/srv/irclogs.ubuntu.com/2009/02/05/#ubuntu-server.txt

=== gouki_ is now known as gouki
deadbatteryanyone has used mod_bw? before00:16
lamontScottK: uh...  smtp_bind_address01:08
ScottKlamont: That can influence it, but not guarantee a result.01:08
lamontyou can bind to any local IP, and the routing table will decide which interface the traffic goes out01:08
lamontwhether or not the traffic will make it back in becomes a question of rp_filter et al, and routablility of the source IP01:09
lamontif you bind to a particular IP, that _WILL_ be the source IP, modulo NAT or some such changing it later01:09
ScottKOK, maybe I'm having a brain fried day.01:09
* ScottK is currently parked in Starbucks while $ELDESTDAUGHTER shops.01:10
ScottKBBHoss: ^^^ Looks like I was wrong.01:11
lamontScottK: one of my favorite hacks for added non-hackiness is to use allow $IP1 to ssh to a box, when $IP2 (same box) would be the normal source IP01:16
lamontand then use ssh -b :-)(01:16
lamontScottK: also, unless you have advanced routing tables turned on (and in use - see ip rule), source IP is not an input to the routing equation01:21
ScottKRight.01:22
lamontand there are some things that, while doable, should never be done.  they make me feel dirty.l01:23
ScottKYou say that like it's a bad thing.01:23
lamontremind me to show you what the network topology at PrairieNOC looks like, sometime01:24
ScottKOK.01:24
ScottKI'm fairly certain my brain will hurt after.01:24
lamontit's one of those "here are the things I was solving.  here's how I did it." which has, from network experts, received a universal "that's completely sick" response.01:25
lamontthat none of them have ever come up with another solution doesn't make it hurt less01:25
ScottKNo doubt.01:25
lamont(client inside the network chooses which interface to route out by choosing which of two subnets (same layer 2) to use for a source subnet01:25
lamontand then the router DNATs if it goes out the non-advertised route01:26
lamontand yes, it's TOTALLY WRONG01:26
lamontand a fair part of why it's called PrairieNOC01:27
* ScottK has just been informed that the SHOPPING is finished.01:27
lamontthough to be fair, the "Prairie" part is just because network bandwidth TOTALLY SUCKS here01:27
* ScottK will be departing momentarily.01:27
lamontend-of-shopping!! yay01:27
lamonthrm... speaking of which, I'm supposed to be $THERE, not $HERE01:27
=== cmeiklejohn_ is now known as cmeiklejohn
deadbatterycan some one help me with installing mod_bw?01:44
deadbatteryfor apache01:44
twbI want my servers to initiate a clean shutdown when I push their power button.02:49
twbIs the "acpid" package sufficient, or do I need the (bloated) "acpi-support" package?02:49
twbacpid is sufficient.02:53
hadsYup02:57
xjjkhello, how I disable the auto screen-session creation in jaunty?03:01
twbxjjk: screen as in GNU screen?03:07
ScottKYep03:07
xjjkyes03:07
twbFirst I've heard about it; what's the symptoms?03:07
xjjkwhen I login via SSH it automatically creates a screen session03:07
twbUgh.03:07
xjjkgreat for newbies03:07
xjjknot... good.. for people who use screen already and have their own setups03:07
twbxjjk: no, great for me -- but I have that in my .profile.  I don't think it should be the default for people who don't even know what screen is.03:08
kgoetzis your default shell screen?03:08
twbkgoetz: nope, that breaks scp.03:08
twbkgoetz: oh, were you talking to xjjk?03:08
kgoetztwb, yeah.03:08
xjjknot sure, checking03:08
* kgoetz discovered about it breaking scp, and isnt entirely happy about it :\03:09
twbxjjk: try "getent passwd $USER" and see if it mentions screen there03:09
xjjkkgoetz, twb: no03:09
twbxjjk: OK, grep -r for screen references in /etc/profile*03:09
* twb looks for a jaunty VM03:10
kgoetzor 'chsh' and see if it says screen as your login shell ;)03:10
twbkgoetz: heh03:10
xjjktwb: don't see anything there either03:11
xjjkI'd like this enabled for other people's accounts03:11
xjjk...just not mine03:11
kgoetzhaha03:11
twbxjjk: was your account the one created during the install?03:11
xjjktwb: yes03:12
twbxjjk: ok, grep -r again but in /etc/skel and ~/.??*03:12
twbUnfortunately my copy of jaunty isn't booting, but in any case I disabled the creation of an initial user...03:12
xjjkhrm... I did something, and it's not doing it anymore...03:13
xjjkI don't know what03:13
xjjkhrm... something still up03:15
xjjkI run screen, and it seems to ignore my .screenrc03:16
hadsThere's a screen-config tool or something03:25
xjjkhrm.. problem is the screen-profiles package03:26
xjjkit replaces screen with a wrapper script that calls a screen.real03:26
xjjkwrapper script does a lot of config mangling stuff...03:26
stiv2khello, the init  script that comes with a certain package does not work.  what should i do?03:35
stiv2kthe package is bopm03:35
kansanwhat is the package manager called?03:38
kansandpkg03:38
kansan?03:38
kansani mean the apt-get03:38
stiv2kuh what03:41
hadsIt's in universe so I'd guess post to the mailing list or open a bug.03:43
stiv2khm03:45
deadbatteryis there a command that shows u in ubuntu for ur server what ips are connected to u ?04:01
kc8pxyi need some help. i'm trying to compile approx, for use in caching ubuntu packages. my insanity shows when i say I'm compiling it on a non-debian-based distro. but I've ironed out all but the final few bugs in compiling it.04:12
jmarsdendeadbattery: netstat -ntu04:14
kc8pxyi still need a .cmxa file for ocaml-sha and syslog-ocaml.   neither source tarball has that file, nore creates it, upon make. why not?04:14
deadbatteryThanks jmarsden04:25
deadbatteryjmarsden, is there a way to know how much each IP is specificaly using bandwidth?04:31
deadbatterycan some one help me x.x?04:54
kgoetzstart with iftop and iptraf04:54
kgoetzthen do some research :|04:54
deadbatteryi tried..04:55
deadbatteryin apache2 the server breaks and i get this in error.log apache2 child pid exit signal segmentation fault04:55
deadbatteryi cannot fiogure what the issue is04:55
kgoetzincrease your logging04:55
deadbatterywhat do u mean04:56
kgoetzwhat part dont you understand? increase apache 2 logging level04:59
deadbatteryi am a noob,05:00
deadbatteryi dun get it05:00
deadbatteryall the log shows is child pid errors05:00
deadbatterykgoetz what do u mean05:02
kgoetzwhich log file shows the errors?05:02
deadbatteryerror.log05:02
kgoetzdoes access.log give any clues?05:03
deadbatterysec05:03
deadbatteryseems fine05:04
deadbatteryany ideas05:05
kgoetzyes. increase the loglevel from whatever its on to something more verbose05:05
kgoetzhttp://letmegooglethatforyou.com/?q=change+loglevel+apach2 try the first hit05:06
* kgoetz -> lunch. bbl05:06
deadbatteryhow wud changing log level fix anything?05:06
deadbatteryit alrdy shows a lot05:06
roy_hobbsquick newbie question.  if i want to install ubuntu server to host virtual machines - the general procedure is to install ubuntu server, install the ubuntu-virt-server package, and then set up virtual machines running ubuntu jeos?05:25
BangersWhen I do "sar -d 3 3" I get "dev8-0 " for "DEV" -- what device is this??06:36
