=== espacious is now known as espacious_ === espacious_ is now known as espacious === liberfiasco is now known as libervisco [00:18] Any ideas why bind9 on hardy returns SERVFAIL with the default configuration + forwarders? [00:22] nemoego: here works out of the box [00:22] nemoego: run: rndc querylog [00:23] and watch your logs [00:23] nemoego: can you reach the forwarders? [00:23] try dig @ip.forwarder google.com [00:25] jmedina: dig @forwader works fine, querylog shows query but nothing else [00:28] nemoego: try a trace [00:28] dig +trace google.com [00:38] jmedina: dig +trace works for both forwarders and local server in the same way (root->gtld->nsx.google.com->ip) [00:41] el chat ubuntu server en español, existe? [00:42] luis__: no tengo idea, pero no creo [00:42] luis__: No se. Pienso que no. #ubuntu-es existe [00:43] aca puedo hacer consultas en español? [00:45] Mi espanol no es sufficiente para consultar en espanol :-) [00:45] luis__: yo podria ayudarte, pero ahorita solo tengo unos minutos [00:46] luis__: de donde eres? [00:46] de argentina [00:46] y tu? [00:46] mexico [00:47] jmedina: could it have something to do with recursion? when i dig +norecurse i don't get back an IP, but I do get an authority response with the root servers listed and a status of NOERROR [00:48] jmedina mi idea es instalar un server ubuntu para ir reemplazando los windors [00:48] server [00:48] pero ahora solo aprender [00:49] jmedina instalaste servidores ya? [00:49] luis__: la mayoria de la documentaion esta en ingles, esta la guia oficial "ubuntu server guide" podrias empezar por ahi, y claro pues instalando y probando [00:49] luis__: si, varios a eso me dedico y a dar cursos [00:49] me tengo que ir [00:49] #ubuntu-es btw [00:50] ok gracias [01:05] Anyone here running 8.10 on esx 3x/3.5 ? [01:06] im trying to sort out some strange (what i believe to be apache2) performance issues. [01:08] basic install of ubuntu 8.10 as a vm (512MB / 12GB disk Single Proc assigned) - ran all updates on the system (php5 & apache2) have been installed.. the server seems very responsive ... but webpages served up are very slow ie: zero connections to the box other than mine and a page takes upwards of 10sec's to load... (a simple forum page) [01:09] are there any hacks that need to be done on a ubuntu system thats running on a esx 3.5 box? [01:13] DarkOverlord: I'm no esx expert... but you might want to test browsing from the VM itself (use lynx or w3m if you have to!) and see if the page loads are still slow... if they are fast on the inside, it would point to a networking issue rather than straight performance. Also you could try running top within the VM during that 10 secs and see what is taking CPU time, if anything? [01:15] no GUI on the box, can i load a webpage via a SSH session - im assuming it will just load the text? [01:15] Sure. lynx and w3m are text mode (console) web browsers you can sudo apt-get install. [01:15] looks like it spawed two threads... [01:16] each one maxxed out around 1.7 [01:16] let me try the lynx browser. [01:17] im assuming by default the nic port speeds are setup as auto. [01:17] Me too, but you can install ethtool to check that on the inside of the VM. [01:20] so, it seemed that the sample "IT WORKS" just plain html page loaded fine [01:20] but when it came to the php page [01:20] it still took a while [01:20] even while using the lynx browser [01:21] lynx is the shit... lol. [01:22] i'd recommend elinks [01:23] assuming your terminal is capable, it even lets you use your mouse and click on links and the like [01:23] neat... i dont plan on using browsers all that much on these systems though... [01:24] ill look it up on my dev box though - thanks. [01:24] im just using Putty to connect to the box. [01:24] anything better for your basic network stats other than "nload" [01:24] thats what im using now... [01:25] 'basic network stats'? [01:25] traffic load etc. [01:25] never used nload, no idea what it does [01:26] just displays /in/out traffic [01:26] iptraf may interest you then [01:26] Avg: 2.30 kBit/s [01:26] Min: 0.92 kBit/s [01:26] Max: 12.00 kBit/s [01:26] Ttl: 2.67 MByte [01:26] Outgoing: [01:26] is.. [01:26] sorry. [01:27] let me checkout iptraf [01:27] verycool. [01:28] for basic in/out i use bwm-ng [01:28] hello [01:29] yo. [01:31] http://66.60.246.203/hosted/theanthills/ [01:31] is the test page... [01:31] just a forum .. well a copy [01:31] takes like 