[00:26] <pmatulis> anyone here familiar with the so called cn=config method for configuring openldap?
[00:27] <pmatulis> for some reason a fresh 9.04 install is not allowing anonymous queries
[00:56] <Sam-I-Am> pmatulis: whats the error?
[00:57] <PleXuS> is it save to update to v 9.04 ?
[00:57] <PleXuS> :)
[00:57] <Sam-I-Am> sure
[00:59] <Sam-I-Am> dur, gotta run... check in #openldap if no one responds here
[00:59] <pmatulis> Sam-I-Am: a getent query as non-root yields "cannot find name for group id" and "I have no name".  root query is ok
[01:06] <axisys> why do I keep loosing the name server that I prepended in my /etc/dhcp3/dhcpclient.conf file ?
[01:06] <axisys> it keep disappearing from the /etc/resolv.conf file
[03:00]  * VK7HSE I've just reported the following bug in documentation...  Bug #381802
[03:11] <axisys> am I hitting a bug with that prepended domain name server keep disappearing from /etc/resolv.conf ?
[03:32] <lukehasnoname> Morning
[03:32] <lukehasnoname> er
[03:32] <lukehasnoname> evening, I'm in Texas
[03:52] <TheDJACR> Anyone here use vserver/openvz on jaunty?
[03:55] <rdw200169> axisys, are you still in here?
[04:01] <medicdave> How do I add a spare device to a RAID-5 array using mdadm, and have it persist across reboots? Running stock Ubuntu server 8.04. Running `mdadm /dev/md0 --add /path/to/partition` results in 1 spare shown in subsequent `mdadm --detail /dev/md0` but 0 spares after a reboot. Do I need to re-create the array using the --spare-devices parameter? Reassemble it? TIA
[07:07] <cellofellow> anyone here know dnsmasq very well? I've got a strange issue where all the domains on my lan and some from the internet have a cname to my domain. See this paste. http://paste2.org/p/232464
[07:08] <cellofellow> causes strange issues, like when the dns times out the site gets redirected to my server hosted on terminator.
[08:43] <aljosa> anybody knows how can i tell postfix not to deliver locally?
[10:33] <NorthByNorthWest> Hi! Im having problems with getting LDAP to work with ubuntu server edition, Im administration through webmin... can anyone here please help me? Im trying to get the eGroupWare-server up and running!
[10:35] <NorthByNorthWest> It says "The OpenLDAP server program /etc/ldap/ldap.conf was not found on your system. Perhaps the path on the module configuration page is incorrect?"
[10:36] <NorthByNorthWest> But the file is there and the path is correct!
[10:36] <incorrect> NorthByNorthWest, permissions
[10:36] <NorthByNorthWest> Is it a permissions issue?
[10:36] <NorthByNorthWest> ah ok
[10:37] <NorthByNorthWest> humm... how to fix? setting chmod 777 isnt the best solution is it?
[10:39] <NorthByNorthWest> Or should I change the "User OpenLDAP server runs as"-group?
[10:42] <NorthByNorthWest> Im getting nowhere... help appreciated!
[10:54] <NorthByNorthWest> incorrect: still there?
[10:58] <isaac> NorthByNorthWest: maybe it's easier for you to install ebox
[10:58] <isaac> NorthByNorthWest: it will handle ldap configuration for you
[10:58] <NorthByNorthWest> isaac: hi! whats ebox, exactly?
[10:59] <NorthByNorthWest> isaac: just install with apt-get?
[10:59] <isaac> NorthByNorthWest: well, think webmin but highly integrated
[10:59] <isaac> and easy to use
[10:59] <isaac> NorthByNorthWest: yeah, well, in theory,except the last version available in ubuntu isn't always the best one
[10:59] <NorthByNorthWest> isaac: oh... a better webmin?
[11:00] <isaac> NorthByNorthWest: well, it's a bit different
[11:00] <isaac> http://trac.ebox-platform.com/wiki/Document/FAQ/HowDiffersFromWebmin
[11:00] <isaac> ops, not there
[11:00]  * NorthByNorthWest googles ebox
[11:00] <isaac> http://trac.ebox-platform.com/wiki/Document/FAQ/HowEboxDiffersFromWebmin
[11:02]  * NorthByNorthWest reads the info in the link
[11:03] <isaac> NorthByNorthWest: what are you installing? hardy or jaunty?
[11:03] <NorthByNorthWest> isaac: i have installed jaunty server edition
[11:04] <NorthByNorthWest> isaac: remote administrating through ssl and/or webmin right now...
[11:04] <isaac> right, i think the latest ebox version isn't available for jaunty yet
[11:04] <isaac> as we focus on hardy
[11:04] <NorthByNorthWest> isaac: i guess it must be possible to try out ebox in parallell with webmin and then uninstall the one i then dont want to use anymore?
