/srv/irclogs.ubuntu.com/2009/03/26/#ubuntu-server.txt

Eliteaustin@ubuntu-server:/etc/cups$ /etc/init.d/cupsys restart00:03
Elite * Restarting Common Unix Printing System: cupsd                                                         start-stop-daemon: warning: failed to kill 8851: Operation not permitted00:03
Elitecupsd: Child exited with status 1!00:03
geniiElite: Try using sudo00:04
geniieg: sudo /etc/init.d/cupsys restart00:05
EliteThere we go!00:06
Elitejmedina, now that command shows: austin@ubuntu-server:/etc/cups$ sudo netstat -plutn | grep cups00:06
Elitetcp        0      0 192.168.0.100:631       0.0.0.0:*               LISTEN      8884/cupsd00:06
Eliteudp        0      0 0.0.0.0:631             0.0.0.0:*                           8884/cupsd00:06
EliteWhen I try to go to the ip is says 403 forbidden00:06
jmedinammm00:07
jmedinayou never tell me about that error when I ask for the error00:07
jmedinasometime when you dont give enough info it is harder to solve simple problems00:08
EliteWhat error?00:08
jmedina403 forbidden00:08
Elitethe 403?00:08
jmedinaor where did you get it?00:08
EliteThat is the first time I got that error, and I got it when I got to http://192.168.0.100:63100:09
jmedinayou need to change access restrictions in cupsd.conf00:09
jmedinasorry I have to go00:10
Elitegenii you still here?00:27
geniiElite: A bit, yes. I'm not overly familiar with cups errors however, and so not of much help on that subject00:31
EliteDo you know what permissions stuff he was talking about?00:32
geniiElite: 403 forbidden is a generic webserver message which means you or the user it thinks you are is not allowed to see the files. This normally happens when people put files in the webserver dir which don't belong to the same user the webserdoes for instance. In cupsys case, the user may have to be specified in the cupsd.conf file which jmedina mentioned00:35
geniiBleh, typos00:36
EliteI know what the error is but I can't see any place to set a user name00:37
EliteHow do I get out of a man00:38
geniiman cupsd.conf  shows quite a lot of name settings,auth settings, etc00:38
geniiElite: q00:38
EliteI was there and can't seem to find dick all there its too confusing00:39
geniiElite: Mine has what seems to be relevant entries of:  SystemGroup lpadmin    (my user is a member of this group)    and:  DefaultAuthType Basic00:42
EliteWhats after that line?00:43
geniiElite: Wait, I'll just pastebin the whole thing so you can see00:44
Eliteok00:44
geniiElite: http://pastebin.com/f3090af0600:45
Elitethx00:46
EliteDo you share your printer?00:48
geniiElite: Nope, it's an usb printer connects directly to my laptop00:48
EliteGod damnit! mine looks literally just like that and it doesn't work00:51
geniiElite: Hm. You are putting what url in?   192.168.0.100:631    or so?00:52
Eliteyea00:53
EliteI just keep getting a 403 erroe00:53
geniitry:   127.0.0.1:63100:54
EliteI can't00:54
geniiWhy not?00:55
EliteI'm not on that machine00:55
EliteAnything I don on that machine is done by ssh00:56
geniiElite: Ah, ok. If you have lynks/elinks installed on there, you can do it on ssh00:56
EliteWhats that?00:57
geniitext mode web browser00:58
geniiUseful to have on CLI machines00:58
Elitehow do I get out of vi01:00
geniiElite:   :q   or :q!   to not write changes01:00
=== emmajane is now known as emmajane_scotch
Elitenot working01:01
geniiElite: eg:     links http://127.0.0.1:631                  doesn't work?01:02
genii(after of course sudo apt-get install elinks if it was not installed)01:02
EliteNo the vi exit I mean01:02
geniiElite: Hit ESC a few times then try again the:    :q!01:03
jmedinawhere can I preview Ubuntu Server guide for jaunty01:05
jmedina?01:05
jmedinathere is no link in help.ubuntu.com01:05
EliteI am on dial up is that application on the dvd?01:05
geniiElite: elinks should be on the cd actually01:06
Elitehow do I make it come from there?01:06
BrunoXLambertgenii, w3m is installed by default for a text web browser01:06
geniiBrunoXLambert: Ah, thanks, did not know01:06
geniiElite: Apparently you have already a browser installed01:07
EliteYea opening now01:07
BrunoXLambertlinks doesn't even seems in main01:07
BrunoXLambertelinks is01:07
geniiBrunoXLambert: links is a symlink to elinks01:08
BrunoXLambertbut not installed by default01:08
genii(when it gets installed)01:08
BrunoXLambertyeha01:08
BrunoXLambertthe real links is in universe01:08
Elitew3m says it can't open http://127.0.0.1:631 or http://localhost:63101:09
BrunoXLambertnetstat -taunp | grep 63101:10
BrunoXLambertps faux | grep cups01:10
Elitetcp        0      0 192.168.0.100:631       0.0.0.0:*               LISTEN      8983/cupsd01:11
Eliteudp        0      0 0.0.0.0:631             0.0.0.0:*                           8983/cupsd01:11
Eliteaustin@ubuntu-server:/etc/cups$ ps faux | grep cups01:11
Eliteaustin    9013  0.0  0.0   3004   752 pts/1    S+   20:12   0:00              \_ grep cups01:11
Eliteroot      8983  0.0  0.2   5988  2336 ?        Ss   19:50   0:00 /usr/sbin/cupsd01:11
geniiElite: Please use pastebin when a lot of lines01:11
EliteIt was 2 parts or supposed to01:12
geniiElite: Try it's Listen address you likely specified, which would be the 192.168.0.100:631   or so01:12
EliteI get a 403 still01:14
BrunoXLambert40301:14
BrunoXLamberthmmm01:14
BrunoXLambertwhy would the permition would be bad01:14
geniiElite: Unfortunately as I already said, I'm not a Cups expert01:15
EliteI know01:15
jmedinaread the logs!!!!01:15
jmedinadont guess01:16
EliteWhere are they?01:16
BrunoXLambert/var/log01:16
geniiYou likely want the apache one01:16
geniior /var/log/cups/error_log01:17
EliteI don't think I have apache installed01:17
EliteNope01:17
geniiCan you even get a "403" if no webserver backend?01:18
EliteYes01:18
EliteLike I said I can use SWAT01:18
Alysumhello does anyone use apple's Terminal here and know how to alt backspace to delete the previous word like on PC keyboards?01:28
EliteI use it and alt on a mac keyboard is the button right next to the space on the left side01:30
Deepsctrl+w?01:33
owhSalutations. In fetchmailrc I need to specify many accounts. How do I specify default options like ssl sslchk and sslcertpath for the accounts. At the moment, it appears that I need to specify this for each user, rather than for the server, which makes no sense to me.01:34
owhUntil now, I've only ever needed one account in fetchmailrc - multiple accounts appears to be a whole different kettle of fish :(01:35
owhIn case anyone's wondering, it turns out that you create a "defaults" "server" with the options. Very intuitive :|01:39
AlysumElite: it doesnt work, its supposed to delete the WHOLE word until it meets a space backwards01:40
=== emmajane_scotch is now known as emmajane
twitzelHi all04:06
twitzelwhere can I download a "jaunty" iso image ?04:06
jmarsdenhttp://cdimage.ubuntu.com/releases/jaunty/alpha-6/04:07
twitzelHow alpha is it ? Is it minor issues, or does it have serious problems ?04:08
jmarsdenIt is an alpha release... so I suppose it is 100% alpha?  If you can't handle that, wait for the real release :)  How serious its problems are depends on what you do with it...04:09
twitzelI only want to run an NFS server with it. My current problem is that multipath-tools is all messed up in intrepid, but all the problems I have, are apparently fixed in "jaunty" Nobody seems to want to backport it to intrepid.04:10
