[00:00] i would say it's some hardware issue more like [00:00] ugh [00:02] _jmedina, i've been trying all sorts of howto's [00:02] _jmedina, one query that does work: ldapsearch -xLLL -b "dc=debian,dc=lan" uid=john sn givenName cn [00:02] <_jmedina> clusty: do you already have data on your directory? [00:02] <_jmedina> :) [00:02] <_jmedina> dc=debian=dc=lan? [00:02] <_jmedina> which one is your search base? [00:03] <_jmedina> vlazar@algorithmica:~/ldap$ ldapadd -x -W -D "cn=admin,dc=debuntu,dc=local" -f people_group.ldif [00:03] _jmedina, that is what i want now [00:03] the ldif's have all the data there [00:03] <_jmedina> :) [00:03] _jmedina, the one i showed you now worked [00:03] <_jmedina> you cannot do that [00:04] <_jmedina> Configurar un servidor Controlador de Dominio con Samba y OpenLDAP en Ubuntu Server Hardy 8.04 [00:04] _jmedina, well followign this howto :D http://www.debuntu.org/ldap-server-and-linux-ldap-clients [00:04] <_jmedina> that is the topic for my howto [00:04] <_jmedina> in spanish [00:04] <_jmedina> http://tuxjm.net/docs/cursos/Samba+OpenLDAP+PAM+NSS-4Ubuntu/html/ [00:05] _jmedina, that will give me mala de teta, but i will figure it out :D [00:05] <_jmedina> clusty: if you defined dc=debian,dc=lan at configure time you cannot add entries with another search base [00:06] <_jmedina> clusty: could you paste your people.ldif file? [00:06] _jmedina, at install i defined the domain: debian.lan [00:06] _jmedina, and org: algorithmica [00:06] _jmedina, from what i read that will create dc=debian,dc=lan [00:06] ? [00:06] <_jmedina> yeap [00:06] so what is cn ? [00:07] stands for common nanme [00:07] but what is IT :D [00:07] <_jmedina> culd you paste your ldfi file? [00:08] http://pastebin.com/m3e125484 [00:08] looks fishy [00:08] :( [00:09] <_jmedina> again [00:09] <_jmedina> dn: ou=Group, dc=debuntu, dc=local [00:09] <_jmedina> you need to change that to dc=debian,dc=lan" [00:09] did that [00:09] no effect [00:09] <_jmedina> and the same for the ldapadd command [00:10] <_jmedina> ldapadd -x -W -D "cn=admin,dc=debian,dc=lan" -f people_group.ldif [00:10] vlazar@algorithmica:~/ldap$ ldapadd -x -W -D "cn=admin,dc=debuntu,dc=lan" -f people_group.ldif [00:10] Enter LDAP Password: [00:10] ldap_bind: Invalid credentials (49) [00:10] <_jmedina> of you can reconfigure slapd and define another search base [00:10] <_jmedina> :) [00:11] <_jmedina> please read my comments [00:11] <_jmedina> I told you to change the base search for cn=admin... [00:11] i am very sorry, i understand if you get mad [00:11] <_jmedina> you dont have a cn=admin,dc=debuntu,dc=lan in your directory [00:11] i am lost badly :D [00:11] <_jmedina> invalid credentials in your case means unknown user :) [00:13] ldapadd -x -W -D "cn=admin,dc=debuntu,dc=lan" -f people_group.ldif [00:13] samed as yours [00:13] also changed the file [00:13] dn: ou=People, dc=debuntu, dc=lan [00:13] what am i missing? [00:13] <_jmedina> I dont know [00:14] <_jmedina> I would start over... [00:14] <_jmedina> dpkg-reconfigure -plow slapd [00:14] _jmedina, ok doing now [00:14] <_jmedina> and read my document [00:14] <_jmedina> I added so post instalations checklists... [00:15] when I auth against my mail server with anything but LOGIN and PLAIN, it fails even though postfix shows it supported them [00:15] _jmedina, will do [00:16] I'm using saslauthd and pam.d/smtp to perform the auth [00:16] <_jmedina> LiraNuna: what about logs? [00:16] _jmedina, "authentication failure" [00:16] <_jmedina> thats all? [00:17] yep [00:17] it works great when I use PLAIN or LOGIN [00:17] _jmedina, Aug 20 16:06:54 train postfix/smtpd[13284]: warning: localhost[127.0.0.1]: SASL DIGEST-MD5 authentication failed: authentication failure [00:17] that's about it [00:18] Alright. dhcpd3-server, is it capable of running a primary and secondary server? [00:18] <_jmedina> Psi-Jack yeap [00:18] Sweet.. How? LOL [00:18] <_jmedina> is not that hard [00:19] <_jmedina> man dhcpd.conf [00:19] <_jmedina> that is the first place to ask... [00:19] <_jmedina> check the DHCP FAILOVER section [00:20] Gotcha. [00:21] * _jmedina looks at his TODOcument list and see dhcp slave at 50 %... [00:21] Cool. now I just need to figure out how to use eBox's hooks to tie that in. ;) [00:26] _jmedina, worked. i am blind had a typo [00:27] <_jmedina> :) [00:27] _jmedina, new problem: http://pastebin.com/m5e6a5e91 [00:27] <_jmedina> hard to catch typos at this hours [00:28] can you tell what is wrong with the second part of the ldif? [00:28] <_jmedina> probably you have spaces at the end of your ldif file [00:29] <_jmedina> or a hidden character [00:44] _jmedina, you're the man :D [00:44] _jmedina, imported all the damn data [00:44] <_jmedina> clusty: ? [00:44] <_jmedina> how? [00:44] _jmedina, tweaking the ldifs to match my conf [00:45] <_jmedina> :) [00:45] and compu pasted around to fix the file issue [00:45] start getting the hang of this slowly [01:05] _jmedina, reading your guide about the client side of ldap [01:05] _jmedina, the server address you set to 127.0.0.1, but this is localhost. don't i need to specify the IP of the server? [01:05] heh [01:18] how can I provide smtp auth using mysql database without storing them in CLEAR TEXT? [01:18] hi folks [01:19] I tried using saslauthd but it only supports AUTH PLAIN and AUTH LOGIN [01:19] I tried auxprop sql and it requires clear password in the database [01:19] you can encrypt them in the mysql database [01:19] KillMeNow, they are already encrypted [01:19] then the initial transmission can be doing over TLS or SSL [01:19] using PLAIN and LOGIN ? [01:19] pls how do i configure bind9 to respond to queries from intranet clients [01:20] they are encrypted in my database [01:20] KillMeNow, same here - I got AUTH LOGIN and AUTH PLAIN working, but AUTH MD5-* doesn't work [01:20] you will need to create different "views" for your Bind9 install Troy [01:20] queries from the server to outsider using server works but clients on the intranet seem not to be able to query with the server [01:20] let me finish typing out this email and I'll check my setup again [01:21] troytroy, sounds like network configuration problem, do you set the bind9 server as a DNS server in your intranet router? [01:21] LiraNuna yes pls [01:22] forwarders Troy [01:22] actually yes [01:22] if you're using your Bind server as the resolver, if the bind server doesn't have the zone file, it will need to forward the query to an upstream dns resolver [01:23] yes i have opendns servers configured as the forwarders [01:23] actually queries from intranet client for other intranets clients dont return [01:24] but if i do the queries in the server everything seems fine [01:27] <_jmedina> clusty I mean openldap client utilities, not a linux client [01:28] so any clues what could be going wrong [01:28] http://ubuntu.pastebin.com/m22cbd670 [01:29] so you're doing a query for other intranet clients ? [01:29] thats a firewall script kindly check if that is the course for block dns queries [01:29] KillMeNow yes pls [01:29] LiraNuna... i'm running saslauthd and courier [01:30] are those other intranet clients in the zone file for your domain? [01:30] KillMeNow, I took your solution, I made TLS mandatory for login, and only supported logins are PLAIN and LOGIN [01:30] <_jmedina> KillMeNow: you can configure postfix sasl client wth courier authdaemon, bypassing cyrus sasl saslauthd [01:30] that way I'm forcing encryption and everyone's happy [01:30] i think i found the same issue you did, and finally just require TLS to secure the password transmission [01:31] KillMeNow, smtp auth is such a mess [01:31] i just looked at my configs and it's same as you... PLAIN and LOGIN [01:31] yeah, I guess it's best of both worlds :/ [01:31] <_jmedina> # cat /etc/postfix/sasl/smtpd.conf [01:31] <_jmedina> pwcheck_method: authdaemond [01:31] <_jmedina> log_level: 3 [01:31] <_jmedina> mech_list: plain login [01:31] <_jmedina> authdaemond_path:/var/run/courier/authdaemon/socket [01:31] <_jmedina> that is from jaunty server [01:31] thanks for the clarification, KillMeNow [01:31] _jmedina, yeah, plain and login [01:31] over TLS [01:31] <_jmedina> this way postfix comunicates directly to authdaemon.. [01:31] <_jmedina> yes [01:32] <_jmedina> what is wrong with that? [01:32] nothing [01:32] <_jmedina> if you need strong auth and encryption use kerberos [01:32] before that I didn't have TLS [01:32] there is supposed to be a MD5 crypt that *should* work but doesn't [01:32] so I couldn't use cram-md5 or crypt-md5 [01:32] KillMeNow http://ubuntu.pastebin.com/m153b7093 [01:32] that is my named.local.options file [01:32] thank you both, KillMeNow and _jmedina, finally got that thing sorted out :/ [01:33] hehe, even google has that [01:33] AUTH LOGIN [01:33] 530 5.7.0 Must issue a STARTTLS command first. m6sm194510wag.21 [01:33] ^ google [01:33] LiraNuna: Error: "google" is not a valid command. [01:33] i'm trying to remember my bind here... 0.0.0.0/0 gives recursion to anyone? [01:34] <_jmedina> XD [01:34] yep [01:34] <_jmedina> KillMeNow: yeap, openrelay [01:34] <_jmedina> I never use recursion, everything is controlled by allow query [01:34] yea, that's not necessarilly a good thing if it's public facing at all [01:34] <_jmedina> I use allow query globally, allowing only localhost and trusted subnets [01:35] <_jmedina> and then I allow-query any for each external zone [01:35] but anyways, Troy... if your internal clients hit the dns server, and it doesn't have any of your intranet clients in the domain zone file, it will try to forward the query to opendns [01:35] so do you have either your intranet zone file clients appending dynamically or statically? [01:35] KillMeNow there is a domain zone file [01:36] KillMeNow the problem is queries on the server work perfectly [01:36] ok so follow my logic here... lets say your domain is xyz.com [01:36] and it's internal [01:36] forget outside [01:36] but it seems not to work from outside the server [01:37] if you have client A, that tries to resolve client B, but client B doesn't have a host record in teh zone file that the bind server is authoritative for it's going to bomb [01:38] KillMeNow hmm there are zone files and reverse zone files [01:38] all working perfectly when queried in the server [01:38] ok, so which is it? you said " actually queries from intranet client for other intranets clients dont return" [01:39] e.g host clientA server get a hit when run from the server [01:39] ok, so when you try to resolve from the bind server it resolves? [01:39] but lets say nslookup clientA server return unknown [01:40] its like the server is rejecting queries from the intranet clients [01:40] yes [01:40] and client A has the bind server as it's resolver? /etc/resolv.conf [01:41] yes [01:42] have you checked using netstat -nap | grep 53 to verify that the service is up? [01:42] otherwise, do a iptables --flush [01:42] take IPtables out of the equation and see if it then resolves from client A [01:42] if it does after you flushed your iptables, then the problem is your iptables rules [01:43] its up and running [01:43] UDP or TCP or both? [01:43] http://ubuntu.pastebin.com/d36aedd3b [01:43] bot [01:43] both [01:43] ok [01:43] so dump your iptables and try from client A again [01:45] ok [01:45] same error bro [01:46] check your /var/log/messages [01:46] ok [01:49] nothn pertaing to the nameserver ther [01:50] kindly check my "iptables -S" for me [01:51] hold on, did you flush your iptables? [01:51] KillMeNow http://ubuntu.pastebin.com/d14541343 [01:51] prior to running the query from client A? [01:51] yes [01:51] yes [01:51] then we can deduce