[00:13] hi all... i need some assistance configuring a cluster file system... [00:13] have been trying to setup using glusterfs [00:14] any one had any success with this? [00:16] is anyone even here? [00:24] morning [00:24] o_O [00:24] anyone here installed ubuntu server in blades? [00:25] i know who did [00:25] they are XHS21 XM it is a bladecenter H [00:25] orudie: can I contact him? [00:25] yeah [00:26] irc.oftc.net #linode , talk to caker [00:26] I hate IBM because doesnt support Ubuntu for their virtualization manager agent :S [00:26] orudie: thanks [00:26] jmarsden, you should use xen [00:26] I use xen [00:27] but their agent isnot supported [00:27] it works for rhel an suse :S [00:27] jmedina, you run a company ? [00:27] orudie: yeap [00:27] this is a new customer who wants ubuntu server :D [00:28] jmedina, can i work for you ? [00:28] orudie: sure im in mexico city [00:28] lol [00:28] how about over the internet [00:29] well I really dont know, I'm only the linux guy [00:30] i thought you said you run the company, meaning you are the boss [00:30] nop sorry [00:30] hey folks... I am needing some help to set up a file server cluster [00:30] i also want to be a linux guy [00:32] orudie: haha! [00:32] mattt, what ? [00:32] i have been trying to set up using glusterfs... but keep running into problems so now I am looking at ocfs... any one have any ideas? [00:32] "can i work for you?" [00:32] :) [00:34] so ? [00:34] whats so funny ? [00:34] anyone at all.... any ideas on clustered file system using ubuntu....? [00:36] jmedina, they are they guys i bought VPS from and installed ubuntu server [00:37] orudie: ok, I didnt know about linode services [00:37] jmarsden, they are great dude , if you decide to get one let me know so that i would give you a referal code [00:37] www.linode.com [00:38] caker is the owner [00:39] capkirk, looked into GFS? [00:41] is that glusterfs? [00:41] no [00:41] Global File System [00:41] gfs-tools is in the repos [00:41] ok, then no i have not.. but I noticed that it is included with the 8.04 Server cd [00:41] yes [00:42] ok, i found gfs-tools on the cd. u think i should give it a go [00:42] orudie: thanks but I have my own rack for vps hosting [00:42] jmedina, :) [00:42] capkirk, I have never tried it, but I have clients that use it [00:42] so there you go , they are your competitors [00:43] orudie: then I want the code :D [00:43] i doubt they'll give you [00:43] you can try to buy it from them though [00:43] i'm very interested what they are gonna say [00:44] !ot | orudie [00:44] orudie: #ubuntu is the Ubuntu support channel, for all Ubuntu-related support questions. Please use #ubuntu-offtopic for other topics. Thanks! [00:44] just reading up on gfs-tools... looks like it might be the go, will do some more reading first..... [00:44] foxbuntu, dont be an asshole [00:44] !admin | orudie [00:44] Sorry, I don't know anything about admin [00:44] capkirk: well you can read redhat offfical docs about gfs [00:45] lol foxbuntu you are so miserable [00:46] orudie, move on and keep the chat out of here or I really will have and admin step in [00:46] go ahead [00:47] ScottK, you are an admin right? [00:48] what a looser lol [00:49] orudie, this is a support channel to try to help others, not your personal chat room, so as I tried to nicely point out earlier. Go to -offtopic if you want to chat [00:50] ping baffle [00:50] i'm in this channel 24/7 [00:51] you dont have to educate me [00:51] maybe u should get a life...? [00:51] idling that is [00:51] well I dont see a problem, it was ubuntu related and there is no active conversation at the moment === foxbuntu is now known as orudie_thefaggot === orudie_thefaggot is now known as foxbuntu [01:14] ok... now i am having recurring problems with apt-get [01:15] logged in as root i type 'apt-get update' and i get various errors including NODATA2 [01:16] i am trying to install gfs-tools [01:16] if i enter apt-cache search gfs it returns nothing but the prompt, even after running apt-get update [01:18] capkirk, sounds like you might need to make sure your sources.list is alright [01:19] this is a fresh clean install of ubuntu server 8.04... should sources.list need udpating? [01:20] capkirk, nope [01:20] capkirk, you sure you have a web connection then? [01:20] if i type host google.com, it returns all the right numbers.... [01:21] capkirk, try: ping 4.2.2.2 [01:21] ping works as expected [01:21] ok [01:21] is it possible that our company proxy server is sending cached info to the apt-get command [01:22] ah, did you setup a proxy? [01:22] I mean, the proxy connection [01:22] yes, i am running ipcop [01:23] no need, ipcop is running transparent proxy mode [01:23] gotcha [01:24] you said you install 8.04? or is it 8.04.1? [01:25] im fairly certain it is 8.04, is there some way i can check [01:25] lsb_release -a [01:26] can some one help me with port forwarding [01:27] ok, it says description ubuntu 8.04.1 release 8.04 [01:29] capkirk, ok well perhaps the repos for that have been moved...lets have a look [01:40] capkirk, I think you can point to old-releases.ubuntu.com to get those repos, however there is major security vulnerability in 8.04.1, you would do best to: sudo do-release-upgrade [01:40] ok, will do upgrade now [01:40] foxbuntu: 8.04 is supported. [01:41] kees, hasn't it been moved to old-releases? [01:41] 8.04(.2) is a long term support release and should be supported for a further 4 years [01:41] hmmm says no new release found [01:41] 7.10 is off the repo (and in old-release) but 8.04 (Hardy) will be supported for a long time [01:41] kees, ah [01:41] yes, that is why i am using 8.04...LTS [01:41] capkirk: just sudo apt-get update && sudo apt-get dist-upgrade and you can get any available updates. [01:41] kk, will try that now [01:42] capkirk: if you *want* to upgrade to intrepid or jaunty, you'll need to tell it so. [01:42] kees: that's if -updates and -security is enabled :-) [01:42] Nafallo: very true, I did make that assumption. [01:42] u mean in the sources.list [01:42] Nafallo: we need apt-get fix-yo-self [01:42] lol [01:42] kees: it is by default so... :-) [01:43] apt-get dist-upgrade is underway.... [01:48] hmmm... update seems to have stalled.... 23% [Waiting for headers] [01:50] its away again... must have needed a coffee break [01:51] (or a timeout...) [01:51] (...and retry) [01:53] yes, maybe, it is doing it again.... different site but seems to have stalled [01:53] working again... [01:54] this repo site is slow.... 15kb/sec [01:54] Which repo? [01:54] au.archive.ubuntu.com [01:56] Which ISP do you use? [01:56] bigpond adsl2+ [01:57] Hm, bigpond doesn't have its own mirror AFAIK. [01:57] no, i dont think so.... [01:57] internode's is externally visible, so I guess you could put it in there as well and see if it's faster than au. [01:57] well, at least it is working..just a bit slow [01:57] According to a TPG user I know, internode's is faster than everything else even for him :-) [01:58] ok... ill look into it [01:58] deb http://mirror.internode.on.net/pub/ubuntu/ubuntu hardy main [01:58] do i just edit the sources.list file and replace the au..... [01:58] or add it [01:59] capkirk: better to leave the au. entries there, at the bottom, so if internode isn't available or is out of date, it will fall back on using them. [01:59] On Debian there's a package called apt-spy which automatically puts the fastest repo in your sources.list.d, but it seems that Ubuntu doesn't have that. [01:59] ok, so sources.list works from top to bottom order of preference? [01:59] Yeah [02:00] i feel like such a linux newbie trying to achieve complex things.... [02:10] phew... dist-update complete [02:11] now running 8.04.2 [02:11] now back to gfs-tools [02:11] What of it? [02:12] i am trying to set up a cluster file system [02:14] gfs or ocfs... any opinions? [02:19] how do I upgrade 8.10 server to 9.04 server? (and should I?) [02:20] sudo do-release-upgrade [02:20] (and if you want to_ [02:20] Iceman_B1SSH: you may want to wait it out a few days [02:20] servers are hammered [02:20] or does do-release-upgrade now use apt-p2p? [02:21] apt-p2p? sounds awesome === Iceman_B1SSH is now known as Iceman_B|SSH [02:21] apt-cache show apt-p2p [02:21] meh, I can wait a few days [02:21] or maybe I should just wait until support runs out on 8.10 [02:21] so far it's doing everything I want [02:21] eh, why wait that long? [02:22] critical server? [02:22] nah [02:22] it's my home server [02:22] then upgrade in a few days or something [02:22] functions as a bittorrent client and I have a samba share for the local network here [02:22] oh and an irssi client of course [02:22] :) [02:23] doing upgrades on a release day is rarely a good idea -- it hangs if it can't get the package, etc -- nasty stuff, at least in previous upgrades [02:23] I'll wait a few days then [02:24] hey folks [02:24] you;s think that in this day and age, Canocial would have scalable bw [02:24] I did the upgrade and am paying the price :D [02:24] Iceman_B|SSH: it has little to do with canonical [02:24] Iceman_B|SSH: all the mirrors are hammered [02:24] broke SSH and netatalk -suspect kerberos but not sure how do diagnose this one [02:24] SpaceBass: be more specific [02:24] log into the machine locally and read logs, to start [02:24] when I try and SSH in, it says "connection closed" [02:25] giovani, looking for the sshd log still, syslog is no help [02:25] /var/log/auth.log [02:26] says it cannot find pam_foreground [02:26] but then issues an auth [02:27] issues an auth? [02:28] after the error, there is a new line: "authorized to jdoe, krb5 principal...." [02:29] doing some google-fu on that error now [02:31] when I go dpkg -l I get lines like "rc bsd-mailx 8.1.2-0.20071201cvs-3 A simple mail user agent" [02:31] does that mean, the rc at the beginning [02:32] +what [02:32] some brilliant admin put a note about jaunty in the header of the ubuntu forums so every single post is a match [02:32] Iceman_B|SSH: read the header/manpage [02:33] Desired=Unknown/Install/Remove/Purge/Hold [02:33] | Status=Not/Inst/Cfg-files/Unpacked/Failed-cfg/Half-inst/trig-aWait/Trig-pend [02:33] |/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad) [02:33] cryptic message ahoy :/ [02:34] not cryptic at all ... [02:34] very clear [02:34] r = remove [02:34] c = cfg-files [02:34] because it wasn't purges [02:34] purged* [02:34] ....oh, I have to read it like that [02:35] they should have underlined the first letter of every state and made the descriptions all lowercase [02:35] I said to read the header [02:35] it's clear from the capitalization [02:35] I dont know what you meant by "header" [02:35] that's why it's "trig-aWait" for example [02:35] then you're in trouble ... [02:35] why? [02:36] sigh [02:36] because "look at the header" should be clear [02:37] then I must have glossed over a linux tutorial that explains that that term should be standard issue knowledge under serveradmins ._. [02:37] header is an english word [02:37] but that's cool, I'll look into it soon, sleep first [02:37] it's not linux-specific [02:38] I know, but header can mean a lot of things [02:38] it always means the stuff at the top [02:38] anyone doing kerberos/ldap auth in 9.04? [02:38] okay [02:38] or, the "first" stuff, more specifically [02:38] SpaceBass: I will be in a few days, 9.04 was just released today [02:38] thanks for your input, Ive gotten a bit wiser [02:38] later [02:39] giovani, will be curious to hear your results [02:39] SpaceBass: 9.04 ldap may work fine [02:39] upgrades are messy [02:39] and can break non-standard configs [02:39] thats what I thought... [02:39] I understand about upgrades... [02:39] so, ldap auth working in 9.04 won't help ya with your broken upgrade :) [02:40] doesnt mean that its unrealistic to try and get it working again [02:40] yeah, sometimes it's easier to start with a fresh install, when possible [02:40] not a great option for me...but if I have to rebuild from scrach then I will [02:41] ok [02:42] would prefer to troubleshoot what I got [02:43] but it does all point to pam now that I dig in [02:44] yep, it's probably your pam config, or any changes you made to pam when enabling kerberos [02:44] since that's non-standard [02:44] probably new pam version doesn't like the config, or something along those lines [02:44] well for that matter anyone who adds a user is non-standard [02:44] we should all run the live CD [02:46] except that the format of /etc/passwd never changes [02:46] so no [02:47] upgrades of a distro can never correct config files that were edited by the user [02:47] other than replace them, ify ou want [02:47] but that'd hard break your system [02:47] giovani: if you're talking about conffile conflicts, usually dpkg will offer to drop you to a shell to manually merge them. [02:48] twb: nope, that's not what I'm talking about [02:48] I'm talking about a potential config option in an old version of program X, which is no longer compatable with new version Y [02:48] Ah. [02:48] during an upgrade, if you want to keep your old config ... it may not work as expected with new version Y [02:48] That would need to be handled specially in the .postinst. [02:49] twb: maybe you want to help SpaceBass troubleshoot his non-working kerb auth in a 9.04 upgrade [02:49] I've NEVER gotten kerb working [02:50] like I said ... non-standard :) [02:50] SpaceBass: are you trying to fix a kerb client, or the kerb server? [02:52] kerb client, I believe [02:52] client [02:52] yeah [02:53] worked in every release since 6.x (when I started using ubuntu)... usually pretty straight forward... config kerberos, add a key file, config the pam files and boom, it works [02:53] SpaceBass: well, there are two parts. You need to make sure nss is working (/etc/nsswitch.conf), and once getent agrees (e.g. "getent passwd fred" for a Kerberos account "fred"), you need to get pam working. [02:54] does anyone know about ATAoE...? [02:54] twb, thanks! have confirmed nss is working [02:55] can still log in locally as network users + getent passwd returns what I expect [02:55] think its pam ... although all that appears in my auth.log is a successful auth [02:55] I am trying to set up a shared cluster storage arrangement with disk redundancy [02:56] SpaceBass: OK, now log in as a kerb user and confirm that you have received a valid TGT. [02:56] roger that [02:56] locally I can kinit, and if I try and ssh in, I get the approprate ticket (and then it says "connection closed") [02:56] appreciate the help btw - thanks [02:56] Does auth.log say why you were kicked out? [02:57] no - one line for the ssh transaction... auth [02:57] Try to work out how to turn on debugging for the pam_krb module(s) and for sshd. [02:59] got sshd in debug mode now... checking [02:59] "access denied for spacebass by PAM account config" [03:04] So now you need to grovel through pam debugging, which is enabled on a per-module basis. [03:09] :( [03:10] seems to be a lot of infor re red hat and cluster file systesm.... anyone know anything about ubuntu and file system clusters? [03:10] i can spell, just can't type ^^^^ [03:11] too many years on windows .... clicking a mouse :P [03:15] You could try wiki.ubuntu.com [03:16] yes, seems i have been all over the web... just cant find anything that explains it? [03:16] i know what i want to achieve, just not sure what tools or packages to use to make it happen [03:18] twb, thanks for the hand holding [03:18] think I got it - ssh is at least working [03:18] Cool. [03:18] i'll recompile netatalk tomorrow [03:18] i have a number of older pc's which i want to configure in an array of some sort so that the disks can be configured for redundancy and shared as a single disk share on the local net [03:21] Hi. I currently try to play with the ICU library. it already came shipped with my distro, so I don't need to install it myself. however, I don't have the header files needed. is it normal for them not be shipped with the library? and if I download them from the icu website, where should I place them? [03:21] anthony1x: you need to install the associated -dev package. [03:21] ok, so i am trying to set up a SAN array using old PCs... [03:22] twb, I already searched for it. none found for libicu [03:22] anthony1x: then you are searching wrong. [03:23] twb, [03:23] twb, how should I search correctly then? [03:23] aptitude install ~nlibicu.*-dev [03:24] capkirk: is this more of a learning exercise or something you want put into production? [03:25] capkirk: stickystyle has a point; this is not the kind of thing you want to put production data on. [03:26] You would be many times better served just by trowing all those drives in one box and learning mdraid. [03:26] twb, that did the trick. how come sudo apt-get install libicu and then hitting tab to get a list of all available packages does not list the dev package? [03:26] anthony1x: probably because you have not loaded /etc/bash_completion. [03:26] twb, thanks anyway. [03:26] stickystyle: or even better, by buying three or four brand new 1TiB drives and putting them in a dedicated file server, RAID5'd. [03:27] Using old disks fills me with horror, especially since SATA is ridiculously cheap now. [03:27] twb: very true [03:27] For a 3×1TiB SATA array you're looking at AUD500 for the disks. [03:28] Make that 450. [03:28] capkirk: but if your just looking to learn and play (which is always good) check out glusterfs [03:28] For a 4×1.5TiB SATA array, AUD860. [03:29] Plus the case, motherboard and CPU, of course, but you don't need anything special for a file server (except dual gigabit NICs). [03:30] hitting the sack - thanks again tbw, appreciate your help and patience :D [03:30] Actually, I haven't run the numbers. If the internal PCIe or SATA bus is the bottleneck, you could just use one gigE NIC. [03:31] ok, i take your point as very valid... this is for production use... but budget is tight....(as usual) [03:32] what is this mdraid you speak of? [03:32] mdraid == software raid [03:33] ok, so this is for a network attached file service, shared by samba [03:33] capkirk: if you can come up with a grand, you can have a file server that will kick the arse of anything you build from hand-me-down workstations -- faster, more reliable and able to store more by several orders of magnitude. [03:33] if its for production, you need to always consider your time as a cost in the budget...how many hours will you have to tweek something to get it going, and how many times will you have to go back. [03:34] too true... could probably find a grand.... [03:34] shoot, for a grand you could build a pretty rocking bit of storage, removable drive trays and everything. [03:34] we have an old server running w2k that i want to retire and move to ubuntu server and samba. [03:35] You just say to your boss: "look, I can spend a week setting this up, and it won't work well, and I'll have to go back to it every month or two to fix something... or you can front a grand now, and we will have a state-of-the-art system that you can leave running for ever." [03:35] stickystyle: depends on the currency; I was working in AU$1000 :-) [03:35] twb is dead on. [03:36] For US$1000 you could throw in removable bays and a nice rackmount case. [03:36] You'd end up with about 3TiB of storage and the ability to lose one of the four drives without problems. [03:37] If you count up all your 200GiB hand-me-downs, they probably won't add up to 3TiB even BEFORE you take into account the loss from parity. [03:37] And parity loss is higher the more disks you have. [03:39] parity loss is lower the more disks you have [03:40] (as a percentage of the array) [03:40] i.e. 1 parity for 3 drives is 33.33% loss [03:40] 1 for 4 drives is 25% loss, etc [03:43] ok... i am liking this advice... makes sense... [03:44] so an external unit with 4x SATA drives in some kind of raid array for redundancy connected via gigabit ethernet to a ubuntu server shared via samba... have i got it right? [03:44] giovani: you're right; sorry. [03:45] is only for local file serving and application data store so ultra high speed not really required [03:45] giovani: I guess I was assuming you'd scale up the number of parity disks proportionally to the number of disks in total. [03:45] With only four drives you could easily find a case to hold them all in rather than doing external. [03:46] yet again you speak wisdom.... [03:46] capkirk: not "an external unit" -- just an ordinary rackmount/tower case and motherboard [03:46] and the raid array can be setup *inside* ubuntu with mdraid [03:46] so all you need is a regular old computer + 4 drives + ubuntu [03:47] pretty much every motherboard comes with GigE built-on now. [03:48] s/old// [03:48] you can swap the 'regular old computer' get fancy and buy a rack mount computer, with removable drive trays if you desire [03:49] twb: yeah, didn't really meen *old* [03:49] There's no point in doing so unless you already have a rack to put it in, of course :-) [03:49] Excellent point! :D [03:50] ok, well i do have a rack, but only as a storage cabinet, no rack mount servers, all shelves and stuff [03:50] plenty of 'old' computers quite capable of running ubuntu and 4x disks.... just a little problem but.. [03:51] it i install 4x disks and no cd rom... how do i install os? [03:51] capkirk: for the cost, I would buy a $50 motherboard and $100 CPU anyway, just because. [03:51] capkirk: there are a number of ways -- you can install from a hard disk, or you can install from the