| Zombie_Gaz | jmedina: Do you understand what I mean, though? Right now my machine is c-68-82-187-97.hsd1.de.comcast.net. But I own server.com and have my domain pointing to my IP address. I want my machine to be machinename.server.com. | 00:00 |
|---|---|---|
| dazman | Zombie_Gaz, You need to speak to the owner of the netblock to get reverse DNS setup.. as they'll need to do it on their DNS servers.. in this case, comcast to see if they'll do it for you. | 00:00 |
| === jjesse_ is now known as jjesse | ||
| Zombie_Gaz | Ah. So this isn't something I can do on my machine. It's via my ISP? | 00:01 |
| jmedina | you can't set RR for your IP address, unless your ISP delegate it to you, which they do rarely | 00:01 |
| dazman | Zombie_Gaz, yes, the owners of the IP. | 00:01 |
| Zombie_Gaz | Got it. | 00:01 |
| dazman | Zombie_Gaz, and providing your own forward zone (domain.com -> Your IP) matches the reverse zone (Your IP -> domain.com), it'll show as domain.com on your IRC hostmask for example. | 00:01 |
| dazman | Zombie_Gaz, but really, you'll need to speak to comcast in the first instance to see if they can help. | 00:02 |
| Nafallo | 98.0.105.78.in-addr.arpa domain name pointer home.magicalforest.net. | 00:02 |
| Nafallo | :-) | 00:02 |
| dazman | :) | 00:02 |
| dazman | I was lucky in that my ISP will delegate reverse DNS to me, or, now.. (which is easier) they give me a web panel to change it myself.. :) | 00:02 |
| * jmedina hates in-addr.arpa | 00:03 | |
| Nafallo | dazman: ha. nice. | 00:03 |
| Zombie_Gaz | Any familiar with comcast's feelings towards this? | 00:05 |
| Zombie_Gaz | erp (Anyone) | 00:05 |
| * Zombie_Gaz has a feeling it is not positive. | 00:06 | |
| ScottK | Zombie_Gaz: Do you have a business account or a residential one? | 00:06 |
| Zombie_Gaz | residential ;( | 00:06 |
| ScottK | Comcase no haz reverse DNS for you. | 00:06 |
| Zombie_Gaz | hah | 00:06 |
| ScottK | You're violating your terms of service running a server. | 00:06 |
| Zombie_Gaz | Yeah. | 00:06 |
| Zombie_Gaz | Boo. | 00:07 |
| ScottK | For business accounts they have it no problem. | 00:07 |
| nephish | hey all, anyone running mysql with master -> slave replication | 00:19 |
| nephish | ? | 00:19 |
| milestone | nephish: yeah why | 00:23 |
| milestone | anyone got drbd0.7 to run under hardy? | 00:24 |
| nephish | well, i am wanting to set up master slave replication on our backup server. The trick is, we are going to move our backup computer to another location. | 00:24 |
| milestone | so whats your question | 00:24 |
| nephish | i am wondering if that is going to present a problem. | 00:25 |
| milestone | who is the master and who is the slave? | 00:25 |
| nephish | i would have to change the slaves host name on the main, etc. | 00:25 |
| nephish | master is our main server. | 00:25 |
| nephish | just that our database is almost 8 GIG, so it will be very difficult to move the copy over once we move the system | 00:26 |
| milestone | nephish: stop the server, note the binlog position | 00:27 |
| milestone | move the server | 00:27 |
| milestone | change the configuration on the master | 00:27 |
| nephish | I live in the heart of Tornado Alley, so we just cannot have our main and backup server in the same place | 00:27 |
| milestone | if you still need it you would have to double check | 00:27 |
| nephish | ok | 00:27 |
| milestone | then start replication server again | 00:27 |
| milestone | check if it automatically rolls all transactions from the master to the slave | 00:28 |
| nephish | is there some kind of option to load the slave computer from scratch? | 00:28 |
| nephish | i can't do a mysqldump because of how long it will lock up the database | 00:28 |
| milestone | otherwise tell the master from which last transaction (the number you noted down) the transaction log should be replicated | 00:28 |
| milestone | that should be it | 00:28 |
| nephish | ok | 00:29 |
| milestone | nephish: maybe you can do mysqlhotcopy | 00:29 |
| milestone | turn on binlog on the master | 00:30 |
| milestone | lock the master | 00:30 |
| milestone | write down the transaction number | 00:30 |
| milestone | do mysqlhotcopy | 00:30 |
| milestone | unlock the master | 00:30 |
| milestone | copy everything to the slave | 00:31 |
| milestone | get it up and running | 00:31 |
| milestone | tell the master from which numer on the transactions should be replicated | 00:31 |
| nephish | ok | 00:31 |
| milestone | and please make sure to read http://dev.mysql.com/doc/refman/5.1/en/replication.html | 00:31 |
| milestone | maybe my info is outdated because it has been a while | 00:31 |
| nephish | ok. | 00:32 |
| nephish | looks good | 00:32 |
| nephish | thanks for the link | 00:32 |
| milestone | nephish: google mysql replication -> first hit ;) | 00:32 |
| nephish | yeah, kinda bypassed it for some how-to and tutorial websites | 00:33 |
| milestone | nephish: it is always better to clearly understand what you are doing. Stay away from howto and tutorials if you have good documentation at hand. Which is the case with mysql | 00:34 |
| nephish | thanks | 00:34 |
| MatBoy | will scst be included in ubuntu ? | 00:56 |
| uvirtbot` | New bug: #316957 in mysql-dfsg-5.1 (universe) "package mysql-server-5.1 5.1.30-2ubuntu1 failed to install/upgrade: 子进程 post-installation script 返回了错误号 1" [Undecided,New] https://launchpad.net/bugs/316957 | 02:25 |
| uvirtbot` | New bug: #316974 in mysql-dfsg-5.1 (universe) "Mysql dead after update" [Undecided,New] https://launchpad.net/bugs/316974 | 03:51 |
| Doonz | Hey guys How can i change the repositories from a local one to the main one. the local one is horribly slow | 03:55 |
| hads | /etc/apt/sources.list | 03:56 |
| Doonz | ok but where can i get the list of main servers | 03:57 |
| hads | Everything is something.archive.ubuntu.com | 03:58 |
| Doonz | something.archive.ubuntu.com | 03:58 |
| Doonz | k thanx | 03:58 |
| hads | Um, not literally. | 03:59 |
| Doonz | oh | 03:59 |
| Doonz | cause the canadian ones are brutally slow | 03:59 |
| hads | If you're in Australia you would use au.archive.ubuntu.com | 03:59 |
| Doonz | usa = us | 03:59 |
| _Cid | evening peeps | 04:10 |
| nomingzi | can I run fsck command for NTFS partition ? | 04:12 |
| nomingzi | i means is it safe to run fsck command in NTFS partition, I am newbie. | 04:13 |
| nomingzi | How to i check & repair NTFS partition in Linux CLI ? | 04:13 |
| _Cid | beats me :/ | 04:13 |
| Doonz | what are the letters in the repositories for usa | 04:15 |
| Doonz | http://ca.archive.ubuntu.com intrepid-updates <-- thats canada whats the usa one? | 04:16 |
| _Cid | us? | 04:16 |
| uzair | hey all, needed to setup a SOHO server for basica file/print sharing and authentication. it seems like samba + ldap is the solution, however apparently samba has limitations | 04:16 |
| uzair | i was trying to figure out what setup would work best. any help is much appreciated | 04:17 |
| _Cid | pardon my ignorence ...SOHO? | 04:17 |
| uzair | small office/home office | 04:17 |
| _Cid | !soho | 04:17 |
| ubottu | Sorry, I don't know anything about soho | 04:17 |
| _Cid | ahhh, ok | 04:17 |
| uzair | yup | 04:17 |
| uzair | anyone alive? | 04:17 |
| _Cid | what limitations you looking at? | 04:17 |
| * ScottK finds a HP JetDirect box sitting on the network plenty for SOHO print serving. | 04:18 | |
| _Cid | I mean ...I run that setup, works fine | 04:18 |
| uzair | well, apparently it _has_ limitations. i was trying to figure out what exactly | 04:18 |
| hads | For SOHO I doubt you will run into any | 04:18 |
| hads | How big is this office, do you really need central authentication? | 04:19 |
| uzair | basically what i'm looking for is a file server to host the files used to run a couple windows-only apps (GoldMine & QuickBooks) | 04:19 |
| _Cid | no limitations so far :P | 04:19 |
| uzair | and was hoping I could have it work like a domain controller for central auth | 04:20 |
| uzair | about 5 employees, however it can gro | 04:20 |
| uzair | w | 04:20 |
| _Cid | I done a setup like that once for a 8 man company - worked fine with samba | 04:20 |
| uzair | i needed everything on the server (except that the apps could run locally -- esp since most clients will be windows) | 04:20 |
| uzair | _Cid: your experience would be greatly appreciated if shared :) | 04:21 |
| _Cid | uzair: I dont know what to say really :) I spend an afternoon, started witht he samba.conf which is pretty well documented, and a few google hits ... and had it up and running in pretty much no time | 04:22 |
| uzair | i'm a relatively advanced user w/ windows and maybe intermediate (although that may be pushing it) on linux, but i'm quite new to system admin. i have a large understanding of various parts of it, but never setup a whole network like this before | 04:22 |
| _Cid | uzair: I seem to recall having the most trouble with getting windows to detect it as a domain server ...oh..and some issue about home directory replication I accidently set up ..and couldnt figure out how to turn of (whenever you logged in to a enw machine, bunch of files got copied over, woops) | 04:23 |
| uzair | _Cid: did you use samba for central auth? were people logging onto a domain or were they just mapping drives? | 04:23 |
| _Cid | uzair: you can do both with samba | 04:23 |
| _Cid | uzair: a starting point would be /etc/samba/samba.conf - there are commented out examples in there that pretty much does it for you :-) | 04:24 |
| _Cid | err smb.conf, sorry | 04:24 |
| uzair | what about the use of ldap? | 04:24 |
| uzair | tdb? | 04:25 |
| _Cid | err..was on a fedora box...think it was called FDS | 04:25 |
| hads | http://doc.ubuntu.com/ubuntu/serverguide/C/samba-ldap.html | 04:26 |
| _Cid | and/or: http://www.majen.net/smbldap/ | 04:27 |
| uzair | thanks hads. i had found these two as well: http://www.howtoforge.com/ubuntu-gutsy-samba-domaincontroller | 04:27 |
| uzair | and, http://www.howtoforge.com/openldap-samba-domain-controller-ubuntu7.10 | 04:27 |
| _Cid | uzair: Its not that I dont want to help btw, sorry if it comes across like that ..I just dont recall a lot of issues ...kinda..just..worked | 04:27 |
