/srv/irclogs.ubuntu.com/2009/07/17/#ubuntu-server.txt

owhIn addition, the community spirit within Ubuntu is more inclusive. I found in the past that unless you're a Debian developer it's hard to get your feedback taken seriously. Within Ubuntu the entry point is much more accessible. I'm a full time software developer, but I cannot devote all my time to Ubuntu, but what little time I have is used and appreciated.00:00
owhThere are technical arguments as well, but they come under the philosophy of making Ubuntu for the people. There's quite a lot of invisible stuff that makes your job as a sys admin simpler.00:01
Bilge> With Ubuntu, I know when it's going to happen. | really? how?00:02
owhReleases happen in April and October.00:02
BilgeOh distro releases yes00:03
BilgeBut I can't figure out when I might get access to PHP5.3 if I just sit around waiting for it to appear in my repo00:03
cjwatsonon security fixes from upstream: it may not be very obvious how this works if you aren't familiar with free software development and are just used to getting a new packaged release from somebody. As an example, this is the last security-related change I needed to backport from OpenSSH upstream: http://bazaar.launchpad.net/~vcs-imports/openssh/main/revision/563100:03
BilgeProbably never00:03
disposablei have just installed ubuntu 9.04 server (choosing the minimal virtual server option in the installer) and discovered that my loopback device can't be pinged. http://pastebin.com/d46ecbc32 What am i missing?00:03
owhdisposable: Are you actually running on virtual hardware for starters?00:04
owhBilge: Not sure what you're asking.00:04
Bilgecjwatson: my dedicated server provider slightly modifies my installation of Ubuntu and they add openssh to the list of "held back" packages so it never gets updated00:05
disposableowh: the machine is in virtualbox. but i don't think loopback device should be affected00:05
BilgeProbably to avoid locking myself out through upgrading somehow00:05
cjwatsonBilge: *cough* on their head be it, unless they take care of the upgrades centrally00:06
disposableBilge: pinging it with ping6 ::1 works though. but i need 127.0.0.100:06
disposableBilge: sorry, wasn't meant for you00:06
disposableowh: pinging it with ping6 ::1 works though. but i need 127.0.0.100:06
cjwatsondisposable: what's in /etc/network/interfaces?00:07
BilgeNo, it's a dedicated server so it's up to me what I do with it. There's no "central upgrade"00:07
disposablecjwatson: see the pastebin link00:07
cjwatsonoh, yeah00:08
cjwatsonBilge: locking yourself out through upgrading would involve carelessness, of course, since upgrades of openssh-server never kill existing connections00:09
BilgeBut it would be my prerogative to check that it still worked after upgrading00:09
cjwatsonyes. it's an odd thing for them to do though.00:09
BilgeUpgrade > power cut > can't log in > now what?00:09
cjwatson(and, IMO, unwise)00:10
BilgeI don't know how to configure held back packages00:10
cjwatsonwell, the choice is sometimes between that or everyone *else* can log in ... ;-)00:10
disposablecjwatson: and i did try adding "127.0.0.1 localhost ip4-localhost ip4-loopbac" to /etc/hosts. didn't help00:10
disposables/loopbac/loopback00:10
cjwatsondisposable: I wouldn't expect /etc/hosts to matter; this is below the level of name service00:11
cjwatsondisposable: the question is why there isn't a "inet addr:127.0.0.1  Mask:255.0.0.0" line in ifconfig output under lo00:11
cjwatsonI confess to being weirded out though. It *looks* fine, though at after midnight local time I'm probably not awake enough to see the problem ...00:12
disposable:) same here00:13
cjwatsonBilge: 'apt-get install openssh-server' will disregard holds, if you decide to do that00:13
cjwatsonor use a full-screen package manager such as aptitude00:13
Bilgeaptitiude obeys hold backs00:24
BilgeAlso I just assumed that my provider configured the hold backs but I can't find any information about being able to configure that00:24
pmatulisBilge: why don't you just ask them (what, why, how)?00:27
BilgeBecause they're assholes00:28
pmatulisBilge: go elsewhere.  is that an option?00:30
