[00:36] New bug: #379574 in mysql-dfsg-5.0 (main) "package mysql-server-5.0 5.1.30really5.0.75-0ubuntu10 [modified: /var/lib/dpkg/info/mysql-server-5.0.list] failed to install/upgrade: subprocess pre-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/379574 [02:35] Is there a command to tell the server to search for the closest mirror and use it? [02:39] fbc-mx: Not really; the Debian packages which do that have not yet been fully/correctly ported to Ubuntu, as far as I know. [02:44] jmarsden, thanks.. well, I guess it's not mission critical.. just a luxury feature really. [02:50] fbc-mx: Yes. netselect is one of the Debian packages, if you want to keep an eye on it... maybe one of these days I'll get inspired to have a look at porting it :) [02:53] jmarsden, yes, I've used it before on my debian servers. I've just upgrade from etch to lenny and it was very instumental in helping me find a fast mirror. [02:54] IME all the good ISPs have their own mirrors anyway :P [03:09] twb: Verizon FIOS is pretty good, but I doubt they have a Ubuntu mirror... might be fun to ask them though :) [03:13] Why wouldn't they? [03:14] All they know about and support is Windows. [03:14] Then they are not a good ISP, obviously. [03:15] I don't need them to know about Ubuntu, just reliable fast connectivity at a price I can afford... [03:16] I bet you don't even expect an ISP to provide a usenet node! [03:17] No, I just expect a connection to the Internet, which is what the I stands for :) If I want email I find an email provider, if I want Usenet I find a provider of that... (or of course I provide those services myself, if I so choose)... [03:17] Then they would be an Internet Connection Provider :P [03:18] Sure, works for me. Especially if it lowers the price compared to what an ISP would charge for the same connection :) [03:19] I admit it is convenient when your connectivity provider provides DNS servers you can use to resolve names with, but even that is not 100% necessary. [03:20] And doesn't, for example, use a transparent caching proxy for HTTP. [03:20] And not having to pretend to be using Windows when you call their tech support people. [03:21] And actually having the connection be up more often than down, and not massively oversubscribed... [03:22] Sure, I'll pay a 20% markup for such stuff. [03:32] how do I make sure only radius auth works and not allow local passwd auth .. here is my /etc/pam.d/sshd http://pastebin.com/f17b84ac7 [03:43] jmarsden, BTW do you know if PPPOECONF creates another interface? If so, would it be like a new on eth1 or would it create a virtual one like eth0:1? [03:44] fbc-mx: I don't know... I'd guess it creates a ppp0 interface?? [03:45] jmarsden, great! thanks.. [04:00] when i open the command line thru putty i see "You have new mail. [04:00] " how can i check this? [04:06] mail [04:06] or [04:06] nano /var/mail/yourloginname [04:36] I have the sound card of my ubuntu server connected to my stereo amp. Is there an PHP app that I could load that would allow my wife to search/queue up songs? [04:37] Like a PHP jukebox program or something? [04:38] ampache, I think, would fit what you're after [04:44] p_quarles, awesome thanks.. I look at but could not find where it had a LOCALPLAY option. I figured it was streaming only, but now after careful examination, I see that it does have a local play option.. thanks again. [04:44] axisys: generally, you should not have your own auth/session/whatever entries AND include the common-foo files. Do one or the other. [04:47] p_quarles, my ebox/ubuntu jaunty server rocks! I've never been able to do so much home automation, ever. I think pretty soon, I'm gonna start looking for a program to turn it into an answering machine for my phone line. Now if only I could find a way to connect my USB-B2K Skype adapter and run a remote skype service and control it from my pc. [04:48] Why Skype and not a free implementation (like Asterisk) of an open protocol (SIP)? [04:48] p_quarles, but I don't think there is anyway to run skype as a daemon. You might need a full gnome GUI setup for that. [04:49] fbc-mx: you could use Xorg's vfb backend, so that skype thinks there's a display, but there isn't. [04:50] twb, Because skype is what people really know.. I guess I could use asterisk, but that would mean I'd have to pay for a number somewhere. The skype would be a free pc2pc call. [04:50] twb, vfb?? cool.. I gotta look into that... let me google it. I love ubuntu!! [04:51] you could also just use ssh X11 forwarding, no? [04:53] p_quarles, that would be over my head. I'd have to find a guide or howto for that.. I'm good with the server services stuff, like bind,apache,samba, but X11 fluency has always eluded me. [04:56] p_quarles, from