[00:33] my /dev/sdb suddenly became /dev/sdd and now when I try to reassemble my RAID5 md device it thinks sdd is a spare and not active. how can I tell it to reassemble so they're both active? [00:33] hello, I think one of your update servers has been compromised [00:34] updating complains about your signatures being invalid [00:34] the server is ar.archive.ubuntu.com [00:34] W: Error de GPG: http://ar.archive.ubuntu.com jaunty Release Las siguientes firms fueron inválidas: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key [00:34] (Translated: GPG Error: .... The following signatures were invalid: ..... [00:41] can anyone confirm the system being compromised? [00:42] is there a separate RAID help channel? === Turl1 is now known as Turl [00:44] tmh__: assuming you're using linux software raid (mdadm), you could look for a channel specialising in mdadm (#mdadm, maybe?) [00:45] Turl: no errors polling ar.archive's hardy repository, it may be a glitch with jaunty? [00:45] Deeps: no BADSIG there? [00:45] or maybe my GPG broke then? [00:45] maybe [00:46] nope, no #mdadm. any idea on what network? [00:46] tmh__: nope, google may be of more assisntance though, there are a bunch of linux raid wikis which are very useful [00:46] well, I've tried googling for a day now [00:46] helped me when i had a bunch of raid disks repartitioned inadvertently [00:46] (the linux raid wikis, that is) [01:00] so will it fuck up my raid every time the drive letters change? [01:09] any way to define my RAID component arrays by UUIDs instead of drive letters? === dantalizing is now known as dantalizing|afk === dantalizing|afk is now known as dantalizing [03:15] what do you guys hav running on your servers? [03:18] . . . [03:18] ehrm [03:18] server stuff? [03:28] Nafallo: what specific? [03:31] Ubuntu server stuff [03:39] come on i am serious [03:39] like apahce, etc [03:40] yes. apache etc. [04:24] lighttpd, postfix, opensshd [04:24] dovecot [04:38] Nafallo: rsnapshot [05:50] New bug: #339061 in samba (main) "package samba-common 2:3.2.3-1ubuntu2 failed to install/upgrade: " [Undecided,New] https://launchpad.net/bugs/339061 [07:08] Hi. I have a 32bit install of ubuntu intrepid ibex on a live server with the usual LAMP, but the server is an opteron with 8gb of ram, and I'd like to reinstall with a 64bit version, can I just backup my mysql dbs etc as usual? [07:09] psteyn: sure, why wouldn't you be able to? [07:09] didnt think it would be a big deal, just havent migrated from 32bit to 64bit yet..wanted to make sure before I get started [07:09] but thats good. :) [07:10] I don't think the mysql backup db is any different [07:10] and backing up mysql is just /var/lib/mysql and /etc/mysql stuff basically? [07:10] no ... [07:10] you use mysqldump [07:11] not something you just run -- might need to get familiar with it [07:11] ok [07:11] yeah, i know how that works..just thought if im gonna do a complete reinstall I might just move the folders instead of using the dump [07:12] but no worries, will dump :] [07:12] nope, that'd be a messy way [07:12] mysqldump is fully portable, and clean [07:12] cool, ill do it the right way then [07:12] good luck :) [07:12] Thanks :) [07:38] hi [07:39] hi [07:40] i would like to set up ubuntu server domain controller which has no internet [07:40] which is for windows clients [07:41] so far, i don't see any problems with what you want to do... do you have a question about it, mib_pq35h3hh ? [07:42] so how can i do without internet [07:43] ? [07:43] well, you need the samba packages, you can get those at packages.ubuntu.com [07:44] without internet :) [07:46] what i mean is, on a computer that has internet, *like the one you're using right now, mib_pq35h3hh *, you download the packages and transfer them to the server [08:04] thereis tool for that [08:04] just cant remeber now what its called [08:05] okok [08:05] mib_pq35h3hh: http://ubuntuforums.org/showthread.php?t=42862 [08:05] one howto for it. but i think there was even easier wau for it [08:07] mib_pq35h3hh: http://blog.mypapit.net/2007/03/put-apt-get-repository-on-dvdcd-ubuntudebian.html [08:08] mib_pq35h3hh: last one is aptoncd .. that is probably easiest way [08:09] there are only a few packages for samba, personally, i would just transfer the .deb's by hand, and do a little dpkg -i to get the job done [08:10] rdw200169: that's messy [08:10] well, aptoncd requires you to install the packages on the host, b/c it uses /var/cache/apt/ to find files [08:10] of course, you could do the old --download-only [08:10] but who wants to do that? [08:11] especially for a one-off situation like this, just seems faster (as opposed to messing with