/srv/irclogs.ubuntu.com/2008/10/20/#ubuntu-server.txt

arrrghhhwill intrepid server use kernel 2.6.27-something?02:39
hadsYah02:40
arrrghhhschweet.  i hear the ntfs-nfs problem is no more in that kernel.02:40
arrrghhhi'm using the nfs-user-server package instead of the kernel-server package.  i'd much rather have nfs run in kernel-space instead of user-space.02:41
arrrghhhand i can just do an aptitude safe-upgrade on oct 30th and get intrepid?02:42
hadsYou should use do-release-upgrade02:43
arrrghhhi've never used that one02:43
arrrghhhcan i do that right now and get the beta?02:46
hadsShould be able to, might need a flag02:47
arrrghhhlike -d02:48
hadsProbably02:48
arrrghhhwell on my server i'd rather wait.  i'd really like the new kernel, but i'd much prefer stability.02:48
arrrghhhthe -m switch for mode - server or desktop.  is the mode assumed based on the current running system i hope?02:53
tr-33can anyone help me with getting iptables to accept incoming connections on port 80 and forward these connections to an internal ip03:20
golbwith vm-builder, i'm supposed to have an Ubuntu intrepid installed first before running the script, aren't i?03:55
rascovtr-33: iptables -t nat -A PREROUTING -p tcp -d <publicIP> --dport 80 -j DNAT --to <privateIP>:<port>04:52
scuserhi all, how can I disable simple bind in openldap ?08:01
krautmoin08:47
RockHoundhi everyone, question about mysql master/slave setup: the logrotate script on the slave fails as debian-sys-maint differs per host. How do I handle this? Just copy the debian.cnf to every host? or create a different maint user for each host?08:58
mathiazRockHound: you could replicate each maint user on the master.09:02
mathiazRockHound: so that every slave has all of the debian-sys-maint.09:03
mathiazRockHound: hm - it may not actually work now that I think of it,09:03
RockHound;-)09:03
mathiazRockHound: Your only option is probably to use the same debian-sys-maint on every host.09:03
RockHoundor create different users for each ost09:04
RockHound*host09:04
mathiazRockHound: right - but then you'd have to modify the debian.cnf anyway09:05
RockHoundtrue09:05
RockHoundokay will just go ahead and run with the same debian.cnf ...09:07
mathiazRockHound: seems like the easiest way to do it09:07
scuserhi all, how can I disable simple bind in openldap ?09:08
RockHoundscuser: check the slapd admin manual on slapd.org ... big section about security .. don't know it from the top of my head09:09
scuserRockHound: I can't find slapd.org09:12
RockHoundhttp://www.openldap.org/doc/admin24/09:12
RockHoundsorry09:12
RockHoundsection 13.309:12
mathiazerichammond1: hi - have you been able to boot an ec2 guest built with vmbuilder?09:42
=== mdz_ is now known as mdz
=== _ruben_ is now known as _ruben
=== xelpud is now known as fduplex
scuserhi all, any help with that error "unwilling to perform simple authentication" ?10:30
scuserhi all, how to configure an ldap client not to do simple authentication ?10:40
=== Deeps_ is now known as Deeps
wo0fis there a ubuntu-server XEN iso out there?12:29
wo0for is it a case of installing xenified drivers after iv virtualized it?12:30
yann2I think the latest python-vm-builder can create images usable by XEN12:31
yann2+ it lets you configure a lot - you should have a look :)12:32
wo0foo12:35
wo0fthat looks exactly what im after :D (Y)12:36
wo0fcheers yann212:36
yann2the clever one is in intrepid but you may find a backport :)12:38
scuserhi all, how to configure an ldap client not to do simple authentication ?12:47
uvirtbot`New bug: #286290 in postfix (main) "upgrade process hangs" [Undecided,Incomplete] https://launchpad.net/bugs/28629013:22
scuserhi all, can anyone tell me what are the available SASL_MECH options ?13:30
scuserhi all, can anyone tell me what are the available SASL_MECH options in the ldap.conf file ?13:30
