/srv/irclogs.ubuntu.com/2009/08/18/#ubuntu-server.txt

psi-jackIs there an equivalent to linux-igd for ubuntu 9.04?00:12
clusty<HellMind> #debian guys are punks00:18
clustywell they are more knowledgeable than ubuntu ppl00:18
clustyprobalem is that they think debian>> ubuntu and look down at us00:18
KillMeNowkeep up the flattery, i'm sure it'll help00:19
psi-jackclusty: Sometimes.00:19
clustyi know that ass kissing works awesome00:19
clustyand i do it as much as my lungs can handle :D00:19
clustyKillMeNow, btw, still no luck with DNS-ing00:20
clustyKillMeNow, part 1 of the guide you gave me: http://www.cahilig.org/how-setup-lan-dns-server-using-bind9-under-debian-and-ubuntu-linux00:20
clustyKillMeNow, thing is I want my main machine to be called "algorithmica" so I substitued all over the zone files00:20
clustyand it still cannot find my domain called debian.lan00:21
clustypfff need to fight another day with this issue00:21
psi-jackOkay..00:21
psi-jackOdd..00:21
clustything is it seems all jibberish to me (the zone files)00:21
clustythey do not make a whole lotta sense00:21
clustyohh also my net is : 192.168.0.xxx so i changed it accordingly00:22
psi-jackSo, packages.ubuntu.com says 9.04 (Jaunty) has linux-igd in universe, I checked my apt.sources, and universe was enabled by default, but it's not there.00:23
* psi-jack snaps his fingers..00:23
psi-jackahhh, I forgot, it's eBox 1.2, from 8.04.200:23
KillMeNowhttp://www.cahilig.org/debian-and-ubuntu-ddns-bind9-and-dhcp00:24
KillMeNowthat is the one i sent i do believe00:24
KillMeNowyou wanted to hvae a local DHCP server push updates to DNS00:24
KillMeNowjust like Microsoft does with their DHCP to DNS00:24
clustyKillMeNow, well they said in first sentence that this is building on the link i sent you00:25
psi-jackCrap!00:25
KillMeNowgotcha00:25
clustyKillMeNow, that is a minimal check that the system works00:25
psi-jacklinux-igd isn't even available for 8.04-hardy00:25
KillMeNowyea, so you set up your DNS server and it's not working?00:26
clustyKillMeNow, correct :(00:26
uvirtbot`New bug: #414986 in open-iscsi (main) "open-iscsi causes FTBFS for anything that Build-Depends on it" [High,Triaged] https://launchpad.net/bugs/41498600:26
clustyKillMeNow, i must be doing somethign seriously wrong00:26
clustyKillMeNow, any difference since i am running 8.04?00:27
KillMeNownot particularly00:28
clustyKillMeNow, thanks for help. will try tomorrow with a fresh head00:28
clustywill screw up the whole office network so ppl will hate me :D00:29
KillMeNowrightous00:30
KillMeNowhate is gud00:30
KillMeNowbiggest thing is, debian.lan is the domain name they are using00:31
clustytomorrow is hate thy sys admin day :D00:31
KillMeNowif you have a internal domain name, and other machines are using this box to resolve, then you need to put that domain name in to the zone00:31
clustyKillMeNow, there is no domain really00:31
clustyKillMeNow, another example suggested dyn.example.com00:31
clustywhich was used till now00:32
KillMeNowit sets up the reverse zone as well as the main zone00:32
KillMeNowyea, but is that the name of the internal domain you're using?00:32
clustyprobably i screwed up the zone file00:32
clustywell you swamped me :D00:32
clustyi did not spcify any domain before00:33
KillMeNowwell that is why they are using debian.lan00:33
KillMeNowit can be any name00:33
KillMeNowit could be anything.local00:33
KillMeNowas long as you specify that is the zone it is authoriative for00:34
clustyi figured as much00:34
clustyanother thing: i could not check the validity of zone files i created00:34
KillMeNowso if your work domain is say:  prince.corp00:34
KillMeNowyour DNS server had better have a prince.corp zone file00:35
clustythey gave some tool, which is missing some files00:35
KillMeNowvalidity?00:35
KillMeNowyou mean that the configuration is correct?00:35
clustythey say to do a : named-checkzone convergence.lan /etc/bind/zones/db.convergence.lan00:35
clustybut i am missing those files00:35
KillMeNowthen you named it in your named.conf.local00:35
KillMeNowdid you copy / paste from the website?00:36
clustyyeap :D00:36
clustyapart from zone files00:36
clustywhich i doctored00:36
clustyto fit my main machine name and ip class00:36
KillMeNowhttp://tldp.org/HOWTO/DNS-HOWTO-5.html00:38
KillMeNowbrush up on how DNS works00:38
KillMeNowhttp://www.google.com/cse?cx=017644269519104757279%3Agm62gtzaoky&q=Bind9&sa=go00:38
KillMeNowif you want a bunch of stuff on DNS and Bind900:39
clustyKillMeNow, thnaks. you're the man00:41
clusty...or woman :d00:41
KillMeNowman00:41
clustythoguht so00:41
clustylinux gals are a rare and precious comodity00:42
clusty:D00:42
KillMeNowfraid so00:42
Kamilionbut gaining.00:42
KillMeNowyes, now if i could only meet one IRL00:43
Kamilionunfortunately, most of them are in the older-than-young-adult category.00:43
KamilionTechnically, my grandmother's a linux gal, as her desktop email-station runs 8.10 ;)00:44
clustyactually one GF was a linuxoid00:46
clustynot even fat and zitty :D00:46
clustyand not even computer science, but bio00:47
clusty:d00:47
clustymiracle really00:47
HellMindwhere should I store a pid file?00:47
clusty...and then she left to save the rain forest00:47
* clusty sighs00:47
clustyHellMind, /var/run ?00:47
clustyis that not the standard spot?00:47
HellMindyep :D00:49
HellMindty00:49
HellMindwho want to see my init script ?01:36
HellMindjust see it http://pastebin.com/m13bab64201:39
KillMeNowvery nice01:43
HellMindI know, why ppl dont do thing like that :(01:43
Q-FUNKHowdy!  Would anyone be available to comment on bug #194140 ?02:53
uvirtbot`Launchpad bug 194140 in cyrus-sasl2 "Dependency cycle prevents upgrade of libsasl2-2" [Low,Incomplete] https://launchpad.net/bugs/19414002:53
psi-jackAlrighty then.03:00
psi-jackTime to setup the ldap client. ;)03:00
psi-jack!find ldapsearch03:59
ubottuFile ldapsearch found in caudium, kdepimlibs5-dev, ldap-utils, libnet-ldap-perl, nessus-plugins (and 2 others)03:59
psi-jack!find psql04:56
ubottuFound: libqt3-mt-psql, libqt4-sql-psql04:56
psi-jackUgh04:56
jmarsdenpsi-jack: You'd probably get more useful results using   apt-cache search psql06:19
chrisellisHey guys... I've tried several times to make a sub domain and i can't get it to work06:21
firecrotchchrisellis: I can help!06:21
chrisellisfirecrotch: awesome06:22
chriselliswhat i did was create an A record and pointing to my IP address and then created a virtual server with that name06:22
chrisellisfirecrotch: is that how you do i t?06:23
firecrotchchrisellis: you're on the right track06:23
chriselliswhat am i doing wrong ?06:24
firecrotchchrisellis: you created the new virtual server in /etc/apache2/sites-available?06:24
chrisellisyes06:24
firecrotchchrisellis: Did you then run sudo a2ensite thenameofthefile ?06:24
chriselliswait no i created the .conf file in sites-enabled06:24
firecrotchOk, can you pastebin that file and your 000-default file?06:25
chrisellisi have a default-ssl file and my primary longhornpcrepair.com.cof06:25
chrisellisconf06:25
firecrotchchrisellis: do you get an error when you restart apache?06:26
chrisellisoh wait06:26
chrisellisi never restarted it06:26
chriselliswoops06:26
firecrotchchrisellis: that *might* help ;)06:27
chrisellisk let me restart it06:27
chrisellisk restarted it06:27
firecrotchchrisellis: does your subdomain work now?06:28
chrisellisim not sure i can't check it06:28
chrisellishttp://swot.wwmcd.org06:28
firecrotchcannot find server06:28
chrisellishmm06:29
firecrotchchrisellis: I did  dig swot.wwmcd.org  and got no answer06:29
chrisellismmk06:30
chrisellisis wwmcd.org still working06:30
chrisellisfirecrotch: here is my .conf file - http://pastebin.com/m3138671106:31
firecrotchchrisellis: the main domain does work, albeit slowly06:31
chrisellisthats not good06:32
firecrotchSeems to me that your DNS isn't updated06:32
chrisellisdo i need to restart bind?06:32
firecrotchYup06:33
chrisellisk06:34
chrisellisrestarted it06:34
jmarsdenIt works now, although only one "Singing Woman" is listed and the site name is plural "women" :)06:35
chrisellishaha yeah06:35
chrisellisI am just starting on the site06:35
chrisellisfake content06:35
chrisellisand let me just make sure that wwmcd.org is still working06:35
firecrotchwwmcd.org is still working, and much faster now06:36
chrisellisgreat06:37
chrisellisso it was just a restart issue06:37
chrisellisi keep forgetting to restart my servers when i add stuff i will have to make a mental note06:37
chrisellisthank you much06:38
jmarsdenYou usually don't need to restart bind,   sudo rndc reload wwwmcd.org    would probably have been enough in this case.06:39
chriselliswhat does that do?06:39
jmarsdenman rndc.  rnddc is a tool for sending commands to named06:39
jmarsdenactually it lets you do all sorts of things to your DNS server except restart it :)06:40
chrisellisahh06:41
chrisellisalright06:41
chrisellisI'm still learning how this all works06:41
chrisellisis there a script out there where i could just say the name of the domain and the directory and it creates all the files for me06:43
firecrotchchrisellis: I used to have one that I wrote, let me see if I have a copy somewhere06:43
chrisellisawesome06:44
jmarsdenWell, I have some of those that do that for me and my needs... there can't really be a generic one because what you need for each new zone is up to you and ho wyou set up security for each zone, who can query it, etc etc.06:44
chrisellisI just set up all my domains pretty standard06:45
firecrotchchrisellis: Unfortunately, I don't see the script on my server anywhere, and my backup drive is at work06:45
chrisellisoh alright06:46
firecrotchchrisellis: You could write your own :)06:46
chrisellisfirecrotch: true.. I would have to figure out how06:46
chrisellisi would love to create a php file that has a gui to it06:46
chrisellisor i mean that can give it a gui06:46
firecrotchchrisellis: I don't think that will be possible, since you have to use sudo for a lot of the stuff06:48
firecrotchchrisellis: nor would it be a good idea06:48
chrisellisyeah06:48
chriselliswell make it https and only on local network06:48