BilgeThey have the best prices00:31
BilgeBy far00:31
BilgeBut they're also a foreign company who employ support staff from a different foreign country00:31
BilgeIf I don't have to deal with them then everything is perfect00:31
Bilge$ uptime00:32
Bilgeup 388 days00:32
BilgeThe only time its been rebooted was when I was testing to see if my services came back up automatically00:33
Bilge(since I wrote a number of custom init.d scripts to go with my self compiled software)00:34
pmatulisit's a very bad idea to compile stuff on Ubuntu00:34
tclineksi'm trying to run apache with upstart but it immediately daemonizes00:36
tclineksthoughts?00:36
cjwatsonBilge: it could of course be that apt is holding it back for its own reasons (unsatisfiable dependencies?)00:39
Bilge<pmatulis> it's a very bad idea to compile stuff on Ubuntu | what!00:40
cjwatsonapt-get install would hopefully give you ome hint as to why00:40
cjwatsonsome00:40
cjwatsonpmatulis: uh, I echo Bilge's "what?"00:40
cjwatsonpmatulis: hope you're not saying that Ubuntu is no good for developers! :-)00:41
BilgeIt wasn't a "what?", it was a "what!"!00:41
cjwatsonlet me refine that statement into what I think might make more sense00:41
BilgeI think I know where he's going00:41
BilgeAnother naysayer of anyone who doesn't use packages00:42
cjwatsonit's usually not a good idea to compile things for yourself and then install them over the top of system-managed software00:42
BilgeThe way God intended00:42
cjwatson*however*00:42
cjwatsonthere's nothing wrong with building things yourself and sticking them in your home directory, or carefully managed in /usr/local or /opt00:42
BilgeI'm not installing anything over the top of anything00:42
cjwatsonthat's what /usr/local and /opt are for00:42
BilgeAll my stuff goes into /usr/local00:42
BilgeI don't mess around trying to compile anything heavy like apache or PHP00:43
cjwatsonright, and although there are a few gotchas that's usually fine00:43
pmatulisk, you guys know what i meant00:43
cjwatson(radically different /usr/local/bin/perl can cause problems - some care needed)00:43
BilgeBut I have compiled an FTP server since the Ubuntu implementation was diabolical00:43
cjwatsonthere are lots of FTP servers in Ubuntu00:43
BilgeYou actually had to put each setting in a separate file00:43
BilgeIt made absolutely no sense00:44
cjwatsonvsftpd is popular among competent admins I know00:44
BilgeAnd the old version didn't support TLS encryption either00:44
BilgeI decided to go with pureftpd because it seemed pretty simple00:44
BilgeI also filed a bug about the terrible implementation00:44
BilgeWhich was acknowledged and then swept under the run with the rest of them00:45
Bilgerug*00:45
owhBilge: Mind taking that chip off your shoulder there?00:45
BilgeSeems they've all disappeared now as well00:46
BilgeThe only one left is the one I reported today00:46
BilgeLaunchpad didn't get its big tracker reset at some point did it00:47
Bilgebug*00:47
cjwatsonno.00:47
BilgeThere's no option to adjust time scale so I don't know what happened to them all00:47
niceuserso it doesn't suck?00:47
cjwatsonyou can look for all bugs you've reported, and there's an advanced search with which you can search for all bug statuses00:48
cjwatsonhttps://bugs.launchpad.net/people/+me/+reportedbugs00:48
cjwatson-> advanced search, check all the boxes under Status:, press Search00:49
cjwatsonoh and possibly also uncheck "Hide duplicate bugs"00:49
BilgeI can't figure this out at all00:50
BilgeI get different lists of bugs "related to me" depending on what page I was on beforehand00:50
BilgeIf I go to my profile, I just see the one from today00:50
BilgeIf I navigate to Ubuntu project first, I can see my old ones00:50
BilgeInstead of, but not as well as00:50
cjwatsonI don't know about related-to but /people/+me/+reportedbugs should be pretty deterministic. (for detailed help on LP, though, #launchpad.)00:51
BilgeThe URL is slightly different. One is referencing my user name and the other my e-mail address, and it lists different bugs for each00:51
cjwatsonLaunchpad URLs never contain your e-mail address, as far as I can remember. That sounds as if you may accidentally have two Launchpad accounts?00:52
