/srv/irclogs.ubuntu.com/2009/06/08/#ubuntu-server.txt

jmarsdenbillybigrigger: check the MX records for mydomain.com really do point to your mailserver...  dig mydomain.com mx00:56
billybigriggeryeah it all works00:57
billybigriggerit all worked before, im transfering over servers00:57
billybigriggertrying to setup 192.168.1.100 and 19200:57
billybigriggertrying to setup 192.168.1.100 and 192.168.1.103 and then just switch the ip's around on them...but when i switch ips, apache works, and the mailserver won't accept incoming mail00:58
fbc-mxHow do I get my nfs shares to show up in the Network browser?? I have them setup already and I can manually mount them with no problems, but other users aren't very savvy. I would like to make them idiot proof.00:58
jmarsdenYou will need a public IP if you want to get email from hotmail... 192.168.*.* is a private IP range ?00:58
fbc-mxavahi deamon? or something like that?00:58
fbc-mxbillybigrigger, or you can load ddclient get a DDNS and put your computer in your routers DMZ.01:00
fbc-mxbillybigrigger, it's not the optimal solution.. you'll bounce mail for about an hour once a week when your provider changes your IP, but after it propagates again through DNS you should be good for another week.01:01
billybigriggeri haven't had an ip change for years01:03
jmarsdenbillybigrigger: So when you swap IPs for the servers, you are also changing the router's NAT settings appropriately?01:04
FFForevercan i make openssh check ~/.ssh/authorized_keys and /root/.ssh/authorized_keys for each login?01:07
fbc-mxFFForever, not abosulutely sure, but I think it would be a qustion of adding another pam_module pointing to the other keys file.01:09
fbc-mxHow do I get my nfs shares to show up in the Network browser?01:09
giovaniFFForever: why would you check root's home dir for keys for other users?01:21
fbc-mxanyone? Beuller? Beuller?01:21
giovaninetwork browser?01:21
giovaniyou mean some gui thing? that's not an ubuntu-server issue01:21
fbc-mxgiovani, yeah but they don't show01:21
=== asac_ is now known as asac
giovani^01:22
fbc-mxI open up my network browser and do not see nfs shares even though I can mount them manually.01:22
giovanithis is #ubuntu-server01:22
giovaniyou're talking about a desktop app -- ask in #ubuntu01:23
fbc-mxgiovani, I know,,, I'm runing it on ubuntu-server01:23
giovaniGUIs are not supported here01:23
giovaniplease go to #ubuntu for that01:23
fbc-mxgiovani, so your saying the server does not have to announce the server? It's the desktops responsibility to detect them?01:23
giovani"announce"?01:23
fbc-mxgiovani, sorry I menat annouce the service?01:24
fbc-mxgiovani, Yeah, Like some kind of broadcast teling everyong one what it is sharing.01:24
giovaninope01:24
giovanithat's a windows thing01:24
fbc-mxgiovani, aha... ok, so then it's really not a server issue...01:24
giovaniask #ubuntu what you're supposed to do with that tool01:25
giovaniit's not a server tool, so it's not supported here01:25
bogeyd6Anyone know how to unzip several files in a directory?01:43
Alex_21sudo unzip *.zip maybe01:45
Alex_21I have no idea01:45
dthackerbogeyd6: unzip *.zip?01:46
=== scfh_ is now known as scfh
NikilosHi everyone, I just installed Ubuntu Server on a really old computer of mine, and when it boots up, it gets to the command line just fine, but the text is extremely huge and I can't see what I'm typing. Is there an easy fix to this?01:57
Alex_21Re installl or fix the resolution on your Monitr\01:58
Alex_21Monitor01:58
NikilosI tried reinstalling and it didn't do anything. How do I fix my resolution?01:59
PhotoJimjust a shell login I assume.  no GUI running.02:01
PhotoJimif so, weird problem.  not seen that.02:01
NikilosRight, no GUI02:01
PhotoJimmy machines that are servers just boot into text mode, like DOS does.  they would work on a CGA system.02:01
PhotoJimthere are some paramters you can use in grub to force the kernel to boot up in different video modes.  I wonder if that's your solution.02:03
PhotoJimI don't know t he details, but googling might help.02:03
NikilosAlright, I'll try looking around. Thanks. I'll report back with results02:04
PhotoJimplease do.02:04
PhotoJimparameters, even02:05
PhotoJimdarn netbook keyboard :)02:05
NikilosNetbooks rock02:05
PhotoJimI love mine, but the keyboard occasionally annoys :)02:07
PhotoJimit's not bad though02:07
PhotoJimeverything else about it is great02:07
NikilosWhat kind is it?02:07
PhotoJimAA1, 1.5 GB RAM, 160 GB SATA HD02:08
