[00:15] hello, where and with which permissions shuold an ssl certificate .key file be stored to be usable with apache ? [00:15] is there a standard practice ? [00:20] zul: around ? [00:20] emgent: not really [00:21] ok, if you like we can mail you about this. [00:21] emgent: yes [00:21] ok thanks :) [02:15] So, in the past, I've had apt have a problem and lock up if it only half-downloads a package. So, I removed the entire /var/cache/apt directory to try and clear out apt's cache, hoping it would rebuild. ... it apparently didn't. Any ideas on fixing my blunder? I'd rather not wipe and reload.. [02:15] kriel: you havent told us the error [02:15] kriel: and /var/cache/apt/partial is what your looking for [02:15] ... I nuked all of /var/cache/apt, that's the problem. [02:15] Can anyone tell me why if I zip the same file two different time, the resulting zip files have a different md5 hash? [02:15] here, have a pastebin. http://pastebin.com/d451157f0 [02:22] kriel: I'd try a dpkg-reconfigure apt . but I really have no idea if it may harm your system further or not, so try at your own risk. [02:23] It's not a production server, we're just trying to avoid a wipe and reload. [02:23] kriel: does /var/cache/apt/archives exit? [02:23] wantok: he wiped everything. [02:24] tacone: then he should probalby re-create everything ;) [02:24] lol, trying to reproduce on my intrepid chroot [02:24] captbaritone: files contents changed? [02:24] that's what the chroot is all about: have fun ! :-D [02:24] no [02:25] give it a try on your machine [02:25] ok I get the same error of him [02:25] uhm, no, seems not to work [02:25] byeh, got it. >> I'm not sure what the other guy did, because he dosen't know what dpkg-reconfig is, but whatever he did, apt's working again. [02:26] lol [02:26] not for me :D [02:28] * wantok bbs === Lunks is now known as Lunksa === Lunksa is now known as Lunks [05:22] anyone tried ebox (from thier ppa, or the 8.04 repo) for adminging samba/nfs/squid with authentication (basically, a school proxy/server). [05:23] well, anything similar :) [05:23] i'm wondering if loosing the ability to admin by ssh+not being able to directly edit files is worth the "easy gui" for users [06:42] <\sh> Kamping_Kaiser: my opinion, "don't use this software if you know how to edit config files manually" at least, I had my share of bad "webmin" experience in the past (means in the 90ties) [08:11] Is there a linux alternative to using IECapt.exe (http://iecapt.sourceforge.net/) for generating website screenshots automatically? [08:50] moin [08:56] New bug: #259006 in php5 (main) "php5 and libtool 2.2 cause some PHP related packages to FTBFS" [High,Confirmed] https://launchpad.net/bugs/259006 [11:45] jdstrand: are you familiar with the "service" command on RH systems? [11:46] kirkland: thinking of adding that to ubuntu-server? [11:47] at the very least.... [11:47] #!/bin/sh [11:47] SCRIPT="$1" [11:47] shift [11:47] /etc/init.d/"$SCRIPT" $@ [11:47] thefish: but, yes [11:47] trying to decide where's the best place to put it, thinking of sysvinit [11:48] couldnt say, but i like the idea [11:48] it helps a lot with windows server converts [11:49] they seem to be able to get their head around that a lot easier than /etc/init.d/xyz start [11:50] thefish: true [11:51] thefish: i've been using Ubuntu exclusively for years now, and i still accidentally type "service apache2 restart" [11:53] :) [11:53] hello [11:55] kirkland: it would be nice to have as a kind of standard [11:55] we have mostly an ubu server shop, but there are some rhel boxen as well, so a similar set of service stuff would be useful [11:56] im sure there are quite a few places with mixed distros [11:56] thefish: i don't have a RH box on hand... does the "service" script do more than just put /etc/init.d in front of whatever you call? [11:57] kirkland: moment, ill see if i can ssh in (HQ firewall is being a bit iffy...) [11:58] kirkland: not according to a "man service" on centos5 [11:58] maswan: thx [11:59] is there an single sign on application out there that is portable? I mean I can't seam to replicate the AD LDAP to openLDAP and vice versa and I don't want the SSO to _HAVE_ to rely on either Linux or Windows [11:59] kirkland: not hugwly familiar with it-- I;ve used it a couple of times [11:59] hugely even... [11:59] well, it does a few other things, like a --full-restart which is a stop; start and a --status-all which is a for a in /etc/init.d/*; $a status [11:59] some way I can keep all login credentials on a linux and windows server and have them update each other? [11:59] but not anything significant [11:59] jdstrand: okay, no worries... i