| captainkirk | hi all... i need some assistance configuring a cluster file system... | 00:13 |
|---|---|---|
| captainkirk | have been trying to setup using glusterfs | 00:13 |
| captainkirk | any one had any success with this? | 00:14 |
| captainkirk | is anyone even here? | 00:16 |
| jmedina | morning | 00:24 |
| jmedina | o_O | 00:24 |
| jmedina | anyone here installed ubuntu server in blades? | 00:24 |
| orudie | i know who did | 00:25 |
| jmedina | they are XHS21 XM it is a bladecenter H | 00:25 |
| jmedina | orudie: can I contact him? | 00:25 |
| orudie | yeah | 00:25 |
| orudie | irc.oftc.net #linode , talk to caker | 00:26 |
| jmedina | I hate IBM because doesnt support Ubuntu for their virtualization manager agent :S | 00:26 |
| jmedina | orudie: thanks | 00:26 |
| orudie | jmarsden, you should use xen | 00:26 |
| jmedina | I use xen | 00:26 |
| jmedina | but their agent isnot supported | 00:27 |
| jmedina | it works for rhel an suse :S | 00:27 |
| orudie | jmedina, you run a company ? | 00:27 |
| jmedina | orudie: yeap | 00:27 |
| jmedina | this is a new customer who wants ubuntu server :D | 00:27 |
| orudie | jmedina, can i work for you ? | 00:28 |
| jmedina | orudie: sure im in mexico city | 00:28 |
| orudie | lol | 00:28 |
| orudie | how about over the internet | 00:28 |
| jmedina | well I really dont know, I'm only the linux guy | 00:29 |
| orudie | i thought you said you run the company, meaning you are the boss | 00:30 |
| jmedina | nop sorry | 00:30 |
| capkirk | hey folks... I am needing some help to set up a file server cluster | 00:30 |
| orudie | i also want to be a linux guy | 00:30 |
| mattt | orudie: haha! | 00:32 |
| orudie | mattt, what ? | 00:32 |
| capkirk | i have been trying to set up using glusterfs... but keep running into problems so now I am looking at ocfs... any one have any ideas? | 00:32 |
| mattt | "can i work for you?" | 00:32 |
| mattt | :) | 00:32 |
| orudie | so ? | 00:34 |
| orudie | whats so funny ? | 00:34 |
| capkirk | anyone at all.... any ideas on clustered file system using ubuntu....? | 00:34 |
| orudie | jmedina, they are they guys i bought VPS from and installed ubuntu server | 00:36 |
| jmedina | orudie: ok, I didnt know about linode services | 00:37 |
| orudie | jmarsden, they are great dude , if you decide to get one let me know so that i would give you a referal code | 00:37 |
| orudie | www.linode.com | 00:37 |
| orudie | caker is the owner | 00:38 |
| foxbuntu | capkirk, looked into GFS? | 00:39 |
| capkirk | is that glusterfs? | 00:41 |
| foxbuntu | no | 00:41 |
| foxbuntu | Global File System | 00:41 |
| foxbuntu | gfs-tools is in the repos | 00:41 |
| capkirk | ok, then no i have not.. but I noticed that it is included with the 8.04 Server cd | 00:41 |
| foxbuntu | yes | 00:41 |
| capkirk | ok, i found gfs-tools on the cd. u think i should give it a go | 00:42 |
| jmedina | orudie: thanks but I have my own rack for vps hosting | 00:42 |
| orudie | jmedina, :) | 00:42 |
| foxbuntu | capkirk, I have never tried it, but I have clients that use it | 00:42 |
| orudie | so there you go , they are your competitors | 00:42 |
| jmedina | orudie: then I want the code :D | 00:43 |
| orudie | i doubt they'll give you | 00:43 |
| orudie | you can try to buy it from them though | 00:43 |
| orudie | i'm very interested what they are gonna say | 00:43 |
| foxbuntu | !ot | orudie | 00:44 |
| ubottu | orudie: #ubuntu is the Ubuntu support channel, for all Ubuntu-related support questions. Please use #ubuntu-offtopic for other topics. Thanks! | 00:44 |
| capkirk | just reading up on gfs-tools... looks like it might be the go, will do some more reading first..... | 00:44 |
| orudie | foxbuntu, dont be an asshole | 00:44 |
| foxbuntu | !admin | orudie | 00:44 |
| ubottu | Sorry, I don't know anything about admin | 00:44 |
| jmedina | capkirk: well you can read redhat offfical docs about gfs | 00:44 |
| orudie | lol foxbuntu you are so miserable | 00:45 |
| foxbuntu | orudie, move on and keep the chat out of here or I really will have and admin step in | 00:46 |
| orudie | go ahead | 00:46 |
| foxbuntu | ScottK, you are an admin right? | 00:47 |
| orudie | what a looser lol | 00:48 |
| foxbuntu | orudie, this is a support channel to try to help others, not your personal chat room, so as I tried to nicely point out earlier. Go to -offtopic if you want to chat | 00:49 |
| orudie | ping baffle | 00:50 |
| orudie | i'm in this channel 24/7 | 00:50 |
| orudie | you dont have to educate me | 00:51 |
| capkirk | maybe u should get a life...? | 00:51 |
| orudie | idling that is | 00:51 |
| jmedina | well I dont see a problem, it was ubuntu related and there is no active conversation at the moment | 00:51 |
| === foxbuntu is now known as orudie_thefaggot | ||
| === orudie_thefaggot is now known as foxbuntu | ||
| capkirk | ok... now i am having recurring problems with apt-get | 01:14 |
| capkirk | logged in as root i type 'apt-get update' and i get various errors including NODATA2 | 01:15 |
| capkirk | i am trying to install gfs-tools | 01:16 |
| capkirk | if i enter apt-cache search gfs it returns nothing but the prompt, even after running apt-get update | 01:16 |
| foxbuntu | capkirk, sounds like you might need to make sure your sources.list is alright | 01:18 |
| capkirk | this is a fresh clean install of ubuntu server 8.04... should sources.list need udpating? | 01:19 |
| foxbuntu | capkirk, nope | 01:20 |
| foxbuntu | capkirk, you sure you have a web connection then? | 01:20 |
| capkirk | if i type host google.com, it returns all the right numbers.... | 01:20 |
| foxbuntu | capkirk, try: ping 4.2.2.2 | 01:21 |
| capkirk | ping works as expected | 01:21 |
| foxbuntu | ok | 01:21 |
| capkirk | is it possible that our company proxy server is sending cached info to the apt-get command | 01:21 |
| foxbuntu | ah, did you setup a proxy? | 01:22 |
| foxbuntu | I mean, the proxy connection | 01:22 |
| capkirk | yes, i am running ipcop | 01:22 |
| capkirk | no need, ipcop is running transparent proxy mode | 01:23 |
| foxbuntu | gotcha | 01:23 |
| foxbuntu | you said you install 8.04? or is it 8.04.1? | 01:24 |
| capkirk | im fairly certain it is 8.04, is there some way i can check | 01:25 |
| foxbuntu | lsb_release -a | 01:25 |
| pawan | can some one help me with port forwarding | 01:26 |
| capkirk | ok, it says description ubuntu 8.04.1 release 8.04 | 01:27 |
| foxbuntu | capkirk, ok well perhaps the repos for that have been moved...lets have a look | 01:29 |
| foxbuntu | capkirk, I think you can point to old-releases.ubuntu.com to get those repos, however there is major security vulnerability in 8.04.1, you would do best to: sudo do-release-upgrade | 01:40 |
| capkirk | ok, will do upgrade now | 01:40 |
| kees | foxbuntu: 8.04 is supported. | 01:40 |
| foxbuntu | kees, hasn't it been moved to old-releases? | 01:41 |
| Nafallo | 8.04(.2) is a long term support release and should be supported for a further 4 years | 01:41 |
| capkirk | hmmm says no new release found | 01:41 |
| kees | 7.10 is off the repo (and in old-release) but 8.04 (Hardy) will be supported for a long time | 01:41 |
| foxbuntu | kees, ah | 01:41 |
| capkirk | yes, that is why i am using 8.04...LTS | 01:41 |
| kees | capkirk: just sudo apt-get update && sudo apt-get dist-upgrade and you can get any available updates. | 01:41 |
| capkirk | kk, will try that now | 01:41 |
| kees | capkirk: if you *want* to upgrade to intrepid or jaunty, you'll need to tell it so. | 01:42 |
| Nafallo | kees: that's if -updates and -security is enabled :-) | 01:42 |
| kees | Nafallo: very true, I did make that assumption. | 01:42 |
| capkirk | u mean in the sources.list | 01:42 |
| kees | Nafallo: we need apt-get fix-yo-self | 01:42 |
| capkirk | lol | 01:42 |
| Nafallo | kees: it is by default so... :-) | 01:42 |
| capkirk | apt-get dist-upgrade is underway.... | 01:43 |
| capkirk | hmmm... update seems to have stalled.... 23% [Waiting for headers] | 01:48 |
| capkirk | its away again... must have needed a coffee break | 01:50 |
| Nafallo | (or a timeout...) | 01:51 |
| Nafallo | (...and retry) | 01:51 |
| capkirk | yes, maybe, it is doing it again.... different site but seems to have stalled | 01:53 |
| capkirk | working again... | 01:53 |
| capkirk | this repo site is slow.... 15kb/sec | 01:54 |
| twb | Which repo? | 01:54 |
| capkirk | au.archive.ubuntu.com | 01:54 |
| twb | Which ISP do you use? | 01:56 |
| capkirk | bigpond adsl2+ | 01:56 |
| twb | Hm, bigpond doesn't have its own mirror AFAIK. | 01:57 |
| capkirk | no, i dont think so.... | 01:57 |
| twb | internode's is externally visible, so I guess you could put it in there as well and see if it's faster than au. | 01:57 |
| capkirk | well, at least it is working..just a bit slow | 01:57 |
| twb | According to a TPG user I know, internode's is faster than everything else even for him :-) | 01:57 |
| capkirk | ok... ill look into it | 01:58 |
| twb | deb http://mirror.internode.on.net/pub/ubuntu/ubuntu hardy main | 01:58 |
| capkirk | do i just edit the sources.list file and replace the au..... | 01:58 |
| capkirk | or add it | 01:58 |
| twb | capkirk: better to leave the au. entries there, at the bottom, so if internode isn't available or is out of date, it will fall back on using them. | 01:59 |
| twb | On Debian there's a package called apt-spy which automatically puts the fastest repo in your sources.list.d, but it seems that Ubuntu doesn't have that. | 01:59 |
| capkirk | ok, so sources.list works from top to bottom order of preference? | 01:59 |
| twb | Yeah | 01:59 |
| capkirk | i feel like such a linux newbie trying to achieve complex things.... | 02:00 |
| capkirk | phew... dist-update complete | 02:10 |
| capkirk | now running 8.04.2 | 02:11 |
| capkirk | now back to gfs-tools | 02:11 |
| twb | What of it? | 02:11 |
| capkirk | i am trying to set up a cluster file system | 02:12 |
| capkirk | gfs or ocfs... any opinions? | 02:14 |
| Iceman_B1SSH | how do I upgrade 8.10 server to 9.04 server? (and should I?) | 02:19 |
| hads | sudo do-release-upgrade | 02:20 |
| hads | (and if you want to_ | 02:20 |
| giovani | Iceman_B1SSH: you may want to wait it out a few days | 02:20 |
| giovani | servers are hammered | 02:20 |
| giovani | or does do-release-upgrade now use apt-p2p? | 02:20 |
| Iceman_B1SSH | apt-p2p? sounds awesome | 02:21 |
| === Iceman_B1SSH is now known as Iceman_B|SSH | ||
| giovani | apt-cache show apt-p2p | 02:21 |
| Iceman_B|SSH | meh, I can wait a few days | 02:21 |
| Iceman_B|SSH | or maybe I should just wait until support runs out on 8.10 | 02:21 |
| Iceman_B|SSH | so far it's doing everything I want | 02:21 |
| giovani | eh, why wait that long? | 02:21 |
| giovani | critical server? | 02:22 |
| Iceman_B|SSH | nah | 02:22 |
| Iceman_B|SSH | it's my home server | 02:22 |
| giovani | then upgrade in a few days or something | 02:22 |
| Iceman_B|SSH | functions as a bittorrent client and I have a samba share for the local network here | 02:22 |
| Iceman_B|SSH | oh and an irssi client of course | 02:22 |
| Iceman_B|SSH | :) | 02:22 |
| giovani | doing upgrades on a release day is rarely a good idea -- it hangs if it can't get the package, etc -- nasty stuff, at least in previous upgrades | 02:23 |
| Iceman_B|SSH | I'll wait a few days then | 02:23 |
| SpaceBass | hey folks | 02:24 |
| Iceman_B|SSH | you;s think that in this day and age, Canocial would have scalable bw | 02:24 |
| SpaceBass | I did the upgrade and am paying the price :D | 02:24 |
| giovani | Iceman_B|SSH: it has little to do with canonical | 02:24 |
| giovani | Iceman_B|SSH: all the mirrors are hammered | 02:24 |
| SpaceBass | broke SSH and netatalk -suspect kerberos but not sure how do diagnose this one | 02:24 |
| giovani | SpaceBass: be more specific | 02:24 |
| giovani | log into the machine locally and read logs, to start | 02:24 |
| SpaceBass | when I try and SSH in, it says "connection closed" | 02:24 |
| SpaceBass | giovani, looking for the sshd log still, syslog is no help | 02:25 |
| giovani | /var/log/auth.log | 02:25 |
| SpaceBass | says it cannot find pam_foreground | 02:26 |
| SpaceBass | but then issues an auth | 02:26 |
| giovani | issues an auth? | 02:27 |
| SpaceBass | after the error, there is a new line: "authorized to jdoe, krb5 principal...." | 02:28 |
| SpaceBass | doing some google-fu on that error now | 02:29 |
| Iceman_B|SSH | when I go dpkg -l I get lines like "rc bsd-mailx 8.1.2-0.20071201cvs-3 A simple mail user agent" | 02:31 |
| Iceman_B|SSH | does that mean, the rc at the beginning | 02:31 |
| Iceman_B|SSH | +what | 02:32 |
| SpaceBass | some brilliant admin put a note about jaunty in the header of the ubuntu forums so every single post is a match | 02:32 |
| giovani | Iceman_B|SSH: read the header/manpage | 02:32 |
| giovani | Desired=Unknown/Install/Remove/Purge/Hold | 02:33 |
| giovani | | Status=Not/Inst/Cfg-files/Unpacked/Failed-cfg/Half-inst/trig-aWait/Trig-pend | 02:33 |
| giovani | |/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad) | 02:33 |
