/srv/irclogs.ubuntu.com/2009/03/30/#ubuntu-server.txt

=== hessml|away is now known as hessml|away|away
=== hessml|away|away is now known as hessml|away
dustinwhat is the purpose of LTSP chroot?01:41
=== hessml|away is now known as hessml|away|away
owhdustin: Huh?01:42
dustinsetting up ubuntu server 8.10 and there is an option to enable LTSP chroot and I was wondering if I need it01:43
dustinwell if nobedy here uses it I will assume that it is not necesary01:46
owhI'm just having a little look-see. Gimmie a mo.01:46
twbdustin: LTSP is the Linux Thinclient Server Project01:48
twbdustin: unless you are setting up a thinclient server, you don't need LTSP01:48
owhdustin: I'm not familiar with it, but it appears to relate to the LSTP client builder. I'm *guessing* that it is to allow you to chroot to the client image, so you can update it and modify it without affecting the server itself, but I may be wrong.01:48
owhdustin: As twb says, if you're not using LTSP, then no.01:48
dustinok that makes sence01:49
dustinis there a command line method to fix my grub it didnt burn right onto the disk01:50
twbdustin: there is.01:50
twbdustin: are you sure grub is at fault?  What are the symptoms?01:50
dustinduring install the disk flagged an error loading grub01:51
dustinas in installing01:51
dustinbut if I can run a live cd and fix it after installing I think that I can work it out01:52
twbHmm, are you still in the installer?01:52
dustinyes01:52
twbSwitch to vt4.01:52
twbCan you see anything about grub there?01:53
dustinah point!!01:53
dustinbrb01:53
dustinbeautifull grub didnt get installed on the disk my burner is doing some of the wierdest stuff01:55
dustinat least this coppy had the base system on it :)01:55
owhPerhaps you're trying to install grub on the wrong device?01:55
dustinit didnt offer an option but I would think that its target is md0 which is my root01:56
twbThe target should be the disk itself, not a partition or md device01:58
dustinwow I have had so many difficulties with this install........................................but it will be well worth the effort01:58
owhAnd as a trick for new players, if you need to be able to boot from either drive if the array fails you need to manually copy the boot-block across too.01:59
owhUnless there is a better way that I don't know of :)01:59
dustinlaemmy guess.........I shoulda partitioned for two virtual md devices and dedicated one as a /boot partition02:01
dustinthat way I would have my /boot on two drives in its own little place02:01
dustinor am I miss reading you?02:02
twbdustin: are you using RAID5 or RAID1?02:03
dustinraid102:03
twbdustin: then it ought to work...02:03
dustinthis is a very small server02:03
dustinwow I just found out that apt-get isnt available in install bash02:08
dustinok I have a command line how do I install and configure grub from there02:19
dustinI also have apt-get02:19
twbdustin: chroot into the root filesystem (probably /target).02:22
twbOops, sorry.02:22
twbDon't do that.02:22
twbInstead, grub-install --root-directory=/target /dev/sda, where sda is the appropriate disk.02:22
dustinlol02:22
twbYou may need to use --recheck.02:22
matttyou guys have any suggestions for creating minimal chroot environments for users?02:22
matttdebootstrap seems a bit overkill02:22
twbmattt: define `minimal'.02:23
mattttwb: ls, cat, find, tar, vi,e tc.02:23
twbmattt: debootstrap creates a chroot that contains the minimum necessary to be a policy-compliant Debian system.02:23
infinitymattt: debootstrap --variant=buildd probably gets you what you want, more or less.02:24
twbmattt: though I think it defaults to standard, not minimal02:24
twbinfinity: thanks.02:24
matttok, thanks guys02:24
twbinfinity: is that also what pbuilder uses?02:24
matttotherwise, i've seen jailer, which seems another option02:24
infinitytwb: Probably.  I don't use pbuilder.02:25
twbmattt: you should be aware that chroot(2) offers *zero* protection to your host system against the root user within the chroot.02:25
infinitytwb: (As the buildd maintainer, I use sbuild and chroots identical to the buildds...)02:25
twbinfinity: fair enough02:25
dustintwb: bash grub-install: not found02:25
twbdustin: yeah, OK, so you haven't got grub.  You do need to chroot into target02:26
twbmattt: if you want a secure chroot-like system, I suggest you look at xen and/or openvz.  For more complete virtualization, there is kvm.02:26
mattttwb: heh, well ... this is actually going to be used on a domU :P02:27
twbmattt: OK, no worries02:27
mattttwb: well, there are still issues ... because the domU runs stuff that i don't want the chroot to see02:27
dustintwb: this may sound stupid but what is the command for the chroot02:27
twbdustin: chroot /target, I think02:28
dustinthats what I thought but wanted to confirm b4 messing up02:28
dustintwb: bash: chroot: cannot change root directory to /target: no such file or directory02:30
twbdustin: OK, you need to work out where it's mounted02:31
twbdustin: look at /proc/mounts02:31
dustintwb does this install have you agravated yet ;)02:31
twbdustin: nope.02:31
dustinwell this might-- I am root and do not have permission to /proc/mounts02:32
dustinshould I cat /proc/mounts02:33
twbThat's what I said.02:33
dustinok then I misread u02:33
dustinI see things that are wrong???????????02:34
twbInsufficient data.02:35
dustinmd0 is showing as ext2 and it is formatted to ext302:35
twbThat is OK.02:35
dustinok as long as u agree with it I will over look that part does it matter that it is reporting errors02:36
twbdustin: what errors?02:36
twbdustin: also, please use punctuation and capitalization appropriately.02:36
dustinline reads /dev/md0 / ext2 rw, errors=continue 0 0   (maybe I am freaking out and missreading)02:38
twbdustin: that says "if you see an error, continue".02:39
twbdustin: it doesn't mean there ARE errors.02:39
dustinI have been staring at this screen for 12 hours now so it is entirely possible that I am just freaking out02:39
twbI am now confused as to what environment you are in.02:40
twbI thought you were in the installer still.02:40
dustinafter installer failed to load grub I started in rescue mode so that I could access a command line02:41
twbdustin: you mean that you ran the install CD in rescue mode?02:41
dustinas far as I can tell I am in a "safe mode" command line02:41
twbPlease just answer the question.02:42
dustinI am in rescue mode "NOW"02:42
dustinwould you like me to start from the beginning and reload from the start because I have nothing to loose by doing so02:43
dustintwb: I am sorry for anny confusion I may have caused jumping around02:44
dustinI am having a bit of a day02:45
twbdustin: OK, please confirm that /usr/sbin/grub-install doesn't exist at the moment.02:45
dustinconfirmed02:46
twbdustin: OK, is /usr/sbin mentioned in "echo $PATH"?02:46
dustinyes02:48
twbThat's weird02:48
twb12:29 <dustin> twb: bash grub-install: not found02:48
infinitytwb: He said it wasn't installed.02:49
infinitytwb: (He confirmed its nonexistence...)02:49
twbinfinity: if it's not installed, then why is it in his path?02:49
twbThat's a pretty fundamental contradiction02:49
infinity19:45 < twb> dustin: OK, please confirm that /usr/sbin/grub-install doesn't exist at the moment.02:50
infinity19:46 < dustin> confirmed02:50
infinityHe comfirmed that it doesn't exist.02:50
twbOh sorry, brain fart02:50
twbdustin: can you check if lilo exists in any of the directories in your $PATH?02:51
twbdustin: don't run it, I just want to know if it's there02:51
dustinits ok I have had to tripple confirm these errors to myself becouse I dont believe it02:51
twbdustin: actually, you can just do "dpkg -l \*lilo*" and see if it has "ii" on the left02:51
dustinoutput of $PATH= /sbin:/usr/sbin:/usr/bin02:53
dustin"| status=not/inst/Cfg-files" ect02:56
dustinlast was dpkg output02:57
twbdustin: yes, there should be a line at the bottom of dpkg's output saying either "ii" if it's installed or something like "pn" if it isn't.02:57
dustinis "un" the one u want?02:58
twbOK, interesting.02:58
twbdustin: that means you have somehow managed to install this system without ANY bootloader.02:58
dustinif I seem choppy or inattentive its becouse I run both my server and my desktop on the same monitor02:58
dustinyes!!02:59
dustinthat is correct02:59
twbdustin: well, that wasn't established before.02:59
twbdustin: it might have been installed, but not installed into the MBR properly.02:59
dustinsorry I am a bit off today02:59
twbNo problem.02:59
dustinit might be the lortabs after my knee surgery03:00
twbdustin: what you need to do now is get grub installed.  That means getting either the install CD or the network working, then doing an "apt-get install grub".03:00
dustinI will apt-get it03:00
dustinbrb03:00
dustin"grub has no installation candidate"..........*moans*03:02
twbdustin: edit /etc/apt/sources.list.03:02
twbdustin: there should be a commented-out reference to the CD.03:02
owhtwb: Perhaps he didn't like your bed-side manner?03:16
twbowh: hmm?03:16
owhtwb: The person you've patiently been helping for the past hour and a half.03:17
matthew-21Hi, how do I unmount a harddrive?03:18
owhmatthew-21: In what context?03:19
owhmatthew-21: As-in, what are you trying to do. The unmount command is umount, but if you're asking, I'm guessing that's not what you're looking for.03:21
