[00:47] does anyone know WHY stunnel is off by default? [00:49] mathiaz: there will be a meeting at UDS to pin down the final list of packages that go EOL in June. [00:51] * Added /etc/default/stunnel with a variable ENABLE. [00:51] ENABLE=0 by default since stunnel segv on some computer when all lines [00:51] are commented (Closes: #197663, #197615) [00:51] kees: any security reason why I stunnel might not run by default? [00:51] s/I// [00:55] pwnguin: errrm, dunno, I haven't used it much. [00:56] well, i guess i'll file a bug and see who calls me an idiot [00:56] heh [00:57] its handy for encrypting stuff like synergy [00:57] * kees nods [00:57] otherwise you're just broadcasting root passwords over the network; probably not a great idea [00:58] I always just used SSH for synergy [00:58] ? [00:59] i guess it's not quite the same [00:59] ssh -L something:localhost:synergy-port synergy-host [00:59] then connected synergy to port something [00:59] well, stunnel seemed easier for windows [01:00] anyways, bug filling time, then i leave work === stickystyle1 is now known as stickystyle [01:32] can u tell me if xen server works in ubuntu server 9.04 [01:41] NativeAngels, you will likely want to look here: https://help.ubuntu.com/community/Xen [01:41] ok [01:44] but will it work on 9.04 foxbuntu [01:44] NativeAngels, afaik [01:45] ? [01:45] NativeAngels, as far as I know [01:48] i get a perl error when i run xm create [01:48] NativeAngels, poastebin the error [01:48] pastebin* [01:50] http://paste.ubuntu.com/166418/ [01:51] NativeAngels, thought you said perl error? [01:51] sorry [01:52] python [01:52] how do i fix it [01:52] NativeAngels, sudo apt-update && sudo apt-cache policy python | pastebininit [01:52] then give me that url [01:54] sorry typo in that [01:54] NativeAngels, sudo apt-update && sudo apt-cache policy python | pastebinit [01:55] ugh [01:56] Im on a roll tonight [01:56] NativeAngels, sudo apt-get update && sudo apt-cache policy python | pastebinit [01:56] http://paste.ubuntu.com/166421/ [01:56] NativeAngels, yea, as I suspected [01:57] whats wrong [01:57] python version [01:57] you have 2.6 (which is default is 9.04) but xm is referencing 2.5 [01:57] how do i fix [01:57] you likely have a bug to report on xen, but in the mean time you can probably do this: [01:59] sudo apt-get install python2.5 [02:01] do i re run the xm create now ? [02:01] yeah...go ahead and try it [02:04] this is what i got foxbuntu [02:05] http://paste.ubuntu.com/166426/ [02:06] NativeAngels, did you sudo xm? [02:06] no [02:06] try it with sudo [02:07] i got exactly the same result [02:07] ok [02:08] sudo apt-get install python-xen-3.3 [02:09] it says already newest version [02:10] ok [02:10] sudo apt-get install --reinstall python-xen-3.3 [02:11] ok done foxbuntu [02:11] retry it now [02:12] same error as b4 [02:12] hrm [02:12] alright [02:14] what do i do now [02:14] NativeAngels, uname -r [02:15] 2.6.28-11-server [02:16] ah [02:17] your booted into the wrong kernel [02:17] hey guys, does the server use sysvinit or upstart? [02:18] NativeAngels, go through all o these steps exactly to ensure you are using the proper things: https://help.ubuntu.com/community/Xen#Install%20from%20packages%20(recommended) [02:18] hey, has anyone managed to get mod_xsendfile for apache working on jaunty? - anyone have a repository or package for it? [02:18] someone said to user 8.04lts [02:18] NativeAngels, what? [02:19] of ubuntu as it works on there [02:19] xen i mean [02:20] NativeAngels, I would go through the documentation step by step again to make sure you set it up exactly as it is documented to work [02:20] NativeAngels, xen has its own kernel, it doesnt run on top of the normal server kernel [02:24] anyone know how to setup openssh to use arcfour? [02:27] What is arcfour? [02:27] twb: http://www.psc.edu/networking/projects/hpn-ssh/theory.php [02:27] im not exactly sure [02:27] Oh, RC4. [02:28] ? [02:28] you know this? [02:28] -o Cipher=foo, where foo is whatever OpenSSH calls RC4. [02:28] That assumes OpenSSH ships with