firecrotchchrisellis: I remember my script prompting me for the domain name and the directory to use06:49
chrisellisoh thats cool06:49
firecrotchchrisellis: I've always found this guide useful for bash scripting: http://www.freeos.com/guides/lsst/06:51
chrisellisawesome i will look into it06:51
firecrotchbasically, I created a template for my apache configs, and used sed to put the domain name and directory into the file06:52
jmarsdenI did the same for DNS...  See http://pastebin.com/f9acf6b0 and http://pastebin.com/f6446090a for a script and template for DNS setup for new zones... just DNS, not web server setup, because DNS and web servers are separate machines in my case at work :)06:53
chrisellispretty fancy06:55
jmarsdenNot compared to some of the larger scripts I use :)06:56
chrisellisI'm just getting into this linux is very fun07:00
chrisellislet me use some punctuation... I'm just getting into linux, It is very fun07:00
ballchrisellis: Linux is useful, but the people are fun ;-)07:00
chrisellisyes07:00
chrisellisfinally set up my own server and its been a challenge and very fun07:01
chrisellisi can't wait to buy another and set it up07:01
ballI'll be right back07:03
chrisellisis there an advantage to getting one of those servers at a server farm ?07:03
jmarsdenReliability, and less noise from server fans in your bedroom or living room or office :)07:04
jmarsdenBTw the script for DNS is at http://pastebin.com/f6f861a3607:04
jmarsdenApparently I posted the template file twice earlier :)07:04
ballchrisellis: what will you use your Ubuntu server for?07:06
chrisellisball: the one i have now is for my websites and my clients websites07:06
chrisellismostly all my sites a php and mysql07:07
ballAre you using virtualisation?07:07
ball...or do they all live within one OS instance?07:08
chrisellisI'm using virtual servers07:08
ballWhat are you using as a hypervisor?  KVM?07:08
chrisellisapache207:09
ballapache2 is not a hypervisor07:09
jmarsdenI think chrisellis is confusing cirtual hosts and virtualization :)07:09
ballAh, okay.07:09
chrisellishaha yeah07:09
chrisellisim a noob07:09
jmarsdenchrisellis: Virtualization is running multiple OSes "inside" another one.  With tools like KVM or virtualbox or vmware server07:10
chrisellisoo07:10
chrisellisno i just have ubuntu running on a dell poweredge 175007:10
chrisellisand just ssh into it ?07:12
ballIt's a while since I looked at Dell Servers... is that a tower or rack mount?07:12
qman__you're running a single OS, using apache virtualhosts07:13
chrisellisits a rack07:13
chrisellisk i am running one OS07:13
ballI used to work with a 1U PowerEdge and that thing was *loud*07:13
chrisellishaha yeah07:13
ball...it was adequate though.07:13
chrisellisits a 1u07:13
chrisellisand its in the closet cause its sooo loud07:14
chrisellisdon't worry there is an air condition vent in there07:14
chrisellisi want to get a poweredge 665007:14
qman__those cooling systems are designed to deal with much worse than just a closet :)07:14
qman__I've got two servers in my closet, though they're towers, not rackmounts07:15
ballI would like a server with a matched pair of Shanghai chips in it, but short of winning the lottery, that's unlikely to happen.07:15
chriselliswho makes the best servers?07:16
qman__one's an athlon 64 3500+, the other's a sempron 6407:16
chrisellisI've just been looking at dells cause i live in austin and they are easy to find07:17
jmarsdenchrisellis: "Best" at any price?  And you have the space and power and cooling?  IBM zSeries mainframes, probably :) But "best" is very subjective.07:17
chrisellisor round rock i mean07:17
ballchrisellis: IBM and HP seem to make some credible gear.  Sun make some that's probably good for certain applications.07:17
ball...I wouldn't mind trying a Lenovo server.07:17
balljmarsden: pSeries ftw ;-)07:17
chrisellisisn't lenovo basically IBM07:18
ballchrisellis: sort of.07:18
qman__dpm07:18
qman__don't know about their servers07:18
qman__lenovo bought IBM's division for laptops and such though07:18
chrisellisyeah07:18
qman__but IBM still makes servers, so not sure about them07:18
jmarsdenNo, Lenovo bought IBM PC designs... the IBM zSeries and pSeries stuff are much bigger machines using non-Intel noj-AMD CPUs and are very much *not* PC's at all...07:18
ballHP probably sell Itanium boxen... does anyone else?07:19
chrisellisall the servers i'm looking at are quad Xeon processors07:19
ballchrisellis: Nehalem?07:19
chrisellisball: Is that a brand?07:19
qman__nehalem is also known as i707:19
twbchrisellis: nehalem is an Intel product name07:19
ballchrisellis: *some* quad core Xeons are Nehalem chips07:20
chrisellislet me check07:20
qman__it's intel's latest and greatest processors07:20
ballit's a development codename.07:20
jmarsdenNehalem is the "code name" for a recent series of Intel CPUs.07:20
qman__they're fast, and they're expensive07:20
twbFSVO greatest ;-)07:20
ballSupposedly they have some nice power management features.07:20
twbIt's not like Intel make particularly great chips to begin with, I guess07:20
chrisellisI'm not sure ... its a dell poweredge 665007:20
balltwb: any thoughts on Shanghai?07:20
chrisellisit doesn't say in the manual07:20
twbball: I don't track that shit closely07:21
ballchrisellis: don't buy it if you can't find out.07:21
balltwb: any thoughts on Istambul? ;-)07:21
twbball: I don't track that shit closely07:21
qman__I can't afford any of that stuff, all my servers are desktop hardware07:21
twbqman__: my gear is fucking Pentium IIIs in compaq cases07:22
ballchrisellis: If you know you'll be scaling up, consider a blade chassis07:22
qman__my shell server is a 200MHz K607:22
jetsaredimis there a guide for setting up raid under ubuntu?07:22
ball...perhaps once you get past three x86 boxen07:22
twbThat's the work machines, of course.07:22
chrisellisball: well this server is only $15007:22
ballqman__: I have a 450 MHz K6-2+ box here.07:22
chrisellisand for my uses i think it would be perfect07:22
twbAt home I run everything off an Asus 500gP07:22
ballchrisellis: ah well, then you're not going to be all that fussy07:22
ballbrb07:22
qman__you get four or five SSH sessions going, and it starts to lag07:22
chrisellisyeah07:22
twbNot because I'm poor, but for the challenge07:23
qman__perfect for personal use, not useful for much else07:23
jmarsdenjetsaredim: See https://help.ubuntu.com/9.04/serverguide/C/advanced-installation.html for software RAID07:24
chrisellisI know that the 6650 chips have hyper-threading07:24
qman__HT means they're either pretty old, or the new nehalems07:25
chrisellisi dont think the 6650's are new07:25
chrisellismaybe 2006-200707:25
chrisellisbut again its only $150.0007:25
qman__that's not bad07:25
chrisellisyeah quad 2.2GHZ 3x73GB 10K07:26
twbI wasn't impressed by HT in the P4s07:26
qman__that's a nice machine for so little07:26
qman__probably eats up a lot of power though07:26
chrisellisits got 2x900 Watt Power supplies07:27
twbGimme SATA's larger capacities for most shit, though07:27
firecrotchP4 HT was crap07:27
twbfirecrotch: is nehalem's any better?07:27
chrisellisso hearing that they are 2 900watt power supplies i bet that things loud as crap07:27
qman__HT isn't useful on one core07:27
qman__but when you throw in 4+, it begins to show worth07:27
firecrotchtwb: it's lightyears beyond P4's07:27
qman__but only in certain applications07:27
twbqman__: why?07:27
twbqman__: my understanding of HT was that the number of cores wasn't relevant07:28
qman__HT doubles your cores effectively07:28
twbqman__: bullshit07:28
sorenqman__: Err.. It really, really doesn't.07:28
qman__but on the original P4 implementation, the way it worked, a runaway process would still hang your box07:28
twbhttp://en.wikipedia.org/wiki/Simultaneous_multithreading07:29
chrisellisso in theory 1 HT processor is 2 ?07:29
qman__well, it doesn't double them without consequence07:29
twbchrisellis: FSVO theory = marketing07:29
qman__it provides more cores at reduced performance per core07:29
qman__to the software07:29
qman__so it really depends on what software you run07:29
qman__but the new HT is far more useful than the original07:29
jetsaredimin what package would i be able to find mkraid?07:29
* ball nods07:29
ballHyperthreading is snake oil, at least on x86]07:30
twb"RMI, a Cupertino-based startup, is the first MIPS vendor to provide a processor SOC based on 8 cores, each of which runs 4 threads."07:30
twb32 threads on a soc?  I'd like to see Intel do that07:30
sorenjetsaredim: mkraid?07:30
ballsoren!07:31
qman__jetsaredim, you probably shouldn't be using mkraid, you should use mdadm instead07:31
chrisellisIf i already have a server thats a dual 2.8 would there be a point in running another server or just replacing that one07:31
jetsaredimqman__: ok07:31
chrisellisi mean for my needs at least07:31
ballchrisellis: look at your utilisation07:31
qman__that depends on your needs07:31
qman__if what you have is doing the job with a little performance to spare, I wouldn't bother upgrading it07:32
ballLook at your upgrade path *before* the load becomes very high and the users start to suffer.07:32
twbball: if ANYTHING works, leave that thing the fuck alone :-)07:32
qman__web servers are an interesting thing07:32
chrisellisi just don't want to pass up a great deal like this07:32
qman__because it depends entirely on the nature of your sites07:32
qman__if you're using complex scripts and SSL, you need a lot of CPU power07:33
balltwb: Right, but if it's a production server you'll want another machine anyway.07:33
qman__if you're just serving static pages, not so much07:33
chrisellisright now i am using 0.00, 0.00, 0.00 cpu load average and 1.97GB Real memory07:33
jmarsdenchrisellis: There will almost always be a better deal in a few months.... available general purpose computers get better, faster and cheaper over time.07:33
qman__it is a great deal, but if you don't need it, you'll just be increasing your electric bill for no good reason07:33
jetsaredimqman__: will mdadm automatically save the setup for next boot?07:33