BangersIm looking for disk IO usage stats for /06:36
twbRemind me, how do I tell which drives smartd has found?06:57
twbI tried "smartctl -i /dev/sda" and it gave an error, which doesn't really surprise me (shitty IBM hardware), but I want to know if smartd agrees with smartctl.06:58
agentkdazman: Hey that tcp redirect with iptables has stopped working again. --to-port and --to-ports aint making any difference :-(07:15
quizmehello08:02
quizmehow do you set the $PATH for all users to be bash?08:02
_rubenerm .. $PATH is a list of directories to be searched for executables .. bash is a shell .. you dont set $PATH to bash08:06
quizmei mean $SHELL08:08
quizmei want it so that when i create a new account, they get the bash shell08:08
quizmei don't want to set it manually for each one08:08
_rubenquizme: see $DSHELL in /etc/adduser.conf08:16
quizme_ruben: thank you08:42
twb$SHELL is set *by* bash *iff* you're running bash.08:43
twbIt would not be appropriate to set $SHELL to bash and then run, say, zsh or csh.08:43
quizme_ruben: it's already set to bash but it doesn't seem to help the situation of adding users.  it still goes to /bin/sh08:44
twbAs _ruben says, to ensure that new users get /bin/bash as their default shell, check adduser.conf.  For existing users, you can use vipw or possible chsh/usermod.08:44
twbquizme: are you adding users in LDAP?08:44
twbquizme: or with useradd(8) instead of adduser(8)?08:45
quizmei adding users using the adduser command08:45
quizmei don't know what ldap is08:45
quizmewhen i login as the user08:45
quizmeit starts up /bin/sh08:45
quizmeum08:45
quizmenot sure08:45
twbquizme: what is the user's name?08:46
quizmeoh it should be adduser?08:46
quizmelemon08:46
twbquizme: useradd is a low-level utility which ignores adduser.conf.  adduser is what you, the admin, should run.08:46
quizmeoh...08:47
quizmeadduser08:47
quizmeok08:47
twbquizme: if you run "getent passwd lemon", it will either have /bin/sh or /bin/bash.  That will tell you accurately what their default shell is.08:47
quizmehow do i change it to bash?08:48
quizmecan i edit /etc/passwd?08:49
quizmeoh yeah that worked08:49
twbquizme: as I said, 19:47 <twb> As _ruben says, to ensure that new users get /bin/bash as their default shell, check adduser.conf.  For existing users, you can use vipw or possible chsh/usermod.08:50
quizmei edited /etc/passwd08:51
quizmeis there a shared .bashrc on the system?08:52
jtaji/etc/bash.bashrc08:52
quizmeah ha08:53
quizmenice08:53
twbIMO you should avoid putting your personal preferences in there.08:54
twbThe /etc/bash.bashrc file is really for things like adding /opt/crap-app/bin into the default $PATH -- and actually in that case you would use /etc/profile08:54
quizme/etc/profile08:58
quizmeok08:58
=== kansan is now known as kansan-zzzzz
maxbquizme_: chsh or usermod are preferable to editing /etc/passwd directly - less opportunity for mistakes09:58
Jeeves_vipw09:58
PecisDarbshi people, I am writing maitanance script, is there any easy way to detect what kind of fs block device containts?10:26
PecisDarbscontaints/contains/s10:27
incorrecti've just installed a number of machines,  and for some reason their uuid for admin is 112 not 119 as it is for all my other servers10:58
incorrecti thought this was supposed to be static10:58
=== Spear is now known as Spear_
=== Spear_ is now known as Spear
PecisDarbshi people, what for snappshoting LVM volumes "Allocated to snapshot " means? It is how much of original volume is copied to snapshot or how much it changes?11:01
PecisDarbsincorrect: the same CD?11:01
incorrectPecisDarbs, yep11:01
PecisDarbsconfiguration differs? (for example, some box has different set services)11:01
PecisDarbsincorrect: if I am correct, admin is user with sudo rights, right?11:02
incorrectwell the three machines that have different uuid's for admin are vmware hosts11:02
PecisDarbsthen it is easy11:02
incorrectno the group11:02
incorrectuid11:02
PecisDarbsfor each service there is additional user11:02
incorrectguid11:02
incorrectd'oh11:02
incorrecti can't type11:02
PecisDarbsthat's not a problem :)11:02
incorrecti mean the gid for admin has changed11:02
PecisDarbsincorrect: it still can be the same11:02
PecisDarbscount of users and groups on default install differs according to how much services you have enabled at install time11:03
PecisDarbsas far as I think it goes11:03
incorrectgid for admin on all machines i've installed has been 119, but these three vm's it got set to 11211:03
incorrectits easy enough to fix, just weird11:03
incorrectoh wait, i spotted something11:04
incorrecti think the gid for 8.04.2 for admin has changed11:05
sorenincorrect: uid's over 100 are not static.11:05
incorrectthat is a real pain in the butt11:05
sorenWhy?11:06
incorrectthat is a real pig, that makes having ldap fairly useless11:06
sorenHow so?11:06
incorrecti wanted to add users to admin so they could sudo, have access to hardware etc11:06
sorenYes?11:07
incorrectwell if the gid changes, it won't work11:07
sorensudoers says that %admin can sudo, right?11:08
incorrectyes11:08
incorrector access hardware11:08
incorrecti don't want to go to every desktop and add them into all the groups11:08
sorenAnd what happens if you "getent group admin"?11:08
sorenI don't see how th GID factors into it.11:08
incorrectok my mistake, its just admin11:09
dazmanah11:09
* dazman wrong window11:09
incorrectok the only issue is admin,11:09
sorenWe've never guaranteed that the gid for admin would be static.11:09
incorrectthat is either 119 or 11211:10
incorrecti could deploy a new sudoers config to all boxes11:10
soren...and why does that matter?11:10
sorenYou refer to them by name, not gid.11:10
incorrecton my ldap server i have an object cn=admin,ou=group, etc  that has a gid,   then the memberUid's are done by name11:12
incorrectwhat would be good is the find a list of all the groups and their use11:12
sorenincorrect: I still don't see how the gid is relevant. What does "getent group admin" return?11:16
incorrectsoren, it depends on the system,11:16
incorrecteither 112 or 11911:16
incorrectnewer installs are returning 112 and older ones are returning 11911:17
incorrectall have been 8.0411:18
incorrecti guess i could change the ldap admin entry to a 1-100 entry11:18
sorenincorrect: I don't care about the gid it returns.11:22
sorenI care about the members it lists.11:22
incorrectthe depends on the system and if the users gid matches the system11:22
sorenIt only collates them if the gid matches? That's interesting.11:23
incorrectmachines that have 112 gid don't get the users from the ldap server11:24
sorenRename the LDAP group or remove the local one?11:24
incorrectthat would be fatal11:24
incorrectyou see if i machine had to be taken off the network i couldn't sudo11:25
sorenRelying on the staticness of something that is specifically documented to be dynamic seems like a bad plan.11:25
achilleshello, I have a problem in my bind service, it sunddenly stops responding for name resolution and then suddenly it returns back .. nothing appears on the log, the other services like ssh is normal .. any help ?11:25