| uzair | np. people are often busy as well, etc. i was hoping if you had a guide or something you used, you could pass it along. if you just went at it raw, then i wouldn't really expect someone to teach me everything on the spot | 04:28 |
| _Cid | in terms of limitations, I cannot think of any you will run into with 5 users :-) | 04:28 |
| uzair | what are some limitations that these people talk off | 04:28 |
| _Cid | who are these people...windows people? | 04:29 |
| uzair | specifically in the intro of this article: http://www.howtoforge.com/openldap-samba-domain-controller-ubuntu7.10 | 04:29 |
| uzair | "Please note that you do not have a fully comparable Windows domain controller at this time. Do not kid yourself, this guide only gets you a server with LDAP authentication." | 04:29 |
| _Cid | yeah, well..its not a fully featured domain server | 04:29 |
| _Cid | <shrug> | 04:30 |
| _Cid | dont think you can set up cross domain trust ..as an example (or at least, I dont know how to) | 04:30 |
| uzair | hmm. now ldap seems to be quite a bit of a hassle, i was considering just using tdb. would it be a pain to switch to ldap later on? | 04:30 |
| _Cid | with 5 users, I would go as light as I could - LDAP does seem a bit like overkill, unless you have a need for it | 04:31 |
| uzair | well, there is potential for growth | 04:31 |
| _Cid | you hiring? :D | 04:31 |
| uzair | i don't expect it to go beyond 20ish | 04:31 |
| uzair | lol, you don't wanna work for me just yet ;) | 04:31 |
| uzair | but seriously, as the business grows, we're going to need people | 04:32 |
| _Cid | what you going to do? | 04:32 |
| uzair | business-wise or server-wise? | 04:33 |
| uzair | server-wise | 04:33 |
| _Cid | well, since we are in ubuntu-server .... I was curious as to your business idea :) | 04:33 |
| uzair | i was hoping to basically have a file server for centralized storage of files as well as the data for a couple of windows-only apps | 04:33 |
| _Cid | uzair: you will have that part up in minutes | 04:34 |
| uzair | lol, business idea doesn't really have much to do with ubuntu, or linux. besides, my dad takes runs that part -- i'm supposed to play the IT guy | 04:34 |
| uzair | right | 04:34 |
| _Cid | uzair: take it in phases, get file share up and running first - again, check out smb.conf | 04:35 |
| uzair | now secondly, those special apps need to be run on win machines, so they'll be there local. however all their info will be on the server | 04:35 |
| _Cid | assuming there is support for that in the windows client | 04:36 |
| uzair | there is, checked that part out | 04:36 |
| _Cid | you good then | 04:36 |
| _Cid | (cause I tried that with quicken once, and it did not, heh) | 04:36 |
| uzair | no huh? too bad... | 04:37 |
| _Cid | just make the same share avaliable to all windows users ... so they all know ..oh, the data is on the I Drive...or whatever | 04:37 |
| _Cid | iDrive has a nice ring to it ...very Mac'ish | 04:38 |
| uzair | lol | 04:38 |
| uzair | yeah, i'm sick of seeing the z drive everywhere :S | 04:38 |
| _Cid | :) | 04:38 |
| uzair | alright. i guess i'll get to work on doing this one step at a time. | 04:39 |
| uzair | so just to get a final answer, you advise for/against ldap? | 04:39 |
| _Cid | for 5 users? against - your call if you want to position yourself for growth | 04:40 |
| uzair | alright then. i'll ponder over that some more. thanks for your help | 04:40 |
| _Cid | sure thing, good luck with it :) | 04:41 |
| uzair | you as well hads | 04:41 |
| uzair | thx | 04:41 |
| Bangers1 | Can anyone help me with this thread? http://ubuntuforums.org/showthread.php?p=6545446#post6545446 | 05:26 |
| kees | does anyone run sendmail with ssl on intrepid with outlook clients? | 05:46 |
| ScottK | Pain all around. No. | 05:48 |
| === antdedyet_ is now known as antdedyet | ||
| AnRkey | how can i set sshd to only allow a set amount of connections from any one ip? | 06:55 |
| Jeeves_ | /etc/hosts.{allow,deny} ? | 06:58 |
| AnRkey | Jeeves_, that would allow me to block a host, what i would like to do is limit a host's amount of connections | 06:59 |
| AnRkey | can sshd limit the max connections from an ip? | 07:00 |
| Jeeves_ | AnRkey: Not that I know of | 07:02 |
| hads | Haven't heard | 07:03 |
| Jeeves_ | Maybe iptables can do it | 07:03 |
| AnRkey | Jeeves_, i have denyhosts running every minute to stop dictionary attacks but some of these kids have large amounts of bandwidth. I end up getting 6000+ attempts before denyhosts has a chance to block them | 07:03 |
| henkjan | AnRkey: use iptables with limits | 07:03 |
| AnRkey | henkjan, could you push a little harder,almost there | 07:03 |
| henkjan | AnRkey: http://www.debian-administration.org/articles/187 | 07:03 |
| AnRkey | henkjan, thanks very much! that seems to be exactly what i was looking for but could not get in to words to google successfully | 07:06 |
| AnRkey | i looooove this os and it's team | 07:06 |
| henkjan | AnRkey: I googled for "ssh connection limit" :) | 07:07 |
| hads | fail2ban may also be interesting | 07:09 |
| AnRkey | i almost dont believe you :) | 07:12 |
| AnRkey | trying that | 07:12 |
| AnRkey | i tried max connections and so on | 07:12 |
| AnRkey | fail2ban has broken 3 times on me | 07:13 |
| AnRkey | the lists keep getting messed up for some reason | 07:13 |
| AnRkey | i remember why we wanted to use it, it can check more services than the other denyhosts script | 07:21 |
| Jeeves_ | henkjan: Jij googler! | 08:03 |
| henkjan | Jeeves_: respect my google skills! | 08:16 |
| Jeeves_ | :) | 08:18 |
| kraut | moin | 08:44 |
| stiv2k | help | 08:45 |
| stiv2k | apache didn't shut down cleanly or something | 08:46 |
| stiv2k | and the address is still in use? | 08:46 |
| stiv2k | how can i fix this | 08:46 |
| stiv2k | (98)Address already in use: make_sock: could not bind to address 0.0.0.0:80 | 08:46 |
| hads | sudo invoke-rc.d apache2 stop | 08:46 |
| stiv2k | hads: still doesnt work | 08:47 |
| stiv2k | what gives? | 08:48 |
| hads | I have no idea what gives. Sounds like you'll need to kill it yourself. | 08:50 |
| stiv2k | hads: how do i do that/ | 08:50 |
| Jeeves_ | killall -v apache2 -9 | 08:53 |
| hads | http://www.google.com/search?q=linux+kill+process | 08:54 |
| henkjan | Jeeves_: not pkill -v ? ;) | 08:54 |
| hads | -9 is pretty rough to start out :) | 08:54 |
| stiv2k | Jeeves_: it says no process killed | 08:55 |
| stiv2k | i would love to fix this :/ | 08:56 |
| stiv2k | like soon | 08:56 |
| hads | hah | 08:56 |
| stiv2k | there are no apache processes | 08:56 |
| stiv2k | but the socket is still there | 08:56 |
| stiv2k | or whatever | 08:56 |
| \sh | stiv2k: find out the processes with : sudo fuser -n tcp 80 | 08:58 |
| stiv2k | \sh: no results, there is no processes of apache | 08:58 |
| Jeeves_ | henkjan: pff. You funny guy! | 08:58 |
| Jeeves_ | stiv2k: netstat -lnp | grep 80 | 08:58 |
| Jeeves_ | What does that say? | 08:58 |
| stiv2k | tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN - | 08:59 |
| \sh | then there is also a process | 08:59 |
| \sh | the fuser stuff should give it to you... | 08:59 |
| stiv2k | wtf | 08:59 |
| stiv2k | the fuser command returns nothing... | 09:00 |
| hads | add a sudo to that netstat | 09:00 |
| stiv2k | it still looks the same | 09:03 |
| stiv2k | wtf is going on | 09:06 |
| stiv2k | why is it doing this | 09:06 |
| Jeeves_ | stiv2k: If you run 'netstat -lnp' | 09:10 |
| Jeeves_ | as root | 09:10 |
| Jeeves_ | Than you see which process is using port 80 | 09:10 |
| stiv2k | Jeeves_: and? | 09:10 |
| stiv2k | oh | 09:11 |
| stiv2k | tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN - | 09:11 |
| Jeeves_ | stiv2k: You're running that as root? | 09:12 |
| stiv2k | yes | 09:12 |
| stiv2k | Jeeves_: sudo | 09:12 |
| Jeeves_ | hmm | 09:13 |
| Jeeves_ | ps uax | grep .pl ? | 09:13 |
| hads | Hmm | 09:14 |
| stiv2k | there is something open on my port 443 too | 09:14 |
| stiv2k | Jeeves_: nothing comes back from that | 09:15 |
| Jeeves_ | stiv2k: sudo apt-get install rkhunter chkrootkit | 09:16 |
| Jeeves_ | Run both | 09:16 |
| stiv2k | Jeeves_: what do those do | 09:16 |
| Jeeves_ | They check for rootkits and unwanted running software | 09:17 |
| hads | apt-cache show rkhunter | 09:17 |
| stiv2k | hey btw | 09:18 |
| stiv2k | the damn init script for BOPM is broken | 09:18 |
| stiv2k | Jeeves_: i get this | 09:18 |
| stiv2k | /usr/sbin/unhide [ Warning ] | 09:18 |
| stiv2k | /usr/sbin/unhide-linux26 [ Warning ] | 09:18 |
| stiv2k | everything else is for the most part [ OK ] | 09:18 |
| stiv2k | Jeeves_: no root kits here | 09:21 |
| Jeeves_ | telnet localhost 80 | 09:24 |
| nmzan | I know this isn't really the right place, could someone help me out with regards to sbs2k8, IIS & Exchange2k7 ? | 10:35 |
| MatBoy | it would be nice to have some docs about a scst installation :) | 10:35 |
| nmzan | or direct me to a channel with windows kiddies | 10:36 |
| MatBoy | nmzan: #windows-server | 10:36 |
| nmzan | hax, didn't find that in the # list | 10:37 |
| nmzan | thanks | 10:37 |
| MatBoy | I wonder why there is not that much infor about open-iscsi and scst | 10:52 |
| eolo999 | hi, hi would like to find a tool to monitor file system change rates, any idea? | 11:01 |
| Deeps | inotify-tools may be of interest to you | 11:02 |
| eolo999 | Deeps: thx | 11:04 |
| MatBoy | mhh, there are really no good howto's about iscsi :S | 12:16 |
| Ergo^ | hello, im having problem with mercurial on ubuntu | 12:36 |
| Ergo^ | its webserver is launched on port 8000 and im not sure where to look how to disable or reconfigure it | 12:36 |
| MatBoy | what is the best filesystem for iscsi luns ? | 12:43 |
| Jeeves_ | MatBoy: Uh? | 13:08 |
| MatBoy | Jeeves_: ? | 13:15 |
| MatBoy | mhh | 13:15 |
| MatBoy | but I don't know what FS is best for that disk | 13:15 |
| MatBoy | I use iscsitarget to make luns using files on a disk | 13:15 |
| Jeeves_ | MatBoy: Why would an iscsidisk differ from a normal disk in terms of you choosing a filesystem? | 13:16 |
| MatBoy | Jeeves_: so ext3 should be fine ? | 13:18 |
| MatBoy | it seems it does | 13:19 |
| Jeeves_ | MatBoy: Yups, it is | 13:26 |
| MatBoy | Jeeves_: but what about lvm ? | 13:29 |
| MatBoy | how is that managed with iscsi ? | 13:30 |
| Jeeves_ | MatBoy: Never used lvm | 13:31 |
| MatBoy | k ! | 13:32 |