dustinmy isp is about to get an earfull03:28
twbdustin: do you think that will help?03:28
dustintwb: u still on?03:28
dustinI cant exit my editor....................................I have never used it b403:29
dustinno I was typing into irc and found out that I was disconnected03:29
twbDescribe the editor.03:29
dustinhow do I save and exit vim?03:30
twbI wish to know if it is nano or vi.03:30
dustinits the newer version of vi03:30
friartuckdustin :x03:30
twbType ESC :q RET03:30
friartuckdustin save and exit=:x  . exit without save=:q!03:32
dustinI still cant install grub even with cd enabled03:33
dustinI think it is missing from the disk03:34
owhdustin: After uncommenting the source, did you run apt-get update?03:34
dustinI felt like I missed something03:34
twbSorry, yes, you will need to run apt-get update.03:37
twbYou may also need to run apt-cdrom, IIRC it is particularly stupid about that.03:38
dustinwhen I ran that update I was informed about apt-cdrom03:38
dustingrub is unpacking huray!!!!!03:39
dustinok now to configure grub03:41
dustinhow do I check it to verify its current settings03:41
dustintwb: can you walk me through grub settup in command line03:42
owhdustin: May I suggest that you do some reading on the subject?03:43
twbdustin: you should be able to just run "grub-install /dev/sda", where sda is the appropriate disk03:44
dustinok03:44
twbActually, that might not work.  Try it and see.03:44
owhtwb: With an array?03:45
dustinit seems to have liked that command03:46
dustinI am going to reboot and see how it goes03:46
dustinwell thats a N/G but I am going to rub my eyes and take ten after that I will read the grub man file and try again03:50
dustinthank all of you for your help and tollerance03:51
matthew-21How do I give users user quotas for home dir?03:55
twbmatthew-21: you need to install the quota package, then mount /home with -o usrquota, then generate an initiate quota database.03:57
owhtwb: You mean initial right?03:59
matthew-21Okay, I've installed the quota package, now how do I give them a certain quota to use? lol04:01
matthew-21I mean so they can only upload a certain amount of stuff.04:02
twbowh: yes04:03
twbmatthew-21: oh yes, you also need to allocate each user a quota -- otherwise it won't be enforced04:03
matthew-21What are the commands to do this?04:03
twbquota or edquota, IIRC04:04
twbdpkg -L quota | grep bin/ will tell you04:04
owhmatthew-21: You could just click on the first link of this google search "linux home dir quotas" and read the whole thing from start to end.04:05
matthew-21would this quota system work if I was using an external harddrive? like giving them a quota on the harddrive.04:07
owhmatthew-21: Well, it likely depends on how you've mounted that drive.04:07
owhmatthew-21: If the external hard drive changes, you're possibly going to run into issues identifying which drive it is. If the drive is just in an external case, but always there, it makes no difference.04:09
matthew-21I typed this.  "mount -t vfat /dev/sdb1 /var/www/tb/"04:10
twbThe quota system doesn't care WHERE the drive is, only that it is mounted with -o usrquota04:10
twbQuotas may not work with vfat.04:10
owhI suspect that it doesn't support vfat.04:10
matthew-21and then link it to a folder in the users home dir.04:10
twbDo not use FAT, as it is a bloody awful filesystem04:10
twbmatthew-21: quotas do not span disks.04:11
twbmatthew-21: if you're trying to put quotas on, say, ~user/public_html, and public_html is a symlink, then you need to set up quotas for the place that public_html points to.04:11
owhmatthew-21: Let me suggest that you take a step back and actually describe what you're trying to do and how it's currently setup, because from what I'm reading here, there are some serious problems.04:11
matthew-21I have an external harddrive, that I am leaving plugged in to the server all the time.  I want to set up quotas on it, and so far iv mounted it using the command "mount -t vfat /dev/sdb1 /var/www/tb" I'm just wondering how to prevent users from taking up the entire harddrive laughs.04:15
owhmatthew-21: That does not appear to be the whole story because you're mounting it related to the web-root but sym-linking to a user.04:15
matthew-21I haven't done that yet, I was checking here before I did anything else.04:16
owhmatthew-21: So, how are the user accounts related to the web-root?04:17
owhmatthew-21: Is the external drive ever used anywhere else on another machine?04:17
matthew-21it was before, but I'm trying to make it into a server drive.04:18
owhmatthew-21: What about the user home directories and their relationship to the /var/www/tb tree?04:19
matthew-21I want the files that users upload to be accessible on the internet, that's why I add in web-root.04:19
owhmatthew-21: I'm guessing there are multiple users?04:20
matthew-21yes04:20
owhmatthew-21: Are all their files going to be uploaded into the same directory?04:20
matthew-21no04:21
owhmatthew-21: So, how does that answer relate to linking their home directories with a sym-link to /var/www/tb ?04:22
matthew-21I would create seperate folders as I gave users space.04:22
owhmatthew-21: So, how would the structure look?04:23
matthew-21like if there was a user named bob, the tree would be /var/www/tb/bob04:23
owhmatthew-21: In addition to that structure, /var/www/tb/{username}, do the users also have /home/{username}04:24
matthew-21ah, how would I get quotas for each folder though?04:25
owhmatthew-21: It's per drive, per user/group04:25
owhmatthew-21: Read this: http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch28_:_Managing_Disk_Usage_with_Quotas04:26
matthew-21is there a way to do this without partitioning?04:30
owhmatthew-21: Well, the external drive is a partition all by itself.04:31
matthew-21ah, I see. do I need to edit the /etc/fstab file?04:32
owhYup04:32
matthew-21or can I just say external harddrive is partition.04:32
owhmatthew-21: fstab is a mechanism to automatically mount a drive. I suppose you could manually mount it each time you reboot, but after a power-failure/reboot, the mount would not be there.04:33
twbNormally you should refer to external drives' filesystems by UUID.04:34
twbFor FAT, I believe this is an eight-byte string XXXX-XXXX.04:35
owhI gotta say that using FAT for a server mounted drive that is intended to support quotas and be served as a web-volume make little sense to me.04:36
matthew-21I would format the drive, but I have stuff backed up onto it and cannot put the files anywhere else.04:37
twbmatthew-21: if you aren't using RAID, then you have a SPOF already04:38
matthew-21? what do you mean.04:38
twbYou ought to go buy a second disk, and RAID1 them.  During that transition you could also convert the filesystem.04:38
owhSPOF == Single Point Of Failure04:39
twbmatthew-21: I mean that if that hard drive dies (the Single Point of Failure) then you have lost that data forever04:39
matthew-21ah04:39
matthew-21okay, I would like to ask a different question if that's okay with you, how would I authorize my website so people would need a username and password to log in to the actual website?04:41
matthew-21I think that it is possible.04:41
matthew-21But I am not sure.04:42
matthew-21thank you for your help though, I really appreciate it.04:43
twbmatthew-21: that depends on a large range of factors.04:43
matthew-21I don't want anything really secure, just a way to secure apache and my site a bit.04:43
twbThose phrases are rather contradictory.04:44
friartuckmatthew-21 http://ubuntu-tutorials.com/2007/10/06/limiting-access-to-websitesdirectories-with-htaccess/04:45
owhmatthew-21: The moment your server is connected to the 'net, it's waiting to be compromised. A "little bit" of security is not a sensical statement.04:45
twbYou could, for example, only allow access to the website when connecting over an encrypted VPN (which you would set up).04:47
twbYou need to ask questions like "what is the threat model?"04:47
owhtwb: I'm not sure that what you're saying is meaningful in the context. I agree, but I don't think it helps. I've been struggling to communicate these same concepts in other channels, "How do you help those without any meaningful background."04:49
centaur5I'm trying to find out which port LTSP listens on cause I thought tftpd-hpa has to be running but I can't find an instance of that process. Anyone have some info?04:50
owhtwb: It's the phenomenon of: "This cannot be that hard, look, I can run the installer and it all just works."04:50
owhtwb: Unfortunately computing isn't quite yet as developed as say driving a car.04:51
owhcentaur5: Isn't it run by an inetd process - in which case, it's likely in /etc/services04:52
centaur5owh: Interesting, tftp is port 69 but netstat doesn't show anything waiting on that port. How does that work?04:54
twbowh: haha, "explanations are hard so we resorted to car analogies"04:55
owhcentaur5: Hmm, does it work? As in, if you telnet to port 69, do you get a response?04:55
twbcentaur5: inetd should be listening to that port.04:55
PhotoJimtwb: car analogies can be used for almost anything :)04:56
owhtwb: If you have a better analogy, I'm all for it.04:56
twb"security analysis isn't as easy as falling over"04:56