that it's not your iptables yet [01:51] if you do a iptables -L [01:51] you should see nothing [01:51] yep [01:52] just run the script again to enable remote ssh logon [01:52] well, i'm not seeing a UDP port for 53 [01:52] only tcp [01:52] ok let me add that [01:53] also i'm seeing anything coming in to eth1 to be sent to the DROP bucket [01:54] you know, i use IPKungfu for doing all my firewall scripts [01:54] makes life MUCH easier [01:54] ok i am trying to setup a wireless hotspot box [01:54] www.linuxkungfu.org [01:55] ok, then why not use DD-WRT? [01:55] or something similar? [01:55] so eth1 is hooked to switch with access points attached [01:55] ahh [01:55] ok [01:56] everything is setup fine just this nameresolution error [01:56] anyways, point is... if you flushed your iptables and ran the query from client A, then you can deduce there is something borked in your config [01:56] ok [01:57] i'm off work now, so i'm gonna go home [01:57] checked /var/log/syslog no errors with respect to nameserver config [01:57] thanks very much [01:57] ur assistance is very much appreciated [01:57] well, it's working from local [01:58] so if you run a dig @localhost hostname [01:58] you should get some type of return [01:58] bind can be really tricky [01:58] have fun [02:16] any reason why update-grub wouldn't put new kernels in the list? [02:17] mine has the latest as 2.6.28-11 in /boot/grub/menu.lst but there are about 3 updated kernels since then. manually running update-grub doesn't create the entries either. [02:22] I still will neve3r get why people quit a few seconds/minutes after asking a question during off-hours [02:23] giovani, who quit? [02:24] oh, that's my error -- I mistook Psi-Jack_ for PhotoJim [02:24] my comment stilly applies in the general sense though :) [02:25] PhotoJim: can you ls -lah /boot for us? [02:27] hi giovani [02:27] giovani: I actually figured it out. I had to edit the # kopt=blahblah line to include my rootdelay=70 line (needs a delay due to RAID issues) and then re-invoke update-grub. once I did that, the problem disappeared. [02:27] giovani: thanks for offering though :) [02:27] been battling with bind9 configuration for 12 hours now [02:28] it just refuses to respond to queries from clients in the intranet [02:29] PhotoJim: how does that relate to update-grub not detecting your newer kernels? [02:30] giovani: good question. I'm not entirely sure. I think the first update-grub just updated the menu.lst configuration options but didn't include the new kernels. the second invokation added the new kernels. [02:30] hmm, that seems unlikely [02:30] but alright [02:31] giovani: my first attempt had me have a kopt line without the preceding # (I thought it needed to be uncommented). [02:31] giovani: I don't really know for certain. I just know that it worked this past time. [02:46] the first try probably failed because it was completely uncommented [02:46] update-grub takes one-#-in lines [02:46] that sounds right [02:46] and when I corrected it, that let it work properly [02:55] New bug: #416750 in samba (main) "package samba-common 2:3.2.3-1ubuntu3.5 failed to install/upgrade: subprocess post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/416750 [02:58] odd question, but has anyone here set up pygopherd? i'm trying to get it to use a hostname i specify instead of the hostname of the system, and i can't seem to get it to. [02:58] You're running a GOPHER server? [02:58] well, in theory. in practice, its not quite working ;p [02:58] Cool. [02:59] i DID say it was an odd question didn't i? ;p [02:59] YAY FOR GOPHER! [02:59] * faileas is running IRC (with qwebirc) and web right now. gopher looks like fun, but its rather hard to get help with it ;p [03:06] gopher://lupinenet.co.cc [03:06] the issue is i set the hostname to be lupinenet.co.cc in the config file. it seems to be picking up the