RC4 support built in. [02:28] You can also set that in your ~/.ssh/config (per user) or /etc/ssh/ssh_config (per host). [02:28] twb: not exactly sure what you mean by that [02:29] ahh can I? [02:29] sshd config? [02:29] its no server side? [02:29] No, it's a client-side option. [02:29] this is client config? [02:29] ahhhh [02:29] The ssh server makes a number of ciphers available, and the client picks the one it prefers. [02:29] whats the line in the client config [02:29] So in theory I suppose you could instruct the server to ONLY provide RC4. [02:29] so im running ubuntu 8.10 with openssh, arcfour available? [02:29] I don't know. [02:30] how would I try it? [02:30] This works: ssh -c arcfour fs pwd [02:30] fs pwd? [02:30] New bug: #373513 in mysql-dfsg-5.0 (main) "mysql fails to install" [Undecided,New] https://launchpad.net/bugs/373513 [02:30] fs is my file server's hostname. pwd is a command to run on it. [02:31] Another example would be "ssh -c arcfour mail.google.com -t mutt" [02:32] twb: PM [02:33] ssh -c arcfour -p 11011 -X -L 3306:127.0.0.1:3306 user@host [02:33] ? [02:34] it seems to work [02:34] i can connect, however Im not sure how to check [02:34] I would like to specify this in the ssh_config [02:35] ciphers [02:37] is there a good program to do visual scp? [02:37] storrgie: GUIs aren't supported here [02:37] pwaaahaha [02:38] i just didnt know if there was something that would have some ridiculous options on scp that I dont know of [02:38] im copying massive data over ssh [02:38] like [02:38] man scp ... it's amazing [02:38] i would like to do 25-50 GiB a day [02:38] don't use scp [02:38] what do you suggest? [02:39] I'm trying to create a boot script and getting: warning: /etc/init.d/./ejabberd missing LSB information [02:39] this is the boot script: http://dpaste.com/41995/ [02:39] any ideas? [02:39] storrgie: depends on the situation, explain more about it [02:40] giovani: its a box in another country, 100m connection... A group of individuals generating lots of data, would like to pull down a subset of that data for daily examination [02:40] ive been just sshing in to look around [02:40] but I would like to mirror some myself [02:40] storrgie: the data is entirely new every day? [02:40] typically, otherwise I would use git [02:40] i like git :D [02:41] storrgie, sounds like a good se case for rsync [02:41] is that encry? [02:41] uh, version control is not appropriate for this [02:41] rsync is a file transfer mechanism [02:41] if it was incrememntal changes... then yes [02:41] encrypt it if you like [02:42] how much of the data changes from day to day? [02:42] with ssh? [02:42] 1%? 10%? 100%? [02:42] no, with ssl [02:42] um [02:42] probably need about 10G a day to be really happy [02:42] why would you use a shell for basic encryption? [02:42] on heavy days [02:42] you're not answering the question [02:42] how much of the data changes from day to day? [02:42] im giving you a file size [02:42] it changes daily [02:42] i would need a subset [02:43] probably around 10 GiB [02:43] ok ... once again [02:43] not file size [02:43] 100% [02:43] ok [02:43] so use sftp or something [02:43] concerns about security... is that ok to use? everyone I hear says stay away from ftp [02:44] sftp uses ssh [02:44] ftp is just a protocol [02:44] ah, but then why not just use ssh transfer [02:44] it can be encrypted just like any other [02:44] it's better at some things [02:44] scp is better at other things [02:44] it depends on your needs [02:45] anyway, if you'd like to use scp -- go ahead [02:45] im not sure how rsync is a bad idea, have a cron script run each day to sync up the new and remove the old from the local machine, same thing we do for mirrors at Mythbuntu [02:45] think sftp would be faster for the massive amount of data we are using [02:46] foxbuntu: nobody said it was a bad idea -- but if there's a 100% change rate ... you're not gaining anything by using it [02:46] Both SFTP and (typically) rsync use SSH as the encryption layer. [02:46] giovani, no, not really but he was asking for