[11:05] <NorthByNorthWest> isaac: ah ok... can i install additional packages to gt it to work? or would a complete reinstall be necessary?
[11:06] <isaac> i would discourage from installing it in jaunty at the moment
[11:06] <isaac> but i would encourage you to give it a try in a hardy install at some point
[11:06] <isaac> NorthByNorthWest: you can just go to http://ebox-platform.com/ and click the big download link
[11:07] <isaac> that will get you a installer CD image which will install ubuntu server and ebox
[11:07]  * NorthByNorthWest downloading
[11:08] <NorthByNorthWest> isaac: youre a ebox developer?
[11:08] <isaac> yeap
[11:09] <NorthByNorthWest> so i can replace webmin in full with ebox....?
[11:10] <isaac> NorthByNorthWest: well, it depends on what services you require
[11:10] <isaac> although you can just configure some services with ebox and others with webmin
[11:10] <isaac> or manually
[11:10] <NorthByNorthWest> isaac: I want to set up e egroupware server and a NAS
[11:10] <isaac> but the ones that ebox manages needs to be left just to ebox
[11:10] <isaac> NorthByNorthWest: well, ebox supports egroupware
[11:10] <NorthByNorthWest> isaac: ok
[11:11] <isaac> and also serving files through Samba
[11:12] <NorthByNorthWest> you if i can make a bootable usb pen drive with that iso file?
[11:12] <NorthByNorthWest> *do you know if...
[11:13] <isaac> NorthByNorthWest: i think you can
[11:13] <isaac> but i am not 100% sure
[11:13] <isaac> i think someone had done it
[11:14] <NorthByNorthWest> i running low on cd-r's here! :)
[11:14] <NorthByNorthWest> you know any specific stuff that ebox cant but that i can do with webmin?
[11:15] <isaac> i am not really used to webmin
[11:16] <isaac> but webmin usually exposes *all* or most of the features
[11:16] <NorthByNorthWest> can i partition and format drives through ebox?
[11:16] <isaac> of services
[11:16] <isaac> while ebox usually just tries to make things easy and provide what 90% of users would want
[11:16] <isaac> NorthByNorthWest: well, the ebox installer has the regular ubuntu partitioning system
[11:18] <NorthByNorthWest> so i need to do to it through a ordinary terminal?
[11:43] <NorthByNorthWest> isaac: the ebox installer comes with egroupware preinstalled??
[11:43] <isaac> uhm, i think you can choose
[11:44] <NorthByNorthWest> so installing with it will pretty much set up egroupware and all its dependencies as well?
[11:44] <isaac> yes
[11:44] <isaac> and will set up openldap too
[11:45] <NorthByNorthWest> i just found this: http://forum.ebox-platform.com/index.php?topic=1020.0
[11:45] <NorthByNorthWest> havent read it thorough yet
[11:47] <NorthByNorthWest> that does it... im going ebox!
[11:47]  * NorthByNorthWest goes to fetch an USB stick to make an installer
[11:50] <Kamping_Kaiser> when is Ubuntu 8.04.3 likely to be confirmed? https://wiki.ubuntu.com/HardyReleaseSchedule still lists it as TBC
[11:50] <Kamping_Kaiser> and julys not that far away :)
[12:09] <NorthByNorthWest> isaac: ive booted the usb stick with youre installer... no problemo... but do you know the easiest way to find out which /dev/??? to enter to make the installer find the files?
[12:11] <isaac> uhm, not sure
[12:11] <isaac> sdb?
[12:12] <NorthByNorthWest> isaac: another noobish question... how to i make the ls command pause for keypress when it has filled the screen with files?
[12:12] <Kamping_Kaiser> pipe it into less
[12:12] <NorthByNorthWest> how?
[12:13] <isaac> ls | less
[12:13] <isaac> anyway it's weird that it asks you for a device
[12:14] <NorthByNorthWest> yeah i think so too but right now i just want to install!
[12:15] <isaac> well, if you get into problems with the USB it should work perfectly from the CD-ROM
[12:16] <NorthByNorthWest> it looks for the cdrom yeah... argh...
[12:57] <mib_gvdksqjw> i have a questions.	how can i have root access in ubuntu?
[12:59] <Kamping_Kaiser> using sudo
[13:30] <NorthByNorthWest> isaac: you still there?
[13:30] <isaac> NorthByNorthWest: sure
[13:31] <isaac> NorthByNorthWest: i am going to leave now, but magnetic is a ebox developer too
[13:31] <isaac> NorthByNorthWest: anyway if you want ebox specific help you can join #ebox
[13:31] <NorthByNorthWest> isaac: is he here now? i just fininshed installing to a use drive but booting makes linux ask for the ubuntu-hardy-cd-rom!
