[00:02] hey guys, (the noob back :)), i have a general question about where to mount my share dir for the mass my files on my raid. I know it's probably just a personal preference but is there a typical location to mnt my raid to share it on my home network? [00:04] default mount location for ubuntu is /media/yourdrive [00:05] nfs and stuff like that, I'll do an /export/home or something like that [00:06] krutch.local:/home 2.4T 1.4T 911G 60% /export/home [00:06] 8) [00:08] when i set it up i can make it where my mac see //servername/dirname ? Because I have all my music mapped to a certain path and I don't feel like repoint over 6.5k worth of music (and no that isn't 6.5k memory size, that's number of music files) [00:21] IMO you ought to use /srv/nfs or /srv/ [00:22] Since /export is not part of the FHS 2.3. [00:29] Yeah, /srv/foo or /mnt/foo rather than /foo [00:29] I'm not up on the specs for what goes on in /media [00:31] hads: /media is for removable media; /mnt is for temporary mounts [00:31] e.g. "argh, let me just mount one of the RAID1 nodes directly with -o ro for some debugging" [00:31] *temporary sysadmin mounts, that is [00:32] Yeah, I though /media was mostly for removeable stuff [00:32] if it is for you on your box, you can make it /mydamnmount for the fhs matters :) [00:33] True. Though /srv would be the correct place. [00:37] i'm alittle confused with the /srv? was that directed to me? [00:41] oh, so it should be /srv/dirname ? then I can share it as //servername/dirname ? [00:51] jlc: you might find that things like updatedb.conf default to doing the Right Thing if you follow the FHS. [00:51] For example, updatedb skips all of /media and /mnt by default. [00:52] But if you mount a removable drive at /im-in-a-hurry-dammit, updatedb will read the entire drive. [00:52] lol [00:52] yeah [00:52] Just that bit me on the arse recently because another admin was "clever" and made backup mount points in /b/ and /bb/. [00:54] sounded like sparky was doing it at home, so it didn't matter [00:54] i use export/home at home from my solaris days [00:54] yea, it's for my home server [00:54] just like calling partitions slices [00:54] :) === rgreening_ is now known as rgreening [01:02] is 1024MB of ram enough for a computer to run ubuntu hardy server? [01:02] thinking of buying: DELL GX280 SFF P4 3.4GHz 80GB [01:02] is that enough to install nagios on? [01:04] kansan: there's no generic advise on specs -- it all depends on the load on the server [01:04] advice* [01:05] nagios will run on 64 or 128 MB of ram probably ... not that I'd recommend it for production [01:05] giovani3: you wouldn't recommend nagios for production? [01:05] twb: read what I said [01:05] twb: I was clearly referring to the amount of ram [01:05] giovani3: you said "it"; it's not clear which "it" you're- OK. [01:05] It wasn't clear to me. [01:05] heh [01:06] nope, nagios is nice for production work, I've been meaning to finish up that book, "Pro Nagios 2.0" [01:06] other things got in the way mid-read [01:06] kansan: 1GiB of RAM is adequate for *some* roles. It depends what the server will be doing. [01:06] hey i have a quick question, what is the command to see what php version i have installed? [01:08] twb, i want to install nagios on it and use it to monitor production websites [01:08] kansan: and will the host be doing anything *other* than nagios? [01:08] and also, to runa configuration management server called chef [01:08] mister2: php -v I presume [01:08] that has apache as a front end [01:08] thanks, will try it [01:09] mister2: in general, -v is used to print the version of applications -- when in doubt, read the manpage ("man php" in this case) [01:09] dpkg -l | grep php [01:10] what would my ideal box specs be if i want to run: nagios, chef-server, apache (only to connect to chef, a ruby based configuration management server) [01:12] kansan: I haven't done that before, but I'm guessing 1GiB would be adequate. [01:13] kansan: usually it's easy to stuff in up to 4GiB, so you have an easy upgrade for RAM if that turns out to be inadqeuate. [01:13] 1GB should be plenty to start at least ... unless you're monitoring 100+ hosts in nagios [01:13] no i'm just monitoring like 10 [01:13] you'll be more than fine then [01:14] however, apache can be a ram hog [01:14] ok good to know [01:14] I'd advise, honestly, against running apache just to provide yourself web management [01:14] but, obviously that's up to you [01:15] web management is eeeeevil [01:16] Even Windows have MMS instead. [01:16] yeah, except windows isn't any better [01:16] it renders all of the management consoles using html :) [01:17] jle and twb: I didn't understand the deal with updatedb.conf, and how that plays with FHS [01:34] sparky_: don't worry about it [01:35] sparky_: it's just big boys talk [01:35] I should say "grown up" talk ;-) [01:35] i'm trying to learn that too, lol [01:36] Hey all, How do I stop mail to root@localhost its messing up my postfix stats, it seems to be triggered every time a cron job is fired.....??? [01:37] so for setting up a home file server mnt my raid in /mnt or /srv would be better? [01:46] trentster: fix /etc/alias [01:47] trentster: i.e. add an alias root: trentster@example.com [01:47] trentster: note that cron only emails you if something is broken [01:48] twb, its showing me that the import of awstats log file completed., its starnage beacuase on the cronjob entry at the end of the line i have ">> /dev/null 2>&1" [01:49] That should be >, not >> [01:49] Not that redirecting all output from a crontab entry is a good thing... [01:49] hmm ok let me change it and see [01:49] It'd be better to use --quiet or similar. [01:50] twb, thanks, I dont have much experience with cron entries....to use "--quiet" do I just apend to end of the line....eg my cron entry is as follows. [01:50] "*/5 * * * * awk 'NF>5{for(i=1;i<=NF;i++){if(i>8&&i+9 /var/log/xferlog1 >> /dev/null 2>&1" [01:51] Ow. [01:51] it would probably be better to place the awk statement into a script file I gather [01:51] it seems to only be emailing STDERR [01:51] which is fine [01:52] no? [01:52] giovani3, I dont want anything going through postfix logs as it screws up my awstats [01:53] yeah, I can't even follow what's going on in that code :) [01:53] too dense for 10pm [01:54] lol [02:04] giovani3, ok the mail from that line says "/bin/sh: -c: line 0: unexpected EOF while looking for matching `'' any ideas how to silence this? [02:04] What is the best groupware i can install on ubuntu ? [02:04] trentster: well, that's an error -- so fixing it would silence it, or you could stop sending errors to yourself [02:05] giovani3, I know, I just dont know how to fix it.......I did not write the awk statement.....so I dont know why its giving an error, It is working and doing want it needs to do tho [02:06] trentster: who wrote it? [02:07] giovani3, an irc helper [02:23] Haha [04:46] hello doginize [04:46] hi, ball [06:07] I've got a postfix server going, it was working fine then I tried to add spam-assassin to the mix and now nothing works. I'm getting an error "line 96: bad transport type: -o" for the master.cf file. line 96 is a blank line. any suggestions? [06:14] anybody have any ideas at all...? === tuxlinux_ is now known as tuxlinux [06:44] moin [08:06] i'm working on a server running cups, but I cant find /usr/share/cups/model. Where is the ppd files listed in ubuntu 8.10? [08:28] Found them. /usr/share/ppd/ :) [08:30] If you want a list of all installed ones, "lpinfo -m". [08:31] For some reason that takes ages to run, I'm not sure why [08:31] Actually it might be loading the printer name out of every PPD === CrummyGummy is now known as knowitall === knowitall is now known as CrummyGummy === nijaba` is now known as nijaba [09:27] i upgraded from server dapper to hardy (everything went smooth :) but the prompt for regular users is screwed. My PS1 is "${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$" and the root prompt is ok, but any other user literally prints the PS1 variable instead of using selected dirs and colors [09:28] damn, that was an ugly text. Anyways, any clue on why all the users prompts (except root) aren't obeying PS1? [09:36] my ssh password and username should be the same as i use to login ot my host machine right? === cemc1 is now known as cemc [10:04] okkare: yes [10:10] doesn't seem to work :( [10:10] thefish [10:10] so you can log in locally on the machine with your username and password, but not over ssh? [10:11] how do i specify the username [10:11] ssh username@host [10:11] thanks [10:13] worked :D do you know how to set up a folder to be shared via samba as well by any chance [10:13] via ssh [10:13] say i want to set / to be shared [10:14] okkare: thats probably not a brilliant idea [10:14] i realize that but it would be so much easier for me XD [10:14] check the default samba config, and modify the demo share to suit you [10:15] ok [10:15] okkare: as your attorney, i recommend sharing /srv/smb instead [10:15] and last question, where is the htaccess/www folder? [10:15] why would you want / shared over samba? [10:16] the default webroot for apache on ubuntu is /var/www but it can be wherever you lke [10:16] oh yeah, thought it was etc/www for some reason [10:16] i want to share /var/www then [10:17] fair enough [10:17] okkare: http://www.subvs.co.uk/linux_web_and_file_server_for_windows_users [10:18] thanks [10:19] since you're so helpful :D here's another [10:20] if i have a 1.4ghz, 512md ram, 400kb/s uploadspeed server, how many hits could it handle per hour, with wordpress [10:20] 14 [10:20] 15 on tuesdays [10:20] :P [10:21] any idea? [10:21] check out some stress testing tools [10:21] you also need to add another variable there [10:21] acceptable page load time [10:22] right [10:22] install apache2-utils, and i think there is an app called ab in there (apache benchmark tool) [10:22] i'll try that [10:23] but think it could handle 5000+ [10:23] and load in less than 5 sec [10:24] You just pcik that number arbitrarily? [10:24] that's about what i got with one of my sites hosted elsewhere [10:25] okkare: was that on a dedicated server? [10:25] yeah, with a hosting company [10:25] fair enough [10:25] remember that network speed will also change things [10:25] yeah [10:26] could i handle that with what i have? [10:26] so if you only have a 10M internet connection, it will probably be less than the isp who probably had 100 [10:26] mine's like 400kbs [10:26] adsl? [10:26] cable [10:26] that will probably bork out before your apache does [10:27] yeah, that's gonna be the bottleneck [10:27] in fact it would be safe to wager a small amount of money on that fact [10:27] or large, depending on how risk averse you are [10:27] haha, i guess is hould buy some more [10:28] or hack my modem ;) [10:28] heh [10:29] oh wait, my isp now says it's 1mbs [10:29] Mbps that is [10:29] or is it [10:30] that will be your downstream [10:30] hmm well my dad works for the cable co, so maybe he can pull some strings [10:30] why not stay with an isp? [10:30] nope, the download is 15Mbps [10:30] k [10:31] the cable co is the isp [10:31] i mean a dedicated server [10:32] with a nice 100M network connection [10:32] oh, i see [10:33] i guess i just want the expirience [10:33] fair enough [10:33] plus i'll never have to move big files via ftp and all that [10:33] but i dont think you will sustain 5k hits per hour on that line [10:36] :( [12:04] okkare - there is some seriously cheap hosting out there eh. we use dreamhost here [12:05] virtual servers, you get a terminal interface, can run pretty much any app but they prefer you to stick to web services if you can [12:05] i don't have money though :/ [12:05] not even like $15 a month? [12:05] okay fair enough [12:06] certainly not [12:06] i had loads of fun just with IIS on my home line, then apache later [12:06] i saw you were using wordpress which i assume is php [12:07] yeah, but i also use magento [12:07] remember that php and your probably mysql backend cache frequent requests so your cpu load is even less than what you'd calculate [12:08] yeah, bandwidth will be my enemy i think [12:08] i think my video card is fried right now... woe is me [12:08] so I'm using my regular desktop as the server [12:08] noes... i have a collection of half-fried cards that will work in a pinch but arent dead enough to throw away [12:08] i also have an exam in 9 hours so i'm out, 'night [12:09] haha mail me one! [12:09] see you [12:19] hmm i read that guide and didn't really get how to make var/www shared [12:48] i need to set up /var/www to be shared using samba, anyone know how [12:48] i just installed USE [12:51] okkare, is the machine joined to an active directory domain or using local users and groups? Also, will the shares need to be accessed outside of your lan? [12:51] everything is default, and lan [12:52] Oh, so LAN only? [12:53] yepp [12:54] okkare, this should get you started: https://help.ubuntu.com/community/SettingUpSamba#Samba%20Server%20Manual%20Configuration [12:55] okkare, what web developing software do your people use? [12:56] i use dreamweaver but i'll probably switch to something open source soon [12:56] Most IDE's have sftp hooks to edit/upload pages in them, then all you need to do is enable sshd and utilize the filesystem permissions. [12:56] oh really? [12:57] neat [12:57] Yeah, doublechecking with dreamweaver.... [13:01] okkare, doublecheck this with your documentation, but it looks like in the "New Site" dialog, you would select ftp, but there is a checkbox that says to "Use Secure FTP (SFTP)". [13:02] and that just needs ssh to work? [13:03] Yeah [13:03] sshd, okkare, not just ssh [13:04] ubottu, tell okkare about !sshd [13:04] Sorry, I don't know anything about !sshd [13:04] * Pres-Gas shakes fist at ubuttu [13:04] is that operating by default on USE 8.10? [13:09] okkare, you would have to see if you have the openssh-server installed or see if "sudo /etc/init.d/ssh status" gives you anything. [13:09] yeah, that's installed [13:10] i'm using it atm [13:26] join ubuntu-meeting [13:27] oops [13:27] hehee [13:27] Hi, I am having problems with ALC for OpenLDAP, when I run the command [13:27] ldapmodify -x -D cn=admin,cn=config -W -f acl-del.ldif [13:28] i get the error: ldapmodify: wrong attributeType at line 3, entry "olcDatabase={1}hdb,cn=config" [13:28] I have used sudo and also root. I'm not sure what I am doing wrong [13:28] okkare, then what you may want to do is create a group like webdev, then add your web developers to that...then make your sites group owned by webdev. You will not want to change the user ownership. [13:29] sLaeYa: can you pastebin the contents of acl-del.ldif? [13:29] so i don't go and edit smb.conf? [13:30] dn: olcDatabase={1}hdb,cn=config [13:30] delete: olcAccess [13:30] olcAccess: to attrs=userPassword,shadowLastChange by dn="cn=admin,dc=example,dc$ [13:30] olcAccess: to dn.base="" by * read [13:30] olcAccess: to * by dn="cn=admin,dc=example,dc=tld" write by * read [13:30] sorry ssh was in a small screen ill paste it again [13:30] dn: olcDatabase={1}hdb,cn=config [13:30] delete: olcAccess [13:30] olcAccess: to attrs=userPassword,shadowLastChange by dn="cn=admin,dc=example,dc=tld" write by anonymous auth by self write by * none [13:30] olcAccess: to dn.base="" by * read [13:30] olcAccess: to * by dn="cn=admin,dc=example,dc=tld" write