twitzelSo its either "jaunty" now, or RH/centos instead. I'd like to keep everything homogeneous, i.e. ubuntu, so I like to give it a shot. But intrepid is basically broken04:11
jmarsdenIntrepid works fine here, if you think it is broken, did you file a bug?  Please supply bug # and I'll look at the bug report...04:12
twitzel Bug #33836304:13
uvirtbotLaunchpad bug 338363 in multipath-tools "device maps from partition tables will not be generated" [Undecided,Fix released] https://launchpad.net/bugs/33836304:13
twitzelI think most of it is probably udev script related04:14
jmarsdenDoesn't the workaround stated in the bug report :  ENV{DM_TABLE_LIVE}!="1", GOTO="kpartx_end"   work?04:15
twitzelNo04:15
twitzelBasically what I have done now, is removed all dm related udev scripts, which makes it at least generate /dev/dm-* by default rule and then call kpartx in a boot script04:16
jmarsdenThen you should add a comment to the bug saying that the workaround fails for you, and what happens when you try it.  ALso, you could consider just grabbing the sources for the newer version of multipath-tools from Jaunty and rebuilding them on Intrepid.04:16
twitzelFrom the udev debug output, the kpartx rule is NEVER called04:17
twitzel(that was before I messed with it)04:17
jmarsdenOr you can take the risk and run an alpha release... but if your NFS server will go into production... I wouldn't do that!04:17
twitzelHow bad can it be ?04:17
jmarsdenI'd grab the Jaunty sources for multipath-tools and build the packages for Intrepid...04:18
twitzelSounds like a good plan04:18
jmarsdenhttp://www.ubuntu.com/testing/jaunty/alpha6  says "This is still an alpha release. Do not install it on production machines."  I'd do as it says...04:19
twitzelWe don04:19
twitzel't do HA stuff or webserving04:19
twitzelUnless it crashes everyday or loses data, its okay04:19
twitzelI can try jaunty on one machine and try to backport the stuff to intrepid on the others04:20
jmarsdenOK.  There are no guarantees of either of those things being true for Jaunty Alpha6 :)  I'd be surprised if it did that to you, but... it might.04:20
twitzelwe have several of these HW configs04:20
twitzelOne last question about that. If I install the alpha, can it be upgraded to release without complete reinstall ?04:22
ScottKtwitzel: Yes.04:22
ScottKtwitzel: Actually if you install and upgrade now you'll have essentially the beta.04:22
twitzelawesome04:23
twitzelI'll email Taiwan and have them burn and insert the CD04:23
twitzelI wish I knew more about udev04:25
twitzelthen I could contribute something. But right now its a bit above my head whats going on04:25
twitzelUuuh05:04
twitzelU just botched by kpartx rule such that it calls kpartx on all dm-* that come in05:04
twitzelNow everything works as desired, of course, all other device-mapper functions one could have are shot now05:05
=== `6og is now known as Kamping_Kaiser
whalesaladHey guys I turned my eth0 interface off a little while ago, and just turned it back on... but it's not working at all :/06:41
whalesaladusing ifconfig eth0 up/down06:41
p_quarleswhalesalad: sudo /etc/init.d/networking restart06:47
p_quarlesor sudo dhclient eth006:47
simplexioor ifup/ifdown  eth006:50
n006Йо!07:16
n006Есть кто живой? :)07:16
rst-uanicага07:16
n006Вот.07:16
rst-uanicканал вобще-то англоязычный обычно был :)07:16
n006Очч нужна помощь. Хотя наверное я хочу нереального.07:16
n006Ой соррь то чно не тот нажал. xD07:16
n006sorry07:16
rst-uanicstrange :)07:17
sorenwhalesalad: "ifconfig eth0 down" deconfigures the interface, thus bringing down the routes through that interface. ifconfig up only bring the interface back up, not the coresponding routes. So: Use "ifdown eth0" and "ifup eth0" when you want to deconfigure/configre eth0.07:39
owhI'm in the hunt for opinion, so please don't be shy. I've built an electronic ticket system. It emails out tickets to events. Invariably people provide incorrect emails, make typo's have quota issues and the like. I need to deal with the "backscatter". I was thinking of using dbacl to pre-filter this and then parse the individual messages. Are there other/better ways of doing this?07:39
whalesaladThanks for all the help guys07:39
owhI'm asking here, not from a programming perspective, but because there is lots of server/enterprise experience in the room and I'm sure that u-s ships with all manner of tools I know nothing about :)07:40
sorenWhy the filtering?07:42
sorenDo you intend to use the return-path address for other purposes?07:43
owhThe filtering is to make sure that an allocated ticket actually arrives. If it never gets to the recipient, it's never used.07:44
owhIt also means that the email address is faulty, so we cannot send a reminder later.07:45
_rubenowh: you can only prevent backscatter on your own servers, not those of others .. and checking whether an email address exists or not, is nearly impossible07:46
owhI'm just wondering, perhaps I don't need to do any of this. If a message comes back for *any* reason, it's borked.07:47
_rubenwell .. a bounce analyzer is another, sometimes useful, system07:47
_rubenprogammatically analyzing a bounce is quite an endeavour due to the non-standard formats being used07:47
owh_ruben: Sure, but I'm beginning to wonder if I need to do this to actually figure out if the message got there. I suppose I need to ignore the "Delayed" errors, but the rest...07:48
_rubenover-quota: tempfail .. non-existent domain: could be perm or tempfail .. etc .. rather difficult to handle properly07:48
owhThat in itself is classifying them. Which is why I started down the Bayesian path.07:49
_rubenowh: well .. i'd atleast recommend "marking" email addresses that bounced atleast once or twice as "special (action required)" or smth similar07:49
_rubendepending on the mailvolume one could process those marked addresses manually07:50
owhYeah. At the moment we do a "time-out" - if you don't collect your ticket with a period it goes back into the pool.07:50
owhI just downloaded the email from the mailout of 9000 tickets. There were three messages, one to invite, one to collect and one to thank. That generated 3300 "extra" return emails alone.07:51
owhPeople are not good at writing their own email address :(07:52
owhI've not yet analysed all that email, but most of it is mistyped email addresses.07:53
owhs/is/seems to be/07:53
owhThere isn't any ready-made stuff for this in u-s is there?07:54
sorenowh: Even if they have to type it twice? Wow. I'm surprised.07:58
owhNope, they just cannot seem to achieve it :(07:58
=== ogra_ is now known as ogra
* soren loses another little bit of faith in mankind08:00
owhI just found one user who mistyped their address *nine* times. The same two letters transposed.08:01
Bambi_BOFHdyslexic ;O08:01
soren*facepalm*08:02
_rubenour bulkmailers have their queues filled with @hotamil.com @homail.com @hormail.com etc addresses08:05
owhYup08:05
owhOr @hotmail08:05
owhNo phone numbers though - at least <grin>08:06
_rubenwhich basically is a flaw in our software which i keep nagging our dev's about .. no address should be added to a mailinglist untill its verfied08:06
_rubenhehe08:06
owhThat's the path I'm going down too. Otherwise you're just storing junk.08:06
owhSo, is dabcl overkill for what I want to do, or a smart way to go about solving this?08:07
_rubencant say i know what 'dabcl' is :p08:08
sorendbacl.08:08
owhDoh08:09
