=== MianoSM1 is now known as MianoSM [05:20] hiya anyone able to answer an nfs question? [05:22] I have an ubuntu server 6.06 and two desktop ubuntu 8 boxes, I'm sharing a folder via nfs from the server, and have no problems mounting it on one client, but the other client mount just clocks when I try to view the folder [05:32] anyone know how to debug nfs problems? [05:34] This channel is usually pretty dead this time of day. [05:34] and particularly during the weekend. [05:34] Try again during the US/European workday. [05:35] okay thank ScottK [05:35] I may be working on Saturday night but I'm drinking a beer while doing it : ) [05:58] I've got a home server that I'm very happy with and a pair of brand new hard-drives I want to put into raid1 [05:59] whats the best way to move all my data over, reinstall and start over from backup? [07:20] hmmm [07:21] what is the best question to ask in #ubuntu ? [07:21] sloopy: Support for servers is on topic here. [07:21] ScottK, yeah just realized i was in server not offtopic :') === MianoSM1 is now known as MianoSM [11:34] hello, i can't find /etc/init.d/courier... is it called /etc/init.d/courier-imap now ? [12:44] mhh I was migrating a LAMP site from ubuntu to debian, but it seems that debian has too old packages ? [12:44] mhh I was migrating a LAMP site from ubuntu to debian, but it seems that debian has too old packages or somthing like it ? [12:45] ask Debian? we run Ubuntu in here... :-) [12:51] Nafallo: yes I know that, but I was wondering if someone knows if Ubuntu needs the newer packages because Debian has issues because of older ones [12:51] my main issue in Ubuntu is Sudo, I need to turn it off [12:52] so that is why I can to debian [12:52] MatBoy: you can turn sudo off in ubuntu.... [12:52] Deeps: and give the root user a normal password... Sudo by default in Ubuntu is damn insecure [12:52] MatBoy: yep [12:53] !sudo [12:53] sudo is a command to run programs with superuser privileges ("root"). Look at https://help.ubuntu.com/community/RootSudo for more information. For graphical applications see !gksu (Gnome, XFCE), or !kdesudo (KDE) [12:53] every user is root actually :S [12:53] by default [12:53] MatBoy: nope [12:53] every user can sudo [12:53] MatBoy: users who are members of group 'admin' have sudo rights [12:53] MatBoy: Only users in the admin group are. [12:53] mhh [12:54] but on WS every user can sudo using his own password for sure ? or that only the first added admin user during the install ? I see ALLALLALL that means... everyone by default can sudo [12:55] thats the first user thats added [12:55] and ALLALLALL is also on server :S [12:55] is added to admin group by defualt [12:55] apt-get remove sudo [12:55] if you're concerned [12:56] Deeps: but will it not break the whole system ? [12:56] although sudo -s first, and set a root password, heh [12:56] why would it? [12:56] Deeps: some people say [12:56] nothing depends on sudo [12:56] I thought the same [12:56] ...or you could juread the link the bot gave above. [12:56] (try it, no extra packages get removed) [12:57] jpds: yes will read there for sure [12:57] Deeps: but ubutnu itself doesn't count on it also ? [12:57] MatBoy: 'ubuntu' what? [12:59] Deeps: package manager... so on ? [13:00] MatBoy: why would apt be dependant on sudo? [13:00] jpds: I have read that last night :) [13:01] Deeps: dunno what magic Ubuntu has done with it :) [13:01] hmm, looking my sudoers file, i see root has sudo rights, and members of admin group [13:01] infact, it's even commented to say that [13:01] couldn't be clearer [13:02] but when I set a root password I can nornally login ? I mean, I need to run scripts as root using ssh and ssh-keys [13:02] yep [13:02] root account isn't disabled, it just doesn't have a password set [13:02] you dont need to define a password to be able to login with ssh keys [13:03] OK, if that's it, it saves me to check for sudo in my scripts [13:03] Deeps: is it done more often or is there always worked around sudo in most cases ? [13:04] MatBoy: can you rephrase the question [13:05] Deeps: when you chose ubuntu as server distro and people need actually root, what do most people do in most cases... work with sudo or just enable the root account by setting a password ? I mean it's not for nothing by default in ubuntu [13:06] MatBoy: i cant speak for most people, but given that ubuntu is geared towards people new to linux, i'd imagine 'most' would work with sudo. i personally do not. [13:06] Deeps: ok, that's what I wanted to know ;) thanks [13:06] MatBoy: many people i know do though, as they're not very comfortable using root, and using sudo gives them the extra safety of having all root level commands logged [13:08] yep, if you need it logged... can be nice [13:08] maybe only for people that need to admin the system