computer's hostname instead [03:08] hmm [03:09] never mind. looks like my ISP blocked port 70 too [03:09] so linking is of little use ;p [03:19] curl: (1) Protocol gopher not supported or disabled in libcurl [03:19] Sadness [03:23] hello mathiaz === macrocosm_ is now known as macrocosm [04:50] Okay. So, if you're primary focus on making an ubuntu 9.04 server was to make it a router, would you use ufw, firestarter, or something else? [04:50] What I'm looking for, is preferably easy maintenance, possibly web interface for it, and presently, not eBox. [04:51] psi-jack: take a look at untangle [04:51] I just did. [04:52] Fracking thing just crashed the system. [04:52] hmm [04:52] Uses Java crap, too. [04:52] DNS was minimal. IPs to Names, that's it. That's not DNS, that's only 1 100th of DNS. [04:53] thats cause routers don't handle dns, you need a DNS server seperate from the router [04:53] (softwarewise, stuff like BIND or unbound) [04:53] Well, if the router is handling everything, why /not/ have it also handle DNS? I mean, really. [04:53] no no [04:53] you use the same hardware, and add a DNS server [04:53] Right. [04:54] Untangle, didn't really offer such a capability., [04:54] They locked it down far too much. [04:54] untangle is ubuntu with their own custom stuff ;p [04:54] hmm [04:55] No, actually, it's Debian. [04:55] But, still. [04:55] They locked it down so you couldn't really manage it, except through their own interfaces. [04:55] SO anyway. [04:55] I may just write my own interfaces. [04:56] and if its any good share em ;p. its something potentially useful [04:56] but, I want to know, for now, what would be the better option for firewall stuff to handle NAT and port forwarding. [04:56] ufw, to me, seemed very.... Desktop-based, not really server-based at all.. [04:56] for your safety, please remain seated or firmly grip the handrail at all times [04:56] ya [04:57] i think most hardcore server uses would prolly use iptables straight up, and not worry about the front end [04:57] ufw is handy for setting up iptables-restore rules while still providing a stupid thing (ufw(8)) that you can hand to ill-educated customers who want to shoot themselves in the foot. [04:58] As opposed to a straightforward #!/usr/sbin/iptables-restore script in /etc/network/if-pre-up.d/ [04:58] Heh [04:58] True that. [04:58] I mean, yeah, it provides a means to use iptables restore stuff in segments. [04:59] iptables-persistent entered sid recently, which is just an init script that runs iptables-restore on /etc/iptables/foo [05:00] psi-jack: well, I HOPE it essentially cats them -- you can't meaningfully cat iptables-restore scripts. And I *really*, *REALLY* hope ufw doesn't turn into like 1000 individual iptables -A rules [05:05] hi somebody know how i can recover the information when the superblock is broken? [05:16] roxy__: carefully? [05:16] roxy__: which filesystem? [05:16] xfs [05:17] Ahaha [05:18] I believe the recovery process for XFS is "bend over" [05:18] Not exactly. [05:18] XFS is a fine filesystem. [05:19] so, how i can recover? [05:19] Lemme read back [05:20] okay. superblock is broken? What told you that? [05:22] when i try to mount [05:22] XFS is fine up unless you have no write barrier support, or run an old (read: tested) kernel, or happen to lose power unexpectedly. [05:22] i try to use xfs_repair but can't find the superblock [05:22] I see.. Are you sure it's XFS? [05:22] twb: I've had no problems for years. [05:23] psi-jack: how fortunate for you [05:23] # file -sL /dev/puck/root --> Linux rev 1.0 ext3 filesystem data (needs journal recovery) (large files) [05:23] yes [05:23] roxy__: file -sL on the device should confirm that it's XFS [05:24] yes, i got /dev/internal/homes: SGI XFS filesystem data (blksz 4096, inosz 256, v2 dirs) [05:26] roxy__: Okay, cool, run xfs_check on /dev/internal/homes [05:26] i did and i got