owhdigramic Bayesian text classifier08:09
_rubenclassifier .. hmm08:09
_rubensounds a bit overkill indeed08:09
Bambi_BOFHis a classic 'click here to confirm' to uncool?08:09
owhBambi_BOFH: Well, they'll click regardless.08:10
_rubenputting effort into a proper signup process is best imo08:10
_rubennot being able to do anything untill a confirm link is clicked for instance08:10
Bambi_BOFHowh, if the link is clicked, someone got the email.08:10
* Bambi_BOFH heads to dinner. will be interested to see how this discussion evolves08:10
owh_ruben: I like the notion of sending an email to what ever they tell me, ignoring what ever comes back and only adding the address and sending a ticket once they click the link.08:10
owhBambi_BOFH: Ah, I read "on the site", but you mean, "in the email"08:11
Bambi_BOFHyup.08:11
_rubenowh: it's about the only way "that works" :p08:11
owhYup08:11
* owh adds a few lines of code to make that happen and ditches the dbacl idea. Much appreciated.08:11
_ruben:)08:12
owhThe more I think about it the less I understand why I didn't think of this before :(08:12
owhIt's not like its a new idea :)08:13
jwstolkI found my problem: wakeonlan (sending the magic packet) fails if the computer where the packet is send from has more than one nic. (I have 5, it's a firewall)08:13
jwstolkThe only solution I found was disabling all but one noc, which isn't a very good option in my case.08:14
owhjwstolk: Just out of curiosity, how did you confirm this behaviour because while I've not done what you're doing, it does not appear to make sense to me.08:15
* owh is happy to be disabused of this :)08:16
jwstolkIt works on all my ubuntu-servers, except the one with multiple nic's, en it's the only reason I could find using google as well.08:17
simplexiojwstolk: if i recall right wakeonlan work only from lan adderss, are all those nics in same lan. maybe packet originates from wrong nic or something08:17
jwstolkthe "send" operation in the python wakeonlan scripts gives an error, the packet never gets send, not even to the wrong subnet08:18
simplexiojwstolk: ahh.. that script dosent work .. is it in some package or can you paste it to pastebin08:19
jwstolksimplexio: the "wakeonlan" ubuntu package08:19
jwstolk"send : Operation not permitted at /usr/bin/wakeonlan line 126."08:20
jwstolkI think setting up the connection for sending fails, but I don't really know python.08:20
simplexiojwstolk: are you sure you have enabled wol in those nic which shoul work08:24
jwstolkI should not need to enable it on the nicks where I send it from. the computer that will receive then has it enabled, and it works, it's just doesn't work from the server with multiple nic's08:25
jwstolkI want to send the magic packets from the firewall, because that's the one that is on 24/7.08:26
jwstolksimplexio: If I change the destination port from "discard" to "ntp" in the script, it does send the packet. (port doesn't matter for WOL)08:39
jwstolk(I also tested with the firewall stopped, but that didn't help.)08:39
jwstolkhmm, the script no longer gives me an error, but nothing wakes up.08:46
=== Bambi_BOFH is now known as Kamping_Kaiser
jwstolksimplexio: Got it to work: changed the port in the script from "discard" to "ntp" _and_ specify the subnet using "wakonlan -i 10.0.1.255 <HW Address>".08:58
jwstolkok, works with the "discard" package as well, if I open that port in the firewall software. I think I got confused by the fact that stopping the firewall does not seem to clear the IPtables.09:03
krautmoin09:07
=== dazman_ is now known as dazman
george__hey guys, anyone here who worked with apparmour? trying to figure out how jailbash is set to be the shell for specific users only09:15
VSpikeHi .. I've set up a command-line PPTP VPN connection on my server and it works when I do "pppd call myvpn"... but how can I configure it so that a static route is added when the vpn is connected?09:18
simplexiojwstolk: have to remeber that09:29
henoHi09:43
jwstolksimplexio: It isn't very clear that wakeonlan is sending to the "discard" port, and that you have to let that through the firewall (if any), but the nic doesn't care where in the packet the "magic" part is, or to what port is send.09:43
henoAnyone here set up to help with a RAID install test on 64 bit?09:43
henohttp://iso.qa.ubuntu.com/qatracker/test/249009:43
henohttp://testcases.qa.ubuntu.com/Install/ServerRAID109:44
jwstolkheno, works here. (Raid 10,f2 on two disks, on ubuntu-server-64) but I needed the newest kernel before rebuilding after a (simulated) drive replacement worked.09:45
jwstolkbut I can't really test things right now.09:46
henojwstolk: thanks - I was specifically thinking of an ISO install test with the pre-beta images09:46
jwstolkok. (I cheated anyway, I installed ubuntu on a single SSD, and only use the raid for the served files.)09:47
henosoren, ttx, dendrobates: do we have anyone with a suitable setup?09:48
ttxheno: not that I know of. Maybe kirkland.09:50
sorenheno: Is virtualised installs ok?09:50
ttxsoren: probably, looks like a software raid test09:50
sorenIndeed.09:50
sorenIf so, I can do it.09:51
sorenI need to take a break now, though.09:51
henosoren: virtual would be fine - it's mainly to test the ISO itself. Thanks!09:52
domashow much RAM should left to OS on a DB server?10:12
domascause whenever I leave less than 2GB, kswapd starts going nuts :)10:12
domas(even with swapiness decreased a lot :)10:12
sorendomas: Can you see what those 2 GB are used for?10:14
domassoren: "cache"10:15
domaswell, it is 32GB machine10:15
domasso 2G is quite small percentage :)10:15
sorenCache pages should be evicted instead of swapping.10:16
domasit isn't swapping10:16
domasit is just kswapd doing lots of CPU cycles10:16
sorenAnd what do you think that means?10:16
domasthat it is nuts :)10:16
domasif I increase swapiness, it starts swapping10:16
domasand calms down10:16
sorenHow do you determine whether it's swapping or not?10:17
domasvmstat10:17
domas(and "swap used" stays at 0 :)10:17
domassometimes kswapd just starts going nuts and panics machines eventually, if no intervention is made10:18
domasit doesn't seem to like edge case of "one very very very big process"10:19
sorenYou should talk to the kernel guys.10:20
domasyeah, I guess10:21
tom__does somebody know why i get "ignoring bad proto spec: '17437' when i try to restart ssh?10:26
tom__i installed openssh-server10:27
tom__changed /etc/ssh/sshd_config10:27
tom__where i changed port 22 to 1743710:28
tom__and set PermitRootLogin to no10:28
Deepsdid you change port or protocol?10:29
Deepsdouble check the change you made10:29
Deepsdefault is :Protocol 210:30
Deeps(answer found, 2nd hit on google for: 'openssh ignoring bad proto spec:')10:30
tom__thanks, you're right10:32
Jeeves_Ola10:49
Jeeves_Anyone here using kvm + virtio nic?10:49
sorenYes.10:49
Jeeves_Ever had a kernel panic while booting it? :)10:50
Jeeves_http://pastebin.ubuntu.com/138146/10:51
Jeeves_Or better10:53
Jeeves_http://pastebin.ubuntu.com/138148/10:53
domashere, example of linux being idiotic: http://p.defau.lt/?WB6QRUQKJK19nVoZNQlNCA10:54
Jeeves_domas: How is that idiotic?10:56
domasJeeves_: it uses 2G for cache, mostly caching _nothing_, and pushed out 2G of process that had active cache use10:56
Jeeves_domas: I would expect cache is filled with the mysql-data files10:57
domasJeeves_: O_DIRECT10:57