manually [13:08] useful if you do something and break everything, but not sure what it was that you did, can look through the log to see all sudod commands [13:09] and that helps when trying to get someone else to help you [13:09] yep true, but I think that's not needed when you run script and you tested them well [13:09] you don't need 200% logging than [13:09] if you're enabling passworded root logins though, i'd recommend disabling root logins via ssh, or enabling something like fail2ban [13:09] otherwise you're more exposed to brute force attacks [13:09] Deeps: yep, that's for sure [13:10] Deeps: BFD is nice too [13:10] but it needs apf... so your solution is nicer [13:11] ok, nice talking about ubuntu this way as you hear some guru's sometimes... don't touch sudo :S [13:11] sudo's security track record hasn't been great, which is why many more experienced linux users dont touch sudo, but i think it's in a much better place these days [13:12] and like all tools, it has a time and a place [13:12] yep [13:12] it would be nicer to have in the installer an option to make your system "more secure" by installing sudo or not [13:13] ok, apt-get remove --purge sudo is not difficult also [13:13] your considerations of sudo being a security risk are invalid, unfortunately [13:13] but I must say... it's nice when a systemadmin that needs to login locally is logged [13:13] Deeps: yes I know [13:14] as only the user created during install time has sudo rights, no other users do (other than root, but that doesn't count) unless you explicitly add them to your sudoers file, or to the admin group [13:14] yep true [13:14] * MatBoy is most of the time the only user on a system, that's why [13:15] creating a user doesn't automatically add them to sudoes nor admin group too, you have to specify that you want them added to admin at creation time or afterwards [13:15] ok, ubuntu is the way to go than for my servers :) [13:15] if sudo was your reason for considerring other distributions, then yes [13:15] but still, I don't know why there was that difference between debian and ubuntu... but I will investigate [13:16] debian is "more" stable [13:16] nah, they have to prove that :) [13:16] they have already [13:16] package versions are frozen and kept in testing for quite some time before a release [13:16] the advantage of ubuntu is that their packages are newer, this can be very good [13:17] Deeps: even than I have had broken systems before [13:17] package versions arent upgraded, while security fixes are backported [13:17] sure [13:17] no system's perfect, humans are always involved, mistakes will always occur [13:17] you better can have good and fast development that can fix issues when they are there than keep it in testing and in stable it still goes wrong [13:17] indeed, that's fun of life [13:18] ok, /me needs to do something about his condition !! [13:18] bbl [13:18] thanks [13:21] hello, how can i access bind9's manpage? i would like to get a output of the currently saved namezone infos "cache history" [13:25] can start at man named or man rndc i guess [13:28] Deeps: thanks, mistake on my side was to search for man pages in the bind9-doc package, where bind9 already brings them to your door [13:51] user___: np === MohammadBoozary is now known as Mohammad[B] [15:32] Hello everyone. Im having problems understanding how to setup my postfix server... It seems like everything is working fine for incoming mail, but outgoing is not setup correctly. The mail client complains that there is no supported authentication methods avaliable... [15:33] I "have" setup SSL authentication, I think the cert is working. [15:35] Is there some parameters i need to set that i gorgot maybe? [16:38] hi i need to make a file with the date at the title. How would i use the 'date' command in the title. [16:43] filename="~/file-$(date)" - in shell. [16:44] You might prefer "date -I" though. [16:51] jpds: this is not working for me [16:52] nvm i spoke too soon [16:55] thanks for the help jpds [17:01] Hi, I'm trying to do something that will appear very stupid: set up a totally anonymous Samba share with read-write options; [17:02] However, my Samba seems to be f**ked in some way, as I can't seem to convince it to allow any kind of connection at all. [17:02] I'm running Ubuntu Server Intrepid, installed just yesterday and brought up to date on everything Aptitude recommended. [17:02] Any ideas? [17:05] guys, i've tried installing ubuntu server... is it really by default doesn't install the wireless driver for broadcom? [17:05] Has anyone used the kubuntu alternate cd to install an ltsp server? In the boot screen, there *isn't* an F4 option to install an ltsp server, but it's there in the debian-installer steps...???!!! [17:06] hey, im not actually using ubuntu server ( using 