[00:09] hi there [00:10] any one here with experience with trendnet external modems [00:10] ? [00:12] nope [00:23] Is there anywhere I can lookup what the different options specifically do during the server install on the screen to select various servers. Like LAMP, DNS, Virtual Host, etc. [00:23] I'm most uncertain as to what the "Basic Ubuntu Server" option does. [00:27] roy_hobbs: install one machine for each option, run dpkg -l on each machine and compare the output (diff) [00:27] roy_hobbs: the source code will tell you. The only difference those check-boxes do is the list of packages installed by default. [00:28] twb: thanks, do you know offhand what "basic ubuntu server" does? [00:28] roy_hobbs: I don't remember ever seeing that checkbox. [00:28] JeOS [00:28] roy_hobbs: so, no. [00:29] roy_hobbs: it's quite safe to leave nothing checked, and then manually install anything you want with aptitude. [00:29] roy_hobbs: a linux with network nothing else :D [00:30] If I had to guess, I would say "basic ubuntu server" probably corresponds to the "ubuntu-standard" or "ubuntu-minimal" metapackages. You can see what they depend on by examining them (e.g. aptitude show ubuntu-minimal) on an installed system. [01:05] New bug: #338043 in mysql-dfsg-5.0 (main) "mysql 5 installation crashes if no new root password supplied" [Undecided,New] https://launchpad.net/bugs/338043 [01:13] hi all, has anyone tried install the redhat-cluster-suite on hardy 8.04.2 ? [01:18] Shanix: I know some people have, but haven [01:18] 't myself [01:20] I tried to setup the environment, but seem to getting some error, wondering if I was setup the wrong way or a bug? [01:20] it's https://bugs.launchpad.net/ubuntu/+source/redhat-cluster/+bug/338047 [01:20] Launchpad bug 338047 in redhat-cluster "soft lockup - CPU#0 stuck for 11s! [clurgmgrd:4587]" [Undecided,New] [02:22] anyone there that can help me with irc services === rascov_ is now known as racov === racov is now known as rascov [02:38] I want to encrypt syslog traffic (which basically means I need TCP). I lean towards rsyslog since that's the new Debian default. Anyone want to weigh in with opinions for/against rsyslog? [03:13] Hi. Where is the appropriate place to set LANG: /etc/environment, or /etc/default/locale? [03:13] (To set a system default, that is.) [03:13] Or is it best to set both ... ? === redspire1 is now known as redspire === erichammond1 is now known as erichammond [03:18] fbond: it should already be set somewhere by default. [03:19] anyone here can help me with my question? [03:19] https://www.redhat.com/archives/dm-devel/2009-March/msg00012.html [03:19] Hmm, apparently not on Ubuntu. [03:28] Oh wow, 8.04 still defaults to ignoring the Recommends field. [03:33] twb: What do you mean "still"? Why would you expect it to change? [03:34] It changed in Debian a while back [03:34] Obviously Ubuntu hadn't caught up by 8.04 :P [03:37] * ScottK doesn't remember which turned it on first. [03:37] But since the first Debian release with is on was just released last month and 8.04 was released almost a year ago, I think caught up is an odd way to put it. [03:38] Hence the ":P" [05:11] how do i update package list and sources for ubuntu server? [05:18] xiambax: What are you trying to do? [05:23] download ubuntu-xen-server [05:23] im updating list now [05:23] so maybe something will come of this === dantalizh is now known as dantalizing === dantalizing is now known as zz_dantalizh === zz_dantalizh is now known as dantalizing === dantalizing is now known as zz_dantalizing [06:08] moin === dantalizing is now known as zz_dantalizing === zz_dantalizing is now known as dantalizing [07:42] I have two machines. When I try to SSH from one to the other, the login is incredibly slow (takes about 5 seconds for the password prompt to appear). When I SSH to any other machine it works fine. When I ssh to the server from any other machine it works fine. This problem only occurs with this combination of client and server. What on earth could be causing this? [07:46] tsrk: dns lookup problems of the ip address of the client machine by the server is the likely culprit. Otherwise use 'ssh -vvv ' to see where things are stalling. [07:47] * hads agrees [07:47] well, it works on other machines on the same network [07:47] (and it shouldn't be able to look up any of these ips, all internal) [07:47] 1 sec, i'll grab the ssh -vvv log thing [07:48] this is where it gets stuck: [07:48] debug2: key: /home/tsrk/.ssh/id_dsa ((nil)) [07:49] next line is debug1: Authentications that can continue: publickey,password [07:56] Add 'UseDNS no' to your sshd_config [08:00] yeah it was the dns (i added it to my hosts file) but why does it work on some but not others (all with default config)? [10:55] hi [10:55] can anyone give me a hand with pure-ftp ? [11:02] <_ruben> Doble: might wanna ask a more precise question in order to get (useful) answers [11:05] thanks ruben, im talking to someone now, will see how it goes and will ask again if we can't work it out :) [11:09] does anyone know how to stop pureftp? I want to start it with the -l switch and point it at a database file for virtual users, but I can't start it because it's already running! (I get the error: Unable to start a standalone server: Address is already in