[00:01] billybigrigger, oohh oohhh I like pita... [00:01] billybigrigger, and pumpernickel too. [00:01] lol what the hell is pumpernickel? [00:02] billybigrigger, type of German bread traditionally made with coarsely ground rye [00:02] * fbc-mx rolls his eye.. [00:03] hmm [00:03] sounds good [00:04] i like rye bread [00:04] if they are at all similar :P [00:07] question. is there a way to make it so that when the message is rejected by either amavisd-new , spamassassin, or clamAV the error was returned to the sender ?? [00:18] can someone help me with a hp mediasmart ex475? i havent been able to get this thing to work since december 2008 [00:18] i want to get ubuntu server on it [00:19] is anyone here? === asac_ is now known as asac [02:29] how can I SU ROOT? or whatever the equivalent is in ubuntu [02:29] if you really really need to, sudo -i [02:30] ajmitch, ahh.... [02:30] * fbc-mx marvels [02:30] Actually sudo -i is equivalent to su - [02:31] If you want su without the -, you need sudo -H -s. But usually you want sudo -i / su -, and just don't know it. [02:32] twb, yeah sudo -i was what I was looking for... There are some directories that EBOX sets up as shares, and you can't get to them unless your root. [02:35] twb doing sudo cd was kinda dumb.. might as well become root. [02:36] how do I prevent the gdm from loading when the computer boots up? [02:37] cd is not a command. [02:37] It's a sh builtin. [02:37] Ideally, you should not have gdm installed in the first place, on a server. [02:38] But you can use update-rc.d (or rcconf, for a GUI) to disable it [02:38] twb, I had to, due to the it was requirement for the adoption of the linux platform as a server. [02:39] Oh, I fucking hate that. [02:39] twb, I have other administrators here that couldn't use a command line to save their life. [02:39] I have to put it on servers, too, because "customers expect to log into the server directly; it's what they are used to on Windows" [02:39] twb, exactly [02:40] fbc-mx: IMO servers should be headless; if you want a GUI then use remote X or VNC [02:40] twb, that's been my biggest issue.. I'm used to just using a command line. [02:41] twb, I agree it should be headless... However my skills are not sufficiently honed that I could setup a server with remote x or vnc. [02:41] twb, I'm actually quite happy with the command line. [02:41] twb, maybe I'll find a remote x HOWTO one day. [02:42] gotta run guys [03:06] hi. after update to 9.04, phpmyadmin give me this error : Connection for controluser as defined in your configuration failed. [04:06] please humor me, i think this question is better asked here than in teh desktop room, even though it is abt desktop. [04:07] i always considered dnsmasq to be a server soln, and I am trying to figure out the rationale for it being included in the jaunty desktop? [04:08] what is it being used for, not a dhcp server, and you done need a local dns cache for every desktop, wouldnt you want one per lan? [04:13] slestak_: as a DNS cacher [04:19] in the past i have kept a dnsmasq instance running to provide local name resolution for a small home lan. I dont think this complicates or changes anything now that 4 of the machines on teh lan are all running dnscache (for a different reason). [04:20] is it stupid to consider using the wap for dhcp, but dnsmasq on only local dns? bind seems overkill for my needs. [04:23] i see the ubu community docs for dnsmasq, but it really deals with dhcp services, nothing relly abt my need for local dns [04:24] maybe bind is the better tool for me. [04:34] anyone have a good howto on dovecot-postfix? [04:34] pdnsd looks interesting [04:35] i think the forum has some decent ones === bk is now known as bk|away [04:40] does someone have a good knowledge on php/apache with suexec/fastcgi ? i have some questions [04:40] some questions on the security it brings [04:42] is there anybody ? [04:46] !ask | megra [04:46] megra: Please don't ask to ask a question, simply ask the question (all on ONE line, so others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) [04:46] fine [04:48] most of the documentations are saying "execute your php-code with CGI because executeing