| oh_noes | how do I change the timezone of ubuntu in CLI without a prompt? "dpkg-configure tzdata UTC" still prompts me for 'chose a timezone' | 00:03 |
|---|---|---|
| Actium_ | /etc/timezone contains your currently selected timezone | 00:04 |
| Actium_ | however, i don now know if changing that file will suffice | 00:04 |
| Actium_ | *do not know | 00:04 |
| giovani | oh_noes: who says you can without a prompt? | 00:07 |
| giovani | there may not be a ready-made way | 00:07 |
| oh_noes | Thats my question, is there? :) | 00:09 |
| giovani | the official method is dpkg-reconfigure tzdata as you already know | 00:09 |
| giovani | whether you can duplicate its function with your own non-prompt script, I don't know | 00:10 |
| giovani | I don't know if all it does is change the symlink at /etc/timezone | 00:10 |
| giovani | if it does -- clearly you can do that yourself | 00:10 |
| Actium_ | check the source package of tzdata. it should contain all the information you need to determine what the reconfigure does to the system. | 00:11 |
| Sergii | I'm trying to compile mod_auth_gss_krb5 using apxs, but I always get "[1]+ Stopped ......" when I try to run it. Even if I run simple "apxs --help" - I also get "[2]+ Stopped" (number is always incrementing). Does anyone know why this might be happening? | 00:29 |
| giovani | oh_noes: I looked at the tzdata package | 00:30 |
| giovani | there are two files it edits | 00:30 |
| giovani | /etc/localtime | 00:30 |
| giovani | and /etc/timezone (a symlink to /usr/share/zoneinfo/AREA/ZONE) | 00:30 |
| giovani | so change those two, and you're fine | 00:30 |
| SockPants | morning | 00:33 |
| SockPants | giovani: here's the result of the backup if you're interested: file size: 1608621716 bytes size on disk: 465M 123522416640 bytes (124 GB) copied, 5757.09 s, 21.5 MB/s | 00:38 |
| SockPants | User time (seconds): 66.29 | 00:38 |
| SockPants | System time (seconds): 437.47 | 00:38 |
| SockPants | Percent of CPU this job got: 8% | 00:38 |
| SockPants | Elapsed (wall clock) time (h:mm:ss or m:ss): 1:35:57 | 00:38 |
| giovani | hmm, that's a pretty long time | 00:38 |
| giovani | I guess the disk is just so big | 00:38 |
| giovani | you can always just do a file-based backup | 00:39 |
| SockPants | yeah i was thinking this: if the disk breaks or i need to change it for another reason, this won't work will it | 00:39 |
| giovani | yes it will | 00:39 |
| giovani | this image will work for any 120GB disk | 00:40 |
| giovani | it will replicate your disk exactly, down to the partitiion info, the MBR, everything | 00:40 |
| SockPants | not all 120gb disks are the same size and in fact i don't think i can find another 120gb disk anywhere nowadays | 00:40 |
| oh_noes | giovani: thanks!!! | 00:41 |
| giovani | SockPants: you can resize the paritions if you want, to fit other size disks | 00:41 |
| SockPants | hm, i could probably at least change it to only backup the partition, not the disk | 00:42 |
| giovani | but yeah, this isn't as portable as a file backup -- however, a file backup requires that the system be fully reinstalled, and then you manually have to place back files | 00:42 |
| giovani | which gets messy if the backup is from an older version of the OS, etc | 00:42 |
| SockPants | what are the odds of messing up an mbr | 00:42 |
| giovani | messing up the MBR by doing what? | 00:42 |
| SockPants | hm, don't know yet :P | 00:42 |
| giovani | ah, you mean, in the real world | 00:42 |
| giovani | it's been done before :) | 00:42 |
| SockPants | hm | 00:46 |
| SockPants | i was having trouble with my nfs server so i gave up and switched to smb | 00:46 |
| owh | Anyone here know when jpds might be around? | 00:49 |
| oh_noes | Why does NTP restart after my /etc/rc.local is run? | 00:50 |
| owh | oh_noes: It has to do with network interfaces becoming available. It's a minefield :) | 00:50 |
| oh_noes | The problem is it's echoing 'Starting NTP server ntpd' right in the middle of my rc.local echoing stuff | 00:51 |
| owh | Likely it's asynchronous. | 00:51 |
| * owh hasn't looked at it for some time, but recalls with a shudder the interdependencies. | 00:51 | |
| oh_noes | is there a workaround? Im guessing the problem is because the service startup is asynchronize and each service only waits for it's dependancies | 00:51 |
| owh | Why is it a problem? | 00:52 |
| owh | It's not like you're going to look at the startup logs every 10 minutes is it? | 00:52 |
| oh_noes | good point, but it's a mini problem because we're using ubuntu server for our appliance and on new startup new customers typiucally want a pretty display | 00:53 |
| oh_noes | far from a real problem | 00:53 |
| owh | oh_noes: Give them a splash :) | 00:54 |
| owh | What they don't know won't hurt them :) -- kidding | 00:54 |
| oh_noes | yep thats what I was thinking | 00:54 |
| owh | Really, for the amount of effort, I suppose you could add a linefeed somewhere, and a splash will slow down the boot. | 00:55 |
| oh_noes | whats the term for the splash screen? | 00:55 |
| SockPants | whats a command i can use to split a big file into chunks | 00:55 |
| owh | SockPants: That would be "split" | 00:55 |
| oh_noes | not the grub splash, but the actual rcS.d splash and login | 00:55 |
| SockPants | ahah ok thanks :) | 00:55 |
| owh | oh_noes: Dunno | 00:55 |
| * owh pokes Nafallo | 00:57 | |
| === bittin___ is now known as bittin` | ||
| Nafallo | ? | 01:09 |
| Nafallo | meh | 01:09 |
| SockPants | how do i put each line of something's output in an array | 01:17 |
| oh_noes | Is motd.tail sourced, or echo'd? ie. can I put some bash style variables in it? | 01:27 |
| infinity | oh_noes: It's just concatenated, there's no shell involved. | 01:34 |
| infinity | [ -f /etc/motd.tail ] && cat /etc/motd.tail >> /var/run/motd | 01:35 |
| twb | I hated that change | 01:37 |
| SockPants | how do i put output into a variable in bash? | 01:39 |
| infinity | twb: Why? It means you don't have a file in /etc changing on every single kernel update anymore. | 01:40 |
| infinity | twb: For those of us that like to version-control /etc, that's a bonus. | 01:40 |
| twb | infinity: I hated it because they added it after etch froze | 01:40 |
| twb | The actual functionality itself, I'm apathetic about. | 01:41 |
| infinity | SockPants: FOO=$(command) | 01:41 |
| SockPants | aah, thanks | 01:41 |
| twb | Having said that, you could just .ignore the file, as you do with resolv.conf on a dhclient-using server. | 01:41 |
| infinity | I don't have dhclient-using servers. :P | 01:42 |
| infinity | Even ones that use dhcp too auto-install get a static IP (the same one) configured in the final build. | 01:43 |
| twb | I'd rather configure the network on one end, than both ends. | 01:44 |
| twb | That way I don't need to keep the config "in sync". | 01:44 |
| infinity | Well, I don't configure the auto-install machines, they do it themselves. | 01:44 |
| twb | Of course the DHCP server is configured to assign the same IP to the server always, by MAC. | 01:44 |
| SockPants | how do i add 2 variable ie a=$(echo 2) b=$(echo 3) c = a+b | 01:44 |
| twb | infinity: you mean with cfengine or puppet or similar? | 01:44 |
| twb | SockPants: try #bash. | 01:44 |
| twb | SockPants: a=1 b=2; echo $(($a + $b)), to answer that specific question. | 01:45 |
| infinity | twb: Our custom preseed with a whacky late-command, but yeah. | 01:45 |
| twb | infinity: ah, so only initial config | 01:45 |
| infinity | twb: Yeah, but they're designed to be torn down and brought back pretty quickly. | 01:46 |
| twb | I have a deep-seated fear of having to maintain machines I deploy | 01:46 |
| twb | infinity: VMs? | 01:46 |
| infinity | twb: No, regular hosts (though some also configure VMs on the fly when they're built) | 01:46 |
| SockPants | if i'm going to rsync backup into a file what filesystem should i make it | 02:11 |
| twb | SockPants: I don't understand the question. | 02:14 |
| * ScottK gives kirkland a high five . | 02:14 | |
| kirkland | ScottK: thanks ;-) i could use one today :-/ | 02:15 |
| kirkland | ScottK: blog post, i assume? | 02:15 |
| ScottK | Yesh | 02:15 |
| ScottK | Yes even | 02:15 |
| kirkland | ScottK: ;-) thanks | 02:16 |
| SockPants | i plan to make a sparse file, and make an fs on it and mount it, rsync files to it.... what filesystem should i use? | 02:17 |
| twb | SockPants: any filesystem that supports sparse files. Almost all of them do; vfat would be the only one I'd expect not to. | 02:20 |
| twb | SockPants: as a general rule, I recommend ext3 for Linux systems unless you can actually demonstrates that <other filesystem> is more performant for your specific use case. | 02:21 |
| isaacsm | kirkland: yes, nice job on the blog post | 02:28 |
| jcastro | kirkland: you used "toe the line" right! | 02:31 |
| jcastro | You're like the first person I've met that got it right | 02:31 |
| kirkland | jcastro: ? how do you get it wrong? | 02:32 |
| kirkland | isaacsm: thanks | 02:32 |
| jcastro | I always see people say "tow the line" | 02:32 |
| kirkland | jcastro: :-) that's something totally different :-) | 02:32 |
| kirkland | jcastro: i guess | 02:32 |
| kirkland | :-D | 02:32 |
| jcastro | so basically for about 5 minutes you gave me hope in the collective intelligence of the internet | 02:32 |
| kirkland | jcastro: heh | 02:34 |
| kirkland | jcastro: "toe the line" is the only phrase i know of that makes sense | 02:34 |
| jcastro | kirkland: well, for all intensive purposes ... | 02:34 |
| kirkland | jcastro: haha | 02:34 |
| SockPants | would sudo rsync -azvv / /mnt/backup | 02:34 |
| SockPants | backup everything to /mnt/backup? | 02:35 |
| kirkland | jcastro: revved up like a duece, another rumour in the night! | 02:35 |
| isaacsm | SockPants: yes, including /mnt/backup... | 02:35 |
| SockPants | isaacsm: how do i prevent that | 02:36 |
| SockPants | isaacsm: how do i make it backup only local files, there will be a few smb shares mounted etc | 02:36 |
| isaacsm | --exclude /mnt/backup/ should work | 02:38 |
| isaacsm | SockPants: depending on your setup -x (don't corss filesystem boundaries) may be useful | 02:40 |
| SockPants | ah ok so i can --exclude /mnt/ to make sure no shares get backuped anyway and then -x will make it read only stuff on /dev/sda1 just in case | 02:42 |
| isaacsm | SockPants: yes, that would work as long everything your backing up is on the same filesystem; where is the file your rsyncing to stored? | 02:54 |
| oh_noes | Can anything in ubuntu tell me my RAM DIMM configuration? | 02:54 |