8.10) but I thought this question would be best answered here. When setting file/folder permissions to give apache2/php read/write privileges (eg sessions.path) which user do I give the permission to? [17:09] ok found the answer, thanks anyway. === maxbaldwin is now known as __init__ === __init__ is now known as maxbaldwin [17:41] why i can't open it ? http://boozary.info/cgi-bin/mysqltuner.pl [17:42] how i can resolve this problem ? cgi file was not compile [17:42] "wget http://boozary.info/cgi-bin/mysqltuner.pl" and then vi it? [17:43] maxb, why wget ? [17:44] maxb, sorry [17:44] maxbaldwin, why wget ? [17:44] well... you can't open it. just download it, and when your done looking at it, delete it or keep it. [17:45] maxbaldwin, that is in my vps ! [17:48] Mohammad[B]: what browser? [17:48] maxbaldwin, oops :-s this file run in cli, sorry dear :-s [17:48] Im not getting anything with firefox, but safari is showing it. [17:50] one second... [17:54] are you asking how to run it, Mohammad[B]? [17:55] maxbaldwin, my problem resolved thank you :-) [17:56] oh. [17:56] ok. [18:29] hi newbie here can someone tell me if i need to use BIND ? [18:34] JessicaParker: regarding an internal network or a host on the internet? [18:35] sommer - getting confused with all of this......but it in relation to setting up a dedicated server with fixed ip address to host a website and mail server [18:36] at the moment i have set it all up at home but without a domain name, i port forward by router to the current machine and if i type in my ip address i get the website up [18:36] now want to move all of this to a dedicated server using ubuntu server edition [18:37] reading through the manual there is stuff on ldap / bind none of which i did at home to set it up [18:37] but i didnt have a mail server at home, and porbably wont get one on the dedicated server, but i do need some form of smtp relay [18:41] JessicaParker: are you going to use a hosting provider for the site? because usually they will provide dns, so you won't have to setup your own [18:42] JessicaParker: you can configure postfix to forwawrd mail to another server as well [18:46] i was going to set up a dedicated server with full root access [18:46] so they will do out of the box install === LinuxLover4 is now known as serveradmin [18:46] they provide 2 fixed ip address and out of the box install of ubuntu server no configu [18:48] sorry for this question, how to i can configure w3m for refresh a page per 2minutes ? [18:48] i recently built a lamp server using ubuntu-server 8.10. However I want to be able to ftp into my /var/www folder. I have vsftpd installed. And Im trying to figure out a good way of going about this. Any ideas? Files that go into /var/www must be chmod 777 or else the php does not parse. [18:49] maybe create a new user? [18:50] I doubt your files need world write permission for php to parse [18:51] chmod 777 = I haven't spent the time to learn unix permissions ;) [18:51] well, at the moment, i am using my sudo account to write files in view ftp, however the php didnt parse untill i chmod 777 them [18:52] as likely would 755 which removes group and world write permissions [18:52] or else i run into this http://codeigniter.com/forums/viewthread/62505/ [18:53] the deal is, i want to ftp files into /var/www and I want apache to have the appropriate permissions to execute php code [18:54] sommer any thoughts [18:55] serveradmin: if I need apache to write I'll set the group owner to www-data (apache's user/group) and give group write permissions.... btw sorry not to be answering your initial question ;) [18:55] sooo . . .I should create a new user that belongs to the group www-data?? and then when i ftp in files under this user, apache will be ok?? [18:55] or maybe I am [18:56] serveradmin: you could do that, you might need to set /var/www setgid for that to work [18:56] ok, ill give it a shot. what does setgid do? can I just chown to my new user? [18:58] it would enforce uploaded files to be owned by the group [18:59] ok [18:59] that would be perfect [19:02] jtaji: I created a user and added them to the group www-data, and then chown /var/www to the new user. However when i upload my php files apache doesnt have correct permissions to use them. what did I miss?? [19:05] i guess my real problem is that apache wont parse my php unless they are cmod 777, and I dont understand why??? jta [19:06] first off forget what I said about setgid... not sure what I'm smoking today... [19:06] i couldnt find a command setgid anyways [19:06] serveradmin: apache needs read access to those files, you can either allow world read access... or set the group owner of the files to www-data and allow group read access [19:07] serveradmin: and that link never connected to see your error [19:07] jtaji: the link