[00:00] Question: [00:00] What is the difference between a vanilla OpenLDAP setup from Ubuntu's repos and something like Fedora Directory Server? [00:02] I suspect lots of predefined schemas and tools for managing them... but I've not used Fedora Dir Server [00:06] * jmarsden is going AFK for a while, hopefully back later... [00:08] lukehasnoname, well, they both provide LDAP, i only know openLdap though... point of note: openLdap uses the dn=config system now instead of config file [00:13] I have zero experience with LDAP, I simply know its uses. I need to ramp up my knowledge and understanding of it, though, as I told a company I could build them software that interfaces with their AD server. === axisys_away is now known as axisys [00:30] ldap is just a simple db, thats all [00:33] vikram: It is? I always imagined it being a protocol :-) [00:34] Misnomer [00:37] It's a spec for a type of database [00:37] that's how I see it [00:38] in any case, I'm reading that FDS is easier to use and manage than OpenLDAP [00:38] Its commonly used for providing authentication [00:38] Windows Domain Controller uses an ldap db [00:39] but once you cross 2000 clients, most people prefer the performance of kerberos over ldap [00:41] Microsoft loves ldap, they use it in Exchange too. But as many of us have come to absolutely hate exchange, its mainly because ldap wasnt designed for anything more 1 liner entries [00:46] hello, do i need to add a mime or something so my apache2 kicks in .cgi/.pl files? - php is fine, perl main file sites in /usr/bin/perl - my hello world script is exe/755 and what i get is my browser fires up the code raw in text rather than exec'n it [00:48] might need libapache2-mod-perl2 [00:48] ok, so thats a basic apt-get method? [00:48] sure [00:48] thx [00:50] is there a way, now on topic, to restart perl on my box [00:50] restart perl? [00:50] perl's an interpretter, it runs on demand [00:51] do you mean reload apache's config so it's aware of the newly installed mod_perl? [00:51] I mean anything needed to let apache2 know its now there or something [00:51] yes [00:51] apache2ctl reload, /etc/init.d/apache2 reload, invoke-rc.2 apache2 reload, 3 options, take your pick [00:51] ok not apach2ctl, lol [00:51] how to allow port ranges with ufw? [00:51] ha! thanks chief [00:51] apache2ctl graceful i think [00:52] i tend to use the init scripts personally anyway, easy to tab complete and all services are listed in there [00:52] ls /etc/init.d/, you'll find a lot in there, running them without args tells you what args they accept [00:58] i shal reboot incase [01:13] how to allow port ranges with ufw? [01:20] I'm pretty sure man ufw will explain that. [01:33] can anyone assist with at ssh setup [01:34] Depends on what kind of help you need. What's the problem. [01:37] i just loaded ssh [01:38] setting up an acct witn no-ip.com [01:39] No i have to redirect something on my router [01:41] downloading a file from a website that how do I run it? [01:42] do I open with archive manager? [01:42] wget url? [01:45] got a file on my desk top how do I run it? [01:46] click on it [01:47] brb booting ubuntu [01:47] ok it brought up a list of files [01:48] what is the executable in linux? [01:53] anyone? [01:53] have a tgz file in my download bin how do I run it? [01:54] actually tar.qz [01:55] Ill try [01:55] whats the link to the download [01:56] no-ip.com [01:56] downloaded the file [01:56] are u running ubuntu as your os, or ssh to a ubuntu server [01:56] its on my desktop when I double click it I get aarchive mgr [01:57] setting up ssh to a ubuntu desktop [01:57] oh [01:57] join #ubuntu [01:57] I want to know too cause Idk how [02:07] is it possible to install window xp on KVM that runs on a server without X? [02:08] steelcityjim: Do not run random files... what are you really trying to do?! [02:18] steelcityjim: If the file ends in .tar.gz ( g as in "gee" not q as in "queue") then you can unpack it using tar zxf filename.tar.gz [02:22] ok I got it jmarsden [02:22] i did sudo apt-get install no-ip [02:22] looks like it loaded correctly [02:23] now I guess i need to configure my router [02:23] Ah, that's what you were trying to download. Yes, always use existing packaged software rather than trying to download a tarball and compile it yourself ... let someobne else do the hard part for you :) [02:25] ok so im redirecting port 80? [02:25] BTW this is a classic case of asking the wrong question: If you had asked "what software can I install so that no-ip.com knows my dynamic IP address you would probably have got a more suitable answer more rapidly... always ask the real question... [02:25] No, for SSH (unles syou reconfigured it) you are redirecting the ssh port, which