by * read [13:31] !pastbin [13:31] Sorry, I don't know anything about pastbin [13:31] !pastebin [13:31] pastebin is a service to post multiple-lined texts so you don't flood the channel. The Ubuntu pastebin is at http://paste.ubuntu.com (make sure you give us the URL for your paste - see also the channel topic) [13:31] oh ok, sorry. [13:31] XD [13:31] sLaeYa: are you just trying to remove all ACLs? I assume so you can change the order? [13:32] okkare, I almost missed your reply ;) No, you would not need to edit smb.conf [13:32] sLaeYa: you might try: http://paste.ubuntu.com/132480/ [13:33] hmm ok [13:33] to be honest sommer, I think I'm in over my head, I'm attempting to setup a postfix virtual hosting server with ldap backend. [13:34] !serverguide [13:34] The Ubuntu server guide may be found at http://help.ubuntu.com/8.04/serverguide/C/ [13:34] sLaeYa: there's a section on both LDAP and postfix in the serverguide [13:34] sLaeYa: you may need more in depth information though [13:34] hmm well i got "private" to show up, pres-gas, by adding it to the smb.conf [13:35] but there's an error [13:35] i'll work it out [13:35] Keep hammering away, okkare! :) [13:36] sommer, I actually found a comprehensive guide for installing it on ubuntu intrepid, which I have been following but have found no-one who could help me, however it would appear you have just fixed my problem. [13:37] sLaeYa: party! [13:37] yay got it to work [13:37] okkare, ssh or smb? [13:38] thanks for your help [13:38] sLaeYa: np [13:44] hi [13:45] how can I send a file to my ubuntu-server [13:49] Where do you want to send it from fevel ? [13:49] from a macbook on the same network [13:50] is there a particular method you want to send it by, do you have ssh setup, or ftp, or samba ? [13:58] !computers [13:58] Sorry, I don't know anything about computers [13:58] !anything [13:58] So, you wanted to lure me into saying I don't know anything about anything? Yeah, that would be funny, of course. Now leave me alone. [13:58] XD [14:08] sorry for the delay sLaeYa, ssh would be better [14:13] okkare, you said you got your setup working...with sshd or smb? [14:14] smb, although i can't write [14:14] That is not helpful, eh? [14:14] not really :/ [14:26] fevel you could sue sftp ? [14:27] use* [14:27] Does sftp have any money? [14:29] I don't know what you mean by that ball [14:29] Play on words, sLaeYa [14:30] sLaeYa: I was joking because you typed "sue" instead of "use" [14:30] You said sue...to litigate for money [14:30] * ball nods [14:30] Sorry, its just gone past midnight and I've been batteling to keep my eyes open, although I know I have to sort this silly server somehow [14:33] so I have this LDAP server - or believe I have it setup and when I come to adding a user I am presented with Auth Failure http://paste.ubuntu.com/132508/ Am I doing something wrong? Do I need more coffee? [14:36] sLaeYa: are dc=example,dc=tld [14:36] sLaeYa: already created in the directory? [14:37] to see this wouldn't I have to use "ldap search" ? [14:38] sLaeYa: yeppers: ldapsearch -xLLL is usually what I use [14:39] No such object (32) [14:42] try ldapsearch -xLLL -b dc=example,dc=tld [14:43] i get the same response [14:43] sLaeYa: you can edit /etc/ldap/ldap.conf to set the basedn and connection [14:44] sLaeYa: it's not created then... try ldapsearch -xLLL -b dc=nodomain [14:44] same again :s [14:45] oops [14:45] here is /etc/ldap/ldap.conf http://paste.ubuntu.com/132519/ [14:46] sLaeYa: is there anything in the directory yet? cause if not you can do sudo dpkg-reconfigure slapd and set the base [14:46] I dont have anything in slapd directory [14:47] sLaeYa: I'd just run the dpkg-reconfigure then... you should then be able to add entries [14:47] do you mind if i give you a link to the readme I'm following ? [14:49] sLaeYa: it must be dated... the serverguide OpenLDAP section is updated for Intrepid [14:49] yes I guess your right, I'm just reading some of the comments on the bottom of it now [14:50] sLaeYa: I'd recommend following the serverguide for the openldap part, then the other guide when it comes to postfix configuration... or at least the postfix ldap configuration [14:50] you might use the serverguide instructions for the base postfix config, then ldap after everything is working [14:52] !serverguide [14:53] The Ubuntu server guide may be found at http://help.ubuntu.com/8.04/serverguide/C/ [14:53] mathiaz: I won't be able to make the meeting today. Enjoy. [14:58] is there a way to delete my old database sommer ? [14:58] sLaeYa: dpkg-reconfigure will take care of that [14:59] I am getting an error when making the new one because the way I have setup my last one - http://paste.ubuntu.com/132526/ - the reconfigure didn't and I've run it a couple of times with the different options [15:00] sLaeYa: do you have an ou=people? [15:00] no [15:00] sLaeYa: you'll need to create that first [15:01] New bug: #344281 in samba (main) "CIFS kernel bug crashes system" [Undecided,New] https://launchpad.net/bugs/344281 [15:04] need to update the meeting time on the fridge - still says 16:00 utc [15:04] ok - let's get the Ubuntu Server Team meeting started here [15:04] \o/ [15:04] o/ [15:05] thats not shown in the serverguide part I'm reading, is there a different part in the server guide on how to create those ? [15:05] since there is a conflict with the Asia Membership board [15:05] * ball waves [15:05] I didn't get time to read the agenda [15:05] and we'll be in the same situation next week again [15:05] so - let's get the server team meeting started [15:05] #startmeeting [15:05] Agenda: https://wiki.ubuntu.com/ServerTeam/Meeting [15:06] nealmcb: thanks! [15:06] Oh. I guess I won't miss the meeting then. [15:06] :) [15:06] Last week minutes: https://wiki.ubuntu.com/MeetingLogs/Server/20090310 [15:06] o/ [15:07] o- [15:07] I don't seen any specific items from last week [15:08] anyone has anything to add regarding topics discussed last week [15:08] ? [15:08] Documentation for Eucalyptus in Ubuntu [15:08] mathiaz: we delayed the screen-profiles talk until zul got back [15:08] kirkland: ok - I'll add to today's agenda [15:09] mathiaz: I would like to talk about likewise-open5 [15:09] mathiaz: i'd also like to discuss testing kvm-84 in hardy [15:09] hi === scfh_ is now known as scfh [15:09] ttx: ok [15:09] kirkland: ok [15:09] so as an item from last week or an item for this week, your choice :) [15:10] [TOPIC] KVM backport in hardy [15:10] kirkland: ^^ ? [15:10] mathiaz: i'd like to ask for some assistance testing a kvm-84 package that i've prepared for hardy [15:10] mathiaz: its available in a PPA at https://edge.launchpad.net/~ubuntu-virt/+archive/ppa [15:10] mathiaz: here's the basic premise ... [15:11] mathiaz: hardy shipped with kvm-62 [15:11] kirkland: When you have a tested backport and you need it approved, feel free to ping me. [15:11] ScottK: understood, thanks. [15:11] ScottK: kvm is such an important package, i'm asking for a bit more extensive testing that what i can do alone [15:12] also, we're talking about more than just applying a couple of bug fixes... [15:12] we're talking about taking hardy's kvm from kvm-62 to kvm-84 [15:12] there's both a kernel piece, and a userspace element [15:12] kirkland: +1 for lots of testing. [15:12] kirkland: ie the goal is to prepare an SRU for kvm in hardy? [15:13] just a quesiton how are you going to backport the virtio stuff in the hardy kernel for kvm [15:13] these can be upgraded independently, though I'm suggesting we backport both [15:13] mathiaz: yes, SRU which actually provides a major version bump [15:13] zul: kvm-source provides the kernel space bits [15:13] Ah. If it's SRU, then not