i provided was a forum that described the error I get [19:07] so how can I set group owner of the files?? [19:07] chmod 770?? [19:08] chgrp [19:08] ok [19:08] chgrp www-data /var/www? [19:08] serveradmin: or chown .groupname /files [19:08] I'd also recommending learning the ugo+rwx notation of chown [19:08] do I have to do that every time I upload new files via ftp?? [19:10] it allows you to do something like chmod o-w to remove world write permissions, without messing with other permissions [19:11] serveradmin: dunnno that's why I wanted to see your error [19:11] here you go then http://humanity.homeip.net/index.php [19:12] serveradmin: try setting the permissions of the file/files to 0755 [19:13] so chmod 755 index.php should sort that issue, assuming its owned by serveradmin.www-data [19:13] serveradmin: also on /var/www itself [19:13] the php did work this time [19:13] but how can I make it so that new uploaded files will work?? [19:13] yes, the directory should have +x for www-data [19:13] i dont want to chmod all my files every time I upload something new [19:14] serveradmin: maybe you can tell your ftp client to do it automatically for you, or you can change the mask in the ftp server config [19:14] sutff like this is the reason i'm a fan of using fcgi + php running as the user. files will be written as the user. [19:15] im using vsftpd for my ftp server daemon. However, I can edit /etc/vsftpd.conf and tell it to auto chmod 0755, but then all my ftp users will upload files with that mask. [19:18] what user does apache use?? The problem is, that apache isnt able to read or execute my files?? Apache is under the group www-data correct? So then chmod 750 my files, should allow only group to read and edit my files. right?? [19:19] i dont want to give world permissions to my files === maxbaldwin is now known as mb === mb is now known as maxbaldwin [21:15] kirkland: or anyone else using screen-profiles, what does the blue ? mean? [21:48] has anyone heard of pulse2 before? http://pulse2.mandriva.org/wiki [21:49] wondering if there are any packaging effort going on [22:54] Anyone recommend a way to speed up shred? I'm shreding a 250Gb disk and it'll take forever. I don't mind if the data is pseudo-random, it's just a precaution, there's nothing valuable on the disk [22:59] dd if=/dev/[u]random of=/path/to/your/disk/mount/or/device/name [23:00] for i in `seq 1 4`; do dd if=/dev/[u]random of=/path/to/your/disk/mount/or/device/name; done; dd if=/dev/zero of=//path/to/your/disk/mount/or/device/name; [23:00] would be what i've done in the past [23:00] random data a few times over, and then zerod [23:00] makes it pretty tricky to recover after that [23:03] Deeps: That's what shred does [23:03] Trouble is, generating the random data takes forever [23:04] either urandom or random is fairly speedy [23:04] The red light on my hard drive is flashing intermittently, while shred beavers away [23:04] i cant remember which [23:04] I think urandom is quicker, but it still takes a *long* time to generate 250Gb of random data [23:04] I think one pass with semi-random data would do me fine, anyone who wants to read my old email that badly is welcome to! [23:06] Writing 0s to the disk is probably enough to obfuscate my data if I run out of time to let shred run [23:06] I looked into faster random number generators in the past and found frandom, but it's not available in the repos, so I'd need to compile, etc, etc [23:08] probably worth it if you need to wipe the disk in a hurry [23:12] Deeps: I'm going to sell the laptop, so I probably need to re-install Ubuntu after reformatting, and I'm leaving at 9am tomorrow morning [23:12] So I suppose it might be worth it, or I could just use a 0 wipe instead :) [23:12] and it's now... 2pm in the afternoon? [23:12] 5pm :( [23:13] 6am in the morning you're selling it? [23:13] ah [23:13] plenty of time [23:14] consider though, if you're shred-ing files on your filesystem, rather than just sprawing random data across the whole platter [23:14] that your files may not actually be erased, if you're using a journaled filesystem [23:15] or rather, the data may not actually be erased [23:15] since shred doesn't delete file descriptors anyway [23:20] Deeps: I'm shredding /dev/sdb from another machine, so the whole disk is being overwritten with random data I believe [23:20] But it won't even have overwritten once by 9am tomorrow morning [23:20] It's been running a few hours and only generated 20Gb of random data thus far [23:20] how slow's your cpu? [23:20] Core 2 duo, 1.4GHz [23:21] no way it should be that slow then [23:21] Damn, there must be something wacky going on then [23:21] I've always had this problem though, on this laptop and the previous one [23:21] have enough entropy? [23:21] Nafallo: I'm not sure, I'm using the