use) [11:10] also - complete ubuntu newbie here :) [11:10] Doble: /etc/init.d/pureftpd stop [11:10] <_ruben> unless its handled by (x)inetd [11:11] Doble: or killall -9 pureftpd (or what ever that program executable is called ) [11:11] killall -9 is last option [11:11] @ simplexio I get the same error when trying to tell it to "stop" as when I just try to run it [11:11] @ ruben what do you mean handled by inetd ? [11:12] Doble: and normalway to address someone is start line with username: [11:12] Doble: you can allways use killall -9 programname [11:13] siplexio: sure, will try that [11:14] simplexio: haha ! sweet, it worked, I was able to start the service with the -l switch and it read from the database like it's supposed to, and i can login as my virtual user, great! [11:15] sure.. when someone dosnt bahve, just try ti kill it, and it it wont work then use kill -9 [11:16] and that may cause some problem if used in real life [11:16] lol [11:20] can someone explain to me the difference between init.d and ... i don't know, system services? I know there's a difference but basically I want to run pureftp as a service when the server boots, and im guessing since it's currently running as init.d that is linked to my user account ... [11:21] ...that it is linked * [11:22] or i should say - is being run AS my user account, and not as the 'system' [11:26] for example, when I run "sudo pure-ftpd -l puredb:/etc/pure-ftpd/pureftpd.pdb" in one of my screens, the screen 'freezes' - im guessing because it is busy doing what I told it to - if I open a new screen, I can access the FTP, but as soon as I CTRL-Z the screen which I ran the command in, I can't FTP to it anymore - therefore the pureftp server is being run as my user account and not as a service [11:35] Doble: ctrl-z freezes program, you can do bg after thatto allow it run backround [11:36] Doble: init.d scripts are systems services which are started when system is on defined runlevel, and does screen mean one terminal window or screen the program [11:37] simplexio: screen the program [11:38] Doble: in screen ctrl-a n open new windows [11:39] simplexio: yeah, screen is working fine i think, i just need to work out how to run pureftpd as a daemon [11:39] ctrl+a n, next screen, ctrl+a p previous, in all terminal program ctrl+z suspend bg, allow suspended program to run and fg brings backround job to foreground. right way to detach screen is ctrl+a d, and you get it back using screen -rd coomnd [11:40] Doble: probably you need to edit /etc/pureftpd or similiar file to change defaults [11:47] simplexio: what does the & command do? for example: /usr/sbin/pure-ftpd & [11:48] Doble: it starts program in backround [11:50] Doble: read and learn http://www.abrillant.com/doc/linux/index.html , that one look nice, it explain what &, && do [11:52] simplexio: thanks for the help !! I seem to have gotten it running in the background, and using the database, so the virtual users are working - fantastic! I did the following: sudo pure-ftpd -l puredb:/etc/pure-ftpd/pureftpd.pdb & [11:53] simplexio: now i just need to work out how to get it to run every time the system starts [11:54] Doble: or you could have done : pureftpd , then hit ctrl z, and give command bg [11:54] simplexio: ahh i just tried that- now i think i understand how ctrl-z works, cheers [11:55] Doble: is there no /etc/init.d/pure-ftpd script? That one should launch the daemon at every startup [11:58] oCean_: ah yes, i'm looking at that now - sorry I'm totally new to linux so really fumbling around here, I'll see if I can work this out [11:59] Doble: actually, you can run "sudo /etc/init.d/pure-ftpd start" (or stop) by hand, every time you want to start/stop. During machine startup, the script will be executed using 'start' [12:00] oCean_: I see - how do I get the script to run pure-ftpd with the -l switch which tells it to acess the database for virtual user information? do I have to edit the init.d script ? [12:01] Doble: you should have an /etc/pure-ftpd directory [12:02] Doble: all config files are probably in .... yes, like cemc says :) [12:02] ahhh ... [12:02] Doble: check if you have in there a conf/PureDB [12:02] cemc: yes i just found that - it points at the right puredb file [12:03] ok, now you go to /etc/pure-ftpd/auth [12:03] and make a link to that file [12:03] something like: ln -s ../conf/PureDB 60puredb [12:03] you take a look in the auth directory where other methods are enabled probably [12:04] unix, pam [12:04] cemc: okay, this is where the guide I was following lost me as well - why do I have to make a link? I don't understand what that does, sorry [12:04] cemc: I understand what a link does, but why does the daemon need it ? [12:04] you make a link to enable that particular auth method [12:04] cemc: hmm okay .. [12:05] so when pureftpd starts, it looks at that directory and enables that auth method [12:06] actually it's a bit more weird, you have that conf directory and from parsing that a command line parameter list is generated [12:06] and pureftpd is called with those parameters [12:07] because pureftpd doesnt have config file support, all options have to be given as command line parameters [12:07] cemc: so it parses the files that are in the auth directory, and processes whatever has the lowest number? [12:08] it