mine to approve. [15:14] zul: that package is a dkms-built kernel module [15:14] i'm getting sidetracked here .... [15:14] kirkland: heh ill talk to you about it after [15:14] so the key points are that we believe that kvm-62 has become unsupportable [15:14] there are a number of design flaws in that version of kvm that are fixed later versions === hessml|away is now known as hessml|away|away [15:15] as such, these are major architectural changes that cannot be fixed with backported patches [15:15] this information comes directly from the upstream maintainers [15:16] so i propose that we either need to compose a lengthy list of 'won't fix' and 'can't do' items for hardy's kvm [15:16] (such as SMP guests) [15:16] or consider a major version bump [15:17] i know that at least myself and mathiaz are running kvm-84 under hardy [15:17] both kernel and userspace bits, right mathiaz ? [15:17] (i'm running both) [15:17] kirkland: yes [15:17] thats fine with me but if you do consider a major version bump then you will want to get the kernel team involved and get their opinon as well [15:17] so there is some basic, measurable amount of success [15:17] zul: absolutely, agreed. [15:17] zul: or, we need to recommend that people use kvm-source for their kvm kernel module [15:18] mathiaz: that's basically all.... [15:18] the virtio stuff that hardy has already concerns me a bit though [15:18] mathiaz: i'll compose a blog post, asking for testing of those packages [15:18] mathiaz: i'm quite hoping that some -server team members can do some early testing too [15:18] kirkland: ok - so the first step is to get more testing done from the ubuntu-virt PPA [15:19] kirkland: I can help test... is there a wiki page listing what to test? [15:19] kirkland: +1 on the blog post [15:19] mathiaz: yes, i plan to start the SRU procedures when Jaunty hits beta [15:19] kirkland: as sommer mentionned documentation is very important too [15:19] mathiaz: right [15:19] sommer: i'll put those together in the blog post [15:19] kirkland: especially on how to setup the new kvm from the ubuntu-virt PPA [15:20] mathiaz: okay [15:20] kirkland: I don't think we can really outline what to test (ie test multiple configuration etc...) [15:20] kirkland: but focus on how to install the new version of kvm [15:20] mathiaz: well, right, that's part of the reason i can't do it all myself [15:20] mathiaz: there are some crazy ways people use kvm and virtualization [15:20] mathiaz: that i have not considered [15:21] kirkland: agreed. [15:21] mathiaz: EOF [15:21] [ACTION] kirkland to write a blog post asking for testing of kvm 84 backport to hardy with specific instructions on how-to setup kvm 84 from the ubuntu-virt PPA [15:22] kirkland: thanks for the update. [15:22] anything else to add for kvm 84 on hardy? [15:22] I'm running it and it's faster [15:22] how does the kvm update affect the other tools, like libvirt? [15:23] sommer: unknown [15:23] sommer: unknown by me, at least [15:23] sommer: i'm using kvm from command line, i think mathiaz is using virsh (which uses libvirt) [15:23] I would appreciate it if we'd be clear about is this a backport or an SRU. They land in different repos and have different approval mechanisms. [15:24] right - I'm using libvirt to manage all of my vms [15:24] ScottK: there are actually 3 approaches on the table [15:24] Using the terms interchangably is a recipe for confusion (mine if no one elses). OK [15:24] kirkland: gotcha, I can help test libvirt and such [15:24] ScottK: the security team also want to fix a stack of CVE's [15:24] ScottK: the goal is an SRU. [15:24] ScottK: which are all fixed in kvm-84 [15:24] ScottK: i need to evaluate the best place to land this [15:24] kirkland: With clamav major updates I've put them in -backports first for extensive testing and then later -security/-updates [15:25] ScottK: my original thinking was -backports, but the more we discussed this, -updates started to make more sense [15:25] ScottK: as of yesterday, the security team was asking me to fix some CVE's [15:25] You might start with -backports and then migrate. It's worked well for the clamav migrations (which are pretty intrusive). [15:25] ScottK: before i spent any effort trying to isolate and cherry pick fixes, i mentioned that i'm already investigating the possibility of an sru and/or a backport [15:25] kirkland: may be using the following approach would make sense: ubuntu-virt PPA -> hardy-backports -> hardy-updates? [15:26] ScottK: mathiaz: i agree with that approach [15:26] ScottK: mathiaz: what about -proposed? [15:26] backports -> proposed -> updates ? [15:26] mathiaz: Actually if there's CVEs fixed you want to go -backports ->-security ->-updates. [15:26] kirkland: it will go to -proposed before -updates [15:26] ScottK: there are cve's [15:26] kirkland: -proposed is always part of the SRU process. [15:27] -security to -updates is normal. [15:27] backports -> security -> proposed -> updates ? [15:27] kirkland: If it goes to security it'll go straight to updates from there. [15:27] kirkland: no - backports -> security -> updates [15:27] ok [15:27] that's normal for all security fixes. [15:27] kirkland: or backports -> proposed -> updates [15:27] mathiaz: But if you're fixing CVEs this way you can't leave -security out. [15:28] ScottK: well, my goal was to affect the fewest people first, more later [15:28] Having CVEs fixed in -updates that aren't fixed in -security would run counter to how things normally work. [15:28] ftr, kirkland knows this already, but if it is destined for -security, please build without -update (or -backports) [15:29] You might go -proposed to -security and -updates at the same time, but IME enough people run backports that's a sufficient testing ground. [15:29] jdstrand: done! in the latest https://edge.launchpad.net/~ubuntu-virt/+archive/ppa [15:29] ok - let's move on [15:29] ScottK: mathiaz: thanks for the info [15:29] kirkland: I think the next step is defined (blog post) [15:30] kirkland: we'll discuss later whether it should go trough security or proposed [15:30] mathiaz: okay [15:30] kirkland: thanks for the update on this topic. [15:30] [TOPIC] likewise-open 5 in jaunty [15:30] ttx: ^^? [15:30] yes, an Ffe has been granted to get likewise-open5 in Jaunty (thanks, ScottK !). I just uploaded the package and it's in the NEW queue right now [15:31] Ah. Good. [15:31] This is a separate package because the upgrade requires you to leave and rejoin the domain, which we consider unacceptable for our current likewise 4.1 users (or at least not our choice to make). [15:31] * ScottK was wondering. Did you set the bug to fix committed? [15:31] I was about to. uploading can be long with sucky bandwidth. [15:31] So Likewise Open 5 will coexist with Likewise Open 4.1 in Jaunty. [15:31] For the Karmic cycle we'll work with upstream to propose a seamless upgrade for all users to the latest version, and phase out 4.1 [15:32] We'll also make sure they work with pristine krb5 1.7 libraries to avoid maintaining a separate GSSAPI implementation there. [15:33] so as soon as it lands, please test it, given the late upload we'll not have much time for this. [15:33] From my testing it works better than 4.1... but I clearly didn't test all scenarios [15:34] since I don't have such a wide array of AD domains to test against. [15:34] eof [15:34] * ScottK considers the Server Guide ought to answer the question "Which do I use?" [15:34] yes, I was planning to discuss that with sommer [15:35] Excellent. [15:35] I also have a couple of likewise-open bugs that are fixed in likewise-open5 [15:35] ttx: what happens if you have a system with 4.1 installed and you install 5? [15:35] it removes likewise-open (resulting in domain leave) and installs 5 [15:35] ttx: sure just ping me [15:36] mathiaz: it just won't happen automatically by upgrading to Jaunty. Losing domain membership in the upgrade is not really acceptable [15:37] ttx: ok - and joining the domain is not done during postinst? [15:37] mathiaz: you need the windows AD admin password to join. [15:37] which in most use cases the local admin won't have [15:37] is there a way to restore your server to the initial install without reinstalling it ? [15:38] so no, it's not done in postinst. [15:38] ttx: ok. [15:39] ttx: I'm wondering if we should print a message to explain that the machine has been removed from the domain and should be rejoined (in the use case of 4.1 -> 5 upgrade) [15:39] ttx: doing this *pseudo* upgrade would leave the system unusable and providing as many hints as possible would be good [15:39] There is a message printed when the domain is left (when likewise-open is removed)... but that could appear more clearly. [15:39] mathiaz: It should probably go in a Debian.NEWS for the package. [15:40] mathiaz, ScottK: noted. [15:41] ttx: and probably in the release notes [15:42] mathiaz: I'm not sure. Installing likewise-open5 is up to the user, it won't influence an existing setup just by upgrading [15:43] <[HU]gnanet> Hi, i have a problem with my production system running ubuntu hardy: I run 3 xen servers where i have one hardy guest for mysql and one hardy guest for apache-php-lighttpd-squid. The webserver farm gets its data from a ocfs2 partition. My webserver guests are dying with kernel page faults, i heard of a kernel problem with the hardy xen kernel, so i thought of changing kernels, but the Intrepid kernel has OCFS2 1.5.0 modules, the hardy 1.3.3, an [15:43] so I wouldn't say it's release notes material. [15:43] not something you need to know before/after upgrading to Jaunty. [15:43] ttx: right [15:43] it's something you need to know if you plan to install that particular package. [15:43] ttx: the point here is that we need to get the word out [15:44] so Server Guide, Debian.NEWS... [15:44] ttx: but I agree that the release notes may not be the best place [15:44] it could go in the package description [15:44] nealmcb: I think that's overkill. [15:44] ttx: what about a message in likewise-open 5 preinst? [15:44] * ttx agrees with ScottK [15:45] ttx: you should be able to detect wether 4.1 is around and get a message to the user [15:45] mathiaz: When will that get seen that NEWS wouldn't? [15:46] I'm not sure that would increase visibility that much. Someone installing a new package should be ready for some change anyway. [15:46] hm - ok. [15:46] He needs to know he has to (re)join the domain after install... but too much warning in advance might not be necessary [15:47] it's the same things he needs to do after installing likewise-open in the first place [15:47] ok - let's move on. It seems that we've identified places where the warning message should be put. [15:47] yes. [15:47] ttx: anything else to add on the likewise-open front? [15:47] no. [15:48] ttx: allright then. Thanks for the update [15:48] and we're looking for testers! [15:48] let's move on [15:48] [TOPIC] screen-profiles by default [15:49] kirkland: zul ^^? [15:49] this is just for ec2 right? [15:49] zul: yes [15:49] mathiaz: i'm proposing this, yes [15:49] screen-profiles by default in *EC2* [15:49] mathiaz: in EC2 yes [15:49] im against it, the goal of the ec2 is to behave exactly what we have now in the server [15:50] mathiaz: ubuntu-server in ec2 is inherently console-less. you attach, run something, perhaps detach, reattach later [15:50] soren ehammond1 and I already discussed this and we were against it [15:50] mathiaz: this lends itself very well to screen [15:50] kirkland: i agree its nice to have its installed on the images but I dont think it should be enabled by default [15:50] mathiaz: furthermore, i believe it's a great way to differentiate what are very similar servers in the ec2 space [15:50] * Brazen agrees with zul [15:51] kirkland: right - does running screen by default would have an impact on automated installation (via ssh)? [15:51] kirkland: Do you feel you've overcome the concerns people have raised with screen? [15:51] kirkland: Like, say, overlapping key bindings? [15:52] soren: the outstanding issues i know about are: https://bugs.edge.launchpad.net/ubuntu/+source/screen-profiles [15:52] and [15:52] https://bugs.edge.launchpad.net/ubuntu/+source/screen [15:53] soren: i don't feel that any of these are blockers for adoption [15:53] I tend to agree screen is especially useful in the EC2 case... but I also agree that we should mimic what's in the default server install. [15:53] mathiaz: if soren, zul, and eric are opposed, i withdraw my suggestion [15:53] I can't spot the "hijacks application's keybindings" thing in there anywhere. [15:54] I've never filed it as a bug. Perhaps because it's behaving as advertised or because I just don't see a clean way around it. I don't know. I just haven't :) [15:54] soren: that was worked around by providing an option to disable and/or customize the keybindings applied by screen-profiles [15:54] kirkland: I think it's an idea worth exploring - however I'm not sure that using screen by default on *EC2* only is good. [15:55] kirkland: Which means more work by default. [15:55] kirkland: we should investigate if we should enable screen by default *everywhere* [15:55] mathiaz: i agree with you; i though ec2 would be a perfect place to start [15:55] kirkland: true. [15:55] mathiaz: these are machines that you are *never* physically sitting in front of [15:55] mathiaz: in this case, they are very unique [15:56] mathiaz: "they" being hosted servers of any kind, ec2 being the present example [15:56] kirkland: i think its a good idea overall but its too soon [15:56] could it be in the motd for ec2? [15:57] I must say that while screen-profiles surely solves a problem, I think it will annoy a rather large group of users. Me, for instance :) It's too in-my-face. I don't really want to know that screen is there until I want to do something with it. [15:57] I think screen is just as useful, and maybe more so when physically at console (with no X, such as with servers), so I don't see the relevance of ec2 being remote-only [15:57] mathiaz: i suppose we can revisit this in karmic [15:58] kirkland: right. [15:58] we're running out of time [15:58] even though we have the whole channel for us for *ever* [15:59] kirkland: thanks for bringing this up - we should definetly revisit this topic for karmic [15:59] kirkland: you could also send an email on ec2-beta [15:59] kirkland: to get some feedback there [16:00] [TOPIC] Open Discussion [16:00] anything else to add? [16:01] I think zoopster mentioned eucalyptus documentation? [16:02] I did. [16:02] * erichammond wakes up, scans the meeting log, nods, and heads out to an off-site meeting. [16:02] but given time...I can take it offline [16:02] zoopster: okay [16:03] hmm what is screen-profiles ? keybindings for screen [16:05] ok - let's wrap up [16:05] [TOPIC] Agree on next meeting date and time [16:05] so next week the TB is running at 15:00 UTC [16:05] at the same time as our currently scheduled meeting [16:06] so my proposal is to run the meeting at 15:00 UTC in #ubuntu-server [16:06] same as this week [16:06] (and last week) [16:07] so: same time, same place (#ubuntu-server), next week? [16:09] where does ubuntu server put the apache vhosts conf file please? [16:10] ok - I don't see any objections - so see you all next week, same time, same place (#ubuntu-server) [16:10] fevel: /etc/apache2/sites-available/ [16:10] thanks for attending and happy