the reading about that I've just been doing , I don't need to tunnel it through ssh because it will be strictly a local lan based usage. So encryption is not really necessary. [04:56] BRB [04:56] p_quarles: assuming you were running X somewhere else, sure. [04:56] p_quarles: I thought he wanted a headless system [05:02] twb: you don't need an X server for X forwarding, though; just the libs [05:02] twb: well, not a server on the remote machine, anyway; just on the machine with the actual display [05:07] p_quarles: you need an X server *somewhere* [05:07] Not that it matters; he's gone [05:07] twb: ah, re-reading, I see what you mean; I missed the part about the answering machine [05:08] I thought he wanted to run skype remotely as an attachable client, a la irssi [05:25] is there a web management tool for squid proxy? [05:30] wth..ufw cant block ip.. [05:31] sudo ufw deny from 60.51.117.96 [05:31] but i could logon the server after reload the rules [05:31] could still* [05:32] what's wrong [05:47] hey [05:47] ? [05:47] anyone know how to host different mysql databases for different users on a server [05:47] question time haha [05:48] http://www.howtoforge.com/virtual-hosting-with-pureftpd-mysql-on-ubuntu-8.10 [05:48] but mines on a dedicate dhaah [05:48] oops thats wrong sry [05:53] twb: thanks a lot.. that was it [05:55] Mal3ko: i think u probably need to pick a protocol [05:56] Mal3ko: no i am wrong [05:56] hmm [05:57] To Action From [05:57] Anywhere DENY 60.51.117.96 [06:00] Mal3ko: same here .. did not work for me .. even with proto tcp [06:01] ahh..i think ive found the answer [06:02] Mal3ko: reload ? [06:02] https://help.ubuntu.com/community/Uncomplicated_Firewall_ufw [06:02] read from the line 'So if you started with default deny and added in port 80 for a public server :' [06:03] You need to edit /etc/ufw/before.rules and add a section "Block IP" after "Drop INVALID packets" : [06:05] Mal3ko: ah ha.. unless u specify the port number [06:06] Mal3ko: nawp.. i am wrong again.. [06:07] what does this mean.. [06:07] "If you simply add the deny rule the allow would have been above it and been applied instead of the deny " [06:08] i see you have to update the ufw* tables with are placed before INPUT table [06:09] so bottom like need to comply with iptables orders .. make sense to me [06:10] s/like/line/ [06:11] iptable orders? [06:13] Mal3ko: i meant iptables -L .. still learning [06:13] where is iptable rules stored in? [06:15] See manpages for iptables-save and iptables-restore [06:29] iptables-save rocks [06:29] Even just for READING rules -- it beats -vnL by far. [06:31] howso [06:32] Mal3ko: the output density, and the syntax matches what you actually type, rather than being an isomorphic dialect. [06:33] The main thing you lose is packet counts per rule. [06:33] Oh, and you don't need to remember to check eack table type separately. [06:33] (e.g. -t mangle) [06:46] hi all [06:46] currently i am running a WAMP server. i want to switch to a LAMP server [06:46] with windows i use a package called Bitnami WAMPstack [06:46] essentially, it's a one-click WAMP server installer/configurator [06:47] if i installed ubuntu server would it be ready to go right out of the box or would there be a good amount of configuring involved? [06:48] It depends what you want to do with the server. You can easily get the stack included at initial installation time, and it runs "out of the box". [06:49] Bear in mind there will be no "one click", since Ubuntu server comes with no GUI -- it is command line driven. [06:49] jmarsden, i'm going to be running wordpress and eyeOS. eyeOS only requires php iirc [06:49] jmarsden, right but i can install a windowmanager right? [06:49] i need to copy some part of pdf file which is passworded, anybody know how? [06:50] SineDeviance: Sounds very doable to me. You can add a GUI, but then you don't really have Ubuntu Server any more... [06:50] as i remember i need to convert to some 'ps' [06:50] jmarsden, yeah but if i was running blackbox it would still be leaner than, say, ubuntu-desktop [06:50] i'm mainly doing it for the security anyways [06:51] i'm not too trusting in windowsxp's security ability [06:52] It's your call. GUI questions are not generally handled in #ubuntu-server. You've been running a *server* on Win XP? Yes, Ubuntu Server will generally speaking be more secure, assuming equivalent care and attention from the system admin. [06:53] Ubuntu Server is not just without "a window manager", BTW. It is without an X server at all... [06:53] jmarsden, right. i'm running a server on winxp pro sp2. everything was fine at first but my router is crap so now i have to run my server in the DMZ. which basically means no firewall [06:53] you can surely see my predicament ;) [06:55] Not a good thing to do. By all means try Ubuntu server. It works well. But if you add X and a GUI to it... well, you're in a sort of half way house between Server and Desktop, so you'd better know what you are doing... [06:55] okay [06:56] hmm, maybe for now i'll stick with windows and run a software firewall like comodo. i'm really not familiar with ubuntu-server so i dont want to go rushing into this blind [06:57] You could run your LAMP stack on Ubuntu Desktop, too. The Server Guide is at https://help.ubuntu.com/9.04/serverguide/C/ if you want to start learning about Ubuntu Server. [06:58] jmarsden, that's a thought but it's quite an old system. it has 512 meg of ram and a 1500mhz athlonxp. ubuntu desktop has serious performance issues on this thing... winxp is actually much faster (i know, crazy innit?) [06:59] The RAM may be your limiting factor there... adding another 512MB for say $30 would probably help significantly. Or consider Xubuntu for a lower footprint Ubuntu with a GUI. [07:00] jmarsden, well see this is pc133 ram. it's almost impossible to fine [07:00] find* [07:00] but yeah [07:00] i guess i could try xubuntu [07:01] OK. BTW, I see several PC133 RAm modules on newegg... see http://www.newegg.com/Product/ProductList.aspx?Submit=ENE&N=2010170147%201052107967%201052407863&name=PC%20133 [07:01] jmarsden, holy crap [07:01] That's just one of many online stores... one I use myself... [07:02] hmm i looked on newegg last year and they didnt have crap, i thought pc ram was dead [07:02] It is, pretty much, but you can still find it. [07:02] yeah maybe i'll upgrade this system a bit [07:12] jmarsden, thanks [07:12] No problem. [07:24] I'm trying to find out what the default groups are for the first user created during installation on Hardy Server (I used usermod without -a - d'oh!) : I found this link but I'm not sure if this applies to Server also: http://ccollins.wordpress.com/2007/07/02/restore-default-ubuntu-groups/ [07:43] mysql wont start without root or on boot , how can i fix this? [07:46] mysql wont start without root or on boot , how can i fix this? [14:26] hey === asac_ is now known as asac [14:45] New bug: #369351 in mysql-dfsg-5.0 (main) "package mysql-server-5.0 5.1.30 hangs during installation" [Undecided,New] https://launchpad.net/bugs/369351 [14:57] anyone know how to limit bandwidth of a user in ubuntu server [15:01] That is non-trivial, I think. [15:02] Though if you work out how, I'd be interested to read an article on the implementation. [15:03] yeah it seems very handy [15:04] Actually what I really want is monthly network quotas on a per-host basis (identified by MAC). [15:05] So that I can essentially sub-let my monthly download cap to flatmates; currently there's no easy way to tell WHICH asshole left bittorrent running overnight and blew away the cap. [15:06] One of the guys at work tells me it can be done, I just haven't bothered yet. [15:08] twb: sure it can be done -- most bandwidth tracking apps use IPs though [15:09] Easier to spoof IPs than MACs, though. [15:09] Oh, and I want to do this on a 16MHz MIPS system :-) [15:09] that's false [15:10] twb: IP spoofing is only somewhat doable in real life if you control both IPs. [15:10] I doubt he's even talking about "spoofing" [15:10] Well, I use the term `spoofing' loosely [15:10] he's talking about changing it [15:10] Ah. [15:10] Yeah. That's easy enough. [15:10] twb: if you can't trust them enough to rely on these metrics, then you're in far more trouble [15:11] Changing MAC isn't hard either. [15:11] You'd manually set your own IP to be the IP of someone else's laptop, when the other laptop isn't connected. [15:11] twb: it sounds like your problem is not bandwidth tracking, but trust [15:11] there's no bandwidth-tracking system that can ensure they aren't doing all sorts of weird things to get around it [15:12] so, there has to be some level of established trust [15:12] Yeah, that's what I've already found :-( [15:12] right ... so no need to look for a piece of software [15:12] that's not what's needed [15:12] The implied goal was to make it more hassle than it was worth to circumvent it [15:12] unless you can lock up the switch, and employ 802.1x [15:12] that's your only bet for end-to-end security [15:15] Actually I suppose it won't be a problem when I switch to ADSL2, since even the throttled speed is fast enough for my needs, which are basically ssh and imaps. [15:48] anyone familiar with ispconfig 3 [17:02] I just installed my first Ubuntu 9.04 server edition. What is suppose to replace dselect? [17:03] mdlueck: uhm ... apt? [17:03] I guess I expected as much. Then I will pull down dselect with apt in that