can't seek in filesystem at bb 181578224 [05:27] can't read block 0 for directory inode 119914522 [05:27] no . entry for directory 119914522 [05:27] Okay. xfs_repair then [05:28] i did, but said can't not find superblock [05:29] Okay, xfs_repair -d [05:30] if that works, immediately reboot after it's done. [05:30] couldn't verify primary superblock - bad magic number !!! [05:31] attempting to find secondary superblock. [05:31] Okay. Is it still goinf? [05:34] yes [05:34] If my server when i ssh into says there are 16 updates don't i just do apt-get update [05:35] Okay, good start then. [05:35] roxy__: Just remember, when it finishes, you'll /need/ to reboot immediately, else you will cause further damage. [05:36] roxy__: Was this your / filesystem that got damaged? [05:36] chrislabeard: it only lists 16 updates because it has done an "apt-get update" itself [05:36] but still doesn find [05:36] no [05:36] the info, data [05:36] twb: ahhh [05:36] okay [05:36] roxy__: Eh? [05:36] chrislabeard: see /etc/cron.daily/apt [05:36] twb: yeah well it says 19 packages can be updated [05:36] 38 updates are security updates [05:37] sorry i missunderstand your question...yes, i am checking the damage partition [05:38] Okay, is it still running the repair on it and not just dying immediately? [05:41] chrislabeard: If you want to actually upgrade your machine to include those updated packages, do sudo apt-get upgrade [05:42] jmarsden: is it bad to upgrade all those packages [05:42] yes still is lookinf for the superblock but doesn't find [05:42] unable to verify superblock, continuing... [05:42] chrislabeard: Define bad :) Usually it is 100% fine to upgrade them, unless you set your machine to look in strange nonstandard places for updates. [05:43] k cool [05:43] * ball worries about updates too [05:43] roxy__: Okay, tell me about how this came to be, and how you created this xfs drive. [05:44] ball: In the last year, have you had an update from an official Ubuntu repository break anything important? Or is your worry mostly unfounded? [05:45] i didn was ceated time ago for somebody else...one of the disk was corrupt and i take off but no was in raid with this one [05:46] jmarsden: I've had so many things break it's difficult to know what causes what. If I had more experience with Ubuntu I'd be in a better position to judge. [05:46] roxy__: Lets try this again, in English please. [05:46] So, It /was/ in a raid, and now is not, and it was corrupted? [05:46] istr an update to Jaunty that went badly, but it worked better when I installed from a CD [05:47] ball: Hmm, OK. I only worry about updates from strange sources like PPAs or unofficial other repos... can't think of anything I have broken with a 'normal' update... [05:47] * ball nods [05:48] I've found a few Ubuntu bugs, but I don't think any of them were in the Server variant [05:49] I've probably *created* a one or two Ubuntu bugs (minor packaging bugs) and then fixed them :) [05:49] roxy__: I don't want to wait 5+ minutes for each answer to each of my questions I ask you, if that's how it's going to be, I'll be bored and non-responsive. [05:50] im so sorry .. [05:50] i just some user come here for a problem [05:51] still dont get superblock [05:52] i have a LVM with 3 disk on raid and 1 more individual, the disk alone was corrupted [05:53] roxy__: Okay. So, what drive is this XFS filesystem on? [05:53] roxy__: that's what they call "Sod's Law" [05:53] all of them [05:53] roxy__: So, it's part of a raid array? [05:54] yes [05:54] * ball is confused [05:54] What type? [05:54] "1 more individual" != RAID, surely? [05:55] raid 1 [05:55] roxy__: you had a three disk RAID-1 array? [05:55] 2 disk in raid 1 [05:55] sorry 3 disk [05:55] So a mirror raid? I see. And you mentioned LVM as well? [05:55] yes [05:55] Ah, two mirrored disks and a third on its own (as a standby?) [05:56] and one