| Kamping_Kaiser | lswh might. | 02:54 |
| twb | Or dmidecode | 02:54 |
| isaacsm | Kamping_Kaiser: that would be lshw, wouldn't it? | 02:55 |
| Kamping_Kaiser | er, yeah | 02:56 |
| Kamping_Kaiser | isaacsm, thanks for noticing that | 02:56 |
| isaacsm | np | 02:56 |
| isaacsm | oh_noes: you'll want to run that with sudo | 02:56 |
| SockPants | --exclude=PATTERN exclude files matching PATTERN | 02:56 |
| SockPants | can i have multiple patterns separated with a comma or how does that work? | 02:57 |
| SockPants | like --exclude=/mnt/*,/home/big_file | 02:57 |
| oh_noes | awesome thx | 02:57 |
| isaacsm | SockPants: No, specify a --exclude for each | 03:00 |
| isaacsm | SockPants: you may want to check out the FILTER RULES section of the rsync man page; there are a lot of options there | 03:02 |
| twb | You should not backup a filesystem that's in use. Create an LVM snapshot, mount it read-only, then backup *that*. | 03:05 |
| twb | This should at least guard you against the .pst problem if you have a Samba server. | 03:05 |
| twb | Obviously anything like a database will need a separate dump. | 03:06 |
| isaacsm | twb: LVM snapshots can really kill performance; I can't actually use them on any of my servers. | 03:09 |
| twb | isaacsm: even ones that only exist for a few hours overnight, while you make the backup? | 03:10 |
| twb | (You're obviously not meant to keep snapshots around for days, because they are copy-on-write.) | 03:10 |
| isaacsm | twb: the copy-on-write mechanism kills it | 03:11 |
| isaacsm | twb: doesn't matter the length of time, its enough that I get nasty phone calls | 03:11 |
| twb | Bummer | 03:11 |
| isaacsm | indeed | 03:12 |
| twb | I guess they're flooding their I/O bus already. | 03:12 |
| SockPants | i don't have lvm2 installed | 03:22 |
| reid | hi guys. I just got a new 1.5TB SATA drive for my server, and I'm wondering how I would get mount it via ssh? never had to do this before with CLI | 03:24 |
| Kamping_Kaiser | you mean sshfs? | 03:27 |
| Kamping_Kaiser | !tell reid about sshfs | 03:28 |
| ubottu | reid, please see my private message | 03:28 |
| reid | oh | 03:29 |
| reid | I see | 03:29 |
| reid | one sec | 03:29 |
| reid | nah, that is for a drive that isn't physically in the server I believe | 03:30 |
| reid | this drive will be physically installed in the server, I have just never had to mount a drive without some type of GUI | 03:30 |
| reid | so I am not sure how to mount it properly | 03:30 |
| jkfresh | anybody here have experience with NUT? | 03:30 |
| reid | I vaguely remember things like /etc/fstab, and mount command =P | 03:31 |
| twb | Kamping_Kaiser: I think he means "I am connecting to the server via ssh and I want to mount a drive that I've just added to an internal bay" | 03:34 |
| Kamping_Kaiser | twb, aaah. i see. | 03:35 |
| twb | reid: do you want to mount the drive temporarily, or forever? | 03:35 |
| genii | A more complete description of jkfresh's issue, copied from #kubuntu : | 03:35 |
| SockPants | you need to find out what the device name is (/dev/sda something), you need to partition it, make a filesystem on it so you can put files there, add a line to fstab to make it mount at boot, and the mount it anyway (so you don't have to reboot) | 03:35 |
| genii | <jkfresh> can anybody tell me how to power my server down the moment power goes out? I already have nut installed, and it is communicating successfuly with my UPS. The system has not powered down gracefully when I remove the mains power | 03:35 |
| twb | genii: all I can suggest is to check the nut logfiles. | 03:37 |
| jkfresh | I don't see any logs in /var/log | 03:38 |
| twb | There should be SOME logs in there | 03:38 |
| twb | If it's empty, you have bigger problems. | 03:38 |
| SockPants | gtg, bbl | 03:38 |
| jkfresh | well, I mean that there are no nut related logs. I keep seeing connections and disconnections from localhost with upsd. I don't know if this is normal behavior or not | 03:39 |
| twb | jkfresh: sorry, I don't know. | 03:39 |
| jkfresh | it's all good :) I think that setting nut up to do what you want is a black art | 03:39 |
| twb | I'll drink to that | 03:40 |
| jkfresh | makes me want to buy an APC | 03:41 |
| twb | What do troop transports have to do with computing? | 03:43 |
| jkfresh | ?? troop transports? | 03:45 |
| Kamping_Kaiser | hehehe | 03:46 |
| Kamping_Kaiser | twb, to transport your server-room najas around | 03:46 |
| twb | "never underestimate the bandwidth potential of a six wheeler hurtling across open terrain with a cargo area full of DAT tapes"? | 03:48 |
| jkfresh | I wish I had ninjas to rip my vinyl records for me | 03:48 |
| Kamping_Kaiser | 6 wheeler? | 03:49 |
| genii | Kamping_Kaiser: Must a third of an 18 wheeler | 03:50 |
| Kamping_Kaiser | genii, aah, i see | 03:51 |
| twb | I was going to say "half track", but I don't know if they're still actively used. | 03:57 |
| * isaacsm wonders if there are half-tracks in the hole at work...probably | 03:59 | |
| twb | http://en.wikipedia.org/wiki/V%C3%A9hicule_de_l%27Avant_Blind%C3%A9, for example, appears to be a six-wheeler. | 04:00 |
| isaacsm | twb: that takes backup and recovery to a new level--armored tape transport | 04:01 |
| twb | Then we only need a second "A" to get an AT-AT | 04:01 |
| isaacsm | install a magazine so it becomes an Automatic Tape Armoured Transport? | 04:02 |
| SockPants | hmm | 04:28 |
| SockPants | how can i make the server run a command as another user at startup | 04:28 |
| SockPants | i tried sudo -u <user> ... | 04:28 |
| SockPants | which works when i'm ssh'ing as root | 04:28 |
| SockPants | but not as a startup script | 04:29 |
| SockPants | and also, it doesn't actually run the program as the user, because it seems ~ is still /root/ | 04:29 |
| twb | SockPants: make an /etc/cron.d/ entry | 04:29 |
| twb | Use @reboot instead of * * * * *. | 04:29 |
| genii | rc.local may also be appropriate | 04:29 |
| SockPants | twb: i put a reference to /etc/startupscript in /etc/init.d/rc.local | 04:30 |
| twb | genii: good idea, though note that it doesn't run in single-user mode | 04:30 |
| isaacsm | wouldn't rc.local still has the issue with privs? | 04:30 |
| genii | isaacsm: No, it runs as root | 04:30 |
| twb | SockPants: ~ will be root if you use sudo -u fred. | 04:30 |
| twb | SockPants: you need to use -H, or better, su. | 04:30 |
| SockPants | yeah, how do i make it run as if i were logged in | 04:30 |
| twb | If root is executing it, there's really no point to sudo. | 04:31 |
| SockPants | i tried to do su <user>; command but it doesnt seem to work | 04:31 |
| isaacsm | genii: right, i though SockPants wanted to run NOT as root | 04:31 |
| twb | SockPants: that's because the syntax for su is different. | 04:31 |
| genii | isaacsm: Thats what su is for.... | 04:31 |
| SockPants | hmm, oh let me check | 04:31 |
| twb | Here's something I have in my /etc/rc.local | 04:31 |
| twb | isaacsm: | 04:31 |
| twb | env -i su twb -c xinit >/var/log/xinit.log 2>&1 & | 04:31 |
| twb | (sorry, wrong cut buffer.) | 04:32 |
| genii | Alternately to make a proper script and add it with update-rc.d | 04:32 |
| twb | genii: hear, hear | 04:32 |
| twb | metainit ftw | 04:32 |
| SockPants | how come you have -c option after the login name | 04:33 |
| isaacsm | yes, i prefer the startup script option myself | 04:33 |
| SockPants | su [options] [LOGIN] | 04:33 |
| genii | SockPants: -c is "do command" | 04:33 |
| twb | genii: he means that the manpage doesn't make it clear that the options can come AFTER the username | 04:33 |
| genii | Ah, yes. | 04:34 |
| twb | Note that the env -i unsets things like $HOME entirely | 04:34 |
| twb | So it won't be HOME=/root | 04:35 |
| isaacsm | twb: if $HOME isn't set, won't it default to / ? | 04:35 |
| SockPants | can i put multiple commands after -c and put them in {} ? | 04:36 |
| twb | isaacsm: if HOME isn't set, then any application that asks where $HOME is, will crash | 04:43 |
| twb | isaacsm: unless it explicitly handles the case where getenv() fails | 04:43 |
| SockPants | wait, command > file.txt captures stdout right, how do i get stderr as well? | 04:43 |
| genii | Well, or return a null | 04:43 |
| twb | SockPants: -c takes a string. That string is passed to sh -c | 04:43 |
| twb | SockPants: so IOW it's a shell script in a string | 04:44 |
| SockPants | twb: so for a bunch of commands i put it in ""? | 04:44 |
| twb | You could, for example, say su twb -c "ls; pwd; firefox" | 04:44 |
| SockPants | ok | 04:44 |
| twb | SockPants: what are you actually trying to run at boot? | 04:45 |
| twb | SockPants: because there's usually a better way than what you're going about | 04:45 |
| SockPants | a few different thinks | 04:47 |
| SockPants | *things | 04:47 |
| SockPants | um | 04:47 |
| SockPants | rssdler | 04:47 |
| SockPants | ntop (as root though) | 04:47 |
| SockPants | rtorrent in screen | 04:47 |
| SockPants | what's wrong with this (just trying stuff): | 04:47 |
| SockPants | sudo su jeroen -l -s bash -c "ls -al > /tmp/ls.txt" | 04:47 |
| SockPants | it doesn't work | 04:47 |
| SockPants | ok, it works when i leave off -s bash | 04:49 |
| isaacsm | SockPants: Sounds like your trying to automatically recreate your console sessions at startup; my thought would be to add them to your screenrc and just start screen | 04:52 |
| SockPants | well for now maybe but there might be other things later that don't have to run in screen, but that's an idea | 04:53 |
| * SockPants goes to read screen manpage more | 04:53 | |
| twb | isaacsm: I agree | 05:00 |
| isaacsm | in the past i've also run things like ntop in place of a getty, but that can be problematic sometimes | 05:02 |
| SockPants | how do you set the (bios) time? | 05:21 |
| twb | hwclock? | 05:22 |
| SockPants | thanks | 05:26 |
| * genii sips his coffee and thinks about tick servers | 05:32 | |
| SockPants | hello | 06:44 |
| SockPants | is there a commandline WLM client that has a web interface, like ebuddy.com has? | 06:44 |
| twb | SockPants: WLM? | 06:46 |
| SockPants | windows live messenger | 06:47 |
| SockPants | also, how can i make grep return more lines than just the line it finds | 06:48 |
| p_quarles | you mean like the lines immediately before and after the hits? | 06:49 |
| simplexio | Received disconnect: 2: server_input_channel_req: unknown channel -1 | 06:49 |
| SockPants | yeah, i thought i did it before and now i forgot how | 06:50 |
| simplexio | and dmesg shows eCryptfs parseoption error, | 06:50 |