it as an apache module make executed by www-data" [04:48] however, executing php from apache allow to create a php.ini the user won't be able to change [04:48] with CGI, the user ca change it's php.ini ... [04:49] it can be done that way: "export PHPRC=/directory/" [04:50] is there a way to prevent user from having its own customized php.ini ? [04:54] i really don't won't users to be able to modify the max_execution_time or memory_limit [05:03] * billybigrigger just realised this old pentium 166mhz should have stayed in my dad's basement [05:03] 98mb ram is not the greatest for running web/mysql/mail :P [05:05] does ebox require gnome or something? [05:05] i thought it was a web based admin tool? [05:07] why does it install libgtk2.0 and libxfont, xfonts...basically a bunch of x crap, a web based admin tool should run on this headless server a see that it's headless and not install a bunch of junk [05:13] what do you think of mounting its /tmp on a tmpfs ? [05:13] billybigrigger: IIRC it requires gconf which recommends a bunch of stuff. If you install without recommends, it should be OK. [05:14] too late :P i started my rant after i looked at what it installed :P [05:14] hmm [05:17] http://imagebin.ca/view/FLue_5r6.html [05:17] i get that on a fresh ebox install [05:18] why does my server have an invalid certificate? afaik i didn't create any certs, so is that something fubar'd on the ebox install? [05:29] How do I enable automatic security updates for Ubuntu? [05:48] MTecknology, for the server ? no idea [05:49] MTecknology, but there has to be a package for that ;) [05:50] MTecknology, found it ! [05:50] MTecknology, cron-at [05:50] MTecknology, cron-apt [05:50] thanks [05:50] :) [05:50] MTecknology, it could have been done easily .. cronjob + apt-get [06:33] MTecknology: sudo apt-get unattended-upgrades # see https://help.ubuntu.com/9.04/serverguide/C/automatic-updates.html === mcasadevall is now known as NCommander [06:35] jmarsden: thanks [06:35] No problem :) === gaveen_ is now known as gaveen [07:33] anybody here familiar with lftp? i'm having issues with it trying to set the wrong timestamp when uploading files & i'm not sure why [07:36] MTecknology: apt-get install cron-apt [07:37] MTecknology: edit /etc/apt/apt.conf (creating it if necessary) as described in /etc/cron.daily/apt's comments. [07:37] You may also want to install unattended-upgrades [07:37] twb: yup, I got that - thanks :) [07:38] But obviously u-u does nothing if you don't configure apt.conf [07:38] hrm - missed that :P [07:42] twb: and now I'm lost [07:43] /etc/apt/apt.conf is empty and /etc/cron.daily/apt isn't making things simple [07:46] man 5 apt.conf? [07:49] twb: thanks :) [07:50] New bug: #383839 in mysql-dfsg-5.0 (main) "package mysql-server-5.0 5.1.30really5.0.75-0ubuntu10 failed to install/upgrade: subprocess new pre-removal script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/383839 [08:23] twb: For future reference, it would have been way easier to tell him to read /usr/share/doc/unattended-upgrades/README - seems easier to follow. (And doesn't put anything in /etc/apt/apt.conf, but rather properly follows the Debian config model of /etc/apt/apt.conf.d/ files.) [08:43] I'm having problems logging into a server (SSH) , I get to enter username , then it takes a really long time before password prompt shows up , and when im entering the password it timesout [08:49] Appiah: Do you have an out-of-band way of accessing said server? [08:50] Appiah: Sounds like some form of resource overload to me. Either CPU or memory mostl likely. [08:50] either that or some dns issue [08:50] Easy way to test that theory. Do you know the IP address? [08:51] I'm trying both from here (vpn) and from a server is which is in the same network [08:51] yupp [08:51] Using the IP address from something on the same subnet won't go anywhere near DNS stuff. [08:51] i thought it might have to do with the reverse [08:53] I mean, there *could* be some other form of a network issue, but my money's on a runaway process. [08:53] hmm [08:53] Does it take a long time to get to the username prompt as well? [08:53] nope [08:53] Okay, now that is slightly odd. [08:54] I