/srv/irclogs.ubuntu.com/2009/03/19/#ubuntu-server.txt

keessay, anyone familiar with nscd?00:27
zulbosco_: ec200:29
geniiBah. Does anyone know what encryption is used by pine/alpine when -passfile option is used?00:33
jmarsdenIt's something feeble and reversible... considered dangerous except on single user machines... don't use it :)00:38
jmarsdengenii: Look at pine/imap.c for the function xlate_out to see what they do to "decrypt" a password from that file.00:49
geniijmarsden: Was hoping I wouldn't have to poke around in it's source code just yet but it looks like this might be neccesary, unfortunately...00:50
jmarsdenYes, it's a homebrew "encryption", so if you really need to undo it, you'll want to read that code.00:51
geniijmarsden: Thanks00:51
{bosco}www.serverpronto.com what is wrong with them01:02
* genii wades through reams of macos_store_pass references01:02
{bosco}@lart {bosco}01:03
{bosco}@lert {bosco}01:04
{bosco}www.serverpronto.com what is wrong with them01:06
{bosco}srry did not mean to push enter twice01:06
bromic94having issues with openpanel any other programs like that, that you recommend guys?01:07
jmarsden{bosco}: what does serverpronto have to do with Ubuntu server?  I'd guess they are a low cost hosting place with the usual low prices and low support?01:08
jmarsdenbromic94: The official recommended control panel for Ubuntu Server is ebox01:09
{bosco}jmarsden, becuase you can run ubuntu on there deticated servers and i was thinking about going with them since i can run ubuntu01:09
jmarsdenYou can run it pretty much anywhere... the question is how good is their support when things break, and how good they are at preventing things from breaking in the first place...01:10
twb...which are not really questions for #ubuntu-server, I think.01:10
jmarsdenWhich was my original point :)01:11
twbjmarsden: my boss had a look at ebox and he said it was just as flaky and horrible as all the other web admin tools01:11
jmarsdenSo he's now writing a better one, right? :)01:11
twbjmarsden: I'd rather just give my customers (who are not very technical) a VNC connection and run gnome-system-tools.01:12
twb(I'd tunnel X, but they are often using Windows desktops with an Ubuntu server.)01:12
bromic94thank jmarsden i will try out ebox01:12
bromic94not a huge fan but oh well01:12
bromic94i can try it again01:12
bromic94u have to add the modules in right?01:12
twbjmarsden: do you have an opinion on that approach?  (I haven't actually tried it yet, currently we are still using webmin with CentOS)01:13
jmarsdenA tweaked webmin is what I am used to doing too...01:13
twbwebmin needs to die, no question about that.01:13
bromic94what u use now01:13
bromic94lol twb01:14
twbRun lintian on the third-party webmin debs, and you'll see what I mean01:14
bromic94jmarsden: what do you use now webmin or ebox01:14
bromic94you ahev to install different modules though in ebox right?01:14
jmarsdenwebmin.  But it is officially a bad idea to use webmin on Ubuntu these days...01:15
bromic94why01:16
jmarsdenThe way it manages some config files is incompatible with Ubuntu packaging and updates, I think is the official reason... basically you can't use it and not know exactly what it is doing... so it doesn't really work as an "easy" way to admin a box for newcomers.  You can get yourself into trouble with it.01:18
bromic94ebox u have to add different modules right/01:18
jmarsdenHave to?  I think it depends what you want it to do.  Try it :)01:18
racecar56i emulated my server in vmware and installed ubuntu 8.10 server on the 'virtual machine' in vmware where the harddisk was the physical server's main hard drive.. it is a hp mediasmart ex475 and i really want to get web hosting and backup working on it...01:21
racecar56it dosent seem to have internet01:21
bromic94i removed stuff from openpanel and i think it just scrwed my sever01:22
bromic94luckily its a VM01:22
bromic94racecar56: so your server has no internet?>01:22
racecar56bromic94 it seems not01:22
bromic94hmm01:22
bromic94what do you get when you get ifconfig01:22
bromic94*when u run ifconfig01:22
racecar56its a headless erver >_>01:22
racecar56*server01:22
racecar56with no video card01:22
bromic94?01:22
bromic94oh ok01:22
bromic94why no video card01:22
bromic94can you ssh into it?01:22
racecar56well if it has no internet... no01:23
bromic94jmarsden: i guess it killed my ssl as well01:23
bromic94if you are on the same network it might be able to get on01:23
jmarsdenracecar56: How did you get vmware onto it with no screen and keyboard and no network connection? Serial console connection??01:23
bromic94when you say internet i think u have access to ur intranet but not internet01:23
racecar56jmarsden helooooooooooo its on my desktop pc01:24
twbvmware's not part of ubuntu, so you shouldn't expect it to work01:24
racecar56 you dont understand01:24
jmarsdenThen you don't really have a headless server... and your issue is with vmware.01:24
racecar56you have 0% idea of what i mean01:24
twbracecar56: plonk.01:24
racecar56i said i mounted my vm's hard drive to the REAL one...01:25
racecar56it is _NOT_ vmware's fault, when i run the _REAL_ server on the previously-vmware'd hard disk it dosen't have internet01:26
racecar56twb see my message01:26
bromic94the network adapater sounds like its not set up correct in vmware01:26
bromic94i hate vmware01:26
bromic94really raelly do01:26
bromic94i use virutal box01:26
bromic94its better01:26
racecar56its NOT running in vmware01:26
bromic94in my opiion01:26
racecar56i like vbox too but it cant mount real ard disks01:26
racecar56*hard01:26
racecar56and i even use vbox01:27
bromic94why cant it?01:27
twbkvm is the officially santctioned virtualization technology for Ubuntu.01:27
bromic94never heard of KVM01:27
bromic94will have to check it out01:27
racecar56i have and it sucks... it only interferes01:27
StargazerIs there a way to open PDF file in the CLI ?01:27
bromic94was that to me or twb ?01:27
twbkvm is also the only virtualization technology included in the default Linux kernel.01:27
racecar56well anyway how the heck do i get the stupid internet working01:27
jmarsdenbromic94: https://help.ubuntu.com/community/KVM01:28
twbStargazer: yes: pdftotext, or by rasterizing each page and displaying it using a framebuffer image viewer.01:28
StargazerI like the sound of pdftotext.01:28
racecar56it works when i run the server in vmware but if i put the server's hd into the server it seems like it boots but dosent have internet01:28
twbStargazer: it is lossy in most circumstances.01:28
StargazerBut i just realized there are no tabs in CLI mode.01:28
bromic94jmarsden: you run kvm in linux01:29
racecar56you see: i want to be able to ssh the server and that's all01:29
bromic94ok01:29
jmarsdenbromic94: I use Virtualbox because my CPU isn't beefy enough for KVM, on my desktop here...01:29
StargazerTwb: do you know if pdftotext keep italics ?01:29
bromic94i think i am going to put ubuntu desktop 8.04 on my other laptop any words of wisdom or any drivers i may not be able to get it is like 2-3 years old'01:29
bromic94*2-4yrs old01:29
twbStargazer: it does not; it emits a plain text file.01:29
twbjmarsden: where "beefy" means "has VT extensions"?01:29
racecar56oh and did i forget to mention i had to go through a bunch of crazyness before too01:29
racecar56i really would like the server for backup/web hosting01:30
* Stargazer curses01:30
jmarsdentwb: Yes.  I have an E5200 here, an E8400 would have meant an exra $100 or so, a significant percentage of the total system cost :)01:30
twbjmarsden: bummer.01:30
StargazerIs there any way to get tabs or seperate instances(that can be switched to) in CLI mode ?01:31
jmarsdenStargazer: try using screen01:31
StargazerWhat ?01:31
twbStargazer: GNU Screen provides multiplexing facilities, including an optional "taskbar" of open windows.01:31
StargazerAnd the package is called..?01:31
jmarsdenStargazer: the package called screen.  As in   sudo apt-get install screen    # and then man screen01:31
twbStargazer: "screen"01:31
twbStargazer: see also /join #screen01:32
racecar56soo... what should i try doing? i have an ip scanner and i scanned for hosts between ip 192.168.1.0 to 192.168.1.100 and then i did 192.168.1.100 to 192.168.1.150 and it returns nothing but some other networked computers......01:33
JanCand 'screen-profiles' for extra fun  ;)01:33
twbJanC: that's a package?  Yeesh.01:34
racecar56it dosent exist for me01:34
JanCit's in jaunty01:34
racecar56doh01:34
racecar56im on intrepid01:34
* twb is afraid. Very afraid.01:34
racecar56both on my server and desktop01:34
racecar56and even my (old) laptop01:35
twbJanC: if stuff like screeen is easy to learn, how will I justify the extra zero on my "senior admin" paycheck?01:35
JanCtwb: you write your own custom -profiles including an ASCII-art company logo?01:36
* racecar56 waits01:36
jmarsdenracecar56: Plug a screen and keyboard into the physical server hardware machine and troubleshoot its networking that way.01:36
racecar56jmarsden "it has no video card"01:37
racecar56as i said before01:37
jmarsdenOK, use a serial cable and set it up for serial console and then troubleshoot its networking from that.01:38
racecar56whaat?01:38
geniijmarsden: There's always PLIP...01:38
jmarsdenracecar56: https://help.ubuntu.com/community/SerialConsoleHowto01:38
twbJanC: it looks to me that all that provides is some wanky colours in the hardstatus line01:38
hadsIt's not.01:39
hadsIt's detailed in blog posts, you can find out what it does if you desire.01:39
twbhads: well, I was looking at the source package.01:40
twbhads: reading blogs is too complicated01:40
JanCtwb: plus a menu, plus some scripts for statuses ("new updates" & "you should reboot")01:40
twbJanC: ah, using backticks?01:40
racecar56it sayd it assumes that i have enabled the serial console in your BIOS... server's? if so then scratch that01:40
jmarsdenracecar56: Let me guess... your server has no serial port either??01:41
JanCtwb: I didn't look at it in detail, it's mostly kirkland's project AFAIK01:41
racecar56jmarsden probably not... what does it look like?01:41
jmarsdenSerial port.  DB9 connector.  Serial, like RS232 serial... wow... I must be getting old...01:42
twbJanC: I started approaching the problem (discoverability in screen) from the approach of writing a "Screen Hacks" textbook, but I only managed a couple of chapters before I got distracted.01:42
kirklandJanC: what's up?01:42
racecar56i know it has this: usb ports (many), a lock thingy, ethernet adapter, esata, power (durrrrr........) and thats it01:42
JanCkirkland: twb asked how the status symbols in the ubuntu screen-profile work01:43
jmarsdenracecar56: So this is new-ish hardware.. but has no video card and no way to add one??  What sort of "server" is this beast??01:43
kirklandJanC: ah, thanks for the plug01:44
racecar56jmarsden it's a hp mediasmart ex475 and i got it from last december... it came with winblows 2008 but i wiped it01:44
kirklandI think there's a bit more there than "wanky colors in the hardstatus line"01:45
racecar56jmasrden some people say there is a possibility of a video card, but it's *H*A*R*D* to do01:45
racecar56(for me)01:45
hadskirkland: Indeed01:45
bromic94yea my server is not foobared01:46
StargazerSo, um, how do i take a screenshot in CLI mode ?01:46
StargazerAnd save it to a SD Card ?01:47
jmarsdenracecar56: Sounds like you are in the realm of playing with a NAS box that isn't really designed for Linux/*nix use... until you have some way ot getting console access you're giong to find it hard to get anything at all working on it.  If there is a modding community working with that hardware, check their web site/wiki/whatever for how far they have got, I suppose.01:49
jmarsdenStargazer: you can use script to save everything in a session to a file, and then you could just copy that file to an SD card or whereever else you need it?01:49
StargazerNo picture ?01:50
racecar56jmarsden there is a website called www.mediasmartserver.net but my account is hacked up (cant login, but i didnt get banned, nor does it say so)01:50
jmarsdenPicture?  in text mode??01:50
jmarsdenracecar56: Open a new account, or email the sysadmin.01:50
racecar56doh....01:50
racecar56jmarsden http://samuel.thollander.net/projects/linux-on-hp-ex470 is proof01:51
racecar56jmarsden the model is a bit different but ex475 is just a bit better :>01:51
jmarsdenracecar56: Did you read his article?  He says he hasn't got networking working yet...!01:52
racecar56jmarsden ahhhhhhhh...................01:52
racecar56DOH!01:52
jmarsdenHe added an external USb NIC instead of using the onboard one...01:52
racecar56not good01:53
racecar56i guess ill have to get a external network card O_o01:53
jmarsdenWell, external USB NICs are pretty cheap...01:53
racecar56holy cow 3 dolars01:54
JanCjmarsden: you can even play movies in text mode  ;)01:54
DeevzWhat is the LDAP server?01:55
jmarsdenJanC: I'll pass on that wonderful opportunity :)01:55
DeevzI am installing eBox and I am asked to enter a hostname01:55
Ubun00blooking for some postfix help if someone has some time01:57
jmarsdenDeevz: installing ebox should be as easy as    sudo apt-get install ebox  # plus any ebox-* modules you want to use01:57
Ubun00b postfix[4993]: fatal: open /etc/postfix/main.cf: No such file or directory01:58
Deevzhmmm... well this is what I get01:58
Deevzhttp://www.jetScreenshot.com/demo/20090318-171-65kb.jpg01:58
JanCStargazer: when you are using 'screen' you can make a "hardcopy" of the text modus screen01:58
racecar56aaaaaaa visa01:58
racecar56*vista01:58
=== Ubun00b is now known as Big_Ham
StargazerJanC: ho ?01:58
Deevzany idea what that screen is?01:59
StargazerHow*01:59
Big_Hammy main.cf is there, but empty ... not sure how it became empty, but help filling in necessary values would be appreciated01:59