ballchrisellis: do you have another machine synced with that, to take over when that one fails?07:34
jmarsdenIf you have 0 load avg you do not need more cores :)07:34
chrisellisno thats why i kinda want to get another one07:34
qman__jetsaredim, you have to save the mdadm.conf and set up your fstab07:34
qman__the howto should go through that, if it's the one I think it is07:34
qman__you can always manually reassemble an array07:35
jetsaredimnot sure which howto you might be talking about?07:36
qman__http://tldp.org/HOWTO/Software-RAID-HOWTO.html07:36
jetsaredimyea07:36
chrisellisBut what you said about the power bill ... 2x900watt power supplies plus whatever that 1750 is doing ... might kill me07:36
qman__yeah, it's a good deal if you need the CPU power, but it's going to be pretty costly to run07:37
qman__AMD's biggest marketing ploy is that opterons are more power efficient than xeons07:37
ballchrisellis: just because you have 900W PSUs, doesn't mean your server is going to be burning 900 Watts.07:38
chrisellisball: oh well thats good to know07:38
qman__yeah07:38
qman__that's just the max capacity07:38
qman__and also, it's likely that they're redundant07:38
ballchrisellis: but choose your CPU and disk drives with care.07:38
qman__meaning that the machine is not designed to use more than 900 watts07:38
qman__however, it could still be pretty expensive to run07:38
qman__look into the TDP of the processors07:39
jetsaredimqman__: trying to figure out how to specify that a given drive is a spare in a raid 5 setup07:39
ball...and make sure they can do Cool-n-Quiet (AMD) or SpeedStep (Intel)07:39
ball...that those things are enabled too.07:39
ball...and 15k drives may be fast, but they also run hot.07:40
ballAlright, I really am going to bed now.07:40
ballGoodnight everyone.07:40
ballI shall dream of a new server, with 2.5" disk drives and stone cold microprocessors.07:41
twb2.5 so they fail faster?07:41
=== lionel_ is now known as lionel
qman__jetsaredim, http://prefetch.net/blog/index.php/2007/03/11/adding-a-hot-spare-to-an-md-device/07:41
qman__yeah, I am not a fan of 2.5" hard drives07:42
chrisellisalright talk to you later07:42
qman__too slow and too fragile07:44
sorenqman__: You know that many SAS drives are 2.5", right?07:46
qman__nope, though fast and fragile isn't much better07:47
qman__I like my nice, cool 3.5" SATA drives07:48
twbI think what I like most about my 3.5" SATA drives is their commoditory nature (i.e. cost per byte).07:49
qman__yeah07:50
qman__RAID a bunch of them together, and you have a reasonably fast filesystem07:51
firecrotchI'll stick with my 5.25" drives, tyvm07:51
jetsaredimjust got 5x wd black 750G for 65 per07:52
twbAUD 0.11 / megabyte for 1.5TB seagate sata 3.507:55
jetsaredim$0.0866 for the wd drives - they were the deal of the day last week one day07:56
twbNothing that good on msy.com.au, as at 2009-07-2308:00
twbProbably I should take a new snapshot08:00
jetsaredimyea - it was a daily deal last week on newegg08:00
jetsaredimhow does one re-activate a "stopped" md device?08:01
qman__probably mdadm --assemble08:02
jetsaredimnot identified in config file08:02
qman__without a config set up you'd have to specify the devices to use08:06
qman__syntax would be08:08
qman__mdadm --assemble /dev/md? /dev/sd? /dev/sd? /dev/sd?08:09
qman__replacing ? with the appropriate devices, of course08:09
jetsaredimhrm08:09
jetsaredimdevice or resource busy08:09
jetsaredimi'll just reinstall again08:11
jetsaredimjust setting it up again08:11
jetsaredimso when saving the config08:12
jetsaredimwould be something like mdadm --detail --scan --verbose > /etc/mdadm.conf08:12
qman__yes08:12
jetsaredimbut maybe /etc/mdadm/mdadm.conf08:12
qman__I can't remember exactly but that's the idea08:12
qman__yes, the second is the correct file08:12
jetsaredimshould it be appended or overwritten?08:12
qman__appended08:13
jetsaredimok cool08:13
jetsaredimthanks for the assistance08:13
qman__no problem, sorry you have to start over08:14
jetsaredimi'm just starting out with it08:14
jetsaredimhave an existing file server running on a hodgepodge of ide disks08:14
jetsaredimand upgrading to a new system i just built using the 5x 750 wd black drives08:14
jetsaredimtrying to setup raid 508:14
jetsaredimfor media/backups/fault tolerance/etc08:15
qman__yeah08:15
jetsaredimlots of mp3s, tv shows, my kids dvds08:15
jetsaredimdigital pics etc08:15
qman__I did pretty much the same thing with mine, took a few days to get it set up the way I wanted08:15
jetsaredimyea08:15
jetsaredimtook me about a month to find the right parts i wanted08:15
qman__but it's worth the effort08:15
jetsaredimso it's not like i'm in any huge rush08:16
qman__and in the event of a system crash, you can still reassemble the array from a live CD08:16
jetsaredimyea08:16
jetsaredimwell08:16
jetsaredimi was going to use 4 active drives and have the 5th for spare08:16
jetsaredimsince i got them so relatively cheap08:16
qman__I started mine with 6 disks, and added 2 later08:16
jetsaredimah08:17
qman__it's almost full again though, I'm going to have to get bigger disks and make a new array08:17
jetsaredimonly 6 sata connectors at the moment on the mobo08:17
jetsaredimmy case has enough bays for 11 drives08:17
jetsaredimso i'm set for expansion08:17
jetsaredimoddly enough the case was the one thing i had when i started the project08:18
jetsaredimheh08:18
qman__I've got room for 4 more, so I figure once 2TB drives get reliable and down in price, I'll create a new array with four of those, move the data, then add more 2TB disks08:18
jetsaredimyea08:18
jetsaredimthough08:18
jetsaredimwith the higher capacity disks there is greater likelihood of fault08:19
qman__yeah, I'd do raid 6 with them08:19
jetsaredimah08:19
qman__right now I have raid 5, using 500GB disks08:19
jetsaredimsounds like fun08:19
qman__so I've got about 3.3TB of space08:19
jetsaredimthat would be enough to tide me over for a while08:20
qman__one thing I didn't realize when I started08:20
qman__is that I already had enough data to fill more than half of it08:20
jetsaredimheh08:20
qman__once I got all my stuff off the various desktops around08:20
jetsaredimI'm getting there08:20
jetsaredimi have a 500G drive that's completely full08:21
jetsaredimplus a bunch of stuff on other random places08:21
jetsaredimi'd say i have about 100 movies08:21
jetsaredimplus about 400G of tv shows08:22
jetsaredimi need to go through them and get rid of some08:22
qman__I have about 300GB left08:22
qman__I can probably clean up about 150GB of unnecessary stuff08:22
qman__but at the rate things are going I'll be full by next year08:23
jetsaredimyea08:23
jetsaredimit goes fast08:23
jetsaredimespecially if you use it08:23
jetsaredimanyway well - thanks again08:24
qman__yeah, no problem08:24
jetsaredimi may come back with more questions at some point tomorrow when i try again08:24
qman__that linux raid howto is the best resource for it08:24
qman__despite how old it is08:24
jetsaredimmaybe i'll give karmic a go08:24
jetsaredimactually - i found something from the forums that's decent08:24
qman__cool08:25
jetsaredimok later08:26
uvirtbot`New bug: #415224 in samba (main) "package samba 2:3.3.2-1ubuntu3.1 failed to install/upgrade: subprocess post-installation script returned error exit status 139" [Undecided,New] https://launchpad.net/bugs/41522408:41
acalvoanyone here using postfix+dovecot (and LDAP as backend)?08:53
stochasticcan anyone tell me how to prevent my external USB drive from Auto-mounting when I plug it in?08:54
neggemy /var/mail/<user> has stopped growing since about 6 months back. Has there been an update to the system that changes the location of the mail file or what is going on? I doubt cron haven't had anything to say for that long.08:58
CopyWriterhello all09:12
CopyWritertoday's question :) - i installed 2 network cards into a ubuntu server lts 8:04, configured the eth0 with dhcp and connected it to my adsl modem (can ping google, did updates etc) configured eth1 with static 192.168.1.1 that plugs into a wireless router, other clients will connect to the wireless network fine, but get no internet09:15
CopyWriteroh and eth1 also has a dhcp server configured on it also09:15
=== obstriege is now known as obst
CopyWriterso it handles assigning addresses09:15
CopyWriterdisabled dhcp on the wireless router, but then the clients couldn't connect to it09:16
CopyWriterwhen i open a browser it just stays at connecting and then nada09:16
CopyWriteri'm thinking to just plug the router into a lan port on the wireless router, but then that would entirely defeat the purpose of having the server act as a firewall09:18
CopyWriter!dhcp09:18
ubottudhcp is Dynamic Host Configuration Protocol, a protocol for automatic IP assignment from a router. Ubuntu uses dhclient as a DHCP client but other ones (and DHCP servers too) can be obtained from the !repos. More info at http://en.wikipedia.org/wiki/DHCP09:18
stefan____what is the gateway for the wireless router09:18
stefan____?09:18
stefan____must be eth1s  ip address09:19
CopyWriter192.168.1.109:19
stefan____and that is the ip of the eth1 nic card ?09:19
CopyWriteryep09:19
stefan____do you have your 804 server configured as a router ?09:20
CopyWriteri'm not sure09:20
CopyWriteri don't think so09:20
stefan____that is way it is not working09:20
CopyWriterhow do i do that09:20
stefan____http://unixfoo.blogspot.com/2008/02/how-to-configure-linux-machine-as.html09:20
CopyWriteri knew it was something i was missing09:20
stefan____enable ip_forward09:21
CopyWriterthanks stefan09:22
stefan____no probs CopyWriter09:22
CopyWriteri'll try that at the office, i woke up early to research the problem it's 4:22 now, will most likely still have time to get some shut eye before work09:23
stefan____it is good you woke up early then :)09:23
acalvois it possible that the openssh server has some kind of timeout session?10:26
acalvoI'm finding that if I ssh one server and do not run any command for a large period (say 15min) it gets blocked10:26
acalvomaybe the connection was killed?10:26
_rubenmost likely a connection tracking issue of one routers/firewalls in between10:35