processes them all [12:08] and when you try to login with a user it tries with every auth method, [12:08] until one works [12:08] aaaahhhh [12:08] okay, now I understand how this works [12:08] great, going to try this [12:08] so if you want only virtual users, you can delete the unix and pam ones [12:09] and leave only the PureDB link there [12:09] ummm [12:09] better scratch that :) [12:09] so for example, if I delete the unix link - I won't be able to log in using my user account (which isn't in the database file) ? [12:09] you don't remove the files, you edit them, [12:09] and put 'no' in them instead of 'yes' [12:10] ah [12:10] yeah, it should work as you said [12:10] because then you will have only puredb authentication [12:10] and only users in puredb can log in [12:11] okay, one more question - what is pam ? [12:12] http://www.kernel.org/pub/linux/libs/pam/FAQ - read this :) [12:12] heh, okay, cheers [12:13] okay, im in /etc/init.d and im trying to stop the pure-ftpd daemon, but when i type "sudo pure-ftpd stop" i just get "Unable to start a standalone server: Address already in use" [12:13] I can just kill the process but I'd like to know why I can't stop it [12:14] try sudo ./pure-ftpd stop [12:14] better yet get used to sudo /etc/init.d/pure-ftpd stop [12:14] :) [12:14] cemc: ah that worked [12:15] cemc: so what was i doing wrong? I don't really follow .. sorry [12:16] also - it worked! Thanks very much simplexio, oCean_ and cemc :) [12:17] Doble: it's not enough to be in that directory, you have to specify explicitly to run that script frm that directory [12:18] Doble: great! The thing that you were 'doing wrong' is that, calling an executable (pure-ftpd in this case) without the path specified (e.g. /etc/init.d) it will *not* call the script in your current directory, rather than the pure-ftpd daemon itself [12:18] what you did there was actually running the pure-ftpd daemon from /usr/sbin or so [12:18] indeed [12:18] unix is sweet :) [12:18] ahhh I understand [12:18] thanks both [12:19] yw [12:38] okay ... i can connect to the server but I can't upload anything - I get a permissions error [12:39] virtual user ? [12:39] cemc: yes [12:39] I can download files however [12:40] you have to check the owner of the directory you want to upload to [12:40] it has to be the same as the uid/gid you gave the virtual user [12:40] is it ? [12:40] how do i check ? [12:41] well, how did you add the user to puredb ? [12:41] i used pure-pw [12:41] Doble: ls -l , then chown user:group filenami , changes owned:group, chmod changes file permissions [12:41] ok, and there you had to specify userid and groupid [12:42] yep, I made it's userid "ftpusers" [12:43] I just don't know how to check/change the owner of the folder I made under /home/ftpusers for the virtual user [12:45] Doble: try what simplexio said [12:49] haha briliant [12:49] i chmod'd the user and group to ftpuser:ftpgroup and now it's working perfectly [12:50] simplexio: cemc: THANKS VERY MUCH ! huge help for this newbie hehe [12:50] you mean you chown'd the directory to ftpuser:ftpgroup [12:51] yes, sorry that's what i meant [12:53] once again thanks very much [13:01] Hi there. I want to know what packages is installed when doing a installation of Ubuntu 8.04 JeOS. Does it exst such list on the web somewhere? [13:34] I am using the network install system, I've been trying to set passwords however the md5 hash i put in doesn't seem to work [13:34] does anyone know how to generate the hash the right way? [13:36] kickstart? [13:36] kikstart adds hashed strings into the file [13:42] kickstart isn't that redhat? === BrunoX1ambert is now known as BrunoXLambert [14:25] ScottK: ping [14:25] rgreening: pong [14:26] heya ScottK, I saw an announcement on a new email stack. [14:26] I was wondering if similar exists for security,.. [14:26] like proper ufw, tcp wrappers, log chacking, rkhunter, etc... [14:27] if not, it would be a great project for next UDS [14:27] ufw is in the default install. [14:27] A lot of the tools for that are in Universe too. [14:27] It might though. [14:28] I know for myself, I had to manually setup these tools. [14:28] Nothing says there can't be community maintained meta- stuff in Universe. [14:28] I was thinking a meta package with some same default settings would be nice [14:28] ya [14:28] would you be interested in helping me spec something? [14:28] Much of the trick though is that by policy one package can't modify another's setting directly. [14:28] Sure. [14:29] So the packages you want to modify need to provide a mechanism to externally control configuration. [14:29] ScottK: maybe a script to setup these... [14:29] For the mail server stuff I had to add a couple of helper scripts to postfix for the purpose.. [14:29] Yes. [14:29] ScottK: have you applied to go to UDS? [14:30] I have. [14:30] ok, if I get to go, we can spec it out there. [14:30] I have. [14:30] IMO, an easy "lockdown" setup tool would be extremely beneficial [14:47] Hello. I installed ubuntuserver and need java version > 1.6.0_04 but in repos there is only java version "1.6.0_0". Am I wrong ? I'm installing tomcat6 and this java automaticaly is installed. [14:49] <^law^> it just a little bit lower version i guess it is ok :) [14:49] it is not for my app [14:50] <^law^> salsa,then how you install ur tomcat? via apt-get? [14:50] it requires this 1.6.0._04 version [14:50] aptitude [14:59] ^law^: I use aptitude [14:59] salsa: Error: "law^:" is not a valid command. [15:51] how do I check the raid1 sync status ? [15:51] i posted a question on dm-devel as well [15:51] https://www.redhat.com/archives/dm-devel/2009-March/msg00012.html [15:52] axisys: cat /proc/mdstat [15:57] cemc: i am using hardware raid controller .. ubuntu picked up the raid controller actually during install [15:57] cemc: check the url to see how is my setup https://www.redhat.com/archives/dm-devel/2009-March/msg00012.html [16:14] I have been testing postfix, can anyone tell me if i can setup a system or use postfix to forward mail to two servers [16:14] the aim being to keep the current server running, and test on the second [16:14] forward mail to two servers? [16:15] so both machines would recieve all mail, [16:15] ask in #postfix [16:15] okay, === ogra_ is now known as ogra [16:37] is there a ubuntu development channel where I can ask about the mdadm bug ? [16:37] i already posted a question here [16:37] http://www.nabble.com/linux-software-raid-td22317338.html [16:37] but so far no soln [16:44] axisys: Here isn't a bad place. There's also https://bugs.launchpad.net/ubuntu/+source/mdadm/+filebug [16:48] axisys: yes there is an ubuntu development channel and no you can't ask your question there (explicitely against channel rules) [16:50] can you put public ssh keys into ldap? [16:52] ScottK: i am aware of the bug channel.. i actually referenced that bug in my email thread link above [16:53] ScottK: hoping there is a fix [16:53] axisys: OK. [16:53] ScottK: thnc [16:53] ScottK: thnx [16:54] Chipzz: hmm.. it is already in the bug database .. so i guess i wait until they have a fix [16:54] Chipzz: thnx [16:56] axisys: If it's not already marked confirmed, adding a comment that you have the bug too and making it confirmed would be useful. [16:56] ScottK: ok .. i will do that right away.. thnx [16:58] ScottK: updated w/ comments [16:59] moin [16:59] guys need a few tips: gonna setup a virtualbox with ubuntu server over winServer 2k8. anything I should know before hand? [17:00] i need to setup a well lockdown anon ftp server.. anyone can point me to a link? [17:12] BUGabundo1: I am not sure if it will work for virtualbox, but ubuntu jeos is optimized for use in virtualization [17:12] ok [17:12] but why not Ubuntu-Server? [17:12] or is jeos similar ? [17:12] actually, it is server but with a somewhat tuned kernel [17:14] ah ok [17:14] will download it then [17:15] http://www.ubuntu.com/products/whatisubuntu/serveredition/jeos , I use it on vmware esxi product , but I am not sure if it will work well in virtualbox [17:15] the last one is hardy [17:15] http://cdimage.ubuntu.com/jeos/releases/hardy/ [17:15] no ibex [17:17] there's also no ibex server image [17:17] strange [17:17] you're looking in the wrong place ;) [17:18] link please! [17:18] can't see it in releases or cdimage [17:18] http://cdimage.ubuntu.com/ubuntu-server/releases/ [17:18] BUGabundo1: http://www.ubuntu.com/products/whatisubuntu/serveredition/jeos [17:19] http://releases.ubuntu.com/8.10/ubuntu-8.10-server-i386.iso [17:19] found it [17:24] jeos is now part of the server install [17:24] so no need for a seprarate ISO anymore [17:24] oh ok [17:24] jeos is just fancy talk for not installing extra cruft [17:24] yah [17:24] I know that [17:25] i remember when i install debian no a 32mb usb stick [17:25] incorrect: and for installing a different kernel [17:25] afaik [17:25] giovani, i don't know, I always build my own custom kernel, stock kernels aren't great for servers [17:25] incorrect: great or not -- it's part of the differentiator for JeOS install [17:26] so do I have to check some box on install? [17:26] my opterons have weird behaviour if i don't compile the kernel specifically for them [17:26] BUGabundo1: you want JeOS specifically? you're running in a virtualized environment? if so -- in the server installer, there'll be an option for JeOS [17:26] when you get to package selection [17:28] giovani: running on VirtualBox over Win Server 2k8 [17:28] 32 bits [17:29] ok [17:29] gonna run an internal linux server: LAMP, dovecote,postfix, jabber [17:29] '# Download the server ISO image, boot from it, press F4 on the first screen and select "Install a minimal virtual machine"' [17:30] oh, he's gone [17:30] back [17:30] IM crashed [17:31] If I start up a new Ubuntu Server instance with KVM, how do I ssh into it? [17:40] so do I choose F4 [17:40] and them minimal virtual machine? [17:40] giovani: ^^^^^ [17:46] BUGabundo: yep, I guess that works [17:47] doing so [17:50] a [17:51] filipe_xD: b [18:01] I'm trying to enable remote MySQL access and I have 1) commented out bind local host IP and 2) GRANT ALL ON dbname.