[00:00] you can try [00:00] no guarantees [00:05] seems like it works phew [00:11] Question: what is the best (and supported) remote administration software for an Ubuntu server? Similiar to Webmin? [00:13] we went over this [00:13] ebox [00:14] !ebox [00:14] ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox [00:14] sorry giovani [00:14] but ebox [00:14] doesn't seem to support Apache configuration [00:14] correct me if i'm wrong [00:15] I believe you're wrong [00:15] ok [00:15] so, [00:15] following the instructions on the page you gave [00:15] to access ebox from a machine on the same netowkr [00:15] network* [00:15] type the IP? [00:15] yes ... [00:16] merci. [00:16] now, [00:16] i was discussing setting up my own domain [00:16] with a partner [00:17] and i was told most likely 2-6 people in the country i'm in know how to setup what i am requesting [00:17] and those work for latin american Microsoft [00:17] (joke, obviously) though, maybe true. [00:17] heh [00:17] ok, so? [00:17] ill repeat my request once again [00:18] and fill me in any blanks [00:18] if what im requesting is impossible [00:18] no ... we don't need to hear the same request again [00:18] I've already addressed your request [00:18] hah... sorry. [00:18] question: [00:19] do i have remote administration to BIND9 configurations using ebox/ [00:19] no idea, read the ebox documentation [00:19] ok my mistake, there is [00:21] question: if i want to proceed as my request states, i am reinstalling ubuntu. what options should i pre-install? (DNS server, SAMBA server, Mail server, LAMP server, OpenSSH server, etc.)? [00:22] no need to reinstall ubuntu [00:23] if i want to start from scracth, which options to select [00:23] scratch* [00:23] (recommendations) [00:29] ... [00:53] heh now im stuck on boot with /init line 190: devide by zero [00:53] time for some sleep might help redoing it tomorrow with a fresh head ;p [00:53] Boot with break=top or init=/bin/sh? [01:33] I just want to make sure I DL the right CD. Can I do LVM @ install time with the Server CD or do I need the alternate? [01:36] Only the live (desktop) CDs do not support LVM and software RAID. [01:37] twb: thanks! [01:37] That is because the live CDs use stink ubiquity instead of loveable d-i. [01:37] Gotcha. So the server CD and the alternate are pretty similar. Just default package selection differences I guess? [01:38] markdrago: different defaults, and the packages that are ON the CD (as opposed to needing download) are different. [01:39] cool - thanks again [01:45] twb: charming [01:46] Oh, I didn't even post WHY I think ubiquity is stinky [01:46] where do ARP broadcasts get logged? [01:46] if at all [01:46] twb: does the phrase "optimised for different requirements" mean anything? [01:46] IIRC the main reason for it was to allow different special widgets, like the tz chooser. [01:47] it's a little bit less trivial than that [01:47] Which was especially ironic because in 8.10 the a11y was so messed up that I couldn't actually use the tz widget [01:47] btw, in what scenatios is a LVM handy to use ? [01:47] cjwatson: yes, well. [01:47] Iceman_B^Ltop: basically, all of them [01:48] twb: FYI, the timezone map was not conceived until some distance into ubiquity development. (And yes, it was a bit broken in 8.10.) [01:48] Iceman_B^Ltop: the cases where it *isn't* useful are virtual machines, or disks that need to be accessible by other OSes. [01:48] Iceman_B^Ltop: or very small disks, such as USB keys. [01:49] hm, okay. WHen I installed 8.10 I think I got the option to use an LVM, but I didnt use it [01:50] since I dont know what it exactly does, the only thing that comes to mind are the "extended" and "logical" partitions Windows uses [01:51] Iceman_B^Ltop: LVM lets you add, remove, resize or move partitions (between disks) while they are in use. [01:51] .....crud. I think I should;ve use it then [01:52] IOW it adds flexibility for an (IMO negligible) performance hit, though it does mean that non-Linux systems can't read your data. [01:52] LVM gives you three new objects: "physical volume" which is just something that goes on a partition to allow it to be used by the LVM system; "volume group" which is an assembly of physical volumes; "logical volume" which is an object a little bit like a partition, but it's allocated within a volume group and can be spread across disks and handled much more flexibly than traditional partitions [01:52] Traditional MS-DOS partitions, anyway ;-P [01:53] it almost sounds like RAID [01:53] you have an example of a partition table type that is significantly better in this regard? [01:54] cjwatson: I'm trying to think if AIX called its stuff "partitions" :-) [01:54] btw, aren't there MANY ways for non-linux systems to read data from a linux system? [01:54] But there might be e.g. ITS or something which had such flexibility, but nobody remembers it [01:54] all of the traditional partition table formats share essentially the same limitations here. The DOS partition table format is worse in some other ways, particularly the primary vs. logical partition stuff. [01:54] twb: it called it LVM, last I checked [01:54] Well anyway. [03:46] aha! finally figured out why the ssl cert won't work [04:35] Is there a way to make a new netboot image since the one I'm using (from the repositories) isn't as current as the new kernel? [04:56] The netboot's kernel doesn't need to match the installed kernel. === Iceman_B1SSH is now known as Iceman_B|SSH === freaky_t_ is now known as freaky_t [07:41] I'm trying to get cgi & perl working on an apache2 server, I keep getting a 500 error, and the log states "Premature end of script headers" which from my googling could be one of a hundred things. Can somebody give me a hand in figuring out why its doing this? [07:42] yeason: did you look at /var/log? [07:43] that's in the apache2/error.log file, it says "Premature end of script headers" [07:43] and then gives a file name [07:44] I meant to say it gives the file name of the file that I attempted to run [07:44] lmfao... white team guy just left [07:45] oops... wrong window [07:46] Sounds like the bug's