jmarsdenDeevz: You are configuring ldap-auth-config, not ebox...02:00
jmarsdenBig_Ham: Probably easiest to uninstall and reinstall postfix?02:00
racecar56hey jmarsden i found a LUCKY one... ill get it02:01
racecar56jmarsden a usb network card..02:01
Big_Hamcant uninstall without uninstalling MYSQL02:01
Big_Hamand Apache and MySQL work fine02:01
DeevzAnd what is that, jmarsden?02:01
jmarsdenBig_Ham: Why not?02:01
Big_Hamjust what I read online02:02
jmarsdenDeevz: It is a package designed so you can authenticate users against an LDAP server...02:02
jmarsdenBig_Ham: Makes no sense to me... let me try it here (Ubuntu 8.10 Intrepid x64)...02:03
Big_Hamditto on Ubuntu version, but x8602:03
Big_HamFYI02:03
Big_Hamthank God for the IRC ... by the by02:05
jmarsdenBig_Ham: Seems to work for me leaving mysql-server and mysql-client alone...02:05
Big_Hamwhat command did you use?  apt-get remove?02:06
jmarsdensudo apt-get remove postfix02:06
Stargazer"God" ? thank the guys who sat on their butts for 24h/d for weeks on end creating person-to-person chatting and then someone else coming along and exploding it from person-to-person to an entire room.02:06
Big_Hamspoken like a true programmer02:07
Big_Hamsuccessfully removed, and you appear to be right, jmarsden02:07
jmarsdenGood :)02:08
Big_Hamreinstalling02:08
Big_Hamwhen running newaliases, I get multiple warnings02:08
Big_Hambut at least this time I get "relay access denied" from mail client02:09
Big_Hamthat's a better message02:09
jmarsdenCan you pastebin the warnings somewhere and provide us a link?02:09
Big_Hamnot familiar with pastebin ... but I can take a screeny and get it up02:09
jmarsdenBig_Ham: if you insist... but go to http://pastebin.ubuntu.com and cut and paste your text into there...02:10
Big_Hamnice tip02:11
Big_Hamit's up02:11
Big_Hamunder Big_Ham02:11
jmarsdenGive us the URL to it so we can find it, please?02:11
geniiYou have to sort of let us know the url...02:11
Big_Hamhttp://pastebin.ubuntu.com/133363/02:11
Big_Hamsort of huh?02:11
Big_Hamcan you tell I'm new to pastebin/Ubuntu?02:11
Big_Ham:)02:11
Big_Ham<--- Windows admin turning Ubuntu Admin02:12
racecar56someone had a pastebin 133337!02:12
DeevzThats nice big_ham02:12
jmarsdenOK, so basically there is a problem in your /etc/aliases file, so pastebin that and provide the URL for *that* one too.02:12
Big_Ham:)02:12
Deevz<--- Windows non-admin nub turning Ubuntu Admin02:12
Deevzrofl02:12
racecar56lol02:12
jmarsdenDeevz: Did you get past the unwanted ldap-auth stuff?02:13
Big_Hamhttp://pastebin.ubuntu.com/133365/02:13
DeevzTo be honest, I wrote just anything02:13
DeevzI guess it is the url I will enter in my browser to log in to the web console02:13
Deevzbut its just a wild guess02:14
jmarsdenBig_Ham: Woah, that's not an /etc/aliases file, that is a /etc/postfix/main.cf file!02:14
jmarsdenDid you accidentally mv your main.cf to /etc/aliases or something??02:14
Big_Hami don't know how I could have02:14
Big_Hamto be honest02:14
Big_Hami just uninstalled and reinstalled to boot02:15
Big_Hamif I delete aliases, will it recreate?02:16
Deevzwhat is the command to shut down the computer?02:16
Deevzok nm me02:16
Deevzits shutdown rofl02:16
Big_Hamis this quiz for me, Deevz?02:16
jmarsdenBig_Ham: Replace it with the contents of http://pastebin.ubuntu.com/133366/02:16
geniiDeevz: telinit 0     works too02:17
jmarsdenDeevz: sudo shutdown -h now  # would be conventional on Ubuntu...02:17
Deevzok thx02:17
Deevzhmmm02:17
DeevzI typed man shutdown and I am stuck at the end of the page02:18
Deevzcant enter a command02:18
jmarsdenDeevz: hit q for quit02:18
Big_Hamok, done jmarsden02:18
Deevzoh thx02:18
Deevzdidnt know how that pager works02:18
jmarsdenBig_Ham: OK, now run sudo newaliases02:18
Big_Hamseems to have run02:19
jmarsdenDeevz: When you have time try man less   and man more  for info on those two pagers02:19
Big_Hamno error anyway02:19
jmarsdenBig_Ham:  Then you should be all set.02:19
Big_Hamwhere can I find relay access settings?02:19
Deevzthx j02:19
Big_Hamand ... thanks for the help with that one jmarsden02:19
jmarsden/etc/postfix/main.cf # but they are not really there in the default one...02:21
Deevzjmarsden, which pager is on by default? "more" or "less"?02:21
Deevzor are they rly the same pager02:21
Big_Hammy main.cf is empty there02:21
geniiDeevz: They're not the same. less is better02:21
Big_Haminteresting ...02:21
twbless is more bloated02:22
jmarsdenDeevz: They are different... less is the one to learn and the one most commonly used these days.02:22
geniitwb: You can't go backwards in more02:22
twbThe "default" depends on what /etc/alternatives/pager links to, and to the logic in sensible-pager.02:22
twbgenii: I'm aware of that.02:22
JanCthere is also 'most' is you can't choose between more or less02:23
twbJanC: and w3m02:23
DeevzLOL02:23
Deevzthe ubuntu developers sure know the names02:23
twbDeevz: these utilities existed for decades before Ubuntu existed.02:23
DeevzI see02:23
jmarsdenBig_Ham: main.cf is empty??  That's... not what I would expect.  Look in /usr/share/postfix/main.cf.dist for a very complete and commented one.02:24
Deevzhow should I be able to access my ebox interface now?02:24
DeevzI didnt specify an url to access it02:24
Deevzand I cant just type the ip of the web server since its a virtual machine on virtualbox...02:25
jmarsdenhttp://your.ip.address/ebox  # I think?02:25
jmarsdenWhy can't you type the IP of that virtual machine's network interface?02:26
Deevzbecause I dont know it02:26
Deevzlet me check if I can find02:26
jmarsdenBTW if you are a beginner why are you using Virtualbox... ????02:26
Deevzwhat else to use?02:26
jmarsdenReal hardware?02:26
DeevzWell, I have my desktop02:26
jmarsdenVirtualization adds complexity.02:27
DeevzIts powerful enough to run virtual machines02:27
Big_Hamchecking it out ... is any of this uncommented or do I need to go through the whole file?02:27
Deevzand beside that, I have my eee pc...02:27
DeevzI think virtualization is a good option, I have the power, the screen real estate to run it, and it doesnt require me to have 2 sets of hardware02:28
jmarsdenDeevz: Do you need the virtualization, the separation of roles, for something?02:28
DeevzNot rly02:29
DeevzMy physical machine is the client and I have a virtual server on it02:29
Deevzthats how it is atm02:29
jmarsdenSo why not just run ebox on the main machine??02:29
jmarsdenWhere is the benefit?02:30
Deevzyou mean install ubuntuserv on my desktop?02:30
jmarsdenif you really need Ubuntu Server... but why not just install ebox on your desktop, which runs Ubuntu Desktop...?02:30
Deevzhahaha02:31
Deevzbecause it doesnt02:31
DeevzI come from windows02:31
jmarsdenWhy not learn Ubuntu Desktop first (by running it on your desktop machine) and then learn about server admin things later, when you are comfortable with Ubuntu in general?02:32
jmarsdenIf you already have VirtualBox-OSE all happy and working, and you fully unerstand its networking stuff, then fine, no real problem, I uppose...02:34
jmarsdenBut if not, it is one more piece of complexity...02:34
DeevzIn apparence, virtualbox doesnt seem so complex...02:35
jmarsdenThen... how come you don't know what IP you assigned to the VM running Ubuntu? :)  Virtual machines *are* complex things...02:36
Deevzhmmm02:36
Deevzmaybe I should pick up a vbox book then02:36
Deevznm, no such thing on amazon >.<02:37
jmarsdenIf you had installed on a real space PC you would have typed in a static IP address and so forth at Ubuntu server install time, and you'd *know* what its IP was from that... now... I have no idea what you did...02:37
jmarsdens/space/spare/02:37
jmarsdenAnyway, for now I'm going AFK to eat, probably back a little later...02:37
Deevzok02:37
Deevzcya, thx for the help02:37
StargazerHow do i mount my SD card ? (i thought it was being auto-mounted but the message stuck for several minutes so i ^C to close) any idea ?02:41
StargazerIdeas*02:41
Big_HamOK jmarsden, one more very specific postfix question ... I need to know how to create authentication by mail password only, and not by ipaddress, network, etc02:43
Andre_Gondimhow may i change de screen resolution in server?03:02
jmarsdenBig_Ham: Will the users with passwords be doing POP3 or IMAP to your server to pick up received email also?  Or will they have Unix shell accounts on it?03:04
jmarsdenAndre_Gondim: Ubuntu Server has no GUI, only a text console... so there is really no concept of "screen resolution" to change...03:05
twbjmarsden: there is if you use a framebuffer.03:08
Big_Hamjmarseden they will have shell accounts, and I have dovecot ... they will use POP303:08
Big_Hamalso have squirrelmail installed03:09
jmarsdenOK, so you can use saslauthd to authenticate them to postfix.  I've not done that under Ubuntu but I'm pretty sure that's the way to go...03:09
Andre_Gondimjmarsden: but I have a 17' monitor, how can i use with "full screen"03:09
Big_Hamdid you mean sslauthd?03:09
jmarsdenNo, SASL is the protocol concerned... let me check how to get that in Ubuntu...03:10
Big_Hamnevermind ...03:10
Big_Hamhttp://ubuntuforums.org/showthread.php?t=2633903:10
Big_Hamis that a good reference?03:11
Big_Hamlooks like I need postfix-tls first03:12
jmarsdenIt's a bit old, and I think the chroot stuff is not the same in Intrepid, but otherwise yes.  postfix-tls is definitely the place to start.03:12
Big_Hamthank god for webmin03:12
jmarsdenAndre_Gondim: I don't understand... the text console will occupy all of the screen no matter the size of your monitor.  Unless you are running Ubuntu Server virtualized or something??03:13
uvirtbotNew bug: #345219 in php5 (main) "8.04 server ppc - apache2 server fails after upgrade" [Undecided,New] https://launchpad.net/bugs/34521903:15
racecar56jmarsden just bought the external nic...03:16
racecar56:> hope it works now03:16
Big_Hamjmarsden, are you on during the day at all?03:16
jmarsdenNot usually, but it has been known to happen... evenings (Pacific Time) are more usual.03:17
sbeattieAndre_Gondim: if you want a higher resolution text display, you'll want to add something like "vga=0x31a" (1280x1024 16bit color) to the kernel line in your grub menu.lst. See http://en.wikipedia.org/wiki/VESA_BIOS_Extensions#Linux_video_mode_numbers for some commonly available resolutions.03:17
Big_Hamahhh03:17
Big_Hamwell, I'm in Tampa, so I'm picking up with this one tomorrow03:17
Big_Hamthanks for the tips tonight03:17
jmarsdenNo problem.  Goodnight.03:17
jmarsdenStargazer: sudo mount -t vfat /dev/sda1 /media/floppy  # or whatever device name and directory you need rather than sda1 and floppy03:21
jmarsdenracecar56: See http://mediasmartserver.net/forums/viewtopic.php?t=1290 for a guy selling custom cables so you can hook up a keyboard, mouse and screen to your server :)03:36
racecar56:DDDDD03:37
racecar56jmarsden i saw that page too03:37
Mal3kois there way to login into server when you have accidently blocked ssh port with firewall?03:38
jmarsdenMal3ko: Use the physical keyboard and screen on the server to log in?03:39
Mal3koaside from that?03:39
Mal3kocause its a remote server at datacenter03:40
jmarsdenCall the datacenter NOC and have them sort it out for you.03:40
jmarsdenIf there *were* a way to get past your firewall, it wouldn't be a very good firewall :)03:40
Mal3kolol..03:41
Mal3koit was a stupid mistake..after i logged out only then i realized that i had enabled ufw without adding the ssh port to the allowed port first..03:43
jmarsdenMal3ko: Yes, it's advisable to keep multiple ssh sessions open when changing firewall settings... this is something you only ever learn the hard way, it seems... it's just that I firewalled myself out about 15 years ago or so...03:46
hadsMultiple SSH sessions aren't going to do a lot if you block yourself03:54
jmarsdenhads: It depends what you do... if you reload the config and have "related" stuff allowed through existing sessions stay open.  Then you test by starting a new session, and if if fails you fix things using the earlier (still) open session.  I've done it several times.  Not with ufw, but with iptables and ipchains rulesets.04:12
twbI want to correlate a datapoint.  Does anyone have a server doing software RAID1, which they installed via the Ubuntu Server CD?04:42
twbI want to know what d-i places in /etc/mdadm/mdadm.conf.04:42
twbSpecifically, does it just have an ARRAY entry for each device, or does it use some smarter form of autodetection?04:43
twbOn a couple of machines I've created md RAID1 arrays after the base install (because I had to), and they are not automatically raised at boot time.04:43
RoAkSoAxheya guys anyone expert with KVM that can help me with cloning issues?04:44
racecar56well i gotta go... bye everyone05:44
okkareis mod perl the same as perl06:03
hadsNo06:04
okkaredo you know what packages i need to install for perl to run06:05
hadsperl06:05
okkarei found some tutorials but they all say mod perl06:05
okkareand for php5?06:06
hadsSo, you're talking about a web server.06:06
okkareyepp06:06
hadsIt's best to specify things when asking questions.06:06
hadsapt-cache search libapache2-mod06:07
okkarethat's perl?06:09
okkarei see06:11
okkaresorry, is libapache2-mod-perl2 mod perl or perl then..06:14
p_quarlesit's the perl module library for Apache; "mod perl" is a shorthand way of saying that06:15
FishsceneHello everyone07:58
FishsceneI just installed Ubuntu 8.10 server (x64) and I'm getting EDAC MC0 errors about once every second. This makes it nearly impossible to type in complex commands. Is there a way to disable these notifications?07:59
simplexioFishscene: probably. maybe /etc/syslog.conf could help with that08:02
FishsceneI'll attempt to look at it.08:02
FishsceneUneditable. The errors display over the syslog.conf editor (nano).08:04
simplexiohow about rmmod edacsomething08:05
FishsceneActually, I found those errors don't display if I SSH into the server.08:06