case. [17:03] Thanks! [17:04] mdlueck: what are you attempting to do exactly? [17:04] Use what I am used to... been using dselect since the release before Debian Sarge... forget its name. [17:05] apt "replaced" dselect years ago [17:05] Is there anything wrong with adding dselect back to server 9.04? [17:06] apt is completely command line, I can not browse through the packages. [17:06] I'm unclear on why you think it's "gone" from ubuntu 9.04 [17:06] it's right there in the repository [17:06] Gone meaning not installed by default [17:06] heh [17:07] it's an application almost nobody uses [17:07] I don't want its 2MB bloating my install [17:07] if you do -- install it [17:07] "except me" [17:07] so then you can install it ... [17:07] that's why it's there [17:07] default installs are not supposed to provide the packages only some people want [17:07] I was asking because I thought there might be a new wiz-bang UI to package management [17:08] there is ... it's called apt & co. [17:08] co = dselect? [17:08] & co = aptitude, etc [17:09] aptitude I thought was the "GUI dselect" that the GUI versions of Ubuntu have, correct? [17:09] no [17:09] aptitude is terminal-based [17:09] Oh, I did not know that. [17:09] ncurses based to be exact [17:09] you're probably thinking of synaptic [17:09] which is a gnome/gtk GUI [17:09] So there is something besides working with apt-get from the command line [17:10] yes [17:10] That's the anem1 [17:10] "name!" [17:10] OK, I will check out what aptitude looks like then... [17:11] http://algebraicthunk.net/~dburrows/projects/aptitude/aptitude-screenshot.png [17:11] it looks like that [17:11] or this: http://en.wikipedia.org/wiki/File:Aptitude.png [17:11] aptitude is far from new though ... so I'm a little surprised that you're a hardcore dselect user and don't know of it [17:12] Looks like what I was after... THNKA [17:12] THANKS! [17:13] For servers we still have Debian Sarge in production... migrating to 9.04 this weekend [17:14] have fund with that [17:15] big move [17:20] Aptitude... "What the...?!?!" [17:20] mdlueck: ? [17:21] Says 2 packages are security updates, like 10 should be updated, when I press "g" then it seems to want to install 1928 packages! [17:22] Things like apache which I do not want on this server... [17:22] you probably selected some meta pkg [17:23] "Will take some getting used to I guess". I have exited and gotten back in, same thing. Must have saved the meta pkg. Anyway to track down what I asked for? [17:23] Afternoon all [17:30] Handy - Action \ Forget... slick! [17:43] Can I get older PHP releases from anywhere? [18:06] Anyone here using djbdns? Trying to install on 9.04, relies on daemontools, and that is fussing as it can not find /etc/inittab === RoAk is now known as RoAkSoAx [18:08] Ooops, seems to be already a known issue --> [Bug 179251] [18:08] Launchpad bug 179251 in daemontools-installer "daemontools package fails to handle nonexistent /etc/inittab" [Low,Confirmed] https://launchpad.net/bugs/179251 [18:11] mdlueck, if you mark one of the extra packages with "deinstall" after you hit "g", it should also deinstall dependencies, which would be the meta package, that may help you find it [18:12] meh, had pagedup a bit, didn't see you got a solution :P [18:13] ssm, thanks for the suggestion! [18:13] mdlueck, just touch inittab, so "make setup check" can add to it. Then you'd need to add something for upstart [18:13] ls that an ubuntu daemontools package you're installing? [18:13] ssm, Great idea. I will try it, then reinstall those packages [18:14] I like djbdns, but it's kind of picky when it comes to the environment it's running in. [18:16] mdlueck: I see the "daemontools-run" package needs an inittab change, the "daemontools" package does not [18:17] ssm, seems to have worked, no more grumbling [18:18] Thanks! [18:22] mdlueck, you need http://pastebin.com/m777e9230 and a "mkdir /etc/service" [18:23] save the url as /etc/event.d/daemontools, and then you can do "start daemontools" === mcasadevall is now known as NCommander [18:25] All right, thanks for the addl pointers. [20:04] hey guys. i am trying my 1st kvm vmbuilder vm, and I have it booted, but sth is flukey with networking. I can ping my dom1 from dom0, but I cannot ping anything but localhost from dom1. [20:05] doth dom1 and dom0 have the same default gateway. I confogured this with bridging, so I have a br0 interface on dom0 [20:07] ok, reading the fin manual , i see icmp doesnt work through bridge [20:08] ok, more specific question, I cannot reach the outside lan from within vm. 1st activity I attempted was an adptitude update, and it cannto reach canonical. hence the ping attempts [20:10] New bug: #368491 in open-iscsi (main) "Cannot mount