[13:32]  * NorthByNorthWest joins #ebox
[13:32] <isaac> yes, he is here now
[13:41] <dennister> could anyone pls help me with postfix/dovecot/sasl? problem seems to be in latter area
[13:42] <giovani> dennister: have you checked out the SASL documentation from both the postfix and dovecot projects? it's pretty good
[13:42] <dennister> i've tried, but must admit it's all a bit overwhelming
[13:42] <dennister> just can't seem to authenticate...
[13:43] <giovani> can you tell me what you've tried exactly?
[13:45] <dennister> ...configured postfix according to howto; configured dovecot according to howto as well, and that's testing as working...built the key, crt, csr...(comfort zone for me)
[13:46] <giovani> which howto?
[13:46] <dennister> put cert stuff in correct folders...restarted postfix, dovecot, the sasl demon a hundred times...ubuntu 8.04 official documentations mainly
[13:47] <giovani> ok, certificates are totally separate from SASL
[13:47] <giovani> I asked if you had checked out the documentation from the dovecot and postfix projects
[13:47] <giovani> not from Ubuntu
[13:47] <dennister> but when that got simply on underlying stuff like dovecot and tls-sasl, ended up adding some stuff from community documentation
[13:48] <dennister> i did end up using some of the postfix documentation so i could get a passphrase-leass key, cert, etc.
[13:48] <giovani> what keys are you generating?
[13:48] <giovani> ubuntu comes with self-signed certs ready to use
[13:48] <giovani> for testing, etc
[13:49] <dennister> smtp.key, smtp.crt, same for csr, cakey.pem...
[13:49] <giovani> ubuntu comes with self-signed certs ready to use
[13:49] <dennister> i've taken postfix out of chroot for testing/troubleshooting...
[13:50] <medicdave> Doing kernel RAID-5 on Ubuntu 8.04: ﻿How do I add a spare device to an _existing_ array so that it persists across reboots? Running `mdadm /dev/md0 --add /path/to/partition` results in 1 spare shown in subsequent `mdadm --detail /dev/md0` but 0 spares after a reboot. Do I need to re-create the array using the --spare-devices parameter? Reassemble it? TIA
[13:50] <dennister> so where do i go from here?
[13:50] <dennister> <-------totally stumped
[13:50] <giovani> dennister: I've pointed you towards the official documentation from both projects, I assure you that it works
[13:51] <dennister> even with ubuntu...it's a bit different
[13:51] <giovani> no, it works with ubuntu
[13:51] <giovani> ubuntu has done nothing to the configs that makes documentation not applicable
[13:52] <dennister> k...should i try the dovecot more than the postfix docs? since the problem is in the sasl authentication...
[13:52] <giovani> both sets of documentation are critical, postfix has to be told where and how to use dovecot's sasl, and dovecot has to have sasl running
[13:52] <dennister> May 30 00:24:38 bannville postfix/smtpd[7301]: fatal: no SASL authentication mechanisms
[13:53] <giovani> sounds like you haven't configured dovecot's sasl at all then
[13:53] <dennister> well, i did, but it's not taking...not being recognized as having been done
[13:53] <giovani> then it wasn't done correctly
[13:53] <dennister> exactly
[13:53] <giovani> the documentation is very good, I suggest you read it carefully
[13:54] <dennister> after i get some sleep :)
[13:54] <dennister> if I can ever get to sleep...:(
[13:55] <dennister> and thanks for the old basic...back to the documentation...that really helps
[13:57] <ghost_lines> hi all, how do I install x server on ubuntu 9.04 server?
[13:58] <ghost_lines> I tried apt-get install xserver to no avail
[13:58] <medicdave> you may need to use the package name 'xorg' instead
[13:59] <ghost_lines> thanks I'll try that
[13:59] <medicdave> Look at http://packages.ubuntu.com/
[14:00] <ghost_lines> I was trying X11 forwarding but it didn't work, i then remembered that X11 is not in 9.04 server edition
[14:00] <medicdave> I see... You'll definitely need some kind of x server - the web site above can list what's available for you
[14:01] <ghost_lines> thanks I'm looking into it now
[14:01] <medicdave> `apt-get install <pkgname>` is not very forgiving when you don't specify the package name exactly as it appears in the database
[14:01] <medicdave> and keep in mind that some packages are meta-packages, meaning they actually end up installing a whole bunch of other packages ('xorg' is one of these)
[14:02] <ghost_lines> yeah that's true, I'm installing the xorg meta package right now
[15:36] <Skaag1> I'm trying to forcefully unmount an nfs mount, with umount -f /mnt/nfsdir but it doesn't work, is there a more "brutal" way to do this? :-)
[15:50] <giovani> Skaag1: is there an error
[15:50] <giovani> you can try a lazy unmount (-l)
[15:50] <giovani> as well as forceful
[15:51] <Skaag1> I managed to do it
[15:51] <Skaag1> works now. thanks :-)
[15:52] <giovani> what was the problem and solution -- it's good to keep that in irc for logging purposes
[16:07] <matt> Hi, is it possible to make an external harddrive look like part of the same fs as the internal harddrive that is on my server? I am trying to create users on a partition of the harddrive and use another partition as a media server, but my server wants everything as the same fs.