MuelleJA software package I am trying to install is requiring libstdc++-libc6.2-2.so.3, can I install the libstdc++-libc6.2-2 package from gutsy in hardy?13:52
scuserhi all, does anyone know how to force the client not to do simple authentication, which configuration file should I modify ?14:32
MuelleJscuser: can you elaborate, I don't understand14:33
scuserMuelleJ: I'm trying to login to a client which is configured to do simple authentication in order to login; the users are stored in an ldap database which is configured not to allow simple authentication so I want to disable simple authentication in order to have a successful login, got it ?14:35
RockHoundscuser: with what are you trying to login?14:37
scuserRockHound: the client is configured to login via kerberos14:37
RockHoundWhat is "the client"?14:38
scuserRockHound: a simple computer in the network, you can call it a terminal a PC or whatever14:39
scuserRockHound: any ideas14:41
RockHoundit is using kerberos to access a kerberos real which has LDAP as its backend?14:42
RockHoundor pam_ldap?14:42
scuserRockHound: exactly, no pam_ldap14:42
RockHoundbut there must be a pam module somewhere?!14:43
RockHoundno specifically for ldap but for kerberos14:43
scuserRockHound: pam_krb5 is the one which I use14:43
RockHoundokay ... so the problem lies in the communication between kerberos and openldap?14:45
scuserRockHound: yes14:46
=== lamont` is now known as lamont
scuserRockHound: so could you help me with that or just give me guidance ?14:50
RockHoundscuser: I have not implemented such a setup myself but have you tried googling at all?14:54
scuserRockHound: for almost one week :D14:54
RockHoundwhat is the exact error that you are getting?14:55
scuserRockHound: the server logs reports "unwilling to perform simple authentication" error14:57
RockHoundhttp://www.semicomplete.com/articles/openldap-with-saslauthd/ maybe15:00
RockHoundbut to answer your questions about SASL_MECHs: http://linuxcommand.org/man_pages/saslauthd8.html15:01
RockHoundand google really is your friend15:02
nijabaRockHound: do you know about http://manpages.ubuntu.com/ ? Quite useful as well --> http://manpages.ubuntu.com/manpages/hardy/en/man8/saslauthd.html15:10
RockHoundnijaba: well thanks15:12
nijabaRockHound: thanks to kirkland whom put it together :)15:12
nijabamathiaz, zul: I am proposing the merge of a couple additions to vmbuilder, could you please let me know what you think? -> https://code.launchpad.net/~nijaba/vmbuilder/libvirt-netopt/+merge/135515:15
zulnijaba: suuuuuure :)15:15
zullooks fine to me16:01
tonyyarussoSay, what's the server team recommending these days for system backup?16:02
tonyyarussoRight now I'm thinking we'd probably want to do daily differential backups to a USB-attached external hard drive, maybe a weekly full backup the same way, and then a monthly backup of the most critical components to DVD+RW.16:03
nijabatonyyarusso: backuppc or bacula16:03
nijababackuppc is simpler, bacula VERY complete16:03
tonyyarussoDoes complete = complicated?  :P16:03
nijabatonyyarusso: as well, unfortunately16:04
* tonyyarusso looks at package descriptions16:04
tonyyarussoWe could probably get away with something simple for now (one machine), but it might be a good idea to learn the more scalable option while we're at it I suppose.16:04
nijabatonyyarusso: I think it would be a sane investment, if you have a bit of time16:05
tonyyarussoIn random other thoughts, samba should probably be a recommends instead of a depends for backuppc...16:05
tonyyarussoalso odd that bacula is in main, yet lists MOTU as the maintainer.  :P16:06
nijabatonnyarusso: mmh, that would not change much since with 8.10, recommends gets pulled by default as well, unless that's a policy comment, in which case I could not accurately comment16:06
nijabazul: see ^^, should we fix that?16:08