* TO dbuser@'client_ip_address' IDENTIFIED BY 'PASSWORD'; [18:01] Still doesn't work [18:01] any ideas? [18:05] just a quick question [18:05] I choose PT language [18:05] but ended up with ENG keyboard [18:05] how can I change it? [18:20] it should've asked you during the keyboard setup [18:20] it did [18:20] on the beginning [18:21] right, and you didn't set it properly? [18:21] I did [18:21] but it is not correct [18:21] sounds like a bug [18:21] really? [18:21] well ... heh [18:21] nobody else uses server on other languageS? [18:22] of course people do ... [18:22] but I don't [18:22] and its not fixed? [18:22] lol [18:22] * BUGabundo looks at LP [18:22] and it may be a problem with your specific language [18:22] in the installer [18:22] I'll try to reconfigure console-setup [18:22] but without auto complete and the '-' anywhere to be found [18:22] its HARD [18:23] you can just find an image of a Us keymap [18:23] and then find the key you need there [18:24] http://www.saunalahti.fi/janij/blog/images/2007_feb_us_keyboard_layout.png [18:25] for a laptop over RDP, over Virtual Box? [18:26] that place is just echoing 'ยบ' for me [18:27] rdp? why would you be using that? [18:28] its a win server 2k8 hosting [18:28] even worse [18:28] it would seem that my password is not what I thought it was [18:28] cause it did not use the same key layout [18:28] so I can't ssh [18:29] grrr [18:29] wordaround it [18:29] typed on the cli the password to see what char it was [18:29] LOL [18:30] clearly starting fresh would be a better idea [18:30] I bet what happened was, the virtual machine is not emulating your keyboard layout [18:30] naa [18:31] maybe [18:31] if it isn't it's a bug [18:31] on VB [18:31] so your virtual machine is probably emulating a US layout [18:31] but that is SUN BTS [18:31] I can do what I want over ssh now [18:31] and I'll add a pgp key latter [18:31] so no more pass [18:33] now to setup dovecot [18:33] does it use PAM by default? [18:33] it uses whatever you tell it to use [18:33] I don't know which is default -- just look at the config [18:34] nano is not installed? [18:34] duh [18:34] yes it is [18:35] * BUGabundo warns: this is first ubuntu server install [18:35] Get:1 http://pt.archive.ubuntu.com intrepid/main nano 2.0.7-4 [298kB] [18:35] it is not [18:35] I guess the ultra-minimal jeos install doesn't include it [18:35] I don't use it ... so [18:35] at least with the minimal jeos it is not [18:35] yeah [18:35] gona try install some metapage [18:36] ubuntu-minimal already in [18:36] out of ideas [18:37] mysql remote access, anybody here able to help? [18:37] BUGabundo: ubuntu-standard [18:37] akincer1: mysql -h is your friend [18:37] giovani: yeah was going to try that nex [18:37] *next [18:37] is it too much overkill?? [18:37] sigh [18:37] I'm not starting from scratch [18:37] ubuntu-standard: [18:37] Installed: (none) [18:38] everything is as it should be for it work. [18:38] but it doesn't [18:38] BUGabundo: it includes nano -- but you already installed that [18:38] so you may have everything [18:38] http://packages.ubuntu.com/intrepid/ubuntu-standard [18:38] doing so now [18:44] ikonia: Still getting an access denied [18:44] as I was before [18:45] work done for today! going to the gym. thanks for the help giovani [18:48] nevermind, I figured it out [18:50] i see two ftp server setup on howtoforge [18:50] http://www.howtoforge.com/howtos/ftp [18:50] anyone has tried anyone of them? [19:12] I want to mount a users home from a server. SSHFS seems to be all the rage (people hate NFS apparently), but what is the difference between using SSHFS and SFTP? SFTP is what Ubuntu desktops use when you choose connect to server... ssh. [19:14] sshfs isn't supported in ubuntu [19:14] Not by default or not at all? The package is there, optional. [19:15] packages in 'universe' are not supported, and are available for you to use at your own risk [19:15] you'd be better served using nfs or samba [19:15] Not Supported as in not by default and if you have a support contract with Canonical it's out of scope. [19:16] Good points. [19:16] Deeps: Not supported by Canoncial != Not Supported [19:16] ## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu [19:16] ## team, and may not be under a free licence. Please satisfy yourself as to [19:16] ## your rights to use the software. Also, please note that software in [19:16] ## universe WILL NOT receive any review or updates from the Ubuntu security [19:16] ## team. [19:16] 'this repository' == universe, as seen in the apt sources.list [19:17] Yes. The "Ubuntu Security Team" is Canonical. [19:17] ok [19:17] For example there is zero difference in how much support clamav gets in the releases it's in Universe versus in Main. I pretty much deal with it either way. [19:18] There are packages in Universe that are well supported and ones that have zero support. [19:18] This is also true in Main, but the ratios are different. [19:18] Deeps: I get my support from the community. But when you said unsupported, I thought you ment didn't work at all. :P [19:18] ScottK: It's true that a lot of things are moving into main, especially for server apps. [19:18] AtomicSpark: that isn't what i meant at all, sorry [19:18] clamav of course for mail servers [19:22] what in main gets zero support? Some things are absolutely a lower priority than others, but that is different than no support [19:24] ScottK: ^ [19:25] jdstrand: I don't have an example handy, but I have run across packages that see very little love that are in Main. [19:26] jdstrand: One sort of example is that the Python transition was declared done in Main days ago and I just uploaded a rebuild for tdb today because it wasn't done. [19:26] ScottK: I can assure you that if