| Iceman_B|SSH | cryptic message ahoy :/ | 02:33 |
| giovani | not cryptic at all ... | 02:34 |
| giovani | very clear | 02:34 |
| giovani | r = remove | 02:34 |
| giovani | c = cfg-files | 02:34 |
| giovani | because it wasn't purges | 02:34 |
| giovani | purged* | 02:34 |
| Iceman_B|SSH | ....oh, I have to read it like that | 02:34 |
| Iceman_B|SSH | they should have underlined the first letter of every state and made the descriptions all lowercase | 02:35 |
| giovani | I said to read the header | 02:35 |
| giovani | it's clear from the capitalization | 02:35 |
| Iceman_B|SSH | I dont know what you meant by "header" | 02:35 |
| giovani | that's why it's "trig-aWait" for example | 02:35 |
| giovani | then you're in trouble ... | 02:35 |
| Iceman_B|SSH | why? | 02:35 |
| giovani | sigh | 02:36 |
| giovani | because "look at the header" should be clear | 02:36 |
| Iceman_B|SSH | then I must have glossed over a linux tutorial that explains that that term should be standard issue knowledge under serveradmins ._. | 02:37 |
| giovani | header is an english word | 02:37 |
| Iceman_B|SSH | but that's cool, I'll look into it soon, sleep first | 02:37 |
| giovani | it's not linux-specific | 02:37 |
| Iceman_B|SSH | I know, but header can mean a lot of things | 02:38 |
| giovani | it always means the stuff at the top | 02:38 |
| SpaceBass | anyone doing kerberos/ldap auth in 9.04? | 02:38 |
| Iceman_B|SSH | okay | 02:38 |
| giovani | or, the "first" stuff, more specifically | 02:38 |
| giovani | SpaceBass: I will be in a few days, 9.04 was just released today | 02:38 |
| Iceman_B|SSH | thanks for your input, Ive gotten a bit wiser | 02:38 |
| Iceman_B|SSH | later | 02:38 |
| SpaceBass | giovani, will be curious to hear your results | 02:39 |
| giovani | SpaceBass: 9.04 ldap may work fine | 02:39 |
| giovani | upgrades are messy | 02:39 |
| giovani | and can break non-standard configs | 02:39 |
| SpaceBass | thats what I thought... | 02:39 |
| SpaceBass | I understand about upgrades... | 02:39 |
| giovani | so, ldap auth working in 9.04 won't help ya with your broken upgrade :) | 02:39 |
| SpaceBass | doesnt mean that its unrealistic to try and get it working again | 02:40 |
| giovani | yeah, sometimes it's easier to start with a fresh install, when possible | 02:40 |
| SpaceBass | not a great option for me...but if I have to rebuild from scrach then I will | 02:40 |
| giovani | ok | 02:41 |
| SpaceBass | would prefer to troubleshoot what I got | 02:42 |
| SpaceBass | but it does all point to pam now that I dig in | 02:43 |
| giovani | yep, it's probably your pam config, or any changes you made to pam when enabling kerberos | 02:44 |
| giovani | since that's non-standard | 02:44 |
| giovani | probably new pam version doesn't like the config, or something along those lines | 02:44 |
| SpaceBass | well for that matter anyone who adds a user is non-standard | 02:44 |
| SpaceBass | we should all run the live CD | 02:44 |
| giovani | except that the format of /etc/passwd never changes | 02:46 |
| giovani | so no | 02:46 |
| giovani | upgrades of a distro can never correct config files that were edited by the user | 02:47 |
| giovani | other than replace them, ify ou want | 02:47 |
| giovani | but that'd hard break your system | 02:47 |
| twb | giovani: if you're talking about conffile conflicts, usually dpkg will offer to drop you to a shell to manually merge them. | 02:47 |
| giovani | twb: nope, that's not what I'm talking about | 02:48 |
| giovani | I'm talking about a potential config option in an old version of program X, which is no longer compatable with new version Y | 02:48 |
| twb | Ah. | 02:48 |
| giovani | during an upgrade, if you want to keep your old config ... it may not work as expected with new version Y | 02:48 |
| twb | That would need to be handled specially in the .postinst. | 02:48 |
| giovani | twb: maybe you want to help SpaceBass troubleshoot his non-working kerb auth in a 9.04 upgrade | 02:49 |
| twb | I've NEVER gotten kerb working | 02:49 |
| giovani | like I said ... non-standard :) | 02:50 |
| twb | SpaceBass: are you trying to fix a kerb client, or the kerb server? | 02:50 |
| giovani | kerb client, I believe | 02:52 |
| SpaceBass | client | 02:52 |
| SpaceBass | yeah | 02:52 |
| SpaceBass | worked in every release since 6.x (when I started using ubuntu)... usually pretty straight forward... config kerberos, add a key file, config the pam files and boom, it works | 02:53 |
| twb | SpaceBass: well, there are two parts. You need to make sure nss is working (/etc/nsswitch.conf), and once getent agrees (e.g. "getent passwd fred" for a Kerberos account "fred"), you need to get pam working. | 02:53 |
| capkirk | does anyone know about ATAoE...? | 02:54 |
| SpaceBass | twb, thanks! have confirmed nss is working | 02:54 |
| SpaceBass | can still log in locally as network users + getent passwd returns what I expect | 02:55 |
| SpaceBass | think its pam ... although all that appears in my auth.log is a successful auth | 02:55 |
| capkirk | I am trying to set up a shared cluster storage arrangement with disk redundancy | 02:55 |
| twb | SpaceBass: OK, now log in as a kerb user and confirm that you have received a valid TGT. | 02:56 |
| SpaceBass | roger that | 02:56 |
| SpaceBass | locally I can kinit, and if I try and ssh in, I get the approprate ticket (and then it says "connection closed") | 02:56 |
| SpaceBass | appreciate the help btw - thanks | 02:56 |
| twb | Does auth.log say why you were kicked out? | 02:56 |
| SpaceBass | no - one line for the ssh transaction... auth | 02:57 |
| twb | Try to work out how to turn on debugging for the pam_krb module(s) and for sshd. | 02:57 |
| SpaceBass | got sshd in debug mode now... checking | 02:59 |
| SpaceBass | "access denied for spacebass by PAM account config" | 02:59 |
| twb | So now you need to grovel through pam debugging, which is enabled on a per-module basis. | 03:04 |
| SpaceBass | :( | 03:09 |
| capkirk | seems to be a lot of infor re red hat and cluster file systesm.... anyone know anything about ubuntu and file system clusters? | 03:10 |
| capkirk | i can spell, just can't type ^^^^ | 03:10 |
| capkirk | too many years on windows .... clicking a mouse :P | 03:11 |
| twb | You could try wiki.ubuntu.com | 03:15 |
| capkirk | yes, seems i have been all over the web... just cant find anything that explains it? | 03:16 |
| capkirk | i know what i want to achieve, just not sure what tools or packages to use to make it happen | 03:16 |
| SpaceBass | twb, thanks for the hand holding | 03:18 |
| SpaceBass | think I got it - ssh is at least working | 03:18 |
| twb | Cool. | 03:18 |
| SpaceBass | i'll recompile netatalk tomorrow | 03:18 |
| capkirk | i have a number of older pc's which i want to configure in an array of some sort so that the disks can be configured for redundancy and shared as a single disk share on the local net | 03:18 |
| anthony1x | Hi. I currently try to play with the ICU library. it already came shipped with my distro, so I don't need to install it myself. however, I don't have the header files needed. is it normal for them not be shipped with the library? and if I download them from the icu website, where should I place them? | 03:21 |
| twb | anthony1x: you need to install the associated -dev package. | 03:21 |
| capkirk | ok, so i am trying to set up a SAN array using old PCs... | 03:21 |
| anthony1x | twb, I already searched for it. none found for libicu | 03:22 |
| twb | anthony1x: then you are searching wrong. | 03:22 |
| anthony1x | twb, | 03:23 |
| anthony1x | twb, how should I search correctly then? | 03:23 |
| twb | aptitude install ~nlibicu.*-dev | 03:23 |
| stickystyle | capkirk: is this more of a learning exercise or something you want put into production? | 03:24 |
| twb | capkirk: stickystyle has a point; this is not the kind of thing you want to put production data on. | 03:25 |
| stickystyle | You would be many times better served just by trowing all those drives in one box and learning mdraid. | 03:26 |
| anthony1x | twb, that did the trick. how come sudo apt-get install libicu and then hitting tab to get a list of all available packages does not list the dev package? | 03:26 |
| twb | anthony1x: probably because you have not loaded /etc/bash_completion. | 03:26 |
| anthony1x | twb, thanks anyway. | 03:26 |
| twb | stickystyle: or even better, by buying three or four brand new 1TiB drives and putting them in a dedicated file server, RAID5'd. | 03:26 |
| twb | Using old disks fills me with horror, especially since SATA is ridiculously cheap now. | 03:27 |
| stickystyle | twb: very true | 03:27 |
| twb | For a 3×1TiB SATA array you're looking at AUD500 for the disks. | 03:27 |
| twb | Make that 450. | 03:28 |
| stickystyle | capkirk: but if your just looking to learn and play (which is always good) check out glusterfs | 03:28 |
| twb | For a 4×1.5TiB SATA array, AUD860. | 03:28 |
| twb | Plus the case, motherboard and CPU, of course, but you don't need anything special for a file server (except dual gigabit NICs). | 03:29 |
| SpaceBass | hitting the sack - thanks again tbw, appreciate your help and patience :D | 03:30 |
| twb | Actually, I haven't run the numbers. If the internal PCIe or SATA bus is the bottleneck, you could just use one gigE NIC. | 03:30 |
| capkirk | ok, i take your point as very valid... this is for production use... but budget is tight....(as usual) | 03:31 |
| capkirk | what is this mdraid you speak of? | 03:32 |
| stickystyle | mdraid == software raid | 03:32 |
| capkirk | ok, so this is for a network attached file service, shared by samba | 03:33 |
| twb | capkirk: if you can come up with a grand, you can have a file server that will kick the arse of anything you build from hand-me-down workstations -- faster, more reliable and able to store more by several orders of magnitude. | 03:33 |
| stickystyle | if its for production, you need to always consider your time as a cost in the budget...how many hours will you have to tweek something to get it going, and how many times will you have to go back. | 03:33 |
| capkirk | too true... could probably find a grand.... | 03:34 |
| stickystyle | shoot, for a grand you could build a pretty rocking bit of storage, removable drive trays and everything. | 03:34 |
| capkirk | we have an old server running w2k that i want to retire and move to ubuntu server and samba. | 03:34 |
| twb | You just say to your boss: "look, I can spend a week setting this up, and it won't work well, and I'll have to go back to it every month or two to fix something... or you can front a grand now, and we will have a state-of-the-art system that you can leave running for ever." | 03:35 |
| twb | stickystyle: depends on the currency; I was working in AU$1000 :-) | 03:35 |
| stickystyle | twb is dead on. | 03:35 |
| twb | For US$1000 you could throw in removable bays and a nice rackmount case. | 03:36 |
| twb | You'd end up with about 3TiB of storage and the ability to lose one of the four drives without problems. | 03:36 |
| twb | If you count up all your 200GiB hand-me-downs, they probably won't add up to 3TiB even BEFORE you take into account the loss from parity. | 03:37 |
| twb | And parity loss is higher the more disks you have. | 03:37 |
| giovani | parity loss is lower the more disks you have | 03:39 |
| giovani | (as a percentage of the array) | 03:40 |
| giovani | i.e. 1 parity for 3 drives is 33.33% loss | 03:40 |
| giovani | 1 for 4 drives is 25% loss, etc | 03:40 |
| capkirk | ok... i am liking this advice... makes sense... | 03:43 |
| capkirk | so an external unit with 4x SATA drives in some kind of raid array for redundancy connected via gigabit ethernet to a ubuntu server shared via samba... have i got it right? | 03:44 |
| twb | giovani: you're right; sorry. | 03:44 |
| capkirk | is only for local file serving and application data store so ultra high speed not really required | 03:45 |
| twb | giovani: I guess I was assuming you'd scale up the number of parity disks proportionally to the number of disks in total. | 03:45 |
| stickystyle | With only four drives you could easily find a case to hold them all in rather than doing external. | 03:45 |
| capkirk | yet again you speak wisdom.... | 03:46 |
| twb | capkirk: not "an external unit" -- just an ordinary rackmount/tower case and motherboard | 03:46 |
| stickystyle | and the raid array can be setup *inside* ubuntu with mdraid | 03:46 |
| stickystyle | so all you need is a regular old computer + 4 drives + ubuntu | 03:46 |
| stickystyle | pretty much every motherboard comes with GigE built-on now. | 03:47 |
| twb | s/old// | 03:48 |
| stickystyle | you can swap the 'regular old computer' get fancy and buy a rack mount computer, with removable drive trays if you desire | 03:48 |
| stickystyle | twb: yeah, didn't really meen *old* | 03:49 |
| twb | There's no point in doing so unless you already have a rack to put it in, of course :-) | 03:49 |
| stickystyle | Excellent point! :D | 03:49 |