is TCP port 22 [02:25] ok is 80 if you do a webpage? [02:26] grep ssh /etc/services will tell you. and yes, TCP port 80 is the standard port for a web server to run on. [02:26] grep http /etc/services will tell you that :) [02:28] what is grep http /etc/services [02:29] I don't see anything in my router config about redirecting [02:31] would i be looking for single port forwarding? [02:31] steelcityjim: grep http /etc/services is a command that you type at a shell prompt in Ubuntu [02:31] And possibly, that depends on your router. [02:32] lynksys [02:32] linksys [02:32] Your router probably does not run ubuntu server, so you need to ask specific questions about using that elsewhere... :) [02:34] I thought i had to tell the router that traffic coming in on port 22 (no-ip address) to redirect to the server ip? [02:34] You do. So do it, but if you do not know how, that is not a ubuntu-server issue... [02:41] how do i change the resolution for ubuntu server (its just the console) under vmware. its too small. [02:43] jmarsden tcp protocol correct? [02:44] At [18:25:376] I said: No, for SSH (unles syou reconfigured it) you are redirecting the ssh port, which is TCP port 22 [02:44] jmarsden, still helping as good as ever xD [02:45] So I answered that question about 20 minutes ago... :) [02:45] im running ubuntu locally right now [02:45] sorry im on like 4 different channels [02:45] its called ubermicro steelcityjim xD [02:46] jmarsdens gonna help me set up some users here in a min [02:46] mrcoodles: Just set it up so you can ssh into it and use your favourite terminal app? [02:48] steelcityjim, are you settin it up so users can use ftp and are locked to a fir [02:48] dir [02:48] yes thats what I'd like to do [02:49] I need to do the same thing haha ill watch closely [02:49] its got something to do with chroot [02:49] steelcityjim: sudo useradd johndoe # to add a user called johndoe [02:49] LHC: Last time I checked steelcityjim is setting up SSH not FTP ... [02:49] oh [02:50] how do I do password jmarsden and restrict directories? [02:50] is that so you can log in and use the cli ? [02:50] Yes, or just use SFTP for secure file xfer... FTP is a badly designed protocol that sends the password in the clear over the Internet, etc etc. [02:51] steelcityjim: sudo passwd johndoe # and type in his pw when it promots you to. [02:51] lol wow [02:51] ever use wireshark? it grabs all the passwords from your local network [02:51] i was shocked when it showed up so i use ssl on sites [02:52] LHC: I use wireshark a fair bit for network troubleshooting. it does a lot more than that, btw :) [02:52] LHC: for me, setting up SSH is easier than setting up the "secure" variations of FTP... [02:53] ok user set up [02:53] rock on jmarsden [02:53] so its apt-get install openssh etc [02:53] sudo apt-get install openssh-server # yes [02:53] close haha [02:55] its already installed on my server dammit xD [02:55] Of course, how else do you think you are using Putty to connect to the server? :) [02:55] how would ya be able to set it up in the first place? [02:56] At install time, from the server console. [02:56] On a headless server you might be doing that over a serial console, or whatever... [02:57] fook.us.to [02:57] thanks to you jmarsden :D [02:57] lovely jquery works [03:00] jmarsden when my new no-ip address is entered into a browser what should happen will ssh promt for a sign on and password [03:00] Into a browser?? Have you set up a webserver on it? [03:01] Into FileZilla, if filezilla is set up right, yes, they will be prompted for their password [03:01] oh no [03:02] Then if they use a web browser they won't get very far :) [03:02] lol [03:02] DOH [03:02] haha [03:03] jmarsden how many servers over irc and your own have you set up xD [03:03] No idea... "lots"? [03:03] ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- [03:03] ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- [03:03] -------------------------------------- [03:04] each dash is a server haha [03:04] filezilla under construction? [03:04] what [03:04] http://filezilla-project.org/ [03:04] Try http://filezilla-project.org/download.php [03:05] Actuallt their home page at http://filezilla-project.org/ works fine for me, too. [03:05] same [03:05] eh [03:05] ok so they have to download the client piece? [03:06] some hacker has his traffic running through a server :O [03:06] jk [03:06] steelcityjim: well, unless you want to mail then a CD containing it, or something... [03:06] xD [03:06] why cant the windows client communicate? [03:07] what os are u on [03:07] Which windows client? The filezilla windows client communicates using SFTP with your SSH server... [03:07] you just have to enter in your info in