6-10 seconds to load [01:32] id reallllly like to get all my sites moved over from a windows iis6 box over to these ubuntu servers ive setup [01:35] i have a question with openssh, is it possible to configure it for passwd authentication on one interface, and keys/whatever on another? [01:36] juac: Yes. You can run two copies of it with two different config files. [01:36] ah, ok. i was wondering if it was possible with 1 copy [01:37] I don't think so. [01:41] just installed a fresh copy of 8.10 server [01:41] can someone please instruct me on how to set up the ftp [01:42] you wanna setup ftp server? [01:43] yes [01:43] What do u want? [01:43] i installed LAMP and openssh [01:43] proftpd or vsftpd. [01:43] either [01:43] i want to be able to ftp to the apache files [01:43] preferably with a passworded login [01:44] SFTP win [01:44] Xperiment62: http://www.vsftpdrocks.org/ or http://vsftpd.beasts.org/ [01:44] its vsftpd [01:45] Xperiment62: ProFTPD mini-HOWTO - Configuring ProFTPD @ http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-ConfigFile.html | HOWTO : Create a FTP server with user ac @ http://ubuntuforums.org/showthread.php?t=79588 | ProFTPD mini-HOWTO Index @ http://www.proftpd.org/docs/howto/index.html | HOWTO: Install proFTPd Administrator @ http://tebl.homelinux.com/files/project_13/source/proftpd_admin_current/misc/howto_install/install.h [01:47] umm what order do i look at those in? [01:49] its all different url.. just check what u exactly need. :) [01:50] the "Create a FTP server with user ac" looks as though it might cover what i need [01:51] hrmm [01:51] is there a server in synaptic that is designed for use with apache? [01:54] huh? === luke__ is now known as lukehasnoname [03:23] how to make default editor vim system-wide? [03:25] have a look at update-alternatives [03:26] axisys: Or do echo 'EDITOR=/usr/bin/vim ; export EDITOR' >>/etc/profile.d/make-vim-default-editor.sh [03:27] and chmod 755 /etc/profile.d/make-vim-default-editor.sh [03:29] jmarsden: too much hack.. let me try ajmitch's suggestion and run update-alternatives first.. [03:29] update-alternatives --config editor [03:30] jtaji, ajmitch cool worked perfect.. thnx === luke__ is now known as lukehasnoname [03:48] Hi everyone.. Looking for some advice. I installed Apache, PHP, MySQL, and Wordpress on my Ubuntu box in hopes of running my WP site off of it. The WP site is taking ~10 seconds to load & the memory usage on the machine is constantly at 80%. The CPU usage peaks to around 85% when someone views the site. The machine has a Pentium 4 processor with 512Mb RAM. Any suggestions? [03:50] Quadruple the RAM [03:50] ball: Is Wordpress really that much of a resource hog? [03:50] Hey, I didn't even know I was /in/ #ubuntu-server! [03:50] Kevin_: I don't know it, but that's a reasonable baseline for a Web app. [03:51] ...for a Web server. [03:51] Alright, how about the Pentium 4. Do you think I can stick with that or will I have to upgrade to a far more powerful machine? [03:52] Of course, that was intended for ball. :) [03:52] For a single wordpress blog? A P4 will be fine once it has enough RAM so it can breathe... but I'm not ball ;) [03:52] Hard to know for sure, but likely you'll be RAM or IO bound and the CPU won't be the major driver. No way to know except to try it though. [03:52] jmarsden: Did you see my note about sepol [03:52] IO bound - meaning what? [03:53] I'm inclined to agree with jmarsden and ScottK [03:53] Or whichever selinux package it was ... [03:53] ScottK: I saw that it depended on some other fix... did that all get worked through the system? [03:53] My gut feeling is that you're hitting swap [03:53] Kevin_: Disk IO to read/write stuff. [03:53] you may be able to type something at the command line to see that. [03:53] Sorry, I'm sort of new at this stuff. [03:53] jmarsden: It needs testing from intrepid-proposed now. [03:53] ...there are probably Apache tweaks too. [03:53] hwo about lamp on p4 with 512M mem ? is that not enough? [03:54] axisys: that was the original question [03:54] Any specific suggestions on how to tackle this problem (besides the RAM, I'm gonna do that)? [03:54] or should I replace apache with lighttpd? [03:54] Ah, OK. I'll check it out later tonight. [03:54] Great. [03:54] axisys: depends what you're doing [03:54] jmarsden: Just comment in the bug if it works or not. [03:54] ball: minus WP [03:54] Kevin_: use a smaller/simpler web app for your