[00:07] If a DNS name in sources.list resolves to a round robin IP list, and one of those IP addresses does not respond, would apt-get try a different IP address? [01:22] hello [01:25] erichammond: No. DNS doesn't work that way. Round robin is for load sharing, not failover. [01:25] hey [01:26] im just wondering from one dedicated server, how many individual sites can be run of it. like a webhost [01:27] LHC, many, using virtual servers [01:28] oh what software does that [01:28] LHC, well, the ubuntu community prefers apache webserver [01:28] im interested in using a dedi i have as a webhost for a few sites [01:28] its an ubuntu server :D [01:28] LHC, well, it's easy to install a working webserver, just use the command: tasksel [01:29] LHC, it's the option "LAMP Server" [01:29] LHC, and that will install the appropriate packages [01:29] I have a counter strike server on it, would it delete any of its feiles? haha please no [01:29] files* [01:30] LHC, it shouldn't [01:30] cool [01:30] LHC, they are completely separate apps [01:30] LHC, you can run all kinds of stuff on a single server if you want [01:30] where will it install to? I mean the directory for puttin the index.html web stuff [01:30] LHC, for example, one server can be a: mail server, web server, ftp server, etc... [01:30] LHC, well, aside from the apache binaries and configuration files, it sets the webroot as /var/www [01:31] LHC, but that can be changed if you want it to be [01:31] rdw200169, I had it for amonth, i bought it for a buddy and I to practise, so we used it as a gaming server, I still havent got the full idea what I can do with it haha [01:31] thanks alot rdw200169 ill try it now [01:31] LHC, well, you should research setting up an apache webserver, there's a lot out there on the internet about it [01:31] so I can use it as a mail server? and have my own email from it? like lhc@mysite.com [01:32] LHC, and there's more to it than i could ever explain here; rest assured that apache is the industry standard [01:32] yeah Im just looking what I can do atm with it hehe Ill definitley look it up [01:32] LHC, yes, you may also want to research what you can do w/DNS... [01:32] ok, i guess I have to get a domain name xD [01:32] LHC, for example, if you received a static IP from your dedicated webserver, having your own domain is as simple as setting up the IP on godaddy.com's DNS server [01:33] LHC, you don [01:33] LHC, you don't have to run your own DNS server, just let godaddy do it for you; much easier and more reliable [01:33] yeah It is static thanksfully [01:33] ok :D [01:33] LHC, same thing w/running a mail server, i find it is much easier just to use google apps w/a domain name from godaddy [01:33] LHC, b/c google provided "Gmail" for your own domain [01:34] LHC, *provides [01:34] so itll show up as rdw200169@whatever.com, but will use the gmail service? [01:35] LHC, yes, it all has to do w/DNS records; for example, my domain is has it's mail server records pointed to what google suggested, so my mail gets routed to them [01:35] thats fantastic!! [01:35] im really impressed xD [01:35] LHC, yeah, it works really well too, and they still provide imap/pop3 access [01:35] http://www.google.com/apps/ [01:35] LHC, so you can have user@LHC.com routed through google [01:36] cause I love gmail [01:36] LHC, it [01:36] do I click business it mangaer [01:36] LHC, it's the same exact thing; it just *looks* like it's on your domain... allows you to have the power of gmail with the professionalism of a good domain name [01:37] rdw200169, thank fuck for you xD I really wanted to know stuff like this, really helpful! [01:37] plus I think people who have person@gmail.com on their site just looks bad [01:37] LHC, yeah, just set up 'business' they have a 'free' version type thing that everyone uses [01:38] haha, how come google is great for this stuff [01:38] 50$ a year for a webserver not bad xD [01:39] LHC, who knows... i like it. i won't buy a dedicated server so i run one out of my home. consequentially, it's on the same desktop i'm using to talk to you right now on [01:39] the web server? [01:39] LHC, yeah, greamin.com [01:39] hehe [01:39] whats your connection like? [01:40] im reading your guide atm :D [01:40] garbage, there's some old equipment where i live so i have to reset the connections every few hours to keep the caches (somewhere) from getting stale [01:40] its relevant to me cause I have an old pc [01:41] one problem on the server guide [01:41] i still haven't figured out what is causing it, i think it's our old WRT54G, but that's doubtful. then again, it can't be the cable modem, i tested that [01:41] LHC, there are lots of them ;) [01:41] the pic of the open case is massive, takes ages to load. you want me to resize it? [01:42] LHC, my internet is slow :( time warner only allows a small upload < 512 kbps [01:42] 2 secs I forgot