| capkirk | ok, well i do have a rack, but only as a storage cabinet, no rack mount servers, all shelves and stuff | 03:50 |
| capkirk | plenty of 'old' computers quite capable of running ubuntu and 4x disks.... just a little problem but.. | 03:50 |
| capkirk | it i install 4x disks and no cd rom... how do i install os? | 03:51 |
| twb | capkirk: for the cost, I would buy a $50 motherboard and $100 CPU anyway, just because. | 03:51 |
| twb | capkirk: there are a number of ways -- you can install from a hard disk, or you can install from the network. | 03:51 |
| twb | capkirk: you could use the eSATA port to connect a SATA CD drive. | 03:51 |
| capkirk | *old* pcs... no sata, only ide | 03:51 |
| twb | capkirk: or you could set up the array to start of degraded, then latter connect the third disk. | 03:51 |
| twb | capkirk: don't use PATA for a new system. | 03:52 |
| twb | PATA costs will only go up. | 03:52 |
| capkirk | maybe i should bust open some old boxes... never know, might find some sata .... | 03:52 |
| stickystyle | HD's are dirt cheap http://www.pricewatch.com/hard_removable_drives/ $44 for 500GB | 03:53 |
| stickystyle | And a full tower size case should fit four drives with a CD/DVD-ROM no problem | 03:54 |
| capkirk | is there such a thing as pci - sata cards | 03:54 |
| stickystyle | capkirk: yep | 03:54 |
| twb | capkirk: yes, but I'd still say just buy a new motherboard. | 03:55 |
| twb | capkirk: it wil still cost less than a grand. | 03:55 |
| twb | For commodity hardware, trying to reuse gear that's three or five years old and a generation behind will screw you in the long run. It's a lesson I learnt the hard way. | 03:56 |
| capkirk | what about pwr supply wattage ? | 03:56 |
| twb | capkirk: you'd have to calculate that. | 03:56 |
| twb | If you get a decent case, it will include a PSU. | 03:56 |
| capkirk | so let me summarise to see that i understadn.... | 03:57 |
| capkirk | 1x pc with 4x sata drives ... average cpu and ram sufficient with ubuntu and mdraid | 03:58 |
| capkirk | a second machine which is the acutal 'server' with ubuntu and samba sharing the drives on the 1st pc.... | 03:59 |
| capkirk | or just run everything from 1 computer | 03:59 |
| stickystyle | Your over engineering it, just one computer | 03:59 |
| capkirk | k, was still thinking of scalability... | 04:00 |
| stickystyle | how many users? | 04:00 |
| capkirk | we have an average use of about 30 users connected at any one time | 04:00 |
| stickystyle | and it wouldn't be a scalable solution as your bottle necking everything through the network | 04:01 |
| stickystyle | what kind of data? is this their home folders that they are mounting from their local machines? | 04:01 |
| capkirk | i was thinking allong the lines of SAN network... | 04:01 |
| stickystyle | i.e. they are running off the server | 04:01 |
| capkirk | no roaming profiles or anything like that | 04:02 |
| capkirk | just docs, spreadsheets etc and some shared application data files | 04:02 |
| stickystyle | I worked at a place where we had a 600MHz P3 serving 220 users shared data | 04:03 |
| stickystyle | I don't think you have to worry about scaling just yet | 04:03 |
| capkirk | true ok, i will put that concept aside then. | 04:03 |
| stickystyle | you don't want to make the problem harder than it is | 04:03 |
| capkirk | there is one next issue thought... virtual machines. | 04:03 |
| twb | capkirk: http://paste.lisp.org/display/79118 | 04:05 |
| stickystyle | that's another chapter in server design. | 04:05 |
| twb | That's with an overspecced CPU and an expensive case, though. | 04:05 |
| twb | I also didn't bother to check for gigE NIC. | 04:06 |
| stickystyle | twb: I havn't seen a board that didn't come with GigE in a while. | 04:06 |
| twb | For a file server, a 64-bit Celeron D (if they still make those) would be sufficient. | 04:06 |
| capkirk | current server we running is p4 3.2G 3G ram with 1x250Gb drive W2K server | 04:08 |
| capkirk | i loaded vmware 2.0 onto it and killed it... | 04:08 |
| capkirk | so i took it off again | 04:08 |
| stickystyle | Well it's nearly midnight over here, I'm heading to bed. Best of luck capkirk | 04:08 |
| capkirk | thanks for ur help, appreciate it | 04:08 |
| twb | capkirk: I assumed you needed a new motherboard because you said your current ones only had PATA. | 04:09 |
| capkirk | twb, that price looks good | 04:09 |
| capkirk | yes, in the *old* pcs that i am trying to work with... | 04:10 |
| capkirk | our current server hardware would be fine to run a new setup of ubuntu, but it is our production server? | 04:10 |
| capkirk | i would like to run new server in parallel for some time to migrate | 04:10 |
| twb | I understand, and that's a reasonable requirement. | 04:15 |
| capkirk | heres another thought..... | 04:21 |
| capkirk | would mdraid work with usb attached storage devices? | 04:22 |
| capkirk | if so, i could build a server from older PATA machine with attached usb storage which could later be used as backup devices.... | 04:25 |
| twb | capkirk: you REALLY, REALLY do not want to do RAID over usb mass storage. | 04:25 |
| twb | Unless it was for a purely temporary measure. | 04:25 |
| twb | Where temporary means "to get the data from one machine to another" not "for six months of production use" | 04:26 |
| * |dthacker| seconds twb's sentiments | 04:29 | |
| capkirk | ok,, thanks for the heads up there... | 04:30 |
| capkirk | as i need to purchase usb external drives for use as backup units anyway, i can still use them as single attached drives to an older machine running as temporary server | 04:31 |
| capkirk | during the migration stage... | 04:31 |
| twb | capkirk: you can get an external enclosure that takes a standard SATA drive | 04:34 |
| twb | It just bridges SATA to USB | 04:34 |
| twb | This allows you to be more flexible than if you get a disk-and-enclosure-in-one USB drive | 04:35 |
| capkirk | isnt that all the pre packed modules are anyway? | 04:47 |
| capkirk | or do you mean like an enclosure that houses more than 1 physical drive? | 04:47 |
| twb | Broadly, yes, though many are 2.5" not 3.5", and you may not be able to open up the enclosure. | 04:47 |
| Billiard26 | after upgrading to 9.04 I can't get phpmyadmin to let me login, I get "Access denied", everything else using mysql works fine | 04:49 |
| capkirk | true that... i remember dropping one and it stopped working.. i had to break the case to retrieve the drive (which was still okay, just the controller card was broken) | 04:49 |
| capkirk | twb: point noted re usb drive size, but as I intend to use them as individual backup drive in the future, i dont think its internal design is an issue? what do u think? | 04:52 |
| twb | capkirk: it only matters if you wanted to use your fileserver's SATA disks prior to deployment in the enclosures, and then repurpose them into the fileserver. | 04:52 |
| twb | Or similarly, to put your old PATA workstation disks into the enclosures for small storage. | 04:53 |
| ScottK | foxbuntu: No. I don't have ops rights on an Ubuntu IRC channels. If you need an op you can go to #ubuntu-ops and find one there. | 04:53 |
| ScottK | foxbuntu: I also agree you were correct. | 04:54 |
| capkirk | ok, i'll need to give that some more thought. | 04:54 |
| capkirk | twb: do you know anything about xen? | 04:56 |
| twb | Nope, sorry. | 04:56 |
| capkirk | kk... | 04:56 |
| VK7HSE1 | Would any one have a clue as to why I can't login to my server via ssh since I've updated to jaunty? My ssh is configured to use certificate authorisation, the public keys haven't changed... is there a new place for the keys to be stored? | 05:24 |
| VK7HSE1 | other than the standard ~/.ssh/authorised_keys | 05:25 |
| === macd__ is now known as macd | ||
| ar | Hello =o) | 06:23 |
| ScottK | VK7HSE1: Use SELinux? | 06:32 |
| ar | are most of the commands we use in theterminal for Ubuntu OS similar to OSX? | 06:32 |
| VK7HSE1 | ScottK thanks will look into that,,, | 06:33 |
| ScottK | VK7HSE1: We don't run it by default, so unless you installed it you aren't. | 06:33 |
| VK7HSE1 | ScottK ok... I think it could be related to the encrypted /home too So I'll keep checking! | 06:35 |
| Padhu | Ubuntians, I installed sshd in my desktop. whenever i try to get the file from my desktop using other linux machine, after 60kb it is stalled. But ping response is ok. | 06:36 |
| VK7HSE1 | My server is not on a remote site it lives here with me! so this is not critical! :) | 06:37 |
| uvirtbot` | New bug: #365872 in mysql-dfsg-5.0 (main) "Failed to start MySQL database server mysqld on install" [Undecided,New] https://launchpad.net/bugs/365872 | 06:37 |
| andol | VK7HSE1: https://answers.launchpad.net/ecryptfs/+question/67703 | 06:37 |
| VK7HSE1 | andol: Thanks... | 06:45 |
| ar | Hi =o) | 06:47 |
| VK7HSE1 | Problem solved!... :D | 07:00 |
| VK7HSE1 | Some how the User authorised keys file reference got a typo in it (???) | 07:02 |
| VK7HSE1 | needed to change StrictModes yes to StrictModes no (I'm not 100% sure what impact that has?) | 07:09 |
| capkirk | does gigabit ethernet run over cat5e? | 07:16 |
| maswan | yes | 07:16 |
| capkirk | cool...... | 07:16 |
| maswan | it runs over most but not all cat5 too.. | 07:16 |
| capkirk | is it worth the transition.. from 100mb...? | 07:17 |
| capkirk | just need to get a gigabit switch i guess | 07:17 |
| simplexio | probably yes | 07:17 |
| simplexio | some basic gigabit switch cost something like 20e or like | 07:17 |
| capkirk | i am just xfer 12gb file from workstation to server.... says it will take about 20 mins!!!! .. life is too short for that | 07:18 |
| capkirk | ok, good. i am into basic, simple easy and it works.! | 07:18 |
| simplexio | if harddrives can keep up, then its good improvement | 07:18 |
| capkirk | yes, hard drives on my system are not overworked, so should not be a problem there | 07:19 |
| simplexio | in use case where several workstations transfer data to server upgrading only server conenction and switch will boost performance alot | 07:19 |
| simplexio | even on 1-1 system its noticable improvement | 07:20 |
| simplexio | and if you happen to have 2GbitLan cards in both server and workstation you can easily bond those interfaces to souble speed one more time | 07:20 |
| capkirk | i was thinking of gigaswitch with multiple servers (and my workstation) connected to regular 100mb switch and rest of network... (about 35 workstations) | 07:21 |
| foxbuntu | simplexio, could install an atm card as well, then that 12G file wont take long | 07:21 |
| foxbuntu | ;) | 07:21 |
| capkirk | i am not familiar with the concept of 'bonding', but i have seen it mentioned a bit lately | 07:21 |
| foxbuntu | </smart_remark> | 07:21 |
| capkirk | atm? | 07:21 |
| simplexio | atm? | 07:22 |
| simplexio | no familiar with that term | 07:22 |
| foxbuntu | sorry, its a common card in large ISP back bones | 07:22 |
| capkirk | sounds like out of my budget range too then :) | 07:23 |
| hads | s/card/protocol/ | 07:23 |
| foxbuntu | hads, yes sorry | 07:23 |
| * foxbuntu maintains hads to correct my brain lapses | 07:23 | |
| foxbuntu | http://en.wikipedia.org/wiki/Asynchronous_Transfer_Mode | 07:24 |
| simplexio | hmm.. is there allready those 10G ethernet cards, or does sthose speeds need that infinity or what it was cards | 07:24 |
| foxbuntu | simplexio, that infiband, and that not NIC | 07:24 |
| foxbuntu | however there are 10G NICs | 07:25 |
| simplexio | foxbuntu: but you can use infiband to handle ip traffic .. im pretty sure about it. newer seen one | 07:26 |
| foxbuntu | simplexio, it is indeed possible, but its not a NIC card | 07:27 |
| foxbuntu | http://en.wikipedia.org/wiki/InfiniBand | 07:28 |
| foxbuntu | its normally used for local attached NAS devices | 07:28 |
| capkirk | u guys know anything about ata over ethernet? | 07:30 |
| foxbuntu | capkirk, can't say I am, but I am reading about it right now | 07:32 |
| simplexio | im intrested about it too.. can you share crypted software raid5 over ata ethernet | 07:33 |
| capkirk | i have read stuff, but cant seems to grasp its application... | 07:33 |
| capkirk | like, a scenario of where it can be used, and why u would? | 07:33 |
| foxbuntu | capkirk, well its to allow you to build a poor mans NAS | 07:34 |
| simplexio | its idea is remove need for network file systems. so it appear only as "local" harddrive | 07:34 |
| capkirk | cool... thats me!! :) | 07:34 |
| simplexio | im moustly playing with my home server currently and its pain to share data over net and keep permission right, without installing something bigger system like ldap or so | 07:35 |
| foxbuntu | well there is a real down fall to the system however, you can only transmit the AoE packets within a single network, routers strip the proto | 07:35 |
| capkirk | so, if i had a machine running ubuntu server with a couple of hdds in it, then i could access them from another (directly connected over ethernet) computer | 07:35 |
| simplexio | capkirk: yes.. | 07:35 |
| foxbuntu | that would be over kill | 07:36 |