acalvo_ruben: but it does not makes sense10:36
_rubenwhy not?10:36
acalvosince if I log in thru ssh and starting working, it does not get killed the connection10:36
acalvoonly after a period10:36
_rubenso you're experiencing a timeout somewhere, a fairly common one is a busted connection tracking along the way10:37
acalvooh, I see10:38
acalvomaybe you're right10:38
andolttx: Regarding bug #334374, aside from having ldap-auth-config as an explicit Recommend, do you agree with the change otherwise?11:04
uvirtbotLaunchpad bug 334374 in libnss-ldap "libnss-ldap should not depend on libpam-ldap" [Medium,Confirmed] https://launchpad.net/bugs/33437411:04
ttxandol: I was wondering what was the best way to fix it, given that other related bug. Wanted to ping mathiaz/dendrobates about it since they authored the original design11:05
andolttx: Thinking of bug #11:36 < acalvo> _ruben: but it does not makes sense11:06
uvirtbotLaunchpad bug 11 in rosetta "Rosetta says there are untranslated strings, but it isn't" [Medium,Fix released] https://launchpad.net/bugs/1111:06
andolohh, bad paste there, sorry11:06
andolttx: Thinking of bug #306054 I assume?11:07
uvirtbotLaunchpad bug 306054 in ldap-auth-client "Not using LDAP for auth, please downgrade libpam-ldap to Recommends:" [Wishlist,Confirmed] https://launchpad.net/bugs/30605411:07
ttxyes11:07
ttxboth are about the current design not allowing some specific setups11:07
ttxDowngrading a depends to a recommends would fix it, I'm just unsure which depend should be converted :)11:08
ttxYour solution would not fix 306054.11:08
andolttx: Yeah, been thinking about that one too, but haven't really used ldap-auth{config,client} enough to have an an actual opinon on those.11:08
andolttx: No, it wouldn't. Nevertheless I don't think ldap-auth-config should be a hard dependency to libnss-ldap. You can very well use that lib without any extra configuration utility.11:10
ttxtrue, the design was done at a time where recommends would not get installed, so it needs to be salted with some recommends to allow better flexibility.11:11
andolttx: Which is basically the solution I suggest, especially if we add -auth-config as an explicit recommend. I belive that's a good change, no matter what.11:12
andolttx: Still, I guess there is no hurry, if we anyway should solve the whole situation.11:12
ttxandol: ok11:13
andolttx: So, what's the plan now? Try getting some input from matiaz and/or dendrobates?11:14
ttxandol: yes, I'll ask them to have a look and comment, then if they are ok with your debdiff, I'll uplaod it11:14
ttxupload it, even11:15
andolttx: Does that mean I should add a new debdiff, with auth-recommends listed under Recommends as well?11:15
ttxandol: doesn't hurt to prepare it, yes :)11:16
andolttx: Being a rather easy change I'll create a new one when I get off from work.11:17
andolWork is by the way something I probably should return to now.11:17
ttxandol: makes sense :)11:18
sebrockI just installed a vncserver on a headless ubuntu 9.04 server11:40
sebrockWhen I connect to it all I see is the X11 desktop, I cannot start a terminal or anything... how do I do that?11:41
_rubeninstall the desktop edition instead? :)11:41
sebrockuh nope no good11:42
sebrockI want to keep the installs at a minimum11:42
sebrockgot the mouse ans everything, just no terminal11:42
sebrockso I can't start anything really11:43
_rubenperhaps you have no terminal program installed11:43
ograinstall a minimal window manager11:43
sebrockShould it really be necessary to install a window manager?11:44
ograopenbox or fluxbox11:44
sebrockvncserver acts as a window manager11:44
ograhuh ?11:44
_rubenvncserver a wm??11:44
sebrockit installs X11 libs11:44
ogravnc server acts as an X server11:44
_rubenits an X server, not a wm11:44
sebrockI heard a wm should not be needed11:45
ograwhy do you use vnc at all ? as i understand you you just want to be able to run a terminal, using ssh should provide you with that11:46
ograyou just add useless overhead11:46
dorvan83hi to all11:47
sebrockogra, it's for a mytht-backend11:47
dorvan83i have a problem with /dev/random.... seems doesn't work...11:48
sebrockLast time X-forward did not work very well with the initil setup11:48
_rubendorvan83: you probably lack entropy .. which is a nasty problem .. i run into it every now and then on mostly idle systems11:49
dorvan83_ruben: yes i this this too, but entropy pool in kernel is 4096 and i'm trying different keygen executebles, have problem to generate a 1024 key from /dev/random11:51
_rubendorvan83: its total size is probably 4096, yet empty (so 4096 of nothingness)11:52
dorvan83_ruben: but if i launch a dd if=/dev/random of=/root/text.txt and after some time i stop it..11:52
dorvan83_ruben:  the results from dd statistics is zero11:52
_rubenwhich indicates lack of entropy11:52
_rubenthere are some tricks to increase entropy to be found on the 'net, but i never found one that actualy worked well11:53
dorvan83_ruben:  but if i make the same with "urandom" dd print something11:53
_rubenbecause urandom is less "secure" than random11:53
dorvan83_ruben: i'm using ubuntu server 9.04 in which way i can solve this, to try?11:54
dorvan83_ruben: some doc on the net suggest to remove rando and make an alis to urandom named random11:57
_rubenhttp://stupefydeveloper.blogspot.com/2007/12/random-vs-urandom.html .. little post on the differences between random and urandom .. as for increasing entropy itself, google, tho like i said, i dont recall ever being able to increase the entropy on a "problematic" box11:57
dorvan83_ruben: but sound stupid...11:57
_rubenthat'd work as a temp work around11:57
_rubenand it depends on how much you care about "real" randomness11:58
_rubenif a certain box lacks enough entropy for a given task, i run the task on another box which does have enough entropy .. when possible that is11:58
MatBoy_ruben: do you still live ?12:12
sebrockyup, vncserver should start twm, so it includes a wm12:15
sebrockI see it should also start a terminal by default12:17
sebrockFYI all I had to do was to add the full path to xterm in the xstartup file12:35
sebrockworks now12:35
garymcHi people, do i need an antivirus software on my ubuntu server? if so which one and does it cost anything?12:40
pmatulisgarymc: no a/v s/w necessary12:43
garymcs/w?12:49
pmatulissoftware12:50
garymcahh :S12:51
pmatulisgarymc: what kind of server are you talking about anyway?12:51
ivoksttx: here?12:51
ttxivoks: yes12:51
garymcim using an LTSP setup12:51
pmatulisok, an LTSP server12:51
ivoksttx: regarding the corosync sync12:51
garymcive got 3 servers, trying to use two of them right now12:51
garymcIm gonna put Astlinux on one of them12:52
ttxivoks: yes12:52
ivoksttx: my laptop died couple of days ago, so it's kind of pain to do anythnig now using my phone12:52
garymcand try to link it through so each ltsp user has a phone too12:52
ttxhehe12:52
ivoksttx: so, i'll be finishing my vacation tomorrow and should be able to fix those things  day after tomottow12:53
ivokstomorrow12:53
ttxivoks: works for me, I'm mostly concerned by the NBS12:53
ivoksnbs?12:53
ttxthe library transition12:53
ivoksah.12:53
ivoksrhcs will need rebuild12:53
ivoksacctualy, new version12:54
ivoksand12:54
ivoksbut we need to sync corosync first12:54
ivoksthen we will sync openais12:54
ivoksand new pacemaker and new rhcs12:54
ivokscorosync is first step12:55
ivoksopenais second12:55
ivokseverything except rhcs is in the ppa i mentioned in the bug12:56
ivoksi couldn't finish rhcs cause my thinpad died... £%$&*£"!12:56
ivoks... and i won't be at the meeting today for the same reason...12:57
ttxivoks: There is no laptop reparirman on your beach ?12:58
ivoksno :/12:58
garymcpmatulis: do you know if i can do this?12:58
garymcpmatulis: setup a separate server with astlinux on ubuntu then link it to my ltsp clients and giv them a phone each?12:59
pmatulisgarymc: best ask on #ltsp12:59
ivoksttx: oh, and we can't sync from experimental since that version isn't there yet12:59
ttxit is now12:59
ttxivoks: since Aug 1513:00
ivokseh... i couldn't know that :/13:00
ivoksdoes it has all my changes?13:00
ivokshave13:01
ivoksi hate lenovo :/13:01
_rubenMatBoy: nah :)13:02
ivoksanyway, i'll be back in 48 hours... take care13:02
dorvan83ivoks: i'm using your last released packages on launchpad for ubuntu for corosync and pacemaker. Yesterday night sdake of #linux-cluster have bypassed an issue with corosync-keygen binary, but there are other problems with system entropy.13:53
ttxdorvan83: he is no longer in-channel. You should send an email to him.13:55
dorvan83ah, ok13:55
dorvan83where i can get it?13:55
dorvan83from whois command?13:55
dorvan83i can't see13:57
dorvan83ttx: have you suggestion for increase system entropy?13:57
dorvan83i found this:http://ubuntumagnet.com/2007/11/creating-more-entropy-linux-kernel-virtualized-environment13:58
ttxdorvan83: see pm14:00
dorvan83ttx: pm?14:03
ttxdorvan83: I just sent you the email address by Private Message (pm)14:05
dorvan83ooppss sorry... that pm aaaaaaaaaaaaahhhhh14:07
dorvan83ttx: thanks, sorry but i'm in remote console on irssi.14:08
smosersoren, would it make sense to allow the user to provide the ssh host keys for a new instance (in user-data or something).. they could run ssh-keygen the system that started the instance and send them over to the new instance, rather than trying to verify by scraping console output (which sometimes doesn't work)14:10
sorensmoser: i thought about it, but I think it's a bad idea. The user-data is not protected, so if someone finds a way to query your meta-data, they get your ssh host private key, and that would be bad news.14:11
smoserthis is true14:12
smoserobviously, that info (the private key) is also in /etc/ssh14:12
smoserbut there it is file system permissions protected14:12
smoseri think you might have mentioned before the possibility of locking up (via iptables) the user data14:13
smoserafter it is used.  perhaps crawl it, store it in /var/run/ec2-user data with secure filesystem permissions and then deny access to 169.254.169.254:8014:14
