vacation afaik pitti is handling security | 15:47 |
| * lamont smacks it into fix committed status with a comment | 15:48 | |
| ScottK | lamont: We have not quite published it. | 15:48 |
| lamont | that's why it's committed, not released | 15:48 |
| ScottK | Right, I typed that before I saw your last comment. | 15:49 |
| ekimus | anyone already running slapd with a cn=config backend? I'm right now playing around with it (spare box was an etch and I didn't care to reinstall) but I'm having quite some problems but I'm not sure wether it's the ldap browser (apache directory studio) or wether it's indeed slapd. | 16:18 |
| sommer | ekimus: I've started the documentation of it :) | 16:18 |
| ekimus | sommer: is that public? is it a wiki? i could add my notes :) | 16:19 |
| sommer | ekimus: basically rewriting the serverguide openldap section: https://help.ubuntu.com/8.04/serverguide/C/openldap-server.html | 16:20 |
| sommer | ekimus: I haven't commited my changes yet | 16:20 |
| ekimus | hehe, always learning great things. I didn't even know about a serverguide in general. :) | 16:21 |
| sommer | ekimus: if you want to send me your notes that's cool, I should have a commit ready by Sunday or Mondayish | 16:21 |
| kirkland | zul: superm1 was asking last night about mysql-server's "recommends" on mailx | 16:21 |
| sommer | ekimus: reviews of the serverguide is always appreciated :) | 16:21 |
| zul | kirkland: what about it? | 16:21 |
| kirkland | zul: if we thought it could be dropped to a 'suggests' | 16:22 |
| kirkland | zul: lamont and ScottK had some good ideas about using a meta package, instead of specific MTA, like mailx | 16:22 |
| zul | kirkland: propbably yeah it could | 16:22 |
| lamont | kirkland: mailx is not an MTA | 16:23 |
| kirkland | lamont: MUA, sorry | 16:23 |
| ekimus | sommer: I will try to give it a review. But i can't quite promise not to mix in some debian stuff (although that would have to be _very_ special). in most cases one can still use debian docs for ubuntu and the other way around | 16:24 |
| sommer | ekimus: they're usually pretty close... not sure what the status of the new cn=config changes are in debian though | 16:25 |
| sommer | ekimus: that is the intrepid cn=config changes... I assume that's what you're testing, heh | 16:25 |
| ekimus | sommer: is help.ubuntu.com maintained by canoncial. I can't find a login or discusion button. | 16:25 |
| uvirtbot` | New bug: #258192 in dhcp3 (main) "problem with paths and binding to ldap server" [Undecided,New] https://launchpad.net/bugs/258192 | 16:25 |
| ekimus | sommer: actually I'm just getting used to to the ldap part itself right now. I just hackishly fixed the etch init script so that it doesn't choke on new style config | 16:26 |
| sommer | ekimus: it's a community wiki, maintained by members of the ubuntu community... canonical does manage the servers | 16:26 |
| sommer | ekimus: with intrepid slapd will use cn=config by default... which is why the docs need updated, it's a pretty big change :) | 16:27 |
| ekimus | ahh nice. the openldap admin guide is talking about "old style" config also when they refer to the slapd.conf file. | 16:28 |
| sommer | ekimus: ya, I've found that cn=config documentation isn't as prevelant as slapd.conf... but once you get understand which objects control what, and their attributes, it's not that bad | 16:29 |
| ekimus | true, the nicest thing about it is no restarts for acl changes. the bad thing is... you can lock yourself out _a lot_ easier :) | 16:31 |
| sommer | ekimus: heheh... haven't done that yet, but I'm sure it'll happen sooner or later | 16:31 |
| sommer | it's also very cool for updated indexes and adding schemas | 16:31 |
| ekimus | yeah i just did dad with loading the dynlist overlay and adding a schema (actually just converted the dynlist schema) and configured dynamic groups for just a single backend. very nice | 16:37 |
| ekimus | ok going for my break now | 16:37 |
| edmoore | hi everyone. So are there less evil options than installing gnome-desktop if I want to occassionally use a gui ap, sometimes on a monitor, sometimes over vnc? | 16:48 |
| ekimus | edmoore: sure just use only xorg and the apps you want (although you'll end up with all the gnome and qt stuff anyway after some time) | 16:54 |
| ekimus | edmoore: or use tools that connect to an IP and tunnel thru ssh or some vpn | 16:54 |