[16:18] <mpundu> hello
[16:19] <mpundu> is anybody there
[16:20] <mpundu> i need some help with 8.10 server
[16:20] <pmatulis> there are 176 people in this channel
[16:21] <mpundu> i know
[16:31] <codeshepherd> guys what is the advantage of running  ubuntu on servers over debian ?
[16:33] <maxb> They have very different release cycles. This may or may not be an advantage or disadvantage
[16:33] <codeshepherd> ubuntu server gets released often.. and is more uptodate
[16:33] <codeshepherd> i like that
[16:33] <codeshepherd> maxb:
[16:34] <dazman> So difficult to answer.
[16:35] <codeshepherd> i am using squeeze  now.. i want to move to mysql 5.4 asap.... i want to run latest php versions.. is ubuntu a better choice than debian ?
[16:35] <dazman> I guess Commercial Support from Canonical may create an advantage to corporate users.
[16:35] <codeshepherd> no we will not get a commercial support as of now
[16:35] <infinity> Commercial Support, partner certification, and slightly fresher packages are the Ubuntu advantages.
[16:36] <codeshepherd> ok.. that sounds nice infinity  dana_good
[16:36] <codeshepherd> dazman:
[16:36] <dazman> MySQL 5.4 isn't in Ubuntu 9.04 as a package, so you'll be in the same position with Debian in that you'd need a third party package or compile yourself.
[16:36] <infinity> Long release cycles (leading to very stable, but older software) and backed by 1000 Debian Developers who probably all use it as a "server" on at least one machine is the Debian side.
[16:36] <codeshepherd> there is a channel on ubuntu-ec2 .. i dont find similar channels for debian
[16:37] <codeshepherd> from ec2 perspective .. ubuntu sounds better than debian interms of wide usage
[16:38] <infinity> codeshepherd: MySQL 5.4 isn't out yet, and we certainly won't be shipping it until it is.
[16:38] <codeshepherd> ya, i guess you would be the first to ship it .. atleast before debian does
[16:38] <codeshepherd> infinity: ^
[16:39] <infinity> Depends on where it falls in the Debian release cycle but, yes, if they're hard frozen, we're a bit more likely to roll 5.4 packages.
[16:39] <dazman> It depends yea.. it'd be in Debian Unstable very early on.. ,but then, gone are the days people use Debian Unstable on servers.. surely! ;)
[16:40] <infinity> Some more adventurous developers do, but I'd like to think most users don't. :)
[16:41] <codeshepherd> ok
[16:41] <dazman> I *used* too, around the Debian Potato days (when Slink was stable) but, waking up after a dist-upgrade and having to fix perl wasn't the best thing to be doing.
[16:41] <infinity> My rule of thumb as a Debian and Ubuntu developer was always "if the machine is in kicking distance, I'll run a development release on it, if not, it's getting a stable release"...
[16:42] <codeshepherd> you guys are already supporting mysql 5.1 .. debian is still in mysql 5.0
[16:42] <infinity> dazman: Funny you should mention Potato, I just found a machine that had been quietly running Potato SINCE ITS RELEASE, and upgraded it to hardy...
[16:42] <infinity> dazman: "Oops".
[16:43] <maxb> Using unstable on a server is a bit over the top. I happily run testing on a server, though, and have done for years
[16:44] <dazman> infinity, Heh.  Cool.  I really liked Potato - I was on Slink, and Potato was probably the first version I *really* used.. as I was using it as Unstable for ages...
[16:44] <infinity> maxb: I consider that to be reasonably insane on remote machines too, depending on where in the release cycle you are.
[16:45] <infinity> maxb: Once the world starts freezing, and most of what trickles totesting is bugfixes and such, then yeah, I'm all for it.
[16:45] <dazman> Well.. remote Debian Unstable servers, unless they are virtualised and you have decent remote access when * goes wrong.. is pretty impressive ;)
[16:45] <dazman> Out of the box, and excuse the technology ;)
[16:45] <infinity> dazman: VMs don't count as "remote" in this case. :)
[16:46] <dazman> Ubuntu-Server runs out of the box much better than Debian Lenny on a Hyper-V box.  Debian Lenny would drop to arounnd 1MB/sec read rate on the disks after a couple of days.. Ubuntu-server stays solid at 40MB/sec forever..
[16:46] <infinity> In fact, a machine with a solid KVM or ILO type setup really doesn't count as remote either.
[16:46] <dazman> infinity, ;)
[16:46] <infinity> But most cheap co-lo providers don't give me such bells and/or whistles.
[16:46] <dazman> infinity, Haha.. iLO only has to save you once.. and then you really to value it.. awesome stuff.