incorrecti can move my ldap admin group to sub 10011:25
incorrectthat might work11:26
sorenWhy would you do that?11:26
incorrectwell if that means systems pick up that group first,11:26
sorenMoving it below 100 doesn't magically make it static or synchronised across your systems.11:26
sorenincorrect: No.11:26
incorrectsoren, sure it does11:26
incorrectmy systems get the info from my ldap server11:27
soren"getent group" doesn't iterate through the gid's from 0 and upwards until it finds one with a name that matches.11:27
incorrecti change it there, it gets deployed instantly , assuming i am not running nscd11:27
sorenIt goes in the order defined in nsswitch.conf and looks up the name and then maps it to a gid.11:27
yann2soren > a mail for you on the kvm mailing list, from this morning11:28
incorrectah in that case i will swap files ldap to ldap file11:28
sorenyann2: Thanks for the hint.11:28
sorenincorrect: Why don't you just rename the ldap group?11:28
soren...and add it as an extra group in sudoers?11:28
yann2soren > you'll be less happy when you see it :)11:29
sorenAgain:11:29
soren11:25:20 < soren> Relying on the staticness of something that is specifically documented to be dynamic seems like a bad plan.11:29
incorrectsoren, i don't really want to do that on 200+ systems11:29
incorrectldap files will do nicely11:29
sorenincorrect: You'd rather change the nssiwtch.conf on 200 servers?11:29
incorrectthat is less of a big deal if it gives me the desired result11:30
sorenWell, it's very likely that it doesn't.11:30
sorenYou really usually do want files to take precedence.11:30
sorenYou're somehow acting as though changing the name of the ldap group and adding it to sudoers on every system wouldn't give the desired result which is not the case.11:31
incorrectthat is not a nice solution to my mind11:31
incorrectyes i can create another group, add it to every machine11:32
sorenNo, you don't add the group locally.11:32
sorenJust the line in sudoes.11:32
sorensudoers, I mean.11:32
incorrecti think its much better to use the global config from the ldap then degrade to the local files11:32
sorenWell, just be careful.11:33
sorenDo you for instance have a root user defined in ldap?11:33
incorrectno11:33
incorrectroot is disabled11:33
incorrectsuper, so setting ldap files works great11:34
sorenFor now..11:35
sorenIf the network is acting up, you'll be less excited.11:36
incorrectso i pull it off the network, i get the local config11:36
sorenYes, when the network times out.11:36
sorenfor *every* getent call.11:36
sorenBut whatever.11:36
incorrectnscd11:36
* soren -> lunch11:36
incorrectyou set a low time out, and you will get that issue if the network acts up no matter what way round they are11:37
incorrectand set the ldap bind policy to soft11:39
orudieis it hard to set up mail server ?11:56
orudiewhich mail server can you recommend ?11:56
incorrectorudie, how much functionality do you want?11:57
Deepsuse tasksel, select 'mailserver' from the list, it'll setup and configure the ubuntu recommended setup for you11:58
orudieincorrect, i'm not sure lol11:58
incorrectorudie, personally i use zimbra at work11:58
incorrectbut that takes over your entire system pretty much11:58
orudiei want to be able to check mail with web mail client11:58
orudiei need it to work with this http://drupal.org/project/webmail_plus11:59
incorrectif you do it yourself i can be a lot of work, setting up imap, webmail clients etc11:59
incorrectdo what Deeps suggested11:59
orudiethe problem is that i dont have a domain yet12:00
incorrectmake one up,12:00
incorrectmynet.local12:00
hadsIt's not that much work12:01
Deepsor get a free domain from dyndns, afraid.org or eu.org12:02
hadsI use postfix and dovecot myself.12:03
incorrectme too12:03
incorrecti am probably going to set up a vm and run zimbra as its seems pretty slick these days12:03
hadsI don't like their licensing12:04
incorrecti didn't think the free one was bad12:04
hadsJust never been much of a fan of the "open source but you should upgrade" crowd. That's a personal thing though.12:05
incorrectpeople need to earn a living, for me its more about who i trust the most12:11
hadsI agree, I'm not going to get into a licensing discussion though as it's a personal thing.12:14
yann2zimbra is amazing :)12:15
yann2<- very happy customer12:15
incorrecti wouldn't go that far12:15
incorrectbut it does the job12:15
yann2I would12:15
incorrectthen again i am using 412:15
yann2best web app I've seen so far12:15
Deepsit's a bit heavy for a small personal use mailserver12:16
incorrecti installed 5 the other day and it seemed much better12:16
yann2good QA, very good features, etc.12:16
yann2Deeps > agreed ;)12:16
yann2I'll blog about it one of these days12:17
incorrectthe only problem i found with it was firefox 3 stopped working with the admin tool12:18
incorrectbut that was version 412:18
incorrectcould well be fixed now12:18
yann2this is fixed in 512:20
yann2it has features like shared mail folder, shared calendar, tags, good anti spam etc12:21
yann2would be a pain to implement alone12:21
incorrectcool12:21
incorrectsure would12:21
yann2zimbra 5 even has a jabber server12:21
incorrectis saw that12:21
incorrectthat is beta12:21
yann2well it works well :D12:21
yann2oh and the search really rocks ;)12:23
incorrectok i am convinced12:24
yann2just try it http://www.zimbra.com/products/hosted_demo.php12:26
incorrecti am already running 412:26
incorrecti will build a new server12:26
yann2yeah the demo is zimbra 512:27
incorrectdo you work for yahoo?12:27
yann2the only thing that really badly badly sucks is yahoo branding and project management12:27
yann2ahm12:27
yann2no? :D12:27
incorrectcouldn't resist12:27
yann2I am very happy with zimbra12:28
yann2I could say the exact opposite about alfresco though12:28
incorrecti am thinking about using it at home12:28
frippzwow, yann2 _really_ likes zimbra :D12:28
yann2so many people talking about alfresco, gee, they m ust have never tried it12:28
dazmanI'm really hoping the Bongo Project takes off...12:29
yann2there are other zimbra competitor fully opensource, but quite behind12:30
yann2I need the best Q&A and commercial support for that too12:30
incorrecti just like things that work and don't take the next year to install,12:31
incorrectzimbra was packaged nicely12:31
incorrectlunch12:32
licantruphello12:33
dazmanHmm, I just bailed and installed Exchange... Heh.12:33
licantrupI want to share a windows partition from ubuntu to another ubuntu machine12:33
licantrupbut nfs complain it is not compatible12:33
licantrupis there any workaround?12:33
yann2incorrect > zimbra is packaged but is supposed to be alone on the server. If you have anything else, it will break12:34
yann2it uses its own versions of mysql/postfix/blah - it's all bundled12:34
dazmanyep.12:35
dazmanAlthough, even Bongo is better if you install * from Bongo Project stuff.12:35
yann2so it's very easy to deploy - but you have to allocate a machine for it12:35
lamontyann2: and you're totally unsupportable by anything other than zimbra12:35