smosersoren, ^ (no hurry, just so you see it)14:15
sorensmoser: Hm. Interesting idea. That could work, I guess.14:16
=== magnetic_ is now known as foolano
=== nick125_ is now known as nick125
rayno_bHi there, I need to forward port 3840 to a specific IP address on the network (this should happen from internal).  Can someone here please assist me to get that to work?16:01
PhotoJim_there are lots of ways of doing that.16:01
PhotoJim_I use shorewall.  /etc/shorewall/rules has the configuration.16:02
rayno_bIf I use webmin could I do this with ip tables?16:02
PhotoJim_DNAT   net loc:192.168.222.13 tcp 505016:02
PhotoJim_DNAT   net loc:192.168.222.13 udp 505016:02
PhotoJim_that forwards port 5050 from my router's external IP (my router is an Ubuntu box) to that private IP on my LAN (my Slingbox in this case).16:02
giovanirayno_b: your ubuntu box is the firewall/router?16:03
rayno_bno16:03
PhotoJim_iptables can do it, but I'm not experienced in doing that.  and I don't use webmin . my router has no GUI.  better performance that way.16:03
PhotoJim_ahh.  you have to do this on your router.16:03
giovanirayno_b: then this isn't an ubuntu question -- this is a question for your router/firewall company16:03
rayno_bbut is there any way to do this on this ubuntu machine that is currently getting the request?16:03
giovanirayno_b: no ...16:04
giovaniyou need to open the port at the router/firewall16:04
rayno_blook, the port is open.16:04
giovanithe entire function of that device is to stop random traffic from entering your network -- so that's where the exception has to be made16:04
giovanirayno_b: on the router/firewall? or on the server? there's a big difference16:04
rayno_bGiovani - I know.  The port is only going to be used in the local lan, not from external to internal.16:05
PhotoJim_why do you want to do local port forwarding?16:05
giovanirayno_b: then there's nothing you need to do -- the port is open16:05
rayno_bbut16:05
PhotoJim_port forwarding is usually done as a kludge to get around NAT.  local IPs don't need to work around it.16:05
rayno_bIf the request comes to the ubuntu box on port 3840, I want that request to be processed by another machine on the network.16:05
PhotoJim_can you not direct the request to the proper machine?16:05
rayno_bYou would think - That's what I would have done, but I'm not the admin of this network.  The network admin insists that I do it this way.16:06
giovanirayno_b: there's no good solution to this16:06
PhotoJim_this is a really dumb way to do it.  no offense. :)16:06
giovaniyou need to do it the right way16:06
uvirtbotNew bug: #387257 in bacula (universe) "Bacula crashed on installation" [Medium,Invalid] https://launchpad.net/bugs/38725716:06
giovaniwhich is to send the client to the correct server16:06
giovanialso, what protocol are you using on this port?16:07
rayno_bI'm using tcp16:07
giovanino16:07
giovaniI meant application protocol16:07
rayno_bIt's an http address16:08
giovaniwell, you can issue an http redirect16:08
giovaniit's far cleaner than any kind of weird port-tunneling you want to do16:08
rayno_bokay...  but say I insist on doing this weird tunneling thing.  can you just help me to get it working please?  I understand it's not the right thing to do.16:09
giovanian HTTP 301 reply will ensure the client sends their traffic (for the entire session) to that new server16:09
giovanirayno_b: nope, sorry, I can't help do something so silly16:10
giovanimaybe someone else will16:10
rayno_bcan I explain the network admin's point of view.16:10
giovaniwell you've also decided not to use my perfectly valid solution16:11
giovanifor some unknown reason16:11
rayno_bgiovani - ok, can you help me with the HTTP 301 reply?16:11
giovanisure, set up a webserver, and configure it that way16:11
giovanilighttpd will do16:11
giovaniit's still serious overkill16:12
giovanibut at least it'll make sure you're not duplicating tons of traffic for no good reason16:12
rayno_bokay, i'll try that.  thank you.16:12
PhotoJim_that seems the most elegant solution.16:13
=== PhotoJim_ is now known as PhotoJim
giovaniPhotoJim: it still makes me cringe :)16:13
rayno_byou wouldn't do it?16:14
giovanirayno_b: I'd talk to the network admin16:14
giovaniI don't know why this is the network admin's decision anyway16:14
rayno_bokay16:14
giovaniyou don't need his permission to tell clients to access the server directly16:14
giovanihttp://redmine.lighttpd.net/projects/1/wiki/Docs:ModRedirect16:14
pmatulisrayno_b: give giovani the admin's telephone number16:15
giovanithere's the (pretty good) documentation on mod_redirect (which you'd need to use lighttpd here)16:15
giovanijust make sure to set the url.redirect-code to 30116:15
rayno_bthe thing is, the server sends 'n url link to the clients in their mailboxes and this contains the wrong address at the moment.16:15
giovaniso fix it?16:15
rayno_bthe dns name on other ports should point to the ubuntu server.  it's just this one single port that's the problem.16:16
PhotoJimyeah, that's a good point.  can you change it to give the correct address?16:16
giovanirayno_b: I don't follow you -- ports aren't related to domain names16:16
giovanidomain names map to ip addresses -- you can't specify which ports are accessible when using a given name to resolve the ip16:17
rayno_bI know I know.16:17
rayno_bThis is a special case.16:17
rayno_bFrom outside, the address somename.dyndns.org maps to the router that comes into the client's network.16:18
rayno_bFrom inside, the network administrator has mapped that name (somename.dyndns.org) to the ubuntu server that I'm administrating.16:18
rayno_bBecause all ports on that name should go to the ubuntu server, except for this one port 3840 which should go back to another address.16:18
giovaniso use a different name ...16:19
giovanifor the right server16:19
giovaniand send that one out in the emails16:19
PhotoJimsounds to me like the optimal solution is to just give the Ubuntu server the public IP, and have it port forward that one port.16:22
PhotoJimusing a router to forward all ports to a single machine means the router isn't really routing.16:22
PhotoJimit's superfluous.16:22
rayno_bOkay, will talk to the network admin.16:25
rayno_bI have another question which is not related to my current topic...  Do you mind?16:25
giovanirayno_b: as long as it's an ubuntu question, sure16:26
rayno_bI've been trying to understand traffic shaping, but I have no clue how to get this right.  At the moment, I use an ubuntu server as gateway to the internet.  How can I control that one user cannot simply use all available bandwidth to the internet?  And maybe always allow mail traffic to be able to flow through, etc.?16:28
rayno_bI'll be right back16:29
rayno_bRight, I'm back.16:32
rayno_bGiovani - Can you or PhotoJim help with this?16:39
=== Jare_ is now known as Jare
giovanirayno_b: honestly, it's a reasonably complex topic16:42
giovanithere are a number of howtos on traffic queueing in linux -- but I wouldn't advise taking it on16:43
rayno_bI must say, I've been very much unsuccessfull so far in what I've been trying.16:44
rayno_bBut everytime someone on the network now downloads something, the internet is unusable to anyone else.16:44
giovanidownloads something over http? or with something abusive like bittorrent?16:46
rayno_bjust straight forward download16:46
giovaniso over http then16:46
giovanithat shouldn't be happening16:46
rayno_bremember, we're in africa.  download speeds are really slow.16:46
giovanialright, well then it sounds like you may need traffic shaping16:47
giovanibut it's not a simple task16:47
giovaniso I'm not sure what to offer you16:47
rayno_bAre you prepared to help me set it up?16:49
Sam-I-Ammathiaz: yo17:00
mathiazSam-I-Am: hi17:00
mathiazSam-I-Am: what is the subject of your email?17:01
Sam-I-Amlooking...17:01
Davieynijaba & kirkland: Let me know when you have 5 mins to chat about ubuntu-server-tips17:02
kirklandDaviey: i'm working a hard math problem at the moment17:02
nijabaDaviey: I'm free now (well, let me grab a coffee first)17:02
nijabakirkland: well, since I know you do not have kids, I  guess it is not a school relted pb ;)17:03
Sam-I-Amits on pkg-openldap-devel, cc'd you... 'enable nss-slapd to be built'17:03
=== diehaai is now known as thefish
Sam-I-Amand steve...17:04
Sam-I-Amsince i'm kinda new to this i wasnt sure where i should run it by you guys, submit a bug/patch, or whatever...17:04
Sam-I-Ams/where/whether17:04
mathiazSam-I-Am: submitting a patch is always a good idea17:05
Sam-I-Amalso added a patch to fix test058's failing issue17:05
Sam-I-Amsure, so just submit a bug and attach the udiff?17:05
Davieykirkland: heh, ok.. ping me and nijaba when you are free :)17:05
Sam-I-Amand patches which patch the build mechanism are ok too?17:06
mathiazSam-I-Am: sure17:06
mathiazSam-I-Am: what's your patch about test58?17:06
mathiazSam-I-Am: I'd also suggest to file the patches in the upstream bug tracker17:06
nijabaDaviey: from what I have gathered so far, you should just add a file starting with a number inside /etc/update-motd.d/ which contains the command to be executed to display tips.  Once there the command will be executed at login to display the tip.  kirkland will confirm, but I am quite sure that's all there is to it17:08
kirklandnijaba: Daviey: right...  or a symlink to a file17:08
mathiazSam-I-Am: test58 randomly fails - try to rebuild the package and the build may succeed17:08
kirklandDaviey: do you have a binary that just plucks and prints one random tip?17:08
Sam-I-Ammathiaz: the patch for test058 was from hyc... it got committed to openldap CVS17:08
mathiazSam-I-Am: part of 2.4.18 then?17:09
Sam-I-Ammathiaz: so i added it to the build for 2.4.17 ... and it seems to reduce or eliminate the random failures that arent already caught17:09
Sam-I-Amit will be17:09
Sam-I-Amwhich means it becomes moot if 2.4.18 makes it into karmic17:09
nijabakirkland: /usr/bin/ubuntu-server-tip17:10
mathiazSam-I-Am: that's ok - we backport patches from upstream if they're relevant17:10