blog? [03:55] Write your own ;-) [03:55] jmarsden: This is a pretty big website. It needs WP [03:55] I'm using it as a CMS [03:55] Then it needs a pretty sane amount of RAM ;) [03:55] * ball grins [03:55] Haha, fair enough.:) [03:55] I'll upgrade it and get back to you guys. Thanks for all the help, the support community here is unbelievable [03:56] Kevin_: you may want to ask the Apache people about tuning [03:56] I'm guessing you want one instance permanently resident, with appropriate plug-ins [03:56] ...also find out whether it *needs* Apache [03:56] I'm pretty sure it does. [03:57] What is wordpress written in anyway? [03:57] PHP? [03:57] Kevin_: For general PC hardware advice for Linux, see: http://tldp.org/HOWTO/Unix-Hardware-Buyer-HOWTO/ (which I contributed to... shameless plug) [03:57] 10 seconds to load up a (largely empty) WP blog? [03:57] thats shocking [03:57] * ball nods [03:57] smells like swap to me [03:57] It hits the Index.php file (and a few PHP files it calls) and just is at a stand still [03:58] with 512mb ram? [03:58] swap.. meaning what? [03:58] I dislike php [03:58] Yes 512 [03:58] are you running much else on there? [03:58] Firewall, FTP, Apache, MySQL, PHP [03:58] Kevin_: swap is when your computer runs out of RAM and has to use disk instead. [03:58] How would I be able to tell if it has moved on to that ? [03:58] I don't recommend ftp [03:58] refresh the page a few times [03:58] System resource viewer? [03:58] if it takes just as long each time, it's not swapping [03:59] I believe that to be the case. It seems pretty consistently slow [03:59] Deeps: do you suppose it's launching Apache every time? [03:59] (every time someone connects)? [03:59] ball: if he's using a fairly old browser that doesn't support http/1.1, possibly [03:59] otherwise highly unlikely [03:59] Kevin_: you can check swap usage with free [04:00] I'm using Safari 3 and Firefox 3 to access the site [04:00] Deeps: Mosaic! :-) [04:00] ++ apache keeps childprocs spawned ready to go as + when needed [04:00] Kevin_: try it now. refresh the page 10 times in a row, letting it load fully each time first [04:00] Deeps: that sounds sensible [04:00] Deeps, I'm really sorry but I have the computer at work. I'll have to try these steps tomorrow [04:01] Are apache modules child processes, or threads? [04:01] (is Linux multithreaded?) [04:01] procs i believe [04:01] So, I'm going to install a PHP Accelerator (as WP is pretty much all PHP) and up the RAM. I think those will be my first steps. [04:01] Okay. How does Apache talk to its child processes? [04:01] What is a "PHP Accelerator"? [04:02] It optimizes and caches PHP so it doesn't have to be executed every single time [04:02] no idea, i'm not an apache (or C) developer. i suspect it does it does it the same way most apps do when forking child procs [04:02] Kevin_: pity you can't just use a compiled language :-( [04:03] and php accelerators (if i'm right) will take the interpretted code and compile it, hehe [04:03] to make it more efficient [04:03] Yeah, I really love Wordpress, though. (besides the performance) :) [04:03] I have another site on an Intel Xeon w/ 2Gb of RAM and it flies [04:04] ball: http://httpd.apache.org/docs/2.0/mod/worker.html for info on the apache process model (well, one of them) [04:05] jmarsden: useful info, thanks. [04:05] Kevin_: I've been tinkering with a Xeon box lately. Can't justify one for use at home though. [04:05] I really need to launch this site soon and I can spend some cash if necessary. Would I be wise to simply purchase a powerful server if I intend to grow this site? [04:05] yes [04:05] Kevin_: yes, buy something with expandability [04:06] * ball tinkers [04:06] What about an Apple XServe (I ask because I'm a Mac person) [04:06] ugh [04:06] IBM x3650 will take up to 48 Gbytes of RAM [04:06] ...up to eight 2.5" hard disks [04:06] outgrow that bugger and you're doing alright. [04:07] * Nafallo is not a fan of IBM servers [04:07] Haha, ok. I'm going to have to think about this. Thanks again for all your help, I'll see you later [04:07] I wouldn't mind an x3250: 8 Gbytes RAM, four 2.5" hot-swap drives [04:07] Nafallo: why's that? [04:08] Kevin_: Spend some money on RAM and see what that does for you before you make a major investment. [04:08] ball: HP is far better in my opinion :-) [04:08] ilo ftw [04:09] Kevin_: ScottK is right -- $100 for 2Gb RAM is worth doing first. [04:09] the IBMs have some weirdness going on with power. [04:09] 0407.57 -!