| simplexio | foxbuntu: have you knowledge how its works with software raid and dmcrypt | 07:36 |
| capkirk | why? | 07:36 |
| foxbuntu | there are several (imo) better ways to do that | 07:36 |
| capkirk | u still need a host system for the hdds? | 07:36 |
| capkirk | im interested... i am trying to design a NAS type scalable storage system... | 07:37 |
| foxbuntu | capkirk, OpenNAS, or similar could do just that if you want a dedicated NAS and it doesnt have the routing limitations, or NFS/SMB on your Ubuntu device | 07:37 |
| capkirk | is OpenNAS an add on to ubuntu, or a specialised install for the NAS computer | 07:38 |
| foxbuntu | simplexio, im not sure on the raid + dmcrypt, however I don't think it would affect it because it resides on the ethernet layer. not with tcp/udp (ect) | 07:38 |
| foxbuntu | capkirk, it is its own distro | 07:38 |
| capkirk | ok!! now we talking, sounds like what i been looking for | 07:39 |
| foxbuntu | capkirk, http://www.freenas.org/ | 07:39 |
| capkirk | so roughly how does a network attached server connect to the NAS server | 07:39 |
| simplexio | foxbuntu: ata -> sw raid5 -> dmcrypt -> linux vm -> net filesystem . is data flow now i think | 07:39 |
| capkirk | like the main file server | 07:40 |
| foxbuntu | simplexio, that likely wouldnt work with AoE then | 07:40 |
| simplexio | but thats just educated quess how things work. | 07:40 |
| foxbuntu | simplexio, AoE controls the hardware layer, its kind of like the way WoL works | 07:41 |
| foxbuntu | sending magic packets to the "NAS" device to trigger read/write operations | 07:41 |
| foxbuntu | simplexio, it wouldnt get you around permissions | 07:43 |
| simplexio | well it would, kinda. every user have same uig/guid in both machines | 07:44 |
| foxbuntu | capkirk, with your choice of protos like NFS, or Samba | 07:44 |
| simplexio | i didnt get samba/nfs work with acls | 07:44 |
| foxbuntu | simplexio, yeah, but you could accomplish that with /etc//fstab to a samba or nfs mount as well | 07:44 |
| capkirk | ok, i am testing samba at the moment, and i like it so far, so i would run samba on the front end server and opennas on the storage server? | 07:44 |
| simplexio | foxbuntu: thats good idea | 07:45 |
| capkirk | will opennas provide software raid? | 07:45 |
| simplexio | well its just my own home server which i use store data and test new ideas | 07:45 |
| foxbuntu | capkirk, uh, sort of. samba is what will create the shares on the OpenNAS server, and the clients will connect to the samba shares | 07:45 |
| simplexio | capkirk: and if you plan store anything importand data i recommend raid1 or raid5 | 07:46 |
| foxbuntu | capkirk, I think they support LVM | 07:46 |
| capkirk | so is samba running on the nas server or the front end application server? | 07:46 |
| foxbuntu | simplexio, RAID strategy depends on usage, | 07:46 |
| foxbuntu | capkirk, on the naw device | 07:47 |
| foxbuntu | s/naw/NAS | 07:47 |
| capkirk | ok, so is there any need for a front end server? | 07:47 |
| foxbuntu | capkirk, what do you mean frontend server? | 07:47 |
| foxbuntu | capkirk, its a standalone device, you just connect other machines to it to access the data | 07:48 |
| foxbuntu | capkirk, thats was a NAS is | 07:48 |
| capkirk | ok... like i guess if i wanted to run an alfresco server.... application on a front end server, data on the nas server? | 07:48 |
| foxbuntu | capkirk, http://en.wikipedia.org/wiki/Network-attached_storage | 07:49 |
| foxbuntu | capkirk, yes, that would be possible | 07:49 |
| capkirk | data storage is my main concern and the moment, so attach a NAS, then any computer, whether it be server or workstation can access shares on the nas as data storage | 07:50 |
| foxbuntu | you got it | 07:51 |
| capkirk | user home folders can be directly on the nas? | 07:51 |
| foxbuntu | anything you like | 07:51 |
| capkirk | and then I can run a server like zimbra with the data stored on the nas | 07:51 |
| foxbuntu | anything you like | 07:52 |
| capkirk | i think i am understanding it now... | 07:52 |
| capkirk | then for data backup, just backup the nas machine | 07:52 |
| foxbuntu | :) | 07:53 |
| capkirk | nas machine hardware could be put toghether fairly cheaply with software raid then. sounds good to me | 07:53 |
| foxbuntu | if the data is important, don't use software raid | 07:53 |
| hads | Bah | 07:54 |
| hads | Nothing wrong with software RAID | 07:54 |
| foxbuntu | haha | 07:54 |
| simplexio | sw raid5 is nice | 07:54 |
| _ruben | if the data is important, make backups often :) | 07:54 |
| capkirk | because i cant afford hw raid, do u suggest no raid at all, and regular backups? | 07:54 |
| simplexio | raid dosent replace backups | 07:54 |
| _ruben | raid is no alternative for backups | 07:54 |
| hads | RAID is for uptime, backups are backups. | 07:54 |
| foxbuntu | capkirk, no go ahead with sw raid if you cant do hw raid | 07:55 |
| capkirk | i agree | 07:55 |
| simplexio | capkirk: well then attleast raid1 | 07:55 |
| _ruben | well .. raid0 aint raid | 07:55 |
| foxbuntu | hads, while true, sw raid is not == hw raid | 07:55 |
| capkirk | i will be doing backups for sure... raid is there simply to ensure uptime if a drive fails | 07:55 |
| simplexio | and ups for server is just a good idea is mandatory | 07:55 |
| _ruben | and adds performance (under most circumstances) | 07:55 |
| hads | foxbuntu: Why, except for battery backup? | 07:56 |
| simplexio | could someone explain why ppl talk about battery back up hw raid cards.. dosent ups do just that | 07:56 |
| foxbuntu | hads, write cacheing, i/o offloading... | 07:56 |
| foxbuntu | hads, RAID controllers are far more reliable than sw RAID | 07:57 |
| _ruben | simplexio: battery for raid card is far cheaper than a ups | 07:57 |
| chazco | Hi... when I install phpmyadmin on 9.04 there are prompts about dbconfig... anyone know what should be selected? | 07:57 |
| _ruben | simplexio: and servers can crash, ups wont help | 07:57 |
| foxbuntu | _ruben, thats not the reason for the battery on the card | 07:57 |
| simplexio | ah. so battery on raid card makes sure that all stuff whats in raid card will go to disks | 07:58 |
| foxbuntu | there it is | 07:58 |
| foxbuntu | :) | 07:58 |
| _ruben | thats the technical use of it | 07:58 |
| foxbuntu | in the event of power failure the card has time to send all of its write cache to disk | 07:58 |
| _ruben | i described the events where you'd need it :) | 07:58 |
| hads | I dunno, I don't see the big deal about hardware RAID myself. | 07:58 |
| foxbuntu | hads, I do on a dialy basis | 07:59 |
| hads | *shrug* | 07:59 |
| _ruben | a good hardware raid card has much better performance than software raid | 07:59 |
| _ruben | crappy "hardware" raid cards are outperformed by linux' software raid though | 07:59 |
| simplexio | _ruben: offcourse it has. but software raid is faster than one hardisk | 07:59 |
| foxbuntu | and your RAID can be rebuilt if the software is hosed :) | 08:00 |
| _ruben | simplexio: usualy it is indeed | 08:00 |
| simplexio | offcourse raid level limitations affect it | 08:00 |
| _ruben | raid level + cpu power + bus bandwidth | 08:00 |
| foxbuntu | well, time for bed here | 08:02 |
| foxbuntu | night guys | 08:02 |
| capkirk | bye | 08:04 |
| capkirk | thanks for ur help | 08:04 |
| beniwtv | hi all... can anyone tell me what's wrong with this proftpd <limit> block? http://pastebin.com/m6c0860a3 I want to restrict my users from uploading or changing files in the invoices directory they have, but it doesn't work. | 08:46 |
| uvirtbot` | New bug: #365915 in openldap (main) "package slapd 2.4.15-1ubuntu3 failed to install/upgrade: " [Undecided,New] https://launchpad.net/bugs/365915 | 09:01 |
| Chipzz | beniwtv: dunnow the exact proftpd syntax, but wouldn't you need Order there too? | 09:05 |
| Chipzz | Order Deny, Allow | 09:05 |
| Chipzz | ? | 09:05 |
| beniwtv | Chipzz: From what I've read, no. But you never know :/ | 09:07 |
| Chipzz | if it's anything like apache syntax (which it looks like), that would make sense | 09:07 |
| beniwtv | Chipzz: I have tried to remove the allow, but still the same | 09:14 |
| beniwtv | :( | 09:15 |
| cybersplice | Hey folks. Does anyone use heartbeat/pacemaker under 9.04? | 09:17 |
| === cemc1 is now known as cemc | ||
| uvirtbot` | New bug: #365962 in samba (main) "Samba failed to install correctly 8.10 - 9.04" [Undecided,New] https://launchpad.net/bugs/365962 | 10:56 |
| incorrect | hello, I would like to build a new boot kernel for the netboot install, as it doesn't work for core i7 it seems | 11:39 |
| blizzkid | lol all. anyone tried a server upgrade from intrepid to jaunty yet? | 12:03 |
| blizzkid | s/lol/lo | 12:03 |
| _ruben | i did awhile (pre-final) ago .. went without a hitch | 12:10 |
| blizzkid_ | lo all... can't you do-release-upgrade from intrepid to jaunty?? | 12:23 |
| |dthacker| | blizzkid_: yes, you should. Are you encountering problems? | 12:24 |
| * |dthacker| is planning to do 2 boxes this weekend | 12:25 | |
| blizzkid_ | |dthacker|: yeah, but it was a routing issue... I was confused by the message "no upgrade available" | 12:25 |
| |dthacker| | that would do it.. :) | 12:26 |
| blizzkid_ | upgrading node1 of my cluster right now :) | 12:26 |
| === zoopster1 is now known as zoopster | ||
| ivoks | for the first time in histroy, on the ubuntu 9.04 launch day, microsoft announced >30% drop in revenue :) | 13:11 |
| Kamping_Kaiser | ivoks, has canonical reported a >30% increase? ;) | 13:12 |
| blizzkid_ | hmmz... I set screen to start at login, but it doesn't start at login? | 13:12 |
| Kamping_Kaiser | blizzkid_, how did you set it to start? | 13:12 |
| blizzkid_ | Kamping_Kaiser: through the menu | 13:13 |
| * Kamping_Kaiser assumes this is a new ubuntu thing | 13:13 | |
| ivoks | Kamping_Kaiser: canonical doesn't have stock holders to report its cash flow | 13:13 |
| ivoks | Kamping_Kaiser: on the other hand, at the same time, apple announced 17% rise | 13:13 |
| blizzkid_ | Kamping_Kaiser: it's indeed a new feature in jaunty | 13:13 |
| Kamping_Kaiser | ivoks, not sure I'm happy with that as a compromise :) | 13:14 |
| Kamping_Kaiser | ivoks, going back to your OP, yes, good news :) | 13:14 |
| === zoopster is now known as jpugh | ||
| === jpugh is now known as zoopster | ||
| blizzkid_ | kirkland not here by any chance? | 13:16 |
| henkjan | ivoks: url? | 13:18 |
| ivoks | henkjan: for what? | 13:19 |
| henkjan | ivoks: that microsoft announcement | 13:19 |
| ivoks | http://www.guardian.co.uk/business/2009/apr/23/microsoft-revenue-plunges | 13:19 |
| ivoks | there are also 'bad' news: | 13:21 |
| ivoks | But the company's server and tools business fared better, with a 7% increase in revenue to $3.46bn | 13:21 |
| ivoks | take care... | 13:22 |
| blizzkid | oops | 13:30 |
| |dthacker| | oops? | 13:31 |
| uvirtbot` | New bug: #366044 in mysql-dfsg-5.0 (main) "MySQL upgrade failed when updating to 9.04" [Undecided,New] https://launchpad.net/bugs/366044 | 13:31 |
| |dthacker| | hmmm, I'll have to watch that, I'm upgrading LAMP servers | 13:32 |
| m11 | hello | 13:35 |
| === cybersplice is now known as arclight | ||
| === arclight is now known as cybersplice | ||
| jmalinens | Hi! I have fresh ubuntu 8.04 LTS + virtualmin. Why I can not access my main domain name mysite.org but www.mysite.org works? Thank You! | 13:58 |
| Kamping_Kaiser | jmalinens, you havent set up your www. dns entry? | 13:59 |
| blizzkid | uhoh... I messed up my cluster | 14:01 |
| axisys | i have apticron running... but it is not suggesting to upgrade my server to 9.04 .. i am runing intrepid server per lsb_release -a | 14:02 |
| Kamping_Kaiser | axisys, it probably isnt configured to suggest upgrading to new releases | 14:03 |
| jpds | Hey there Karl. | 14:03 |
| Kamping_Kaiser | jpds, hi mate. hows it going? | 14:04 |
| DSpair | Good morning all. | 14:05 |
| DSpair | Does anyone have link to an article about setting up Xen on Jaunty Server? | 14:05 |
| jpds | I don't think there's been Xen support since Hardy. | 14:06 |
| DSpair | I have installed all of the Xen packages (including the Hypervisor), but how do I bootstrap the dom0 kernel? | 14:06 |
| DSpair | jpds: So, I would have to compile my own Xen kernel then? | 14:06 |
| jpds | Yes. | 14:06 |
| DSpair | K, will do. | 14:06 |
| jpds | KVM is what's supported. | 14:06 |
| DSpair | Thanks. | 14:07 |
| DSpair | KVM is too slow for our workloads. | 14:07 |
| DSpair | IS KVM going to support paravirtualization soon? | 14:08 |
| axisys | Kamping_Kaiser: how do I upgrade to latest server from 8.10 to 9.04 ? | 14:09 |
| Kamping_Kaiser | !upgrade | 14:10 |
| ubottu | For upgrading, see the instructions at https://help.ubuntu.com/community/UpgradeNotes - see also http://www.ubuntu.com/getubuntu/upgrading | 14:10 |
| axisys | Kamping_Kaiser: thnx | 14:10 |
| DSpair | axisys: Using a text editor, modify the /etc/apt/sources.list file and replace all instances of "intrepid" with "jaunty", then save the file and run "sudo aptitude update", then run "apt-get dist-upgrade" | 14:10 |
