[01:06] kirkland: ok ecryptfs sounds good, the only problem in ubuntu is if the X user change system password, true ? [01:07] emgent: nope [01:07] cat /etc/pam.d/common-password [01:07] oh true.. [01:07] emgent: ;-) [01:07] password optional pam_ecryptfs.so [01:07] hahah it`s perfect :) [01:07] emgent: however, it is currently not very easy to change the underlying mount passphrase [01:08] emgent: you'd have to mount two different directories, one with the existing data and existing password [01:08] emgent: and a second one with the new password [01:08] emgent: and copy the data from the old to the new [01:08] emgent: and then remove the old [01:08] nods nods [01:08] emgent: that's not ideal.... [01:08] emgent: but that's low on the priority list [01:11] ok understand. nice :) [02:21] hello, is there any standard location to store ssl certs to be used with apache2+ssl ? [02:23] tacone: https://help.ubuntu.com/8.04/serverguide/C/index.html [02:24] lamont: Thanks. I'm back online now. [02:24] ScottK: you haven't been here all day? [02:24] nxvl: what specifically ? etc/ssl ? [02:24] tacone: https://help.ubuntu.com/8.04/serverguide/C/httpd.html [02:25] nxvl: Nope. Left about 14 hours ago. [02:25] at the bottom of the guide [02:25] nxvl: I am already there. [02:25] nxvl: is there any policy I can read ? would subdirectories tollerated for /etc/ssl ? [02:25] tacone: not that i know, but that's the official ubuntu server guide [02:26] ScottK: mmm enought time to don't know about what i was asking [02:26] ScottK: i will wait until you get to it [02:26] :D [02:27] nxvl: I am asking because we are putting in place a wizard to set SSL certs on apache2 in our software. that's why I need feedback on which solution would be optimal [02:28] tacone: that's what i thought [02:28] ok [02:29] tacone: i would find a good way to do it putting them into private/ and certs/ naming the certificates with the hostname or some part of it [02:29] nxvl: the help page miss an useful information. I'd add it but seems non-editable [02:30] tacone: talk to sommer [02:30] tacone: he's our documentation leader [02:31] nxvl: do you have his email ? [02:31] sommer: ping [02:31] tacone: https://edge.launchpad.net/~asommer [02:32] Yeah! Only 280 new emails since I was last at my desk. [02:34] Almost forgot ... [02:34] ScottK: i can't imagine dholbach's inbox after his 3 week holidays [02:34] nxvl: Congratulations. [02:34] ScottK: thank you! [02:34] you get into it! [02:34] :D [02:34] got* [02:35] thanks nxvl, ~sommer doesn't seemed to be the right username :) [02:39] nxvl: yo [02:39] * sommer reading backlog [02:40] tacone: you wanted to add something to the docs? [02:41] yes [02:41] I was about to write you a mail [02:41] there's a missing note for ssl config. [02:42] for apache? [02:42] https://help.ubuntu.com/8.04/serverguide/C/httpd.html [02:43] what's missing? [02:43] you need to convert NameVirtualHost to *.80 (not just *) and then convert any to use port 80. [02:43] surprisingly seems like even the default config (no user defined vhosts around) won't work with that. [02:44] ah, ya that section needs some other updates... I'll add something about that [02:44] sommer: that's valid only for hardy, not intrepid. intrepid shuold just work (haven't tried, but they seem to have adjusted) [02:44] ok thanks [02:44] tacone: ya, intrepid should have ssl by default [02:44] tacone: thank you [02:45] np === PrivateVoid_ is now known as PrivateVoid [05:12] hello, I have this problem: I installed Ubuntu Server for sparc, I have 2 disk (hda, hdd) both with four partitions, the partitions 1º are only unused 8 Mb partitions, the partitions 2º are about 512 Mb, and I created a Raid1 device for the swap, the partitions 4º about 19Gb in both disk are for a RAID1 device, wich contain a ext3 filesystem (including /boot), ubuntu instalation was ok, until the instalation of silo, where it says there was an [05:12] [S] instead of the [U_] that I expected [05:13] in the boot messages it says something about md0 stopped and md1 stopped and something about bind hda4 [05:17] does anyone have and idea what can be happening??? [05:47] i'm having some pretty poor network performance can someone give me a hand? it's about 1/10th the speed it runs in vista... [05:49] wireless? [05:49] sending a 3GB file only runs between 2 and 5mbps... and on vista it's over 20mbps [05:49] abaqueiro, wired [05:51] abaqueiro, i'm trying to stream