- Kevin_ [n=Kevin@c-71-60-105-245.hsd1.pa.comcast.net] has quit [] [04:09] type faster? ;) [04:10] Nafallo: power consumption, or POWER processor? [04:10] Nafallo: I recently deployed an HP ML110 [04:10] ball: not turning on when power comes back. [04:10] ...was amazed how quiet that was [04:10] Nafallo: usually that's a CMOS setting [04:10] ball: I wish [04:11] Did you ask IBM? [04:11] ask IBM why they didn't include the settings I need in the BIOS? :-) [04:11] no. haven't done that. [04:12] ...ask IBM wtf your server doesn't boot when power returns [04:12] ...though I'm sure they'll wonder why it's not on a UPS [04:12] Even UPS run down eventually. [04:13] ehrm. we need to be able to remotely reboot the machines. we do so via PDUs :-) [04:13] * ball nods [04:13] so don't really care what they think ;-) [04:13] ScottK: your UPS should be able to tell the server when the battery's running low, so that it can perform an orderly shutdown [04:13] then the server should be able to tell the UPS when it's done that, so that the UPS can switch off its load [04:14] ball: Separate issue from startup when the power comes back. [04:14] ScottK: yes, that's a fair point. [04:17] HP included screws for new harddrives on the actual caddy to place it in (already empty in the server) [04:17] they include all tools needed (when you actually do, it's seldom) on the actual servers somewhere as well. [04:18] feels like they put actual thought into things when they do them :-) [04:18] not looking back... :-) [04:18] Nafallo: I've been impressed with HP's tech support too. [04:18] there RMA department still haven't said no to me :-) [04:18] their even [04:19] so yea. I have a favorite brand ;-) [04:19] ehrm. vendor, whatever the correct word is. [04:20] That reminds me, I should piece together that Compaq box === badawi_ is now known as badawi [04:57] hi all..... [04:57] anyone got experince in installing xen on hardy? [05:11] * ball can't afford a machine capable of running Xen [05:16] i am using an average pc to run xen...:) [05:16] but only for the sake of learning....:) [05:17] i have one problem....when i run "xm create /etc/xen/ubuntu.lan" [05:18] this error appeared...."Error: (38, 'Function not implemented')" [05:18] anyone ever faced this kinda problem? === KingOfDos|lap is now known as KingOfDos === luke__ is now known as lukehasnoname [06:21] /quit [07:55] Hello! [07:56] is there a way to change the reboot key combination from ctlaltdel to ctrl+alt+r ? [07:56] the stupid windows admins keep pressing that kombination on my kvm switch all the time! [08:00] spiekey: edit /etc/event.d/control-alt-delete [08:01] Hah I can see that being annoying [08:03] hehe, thanks! [08:10] henkjan: do you maybe know the setting for debian4, too? [08:11] /etc/inittab [08:13] well yes...but in both cases...i would like to change it to ctrl-alt-r and not disable it completly [08:16] spiekey: See http://en.wikipedia.org/wiki/Magic_SysRq_key for something sort of close to what you are attempting? [08:16] I don't think you can make some random key combo of your choice reboot the Linux box... [08:16] Or type reboot [09:14] i came in asking about ftp earlier, i now have it set up.. i just need it to automatically change the ownership of the files [09:14] so that i dont keep getting 403's [09:15] Xperiment62: Which FtP server are ya using? proftpd? or vsftpd ? [09:15] i am using vsftpd [09:15] Join #Vsftpd they will help ya better with that. [09:15] thanks LoveGuru [09:15] Xperiment62: might be forum will be helpfull check website first. which i gave it to ya [10:23] someone here that knows abouot mysql server setup ? [10:25] apt-get install mysql-server :P? [10:28] that part is over :p but its more complicated than that ... what i need is to make a odbc connection from a windows machine in my lan , to my mysql server. So I have it installed, I reconfigured the /etc/mysql/my.cnf file wit the servers fix ip ... I do not have a firewall set up. When i do a portscan to my sever it does not show the mysql port ... [10:28] the deamon is running and localy it responds correctly [10:29] <\sh> kris_: and a mysql -u -p -h does work from outside? [10:31] And you restarted it [10:31] yep [10:31] restarted first the service [10:31] afterwords I also restarted the complete machine [10:31] Nothing like overkill :) [10:32] bind-address 0.0.0.0 [10:32] :p yeah , but