don't suppose you have any machines set up to do SSH key auth on this server? [08:54] nah [08:55] I'm gonna get some to check the console [08:55] someone* [08:55] Also, is the server still fulfilling its normal functions okay? [08:55] well it's not in production so :D [08:55] ah, cool [08:55] Yeah, console access will be needed. [08:56] What's it running? [08:56] (services-wise) [08:56] hmm [08:57] (We're in blatant curiosity territory now, so don't think too hard.) [08:58] SSH and Webmin should be on [08:58] cant reach the webmin though >_> [08:58] feels like a reboot should be all [08:59] * tonyyarusso guesses a script going OOM, sits back to wait for someone to prove him right [08:59] Or, you know, otherwise. [08:59] oom? [09:00] out of memory [09:11] haha [09:12] same thing happend at console, asked him to just reboot [09:12] Now we'll never know :( [09:12] no way to find out really >_> [09:12] if it happends again I have to find out what's happening [09:38] tonyyarusso: even after reboot it does the same >_> [09:38] maybe the pam is screwed up [09:40] or nsswitch === cjwatson_ is now known as cjwatson [10:00] anyway to reset all pam changes? === Guest11315 is now known as clint1 [12:13] nvm it was the nsswitch === yann2_ is now known as Yann2 [12:51] when i put ulimit -m 800; in /etc/profile will programmes started by init (init.d scripts) adhere to this? [12:51] Hi, all, [12:52] I have two disks that were previously set up as RAID1 with lvm. How can I reinstall Ubuntu onto these disks and reclaim them? [12:52] I tried to delete the md0 device but it failed [12:53] Please help [12:59] Alex_21: try to install from ubuntu alternate disk [12:59] Why? [12:59] I used the Server CD [13:00] Or should I say I am using the Ubuntu Server CD at the moment [13:00] I'm stuck on the partitioning screen [13:02] Also, ... when making partitions for RAID 1, ... Do I have to set the bootable flag to "ON" [13:02] ? Please [13:29] Hi everyone ! [13:31] Hi, [13:31] I can't delete RAID 1 device MD0 from the SErver installer. How can this be done [13:33] <_ruben> Alex_21: you dont care about any data on it ? [13:34] <_ruben> and is the raid using partitions or complete disks? [13:35] There is a partition that is the full size of the disk [13:35] In question [13:36] <_ruben> hit enter on the disk itself, it'll ask if you want to create a new disklabel .. that might wipe out the raid traces .. if that doesnt help .. then you might need to wipe out the first few K of the disk using dd [13:37] DD? [13:37] I am a bit of a Noob at this [13:38] I am a bit of a Noob at thisRC [13:38] I need guidance [13:42] Alex_21: This may help, use at your own risk. http://www.linuxquestions.org/questions/linux-newbie-8/learn-the-dd-command-362506/ [13:49] I see this, ... but I don't see how to use it to wipe out sections of the disk to remove the traces of RAID 1 [13:49] Please help [14:24] I have a nfs server, but I can share all directories except /media/ [14:24] I can see the folders in /media/ but I can go into any of them [14:25] this looks like a permission issue but i chmod 777'ed the whole directory [14:25] <_ruben> can a local user enter those dirs? [14:25] can anyone help me with this? I'm running jaunty 64bit [14:25] yep, a local user can enter them [14:26] *sorry I can see the folders in /media/ but can't enter them [14:26] when I enter them i see nothing [14:27] I'm allowed to go in but see nothing [14:27] <_ruben> so you can enter the directories, but cant list its contents.. that's an odd one [14:28] <_ruben> did you chmod recursively? [14:29] I believe i did do it with the -R switch [14:29] I'll try again [14:30] nope still no dice [14:33] I got it to work now, but the recursive chmod wasn't the solution [14:33] in my /etc/exports i had /media/ instead of /media/sdb2 [14:33] what was it then [14:33] i thought /media/ was enough to go into the child directories [14:34] I find that strange though, does anyone know why this may be? [14:34] because /media is a dynamic mount point for removable media [14:35] i'd avoid using it for permanent mounts [14:35] use /srv instead [14:35] ahh k thanks [14:36] but my /media/sdb2 is a harddrive partition i