PhotoJimin pretty sapphire blue :)02:08
NikilosOooh, that's great02:09
PhotoJimyep02:09
PhotoJimdual boot, XP and Jaunty02:09
PhotoJimI use Jaunty most of the time02:09
Alex_21Does anyone know why eSpeak is broken in Jaunty?02:09
Alex_21I run an eSpeak server02:09
NikilosBe riiiight back02:10
PhotoJimI don't, sorry02:11
NikilosNo idea if that worked...test test02:14
Alex_21Can you test it in Jaunty?02:24
Alex_21eSpeak I mean02:24
PhotoJimNikilos: so did it work?02:30
NikilosPhotoJim: I'm still in the process of trying to fix it :P02:30
NikilosWell, I was able to edit my menu.lst file without problems...I think. I can't really tell since I can't see what I'm typing, but hopefully it worked02:36
NikilosGreat, I completely murdered my display settings02:40
NikilosWould using Xubuntu as a server be practical?02:44
PhotoJimpractical but not optimal02:56
PhotoJimwhy not ssh into it from another system on your network?  I think sshd is configured to run by default on ubuntu server02:57
NikilosSorry for asking such a dumb question, but how do I do that?03:01
PhotoJimdo you have shell access to another machine on your local area network?03:03
NikilosI'm not sure. How do I check to see if I do?03:05
PhotoJimif they're your machines, you surely have access :)03:06
PhotoJimeither that, or you can use a Windows machine and get the ssh client PuTTy03:06
PhotoJimif you have a Linux machine with a GUI like Gnome or KDE though you can just log in and open a terminal03:06
PhotoJimssh is built-in03:06
PhotoJim(essentially)03:06
NikilosOH, wow, I feel really dumb now. Yes, I do :)03:06
PhotoJim:)03:06
PhotoJimdo you know what IP addresses your machines have?  (in particular, your server)03:07
NikilosI know what this machine's IP address is, not the server's03:08
PhotoJimyou need to know the server's03:09
PhotoJimhow is it getting an IP, by DHCP?03:10
NikilosI have no idea, sorry. :(I have the server connected to a wireless router via an ethernet cable and I'm on my notebook right now, which it connected wirelessly03:11
PhotoJimwhat is your notebook's IP?03:12
PhotoJimhow do you use your server if you don't know its IP, by the way? :)03:13
Nikilos192.168.1.2 is my notebook's IP03:13
PhotoJimmy guess is that your server is 192.168.1.1 or 192.168.1.3... your gateway is probably .1.1 so try .1.303:13
PhotoJimyou're running Linux on your notebook?03:14
NikilosI'm actually running OS X, but its Terminal will still work, right?03:14
PhotoJimit will.03:15
NikilosOh, I successfully connected03:15
NikilosIt was 192.168.1.303:15
PhotoJimhow did you connect?  did you do an ssh login?03:16
NikilosI used Coda's terminal and used its "Connect via SSH" option and entered in the information03:16
PhotoJimso you're in?03:17
NikilosYup, I was able to undo the change I made to /boot/grub/menu.lst03:18
PhotoJimoh, cool.03:19
PhotoJimssh is a very useful tool.03:19
NikilosThanks for stepping me through this, Jim, you're a lifesaver03:19
PhotoJimnot exactly :) but you're welcome.03:21
PhotoJimnot dumb questions, by the way.03:21
PhotoJimwe were all newbies once.03:21
Nikilos:)03:21
PhotoJimmy server is in my basement.  I almost never do a real console login.  always ssh from upstairs, or even away from home.  like yesterday, I sshed from 4000 km away :)03:22
PhotoJimtoday ssh is just a few feet :)03:22
NikilosSo how would I SSH to my server if I was not connected to my home network?03:23
Alex_21ssh username@192.168.x.x03:24
PhotoJimyou'll need to port forward a port from your router to your server, and have a static IP address you can use elsewhere03:24
Alex_21Replace the last two with the proper values03:24
PhotoJimAlex_21: that won't work outside his LAN :)03:24
Alex_21If you don't have a static IP use DYNDNS.net03:24
Alex_21Ok03:24
PhotoJimyup, that'll work too, not quite as well but reasonably well03:24
Alex_21And do: ssh username@something.homelinux.net03:25
PhotoJimmy ISP gives me 2 static IPs, so my router (which is a custom Alix Linux box) has one and my server has the other03:25
PhotoJimdual NICs on both, so they have separate connections to the LAN03:25
PhotoJimmy WiFi router just does WiFi, no routing03:25
NikilosTwo routers would definitely complicate the situation, I assume...03:26
Alex_21Depends on the sicuation in the first place :)03:27
Alex_21It is up to you03:27
PhotoJimnot really.  my access point is set to route all traffic through 192.168.222.26, which is my router's IP03:27
PhotoJimworks perfectly :)03:28