| cor3 | not sure I understand why ubuntu server insists on installing apparmor | 13:34 |
| cor3 | and it really bugs me canonical will not release their control panel thing a jig | 13:36 |
| Deeps | apparmour provides application security, and is enabled by defaultl, but it easily disabled and/or removed | 13:38 |
| cor3 | ya | 13:38 |
| Deeps | control panel thing a jig? landscape? yeah. agreed. | 13:38 |
| cor3 | I know | 13:38 |
| cor3 | just comparing debian and ubuntu | 13:38 |
| cor3 | I understand using ubuntu for the desktop as it takes care of all the piddly little desktop issues that you would battle with under debian | 13:39 |
| cor3 | but the server release kinda bugs me. I ended up writing my own preseed to setup a custom firewall installation | 13:41 |
| Deeps | i cant speak for the devs or even state with any kind of merit or backing that this is true, but it appears to me that the approach of "linux for humans" on the desktop (ie. linux desktops without needing to know much about linux) has been carried over to the server | 13:42 |
| Deeps | and that ubuntu server is designed to try and make things as easy as possible for people with minimal command line experience | 13:42 |
| cor3 | not sure how I see how it helps manage most services | 13:43 |
| Kamping_Kaiser | Deeps, that may be the intent, I'm not sure its been a success though | 13:43 |
| cor3 | I do like the ltsp integration though | 13:43 |
| Deeps | whether it's a success or not, i'd personally think it's a bad idea | 13:43 |
| Kamping_Kaiser | i tend to agree | 13:44 |
| cor3 | I had to battle through that with debian | 13:44 |
| cor3 | ya | 13:44 |
| cor3 | I like the package manager they took from debian and the kernel patch set seems to be pretty clean | 13:44 |
| Deeps | i like the up-to-date packages, it's great for non-critical multifunctional servers | 13:45 |
| cor3 | the trouble I have is I am partnered with a windows guru who knows little about linux and insists on using crappy web front ends ie webmin etc | 13:46 |
| Deeps | oh dear | 13:46 |
| cor3 | ya | 13:46 |
| cor3 | mean while I have compiled os's from scratch | 13:46 |
| Deeps | well windows admins will have to learn command lines soon, i hear the windows server 2008 can be built command line only | 13:46 |
| cor3 | LFS and gentoo | 13:46 |
| jdstrand | cor3: I don't know if your firewall preseeding is for ufw or not, but ufw will have basic preseeding support in jaunty | 13:47 |
| Kamping_Kaiser | all the serious 'doze admins i've met use cli anyway | 13:47 |
| cor3 | LOL ya its kinda like bash actually | 13:47 |
| cor3 | LOL | 13:47 |
| jdstrand | cor3: also, the apparmor stuff isn't so much 'for human beings' as to keep important services as safe as possible | 13:47 |
| jdstrand | it's easy to update for one's needs, or to simply put in complain mode | 13:48 |
| cor3 | ya I would prefer a full chroot and perhaps grsecurity patched kernel | 13:48 |
| cor3 | with chroot restrictions | 13:48 |
| Kamping_Kaiser | jdstrand, and drive sysadmins insane trying to work out why their ldap servers wont read the SSL certs ;) | 13:48 |
| jdstrand | Kamping_Kaiser: if apparmor is not working for you in a default installation, please file a bug | 13:48 |
| jdstrand | Kamping_Kaiser: or a common configuration | 13:49 |
| Deeps | cor3: dont ask for much do you ;) | 13:49 |
| cor3 | lol | 13:49 |
| cor3 | no | 13:49 |
| cor3 | haha | 13:49 |
| jdstrand | cor3: apparmor effectively chroots your application | 13:50 |
| ScottK | kees: One thing your blog post about Sendmail/Outlook had me thinking about was that we dropped SSLv2 in Intrepid. Dunno if that was getting used before somehow. | 13:50 |
| Kamping_Kaiser | jdstrand, no idea how common the setup was, but for the first time ever i had services unable to read /etc/ssl/<service>/<files> because apparmour didnt consider the path legit :) | 13:50 |
| jdstrand | Kamping_Kaiser: this was in slapd? | 13:51 |
| Kamping_Kaiser | jdstrand, the service in question? yes. I dont remember if Apache had the same hissy fit or if slapd was the only one. | 13:52 |
| jdstrand | Kamping_Kaiser: apache doesn't have an apparmor profile by default. I can fix slapd if you file a bug | 13:52 |
| cor3 | anyone successfully integrate openldap, and spamassassin/amavisd-new? | 13:52 |
| jdstrand | (we can't fix these annoying problems if people don't report them) | 13:52 |
| cor3 | I registered my own oid space for custom ltsp and snmp development work | 13:53 |
| Deeps | oh, and made props for apparmor, the more i use it the more i like it | 13:53 |
| Kamping_Kaiser | jdstrand, would it be considered bug worthy? While it seems a logical place to put the file for me, I dont know if its a standard path at all | 13:54 |
| jdstrand | :) | 13:54 |
| cor3 | I want to build the equivilant to zimbra minus the ajax front end and other nasties | 13:55 |
| jdstrand | Kamping_Kaiser: it seems fairly reasonable to me to have SSL aware applications able to read file in /etc/ssl. if you file a bug, it can be discussed | 13:55 |
| Kamping_Kaiser | jdstrand, ok, I'll do so. | 13:55 |
| jdstrand | Kamping_Kaiser: thanks! | 13:56 |
| cor3 | Any one using the oem configuration support? | 13:56 |
| Jeeves_ | Not me | 13:57 |
| cor3 | I found preseeding works well enough but the oem-config-server looks like it could be useful | 13:58 |
| cor3 | one thing i found funny is the minimal debian installation is larger than the minimal ubuntu installation | 13:59 |
| cor3 | if installed with the 'alternate' cd | 13:59 |
| cor3 | netbase doesn't include inetd either which I like because I rarely use it for most installations | 14:00 |
| cor3 | still have my reservations regarding canonical though | 14:01 |
| cor3 | especially them refusing to release their support software for what is after all a free OS | 14:02 |
| cor3 | the folks at debian would NEVER even consider doing that | 14:03 |
| Kamping_Kaiser | jdstrand, its been a while since i worked on teh system in question, but heres a report https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/317109 | 14:03 |
| uvirtbot` | Launchpad bug 317109 in apparmor "Apparmour doesnt support use of /etc/ssl/<servicename>" [Undecided,New] | 14:03 |
| cor3 | its one thing to provide commercial support but its a completely different thing to write software specifically for something completely open and not release it. Not to mention I doubt I would want a closed source support package installed cause who knows what they do with it. | 14:06 |
| cor3 | Seems like something old billy would do | 14:06 |
| * ScottK <-- Does not work for Canonical | 14:07 | |
| ScottK | cor3: Then don't buy their support, just use it. | 14:07 |
| ScottK | It shouldn't affect your decision whether or not to use the distro. | 14:07 |
| jdstrand | Kamping_Kaiser: thanks for the report :) | 14:08 |
| cor3 | it just makes me question the relationship between the 2. | 14:08 |
| Kamping_Kaiser | jdstrand, no worries. HIH. | 14:08 |
| cor3 | canonical != ubuntu is what people tell me | 14:08 |
| ScottK | cor3: That's absolutely true. | 14:09 |
| ScottK | And ubuntu != canonical. | 14:09 |
| cor3 | but they seem to scratch each others back | 14:09 |
| cor3 | any who | 14:09 |
| cor3 | no worries I will continue to use ubuntu server | 14:09 |
| cor3 | I should get more involved with the distros I use | 14:10 |
| ScottK | I came here from opensuse after experiencing too much "If you want it to work, buy SLES/D licenses" from Novell/SuSE. | 14:10 |
| cor3 | ya | 14:10 |
| cor3 | I started with RH7 then debian then gentoo then debian again and now a mix of debian/ubuntu | 14:11 |
| jdstrand | cor3: if the landscape bits bother you, I suggest you take it up on the mailing lists | 14:12 |
| Kamping_Kaiser | its come up before iirc, but i'd be interested to se it come up again | 14:12 |
| Deeps | red hat, debian, freebsd, ubuntu, debian+fbsd+ubuntu mix now | 14:12 |
| Kamping_Kaiser | (even if it does come up while i'm afk :() | 14:12 |
| cor3 | ubuntu server needs some better docs | 14:14 |
| cor3 | still use gentoo docs for setting up a lot of stuff | 14:15 |
| ScottK | cor3: If you're interested in getting more involved, that's an excellent way to do it. | 14:15 |
| uvirtbot` | New bug: #317109 in openldap2.3 (main) "Apparmour doesnt support use of /etc/ssl/<servicename>" [Undecided,Confirmed] https://launchpad.net/bugs/317109 | 14:15 |
| ScottK | cor3: sommer <-- Also doens't work for Canonical does the Ubuntu Server guide and is always looking for new inputs. | 14:15 |
| cor3 | I have been thinking about it. One of the common servers I put together is a debian/ubuntu firewall/openvpn and spam filter | 14:16 |
| cor3 | I'm sure I could put together some docs on that process but thats more of specific deployment type doc than anything else | 14:17 |
| ScottK | What configuration do you use for spam filter? | 14:17 |
| jdstrand | speaking of spam... | 14:18 |
| jdstrand | ScottK: do you use greylisting with postfix, and if so, what software? | 14:18 |
| cor3 | up until recently I have been using exim4 + spamassassin + clamav + razor + dcc + pyzor but I have been working on a postfix + amavisd + postgrey setup | 14:18 |
| ScottK | jdstrand: No. I actually have my mx at a commercial host. They use Postfix with greylisting, but I don't know which one. | 14:19 |
| jdstrand | ScottK: or rather, what is the recommended greylisting package for integration with postfix on Ubuntu | 14:19 |
| jdstrand | k | 14:19 |
| ScottK | I don't think we have one. | 14:19 |
| cor3 | use postgrey | 14:19 |
| ScottK | I hear good things about postgrey. | 14:19 |
| cor3 | its simple and effective | 14:19 |
| jdstrand | I started using postgrey, and it was *super easy* to setup | 14:19 |
| ScottK | jdstrand: None in Main IIRC. | 14:19 |
| jdstrand | ScottK: no, I checked | 14:19 |
| jdstrand | postgrey seems to work pretty well | 14:20 |
| ScottK | cor3: Also if you have feedback about the default Ubuntu amavisd-new configuration, I'd like to hear that. | 14:20 |
| ScottK | Obviously it has to be somewhat generic, but I want it to be useful. | 14:20 |
| cor3 | I'll have to get back to on it. I am testing the solution before making use of it for my clients but so far it seems to perform better than my previous exim4 setup | 14:21 |