the sitemanagaer [03:07] As does any other SSH-based SFTP client for any OS... [03:08] so the sftp part is encrypted? [03:08] secureftp [03:08] vs regular ftp [03:08] yes [03:08] Windows does not come with a built-in SSH / SFTP client. Yes, SFTP is (in this context) file transfer over SSH, so it is encrypted. [03:08] as jmarsden said ftp blindy gives out your pass [03:09] so you could use windows if you wanted your stuff dangling in the wind? [03:09] Use windows??? You can use Windows any way you want, including using FileZilla on Windows, or Putty on Windows, or whatever.... [03:10] openssh on windows allows you to use the ssh command :P thought I advertise that [03:11] See http://www.openssh.com/windows.html for alternatives [03:11] ok now I can't test this from my network correct [03:11] jmarsden, winscp (for doze) [03:12] Is listed on the page I referred to. [03:12] steelcityjim You can test the SSH part, just not the router port open part. [03:12] whats this router part? [03:13] how do i test the ssh part [03:13] If server is behind a router doing NAT you have to set the router to redirect the SSH port to the server's local IP. [03:13] steelcityjim: Install filezilla on a local windows box and configure it to point at the local Ip of your server [03:14] Tell it to use SFTP and a username and pw of your choice... [03:14] jmarsden, no worries then (just finished reading up) [03:14] testing the port is open is easy - just telnet to it. testing that the service is configured is harder :) [03:15] Kamping_Kaiser: I tend to suggest FileZilla because there is a Linux version of it that works the same way, which is not really the case for WinSCP. [03:15] filezilla is great I used it forever [03:15] I prefer tools I can use on multiple platforms... less to learn and less to remember that way. [03:15] are there any good migration guides out there? im a sys-admin for a small school, i'd love to migrate everything to ubuntu. I'm using freenas for most of my share needs, but i always hit a snag trying to use LDAP to replace AD. [03:15] jmarsden, on unix boxes i use scp, so i'm only aware of winscp from using it [03:16] *im aware freenas isn't ubuntu, just for the record :)* [03:16] ptarrant: Samba has books and tutorials galore, some of which allow AD style domain setup using it. [03:16] ptarrant, what are the client os's? [03:17] ok ecconn refused [03:17] ptarrant: http://www.samba.org/samba/docs/ [03:17] jmarsden: yea i looked those over, i never could get LDAP and Samba to shake hands correctly, i was looking for other guides, or do i just need to hit the tutorials more? [03:17] kamping_kaiser: all of them are using xp or 2k [03:18] eeeh ok. there might be something in wiki.ubuntu.com or help.ubuntu.com [03:18] Why do you need LDAP to stick around, in that case? Do you have Windows servers in the mix? [03:18] personally, i just gave up trying to configure ldap+samba *cringe* [03:18] jmarsden: all the servers are 2k3 [03:19] kamping: thats the issue i ran into over and over, i did all the tutorials for ubuntu 7 but can't get it to work with 8.10 [03:19] Ah. So you are not migrating from them to Ubuntu? [03:20] "I'd love to migrate everything to Ubuntu" implies migrating the servers too?? [03:20] jmarsden can I enter nothing for a password [03:20] for the moment, i need them to stay the way they are because its a production enviroment, i setup a "test" subnetwork (172.16 instead of 192) for me to try and get ldap and a totally *nix / linux solution [03:20] steelcityjim: If you actually set up a blank pw, yes [03:20] i need to make sure it will work before i swap them out for ubuntu server :) [03:21] ptarrant: In a totally Linux solution why do you think you need LDAP at all? [03:21] fwiw, i hear fedora directory service is much better then openldap (only tried ol though) [03:21] Are we talking thousands of accounts type of a setup here? [03:21] doesn't LDAP basically replace AD, or did i mis-read? [03:21] we are talking about 400 student accounts and aroudn 100 staff accounts [03:21] AD uses LDAP... [03:22] ahh so its a translator [03:22] AD uses x500, not ldap per se (unless the've gutted it recently) [03:22] You could use any solution you like that your Ubuntu servers will work with... [03:22] AD is DAP + stuff on top for integration. [03:23] so what would be the directory for ubuntu? are there many choices? or do i just make them users? [03:23] i've only been using / learning linux for about 3 months [03:23] so excuse the dumb questions here :) [03:24] im being denied by my server [03:24] You might want to read http://www.samba.org/samba/docs/using_samba/ch04.html which seems closeto what you are wanting to do [03:24] thanks jmarsden [03:24] steelcityjim: What are you trying exactly and what is the error message you are seeing? [03:24] econnrefused [03:25] connection refused by server [03:25] im trying to connect via filezilla [03:25] And you are sure you told it to use SFTP, right? [03:26] whoops [03:26] my bad [03:27] ok looks like it connected then gave me authentication failed [03:27] So use a correct username and password :) [03:27] well i did [03:27] hah [03:28] its the one i just set up [03:28] If you did, it would have let you in :) [03:28] OK, check /var/log/secure for why it denied you access... [03:29] ok wait i re did it [03:30] directory listing successful [03:30] is that what im supposed to get? [03:30] Ok, so it is working fine. You can drag and driop files from left pane to right pane to upload, and vice versa to download... [03:30] You are in business. [03:30] yaya [03:31] well now I just need someone to test from the outside [03:31] using my 6burgh.no.ip.org [03:31] Give me a login (in a private message) if you want... [03:37] OK, that works now but it looks like the user has no home directory of his own? [03:37] can you get to public [03:37] you should see Abba Gold [03:37] lol [03:37] public should be open to everyone [03:38] whats this site for [03:38] public as in /home/jim/Public ? [03:38] file share with some friend [03:38] yes [03:38] im just learning lhc [03:38] same [03:39] Did you just break it? Now I can't connect to the machine at all?? [03:39] no im just sitting here [03:40] LOL [03:40] I swear i did not touch it [03:40] OK... now it works again... odd. Ok, I can see /home/jim/Public/abba/Gold/*.m4a [03:41] ohhh gyeeaa [03:41] As well as /home/jim/Public/junk.txt that we created yesterday [03:41] yep [03:41] so I got it working........roflmao [03:41] you da man jmarsden [03:42] Ok, I'm out now. I would suggest you use much better (harder to guess) passwords, and you're set. [03:42] password is god [03:42] yea I will that was just a test [03:43] password is password [03:43] how fast would you be able to download on that/ [03:43] However fast your ISP lets you upload from your machine. [03:43] ohhhh mn [03:44] man that ain't fast [03:44] 4 mbs [03:44] mbps [03:44] get a 100mbps dedi [03:44] That's why people pay for colocated servers with lots of bandwidth [03:44] yea but this is free....roflmao [03:44] they can wait [03:44] mfers [03:45] jmarsden, if you need up to 200gig of storage just ask, Im not using my dedi enough [03:45] unlimited bandwidth [03:45] won't be download gigs [03:45] OK :) [03:45] albums here or ther [03:45] just for easy access [03:45] steel is your url working [03:46] i believe so [03:46] jmarsden you used the 6burgh rite? [03:46] I don't have a page yet lhc [03:46] Yes, I did sftp USERNAME@6burgh.no-ip.org [03:47] thats my next project webpage [03:47] (I used the command line sftp client instead of FileZilla, because I'm more a command-line type of person :) [03:47] I'd like to have a webpage with some pics general info and then a link to my server files [03:48] will that be doable? [03:48] steelcityjim: Then you need to set up a web server and redirect port 80... and yes, that is doable. [03:48] haha jmarsden that took me 5 hours to do yesterday [03:48] lol [03:48] dam comment # # [03:49] LHC: Well, because you had a weird LAMPP setup that your buddy created, mainly :) [03:49] yeah dam him [03:49] is web server a differnt app than ssh [03:49] oh Im gettin a new server jmarsden 1.5 tb :D [03:49] Yes. Different protocols [03:49] oh mfer how will that work with no-ip? [03:50] ok so now im a little confused [03:51] whynot just use apache and a free domain? [03:52] steelcityjim: It will work fine with the no-ip.org domain setup. Same IP address, so same DNS name. [03:52] lhc you got a webpage you created [03:52] yep [03:52] can I see it? [03:52] thelhc.us.to [03:52] its just up there for the time being instead of a nasty NOTHING FOUND sign [03:52] steelcityjim: sudo tasksel install lamp-server # will get your machine set up [03:53] Then redirect port 80 just like you did port 22. [03:53] Then browse to http://6burgh.no-ip.org and you will see the "It works!" page :) [03:53] can I have them both working at the same time [03:54] Yes [03:54] ohhhh swweeeeettttt [03:54] lhc green screen with some text? [03:54] what [03:54] your site [03:54] or teel [03:54] there are pics in it [03:55] This visage? [03:55] v for vendetta speech [03:56] * jmarsden browses to http://thelhc.us.to/ and goes half-blind trying to read white text on light blue... eek! [03:56] i don't have any pics on mine [03:58] http://thelhc.us.to/images/Screenshot-2.png [04:04] steelcityjim, you see [04:05] i dunno if you guys are aware of this, but there are some very easy ways to create