beta testing! [16:10] thanks [16:10] #endmeeting [16:11] <[HU]gnanet> Sorry for filling up the meeting with my problem, but can anyone give me a clue? [16:11] [HU]gnanet: np - you'd better post your question again [16:11] <[HU]gnanet> ok [16:12] <[HU]gnanet> So again: [16:12] <[HU]gnanet> Hi, i have a problem with my production system running ubuntu hardy: I run 3 xen servers where i have one hardy guest for mysql and one hardy guest for apache-php-lighttpd-squid. The webserver farm gets its data from a ocfs2 partition. My webserver guests are dying with kernel page faults, i heard of a kernel problem with the hardy xen kernel, so i thought of changing kernels, but the Intrepid kernel has OCFS2 1.5.0 modules, the hardy 1.3.3, an [16:12] <[HU]gnanet> kernel version on domU is /was 2.6.24-19 [16:12] Any reason you are using Xen instead of KVM? [16:13] <[HU]gnanet> Brazen> the CPU doens not support KVM as we checked in the beginning [16:13] I mean, I don't have a clue about your problem, but for future reference I would suggest KVM. [16:13] oh [16:13] in that case, I would use (and do use) qemu with kqemu. [16:14] <[HU]gnanet> i will investigate it (qemu) for the future [16:16] anyway, since no one else is piping up... page faults sounds like it is a memory problem, so it could be an issue with fighting over RAM, or a problem with swap space. [16:17] Hello, to which extent can our company benefit from a canonical support contract provided we run a modified kernel? at this time, we run a modified kernel to use specific dvb drivers at least. [16:24] jdbrowne: no one is responding - generally speaking a system running a modified kernel cannot be supported [16:25] I have a small 2 node xen cluster, both nodes running gutsy because of https://bugs.launchpad.net/ubuntu/+source/xen-3.2/+bug/209893.. I'm considering how crazy it may be to rebuild one of the nodes using hardy+kvm and rebuild each of the guests up on that node as a kvm guest until everything's up on that kvm node, then rebuilding the other xen node [16:25] Launchpad bug 209893 in xen-3.2 "Xen kernel oops loading 3w-9xxx driver" [Undecided,Incomplete] [16:26] I'm assuming the scsi driver wouldn't be an issue because it seemed to only have issues with the xen kernel(s) IIRC [16:30] I guess I'm wondering if any of you have done a xen->kvm migration and have anything to say of your experience [16:32] just inrested. is kvm nowdays "the choice" for virtualization or does xen has it points still ? [16:32] *shrug* kvm appears to be a more sane long term solution to me [16:32] do the xen folks still recommend using 2.6.18? [16:35] I still use Xen in production, there is active development, novell, suse, citrix are working in xen, redhat' s server virtualization is based on xen, not KVM, I think redhat recomends KVM for desktop virtualization [16:36] is live migration supported in KVM? [16:36] however redhat has publicly stated that xen is maintenance only now...all future dev will be for kvm only [16:36] jmedina: any thoughts on Xen Vs. VirtualBox? [16:37] jmedina, yep kvm does that.. the last time I checked it didn't do full paravirtualization so you couldn't use it on machines that lacked the special virtualization sauce in the cpu or something [16:37] ball: I havent used virtualbox for server virtualization, only for desktop [16:37] shame: VirtualBox isn't very useful for server virtualisation. [16:38] I'm not talking about VB [16:38] ...as you can't detach from the console while keeping the VM running. [16:38] <[HU]gnanet> Virtualbox headless is an interesting effort ... but the resources... [16:38] KVM [16:38] shame: Sorry. [16:38] :) [16:38] I have not compared kvm vs xen performance, especially in I/O for disks an network [16:38] ball: ^^ What I just said to shame about virtualbox was for you. [16:39] full virtualization performance in xen is really poor, then redhat released GPL Paravirtualized drivers for full vrt enviroments [16:39] * ball nods [16:39] I've been pondering it for sometime but it came back into mind this morning when one of my dom0's rebooted and the guests come up without network connectivity (still not sure wtf is up with that [16:40] dom0 has connectivity, all the interfaces are up.. but it's like the bridge is broken or something [16:40] there is GPL windows paravirtualized drivers in xen, they help increase performance for windows [16:40] Can Ubuntu Server be dom0? [16:40] ball: Hardy can, yes. [16:40] ball: yeap, I use ubuntu-xen-server package in hardy [16:40] ball, yes, I'm using gutsy [16:40] jmedina, 64bit? [16:41] jmedina: yeap [16:41] jdbrowne: you should ask your support contacts about that, rather than this channel [16:41] right, sorry. "=< hardy" can do it. [16:41] :) [16:41] with AMD X2 and xeon 54xx queadcore [16:41] there wasn't a 64bit package available for ubuntu-xen-server when we were setting these up [16:42] it was right around the hardy release, maybe just prior to it [16:44] cjwatson, zoopster: thx [16:46] hmm how i figure out if my cpu support amd-v, i have opteron 165 [16:47] simplexio: grep svm /proc/cpuinfo [16:47] Could I have 64-bit dom0 with 32-bit dom1? [16:48] cpuinfo dosnt have anything about amd-v [16:51] simplexio: "svm" is what you're looking for. [16:52] thanks soren. it look like 165 is too old model [16:52] are there source list for feisty active? [16:53] I wnat install smartmontools, but apt-get update not find more feisty [16:53] J_P: Better upgrade to something newer ;) [16:54] Jeeves_: Yes I know, but for now I need still that version [16:54] install smartcl [16:55] Don't are a old.ubuntu repos for me set in my sources.list ? [17:05] does anyone know how I can make external_acl_type session work every time the browser is launched? [17:05] better yet "squid_session" [17:11] kirkland: for a full version bump that included security fixes, it would go -proposed -> -security -> updates. but the -proposed step would go through the security-proposed queue so it didn't get built against -updates. [17:18] kees: ScottK was suggesting security-proposed -> -backports -> -proposed (optionally) -> -security [17:18] kees: he posited that more testing will be done in -backports [17:19] kees: fyi only [18:08] jdstrand: really? more testing in -backports? if that's true, sure. though you could probably put it in -backports and -proposed at the same time. [18:09] * jdstrand nods [18:10] kees: they certainly are not mutually exclusive [19:28] can I have multiple up route commands or do I have to add all of them to a script and do up /path/to/script for interfaces file ? [19:29] You can have as many "up" commands in interfaces as you want. [19:30] The following "command" options are available for every family and method. Each of these [19:30] options can be given multiple times in a single stanza, in which case the commands are [19:30] executed in the order in which they appear in the stanza. (You can ensure a command never [19:30] fails by suffixing "|| true".) [19:30] axisys: man 5 interfaces [19:30] infinity: thanks a lot === hessml|away|away is now known as hessml|away [20:11] New bug: #344490 in mysql-dfsg-5.0 (main) "apt fails to install mysql-server-5.0" [Undecided,New] https://launchpad.net/bugs/344490 [20:23] hi [20:25] does anyone know of a way to ssh into a server that's on dhcp behind a router? (and without port forwarding in the router) [20:26] ssh to the router and ssh from there? [20:26] ssh to another machine behind the router that has ports forwarded to it? [20:26] remote desktop to another machine behind the router that has ports forwarded to it? [20:26] (in both previous cases, ssh on from there) [20:26] no, just ssh to a machine behind a router without port