| Kamping_Kaiser | np | 14:10 |
| cybersplice2 | I don't suppose anyone uses Heartbeat / Pacemaker for clustering, do they? | 14:10 |
| axisys | DSpair: thnx | 14:11 |
| DSpair | axisys: NP | 14:11 |
| jmalinens | Kamping_Kaiser: I have setup DNS. I get error 500... | 14:11 |
| Kamping_Kaiser | jmalinens, internal server error? check your httpd logs | 14:12 |
| jmalinens | no errors there... | 14:12 |
| jmalinens | only in access log I can see error 500 but in error log nothing (I have error_all + log_errors on) | 14:13 |
| Kamping_Kaiser | turn up your logging. perhaps to loglevel debug | 14:13 |
| === tuxlinux_ is now known as tuxlinux | ||
| W8TAH | hi folks -- was just checking out my log server and noticed a bunch of errors from one of my file servers - smbd is trying to make connections to cups for some reason -- cups is not installed and all the cups parts of smb.conf are commented out -- i dont think its really hurting anything other than garbaging up my log files -- an anyone suggest a fix? | 14:15 |
| Kamping_Kaiser | W8TAH, check if smb is advertising printer services to the network | 14:17 |
| Kamping_Kaiser | W8TAH, btw, QTH? | 14:17 |
| W8TAH | Kamping_Kaiser: Medina Ohio -- EN91bd | 14:17 |
| W8TAH | Kamping_Kaiser: how would i check that | 14:17 |
| W8TAH | ? | 14:17 |
| Kamping_Kaiser | W8TAH, no idea about smb sorry, I avoid it (I just have a vague concept of what it might be doing) | 14:18 |
| W8TAH | no worries -- all i use it for is letting windows machines connect | 14:19 |
| W8TAH | :) | 14:19 |
| W8TAH | thanks | 14:19 |
| Kamping_Kaiser | np, good luck with your search :) | 14:20 |
| Kamping_Kaiser | wonder if i have ax5foss registered, I get to use it in 10 min | 14:20 |
| === cybersplice2 is now known as cybersplice | ||
| Kamping_Kaiser | no, just got vk5foss. | 14:21 |
| chazco | Hi... when I install phpmyadmin on 9.04 there are prompts about dbconfig... anyone know what should be selected or if its safe to just enter no? | 14:23 |
| orudie | chazco-> fresh install or update ? | 14:24 |
| chazco | orudie - Fresh install (never do upgrades) | 14:24 |
| orudie | chazco-> well its asking you to automatically create a database for you right ? | 14:25 |
| kirkland | blizzkid: here now | 14:25 |
| blizzkid | hey ppl I need some help here... I messed up my cluster and I need it to be fixed urgently | 14:25 |
| chazco | Yep, but its not something its ever done before so its a bit unusual | 14:25 |
| blizzkid | kirkland: I just wanted to ask you if you had any idea why screen wouldn't start on login? | 14:25 |
| chazco | (mysql and apache2 were installed by the tasksel lamp method) | 14:26 |
| kirkland | blizzkid: what shell are you using? | 14:26 |
| blizzkid | zsh kirkland | 14:26 |
| orudie | chazco-> i did the upgrade from 8.10 to 9.04 so i chose NO, since my databases are already configured, you should select Y | 14:26 |
| DSpair | blizzkid: What's up? | 14:26 |
| kirkland | blizzkid: does zsh respect .profile? | 14:26 |
| DSpair | kirkland: I don't believe so. | 14:27 |
| blizzkid | DSpair: I upgraded from Intrepid to Jaunty, now my /data0 is gone... /data0 was ocfs on drbd | 14:27 |
| chazco | orudie - Ok... where will this database end up (doesnt seem to be a mysql one) | 14:27 |
| blizzkid | not sure kirkland I'll look into that | 14:27 |
| kirkland | blizzkid: cool, thanks. please open a bug against screen-profiles with your findings | 14:27 |
| blizzkid | will do so :) | 14:27 |
| DSpair | blizzkid: Hmmm . . . I got no experience with Oracle's cluster filesystem. I would say that the drivers would need to be re-built/re-installd. | 14:27 |
| orudie | chazco-> no it should be mysql, you are installing LAMP right ? | 14:27 |
| kirkland | blizzkid: i can special case zsh, if you can show me what's the equivalent of .profile | 14:27 |
| blizzkid | DSpair: I'd expect it do be in the upgrade? | 14:28 |
| DSpair | blizzkid: Is ocfs included in Ubuntu? | 14:28 |
| chazco | orudie - Yep, mysql is already installed and working... | 14:28 |
| W8TAH | hi folks -- was just checking out my log server and noticed a bunch of errors from one of my file servers - smbd is trying to make connections to cups for some reason -- cups is not installed and all the cups parts of smb.conf are commented out -- i dont think its really hurting anything other than garbaging up my log files -- an anyone suggest a fix? | 14:29 |
| DSpair | blizzkid: I guess it is... Hmmm . . . | 14:29 |
| orudie | chazco-> the prompt is just to make your life easier with interractive install to get phpmyadmin working in seconds, without having do it manually | 14:29 |
| blizzkid | kirkland: there is /etc/zprofile | 14:30 |
| DSpair | blizzkid: Well, I'm out of my depth here. Lemme see what I can find on Google. | 14:30 |
| chazco | orudie - So has something changed since 8.10? Back then it was just a case of install phpmyadmin and select apache2... Seems to work anyway. Thanks :) | 14:30 |
| orudie | i look at it that way anyway chazco | 14:30 |
| Kamping_Kaiser | blizzkid, why dont you use screen as your shell? | 14:30 |
| kirkland | blizzkid: that's system wide. what about per-user, in $HOME? | 14:30 |
| blizzkid | nah, only .zshrc | 14:31 |
| Kamping_Kaiser | and then set screen to fire up zsh | 14:31 |
| blizzkid | Kamping_Kaiser: would that work? | 14:31 |
| Kamping_Kaiser | blizzkid, yes. | 14:31 |
| orudie | chazco-> i didnt upgrade my production box yet, only my other personal one , and so far i didnt notice anything big, but you should have chose the ext4 file system thats the major change i hear | 14:31 |
| chazco | I meant specific to phpmyadmin | 14:32 |
| DSpair | blizzkid: It would likely work, but I recommend against it. If you try to use something like "sftp" or "rsync" over SSH, using screen as part of your default environment will prevent those tools from working. | 14:32 |
| orudie | chazco-> i haven't even tried to access it after the update, let me try now | 14:32 |
| blizzkid | DSpair: ok, I'll just not do that then :) | 14:32 |
| blizzkid | grmblz... damn cluster | 14:33 |
| DSpair | blizzkid: Is there anything in dmesg which says that the driver loaded successfully? | 14:33 |
| chazco | Just this dbconfig stuff is all new... previously nothing like that was needed | 14:33 |
| orudie | i didnt have to do anything chazco | 14:33 |
| orudie | chazco-> and it works, with a new interface | 14:34 |
| blizzkid | DSpair: drbd is loaded according to lsmod | 14:34 |
| chazco | hmm... i wonder if its not detecting mysql or something then at install time... thanks anyway orudie | 14:34 |
| orudie | chazco-> np | 14:34 |
| DSpair | blizzkid: Did the upgrade make any changes to your .conf files? | 14:34 |
| chazco | Selected "No" on the test machine and that works at least. Thanks :) | 14:34 |
| blizzkid | DSpair: I kept the original ones | 14:35 |
| DSpair | blizzkid: Also, did the "ocfs2" modules load? | 14:35 |
| blizzkid | yes DSpair | 14:36 |
| DSpair | blizzkid: Well, that's the extent of what I've found on Google then. | 14:36 |
| blizzkid | why did I upgrade again? lol | 14:37 |
| blizzkid | I lost my documentation bookmark too | 14:37 |
| blizzkid | so I don't remember the exact steps I followed | 14:38 |
| DSpair | blizzkid: How about this link: http://www.ubuntugeek.com/heartbeat2-xen-cluster-with-drbd8-and-ocfs2.html | 14:38 |
| blizzkid | let me take a look DSpair | 14:40 |
| === NCommander is now known as Guest73647 | ||
| blizzkid | hmmz... I'm getting /dev/drbd0: Failure: (112) Meta device too small on one node now | 14:41 |
| === Guest73647 is now known as NCommander | ||
| cybersplice1 | Damn. Exact same bug in Pacemaker as in Intrepid. | 14:42 |
| === cybersplice1 is now known as cybersplice | ||
| blizzkid | wtf... my /dev/md4 is gone | 14:45 |
| blizzkid | pardon my french | 14:45 |
| blizzkid | hmmmz.... sda7 is part of a raid array... which is normal | 14:53 |
| blizzkid | but... I can't access that raid array anymore | 14:53 |
| blizzkid | Is there any way to save my data from an linux_raid_member partition? | 14:59 |
| W8TAH | hi folks -- was just checking out my log server and noticed a bunch of errors from one of my file servers - smbd is trying to make connections to cups for some reason -- cups is not installed and all the cups parts of smb.conf are commented out -- i dont think its really hurting anything other than garbaging up my log files -- an anyone suggest a fix? | 15:01 |
| mrwes | looking for a how to on tweaking the .rtorrent.rc file | 15:03 |
| henriquelm | Hello there | 15:05 |
| henriquelm | I have just upgraded a ubuntu server from 8.10 to 9.04, and clients on the network can not print. can someone help me out? | 15:05 |
| sommer | henriquelm: do you have any errors in /var/log/syslog or /var/log/cups/error_log? | 15:13 |
| henriquelm | sommer, will check that | 15:13 |
| W8TAH | hi folks -- was just checking out my log server and noticed a bunch of errors from one of my file servers - smbd is trying to make connections to cups for some reason -- cups is not installed and all the cups parts of smb.conf are commented out -- i dont think its really hurting anything other than garbaging up my log files -- an anyone suggest a fix? | 15:20 |
| blizzkid | help me :) | 15:23 |
| blizzkid | I got /dev/md4 ... now I have /dev/md_d4 and /dev/md_d4p1 | 15:23 |
| blizzkid | md4 had /dev/sda7 and /dev/sdb6 | 15:23 |
| blizzkid | now if I look at /proc/mdstat I see /dev/md_d4 has /dev/sdb6 | 15:24 |
| junix | i see to be having some issues setting up ProFTPd, i want to chroot some users and let others have full access, when i put in the option in the DefaultRoot ~,users,!elite-users and try to login, it goes all the way through it and says "Could not connect to server", Reverse DNS lookup is turned off. | 15:30 |
| atomic_1 | junix: you might want to try #proftpd | 15:33 |
| junix | i did | 15:33 |
| junix | they were of no help and told me to RTFM, this is most likely a simple fix, i have been reseraching this for a while now... | 15:33 |
| atomic_1 | after you made your changes to proftpd.conf, did you reload/restart the service ? | 15:34 |
| junix | yes | 15:35 |
| atomic_1 | is it listening ? netstat -tlnp | grep proftpd | 15:35 |
| junix | no... | 15:35 |
| junix | weird... | 15:35 |
| atomic_1 | check the logfiles (usually /var/log/proftpd) | 15:36 |
| junix | nothin there | 15:37 |
| atomic_1 | what does it say when you do "/etc/init.d/proftpd restart" | 15:39 |
| junix | it restarts the service | 15:40 |
| junix | or it says it does | 15:40 |
| atomic_1 | what port do you use ? | 15:40 |
| junix | 21 | 15:40 |
| atomic_1 | ftp localhost | 15:41 |
| atomic_1 | netstat -tlnp | grep 21 | 15:41 |
| junix | it looks like the server is not working properly | 15:42 |
| atomic_1 | well if your conf file is borked, it shouldnt start | 15:42 |
| atomic_1 | do you have a firewall ? | 15:42 |
| junix | no.... | 15:42 |
| henriquelm_ | sommer, I think it's something wrong with samba intead | 15:43 |
| atomic_1 | pastebin your conf file, os & proftpd version | 15:43 |
| junix | ok | 15:43 |
| junix | 1 sec | 15:43 |
| junix | iptables was installed | 15:43 |
| junix | :-( | 15:43 |
| atomic_1 | and iptables -L -nv for good measure | 15:43 |
| W8TAH | hi folks -- was just checking out my log server and noticed a bunch of errors from one of my file servers - smbd is trying to make connections to cups for some reason -- cups is not installed and all the cups parts of smb.conf are commented out -- i dont think its really hurting anything other than garbaging up my log files -- an anyone suggest a fix? | 15:44 |
| Hecate | junix, atomic_1: even if the netfilter was dropping any taffic outbound from/inbound to the ftp-server, it is still possible to open a listening socket, which should be listed by netstat. | 15:47 |
| Hecate | W8TAH, i've noticed that strange samba behaviour as well, since i've set up a samba server for testing only recently. | 15:48 |
| junix | atomic_1, Hecate: http://pastebin.com/m36d6ac2a | 15:48 |
| W8TAH | any solutions? | 15:48 |
| Hecate | junix, ServerType inetd | 15:48 |
| Hecate | thats your problem | 15:48 |
| junix | ok | 15:49 |
| junix | change to standalone? | 15:49 |
| Hecate | yeah. that should fix it. | 15:49 |
| atomic_1 | yep | 15:49 |
| atomic_1 | beat me to it | 15:49 |
| atomic_1 | :) | 15:49 |
| Hecate | W8TAH, haven't spend any time on finding one. | 15:49 |
| Hecate | i wonder why ppl still use sth as useless as inetd, nowadays. | 15:50 |
| Hecate | (it's useless in my mind. other ppl might think differently) | 15:50 |
| junix | Hecate: i get this nowq | 15:54 |
| junix | Connection attempt failed with "ECONNREFUSED - Connection refused by server". | 15:54 |
| Hecate | now it's getting more difficult for me. i have never really used proftpd, in favor of vsftpd, which i again abandonned in favor of chrooted sftp using openssh's internal-sftp method. | 15:56 |
| Hecate | it might be the listening address. | 15:56 |