network. [03:51] capkirk: you could use the eSATA port to connect a SATA CD drive. [03:51] *old* pcs... no sata, only ide [03:51] capkirk: or you could set up the array to start of degraded, then latter connect the third disk. [03:52] capkirk: don't use PATA for a new system. [03:52] PATA costs will only go up. [03:52] maybe i should bust open some old boxes... never know, might find some sata .... [03:53] HD's are dirt cheap http://www.pricewatch.com/hard_removable_drives/ $44 for 500GB [03:54] And a full tower size case should fit four drives with a CD/DVD-ROM no problem [03:54] is there such a thing as pci - sata cards [03:54] capkirk: yep [03:55] capkirk: yes, but I'd still say just buy a new motherboard. [03:55] capkirk: it wil still cost less than a grand. [03:56] For commodity hardware, trying to reuse gear that's three or five years old and a generation behind will screw you in the long run. It's a lesson I learnt the hard way. [03:56] what about pwr supply wattage ? [03:56] capkirk: you'd have to calculate that. [03:56] If you get a decent case, it will include a PSU. [03:57] so let me summarise to see that i understadn.... [03:58] 1x pc with 4x sata drives ... average cpu and ram sufficient with ubuntu and mdraid [03:59] a second machine which is the acutal 'server' with ubuntu and samba sharing the drives on the 1st pc.... [03:59] or just run everything from 1 computer [03:59] Your over engineering it, just one computer [04:00] k, was still thinking of scalability... [04:00] how many users? [04:00] we have an average use of about 30 users connected at any one time [04:01] and it wouldn't be a scalable solution as your bottle necking everything through the network [04:01] what kind of data? is this their home folders that they are mounting from their local machines? [04:01] i was thinking allong the lines of SAN network... [04:01] i.e. they are running off the server [04:02] no roaming profiles or anything like that [04:02] just docs, spreadsheets etc and some shared application data files [04:03] I worked at a place where we had a 600MHz P3 serving 220 users shared data [04:03] I don't think you have to worry about scaling just yet [04:03] true ok, i will put that concept aside then. [04:03] you don't want to make the problem harder than it is [04:03] there is one next issue thought... virtual machines. [04:05] capkirk: http://paste.lisp.org/display/79118 [04:05] that's another chapter in server design. [04:05] That's with an overspecced CPU and an expensive case, though. [04:06] I also didn't bother to check for gigE NIC. [04:06] twb: I havn't seen a board that didn't come with GigE in a while. [04:06] For a file server, a 64-bit Celeron D (if they still make those) would be sufficient. [04:08] current server we running is p4 3.2G 3G ram with 1x250Gb drive W2K server [04:08] i loaded vmware 2.0 onto it and killed it... [04:08] so i took it off again [04:08] Well it's nearly midnight over here, I'm heading to bed. Best of luck capkirk [04:08] thanks for ur help, appreciate it [04:09] capkirk: I assumed you needed a new motherboard because you said your current ones only had PATA. [04:09] twb, that price looks good [04:10] yes, in the *old* pcs that i am trying to work with... [04:10] our current server hardware would be fine to run a new setup of ubuntu, but it is our production server? [04:10] i would like to run new server in parallel for some time to migrate [04:15] I understand, and that's a reasonable requirement. [04:21] heres another thought..... [04:22] would mdraid work with usb attached storage devices? [04:25] if so, i could build a server from older PATA machine with attached usb storage which could later be used as backup devices.... [04:25] capkirk: you REALLY, REALLY do not want to do RAID over usb mass storage. [04:25] Unless it was for a purely temporary measure. [04:26] Where temporary means "to get the data from one machine to another" not "for six months of production use" [04:29] * |dthacker| seconds twb's sentiments [04:30] ok,, thanks for the heads up there... [04:31] as i need to purchase usb external drives for use as backup units anyway, i can still use them as single attached drives to an older machine running as temporary server [04:31] during the migration stage... [04:34] capkirk: you can get an external enclosure that takes a standard SATA drive [04:34] It just bridges SATA to USB [04:35] This allows you to be more flexible than if you get a disk-and-enclosure-in-one USB drive [04:47] isnt that all the pre packed modules are anyway? [04:47] or do you mean like an enclosure that houses more than 1 physical drive? [04:47] Broadly, yes, though many are 2.5" not 3.5", and you may not be able to open up the enclosure. [04:49] after upgrading to 9.04 I can't get phpmyadmin to let me login, I get "Access denied", everything else using mysql works fine [04:49] true that... i remember dropping one and it stopped working.. i had to break the case to retrieve the drive (which was still okay, just the controller card was broken) [04:52] twb: point noted re usb drive size, but as I intend to use them as individual backup drive in the future, i dont think its internal design is an issue? what do u think? [04:52] capkirk: it only matters if you wanted to use your fileserver's SATA disks prior to deployment in the enclosures, and then repurpose them into the fileserver. [04:53] Or similarly, to put your old PATA workstation disks into the enclosures for small storage. [04:53] foxbuntu: No. I don't have ops rights on an Ubuntu IRC channels. If you need an op you can go to #ubuntu-ops and find one there. [04:54] foxbuntu: I also agree you were correct. [04:54] ok, i'll need to give that some more thought. [04:56] twb: do you know anything about xen? [04:56] Nope, sorry. [04:56] kk... [05:24] Would any one have a clue as to why I can't login to my server via ssh since I've updated to jaunty? My ssh is configured to use certificate authorisation, the public keys haven't changed... is there a new place for the keys to be stored? [05:25] other than the standard ~/.ssh/authorised_keys === macd__ is now known as macd [06:23] Hello =o) [06:32] VK7HSE1: Use SELinux? [06:32] are most of the commands we use in theterminal for Ubuntu OS similar to OSX? [06:33] ScottK thanks will look into that,,, [06:33] VK7HSE1: We don't run it by default, so unless you installed it you aren't. [06:35] ScottK ok... I think it could be related to the encrypted /home too So I'll keep checking! [06:36] Ubuntians, I installed sshd in my desktop. whenever i try to get the file from my desktop using other linux machine, after 60kb it is stalled. But ping response is ok. [06:37] My server is not on a remote site it lives here with me! so this is not critical! :) [06:37] New bug: #365872 in mysql-dfsg-5.0 (main) "Failed to start MySQL database server mysqld on install" [Undecided,New] https://launchpad.net/bugs/365872 [06:37] VK7HSE1: https://answers.launchpad.net/ecryptfs/+question/67703 [06:45] andol: Thanks... [06:47] Hi =o) [07:00] Problem solved!... :D [07:02] Some how the User authorised keys file reference got a typo in it (???) [07:09] needed to change StrictModes yes to StrictModes no (I'm not 100% sure what impact that has?) [07:16] does gigabit ethernet run over cat5e? [07:16] yes [07:16] cool...... [07:16] it runs over most but not all cat5 too.. [07:17] is it worth the transition.. from 100mb...? [07:17] just need to get a gigabit switch i guess [07:17] probably yes [07:17] some basic gigabit switch cost something like 20e or like [07:18] i am just xfer 12gb file from workstation to server.... says it will take about 20 mins!!!! .. life is too short for that [07:18] ok, good. i am into basic, simple easy and it works.! [07:18] if harddrives can keep up, then its good improvement [07:19] yes, hard drives on my system are not overworked, so should not be a problem there [07:19] in use case where several workstations transfer data to server upgrading only server conenction and switch will boost performance alot [07:20] even on 1-1 system its noticable improvement [07:20] and if you happen to have 2GbitLan cards in both server and workstation you can easily bond those interfaces to souble speed one more time [07:21] i was thinking of gigaswitch with multiple servers (and my workstation) connected to regular 100mb switch and rest of network... (about 35 workstations) [07:21] simplexio, could install an atm card as well, then that 12G file wont take long [07:21] ;) [07:21] i am not familiar with the concept of 'bonding', but i have seen it mentioned a bit lately [07:21] [07:21] atm? [07:22] atm? [07:22] no familiar with that term [07:22] sorry, its a common card in large ISP back bones [07:23] sounds like out of my budget range too then :) [07:23] s/card/protocol/ [07:23] hads, yes sorry [07:23] * foxbuntu maintains hads to correct my brain lapses [07:24] http://en.wikipedia.org/wiki/Asynchronous_Transfer_Mode [07:24] hmm.. is there allready those 10G ethernet cards, or does sthose speeds need that infinity or what it was cards [07:24] simplexio, that infiband, and that not NIC [07:25] however there are 10G NICs [07:26] foxbuntu: but you can use infiband to handle ip traffic .. im pretty sure about it. newer seen one [07:27] simplexio, it is indeed possible, but its not a NIC card [07:28] http://en.wikipedia.org/wiki/InfiniBand [07:28] its normally used for local attached NAS devices [07:30] u guys know anything about ata over ethernet? [07:32] capkirk, can't say I am, but I am reading about it right now [07:33] im intrested about it too.. can you share crypted software raid5 over ata ethernet [07:33] i have read stuff, but cant seems to grasp its application... [07:33] like, a scenario of where it can be used, and why u would? [07:34] capkirk, well its to allow you to build a poor mans NAS [07:34] its idea is remove need for network file systems. so it appear only as "local" harddrive [07:34] cool... thats me!! :) [07:35] im moustly playing with my home server currently and its pain to share data over net and keep permission right, without installing something bigger system like ldap or so [07:35] well there is a real down fall to the system however, you can only transmit the AoE packets within a single network, routers strip the proto [07:35] so, if i had a machine running ubuntu server with a couple of hdds in it, then i could access them from another (directly connected over ethernet) computer [07:35] capkirk: yes.. [07:36] that would be over kill [07:36] foxbuntu: have you knowledge how its works with software raid and dmcrypt [07:36] why? [07:36] there are several (imo) better ways to do that [07:36] u still need a host system for the hdds? [07:37] im interested... i am trying to design