| simplexio | .. and first error comes when trying to ssh into box first time in morning | 06:51 |
| p_quarles | SockPants: -C $number | 06:51 |
| p_quarles | SockPants: that gives you $number lines of context; you can also use -A (after) or -B (before) | 06:52 |
| SockPants | ah great, thanks | 06:52 |
| twb | SockPants: that would depend on what protocol Windows Live Messenger uses. | 06:57 |
| twb | Suppose that it's, say, XMPP (Jabber). You would then google for "linux web client XMPP" or something | 06:57 |
| twb | libpurple seems to be the primary IM library, so you could also see if any web apps are using that. | 06:58 |
| p_quarles | well, libpurple does have a CLI client (finch), and that should support Windows Messenger (which is its own protocol, btw) | 06:59 |
| p_quarles | no idea about a web interface, though | 06:59 |
| SockPants | hmm | 07:00 |
| SockPants | not too long ago MS added the capability to log into the same account at multiple machines, that's pretty much a must if i'd use it | 07:01 |
| SockPants | don't think theres anything as of yet | 07:02 |
| twb | SockPants: don't expect us to know much about Windows, generally | 07:02 |
| SockPants | hardly windows... but k | 07:05 |
| SockPants | how do i get rid of this: | 07:05 |
| SockPants | rtorrent: Could not lock session directory: "/home/jeroen/rtorrent_session/", held by "ubuntu:+4697". | 07:05 |
| SockPants | there is no such process | 07:05 |
| SockPants | if there was, i killed it | 07:05 |
| oh_noes | Is /etc/rc.local called after all initt scripts are executed and after they return? | 07:10 |
| oh_noes | Im doing some echos to console just before login, and im finding it's "Reloading openBSD secure shell" and " * Starting NTP server" write in the middle of my echo's | 07:10 |
| twb | SockPants: that's a question for the rtorrent people, but probably that dir contains a lockfile | 07:14 |
| twb | oh_noes: yes, unless you are in runlevel 0, 1 or 6. | 07:14 |
| twb | oh_noes: ah, that's because those things happen when ifup -a (dhcp) finishes doing its job, which happens in the background. | 07:15 |
| twb | oh_noes: IME the Ubuntu if-up.d scripts are... a little overenthusiastic about restarting systems | 07:15 |
| oh_noes | twb: arr, cool thanks for confirming that. I think in my example, ifup is returning even without an IP address, and because it's its DHCP it takes a few extra seconds to timeout | 07:16 |
| oh_noes | meaning it happens to dump ssh and ntp restarting coincidentally right inthe middle of my echo's | 07:17 |
| oh_noes | twb: can you tell me what script is fired on an ifup? Maybe if I can silence the output that would be enough for me | 07:17 |
| twb | oh_noes: run-parts /etc/if-up.d | 07:18 |
| oh_noes | I'm assuming ssh and ntpd start in rc3.d *anyway*, and are just being refired due to an ifup | 07:18 |
| oh_noes | twb: thats interesting, /etc/network/if-up.d/ntpdate has invoke-rc.d --quiet inside it. | 07:20 |
| oh_noes | I wonder why it's outtutting stuff to console on if-up | 07:20 |
| jpds | owh: Morning. | 08:29 |
| owh | Hi jpds | 08:29 |
| owh | Hope my email didn't cause you any heartache :-| | 08:29 |
| Kamping_Kaiser | hi both | 08:48 |
| owh | Good day Kamping_Kaiser. | 08:49 |
| Kamping_Kaiser | owh, :) hows things in the hellish sandpit of the west? ;) | 08:50 |
| owh | Haven't looked outside all day, lemmie look. | 08:50 |
| Kamping_Kaiser | hehe | 08:50 |
| owh | Kamping_Kaiser: It's sunny, dry, no squawking kiddies around and no hammer drills or earthmoving equipment. Some birds are in evidence and some hoons are carooming off the street, other than that, situation normal. | 08:51 |
| MenZa | mmm, spring. | 08:53 |
| Kamping_Kaiser | owh, sounds quite plesant. | 08:53 |
| owh | Autumn you mean :) | 08:53 |
| owh | Kamping_Kaiser: The sirens have just started up - peaceful for some :) | 08:53 |
| Kamping_Kaiser | owh, hehe | 08:54 |
| Kamping_Kaiser | speaking of sunny - its going down here, so i might unload the car. back in 5 | 08:54 |
| jpds | Hey Kamping_Kaiser. | 08:57 |
| Kamping_Kaiser | jpds, :) evening. hows your packing? ;) | 08:59 |
| owh | These south australians, very unreliable :) | 08:59 |
| jpds | Kamping_Kaiser: heh ;-) | 08:59 |
| Kamping_Kaiser | owh, oi. i'm not taking that from you! | 09:00 |
| owh | Come and get me across the Nullabor :) | 09:00 |
| jpds | Trying to figure out how to fix bug #360980 right now. | 09:00 |
| uvirtbot | Launchpad bug 360980 in system-tools-backends "[jaunty] users-admin allows creation of "admin" account" [Critical,Confirmed] https://launchpad.net/bugs/360980 | 09:00 |
| === Nicke_ is now known as Nicke | ||
| owh | jpds: Well that's kind of a special bug. | 09:01 |
| Kamping_Kaiser | owh, careful what you wish for - i've got no tafe for 2 weeks, and i've got a working car | 09:01 |
| owh | jpds: What process is actually creating the actual account/group? | 09:01 |
| Kamping_Kaiser | jpds, problem being it allows creation of a system group? (i havent looked at the actual report obviously) | 09:02 |
| jpds | owh: Some C code in the program. | 09:02 |
| owh | Kamping_Kaiser: Now all you need is fuel, food, a map and a drivers license :) | 09:02 |
| owh | jpds: Isn't that in turn calling some system call? | 09:02 |
| jpds | No. | 09:02 |
| Kamping_Kaiser | owh, got (some) fuel, can pick up pizza as i drive through adelaide, bugger the map - i'll follow the road ;D, and got licence | 09:03 |
| owh | jpds: It's directly changing the /etc/group file? | 09:03 |
| Kamping_Kaiser | s/got li/got a li | 09:03 |
| owh | Kamping_Kaiser: Make sure that you turn right when you get to Port Augusta. | 09:03 |
| jpds | Kamping_Kaiser: Yes, and creating a 'admin' user, causes the pervious group to disappear. | 09:03 |
| * owh hatches a plan to send Kamping_Kaiser to Darwin. | 09:03 | |
| owh | jpds: So it's directly changing the file? | 09:04 |
| Kamping_Kaiser | jpds, automatically? thats very broken | 09:04 |
| Kamping_Kaiser | owh, darwin? well, i've not been there yet, so wouldnt be a total disaster | 09:05 |
| jpds | owh: Probably yeah. | 09:05 |
| owh | Kamping_Kaiser: Nice part of the world. | 09:05 |
| owh | jpds: I'm downloading the source to have a gander. | 09:05 |
| Kamping_Kaiser | owh, bit tropical for me (at least, thats my excuse) | 09:05 |
| owh | Kamping_Kaiser: Nah, just take your time, drink lots of water and enjoy the scenery. | 09:06 |
| Kamping_Kaiser | owh, well, i'm up for it | 09:06 |
| owh | Kamping_Kaiser: Not much internet along the way though, how will you cope without IRC? | 09:06 |
| Kamping_Kaiser | owh, have to make do with ham radio | 09:07 |
| owh | jpds: Still trying to get my head around this. It makes no sense to me that a piece of code would overwrite an existing group. Does it do it with other existing groups as well? | 09:09 |
| jpds | owh: Probably, I haven't checked. | 09:09 |
| * owh isn't running jaunty anywhere so testing is not so simple. | 09:10 | |
| Kamping_Kaiser | owh, testing if it happens on other releases is valid testing ;) | 09:11 |
| * owh offers Kamping_Kaiser's machine off as a sacrificial lamb. | 09:11 | |
| * Kamping_Kaiser slaps owh 's priest | 09:12 | |
| Doble | Can anyone help me with my samba ACL woes? I have an explanation of the problem on experts exchange: http://www.experts-exchange.com/OS/Linux/Administration/Q_24320174.html | 09:13 |
| Doble | I'm only trying to do a VERY simple file server set up and it can't be this difficult to get some simple permissions working, so I must be doing something wrong .. | 09:17 |
| Kamping_Kaiser | your using acls, your no longer dealing with 'simple permissions' :) | 09:18 |
| Doble | well I guess, but i couldn't work out how to get unix permissions to do what I want | 09:18 |
| Doble | I want to have one file share which windows XP users can map as a network drive, then I want to divide that share into two or three subdirectories and have some staff be able to access some directories but not others | 09:20 |
| Doble | so like "Staff" and "Finance" and "Private" ... and jenny and bob need to have access to staff and finance, but not private, but jim who is the manager needs to access everything | 09:20 |
| Doble | dont think i can do that with unix permissions ? | 09:20 |
| Kamping_Kaiser | put them in groups. | 09:21 |
| Kamping_Kaiser | put bob and jenny in 'finance' group, and 'jim' in 'managers' | 09:21 |
| Kamping_Kaiser | set private's owner to 'managers' | 09:22 |
| Kamping_Kaiser | and staff/finance directories to 'finance' group | 09:22 |
| Doble | okay, give me a few minutes to try that | 09:24 |
| Doble | should I disable ACL's on my filesystem again before I do this ? | 09:24 |
| Kamping_Kaiser | you have a layer of samba on top, so i dont know how that affects what your doing. I'm just telling you how unix groups would do it : | 09:25 |
| Kamping_Kaiser | :) | 09:25 |
| Doble | hmm okay, thanks, i will try | 09:25 |
| beniwtv | hi all... I have followed the server guide for setting up bind9 on Hardy server, so that it acts as a caching name server. So it works fine when queriying from the local machine itself, but not from other machines in the network. Any ideas? | 09:35 |
| Doble | Kamping_Kaiser: I am trying to delete a file ... I am a member of the group "everyone" and the group "everyone" is the owner of the directory, and the file itself, and the group has RWX access, but when I try to delete the file I get permission denied. | 09:36 |
| Doble | beniwtv: have you set the other computers to use your server as DNS? | 09:37 |
| Kamping_Kaiser | Doble, how was the file created, and how was the delition done? | 09:37 |
| Kamping_Kaiser | Doble, also, #samba exists, probably more helpful then me ;) | 09:38 |
| beniwtv | Doble: Nope, I'm just testing it right now with dig. The thing is I need to authorize other networks to query it. | 09:38 |
| Doble | Kaiser: i cant remember how I made the file, but I'm trying to delete it using rm ... I also can't create any new files in the directory, despite having rwx | 09:39 |
| simplexio | in console ? try sudo rm | 09:40 |
| simplexio | if even that dosent work, its probably in use | 09:40 |
| simplexio | fuser file shows who uses it, i f i recall right | 09:40 |
| Doble | simplexio: sudo will work, but I should be able to delete the file, as I am the member of the group 'everyone' and 'everyone' is the owner of the folder, and the file, and the group has rwx | 09:41 |
| Doble | fuser returns nothing :) | 09:41 |
