/srv/irclogs.ubuntu.com/2009/02/21/#ubuntu-server.txt

KillMeNowso mark, have you ever gotten apparmor to work ?00:12
markI assume that's not me? I have not touched apparmor, ever :)00:14
domasKillMeNow: I can answer for mark00:21
domasKillMeNow: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/329489/ ;-)00:22
uvirtbotLaunchpad bug 329489 in apparmor "locks on unlinked files leak memory in apparmor" [Medium,Confirmed]00:22
domaswhere is the USN! :)00:22
KillMeNowhttps://forgesvn1.novell.com/viewsvn/apparmor?view=rev&revision=138000:29
KillMeNowthat fixes the issue domas00:29
domasomg, really?00:30
domasI can follow links on bug report too!00:30
markdomas... be nice00:30
KillMeNowlooks like it's a kernel patch00:30
domashow does one patch a kernel?00:30
domasmake-kpkg doesn't produce vmlinux package :(00:31
KillMeNowwell, i'm not sure domas...  why don't you educate us!00:31
domasI can't educate anything about kernels!00:31
domasfor years I've been using default distro ones00:31
domasI quite like apparmor00:32
domasbut this bug for now forced to disable it wherever it was enabled ;-)00:32
domasI like the idea of application-driven hat changing00:33
KillMeNowyep...  i've been trying to get it to work with apache, read through the documentation from the Novell website but not having much major success00:34
markdomas: it's pretty easy to build a patched kernel image00:36
markso if you want that patch rolled out...00:37
marka USN would be easier though ;)00:37
markand I have a few more kernel issues to report for that as well ;)00:37
domasKillMeNow: are you going via mod_apparmor?00:38
domasI like the technology, maybe should quite the dayjob and start apparmor consulting career!00:38
domasinteresting how much ahead in security macosx is.00:39
KillMeNowdomas>  no, i read about mod_apparmor but apt doesn't seem to find it in the repository00:40
uvirtbotNew bug: #332338 in samba (main) "package samba 2:3.2.3-1ubuntu3.4 failed to install/upgrade: subprocess post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/33233800:41
KillMeNowjust been doing some of the basic stuff like using genprof to build profiles00:41
domasisn't ubuntu apache already with internal apparmor hooks?00:41
domas(so you can set different profiles based on request URIs)00:41
KillMeNowi really don't know TBH00:42
domasbtw, "libapache2-mod-apparmor - changehat AppArmor library as an Apache module00:42
domas"00:42
domasyou know, you had to ask apt to find it in repository00:42
domasit wouldn't find on itself, if you don't ask00:42
KillMeNow   yes, that is installed00:43
KillMeNowyou know of any good documentation regarding getting it set up using the mod_apparmor domas?00:47
domasdepends on what you want to do00:48
domasapparmor is for people who know their apps :)00:48
KillMeNowlooking to add another layer of security to apache / php / mysql00:49
andylockranKillMeNow: iptables ?00:57
* andylockran leaves the room, slowly00:58
domasmeh, mysql security01:02
domasI'll have to give a talk on it soonish01:03
KillMeNowandylockran...  IPtables are already in place01:15
KillMeNowthat's not an issue, it's the "Hey, i'm running a web app that had a security flaw which someone found and is now using"01:16
KillMeNowi want to stop them from gaining root or doing other bad nasty things to the box01:16
aroonihttp://pastie.org/395882 ... does that indicate a drive is bad and cant be mounted?04:17
MK-BBanyone here??04:56
MK-BBI was wondering if anyone knows how to setup a email server and using roundcube04:58
MK-BBOr other webmail client05:02
=== MK is now known as Guest50282
=== Guest50282 is now known as MK-BB
MK-BBAnyone?06:06
uvirtbotNew bug: #329173 in samba (main) "Impossible to rename file to other case on samba mounted volume" [Undecided,New] https://launchpad.net/bugs/32917306:12
VK7HSEMK-BB:  http://trac.roundcube.net/wiki/Howto_Install07:07
aroonii have an amazon web services (aws) ec2 server that i'm trying to figure out why i can't ping it from anywhere.  now there are no iptables running on the server.... and FROM the server i can ping both 4.2.2.2 and google.com.  i can also ping those same places FROM the computer i'm trying to ping the server from.  ideaz?07:33