a NAS type scalable storage system... [07:37] capkirk, OpenNAS, or similar could do just that if you want a dedicated NAS and it doesnt have the routing limitations, or NFS/SMB on your Ubuntu device [07:38] is OpenNAS an add on to ubuntu, or a specialised install for the NAS computer [07:38] simplexio, im not sure on the raid + dmcrypt, however I don't think it would affect it because it resides on the ethernet layer. not with tcp/udp (ect) [07:38] capkirk, it is its own distro [07:39] ok!! now we talking, sounds like what i been looking for [07:39] capkirk, http://www.freenas.org/ [07:39] so roughly how does a network attached server connect to the NAS server [07:39] foxbuntu: ata -> sw raid5 -> dmcrypt -> linux vm -> net filesystem . is data flow now i think [07:40] like the main file server [07:40] simplexio, that likely wouldnt work with AoE then [07:40] but thats just educated quess how things work. [07:41] simplexio, AoE controls the hardware layer, its kind of like the way WoL works [07:41] sending magic packets to the "NAS" device to trigger read/write operations [07:43] simplexio, it wouldnt get you around permissions [07:44] well it would, kinda. every user have same uig/guid in both machines [07:44] capkirk, with your choice of protos like NFS, or Samba [07:44] i didnt get samba/nfs work with acls [07:44] simplexio, yeah, but you could accomplish that with /etc//fstab to a samba or nfs mount as well [07:44] ok, i am testing samba at the moment, and i like it so far, so i would run samba on the front end server and opennas on the storage server? [07:45] foxbuntu: thats good idea [07:45] will opennas provide software raid? [07:45] well its just my own home server which i use store data and test new ideas [07:45] capkirk, uh, sort of. samba is what will create the shares on the OpenNAS server, and the clients will connect to the samba shares [07:46] capkirk: and if you plan store anything importand data i recommend raid1 or raid5 [07:46] capkirk, I think they support LVM [07:46] so is samba running on the nas server or the front end application server? [07:46] simplexio, RAID strategy depends on usage, [07:47] capkirk, on the naw device [07:47] s/naw/NAS [07:47] ok, so is there any need for a front end server? [07:47] capkirk, what do you mean frontend server? [07:48] capkirk, its a standalone device, you just connect other machines to it to access the data [07:48] capkirk, thats was a NAS is [07:48] ok... like i guess if i wanted to run an alfresco server.... application on a front end server, data on the nas server? [07:49] capkirk, http://en.wikipedia.org/wiki/Network-attached_storage [07:49] capkirk, yes, that would be possible [07:50] data storage is my main concern and the moment, so attach a NAS, then any computer, whether it be server or workstation can access shares on the nas as data storage [07:51] you got it [07:51] user home folders can be directly on the nas? [07:51] anything you like [07:51] and then I can run a server like zimbra with the data stored on the nas [07:52] anything you like [07:52] i think i am understanding it now... [07:52] then for data backup, just backup the nas machine [07:53] :) [07:53] nas machine hardware could be put toghether fairly cheaply with software raid then. sounds good to me [07:53] if the data is important, don't use software raid [07:54] Bah [07:54] Nothing wrong with software RAID [07:54] haha [07:54] sw raid5 is nice [07:54] <_ruben> if the data is important, make backups often :) [07:54] because i cant afford hw raid, do u suggest no raid at all, and regular backups? [07:54] raid dosent replace backups [07:54] <_ruben> raid is no alternative for backups [07:54] RAID is for uptime, backups are backups. [07:55] capkirk, no go ahead with sw raid if you cant do hw raid [07:55] i agree [07:55] capkirk: well then attleast raid1 [07:55] <_ruben> well .. raid0 aint raid [07:55] hads, while true, sw raid is not == hw raid [07:55] i will be doing backups for sure... raid is there simply to ensure uptime if a drive fails [07:55] and ups for server is just a good idea is mandatory [07:55] <_ruben> and adds performance (under most circumstances) [07:56] foxbuntu: Why, except for battery backup? [07:56] could someone explain why ppl talk about battery back up hw raid cards.. dosent ups do just that [07:56] hads, write cacheing, i/o offloading... [07:57] hads, RAID controllers are far more reliable than sw RAID [07:57] <_ruben> simplexio: battery for raid card is far cheaper than a ups [07:57] Hi... when I install phpmyadmin on 9.04 there are prompts about dbconfig... anyone know what should be selected? [07:57] <_ruben> simplexio: and servers can crash, ups wont help [07:57] _ruben, thats not the reason for the battery on the card [07:58] ah. so battery on raid card makes sure that all stuff whats in raid card will go to disks [07:58] there it is [07:58] :) [07:58] <_ruben> thats the technical use of it [07:58] in the event of power failure the card has time to send all of its write cache to disk [07:58] <_ruben> i described the events where you'd need it :) [07:58] I dunno, I don't see the big deal about hardware RAID myself. [07:59] hads, I do on a dialy basis [07:59] *shrug* [07:59] <_ruben> a good hardware raid card has much better performance than software raid [07:59] <_ruben> crappy "hardware" raid cards are outperformed by linux' software raid though [07:59] _ruben: offcourse it has. but software raid is faster than one hardisk [08:00] and your RAID can be rebuilt if the software is hosed :) [08:00] <_ruben> simplexio: usualy it is indeed [08:00] offcourse raid level limitations affect it [08:00] <_ruben> raid level + cpu power + bus bandwidth [08:02] well, time for bed here [08:02] night guys [08:04] bye [08:04] thanks for ur help [08:46] hi all... can anyone tell me what's wrong with this proftpd block? http://pastebin.com/m6c0860a3 I want to restrict my users from uploading or changing files in the invoices directory they have, but it doesn't work. [09:01] New bug: #365915 in openldap (main) "package slapd 2.4.15-1ubuntu3 failed to install/upgrade: " [Undecided,New] https://launchpad.net/bugs/365915 [09:05] beniwtv: dunnow the exact proftpd syntax, but wouldn't you need Order there too? [09:05] Order Deny, Allow [09:05] ? [09:07] Chipzz: From what I've read, no. But you never know :/ [09:07] if it's anything like apache syntax (which it looks like), that would make sense [09:14] Chipzz: I have tried to remove the allow, but still the same [09:15] :( [09:17] Hey folks. Does anyone use heartbeat/pacemaker under 9.04? === cemc1 is now known as cemc [10:56] New bug: #365962 in samba (main) "Samba failed to install correctly 8.10 - 9.04" [Undecided,New] https://launchpad.net/bugs/365962 [11:39] hello, I would like to build a new boot kernel for the netboot install, as it doesn't work for core i7 it seems [12:03] lol all. anyone tried a server upgrade from intrepid to jaunty yet? [12:03] s/lol/lo [12:10] <_ruben> i did awhile (pre-final) ago .. went without a hitch [12:23] lo all... can't you do-release-upgrade from intrepid to jaunty?? [12:24] <|dthacker|> blizzkid_: yes, you should. Are you encountering problems? [12:25] * |dthacker| is planning to do 2 boxes this weekend [12:25] |dthacker|: yeah, but it was a routing issue... I was confused by the message "no upgrade available" [12:26] <|dthacker|> that would do it.. :) [12:26] upgrading node1 of my cluster right now :) === zoopster1 is now known as zoopster [13:11] for the first time in histroy, on the ubuntu 9.04 launch day, microsoft announced >30% drop in revenue :) [13:12] ivoks, has canonical reported a >30% increase? ;) [13:12] hmmz... I set screen to start at login, but it doesn't start at login? [13:12] blizzkid_, how did you set it to start? [13:13] Kamping_Kaiser: through the menu [13:13] * Kamping_Kaiser assumes this is a new ubuntu thing [13:13] Kamping_Kaiser: canonical doesn't have stock holders to report its cash flow [13:13] Kamping_Kaiser: on the other hand, at the same time, apple announced 17% rise [13:13] Kamping_Kaiser: it's indeed a new feature in jaunty [13:14] ivoks, not sure I'm happy with that as a compromise :) [13:14] ivoks, going back to your OP, yes, good news :) === zoopster is now known as jpugh === jpugh is now known as zoopster [13:16] kirkland not here by any chance? [13:18] ivoks: url? [13:19] henkjan: for what? [13:19] ivoks: that microsoft announcement [13:19] http://www.guardian.co.uk/business/2009/apr/23/microsoft-revenue-plunges [13:21] there are also 'bad' news: [13:21] But the company's server and tools business fared better, with a 7% increase in revenue to $3.46bn [13:22] take care... [13:30] oops [13:31] <|dthacker|> oops? [13:31] New bug: #366044 in mysql-dfsg-5.0 (main) "MySQL upgrade failed when updating to 9.04" [Undecided,New] https://launchpad.net/bugs/366044 [13:32] <|dthacker|> hmmm, I'll have to watch that, I'm upgrading LAMP servers [13:35] hello === cybersplice is now known as arclight === arclight is now known as cybersplice [13:58] Hi! I have fresh ubuntu 8.04 LTS + virtualmin. Why I can not access my main domain name mysite.org but www.mysite.org works? Thank You! [13:59] jmalinens, you havent set up your www. dns entry? [14:01] uhoh... I messed up my cluster [14:02] i have apticron running... but it is not suggesting to upgrade my server to 9.04 .. i am runing intrepid server per lsb_release -a [14:03] axisys, it probably isnt configured to suggest upgrading to new releases [14:03] Hey there Karl. [14:04] jpds, hi mate. hows it going? [14:05] Good morning all. [14:05] Does anyone have link to an article about setting up Xen on Jaunty Server? [14:06] I don't think there's been Xen support since Hardy. [14:06] I have installed all of the Xen packages (including the Hypervisor), but how do I bootstrap the dom0 kernel? [14:06] jpds: So, I would have to compile my own Xen kernel then? [14:06] Yes. [14:06] K, will do. [14:06] KVM is what's supported. [14:07] Thanks. [14:07] KVM is too slow for our workloads. [14:08] IS KVM going to support paravirtualization soon? [14:09] Kamping_Kaiser: how do I upgrade to latest server from 8.10 to 9.04 ? [14:10] !upgrade [14:10] For upgrading, see the instructions at https://help.ubuntu.com/community/UpgradeNotes - see also http://www.ubuntu.com/getubuntu/upgrading [14:10] Kamping_Kaiser: thnx [14:10] axisys: Using a text editor, modify the /etc/apt/sources.list file and replace all instances of "intrepid" with "jaunty", then save the file and run "sudo aptitude update", then run "apt-get dist-upgrade" [14:10] np [14:10] I don't suppose anyone uses Heartbeat / Pacemaker for clustering, do they? [14:11] DSpair: thnx [14:11] axisys: NP [14:11] Kamping_Kaiser: I have setup DNS. I get error 