cjwatson(though I'm not sure how that would happen without your noticing.)00:52
owhIt sounds like that to me also.00:53
BilgeYeah there's two00:54
cjwatsonyou can merge them if you want00:54
BilgeI would want00:54
owhOne less mystery for the day :)00:54
BilgeThey were created one month apart with the same user name00:54
BilgeI guess user names aren't unique00:54
owhs/same/similar/00:54
cjwatsonLaunchpad user names are unique00:54
infinityI see ~bbilge ... What's your other one?00:55
Bilgehttps://launchpad.net/~corporate-scriptfusion00:55
cjwatsonas in, when you visit launchpad.net/people/+me, it redirects to (in my case) launchpad.net/~cjwatson - the 'cjwatson' bit is the Launchpad user name00:55
Bilgehttps://launchpad.net/~bbilge00:55
infinityThose definitely look like very different usernames to me...00:55
cjwatsonhttps://help.launchpad.net/YourAccount/Merging00:56
infinityBilge: Don't confuse username with real name.  Real names aren't unique.  Your username is what's in the URL.00:56
BilgeI figured from what you just said00:56
BilgeDoes it matter which one I merge with which00:57
cjwatsonno, your choice00:57
infinityNope.  Keep the one you prefer the username to. :)00:57
cjwatsonpick the one you want to keep, request a merge of the other00:57
infinity(Or create a whole new account, and merge both to it)00:57
infinityIt matters if you have things like PPAs, I suppose, where URLs break when merged accounts go AWOL.00:58
infinityBut that doesn't look to be an issue for you.00:58
BilgeThis system really does drive me mental00:59
BilgeI can't actually log into the other account because the log-in firm is just a button for OpenID which logs me into the wrong account automatically00:59
Bilgeform*00:59
infinityEven if you do a forced logout?00:59
BilgeYes01:00
BilgeI just did a cookie smash which fixed it though01:00
infinityWeird.  Logging out here deleted the cookie correctly.01:00
BilgeIt was bouncing back and forth between some subdomains which probably screwed it up01:01
BilgeProbably only fails when looking at help01:02
infinityIf you can reproduce it, I'm sure the LP devs would love a bug on it.01:02
infinityAnd hey, if they don't love the bug, too bad. ;)01:02
=== Pici` is now known as Pici
=== s_markow_ is now known as s_markow
billybigrigger_anyone here aware of a decent auth log analyzer? like webalizer for access logs?05:22
=== Shaz is now known as Shazburg
jerrcsAny reason a lot of *.deb files are broken on the installer? I've burned a couple copies of the iso... :/06:15
twbjerrcs: define `broken'.06:27
jerrcstwb: well, I don't know. it fails to retrieve several of the *.deb files..06:31
jerrcsI was hoping it could fallback to retrieving them from a local mirror06:31
jerrcsbut I don't know how to select that in the installer.06:31
twbjerrcs: fails to retrieve them from where?06:31
twbWhat makes you think it's retrieving them from the CD (as opposed to via the network)?06:32
jerrcsfrom the cdrom.06:32
jerrcstwb: because I downloaded 577mb of pure iso goodness.. I don't think it would download more packages from the internet when they are already on the cdrom.06:32
twbjerrcs: that is not a valid assumption.06:33
jerrcsI don't think you understand. It's all good, I found installer components.06:33
twbFor a single release and architecture, the complete set of all packages is perhaps 5GiB.06:34
jerrcsyes. I know that06:34
jerrcsand06:34
jerrcsI'm talking about core instal lcomponents06:34
twbWhat is the error you see onscreen?06:34
jerrcsyour basics.. libc6, openssh, stuff like that. I'm seeing corrupt .deb files.. "debootstrap warning... warning: file:///cdrom/pool/main/g/gnupg/gnublahblah.deb was corrupt"06:35
jerrcsand it's pretty much like that for all of the packages.06:35
twbI see.06:35
twbHave you checksummed the burnt CD and compared it to the downloaded .iso, and to the .asc file included with the upstream .iso?06:35
jerrcsyes.06:36
twbAnd were they all identical?06:36
jerrcsI don't think I'd burn the CD otherwise.06:36
twbYou can't know the checksum of the CD before you burn it.06:37