| junix | ok | 15:56 |
| junix | wait | 15:56 |
| Hecate | sure "DefaultAddress 192.168.1.45" is one of the server's ip-addresses? | 15:56 |
| junix | my goal was to use chrooted sftp using openssh | 15:56 |
| junix | but i couldn't get it working... | 15:57 |
| atomic_1 | is something else using port 21 ? | 15:57 |
| junix | i doubt it | 15:57 |
| atomic_1 | did you install proftpd from repo ? | 15:58 |
| Hecate | w8 a sec | 15:58 |
| junix | ok | 15:58 |
| W8TAH | ok | 15:58 |
| Hecate | ok, junix, i stumbled upon a very interesting article on www.debian-administration.org only recently. let me quickly get the url for you. | 15:59 |
| junix | oh ok | 15:59 |
| junix | thanks | 15:59 |
| junix | which is this in regards too | 15:59 |
| Hecate | junix: http://www.debian-administration.org/article/OpenSSH_SFTP_chroot_with_ChrootDirectory | 16:00 |
| junix | Hecate: i tried going through this... | 16:01 |
| Hecate | works perfectly for me. (despite some logging issues.) | 16:01 |
| Hecate | but? | 16:02 |
| Szernex | hi | 16:02 |
| junix | Hecate: here is what i didn't understand..why does it have to be internal-sftp, and will users from outside the network be able to access this? | 16:02 |
| Hecate | do you understand the basics on chrooting? | 16:02 |
| junix | yes] | 16:03 |
| Hecate | so in case the used an external sftp-server (which would have to be executed after the chroot()), its binary and all its dependencies would have to be inside the chroot. | 16:03 |
| Hecate | that's why the openssh devs included a sftp-server into the sshd-binary. | 16:04 |
| Hecate | now it can chroot itself and execute the sftp-server without needing any libs inside the chroot. | 16:04 |
| blizzkid | Where does ubuntu server get the md_d4 name from??? nothing in /etc/raidtab nothing in /etc/mdadm/mdadm.conf | 16:04 |
| blizzkid | it's driving me nuts | 16:04 |
| junix | Hecate: here is my dilema, i need to have all individual users go to their own home directory if i do this, is this possible? | 16:05 |
| Hecate | blizzkid, r you talking about the hostname? | 16:06 |
| blizzkid | Hecate: no raid device names | 16:06 |
| axisys | !update | 16:06 |
| ubottu | For upgrading, see the instructions at https://help.ubuntu.com/community/UpgradeNotes - see also http://www.ubuntu.com/getubuntu/upgrading | 16:06 |
| Hecate | for security reasons, ssh refuses to chroot into a directory which the any user (but root, of course) has write access to. | 16:07 |
| junix | Hecate: yeah i need each user to be chrooted/jailed to their dir | 16:08 |
| Hecate | for security reasons that's not possible. | 16:08 |
| junix | :-( | 16:08 |
| junix | well then | 16:08 |
| junix | back to proftpd | 16:08 |
| Hecate | i tackled that issue by having a global sftp directory containing all user's home directories. that sftp directory is my chroot directory. i simply make sure that user's cannot access other user's home dirs by setting proper permissions. | 16:09 |
| * blizzkid is really stuck | 16:10 | |
| Hecate | that global chroot dir is particularly important when one needs logging (otherwise it would be a very difficult task. | 16:10 |
| junix | Hecate: i can't do it for HIPPA reasons | 16:10 |
| Hecate | but i have to say the the openssh devs could have implemented the internal-sftp in a far better way. | 16:10 |
| incorrect | is using lh_config/build the right way to regenerate your own custom netboot.tar.gz? | 16:11 |
| junix | Hecate: i want as little work as possible...for if openssh does get to that point where everyone is chrooted, i can switch easily | 16:11 |
| Hecate | chrooting itself works. just not the way you know it from ftp ;) | 16:11 |
| Szernex | someone here who's experienced in creating a public share with samba (public in terms of no user/pass authentification with windows-machines)? | 16:12 |
| junix | Hecate: yeah | 16:12 |
| Hecate | junix, nonetheless, if you wanna go back to ftp, just make sure you use encryption. you surely know that sniffing on one's password data is a piece of cake when using the old-fashioned ftp-protocol. | 16:13 |
| junix | yeah | 16:13 |
| junix | that is why i'm implementing proftpd to use the mod_ssh with is | 16:13 |
| junix | it | 16:13 |
| Hecate | junix, "Connection attempt failed with "ECONNREFUSED - Connection refused by server"". could that have sth. to do with the listening address you set? | 16:14 |
| junix | shouldn't... | 16:14 |
| junix | proftpd is the only ftp installed | 16:15 |
| Hecate | so the server can be reached via 192.168.1.45 | 16:15 |
| junix | i'm ssh'ed into it | 16:16 |
| Hecate | when does the error occur? | 16:16 |
| junix | when i use filezilla from a windows box | 16:16 |
| Hecate | so, is proftpd listening, at all? | 16:17 |
| blizzkid | no-one experienced with software raid? | 16:17 |
| blizzkid | I'm completely stucj here | 16:17 |
| incorrect | i need to do a quick benchmark of my cpu | 16:18 |
| junix | Hecate: it doesn't look that way | 16:18 |
| Hecate | incorrect, dd if=/dev/urandom of=/dev/null bs=1K | 16:18 |
| Hecate | not multithreaded, however. | 16:18 |
| Hecate | junix, it doesn't "look" that way? | 16:19 |
| incorrect | Hecate, err that tests my disk io | 16:19 |
| junix | Hecate: no | 16:19 |
| junix | its not running | 16:19 |
| junix | when i do a netstat -an|grep 192.168.1.45:21 | 16:19 |
| junix | nothing comes up | 16:19 |
| Hecate | incorrect, no, it tests your processor, since the data is read from and written to memory/kernel/udev-only devices. | 16:19 |
| Hecate | and urandom's prng is very, very cpu-intensive. | 16:20 |
| incorrect | oh sorry i didn't read what you wrote | 16:20 |
| incorrect | duh i am stoopid | 16:20 |
| Hecate | junix, "netstat -lvveenpoA inet,inet6" and check for anything that sounds like port 21 or proftpd. don't use grep. | 16:21 |
| Hecate | then use (h)top to check if the proftpd-process is running. do also check the log, for anything suspicious. | 16:22 |
| Hecate | i hope you also restarted the server after changing the config. did the (re-)start command print out anything? | 16:22 |
| junix | i did | 16:24 |
| junix | nothing in the logs | 16:24 |
| incorrect | hmm, i guess lh_config -b net doesn't generate me a netboot release | 16:51 |
| ha1331 | I managed to make my ubuntu server unbootable. The thing is, that I had my /boot on /dev/sdd2 and wanted to use /dev/sda2. I mounted the /dev/sda2, copied the contents of the orginal /boot to it. edited the /etc/fstab and did grub-install.... Now all that happens is that the machine boots to grub, and I can even select the image I want to use, like before, but it doesn't exist. I think that it still tries to use the /dev/sdd2 for /boot. Is ther | 16:55 |
| Gena01 | hi, so I installed Ubuntu Server 9.04 yesterday, converting over from Mandriva, and now I am seeing something strange in the command-line.. when I do php -i | less arrrow keys don't work, but everything is fine when I do ls -alp |less | 16:57 |
| Gena01 | This is the first time I see less behaving differently in various circumstances | 16:58 |
| Hecate | ha1331, since you moved the bood manager from one disk to another, did you adjust the hdd boot sequence? | 16:58 |
| Hecate | (in the bios) | 16:58 |
| ha1331 | Hecate no need to, I'm pretty sure that the boot manager was installed to /dev/sda in the first place | 17:00 |
| ha1331 | Hecate and also, it still loads the grub, even if the /dev/sdd isn't in the machine anymore | 17:00 |
| Hecate | alright. sure you adjusted the grub-config, so it's looking for the images on the right disk? | 17:01 |
| Hecate | that might be your issue. | 17:02 |
| ha1331 | couldn't even find grub.conf anywhere | 17:02 |
| Hecate | /boot/grub/menu.lst | 17:02 |
| ha1331 | hmm | 17:02 |
| Hecate | it's probaly looking for the images in a wrong place. | 17:03 |
| ha1331 | not sure if I did that, but I'm thinking not, cause at some point I did see reference to (hd3,1) or similar | 17:03 |
| ha1331 | can it be done from grub shell? | 17:03 |
| junix | Hecate: brb allergies attacking | 17:03 |
| Hecate | hay-fever? i h8 that crap. hit me pretty hard this summer, too. | 17:04 |
| ScottK | ha1331: It can. Or you can boot a live CD. | 17:04 |
| ha1331 | other question, can I use non-hotplug sata drive on HP Proliant ML350 G5. Manual states that one can use SATA drives, but can I use non hot-pluggable? | 17:05 |
| junix | Hecate: yeah | 17:05 |
| junix | Hecate: maple, rag-weedm pollken | 17:05 |
| Hecate | ha1331, you should even be able to do that on the fly using the grub-menu. (using the e-key, etc.) | 17:05 |
| Hecate | im not entirely sure, though | 17:06 |
| ha1331 | maaaan, this surely is not my day... | 17:07 |
| junix | Hecate: port 21 is opened up on 0.0.0.0 | 17:07 |
| Hecate | sounds good. proftp being the application associated with it? | 17:08 |
| tclineks | how do i change to the virtual kernel? i installed it but it don't get an initrd image from it | 17:08 |
| junix | no | 17:08 |
| junix | inetd | 17:08 |
| ha1331 | I even tried to do the root (hd0,1) and then setup(hd0). It seems not to find /boot/grub/stage1 but instead it finds /grub/stage1 and at the end it says succeeded... after reboot, still the same situation | 17:09 |
| Hecate | junix, if i were you, i'd drop that piece of s***. | 17:09 |
| junix | Hecate: what do you meanm? | 17:09 |
| Hecate | inetd | 17:09 |
| junix | i installed proftpd | 17:09 |
| junix | inetd is old...shouldn't it be xinetd? | 17:10 |
| Hecate | i prefer not using any inetd+derivates at all. just complicates things a lot. | 17:10 |
| junix | i see | 17:11 |
| Hecate | and with the internet being mroe and more hostile, inetd could pose a threat, as restarting deamons frequently makes them a possible point of assault for dos-attacks. | 17:11 |
| jcastro | iirc proftpd asks you a debconf question if you want standalone or whatever | 17:11 |
| orudie | is it possible to host own irc server ? | 17:12 |
| ha1331 | orudie yes | 17:12 |
| orudie | any details on this ha1331 ? | 17:12 |
| teckfatt | hey, is that normal to have like 0.05% of error packets in a busy network/server? | 17:13 |
| incorrect | can anyone point me in the right direction to generate my own custom kernel and initrd for a pxe boot install? | 17:13 |
| junix | Hecate: i'm debating on going back to vsftpd....it was easier | 17:13 |
| Hecate | yes it is | 17:13 |
| ha1331 | orudie: nope, never done that, but have used one that was hosted on computer at the end of DSL line | 17:13 |
| junix | but can't do as much | 17:13 |
| Hecate | junix, nowadays boxes do have such huge amounts of ram, that having deamons run all the time has advantages. decreases latency, saves i/o and cpu-time. inetd is in my opinion a relict from before the cold war. ;) | 17:14 |
| Hecate | junix, any features you'd miss on vsftpd? | 17:15 |
| ha1331 | orudie http://ubuntuforums.org/showthread.php?t=233146 | 17:15 |
| junix | the mod_ssh | 17:15 |
| ha1331 | orudie did Google: ubuntu irc-server install howto | 17:16 |
| Hecate | junix, what's it do? | 17:16 |
| junix | Hecate: it uses ssh to encrpyt the traffic... | 17:18 |
| Hecate | so it acts as if it were an ssh server? | 17:18 |
| junix | i think so | 17:18 |
| junix | havent set it up\ | 17:18 |
| tclineks | how do i change to the -virtual kernel? | 17:19 |
| Hecate | not using the crappy port- and pasv-methods, which really suck ass, when it comes to routing the encrypted traffic back through one's firewall. | 17:19 |
| Hecate | that was one of my major reasons for switching to ssh. | 17:19 |
| junix | Hecate: agreed... | 17:19 |
| junix | Hecate: there is a Match user option for ssh.... | 17:19 |
| junix | i'm wondering if that will work | 17:20 |
| Hecate | what? | 17:20 |
| junix | for openssh | 17:20 |
| junix | to do chrooting | 17:20 |
| Hecate | it does work. im currently using it. | 17:20 |
| junix | oh you are | 17:20 |
| Hecate | didnt we talk about that only an hour ago? | 17:20 |
| junix | i thought you were doing the Match group | 17:20 |
| junix | i would think there is a difference | 17:21 |
| tclineks | hm, sudo aptitude reinstall linux-image-2.6.28-11-virtual did it | 17:22 |
| Hecate | junix, im using match group. | 17:23 |
| junix | ah ok | 17:23 |
| junix | yeah | 17:23 |
| Hecate | otherwise i could use ssh to admin my server anymore. | 17:23 |
| junix | hmmm | 17:24 |
| leonel | dovecot is not picking the arrived mail that is on /var/spool/mail/username this with Jaunty .. | 17:27 |
| uvirtbot` | New bug: #322214 in php5 (main) "php incorrectly opens stdin" [Undecided,Confirmed] https://launchpad.net/bugs/322214 | 17:27 |
| Hecate | junix, another argument against using encrypted ftp: http://scary.beasts.org/security/CESA-2008-002.html and partially http://scarybeastsecurity.blogspot.com/2008/07/on-ftp-ssl-and-broken-interfaces.html (the last one really messes some things up with certain clients) | 17:28 |
| junix | Hecate: ok | 17:29 |
| Hecate | junix, i'd do a dpkg-reconfigure on proftpd and try to switch to standalone mode. dunno if it's possible and dunno if mod_ssh does what it pretends. | 17:29 |