in your cgi script, then [07:47] that's what I doubt, cause the cgi script is part of a prepackaged ecommerce setup. it was working on another server without a problem, I've been trying to spot differences in configuration but no luck yet [07:47] I've been reading the same conclusion in google searching [07:47] moin [07:48] If the cgi script isn't part of Ubuntu, then you need to talk to the vendor that you got it from [07:49] that's the frustrating thing, its required that we use this stupid setup, yet it hasn't been supported as far as I can tell in several years... And it does work so I'm pretty sure its a server side issue [07:50] also I get that same error running any .pl file [07:54] Ah, well, that's different, though I can't help you with cgi myself. [07:54] I would guess that plain CGI is pretty much unused these days, and everybody prefers mod_perl or fast CGI or whatever [07:55] probably, also I found another error that might be of use: "(8)Exec format error: exec of 'filepath' failed" [09:06] hi, how could I change the mysql user ID correctly ? [09:06] actually I change it manually in /etc/passwd and /etc/group and now the server refuse to start === scfh_ is now known as scfh [09:07] I'm trying to share a mysql DB among a gentoo and an ubunutu. User ID change and file permissions change work fine on gentoo, but not on ubuntu [09:37] hi all. I have some questions about ntp on 8.04... which is the best way to keep time sync ? [09:38] a brutal ntpdate -s clock.ubuntu.com in cron.hourly ? [09:53] during installation I would like to set a grub option in my preseed file, I've not seen any option for this, has anyone else ? [10:16] New bug: #357583 in nut (universe) "missing the last bit for powering off the system" [Undecided,New] https://launchpad.net/bugs/357583 === asac_ is now known as asac [11:02] when using the preseed file to pxe boot my keyboard layout has issues a # doesn't seems to get confused and come out as three diamonds [11:13] Hi, I accidently replaced my /etc/mysql with my old one, but forgot about the debian.conf file in there which gets generated..how can I regenerate that file? [11:13] psteyn, you can dpkg-reconfigure [11:16] that doesn't seem to work, I still get 'error: 'Access denied for user 'debian-sys-maint'@'localhost' (using password: YES)' [11:16] because it seems to use the old pc's credentials..I wanna regenerate the new pc's credentials [11:17] psteyn: could you access to mysql as root? [11:19] yeah, but the debian.conf file has this: user = debian-sys-maint [11:19] password = zZSg3xzHiCTa3x4i [11:19] what type of hash is that? can I just use passwd on the debian-sys-maint user? or how [11:19] ok we need to replace debian-sys-maint [11:20] what can I do? reinstalling mysql doesn't recreate a /etc/mysql and doing dpkg-reconfigure doesnt do it either [11:20] psteyn: it's not a hash . that is the password [11:21] oh. [11:21] damn you preseed file [11:21] if I change the password, do I need to change it elsewhere in the system too? [11:22] what else relies on debian-sys-maint in other words? [11:22] ugh :< [11:22] yes but i forget where [11:22] psteyn: I suggest to change debian-sys-maint password into database with the oldone [11:22] dpkg -L mysql-server-5.0 will give you a clue [11:23] ok macno, I see its not a system user..is it a mysql user? or where can I change that password? [11:25] psteyn: yes it's a mysql user, you can update mysql.user : connected as root use mysql then update user set password = Password('zZSg3xzHiCTa3x4i') where user = 'debian-sys-maint'; flush privileges; [11:26] thanks :) [11:26] psteyn: once done, try to connect mysql -u debian-sys-maint -p ;) [11:27] cool. [11:38] macno: it says ERROR 1046 (3D000): No database selected [11:38] psteyn: use mysql [11:38] but I dont want to select a database right? this is for any mysql thing? or is there a specific db? === tuxlinux_ is now known as tuxlinux [11:39] ooh thnx [11:39] psteyn: users, grants are stored into mysql database [11:39] thanks :] [11:40] psteyn: you're welcome [11:40] *phew*...ok, next time im backing up debian.cnf before replacing the mysql folder [11:40] hehe [11:54] incorrect: what keyboard preseeding are you using? [11:55] incorrect: for adding extra boot options, just put them at the end of the installer boot arguments, after the "--"; anything after "--" will automatically be copied to the installed system, unless it's one of a list of arguments that we know to be specific to the installer [11:55] cjwatson, http://pastebin.com/m114b255 [11:56] incorrect: you used debconf-get-selections --installer didn't you? [11:56] that is from that [11:56] incorrect: you should start from the installation guide instead. debconf-get-selections --installer produces a whole bunch of things that shouldn't be preseeded. [11:56] i've used both the d-i options and the non [11:56] incorrect: furthermore, the owner (the first field) should be "d-i", not "console-setup". [11:57] incorrect: that said, neither of these explain your problem. What boot parameters are you passing to the installer? [11:57] http://pastebin.com/m4ee170e2 [11:57] i've tried this too [11:57] i am now trying to do a dpkg-reconfigure on the package at the end on the install [11:57] no no no [11:57] what boot parameters are you passing to the installer? [11:58] http://pastebin.com/m5eb85a01 [11:58] hmm, it looks correct, but you have a *lot* of unnecessary rubbish there [11:58] might be confusing things [11:59] what do you think i don't need? [11:59] first, delete *all* that console-setup stuff from your preseed file. console-setup needs to be preseeded in boot parameters anyway - the preseed file isn't processed until after keyboard configuration is done [11:59] secondly, you have debian-installer/locale=en_GB.UTF-8 and debian-installer/locale=en_GB both specified. Delete one of them, and you can abbreviate it. I'd suggest just "locale=en_GB.UTF-8" [12:00] thirdly, delete "console-tools/archs=at console-keymaps-at/keymap=gb" and "console-setup/codesetcode=Lat15 console-setup/dont_ask_layout=error" [12:00] (the first bit of that must, I think, have come from