oh_noesWhy doesnt this work? # ufw allow from port 5678/tcp to port 5690/tcp06:42
oh_noesIsnt it the correct syntax?06:42
anirbanI have installed Virtualmin 3.703.gpl module in my Webmin 1.480 panel of my Ubuntu 9.04 HyperVM VPS . Now I have added 1 domain named web2dziner.com using Virtualmin virtual hosts. The problem is when I type http://web2dziner.com (wrong Apache default page ) and http://www.web2dziner.com (the desired page) , it goes to two different webpages. I haven't done any modifications as such directly to the Apache. How to fix it ?07:05
twboh_noes: why do you want to set the source port?07:14
twbanirban: webmin isn't supported on Ubuntu AFAIK.07:15
oh_noestwb: I'm trying to say, ANY IP address, ALLOW from source port x to source port y07:15
oh_noessave me typing 50 lines of "ufw allow x/tcp"07:15
twboh_noes: erm, you can't send a packet *to* a source port.  That doesn't make sense.07:16
oh_noesso im not trying to send it to a source port07:16
twboh_noes: packets come *from* a source port, and go *to* a destination port.07:16
oh_noesI'm trying to say where the destination port is a range07:16
twbOh, I see, you want a port RANGE.07:16
oh_noesYep, and i cant figure out how to tell ufw that07:17
twbI don't know if ufw(8) can express that, but in the underlying iptables-restore syntax it's -m multiport --dports 5678:569007:17
twbAssuming you want to match destination ports, rather than source ports.07:17
twbFor example, -A INPUT -p udp -m multiport --dports 53,67:69,123 -j ACCEPT07:19
oh_noesthanks, yeah not using iptables, because i only need a simple host based single NIC firewall07:19
oh_noesi was hoping to express it in a single command07:19
twbI think "ufw from port N to port M" means -s N -d M, not --dports N:M07:19
twbi.e. the ufw(8) wrapper does not allow you to use --dports07:20
oh_noestwb: ok thanks for the clarify, I'll use a quick for i in then07:20
twbYou can still express it as a single command if you ignore ufw and use the mess of shit in /var/lib/ufw or /usr/share/ufw07:20
twbBut that may be beyond your capability.07:21
oh_noeswell not capability, anything is possible07:22
oh_noesbut beyond what i wish to perform to a server to keep it in a known supported state07:22
twbRight07:22
=== Shaz is now known as Shazburg
acalvohi08:01
acalvodoes anyone know how to get a list of used UIDs?08:01
pirxawk -F':' '{print $3}' /etc/passwd08:03
pirxlist of UIDs related to users08:03
pirxbut there could very well be files with other UIDs in the filesystem08:08
acalvopirx: since I've a LDAP backend, they should be there08:27
acalvobut trying to create a new user, it tells me that the UID is in use08:27
matttanyone here use XFS?09:32
qiyongwhat is the kqemu-common pkg used for?09:33
J_Phi all13:36
J_PAnyone know how I set Umask in proftpd for a specific user create dirs/files with perm rw for owner and group ? I'm doing this http://dpaste.com/68192/  but not works13:36
J_Panyone?13:39
uvirtbotNew bug: #400660 in samba (main) "[hardy]Unable to break ACL inheritance Windows ACL editor" [Undecided,New] https://launchpad.net/bugs/40066014:11
rgreeninghey, just wondering if anyone plans to package tac_plus-4.5b5-5.tgz and webui-1.5b3.tgz for tacacs? Or is there some licence restriction? It appears to be open sourced and supercedes the old unmaintained 4.0.4 build which was discontinued a coupled of ubuntu releases ago.14:16
rgreeningnew version of tacacs can be found here... http://www.networkforums.net/14:17
rgreeningyou might have to register to download... here's the direct link: http://www.networkforums.net/?q=system/files/tac_plus-4.5b5-5.tgz14:23
=== erichammond1 is now known as erichammond
=== nxvl_ is now known as nxvl
rgreeningScottK: hey, any ideas on above? I looked over the code. it's all gpl.14:52
rgreeningexcept the RSA MD4/5 bit (which seems ok)14:53
ScottKrgreening: What's the licensed on the RSA stuff and can it be linked against GPL code?14:54
rgreeningScottK: http://paste.ubuntu.com/220536/14:54
rgreeningScottK: I believe this was part of the original tac_plus package (which is unmaintained). The rest was re-written in C++ from the ground up.14:55