twb"Just because you can catch a ball doesn't mean you understand differential calculus"04:57
owhtwb: Right, that's all fine, but how do you explain that to someone who comes to you with a differential calculus question without the knowledge to understand the answer?04:57
twbowh: well the comments above are first meant to help the guy understand that he really doesn't know differential calculus04:58
twbOne they understand that they don't understand, you can move onto phase #2: gettin' some schoolin'04:59
PhotoJimI lecture at a university.  I find analogies to be highly effective at times.04:59
owhAnd did you see evidence of this "moving to phase #2"?04:59
twbPhotoJim: lecturing to filthy, delinquent undergrads, or lecturing to humans?05:01
owhWhen I spend time in IRC, I find I'm trying for a balance between telling the person asking the question what the answer is and explaining where to find the answer. It's easy just to give the answer, but over time it takes more time.05:02
twbNod.05:02
PhotoJimtwb: All human, few filthy, very few delinquent.05:03
owhI used to run a helpdesk and I spent many months arguing that teaching users was cheaper than helping them. Over time management began to see a drop-off in the number of calls because users began to get a clue. Until this happened though, the call stats were abysmal.05:03
PhotoJimowh: short term pain for long term gain, as they say.05:04
twbPhotoJim: lucky bastard.05:04
PhotoJimtwb: some students are a challenge of my patience, and some are a true pleasure.  but that is true of most groups of humans.05:04
owhtwb: I respect that you are trying to show that a VPN is one approach, all I was doing was questioning if the person whom you were giving the advice to understood even the words, let alone the concepts.05:05
owhPhotoJim: Yup.05:05
owhA few months ago I started composing an email to ubuntu-devel-discuss about this phenomenon. As Ubuntu becomes more popular, we run the risk of being drowned in requests for help.05:06
PhotoJimthe Internet is a good example of that sort of effect.05:07
owhThat is, it might get to the point where we couldn't help despite our best efforts because there was too much need to get help.05:07
owhPhotoJim: Yeah, and it's getting worse.05:07
PhotoJimyes, that's true, although in defense of it, we wouldn't have multi-megabit cheap broadband if hardly anyone were on the Net.05:07
owhPhotoJim: More an more people yammering for help, less and less actual help available.05:07
PhotoJimyes, true.05:08
owhPhotoJim: And more and more dis-information.05:08
owhThe internet is beginning to be a race to the bottom.05:08
twbPhotoJim: here undergrads are mostly at university to drink and have promiscuous sex, AFAICT :-/05:08
twbThey should all be locked up.05:08
PhotoJimtwb: I teach fourth-year business students.  the horny clueless ones have dropped out by then. :)05:08
owhI saw a forum recently where the answer voted by the forum members as being the most helpful was in-fact incorrect and the answer that was actually correct was voted down as being not relevant.05:09
Rafaeli have ubuntu serve and i am a newby. i have some question and hope somebody can help?05:09
PhotoJimowh;  heh.  that's discouraging.05:09
* owh was gob-smacked.05:09
owhRafael: Sure, ask away.05:10
twbowh: well, forums are for people who are too stupid to use usenet.05:10
twb(Assuming you mean web forums.)05:10
owhtwb: Hmm, I'm a list-moderator on a large list and we continually get requests to "upgrade" to a web-forum.05:10
twbSmack them with gmane.org05:11
owhtwb: "No, don't you understand, that's not the same." "We want a web-forum with whim's and upload and..."05:11
matttany bash gurus here?  :)05:12
Rafael1) i am trying to connect server to 3 window computer..i am assuming i hve to use samba..my first question is the following...can a network storage adapter be conected to a router and make backups of the data of server as windows documents?05:12
owhmattt: That just depends on the level of guru required - specifically, what the actual question is :)05:12
matttowh: any idea why this doesn't work?  bins="cp,ls"; for x in /bin/{$bins}; do echo $x; done05:13
owhmattt: Separate it with a space.05:14
owhmattt: The delimiter isn't a comma.05:14
Rafael2) any advise of any network storage enclosure that will connect to the server without any problem, and also if i would like to connect one at home how can i do this?05:14
matttowh: what i'm looking for it to do is echo /bin/cp and /bin/ls, not /bin{cp,ls}05:14
mattterr /bin/{cp,ls}05:14
owhmattt: Yes, I understand that, bins="cp,ls" is delimited with a comma.05:15
matttowh: space doesn't work ... and this does work "for x in /bin/{cp,ls}; do echo $x; done"05:15
PhotoJimRafael: few network enclosures, especially at the low end, support Linux networking.  A cheaper way to accomplish that goal is to use a USB2 enclosure that you can use with native Linux filesystems.05:16
owhmattt: bins="a b" ; for a in $bins ; do echo $a ; done05:16
PhotoJimRafael: there are higher-end drive enclosures that are called Network Attached Storage that will do Linux filesystems and networking natively, but they cost a lot more than ones that do Windows networking.05:16
matttowh: but if i have a common prefix (/bin in this case), /bin/{cp,ls} is a bit tidier05:16
twbUSB2 is pretty slow, though.05:17
matttowh: but i see what you're getting at05:17
twbeSATA sounds sexy, but I haven't tried it myself05:17
PhotoJimtwb: the SMB drive enclosure I have is slower than USB2.05:17
twbPhotoJim: haha05:18
owhmattt: echo /bin/{cp,ls}05:18
PhotoJimeSATA is great, if you can get compatible stuff.  the only time I've tried it, the drive I got, combined with the enclosure and SATA card, wouldn't talk.05:18
PhotoJimtwb: could be the speed Linux does SMBFS, perhaps.  but the enclosure is painfully slow.05:18
twbITYM CIFS05:19
RafaelPhotoJim: sorry for my ignorance..the server (linux) is going to safe for example word documets, then if i am using samba, shouldnt it be windows compatible so it can safe in word format. ie..server goes down i can have windows computer look into enclosure and still read documents?05:19
owhtwb: I use rsync, USB2 is plenty fast :)05:19
owh<grin>05:19
PhotoJimUSB2 isn't great but it's not awful either.  USB1.1 is awful. :)05:19
twbowh: I'm comparing the speed of USB2 to the speed of e.g. the SATA bus.05:19
owhtwb: Sure, depends on usage requirements though.05:20
twbNod.05:20
matttowh: bins=`echo /bin/{cp,ls}`; for x in $bins; do echo $x; done05:21
matttowh: is that what you mean?  cuz that does ... seem to work.  :)05:21
PhotoJimthe nice thing about USB2 (assuming one doesn't have a working Linux NAS or eSATA device) is that you can backup your whole disk into one device, and then remove it for safekeeping.05:21
owhmattt: I was just showing you what different methods of expansion are available. Glad to see that you have what you need.05:21
twbPhotoJim: another guy I know has a udev rule to do that automatically when it detects the drive (by UUID).05:22
PhotoJimtwb: oh, that's slick.05:22
matttowh: cheers05:22
twbPhotoJim: so he just plugs it in when he gets home, esentially05:22
owhtwb: Did he document this anywhere - I mean, it's all nice and well fixing stuff, but if it ain't written down, it didn't happen.05:23
PhotoJimI recently got a pair of terabyte drives and put them in RAID1.  I think I'm going to get another pair, one for a spare RAID1 drive (online) and another in an enclosure for a removable backup drive.05:23
twbowh: yeah, probably on a blog05:23
twbowh: I can't be bothered finding the reference, sorry.05:23
* owh is reminded to make a post about MYOB running off a server drive, even if MYOB tells me that it doesn't work :)05:23
owhtwb: That's cool :)05:23
twbIt was probably Russell Coker, if you wanna google05:23
Rafaeldo not want to overwellm chat, but this is what i want to do: i am a doctor and build ubuntu server to store data (word and pdf documents). i want to make backups of this into and external drive (network attach enclosure), in a way that if server fails backups can be read from enclosure, at the same time would like to do same at home so baiscally have 2 backups...where can i read or learn about this?05:28
Rafaelalso if i want to connect network attach storage from home to office, any suggestion on good router for office that will make this coenction easily and secure05:29
centaur5Is tftp (port 69) the only thing that LTSP requires or are there more ports that need to be open?05:31
owhRafael: You are setting up a whole lot of interdependent processes there. These are the ones I can see off the top of my head.05:31
owh1. Ubuntu Server,05:31
owh2. Samba server to serve word and pdf documents to users05:31
owh3. Network storage mount05:31
owh4. Server backups to same05:31
owh5. Network storage fail-over05:31
owh6. Remote access to LAN05:31
owh7. Remote access to remote storage05:31
owhCrap05:31
owhSorry 'bout that. Seems <shift-enter> is a separate post.05:32
loginhelphello to all. just poppin in to ask if anyone knows a very simple way of setting up a network where a client computer boots up and authenticates to a server which will then load up the users home folder and desktop settings?05:32