some movies and they aren't working :( [05:51] could be the wireless driver, or the protocol you are using to transfer the movies [05:52] abaqueiro, it's wired [05:52] samba [05:52] joebob777as7: check the mode [05:52] ethtool eth0 [05:52] for example [05:53] jmedina, http://pastebin.ca/1172438 [05:54] jmedina, peaks at about 6 mbps [05:54] it is Half [05:54] # [05:54] Speed: 100Mb/s [05:54] # [05:54] Duplex: Half [05:54] jmedina, how can I make it full? [05:55] try to change it to full [05:55] man ethtool [05:55] dont remember the param, but it is in the manpage [05:56] jmedina, will it interrupt my transfer if I try it now? [05:58] joebob777as7: :S [06:00] jmedina, so I ran this: sudo ethtool -s eth1 duplex full speed 1000 [06:00] and it is still half... :( [06:00] mmm what about the other side? [06:00] is there more hosts? [06:00] are [06:01] the other side is fine it's been tested in vista... [06:01] full speed 1000? [06:01] jmedina, well no it's only 100 but full 100 [06:02] but did you type 1000 in the prompt? [06:02] yes [06:02] do I need to set it while it's running? [06:04] or before I start the transfer? [06:04] not sure [06:04] its been a long time since I used [06:06] jmedina, ok thx for pointing me in the right direction. [06:07] you can also try with mii-tool [06:12] joebob777as7: try this [06:12] ethtool -s eth0 speed 100 duplex full autoneg off [09:16] moin [11:42] I'm seeing an apparent deadlock between mutt and dovecot on Intrepid, which was working great until recently [11:42] mutt is blocked reading from dovecot, and dovecot is just polling waiting for something to happen [11:42] neither of them has changed recently, though [11:43] mdz: ... rebooting doesn't help? [11:43] mok0: I haven't tried rebooting, why? [11:44] disconnecting from dovecot and reconnecting gets it working again for a while, then it gets stuck again [11:44] Because it would remove zombie processes, dead socket files etc [11:44] mdz: is dovecot running on a remote server? [11:44] mok0: no, locally via a pipe (mutt's "set tunnel") [11:45] and dovecot --exec-mail imap [11:45] Hmm [11:46] I'm going to try to get a trace of the imap conversation and see what's going wrong [11:46] I stopped using mutt when we introduced dovecot... [11:46] mutt sucks at imap [11:46] mok0: what did you switch to? [11:46] kmail [11:46] it does a bit [11:46] mok0: fetch your mail with fetchmail then :) [11:46] I used thunderbird for a while, but I prefer kmail [11:46] it's very good at a number of other things, though [11:47] I'm told thunderbird has good keyboard navigation now [11:47] ivoks: I'm not that enamoured with mutt. I used it when I needed a local mail reader on the mail host. [11:48] as for GUI clients, claws just rules all of them [11:48] ivoks: I run kubuntu, don't like the looks of GTK [11:49] anyways, we're getting OT [11:49] right [11:50] mdz: have you tried with other clients? [11:50] telneting to port 143 would be enough... [11:51] ivoks: I have run dovecot --exec-imap locally, and it talks to me [11:51] it talks to mutt, too, until it goes bad [11:51] it gets hung up immediately after mutt has saved a message to my sent folder [11:51] mutt blocks there and never actually gives the message to sendmail to send it out [11:51] I sent probably 50 messages through this same setup yesterday [11:53] sent folder is imap folder or local folder? [11:54] ivoks: imap [11:56] you don't have access to dovecot's logs? [11:57] or even better, dovecot's configuration... it can provide very nice debuging logs [12:40] morning [12:41] hi there [13:14] hi guys! need help on this. were you able to set up raid 0 on three disks? [13:14] thanks a lot! [13:46] <_ruben> raid0 .. yuck! === ahasenack is now known as ahasenack-flying [14:11] hi. how do i make files and dirs created inherit the parent dir's group and permissions? [14:13] Gothfunc: I believe the umask command may be what you're looking for [14:14] Gothfunc: http://www.lockergnome.com/linux/2002/08/29/the-users-mask/ may be of help [14:15] i have that command in mind, but it seems to only affect the shell session. reading the link now [14:17] sommer: if i wanted to apply that to any session for any user, how might i do that? [14:17] Gothfunc: I think if you change the setting in /etc/skel/.profile it will be set for each session [14:17] gotcha [14:17] * Gothfunc looks [14:17] Gothfunc: at least there's an entry at the top :) [14:18] awesome, thanks