uvirtbotNew bug: #332431 in samba (main) "9.04 Jaunty Samba 2:3.3.0-3ubuntu2: files (permissions set to a=rwx) can only be renamed by owner although their content can be changed by all" [Undecided,New] https://launchpad.net/bugs/33243109:00
Yagisankirkland, I was reading your post on server migration from hardy to lenny - did you want half-backed examples from main or universe ?09:38
Yagisans/backed/baked09:38
Yagisankirkland, if universe - then look at bug #86685 - trac is useless on amd64 servers with that. Fixed packages are here https://launchpad.net/~yagisan/+archive/ppa and there are others I'm sure.09:41
uvirtbotLaunchpad bug 86685 in clearsilver "trac BROKEN on AMD64: "neo_cgi.so: undefined symbol: Py_InitModule4"" [Undecided,Fix released] https://launchpad.net/bugs/8668509:41
Yagisankirkland, if main - well - hardy guests in kvm on an intrepid host display soft cpu lockup messages in the hardy guest consoles and need to be restarted09:42
pteagueok, this doesn't seem to be going well for me tonight...  i just finished installing ubuntu-server intrepid, rebooted, & it's giving me lots of segmentation faults :(11:10
pteaguehere's the output i'm getting - http://pastebin.com/m7bd6da0511:31
pteaguefigured it out...  seems as though there's some sort of a problem with either the mobo accepting the nvidia card, the particular mix of drivers, or maybe the power supply isn't getting enough power to it...11:45
Yagisanpteague, do you get that issue without the nvidia drivers ?11:47
Yagisanreading it - I'd hazard a guess that message signaled interrupts on that motherboard don't work11:48
pteaguei've had this problem on both the intel atom 230 (i don't think i even got far enough to boot off the cd) & now the intel atom 330... the video card works fine on my p5k + intel e6750 core2 duo ...11:49
pteaguebut the other issue is that the power supply in that box is only a 200w or 250w & the power supply on my desktop is a 500w i believe11:49
pteaguemaybe you're right...  i'm not sure how i could be going over 200w with the mini-itx board, a laptop hard drive, a cd/dvd-rom, & the video card11:51
Yagisandepends on the video card - some of them are quite hungry11:52
agentkHow do I kill a process that will not die with sudo kill -9? Reset?11:52
Yagisanbut the message points at MSI11:52
pteaguehere's the video card - http://www.newegg.com/Product/Product.aspx?Item=N82E1681413914311:52
pteague& here's the mobo/cpu - http://www.newegg.com/Product/Product.aspx?Item=N82E1681312135911:53
Yagisanpteague, does it work with the onboard video ?11:54
Yagisanagentk, is it a zombie process ?11:55
agentkYeah. catting two files togeather. resulting file is correct size but cat is 100% and will not die.11:56
pteaguebeen using the atom 230 for my mythtv front end just fine...  i installed ubuntu-server just fine, but the reboot gave me those errors... turned it off, removed video card, rebooted, & ubuntu-server seems to work...  trying to get any of the 64bit guis to come up gives me a kernel panic... guessing i'm going to have to stick with 32bit11:57
Yagisanagentk, try killing it's parent process - eg bash11:58
agentkAlready done that. It's not connected to a pty anymore.11:59
pteagueaha... if this forum post is right it looks like my power supply is what's killing it - http://www.techspot.com/vb/topic103967.html11:59
Yagisanpteague, I'm hoping to build a mythtv box withing2 weeks - I'm going 64bit myself but not atom based (my current desktop gets rebirthed)11:59
pteaguehehe, my previous desktop is my mythtv back end... unfortunately the ati card in it doesn't seem to be very useful for video playback :(12:00
Yagisanwell, I was supposed to be doing it on monday - but my new pc money is now new stove money + fight the real estate for reimbursment money :/12:01
Yagisanpteague, hows your backed end working ? I'm looking at intrepid server install, then mythtv packages over it12:02
Yagisanagentk, well - if it is eating 100% cpu - a reboot will certainly kill it12:03
pteagueas a backend it works great... have the hauppage pvr-500 dual tuner in it...  there seems to be an issue with the driver for that though so the 2nd tuner sometimes loses it which then requires a reboot (might be able to reload it, but i'm not sure how)12:05
agentkYagisan: Cool. Not many choices left I think.12:05
pteaguefor desktop i'm guessing i should install the linux-image-386 ?12:06