| Hecate | if you want an emphasis on security you CANNOT use encrypted ftp. | 17:29 |
| junix | ok | 17:30 |
| junix | apprecaite it | 17:30 |
| Hecate | you're welcome | 17:31 |
| Hecate | so vsftpd is not an option and proftpd+mod_ssh only can case it does what i think it does. | 17:31 |
| junix | well vsftpd is an option still | 17:32 |
| junix | it will be the option if i can't get this working... | 17:32 |
| junix | i can still have ppl use ftp | 17:32 |
| Hecate | depending on how paranoid you are ;) | 17:34 |
| Hecate | just try to get proftpd working | 17:34 |
| Hecate | it appears to be the best solution, to me. | 17:34 |
| Hecate | junix, are you sure there is a mod_ssh for proftpd? all i stumbled upon so far, is mod_ssl. | 17:49 |
| junix | its on the website | 17:49 |
| ha1331 | still no luck... Any ideas howto fix grub from grub shell? I think I need to modify menu.lst, like Hecate pointed out. | 17:50 |
| Hecate | junix, all google finds is mod_ssl or request for a mod_ssh on the forums, see for yourself: http://www.google.de/search?q=mod_ssh+site:proftpd.org&hl=de&start=0&sa=N | 17:51 |
| ha1331 | would be awesome to fix permanently, but I would be satisfied if I could just get it to boot. I can re-install the whole system on later date | 17:53 |
| Hecate | there must be a method to fix it without a reinstall. | 17:54 |
| Hecate | lacking the knowledge on how to do it with the grub shell id just use a live cd | 17:55 |
| ha1331 | Hecate: I bet there is, but I'm feeling bit too simple to achieve that :). LiveCd isn't an option currently, there is no CD-drive at the moment | 17:55 |
| junix | Hecate: i have to create a ssl cert like i would for mod_ssl on apache | 17:57 |
| junix | geez | 17:57 |
| Hecate | so it's probably just encrypted ftp. | 17:58 |
| Hecate | ha1331, maybe a bootable usb stick? | 17:58 |
| ha1331 | Hecate :D that sound's like an all nighter | 17:59 |
| Hecate | not at all. since intrepid ubuntu's capable of converting an iso image into a bootable usb-stick in a jiffy. | 18:00 |
| Hecate | system > administration > create usb startup disk | 18:00 |
| Hecate | if that's not an option either, i'm afraid you'll have to find out how to do it, yourself. | 18:01 |
| Hecate | maybe #grub ? | 18:01 |
| ha1331 | Hecate haha, awesome. Found cd-drive! | 18:01 |
| ha1331 | Hecate so, what should I burn on a cd? Normal installation cd or something else? | 18:02 |
| Hecate | the common live-cd should do it. | 18:03 |
| ha1331 | Hecate: And you think that I can fix the issue using it? | 18:04 |
| Hecate | (idea: what about just plugging the disk into another computer?) | 18:04 |
| ha1331 | Hecate only windows machines availeable | 18:04 |
| Hecate | that sucks | 18:04 |
| ha1331 | Hecate Amen to that | 18:04 |
| Hecate | yes, i think it should be possible. | 18:04 |
| ha1331 | Ubuntu 9.04 Desktop (the latest version) this is what I need? | 18:05 |
| Hecate | what's the server running? | 18:05 |
| ha1331 | 9.04 server | 18:06 |
| Hecate | yes, go for 9.04 desktop then. | 18:06 |
| Hecate | make sure you choose the same architecture. | 18:06 |
| Hecate | 32bit live-cd + chrooting into 64bit-system + exec'ing grub-install/update-grub ain't such a good idea. | 18:07 |
| Hecate | i'll be right back - hopefully. upgrading to jaunty. | 18:11 |
| infinity | ha1331: You can just edit the grub command line from the boot menu, if it's just menu.lst that's broken. | 18:11 |
| infinity | ha1331: No need for rescue CDs for that. | 18:11 |
| infinity | ha1331: Select the boot stanza you want, hit "e" for edit, and fix it to be correct, then boot. | 18:11 |
| ha1331 | infinity not sure what to fix | 18:14 |
| infinity | ha1331: Depends on what's going wrong, I suppose. Bad path (superfluous /boot in the kernel path can happen, if you grub-install on a partition when it's not listed in fstab/mtab at the time), bad hd() specification, etc. | 18:17 |
| infinity | ha1331: But all of that can be mangled from the boot menu... Assuming you're getting a menu at all. | 18:18 |
| infinity | ha1331: If you're not getting to a stage2 menu, then you have bigger problems and, yes, need to fix it from a rescue CD or the like. | 18:18 |
| embrik | I want all my 100 workstations to shut down at 1800 each night. Therefore I made a crontab with this line in it: 00 18 * * * halt -p But nothing happened. | 18:20 |
| anthony1x | is it a good idea to run HIDSs and NIDSs and similar software also on _desktop_ linux systems? or does it only make sense to do that on servers? | 18:20 |
| bn43 | hi I'd like to know how far the ubuntu server for small business coming along? I read about an smeserver type server? | 18:25 |
| stickystyle | embrik: did you put the shutdown in a crontab that has permissions to shutdown? e.g. /etc/cron.d or root's crontab | 18:44 |
| bn43 | hi I'd like to know how far the ubuntu server for small business coming along? I read about an smeserver type server? | 18:46 |
| stickystyle | bn43: I'm not aware of anyone working on it (not that I have any inside knowledge), it has been brought up a few times on the ubuntu-server mailing list - but I don't think anyone has started building something. But I may be wrong. | 18:52 |
| NCommander | bn43: smeserver? | 18:52 |
| stickystyle | bn43: your talking about this https://wiki.ubuntu.com/SmallBusinessServer right? | 18:53 |
| bn43 | stickystyle: yes! that one | 18:53 |
| bn43 | NCommander: www.contribs.org | 18:54 |
| stickystyle | bn43: yeah, looking at the wiki page it doesn't look like anyone has really started to run with the idea past brainstorming. | 18:55 |
| bn43 | thats a shame! I was hoping shuttleworth would put some investment behind that - there's a real demand for it | 18:56 |
| ivoks | which one? | 18:57 |
| yann2 | bn43 > what do you think would be the benefits over the standard ubuntu server? | 18:57 |
| stickystyle | bn43: Don't quote me on any of this though, someone may be doing it. Im just a guy that reads mailing lists and wikis ;) | 18:58 |
| bn43 | yann2: simple easy setup like smeserver | 18:58 |
| bn43 | easy coniguration and administration for the non-tech savvy | 18:59 |
| yann2 | you want an active directory + exchange + sharepoint + mssql all on one server? I hope you got plans for good backup :) | 19:00 |
| ball | Does Ubuntu Server make use of SpeedStep (where present)? | 19:12 |
| ivoks | 9.04 yes | 19:13 |
| ball | ivoks: thanks | 19:14 |
| ball | ivoks: is that also true for CnQ on AMD gear? | 19:15 |
| ivoks | should be, yes | 19:15 |
| ivoks | i haven't tested it on amd | 19:15 |
| ball | okay, I'll give that a try when I have appropriate hardware to hand. | 19:15 |
| ivoks | ball: it should work, it's based on the same technology as desktop version | 19:16 |
| ivoks | uh... buzzwords :) | 19:16 |
| ball | ivoks: I'm just getting into the desktop version. | 19:16 |
| ball | ivoks: I've been running the server for a while, but still haven't learned much about it. For my purposes it JustWorks[tm] | 19:17 |
| ivoks | ball: kirkland made an effort of making 9.04 as green as possible | 19:17 |
| ball | ivoks: is it possible to upgrade an 8.10 server to 9.04 in-situ, without reinstalling? | 19:17 |
| ivoks | ball: so, hibernating and suspending servers is supported on hardware that supports it | 19:17 |
| ivoks | ball: yes, run do-release-upgrade | 19:17 |
| ball | Okay, let me try to ssh in now. | 19:18 |
| ivoks | you'll need one reboot at the end of the process | 19:18 |
| * kirkland hugs a tree, and ivoks | 19:18 | |
| * ivoks awwww... | 19:19 | |
| ball | I think that's another good reason to give Ubuntu Server serious consideration. | 19:19 |
| ivoks | sure is | 19:20 |
| ball | I wish I'd partitioned this server differently, it would have eased the migration to Ubuntu | 19:20 |
| ivoks | ball: if you have ipmi card in your server, that would round up whole thing | 19:20 |
| ivoks | no space? :) | 19:20 |
| ball | Is ipmi LOM? | 19:20 |
| ivoks | yes | 19:21 |
| ball | ivoks: we have three drives and the man from HP said that RAID-1 was "impossible" | 19:21 |
| ball | ...so we have RAID-5 | 19:21 |
| ivoks | well raid1 is impossible with three drives | 19:21 |
| ball | ivoks: it's not, but even if I had to pull one of the drives I would rather we did that | 19:22 |
| ball | (that's why I ordered three drives in the first place) | 19:22 |
| ivoks | well, you can do raid11 | 19:22 |
| ball | You can have the mirror + one hot standby | 19:22 |
| ball | (with three) | 19:22 |
| ivoks | oh... or that | 19:22 |
| ball | How well does Ubuntu work with an HP SmartArray E200 RAID board? | 19:24 |
| ivoks | very well | 19:25 |
| ball | Will I be able to ask Ubuntu about the health of each drive? | 19:26 |
| ball | (and the array in general) | 19:26 |
| ivoks | smart? | 19:27 |
| ivoks | yes | 19:27 |
| ball | The OS I run now works well, but doesn't let me check the array remotely | 19:27 |
| ball | ...which I consider a problem. | 19:27 |
| ivoks | with hp tools? | 19:27 |
| ivoks | as for array, i'm not sure | 19:28 |
| ball | ivoks: HP tools aren't available for NetBSD afaik, though perhaps they'd work if I installed Linux emulation | 19:28 |
| ivoks | i'm not sure hp provides tools for ubuntu | 19:30 |
| ivoks | yet :( | 19:30 |
| ball | ivoks: wouldn't they just have to be Linux tools? | 19:30 |
| ball | I know we bought this with some Linux installed | 19:30 |
| ball | ...not sure which one. | 19:31 |
| ivoks | since those tools aren't open source and they use some hp's drivers and they ship only binaries, they support only some distributions | 19:31 |
| ball | Ah, okay. | 19:31 |
| ivoks | but since hp and canonical are getting friendly, we might expect those tools for ubuntu too | 19:32 |
| ball | Perhaps I should badger HP for Ubuntu Server support. | 19:32 |
| foxbuntu | ball, iirc HP is working on it | 19:32 |
| jeff__ | hey, where is the ubuntu-server metapackage in ubuntu jaunty? | 19:32 |
| ivoks | no such thing | 19:33 |
| jeff__ | why? | 19:33 |
| ivoks | what would you expect from ubuntu-server metapackage? | 19:33 |
| ball | foxbuntu: That would be good. | 19:33 |
| jeff__ | the same thing as ubuntu-desktop, only for ubuntu server | 19:33 |
| ivoks | hehe | 19:33 |
| ivoks | so, which service should ubuntu-server package install? | 19:33 |
| jeff__ | its been in every version | 19:33 |
| jeff__ | lamp | 19:34 |
| ivoks | only lamp is server? | 19:34 |
| ivoks | and what if i want mail server? | 19:34 |
| jeff__ | i can install all the individual components, it just makes everything simple | 19:34 |
| ivoks | you can install task, not a metapackage | 19:34 |
| ivoks | there was never ubuntu-server metapackage | 19:34 |
| jeff__ | whats task? | 19:35 |
| ivoks | run tasksel | 19:35 |
| ivoks | and select LAMP server | 19:36 |
| jeff__ | arrite | 19:37 |
| ivoks | mathiaz: welcome back ;) | 19:40 |
| ball | Hello mathiaz | 19:41 |
| ball | Does Ubuntu Server ship with Samba? | 19:41 |
| mathiaz | ivoks: hi | 19:41 |
| ivoks | ball: yes | 19:41 |
| mathiaz | ivoks: how are you doing? celebrating the release of jaunty? | 19:41 |
| ivoks | ball: you can install it | 19:41 |
| ivoks | mathiaz: haven't you seen the picture i took at the top of the world in jaunty's t-shirt? :) | 19:42 |
| ball | ivoks: are there any handy configuration tools? I seem to remember the config file was a bit of a challenge. | 19:42 |
| mathiaz | ivoks: I think I saw it :) | 19:42 |
| ivoks | ball: nope :/ | 19:42 |
| mathiaz | ivoks: where was this actually taken? | 19:42 |
| ivoks | mathiaz: at 3500 meters, moelltaler, austria | 19:43 |
| ball | ivoks: hopefully I can bring my config file with me then, or portions of it at least. | 19:43 |
| mathiaz | ivoks: ah - Austria | 19:43 |
| ball | ivoks: are you dancing around the world? | 19:43 |
| mathiaz | ivoks: it's *not* the top of the world ;) | 19:43 |
| ivoks | mathiaz: it's not, but it looked like that :D | 19:43 |
| mathiaz | ivoks: anyway - do you arleady have ideas for karmic? | 19:43 |
| ivoks | mathiaz: of course... my favourite is ldap backend for mail task | 19:44 |
| ivoks | + apache studio as configuration tool | 19:44 |
| mathiaz | ivoks: seems like good plans. | 19:45 |
| ivoks | there are other too... like linuxha instead of redhat cluster suite | 19:45 |
| mathiaz | ivoks: for the latter, the problem is that apache studio relies on eclipse | 19:45 |
| ivoks | or, to have both of them | 19:45 |
| mathiaz | ivoks: and eclipse is not maintained in Debian/Ubuntu for now. | 19:45 |
| ivoks | i know | 19:45 |
| mathiaz | ivoks: IIRC we're still shipping eclipse 3.2 | 19:45 |
| mathiaz | ivoks: however there will be a session about eclipse at UDS | 19:46 |
| ball | Eclipse the editor/IDE? | 19:46 |
| ivoks | ball: yes | 19:47 |
| ivoks | ball: but eclipse is much more than IDE | 19:47 |
| ScottK | mathiaz: Eclipse is a beast (I've touched it before I knew better). I doubt a session will change much unless Canonical decides to apply resources to Eclipse. | 19:47 |