| ScottK | Of course. It has postfix. | 14:23 |
| cor3 | ya big time | 14:23 |
| cor3 | I started using exim4 while working for a previous employer | 14:23 |
| cor3 | they were a debian heavy shop and used exim4 exclusively | 14:23 |
| cor3 | so you go with what you know but I wanted to slim out the install | 14:24 |
| cor3 | spam filtration can be resource intensive | 14:24 |
| cor3 | one of the LTSP devs lives in my city | 14:25 |
| cor3 | we got together for lunch a few years back | 14:25 |
| cor3 | he worked on the ubuntu ltsp integration | 14:25 |
| cor3 | Scott Balneavs is his name if I recall | 14:25 |
| ScottK | Looks like https://launchpad.net/~sbalneav | 14:27 |
| cor3 | thats him | 14:28 |
| cor3 | he was largely responsible for ltspfs too | 14:28 |
| * ScottK detatches to experiment with new IRC cilent builds. See you later. | 14:28 | |
| === _jmedina is now known as jmedina | ||
| ivoks | hi! :) | 16:14 |
| Ward1983 | if i install 8.04 server, where can i tell on what disk it should install grub? | 16:14 |
| Ward1983 | just askign to make sure i dont miss it | 16:14 |
| ivoks | Ward1983: iirc, you won't be offered that | 16:15 |
| Ward1983 | ivoks, so can i do that anyway? | 16:15 |
| Ward1983 | ivoks, else i need to open up my PC, unplug the harddisks except the one i want to install on, afterwards plug them back in and fix my menu.lst :s | 16:16 |
| Ward1983 | a ton of work | 16:16 |
| ivoks | hm | 16:16 |
| MianoSM | its going to install grub where you tell it to partition the fs | 16:17 |
| Ward1983 | ivoks, i know its possible with ubuntu desktop | 16:17 |
| ivoks | you can, of course, preesed all that | 16:17 |
| ivoks | i think MianoSM is right | 16:17 |
| MianoSM | So when you go through the partition manager if you have sda and sdb, if you install on sdb, it should install grub on sdb | 16:17 |
| MianoSM | and vice versa | 16:17 |
| Ward1983 | MianoSM, are you sure? ubuntu allways takes the first disk by default unless you tell it where to install to | 16:17 |
| Ward1983 | i meant ubuntu desktop | 16:17 |
| MianoSM | Right, you are going to have to dictate the partitioning. | 16:17 |
| ivoks | Ward1983: first disk in grub isn't the first disk on OS | 16:17 |
| MianoSM | You can change the listing in grub so far as disk order. | 16:18 |
| Ward1983 | ivoks, i know i did not say that | 16:18 |
| Ward1983 | ivoks, it allways takes the first disk of the system | 16:18 |
| Ward1983 | ok thats chinese | 16:18 |
| ivoks | Ward1983: i really haven't been thinking about this | 16:19 |
| ivoks | so, i don't know for sure | 16:19 |
| Ward1983 | it does (desktop) | 16:19 |
| MianoSM | If you set your bios to boot from a maxtor and a seagate hard drive, they will both have an mbr. Ubuntu will label then sda and sdb | 16:19 |
| ivoks | i always installed ubuntu server on first disk :) | 16:19 |
| MianoSM | Use the manual partition choice, and select the correct disk, and be sure to have a SuperGrubDisk on hand in the case of error. | 16:20 |
| Ward1983 | MianoSM, i just want both ubuntu-server and grub on the third disk on my system, grub would call it (hd2,0) or /dev/sdc1 | 16:20 |
| MianoSM | Ward1983: that's absolutely possible. | 16:21 |
| Ward1983 | ok never mind ill just unplug the other disks.... | 16:21 |
| Ward1983 | jesus | 16:21 |
| MianoSM | You found JC? | 16:21 |
| Ward1983 | MianoSM, ah ok so how do i do that please? | 16:21 |
| ivoks | preseed it | 16:22 |
| Ward1983 | MianoSM, ah ok so how do i do that please? installing on (hd2) | 16:24 |
| ivoks | Ward1983: if you would wait for an hour, i could try that scenario in my VM and let you know results | 16:24 |
| ivoks | that service would cost you $500 | 16:24 |
| ivoks | :D | 16:24 |
| Ward1983 | ivoks, nah ill try it myself then lol | 16:25 |
| MianoSM | I'm telling you, the drive you choose to install the OS to will carry the GRUB installation. | 16:25 |
| Ward1983 | ivoks, i assumed you knew how to do it since you said its possible | 16:25 |
| ivoks | i told you | 16:25 |
| ivoks | you can preseed it | 16:25 |
| Ward1983 | MianoSM, and i asked you if you are absolutely sure :) | 16:25 |
| ivoks | http://wiki.debian.org/DebianInstaller/Preseed | 16:25 |
| Ward1983 | MianoSM, its not that important, i can restore the bootloaders of the other disks if needed | 16:25 |
| MianoSM | In my experience, I haven't seen it happen otherwise. | 16:26 |
| Ward1983 | ivoks, aaaaaah ok sorry i didnt understand lol | 16:26 |
| ivoks | http://www.nabble.com/Preseeding-Grub-td3267439.html | 16:26 |
| Ward1983 | MianoSM, because you allways used the first disk? :p | 16:26 |
| MianoSM | No, not always. I had a RAID 0 set up over 2 disks (hd0), and then a third drive (hd1) that I installed on. | 16:27 |
| Ward1983 | ivoks, so can i preceed only grub? | 16:27 |
| dinsdale07 | Hi, this is the output of a line of top: 15924 www-data 20 0 32228 6972 1292 R 100 0.2 147:40.99 perl. I want to know which script is running, it just displays "perl". How do I do that? | 16:27 |
| Ward1983 | ivoks, sorry i dont understand that second link | 16:28 |
| Jeeves_ | dinsdale07: c | 16:28 |
| dinsdale07 | Jeeves_, you mean top -c? | 16:29 |
| Ward1983 | MianoSM, maybe it has something to do with the raid | 16:29 |
| Jeeves_ | dinsdale07: No | 16:29 |
| Jeeves_ | in top | 16:29 |
| Jeeves_ | type c | 16:29 |
| MatBoy | ok, iscsi seems to be nice :) | 16:29 |
| Ward1983 | MianoSM, well ill jsut try it since preceeding doesnt seem to get explained anywhere | 16:29 |
| Jeeves_ | which will show the entire commandline | 16:29 |
| Ward1983 | debian people allways presume everyone gets born knowing everything | 16:29 |
| Ward1983 | bah | 16:29 |
| MianoSM | Not "everything", but most of it. ;) | 16:30 |
| dinsdale07 | Jeeves_, yes it works, thanks - now it shows httpds, that looks like the ssh deamon | 16:30 |
| Jeeves_ | dinsdale07: Ehm, httpd or sshd are not perl scripts :) | 16:30 |
| Ward1983 | MianoSM, well gonna reboot, wish me luck | 16:31 |
| MianoSM | fauxhawk: please send me that picture again | 16:31 |
| dinsdale07 | Jeeves_, that's what concerns me... it shouldn't show as perl in the first place. | 16:31 |
| MianoSM | fauxhawk: you're that girl from the other night right? | 16:31 |
| fauxhawk | MianoSM : wat | 16:31 |
| * fauxhawk not a chick | 16:32 | |
| MianoSM | fauxhawk: oh, do you have a gf that could have been talking to me or a wife maybe? | 16:32 |
| fauxhawk | MianoSM : sure let me get on that for you | 16:33 |
| dinsdale07 | MianoSM, tyring to make it into bash.org? | 16:33 |
| MianoSM | dinsdale07: what is bash.org? | 16:33 |
| MianoSM | something for scripting? | 16:33 |
| dinsdale07 | not really, check it out :-) | 16:34 |
| MianoSM | dinsdale07: is it work safe? | 16:34 |
| fauxhawk | MianoSM: no, it will steal your soul | 16:35 |
| MatBoy | kewl ! Il like iscsi | 16:35 |
| dinsdale07 | MianoSM, unless you look up quotes of bloodninja | 16:35 |
| MianoSM | ha, I know bloodninja | 16:35 |
| MianoSM | nice site, I get it now ;) | 16:36 |
| MianoSM | I could have sworn I was helping fauxy the other night though. :( | 16:36 |
| dinsdale07 | :-) | 16:37 |
| fauxhawk | MianoSM: you helped me install ubuntu | 16:38 |
| fauxhawk | it was a swell time | 16:38 |
| MianoSM | nice | 16:38 |
| dinsdale07 | in top - how can "perl" and "httpds" be related. they show under the same PID if I toggle "c" in top | 16:41 |
| MianoSM | can we see the full line from top please? | 16:42 |
| MianoSM | root 5292 0.0 0.6 10040 6268 ? Ss Jan10 0:10 /usr/bin/perl /usr/local/webmin/miniserv.pl /etc/webmin/miniserv.conf | 16:43 |
| MianoSM | That's webmin being run by perl. If you have a web server that is being run by perl, you could see both in the command under top. | 16:44 |
| MianoSM | Using htop and sorting by tree might help you visualize it as well (sudo apt-get install htop). | 16:44 |
| dinsdale07 | these are the two lines when I toggle. http://pastebin.com/d4132ddf2 | 16:45 |
| fauxhawk | htop should really replace top | 16:45 |
| dinsdale07 | I haven't installed webmin - but ispconfig. | 16:45 |
| dinsdale07 | I think ispconfig mainly consists of perl scripts, that could explain it. | 16:46 |
| dinsdale07 | ah - nice: htop. how colorful :-) | 16:47 |
| fauxhawk | dinsdale07: htop with treeview is much better at showing how processes are related | 16:49 |
| dinsdale07 | yes, it's very nice - how do I get the F5, F10 etc commands to work though. They are bind to my local machine | 16:51 |
| dinsdale07 | s/bind/bound | 16:51 |
| MianoSM | T also acts as F5 | 16:51 |
| MianoSM | and Q = F10 | 16:52 |
| * MianoSM afk2 eat bbl. | 16:52 | |
| dinsdale07 | I see, it's smallcaps t and q for my console btw. Very tidy. | 16:53 |
| nephish | hey all, back with another master-slave replication question. | 16:54 |
| nephish | do you have to wipe out the current bin log on the master and reset it before starting replication? | 16:55 |
| ivoks | reset master; | 16:57 |
| vorian | mathiaz: ping | 16:57 |
| ivoks | nephish: you don't have to do that | 16:57 |
| * ScottK waves at mathiaz too. | 16:57 | |
| ivoks | nephish: when setting replication, you have to dump master and import on slave | 16:57 |
| ivoks | nephish: then set slave to start replication from current master record | 16:57 |
| nephish | right, i used mysqlhotcopy to get a shot of the server database while under a flush with readlock | 16:58 |
| nephish | then restarted the master. | 16:58 |
| ivoks | sorry, i don't know what myslhotcopy is | 16:58 |
| ivoks | i do everything with mysql client | 16:58 |
| nephish | am i supposed to wait untill the slave has everything squared away before releasing the lock on the master? | 16:58 |
| ScottK | mathiaz: Instead of not building mysql-server, mysql-client, mysql-common for 5.1 at all, we need something like mysql-server5.1, mysql-client5.1, mysql-common5.1. | 16:59 |
| ScottK | vorian: That's right, isn't it? | 16:59 |
| ivoks | nephish: import DB, set the replication from master | 16:59 |
| ScottK | ... or zul? | 16:59 |
| vorian | ScottK: right | 16:59 |
| ivoks | nephish: you can then release master | 16:59 |
| ivoks | nephish: and start slave replication | 16:59 |
| vorian | we also need all the libs | 16:59 |