I was getting sick of it so i just rebooted the machine out of frustration (dam, i'm busted) [10:33] bind-address = 0.0.0.0 [10:33] bind adres at this time is my servers ip [10:33] so i should trye wit 0.0.0.0 ? [10:33] Shouldn't make a difference [10:34] netstat should tell you how it's listening === `6og is now known as Kamping_Kaiser [10:35] netstat sais it is listening ... [10:36] what is strange is that for my httpd, ftpd, or sshd I can find the ports open and listening [10:36] and i can detect them with my portscanner. [10:38] Hello everybody. Can someone help me on an instalation issue? I would like to install Ubuntu Server on a machine that previously had Windows on it, but the thing is I don't want to lose the files that are currently on the hard drive (other than the Windows files). Thanks [10:38] using a telnet session from my ubuntu machine to the server on port 3306 i do get a connection [10:38] hello, I have lost connection to the internet, still have limited LAN connection - any ideas? [10:39] Pilgrim : when you install sever you get a menu for the partitioning ... it wil propose you to shrink your windows partitions to make room for your ubuntu partitions. [10:39] also it will install a bootloader so that you can choose between the server and windows when you boot the machine ... [10:40] Thanks Kris. I was thinking about that to, but I was hoping there could be another option. :) [10:41] hmmm If you have a second disk you could dedicate a disk to ubuntu and one to windows ... but you will still need a bootloader in your master boot record. .. [10:42] pilgrim: wubi installer from windows is another option [10:42] why do you need the ubuntu server ? You could use vmware server to create a virtual machine under your windows ... advantage, no data can be lost. [10:42] and vmware server is free ... [10:42] ...of cost [10:43] pilgrim: installs ubuntu into a single file on your windows partition, and boots it from there too. it's stored as "just another file" on your filesystem, no risk at all too. [10:43] even the vmware esxi is free now ... but i thik that would be a little advanced and it will erase everything so you would have to reinstall ... [10:43] personal page webhosting and mai server. that was the last machine I had that was running on Windows and want to loose it permanently (windows that is) [10:45] and I always like a clean install better then a VMWare Solution === MenZa_ is now known as Menza === Menza is now known as MenZa [10:46] I think the best option is partition the hard drive, install linux, transfer all the files from the windows partition to the linux partition and then delete the windows partition and allocate the free space to the linux one, then edit GRUB [10:47] how big is the hd ? [10:47] 120 Gb, and I have about 55Gb free [10:48] you could make an iso file from your current file system using an ubuntu live cd for instance, afterwords you can mount the iso file under a directory, ... [10:50] that could be an idea also [10:51] yeah but it would imply that you need cleanup the hd, and only copy the files that you would like to keep .. Iso does not use compression so you would end up with an very large file [11:03] Can't access the internet, LAN seems okay - any takers? [11:07] route and dns [11:08] <\sh> kris_: I wonder if nmap checks for ports > 1024 automatically... [11:09] think I found it ... [11:09] ] \sh yup [11:09] <\sh> ropetin: does it? [11:09] typo in config file and i am up and running now [11:09] For me it does (it finds VNC servers as standard, 5900) [11:09] I don't /think/ I've changed anything :) [11:11] <\sh> ropetin: ok.. I wasn't sure about that...we do have accesslists between our vlans and normally we don't run any mysql server on public reachable ips... [12:07] moin === andreas__ is now known as ahasenack === Coffe2 is now known as Coff3 [12:59] Hi ppl, is trying to get kerberos working here.. but to auto get a ticket on login aint realy working for me. [13:16] how do I disable this `Dec 18 07:50:06 sys-ubuntu -- MARK --' ? I am getting every 20 mins [13:16] in my log file [13:16] you don't want to disable that [13:16] ivoks: who sends it? my fw? [13:16] that way you know everything is ok with your system [13:17] no, syslog it self [13:17] ivoks: ok [13:17] it doesn't have any entries, so it puts a 'MARK' in it, so you know everything is ok, and syslog is working [13:18] ivoks: gotcha [13:21] there is a way of