a simple way to sync data each day [02:46] foxbuntu: sure ... why is rsync more simple than scp or sftp? [02:46] foxbuntu: it will be fine to manually select data [02:46] If the majority of data is unchanged, rsync will DEFINITELY be more wire-efficient than a pure SFTP/SCP copy. [02:47] are there any advantages to sftp over scp [02:47] twb: yes, we know, but we've already established that 100% of the data changes ... so, let's move past this [02:47] rsync will ALWAYS require more CPU and I/O time on both ends than a raw SFTP/SCP, but usually this extra cost is negligible. [02:47] storrgie: yes, a number [02:47] giovani: OK, sorry, I hadn't read back that far. [02:47] because im currently scp'ing and with sftp i will need to install something new, have another service, have more ports open etc. [02:48] storrgie: no ... no ports open, sftp uses ssh [02:48] If your data changes completely every day, I would advocate using scp -r with compression turned on. [02:48] ahh im listening [02:49] Both scp and sftp are enabled by default when you install openssh-server on Ubuntu, though the latter, at least, can be turned off. [02:49] ahh [02:49] Note that SFTP doesn't really have anything to do with FTP or FTP/SSL. [02:50] apparently sorry, one of the others is using sftp [02:50] just using the places>connect to server in ubuntu desktop [02:51] same transfer rate [02:51] I think the major issue is my ATT DSL to the box [02:51] something is really slowing it down [02:51] Try enabling -o BatchMode=yes in your scp/sftp invocation. [02:51] Another guy is on comcast gets 1.2m from the box at all times, we ATT people are getting 120K [02:52] storrgie: change provider, then. [02:52] well can I run something to jump through the hops and tell me where the issue is? [02:52] storrgie: you want to isolate the network latency? [02:52] storrgie: try mtr-tiny. [02:53] mtr-tiny ? [02:53] Yes. [02:53] storrgie, are you att people all on the same connectionnNNN? [02:53] foxbuntu: NNNN? [02:53] ugh there goes the keybord misfire again [02:53] Heh. [02:53] crazy arse keyboard I have... [02:54] no we are on different locations around USA [02:54] mtr-tiny not installed [02:54] isnt mtr installed by default [02:54] storrgie, what is your DSL down stream vs his cable down stream? [02:55] 600k vs whatever comcast is [02:55] with their speedboost and all that [02:55] well that explains it : [02:55] :) [02:56] your DSL is slow, not the server [02:56] Is 512kbps down normal for a US DSL line? [02:56] I think the slowest down stream comcast offers now s 5M [02:56] I'd have expected at least 1.5Mbps. [02:56] twb, in some places, yes [02:57] foxbuntu: ah, fair enough. [02:57] what about FISH? [02:57] FISH? [02:57] In some places, .au is still using satellite and 56kbps modems :-) [02:57] fish://@address:port [02:57] oh for the xfer [02:58] foxbuntu: I think he's talking about gvfs protocols [02:58] * foxbuntu got lost on the topic segway [02:59] im not familiar with fish? [02:59] should i drop that idea also? [03:02] rut oh [03:02] almost out of battery power [03:02] brb [03:06] i recently changed my servers name from emerald2 to emerald, but when i login it still says root@emerald2:~# [03:07] where do i need to make this change? [03:09] captainkirk: sudo hostname emerald [03:10] ok... seems to have worked.... thanks [03:15] p_quarles: that only changes it until you reboot. [03:15] captainkirk: in general, NEVER EVER EVER change a host's name after deployment. [03:15] hmmm is that the problem here.... [03:15] captainkirk: this is especially the case if you deal with LDAP. [03:15] twb: no ldap here (yet) [03:16] captainkirk: for a base install with no services, you need to update /etc/hosts and /etc/hostname, and run "hostname ". [03:16] But you will probaly find a large number of other places where the name is written in /etc or /var. [03:17] A way to avoid this issue is to always give a machine a unique name (e.g. "fred"), and then assign it roles (e.g. "mail" and "www") via DNS CNAME entries. [03:17] Then if you want to e.g. move