lv is corrupt [05:56] thhe format xfs was done for each lv [05:56] WHat type of LVM is on the partition? [05:57] lvm2 [05:57] Linear or Striped? === chrislabeard is now known as chrisLAbeard [05:57] i am not sure, how can know that? [06:03] Well, First of all. [06:03] vgdisplay -v shows your volumes, correct? [06:05] that show me the VG and the LVs, but I just have one LV with problem and the rest are ok [06:06] Okay. Fine, but does it show the volume that's not okay? [06:06] everything is in the array od disk with raid 1 [06:07] no [06:07] Okay then, there's your problem! [06:07] show me is ok [06:08] The LVM for it isn't okay, hence why the XFS has no superblock, cause lvm hasn't activated it. [06:09] I installed mediawiki on ubuntu using aptitude, but when I open http:/localhost/mediawiki I get a download...intially I thught php was't parsing, but I just tested with phpinfo() and it worked [06:09] I've also added the alias mediawiki in /etc/mediawiki1.10/apache.conf [06:09] so? what i can do? [06:10] Wht can be the problem? wht are the possible problems? [06:12] roxy__: First of all, vgchange -a y to activate the volumes, all of them. [06:14] i did [06:14] Now, does lvdisplay -v show your faulty volume? [06:16] still the problem [06:17] Not showing up? [06:17] no [06:18] Okay. What's the /dev/* for the drive with issues? [06:18] all are active but i can read one of the lv [06:19] dev/internat/homes where internal is the VG and homes the LV [06:19] No [06:19] The ACTUAL device for the hard disk itself, not the mapped name from LVM. [06:20] Like /dev/sda [06:20] This is probly a really stupid question ... if i am using everydns name servers as slaves do i need to add a slave record to bind [06:21] chrisLAbeard: No, That's for actual slave dns servers. [06:22] Psi-Jack__: alright ... in my masterzone longhornpc.com i have them listed there as NS [06:22] and told that record to allow transfers to the name servers Ip address [06:24] roxy__: Here.. Use this website. I apologize, but your responses are just too slow for me to not be falling asleep for. http://www.linuxjournal.com/article/8874 [06:25] You need to recover the raid, then lvm, THEN you can get to the XFS properly. [06:25] that is teh lv [06:26] is /dev/md1 [06:27] the raid is working is just this lv that have the problem [06:29] Yeah, and yet, I ASKED for the actual device node, not the md#, not the lv name, the DEVICE node. [06:29] So, next time you ask for help, and are asked specific questions, answer them. I'm done for now. [06:29] I need sleep. [06:29] Use the website I referred you to. [06:34] Yes i can see that...thanks [06:36] 8.04 appears to have apparmour turned on and in "enforce" mode by default. Is that still the case in current releases? [06:45] hi, i'm trying to set up mod_proxy for a web site. [06:46] http://cardinaleducation.thirdreplicator.com/ [06:46] on port 11000 [06:48] http://pastie.org/590782 [06:48] that's my apache conf file [06:58] twb: think so.. it only enforces for apps that have profiles afaik [06:58] #Apparmor on OFTC is helping me [06:58] see https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/AppArmorProfiles [07:28] where does postfix run chrooted? [07:29] /var/run/postfix doesn't seem to be it [07:33] LiraNuna: /var/spool/postfix I think... but it doesn't chroot by default, at least as far as I can tell. Read the /etc/init.d/postfix init script for the details. [07:34] jmarsden, thanks that's exactly it [07:34] and it does chroot for me ... [07:35] and I don't remember configuring it not to [07:35] OK. i read the sxcript and it seems to check for the chroot field in /etc/postfix/master.cf, and that is not set to y in my (very default) config here. [07:35] thanks for the path, that's exactly it [07:37] OK... and I misread the script, - means yes in that colum of the config file, so it does chroot by default :) [07:37]