jtajiFishscene: do they display in every virtual console?08:07
Fishscenejtaji, on the server console, yes. But not in an SSH remote session.08:07
jtajiFishscene: I mean have you tried switching to other consoles, ALT+1 through 608:08
jtajisorry if this is obvious to you already ;)08:09
Fishsceneok so, in editing syslog.conf, the only thing I can make heads or tails of that seems related is the section: "# Logging for INN news system"08:09
FishsceneNo, not a problem08:09
FishsceneI'd rather explain this 4x than put up with the constant stream of error messages =(08:09
Fishsceneoh, sorry, jtaji, yes, all alt+1-6 consoles get these error messages.08:11
jtajiFishscene: so it seems like EDAC errors are in relation to memory error correction08:12
Fishscenecorrect.08:12
FishsceneI have ECC RAM on this machine.08:12
jtajicould you perhaps have non-ECC memory while ECC is selected in the BIOS ?08:12
jtajioh ok08:12
jtajiFishscene: bad module perhaps?08:13
* Fishscene wonders if this is related to ESXi auto-kernel crashing upon boot on the same server.08:13
FishsceneIt's possible a module went bad. Although I didn't suspect a thing because Ubuntu Dekstop x64 worked just fine. But ESXi suddenly and mysteriously crashing was a complete mystery to me.08:14
jtajithat's odd08:16
FishsceneYou're telling me08:16
jtajihow much memory total do you have?08:17
Fishscene4GB08:17
jtajiby x64 do you mean x86, or x86-64?08:18
Fishscene64-bit version08:18
FishsceneInteresting. memtest86 reports ECC off08:21
Fishsceneok, I found an example output of the error I'm seeing08:21
FishsceneEDAC MC0: UE page 0x1fffa, offset 0x0, grain 4096, row 0, labels ":": i82875p UE08:21
FishsceneI was wondering if "row" refered to the slot that the RAM stick sits in that's having issues. My row says "3"08:22
jtajiFishscene: perhaps, I guess you have 4 modules?08:23
FishsceneYup08:23
jtajiyeah I'd probably try pulling two at this point08:23
Fishsceneok. Sounds like a project for later today after I get some sleep (1:24am)08:24
jtajigood luck :p08:24
FishsceneThanks jtaji. :D08:24
FishsceneYou know what I like *most* about the Ubuntu community?08:25
FishsceneHundreds of people hanging out waiting help people out. Average response time to my questions: 5 minutes. AT&T? 28 hours. Microsoft? 2 hours.08:26
jtajihehe08:27
jtajithe community aspect of this project was definitely insightful08:28
OakboxHi all, I'm having trouble with host names, anyone around to maybe help out?  I can ping other computers on my local network by IP but not by name...  I have just changed my ISP/router and have just recently setup an ubuntu server (LTS) box.09:23
simplexioOakbox: dnsserver is not configured right09:39
simplexioOakbox: old way is add static dnsserver ip's into  /etc/resolv.conf, dunno if there is another way09:40
andolOakbox: As simplexio mentioned, it's about your computers not having any way of knowing each others names. The simple, but not very scalable, solution is to put the information in /etc/hosts09:41
Oakboxthanks for that, I would like to set up a name server on my ubuntu box, would anyone be able to help out with that?  some of my boxes are DHCP windows it would be nice if i could give them their hostnames etc automaticaly...09:47
OakboxI am currently running a linxsys router and seems to be setting my resolve.conf file to domain_not_set.invalid09:51
tesonneed help with postfix / relay (non ssl) / pam10:12
=== Nicke_ is now known as Nicke
AJenboHi, i updated from Ubuntu 8.04.1 to 8.10 and now i can't get the virtual servers back up and running in apache10:34
AJenboi have tried uninstaling and reinstaling apache 2.2.9 but i can't get it to work :(10:35
AJenboIt simply runs the default host on all domains10:36
AJenboI mosty use webmin to setup the server10:46
jtaji!webmin10:56
ubottuwebmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. See !ebox instead.10:56
dexem!ebox | AJenbo10:58
ubottuAJenbo: ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox10:58
=== MohammadBoozary is now known as Mohammad[B]
pjsturgeonWould anybody like to help me test my new PHP add-ons for transmission daemon?11:28
pjsturgeonI have modified wereHamster's watch finished script to move all finished downloads using PHP (it automatically uses the passwords and settings from your main settings file) and have a watched folder script based on the same code. trying to make a nice little "fun-pack" and will soon have it sending emails and creating an RSS feed11:30
pjsturgeonjust need someone to add 3 files and give em a try to see how it goes before I progress and release it11:30
=== pjsturgeon is now known as philsturgeon
Deepsif nobody in here volunteers, someone in transmissions irc channel (#transmission?) may be more forthcoming11:31
philsturgeonsodding IRC client, it has autoloaded me into ubuntu server but is showing me in transmission :p11:31
AJenbothanks for pointing to ebox, ill have a look at it. Turns out the virtual servers didn't work because i set the port to any, setting it to 80 fixed it, preaty odd you would think 80 was in the range of any...11:47
AJenbohmm nice, on the link to eBox you gave me it sayes it doesn't work properly with 8.1011:49
=== mcasadevall is now known as NCommander
kinnaz[sudo] password for myuser:12:04
kinnaz-su: wxport: command not found12:04
kinnazwhats up with that ?12:05
kinnazwhen su succeeds i get that wxport error12:05
kinnazwhere should i look for reference to that12:05
vollmeris there a package for the tmpfs module for 2.6.24-23-server (64bit) I'm not seeing one in hardy12:19
kinnazso anyone has seen that wxport command not found error ?12:25
vollmeryes, do you have an executable 'wxport' program? I'm guessing no?12:27
kinnazvollmer,  the question is why do i even get that error12:28
kinnazwhat could be referencing do it12:28
kinnazi would quess wxport is smt about gui12:29
vollmerwhatever is trying to run it12:29
kinnazbut i have no xorg installed there12:29
vollmerfigure out when it happens and look what just ran?12:29
kinnazvollmer,  thats the queston is why12:29
kinnazeverytime i do sudo su -12:29
kinnazi get that error12:29
kinnazand nothing in rooc bashrc12:29
kinnazroot12:29
vollmerstrace it dude12:30
AJenboi can't get ebox to install on 8.10 :(12:30
dexemAJenbo, I think there is a way... you can go to #ebox and ask :P12:31
vollmerAJenbo: I'll trade you tmpfs support for ebox12:31
AJenboSure what is your issue with tmpfs?12:32
vollmerit's not compiled in evidently, and there is no module for it12:33
AJenbosimply just install an older os (i belive this is also the supported solution for my problem)12:33
vollmerum12:33
vollmerhaha riiiigh can't really just wing it and reload a server on the fly12:33
AJenbo:)12:34
vollmergrabed the backported modules package but it's not in there12:34
_rubensudo su isnt recommended btw, sudo -i is12:38
AJenbohis copy paisting a line in to the end of sources.list the propper way to do it?12:39
sorenvorian: What makes you say it's not compiled in?12:40
sorenvorian: Sorry, not for you.12:40
uvirtbotNew bug: #345330 in samba (main) "smbfs, samba & samba-common are uninstallable" [Undecided,Incomplete] https://launchpad.net/bugs/34533012:40
sorenvollmer: What makes you say it's not compiled in?12:40
sorenvorian: A quick "mount" should show you at least one tmpfs already mounted.12:41
AJenboadding the sugested lines gives me a NO_PUBKEY 5F99A088342D17AC when i run apt-get update :(12:44
sorenvorian: Gah, that wasn't for you either :)12:49
kinnazwaitpid(-1, -su: wxport: command not found12:51
kinnazstrace not really helpful :P12:51
sorenAJenbo: You need to add the archive's key.12:53
sorenAJenbo: It's a PPA, I presume?12:53
sorenAJenbo: On its page on Launchpad, there are instructions for adding the key to your apt keyring.12:53
petiaivoks, hello friend12:58
petiaivoks, its orudie12:58
ivokshi12:58
petia:)12:59
petiai tried setting up spam filter yesterday by following this https://help.ubuntu.com/8.10/serverguide/C/mail-filtering.html13:00
petiai am pretty sure i did everything accordingly but emails stopped going in or out completely13:01
petiado you think this is a good tutorial ivoks ?13:02
petiaor guide rather13:03
ivoksyes, it's good13:04
petiaso what do you think could have caused the emails to stop going in / out ?13:05
simplexiothats what i call good spam filter :)13:07
ivokspetia: lack of knowledge13:08
petiaivoks, heh13:09
petiai'm trying man13:09
petiaquestion if /etc/hostname file does not exist , should i create one ?13:26
ivoks?13:32
ivoksyou don't have /etc/hostname?13:33
petianope :(13:35
ivoksyou deleted it?13:36
petiaivoks, have you heard of a problem where someone sends an email, and an email client would get like 10 messages in a row of the same message13:36
ivoksno :)13:38
mib_qwvzizi just got done doing an aptitude install bastille on my vps ubuntu box new to ubuntu server never heard anything about bastille anything else i should do to make it more secure and will bastillie work13:49
mib_qwvzizwell13:49
=== mib_qwvziz is now known as {horhay}
{horhay}well13:49
petiaivoks, out of 10 people in the office, only one person is having this problem and its intermnittent. He is also the only person that is using blackberry to receive emails13:50
=== {horhay} is now known as trifecta
trifectazi just got done doing an aptitude install bastille on my vps ubuntu box new to ubuntu server never heard anything about bastille anything else i should do to make it more secure and will bastillie work14:07
ivoksinterpunction?14:10
ivoksmathiaz: hi14:13
petiaivoks, any reason why that could be happening ?14:15
_rubenwell .. the usage of a blackberry sure seems part of the cause :)14:16
mathiazivoks: hi - how are you doing?14:17
kpettitgood morning14:17
ivoksmathiaz: a bit sick, but good :)14:17
mathiazivoks: welcome to the club! ;)14:18
ivoksmathiaz: sorry for missing meeting, i had some things to do14:18
mathiazivoks: np14:18
mathiazivoks: I had a question wrt to bacula14:18
ivoksmathiaz: i've seen lots of... errorrs14:18
ivokserrors14:18
mathiazivoks: while sponsoring your diff yesterday I saw that bacula-director-sqlite{,3} was in universe14:19
mathiazivoks: errors?14:19
mathiazivoks: should we move director-sqlite3 in main?14:19
mathiazivoks: mysql and postgresql are already in main14:19
ivoksiirc, sqlite3 was in main14:19
ivoksumm... not14:20
ivoksi guess we forgot about it14:21
mathiazivoks: http://packages.ubuntu.com/search?keywords=bacula-director14:21
ivoksat the time, sqlite3 (binary) wasn't in main before14:21
petiawhat is the new ubuntu release ?14:21
mathiazivoks: oh really?14:21
ivoksso after it went into main, we didn't push bacula-director-sqlite3 in there14:21
mathiazivoks: I thought we always had one of the sqlite in main.14:21
mathiazivoks: or may be it was just the library14:22
ivokslibrary yes, but not the binary14:22
mathiazivoks: and not the binary14:22
ivokshttp://packages.ubuntu.com/search?keywords=sqlite314:22
ivoksit went into main in hardy14:22
aciculapetia: next one is jaunty jackalope i think14:22
ivoksbut we forgot to push director too :(14:22
mathiazivoks: ahh.. and the binary is used by the directory to ... ?14:22
ivokscreate database14:23
mathiazivoks: right. So I guess we should move director-sqlite3 to main.14:24
ivokscorrect14:24
ivoksbacula failed to build on lots of archs14:25
ivoksbut the problems weren't related to bacula14:25
ivokshttps://launchpad.net/ubuntu/+source/bacula/2.4.4-1ubuntu5/+build/909616/+files/buildlog_ubuntu-jaunty-ia64.bacula_2.4.4-1ubuntu5_FAILEDTOBUILD.txt.gz14:25
mathiazivoks: what about bacula-sd-sqlite3?14:25
ivoksthis one is strange:14:26
ivokshttps://launchpad.net/ubuntu/+source/bacula/2.4.4-1ubuntu5/+build/909617/+files/buildlog_ubuntu-jaunty-lpia.bacula_2.4.4-1ubuntu5_FAILEDTOBUILD.txt.gz14:26
ivoksmathiaz: it's on to push it into main14:26
ivokser... sd14:26
ivokssorry...14:26
VSpikeg'day folks. To run 8.04 server on VMWare 2.0, without X, is there any reason to install VMWare tools?14:26
mathiazivoks: right - I've seen a couple of build failure for other packages on some archs.14:26
VSpikeThey sound X related to me (video, mouse..)14:26
ivoksmathiaz: if we push director, we should push sd too14:26
ivoksmathiaz: since that sd is used for recovery of sqlite3 DB when catalog isn't available14:27
mathiazivoks: right - I think they can easily be moved to main as these are only binary packages14:28
mathiazivoks: they don't require a full MIR.14:28
ivoks/usr/lib/libldap_r-2.4.so.2: undefined reference to `sasl_global_listmech@SASL2'14:28
ivoksi guess this is a problem in libldap library14:28
ivoksmathiaz: should i write it?14:29
ivoksmathiaz: i could do it for dovecot-postfix too14:29
mathiazivoks: I've just asked in ubuntu-devel.14:33
mathiazivoks: no need for a MIR14:36
mathiazivoks: I will just update the seeds.14:36
ivoksgreat14:36
mathiazivoks: bacula-{director,sd}-sqlite3 added to the dvd seed14:47
mathiazivoks: that way it should end up in main for jaunty.14:48
mathiazivoks: where could dovecot-postfix be put?14:48
ivokswell, which seeds are there? :)14:50
ivoksi'm testing the solution for bug 33996614:52
uvirtbotLaunchpad bug 339966 in dovecot "dangerous action: dovecot-postfix force-installs new conf file" [Low,Confirmed] https://launchpad.net/bugs/33996614:52
=== hessml|away is now known as hessml|away|away
Andre_Gondimwhen i install my ubuntu server jaunty alpha 6, had a question if I want to use landscape, i choose it, but i read to use this i had to pay, how may i change that option?15:18
acicula Andre_Gondim i think you can just deinstall the landscape package15:23
Andre_Gondimacicula: but I remember that has a option to automatically download securty packages, how can i change for this?15:23
aciculaunattended_install does that15:24
RoAkSoAxHi guys. Anyone had problems with the network interfaces in a Cloned KVM guest?15:24