robust websites w/out having to do a lot of coding [04:07] rdw200169: Really? [04:07] yeah, like moinmoin, sphinx, drupal, wordpress, etc.. etc.. [04:07] hey rdw200169 [04:07] for example, my site is created w/sphinx i.e. greamin.com [04:07] absolutely no html on my part, all i did was a little css manipulation [04:07] LHC, yo, what up [04:08] nmnm [04:08] got my domain workin etc thanks to jmarsden [04:08] rdw200169: So, wordpress is "robust" these days is it? So I can hit it with a million hits in 12 hours? [04:08] did you get those pics? [04:09] yeah, i haven't done anything w/them though, i'm pretty lazy ;) [04:09] haha fair enough [04:09] owh, robust is relative... i'm talking about good looking, not good performiing [04:09] i have removed # to activate 'AddHandler cgi-script .cgi ' in apache2's mime.conf has made my .cgi files work, but .pl files still provoke a download file window on browsers, anyone any ideas how to make .pl act like .cgi [04:09] owh, performance is a matter of the server, bandwidth, firewalls, round-robin webservers, etc... [04:10] owh: besides, that has just as much to do with you server and config as wp [04:10] bah, rdw200169 beat me to it [04:10] rdw200169: I've never ever heard the word robust applied to the way something looks - and that's in over 30 years in IT - I suppose that's a sign of the times. [04:10] Jeff1: sudo a2enmod perl perhaps? [04:11] Jeff1: Assuming you have mod_perl installed in the first place? [04:11] owh, sorry. i was using a simple dictionary version of robust. [04:11] that reminds me - I need to download some dict files [04:12] rdw200169: So Apache is not robust, because on az 486 with 8MB RAM on a home DSL connection it cannot handle 1 million hits in 12 hours?? [04:12] i did not say that. [04:12] You implied it by your definition of robust being decoupled from hardware [04:12] rdw200169: You mean: "Robust means, literally, made of oak, and hence implies great compactness and toughness of muscle, connected with a thick-set frame and great powers of endurance.", or was there another meaning that I missed? [04:13] @ jmars -- Module perl already enabled [04:13] i implied that the factors that determine a websites ability to handle millions of hits involve more than just the html [04:13] rdw200169: Or are you referring to a different dictionary? [04:13] .cgi is perfect .pl trys to dnload scripts [04:13] thats it. i'm done. y'all have fun. [04:13] rdw200169: You said: "(13:05:49) rdw200169: i dunno if you guys are aware of this, but there are some very easy ways to create robust websites w/out having to do a lot of coding" [04:14] leave rdw200169 aloneeeeeeeeeee [04:14] owh, quit reading inconsequential things into what i'm saying. i'm trying to be helpful, and you're being an asshole english teacher. [04:15] dare i say frontpage and a packet of razor blades ^^ [04:15] rdw200169, remeber you said things to do with my dedi? [04:15] what other things can I do, i dont have any ideas xD [04:16] rdw200169: Thanks for that insult. Very professional of you. [04:16] its irc whats professional in here ffs xD [04:17] bickering women xD [04:17] * owh shakes head. [04:17] ok guys stay on target, perl .pl how does one make .pl exec rather than download [04:17] jmarsden what was that text editor you recommended last night [04:17] dont make me buy a mac!! [04:18] vi is good [04:18] Jeff1: Give me a sec, I think you need an AddHandler line... [04:18] steelcityjim: nano is what I suggested [04:18] cheers chief [04:18] Jeff1, whats wrong with a mac haha [04:18] except its price [04:18] nothing it will make things work first time [04:18] just no cash [04:18] hehe [04:19] yeah I know alot of web devs in my uni who have them for some reason [04:19] maybe they like the look or something [04:19] i ebay's a G3 in UK , started the bid at £1, (no monitor) it sold for £1 [04:19] sold* [04:21] whats the g3? is that a laptop [04:21] im sure it he didnt sell it for that much haha [04:22] it was a desktop unit, but a G3 upgrade card, was really an older model [04:22] im sierous [04:22] £10 posting / packing and it went for £1 [04:22] cool [04:22] i thaight i would do 1£ start to attract bidders [04:22] lol [04:23] ha [04:23] I would love to get the old macbook pro [04:23] Jeff1: It seems to "just work" for me on Ubuntu 8.10 here, I created a trivial perl script in /var/www/cgi-bin and it runs when I point a browser at it... [04:24] what are u trying to do jeff [04:24] hmm i try this now [04:24] Script was exactly two lines: [04:24] setup hosting for some sites, cgi mainly for myself cus not very good at php, happy with perl over the years [04:24] #!/usr/bin/perl [04:24] print "Content-Tyoe: text/plain\n\nHello Perl world\n"; [04:25]