PhotoJimand it doesn't give out IP addresses by DHCP, that's disabled.03:28
Alex_21I have to run03:28
Alex_21I hope I could help03:28
Alex_21Thanks for your help03:28
PhotoJimciao Alex03:28
Alex_21Good night03:28
NikilosWell, I think I can figure out the rest from here. Thanks for all the help!03:42
NikilosI'll most likely return sometime in the near future, though :)03:43
PhotoJimyou're most welcome03:48
chelehandsomehow can I mount a RAID 5 in my server?03:50
jaypur_mbhi, i installed apache and my internet provider blocks the access of port 80, so what port should i use at the ports.conf file and at my router?04:18
=== s_markow_ is now known as s_markow
jmarsdenjaypur_mb: Any port you like... but usually if the ISP blocks port 80 it is because their Terms of Service forbid servers, so make sure they actually permit (not just technically but contractually/legally) use of a server on whatever port you choose.04:57
jmarsdenPorts 81 or 8000 or 8080 would be common choices for alternative web server ports.04:57
=== mcasadevall is now known as NCommander
Alex_21I have ap roblem. On boot I get06:22
Alex_21Code: "[        25.251737] Freeing initrd memory: 8263k freed"06:23
Alex_21Any ideas06:24
Alex_21Please06:24
ssmthat's a normal boot line, Alex_2106:33
Alex_21But it is hanging for half an hour on the same line06:34
ssmAlex_21: does it continue to boot after the half hour pause?06:34
Alex_21It hasn't booted yet. It is a vannila install06:35
ssmAre you booting from an install cd? Is this a normal boot from disk, and a problem that's just appeared, have you done any upgrades lately, does your disk make funny noices, black smoke, anything else?06:39
Alex_21Nothing. It is a vanilla install and I am booting from the HD. It has software raid on it06:45
jmarsdenAlex_21: It might be good to try doing a fresh install onto just one of the HDs, just to check that the basic hardware is OK?  Then if that works, the issue is probably RAID related in some way, and you can go back and troubleshoot that?  A 30+ minute delay means it's probably not going to finish that install, in my opinion.06:47
Alex_21It finished the install06:48
Alex_21This is the first power up06:48
twbIf the delay is reproducible, I would blame nss.06:48
twbFor example, if you have network manager installed and are running a NIS client, you will get that behaviour.06:48
twbBecause NM retardedly tries to look in /home or something, before the network is even up.06:49
Alex_21I just realized something06:49
Alex_21The domain is assigned to this machine is not correct06:49
ssmtwb: Network Manager has surprised me lately.... :/  I have ldap auth here...06:52
ssmAlex_21: DNS or NIS domain?06:52
twbssm: well, with ldap you can at least bind softly.06:52
Alex_21I don't know the difference06:52
twbI dunno if/how to do that in NIS.06:53
ssmtwb: yes, or I can add the interface to /etc/network/interfaces :)  The default install gives you network after you've logged in06:53
Alex_21I have the domain from dyndns.com fried-rice.homelinux.net06:54
twbssm: that's fucking retarded06:54
ssmAlex_21: then you're not running NIS, I'd guess06:54
twbI hate NM so much.06:54
twbAt least wifi-radar leaves my wired nics the hell alone06:55
ssmtwb: I'd say NM is a mixed blessing, at least :)06:55
Alex_21Ok. Could this be my problem. That is not resolving correctly06:55
twbAlex_21: boot without "quiet" (or "splash") in your kernel command line, and take a note of the text immediately before the freeze occurs.06:56
ssmAlex_21: not sure, that should not pause the boot process06:56
Alex_21Because I did have Ubuntu installed before and it worked fine. But I need Raid 106:56
twbAlex_21: then boot with "single" or into a live CD, and add tracing on those files in /etc/rcS.d06:56
Alex_21What will that do?06:57
ssmI think the last line Alex_21 quoted was from the kernel freeing initrd memory, that's way before any init scripts.06:58
twbssm: it can't be.06:58
twbssm: if it's freeing the ramdisk memory, it has to be past the ramdisk06:58
ssmpoint06:58
* ssm needs more coffee....06:59
ssmfirst kernel, then initrd stuff, then pivot-root and then there's a pause....07:00
Alex_21[ 25.244020] checking if image is initramfs ... it isn't (bad gzip magic numbers ); looks like an initrd07:00
ssmthe next line after that in my dmesg is audit, but that's after 0.9 seconds, and the initrd message from Alex_21 was after 25 sec07:00
Alex_21Is what it says before the freeze07:01
Alex_21Code: "https://help.ubuntu.com/community/Installation/SoftwareRAID"07:02