500... [14:12] jmalinens, internal server error? check your httpd logs [14:12] no errors there... [14:13] only in access log I can see error 500 but in error log nothing (I have error_all + log_errors on) [14:13] turn up your logging. perhaps to loglevel debug === tuxlinux_ is now known as tuxlinux [14:15] hi folks -- was just checking out my log server and noticed a bunch of errors from one of my file servers - smbd is trying to make connections to cups for some reason -- cups is not installed and all the cups parts of smb.conf are commented out -- i dont think its really hurting anything other than garbaging up my log files -- an anyone suggest a fix? [14:17] W8TAH, check if smb is advertising printer services to the network [14:17] W8TAH, btw, QTH? [14:17] Kamping_Kaiser: Medina Ohio -- EN91bd [14:17] Kamping_Kaiser: how would i check that [14:17] ? [14:18] W8TAH, no idea about smb sorry, I avoid it (I just have a vague concept of what it might be doing) [14:19] no worries -- all i use it for is letting windows machines connect [14:19] :) [14:19] thanks [14:20] np, good luck with your search :) [14:20] wonder if i have ax5foss registered, I get to use it in 10 min === cybersplice2 is now known as cybersplice [14:21] no, just got vk5foss. [14:23] Hi... when I install phpmyadmin on 9.04 there are prompts about dbconfig... anyone know what should be selected or if its safe to just enter no? [14:24] chazco-> fresh install or update ? [14:24] orudie - Fresh install (never do upgrades) [14:25] chazco-> well its asking you to automatically create a database for you right ? [14:25] blizzkid: here now [14:25] hey ppl I need some help here... I messed up my cluster and I need it to be fixed urgently [14:25] Yep, but its not something its ever done before so its a bit unusual [14:25] kirkland: I just wanted to ask you if you had any idea why screen wouldn't start on login? [14:26] (mysql and apache2 were installed by the tasksel lamp method) [14:26] blizzkid: what shell are you using? [14:26] zsh kirkland [14:26] chazco-> i did the upgrade from 8.10 to 9.04 so i chose NO, since my databases are already configured, you should select Y [14:26] blizzkid: What's up? [14:26] blizzkid: does zsh respect .profile? [14:27] kirkland: I don't believe so. [14:27] DSpair: I upgraded from Intrepid to Jaunty, now my /data0 is gone... /data0 was ocfs on drbd [14:27] orudie - Ok... where will this database end up (doesnt seem to be a mysql one) [14:27] not sure kirkland I'll look into that [14:27] blizzkid: cool, thanks. please open a bug against screen-profiles with your findings [14:27] will do so :) [14:27] blizzkid: Hmmm . . . I got no experience with Oracle's cluster filesystem. I would say that the drivers would need to be re-built/re-installd. [14:27] chazco-> no it should be mysql, you are installing LAMP right ? [14:27] blizzkid: i can special case zsh, if you can show me what's the equivalent of .profile [14:28] DSpair: I'd expect it do be in the upgrade? [14:28] blizzkid: Is ocfs included in Ubuntu? [14:28] orudie - Yep, mysql is already installed and working... [14:29] hi folks -- was just checking out my log server and noticed a bunch of errors from one of my file servers - smbd is trying to make connections to cups for some reason -- cups is not installed and all the cups parts of smb.conf are commented out -- i dont think its really hurting anything other than garbaging up my log files -- an anyone suggest a fix? [14:29] blizzkid: I guess it is... Hmmm . . . [14:29] chazco-> the prompt is just to make your life easier with interractive install to get phpmyadmin working in seconds, without having do it manually [14:30] kirkland: there is /etc/zprofile [14:30] blizzkid: Well, I'm out of my depth here. Lemme see what I can find on Google. [14:30] orudie - So has something changed since 8.10? Back then it was just a case of install phpmyadmin and select apache2... Seems to work anyway. Thanks :) [14:30] i look at it that way anyway chazco [14:30] blizzkid, why dont you use screen as your shell? [14:30] blizzkid: that's system wide. what about per-user, in $HOME? [14:31] nah, only .zshrc [14:31] and then set screen to fire up zsh [14:31] Kamping_Kaiser: would that work? [14:31] blizzkid, yes. [14:31] chazco-> i didnt upgrade my production box yet, only my other personal one , and so far i didnt notice anything big, but you should have chose the ext4 file system thats the major change i hear [14:32] I meant specific to phpmyadmin [14:32] blizzkid: It would likely work, but I recommend against it. If you try to use something like "sftp" or "rsync" over SSH, using screen as part of your default environment will prevent those tools from working. [14:32] chazco-> i haven't even tried to access it after the update, let me try now [14:32] DSpair: ok, I'll just not do that then :) [14:33] grmblz... damn cluster [14:33] blizzkid: Is there anything in dmesg which says that the driver loaded successfully? [14:33] Just this dbconfig stuff is all new... previously nothing like that was needed [14:33] i didnt have to do anything chazco [14:34] chazco-> and it works, with a new interface [14:34] DSpair: drbd is loaded according to lsmod [14:34] hmm... i wonder if its not detecting mysql or something then at install time... thanks anyway orudie [14:34] chazco-> np [14:34] blizzkid: Did the upgrade make any changes to your .conf files? [14:34] Selected "No" on the test machine and that works at least. Thanks :) [14:35] DSpair: I kept the original ones [14:35] blizzkid: Also, did the "ocfs2" modules load? [14:36] yes DSpair [14:36] blizzkid: Well, that's the extent of what I've found on Google then. [14:37] why did I upgrade again? lol [14:37] I lost my documentation bookmark too [14:38] so I don't remember the exact steps I followed [14:38] blizzkid: How about this link: http://www.ubuntugeek.com/heartbeat2-xen-cluster-with-drbd8-and-ocfs2.html [14:40] let me take a look DSpair === NCommander is now known as Guest73647 [14:41] hmmz... I'm getting /dev/drbd0: Failure: (112) Meta device too small on one node now === Guest73647 is now known as NCommander [14:42] Damn. Exact same bug in Pacemaker as in Intrepid. === cybersplice1 is now known as cybersplice [14:45] wtf... my /dev/md4 is gone [14:45] pardon my french [14:53] hmmmz.... sda7 is part of a raid array... which is normal [14:53] but... I can't access that raid array anymore [14:59] Is there any way to save my data from an linux_raid_member partition? [15:01] hi folks -- was just checking out my log server and noticed a bunch of errors from one of my file servers - smbd is trying to make connections to cups for some reason -- cups is not installed and all the cups parts of smb.conf are commented out -- i dont think its really hurting anything other than garbaging up my log files -- an anyone suggest a fix? [15:03] looking for a how to on tweaking the .rtorrent.rc file [15:05] Hello there [15:05] I have just upgraded a ubuntu server from 8.10 to 9.04, and clients on the network can not print. can someone help me out? [15:13] henriquelm: do you have any errors in /var/log/syslog or /var/log/cups/error_log? [15:13] sommer, will check that [15:20] hi folks -- was just checking out my log server and noticed a bunch of errors from one of my file servers - smbd is trying to make connections to cups for some reason -- cups is not installed and all the cups parts of smb.conf are commented out -- i dont think its really hurting anything other than garbaging up my log files -- an anyone suggest a fix? [15:23] help me :) [15:23] I got /dev/md4 ... now I have /dev/md_d4 and /dev/md_d4p1 [15:23] md4 had /dev/sda7 and /dev/sdb6 [15:24] now if I look at /proc/mdstat I see /dev/md_d4 has /dev/sdb6 [15:30] i see to be having some issues setting up ProFTPd, i want to chroot some users and let others have full access, when i put in the option in the DefaultRoot ~,users,!elite-users and try to login, it goes all the way through it and says "Could not connect to server", Reverse DNS lookup is turned off. [15:33] junix: you might want to try #proftpd [15:33] i did [15:33] they were of no help and told me to RTFM, this is most likely a simple fix, i have been reseraching this for a while now... [15:34] after you made your changes to proftpd.conf, did you reload/restart the service ? [15:35] yes [15:35] is it listening ? netstat -tlnp | grep proftpd [15:35] no... [15:35] weird... [15:36] check the logfiles (usually /var/log/proftpd) [15:37] nothin there [15:39] what does it say when you do "/etc/init.d/proftpd restart" [15:40] it restarts the service [15:40] or it says it does [15:40] what port do you use ? [15:40] 21 [15:41] ftp localhost [15:41] netstat -tlnp | grep 21 [15:42] it looks like the server is not working properly [15:42] well if your conf file is borked, it shouldnt start [15:42] do you have a firewall ? [15:42] no.... [15:43] sommer, I think it's something wrong with samba intead [15:43] pastebin your conf file, os & proftpd version [15:43] ok [15:43] 1 sec [15:43] iptables was installed [15:43] :-( [15:43] and iptables -L -nv for good measure [15:44] hi folks -- was just checking out my log server and noticed a bunch of errors from one of my file servers - smbd is trying to make connections to cups for some reason -- cups is not installed and all the cups parts of smb.conf are commented out -- i dont think its really hurting anything other than garbaging up my log files -- an anyone suggest a fix? [15:47] junix, atomic_1: even if the netfilter was dropping any taffic outbound from/inbound to the ftp-server, it is still possible to open a listening socket, which should be listed by netstat. [15:48] W8TAH, i've noticed that strange samba behaviour as well, since i've set up a samba server for testing only recently. [15:48] atomic_1, Hecate: http://pastebin.com/m36d6ac2a [15:48] any solutions? [15:48] junix, ServerType inetd [15:48] thats your problem [15:49] ok [15:49] change to standalone? [15:49] yeah. that should fix it. [15:49] yep [15:49] beat me to it [15:49] :) [15:49] W8TAH, haven't spend any time on finding one. [15:50] i wonder why ppl still use sth as useless as inetd, nowadays. [15:50] (it's useless in my mind. other ppl might think differently) [15:54] Hecate: i get this nowq [15:54] Connection attempt failed with "ECONNREFUSED - Connection refused by server". [15:56] now it's getting more difficult for me. i have never really used proftpd, in favor of vsftpd, which i again abandonned in favor of chrooted sftp using openssh's internal-sftp method. [15:56] it might be the listening address. [15:56] ok [15:56] wait [15:56] sure "DefaultAddress 192.168.1.45" is one of the server's ip-addresses? [15:56] my goal was to use chrooted sftp using openssh [15:57] but