| mathiaz | ScottK: there is mysql-server-5.1, mysql-client-5.1 | 17:00 |
| ivoks | nephish: you just have to have replication logs | 17:00 |
| ScottK | vorian: ^^ | 17:00 |
| mathiaz | ScottK: for now they still depend on mysql-common from 5.0 though | 17:00 |
| ScottK | vorian: So what else do we need? | 17:00 |
| vorian | hmmm | 17:00 |
| ScottK | mathiaz: vorian has been doing the amarok packaging ... | 17:00 |
| nephish | i have the log bin and position written down, but when i load the db into slave i am supposed to wait till the slave is replicating to release the master? | 17:00 |
| mathiaz | ScottK: vorian: mysql-server and mysql-client a just empty packages that depends on the latest version from mysql | 17:00 |
| ivoks | so, amarok depends on mysql? | 17:01 |
| vorian | ivoks: it does now | 17:01 |
| ScottK | ivoks: Yes. Even better it uses embedded so it needs 5.1. | 17:01 |
| ivoks | i tought amarok is meedia player | 17:01 |
| ScottK | It is. | 17:01 |
| vorian | ivoks: yes, but it stores collections :) | 17:01 |
| ivoks | not a wanna-be everything app :) | 17:01 |
| vorian | haha | 17:02 |
| nephish | ivoks, i thought amarock used sqlite | 17:02 |
| ScottK | nephish: That's Amarok 1. We're talking Amarok 2. | 17:02 |
| nephish | ah, ok | 17:02 |
| ivoks | imagine evolution, installing postfix and dovecot :) | 17:03 |
| nephish | Ivoks, i just can't get it to work, does the relay log have something to do with the replication? | 17:03 |
| nephish | This should be so simple. | 17:03 |
| ivoks | nephish: there was a nice howto, wait a minute | 17:03 |
| ivoks | http://www.howtoforge.com/mysql_database_replication | 17:04 |
| nephish | both computers are running ubuntu 8.10, and useing latest mysql-server from the ubuntu repositories | 17:04 |
| smarter | ivoks: yup, but amarok 2.0 use mysql embedded from 5.1 as databse | 17:04 |
| smarter | it used it in the 1.x serie (KDE3) | 17:04 |
| ivoks | smarter: i have 'server' perspective | 17:05 |
| nephish | Ivoks, yes, that is the exact how to that got me here, i just can't tell if i am missing a step | 17:05 |
| mathiaz | smarter: why was sqlite dumped and mysql used instead? | 17:05 |
| ivoks | 5.1 is not ready for production | 17:05 |
| smarter | mathiaz: let me find you the blog post about that... | 17:06 |
| ScottK | Well it's 'released' and we pretty well have to jump to Amarok 2 for Kubuntu. | 17:06 |
| ivoks | this is a loose-loose situation :/ | 17:06 |
| smarter | mathiaz: http://amarok.kde.org/blog/archives/812-MySQL-in-Amarok-2-The-Reality.html | 17:06 |
| ScottK | lose-lose even | 17:06 |
| ivoks | lose-lose :D | 17:06 |
| ivoks | right | 17:06 |
| ivoks | if i hear another one about 'ubuntu not supporting KDE'... :) | 17:07 |
| ScottK | ivoks: This one we are actually working together on reasonably well. It's a hard one. | 17:07 |
| ivoks | ScottK: mysql 'stable' releases are versioned 5.x.4x :) | 17:08 |
| * ScottK notes that Kubuntu still has no bluetooth in Intrepid or Jaunty thanks to Ubuntu. | 17:08 | |
| ivoks | ScottK: this is #ubuntu-server :p | 17:08 |
| ScottK | Sure thing. | 17:08 |
| ivoks | we don't have bluetooth :D | 17:09 |
| mathiaz | ivoks: I think that for the type of usage and workload amarok is going to put on mysql, 5.1 could be consider stable | 17:09 |
| ivoks | mathiaz: i agree, but i'm not sure that's the case for servers | 17:09 |
| ivoks | well, as i said, this is a lose-lose | 17:09 |
| ivoks | hopefully, 5.1 will became stable before 10.02 | 17:10 |
| ivoks | 10.04 | 17:10 |
| mathiaz | ivoks: oh yes. That's why from a server perspective, we just wanna provide mysql-5.1 in universe | 17:10 |
| ivoks | mathiaz: oh, we'll have both? | 17:10 |
| mathiaz | ivoks: from the server POV, mysql 5.0 should be in main and 5.1 in universe | 17:10 |
| mathiaz | ivoks: we *already* have both. | 17:10 |
| ivoks | i agree | 17:10 |
| ivoks | mathiaz: eh, sorry, i'm still out of sync with jaunty :/ | 17:11 |
| mathiaz | ivoks: the target would to get 5.1 in main for the next LTS. | 17:11 |
| ivoks | right | 17:11 |
| ScottK | Unfortunately, Amarok is normally in Main. We've had to demote it because of 5.1. | 17:11 |
| ScottK | Not having it on the CD will be a not good thing. | 17:11 |
| ScottK | So no easy answer. | 17:11 |
| ivoks | ah well... | 17:12 |
| ivoks | nephish: do you have anything in DB already? | 17:13 |
| ivoks | nephish: best thing would be to start with empty db | 17:13 |
| nephish | slave is empty, or can be | 17:13 |
| nephish | main server is running for last three years | 17:14 |
| ivoks | and master is full? | 17:14 |
| ivoks | ok, so, in production? | 17:14 |
| nephish | our old backup cratered, yes master is full 8 GB | 17:14 |
| ivoks | ok, open two terminals | 17:14 |
| nephish | ok | 17:14 |
| ivoks | connect to master and slave | 17:15 |
| ivoks | nephish: connect to mysqls | 17:16 |
| nephish | ok | 17:16 |
| ivoks | nephish: and run 'show slave status\G' on slave | 17:16 |
| ivoks | there should be: | 17:16 |
| ivoks | Slave_IO_Running: Yes | 17:16 |
| ivoks | Slave_SQL_Running: Yes | 17:16 |
| nephish | have io = yes, running = no | 17:17 |
| ivoks | ok | 17:17 |
| ivoks | now lock tables on master | 17:17 |
| ivoks | and run 'show master status;' | 17:17 |
| * smarter wonders how the other distros will manage this amarok dependency... | 17:17 | |
| nephish | flush tables with read lock? | 17:18 |
| ivoks | yes | 17:18 |
| ivoks | lock it, you have to put some downtime :( | 17:18 |
| nephish | 10-4 | 17:18 |
| ivoks | did you lock it? | 17:19 |
| ivoks | on master, dump the database to a file | 17:19 |
| nephish | yes, and show master status | 17:19 |
| nephish | ok | 17:19 |
| ivoks | run 'snow master status;' again | 17:20 |
| ivoks | position shouldn't be different then before | 17:20 |
| ivoks | you've created replication user with read privileges on master? | 17:21 |
| nephish | dumping | 17:21 |
| nephish | yes, replication user is good | 17:23 |
| ivoks | did you dump it? | 17:23 |
| ivoks | (the database) | 17:23 |
| nephish | making copy with mysqlhotcopy. takes a bit because it is a large db | 17:24 |
| nephish | mysqldump would take hours | 17:24 |
| ivoks | hours? | 17:25 |
| ivoks | 8GB right? | 17:25 |
| nephish | yes | 17:25 |
| ivoks | anyway... once you dump it | 17:25 |
| ivoks | write down position from master | 17:25 |
| nephish | wait, maybe the import into the slave would take that long, dump itself may not | 17:25 |
| nephish | and it will be different? | 17:26 |
| ivoks | it should be the same | 17:26 |
| ivoks | since you've locked tables | 17:26 |
| nephish | ok | 17:26 |
| ivoks | but, write it down after you dump it | 17:26 |
| nephish | ok | 17:26 |
| ivoks | then unlock master and leave it to work as before | 17:26 |
| ivoks | import that database on slave | 17:27 |
| nephish | ok | 17:27 |
| ivoks | and set up replication on slave: | 17:27 |
| nephish | slave shoud be running ? drop the db on slave, right? do i need to stop slave? | 17:27 |
| nephish | before i import the database? | 17:27 |
| ivoks | change master to master_host="[ip of master]", master_user="[replication user]", master_password="[replication password]", master_log_file="[master log file]", master_log_post="[position you wrote]" | 17:28 |
| ivoks | yes, slave should be running | 17:28 |
| nephish | dump the db on the slave right? | 17:29 |
| ivoks | right | 17:29 |
| nephish | gotcha | 17:29 |
| ivoks | mysql log file has all the logs of everything done on mysql | 17:29 |
| ivoks | so, you create a duplicate from one position | 17:29 |
| ivoks | import that copy on slave | 17:29 |
| ivoks | and replicate all the changes from that position | 17:29 |
| ivoks | after 'change master' | 17:30 |
| ivoks | start slave; | 17:30 |
| nephish | so slave should not be running now? | 17:30 |
| ivoks | yes it should | 17:30 |
| ivoks | it should be empty | 17:30 |
| ivoks | then import that dump | 17:30 |
| ivoks | run that change master... | 17:31 |
| ivoks | and start slave; | 17:31 |
| ivoks | start slave; is a command in mysql that starts replication | 17:31 |
| ivoks | not the mysql it self | 17:31 |
| nephish | ok, dump is finished, will copy to backup machine | 17:31 |
| nephish | log position was the same after dump | 17:32 |
| nephish | :) | 17:32 |
| ivoks | write it down and unlock tables | 17:32 |
| ivoks | you don't need master anymore | 17:32 |
| nephish | great | 17:32 |
| ivoks | i guess you set up everything in /etc/mysql/conf.d/blabla.cnf? | 17:33 |
| ivoks | like server-id | 17:33 |
| ivoks | master-host and all those variables | 17:33 |
| nephish | yes, got that stuff | 17:33 |
| ivoks | ok | 17:33 |
| nephish | anything i need to do with the relay log? | 17:33 |
| nephish | on the slave? | 17:33 |
| ivoks | nothing now | 17:33 |
| nephish | ok | 17:34 |
| nephish | hotcopy basically copies all the files in /var/lib/mysql/db_name over to a new directory that can be placed in another database | 17:36 |
| ivoks | errr | 17:36 |
| ivoks | that's not what we want | 17:36 |
| nephish | ok. | 17:36 |
| ivoks | we want dump of single database | 17:36 |
| ivoks | not everything | 17:36 |
| ivoks | oh, db_name | 17:37 |
| ivoks | sorry :) | 17:37 |
| nephish | so it should be cool? | 17:37 |
| ivoks | yes | 17:37 |
| nephish | there are three files per table, all MyISAM | 17:38 |
| ivoks | ok, move that to slave | 17:38 |
| nephish | in transit now | 17:39 |
| nephish | hey thanks for taking your time on this | 17:39 |
| ivoks | right, i'll provide you a bank account at the end :) | 17:39 |
| nephish | he he | 17:40 |
| ivoks | so, what's the status? | 17:46 |
| ivoks | nephish: you have replication log name from 'show master status;' on master? | 17:47 |
| vorian | mathiaz: would you be so kind as to take a peek at http://dpaste.com/109036/ ? | 17:47 |
| nephish | in the my.cnf on slave, there is the statement log-bin=mysql-bin and on the master when show master status, the log name is mysql-bin.000004 | 17:50 |
| ivoks | ok | 17:51 |
| ivoks | so, replication log is mysql-bin.000004 | 17:51 |
| nephish | in the my.cnf/ | 17:51 |
| nephish | ? | 17:51 |
| ivoks | and replication position is... the on you know | 17:51 |
| ivoks | in my.cnf you define the name | 17:51 |
| ivoks | but logs rotate | 17:51 |