domasJeeves_: actually most cache is log file, which is never read10:58
Jeeves_domas: So fix how syslog opens the logfiles11:01
Jeeves_so it doesn't get cached11:01
beniwtvHi all... I have a strange problem on one of my Ubuntu servers. It has 5 HDD's in RAID (mdadm). However, one drive periodically is put into 'Fault' state by mdadm. Removing and re-adding the drive seems to get it back up. Also strange is that I created a partition on that drive of type fd (Raid autodetect), but when I start my RAID, fdisk -l complains that it hasn't a valid partition table, which I think could be related t11:07
beniwtvo the error I'm seeing. Note: I created the RAID manually (not with the installer), so I can't rule out that I have done something wrong. Any ideas?11:07
Deepsnot the most scientific solution, but you could try trashing that disk and recreating the partition,filesystem,etc. and readding it to the mdadm arrray fresh, and have it rebuild?11:10
beniwtvDeeps: Yeah, that's what I thought to. I was previously playing with a fake RAID, which included that disk. Maybe it has some left-over there.11:14
beniwtvDeeps: But just to verify, fdisk should not give that error (Disk xx doesn't contain a valid partition table), right?11:16
Deepsshould not, no11:16
beniwtvEven in RAID 5?11:16
Deepsmight wanna use dd to /dev/zero those blocks? (i'm not sure if that has any other potential repercussions, mind)11:16
sorenbeniwtv: That depends entirely on how you've set up your raid.11:25
beniwtvsoren: Used mdadm --create, with default options (has 5 devices, RAID5). I have never done it manually, I always used the installer, which didn't gave me any problems afterwards. But this server has had a RAID array added, so the system was already installed on it.11:27
beniwtvsoren: But I'm begining to think the drive is faulty, or the 3rd cable of the RAID is bad. I see timeouts in dmesg for that drive (which is the only one on that cable). And all others seem to work fine...11:28
=== VSpike__ is now known as VSpike
kinleyhey: is there a safe way to differ between ethernet devices connect to path throght modul or by switch modul for dell poweredge blade server ?12:14
kinleylspci : http://paste.ubuntu.com/138185/12:15
sorenkinley: I don't understand the question.12:29
sorenkinley: What are you trying to achieve?12:29
aciculathink he's trying to figure out which ethernet device belongs to which physical connection perhaps?12:33
sorenAh.12:36
sorenkinley: Do you know how the pci "addresses" (I don't know if that's the correct term) map to physical ports?12:37
kinleysorry, solved it, dell blade chassis map the ehternet port directly to different factorys, so port ethernet port 0 and 1 go to factory A and port 2 and 3 to factory c12:39
sorenErr... Does that answer your question?12:40
sorenIf so, that's cool. It just mean that I didn't understand the question after all :)12:40
sorenI don't even know what a "factory" is (other than a place where stuff is produced).12:41
kinley;) or a blade chassis modul slot12:42
kinleyyou can choose between switches, pass throught moduls....12:44
sorenGoogling "blade chassis factory" didn't help, either. It only gave results where "factory" was used in the "production facility" sense.12:44
kinleyhttp://support.dell.com/support/edocs/systems/pem/multilang/cfggd/west/U003C0D.pdf12:50
kinleypage 3912:50
Deepspossibly OT, is it possible to get the battery life remaining from a laptop without acpi enabled?12:55
sorenDeeps: If it's old, perhaps apm will do.12:56
sorenkinley: I don't see it.12:57
kinleyyou got the pdf ?12:57
sorenkinley: Yes.12:57
Deepssoren: p3 750mhz, old it certainly is!12:58
kinleysoren: on page 29 is a picture which show the backside of the chassis... the vertical slots are the factorys13:00
sorenSearching for "factory" gives me two hits. "factory default settings"  and "the factory-assigned World Wide..."13:00
sorenOh, *twenty*-nine.13:00
kinley3913:00
kinleysorry  page 3913:00
sorenOh. "fabric" :)13:00
sorenYou're German or something, aren't you? :)13:00
Deepssoren: pretty sure the information it's outputting isn't accurate, but thanks anyway (100% battery life after 30mins?)13:00
kinleyfabric13:00
kinleysorry13:00
sorenDeeps: Mind you, old laptop batteries positively suck at reporting their current charge level.13:00
Deepssoren: good point13:00
sorenDeeps: I had one that knew three different levels. 100%, 6% and 0%. Ironically, the one where it stayed the longest was 0%.13:01
soren100% for the first 5 minutes, 6% for maybe 45 minutes, and 0% for the last hour or hour and a half or so.13:01
Deepssoren: sounds like my old dell13:02
sorenDeeps: Fujitsu Lifebook.13:02
Deepsmind you, same dell reaches 0% in about 5mins now, and then cuts out 30seconds later hehe13:02
Deepsmachine in question now is an hp omnibook xe3, p3 750mhz, providing internet gateway, firewall, mrtg13:03
dendrobatesheno: kirkland should be able to test that.13:05
Deeps..and i'm currently in a powercut, so only that laptop and mine are still alive, sitting in a rather uncomfortable position too as wireless is also unavailable13:05
kirklanddendrobates: heno: what specifically do you want me to test?13:46
oruworkhow can i host multiple websites ?13:49
oruworkon one host13:50
Deepsapache vhosts13:53
rst-uanicoruwork: you should add different virtualhosts13:53
oruworkrst-uanic, ok, any more info on this ?13:53
friartuckoruwork ip aliases and apache virtual hosts is one of a few answers...http://httpd.apache.org/docs/1.3/vhosts13:53
rst-uanichttp://httpd.apache.org/docs/2.0/vhosts/13:54
rst-uanicthis one is for apache2 :) I'm not sure if there's any difference13:55
friartuckoruwork and....https://help.ubuntu.com/8.10/serverguide/C/httpd.html13:55
oruworkfriartuck, so its just a matter of creating configuration files for each site in /etc/apache2/sites-available ?13:59
Faust-Ca2ensite14:00
friartuckoruwork you need to look into ip aliases, this is separate from apache. then...you need to dig into apache documentation. that's too long of a story for IRC.14:02
oruworkfriartuck, ip aliases.... hmm not sure where to start14:02
Faust-Ccreate virtual IP14:03
Faust-Ceth0:114:03
Faust-Cgotta love linux's built in functionality14:03
Faust-Cor name based vhosts14:03
Faust-Cubuntugeek.com14:03
oruworkerrr stuck14:04
twitzeljmarsden, with jaunty multipath works like a charm14:05
oruworkand confused14:05
Faust-Coruwork: google, books, etc14:06
friartuckstrange...ubuntu server guide covers eth bridging but not aliases. hm.14:11
rst-uanicaliases are quite rarely used i think14:12
oruworkso i moved file /etc/apache2/sites-available/default to /etc/apache2/sites-available/site1 and changed the site root and directory in this file, nothing happend :(14:14
rst-uanicoruwork: you sould enable site114:14
rst-uanicsudo a2ensite site114:15
rst-uanicalso, you should specify site name in the virtualname tag14:15
oruworkhttp://pastebin.com/m63a1279314:17
oruworkvirtualname tag ?14:19
oruworkwhere would i specify this ?14:20
oruworkin which file is the ServerAlias configured?14:24
=== Jare_ is now known as Jare
=== greenfly_ is now known as greenfly
=== Pici` is now known as Pici
oruworkrst-uanic, really stuck not sure what to do15:04
george__:q15:04
george__bye guys15:04
oruworkScottK, around? i need some help to get 2 sites working under apache 215:06
rst-uanicoruwork: stuck with what?15:06
* ScottK is here, but knows very little about apache. I'd say just ask the channel.15:06