Alex_21Code: "[ 25.244020] checking if image is initramfs ... it isn't (bad gzip magic numbers ); looks like an initrd" Sorry about before07:02
Alex_21What does this mean?07:04
ssmAlex_21: you could try booting from the cdrom again, in rescue mode, then do "update-initramfs -u -k all".  The image should be initramfs, at least it is here, on my jaunty desktop install.07:07
ssmyour dmesg says that the image is not a vaild initramfs image, and it therefore assumes that the format is "initrd" instead.07:07
ssmAlex_21: http://ubuntuforums.org/showthread.php?t=1163519 also looks related07:09
ssmyou could try adding rootdelay=200, since your boot obviously takes a while.  That's bitten me on some servers earlier07:10
Alex_21So I boot the disk. Then what?07:11
Alex_21There is no DHCP Server on the network BTW07:11
Alex_21I am at the Ubuntu Splash07:11
ssmwhen grub comes up, hit "e" for edit, navigate to the line that starts with "kernel", hit "e" for edit again, add "rootdelay=200" to the boot parameter list, then enter, and "b" for boot07:11
ssmalso, remove the "splash" and "quiet' words on the grub kernel boot line07:12
Alex_21I mean on the CD07:12
Alex_21Do I go to Reque mode?07:13
ssmAlex_21: CD rescue mode for the "update-initramfs" trick, to see if that works, or grub menu on the hard disk for the "rootdelay" thingie07:15
Alex_21I have Lelo07:16
Alex_21Not Grub07:17
ssmAlex_21: if you boot from "lilo", then just add "rootdelay=200" after the default, which probably is "Linux"07:17
ssmAlex_21: the ubuntu install gives you lilo if you have everything in LVM, and grub if you make a /boot partition outside LVM when you install.07:18
Alex_21I have no idea where to edit this file for Lello07:19
Alex_21It was all done in LVM on top of Raid107:19
Alex_21Thanks for your help07:37
Alex_21Good night07:37
twbIf you boot into lilo, give up and reinstall07:56
twblilo is totally NOT the right thing for LVM, though it will appear to work at first07:56
twbIt works by remembering the block offset, so if you actually try to, you know, resize or move extents, lilo will just break.07:57
sorentwb: ...and grub doesn't know about lvm at all. So what would you use?08:40
twbsoren: you put /boot on a separate RAID1 array OUTSIDE LVM.09:25
twb(Note that current versions of Grub *do* understand LVM -- but Ubuntu, and everyone else, still run Grub Legacy.)09:25
twbAlthough personally I would prefer to use extlinux over grub, if it was as well-supported by d-i.09:26
twbAnd, you know, kernel-img.conf and such.  Though I think that's mostly programmable; you'd mainly need to write an update-extlinux(8) script.09:27
a_oksay i make an initscript what is the best way to set it up in the runlevels?09:57
sorentwb: Yes, so that renders your lilo argument moot, doesn't it?10:04
sorentwb: You're saying not to use lilo if your kernel is on lvm, because it'll break when stuff moves around, but what you clearly actually mean is to not put your kernel on lvm.10:07
soren...which is completely different.10:08
=== cjwatson_ is now known as cjwatson
twbsoren: sorry, yes, that was implied10:30
twbBut even without LVM, lilo would be vulnerable against e.g. replacing your ext2 filesystem with another one that contains that same files.10:31
twb(another ext2 filesystem, that is.)10:31
twbThat's why grub-install tends to only get run once, whereas lilo needs to be reinstalled into the MBR practically every time you upgrade your kernel.10:31
sorentwb: s/practically //11:04
=== scfh is now known as scfh_
=== scfh_ is now known as scfh
=== gaveen_ is now known as gaveen
ghostlineshi all11:49
ghostlinesdoes anyone have experience with recovering shredded files?11:50
sorenghostlines: shredded?12:01
sorenghostlines: As in shred(1)ded?12:02
ghostlinesyeah12:04
sorenI'd forget about it.12:05
ghostlinessoren, it's possible to recover shredded files12:48
ghostlineshttp://ubuntuforums.org/showthread.php?t=70737312:48
ghostlinescheck out that thread12:48
henriquelmHello there13:11
henriquelmMy Ubuntu server is giving me a "Segmentation fault" error msg during OS boot, what should I do?13:12
uvirtbotNew bug: #384193 in quagga (main) "BGP: Assertion `len < str_size' failed in file bgp_aspath.c, line 519, function aspath_make_str_count" [Undecided,New] https://launchpad.net/bugs/38419313:36
=== Adri2000_ is now known as Adri2000
uvirtbotNew bug: #356164 in php5 (main) "php5 crashed with SIGSEGV in execute() (dup-of: 284661)" [Medium,New] https://launchpad.net/bugs/35616414:25