| ivoks | that's why you have 000004 | 17:51 |
| nephish | so what i have is cool | 17:52 |
| nephish | ? | 17:52 |
| ivoks | yes, everything is ok | 17:52 |
| ivoks | did you transfer the detabase? | 17:52 |
| nephish | on the slave, since i did a drop database, should i create database? or should i just copy the database files to the /var/lib/mysql ? | 17:53 |
| nephish | they are in a folder with the same name as the database. | 17:53 |
| ivoks | create database first | 17:53 |
| ivoks | then copy the files | 17:53 |
| nephish | copying | 17:56 |
| ivoks | still copying? | 18:03 |
| nephish | just done | 18:04 |
| ivoks | ok, now connect to mysql on slave | 18:06 |
| ivoks | as root, of course | 18:06 |
| ivoks | change master to master_host="[ip of master]", master_user="[replication user]", master_password="[replication password]", master_log_file="[master log file]", master_log_post="[position you wrote]" | 18:06 |
| nephish | ok | 18:07 |
| kirkland | nijaba: ping | 18:07 |
| nijaba | kirkland: pong | 18:09 |
| kirkland | nijaba: http://blog.dustinkirkland.com/2009/01/ubuntu-jaunty-testing-screen-profiles.html | 18:09 |
| kirkland | nijaba: screenshots of your tool | 18:09 |
| kirkland | (well, that sounds bad...) | 18:09 |
| nijaba | \o/ | 18:10 |
| kirkland | nijaba: screenshots of screen-profiles-helper | 18:10 |
| nijaba | not as long as you don't say my BIG tool ;) | 18:10 |
| kirkland | nijaba: :-D | 18:10 |
| kirkland | nijaba: it's a python tool | 18:10 |
| nephish | ivoks, is it master_log_pos ? not master_log_post | 18:10 |
| nijaba | :D | 18:10 |
| nephish | ? | 18:10 |
| kirkland | nijaba: :-P | 18:10 |
| kirkland | nijaba: okay, so, do you have time to put together the MIR? | 18:10 |
| ivoks | pos | 18:11 |
| kirkland | nijaba: i think i'd like to try to get it into the server cd seed by the next alpha | 18:11 |
| ivoks | nephish: my bad | 18:11 |
| nephish | its cool | 18:11 |
| nephish | ok | 18:11 |
| nephish | done | 18:11 |
| kirkland | nijaba: i was thinking we could make 'screen' depend on screen-profiles | 18:11 |
| ivoks | no errors? | 18:11 |
| nephish | query ok, 0 rows affected (0,40 sec) | 18:12 |
| nijaba | kirkland: as you know, we are in meetings all day, I'll try to skeeze it in some time in the evenings | 18:12 |
| ivoks | nephish: ok, now run 'show slave status\G' | 18:12 |
| ivoks | nephish: and check Exec_Master_Log_Pos | 18:12 |
| * nijaba goes have some food | 18:12 | |
| kirkland | nijaba: and nudge the screen-owned /etc/screenrc to /etc/screenrc.orig, and dh_installlink the /usr/share/screen-profiles/profiles/ubuntu -> /etc/screenrc | 18:12 |
| ivoks | er... 'Relay_Log_Pos' | 18:12 |
| kirkland | nijaba: that's just a thought at this point, but it shouldn't be too hard | 18:12 |
| kirkland | nijaba: possibly controversial | 18:13 |
| ivoks | nephish: it should be the same as the position from master | 18:13 |
| nephish | ok Exec_Master_Log_Pos is same as the position | 18:13 |
| nijaba | kirkland: hmmm that's an interesting thought | 18:13 |
| nephish | so far so good | 18:13 |
| ivoks | nephish: 'start slave;' | 18:13 |
| stiv2k | hi | 18:13 |
| kirkland | nijaba: just a thought at this point | 18:14 |
| stiv2k | is anyone here familiar with init script? | 18:14 |
| stiv2k | this init script that came with the bopm package does *not* work at all | 18:14 |
| nephish | ok | 18:14 |
| kirkland | nijaba: it would avoid forcing every user to run select-screen-profile on every machine | 18:14 |
| uvirtbot` | New bug: #317187 in samba (main) "Samba server does not work in Ubuntu 8.10" [Undecided,New] https://launchpad.net/bugs/317187 | 18:14 |
| ivoks | nephish: now 'show slave status\G' | 18:14 |
| ivoks | nephish: and check the output | 18:14 |
| ivoks | nephish: like Slave_IO_State | 18:14 |
| ivoks | nephish: and Slave_IO_Running & Slave_SQL_Running | 18:15 |
| nephish | looks good, Slave_IO_Running = yes | 18:15 |
| kirkland | nijaba: anyway, we need to get it into main first | 18:15 |
| nephish | and Slave_SQL_Running Yes | 18:15 |
| nephish | no errors | 18:15 |
| ivoks | how about Slave_IO_State? | 18:15 |
| ivoks | the first one | 18:15 |
| ivoks | should be 'Waiting for master to send event' | 18:16 |
| nephish | waiting for master to send event | 18:16 |
| ivoks | great | 18:16 |
| ivoks | now, last check | 18:16 |
| ivoks | in another terminal, connect to master mysql | 18:16 |
| mathiaz | vorian: looks good to me. | 18:16 |
| ivoks | and, at the same time run 'show slave status\G' on slave and 'show master status;' on master | 18:16 |
| mathiaz | vorian: I'll get more work done on the 5.1 package as it doesn't work for now. | 18:16 |
| nephish | ok | 18:17 |
| vorian | mathiaz: ok, i'll upload it once i'm done building it | 18:17 |
| ivoks | nephish: Relay_Log_Pos on slave and Position on master should be the same | 18:17 |
| mathiaz | vorian: sorry for breaking libmysqlclient-dev - but I had to fix the libmysqlclient15-dev first as it broke things in main (ooo) | 18:17 |
| vorian | sure, it's no big deal :) | 18:17 |
| nephish | on show master status? | 18:18 |
| ivoks | nephish: Position on master (from show master status;) and Relay_Log_Pos on slave (from show slave status\G) | 18:18 |
| nephish | yes they are the same | 18:19 |
| ivoks | nephish: congrats, evertyhing is ok | 18:19 |
| nephish | cool, thanks ! | 18:19 |
| ivoks | np | 18:19 |
| nephish | i am dumping the transcript of this | 18:19 |
| nephish | to have for next time | 18:20 |
| * jmedina wants that script | 18:20 | |
| * ivoks wants money :) | 18:20 | |
| * jmedina wants beer and money | 18:20 | |
| jmedina | and the script | 18:20 |
| ivoks | ok, take care people | 18:21 |
| ivoks | i'm done for today | 18:21 |
| nephish | thans again ivoks, | 18:21 |
| ivoks | no problem | 18:21 |
| stiv2k | hello, this init script that came with the bopm package does *not* work at all... can anyone take a look at it? | 18:21 |
| mathiaz | vorian: ok wfm. your diff would just fix libmysqlclient16-dev so that you can build against it. | 18:32 |
| mathiaz | vorian: it doesn't fix mysql-server-5.1 not starting correctly. | 18:33 |
| vorian | hmmm | 18:33 |
| mathiaz | vorian: fixing the server would require more work. | 18:34 |
| mathiaz | vorian: I'm looking into that. | 18:34 |
| vorian | mathiaz: ok | 18:34 |
| mathiaz | vorian: but at least you should be able to work on amarok2 and make it work | 18:34 |
| mathiaz | vorian: IIUC amarok uses the embeded server which shouldn't require a working server process (which doesn't work right now in 5.1) | 18:35 |
| vorian | mathiaz: ok, so you are ok with me making this upload then? | 18:35 |
| mathiaz | vorian: ^^ this is just an assumption though. I'm not really familiar with the embeded version. | 18:35 |
| mathiaz | vorian: yes - if that can help you move forward on amarok. | 18:35 |
| mathiaz | vorian: make sure that libmysqlclient16-dev has all the files - that's what your diff fixes. | 18:36 |
| vorian | mathiaz: great, that will help out tremedously | 18:36 |
| vorian | mathiaz: i'm testing that now, i have a nice hook that will show me any missing files | 18:37 |
| Ward1983 | nice isntalling the xen kernel means getting a bridge with the name of my networkcard..... | 18:38 |
| Ward1983 | my networking was screwed up, even my router started tripping | 18:39 |
| Ward1983 | so how do i undo trhis? not i presume | 18:39 |
| Ward1983 | ? | 18:39 |
| kees | ScottK: yeah, good point. I think that wasn't it, though, since msmtp choked too. seems like the cafile list was the culprit. | 18:45 |
| === lamont` is now known as lamont | ||
| kirkland | nijaba: https://wiki.ubuntu.com/MainInclusionReportScreenProfiles | 19:17 |
| firecrotch | I have two ubuntu servers and can connect to a samba share on one server but not the other. both servers are running intrepid, configured identically except for one of them also having apache installed. trying to connect from windows XP and vista. any clue as to what the problem could be? | 19:19 |
| Faust-C | firecrotch: what do logs say | 19:23 |
| firecrotch | Faust-C: Nothing at all | 19:24 |
| MianoSM | firecrotch: firewall? | 19:24 |
| Faust-C | firecrotch: logs on the server have to say something | 19:25 |
| Faust-C | either turn off fw | 19:25 |
| uvirtbot` | New bug: #317216 in mysql-dfsg-5.1 (universe) ""/etc/init.d/mysql start" fails, so package can't be configured" [Undecided,New] https://launchpad.net/bugs/317216 | 19:30 |
| firecrotch | Faust-C: there's nothing in /var/log/samba/log.(hostname of machine connecting from), and it can't be a firewall issue if the other server works just fine | 19:31 |
| Faust-C | firecrotch: did you check the other logs | 19:31 |
| Faust-C | messages, warn, etc | 19:31 |
| Faust-C | brb | 19:31 |
| firecrotch | Faust-C: nothing in the other logs either related to this | 19:34 |
| jmedina | Faust-C: trye with smbclient locally | 19:36 |
| jmedina | smbclient //localhost/share -U username | 19:36 |
| jmedina | or anonymous smbclient -N //localhost/share | 19:36 |
| Tim__Reichhart | which is better cat5e or cat6 if you going to wire up 3 servers? | 19:43 |
| nadley_ | hi | 19:44 |
| nadley_ | I would like to know how to set up a VPN with ubuntu server ? | 19:44 |
| === mcasadevall is now known as NCommander | ||
| jmedina | nadley_: the easyiest way is to openvpn | 19:50 |
| MianoSM | Or use a DD-WRT router. | 19:51 |
| jmedina | I think there is vpn howto in the community docs, but is for a bridged setup, for routed setup you better follow the official openvpn howto | 19:51 |
| MianoSM | Tim__Reichhart: it doesn't matter Cat5e would be fine. | 19:51 |
| nadley_ | jmedina: oki thx but how I use it | 19:52 |
| jmedina | nadley_: just install openvpn create a config file in /etc/openvpn/server.conf according to the openvpn howto | 19:52 |
| jmedina | well there are clients for linux, mac, windows (including vista) | 19:52 |
| nadley_ | jmedina: what is the difference between a bridged and a routed ? | 19:52 |
| jmedina | nadley_: I can't explaint it right now, it is documented in the howto | 19:53 |
| incidence | Hey, I'm having problems with amavis+spamassassin. It doesn't deliver spam messages to .Junk and it doesn't mark them as spam (rewrite subject( | 20:06 |