oruworkrst-uanic, well.. the same thing, not sure how to get 2 separte sites15:07
=== scfh_ is now known as scfh
oruworki have a feeling of hitting the wall15:08
oruwork:)15:08
rst-uanicoruwork: what have you done already?15:08
rst-uanicoruwork: and... you need two different sites, that have different FQDNs but are located on the same ip and server, right?15:09
oruworki'm looking at instructions here https://help.ubuntu.com/8.10/serverguide/C/httpd.html , I copied file default to site1 and specified document root and directory in site1 file15:10
rst-uanicok15:10
rst-uanicwhen you specify virtualhost15:11
rst-uanicthe first line is <VirtualHost *>15:11
rst-uanicchange it so something like this <VirtualHost yoursite.com:*>15:12
rst-uanicrestart apache and try again15:12
oruworkthe first line in default file yes <VirtualHost *:80>15:12
rst-uanicnow15:13
rst-uanicin a new file specify you site name instead of *15:13
rst-uanics/you/your/15:13
=== hessml|away is now known as hessml|away|away
oruworkrst-uanic, how can i remove site from a2ensite ? rst-uanic  ?15:19
rst-uanicoruwork: a2dissite15:20
=== masACC is now known as maswan
=== sparky_ is now known as sparky1492
boflicI followed the perfect server howto for ubuntu 8.10 with isp. I have a problem though. i can connect to apache and isp from local ip (192.168.0.x) but when i try to connect from server1.x.x it fails, and firefox gives me an error about that the site is there but it cant connect to it! Can anyone help me out PLEASE!15:36
Zerqentboflic: are both you and the server behind the same NAT?15:38
boflicyes, and i forwarded ports to my server, in a attempt to make it work!!15:39
boflicCan i give any logs???15:40
nomoahi, sometimes our bind nameserver refuse to respond (timeout), I can see strange errors in /var/log/messages but I'm not sure it is linked to the problem : http://pastebin.com/da52bd3615:44
boflicsorry!!! i got it! cybercity (my isp) turned of nat loopback! reenabled it and it seems to work! does anyboddy know if it is possible to disable updates from isp??15:44
=== scfh is now known as scfh_
sorenboflic: Cybercity has always done that.15:55
boflicI know! BUT WHY! they should just accept that when i made some changes, its becuase i need it!!! Isn't it posible to make it allways on???15:56
Zerqentboflic: you have to check that from outside your NAT15:57
boflicZergent: I've solved it with nat loopback on! my mistake!15:58
=== scfh_ is now known as scfh
=== scfh is now known as scfh_
=== ogra_ is now known as ogra
jmedinamorning17:13
krauti'm using open-iscsi to use a lun on a netapp filer. my system spams the filer with this message: Thu Mar 26 18:13:24 CET [is@iscsi.notice:notice]: ISCSI: New session from initiator iqn.1993-08.org.debian:01:c3f22ca89d75 at IP addr XXX17:14
krautdoes anybody know, how to fix that?17:14
jmedinakraut: where those messages are displayed?17:16
krauton the filer17:16
krautshall i pastebin the default-file of the node, i'm using?17:17
jmedinakraut: do it, probably someelse can help17:18
krautjmarsden_: http://pastebin.com/m6284d23317:19
krautXXX is the target IP17:19
krautit seems to happen every 30 seconds17:20
jmedinaprobably because timeouts, ping timeout I think that is something like a keep alive packet17:26
krauthow do i deactivate that? because it's working.17:27
krautthe strange thing is also, when i stop open-iscsi, the disk is still working17:28
krauti set ping timeout to 0 now17:30
=== bittin`_ is now known as bittin`
krautseems to help17:39
mathiazkirkland: have you heard of mandos? http://packages.ubuntu.com/jaunty/mandos18:02
kirklandmathiaz: nope, looks interesting, perhaps18:03
kirklandmathiaz: i'd like to review the full design18:03
kirklandmathiaz: but looks interesting18:03
paul_sd18:11
=== paul_ is now known as oruwork
oruworkhi, so how can i get Apache2 to work with 2 sites ?18:11
aciculavhosts18:12
=== hessml|away|away is now known as hessml|away
oruworkacicula, this is file /etc/apache2/sites-available/selsovet.com which is my second site that i'm trying to run http://pastebin.com/m7c89c09818:17
oruworkboth domains still open the same document root18:18
oruworkrst-uanic, still here ? :)18:19
aciculaoruwork: dunno about syntax, guess the vhost dont match18:19
oruwork could someone please help me with setting up 2 different sites ?18:29
jmedinaoruwork: isnt documented in ubuntu server guide?18:30
oruworkjmedina, yes, server guide is what i'm looking at , but i'm struggling with it18:31
jmedinawaht is the problem?>18:31
jmedinaoruwork: both servers are listening in same IP and same POrt?18:31
oruworkthe only thing i did was copy the hosts-avaiable/default file and modified it like this http://pastebin.com/m7c89c098  , reloaded apache, now when typing both domains in the browser they still point to the same document directory, and i want them to point at 2 different directories. So yeah . i really need help on getting this to work  jmedina18:33
jmedinaoruwork: what is the output from18:35
jmedinaapache2ctl -S18:35
jmedina?18:35
oruworkhttp://pastebin.com/m237bf9b18:35
big_hamre18:37
jmedinaoruwork: I use this config for virtual hosts18:39
jmedinahttp://verde.e-compugraf.com/jm-confs/apache/vhost.apache2.template18:39
jmedinaI only place that file in /etc/apache2/sites-available18:39
jmedinaen then enable with18:39
jmedinaa2ensite vhostname18:39
jmedinaand reload apache18:39
big_hamusing Dovecot/Postfix, can I have one user's email attachments store in a specific directory?18:40
jmedinaoruwork: if  using name based virtual host and both sites uses same IP and same port then remove the domain name from the VirtualHost directive18:40
oruworkjmedina, ok, this is what i did, both domains still show the same site though :( http://pastebin.com/m4a7861dd18:41
jmedinaoruwork: change your virtualhost directyve18:42
AyukawaOkay, at risk of sounding like an idiot, i just set up spam filtering based on the guide at https://help.ubuntu.com/8.10/serverguide/C/mail-filtering.html but I'm wondering how to get a list of mails that are blocked by the filters.18:42
jmedinajus put a *18:42
oruworkjmedina, yeah its <VirtualHost *:80>18:42
oruwork now18:42
jmedinaAyukawa: if you are using amavisd-new then you can set notifications for spam, virus, banned, and bad headers18:43
jmedinaI think is not enabled by default18:43
jmedinaoruwork: again18:43
jmedinaapache2ctl -S18:43
jmedinaplease18:43
oruworkjmedina, sure bro http://paste.ubuntu.com/138450/18:44
oruworkjmedina, i think i didnt specify ServerName , just not sure how to do this18:44
jmedinaServerName is most important18:45
jmedinaif not specified all traffic goes to default site18:45
jmedinajust put ServerName selsovet.com18:45
oruworkwhere do i specify it ?18:45
jmedinaand again -S18:45
jmedinain your second site file18:45
oruworkanywhere?18:46
oruworkat the buttom ?18:46
jmedinathe one you posted, the one you changed *18:46
jmedinayeap18:46
jmedinaI usually add it near to ServerAdmin and before DocumentRoot18:46
jmedinayou can doit anywhere18:46
oruworkheh18:47
oruworki think its working now  :)18:47
oruworkcan i do this without the default ?18:48
oruworki would like to orgonize this by /var/www/site1 , /var/www/site2, etc....18:48
oruworkcuase i'll be hosting 3 sites on this vps18:49
oruworkjmedina, ^^18:49
big_hamjmedina ... did you see my Q above ^^^ ?18:51