aciculathat's not related to landscape i think, at least i use it to automaticly apply sec updates15:24
aciculaAndre_Gondim: it's called unattented_upgrades even15:25
aciculaugh15:25
Andre_GondimI want to use a automatically sec updates15:25
aciculaunattended-upgrades15:25
aciculathat'll do it15:26
aciculai just installed it , configuration is under /etc/apt/apt.conf.d/50unattended-upgrades15:27
thefishis there a special way to get /proc/bus/usb/devices ?15:34
thefishits just that devices file i seem to be missing15:35
thefishits a link to .usbfs/devices15:35
joesuffcerenI'm running 8.04.1 64 bit server as a virtual machine. The machine is used for mail filtering (spam, viruses, etc.) and nothing else. I have mailscanner and mailwatch installed on it, and it has been operation and working splendidly for months. Nothing has changed with the machine, but this morning it won't accept mail, I can't get to the interface of the software served via apache....15:57
joesuffceren...Essentially the only network connectivity it has is that it will respond to pings15:57
joesuffcerenOther virtual machines on the same host have no such problems, so I believe it's isolated to this machine15:58
joesuffcerenI've tried restarting networking and even rebooting the box to no avail. Iptables -L shows no entries, and I'm not running apparmor15:58
joesuffcerenany ideas on where to begin troubleshooting would be much appreciated15:59
ivokscan you telnet to port 80 or other open ports?15:59
jmedinajoesuffceren: check your sendmail/mailscanner daemons are runing, if so, check the logs16:01
jmedinahave you tried telnet 25 from Internet to your mail filter?16:01
jmedinahi there, anyone here using pam_mount?16:02
joesuffcerenivoks: no, I cannot16:06
joesuffcerenjmedina: I'm actually running postfix, but postfix, mailscanner, and other expected daemons are running16:06
joesuffcerenI'll look at the logs again16:06
jmedinajoesuffceren: is it accesible from Internet?16:07
joesuffcerenport 25 for mail and some other ports for razor pyzor and DCC16:08
joesuffcerenjmedina: I have tried telnet 25, and it times out16:08
joesuffcerenivoks: I take that back, I can telnet to 80, but I never get http headers. I'm not familiar, though, with what I should see when I do that to apache16:09
ScottKjoesuffceren: You know that Postfix upstream recommends not using mailscanner, right?16:09
aciculaif you telnet you have to send an http command first16:09
aciculaor just type something and you'll get an error response16:10
joesuffcerenScottK: I was not aware of that. while I regret that what I'm doing is not a recommended practice, do you think that would have anything to do with my sudden inaccessibility of the network?16:10
joesuffcerenacicula: I hit enter several times and got a bunch of special characters back16:10
ScottKjoesuffceren: No.  It's not likley related.  I'd encourage you to look at the archives of postfix-users when you have some time.16:11
aciculajoesuffceren: means there's at least something running i suppose16:11
joesuffcerenScottK: will do! thanks16:11
sLaeYa!pastebin16:12
ubottupastebin is a service to post multiple-lined texts so you don't flood the channel. The Ubuntu pastebin is at http://paste.ubuntu.com (make sure you give us the URL for your paste - see also the channel topic)16:12
aciculajoesuffceren: though if it's apache you should just get an error message, not special characters16:12
sLaeYahi I am having problems with my apache service failing to start properly - http://paste.ubuntu.com/133726/16:12
aciculasLaeYa: looks like it needs the suexecmodule loaded?16:13
aciculahttp://httpd.apache.org/docs/2.0/mod/mod_suexec.html16:14
PecisDarbsHi people, how can I enable safely support for old passwords in Hardy MySQL 5.0 server?16:14
PecisDarbsShould I update root password first?16:14
joesuffcerenhmmm, yikes, whatever it is is not apache. I just did "/etc/init.d/apache2 stop" and I get the same thing when I telnet 80 as I did before16:14
sLaeYayes I believe so, I have a fresh install of ubuntu 8.10 and attempted to install ISPconfig3 which presented me with that error16:15
aciculawhat does netstat say that is listening there16:15
ivoksmaybe you have two machines with the same IP?16:17
joesuffcerenivoks: by jim, I think you're right16:19
lamontScottK: upstream only recommends that because mailscanner is TOTAL API IGNORING CRACK16:20
lamont:-D16:20
ScottKYep.16:20
joesuffcerenI'm sorry to bother you guys with a stupid question. I should have checked that first. I don't know why my dhcp server is handing out addresses in my server range, but that problem I can solve16:20
ScottKlamont: And even worse they defend the practice as reasonable.16:21
joesuffcerenthanks so much for all the prompt and helpful input. I'll definitely be back. You've made my first foray into this channel very welcome.16:21
joesuffcerenScottK: I'll definitely read those digests16:21
joesuffcerenthanks again, all16:21
ivoksnp16:22
sLaeYathankyou acicula, I don't know how I missed it - I'm sure I used "a2enmod suexec" all is well now though16:23
ivokshm... is kernel aware of duplicate IP?16:23
ivokswindows is aware when someone uses the same IP16:24
lamontScottK: hence the "TOTAL" and "CRACK" ...16:24
ScottKAgreed.16:24
joesuffcerennot sure. it's an xp home box that took the ip16:24
joesuffcerenbut I got no warnings on the ubuntu box (that I saw. they may be in a log somewhere)16:24
ivoksthere are no warnings like that16:25
ivoksi'll ask kernel guys16:25
jmedinaivoks: not really, redhat network scripts uses arp to query for ip conflicts16:25
jmedinait is the only distro it does that16:26
ivokshm...16:26
ivoksso, this is something we should work at16:26
jmedinaI think it is not kernel job, you can use IPwatch16:27
jmedinain ipwatch main page there is some explanation about how to use arp to detect IP conflicts, just like redhat does16:27
jmedinaivoks: http://www.linuxconfig.org/IPwatchD_an_IP_conflict_detection_tool_for_Linux16:27
ivoksjmedina: thanks16:29
jmedinaipwatch has a GUI notification interface, or simple logs notification16:30
ivokswe should include this into ubuntu16:30
jmedinaby the way any simple tool to create a hardware report?16:31
ivokslshw16:31
jmedinaI know oscinventory, gpli16:31
jmedinayeap that is16:31
jmedina:D16:31
jmedinaI forgot the name, dmidecode gives a lot16:32
big_hamjmarsden ... do you happen to be around?16:42
ivoksmathiaz: ok, i have a working fix for dovecot -> dovecot-postfix upgrades16:42
big_hamahhh, you guys are already talking dovecot/postfix16:42
big_hamI'm using TLS (sasl) to authenticate POP316:43
big_hamand SMTP16:43
ivoksand outlook doesn't work? :)16:43
big_hamunable to connect to server to send mail16:43
big_hamwebmail works fine16:43
big_hambut Thunderbird won't work, so OBV outlook won't work either16:43
ivoksthat's jaunty's dovecot-postfix?16:44
big_hamnot sure ...16:45
big_hamI used simple apt-get16:45
ivokswhat ubuntu version?16:45
big_ham8.1016:45
ivokswhich16:45
big_hamthen followed directions here:16:45
ivoksso, you did manual configuration16:45
ivoks9.04 will have automatic configuration16:45
big_hamhttps://help.ubuntu.com/community/Postfix16:45
mathiazivoks: what's your proposal?16:45
ivoksmathiaz: i'll attach debdiff to the bug16:45
mathiazivoks: awesome.16:47
* jmedina finally migrated from hardy to intrepid for desktop :D16:48
ivokshttps://bugs.edge.launchpad.net/ubuntu/+source/dovecot/+bug/33996616:48
uvirtbotLaunchpad bug 339966 in dovecot "dangerous action: dovecot-postfix force-installs new conf file" [Low,Confirmed]16:48
jmedinait rocks 64bits with kde 4.2.116:48
jmedina:S this is server channel16:49
big_hamany help for my client AUTH issue?16:53
ivoksbig_ham: so... what's the problem?16:53
big_hamsquirrel mail works fine16:53
big_hambut customers will be using some POP client16:54
ivokssquirrelmail doesn't do auth16:54
big_hamjust set up TLS16:54
ivoksare we talking about smtp-auth or pop/imap?16:54
big_hambut when I try to send mail from Thunderbird, it repeatedly asks for my PASS16:54
big_hamthis would be SMTP-AUTH16:54
big_hampop auth seems to work fine16:54
ivoksare you using TLS/SSL when doing smtp-auth?16:55
big_hamyes16:55
ivoksin thunderbird16:55
big_hamTLS16:55
ivokswhich sasl do you use? saslauthd or dovecot?16:55
big_hamsaslauthd16:55
ivoksbah...16:55
big_hambah?16:55
jmedina:D16:55
ivoksi haven't used that one in ages...16:55
=== Andre_Gondim is now known as Andre_Gondim-afk
* jmedina still uses saslauth with ldap, mysql and pam :S16:56
big_hami used setup I linked to earlier16:56
ivoksjmedina: you can do that with dovecot too16:56
jmedinathen you are using dovecot16:56
ivoksno, saslauthd is there16:56
ivoksbig_ham: did you check /var/log/mail.log?16:56
jmedinaivoks: yes I know, I already did it, I need to get the time to migrate maildrop filtring and shared folders from courier imap16:57
ivokswe should advertise /var/log as most important directory on Ubuntu-server16:57
jmedinabig_ham: did you pass all tests?16:57
jmedinaivoks: I always teach that for new linux users16:58
jmedinaabout logs16:58
ivokslogs, /usr/share/doc and manpages16:59
ivoksif you know those three, you know everything16:59
big_hamhmmmm16:59
petiaheh, ivoks is spoonfeeding jmedina just like he spoonfeeds me16:59
big_hamMar 19 12:41:03 phx-server postfix/smtpd[7690]: warning: SASL authentication failure: Password verification failed16:59
ivoksthere... that's step in right direction17:00
jmedinabig_ham: did you pass all tests from the doc?17:00
ivoksmy guess is misconfigured saslauthd17:00
big_hamMar 19 12:41:06 phx-server postfix/smtpd[7690]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory17:00
big_hamyes, passed all tests17:00
jmedinaabout telnet and see AUTH17:00
ivokshehehe chrooted postfix17:00
big_hamyou can telnet to 67.79.129.1817:00
jmedina:S my ISP blocks 2517:00
big_hambooooo17:01
jmedinawe use submission17:01
jmedinabig_ham: I recomend disable TLS until SMTP AUTH works with simple plain text17:02
lamontivoks: chrooting postfix _has_ been  one of my most painful things17:02
big_hamugh ... that setting is in a bunch of places, no?17:02
mathiazkirkland: according to your activity report:  * Syncing and testing the daily server iso, mini.iso17:02
mathiazkirkland: what kind of testing do you conduct on a daily basis?17:02
jmedinabig_ham: well, not really a couple of lines in main.cf17:02
big_hami can just comment them out?17:02
jmedinabig_ham: could you pastebin your main.cf file?17:03
jmedinawithout comments17:03
big_hamsure thing17:03
jmedinawe should add paste.ubuntu.com to pastebinit package17:03
jmedinait hels a lot something like17:04
jmedinaegrep -v '^$|^#' /etc/postfix/main.cf | pastebinit17:04
big_hamhttp://pastebin.ubuntu.com/133768/17:04
kirklandmathiaz: i rsync the daily iso's overnight17:05
kirklandmathiaz: and any time I need a new vm for anything, really, i install from that iso into a kvm17:05
jmedinabig_ham: change smtpd_use_tls = yes to no17:05
kirklandmathiaz: always doing the encrypt-home option (looking for regressions there)17:05
kirklandmathiaz: this is instead of using vm-builder, or something faster17:06
mathiazkirkland: did you automate the install from the iso?17:06
kirklandmathiaz: ensure that the installer gets some exercise on a daily basis17:06
big_hamok, done17:06
kirklandmathiaz: nope17:06
kirklandmathiaz: which is why i'm looking forward to your blog post on the topic ;-)17:06
big_hamnow just test with thunderbird and turn TLS off there?17:06
mathiazkirkland: hehe... okidoki17:06
jmedinabig_ham: firest restart postfix17:06
big_hamok done17:07
big_hamnow testing thunderbird17:07
ivokslamont: i like chrooted postfix17:07
big_hamdamn17:08
ivoksjmedina: why 'no'?17:08
big_hamkeeps asking me to re-AUTH17:08
big_hamas if PASS is bad17:08
ivoksjmedina: smtpd_use_tls is for sending mail from mail server17:08
ivoksit's very easy17:08
jmedinaivoks: is for receiving mail from anothers MTA17:09
ivoksyou have /etc/sasldb2 right?17:09
jmedinasmtp cilent is which send mail to another MTA17:09
jmedinaand smtpd is also used to authenticated roaming smtp clients17:09
ivoksjmedina: right, anyway, it doesn't have anything to do with big_ham's problem17:09
ivoksbig_ham: ls -dl /etc/sasldb217:09
jmedinaivoks: ok17:10
lamontivoks: you notice I've never strayed from the decision to chroot it (nor do I think that would be wise.)  at the same time, well.... sigh17:10
big_ham-rw-rw---- 1 root sasl 12288 2009-02-25 13:08 /etc/sasldb217:10
lamontas in, I understand upstream's decision to not want to deal with it17:10
ivoksbig_ham: ls -dl /var/spool/postfix/etx/sasldb217:10
big_hambathroom ... afk 5 min17:10
ivokslol17:11
ivoksetc17:11
big_hamls: cannot access /var/spool/postfix/etx/sasldb2: No such file or directory17:11
big_hamls: cannot access /var/spool/postfix/etc/sasldb2: No such file or directory17:12
jmedinamm, big_ham is your saslauthd configured to use sasldb or pam as auth mechanism?17:12
big_hampam17:13
big_hami really need to hit the head for 5 mins ... brb17:13
ivoksthe thig is that for postfix /etc/sasldb2 is actually /var/spool/postfix/etc/sasldb217:14
jmedinaafaik it doesnt need /etc/sasldb2 as saslauthd is using pam17:15
jmedinaI dont remember having troubles with /etc/sasldb2 even with postfix chrooted17:16
ivokshe should use dovecot anyway :)17:20
jmedinayeap17:20
jmedinaif he is using dovecot then there is no need to uses saslauthd17:21
big_hamok back17:21
big_hamsorry17:21
big_hami have dovecot17:22
ivoksthen, set up postfix to use dovecot17:22
big_hamis there a site you can point me to with clear instructions?17:23
ivokshttps://help.ubuntu.com/community/PostfixDovecotSASL17:23
ivoksnote that 'mechanisms' should be 'plain login' instead of 'plain digest-md5'17:24
ivoksbah...17:24
ivoksstop17:24
ivoksignore this manual17:24
big_hamyeh?17:24
ivokswho wrote this?17:24
big_hamnot me17:24