sommer :) [14:19] Gothfunc: np, it actually mentions the /etc/profile, you might want to take a look at that as weel [14:19] /weel/well/g [14:20] ok [14:23] ok that works, with /etc/profile [14:23] but still lacking group inheritance [14:24] (with directories that are actually g+s) [14:24] it just assigns the group equal to the user [14:24] gothfunc/gothfunc [14:26] nevermind, got it [14:26] :P === ahasenack-flying is now known as ahasenack [15:00] Hi, i don't know if my problems actually is ubuntu or my proftpd server, I need to transfer files that are more than 2 gigs and it would not let me. [15:13] <_ruben> juannicolas: could be a filesystem problem [15:14] <_ruben> but proftpd might be the prob too, if its not compiled with large file support [15:14] _ruben Im trying to transfer files more than 2 gig size between mandrake to ubuntu [15:39] New bug: #258162 in postfix (main) "Postfix local privilege escalation via hardlinked symlinks" [Undecided,New] https://launchpad.net/bugs/258162 [15:41] I love people filing bugs that are fixed. or have we not quite published it for -security, I wonder [15:43] lamont: its so much fun [15:45] lamont: I commented to that effect [15:47] lamont: kees is at debconf and jamie is on vacation afaik pitti is handling security [15:48] * lamont smacks it into fix committed status with a comment [15:48] lamont: We have not quite published it. [15:48] that's why it's committed, not released [15:49] Right, I typed that before I saw your last comment. [16:18] anyone already running slapd with a cn=config backend? I'm right now playing around with it (spare box was an etch and I didn't care to reinstall) but I'm having quite some problems but I'm not sure wether it's the ldap browser (apache directory studio) or wether it's indeed slapd. [16:18] ekimus: I've started the documentation of it :) [16:19] sommer: is that public? is it a wiki? i could add my notes :) [16:20] ekimus: basically rewriting the serverguide openldap section: https://help.ubuntu.com/8.04/serverguide/C/openldap-server.html [16:20] ekimus: I haven't commited my changes yet [16:21] hehe, always learning great things. I didn't even know about a serverguide in general. :) [16:21] ekimus: if you want to send me your notes that's cool, I should have a commit ready by Sunday or Mondayish [16:21] zul: superm1 was asking last night about mysql-server's "recommends" on mailx [16:21] ekimus: reviews of the serverguide is always appreciated :) [16:21] kirkland: what about it? [16:22] zul: if we thought it could be dropped to a 'suggests' [16:22] zul: lamont and ScottK had some good ideas about using a meta package, instead of specific MTA, like mailx [16:22] kirkland: propbably yeah it could [16:23] kirkland: mailx is not an MTA [16:23] lamont: MUA, sorry [16:24] sommer: I will try to give it a review. But i can't quite promise not to mix in some debian stuff (although that would have to be _very_ special). in most cases one can still use debian docs for ubuntu and the other way around [16:25] ekimus: they're usually pretty close... not sure what the status of the new cn=config changes are in debian though [16:25] ekimus: that is the intrepid cn=config changes... I assume that's what you're testing, heh [16:25] sommer: is help.ubuntu.com maintained by canoncial. I can't find a login or discusion button. [16:25] New bug: #258192 in dhcp3 (main) "problem with paths and binding to ldap server" [Undecided,New] https://launchpad.net/bugs/258192 [16:26] sommer: actually I'm just getting used to to the ldap part itself right now. I just hackishly fixed the etch init script so that it doesn't choke on new style config [16:26] ekimus: it's a community wiki, maintained by members of the ubuntu community... canonical does manage the servers [16:27] ekimus: with intrepid slapd will use cn=config by default... which is why the docs need updated, it's a pretty big change :) [16:28] ahh nice. the openldap admin guide is talking about "old style" config also when they refer to the slapd.conf file. [16:29] ekimus: ya, I've found that cn=config documentation isn't as prevelant as slapd.conf... but once you get understand which objects control what, and their attributes, it's not that bad [16:31] true, the nicest thing about it is no restarts for acl changes. the bad thing is... you can lock yourself out _a lot_ easier :) [16:31] ekimus: heheh... haven't done that yet, but I'm sure it'll