friartuckRafael no, that cannot be done easily. you need a network admin for rent or just use one usb drive and take it with you to work and home.05:32
owhloginhelp: The edubuntu server will do that out of the box.05:32
loginhelpowh: does edubuntu server have lamp setup as well? right now i'm trying to config ubuntu server 8.0405:33
owhRafael: This stuff is not complicated to learn, but it will test your patience. My question would be: "Is it cheaper to do this yourself, or is it cheaper to pay someone to do this?"05:33
owhloginhelp: Well it's the same project. I suspect it also has a LAMP task. Of course you can also install LTSP into ubuntu-server.05:34
owhRafael: To give you a car analogy: "Do you maintain your own car, or do you pay a mechanic?"05:35
friartuckha05:35
owhSomeone was paying attention <grin>05:36
Rafaelowh: i like computers and to learn, that is a hobby for me even thought you might be rigth since linux is completely new for me....i buld the ubuntu server and hve install samba already and tsting with no problem...i am also plaing with webmin and ebox, but would like to have some type of security so that is why i am trying to do the backups05:36
friartuckRafael if you want security then uninstall webmin, that is very insecure.05:37
twbRafael: backups are "business continuity" or "disaster recovery".  The term "security" usually means security against other people.05:37
twbYes, webmin is absolutely to be avoided.05:37
Rafaelowh: i do mantein all my windows computer but i am learning linux..so so far is fun, as long as i learn and progress, but you are rigth that if it becomes problematic then it can be a headache05:37
owhRafael: Well, as you've no doubt found out at this point, the questions you've already solved are not documented in one single place. The more you add, the bigger the resources you need to understand and build.05:38
loginhelptwb: is webmin not good?05:38
Rafaeltwb: sorry, when i mean security i mean..server crashes and data is safe ..sorry for gramar05:38
friartuckloginhelp no, webmin is not good. it is full of vulnerabilities.05:38
owhRafael: As twb points out, "business continuity" is what you're really asking about and if we gave you "partial" information, there would potentially be liability issues. Don't get me wrong, and I suspect the same is true for twb, we are happy to help, but be mindful of the landscape you're stepping onto.05:39
loginhelpany other alternatives to managing a server with gui on a client?05:40
owhloginhelp: landscape and/or ssh05:40
Rafaelwell i know tht webmin is not on the repository and ebox is, but i have configure the box on raid 1 and raid 5 and after erasing one of the 3 hard drives i can start the rebuld process in less than 1 minute..i agree from reading that is vulnerable to other things05:40
owhRafael: There is a reason it's not in the repository, the ubuntu-server team made that choice, specifically. We've discussed it several times even.05:41
twbIt's probably easier for #ubuntu-server to help with specific problems such as "how do I make <app> do <feature>" compared to broad things like "how can I make my server secure and fast" or "how can I share files on the internet?"05:41
owhFair summary.05:41
twbFor those kinds of broad questions, you probably want to talk to either a local professional, or to a local linux user group.05:42
Rafaelthanks guys for your help05:42
owhRafael: To note, there are amateurs and professionals in this channel, so don't be afraid of asking.05:42
twbRegarding webmin, I have personally audited both parts of its core, and some modules.  The code is absolute crap, and it WILL be full of horribleness.05:43
owhMay I observe that this is another example of the same phenomenon. The questions are legitimate, the need is real, but as a community we may not have the tools to help such a need. That worries me.05:43
Rafaeldo not worry, but there are diferent type of doctors, some that does not know how o turn on a computer and some that we like and go deep into learning computer issues..when we divert the question to liabilites we loose the purpose of having amateurs and professional..that is fine and one moer etime thanks for the help05:44
friartuckowh i disagree. people screw-up their cars all the time because they think they can fix it. (another car analogy.)05:45
twbIn my professional opinion as a sysadmin, *none* of the web-based administrative tools I have seen are of even remotely good quality.  Admittedly, I have not closely looked at ebox.05:45
owhRafael: No, I think you mis-understand.05:45
Rafaelor they can learn mechanics and fix cars05:45
twbFor the simplest things such as "I want to add another user", I would probably try to deploy gnome-system-tools over VNC, only accesible from the local (i.e. trusted) network.  I have not actually trialled this yet.05:46
loginhelpso i am guessing there is no way i'm going to find a step A to step Z on how to get a school network going in 3 hours?05:46
owhRafael: I was trying to comment on the size of the question you were asking. It's not that I don't believe you can do it, or that we cannot help you achieve it, it's that there are *many* issues that will come up while you're doing it. Some of those relate directly to the running of your company.05:46
friartuckloginhelp no, it's deep topic.05:47
owhloginhelp: Boot from the edubuntu live cd.05:47
twbloginhelp: you could certainly get *something* running, but it probably wouldn't be safe to deploy.05:47
Rafaelowh: you rigth and we should not go into webmin, i was just mentioning about 1 feature that is great but have learn that rest is a disater, but well..my question was that i am building this slowly nd was wandering how to do what i ask at the begining...thanks anyway05:47
owhloginhelp: Safe to demo, not safe to run for real.05:47
Rafaelowh: will the forum be a better palce..or where should i start...05:48
friartuckRafael http://www.amazon.com/Beginning-Ubuntu-Server-Administration-Professional/dp/159059923305:48
loginhelpi think after a month of reading ldap,nfs,nis i realize i should have stepped in here first.05:48
owhRafael: Let me suggest something to you. You can do with it what you will. Start a web-page. Write down what you're trying to achieve and document what you learn. Structure the document as a project plan, then complete the steps. As you learn, you will understand the landscape you are operating in. I'm sure that we'll be here to answer specific questions along the way.05:49
owhRafael: You may also start with reading the ubuntu server guide, it won't be complete, but it touches on many concepts: http://doc.ubuntu.com/ubuntu/serverguide/C/index.html05:51
owhloginhelp: The reading was not a waste of time. It gives you an understanding of what you ask.05:51
RafaelOwh: thanks for your advice05:51
owhRafael: Pleasure.05:52
Rafaelthanks and good nigth05:52
Rafaelowh: can all this http://doc.ubuntu.com/ubuntu/serverguide/C/index.html be download or found  as pdf file05:58
loginhelpthanks. i'm gonna try the edubuntu server. apart from the authentication, i'm also hoping to have mail, wordpress, gallery2, twiki, so that the school can have their own online manual, news, a place to display their works and blog. any words of wisdom so this attempt can be more successful?05:58
owhRafael: You can install it locally and move it to a portable drive. It's as HTML: apt-get install ubuntu-serverguide05:59
owhRafael: I don't know of a PDF version.05:59
friartuckloginhelp mail will take the most work, security.05:59
Rafaelowh: last question for today..any advise of router (thinking about secure conecting from home to server) and about any brand for network storage adapter06:00
friartuckRafael you should consider a network admin to setup the vpn connection.06:03
loginhelpoh, another thing, is it too taxing for a PIII server if i have a media server on it as well?06:03
owhRafael: A router that supports VPN would be smart. A network storage adapter that supports Windows File Sharing, since you want to be able to serve clients in the case of failure. The question really isn't one of "What do I buy?" - even though you think it is.06:03
owhloginhelp: That depends on what it's doing, how much RAM it has and whom it's serving with what. Ie, that's like asking: "Is a Ferrari a good car to buy?"06:04
Rafaelowh:so what should the question be? and thanks for the repsonse...06:05
loginhelpactually its a sony vaio, p4 1.2 GHz, 128 Mb06:06
owhRafael: I'm struggling to even form a coherent response to your question. The interdependencies are too great to give a meaningful answer. Things like: "What kind of existing LAN is there?" "What kind of users are there?" "What kind of internet connection is there?" "How much data is there?" "How often does it change?" "What size documents are there?" "How old is the existing server hardware?" - these are just questions that each go i06:08
owhRafael: This kind of conversation is normally done one-on-one by an expert. A forum like IRC is a potential place where you might have such a conversation, but I for one charge for that process. I'm willing to help you resolve problems, but I'm not able to justify providing answers like this because I'm not sure how I can make that sustainable.06:12
friartuckRafael you can find a local Cisco vendor and get an ASA for $800 and have it setup for about $500. security and expertise are important here.06:12