| Doble | beniwtv: sorry I dont quite understand, you've configured bind, and you want to use it as a cache, but you haven't pointed the other computers on your network at the bind server? you need to do that or the other PCS won't know where to look for DNS | 09:41 |
| simplexio | Doble: groups confirms that you are in that group | 09:41 |
| Doble | simplexio: interesting ... groups doesn't show me as a member of 'everyone' ... however if I do "sudo adduser jdoble everyone" .. I get "The user `jdoble' is already a member of `everyone'" | 09:42 |
| simplexio | Doble: logout/login,, and it fixes it in that terminal. | 09:43 |
| beniwtv | Doble: I know that :) But I'm querying it with the dig command, and returns responses when on the local machine. But from other machines I get client <ip>#49386: query (cache) '<domain>/A/IN' denied in the server logs | 09:43 |
| simplexio | Doble: or su - , updates those too, im not sure if there is another way to upgrade groups | 09:44 |
| Kamping_Kaiser | simplexio, Doble running 'login' from your prompt wil too | 09:44 |
| Doble | beniwtv: I see ... have you checked that you have enabled the network in your bind conf? and that apparmor isn't blocking the server? | 09:44 |
| Doble | simplexio: kaiser: ahh it is working now ... I wasn't aware that groups did not update immediately | 09:45 |
| beniwtv | Doble: Apparmor isn't blocking - I checked that. How can I check I have networking in bind? | 09:45 |
| Kamping_Kaiser | telnet <yourexternal ip> dns | 09:46 |
| Kamping_Kaiser | might be s/dns/named actually | 09:46 |
| Doble | beniwtv: sorry, I was confused with another conf file :) if you have bind configured it should be listening and 'just work' when you perform a dig, do you have reverse lookup set up for your subnet ? | 09:49 |
| beniwtv | Kamping_Kaiser: Yep that works, and netstat tells me it's bound on all NIC's of the server. It just wont' answer, and I think I need to authorize the networks to query it | 09:49 |
| beniwtv | Kamping_Kaiser: I think that is what the log message acutally means | 09:50 |
| Doble | beniwtv: sounds like you are right but i can't remember any config setting to enable/authorize a network | 09:51 |
| Kamping_Kaiser | I dont use bind, so cant help there. seems like a pile of overkill for my network :) | 09:51 |
| owh | Kamping_Kaiser: So, you driving yet, or just bragging? | 09:52 |
| beniwtv | Doble: It 'just works' from localhost, yes. But not from other machines, and I don't know why it would need to have reverse lookup if I query just google :) | 09:52 |
| owh | <grin> | 09:52 |
| Doble | beniwtv: I agree, I'm just stabbing in the dark ... sorry mate | 09:53 |
| beniwtv | Kamping_Kaiser: Yeah, for a home network it's probably overkill. But we need it so that our users which are connecting to the Interner get a DNS :) | 09:53 |
| beniwtv | s/Interner/Internet | 09:53 |
| Kamping_Kaiser | owh, not visiting you tonight i'm afraid, got a gNewSense release to do ;0 | 09:53 |
| owh | Fine, fine, I'll deal with the disappointment :) | 09:54 |
| Kamping_Kaiser | owh, have a drink to console yourself, or download our new release when its up;) | 09:58 |
| owh | A new release, you mean break my production machine again :) | 09:58 |
| Kamping_Kaiser | hehe | 09:59 |
| Doble | can anyone tell me why i get the error "Failed to add entry for user bill." when I log in as bill ? | 10:01 |
| Kamping_Kaiser | where is the error? | 10:02 |
| Doble | sorry, i closed chat | 10:02 |
| chris_d_adams | hi guys, I'm running ubuntu hardy server, and I'm struggling to understand why my vm isn't updating to intrepid | 10:02 |
| chris_d_adams | are there any commands I'm missing here?> | 10:02 |
| chris_d_adams | https://gist.github.com/a40f7676cc63c80e10ae | 10:02 |
| Kamping_Kaiser | Doble, where is the error? | 10:03 |
| owh | later all... | 10:03 |
| Kamping_Kaiser | owh, later mate | 10:03 |
| Doble | Kaiser: First line of the login ... so "login as: bill" "bill@192.168.2.10's password:" "Failed to add entry for user bill." | 10:03 |
| chris_d_adams | I've just run the basic "aptitude update, aptitude install update-manager-core, do-release-upgrade' steps | 10:03 |
| Doble | Kaiser: I think its related to samba | 10:03 |
| beniwtv | Doble: Have you added samba for PAM auth? | 10:05 |
| Kamping_Kaiser | afk. dinner | 10:05 |
| Doble | beniwtv: I'm not sure ... is that where samba syncs its users with ubuntu's users? If so - yes, because it is included by default when you install ubuntu 8.10 and choose "file server" which is what I did. | 10:06 |
| beniwtv | Doble: yep, it syncs users there. Maybe the logs give you some more info. Like auth.log and daemon.log | 10:08 |
| Doble | beniwtv: there doesnt seem to be any info in those two files ... just saying that 'bill' logged in | 10:10 |
| beniwtv | Doble: Anything in syslog (maybe Apparmor?) | 10:14 |
| milestone | hi folks | 10:31 |
| milestone | this mornin unattended-upgrades upgraded my packages | 10:32 |
| milestone | as always this works great | 10:32 |
| milestone | but it also updated mysql-server | 10:32 |
| milestone | the server was only stopped during the upgrade process | 10:32 |
| milestone | (3 times) | 10:32 |
| milestone | and never started | 10:32 |
| milestone | is that desired behaviour or do i need to change some configuration to get it automatically started | 10:33 |
| Actium | were you able to start it manually? anything suspicous in the log? | 10:36 |
| milestone | Actium, yes i was | 10:36 |
| milestone | and nothing suspicious in the log | 10:36 |
| milestone | i am using hardy heron | 10:36 |
| Actium | does the upgrade log state a reason, why the server hasnt been restarted? | 10:38 |
| cbeebie | Hi guys, I'm writing the "ubuntu server" course for canonical. I want to include a brief comparison of RHN/Satellite/SpaceWalk with Landscape. What are the key feature differences I should mention? | 10:42 |
| Doble | cbeebie: I can't help with your question, but maybe you can help with one of mine! I want to pursue some linux training, but I don't know where to start, are there any 'industry standard' certifications like an equivilant of a Microsoft Certified System Engineer? | 10:44 |
| cbeebie | Doble - currently Canonical offer the Ubuntu Certified Professional (UCP) based on LPI level 1 plus an Ubuntu specific exam (LPI199) | 10:45 |
| Doble | cbeebie: thanks, what is LPI level 1 ? | 10:47 |
| cbeebie | Linux Professional Institute | 10:47 |
| milestone | Actium, do you want me to post the log to some pastebin? | 10:47 |
| Actium | worth a shot | 10:48 |
| Doble | cbeebie: thanks, I'll check it out | 10:48 |
| cbeebie | Doble, a good place to start might be http://www.ubuntu.com/training/ | 10:49 |
| Doble | cheers | 10:51 |
| Doble | :( no training in australia | 10:51 |
| cbeebie | I can come and deliver some if you want ... ;-) | 10:52 |
| Kamping_Kaiser | Doble, no one lives in australia, what are you talking about :p | 10:53 |
| Doble | lol | 10:53 |
| Kamping_Kaiser | Doble, have to say i wasnt hugely impressed by my look at lpi , but perhaps i'll go do it one day. | 10:53 |
| Kamping_Kaiser | ;) | 10:53 |
| cbeebie | LPI has brought updated exam objectives online quite recently, you might want to take another look | 10:55 |
| cbeebie | www.lpi.org | 10:56 |
| Kamping_Kaiser | cbeebie, ah really? *visits* | 10:56 |
| Doble | lpi don't offer anything in my reigon either lol | 10:59 |
| eagles0513875 | hey guys | 11:30 |
| eagles0513875 | im trying to upgrade from intrepid to jaunty for some reaason when i issue the do-release-upgrade to upgrade to the beta nothing happens its saying no new release found | 11:30 |
| eagles0513875 | !upgrade | 11:31 |
| ubottu | For upgrading, see the instructions at https://help.ubuntu.com/community/UpgradeNotes - see also http://www.ubuntu.com/getubuntu/upgrading | 11:31 |
| eagles0513875 | i followed the instructions that were on that how to but for some reason its not working | 11:32 |
| milestone | Actium, here you go http://pastebin.com/m4a1553fc | 11:32 |
| Actium | that is indeed weird | 11:33 |
| eagles0513875 | Actium: you have any idea why i cant upgrade from intrepid version of server to jaunty | 11:34 |
| Actium | which error are you getting, eagles0513875. i did just that 3 days ago. | 11:34 |
| eagles0513875 | when i run the do-release upgrade command it keeps telling me no new release found | 11:35 |
| eagles0513875 | i made sure that the upgrade manager core is installed | 11:35 |
| Actium | eagles0513875, you gotta use "do-release-upgrade -d". | 11:35 |
| eagles0513875 | as well as made sure the file that you have to edit has priority =normal which it does | 11:35 |
| eagles0513875 | Actium: ahh then site is wrong | 11:35 |
| Actium | the -d is mandatory since jaunty is still flagged as in development (which it is). | 11:36 |
| Actium | but it's working flawlessly on my machine. | 11:36 |
| eagles0513875 | ahhh i learned something new | 11:36 |
| eagles0513875 | Actium: im kinda weary of doing this upgrade like tihs | 11:36 |
| eagles0513875 | kubuntu has issues when doing it | 11:36 |
| eagles0513875 | your left with old stuff on kde like the old network manager and package manager | 11:36 |
| Actium | i made a complete backup of my box, before i launched the upgrade. | 11:36 |
| eagles0513875 | this is on an old laptop | 11:37 |
| eagles0513875 | im on me new laptop | 11:37 |
| eagles0513875 | ended up using my usb boot pen drive to install it | 11:37 |
| eagles0513875 | which is a nice feature :) | 11:37 |
| Actium | indeed, installing the netbook remix of ubuntu with my pendrive took like 5 minutes on an aspire one. | 11:38 |
| eagles0513875 | that only works with netbooks with screens up to 10 inches | 11:38 |
| eagles0513875 | this is an hp tablet which has a 12.1 inch screen | 11:38 |
| eagles0513875 | one thing i love about kubuntu and all this distro is how much stuff works outa the box | 11:38 |
| eagles0513875 | for me on this tablet just about everything minux wacom tablet stuff | 11:39 |
| beniwtv | hey all... any ideas what I have to put in /etc/hosts so that postfix can resolve a domain to an internal IP? I've tried <hostname> <ip> but postfix ignores that. | 11:39 |
| ikonia | beniwtv: look at your nsswitch.conf to check the order | 11:40 |
| ikonia | beniwtv: you'll need an FQDN | 11:40 |
| Actium | milestone: no errors, nothing suspicious, but it won't restart the server. it's probably a bug in the upgrade script, or whatever. if the mysqld starts after a reboot of your computer - check that - i'd just let it be. | 11:40 |