dazmanIt's *much* easier having it all packaged.. no messing around with different MTAs etc.. and it's all manageable centrally.12:35
dazmanlamont, true.. but it has other benefits which outweight that IMO.12:36
yann2lamont > you have other companies supporting zimbra12:36
lamonta fair chunk of why they did what they did was because it was hard to work within the existing packaging to do what they wanted...12:36
lamontyann2: I meant the package, not the company12:36
yann2lamont > I think they patched some stuff too12:36
yann2lamont > so do I.. you can buy support from other companies if that's what you meant :)12:37
yann2anyway12:37
yann2*back coding*12:37
lamontyann2: and when they file bugs against the postfix package because it doesn't do what they want, then as the postfix maintainer, there is pretty much nothing I can do to even reproduce their issue, let alone help the user..  but yeah, that helps the revenue model of zimbra and the other companies, so they're not exactly motivated to make it work correctly12:38
licantrupguys I have this message trying to mount through nfs "mount.nfs: access denied by server while mounting 192.168.1.100:/media/sda7/Videos"12:38
licantrupI have the /etx/exports file correct I think12:39
downhill_so is anyone familiar with a mechanism or perhaps bug with Ubuntu Server that would add reject routes (as in like, `route add 123.123.123.123 reject`) to the route table as well as entries to /etc/hosts.deny? My server keeps doing it for some reason and I can't figure out why.12:39
yann2lamont > you shouldn't feel concerned ;) but there are quite larges customers, and if there is a serious bug, believe me, they do care, and so does zimbra :D12:39
dazmanSo I presume Zimbra use their own postfix packages, and maintain their own config/bug fixes?12:39
yann2I Guess they must sync at every release and backport patches yes12:40
lamontdazman: if you have a postfix instance on the machine, and it's not the version of postfix from the archive, I really don't care what your issue is quite so much - so I hope someone does.....12:40
downhill_anybodah? :)12:40
dazmanlamont, well, of course.. not much you can do either, as you're not likely to be applying their patches.. heh.12:41
yann2if you cound 20M paid-for mailboxes, and an average of 20-30$ per mailbox - I guess they have someone :P12:41
yann2but really, their quality assurance is very good - very few bugs, and properly supported - if we had the same with ubuntu (server) I'd be happy12:42
yann2:o)12:42
hadsOh dear12:42
dazmanI've never really deployed a zimbra box properly.. but in terms of deploying Ubuntu Server, I've done a fair few.. and all have been faultless (with postfix packages, dovecot etc etc).. so in terms of bugs, I've yet to see any which have really affected me in a final release.12:43
yann2dazman > I am managing quite  a few hardy (50-100) and I stopped counting :)12:44
yann2but it's improving, so let's keep pushing and hope for the best12:45
dazmanyann2, sure, I'm not at the 50-100 scale.. and of course more volume, more issues.  I manage 100 Exchange servers..... so I do get my pain. :p12:46
yann2;)12:46
downhill_awww maan >.< I wanna get this fixed12:57
=== Mohammad[B] is now known as boozary
suigenerishello13:21
dazmanHi.13:21
downhill_yeah...13:23
dazmanHeh13:24
downhill_still wondering what's going on with the route reject rules^13:24
suigenerisi've generated and signed a certificate, but my mail client keeps giving me the warning at http://people.sabanciuniv.edu/mtozses/cert.png. why?13:25
suigeneriswhat field do I need to fill in like mail. ?13:26
dazmanIt's because you're accessing the server as mail.domain.com  but the certificate CN is for domain.com13:26
dazmanTo get around that, you need to access the server as the CN.. so if that cert is just for the mail.domain.com, then change it to that.13:27
PecisDarbssuigeneris: create cert for mail.domain.com not domain.com13:27
dazmansuigeneris, it'll be the (CN)13:27
suigenerisCN, okay13:28
suigeneristhanks13:28
suigenerisdo i need to re-generate both private and public?13:29
dazmanthere's no real concept of private/public is there?  It's just a certificate generated by the root authority.13:31
dazmanHmm, I'm sure someone suggested it, but LAMP for Ruby on Rails..... would be pretty cool.. Heh.  LAMR... ;)13:41
dazmanWouldn't be too difficult either.. as all the packages are there already.. just needs a metapackage with some post install tasks13:43
downhill_I'd like to see a VPN Server option13:44
* dazman considers looking into it... 13:44
dazmandownhill_, PPTP?  IPSEC?  OpenVPN?13:44
downhill_ovpn13:44
dazmandownhill_, all?  Heh13:44
downhill_laff, all13:44
[diablo]afternoon all13:44
downhill_no, just ovpn13:44
dazmanhmm13:45
[diablo]guys, anyone using a realtime kernel in ubuntu-server and / or know the status and stability please?13:45
dazmannot too difficult.13:45
downhill_sets it up, makes you the beginning keys. not hard, very helpful13:45
dazmandownhill_, it's just ovpn packages, generate a basic config, generate the ssl certs13:45
dazmandownhill_, yea13:45
downhill_s/keys/certs/13:45
dazmanI am seriously considering looking at LAMRoR though... Heh.13:45
downhill_you should13:45
dazmanNot only cus' it could have a good name... but.. it's also useful.13:46
downhill_I wish there was a, like, "[X] Basic Home Server"13:46
dazmanI'm sure there was a post to -server *checks*13:46
downhill_but oh well, I don't think that falls in their uh... you know13:46
downhill_vision or whatever13:46
dazmandownhill_, depends what you want the home server to do - generally, everyone wants things very different..13:48
dazmandownhill_, although saying that, replicating say, Windows Home Server would be pretty straight forward.13:48
downhill_the latter, and yeah, the way it's setup now is fine.13:48
downhill_just those little thoughts we all have ;)13:48
dazmanof course.. always thinking :p13:49
downhill_anyway, a ovpn option would be nice :p13:52
downhill_or, FFS, a mysql option13:52
Deeps'option' in what way for mysql?13:54
downhill_we're talking about the options it shows during install for which package sets to install. ssh server, samba file sharing, etc.13:55
dazmanOh13:55
downhill_unless I missed something :p13:55
dazmanWell... kind of :P13:55
dazmanI'm talking about that, but also a meta package for RoR if possible, heh.13:55
downhill_yes13:55
downhill_we're on the same page then ;)13:55
dazmanYea.13:55
dazmanmysql is easy enough to install post install tho13:56
downhill_yeah but I'd like to do it during the install :p13:56
dazmanAll I'm thinking, is people are deploying more and more rails apps... so it'd be good to accomodate those easier, in one nice package13:56
downhill_mhmm13:56
downhill_is there a LAMPython package? :O13:57
suigenerisdazman, would CN be Organization Name or Organizational Unit14:00
suigeneris?14:00
suigenerisOrganizational Unit Name*14:01
dazmanNeither.14:01
dazmanIt's Common Name14:01
Deepscommon name should match the hostmask you use to connect to the server with14:03