Sam-I-Amyeah, this was a minor one that just cleaned up builds... along with my nssov patch which clear out the temporary build files leftover in the nssov tree17:10
mathiazSam-I-Am: this seems like a good candidate to send to upstream17:11
nijabakirkland: so I guess a ln -s /usr/bin/ubuntu-server-tip /etc/update-motd.d/60_ubuntu-server-tip should be it?17:11
mathiazSam-I-Am: so I'd file a bug in ITS too17:11
Sam-I-Ammathiaz: the nssov patch?17:11
mathiazSam-I-Am: yes - if you modify the Makefile to add a clean target it would be beneficial to upstream too17:11
kirklandnijaba: Daviey: yeah, that should do it ;-)17:11
Sam-I-Amthat was the question i had in my email... whether i should patch debian/rules to manually purge the files... or patch the nssov makefile to include a 'clean' rule and then debian/rules to call it17:12
mathiazSam-I-Am: I didn't pay too much attention to your patch as I don't build package more than once in the same tree17:12
mathiazSam-I-Am: patch the nssov Makefile17:12
mathiazSam-I-Am: and submit the patch to upstream17:12
Sam-I-Amok... and what about calling it during build cleanup?17:13
Sam-I-Ami originally just added the clean target to 'all' which solved it, but felt a bit clunky17:14
mathiazSam-I-Am: the clean target in the rules doesn't clean up the build17:14
mathiazSam-I-Am: the clean target in the rules doesn't clean up the build tree17:14
Sam-I-Amwhat does then?17:14
mathiazSam-I-Am: hm - well it does: rm -rf $(builddir) $(builddir_notls) $(installdir)17:14
mathiazSam-I-Am: however it's not done from a Makefile target17:15
Sam-I-Amah, right17:15
mathiazSam-I-Am: It doesn't use make clean17:15
Sam-I-Amnssov gets built in the regular source tree, not build iirc17:15
Sam-I-Amwhich explains where the leftovers come from17:15
mathiazSam-I-Am: right - so may be modifying the nssov to be build in the build tree?17:15
Sam-I-Amsounds like a better plan17:16
Sam-I-Amnow that i see how its working :)17:16
mathiazSam-I-Am: and while you're working on this, the latest version of slapd in ubuntu doesn't load the nssov17:16
Sam-I-Amfigure its also pertinent for building things like smbk5pwd17:16
Davieykirkland: sorry, went AFK.. Something nijaba mentioned about it being 160 chars or less.. I was thinking of adding a "-s" switch to /usr/bin/ubuntu-server-tip that returns a tip less than 160 chars, as this might be more suitable for MOTD?  What do you think?17:16
Sam-I-Amwhich would also be a nice thing to integrate...17:16
mathiazSam-I-Am: I haven't tracked down the reason why the nssov shared library is not loaded correctly17:16
Davieykirkland: That obv breaks your symlink, unless -s is default behaviour17:17
Sam-I-Ammathiaz: hmm... i'll look into it17:17
mathiazSam-I-Am: that would be very helpful17:17
mathiazSam-I-Am: take the latest version of slapd in karmic and try to load the slapd overlay17:17
Davieykirkland: i guess if user = root, it could default to -s ?17:17
mathiazSam-I-Am: take the latest version of slapd in karmic and try to load the nssov overlay17:17
Sam-I-Amk... looking at that now...17:18
mathiazSam-I-Am: smbk5pwd is also interesting however it's build for heimdal17:19
Sam-I-Amyeah, that was another question17:19
mathiazSam-I-Am: so the overlay needs to be ported to support MIT kerberos17:19
Sam-I-Amwith samba4 integrating heimdal, whats the plans with MIT?17:19
Sam-I-Amor are they orthogonal17:19
mathiazSam-I-Am: MIT is the supported version of kerberso in ubuntu17:19
Sam-I-Amyeah...17:19
mathiazSam-I-Am: ie MIT kerberos is in main while heimdal is in universe17:20
mathiazSam-I-Am: so the smbkrb5pwd needs to be ported to MIT17:20
Sam-I-Ami saw something on the server pages about getting heimdal into main (which i think it was a long time ago)17:20
mathiazSam-I-Am: there is someone from redhat working on adding support for MIT kerberos to samba417:20
nijabaDaviey: ln -s is what you would do from the command line to add the symlink.  The script ubuntu-server-tip can have whatever you want in it17:20
Sam-I-Ammathiaz: ah, cool17:20
mathiazSam-I-Am: that must have been a long time ago17:20
mathiazSam-I-Am: the current plan is to stick with MIT kerberos in main and have heimdal in universe17:21
Davieynijaba: sure, but just wanted to clarify that the MOTD should be <160 chars.. and if so, should i make this the default behaviour if ran as root?  As update-motd no doubt runs as root.17:21
DavieyCan't think of a cleaner way, i'm sure update-motd doesn't introduce any enviroment variables?17:21
nijabaDaviey: ah, ok... in that case add a real file 60_ubuntu-server-tip in update-motd.d that contains a call to /usr/bin/ubuntu-server-tip and all the options you want17:22
DavieyThe reason i'm suggesting this, as i think the user should be able to run further ubuntu-server-tip on demand17:22
Sam-I-Amthe thing about heimdal is it'll set your smb password automatically when you change your kerberos password... so patching smbk5pwd might take a bit more work17:22
Sam-I-Amsince i think it lets heimdal handle some of the footwork automagically17:23
Davieynijaba: I was pondering the idea of a --submit option, so people could easily send a tip via the command line :)17:23
mathiazSam-I-Am: does heimdal use the EXT OP to change the ldap password?17:23
Sam-I-Ammathiaz: not for samba.. it just writes the NT hash17:24
nijabaDaviey: that would be cool!  I guess it could just use the standard bug reporting interface...17:24
Sam-I-Ami dont think theres an exop for md417:24
Sam-I-Amit would be nice if it was all exop...17:24
nijabaDaviey: ie: ubuntu-bug command17:24
nijabaDaviey: err.... no17:25
Davieynijaba: well i was thinking this.. using ubuntu-bug, but it is my understanding that; only works for ubuntu packages, not projects (not a long term issue once it is included), they also *require* a LP account.. and i don't know if this is a good or bad thing for making suggestions17:25
nijabaDaviey: yes, that's what I was just looking at.  Might be simpler to have an email sent to some generic address17:26
Davieynijaba: but we don't install a smtp server on base :/17:26
nijabaDaviey: for example the ubuntu-server-tip team ml17:26
Davieynijaba: that is a good idea, then there can be discussion per thread on the validity of the command.17:27
psi-jackHmm interesting.17:28
nijabaDaviey: well...  if smtp is not configured (ie no smtp-mta available) maybe we could just tell the person to send an email to the list?17:28
nijabaDaviey: we need something simple..17:29
psi-jackI have ldaps:/// in my etc/default/slapd, and it's listening to 636, but tls is failing.17:29
nijabaDaviey: btw, there is a tip about iotop and another about iftop, but none are in main, which, in the principle, breaks rule #3 on https://wiki.ubuntu.com/server-tips17:31
nijabaDaviey: I do however find the tip useful, so I am wondering if we should request an exception17:32
Sam-I-Ampsi-jack: 636 is not tls, its ssl17:32
Sam-I-Amtls uses 38917:32
Clustyhey17:33
Davieynijaba: hmm.. do you think we should generally review rule #3 ?17:33
Sam-I-Amin fact, you should probably not be using ssl unless one of your clients doesnt speak tls17:33
Clustyi wanted to give out static IP addresses to certain MACs and dynamic tot he rest17:33
Davieynijaba: I mean, if the server admin is happy to use universe stuff - then it's enabled in sources.list.. and if they try and run the command, they'll get command-not-found telling them how to install it?17:33
VSpikeIf I'm connected with ssh to my server and am partway through a long backup script, and if I now discover I have to leave and shutdown my client machine....17:34
Clustyunfortunately google gives me just how to configure static addresses from the client side17:34
nijabaDaviey: yep, I think it is quite important that we do not advise people to use stuff not in main.  but that can be discussed for utilities17:34
VSpikeIs there anyway, given that I didn't use nohup or screen, to prevent the backup from stopping?17:34
nijabaDaviey: I would be much more concern for long standing deamons to tell you the truth17:34
Sam-I-AmVSpike: use nohup? :)17:34
ClustyVSpike, if i am not mistaking you can do some magic, to give a process a new parent17:34
VSpikeI do not like that Sam-I-Am ;)17:35
Davieynijaba: yeah, i can see that point..17:35
ClustyVSpike, not sure thoiugh17:35
ClustyVSpike, consider running all in a VNC ?17:35
Davieynijaba: TBH, i actually forgot about the rules on the wiki page.. not purposely disobeyed them :(17:35
VSpikeClusty: I have heard of such things, I agree17:35
nijabaDaviey: hey, no prob, we are still in early stages here17:35
VSpikeClusty: it sounds quite voodoo17:35
ClustyVSpike, i know it's possible. but i would not know where to start17:36
VSpikeI guess I'll just kill the backup, start screen, restart the process and check it later17:36
Davieynijaba: "Ubuntu Enterprise Cloud" tip does sail close to the wind.. :/17:36
VSpikeI would rather not, but if there is no other way then c'est la vie17:36
nijabaDaviey: why is that?  will be in main in karmic17:37
Daviey"Tips are not advertisement, but information. No paid services or product can be referred to here, except if an exception is granted during a server community meeting."17:37
ClustyVSpike, so you are running backups from a ssh?17:37
Clustyand want to be protected against net stops?17:37
VSpikeClusty: yes, running a script on the server to backup to NAS using tar/ssh/dd17:37
Davieynijaba: Links to a page that is largely advertisment for Canonical17:38
VSpikeClusty: It's a one-off hack at the moment, just to get one backup17:38
ClustyVSpike, the right thing to do is to cron the task17:38
VSpikeAgreed17:38
Clustysince anyways you prolly want to do it weekly....17:38
VSpikeI need to put some logging and error handling in the script and so on17:38
VSpikeClusty: quite17:38
nijabaDaviey: Well, agreed, the cloud pages are pushing our services around it17:38
VSpikethis is just a first cut "get a backup" script17:38
ClustyVSpike, till then screen is a quick hack17:38
VSpikeYep :)17:39
ClustyVSpike, there is backup-manager17:39
VSpikeoh? don't know it17:39
Clustyit';s a decent proggie17:39
Clustyit supports incremental tars17:39