rgreeningOh, and ScottK, here is a bit a little further down same file: http://paste.ubuntu.com/220538/14:56
rgreeninglooks ok to me...14:57
ScottKI'd have to go seriously think about why the 4 clause BSD license with the advertising clause is GPL incompatible to know for sure, but I think so.14:59
rgreeningScottK: I'm pretty sure this was in the prev tac_plus package we had a couple of releases ago15:00
rgreening4.0.415:00
rgreeningyep. just checked. was the same licence then15:00
ScottKOK15:02
rgreeningScottK: So, I can package and possibly upload?15:02
ScottKI don't see why not.15:03
rgreeningI assume this would go universe initially and we could request to promote to main later15:03
rgreeningor should we try for main in karmic right away?15:03
ScottKAll new uploads land in Universe.15:03
ScottKGet it there, then there can be a conversation.15:03
ScottK"rgreening wouldn't be allowed to break it anymore" probably won't do it.15:04
rgreeninghaha15:04
rgreeninghmm.. if it stays in universe, I get to maintain it.15:05
rgreeningif it moves, i wouldn't.. though main would be nice.. i guess15:05
rgreening:)15:05
rgreeningok, let me package it...15:05
cudevI'm having problems getting if-up to work at boot. Everywhere that I've posted/asked so far, the only answer I've gotten is 'strange, that should work'15:20
Steve[mbp]Morning Everyone!15:20
cudevMorning Steve!15:20
Steve[mbp]:-p15:20
shivekHi everyone ^^D15:27
cudevHI15:28
cudev Can someone please expand upon what "if-up.d/mountnfs [device__]: lock /var/run/network/mountnfs exist, not mounting" means?15:28
=== jdstrand_ is now known as jdstrand
PC_Nerd101Hi,  I'm looking for advice on getting ftp accounts for specific virtual hosts in ubuntu (all installed from the standard 9.04 serve repo's).... so that a virtual host in /var/www/<vhostname> would have a specific FTP user for moving files around....  how would I set that up so that the user can only access that directory and not others. ?15:51
=== cjwatson_ is now known as cjwatson
_rubenPC_Nerd101: use the chroot option of for example pure-ftpd (other ftpd's probably offer similar features)16:14
PC_Nerd101ahh ok :) - I've got vsftpd running....16:19
PC_Nerd101just a sec16:19
PC_Nerd101ok - I think I've got it working by setting up the standard user account, chrooting it in vsftpd config, and I've had to resort to 777 permissions because apache2 is running ( and reading directories) as root/daemon (I think) - its the standard $sudo aptitude install apache2 install - so is there a seperate user I should own it all as ?16:22
leaf-sheep!oss17:22
ubottuSorry, I don't know anything about oss17:22
uvirtbotNew bug: #400776 in openssh (main) "ssh-keyscan(1) hangs if broken server does partial handshake" [Undecided,New] https://launchpad.net/bugs/40077618:06
michael__Hi guys. Having issues with pam_krb5. Can kinit and get tickets, but login gives a server not found in kerberos db. (this is after pam-auth-config).18:10
resnoWhat is the best way to use webalizer to extract stats?18:37
resnoIs there anyone who likes webalizer and can get info from it?19:02
majikmananyone here running apache httpd that can get this to work? http://httpd.apache.org/docs/2.2/mod/mod_status.html#machinereadable19:06
zoopsterresno: I use webalizer on jaunty and it works fine are you having trouble?19:26
resnozoopster: i am trying to get logs deeper than whats appearing on the html pages. I need stats for a page that is not a top page.19:28
resnoHas anyone used the command "fileinclude" with webalizer?19:32
cemcwhy is it that when I "ping host", it always thinks for a couple of seconds between each ping? there's no loss, no lag, it just tries to resolve something I think. it's Jaunty. any ideas?19:40
KillMeNowmine does the same thing cemc19:51
KillMeNowit didn't do it before I upgraded to Jaunty19:51
KillMeNowin fact I've noticed that some services are slower to respond19:54
cemcKillMeNow: exactly. On Intrepid it was all fine.19:58
resnoHas anyone had any luck extracting access logs for webalizer?20:03
zoopsterresno: the only way I can see to do that is log that specific page since webalizer really is just parsing logs for information I can see hits to specific pages in webalizer, so I'm not sure what else you are expecting20:04