vertxHi, has anyone ever used Mikrotik (http://www.mikrotik.com)? It is based on Linux. I'm just wondering how could I reproduce its upload/download bandwidth limiting capabilities through Ubuntu server.14:07
dazmanvertx, http://ubuntuforums.org/showthread.php?t=7990 may be a good start.. although an old thread now, should give you a good starting point.14:10
PecisDarbsvertx: afaik it is based on FreeBSD now14:10
PecisDarbsanyway, it should be reproducable on Linux14:10
dazmanIt's RouterOS isn't it?14:11
PecisDarbsahh14:11
PecisDarbsyes14:11
dazmanAh, it's RouterOS with a Linux kernel.14:12
suigenerishow do i view my private ket?14:14
suigeneriskey*14:14
downhill_ls ./blah.key :p14:14
suigeneriscute14:15
downhill_what are you really trying to ask?14:15
suigenerisdownhill_, see the values of the certificate14:15
downhill_you could simply use cat then14:16
downhill_but you want to do that with your .crt, not your .key14:16
suigenerisit was openssl something14:16
downhill_it's human-readable if you cat your .crt, but whatever...14:17
suigenerishmm14:30
suigenerisI am reading the book of postfix, i applied the steps CA.pl -newca, openssl req -new -nodes -keyout privatekey.pem -out privatekey.pem -days 1825 and openssl ca -policy policy_anything -out publiccert.pem -infiles privatekey.pem , copied the key and cert under /etc/ssl/private and /etc/ssl/certs and restarted postfix, but I am missing something and I can't use the new cert14:42
suigeneriscan someone help me?14:50
=== maxb_ is now known as Guest77609
beniwtvHi all... I'm using Hardy LTS server, and I wanted to use asterisk-app-fax. However, when calling RxFax, Asterisk just crashes (Segmentation fault). Has anyone seen that problem?15:30
downhill_strace might be able to give you more information as to what's going on15:31
beniwtvdownhill_: strace is here: http://pastebin.com/m5d47387115:37
beniwtvAlso, I found this bug in Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=479612. Might be the same?15:38
uvirtbotDebian bug 479612 in spandsp "spandsp 0.0.4pre18-1 broke ABI" [Grave,Fixed]15:38
DogWaterAnyone have any tips on increasing speed of small file transfers with samba? perhaps filesystem?15:46
Faust-CDogWater: do nic teaming, maybe use xfs (i think its good)15:47
DogWaterokay, so perhaps RAID-5 /w XFS?15:48
Faust-CDogWater: sounds good, my setup is:15:49
Faust-C4 disks, mdraid raid1 (cause i need space), lvm using xfs, 6-8 smb shares, cheap nic cards15:50
Faust-Cand works great15:50
Faust-Cbut i wish it was better15:50
DogWaterOh, I have a perc6i (dell 2950-iii) in the particular server i'm referring to atm, and i'm currently just using raid-1 but i'm considering moving the fs that i need to be faster to xfs/raid-515:50
Faust-Cremember to look into fs optimizations, best practices, etc15:51
DogWatercripes at importing gpgkeys16:03
eolo999hi, someone knows something about which services are generally on port 4734? We are receiving a flood attack to that port...16:10
uvirtbotNew bug: #323362 in tomcat6 (main) "While updating system, it reported an error." [Undecided,Incomplete] https://launchpad.net/bugs/32336216:10
=== Guest77609 is now known as maxb
dazmaneolo999, according to /etc/services, nothing.. so it's none standard probably.16:57
eolo999dazman: i know, that's why i asked here16:57
eolo999...16:58
dazmanseems random to flood one port... heh.16:58
dazmanAnd, if google doesn't know, it doesn't exist (Tm)17:00
dazmanAnd Google doesn't seem to know... nearest I got was line 4734 in tcp.c on OpenSolaris... :)17:01
frippzI'm trying to mount an SMB-share but I keep getting "wrong fs type". I thought that the package samba-client would provide all necessary stuff to mount SMB/CIFS17:18
geniifrippz: You may need smbfs package installed17:19
frippzgenii: there we go! now I got a permission denied instead. it's going in the right direction! :D thanks for you help17:20
geniifrippz: np17:20
frippzprolly forgot to activate an account on the NAS or something...17:21
simplexiohas anyone idea why make-kpkg dosent work with 2.6.28-3 kernel.org source ?17:45
ivokswhy do you use make-kpkg?17:46
ivoksyou are compiling ubuntu kernel source or non-ubuntu kernel source?17:46
simplexiokernel.org17:47
ivoksoh... ok17:47
simplexioi have allways thoght that its "easiest" way to do it17:47
ivoksi haven't compiled kernel.org's kernel for years...17:48
=== tuxlinux_ is now known as tuxlinux
simplexiooffcourse make bzImage && make modules_install should work too but. then i need to modity menu.lst etc.. by hand17:48
ivokser... you don't need to edit it manually17:48
ivoksupdate-grub will pick it up17:48
ivoksjust name it vmlinuz-version17:49
simplexionice17:50
ivoksupdate-initramfs will also create initrd17:50
ivoksif you need it17:50
simplexioi had some strange problems with 2.6.27-server version.17:51
simplexiocurrently it seems that software raid1 on swap isnt that good idea17:51
ivoksi managed to issue a command in vim after which it's runnin 100% cpu for 15 minutes :)17:52
ivokswhy not?17:52
simplexioswapper could alloc memory, same happened to nfsd under heavy load17:53
simplexiocould not ..17:54
dazmanivoks, I presume it's not :w :p18:03
ivoksdazman:18:04
ivoks:'<,'>s/),(/);\rINSERT INTO `mdl_backup_log` VALUES (/g18:04
ivoksi should write a howto make your mysql dump 5 times bigger18:05
cellofellowmysql isn't listening for tcp connections. why?18:05
cellofellowie port 3306 is closed. I don't have ufw blocking it18:05
ivoksthat's how it is configured by default18:06
ivoksyou can change that18:06
cellofellowhow?18:06
ivokscreate /etc/mysql/conf/custom.cnf18:07
ivoksand put in it:18:07
ivoks[mysqld]18:07
ivoksbind-address = 0.0.0.018:07
cellofellowok18:07
ivoksand restart mysql18:08
cellofellowstill closed :(18:08
cellofellowat least when nmap18:09
ivoksit should work, iirc18:10
cellofellowoh, it's /etc/mysql/conf.d, not .../conf18:11
ivoksah, sorry18:11
cellofellowok, working now. thanks18:12
dazman:)18:13
dazmanIn terms of keeping thing sensible... how realistic is creating a metapackage to install apache, mysql, ruby, gem etc. (anything for RubyOnRails) with all the post install stuff which is required?18:21
alex_joniivoks: around?18:27
ivoksyes18:27
alex_jonitried an 8.10 server install on that hardware, same issues with grub18:28
alex_jonirebooted in recovery mode, and installed grub2 which did the job beautifully18:28
alex_joni(after hacking about 2h at grub-install to convince it to recognize /dev/rd/c0d0 as the install device)18:28
alex_joni(that grub-install was part of the standard grub, not grub2)18:29
ivoksgrub2 works for you?18:29
alex_joniyes, in this case it worked GREAT18:29
ivoksit's good to know *another* case where grub2 works, while grub and lilo don't18:30
alex_jonithis isn't one of the most common pieces of hardware, but it's good to have an alternative that just works18:30
ivokslinux needs new boot loader anyway18:31
alex_joni2.6.27-7-server worked ok too.. detecting everything needed on that machine18:31
ivoksi'm afraid grub2 isn't ready yet18:31
alex_joniwell, I'm not saying it should be made a default or anything18:31