big_ham:)17:24
ivokshttps://help.ubuntu.com/community/PostfixDovecotSASL?action=recall&rev=217:24
ivoksthis is correct onw17:25
ivoksone17:25
ivokssommer: ping17:25
big_hamok, going to run through it17:25
big_hamits talking about older Ubuntu versions17:26
big_hamdoes that matter?17:26
big_hamI'm on 8.1017:26
ivoksjust follow it17:27
ivoksit's the same17:27
big_hamroger that17:27
ivoksfor 7.1017:27
ivokswe should really have non-editable docs for supported configurations17:28
ivoksin this case someone forced a very uncommon use case as default configuration17:29
big_hamNote: the smtpd_sasl_path configuration needs to be a path relative to the Postfix queue directory.17:36
big_hamwhat is the postfix queue dir?17:36
big_hametc/postfix?17:36
ivoks?17:37
ivoksjust copy paste those lines :)17:37
big_hamI did already17:37
big_hamjust making sure that default path with be ok17:37
ivokspostfix is chrooted17:37
big_hamok17:37
ivoksthat means it isn't aware of rest of the system17:37
ivoksit knows only what's under /var/spool/postfix17:38
big_hami see17:38
ivoksfor it / is what /var/spool/postfix is for you17:38
jmedinapostconf -d queue_directory17:38
jmedinathat will give you default value17:38
jmedinaif you changed something in main.cf then use17:38
big_ham250-AUTH PLAIN17:39
jmedinapostconf -b queue_directory  (for new configs)17:39
big_hamwoo hoo17:39
ivoksyou didn't add login17:39
big_hamfking a ... totally worked17:39
big_hamthat absolutely rocks17:40
big_hamthis mail server needs to be live tomorrow17:40
big_hamyou guys (along with jmarsden who was helping rocme last night) totally17:40
big_hamrock17:40
big_hamnow I can flip DNS switch tonight17:41
ivoksthis isn't enough17:41
ivoksoutlook won't work17:41
big_hamthunderird did17:42
ivoksyeah, but outlook is broken17:42
big_hamfking hate MS crap17:42
big_hamok ... what's next then?17:42
ivokslook for mechanisms = plain in /etc/dovecot/dovecot.conf17:42
ivoksand replace it with17:42
ivoksmechanisms = plain login17:42
ivoksrestart dovecot17:42
big_hamok ... and since I have Outlook on my laptop, I'll test here17:44
jmedinaivoks: do you know if login is needed for MS outlook17:44
ivoksjmedina: it is17:44
big_hamI'm using TLS at this point?17:44
big_hamor plain AUTH?17:44
jmedinaafaik it was only required for old outlook express but not for MS outlook17:44
ivoksalways TLS/SSL17:44
big_hamawesome17:44
big_hambrb ... testing17:44
ivoksAnother plaintext mechanism is LOGIN. It's typically used only by SMTP servers to let Outlook clients perform SMTP authentication. Note that LOGIN mechanism is not the same as IMAP's LOGIN command. The LOGIN command is internally handled using PLAIN mechanism.17:45
ivokshttp://wiki.dovecot.org/Authentication/Mechanisms17:45
big_hamoutlook is repeatedly asking me for login info17:47
big_hamdo I need to be using SPA?17:47
jmedinaivoks: Im afraid that is not the same postfix people says17:47
ivoksbig_ham: did you add login mechanism?17:47
big_hamys17:47
big_hamyes17:47
big_hamand restarted dovecot17:47
ivokswhat's the ip?17:48
big_ham67.79.129.1817:48
ivokslooks ok17:48
ivoksbig_ham: are you sure you are using tls?17:48
ivoksi think outlook doesn't do TLS17:49
ivoksonly SSL17:49
big_hamit says "Secure Password Authentication" or SPA17:49
jmedinain outlook 2007 it does17:50
ivokslamont: any chance we get smtps enabled by default?17:50
ivoksbig_ham: that's not it17:50
jmedinabig_ham:  let spa unchecked17:50
lamontivoks: I don't see why not....17:50
lamontpretty much afk atm though17:51
big_hamyeah, just figured that out17:51
ivoksjmedina: not everybody has 200717:52
big_hamOK I got it17:52
big_hamoutlook just sucks balls17:52
big_hamSSL is buried/hidden17:52
ivoksbig_ham: enable smtps in postfix17:52
big_hami had AUTH checked, but didn't see SSL17:52
big_ham5 levels of tabs later, I found it17:52
jmedina;D17:53
big_hami just can't test sending and receiving tactual mail because MX record isn't pointing to my box y17:53
big_hamyet*17:53
ivoksyes you can17:53
big_hamgmail gave me bad recipient17:53
ivokslol, i sound like omana17:53
ivoksobama17:53
big_hambecause it was @67.79.129.1817:54
ivokstell me one email that your mail server will accept17:54
big_hamactually ... I take that back ... I was ableto send out17:54
big_hamfrom Outlook17:54
big_hamphoenixadmin@17:55
ivoks@...?17:55
big_ham67.79.129.1817:55
big_hamMX record points elsewhere ... normal domain is phoenixretailservices.com17:55
ivoksthere...17:57
big_hamvery nice17:57
ivoks250 2.0.0 Ok: queued as 20E7B5964FE17:57
ivoksworks?17:57
big_hamsure did17:57
big_hamwhat recip address did you use?17:58
ivoks@phoenixretailservices.com17:58
big_hamcreated a local route for the MX?17:58
ivoksno... i used telnet :)17:58
big_hamahhhh17:59
jmedina:D17:59
big_hamvery nice17:59
big_hamthanks for doing that ...17:59
big_hamnow, and this isn't urgent, but they're setting up email addresses to receive certain attachments for clients17:59
big_hamthey want those attachments sent to those specific addresses (ideally) to drop into their FTP (on the same box)17:59
big_hamseems like this would be relatively easy, yes?18:00
ivokshaha18:00
ivokswell, not relatively easy18:01
big_hami do use webmin, where things seem somewhat easier18:01
Big_ham5honestly18:04
Big_ham5wifi toggle switches are not the best design18:04
Big_ham5right under my wrist18:04
Big_ham5did you provide any info to dropping attachments in a specified dir while I was disconnected?18:09
ivoksnope18:10
ivoksyou should search for that on google18:11
jmedinayou can write an script that extracts attachments from email, and use postfix's pipe, so whenever a mail arrives, postfix send the message using pipe to the scripts, you scripts filters, extracts attchments and sent it to a ftp server18:14
jmedinayou can even change body and add the URL :S18:14
jmedinadont remember what tool already do it18:14
espacioushello i followed howtoforge tutorial installing squirell postfix and mysql but when i login in squirell i get an error18:23
espaciousERROR: Connection dropped by IMAP server.18:23
ivoksespacious: /var/log/mail.log will help you18:23
espaciousvirtual_alias_maps map lookup problem for admin@guest.kgs.si18:23
espaciousthat's .log18:23
ivokssi?18:24
ivoksslovenia?18:24
espaciousyes.18:24
ivoksyou are from slovenia?18:24
espaciousyes.18:24
espaciouswhy?18:24
ivoksonda ti necu pomoci :)18:24
espaciousnajs.18:24
espacious:D18:24
espaciousa zasto to?18:24
ivokshehe18:24
ivoksenglish only...18:24
espaciousso.18:25
espaciousplease ignore im from .si and give me an idea...18:25
espacious:D18:25
ivokshave you configured virtual alias maps?18:25
espaciousi did.18:25
espaciousmaybe wrong.18:25
jmedinayou can test it with postfix tools: postmap -q admin@guest.kgs.si mysql://etc/postfix/file-with-alias-maps-configs.cfg18:26
espaciouslet me check18:26
espaciousfile alias maps is mysql-virtual_mailboxes.cf?18:27
ivoksprobably18:27
ivoksyou configured it :)18:28
espaciousi followed that tutorial .18:28
espaciouspostmap: warning: connect to mysql server 127.0.0.1: Access denied for user 'admin'@'localhost' (using password: YES)18:28
ivoksthere you go18:29
espaciousso mysql rights?18:29
jmedinayeap18:29
espaciousor missing user ...18:29
jmedinadid you create admin user in postfix database?18:30
espacioushmm.18:30
espacioushow do i check this?18:30
jmedinare-reading the unsupported howto18:30
jmedinaor querying your database18:31
HellMindI got an 8.04 lts   with an ftp server that isnt work if I enable UFW, I got my tcp port open on ufw, what else I need?18:31
ivoksftp has two ports18:31
ivoks20 and 2118:31
HellMindbut the listening one is just 2118:32
HellMindright?18:32
ivoksright18:32
jmedinaHellMind: and depends on the method you are using18:32
ivoksbut you have to enable both18:32
ivoksdata goes over 2018:32
jmedinaand be sure ftp contrack module is  loaded18:32
HellMindI got a vm, in there too, and that ftp service works fine, with ufw, I forwad the 21 and its ok18:33
HellMindbut the local server hang on list, and I cant use pasv!18:33
ivoksHellMind: it depends on configuration of ftp service18:33
HellMindso both methods doenst work18:33
HellMindivoks : Which cfg?18:33
ivokswhich ftp daemon are you using?18:33
HellMindI tried proftpd and pureftpd18:34
HellMind-d18:34
ivoksi like vsftpd18:34
HellMindI think I miss something in ufw18:35
GargoyleGreetings strangers.18:37
HellMindivoks : so tell me18:38
HellMindwhy passv doesn't work?18:38
espaciousthis file should conatin actual pass and users? /etc/postfix/mysql-virtual_mailboxes.cf18:38
ivoksespacious: yes18:38
jmedinaHellMind: do you have ftp modules loaded?18:38
HellMindI tried with ip_conntrack_ftp18:38
HellMindwhat else do I need :S18:38
Big_ham5sorry ... was AFK ... just to clarify my question about dropping attachments to FTP, the FTP dir is on the localhost of the SMTP/POP3 server, does that change your answer?18:38
ivoksHellMind: you should at least provide configuration file; i don't have magic sphere18:39
espaciousso for any new use u have to type actual pass and user there?18:39
HellMindivoks its default cfg! I didn't chagned anything!18:39
HellMindIf i do a ufw disable it works like a charm18:39
jmedinaespacious: not, it is the user that reads records in the database, mail users are in database18:39
ivoksespacious: ?18:39
jmedinaHellMind: which howto did you read?18:39
espaciousjmedina u right.18:40
HellMindhowto about what?18:40
HellMindufw?18:40
jmedinaHellMind: that was for espacious18:41
espaciousso jmedina http://pastebin.com/f7983d4d0 this should be ok.18:41
jmedinaespacious: yeap18:42
jmedinayou can try with18:42
jmedinamysql -h 127.0.0.1 -u mail_admin -p mail18:42
jmedinaif you can login then yes18:42
ivoksHellMind: passive mode opens port > 102318:42
ivoksHellMind: if your firewall policy is deny, then just opening port 21 won't help18:43
espaciousjmedina i can login with that credentials18:43
jmedinaok18:43
jmedinatest agina with postmap18:43
HellMindivoks : well my default input is deny, there is no security without that18:43
espaciouslet me change all files back.18:44
ivoksHellMind: depends on the view18:44
HellMindivoks: : why the ftp i got on a vm (trough nat) works?18:44
ivokscause it's nated18:44
ivoksyou prorably have nf_nat_ftp module loaded18:45
HellMindivoks : but the default is still drop18:45
HellMindah thats right18:45
HellMindwhat rule do I need to open those port then?18:46
HellMinds18:46
ivoksyou need ip_conntrack_ftp module18:46
HellMindIts loaded18:46
HellMindnf_conntrack_ftp       18856  1 nf_nat_ftp18:46
kansandoes this guy look like it will have good compatibility with ubuntu server (hardy):  http://www.ascendtech.us/viewcart.asp?url=VC&Tp=&VCT=&WERR=&qty1=18:47
ivokscould you paste iptables -L?18:47
HellMindits a mess with ufw I will try18:48
Big_ham5ivoks18:48
ivokskansan: we can't see your shopping cart18:48
=== Big_ham5 is now known as Big_Ham
HellMindhttp://rafb.net/p/HSjwNs94.html18:49
Big_Hami am creating mail users (shell users) now for that server, do they need to be in a group other than "users" in order to send/receive mail?18:49
espaciousjmedina still the same18:49
espaciouspostmap: warning: connect to mysql server 127.0.0.1: Access denied for user 'mail_admin'@'localhost' (using password: YES)18:49
ivoksBig_Ham: nope18:49
kansanivoks, ok hang on18:49
HellMindivoks : my ftp port is 1021 , http://rafb.net/p/HSjwNs94.html18:49
Big_Hamawesome ... thank you18:49
jmedinaespacious: please show me again the mailbox.cf file18:50
espacioushttp://pastebin.com/f230e1d5e18:51
HellMindivoks: my service ftp is 1021 ( the 21 is the nat ftp server)18:51
ivoksHellMind: well, you didn't  allow it18:52
jmedinaespacious: change 127.0.0.1 with localhost18:52
jmedinaand try again18:52
espaciousonly in that file?18:52
HellMindivoks: I did, its the ftp one, line 10318:52
jmedinaI think you created mysql user with localhost18:52
espaciousor in all mysql_vhosts...18:52
jmedinaespacious: well in the file you are using for testing18:52
espaciousok.18:52
ivoksHellMind: ftp is port 2118:53
HellMindivoks: remember I can connect to it and send the command LIST18:53
ivoksHellMind: you just said your ftp service is on 102118:53
HellMindI got 2 ftp server18:53
ivoksright18:53
ivoksone is on 2118:53
HellMindthe local one is 1021 - service ftp18:53
ivoksand the other is on 102118:53
ivoksyou allowed only 2118:53
HellMindthe nat one is 21 no service (thats why shows the number)18:53
ivoksACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ftp18:53
ivoksthis is for 2118:54
HellMindftp is 1021!18:54
ivoksdpt:ftp - destination port - ftp18:54
HellMindI changed that18:54
ivoksgrep ftp /etc/services18:54
ivoksftp21/tcp18:54
kansanivoks, ok hang on:  http://pastie.org/42128918:54
espaciouspostmap: warning: connect to mysql server localhost: Access denied for user 'mail_admin'@'localhost' (using password: YES) same ....18:54
HellMindivoks:  I CHANGED IT!18:54
HellMindACCEPT     tcp  --  anywhere             anywhere            tcp dpt:21 (21)18:54
HellMindACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ftp (which means 1021)18:54
espaciousi addes also an admin@localhost use...and mail...18:54
espaciousbut neither that is able to login.18:55
kansandoes this guy look like it will have good compatibility with ubuntu server (hardy):  http://pastie.org/42128918:55
ivoksHellMind: how do you know it means 1021?18:55
espaciousMar 19 18:33:46 mailserver authdaemond: failed to connect to mysql server (server=localhost, userid=mail_admin): Access denied for user 'mail_admin'@'localhost' (using password: YES)18:55
espaciousMar 19 18:33:46 mailserver imapd: authentication error: Input/output error18:55
ivoksHellMind: you changed /etc/services?18:55
HellMindftp-data        1020/tcp18:55
HellMindftp             1021/tcp18:55
jmedinaespacious: did you refreshe privileges in mysql?18:55
HellMindthats right18:55