Clustyso i do daily incremental17:39
Clustyand weekly full backups17:39
VSpikeI need that elsewhere17:39
Clustyand it autodeletes olb backups17:39
Clustyold*17:39
nijabaDaviey: http://www.ubuntu.com/products/whatisubuntu/serveredition/cloud/uec would be better, I think.  I just need to setup a short url for it :P17:39
VSpikeClusty: http://pastebin.com/f6f8f006117:40
VSpikeClusty: ^ current script :)17:40
Clustyyou're the man :D17:40
VSpikeThe destination is a WD Mybook World Edition with hacks applied to enable ssh access etc17:40
Clustysed-master17:40
Clusty:D17:40
VSpikeheh17:40
Davieynijaba: I'm not happy with using tinyurl.com etc either.. one of the tips has that short url17:40
Clustyso any1 can help me with my DHCP issue?17:41
Clustyis it even possible?17:41
nijabaDaviey: yep, that's not great.17:41
Daviey(especially as i heard tinyurl are in difficulty atm)17:41
nijabaDaviey: tell me which url and I'll find a way to get a short url on ubuntu.com for it17:41
Davieybut it's also a third party that could potentially redirect that url to anywhere.. perhaps RHEL website :)17:41
VSpikeClusty / Sam-I-Am : thanks for the help - backup running anew in screen.  Gotta dash!17:42
VSpikeClusty: will check out backup-manager17:42
Sam-I-AmClusty: as long as the mac addresses are different, dhcp should hand out whatever IPs are configured17:42
nijabaDaviey: https://help.ubuntu.com/9.04/serverguide/C/etckeeper.html, I guess17:43
ClustySam-I-Am, i want to give a certain mac a certain address17:43
Sam-I-Amsure17:43
Sam-I-Amthats handled on the dhcp server17:43
Davieynijaba: http://tinyurl.com/etckeeper17:43
Davieyyeah17:43
ClustySam-I-Am, any place i can start reading?17:44
ClustySam-I-Am, the server gives now dynamic to all17:44
Sam-I-Amthe default dhcpd.conf file includes examples of how to configure a static IP for a MAC17:44
Davieynijaba: Is a redirect from ubuntu.com/$NAME a good long term solution.. i imagine that many more tips will have urls..17:45
Davieystruggling to think of something better tbh..17:45
nijabaDaviey: I am writing a proposal to our webmaster as we speak.  Something like ubuntu.com/go/$name17:46
Davieynijaba: that would make sense, especially if they can create/update urls regulary on demand.17:46
nijabayep17:47
Davieynijaba: It also has the added benefit that a url that is on someones installation can be quickly resolved, if the real link turns bad..17:48
ClustySam-I-Am, http://pastebin.com/m8bd587f17:48
Sam-I-Amthats the example17:49
Clustythis is the closest thing17:49
psi-jackOkay. So ldapsearch -x -Z works for me, presently, but ldapsearch -x -ZZ fails with just this error: ldap_start_tls: Connect error (-11)17:49
Sam-I-Amif you're using dns, you can use the hostname... otherwise, put the IP in there17:49
Clustybut how do i tell it i want to give 192.168.0.201 ?17:49
Sam-I-Amafter fixed-address17:49
Sam-I-Amfixed-address <ip>17:49
Sam-I-Ampsi-jack: does the cert hostname match how you're connecting?17:50
psi-jackHmm. Well I'd thought. but apparently not. I added -h ldap.mydomain.tld and ZZ worked.17:51
Sam-I-Amyeah, so you can set that in ldap.conf17:51
Sam-I-Amunder URI17:51
* psi-jack nods.17:51
psi-jackGot it. Finally working.17:52
Sam-I-Amyay17:52
psi-jackBut, okay, so I wanted to create an SSL cert that was *.mydomain.tld17:52
psi-jackAnd that one, failed, because the cn didn't match.17:52
Sam-I-Amthat should work fine17:53
ClustySam-I-Am, thanks. worked17:53
Sam-I-Amhmm @ installing slapd on karmic and it not asking me for a default admin password17:54
psi-jackOkay, NOW * worked.17:55
psi-jackPoifect.17:56
clustyhey18:23
clustyi am trying to get NIS running18:23
clustyunfortunately this nis thing does not start18:23
clustyit tries to bind to the yp server18:24
clustyand it chokes (after a few attempts)18:24
clustyhttps://help.ubuntu.com/community/SettingUpNISHowTo18:24
clustyserved as how-to guide18:25
Sam-I-Ammathiaz: think i figured out the nssov problem... its compiled with the wrong libdir18:31
clustythere seems to be some problem with this:  if [ "`ypwhich 2>/dev/null`" != "" ]18:34
clustyi cannot do ypwhich18:35
Sam-I-Amyp?18:35
clustyNIS18:35
clustyi am trying to get nis running18:35
clustySam-I-Am, ypwhich is supposed to tell me the domain name of the NIS18:36
Sam-I-Amwhat uses yp/nis anymore?18:36
clustySam-I-Am, that would be me :D18:37
clustyyou know a better way to have centralized user management?18:37
Sam-I-Amany uh.. reason?18:37
Sam-I-Amtry ldap18:37
clustybesides ldap18:37
Sam-I-Amnis is a dinosaur18:38
clustythat feels overkill18:38
clustyreally?18:38
Sam-I-Amits insecure and broken18:38
clustyldap felt complicated18:38
Sam-I-Amyour other choice is AD heh18:38
clustyAD?18:38
Sam-I-Amldap is not bad18:38
Sam-I-Amactive directory :)18:38
clustyis that not some windoze thing?18:38
Sam-I-Amit is18:38
Sam-I-Amso theres your choices...18:38
clustythen billy can go suck a lemon18:39
clustywon't promote M$ junk18:39
Sam-I-Amldap or... AD... which is basically microsoftified ldap18:39
clustydebian fellas were not very outraged by the idea of having NIS18:39
clustyand NIS+ipsec seemed a decently securized variant18:39
Sam-I-Ami guess, but openldap is really the way to go18:40
Sam-I-Amif nis worked, we'd have documentation for configuring it in ubuntu heh18:40
clustyhttps://help.ubuntu.com/community/SettingUpNISHowTo18:41
clustyseems very straight forward18:41
clustyif it only did not choke18:41
Sam-I-Amhttps://help.ubuntu.com/9.04/serverguide/C/network-authentication.html18:43
Sam-I-Ampretty straightforward18:43
clustySam-I-Am, yaiks. this is serious work :D18:46
clustycompared with nis18:46
psi-jack!find pam_ldap.conf18:49
ubottuPackage/file pam_ldap.conf does not exist in jaunty18:49
jtimbermanldap is the way to go for single sign on, as it will work with a lot of other places you might also need authn. I would not bother with NIS.18:50
nick125I thought pam_ldap.conf was just a symlink to another file in Debian/Ubuntu...18:50
psi-jackWell, if it is, it's not been set properly.18:51
Sam-I-Ampsi-jack: its just /etc/ldap.conf18:51
psi-jackMy problem is ldapscripts aren't working.18:54
psi-jackldappasswd, fails, cause it tries to use SASL for some aweful reason, no matter what.18:54
psi-jackEven though the ubuntu setup uses -x everywhere I can see.18:54
psi-jackOtherwise, authentication is fully functional so far that I can tell.18:55
dmclainAnyone here familiar with /etc/sysctl.conf?19:05
dmclainIm wondering : Whats the equivalent of kern.maxproc for Ubuntu in /etc/sysctl.conf?  I didn't see a default in there for it, but I think I need to set it higher than the default for the box.19:05
psi-jackdmclain: sysctl.conf is not different per distributions.19:07
psi-jackIt's a standard thing.19:07
dmclainah, excellent.  Thanks for taking the time :-)19:07
sbeattiedmclain: that said, 'sysctl -a | grep maxproc' doesn't find anything on karmic, so I'm not sure what you're trying to set.19:09
psi-jackTrue that.19:09
psi-jackNothing in /proc for maxproc, either.19:10
clustypffff19:11
clustyi love it when the debian guys jump at your juggular19:11
clustyi love it when the debian guys jump at your juggular19:11
clustywhen you mention ubuntu19:11
clustyi feel like lining them all and bitchslapping them silly19:11
psi-jackclusty: I love it when people complain about debian.. NOT19:11
clustypsi-jack, even though my question is more linux rather then distro specific19:12
psi-jackclusty: Point?19:12
clustypsi-jack, debian ppl are knowledgeable, but damn snobs19:12
psi-jackGeneral linux, ##linux19:12
clustymost of them19:12
psi-jackclusty: Funny. Most Debian people I meet, don't know jack crap.19:13
clustypsi-jack, i mean irc ppl19:13
psi-jackMost of the time, in fact, they hide behind their ego.19:13
psi-jackclusty: So do I.19:13
clusty#ubuntu is not very usefull19:13
clustymost questions are quite basic19:13
psi-jackThis is why ##linux exists.19:14
clustyand is also insanely large traffic19:14
clustythis is best really. cause it'sa bit more customized19:14
clustybest of both worlds. ppl know their shitr generally19:14
clustyand replies are ubuntu specific19:15
clustysuch as conf file location ...19:15
psi-jackHow many questions do you have that are ubuntu-specific that cannot be resolved without being distribution-specific?19:15
psi-jackConf file location /etc19:15
psi-jackSimple19:15
clustyanyways back to debian, i would rather them be a bit more understanding19:15
psi-jackWhy do you think Ian Murdock isn't with them anymore?19:16
psi-jackOr even supporting them?19:16
clustywho is he?19:16
clustysorry for asking :D19:16
psi-jackThe founder of Debian.19:16
clustyi know stallman, which i don't particularilyl like19:16
clustybut respect still19:16
psi-jackHeh19:17
psi-jackI wish there was a TurnKey for just making an authentication box and/or a router box.19:17
clustymost starters of trends end up dissociating themselves from their creations19:17
clustypsi-jack, there is19:17
psi-jackclusty: Erm?19:17
clustythere are routing distros19:17
clustylike entangle19:17
psi-jackLike?19:17
clustyor something like that19:17
psi-jackUntangle?19:18
clustythat one :D19:18
clustymight have to cough up some cash if you want really fancy stuff19:18
clustylike balancing and smart filters19:19
clustyspam19:19
psi-jackBleh19:19
* psi-jack turns back on Untangle right away.19:19
psi-jackNext!19:19
clusty:D19:19
psi-jackHell, eBox is better19:19
clustyit's fine19:20
clustyonly antivir/load balance are paid19:20
psi-jackYeah, which are standard Linux features.19:20
clustyload balanciong is hard19:21
clustyyou cna always implement it yourself19:21
clustybut you loose the fancy GUI thing19:21
clustyor whatever19:21
psi-jackHmm. Dunno.. So far it looks okay.. Without the load balancing part, it has QoS19:22
psi-jackAnd tailored QoS at that, not just basics like wondershaper gives19:22
psi-jackIt's Debian-based I see?19:24
psi-jackMight toss this on my spare server to test it out, so I have a backup router just in case.19:26
psi-jackStill wondering how in the frack they do it under Windows.19:27
clustypsi-jack, it's debian i guess19:27