think i'm dropping it in sysvinit... does that sound about the right place for it? [12:01] kirkland: I don't remember the nuances of the 'service' command. does it actually change symlinks, etc? [12:02] jdstrand: not as far as I know [12:02] kirkland: or is it just a shorthand of doing /etc/init.d/ ... [12:02] jdstrand: yes [12:02] jdstrand: no, it just runs them. [12:02] jdstrand: very, very simple [12:02] jdstrand: chkconfig on the other hand... [12:02] or whatever tha'ts called [12:02] jdstrand: trivial "enhancement" to an Ubuntu server, would make many a former RH admins less frustrated with Ubuntu [12:03] chkconfig is more complex [12:03] i'm not tackling that [12:03] I've spent all of a couple of hours trying to admin a rhel derivative, so I'm not exactly and expert. I know much more about AIX than RH. [12:03] kirkland: I think that would be the place, yes. however, if you consider future upstart scripts, then perhaps not [12:04] kirkland: I'd ping Keybuk [12:04] jdstrand: hmm, good point. [12:04] jdstrand: i'll talk to him [12:04] jdstrand: dendrobates- was very supportive of this little patch [12:04] jdstrand: maybe i'll get him to talk with Keybuk, since they're in a conference room together all week :-) [12:05] kirkland: sounds entriely reasonable :) [12:32] kirkland: we need chkconfig too. [12:32] dendrobates-: i agree... but that's highly none trivial, and potentially against debian policy [12:33] non-trivial [12:33] kirkland: colin thinks that some of the work has already been done. [12:33] dendrobates-: for chkconfig? [12:34] dendrobates-: that functionality is sort of handled on a per-package basis, with their /etc/default/* files, and debconf questions [12:38] dendrobates-: tested/working patch attached to https://bugs.launchpad.net/ubuntu/+source/sysvinit/+bug/259043 [12:38] Launchpad bug 259043 in sysvinit "Ubuntu Server would benefit from a "service" wrapper script" [Undecided,New] [14:06] \sh, thanks for the comment. the root of the dilemma is that i know how to do the config, but i dont expect the recipents to (but i will be the ongoing support. grr) === chmac7 is now known as chmac [14:43] sommer: can you still make updates to the server guide? [14:45] dendrobates-: yeppers [14:52] sommer: what do you think about adding a blub at the end that tells people that support is available? [14:52] sommer: we keep having people tell us that they didn't know support was available for ubuntu. [14:53] dendrobates-: seems like a good idea to me [14:54] dendrobates-: is the end the best place for that? [14:54] dendrobates-: seems like it may fit as a subsection to the introduction section [14:54] sommer: seems like it. [14:55] dendrobates-: is canonical the only place to get support? just thinking that if other companies have offerings it may be good to list them [14:56] sommer: just this url: http://www.canonical.com/services/support [14:58] dendrobates-: okay, I'll add something... isn't there some type of partner program? or does that not make sense in the "support" context? [15:00] sommer and dendrobates-: What about http://www.ubuntu.com/support it seems a bit more inclusive. [15:02] both seem okay to me [15:26] on a default setup of ubuntu heron server -- is there any kind of firewall running? particularly one that might be interfearing with connections to a mysql server? [15:26] <_ruben> installed: yes, running: no [15:27] ok -- cuz i cant talk to my mysql server no matter what [15:27] and i need to [15:27] is it iptables or what? [15:27] It's called ufw and it's essentially a simple iptables front end. [15:28] ok [15:28] By default it's disabled. [15:28] w8tah: you should double check /etc/mysql/my.cnf and make sure it's listening on more than the loopback address [15:28] OOHHHH [15:28] ok [15:28] been too long since i set up a mysql server [15:30] i need to bind the ip of the machine, right? [15:30] * w8tah blames getting old [15:30] w8tah: yeppers [15:30] thanks [15:30] np [15:31] that was it -- thanks a ton [15:31] heh, you're welcome [15:32] soon as you said that i rememberd having to do something similar when i was running mysql under gentoo but its been over a year since i configured a Mysql server === folke is now known as afk_away [16:09] soren: I'm getting an ubuntu-vm-builder failure: Error: Error opening /dev/shm/vm-builder-kivOw18719/root.raw: Invalid argument [16:22] kirkland: That's because parted hates you. [16:23] And me. [16:24] soren: bummer, no workaround? [16:24] kirkland: I have a patch that fixes it. [16:25] kirkland: Until then... Er... [16:25] * soren thinks [16:25] soren: will you be rolling out that patch in the next day or