skarufuehello14:27
skarufuei have a mysql on ubuntu question14:27
skarufuei managed to make my old server unbootable (dont ask)14:28
skarufueso i set up a new one14:28
skarufueand everything is fine now14:28
skarufueexcept for the innoDB tables14:28
skarufuethey arent there anymore... and i remember there was some way to fix this... but i cannot remeber how14:29
skarufueanyone?14:29
Sam-I-Amdid you copy all the files over?14:33
skarufueyes14:34
skarufuebut /etc/mysql restart failed14:34
Sam-I-Amwhats the error?14:34
skarufueso i took out anything but the dbs14:34
skarufueso ibdata1 was recreated14:37
skarufueill recreate the error with the original ibdata1 just a moment14:37
kworkshould raidutils be able to manage adaptec cards ?14:38
skarufuewell i dont see anything in the /var/log/mysql* logs14:45
tdnI am trying to make use of my geode aes engine by using LUKS/dmcrypt for encrypted partitions. But for some reason it does not work with the geode_aes module loaded.14:46
skarufuesyslog gives me a series of those:14:46
skarufue hosting /etc/mysql/debian-start[29594]: Error    : Table 'roundcubemail.cache' doesn't exist14:46
skarufueJun  8 15:43:14 hosting /etc/mysql/debian-start[29594]: error    : Corrupt14:46
skarufueJun  8 15:43:14 hosting /etc/mysql/debian-start[29594]: roundcubemail.contacts14:46
skarufueJun  8 15:43:14 hosting /etc/mysql/debian-start[29594]: Error    : Table 'roundcubemail.contacts' doesn't exist14:46
skarufueJun  8 15:43:14 hosting /etc/mysql/debian-start[29594]: error    : Corrupt14:46
Sam-I-Amdid your files copy correctly?14:48
tdnHere is terminal log of what I have tried: http://thomasdamgaard.dk/p/P1310.html14:48
Sam-I-Amand does mysql know about the database?14:48
skarufueyes14:48
skarufueyes14:48
Sam-I-Amare the indices there?14:49
skarufueas i recall this is something common with innodb tables when the databases are simply copied (e.g. not using mysqldump)14:49
skarufueindices?14:50
Sam-I-Amindex?14:50
skarufueyes it say for example gallery2 db has 63 tables but i can only view 3 of them (all who are not innodb)14:51
skarufue(to be honest i dont get the indeces question)14:51
Sam-I-Amnot sure if you have to regenerate any indices if the database is physically moved14:52
Sam-I-Amor some command that make it work on a different instance of mysql14:52
skarufuewell the last time i think i had to read them from binary backup with some sort of offline method14:52
skarufuebut cant remember what exactly14:53
Sam-I-Ammaybe you need to use the same procedure?14:53
Sam-I-Amgoogle might be useful :)14:53
skarufueyeah well i tried that a lot but its a hard search term since the internets seems to be full of people who try to restore some sort of mysql database14:54
Sam-I-Amcan you get mysql to return a more specific error, or an error number?14:54
skarufueJun  8 15:51:56 hosting mysqld[29526]: of InnoDB though the .frm file for the table exists. Maybe you14:58
skarufueJun  8 15:51:56 hosting mysqld[29526]: have deleted and recreated InnoDB data files but have forgotten14:58
skarufueJun  8 15:51:56 hosting mysqld[29526]: to delete the corresponding .frm files of InnoDB tables, or you14:58
skarufueJun  8 15:51:56 hosting mysqld[29526]: have moved .frm files to another database?14:58
skarufueJun  8 15:51:56 hosting mysqld[29526]: See http://dev.mysql.com/doc/refman/5.0/en/innodb-troubleshooting.html14:58
skarufueJun  8 15:51:56 hosting mysqld[29526]: how you can resolve the problem.14:58
skarufueJun  8 15:51:56 hosting mysqld[29526]:14:58
skarufueJun  8 15:51:56 hosting mysqld[29526]: 090608 15:51:56090608 15:51:56 [ERROR] Cannot find table gallery/g2_User from the internal data dictionary14:58
Sam-I-Amhave you looked at what it tells you to look at?14:59
skarufueyes it isnt very helpfull15:01
skarufueit suggest to use CHECK TABLE which ist really an option whe mysql doesnt start15:02
Sam-I-Amgot me...15:02
skarufuethe thing is if i move ibdata1 out of /var/lib/mysql then the server starts (and a new ibdata is created) then i see the databases but the innodb tables are empty15:03
Sam-I-Amhttp://dev.mysql.com/doc/refman/5.0/en/innodb-backup.html15:06
Sam-I-Amsame versions, same platforms?15:06
skarufueyeah have binary logging turned on.. but i just realised that maybe it isnt enough to just swap out ibdata...15:08
skarufueill try that15:08
skarufueok15:12
skarufueas usually it was a file permissions fuckup15:12
skarufuethanks for bearing with my stupidity15:13