[16:47] <infinity> dazman: I've got serial to the machines I use at work (in the Canonical DC), but my personal co-lo machine has no such spanky features, since I'm a cheap bastard.
[16:47] <infinity> dazman: So, I admin it conservatively and with much fear on reboots. :)
[16:47] <dazman> infinity, :)  Yea.. iLO can make you lazier.. :)
[16:48] <dazman> infinity: I have it on a server I have in a datacenter, because it's 100miles away.. if it was closer, like 10 miles, I'd just drive, but not 100.. :p
[16:49] <infinity> Yes, well... infinity(Calgary) <-- large continent --><-- giant ocean --> Canonical DC (London)
[16:49] <infinity> I've never bothered with a tape measure, but.  It ain't close.
[16:49] <dazman> Haha.
[16:49] <Skaag1> how do you use ILO stuff in Linux?
[16:49] <dazman> Amazingly, Potato was released August 14th, 2000. :o
[16:50] <dazman> Skaag1, it just gives you a remote console.
[16:50] <infinity> dazman: Hence my shame at still running it...
[16:50] <dazman> Skaag1, so either serial console, of with the advanced features, full access (as if you plug a keyboard, mouse and monitor in)
[16:50] <infinity> dazman: But hey, the machine was still happily doing its thing.
[16:50] <dazman> s/of/or/g
[16:51] <infinity> dazman: The fact that it was a monolithic kernel, with pretty much no useless drivers, and all it did was firewalling is probably the only reason it didn't end up as some sketchy mass-mailer or something. :P
[16:52] <infinity> Serial iLO >> KVM iLO... Seriously.
[16:52] <dazman> infinity, yea.. would be running for decades if you left it.
[16:52] <infinity> People who insist on the latter have never tried using it intercontinentally.
[16:53] <dazman> I did a Windows 2008 install over iLO over Virtual Media (hyper-v host)
[16:53] <dazman> that was, er, fun
[16:54] <infinity> It's pretty telling that Intel hardware is the only hardware out there where anyone ever even considered a GUI LOM... Thanks, Windows.
[16:54] <dazman> The KVM stuff isn't the most efficient.
[16:56] <Skaag1> I have this card you stick in IBM x335 servers which supposedly gives you this functionality
[16:57] <Skaag1> and the fun part is that if you daisy chain them all together, the card controls all of them
[16:57] <infinity> Yup, that was the massive selling feature for the xSeries stuff in datacentres.
[16:57] <Skaag1> IBM used to have this proprietary system where the servers had a built-in kvm
[16:58] <Skaag1> I can understand why it's a massive selling point, I use this, it's awesome
[16:58] <Skaag1> the newer models don't seem to have this
[16:58] <Skaag1> or perhaps I'm missing something
[16:58] <infinity> I assume the new ones use something else?  I dunno.  We run vanishingly few IBM servers.
[16:59] <Skaag1> you use Dell now?
[16:59] <Skaag1> or perhaps HP's
[16:59] <infinity> HP.  Lots of HP.
[17:00] <Skaag1> I heard from someone that for the same specs, an HP DL server gives 130% the perceived power of an IBM server
[17:00] <Skaag1> supposedly something with I/O, or Memory Controllers...
[17:03] <giovani> Skaag1: that's an impossible generalization
[17:03] <infinity> Really depends on the line, and generation.
[17:03] <giovani> Skaag1: most (if not all) server manufs offer out of band management
[17:04] <giovani> the standard for this is called IPMI
[17:04] <infinity> But we weren't ridiculously thrilled with I/O on some of the xSeries stuff we had years ago and, frankly, it's much less hassle to just pick a vendor and stick with them, so HP has our love.
[17:04] <giovani> HP calls theirs iLO
[17:04] <giovani> dell has some other name
[17:05] <dazman> DRAC
[17:05] <dazman> Dell Remote Access Card
[17:05] <giovani> yep, that's it
[17:06] <giovani> I don't use proprietary stuff like that
[17:06] <giovani> I stick to IPMI compliant oob management
[17:06] <matt> is there a way to make an external harddrive act like part of my servers harddrive?
[17:07] <infinity> To be fair, IPMI is "proprietary" too, just happens to be used by a few more people. :)
[17:07] <giovani> matt: I don't know what "part of" means
[17:07] <giovani> infinity: no ... it's not
[17:07] <giovani> it's an open specification, that's the exact opposite of "proprietary"
[17:08] <matt> so it is part of the same filesystem, so I can get the package mt-daapd to retrieve media from it
[17:08] <giovani> matt: there's only one filesystem on your machine ... the drive is already part of your filesystem
[17:08] <dazman> matt: can't you just mount it within the past mt-daapd looks in?