| incidence | * ) | 20:06 |
| incidence | http://ubuntuforums.org/showthread.php?t=1038936 | 20:06 |
| nijaba | kirkland: https://wiki.ubuntu.com/screen-profiles-mir. I think we (I) forgot to use gettext for screen-profiles-helper. Do you think we should wait til it is done before submitting the MIR bug? | 20:26 |
| stormblue | I have a server (Drapper with 2.6.15-51 kernel) that when I boot it up it acts like it's going to load and then I see, "Okay boot the kernel" as the last line. The screen flickers a little before this and a little after this. If I boot up into recovery mode I can boot right up. Any ideas on what this could be or any logs I should check? I've checked /var/log/messages and /var/log/demsg and didn't see anything that screamed there was an issue. An | 20:35 |
| agentk | stormblue: It could be screen mode lines in grub. Espically if your getting screen flicker. | 20:42 |
| stormblue | agentk: Can you explain further? Doesn't the line, "Okay boot the kernel" mean I'm outside of GRUB? | 20:44 |
| agentk | stormblue: When you have to option of booting the recovery kernel, go to the main kernel and press E to edit it then go to the kernel line and press E to edit that too. And remove a different option on that line and test it until you find the option that is causing it. | 20:44 |
| agentk | stormblue: Yes, but if the recovery option is booting ok, then the problem is the difference in kernel options between recovery and normal. | 20:45 |
| stormblue | Oh, okay. | 20:45 |
| stormblue | That makes sense. | 20:45 |
| agentk | stormblue: The only difference between my normal and recovery kernel is a word at then end of the kernel line: splash | 20:46 |
| stormblue | Okay. I'll check it out. | 20:46 |
| stormblue | Are you on ubuntu? | 20:47 |
| agentk | stormblue: Yes. 8.04 and 8.10 servers and 8.10 desktops | 20:47 |
| stormblue | How do I save from the edit screen CTRL + O ? | 20:49 |
| agentk | stormblue: To save the changes you will need to edit the grub file once booted. /boot/grub/menu.lst | 20:59 |
| stormblue | Okay. I took splash and quiet out and it was fixed. | 21:00 |
| stormblue | Thanks! | 21:02 |
| dinsdale07 | does the name "httpds" tells someone something. I see this process stuck on my webserver since hours and I'm quite suspicious. | 22:36 |
| mdf1 | why don't you strace it | 22:36 |
| mdf1 | or figure out the full path to the binary and use dpkg -S /path/to/httpds to show the package it belongs to | 22:37 |
| dinsdale07 | I don't even find a binary by that name on my server. under top it shows up as perl unless with the "c" option | 22:38 |
| mdf1 | got the process id? | 22:39 |
| kirkland | nijaba: do you mind if i rename screen-profiles-helper to screen-profiles-configurator (and make all the necessary updates)? | 22:39 |
| dinsdale07 | mdf1, yes, | 22:40 |
| dinsdale07 | kann I link the process ID to the exact binary executed somehow? | 22:40 |
| dinsdale07 | s/kann/can | 22:40 |
| mdf1 | believe you can. under /proc | 22:41 |
| mdf1 | file /proc/<pid>/exe | 22:42 |
| mdf1 | example... | 22:43 |
| mdf1 | root@mdf-vostro-1500:~# file /proc/32702/exe | 22:43 |
| mdf1 | /proc/32702/exe: symbolic link to `/usr/sbin/rsyslogd' | 22:43 |
| dinsdale07 | I didn't know that - that's excellent. | 22:45 |
| dinsdale07 | it says symbolic link to /usr/bin/perl | 22:45 |
| mdf1 | dinsdale07, you can also see the process listing from 'ps -aux' which might provide more information than top | 22:45 |
| dinsdale07 | Oh my dear - that doesn't sound too good... It's all owned by www-data so it seems to be a perl script started by the apache. | 22:46 |
| mdf1 | or created by, which also isn't good | 22:46 |
| MianoSM | so: sudo /etc/init.d/apache restart | 22:46 |
| MianoSM | Done. | 22:46 |
| dinsdale07 | mdf1, I think the process is masking itself by the name of "httpds", there is no path to the exact perlscript. | 22:47 |
| dinsdale07 | MianoSM, if someone can start a perlscript via the web on my server I need to investigate this and get to the bottom | 22:47 |
| MianoSM | dinsdale07: Sweet! let us know what you dig up. | 22:48 |
| mdf1 | dinsdale07, you can strace the process or just kill it. Also netstat -nap | grep PID to see if there are any network sockets open to/from it | 22:58 |
| dinsdale07 | I had a look which files the process has opened - this is the result: http://paste.org/4844 | 22:58 |
| mdf1 | scary | 23:02 |
| dinsdale07 | mdf - your command returns: tcp 0 0 $myip:53978 87.118.108.117:7000 VERBUNDEN 15924/[httpds] | 23:02 |
| dinsdale07 | this is definately nothing that should be running here ... | 23:02 |
| mdf1 | lotta error logs open, and a connection to ns.km23337.keymachine.de:afs3-fileserver looks suspicious | 23:03 |
| dinsdale07 | but thanks so much for your commands - that's going at least in the right direction | 23:03 |
| MianoSM | This machine is still online/connected to the Internet? | 23:03 |
| hads | chkrootkit etc. | 23:04 |
| dinsdale07 | yes - I can't take it offline though ... | 23:04 |
| hads | You may need to :| | 23:04 |
| mdf1 | I wouldn't, not yet | 23:04 |
| hads | and rkhunter | 23:05 |
| jmedina | dinsdale07: dinsdale07 have you looked at /tmp, usually when someone install a script via http it stores it in /tmp | 23:05 |
| mdf1 | I'd use tcpdump to capture the network traffic to the other system | 23:05 |
| jmedina | sometimes in a hiden directory like /tmp/\ .\ . \ /tmp or like that | 23:05 |
| dinsdale07 | It must have been going on for some time now so I hope I can at least leave it online to investigate. | 23:05 |
| MianoSM | That's slightly inconsiderate. | 23:06 |
| dinsdale07 | MianoSM, if I shut it down I don't know what it is doing | 23:08 |
| MianoSM | That's what logs are for. | 23:08 |
| MianoSM | I'm just saying, if you do find that it is a rootkit. Hopefully it's just some bad code. | 23:09 |
| wasabi | ebox is pretty rocking when it works. | 23:09 |
| MianoSM | wasabi: do you like it better then webmin? | 23:10 |
| wasabi | Yes. | 23:10 |
| wasabi | unless webmin has changed substantially since last I looked at it | 23:10 |
| wasabi | Nope, still ugly as heck. | 23:10 |
| MianoSM | I just find webmin extremely easy to use, being one package that works with less then five commands. | 23:11 |
| wasabi | And geared towards hard core admins. | 23:11 |
| Deeps | !webmin | MianoSM | 23:11 |
| ubottu | MianoSM: webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. See !ebox instead. | 23:11 |
| wasabi | !ebox | 23:11 |
| Deeps | mind you, ebox is broken in intrepid | 23:11 |
| ubottu | ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox | 23:11 |
| wasabi | Should add it's broken in intrepid. :0 | 23:11 |
| wasabi | In two ways. | 23:11 |
| Deeps | 2311.21 < Deeps> mind you, ebox is broken in intrepid | 23:11 |
| MianoSM | I've worked with ebox, and do not care for it after working with webmin. | 23:11 |
| wasabi | got cha | 23:11 |
| wasabi | ebox isn't really meant for total box admin, as far as I can tell. | 23:11 |
| Deeps | also noted on the wiki too | 23:12 |
| wasabi | it's meant for a targetted set of devices. | 23:12 |
| Deeps | it's still fairly new too | 23:12 |
| wasabi | But, with it being on Ubuntu now... I really like it. | 23:12 |
| Deeps | webmin's been around a lot longer | 23:12 |
| Deeps | eitherway, it's a bad idea to be dependant on a web/graphical ui to manage your server, you should be able to use the command line comfortably | 23:13 |
| wasabi | I disagre. | 23:13 |
| wasabi | But thanks. :) | 23:13 |
| MianoSM | Deeps: I completely agree. | 23:13 |
| Deeps | wasabi: you think command line knowledge is superfluous, and it's acceptable to be a server admin that's dependant on web/graphical front ends? | 23:15 |
| MianoSM | Everyone has to start somewhere though. | 23:15 |
| uvirtbot` | New bug: #316849 in mysql-dfsg-5.1 (universe) "mysql-server-5.1 doesn't start - skip-bdb option unsupported" [High,Confirmed] https://launchpad.net/bugs/316849 | 23:15 |
| Deeps | indeed, it's an easy way to start, but bad to be dependant on | 23:15 |
| MianoSM | In that regard webmin/ebox can help ease the transition over time, and still allow administration. | 23:15 |
| MianoSM | Just like many will argue that admins shouldn't use ufw, and instead learn IPTables. | 23:16 |
| Deeps | well, if you're transitioning home stuff, sure. if it's anything business critical, YDIW, and will probably suffer more in the long run | 23:16 |
| Deeps | oh i think ufw is great, i'm starting to use it now too | 23:17 |
| * jdstrand wonders why an admin shouldn't use ufw | 23:17 | |
| Deeps | it's a wonderful front end, just like webmin/ebox/whatever | 23:17 |
| jdstrand | I mean, it has sane defaults and one could argue it will help prevent mistakes | 23:17 |
| jdstrand | but, different strokes... | 23:18 |
| Deeps | but i'd still reckon it'd be bad to be entirely dependant on, without knowledge of how iptables works | 23:18 |
| MianoSM | At present the latest LTS does not support ufw with port ranges... | 23:18 |
| jdstrand | well, you need to know iptables to do the fancy stuff anyway | 23:18 |
| MianoSM | indeed. | 23:19 |
| Deeps | indeed | 23:19 |
| jdstrand | MianoSM: there will be a backport | 23:19 |
| Deeps | OOMH! | 23:19 |
| wasabi | Deeps: No? Why assume the polar? | 23:19 |
| wasabi | Deeps: I madea statement that I disagreed with what you said, not that I agreed with the polar opposite. | 23:19 |
| dinsdale07 | test | 23:19 |
| Deeps | wasabi: i wasnt making any assumptions, i was asking a question, hoping you'd expand on your statement :) | 23:19 |
| Deeps | maybe i should have prefixed it with 'do' | 23:20 |
| wasabi | I think deep knowledge of a command line should not be required to do a whole lot of tasks on a server. | 23:20 |
| jdstrand | but, if I may say, ufw works exceddingly well for a desktop user | 23:20 |
| wasabi | I think being able to point and click to configure a firewall and NAT, and some users, is great. | 23:20 |
| jdstrand | exceedingly even | 23:20 |
| wasabi | And I don't think it's shameful. | 23:20 |
| Deeps | aye, ufw's great for a desktop OS | 23:20 |
| jdstrand | :) | 23:20 |
| wasabi | And more pragmatically, whether it is or is not desired is besides the point. | 23:21 |