so? [16:25] Yes. Until then, you should be able to get a bit further if you point your tmpdir at a non-tmpfs. [16:56] is there a way to build a custom install cd (say I want to edit the packages installed by default etc. ) to basically streamline the installs where I work? [17:03] arakthor: I have used Ubuntu Customization Kit (UCK) [17:03] http://uck.sourceforge.net/ [17:06] New bug: #259110 in samba (main) "Samba NT_STATUS_PASSWORD_MUST_CHANGE bug" [Undecided,New] https://launchpad.net/bugs/259110 [17:08] jmedina, does it do more than the language? [17:08] arakthor: you can pre-install packages and configs [17:08] awesome, I will have a look at it. thanks :) [17:12] bleh, doesn't work with server cds [17:12] thanks anyway [17:14] found the wiki entry on customizing cds so I should be oK [17:21] infinity: ping === anonimous is now known as YoMero === RoAk is now known as RoAkSoAx [18:29] just making sure you guys can see this... [18:29] anyone? [18:29] Depends on what this is. [18:30] this was just text, and thanks! [18:45] hey guys, so i installed mdadm and i was working on creating a raid and somewhere in all of this i mistakenly created md0p1 md0p2 md0p3 and md0p4 how do i just remove these, kill my current array and start over in creating a software raid? [18:54] hey guys i need to share out /dev/md0 to 2 different users on the system so that both users can mount this as a share in windows. can i get some help please? this si all in console [19:15] guys ok so here is my issue i type in sudo fdisk -l | grep NTFS | awk '{print $1}' and i get back "Disk /dev/sdc doesn't contain a valid partition table." === RoAk is now known as RoAkSoAx [20:43] lamont: So the udns maintainer's response on cache poisoning is there's no point in source port TID randomization because DNSSEC is the only one true answer. See Debian Bug #493599 for laughs. [20:43] Debian bug 493599 in udns "Transaction ID and Source Port not random enough" [Grave,Open] http://bugs.debian.org/493599 [20:43] ScottK: he's right, btw. Now get real. kthx [20:43] He's right, of course, but it's rather beside the point. [20:43] until we have signed root and TLD zones, it doesn't matter [20:43] Yep. [20:44] So I don't think that in the meantime declining to change from trivially spoofable to spoofable with enough bandwidth and other conditions are right is a good approach. [20:44] of course, I expect that Kaminsky is just finding these bugs to help push global acceptance of DNSSEC :-p [20:44] it's acceptable only if you're not doing recursion. :-) [20:45] which has the advantage of meaning that you don't have a cache to poison.... [20:45] Yes. [20:45] I'm still in favor of doing what one can. [20:49] lamont: well, some TLDs are signed. you just have to make sure those are in your resolvers trust path and you only care about domains under those TLDs... [20:50] Would those be any TLDs I might care about? [20:50] I only know of .se, but there should be a handful of others too. [20:51] Of course, I don't know of anything _under_ .se that's signed, but I'm sure there might be something of value. :) [21:08] * ScottK ponders applying to ICANN for .signed as a TLD. [21:30] beyond https://help.ubuntu.com/8.04/serverguide/C/openldap-server.html , what do I need to do to setup a Linux "active directory"? I'm not even sure how to configure the clients to pull the users from the server. [21:31] ScottK: no hardy-backports love for postfix 2.5.4-1??? [21:32] lamont: There was no previous backport to update. [21:32] ah, ok [21:33] It seems like ~2.5.2 to 2.5.4 is not so much of a change. [21:34] just the two CVEs :) [21:35] Right, but you're going to deal with the only one a sane person has to worry about in a -security upload, so no worries. [21:37] right [21:37] and actually, that's done, just hasn't published. :-( [21:41] Yes. That gave me a chance to comment on Friday about how the security support is faster (sometimes) in backports than in -security. [22:14] zul: around ? [22:28] Greetings [22:28] I need some help with ubuntu-server and pure-ftpd [22:28] I had it all working, now anonymous users don't work any longer [22:28] I recently went from gutsy to hardy [22:29] so I'm a bit perplexed as to what stopped [22:29] anyone have any suggestions? [22:41] ok, fixed my problem... apears my upgrade deleted the ftp user [22:41] re-creating it and it works. [23:33] When i do an apt-get upgrade linux-server, why does it say it's being "kept back"? [23:54] you need to run apt-get dist-upgrade or use aptitude with U [23:54] cxo_: I'll try to help out here. If you want to upgrade your kernel, try "apt-get dist-upgrade" and you'll need to reboot afterward.