jmedinaoruwork: yeap, I usually always put default in /var/www/default, and all the site goes to /var/www/siteN18:51
jmedinaI use default as a catch up, all traffic no directed to a defined virtual hosts goes to default site18:52
jmedinafor example when someone try to use the IP insead of name18:52
oruworkoh thats right, what would happen if someone would use the ip ?18:53
jmedinabig_ham: I dont know, what you mean as a attachment store dir?18:53
big_hamhere's the scenario brielfy18:56
oruworkso i should pint the default file to go to /var/www/default ?18:56
* Faust-C wants more work on making sure Kolab works in ubuntu18:56
big_hamthere's an email address people in the field use to email pictures to18:56
big_hamright now a human checks the emails, strips attachments and uploads to FTP dir18:56
=== hessml|away is now known as hessml|away|away
big_hammail and ftp are on the same box, so if I can strip attachment on server side and drop in a directory, it saves a step and some bandwidth18:56
jmedinaoruwork: I always do that18:56
big_hamdoes that scenario make sense?18:56
oruworkso when someone types the ip of your VPS, what do they see ?18:56
Faust-Cbig_ham: makes sense18:56
Faust-Cpicasa has a item like that18:56
Faust-Cyou can txt a image to a certain email address and it will be on album18:57
Faust-Cbig_ham: you can make a filer cant you?18:57
Faust-Clike setup a images@domain.com and have the filter strip the attachments and save them to a folder18:57
big_hamon the server side?18:57
Faust-Cyeah iirc18:57
Faust-Cserver side filers, w/ imap18:58
=== hessml|away|away is now known as hessml|away
big_hamI'm not sure, I'm fairly new to Ubuntu, let me google that one18:58
big_hamdidn't know the "lingo" I should be using, ya know?18:58
jmedinaI think I already answer this a few days ago, I dont know a solution about that18:58
big_hamyou did jmedina ... but I felt I didn't phrase properly18:59
jmedinabut I think is not that hard to create a script that strips mail and place attachments in a directory, then mangle mail body to add footer with infor of attachments locations in a FTP server18:59
big_hamand I've been googling with no pertinent results which is wierd18:59
jmedinapostfix has good support por pipe to a program18:59
Faust-Cjmedina: yep18:59
jmedinarenattach did something like that18:59
big_hamwould this be a dovecot filter, or a postfix filter (i assume dovecot)19:00
jmedinabig_ham: depens what Local Deliver Agent you use19:00
jmedinayou can use local postfix, or dovecot 'delivery'19:00
big_hamjmedina: how can i check to be sure before I waste time in the wrong realm?19:00
mathiazkirkland: is there anything cool to mention about the qemu update to 0.10.0 in jaunty?19:01
kirklandmathiaz: that it happened!19:01
kirklandmathiaz: it's the first qemu release in almost a yeat19:01
kirklandyear19:01
mathiazkirkland: ok - new features? main bug fixes?19:01
kirklandmathiaz: http://www.nongnu.org/qemu/changelog.html19:02
mathiazkirkland: ok - the main thing seems to be kvm support and all the virtio stuff19:03
mathiazkirkland: wasn't this already included in Ubuntu?19:03
stickystylebig_ham: I do something similar to what your asking about.  Previously I did it with a big nasty procmail script to but, but you run into scalability problems processing each message as it arrives.  I don't know what your scripting ablity is, but I would recommend letting the mail deliver to a set mailbox (as it sounds like you already do) then have a script that runs out of cron like every 5min to read the mailbox and take action o19:05
big_hamunfortunately my scripting abilities are limited, but my learning abilities are very high ...19:06
big_hami found some info related to "body_checks" and making filters19:07
big_hambut it's specifically to "REJECT" bad attachments19:07
big_hamhttp://linuxpoison.blogspot.com/2007/12/filter-attachments-bat-exe-etc-in.html19:07
jmedinastickystyle: would you mind to share your script?19:08
kirklandmathiaz: yeah19:09
kirklandmathiaz: the key is that qemu has lacked an active maintainer for most of a year19:10
stickystylejmedina: Let me take a look at what I can do to share the idea of how it works, it's kind of tricky since technically it would by my companies property.19:10
kirklandmathiaz: aliguori just took that over, and will be doing regular releases19:10
big_hamstickystyle: I have to say that cron seems easy enough, but I must admit I'm not even aware where attachments are kept in the file system19:12
stickystylebig_ham: They are kept mixed in with the actual email file.19:13
stickystylebase64 encoded.19:13
big_hamoh boy ... not all that straightforward then19:13
=== hessml|away is now known as hessml|away|away
stickystyleWell, that's where a modern scripting lang comes to help.  It will abstract most of those little nuances away from you.19:14
big_hami see19:14
big_hamany general google guidance you can provide would prove very helpful as I'm having a hard time figuring a starting point19:15
stickystylebig_ham: Here are the python examples of mailbox handling http://docs.python.org/library/mailbox.html#examples19:16
oruworkthis is a beauty jmedina :)19:17
jmedinagood, another happy customer19:18
jmedina:D19:18
jmedinanext :D19:18
big_hamstickystyle: thank you19:19
big_hamhave to head out on site, but I will pick back up with this when I return19:19
big_hamBTW ... for whom do you work?19:20
=== nxvl_ is now known as nxvl
stickystyleI'm an IT Manager for a Freight Forwarding company, nothing glamorous :)19:24
big_hamI see ... always interested19:25
oruworkjmedina, doint some further testing here, it turns out that one of my domains cant look up the directory i specified in /etc/apache2/sites-availab.e/selsovet.com19:27
jmedinaoruwork: which tests?19:27
oruworkjmedina, i'm reorgonizing everything the way you told me so that my setup will be similar to /var/www/default, /var/www/site1, /var/www/site2, etc...19:28
oruworkjmedina, i'm putting up index.html files in directories of the sites19:28
oruworkand trying to access them in the browser19:28
jmedinaoruwork: did you restart apache after changing DocumentRoot in sites config?19:29
oruworkjmedina, yup19:29
jmedinaoruwork: and what but apache2ctl -S19:30
jmedina?19:30
jmedinaalso use  apache2ctl -t for sintax checking19:30
mathiazkirkland: how many logos are now available in screen-profiles?19:31
kirklandmathiaz: released in jaunty, or committed to bzr ?19:31
stickystylebig_ham: I doubt this code will work right away as I did it from memory, but it should give you the general idea what I was talking about http://pastebin.com/d4867259419:31
mathiazkirkland: in jaunty19:31
mathiazkirkland: I saw a mention about suse in the changelog19:32
kirklandmathiaz: so the screen-profiles package just comes with ubuntu-light, ubuntu-dark, and ubuntu-black19:32
oruworkjmedina, http://pastebin.com/m6196adf319:32
kirklandmathiaz: there's a new screen-profiles-extras package, which has a bunch of other light/dark colors, plus profiles for (fedora, debian, redhat)19:32
kirklandmathiaz: committed to bzr are profiles for (centos  debian  fedora  gentoo  mandriva  novell  redhat  slackware  suse  ubuntu)19:33
kirklandmathiaz: and i just completed a new script, screen-profile-dump19:33
kirklandmathiaz: which will allow you to dump your profile to one, monolithic, file, which you can install as ~/.screenrc or any unix/linux system that has screen19:33