there is a CVE assigned to it, we are aware of it and working towards getting it fixed (keeping prioritizing in mind) [19:27] oh, well I was speaking of security support [19:27] jdstrand: Absolutely. My comment wasn't really about security support (sorry for not being clear), but general package maintenance and support contract coverage. [19:27] ScottK: oh ok :) I may have missed part of the conversation. sorry :) [19:27] I was certainly less than clear. [19:27] heh [19:28] The "ENTIRELY UNSUPPORTED" bit about Universe really bothers me. [19:29] yeah. I saw that and didn't like it. I should probably be rephrased. Is there a bug on it? [19:31] Good question. What package would that be? [19:31] that's a good question. I bet mvo would know [19:32] Would you ask him please? I really need to get some $WORK done, but keep getting distracted by IRC. [19:50] is this the right place for questions about server features? [19:51] yes [19:51] Okay, I read the topic ;)..does ubuntu have any packages to implement an RFC-3161 time stamp authority? [19:53] Do you use adduser or useradd, and why? [19:53] i really don't know the answer on that question [19:53] adduser - it's pluggable [19:53] and, by default, it uses useradd in the end [19:53] And it creates the group and home. :P [19:54] By default of course. [19:54] ivoks, thats okay...it seems like its a very hard question to answer. i havn't had a lot of luck in my research [19:54] AtomicSpark: /etc/adduser.conf [19:54] AtomicSpark: tweak it to your liking [19:55] AtomicSpark: adduser --help is also useful [19:55] mmrnhrmn: that's about syncing time? [19:55] ivoks: commands without a userful --help are annoying. [19:56] AtomicSpark: Looking at man pages is often going to be more rewarding. [19:56] ScottK: fyi, I'm told it's apt-setup-udeb [19:57] jdstrand: Thanks. [19:57] ScottK: Of course. :) But some --help just tell you what the flags are without even saying what they *are*. [19:57] ScottK: But that's just lazy developers ;) [19:57] ivoks, its involved in digital signing..as part of signing a file, a time stamp is added to verify when it was actually signed [19:58] ah... i see [19:58] ivoks, used with a Certificate Authority its supposed to take care of the 'when', while the CA does the 'who' [19:58] so, it could be necessary for some high trust systems [19:58] ivoks, its part of OpenSSL, but I can't see how to implement it...i've learned a lot, but not enough [20:00] So, I have a small network and I want to set up SSO. However, manually entering all the LDAP entries would be a pain (and learning it in a live run isn't a good thing). Is there anyway that OpenLDAP can just pull unix accounts? For example, I just create everyone I want to be in the directory on the server using the adduser command and everything else is automagic! [20:01] migrationtools - Migration scripts for LDAP [20:03] but, true, ldap lacks good (like, easy to use) manager [20:04] with it, it would take over world in a storm [20:05] It's "in discussion" for jaunty. It looks like they want a better default setup. [20:05] that's something else [20:05] DIT [20:05] that's what's our supported tree structure [20:05] not how to manage it [20:06] well, python ldap library is quite good, so, someone just have to dig in :) [20:06] I see. Well we still need some decent cl or gui tools. Fedora is rockin' that. [20:06] there was nice tool [20:07] Using a text file is confusing for me because I don't know waht "defaults" to put in there and how it will look in the Personal Information GUI client thing. [20:08] directoryassistant? [20:08] And heh, eBox apparently keeps breaking. But yeah, I'll look into the migrationtool thing. I'm pretty sure I've seen a way to sync unix users -> ldap. [20:08] luma [20:09] gq [20:11] yeah, I would like some nice ldap tutorial, crash course myself ;) [20:11] The problem is, there is not a decent one that explains both client and server, and they all are different from eachother. :P [20:11] anybody, any tips ? [20:12] directoryassistant looks quite good for very basic account management [20:12] if ldap is that useful and good and whatnot, why isn't there a decent manual for it? :) [20:12] cemc: good = complicated to explain [20:12] I was thinking to have an address book for thunderbird:) [20:12] bacula is the best backup software in the world, but to hard to learn [20:12] cause it's so flexibile [20:12] psotfix's good and has good doc too ;) [20:12] same goes for openldap [20:13] cemc: but postfix isn't that powerfull as sendmail :D [20:13] it's powerful enough :-P [20:14] ivoks: hahaha, what? [20:14] the powerful/configurable ratio is higher as for sendmail :-P [20:14] heh [20:14] giovani: ? === Nicke_ is now known as Nicke [20:17] ivoks: did you really just say that sendmail is more powerful than postfix? [20:17] giovani: hehehe [20:17] ah, that... [20:17] triwial-rewrite EOD :D [20:17] trivial [20:17] I might want to get ahold of whatever you're smoking [20:18] :) [20:19] lat! [20:19] :) [20:19] that was the name [20:21] gq is also quite good === ewook_ is now known as ewook [20:30] Hi Guys on first boot after installing mail on Jaunty is see a piece of text that sends alarm bells ringing. It reads Info: If you have trouble with authentication failures, enable auth_debug setting. See