i couldn't get it working... [15:57] is something else using port 21 ? [15:57] i doubt it [15:58] did you install proftpd from repo ? [15:58] w8 a sec [15:58] ok [15:58] ok [15:59] ok, junix, i stumbled upon a very interesting article on www.debian-administration.org only recently. let me quickly get the url for you. [15:59] oh ok [15:59] thanks [15:59] which is this in regards too [16:00] junix: http://www.debian-administration.org/article/OpenSSH_SFTP_chroot_with_ChrootDirectory [16:01] Hecate: i tried going through this... [16:01] works perfectly for me. (despite some logging issues.) [16:02] but? [16:02] hi [16:02] Hecate: here is what i didn't understand..why does it have to be internal-sftp, and will users from outside the network be able to access this? [16:02] do you understand the basics on chrooting? [16:03] yes] [16:03] so in case the used an external sftp-server (which would have to be executed after the chroot()), its binary and all its dependencies would have to be inside the chroot. [16:04] that's why the openssh devs included a sftp-server into the sshd-binary. [16:04] now it can chroot itself and execute the sftp-server without needing any libs inside the chroot. [16:04] Where does ubuntu server get the md_d4 name from??? nothing in /etc/raidtab nothing in /etc/mdadm/mdadm.conf [16:04] it's driving me nuts [16:05] Hecate: here is my dilema, i need to have all individual users go to their own home directory if i do this, is this possible? [16:06] blizzkid, r you talking about the hostname? [16:06] Hecate: no raid device names [16:06] !update [16:06] For upgrading, see the instructions at https://help.ubuntu.com/community/UpgradeNotes - see also http://www.ubuntu.com/getubuntu/upgrading [16:07] for security reasons, ssh refuses to chroot into a directory which the any user (but root, of course) has write access to. [16:08] Hecate: yeah i need each user to be chrooted/jailed to their dir [16:08] for security reasons that's not possible. [16:08] :-( [16:08] well then [16:08] back to proftpd [16:09] i tackled that issue by having a global sftp directory containing all user's home directories. that sftp directory is my chroot directory. i simply make sure that user's cannot access other user's home dirs by setting proper permissions. [16:10] * blizzkid is really stuck [16:10] that global chroot dir is particularly important when one needs logging (otherwise it would be a very difficult task. [16:10] Hecate: i can't do it for HIPPA reasons [16:10] but i have to say the the openssh devs could have implemented the internal-sftp in a far better way. [16:11] is using lh_config/build the right way to regenerate your own custom netboot.tar.gz? [16:11] Hecate: i want as little work as possible...for if openssh does get to that point where everyone is chrooted, i can switch easily [16:11] chrooting itself works. just not the way you know it from ftp ;) [16:12] someone here who's experienced in creating a public share with samba (public in terms of no user/pass authentification with windows-machines)? [16:12] Hecate: yeah [16:13] junix, nonetheless, if you wanna go back to ftp, just make sure you use encryption. you surely know that sniffing on one's password data is a piece of cake when using the old-fashioned ftp-protocol. [16:13] yeah [16:13] that is why i'm implementing proftpd to use the mod_ssh with is [16:13] it [16:14] junix, "Connection attempt failed with "ECONNREFUSED - Connection refused by server"". could that have sth. to do with the listening address you set? [16:14] shouldn't... [16:15] proftpd is the only ftp installed [16:15] so the server can be reached via 192.168.1.45 [16:16] i'm ssh'ed into it [16:16] when does the error occur? [16:16] when i use filezilla from a windows box [16:17] so, is proftpd listening, at all? [16:17] no-one experienced with software raid? [16:17] I'm completely stucj here [16:18] i need to do a quick benchmark of my cpu [16:18] Hecate: it doesn't look that way [16:18] incorrect, dd if=/dev/urandom of=/dev/null bs=1K [16:18] not multithreaded, however. [16:19] junix, it doesn't "look" that way? [16:19] Hecate, err that tests my disk io [16:19] Hecate: no [16:19] its not running [16:19] when i do a netstat -an|grep 192.168.1.45:21 [16:19] nothing comes up [16:19] incorrect, no, it tests your processor, since the data is read from and written to memory/kernel/udev-only devices. [16:20] and urandom's prng is very, very cpu-intensive. [16:20] oh sorry i didn't read what you wrote [16:20] duh i am stoopid [16:21] junix, "netstat -lvveenpoA inet,inet6" and check for anything that sounds like port 21 or proftpd. don't use grep. [16:22] then use (h)top to check if the proftpd-process is running. do also check the log, for anything suspicious. [16:22] i hope you also restarted the server after changing the config. did the (re-)start command print out anything? [16:24] i did [16:24] nothing in the logs [16:51] hmm, i guess lh_config -b net doesn't generate me a netboot release [16:55] I managed to make my ubuntu server unbootable. The thing is, that I had my /boot on /dev/sdd2 and wanted to use /dev/sda2. I mounted the /dev/sda2, copied the contents of the orginal /boot to it. edited the /etc/fstab and did grub-install.... Now all that happens is that the machine boots to grub, and I can even select the image I want to use, like before, but it doesn't exist. I think that it still tries to use the /dev/sdd2 for /boot. Is ther [16:57] hi, so I installed Ubuntu Server 9.04 yesterday, converting over from Mandriva, and now I am seeing something strange in the command-line.. when I do php -i | less arrrow keys don't work, but everything is fine when I do ls -alp |less [16:58] This is the first time I see less behaving differently in various circumstances [16:58] ha1331, since you moved the bood manager from one disk to another, did you adjust the hdd boot sequence? [16:58] (in the bios) [17:00] Hecate no need to, I'm pretty sure that the boot manager was installed to /dev/sda in the first place [17:00] Hecate and also, it still loads the grub, even if the /dev/sdd isn't in the machine anymore [17:01] alright. sure you adjusted the grub-config, so it's looking for the images on the right disk? [17:02] that might be your issue. [17:02] couldn't even find grub.conf anywhere [17:02] /boot/grub/menu.lst [17:02] hmm [17:03] it's probaly looking for the images in a wrong place. [17:03] not sure if I did that, but I'm thinking not, cause at some point I did see reference to (hd3,1) or similar [17:03] can it be done from grub shell? [17:03] Hecate: brb allergies attacking [17:04] hay-fever? i h8 that crap. hit me pretty hard this summer, too. [17:04] ha1331: It can. Or you can boot a live CD. [17:05] other question, can I use non-hotplug sata drive on HP Proliant ML350 G5. Manual states that one can use SATA drives, but can I use non hot-pluggable? [17:05] Hecate: yeah [17:05] Hecate: maple, rag-weedm pollken [17:05] ha1331, you should even be able to do that on the fly using the grub-menu. (using the e-key, etc.) [17:06] im not entirely sure, though [17:07] maaaan, this surely is not my day... [17:07] Hecate: port 21 is opened up on 0.0.0.0 [17:08] sounds good. proftp being the application associated with it? [17:08] how do i change to the virtual kernel? i installed it but it don't get an initrd image from it [17:08] no [17:08] inetd [17:09] I even tried to do the root (hd0,1) and then setup(hd0). It seems not to find /boot/grub/stage1 but instead it finds /grub/stage1 and at the end it says succeeded... after reboot, still the same situation [17:09] junix, if i were you, i'd drop that piece of s***. [17:09] Hecate: what do you meanm? [17:09] inetd [17:09] i installed proftpd [17:10] inetd is old...shouldn't it be xinetd? [17:10] i prefer not using any inetd+derivates at all. just complicates things a lot. [17:11] i see [17:11] and with the internet being mroe and more hostile, inetd could pose a threat, as restarting deamons frequently makes them a possible point of assault for dos-attacks. [17:11] iirc proftpd asks you a debconf question if you want standalone or whatever [17:12] is it possible to host own irc server ? [17:12] orudie yes [17:12] any details on this ha1331 ? [17:13] hey, is that normal to have like 0.05% of error packets in a busy network/server? [17:13] can anyone point me in the right direction to generate my own custom kernel and initrd for a pxe boot install? [17:13] Hecate: i'm debating on going back to vsftpd....it was easier [17:13] yes it is [17:13] orudie: nope, never done that, but have used one that was hosted on computer at the end of DSL line [17:13] but can't do as much [17:14] junix, nowadays boxes do have such huge amounts of ram, that having deamons run all the time has advantages. decreases latency, saves i/o and cpu-time. inetd is in my opinion a relict from before the cold war. ;) [17:15] junix, any features you'd miss on vsftpd? [17:15] orudie http://ubuntuforums.org/showthread.php?t=233146 [17:15] the mod_ssh [17:16] orudie did Google: ubuntu irc-server install howto [17:16] junix, what's it do? [17:18] Hecate: it uses ssh to encrpyt the traffic... [17:18] so it acts as if it were an ssh server? [17:18] i think so [17:18] havent set it up\ [17:19] how do i change to the -virtual kernel? [17:19] not using the crappy port- and pasv-methods, which really suck ass, when it comes to routing the encrypted traffic back through one's firewall. [17:19] that was one of my major reasons for switching to ssh. [17:19] Hecate: agreed... [17:19] Hecate: there is a Match user option for ssh.... [17:20] i'm wondering if that will work [17:20] what? [17:20] for openssh [17:20] to do chrooting [17:20] it does work. im currently using it. [17:20] oh you are [17:20] didnt we talk about that only an hour ago? [17:20] i thought you were doing the Match group [17:21] i would think there is a difference [17:22] hm, sudo aptitude reinstall linux-image-2.6.28-11-virtual did it [17:23] junix, im using match group. [17:23] ah ok [17:23] yeah [17:23] otherwise i could use ssh to admin my server anymore. [17:24] hmmm [17:27] dovecot is not picking the arrived mail that is on /var/spool/mail/username this with Jaunty .. [17:27] New bug: #322214 in php5 (main) "php incorrectly opens stdin" [Undecided,Confirmed] https://launchpad.net/bugs/322214 [17:28] junix, another argument against using encrypted ftp: http://scary.beasts.org/security/CESA-2008-002.html and partially http://scarybeastsecurity.blogspot.com/2008/07/on-ftp-ssl-and-broken-interfaces.html (the last one really messes some things up with certain clients) [17:29] Hecate: ok [17:29] junix, i'd do a dpkg-reconfigure on proftpd and try to switch to standalone mode. dunno if it's possible