| wasabi | People want it. | 23:21 |
| wasabi | And if they don't get it with us, they'll find it elsewhere. | 23:21 |
| wasabi | I'd prefer they find it with us. | 23:21 |
| Deeps | wasabi: i totally agree with you, deep knowledge of a command line should not be required to do a whole lot of tasks on a server, point and click for firewall/services configuration is great | 23:21 |
| MianoSM | I suppose therein lies the opportunity for a "home server"? | 23:21 |
| wasabi | The lower the barrier of entry, the wider the swath of audience you can speak to, and the more jobs you can solve for people. | 23:22 |
| wasabi | The thing is to do so while not pissing off another segment. | 23:22 |
| Deeps | however if you're entirely dependant on these friendly front ends, it's easy to hide bad things going on in the background | 23:22 |
| wasabi | Or at least MY segment. :0 | 23:22 |
| wasabi | Deeps: Great. And? | 23:22 |
| wasabi | Deeps: The vast majority of offices in the world run Microsoft servers internally now for their infrastructure. And they have issues. The cost of those issues is however not greater than the cost of people capable of knowing the nitty gritty of all the systems. | 23:23 |
| wasabi | If they were, they'd not be running them. | 23:23 |
| wasabi | And that's just reality as I see it. :0 | 23:24 |
| wasabi | I'd much rather get those same people using Ubuntu. | 23:24 |
| wasabi | ebox is an awesome step towards that. | 23:24 |
| MianoSM | Well, there is a large push for a more friendly GUI/Frontend to the server - but every problem has a tool that will resolve it best. Linux/Ubuntu is a free O/S and as such the cost is in knowledge, not in licensing. | 23:25 |
| Deeps | i've never said it isn't | 23:25 |
| MianoSM | Funny enough even MS is starting to make servers without a GUI (available in 2k8 for many roles). | 23:26 |
| JanC | wasabi: a good & "easy" web or GUI admin is certainly something we need to get into small & medium business | 23:28 |
| dazman | I think Windows SBS is a pretty good "plug in and go" method of a small business server.. in that, on first boot, you get the nice welcome screen where pretty much the main core functionality is all configured using wizards etc. | 23:33 |
| dazman | It means people with little knowledge of what anything the server does, can get it up and running to best practices pretty well. | 23:33 |
| Faust-C | hmm i wonder if i can use gfs+iscsi to have more than one client connect | 23:34 |
| jmedina | why not? | 23:34 |
| jmedina | it is a common use, like gfs+FC | 23:35 |
| Faust-C | jmedina: w/ windows being the client ? | 23:36 |
| Faust-C | ive been messing w/ esx so much i didnt realize that there arent many "network" file systems | 23:36 |
| * Faust-C has 3 windows servers that need to centrally store files on 1 linux server | 23:37 | |
| wasabi | MianoSM: knowledge is always more expensive. | 23:40 |
| jmedina | Faust-C: dont know, I dont use windows | 23:42 |
| dazman | wasabi: I think that's a big barrier. I spoke to some company the other day who was migrating away from an opensource solution to a Microsoft solution (including Microsoft Exchange for e-mail) because support was much cheaper and more accessible. | 23:43 |
| Faust-C | jmedina: i usually dont either | 23:43 |
| wasabi | I did that. | 23:43 |
| Faust-C | but since no one else can solve this issue its left up to me | 23:43 |
| wasabi | I run Exchange, AD, and all the Apache stuff is IIS now. | 23:43 |
| jmedina | Faust-C: but iscsi is for block level, I dont kwon if there is gfs support for windows | 23:43 |
| Faust-C | jmedina: yeah ive been trying hard to figure this out | 23:44 |
| dazman | wasabi: Exchange is a big big big selling point for Microsoft - there's nothing, IMO, in terms of what it does available elsewhere. | 23:44 |
| wasabi | Nope. Nothing. | 23:44 |
| wasabi | But AD is the same. | 23:44 |
| dazman | wasabi: I'm hoping hula project turns into a project which can really start to be a viable alternative. | 23:44 |
| wasabi | MS SQL I think is similar. | 23:44 |
| wasabi | Hula is dead. | 23:44 |
| jmedina | for years | 23:44 |
| wasabi | Novell pulled away from that in 2006 | 23:44 |
| dazman | It's still being developed, albeit not as quick as I'd hoped. I think they're going for version 1 soon. | 23:45 |
| dazman | Sorry, not hula | 23:45 |
| dazman | Bongo. | 23:45 |
| wasabi | If so, it's all volunteer. | 23:45 |
| dazman | :) | 23:45 |
| wasabi | I've never seen anybody who understood why Exchange rocked. | 23:45 |
| dazman | bongo-project | 23:45 |
| wasabi | And provided what was good. | 23:45 |
| dazman | wasabi: You've seen me? :P | 23:45 |
| jmedina | wasabi: it rocks in the specs :D | 23:45 |
| wasabi | It rocks because of the UI. That's about it. | 23:46 |
| wasabi | And the integration into AD. | 23:46 |
| wasabi | And the client. | 23:46 |
| dazman | *technically* it's not the best implemented. | 23:46 |
| wasabi | But each of those things can be developed independently. | 23:46 |
| dazman | It could be better.. certainly room for improvement. | 23:46 |
| wasabi | Instead of pretending 'groupware' is important. | 23:46 |
| Faust-C | eDir is superior than AD imo | 23:46 |
| wasabi | eDir is idiotic. | 23:46 |
| Faust-C | AD is only good at managing windows desktops | 23:46 |
| wasabi | AD is good at setting up authentication. | 23:46 |
| dazman | However, its the integration with clients, AD, the featureset (altho that is limited in parts too, to point which can cause big problems), etc. | 23:46 |
| wasabi | eDir is good if you want a blank slate LDAP server. | 23:47 |
| Faust-C | aside from that AD has no other functionality | 23:47 |
| wasabi | But who WANTS that? | 23:47 |
| Faust-C | wasabi: AD is good at setting up windows auth and desktop settings | 23:47 |
| wasabi | AD solves a problem. It gets you an authentication infrastructure immediately. | 23:47 |
| Faust-C | aside from that i see no use in it | 23:47 |
| wasabi | Faust-C: Works fine with my Linux desktops and servers. | 23:47 |
| wasabi | edir solves a different problem: it gets you a blank LDAP server. | 23:47 |
| dazman | AD also stores lots of configuration... for exchange for example. | 23:47 |
| dazman | It does quite a bit. | 23:47 |
| Faust-C | wasabi: im speaking for locking down windows desktop settings | 23:47 |
| wasabi | That's not WHY you buy AD. | 23:48 |
| wasabi | that's a benefit. | 23:48 |
| wasabi | The core is for centralized/distributed authentication and information. | 23:48 |
| dazman | agree. | 23:48 |
| Faust-C | and exchange i was interested in until i saw the price tag | 23:48 |
| wasabi | Exchange is like 1k. | 23:48 |
| wasabi | Which is nothing. | 23:48 |
| Faust-C | what about cals | 23:49 |
| wasabi | 25 per user. | 23:49 |
| dazman | The fact you can install, for example, a mail server (Exchange) and all configuration and infrastructure information is instantly available via the domain, is a pretty big admin benefit. | 23:49 |
| wasabi | Outlook license included with CALs | 23:49 |
| Faust-C | wasabi: if you have all that setup already | 23:49 |
| wasabi | dazman: and the domain can have THOUSANDS of DCs, all replicating. | 23:49 |
| wasabi | With automatic site management, least cost pathing. | 23:49 |
| Faust-C | unfortunatly i have to fix all the crap here | 23:49 |
| Faust-C | brb | 23:49 |
| * jmedina thinks wasabi sells exchange and AD | 23:50 | |
| wasabi | And it does this automatically. YOu do nothing more than answer 3 questions and enter a username/password. | 23:50 |
| jmedina | :D | 23:50 |
| dazman | wasabi: Indeed. | 23:50 |
| wasabi | We have most of the technical pieces required for that. | 23:50 |
| wasabi | We have LDAP servers, we have Kerberos KDCs. | 23:50 |
| wasabi | We just don't have a coherent vision to tie them together with a good UI. | 23:50 |
| JanC | wasabi: etc. etc. exactly ツ | 23:50 |
| jmedina | zivios looks promising | 23:51 |
| dazman | wasabi: things like, Exchange. You have 10 mailbox servers - mailflow all in AD, knows where to send mail to whichever user.. irrelevent of the mailbox server in use.. move mailbox, all mail is routed to a different server. Things like that, for redundancy, management, usability is a big big big plus.. and it's where opensource solutions need to start looking. | 23:51 |
| wasabi | And the same is true on the Exchange side. We have good IMAP servers. We have good calendar servers. CalDAV stuff. | 23:51 |
| wasabi | But we don't have any coherent vision to tie them together. | 23:51 |
| JanC | Red Hat & Novell & Apple have some solutions around that though | 23:51 |
| dazman | *if* we could bring it all together.... well... that's the key thing.. but, possible. | 23:51 |
| JanC | the unix/linux spirit requires us to come up with a solution that's both easy for mediocre admins and at the same time flexible enough for great admins though :) | 23:53 |
| dazman | JanC: This is where Microsoft have got it sorted though - one side they have SBS, which is all wizard based, very easy to setup for anyone.. but then they have full products, such as 2008, where you can install server core and that's it.. allowing the admin just a powershell to configure it all. | 23:54 |
| dazman | JanC: completely different markets, totally different people.. but the same products presented a different way. | 23:55 |
| JanC | dazman: right, and we *have* the tools to build something similar or even better | 23:56 |
| dazman | JanC: we do.. yep. It's just, doing it.. and bringing those tools together. | 23:56 |
| dazman | JanC: and up to now (well, certainly in the 10-12 years I've been around), it's not happened.. lots of tried, projects come, projects disappeared :( | 23:56 |
| JanC | dazman: AFAIK companies like RedHat, Novell, IBM & Apple have at least some solutions that they use for their clients... | 23:57 |
| JanC | maybe not complete yet | 23:58 |
| dazman | They certainly aren't complete, but they do have some sort of solution. | 23:58 |
| JanC | IBM *has* solutions | 23:58 |
| dazman | Getting to the point Apple are at, in terms of this stuff, it wouldn't be *that* much work relatively. | 23:58 |
| JanC | but IBM is a very untransparant company | 23:59 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!