ivokswhy would you do that?18:55
HellMindbecause I wanted to chose another port, not 2118:56
HellMindShould I change it back :S18:56
ivoksyou don't change services then18:56
HellMindIts the same18:56
jmedina:O18:56
HellMindok18:56
espaciousi reloaded the privileges now from phpmyadmin18:56
ivoksbut the fireall and ftp configuration18:56
HellMindivoks : now its the same, but the ftp means 21 and 1021 got no alias18:57
ivoksHellMind: so what18:57
ivoksyou don't need it18:57
HellMindwell I changed it back!18:57
espaciousjmedina same thing.18:57
ivokschange configuration of your ftp service18:57
ivoksto listen on 102118:57
HellMindivoks : http://rafb.net/p/Lji2wW86.html18:58
HellMindit listen on 1021!18:58
ivoksok18:58
HellMindI can connect to it, remember, the list command hangs18:58
ivokstry now18:58
HellMindI tried!18:58
HellMindyou can try to   190.210.47.169  102118:59
jmedinaHellMind: if you change your FTP port18:59
jmedinathen you need to load ftp contrack module with option using the new port18:59
HellMindthats usefull19:00
ivoksi didn't know that, heh :)19:00
HellMindwhere is the optimun way to load that module in this distro?19:00
HellMindivoks : jmedina owns you19:01
ivoksadd options to modules in /etc/modprobe.d/19:01
ivoksHellMind: well, i wasn't the one who camed with questions with tears in eyes :)19:01
HellMindivoks: no tears , just intrigue :P19:02
jmedinawait, which kernel version?19:02
jmedinaHellMind: ?19:02
HellMind2.6.24-23-server19:02
espaciousjmedina can u help me a bit more?19:02
HellMindespacious : wait your turn19:03
ivoksHellMind: well, he was here before you19:03
espaciousim here.sitting down.19:03
HellMindbut I ask better question and faster19:03
HellMind:P19:03
ivokseven though he's slovenian, he deserves some attention :)19:03
ivoks:D19:03
espacioushehe19:03
jmedinajajaja19:03
HellMindivoks thank you me you 've learned  how to set a ftp on a different port firewalled19:04
espaciouswhat youf ftp issue i have pureftpd up and running...19:04
ivoksespacious: what's the problem?19:04
HellMindjmedina : de donde sos?19:04
espaciousso i run trough that hoto to setup mailserver..19:04
ivoksBig_Ham: if you are adding users only for email, it would be wise to add them with /bin/false as shell19:05
jmedinaHellMind: mexico19:05
espaciousand stil on that problem mysql or imap server not letting me login19:05
ivoksespacious: imap server?19:05
ivoksespacious: or postfix? (smtp server)19:05
jmedinaespacious: imap?19:05
espaciousi got this error in squirell19:05
jmedinaI tought we were talking about postfix19:05
espaciouswe are.19:05
ivoksno we aren't19:06
ivokspostfix is for smtp19:06
jmedinathen is not postfix problem19:06
jmedina:S19:06
ivokssquirrelmail doesn't touch postfix19:06
ivoksunless you send email19:06
espaciousERROR: Connection dropped by IMAP server.19:06
jmedinais this postfix day?19:06
ivoksespacious: what do you use for imap?19:06
espaciousthat squirel web-gui19:06
espaciousi use smtp. no imap.19:06
jmedinaespacious: did you configured squirrelmail?19:07
ivokssmtp is for sending mail19:07
espaciousi did as show in the tutor.19:07
ivoksimap is for reading19:07
ivoksyou need imap for webmail19:07
jmedinaespacious: which tuto?19:07
espaciouslet me paste.19:07
espacioushttp://www.howtoforge.com/virtual-users-domains-postfix-courier-mysql-squirrelmail-debian-lenny-p219:07
ivokscourier? oh, god...19:07
espacious:D19:07
espaciousbad?19:07
ivoks5 pages19:08
ivoksthere's an easier one19:08
ivoksdovecot + postfix + mysql + postfixadmin19:08
espaciousi didnt found that to complicated.19:08
espacioushmm.19:09
ivokshttp://www.opensourcehowto.org/how-to/mysql/mysql-users-postfixadmin-postfix-dovecot--squirrelmail-with-userprefs-stored-in-mysql.html19:09
ivoksknock your self out19:09
HellMindso where to put it ip_conntrack_ftp on 2.6.24-23-server deb 8.04lts, etc-modules ?19:09
espaciousbut i should now remove all stuf done...19:09
jmedinaespacious: first do it by hand19:09
jmedinamodinfo ip_conntrack_ftp19:09
espaciousjmedina what?19:09
jmedinasomething like modprobe ip_conntrack_ftp ports=102119:10
jmedina:S19:10
ivoksespacious: did you install courier?19:10
jmedinathat was for HellMind19:10
espaciousi think yes.19:10
ivokstry:19:10
ivokstelnet localhost imap19:10
HellMindmodinfo: could not find module ip_conntrack_ftp :(19:10
espacious* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2008 Double Precision, Inc. See COPYING for distribution information.19:11
ivoksok, imap works19:11
espaciousyoup.19:11
kansandoes this guy look like it will have good compatibility with ubuntu server (hardy):  http://pastie.org/42128919:11
ivokscheck /var/log/mail.log19:11
ivokskansan: NETWORKING:   10/100Mbps ETHERNET ADAPTER (LAN) - this doesn't tell us much19:12
espaciousMar 19 19:12:16 mailserver postfix/pickup[1786]: 9AD933CC57A: uid=0 from=<root>19:12
espaciousMar 19 19:12:16 mailserver postfix/cleanup[1792]: warning: 9AD933CC57A: virtual_alias_maps map lookup problem for admin@guest.kgs.si19:12
jmedinaHellMind: then you are not using that module19:12
ivoksespacious: ignore postfix19:12
HellMindim using it19:12
ivoksespacious: look for courier19:13
jmedinait is modinfo nf_conntrack_ftp19:13
HellMindnf_conntrack_ftp       18856  1 nf_nat_ftp19:13
HellMindah you are right :(19:13
HellMindi didn't saw that nf :(19:13
espaciousivoks no courier related entries in that log...19:13
ivoksespacious: then imap19:13
HellMindip_conntrack_ftp is the alias :S19:13
ivoksimapd19:14
espaciousMar 19 19:11:03 mailserver imapd: Connection, ip=[::ffff:127.0.0.1]19:14
espaciousonly one all other are postfx related...19:14
HellMindjmedina : what for modinfo :S? I need to reload it , where can I put it?19:14
jmedinaHellMind: to see wich param you need to use to change ftp port19:14
espaciousMar 19 19:06:03 mailserver imapd: LOGIN FAILED, user=asd, ip=[::ffff:127.0.0.1]19:14
HellMindparm:           ports:array of ushort19:14
jmedinaespacious: increase verbosity to authdaemon19:14
ivoksespacious: there you go19:15
jmedinayou will see more info19:15
ivoksespacious: have you created 'asd' user?19:15
espaciouswhere do i do this?19:15
espaciousno that was just dalse try....19:15
espaciousfalse*19:15
ivoksno comment19:15
jmedinanf_conntrack_ftp ports=21,4919:15
espaciousi tryed entring nonexisting user to see if the err is the same.19:15
jmedinasomething like that19:15
jmedinamodprobe nf_conntrack_ftp ports=102119:16
ivoksespacious: pase the line with existing user19:16
HellMindjmedina : but where :(, I want to load at boot19:16
jmedinabut you need to unload module depend19:16
HellMindor at firewall  (ufw) startup19:16
jmedinaHellMind: ivoks already tould you where19:16
HellMindjmedina : but you said stop! which kernel is he using :S19:16
HellMindI ignored ivoks19:16
jmedina /etc/modprobe.d/options19:17
jmedinasomething like19:17
espaciousMar 19 19:16:49 mailserver imapd: Connection, ip=[::ffff:127.0.0.1]19:17
espaciousMar 19 19:16:49 mailserver authdaemond: failed to connect to mysql server (server=localhost, userid=mail_admin): Access denied for user 'mail_admin'@'localhost' (using password: YES)19:17
espaciousMar 19 19:16:49 mailserver imapd: LOGIN FAILED, user=admin@guest.kgs.si, ip=[::ffff:127.0.0.1]19:17
ivoksi wouldn't put it there...19:17
jmedinaoptions nf_conntrack_ftp ports=102119:17
espaciousMar 19 19:16:49 mailserver imapd: authentication error: Input/output error19:17
HellMindargh flooder19:17
ivoksi would create my own file19:17
espacioussorry.19:17
ivokssince options will get overwritten on upgrade19:17
ivoksespacious: ok, so, authdaemon doesn't have access to mysql19:17
jmedinaespacious: did you increase authdaemond verbosity?19:18
espaciousno where do i do that?19:18
jmedinaall the prolem is in mysql19:18
jmedina:D19:18
jmedinaand authentication19:18
espaciousu think?19:18
jmedinayeap19:18
ivoksespacious: grep authmodulelist /etc/courier/authdaemonrc19:18
jmedinaivoks: courier it is already using mysql19:18
espacioushttp://pastebin.com/f1506822e19:19
ivoksespacious: grep MYSQL_SERVER /etc/courier/authmysqlrc19:19
jmedinaespacious: increase verbosity, in the same file you set user, db, host, password for courier authdaemon19:19
espacioushttp://pastebin.com/f7431805419:19
jmedinaespacious: change it to 127.0.0.119:20
jmedinaand restart courier audhdaemon19:20
ivoksespacious: check MYSQL_USERNAME and MYSQL_PASSWORD in /etc/courier/authmysqlrc19:20
espaciousslowly!19:20
espacious:D19:20
espaciousso what to 127.0.0.1?19:20
ivoksyou don't need to change that19:20
ivoksleave it as localhost19:20
Hans67521hi need some help with fetchmail19:20
ivoksespacious: check MYSQL_USERNAME and MYSQL_PASSWORD in /etc/courier/authmysqlrc19:20
Hans67521downloading email for my domain to a local box but fetchmail wants to deliver mail as user@localhost?19:21
Hans67521not to user@domain.com19:21
espacioushttp://pastebin.com/f5cdc089b19:21
ivoksespacious: mail_admin_password?19:22
ivoksespacious: did you replace that with *real* password?19:22
jmedinaMYSQL_PORT 0 ???19:22
espaciousjmedina i cant find that verbosity...19:22
ivokslol19:22
espaciousno...?!?!? ivoks19:22
HellMindEureka!, it works19:22
espaciousshould i?19:22
espacious:D19:22
mathiazzul: why do I have to run apt-get update before apt-get install on an freshly new booted ec2 instance?19:23
ivoksbas si slovenac...19:23
espacious:D19:23
espaciouslet me change that.19:23
espaciouswas a joke ivoks! where u from?19:23
ivokszagreb19:23
zulmathiaz: because the sources.list is based on the zone that you are in19:23
ivoksmathiaz: any chance in reviewing dovecot-postfix patch? :)19:24
zulif you are in the us zone then you get the us mirror if you are in eu then you get the eu mirror19:24
jmedinaespacious: in /etc/courier/uthdaemonrc19:24
jmedinachange DEBUG_LOGIN=0 to 119:24
jmedinaand restart courier-authdaemon19:24
Hans67521?19:25
jmedinaespacious: and comment the line: MYSQL_PORT 019:26
ivoksjmedina: he is connecting to mysql19:26
mathiazzul: couldn't this part of the standard boot process?19:26
ivoksjmedina: he was just supplying wrong password19:26
mathiazivoks: on my todo list - it's not that urgent though19:27
jmedina¬¬19:27
ivoksmathiaz: ok19:27
mathiazzul: you'd have to run apt-get update *everytime* before you can install a package19:27
espaciousdone all changes19:27
espaciousstill same19:27
espaciouslet me check the logs now.19:27
zulmathiaz: what?!19:27
jmedinanever close log19:27
jmedina:D19:27
jmedinaone tab for commands and another for logs :D19:28
espacioustail -f :D19:28
* jmedina preferes multitail colorized logs19:28
mathiazzul: I mean that every time you boot a new instance, the first thing you have to do is to run apt-get update19:28
mathiazzul: otherwise you cannot install new packages.19:28
mathiazzul: seems that could be automated during the boot process.19:29
espacioushttp://pastebin.com/m3d5859119:29
zulmathiaz: yeah i see what you mean ill tell the script to run apt-get update after sources.list is updated19:29
espaciouswhat is that?19:29
espaciousmulticolorized?19:29
espacious:D19:29
zulmathiaz: thanks19:29
geniiBah. Adaptec and their love for rpm19:29
ivoksespacious: great... this is good19:29
ivoksespacious: in /home/vmail, create directory guest.kgs.si19:30
ivoksespacious: and chown it to vmail user19:30
espaciousjmedina? u what u say?19:30
ivokshahaha19:31
espaciousok let me do ivoks19:31
Hans67521where can i find help for fetchmail19:31
jmedinaespacious: your auth is ok19:31
jmedinabut the problem is this:19:31
ivoksHans67521: i don't think fetchmail can deliver to domain19:31
jmedina#19:31
jmedinaMar 19 19:27:22 mailserver imapd: chdir guest.kgs.si/admin/: No such file or directory19:31
jmedina#19:31
jmedinaMar 19 19:27:23 mailserver imapd: Connection, ip=[::ffff:127.0.0.1]19:31
jmedinayour imap server chant change to admin mailbox19:31
jmedina:D19:31
espaciousi see. so let me do...19:31
jmedinaclassic19:31
ivoksHans67521: but then again... i don't know19:31
jmedinayou need a way to automate mailbox creationg19:31
espaciousbut i sended a test message to activate/create that dir...19:32
jmedinawell didnt work19:32
ivokshm19:32
espaciousthe command used is on that tutor...19:32
ivokschdir guest.kgs.si/admin/19:32
ivoksthis is full path19:32
ivoksand that path is wrong19:32
jmedinait is relative to /home/vmail/19:32
ivoksah, ok19:32
jmedinahe alrady have a search base path /home/vmail19:33
jmedinaI like to use maildrop with courier-imap19:33
espaciousi forgot which the user is...19:33
ivoksvmail19:34
jmedinahttp://tuxjm.net/docs/mailserver-howto/mysql-based/xhtml/ch04s07.html19:34
jmedinathat is my howto19:34
espaciouschown vmail:vmail guest.kgs.si/ so?19:34
jmedinawell I use /home/vmail/dominios19:34
jmedinachown -R19:34
jmedinaespacious: how did you create the mailbox?19:34
espaciousmkdir....19:35
jmedina:D19:35
jmedinawell you better use maildirmake19:35
espaciouswhat u mea?19:35
espacious:D19:35
jmedinait will create all the required subfolders19:35
espaciouswhat u mean...19:35
jmedinaor follow the howto I posted for automatic mailbox creation19:35
espaciousumm can u explain again ...19:36
espaciousim lost:D19:36
ivoksbtw, you didn't create mailbox19:37
ivokssince your postfix also can't access mysql19:37
ivoksyou are using wrong password for mysql in it19:38
espaciousok better now19:39
espaciousERROR: Could not complete request.19:39
espaciousQuery: SELECT "INBOX"19:39
espaciousReason Given: Unable to open this mailbox.19:39
espaciousbut im in19:39
ivoksright, maildir isn't created19:39
espaciousi created /vmail/guest.kgs.si/admin/19:39
espaciouswith maildircreate command19:39
jmedinaespacious: that path needs some especial subdirs19:40
espaciousso what should i run.19:40
jmedinaespacious: could you post full log?19:40
jmedinawell with context19:40
ivoksi'm shocked that courier can't create dirs on login19:40
ivoksis it really that bad?19:40