happen sooner or later [16:31] it's also very cool for updated indexes and adding schemas [16:37] yeah i just did dad with loading the dynlist overlay and adding a schema (actually just converted the dynlist schema) and configured dynamic groups for just a single backend. very nice [16:37] ok going for my break now [16:48] hi everyone. So are there less evil options than installing gnome-desktop if I want to occassionally use a gui ap, sometimes on a monitor, sometimes over vnc? [16:54] edmoore: sure just use only xorg and the apps you want (although you'll end up with all the gnome and qt stuff anyway after some time) [16:54] edmoore: or use tools that connect to an IP and tunnel thru ssh or some vpn [16:55] second option sounds better. Would dearly like to avoid clogging this box up with crap [17:04] what kind of gui programs are you talking about? db management stuff, gparted (only local), ....? [17:26] hmmm is there an OID to use for private usage, like everyone that knows this objectclass will never leave the organization should use OID 1.1.2.2.1 [18:06] New bug: #258353 in bacula (universe) "package bacula-director-pgsql 2.4.2-1ubuntu2 failed to install/upgrade: Unterprozess post-installation script gab den Fehlerwert 2 zurück" [Undecided,New] https://launchpad.net/bugs/258353 [18:43] intrepid feature freeze is on 18 aug .. that means no more new packages right ? [18:44] so ... no django 1.0 in intrepid .. it get released on sept 2 .. [18:44] leonel: it's actually on the 28th... it's just number 18 in the list [18:45] at least that's the way I read the table :) [18:46] right .. but no django 1.0 for intrepid ?? [18:47] not sure, you might ask the last person to update the package [18:47] * sommer thought there was some type of exception process [18:48] leonel: you might give this a read: https://wiki.ubuntu.com/FreezeExceptionProcess [18:48] sommer: thanks [18:48] np [19:23] hi [19:23] I have configured openvpn client using Network Manager on Ubuntu 8.04 Linux Desktop, The issue is that I need to add sudo ip route add 10.0.0.0/8 via 10.10.50.12 dev tap0 every time whenever i need to connect to openvpn server [19:23] any clue [19:27] I'm having difficulty with the motd on my server, it seems to be showing up twice when I login via ssh, and I have no idea why [19:28] I found a forum thread saying that it could be that bootmisc.sh is cating together motd with motd.tail and if .tail had the same message as motd it would cause it [19:29] but I checked it and then re-ran the bootmisc script and then re-logged in but it didn't help [19:30] hey peeps. I finally got my LSI SAS3081E-R HBA's, as per suggestion int he channel [19:31] I am reading through modload to load the driver and I am having trouble finding the module itself. I have checked under /lib/kernel/drv/amd64 as the man page mentioned, but it isnt in there. I know that the SUNWlsimega is installed, but what should I be looking for? [19:32] im sorry that was /usr/kernel/drv/amd64 [19:34] I may be dumb [19:35] oh I think you might want a solaris channel [19:35] yeah, I just noticed I popped this into the wrong window [19:35] my bad [19:36] <=== dumb [20:05] zul: ping [20:05] zul: any chance you can sponsor my fix for https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/258388 ? [20:05] Launchpad bug 258388 in ecryptfs-utils "ecryptfs-setup-private should protect users from overwriting an existing setup" [Undecided,New] [20:05] kirkland: slim chance ;) [20:06] kirkland: are all of these patches going back into debian so we dont carry them for intrepid+1? [20:06] zul: they're going back to the upstream git tree [20:06] zul: and yes, the debian maintainer is taking them [20:07] kirkland: nifty thats what I like to hear [20:07] zul: that's the way i roll 8-) [20:07] zul: my fixes can be seen applied here: http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git;a=summary [20:08] kirkland: your word is good enough for me [20:08] zul: and i ping the debian maintainer periodically and ask him to sync up to the latest upstream release [20:08] http://packages.qa.debian.org/e/ecryptfs-utils.html [20:10] kirkland: done [20:11] zul: you rock so much [20:11] I know :) [22:38] Is there a "powered by ubuntu server" logo somewhere? I'd like to put one on my site [23:42] Hey. Got a problem with the 8.04 kernel. Upgraded from 6.06, and the server is unstable with the new kernel. Old 6.06 kernel works fine tho