[17:08] <matt> because it only gets things that are from the same filesystem
[17:08] <giovani> you can mount it anywhere you'd like
[17:08] <dazman> s/past/path/g
[17:09] <ghostlines> Hi all, I added my public key to the authorized_keys file but the server still asks me for password
[17:09] <ghostlines> after the first connection I can make new connections without having to enter a password
[17:10] <infinity> dazman: I've not noticed too many people being given input into the spec other than the companies shipping it.
[17:10] <infinity> dazman: Publishing the spec doesn't make it open, any more than publishing the spec for ALOM makes it "open".
[17:10] <ghostlines> I used passwordless public key auth on earlier versions of ubuntu but I'm having no luck with 9.04
[17:10] <dazman> infinity, ^^ giovani
[17:10] <dazman> Heh
[17:11] <giovani> infinity: you clearly don't understand the meaning of the word "proprietary"
[17:11] <giovani> I didn't say that it was a community-built specification
[17:11] <giovani> I said that it's not proprietary
[17:11] <giovani> which means that a single company doesn't own/control/and keep it a secret
[17:11] <giovani> nearly ALL technical specifications work this way
[17:11] <infinity> ...
[17:11] <giovani> there's a governing body
[17:11] <Skaag1> I go with Giovani
[17:11] <infinity> So not getting into an argument about the word "proprietary". :P
[17:12] <Skaag1> if you open your spec, and others can implement it 100%, I no longer consider it proprietary
[17:12] <giovani> infinity: good, because you clearly don't grasp its meaning -- and therefore shouldn't be discussing it
[17:12] <infinity> But as it tends to be used in the Free Software world (looks around him), IPMI is under proprietary control, despite being published.
[17:12] <infinity> Much like published source for an application, but with a restrictuve license.
[17:12] <dazman> ghostlines: Is public key auth on in sshd_config? Have you tried ssh -v when you login for more verbose output?
[17:12] <giovani> this is not an open source discussion
[17:13] <matt> I need to basically make an external harddrive look like part of my servers filesystem, because the package mt-daapd will only retrieve media that is on the servers main harddrive, but that harddrive is very small.
[17:13] <giovani> the protocol is open to be implemented by anyone who wants to -- that's the opposite of proprietary
[17:13] <giovani> period
[17:13] <giovani> HP's, Dell's etc solutions are proprietary
[17:13] <giovani> some support SOME IPMI interoperability
[17:14] <giovani> but their solutions are not built for IPMI
[17:14] <giovani> matt: as we've told you ... linux works this way already, any drive/device you mount becomes a part of the filesystem -- use the mount command to tell your computer WHERE in the filesystem you'd like it to be
[17:15] <giovani> i.e. "sudo mount /dev/sdb /where/my/music/files/go"
[17:15] <Alex_21> Give it a try
[17:15] <Alex_21> I'll do the same
[17:15] <matt> I've tried this already.
[17:15] <giovani> it works
[17:15] <giovani> I assure you
[17:16] <giovani> if you have a SPECIFIC problem in executing that command properly, tell us about it
[17:16] <matt> it does let me view the files, but mt-daapd for some reason does not detect them
[17:16] <giovani> then complain to mt-daapd people
[17:16] <giovani> that doesn't sound like a drive/ubuntu problem
[17:17] <matt> okay
[17:17] <dazman> maybe if you're mounting it, it's permission based.  Does the user mt-daapd is running as have access to the files on that USB drive when mounted?
[17:17] <matt> thanks
[17:18] <dazman> ls -l /path/to/where/usb/mounted and see what permissions the files/folders have.
[17:18] <Alex_21> I'm looking it up
[17:19] <Alex_21> I found a Dapper guide
[17:19] <giovani> a guide to what, exactly?
[17:19] <dazman> Heh.  wrong channel going on, surely.
[17:23] <Alex_21> No, the Firefly issue Matt is having
[17:23] <Alex_21> Lol
[17:24] <dazman> Oh, Haha. :)
[17:24]  * dazman predicts permissions
[17:25] <Alex_21> Where did you mount it Matt?
[17:25] <Alex_21> I'm going to run a test on the permitions
[17:30] <Alex_21> How do you run a permitions test?