jmedinaivoks: if you  are using courier MDA maildrop you can19:41
jmedinabut I dont know what espacious is using19:42
ivoksi guess he also doesn't know that :)19:42
espaciousi dont in fact.19:43
espaciousMar 19 19:42:16 mailserver postfix/cleanup[1789]: warning: 9A9DB3CC57A: virtual_alias_maps map lookup problem for postmaster@guest.kgs.si19:43
espaciousMar 19 19:42:16 mailserver postfix/pickup[1786]: 9ABAB3CC57A: uid=0 from=<root>19:43
espaciousMar 19 19:42:16 mailserver postfix/cleanup[1792]: warning: 9ABAB3CC57A: virtual_alias_maps map lookup problem for admin@guest.kgs.si19:43
espaciousthat all in log...19:43
peeps[work]does anyone know if the max length of env. variable values is configurable?19:43
espacioussuddenly pastebinit command dont work19:43
tristanbobis there any easy way to transfer one ubuntu ufw setup to another server?19:44
ivoksespacious: that's postfix19:44
tristanbobI wish I could copy paste like a cisco device19:44
espaciousMar 19 19:16:49 mailserver authdaemond: failed to connect to mysql server (server=localhost, userid=mail_admin): Access denied for user 'mail_admin'@'localhost' (using password: YES)19:44
espaciousMar 19 19:16:49 mailserver imapd: authentication error: Input/output error19:44
ivoksespacious: check /etc/postfix/mysql*19:44
ivoksespacious: i bet you didn't put *real* mail_admin_password19:45
espaciousivoks i did those files aer done like in the tutor...19:45
jmedina:S19:45
jmedinaagain?19:45
espaciousoh let me recheck.19:45
jmedinaI tought imapd auth was fixed19:45
jmedinaI think you better fix postfix19:45
jmedinathen imap19:45
ivokstristanbob: iptables-save19:47
ivokstristanbob: there's also /var/lib/ufw19:47
* jmedina loves shorewall+shorewall-lite19:48
tristanbobthanks ivoks19:48
espaciousivoks i have real pass there... still same19:48
ivoksgreat19:49
ivoksnow... you fixed mysql password for courier19:49
espaciousMar 19 19:48:25 mailserver imapd: LOGIN, user=admin@guest.kgs.si, ip=[::ffff:127.0.0.1], port=[49216], protocol=IMAP19:49
espaciousMar 19 19:48:25 mailserver imapd: DISCONNECTED, user=admin@guest.kgs.si, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=21, sent=57, tim19:49
ivokswhat happend since then?19:49
ivoksafaik, it's 20:49 in slovenia now, not 19:4919:50
espaciousumm..sorry asking again where?19:50
espaciousntp isnt installed.19:50
ivoks:)19:50
jmedina:S19:50
espaciouswritten in...19:50
ivoksso, you can login with webmail?19:50
ivoksand work with it19:51
espaciousi got a different error.19:51
espaciousERROR: Could not complete request.19:51
espaciousQuery: SELECT "INBOX"19:51
espaciousReason Given: Unable to open this mailbox19:51
espaciousin the webgui19:51
ivoksah... non existing directory again19:51
espaciousthere is no mailbox..u said.19:51
espacioushmm im blind.19:52
espacioushow do i create it?19:52
ivokssend a mail to it19:52
ivoksthis howto is 'how to work 2 hours on mail server and not getting it to work'19:53
espacious:D19:54
espaciousi resended the mail-19:54
jmarsdentristanbob: Look under /etc/ufw for all the ufw config files.  Tar (or zip?) them, and untar (unzip) them on the new server.19:54
espacioussame shit maybe the mail isnt send...19:54
ivoksnow check the logs19:54
jdstrandjmarsden: and /var/lib/ufw19:55
espaciousMar 19 19:16:49 mailserver authdaemond: failed to connect to mysql server (server=localhost, userid=mail_admin): Access denied for user 'mail_admin'@'localhost' (using password: YES)19:55
espaciousMar 19 19:16:49 mailserver imapd: authentication error: Input/output error19:55
ivoksnot that one19:55
ivoksthat was an hour ago19:55
jmedinaespacious: show full log19:55
espaciousMar 19 19:53:49 mailserver postfix/trivial-rewrite[2130]: warning: do not list domain guest.kgs.si in BOTH mydestination and virtual_mailbox_domains19:55
espaciousMar 19 19:53:49 mailserver last message repeated 26 times19:55
espaciousMar 19 19:53:49 mailserver postfix/local[2131]: warning: alias database loop for postmaster19:55
espaciouswhich one.19:55
ivoksthere19:55
jmedina:S19:55
espacioussorry i know is not polite to paste here.19:55
ivoksremove it from mydestination19:55
jdstrandreally, if all one does is use the 'ufw' command, copying /var/lib/ufw and doing 'ufw enable' is enough19:55
espaciouslet me fix pastebin...19:56
jmedinaespacious: stop postfix and fix courier, or stop courier and fix postfix19:56
espacioushmm.19:56
espaciousfix what?19:56
jmedina:D19:56
jmedina:S19:56
ivoksfix main.cf19:56
jmedina¬¬19:56
ivoksin postfix19:56
ivokslook at the line you pasted19:56
espaciousaha i see... duplicate..19:56
ivoks                   warning: do not list domain guest.kgs.si in BOTH19:57
ivoks                   mydestination and virtual_mailbox_domains19:57
ivoksremove it from mydestination19:57
espaciouswhere should it be virtual?19:57
espaciousok.19:57
jmedinathat is a problema when people configure postfix ifst usiing debconf and then change to virtualdomains19:57
jmedinathat is what in my howto I started with a clean main.cf19:58
ivoksjmedina: or people don't read howto:19:58
ivokspostconf -e 'mydestination = server1.example.com, localhost, localhost.localdomain'19:58
ivoksor the howto is wrong :)19:59
ivoks'Go sure that you replace server1.example.com with a valid FQDN, otherwise your Postfix might not work properly!'19:59
jmedina:D19:59
espacioushmm.20:00
espaciousi removed it same error.20:00
espaciouslet me check logs20:00
jmedinaespacious: show us the logs20:00
jmedinanot what you understand20:00
espaciousMar 19 19:53:49 mailserver postfix/local[2131]: warning: alias database loop for postmaster20:00
ivoksrestart postfix20:00
ivoksGRRRRRRRRR20:01
ivoksthat's an old log!20:01
espaciousi did.20:01
espacioussory.20:01
jmedinanot20:01
espaciouslet me fix pastebin.20:01
jmedinait is same process,20:01
espaciouslog is long.20:01
ivokslast lines20:01
jmedinaespacious: not full log20:01
ivoksopen a terminal20:01
jmedinabut with context, 5 or more longs around20:01
ivoksconnect to server20:01
ivoksrun in it 'tail -f /var/log/mail.log'20:01
ivokshit enter 5 times20:01
ivoksthen send mail20:01
ivokspaste new lines20:02
jmedinatail -f is useless if you dont read the logs carefully20:02
espacioushttp://pastebin.com/f223c64af20:03
ivoksman20:03
ivoksi give up20:03
ivoksthese are old logs20:03
espacioushow old?20:04
espaciousquota, "", "" FROM users WHERE email = 'admin@guest.kgs.si'20:04
espaciousMar 19 20:01:55 mailserver authdaemond: password matches successfully20:04
espaciousMar 19 20:01:55 mailserver authdaemond: authmysql: sysusername=<null>, sysuserid=5000, sysgroupid=5000, homedir=/home/vmail, address=admin@guest.kgs.si, fullname=<null>, maildir=guest.kgs.si/admin/, quota=10485760, options=<null>20:04
espaciousMar 19 20:01:55 mailserver authdaemond: Authenticated: sysusername=<null>, sysuserid=5000, sysgroupid=5000, homedir=/home/vmail, address=admin@guest.kgs.si, fullname=<null>, maildir=guest.kgs.si/admin/, quota=10485760, options=<null>20:04
espaciousMar 19 20:01:55 mailserver imapd: LOGIN, user=admin@guest.kgs.si, ip=[::ffff:127.0.0.1], port=[60769], protocol=IMAP20:04
espaciousMar 19 20:01:55 mailserver imapd: DISCONNECTED, user=admin@guest.kgs.si, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=21, sent=520:04
espaciousdamn i make mess:D20:04
* jmedina thinks espacious wants to give up with a ban20:04
espaciousi dont get the point.20:04
espacioussorry no.20:04
ivoksespacious: do you understand how email works?20:05
espaciousa bit.20:05
ivoksespacious: do you know what is smtp, and what is imap?20:05
espaciousi know.20:05
ivoksespacious: are you sure?20:05
espaciousim more used to MS servers.20:05
espaciousyes.20:05
jmedinaespacious: do you understand smtp is handled by postfix process20:05
ivoksobviously, they don't teach you a thing20:05
jmedinaand imap for imapd (corier_20:05
espaciousim new to postfx and squirel and ....so on.20:05
ivokspostfix = smtp20:05
ivoksimap, pop3 = courier20:06
ivoksso, when you send a mail, you are looking for errors in... which program?20:06
jmedinaso, that is what I told you to stop courier imap and fix postfix, that way you wont get confused with a lot of logs20:06
jmedinaor your can use tail + grep20:06
espaciousok i got that.20:06
ivoksand when you change configuration20:06
espaciouslet me stop curier.20:07
ivoksand want to see if the new config works, you don't paste logs from an hour ago20:07
ivoksbut most recent20:07
espaciousthat was a mistake20:07
jmedinawhenever you click  "send button" watch the logs20:07
ivoksi have yet to meet a person that managed exchange, that actually understand how email works :/20:08
espaciousheh20:09
ivoksbut the funniest thing is that most of the spam comes from unix/linux mail servers20:09
espaciousok now i stoped all courier-* proceses.20:09
espaciousnow i send a mail with20:09
espaciousmailx admin@guest.kgs.si20:09
espaciousfrom console20:09
ivoksok20:09
espaciousaha!20:10
espaciousMar 19 20:09:56 mailserver postfix/virtual[2689]: warning: perhaps you need to create the maildirs in advance20:10
espaciousMar 19 20:09:56 mailserver postfix/virtual[2689]: 80CF93CC478: to=<admin@guest.kgs.si>, relay=virtual, delay=0.06, delays=0.03/0.01/0/0.02, dsn=4.2.0, status=deferred (maildir delivery failed: create maildir file /home/vmail/guest.kgs.si/admin/tmp/1237493396.P2689.mailserver: Permission denied)20:10
jmedinaok that is progress20:10
ivoksls -dl /home/vmail/guest.kgs.si20:10
espaciousthanks.20:10
espaciousthat is great.20:10
espacious:D20:10
ivoksls -dl /home/vmail/guest.kgs.si/admin20:10
espaciousdrwxr-xr-x 3 vmail vmail 4096 Mar 19 19:38 /home/vmail/guest.kgs.si20:10
jmedinaivoks: yeap, in the other room a customer is taking a Interscan messaging suite from trend micro (betrayers) and they are teaching postfix20:10
jmedina:D20:11
ivoksespacious: ls -dl /home/vmail/guest.kgs.si/admin20:11
jmedinaespacious: ok that message is from virtual process, who handles virtual mailbox20:11
jmedinavirtual process is unable to create directories20:11
espaciousdrwx------ 6 vmail vmail 4096 Mar 19 19:39 /home/vmail/guest.kgs.si/admin20:11
espaciousdamn that tutor i followed is a mess i see now.20:12
ivoksgrep vmail /etc/passwd20:12
espaciousvmail:x:5000:5000::/home/vmail:/bin/sh20:12
ivokshm20:14
jmedinaespacious: ls -l /home/vmail/guest.kgs.si/admin20:14
jmedinawhy  drwxr-xr-x 3 vmail vmail 4096 Mar 19 19:38 /home/vmail/guest.kgs.si20:14
espacioushttp://pastebin.com/f5ea5c1120:14
jmedinaand then drwx------ 6 vmail vmail 4096 Mar 19 19:39 /home/vmail/guest.kgs.si/admin20:14
jmedinaohh sorry20:14
espaciousadmin was created manualy ...20:15
ivoks    * Unknown post id, it may have expired or been deleted20:15
jmedinaespacious: sorry it was ls -la /home/vmail/guest.kgs.si/admin20:15
espacioushttp://pastebin.com/f5ea5c11320:15
ivoksroot?20:16
ivokswhy root20:16
ivokschown -R 5000:5000 /home/vmail20:16
jmedinabecause he ran maildirmake as root20:16
espaciousyes.20:16
espacioustrue20:16
ivoksdon't run maildirmake20:16
espaciousalready did.20:16
ivokspostfix can create dirs by it self20:16
ivoksok, run:20:17
ivokschown -R 5000:5000 /home/vmail20:17
espaciousok chroot done.20:17
jmedinaI think that perms were already fixed20:17
espaciouschown...20:17
jmedina:S20:17
ivoksnow send mail20:17
espacioushttp://pastebin.com/m769a569020:18
espacioushuh!20:18
giovani3espacious: that's good :)20:18
ivoksthat's it20:18
espaciousok now its delivered20:18
espaciousso what is the next step?20:19
ivoksnow start courier20:19
ivoksand check the mail20:19
ivokswith webmail20:19
espaciousproblem of irc is i cant buy u guys a beer!:D20:19
espaciouswhich courier-*20:19
ivokswell, i'm not that far away20:19
espaciousall of them?20:19
ivoksall20:19
espaciousif u come to lj i buy u a ber 4 sure.20:20
ivoksi'll stop there in 2 months20:20
ivokson my way to austria20:20
espaciousnice u can call me.20:20
espacious:D20:20
ivoksi doubt, you guys will smash my car :)20:20
espaciousso what courier should i start?20:20
espacioushaha20:20
ivoksall of them20:20
espaciousdamn!20:23
espaciousu aer good!20:23
espaciouswork like a charm.20:23
Big_Hamthey are totally awesome in here20:23
espaciousivoks u damn .hr ! i buy u a ber 4 sure:D but LASKO20:23
Big_Hami couldn't have gotten better support even if I posted in a forum and waited days for all the replies20:24
ivokslasko is really bad beer :)20:24
espaciousso realy thanks ivoks jmedina20:24
espacious!20:24
ivoksthe red one is better20:24
espacioushehe why ivoks becouse is ours?:D20:24
espaciousi agree.20:24
ivoksstill, both are worse than karlovacko20:25
espacioushaha.-20:26
espaciousso any other concerns before i put this server in production?20:27
ivokslots of them :)20:27
espaciousany good modifications ..20:27
espacious:D20:27
jmedinaespacious: now create another mail user and test that everything works20:27
espaciousshould i get devcot?20:27
ivoksespacious: you could buy an hour or two and get a review20:27
espaciousjmedina doing that...20:27
espaciousivoks what?20:28
* jmedina can fix systems, but cant fix toilet :S20:28
ivoksespacious: buy professional support for a review20:28
ivoksespacious: i could do review in an hour :)20:28
* jmedina accepts beer by paypal20:29
jmedina:D20:29
ivoks:)20:29
jmedinaor rapidshare accounts :D20:29
jmedinaXDDDD20:29
espacioushaha20:29
espaciousi will be glad to offer u a beer.20:30
espaciousalso to get some more support on courier postfix and other...but i have also other things to do...20:30
espaciousi taught irc help channel are for free:D20:31
ivokswell, we helped you for free, didn't we?20:31
espaciousthats 100% true.20:31
espaciousand thanks again.20:31
ivoksbut if you are asking us to tell you that your server is ready for production, that would require serious review20:32
espaciousi know.20:32
espaciousim running a separate MS excange...20:32
espaciousnow i discovered...proxmox...KVM...20:32
espaciousand installed mail gateway...20:32
espaciousif u know that...20:33