Rafaelowh: do not feel bad...i could anser this question but will do so when i really need it in future, so far i am in the testing fase..playing and slowly learning..so if no problems i continue..if it complicates then i drop it..so far is inside my hobby, and if it works and develops to be "bussines continuity"then fine, if not will conitnue as i am or look for profesional..my mistake was to mention i am a docotor, then liability was06:12
Rafaelmention..and so on..just imaging i am an amateur thrying to build what i mention...but very honestly..thanks for your answers, believe it or not they help a lot..no harm fealings06:12
owhIf others here have ways that they can think of where I sit here online and help like that and gain an income to pay the rent, I'm happy to entertain the notion.06:13
owhRafael: The doctor and the liability have no relation in my mind. The issue is because you are doing this in your business, regardless of you being a doctor.06:13
owhRafael: The same is true for others coming here and asking questions about backups and security. I shudder at the issues related to their "toy" being used for real and breaking.06:15
Rafaelowh: like i said..no harm feelings and thanks one more time ..beleive it or not your help is apreciat it..will keep palying and at the end will use or discard this projeect....06:15
owhFor every complex problem there is an answer that is clear, simple, and wrong. --H L Mencken06:19
JanCowh: For every complex problem there are even more answers that are confusing, complicated & wrong. --JanC06:21
loginhelpowh: is landscape not free?06:21
JanC;)06:21
owhJanC: And I am sure that I am responsible for some of those :)06:22
owhloginhelp: Nope.06:22
owhloginhelp: Uh, that should be yes :)06:23
owhloginhelp: As in: "Yes, it's not free."06:23
JanCwell, a part of landscape (the client) is06:23
owhFat lot of good that will do you :)06:24
JanCbut that's not really useful on its own probably  ;)06:24
loginhelpdoes mac&win  have ltsp support?06:37
Kamping_Kaiserhuh?06:41
goksuhello again. :)08:19
matttevening08:26
jahormorning ;o)08:50
=== chrisadams is now known as chris_d_adams
krautmoin09:30
rags'night10:02
=== asac_ is now known as asac
Ethoshi guys10:45
Ethosanyone setup a connection to mssql before from ubuntu server?10:45
_ruben!info freetds-dev10:49
ubottufreetds-dev (source: freetds): MS SQL and Sybase client library (static libs and headers). In component main, is optional. Version 0.82-3ubuntu1 (intrepid), package size 411 kB, installed size 1224 kB10:50
_rubennever used it though10:50
EthosI've tried installing some bits nad bobs and following a few guides but nothing seems to work10:50
domashehe10:52
domasactually I did first 'freetds' package for an opensource distribution10:52
domasthat was ages ago, for freebsd10:52
domasno other OS had freetds package Ä®)10:52
domasfunny though, I had some people telling me how they use freetds to me, and they were using my package not knowing it :)10:52
Ethosheh10:54
Ethosthat's cool10:54
EthosSo surely you must be able to guide me? :DD10:54
tomyhello11:13
domasEthos: I can guide MySQL stuff way better nowadays :)11:13
goksuquestion: is it possible to connect to a betrieve 6.5 database from ubuntu?11:46
goksubtrieve that is. like odbc.11:46
goksuwhere should I ask that question? which channel?11:49
goksudomas: is it possible to connect to a btrieve 6.5 database from ubuntu? I am asking you because you have worked on a similar project years ago you said.11:51
domasgoksu: *shrug*, if there're linux drivers, yes :))11:52
domasbut I don't see any packaged11:52
goksudomas: I am using primavera planning software. the backend is a btrieve 6.5 db engine. runs on windows. But I want to do my work under linux.11:53
goksuwhere can I ask?11:53
* domas points to http://www.pervasive.com/developerzone/platforms/linux.asp11:54
domasI guess you can use JDBC11:55
domas(or linux-odbc)11:55
=== scfh_ is now known as scfh
goksudomas: I hope JDBC or linux-odbc connects to that old a db engine. thank you very much for the information. :)12:04
domasgoksu: use mysql!12:05
goksudomas: I am using mysql for most of my work. primavera uses btrieve6.5 and that does not work under wine.12:17
uvirtbotNew bug: #351562 in mysql-dfsg-5.0 (main) "mysql server install failed" [Undecided,New] https://launchpad.net/bugs/35156213:51
jahoranyone could confirm "bacula in dapper (2.2.8) catalog upgrade from hardy (1.3.6)" https://bugs.launchpad.net/ubuntu/+source/bacula/+bug/347206 ?14:21
uvirtbotLaunchpad bug 347206 in bacula "bacula in dapper (2.2.8) catalog upgrade from hardy (1.3.6)" [Undecided,New]14:21
ivoksit's probably valid14:21
ivoksthere is a script for upgrade14:22
jahorbtw i don't know if it should be fixed when hardy is almost 1 year here14:22
ivoksthe fact is that bacula wasn't supported before hardy14:22
ivoksfor a reason14:22
ivoksso we changed it's package scripts to get it included14:23
ivoksits14:23
jahorso it looks i missed that it was from universe ;(14:24
ivokswell, we should've think about upgrade14:24
ivoksbut the problem was that it was too complicated to do it14:24
ivokssince bacula in dapper used dbconfig for database management14:24
ivoksand in hardy we used custom scripts14:25
ivoksstill, bug is valid14:25
orudieis there a way to make it so that both mydomain.com and www.mydomain.com would both show as www.mydomain.com in the browser ?14:25
jahorivoks: ok. for now bacula looks that its working now14:26
ivoksjahor: there are update scripts14:26
ivoksirc14:26
ivoksiirc14:26
ivoks/usr/share/bacula-director/update_mysql_tables14:27
\shorudie: not using serveralias in apache but having a separate vhost for mydomain.com and Redirect / http://www.mydomain.com/14:27
ivokswhat's wrong with serveralias?14:27
\shivoks: ServerName www.mydomain.com + ServerAlias mydomain.com won't give "www.mydomain.com" as result when accessing "mydomain.com" ,-)14:28
ivoksof course14:28
ivokswhy would someone require that?14:28
stickystyleorudie: You can use a mod_rewrite rule.14:28
\shivoks: don't ask me...ask orudie ;)14:28
ivokscontent is what counts, not the location bar14:28
ivoksorudie: you really want to change URL in location bar or just render same web page?14:29
stickystyleivoks: Well the location can count with SEO.14:29
orudieivoks, change URL14:29
stickystyleorudie: http://httpd.apache.org/docs/2.0/misc/rewriteguide.html#url14:30
ivoks100 people, 100 ideas :)14:30
stickystyleivoks: That's what linux is all about ;)14:31
\shdepending on what someone wants to achieve...using mod_rewrite could be expensive ...14:31
\shespecially when mod_rewrite is used in .htaccess ,-)14:32
orudiestickystyle, RewriteCond is in which file ?14:32
stickystyle\sh: Yeah, well having AllowOveride on on a server is a performance hit in itself.14:32
\shorudie: in /etc/apache2/sites-available/<your vhost file> or in .htaccess under your docroot14:32
stickystyleorudie: In the conf file for the site.14:32
\shstickystyle: yepp :)14:33
orudieInvalid command 'RewriteCond', perhaps misspelled or defined by a module not included in the server configuration14:40
orudiestickystyle ^14:41
\shorudie: ls -al /etc/apache2/mods-enabled/ check for rewrite.conf14:41
\shor rewrite.load14:41
orudie\sh ^14:42
\shnormally not enabled by default14:42
stickystylesounds like you don't have mod_rewrite loaded $sudo a2enmod rewrite14:42
ivoksa2enmod rewrite14:43
\shorudie: have a look at https://help.ubuntu.com/8.04/serverguide/C/web-servers.html (when you use hardy)14:43
orudieok no error after sudo a2enmod rewrite , apache2 reload , but doesnt do the job still14:44
ivoksorudie is an ex-win admin; they don't read :D14:44
\shivoks: lol14:44
ivoksapache2 force-reload14:44
ivoksnot reload14:44
ivoksor restart14:44
orudiei did restart14:45
orudiesame14:45
ivoksRewriteEngine on14:45
ivoksbefore RewriteCond or RewriteRule14:45
ivoksthen reload14:45
orudiesame14:46
ivoksnow you are lying14:46
orudieno14:46
orudiedomain is selsovet.com14:46
ivoksso what?14:47
ivoks:)14:47
stickystyleorudie: just worked for me.14:47
stickystyleAs in I went to selsovet.com and it redirected me to www.selsovet.com14:47
orudieyou tuped selsovet.com in the browser and it turned into www.selsovet.com ?14:47
ivoksyep14:48
orudiewhy doesnt work for me :( ?14:48
orudieoh it just did14:48
ivokscause you are using internet explorer :)14:48
orudieyay !14:48
Nafalloorudie: because your browser caches stuff.14:48
orudieivoks, no firefox14:48
Nafallo;-)14:48
ivoksanother lie14:48
ivoksthis orudie guy... lies all the time :D14:48
orudieawwww come on14:49
ivokshehe14:49
zulhey ivoks14:49
ivokszul: hi there!14:49
orudieso it should be ServerName selsovet.com and below it ServerName www.selsovet.com so that they both point to the same dir ?14:49
NafalloServerName www.selsovet.com\nServerAlias selsovet.com14:50
ivoksum...14:50
Nafallothat's how I would do it anyway.14:50
ivoksright14:50
ivokswhere '\n' is enter14:51
ivoks:D14:51
Nafallonewline14:51
orudieyay !14:52
orudiegood stuff14:53
ivoksorudie: web site is awsome :)15:06
orudiewhich one selsovet.com ?15:10
ivoksyes15:10
orudie:)15:11
ivoksomg... raid5 with 8 drives15:13
ivoksdisater waiting to happen15:13
goksuis this IRC channel logged? can I get a copy of yesterdays comments? I need to reach the comments I used yesterday.15:16
