[00:21] mathiaz: Brian Murray suggested that I might want to make a SRU proposal for bug #296952, regarding Ubuntu 8.04. While preparing (and testing) the debdiff I of course ran into bug #323755. Think this would be a good time to suggest a SRU for that bug as well? [00:21] Launchpad bug 296952 in mysql-dfsg-5.0 "mysqlhotcopy failed on table with hyphen in name" [Undecided,Fix released] https://launchpad.net/bugs/296952 [00:21] Launchpad bug 323755 in mysql-dfsg-5.0 "server-cert.pem expired: "Not After : Jan 27 08:54:13 2009 GMT" - ssl related test suites fails because of expired certificates" [Undecided,Confirmed] https://launchpad.net/bugs/323755 [00:21] New bug: #373012 in mysql-dfsg-5.0 (main) "package mysql-server-5.0 5.0.67-0ubuntu6 failed to install/upgrade: subprocess post-installation script returned error exit status 14" [Undecided,New] https://launchpad.net/bugs/373012 [00:22] andol: yes [00:23] mathiaz: Ok, will do. [01:10] I have an ubuntu lamp server and I would like it to display pertinent information directly to me when I login. For example... serious apache/mysql errors.... penetration attempts.... etc. Is this possible / a good idea? === jes_ is now known as XiXaQ [01:13] marksman: if you generate that stuff periodically and then display it, prolly not so bad. on the other hand, if the system is under load and simply logging in fires off a bunch of regex, you might have problems if the server is under load [01:14] and i repeated myself there.. [01:14] marksman: you might just install logwatch and have it emailed to you daily [01:14] that just emails all logfiles? [01:15] no. you should 'apt-cache show logwatch' [01:19] Hi, does the 9.04 server give you an interface for managing samba or do you still need to manually edit conf files? [01:22] fbc-mx, the repos are the same as regualr ubuntu [01:22] basically you can install a gui if you need [01:22] but one is not provided as default [01:22] because, it is the SERVER edition [01:23] darthanubis, how would I go about locating a text based gui? [01:23] search synaptic [01:23] or apt-cache [01:23] google [01:23] etc. [01:23] text based gui? [01:24] uh? ssh? [01:24] foxbuntu, yeah like aptitude.. [01:24] :P [01:24] fbc-mx, sorry, Im not adding anything here...I am just feeling a little puncy so I am pulling your chain [01:25] foxbuntu, it's still a gui.. even if it's not running under gnome... and and it better than digging into conf files when all your interested in are results. Sometime you don't have the time to learn every setting in a conf and just want a gui to do the basics. [01:26] a gui will often break something while fixing another, i dont use them if possible [01:26] fbc-mx, to an extent yes [01:28] fbc-mx, what are you trying to accomplish on your server? [01:28] fbc-mx, other than a "text based gu" [01:28] s/gu/gui [01:29] foxbuntu, just basic management.. rights controls etc... [01:29] fbc-mx, then you might consider ebox [01:30] foxbuntu, I have to have a working Ubuntu samba server by Monday or my name is MUDD. I opened my big mouth at a management meeting and mentioned that a linux server would increase the uptime of the server, due to downtime cause by getting the windows server os infected all the time. So now I gotta make this happen. [01:31] what is the recommended way to go about trying ebox? install u-server via iso and then ebox is the next package you install? [01:31] fbc-mx: if the os is getting infected all of the time, you have other problems ftr [01:31] mikegriffin, that would be one way [01:31] fbc-mx: you might just try swat? [01:31] foxbuntu: might there be a better way? [01:32] fbc-mx: do not use swat apparently [01:32] mikegriffin, not really, you could do it in a VM to keep it contained while yo try it [01:32] i just didnt know if there was an image that set stuff up in a way specifically for ebox [01:33] ebox can find the existing stuff generally if it is pretty stock i guess [01:33] fbc-mx, being a windows consultant to pay the bills, if you have lots of down time and infections in your file server, you have other security issues in your infrastructure that need plugged [01:33] mikegriffin, the Windows guy is a jerk and doesn't know what he should and doesn't want to put the work into tightening up network security. So I proposed a linux solution the just works. [01:34] foxbuntu, ebox looks right up my alley though... [01:34] fbc-mx, yeah...should be what you need [01:34] fbc-mx, but your also likely going to need ldap+kerbros support setup for samba [01:35] fbc-mx, webmin [01:35] darthanubis, no no [01:35] lol [01:35] but a gui other than that is a-ok [01:35] darthanubis, webmin != good [01:35] is ebox an ubuntu thing? i dont see it on debian testing [01:35] fbc-mx, you said you did not care how stuff works [01:35] mikegriffin, yes...the the ubuntu-server management app [01:35] it does the job [01:36] foxbuntu, I typed "sudo shutdown now" and I get a recovery menu on ubuntu server.. Is there some new special command to get this done? [01:36] fbc-mx, yup, on servers you need to do sudo shotdown -P now [01:36] what would be the diff between -h and -P ? [01:37] mikegriffin, man shutdown :) [01:37] darthanubis, No, I do. How ever I don't have the time right now to dig into it. I need a solution STAT. No like4 or 5 days after I read enough howto's to figure it out. [01:37] foxbuntu, right [01:37] i did, sorry [01:37] fbc-mx, webmin works [01:37] NOW [01:37] darthanubis: webmin works like windows 'works' [01:37] you don't ahve to learn anything [01:37] mikegriffin, but it works [01:38] darthanubis: add a redirectperm in apache through webmin [01:38] mikegriffin, the guy is lazy [01:38] i gave a lazy option [01:38] windows is for the lazy [01:38] we agree [01:38] ebox seems more intuitive [01:38] * foxbuntu can see this is going to take a turn for the worse and returns to productive things [01:38] ha, thanks fox [01:38] later guys [01:38] prescient [01:39] nice [01:40] darthanubis, I'm using webmin manage our hosted company webserver. So I'm quite familiar with it. However it just does too much. I wish I could like remove the plugins I will never use and it will only customize with the left over plugings and not continue to suggest option for plugins that aren't even installed. [01:40] it does that [01:40] it called modules [01:40] and they don't all have to be installed or used [01:43] darthanubis, yes, but I remove modules, and webmin continues to give me options for modules that aren't installed. I forgot what happened one time but I think I recall making a change to a domain, and it asked me if I wanted to sync it with a service the server wasn't even running, and the plugin wasn't even installed.. Which is why I shy away from webmin. webmin to me is like a lazy webmasters tool. For someone who knows the rope, but chooses a nic [01:43] e interface to do the work for you. [01:44] I seem to never have these nightmare experiences that others have? [01:46] darthanubis, you're perfect! [01:46] heh [01:47] :-P [01:47] ah man [01:47] your over... [01:47] foxbuntu, what are you doing out of the ubuntu-mythtv channel? [01:47] get back where you belong [01:48] darthanubis, Im never out of there :P [01:48] ;) [01:53] foxbuntu, darthanubis , mikegriffin , well wish me luck. I think that I will crowned network guru after this coup, and the network guy will be demoted to some paper pusher job. [01:54] fbc-mx, gl... [02:02] foxbuntu, how do I make ubuntu server scan for a new NIC and set it up in the interfaces file? [02:10] fbc-mx: the nic should be present, checked ifconfig -a ? [02:16] mikegriffin, I thoguth maybe a modprobe but, I wouldn't even know where to start trying to identify which driver goes with which card. [02:17] mikegriffin, yeah it is it's just not setup... I never knew that ifconfig-a would show me interface that weren't setup... kewl.. I learn somethign new every day. [02:28] so i added a bad rule to ufw, how can i see a rule list so i can remove it? [02:28] does ufw store that list some place? [02:29] storrgie: sudo ufw status # shoudl show 6you what it is doing. Then use sudo ufw delete whatever to delete the bad rule [02:30] http://pastebin.com/m6d347ffe [02:31] does it store these in a file [02:31] its not in /etc/ufw [02:31] storrgie: /var/lib/ufw/user*rules [02:32] storrgie: what was the command you used to add this errant rule? [02:32] lawl [02:32] umm [02:32] well i want to add a port range [02:33] specifically 56000-57000 [02:33] allow all of them [02:33] i dont remember... it did break it... like a bawsss [02:33] storrgie: you don't have it in your command history? [02:33] i did it 2 days ago [02:33] this box has been neglected [02:33] Unless you type a lot it may well still be in your command history :) [02:34] do you know how to do port range? [02:34] oh i bet it is [02:34] i just dont want to hit up a billion times [02:34] history | grep ufw [02:34] ummm [02:34] i think i was a diff user [02:34] one moment [02:34] anyway while i look [02:34] do you know how to do port ranges [02:35] man ufw suggests port ranges use a colon separator, so sudo ufw allow 56000:57000/tcp # looks reasonable to me [02:35] storrgie: man ufw [02:35] it requires the extended syntax [02:36] $ sudo ufw allow proto tcp from any to any port 56000:57000 [02:36] http://pastebin.com/m435b2233 [02:36] ohh [02:36] ok lemme try that [02:36] (assuming you want tcp, if not, omit 'proto tcp' [02:36] if i do will it do both? [02:37] yes [02:37] so [02:37] i deleted that line in user.rules [02:37] but when i do ufw status i get the same bad port error [02:37] do i need to bounce ufw? [02:37] storrgie: what version of ufw are you using? [02:38] 0.23.2 [02:38] (actually, 'ufw allow 56000:57000/tcp' does work on jaunty) [02:38] well [02:39] storrgie: can you paste your user.rules and user5.rules files? [02:39] lemme show you my user.rules [02:40] err user6.rules [02:40] http://pastebin.com/m563e4f6e [02:40] storrgie: ok, now do: [02:40] ok now im getting status not loaded [02:40] $ sudo ufw disable [02:40] $ sudo ufw enable [02:41] jdstrand: now its fine i think [02:41] just need to add the range rule [02:42] storrgie: when you edit user.rules by hand, you need to flush the rules and reload them by disabling and enabling [02:42] generally, editing user.rules is not recommended, but if you have to, you can [02:42] ahh [02:42] ok lemme show u my new rules [02:43] http://pastebin.com/mc61beaa [02:43] storrgie: that is what you want, no? [02:43] i believe.... [02:43] scared! [02:43] im gonna enable [02:45] storrgie: did it work? [02:45] i believe so... [02:45] storrgie: sudo ufw status [02:45] yea its outputting fine [02:45] ok good [02:45] it doesnt show me the default [02:46] should my default be deny? [02:46] storrgie: that is the default policy, yes [02:46] storrgie: sudo ufw status verbose [02:46] excellent [02:46] thanks bud! [02:46] adding ranges was pissing me off.. [02:47] sure, np [02:47] I'll be sure to add a testcase for :56000:57000 and test on intrepid [02:47] ever use fail2ban? [02:47] im in intrepid :D [02:47] * jdstrand nods [02:47] 8.10 right? [02:48] im on an OVH box, so custom kernel [02:48] yes, 8.10 is intrepid [02:48] and no, I don [02:48] t use fail2ban [02:48] ahh ok [04:14] whoever told me to use mpd... is now my favorite person in the world [04:14] mpd is simply the best thing I've ever seen in my life [04:15] so if that person is here right now. Thanks =P === mcasadevall is now known as NCOmmander === NCOmmander is now known as NCommander === lamont` is now known as lamont [04:23] could anybody help me getting .citadel to come up on my server [04:26] hello people [04:31] i need someone to help me with email server [04:33] you having problems with a email server also [04:44] not problem [04:44] TimReichhart: i want to install and configure email server for my web site [04:44] im trying to do the same thing [04:45] I have been on this thing for almost a week now [04:48] well hopefully someone will come [04:48] Hi folks, I have just installed squid on Ubuntu, following the ubuntu server guide, and I haven't changed any of the config other than the http_port and the visible_hostname, but when I try to browse from my PC using the proxy, I recieve an error "Access Denied - Access control configuration prevents your request from being allowed at this time." even though I am on a 10.x.x.x network and 10.0.0.0/8 is in the ACL allow list by default. [04:48] i host my web site on my own server [04:49] Doble: what are you trying to do>?? [04:50] just set up a really basic proxy [04:50] caching and eventually bandwidth control [04:50] hmmm [04:52] Doble: check this https://help.ubuntu.com/8.04/serverguide/C/squid.html [04:54] Doble: by default, squid does not allow connections from anything but the localhost (i.e. the lo interface). [04:54] Doble: this is to avoid sysadmins accidentally exposing the service to an untrusted network. [04:54] Doble: if you examine the squid config file, you will see (commented out) examples referring to (IIRC) "our_networks". [04:55] grep -v ^\# squid.conf, that will help [04:55] mikegriffin: pah [04:55] egrep -v '^[[:space:]]*($|#)' is the full one. [04:56] BTW, you don't need to escape the octothorpe if it is preceded by a non-blank character. [04:56] uuu people showed finally [04:58] thanks, I am doing what I should have done to begin with and reading Squid's user guide :) I will be back in a few minutes once i've read through the first few pages [04:59] Doble: not if you figure it out [05:00] email server anyone? [05:09] i got php installed , what to do so i can use phpmyadmin on it? [05:11] what do you people think of this? http://www.howtoforge.com/virtual-users-domains-postfix-courier-mysql-squirrelmail-ubuntu8.10 [05:13] using a mysql backend for postfix is usually overkill [05:13] use system accounts when you can [05:15] whats he difference btw using system accounts vs mysql accounts [05:21] using an sql backend requires some sort of intermediary authentication such as sasl but has more flexibility for large scaling [05:22] well i will host probably 5-10 email accounts on my web site [05:22] no more [05:37] twb: thanks, I'm still having some trouble, I've added an ACL, and allowed it, and even tried commenting out the "deny all" ACL at the bottom, but I still get an access denied error [05:41] twb: nevermind, I had a stray space in one of my ACLs - looks like it's working now! [05:47] what MX priority? [05:48] wizardslovak: http://lmgtfy.com/?q=mx+record [05:50] lol nice [05:50] problem is i want to mae MX on domain name and it asks me for mx priority ( default is 10) should i leave it or change it? [05:51] one of those will likely work [05:51] night everybody [05:51] ok so i will leave 10 [05:51] night mike [05:51] damn it [06:04] is ispconfig good to use? [06:04] difference btw webmin and ispconfig [06:14] !webmin [06:14] webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. See !ebox instead. [06:23] !ebox [06:23] ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox [06:24] Is there a small "Powered by Ubuntu Server" badge somewhere for me to stick on Web pages? [06:25] check google images [06:26] I did, but I've not found anything appropriate. [06:26] ok so now i am f$%^&d [06:26] ? [06:27] i was trying to install ispconfig , and now i cant see my website again [06:27] how can i remove it? [06:28] i tried apt-get remove ispconfig but it says "couldnt find package ispconfig" [06:33] did you install it via apt? :) === mattt_ is now known as mattt [06:36] ok i used uninstall.php [06:36] i dont have it nomore [06:36] but still i cannot see my website [06:37] www.wizzy.us [06:37] before i installed it it worked fine [06:37] should i restart server or somethin? [06:38] no idea [06:38] damn [06:38] but if ispconfig is anything like plesk ... good luck :) [06:38] plesk?? [06:38] it's similar to ispconfig i believe [06:38] hmm [06:38] lets you config all your web hosting through an admin panel [06:39] so you dont really know how to help me [06:39] nope [06:39] can i check if apache is running [06:39] sure [06:39] try 'apache2ctl status' [06:40] (provided you're using apache2) [06:40] give me sec trying to reset server [06:40] damn i am always stupid enought to try everything [06:40] and then something is fucked [06:41] language [06:41] sorry [06:41] w3m: Can't load http://localhost:80/server-status. [06:41] :) [06:41] /etc/init.d/apache2 start [06:42] http://pastebin.com/m131d2739 [06:43] ok i see apache config has something wrong [06:43] oh [06:43] sorry [06:43] ?? [06:44] you need to use sudo [06:44] 'sudo /etc/init.d/apache2 start' [06:44] "apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName" [06:47] so what do you think? [06:47] i think my domain name has been changed [06:47] whats the default apache config file? === RoAk is now known as RoAkSoAx [06:48] hmm, check under /etc/apache2/sites-enabled [06:49] nothing [06:49] i opened it with nano [06:51] its folder with 000-default and 000-ispconfig.conf [06:51] ok what if i remove 000-ispconfig [06:51] then apache should read from wizzy.us [06:52] i mean from 000-default [06:53] ?? [06:53] then i would need to point apache to read from 000-default [06:55] sorry, not familiar w/ ispconfig, so i don't know what changes it could have made [06:56] wizardslovak: try moving 000-ispconfig.conf out of the way (ie. to /root or /tmp) and then restart [06:56] ok i removed it [06:56] command /etc/init.d/apache2 restart?? [06:57] pache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName [06:57] apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName [06:57] as i thought [06:57] i need to change apache config file maybe [06:59] can you do this for me [06:59] i am reading apache2.conf [06:59] netstat -na | grep :80 | grep LISTEN [07:00] error grep:80 command not found [07:00] try again [07:00] :) [07:00] "grep:80" [07:01] tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN [07:01] seems to be running then [07:01] dude, try wizzy.us, it's working [07:01] lol [07:01] how come? [07:01] I'm going to bed. [07:02] nite ball [07:02] ball: night [07:02] ok i see [07:02] in apache2.conf [07:02] there is " [07:02] Include the virtual host configurations: [07:02] Include /etc/apache2/sites-enabled/ [07:03] correct [07:03] so that mean by removing 000-ispconfig , apache