| Actium | eagles0513875, we're in the wrong channel to talk about laptops/netbooks/tablet pcs ... ;) | 11:41 |
| beniwtv | ikonia: It is hosts: files dns, and yes, of course I put a complete domain... it was just an example acutally | 11:41 |
| ikonia | beniwtv: can you ping it | 11:41 |
| eagles0513875 | sry Actium | 11:41 |
| beniwtv | ikonia: yep | 11:41 |
| ikonia | beniwtv: thats odd, but postfix ignores it | 11:41 |
| beniwtv | ikonia: I also can telnet just fine | 11:42 |
| ikonia | beniwtv: what is the hosting in the postfix main file ? | 11:42 |
| beniwtv | ikonia: Hosting? | 11:43 |
| ikonia | sorry - host | 11:44 |
| ikonia | what host is in the postfix main file | 11:44 |
| beniwtv | ikonia: "myhostname = radius02" Do you mean this? | 11:45 |
| milestone | Actium | 11:45 |
| ikonia | beniwtv: is that inthe postfix onfig | 11:45 |
| milestone | ups sorry | 11:45 |
| milestone | Actium, a bug in an upgrade skript on a production server aint that funny you know | 11:45 |
| beniwtv | ikonia: Yep.... I just need to send monitoring e.mails to a server, but that server resolves in DNS as an external address on the same network, and my pix wont' let that happen. So I need to put the internal IP somewhere... maybe specifying a relay? | 11:46 |
| Doble | I'm reading one of the samba docs and it lists a command - "chmod -R ug+rwxs,o-r+x /data" can anyone tell me what the "s" from "rwxs" does? | 12:18 |
| Actium | sorry, milestone, just came back from lunch. of course it aint funny, but there's nothing i can do to determine what really caused that failure to restart. if you feel obliged to investigate, do so and if you find out, it's a bug in the update script, report it to the devs. that's how a major branch of oss improvent works, after all. | 12:44 |
| soren | Doble: It sets the setuid/setgid bit. | 12:47 |
| milestone | Actium, :) | 12:48 |
| milestone | Actium, I know. I am doing work on the apache turbine project | 12:48 |
| milestone | Actium, so is there a way to further investigate an upgrade problem without a package that needs upgrading? If yes, tell me more, and i will be more than happy to further investigate | 12:49 |
| Actium | downgrade and then upgrade again. | 12:50 |
| Actium | the previously installed package should still reside in you cache directory. | 12:50 |
| Actium | and the postinstall script of the new package should provide you with very valuable information. | 12:51 |
| milestone | on a productionsite. it will take me some time. probably sometime this or next week | 12:51 |
| Actium | in that case i'd rather let it be. messing around with a production box is not exactly what i fancy doing. ;) | 12:52 |
| Actium | i'm just glad my semi-production server "survived" the upgrade to jaunty without any major casualties, the other day. | 12:54 |
| milestone | ;) | 12:54 |
| === zoopster1 is now known as zoopster | ||
| milestone | but i think i know the answer already | 12:55 |
| milestone | thinking about it | 12:55 |
| Actium | "never change a running system"? | 12:55 |
| milestone | IIRC the postinstall script calls invoke-rc.d | 12:55 |
| milestone | since this a drbd cluster system with mysqld being controlled by heartbeat | 12:56 |
| milestone | the server is not started just stopped | 12:56 |
| milestone | invoke-rc.d will check if there are symlinks from the current RC directories to the init skript and call it only if they are there | 12:57 |
| milestone | so | 12:59 |
| milestone | what have i won? | 12:59 |
| Actium | honestly: dunno | 13:00 |
| milestone | Actium, i am 100% that that is the problem | 13:00 |
| Actium | then maybe it's worth a bug-report. | 13:00 |
| milestone | that won't do because it is not a bug when not in a cluster | 13:01 |
| Actium | well, then its a bug that only takes effect when it's a cluster, but its a bug anyway. (imho) | 13:02 |
| SockPants | hi | 14:02 |
| SockPants | what is the meaning of cpu load in the form n.nn, m.mm, p.pp .. ? | 14:02 |
| === bloggerfag is now known as bogeyd6 | ||
| Actium | http://en.wikipedia.org/wiki/Load_(computing) | 14:03 |
| SockPants | http://digg.com/d1ok8m | 14:04 |
| === bittin` is now known as bittin^` | ||
| soren | kirkland: I don't know if you noticed, but I came up with a backtrace for that kvm segfault we discussed yesterday. | 14:25 |
| kirkland | soren: no, i missed it.... | 14:26 |
| kirkland | soren: what do you have? | 14:26 |
| soren | https://bugs.edge.launchpad.net/ubuntu/+source/kvm/+bug/359447 | 14:26 |
| uvirtbot | Launchpad bug 359447 in kvm "kvm segfaults" [High,Triaged] | 14:26 |
| kirkland | soren: oh, yeah, i haven't even made it through my bug list yet today | 14:29 |
| kirkland | soren: still sorting through irc pings, then mail | 14:29 |
| soren | kirkland: Alright, no worries. | 14:29 |
| kirkland | soren: so the ide block device, huh | 14:30 |
| soren | kirkland: Perhaps. | 14:31 |
| soren | kirkland: That's where it's triggered, at least. | 14:31 |
| soren | kirkland: I suppose I could switch to virtio and see if it helps any. | 14:32 |
| soren | kirkland: Heck, I'll give it a shot. It can't get much worse than it is right n ow. | 14:33 |
| kirkland | soren: still a block device, just using virtio, though? | 14:34 |
| * soren is not sure he understands the question. | 14:35 | |
| kirkland | soren: you're not dd'ing the block device to a file first | 14:36 |
| yann2 | wrong channel guys :) | 14:36 |
| kirkland | soren: which is what I was going to suggest | 14:36 |
| kirkland | yann2: we're all over the place | 14:36 |
| soren | kirkland: It... /is/ a file. | 14:36 |
| soren | ? | 14:37 |
| kirkland | soren: then i misunderstood your point | 14:37 |
| kirkland | soren: i thought you said previously that the target disk was a block device | 14:37 |
| soren | It's a file-backed, raw-formatted, virtio-connected virtual block device. | 14:38 |
| kirkland | soren: okay, thanks | 14:41 |
| * Faust-C wonders about creating a mail server and configuring TLS | 14:54 | |
| Actium | you might wanna try out dovecot-postfix (http://packages.ubuntu.com/jaunty/dovecot-postfix). unfortunately has only become available in jaunty. | 15:04 |
| LyonJT | Hey! | 15:12 |
| LyonJT | does ubuntu-server have directory capabilites? | 15:14 |
| oruwork | LyonJT, can you be a little more specific with your question / | 15:17 |
| genii | ldap? | 15:17 |
| LyonJT | yes, sorry im from a windows enviroment thats why, for example on windows server you have active directory for groups users group policys etc do you have this in ubuntu server? | 15:20 |
| eagles0513875 | LyonJT: you can actually setup samba to be a domain controller | 15:22 |
| LyonJT | is theree a ubuntu equilvent? | 15:23 |
| andol | well, at least as a NT-domain controller. | 15:23 |
| eagles0513875 | LyonJT: any distro you can youse samba as a domain controller | 15:26 |
| Faust-C | Actium, ty | 15:27 |
| Faust-C | eagles0513875, samba3 as a DC isnt the solution by any means | 15:28 |
| Faust-C | LyonJT, you can use items like samba to auth TO AD or use items like fedora-directory server to sync between AD and FDS (LDAP) | 15:28 |
| Actium | you're welcome | 15:28 |
| Fenix|work | Greetings and salutations! | 15:30 |
| Fenix|work | I've compiled my own kernel module, and would like advise on loading it on boot. | 15:30 |
| ikonia | Fenix|work: just depmod and modprobe it | 15:30 |
| Fenix|work | ikonia, and stick it in /etc/modules? | 15:31 |
| Faust-C | felipe_, yes | 15:31 |
| Faust-C | err Fenix|work * | 15:31 |
| ikonia | well in the correct sub dir of /lib/mdules/$kernel etc | 15:31 |
| Fenix|work | ikonia, I compiled the module... then created an appropriate directory structure under /lib/modules/$kernel-ver/kernel/fs/ | 15:33 |
| Fenix|work | the dir name is the same as the module name | 15:33 |
| ikonia | Fenix|work: perfect | 15:33 |
| ikonia | Fenix|work: what is the module out of interest ? | 15:33 |
| Fenix|work | qnx4fs module | 15:33 |
| ikonia | ooh you've not wrote it, just built it | 15:33 |
| Fenix|work | provides read/write support for qnx4 file systems. | 15:33 |
| ikonia | yup | 15:33 |
| Fenix|work | depmod -a | 15:34 |
| Fenix|work | ? | 15:34 |
| ikonia | bang on | 15:34 |
| Fenix|work | modprobe <module name> | 15:34 |
| ikonia | super | 15:35 |
| Fenix|work | then <module name> on it's own line in /etc/modules and a reboot to make sure it works? | 15:36 |
| ikonia | Fenix|work: but in theory if something needs qnx4 it should auto load it | 15:36 |
| Fenix|work | I have a qnx4 partition that I want to mount on boot | 15:36 |
| ikonia | should be fine | 15:37 |
| Fenix|work | there it is. It works. | 15:40 |
| Fenix|work | thanks ikonia | 15:40 |
| Fenix|work | oh... ikonia while I'm here... could you give me some advice on rsync? | 15:43 |
| Fenix|work | I have an rsync daemon running on another box for / | 15:44 |
| Fenix|work | but I want to exclude a directory and a couple of files. | 15:44 |
| Fenix|work | and I have no clue how to do that | 15:44 |
| Actium | under which user is ist running? | 15:45 |
| Fenix|work | root | 15:45 |
| Actium | that's gonna be difficult. | 15:45 |
| Fenix|work | Actium, can you explain please? | 15:45 |
| LyonJT | Faust-C: Is fedora directory server the equilavant to ad? | 15:46 |
| Actium | in case rsyncd does not have any built-in directory-/file-exemption features, it's impossible. | 15:46 |
| Faust-C | LyonJT, no, nothing is "equal" to AD | 15:46 |
| LyonJT | Lool well in the same precepals | 15:46 |
| LyonJT | princepals* | 15:46 |
| Faust-C | well its LDAP but "simpler" | 15:47 |
| Fenix|work | Actium, that's fine, but what about the rsync client pulling from the daemon? Can I add excludes there? | 15:47 |
| Faust-C | you can sync FDS to AD | 15:47 |
| LyonJT | okay | 15:47 |
| Faust-C | which is awsome but im still working out bugs w/ ubuntu | 15:47 |
| Faust-C | i use it w/ centos | 15:47 |
| lool | LyonJT: Hmm? | 15:47 |
| Actium | you could set the unix permissions for those files in a way that root would not have read access, but usually root doesn't give a damn about permissions. so unix permissions won't do. | 15:47 |
| LyonJT | and what apt do i need install to get fedora directory server on ubuntu server? | 15:47 |
| Faust-C | LyonJT, sec lemme find link | 15:47 |
| LyonJT | thanks! | 15:47 |
| Actium | if possible, the excludes have to be set by the server. you can't just kindly ask your clients to specify a few parameters, can you? | 15:48 |
| Faust-C | LyonJT, http://directory.fedoraproject.org/, look around the site, theres a howto for ubuntu | 15:48 |