yann2ivoks > why?15:16
yann2I got a raid5 on 5 drives, you're scaring me :)15:16
yann26 sorry15:16
ivoksyann2: raid5 allows one failed drive15:17
yann2got 2 hot spares :]15:18
ivokswith 8 disks, chances to have two failed drive at the same time isn't small15:18
ivokshot spares don't help here15:18
ivokshttp://www.hardwaresecrets.com/article/314/215:20
jahorivoks: back here .. there are update scripts for bacula catalog database, but not for that big version dump (i solved it by copying it from non-ubuntu package)15:23
ivoksjahor: this one i pasted is for 1.3 to 2.4 upgrade15:23
beawesomeinsteadivoks: do you have any plans on improving your mail stack before jaunty release? the reason i ask is that dovecot was updated to 1.2beta4 in intrepid and a bit afraid that jaunty mail stack will be moved to 1.2beta4 too15:23
ivoksbeawesomeinstead: dovecot in intrepid is 1.1.415:24
ivoksand 1.1.11 in jaunty15:25
beawesomeinstead$ dovecot --version     => 1.2.beta1 on my desktop, weird15:25
ivoksyou are pulling that from somewhere else15:25
jahorivoks: its for 1.38 to 2.0, in dapper (universe) was 1.36 and that is the root of the problem15:26
ivoksjahor: SQL interface in bacula has different version15:26
ivoksjahor: there is 8 and 9, iirc15:26
ivoksno, 9 and 1015:27
ivoks1.38.x used 9, while 2.0.x used 1015:27
ivoksyou are right, that script isn't enough for dapper->hardy15:27
jahorivoks: do not miss mi notice of 1.38.x vs 1.36 ;)15:27
ivoks:)15:27
ivoksbeawesomeinstead: anyway, there are only packaging changes that should get into jaunty today or tomorrow15:28
ivoksbeawesomeinstead: no version updates are allowed in jaunty any more15:28
jahorbut i know that in dapper LTS it was in universe and so it was unsupported by LTS15:28
ivoksstill, it's a bug15:29
ivokswe should've upgrade it15:29
ivokswe shouldn't make that mistake with 8.04->10.0415:29
ivoksmy mistake15:29
jahorivoks: ok i will try to prepare a fix and append it to the bug (maybe my first contribution to ubuntu ;o)15:29
ivoksthat would be great15:30
beawesomeinsteadoh cool15:30
jwstolk_workI would like to power down (cleanly) my ubuntu-server when its power putton is pressed. (like ubuntu desktop). All I can find about this is that I probably need to install ACPI.15:30
jwstolk_workbut the "acpi-support" package also pulls in things like x11-xserver-utils...15:30
jwstolk_workIs there a simple way to start a shutdown script when the power button is pressed?15:31
ivoksyou need acpid15:31
ivoksnot acpi-support15:31
ivoksbasically, you just need to load kernel modules15:31
ivoksacpid will do that for you15:32
jwstolk_workok thanks.  aptitude listed that one as "displays information on ACPI devices" so I was wondering if it actually did something :)15:32
=== hessml|away is now known as hessml|away|away
uvirtbotNew bug: #351648 in mailman (main) "update mailman to 2.1.12" [Undecided,New] https://launchpad.net/bugs/35164816:26
Iceman_B^Ltopanyone familiar with 8.10 server? http://pastebin.ubuntu.com/140815/ <-- what do the lines 2-4 mean ?17:26
ScottKkirkland: I think ^^^ is up your alley.17:27
erik1Hello, I used an Airlancer MC-11 (orinoco) wifi card during the install of Ubuntu Server. After a succesful install the interface voor the airlancer card does not show up. What can be wrong?17:30
kirklandscfh: Iceman_B^Ltop: the two ecryptfs warnings are benign17:31
kirklandScottK: ^17:31
kirklandscfh: sorry17:31
friartuckIceman_B^Ltop friends in China? http://www.geoiptool.com/en/?IP=125.81.125.8017:31
kirklandScottK: Iceman_B^Ltop: and are fixed (removed) in jaunty17:31
ScottKkirkland: Thanks.17:31
kirklandIceman_B^Ltop: ScottK: i don't know about the UDP errors17:31
kirklandScottK: thanks for the heads up ;-)17:32
ScottKkirkland: You're welcome.17:32
Iceman_B^Ltopkirkland: I can explain the UDP errors17:33
Iceman_B^Ltop Iwanted to know the other things :)17:33
kirklandIceman_B^Ltop: ah, okay, yeah those are two benign warnings17:33
Iceman_B^Ltopokido17:33
Iceman_B^Ltopfriartuck: friends, I wish17:33
kirklandunknown items that should be scrubbed from the ecryptfs mount string17:33
Iceman_B^Ltopthey are torrent noise17:33
Iceman_B^Ltopthose UDP things17:33
kirklandif they're not scrubbed, the kernel says "i don't know what to do with these"17:34
Iceman_B^Ltopokay17:34
kirklandand drops them17:34
Iceman_B^Ltophow can I perform Wireshark-like tasks from the command line?17:41
friartuckIceman_B^Ltop tcpdump on linux, snoop on solaris.17:41
Iceman_B^LtopIm having random disconnections when I'm SSH-ed into my server, from the local network17:42
Iceman_B^Ltopthis wasnt the case with 8.10 Desktop but ever since I installed server.....I;ve had them17:42
Iceman_B^Ltopnobody with similar experiences?17:44
Iceman_B^LtopI;ve also had them when I ssh from a node that;s physically connected to the server machine17:45
Iceman_B^Ltopand its very annoying :/17:45
ScottKIceman_B^Ltop: As friartuck says, tcpdump is the package you want.17:48
sbeattieIceman_B^Ltop: I second tcpdump, but another option would be tshark, which is the text/cli version of wireshark.17:51
Iceman_B^Ltopokay17:58
Iceman_B^LtopI have no GUI, in case that matters17:58
Iceman_B^Ltopi'll install both Tshark and tcpdump18:00
jkakarIs there any documentation describing how one uploads KVM images to a Eucalyptus cloud?18:00
jkakarI followed the instructions in soren's blog on the weekend, but haven't managed to figure out how to upload an image.18:00
friartuckIceman_B^Ltop tcpdump is probably already there: http://www.tcpdump.org/tcpdump_man.html18:01
Iceman_B^Ltopokay18:07
Iceman_B^Ltop"software caused network about" is the message I keep getting form putty, and I can't ping my server right now18:09
Iceman_B^Ltopand now it just started responding to pings again, this is too strange18:09
Iceman_B^Ltopsorry, the putty error message reads "Network error: software caused connection abort"18:20
Iceman_B^Ltopdoes anyone know if the OpenSSH package that ships on the Server cd differs significantly, config-wise, from the package you can get through apt-get ?18:27
JanCI think there shouldn't be any difference except for security or serious bug fixes18:30
Iceman_B^Ltopokay18:30
Iceman_B^Ltopthen I have no clue but I think my server is a bit dodgy, it keeps dropping the connection18:31
ScottKIceman_B^Ltop: It's identical unless there have been post release updates (as JanC says).18:31
Iceman_B^Ltopalright18:32
Iceman_B^Ltopso it can't be that18:32
Iceman_B^LtopI'v already asked in #ubuntu, if setting the card to half-duplex would make a difference18:33
ScottKIceman_B^Ltop: What kind of connection do you have?18:37
friartuckIceman_B^Ltop half duplex not good. look for errors on the nic: ifconfig -a18:37
Iceman_B^LtopScottK: my current setup is [this laptop(XP)]------[switch]-------[router]------[server]18:38
Iceman_B^Ltopall ethernet, 100Mbit18:38
ScottKNo firewall in there?18:38
Iceman_B^Ltopthere is also a modem connected to the router.18:38
geniiIceman_B^Ltop: Maybe check that both ends of your network cable are wired 568-B compliant18:38
Iceman_B^Ltopno, everything whould be bridged, its all LAN18:38
Iceman_B^Ltopgenii: I had 0 problems with the Dekstop install of Ubuntu, just that it all 256megs of my ram in that machine18:39
Iceman_B^Ltopright now, even when I SSH into the router, and from there to my server, I get dropping connections18:40
ScottKDo you get packet loss when you ping?18:41
geniiIceman_B^Ltop: I've had this half-duplex problem previously, it ended up being cable that was ok at short distances and not 568-B wired... then on longer cable runs dhcp kept dropping, half-duplex, etc with same wiring order as short cord. It specifically had to be wired in the order 568-B standard requires18:41
Iceman_B^Ltopwhen my connection breaks, yes. otherwise I can ping fine. I do get more pingdrops from my laptop then I get when I ping from my router18:41
Iceman_B^Ltopoh, the cable is a factoray made Cat6 I think, but again, itworked fine with ibex desktop18:42
jmedinaIceman_B^Ltop: could you pastebin the output from ethtool ethX from the server and desktop?18:56
Iceman_B^LtopI can only give you the output from the server, cause I dont have the desktop installed anymore18:57
Iceman_B^Ltophang on18:58
Iceman_B^Ltopjmedina: http://pastebin.ubuntu.com/140874/19:01
ivoks_mathiaz: any chance you could look at that dovecot-postfix bug/patch?19:05
mathiazivoks_: hi - I've already look at it once. I still need to think about it a bit more.19:05
ivoks_ok19:06
mathiazivoks_: how important is it for the release?19:06
ivoks_er... very :)19:06
mathiazivoks_: right - right now the package works correclty.19:06
mathiazivoks_: except for a specific use case.19:06
ivoks_not quite19:06
mathiazivoks_: not quite?19:06
ivoks_on reinstall or new version, ucf is ignored19:07
ivoks_and smtp-auth with outlook doesn't work19:07
=== ivoks_ is now known as ivoks
mathiazivoks: oh right. These should be fixed for release then.19:07
mathiazivoks: I was only refering to the case where dovecot.conf local changes weren't taking into account.19:08
ivoksah, well, i've added that to that patch19:08
ivoksit's not big deal to do it19:08
ivoksand it would be great addition for users19:08