zultonyyarusso: yeah we should16:08
zuli dont think its a big deal though16:08
tonyyarussoOkay, next question:  Given recent changes to consumer data privacy law, I'd like to be able to keep the data in certain MySQL databases (but preferably not all of them) encrypted.  Is there a way to do that, or would you have to do whole partitions for it to work?  (I'm not familiar enough with how MySQL stores the data on disk.)16:09
tonyyarussozul: No, not big.  I'll drop a bug in though.16:09
zulk16:09
tonyyarussoHuh - according to http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389793 samba actually is needed.  Probably a bug in itself, but that's beyond the scope of what I know.16:13
uvirtbot`Debian bug 389793 in backuppc "backuppc: Should not depdend on smbclient, samba-common | samba-tng-common" [Normal,Open]16:13
tonyyarussoI believe http://blog.i64.pl/PiosBlog/200609/01-secure-mysql-database/ answers the latter question.  Nifty.16:21
Koonnxvl: congrats on your motu-sru nomination. I could use some movement on bug 179447 :)16:45
uvirtbot`Launchpad bug 179447 in tomcat5.5 "Installation of tomcat5.5 fails if sun-java-jdk is not installed" [Medium,Fix released] https://launchpad.net/bugs/17944716:45
mathiaznijaba: I'd add some checks for the net-virtio option as some distro don't support virtio at all (< hardy)16:52
mathiaznijaba: I don't know however how easy that could be implemented.16:52
nxvlKoon: just send me an e-mail to check it after work hours16:52
nxvl:D16:52
nijabamathiaz: hmmm, no, network virtio is supported on hardy, not the bd part.16:52
mathiaznijaba: dapper doesn't support network virtio16:53
nijabamathiaz: but I'll do some checking for older os, you are right16:53
nijabas/os/suite16:53
mdzdendrobates: I just installed a recent server daily into KVM using LVM and it doesn't boot.  GRUB says "Error 15: file not found"16:55
dendrobatesmdz: hmm,  can you create a bug?   kirkland can you reproduce it?16:56
mdzdendrobates: I just phoned cjwatson and he is looking into it16:59
mdzdendrobates: it looks like it is using GRUB and uuid when it shouldn't be16:59
kirklanddendrobates: i'm downloading the server iso now16:59
mdzkirkland: I'm about to head onto a phone call but if you tell me which package, I'll get a bug filed when I get off17:00
kirklandmdz: file against grub, assign to me, and i'll reclassify as per necessary17:01
nijabamathiaz: --net-virtio check added in the branch17:08
mathiaznijaba: ok - looks good to me. I don't know if it's a good thing to merge it in trunk now.17:13
nijabamathiaz: how so?17:13
mathiaznijaba: this is a new a feature - and we'll have to ask for a FFexception17:13
nijabamathiaz: gah, right :(17:13
mathiaznijaba: there is a bunch of new code already - most of it is bug fix.17:13
mathiaznijaba: the ec2 plugin is the only one that qualifies as a new feature.17:14
tonyyarussonijaba: Do you happen to know if the version of dvd+rw-tools in Ubuntu has the patch needed for Bacula mentioned at the bottom of http://www.bacula.org/en/dev-manual/System_Requirements.html ?17:14
mathiaznijaba: while I agree that this is useful,  I don't think *now* is the best moment to merge it.17:14
nijabamathiaz: ok, np.  maybe I'll add the check on libvirt / kvm only then17:15
mathiaznijaba: yeah - that seems like a good check to have.17:15
nijabatonyyarusso: feisty and > have 7.0 or >, so I'd ask on some bacula chan/ml if they know if the patch has been integrated, is still needed17:18
nijabatonyyarusso: http://packages.ubuntu.com/search?keywords=dvd%2Brw-tools&searchon=names&suite=all&section=all17:18
tonyyarussookay, thanks17:19
nijabamathiaz: ok, rev 252 has it17:25
kirklandmdz: dendrobates: i am able to reproduce the problem17:43
kirklandmdz: dendrobates: looks like a bug somewhere in the new dm code, as the grub entry is set to root=/dev/dm-017:43