machine right now, so I think so [23:21] i get 4mb/sec using /dev/urandom on a 1.2ghz celeron [23:22] holy crap, ok, something is going crazily worng here [23:22] Maybe shred is using /dev/random instead of /dev/urandom as it says is the default [23:22] dd if=/dev/urandom of=/dev/sdb bs=1024 [23:22] dd if=/dev/urandom of=/dev/sdb bs=1024 count=100000 [23:22] if oyu want to do a short test for speed [23:24] Deeps: Running that now, thanks [23:25] I get 1.7MB/s [23:26] So 250Gb will take around 40 hours... [23:32] Ok, looks like I've got frandom installed and working... :) [23:32] Disk appears to be writing as fast as it's little spindles will carry it... :) [23:32] Now I'm getting 4.5Mb/s :) [23:35] Ok, I think we're writing as fast as possible now [23:35] sudo dd if=/dev/frandom of=/dev/sdb bs=1024 skip=18000000 [23:35] shred had already written over 19Gb of random data at the start of the disk [23:36] sorted [23:36] Still due to take 15 hours at 4.5MB/s though :( [23:36] ouch [23:36] I think I'll let it overwrite the first 30-40Gb which is where my most sensitive data was, then use a 0 overwrite [23:46] Can someone please explain the difference between priority and nice? [23:49] priorities: noun, plural; -ties, 2-4. [23:49] 1. the state or quality of being earlier in time, occurrence, etc. [23:49] 2. the right to precede others in order, rank, privilege, etc.; precedence. [23:49] 3. the right to take precedence in obtaining certain supplies, services, facilities, etc., esp. during a shortage. [23:49] 4. something given special attention. [23:49] –adjective [23:49] 5. highest or higher in importance, rank, privilege, etc.: a priority task. [23:49] Wow. [23:49] haha [23:50] That hilarious. You had better know the real answer now. [23:50] My processes have a process value and a nice value. [23:50] nice: -adjective, nicer, nicest: [23:50] 1. pleasing; agreeable; delightful: a nice visit. [23:50] 2. amiably pleasant; kind: They are always nice to strangers. [23:50] Both make things "higher in importance". [23:50] 3. characterized by, showing, or requiring great accuracy, precision, skill, tact, care, or delicacy: nice workmanship; a nice shot; a nice handling of a crisis. [23:50] 4. showing or indicating very small differences; minutely accurate, as instruments: a job that requires nice measurements. [23:50] 5. minute, fine, or subtle: a nice distinction. [23:50] 6. having or showing delicate, accurate perception: a nice sense of color. [23:50] 7. refined in manners, language, etc.: Nice people wouldn't do such things. [23:50] 8. virtuous; respectable; decorous: a nice girl. [23:50] 9. suitable or proper: That was not a nice remark. [23:50] 10. carefully neat in dress, habits, etc. [23:50] 11. (esp. of food) dainty or delicate. [23:50] 12. having fastidious, finicky, or fussy tastes: They're much too nice in their dining habits to enjoy an outdoor barbecue. [23:50] 13. Obsolete. coy, shy, or reluctant. [23:50] 14. Obsolete. unimportant; trivial. [23:51] 15. Obsolete. wanton. [23:51] —Idioms [23:51] 16. make nice, to behave in a friendly, ingratiating, or conciliatory manner. [23:51] Is that a spammer or what? [23:51] 17. nice and, sufficiently: It's nice and warm in here. [23:51] Thank you for using the maxbaldwin dictionary service. please come again. [23:51] Is an op going to kick this *** or what? [23:51] hehe, hope not. [23:51] lol [23:51] +5 comedy value [23:52] Zombie_Gaz: man nice tells me: nice - run a program with modified scheduling priority [23:52] Zombie_Gaz: man priority tells me: No manual entry for priority [23:52] The point of this channel is to help though. Anyway... priority has a certain value and nice has another value. Both make things more important to the server. What is the specific differences? [23:52] Yes... I can use man too. [23:53] erp "are" [23:53] priority doesn't appear to be installed by default, at a guess they're both wheels invented at different times, both do the same job, nice being installed by default would be considerred to be 'better'? [23:53] So... same thing? [23:53] sure [23:54] if you want specifics for a particular tool, coming to a generic help channel isn't the best approach, heh [23:54] Nice = highest priority is -19. What is the highest priority setting I can use... most of my processes run at 20ish. [23:54] the source code, however [23:54] Zombie_Gaz: i thought you could use man too? :) [23:55] It doesn't say. [23:55] man nice: [23:55] DESCRIPTION Run COMMAND with an adjusted niceness, which affects process scheduling. With no COMMAND, print the current niceness. Nicenesses range from -20 (most favorable scheduling) to 19 (least favorable). [23:55] Sorry. Missed that. [23:55] nice effects priority. -5 nice is 15 priority. [23:59] Er... but I mean what's highest priority not highest nice.