ivokssince some will upgrade their intrepid server and would like to have dovecot-postfix19:09
ivoksmerging their config in would be a big plus19:09
Nafallohmm19:09
Nafallohow advanced is that dovecot-postfix thing?19:10
Nafallocan it do postgresql backend? :-)19:10
mathiazivoks: right. Doing so, since we already have the logic to merge in place, I though why not use the default dovecot.conf?19:10
ivoksNafallo: it uses shadow as backend19:10
mathiazivoks: ie to merge the dovecot-postfix.conf file *into* the existing dovecot.conf?19:10
ivoksmathiaz: we aren't allowed to do that19:10
ivoksdovecot.conf is from another binary package19:11
Nafalloivoks: oh gah. not what I want then. thanks :-)19:11
ivoksand -imapd and -pop3d are not doing a good thing changing dovecot.conf19:11
ivoksNafallo: dovecot-postfix is just configuration for dovecot and postfix, noting else19:11
mathiazivoks: hm. I wonder if the fact that we use ucf to handle config changes wouldn't help.19:12
Nafalloivoks: yeah. mostly wondered if it had a dpkg-reconfigure wrapper for some more advanced configurations as well :-)19:12
mathiazivoks: for -pop3d and -imap, I agree19:12
ivoksmathiaz: my proposal was to use ucf and merge diff into dovecot19:12
ivoksmathiaz: but cjwatson said that's wrong19:13
mathiazivoks: I always wanted to look if it would be possible to split this configuration into its own configuration file19:13
mathiazivoks: ok.19:13
mathiazivoks: ie - have a configuration file to enable pop319:13
mathiazivoks: another one to enable imapd19:13
mathiazivoks: basically having one configuration file per service19:13
mathiazivoks: or daemon19:13
=== mcasadevall is now known as NCommander
mathiazivoks: rather than having one monolitic configuration file.19:14
ivoksmathiaz: that would be great... but this is something i'd rather see upstream doing19:14
Iceman_B^Ltopjmedina: any clue ?19:14
mathiazivoks: right. I think that the dovecot configuration supports include files.19:14
ivoksmathiaz: iirc, not for every part of configuration19:15
jmedinaIceman_B^Ltop: everyting looks ok, but I dont know if that is from desktop or server19:15
ivoksonly for ldap and sql19:15
jmedinaI asked for both19:15
mathiazivoks: hm - in the case of pop3 and imapd we'd be interested in the protocol command line19:15
mathiazivoks: hm - in the case of pop3 and imapd we'd be interested in the protocol option19:15
Iceman_B^Ltopjmedina: what do you mean? I can only provide you with data from the server. I have no desktop. If you mean this machine, it's an XP Laptop19:16
mathiazivoks: I wonder if something similar to the master configuration of postfix would be useful19:16
jmedinaIceman_B^Ltop: well looks fine, did sniff with tcpdump for any problems?19:17
mathiazivoks: anyway - these are just thoughts.19:17
ivoksmathiaz: hm... it might... maybe we could do something with ucf and wrapper tool for config19:17
Iceman_B^LtopI would love to, but I'm new to this. meanign I have no idea what to sniff for19:17
mathiazivoks: one day I'll look into what the dovecot configuration engine can exactly do19:17
mathiazivoks: meanwhile I'19:17
mathiazivoks: meanwhile I'll have another look at your patch for dovecot-postfix.19:18
ivokswe should contact upstream19:18
mathiazivoks: definetly.19:18
ivoks(i should contact upstream) :)19:18
ivoksmathiaz: i know it might be late in release schedule, but those changes are important - i worked on that patch for couple of days and tested it19:21
ivoksmathiaz: so, it should be ok19:21
mathiazivoks: well - these are clearly bug fixes19:21
mathiazivoks: so we can include them in jaunty19:21
cubahey19:25
cubaI'm giving an IP by dhcpd to 5 hosts, and only ubuntu-server doesn't react on dhcpd responses after dhclient requests....the packets are there, but the ubuntu server's dhclient ignores them19:25
cubait simply doesn't set the interface at all19:26
cubait is fresh installation19:27
ivoks[dhclient interface] doesn't work?19:27
cubait is eth0, up and running19:27
cubain multicast19:27
ivoksso, dhclient eth0 doesn't work?19:28
cubalistening on LPF/eth0/08:00:27:95:0c:a619:29
cubasending on LPF/eth0/08:00:27:95:0c:a619:29
cubaisn't that weird ?19:29
ivoksno, that's normal19:29
ivoksnothing after that?19:29
cubadiscover on eth0 to 255.255.255.255 port 6719:30
cubabut no result19:30
ivokslogs on server?19:30
cubabut tcpdump is catching the dhcpd response packets19:30
ivoksdhcp server19:31
Iceman_B^Ltopjmedina: any idea what I should sniff for? or should I capture everything for a minute or 3 ?19:31
cubaivoks, I need to go now, I'll be back later19:32
centaur5Does LTSP require that you have desktop packages on the server or does ltsp-build-client install desktop packages in the /opt/ltsp/ folder?19:34
=== ravi is now known as Iceman_B|SSH
olcafo_is there an access control system in place for the iscsi service? I need to know it if I could set something up with multiple iscsi initiators access the same target. just doing priliminary research at the moment.19:53
=== olcafo_ is now known as olcafo
olcafoany good resources on the internet for implementing iscsi in linux/ubuntu would be great.19:55
ivokshttp://www.cuddletech.com/articles/iscsi/19:56
ivoks?19:56
stickystyleolcafo: you want more than one initiator to access the same target at the same time?19:57
olcafoyup19:58
olcafogreat, something just came up. I'll be back.19:59
Iceman_B^Ltopoh hey19:59
Iceman_B^Ltopmy server loses connections to the internet as well19:59
stickystyleolcafo: Just wanted to make sure you where aware that you can't just do that with iscsi, you need to throw a clusterd file system into the mix also - like GFS.20:00
ivoksmaybe he doesn't want it mounted20:01
zulmathiaz: ping you know for all of those bugs who dont chose a password for mysql why we do a big fat warning when they dont choose a password and let it continue or log it somewhere where we can ask users if they report a bug to check if they entered a password or not20:09
mathiazzul: are you triagging mysql bugs?20:10
mathiazzul: I'm doing the same :)20:10
zulmathiaz: some of them20:10
mathiazzul: I'm going through the New bugs20:10
mathiazzul: which one are you doing?20:11
zulim going through some of the old ones and newer ones20:12
juliuxhi can somebody take a look at the phpmyadmin package in hardy? see http://www.phpmyadmin.net/home_page/security/PMASA-2008-7.php20:14
juliuxhardy still has 2.11.3-120:14
=== zaid_ is now known as zaid_h
drbobbhello, i have an LVM question, just started to play around with it20:26
drbobbwhy would lvextend refuse to grow my logical volume?20:27
drbobbthe message is: device-mapper: reload ioctl failed: Invalid argument20:27
ivoksinvalid argument20:31
geniiWhat arguments did you use with the lvextend command?20:32
drbobblvextend -l +100%FREE /dev/VG0/OPT20:32
ivokstry without +20:33
drbobbok this is one of two lv's in its volume group20:34
drbobband my idea is to expand it to fill all remaining free space20:35
ivoksthen run vgdisplay20:35
ivoksand check how much free extents are there20:35
ivoksand then extend it20:35
drbobbFree  PE / Size       19022 / 74.30 GB20:35
drbobbthat's what you wanted to know?20:35
ivokslvextend -l +19022 /dev/VG0/OPT20:35
* genii ponders if it's -l or -I20:35
ivoksit's -l20:36
ivokssmall L20:36
drbobbwell i didn't make up that command, i followed the manpage20:36
geniiivoks: I don't use it enough to know, thanks20:36
ivoksl and I are different letters20:36
ivoksyou should consider different font :)20:36
drbobboh, exactly the same output20:36
drbobbusing number of extents made no difference20:37
ivoks"lvextend  -L  +54 /dev/vg01/lvol10 /dev/sdk3"20:37
ivokshm20:38
ivoksis the filesystem mounted?20:38
drbobbi tried both ways, mounted and unmounted20:38
drbobbmade no difference20:38
ivoksit must be unmounted20:38
drbobbit still doesn;t work20:39
jmedinaumounted? /me always resize with mounted FS20:39
drbobbnowhere do the docs say it must be unmounted20:39
drbobbby i tried both ways anyway20:39
ivoksright, that's true20:39
drbobbs/by/but/20:39
ivoksfilesystem is mounted, not the partition20:39
drbobbright, and to resize a jfs, it must be mounted anyway20:40
ivokssame with xfs20:40
drbobbwell i have jfs20:40
ivokshow about20:41
drbobbwould it be a problem that the other lvm on this volume group houses my root fs?20:41
drbobbs/lvm/lv/20:41
ivokslvextend -L100%FREE /dev/VG0/OPT20:41
ivokscapital L20:41
ivoksbah20:42
ivoksignore that20:42
drbobbnope20:42
ivokslvextend -L+74.30G /dev/VG0/OPT20:42
drbobbsame20:42
drbobbno difference20:42
ivokshuh?!20:43
drbobbsame message20:43
ivoksls -dl /dev/VG0/OPT20:43
drbobboh i forgot to say, there's one more line:20:43
drbobbFailed to suspend OPT20:43
drbobbit's a symlink, /dev/VG0/OPT -> /dev/mapper/VG0-OPT20:44
drbobbbtw this is all on a freshly installed ubuntu-server 8.0420:45
ivoksthere weren't any lvm partitions on that disk before?20:45
drbobbi repartitioned the whole disk at installation time20:46
geniiMaybe you need to use lvchange to have it mounted ro first20:46
ivoksdrbobb: never mind that, were there lvm partitions before installation?20:47
drbobbivoks: hey, now i don't recall, i wiped the previous system clean20:48
drbobbi think it was a redhat 920:48
ivoksnote that formating disk (or even creating new partition table) doesn't do anything20:50