skarufue:)15:13
jaypur_mbhi i'd like to know a free temperature monitor to my server... does someone know?15:48
uvirtbotNew bug: #384821 in samba (main) "samba segmentation faults" [Undecided,New] https://launchpad.net/bugs/38482115:51
phoenixzI have opted for home directory encryption in my ubuntu server installation which causes SSH not to be able to use ssh keys anymore.. anbody who could help me to fix this problem?16:17
sorenkirkland: ^ :)16:17
phoenixzrob_p: well, in my case, I opted for home directory encryption during the ubuntu server installation. Result seems to be that SSH is not functioning correctly with keys anymore.. How can I fix this?16:19
kirklandphoenixz: encrypted home and ssh public key authentication are (mostly) incompatible technologies16:21
phoenixzkirkland: in other words.. once using encrypted home directories... you can no longer use ssh with public key authentication.. ?16:22
kirklandphoenixz: i say "mostly" ...16:22
phoenixzokay... but how could I then get them to work?16:22
kirklandphoenixz: there are two non-ideal work arounds16:22
phoenixzkirkland: oh oh...16:22
kirklandphoenixz: basically, encrypted-home means that you *must* enter a password to mount your home directory -- that's the design/definition of the feature16:23
kirklandphoenixz: you can ssh in with a password the *first* time16:23
kirklandphoenixz: and then subsequent ssh's via pubkey should work16:23
kirklandphoenixz: as long as your home dir stays mounted16:24
kirklandphoenixz: if you rm ~/.ecryptfs/auto-umount, it won't be unmounted on logout16:24
kirklandphoenixz: which is perhaps a slight security risk to your data, but will key your pubkey auth working16:24
kirklandphoenixz: that's option #116:24
kirklandphoenixz: option #2 ...16:24
phoenixzkirkland: gottit..16:24
kirklandphoenixz: you can move your ~/.ssh/authorized_keys file out of your encrypted home directory16:25
kirklandphoenixz: put it in your unmounted, read-only home16:25
kirklandphoenixz: this will get your ssh public key auth working16:25
kirklandphoenixz: but your home dir will not be auto mounted on login16:25
kirklandphoenixz: you will need to run ecryptfs-mount-private16:25
phoenixzbecause there is data there...16:25
phoenixzgottit...16:25
kirklandphoenixz: and enter a password, and then home is mounted16:25
kirklandphoenixz: this is documented in various scattered places16:25
kirklandphoenixz: i'm going write a blog post that documents it now :-)16:26
kirklandsoren: thanks for the pointer16:26
phoenixzkirkland: This is a detail that might be documented a bit clearer yeah :) maybe during installation or something :)16:26
phoenixzkirkland: thanks a lot!16:26
sorenHow about changing the location of the authorized_keys ?16:26
sorenI once taught ssh to look at a fuse mountpoint that would fetch ssh keys from launchpad on the fly.16:27
sorenI feel much better now, though.16:27
kirklandsoren: that was option #216:27
sorenkirkland: Oh, I misunderstood. Sorry.16:28
sorenhuats: Hey. The changelog in your merge says that Intrepid and Karmic were merged upstream. If it's cool with you, I'll change "Karmic" to "Jaunty" and go ahead an upload?16:28
huatssoren hey16:29
huats2 minutes I am on the phone16:30
sorenhuats: Sure.16:30
sorenkirkland: I'm reading your option #2 again, and I'm not sure we're speaking about the same thing.16:30
kirklandsoren: okay, i simply meant option #2 to convey moving ~/.ssh/authorized_keys out of $HOME16:31
kirklandsoren: out of encrypted home, anyway16:31
kirklandsoren: somewhere that the system can find it, unencrypted16:31
kirklandsoren: what are you meaning?16:32
sorenkirkland: Right. Like /var/lib/ecryptfs-workarounds/<username>/authorized_keys or something.16:32
kirklandsoren: sure16:32
sorenAnd adjust AuthorizedKeysFile in sshd_config accordingly.16:32
kirklandsoren: i suggested unmounted $HOME, but it could be mostly anyway16:32
kirklandanywhere16:32
kirklandsoren: ah, and you mean modifying the sshd_config too16:32
sorenRight.16:33
huatssoren: I am back16:33
huatshey :)16:33
soreno/16:33
huatsoups16:34
huatsindeed16:34
huatsintrepid and jaunty were merged :)16:34
huatsgo ahead16:34
huatsyou can change that :16:34
huats:)16:34
huats(sorry for the mistake)16:34
sorenCool :)16:34
sorenhuats: I didn't expect you to object, but it felt wrong changing stuff that is signed by you without your consent. :)16:34
* soren breaks16:34
huatsbtw I will send the patch I have added (that adds karmic) to upstream and debian too...16:35