the web server from fred to anne, you don't change fred's or anne's name, just the CNAME. [03:18] twb: server is still in testing, so i will go ahead and make the changes to the hosts files... i understand your additional comments re DNS etc... good advice [03:18] I suggest you grep -r emerald2 /etc /var [03:18] grep -rl, maybe [03:22] twb: this identified the ssh key only [03:26] hey guys, does anyone know if ubuntu server use sysvinit or upstart? [03:27] durt: upstart [03:27] second question then, anybody successfully replace upstart with sysvinit? [03:27] That is not supported. [03:29] ok, third question, anybody get bootlogging (userspace) to work with upstart? [03:30] Har har. [03:30] Assuming you're talking about bootchart-style "tell me what is making boot so damn slow" logging [03:31] no, I need a mechanism to log messages on boot that do not get logged to dmesg [03:32] You mean lines like "Starting web server... apache" ? [03:32] any message that happens before syslogd etc. starts up. [03:34] Basically there is no mechanism for that. [03:34] You could probably build one, with a little effort. [03:35] Actually, console=/tmp/foo.log might work for some of it... [03:35] with a little effort I could implement the two work-arounds but I'm being lazy :) [03:36] console logging is one of them [03:36] would that go in the boot: prompt? [03:36] Yes. [03:37] Well that sounds easy, I'll try it thanks. [03:39] I don't actually think it'll work, though :-) [03:50] has anyone installed alfresoc onto ubuntu server? [03:50] *alfresco [03:57] Never heard of it. [04:03] New bug: #373522 in samba (main) "samba failed in some way" [Undecided,Incomplete] https://launchpad.net/bugs/373522 [04:13] I wonder if 372737 is also 373522 [04:14] what is the command to enter to bring up the original installation options in ubuntu server.. [04:15] Is anyone aware of available vouchers I could use for LPI certification exams taken through Pearson VUE? [04:20] captainkirk: what installation options? [04:20] twb: like, to install LAMP, or LDAP or postfix [04:20] Regarding tasksel selections, I don't know. [04:20] dpkg --get-selections will list all installed packages. [04:21] debconf-get-selections (from debconf-utils) will list all answers to questions asked via debconf. [04:21] Note that these will include automatically installed packages / answered questions. [04:21] twb: tasksel is the one i was looking for [04:21] Hey folks, how can I see the hit/miss ratios when using webalizer to look at squid's access.log ? [04:24] twb: ... do you have a life outside of linux ...? :P [04:36] No. [04:37] People do? [04:50] Is there a script that allows me to change hostname permanently? /foo/changehostname.sh newname ? And it'll update nessacary files and activate it? [04:50] Saves me re-inventing the wheel [05:04] how do I create a network installable install package of ubuntu desktop, using a currently installed desktop as an example, and serve it via ubuntu 8.04 for network install? [05:22] Ok, so I'm running Ubuntu server on a webserver, and I recently gave a friend an account. I added both of us to a group called webmasters, and then changed the group of all the files in the /var/www directory to webmasters. I also changed all the permissons to 755 (I know, don't need executable, per se). He still can't write the files. Any ideas? [05:24] LinuxMercedes: what's the output of: ls -lh /var | grep www [05:25] drwxrwxr-x 9 nathan webmasters 4.0K 2009-05-07 22:28 www [05:25] drwxrwxr-x 9 nathan webmasters 4.0K 2009-05-07 22:28 www [05:25] drwxrwxr-x 9 nathan webmasters 4.0K 2009-05-07 22:28 www [05:25] drwxrwxr-x 9 nathan webmasters 4.0K 2009-05-07 22:28 www [05:25] oops [05:26] p_quarles: -d is your friend. [05:26] only one of those [05:26] p_quarles: ls -hld /var/www/ [05:26] I get nothing for that [05:26] twb: yes, I knew there was a better way it wasn't occuring to me [05:27] LinuxMercedes: what does "id" print? [05:27] uid=1000(nathan) gid=1000(nathan) groups=4(adm),20(dialout),24(cdrom),25(floppy),29(audio),30(dip),44(video),46(plugdev),104(scanner),109(lpadmin),110(admin),115(sambashare),1000(nathan),1002(webmasters) [05:28] Hm. [05:28] LinuxMercedes: and you say that "ls -hld /var/www/" prints nothing? [05:28] Uhh..no. Let me run that [05:29] It says [05:29] drwxrwxr-x 9 nathan webmasters 4.0K 2009-05-07 22:28 /var/www/ [05:29] I would try logging in as the other user and running touch /var/www/test -- then give us the error message if any [05:29] * LinuxMercedes is not new to linux, but is new to multiple users [05:30] p_quarles, ok [05:31] no errors... [05:32] ok...it's working for me now. [05:32] LinuxMercedes: the file is there, I take it? if so, nothing's wrong [05:32] yep [05:33] ok, it works on my side [05:33] Apparently there's something screwy going on on his side [05:33] so, what's different about the way the other person was attempting to write to this directory? [05:33] or maybe there's pebkac [05:33] I'm not sure [05:33] that's my first guess :) [05:34] yeah [05:34] Well, I'll give him the benefit of the doubt because he said he was really tired =] [05:34] Thanks for helping the newb out here =] === RoAk is now known as RoAkSoAx [06:11] whats up people [06:12] wizardslovak, the sky? [06:12] dark here lol [06:13] does that mean the sky is no longer up? [06:13] lol forgot not everybody here is from place like me hihi [06:13] yep , 1am [06:15] so how are you [06:16] tired [06:16] things are not getting accomplished :( [06:17] lol personal or linux oriented [06:18] I wonder if there's any distinction there for him, actually [06:18] hehee [06:18] foxbuntu: Or her, if you are of the female persuasion [06:20] damn tomorrow i gotta format my laptop [06:20] genii, not a chick sorry [06:20] i decided to use kubuntu only [06:20] lol horny genii [06:20] genii, also, there is not a distinction... [06:21] i just logged into server [06:21] and i see restart required [06:21] wizardslovak, sounds like you grabbed a kernel update [06:21] wizardslovak: I'm a eunuch [06:22] heh [06:22] hehe [06:22] genii, Im a programmer by my own definition [06:23] genii, http://wiki.foxmediasystems.com [06:23] uuuuuuuuu [06:23] * genii makes more coffee [06:24] genii: 2 sugars and little bit milk thx [06:24] wizardslovak: After I make it, it's "help yourself" [06:24] Ew, milk or sugar in coffee is Wrong [06:24] genii, i prefer red bull thx [06:25] twb: I agree. I don't like polluting my coffee [06:25] hmmm [06:25] * genii digs up a Red Bull for foxbuntu [06:25] then double expresso shot ;p;p [06:26] how to check if everything works in server? [06:26] wizardslovak, use it? [06:26] * foxbuntu is a smart ass [06:27] yea i updated from 8.10 to 9.04 [06:27] just want to check if everything works [06:27] usually the easiest way is to just check all your services [06:27] as in... [06:27] try it [06:27] well webserver works [06:27] if you run a web server, try hitting the page [06:27] ect [06:27] ect [06:27] ect [06:28] ok ok ok [06:28] heh [06:28] what about see what programs are running [06:28] ps ax [06:28] foxbuntu , u're sysadmin? [06:28] wizardslovak, yup [06:28] can i ask you a question? [06:29] is it on topic fo the channel? [06:29] well kinda [06:29] how do you become sysadmin? [06:30] wizardslovak, thats not on topic...if you want to chat, join #foxmediasystems [06:35] wizardslovak: you become a sysadmin by getting REALLY drunk, and waking up chained to a rack [06:35] lol [06:35] twb, don't give away all of our secrets [06:35] weird is i never got drunk in server room [06:36] And since it's your first position, the rack probably won't even contain rackmount gear [06:36] lol [06:37] hmmm [06:37] whitebox towers with razor-sharp edges that DEMAND BLOOD [06:37] lol [06:37] take glowes [06:38] twb: Good description.... [06:38] wizardslovak: I doubt they'd let you bring a bottle into most of the data centers I've seen. [06:38] * tonyyarusso just installed his first rackmount gear in his bedroom - is giddy [06:38] tonyyarusso: Hehehe [06:39] lol i used to do power lines for couple server rooms [06:39] just amazing to be in there [06:40]