and dunno if mod_ssh does what it pretends. [17:29] if you want an emphasis on security you CANNOT use encrypted ftp. [17:30] ok [17:30] apprecaite it [17:31] you're welcome [17:31] so vsftpd is not an option and proftpd+mod_ssh only can case it does what i think it does. [17:32] well vsftpd is an option still [17:32] it will be the option if i can't get this working... [17:32] i can still have ppl use ftp [17:34] depending on how paranoid you are ;) [17:34] just try to get proftpd working [17:34] it appears to be the best solution, to me. [17:49] junix, are you sure there is a mod_ssh for proftpd? all i stumbled upon so far, is mod_ssl. [17:49] its on the website [17:50] still no luck... Any ideas howto fix grub from grub shell? I think I need to modify menu.lst, like Hecate pointed out. [17:51] junix, all google finds is mod_ssl or request for a mod_ssh on the forums, see for yourself: http://www.google.de/search?q=mod_ssh+site:proftpd.org&hl=de&start=0&sa=N [17:53] would be awesome to fix permanently, but I would be satisfied if I could just get it to boot. I can re-install the whole system on later date [17:54] there must be a method to fix it without a reinstall. [17:55] lacking the knowledge on how to do it with the grub shell id just use a live cd [17:55] Hecate: I bet there is, but I'm feeling bit too simple to achieve that :). LiveCd isn't an option currently, there is no CD-drive at the moment [17:57] Hecate: i have to create a ssl cert like i would for mod_ssl on apache [17:57] geez [17:58] so it's probably just encrypted ftp. [17:58] ha1331, maybe a bootable usb stick? [17:59] Hecate :D that sound's like an all nighter [18:00] not at all. since intrepid ubuntu's capable of converting an iso image into a bootable usb-stick in a jiffy. [18:00] system > administration > create usb startup disk [18:01] if that's not an option either, i'm afraid you'll have to find out how to do it, yourself. [18:01] maybe #grub ? [18:01] Hecate haha, awesome. Found cd-drive! [18:02] Hecate so, what should I burn on a cd? Normal installation cd or something else? [18:03] the common live-cd should do it. [18:04] Hecate: And you think that I can fix the issue using it? [18:04] (idea: what about just plugging the disk into another computer?) [18:04] Hecate only windows machines availeable [18:04] that sucks [18:04] Hecate Amen to that [18:04] yes, i think it should be possible. [18:05] Ubuntu 9.04 Desktop (the latest version) this is what I need? [18:05] what's the server running? [18:06] 9.04 server [18:06] yes, go for 9.04 desktop then. [18:06] make sure you choose the same architecture. [18:07] 32bit live-cd + chrooting into 64bit-system + exec'ing grub-install/update-grub ain't such a good idea. [18:11] i'll be right back - hopefully. upgrading to jaunty. [18:11] ha1331: You can just edit the grub command line from the boot menu, if it's just menu.lst that's broken. [18:11] ha1331: No need for rescue CDs for that. [18:11] ha1331: Select the boot stanza you want, hit "e" for edit, and fix it to be correct, then boot. [18:14] infinity not sure what to fix [18:17] ha1331: Depends on what's going wrong, I suppose. Bad path (superfluous /boot in the kernel path can happen, if you grub-install on a partition when it's not listed in fstab/mtab at the time), bad hd() specification, etc. [18:18] ha1331: But all of that can be mangled from the boot menu... Assuming you're getting a menu at all. [18:18] ha1331: If you're not getting to a stage2 menu, then you have bigger problems and, yes, need to fix it from a rescue CD or the like. [18:20] I want all my 100 workstations to shut down at 1800 each night. Therefore I made a crontab with this line in it: 00 18 * * * halt -p But nothing happened. [18:20] is it a good idea to run HIDSs and NIDSs and similar software also on _desktop_ linux systems? or does it only make sense to do that on servers? [18:25] hi I'd like to know how far the ubuntu server for small business coming along? I read about an smeserver type server? [18:44] embrik: did you put the shutdown in a crontab that has permissions to shutdown? e.g. /etc/cron.d or root's crontab [18:46] hi I'd like to know how far the ubuntu server for small business coming along? I read about an smeserver type server? [18:52] bn43: I'm not aware of anyone working on it (not that I have any inside knowledge), it has been brought up a few times on the ubuntu-server mailing list - but I don't think anyone has started building something. But I may be wrong. [18:52] bn43: smeserver? [18:53] bn43: your talking about this https://wiki.ubuntu.com/SmallBusinessServer right? [18:53] stickystyle: yes! that one [18:54] NCommander: www.contribs.org [18:55] bn43: yeah, looking at the wiki page it doesn't look like anyone has really started to run with the idea past brainstorming. [18:56] thats a shame! I was hoping shuttleworth would put some investment behind that - there's a real demand for it [18:57] which one? [18:57] bn43 > what do you think would be the benefits over the standard ubuntu server? [18:58] bn43: Don't quote me on any of this though, someone may be doing it. Im just a guy that reads mailing lists and wikis ;) [18:58] yann2: simple easy setup like smeserver [18:59] easy coniguration and administration for the non-tech savvy [19:00] you want an active directory + exchange + sharepoint + mssql all on one server? I hope you got plans for good backup :) [19:12] Does Ubuntu Server make use of SpeedStep (where present)? [19:13] 9.04 yes [19:14] ivoks: thanks [19:15] ivoks: is that also true for CnQ on AMD gear? [19:15] should be, yes [19:15] i haven't tested it on amd [19:15] okay, I'll give that a try when I have appropriate hardware to hand. [19:16] ball: it should work, it's based on the same technology as desktop version [19:16] uh... buzzwords :) [19:16] ivoks: I'm just getting into the desktop version. [19:17] ivoks: I've been running the server for a while, but still haven't learned much about it. For my purposes it JustWorks[tm] [19:17] ball: kirkland made an effort of making 9.04 as green as possible [19:17] ivoks: is it possible to upgrade an 8.10 server to 9.04 in-situ, without reinstalling? [19:17] ball: so, hibernating and suspending servers is supported on hardware that supports it [19:17] ball: yes, run do-release-upgrade [19:18] Okay, let me try to ssh in now. [19:18] you'll need one reboot at the end of the process [19:18] * kirkland hugs a tree, and ivoks [19:19] * ivoks awwww... [19:19] I think that's another good reason to give Ubuntu Server serious consideration. [19:20] sure is [19:20] I wish I'd partitioned this server differently, it would have eased the migration to Ubuntu [19:20] ball: if you have ipmi card in your server, that would round up whole thing [19:20] no space? :) [19:20] Is ipmi LOM? [19:21] yes [19:21] ivoks: we have three drives and the man from HP said that RAID-1 was "impossible" [19:21] ...so we have RAID-5 [19:21] well raid1 is impossible with three drives [19:22] ivoks: it's not, but even if I had to pull one of the drives I would rather we did that [19:22] (that's why I ordered three drives in the first place) [19:22] well, you can do raid11 [19:22] You can have the mirror + one hot standby [19:22] (with three) [19:22] oh... or that [19:24] How well does Ubuntu work with an HP SmartArray E200 RAID board? [19:25] very well [19:26] Will I be able to ask Ubuntu about the health of each drive? [19:26] (and the array in general) [19:27] smart? [19:27] yes [19:27] The OS I run now works well, but doesn't let me check the array remotely [19:27] ...which I consider a problem. [19:27] with hp tools? [19:28] as for array, i'm not sure [19:28] ivoks: HP tools aren't available for NetBSD afaik, though perhaps they'd work if I installed Linux emulation [19:30] i'm not sure hp provides tools for ubuntu [19:30] yet :( [19:30] ivoks: wouldn't they just have to be Linux tools? [19:30] I know we bought this with some Linux installed [19:31] ...not sure which one. [19:31] since those tools aren't open source and they use some hp's drivers and they ship only binaries, they support only some distributions [19:31] Ah, okay. [19:32] but since hp and canonical are getting friendly, we might expect those tools for ubuntu too [19:32] Perhaps I should badger HP for Ubuntu Server support. [19:32] ball, iirc HP is working on it [19:32] hey, where is the ubuntu-server metapackage in ubuntu jaunty? [19:33] no such thing [19:33] why? [19:33] what would you expect from ubuntu-server metapackage? [19:33] foxbuntu: That would be good. [19:33] the same thing as ubuntu-desktop, only for ubuntu server [19:33] hehe [19:33] so, which service should ubuntu-server package install? [19:33] its been in every version [19:34] lamp [19:34] only lamp is server? [19:34] and what if i want mail server? [19:34] i can install all the individual components, it just makes everything simple [19:34] you can install task, not a metapackage [19:34] there was never ubuntu-server metapackage [19:35] whats task? [19:35] run tasksel [19:36] and select LAMP server [19:37] arrite [19:40] mathiaz: welcome back ;) [19:41] Hello mathiaz [19:41] Does Ubuntu Server ship with Samba? [19:41] ivoks: hi [19:41] ball: yes [19:41] ivoks: how are you doing? celebrating the release of jaunty? [19:41] ball: you can install it [19:42] mathiaz: haven't you seen the picture i took at the top of the world in jaunty's t-shirt? :) [19:42] ivoks: are there any handy configuration tools? I seem to remember the config file was a bit of a challenge. [19:42] ivoks: I think I saw it :) [19:42] ball: nope :/ [19:42] ivoks: where was this actually taken? [19:43] mathiaz: at 3500 meters, moelltaler, austria [19:43] ivoks: hopefully I can bring my config file with me then, or portions of it at least. [19:43] ivoks: ah - Austria [19:43] ivoks: are you dancing around the world? [19:43] ivoks: it's *not* the top of the world ;) [19:43] mathiaz: it's not, but it looked like that :D [19:43] ivoks: anyway - do you arleady have ideas for karmic? [19:44] mathiaz: of course... my favourite is ldap backend for mail task [19:44] + apache studio as configuration tool [19:45] ivoks: seems like good plans. [19:45] there are other too... like linuxha instead of redhat cluster suite [19:45] ivoks: for the latter, the problem is that apache studio relies on eclipse [19:45] or, to have both of them [19:45] ivoks: and eclipse is not maintained in Debian/Ubuntu for now. [19:45] i know [19:45] ivoks: IIRC we're still shipping eclipse 3.2 [19:46] ivoks: however there will be a session about eclipse at UDS [19:46] Eclipse the editor/IDE? [19:47] ball: yes [19:47] ball: but eclipse is much more than IDE [19:47] mathiaz: Eclipse is a beast (I've touched it before I knew better). I