[17:30] <Alex_21> ? Please
[17:51] <giovani> Alex_21: there's no "permissions test" -- you simply look at the permissions and evaluate what kind of access that provides your user
[17:51] <giovani> ls -l /path/to/directory will print the permissions for the contents of that directory
[17:56] <Alex_21> Thanks for your help
[17:56] <Alex_21> Good day
[18:08] <thierry_> hi, I'm setting up my first ubuntu server : I got a dyndns domain name pointing on my ip adress, setup my router to port forward ssh and http and setup my server with a static ip on my local network
[18:08] <thierry_> only now I can't access my server even from my local network
[18:08] <thierry_> but I can ping it
[18:09] <thierry_> ssh and http simply time out
[18:10] <giovani> thierry_: on the server "sudo netstat -anp | grep 22"
[18:11] <thierry_> i get something like tcp        0      0 192.168.122.1:53        0.0.0.0:*               LISTEN      5487/dnsmasq
[18:11] <thierry_> tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      5076/sshd
[18:11] <thierry_> tcp6       0      0 :::22                   :::*                    LISTEN      5076/sshd
[18:11] <thierry_> udp        0      0 192.168.122.1:137       0.0.0.0:*                           5561/nmbd
[18:11] <thierry_> udp        0      0 192.168.122.1:138       0.0.0.0:*                           5561/nmbd
[18:11] <thierry_> udp        0      0 192.168.122.1:53        0.0.0.0:*                           5487/dnsmasq
[18:11] <thierry_> so sshd is running
[18:12] <giovani> ok, and on the server, "ssh localhost"
[18:12] <thierry_> giovani : yes I did and it works
[18:12] <thierry_> the problem is when I'm on another computer trying to ssh my server
[18:12] <giovani> then either you have a firewall set up on this machine, or this is a network problem
[18:12] <thierry_> k, you mean a firewall on my server?
[18:12] <giovani> yes
[18:13] <giovani> this machine, the server
[18:13] <thierry_> how can I know if it's the case?<
[18:13] <giovani> I doubt that's the case unless you specifically set one up
[18:13] <giovani> "sudo iptables -L" please don't paste the result into the channel -- use a pastebin
[18:13] <thierry_> k
[18:16] <giovani> well?
[18:16] <thierry_> http://pastebin.com/m34cecc64
[18:16] <giovani> haha
[18:16] <giovani> well you most certainly have a firewall in place
[18:17] <giovani> why did you fail to tell me this?
[18:17] <thierry_> well I half setup this server about 6 months ago and I really didn't know what I was doing back then :P
[18:17] <thierry_> so, how do I get rid of it?
[18:19] <giovani> "sudo iptables -F"
[18:19] <giovani> that won't be persistent across a reboot -- I don't know where you put the script that's writing in the firewall rules, only you know that
[18:26] <thierry__> giovani : sorry connections problem
[18:27] <thierry__> so I did the iptables -F
[18:27] <thierry__> then should be ok?
 that won't be persistent across a reboot -- I don't know where you put the script that's writing in the firewall rules, only you know that
[18:28] <thierry__> k, but iptables -f kills all connectiion I have, I can't even ping anything from my server anymore
[18:30] <thierry__> giovani : stupid me , I had firestarter installed, I guess removing it should do the job
[18:30] <giovani> sigh
[18:31] <giovani> I definitely can't help you if you don't provide info about your environment
[18:31] <giovani> anyway, I've got a cookout to go to, later
[18:31] <thierry__> giovani : thanks a lot for the help
[18:35] <medicdave> ﻿Doing kernel RAID-5 on Ubuntu 8.04: ﻿How do I add a spare device to an _existing_ array so that it persists across reboots? Running `mdadm /dev/md0 --add /path/to/partition` results in 1 spare shown in subsequent `mdadm --detail /dev/md0` but 0 spares after a reboot. Do I need to re-create the array using the --spare-devices parameter? Reassemble it? TIA
[18:56] <infinity> medicdave: I suspect that spares aren't actually recorded in the superblock, so you likely need them to end up in the config file.  At least, that's a guess.
[18:57] <infinity> medicdave: And when mdadm.conf changes, you want "update-initramfs -u" to make sure a copy lands in the initramfs too.
[19:10] <medicdave> Thanks infinity - I tried adding the spare to mdadm.conf, but it still doesn't persist across reboots - however I haven't tried the update-initramfs -u yet... let me learn a bit about that
[19:10]  * medicdave checks man page
[19:12] <medicdave> ok, time to reboot the machine - will be gone for a minute (it's my gateway, too)
[20:03] <matthew21> Hi, how can I check the permissions of a directory?
[20:03] <MianoSM> ls -hal?
[20:03] <MianoSM> or for the current working directory ls -hal ..
[20:04] <jmarsden> MianoSM: ls -ld
[20:04] <MianoSM> or that
[20:05] <matthew21> ah
[20:07] <PhotoJim> I just use ls -l ... it's the fastest way.  but all valid ways.
[20:08] <PhotoJim> oh, for directories, yes, -ld is better
[20:38] <ghostlines> Hi all, I'm having trouble with ssh public key authentication in jaunty, I copied my public key to .ssh/authorized_keys but I'm still asked for a password
[20:39] <ghostlines> but after this initial connection, I don't have to provide a password to connect
[20:39] <niekie> Is your SSH key protected by a password?
[20:40] <ghostlines> nopes
[20:40] <ghostlines> no passphrase at all
[20:40] <niekie> Is your SSH key vulnerable?
[20:40] <niekie> (if so Ubuntu might reject it)
[20:40] <ghostlines> i have 644 permissions on it
[20:40] <ghostlines> you mean the one on the remote machine right?
[20:40] <niekie> I mean..