I dont have hardly any software on this pc haha [01:42] wow same upload here buddy [01:42] LHC, i should go through and resize the pictures smaller, i'm pretty lazy [01:42] ill do i for you [01:42] it [01:42] since you helped me with that gmail suggestion hehe [01:42] LHC, nah, that's ok ;) i know *how* to do it, i just haven't [01:44] i have to reinstall my programs bahhh [01:44] ScottK: Thanks for the response. I understand that round robin failover would have to be implemented at the application level. [01:44] ScottK: I understand that some browsers might do this and was hoping that apt-get might, too. [01:45] You can't really do this without ignoring TTL in DNS records and that's not a great idea overall. [01:51] rdw200169, since i cant open firefox and research stuff cause im installing something. Any other interesting things [01:51] i got really excited at that gmail thing for some reason xD [01:51] oh ill set up lamp [01:56] LHC, what do you want to know? i've done lots of interesting things with servers [01:58] anything, maybe basic things like virtual servers? [01:58] is that wmware? [01:58] cause I have a server with unlimited transfer and I dont use it as much as I should [01:58] lack of knowledge haha [01:59] ScottK: Not sure how TTL applies. If the client asks for all IP addresses for a given name and then tries them one by one, seems like it should work. [02:00] i'm talking about apache virtual servers; apache can, all by itself, provide services for a multitude of domain naims [02:00] That's not how round robin generally works. [02:00] *names [02:00] Generally you ask for a DNS name and it hands you an IP. [02:00] ScottK: "dig +short us.archive.ubuntu.com" returns (91.189.88.46, 91.189.88.40, 91.189.88.45, 91.189.88.31) [02:00] so if I designed alot of sites for local businesses I can run it off them one dedi and charge them little for hosting? [02:01] Yes, it doesn't usually return all of them. It gives you one. If it gives you all of them it's not round robin. [02:01] So once you get the answer, your resolver should cache that for the TTL. [02:01] Doesn't it give you all of them in a round-robined order? [02:01] And then if your resolver / API is naive, you just use the first [02:03] wow rdw200169 i installed tasksel [02:03] has alot of options hehe [02:03] If it's giving you all of them that's not really round robin as I understand it. [02:03] I think ill leave it for the mean time until I learn more [02:07] So I guess I'll repeat my original question: Does anybody know (for sure) if apt-get will or will not try multiple IP addresses for a DNS name if one of them fails? [02:08] i ll give you feedback to show we are listening, sorry I dont hav a clue xD [02:08] I'm working with some folks who are creating an Ubuntu mirror inside Amazon EC2 and I'd like to make sure that we have failover. [02:09] I remember I seeded ubuntu up to a ratio of 30 or so [02:09] Their current proposal for sources.list is to list the same source with each of the host names: mirror-roundrobin, mirror1, mirror2, mirror3 [02:10] "mirror-roundrobin" gets the load balancing, but if the random IP fails, it would get sources from one of the remaining explicitly listed hosts. [02:11] amm someone should really help you right now cause your doing good mirroring ubuntu [02:12] erichammond: That would probably work. [02:17] brb [02:21] how can I temporarily open ports with iptables? I tried on the commandline sudo iptables -I INPUT -p tcp --dport 6984 -j accept [02:21] but it doesn't show up in iptables -L [02:30] rdw200169, [02:36] dinsdale07: ACCEPT needs to be UPPER CASE in your rule: sudo iptables -I INPUT -p tcp --dport 6984 -j ACCEPT [02:37] jmarsden, thank you I found out. I think it's also not possible just from the commandline since my last iptables comment is DROP ALL. It seems to override all unless I put it in a file and load it. [02:37] You just need to insert the new rule ahead of that one. [02:38] It has nothing to do with being in a file or not :) [02:46] jmarsden, I don't understand well. How can I specify where in the list my rule will appear? As I said iptables -L didn't even show my rule. [02:47] I for sure must give a line number or so. [02:47] You can specify a rule number in the insert command [02:47] sudo iptables -I INPUT 63 -p tcp --dport 6984 -j ACCEPT [02:47] where 63 is the line number [02:47] Read the man page for iptables more carefully :) [02:48] ah - that makes sense now. And yes you are right - I will. [02:48] is it unix time yet? [02:48] I'm just stranded on the road in a hotel after a snow storm and I just wanted to get my torrent working :-) [02:48] Best time and place to study man pages actually. [02:48] haha [02:49] dinsdale07: You carry a *server* around on the road and into a hotel??? This is #ubuntu-server [02:51] I know - I'm abusing my webserver with rtorrent, that's why