Debian documentation, or some very old Ubuntu documentation) [12:01] if that still doesn't work, then add DEBCONF_DEBUG=developer to it, and show me /var/log/installer/syslog after installation [12:01] DEBCONF_DEBUG=developer do the append string? [12:05] I don't understand your question [12:05] where does DEBCONF_DEBUG=developer go? [12:05] at the end of the boot parameters [12:05] or anywhere, really, as long as it's after "append" and separated by spaces from the others [12:06] thanks [12:06] are there docs on the installer? [12:06] don't mess about with dpkg-reconfigure though. This is perfectly doable without any of that nonsense :-) but I may need to look over the logs to see what's going wrong [12:06] https://help.ubuntu.com/8.10/installation-guide/i386/ [12:06] i am using 8.04 [12:08] 8.04 instead of 8.10 then [12:08] I am also trying to get partman to create a partition on sdb but i've tried a number of different ways [12:08] one thing at a time [12:10] ok removing that stuff from the append has means it asks me to select a keyboard layout [12:10] did you leave console-setup/layoutcode=gb in there? [12:11] ah i think i had a mistake in there [12:11] now looks like ramdisk_size=14984 debian-installer/locale=en_GB.UTF-8 console-setup/layoutcode=gb netcfg/choose_interface=eth0 netcfg/dhcp_timeout=120 url= [12:11] right, that should be fine [12:14] perfect! [12:14] lets see if they keyboard works now [12:37] and a reboot [12:40] sigh they keyboard map is still broken [12:44] hi folks - I want to back up remote servers to one of my servers over the internet, while minimising the amount of data transferred (compression would be great!) - is rsync the best tool to do that with or is there something else? [12:59] Doble: Regarding the transfer rsync, or something based on it, is definetly a good idea. [12:59] Doble: Of course, you might want something more, to handle diffrent version of your backups, etc [13:00] Doble: Rsnapshot (perl-wrapper around actual rsync) or rdiff-backup (own program, uses librsync) might be good options. [13:01] andol: cheers, i will do some research on those two [13:11] incorrect: ok, can I see /var/log/installer/syslog please? [13:27] andol: regarding rsync - I was under the impression that it performed differential/incremental backups ... what is the advantage of rdiff-backup? [13:33] also regarding rdiff-backup, it says that for unattended backups being run automatically require root access on the client servers, will that cause problems because ubuntu doesn't use root ? [13:38] Hi, I was wondering if there was a way to keep the unrar utility running even if I don't have putty or terminal opened. [13:40] mat1211: what's your need? [13:51] mat1211 > yes with screen [13:51] man screen [13:51] ah [14:00] Doble: Actually, the only magic rsync does is regarding the transfer itself. Without any wrap around it won't store anything else but a mirror of what it is copying. [14:01] Doble: rdiff-backup only reguired root access if it's going to backup filed only readable by root. [14:03] Doble: and yes, you can use the root account in Ubuntu. It is just that it doesn't come with a password set by default. Either set a root password or use an ssh-key. Regarding unattended backups the later is more or less required anyway. [14:05] so just screen and then the command? [14:06] to use screen. [14:08] and also, is there a way to reinstall the part of ubuntu that deals with creating users? because when I type sudo adduser username, it says pam authorization failed. [14:16] andol: i see, thanks, im working on that now, will see how i go ! [14:17] anyone know if it is possible to use Prevu to backport a package compiled for 32bit on a 64bit system? [14:17] ARCH=x86 prevu .. for example? [14:26] Hmm. It's certainly a feature which could conceptually be added, at least. [14:28] pbuilder-dist has this capability [14:28] And prevu is just a simplified wrapper over pbuilder [14:29] how do I run the cd command as root? when i try sudo cd I recieve command not found [14:29] hmm, does anyone know how I can seperate my harddrive into two partitions? I use fdisk but it says no free sectors. [14:30] Doble: cd changes the directory of the current shell, therefore it's not something you can "run". Perhaps you want to start a shell as root? ("sudo -s") [14:31] maxb: thanks, the sudo -s command helped, im trying to set up remote backups while doing things the 'ubuntu' way with sudo! but its a bit of a pain hehe [14:32] Whenever you want to run more than a couple of single commands as root, "sudo -s" is useful. [14:33] maxb: how do i return to my normal user account when im finished ? [14:33] Exit the shell (e.g. Ctrl+D) [14:33] cheers [14:33] Doble or just type exit [14:36] so to clarify, I've set up two RSA keys to allow login without a password or user account as root - i did this on my server PRODIGY, and copied the public key to another server called NOVUS, and renamed the file to authorized_keys - can I now copy the same key from PRODIGY to ANY server and have it authenticate automatically? or do i need a new key for each server ? [14:37] actually i just figured that out for myself - sorry, its pretty obvious! *needs sleep* [14:37] Doble: you use the same key, it's your public key [14:41] can someone explain what the . before a directory represents? [14:42] Doble: In what context? [14:42] well for example, im setting up the rsnapshot.conf and the snapshot_root is /.snapshots/ - im just wondering if the leading . means the directory will be hidden or some such ? [14:43] Doble: it means that the file/directory is hideen, yes [14:43] hidden* [14:43] By general Unix convention, files/dirs with a leading dot are hidden from standard directory listing tools [14:44] ahar, im learning, great, thanks [14:45] Doble: if you just run "ls" to list the contents of a directory, it won't show you hidden files/folders [14:45] adding "-a" will show you those ... so "ls -a" is how you'd see the hidden contents (as well as the rest) of a directory [14:46] giovani: yes, thanks, i am making a habit of typing "ls -l -a" :) [14:46] no need to do that - twice ... "ls -la" will do fine [14:46] ahh, cool, thanks [14:49] okay, next question - im setting up this rsnapshot tool, and i want to use SSH to do my backups, to keep it secure, but it wants to know where SSH is installed to ... and I have no clue, how do i find out, or where is it normally installed to? [14:50] What is the hfs+ driver for ubuntu? I have a harddrive with that fs but can't mount it. [14:50] you can use the "which" command to find out the full path of a binary, Doble [14:50] Doble: so run "which ssh" [14:50] and it'll print the full path [14:50] giovani: ah brilliant, cheers! [14:56] mat1211: the kernel driver name is 'hfsplus' [14:56] mat1211: you might need to specify that explicitly ('mount -t hfsplus'); sometimes if you don't it gets mounted as hfs which sort of works but won't see most of the files [15:10] I have set up rsnapshot to back up a remote server and the localhost, but when I run the job, it prompts me for a password for the localhost - should I just add my public key i created to the authorized_keys file on the local host? is that a security risk ? [15:14] ah, thanks. Just one last question, when I am resizing a partition using parted, it asks me for start? and end? Could someone please tell me what the program wants me to type in? [15:15] mat1211: if you don't know, you shouldn't be using parted [15:15] I'm not sure how else to partition my harddrive, and I couldn't find the info on google. [15:16] fdisk for example ? [15:18] when I use fdisk it says no free sectors or something like that. [15:19] cause my harddrive right now is one big partition [15:20] mat1211: it's probably best to give Ubuntu Server its own machine, or at least it's own disk drive. [15:20] fdisk cant resize it as faar as i know, but you can delete the big partition and create smaller ones [15:22] now it is asking for first and last cilinder [15:23] try the gparted live cd if you want something with gui and without those kinda technical questions [15:23] mat1211: I like cylinders [15:24] I would like cylinders more if they didn't change size depending on what OS you're running [15:24] or sometimes depending on which partitioning tool you're using within Linux [15:24] right........ [15:24] just a question whats command to format the hd to hfsplus, I tried mkfs.hfsplus /dev/sdc1 [15:25] brilliant! my backups are working, thanks andol, maxb and giovani [15:26] heh nice in jaunty the iscsi function within the instaler requires awk, but its not included :p [15:27] okay, my backups worked so well, they flooded my connection and i could barely get to google, is there a way of throttling the connection? [15:28] trickle for example [15:28] how do I make hfs+ fs on my hd? [15:29] mkfs -t hfsplus [15:30] I did that but I did mkfs -t hfsplus /dev/sdc1, didn't work for some reason. [15:30] do you have the hfsplus package installed ? [15:31] yep [15:31] danny1: cheers, trickle looks like it will do what I need, thanks [15:32] the exact command I type is "mkfs -t hfsplus /dev/sdc1" and it says "No such file or directory." [15:32] is there a way of dynamically monitoring network throughput? I've tried htop but it appears to not have that functionality [15:33] iftop [15:34] yann2: excellent, thanks [15:39] mat1211 i guess you need to compile it yourself then if ther ubuntu package doesn't include that binary [15:39] What is the major difference of server cd's regular and minimal installs? [15:40] *main difference [15:40] kernel [15:40] Minimal install lacks the dancing ladies [15:41] Nonono I don't think kernel [15:41] I mean regular server install and minimal server install [15:41] THey both propably have server kernel still [15:41] Or you mean minimal misses headers or something? [15:42] I am really trying to find otu what should I use [15:42] what's regular and what's minimal server install? [15:43] mat1211: it accepts several formats - e.g. you can say "2000M" for 2000 megabytes [15:43] If you boot server cd and press F4 there is options of install, regular, minimal, or minimal for virtual machine [15:43] oh, i was totally unaware of that :) [15:43] ivoks: pretty sure its new in 8.10 (at least the virtual bit) [15:44] danny1: iscsi> score. please file a bug [15:44] okay, thanks for all your help. [15:44] lartza_: it depends what you are using your server for .. if you arent sure, id say to use the regular install, that should cover all the bases. [15:45] Lartza_: what ever you choose, none of them will install services by default; but i don't know what's different :/ [15:45] and i should know stuff like that :) [15:45] Lartza_: minimal doesn't install the server task (which contains patch, screen, landscape-common, vim, wireless-tools, wpasupplicant, w3m, ubuntu-serverguide in jaunty) [15:45] so it's a bit smaller, but that's the only difference [15:46] they're the same kernel [15:46] oh... so that's the former standard server install [15:46] right [15:46] great [15:46] minimalvm also doesn't install the standard task, and it doesn't use LVM by default [15:47] Thanks [15:51] danny1: and please tell me the bug number so I can mark it release-critical [16:08] I want to control the bandwidth that my rsnapshot uses when backing up my remote server, but when I just put trickle in front of the rsnapshot command, it doesn't work, where could I insert the trickle command ? [16:18] ivoks ! [16:19] ? [16:19] when i try running "sudo trickle -d 50 rsnapshot daily" I get the following error: "ERROR: /usr/bin/rsync returned 255 while processing root@123.456.789.123:/home/ftpusers/ touch /srv/backup/daily.0/" - how can I get the trickle command to work with rsnapshot? === adam7__ is now known as adam7 [16:35] why do we have /etc/ldap.conf /etc/ldap/ldap.conf [16:35] they are not the same [16:35] /etc/ldap/ldap.conf is for ldap library [16:35] and /etc/ldap.conf is for pam-ldap, iirc [16:36] ivok could you elaborate ldap library [16:36] but, true, it is confusing [16:36] MagicFab: libldap-2.4-2 [16:36] are we changing anything about it or will it stay like that ? [16:37] we won't change anything now [16:37] every app compiled with ldap support checks /etc/ldap/ldap.conf [16:37] to see if there are something it should know before starting a query [16:37] like, what to do if certificate is unknown [16:38] /etc/ldap.conf on the other hand is something totally different [16:38] it's for user authentication, IIRC [16:39] ivoks, rocks. I am giving training for server live :) [16:39] excellent response time :D [16:39] + karm for you [16:40] hehe [16:40] ivoks what's the difference between ldap:/// ldaps:/// ldapi:/// ? [16:40] 1) plain text [16:40] 2) SSL [16:40] and 3 is...? [16:40] lol [16:41] ldapi is socket [16:41] ldapi://var/run/ldap.socket [16:45] hi, when my php tries to write a file i get "permission denied" in response, how should i solve this problem? [16:46] chmod -r 777? [16:46] that's bad way to do it [16:46] so? [16:46] best way would be to enable ACLs on filesystem [16:46] and just add www-data as a user that should be able to write in that directory [16:46] what is ACLs , and what does it do? [16:47] ogelami: Access Control Lists, it's a different way of handling permissions [16:47] if that's not an option [16:47] you could make www-data user as an owner of that directory [16:47] oh [16:48] and never put enything valuable there :) [16:48] anything [16:48] i doubt valuable is correct spelling [16:49] heh it is :) [16:49] ivoks: yeah, "valuable" is correct [16:49] okay, so let's just say that i want my /etc/www/grab to be writable from php? [16:50] /etc is configuration directory, don't put anything thats changing in there [16:50] that's what /var is for [16:51] haha, sorry , i meant [16:51] but anyway, sudo chown www-data:www-data /your/directory [16:51] var [16:52] is it correct that my crontab is saved to "/tmp/crontab.jDHAns/crontab" ? [16:52] Doble: crontab -e? [16:52] does that gives full permission to the subdirs in the directory i choose? [16:53] ogelami: no, only the parent [16:53] ogelami: add -R to do it for all files and dirs in it [16:53] ivoks: yes, i want to run my backups using rsnapshot, so I added it to the crontab, but now im thinking that because im logged in as myself and not as root, that the command wont execute properly, is crontab user-specific ? [16:53] oh ok ty, [16:53] Doble: yes, crontab is user-specific [16:54] and that /tmp file is where the crontab is temp stored until it's written [16:54] Doble: that's ok, crontab -e saves to temporary file and then moves it into /var/spool/crontab/username [16:54] thank you, now it's working [16:54] if tar added support for ACL, karmic *should* have it [16:54] okay, should I create the entry for my backups in root's crontab? or is there another way ? [16:55] Doble: don't do anything as root, unless you really have to [16:55] Doble: do you need/want your backup to be executed with root permissions? [16:56] yes, the rsnapshot needs to be run as root or it can't write to the lockfile [16:56] grrr... they still haven't accepted the patch [16:56] since i did that, i cannot controll my php files manualy from my ubuntu account -.- [16:56] ogelami: correct [16:56] this is why ACLs are used [16:57] hm [16:57] I didn't follow your entire conversation, but you might be able to do youruser:www-data [16:57] i want www-data, ogelami and root can acces,a [16:57] when people write php applications, they choose one direcotry where web server should be able to write files [16:57] root always has access [16:57] yea [16:57] ogelami: you can do youruser:www-data [16:58] so that your user still owns the dir, and www-data can be given group permissions to do so as well [16:58] right, and make it 0775 [16:58] hi all [16:58] yea thank you [16:59] now i can edit and write from www-data [16:59] peple, I install ubuntu 8.10 server, and after I need Grafical interface only to use firefox. So I install apt-get install xorg icewm. But after I did startx command, mouse not works. I try ps2 and usb mouse [16:59] J_P: GUIs aren't supported on ubuntu server [16:59] what file I can change to try solve that ? [16:59] nope i was wrong -.-, i can edit from my ubuntu account but not from www-data. [17:00] giovani: You mean, aren't supported by ubuntu or in this channel ? [17:00] J_P: both [17:00] i want full permission from my ubuntu account, and read/write/append for my www-data. [17:00] ogelami: then you didn't apply 0775 permissions [17:00] giovani: ok, I will try in #ubuntu. thanks [17:00] how do i apply 0775 ? [17:00] ogelami: sudo chmod 0755 /path/to/dir/ [17:01] and you'll need to add -R there if you want to apply that to all subsequent files/folders [17:01] thank you giovani [17:02] in the future, ogelami, if you don't know how to follow an instruction ... just ask, rather than ignoring it, and claiming the instructions didn't work [17:05] now I'm not able to append the file my php wrote. [17:06] fix your php code [17:06] * ball doesn't like php [17:06] tell it to create 664 file [17:07] without ACL you'll have a hard time getting this into what you want [17:07] I'm a noob when it comes to linux, i don't know how to do that [17:07] with ACL you can just tell it that every file created in that dir can be rw by your user [17:08] and whatever PHP does, it can't change that and both you and your php application would be happy :) [17:09] enabling acl is easy [17:09] remount your filesystem with acl option [17:09] install acl package [17:09] should I use ACL on a samba file server serving windows clients? I was having some trouble with permissions before with multiple users ... when a user created a file, only he could delete/edit that file, even if another user that was part of the same group attempted to edit it [17:10] Doble: samba has better ways to solve this [17:10] i got around it by forcing everyone to be admin in the samba smb.conf [17:10] Doble: force user and force group [17:10] i see [17:10] Doble: you can set it up like 'force user = nobody ; force group = nogroup' [17:10] Doble: add valid users = jim carry pamela anderson [17:10] Doble: and that's it [17:11] hmm, I see [17:11] they all can access it, write it and stuff, but on the filesystem level, it will be owned by nobody:nogroup [17:11] yeah, let me give you a scenario and maybe you