oruworkjmedina, http://pastebin.com/m2508310f19:33
kirklandmathiaz: thus, for distros that don't have screen-profiles packaged for them yet19:34
kirklandmathiaz: or, for a system where you don't have root access and can't install screen-profiles19:34
kirklandmathiaz: so people.ubuntu.com, for instance19:34
mathiazkirkland: cool19:34
kirklandmathiaz: i also learned a neat new trick for kvm today19:34
kirklandmathiaz: which works *really* well in screen19:34
kirklandmathiaz: kvm -curses19:34
kirklandmathiaz: runs the kvm in the current console/shell session19:34
kirklandmathiaz: i now have each of my kvm's running in their own window in screen19:35
NEWzillaHi, I have 8.10 installed LAMP configuration plus aptitude safe-upgrade executed with subversion installed.. (just to provide a background on my server)  My problem is it appears Apache's ldap is not searching nested groups.19:35
jmedinacan I paravirtualize using KVM in my opteron cpus (they dont support Full Virt)19:35
mathiazkirkland: hm - you mean the kvm command?19:35
mathiazkirkland: or the console of the guest?19:35
kirklandmathiaz: i received a contribution from a novell/suse developer yesterday19:36
NEWzillaI have found this was fixed in i think 2.2.3 of apache but it appears to not be working  for me.  i have to add the user directly to the group but it does not search nested groups19:36
kirklandmathiaz: with support for suse's update manager, in the updates-available script19:36
jmedinaI always used xen for paravirt19:36
kirklandmathiaz: the kvm command19:36
jmedinaNEWzilla: waht you mean with ldap nested groups?19:36
mathiazkirkland: ok - does that mean you have to create a new screen window before starting kvm -curses?19:37
jmedinaNEWzilla: what are you trying to do?19:37
oruworkjmedina, nvm , i made a silly mistake, this beauty is working19:37
kirklandmathiaz: well, that command will take over your current shell19:37
kirklandmathiaz: running the kvm itself inside of an ncurses session19:37
jmedinaoruwork: good, what whas the silly mistake?19:37
NEWzillaI have apache setup to authenticate basic auth off of MS active directory.19:37
kirklandmathiaz: so, yeah, i hit <f2> to open a new window, name it whatever that vm's name will be19:37
NEWzillai have require ldap-group setup for my <location>19:37
kirklandmathiaz: and then run kvm -curses -hda foo.img19:38
oruworkjmedina, i didnt copied index.html files to the wrong path lol19:38
oruworkjmedina, i mean i DID copy19:38
NEWzillait works but only if i have the users in the specified group. if i put a group in the group "nested group" in the ad group.. apache does not appear to search the nested group to determine if the user is part of a nested group.19:38
mathiazkirkland: what kind of ncurse session is created?19:38
kirklandmathiaz: it just uses curses to render the console output of the vm19:39
kirklandmathiaz: rather than sdl19:39
mathiazkirkland: could it be possible to detect if you're running in a screen session and automatically create a new window and name it correctly?19:39
mathiazkirkland: I'm not familiar with kvm on the command line as I'm running everything from libvirt19:39
kirklandmathiaz: there is some support in screen for auto-naming windows19:40
NEWzillai have tried using the AuthLDAPMAxSubGroupDEpth but it fails and apache does not restart.. says it is not supported or the module is not installed... yet i have authnz_ldap enabled and it works ... just not when the user is in a nested group in the group set for the require -ldap-group19:40
kirklandmathiaz: it can take some regex of whatever your last command executed or something like that19:40
kirklandmathiaz: i played with that for a little while19:40
kirklandmathiaz: it was very distracting, i found to use in the general case19:40
kirklandmathiaz: my window names were jumping all over the place :-)19:41
NEWzillaso, i am kind of wondering.... might ubuntu server's apache install be missing this patch?19:41
mathiazkirkland: right - I usually don't name my screen windows19:41
mathiazkirkland: OTOH I rarely have more than two sessions opened.19:41
mathiazkirkland: otherwise it takes to much time to cycle through them.19:41
kirklandmathiaz: i name all of mine, and i have 10-15 open19:42
jmedinamm I have not used nested groups in AD I dont know how is strcutured in LDap tree19:42
mathiazkirkland: however one thing I made sure when I designed my vm mgmt scripts is to have a consistent naming in the vm.19:42
jmedinaNEWzilla: have you tried using a simple ldapsearch query?19:42
mathiazkirkland: ex: if I create a vm named t-slapd, I wanted to make sure that the guest hostname was t-slapd19:42
mathiazkirkland: and that I could ssh into the guest using t-slapd19:43
kirklandmathiaz: i like that consistency19:44
mathiazkirkland: I had to modify the root filesystem to be able to specify the hostname of the guest from the host19:45
NEWzillajmedina: no, but this is because i currently do not know how to build such a search query.19:45
mathiazkirkland: this is why I'm using lvm snapshots rather than qcow2 files as I want to be able to update the root filesystem.19:45
mathiazkirkland: do you know if it's possible to get the vm name from the guest?19:46
NEWzillajmedina: i have found the bug entry for apache and it says closed and was a bug on the require ldap-group but i have no clue how to determine if my apache really does include its fix.. i have checked and apache 2.2.9 is running..19:46
mathiazkirkland: I meant inside the guest19:46
jmedinaNEWzilla: check the changelog of you apache package19:47
jmedinaI really dont know how is nested groups in ldap19:47
kirklandmathiaz: as libvirt calls it?19:47
kirklandmathiaz: i don't think so19:47
kirklandmathiaz: i don't think the guest knows its a guest19:47
jmedinaI use this config por group ldap auth19:50
jmedinahttp://paste.ubuntu.com/138481/19:50
NEWzillathe first difference i have found is you have AuthLDAPGroupAttributeIsDN in your configuration..19:55
NEWzillai don't have this in mine.. but going to read up on what it is..19:55
NEWzillado you have any sub groups in yoru domain admins that contain users not in the domain admin group directly and are they still granted access to the site?19:56
NEWzillaa nested group is just a group that contains reference to another group. instead of just the users.19:57
jmedinaNEWzilla: nop I dont uses subgroups19:57
NEWzillafor example when assigning a user to a gropu you can also assign a group to a group.19:57
NEWzillajmedina: i guess you wouldn't want to take a stab at testing it with me to see if i am really finding an issue with ubuntu's apache + mod authnz_ldap or if i am just doing things wrong?19:58
NEWzillai am looking at the apache bug 42891 and it says resolved... but it is still not working for me.19:59
uvirtbotLaunchpad bug 42891 in wine "apt-get build-dep wine fails with "libicu28-dev uninstallable"" [Medium,Fix released] https://launchpad.net/bugs/4289119:59
mathiazkirkland: right. Something similar to the ec2 init script19:59
mathiazkirkland: where you can grab information about the guest from an outside source19:59
NEWzillahttp://issues.apache.org/bugzilla/show_bug.cgi?id=4289120:00
uvirtbotissues.apache.org bug 42891 in mod_authz_ldap "Support for nested groups in LDAP" [Enhancement,Resolved: fixed]20:00
kirklandmathiaz: interesting, can you pastebin that init script?20:00