aptoncd) to just d/l the packages and throw them on a thumbdrive right quick [08:12] now that i think about it though, everything he needs may be on the ubuntu server cd. don't quote me on this though, i'm not sure [08:12] i just know that samba is a tasksel option during the install [08:12] isnt ssh client in default install [08:13] yes, the server too [08:13] like, openssh-server [08:15] just started to think that why i nhell someone need install samaba to machine which hasnt internet conenction.. i mean easiest way is just change cables for few minutes [08:15] hi [08:16] rdw200169: hey [08:17] simplexio: [08:17] mib_pq35h3hh, i suppose you've caught our long argument over this matter [08:17] simplexio: i know APTONCD but it is not ok [08:17] coz i dont know how to do on CLI mode [08:18] i dont wanna waste my CD everytime no R+W CD in hand [08:18] then do it my way (score one for me!) [08:18] what way? [08:19] scroll up, i described it in detail [08:19] i m now using from windows XP [08:19] how can i download and do that? [08:19] you can download packages as .deb files from packages.ubuntu.com [08:20] like giovani said, its messy. but, it works [08:20] yep [08:20] do it however you can [08:20] but if possible -- use apt [08:20] rdw200169ၚ: i h ave tried downloading .deb files from packages.ubuntu.com [08:21] rdw200169: but I have never been successful in installation coz there are so many nested dependencies [08:21] mib_pq35h3hh, true... [08:21] yeah [08:22] which is exactly why that's messy [08:22] and not recommended [08:22] rdw200169: so how can download to get all in one complete even for one pacakge called squid3 or sth like that [08:22] back in the day, when i was overseas and working from a internet cafe (really bad situation) i would have to make a list of the packages i needed [08:22] then spend a few hours following dependencies hoping i got everything i needed from packages.ubuntu.com [08:23] rdw200169: yes. i have list [08:23] arr [08:23] if you can get a printout of the packages you have, or something like that (like a copy of dpkg --get-selections) you can cross reference that [08:23] with dependencies mentioned on packages.ubuntu.com. then just get what you don't already have [08:24] so if u install that so many .deb files, how did u install? [08:24] dpkg -i *.deb [08:24] so put all in one folder before running that? [08:24] sometimes it gets screwy and comes back with missing dependency errors [08:24] but i run it a few times and i'm good [08:24] yeah [08:25] mib_pq35h3hh: I really advise against this [08:25] ok. suppose my downloaded folder is squid, command is dpkg -i /squid/squid3.deb?? [08:25] fine. come up with a better solution [08:26] why can't he download the repository somewhere? [08:26] not everyone has endless supplies of bandwidth... [08:26] giovani: u all said the only place is packages.ubuntu.com [08:26] mib_pq35h3hh: what? I didn't say that [08:27] the thing is i have no internet at my home ubuntu server. my home is without internet [08:27] rdw200169: then they should find a local isp or something that offers a repository, I know many that do [08:27] that was me, and i didn't mean it's the only place to get packages. its just the only place to get *individual* packages in a simple manner [08:28] in my work i m using internet on windows XP and which is under monitoring [08:28] what, and drag the server there? i doubt an ISP would allow that! [08:28] so i can't install virtualbox in my XP. [08:28] no, an isp might not count any download caps wthin their network though [08:28] so i can't do APTOnCD or APTonFLash drive or whatever [08:29] how did you get ubuntu in the first place? [08:29] from freeshipment [08:29] ah [08:30] from shipit.ubuntu.com [08:30] ask someone to ship you a few dvds of the repository :) [08:30] i heard DVD has only multiple languages [08:30] not pacakges of all server compoents [08:30] that's not what I meant [08:30] nevermind [08:31] what packages do you need for samba === sloopy is now known as Guest38755 [08:32] the regular ubuntu server cd has: samba, samba-common, samba-tools, smbclient (and all their dependencies) [08:32] actually all i wanna is to build fine domain controller like windows' Active directory [08:32] it's just not that simple [08:32] some said LDAP or OpenLDAP is better that SambaPDC [08:32] samba just recently started supporting that [08:32] oh jeez, you're talking about ldap and all that [08:32] and kerberos [08:32] coz i m thinking of large clients support [08:33] large clients? [08:33] why would a huge network not have internet access though? [08:33] about thousands clients [08:33] i take it you wanna do Single Sign on too [08:33] ... [08:33] ur question make sense [08:34] but if my testing in my home is ok, i can trust myself to apply for that Linux admin's job [08:34] without having such handling many clients experience, how can i win? [08:34] i'm gonna have to go with giovani on this one. hook that sucker up to an internet connection or something. you're gonna need *lots* of packages [08:35] mib_pq35h3hh: maybe you can find wireless internet access near your home [08:35] i m wondering why Opensuse or Fedora DVD has all in one complete server components without having to download again [08:35] ? [08:36] because they don't offer nearly rhe number of packages ubuntu offers [08:36] like known Squid, mail, Firewall, DNS, with their own DVD alone it is ok [08:36] I don't think fedora or opensuse ship free dvds do they? [08:36] yes. i dont deny ubuntu has many offer of packages [08:37] but it is nothing without internet [08:37] well honestly [08:37] we can buy them easily. [08:37] mib_pq35h3hh: i dont see problem here, i mean you can share your internet connection in 1minutes, another ethernet controller cost anout 10e and after that testing much easier [08:37] not many people deploy linux without any internet access whatsoever [08:37] i wish i could have internet. brothers [08:38] but so so expensive [08:38] here [08:38] http://wiki.ubuntu-id.org/DistribusiDvdReposUbuntu [08:38] it seems some local ubuntu groups distribute DVDs [08:38] in areas that don't have internet [08:38] maybe you should look into that for your local area [08:38] find your local ubuntu user group --- maybe they can make dvds for you [08:39] ok. my country is lonely island which nobody wanna help. ok i will check it [08:39] what country are you from? [08:40] myanmar [08:40] i dont understand languages on http://wiki.ubuntu-id.org/DistribusiDvdReposUbuntu [08:40] that's indonesian [08:43] maybe you can find a local Myanmar linux group [08:43] that can help you get some repository dvds made [08:44] hey folks [08:52] hey [08:55] yes [08:55] i'm a windows sysadmin who'se just learning linux, and a friend of mine has asked me to help him build a network for his small business [08:55] Doble: i m MCSE too [08:55] Doble : but shit in ubuntu world [08:55] cool [08:56] heh, i dont have an MCSE, but I've been a windows sysadmin for about 3 years [08:57] he basically wants some simple network stuff like DHCP and DNS, was wondering if anyone had any tips for me [08:57] key things are a file server [08:57] needs a lot of storage [08:59] how can i know that indonesian language? [08:59] mib_pq35h3hh: try using google translate [08:59] aww [09:00] Doble: unlikely they'll have an indonesian to burmese :) [09:00] giovani: hey dude, are u kidding? coz u r ubuntu guru? [09:00] giovani: ah :( bugger [09:01] mib_pq35h3hh: what? yes ... that was sort-of a joke -- in the scheme of world affairs, both languages are pretty obscure -- unlikely google translate would translate between the two [09:01] you are actually right .. burmese isn't listed [09:01] that sucks [09:02] btw, how can i change my nick? [09:02] /nick newnick [09:02] i m using mibbit.com web iRC chat === mib_pq35h3hh is now known as naymyowin [09:02] ok thanks === naymyowin is now known as Tommy_nmw [09:03] thanks [09:04] u all are geeks [09:04] in ubuntu hardy server, i found many spelling errors [09:04] shy on testing team [09:18] hey [09:18] what r u all doing? [09:20] !offtopic | Tommy_nmw [09:20] Tommy_nmw: #ubuntu is the Ubuntu support channel, for all Ubuntu-related support questions. Please use #ubuntu-offtopic for other topics. Thanks! [09:24] i can't find it [09:25] by using mibbit.com [09:26] http://www.mibbit.com/chat/# ( please look at) [09:26] i can't join #ubuntu [13:44] I guess he's gone. He couldn't join #ubuntu because he was banned. [13:55] Actually, we ban all proxy/web chat users. [14:37] I cant mount raid0 on ubuntu nor can i boot XP off it [14:49] ? [14:54] are there any major gotchas in moving an ubuntu server install from a vmware to a real box? [14:54] besides grub, net, partitions :) [14:54] never tried that.. [14:55] I've installed a hardy in a vmware, got it all configured, now it's ready to replace FC4 on my server [14:56] should the NIC be detected automatically, or do I have to delete something from /etc/udev/ ? [14:56] like 70-persistent-net.rules [14:56] delete its content [14:57] hm... initramfs [14:57] good point. what else? [14:57] right... check /etc/initramfs-tools/conf.d/resume [14:58] imho, that should be it [14:58] we'll see shortly ;) [15:02] that persistent-net will be regenerated on boot ? [15:03] yes [15:05] btw, I tried dovecot-postfix a bit yesterday, [15:05] specifically