thought it should stay in /media/ [14:36] so it's advisable to just edit my fstab then [14:37] sure [14:37] its a fine mount point if you're not exporting over nfs [14:38] ahh k thanks alot man, one other thing do you think making a symbolic link to my /media/sdb2 would work [14:38] so does nfs follow symbolic links? [14:39] on the same FS, yes [14:39] otherwise no [14:40] ahh k cool [14:40] if you want /media/sdb2 to appear somewhere else for NFS exporting, bind mount it [14:40] New bug: #383926 in openssh (main) "ssh-aggent stopped accepting connections" [Undecided,New] https://launchpad.net/bugs/383926 [14:41] hmmm, never heard about bind mount I'll look into ti [14:41] *it [14:41] it allows you to mount a filesystem to more than one place [14:41] for example, to /home on the local machine, but also /srv/home for nfs exporting [14:42] damn, that's handy [14:42] can I then edit fstab to mount -bind directories at boot [14:43] yes [14:43] its a mount option [14:43] cool, I'm going to try it now [14:43] or type... [15:15] does ubuntu server have a bind-chroot package like red hat to set this environment up automatically? [16:43] what is the latest kernel? [16:50] hello all. I've looked around and can't find the answer to this.. Where is the proper place to ask questions regarding Sparc support for 8.04 server [16:51] I know its now been downgraded to a "port" for 8.04 [17:00] hello all. I've looked around and can't find the answer to this.. Where is the proper place to ask questions regarding Sparc support for 8.04 server [17:00] I know its now been downgraded to a "port" for 8.04 === erichammond1 is now known as erichammond [17:23] triden01: http://ubuntuforums.org/forumdisplay.php?f=146 [18:12] hi ppl [18:38] anyone here use ebox? [18:39] is it normal for it to have firefox complain about ebox's security certificate right out of a fresh ebox install? [18:43] question. how can i lock the user in his home directory ? [18:45] so that he can't navigate to any other directory!? [18:46] that would be close to impossible, users need to be able to read things in /usr, /etc, among other things [18:51] Hey Gang - I'm trying to have my ltsp clients bind to an osx ldap server (10.5). Would it be the same process to have a single jaunty client bind to the mac osx ldap server? [18:56] highvoltage-> its for sftp [18:56] i want to disable everything but sftp [18:56] for that user [18:59] billybigrigger: of crouse. [18:59] course* [18:59] roger [19:00] oruwork: ah, iirc there's a shell that's caused sftponly which you can install which would allow that [19:03] hmmm [19:03] so i just created a user for my sftp account [19:03] and generated a new ssh key for him [19:03] should I manually create .ssh directory in his home directory ? === SirStan is now known as phpCow [19:05] so to allow my new user to connect with ssh key, is it normal to manually create .ssh directory in his home ? === phpCow is now known as SirStan [19:09] oruwork: What else would create the directory? [19:10] i dont know [19:10] for some reason its not working :P [19:10] meaning..., the new key doesnt work for my new user :P [19:11] i'll try to put my existing key in there that works for testing purpose [19:19] Hi [19:20] when using du -s /home/chris what size format does it output? === erichammond1 is now known as erichammond [19:51] FFForever: man du [19:51] you can change the output format, for kb, mb, etc [19:53] hi, I was wondering if there is a way of reinstalling distro over romotely. [19:54] I have a server in IDC but they installed Desktop edition instead of server edition, thats ehy. [20:12] can someone help me to configure sshd_config with ForceCommand, Subsystem, and ChrootDirectory ? [20:12] trying lock my ftp user account in home directory [20:18] ftp user? [20:18] what ftp deamon? [20:18] why don't you configure chroot in your ftpd's config? [20:19] is there some way to get a fixed version of subversion? 