| Fenix|work | Actium, I am the server and the client :) | 15:48 |
| LyonJT | Thank you Faust-C | 15:48 |
| Faust-C | LyonJT, yw, btw bookmark my site: virtualdisaster.net, once i figure out how to make AD and linux play nice ill post it | 15:49 |
| * Faust-C site is messed up atm but remember the link | 15:49 | |
| Fenix|work | I am using rsync as a near real-time backup of a system. I want to back up everything (qnx4 system), but want to ignore the /dev directory and a couple of .files in the root | 15:49 |
| Faust-C | Fenix|work, i say look into dar | 15:50 |
| Actium | then you should use the "--exclude=PATTERN"-parameter | 15:50 |
| Faust-C | then rsync the files over once its complete | 15:50 |
| LyonJT | thank you very much Faust-C | 15:50 |
| Faust-C | LyonJT, yw and good luck, you can do it, | 15:50 |
| Fenix|work | Actium, exclude on the daemon when it starts, or on the client pulling from the daemon? | 15:50 |
| Faust-C | Fenix|work, dar.... | 15:51 |
| LyonJT | Hopefully! | 15:51 |
| Faust-C | if you want a accurate complete backup use the right tool for the right job | 15:51 |
| Fenix|work | Faust-C, dar is not supported on QNX4 | 15:51 |
| Actium | client will suffice. any btw: you don't even need to use the daemon, in case you have a running ssh-server. | 15:51 |
| Faust-C | Fenix|work, youre mounting the filesystem arent you | 15:51 |
| Actium | rsync can easily stream itself over ssh | 15:51 |
| Fenix|work | Actium, I haven't been able to successfully port over OpenSSH to QNX4 yet | 15:52 |
| Actium | ok | 15:52 |
| Fenix|work | Faust-C, I have two QNX boxes... the one I want to sync is running QNX. The one I am syncing to is ubuntu-server with qnx4fs mounted partition. | 15:53 |
| LyonJT | Faust-C: Quick question is there a command to sleep a ubuntu server? | 15:53 |
| LyonJT | and does it support Wake on lan? | 15:53 |
| Fenix|work | The hope is to sync the live box to the backup so if something were to happen to the live one, I can change boot order of the ubuntu server and boot a live copy of the backup with identical settings | 15:53 |
| Faust-C | LyonJT, WOL depends on hardware, and yes theres a sleep command for desktop, idk about for server (i doubt it) | 15:54 |
| Fenix|work | Actium, the exclude-from file, what format is it? | 15:55 |
| LyonJT | idk? | 15:56 |
| Fenix|work | i don't know | 15:56 |
| Actium | probably just a text file with patterns to exclude seperated by newlines. | 15:56 |
| LyonJT | Sorry that was to Faust-C | 15:56 |
| Faust-C | LyonJT, no lol thats what idk means, i dont know | 15:56 |
| Fenix|work | LyonJT, that was the answer to your question | 15:56 |
| LyonJT | ohhh | 15:57 |
| LyonJT | sorry lol | 15:57 |
| LyonJT | i should know that! | 15:57 |
| LyonJT | thank you though | 16:01 |
| LyonJT | very simple question but whats the command to enable root | 16:06 |
| Actium | sudo passwd | 16:07 |
| LyonJT | thanks! | 16:10 |
| Faust-C | man i need to create a mail server but have to make sure its simple to administer | 16:19 |
| LyonJT | you done it before? | 16:20 |
| Faust-C | nope, cause what i want is kinda complex | 16:20 |
| LyonJT | Ohh fair enough | 16:20 |
| Faust-C | i want it to auth to AD/LDAP and have a simple administration interface | 16:21 |
| LyonJT | tricky! | 16:21 |
| LyonJT | are you going to code it yourself? | 16:21 |
| Faust-C | hopefully no | 16:22 |
| LyonJT | How do you share files? | 16:22 |
| LyonJT | is there a command | 16:22 |
| Faust-C | samba | 16:22 |
| Faust-C | smbclient | 16:22 |
| LyonJT | what if the client is os x | 16:22 |
| LyonJT | is there a afp equilvent | 16:23 |
| LyonJT | dw | 16:23 |
| LyonJT | i have found it | 16:23 |
| ivoks | netatalk | 16:23 |
| ivoks | but i would suggest using samba | 16:23 |
| LyonJT | netatalk? is that like samba? | 16:23 |
| ivoks | apple said they are abandoning AFP | 16:23 |
| ivoks | + they broke it in latest OSX | 16:24 |
| ivoks | well, they brake samba and cups all the time, so that's not news :D | 16:24 |
| ivoks | LyonJT: yes, it's like samba; file sharing | 16:25 |
| LyonJT | okay thank you | 16:25 |
| ivoks | if you have latest osx | 16:25 |
| ivoks | make sure to patch it :) | 16:25 |
| LyonJT | i have found a good guide : http://www.kremalicious.com/2008/06/ubuntu-as-mac-file-server-and-time-machine-volume/ | 16:25 |
| ivoks | or disable restriction for cleartext passwords | 16:25 |
| LyonJT | how can you disable clear text passwords? or is a built in already | 16:26 |
| ivoks | look at the google | 16:27 |
| ivoks | this howto recommends building your own package | 16:27 |
| LyonJT | okay will do! | 16:27 |
| ivoks | you can do that or enable clear text passwords in osx | 16:27 |
| LyonJT | okay! | 16:27 |
| ivoks | don't do 'sudo DEB_BUILD_OPTIONS=ssl dpkg-buildpackage -rfakeroot' | 16:28 |
| ivoks | leave out 'sudo | 16:28 |
| ivoks | and don't do 'sudo gedit /etc/netatalk/afpd.conf' | 16:29 |
| LyonJT | is that because ill be in root already? | 16:29 |
| ivoks | edit /etc/default/netatalk | 16:29 |
| ivoks | not, you should never build packages as root | 16:29 |
| LyonJT | whys that | 16:29 |
| ivoks | caus there might be rm -rf / in scripts | 16:30 |
| LyonJT | so leave them two out ye? | 16:31 |
| LyonJT | i was to use afp though | 16:31 |
| LyonJT | want* | 16:31 |
| ivoks | have you ever used debian or ubuntu before? | 16:31 |
| LyonJT | Not really | 16:32 |
| LyonJT | Here and there | 16:32 |
| ivoks | then follow the guide | 16:33 |
| ivoks | but just leave out sudo in package building | 16:33 |
| LyonJT | Lol okay will do | 16:33 |
| LyonJT | shall i be root when i do it? | 16:33 |
| beniwtv | Hi all... I have a DNS now set-up, with forwarders commented out. However, it still resolves domains like google or so. Any ideas? | 16:33 |
| ivoks | no | 16:33 |
| ivoks | beniwtv: recursion no;? | 16:34 |
| beniwtv | ivoks: that was it! thanks (still a bind newbie) :) | 16:35 |
| ivoks | beniwtv: allow-query-cache ? | 16:35 |
| beniwtv | ivoks: It works with recursion no; already, should I also use allow-query-cache? | 16:39 |
| ivoks | beniwtv: you should allow query cache only to local net | 16:42 |
| ivoks | beniwtv: have you set up acls? | 16:42 |
| beniwtv | ivoks: No acls as I need it t be able to be queried from everywhere... (it will be the second authorative for our domains) | 16:50 |
| Fenix|work | Greetings and salutations (again) | 16:58 |
| Fenix|work | Actium, you have a moment? | 16:59 |
| Actium | go ahead | 16:59 |
| Fenix|work | Actium, is it possible to rsync '/' ? | 16:59 |
| ivoks | :) | 16:59 |
| Fenix|work | I'm getting the following when I try... receiving file list ... Offset underflow: file-length is negative | 16:59 |
| Actium | i'll try ... | 17:00 |
| Fenix|work | any subdirectory in rsyncd works though | 17:00 |
| Actium | works for me. however i'm not using rsyncd, but rsync via ssh. | 17:01 |
| Fenix|work | I think it isn't supported in my version | 17:01 |
| Fenix|work | reading a little further... (sighs I know, should have sooner) it replies: rsync error: requested action not supported (code 4) at flist.c(846) | 17:02 |
| Actium | rsync --version | 17:02 |
| Actium | im running 3.0.5 | 17:02 |
| Fenix|work | QNX rsyncd is 2.6.8 | 17:02 |
| Fenix|work | can't seem to port a higher version | 17:03 |
| Actium | sounds ancient to me | 17:03 |
| Fenix|work | 2006 :) | 17:04 |
| * Faust-C will use citadel and auth it against AD | 17:04 | |
| LyonJT | is there a way to search a file? | 17:05 |
| Actium | grep it? | 17:05 |
| Faust-C | LyonJT, find . -name *name* | 17:05 |
| Faust-C | LyonJT, find . -name *name* >> search.txt | 17:05 |
| * Actium is stupid. he thought LyonJT wanted to search a file's contents. | 17:06 | |
| LyonJT | so i can use find . -myfile.txt ? | 17:08 |
| Actium | no: find . -name myfile.txt | 17:09 |
| Actium | g2g | 17:12 |
| uvirtbot | New bug: #361802 in samba (main) "net sam list groups causes a segmentation fault" [Undecided,New] https://launchpad.net/bugs/361802 | 17:16 |
| LyonJT | is there a way to remotely install a ubuntu server? | 17:29 |
| === tuxlinux_ is now known as tuxlinux | ||
| mdz | kirkland: I just had a panic following Apr 15 17:30:34 perseus kernel: [254450.083631] kvm: 26161: cpu0 unhandled wrmsr: 0xc0010117 data 0 | 17:35 |
| ivoks | LyonJT: yes | 17:40 |
| ivoks | take care everybody | 17:40 |
| mathiaz | ivoks: bye | 17:41 |
| jmedina | hi ivoks | 17:42 |
| kirkland | mdz: panic in the guest or host? | 17:46 |
| mdz | kirkland: host | 17:46 |
| kirkland | mdz: host crashed? locked up? | 17:46 |
| mdz | kirkland: I saw X mostly freeze, but the mouse was still responding. after various attempts to revive it, I tried alt+sysrq+k and was rewarded with a flashing caps lock | 17:47 |
| kirkland | mdz: doing anything special at the time, in the guest? | 17:48 |
| mdz | kirkland: nope | 17:49 |
| mdz | kirkland: had just booted a DVD for testing, was sitting in the desktop | 17:49 |
| sbeattie | mdz: mouse still moving but display wedged is how X/intel GPU freezes seem to manifest in jaunty. | 17:49 |
| kirkland | mdz: upstream had previously told me that those messages were benign, overzealous logging | 17:49 |
| kirkland | mdz: i'll check with him again | 17:49 |
| kirkland | mdz: can you try one thing .... | 17:49 |
| kirkland | mdz: could you add clock=acpi_pm to your boot line? | 17:50 |
| kirkland | mdz: https://launchpad.net/bugs/361754 | 17:50 |
| uvirtbot | Launchpad bug 361754 in kvm "guest needs to boot with clock=acpi_pm" [Undecided,New] | 17:50 |
| kirkland | mdz: dholbach reported something similar this morning | 17:50 |
| mdz | kirkland: it's possible that this was actually bug 359392 | 17:50 |
| uvirtbot | Launchpad bug 359392 in xserver-xorg-video-intel "[i965] X freezes starting on April 3rd" [Critical,Triaged] https://launchpad.net/bugs/359392 | 17:50 |
| mdz | kirkland: but I suspected kvm because of that message | 17:50 |
| mdz | kirkland: I can, but I can't reproduce the bug | 17:50 |
| kirkland | hmm | 17:51 |
| kirkland | bug #243393 | 17:53 |
| uvirtbot | Launchpad bug 243393 in kvm "dmesg is flooded with warnings in kvm/mmu.c" [Low,Confirmed] https://launchpad.net/bugs/243393 | 17:53 |
| kirkland | mdz: who is Bryan Wu? | 17:54 |
| kirkland | mdz: https://bugs.edge.launchpad.net/ubuntu/+source/linux/+bug/325851 | 17:54 |
| uvirtbot | Launchpad bug 325851 in linux "[133672.221112] kvm: 28400: cpu0 unhandled wrmsr: 0xc0010117 data 0 " [Medium,Triaged] | 17:54 |
| kirkland | mdz: i notice that he's assigned that bug, i don't recognize the name | 17:54 |