the managesieve part, with thunderbird addon, [15:05] it works great, but there were times when it couldn't connect to it, just timed out [15:06] have to test it some more [15:06] I mean the sieve add-on in thunderbird couldn't connect to the managesieve on port 2000, I saw packages going back and forth, but in the end it timed out [15:07] i noticed that too with thunderbird plugin [15:08] when it connects, it works without problems, even the on-the-fly syntax checking [15:09] that's awsome feature :) [15:09] i'll test it with kmail (it has native support for protocol) [15:09] found one other thing (didn't dig deeper tho), [15:09] so that'll help in point the problem [15:10] when I tried to filter a mail and deliver it to another folder, [15:10] it gave an error that the Mailbox doesn't exists, [15:10] I have one other setup with dovecot LDA and sieve, [15:10] and there the folder gets created automatically [15:10] and the mail delivered there [15:11] inside ~/Maildir/.folder [15:11] we are talking about extensions? [15:11] like username+folder@domain? [15:11] nope [15:11] sieve filter [15:11] i see [15:11] I don't know how exactly is the policy, [15:12] one has to create the folder manually from say thunderbird through imap, [15:12] or it should be created automatically [15:12] by dovecot [15:13] imho, automaticaly isn't quite nice... [15:13] i don't want dovecot to do mkdir in my home [15:13] ;) [15:13] what if i make an error in sieve script? [15:13] true [15:14] i'll have to check how that was handled [15:14] I actually thought of that, but I like not getting a delivery error ;) [15:14] i didn't consider that use case at all [15:14] in fact it's ok because the mail remains in the mqueue i think [15:14] and there's a clear message in the logs [15:15] i'm not sure it stays in the queue [15:15] since, postfix delivers to dovecot, which then fails [15:15] oh, I was wrong, [15:15] it delivers it to the INBOX [15:15] after the error [15:16] that sounds quite nice [15:16] yep, sorry about that [15:16] good, finally some feedback :) [15:17] one more thing then, [15:17] the default sieve filter directory is /home//sieve [15:17] yes [15:17] wouldn't it be better if it were .sieve ? [15:17] so it's a bit hidden [15:18] i was thinking about that too [15:18] but then, maybe somebody wants to update it via ftp, [15:18] and ftp could be set up not to show . files [15:18] :) [15:19] i think 'sieve' is ok... we have 'mail', which could be classified as the same type of directory (nice, good stuff, but maybe should be hidden?) [15:19] but one could argue that the majority will update it via some sieve client, connecting to the manager... [15:20] so they really don't have to see that sieve directory especially if they could delete it by mistake ;) [15:20] i expect majority to upload it via ftp [15:20] people will find howtos on net and then just copy paste it in a file [15:20] and then upload it via ftp/sftp [15:21] mhm [15:21] maybe in time, if we add support for managesieve to evolution and webmail, maybe then clients would have bigger share [15:21] it's hard to tell [15:21] yep [15:22] i'm not sure if any distribution does this by default [15:22] i would think that most of them (if not all) bet on procmail [15:23] I was using maildrop before I heard about dovecot LDA and sieve [15:23] yeah, maildrop is popular too [15:23] but I have virtual users from database, etc, so it's a bit more complicated [15:23] ut with dovecot it all got a lot easier ;) [15:24] hehe [15:24] i have one setup with part of the users in sql and part in ldap [15:24] one thing that concerns me a bit tho [15:25] dovecot's "time moved back, I'm gonna kill myself" policy :) [15:25] :) [15:25] use ntp, not ntpdate [15:25] ntpdate does a very bad thing [15:25] it changes the clock [15:25] I know, I am using ntp [15:26] but still ;-) if dovecot's tied in to postfix's sasl, delivery and whatnot... :) [15:26] heh... [15:26] hm... that gives me an idea [15:26] dovecot-postfix should depend on ntp-server [15:26] so that we take care of that stuff... [15:27] or, recommend/suggest it [15:27] yep, should be pretty mandatory because of this [15:27] at some point, when upstart gets fully functional, upstart will take care of that [15:28] I think under 5 seconds dovecot gives a warning, and above it it just dies [15:28] but we are talking about upstart for couple of years now and i think we might never see it :) [15:28] :) [15:31] so, basically, everything is ok with our dovecot-postfix integration [15:31] ? [15:31] except for those preferences, which we can't set up for everybody :/ [15:32] can't say for sure after 20 minutes of testing ;) did that