resnozoopster: I am expecting a miracle. :) If the stats arent there on the html page, are they any where else?20:04
zoopsterresno: my setup has each virtual host using a separate log and webalizer parses each log and puts the stats in a separate directory for each host20:05
resnoso webalizer is only a parser for data logs?20:05
zoopsterresno: doubt it...you may want to look at something like analog which is a really configurable log parser20:05
resnoi feel stupid. where are logs kept then?20:06
zoopsterresno: heh...pretty much...it's claim to fame is the slick format it outputs20:06
zoopsterresno: and the fact that it is blazingly fast20:06
=== ircd is now known as samferry
resnozoopster: so where can I find the logs then?20:07
zoopsterresno: /var/log/apache2 or whereever you configured it to be20:08
resnoah thanks. that answers that most embarising question20:08
KillMeNowresno20:08
zoopsterresno: no worries...read the conf files...tells you everything you need to know...in most cases20:09
KillMeNowif you set a specific log file location in the virtual host block, it could be /var/log/apache/path to logs20:09
KillMeNowbut if you left it default it will be in /var/log/apache220:09
KillMeNowwhat are you trying to get out of webalizer?20:09
resnoi was looking for stats that webalizer wasnt showing. i always thought webalizer was recording and making the stats. but now i get its on a parser. LOL20:13
=== jcastro_ is now known as jcastro
resnowhere can i find the conf files for apache?20:40
cemcresno: /etc/apache220:41
funkyHatCan anyone see why apache might be ignoring this virtual host file? http://pastebin.com/fac87955 :(20:43
funkyHat(yes, it is in sites-enabled)20:43
=== KillMeNow is now known as KillMeNow[A]
* KillMeNow[A] is now away - Reason : Off for a while20:44
funkyHatAll of the other virtual host files work fine20:45
=== RoAk is now known as RoAkSoAx
resnocemc: is there any reason a virutal server could have it somewhere else? i dont even see an apache folder :(20:45
cemcresno: what release are you on? is it apache or apache? AFAIK it's in /etc/apache220:46
cemcvirtual server?20:46
resnothis is a dumb question. would centos put them in the same locatino?20:49
cemcno, centos has /etc/httpd20:50
resnowhere can i find out what these folders mean?20:50
resnoor whats in them?20:50
cemcyou look in them? :)20:50
resnoheh, no i mean. like etc, var, or usr20:51
cemcoh20:51
cemchttp://en.wikipedia.org/wiki/Linux_Standard_Base20:52
cemctake a look at this, I think20:52
jmedinahttp://pathname.com/fhs20:52
resnomany thanks.20:53
resnois there such a thing as a virtual server? for instance running multiple sites from one server?20:53
cemcyeah, what he said20:53
ragsIs it possible to have multiple SPD entries in ip-sec.conf file? sepcifyig diff n/w but same tunnel??21:08
uvirtbotNew bug: #400115 in dovecot (main) "package dovecot-pop3d None [modified: /var/lib/dpkg/info/dovecot-pop3d.list] failed to install/upgrade: dependency problems - leaving unconfigured" [Undecided,New] https://launchpad.net/bugs/40011521:11
A|ianyone tried installing mysql 5.1 on hardy?21:23
=== bc_ is now known as bc
uvirtbotNew bug: #396202 in sqlalchemy (universe) "exception from sqlalchemy" [Undecided,New] https://launchpad.net/bugs/39620222:06
uvirtbotNew bug: #400876 in openssh (main) "openssh-server honors .hushlogin but doesn't tell PAM" [Undecided,New] https://launchpad.net/bugs/40087622:06
bdelin88is it possible to create a Terminal Server on an ubuntu machine that can all windows clients to use Remote Desktop to access computers connected to the Terminal Server.  I would like to set it up so that a computer on the internet could connect to a windows client connected to the terminal server22:26
osmosishow can I tell which drives are paired in a linux software raid 10?  http://dpaste.com/68345/23:00
uvirtbotNew bug: #400785 in openldap (main) "package slapd 2.4.11-0ubuntu6.1 failed to install/upgrade: " [Undecided,New] https://launchpad.net/bugs/40078523:52

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!