[20:40] <niekie> There was an exploit a while ago..
[20:40] <niekie> For SSH keys generated on Debian based systems.
[20:41] <niekie> Run ssh-vulnkey and paste your public key in.
[20:41] <niekie> ssh-vulnkey -
[20:41] <ghostlines> ok i'll try that
[20:41] <niekie> Then paste and hit ^D
[20:41] <niekie> Else, I don't know, check /var/log/auth.log
[20:42] <niekie> Anyway, I gotta go now.
[20:42] <ghostlines> ahh k thanks
[21:38] <dennister> genii-yadda: just the person I need!
[21:39] <Symbian> can ubuntu server link load balancing ?
[21:39] <dennister> i'm having a problem with sasl authentication in this postfix-dovecot-sasl project, which is part of my first email list server & mailman endeavour
[21:40] <genii-yadda> dennister: I can't assist today with that. But I'll likely be around tomorrow aft
[21:40] <dennister> ok, thnks
[21:41] <dennister> i've got other things to do if no one can help me today :-)
[22:13] <dennister> could anyone else pls help with this postfix/dovecot/sasl authentication issue I'm having?
[22:21] <Gargoyle> dennister, possibly
[22:23] <Gargoyle> dennister: Depends if I can find my old setup doc!
[22:26] <Gargoyle> Found it, are you still allive dennister ?
[23:20] <mlalkaka> i'm trying to set up Postfix. sending mail from the server (using mutt) to an external email address works. however, receiving mail does not. i've set up Postfix as an Internet site. i don't know how to troubleshoot this issue. does anyone have any suggestions?
[23:21] <Gargoyle> mlalkaka: Have you configured the recipiant domains and DNS MX records for the server?
[23:22] <mlalkaka> i configured the MX record already. in my case, it is the same as the domain name. (e.g. @foo.dnsalias.com -> foo.dnsalias.com). but what is the recipient domain?
[23:23] <Gargoyle> mlalkaka: "mydestination" in your main config file.
[23:24] <mlalkaka> oh. yes, i believe i set that up already, when i ran `sudo dpkg-reconfigure postfix`. i set foo.dnsalias.com as the recipient domain
[23:24] <Gargoyle> That should be all you need. What's the domain name?
[23:25] <mlalkaka> vc.dnsalias.com
[23:26] <mlalkaka> Gargoyle: i'm looking at /etc/postfix/main.cf . i see the line "mydestination = vc.dnsalias.com, localhost". is that correct?
[23:26] <Gargoyle> mlalkaka: yup. Identical to mine (apart from the domain name!)
[23:27] <Gargoyle> You don't have MX records
[23:27] <mlalkaka> Gargoyle: i don't? how can i check?
[23:28] <mlalkaka> Gargoyle: (the domain name is provided by DynDNS.com, so i set it up through their web interface)
[23:28] <Gargoyle> mlalkaka: "ig vc.dnsalias.com MX"
[23:28] <Gargoyle> Oops! "dig vc.dnsalias.com MX"
[23:33] <mlalkaka> Gargoyle: hmm. that's weird. i don't know why it's not showing up. i just set it up again through the web interface. either way, won't most mta's try vc.dnsalias.com if there are no MX records? i've only heard of MS Exchange not doing this
[23:35] <Gargoyle> mlalkaka: Maybe one day long ago they would, but most spam filters will probably just bin a email for a domain without a MX record!
[23:36] <Gargoyle> mlalkaka: I'll try for mine, I don't have MX records ether (But I don't actually want/need inbound msgs)
[23:36] <jmarsden> mlalkaka: If you "just" added the MX records, you probably need to wait for the DNS zone refresh TTL to happen before the change is visible to the public Internet.
[23:36] <cellofellow> I'm having really weird problems with dnsmasq and /etc/resolv.conf that I'm afraid I can't explain very well. Apparently, all LAN addresses are getting set to be CNAMEs for my domain. See the paste. http://paste2.org/p/233533
[23:39] <cellofellow> This isn't so bad, but if the domain turns up bad it still points to my domain. http://paste2.org/p/233534
[23:39] <cellofellow> That gets annoying.
[23:40] <jmarsden> cellofellow: Are you using some weird DNS provider that redirects you to their pages if you look for an unknown domain?  OpenDNS or similar??
[23:41] <cellofellow> no, they don't, but currently my own dns redirects me to my own server for an unknown domain.
[23:42] <jmarsden> Ah, so you accidentally *became* one of those weird DNS providers :)  I don't know dnsmasq enough to help troubleshoot that, I'm afraid.
[23:43] <cellofellow> ok, so what if it had nothing to do with dnsmasq? http://paste2.org/p/233535 is my /etc/resolv.conf. As you can see it has my domain in the "domain" and "search" options. If I comment these out, it works correctly.
[23:45] <cellofellow> Why would resolv.conf behave that way?