alex_jonibut if it's not too hard maybe having it on the install CD as a failsafe could be beneficial18:31
alex_joniif it's far from beeing ready, then it probably can wait18:32
ivoksit's good to know that last grub2 patch was sent 10 minutes ago :)18:37
alex_joniheh.. anyways, thanks18:38
ivoksnp18:38
alex_joniPCI stuff seems to take really long .. something seems borken18:45
alex_jonihttp://eneas.juve.ro/~juve/primergy/syslog18:45
alex_joni140s to 252s it just hangs18:45
=== kansan-zzzzz is now known as kansan
ivoks?18:57
orudiehi, i would like to set up mail server but dont know how to18:58
orudieshould i use task sel ?18:58
alex_joniivoks: it doesn't seem to do anything for about 2 minutes18:58
alex_jonisame in the beginning18:59
orudieanyone ?19:03
alex_joniorudie: no harm in trying..19:03
orudieok19:04
ivoksorudie: there are docs19:08
orudieivoks, i just installed postfix, but how do i configure it19:08
ivokshttps://help.ubuntu.com/community/MailServer19:09
alex_jonidepends on the level of config you need19:10
alex_joniif it's a simple setup, dpkg-reconfigure used to do the trick19:10
orudieok i think i configured it, but what are the pop and smtp servers ?19:21
ivokshttps://help.ubuntu.com/community/MailServer19:21
ivoks:)19:21
ivokshttps://help.ubuntu.com/community/MailServer#Mail%20Delivery%20Agent19:22
simplexioi complained whiel ago that 2.6.28.3 dosent like make-kpkg.. it works just fine on my 8.10 desktop. so does someonr know list of all packages needed to use it somewhere19:29
=== erichammond1 is now known as erichammond
orudiecan someone help me configure postfix ?19:37
=== erichammond1 is now known as erichammond
orudiei followed this tutorial https://help.ubuntu.com/community/Postfix19:37
orudienow i'm actually trying to put info into thunderbird19:38
orudiedont know what to put imap or pop19:38
=== erichammond1 is now known as erichammond
=== erichammond1 is now known as erichammond
=== erichammond1 is now known as erichammond
orudiesending of username did not succeed. Mail pop.selsovet.com responded: Plaintext authentication disallowed on non-secure connections.19:40
=== danopia__ is now known as danopia
orudiecan someone help me set up mail server please ?20:02
dazmanhmm.20:05
dazmanorudie, if you've only install postfix, then you have no imap/pop3 server yet.. postfix is just an MTA20:05
dazmanorudie, you need something such as courier or dovecot for IMAP/POP320:05
orudieohhh20:06
orudiei see20:06
dazmanhttps://help.ubuntu.com/community/Dovecot for example20:06
dazmanor, https://help.ubuntu.com/community/Courier for Courier.20:06
dou213what is the maximum number of history-entries possible?20:12
jmarsden|workdou213: 500 by default, but you can set to any natural number... probably a 32bit value, so I'd guess somewhere over 2 billion... do you really have that much disk space for history files?20:15
dou213jmarsden|work, i just want it to keep something like 2000 last commands so that i can search for them easier... but when i set it to 2000 (or 5000) it does nothing20:17
dou213it remains on 500 as before20:17
jmarsden|workYou logged out and back in, right?20:17
orudieok i set up courier , tested without errors20:17
Deepsorudie: or use tasksel and install the mail-server task if you want it all setup for you in one go20:18
jmarsden|workdou213: I have mine set to 1000 with no issues...20:18
Deepsorudie: oh, too late, heh. nm then20:18
orudieDeeps, i did tasksel mail-server20:18
orudieit didnt , it only set up postfix20:18
orudiethats it20:18
dou213jmarsden|work, yes i set it to 5000 e.g. and then when i log out and back in, i see he only kept the last  50020:18
orudieDeeps, now the question is how do i check mail ?20:19
orudiei want to test with thunderbird20:19
jmarsden|workyou are setting both HISTFILESIZE and HISTSIZE, right?20:20
dou213jmarsden|work, ups, no only HISTSIZE... should both be set?20:22
jmarsden|workdou213: Yes.  man bash!  Setting both HISTSIZE and HISTFILE works for me, has worked for me for years... :)20:22
orudieDeeps, hi , can you help please ?20:22
jmarsden|workdou213: My typo... set both HISTSIZE and HISTFILESIZE20:22
dou213how do i set the HISTFILESIZE? 'export HISTFILESIZE="nr" '?20:23
jmarsden|workdou213: Yes.20:23
dou213jmarsden|work, ok thx, damn then it is written wrong in the book20:24
simplexioou jee.. : [38670.820007] Pid: 10432, comm: linuxdcpp Not tainted 2.6.27-7-server #120:24
simplexiohas anyone else had these ?20:24
orudiecan anyone help me with mail server please ?20:24
orudieis there a way to configure it with a web interface ?20:25
simplexiocalltrace says something about xfs, and memory allocations20:25
Deepsorudie: oh, are you sure? it's supposed to install dovecot imap + pop3 as well as a few other things too20:25
dou213jmarsden|work, and how can i see what the actual value of the HISTSIZE is?20:26
jmarsden|workdou213: echo $HISTSIZE  -- like any other shell variable :)20:26
Deepsorudie: and to check mail, you connect to your server's hostmask/ip address with your mail client, either with pop3 or imap, and use the username + password you ssh into the server with20:26
dou213thx20:26
orudieDeeps, yes thats what i'm trying  to do get wrong password error20:27
Deepsorudie: look in the logs for the imap/pop3 server to see what appears there?20:27
simplexioanyidea howto use top to suspend process?, its only working prog now. loads are ~5020:28
orudieDeeps, sending of password did not succeed. Mail server pop.selsovet.com responded: Login failed20:29
orudieDeeps, this is the thunderbird's error20:29
nschembr_I checked with #ubuntu first but no luck. I'm running ubuntu  server. I want to install xterm without installing X11. Is  there a way to use dpkg to install the base package and the  dependances one at a time.20:29
orudiei love love to be able to configure this with a web interface20:30
jmarsden|worknschembr_: dpkg --force-depends -i packagename.deb   # But if you break stuff, you own all the pieces!20:30
Deepsorudie: and what does the mailserver log say?20:31
orudieDeeps, anything ?20:31
orudiei dont know where its located20:31
Deepsorudie: somewhere in /var/log/20:31
jmarsden|workorudie: /var/log/maillog by default20:31
Deepsisn't that the MTA rather than the imapd/pop3d?20:32
tuan123hi everyone20:33
nschembr_jmarsden|work: thank you. Do you know if I can build a meta pkg that will automate my steps when I done. Is there a How to?20:33
tuan123has anyone use libvirt+kvm+jeos in a productive environment?20:33
orudiethis is the few last lines of the log20:33
orudiehttp://pastebin.com/m26d2d80120:33
tuan123because i have now configured everything up, but it is a bit unstable20:33
jmarsden|worknschembr_: Well, there's the Packaging Guide at https://wiki.ubuntu.com/PackagingGuide/Complete20:34
jmarsden|worksimplexio: You can kill or renice processes in top using k and r respectively.  I don't think you can suspend processes using top.20:37
orudieanything?20:37
simplexiohihii.. whats is fuuny loads in fileserver are now 80+, but samba share still works. so i can play video from there20:40