forwarding [20:26] so it has to be initiated outbound? [20:26] if you're outside of the network currently, you're out of luck [20:27] if you're on the machine in question, you can use ssh's feature of remote port forwarding [20:27] so could I keep a ssh connection outbound to a wan static IP? [20:27] ssh -R 3000:localhost:22 user@remotemachine [20:27] and then remotemachine:3000 would forward to your natted machine, as long as the ssh session to remotemachine remained online [20:28] well, thats not striclty true [20:28] as remote port forwards bind to localhost on the remotemachine [20:28] hmm, i gotta draw a picture of what I'm trying to do [20:28] <_ruben> and -g to able to connect to it from other hosts [20:28] <_ruben> dunno if -g works for remote ones [20:28] does -g work with remote port forwarding? [20:28] i was under the impression that only worked with local port forwarding [20:28] ok, so if I initiate a connection outbound from the server, and do keepalive or heartbeat, I can always see where it's coming from [20:29] <_ruben> could very well be, never tried tbh :) [20:29] -g Allows remote hosts to connect to local forwarded ports. [20:29] can i use that connection to go inbound too? like to remotely manage the serer [20:29] okay [20:29] i was right ;) [20:29] billyk: read what i've said already, info's there [20:29] ah [20:29] billyk: (ssh -R) [20:30] natmachine: ssh -R 3000:localhost:22 user@remotemachine [20:30] yeah, i want to be able to drop a box on a consumer lan (with a dynamic wan IP and lan IP) and remotely manage it [20:30] gotcha [20:30] remotemachine: ssh -g -L 3001:localhost:3000 localhost [20:31] anywhereintheworld: ssh -p 3001 user@remotemachine [20:31] and you get ssh'd into natmachine [20:31] New bug: #344499 in samba (main) "samba crash" [Undecided,New] https://launchpad.net/bugs/344499 [20:31] okay [20:31] <_ruben> or do it the proper way and setup a vpn ;) [20:31] or that :) [20:31] well then you'd need a vpn server on the edge of the remote network [20:32] openssh has built in vpn now [20:32] although you need it enabled in the remote sshd [20:32] ok [20:32] likewise do you need AllowTcpForwarding enabled in the remote sshd (it is by default) [20:33] okay [20:33] GatewayPorts may also be of interest (man sshd_config) [20:33] PermitTunnel relates to the sshd's vpn server [20:34] enjoy breaking out of your corp/school firewall ;) [20:34] and enjoy getting your login suspended when networks find out ;) [20:35] lol thats not what i'm doing [20:35] haxing neighbours wifi? [20:35] i'm trying to build an appliance that I can sell and drop on someone's network and then be able to remotely access it [20:35] * Deeps trying to think of scenarios where you cant just port forward [20:36] ah [20:36] <_ruben> the ease of ssl tunnels (over port 443 for instance) are a bitch to block .. wonder if i could tweak our squid to block such stuff [20:36] also looked at corkscrew [20:36] haha [20:36] _ruben: could just use timeouts [20:36] kill off any active ssl sessions that have been active > Xmins [20:36] <_ruben> Deeps: and the vpn would just reconnect .. doesnt help much i guess [20:36] lol [20:37] if you kill off any sessions > 60 seconds, you'll piss whoever it is off enough that they'll give up after a while [20:37] oh, also how can I start firefox without a display manager or desktop environment? [20:37] X forwarding [20:37] so just barebones xorg, firefox, and its dependencies [20:37] google for the rest [20:37] ssh -X remotehost, remotehost: /usr/local/bin/firefox & [20:37] yeah, I did... but i'm kinda lost about creating displays and stuff [20:38] no, locally [20:38] indeed, if you have X forwarding enabled on the remote sshd, it'll forward the X data to your local X server over ssh [20:38] but run the app on the remote machine [20:38] no, like run firefox on the server [20:39] and view it where? [20:39] sooo serer with screen attached via vga cable [20:39] local display [20:39] it'd need an X server running [20:39] startx? [20:39] or something [20:39] and ideally a window manager too probably [20:39] thats outside the scope of this channel though [20:39] <_ruben> server doesnt have X installed by default .. nor any window manager [20:39] #ubuntu for GUIs [20:39] <_ruben> and installing X makes a server a desktop :) [20:40] If you must, ratpoison has few dependancies. [20:41] eh, I just need firefox fullscreen with no border at all times [20:41] so would a window manager really be necessary? [20:41] As was mentioned, it's not really on topic here. [20:42] ugh I know #ubuntu is just gonna send me back here since I'm working off a ubuntu-server base [20:42] and this machine has a LAMP sooo it's more of a server [20:43] and it has no input devices but network [20:43] more server [20:43] billyk: X is outside the scope of this channel, google however is your friend [20:44] Deeps: haha okay, I had to try :-) Thanks! [20:44] X with no input devices? Odd. [20:44] <_ruben> sounds more like a kiosk than a server to me [20:45] ok, was told to ask my question over here. [20:45] ok, I have a cvs server, but wanted to have it mail out the commit changes to everyone. So I tried cvsspam, but it seems i wont be able to use sendmail, but it supports smtp, but problem again. Gmail has to have the authentication stuff, so I am lost on what to do here. [20:45] sounds like a monitoring server [20:45] yeah, like a display [20:45] slideshow box basically [20:45] not h4x0ring a school or anything [20:46] <_ruben> alonea: we use syncmail for that .. didnt configure it myself though, dunno any details of it [20:46] in short, install xorg and an ultralightweight window manager (wm, icewm, evilwm, etc.), google will be able to give you more help on that though, and be prepared to install stuff from sources [20:47] _ruben: well, I might try that, but I am limited on what I can do on this server. i will take a look at it. its really the authentication that seems to be the problem, unless you know of a way to get a free smtp server that doesn't require it? [20:47] thanks Deeps [20:47] * hads prefers ratpoison [20:48] <_ruben> alonea: install postfix on that box and configure it to relay through gmail using authentication .. perhaps ssmtp does support it aswell [20:49] hads: not stumpwm? [20:50] billyk: it's okay, i learnt how to do all this because i needed to break out of a school + corp network ;) [20:51] yeah :-) yay ssh tunnels [20:51] _ruben: I will look at that. does it require having any type of root access to install? really all I can do is run scripts and use the stuff that is already installed system wide. [20:52] <_ruben> alonea: postfix most likely does, ssmtp can probably be installed as a normal user without too much hassle [20:54] <_ruben> enough for today, im out [20:55] thanks again [21:10] nope on both programs....ssmtp wants access to /usr/local [21:39] Where can I find my usb stick from the terminal === Administrator is now known as moz [21:39] i heard it was under /media/disk or something [21:39] but i only have cdrom and cdrom0 and they are both empty [21:40] Hi, I am trying to setup a mail server and everytime (I have tried it a few time) I get this error: Relay access denied [21:40] does someone know what this could be? [21:43] Relay access denied [21:43] Hi, I am trying to setup a postfix mailserver and I keep getting this error: Relay access denied [21:43] does someone know what this could be? [21:46] anybody? [21:46] o891: It means the machine to which you are sending mail to will not deliver them to locations outside of the domain it belongs to. [21:47] genil: thanks, do you know how i can fix it? [21:47] o891: That has to be done on the machine to which you