making them less frequent though. [13:24] SYSLOGD="-m 60" in /etc/default/syslogd to make them hourly, for example. [13:26] Koon: cool.. let me do that .. thnx [13:27] what kind of a server doesn't have a single entry in syslog for 20 minutes? :) [13:28] how do I know I am using raid controller instead of disk ? [13:28] ivoks: the fanless brick I use for deb mirroring and other strange uses [13:28] it says /dev/sdb [13:28] ivoks: it avoids waking the disk up too often [13:28] Koon: not even update-motd? :) [13:28] axisys: lshw [13:29] ivoks: you're right, I've to check out that one :) [13:29] you should pipe that trough less [13:29] * ivoks patched tar to support selinux, xattrs and acl [13:29] will try pushing that into debian first... [13:29] ivoks: http://pastebin.com/f7b92a07b [13:30] axisys: you should read that your self [13:30] ivoks: yep reading [13:31] i see you have two fujitsu disks [13:31] and one logic disk [13:31] ivoks: yes.. it is a sun x4100 [13:32] from lshw it looks like i am using lsi raid controller /dev/sdb [13:32] and one more disk [13:32] on USB? [13:32] and two cdroms [13:33] ivoks: one cdrom and might be more than usbs [13:33] df -h shows /dev/sdb1 as / [13:33] so I guess i am good [13:33] and what's /dev/sda? [13:33] i did setup a raid1 .. just want to make sure i am taking advatnage of that [13:34] ivoks: usb [13:43] does anyone have any problems for apache 2.2.11 for jaunty? [13:48] I know this is a sacrilege to ask this, but is there a way to install graphical interface on Ubuntu Server? [13:48] :D [13:54] pilgrim: you'll get banned [13:55] we'll set up a kind of ubuntu server shell for jaunty [13:55] sorry, didn't mean to break any rules. I'm just new to this and I kinda don't get along to well with the command line [13:56] again sorry [13:56] that should help with some stuff [13:56] but no, no X, never [13:58] zul: nope :) [14:00] pilgrim: You can install a desktop environment for ubuntu-server, but most server applications don't have a gui frontend for administration. [14:00] Pici, apt-get install ubuntu-desktop i think [14:00] sorry [14:00] pilgrim: You can sudo apt-get install ubuntu-desktop, kubuntu-desktop, xubuntu-desktop, etc. as Pici says, but any questions about it are OT for this channel. [14:01] pilgrim: You can ask for support in #ubuntu for that :) [14:01] ok guys, thanks a lot. appreciate it, and sorry for the off-topic once more [14:02] :) [14:04] http://pics.nase-bohren.de/nerd.jpg [14:32] New bug: #309339 in krb5 (main) "kadmind will not listen on IPv6 ports" [Undecided,New] https://launchpad.net/bugs/309339 [14:34] heh i manage to have a gallery2 server running w/ all my users hitting it w/ only 512M of ram [14:36] Morning fellas! [14:37] Faust-C the swap usage must be nasty [14:38] Anyway familiar with virt-manager? I'm having a problem here .. I'm connecting to a remote server via the ssh tunnel -- and when I open a console window i get a tcpip error, vnc connection refused or disconnected. [14:39] kinnaz_: havent had any error reports yet [14:39] hello [14:39] does anyone here have experience using virt-manager or similar to work with xen remotely? [14:40] Faust-C i personaly think every webserver should have atleast 1gb memory, prefferebly 2gb [14:40] kinnaz_: i just wanted to test this out, its a VM so i can make changes easily [14:40] geekboxjockey, lol, I'm fighting with an issue like that myself here ;) only its virt-manager /w kvm. [14:40] I am trying to set up remote management and am not sure of what I need to enable and configure, by default it looks like I can't connect [14:41] SalsaDoom, yeah its great, I like the command line stuff, but I am curious to know if I can expose the system to various users through a GUI, since not all of us are console people :P [14:42] geekboxjockey, On the surface, it looks fairly simple. I'm having problems opening the console remotely, but otherwise it seems functional. Do you already have the server setup? [14:42] ie, you just need to setup a remote management box? [14:44] ssh ftw [14:44] * SalsaDoom seconds this. [14:45] I think that ssh is the single greatest tool ever written ;P [14:45] thats one of the main issues ppl have w/ vanilla xen is management tools [14:45] running remote grafic i am using NX . [14:45] SalsaDoom: agreed [14:45] SalsaDoom: yeah it's up and healthy, I just don't know which service to enable or if i need to add certain permissions for users [14:45] command line is great IMHO, but I'm a developer, and I need to sell this to IT people [14:46] !ebox | geekboxjockey [14:46] geekboxjockey: ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox [14:47] geekboxjockey, Well, you need to enable a root account I believe. Then just have ubuntu-virt-mgmt installed on the client machine... usual user permissions apply I believe [14:47] eBox ... not to fond of it [14:47] er, I should be more clear. Root account should be accessible on the -server-. [14:48] * SalsaDoom is assuming your talking about virt-manager, since you said gui ;) [14:48] Ideally it would be nice to just use a simple lightweight client, yeah like virt-manager or convirt etc [14:49] basically I just need to know what service to enable in the .sxp config for Xen, and what, if anything, to do to create users [14:50] hmmm, I'm only vaguely familiar with kvm, not at all with Xen ;\ [14:55] anyone know how to set software raid to use the noop scheduler? [15:04] hmm, well, anyone ever used virt-manager to open a vm console over an ssh tunnel? [15:04] I'm obviously missing something, I get a connection refused ;\ [15:05] Oh humm. I wonder if my non-standard ssh port might be causing an issue, now that I think about it. [15:09] hello dinsdale07 [15:10] hi ball [15:33] aha, yeah, ok, the problem was caused by the non-standard ssh port. [15:33] :) === fenris_ is now known as e-jat [18:36] isnt there a way to block a user from using dhcp using thier mac address [18:43] how can I make a apache2 SSL certificate? [18:44] freaky_t: a self-signed certificate? [18:45] for apache2 [18:45] yea [18:45] that apache2-make-ssl-cert script doesnt exist anymore [18:45] freaky_t: do it by hand [18:45] how [18:45] with openssl [18:46] openssl req -new -x509 -nodes -out server.crt -keyout server.key [18:46] where do i specify for how long the certificate is valid? [18:47] leonel: Debian did an update to clamav for etch that dealt with the jpeg issue. [18:47] Anyone here used Ubuntu in a cluster situation? [18:47] leonel: Maybe you could have a look at their patch and we could backfit the patch to re-enable modules at the same time ... [18:48] ball: I'm pretty sure ivoks (not here right now) has. [18:48] freaky_t: https://help.ubuntu.com/community/forum/server/apache2/SSL [18:48] jpds that doesnt help [18:48] freaky_t: add -days 356 ... [18:48] freaky_t: https://help.ubuntu.com/8.04/serverguide/C/certificates-and-security.html maybe? [18:48] scottK I'll check that .. [18:48] leonel: Great. [18:49] leonel: man x509 also works :) [18:50] jmarsden|work: and google ... [18:50] ScottK: thanks. [18:56] Greetings... quick question. [18:56] hello Fenix [18:56] the permission of -rwsrwxr-x ... what is the octal value? [18:57] what's the s? [18:58] 775 if it's rwxrwxr-x [18:58] stick [18:58] sticky [18:58] 7 = 111 = rwx, 5 = 101 = r-x [18:58] Oh, dunno about the sticky bit. [18:59] 2775 [19:00] not, it is 4775 [19:01] jmedina, ok... so 1775 is for rwxrwxr-s, 2775 is rwxrwsr-x and 4775 is rwsrwxr-x ... sound about right? [19:01] it is SUID [19:02] Ah, the suid bit? [19:03] 4xxx SUID, 2xxx GUID 1xxxx Sticky bit [19:08] * ball writes that down [19:10] jmedina, I'm trying to use find -perm to list all files with SUID bit on and it's listing all files... using find ./ -type f -perm 4775 [19:11] ahh... it's my version of find... doesn't support perm [19:23] how does one use find to exclude a particular directory... for instance, I want to find everything in / but exclude /dev from the results [19:27] Fenix|work: find / ! -name '/dev' ? [19:28] Fenix|work: If you want to just stay within the / filesystem, you will probably want -xdev as well? [19:29] Fenix|work: try find / -type f -perm -4000 [19:31] jmedina: but that would potentially exclude other file systems Fenix|work might want [19:33] I basically want to find all files with the SUID bit set [19:33] regardless of the other portion of the files permissions [19:34] ohhhhh [19:34] sorry, didn't read the scrollback [19:35] darn... 4000 and u=s don't work [19:35] yet 4775 shows a whack of files [21:31] hi, I notice there hasn't been any testing feedback yet for server images on http://iso.qa.ubuntu.com/qatracker/build/all - is anyone looking at these for alpha-2? [21:31] Anyone here using teredo ? [21:31] (miredo on Ubuntu) [21:51] * antdedyet groans [21:52] i don't know if this is a dumb idea, but is the jockey driver config tool likely to