I have to do all cmd style. [02:54] wtf, im banned from #apache and I never went there before [02:54] vorian: Soundtracker failed again on hppa due to deps not being built, but it has a retry button now so you can retry it again when you think it'll work. [02:55] ScottK: great! thanks for the heads up [02:56] can someone help me with a little problem [02:57] i have a dedi that my mate and I share, im wondering how to check if there is apache installed, how do I check this [03:03] LHC: whereis apache2 [03:05] apache2: [03:05] says that [03:05] which apache2 [03:06] apache2 not installed... [03:06] ty [03:06] which version of ubunut? [03:06] How about which apache [03:06] We didn't support apache 1 for a very long time. [03:06] I wanted to find out if he had apache installed, he doesnt [03:07] he has an htdocs folder that allows me to put files there that can be accessed [03:09] Maybe using another server...lighttpd, nginx? [03:10] LHC: Maybe the output from sudo netstat -ntlp | grep :80 # will tell you what is listening on port 80... [03:12] 3109/httpd [03:12] that is the output [03:12] Im just wondering can I install apache without causing any problems [03:13] Not without making it run on a different port, that's for sure. [03:13] There is already a web server (program named httpd) running and bound to port 80. [03:14] should I delete that or is it perfectly fine [03:14] It seems to be working, so I'd say it is fine... don't delete it unless you know what it is and that your buddy does not want it :) [03:15] If you have libwww-perl installed, try HEAD http://myserver and see what the output says, especially the Server: line [03:16] Server: Apache/2.2.11 [03:16] Hmmm, then that is what is already installed, in some fashion. [03:16] thats strange I thought eariler it said it wasnt [03:16] Maybe your buddy installed it from source not from the Ubuntu package? [03:17] Sounds like it is time for the two of you to communicate? :) [03:18] lol yeah [03:18] I think ill just leave it for the mean time [03:18] I wanted to know how to use it like a webhost. lots of domains - one server [03:18] virtualize? [03:18] Yes, I think that's wise. If you want to poke around you could try locate httpd.conf [03:19] It's trivial, just lost of entries in your config file. [03:19] Virtual hosts in the web serving sense, not in the more general "virtual machine" or "virtual server" sense. [03:20] ahh :D [03:20] cause I wanted to use multiple domains from this one dedi [03:20] thats good [03:20] Yes, it's been easy to do that for well over a decade using Apache :) [03:21] lol [03:21] im new to this [03:21] i found the lamp folder [03:22] is there any command I can use to search for that file [03:22] Oh ugh, your friend used some strange "LAMP" tarball maybe, instead of the Ubuntu packages? [03:22] Yes, the command is locate [03:22] locate httpd.conf [03:23] cheers [03:23] No problem. [03:24] worked like a charm :D [03:24] i like using linux but im slowy learning [03:25] It takes a while. I started in late 1992... so I have a few years head-start :) [03:25] wow lol [03:25] do new commands get added all the time? [03:27] Well, yes, but all the important ones have been there for a while now :) In 1992 the "distro" fit onto two 720kbyte floppy disks! [03:27] haha [03:27] how much has it changed xD [03:28] well, it has got a lot more graphical, and multimedia, and works with more (and faster) hardware... but the basics of a Unix shell to manage a server have not really changed that much. [03:29] Nor have the Emacs editing commands... fortunately for my fingers :) [03:29] hehe [03:29] does anyone run window servers? [03:30] Sure, lots of people do. But not many will admit that here on #ubuntu-server :) [03:31] haha [03:32] I think all the big bandwidth guys use freebsd? [03:33] can anyone help with a samba drive share set up [03:34] can see the share on windows network but won't allow me to move files to it [03:34] I think its a password permission issue [03:34] I have the desktop gui installed [03:35] jmarsden, should this Options FollowSymLinks be on? [03:36] if you want the web server to follow them, yes. Otherwise, no, for slightly improved security. [03:36] steelcityjim: pastebin your samba config file somewhere for me? [03:38] kk :D [03:39] just remove it? [03:39] LHC: if you do nto need it, maybe commetn out that line in the file, or you could just delete the line. [03:39] kk thanks [03:40] jmarsden not sure how to do that [03:40] btw I found that httpd-vhosts.conf file [03:40] I see what you mean [03:41] steelcityjim, haha I see your pastebin thing 010101 [03:41] steelcityjim: Visit http://pastebin.ubuntu.com and paste the contents of your /etc/sa,ba/smb.conf file there, then hit the go button and tell me what the URL of the resulting pastebin page is. [03:41] one thing jmarsden [03:41] http://pastebin.com/d261154e4 [03:42] so