are sending mail [21:48] genil: i have tried a few different ways and so I went back to the Basic Setup Guide and I still get this error [21:48] (to allow your ip or so as a trusted source that it will relay mail for) [21:48] genil: but I get it with anywhere I am sending mail, even if I send mail to myself I get the error [21:49] genil: but my server is the smtp server [21:49] o891: Likely then your ISP does not allow you to use your connection for an email server [21:50] Huh [21:50] genil: could it be something else? [21:52] genii [21:52] genii: or is it my ISP not allowing it for sure? [21:52] [11:48:12] Mal3ko: Research indicates kernel needs recompiling with options CONFIG_HIGHMEM64G=y, CONFIG_HIGHMEM4G=y even if PAE is enabled [21:52] http://tinypaste.com/e3cec [21:53] o891: try telnet to port 25 of the machine which is supposed to be the one sending your mail and see if you get an smtp server response [21:53] `sudo dpkg-reconfigure postfix` should get you most of the way to setting up a basic postfix config. [21:54] Mal3ko: Did you get it resolved finally? (free not showing your full ram) [21:54] genii: I get a response but after setting rcpt to: I get the error [21:55] o891: Do you legally own the domain of 0891.net ? [21:55] genii: yes [21:56] genii: o891.net [21:56] o891: Is the IP the machine sending mail is on in the dns server list for that domain? [21:57] or does it have an MX entry, etc [21:57] genii: yes it does: the mx entry is mail.o891.net and it points to the IP of the serve [21:57] r [21:58] o891: You might want to check your mailrc file or so then [21:59] o891: hads' suggestion of postfix reconfigure may give you some of these options like mail relay etc [22:00] genii: in the log I get the following error, maybe you have seen this before: Mar 17 22:59:27 ost postfix/smtpd[24190]: NOQUEUE: reject: RCPT from 84-75-23-205.dclient.hispeed.ch[84.75.23.205]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= [22:01] denii, hads: I will try that now, see if it gives me any options (sorry I didnt realise before that that message was for me, thanks hads) [22:02] o891: looks like the next box from you upstream won't relay. Likely your machine fails some test like rarp or so [22:03] genii, hads: I just did the reconfigure and it doesnt say anything about relay [22:03] genii: the next box being my isp? that makes sense because I can send mail localy as in diretly from root to fmaster [22:03] o891: Yes, your ISP [22:04] There's nothing in that log about another SMTP server. [22:05] Would that also block my imap and pop because I had those two working today. [22:06] hads: So what does that mean? [22:06] o891: The problem is this: your isp has the name 84-75-23-205.dclient.hispeed.ch assigned to the ip which you are also using for o891.net [22:08] So when you try to send email from o891.net it appears to be coming from 84-75-23-205.dclient.hispeed.ch instead [22:09] genii: ok thats the node name right? [22:10] genii: And that means that the SMTP Server doesnt allow it because it thinks that it is coming from the wrong server, right? Could I allow 84-75-23-205.dclient.hispeed.ch as a smtp relay in postifx? [22:11] o891: Not sure about node name or so. But when some other box on the internet gets email supposedly from your domain and looks up the ip it gets a different name and so rejects it [22:11] im trying to use my usb stick, i've tried "mount /dev/sda1 /mnt" but i dont really know what that does and and what to do next? [22:12] genii: ok I see, well do you know of anyway to overcome this problem? [22:12] moz: sda is usually the primary drive and not a one like second drive or usb or so on [22:13] o891: Convince your isp to put in their dns your domain for that ip [22:13] genii: so when I telnet the rcpt address the server IMMEDIATELY checks the IP of the recpt domain? [22:13] o891: It should, yes [22:14] genii: ok I see. Well I doubt they will do that as I don't even have a static IP address... [22:14] genii: I suppose that that means that I can't run a smtp server on my box, right? [22:14] o891: You could use some service like no-ip or other kind of ddns [22:16] o891: I was looking into DynDNS the other day, so I might have to use that after-all... [22:16] genii: well thanks for the help anyway, I will look into it! [22:16] genii: what should i be mounting then, im a little confused, quite new to linux [22:16] DNS is not the issue. I don't have time to work through a mail setup but it looks like you don't have your domain in mydestination. [22:17] hads: in the postfix main.cf I have the following line: mydestination = o891.net [22:17] hads: should that be mail.o891.net then? [22:17] moz: If you do: sudo fdisk -l it should list there all your hd. Looks for the one which size is the usb one. if for instance it is sdc1 then use that in the mount command instead of sda1 [22:20] hads: I just changes that line to mail.o891.net then restarted postfix and it still gives the error [22:25] Does ubuntu server run just as easily as the desktop version (in terms of wired/wireless connections) ? [22:26] genii: i need to unmount sda1 but its the hard drive, and its not letting me unmount it because its busy, what should i do ? [22:26] it's command-line only by default stargazer [22:27] so it may not be as "easy" [22:27] I'm fair in CLI. [22:27] but it connects via dhcp automatically [22:27] But normally ubuntu will just connect when i plug in. [22:27] Ubuntu Desktop* [22:28] it should do that, yeah, i set mine to a static ip just by editing /etc/network/interfaces [22:29] moz: sudo umount -f /mnt ; sudo mount -a [22:29] moz: This should remount sda1 in it's proper place [22:29] what does the -a command do ? [22:30] moz: the -a mounts all stuff you have in /etc/fstab [22:30] im still getting device or resource busy [22:30] Ohh, i remember installing Server edition and having trouble with seup. something about 'what type of server will this be? [22:30] for the first command [22:30] '* [22:31] New bug: #340437 in dhcp3 (main) "cannot get ip address from dhcp" [Undecided,Incomplete] https://launchpad.net/bugs/340437 [22:31] genii: because its the harddrive i guess its busy [22:32] moz: Because root fs is always busy and likely sda1 was that partition, the -f (force) might not work. The fast thing instead of mucking about live is just reboot it and things will mount where they are supposed to again. [22:33] ahhh ok [22:33] cool === hessml|away is now known as hessml|away|away [22:44] i just installed this: linux-image-2.6.27-11-server 2.6.27-11.27 [22:45] because i needed it, it has inbuilt drivers to recognize my usb wireless stick [22:45] but now when i restarted, the system has paused at "loading hardware drivers" [22:46] i just pressed crtl-alt-del to restart, and it presented me with the login screen, and im in, what happened there? [22:58] its doing it each time, when i press crtrl-alt-del something is being killed, its not working properly, why didnt installing the kernel update work? it worked when i did it on xubuntu desktop [23:10] New bug: #306541 in mysql-dfsg-5.0 (main) "mysql apparmor profile forbids raising max open files limit" [Undecided,New] https://launchpad.net/bugs/306541 [23:19] question: i have a dell desktop computer that is running ubuntu server, but I have it hooked up to a monitor...after a little while, it will blank the screen, but will keep the led light on the back of the monitor on. I have tried setterm, and it doesn't seem to do anything to stop sending a signal (even if it is just a blank screen) [23:19] also, i installed the kernel using sudo dpkg -i linux-image-2.6.27-11-server 2.6.27-11.27 [23:19] was that correct === asac_ is now known as asac