doubt a session will change much unless Canonical decides to apply resources to Eclipse. [19:47] ivoks: I've not used it, I thought it was an IDE. [19:48] ScottK: do you have ldap servers anywhere? [19:48] ivoks: No. Sorry. [19:48] ScottK: too bad, cause there is a perfect application based on eclipse for managing ldap [19:49] having eclipse in ubuntu as supported would be a great step to having a tool for managing ldap [19:49] if we can manage ldap, we can put 'everything' in it [19:49] Yep. [19:50] ScottK: I agree with you. May be the session will be enough to convince that ressource should be put on maintaining eclipse. [19:50] ivoks: is eclipse needed for apache directory studio? I tought it only required java [19:50] jmedina: you can get it as a plugin for eclipse [19:50] ivoks: right - I've got some plans for ldap and directory too. [19:50] jmedina: or you can download whole package (apache uds + eclipse) [19:50] mathiaz: great [19:51] It's going to be a pain to upgrade this box. I wish we could afford a matched pair. [19:51] ivoks: the first step is to put user and groups in the directory and make sure relevant applications can leverage that info [19:51] of course [19:51] ivoks: :O, I never think about it, I always downloaded 70M tar [19:51] ivoks: such as postfix, dovecot, apache, etc... [19:52] mathiaz: i'm already doing some testing with that [19:52] ivoks: I'm looking into freeipa and see how we could integrate that. [19:52] ivoks: especially the management console. [19:52] freeipa uses FDS, isnt, it? [19:53] ivoks: I also talked to howard chu (from openldap) yesterday and he told me that he added support from pam_ldap to slapd now [19:53] jmedina: yes - one of the change would be to replace it with openldap. [19:53] I think there is no integration for mixed envirements with windows [19:53] ivoks: now you can use an local slapd to handle nss and pam. [19:53] Is it difficult to put LTSP on Ubuntu Server? [19:54] that's awsome [19:54] mathiaz: how is that? [19:54] jmedina: there is a slapi plugin to handle windows synchronisation (for user) [19:54] mathiaz: I mean store SAM in ldap/freeipa, not to sync with AD [19:55] mathiaz: or is something different? [19:55] jmedina: it's a sync with AD. [19:55] jmedina: you can't use freeipa as a backend for AD. [19:55] jmedina: we'll have to wait for samba4 to be able to do that. [19:56] mathiaz: no I dont want AD, I just want to store windows info in ldap, something like samba/ldap [19:56] ball, define difficult :) [19:56] jmedina: ah ok. You can already do that. [19:56] I already have a few setups with samba/ldap for domain controller [19:56] with openldap [19:56] jmedina: there is a samba schema to be able to store machine information and relevant user information in the DIT [19:57] jmedina: and then configure samba 3 to use ldap as its backend. [19:57] mathiaz: yes, but not for freeipa [19:57] jdstrand: true. 1.2 doesn't support that IIRC [19:57] AFAIK, with freeipa you can store PKI, tickets, users in ldap mostly for a unix netowork [19:58] jmedina: ^^ [19:58] jmedina: however the next version of freeipa support machine. [19:59] one thing to consider is a full integration with kerberos, lots of users want that for SSO, I see you are using mit kerberos, but most people use heimdal even samba 4 [19:59] jmedina: what do you mean by most people? [20:00] I have to go, sorry [20:00] jmedina: I know that both samba4 and openldap prefer heimdal. [20:00] well most people I know, most documentation in the internet [20:00] jmedina: but large deployments are using MIT keberos. [20:00] jmedina: the latest version of MIT (1.7) can generate AD style tickets. [20:01] jmedina: likewise-open uses MIT kerberos as their library. [20:01] that is good, I really dont have real experience deploying kerberos [20:01] the heimdal user tools are a bit friendlier according to most folks [20:01] oh, fun... i can't access one server after reboot; on friday night... [20:01] jmedina: and MIT kerberos is the default in Debian. [20:01] including me. :) [20:02] AD was originally based on mit kerberos implementation, isnt it? [20:02] jmedina: I don't know. [20:03] anyway, mixing mit and heimdal kerberos isn't a problem. it's just the user tools that behave slightly different, there is a proper protocol standard, etc. [20:03] so if you go for one, you don't have to rebuild things that link to the other [20:05] mathiaz: thanks for the explanation [20:05] so lets study mit kerb :D [20:05] here in mexico more and more customers are asking for ubuntu servers, even in goverment [20:06] maswan: I'm not sure you can just swap in the heimdal client library and everything works out of the box. [20:07] maswan: IIRC you'd have to recompile the application to use the new kerberos library. [20:07] maswan: however debian has done a great jobs at making this as easy as possible. [20:10] ivoks: have you used kerberos with ldap backend? [20:10] jmedina: no [20:10] i haven't used kerberos at all [20:10] i'm scared of it [20:10] :) [20:10] I'd like to start working with that [20:11] ivoks: me too [20:11] :D [20:14] mathiaz: I was saying that you don't have to [20:14] mathiaz: you can have applications with both [20:15] mathiaz: is there any post or something about slapd nss pam integration ? [20:16] New bug: #366294 in mysql-dfsg-5.0 (main) "package mysql-server-5.0 5.1.30really5.0.75-0ubuntu10 failed to install/upgrade: subprocess pre-installation script killed by signal (Broken pipe)" [Undecided,New] https://launchpad.net/bugs/366294 [20:19] how do you restart services? [20:20] i can''t remember where the folder is [20:24] LyonJT: /etc/init.d/? [20:24] LyonJT: you can use invoke-rc.d servicename start|stop|restart|reload [20:25] take care [20:32] jmedina: nope - howard told me about it during our conversation yesterday [20:32] jmedina: I then looked at the cvs changelogs. [20:33] jmedina: he did most of the work last week. [20:33] mathiaz: after 2.4.16 [20:34] jmedina: yes - so it should be available in 2.4.17 [20:34] :( [20:35] jmedina: http://bazaar.launchpad.net/~vcs-imports/openldap/main-src/changes [20:35] mathiaz: and does it to? it is a replacement for padl nss_ldap? [20:35] jmedina: ^^ you can browse the changelogs. [20:35] jmedina: it's a replacement for both nss_ldap and pam_ldap [20:35] :O [20:35] jmedina: nss_ldap support has been available for quite some time. [20:35] jmedina: it's actually available in intrepid. [20:36] that i good, most ldap problems I have faced are nss+pam related [20:36] jmedina: the nss overlay is in slapd. [20:52] hi all [20:52] anyone running 9.04 on server ? [20:54] PleXuS: ask me again tomorrow ;-) [20:54] lol [20:54] ball, i am scared to upgrade [20:54] :) [20:54] Backup early and often [20:55] yeah thats my bad point.. :) [20:55] I'm going to back up my data directories when I get home and then try an in-situ upgrade [20:55] ball, any good backup tool for linux? [20:55] PleXuS: I use "tar" [20:55] PleXuS: tar czpf :) [20:55] aah ok that way :) [20:55] no 7zip ? :) [20:56] I don't know what 7zip is. [20:56] 7z is the extension i think [20:57] kinda like zip, but 7 times better :)) [20:57] the best compression algorythm around :) [20:57] gzip works for me. [20:57] I'd be wary of moving to something I haven't used for the last ten years ;-) [20:57] I'm using tar | nc to another machine, then mksquashfs for archiving [20:58] I use rsync too [20:58] "belt & braces" [20:59] or if you have the / partition separat from say the big partition with all the data on it, [20:59] you just boot with livecd, make a dd from the partition, the upgrade [20:59] if it's doesn't come ut right, you can dd back [21:00] nothing lost, just some time maybe [21:01] damn how I suck at typing today... [21:04] lol === blue-frog_ is now known as blue-frog [21:42] how can I setup an ubuntu deployment server? [21:43] sourcemaker: deployment server? [21:43] I would like to download all required packages for my clients (ubuntu+kubuntu) in background at night... and deploy all updates to the clients when they become online [21:43] I have a very slow internet connection... and downloading all packages via apt is very slow and time consumung [21:44] apt-mirror is not possible... because it downloads all packages (complete sync) [21:45] apt-proxy downloads all required files... if there are not in sync (caching) [21:45] so what's ther alternative tool? like specify the installed software components and download the updates via server... [21:47] for example: my server downloads all kde updates at night and my client receives the update in the morning... (if the download is complete) === timburke_ is now known as timburke [21:49] sourcemaker, I think you can limit apt-mirror by source to keep the packages you need to a minimum [21:50] foxbuntu: but I can limit apt-mirror via all my installed software components? [21:50] no [21:51] sourcemaker, but I think you could prob do some crazy magic with rsync + dpkg -l + a ppa [21:52] sourcemaker, essentially build your own package list that points to the correct archives based on your installed package list [21:52] and then apply that to apt-mirror [21:52] im not really sure if that would work or not....but I think it might [21:52] sourcemaker: if you point your clients at an apt-cacher or apt-cacher-ng proxy, the packages will only get downloaded once. [21:53] sourcemaker: you could then have a sacrificial client that updates via cron during the night so that updated packages have arrived in the morning. === mathiaz_ is now known as mathiaz [21:54] foxbuntu: ok [21:56] (you may want to have a sacrificial client per architecture you support to ensure you get each archs versions of the updates.) [21:57] sourcemaker, I guess to answer the root of your question, no nothing quite fits what you are looking for, but its Ubuntu, it can also be created :) [21:58] foxbuntu: ok... I will develop this missing feature by my self :-) [22:02] foxbuntu: can I configure apt-proxy to download the packages in background? [22:02] foxbuntu: so that my client starts the initial download progress? [22:02] foxbuntu: without staying connected [22:04] sourcemaker, idk, worry [22:04] s/worry/sorry [22:16] how can i restart webmin from init.d? [22:16] what would the command be [22:19] what would be the command if i wanted to restart webmin? [23:46] LyonJT: sudo service webmin restart [23:46] i hate the installer [23:46] i don't think it even installed grub (proeprly) [23:47] i blame lvm [23:55] Any ideas why brand new Proliant ML350 G5 gets drasticly slower transfer speeds than proliant ML110 on exact same disk? [23:57] when I do: time dd if=/dev/zero of=/serverData/fast/d1p0/vm8.img bs=1024k count=1000 I get 80-105MB/s on ML350 but when I had it on ML110 I got ~250MB/s