huatssure I understand16:35
huatsbtw I have done locally the virt-manager update, are you interested ? :)16:35
huatsI mean the merge16:35
sorenhuats: Sure, bring it on :)16:46
huatshehe16:47
huatsI will16:47
huatsI have just to deal with a last patch16:47
huats(I might need your opinion on it btw)16:47
sorenSure.16:48
kirklandsoren: i'll document your suggested method too :-)16:55
soren;)16:55
huatssoren: In fact the patch that bothers me a bit is : http://paste.ubuntu.com/190975/17:11
huatsin fact the new interface has changed quite a bit17:11
huatsand there is not anymore the distinction para virt/full virt (from my understanding and that has been confirmed when I have launched the application)17:12
huatsso I am not sure this is needed...17:12
huats(by instance I am running it without being the kvm group)17:13
huatssoren:  I need to run17:30
huatsI might be connected later tonight or tomorrow :)17:30
Damirhey guy's17:40
Damiranyone experiance with apache17:40
Damirand the mod_proxy loadbalancaing17:40
uvirtbotNew bug: #352170 in openvpn-blacklist (main) "openvpn - openssl-vulnkey:24: DeprecationWarning: the sha module is deprecated; use the hashlib module instead   import sha" [Low,Fix committed] https://launchpad.net/bugs/35217017:40
Damirim getting this config error: BalancerMember can not have a balancer name when defined in a location17:41
Damirand i'm using this config : ##custom configuration loadbalancing17:42
Damir<Proxy balancer://servertje>17:42
DamirBalancerMember http://127.0.0.1:8080/ loadfactor=100 # Balancer member 117:42
DamirBalancerMember http://localhost:9090/ loadfactor=80 # Balancer member 217:42
Damir</Proxy>17:42
DamirProxyPass /test/ balancer://servertje/17:42
Damirany idea what it could be ?17:42
rsrhello all19:08
rsrI have a question... I wpuld like to know what this is: dd bs 1 if /proc/kmsg of /var/run/klogd/kmsg : I found this despite not knowing what it is referring to... Can anyone enlighten me?19:09
_rubencopy .. with block size 1 .. from /proc/kmsg .. to /var/log/klogd/kmsg19:14
_rubenlooks like a "bridge" between a file within /proc and socket for klogd19:15
rsryes19:23
rsrno problem19:23
rsrshould I use the latest version or the LTS version for my server?19:24
jpdsWhichever you want.19:24
rsrbut which one is recommended for a mission criticall service? there must be a reason for LTS19:25
rsranother question19:29
rsrshould I upgrade distro on a server19:30
rsr?19:30
OasisbhrnwHello.  I just installed Ubuntu Server 9.04.  During the install there was an option to turn auto-updates on, which I did.  My question is, is there anyway to check when auto-updates last ran and/or is there a way to make it run manually?19:36
jmedinaOasisbhrnw: AFAIK, auto update wont update your system quitely, insted will download list like apt-get update19:38
OasisbhrnwI just don't know how to verify it's working.  I'm paranoid it's acutally not running.19:39
sommerOasisbhrnw: there will be new entries in /var/log/apt/term.log19:41
sommerOasisbhrnw: you can also adjust the settings in /etc/apt/apt.conf.d/50unattended-upgrades19:42
OasisbhrnwK, thanks.19:43
orudiehi, i'm struggling with this http://www.debian-administration.org/articles/59019:52
orudietrying to lock user in home dir.19:54
orudiecan someone help me with this ?19:55
orudieplease19:55
ghostlineswhat's the prob?19:59
orudiewell first off cant even test it with sftp user@host because i'm using ssh private key20:00
orudiehow can i specify port with sftp user@host ?20:01
jmedinaman scp?20:02
orudiejmedina-> sftp20:02
orudieits -o something20:02
orudieforgot what20:03
jmedinaorudie: then man sftp20:03
orudielooking cant see20:03
jmedina just type: /port and there you go20:03
jmedina:D20:03
jmedinathe fist match20:04
jmedinaFor example, to specify an alternate port use: sftp -oPort=24.20:04
orudieyup see it thanx20:04
orudiei didnt know how to search inside man pages lol20:04
orudienow i know20:04
jmedina¬¬20:04
jmedinaorudie: the first thing is learn how to use man pages20:04
jmedinaman man20:04
orudie:)20:05
jmedinause man before googling or ask in forums/chats...20:05
orudiegood stuff20:05
jmedinait is easier, and most of time will save some time to you and to others20:05
jmedinaand you look Pro :D20:06
jmedinaorudie: then you dont know how to search in more/less?20:06
orudiedo not know what you are asking20:07
jmedinaIm taking about pager programs like more or less20:08
jmedinaman uses a pager, I think by default is more unless you install  less (1)20:08