| * kirkland steps out for a bite to eat, back shortly | 17:54 | |
| jcastro | nearly-last call for openweek sessions: https://wiki.ubuntu.com/UbuntuOpenWeek/Prep | 17:55 |
| jcastro | soren: ^^^^ | 17:55 |
| jcastro | mathiaz: ^^^ | 17:55 |
| mdz | kirkland: Bryan Wu is one of the newest members of the canonical kernel team | 17:55 |
| mdz | kirkland: he's based in Shanghai | 17:55 |
| mdz | kirkland: it did happen just as I was switching desktops, so that hints that it might be 359392 | 17:56 |
| eagles0513875 | Faust-C: what can be used as a domain controller | 18:15 |
| jmedina | eagles0513875: you can use Samba as a NT style DC | 18:17 |
| eagles0513875 | jmedina: i know but Faust-C told me that i couldnt for some reason | 18:19 |
| jmedina | eagles0513875: I use samba domain controllers since 5 years ago without problems | 18:19 |
| mathiaz | jcastro: updated - thanks | 18:20 |
| jmedina | they are ldap based | 18:20 |
| eagles0513875 | jmedina: thanks for enlightening me | 18:20 |
| jmedina | you can also add strong security to the recipe using kerberos | 18:20 |
| jmedina | eagles0513875: I have a howto | 18:20 |
| eagles0513875 | sweet link me | 18:20 |
| jmedina | it is in spahish but I think it has good examples | 18:20 |
| eagles0513875 | might set up a domain controller on me old laptop which im converting to iptable firewall and bind server | 18:21 |
| jmedina | http://tuxjm.net/docs/cursos/Samba+OpenLDAP+PAM+NSS-4Ubuntu/html/ | 18:21 |
| eagles0513875 | jmedina: yo comprendo poquito espanol | 18:21 |
| eagles0513875 | lol | 18:21 |
| jmedina | Im in the process of documenting ACLs | 18:21 |
| jmedina | eagles0513875: good | 18:21 |
| eagles0513875 | kool | 18:21 |
| eagles0513875 | ill work on that later i need ot get bind setup i think lol | 18:22 |
| LyonJT | how can you enable ufw? | 18:22 |
| jmedina | you dont need DNS | 18:22 |
| eagles0513875 | jmedina: i am running a router yes but i would like it to use it as a dns cache for sites i visit | 18:23 |
| jmedina | but is a good idea if you are masquerading your lan, you can save bw using caching dns | 18:23 |
| eagles0513875 | thats what i am wanting to do | 18:23 |
| eagles0513875 | !info masquerading | 18:23 |
| ubottu | Package masquerading does not exist in intrepid | 18:23 |
| eagles0513875 | !masquerading | 18:23 |
| ubottu | Sorry, I don't know anything about masquerading | 18:23 |
| jmedina | eagles0513875: I mean NAT | 18:24 |
| eagles0513875 | right now im using a router which is doing the nat | 18:24 |
| jdstrand | LyonJT: man ufw. basically: 'sudo ufw enable' | 18:27 |
| LyonJT | thanks jdstrand | 18:27 |
| LyonJT | does anyone have a guide to unix operating system.. example what etc, usr etc them folders are used for? | 18:40 |
| giovani | LyonJT: filesystem heirarchy is not going to be consistent between operating systems based on unix | 18:42 |
| jmedina | LyonJT: read FHS (Filesystem Hierarchy Standard) http://pathname.com/fhs/ | 18:42 |
| LyonJT | thank you | 18:42 |
| LyonJT | No i understand that but i would like to understand the basic principles | 18:43 |
| giovani | yep the FHS guide is a good one -- but very broad | 18:43 |
| LyonJT | thanks | 18:44 |
| Faust-C | jmedina, so you use samba as a domain controller | 18:45 |
| Faust-C | a NT domain controller | 18:45 |
| Faust-C | which is worthless | 18:45 |
| jmedina | worthless? | 18:45 |
| Faust-C | cause you cant mange systems as fine grained as you can w/ AD | 18:45 |
| jmedina | why? | 18:45 |
| Faust-C | maybe cause ppl need more than authentication | 18:46 |
| jmedina | well my implementation works I use poledit for system policies | 18:46 |
| jmedina | it is harder but works | 18:46 |
| * Faust-C googles poledit | 18:46 | |
| Faust-C | imo work smarter not harder | 18:46 |
| jmedina | poledit is the old program for creating system policies in nt4 dc | 18:46 |
| Faust-C | oic | 18:46 |
| jmedina | poledit.exe it is shipped with resource kit | 18:47 |
| Faust-C | eh ... id rather use a single AD server and FDS | 18:47 |
| jmedina | FDS? | 18:48 |
| Faust-C | fedora directory server | 18:48 |
| Faust-C | its a LDAP server | 18:48 |
| jmedina | well I dont need AD, and my customers cant afford for a AD licence and CALs | 18:48 |
| Faust-C | like Sun Directory | 18:48 |
| jmedina | yes I know the old technology from FDS :D | 18:48 |
| Faust-C | you dont need a AD license | 18:49 |
| jmedina | well I mean the windows license | 18:49 |
| Faust-C | you need one server license and then user cals which arent expensive | 18:49 |
| jmedina | Faust-C: well probably for you arent expensive | 18:49 |
| Faust-C | or you can use FDS and pGINA | 18:49 |
| jmedina | pgina is not maintained | 18:50 |
| Faust-C | jmedina, we're dirt poor atm but i wont waste money or time | 18:50 |
| Faust-C | and using a NT DC is still supported? | 18:51 |
| jmedina | well it works with win98-vista clients | 18:52 |
| Faust-C | well good luck migrating to anything else | 18:52 |
| Faust-C | i plan to use FDS or some kind of LDAP server as the base and then AD | 18:53 |
| jmedina | Faust-C: can you explain more about that solution? | 18:53 |
| Faust-C | jmedina, create a FDS server, then at least you can auth clients against that | 18:54 |
| Faust-C | if you happen to get funds for AD you can sync FDS w/ AD | 18:54 |
| Faust-C | or sync to any other standards compliant LDAP server | 18:54 |
| jmedina | well I dont use FDS, I use OpenLDAP | 18:54 |
| Faust-C | such as eDir | 18:54 |
| jmedina | samba with ldap backend | 18:55 |
| Faust-C | you can use FDS w/ samba, just as you can w/ any LDAP server | 18:55 |
| jmedina | yeap I know, but I dont see any advantage at the moment | 18:55 |
| Faust-C | well consider this, if you get hit by a bus, whom will take over | 18:56 |
| jmedina | Faust-C: do you know if samba4 will support FDS? | 18:56 |
| Faust-C | doesnt matter cause samba is standards compliant | 18:56 |
| Faust-C | meaning it will work w/ any standards compliant LDAP server | 18:56 |
| jmedina | I know they added support for openldap as backend | 18:56 |
| jmedina | I mean integrated, samba team has been working with openldap team for a complete integration | 18:57 |
| Faust-C | idk setting up FDS takes a few hours (like 2) compared to openldap | 18:57 |
| Faust-C | not to mention native consoles for MS and Linux | 18:58 |
| jmedina | openldap team has been helping samba developers to solve some ldap implementations with AD schemas | 18:58 |
| jmedina | I know nothing about FDS and samba4 integration | 18:59 |
| Faust-C | youre looking at this very backwards | 19:00 |
| Faust-C | focus on future proofing your infrastructure, not creating a home brewed solution that in reality is more expensive than a 3rd party solution | 19:01 |
| jmedina | Im not sure about that right now, I need to test FDS and try to achieve all the features I do with openlda+samba | 19:03 |
| Faust-C | jmedina, it supports samba, most "standards" compliant LDAP servers do | 19:04 |
| Faust-C | plus it leaves the option to use AD if you ever need to | 19:05 |
| * Faust-C doesnt like using MS but it has its place | 19:05 | |
| jmedina | Faust-C: Im reading that samba4 has FDS support :D | 19:06 |
| Faust-C | sweet | 19:06 |
| Faust-C | im actually looking forward to samba4 | 19:06 |
| jmedina | I need to catch up with FDS compatibility | 19:06 |
| jmedina | --ldap-backend-type=fedora-ds | 19:06 |
| jmedina | :D | 19:06 |
| Faust-C | jmedina, hell look at Sun Directory server (its based off FDS, well RHDS) | 19:07 |
| jmedina | Faust-C: mm but Sun says Sun dir it uses old technolgy they are migrating to OpenDS | 19:08 |
| Faust-C | jmedina, o rly, didnt know that, | 19:08 |
| Faust-C | wow looks nice | 19:08 |
| jmedina | https://www.opends.org/wiki/page/ProjectDefinition#section-ProjectDefinition-WhyNotOpenSourceTheCurrentSunJavaSystemDirectoryServer | 19:09 |
| Faust-C | jmedina, btw i only "nag" at you cause i want to see you succeed!! | 19:09 |
| Faust-C | jmedina, hmm its true about the FDS thing | 19:10 |
| Faust-C | the channel is full but yet i hardly see any docs on FDS | 19:10 |
| Faust-C | but i have ONE that is uber awsome | 19:10 |
| jmedina | Faust-C: about what thing? | 19:11 |
| Faust-C | jmedina, that no one has much interest in FDS | 19:11 |
| Faust-C | sadly.... | 19:11 |
| jmedina | All people I know says something like: "bahhh, old technology...." | 19:12 |
| jmedina | people that at some time used netscape or sun directory, then migrated to openldap for performance and support reasons | 19:12 |
| jmedina | that is one of the reasons HP migrated all theri enterprise directory from propietary to openldap | 19:13 |
| Faust-C | jmedina, the only thing i do not like about openldap | 19:14 |
| Faust-C | is the manual configuration, i dont mind a terminal (considering all my personal systems but one are linux) but man come on | 19:14 |
| Faust-C | and all the docs are overly technical | 19:14 |
| jmedina | yeap, but that can be improved and we can help | 19:15 |
| Faust-C | of course | 19:16 |
| Faust-C | ive dedicated my site to creating "enterprise" documentation | 19:16 |
| Faust-C | to show that opensource can work in the enterprise | 19:16 |
| jmedina | good | 19:17 |
| jmedina | and what is our site? | 19:17 |
| jmedina | *your | 19:17 |
| Faust-C | virtualdisaster.net, its not ready yet but in a few days it will be ready for use | 19:18 |
| Faust-C | bookmark it for future reference | 19:18 |
| jmedina | thanks | 19:18 |
| * Faust-C makes note to finish it this week | 19:18 | |
| Faust-C | no thank you, i think ill drop FDS lol | 19:18 |
| jmedina | Faust-C: :D | 19:18 |
| Faust-C | and look at either pure openldap or this openDS | 19:19 |
| jmedina | well I wont drop it until I do real comparisions and benchmarks | 19:19 |
| jmedina | by the way yesterday was released openldap stable | 19:19 |
| Faust-C | well considering FDS isnt getting much life, and i want something simple | 19:20 |
| jmedina | Faust-C: are you using any ldap implementation at the moment? | 19:20 |
| Faust-C | sadly no | 19:20 |
| Faust-C | but i need some kinda LDAP (i dont really care about AD cause I can make that work) | 19:21 |
| Faust-C | cause my new mail server, file server will auth to ldap | 19:21 |
| jmedina | you can also sync AD with openldap | 19:21 |
| Faust-C | yeah | 19:21 |
| jmedina | or even use openldap as a AD proxy :D | 19:21 |
| Faust-C | jmedina, would you have any good links for openldap? | 19:21 |
| Faust-C | well thats what i want to do | 19:21 |
| jmedina | Faust-C: the book | 19:22 |