kirklandmdz: dendrobates: which should not be the case17:43
mdzkirkland: please liaise with Colin about it, he's looking into it as well17:44
kirklandmdz: -> #ubuntu-devel, okay17:44
tonyyarussonijaba: Ah, here we go - "Note, some Linux distros such as Debian dvd+rw-tools-7.0-4 package already have the patch applied"17:52
nijabatonyyarusso: \o/17:53
=== iftel is now known as sme2k8
zulnijaba mathiaz: lp:~zulcss/vmbuilder/vmbuilder-bugfixes18:17
nijabazul: great. Will look at it after dinner. Does it include the separate package for ec2?18:18
zulnijaba: of course18:20
* nijaba hugs zul18:20
zulnijaba: tries to remember what he was doing ;)18:21
LordDicraniusI was wondering if anybody could help me decode my "df" output :)19:25
hyljewhich part of it?19:25
LordDicraniusthe device names19:25
LordDicraniusc0d0p*, c0d1p*, c0d2p*19:26
LordDicraniusc0d0 conists of 2 physical drives19:26
LordDicraniusc0d1 and c0d2 both consist of 3 physical drives19:26
hyljeit's a hardware raid setup19:27
LordDicraniusc0d1 and c0d2 both are one big partition19:27
LordDicraniusah, ok19:27
hyljeas far as i can tell19:27
LordDicraniusok, that makes more sense19:27
LordDicraniusat a new job and I'm tryin to decipher stuff since according to my IT manager he knows nothing about it, it was setup by the guy they bought it from19:28
LordDicraniusheh19:28
LordDicraniusis there a term for the c0d2p1 stretching across 3 physical hard drives?19:31
hyljeprobably striping19:32
LordDicraniusin trying to research I've come across "physical partitions," "logical partitions", "physical volumes", "logical volumes" - and those are all just confusing me lol19:32
LordDicraniusoooh19:32
LordDicraniusrebooting the server and getting to the RAID controller software would probably tell me more, huh?19:32
hyljelook up how RAID works first19:32
hyljeyou might not see much sense from the config you get without knowing RAID first19:33
LordDicraniusok19:33
LordDicraniusI think that get me on the right path19:34
LordDicraniusthx for you help hylje :)19:34
hyljeyou're welcome19:34
nijabazul: bzr merge  lp:~zulcss/vmbuilder/vmbuilder-bugfixes20:05
nijabaNothing to do.20:05
nijabazul: did you forget to push your changes?20:06
zulyeah....20:06
zullemme check20:06
zul*sigh*20:07
zulgimme a sec :)20:07
nijabanp20:07
zulhow do you delete branches?20:09
nijabazul: mark them obsolete20:10
nijabazul: click on the yellow pen icon20:10
nijabaerr s/obsolete/abandoned20:11
zullp:~zulcss/vmbuilder/vmbuilder-ec2fix20:16
nijabazul: re:         return '/boot/vmlinuz-2.6.27-7-server'20:22
nijaba2920:22
nijaba 20:22
nijaba2920:22
nijaba 20:22
nijaba3020:22
nijaba    def xen_ramdisk_path(self):20:22
nijaba3020:22
nijaba    def xen_ramdisk_path(self):20:22
nijaba3120:22
nijaba        return '/boot/initrd.img-2.6.27-2-server'20:22
nijaba3120:22
nijaba        return '/boot/initrd.img-2.6.27-7-server'20:22
zulf*ck20:23
nijabazul: does this means we will need to update pvb at each kernel release?20:23
zulyep20:23
nijabameh...20:23
zulunless if I come up with a way to automatically detect it20:23
* nijaba tought he selected only one line before pasting...20:23
nijabazul: mhh, let me think about that. /me not too please at the prospect of running after the latest kernel...20:24
zulnijaba: what I was thinking was to grab all of the config-2.6.27-*-server files in /boot and look for HVC_XEN and return the latest one by data20:25
zuldate even20:25
nijabazul: the way versioning works, latest should be last in alphabetical order as well20:27
zultrue20:27
nijabazul: have time to give a shot at this, or do yo need offloading?20:29
zulnijaba: can you look at it, I have to look at why Im doing something wrong here20:31
nijabazul: np20:31
nijabazul: regarding http://bazaar.launchpad.net/~zulcss/vmbuilder/vmbuilder-ec2fix/revision/254?start_revid=255, did you forget to add some python-vmbuilder-ec2.install file?20:35