mathiazkirkland: IIRC with vmware-server you can poke at things between the host and the guest20:00
zulkirkland: for the ec2 set hostname?20:01
zulthe script that changes is called ec2-set-hostname.py in the ec2-init package20:01
mathiazkirkland: IIRC in ec2 you can get some information about the AMI by wget a specific address from the guest20:01
zulmathiaz: the latest updated version for the next ec2 beta has a script called ec2-get-info which allows you to get alot of the information already withough using curl20:02
NEWzillahow do i determine what version of a mod i have installed?20:06
giovani3NEWzilla: an apache module you installed via ubuntu?20:13
NEWzillaoh crap........ i think i just learned that it looks to be part of the apache 2.3 trunk......20:14
NEWzillaanyone know about getting apache 2.2 upgraded to 2.3 on ubuntu server 8.10?20:15
giovani32.3 is the development trunk, they don't release those20:15
NEWzillaor even 2.4 ?20:15
giovani3it turns into 2.4 when it's done20:15
giovani3until it's out ... it can't be included20:16
NEWzillaif the module documentation is under documentation > 2.3 > modules... this means it is part of the 2.3 apache trunk.. right?20:17
NEWzillai will see if the 2.4 has this part of it in the authnz_ldap module...20:17
NEWzillaactually i don't even know if there is an apache 2.4 yet... lol20:17
giovani3there isn't ... like I said20:17
giovani32.3 is a development trunk -- it turns into 2.4 when it's finished20:17
NEWzillaok, i got you20:18
giovani3then 2.5 will be the development trunk, and it will turn into 2.6 when it's finished20:18
giovani3considering 2.2 is relatively modern, I don't know when 2.4 is expected20:18
giovani3you could, however, ask about this in #apache, I'm sure they know much more20:18
NEWzillai understand .. blarg..... how crazy is it to use the 2.3 right now? or is there a way to only use the authnz_ldap module in my 2.2 apache server?20:19
NEWzillaer . the new authnz_ldap module that has the subgroup search feature added20:19
giovani32.3 is a development trunk, it's probably not stable20:19
giovani3once again ... #apache knows far more about this than we do20:19
NEWzillaok, i will hop over there thanks guys20:20
jmedinaNEWzilla: havnt you tryed kerberos auth, I think is more appropiate for AD auth20:22
jmedinahttp://port25.technet.com/archive/2008/01/25/technical-analysis-apache-with-mod-auth-kerb-and-windows-server.aspx20:22
jmedinafrom microsot :D20:23
NEWzillaI will look at it. but i am working on getting together an identity management solution and to centrally help manage other resources.  this apache server is just one of many resources i would like to manage with Active Directory20:25
jmedinaI think kerb is betther por central id mgmt, you can enable Single Sing On with it using key based auth20:27
jmedinaIE and mozilla supports SSO20:27
geekboxjockeyI was wondering if anyone here uses Bacula, I have a filset issue with backups for 3 systems. Each backup is almost identical in coverage plus the inclusion of an additional folder or two on each system. Is there a way to extend or inherit from a base fileset and add custom additions for each host on top of that?20:40
geekboxjockeySo instead of having to specify a fileset for each host that contains (/usr, /var, /etc, /home...) just specify one, and then add to it for additional locations on each individual host.20:41
aciculageekboxjockey: been awhile since i set that up, maybe, if it's possible it's described in the manual20:43
geekboxjockeyyeah, I've been scouring it for a bit now, it's a BIG manual, I've also done the obligatory googling before coming here :-P20:44
geekboxjockeyBacula configuration is an art-form :P20:45
* Faust-C suggests backupPC20:50
Faust-Cconsidering its apart of amanda now20:50
=== tjaalton_ is now known as tjaalton
beniwtvhi all... I have created partitions on my disks with fdisk on ubuntu server, changes partition type to fd (linux raid autodetect) saved them with "w", but the partitions do not show up in /dev, even after a reboot. Any ideas?21:14
beniwtv(there also where no errors from fdisk, and fdisk -l after the reboot shows them fine)21:16
Yasumotosoren: I saw that it looks like you were working on getting Cobbler working on/with ubuntu, did that work out all the way or is it still in progress? I can't seem to find any 'recent-ish' updates21:26
sorenYasumoto: It keeps getting deferred, I'm afraid.21:26
beniwtvoh, and one more hint: cat /proc/partitions does not show them... now I'm really worried.... :-/21:27
Yasumotosoren: ah, totally understandable21:28
Yasumotosoren: is it close to being done, or are there still some parts that need work?21:30
sorenYasumoto: there's still quite a bit of work to be done.21:45
Yasumotosoren: gotcha, I'll poke around a bit, thank you :)21:46
theunixgeekAny recommendations for a minimal desktop environment for Ubuntu Server?22:16
Jeeves_openss-server :)22:16
Jeeves_+screen22:17
Yasumotoyou could try xfce (apt-get install xubuntu-desktop)22:17
theunixgeekYasumoto: I'm installing it right now :)22:17
Yasumototheunixgeek: cool22:18
theunixgeekI was wondering if there's something even more minimal22:18
Deepsubuntu server + X = #ubuntu22:18
theunixgeekSince my download speed just dropped from 121 to 66 kbps :|22:18
=== hessml|away|away is now known as hessml|away
=== asac_ is now known as asac
twitzeljmarsden_: I did install jaunty and it worked. Interestingly, I noticed other differences in how multipath-tools behaved in jaunty and for fun copied just the executable /sbin/multipath from the jaunty box to the intrepid box. Now that intrepid box works absolutely perfectly. So it wasn't a udev issue after all23:35
twbtwitzel: that hurts my brain23:36
twitzelAlthouh the version of multipath-tools in jaunty and intrepid appear to be the same, the one that comes with jaunty works, the one that is in intrepid doesn't23:37
twitzelAnyhow, all my problems are solved now. Thanks to everyone who helped.23:38
twbtwitzel: no, they differ in -1 to -2.23:38
twbhttp://changelogs.ubuntu.com/changelogs/pool/main/m/multipath-tools/multipath-tools_0.4.8-14ubuntu2/changelog23:38
twitzelUh, didn't notice the 223:38
twbThe first changelog entry say "Let dmsetup run kpartx"23:38
twitzelwill this be backported to intrepid ?23:40
twitzelAnother strange this is, with intrepid multipath-tools you get something like this: multipath -ll23:42
twitzel mpath2 (360022190009773680000214a495047ce) dm-2 ,23:42
twitzel [size=2.0T][features=0][hwhandler=0]23:42
twitzel \_ round-robin 0 [prio=3][active]23:42
twitzel \_ #:#:#:# sdd 8:48  [active][ready]23:42
twitzel \_ round-robin 0 [prio=0][enabled]23:42
twitzel \_ #:#:#:# sdj 8:144 [active][ghost]23:42
twitzelWith the newer multipath-tools from jaunty it looks correctly like this: mpath2 (360022190009773680000214a495047ce) dm-1 DELL    ,MD300023:43
twitzel[size=2.0T][features=0][hwhandler=0]23:43
twitzel\_ round-robin 0 [prio=3][active]23:43
twitzel \_ 1:0:0:2  sdd 8:48  [active][ready]23:43
twitzel\_ round-robin 0 [prio=0][enabled]23:43
twitzel \_ 1:0:1:2  sdj 8:144 [active][ghost]23:43
twbPlease stop23:43
twitzelokay23:44
twitzelsorry23:44
twbI don't know if it will be backported to intrepid; I don't know ubuntu's backporting policy.23:44
twbAt worst you can manually install that .deb on each host you have, I guess.23:45
twitzelThere is however, still a minor issue23:47

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!