can tell me if this will work ... [17:12] Lets say I have a Samba file server set up in a small business with 5 users, running windows pcs. I want each user to have an account on the server, and I want the users to be divided into three groups, Staff, Admin, and Executive. There should be one primary file share, within which there are directories. Only certain staff should have access to certain directories, but it should be additive, eg: executives have access to both admin and [17:13] once inside the directory, everyone should be able to do everything [17:13] if that makes sense :) [17:13] i understand what you are up to [17:14] you can do that with ACL, of crouse, but you could also setup couple of shares [17:14] you can even do that without acl [17:14] make top directory rw by public group [17:15] under it is staff directory, rw by staff group [17:15] next to it is admin directory, rw by admin group [17:15] add admin users in public, staff and admin group [17:15] staff users in public and staff [17:15] public users only in public [17:15] thats not bad [17:15] hm... [17:16] but it has a flaw :( [17:16] i just realized it [17:16] ? [17:16] if admin users writes something in public directory [17:16] it will be owned by admin group [17:16] what if you force everyone to nobody.nogroup ? [17:16] and public users won't be able to see what's in that file [17:16] then you don't have groups :) [17:17] but you have set the permissions on the primary directories already [17:17] they act like gates, and only let in the right users, but once inside, its a free-for-all [17:17] that's right, and when your admin user tries to write, it will try to write there as nobody:nogroup [17:17] and fail [17:17] ah, i see [17:18] acl is the way to go [17:18] well, id like to do it without multiple shares because they require multiple drive mappings to the user's computers, and ideally I'd like just one 'share' with access then controlled by permissions. it also simplifies user management, for example, if a new staff member joins, i just add them to the 'staff' group and it sorts itself out - i do the same on my windows network at work [17:19] cjwatson: would it be too bad to include support for acl in tar, even though gnu tar is still considering correct aproach, and might do it differently? :) [17:20] sounds like an excellent way to create future incompatibilities [17:20] right [17:20] we had this pain when they changed the bzip2 option name [17:21] fwiw, they are considering the patch i've sent to debian maintainer [17:21] it's based on what redhat has done for their tar [17:21] they even added some fixes to it :) [17:22] let's wait and see [17:24] hmm, my crontab doesn't seem to be working, I added "20 2 * * * /usr/local/bin/rsnapshot daily [17:24] " to root's crontab, to get the job to run at 2:20am every day ... and it just crossed over 2:20am and it hasn't run, any ideas ? [17:25] check your mail [17:25] how do i do that? i dont think i've set up an email address for root yet [17:26] check /etc/aliases to see where root mail goes to [17:26] and then /var/mail :) [17:26] i don't have a /etc/aliases [17:27] should I ceate one ? [17:27] Doble: root's crontab, or /etc/crontab? [17:27] root's crontab [17:27] ok [17:28] no, don't create one [17:28] check /var/log/syslog [17:29] it should have an info about crontab job [17:30] it does, it just says - Apr 9 02:26:01 prodigy /USR/SBIN/CRON[18701]: (root) CMD (/usr/local/bin/rsnapshot daily ) [17:30] so im guessing it ran ? [17:30] yes, it did [17:31] now, what's the outcome, we can only guess :) [17:31] add 1> /tmp/crontab.stdout 2> /tmp/crontab.stderr [17:31] so...: [17:31] 20 2 * * * /usr/local/bin/rsnapshot daily 1> /tmp/crontab.stdout 2> /tmp/crontab.stderr [17:32] fix the time, to 35 2 [17:32] and wait for it to run again [17:32] actually, im one ahead of you - i just turned on logging in the rsnapshot.conf file :) [17:32] it should log to /var/log [17:32] well, that doesn't do what i planed... but ok [17:33] ah, sorry, thought i was being clever [17:33] :) [17:33] maybe this way will work too [17:35] hmm, it didnt create a log file [17:36] if i run the command manually, it logs it in /var/log like it should [17:36] so i guess that crontab isn't running the command [17:37] it is [17:37] you've seen the logs [17:37] maybe rsnapshot needs some env variables? [17:38] hmm doesnt seem so [17:39] im following this guide - http://rsnapshot.org/howto/1.2/rsnapshot-HOWTO.en.html#automation [17:39] add those 1> and 2> [17:39] ok [17:39] and try again [17:40] ok done, is it okay to set the crontab just one minute ahead of time? ie the date shows "02:40:10" so I set it to 2 41 [17:41] nevermind of course it is, because its working ... we checked that already [17:41] aha, [17:41] bin/sh: /usr/local/bin/rsnapshot: not found [17:42] there you go :) [17:42] which rsnapshot [17:42] rsnapshot is actually in /usr/bin/rsnapshot whoops ! [17:43] that'll teach me to blindly copy/paste from guides :) cheers [17:44] brilliant, it's working now, thanks ivoks [17:45] np [17:48] haha, this 'hard links' stuff is crazy ... coming from a windows environ, the idea that I've made four backups of about 30mb each ... but the three backups after the first are only taking up 700 bytes each on my drive! yet they appear to be full backups ... brilliant [17:49] right [17:49] i wasn't aware of rsnapshot, so i created my own backup system :) [17:49] with the same idea [17:51] i still dont quite understand how the different backup sets relate to eachother - if i have a daily backup and a weekly backup, is rsnapshot smart enough to maintain hard links across the backup sets, so I only have one copy of a file at a time ? [17:52] /usr/bin/rsnapshot> in general it's best to invoke commands without an explicit path if you can, so just 'rsnapshot' rather than '/usr/bin/rsnapshot' [17:52] Doble: there is no diffrence between a hard link an the "original" filename. Actually, any normal filename is basically a hard link. The filesystem keeps track of the data as long as there is at least one hard link pointing to it. [17:53] very interesting, thanks [17:54] rsnapshot looks interesting. It's funny that I also created my own version of this with scripts, although this seems better because you can let the users retrieve their own stuff. [17:55] cjwatson: thanks, i've changed it in my crontab now [17:55] another question about cron and rsnapshot, what happens if one rsnapshot job is running, and another is executed while it is running? does the server just create a new process for the new rsnapshot job? [17:58] that depends on rsnapshot [17:58] in my system, i create temporary file, which i erase once backup is done [17:58] i don't know how rsnapshot handels that [17:59] hmm, i know rsnapshot uses a lockfile while it's working [17:59] there you go [17:59] so, it won't start again if it's already running [18:00] bye all [18:02] thanks ivoks === tuxlinux_ is now known as tuxlinux [18:18] how can I get cron or rsnapshot to email me a file with the output of its job automatically ? [18:32] Doble: set the MAILTO=your_email option [18:40] sommer: where do i find that ? [20:17] yo guys [20:17] i have a prob... [20:17] iv been running ubuntu-server [20:17] and have switch to ubuntu-desktop to easily setup freeNX [20:17] but [20:18] the meta package for LAMP ("web server") does'nt install the same as ubuntu-server [20:18] it's the same package [20:18] server and desktop use the same repositories [20:18] for instance suhosin is not installed [20:19] giovani, thats what i thought [20:19] but like i say, suhosin patch server is not installed :S [20:20] do you think using .tasksel, rather than aptitude will make any difference? [20:22] what packages did you install? [20:27] hello [20:28] somebody know how download the e-mail with postfix an d dovecot in virtual mail?? [20:36] New bug: #357939 in openssh (main) "package openssh-server 1:5.1p1-5ubuntu1 failed to install/upgrade: subprocess pre-removal script returned error exit status 2" [Undecided,New] https://launchpad.net/bugs/357939 [20:40] giovani, the meta package, web server [20:40] ok ... and what's the problem then? [20:41] it doesnt install everything that gets installed when doing the same from ubuntu-server [20:41] e.g. theres no suhosin patch server [20:41] !seen ivoks [20:41] I have no seen command [20:42] !why? [20:42] Sorry, I don't know anything about why? [20:42] !kittens [20:42] Sorry, I don't know anything about kittens [20:42] lol [20:42] !seen banner [20:42] I have no seen command [20:42] !banner [20:42] Sorry, I don't know anything about banner [20:43] !wo0f [20:43] Sorry, I don't know anything about wo0f [20:43] !seen wo0f [20:43] I have no seen command [20:45] does the alternate cd run tasksel? [20:45] i presume it must do === PhotoJim_ is now known as PhotoJim [20:55] I just did an upgrade of a little ubuntu-server machine, from intrepid to jaunty, and it went super smooth. Just thought I'd throw that out there and smile [20:57] good news. [20:58] I'm tempted to upgrade my server, but I think I'll wait for release. [20:58] how long is it now? [20:58] 14/15 days? [20:59] Nothing wrong with waiting a couple of weeks. I upgraded my development workstation, though, so I wanted to have the same version of Django (and Python, of course) running on the server. I hope it doesn't bite me! [21:00] aint this ubotto bot got a counter ? [21:01] !help [21:01] Hi! I'm #ubuntu-server's favorite infobot, you can search my brain yourself at http://jussi01.com/web/factoids.cgi - Usage info: http://wiki.ubuntu.com/UbuntuBots [21:01] Scheduled for the 23rd, so yeah, 15 days, eh [21:02] !wo0f is pro [21:02] :P [21:03] !wo0f [21:03] Sorry, I don't know anything about wo0f [21:04] He's got a regular Zombie Hoof [21:04] hmm, whats that gui tool for viewing virts? [21:04] gtk i seem to remember [21:08] I'm not sure what you mean by virts, so I have no clue :) [21:31] which command is used to copy between hosts [21:31] is it wcp or something like that ? [21:31] scp [21:31] thanx [21:31] Secure CoPy [21:31] s as in ? [21:31] ok [21:37] I'm not sure why but mysql seems to be listening on a random port other than 3306 even though that's what I have it set to. Does anybody have any suggestions on where I can look to figure out why this is happening? [21:39] hmm... nvm, it does appear to be listening to the right port, but I still can't connect. I get "access denied for user... unable to connect to database server" [21:39] yeason: you probably haven't set up permissions properly [21:40] that's the funny thing... I've setup the user, double checked the password, allowed all permissions, allowed that user all permissions to the database required, and setup the client with the correct information and I still get this error [21:40] probably failed to set up the proper ACL for where the user can log in from [21:41] I'm sorry, what is ACL? [21:41] read the mysql manual on setting up users [21:41] just because a user exists, doesn't mean it can log in from any machine [21:41] uh yea... I've set this user to be able to log in from anywhere [21:42] unlikely given the error you're getting :) [21:42] you've somehow not applied the permissions properly [21:42] because mysql works for everyone else :) [21:42] the user in question can log in from Hosts: Any, and has permissions: All [21:42] I'm looking at it through webmin [21:43] webmin isn't supported for ubuntu [21:43] so use it at your own risk [21:43] !webmin [21:43] webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. See !ebox instead. [21:43] :-) [21:44] huh... I find that interesting, its never really caused problems for me before [21:44] nobody said it will, absolutely, cause problems [21:44] the fact that it's unsupported means ... if it causes problems ... there won't be fixes provided [22:00] giovani, how do i specify ssh port for scp ? [22:01] orudie: read the manpage for scp [22:01] giovani, its -P thanx [22:01] anyway i'm out [22:01] later all [22:06] !ebox [22:06] ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox [22:06] will ebox actually work in the next version? [22:09] or is it that they only release for LTS? [22:16] New bug: #357998 in openssh (main) "openssh-client (amd64) can't login