partition on iSCSI LUN" [Undecided,New] https://launchpad.net/bugs/368491 [20:45] How do I do this to pulseaudio from the command line? "enable network access to local sound device" [20:54] # join [20:54] hi... [20:55] dddddddddddddddddasda [20:56] halllo [20:56] anybody online?? [20:57] ask what you need to know [21:11] has anyone installed mpd mpc pulseaudio on ubuntu server and got them to play nice? I can get any sound. Could someone point me in the right direction? === pace_t_zulu is now known as pace_t_zulu|nash === pace_t_zulu|nash is now known as pace_t_zulu [22:10] hiya, what is the name of the webmin like thing that ubuntu puts out? i wanna try it out today [22:11] mikegriffin: ebox [22:11] thanks ScottK [22:11] played with it? [22:11] Not. My favorite server gui is vim. [22:11] vim is a gui now? [22:11] GUI enough for me on a server. [22:11] agreed, but it is nice to let others manage email adds and such [22:12] Sure. [22:13] Webmin works like a charm for me still, and having junior admins only accessing through usermin is great. ;) [22:13] heh [22:15] *min kinda sucks as it tries to do too much, apache configuration through it is terrible [22:15] same with mysql really [22:16] all of these interfaces suck [22:18] giovani, agreed [22:24] anyone know how to test alsa sound from the command line? Line just make it go beep or something so that I know it's working and configured properly? [22:25] mpg123? [22:27] fbc_: any audio player will work [22:30] giovani, ok, I loaded mpg123 and played an mp3. It said it was playing but couldn't hear a thing? How would I trouble shoot a problem with alsa audio? [22:33] alsamixer? [22:34] this is so not a server question.. try #ubuntu? [22:39] apache config through webmin is great, as long as you compile from source [22:46] MianoSM: how do you add a RedirectPermanent without manually typing that in? :) [22:46] are you asking simply to ask, or do you really want to know how to do it through webmin? [22:46] basically, anything you want to do in apache is going to be just modifying to conf manually through webmin in my experience [22:47] right [22:47] However with webmin, you can have a quick and easy way to access and administer your servers through a web browser in a pinch. It's a nice backup to have in my opinion, and has always worked with a very small foot print. [22:53] you can't see its hands though ;) [23:12] MianoSM: a backup to what exactly? [23:13] A ubuntu server started to play tricks after an upgrade. Outgoing connections (like telnet) pick the address of eth1:1 instead of eth1 so i get kicked out of IP-filtered services. [23:13] backup to needing :22 [23:13] the web server hosting webmin is going to be LESS reliable, and never available when SSH is not [23:13] Why does it happen and how can I prevent it/tweak it [23:13] Like when I'm at school? [23:13] pisi_: just check your default route [23:14] Or when I'm in a government building that states I can't plug in my usb drive to open putty on one of the windows machines? [23:14] hah [23:14] use your own computer [23:14] giovani: 0.0.0.0 X.X.X.X 0.0.0.0 UG 100 0 0 eth1 [23:15] .... [23:15] using your own computer is not always an option, thus the "backup" [23:15] just as it should be. I've had interface-swapping kind of problems before (which are annoying) but never so that IP addresses get mixed. [23:16] giovani: it runs its own 'webserver', a perl script [23:18] giovani: a reboot for example fixed it for now, but I can't explain why it acted like it did for one reboot [23:21] mikegriffin: how is that a statement of reliability? [23:21] MianoSM: there are ways to deal with all of the limitations you discussed [23:22] Sure, to each their own for sure - that is the essence of the movement I think ;) [23:22] a) putty doesn't need to be saved/installed onto the machine you want to run it on -- firefox/ie can run it directly out of the temp folder [23:22] MianoSM: sure ... and to educate those who misunderstand things :) [23:22] You can not bring flash devices into a secure area [23:23] MianoSM: I wasn't recommending that you do so [23:23] if you read my statement [23:23] that's execution of a remote app in their eyes however [23:23] then you should not be accessing your server from said computer [23:23] I'm sure it's a violation of their policies based on this information [23:24] It is not. [23:24] I bet it is [23:24] Ok. [23:24] anyhow -- there are java/whatever ssh apps [23:25] that can be loaded in a web browser [23:25] So many different ways to do the same thing. :) [23:25] that's not the same thing as using webmin [23:25] ebox wasn't for me - I simply offered a different solution. [23:25] An argument to argue is not my inclination at the moment though. :(