read other file which is 00-default [07:03] which is right one ;p [07:03] well [07:03] it would have still read 00-default [07:03] but it would have read it AFTER 000-ispconfig [07:04] i removed it [07:04] right, but before you removed it [07:04] i know [07:04] uuu [07:04] i feel better [07:04] whats stored in /tmp [07:05] i se i got used 11mb out of 471 [07:05] typically tmp files [07:05] hey, gotta jet, brb [07:05] * mattt is afk [07:05] sure [07:08] that email how tos are pretty tough [07:23] how to add repository? [07:32] I need to allow a nonroot user access to bind to port 80 -- what options do I have in Ubuntu server 8.04? [07:33] oh_noes, sudo? [07:33] oh_noes: the program that binds to port 80 must be setuid (or via sudo), and then immediately relinquish its privileges after binding. [07:34] hmmm ebox doesnt work with 8.10 [07:34] Or, you could set up mod_proxy or mod_rewrite and connect it to the user's high-port binding. [07:34] I think nginx can do that easily, too. [07:35] I dont want to grant the program sudo/root rights though. 100% on root user, except now with ability to bind to port 80 [07:35] What is this program? [07:35] and it needs to be done at the OS level, without application changes [07:36] just a custom java app. [07:36] Why does it need port 80, specifically? [07:36] because it's a web server? [07:36] oops, -? [07:36] Web servers aren't required to use port 80. [07:37] because the business has a requirement to run it on port 80, I have the IT requirement to ensure its nto running as root [07:37] Then we come back to16:38 Or, you could set up mod_proxy or mod_rewrite and connect it to the user's high-port binding. [07:37] in solaris it's just a matter of priv_netaddr access .. i was hoping something identical existed in debian stack [07:37] You run a simple service on port 80 that just redirects requests to the java app [07:38] oh_noes: proxy it. Or if you have a decent router between server and Internet, do the port mapping in the router instead. [07:38] I'm not aware of anything like that, but that doesn't mean it doesn't exist. [07:38] hrmm, I wonder if apache2 can handle the data piping, similar to mod_jkk [07:38] I'd say DNAT is overkill for this [07:39] DNAT is getting outside the scope of the initial requirements, obviously we want to random custom java on our servers as non-root [07:39] I just didnt think ubuntu would have such a hard time handle it [07:40] since we got here people ill ask [07:40] did anyone installed email server on ubuntu?? [07:41] wizardslovak, i'm sure theres an email server on ubuntu somewhere in the world [07:41] oh_noes, the other option is no one here has bothered to do whatyou need. [07:42] i know i need someone to guid me thru [07:42] hello. samba question, please. even though i've auto home directories configured, they seem to not appear in the list. if i don't set 'browseable = no' the homes share is visible. help? 'smbclient -L SERVA': http://pastebin.com/f2f9e6da5 testparm: http://pastebin.com/f64286115 [07:43] have you followed the guide on the wiki(s)? [07:43] DawnLight: home directories are only visible to the users that own them. Dunno if that helps... [07:45] twb: "The browseable flag for auto home directories will be inherited from the global browseable flag, not the [homes] browseable flag. This is useful as it means setting browseable = no in the [homes] section will hide the [homes] share but make any auto home directories visible." [07:45] so they're supposed to be visible [07:47] Does anyone have any experience installing ehcp? [07:48] * Nafallo doesn't even know what it is [07:48] nxvl: This bit from the changelog needs to go: + - Don't fail to run iptables-save if iptables module isn't loaded. [07:48] nxvl: That's what this patch did: + * Droped 0903-autoload-module-in-iptables-save.diff, fixed upstream [07:48] its a new web host control panel for Ubuntu [07:49] ah [07:49] http://www.howtoforge.com/instaling_ehcp_on_debian_ubuntu#comment-3886 [07:49] Never heard of it. [07:49] its actually pretty nice [07:49] clean layout [07:49] soren: right i forgor to change that in the changelog [07:49] forgot* [07:50] soren: you want me to prepare a new patch? [07:50] Nafallo can you tell me how I could add these to my sources.list http://www.ehcp.net/?q=node/389 [07:50] I went to the url but its just directories? [07:51] when I do install for ehcp it tells me my sources.list file contains very few sources [07:51] ??? [07:51] I dont know what they mean by that [07:51] nxvl: Nah, that seems to be the only problem, so I'll just do it for you. [07:52]