ivoksmetadata from previous partitions can be preserved even if the whole disk is repartitioned20:50
drbobbwell it does rewrite the partition table, doesn't it20:50
ivoksit does20:50
ivoksbut you can recover partitions20:51
ivoksso, clearly, not everything is formated :)20:51
drbobbyes20:51
drbobbbut i've owerwritten much of the drive with new data by now20:52
ivoksbut, back to the problem...20:52
drbobbwell, about 80GB out of 20020:52
ivoksvgscan20:52
Iceman_B^Ltopjmedina: still there?20:53
drbobbyeah, worked fine20:53
Iceman_B^Ltopany idea how long I should let the tcpdump run for ?20:53
drbobbnothing extraneous found20:54
drbobbFound volume group "VG0" using metadata type lvm220:54
drbobbetc.20:54
ivoksvgdisplay20:55
ivokspaste it on pastebin20:55
ivoksIceman_B^Ltop: not too long :)20:55
ivoksIceman_B^Ltop: otherwise, you'll have very big file :)20:55
jmedinaIceman_B^Ltop: yeap, but im busy doing real work :S, it is not about running and create a big file, is about analize dumped data and look for problems20:57
drbobbivoks: as you like20:57
drbobbhttp://paste.ubuntu.com/140947/20:57
drbobbnothing unusual20:57
drbobbthe second vg is on another physical drive20:58
ivoksdrbobb: lvdisplay20:58
drbobbyes, what do you want to know about it?20:59
drbobbhttp://paste.ubuntu.com/140949/21:00
ivoksdrbobb: everything21:00
drbobbthere it is21:00
ivokswell, hm, it should wor21:01
ivoksk21:01
drbobbyeah i thought so too21:01
drbobbbrb21:02
Iceman_B^Ltopjmedina: ah okay21:03
Iceman_B^Ltopivoks: I let it run for like 15 mns, and I have a 23k file21:06
ivoksnice21:06
=== jdstrand_ is now known as jdstrand
=== drbobb_ is now known as drbobb
Iceman_B^Ltopivoks: I gave sudo tcpdump -c 1000 -w tcpdump_30mar now21:10
drbobbivoks: ok, so i've been able to extend the lv by smaller increments21:13
drbobbbut at the point where there are 249 free PE's, i can't extend it any more21:14
drbobbso why would LVM insist that 996 MB of my VG must be wasted?21:18
uvirtbotNew bug: #322647 in mysql-dfsg-5.0 (main) "mysql-server fails to instal with apparmour errors" [Undecided,Incomplete] https://launchpad.net/bugs/32264721:21
ivoksdrbobb: metatada21:25
drbobbok, it does seem like a lot though21:26
drbobband it still is kind of puzzling21:28
drbobbon my second VG, which hosts a single LV, vgdisplay shows 0 free PEs21:28
drbobbkind of inconsistent, isn't it21:29
ivoksfree PS should be 021:29
ivoksPE21:29
drbobbyeah what i mean21:29
drbobbi see 249 PEs on VG021:30
ivoksi really don't know where's the problem21:30
drbobbfree PEs that is21:30
drbobbbut LVM won't let me expand any LV21:30
drbobbwell i don't know what the problem is21:31
drbobbbut it sure soesn't make sense to me21:31
drbobbs/soesn't/doesn't/21:31
drbobbi don't think i've seen it mentioned in the docs anywhere, that you should account for some PEs being taken by metadata when computing by hom much you can grow your LVs21:33
drbobbs/hom/how/21:33
drbobbman how terribly i type21:34
ivoksfree PEs already have included metadata21:34
ivoksso, at the end, you shouldn't have any free PEs21:34
ivokswhy you can't achive that, i can't tell21:35
drbobband it's not just a little, it's 249 PEs21:36
drbobbactually i though the metadata area/s is/are separate, and not included in the count of PEs21:46
ivoksit's not, it is separate21:50
orudieivoks, i'm in a terrible terrible mood today21:52
orudiei feel like ripping someone's head off and then kicking it around21:53
drbobbso, it ought to be possible to allocate all available PEs to LVs21:53
drbobbhm, i've managed to create another LV out of the 249 free extents22:00
=== hessml|away|away is now known as hessml|away
drbobbhey maybe i do worry too much, but it makes me uneasy when something as essential as storage management doesn't work as expected22:06
kansan__how do i add a user such that they will only have access to a given directory and all subdirectories & files underneath that directory?22:06
=== hessml|away is now known as hessml|away|away
ivoks10.04 will have nice name22:32
ivoksten-o-four22:33
ivoks:)22:33
=== hessml|away|away is now known as hessml|away
User777Okay so I have installed and configured (mostly) proftpd on a newish ubuntu server installation and the person i need to FTP in to this box is experiencing error 550.  Could anyone tell me what I need to do to make the entire filesystem just 'open' to his user.  I understand that may not sound secure but its what i need to happen. please help?22:46
jmedinaUser777: dont chroot ftp users22:48
User777okay, so what can id o to let this FTP user upload/download anywhere in the filesystem?22:48
User777i do^22:48
User777i am not a Linux expert by any stretch of the imagination22:49
Deepsterrible idea, but ftp in as root user22:49
User777hmm22:49
User777there would a line in the config file that I would have to change right?22:50
User777i assume thats turned off by default22:50
Deepsi have no idea i'm afraid, manuals come into play here22:50
User777thanks22:51
* User777 is looking around the config22:51
User777connection established waiting for welcome message.  Error: Could not connect to Server23:01
User777i put in what the manual says is the correct line...(RootLogin yes)23:01
User777restarted the server..and I get that23:01
User777any ideas?23:02
beawesomeinsteadUser777: did you change the Port in sshd_config?23:06
beawesomeinsteadUser777: shouldn't it be PermitRootLogin yes?23:06
Iceman_B^Ltopokay, I have run tcpdump and I have a file now, where to go from here ?23:07
Iceman_B^Ltopwhat do I do with the file ?23:07
User777i havent touched sshd_config....and according to the sites docs its RootLogin...I will try with PermitRootLogin now..whats this about sshd_config?23:08
beawesomeinsteadUser777: where did you set RootLogin yes then?23:08
User777proftpd.conf23:08
User777was that not the correct place?23:09
beawesomeinsteadUser777: ah, i thought you set similar option for SSH server, nevermind then23:10
User777i tried (PermitRootLogin on) and restarted..i am greeted with the same error  in my ftp client "Unable to connect to server"23:11
User777I shouldnt have to add root to anything right?23:12
olcafois anyone using GFS? is it well supported in Ubuntu?23:14
ivoksi do23:24
ivoksno problems at all23:25
ivoks'night23:25
olcafoivoks: I'm thinking of using it with iSCSI23:25
olcafoha, maybe catch you later then.23:25
ivoksi use it with drbd23:25
User777okay so i just got fed up and uninstalled proftpd23:27
User777can anyone reccomend an ftp server that is actually easy to configure?23:28
olcafoUser777: littel late here, but ProFTP works out of the box on a ubuntu install.23:28
User777appearantly not23:29
User777got to go23:29
olcafochances are that if it doesn't work, then there is somthing external happening that will prevent any other FTP client to work.23:29
olcafoI need to know if I'm going down the right path here. I ultimatey need to have SMB shares that are ever increasing in size (TB wise) and also perhaps host virtual images through it. I'm thinking 10GbE, iSCSI, LVM, GFS with a couple of VM hosts accessing the VM images.23:35
olcafook, so that was confusing. there's really two seperat thing I want to do with it.23:37
olcafo1. an SMB server connected to the targets, 2. a couple of KVM hypervisors connected to targets with the VM images.23:41
owhThat's clear as mud and twice as thick.23:43
olcafohaha! :)23:43
jmedinathat looks fine, with that setup you can do livemigrations23:43
olcafothat's the idea. I'm not of the rocker then, good!23:43
* jmedina is preparing a similar envyroment for a xen course, well less the 10GbE network23:44
olcafowow, that's exacly what I wanted to hear.23:44
jmedinathat is common envirment for virtualized datacenters23:45
olcafothen why am I having such a hard time finding documentation. I've sort of peiced all this together from different sources, but I've found nothing that talks about it as whole.23:46
jmedinaolcafo: well it s goog time to start documenting this scenario, I can help23:48
olcafothat's a great idea. where do we start?23:49
jmedinaprobably with the goals of the project23:50
olcafoI'll be working on this for deployment sometime next year.23:50
jmedinaI read a document from suse describing a scneario like this, it is from 200623:51
olcafojmedina: yes, what I meant is what is the forum, or official place to do this online.23:51
jmedinagooogle for suse xen live migration23:51
jmedinaolcafo: not sure, but I think you can use the wiki23:52
jmedinaI think that is the place for community contributions23:52
olcafowell, I guess I'll finall have to set up an account ;)23:53
jmedinaolcafo: have you testd KVM live migrations?23:53
jmedinaolcafo: I havent used KVM, only Xen, but looks like it not too different in the implementation23:53
olcafono, not yet. although live migrations are not really one of the requirements for my deployment environment, it would be interesting to test out though.23:54
=== hessml|away is now known as hessml|away|away
olcafojmedina: I currently don't have the hardware to try such a thing. most of the stuff in this office is pre-KVM compliant. Hence the big upgrade next year.23:56
jmedinaok, that is why we use xen23:56
olcafoI have zero experience using xen. limited VMware and a good amount of KVM is what I've been exposed to.23:58

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!