simplexioand top on fileserver says that i core is in use on stuck program and another one is waiting20:40
nschembr_jmarsden|work: thank you20:41
jmarsden|worknschembr_: No problem20:41
orudiejmarsden|work, can you help me please bro ?20:42
Deepsorudie: try using username 'paul' instead of 'paul@...'20:43
orudieDeeps, blah, it worked20:44
jmarsden|workorudie: I'm at work... working... can't really spend a lot of time helping out right now...20:44
Deepsorudie: "use the username + password you ssh into the server with"20:44
Deepsorudie: would be what i suggested a while ago ;)20:44
orudieDeeps, so far i'm logged in20:44
orudieDeeps, hold on let me try sending20:44
Deepsorudie: same user/pass should apply for sending mail20:45
orudieDeeps, ok, what should i put for outgoing server?20:45
Deepsorudie: same as you've put for incoming server, it's the same machine, same ip20:45
orudieDeeps, or , so for outgoing its also pop.domain.com ?20:46
Deepsorudie: your dns labels are your business, the host is still the same, you can address it by ip or by whatever hostmask you choose to make20:46
orudieDeeps, i just sent an email to this new mail server, so far nothing20:47
Deepsorudie: do you have MX records defined for your domain to point to the server?20:47
orudieMX records ?20:48
Deepsi'm gonna have to pass you onto someone else for your 'how mailserver son the internet work' / dns primer i'm afraid, google while you wait i guess!20:48
orudieDeeps, what should i read up ?20:51
orudieso i should set up SMTP on my ubuntu ?21:01
orudiei guess i need to set up smtp server ?21:07
ScottKIf you know nothing about administering a mail server, I recommend that you run, do not walk, to a good book store and buy "The Book of Postfix".21:12
hadsThere's some responsibility required running a public mail server, you should do some reading.21:12
DeepsScottK: can i file that recommendation as a bug against ubuntu-docs? :D21:24
ScottKDeeps: Not really.  Ubuntu docs can tell you about how to use Ubuntu packages.  Teaching you about mail server administration is really too much.21:25
Deeps"mailservers for human beings"21:26
Deeps?21:26
ScottKMaybe, but administering a public facing mail server requires a certain amount of knowing stuff there's no way a distro can hide.21:28
Deepsi feel that way about computing generally, heh.21:31
ivoksspend 95% of time thinking about the problem, and only 5% solving it21:32
ivoksyou can apply that to mail servers21:32
ivoksyou should read and learn most of the times21:32
ivoksimplementation is easy, once you understand the problem21:32
ivoksmost people do it other way arround - that's why we have spam :)21:33
orudieproblem?21:33
ivoksyes, problem 'i need mail server, and don't know anything about it'21:33
dazman"I need to relay though it.. allow *"21:35
dazmaneh21:35
dazmans/though/through/21:36
=== lokix is now known as lokixza
ivoksmost of the MTAs come with relay disabled21:36
ivoksyet, people still manage to create open relays :)21:36
ScottKThe trouble with idiot proofing is they are so darn clever.22:05
dazmanHa.22:09
hadsSo true22:13
nschembr_I'm remastering the livecd and I need to setup  /etc/network/interfaces with a static file. It's over writen  a boot.22:36
deadbattery is there anything specific and special i would do for streaming .avi files through a web dibvx player, to perhaps tweak anything?22:38
=== aboman is now known as bomana
roy_hobbsNewbie question about virtualization:  Is the general procedure to install ubuntu server edition, install the ubuntu-virt-server package, and then setup as many ubuntu jeos (for example) virtual machines as necessary?   Also, has anyone seen any benchmarks on the free VMWare server vs KVM (which ubuntu seems to prefer)23:00
ivoksubuntu-virt-server is just part of ubuntu-server23:01
ivoksit's bundle of services for setting up host for virtual guests23:01
roy_hobbsYeah, but it's not installed by default correct?23:01
ivokscorrect23:01
roy_hobbsIf I have a cpu without virtualization instruction sets, would I be better off with xen or virtualbox?  Or is this a question that's difficult to answer?23:04
ivoksi really don't know23:05
ivoksi use kvm23:05
ivoksi dumped vmware cause of it23:05
roy_hobbsThe free version you mean?23:05
ivoksyes23:06
hadsKVM rocks23:06
ivoksi agree23:06
roy_hobbsYeah I kinda figured KVM was somewhere in between the free and pay versions of vmware23:06
ivoksit's just beautifull23:06
hadsIt's also free rather than "free".23:06
ivoksi've worked with ESX, if that's what you are refering to23:06
roy_hobbsyes esx23:07
ivoksand i still like kvm more23:07
roy_hobbshads: yeah i understand the difference between $$$ and FOSS23:07
hadsIt's fantasticly non-invasive too.23:07
ivoksand it doesn't create problems on kernel upgrade :)23:07
ivoksand it just works23:07
roy_hobbsis there and precedent that you know of for migrating a virtual box to a physical machine?23:07
roy_hobbsivoks: You mean since that DKMS or whatever it is?23:08
hadsKVM is in the standard kernel23:08
ivokskvm is designed for linux23:08
ivoksnot for all OS23:08
ivoksso, it should provide better results23:09
ivoksit doesn't have pretty and powerfull GUI, but i don't care for that23:09
gclerickvm is also designed for cpu that support virtualiztion.23:09
ivokscorrect23:09
ivoksthat's also a +23:09
ivoksit's not ad hoc added support23:10
roy_hobbsgcleric: yeah but will it work reasonably well without a cpu with virt. support?23:11
ivoksit won't work at all23:11
=== techsupport is now known as orudie
gclericroy_hobbs: noope...you will get a warning if you try.23:12
orudieivoks, can you help me with mail server please ?23:12
gclericIntel VT and AMD-V cpu only,23:12
ivoksorudie: maybe (it's 00AM here :)23:13
ivoksso, be fast23:13
ivoks:)23:13
roy_hobbsSo would the difference between a solution that's a hypervisor vs one that does virtualization be running it on cpu with or without virtualiztion support?  (I keep seeing the terms hypervisor, virtualization, and paravirtualization and am having trouble sorting them out.23:14
roy_hobbs)23:14
orudieivoks, ok so far i have postfix installed and courier23:14
orudietrying to get it working though23:15
ivoksorudie: now, remove courier23:15
ivoksand install dovecot23:15
ivoks:)23:15
orudiei think i have both installed lol23:15
ivoksit much nicer and easier to set up23:15
ivokshypervisor = kvm, qemu, vmware, virtual box, etc...23:16
ivoks!virtualization23:16
ubottuThere are several solutions for running other operating systems (or their programs) inside Ubuntu, while using the native CPU as much as possible: !kvm is the preferred approach in Ubuntu.  See also !QEmu (with !KQemu), !VirtualBox, !VMWare, as well as !WINE and !Cedega for Windows applications23:16
ivoks!paravirtualization23:16
ubottuError: I am only a bot, please don't think I'm intelligent :)23:16
ivokshttp://en.wikipedia.org/wiki/Paravirtualization23:16
orudieso what do i do ivoks ?23:17
ivoksorudie: remove courier and install dovecot23:17
ivoksdovecot-imapd and dovecot-pop3d23:18
orudiei think i  have that installed already23:18