1.5.x has borked merging... need 1.4 or 1.6 [20:22] billybigrigger-> thats exactly what i'm trying to do , chroot [20:23] billybigrigger-> just not sure how to do it [20:23] and i asked you.... [20:23] why don't you configure chroot in your ftpd's config? [20:23] are you using vsftpd? proftpd? pureftpd? [20:24] billybigrigger-> not sure , just ssh [20:24] never isntalled any ftp daemons [20:24] hehe [20:24] i was looking at http://www.debian-administration.org/articles/590 [20:24] setup an ftp deamon [20:25] what do you need an ftpd for? [20:25] then in the ftpd's config setup user chroot [20:25] sftp is different than ftp :P [20:26] sftp isn't related to ftp, yeah [20:26] let's not confuse the two [20:26] iirc sftp is built into ssh [20:26] yes, it's not FTP [20:27] yeah [20:27] oruwork::: ok what's your problem? [20:27] well.. just trying to figure out how to make my ftp user locked in home directory thats all [20:28] oruwork: what ftpd are you using? [20:28] none, ssh [20:28] so, are you using an ftp-server or do you wanna do it using your ssh-server? [20:28] just ssh [20:28] ssh server i guess [20:28] oruwork: then you're not using FTP ... you just said "my ftp user" [20:28] oh [20:28] ok [20:28] yeah, it confused the shit outta some ppl ;) [20:28] oruwork::: seriously, whats the problem? that guide seems pretty simple [20:29] if this is not the guide you're talking about, it's pretty good: http://www.debian-administration.org/articles/590 [20:30] yes that [20:30] lol [20:30] so what's the problem? [20:30] just confused with the group [20:30] oruwork, if you persist on logging the users file transfer action, chrooted sftp is gonna make it very difficult [20:31] Hecate::: that's the exact guide he's talking about [20:31] Match group sftponly [20:31] well, from time to time i happen to have a lucky shot [20:31] do i need to create a group before i modify sshd_config ? [20:32] depending on your sshd_config [20:32] if you do it the match way (as you posted above), then: yes [20:32] well the only thing that i modified in sshd_config is disabled password logins [20:33] now you're confusing me, too [20:33] if you didn't modify your sshd_config, how do you expect it to do the chrooted sftp? [20:35] brb [20:36] I need to make an NFS server for Xen. Any suggestions as to what file system to format the drives that will be holding the virts? [20:44] fat16 [20:44] ;) [21:13] hi, I've installed apache2 module, what modules I need to run cgi scripts in my localhost? [21:16] hi all. does anyone know of a way to modify default routes on a per process or per user level? I want the default route to be one destination, but have specific applications go over openvpn (their destination IP's are unknown) [21:17] it seems like firehol might be able to do it, but it's hard to tell [21:17] does order matter in sshd_config ? [21:17] oruwork: I don't think so [21:39] how can i assign a user to a group ? [21:43] Hey All :) [21:43] Im having really hastle trying to setup bonding with ubuntu server 8.10 [21:43] ive followed a buttload of tutorials on the web to no avail. [21:44] Switch: http://www.usr.com/support/product-template.asp?prod=7724a [21:44] NIC's: http://www.tenda.cn/product/show.php?productid-226.html [21:45] im trying for bond mode 4. [21:45] Ive also setup the coresponding ports on the router to be a "trunk" [21:50] oruwork: adduser [21:50] oruwork: check the adduser manpage, lots of good stuff in there [21:56] ok when i do sftp user@host how can i specify the port [21:57] i tried sftp -p "port number" user@host and it didnt work [21:58] oruwork, sftp -o Port=12345 user@host [22:21] New bug: #372405 in samba4 (universe) "ldb_module.h and associated files not included in package" [Medium,Triaged] https://launchpad.net/bugs/372405 [22:25] New bug: #384102 in samba4 (universe) "Please merge samba4 from debian experimental" [Undecided,New] https://launchpad.net/bugs/384102 [22:29] Where is a good place to go for free online LPIC training course. Something I can do at my own pace? [22:29] I always thought IBM offered one at some point. [22:35] JorgeJorgesson: http://www.ibm.com/developerworks/linux/lpi/ [22:36] zoopster: Exactly what I was trying to find, thanks a bunch! [22:36] np [22:37] JorgeJorgesson: it's pretty good...helped me a ton [22:38] zoopster: I found it quite some time ago but lost track of it. I really mean to take the full thing one day! === bk|away is now known as bk