Yagisanpteague, I'll have an old analogue bt878a in mine. I got crap reception most of the time so I'll mainly use it as a media playback system for the kids.12:06
Yagisanpteague, linux-generic IIRC12:07
pteaguei'm hoping i used a default setup for lirc... just remembered that was the only thing i needed that i forgot to backup12:13
pteagueYagisan: you might want to check in #ubuntu-mythtv as you're setting up your hardware ... somebody there told me last month? about a network accessible tuner... looked kind of nifty, but i don't remember the price on it - might cut the price on hardware somewhat12:16
Yagisanpteague, well, I'm in .au - in a unit block with bad reception, and a body corporate that won't fix the building antenna - so, I get what I can on my rabbit ears12:18
pteagueah, i've got cable... been a while since i've had to deal with reception... i remember having issues with picking up the station firefly was on when it was first out here in the states12:20
pteagueit's sad when the big city doesn't get something like that & i had to resort to trying to get a signal from a station from a podunk town an hour north of the city12:22
Yagisanpteague, I'm just unlucky - the builders either side of me have great reception12:44
uvirtbotNew bug: #327771 in openldap (main) "synaptic can not update any more du to an error message " [Undecided,Invalid] https://launchpad.net/bugs/32777114:10
masehey guys, i have just done an apt-get purge freeradius && apt-get autoremove && apt-get install freeradius however it doesn't seem to have returned the file radiusd.conf to it's original state like it has the others. In fact it just hasn't created one. Is there any way i can instruct apt or dpkg to just do a brand new install14:33
uvirtbotNew bug: #332521 in dhcp3 (main) "[jaunty] no internet connection: dhclient-script cannot be execve'd" [Undecided,New] https://launchpad.net/bugs/33252114:41
RoyKhi all. is it possible to install ubuntu server 8.04LTS on an LVM root fs?15:04
ScixI don't quite get how autofs finds the right mountpoint for each user. how is it done? I have now upgraded to autofs5(-ldap) and is reading the ldap-automount-auto.direct document. And is there something that has to be done at the client, bedised the entries in nsswitch and the ldap configuration?15:40
Scix*ldap-utils15:40
RoyKhrmf. just tried to install ubunto on lvm, but it sets up the system with lilo, not grub15:51
RoyKthis is ubuntu 8.04LTS server15:51
RoyKhm15:56
RoyKanyone_15:56
RoyK?15:56
RoyKdoes grub work with root on lvm?15:57
jtajiRoyK: as long as you put /boot on a separate non-lvm partition you are golden16:29
jtajigrub might support lvm boot nowadays but separate /boot is easy16:29
RoyKI just tried - works well now after reinstalling16:30
RoyKthanks anyway16:31
=== lokix is now known as lokixza
cellofellowI've got a Django app that I'm looking to possibly deploy to Amazon EC2. I've noticed that vm-builder has the ability to build EC2 AMIs. Can I run those locally for development purposes before uploading to the cloud?18:02
uvirtbotNew bug: #332606 in ipsec-tools (main) "Racoon 0.7 fails with address already in use" [Undecided,New] https://launchpad.net/bugs/33260618:11
uvirtbotNew bug: #302791 in openssh (main) "ssh not setting XAUTHORITY, XDG_SESSION_COOKIE" [Undecided,New] https://launchpad.net/bugs/30279121:02
methodswhere is the dhcp package ?21:38
methodsthere use to be a package called dhcp21:40
methodsfor a daemon21:40
sommermethods: dhcp3-server is probably what you're looking for21:41
methodsno21:41
methodsit was called dhcp21:41
methodsdhcp3-server is new now21:41
methodshm21:42
methods /etc/dhcp3/dhcpd.conf seems to have been coppied from my old config21:42
fergal32hi everybody22:19
fergal32i just setup my first ubuntu 8.10 server everything works only nis is causing problems22:20
fergal32my question is is this a problem with nix from ubuntu? cause i always have to start /usr/sbin/ypbind to get the nis daemon started22:21
fergal32anybody having the same problem?22:21
fergal32hm22:23
uvirtbotNew bug: #331576 in samba (main) "kubuntu intrepid 8.10: kde3 aps can not browse smb:// locations" [Undecided,Incomplete] https://launchpad.net/bugs/33157622:30
fergal32not much talking here :D22:40

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!