orudiei think i installed both23:18
orudiehow can i remove courier ?23:18
ivoksapt-get purge courier.*23:19
BangersWhen I do "sar -d 3 3" I get "dev8-0 " for "DEV" -- what device is this??23:19
BangersIm looking for disk IO usage stats for /23:19
ivoksif you don't know how to deinstall packages23:19
ivoksyou should really learn how to use your operating system, before you do something st...d23:19
orudiehold on23:19
roy_hobbsThanks to those of you who have helped me get started.  Now the fun begins23:20
orudieivoks, ok courier removed23:20
ivoksorudie: now, ask your self and let us know; what kind of mail server do you want23:20
orudiepop323:21
ivokswill public access, only local delivery, etc...23:21
ivoksorudie: we all know pop3/imap/smtp23:21
orudiei am trying to set it up for a small company with about 10 people23:21
ivoksorudie: but you should know what kind of mail server - who will use it23:21
ivoksok23:21
ivoksonly for internal mail, or you want to send mail outside?23:22
orudieoutside23:22
ivoksdoes your server has a static IP23:22
orudieyes23:22
ivoksor is it on ADSL or some sort of dynamic IP23:22
orudieits static23:22
ivoksis your domain registred to that server?23:23
orudiei have ubuntu 8.10 server installed on a vps23:23
ivoksdoes MX record of your domain points to that IP23:23
orudiewell i registered a domain and used zoneedit to point the domain to my ip23:23
ivoksdoes 'dig -t mx you_domain' returns IP of your server?23:24
ivoksyour_domain23:24
ivoksdoh... hate english23:24
owhivoks: Esperanto instead?23:24
owhivoks: Or Dutch?23:25
ivoksnope, croatian?23:25
orudieivoks, http://pastebin.com/m6568bc2e23:25
owhivoks: Nah, no-one speaks croatian :)23:25
ivoksowh: :p23:25
orudieivoks, the ip of my server is 207.192.72.1523:26
ivoksyou should be very carefull with disclosing so much info to a unknown people23:26
ivoksnow i could help you set your server as open rely, send spam over it and you'll end up in jail23:27
ivoks:)23:27
ivoks....do you feel lucky? :)23:27
ivoksanyway...23:27
ivoksi see you have smtp running23:27
ivoksand you haven't installed dovecot-imapd and dovecot-pop3d23:28
orudieok sorry23:28
orudieso are we ready to proceed ?23:29
ivokssudo apt-get install dovecot-imapd dovecot-pop3d23:29
orudieokd one23:29
orudiedone23:29
Victor_Petrescuhi23:29
Victor_PetrescuI have an apache2 problem23:30
ivokshm... i don't see open ports on that ip23:30
Victor_Petrescu(98)Address already in use: make_sock: could not bind to address 0.0.0.0:44323:30
Victor_Petrescuno listening sockets available, shutting down23:30
ivoksorudie: sudo /etc/init.d/dovecot restart23:30
ivoksVictor_Petrescu: sudo /etc/init.d/apache stop23:30
ivoksVictor_Petrescu: sudo killall -9 apache223:30
ivoksVictor_Petrescu: sudo /etc/init.d/apache start23:30
orudieivoks, ok restarted23:30
Victor_Petrescuapache2: no process killed23:31
orudie* Restarting IMAP/POP3 mail server dovecot                              [ OK ]23:31
ivoksorudie: still noething23:31
Victor_Petrescu(98)Address already in use: make_sock: could not bind to address 0.0.0.0:44323:31
Victor_Petrescuno listening sockets available, shutting down23:31
Victor_PetrescuUnable to open logs23:31
Victor_Petrescu                                                                         [fail]23:31
orudiehmmm, what cna i try ?23:31
ivoksVictor_Petrescu: then you have something else running on that port23:31
Victor_Petrescuon 443?23:31
ivoksVictor_Petrescu: sudo netstat -natp | grep 44323:32
ivoksorudie: telnet localhost 11023:32
Victor_Petrescutcp        0      0 0.0.0.0:443             0.0.0.0:*               LISTEN      23134/webcit23:32
Victor_Petrescucmon ..23:32
Victor_PetrescuCitadel23:32
ivoksVictor_Petrescu: there, you see23:32
Victor_Petrescujust installed it23:32
Victor_Petrescucan't they both work?23:32
ivoksVictor_Petrescu: not on 44323:32
Victor_PetrescuI don't need SSL for apache23:33
Victor_Petrescuwhere can I delete that?23:33
orudieTrying 127.0.0.1...23:33
orudietelnet: Unable to connect to remote host: Connection refused23:33
luckyonehello all... I have a server that has just recently started going non-responsive every couple of days - requiring a reboot...23:33
luckyoneany idea where I could start looking for that?23:33
ivoksluckyone: memoy?23:33
ivoksmemory23:33
ivoksorudie: ok23:33
luckyonemaybe...23:33
luckyoneif it was running out of memory, would it log that somewhere?23:34
ivoksorudie: egrep ^protocols /etc/dovecot/dovecot.conf23:34
orudieprotocols = none23:34
ivoksluckyone: yes, but it would kill a process then23:34
ivoksluckyone: i'm guessing it's hardware problem23:35
luckyonelike apache and the ssh server?23:35
ivoksorudie: change that none to 'imap imaps pop3 pop3s'23:35
luckyonehmm, it is on a virtual server - hosted by serveraxis.com23:35
orudieivoks, nano /etc/dovecot/dovecot.conf ?23:36
ivoksorudie: well, whatever you like23:36
ivoksnano, vim, emacs, ed23:36
luckyoneivoks: I have a binary file /var/log/faillog, would that mean anything?23:37
Victor_Petrescuivoks, can't really get it to work23:37
luckyoneorudie: vim ftw!!!23:37
ivoksluckyone: everybody has that one23:37
ivoksVictor_Petrescu: what could be a problem? stop citadel, start apache23:37
luckyoneivoks: any recs on where to start?23:38
ivoksVictor_Petrescu: setup citadel on localhost:12345 and then set up apache to proxy to citadel23:38
ivoksluckyone: kern.log syslog23:38
luckyoneivoks: also how do I get this server on landscape? what sort of reporting does that provide23:38
ivoksluckyone: buy a support from canonical :)23:39
luckyoneyou have to buy support from canonical to use  landscape?23:40
ivoksyes23:40
Victor_Petrescuso that means I would have to reinstall i?23:40
ivoksVictor_Petrescu: i never installed citadel, so i don't know23:40
Victor_Petrescuok23:40
Victor_Petrescuok .. so apache running..23:43
ivoksVictor_Petrescu: configure citadel on some other port23:43
Victor_Petrescucitadel running :D23:43
ivoksVictor_Petrescu: and on localhost23:44
Victor_Petrescudid23:44
luckyoneivoks: so lots fo these, Feb  5 17:10:46 VO12106 kernel: apache2 invoked oom-killer: gfp_mask=0x200d2, order=0, oomkilladj=023:44
Victor_Petrescunow I wonder if the mail() function still works under PHP23:44
ivoksand then proxy domain:443/citadel to that localhost:port23:44
ivoksluckyone: oom-killer is in-kernel function23:44
ivoksluckyone: it kills processes when there's no more memory23:44
luckyoneis it normal?23:45
ivokswell, it's normal23:46
ivoksif you like having your processes killed23:46
ivoksit means your ram gets filled23:46
ivoksoom-killer doesn't know which process to kill23:47
ivoksso you might say it kills randomly23:47
ivoksit might kill sshd too23:47
luckyonecan I tell it to never kill sshd?23:47
ivoksi'm not sure, i think not23:47
luckyoneI would like that to be among the last to die23:48
luckyonekill lots of apache, mysqld, etc - not my sshd ;)23:48
ivoksor, add RAM :)23:48
luckyonelooking at how expensive that is from my VPS provider23:49
* luckyone sets memory_limit to < 48M in the mean time....23:51

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!