after upgrade to jaunty" [Undecided,New] https://launchpad.net/bugs/357998 [22:18] jesus! [22:18] thats a pretty MASSIVE bug :P [22:31] I have a Ubuntu-Server and Windows XP at my LAN-House (i don't know how it called in USA). and a buy 2 links of internet, and configured the Server to share 1 one link to same ips, and the other link to the rest... but now, when a PC stay ocious, it lose connection to network... why does it happens? [22:33] can anyone help me? [22:38] CoinRN: is a LAN-House a remote location that hosts your equipment? [22:39] no... it's a place when normal people cames, and pay to access internet on our pcs [22:40] it's a "enterprise" [22:40] I think CoinRN might be trying to do like aggregation. [22:40] i have same PCs. people pays to acess internet in this pcs [22:40] its so popular here in Brazil [22:40] Ahh internet cafe [22:40] because people don't have money to pay internet and buy PCs [22:40] yessssssssssss [22:41] it's a Internet Cafe [22:41] =D [22:41] link aggregation [22:41] i live in a poor state of Brazil, so the Net here is bad [22:41] the best provider of my city, provides only 1 MB =/ at max [22:42] [beawesomeinstead]: i buy 2 links of 1 MB [22:42] OMG why i cant' say so? [22:42] could i show to you my config file? [22:43] use pastebin.ca to post it and then give us the link [22:43] i configured like: these PCs will acess the INternet Link 1, and those other will acess the internet link 2 [22:43] all right [22:43] CoinRN: are both links wired? [22:43] yeah, both wired [22:43] CoinRN: I wouldn't configure your client PCs that way. [22:43] http://paste.ubuntu.com/147232/ [22:43] it's because, we have a group of 8 PCs, that makes downloads a lot [22:44] and the others, is for gamers [22:44] CoinRN: sounds like you want traffic shaping [22:45] When the people of the group 1, start to download things, the gamers guys got crazy. So i dived, 1 MB to the guys who got downloads, and 1 MB to the guys to use normal internet and online games [22:45] i have a user i have just added that I wanted limited access to in my webserver, have made a directory in /var/www for it, and when I ftp in it works fine, and the user cant change directory, why is it that my other user account, can ftp in and browse my entire VPS server, im wondering what the difference is, is it expected behaviour but i dont know exactly why, can anyone help ? [22:45] well... i agree with you ball... by the way i also think that is good dived the internet in 2 parts... 1 internet for the group 1 and another one to the group 2 [22:46] p.s. im not logging with root on the second account [22:47] oh actually it doesnt work , the second user can view my entire directory structure [22:47] because the guys who watch youtube and download a lot of things, need some internet speed, but must don't made other people crazy [22:47] how can I stop this from happening? [22:47] and these people are focced in 8 PCs [22:47] my Internet Cafe has 3 rooms... the first and second are very similiar... it's for gamers and normal people [22:48] and the third room, wich have only 8 PCs, it's private rooms... so, many people go to download things, watch Porn, etc... [22:49] anyway... it doesn't matter... my problem is... When i turn ON a PC, and it stay ocious for a long time, its lost contact to network :S [22:49] why does it happens? [22:49] CoinRN: you're doing it wrong. [22:50] =( so, how can i do it correctly? [22:50] by Shaper? (cbq) [22:52] I have to go, my daughter's waiting to be picked up from school [22:52] =/ [22:53] Could anyone else help me? [22:53] CoinRN: I don't know what you mean by ocious [22:54] ok, i'll explain [22:54] the server is linux, but the other PCs are Windows [22:54] ok [22:54] [sommer]: we turn ON the pcs [22:54] ops [22:55] [beawesomeinstead]: we turn ON the PCs... and only it [22:55] OMGGG [22:55] -312312321 so, we turn on the pcs... and just it [22:55] if a client (person) cames, and use the PC, the computer stay normal, with internet acess [22:55] but, if the PC still turn on from a long time, and no one use it [22:55] ok [22:56] it lost the network acess [22:56] :S [22:56] i can't understand it [22:56] AH ok... [22:56] New bug: #358035 in dhcp3 (main) "can't create file: permission denied by apparmor" [Undecided,New] https://launchpad.net/bugs/358035 [22:57] CoinRN and it you use the repair connection option in WinXP does it fix the problem? [22:58] wo0f: 357998> I find it doesn't usually pay to panic until one has actually diagnosed the bug [22:59] mm... good question. i can't try that, because the Windows PC have a software that block the PC, if there's no network acess =/ it's don't a configuration, but a bug... in the "Internet Cafe Software" [22:59] 12312321 so, i cant do it =/ [22:59] ----- so, i restart the PC, and it back to work [23:00] but, it happens to in the "internet cafe manager software Server", and when i disable and renable the conection, all back to work [23:00] sorrry for terrible english, can you understand what i Said? [23:02] and this Windows PC, who have the "Internet Cafe Manager" (no, the software it's not caled this) also has a shared printer... and when its nertowks go down, the others PCs can't print anything =\ [23:03] i guess that I have configured something wrong in the rc.local, because these kind of problems came after i configured the 2 internet links [23:03] Yeah I understand, I htink that this problem is on the winxp computer and not on the Ubuntu Server. [23:03] Either that or 2 computers are attempting to use one IP or one MAC address. [23:04] (I dounbt 2 computers would have the same mac address but I have seen the problems once before) [23:04] ^^ (I doubt) [23:04] Vog-work: Error: "^" is not a valid command. [23:04] stupid bot.. :) [23:05] well... so, thare is something that i can to confirm it? for be sure that the problems isn't the ubuntu server? [23:05] and thanks for the help man =D [23:06] but, did you saw my rc.local? aparently are all ok there? [23:06] because I'm really noob on linux... =/ [23:08] i have linux only at this Server and at my House (i installed 1 mounth ago... Ubuntu Intrepid)