orudienever used those20:08
jmedina:O20:08
orudieso yeah cant test within the host20:10
jmedinavirtualize!!!!!20:10
orudieFailed to add the host to the list of known hosts (/home/paul/.ssh/known_hosts).20:10
orudiePermission denied (publickey).20:10
orudiebut its obviously doesnt work because i can actually browse to other directories if i do su user20:11
orudieanything ?20:16
orudieanyhing anyone ?20:20
ghostlineswhat vpn solution do you guys recommend?20:34
mathiazghostlines: openvpn is a good solution and may fit your needs20:36
ghostlinesI have experience with open-vpn, wondering if they're are any better ones20:36
=== jason^_ is now known as jason^
jason^has anybody installed ubuntu server on a dell r710 server?  i'm getting errors like "cannot find a valid memory map"21:41
ta3oneGreetings fellow Ubuntu affectionados! I have a question about getting mod_proxy to work - I keep getting forbidden error21:46
ta3onecan anyone please help?21:48
matthewmppHi, I am new to server-editions.  I created a user on my server with: useradd -m matthewmpp, but it never asked me for a password for matthewmpp. How do I create or change the password for this new user?21:53
matthewmppping21:54
ta3onehey matthew21:56
matthewmpphi21:56
ta3oneuse passwd username21:56
matthewmppokay21:56
ta3onesudo passwd username21:56
ta3oneyou can reset any password like that from the cli21:56
matthewmppby using passwd username?21:57
ta3oneyeah21:57
ta3oneby the way, you should be using adduser21:58
ta3onenot useradd21:58
orudieafter following this guide http://www.debian-administration.org/articles/590 i can not figure out where they authorized_keys file with ssh key should go21:58
orudiehad been stuck on this for many hours already21:58
ta3oneuseradd is low level utility21:58
giovani|workorudie: that guide has nothing to do with ssh keys21:59
giovani|workso, clearly that's not a good place to find the answer21:59
ta3oneorudie, what are you trying to do?21:59
ta3oneyou mean like automatic logon?21:59
orudiegiovani|work-> yes, but i cant connect21:59
orudieta3one-> lock user in directory with help of chroot21:59
ta3oneohh sorry, I've never done that ...22:00
orudiegiovani|work-> its like ssh doesnt know where to look for authorized_keys file after i followed the guide22:00
orudiegiovani|work-> for that particular user22:01
orudiewhere does the authorized_keys file go when using chroot in sshd_config ?23:12
FFForeveris anyone around that has setup proftpd before?23:15
FFForeveri keep getting ProFTPd warning: cannot start neither in standalone nor in inetd/xinetd mode. Check your configuration., and i only installed it i have not modded the default configuration23:15
orudieFFForever, why not use sftp ?23:16
FFForeverorudie, because this is for a client and not me personally23:16
FFForeverany ideas?23:22
FFForeverbah =( Fatal: unable to load module 'mod_lang.c': Operation not permitted23:25
FFForeveranyone around?23:44
billybigriggerreconfigure it?23:44
billybigriggerdpkg-reconfigure proftpd23:45
billybigriggerunless it was compiled23:45
FFForeverit was installed via apt23:45
FFForeveri get this http://pastebin.ca/145250023:46
FFForeverbillybigrigger, any other ideas?23:48
billybigriggersudo dpkg-reconfigure proftpd23:51
billybigrigger?23:51
billybigriggerhmm23:51
billybigriggernm23:51
FFForeveri am root23:51
billybigriggerdidn't see root@23:51
FFForeverahh23:51
billybigriggeris it a functioning fp server?23:52
billybigriggerftp?23:52
billybigriggerpurge it and reinstall23:52
FFForeverbillybigrigger, i did that23:53
FFForeverno luck23:53
FFForeveri have made no modifications23:53
jmedinabillybigrigger: why dont you set your locales?23:55
billybigriggerFFForever23:55
billybigriggernot i23:55
billybigrigger:P23:55
jmedinasorry :S23:55
jmedinaFFForever: why dont you set your locales?23:55
FFForevercause i do not know how?23:56
jmedinafor easy: apg-get install language-pack-en23:56
jmedinais that a virtual machine?23:57
FFForeveryeah23:57
jmedina:D23:57
FFForeverthat worked...23:57
jmedinanow try to restart proftp23:57
FFForeverperfect23:58
jmedinaok23:58
jmedinaprobably a bug with proftpd init script, it is catchig local exict code not proftp daemon23:58
jmedinayou can help sending a bug report23:59
jmedinaprobably someone else can confirm this23:59
FFForeveri am on dialup at the moment ill so ill have to do this tomorrow23:59
FFForeverdialup + bnc == fun23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!