have a cli frontend made for it ever? [21:52] i'm comfortable compiling my own drivers, but i'm also lazy [22:00] spowers: check out the module-assistant command [22:00] thanks, will try it [22:00] Hello, have a quick question regarding ssh, when i login to my box through ssh i wan't when i put my login after that it shows my rules before processeding further after put my id and before the password it shows my rules, how can i do that? [22:01] LoveGuru: see the sshd_config option "Banner" [22:02] spowers: thanks, and after passwd use /etc/motd.tail right? [22:02] thats for to motd. [22:03] LoveGuru: the sshd banner is sent to the remote user before authentication is allowed, says the manpage for sshd_config [22:03] spowers: alright [22:03] and motd.tail is sent afterwards, correct [22:04] okie thankx :) === erichammond1 is now known as erichammond [22:17] spowers: Thankyou so much to point me in correct direction. [22:19] spowers: i want user jail like.. if i create any user the user got permission like they can't cd .. to any other directory.. well stright i wan't that if i create user they can't move or check any other dir or user ? [22:21] that's a combination of having good filesystem permissions and perhaps you also want to use rbash (man rbash) for their shell [22:21] a real chroot jail environment would require a lot of setup [22:21] spowers: any guide for chroot jail ? never done it before. [22:21] also you should read up on selinux mandatory access controls [22:22] um selinux. [22:22] there's no one way to do it, as far as i know, because chroot is such a rudimentary tool that it can be used in so many different ways as to make explanation difficult [22:23] Well basically i never done it before.. so i don't know where should i take my start [22:23] basically it takes a process and makes it so that process can't access directories outside of the specified one.. and it goes for all subprocesses too, which means each chroot environment would need to include a little system [22:23] they're really only good for hackish development or other very specific uses [22:24] spowers: well im trying to run small server. [22:24] i don't want my users can see each of users files [22:24] You can do that with apparmor too and it's probably easier to get started with. [22:24] or anything else in my box [22:24] ScottK: is apparmor easier than selinux? i'm not familiar with either of them [22:25] alright thankx guys.. [22:25] ScottK: ur guide always work for me :) [22:25] thankx spowers n ScottK === chmac is now known as chmac_away [22:55] Hi there, I'm on ssh to my 8.04 server, I "su john" it asks for the password, but when i start typing it, it says authentication error. [22:55] weboide: You should try to enter the correct password :) [22:55] Jeeves_: I didn't even hit enter [22:56] weboide: Ah :) [22:56] i start typing (for example): p... [22:56] and then it says authentication error [22:57] See for yourself, it shows: asswordsu: Authentication failure [22:57] it stops after the first letter [22:59] Jeeves_: Hmm I think I found it, that debsign that made my terminal crash... [23:02] Hi There, I'm trying to install 8.10 on my Old NetVista Tower but everytime it gets to the hard disk scanning phase, it just flickers and goes in an endless loop [23:03] what do I do to fix thid [23:03] this* [23:10] what is "search isp.com" in resolv.conf for? === chmac_away is now known as chmac [23:50] anyone still up? === liberfiasco is now known as libervisco [23:50] does ubuntu server sync time automatically? [23:50] default ubuntu server install [23:53] once on boot [23:55] openntpd is a simple way to do it. [23:56] ntp is even simpler, and supported :-) [23:56] ntpd even [23:56] but I think the package is ntp? [23:56] The package is "ntp", yes. [23:57] when I installed it it was ntp-simple ;-) [23:57] No idea why anyone would go and compile a random ntp daemon, even if it does have the coolness of OpenBSD behind it. [23:57] then things started replacing that with simply ntp ;-) [23:58] ntp vs ntpd? what's the diff [23:58] ntp vs openntpd* [23:58] The part where OpenNTPd hasn't seen a portable release in over 2 years isn't comforting either. [23:59] You find ntpd simpler than openntpd? [23:59] Mal3ko: The difference is implementation. The difference from a user standpoint is that one is packaged, maintained, and up-to-date, and one only works on OpenBSD unless you want an ancient codebase.