http://wiki.dovecot.org/WhyDoesItNotWork is this deliberate or can it be turned off? === dantalizing is now known as zz_dantalizing === zz_dantalizing is now known as dantalizing [20:32] right, i've seen that too [20:32] maybe we should remove it [20:32] did you install dovecot-postfix package? [20:33] or mail task in installer? [20:33] window new hide [20:33] oops [20:33] ivoks: from a standard install I did tasks for ssh, lamp, mail [20:34] irssi! :) [20:34] davmor2: ok [20:34] mathiaz: i didn't check; does mail task installs dovecot-postfix now? [20:34] sry *_* not my keyb right now. [20:34] ivoks: no [20:35] ivoks: to do that - a MIR has to be written for dovecot-postfix [20:35] ivoks: we should not really be hard [20:35] ivoks: and then the mail-server preseed can be modified [20:36] davmor2: if you are interested in testing some new mail features, you could install dovecot-postfix package [20:36] ivoks: My plan is to test it :) [20:36] mathiaz: i see... i think we should do that [20:36] ivoks: oh? there's a pre-bundled pack of those two? [20:36] ewook: just configuration... detalis here: http://blog.init.hr/?p=3 [20:37] yay... early testers :) [20:37] :) [20:37] I love you! [20:37] weehoo. that was a nice feat :) [20:38] where do I get the latest jaunty image? [20:38] lol [20:39] cdimage.ubuntu.com [20:39] cemc: http://cdimage.ubuntu.com/daily/current/ [20:39] note that it might be broken :) [20:40] :) [20:40] maybe you should get alpha release [20:40] whichever is better to test dovecot-postfix on [20:40] http://cdimage.ubuntu.com/releases/jaunty/alpha-5/ [20:40] mathiaz: Since dovecot-postfix is a new binary in an existing Main package a full MIR isn't needed. [20:41] ivoks: Now that makes more sense I just got the same message after installing dovecot-postfix but at least now it is at an appropriate place and time :) [20:41] ScottK: hm - right. We could just ask a archive admin to move the package from universe to main. [20:41] davmor2: the message is well... stupid, if you ask me [20:42] we should remove it [20:42] on start, program shouldn't say that it might be broken :) [20:42] mathiaz: Generally. Or even just seed it and wait for them to catch it in component mismatches. [20:42] .......if it isn't :) [20:42] ivoks: now, when is the nice-figured SA/clam pack comming? ;) [20:42] ivoks: I agree :) [20:42] ivoks: No. Since all programs might be broken, all programs should have such warnings. [20:43] ScottK: on start? :) [20:43] ewook: Probably next release. [20:43] ivoks: I'm being sarcastic. [20:43] yes, probably next release... [20:43] seriously? [20:43] ewook: Next as in the one after Jaunty (Karmic) [20:43] that's the plan :) [20:43] ivoks: Are you coming to UDS? [20:44] ScottK: i hope :) [20:44] * ScottK too [20:44] 2h for a complete server setup then.. 1h install - add some stuff - 45min tweaking - done. [20:44] ewook: then do an image of it, and you're all set, right? :) [20:44] ewook: I've gone from a stack of parts sitting on a table to a server in production in less than 4 hours. [20:44] neato.. we need to start implementing ubuntu into our VPS-system for sure now. [20:45] ScottK: well, heh.. I'm not that fast :) [20:45] ScottK: we should expand postfix interface to master.cf [20:45] cemc: lol. [20:45] ivoks: The script I did could certainly use more flexibility. [20:46] ScottK: it's amavis centric, right :) [20:46] ewook: It started as a one hour maintenance window to replace some old hard drives and then went badly wrong, so I didn't have extra time. [20:46] ivoks: Yes. [20:46] ivoks: I had the amavis docs in hand when I wrote it. [20:47] ScottK: that's nice working indeed. Think it took me 5h for a Centos-install up and connected. [20:47] had help setting up the cables tho :P [20:47] Cables weren't an issue here since there had been an existing box that went sour. [20:48] My wife wasn't happy to find out her new computer was delayed though. [20:48] hahaha [20:48] thank god this was at work - and I am not married.. If I did marry - it would be a tech I'd marry... [20:49] ubuntu-server; makes your wifes lives easier [20:49] life [20:49] bah [20:50] english. [20:50] ewook: I'm a consultant and for some of my stuff I have a small data center (4 servers) in the basement. [20:51] ScottK: I eny you.. I don't have a basement since I live in an apartment :P [20:51] davmor2: if you find any errors or have suggestions, let us know [20:51] envy even [20:51] ivoks: will do [20:53] ivoks: hrm, do you have the conf-files on the web somewhere (open, so I don't have to crack open a .deb :P ) [20:53] hi all, has anyone tried setup the RHCS on 8.04.2? [20:54] cemc: there is a free book about LDAP from IBM [20:54] ewook: eh... [20:54] Shanix: yes [20:55] ewook: grab the source :p [20:55] search on http://www.redbooks.ibm.com/ [20:55] JanC: thx, will do [20:55] Shanix: any problems? [20:55] ivoks: I'm not used to grabbing the source.. this be the second time I get that reply and, I don't feel less stupid :P [20:56] http://www.redbooks.ibm.com/Redbooks.nsf/RedbookAbstracts/sg244986.html [20:56] ewook: the package containes one configuration file for dovecot and after installation runs postconf [20:56] it refers to IBM's own LDAP server, but there are some chapters that explain LDAP too [20:56] aah. [20:57] ewook: so, you should really get postinst file from it [20:57] ivoks: true. boy, I need to get home and try it out :) [20:58] lol [20:58] mathiaz: evolution crashes on me when i try connecting on exchange [20:59] mathiaz: but i found that it's not evos problem, but openchange lib [20:59] mathiaz: or, misconfigured exchange... [20:59] i have to found another exchange enironment... [20:59] *shrugs* [20:59] that's an un-holy marrige. [21:00] well, it's not [21:00] that's a very important milestone [21:00] yes - that's why it's a unholy marrige :) [21:00] Gargoyle: hmm... kix? [21:00] if openchange gets cosy with exchange... we would have open source replacement for it [21:01] wihtout additional plugins [21:01] for outlook [21:01] that would be nice, really nice.. [21:01] a drop in replacement [21:01] but if I hadn't changed employee, you would have taken me out of work :) [21:01] ewook: kix? [21:01] not me; i'm not doing anything on it :) [21:02] Gargoyle: kixtart? [21:02] Gargoyle: or you just have the same nick as someone on the forum over there :) [21:02] Ahh, no - not clue about kix [21:03] s/not/no [21:03] Gargoyle: my bad then :) [21:03] np. :) [21:04] BUt I am the original! :-) [21:04] :P [21:04] That's what everyone says :P [21:04] I have the email address to prove it! [21:06] lol :) [21:09] How are all the ubuntu server peeps? Not been talking in here much lately. [21:09] ivoks, yes, I have create a bug yesterday, if you don't mind take a look and tell me if it's reproducable on your side as well [21:09] ivoks, https://bugs.launchpad.net/ubuntu/+source/redhat-cluster/+bug/338047 [21:09] Launchpad bug 338047 in redhat-cluster "soft lockup - CPU#0 stuck for 11s! [clurgmgrd:4587]" [Undecided,New] [21:10] i've seen that [21:10] bug [21:10] not in production [21:12] hm... 'dlm: Can't create listening comms socket' [21:12] ivoks, also, everytime when the system boot up, it always said, waiting for fenced to join the fence group until it times out, is there anyway to prevent that? [21:13] Shanix: when both are up it still says that? [21:13] ivoks, yes [21:14] Shanix: don't ever use .local domains [21:14] if they don't connect to each other when both are up, there is some name resolving issue [21:15] using .local could do that [21:15] since .local in ubuntu is like on mac, reserved for zeroconf/bonjour [21:15] ivoks: Except doesn't that use 5353? [21:15] ivoks, um... even if I defined the IP in the /etc/hosts ? [21:16] Shanix: yes [21:16] But the advice not to use .local is good. [21:16] ivoks, ok, I see. let me try again [21:18] ScottK: err...? :) [21:19] ScottK: mdns is used for name resolving, and that's part of avahi/bonjour/zeroconf/whatever [21:47] Out of curiosity does Ubuntu not include the mail option in ebox? [22:13] I don't think it ever got packaged. [22:14] I remember looking at a package early in the Intrepid cycle, asking lots of questions, and then I don't know what happened after that. [22:19] when installing dovecot-postfix, it changes main.cf ? [22:20] eh... [22:20] it adds custom configuration [22:20] if you didn't have configured home_mailbox, it will add it [22:20] shouldn't that be commented a bit in main.cf ? maybe a warning or something? [22:20] if you had it, it will change it [22:20] like in the dovecot-postfix.conf in /etc/dovecot [22:21] cemc: man postconf [22:21] postconf can't write comments [22:21] it's not like we are editing main.cf [22:21] oh, got it [22:21] makes sense :) [22:22] * cemc would've edited main.cf ... [22:22] :) [22:22] ScottK: applications use something like nsswitch, they don't know if a name was resolved through /etc/hosts, mDNS or DNS [22:22] (nsswitch being part of glibc) [22:22] Go look at the amount of .local traffic on the root DNS servers. It's pretty broken architecturally somewhere. [22:23] * ScottK has forgotten the details. [22:23] it's apple vs. microsoft :) [22:24] but, hm, yes... we could backup main.cf before running postconf [22:25] or something... [22:25] so one would be able to do a quick diff or something to see what exactly changed [22:26] fwiw on removal, we clean up dovecot specific stuff from postfix [22:26] we don't leave postfix in non-working situation [22:27] anyway, feedback is welcome [22:27] on mailing list, as a comment on blog post or here on irc [22:28] bugs on lp (source: dovecot) [22:28] i'm going to close the lid now... it's too late here [22:28] nite nite [22:28] night [22:32] is there any faster and lighter wiki than mediawiki? [22:33] I kinda have a slow machine and mediawiki moves very slow at times === dantalizing is now known as zz_dantalizing === zz_dantalizing is now known as dantalizing [22:43] kirkland: ping [23:09] So I've followed the ubuntu server guide to the t and I can resolve hostname, but not hostname.example.com nor example.com . I have my search and domain (resolv.conf) to example.com and my bind files match the ones in the guide. What could be wrong? [23:20] figured it out, apparently bind6 doesn't like the .local domain. Silly Windows Server habbits. :P [23:23] .local is currently a non-advised technique by Microsoft, btw [23:38] I figured as such. [23:51] To get dhcp to add the least hostnames to my dns master, do I use ddns? Maybe, ddns-update-style? [23:51] * AtomicSpark man's === MatBoy_ is now known as Matboy