yesterday [15:32] :) [15:32] ok [15:32] have to test it some more, but it appears to be ok at first glance [15:33] ok... [15:34] well... it's time to close the lid and move away from computer for today... [15:34] take care [16:05] how do i enable digest-md5 authenication on dovecot [16:05] getting the following error [16:06] Fatal: auth(default): DIGEST-MD5 mechanism can't be supported with given passdbs [16:48] howdy [16:49] I need to install the 32bit version of the pam libs on my 64 bit server. [16:49] can I do this with apt, or do I need to copy them from another distro? [16:49] another 32bit server that is [16:57] samba question: How to set guests to read (globally on all shares) and users to write? The following config seems like it should work but does not http://pastie.org/410272 [16:57] before anyone mentions it, i have asked on the samba channel and nobody is around. figured some of you guys may well know [17:26] Do I need to add a host principle to kerberos for each host on my network that might have a user try to authenticate? [17:26] roy_hobbs: yes [17:26] I've set up Kerb5 but I'm having trouble getting it to work with PAM on the client [17:27] kinit works fine from the client though (without a host princ) [17:27] roy_hobbs: eh, I may be wrong :) [17:27] =) [17:27] roy_hobbs: the pam-auth-config utility can help configure pam and kerberos [17:28] actually, to be more specific. I'm able to authenticate and log in via kerb if there is a kerb user with the same username as one already on the client. [17:29] sommer: what packages is that part of? [17:30] when i tried to log in from gdm using a kerb5-only username, I got a message saying couldn't set group, authentication failed [17:30] "cannot set your user group; you will not be able to log in. contact your system administrator" [17:31] roy_hobbs: which release are you using? [17:31] intrepid [17:32] roy_hobbs: woops it's pam-auth-update [17:33] roy_hobbs: that should give you a menu listing authentication options [17:34] sommer: hmm, doesn't mention anything about kerberos [17:35] What I did was create a common-krb5 with the line "auth sufficient /lib/security/pam_krb5.so use_first_pass" [17:35] the did @include common-krb5 in pam.d/gdm and pam.d/login [17:35] roy_hobbs: do you have these packages: krb5-user libpam-krb5 libpam-ccreds [17:36] yup [17:36] roy_hobbs: and your /etc/krb5.conf is configured? [17:37] yeah with my realm, both kerb servers, and admin server [17:37] it must be because kinit works just fine [17:38] roy_hobbs: ya, I'd agree with that... do you have auth-client-config installed? [17:39] yeah i just ran it [17:39] it asked me if i wanted to overwrite the common-* files [17:40] The profiles I was able to enable are 1) Unix auth, and 2) ConsoleKit Session Management [17:40] That's where i'd expect to see kerb [17:41] roy_hobbs: you might try reading through: http://doc.ubuntu.com/ubuntu/serverguide/C/kerberos.html#kerberos-linux-client [17:42] That's where i started [17:43] would it be possible to get someone on 32 bit ubuntu to upload a few libraries for me so I can grab them? I need libsepol, libselinux, and the pam_unix.so and pam_nologin.so libs [17:46] roy_hobbs: mmmm... when I do sudo pam-auth-update Kerberos is listed [17:46] roy_hobbs: you have libpam-krb5 installed? just to double check [17:47] roy_hobbs: also you should see messages in /var/log/auth.log related to kerberos [17:47] yes [17:47] libpam-krb5 is there [17:47] I do, but i'm not sure how to interpret some of the errors [17:48] roy_hobbs: can you pastebin? [17:49] yeah i'm going to, but now i'm getting something different, lemme take a second to recreate what was going on before [17:58] ah man did he leave? [18:07] kirkland: Was the directory for the private-home-directory unencrypted folder moved to ~/.Private ? [19:15] If I install the 9.04 alpha version now - can I update along the way until the release version without reinstalling? [19:20] Yes. [19:55] i am planning to install asterisk on my ubuntu server.. i just got a fxs/fxo card.. which version do I install? 1.4.x or 1.6.x ? [19:57] axisys: that would be a question for #asterisk [19:57] giovani: asking there too.. thnx :-) [19:57] axisys: ubuntu only offers the 1.4 branch packaged, 1.6 is brand new [19:57] I don't know anyone running 1.6 yet [19:58] * Nafallo thinks giovani tries to say "1.4" :-) [19:58] giovani: i see.. i wanted to go with 1.4 but this guy in asterisk chnl suggesting 1.6 .. [19:59] axisys: well that's his recommendation -- ask him [19:59] this is really not the channel for this conversation [19:59] sure [21:01] * dazman attempt to use mini.iso netinst for a server [21:07]