clustypsi-jack, you could actually install a package at some point19:27
clustyon top of an ubuntu19:27
psi-jackUsing apt?19:28
clustyyes19:28
clustybut when i tried it failed19:28
clustyactually i never got the thing running19:28
psi-jackOh nice!19:28
clustycause i did nto want to dedicate a box for just routing19:28
psi-jackI already do.19:28
psi-jackrouting, mail, and dns cachine.,19:28
clustyi will suggest the big chief buys a new box19:28
psi-jackcaching19:28
clustyi did not do cahceing just yet19:29
clustyi am fighting with getting dns working for local pc-s19:29
psi-jackdns caching, not web caching.19:29
clustyi know19:29
clustydnsmasq19:29
clustyor how is it called19:29
psi-jackNo, bind.19:29
giovanibind is incredible bloat for a dns cache19:29
clustyi failed yesterday getting bind to like my local pc-s19:29
clustyi postponed the task for now19:30
clustyand wanna get central user management19:30
clustyguess there is not way around it19:30
clustybut using ldap19:30
psi-jackWhat I reaaaaly want, though, is a turnkey like this, for just authentication.19:30
psi-jackLike you just said, central user management.19:30
clustyi never set up such a thing, so it's a learnign 3experience19:31
KillMeNowi reaaaaally want Telekinesis and Omnipotence but that's not gonna happen anytime soon19:31
clustyi am a self taught sys admin19:31
clusty:D19:31
psi-jackIt's a pain in the arse.19:31
clustywonder are there ppl actually learning linux in school?19:31
psi-jackclusty: So am I, since before Linux 1.0.0 was released, I've been using Linux.19:31
clustybesides taking certifications19:31
psi-jackI've 0 certifications.19:31
psi-jackJust a lot of hands-on experience and know-how.19:32
clustyi sinstalled linux in 5th grade first D:19:32
clustythat was like 15 years ago19:32
clustywas damn strange toy, i did not know what it was good for19:32
giovani15 years ago, linux 1.0 hadn't been released19:32
clustythink it was first slackware19:32
clusty10 years19:33
clustynot 1519:33
clustywhat is linux 1.0?19:33
clustysome homebew thing before distro concept?19:33
clusty:D19:33
giovani...19:33
giovanithe kernel version19:33
clustyohh19:34
clustyholly molly19:34
clustywhat about first slackware?19:34
clustywhat kernel did that have?19:34
clustylemme look19:34
giovaniprobably slightly before that19:34
clustyhad the most god awful WM :D19:35
clustyanyways i started using linux full time in university19:35
clustyand that was debian19:35
giovanislackware 1?19:36
giovanihighly doubt there was a window manager :)19:36
clustythere was a horrid TWM-like thing19:36
clustycan hardly call it WM :D19:36
clustyslackware 1 came in 199219:37
clustytwm came in 198719:37
clustyor so wiki says19:38
=== jdstrand_ is now known as jdstrand
psi-jackHmmm. I might look into zeroshell.19:42
clustypsi-jack, that is cool i hear19:52
clustypsi-jack, a lot of people are doing mlppp with it19:53
psi-jackmlppp?19:53
clustypsi-jack, multi link ppp19:53
psi-jackEwww19:53
clustypsi-jack, you basically bind multiple DSL lines19:53
clustyawesome19:53
clusty:D19:53
clustyfor a multitude of reasons:19:53
psi-jacksadism?19:53
psi-jack:p19:53
clusty1 you get all the transfer rate in 1 conection19:53
clusty2 you bypass DPI19:54
clustyin canada all DSL is screwed19:54
clustyall DSL traffic is throtelled19:54
clustyno torrents, no encrypted stuff19:54
clustypsi-jack, i am having ldap trouble19:55
clustyfollowing this guide: https://help.ubuntu.com/9.04/serverguide/C/openldap-server.html19:55
giovaniin canada, dsl owns you!19:55
clustygiovani, yeap.the EWUL bell is choking the life of the net19:55
giovaniclusty: I don't know what "no encrypted stuff" means -- I assure you the major candian isps don't block ssl19:55
clustythey dont block19:55
clustyhere is deal:19:56
clusty80% of dsl goes through bell infrastructure19:56
clustybell is slowing down every1 cause they claim their netowrk cant do full speed19:56
clustyso whatever DPI can't figure out it assumes it's not legitimate traffic19:56
clustyall SSL=torrents19:57
clustyin their mind19:57
giovaniI don't believe that19:57
giovaniit's easy enough to test19:57
giovanifind an ssl webserver and do a speed test on it19:57
clustyi did test19:58
clustythere is a big fuss now about it19:58
clustyi mean ppl going to ottawa and screaming BELL GO HOME :D19:58
clustyanyways, i installed ldap set the admin password, but when i do a ldapsearch the thing rejects credentials19:59
KillMeNowwhich is why i'm praying that Net Neutrality laws come to life here in the US20:00
giovaniclusty: probably doing the wrong auth, etc20:00
clustygiovani, me, the good little tool is doing copy paste from site20:00
giovaniclusty: sasl or simple?20:00
clustygiovani, not clue what that is :D20:01
clustyldapsearch -xLLL -b cn=config -D cn=admin,cn=config -W olcDatabase={1}hdb20:01
giovanitime to read more about ldap then20:01
clustyis what i am doing20:01
clustygiovani, so yes, that is sassl :D20:06
mookatthi everyone, looking for advice --- i'm very much in need of generating pdf's of internal webpages on my dapper server and I can do this with firefox+commandline print extension.  I need gtk+ toolkit however.  How big of an issue is it to have gtk+ on my server?  Obviously it's overhead not needed and may present security issues, but I'm not seasoned enough to know exactly what caveats will creep up20:09
Claw6anybody may can help me with mysqldump ?20:11
Claw6i run it but nothing seems to happen20:12
mookattwhat do you need to know?20:12
Claw6may im doing something wrong20:12
mookattwhat command did you run?20:12
Claw6mysql -u root -p -h localhost db260642497  < dumpDB_.sql20:12
Claw6where will it be saved to ?20:12
mookatttry mysql -u root -p -h localhost db > dump.sql20:13
mookatt> instead of <20:13
Claw6mh... seems processing20:15
Claw6well i just copied that commandline from a website20:16
Claw6did not recognized that < was the wrong way20:16
mookattthe < typically means to read that file as input and the > means to put the result of the command to a file20:17
mookattman mysqldump20:17
KillMeNowyou can also "stream" in a sql dump file from within the mysql command line, just FYI20:18
Claw6where will the dumpDB_.sql will be stored to ?20:18
Claw6im realy new to unix20:18
KillMeNowin the directory you ran the mysqldump command20:18
KillMeNowif you don't explicitly state the path20:18
KillMeNowso if you're in /tmp20:19
KillMeNowand run mysqldump -u root -p --database > DBsql.sql20:19
KillMeNowyou should find a DBsql.sql file in the /tmp dir20:19
mookattanybody have any opinions on installing gtk+ toolkit on a dapper server?20:20
clustywell gonna run home. hopefully electricity is back up20:21
Claw6KillMeNow nope it does not appear there20:24
Claw6or its not even created20:24
Claw6should i get a echo out when its done?20:25
KillMeNowdon't think so, don't remember getting one in the past20:25
KillMeNowls -la20:25
KillMeNowmysqldump -u[user] -p[password] [databasename] > dumpfile.sql20:26
KillMeNowthat is the command you should run20:27
KillMeNowyou can do it like this:  mysqldump -u[user] -p[password] [databasename] > /path/to/dumpfile.sql20:27
KillMeNowif you want to explicitly state the path the archive should be dumped to20:27
KillMeNowif you leave the -p blank, it should prompt you for a password20:28
=== genii_ is now known as genii
uvirtbotNew bug: #415559 in freeradius (universe) "Unable to open file "/etc/freeradius/sql/mysql/dialup.conf": No such file or directory" [Undecided,New] https://launchpad.net/bugs/41555920:30
Claw6well after importing the db (it should overwrite an existing one) do i have to restart mysql or anything like that ?20:33
KillMeNownope...  shouldn't need to20:33
KillMeNowhowever, if you accidentally imported a blank file, i think that *may* bork your old database20:34
KillMeNowI know I've accidentally taken a empty .sql DB backup before and over wrote the DB i was trying to backup20:34
KillMeNowthankfully i did have good backups stored elsewhere20:35
uvirtbotNew bug: #412059 in vtun (universe) "MIR for vtun" [Undecided,New] https://launchpad.net/bugs/41205920:51
psi-jackHmmm23:00
psi-jackWell, I'd tried zeroshell, and was not impressed.. At all.23:00
psi-jackNow, what I seriously would like, is like a distribution or "appliance" that uses gosa.23:01
psi-jackThat... Would be utterly sweet.23:01
DjannakhanHi,23:05
DjannakhanI've a issue with locale on a fresh new ubuntu server 9.04 install23:06
Djannakhanhttp://pastebin.ca/153437623:06
Djannakhan dpkg-reconfigure locales won't solve the issue23:06
Djannakhan(it gave the same issue)23:06
subDjannakhan: Try installing the language pack - sudo apt-get install language-pack-en23:08
Djannakhansub: it's allready installed (i've just run the command)23:09
Djannakhanhttp://pastebin.ca/153438323:10
DjannakhanI still got the warning23:10
Djannakhanstrange this file :  /var/lib/locales/supported.d/local does not exists on this server, while on other servers, it exists23:11
subAh hmm, have you tried manually running locale-gen ?23:13
subI believe it's what's actually responsible for populating that directory/file23:14
Djannakhansub: yes I did and it didn't change anything23:15
Djannakhansub: I'll retry just now, as i've reinstalled the system this afternoon23:16
Djannakhansub: still no change23:16
Djannakhansame warning on 'locale' command23:16
subI don't know, I'd say you could try local-gen --purge but I'm not sure if that will really fix anything or somehow make it worse. You lost me =)23:19
Djannakhan;)23:20
Djannakhandon't solve the problem either23:21
Djannakhanbut what's strange is that en_US.ISO-8859-15  is not regenerated23:21
Djannakhancould this be the problem ? if I change the system local to en_US.ISO-8859-1, which is generated?23:21
DjannakhanYes !23:24
DjannakhanI've changed to en_US.ISO-8859-1, then sudo  dpkg-reconfigure locales, 'locales' command still show the issue, but after a reboot it's gone !23:25
uvirtbotNew bug: #415627 in mysql-dfsg-5.1 (main) "mysql-server + akonadi-server = conflict" [Undecided,New] https://launchpad.net/bugs/41562723:26
subexcellent23:28

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!