espaciousso i was courious if i can make a similar sistem by hand...as proxmox mailgateway has a limit to jus one fqdn...or one subnet i mean...20:33
espaciousjust*20:33
jmedinaI think promox uses postfix+amavisd-new20:34
jmedinayou can even add mailfiltering to your postfix server20:35
ivoksserious mailfiltering20:35
espaciousi know.20:36
espaciousproxmox mail gateway is infact postfix modded...20:36
espaciousi will have a separate proxmox mailgateway for that mailserver u guys helped me to config..20:37
ivoksi don't get it...20:37
espaciousand slowly i want to add all features to my postfix and get rid of that proxmoxmailgateway..20:37
espaciousist's a theory:D20:38
ivokswhy don't you just replace exchange?20:38
espacious?20:38
espaciousi use exchange for all users and several domains20:38
ivoksyou have a mail gateway for exchange, right?20:38
espaciousproxmox mailgateway is limited to one domain.20:38
espaciousso i wanted to play with it.20:39
ivokswell, postfix supports more domains than exchange :)20:39
espaciousi also need new acc cca 100-200 for GUEST:::kgs.si20:39
espaciousso i decided for postfix.20:39
ivoksso...?20:39
espaciousivoks mailgateway for exchange?20:40
espaciousno proxmox mailgatway is not infront of exchange...20:40
espaciousor what u mean?20:40
espaciousproxmox will be infront of this new posfix...20:40
ivoksi mean drop promox and exchange and put ubuntu mail server20:40
ivokswhy?20:41
ivokswhy do you need mail server in front of mail server?20:41
espaciousi cant drop exchange...but thats not a problem since i got more ips...20:41
espaciousproxmox mailgateway is not mail is a spam cut off thingy20:41
ivoksyou don't need it20:41
ivoksyou can fight spam better than proxmox20:42
espaciousi know i can config all features included in it in postfix...20:42
espaciousfact is it has a nice interface...to see whats going on ....20:42
espaciouscan i ask sth not so legal or will be someone angry?20:43
espacious:D20:43
espaciousyes/no?20:43
ivoksi didn't understand last line20:43
espaciousso.20:43
espaciousproxmox mail gateway has a limitation...u download a licence ...and a free one is limited to only one host! all other mails get droped...20:44
ivoksok20:44
espaciousso im practicaly asking how this is done and if i can go arround this...20:44
espaciousbut its illegal since u have just to pay and u have as many domains u like...20:45
espaciousi just want to know how this is done ...coded down to accept ony that domain.20:45
espaciouspure curiosity.20:46
espaciousi dont intend to resell it:D20:46
jmedinaespacious: well I think we dont use promox because is so closed, even when is based on open source20:46
jmedina:D20:46
jmedinaso, you better find another solution and more flexible20:46
espaciouspracicaly i did and u helped me.20:47
espaciousi just have to learn a bit more about postfix and stuff...20:47
jmedinanow you can install amavisd-new spamassassin, clamav and you have antispam and antivirus20:47
espaciousbut! take a lok at proxmox its great.20:47
ivokshttp://www.postfix.org/documentation.html20:47
jmedinaof course you need to configure each one and integrate amavisd-new with postfix20:47
ivoksits great, lol20:47
ivoksit's postfix+amavis20:48
espaciouswhy its not?20:48
jmedinabecause is not totally open and free20:48
jmedina:D20:48
ivokswhy? it's less flexibile than your solution20:48
espaciousthats the bad part.20:48
espaciousi agree.20:48
jmedinathat is the only part I care20:48
jmedinaopen or nothing :D20:48
espaciousbig + is it has realy n00b easy web based gui.20:49
espaciousi like that.20:49
jmedinayou can use maia mailguard20:49
espacioussince im n00b.:D20:49
espaciouswhat is that?20:49
ivoksLINUX syslogd uses synchronous writes by default. Because of this, syslogd can actually use more system resources than Postfix.20:49
ivoksi used mailzu for quarantine20:50
espaciousbtw what about that scripts to autocreate dirs or better a way to delete accounts if not accesed for defined time perios and what about batch creating users?20:51
jmedinaivoks: mailzu is good, but lacks the option to let users whitelist or blacklist using the interface20:51
ivoksjmedina: well.... :)20:51
ivoksjmedina: there are patches for that20:51
jmedinaivoks: didnt know20:51
ivoksjmedina: mailzu doesn't have developers atm20:51
petiaivoks, friend, you think you'll be able to help me out with spam filter ?20:52
ivoksjmedina: so someone forked it and patched it with all the patches20:52
jmedinawhat I like about maia is that user can request to relase a mail from querantine then the admin can relase it and whitelist it20:52
ivoksjmedina: users can release spam/virus in mailzu, also20:52
jmedinaivoks: ohh didnt know, what is the fork name?20:52
ivoksjmedina: http://sourceforge.net/mailarchive/forum.php?thread_name=493914E9.6010809%40husku.net&forum_name=mailzu-users20:54
ivoksjmedina: http://trac.husku.net/mailzu-ng/20:54
jmedinaivoks: thanks20:55
jmedinaso whos next?20:55
ivoks:)20:55
petiame20:56
jmedinajust kidding20:56
jmedinaI need to eat20:56
ivoksit would be great to have postfixadmin and mailzu integrated20:56
ivoksshouldn't be too hard20:56
jmedinaivoks: yeap20:56
ivoksboth are php, iirc20:56
ivoksjmedina: are you interested in working on that?20:57
petiaivoks, why you didnt tell me about postfixadmin before ?20:57
jmedinaivoks: there is a postfixadmin fork for greilistng and amavis setttings20:57
jmedinaivoks: I dont code :S20:57
jmedinaI only know how to type faster in shell20:57
ivoksjmedina: i don't too, but php shouldn't be too hard :)20:57
petiadamn ivoks likes to ignore me sometimes20:58
ivoks:)20:58
jmedinapetia: probably because your nicks sounds like PITA20:58
ivoksjmedina: postfixadmin+mailzu+roundcube :)20:58
ivokshttp://nejc.skoberne.net/projects/rcpfa/20:59
ivoksou yes!20:59
ivoksnow we just have to add mailzu to this combination :)20:59
=== tim|laptop is now known as timburke
petiai cant use my real nick cause i left irc on at home21:00
jmedinaivoks: http://www.oav.net/projects/openvisp-admin/21:00
ivoksand we have point and click interface to quarantine, account management21:00
jmedinathat is postfix admin fork21:00
ivoksjmedina: looking nice!21:01
ivoksand instead of mysql, use ldap21:01
ivoksand there you go - exchange :)21:01
petiaanyway, i'll talk to you guys later21:02
ivokswow... i'll work on this for 9.1021:02
ivokshm... that might be too narrow use case for distribution21:02
espaciousheh ivoks i know that guy /nejc.skoberne.net21:24
espaciousits from my town.21:24
ivoks?21:25
espaciousthe author of the link u pasted..21:25
ivoksah21:26
ivokstake care21:31
ivokstime for offline mode21:31
fenixhello21:38
fenixi'am brazilian21:38
fenixhelp me21:38
NetSkayhey guys22:49
NetSkayim need of a bit of assistance22:49
NetSkaywith openVPN22:49
NetSkayanyone :P22:49
=== Andre_Gondim-afk is now known as Andre_Gondim
=== hessml|away|away is now known as hessml|away
jmedinaNetSkay: what is the problem?22:51
NetSkayim stuck at the RSA keys22:51
NetSkayim following this how to22:51
NetSkayand i edited my vars22:51
NetSkaywithte h proper country, province bla bla22:51
jmedinawhich howto?22:51
NetSkaythe one at openvpn.net22:51
NetSkayso i type ./vars22:52
NetSkay./clean-all22:52
NetSkaythen ./build-ca22:52
NetSkayand it tells me i need to source ./vars22:52
NetSkayand i need to edit vars to reflect my config22:52
NetSkayso im a bit lost22:53
jmedinause22:53
jmedinasource ./vars22:53
NetSkayi tried that22:53
NetSkaylol22:53
NetSkaysame thing22:53
jmedina:D22:53
jmedina¬¬22:53
jmedinayou only need to use clean-all the first time22:53
jmedinato create al clean PKI22:53
NetSkaywell22:53
NetSkayim doing source ./vars22:54
NetSkayand i do22:54
NetSkaysudo ./clean-all22:54
NetSkayand it says22:54
jmedinaletme do it here22:54
NetSkayplease source the cars script, amke sure you have edited it to reflect ur config22:54
NetSkayim cd-ed in /etc/openvpn/easy-rsa/2.0/22:54
jmedinaok22:55
jmedinaim in there22:55
jmedinaok22:55
jmedinasource ./vars22:55
jmedina./clean-all22:55
jmedinaand the22:55
jmedina./pkitool --initca --pass22:55
jmedinathat works here22:55
jmedinaand ./build-ca22:56
NetSkaywhen i do22:56
NetSkay./pkitool part22:56
NetSkaysays same thing as if im running ./build-ca22:56
NetSkayi donno if my vars script is wrong or not22:57
jmedinaok, you are doing it in the same session right?22:57
NetSkayi just edited the last lines for location info and email22:57
jmedinawhich distro?22:57
NetSkayyea same session22:57
jmedinaversion?22:57
NetSkayumm22:57
NetSkayhow can ic heck?22:57
NetSkayabout?22:57
jmedinalsb_release -a22:57
NetSkayubuntu 8.1 intrepid, server edition22:58
jmedinaok22:58
jmedinasame here22:58
NetSkayi38622:58
NetSkayor w/e it was22:58
NetSkayand i copied easy rsa from /usr/share/openvpn/examples22:58
jmedinaok22:58
jmedinafrom the begining22:58
NetSkayand the dir is22:58
jmedina# cp -a /usr/share/doc/openvpn/examples/easy-rsa/2.0 /etc/openvpn/easy-rsa22:58
NetSkayok22:58
NetSkaylet me rm it22:58
BitWraithif I use apt to install skype (assuming it is in a repo ubuntu knows... maybe it's not) would that pull in X11 or Gnome as a dependency?22:58
jmedina# cd /etc/openvpn/easy-rsa/22:59
jmedinaroot@jmdesk:/etc/openvpn/easy-rsa# source ./vars22:59
jmedinaNOTE: If you run ./clean-all, I will be doing a rm -rf on /etc/openvpn/easy-rsa/keys22:59
jmedinaroot@jmdesk:/etc/openvpn/easy-rsa# ./clean-all22:59
NetSkayjmedina done22:59
jmedinaroot@jmdesk:/etc/openvpn/easy-rsa# ./pkitool --initca --pass23:00
NetSkayo let me do that23:00
jmedinaUsing CA Common Name: Fort-Funston CA23:00
jmedinaGenerating a 1024 bit RSA private key23:00
jmedina.......++++++23:00
jmedinaI didnt edit vars for testing purposses23:00
NetSkaydo i ahve to sudo clean-all cause i get permission denied, or should i chown?23:00
NetSkaynope, same thing man23:02
NetSkaythis time i didnt edit anything23:02
NetSkayi did exaclty what u did23:02
=== hessml|away is now known as hessml|away|away
orudiewould someone volunteer to help me out with this guide to get the spam filter working?23:17
orudiehttps://help.ubuntu.com/8.10/serverguide/C/mail-filtering.html23:18
=== asac_ is now known as asac
NetSkayjmedina fixed it23:24
jmedinaNetSkay: good, what was the problem?23:25
mrbullhello23:31
mrbulldoes anyone knows how to remap some keys and make it persistent? I've tried editing /etc/kbd/remap but it didn't work.23:31
jmedinafor shell or X?23:33
jmedinafor X you can use Xmodmap23:33
mrbulljust shell23:33
jmedinawhat are you doing?23:33
orudiejmedina, hi where is ivoks ?23:33
jmedinaorudie: living, I guess23:34
jmedinaI dont know, he went offline a few hours ago23:34
NetSkayjmedina, i just enabled my root account, sudo passwd root, i guess it sources under regular user and when i try and sudo doesnt work, i really dont know lol23:34
mrbullim trying to switch esc for caps lock. if it works ill probably remap right meta to return23:34
orudiejmedina, do you think you can help me with setting up mail filter ?23:35
mrbull(i used readline in vi mode, which is why i asking)23:35
mrbulluse*23:35
jmedinamrbull: yes I can23:35
jmedinaI have a howto in spanish :S23:35
jmedinabut Im leaving in 30 mins23:35
mrbulljmedina: i can read spanish with no problems23:36
jmedinagood23:36
jmedinatuxjm.net/docs/mailserver-howto/mysql-based/23:36
jmedinamrbull: in same box or mailgateway ?23:36
mrbullwait, something good mixed up... i think this is meant for orudie23:36
mrbullgot*, not good23:36
orudiei like good23:37
jmedinadamn23:37
orudie:)23:37
mrbulli just want to know why the system isn't picking up my keybindings from /etc/kbd/remap23:37
jmedinahow hard is to get ubuntu certification23:37
jmedinaLPI doesnt help too much23:37
jmedinaorudie: it is for gentoo23:37
jmedinabut most things works using same configs23:38
jmedinajust skip pyzor config23:38
jmedinait is not recommend and maintained23:38
orudiewhat about antivirus ?23:38
jmedinaamavisd-new dont recomend, it uses a lot of resources23:38
jmedinaorudie: I use clamav23:38
jmedinaorudie: where do you want to enable mailfiltering23:39
jmedinain the same MTA box?23:39
jmedinaor in a separate box?23:39
orudiesame23:40
jmedinaorudie: are you using postfix?23:42
orudieyes23:43
orudiepostfix/dovecot23:43
orudieand smtp-auth23:43
orudieeverything is working like a charm23:43
jmedinaorudie: and what is the problem with the howto?23:43
orudiebut no mail filter :(23:43
domasdid cyrus die lately? why is everyone using dovecot? :)23:43
orudiethe problem is that after doing all the steps mail stopped working23:43
jmedinadomas: it is cool23:44
orudieno errors or anything, though i didnt have time to check the logs23:44
jmedinaorudie: and what about logs?23:44
domasI used to build big stuff on cyrus ages ago23:44
orudiesee, the email server i set up for my company23:44
domasit seemed to be perfect ;-)23:44
jmedinaorudie: could you pastebin your main.cf and master.cf files?23:44
orudiejmedina, i had to undo everything i did in the howto , because like i said mail stopped coming in / out23:45
orudieit was in the middle of a busy day23:45
orudieso i had to quickly undo everything23:45
orudieand didnt even have time to check the logs23:45
orudiebut i do in fact have time right now23:45
jmedinawell I cant help you23:46
jmedinaI just need to go out for 30 minuts then come back23:46
orudieok i'll wait23:46
jmedinaok for now follow the same howto23:47
jmedinaand stop when you get to the postfix section23:47
orudieoh but you said.... dont set up razor ?23:47
jmedinadont worry23:47
jmedinawell I said pyzor23:48
jmedinarazor is good23:48
orudieso dont install pyzor ?23:51
jmedinano23:52
jmedinaonly razor23:52
jmedinaorudie: done?23:57
orudiejmedina, a little stuck here hang on23:58
jmedinaok23:58
jmedinaok23:58
orudiecant establish connection to outgoing server with outlook :(23:59
orudiewtf23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!