thats two websites? [03:42] LHC: yes. The DocumentRoot lines are a bit odd, but yes. [03:42] how do I find that file guys? [03:43] Ill change them to my root which is /home/htdocs [03:43] so /home/htdocs/firstsite + /home/htdocs/2ndsite [03:43] that would be two sites? [03:43] LHC: Sure, that could work. [03:43] cool [03:44] then I point the domain name to that directory? [03:44] You make the DocumentRoot for that VirtualHost be that directory. [03:45] If you end up doing a couple of hundred sites, you'll want to automate all of this... I think ebox will do it for you [03:45] yeah, btw what happens if I dont make a virtualhost but try to do the same thing? will it break [03:45] il google ebox [03:45] !ebox [03:45] ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox [03:46] looks good [03:46] btw if someone got the server password, are I doomed [03:46] Without any virtualhost entries in your httpd.conf (and the files it includes) you just have one web site. [03:46] The server password as in the root account password? [03:46] Probably, unless you trust that person a lot :) [03:47] (Well, to be specific... *you* are not doomed, but your server might be!) [03:47] haha [03:47] I guess all the popular sites passwords are 100 characters long [03:48] jmarsden ok i think i pasted what you need pastebin 117913 [03:48] I can imagine loggin onto youtube and being redirected to a trojan site xD [03:49] is that what you need jmarsden? [03:49] Yes. So... which share has the issue? public? [03:50] yes [03:50] this is my first config [03:50] so I probably screwed something up [03:52] And the symptom is that windows client machines can see the share just fine, and read files there, but not write files there... what are the (Linux) permissions on your /home/jim/Public/ directory ? [03:52] well i don't know about read since I don't have any file in it yet [03:52] but I cant write for sure [03:52] hey guys [03:52] OK. Do ls -ld /home/jim/Public/ # and tell me what it says [03:53] ubutnu server here, and i would like to swicth the repositories to my country's specific [03:53] it's possible ? [03:53] where do I do that? [03:53] infomomo: edit /etc/apt/sources.list [03:53] in the browser? [03:53] steelcityjim: At a shell command prompt... this is a server, right? [03:53] im in the desktop gui [03:54] jmardsen: i must edit by hand [03:54] ? [03:54] i am in canada you see [03:54] no desktop trying to convert to server [03:54] usually iweb's or sherbrooker are the fastest ones [03:54] infomomo: I don't know of an automated tool for that... I would edit it by hand., but then I am used to editing files :) [03:54] me too :D but it seems like ubuntu desktop has the tool to choose the fastest server [03:55] why wouldnt it be available for server [03:55] Because it is GUI-based and server does not come with a GUI? [03:55] maybe :D [03:56] btw jmarsden sorry to interupt, after I set those. How do I access the second one? [03:56] So you *could* install ubuntu-desktop on the server and then use that tool... but it seems easier to just edit the file :) [03:56] right [03:56] LHC: http://www.seconddomain.com [03:56] i dont need a desktop on the server [03:56] I donthave any domains for it yet [03:56] its just using the server ip [03:56] I could not get the desktop to work from the server [03:56] so installed the desktop [03:57] LHC: Then you can't access it. Apache virtual hosting depends on domain names. Well, you could test by setting up your own DNS server for the fake domaons if you want to. [03:58] steelcityjim: So you are in #ubuntu-server asking for support for a ubuntu desktop machine... this is not really a good idea... [03:58] doh [03:58] steelcityjim: Anyway, what does ls -l /home/jim/Public/ say ? [03:58] oh [03:58] where do i put that in? [03:59] im in the gui [03:59] jmarsden, I saw an option on tasksel about that [03:59] steelcityjim: You type a command at a shell prompt. Open up a terminal window and type it. [03:59] LHC: Sure you can ... but I [04:00] am not going to teach you how to configure DNS servers tonight too :) [04:00] lol yeah [04:00] what will the end result be? allowing me to type in any url and itll work? [04:01] Any url that resolves to the IP of your server and which matches one of the ServerName or ServerAlias lines, yes. [04:01] no such file or directory jmarssden [04:01] is that the number 1 [04:01] or L [04:01] nice [04:01] ill give that a go another night lol [04:02] steelcityjim: Lima Sierra ls "ell" "ess" [04:02] no such file or directory [04:02] did I bone the file creation up? [04:02] steelcityjim: You did create a directory called /home/jim/Public, right? Before you tried to share it? [04:03] i thought i did [04:03] I would check on that if I were you :) [04:04] Remember that public and Public are two different directories in Linux... [04:04] oh man [04:04] wait maybe i jacked that