zulindeed, I guess I didnt do a bzr add20:35
zulit just contains the ec2 python directory20:36
nijabaok, I'll add it. Thanks20:36
sandstromI have installed php and mysql by themselves. Is there a difference between this and using the tasksel method?20:45
sandstromwould it be better to remove apache, php and mysql and install lamp using tasksel?20:45
nijabazul: I would suggest you to install https://pastebin.canonical.com/10376/ as ~/.vim/python20:49
nijabasandstrom: if it works, it means that you should have done it very close to what tasksel would do20:50
ScottKnijaba: I think it's a bit rude to use a private pastebin on a public channel like this.20:50
sandstromnijaba: so there is no point in doing it all over with tasksel?20:50
nijabaScottK: oh, sorry,  I thought I used a public one20:51
sandstromtasksel wont glue it all together in any specific way?20:51
ScottKnijaba: No.  The canonical one is closed.20:51
nijabaScottK: yes, but I thought I used the ubuntu one.  So here it is: http://pastebin.ubuntu.com/60231/20:52
nijabasandstrom: no, it just makes sure you have a sensible set of packages whose install has been tuned to glue it all together.  So if you picked the same packages, you should be fine20:53
sandstromI picked php5, mysql5 and thats it20:54
sandstrom(and apache2)20:54
nijabasandstrom: may need a few more to glue is all, so would advise to just run tasksel to complete20:55
sandstrombut I didn't go into build-details on which php module to include or what apach2 modules to include20:55
sandstromthanks20:55
uvirtbot`New bug: #286614 in openldap (main) "slapd apparmor profile needs update for multiple databases" [Undecided,New] https://launchpad.net/bugs/28661421:36
uvirtbot`New bug: #286616 in openldap (main) "slapd apparmor profile needs update for multiple databases" [Undecided,New] https://launchpad.net/bugs/28661621:41
Linuturkis there an rss feed of Ubuntu updates?22:07
Linuturksimilar to the debian feeds?22:07
uvirtbot`New bug: #286643 in bacula (universe) "bacula client configuration is broken out of the box" [Undecided,New] https://launchpad.net/bugs/28664322:36
mathiaznijaba: awesome - all of my test for python-vm-builder are working now!23:03
nijabamathiaz: yes, and rev 253 now merges zul's fixes23:10
nijabamathiaz: there are a couple new bugs for vmware, but I think we'll deal with that later. time for an upload23:10
mathiaznijaba: right - I'll work on doing an upload tomorrow23:22
mathiaznijaba: kvm+libvirt testing works for me now.23:22
mathiaznijaba: I'll have to test the ec2 plugin tomorrow23:23
mathiaznijaba: and then we get something uploaded.23:23
mneptoklibvirt, you demon bitch goddess.23:23
mneptokoh, sorry. was that out loud?23:23
tonyyarussoSpeaking of which, anyone want to explain the concept of KVM in oversimplified terms?  (I used VMware Fusion briefly, but I still don't really understand the different types of virtualization and whatnot, and what host/guest pairings work in each, etc.)23:27
tonyyarussoI have a friend who'd like to have a Windows guest on his Ubuntu server for the sole purpose of running a distributed rendering application, so I'm starting to look into how that could be done with KVM and how it works.23:27
nijabazul: here is my experimental branch for xen https://code.launchpad.net/~nijaba/vmbuilder/xendiscoverkernel23:29
zulkvm+special hardware+heady goodness23:29
zulnijaba: coolio23:29
gsanatcihi23:31
* nijaba -> bed23:33
nijabagoodnight23:34
gsanatciI installed ubuntu desktop edition 8.04, but i'm using like server (mysql). I'm not sure, is it correct ?23:34
gsanatciMaybe i'm loosing to much performance.23:34
gsanatcii think, all peoples sleeping :)23:36
gsanatcigood night guys.23:36
trashguy[Solars],23:48
trashguywhat was the torrent thing u showed me23:49

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!