| ball | ivoks: I've not used it, I thought it was an IDE. | 19:47 |
| ivoks | ScottK: do you have ldap servers anywhere? | 19:48 |
| ScottK | ivoks: No. Sorry. | 19:48 |
| ivoks | ScottK: too bad, cause there is a perfect application based on eclipse for managing ldap | 19:48 |
| ivoks | having eclipse in ubuntu as supported would be a great step to having a tool for managing ldap | 19:49 |
| ivoks | if we can manage ldap, we can put 'everything' in it | 19:49 |
| ScottK | Yep. | 19:49 |
| mathiaz | ScottK: I agree with you. May be the session will be enough to convince that ressource should be put on maintaining eclipse. | 19:50 |
| jmedina | ivoks: is eclipse needed for apache directory studio? I tought it only required java | 19:50 |
| ivoks | jmedina: you can get it as a plugin for eclipse | 19:50 |
| mathiaz | ivoks: right - I've got some plans for ldap and directory too. | 19:50 |
| ivoks | jmedina: or you can download whole package (apache uds + eclipse) | 19:50 |
| ivoks | mathiaz: great | 19:50 |
| ball | It's going to be a pain to upgrade this box. I wish we could afford a matched pair. | 19:51 |
| mathiaz | ivoks: the first step is to put user and groups in the directory and make sure relevant applications can leverage that info | 19:51 |
| ivoks | of course | 19:51 |
| jmedina | ivoks: :O, I never think about it, I always downloaded 70M tar | 19:51 |
| mathiaz | ivoks: such as postfix, dovecot, apache, etc... | 19:51 |
| ivoks | mathiaz: i'm already doing some testing with that | 19:52 |
| mathiaz | ivoks: I'm looking into freeipa and see how we could integrate that. | 19:52 |
| mathiaz | ivoks: especially the management console. | 19:52 |
| jmedina | freeipa uses FDS, isnt, it? | 19:52 |
| mathiaz | ivoks: I also talked to howard chu (from openldap) yesterday and he told me that he added support from pam_ldap to slapd now | 19:53 |
| mathiaz | jmedina: yes - one of the change would be to replace it with openldap. | 19:53 |
| jmedina | I think there is no integration for mixed envirements with windows | 19:53 |
| mathiaz | ivoks: now you can use an local slapd to handle nss and pam. | 19:53 |
| ball | Is it difficult to put LTSP on Ubuntu Server? | 19:53 |
| ivoks | that's awsome | 19:54 |
| jmedina | mathiaz: how is that? | 19:54 |
| mathiaz | jmedina: there is a slapi plugin to handle windows synchronisation (for user) | 19:54 |
| jmedina | mathiaz: I mean store SAM in ldap/freeipa, not to sync with AD | 19:54 |
| jmedina | mathiaz: or is something different? | 19:55 |
| mathiaz | jmedina: it's a sync with AD. | 19:55 |
| mathiaz | jmedina: you can't use freeipa as a backend for AD. | 19:55 |
| mathiaz | jmedina: we'll have to wait for samba4 to be able to do that. | 19:55 |
| jmedina | mathiaz: no I dont want AD, I just want to store windows info in ldap, something like samba/ldap | 19:56 |
| foxbuntu | ball, define difficult :) | 19:56 |
| mathiaz | jmedina: ah ok. You can already do that. | 19:56 |
| jmedina | I already have a few setups with samba/ldap for domain controller | 19:56 |
| jmedina | with openldap | 19:56 |
| mathiaz | jmedina: there is a samba schema to be able to store machine information and relevant user information in the DIT | 19:56 |
| mathiaz | jmedina: and then configure samba 3 to use ldap as its backend. | 19:57 |
| jmedina | mathiaz: yes, but not for freeipa | 19:57 |
| mathiaz | jdstrand: true. 1.2 doesn't support that IIRC | 19:57 |
| jmedina | AFAIK, with freeipa you can store PKI, tickets, users in ldap mostly for a unix netowork | 19:57 |
| mathiaz | jmedina: ^^ | 19:58 |
| mathiaz | jmedina: however the next version of freeipa support machine. | 19:58 |
| jmedina | one thing to consider is a full integration with kerberos, lots of users want that for SSO, I see you are using mit kerberos, but most people use heimdal even samba 4 | 19:59 |
| mathiaz | jmedina: what do you mean by most people? | 19:59 |
| ball | I have to go, sorry | 20:00 |
| mathiaz | jmedina: I know that both samba4 and openldap prefer heimdal. | 20:00 |
| jmedina | well most people I know, most documentation in the internet | 20:00 |
| mathiaz | jmedina: but large deployments are using MIT keberos. | 20:00 |
| mathiaz | jmedina: the latest version of MIT (1.7) can generate AD style tickets. | 20:00 |
| mathiaz | jmedina: likewise-open uses MIT kerberos as their library. | 20:01 |
| jmedina | that is good, I really dont have real experience deploying kerberos | 20:01 |
| maswan | the heimdal user tools are a bit friendlier according to most folks | 20:01 |
| ivoks | oh, fun... i can't access one server after reboot; on friday night... | 20:01 |
| mathiaz | jmedina: and MIT kerberos is the default in Debian. | 20:01 |
| maswan | including me. :) | 20:01 |
| jmedina | AD was originally based on mit kerberos implementation, isnt it? | 20:02 |
| mathiaz | jmedina: I don't know. | 20:02 |
| maswan | anyway, mixing mit and heimdal kerberos isn't a problem. it's just the user tools that behave slightly different, there is a proper protocol standard, etc. | 20:03 |
| maswan | so if you go for one, you don't have to rebuild things that link to the other | 20:03 |
| jmedina | mathiaz: thanks for the explanation | 20:05 |
| jmedina | so lets study mit kerb :D | 20:05 |
| jmedina | here in mexico more and more customers are asking for ubuntu servers, even in goverment | 20:05 |
| mathiaz | maswan: I'm not sure you can just swap in the heimdal client library and everything works out of the box. | 20:06 |
| mathiaz | maswan: IIRC you'd have to recompile the application to use the new kerberos library. | 20:07 |
| mathiaz | maswan: however debian has done a great jobs at making this as easy as possible. | 20:07 |
| jmedina | ivoks: have you used kerberos with ldap backend? | 20:10 |
| ivoks | jmedina: no | 20:10 |
| ivoks | i haven't used kerberos at all | 20:10 |
| ivoks | i'm scared of it | 20:10 |
| ivoks | :) | 20:10 |
| jmedina | I'd like to start working with that | 20:10 |
| jmedina | ivoks: me too | 20:11 |
| jmedina | :D | 20:11 |
| maswan | mathiaz: I was saying that you don't have to | 20:14 |
| maswan | mathiaz: you can have applications with both | 20:14 |
| jmedina | mathiaz: is there any post or something about slapd nss pam integration ? | 20:15 |
| uvirtbot` | New bug: #366294 in mysql-dfsg-5.0 (main) "package mysql-server-5.0 5.1.30really5.0.75-0ubuntu10 failed to install/upgrade: subprocess pre-installation script killed by signal (Broken pipe)" [Undecided,New] https://launchpad.net/bugs/366294 | 20:16 |
| LyonJT | how do you restart services? | 20:19 |
| LyonJT | i can''t remember where the folder is | 20:20 |
| jmedina | LyonJT: /etc/init.d/? | 20:24 |
| jmedina | LyonJT: you can use invoke-rc.d servicename start|stop|restart|reload | 20:24 |
| ivoks | take care | 20:25 |
| mathiaz | jmedina: nope - howard told me about it during our conversation yesterday | 20:32 |
| mathiaz | jmedina: I then looked at the cvs changelogs. | 20:32 |
| mathiaz | jmedina: he did most of the work last week. | 20:33 |
| jmedina | mathiaz: after 2.4.16 | 20:33 |
| mathiaz | jmedina: yes - so it should be available in 2.4.17 | 20:34 |
| jmedina | :( | 20:34 |
| mathiaz | jmedina: http://bazaar.launchpad.net/~vcs-imports/openldap/main-src/changes | 20:35 |
| jmedina | mathiaz: and does it to? it is a replacement for padl nss_ldap? | 20:35 |
| mathiaz | jmedina: ^^ you can browse the changelogs. | 20:35 |
| mathiaz | jmedina: it's a replacement for both nss_ldap and pam_ldap | 20:35 |
| jmedina | :O | 20:35 |
| mathiaz | jmedina: nss_ldap support has been available for quite some time. | 20:35 |
| mathiaz | jmedina: it's actually available in intrepid. | 20:35 |
| jmedina | that i good, most ldap problems I have faced are nss+pam related | 20:36 |
| mathiaz | jmedina: the nss overlay is in slapd. | 20:36 |
| PleXuS | hi all | 20:52 |
| PleXuS | anyone running 9.04 on server ? | 20:52 |
| ball | PleXuS: ask me again tomorrow ;-) | 20:54 |
| PleXuS | lol | 20:54 |
| PleXuS | ball, i am scared to upgrade | 20:54 |
| PleXuS | :) | 20:54 |
| ball | Backup early and often | 20:54 |
| PleXuS | yeah thats my bad point.. :) | 20:55 |
| ball | I'm going to back up my data directories when I get home and then try an in-situ upgrade | 20:55 |
| PleXuS | ball, any good backup tool for linux? | 20:55 |
| ball | PleXuS: I use "tar" | 20:55 |
| cemc | PleXuS: tar czpf :) | 20:55 |
| PleXuS | aah ok that way :) | 20:55 |
| PleXuS | no 7zip ? :) | 20:55 |
| ball | I don't know what 7zip is. | 20:56 |
| PleXuS | 7z is the extension i think | 20:56 |
| cemc | kinda like zip, but 7 times better :)) | 20:57 |
| PleXuS | the best compression algorythm around :) | 20:57 |
| ball | gzip works for me. | 20:57 |
| ball | I'd be wary of moving to something I haven't used for the last ten years ;-) | 20:57 |
| cemc | I'm using tar | nc to another machine, then mksquashfs for archiving | 20:57 |
| ball | I use rsync too | 20:58 |
| ball | "belt & braces" | 20:58 |
| cemc | or if you have the / partition separat from say the big partition with all the data on it, | 20:59 |
| cemc | you just boot with livecd, make a dd from the partition, the upgrade | 20:59 |
| cemc | if it's doesn't come ut right, you can dd back | 20:59 |
| cemc | nothing lost, just some time maybe | 21:00 |
| cemc | damn how I suck at typing today... | 21:01 |
| PleXuS | lol | 21:04 |
| === blue-frog_ is now known as blue-frog | ||
| sourcemaker | how can I setup an ubuntu deployment server? | 21:42 |
| NCommander | sourcemaker: deployment server? | 21:43 |
| sourcemaker | I would like to download all required packages for my clients (ubuntu+kubuntu) in background at night... and deploy all updates to the clients when they become online | 21:43 |
| sourcemaker | I have a very slow internet connection... and downloading all packages via apt is very slow and time consumung | 21:43 |
| sourcemaker | apt-mirror is not possible... because it downloads all packages (complete sync) | 21:44 |
| sourcemaker | apt-proxy downloads all required files... if there are not in sync (caching) | 21:45 |
| sourcemaker | so what's ther alternative tool? like specify the installed software components and download the updates via server... | 21:45 |
| sourcemaker | for example: my server downloads all kde updates at night and my client receives the update in the morning... (if the download is complete) | 21:47 |
| === timburke_ is now known as timburke | ||
| foxbuntu | sourcemaker, I think you can limit apt-mirror by source to keep the packages you need to a minimum | 21:49 |
| sourcemaker | foxbuntu: but I can limit apt-mirror via all my installed software components? | 21:50 |
| foxbuntu | no | 21:50 |
| foxbuntu | sourcemaker, but I think you could prob do some crazy magic with rsync + dpkg -l + a ppa | 21:51 |
| foxbuntu | sourcemaker, essentially build your own package list that points to the correct archives based on your installed package list | 21:52 |
| foxbuntu | and then apply that to apt-mirror | 21:52 |
| foxbuntu | im not really sure if that would work or not....but I think it might | 21:52 |
| sbeattie | sourcemaker: if you point your clients at an apt-cacher or apt-cacher-ng proxy, the packages will only get downloaded once. | 21:52 |
| sbeattie | sourcemaker: you could then have a sacrificial client that updates via cron during the night so that updated packages have arrived in the morning. | 21:53 |
| === mathiaz_ is now known as mathiaz | ||
| sourcemaker | foxbuntu: ok | 21:54 |
| sbeattie | (you may want to have a sacrificial client per architecture you support to ensure you get each archs versions of the updates.) | 21:56 |
| foxbuntu | sourcemaker, I guess to answer the root of your question, no nothing quite fits what you are looking for, but its Ubuntu, it can also be created :) | 21:57 |
| sourcemaker | foxbuntu: ok... I will develop this missing feature by my self :-) | 21:58 |
| sourcemaker | foxbuntu: can I configure apt-proxy to download the packages in background? | 22:02 |
| sourcemaker | foxbuntu: so that my client starts the initial download progress? | 22:02 |
| sourcemaker | foxbuntu: without staying connected | 22:02 |
| foxbuntu | sourcemaker, idk, worry | 22:04 |
| foxbuntu | s/worry/sorry | 22:04 |
| LyonJT | how can i restart webmin from init.d? | 22:16 |
| LyonJT | what would the command be | 22:16 |
| LyonJT | what would be the command if i wanted to restart webmin? | 22:19 |
| VK7HSE | LyonJT: sudo service webmin restart | 23:46 |
| gewt | i hate the installer | 23:46 |
| gewt | i don't think it even installed grub (proeprly) | 23:46 |
| gewt | i blame lvm | 23:47 |
| ha1331 | Any ideas why brand new Proliant ML350 G5 gets drasticly slower transfer speeds than proliant ML110 on exact same disk? | 23:55 |
| ha1331 | when I do: time dd if=/dev/zero of=/serverData/fast/d1p0/vm8.img bs=1024k count=1000 I get 80-105MB/s on ML350 but when I had it on ML110 I got ~250MB/s | 23:57 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!