| Faust-C | really? | 19:22 |
| Faust-C | i tried to read it once and was like damn .... | 19:22 |
| Faust-C | wow, opends has a neat installer.... | 19:22 |
| jmedina | Mastering OpenLDAP: Configuring, Securing and Integrating Directory Services | 19:23 |
| jmedina | http://www.packtpub.com/OpenLDAP-Developers-Server-Open-Source-Linux/book | 19:23 |
| Faust-C | sweet deal thanks | 19:23 |
| jmedina | Faust-C: opends has a good integration with OpenSSO for single sign on for java apps | 19:24 |
| jmedina | some goverment offices here are migrating to that because mosth of their enterprise apps are bult in java | 19:24 |
| Gargoyle | Good evening my irc loving friends | 19:25 |
| Faust-C | thats what i want so bad SSO | 19:25 |
| Faust-C | hell i use joomla and it can auth to ldap which would be awsome for a intra website | 19:26 |
| jmedina | yeap | 19:26 |
| Faust-C | matter of fact use it for clients | 19:27 |
| jmedina | I use ldap for everything, samba, squid, apache, radius, ezpublish, mediawiki, mantis, jabber, linux logins (NSS+pam) | 19:30 |
| jmedina | and openvpn | 19:30 |
| jmedina | and of course for global address book | 19:31 |
| Faust-C | yeah | 19:31 |
| jmedina | postfix, courier-imap (next dovecot) | 19:31 |
| Faust-C | jmedina, once my site is ready im gonna kidnap you and have you document all that | 19:31 |
| jmedina | Faust-C: I have some documents about every solutions but in plain text files | 19:32 |
| jmedina | Im moving to docbook | 19:32 |
| jmedina | my site is tuxjm.net | 19:32 |
| Fenix|work | Greetings | 19:58 |
| Fenix|work | I have a couple of files I can't seem to delete | 19:58 |
| Fenix|work | ls -Flai shows the following | 19:59 |
| kirkland | mdz: ack on bryan wu, thanks for the pointer | 19:59 |
| Fenix|work | 1528939 ?????????? ? ? ? ? ? vs100 | 19:59 |
| kirkland | mdz: intel video? | 19:59 |
| kirkland | mdz: i saw something similar this morning, when doing alt-tab, kernel panic, flashing caps-locked | 19:59 |
| Fenix|work | when using rm -f I get rm: cannot remove `vs100': Input/output error | 20:00 |
| kirkland | mdz: i recently switch from my nvidia thinkpad to my intel thinkpad, and just saw this issue for the first time | 20:00 |
| mdz | kirkland: it's happened to me twice today | 20:04 |
| kirkland | mdz: compiz or no? | 20:04 |
| mdz | kirkland: compiz. the workaround is to turn it off | 20:05 |
| === RoAk is now known as RoAkSoAx | ||
| gate_keeper_ | hey guys | 20:20 |
| gate_keeper_ | any recommends for faster copy sync then cp -auv or rsync -az | 20:21 |
| gate_keeper_ | ? | 20:21 |
| gate_keeper_ | i have 700GB | 20:21 |
| gate_keeper_ | drives | 20:21 |
| gate_keeper_ | that i need to sync them | 20:21 |
| Gargoyle | gate_keeper_: dd ? | 20:22 |
| gate_keeper_ | rsync is slow, coz is making file list | 20:22 |
| gate_keeper_ | :/ | 20:22 |
| gate_keeper_ | Gargoyle, probably it'll last forever to create 700GB image | 20:27 |
| gate_keeper_ | :) | 20:27 |
| Faust-C | gate_keeper_, look into network raid maybe? | 20:30 |
| Faust-C | DRBD | 20:31 |
| gate_keeper_ | maybe .. | 20:34 |
| andol | gate_keeper_: How about a tar stream? | 20:35 |
| gate_keeper_ | well .. the hard drives are connected on the server | 20:43 |
| gate_keeper_ | :) | 20:43 |
| gate_keeper_ | network raid will not work .. | 20:43 |
| gate_keeper_ | all i need is update of the files | 20:44 |
| gate_keeper_ | probably cp -u | 20:44 |
| gate_keeper_ | is the best options | 20:44 |
| gate_keeper_ | *option | 20:44 |
| gate_keeper_ | however | 20:44 |
| uvirtbot | New bug: #361961 in dovecot (main) "dovecot not configured to listen to any ports after intrepid->jaunty upgrade" [Undecided,New] https://launchpad.net/bugs/361961 | 21:25 |
| ScottK | Ah. ^^^ new security feature. | 21:27 |
| jdstrand | safety first | 21:27 |
| Actium | pretty effective. | 21:36 |
| foxbuntu | hey all I did something pretty stupid and disabled the admin account in the sudoers file, is there a way to reset this without a livecd? | 21:37 |
| giovani | foxbuntu: boot into single user mode | 21:38 |
| foxbuntu | giovani, ah right | 21:38 |
| foxbuntu | giovani, thanks! | 21:38 |
| Actium | i doubt that. no. maybe the rescue mode can help you. it should allow a passwordless root login - of course unless you have set a root password. | 21:38 |
| giovani | otherwise known as "recovery mode" in the ubuntu grub boot | 21:38 |
| giovani | Actium: you doubt what? | 21:38 |
| Actium | "is there a way to reset this without a livecd?" | 21:39 |
| giovani | yes, there is | 21:39 |
| giovani | I just said how | 21:39 |
| Actium | i doubted that until i came up with the recovery mode idea. | 21:39 |
| Actium | thats why i said "no" right in the following sentence. | 21:39 |
| giovani | uh ... ok | 21:40 |
| giovani | I just didn't see the need to repeat my advice and make it more confusing | 21:40 |
| Actium | just a little misunderstanding. happens. ;) | 21:40 |
| ScottK | Actium: It is a passwordless root login to log into recovery mode. | 21:40 |
| giovani | yeah, that's the entire purpose of single user mode | 21:41 |
| Actium | afaik only when there's no root pw set. | 21:41 |
| giovani | nope | 21:41 |
| Actium | then im probably mistaken. | 21:41 |
| giovani | you are | 21:42 |
| Actium | now i know why. i faintly remembered having read sth about setting a password to protect the recovery mode from being abused. it was however not *nix-password, but a grub-passwd. | 21:44 |
| giovani | yes, that's completely urnelated | 21:45 |
| giovani | unrelated* | 21:45 |
| giovani | (to a root password) | 21:45 |
| Actium | i know. i just did not recall the correct thing. (damn alcohol, if you ask me). ;) | 21:46 |
| ScottK | Honestly anyone with physical access owns the box. There's really no point unless you're worried about someone just walking by | 21:48 |
| giovani | ScottK: I'd contend that considerable effort can be made to prevent someone, even someone with physical access, from accessing data/records on the machine | 21:49 |
| giovani | can they unplug the power? Sure! does that equate to being able to read/modify the live machine's OS? no | 21:49 |
| ScottK | giovani: Yes, but any of those methods that are likely to work for any length of time involve encryption. | 21:49 |
| giovani | indeed they do | 21:50 |
| giovani | and WDE is widely used | 21:50 |
| giovani | all of my remote, personal servers are fully encrypted | 21:50 |
| giovani | and they all have BIOS and GRUB passwords | 21:50 |
| MatBoy | mhh since when is amavisd under ubuntu so different in configfiles >? | 21:54 |
| ScottK | MatBoy: What do you mean? | 21:58 |
| ScottK | Different than what? | 21:58 |
| === jussi01 is now known as android | ||
| MatBoy | ScottK: the 50-user files and so on | 22:01 |
| ScottK | MatBoy: We get that from Debian. | 22:01 |
| ScottK | It actually works pretty well. You change anything you want in 50-user and then if the maintainer makes changes in the other files you don't have to deal with manual config merges in the maintainer managed files. | 22:02 |
| ScottK | Anything you put in the later 50-user file will over-ride whatever is in the earlier ones. | 22:02 |
| MatBoy | ScottK: ok... but my sql wblist does not seem to work when I set everything in the 50-user | 22:04 |
| ScottK | I expect it's a function of your syntax, not what file it's in, but I don't use sql, so can't give specific advice. | 22:05 |
| === dantalizing is now known as dantalizing_ | ||
| === dantalizing_ is now known as dantalizing__ | ||
| MatBoy | ScottK: ok :) | 22:06 |
| === dantalizing__ is now known as dantalizing | ||
| MatBoy | still a bummer that there are no good docs about ubuntu and DB drived amavisd | 22:12 |
| ScottK | I'm sure sommer would love to have some input from you for the next edition of the Ubuntu Server Guide once you have it figured out. | 22:13 |
| MatBoy | woie | 22:19 |
| MatBoy | works | 22:19 |
| jmedina | MatBoy: what was the problem? | 22:27 |
| MatBoy | jmedina: I used the postvis admin sql lines | 22:30 |
| MatBoy | they work OK | 22:30 |
| MatBoy | but now... I would like to insert some reference into the quarantine table so a quarantine mail also has a mailbox column | 22:31 |
| jmedina | Im MatBoy good I didnt know about postvis admin | 22:33 |
| jmedina | s/Im// | 22:33 |
| MatBoy | jmedina: but now | 22:34 |
| MatBoy | jmedina: you never did ? | 22:35 |
| jmedina | MatBoy: what? amavis+mysql? | 22:36 |
| MatBoy | jmedina: postvis | 22:37 |
| jmedina | nop, it is the first time I hear about postvis, looks good | 22:37 |
| MatBoy | jmedina: nice | 22:38 |
| MatBoy | jmedina: I build my own stuff atm | 22:38 |
| MatBoy | it looks good indeed | 22:39 |
| MatBoy | but there are alternatives | 22:39 |
| MatBoy | does someone know anything about a policy port for amavisd ? 9998 ? | 22:43 |
| jmedina | Your Distro is Insecure: Ubuntu: http://www.linux-mag.com/id/7297/1/ | 22:46 |
| MatBoy | huh ? distro insecure ? | 23:21 |
| ScottK | MatBoy: It's about 99% FUD. | 23:22 |
| MatBoy | ScottK: LOL | 23:33 |
| === asac_ is now known as asac | ||
| MatBoy | ScottK: do you use /usr/sbin/amavisd-release | 23:34 |
| MatBoy | ? | 23:34 |
| ScottK | MatBoy: I'm actually not currently using amavisd-new. The project that I was going to use it for ended. cemc and ivoks use it. I'd ask them. | 23:36 |
| MatBoy | ScottK: ok :) I switch to it from mailscanner which is kinda slow | 23:40 |
| ScottK | Mailscanner and postfix is a bad combination. | 23:41 |
| MatBoy | ScottK: mailscanner was a frontend using... | 23:43 |
| MatBoy | uhm | 23:43 |
| MatBoy | postfix I thought indeed | 23:44 |
| ScottK | Bad plan. | 23:45 |
| lamont | MatBoy: mailscanner is a abortion that does unspeakable things to postfix internals, and is pretty much guaranteed to break or break postfix anytime either is touched. | 23:50 |
| MatBoy | lamont: so I don'tuse it ;) | 23:52 |
| MatBoy | mhh, now that release socket | 23:53 |
| jmedina | MatBoy: what about release socket? | 23:53 |
| MatBoy | jmedina: it should be running, amavis-release... but i't's not a service.. so I don't know how that socket or port could be in use | 23:54 |
| MatBoy | it should be running on port 9998, but I don't know how to start that service | 23:55 |
| jmedina | mat afaik amavis-release is not a daemon, it is a program you should run whenever you want to relase a quarantined mail, the port is because amavis-relase conects to a amavisd policy bank | 23:56 |
| ScottK | I believe that's correct. | 23:57 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!