| edmoore | second option sounds better. Would dearly like to avoid clogging this box up with crap | 16:55 |
| ekimus | what kind of gui programs are you talking about? db management stuff, gparted (only local), ....? | 17:04 |
| ekimus | hmmm is there an OID to use for private usage, like everyone that knows this objectclass will never leave the organization should use OID 1.1.2.2.1 | 17:26 |
| uvirtbot` | New bug: #258353 in bacula (universe) "package bacula-director-pgsql 2.4.2-1ubuntu2 failed to install/upgrade: Unterprozess post-installation script gab den Fehlerwert 2 zurück" [Undecided,New] https://launchpad.net/bugs/258353 | 18:06 |
| leonel | intrepid feature freeze is on 18 aug .. that means no more new packages right ? | 18:43 |
| leonel | so ... no django 1.0 in intrepid .. it get released on sept 2 .. | 18:44 |
| sommer | leonel: it's actually on the 28th... it's just number 18 in the list | 18:44 |
| sommer | at least that's the way I read the table :) | 18:45 |
| leonel | right .. but no django 1.0 for intrepid ?? | 18:46 |
| sommer | not sure, you might ask the last person to update the package | 18:47 |
| * sommer thought there was some type of exception process | 18:47 | |
| sommer | leonel: you might give this a read: https://wiki.ubuntu.com/FreezeExceptionProcess | 18:48 |
| leonel | sommer: thanks | 18:48 |
| sommer | np | 18:48 |
| kaushal | hi | 19:23 |
| kaushal | I have configured openvpn client using Network Manager on Ubuntu 8.04 Linux Desktop, The issue is that I need to add sudo ip route add 10.0.0.0/8 via 10.10.50.12 dev tap0 every time whenever i need to connect to openvpn server | 19:23 |
| kaushal | any clue | 19:23 |
| K4k | I'm having difficulty with the motd on my server, it seems to be showing up twice when I login via ssh, and I have no idea why | 19:27 |
| K4k | I found a forum thread saying that it could be that bootmisc.sh is cating together motd with motd.tail and if .tail had the same message as motd it would cause it | 19:28 |
| K4k | but I checked it and then re-ran the bootmisc script and then re-logged in but it didn't help | 19:29 |
| ArtimusDeathhole | hey peeps. I finally got my LSI SAS3081E-R HBA's, as per suggestion int he channel | 19:30 |
| ArtimusDeathhole | I am reading through modload to load the driver and I am having trouble finding the module itself. I have checked under /lib/kernel/drv/amd64 as the man page mentioned, but it isnt in there. I know that the SUNWlsimega is installed, but what should I be looking for? | 19:31 |
| ArtimusDeathhole | im sorry that was /usr/kernel/drv/amd64 | 19:32 |
| ArtimusDeathhole | I may be dumb | 19:34 |
| zul | oh I think you might want a solaris channel | 19:35 |
| ArtimusDeathhole | yeah, I just noticed I popped this into the wrong window | 19:35 |
| ArtimusDeathhole | my bad | 19:35 |
| ArtimusDeathhole | <=== dumb | 19:36 |
| kirkland | zul: ping | 20:05 |
| kirkland | zul: any chance you can sponsor my fix for https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/258388 ? | 20:05 |
| uvirtbot` | Launchpad bug 258388 in ecryptfs-utils "ecryptfs-setup-private should protect users from overwriting an existing setup" [Undecided,New] | 20:05 |
| zul | kirkland: slim chance ;) | 20:05 |
| zul | kirkland: are all of these patches going back into debian so we dont carry them for intrepid+1? | 20:06 |
| kirkland | zul: they're going back to the upstream git tree | 20:06 |
| kirkland | zul: and yes, the debian maintainer is taking them | 20:06 |
| zul | kirkland: nifty thats what I like to hear | 20:07 |
| kirkland | zul: that's the way i roll 8-) | 20:07 |
| kirkland | zul: my fixes can be seen applied here: http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git;a=summary | 20:07 |
| zul | kirkland: your word is good enough for me | 20:08 |
| kirkland | zul: and i ping the debian maintainer periodically and ask him to sync up to the latest upstream release | 20:08 |
| kirkland | http://packages.qa.debian.org/e/ecryptfs-utils.html | 20:08 |
| zul | kirkland: done | 20:10 |
| kirkland | zul: you rock so much | 20:11 |
| zul | I know :) | 20:11 |
| Aquaraptor | Is there a "powered by ubuntu server" logo somewhere? I'd like to put one on my site | 22:38 |
| Terrasque | Hey. Got a problem with the 8.04 kernel. Upgraded from 6.06, and the server is unstable with the new kernel. Old 6.06 kernel works fine tho | 23:42 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!