search up [04:05] how do I create the directory in the gui? [04:05] I forget. In the shell, do mkdir /home/jim/Public [04:05] You want help on the GUI, ask in #ubuntu, not here :) [04:07] ok did the mkdir /home/jim/public [04:08] then did the ls -l command and it gave total 8 [04:08] No... Public not public.. Your config file used Public so that is what you need to use [04:08] mfer [04:09] jmarsden [04:09] You need to be really accurate about typing in the Lunux/Unix world [04:09] im going to buy thelhc.info xD [04:09] LHC: Have fun :) [04:09] yes its like 99p [04:09] itll be good practise :P [04:09] how to update ubuntu-server ? [04:09] ok says can't creat directory home/jim/Public file exists [04:09] apt-get update? [04:09] apt-get upgrade? [04:10] infomomo: sudo apt-get update && sudo apt-get upgrade [04:10] i did [04:10] :D [04:10] thanks [04:10] i am at kernel 2.6.27-7 [04:10] running LAMP [04:10] anyone buy from godaddy before? [04:10] domain yes [04:10] why? [04:11] are the prices for a year [04:11] or one month [04:11] There is also a package called unattended-upgrades that will do security updates automatically for you [04:11] 1 year for domains brother [04:11] ahh nice [04:11] WOW infos are cheap [04:11] thats whats i need :D [04:11] 82 pense [04:11] hun ? [04:11] let me check [04:11] 82p [04:11] show us link please [04:11] www.godaddy.com [04:12] try your name [04:12] jmarsden cannot creat directory /home/jim/Public file exists [04:13] jmarsden: it's allready installed :D guess i did during the install :D [04:13] steelcityjim: OK, so we are back to ... what does ls -ld /home/jim/Public output ? [04:13] infomomo, check your name? [04:14] hun ? [04:14] drwxr-xr-x 2 jim jim 4096 2009-02-13-15:28 [04:14] did you check godaddy about a domain [04:15] then in light blue after /home/jim/Public [04:15] the price you see is only for the first year [04:15] then its regilar price [04:15] 10$/year [04:15] steelcityjim: OK. That's a start. So now put a file in there and check if a windows machine can see/read it. perhaps just do echo junk >/home/jim/Public/junk.txt [04:15] ahh so I can quit then come back? xD [04:16] LHC: Nope, then GoDaddy will steal your domain and ask you even more money for it... [04:16] ill probably change my name then xD [04:16] LHC2!! [04:17] one more thing should all the information be correct cause I dont want my address be floating around the net [04:17] damn now the folder is gone on the linux machine [04:17] Officially it should be correct. There are privacy services you can use to hide that info for extra $$$ [04:18] steelcityjim: I doubt it... unless you deleted the folder it should stick around... [04:18] meh Ill just modify it, im not expecting high traffic anyways [04:18] ok I got it back [04:19] steelcityjim: OK. So... did you do echo junk >/home/jim/Public/junk.txt [04:19] but i tried to move a folder into it and get "the folder cannot be copied because you do not have permissions to create it in the destination [04:20] Stop playing around ... one thing at once: did you do echo junk >/home/jim/Public/junk.txt [04:20] yes just did that at terminal [04:21] OK. So now go to a windows PC and look at that shared directory... can you see the file? [04:21] no [04:22] giving me contact network admin you don't have rights to access [04:23] have access permissions or no logon servers available [04:24] now im able to access my shared folders on the windows pcs with the linux [04:24] For a quick test, try chown 777 /home/jim/Public/ and then see if the windows PCs can see that share [04:24] at termnal right [04:25] OF course :) [04:25] operation not permitted [04:25] So where do I find CA.pl on Fedora? Why /etc/pki/tls/misc/CA.pl. Who wouldn't haved guessed that. [04:26] Hmmm. You are logged in as jim right? [04:26] yea [04:26] Equally obvious was the package I needed is called openssl-perl. [04:26] ScottK: locate is a handy command :) [04:26] jmarsden: Google found me where it was located before it found me which package I had to install. Locate doesn't help if it's not installed. [04:27] Installing I'm fine on because I do know yum install apt. [04:27] That's true. I think you can do something like rpm --whatprovides something # but it's been a while since I knew RPM [04:28] jmarsden actually it says changing owership of /home/jim/Public/ operation not permitted [04:28] steelcityjim: My bad... chmod 777 /home/jim/Public [04:29] ok did that [04:29] still can't see it on windows machine [04:29] but I also don't see anything else in the folder [04:29] on the linux [04:31] steelcityjim: The file junk.txt should be in there... [04:31] jmarsden, what does chmod 777 do [04:31] Sets permissions so any unix suer can read, modify or view that directory [04:31] yes that file is there jmarsden [04:32] I thought the chmod would put something else in there [04:32] ok quick questions [04:32]